From 6ec72b77c7a12529e83a5a00d188216473c8b8ff Mon Sep 17 00:00:00 2001
From: Christian Colglazier <christian@cacolglazier.com>
Date: Thu, 15 Oct 2026 20:39:17 -0400
Subject: [PATCH] feat(chezmoi): configure encrypted ssh secrets

---
 home/.chezmoi.toml.tmpl                       |  4 ++++
 .../encrypted_private_config.private.asc      | 19 +++++++++++++++++++
 home/private_dot_ssh/private_config           |  2 ++
 3 files changed, 25 insertions(+)
 create mode 100644 home/.chezmoi.toml.tmpl
 create mode 100644 home/private_dot_ssh/encrypted_private_config.private.asc
 create mode 100644 home/private_dot_ssh/private_config

diff --git a/home/.chezmoi.toml.tmpl b/home/.chezmoi.toml.tmpl
new file mode 100644
index 0000000..ec4cd88
--- /dev/null
+++ b/home/.chezmoi.toml.tmpl
@@ -0,0 +1,4 @@
+encryption = "gpg"
+
+[gpg]
+    recipient = "02C20A131365D6EF3CC4A023B9BDD0975CF5592D"
diff --git a/home/private_dot_ssh/encrypted_private_config.private.asc b/home/private_dot_ssh/encrypted_private_config.private.asc
new file mode 100644
index 0000000..87f1689
--- /dev/null
+++ b/home/private_dot_ssh/encrypted_private_config.private.asc
@@ -0,0 +1,19 @@
+-----BEGIN PGP MESSAGE-----
+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+=BfV6
+-----END PGP MESSAGE-----
diff --git a/home/private_dot_ssh/private_config b/home/private_dot_ssh/private_config
new file mode 100644
index 0000000..3618cfb
--- /dev/null
+++ b/home/private_dot_ssh/private_config
@@ -0,0 +1,2 @@
+# Host entries are managed in a separately encrypted file.
+Include ~/.ssh/config.private