Comment by _kblcuk_

+100. I also dig fnox (encrypted-secrets-in-git) and hk (pre-hooks manager that is actually fast and stays out of the way) by the same author, pretty much default for any project I start nowadays.

Though I also use nix to manage my machines :-D