Use git-crypt and some bash to manage systems and environment configuration files https://www.gnupg.org/gph/en/manual/x56.html