Setup git-crypt

git-crypt.md

install

sudo apt install git-crypt

init your git repo

cd <root of git repo>
git-crypt init

key will be generated in <root of git repo>/.git/git-crypt/keys

copy key out of repo and rename

cp <root of git repo>/.git/git-crypt/keys/default <path to store key>/<key name>

base64 encode key (to store/share)

cd <path to store key>
cat <key name> | base64 > <key name>.base64

base64 decode key (to store/share)

cd <path to store key>
cat <key name>.base64 | base64 --decode > <key name>

unlock the git repo with the key

git-crypt unlock <path to store key>/<key name>

setup .gitattributes file

# Files that are going to be encrypted
*secrets* filter=git-crypt diff=git-crypt

# Making sure that .gitattributes is never encrypted. DON'T TOUCH THAT LINE AND ONE BELOW
.gitattributes !filter !dif