configure secrets with 1password

[shmileee]

add an interactive script to:

• install using brew + signin (op account add --address appsilon.1password.com --email oleksandr@appsilon.com)
• eval $(op signin)
• retrieve ssh keys (e.g. internal.appsilon.ai -- op document get jaswraeakdu3nhkqjehkvtwf6y)
• integrate with chezmoi:
  • https://github.com/yenbekbay/dotfiles/blob/2d19e95fa2fb5091c8de9c5a3467d7b77628a932/private_dot_ssh/id_rsa.pub.tmpl
  • https://www.chezmoi.io/reference/templates/functions/onepasswordDocument/

Open Questions

• how to exclude this from running during chezmoi update ?

[shmileee]

1password cli does not support retrieving files attached to items, hence so far ssh keys can be fetched if they're stored as documents, which makes it a bit of a pain to manage separately

[jimbrig]

You should look into keeper I love it