Manage dodot template sources for host-specific dotfiles with secret injection and encryption.
npx skills add https://github.com/arthur-debert/dodot --skill dodot-templates
Please help me install this Agent Skill. Skill: dodot-templates Source: https://github.com/arthur-debert/dodot/tree/main/skills/dodot-templates Command: npx skills add https://github.com/arthur-debert/dodot --skill dodot-templates
This Skill helps you author, render, and keep in sync dodot-managed dotfiles that vary by host, operating system, or environment, while also handling secrets and encrypted files without accidentally committing plaintext to git.
.tmpl or .template files that render with Jinja2-style variables at deploy time..age and .gpg files as encrypted-at-rest sources that decrypt into the datastore on deploy..gitconfig template that changes by machine, injects a token securely, and can be reconciled if they edited the deployed file by hand.Ask the assistant to update the dodot template source for a pack, render it with the right host-specific values, and verify the deployed output.
High-intent search queries and answers about installing and using this skill.
To inject secrets into dotfile templates safely, you use Jinja2-style variables that pull single-line values from providers like pass, 1Password, Bitwarden, or SOPS at deploy time. This ensures plaintext secrets never get committed to git.
You manage host-specific dotfiles by authoring Jinja2-based template files that render with the correct variables for each machine at deploy time. This allows one source file to conditionally deploy different configurations across operating systems.
Yes, you can manage whole-file encrypted assets by keeping age and gpg files as encrypted-at-rest sources. These files decrypt directly into the datastore upon deployment, keeping your repository secure while providing live plaintext configurations.
The best way to recover direct edits is through a reverse-sync process that reconciles drifted live files back into the source template. This captures manual changes made to deployed configurations and updates the original git-tracked template.
Yes, this template rendering approach works with macOS Keychain and secret service providers to substitute single-line secrets into rendered configurations. It supports multiple backend providers to retrieve values during the Jinja2 rendering process.
TheBushidoCollectiveConfigure Fnox providers for encryption and secret storage across environments.
qsdrqsModify flake-based NixOS and Home Manager configurations in ~/dotfiles.
RuanBuitendag42Encrypt and manage secrets in dotfiles with git-crypt, SOPS, age, and Bitwarden CLI.
taloncjonesCatalog environment variables, flags, and configuration options in the dotfiles repository.