default:

generate-key:
    mkdir -p ~/.config/sops/age
    age-keygen -o ~/.config/sops/age/keys.txt
    cat ~/.config/sops/age/keys.txt

# use `sops edit` instead
# encrypt:
#     sops --encrypt --in-place secrets.yaml

# decrypt:
#     sops --decrypt --in-place secrets.yaml