default: generate-key: mkdir -p ~/.config/sops/age age-keygen -o ~/.config/sops/age/keys.txt cat ~/.config/sops/age/keys.txt encrypt: sops --encrypt --in-place secrets.yaml decrypt: sops --decrypt --in-place secrets.yaml