transcrypt VS vim-gnupg

I was looking into secret storage in git recently and rather liked Transcrypt: https://github.com/elasticdog/transcrypt

On the actual system itself (you likely know this as you'd mentioned reading other posts, but) I have Neovim compiled on my phone (directly through Termux), notes pushed up to Github using transcrypt for backups and live-synced between several devices using syncthing (which is how I get notifications on my phone, using a Raspberry Pi and systemd services to implement against orgmode.nvim's notification API).

I use nvim-orgmode on my computer through Neovim, and keep that pushed up to Github (encrypted using transcrypt) but also have a Syncthing server setup on a Raspberry Pi.

Also if you want the notes to be encrypted and you push them to Github, try transcrypt. They won't be encrypted on disk, but will be when you push them.

Start writing all of your work down. I personally put almost every line of code I ever write into github. I have a "misc" project for random one-off things, but I always commit it to a repo. I started doing this in 2013/2014 and its been incredibly valuable to go back and refer to old work (its also fun to see how far you've come). This gets interesting when you start needing to write down information that shouldn't be public (e.g. api keys). You're into crypto, so you can probably see the fun in this. I've use a program called transcrypt to store encrypted files in my git repos. Be careful with transcrypt though, if you make a mistake you can accidentally publish secrets in plain text, and it does open you up to brute force attacks.

I just use https://github.com/jamessan/vim-gnupg and it works for any file from vim wiki to k8s secrets.

There is also the vim-gnupg plugin for this. I haven't used it in a while but last time I did it was working well.

Have you considered using the jamessan's vim-gnupg plugin¹? It handles all of the grunt work for you, and has been exposed to people for a long time(packaged in Debian and such).

For example, I spotted you don't disable undofile, which is fine if you're not using it. However, you'd have to remember to think it through if you were to enable elsewhere for some other reason².

¹ https://github.com/jamessan/vim-gnupg

² Best one being that it is awesome :)