Add sensitive files

diff --git a/.gitignore b/.gitignore
index c0dfd83aa31e51979c0cd351135d8a34c977bfc1..62688643754560e101c696d0ce5e2af286602cd4 100644 (file)
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@ tmuxp/*
 !tmuxp/main.yml
 config/nvim/lua/init_local.lua
 config/karabiner/automatic_backups/*
+config/aerc/accounts.conf

diff --git a/README.md b/README.md
index e6f079653c756dee4200f0559d19055f290d143b..3735424790c74ee9a3011248ed79172f63f44da0 100644 (file)
--- a/README.md
+++ b/README.md
@@ -52,9 +52,19 @@ In order to specify the environment in the prompt, create a function
 called `env_info_provider` and echo your environment details (eg.
 `dev`, `staging`, `production`)
 
-## CoC & Neovim
+## LSP & Neovim
 
-Additional scripts are providing for updating extensions in neovim.
+For the LSP to work, some external dependencies might be needed. As some of 
+these depend on what version asdf has loaded, or specific projects, they're
+not included by default.
 
-After setting up nvim and installing plugins, you can run
-`./add-coc-vim-extensions` to automatically add the extensions.
+See [the nvim-lspconfig docs][lsp] for more info.
+[lsp]: https://github.com/neovim/nvim-lspconfig/blob/master/doc/server_configurations.md
+
+## Private Files
+
+There are some potentially sensitive files included. They're PGP encrypted. If
+you need them you can run `./sensitive`. To update them if they change,
+run `./sensitive update` instead.
+
+For passwords, make sure you have setup the `pass` store.

diff --git a/sensitive b/sensitive
new file mode 100755 (executable)
index 0000000..2c5c660
--- /dev/null
+++ b/sensitive
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+sensitive_files=("config/aerc/accounts.conf")
+
+if [[ "$1" == "update" ]]; then
+  echo "Updating"
+  for sensitive_file in $sensitive_files; do
+    gpg --output $sensitive_file.gpg --encrypt --recipient ruben@unlimited.pizza $sensitive_file
+  done
+else
+  echo "Decrypting"
+  for sensitive_file in $sensitive_files; do
+    gpg --output $sensitive_file --decrypt $sensitive_file.gpg
+  done
+fi