Use Git-secret to encrypt secrets and store them in the repository
pascallandau.com