Setting --encrypt as a default option for add

[breisfeld]

Hi, Is there a way to set the default add to encrypt such that the --encrypt option is not needed?
I didn't see a way to set this in the config file, but I may have missed it.

Thanks!

[twpayne]

There's currently no way to do this. Do you really want to encrypt every file managed by chezmoi?

As a work-around, you can create a shell alias, something like:

alias chezmoi-add="chezmoi add --encrypt"

and then use chezmoi-add instead of chezmoi add.

Alternatively, you could define a plugin:

#!/bin/bash
# put this in a file called chezmoi-adde somewhere in your path
exec chezmoi add --encrypt "$*"

and then use chezmoi adde instead of chezmoi add.

[breisfeld]

Thank you for the great advice!

I wanted encryption as the default, since I anticipate forgetting that I have sensitive information included in a file I wish to add.

[twpayne]

OK. #3470 adds a configuration variable so you can set add.encrypt in your configuration file instead of specifying --encrypt.

[breisfeld]

Wow! You are awesome!

[twpayne]

#3472 adds support for scanning any files you add for secrets.