GnuPG
gnupgA free implementation of the OpenPGP standard: signing, encryption and key management.
A free implementation of the OpenPGP standard: signing, encryption and key management.
Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.
pinentry-programdefault-cache-ttl 600max-cache-ttl 7200enable-ssh-supportpinentry-program /opt/homebrew/bin/pinentry-macmachine-localOtty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.
Not a subtraction from the paths above: this is everything else GnuPG writes in your home directory that is state, not configuration. It keeps a whole-home manager like chezmoi from sweeping those up, and it still holds if the synced paths are ever widened.
pinentry-programdefault-cache-ttl 600max-cache-ttl 7200enable-ssh-supportpinentry-program /opt/homebrew/bin/pinentry-macmachine-localEach machine keeps its own copy of these.
Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.
Opens otty://sync/add/gnupg. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.
Every one of these keeps all credential files out. None of them splits pinentry-program for you — that part is Otty’s own sync, or a template you write by hand.