Wouldn’t it make sense for Forgejo to encrypt private repositories so users could safely include sensitive data like logs, histories, or even login configs?
For example, I currently exclude things like my Zsh history in .gitignore
in my dotfiles repo. If private repos were encrypted, I could just commit everything and sync my full setup between machines without relying on Syncthing or other tools.
Is there any plan or reason why Forgejo doesn’t encrypt private repos this way?
I use SOPS for this.
https://devops.datenkollektiv.de/using-sops-with-age-and-git-like-a-pro.html
Set filters in git certain files are added encrypted.
You can also do multi key set ups if you have a shared secret (like a lab space creds) or want to share some secrets with ci/cd tools