teller as password manager

[dvgitit]

Would it make sense, to add "teller" as a password manager? In that case chezmoi would gain more flexibility in volatile environments, where not all password managers are available. Probably "teller" is a special case, because it dispatches as well to other secret managers.

[halostatue]

I don't know what teller is, so I can't say. It might be something that can be resolved through the secret template function.

[twpayne]

I think the OP is referring to https://github.com/tellerops/teller.

Indeed, it looks like the secret template function would work here. However, teller has very little documentation AFAICT and there doesn't seem to be a mention of a way to return a single secret.

[halostatue]

It looks like teller is sort of cloud-connected .env reader based on a very quick read of the README.

You would use it like this:

$ teller run --reset --shell -- chezmoi apply

Inside of your templates, you would use env("SECRET_VARIABLE_NAME") instead of calling something like secret. You could probably do something similar with 1Password using op run -- chezmoi apply.