How to make sure certain config like ssh keys restored first and then other action occurs?

[dhruvinsh]

I have ssh keys added with age encryption and added as private_dot_ssh with encryption + template.

Now what happen is, on a brand new system .gitconfig get restore first and not .ssh keys. and between these two access there are lot of .chezmoexternal cloning occurs that needs my ssh keys.

I am wondering how can I make this work?

[twpayne]

Options include:

• Use a run_once_before_ script to install your SSH keys.
• First run chezmoi apply --exclude=externals to skip externals but install your SSH keys, then run chezmoi apply to install everything else.

[dhruvinsh]

Thank you. Moving ssh keys to script to the script would be bit hassle as I am using linux, windows and Mac (along with encrypted template). but chezmoi apply --exclude=externals is perfect an I totally missed that.