Using 1Password to manage ssh config file ?

[Jo-Panic]

I've been using Chezmoi for a little while now. I'd like to integrate the contents of ~/.ssh into it.
I'm wondering what the best option is for doing so.

For privacy reasons, I want to protect the contents of the config file.

After reading the documentation and discussions here, I thought I could store the config file in 1Password and use {{- onepasswordDocument "$UUID" -}} in a config.tmpl file.
Does this solution seem relevant to you? If so, my question concerns managing changes to my config file. I think I need to manually update the document in 1Password and then run chezmoi apply ?
Sorry if this question seems trivial.
Thank you in advance for your help.

[halostatue]

I have a very complex SSH configuration (I use aliases and specific keys for SSH authentication to GitHub as I have both work and personal accounts): https://github.com/halostatue/dotfiles/blob/main/home/private_dot_ssh/private_config.tmpl

I wouldn't want to keep the entire .ssh/config in 1Password to use as you've said, as that makes editing and updating it for changes harder:

1. Edit the file.
2. Upload to 1Password.
3. Apply.

With a more structured approach — which is more work up front — you can make trivial changes in chezmoi's source directory and then include the private changes at the end.

[Jo-Panic]

Thanks for your response and suggestion. I had considered that briefly, but it didn't quite click into place 🙂

[twpayne]

I use the same technique as @halostatue. Most of my ssh config, and I store the bits I want to keep private in my password manager:

https://github.com/twpayne/dotfiles/blob/55002ad10dc72429643dcd2e853a0c1b5b7eda58/home/dot_ssh/config.tmpl

[Jo-Panic]

Yes, I'd already checked out your repository 😉. Since the config file in my environment rarely changes, I thought, "why not just store the whole thing in a 1Password document?" But maybe that's too simplistic and lacks finesse. I'll take a cue from both of your approaches instead. Thanks! And thanks for this tool.