@thufie yeah, it's nice that it's so seamlessly integrated, does everything automatically on push/pull

and before that I just had those same secrets in a .gitignore, so this is definitely nicer for syncing them across hosts