# chezmoi configuration for the PUBLIC tier.
# Rendered into the config file named by `chezmoi init` (see README.md).
#
# There is deliberately no `encryption` key and no [age] section. The previous
# repo carried both, pointing at ~/.config/chezmoi/key.txt and an age recipient.
# That layer is gone: the one secret in the system is fetched over an
# authenticated HTTPS connection at install time, so there is nothing left on
# disk for a key to unlock. On one of the three machines the identity file was
# already 0 bytes, mode 664 — broken, silently, with nothing surfacing it.
#
# There are deliberately no [data] prompts either. This tier must clone and
# apply on a throwaway VM with nobody at the keyboard, so it may not ask a
# question it cannot answer. Your name, email, signing key and Gitea hosts are
# identity, not configuration; they are prompted once by the PRIVATE tier and
# land in ~/.config/git/config.local and ~/.config/zsh/local.zsh, which this
# tier includes if present and ignores if not.
#
# If this file ever needs a real key, that is a signal worth pausing on: the
# public tier's whole value is that it is the same on every machine.