vault-credentials

A workflow for moving plaintext credentials off disk and into 1Password, with chezmoi templates resolving them at apply time via onepasswordRead (for home dotfiles) or op inject / op run (for project-local files). Account and vault names are placeholders below — fill in your own in the Setup section.

Setup

Three identifiers determine where this skill puts secrets. Pick them once, substitute throughout, or set them as env vars when invoking commands.

Placeholder	What it is	How to find
`<acct>`	Your 1Password account shorthand (e.g. `mycompany`, `my`)	`op account list` — shorthand is the leftmost column or the part before `.1password.com`
`<vault>`	The vault to store credentials in	`op vault list --account <acct>`
`<dotfiles-repo>`	(Optional) Your chezmoi source repo, if using Paths 1–2	`chezmoi git -- remote -v`, or the URL passed to `chezmoi init`

A second optional account (e.g. <personal-acct>, vault Private) is useful if you separate work and personal credentials.