chezmoi Workflow: Edit, Diff, Apply
chezmoi manages dotfiles from a single source directory, usually a git repository. The same source can be applied on any machine: it renders templates, decrypts secrets, runs scripts, and writes the real files under $HOME. For day-to-day work, the rule is simple: edit the source, not the destination.