I am also using this setup powered by chezmoi. It has brilliant secrets support and powerful templating allowing cross-platform setups. I do get lost in its state sometimes when updating `run_once_*` scripts and trying to make sure they still run. Another friction point is external tools installed via .chezmoiexternal.toml from GitHub.