run_once_before_decrypt-private-key.sh.tmpl

#!/bin/sh

if [ ! -f "/home/pranav/key.txt" ]; then
    age --decrypt --output "/home/pranav/key.txt" "{{ .chezmoi.sourceDir }}/key.txt.age"
    chmod 600 "/home/pranav/key.txt"
fi