xe4l

Several friends of mine and I were known to leave our laptops running Gentoo in the freezer with the power cords in for really large software builds many many years ago.

This acquisition likely had a bit to do with the access sunrise has to so many non-microsoft calendar accounts.

I evaluated git-crypt for a previous venture and ended up using gitolite hooks instead. The setup I built stored users PGP Key ID, associated the Key ID with their gitolite account and used hooks to encrypt content for users with permission to the repo. A system account was created with a corresponding keypair to handle user add/mod/del by decrypting and re-encrypting content for the appropriate users in a given repo.

The beauty of this setup was, it was all over SSH and all keys used to access, sign and encrypt content (included the system user) were stored on smart cards.

If security is important, it's wise to take steps that align with or exceed your risk appetite.