The Enough infrastructure repository assumes all the information to maintain the infrastructure is in the repository. This is inconvenient because the production repository needs to be a fork that needs rebasing with the secrets.
It would be more convenient to move these secrets into a
/etc/enough directory instead, so the same code base could be used in various contexts.
It would even be better to store them in a domain subdirectory like
~/.enough/enough.community so one user can manage multiple Enough instances. For the purpose of migrating from one to another, for instance.