Good tutorial series: https://www.youtube.com/watch?v=HnmpYp1_aKo Used part 3 to externalize my own SOPS config.