This looks pretty nice but without secret management it's not really that useful. Without that you can't share your configs or have your config in your dotfiles-repository.

That makes it really not that portable.