[Encrypted expansion] A working Espanso trigger that securely decrypts a string (such as an address) using a password prompt, and expands it into your target app. First encrypt your address (once only) and store it securely: `echo "123 Fake Street, Faketown, FK1 2AB" | gpg -c -o ~/.secrets/homeaddr.gpg` ensuring the target directory exists first…

decrypt.yml

# First encrypt your address (once only) and store it securely: 
# `echo "123 Fake Street, Faketown, FK1 2AB" | gpg -c -o ~/.secrets/homeaddr.gpg` 
# ensuring the target directory exists first.

matches:
  - trigger: ":homeaddr"
    replace: "{{address}}"
    vars:
      - name: address
        type: script
        params:
          args:
            - bash
            - -c
            - |
              source ~/.zshrc 2>/dev/null || true
              PASSWORD="$(zenity --password --title='Decrypt Address')"
              [ -z "$PASSWORD" ] && exit 1
              echo "$PASSWORD" | gpg --batch --yes --passphrase-fd 0 --decrypt ~/.secrets/homeaddr.gpg 2>/dev/null