I didn't know about sops, thanks for sharing!
Encrypting YAML files' values may be handy for another project - will take note of it.