I've been setting up sops for secrets, I have some config files with multiple secrets in each of them inside my .config folder, that I want encrypted when I git commit (my age key is stored outside this folder). I want programs that depend on those configs to read the secrets though.

What would be the best solution? I did a bunch of looking up and didn't find specific answers, so I guess I would just make a git pre-commit hook to encrypt the files, commit, then decrypt them afterwards. Is there a command or way to encrypt decrypt all files specified in .sops.yaml?