Can you explain what you find complicated about sops? I've used it with ease for the last two years, both personally and professionally.

I dunno, it seems mostly simple to me.

You have a .sops.yaml with some Age public keys, and then you run “sops secrets.yml” to create an encrypted file.