This involved setting up the pass password manager to manage secrets, which in turn required setting up gpg, which needed syncthing to sync keys.