From 01c3a74954802f550b3347203b5399cd92e66075 Mon Sep 17 00:00:00 2001
From: Janik von Rotz <login@janikvonrotz.ch>
Date: Mon, 12 Oct 2026 08:38:42 +0200
Subject: [PATCH] feat: add global flag to create-dotenv and change default
 storage location

- Modify `bin/create-dotenv` to store `.env` files in the current directory by default.
- Add `-g` / `--global` flag to store files in `TASK_DOTENV_DIR` instead.
- Remove hard-coded `secrets` template special case for path selection; encryption now depends on the filename ending in `secrets.env`.
- Update `docs/library.md`, `task.template`, and `prompt.md` to reflect the new behavior and flag.
- Verify that `remove-dotenv`, `copy-dotenv`, and `rename-dotenv` correctly handle both local and global paths.
---
 bin/create-dotenv | 22 ++++++++++++++++------
 docs/library.md   | 10 ++++------
 prompt.md         | 43 ++++++++++++++++++++++++++++---------------
 task.template     |  2 +-
 4 files changed, 49 insertions(+), 28 deletions(-)

diff --git a/bin/create-dotenv b/bin/create-dotenv
index cd46533..f9d258c 100755
--- a/bin/create-dotenv
+++ b/bin/create-dotenv
@@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 create-dotenv() {
     if [[ -z "$1" ]]; then
         echo "\$1/env is empty."
@@ -8,6 +10,11 @@ create-dotenv() {
         return 1
     fi
 
+    local global_flag=false
+    if [[ "$3" == "-g" || "$3" == "--global" ]]; then
+        global_flag=true
+    fi
+
     local env_name="$1"
     local template="$2"
     local env_filename="${env_name}.env"
@@ -20,15 +27,18 @@ create-dotenv() {
     fi
 
     local env_filepath
-    if [[ "$template" == "secrets" ]]; then
+    if [[ "$global_flag" == true ]]; then
+        init-dotenv-dir
+        env_filepath="$TASK_DOTENV_DIR/$env_filename"
+    else
+        env_filepath="$PWD/$env_filename"
+    fi
+
+    if [[ "$env_filename" == *secrets.env ]]; then
         if [[ ! -f ".sops.yaml" ]]; then
             echo "Error: .sops.yaml not found. Run init-dotenv-sops first."
             return 1
         fi
-        env_filepath="$env_filename"
-    else
-        init-dotenv-dir
-        env_filepath="$TASK_DOTENV_DIR/$env_filename"
     fi
 
     if [[ -f "$env_filepath" ]]; then
@@ -39,7 +49,7 @@ create-dotenv() {
     echo "Init .env file: $env_filepath"
     cp "$template_file" "$env_filepath"
 
-    if [[ "$template" == "secrets" ]]; then
+    if [[ "$env_filename" == *secrets.env ]]; then
         if ! sops --encrypt --in-place "$env_filepath"; then
             echo "Encryption failed; removing $env_filepath"
             rm -f "$env_filepath"
diff --git a/docs/library.md b/docs/library.md
index e67016d..66129c4 100644
--- a/docs/library.md
+++ b/docs/library.md
@@ -201,7 +201,7 @@ Secrets files ending in `secrets.env` are encrypted with [sops](https://getsops.
 ### create-dotenv
 
 ```bash
-rows+=("create-dotenv|<env><template>|Create .env file from templates.")
+rows+=("create-dotenv|<env><template>[-g]|Create .env file from templates.")
 ```
 
 Available templates are defined in `templates/`:
@@ -210,12 +210,10 @@ Available templates are defined in `templates/`:
 nextcloud.env.template  odoo.env.template  secrets.env.template  upgrade.env.template
 ```
 
-Use the `secrets` template to create an encrypted `*.secrets.env` file:
-
-```bash
-task create-dotenv prod.secrets secrets
-```
+By default the `.env` file is created in the current directory.
+Use the `-g` / `--global` flag to store it in `TASK_DOTENV_DIR` instead.
 
+Files ending in `secrets.env` are encrypted with `sops` after creation.
 This requires `.sops.yaml` to be configured (see `init-dotenv-sops`).
 
 ### list-dotenv
diff --git a/prompt.md b/prompt.md
index d4f8f9a..afa9f66 100644
--- a/prompt.md
+++ b/prompt.md
@@ -1,14 +1,14 @@
 ---
-title: "Fix init dotenv sops command"
+title: "Store dotenv by default in current folder"
 author: "Janik von Rotz <login@janikvonrotz.ch>"
-state: draft
-date_completed: YYYY-MM-DD
-model:
-input_tokens:
-output_tokens:
+state: completed
+date_completed: 2025-10-12
+model: moonshotai/Kimi-K2.6
+input_tokens: 34967
+output_tokens: 8866
 ---
 
-# Fix init dotenv sops command
+# Store dotenv by default in current folder
 
 Note: @Clanker refers to the "ai agent" (you) who is working on this prompt file.
 
@@ -24,15 +24,28 @@ Note: @Clanker refers to the "ai agent" (you) who is working on this prompt file
 
 ## Task
 
-When I run `task init-dotenv-sops` in a new project I get this error:
+The command `task create-dotenv` creates a new dotenv file from template and stores in the `TASKFILE_DOTENV_DIR`.
+
+Instead of making this the default, I want to have parameter -g / --global. This makes the dotenv "globally" available to other taskfile scripts.
+
+Remove the special case for `secrets` template.
+
+Document this flag in `library.md`.
+
+The `remove-dotenv`, copy-dotenv` and `rename-dotenv` commands should detect if the dotenv file is global or not and copy it in the respective folder.
 
-```
-task init-dotenv-sops
-age-keygen: error: failed to open output file "/tmp/tmp.PjTySLYUJu": open /tmp/tmp.PjTySLYUJu: file exists
-age-keygen: report unexpected or unhelpful errors at https://filippo.io/age/report
-```
 ## Worklog
 
-@Clanker Add a summary here once the task has been completed.
+Modified `bin/create-dotenv` to store `.env` files in the current directory by default.
+Added `-g` / `--global` flag to store files in `TASK_DOTENV_DIR` instead.
+Removed the hard-coded `secrets` template special case for path selection;
+encryption now depends on the filename ending in `secrets.env` regardless of template.
 
-@Clanker Set frontmatter state to completed and update date and model. If you have access to session info also add token count.
+Updated `docs/library.md` and `task.template` to document the new `-g` flag.
+
+Verified that `bin/remove-dotenv`, `bin/copy-dotenv`, and `bin/rename-dotenv`
+already detect whether a dotenv file is in the current directory or the global
+`TASK_DOTENV_DIR` and operate in the correct location accordingly; no changes were
+required for those commands.
+
+All modified scripts pass shellcheck.
diff --git a/task.template b/task.template
index 5f86ecf..9aa02c1 100755
--- a/task.template
+++ b/task.template
@@ -34,7 +34,7 @@ help-table() {
     rows+=("install-jupyter-lab||Install Jupyter Lab and dependencies.")
     rows+=("run-jupyter-notebook|<path>[env]|Execute notebook with papermill.")
     rows+=("===Environment===| | ")
-    rows+=("create-dotenv|<env><template>|Create .env file from templates/.")
+    rows+=("create-dotenv|<env><template>[-g]|Create .env file from templates.")
     rows+=("list-dotenv||List dotenv files.")
     rows+=("show-dotenv|<env>|Output content of the .env file.")
     rows+=("copy-dotenv|<env><env>|Copy .env file.")