You can also configure pinentry-curses and have this workflow without x11

I recently moved from FreshRSS to Miniflux and the matrix integration is a godsend. Having miniflux automatically send everything to element instead of having a dedicated RSS client is great

Hashicorp Vault + Vault Config Operator + external-secrets. I have a simple chart that can add credentials access rules to different apps which mostly gets used in argo with their multichart functionality. A simple bash script to create the vault policies, which use the k8s back end to allow auth.

This with the matrix integration works great for me.