Local GPG key pair + https://www.passwordstore.org/ synced peer-to-peer between devices via https://syncthing.net/
So the key is always local but the password database is being synced between devices.
pass on its own is great already (it's basically just GPG encrypted text files with a good CLI frontend) but I make it even greater by using a slightly modified "passmenu" script which utilizes wofi (rofi for wayland) in dmenu mode to show a very fast popup of all your sites you have passwords stored for and by selecting it / pressing enter the pw gets copied into the clipboard.