Setup secrets with git-crypt

.gitattributes

@@ -0,0 +1 @@
+secrets.json filter=git-crypt diff=git-crypt

flake.nix

@@ -5,17 +5,20 @@
     nixpkgs.url = "github:nixos/nixpkgs/nixos-24.05";
   };
 
-  outputs = { nixpkgs, ... }@inputs: {
+  outputs = { nixpkgs, ... }@inputs:
+  let
+    secrets = builtins.fromJSON (builtins.readFile ./secrets.json);
+  in {
     nixosConfigurations = {
       marauder = nixpkgs.lib.nixosSystem {
         system = "x86_64-linux";
         modules = [ ./marauder ];
-        specialArgs = { inherit inputs; };
+        specialArgs = { inherit inputs secrets; };
       };
       monolith = nixpkgs.lib.nixosSystem {
         system = "x86_64-linux";
         modules = [ ./monolith ];
-        specialArgs = { inherit inputs; };
+        specialArgs = { inherit inputs secrets; };
       };
     };
   };