27 files changed, 4 insertions(+), 3 deletions(-)

A .gitattributes
M .gitignore
M modules/programs/default.nix
D secrets.tar.enc
A secrets/coturn-static-auth-secret
A secrets/isso-admin-password
A secrets/isso-comments-smtp-password
A secrets/longview-api-key
A secrets/matrix-registration-shared-secret
A secrets/matrix-registration-shared-secret-nevarro
A secrets/pr-tracker-github-token
A secrets/quotesfilebot-password
A secrets/restic-environment-variables
A secrets/restic-password
A secrets/syncthing-admin-password
A secrets/wireguard-coruscant-presharedkey
A secrets/wireguard-ipad-presharedkey
A secrets/wireguard-jedha-ip
A secrets/wireguard-jedha-presharedkey
A secrets/wireguard-jedha-privatekey
A secrets/wireguard-mustafar-ip
A secrets/wireguard-mustafar-presharedkey
A secrets/wireguard-mustafar-privatekey
A secrets/wireguard-pixel-presharedkey
A secrets/wireguard-privatekey
A secrets/xandikos
M shell.nix

@@ 0,0 1,2 @@
+# git crypt
+secrets/**      filter=git-crypt diff=git-crypt

@@ 4,8 4,5 @@ hostname
 result
 services/window-manager/usesway
 
-secrets/
-secrets.tar
-.secrets_password_file
 .venv
 .restic_hostname

@@ 12,6 12,7 @@
     direnv
     fd
     git
+    git-crypt
     gnupg
     htop
     iftop

@@ 1,6 1,7 @@
 { pkgs ? import <nixpkgs> { } }:
 pkgs.mkShell {
   propagatedBuildInputs = with pkgs; [
+    git-crypt
     gnutar
     nodePackages.bash-language-server
     openssl