secrets.nix

 1# hosts/infra-rtw-run/secrets.nix
 2# Host-specific secrets for infra.rtw.run, from the `secrets` store
 3# (servers/hosts/infra.rtw.run/<name>). Root-owned, so Colmena uploads them
 4# before activation.
 5{ ... }:
 6{
 7  servers.secrets = {
 8    # btburke's password hash (users.nix).
 9    "btburke-password-hash".scope = "host";
10  };
11}