Kieran's opinionated (and probably slightly dumb) nix config

chore: actually populate secrets master


1 changed file