hosts/lithium/semi-secret-vars.nix filter=git-agecrypt diff=git-agecrypt