nixfiles/hosts/buildbox/secrets.nix

{ pkgs, ... }: {
  services.secrets = {
    enable = true;

    secrets = {
      system_mail_password = {
        user = "root";
        group = "root";
        fetchScript = ''
          simple_get "/api-keys/chaos_mail/system" .password > $secretFile
        '';
      };
    };
  };
}