nixfiles/hosts/buildbox/secrets.nix

{...}: {
  services.secrets = {
    enable = true;

    secrets = {
      system_mail_password = {
        user = "root";
        group = "root";
        fetchScript = ''
          simple_get "/api-keys/chaos_mail/system" .password > "$secretFile"
        '';
      };
    };
  };
}