feat(ref): add github pat to use with nix requests

reference/hosts/callisto/default.nix

@@ -7,6 +7,8 @@
   imports =
     [
       ./configuration.nix
+      ../../modules
+      ../../secrets
       self.nixosModules.liminalOS
       {
         home-manager.users.youwen = {

reference/hosts/demeter/default.nix

@@ -7,7 +7,9 @@
   imports =
     [
       ./configuration.nix
+      ../../modules
       ../../secrets
+      ../../users/youwen/nixos.nix
       self.nixosModules.liminalOS
       {
         home-manager.users.youwen = {

reference/modules/default.nix

@@ -0,0 +1,6 @@
+{ config, ... }:
+{
+  nix.extraOptions = ''
+    !include ${config.age.secrets.nix_config_github_pat.path}
+  '';
+}

reference/secrets/default.nix

@@ -31,5 +31,11 @@
       mode = "600";
       path = "/home/youwen/.config/gh/hosts.yml";
     };
+    nix_config_github_pat = {
+      file = ./nix_config_github_pat.age;
+      owner = "youwen";
+      group = "users";
+      mode = "0440";
+    };
   };
 }

reference/secrets/nix_config_github_pat.age

@@ -0,0 +1,27 @@
+age-encryption.org/v1
+-> ssh-rsa 4p6DaQ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+-> ssh-rsa pv6HEg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+--- cZ6bbJKB4uN0RX9l0MWaH0Hgr81cGxhnMTgSuVKUfI4
+qÀRpŒ[µ0*CÕ»Ï;oø·Š½‹Q
¨
<0A>><3E>—
+Ñ‹¦Bóu<EFBFBD>æ[j˜"/†=±‚.€VÝnmx°¦†öƒÍŽÁ
+û:‚TTŸƒºjŸ<6A>­
"+<2B><>2ËÝׄiPM€O¸vÄ–)Î$\ëV¦Ñ0Ñ_Ƚ§€N暈^€‹Ó*Y(d“R;€-ûÍ™™Z'o\øY¨5-

reference/secrets/secrets.nix

@@ -11,4 +11,5 @@ in
   "youwen_ucsb_client_secret.age".publicKeys = users ++ systems;
   "tincan_app_password.age".publicKeys = users ++ systems;
   "github_cli_secret_config.age".publicKeys = users ++ systems;
+  "nix_config_github_pat.age".publicKeys = users ++ systems;
 }