populate the files here which are referenced from the rest of the nix config.

after modifying them, run `git update-index --assume-unchanged secrets/local.nix`

hacky secrets management. TODO: read:
- https://christine.website/blog/nixos-encrypted-secrets-2021-01-20
- git-crypt (https://github.com/bobbbay/dotfiles.git)