nix-files/secrets/local.nix

{
  # populate secrets on a per-machine basis below (and don't push changes to this file to git)
}