refactor(secret): agenix wip

flake.nix

@@ -2,7 +2,10 @@
   description = "Nix for Poby's MacOS";
 
   nixConfig = {
-    substituters = ["https://cache.nixos.org"];
+    substituters = [
+      "https://nix-community.cachix.org"
+      "https://cache.nixos.org"
+    ];
   };
 
   inputs = let
@@ -10,10 +13,12 @@
   in {
     # nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-unstable"; # comment out for unstable version
     nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-${stableVersion}-darwin";
+
     home-manager = {
-      url = "github:nix-community/home-manager/release-25.11";
+      url = "github:nix-community/home-manager/release-${stableVersion}";
       inputs.nixpkgs.follows = "nixpkgs-darwin";
     };
+
     darwin = {
       url = "github:nix-darwin/nix-darwin/nix-darwin-${stableVersion}";
       inputs.nixpkgs.follows = "nixpkgs-darwin";
@@ -24,6 +29,12 @@
       url = "github:notashelf/nvf";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+
+    # agenix for secrets
+    agenix = {
+      url = "github:ryantm/agenix";
+      inputs.nixpkgs.follows = "nixpkgs-darwin";
+    }
   };
 
   outputs = inputs @ {
@@ -32,6 +43,7 @@
     darwin,
     home-manager,
     nvf,
+    agenix,
     ...
   }: let
     system = "aarch64-darwin";
@@ -52,15 +64,17 @@
         ./modules/system.nix
         ./modules/apps.nix
         ./modules/host-users.nix
-
         nvf.darwinModules.default
-
+        agenix.darwinModules.default
         home-manager.darwinModules.home-manager
         {
-          home-manager.useGlobalPkgs = true;
-          home-manager.useUserPackages = true;
-          home-manager.extraSpecialArgs = specialArgs;
-          home-manager.users.${username} = import ./home;
+          home-manager = {
+            useGlobalPkgs = true;
+            useUserPackages = true;
+            backupFileExtension = "backup";
+            extraSpecialArgs = specialArgs;
+            users.${username} = import ./home;
+          };
         }
       ];
     };