Atomic secret provisioning for NixOS based on sops - View it on GitHub