system/secrets.example.nix

{
  networking.extraHosts = ''
    127.0.0.2 other-localhost
  '';

  user = {
    name = "Bob";
    dir = "/home/bob";
  };

  git = {
    userName = "Bob Ross";
    userEmail = "bross@example.com";
    # gpg --list-secret-keys
    gpgSigningKey = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
  };

  emailAccounts = {
    "personal" = {
      flavor = "yandex.com";
      address = "bross@yandex.ru";
      passwordCommand = "pass show emails/bross@yandex.ru";
    };
  };
}