system/secrets.example.nix

{
  networking.extraHosts = ''
    127.0.0.2 other-localhost
  '';

  user = {
    name = "Bob";
    dir = "/home/bob";
  };

  git = {
    userName = "Bob Ross";
    userEmail = "bross@example.com";
    # gpg --list-secret-keys
    gpgSigningKey = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
      };

    emailAccounts = {
      "personal" = {
        flavor = "yandex.com";
        address = "bross@yandex.ru";
        passwordCommand = "pass show emails/bross@yandex.ru";
      };
    };
  }