system/secrets.example.nix

{
  networking.extraHosts = ''
    127.0.0.2 other-localhost
  '';

  realName = "Bob";
  userName = "bob";
  userDir = "/home/bob";
  userEmail = "bob@example.com";

  # gpg --list-secret-keys
  gpgSigningKey = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";

  emailAccounts = {
    "personal" = {
      flavor = "yandex.com";
      address = "bross@yandex.ru";
      passwordCommand = "pass show emails/bross@yandex.ru";
    };
  };
}