use flake

export RULES=./secrets.config.nix