Minor nit: configuration is not the hard part. The hard part is getting "/root/registry-password.txt" onto the NixOS machine in the first place. I mean, you could just scp it I guess, but why spend hours tuning a NixOS config that requires you to manually do stuff in the end?
I'm aware of all of the NixOS "secret management" methods out there but I found none of them satisfying back when I was still using NixOS.
Minor nit: configuration is not the hard part. The hard part is getting "/root/registry-password.txt" onto the NixOS machine in the first place. I mean, you could just scp it I guess, but why spend hours tuning a NixOS config that requires you to manually do stuff in the end?
I'm aware of all of the NixOS "secret management" methods out there but I found none of them satisfying back when I was still using NixOS.