/ secrets.nix
secrets.nix
 1  {lib, ...}: {
 2    imports = [./pub-keys.nix];
 3    options = {
 4      pub-keys.ssh = lib.mkOption {
 5        type = lib.types.attrsOf lib.types.str;
 6        default = {};
 7        description = "set of public keys as `name = key`";
 8      };
 9    };
10  }