blog fn infra modules nixos pkgs zones .envrc .gitattributes .gitignore .sops.yaml LICENSE flake.lock flake.nix