Add secrets package

.chezmoiignore

@@ -7,6 +7,7 @@
 {{- if ne .role "personal" }}
 /.authcode
 /.config/git/config.d/personal.config
+/.config/nushell/lib/secrets/private.nu
 /.ssh
 {{- end }}
 {{- if ne .role "work" }}

dot_config/nushell/lib/run/mod.nu

@@ -0,0 +1,10 @@
+export def lego [domain] {
+    use secrets
+    load-env $secrets.lego.env
+    (^lego --accept-tos
+        --email $secrets.lego.email
+        --domains $domain
+        --dns $secrets.lego.dns
+        --path $'($env.HOME)/.local/share/lego'
+            run)
+}

dot_config/nushell/lib/secrets/encrypted_private_personal.nu.age

@@ -0,0 +1,18 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTWJYckdmTmRnR1VRTG9O
+WHJMZWxEd1ZoYy9zQmlmNUwzc3FHclVlM0E0CjJpa3gwaEM0WU9DdlRRVnV2ZjU4
+S3hiV0dSbnp4ckVPOUlHMSs3QUlzZzQKLT4gWDI1NTE5IG5oczVrM3Fjc0FXdHBk
+elZKTVcrUTBxUUlqYkRtcGJ2WkVRajZZNU9pMEUKVUxuY0RYbFR6QkROMXc3UHJt
+Sm5TWlVsOWcrUXhIMVNqNVhLR0JRTVloRQotPiBYMjU1MTkgUWdYSVNKclJ0bXJ0
+dGVlMm82bkt3QVNCOGFNZVdwd2k5aWw0M2I0RWFXbwpSRTJHNGNOUlgyN2Q0YTI4
+R1ZHVTNJaFZ3RDVqOCthYjdOQjd1MzVQSkc4Ci0+IFgyNTUxOSBNRnl6UXlyNDhM
+NGNOV0dyOUw0RnBwaDVPenJxUXNHUmtabFJNcDRKTEVrCnBSL1RvYnY2Rjk4YWF4
+RFhxZm1HV1RmVzhrVzZTNzk4dUhUN1FQZlRGNWMKLS0tIC8rQTVxWWpOKzdXbDhN
+amFCbXAwZ1N1aGpVSUlhbGorUVQ4LzdHcWkvUXMKTqrePz5zemj69p0cuepsev/R
+bkCXkr3ao22atpQrH8C0280lS6vGrmiXkI4wPyHmZrxMcfwikpWuVVXd10Iwwhht
+1ughz4sN8xilapCRZT20OjMCGZ3+Mjcn4p5kllZM53cUpHis5nXGtA+36n52spiz
+Tcind+VdfLGchAPzkVK6xJ6lbxat33DA8kECnQEkUPsOa90R5mPNNo1lCLfH+q2o
+O7CKS5x2bi2QFqEqkq/65TS702j3l9v1z9kMimnJGWyK69QpBvW9vCCZoKcGdIMX
+2VVJ3iLOUVg587hSpanWlMervo3X344BkIxX4MvY0OdHo4EZy8WU/4vgiQJM1H4y
+rQlU5+xpFAh5rgVPesM=
+-----END AGE ENCRYPTED FILE-----

dot_config/nushell/lib/secrets/mod.nu.tmpl

@@ -0,0 +1,5 @@
+# chezmoi:template:left-delimiter=#{{
+#{{- /* vim: set filetype=nu: */ -}}
+#{{ if eq .role "personal" -}}
+export use personal.nu *
+#{{ end -}}