1{den, ...}: {
 2  den.aspects.core.nix.includes = [den.aspects.core.nix.access-tokens];
 3  den.aspects.core.nix.access-tokens = {
 4    nixos = {config, ...}: let
 5      secretName = "nix-access-token-github";
 6      templateName = "nix-access-tokens";
 7    in {
 8      nix.extraOptions = ''
 9        !include ${config.vaultix.templates.${templateName}.path}
10      '';
11
12      vaultix.secrets.${secretName}.file = ./access-token-github.age;
13      vaultix.templates.${templateName} = {
14        content = ''
15          access-tokens = github.com=${config.vaultix.placeholder.${secretName}}
16        '';
17        mode = "0440";
18        owner = "root";
19        group = "wheel";
20      };
21    };
22  };
23}