{ pkgs, ... }: pkgs.writeShellApplication { name = "nixfiles-add-secret"; text = builtins.readFile ./nixfiles-add-secret.sh; runtimeInputs = with pkgs; [ agenix git ]; }