fix: darwin - nix-access-token

modules/base.nix

@@ -1,4 +1,5 @@
 {
+  config,
   pkgs,
   myvars,
   nuenv,
@@ -115,4 +116,8 @@
     ];
     builders-use-substitutes = true;
   };
+
+  nix.extraOptions = ''
+    !include ${config.age.secrets.nix-access-tokens.path}
+  '';
 }

modules/nixos/desktop/security.nix

@@ -3,10 +3,6 @@
   pkgs,
   ...
 }: {
-  nix.extraOptions = ''
-    !include ${config.age.secrets.nix-access-tokens.path}
-  '';
-
   # security with polkit
   security.polkit.enable = true;
   # security with gnome-kering

secrets/darwin.nix

@@ -71,7 +71,8 @@
       {
         file = "${mysecrets}/nix-access-tokens.age";
       }
-      // high_security;
+      # access-token needs to be readable by the user running the `nix` command
+      // user_readable;
 
     # ---------------------------------------------
     # user can read this file.