feat: harden my private secrets

home/base/server/nushell/default.nix

@@ -1,4 +1,4 @@
-{ ... }: {
+{ config, builtins, ... }: {
   programs.nushell = {
     enable = true;
     configFile.source = ./config.nu;
@@ -9,6 +9,8 @@
     # envFile.source = ./env.nu;
     # environmentVariables = { FOO="bar"; };
 
+    # extraConfig = builtins.readFile config.age.secrets."alias-for-work.nushell".path;
+
     shellAliases = {
       k = "kubectl";