secrets/*
!secrets/secrets.yaml
flake.lock