I have been thinking for a long time how to solve the problem of publishing my nix config, but without revealing some information (like mail). I thought of something like an external closed subrepository or git-crypt. I wondered if it could be done in a more “nix way”, but had no idea how. After discovering oddlama's blog post "Evaluation time secrets in Nix: Importing encrypted nix files" [1], I realized that nix plugins would be a good fit for me. I just wanted something more “robust” and decided to dive deeper into nix plugins and try to implement it myself on rust. Mostly for my own config, but I think this project could be useful to someone else.[1]: https://oddlama.org/blog/evaluation-time-secrets-in-nix/