nixos-configs/k8s/pinbot/secrets.yml