nixos-config/home/secrets/default.nix

{ lib, ... }:
let
  inherit (lib)
    fileContents
    mkOption
    types
  ;
in
{
  options.my.secrets = mkOption {
    type = types.attrs;
  };

  config.my.secrets = {
    # I'm not sure hiding this is very important, but it *seems* like a bad idea
    # to expose this
    bluetooth-mouse-mac-address = fileContents ./bluetooth-mouse-mac-address.secret;
  };
}