secrets/** filter=git-crypt diff=git-crypt flake.lock filter=git-crypt diff=git-crypt