How to use in a flake project to manage project secrets in devShell?

[mhanberg]

I currently use agenix for my NixOS cluster (from some mini pcs in my closet to a DO droplet) as well as in my home-manager configuration.

I am now wondering how to use for a development project's flake to keep secrets used in development like API keys. In the former usecases, I am able to use the home-manager and nixos modules, but I'm not entirely sure what to do in this case.

I am wondering if this really is possible, as the project more or less decrypts your secrets and writes them to the filesystem globally.

Thanks

[mhanberg]

I actually found this right after posting, basically what I wanted.

https://github.com/aciceri/agenix-shell