Use agenix to encrypt secrets

nix/hosts/lemp11/default.nix

@@ -1,3 +1,5 @@
+{ inputs, ... }:
+
 {
   features = {
     cli = {
@@ -17,5 +19,9 @@
     };
   };
 
-  imports = [ ./configuration.nix ];
+  imports = [
+    inputs.agenix.nixosModules.default
+    ./configuration.nix
+    ./secrets.nix
+  ];
 }

nix/hosts/lemp11/secrets.nix

@@ -0,0 +1,5 @@
+{
+  age.secrets = {
+    tubearchivist.file = ../../secrets/tubearchivist.age;
+  };
+}