ctucx.git: nixfiles

secret: add helper to read age privkey from password-store

diff --git a/secrets/agenix b/secrets/agenix
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+tempfile=$(mktemp)
+
+trap "rm -f $tempfile" SIGINT SIGTERM ERR EXIT
+
+touch $tempfile
+chmod 600 $tempfile
+
+echo "$(pass agenix-privkey)" > $tempfile
+
+agenix -i $tempfile "$@"