nixos-config/sops/secrets/gum-nix-serve.pub/machines/gum