nixos-config/sops/secrets/gum-nsupdate-cache.nix/machines/gum