:lock: secrets

not in use yet, will host my encrypted secrets once i learn how to use either sops or agenix