This reminds me of my parents explaning to me as a kid that even if you are the best driver in the world, everyone else is not and they cannot read your mind. So it would still be dangerous.
Sublime Text. Used it to write web a year or two before VS Code was released (2015). I never started with VS Code because of that and still use Sublime Text for anything that does not require an IDE.
I was considering putting the secrets somewhere not in /etc/nixos/ and just point to them. Then I could push my nix files without worry. My plan was to use my other server as a remote with just git and ssh, but that server is not responding and is ~6 by car away from me (I don't own a car). It will be traveling here soon so I can configure it and send it back though.
Thanks for the link to sops-nix, I will check it out. As you said, NixOS is great when you have it running. I can't see myself going back to debian now.
I suggest giving NixOS a try. I recommend it because it makes it easy to add or remove stuff. Changing names on containers, removing installed application etc is just changing your configuration. And if you mess something up and it does not boot, you can just boot from the last working configuration.
I used Kimi K2 to start learning the Nix language. It really cut down time when trying to understand what I did wrong when switching configurations threw errors.
Where do you push to? I have some secrets in my nix files (passwords). While I will get around to move them away from my nix files soonTM, I don't want to push those to a public repo.
No need for a sharp knife, just don't breathe with you nose (or don't breathe at all while cutting).