use flake

if [ -e .secret.envrc ]; then
  source .secret.envrc
fi