From dd322cb71c0b1b667f711a39b60cacd07a072d63 Mon Sep 17 00:00:00 2001
From: servius <servius@darksailor.dev>
Date: Mon, 2 Feb 2026 04:42:32 +0530
Subject: [PATCH] docs: add example of how to add secrets

---
 AGENTS.md                | 14 +++++++++++++-
 home/programs/aichat.nix | 10 ++++++++++
 secrets/secrets.yaml     |  4 ++--
 3 files changed, 25 insertions(+), 3 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index e17dd2c3..3a3bdc1f 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -276,7 +276,19 @@ sessionVariables = {
 - Secrets are managed with SOPS (Secrets OPerationS)
 - Encrypted secrets in `secrets/` directory
 - Configuration in `.sops.yaml`
-- Access secrets via `config.sops.secrets."path/to/secret".path`
+- Access secrets via `config.sops.secrets."secret/value".path` which corresponds to following in yaml.
+    ```yaml
+    foo:
+        bar: somesecret
+    ```
+    The path is the file that contains `somesecret`
+- Add new secrets using `sops set` 
+  Example
+  ```bash
+    openssl rand -hex 32 | tr -d '\n' | jq -sR | sops set --value-stdin secrets/secrets.yaml '["foo"]["bar"]'
+  ```
+  This will add a randomly generated secret to the sops file
+
 
 ## Common Patterns
 
diff --git a/home/programs/aichat.nix b/home/programs/aichat.nix
index 288fb835..8d2bbccb 100644
--- a/home/programs/aichat.nix
+++ b/home/programs/aichat.nix
@@ -33,6 +33,16 @@
               name = "gpt-oss:20b";
               type = "chat";
             }
+            # {
+            #   name = "gpt-oss:20b-instruct";
+            #   type = "chat";
+            #   real_name = "gpt-oss:20b";
+            #   patch = {
+            #     body = {
+            #       think = "low";
+            #     };
+            #   };
+            # }
             {
               name = "qwen3:30b-a3b";
               type = "chat";
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 3b0afc28..d8db29f7 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -94,7 +94,7 @@ sops:
             VGZKdHpVeFRpQUxtSEkyaEhLMlBJcGsKLb0DvPNZosPBUuiX6qz1s5IO5INQh8CK
             ZtXTVClwMSmaUYhdSB2gKFrKVZHXTJZ4oAL5t/BpC0pOHyr+o96T3Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-01-23T07:40:21Z"
-    mac: ENC[AES256_GCM,data:lmpI0sQJbEz0U8oxJ+gLZTfFBwCyJYdaiCmKcRU1juL7/mqyRYrB4Dh8lMMmW5I+n0Z1P0zZ5+CD/WnRXcqdZ/Yj40ZlaUgIdsH1qMImvdv1wld0OIThDWKxoTSywGcbaMz7PpAsC5FNoRo5v/uBT9y42xBXoxw8urdHCrIi21Y=,iv:KFL4fuyqv1TKg36kHxSZiiHTi4MoGEnRP5JyB6BQq78=,tag:sVbK6UwRC+f0Z3HSCtZ2qQ==,type:str]
+    lastmodified: "2026-02-01T23:10:21Z"
+    mac: ENC[AES256_GCM,data:mwhesovdna7rekGUtT2AbM9ihGlX2hv3TjXMd894YyptHe/N5crPne+E2ti3O7yOIZhMIC4j09AeIRxEgi7Ygob0fpoH8LmbYul8JtcTwZYCFhs2f3RIMNcOSW358eZa4HK6UIx8i+nvSKXJEikep3rIYQlmhOwEXwP6Ltsls2s=,iv:mt6ZMfuOxjfg9gGPm4C1sNaXPUbanpdktNBplhiyTLU=,tag:qZMPp3RyLwfcgD9n44o24g==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0