use flake watch_file "flake.nix" watch_file "flake.lock" watch_file "machines.nix" watch_file "sops.nix"