Tip: keeping AI API keys and endpoint config out of my Nix configs

Small tip that took me embarrassingly long to figure out, sharing in case it helps others who mix LLM tooling into their NixOS setup. I use a couple of little helper scripts that call LLM APIs (commit message generation, log triage). My first approach was hardcoding the API base URL and key into my scripts, then keeping the scripts out of git. That was ugly: my Nix expression for the machine and my actual scripts drifted apart, and swapping providers meant editing several files. What I settled...