This is actually why I prefer using pijul. I don’t want to commit my secrets to a git repo and nix will refuse to build because I’m pulling in files that aren’t tracked. Simple solution is to not make the flake directory a git repo and it won’t complain. That’s my solution at least. I also prefer using git (and therefore pijul) via cli rather than as a text editor integration so my experience differs.