Can NixOS Modules Be Tested In‑Place Without Production Secrets?
Goal Validate that a NixOS module can be applied and verified in a sandbox that references only local configuration files, avoiding any production credential store. Constraints • The test environment must not read from /etc/nixos/secrets or any external secret backend. • Flake support may be enabled or disabled depending on the running NixOS version. • Servi