How to implement in Nix Flakes? about scalpel HOT 2 OPEN

    nixosConfigurations = {
        # Main desktop
        ryzennova = 
            let base = lib.nixosSystem {
              modules = [ ./hosts/ryzennova ];
              specialArgs = { inherit inputs outputs; };
            };
            in base.extendModules {
              modules = [ 
                scalpel.nixosModules.scalpel
                <yourscalpelconfigfiles>
              ];
              specialArgs = { prev = base; };
            };
   };

  sops.secrets = {
    # Add addresses!
    "uni-address" = {
      format = "yaml";
      sopsFile = ../../dots/secrets/esecrets.yaml;
    };
    "gmail-address" = {
      format = "yaml";
      sopsFile = ../../dots/secrets/esecrets.yaml;
    };
    "main-address" = {
      format = "yaml";
      sopsFile = ../../dots/secrets/esecrets.yaml;
    };
  };

  accounts.email = {
    maildirBasePath = "${config.xdg.cacheHome}/mail";
    accounts = {
      "uni" = {
        address = "!!UNI_ADDRESS!!";
        passwordCommand =
          "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.gmail.com login ${config.accounts.email.accounts.uni.address}/ {print $NF}'";
        ... more stuff after here
      };
      "gmail" = {
        address = "!!GMAIL_ADDRESS!!";
        passwordCommand =
          "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.gmail.com login ${config.accounts.email.accounts.gmail.address}/ {print $NF}'";
        ... more stuff after here
      };
      "mailbox" = {
        address = "!!MAIN_ADDRESS!!";
        passwordCommand =
          "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.mailbox.org login ${config.accounts.email.accounts.mailbox.address}/ {print $NF}'";
        ... More stuff after here
      };
    };
  };

{ config, lib, pkgs, prev, ... }:
let
  start = "${prev.config.accounts.email.accounts}";
  uniconfig = builtins.head (builtins.match ".*-c ([^[:space:]]+)" "${start}");
in
{
  systemd.services.mosquitto.serviceConfig.ExecStart = lib.mkForce (
    builtins.replaceStrings [ "${mosquitto_cfgfile}" ] [ "${config.scalpel.trafos."mosquitto.conf".destination} "] "${start}"
  );
  scalpel.trafos."mosquitto.conf" = {
    source = mosquitto_cfgfile;
    matchers."BR1_PASSWORD".secret = config.sops.secrets.br1passwd.path;
    matchers."BR2_PASSWORD".secret = config.sops.secrets.br2passwd.path;
    owner = "mosquitto";
    group = "mosquitto";
    mode = "0440";
  };
}

# Generated by Home Manager.

IMAPAccount gmail
CertificateFile /etc/ssl/certs/ca-certificates.crt
Host imap.gmail.com
PassCmd "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.gmail.com login [REDACTED GMAIL]/ {print $NF}'"
Port 993
SSLType IMAPS
User [REDACTED GMAIL]
...More stuff after this


IMAPAccount mailbox
CertificateFile /etc/ssl/certs/ca-certificates.crt
Host imap.mailbox.org
PassCmd "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.mailbox.org login [REDACTED MAIN]/ {print $NF}'"
SSLType STARTTLS
User [REDACTED MAIN]
...More stuff after this


IMAPAccount uni
CertificateFile /etc/ssl/certs/ca-certificates.crt
Host imap.gmail.com
PassCmd "gpg -q --for-your-eyes-only --no-tty -d ~/.authinfo.gpg | awk '/machine smtp.gmail.com login  [REDACTED UNI]/ {print $NF}'"
Port 993
SSLType IMAPS
User  [REDACTED UNI]
...More stuff after this