gallery-dl reads secrets on runtime

dotfiles/gallery-dl.nix

@@ -15,7 +15,6 @@
     bluesky = {
       limit-rate = "400k-1M";
       username = "blablablamagic.bsky.social";
-      password = "{env[GALLERY_DL_BLUESKY_PASSWORD]}";
       reposts = false;
       videos = true;
       directory = [ "{author['handle']}" ];
@@ -31,8 +30,6 @@
     };
     flickr = {
       size-max = "Original";
-      access-token = "{env[GALLERY_DL_FLICKR_ACCESS_TOKEN]}";
-      access-token-secret = "{env[GALLERY_DL_FLICKR_ACCESS_TOKEN_SECRET]}";
       directory = [
         "{category}"
         "{owner[username]}"
@@ -87,20 +84,15 @@
       "{title}"
     ];
     tumblr = {
-      access-token = "{env[GALLERY_DL_TUMBLR_ACCESS_TOKEN]}";
-      access-token-secret = "{env[GALLERY_DL_TUMBLR_ACCESS_TOKEN_SECRET]}";
       external = true;
       inline = true;
       posts = "all";
       reblogs = false;
       parent-directory = true;
-      api-key = "{env[GALLERY_DL_TUMBLR_API_KEY]}";
-      api-secret = "{env[GALLERY_DL_TUMBLR_API_SECRET]}";
       directory = [ "{blog_name}" ];
     };
     deviantart = {
       limit-rate = "200k-300k";
-      refresh-token = "{env[GALLERY_DL_DEVIANTART_REFRESH_TOKEN]}";
       include = "gallery,scraps";
       flat = true;
       original = true;
@@ -144,7 +136,6 @@
     reddit = {
       user-agent = "Python:gallery-dl:v1.0 (by /u/captainjawz)";
       client-id = "T7nZ6WZ3_onJWBhLP8r08g";
-      refresh-token = "{env[GALLERY_DL_REDDIT_REFRESH_TOKEN]}";
       parent-directory = true;
       directory = [ "{author}" ];
     };
@@ -167,7 +158,6 @@
     ];
     baraag.directory = [ "{account[username]}" ];
     pixiv = {
-      refresh-token = "{env[GALLERY_DL_PIXIV_REFRESH_TOKEN]}";
       directory = [ "{user[account]} - {user[id]}" ];
       ugoira = true;
       favorite.directory = [

flake.lock

@@ -666,11 +666,11 @@
         "sudoku-solver": "sudoku-solver"
       },
       "locked": {
-        "lastModified": 1759620370,
-        "narHash": "sha256-GTyxqIhtDTySs8f2l8N1zoS2wEBVFfF60nMJ7jEIWn0=",
+        "lastModified": 1760073554,
+        "narHash": "sha256-Ydqg/9lpoha2vgspjviqeRh6/tsWN+pZcUxn1ZyrFZM=",
         "ref": "refs/heads/master",
-        "rev": "6aea10172155c10e63d2efb454e28b9c1e50e3a6",
-        "revCount": 108,
+        "rev": "5c13b806a094f3605e2da70e133551848ad8d9a9",
+        "revCount": 109,
         "type": "git",
         "url": "https://git.servidos.lat/jawz/scripts.git"
       },