add actual wiki configuration and lots of modernisations

terraform/nixos-wiki/decrypt-age-keys.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+mkdir -p var/lib/secrets
+
+umask 0177
+sops --extract '["age-key"]' -d "secrets.yaml" > ./var/lib/secrets/age
+# restore umask
+umask 0022