handle default credentials outside of install.sh (?)

[phorcys420]

i'd at least like for it to be somewhere else that can be gitignored, or using some secret manager.

[bpmct]

I thought we can support this with local.nix?

[phorcys420]

@bpmct yeah we can, i just currently don't like too much that it's install.sh doing it because i am adding live iso+appliance disk image

[bpmct]

What I mean is I thought local.nix lets you handle credentials instead of install.sh