add secrets for freshrss deploy

secrets/freshrss-dbpass.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 kgCrKA mLQH468uhh1m8iQKV2/jffzYVulg5jj4RPlzkHACTRU
++COpkATGYfZdvknW47SUO66cG2susG/xU6cJV34fsUc
+-> r-grease 5 &J{s<$a- ug
+rAWQD4eZYzWTvtoHgf2GuMHPE8MULtfL8AUTgZRtMCREWqylQrLmOwYcXn0/er1i
+gE6vH3r6iLWrEZCpHB3uG0k
+--- PECN04bxeqDCaqrTE3eB+MIqG/lKrJhYyvIhnVdajVU
+;¡zqIÏr¡·02É&K<�nvü Œ�Ê¥Æ1-Þõ´«Ë°¬
+BüÊP©w…ªZ9ËzqÐU•°©ªèE

secrets/secrets.nix

@@ -4,6 +4,7 @@ let
   system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMPcqWQ/L5nLTsBFHArl3AJb9xynhfsKenb5h0NNuMV root@curve";
   mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box";
   lituus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH2lAb33LH3JNuOfBXt971u0tHe+NURFecQdfjwEj+C+ root@lituus";
+  helix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf root@helix";
   curve = [ system user ];
   allUserKeys = [ system user mossnet ];
   systemOnly = [ system mossnet ]; # lituus
@@ -15,6 +16,7 @@ in
   "box-wg.age".publicKeys = [ mossnet ];
   # "wallabag.age".publicKeys = [ mossnet ];
   "borg-password.age".publicKeys = systemOnly;
+  "freshrss-dbpass.age".publicKeys = [ helix ];
   "synapse-config.age".publicKeys = [ lituus ];
   "synapse-database-password.age".publicKeys = [ lituus ];
   "sealight-mod-password.age".publicKeys = [ lituus ];