use flake
export RULES="$PWD/agenix.nix"