hardware config

Reviewed-on: #90
Reviewed-by: nerf <nerf@noreply.localhost>

.gitattributes

@@ -0,0 +1 @@
+*.secrets.yaml diff=sopsdiffer

README.md

@@ -233,6 +233,8 @@ If the accessing process is not root it must be member of the group `config.user
 for systemd services this can be archived by setting `serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];`
 it the service configuration.
 
+For cleartext diffs configure your local clone with `git config diff.sopsdiffer.textconv "sops decrypt"` (see [Github](https://github.com/getsops/sops?tab=readme-ov-file#showing-diffs-in-cleartext-in-git)).
+
 ## impermanence
 
 These machines are setup with `"/"` as a tmpfs. This is there to keep the machines clean. So no clutter in home