gistfile1.txt

  plugins = {
    packet = {
      type = "secret";
      package = pluginPkgs.vault-plugin-secrets-packet;
      command = "vault-plugin-secrets-packet";
    };

    github = {
      type = "secret";
      package = pluginPkgs.vault-plugin-secrets-github;
      command = "vault-plugin-secrets-github";
      };
  };

  pluginsBin = pkgs.runCommand "vault-env" {}
    ''
      mkdir -p $out/bin

      ${builtins.concatStringsSep "\n" (
      lib.attrsets.mapAttrsToList (
        name: info:
          ''
            (
              echo "#!/bin/sh"
              echo 'exec ${info.package}/bin/${info.command} "$@"'
            ) > $out/bin/${info.command}
            chmod +x $out/bin/${info.command}
          ''
      ) plugins
    )}
    '';


 
 
 ...

    ${builtins.concatStringsSep "\n" (
    lib.attrsets.mapAttrsToList (
      name: value:
        ''
          expected_sha_256="$(sha256sum ${pluginsBin}/bin/${value.command} | cut -d " " -f1)"

          echo "Re-registering ${name}"
          vault plugin register -command "${value.command}" -args="${plugin_args}" -sha256 "$expected_sha_256" ${value.type} ${name}
          vault write sys/plugins/reload/backend plugin=${name}
        ''
    ) plugins
  )}