I just add this to my system config:

networking.wireless = {
  enable = true;
  networks = import ./networks.nix;
};

Then I define my networks in a gitignored file and I’m good to go.