From 089ef41de0e45eb207442bdc0abaaa89bac922f6 Mon Sep 17 00:00:00 2001
From: Chris Kruining <chris@kruining.eu>
Date: Sun, 9 Mar 2025 11:56:51 +0100
Subject: [PATCH] started adding secrets support

---
 .sops.yml           | 8 ++++++++
 modules/options.nix | 4 ++++
 2 files changed, 12 insertions(+)
 create mode 100644 .sops.yml

diff --git a/.sops.yml b/.sops.yml
new file mode 100644
index 0000000..96e09c3
--- /dev/null
+++ b/.sops.yml
@@ -0,0 +1,8 @@
+keys:
+  - &primary age10c5hmykkduvy75yvqfnchm5lcesr5puarhkwp4l7xdwpykdm397q6xdxuy
+
+creation_rules:
+  - path_regex: secrets/secrets.yml$
+    key_groups:
+      - age:
+          - *primary
diff --git a/modules/options.nix b/modules/options.nix
index bda200c..73c4509 100644
--- a/modules/options.nix
+++ b/modules/options.nix
@@ -15,6 +15,10 @@ in
   {
     user = mkOpt attrs {};
 
+    environment.systemPackages = [
+      pkgs.sops
+    ];
+
     sneeuwvlok = {
       dir = mkOpt path (findFirst pathExists (toString ../.) [
         "${config.user.home}/Github/.files"