{ inputs, pkgs, flake, ... }: {
  imports = [ inputs.sops-nix.nixosModules.sops ];

  environment.systemPackages = with pkgs; [ sops ];

  sops = {
    age.keyFile = "/home/pim/.config/sops/age/keys.txt";
    defaultSopsFile = "${flake}/secrets/secrets.yaml";
  };
}