{
  self,
  config,
  inputs,
  lib,
  ...
}: let
  cfg = config.pim.sops;
in {
  imports = [inputs.sops-nix.homeManagerModules.sops];
  options.pim.sops.enable = lib.mkEnableOption "sops";

  config = lib.mkIf cfg.enable {
    sops = {
      age.keyFile = "${config.xdg.configHome}/sops/age/keys.txt";
      defaultSopsFile = "${self}/secrets/pim.yaml";

      secrets = {
        "keepassxc".path = "${config.xdg.configHome}/keepassxc/keepassxc.ini";
      };
    };
  };
}