{
  inputs,
  pkgs,
  flake,
  ...
}: {
  imports = [inputs.sops-nix.nixosModules.sops];

  environment.systemPackages = with pkgs; [sops];

  sops = {
    age.keyFile = "/home/pim/.config/sops/age/keys.txt";
    defaultSopsFile = "${flake}/secrets/secrets.yaml";
  };
}