From 181a18fe4d9acd9969a9ac07c506220c753e97ec Mon Sep 17 00:00:00 2001
From: Jordan Ashurst <ashurstdev@proton.me>
Date: Mon, 14 Sep 2026 06:08:15 -0700
Subject: [PATCH] Adding sops support to home-manager

---
 flake.lock | 12 ++++++------
 flake.nix  |  4 ++++
 home.nix   |  9 +++++++++
 3 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/flake.lock b/flake.lock
index 6a02f65..e155dc2 100644
--- a/flake.lock
+++ b/flake.lock
@@ -86,11 +86,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1789352311,
-        "narHash": "sha256-E9hlcRNSRQ1vb+UicOusX/ucroGlBAz/pYhCBorLOn4=",
+        "lastModified": 1789386765,
+        "narHash": "sha256-4hyLFBhzQC7+qPMELWc7J/sbdA6ckXZxXU9CYRsGhsc=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "cfcda3f99334c8459fa4cd46cce87502e0b48f0a",
+        "rev": "87c391f49a34660de6010f35bb50fb1bf811be9f",
         "type": "github"
       },
       "original": {
@@ -136,11 +136,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1789149629,
-        "narHash": "sha256-H6GwaZzZf+4npqv0tph94w9tZddSjFjmQrVsW0z78uk=",
+        "lastModified": 1789286504,
+        "narHash": "sha256-eiEK7cKZORNEvX0GeF3RtNEF/JXhgf2RqSp3230q13E=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "eaad089433ca2bb662274377d33df3d0e51ef28b",
+        "rev": "ef34387ddd751e1ab8857adf4676492d32eb24ec",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 7b32dd1..7b3daec 100644
--- a/flake.nix
+++ b/flake.nix
@@ -50,6 +50,10 @@
             inherit inputs;
           };
 
+          home-manager.sharedModules = [
+            inputs.sops-nix.homeManagerModules.sops
+          ];
+
           home-manager.users.mask = ./home.nix;
         }
 
diff --git a/home.nix b/home.nix
index 54e1ce4..70337a8 100644
--- a/home.nix
+++ b/home.nix
@@ -125,4 +125,13 @@
   };
 
   programs.home-manager.enable = true;
+
+  sops = {
+    age.keyFile = "/home/mask/.config/sops/age/keys.txt";
+    defaultSopsFile = ./secrets/secrets.yaml;
+    secrets = {
+      "github/token" = {};
+      "gitlab/token" = {};
+    };
+  };
 }