From 9d41140ef43e54f7667c8cdb4569cfc304ffe4a8 Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Tue, 10 Jun 2025 10:03:20 -0500
Subject: [PATCH] sops first attempt

---
 .sops.yaml       |  0
 flake.nix        |  1 +
 home.nix         | 13 +++++++++++++
 secrets/roy.json |  3 +++
 4 files changed, 17 insertions(+)
 create mode 100644 .sops.yaml
 create mode 100644 secrets/roy.json

diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/flake.nix b/flake.nix
index 7d92bd9..5ac7f0e 100755
--- a/flake.nix
+++ b/flake.nix
@@ -41,6 +41,7 @@
               ./home.nix
               nixvim.homeManagerModules.nixvim
 	            impermanence.homeManagerModules.impermanence
+              sops-nix.homeManagerModules.sops
             ];
           };
         }
diff --git a/home.nix b/home.nix
index 93aff66..0bceaaa 100755
--- a/home.nix
+++ b/home.nix
@@ -52,6 +52,19 @@
     allowOther = true;
   };
 
+  # SOPS config
+  sops = {
+    age.sshKeyPaths = [ "/home/user/.ssh/id_ed25519" ];
+    defaultSopsFormat = "json";
+    defaultSopsFile = ./secrets/roy.json;
+    secrets.test = {
+      path = "%r/test.txt"; 
+    };
+  };
+
+  # User services must come after sops secrets
+  systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
+
   # Configure firefox to be resilient against reboot
   # Source = https://github.com/johnmpost/nixos-config
   programs.firefox = {
diff --git a/secrets/roy.json b/secrets/roy.json
new file mode 100644
index 0000000..95f6f06
--- /dev/null
+++ b/secrets/roy.json
@@ -0,0 +1,3 @@
+{
+  "testSecret": "biggleBlorg"
+}