secrets management with SOPS

flake.nix

@@ -8,9 +8,14 @@
       url = "github:nix-community/disko/v1.13.0";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+
+    sops-nix = {
+      url = "github:Mic92/sops-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
-  outputs = { self, nixpkgs, disko }:
+  outputs = { self, nixpkgs, disko, sops-nix, ... }:
   {
     nixosConfigurations = {
       weyma-bs = nixpkgs.lib.nixosSystem {
@@ -19,6 +24,7 @@
           disko.nixosModules.disko
           { disko.devices.disk.main.device = "/dev/vda"; }
           ./common/core.nix
+          ./security/security.nix
           ./disko/uefi-nosecure.nix
           ./users/users.nix
           {
@@ -61,7 +67,7 @@
         ];
         specialArgs = {
           inputs = {
-            inherit self nixpkgs disko;
+            inherit self nixpkgs disko sops-nix;
           };
         };
       };