a lot of work

modules/sops/default.nix

@@ -0,0 +1,4 @@
+_: {
+  nixos = ./nixos.nix;
+  home = ./home.nix;
+}

modules/sops/home.nix

@@ -0,0 +1,30 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  home,
+  system,
+  nix-meow,
+  ...
+}:
+let
+  cfg = config.modules.sops;
+in
+{
+
+  imports = [
+    inputs.sops-nix.homeManagerModules.sops
+  ];
+  options.modules.sops = {
+    enable = lib.mkEnableOption "sops configuration module";
+  };
+  config = lib.mkIf cfg.enable {
+    sops = {
+      age.keyFile = "/home/doloro/.config/sops/age/key.txt"; # must have no password!
+      defaultSopsFile = "${nix-meow.flakeRoot}/secrets/users.yaml";
+      secrets."wakatime-scug-io-api-key" = {
+      };
+    };
+  };
+}

modules/sops/nixos.nix

@@ -0,0 +1,19 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  home,
+  system,
+  ...
+}:
+let
+  cfg = config.modules.sops;
+in
+{
+  options.modules.sops = {
+    enable = lib.mkEnableOption "sops configuration module";
+  };
+  config = lib.mkIf cfg.enable {
+  };
+}