sops updates

flake.lock

@@ -1102,11 +1102,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1765231718,
-        "narHash": "sha256-qdBzo6puTgG4G2RHG0PkADg22ZnQo1JmSVFRxrD4QM4=",
+        "lastModified": 1766894905,
+        "narHash": "sha256-pn8AxxfajqyR/Dmr1wnZYdUXHgM3u6z9x0Z1Ijmz2UQ=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "7fd1416aba1865eddcdec5bb11339b7222c2363e",
+        "rev": "61b39c7b657081c2adc91b75dd3ad8a91d6f07a7",
         "type": "github"
       },
       "original": {

hosts/doloro-laptop/home.nix

@@ -1,11 +1,18 @@
 {
   inputs,
   config,
+  system,
   pkgs,
   fetchFromGitHub,
   ...
 }:
 {
+  imports = [
+    inputs.sops-nix.homeManagerModules.sops
+  ];
+  sops = {
+    age.keyFile = "/home/doloro/.config/sops/age/key.txt"; # must have no password!
+  };
   modules = {
     Hyprland.enable = true;
     quickshell.enable = true;
@@ -84,7 +91,6 @@
     gcr
     qbittorrent
   ];
-  sops.age.keyFile = "/home/doloro/.config/sops/age/key.txt";
 
   # Home Manager is pretty good at managing dotfiles. The primary way to manage
   # plain files is through 'home.file'.

hosts/doloro-laptop/nixos.nix

@@ -90,6 +90,7 @@ in
   # Enable the X11 windowing system.
   services.xserver.enable = true;
 
+  sops.age.keyFile = "/home/doloro/.config/sops/age/key.txt";
   sops = {
     defaultSopsFile = builtins.toPath "${nix-meow.flakeRoot}/secrets/users.yaml";
     secrets = {

modules/wakatime/default.nix

@@ -0,0 +1,4 @@
+_: {
+  home = ./home.nix;
+  # nixos: ./nixos.nix;
+}

modules/wakatime/home.nix

@@ -0,0 +1,16 @@
+{
+  inputs,
+  config,
+  lib,
+  pkgs,
+  fetchFromGitHub,
+  ...
+}:
+let
+  cfg = config.modules.wakatime;
+in
+{
+  options.modules.wakatime = {
+    enable = lib.mkEnableOption "wakatime";
+  };
+}

secrets/users.yaml

@@ -1,5 +1,6 @@
 doloro-hashed_password: ENC[AES256_GCM,data:RYB/bSNTz1TeGucdFHrxxhOqvqQYvQS3lm44I1Lf3LIEVMXL5s41zxIw0S+JVdlq8I3oHDY4C3o5V4lu+8qAWMyIZYp/6Xp4cw==,iv:yOuKk95skNZ5z805vtoJwvyOdsh08BuyBSgXN+M4Ybo=,tag:QAFhUYuqHT6Spw/l4feY4g==,type:str]
 root-hashed_password: ENC[AES256_GCM,data:vzVtz1Ht4XD+omdKjU/Zvoaftq8jKE4kxOjAGZTvoYI07hjItR2TSsYrLw0lwsxyJosfoyF3bVsZSFCuuN7njdchGMSSujZJhg==,iv:0av3n4fcGOHYQB4zidt/qn+blBSiDQ29LN15sVufLLs=,tag:nKKVDbCGxB7wDrMPAyJOaw==,type:str]
+wakatime-scug-io-api-key: ENC[AES256_GCM,data:XQUccNW4210U8ZpHSGVcsdbAirzyTvmcy4y6emk7n4N6MO/W,iv:9/f9ceLshA7l8hJB+IDIPvEwYwSkFlPOLmpvtYXLTpU=,tag:x7hESZCouzYVNef2C+iCSA==,type:str]
 meow: ENC[AES256_GCM,data:JVzenw==,iv:oCOo9//r5s2K4pSeH5UNEj0LL+9h2yq0G0DPOfwjmyQ=,tag:0gu9FNOrjQ8fpB+B+RbGSg==,type:str]
 sops:
     age:
@@ -21,7 +22,7 @@ sops:
             TTNyWDlrM09jcHNVMjkydEVod0xyU3MK0UhbWouZQepwno9bIxk0US2UebDrSduu
             EX38WMwH9BwKBU5hag79zcAPbTQnWg5CIY1I1Xl+J27a5YGy9U3tTA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-23T21:31:15Z"
-    mac: ENC[AES256_GCM,data:iNr37OmqniV2cmyDZSrP+N6Ni7lxFeFkwOM1CknVZ9Bl8nW7UE8dmKOzzK/Lt9YZi6KPzld1RnOqZIKWXY8dpr+XAStUQsxQOOQbeuZqTchJgCYIdRAViDJeFtIY3m4Vubtk7PllFwVk6b6Fb6hZT1Clj15gW1EZLDols9nIdX0=,iv:GEFc+7PR3cEe5OPAq5TF//cZp7IJ0E9lOuiAYA02QnQ=,tag:ORo1UxBzm5s87r0mM8qJ4g==,type:str]
+    lastmodified: "2025-12-28T17:02:38Z"
+    mac: ENC[AES256_GCM,data:uWBbdr10CpCUsn6TcaqewwqnXlICizTGW+arCLZz5S0b+Nc8iznq98Ev/G4M9mg4f79JRSwXnL6KgtVyf0Hd5LJuEhmViv2wTNfOTBffN3AV/Bvz2qCuwhD14GzPGUH3oYijfx+EB1LaGLniE2rx85h+q1hasRUlUY8UE/ndzus=,iv:rIM5T3PkzTsJYRjvWWbJyEcKu3evRcYJhVNeGCtOlms=,tag:pCYvDaI0qLIvJJzwT08nwQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0