{ pkgs, user, ... }:
{
  environment.systemPackages = with pkgs; [
    age
    ssh-to-age   
    sops
  ];
  sops = {
    defaultSopsFile = ../sops-secrets.yaml;
    defaultSopsFormat = "yaml";
    # age = {
    #   sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    #   generateKey = true;
    # };
    # gnupg = {
    #   sshKeyPaths = [];
    #   home = "/home/${user}/.gnupg";
    # };
    secrets.example = {}; 
  };
}