Start adding sops secrets

.sops.yaml

@@ -0,0 +1,17 @@
+keys:
+  - &user_felixalb age1n6j9umxfn5ekvmsrqngdhux0y994yh72sd5xdt6sxec86k4dyu9shsgjkw
+  - &host_voyager
+
+creation_rules:
+  # Global secrets
+  - path_regex: secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *user_felixalb
+
+  # Host specific secrets
+  - path_regex: secrets/voyager/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *host_voyager
+      - *user_felixalb

flake.nix

@@ -45,5 +45,9 @@
           ];
         };
       };
+
+      devShells.x86_64-linux = {
+        default = nixpkgs.legacyPackages.x86_64-linux.callPackage ./shell.nix { };
+      };
     };
 }

shell.nix

@@ -0,0 +1,8 @@
+{ pkgs ? import <nixpkgs> {} }:
+pkgs.mkShell {
+  nativeBuildInputs = with pkgs; [
+    sops
+    gnupg
+  ];
+}
+