nix/modules/secrets/default.nix

{username, ...}: {
  sops.defaultSopsFile = ./secrets.yaml;
  sops.defaultSopsFormat = "yaml";

  sops.age.keyFile = "/home/${username}/.config/age/keys.txt";

  sops.secrets.mail = {
    owner = username;
  };
  sops.secrets.spyware = {
    owner = username;
  };
  sops.secrets.contact = {
    owner = username;
  };
}