nixverse/nodes/hosts/common/system/sops.nix

{ config, inputs, lib, ... }: {
  sops = {
    defaultSopsFile = ../../../../private/secrets.yaml;
    secrets = {
      jay_password = {
        neededForUsers = true;
      };
    };
  };
}