configure programs for photon

flake.nix

@@ -53,6 +53,12 @@
         ++ map(user: { config, lib, pkgs, ... }@args: {
           users.users.${user} = import ./users/${user} (args // { name = "${user}"; });
           boot.initrd.network.ssh.authorizedKeys = config.users.users.${user}.openssh.authorizedKeys.keys;
+          sops = {
+            secrets."${user}/user-password" = {
+              sopsFile = ./users/${user}/secrets.yaml;
+              neededForUsers = true;
+            };
+          };
         }) users
         ++ map(user: { home-manager.users.${user} = import ./users/${user}/home.nix; }) users;
       };
@@ -73,5 +79,16 @@
         ];
       };
     };
+
+    devShell = lib.mapAttrs (system: sopsPkgs:
+        with nixpkgs.legacyPackages.${system};
+        mkShell {
+          sopsPGPKeyDirs = [ "./keys" ];
+          nativeBuildInputs = [
+            apacheHttpd
+            sopsPkgs.sops-import-keys-hook
+          ];
+        }
+      ) sops-nix.packages;
   };
 }