{ inputs, config, pkgs, lib, ... }:
let
  sopsConfigPath = "${config.home.homeDirectory}/.config/home-manager/jsl-home/.sops.yaml";
in
{
  sops = {
    # It's also possible to use a ssh key, but only when it has no password:
    sshKeyPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519" ];
    defaultSopsFile = ./secrets.yaml;
    defaultSopsFormat = "yaml";
  };
  programs.zsh.shellAliases.sops = lib.mkIf config.enableShell "${pkgs.sops-nix}/bin/sops --config ${sopsConfigPath}";
}