Initial commit

modules/sops.nix

@@ -0,0 +1,26 @@
+{ lib, config, ... }:
+let
+  sops = config.maid.sops;
+in
+{
+  options = {
+    maid = {
+      sops = {
+        work.enable = lib.mkEnableOption "work secrets";
+        viendesu.enable = lib.mkEnableOption "VienDesu! secrets";
+      };
+    };
+  };
+
+  config.sops.secrets = lib.mkMerge [
+    (lib.mkIf sops.work.enable {
+      "work/vpn/ovpn" = {};
+      "work/vpn/shadowsocks" = {};
+      "work/vpn/password" = {};
+    })
+    (lib.mkIf sops.viendesu.enable {
+      "shadowsocks/gneg" = {};
+      "shadowsocks/yor" = {};
+    })
+  ];
+}