nixos/modules/sops/work.nix

{
  sops = {
    secrets."work/vpn/ovpn" = {};
    secrets."work/vpn/shadowsocks" = {};
    secrets."work/vpn/password" = {};
  };
}