From 57fb3905d55b155ff01aa42ef383ea55b6e3a99c Mon Sep 17 00:00:00 2001
From: Sk7Str1p3 <finenkofedor@gmail.com>
Date: Sun, 3 May 2026 00:02:30 +0300
Subject: [PATCH] feat: init `sops-nix`

---
 flake.lock            | 37 ++++++++++++++++++++++++++++++++++++-
 flake.nix             |  1 +
 flake/inputs/core.nix |  7 +++++++
 hosts/default.nix     |  1 +
 4 files changed, 45 insertions(+), 1 deletion(-)

diff --git a/flake.lock b/flake.lock
index 75451b8..75fb5ec 100644
--- a/flake.lock
+++ b/flake.lock
@@ -64,11 +64,46 @@
         "type": "github"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1775888245,
+        "narHash": "sha256-nwASzrRDD1JBEu/o8ekKYEXm/oJW6EMCzCRdrwcLe90=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "13043924aaa7375ce482ebe2494338e058282925",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "flake-file": "flake-file",
         "flake-parts": "flake-parts",
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": "nixpkgs",
+        "sops-nix": "sops-nix"
+      }
+    },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1777338324,
+        "narHash": "sha256-bc+ZZCmOTNq86/svGnw0tVpH7vJaLYvGLLKFYP08Q8E=",
+        "owner": "mic92",
+        "repo": "sops-nix",
+        "rev": "8eaee5c45428b28b8c47a83e4c09dccec5f279b5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "mic92",
+        "repo": "sops-nix",
+        "type": "github"
       }
     }
   },
diff --git a/flake.nix b/flake.nix
index 5105c3f..a6765ac 100644
--- a/flake.nix
+++ b/flake.nix
@@ -9,5 +9,6 @@
     flake-file.url = "github:vic/flake-file";
     flake-parts.url = "github:hercules-ci/flake-parts";
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    sops-nix.url = "github:mic92/sops-nix";
   };
 }
diff --git a/flake/inputs/core.nix b/flake/inputs/core.nix
index dc36458..534b332 100644
--- a/flake/inputs/core.nix
+++ b/flake/inputs/core.nix
@@ -27,4 +27,11 @@
   flake-file = {
     url = "github:vic/flake-file";
   };
+
+  /**
+    Runtime secrets management.
+  */
+  sops-nix = {
+    url = "github:mic92/sops-nix";
+  };
 }
diff --git a/hosts/default.nix b/hosts/default.nix
index cc7b02b..09454a9 100644
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -36,6 +36,7 @@
             };
             modules = with inputs; [
               ./${host}/configuration.nix
+              sops-nix.nixosModules.sops
               ./${host}/hardware.nix
             ];
           };