feat(sops): add sops-nix input, core module and devShell tooling

Wires sops-nix into every machine via machines/core/sops.nix so hosts decrypt with their existing SSH host key. Adds a devShell exposing sops/age/ssh-to-age for the operator workflow, which also fixes .envrc's previously no-op `use flake`.
2026-09-08 15:43:36 +02:00
parent 70deb25080
commit 3ab8bfbb91
7 changed files with 89 additions and 2 deletions
@@ -3,5 +3,6 @@
  ./modules.nix
  ./network.nix
  ./nix.nix
+  ./sops.nix
  ./users.nix
 ]