Initial keys, and basic token file for sops cluster testing

modules/application-groups/k3s-primary.nix

@@ -1,9 +1,11 @@
 { config, pkgs, ... }:
 {
+  sops.secrets.k3s_token.sopsFile = secrets/cluster.yaml;
+
   services.k3s = {
     enable = true;
     role = "server";
-    token = "forinitialtestingonly";
+    tokenFile = config.sops.secrets.k3s_token.path;
     clusterInit = true;
   };
 }

modules/system/home-manager-settings.nix

@@ -1,5 +1,8 @@
-{ config, pkgs, ... }:
+{ inputs, ... }:
 {
-    home-manager.useGlobalPkgs = true;
-    home-manager.backupFileExtension = "bkp";
-}
+  home-manager.useGlobalPkgs = true;
+  home-manager.backupFileExtension = "bkp";
+  home-manager.sharedModules = [
+    inputs.sops-nix.homeManagerModules.sops
+  ];
+}

modules/system/security.nix

@@ -1,5 +1,12 @@
 { pkgs, config, ... }:
 {
+  environment.systemPackages = with pkgs; [
+    sops
+    age
+  ];
+
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
   security.sudo = {
     enable = true;
     extraRules = [