so many sops

hosts/nas/home.nix

@@ -1,12 +1,48 @@
 { ... }:
-{
+let
+  shellAliases = {
+    ll = "ls -alh";
+    update-boot = "sudo nixos-rebuild boot --max-jobs 10";
+    update-switch = "sudo nixos-rebuild switch --max-jobs 10";
+    update-flake = "nix flake update ~/nix-config";
+    ducks = "du -cksh * | sort -hr | head -n 15";
+  };
 
+  gitAliases = {
+    co = "checkout";
+    ci = "commit";
+    cia = "commit --amend";
+    s = "status";
+    st = "status";
+    b = "branch";
+    p = "pull --rebase";
+    pu = "push";
+  };
+in
+{
   home.username = "admin";
   home.homeDirectory = "/home/admin";
   home.stateVersion = "23.11";
-  programs.home-manager.enable = true;
+
+  sops = {
+    age.keyFile = "/home/admin/.config/sops/age/keys.txt";
+    defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
+    validateSopsFiles = false;
+    secrets = {
+      "ssh-keys-public/desktop-nixos" = {
+        path = "/home/admin/.ssh/id_ed25519.pub";
+        mode = "0644";
+      };
+      "ssh-keys-private/desktop-nixos" = {
+        path = "/home/admin/.ssh/id_ed25519";
+        mode = "0600";
+      };
+    };
+  };
 
   programs = {
+    home-manager.enable = true;
+    command-not-found.enable = true;
     fish.enable = false;
     mangohud.enable = true;
     java.enable = true;
@@ -19,10 +55,7 @@
       autosuggestion.enable = true;
       syntaxHighlighting.enable = true;
 
-      shellAliases = {
-        update = "sudo nixos-rebuild switch";
-        ducks = "du -cksh * | sort -hr | head -n 15";
-      };
+      shellAliases = shellAliases;
 
       oh-my-zsh = {
         enable = true;
@@ -30,23 +63,12 @@
         theme = "fishy";
       };
     };
-  };
 
-  programs.git = {
-    enable = true;
-    userName = "mjallen18";
-    userEmail = "matt.l.jallen@gmail.com";
-    aliases = {
-      co = "checkout";
-      ci = "commit";
-      cia = "commit --amend";
-      s = "status";
-      st = "status";
-      b = "branch";
-      p = "pull --rebase";
-      pu = "push";
+    git = {
+      enable = true;
+      userName = "mjallen18";
+      userEmail = "matt.l.jallen@gmail.com";
+      aliases = gitAliases;
     };
   };
-
-  programs.command-not-found.enable = true;
 }