cleanup

systems/x86_64-linux/matt-nixos/default.nix

@@ -31,6 +31,8 @@
   ${namespace} = {
     headless.enable = false;
 
+    sops.enable = true;
+
     bootloader.lanzaboote.enable = true;
 
     desktop = {
@@ -100,6 +102,7 @@
     "cosmic" = {
       configuration = {
         ${namespace} = {
+          sops.enable = true;
           desktop = {
             cosmic.enable = lib.mkForce true;
             hyprland = {

systems/x86_64-linux/matt-nixos/sops.nix

@@ -28,6 +28,13 @@ in
     # Secrets
     # ------------------------------
     secrets = {
+      "matt_password" = {
+        neededForUsers = true;
+        mode = "0600";
+        owner = config.users.users."${user}".name;
+        group = config.users.users."${user}".group;
+      };
+
       "desktop/hass_token" = {
         sopsFile = desktopSopsFile;
         mode = "0777";