add systems

modules/systems/sops/common.nix

@@ -0,0 +1,17 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    sops
+    age
+    ssh-to-age
+    age-plugin-yubikey
+    yubikey-manager
+    pcsc-tools
+    mkpasswd
+  ];
+
+  sops = {
+    defaultSopsFormat = "yaml";
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+  };
+}

modules/systems/sops/meta.nix

@@ -0,0 +1,11 @@
+{ inputs, ... }:
+{
+  description = "sops-nix system integration";
+
+  includes = [ "services.openssh" ];
+
+  imports = {
+    nixos = [ inputs.sops-nix.nixosModules.sops ];
+    darwin = [ inputs.sops-nix.darwinModules.sops ];
+  };
+}

modules/systems/sops/nixos.nix

@@ -0,0 +1,8 @@
+{
+  services.pcscd.enable = true;
+
+  sops.secrets."users/moons/hashedPassword" = {
+    sopsFile = ../../../secrets/common/system.yaml;
+    neededForUsers = true;
+  };
+}