{ inputs, ... }: {

    flake.nixosModules.sops = { config, lib, ... }: {
        
        imports = [
            inputs.sops-nix.nixosModules.sops
        ];

        config = {
            
            sops.secrets."nathan/pass" = {
                neededForUsers = true;
                sopsFile = ./secrets.yaml;
            };

            users.users.nathan = {
                enable = lib.mkDefault false;
                hashedPasswordFile = lib.mkDefault config.sops.secrets."nathan/pass".path;
            };
        };
    };
}