Install sops for encrypting kubernetes secrets.

nix/configuration/configuration.nix

@@ -66,6 +66,7 @@
     ./roles/flux
     ./roles/tekton
     ./roles/gnuplot
+    ./roles/sops
   ];
 
   nix.settings.experimental-features = [
@@ -157,6 +158,7 @@
     libarchive # bsdtar
     lsof
     doas-sudo-shim # To support --use-remote-sudo for remote builds
+    dmidecode # Read SMBIOS information.
   ];
 
   services.openssh = {

nix/configuration/hosts/odo/default.nix

@@ -67,6 +67,7 @@
   me.python.enable = true;
   me.qemu.enable = true;
   me.rust.enable = true;
+  me.sops.enable = true;
   me.sound.enable = true;
   me.steam.enable = true;
   me.sway.enable = true;

nix/configuration/roles/sops/default.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ ];
+
+  options.me = {
+    sops.enable = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Whether we want to install sops.";
+    };
+  };
+
+  config = lib.mkIf config.me.sops.enable (
+    lib.mkMerge [
+      {
+        environment.systemPackages = with pkgs; [
+          sops # For encrypting kubernetes secrets.
+        ];
+      }
+    ]
+  );
+}