nix-darwin/modules/aspects/_secrets/sops.nix

{config, ...}: {
  sops = {
    age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";

    defaultSopsFile = config.repo.user.secretFile;

    secrets = {
      "github_ssh_key" = {};
      "github_cli_token" = {};
      "kmeat_mac_mini_ssh_key" = {};
    };
  };
}