Improve secrets management with sops-nix

nixos/base.nix

@@ -116,6 +116,21 @@
     vimAlias = true;
   };
 
+  sops = {
+    defaultSopsFile = ../secrets.yaml;
+    validateSopsFiles = false;
+
+    age = {
+      sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+      keyFile = "/var/lib/sops-nix/key.txt";
+      generateKey = true;
+    };
+  };
+
+  secrets = {
+    smb-password = {};
+  };
+
   # List packages installed in system profile.
   environment.systemPackages = with pkgs; [
     alejandra