diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..20db47e
--- /dev/null
+++ b/.envrc
@@ -0,0 +1 @@
+use flake . --impure --allow-dirty --no-write-lock-file
diff --git a/flake.nix b/flake.nix
index b99a396..38080bb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -175,7 +175,13 @@
         treefmtEval = treefmt-nix.lib.evalModule pkgs_unstable treefmtConf;
       in
       {
-        devShells.default = pkgs.mkShell { buildInputs = [ ]; };
+        devShells.default = pkgs.mkShell {
+          packages = with pkgs; [
+            sops
+            ssh-to-age
+            age
+          ];
+        };
         formatter = treefmtEval.config.build.wrapper;
         checks.formatting = treefmtEval.config.build.check self;
         # expose nixpkgs with overlay; TODO: figure out role of config