From e8e402e9b7f63ace1c64ecd4e765e16e23d10ae7 Mon Sep 17 00:00:00 2001
From: Trolli Schmittlauch <t.schmittlauch@orlives.de>
Date: Sun, 5 Apr 2026 00:26:11 +0200
Subject: [PATCH] devShell with secrets management tools

---
 .envrc    | 1 +
 flake.nix | 8 +++++++-
 2 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 .envrc

diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..20db47e
--- /dev/null
+++ b/.envrc
@@ -0,0 +1 @@
+use flake . --impure --allow-dirty --no-write-lock-file
diff --git a/flake.nix b/flake.nix
index b99a396..38080bb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -175,7 +175,13 @@
         treefmtEval = treefmt-nix.lib.evalModule pkgs_unstable treefmtConf;
       in
       {
-        devShells.default = pkgs.mkShell { buildInputs = [ ]; };
+        devShells.default = pkgs.mkShell {
+          packages = with pkgs; [
+            sops
+            ssh-to-age
+            age
+          ];
+        };
         formatter = treefmtEval.config.build.wrapper;
         checks.formatting = treefmtEval.config.build.check self;
         # expose nixpkgs with overlay; TODO: figure out role of config