modules/nixos/core/security.nix

@@ -1,4 +1,4 @@
-{ inputs, lib, ... }:
+{ ... }:
 
 {
   programs.gnupg.agent = {
@@ -30,8 +30,5 @@
     mutableUsers = false;
   };
 
-  sops = {
-    defaultSopsFile = lib.mkFirst inputs.secrets.path;
-    age.keyFile = "/nix/config/keys.txt";
-  };
+  sops.age.keyFile = "/nix/config/keys.txt";
 }

modules/nixos/user/caem.nix

@@ -1,6 +1,11 @@
-{ config, pkgs, ... }:
+{ config, pkgs, inputs, ... }:
 
 {
+  sops.secrets.upasswd = {
+    neededForUsers = true;
+    sopsFile = inputs.secrets.paths.upasswd;
+  };
+
   users.users.caem = {
     isNormalUser = true;
     shell = pkgs.zsh;