{ user, home }:
{ config, inputs, ... }:
{
  environment.persistence."/persist/state"."${home}/.config/sops-nix/key.txt" = { };

  home-manager.users.${user} =
    let
      sopsKeyFile =
        if config.environment.impermanence.enable then
          config.environment.persistence."/persist/state"."${home}/.config/sops-nix/key.txt".source
        else
          "${home}/.config/sops-nix/key.txt";
    in
    {
      imports = [ inputs.sops-nix.homeManagerModules.sops ];

      sops.age.keyFile = sopsKeyFile;
      home.sessionVariables.SOPS_AGE_KEY_FILE = sopsKeyFile;
    };
}