{ config, inputs, lib, ... }:

let
  sopsKeyPath = ".config/sops-nix/key.txt";
in
{
  environment.sessionVariables.SOPS_AGE_KEY_FILE = "$HOME/${sopsKeyPath}";

  home-manager = {
    sharedModules = [{ imports = [ inputs.sops-nix.homeManagerModules.sops ]; }];

    users = lib.attrsets.mapAttrs (user: config: ({
      home.persistence."/persist${config.home}".files = [ sopsKeyPath ];
      sops.age.keyFile = "/persist${config.home}/${sopsKeyPath}";
    })) (lib.attrsets.filterAttrs (name: config: config.isNormalUser) config.users.users);
  };
}