{ inputs, den, ... }:
{
  den.default.includes = [
    (
      { host, ... }:
      {
        nixos =
          { pkgs, ... }:
          {
            imports = [ inputs.sops-nix.nixosModules.sops ];

            sops = {
              age.keyFile = "/home/${(builtins.head (builtins.attrValues host.users)).name}/.config/sops/age/keys.txt";
              defaultSopsFile = ./secrets.yaml;
              secrets = {
                hashed-password-kiri.neededForUsers = true;
              };
            };

            environment.systemPackages = with pkgs; [
              sops
              age
            ];

          };
      }
    )
  ];
}