{
  sopsSecrets,
  npins,
  config,
  lib,
  ...
}:

{

  options.common.configure.sops.enable = lib.mkEnableOption "sops secrets";

  imports =
    (lib.mkIf config.common.configure.sops.enable [
      "${npins.sopsNix}/modules/sops"
    ]).content;

  config = lib.mkIf config.common.configure.sops.enable {
    sops.defaultSopsFile = sopsSecrets.${config.networking.hostName};
  };

}