refactor: simplify hosts to share a common configuration.nix

secrets.nix

@@ -0,0 +1,22 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: {
+  imports = [
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  environment.systemPackages = with pkgs; [
+    sops
+  ];
+
+  sops.defaultSopsFile = ./secrets.yaml;
+  sops.defaultSopsFormat = "yaml";
+  sops.age.keyFile = "/sops/keys.txt";
+
+  sops.secrets."guz/password" = {
+    owner = config.users.users.guz.name;
+  };
+}