2 files changed, 10 insertions, 1 deletions
diff --git a/infra/nix/_treefmt.nix b/infra/nix/_treefmt.nix
index 2814c0a..1987229 100644
--- a/infra/nix/_treefmt.nix
+++ b/infra/nix/_treefmt.nix
@@ -2,6 +2,10 @@
 let
   conf = {
     imports = [ ../../root/nix/_treefmt-base.nix ];
+
+    settings.excludes = [
+      "modules/base/secrets.yaml"
+    ];
   };
 in
 treefmt-nix.lib.mkWrapper pkgs conf
diff --git a/infra/nix/devshell.nix b/infra/nix/devshell.nix
index 676f663..a09bb0c 100644
--- a/infra/nix/devshell.nix
+++ b/infra/nix/devshell.nix
@@ -9,7 +9,12 @@
         in
         pkgs.mkShellNoCC {
           inputsFrom = [ self.devShells."${system}".common ];
-          packages = [ treefmt ];
+          packages = [
+            # keep-sorted start
+            pkgs.sops
+            treefmt
+            # keep-sorted end
+          ];
         };
     };
 }