From 7af1f6a0b34841cb50fa581caf03614a9863c55e Mon Sep 17 00:00:00 2001
From: vkcku <git@mail.vkcku.com>
Date: Mon, 1 Jun 2026 12:28:47 +0530
Subject: infra: add secrets management to base module

monorepo-revid: 1a906a2a1a486db986b9daaa632328579da32522
---
 infra/nix/_treefmt.nix | 4 ++++
 infra/nix/devshell.nix | 7 ++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

(limited to 'infra/nix')

diff --git a/infra/nix/_treefmt.nix b/infra/nix/_treefmt.nix
index 2814c0a..1987229 100644
--- a/infra/nix/_treefmt.nix
+++ b/infra/nix/_treefmt.nix
@@ -2,6 +2,10 @@
 let
   conf = {
     imports = [ ../../root/nix/_treefmt-base.nix ];
+
+    settings.excludes = [
+      "modules/base/secrets.yaml"
+    ];
   };
 in
 treefmt-nix.lib.mkWrapper pkgs conf
diff --git a/infra/nix/devshell.nix b/infra/nix/devshell.nix
index 676f663..a09bb0c 100644
--- a/infra/nix/devshell.nix
+++ b/infra/nix/devshell.nix
@@ -9,7 +9,12 @@
         in
         pkgs.mkShellNoCC {
           inputsFrom = [ self.devShells."${system}".common ];
-          packages = [ treefmt ];
+          packages = [
+            # keep-sorted start
+            pkgs.sops
+            treefmt
+            # keep-sorted end
+          ];
         };
     };
 }
-- 
cgit v1.3.1