fix: the secrets

home/hakase.nix

@@ -13,10 +13,10 @@
     ../modules/home/theme.nix
     ../modules/home/gaming.nix
     inputs.walker.homeManagerModules.default
+    inputs.sops-nix.homeManagerModules.sops
   ];
 
   home.sessionVariables = {
-    AVANTE_GEMINI_API_KEY = config.sops.secrets.AVANTE_GEMINI_API_KEY.path;
   };
 
   home.stateVersion = "25.05";

system/security.nix

@@ -1,6 +1,7 @@
 {
   pkgs,
   myConfig,
+  config,
   ...
 }: {
   security.pam.services.greetd.enableGnomeKeyring = true;
@@ -12,8 +13,19 @@
   sops = {
     defaultSopsFile = ../secrets/secrets.yaml;
     age.keyFile = "/home/${myConfig.nixos.username}/.config/sops/age/keys.txt";
-    secrets.default_password = {
+    secrets = {
-      neededForUsers = true;
+      default_password = {
+        neededForUsers = true;
+      };
+
+      AVANTE_GEMINI_API_KEY = {
+        owner = "kenji";
+      };
     };
   };
+  programs.fish.interactiveShellInit = ''
+    if test -f ${config.sops.secrets.AVANTE_GEMINI_API_KEY.path}
+      set -gx AVANTE_GEMINI_API_KEY (cat ${config.sops.secrets.AVANTE_GEMINI_API_KEY.path})
+    end
+  '';
 }

system/variables.nix

@@ -1,6 +1,7 @@
-{
+{config, ...}: {
   environment.sessionVariables = {
     EDITOR = "nvim";
     VISUAL = "nvim";
+    AVANTE_GEMINI_API_KEY = config.sops.secrets.AVANTE_GEMINI_API_KEY.path;
   };
 }