diff --git a/modules/default.nix b/modules/default.nix
index a70bbd3..ab09911 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -3,6 +3,7 @@
     ./base.nix
     ./nix.nix
     ./pubkeys.nix
+    ./sops.nix
     ./tools.nix
   ];
 }
diff --git a/modules/sops.nix b/modules/sops.nix
new file mode 100644
index 0000000..e8c615e
--- /dev/null
+++ b/modules/sops.nix
@@ -0,0 +1,3 @@
+{
+  sops.defaultSopsFile = ../secrets.yaml;
+}
diff --git a/secrets.yaml b/secrets.yaml
new file mode 100644
index 0000000..e69de29