diff --git a/nix/flake.lock b/nix/flake.lock
index 0034d9a..2441a9f 100644
--- a/nix/flake.lock
+++ b/nix/flake.lock
@@ -217,9 +217,30 @@
         "nixpkgs": "nixpkgs_2",
         "pesde": "pesde",
         "rokit": "rokit",
+        "sops-nix": "sops-nix",
         "status-bar": "status-bar"
       }
     },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1750119275,
+        "narHash": "sha256-Rr7Pooz9zQbhdVxux16h7URa6mA80Pb/G07T4lHvh0M=",
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "rev": "77c423a03b9b2b79709ea2cb63336312e78b72e2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "type": "github"
+      }
+    },
     "status-bar": {
       "inputs": {
         "ags": "ags",
diff --git a/nix/flake.nix b/nix/flake.nix
index 18f04dd..4690d22 100644
--- a/nix/flake.nix
+++ b/nix/flake.nix
@@ -18,6 +18,10 @@
       url = "path:../astal";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    sops-nix = {
+      url = "github:Mic92/sops-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs =
@@ -74,6 +78,7 @@
               [
                 ./hosts/${host.name}/configuration.nix
                 ./modules/default.nix
+                inputs.sops-nix.nixosModules.sops
                 home-manager.nixosModules.home-manager
                 {
                   nix.settings.experimental-features = [
diff --git a/nix/modules/commonPackages.nix b/nix/modules/commonPackages.nix
index c058cf3..450ef71 100644
--- a/nix/modules/commonPackages.nix
+++ b/nix/modules/commonPackages.nix
@@ -55,6 +55,7 @@
       emote
       pkg-config
       openssl
+      gnupg
     ];
     programs.nix-ld.enable = lib.mkDefault true;
     programs.zsh.enable = lib.mkDefault true;