{ ... }:

{
  boot.loader.grub.enable = true;

  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
}