nix-infra/config/hosts/public-web-static/sops.nix

{ ... }:

{
  sops = {
    defaultSopsFile = ./secrets.yaml;
  };
}