adding sops for taskchamp

homes/media/default.nix

@@ -28,10 +28,32 @@
       "/home/media/.local/state/nix/profiles/home-manager/home-path/bin/"
     ];
 
+    sessionVariables = {
+      LISTEN = 33034;
+      DATA_DIR = "/home/media/.local/share/task-sync";
+    };
 
     stateVersion = "25.05";
   };
 
+  sops = {
+    age.keyFile = "/home/media/.config/sops/age/keys.txt"; # must have no password!
+
+    defaultSopsFile = ../emenel/secrets.yaml;
+
+    secrets = {
+      taskchamp-id = {};
+      taskchamp-key = {};
+    };
+
+    templates."taskchamp".content =
+        ''
+sync.server.client_id = ${config.sops.placeholder.taskchamp-id}
+sync.encryption_secret = ${config.sops.placeholder.taskchamp-key}
+'';
+  };
+
+  
   programs = {
     home-manager.enable = true;
     password-store.enable = true;
@@ -41,7 +63,7 @@
     enable = true;
     startServices = "sd-switch"; # auto reload services when home is rebuilt
   };
-
+  
   #custom script executables
   home.file.".local/bin" = {
     source = ../emenel/dotfiles/dot_local/bin;