diff --git a/flake.nix b/flake.nix
index ce985d7f..83997aae 100644
--- a/flake.nix
+++ b/flake.nix
@@ -46,6 +46,10 @@
       url = "github:cachix/git-hooks.nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    work-cli = {
+      url = "path:/home/hektor/test-gsd";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs =
@@ -144,6 +148,7 @@
               dotsPath
               myUtils
               ;
+            hasSopsHmModule = false; # TODO: set to true after re-encrypting secrets for work host's age key
           };
         };
       };
diff --git a/home/hosts/work/default.nix b/home/hosts/work/default.nix
index 1df9614e..87804c49 100644
--- a/home/hosts/work/default.nix
+++ b/home/hosts/work/default.nix
@@ -10,9 +10,10 @@ let
 in
 {
   imports = [
-    inputs.sops-nix.homeManagerModules.sops
+    # inputs.sops-nix.homeManagerModules.sops # TODO: re-enable after re-encrypting secrets for this host's age key
     ../../modules
     ../../modules/ai-tools
+    ../../modules/work-cli
     ../../modules/anki
     ../../modules/browser
     ../../modules/bruno
@@ -30,6 +31,7 @@ in
     ../../modules/k8s/k9s.nix
     ../../modules/keepassxc
     ../../modules/music
+    ../../modules/networking
     ../../modules/nodejs
     ../../modules/nvim
     ../../modules/pandoc
@@ -42,7 +44,7 @@ in
     ../../modules/vscode
   ];
 
-  sops.age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+  # sops.age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt"; # TODO: re-enable with sops module
 
   nixpkgs.config.allowUnfree = true;
 
@@ -75,6 +77,24 @@ in
   git.gitlab.enable = true;
   secrets.vault.enable = true;
 
+  programs.work-cli = {
+    enable = true;
+    gitlab = {
+      url = "https://gitlab.com";
+      project = "";
+      group = "";
+    };
+    jira = {
+      enable = true;
+      url = "";
+      projectKey = "";
+    };
+    vault = {
+      enable = true;
+      url = "";
+    };
+  };
+
   programs = {
     gh.enable = true;
     kubecolor.enable = true;