fix(secrets): add enable option

home/hosts/andromache/default.nix

@@ -64,6 +64,7 @@
   };
   anki.enable = true;
   k8s.k9s.enable = true;
+  secrets.enable = true;
   taskwarrior.enable = true;
   audio.enable = true;
   ssh.enable = true;

home/hosts/astyanax/default.nix

@@ -60,6 +60,7 @@
   };
   anki.enable = true;
   k8s.k9s.enable = true;
+  secrets.enable = true;
   taskwarrior.enable = true;
   secrets.enable = true;
   my.yubikey.enable = true;

home/hosts/work/default.nix

@@ -96,6 +96,7 @@
   my.stylix.enable = true;
   git.github.enable = true;
   git.gitlab.enable = true;
+  secrets.enable = true;
   secrets.vault.enable = true;
   bruno.enable = true;
   docker.enable = true;

home/modules/secrets/default.nix

@@ -1,13 +1,19 @@
 {
+  config,
+  lib,
   pkgs,
   ...
 }:
 {
   imports = [ ./vault.nix ];
 
-  home.packages = with pkgs; [
-    age
-    age-plugin-yubikey # TODO: only needed when using Yubikey
-    sops
-  ];
+  options.secrets.enable = lib.mkEnableOption "secrets";
+
+  config = lib.mkIf config.secrets.enable {
+    home.packages = with pkgs; [
+      age
+      age-plugin-yubikey
+      sops
+    ];
+  };
 }