feat: add 'secrets' module to work host

home/modules/secrets/default.nix

@@ -0,0 +1,20 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  options.secrets = {
+    enable = lib.mkEnableOption "secrets";
+  };
+
+  imports = [ ./vault.nix ];
+
+  config = lib.mkIf config.secrets.enable {
+    home.packages = with pkgs; [
+      sops
+      age
+    ];
+  };
+}

home/modules/secrets/vault.nix

@@ -0,0 +1,16 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  options.secrets.vault = {
+    enable = lib.mkEnableOption "vault CLI";
+  };
+
+  config = lib.mkIf config.secrets.vault.enable {
+    home.packages = with pkgs; [ vault-bin ];
+  };
+}