fix: make taskwarrior available on both NixOS and standalone home-manager

home/hosts/packages.nix

@@ -21,6 +21,7 @@ with pkgs;
   parallel
   pass
   pnpm
+  python3
   ripgrep
   signal-desktop
   silver-searcher

home/hosts/work/default.nix

@@ -10,13 +10,36 @@ let
 in
 {
   imports = [
+    inputs.sops-nix.homeManagerModules.sops
     ../../modules/dconf.nix
     ../../modules/git.nix
     ../../modules/k9s.nix
     ../../modules/keepassxc.nix
     ../../modules/browser
+    ../../modules/taskwarrior.nix
   ];
 
+  sops = {
+    age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+    defaultSopsFile = "${inputs.nix-secrets}/secrets.yaml";
+
+    secrets = {
+      taskwarrior_sync_server_url = {};
+      taskwarrior_sync_server_client_id = {};
+      taskwarrior_sync_encryption_secret = {};
+      anki_sync_user = {};
+      anki_sync_key = {};
+    };
+
+    templates."taskrc.d/sync" = {
+      content = ''
+        sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
+        sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
+        sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
+      '';
+    };
+  };
+
   nixpkgs.config.allowUnfree = true;
 
   home.stateVersion = "25.05";