{ mkShell
, sops-import-keys-hook
, ssh-to-pgp
, sops-init-gpg-key
, sops
, deploy-rs
, nixpkgs-fmt
, python3
, pkgs
}:

mkShell {
  # sopsPGPKeyDirs = [ "./secrets/keys" ];
  nativeBuildInputs = [
    python3.pkgs.invoke
    pkgs.ssh-to-age
    pkgs.age
    ssh-to-pgp
    sops-import-keys-hook
    sops-init-gpg-key
    sops
    deploy-rs
    nixpkgs-fmt
  ];
}