{ mkShell
, sops
, deploy-rs
, nixpkgs-fmt
, python3
, pkgs
}:

mkShell {
  # sopsPGPKeyDirs = [ "./secrets/keys" ];
  nativeBuildInputs = [
    python3.pkgs.invoke
    pkgs.ssh-to-age
    pkgs.age
    sops
    deploy-rs
    nixpkgs-fmt
  ];
}