{
  config,
  pkgs,
  ...
}: {
  environment.systemPackages = with pkgs; [
    kubectl
    k9s
  ];

  sops.secrets.kubeconfig = {
    sopsFile = ./kubeconfig.secret.yaml;
    format = "binary";
    owner = config.users.users.julian.name;
    group = config.users.users.julian.group;
  };
  environment.variables.KUBECONFIG = config.sops.secrets."kubeconfig".path;
}