diff --git a/decrypt.sh b/decrypt.sh
deleted file mode 100755
index 5778a1c7b..000000000
--- a/decrypt.sh
+++ /dev/null
@@ -1,4 +0,0 @@
-#! /bin/sh
-
-sops -d fdroid/encrypted-config.yml > fdroid/config.yml
-sops -d fdroid/encrypted-keystore.p12 > fdroid/keystore.p12
diff --git a/devenv.nix b/devenv.nix
index dcacfd6af..40a741803 100644
--- a/devenv.nix
+++ b/devenv.nix
@@ -1,9 +1,13 @@
-{ pkgs, ... }:
-
-{
-  packages = [
-    pkgs.fdroidserver
-    pkgs.sops
+{pkgs, ...}: {
+  packages = with pkgs; [
+    fdroidserver
+    sops
   ];
 
+  scripts = {
+    decrypt.exec = ''
+      sops -d fdroid/encrypted-config.yml > fdroid/config.yml
+      sops -d fdroid/encrypted-keystore.p12 > fdroid/keystore.p12
+    '';
+  };
 }