{ pkgs, sops-nix, deploy-rs, ... }: {
  default = pkgs.mkShell {
    NIX_CONFIG = "experimental-features = nix-command flakes";
    # imports all files ending in .asc/.gpg
    sopsPGPKeyDirs = [ 
      "keys/hosts"
      "keys/users"
    ];
    
    nativeBuildInputs = [
      pkgs.nix
      pkgs.home-manager
      pkgs.git
      pkgs.vim
      pkgs.alejandra
      pkgs.nixfmt
      pkgs.ssh-to-pgp
      (pkgs.callPackage sops-nix {}).sops-import-keys-hook
      deploy-rs.packages.deploy-rs
    ];
  };
}