Hi, I have a question about home-assistant's /var/lib/hass/secrets.yaml file.

I would like to generate it using modern secret management tool. What tools do ppl use for that?
I am leaning towards using sops-nix. In fact, I found partial example on Mic92/sops-nix README.md

sops.secrets."home-assistant-secrets.yaml" = { owner = "hass"; path = "/var/lib/hass/secrets.yaml"; };

What should the structure of sops' secrets.yaml file be?

I am struggling to figure out how to incorporate home-assistant-secrets.yaml into main sops' secrets.yaml.
I tried using sops-nix PR (github:Mic92/sops-nix?rev=c6233857ac1f096f139ca335c003efbda6087311 ) that allows multiple defoultSopsFiles, but I keep getting errors such as below

/nix/store/sxa9p6k23yydwndlipsrpsa1b4vc50q0-sops-install-secrets-0.0.1/bin/sops-install-secrets: Manifest is not valid: Failed to find valid secret hass-secrets.yaml in [/nix/store/wwl8rw4csyq35886i7l9blaghylg11l0-source/secrets.yaml /nix/store/wwl8rw4csyq35886i7l9blaghylg11l0-source/hass-secrets.yaml]

P.s. This is perhaps more of the sops-nix questions, but I couldn't find a dedicated room for sops-nix

The efforts blew out of proportion.

In reply to @hexa:lossy.network
does anyone here have opinions on mealie vs tandoor vs ???