3 files changed, 13 insertions, 3 deletions
diff --git a/modules/desktop/default.nix b/modules/desktop/default.nix
index 5ef140c..580a81a 100644
--- a/modules/desktop/default.nix
+++ b/modules/desktop/default.nix
@@ -1,10 +1,8 @@
-{ config, self, ... }:
 {
   imports = [
     ./networking
     ./software
     ./virtualisation
+    ./sops.nix
   ];
-
-  sops.defaultSopsFile = "${self}/secrets/${config.networking.hostName}.yaml";
 }
diff --git a/modules/desktop/software/services/plex.nix b/modules/desktop/software/services/plex.nix
index 95a919b..1d2d1b1 100644
--- a/modules/desktop/software/services/plex.nix
+++ b/modules/desktop/software/services/plex.nix
@@ -1,6 +1,11 @@
+{ config, ... }:
 {
   services.plex = {
     enable = true;
     user = "ebisu";
   };
+
+  environment.etc.crypttab.text = ''
+    plex /dev/sdc1 ${config.sops.secrets.plex_drive_bitlocker_recovery_key.path} bitlk
+  '';
 }
diff --git a/modules/desktop/sops.nix b/modules/desktop/sops.nix
new file mode 100644
index 0000000..df280eb
--- /dev/null
+++ b/modules/desktop/sops.nix
@@ -0,0 +1,7 @@
+{ config, self, ... }:
+{
+  sops = {
+    defaultSopsFile = "${self}/secrets/${config.networking.hostName}.yaml";
+    secrets.plex_drive_bitlocker_recovery_key = { };
+  };
+}