[wip] Tests for darwin and home-manager

checks/darwin.nix

@@ -0,0 +1,10 @@
+{
+  imports = [
+    ../modules/nix-darwin/default.nix
+  ];
+  nixpkgs.hostPlatform = "aarch64-darwin";
+  sops.secrets.test_key = { };
+  sops.defaultSopsFile = ../pkgs/sops-install-secrets/test-assets/secrets.yaml;
+  sops.age.generateKey = true;
+  system.stateVersion = 5;
+}

checks/home-manager.nix

@@ -0,0 +1,14 @@
+{ config, ... }: {
+  imports = [
+    ../modules/home-manager/sops.nix
+  ];
+  home.stateVersion = "25.05";
+  home.username = "sops-user";
+  home.homeDirectory = "/home/sops-user";
+  home.enableNixpkgsReleaseCheck = false;
+
+  sops.age.generateKey = true;
+  sops.age.keyFile = "${config.home.homeDirectory}/.age-key.txt";
+  sops.secrets.test_key = { };
+  sops.defaultSopsFile = ../pkgs/sops-install-secrets/test-assets/secrets.yaml;
+}

flake.nix

@@ -2,13 +2,22 @@
   description = "Integrates sops into nixos";
   inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
   inputs.nixpkgs-stable.url = "github:NixOS/nixpkgs/release-24.05";
+
+  inputs.nix-darwin.url = "github:LnL7/nix-darwin";
+  inputs.nix-darwin.inputs.nixpkgs.follows = "nixpkgs";
+
+  inputs.home-manager.url = "github:nix-community/home-manager";
+  inputs.home-manager.inputs.nixpkgs.follows = "nixpkgs";
+
   nixConfig.extra-substituters = ["https://cache.thalheim.io"];
   nixConfig.extra-trusted-public-keys = ["cache.thalheim.io-1:R7msbosLEZKrxk/lKxf9BTjOOH7Ax3H0Qj0/6wiHOgc="];
   outputs = {
     self,
     nixpkgs,
-    nixpkgs-stable
-  }: let
+    nixpkgs-stable,
+    nix-darwin,
+    home-manager,
+  } @ inputs: let
     systems = [
       "x86_64-linux"
       "x86_64-darwin"
@@ -36,6 +45,25 @@
       sops = ./modules/nix-darwin;
       default = self.darwinModules.sops;
     };
+
+    darwinConfigurations.sops = nix-darwin.lib.darwinSystem {
+      modules = [ ./checks/darwin.nix ];
+      specialArgs = {
+        inherit self;
+        inherit inputs;
+      };
+    };
+    legacyPackages = nixpkgs.lib.genAttrs ["x86_64-linux" "aarch64-linux" "aarch64-darwin"] (system: let
+       pkgs = nixpkgs.legacyPackages.${system};
+      in {
+        homeConfigurations.sops = home-manager.lib.homeManagerConfiguration {
+          modules = [
+            ./checks/home-manager.nix
+          ];
+          inherit pkgs;
+        };
+    });
+
     packages = forAllSystems (system:
       import ./default.nix {
         pkgs = import nixpkgs {inherit system;};

modules/nix-darwin/manifest-for.nix

@@ -1,11 +1,12 @@
 { writeTextFile, cfg }:
 
-suffix: secrets: extraJson:
+suffix: secrets: templates: extraJson:
 
 writeTextFile {
   name = "manifest${suffix}.json";
   text = builtins.toJSON ({
     secrets = builtins.attrValues secrets;
+    templates = builtins.attrValues templates;
     # Does this need to be configurable?
     secretsMountPoint = "/run/secrets.d";
     symlinkPath = "/run/secrets";
@@ -15,7 +16,6 @@ writeTextFile {
     ageKeyFile = cfg.age.keyFile;
     ageSshKeyPaths = cfg.age.sshKeyPaths;
     useTmpfs = false;
-    templates = cfg.templates;
     placeholderBySecretName = cfg.placeholder;
     userMode = false;
     logging = {