Installer: use helm secrets to encrypt secrets locally and avoid regenerating them on every upgrade
diff --git a/helmfile/users/.sops.yaml b/helmfile/users/.sops.yaml
new file mode 100644
index 0000000..013cdf0
--- /dev/null
+++ b/helmfile/users/.sops.yaml
@@ -0,0 +1,2 @@
+creation_rules:
+- pgp: 60584680BB48B3CE3FECFFBE7D1302EE361D316A