{
  ...
}:
{
  sops.defaultSopsFile = ../../secrets/secrets.yaml;
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  sops.secrets."jallen-nas/admin_password" = {};
  sops.secrets."jallen-nas/admin_password".neededForUsers = true;

  sops.secrets."wifi" = {};

  sops.secrets."jallen-nas/collabora" = {
    restartUnits = [ "podman-collabora.service" ];
  };

  sops.secrets."jallen-nas/mariadb/db_pass" = {
    restartUnits = [ "podman-mariadb.service" ];
  };
  sops.secrets."jallen-nas/mariadb/root_pass" = {
    restartUnits = [ "podman-mariadb.service" ];
  };
}