{ ... }:
{
  sops.defaultSopsFile = ../../secrets/secrets.yaml;
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  sops.secrets."desktop/matt_password" = { };
  sops.secrets."desktop/matt_password".neededForUsers = true;

  sops.secrets."desktop/hass_token" = { };
  sops.secrets."desktop/hass_token".mode = "0777";

  sops.secrets."wifi" = { };
}