{ config, ... }:
{
  sops.defaultSopsFile = ../../secrets/secrets.yaml;
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  sops.secrets."jallen-nas/admin_password" = { };
  sops.secrets."jallen-nas/admin_password".neededForUsers = true;

  sops.secrets."wifi" = { };

  sops.secrets."jallen-nas/ups_password" = {
    # restartUnits = [ "ups stuff lol" ];
  };
  sops.secrets."jallen-nas/ups_password".mode = "0777";

  sops.secrets."jallen-nas/collabora" = {
    restartUnits = [ "podman-collabora.service" ];
  };

  sops.secrets."jallen-nas/mariadb/db_pass" = {
    restartUnits = [ "podman-mariadb.service" ];
  };
  sops.secrets."jallen-nas/mariadb/root_pass" = {
    restartUnits = [ "podman-mariadb.service" ];
  };

  sops.secrets."jallen-nas/nextcloud/dbpassword" = {
    restartUnits = [ "podman-nextcloud.service" ];
  };
  sops.secrets."jallen-nas/nextcloud/adminpassword" = {
    restartUnits = [ "podman-nextcloud.service" ];
  };
  sops.secrets."jallen-nas/nextcloud/smtppassword" = {
    restartUnits = [ "podman-nextcloud.service" ];
  };

  sops.templates."nextcloud-smtp".content = ''
    ${config.sops.secrets."jallen-nas/nextcloud/smtppassword".path}
  '';

  sops.secrets."jallen-nas/manyfold/secretkeybase" = {
    restartUnits = [ "podman-manyfold.service" ];
  };

  sops.secrets."jallen-nas/immich/db-password" = {
    restartUnits = [ "podman-immich-postgres.service" ];
  };
  sops.secrets."jallen-nas/immich/db-name" = {
    restartUnits = [ "podman-immich-postgres.service" ];
  };
  sops.secrets."jallen-nas/immich/db-user" = {
    restartUnits = [ "podman-immich-postgres.service" ];
  };
  sops.secrets."jallen-nas/immich/server-db-password" = {
    restartUnits = [ "podman-immich-server.service" ];
  };
  sops.secrets."jallen-nas/immich/server-db-name" = {
    restartUnits = [ "podman-immich-server.service" ];
  };
  sops.secrets."jallen-nas/immich/server-db-user" = {
    restartUnits = [ "podman-immich-server.service" ];
  };

  sops.secrets."jallen-nas/open-webui" = {
    restartUnits = [ "open-webui.service" ];
  };

  sops.secrets."jallen-nas/netdata-token" = {
    restartUnits = [ "netdata.service" ];
  };

  sops.secrets."jallen-nas/onlyoffice-key" = {
    restartUnits = [ "podman-onlyoffice.service" ];
  };

  sops.secrets."jallen-nas/paperless/secret" = {
    restartUnits = [ "container@paperless.service" ];
  };
  sops.templates."paperless-secret".content = ''
    ${config.sops.secrets."jallen-nas/paperless/secret".path}
  '';
  sops.secrets."jallen-nas/paperless/authentik-client-id" = {
    restartUnits = [ "container@paperless.service" ];
  };
  sops.templates."paperless-client-id".content = ''
    ${config.sops.secrets."jallen-nas/paperless/authentik-client-id".path}
  '';
  sops.secrets."jallen-nas/paperless/authentik-client-secret" = {
    restartUnits = [ "container@paperless.service" ];
  };
  sops.templates."paperless-client-secret".content = ''
    ${config.sops.secrets."jallen-nas/paperless/authentik-client-secret".path}
  '';

  # Permission modes are in octal representation (same as chmod),
  # the digits represent: user|group|others
  # 7 - full (rwx)
  # 6 - read and write (rw-)
  # 5 - read and execute (r-x)
  # 4 - read only (r--)
  # 3 - write and execute (-wx)
  # 2 - write only (-w-)
  # 1 - execute only (--x)
  # 0 - none (---)
  sops.secrets."jallen-nas/nextcloud/dbpassword".mode = "0777";
  # Either a user id or group name representation of the secret owner
  # It is recommended to get the user name from `config.users.users.<?name>.name` to avoid misconfiguration
  # sops.secrets."jallen-nas/nextcloud/dbpassword".owner = config.users.users.nix-apps.name;
  # # Either the group id or group name representation of the secret group
  # # It is recommended to get the group name from `config.users.users.<?name>.group` to avoid misconfiguration
  # sops.secrets."jallen-nas/nextcloud/dbpassword".group = config.users.users.jallen-nas.group;

  sops.secrets."jallen-nas/nextcloud/adminpassword".mode = "0777";
  # sops.secrets."jallen-nas/nextcloud/adminpassword".owner = config.users.users.nix-apps.name;
  # sops.secrets."jallen-nas/nextcloud/adminpassword".group = config.users.users.jallen-nas.group;

  sops.secrets."jallen-nas/nextcloud/smtppassword".mode = "0777";
  # sops.secrets."jallen-nas/nextcloud/smtppassword".owner = config.users.users.nix-apps.name;
  # sops.secrets."jallen-nas/nextcloud/smtppassword".group = config.users.users.jallen-nas.group;
}