{ pkgs, self, ... }:
{
  environment.systemPackages = [
    pkgs.sops
  ];

  sops = {
    gnupg.sshKeyPaths = [ ];
    secrets.tailscale_authentication_key.sopsFile = "${self}/secrets/hosts.yaml";

    age = {
      sshKeyPaths = [ ];
      keyFile = "/var/lib/sops-nix/key.txt";
      generateKey = true;
    };
  };
}