{ config, self, ... }:
{
  sops = {
    defaultSopsFile = "${self}/secrets/${config.networking.hostName}.yaml";

    secrets = {
      "ghcr/user" = { };
      "ghcr/password" = { };
      tailscale_authentication_key = { };
      finnhub_token = { };
      caddy_environment_file = { };
      harmonia = { };

      fuwnme_onion_secret_key = {
        format = "binary";
        sopsFile = "${self}/secrets/fuwnme_hs_ed25519_secret_key.bin";
      };
    };
  };
}