{ secrets, ... }:
{
  services.pia = {
    enable = true;

    authUserPass = {
      username = secrets.pia.username;
      password = secrets.pia.password;
    };
  };
}