{ ... }:
{


  sops.defaultSopsFile = ../../secrets/secrets.yaml;
  sops.defaultSopsFormat = "yaml";

  sops.age.keyFile = "/home/willifan/.config/sops/age/keys.txt";

  sops.secrets."ssh/root/private" = {
    owner = "root";
  };

  sops.secrets."syncthing/password" = {
    mode = "440";
    group = "syncthing";
  };

  users.groups.syncthing = { };

}