{ ... }:
{


  sops.defaultSopsFile = ../../../secrets/secrets.yaml;
  sops.defaultSopsFormat = "yaml";

  sops.age.keyFile = "/etc/sops/keys.txt";

  sops.secrets."root_ssh" = {
    owner = "root";
    path = "/root/.ssh/id_rsa";
  };

  sops.secrets."syncthing/password" = {
    mode = "440";
    owner = "willifan";
  };

}