{ config, ... }:
{
  sops.secrets = {
    "ankiusers/monke" = { };
  };

  services.anki-sync-server = {
    enable = true;
    users = [
      {
        username = "monke";
        passwordFile = config.sops.secrets."ankiusers/monke".path;
      }
    ];
    openFirewall = true;
    address = "0.0.0.0";
    port = 8087;
  };
}