{
  imports = [
    ./all
  ];

  sops = {
    useSystemdActivation = true;
    age.keyFile = "/root/.config/sops/age/keys.txt";

    defaultSopsFile = ./homelab/default.yaml;

    secrets = {
      wireguard_key = {
        format = "binary";
        sopsFile = ./snowflake/wireguard.key;

        mode = "0400";
        owner = "systemd-network";
      };

      snow-den_snowflake = {
        format = "binary";
        sopsFile = ./psk/snow-den_snowflake.key;

        mode = "0400";
        owner = "systemd-network";
      };

      snowlab_snowflake = {
        format = "binary";
        sopsFile = ./psk/snowlab_snowflake.key;

        mode = "0400";
        owner = "systemd-network";
      };
    };
  };
}