{
  flake,
  lib,
  config,
  pkgs,
  ...
}:
{
  imports = [
    flake.inputs.sops-nix.nixosModules.sops
  ];
  sops = {
    defaultSopsFile = ../../../secrets.yaml;
    secrets = {
      otfenv = {
        owner = "otf";
        group = "otf";
        mode = "0550";
      };
    };
  };
}