{ config, ... }:

{
  sops = {
    defaultSopsFile = "./secrets/secrets.yaml";
    defaultSopsFormat = "yaml";
    age.keyFile = "/etc/sops/keys.txt";
    secrets.user_password.neededForUsers = true;
  };
}