{
  config,
  ...
}:
{
  imports = [
    ./secret-config.nix
  ];

  sops.secrets.dyndns = {
    format = "dotenv";
    sopsFile = ./dyndns.env;
    owner = config.systemd.services.dyndns.serviceConfig.User;
  };
  sops.secrets.vaultwarden = {
    format = "dotenv";
    sopsFile = ./vaultwarden.env;
    owner = config.systemd.services.vaultwarden.serviceConfig.User;
  };
}