{ config, ... }:
{
    sops.templates."omni-etcd-key.yaml" = {
        mode = "0444";
        content = ''
            apiVersion: v1
            kind: Secret
            metadata:
                name: omni-etcd-key
                namespace: omni
            type: Opaque
            data:
                omni.asc: ${config.sops.placeholder.omni_asc_base64}
        '';
        path = "/var/lib/rancher/k3s/server/manifests/secrets/omni-etcd-key.yaml";
    };
}