{ inputs, ... }:

{
    imports = [
        inputs.sops-nix.nixosModules.sops
    ];

    sops = {
        defaultSopsFile = ./sops_nix.yaml;
        #validateSopsFiles = false;
        age = {
            keyFile = "/var/lib/sops-nix/key.txt";
        };
        secrets = {
            pw_root = {
                neededForUsers = true;
            };
            pw_williamp = {
                neededForUsers = true;
            };
            cnpg_s3_backup_key = {};

            weyma_pgsql_replication_tls_key = {};

            cloudflare_api_token = {};

            authentik_admin_password = {};
            authentik_secret_key = {};
            authentik_replication_password = {};
            authentik_smtp_password = {};
            authentik_user_password = {};
            authentik_db_password = {};
            authentik_files_keyid = {};
            authentik_files_keysecret = {};

            omni_asc_base64 = {};
        };
    };
}