{ config, ... }:
{
  sops.templates."cnpg-s3-backup-creds.yaml" = {
    mode = "0444";
    content = ''
      apiVersion: v1
      kind: Secret
      metadata:
        name: s3-backup-creds
        namespace: cloudnativepg
      type: Opaque
      stringData:
        s3AccessKey: fmRuq5b96EKqQOGR1prs
        s3SecretKey: ${config.sops.placeholder.cnpg_s3_backup_key}
    '';
    path = "/var/lib/rancher/k3s/server/manifests/secrets/cnpg-s3-backup-creds.yaml";
  };
}