{
  sops = {
    defaultSopsFile = ./secrets.yaml;
    defaultSopsFormat = "yaml";
    age = {
      sshKeyPaths = ["/root/.ssh/id_ed25519"];
      keyFile = "/root/.config/sops/age/keys.txt";
      generateKey = true;
    };
  };
}