## TODO use defaultSopsFile mayb
{config, ...}: {
  sops.secrets = {
    wireguard = {
      format = "binary";
      sopsFile = ./wireguard;
    };
    porkbun_api_key.sopsFile = ./porkbun.yaml;
    porkbun_secret_key.sopsFile = ./porkbun.yaml;
    slskd = {
      format = "binary";
      sopsFile = ./slskd;
    };
    cloudflare = {
      format = "binary";
      sopsFile = ./cloudflare;
    };
    transmission = {
      format = "binary";
      sopsFile = ./transmission;
    };
    navidrome = {
      format = "binary";
      sopsFile = ./navidrome;
    };
    restic-password = {
      format = "binary";
      sopsFile = ./restic-password;
    };
    vaultwarden-env = {
      format = "binary";
      sopsFile = ./vaultwarden-env;
    };
    miniflux = {
      format = "binary";
      sopsFile = ./miniflux;
    };
    roblox-playtime = {
      format = "binary";
      sopsFile = ./roblox-playtime;
      owner = "roblox-playtime";
      group = "roblox-playtime";
    };
  };
}