{ config, inputs, ... }:
{
  imports = [ inputs.agenix.nixosModules.default ];

  age.identityPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
  age.secrets = {
    "odin/services/caddy" = {
      file = inputs.secrets."odin/services/caddy.age";
      owner = config.services.caddy.user;
      group = config.services.caddy.group;
    };
    "odin/services/nullmailer" = {
      file = inputs.secrets."odin/services/nullmailer.age";
      owner = config.services.nullmailer.user;
    };
    "odin/services/tailscale".file = inputs.secrets."odin/services/tailscale.age";
    "odin/users/thomas".file = inputs.secrets."odin/users/thomas.age";
  };
}