{ config, ... }: { services.cloudflared.enable = true; services.cloudflared.certificateFile = config.age.secrets."odin/services/cloudflared".path; }