{ config, ... }:
{
  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];

  # Vaultwarden
  sops.secrets."services/msmtp/password" = {
    mode = "0777";
    sopsFile = ./secrets/msmtp.yaml;
  };
}