{ config, lib, ... }: let cfg = config.luj.secrets; in with lib; { options.luj.secrets = { enable = mkEnableOption "Create secrets"; }; config = mkIf cfg.enable { sops.secrets.ens-mail-passwd = { owner = "julien"; path = "/home/julien/.config/ens-mail-passwd"; }; sops.secrets.sendinblue-mail-passwd = { }; sops.secrets.git-gpg-private-key = { owner = "julien"; mode = "0440"; group = config.users.groups.keys.name; sopsFile = ../secrets/git-gpg-private-key; format = "binary"; }; }; }