servers/machines/lebesgue/config/secrets.nix

{...}: {
  sops = {
    defaultSopsFile = ../secrets/main.yaml;

    secrets = {
      admin-password.neededForUsers = true;
      tskey = {};
      vaultwarden-env = {};
      restic-env = {owner = "restic";};
      restic-password = {owner = "restic";};
      restic-repository = {owner = "restic";};
    };
  };
}