{ config, lib, ... }:
{
  sops.secrets."forgejo-runner-registration-token" = {
    sopsFile = ../../secrets/forgejo/runner-secrets.yml;
    mode = "0440";
  };
}