{ config, lib, ... }: { sops = { defaultSopsFile = ./secrets.yaml; age.keyFile = "/etc/sops/age.key"; #secrets."forgejo-admin-password".owner = "forgejo"; }; }