{...}: {
  secrets = {
    # Minio
    "minio" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "minio";
      group = "minio";
      mode = "400";
      restartUnits = ["minio.service"];
    };
    # Syncthing
    "syncthing/publicCert" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "jahanson";
      mode = "400";
      restartUnits = ["syncthing.service"];
    };
    "syncthing/privateKey" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "jahanson";
      mode = "400";
      restartUnits = ["syncthing.service"];
    };
    # Prowlarr
    "arr/prowlarr/apiKey" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "prowlarr";
      mode = "400";
      restartUnits = ["prowlarr.service"];
    };
    "arr/prowlarr/postgres/dbName" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "prowlarr";
      mode = "400";
      restartUnits = ["prowlarr.service"];
    };
    "arr/prowlarr/postgres/user" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "prowlarr";
      mode = "400";
      restartUnits = ["prowlarr.service"];
    };
    "arr/prowlarr/postgres/password" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "prowlarr";
      mode = "400";
      restartUnits = ["prowlarr.service"];
    };
    "arr/prowlarr/postgres/host" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "prowlarr";
      mode = "400";
      restartUnits = ["prowlarr.service"];
    };
    # # Sonarr
    # "arr/sonarr/apiKey" = {
    #   sopsFile = ../secrets.sops.yaml;
    #   owner = "sonarr";
    #   mode = "400";
    #   restartUnits = [ "sonarr.service" ];
    # };
    # "arr/sonarr/postgres/dbName" = {
    #   sopsFile = ../secrets.sops.yaml;
    #   owner = "sonarr";
    #   mode = "400";
    #   restartUnits = [ "sonarr.service" ];
    # };
    # "arr/sonarr/postgres/user" = {
    #   sopsFile = ../secrets.sops.yaml;
    #   owner = "sonarr";
    #   mode = "400";
    #   restartUnits = [ "sonarr.service" ];
    # };
    # "arr/sonarr/postgres/password" = {
    #   sopsFile = ../secrets.sops.yaml;
    #   owner = "sonarr";
    #   mode = "400";
    #   restartUnits = [ "sonarr.service" ];
    # };
    # # Radarr
    "arr/radarr/apiKey" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "radarr";
      mode = "400";
      restartUnits = ["radarr.service"];
    };
    "arr/radarr/postgres/dbName" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "radarr";
      mode = "400";
      restartUnits = ["radarr.service"];
    };
    "arr/radarr/postgres/user" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "radarr";
      mode = "400";
      restartUnits = ["radarr.service"];
    };
    "arr/radarr/postgres/password" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "radarr";
      mode = "400";
      restartUnits = ["radarr.service"];
    };
    "arr/radarr/postgres/host" = {
      sopsFile = ../secrets.sops.yaml;
      owner = "radarr";
      mode = "400";
      restartUnits = ["radarr.service"];
    };
  };
}