{inputs, ...}: {
  sops.defaultSopsFile = ../../../secrets/default.yaml;

  sops.age.sshKeyPaths = ["/persist/etc/ssh/ssh_host_ed25519_key"];
  sops.gnupg.sshKeyPaths = [];
}