{
  inputs,
  lib,
  config,
  pkgs,
  ...
}: {
  sops = {
    # defaultSopsFile = ../secrets.yaml;
    # validateSopsFiles = false;
    #
    # age = {
    #   sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
    #   keyFile = "/var/lib/sops/age/keys.txt";
    #   generateKey = true;
    # };
    secrets = {
      "xqtc_private" = {
        # path = if (pkgs.system == "aarch64-darwin") then "/Users/xqtc/.ssh/id_ed25519" else "/home/xqtc/.ssh/id_ed25519";
        path = config.home.homeDirectory + "/.ssh/id_ed25519";
        # owner = "xqtc";
        mode = "600";
      };
      "xqtc_public" = {
        # path = if (pkgs.system == "aarch64-darwin") then "/Users/xqtc/.ssh/id_ed25519.pub" else "/home/xqtc/.ssh/id_ed25519.pub";
        path = config.home.homeDirectory + "/.ssh/id_ed25519.pub";
        # owner = "xqtc";
        mode = "640";
      };
    };
  };
}