{ lib, config, ... }: let sops = config.maid.sops; in { options.maid.sops = { enable = lib.mkEnableOption "sops"; work.enable = lib.mkEnableOption "work secrets"; viendesu.enable = lib.mkEnableOption "VienDesu! secrets"; }; config.sops.secrets = lib.mkIf sops.enable (lib.mkMerge [ { sops.defaultSopsFile = ../secrets/secrets.yaml; } (lib.mkIf sops.work.enable { "work/vpn/ovpn" = {}; "work/vpn/shadowsocks" = {}; "work/vpn/password" = {}; }) (lib.mkIf sops.viendesu.enable { "shadowsocks/gneg" = {}; "shadowsocks/yor" = {}; }) ]); }