{ lib, config, ... }:
let
  sops = config.maid.sops;
in
{
  options.maid.sops = {
    enable = lib.mkEnableOption "sops";

    work.enable = lib.mkEnableOption "work secrets";
    viendesu.enable = lib.mkEnableOption "VienDesu! secrets";
  };

  config.sops = lib.mkIf sops.enable {
    defaultSopsFile = ../secrets/secrets.yaml;
    secrets =
      lib.mkIf sops.enable (lib.mkMerge [
        (lib.mkIf sops.work.enable {
          "work/vpn/ovpn" = {};
          "work/vpn/shadowsocks" = {};
          "work/vpn/password" = {};
        })
        (lib.mkIf sops.viendesu.enable {
          "shadowsocks/gneg" = {};
          "shadowsocks/yor" = {};
        })
      ]);
  };
}