{ lib, config, ... }:
let
  sops = config.maid.sops;
in
{
  options = {
    maid = {
      sops = {
        work.enable = lib.mkEnableOption "work secrets";
        viendesu.enable = lib.mkEnableOption "VienDesu! secrets";
      };
    };
  };

  config.sops.secrets = lib.mkMerge [
    (lib.mkIf sops.work.enable {
      "work/vpn/ovpn" = {};
      "work/vpn/shadowsocks" = {};
      "work/vpn/password" = {};
    })
    (lib.mkIf sops.viendesu.enable {
      "shadowsocks/gneg" = {};
      "shadowsocks/yor" = {};
    })
  ];
}