{ lib, config, ... }:
{
  age.secrets = lib.listToAttrs
    (
      map (secret: { name = secret; value = { file = ../../secrets/${secret}.age; }; }) [
        "gotosocial"
        "hastebin-tokens"
        "immich"
        "readeck"
        "storage-box-credentials"
        "vaultwarden"
        "donetick"
      ]
    ) // {
    smtp-password = {
      file = ../../secrets/smtp-password.age;
      owner =
        if (config.services.grafana.enable) then
          config.systemd.services.grafana.serviceConfig.User
        else
          "root";
    };
  };
}