{...}: {
  age = {
    secrets = {
      etebase-server = {
        file = ./etebase-server/passwd.age;
        mode = "700";
        owner = "etebase-server";
        group = "etebase-server";
      };
      invidiousHmac = {
        file = ./invidious/hmac.age;
        mode = "700";
        owner = "root";
        group = "root";
      };
      mastodonMail = {
        file = ./mastodon/mail.age;
        mode = "700";
        owner = "mastodon";
        group = "mastodon";
      };
      matrix-synapse_registration_shared_secret = {
        file = ./matrix-synapse/passwd.age;
        mode = "700";
        owner = "matrix-synapse";
        group = "matrix-synapse";
      };
      minifluxAdmin = {
        file = ./miniflux/admin.age;
        mode = "700";
        owner = "root";
        group = "root";
      };
      resticpass = {
        file = ./backup/backuppass.age;
        mode = "0700";
        owner = "root";
        group = "root";
      };
      resticssh = {
        file = ./backup/backupssh.age;
        mode = "0700";
        owner = "root";
        group = "root";
      };
      taskserverCaKey = {
        file = ./taskserver/ca.age;
        mode = "700";
        owner = "root";
        group = "root";
      };
      taskserverSystemdTmpfiles = {
        file = ./taskserver/systemd_tmpfiles.age;
        mode = "700";
        owner = "root";
        group = "root";
      };
    };
  };
}