{ user, ... }: {
  sops = {
    age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
    defaultSopsFile = ../../secrets/${user}/secret.yaml;
  };
}