{
  config.age.secrets = {
    # headscale-oidc-secret = {
    #   file = ../secrets/headscale-oidc-secret.age;
    #   path = "/run/agenix/headscale-oidc-secret";
    #   owner = "headscale";
    #   group = "headscale";
    # };
    dn42-privkey = {
      file = ../secrets/dn42-privkey.age;
      path = "/run/agenix/dn42-privkey";
    };
    dn42-peerfinder-uuid = {
      file = ../secrets/dn42-peerfinder-uuid.age;
      path = "/run/agenix/dn42-peerfinder-uuid";
    };
    wireguard-priv-key = {
      file = ../secrets/wireguard-priv-key.age;
      path = "/run/agenix/wireguard-priv-key";
    };
  };
}