{
  services.golink = {
    enable = true;
    tailscaleAuthKeyFile = /run/agenix/golink-authkey;
  };
  age.secrets.golink-authkey = {
    file = ./secrets/golink-authkey.age;
    path = "/run/agenix/golink-authkey";
    owner = "golink";
    group = "golink";
  };
}