{
  sops = {
    defaultSopsFile = ../keys/production.yaml;
    secrets."nextcloud/tlater" = {
      owner = "nextcloud";
      group = "nextcloud";
    };
    secrets."steam/tlater" = {};
    secrets."turn/env" = {};
    secrets."turn/secret" = {
      owner = "turnserver";
    };
  };
}