{ sops = { defaultSopsFile = ../keys/production.yaml; secrets."nextcloud/tlater" = { owner = "nextcloud"; group = "nextcloud"; }; secrets."steam/tlater" = {}; }; }