{ sops.secrets = { "elaris/publicKey" = { sopsFile = ./../../secrets/elaris.yaml; mode = "0644"; owner = "root"; group = "root"; }; "elaris/privateKey" = { sopsFile = ./../../secrets/elaris.yaml; mode = "0600"; owner = "root"; group = "root"; }; }; }