{
  sops.secrets."borg-private-key" = {
    sopsFile = ./secrets/borgbackup.yaml;
    mode = "0400";
    key = "private-key";
    owner = "root";
    group = "root";
  };

  sops.secrets."borg-passphrase" = {
    sopsFile = ./secrets/borgbackup.yaml;
    mode = "0400";
    key = "passphrase";
    owner = "root";
    group = "root";
  };
}