{ config, ... }:
{
  services.yisroelbaum-web = {
    enable = true;
    secretFiles = {
      borgPassphrase = config.sops.secrets."borg-passphrase".path;
      borgPrivateKey = config.sops.secrets."borg-private-key".path;
      forgejoMailerUser = config.sops.secrets."forgejo-mailer-user".path;
      forgejoMailerPassword = config.sops.secrets."forgejo-mailer-passwd".path;
      rabbiGerziEnvironment = config.sops.secrets."rabbi-gerzi-env".path;
    };
  };

  sops.secrets = {
    "forgejo-mailer-user" = {
      sopsFile = ./secrets/forgejo.yaml;
      mode = "0400";
    };
    "forgejo-mailer-passwd" = {
      sopsFile = ./secrets/forgejo.yaml;
      mode = "0400";
    };
    "rabbi-gerzi-env" = {
      sopsFile = ./secrets/rabbi-gerzi.env;
      format = "dotenv";
      key = "";
      mode = "0400";
      owner = config.services.rabbi-gerzi.user;
      group = config.services.rabbi-gerzi.group;
    };
  };
}