{ config, ... }:

{
  age.secrets.discord-bot-token = {
    file = ./secrets/discord-bot-token.age;
    owner = "root";
    mode = "0400";
  };

  age.secrets.tailscale-auth-key = {
    file = ./secrets/tailscale-auth-key.age;
    owner = "root";
    mode = "0400";
  };

  age.secrets.b2-account-id = {
    file = ./secrets/b2-account-id.age;
    owner = "root";
    mode = "0400";
  };

  age.secrets.b2-application-key = {
    file = ./secrets/b2-application-key.age;
    owner = "root";
    mode = "0400";
  };

  age.secrets.grafana-admin-password = {
    file = ./secrets/grafana-admin-password.age;
    owner = "grafana";
    group = "grafana";
    mode = "0400";
  };

  age.secrets.grafana-secret-key = {
    file = ./secrets/grafana-secret-key.age;
    owner = "grafana";
    group = "grafana";
    mode = "0400";
  };

  age.secrets.minecraft-seed = {
    file = ./secrets/minecraft-seed.age;
    owner = "root";
    mode = "0400";
  };
}