{ config, pkgs, lib, ... }:
let
  consulCfg = config.samfelag.modules.server.consul;
  nomadCfg = config.samfelag.modules.server.nomad;
in
{
  config = {
    age.secrets = {
    } //
    # Consul -------------------------------
    lib.optionalAttrs consulCfg.enable {
      "consul.d/gossip.json" = {
        file = ../secrets/consul.d/gossip.json.age;
        owner = "consul";
        group = "consul";
        mode = "644";
      };
      "consul.d/consul-agent-ca.pem" = {
        file = ../secrets/consul.d/consul-agent-ca.pem.age;
        owner = "consul";
        group = "consul";
        mode = "644";
      };
      "consul.d/agent-token-reykjavik.json" = {
        file = ../secrets/consul.d/agent-token-reykjavik.json.age;
        owner = "consul";
        group = "consul";
        mode = "644";
      };
    } //
    # Nomad -------------------------------
    lib.optionalAttrs nomadCfg.enable {
      "nomad.d/consul-token.json" = {
        file = ../secrets/nomad.d/consul-token.json.age;
        mode = "644";
      };
    };
  };
}