{ sops = { age.keyFile = "/root/age.key"; secrets = { vpn_bolt = { format = "binary"; sopsFile = ./vpn_bolt.db; }; }; }; }