{ config, pkgs, agenix, secrets, ... }:

let user = "dustin"; in
{
  age = { 
    identityPaths = [ 
      "/Users/${user}/.ssh/id_ed25519"
    ];

    secrets = { 
      "syncthing-cert" = {
        symlink = true;
        path = "/Users/${user}/Library/Application Support/Syncthing/cert.pem";
        file =  "${secrets}/darwin-syncthing-cert.age";
        mode = "644";
        owner = "${user}";
        group = "staff";
      };

      "syncthing-key" = {
        symlink = true;
        path = "/Users/${user}/Library/Application Support/Syncthing/key.pem";
        file =  "${secrets}/darwin-syncthing-key.age";
        mode = "600";
        owner = "${user}";
        group = "staff";
      };

      "github-ssh-key" = {
        symlink = true;
        path = "/Users/${user}/.ssh/id_github";
        file =  "${secrets}/github-ssh-key.age";
        mode = "600";
        owner = "${user}";
        group = "staff";
      };

      "github-signing-key" = {
        symlink = false;
        path = "/Users/${user}/.ssh/pgp_github.key";
        file =  "${secrets}/github-signing-key.age";
        mode = "600";
        owner = "${user}";
      };
    };
  };
}