{ inputs, ... }:
{
  sops = {
    age.keyFile = "/home/user/.age-key.txt"; # must have no password!
    # deliberately not setting `defaultSopsFile` because there is no clear file-hostname-mapping. Each separate home config has to configure this explicitly.
  };
}