dotfiles/systems/ceres/config/sops.nix

{
  sops = {
    secrets = {
      "network/server" = {
        path = "/opt/secrets/server";
        owner = "root";
        mode = "600";
      };
    };
  };
}