{ config, lib, pkgs, ... }:

let
  # Central list of secrets
  secret_names = [
    "tailscale_authkey"
  ];

  # Map the list into age.secrets definitions
  secrets = builtins.listToAttrs (map
    (name: {
      name = name;
      value.file = ../../secrets/${name}.age;
    })
    secret_names);
in {
  options.secrets.enable = lib.mkEnableOption "Enable system secrets";

  config = lib.mkIf config.modules.secrets.enable {
    age.keyFile = "/home/blake/.keyring/age/keys.txt";
    age.secrets = secrets;
  };
}