{
  config,
  pkgs,
  lib,
  ...
}:
{
  services.nix-serve = {
    enable = true;
    secretKeyFile = config.sops.secrets."nix-serve/private-key".path;
  };

  sops.secrets."nix-serve/private-key" = { };
}