{ config, ... }:
{
  sops.secrets.tinc_retiolum_ed25519_key = { };
  sops.secrets.tinc_retiolum_rsa_key = { };

  networking.retiolum.port = 720;
  networking.retiolum.nodename = "centari";

  services.tinc.networks.retiolum = {
    ed25519PrivateKeyFile = config.sops.secrets.tinc_retiolum_ed25519_key.path;
    rsaPrivateKeyFile = config.sops.secrets.tinc_retiolum_rsa_key.path;
  };
}