{ config, ... }:
{

  tinc.private.enable = true;
  tinc.private.ipv4 = "10.23.42.24";

  tinc.secret.enable = true;
  tinc.secret.ipv4 = "10.123.42.24";

  # retiolum
  networking.retiolum.port = 720;
  sops.secrets.tinc_retiolum_ed25519_key = { };
  services.tinc.networks.retiolum.ed25519PrivateKeyFile = config.sops.secrets.tinc_retiolum_ed25519_key.path;

}