{
  lib,
  config,
  inputs,
  ...
}: let
  inherit (lib) mkEnableOption mkIf;
  cfg = config.horseman.base.secrets;
  secretFile = path: ../../secrets/${path};
in {
  options = {
    horseman.base.secrets = {
      enable = mkEnableOption "";
    };
  };

  config = mkIf cfg.enable {
    environment.systemPackages = [
      inputs.agenix.packages.x86_64-linux.default
    ];

    age.secrets = {
      wifi.file = secretFile "wifi.age";
    };
  };
}