{
  config,
  lib,
  ...
}:
with lib; let
  cfg = config.custom.files.agenix;
in {
  # https://wiki.nixos.org/wiki/Agenix
  # https://github.com/ryantm/agenix
  options.custom.files.agenix.enable = mkOption {default = false;};

  config = mkIf cfg.enable {
    age.identityPaths = ["/etc/ssh/id_ed25519"]; # !! Must be set without sshd
  };
}