{
  config,
  pkgs,
  inputs,
  ...
}:
{
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment = {
    systemPackages = with pkgs; [
      inputs.agenix.packages.${system}.default
    ];
  };

  home-manager.extraSpecialArgs.secrets = config.age.secrets;

  age = {
    identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    secrets = {
      "alibaba-api-key" = {
        # Used in users/modules/vscode/default.nix
        file = "${inputs.mysecrets}/alibaba-api-key.age";
        owner = "marvin";
        mode = "400";
      };
      "open-webui-env" = {
        # Used in modules/llm/open-webui.nix
        file = "${inputs.mysecrets}/open-webui-env.age";
        owner = "root";
        mode = "400";
      };
      "rclone.conf" = {
        # Used in modules/llm/rclone.nix
        file = "${inputs.mysecrets}/rclone-conf.age";
        owner = "marvin";
        mode = "400";
      };
      "sdk-ci-passkey" = {
        # Used in modules/llm/sdk-ci.nix
        file = "${inputs.mysecrets}/sdk-ci-passkey.age";
        owner = "marvin";
        mode = "400";
      };
      "colab-kubectl-config" = {
        file = "${inputs.mysecrets}/colab-kubectl.age";
        path = "/home/marvin/.kube/config";
        owner = "marvin";
        mode = "400";
      };
    };
  };
}