{ user, home }:
{
  config,
  inputs,
  pkgs,
  ...
}:
let
  hmConfig = config.home-manager.users.${user};
in
{
  home-manager.users.${user} = {
    sops = {
      secrets."nix/cache/nix.karaolidis.com".sopsFile = "${inputs.secrets}/domains/personal/secrets.yaml";

      templates."attic" = {
        content = builtins.readFile (
          (pkgs.formats.toml { }).generate "config.toml" {
            default-server = "main";

            servers."main" = {
              endpoint = "https://nix.karaolidis.com/";
              token = hmConfig.sops.placeholder."nix/cache/nix.karaolidis.com";
            };
          }
        );
        path = "${home}/.config/attic/config.toml";
      };
    };

    home.packages = with pkgs; [ attic-client ];
  };
}