{ config, inputs, ... }:
{
  sops.secrets = {
    "globalprotect/email".sopsFile = "${inputs.secrets}/domains/sas/secrets.yaml";
    "globalprotect/gateway".sopsFile = "${inputs.secrets}/domains/sas/secrets.yaml";
    "globalprotect/ssh/key".sopsFile = "${inputs.secrets}/domains/sas/secrets.yaml";
    "ntfy/username".sopsFile = "${inputs.secrets}/domains/sas/secrets.yaml";
    "ntfy/password".sopsFile = "${inputs.secrets}/domains/sas/secrets.yaml";
  };

  sas.globalprotect = {
    enable = true;

    email.file = config.sops.secrets."globalprotect/email".path;
    gateway.file = config.sops.secrets."globalprotect/gateway".path;

    sish = {
      host = "karaolidis.com";
      port = "2222";
      keyFile = config.sops.secrets."globalprotect/ssh/key".path;
    };

    ntfy = {
      url = "https://ntfy.karaolidis.com/sas";
      username.file = config.sops.secrets."ntfy/username".path;
      password.file = config.sops.secrets."ntfy/password".path;
    };
  };
}