{
  user ? throw "user argument is required",
  home ? throw "home argument is required",
}:
{ config, pkgs, ... }:
let
  hmConfig = config.home-manager.users.${user};
in
{
  home-manager.users.${user} = {
    sops.secrets = {
      "viya/orders-cli/key".sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
      "viya/orders-cli/secret".sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
    };

    home.packages = [ (pkgs.callPackage ./package.nix { }) ];

    xdg.configFile."viya4-orders-cli/config.yaml".source =
      (pkgs.formats.yaml { }).generate "config.yaml"
        {
          clientCredentialsIdFile = hmConfig.sops.secrets."viya/orders-cli/key".path;
          clientCredentialsSecretFile = hmConfig.sops.secrets."viya/orders-cli/secret".path;
        };
  };
}