{ ... }:

{
  sops.age.keyFile = "/persist/keys/host-age.key";
}