{
  users.users.garage = {
    isSystemUser = true;
    group = "garage";
    home = "/var/lib/garage";
    description = "Garage service user";
  };
  
  users.groups.garage = {};
  
  age.secrets = {
    "build-token".file = ./secrets/build-token.age;
    
    "garage-rpc-secret" = {
      file = ./secrets/garage-rpc-secret.age;
      owner = "garage";
      group = "garage";
      mode = "0400";
    };
  
    "garage-admin-token" = {
      file = ./secrets/garage-admin-token.age;
      owner = "garage";
      group = "garage"; 
      mode = "0400";
    };
  
    "garage-metrics-token" = {
      file = ./secrets/garage-metrics-token.age;
      owner = "garage";
      group = "garage";
      mode = "0400";
    };

    "headscale-authkey" = {
      file = ./secrets/headscale-authkey.age;
      owner = "regent";
      group = "users";
      mode = "0400";
    };
  };
}