{ config, lib, pkgs, ... }: let listNames = config.syscfg.server.db; containerNames = lib.mapAttrsToList (name: cfg: name) (lib.filterAttrs (name: cfg: (cfg.db or cfg.sops or false)) config.syscfg.server.containers); allApps = lib.unique (listNames ++ containerNames); in{ sops.secrets = { CUSTOM = { sopsFile = ./server.yaml; }; } // (lib.genAttrs (map (name: lib.toUpper name) allApps) (name: { owner = "postgres"; mode = "0644"; sopsFile = ./server.yaml; })); }