{ config, lib, pkgs, ... }: let listNames = config.syscfg.server.db; containerNames = builtins.attrNames (lib.filterAttrs (appName: app: app.sops) config.syscfg.server.loadedContainers); allApps = lib.unique (listNames ++ containerNames); in{ sops.secrets = { CUSTOM = { mode = "0444"; sopsFile = ./server.yaml; }; } // (lib.genAttrs (map (name: lib.toUpper name) allApps) (name: { mode = "0444"; sopsFile = ./server.yaml; })); }