infra/config/secrets/default.nix

{lib, ...}: {
  age.secrets = with builtins;
    listToAttrs (map (k: {
      name = lib.removeSuffix ".age" k;
      value = {file = ./. + "/${k}";};
    }) (attrNames (import ./secrets.nix)));
}