{ pkgs, lib, config, ... }:
let
  inherit (builtins.extraBuiltins) pass;
  inherit (config) networking;
in
{
  deployment.keys = {
    "sourcephile.fr.key.pem" = {
      text        = pass "x509/sourcephile.fr/key.pem";
      user        = "root";
      group       = "root";
      destDir     = "/run/keys/";
      permissions = "0400"; # WARNING: not enforced when deployment.storeKeysOnMachine = true
    };
  };
}