{config, ...}: let
  vars = import ../../../../vars.nix;
in {
  virtualisation.arion = {
    projects.signal.settings = {
      imports = [./arion-compose.nix];
    };
  };

  sops.secrets."signal/vapid_privkey" = {
    owner = vars.user;
  };

  sops.templates."mollysocket.env" = {
    path = "/home/${vars.user}/.docker/signal/mollysocket.env";
    owner = vars.user;
    mode = "0775";
    content = ''
      MOLLY_VAPID_PRIVKEY="${config.sops.placeholder."signal/vapid_privkey"}"
    '';
  };
}