{
  config,
  lib,
  modules,
  pkgs,
  ...
}: let
  cfg = config.soispha.age;
in {
  options.soispha.age = {
    enable = lib.mkEnableOption "secret management with age";
  };

  imports = [
    modules.agenix.nixosModules.default
  ];

  config = lib.mkIf cfg.enable {
    arg = {
      # TODO(@bpeetz): Set once <https://github.com/ryantm/agenix/pull/317/files> is merged. <2025-05-16>
      # enable = true;
      ageBin = lib.getExe pkgs.rage;
    };
  };
}