1{
2 mkServiceSecrets =
3 service: secretsPath: secrets:
4 builtins.listToAttrs (
5 map (sec: {
6 name = service + "-" + sec;
7 value = {
8 owner = service;
9 group = service;
10 file = secretsPath + /${service}/${sec}.age;
11 };
12 }) secrets
13 );
14}