{ config, user, ... }: {
  imports = [
    ./common.nix
    ../modules/rclone.nix
  ];

  config = {
    home.stateVersion = "23.11";

    sops = {
      age.sshKeyPaths = [
        "${config.home.homeDirectory}/.ssh/id_ed25519"
      ];

      defaultSopsFile = ../../secrets/global.yaml;
      secrets.nextcloud_password = {};
    };

    programs = {
      home-manager.enable = true;
      rclone = {
        enable = true;

        systemdDependencies = {
          secrets = [
            "sops-nix.service"
          ];
        };

        configs = {
          nextcloud.nextcloud = {
            baseUrl = "https://cloud.nuth.ch";
            username = "manuth";
            obscuredPasswordFile = config.sops.secrets.nextcloud_password.path;
          };
        };
      };

      git = {
        enable = true;
        userName = user.fullName;
        userEmail = user.mail;
      };
    };
  };
}