{ config, lib, pkgs, ... }:

let
  hostname = config.instance.hostname;
  host-cfg = config.fudo.hosts.${hostname};
  secrets = config.fudo.secrets.host-secrets.${hostname};

in {
  config.fudo = {
    secrets.host-secrets.${hostname} = {
      backplane-passwd = {
        source-file = host-cfg.backplane-password-file;
        target-file = "/run/backplane/client/passwd";
        user = config.fudo.client.dns.user;
      };
    };

    client.dns.password-file =
      secrets.backplane-passwd.target-file;
  };
}