{
  lib,
  pkgs,
  config,
  ...
}:
with lib; let
  secretstore = config._secretstore;
  host = config.networking.hostName;
  secretpath = "${secretstore}/hosts/${host}/mullvad/device.json";
in {
  sops.secrets.device_json = {
    sopsFile = "${secretstore}/hosts/${host}/mullvad/device.json";
    device_json.format = "binary";
  };

  environment.etc."mullvad-vpn/device.conf".source = config.sops.secrets.device_json.path;
}