{
  services.nix-serve = {
    enable = true;
    secretKeyFile = "/run/agenix/nix-serve-priv";
  };
}