{ config, ... }:

{
  age.secrets.name = {
    file = ../secrets/name.age;
    owner = "specimen";
    group = "specimen";
    mode = "440";
  };

  services.specimen = {
    enable = true;

    listenAddress = "0.0.0.0";
    port = 4444;
    openFirewall = true;

    namePath = config.age.secrets.name.path;
  };
}