{ config, ... }:

{
  security.pki.certificateFiles = [
    config.sops.secrets."npm-certificate-private".path
    config.sops.secrets."npm-certificate-shared".path
    config.sops.secrets."npm-certificate-public".path
  ];
}