{ config, ... }:

let xrayCfg = "xray/config.json"; in {
  services.xray = {
    enable = true;
    settingsFile = config.sops.secrets.${xrayCfg}.path;
  };

  sops.secrets.${xrayCfg}.mode = "0444";
}