{pkgs, ...}: {
  packages = with pkgs; [
    fdroidserver
    sops
  ];

  scripts = {
    decrypt.exec = ''
      sops -d fdroid/encrypted-config.yml > fdroid/config.yml
      sops -d fdroid/encrypted-keystore.p12 > fdroid/keystore.p12
    '';
  };
}