{ ... }:
{
  deployment.keys."metrics-grafana-admin-password.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "metrics/grafana/admin-password" ];
    destDir = "/secrets";
    user = "grafana";
    group = "grafana";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."metrics-grafana-smtp-password.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "metrics/grafana/smtp-password" ];
    destDir = "/secrets";
    user = "grafana";
    group = "grafana";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
}