{ ... }: { metacfg.services.opencode = { enable = true; sopsFile = ../../../.secrets/amd/opencode-web.yaml; }; }