{ config, ... }:
{
  age.secrets.dns-creds = {
    file = ../../secrets/dns-creds.age;
    mode = "0400";
    owner = "root";
  };
  
  # DNS credentials are available at: config.age.secrets.dns-creds.path
  # which resolves to /run/agenix/dns-creds
}