{
  config,
  inputs,
  lib,
  ...
}: {
  imports = [inputs.agenix.homeManagerModules.default];

  options.dotfiles.inputs.agenix.age.identityPaths.enable =
    lib.dotfiles.mkEnableOption;

  config = lib.mkIf config.dotfiles.inputs.agenix.age.identityPaths.enable {
    age.identityPaths = ["${config.home.homeDirectory}/.ssh/age"];

    home.activation =
      lib.dotfiles.home.activation.printf
      "dotfiles.inputs.agenix.age.identityPaths"
      "at least one recipient key required: ${
        builtins.concatStringsSep ", " config.age.identityPaths
      }";
  };
}
