# Common config for all mariadb containers
{ ... }:
{
  sops.secrets."mariadb_root_password" = {
    restartUnits = [ "podman-mariadb.service" ];
    mode = "0440";
    group = "mariadb";
  };
}