false

# Use an enrollment secret from a plaintext file managed outside the Nix store.
{
  services.orbit = {
    enable = true;
    fleetUrl = "https://fleet.example.com";
    enrollSecretPath = "/etc/fleet/enroll-secret";

    desktop.enable = true;
  };
}

# Use an enrollment secret from sops-nix.
{ config, ... }:
{
  sops.secrets.fleet-orbit-enroll-secret = { };

  services.orbit = {
    enable = true;
    fleetUrl = "https://fleet.example.com";
    enrollSecretPath = config.sops.secrets.fleet-orbit-enroll-secret.path;

    desktop.enable = true;
  };
}