{ config, ... }:
{
  sops.secrets.service-password = {};
  containers.myService = {
    config = { config, ... }: {
      systemd.services.myService = {
        serviceConfig = {
          Environment="PASSWORD=${config.sops.secrets.service-password}";
        };
      };
    };
  };
}