{
  krebs.sync-containers3.containers.hotdog = {
    sshKey = "${toString <secrets>}/hotdog.sync.key";
  };
  containers.hotdog.bindMounts."/var/lib" = {
    hostPath = "/var/lib/sync-containers3/hotdog/state";
    isReadOnly = false;
  };
}