{ config, lib, ... }:
let
  allApps = lib.concatMap lib.attrValues (lib.concatMap lib.attrValues (lib.attrValues config.fysiweb-apps));
in
{
  options.fysiweb.capabilities.ssh-credentials = lib.mkOption {
    type = lib.types.attrsOf (lib.types.attrsOf (lib.types.submodule {
      options.publicKeyFile = lib.mkOption {
        type = lib.types.str;
      };
    }));
    default = { };
  };
  config = {
    fysiweb.capabilities.ssh-credentials = lib.listToAttrs (lib.concatMap
      (appConfig:
        let path = (toString ../../apps) + "/${appConfig.appName}/capabilities.nix"; in
        lib.optionals (lib.pathIsRegularFile path) [
          (lib.nameValuePair appConfig.appId
            (import path { inherit appConfig lib; }))
        ])
      allApps);
  };
}