{ lib, pkgs, ... }:
{
  services.kea.dhcp4 = {
    configFile = "/run/secrets/kea-dhcp4.conf";
    enable = true;
  };

  systemd.services.kea-dhcp4-server = {
    serviceConfig = {
      ExecStart = lib.mkForce ''
        ${pkgs.kea}/bin/kea-dhcp4 -c ''${CREDENTIALS_DIRECTORY}/kea-dhcp4.conf
      '';
      LoadCredential = "kea-dhcp4.conf:/run/secrets/kea-dhcp4.conf";
    };
  };
}