{ config, lib, ... }:

{
  options.homelab.deploy = {
    enable = lib.mkEnableOption "homelab-deploy listener for NATS-based deployments";
  };

  config = {
    assertions = [
      {
        assertion = config.homelab.deploy.enable -> config.vault.enable;
        message = "homelab.deploy.enable requires vault.enable to be true (needed for NKey secret)";
      }
    ];
  };
}