{ env }:
rec {
  keys."webapps/tools-csp-reports.conf" = {
    user = "wwwrun";
    group = "wwwrun";
    permissions = "0400";
    text = with env.postgresql; ''
      env[CSP_REPORT_URI] = "host=${socket} dbname=${database} user=${user} password=${password}"
    '';
  };
}