let
  alyssum = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAp00i2DTwMk9i2WBEwpNTDA51TQJEqzpyCka6znmRzR";
  anemone = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEPFifSAybe97xDP/cq6AAjy7Fm0go0dtQ9ICK6JRUgc";
  blossom = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA5wfPCcpkNR3ubr7cBV0UwVCDo/sMmV0aI/JOJTIxQj";
  dandelion = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUk99ku7+eiIO7Q9sIPlPx3GiUljLv7W404W/zwrtzI";
  hazel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ6mi50ecrrMIn5C4QUyCjPHfSElz0mhevvFCznUzIrK";

  rin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPru5eTBvHJ4ZmrrzPRHCGM09wQP/ZHSaKYalDuBVO15";
in {
  "secrets/passwd.age".publicKeys = [ alyssum anemone blossom rin ];
  "secrets/passwd_smbcilly.age".publicKeys = [ alyssum rin ];
  "secrets/passwd_smbkujira.age".publicKeys = [ alyssum rin ];
  "secrets/wpa_conf.age".publicKeys = [ alyssum blossom rin ];

  "secrets/acme_dns.age".publicKeys = [ alyssum dandelion hazel rin ];
  "secrets/navidrome_env.age".publicKeys = [ alyssum dandelion rin ];
  "secrets/slskd_env.age".publicKeys = [ anemone dandelion rin ];
  "secrets/tailscale_auth.age".publicKeys = [ alyssum anemone blossom dandelion rin ];
  "secrets/warden_admin.age".publicKeys = [ rin ];
  "secrets/wg_anemone.age".publicKeys = [ anemone rin ];
  "secrets/wg_dandelion.age".publicKeys = [ dandelion rin ];
  "secrets/wg_hazel.age".publicKeys = [ hazel rin ];
  "secrets/wg_hyacinth.age".publicKeys = [ blossom rin ];
  "secrets/wg_caramel.age".publicKeys = [ rin ];
}