let
  keys = import ./keys.nix;

  inherit (keys) allAdmins allSystems;
  inherit (keys.system)
    renard
    lapin
    corsac
    fourmi
    taupe
    truite
    taureau
    ;
in
{
  "binary-cache-key.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "cloudflare-dns.age".publicKeys = allSystems ++ allAdmins;

  "pds-secrets.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "continuwuity-registration-token.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "agent/environment.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "agent/private-key.age".publicKeys = allSystems ++ allAdmins;

  "mullvad-gluetun.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "internal-tls.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "password.age".publicKeys = allSystems ++ allAdmins;

  "wireless-secrets.age".publicKeys = [
    corsac
    fourmi
  ] ++ allAdmins;

  "wg-private-key.age".publicKeys = [
    truite
    taureau
    taupe
  ] ++ allAdmins;

  "tunnel/egress-key-taureau.age".publicKeys = [
    taureau
  ] ++ allAdmins;

  "tunnel/egress-key-taupe.age".publicKeys = [
    taupe
  ] ++ allAdmins;
}