let
  keys = import ./keys.nix;

  inherit (keys) allAdmins allSystems;
  inherit (keys.system)
    renard
    lapin
    taupe
    corsac
    fourmi
    zibeline
    ;
in
{
  "binary-cache-key.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "cloudflare-dns.age".publicKeys = allSystems ++ allAdmins;

  "pds-secrets.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "conduwuit-registration-token.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "pia-login-secrets.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "internal-tls.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "password.age".publicKeys = allSystems ++ allAdmins;

  "wireless-secrets.age".publicKeys = [
    corsac
    fourmi
  ] ++ allAdmins;

  "wireguard-private-key.age".publicKeys = [
    taupe
    zibeline
  ] ++ allAdmins;
}