let
  vancouver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC30kDkktiWJGaJEIrqgneQx1SmIYUEVPm7w1F9p//CB";
  monitoring = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDtzsbxKgZ/NBYlYO2EJQZhBy3nVBVERWebbsP9mLcy";
  machines = [ vancouver monitoring ];

  gsimmer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILIztwQxt+jqroFONSgq+xzPMuE2I5Dq/zWPQ8RcTYJr gabriel@gitgalaxy.com";
  users = [ gsimmer ];
in
{
  "secrets/vancouver-action-runner.age".publicKeys = [ vancouver gsimmer ];
  "secrets/vancouver-restic-b2.age".publicKeys = [ vancouver gsimmer ];
  "secrets/vancouver-restic-password.age".publicKeys = [ vancouver gsimmer ];
  "secrets/monitoring-healthchecks-secret.age".publicKeys = [ monitoring gsimmer ];
  "secrets/monitoring-healthchecks-ro.age".publicKeys = [ monitoring gsimmer ];
  "secrets/monitoring-prometheus-webconfig.age".publicKeys = [ monitoring gsimmer ];
  "secrets/monitoring-prometheus-password.age".publicKeys = [ monitoring gsimmer ];
  "secrets/healthchecks-ping.sh.age".publicKeys = machines ++ users;
  "secrets/fastmail-smtp.age".publicKeys = machines ++ users;
  "secrets/healthchecks-telegram.age".publicKeys = [ monitoring gsimmer ];
  "secrets/cloudflare-dns.age".publicKeys = machines ++ users;
}