let
  # Remember to pass '--identity identities/me.txt` when using this key
  users.me = "age1yubikey1qdwgvfqrcqmyw56ux7azuvqr6f8nanszu27nztvxmn4utmplgxctzt90g25";

  machines = {
    gospel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGDzjXVoQEfO9JIcFbp56EvQ0oBdr9Cmhxp4z0ih+ZEZ";
    node = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIETLBnc8kJokmFiA28BaSYpeE7flY1W0SM5C1pWv/tOv";
    pi4 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9fnNXzEmDdmtR+KWj/M9vQioFR0s/4jMnIkUFcj8As";
  };
in {
  "cf_dns_kilonull.age".publicKeys = [users.me machines.node machines.gospel machines.pi4];
  "nextcloud_admin.age".publicKeys = [users.me machines.node machines.gospel];
  "theengs_ble_mqtt.age".publicKeys = [users.me machines.pi4 machines.gospel];
  "hass_mqtt.age".publicKeys = [users.me machines.pi4 machines.node machines.gospel];
  "teslamate_db.age".publicKeys = [users.me machines.node machines.gospel];
  "teslamate_mqtt.age".publicKeys = [users.me machines.pi4 machines.node machines.gospel];
  "teslamate_encryption.age".publicKeys = [users.me machines.node machines.gospel];
  "hydra-aws-creds.age".publicKeys = [users.me machines.gospel];
}