let
  # Remember to pass '--identity identities/me.txt` when using this key
  users.me = "age1yubikey1qdwgvfqrcqmyw56ux7azuvqr6f8nanszu27nztvxmn4utmplgxctzt90g25";

  machines = {
    gospel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGDzjXVoQEfO9JIcFbp56EvQ0oBdr9Cmhxp4z0ih+ZEZ";
    node = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIETLBnc8kJokmFiA28BaSYpeE7flY1W0SM5C1pWv/tOv";
    pi4 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9fnNXzEmDdmtR+KWj/M9vQioFR0s/4jMnIkUFcj8As";
  };
in {
  "cf_dns_kilonull.age".publicKeys = [users.me machines.node machines.gospel machines.pi4];
  "nextcloud_admin.age".publicKeys = [users.me machines.node];
  "theengs_ble_mqtt.age".publicKeys = [users.me machines.pi4];
  "hass_mqtt.age".publicKeys = [users.me machines.pi4 machines.node];
}