let
  # user
  lzebulon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCR6uatrqbCViftPwQ17JNVN8KBC02sPAOu+uRKGhLR lzebulon@archframe";

  # server
  hyponix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEjC/mgb1mf/F1RPaUECNbW0cK4kPQaJ47eKVybZhqf root@hyponix";
in
let
  admins = [ lzebulon ];
  physiques = [ hyponix ];
  servers = [ hyponix ];
in
{
  "secrets/services/forgejo/forgejo-runner-token-1.age".publicKeys = admins ++ [ hyponix ];
  "secrets/services/searxng.age".publicKeys = admins ++ [ hyponix ];
  "secrets/services/wireguard/wg-key-hyponix.age".publicKeys = admins ++ [hyponix];
}