infra/config/secrets/secrets.nix

let
  users.winston = "age1yubikey1qfkn095xth4ukxjye98ew4ul6xdkyz7sek0hd67yfjs5z6tv7q9jgnfchls";
  systems.main-node = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFcY5fuyxK8rs3eocLuLnvSPDL6qcvq7oUdYrE+wLj0y";

  default = [users.winston systems.main-node];
in {
  "containers/faerber.env.age".publicKeys = default;
  "containers/ghcr-token.age".publicKeys = default;

  "lego/porkbun-credentials.age".publicKeys = default;

  "services/attic/atticd.env.age".publicKeys = default;

  "services/freshrss/admin-credentials.age".publicKeys = default;

  "services/gitea/password-database.age".publicKeys = default;
  "services/gitea/runner-token.age".publicKeys = default;

  "services/gitlab/dbFile.age".publicKeys = default;
  "services/gitlab/jwsFile.age".publicKeys = default;
  "services/gitlab/otpFile.age".publicKeys = default;
  "services/gitlab/secretFile.age".publicKeys = default;
  "services/gitlab/initialRootPasswordFile.age".publicKeys = default;
  "services/gitlab/runner-registration.age".publicKeys = default;

  "services/invidious/config.json.age".publicKeys = default;
  "services/invidious/password-database.age".publicKeys = default;

  "services/nextcloud/admin-password.age".publicKeys = default;

  "services/wakapi/password-salt.env.age".publicKeys = default;

  "system/password-root.age".publicKeys = default;
  "system/password-winston.age".publicKeys = default;
}