let
  users.winston = "age1yubikey1qfkn095xth4ukxjye98ew4ul6xdkyz7sek0hd67yfjs5z6tv7q9jgnfchls";
  systems.main-node = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFcY5fuyxK8rs3eocLuLnvSPDL6qcvq7oUdYrE+wLj0y";

  default = [
    users.winston
    systems.main-node
  ];
in
{
  "containers/faerber.env.age".publicKeys = default;
  "containers/ghcr-token.age".publicKeys = default;

  "lego/porkbun-credentials.age".publicKeys = default;

  "services/attic/atticd.env.age".publicKeys = default;

  "services/freshrss/admin-credentials.age".publicKeys = default;

  "services/forgejo/hcaptcha-secret.age".publicKeys = default;
  "services/forgejo/minio-secretkey.age".publicKeys = default;
  "services/forgejo/password-database.age".publicKeys = default;
  "services/forgejo/runner-token.age".publicKeys = default;

  "services/geoipupdate/license.age".publicKeys = default;

  "services/minio/root-credentials.age".publicKeys = default;

  "services/nextcloud/admin-password.age".publicKeys = default;
  "services/nextcloud/s3-secret.age".publicKeys = default;

  "services/prometheus/minio-bearer-token.age".publicKeys = default;

  "services/renovate/git-private-key.age".publicKeys = default;
  "services/renovate/token.age".publicKeys = default;

  "services/wakapi/password-salt.env.age".publicKeys = default;

  "system/password-root.age".publicKeys = default;
  "system/password-winston.age".publicKeys = default;
}