let
  APPA = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGvQbYHiB17BfsvHBgPYJN50Th+da+rtbsTIjOSaT+1Y root@APPA";
  gandalf_at_appa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFrE1fMXjJXI8f1mKvhLquwSsb4tvLh5Tq0n+yOakQks gandalf@appa.dryb.com";

  MOMO = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQ8YOOaQj3NnMlTjlFX9iWDIpPMrO2W4EkL65GJP+y4 root@MOMO";

  T430 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGPQKzUqdLY58tFTB5zOeiTjbbrDvHA1speD/Rg6oOfz root@T430";
  IROH = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFYiK3Dl8QvAZfY7Cl1OlF9aXKa/an32mtrCNkavlSNG root@IROH";

  gandalf = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAOG8Sja2i6nepkEkuxYdu86XbT9vS5uniBmZifSMZ0t jacob.bachmann@posteo.de";

  users = [
    gandalf_at_appa
    gandalf
  ];

  systems = [
    APPA
    MOMO
    T430
    IROH
  ];

  servers = [
    APPA
    MOMO
  ];

  clients = [
    T430
    IROH
  ];

in
{
  "environments/acme.age".publicKeys = users ++ servers;
  "environments/vaultwarden.age".publicKeys = users ++ servers;
  "keys/wireguard/dryborg/privatekey.age".publicKeys = users ++ clients;
  "keys/wireguard/dryborg/presharedkey.age".publicKeys = users ++ clients;
  "passwords/anki/admin.age".publicKeys = users ++ servers;
  "passwords/ddclient/cloudflare.age".publicKeys = users ++ servers;
  "passwords/gitea/db.age".publicKeys = users ++ servers;
  "passwords/nextcloud/admin.age".publicKeys = users ++ servers;
  "passwords/paperless/admin.age".publicKeys = users ++ servers;
}