let
  io-user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcwF1yuWEfYGScNocEbs0AmGxyTIzGc4/IhpU587SJE";
  io-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCIrKJk5zWzWEHvLMPMK8T3PyeBjsCsqzxPN+OrXfhA";
  io = [
    io-user
    io-host
  ];

  rotterdam-user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1v3+q3EaruiiStWjubEJWvtejam/r41uoOpCdwJtLL";
  rotterdam-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7zAxgU8LNi5/O5XgoOcLKjbNMmO2S7jAuCI9Nr/V4v";
  rotterdam = [
    rotterdam-user
    rotterdam-host
  ];

  alexandria-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK95QueW+jp1ZmF299Xr3XkgHJ6dL7aZVsfWxqbOKVKA";
  alexandria = [ alexandria-host ];

  desktops = io ++ rotterdam;
  servers = alexandria;
  all-hosts = desktops ++ servers;
in
{
  "nextcloud-secrets.json.age".publicKeys = all-hosts;
  "nextcloud-adminpass.age".publicKeys = all-hosts;
  "cloudflare.age".publicKeys = all-hosts;
  "paperless.age".publicKeys = all-hosts;
}