let
  wsl-desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhbz4AlnRrRNvUwlYd5siMTuvgvSwlJ21Tq54OA20ID reudy@DESKTOP-40EVMS3";
  termux-phone = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJahgKnADam4PGc9TiANkWGx09uNuS42tllj70UuyzPf u0_a279@localhost";
  bash-nixos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAP6gemgKZVguFi6Diif+dBbMAZQupimeV9OQuUotlw vps-manual";
  users = [ wsl-desktop termux-phone bash-nixos ];

  nixos-vps = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjPVQpFlKGbDNqOVvKAFRExKHAAkKSAqKabDSMtJsth";
  systems = [ nixos-vps ];
in
{
  "secrets/lilsecret.age".publicKeys = users ++ systems;

  # Authelia secrets - all three are required
  "secrets/authelia-jwt-secret.age".publicKeys    = users ++ systems;
  "secrets/authelia-storage-key.age".publicKeys   = users ++ systems;
  "secrets/authelia-session-secret.age".publicKeys = users ++ systems;
  # The hashed users database (contains bcrypt-hashed passwords)
  "secrets/authelia-users.age".publicKeys         = users ++ systems;
}