let
  # keep-sorted start
  desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
  laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeu5HwuRayiXIZE35AxX6PmxHxbXZ8NTlTgHrcPwhcQ";
  srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8";
  # keep-sorted end

  users = [
    # keep-sorted start
    desktop
    laptop
    srv
    # keep-sorted end
  ];
in
{
  # keep-sorted start
  "bazarr.age".publicKeys = users;
  "borgmatic-ntfy.age".publicKeys = users;
  "borgmatic-pg.age".publicKeys = users;
  "borgmatic.age".publicKeys = users;
  "copyparty.age".publicKeys = users;
  "firefly-db.age".publicKeys = users;
  "firefly.age".publicKeys = users;
  "immich.age".publicKeys = users;
  "jellyfin.age".publicKeys = users;
  "karakeep.age".publicKeys = users;
  "kavita-api.age".publicKeys = users;
  "kavita.age".publicKeys = users;
  "lidarr.age".publicKeys = users;
  "miniflux-creds.age".publicKeys = users;
  "nzbget.age".publicKeys = users;
  "paperless.age".publicKeys = users;
  "porkbun-api.age".publicKeys = users;
  "protonmail-cert.age".publicKeys = users;
  "protonmail-desktop-password.age".publicKeys = users;
  "protonmail-laptop-password.age".publicKeys = users;
  "prowlarr.age".publicKeys = users;
  "radarr.age".publicKeys = users;
  "radicale.age".publicKeys = users;
  "readarr.age".publicKeys = users;
  "sonarr.age".publicKeys = users;
  "upbank2firefly.age".publicKeys = users;
  "vaultwarden-admin.age".publicKeys = users;
  # keep-sorted end
}