let
  # keep-sorted start
  desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
  laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOmM4LEjGPJbcUeG5363NpB3XJUyn/4B+eBCFzzuC/Td";
  srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8";
  # keep-sorted end

  users = [
    # keep-sorted start
    desktop
    laptop
    srv
    # keep-sorted end
  ];
in
{
  # keep-sorted start
  "borgbackup-offsite.age".publicKeys = users;
  "borgbackup-onsite.age".publicKeys = users;
  "copyparty.age".publicKeys = users;
  "forgejo-read-token.age".publicKeys = users;
  "gatus.age".publicKeys = users;
  "git_signing_key.age".publicKeys = users;
  "git_signing_key.pub.age".publicKeys = users;
  "immich.age".publicKeys = users;
  "jellyfin.age".publicKeys = users;
  "kavita-api.age".publicKeys = users;
  "kavita.age".publicKeys = users;
  "lidarr.age".publicKeys = users;
  "mealie.age".publicKeys = users;
  "miniflux-creds.age".publicKeys = users;
  "ntfy.age".publicKeys = users;
  "nzbget.age".publicKeys = users;
  "paperless.age".publicKeys = users;
  "porkbun-api.age".publicKeys = users;
  "protonmail-cert.age".publicKeys = users;
  "protonmail-desktop-password.age".publicKeys = users;
  "prowlarr.age".publicKeys = users;
  "radarr.age".publicKeys = users;
  "radicale.age".publicKeys = users;
  "readarr.age".publicKeys = users;
  "sonarr.age".publicKeys = users;
  "subtitles.age".publicKeys = users;
  "vaultwarden-admin.age".publicKeys = users;
  # keep-sorted end
}