grimm-nixos-laptop/secrets/secrets.nix

let
  laptop_pub = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy7X5ByG4/9y2XkQSnXcpMGnV5WPGUd+B6FaYCDNmPQ7xIZEteS+kCpu9oiMP6C/H/FT+i9DZvCflkzgdFAyujYLKRYaZbZ3K6F60qN0rkJ0z/ZO5c6rqwIwR6BEoB7dq5inkyH9fZ8/SI+PXxELmeWF9ehT7kkQC+o9Ujpcjd7ZuZllbAz4UQZFRbbpwdVJCEDenu9/63yuYbvMupgGk0edaTiFT0Q9MSzs/3pNP8xlAxmmZ3HzSjeF7gUzBF7CaIroTeguiUjSVybUEx48P8fy878t7dUZf4anEno9MS0B3aqfZvCKuuPdAUdeBfCbFHRqN7GuCylFIXGPe95Mxl grimmauld@grimmauld-nixos";
  laptop_pub_ed = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhM1Fk5ix4OZAdlfCxL891KxeEKpyIFrP5yYkC9mg7E grimmauld@grimmauld-nixos";

  # obtained with `ssh-keyscan [ip]`
  contabo_nix_pub = "ssh-rsa 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";
in
{
  "nextcloud_pass.age".publicKeys = [
    laptop_pub
    laptop_pub_ed
  ];

  # "duckdns_token.age".publicKeys = [ contabo_nix_pub ];
  "synapse_db_pass.age".publicKeys = [ contabo_nix_pub ];
  "openldap_admin.age".publicKeys = [ contabo_nix_pub ];
  "keycloak_db_pass.age".publicKeys = [ contabo_nix_pub ];

  "synapse_db_pass_prepared.age".publicKeys = [ contabo_nix_pub ];
  "grafana_admin_pass.age".publicKeys = [ contabo_nix_pub ];
  "nextcloud_admin_pass.age".publicKeys = [ contabo_nix_pub ];
  "nextcloud_db_pass.age".publicKeys = [ contabo_nix_pub ];
  "synapse_registration_shared_secret.age".publicKeys = [ contabo_nix_pub ];
  "matrix_admin_pass.age".publicKeys = [ contabo_nix_pub ];
  "matrix_mjolnir_pass.age".publicKeys = [ contabo_nix_pub ];
  "matrix_mjolnir_tle_pass.age".publicKeys = [ contabo_nix_pub ];
  "matrix_discord_bridge_token.age".publicKeys = [ contabo_nix_pub ];
  "ptero_env.age".publicKeys = [ contabo_nix_pub ];
}