let
  # see `modules/age/default.nix` where these are defined
  pinwheel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMoI7Q4zT2AGXU+i8fLmzcNLdfMkEnfHYh4PmaEmo2QW root@pinwheel";
  backwards = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBcTK3CUtTsgavuLlbfOqCbHYLtUrIKqnSqYmtzGCZnv root.backwards";
  sombrero = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO/NltCo1L+X1OIBfIKzfrbxLpCOerQ4vTIs+QPTXkf/ root@sombrero";
  tadpole = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbyj/vYafqpJH33jFz5HV+gwCiEIJTpxKrEFrBWx73A root@tadpole";
  alex = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTgiHYcdhS87pPnduLunZVEgLVj4EtbG9XVSZP1l5s5 alex";
in {
  "pinwheel/syncthing-cert.age".publicKeys = [ pinwheel alex ];
  "pinwheel/syncthing-key.age".publicKeys = [ pinwheel alex ];
  "pinwheel/mullvad-device.age".publicKeys = [ pinwheel alex ];
  "pinwheel/mullvad-account-history.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-backwards.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-backwards.pub.age".publicKeys = [ pinwheel backwards alex ];
  "pinwheel/alex.pinwheel-sombrero.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-sombrero.pub.age".publicKeys = [ pinwheel sombrero alex ];
  "pinwheel/alex.pinwheel-tadpole.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-tadpole.pub.age".publicKeys = [ pinwheel tadpole alex ];
  "pinwheel/alex.pinwheel-github.com.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-github.com.pub.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-andromeda.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-andromeda.pub.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-codeberg.org.age".publicKeys = [ pinwheel alex ];
  "pinwheel/alex.pinwheel-codeberg.org.pub.age".publicKeys = [ pinwheel alex ];

  "pinwheel/work-gitconfig.age".publicKeys = [ pinwheel alex ];
  "pinwheel/work-github-token.age".publicKeys = [ pinwheel alex ];
  "pinwheel/work-go-private.age".publicKeys = [ pinwheel alex ];
  "pinwheel/work-staging-ovpn.age".publicKeys = [ pinwheel alex ];
  "pinwheel/work-production-ovpn.age".publicKeys = [ pinwheel alex ];

  "backwards/root.backwards.age".publicKeys = [ backwards alex ];
  "backwards/root.backwards.pub.age".publicKeys = [ backwards alex ];
  "backwards/syncthing-cert.age".publicKeys = [ backwards alex ];
  "backwards/syncthing-key.age".publicKeys = [ backwards alex ];
  "backwards/restic-password.age".publicKeys = [ backwards alex ];
  "backwards/alex.backwards-codeberg.org.age".publicKeys = [ backwards alex ];
  "backwards/alex.backwards-codeberg.org.pub.age".publicKeys = [ backwards alex ];
  "backwards/wpa_supplicant.conf.age".publicKeys = [ backwards alex ];

  "sombrero/syncthing-cert.age".publicKeys = [ sombrero alex ];
  "sombrero/syncthing-key.age".publicKeys = [ sombrero alex ];
  "sombrero/alex.sombrero-github.com.age".publicKeys = [ sombrero alex ];
  "sombrero/alex.sombrero-github.com.pub.age".publicKeys = [ sombrero alex ];
  "sombrero/alex.sombrero-codeberg.org.age".publicKeys = [ sombrero alex ];
  "sombrero/alex.sombrero-codeberg.org.pub.age".publicKeys = [ sombrero alex ];

  "tadpole/root.tadpole.age".publicKeys = [ tadpole alex ];
  "tadpole/root.tadpole.pub.age".publicKeys = [ tadpole alex ];
  "tadpole/alex.tadpole-codeberg.org.age".publicKeys = [ tadpole alex ];
  "tadpole/alex.tadpole-codeberg.org.pub.age".publicKeys = [ tadpole alex ];
  "tadpole/gitea-dbpassword.age".publicKeys = [ tadpole alex ];
}