helm/secrets/secrets.nix

let
  # set ssh public keys here for your system and user
  user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWRHhK0G9KOWkWq84QAchpM3FvQzBh9+Xfocxv3i1fP anish@curve";
  system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILllBPaVqRPvMn450rsunqsv1cgT1HQjMGnnCDCwsBU/ root@curve";
  mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box";
  sealight = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf";
  curve = [ system user ];
  allKeys = [ system user mossnet sealight ];
  systemOnly = [ system mossnet sealight ];
in
{
  "fastmail.age".publicKeys = allKeys;
  "mossnet.age".publicKeys = allKeys;
  "curve-wg.age".publicKeys = curve;
  "box-wg.age".publicKeys = [ mossnet ];
  # "wallabag.age".publicKeys = [ mossnet ];
  # "gitea.age".publicKeys = [ sealight ];
  # "synapse.age".publicKeys = [ sealight ];
  "borg-password.age".publicKeys = systemOnly;
}