let
  leah           = "age1mn57hntgx775kwcwx4jrrd7rfl7z4wl54kqtgq8w2kzg7agz7alsv5eesw";

  blechkasten    = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZLQ6jDcRGjUy7eyDHF0WHDquxGb6aP93d9w8trEZZE";
  coladose       = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/GoIIFuo54vAGA9QK2/HLjIlhNOpCGYu7xqhQaYd5u";

  #servers
  briefkasten    = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN8mi9ZKPdhn20g9gyxE7NYBq/vAKemW4lhaQlLw5QVc";

  trabbi          = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwzDl1dHpDIZxFfRBLQyFn85RVTsg7OgO3Eahdn3FTJ";
  wanderduene-old = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEff3QkAesMYwquc49H5e2CjRH9Dv50/DjzqpCw97lPQ";
  wanderduene     = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8uAvUnwhg3pnCdaaoclWDKV275SyNSyrkJON+R5Boi";

in {
  "passwords/leah-at-f2k1-de.age".publicKeys                        = [ leah trabbi wanderduene wanderduene-old briefkasten ];
  "passwords/leah.age".publicKeys                                   = [ leah trabbi wanderduene wanderduene-old briefkasten coladose ];

  "restic-server/briefkasten.age".publicKeys                        = [ leah trabbi briefkasten ];
  "restic-server/wanderduene.age".publicKeys                        = [ leah trabbi briefkasten ];


  "blechkasten/syncthing/key.age".publicKeys                        = [ leah blechkasten ];
  "blechkasten/syncthing/cert.age".publicKeys                       = [ leah blechkasten ];

  "coladose/syncthing/key.age".publicKeys                           = [ leah coladose ];
  "coladose/syncthing/cert.age".publicKeys                          = [ leah coladose ];

  "briefkasten/syncthing/key.age".publicKeys                        = [ leah briefkasten ];
  "briefkasten/syncthing/cert.age".publicKeys                       = [ leah briefkasten ];
  "briefkasten/syncthing/htpasswd.age".publicKeys                   = [ leah briefkasten ];

  "briefkasten/influx/grafana_token_mqttData.age".publicKeys        = [ leah briefkasten trabbi ];
  "briefkasten/influx/grafana_token_solaxData.age".publicKeys       = [ leah briefkasten trabbi ];
  "briefkasten/influx/telegraf_token_mqttData.age".publicKeys       = [ leah briefkasten ];
  "briefkasten/influx/telegraf_token_solaxData.age".publicKeys      = [ leah briefkasten ];
  "briefkasten/influx/master_token.age".publicKeys                  = [ leah briefkasten ];
  "briefkasten/influx/backup_env.age".publicKeys                    = [ leah briefkasten ];

  "briefkasten/mosquitto/passwd-leah.age".publicKeys                = [ leah briefkasten ];
  "briefkasten/mosquitto/passwd-nrw.age".publicKeys                 = [ leah briefkasten ];

  "briefkasten/zigbee2mqtt/secrets.age".publicKeys                  = [ leah briefkasten ];
  "briefkasten/zigbee2mqtt/htpasswd.age".publicKeys                 = [ leah briefkasten ];

  "briefkasten/telegraf/secrets.env.age".publicKeys                 = [ leah briefkasten ];

  "briefkasten/wireguard-privkey.age".publicKeys                    = [ leah briefkasten ];
  "briefkasten/gotosocial-env.age".publicKeys                       = [ leah briefkasten ];
  "briefkasten/restic-server-htpasswd.age".publicKeys               = [ leah briefkasten ];

  "briefkasten/restic/gotosocial.age".publicKeys                    = [ leah briefkasten ];
  "briefkasten/restic/influxdb.age".publicKeys                      = [ leah briefkasten ];

  "briefkasten/restic/syncthing-audiobooks-orig.age".publicKeys     = [ leah briefkasten ];
  "briefkasten/restic/syncthing-audiobooks.age".publicKeys          = [ leah briefkasten ];
  "briefkasten/restic/syncthing-documents.age".publicKeys           = [ leah briefkasten ];
  "briefkasten/restic/syncthing-music-orig.age".publicKeys          = [ leah briefkasten ];
  "briefkasten/restic/syncthing-music.age".publicKeys               = [ leah briefkasten ];
  "briefkasten/restic/syncthing-pictures.age".publicKeys            = [ leah briefkasten ];
  "briefkasten/restic/syncthing-media.age".publicKeys               = [ leah briefkasten ];
  "briefkasten/restic/syncthing-windoofs.age".publicKeys            = [ leah briefkasten ];

  "briefkasten/restic/syncthing-bahn-richtlinien.age".publicKeys    = [ leah briefkasten ];
  "briefkasten/restic/syncthing-blechelse.age".publicKeys           = [ leah briefkasten ];
  "briefkasten/restic/syncthing-cutieshare.age".publicKeys          = [ leah briefkasten ];
  "briefkasten/restic/syncthing-wiki.age".publicKeys                = [ leah briefkasten ];


  "trabbi/restic/mail.age".publicKeys                               = [ leah trabbi ];
  "trabbi/restic/matrix-synapse.age".publicKeys                     = [ leah trabbi ];
  "trabbi/restic/radicale.age".publicKeys                           = [ leah trabbi ];
  "trabbi/restic/ctucx-things.age".publicKeys                       = [ leah trabbi ];
  "trabbi/restic/gitolite.age".publicKeys                           = [ leah trabbi ];
  "trabbi/restic/vaultwarden.age".publicKeys                        = [ leah trabbi ];
  "trabbi/restic/gotosocial.age".publicKeys                         = [ leah trabbi ];

  "trabbi/radicale-users.age".publicKeys                            = [ leah trabbi ];
  "trabbi/travelynx2fedi-env.age".publicKeys                        = [ leah trabbi ];
  "trabbi/vaultwarden-secrets.age".publicKeys                       = [ leah trabbi ];

  "trabbi/matrix-synapse/registration_shared_secret.age".publicKeys = [ leah trabbi ];
  "trabbi/matrix-synapse/sliding-sync-env.age".publicKeys           = [ leah trabbi ];
  "trabbi/matrix-synapse/s3_secrets.age".publicKeys                 = [ leah trabbi ];

  "trabbi/mail/password-leah-ctu.cx.age".publicKeys                 = [ leah trabbi ];
  "trabbi/mail/password-vaultwarden-ctu.cx.age".publicKeys          = [ leah trabbi ];
  "trabbi/mail/password-mail-zug.network.age".publicKeys            = [ leah trabbi ];


  "wanderduene/wireguard-privkey.age".publicKeys                    = [ leah wanderduene ];
  "wanderduene/restic-server-htpasswd.age".publicKeys               = [ leah wanderduene ];
  "wanderduene/rclone-config.age".publicKeys                        = [ leah wanderduene ];

}