let
  root = "age1g3hjfg8rsyaunsa63q73flxt0rnmqng5mvjk5qywsu0xjvuwq5rsmuxk35";
  fcuny = "age1keyvdhpspgqp4g5zjthdphau5q5qlt6fs0ex0wqnve66dmup9pzqn4sakj";
  backup = "age1fh4960rdrk4d7m4c5lwd3trvw9ylk09dvucj2gd2udy7d5cz2a0svcqws6";
in
{
  "wireguard_privatekey.age".publicKeys = [ root fcuny backup ];

  "syncthing/key.age" = {
    publicKeys = [ root fcuny backup ];
    owner = "fcuny";
  };

  "syncthing/cert.age" = {
    publicKeys = [ root fcuny backup ];
    owner = "fcuny";
  };

  "restic/repo-users.age" = {
    publicKeys = [ root fcuny backup ];
    owner = "fcuny";
  };

  "restic/ssh-key.age" = {
    publicKeys = [ root fcuny backup ];
    owner = "fcuny";
  };
}