config/secrets/secrets.nix

let
  max = (import ../users/max/userinfo.nix null).sshKeys;
  hosts = import ../hosts;
  systemKeys = x: x.ssh.id.publicKey or null;
in with hosts;
{
  "builder_key.age".publicKeys = max ++ map systemKeys [ TITAN jericho ];
  "cachix-upload-key.age".publicKeys = max ++ map systemKeys [ TITAN ];
  "hyprspace-key-TITAN.age".publicKeys = max ++ map systemKeys [ TITAN ];
  "hyprspace-key-jericho.age".publicKeys = max ++ map systemKeys [ jericho ];
  "ipfs-cluster-secret.age".publicKeys = max ++ map systemKeys [ TITAN ];
  "transmission-rpc-password.age".publicKeys = max ++ map systemKeys [ TITAN ];
  "wireguard-key-upload.age".publicKeys = max ++ map systemKeys [ TITAN ];
  "secure-boot-private-key-jericho.age".publicKeys = max ++ map systemKeys [ jericho ];
  "shadow-max.age".publicKeys = max ++ map systemKeys [ TITAN jericho ];
}