let
  hosts = {
    vm-synology = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHKZAKlqOU6bSuMaaZAsYJdZnmNASWuIbbrrOjB6yGb8 root@vm-synology";
  };
  users = {
    fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t";
  };
in
{
  "users/fcuny/llm.age".publicKeys = [
    users.fcuny
  ];
  "users/fcuny/anthropic-api-key.age".publicKeys = [
    users.fcuny
  ];
  "restic_password.age".publicKeys = [
    users.fcuny
    hosts.vm-synology
  ];
  "restic_gcs_credentials.age".publicKeys = [
    users.fcuny
    hosts.vm-synology
  ];
  # run cloudflared tunnel token --cred-file foo.json cragmont
  "cloudflared_cragmont.age".publicKeys = [
    users.fcuny
    hosts.vm-synology
  ];
  "cloudflared_cert.age".publicKeys = [
    users.fcuny
    hosts.vm-synology
  ];
}