nix-config/secrets/secrets.nix

let
  yk_nano = "age1yubikey1qt8fc7u5lxhcqcxh6600fu2mmytaqrw3qeyak4z35dyucjdstk52ze9v47j";
  yk_nfc = "age1yubikey1qg28ggmlelfvl7wuyve2mdxvj55q8j9879gakpesczra83l33vugcdr96g6";
  capibara = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAEfm3I/CAHARsvbiqemh6UYPFocE7D3NnwSqcbIc48q";
in
{
  "capibara/ssh_host_ed25519_key.age".publicKeys = [ yk_nano yk_nfc capibara ];
  "user-passwordfiles/root.age".publicKeys = [ yk_nano yk_nfc capibara ];
  "user-passwordfiles/rilla.age".publicKeys = [ yk_nano yk_nfc capibara ];
  "cache-priv-key.age".publicKeys = [ yk_nano yk_nfc capibara ];
}