let
  dnsc-air = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvXWZOPOJJDAoF+Sx/ZLoAVu6G/7/MAWoknBgMAzjul dennis@dnsc-mac";
  dnsc-vps-sm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF/sUA38t7TI1LYADLBn898Hh0MTR4maiHVwEtDoN9W5 dnsc-vps-sm";
  dnsc-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM3mkEgvHrwjsEReHQHpLbMP71JLvp6XxMPyW7PTaLCd dennis@dnsc-server";
  dnsc-vps-sm-r = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCIgMI4LjpYuVcFEhSM3VIYvOEb94jW/fJS+HZwPog8 root@dnsc-vps-sm";
  systems = [
    dnsc-air
    dnsc-vps-sm
    dnsc-vps-sm-r
    dnsc-server
  ];
in
{
  # Add like this: "secret1.age".publicKeys = systems;
  "vaultwarden/env.age".publicKeys = systems;
  "restic/password.age".publicKeys = systems;
  "forgejo/mail-password.age".publicKeys = systems;
}

# 1. Create a file with secret
# nix run github:ryantm/agenix -- -e $FILE_PATH
#
# 2. Reference the file in NixOS config:
# {
#  age.secrets.secret1.file = ../secrets/secret1.age;
# }
#
# 3. And use it like this:
# passwordFile = config.age.secrets.secret1.path;