infra/secrets/secrets.nix

let
  keys = import ../lib/keys.nix;
  authorizedKeys = [
    keys.users.gortium.main
    keys.hosts.lazyworkhorse.main
    keys.hosts.lazyworkhorse.bootstrap
    keys.users.hermes_agent.age
  ];
in
{
  "containers.env.age".publicKeys = authorizedKeys;
  "lazyworkhorse_host_ssh_key.age".publicKeys = authorizedKeys;
  "n8n_ssh_key.age".publicKeys = authorizedKeys;
  "openclaw_gateway_token.age".publicKeys = authorizedKeys;
}