bagel-infra/secrets.nix

let
  keys = import common/ssh-keys.nix;

  commonKeys = keys.users.delroth;

  secrets = with keys; {
    hydra-s3-credentials = [ machines.bagel-box ];
    hydra-ssh-key-priv = [ machines.bagel-box ];
  };
in
  builtins.listToAttrs (
    map (secretName: {
      name = "secrets/${secretName}.age";
      value.publicKeys = secrets."${secretName}" ++ commonKeys;
    }) (builtins.attrNames secrets)
  )