nixos-servers/secrets/secrets.nix

let
  pkgs = import <nixpkgs> { };
  lib = pkgs.lib;
  secrets = {
    jefke = {
      publicKeys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIJUSH2IQg8Y/CCcej7J6oe4co++6HlDo1MYDCR3gV3a pim@x260"
      ];
      encryptedFiles = [
        "jefke_host_ed25519.age"
        "jefke_user_ed25519.age"
        "postgresql_server.key.age"
      ];
    };
    atlas = {
      publicKeys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKZ1OGe8jLyc+72SFUnW4FOKbpqHs7Mym85ESBN4HWV7 pim@x260"
      ];
      encryptedFiles = [
        "atlas_host_ed25519.age"
        "atlas_user_ed25519.age"
      ];
    };
  };
in lib.attrsets.mergeAttrsList (builtins.map ({ publicKeys, encryptedFiles }:
  lib.attrsets.mergeAttrsList (builtins.map
    (encryptedFile: { "${encryptedFile}" = { inherit publicKeys; }; })
    encryptedFiles)) (lib.attrsets.attrValues secrets))