{ machine, ... }: {
  age = {
    identityPaths = [ "/root/age_ed25519" ];

    secrets = {
      "host_ed25519".file = ./secrets/${machine.name}_host_ed25519.age;
      "user_ed25519".file = ./secrets/${machine.name}_user_ed25519.age;
    };
  };
}