···15151616 all = (builtins.attrValues users) ++ (builtins.attrValues systems);
17171818- # Until the server key is added above, PDS secrets are encrypted for ewan
1818+ # Until the server key is added above, secrets are encrypted for ewan
1919 # only (so rekeying works from the macmini/laptop today).
2020- # After adding the server key, change this to: [ users.ewan systems.server ]
2121- pdsKeys = [ users.ewan ];
2020+ # After adding the server key, change these to: [ users.ewan systems.server ]
2121+ pdsKeys = [ users.ewan ];
2222 matrixKeys = [ users.ewan ];
2323+ forgejoKeys = [ users.ewan ];
2324in
2425{
2526 # Network credentials
···3637 "age/matrix.env.age".publicKeys = matrixKeys;
3738 "age/cloudflare.token.age".publicKeys = matrixKeys;
3839 "age/cf-tunnel.json.age".publicKeys = matrixKeys;
4040+ "age/forgejo.env.age".publicKeys = forgejoKeys;
3941}