flake.lock: Update

Flake lock file updates:

• Updated input 'catppuccin':
    'github:catppuccin/nix/32359bf226fe874d3b7a0a5753d291a4da9616fe' (2024-11-10)
  → 'github:catppuccin/nix/becc64812c8d6af24dedc2f75c5c63ebf778a115' (2024-11-28)
• Updated input 'disko':
    'github:nix-community/disko/5fd852c4155a689098095406500d0ae3d04654a8' (2024-11-14)
  → 'github:nix-community/disko/341482e2f4d888e3f60cae1c12c3df896e7230d8' (2024-11-27)
• Updated input 'dream2nix':
    'github:nix-community/dream2nix/44d41411686bc798876bd6d9f36a4c1143138d85' (2024-11-12)
  → 'github:nix-community/dream2nix/a8dac99db44307fdecead13a39c584b97812d0d4' (2024-11-21)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/4639038b0f5e66e7d0f3d103b8e44ded3ab7e337' (2024-11-14)
  → 'github:nix-community/emacs-overlay/ca218dbd42ae4b16bc4378a06f5f1310b69a32af' (2024-11-29)
• Updated input 'emacs-overlay/nixpkgs':
    'github:NixOS/nixpkgs/dc460ec76cbff0e66e269457d7b728432263166c' (2024-11-11)
  → 'github:NixOS/nixpkgs/4633a7c72337ea8fd23a4f2ba3972865e3ec685d' (2024-11-25)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/689fed12a013f56d4c4d3f612489634267d86529' (2024-11-12)
  → 'github:NixOS/nixpkgs/0c5b4ecbed5b155b705336aa96d878e55acd8685' (2024-11-27)
• Updated input 'git-hooks-nix':
    'github:cachix/git-hooks.nix/cd1af27aa85026ac759d5d3fccf650abe7e1bbf0' (2024-11-11)
  → 'github:cachix/git-hooks.nix/3308484d1a443fc5bc92012435d79e80458fe43c' (2024-11-19)
• Updated input 'homeManager':
    'github:nix-community/home-manager/35b055009afd0107b69c286fca34d2ad98940d57' (2024-11-13)
  → 'github:nix-community/home-manager/819f682269f4e002884702b87e445c82840c68f2' (2024-11-29)
• Updated input 'lanzaboote':
    'github:nix-community/lanzaboote/cef39a78679c266300874e7a7000b4da066228d4' (2024-11-04)
  → 'github:nix-community/lanzaboote/2f48272f34174fd2a5ab3df4d8a46919247be879' (2024-11-18)
• Updated input 'lix-eval-jobs':
    'git+https://git.lix.systems/lix-project/nix-eval-jobs?ref=refs/heads/main&rev=57ddb99e781d19704f8a84036f9890e6ca554c41' (2024-11-09)
  → 'git+https://git.lix.systems/lix-project/nix-eval-jobs?ref=refs/heads/main&rev=dfc286ca3dc49118c30d8d6205d6d6af76c62b7a' (2024-11-23)
• Updated input 'lix-eval-jobs/flake-parts':
    'github:hercules-ci/flake-parts/3d04084d54bedc3d6b8b736c70ef449225c361b1' (2024-10-01)
  → 'github:hercules-ci/flake-parts/506278e768c2a08bec68eb62932193e341f55c90' (2024-11-01)
• Updated input 'lix-eval-jobs/nix-github-actions':
    'github:nix-community/nix-github-actions/e04df33f62cdcf93d73e9a04142464753a16db67' (2024-10-24)
  → 'github:nix-community/nix-github-actions/7b5f051df789b6b20d259924d349a9ba3319b226' (2024-11-18)
• Updated input 'lix-eval-jobs/treefmt-nix':
    'github:numtide/treefmt-nix/aac86347fb5063960eccb19493e0cadcdb4205ca' (2024-10-22)
  → 'github:numtide/treefmt-nix/705df92694af7093dfbb27109ce16d828a79155f' (2024-11-22)
• Updated input 'lix-module':
    'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=691193879d96bdfd1e6ab5ebcca2fadc7604cf34' (2024-11-09)
  → 'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=15b999f9c958c475f71fb8c543b9fc2f36ae8730' (2024-11-26)
• Updated input 'lix-module/flake-utils':
    'github:numtide/flake-utils/c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a' (2024-09-17)
  → 'github:numtide/flake-utils/11707dc2f618dd54ca8739b309ec4fc024de578b' (2024-11-13)
• Updated input 'mobile-nixos':
    'github:NixOS/mobile-nixos/2268e358ed407d9c0a4499ae767d105eeaeec586' (2024-11-06)
  → 'github:NixOS/mobile-nixos/d6befd062162de8a70ae9943b76eb08204446f8a' (2024-11-27)
• Updated input 'nix-fast-build':
    'github:Mic92/nix-fast-build/8e7c9d76979381441facb8888f21408312cf177a' (2024-10-30)
  → 'github:Mic92/nix-fast-build/f51f479d001317204f1a47302db36473dc12fc8f' (2024-11-25)
• Updated input 'nixDarwin':
    'github:LnL7/nix-darwin/6c71c49e2448e51ad830ed211024e6d0edc50116' (2024-11-12)
  → 'github:LnL7/nix-darwin/6ab87b7c84d4ee873e937108c4ff80c015a40c7a' (2024-11-26)
• Updated input 'nixThePlanet':
    'github:MatthewCroughan/NixThePlanet/ef5fad336a55fcbb0680ad21aa58812b2f826435' (2024-11-09)
  → 'github:MatthewCroughan/NixThePlanet/00d07c86548805eab1bc0dac2f95fce8d7e9aac6' (2024-11-24)
• Updated input 'nixosHardware':
    'github:NixOS/nixos-hardware/f6581f1c3b137086e42a08a906bdada63045f991' (2024-11-12)
  → 'github:NixOS/nixos-hardware/45348ad6fb8ac0e8415f6e5e96efe47dd7f39405' (2024-11-24)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/dc460ec76cbff0e66e269457d7b728432263166c' (2024-11-11)
  → 'github:NixOS/nixpkgs/4633a7c72337ea8fd23a4f2ba3972865e3ec685d' (2024-11-25)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/746901bb8dba96d154b66492a29f5db0693dbfcc' (2024-10-30)
  → 'github:numtide/treefmt-nix/84637a7ab04179bdc42aa8fd0af1909fba76ad0c' (2024-11-26)

flake.lock

@@ -23,11 +23,11 @@
     },
     "catppuccin": {
       "locked": {
-        "lastModified": 1732703064,
+        "lastModified": 1732838231,
-        "narHash": "sha256-n8XOmn0WGtQhAMJKTnhL/3ttV2ZahPRf6gtlqZ6R4QE=",
+        "narHash": "sha256-KJTRqfEcGpONBK/6BkMdWmbGth0r/nYWY3k/rvZl4es=",
         "owner": "catppuccin",
         "repo": "nix",
-        "rev": "2e2bdecf0bae287d74947cd5cf967c5c499c23c1",
+        "rev": "becc64812c8d6af24dedc2f75c5c63ebf778a115",
         "type": "github"
       },
       "original": {
@@ -119,11 +119,11 @@
         "nixpkgs-stable": "nixpkgs-stable"
       },
       "locked": {
-        "lastModified": 1732784553,
+        "lastModified": 1732871643,
-        "narHash": "sha256-S3PiqgTS8ST07ihFDL2cPExoxHcd9I8ITecpgMz+s4M=",
+        "narHash": "sha256-YrjBqjdNvOSGtYDR4ijVqQwDB6fwhLx//p162TlrkzM=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "fb81e75180369a888db920df8f6097fbf2f603e9",
+        "rev": "ca218dbd42ae4b16bc4378a06f5f1310b69a32af",
         "type": "github"
       },
       "original": {
@@ -485,11 +485,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1732793095,
+        "lastModified": 1732884235,
-        "narHash": "sha256-6TrknJ8CpvSSF4gviQSeD+wyj3siRcMvdBKhOXkEMKU=",
+        "narHash": "sha256-r8j6R3nrvwbT1aUp4EPQ1KC7gm0pu9VcV1aNaB+XG6Q=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "2f7739d01080feb4549524e8f6927669b61c6ee3",
+        "rev": "819f682269f4e002884702b87e445c82840c68f2",
         "type": "github"
       },
       "original": {
@@ -871,11 +871,11 @@
     },
     "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1732632634,
+        "lastModified": 1732749044,
-        "narHash": "sha256-+G7n/ZD635aN0sEXQLynU7pWMd3PKDM7yBIXvYmjABQ=",
+        "narHash": "sha256-T38FQOg0BV5M8FN1712fovzNakSOENEYs+CSkg31C9Y=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6f6076c37180ea3a916f84928cf3a714c5207a30",
+        "rev": "0c5b4ecbed5b155b705336aa96d878e55acd8685",
         "type": "github"
       },
       "original": {

hmModules/chirp/default.nix

@@ -0,0 +1,8 @@
+{ pkgs, ... }:
+let
+in
+# nixpkgs = builtins.getFlake "github:NixOS/nixpkgs/932fc16b263f26803d3960e4400bc13dde84a972";
+# chirp = nixpkgs.legacyPackages.${pkgs.system}.chirp;
+{
+  home.packages = [ pkgs.chirp ];
+}

hmModules/emacs/init.el

@@ -123,9 +123,20 @@
 (use-package rainbow-delimiters
   :hook (prog-mode . rainbow-delimiters-mode))
 
+(use-package pulsar
+  :after (consult imenu)
+  :config
+  (pulsar-global-mode)
+  ;; TODO use :hook (I've tried but it didn't work, why?)
+  (add-hook 'consult-after-jump-hook #'pulsar-recenter-top)
+  (add-hook 'consult-after-jump-hook #'pulsar-reveal-entry)
+  (add-hook 'imenu-after-jump-hook #'pulsar-recenter-top)
+  (add-hook 'imenu-after-jump-hook #'pulsar-reveal-entry)
+  (add-hook 'next-error-hook #'pulsar-pulse-line)
+  )
+
 (use-package clipetty
   :delight
-  :ensure t
   :hook (after-init . global-clipetty-mode))
 
 (use-package nerd-icons)
@@ -158,7 +169,7 @@
   (indent-bars-color-by-depth '(:regexp "outline-\\([0-9]+\\)" :blend 0.4))
   (indent-bars-no-stipple-char (string-to-char "┋"))
   (indent-bars-prefer-character 't) ;; so it works also in terminal
-)
+  )
 
 (use-package diredfl
   :config (diredfl-global-mode))
@@ -263,7 +274,7 @@
    '("s" . meow-kill)
    '("t" . meow-till)
    '("u" . meow-undo)
-   '("U" . meow-undo-in-selection)
+   '("U" . vundo)
    '("/" . meow-visit)
    '("v" . meow-visit)
    '("w" . meow-mark-word)
@@ -378,7 +389,8 @@
          ("C-c F" . consult-ripgrep)
          ("C-c f" . consult-find)
 	 ("C-c l" . consult-line)
-           ("C-c m" . wconsult-mark)
+         ("C-c L" . consult-focus-lines)
+         ("C-c m" . consult-mark)
          ("C-c o o" . consult-outline)
          ("C-c e" . consult-flymake))
   :custom
@@ -387,7 +399,8 @@
 
 (use-package orderless
   :custom
-  (completion-styles '(orderless)))
+  (completion-styles '(orderless basic))
+  (completion-category-overrides '((file (styles basic partial-completion)))))
 
 (use-package embark
   :bind (("C-'" . embark-act)
@@ -550,6 +563,10 @@
   :hook ((lisp-mode . enable-paredit-mode)
 	 (emacs-lisp-mode . enable-paredit-mode)))
 
+(use-package aggressive-indent
+  :hook ((lisp-mode . aggressive-indent-mode)
+	 (emacs-lisp-mode . aggressive-indent-mode)))
+
 (use-package eldoc
   :delight)
 
@@ -560,7 +577,7 @@
   (eldoc-box-lighter "ElBox")
   :bind (("C-c h" . eldoc-box-help-at-point)))
 
-  (use-package diff-hl
+(use-package diff-hl
   :init
   (global-diff-hl-mode 1)
   (diff-hl-margin-mode 1))
@@ -652,17 +669,18 @@
 
 (use-package popper
   :custom
-  (popper-reference-buffers '("\*Messages\*"
+  (popper-reference-buffers
+   '("\*Messages\*"
      "Output\*$"
      "\\*Async Shell Command\\*"
      (completion-list-mode . hide)
      help-mode
      compilation-mode
-			      "^\\*Nix-REPL*\\*$" nix-repl-mode ;eshell as a popup
+     "^\\*Nix-REPL*\\*$" nix-repl-mode
-			      "^\\*.+-eshell.*\\*$" eshell-mode ;eshell as a popup
+     "^\\*.+-eshell.*\\*$" eshell-mode
-			      "^\\*shell.*\\*$" shell-mode	;shell as a popup
+     "^\\*shell.*\\*$" shell-mode
-			      "^\\*term.*\\*$" term-mode	;term as a popup
+     "^\\*term.*\\*$" term-mode
-			      "^\\*eat.*\\*$" eat-mode		;eat as a popup
+     "^\\*eat.*\\*$" eat-mode
      ))
   (popper-window-height 0.33)
   (popper-echo-lines 1)
@@ -762,7 +780,7 @@ This is meant to be an helper to be called from the window manager."
 				     (set-face-font 'org-modern-tag "Iosevka Comfy-14")
 				     (set-face-font 'org-modern-date-active "Iosevka Comfy-14")
 				     (set-face-font 'org-modern-date-inactive "Iosevka Comfy-14")))
-)
+  )
 
 (use-package org-roam
   :custom

hmModules/gpg/default.nix

@@ -3,7 +3,6 @@
   services.gpg-agent = {
     enable = true;
     enableSshSupport = true;
-    sshKeys = [ "CE2FD0D9BECBD8876811714925066CC257413416" ];
     extraConfig =
       let
         pinentryRofi = pkgs.writeShellApplication {

hosts/janeway/default.nix

@@ -46,7 +46,6 @@ in
       $DRY_RUN_CMD echo ${hosts.sisko} >> "${config.user.home}/.ssh/authorized_keys"
       $DRY_RUN_CMD echo ${hosts.kirk} >> "${config.user.home}/.ssh/authorized_keys"
       $DRY_RUN_CMD echo ${users.ccr-ssh} >> "${config.user.home}/.ssh/authorized_keys"
-      $DRY_RUN_CMD echo ${users.ccr-gpg} >> "${config.user.home}/.ssh/authorized_keys"
 
       if [[ ! -d "${sshdDirectory}" ]]; then
         $DRY_RUN_CMD rm $VERBOSE_ARG --recursive --force "${sshdTmpDirectory}"

hosts/picard/default.nix

@@ -90,6 +90,7 @@
       "libreoffice"
       "emacs"
       "vial"
+      "chirp"
     ];
     extraGroups = [ ];
     backupPaths = [ ];

lib/default.nix

@@ -1,7 +1,6 @@
 {
   keys = {
     users = {
-      ccr-gpg = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5cEUx25pnZiH3eBrE2xNbJ92gJiKSznDUNRzcEL4ti6FlJm+75p4q0hgdqHwStR8+uCWBL6viVFCGutOVMFE5MX1Oc3A8fJdR6H9Rrwvk/1UQzqzc9tWxw1qPLKz+fnPDomjOvNofghCWQRwX3Xf1HnIqvRwELpNbR9i+/cHkDGzLJxkstbt4gol8ywMPkw02QdKk8s5MEd1vawxc+7Chs0JPW57RDqDYFErYys52JLeAViCBB9bofF+KT42LuRXKSjWlvCV9kR5TL49vUeBgzMQWMh++WQdN4m9lpqFqYyc75I49/E0HGf8LChDSS+hvRnb5MbtnVGjEA4WDHyldmJCvUNob5CUo4FjoSPRi+S/J3Ads8D4JVwaJOJEVqmMKEhiQ0Hzk4hwe3eV/VumlZj4U/QjaCrqqi4TW/iP0gNRfzcfiM+G/z5R7w1NMUpTX7oilyKjMQmGnXB857D3SSptS7dwh5OiKhVmrQMRCduooUsj236abqLU28K//RnxhOgh8kDGgoUHApnTiMZNKhgLiR42lKrubNcW1tAAqoNyFLMwwXeMLjh0iP1b5y8ntfNPNIcGb7vcwpS24z/aIjW7rQ4J7x5EBphHGhys6ne+irdhOM8c7kFr+c8+Q2oU0YAtFuMYztAFOHm1e20X00Zvys2nuee+hT9F1NungAQ== andrea.ciceri@autistici.org";
       ccr-ssh = "ssh-rsa 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 andrea.ciceri@autistici.org";
       oneplus8t = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO8da1Mf11vXFF0kVDgxocVoGwpHHMEs9emS9T+v8hLb oneplus8t";
       hercules-ci-agent = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGPupm00BiveTIYF6CNwuMijF5VvEaPDMjvt+vMlAy+N hercules-ci-agent";

modules/adguard-home/default.nix

@@ -2,6 +2,7 @@
   services.adguardhome = {
     enable = true;
     port = 3000;
+    mutableSettings = true;
     settings = {
       openFirewall = true;
     };
@@ -11,4 +12,7 @@
     53
   ];
   networking.firewall.allowedUDPPorts = [ 53 ];
+  environment.persistence."/persist".directories = [
+    "/var/lib/AdGuardHome"
+  ];
 }

modules/forgejo-runners/default.nix

@@ -3,6 +3,7 @@
   config,
   pkgs,
   lib,
+  fleetFlake,
   ...
 }:
 let
@@ -24,6 +25,7 @@ let
         curl
         tea
         attic-client
+        fleetFlake.packages.${pkgs.system}.forgejo-report-checks
       ]
     }; do
       for bin in "$dir"/bin/*; do

modules/forgejo/default.nix

@@ -1,11 +1,35 @@
 {
   config,
+  pkgs,
+  lib,
   ...
 }:
+let
+  theme = pkgs.fetchzip {
+    url = "https://github.com/catppuccin/gitea/releases/download/v1.0.1/catppuccin-gitea.tar.gz";
+    hash = "sha256-et5luA3SI7iOcEIQ3CVIu0+eiLs8C/8mOitYlWQa/uI=";
+    stripRoot = false;
+  };
+in
 {
+  systemd.services = {
+    forgejo = {
+      preStart =
+        let
+          inherit (config.services.forgejo) stateDir;
+        in
+        lib.mkAfter ''
+          rm -rf ${stateDir}/custom/public/assets
+          mkdir -p ${stateDir}/custom/public/assets
+          ln -sf ${theme} ${stateDir}/custom/public/assets/css
+        '';
+    };
+  };
+
   services.forgejo = {
     # TODO migrate to Postgres
     enable = true;
+    package = pkgs.forgejo;
     settings = {
       DEFAULT = {
         RUN_MODE = "prod"; # set to prod for better logs (worse performance)
@@ -18,6 +42,7 @@
         HTTP_PORT = 3002;
         ROOT_URL = "https://git.aciceri.dev";
       };
+      federation.ENABLED = true;
       mailer = {
         ENABLED = true;
         PROTOCOL = "smtp+starttls";
@@ -29,6 +54,20 @@
       other = {
         SHOW_FOOTER_VERSION = false;
       };
+      ui = {
+        DEFAULT_THEME = "catppuccin-mocha-blue";
+        THEMES = builtins.concatStringsSep "," (
+          [ "auto,forgejo-auto,forgejo-dark,forgejo-light,arc-gree,gitea" ]
+          ++ (map (name: lib.removePrefix "theme-" (lib.removeSuffix ".css" name)) (
+            builtins.attrNames (builtins.readDir theme)
+          ))
+        );
+      };
+      "ui.meta" = {
+        AUTHOR = "Andrea Ciceri";
+        DESCRIPTION = "My personal git forge";
+        KEYWORDS = "git,self-hosted,forgejo,open-source,nix,nixos";
+      };
     };
     secrets.mailer.PASSWD = config.age.secrets.autistici-password.path;
     dump.enable = true;

modules/home-assistant/default.nix

@@ -13,8 +13,8 @@ let
   garmin_connect = pkgs.fetchFromGitHub {
     owner = "cyberjunky";
     repo = "home-assistant-garmin_connect";
-    rev = "d42edcabc67ba6a7f960e849c8aaec1aabef87c0";
+    rev = "e2deaed42b66c982b150ca9a9e543031ad51228c";
-    hash = "sha256-KqbP6TpH9B0/AjtsW5TcWSNgUhND+w8rO6X8fHqtsDI=";
+    hash = "sha256-TtrcgLGnhNRBF1SqKMkPlEi/XEBUtDAnaWfzkh50+D8=";
   };
 in
 {
@@ -51,6 +51,10 @@ in
       "wake_on_lan"
       "prometheus"
     ];
+    customComponents = with pkgs.home-assistant-custom-components; [
+      tuya_local
+      localtuya
+    ];
     extraPackages =
       python3Packages: with python3Packages; [
         # used by pun_sensor

modules/ssh-initrd/default.nix

@@ -15,7 +15,6 @@
           HostKey /ssh_initrd_host_ed25519_key
         '';
         authorizedKeys = with (import ../../lib).keys; [
-          users.ccr-gpg
           users.ccr-ssh
           hosts.sisko
         ];

packages/emacs/packages.nix

@@ -117,6 +117,7 @@ let
           agenix
           solidity-mode
           telega
+          aggressive-indent
           # org-re-reveal # FIXME very not nice hash mismatch when building
         ]
       )
@@ -126,6 +127,8 @@ let
       ef-themes
       indent-bars
       ement
+      vundo
+      pulsar
     ])
     ++ (with nongnuPackages; [
       eat

packages/forgejo-report-checks/forgejo-report-checks.py

@@ -6,16 +6,17 @@ from os import environ
 
 client = AuthenticatedClient(base_url=environ["GITHUB_API_URL"], token=environ["GITHUB_TOKEN"])
 
-print("hello")
-
 with open('result.json', 'r') as file:
     data = json.load(file)
 
+print("Reporting statuses acording to the following result.json")
+print(json.dumps(data, indent=2))
+
 for result in data['results']:
     attr = result['attr']
     success = result['success']
     type = result['type']
-    print(attr)
+    print(f"Report status success={success} for {type} {attr}")
     response = repo_create_status.sync_detailed(
         owner="aciceri",
         repo="nixfleet",
@@ -24,7 +25,9 @@ for result in data['results']:
         body=CreateStatusOption(
             context=type,
             description=attr,
-            target_url="https://google.com",
+            target_url="https://git.aciceri.dev",  # FIXME
             state="success" if success else "failure"  # ma be pending,success,failure,error_message
         )
     )
+
+print("Done reporting statuses")

secrets/secrets.nix

@@ -6,7 +6,6 @@ with keys.users;
 {
   "cachix-personal-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
     kirk
     sisko
@@ -15,90 +14,85 @@ with keys.users;
   ];
   "magit-forge-github-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
     kirk
   ];
   "git-workspace-tokens.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
     kirk
     picard
   ];
   "hydra-admin-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
   ];
   "hydra-github-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
   ];
   "cache-private-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
     mothership
   ];
   "autistici-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     kirk
     picard
     sisko
   ];
   "hercules-ci-join-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     mothership
     sisko
     picard
   ];
   "hercules-ci-binary-caches.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     mothership
     sisko
     picard
   ];
   "hercules-ci-secrets-json.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     mothership
     sisko
     picard
   ];
   "minio-credentials.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
     sisko
   ];
   "aws-credentials.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
     sisko
   ];
   "nextcloud-admin-pass.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "home-planimetry.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "home-assistant-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "chatgpt-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     kirk
     mothership
     picard
@@ -106,86 +100,86 @@ with keys.users;
   ];
   "cloudflare-dyndns-api-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "restic-hetzner-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
     sisko
     kirk
   ];
   "hass-ssh-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "grafana-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "matrix-registration-shared-secret.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "matrix-sliding-sync-secret.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "forgejo-runners-token.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
   ];
   "forgejo-nix-access-tokens.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
   ];
   "garmin-collector-environment.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "hetzner-storage-box-sisko-ssh-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "sisko-restic-password.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "sisko-attic-environment-file.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
 
   # WireGuard
   "picard-wireguard-private-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     picard
   ];
   "sisko-wireguard-private-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     sisko
   ];
   "kirk-wireguard-private-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     kirk
   ];
   "deltaflyer-wireguard-private-key.age".publicKeys = [
     ccr-ssh
-    ccr-gpg
+
     deltaflyer
   ];
 }