{ ... }:
{
  deployment.keys = {
    "mastodon-secret-key-base.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/secret-key-base" ];
      destDir = "/secrets";
      user = "mastodon";
      group = "mastodon";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
    "mastodon-otp-secret.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/otp-secret" ];
      destDir = "/secrets";
      user = "mastodon";
      group = "mastodon";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
    "mastodon-vapid-private-key.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/vapid-private-key" ];
      destDir = "/secrets";
      user = "mastodon";
      group = "mastodon";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
    "mastodon-email-smtp-pass.secret" = {
      keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "mastodon/email-smtp-pass" ];
      destDir = "/secrets";
      user = "mastodon";
      group = "mastodon";
      permissions = "0640";
      uploadAt = "pre-activation";
    };
  };
}