{ config, lib, pkgs, ... }:

with lib;
let
  sys = callPackage ./system.nix {};

  site-cfg = config.fudo.sites.${sys.local-site};

in {
  config = {
    users.usersroot.openssh.authorizedKeys.keys = mkIf (site-cfg.deploy-pubkeys != null)
      site-cfg.deploy-pubkeys;
  };
}