See machines/fuuko/services/binary-cache.nix for limitations.
Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.