feat: update secrets

2025-10-14 19:54:24 +02:00
parent 742d0172cf
commit f516f46b06
6 changed files with 170 additions and 214 deletions
--- a/hosts/fw/modules/web/secrets.yaml
+++ b/hosts/fw/modules/web/secrets.yaml
@@ -9,38 +9,38 @@ sops:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiZmRBZm8wL3ZQdUZMSjRG
-            cnFWTjNhc2gvd3pURkdjdEpZdUE2ZE9nVFdnCnEvRGlScFJVUGZRenV3VXI5cU85
-            NkZ6clplbzZnR1ZWY0YvMy84WWRiMUEKLS0tIHliOE9KYTdlUlFEb2NuRE0yYWJm
-            OEhCZmphWVVjU3k1VHRDMnJWTUpQQVUK1M7fgK+d/KlbTzvt9CKj6cGgzZ+vwsfE
-            zqUbyJ/5UpmrU/3kQMxBMBmb8HsA8b/1itzOn4F54SF1Xm7CFDLTUQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTcXNwNzFlQmNBQlI3bkwz
+            aldyUXRRTCsxaGNXNXZVM3k5VjdmWWRjdlVBCnBPN2M2RlZDelNvQ2x1UVVheUlD
+            U2d1TE5FMExMY2hpdjM5aTdpWjlKTjAKLS0tIEpCVGpRai9ucFRMckFPdUlHVUJu
+            aGFsQzBnM09uaW9xUmFlWlpJbGg4VUUKDptwc5rYwOzTmT374N1xhKbxt+ujrYRb
+            IKZTX18OCQY5DcZVqcV/8JiQA0C/zYfAvvPwKSqcvQkwkVj/5iKJRQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
+        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwaEpvdkdvSHZQTXZXbXZa
-            ckZrTW9qNW9SMzN2TkVaZTRlT1NKSm56Q1JzCnIxY1k3Q2VjTy9OSlZPbEZkVDBi
-            UWVCRHE5bWlDaVEyWERXeUdsL1BFYkUKLS0tIEhoK05uMVpzYXJFZHBRcDlZb296
-            YWRTZmljUTJEQW5lUzdMa3N0Y045MlUK0lAs4L5D0DIKuxuHJmGbOu6SX1Y4KNJo
-            VsgVUd9wU9r/ApoiaicAPNn0jyH3B8sGk1JGtrisL5eldc6Z5phR4g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzSnhuN3FDQ24vQVpjT1po
+            Q1hiOTRvMnpsemdKT29yUUxOMXdtVnJUUVQ4CmJlcFVTWEE3SlZCZHYvL2hsRjNh
+            c3pTMkhhK3pmdFB6WjNLRjhQQ3dQKzQKLS0tIE5GK2ZRdUo2ekFUckpFWWduSVY1
+            cmpvNUhCN3prdm9HRFphUDVMQzFhMEEKbCxNme7XZXU9fVxh8Z9ij57nIqoa5ijZ
+            kbzdPuXH5d9oJIcgV5KFpJr9o9bB4LJnCm87gzlhA9SY/3xszbKHkQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVEdRWkR4YzJNU2Z3ZW9t
-            VGNHM3gxZUM0SDlaMzBleHU3a3lsZ1M0dlNJCnF3R1JtUUZCZE9CV2NUVG9la2I5
-            R0hadEw2RldTS3J3cDdDQkp0OG4vZmsKLS0tIHl4UVpBejlFbkRycEZjSTNyditY
-            S3VRckhkNGRzR0VOOVBaRmZCT1lxM0kKThIJN/jw3tjaqaf1C5s6+K5BMBrMer2z
-            YNhhar3iomZbWvwJ5OW4dneU9p0drrcl5LR9tSAoTiSxIbfBZf+d0A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMlhkemhKc29EQlJLbkFz
+            VnFYMW5ZNUZKdWVYSG5DUnF4OW54TXhnemtRCjNla3RhOXFLZTQ3ZjQ0eVB1UitQ
+            MmZLQ3ZnSi9rZzhtamcwU0M2QmlhcDgKLS0tIGNpM21xQjFIZllNc3ZlUGd6eDJo
+            eUZYWldGci9xUGxxWjNXeFpLSWd6NUkKy0m0I+Kyfaob/Tkuc8/XFgGS+CfhWVRY
+            nVetG/7W2Z9Nq3isS8mYvNf72VylpMY0FD6Ix1Kf8sIPZKTQgKyYmA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1gjm4c3swt8u88e36gf2qlg3syxfc0ly94u64c42f2tsf24npw4csa6e4fw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOEhSaklkdnJoY0dOU3dt
-            T1lyVVdVZ1VoRmQ4RURPN1ZjYWhPeU01T2gwCjFmbHZ3SThub2psTjBHOWk3M0hP
-            WFk2RXFnM3AzSHhraEJmRmxWZzRFVE0KLS0tIDdteWVZKzJVNXdyZDJTbE43Zldr
-            WDdHb1I5dVFCcHJ0ejVhOXFIb1pKRlUKkCS05OVL7xvkZ1oh16GTCnateuXao9ZK
-            6sMZ7/c9tafLH52psnjeUEJK15Bw8DihFjFctyIh242j8TtXXqxBYg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdU9GbkxhVnhhSUxWamZI
+            bGlrdXRyL2xsLzJHNXdXMFJkUXdBQ0QxWFdJCkZGZlFNcUEvUE1zNEdweVdLVUR1
+            OEFvdjBOZko3bko2emYwZlNvalpCN1EKLS0tIExIdEp5bUxVeHZpMXpJV0RzU0Vz
+            KzNBUDArL2Z3NmYvMCtzeUI2OHJudXMK5Qp5C2mGOD9T1yfY/DC/qaUOYdh/VdNH
+            DvkF8anAWvcquMlG6VZrjuH0G6u2GkuPS4Qz1JQqhRB0kbDjCdD2tw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-07-07T12:53:46Z"
    mac: ENC[AES256_GCM,data:dPvsaQ1xx+k4onugBVZhm2Pb97cX1f3qf5j68dqBmv585HwnS96eaOxvr/8JFnYejAoP3CPBGlM2sPnzJ5ic3UyGsyDvxX2oCnpioA/WQV/Itrx3U7r0oeT0kpvQ9YjfTYZIa4DNM3W7Qi3Efw3tskNJmLztBpzrajizTwB6oPE=,iv:LaBKX3M0piBpfPVtM4/21UMxi5eLHmMka8NVOvmS84o=,tag:lggS7bHmnK3nhCtsgzF+dw==,type:str]
--- a/hosts/fw/secrets.yaml
+++ b/hosts/fw/secrets.yaml
@@ -28,47 +28,38 @@ sops:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWTFjSmFmb2xjM2lsWVN4
-            QWVCdzNtdGNSSkVZRm5UL0hKL2RWU1FKSkhBCmJHYTFRUzJ1Ni9FQ2VqS2FSNlJQ
-            SVhJK2NOMEozOWxOTW81OXJrbFphZ1kKLS0tIDBVbzZHMmcrNXdhM0JuZk1YY0dw
-            d2NTT2R5TWVUMWpMMmVmSFovOU1CbUkK9Yf3mwBlMd1cGaUk7wVp8Q9u5F3r4njl
-            VPCGpBvJqiOcWoUsE2W2C1L4XGDUh+XAe48JU+phQbhkLTLshLCbfQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WkdZQjZxL00xZDhOdlZY
-            ZGdub05HRjRqSDNzRTNnUm5veS8zM2JPRkVJCk9lZEpkendNU3lXVE80d3RDTS9C
-            djJnaU92MjYzd3JvQmxkMGozb3NuaGsKLS0tIHhmcVRDMTJnb3IwdzBDT3dWOUM3
-            eFBTaUVQVUpsR0YrM1RwbTJNMi90ZlkK3dKJo/RSF+6tLETYIyd2KQs9GsIy+o4f
-            yfUxV00Fjk2giP40O5nXPn1kYfNigEfkov/gbPxYYItoBsG/FmlxIQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNZ0RMWjFWV0hSTkFFNytn
-            SzgvMlFSdGpjMDF1Yk9PQ0gxTVgvM25SQ21zCkJjRjRaMWRrZHNCT2Ftd1N3Mnox
-            YXhuQXlwbThycGNadlJMby9EbFFQbWMKLS0tIFlyRkZNMDhrQnhJbk9jd3dpeEh6
-            MXVIa1ZJMVlvYzR3emZTeEJGbE5mSFkKDecPJChaacdkyn9jlmZFrZQu3pKD087n
-            cesiKi+gKI6kagXphl2w211sC4Pjw7I7t0a6JNntcR9VTDTD392m2Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobWN4L1Y3eWwyY1UrQ1FH
+            empRcDRqbytyamZSTkphdGRrK0JCUy80RHpBCmFZUXdzRVpvVmRPVU8wL0pvbUo3
+            aTlyRW5HTUNxTUo3amJJd2h1QjNaclkKLS0tIFVrWVVzSGlXb2JBQUJ4blJ2bjhO
+            V3c1ZWc5NTVPYlpHUWsvSEZjOXMzWGMKXUDydWCe2YwD5hQaDDmVk9wNu2eQGS1Y
+            ncUnaenShOPHoyIAXd0QjqqsxeEhzXWP18o3eZ5pWjPwEe0EDXuSxQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuSm1FRkVTQW9keTNYMlRh
-            TVN2U1dXRTV0NWJsbCtoQjhHS3NHb01vWjAwCnFVbStLblM4VHF0dFgyQXFmczJ6
-            WkNjbkFEaFZLU1FBd1lpZ2gxQ2xUNDAKLS0tIERndVpJQXFKR3RWc0FGKzVlRzZU
-            eDAxQ2g0Z3p5VEhWMTRQREc0d3BybEEKtxC6DIOll8E8G/N6jYfJX/nqfawvISKf
-            G/xiVB2vEe9Q5GmNXQBpzLynfT7olu7v/PBeN9U+0knpTdEHFQZPTg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzamhpTTNRb3VCU0RnZ2Vh
+            MFhiK0tKTEFDUDNKS2xJeXZZK0Z2UUxMNFdrCmJUK2xMTTMyQlE4RkR2SHBMM29Z
+            cUlscHU3UTh0L2J2SGtWbGhBSnBocjAKLS0tIFU1M01RbGx6MFlCblJYYXlrVHlj
+            Q1pPWUJyY21uNENycGVJYzNXS09NYm8KRtwhBSAYp/CVShxt4O4+UZipEVVic1YA
+            LtpTOcmVADuW0kcPGVudVXEBaZfHhiQDHwCAIn1daM6jNLC98G5KJw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwcGwyVmhtZ2RQaWdyRldx
+            Q3hTZ1Z1a3JKbEFOMU5sZmtZdFlBS1hPNkdVCm5uMm4vL2V6eGZsTWlJRHdSekhZ
+            QnpMZVJ6bXJRUzRPQkoyUHRwMUowY3cKLS0tIDlQd2c2YnRUYS8yb0pUbE04WVcz
+            REUzMmZ0dzI5ODhQbWRqTitzM2pFSVkK75DQn4f26xWSImI1W8+Hg/wz02KkhE8+
+            3VkCZTwESstiOl8831v9aHL2G2u9tQ9ZRpDuB/g14SGDYE2oL0syhg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1wq82xjyj80htz33x7agxddjfumr3wkwh3r24tasagepxw7ka893sau68df
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyMUYrekZaQnpHaGw2Z0kr
-            ZjRDc2xvc0NwMldlVlNWNDJUeFR6Z2VGT3ljClJSaTBHQ25OUzVydDRTTVVxT2VW
-            VVVxZUlyeUY0ZFJrc3ZRT2FEdklOT1UKLS0tIEJGZzFLZytEZEJVTXB3QUVqdmd3
-            RFFSaTZ1N09aR3YxcjdUQmZaaDdsd00K5DnkUwqOxnaY++MHL9ls0JOovuxyBEJy
-            XysKbnAWumt7sZxAboJZslmakstoMK2p4BxAQDBz4N3pp/UeoorWuQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSW1zMWc1akhwUE5JRk9Z
+            SkFxSTFHU2lsWGxJRU1LV0dCa1NTZTRDemcwCmF6bXQ1aEhNeTFobUxadkZEV2Ja
+            emlORXNFQmpmYUh0c05KZmxtY1lWaGMKLS0tIFI0K21oMDk2ZUZHRjIveTJ6Zkoy
+            eVh2QjNpbTdzK2NCYWZPcC9kUDJOVncK0/O0/YX/h/GSy10rE7QjYmx1dnjqQEot
+            1uOZoHTyylhjDwNWXMbXwsoa1KHFgcwL2RjOo0kirJbYtUA3aB62FA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-07-07T11:02:46Z"
    mac: ENC[AES256_GCM,data:gf6Lw3aiGLVHNNrt/9SwFtK9fnzI4fiNf4/MjlHF+BSGnwSobccbUFObsT5mnce6nMsFM3kZ4Ac1ceckND02CH+P4hf5ylczPibz8B8sGDUulLmCpddBG++eXU4CO4Oi1VBqiCqkxPGPDtgidOMy+KJ1EHvSaiD/duOXrE9/qE8=,iv:RxIohGvtU+GGnpmW/k+fZlQLT8+13P4+5ZMHsDoSY94=,tag:5QNfKhjwCB8Q984WAIXdnA==,type:str]
--- a/hosts/mail/secrets.yaml
+++ b/hosts/mail/secrets.yaml
@@ -8,47 +8,38 @@ sops:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkS1BpaHFOSmpWS29qYXR1
-            VFNYbDNLTlhyVlFWa2FoNDhCbDVKQkFiTTAwCkxVSUJCTjdCcVJyeGQvd21JSmZ6
-            LzVnK0ZMeFoxajdGaERoZ0t6L0c5REEKLS0tIE1HUnY4L3Frb09odEYxRm1QVUZr
-            bXlyZzBvaWtLa0hZaERSenVFd2gzWlkKNipeWlQnOLI4QxEwJIheAfYqVXCn2C2Z
-            3rIJ5lK3DLAvdRjC1stngMzg+BPHMDUo1sXoR1/PhUEWcqPJ22IfMw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cE11YkI1TFJxKzRCVFF5
-            NDR4Nk9PaDFmY3dESWM4dGRYMXI4RzQzUVY0CkVpS1JXWG0zL2Vlalc1N3FHN0FH
-            VFlqUklBeWZiQ242TUVmWm5sZmw4NkEKLS0tIE5wc2hHVTd1MGVsTFR1eCs1Z05y
-            cWo5VmpnbUFLTFl5L3R6aCt2am9PMzAKWLV6hqqxYkqlmNCwQeNJbxqq6neX+4Md
-            Nh9QesLSr/SRWhp61kSby5X8JytciZ9eSRx6B9igRFVwfyojImYcdg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNSXFSRlRWcE1vUWM0OXJr
-            eXZmUmZ1VFc0ZVVWWXVIb29aUmYxQkNRbEVZCjY0a1pkV2d1Zk9BbnhNWGtOZFJo
-            Z3FmWkVsUkRtaXh3WStlSndCVTlnLzAKLS0tIDZmS0VLUjA4NnNrRWsvdm1LRks3
-            NTF6dUZQM3RmbHBMc3poMTdsclMzVlkKHVwRRgCgPaA+/tw5Acl9RTg3W91xPZJR
-            elST65f/fGevyvyZcu9HCVcjymuoa/ghuJqKRQw0S8ELGQjbBSS++Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0NWZPWXltTVNXNGxPd0hZ
+            R0U4VzN5WlI0WWZrRVVFMmpnckpMMkREaTBvCm54eTZtZlZzRVpwRmg4Ulp0VG5w
+            VnJkc29nN0VBRFR1U1J6L0RQeWlLNlkKLS0tIDJ3eTdiUWJzbURvSk1neEhyakJS
+            Z2MzZi8ybW1PMngyRGk4NHhIMzZsem8KZuy1TWwvkFGsAVMIEk2+bwDcsmYziUjj
+            Wd4wMK1XuLnJyFYPt6CwzBAPG+1LQzmYWdC9mNI00YZM6XneU3OisQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTnd0SUdmRnBBNDRsMTlW
-            QkplQ2hDMkw1dVZmS1dseUtzU0loR0tQR1hnCm84bWJQdVg5OGQ0NU4xZ3ZoSnBB
-            NnVnUzZPbGZ2UjFaRVFFejIxTDV4cEEKLS0tIFFwZE42OFljaFB0emJ3WHBFbUk1
-            d3F2cEp0QkFHcFcyOUVKWDdxM1hFVUEK+SyLcwXdpX+GQFXB7UFHmxD3BkVplA9V
-            45K3fn9/KoZl27ECdvv6M/CweZBnOjcOUFjZCJDovE9Hmv0337c7Zw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBZEhsK0x1QkczeFIvL0JI
+            UWY5R252WkZvR0s2SStlWVBMQk9ENFpaRHpRClg3VjhpYW5UbzJkODRFYWF2aGpr
+            ajE3aUFhZStYY0NJYlg1QTZqVHJsODAKLS0tIGsyRHlXSVQyV2RXVCswRVlsbktV
+            c0Z5ZXhtb0wrT0Q3WU1ONjFiNk1WOVkKHxnDqJkGfiqrlAyzJHYVbJlR1/jluFU+
+            hM/wENwqtlZ7RCSdG68AssgP9zukO94sV9mAtbfOdeVwXa1LU66Ncw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TG9wT2JHN2pOVjRueUF2
+            UGJkM2d5VFpLT0hKVmIwV2Qva25ubk1lK0ZBCkJiNWpuZ3grQ0lkSDlCMDBwYjRR
+            cDlPVHhtWlpnaVFYMFJqWWY2ZVFGNncKLS0tIFZQVVRSQXVOZnNDOHVwTHBraUx3
+            MVRVRlRQMFcyelNvL3FaNjc3U3VYbmsKZ+rJ/EFb3KNyyJ5hqO/wV4AtO1FJCeB/
+            oazkDDoFBE+uhiLmdCy41eYkqW8Owt/zrO29nITeJ5EtGAXTbACcgg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1jyeppc8yl2twnv8fwcewutd5gjewnxl59lmhev6ygds9qel8zf8syt7zz4
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQV251c1IrbFpad0lBN05t
-            enkreTd5TGI1SHJpV1pRdU1CRFRHL3FZWlJFCmtMeCs4WUlRSFAvcmZsUmdaZnNZ
-            TDJHak1PN2ZOaDYxTlNDVlRsNnYvNzgKLS0tIHBieEJuY0pKbmlEZ01QblU2blh5
-            Z1dUUVpkZXh3d0lRbDlxT0tEMmR0eVkK9tea1FeroVL1KoARpACREz5KaRA2uMCI
-            O/ieCpzdFniJhX4Ulm4N7R7nc4OqSm9+i3Ruy3aKJ5305tfgGkCqQg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDZlJYSG51NEE3emlTVDM0
+            WEE4LzFqazdZQkRZSUlqQ0dzYURkbWc5RWxnCnJobm5LVnkxZkFIeTNWWUJvOUFU
+            SlZhZDBsdHhDRzFVQjhsN3F1dE9SVDAKLS0tIFBlOEwxallncjBxWDZCSkhZdlJN
+            b21icTBmeFM1cnVkaXAySHFzam1hYmcKULP2EuMGhspSusYPZs/DTksaZb0Asfel
+            mVn9Unqe2b9tT5cchGrxLiDJ+2YvfTA0s/JpDtLN+MpiRQQl0vJikg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-07-08T11:20:50Z"
    mac: ENC[AES256_GCM,data:GPUwpSAz6fj7mRxX1ebEb2sLAMLkQLuKPXk+B3+zZmA6+D7gAKrrBGUWHqYA9DMMY0r32OZSccGRmeKqdA7sWmzdIJTcBu8EyER1nJqVFJiXcOOdTkCLdOM4xW969YE0lBKpIAQ40E7YXYYwkI1JINneIBTuXkvIBmSQ3Bt2+ak=,iv:VEPNQxDLzxyTxkn8dI6xNDe9ESk2RojSNYYEwT+Ggas=,tag:cfUEKU3arSJl+lEOa+4iRA==,type:str]
--- a/hosts/nb/secrets.yaml
+++ b/hosts/nb/secrets.yaml
@@ -16,38 +16,29 @@ sops:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpMnBLcDdsczB5TnczVFdQ
-            V2NEZFR1bkNvK09HZWV1MDg3RmRHbXNYeGpBCmpmemFjYzZQMXAzTmh1NWhOMkFK
-            UGNBRDZZa3dhUFVpa29JdWVrdU0vd00KLS0tIGpQeDdFNTFIRjg0SEhrQURVdW1Q
-            VmdHNkI3eDd2aHo1VTJhZHN4bGxNNzAKcIrRBasCcoNCdYM3lcjzMIME8jn48x39
-            0DJGKX6/hoVaUlpRcCfnEx5Ihu4dSBxd2PMz7DgDZizftFWOJ2TZaQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTV2hRelFkTVdSOEQxaExp
-            VGNnb202UVdpK2wwWTl2YUp2VU5WRTViaGpnCllxKzNCWExZZnllQ0lvM1ZPbjlz
-            TndkRHBvRHBaVVY5M0xZTmFXRTFlZzAKLS0tIHQ3QWcrYklaZ2ExUnRObTg0YnNG
-            Nk5JOFQ3M1pBdmg5dUpkSFZoQXY3QVUKNL3HpYBWsGdHPG/eUlU5+G4Dcnk6efX1
-            e7B2ye+mzMjt0Kpz5QxltOZIiTyvNLKNUijNgmoK5RGJibJCwbl1ng==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiZ3RBeUM5NE91K0RnQnhU
-            cE53akR2bnU4MmljY3BWcjlNOXZueWpJNEV3CkFOdWdGaXVrM0hvNTdubFkxdERZ
-            TjQvMDc1cEM2TnVabVJNTnhkK2hyMmMKLS0tIGhLQ1liSUhnVmw4N0lWR2Y0clV6
-            OXhTc2YwWXhZRzlPbDdkZE1QUUVNMFUKHSE1LckK00qdCBl4iK6lzOzlIJ0WnSrk
-            c9kuwHrZoQIv6JuscjkJ1n9/SeDZoFRnaEHC31txMot/tkpG5iyrbw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYYWRBbk1wckFYbkZxQllS
+            T09LUEljM0VKbUw2cW5hLys1OUZZdFBBSXlnClRvc3YyRFpaQW9GOTVjR1dpdU1Q
+            TWVsYmwyZ3Nxb29HZVdTSXhmV3F2MWMKLS0tIGNZM0cyWmRiMUNFUkhVUkJhUjRR
+            SHpCTVR6VW9pdzFTMDBtWkxxY2VIWmMKrReAwG9+6W/R1AoUr8JFw2QQ9WZ+e+Pn
+            wuTlcKayDrNHuM1ldW6BEYQAV+8Z4Nhbj1ygo+2tqOsXm2YL6uzlBA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrSEFSaHIyVnZsOG82UDJX
-            VDhjOGxTakVQZWttTFVxTEUyUnpaRjZmelFjCk52RGYwRUhkMVpSWXV1UFFhelhl
-            Nk9QazR0V2JaanpHMGVOSWF1aTRRZ00KLS0tIFk4QS9uVGJVYlh2aXRlQi9WWkpn
-            WmpuN3RGK2pCdzB6TVkrcy9YV0lPRW8KWbTtmqbkHibf6SfueCE+s03Efkr5Oat9
-            sBi4uDTmaaqBEcoO1mQ4MQD/On9tZzThjfD8v+m0wUU5xGvE5naA6g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYk9zVTZUUUl3YWJobFNu
+            bndaSGJyTWdoOWxUZHZYVDNMTjdkQVdyaFY4ClFEUjZuaTJRdVdlcEU5UFIzbmlC
+            OE44MFhLOGh4ZkJmeFl1QlNCM05kYVkKLS0tIFNCWnJhMFJ3MG1hKzZVRXlpODl5
+            R1dpWnZKNHR4RERSdm5OclI1SncvYkUKBDZKeh6xlTn3tRnZOCD6oe2uFP1NeQe9
+            b7JuigPRPnhah0rWZ6jPjnk38Jp6z/I1Oqh5UJ94H4KNi/h3HKqMSw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPTkdSM3hoTWdlcE9McDFt
+            engvOU5hZUtKaVZjUEFnT0huNWpMWnBjUFZnClZxZ1JrMThrT2kyejFkUnlUVUhU
+            bVhTNUovM0ZRZVRRemRsNml2RXcrNk0KLS0tIDZWYWJUTHlXWUFMcE82YlZBby9E
+            clM4RXI2V1pIRVZNeWdaM24xZlFJSjQKY1+Nw3X0FynI6BhhLE5caUpDENqa6S6d
+            HMRhiL7SIZQrmkdIeCSikjRCkvqBFIgn7sff3S+7neYxgGkFp1nzGg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-06-05T16:28:03Z"
    mac: ENC[AES256_GCM,data:NNYwveO78Q4cWOPPt3Pyqh6AtbfRj/ax6D4t2KlVXWSLzKTUZKKaULXGY5PBp/jI2pyhPp5yEMhEyjRPWC8Xhvxjv+NLb6KltgaMfzIBS/jfSNk3dcYx6i8Y2oSG1efLJrRMc2Q/uACeztyivtjV9A7JCrEtb84Wb9HzkI4nZVs=,iv:Q8cTw+/RMJ3WHrkB9lyaAyI2K3O1ZhDnAMUYMJ4JMRk=,tag:JvrLiaKKYXiOmud4oZZZ1w==,type:str]
--- a/hosts/web-arm/secrets.yaml
+++ b/hosts/web-arm/secrets.yaml
@@ -21,6 +21,7 @@ victoria-nginx-password: ENC[AES256_GCM,data:+rKDzML5eQX47JF1i/ZU9jwdeLgRXPyzwSC
 nextcloud-adminpass: ENC[AES256_GCM,data:/vt17v+aaucz8sq/uYUA0hlj1urKNYcmCN0LbgGAMhWoTiTwzYr5FzrygOuZWZBeaAFH1pWItTZRXj74OX8XqutLPlYDg/jZqLszU0/9HgSBoHb5ZnPUpzIjNI9dpMttPphpo5TVrYKoh/vR3OWjJa3ObcpGLdvMQc1r8ABEvvg=,iv:0xW7++80CwZy0O4J3bFElqp0ZMC+RpO5kcczshM1pzg=,tag:PJj5PHfkoHE8jRbS4mpq6Q==,type:str]
 nextcloud-secrets: ENC[AES256_GCM,data:FwP+z4B03m0VEFEb8c/UwBKMcWXo+2dnlBAuO4SCVXNBLdq3IK+e8gGzKima+sac+WZ3k3ncPAqyIomBLwEmIUB/24xYx4SL6AddwDoyytZbVDv5Zt7Vpvy6aheOvARoqez3pWMaC+rW11JFVw==,iv:BT9eGRUhHMbwkhuQ+cC32zHICRbm2hQQeVfIHrCB+JM=,tag:GNpdz1QYEcfVvmkjFJY1vg==,type:str]
 nextcloud-smb-credentials: ENC[AES256_GCM,data:Ra1iVCP/Y1G87oDrn01JxorTQy6d80POKIVEbHPttrd6x5QgEvvyWIz6rCiK4mEH,iv:6wXHBSwq9P+tHrkB82ZReFXsUOF0rDi2hpZ8jXLU7OE=,tag:Fu4RB0hPyHFpN6YLTtfGDQ==,type:str]
+atticd-smb-credentials: ENC[AES256_GCM,data:QbCHw+Y//9r60zlP3yceWnYME+rNom4NWnuxwV+d5zzPtzkd377hmqMFPHcbUuJti2KQ3ww6RtFbv02SbNBqahrVwBNSmowr0D7suw==,iv:5xIAW3O0EDuKGtbQSSphLJuWjqbpRnD7B2rypC6Qu3w=,tag:op+NMyWSp2bmrGNkQ/glkw==,type:str]
 pushover-api-token: ENC[AES256_GCM,data:itcWlyaJi+saBmhLabOOgbOej9yxQgCIiwU9uuOg,iv:dnD12MPZsENogsnCMGpZe1F0cC4eFfefSx7sP9Fl9Mw=,tag:lk1+pkvNab6yG0Sv/+TVIQ==,type:str]
 pushover-user-key: ENC[AES256_GCM,data:swXKXMAeCyYbBQNAEEpDTJXjdNmFFVWnhExAqfnn,iv:AZd6phibpwEX97U/SzeiRoFFL3TviSONwOWkPsXdcKc=,tag:+mzfrxHpTWOzb3bEzN3D5Q==,type:str]
 sa-core-mailpw: ENC[AES256_GCM,data:U5nM24n5j85J1ZBrzBkmSUsDFjgXqtcIrwK2,iv:Fxq9wkbjZhofcy/WPF6oOWoyajgj2aCserinNyGDfXE=,tag:q1+pGuKLnPGAvFQhQF1b/w==,type:str]
@@ -32,49 +33,40 @@ sops:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtU2ZiVW4yWkF5bDBnWVkx
-            QVFkTTZ6SlA1ZEFNMUpYV1ExMEx0Ulh1dWdnCmdrVE5tYnkwZkV3UWZpbEI2TjRu
-            YkNLT21sbmhDZlFJL0IxakZKamRRV1kKLS0tIG5WdFpOL3lubWZpTjI1bi8raGdh
-            MWovMVgzMmlDeVdPYU9EVHp5cFpOR2MK2HEG8AmgkABIfyf+TGCgMiG94AJEdRUp
-            bJ45NqVMHdFBb3pX34I9vbcpAuvWm+0UMJc5tndD19tulcBTOkCsVQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpVE1IdDlKWUR2a1dYV2Nj
-            N0wxaTdnVThiVWR1RjBWWWNIenJOM1gzbVFFCmJVZ1F3YmdWNjJhV2p2LzFCaHkw
-            TTlWWktxbWpIYXNKaG1NTWxIQlpTNUkKLS0tIHYwdVdQam05dEZPTFFyeEFmQUJk
-            b3FSSkNxekhRcllUVGExMis3bm1ySEUKHT4Axi4FjAPxjnv4knAxlw5Qk7uOWDie
-            XU5oc1gqX6/8So/VAfGqATxyrC4ceg1f8D62QEUkYVe3UOSSXrhrPw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJTXV2TXdaSVZveTBINkdl
-            QlV0QlNGdGRVMmRWRjNRRHpjcEJDTzdRMlhzCi8vNkV1TFROVlZsMFVLcHNaMkYr
-            SVp0ZG9BSWl1SUU2cTJkSTBBQVhWQWMKLS0tIDhKV1hQeDh1OXZpTTJWVEQxcXNX
-            WS9FWG1jdTZqMVhCMkJjQndlcUVjZ3cKeIdiDFlg1ABxACX8TFYJ+hLrpHMBOQKy
-            YHlLY6tOwiFKZw98CqqfZG33aXdo2buD7jfGiK+v/VESyfOLqBxFkA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKK05sSTg2NCtZdElsMUo3
+            WEtxNEIzVWNHSnpQOVV1aTdjMHM5Wmd5VzA0CmpTMVBLNE5saVd3OTl2SENxemF0
+            bHVBOTZ5RXROMXNzRzZxYStlTnYrOEkKLS0tIHdlQWpXbVVPR2c0dzhXVlBxS3Fu
+            MHBNeHpPb3NEOS9MWlpDWkhkNUtXVGcK+nce+kiTdvliu7Lni9tB4XocF6nLcGBO
+            iR75yc2yjZvvQn4BEulvPdm0tiwTMSt9NRZBgzykc63yy0vBKFVTxA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsQ2pLV0lFdXQ1anczZnp6
-            eFE1ZndLcDlFSjkrdjBWUFAvOGMvM3FRUXpFClhFMjNKcFRldE5YdXp3ZHFzSWpm
-            NzBhM09UVW5GSWNCQjM4MDFObnA0ZFkKLS0tIGVidjY4UUxDeFV4QjZMeVNLdk9v
-            aG1HN2dMaWg0d3BOWm10NVFoYUgyUVEKdPIbG4IWEWsQDqikAMFfQ4M1iJUC84QU
-            OEpdVIYPsyF0WA9aQmmYtvOBB2T1R7ilOVurVb1KqtLA4njzIHoeEA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3YUNpM1RpWVhENnk4d2Jp
+            VzhHYzNsRVprRlJ1UUFQQVpnMnkvc0RpOXpzCkU2c1VqRndLZnlXL2p1V0tJWURk
+            VDRPSFdxUzY1dE1iRzljT0krV2JuTWMKLS0tIE02RVNsRzc0N0M5dzZNY1Z6Zmpx
+            TjdNRGxBVmFQNmNVNkRBYTJCNExVcmsKcMvJ8wsdT+W/t3TrNI2LcStI8mi/cVpe
+            ++mBTa40TjQF7cLEYmwNVTvbV2W6Ikf5pbuPD8RWUQ75HQRqGhCguw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmb1RoK3V4bGZWeXBmL1NN
+            NkNaUlJBaDFScmx1c0lrOWk3aHhiWExiNVJNCi9TMS9lOGE3eXozWGJtVy9EUXlp
+            RUQxaSsvV0xBNjBvOENoOWRKcGdkUHMKLS0tIFZ5TkhzUTV5TFQzOTREK29KdlNw
+            SmY1Tm1idlY1OU5RQ2xSSGpnNEE1SHcKO9iwjEXJogOatg4LbwNc6q3WBKY7mJmc
+            tDs4Cg6sEeq187hXVuUCA57QeUAQTLJFpAUl7fz/RzXC6RSw7Kjg8A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1ylrpaytkm0k5kcecsxvyv5xd9ts4md0uap48g6wsmj9pwm4lf5esffu0gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWbTNXS09KNDNid3B4eklB
-            eGZkNDdkUkJQeEFmMi9TNnViUTZtYWFHbmpzCmlPbUVYMzlyY2FvOFROSHRhVXZa
-            TzhaUTBhVnpUNk12bVRLUndVUWJpNEEKLS0tIFVQQSsvakhnU3ZRZkZFMkpZVndH
-            RkttZkZIZVVFNml2dmU3dDFvbkhSekUKxsgf2LemWDiae5a+RO5ttxQDSMkll450
-            w0L3e8JWP63sipaN4Fc5d33V54/yLD65PWPRZr3oZn4FdjHCBsLGeA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyb2paK2VSQ1FHSGRFYkV6
+            ZHowUlp6ajFxOVN4b0RqNVpjT2ZWVEdJMjFZCmpRQjdPUUJiTkpNaEdHWTRHS3FU
+            ak03UWJ6T1RLTUMrZ2N4OUtuSkRIUG8KLS0tIFU0clg4b3h4TVl0czNsTEdzdWpp
+            QVNnMUNpcjg5YnhvbjIxUVVXNE44d1UK+X4arcItFuQPzFHX/1L8+KiU+MHmqBdK
+            nqJ+vibancZRxkBEE4fKbbOWS3kdcU+uWhk1nXkVlaz8Bq6qtctSqw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-09-09T09:52:21Z"
-    mac: ENC[AES256_GCM,data:FXQ0mXR8CZR7kPNbmpjXTLmhPlJlgPaJMP5Z2PA2ZORBwSAzyms+a/FFwRnIzcKk0MJEhJH6rVwWCwo0AlPtcwzL5Cnm+mkW3EgN9jtIZumvvtZwW0zWM99F7UsBTboJnG7kGbkfqqRVC4svv6G7xMkbxKIFqwJTUJqRE5vrqnQ=,iv:cuhcQtpF5TMBqx9x11zcxa+5S0IqMngC2dGfJGU82/4=,tag:GKtEOxWuDzcKa5RtRacQTA==,type:str]
+    lastmodified: "2025-10-14T17:48:33Z"
+    mac: ENC[AES256_GCM,data:tYa664n7hulVvdH1VXxck+FSWexmwargMRpSy8DitwnezbO/O+LATJfEmdS0CLa+ks25PHLy2k8lU+ISeOVXQy1154isr0IMM8T65K8JMQddu0mbxQgaTkL5DisWTlhfgSXaOfQ3+uG7+CW0/s08BrbptKkOeydD2jYKY4s7Ck8=,iv:ulHv6suLBMWDujLe2FU1kD/ngCnmRvNAH5hRshbf+rU=,tag:HH/WbdD+E1+u0c026gqKpQ==,type:str]
    unencrypted_suffix: _unencrypted
-    version: 3.10.2
+    version: 3.11.0