fix: remove cors headers from fueltide as they did not work

fix: synapse
feat: changes for development
2026-03-02 08:26:13 +01:00 · 2026-03-02 08:25:58 +01:00 · 2026-03-01 14:27:15 +01:00 · 2026-03-01 12:53:45 +01:00
10 changed files with 179 additions and 491 deletions
--- a/hosts/fw/modules/dnsmasq.nix
+++ b/hosts/fw/modules/dnsmasq.nix
@ -92,12 +92,14 @@
      address = [
        "/fw.cloonar.com/${config.networkPrefix}.97.1"
        "/omada.cloonar.com/${config.networkPrefix}.97.2"
+        "/element.cloonar.com/${config.networkPrefix}.97.5"
        "/web-02.cloonar.com/${config.networkPrefix}.97.5"
        "/pla.cloonar.com/${config.networkPrefix}.97.5"
        "/piped.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious
        "/pipedapi.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious
        "/invidious.cloonar.com/${config.networkPrefix}.97.5"
        "/fivefilters.cloonar.com/${config.networkPrefix}.97.5"
+        "/matrix.cloonar.com/${config.networkPrefix}.97.5"
        "/n8n.cloonar.com/${config.networkPrefix}.97.5"
        "/dev.cloonar.com/${config.networkPrefix}.97.15"
        "/.ddev.site/${config.networkPrefix}.97.15" # Wildcard for ddev projects
--- a/hosts/fw/modules/web/default.nix
+++ b/hosts/fw/modules/web/default.nix
@ -10,7 +10,7 @@ in
      pkgs = import pkgs.path {
        config = {
          permittedInsecurePackages = [
-            # needed for matrix
+            # needed for matrix bridges (mautrix-* depend on olm)
            "olm-3.2.16"
          ];
          allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
@ -64,7 +64,7 @@ in

          ./phpldapadmin.nix
          ./proxies.nix
-          # ./matrix.nix
+          ./matrix.nix
          ./n8n.nix
          # ./piped.nix  # Replaced by Invidious
          ./invidious.nix
@ -91,6 +91,10 @@ in
            "/var/lib/zammad"
            "/var/lib/postgresql"
            "/var/lib/n8n"
+            "/var/lib/matrix-synapse"
+            "/var/lib/mautrix-whatsapp"
+            "/var/lib/mautrix-signal"
+            "/var/lib/mautrix-discord"
            "/var/log"
            "/var/lib/systemd/coredump"
            "/var/backup"
--- a/hosts/fw/modules/web/matrix.nix
+++ b/hosts/fw/modules/web/matrix.nix
@ -10,18 +10,20 @@ let
    add_header Access-Control-Allow-Origin *;
    return 200 '${builtins.toJSON data}';
  '';
-
-  # Shared settings format for bridges
-  settingsFormat = pkgs.formats.json {};
 in {
  # Secrets for Synapse
  sops.secrets.synapse-oidc-client-secret = {
    owner = "matrix-synapse";
  };
+  sops.secrets.mautrix-whatsapp-env = { };
+  sops.secrets.mautrix-signal-env = { };
+  sops.secrets.mautrix-discord-env = { };

  # PostgreSQL database for Synapse
  services.postgresql = {
    enable = true;
+    # Synapse requires C locale for correct collation behavior
+    initdbArgs = [ "--lc-collate=C" "--lc-ctype=C" ];
    ensureDatabases = [ "matrix-synapse" ];
    ensureUsers = [
      {
@ -84,28 +86,20 @@ in {
          allow_existing_users = true;
          user_mapping_provider.config = {
            subject_claim = "sub";
-            localpart_template = "{{ user.preferred_username }}";
+            localpart_template = "{{ user.email | localpart_from_email }}";
            display_name_template = "{{ user.name }}";
            email_template = "{{ user.email }}";
          };
        }
      ];

-      # Appservice registrations for bridges
-      app_service_config_files = [
-        "/var/lib/mautrix-whatsapp/whatsapp-registration.yaml"
-        "/var/lib/mautrix-signal/signal-registration.yaml"
-        "/var/lib/mautrix-discord/discord-registration.yaml"
-      ];
    };
  };

-  # Allow bridge users to read registration files
-  systemd.services.matrix-synapse.serviceConfig.SupplementaryGroups = [
-    "mautrix-whatsapp"
-    "mautrix-signal"
-    "mautrix-discord"
-  ];
+  # Synapse runs inside an isolated microVM, so PrivateUsers provides minimal
+  # additional security. Disabling it allows Synapse to read bridge registration
+  # files via SupplementaryGroups (user namespace blocks mapped GIDs otherwise).
+  systemd.services.matrix-synapse.serviceConfig.PrivateUsers = lib.mkForce false;

  # Element Web client
  services.nginx.virtualHosts."element.cloonar.com" = {
@ -136,414 +130,98 @@ in {
    locations."/".extraConfig = ''
      return 404;
    '';
+    locations."= /.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
+    locations."= /.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
    locations."/_matrix".proxyPass = "http://[::1]:8008";
    locations."/_synapse/client".proxyPass = "http://[::1]:8008";
  };

  #
-  # Mautrix bridges
+  # Mautrix bridges (using NixOS modules)
+  # Modules handle users, groups, registration files, Synapse integration,
+  # and service ordering automatically via registerToSynapse.
  #

  # WhatsApp bridge
-  users.users.mautrix-whatsapp = {
-    isSystemUser = true;
-    group = "mautrix-whatsapp";
-    home = "/var/lib/mautrix-whatsapp";
-    description = "Mautrix-WhatsApp bridge user";
-  };
-  users.groups.mautrix-whatsapp = {};
-
-  systemd.services.mautrix-whatsapp = let
-    dataDir = "/var/lib/mautrix-whatsapp";
-    registrationFile = "${dataDir}/whatsapp-registration.yaml";
-    settingsFile = "${dataDir}/config.json";
-    settingsFileUnsubstituted = settingsFormat.generate "mautrix-whatsapp-config-unsubstituted.json" defaultConfig;
-    appservicePort = 29318;
-    defaultConfig = {
+  services.mautrix-whatsapp = {
+    enable = true;
+    registerToSynapse = true;
+    environmentFile = config.sops.secrets.mautrix-whatsapp-env.path;
+    settings = {
      homeserver = {
        address = "http://[::1]:8008";
        domain = "cloonar.com";
      };
-      appservice = {
-        hostname = "[::]";
-        port = appservicePort;
-        database.type = "sqlite3";
-        database.uri = "${dataDir}/mautrix-whatsapp.db";
-        id = "whatsapp";
-        bot.username = "whatsappbot";
-        bot.displayname = "WhatsApp Bridge Bot";
-        as_token = "";
-        hs_token = "";
-      };
      bridge = {
-        username_template = "whatsapp_{{.}}";
-        displayname_template = "{{if .BusinessName}}{{.BusinessName}}{{else if .PushName}}{{.PushName}}{{else}}{{.JID}}{{end}} (WA)";
-        double_puppet_server_map = {};
-        login_shared_secret_map = {};
        command_prefix = "!wa";
        permissions."*" = "relay";
        permissions."cloonar.com" = "user";
        relay.enabled = true;
-        history_sync.request_full_sync = false;
-        encryption = {
-          allow = true;
-          default = true;
-          require = true;
-        };
      };
-      logging = {
-        min_level = "info";
-        writers = lib.singleton {
-          type = "stdout";
-          format = "pretty-colored";
-          time_format = " ";
-        };
+      encryption = {
+        allow = true;
+        default = true;
+        require = true;
+        pickle_key = "$MAUTRIX_WHATSAPP_PICKLE_KEY";
      };
    };
-  in {
-    description = "Mautrix-WhatsApp Service - A WhatsApp bridge for Matrix";
-    wantedBy = ["multi-user.target"];
-    wants = ["network-online.target" "matrix-synapse.service"];
-    after = ["network-online.target" "matrix-synapse.service"];
-
-    preStart = ''
-      test -f '${settingsFile}' && rm -f '${settingsFile}'
-      old_umask=$(umask)
-      umask 0177
-      ${pkgs.envsubst}/bin/envsubst \
-        -o '${settingsFile}' \
-        -i '${settingsFileUnsubstituted}'
-      umask $old_umask
-
-      # generate the appservice's registration file if absent
-      if [ ! -f '${registrationFile}' ]; then
-        ${pkgs.mautrix-whatsapp}/bin/mautrix-whatsapp \
-          --generate-registration \
-          --config='${settingsFile}' \
-          --registration='${registrationFile}'
-      fi
-      chmod 640 ${registrationFile}
-
-      umask 0177
-      ${pkgs.yq}/bin/yq -s '.[0].appservice.as_token = .[1].as_token
-        | .[0].appservice.hs_token = .[1].hs_token
-        | .[0]' '${settingsFile}' '${registrationFile}' \
-        > '${settingsFile}.tmp'
-      mv '${settingsFile}.tmp' '${settingsFile}'
-      umask $old_umask
-    '';
-
-    serviceConfig = {
-      User = "mautrix-whatsapp";
-      Group = "mautrix-whatsapp";
-      StateDirectory = baseNameOf dataDir;
-      WorkingDirectory = dataDir;
-      ExecStart = ''
-        ${pkgs.mautrix-whatsapp}/bin/mautrix-whatsapp \
-        --config='${settingsFile}' \
-        --registration='${registrationFile}' \
-        --ignore-unsupported-server
-      '';
-      LockPersonality = true;
-      MemoryDenyWriteExecute = true;
-      NoNewPrivileges = true;
-      PrivateDevices = true;
-      PrivateTmp = true;
-      PrivateUsers = true;
-      ProtectClock = true;
-      ProtectControlGroups = true;
-      ProtectHome = true;
-      ProtectHostname = true;
-      ProtectKernelLogs = true;
-      ProtectKernelModules = true;
-      ProtectKernelTunables = true;
-      ProtectSystem = "strict";
-      Restart = "on-failure";
-      RestartSec = "30s";
-      RestrictRealtime = true;
-      RestrictSUIDSGID = true;
-      SystemCallArchitectures = "native";
-      SystemCallErrorNumber = "EPERM";
-      SystemCallFilter = ["@system-service"];
-      Type = "simple";
-      UMask = 0027;
-    };
-    restartTriggers = [settingsFileUnsubstituted];
  };

  # Signal bridge
-  users.users.mautrix-signal = {
-    isSystemUser = true;
-    group = "mautrix-signal";
-    home = "/var/lib/mautrix-signal";
-    description = "Mautrix-Signal bridge user";
-  };
-  users.groups.mautrix-signal = {};
-
-  systemd.services.mautrix-signal = let
-    pkgswithsignal = import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/fd698a4ab779fb7fb95425f1b56974ba9c2fa16c.tar.gz") {
-      config = {
-        permittedInsecurePackages = [
-          "olm-3.2.16"
-        ];
-      };
-    };
-    dataDir = "/var/lib/mautrix-signal";
-    registrationFile = "${dataDir}/signal-registration.yaml";
-    settingsFile = "${dataDir}/config.json";
-    settingsFileUnsubstituted = settingsFormat.generate "mautrix-signal-config-unsubstituted.json" defaultConfig;
-    appservicePort = 29328;
-    defaultConfig = {
+  services.mautrix-signal = {
+    enable = true;
+    registerToSynapse = true;
+    environmentFile = config.sops.secrets.mautrix-signal-env.path;
+    settings = {
      homeserver = {
        address = "http://[::1]:8008";
        domain = "cloonar.com";
      };
-      appservice = {
-        hostname = "[::]";
-        port = appservicePort;
-        database.type = "sqlite3";
-        database.uri = "file:${dataDir}/mautrix-signal.db?_txlock=immediate";
-        id = "signal";
-        bot = {
-          username = "signalbot";
-          displayname = "Signal Bridge Bot";
-        };
-        as_token = "";
-        hs_token = "";
-      };
      bridge = {
-        username_template = "signal_{{.}}";
-        displayname_template = "{{or .ProfileName .PhoneNumber \"Unknown user\"}} (Signal)";
-        double_puppet_server_map = { };
-        login_shared_secret_map = { };
        command_prefix = "!signal";
        permissions."*" = "relay";
        permissions."cloonar.com" = "user";
        relay.enabled = true;
-        encryption = {
-          allow = true;
-          default = true;
-          require = true;
-        };
      };
-      matrix = {
-        sync_direct_chat_list = true;
-      };
-      logging = {
-        min_level = "info";
-        writers = lib.singleton {
-          type = "stdout";
-          format = "pretty-colored";
-          time_format = " ";
-        };
+      encryption = {
+        allow = true;
+        default = true;
+        require = true;
+        pickle_key = "$MAUTRIX_SIGNAL_PICKLE_KEY";
      };
+      matrix.sync_direct_chat_list = true;
    };
-  in {
-    description = "Mautrix-Signal Service - A Signal bridge for Matrix";
-    wantedBy = ["multi-user.target"];
-    wants = ["network-online.target" "matrix-synapse.service"];
-    after = ["network-online.target" "matrix-synapse.service"];
-
-    preStart = ''
-      test -f '${settingsFile}' && rm -f '${settingsFile}'
-      old_umask=$(umask)
-      umask 0177
-      ${pkgs.envsubst}/bin/envsubst \
-        -o '${settingsFile}' \
-        -i '${settingsFileUnsubstituted}'
-      umask $old_umask
-
-      # generate the appservice's registration file if absent
-      if [ ! -f '${registrationFile}' ]; then
-        ${pkgswithsignal.mautrix-signal}/bin/mautrix-signal \
-          --generate-registration \
-          --config='${settingsFile}' \
-          --registration='${registrationFile}'
-      fi
-      chmod 640 ${registrationFile}
-
-      umask 0177
-      ${pkgs.yq}/bin/yq -s '.[0].appservice.as_token = .[1].as_token
-        | .[0].appservice.hs_token = .[1].hs_token
-        | .[0]
-        | if env.MAUTRIX_SIGNAL_BRIDGE_LOGIN_SHARED_SECRET then .bridge.login_shared_secret_map.[.homeserver.domain] = env.MAUTRIX_SIGNAL_BRIDGE_LOGIN_SHARED_SECRET else . end' \
-        '${settingsFile}' '${registrationFile}' > '${settingsFile}.tmp'
-      mv '${settingsFile}.tmp' '${settingsFile}'
-      umask $old_umask
-    '';
-
-    serviceConfig = {
-      User = "mautrix-signal";
-      Group = "mautrix-signal";
-      StateDirectory = baseNameOf dataDir;
-      WorkingDirectory = dataDir;
-      ExecStart = ''
-        ${pkgswithsignal.mautrix-signal}/bin/mautrix-signal \
-        --config='${settingsFile}' \
-        --registration='${registrationFile}' \
-        --ignore-unsupported-server
-      '';
-      LockPersonality = true;
-      MemoryDenyWriteExecute = true;
-      NoNewPrivileges = true;
-      PrivateDevices = true;
-      PrivateTmp = true;
-      PrivateUsers = true;
-      ProtectClock = true;
-      ProtectControlGroups = true;
-      ProtectHome = true;
-      ProtectHostname = true;
-      ProtectKernelLogs = true;
-      ProtectKernelModules = true;
-      ProtectKernelTunables = true;
-      ProtectSystem = "strict";
-      Restart = "on-failure";
-      RestartSec = "30s";
-      RestrictRealtime = true;
-      RestrictSUIDSGID = true;
-      SystemCallArchitectures = "native";
-      SystemCallErrorNumber = "EPERM";
-      SystemCallFilter = ["@system-service"];
-      Type = "simple";
-      UMask = 0027;
-    };
-    restartTriggers = [settingsFileUnsubstituted];
  };

  # Discord bridge
-  users.users.mautrix-discord = {
-    isSystemUser = true;
-    group = "mautrix-discord";
-    home = "/var/lib/mautrix-discord";
-    description = "Mautrix-Discord bridge user";
-  };
-  users.groups.mautrix-discord = {};
-
-  systemd.services.mautrix-discord = let
-    pkgswithdiscord = import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/5ed627539ac84809c78b2dd6d26a5cebeb5ae269.tar.gz") {
-      config = {
-        permittedInsecurePackages = [
-          "olm-3.2.16"
-        ];
-      };
-    };
-    dataDir = "/var/lib/mautrix-discord";
-    registrationFile = "${dataDir}/discord-registration.yaml";
-    settingsFile = "${dataDir}/config.json";
-    settingsFileUnsubstituted = settingsFormat.generate "mautrix-discord-config-unsubstituted.json" defaultConfig;
-    appservicePort = 29329;
-    defaultConfig = {
+  services.mautrix-discord = {
+    enable = true;
+    registerToSynapse = true;
+    environmentFile = config.sops.secrets.mautrix-discord-env.path;
+    settings = {
      homeserver = {
        address = "http://[::1]:8008";
        domain = "cloonar.com";
      };
-      appservice = {
-        hostname = "[::]";
-        port = appservicePort;
-        database.type = "sqlite3";
-        database.uri = "file:${dataDir}/mautrix-discord.db?_txlock=immediate";
-        id = "discord";
-        bot = {
-          username = "discordbot";
-          displayname = "Discord Bridge Bot";
-        };
-        as_token = "";
-        hs_token = "";
-      };
      bridge = {
-        username_template = "discord_{{.}}";
-        displayname_template = "{{or .GlobalName .Username}} (Discord{{if .Bot}} bot{{end}})";
-        double_puppet_server_map = { };
-        login_shared_secret_map = { };
        command_prefix = "!discord";
        permissions."*" = "relay";
        permissions."cloonar.com" = "user";
        relay.enabled = true;
-        restricted_rooms = false;
-        encryption = {
-          allow = true;
-          default = true;
-          require = true;
-        };
      };
-      logging = {
-        min_level = "info";
-        writers = lib.singleton {
-          type = "stdout";
-          format = "pretty-colored";
-          time_format = " ";
-        };
+      # Override dummy token defaults so env var substitution writes real tokens
+      # into the config and registration file (module defaults are placeholder strings)
+      appservice = {
+        as_token = "$MAUTRIX_DISCORD_AS_TOKEN";
+        hs_token = "$MAUTRIX_DISCORD_HS_TOKEN";
+      };
+      encryption = {
+        allow = true;
+        default = true;
+        require = true;
+        pickle_key = "$MAUTRIX_DISCORD_PICKLE_KEY";
      };
    };
-  in {
-    description = "Mautrix-Discord Service - A Discord bridge for Matrix";
-    wantedBy = ["multi-user.target"];
-    wants = ["network-online.target" "matrix-synapse.service"];
-    after = ["network-online.target" "matrix-synapse.service"];
-
-    preStart = ''
-      test -f '${settingsFile}' && rm -f '${settingsFile}'
-      old_umask=$(umask)
-      umask 0177
-      ${pkgs.envsubst}/bin/envsubst \
-        -o '${settingsFile}' \
-        -i '${settingsFileUnsubstituted}'
-      umask $old_umask
-
-      # generate the appservice's registration file if absent
-      if [ ! -f '${registrationFile}' ]; then
-        ${pkgswithdiscord.mautrix-discord}/bin/mautrix-discord \
-          --generate-registration \
-          --config='${settingsFile}' \
-          --registration='${registrationFile}'
-      fi
-      chmod 640 ${registrationFile}
-
-      umask 0177
-      ${pkgs.yq}/bin/yq -s '.[0].appservice.as_token = .[1].as_token
-        | .[0].appservice.hs_token = .[1].hs_token
-        | .[0]
-        | if env.MAUTRIX_DISCORD_BRIDGE_LOGIN_SHARED_SECRET then .bridge.login_shared_secret_map.[.homeserver.domain] = env.MAUTRIX_DISCORD_BRIDGE_LOGIN_SHARED_SECRET else . end' \
-        '${settingsFile}' '${registrationFile}' > '${settingsFile}.tmp'
-      mv '${settingsFile}.tmp' '${settingsFile}'
-      umask $old_umask
-    '';
-
-    serviceConfig = {
-      User = "mautrix-discord";
-      Group = "mautrix-discord";
-      StateDirectory = baseNameOf dataDir;
-      WorkingDirectory = dataDir;
-      ExecStart = ''
-        ${pkgswithdiscord.mautrix-discord}/bin/mautrix-discord \
-        --config='${settingsFile}' \
-        --registration='${registrationFile}'
-      '';
-      LockPersonality = true;
-      MemoryDenyWriteExecute = true;
-      NoNewPrivileges = true;
-      PrivateDevices = true;
-      PrivateTmp = true;
-      PrivateUsers = true;
-      ProtectClock = true;
-      ProtectControlGroups = true;
-      ProtectHome = true;
-      ProtectHostname = true;
-      ProtectKernelLogs = true;
-      ProtectKernelModules = true;
-      ProtectKernelTunables = true;
-      ProtectSystem = "strict";
-      Restart = "on-failure";
-      RestartSec = "30s";
-      RestrictRealtime = true;
-      RestrictSUIDSGID = true;
-      SystemCallArchitectures = "native";
-      SystemCallErrorNumber = "EPERM";
-      SystemCallFilter = ["@system-service"];
-      Type = "simple";
-      UMask = 0027;
-    };
-    restartTriggers = [settingsFileUnsubstituted];
  };

 }
--- a/hosts/fw/modules/web/secrets.yaml
+++ b/hosts/fw/modules/web/secrets.yaml
@ -1,54 +1,58 @@
-borg-passphrase: ENC[AES256_GCM,data:seAsFcQcBiIUnkoUYGoY6uEKbjf0TMJZklkE6TFwlHkdzwBqoKD0ASNzsIlrqEkQaLG7zlHpFci6SVnlMjSQsywZ2z8=,iv:E1Z/ttSVUvm8PTXq9lh12I0ogdQwORawm7DsUXh+04Q=,tag:pwZVzgO/MdIrKSNhutT+og==,type:str]
-borg-ssh-key: ENC[AES256_GCM,data:9qHlG7ggl8zoLGRr6B7sdLn33ISmRe9SnOQUvFby8UbeSO93XreQw2B/l6vJpX12vWWXMu8H1S0T7CM2BteZLn6SlIhefG2fvKHf+0mwJ6Jd3AU1lrYnyXzHfoliWnt4ikGPyNESPO1VSToupJHX3fb1sRscx27euRVITB4wgFxlyd0/dn+v88EUf0ucLTYSEP1+K8eiY0WLxNiwjl0G0E9hwN5Ze5rKOl0AlFw+7Kif5OXe956kaExmuBLPjlBgxjt49hfZfqZy4uOovg0mslFalOWgZkOCBfJ7k3YYHmsn9+ymCJE4ub2b9GXnSbudipEFQkcYv4pQ/NWFloYZVt6rh7Qm7IdqJu07aAS25vGXptNXbTmmS6fPF/2lXa1GaRT8EhpgsKIZ8LS6VJiCWD5Ela900Mw91xsbkz/CyKLjCIoMONgDwsRieCJoZqirtmj3S9DcOFjxZ/9d9xxD1xgRxl5ourVWoOusd7mWo9X5KEsQQ9wpr32U6NTrQUDR8SYJisWRW/RoTEeDsD5vYUqYn6jXcNT78cA9I1E3Il1zDMogTlBNUpvBjh7euaOj5pDZ1F0SPNLm9XTJ/TbIQd/Xxlmuct6AAEV+2s8gWvo5nQ0yO32Z5QssEfXl9UtNfKlNfukL6scJliQRyNtown9+6XMuRgI/Pm8iXx+aeurbGijnJs6miUI7F2Q9VJU1ioXXXTIQwfe/MijpSLdDggIKbwid3bkkMSsNpEgidodPmm0s94i7KH7tlnaxtY+oILjgT1k0jTBCl7pZ2lsuRs2LehUJ/aD8tuPDgOxB+aYFy8i5C3wWLjcRRAbYCDuTboIY8r7e+n3rIxe+KggsTS2dMthNgCBFJtAb4Dp8V8dtZGrPIfwI/dzAdUtQo11SuSx2TrI8bTH2iy38FXs6t8wGsx3aFuW1jjcMRRY1lIQFnyfcLmUqYNSW48YOT/AqsYklMcyG6UcTPxazm3sUmvmInflJOb14M7+Jb3HEYX4Utr7ic4CdJLPBN1ACOxW28JghCTBFvmrEHiJPIHJj+FHvgHBls3Turf/D3m0uST0dMM3dXpG7dSud0HuyKdt3p0GiDY1cQQ+ppLs/v9idrqK/PlkiTVoNy5rZuXk/XzpdaHRUzkUlg+XifisW1deZxP3/ATjDJBqJniHdCvN4He4iAVCe4Grbp68BhpvmRgowDWZM9qHyShMhyIAh98f+K7jsNnQx55+/rgKDS+TmEKj9WDiTrYmb6knZ+Y2yi4r6bc60yGOQjewe5eAo3bh4V5nQYr4xOUsHxRj+rirtIi9Re7UpDqTghcnwc4F0w838pFOE7XsVC7VcmIfvmBll39imDws2KhWOgIT3j+DCNntwKktU8SW96bQTFFl0Yjt2EwGvAXu4LtcOdH/RMmMd1NKiBWHeUONA7pIwtYY+rSi+TzzB0GkDGpp7Qs/S0va4tpq1rg4cobnLOiBSFrkLaI5F0qJXDPn5vdGflV3ca5oV44P4vozvUEn33mT1l8bi6SPOy9BN4QuRDFAdMnmsUkWU+jERbGb6QzFPzPr2ZRxtlvSRCRoYgLxmBujA4eiecWI0g7JB9Oj4HEmEfO4dSf0MPuatEqfJClglt/VPDAsz65IM9Nei2bub5insfO964vTsEGblf13ZyLmuZLhfRwdhN6+cJdVSHiXtPEkI9h6fbxZDw98X2Kts+NVXiiryUiODEJgCb1frOONCZ3sEpRWilAekxYjTSCwOg6oW/US8s++ljm6kb2vqg9OP/cPa7idwJx/c8VzXFvQZoxCYTMQ482VMfGa5//4JqxuxDBVE2JHEwPnQ+uSgdRs4wJfjL2+CvfeOtlpg7tz8BuKZFEJf5P80nz5tbezae7HxI3OnOdHohlFL9QkeYINDSx0k0C/4Yuc0YfRsqPbZRx8FXLYNrMGSm7WNLnNPJ04i6vhn7vOD6oGcRBfQ8FZMXQsZNZgPKZ+bnh44GpLu2ARBrd76WuNEoxTgw2LgI81pJ3MzcMVb530ePVf8Mq9UrNs6M3V8H5/t1xNm6vfjlhGL+QZbpwXaPBjeU86K7d3r7iZ6W2k/+iLkxLI2bz39kNfAXnci9P/G24P3uhAQWTa5LKG9PhMY9oPkJuJTNAg3ZR0Lycc2Nq3+h0U4mnEtejl6okoyacYUNtXJz5Iy0kKdcEPFgDWzsPya6tgp3/1rHOUk6+iHhmt0o49wrkbmAomNEN5kAN8F7ILAY6wfVU+H02dYM7EOS7TpjC1zy9pSJD1ItgGUTaC/6TXTrVY7L5Hdu8zMteDpqijaNrOY1RUTzURTDx/ga53r+YcozK4lvr4whKl45q2keIMhZF03TmtkQ5VYPjyv7tvo75Z0QotFuzNTb04ChMgDB+VnZzCwuO1lvWXnGB8+fOvr42ZjW9RB+cs8CUz5fLOes0la61+LPZf8KDNj3CURKknwglIJrabfJmquPRiJ9lGHgx4Y4wCcuTHPK8BMooDokBF1eJdLRr7Qn3jupJnqc63fRdHaQQG+PynP7syBROFLg/O0tGT40mc/Z8QBs3J7Eq01aM24RRrM5/5w+2gm5RPKart5eMIItR9BUFuyCvMVjnFKG13YpA5GhL+zJqKof7DacBhJMCRVNsNxsUOh/lkvHhFrvDQREM/cBnRB3ux4TkAeMvRy+0qiEUA+GdDcHn6HkhO+ot0NtWxpG+vZ6hxHMU1+VMw0mk0B/Hmomu+e1LDsl858UKNrNZKrJWUxd6SES5YZRptImaiQkuTtBVU+dzID8Q/aS/XyWIt1ADKmoRRKMM5H/uNSYufPgVYx8RAcpmKo5xpax61go/Vz/dovWFp6/kW7tUALaZDqnBgEto01pmJ9ZFdfYXFnQFifJ9UVFIlPQ33J1K/jDKYBUPSgl57QrG5JJzvnhWs5QxtPiomc2XIPcI+PnI8WNEdkAeMYkUpyoLRn49VPomOPzfm81ygvGOxAJytyI2faILKszSRS5nOw3asHq2ai0Eq6cL7sJu5CP8Ed7/ZspmfOMzQtZxGkZmaItWTN06NMS35qUq0MrOvbOZoXynsTQ9f/QnrITVTUky0Qd7FaYym72ZxlieQWCueKoyjrKxPYz3esryOxRGuTraE23pKgnep9MYgrp1p6GLbAICyMSKDYfwqd98Ren+/gTU9JyCKbpvamS5Vfrt62WFmKk3PR101M1lAA0CdPe0wiU/Dput258Gkq4eLkYzAgyJVMOoUXP+6CKEi2nyDRSAnflgG0/gvB3cg6orj0jAVJ+LfUOwRcO7ARjXlbqxe4sl6L2PiH8TbtXGNqpWwnDGk+8rJXaKcXAVyQxPy1NHiD06O8FUAmhZ4e5PpZ64i6UfKaiPrBuCH1no0CioItOCSNWmyFE3Ztfo3OI5c65+f5JfwqBvfwWdEZBmNeddZfVN74L5ElWk0FaHt4Dm8fw2bC40FqbVU2jbNnTdIRfYJhEPo9VyG0AA==,iv:3O+SAjX/D4k9SUmGKAfriyOAKaH2Jm4tAbfKDOoZts0=,tag:3yeNyl9TjlENfV+IxZkj/w==,type:str]
-zammad-key-base: ENC[AES256_GCM,data:62Gj7zyDGGMTVOv2YvrNVDIX+fxt94KVQ/EJBIqXssM6nrKN7veh4sIoLy3+/KwEMpCL3cnb3x7BKXDndnjulfVuF6pTDUEaiH/8YC5YPp+N3imWRTFYDsCJEkB7AsXkuVCH7f0MoMO3v+56BBYFEAp9E7wVT4Jdid7h56zfzaY=,iv:MMvHSUhNaIZb6XBBXBJlqolmXzPKuiFH0jQxlKnK7GY=,tag:2PPZtcD9wWBI1mokXAfMxw==,type:str]
-invidious-hmac-key: ENC[AES256_GCM,data:UZM6COUUHgLu/OVjkkp7rvzhiXBo5O4V/X+8ig==,iv:VX46ainev8JfGNic9FpnYlP7ZQMpTrMwDH0kW/l776s=,tag:HkQwPt23lHw7TQj9HqFIhw==,type:str]
-invidious-admin-password: ENC[AES256_GCM,data:YEdvUckgHhq23fa0ZDLvZM9/yRiClqT5LsoX6tPhNTi9rKTFUHwNrCKLZAr8dafbaw==,iv:romRuJxhQqSQMNepVS04Fu4e3SpA0yl7P8LUI1R76Iw=,tag:puncGz4EH5qkNfHRzjEdBg==,type:str]
-invidious-companion-key: ENC[AES256_GCM,data:HERKJBEyZbdxLcButZZ+OA==,iv:RHXz3OdnR+6Y/GefC7NoSYAmJ9RrxkCO25jms0E0fRo=,tag:pDtK/LCVnXmCJBHfo9Yz1A==,type:str]
-dendrite-private-key: ENC[AES256_GCM,data:ANQ9bFh4z03C755/Q1CKdPDMkBzqKXS64pJAvj975eMJfsfEXUfX72tRAJL/p3ok7iC4PZkM0Rp+ILjS24PyJHjAzIRLhP1P4NE0PFLQEuIBr7Z5D+s2E9rUDno7HtUSC5/Ht4qPTe7nhwwk+KM+OsuQJHfjm/gRxp3izcuha5qbErW/IWgiy6o=,iv:kwdbrb3UGx/3viNve6Zg1KrE4djt5pO02Nxdl6h7jhA=,tag:EXtYO6+TTnOJxYjelCRvKw==,type:str]
-matrix-shared-secret: ENC[AES256_GCM,data:jDQXFuBtWrDRWG8y/4pT67oNyHmkTyzwvMb9daAmlNBwqNc79fKS28ODbbkcHUkDl2ueDdysLY3l4zmM,iv:tkHi0ufo2rLm88gEPn4I3knl61raFWbYbJvRCl5Vwr0=,tag:JBo1ud52EOWxowStCdU/ug==,type:str]
-n8n-env: ENC[AES256_GCM,data:+pYI9J8wqY19IInhlomeGraw0zTFuHh3q6hPfGmcUrRzijc1xW1qI0sMADoakKrcN4mh/G+DzSu3D5fdWpEME5874xWn4iJvLuySVfjIyAzUWzadv3BDqMVEri6MdQUGuI71eBACb8iYLyHUUcy2Tso/KCPfT84oAJ5DXN3ccUBOKpAcjSbR3f1vuZfKBknAuomYmu2py+lOQnmXYvVbwkbstK77U38OOIJTktJE7BYqqt/m6NbGRZpm2Muu8l/NHHtiK1UeK9LtUlXm98iKC7ZOylQb+zAILhAihAohOaFIni1DRFKVv4FqaoQ2UsfQKyYoqKnbm/UraE27TQ+4Jpi28nbOR4GuZpkF29mZ7e/9OxOcJztgjUW+zKQKXsE=,iv:mmtFUEanzDIKuoOQvJ+Tm/Dn7DKXeXqO5geOFwxyVzo=,tag:8BSrrzu+rX6VpcEhUt32ag==,type:str]
-n8n-git-key: ENC[AES256_GCM,data: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,iv:0GtMeydlw3hWzLSoLQfH88STq2lRC01xKRTMaWocsFc=,tag:eVbQnugJ8wMHQAAmRKtEkQ==,type:str]
-phpldapadmin: ENC[AES256_GCM,data:0ce+P1JUQY6PrC/NX3gNIFPBA/1gAqzYTjR+yW7WqeOkmqKI+R/oSNIdnscrbHnz3rrGcCOV7xD0u18YBeiAbLVCxVfLePa04C5l3bGMWmhqGvcrNLoxk6dK/M0FXgf4qoVTBfwsUWDaTHUFTfLgffPFR/Qcpvc0Zl447CTQzGBPr7IfpiioR6Lt8LAyKLyc/C7NezEFZtDhNK9dsFGAAPKGykKGQUW6J3E+hs/iF38lTmUFM1Jo8z71N/2faBYwggoRLFcvZIZA2g1xKPHzUqbvU2lemE7bQiwi50bSGvAb39OszCZhAGo=,iv:zde4W0Jv8gtUuMsctrc7moOjF2ci+U9+7Mx3X0doMJg=,tag:6cyKEeVOUvqhFhznzWgVcg==,type:str]
-piped-db-password: ENC[AES256_GCM,data:AWCGHzXnZ4KPgrzPyJVzyQKBwcAa2NDwfOTiitvoAJ6qG/7eeBieFD1L3MU=,iv:A6YYQBOGzkqPEGWdJmGmaxYlMsTUw6CiwriWWIo6T1M=,tag:ANWKHBKTgfq+sbif0yQ4XA==,type:str]
+borg-passphrase: ENC[AES256_GCM,data:GJdxBsj/CFT8oqO+apbvQHDJS7DteBIINP+pq1pATWa+a8F+zJ5hwvtjyoSx7hLhVkB6w1fh6LTXxlGkJ0a661a4NOo=,iv:hCd45iFw1BBcOZfreJ9gDqoRt72sakYke8tKnyjMEOA=,tag:+7S4Smcmv8gEQua1yNFp+w==,type:str]
+borg-ssh-key: ENC[AES256_GCM,data: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,iv:++pEa8RSP2UydzilOOkNbIZI1pLjs3PEpttPO/YM6qw=,tag:wGiHUh4qQ07GaK3xcJtG+g==,type:str]
+zammad-key-base: ENC[AES256_GCM,data:q1+9uGw+VShevkdfs1LNiZvAsJWUO4zy0ajJbDYf1XzMwqCYE2dC5fsXxp9MpkEzMZHR9jdQyGnIZmpQ+wDiGIn9V5BE3X+hMhD88pneA8XXt5hdOCkC+TfkwQ0kiF9PlHhPt8w/4wCJkwM1lsj+ZVX+6BVmUuwHg3lBTTDMmeU=,iv:YIgu2och/ibSzfaVUH3rpVu00MIYlRYolgb1GckrRio=,tag:GGMOTNh7SfVVfzOCTAiXwA==,type:str]
+invidious-hmac-key: ENC[AES256_GCM,data:g3eE1y+CpVmQAb47DQbxK/rrV+BHExYtEPHAbw==,iv:l2dS0uudbdYzSPntxvPwqGp2CyMQQEStXbVBPgeVAxo=,tag:fwUAxEWQR5BMTpoipJRUxQ==,type:str]
+invidious-admin-password: ENC[AES256_GCM,data:SVtHTKaC6e+O9vz2eb6jplw/UeDdoLXIgw1wPxHqmw1GFgjXPTLCYG2tx4qt2CWHzA==,iv:ZWTlVfepoi0b8091w2pLjqMtyca42JodYPSN5q4M2QI=,tag:MEUbEY0mVTspIJZ1xpqR6w==,type:str]
+invidious-companion-key: ENC[AES256_GCM,data:s8VhQhsStNFwCHjgHO8UZA==,iv:V5v+l04FH3aQkJpAE554r+Brcn58bJhpO9IlsCf0j4c=,tag:MAIbYTdSGHt7A8Y3RufR/Q==,type:str]
+dendrite-private-key: ENC[AES256_GCM,data:IzeYvGS5MSg3SHwPs2zHI1QZerGG3U1VWBaOpiQhwBnd3yabGdinX2bMGV7fnWvsYgsD5C7E9NspAJLiGyqMQqsbFP/6Iy1vLTjns2kY4jqd7l4yFIPwABu3VPVomO5Cm1OMiR/GZwxObk1oLycxKzVv2VUjcbmGAadpjK5IgKDj2M7vd7WzGtc=,iv:QzOIiskPRrjI9T0JuUjxKYek3cVoHL/cEvKOHT4J/54=,tag:7xbpIv1/lStAaoGQdFcaLw==,type:str]
+matrix-shared-secret: ENC[AES256_GCM,data:F28P8x0aguu7BuWWtXTbgaPdQx88dpeKA1FsRK52pTVp3d4rMgAWQDfO22WOYgJ2ltPO2xIK7bnQFi1X,iv:Od3RfCvKkMyI2RxlnfixiIF2GTn7B9OXeD+21ttk/rE=,tag:ev56YcadjWgq0zQN+Hl+Sg==,type:str]
+n8n-env: ENC[AES256_GCM,data:qyZY8bLnXEMU7bIUBjufWkGxDybu7XWp8YKWYqCMKH6OIrzWQhRfwJQuvjKVWsyR/HsPtwzcxHf9cVuW+IJ5gcUVWj2lxLCTjeewD5otAXGRx0FbOvZ0W4wmb7y3zJGd1N618p5RhmpySOfQ6NQ4iXTxYWDYgJSlBl9Kn3/0KXsIZawepo8BDl2MUJ3hevibys2+9nGfS7+7/aq0wybaMuy/ivjgglwrGKWrByUrpDOJLW07BtD2VCXiWWb3jMYfCCkQ5eXtxAlI6BYRj4pzPO7QjbcR2h5S9Q/YIqOUtEyrDZTpkYHVm4soFwl9Eo7O7IlrS/P7hiqf77OVz3FZ+5K25YYLA17UauoLncnUtgOxlHn9Fnrtnr+0iMsYWtg=,iv:yJM/JcQI8BUp4a1m4ju2iHvnWpiWPC+/2kysSnmp9NM=,tag:cGbbKuGlso2MrFYijbSV9A==,type:str]
+n8n-git-key: ENC[AES256_GCM,data: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,iv:i1YxUvaxTbATF3sFmDt0RSnAOOifqBiDR9jegJpQWY0=,tag:mYZBAXn6hZ/aZwWHICBQmg==,type:str]
+phpldapadmin: ENC[AES256_GCM,data:aVoj1dhX9IsLTA/ZEJfRXgdQRah3nGntUM38kdcHRdmBY03EUm+i2sfKiaknB4afIAjc04SUxxNVbjeM65ipSW6sKQEMiVTAIJzi+1ETi6clbZvQhWDtvBBJ39ybUkH5YX3Os109h/jD/TApa2MRfyhml6rHWcNzhoxR3QJQpuE09kj6eBxfillUDfKfomWL4x4ksJl/agJdXxU0VGwc7zyi7mvMwCQokcrMxJ9GC+7p2Jpz+W5a3WKSnqc2Gpv9DEbo95m71arnK4TcZL+S7tAZsT5+rHzEoNp5I9/5WCzlJrDJ9vHD2JQ=,iv:fQigdELKdM8E1nfSVB7/5568tbALh/LVSMf4wxfOc54=,tag:zWnHAcTOxk0eEViPCK5lOg==,type:str]
+piped-db-password: ENC[AES256_GCM,data:yUmxi/Dqf/u9RumLEPGgZK2tzSYuskPFS88keb4w83vxY1S+Zgu3fcO5ZA8=,iv:1rI2WB2kZBKB2XzYB4AYtpaDtkXOssqo+fEq5ooMrnE=,tag:sOUR89pH8FceWBSqUw5aYg==,type:str]
+synapse-oidc-client-secret: ENC[AES256_GCM,data:nEDFJIgYDWW+8Nw7iMlesZwqcX6O/a4degzg56yvHsX0CfKBp3mND7uHoNfAWoYTMuNEpy6SYLnOVGiYAzaY/A==,iv:B1PdBoK0ml8baRfxCTbDPZZ7XNNXv14SuBxL2wM1f4Q=,tag:Lfgz4zl6BWTOxkgRPb/pCw==,type:str]
+mautrix-whatsapp-env: ENC[AES256_GCM,data:5inKfoXwqJ16wqE0yzn7RazXD9/vI/EtN79Yl3Z0mbil6JXd9kwDxnU3uuIz54QoLsDrcd8u+rSVrLgMThXx7py6GAfrQNBLuYFbvA2Os9CjJqydKiYze0VD5mbd,iv:kNvwQz1Xhem/kPCyk3k/nUrNmO9R9adw/q5YZJr4UGI=,tag:IreWAJCM4WodHdJVUIhMCg==,type:str]
+mautrix-signal-env: ENC[AES256_GCM,data:VPyFQJ9nsm74CtF+ihDIPEP/NwQuJZx7qX256HPmRk9Akr/FiLTBa6+ocgS0Vx348qrzOdXZrupI5xl0AQKh27cFLvH6LYk2A9LlylNkxmwrW07vVmUrmrcmhQ==,iv:D4xca4rxGV2LnwRLjjgiz+AeWuzCXLkZl9EWyrULkao=,tag:V/FFSON0rHxmQfh9/mi34Q==,type:str]
+mautrix-discord-env: ENC[AES256_GCM,data:fv9EXSCXVJQIWZyoPjwpSOwagcsBo9tid8ntr914QL3Dqm2Tb566BB1suti4is0g4PdpjVh5vofsgZsdscIEH+C5ohmyhAo2TjWJhXjTxxHZKHBn3b7JSd77rrJJWGXvcIT2iCCX8JCU7raWo4lNiZBzaPr/284rHaUMiN3QPnFNHMDfPwGEw9hYV0zOy/EkM2KQyy1zOtSBUzVxFyFgI/aCtvqlWKigELfhLuNVTwP9BSiCZVuXNhghVcStk75atmnYWU867/1frr+NvwkME7bHEhz8JYYM9Bc9iEAGhJZB/Nv0bAmLOsiN3ayOhhCpAFIWlgFk3A3lcpX7b5YcqXkYUPNEcmxSOzzloeSe2q8=,iv:wTJ/YFilbmHuIzCYyu8jwEXnOx7xvFV7/HTvzRwirXo=,tag:bLghcDPbiQPYEa95VeZnZQ==,type:str]
 sops:
    age:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNVBOdGZHbmc2b2UyVGNj
-            aVJkV2RwYVlvTzBURndiVTVhOFFJRDVEckJ3CndyVk50UGUxNDE1dS9rblQ5VkZh
-            aGtYZitMNDhDUi9xczQ4cGNXK1NvOGsKLS0tIFVHSWErVHhma09BcFlzd2x1ZTBj
-            eXN6NlpjdDNVci9oQTZGRTJ3ZHNHencK53kJSr3udGgPUsaDxYny6gkWXRCldSfM
-            kGYpeGMh2CGc9x5x2L3JlS3EbGPerblva/6wvmoszI2uL/hZzU/g8g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3M3h5OUlDbHc4Tk14MG1O
+            eWsyZkgxbGpVOHV0WlJnY01za2VEZHJFMFFFCk1PNmVnQ0dMd3U3VFBIK2Y4WWc3
+            M2d2NFdiT0JzUng0VjU4SEFIMlVLdk0KLS0tIFptQ09tN1lGbk9SMk1neVQ1OHFl
+            emJ4enVuSEFxZ0tlWHlvUC9LVDR2ZkUKJokdEz17dE3H2t0XdDJVQv9qPptsvde6
+            MBkqIaeRN/esWpyT9SpqxA5gSpF0sBwRmkQFAyYVW0yDmsDxmA6NFw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhZDJUVXo3bkY0Mzc1RDNG
-            RXZBRXVSVXpDKzJFdWNpS1RqcEdQUEF5d3hrCkNqcC9CY1I0RzRWdGcwREpzbEt5
-            d1liOVZEWUEzTWxzZU8vaTZFQzNWQ2sKLS0tIDNYeEt1RlozaGdYNnhpWmZwMGVE
-            c256c284cmFhUWhQeE5rY3JDY3liekUKIPl8/qYgp2JlVjw5t5PnvS4II+YU1V+C
-            K7WOVpqIGi5F4Taa3SOtNBzRs7jbdTEE231C4zwZnBucZoX9gGVC+w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGS2dmbE5DUVBGMlQ0Um1l
+            MXY1YXVrTktOSkF5MEhpbmQ2QXdtWTY0OHhZCm5vbFFFdUYxM2NPdVA1MjNLVStB
+            Mm51TmJxWDloRlNWRHNBb2hBUnMwbHMKLS0tIEJIUnVUVVRLWlBEMmNQR0tMQTNm
+            a29uaTl4ZlVWUXlXS0E5bDBmOTJiWmsKydzPPYsWSZRBw9Z9X8ToRjSbCO8QgxGj
+            4X7TxshEEhzdcUOgkrGSDvDcsb9lQV1p9zTudjd3GpaXRmTOP4z1sA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTTERxOHJxTW5Gdk45Ukxx
-            MjkzWFpuSmdBT1psbWFsSENBVURnb2pObzBFCkZNY3dEeHVSbWpKUVlRSnVEWk9r
-            cUs4NHNRSWd2OGZ3R2tqcDZqR3I1SmMKLS0tIC8wTkpBUW5PLzFidVJkcFVIL3pP
-            elhqbCtTN0FyYVdBNEhyTkVacHEyY0kKJam6XZgN7INkIThBPyZ+vi4xhknY7GVJ
-            57aIYLI6xMvs5E+120qVjXxoo29kzs2uwnKzlbAqMJIY/eoDWW33XQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnRTNZaWtFZE5XdDROekx4
+            NXVZcFl5ZGxqVmFYWnRjb2M1MUdDMDVwQ1VZClE4dEdtTGhRb0JQNDJZa2dSeERQ
+            L1NrajJrcllZcHZ5RVpUVkdDRWYyU0kKLS0tIGV0WHkyb3grT0J1ajhGeW1QeFIw
+            Y28vcThsa2c0ODZETlVteWk3M2ZvbWsKk+d67Xrxd54K4OQ/ssosEWU8AFNjAiZq
+            tv02IJnaVu0jTpGnscqpL/fweGOg3++blsccESxnd1G/n8mN9Iifkw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1gjm4c3swt8u88e36gf2qlg3syxfc0ly94u64c42f2tsf24npw4csa6e4fw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlTUJHTnJOL2pJM0ViVEZh
-            SzdNdjlScG1OMDlTSTlLSXdOcTJwOUpWeFJBCjA4UEpFaEZNRGRMSENHWXdyd2RE
-            akE3T00wUC84Y0JSSldkaGh3TU5CL2cKLS0tIHpURHdSMnRBVHNrSk44ZzBUQTRC
-            QlRRcFVzby9namhkOGJ6Zk9TVGxMbDQKEyd9Tf67JclHM+kWZxpXl+g3+cMimfHI
-            VfeF0z7zBcPuLb6xIzEHmXDn6Z3EeCYOq975nQde2JSpmKIZagerhw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFQ0E1d3lrdnZNTUxzaHFm
+            SXFGaXFVbDJmRVVHRDRGNlJkemk3N0lwZVc0Cnl4NDJhYzhvQWk0YjRQcFZEQTlY
+            VDZLcDJjT1JmaHJlYkhYbWlkcUpxZ0kKLS0tIGlGZmZOdFJzd2VZbi8wb3dUNGxy
+            MlViei9iU0d3K05aQWlKWHpKSThGVU0K056Yqw353eLHg0bUsMsxYSUN01MDVutl
+            +ZTPtbNIy0xh6tj0ZWr+wIYnN5z1sn3OtcUIKm98sT2bHapvoUkl1g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-03T12:45:54Z"
-    mac: ENC[AES256_GCM,data:1+D1VGQ19gAfEL30hUN6BeBxVnYLvkQ1lV48WHeTcM0mlWl9z1KI6eencwNfHw04fnJzt9VNOClw+p8ekRTygUnUOMSEh9QQCGuCaFU7s+vRwtafO4t5Ip00b5P+TM3HEbSFNBRO19+Btqk1sfYZv1u3YemST/v57Y9tk/yx09c=,iv:Ea1KnGony2CvGHB5x0PBqLSb8faxTVbjDPo1F1Sf9bo=,tag:hduJprCw11FJB0bpF8dSHA==,type:str]
+    lastmodified: "2026-03-01T18:37:04Z"
+    mac: ENC[AES256_GCM,data:Kb2QbqGZyHo6mBC1fzx9/hC7xdI+YafTZBvzbkXUIOpC8EKveqivteU9NKV/y6Yyn6e5bMW77oafriP2kWSSroWVPlDpEBnwxuKp02OGDD2dXgKg2hpsbVJw/rB2PCeAPCo+TO8Yw0sqzW1QzA9XIhL9K3Qt3ncXvh+qh2O6S9A=,iv:XouQNRAalAw60wt2D9l/n8JDMpXIkA+4IdR7ixJX+40=,tag:vUimegOoteMPi4TyCJoWpQ==,type:str]
    unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.1
--- a/hosts/fw/secrets.yaml
+++ b/hosts/fw/secrets.yaml
@ -1,72 +1,70 @@
-ai-mailer-imap-password: ENC[AES256_GCM,data:MNA1xPVOwrJM9vctnTg9+DkFGA==,iv:mI6KWyiFbKi/g8DISXobUT8DGem+IYjPV9ej4AXZhhM=,tag:ucquexh9Qh6iHz0ouuiiZA==,type:str]
-ai-mailer-openrouter-key: ENC[AES256_GCM,data:26zPooXWcjN6Yk6DjVrvyqjoEn/NR93GCyPGJRveQzF676Zc3Tb69CJ2N8/EETQM0ajMDrNBFu0KSuiVDfWNeFQ/34JTDMeIng==,iv:/fbnJYcihzmGFBVaC/ULffldLOsL56GAgxDJkjMTDos=,tag:YW59M4K/BAYNueNqiZyBtw==,type:str]
-borg-passphrase: ENC[AES256_GCM,data:FF+2LY6AR/DhyUjE9GtU6zXPvvmxrDFYGw5bCaLRbUkkiADMq5gKnCyR+746RArUum+XJiKVDAR2KXyx8E6Aw7x5BMg=,iv:/1lAssDcbECYOx/So127f32OVXqK57ym4CbWFGzpcmk=,tag:jgGukcn4GAQWdoN7Nq9C/g==,type:str]
-borg-ssh-key: ENC[AES256_GCM,data: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,iv:6o3JOyaZgVewCxll6iW0d0jHWCqHnyf6wKl8FWHSxIg=,tag:I03qICWzSR7jQ/81rI8nAw==,type:str]
-ddclient: ENC[AES256_GCM,data:JyGF6srDPg92759tC1piUBwyWh7YHl7JPtLZ+Qu2Azg=,iv:vGdZFxZTM9YJrmHnISu3Qfjz6dYqSXmuVDwdxs+Y2jQ=,tag:NE7g0ni8KjeWcJuHsr//7g==,type:str]
-filebot-license: ENC[AES256_GCM,data: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,iv:mTQW3vIV1DLxptkb1az/+fPqM/SN2K82s84UsMZZIXk=,tag:ykySC07wgayeNxvsGQgHSQ==,type:str]
-forgejo-mailer-password: ENC[AES256_GCM,data:L1kUVH+z/asVVTQ+PaGG6ittlOYuRaEavXSurrQDjiCyIn4aOpjTHqlOl8xa3AZEYHK4a6yB4+rwnec2r/pn4yxe,iv:9DAZL9MEJjT6IHKEcQOuN8BVjDgP/kKC8kLBJ+Q8jLI=,tag:t/JyuLKIlXUlDjMaCXMSgg==,type:str]
-forgejo-runner-token: ENC[AES256_GCM,data:uzmIHjb9dOHRcytAIJRSwtwY0oxSkhOVRcxND3f8HSdaZck8LAyuKVme9fsf6To=,iv:orng20wqln4bRBetSz3VwwJESMyI/2GQrThRle1FU/0=,tag:uhJULaJ5NjfIcWCJL7g3uw==,type:str]
-gitea-mailer-password: ENC[AES256_GCM,data:mhhuDBk7NoRlfbKiZkA+0qNSW5pvD05qyKkBookNgp14S3Ng2/rbMgZCVh+NxPyPr5NrbFgHBje9rYJTm8+Njd/6,iv:qumlcgdGtXD0MUxDsuOPFoizfRPT9guKtgwtwghtXNE=,tag:I1WljGwHxm2QY11KOOkTzg==,type:str]
-gitea-runner: ENC[AES256_GCM,data:rCtSm5GhqoNbhtfTLqn9h8CUkksDkjth4nfylXlpTni3VeBS6Glz+UYj6eB/AVS5CU1vxwYm2Sa2alFkb0h4jE5mJjbHNF+ZSVokJhHvfQs1O6xCg37CbgWnq3htKOTndjW+0TAexf5x1m1C1Y/dU8rlXpKW55wmNMhMQtbXvafsGRyuO7KiP44GbKC8J4qblMDSANsyhLtO31iiL/UeWCWwN5krpyd865KNJno38bmLYEp3wuObmCzxSoTyF7R+27emqshoGAzeBqfCWfDZ7NY=,iv:KuGl/bKCiWrO/4AKYQl+w9WVryeXmoZxxBqhzG3QT8I=,tag:JySKTfPuok3eOeN4ArFMbw==,type:str]
-gitea-runner-token: ENC[AES256_GCM,data:gSV+cDExbkTMs7X7GtCtzG4o4XUJE7N53SSPakFm2++iFIbpWB8bUJFkeqMVihM=,iv:CS75NBdnppvBVi4jTOx20UnG5bazk3K9A+ogn2QU0t8=,tag:fEmtq4B0M2h8DlsGy+jIwA==,type:str]
-home-assistant-ldap: ENC[AES256_GCM,data:UqpT+oYLxWhLQbnEDx3CRZvWgGW0DyBsy9jLz+rIi4SyKymVyfMjrfQ81MrO/mN6qBcivtK0W2QK6bLAw6gZcQ==,iv:707MWjgwnnAnBCjyTgJfH7JVscIdgQDtUg9vR7oMSo0=,tag:ourEoeJBCtgYPqJh8d5k5g==,type:str]
-home-assistant-secrets.yaml: ENC[AES256_GCM,data:CJ2iyS9wOr7J9h1RfdQ+eycko/eC+Ju7XRbZCvLP2HiPYXzJtTuR7FWs5mnq/vPBDarubWPdQKMLS2SvSxD8k+fPHKptHFvtLL9zl2GmiOBVLjma968CrfinnTst9fXFonTnEBN1OwIcJFx7bBYaXSHZLq0FX9aqx5D2nK7SxfEMihQUOSWVUMoMBaaAZzaRW26RJSHDsvBjqkMl1CXi+UdTkcSSkgUACfoMQtkBs9WKHZCIMw8F50oDsjW7X7bGbH47sbnTVAQ8MhBz5HVoG2orXMpunZAobajkV8B/fU7z8EJb6cT2EvRWCDWWX1yXQgNCZ/sqrq11hIQamTS+So8A,iv:e1AMc1bTmJKGWVe2uUXk4YAIZcI4HbMhNtLp5qrkjK8=,tag:XZOrPVbRlkUl7NjZHVJ02g==,type:str]
-moltbot-gateway-token: ENC[AES256_GCM,data:8w08wv2ZSBNs6vwQFOdKX307OWyBZl6hZya1+3YJJVhR7o7nWSepCzniA/+urd9PacJuMWgeJXWao/6+PcLtNg==,iv:ZdtQfTopG7OghJLQxCqvX/wDUMQFAKW1NuepM+9+xAk=,tag:hZBy2wxOprbeuc2aXARZ4g==,type:str]
-piped-db-password: ENC[AES256_GCM,data:fcBsQQuW/uTACh0/dNCeuhtaMdQF5iqRrhgzsHuyVO5LpgLzZnZ3AQvTWmQ=,iv:ZEUMqvWEfr3nQaYzZndb1YT1TVIy+ipiGgxwYQlzRWI=,tag:MV4YjthTdAizJRgkyirFWA==,type:str]
-pushover-api-token: ENC[AES256_GCM,data:m3FxeKVJJFEjLigJRwP/EQ4biFPV4rxb0IFjjdqd,iv:RUwtPUG34A4UiESDI0KaC2zS+JNPrLEYYwKRejbAIzI=,tag:1yepmEwRuk76HqE7g7aW3Q==,type:str]
-pushover-user-key: ENC[AES256_GCM,data:xCiGfy0VgWljbeiVEtrflWFSI4DLcZuM0bu+vSEx,iv:2GORS9gDO6arGP4+h1trrm+hgxMf2OSPq0FVuwHpu48=,tag:H4mRyfuwGOOpEtidZYYqPw==,type:str]
-wrwks_vpn_key: ENC[AES256_GCM,data:U6zEpKRkhFWOuhuaiy4tNw47ceQ7fVhpTUqygQXnj11Grat4cGFRscb43xFy9wRj4aatGLqPoMe+01AO7JkSaw==,iv:zeytSy7DlL4W5xTyofbucIWbfC+WqKNQOZAB1PXkun0=,tag:FfU7HXTPVCNYcEoRtw42Zw==,type:str]
-wg_cloonar_key: ENC[AES256_GCM,data:fG+YkjtQgVhsKh3r+AHlT9NceQ23mrWieXuhcOOrgu6Ane2YCaqKUAB1R88=,iv:Q4kLcS+DrLjzONpApYSVknrcFgflqB1sU7bPJuYjWRo=,tag:EzZKNQXc2H1Uumxu4JqGYA==,type:str]
-wg_epicenter_works_key: ENC[AES256_GCM,data:e3PV5Mp5DYcod9fLn1sN+Ey1BLxFBdMVWALCyUZxVL06YRGLv3H7FU8kwhc=,iv:Fc05zoG8aZ7/i56RmmtgNdpnKlwgD48BsgIqfzkClf8=,tag:QUpunN/wc36+DBG2lAxSDw==,type:str]
-wg_epicenter_works_psk: ENC[AES256_GCM,data:yMWPwk3q9cjVKme+h6yf7Y34hLvZi7uzp2F+2YouGCaVGiqEKqUyb1NQI1k=,iv:0HqTEnoAeXDyiU3es9FmR8AakVKEzpecGFeWmvepy8A=,tag:A13ezlAe4NwfHnCICJsAmg==,type:str]
-wg_ghetto_at_key: ENC[AES256_GCM,data:UFA5gw+qBwv66J4RlDl4VAmxGhflfHOvAd7ZVZHGFTvYa+t7B1mLphWgI8s=,iv:wber+u5y24MSaptRkGKSZd2y/cCdlGRqiW3DCbpf9ms=,tag:WzHkZyu2P1pwtmXuKhs5VA==,type:str]
-matrix-shared-secret: ENC[AES256_GCM,data:x7qR1zYond0xnfxrwR0taKuFK+tQG2zRkYd7jqEttkPKVccRWKFEuBRp34k1zOphehj/fYml2+TJIA3xNg==,iv:VxM/+y/gnE43tpaFHx0jyY1v1oRwOGkRFxuZLEHZMPU=,tag:v+G2ELOvcPEYlMeXNt/3bA==,type:str]
-phpldapadmin: ENC[AES256_GCM,data:t5xJMhYxAQ+7x3IhZVhC3KAxADuLqOR5YgQK7wwthEo4ltB9cuYrTtlcR78/lxKnvxj0/xaeGipTmV5mo90YCEn5OZuLLmG7XNTQ2LEpVb+Tpzjm0aRkzsBS4FEvBd7hGoX+UmEM/3/32HVza6TjYTsEer2CVVOywJH+I33dh42XgLDeIoKtrwA9N8TNvi5l1stM3ewULZRh7LdvnSGxkM05qoplqTEcovJfd7DugKnmQsuNXHkoTIKG/tewqfd79u+4fiABHjfqgq8Z5sdXzAR6jLR97AeynM/BymOENZO7aH3W6QuZYFpO1LZcDr55hUbKJLWsMG2sCH4DGZeEpNAj2Z3UmTNw,iv:aK941kehHtZkKm/UErA1oPP9tbGm2rmoruhkH9QbPgo=,tag:70p7NiOtf06f5IzcA/ZHHQ==,type:str]
-palworld: ENC[AES256_GCM,data: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,iv:j+yDCM2RR8nJuzcLEEBsTosAuTWT7vQ6dM9u62ZF+VE=,tag:eDVTEoJPJLiEY2937PJAFg==,type:str]
-ark: ENC[AES256_GCM,data:7rR2bJGn9hxP1l3MaOOcSa+M5Wk+M7k0pe3wPRPiiDjcEYvs6qHMvXvT3F8HRrT1rAFTdicD//SbgCrmAJOqFrFoM6zwiNC8AQTzcUaZuIvRseHEBqzAoIiM25YYw6xTiDEkyadKiQACDcrrJJqB+S5y9GqAuzNj4nP76QM4NMCpadFgt/UbZSRRJPoDM1L5wwPv6lMw9bYvT/UGBCHo4IrQEU45JUQHXVVWK3WySXcozmx7YTwTnoD428ksoOYm/306MUuSw5BlPYi3,iv:1AC9gA8nuzrLL1F9Prp3+vdQgFBtpDmwy5uiXzxHUXs=,tag:sS00gvjcjJmSljpn+BnHSw==,type:str]
-firefox-sync: ENC[AES256_GCM,data:Keg8xfg7Qw1dguubkW5yRtMdU9uXyrk8K5MAhCQRMs3PpNElagxiP50bXIhAAeZlU23DcP0rYy41A6qc51yTJiwY7GEQPzf88Mcw+bIH+/+eqc4y1a0KlCwXAMfkEPwPYj2mFk77wakXJbxNnDACKXK9M0p3MJKr0XukaN+io+gbz0Y/k9l76g3R5eZLObQ=,iv:tPvD0gpoU8lseHOaC+iqGse6OonhqFFQUmPoZLFwgGg=,tag:2n0ORJMuXkxfJF/cDdGUng==,type:str]
-knot-tsig-key: ENC[AES256_GCM,data:NzFNwB3nQ+8LW73m31qxayQo9rKcpv76MSU6bXIQCH7uCEbCbJkrv8Fd/Ls=,iv:hUKu0jKNHkXpgySkv/CHkSftd7uJexrkZQMQpUhRoss=,tag:KOlthDUIRupxQnNXZXL4Kw==,type:str]
-mopidy-spotify: ENC[AES256_GCM,data:WAZhYqSS7tEYjx1zR0RI/lvYKvpBdXeNJuFwDrtK/lP5w4mbpNl5uYe1y5Xrn88C7gksOjEnL2KZ7aPZds0px0qZ9NXemdqSdJvWtpX5mEbGL/hvYbTwTP/S646i/Cnbr01h3GtzjXYJvz6+hiCcxZh56ovkyQVt,iv:iX3BUOZt4SpkCa2ehRoTugPJ5Q9f/D3m4zGssl5hxi8=,tag:Is13zbCwC8ilEZJYStpuSg==,type:str]
-lms-spotify: ENC[AES256_GCM,data:MNiPyOdzkK02gQmMPvGaqgO9uqKhHZF69g/+K8tDZlUlOfKtwqKy/L+63GMKk8IQK4nE8aRZ40DrBM9gk7jKI1WQ6IVU/q+ld5uMrPypvBVcMJaEq51AeE4XHwVzDlw2oS3nzeffEKVfjh/GuuBM83s5S7I5U6cunBhMpC0fKkkwvOtMIwerzDvRKpCVOFBebMxy0iK4thPlzTzDk3dMzUemksGmOEMXB3KK+swRXMroVGbvuK5czVaEEP+lXoPFte9xQj6mag==,iv:nXxMdYjB2ooq+q0BczexevZj7A5dNDEwuiFNXGZEp6c=,tag:7YjpA/v5WIayL9dqKrZz/w==,type:str]
+ai-mailer-imap-password: ENC[AES256_GCM,data:gmI3NcKl9DBMEIgDVXsS3pdVEQ==,iv:dxfL063CYaKT5hMBpkchn+JUiGJSojCI2CgTBgfcYUg=,tag:KoQTNAmHgC72+JaarxtHog==,type:str]
+ai-mailer-openrouter-key: ENC[AES256_GCM,data:yQPkspgL+qXP5UTaKSAMA3Y0M9tl9E5Qg66oLLYHy8FlM7h3t7kRzRprekZlWCEfFdb8zkAhmDTZX+7/myRfuIFNwE3f06JQBg==,iv:aDh08joveqaotIzzKv08kPXcM0hteIEwxL6wUPFYHWU=,tag:A+YXd8HtV0lCLqHEvSj9yQ==,type:str]
+borg-passphrase: ENC[AES256_GCM,data:UiV07u/NUf521QYWfilEdwoQDBzlRYiNik+8CbZojaIVHtleDz1dBiT1R2GZ9o7KGu6s4dCDNiPZ00zmxQ9qqUKWASU=,iv:47MJUDzSpMj6hyPXrXX+3E1mJUdnIKBH+2itREyX//U=,tag:/6eWHpGOheChYeDqzz5UmA==,type:str]
+borg-ssh-key: ENC[AES256_GCM,data:o7ZjyxoxZpjYpNbHAfnf6SLkVjV4yUHRmYJ49HuzOblZDO05f0aPcXKhQ5Pg0zvMb+9PWAjDXhtZREFKKhC9fJzAtEDeAJlaFoe2f/sBjL0bh4w5S2Lhp1Nuebv92lz2bohkrwpY11w8sPNDzjJFQ4uVDQiOwOlW7u+IJmg3fsGUGp7P/OeJssR/O44VKdFBtObbyMUI15RM9zaeC3DDarV1qpqlkLRPXknrRaccoZDAY0pmQnzxCmtwE/GyUiDLCieirIUa2dc80ou49rsbEs+ZtNsu35DFOkpqQ2iF7lqtfsU358FJCiIfhNwkzmVl7pcQ0RCP97NgK+YuCY0YHvqbgVX72x8DLXmBhOI+PKAC1fNDJc7tIn/B1OUX+/W3KQzvtV1slY/XqKm5iy7tRHg+ZL+IjRmSNIX3/QXpD+CVc9pY/rb3hEHuvXZs3peLrEWGzvtu1X2uYK6Mwu4tnfp+yDQz73auUL5Qp0xilq85B4ZykHGMIalyVrSaoEe6Yc1RM1Mz7Lx7Dds95y84uELiVMzxZL95HtFguAPxVFSNxcz8obY5HgEaSohQSSYn3Sknq1Y24044aPm7nkfiQiptvw0tE3ZzFsHaT2eXNZ2AmnqUriJ2ymJQENOGNmbUrU8jlM5W4TfHNzgsMyDuU0hJYsU+JOWdV8qF3d5seoeXPMS9GevhRxCP9NowI5Y4QnpEi7OpGi87HRbA02ZL6J3k0LrP7dqM6+w72vbE3g3KKRG3RmrvfGYBegnsW4nq7B0rY9DzQ9bCTQOhLPJCb3EKe5N/L37/7iAqdzv8LZJCRPFPqkJFP5CeC4GtbWnPm2rI+7GXQEdY3R/Vor3aneitquwQ9ANzn9xENAmDcRF3u9Rd64+NYlp1aBfw/oyKxHRuYVxfLg2z9FmUDpfDkheVPxUXVvdgcV3m/4asR5UlNNhEtZF5KXzZr9lg6xpoMZsCXhLSA7zO/cd1qcHGhgSdbVkchNoKebTxYWbyYGfBDkIxt67dW7J5XnsLtDq5CLhNqshEcMvI+seFYoFrmsa4OEMo4LmDxD/2de0qgUg2fOrB6MUh9bmqoiwTAIhypxvox0ckC/u4NrKyY0sKIrIAIoI4/LcUF8Pbsyl/ojmuCT4jw3B+3yZQA9ykHGAJUTdiK8F7x8z43+DRO5raJ4oTgsV2N83esg0Qo5ZAl50oOjYlEQz/iw2OhLoqNKpEUCE1rw2F1tbiieENF7oqJQPyuXmPEP/DMPSuv9Te8E5/La7HBaas6z/gxugVqYCePrDb8QOVlRKLUiyJfPLlD6a42M+nwfooA/iY2I90Cy20I5ijgQoP0VvLL63bWe2rYxYkzZ1VItTVy2Pk65hIqN+1/W5ruGuivqdz/sQCF98MQgUd3I1FDmoFuM7E41+46ikFPm/RPNgqG7Bei5Mc+JpgZtEkDKyt8pAnlBRfwfltan9EVn53++n4ELhuz7dMLTSiU3IuPVp6tYNiE5eNh4ZVev4R2dXvHwvRPJclvqF35SHsbhLl3zAzaW2Rf6HrUEcgwEIxeNyefd+Zxi1GyOZ6FgRdtUI7Lu7jTpGaq8Rco527Iyvk6LqsZStwH1BYH5sqCE6NmsHF8dXm3KRfdE2TB0JAYcNl5G1TOhsEi2gIDTcGHtrJoPiOmOSmb1+Qw2ke9v+Zb5YSvO+ALGu98/kzkY4AVUA3cGNvc8+f10wfhOsbz5I2YlGr0UlVphliqh8jy1X8DLUoH7oYfxfAvdVD51+lvACaSjxgdtfVSBfXIp987TMit3i+s2O+svCHMVOVIIZP+kcDXCCmborWzP4e3gOKq4HcLPPAkpzmjqGCGtqC9aifv4zCk6QIGBfS84Ucv6fRSFWElvjkiQC7obxmkBjSORnr8e9oK6RxqHgF/6XWoatErTJweU87ypNHZdvPTUcWXu72F7iQWX7SA1Ug+o3GendV8b50TEYVUBb44WokQfJ8iqiAfZfRCwY6PGcGoxvW44LjCxYGxJZqjeCAb6umkVTlQXt8JSyFbc2er010ML0yj2Qo+L0Yzqj/btLxQTnJxaiBSyf3VQ62bWvZNB3TQlVdy5atrW6kQ00zHw6uyPUy3ViMslvQafrFdo/iEPndrQTDjgFMwKfAjfUu6gVGi0y/4I1Vzcf2R6Y5McHUQadHGPfiN5U5qka0coj1+Ke2efxiJ7gU3+HKIepitBwrbl+xh72Q20JTQSW3o3CG346o2K+IU9ZTBc17MhrziiLozdLtYwhqRotROIGlaZtez6KQGSknBXiS3PSr+lPs3A8PtN/hEClefwanXIxtD3Xtu2hcuA0UUE2DGX+sBPijGTgHBzwD7udET3q5Q8vO/5fhzWrHjxPvTLQsy7X4Yg+f3gBYgr8f8f/Cl5bJ+xQuFecDMULJlLp2/kvSQB8Xt0aOWFGRnIUIByg5cLU2dqRqXP6k+6Ij4QvTjj8MSXjGAqBcHgdDl3czNmEofVh5EsWSRnSl/K0wHDQtE0p+JlGrvG8PtuMSEr9Ty5T7YUKaqDUQWUaHlvPgusiB9lArm2mwJb2p0CQgtL3mJWne9As8PG+2rRmullq9+4c6uERGe1FFcFLUuogltJBBwwPzCSjk7As5tbAW84LwWM50VM7MO47ptDBDHNOQXYJeDrwQsse9jHCktFWSi28srpizBwLvqWUDbejswZ0QI/P+m8CY0rtTe3sucBHoBqu5fz/FlGjphuPDyFwQqOUcMMoNfRV/FIjLmDgBfQHUVTMliviy4QHN+5PSE3h3qIjFT+s6PAKTz+sveIn/7/8qoM/G3qUxD3auApdJMHIuRJzueRVu+Zw9kho6J4nOqM7Mc7kDIhOhgLWhfbCze7WNlT6G/jVBOlBkBGj2uzQ1wkBbiXRh8n8GUOBSeCJO7T7TnrBvPG62kIjTnyoU7mvSl+GBHsvm6h86GJ6iF3gshvOxnaxUcI/mEV7lU5h+A95L+9tlSqiN6KfojoU3u/2Zwq0vO1P/9rqRoM1vTplG6gminhUmrbrU8M08zTZ14eiBuPSn6e+X1qpPiBTmL74AEcrtcM38GYMgLUTDseEkLN0+dLpGnLPB69CDZxP9kuPw146fGLxZotxfjrbxIjT3srwtKKbjVTJh7tNHJNmPsZtFLbiRBRqCQVL9a7qB7DzRxHH/UI4r8/WlI6vK8BLFRJ6NVAPGJi1jvFqz5VXDjqAZyvpsrRYSjyuVAPIvbZF5g8e6gW7/eDk6Txd+fkQSWl2fs7wtMbUaGs7GiUv2NvCD0vq1fDZrIZTmT4S/gcXMEIFvyoeNbUyffPWLI50ZAskG9wKBEOah9W7ZDswPqX9rpoDZHru+tZ5Cmz21H7c11qlQ+cP00Hkda0joUkVm+x5tY7HjKL+e3MqqSyMw3Ial8IijFcShQNnqANHejQrR0q8SsngLhM2ND4aYnetWTe9oYQ+QcYCpKK3z6yTBE/eVfRz0msxvsA==,iv:MuMSY6Z8qodQMj/UnVGTNJoErAzxdby4qrZq/qZpOAs=,tag:pXE3gHX4OUNc/ko6kpEuHg==,type:str]
+ddclient: ENC[AES256_GCM,data:0OUV79zzO10nVzOf+oIDWLmIraLhttYoUtq+CD1dFfA=,iv:KKfRfZsFoRMGcOdXUK4wilPBcpSyBizS0h9lSMxTkMM=,tag:HHVpH6nnFfeOsMZh7JUfgg==,type:str]
+filebot-license: ENC[AES256_GCM,data:IumXe+8M87m1LDZ3zAStIWwwcsmM7HGjdtJJorWRMFTF8pZ5Mq8czxCxgz7yLGNtj3l7e3ibSpiqOKyU3GhPgxekmL7d1agmJuur5bepNZmFRb/lIeTTSFtqv42/HtL3ISf7Lxxaf5pUOL1VivU0cab2rD/fZ81gAR8klxJcYuRtb0rdJv9lY5OwHMjb6JmnDRERzG/kANoEEpaY1By09dO7bwGfmG1XU6sEY7uvfT1xubsm6RsoWRVaQ9gUiE94c2db6iT2BB4vBL+KFprcZjvM0375/W++YulCwaqpfGKQNigOre3+xI+lIBBtBGoZc3D15i3nHrBrdeyfW5G8fRlGriICLYd0OpaPgq67c4ng4SMFE3f1IhS5nkxnp0CMe7uqSsjNJNEuvUrkT2mQkReUQjOrh4FFnpGlrDqcqjO9Vx43gZ0VHLfw38uC5r/FbfWkE4ihSm6DvlbIb2FojziKCrAzSl4IXdMrIhmJSAZflQpa//o6SBsjksTmjtfILqog1eCQI5b0qhJxyCPbxftQG6y7JKhMRR2TcmomMaD9eok/VSSjr6fjH5j+pKI2C/vWHk2bpZY5QdpJfYOOeFySriijqcgZ+X/uDjrxY5uPqnszLO0mTE5Xpp/fZ6kgSi5gPNMfrw4+YCKCaEBS/NSq52qQ4tlfyyYFKYuJZJrXWIs4Bxi3IZkxygWXxaKTLNDo7s7wD4Yf++vPJEm7xDA2VQeXnKq1mh4Sg1gU3SyDuSTn6qKzvzQxcy/pm9n77nMnWAJLboTU2rf1jKAB33MKch++mZZuxdmhu9TvGyKbTJbofop8IU0GnpvuT+/3EDePZMQBtE5NsuHCSw+4zabyayCdyt0y83AWIsxZuGF6RC4K/s6dg4qSf+S3J8o=,iv:aZijddK9oJt9aUglQ+GWpdig8+FxjgIg3pDRZigG5ko=,tag:0gAts6nqWrHUzN0TOZOTxg==,type:str]
+forgejo-mailer-password: ENC[AES256_GCM,data:0o7JavEMXp7ffNUhf+ENv46b8ylMJaKL3fnAOD4pBkYXfmkfEb3x9vlc4DKA3JHO6l1zq5UN5Dk2Al1XtMbvp7R6,iv:BaUnsuzRWGqnD/5LKDmT5WJZVnzP3hH4L0wKx3fH4bM=,tag:77fbtDtsPs72SuXYKe0TtA==,type:str]
+forgejo-runner-token: ENC[AES256_GCM,data:VJ6NO3OIR0PKA46zWTydJLIdsV4GURNAcEeJLIGTr5lh39y0zLppCr7tkKNJw98=,iv:z2r7h9UmIlSX8GezPVPWLrSmurT1eFboLPq/mSUqVLM=,tag:4rO30MkmngFgOh+cVnZzNw==,type:str]
+gitea-mailer-password: ENC[AES256_GCM,data:URT9uXyNOMPaE31lKaBc4n/daeEHY6sqkVBPG6KgnnnEGQu+4i9uTWD+I8cJiJkr5/PDIjndsD+r69uT4MwO5lw8,iv:Ebk0mAwz8eKmFQTt1o0gOpQ+IChvxlVwy/HXMEbK3OQ=,tag:5cz3czW2fJE1CQVVoQYsJQ==,type:str]
+gitea-runner: ENC[AES256_GCM,data:zLHArZqTFLsuOCN0MAnqwGbJrNe8LHoWtuqh1ANZr0hnX9/3oBo2ZHjoyIM+99RigeEU82RJ7AVuBRIk7bj6ZrRfvW7RZcfiCxpjs2HEPeqvJXS5HWJSLzBHNiy3K7dVRjxCOZDP0C833/rQGJRv9S32PL8bhSy8X51JTIpDK51i6SQThdMOrjykPrckBprtUO7G29EQYwkKxpU5MAJN1J2vDnOQJ10UTxjSF5I+oqxpC0AaW71kilCtpnJLagSUWO66jGk+V1CBTTj8S+CIWZs=,iv:IrPT/75l6X4A5sz48OkFJXAzg9vt64jUNmyt0HBPmfM=,tag:IAJeBncsZeYijgSA9/OP9g==,type:str]
+gitea-runner-token: ENC[AES256_GCM,data:igrzNy6/NHK118oE7OAne8ujLNbxAiohJJLOBlLr8xjWeDjapK2z3IW7C6oQegg=,iv:eOZkEVdMJKgmMAsEYj8wkHPX+BCEkoXwA2K+GyDpzu4=,tag:khwZaLHuiGxa+9vhdWhvng==,type:str]
+home-assistant-ldap: ENC[AES256_GCM,data:qEuLQ2RbFp75refP+jddg1u3a3NWDjv0GnJbRonlhcBHdyije+FQAdvKPllYd6sfhZwXO6HUBoVI257FL//i5w==,iv:SlS8SLyvlVtG1ZgK3/2nqd9paHOWOIgp9ThPL/EQDYs=,tag:cjRoGzFEpCxi2Ie2FilNaA==,type:str]
+home-assistant-secrets.yaml: ENC[AES256_GCM,data:bk7aQcDO7CrIIOqP7dZwFZXwGtJeHgpfmdQw1kgRtfTNrhVllODYXcYP5OWjSqHyLwF0j/Ze17yVLiNNdu1KG7dsuAVGbzpEptyWs90GsBIaIytnMrymCLwwpnXXjb3z5aCji6m7cxoQbhtPiV9UGTTgh3smcz0ToKBc7g0rfQKwVxC1mH4TF18bhVmGpexlF84thObZbZWaoA4AYZjBjmzUV/Mi+PpnxVmeszY7Tp5c72Jka7iHC2H24ymod43hjlZh1JOBJB/NarwCbgdlVhYekWK64bZo0VO7Oia7HDo0zVF5EjY6MuT0DhwxQr1bIsTTjpfQ9z8tEWuY25RdzJgY,iv:QLsK9aS3xGkMC+JlksXJJxVn7Qp9YvA9qzzTb+laBmk=,tag:ZjHuiahG8sYydybxYm6kaw==,type:str]
+moltbot-gateway-token: ENC[AES256_GCM,data:GYAeIb/acWXwtQagdqqfkedrUYj8qoJerhzmJ299V4A+uFScurUHQ2X8/cyAUlmgDH902Quqwy/vG/h1lbICvg==,iv:gNl1fcNYrbYHcblVgzQSO5G105b66gdkoZydWDrxSnU=,tag:soiGbASWDNPMvuTxzHUkRw==,type:str]
+piped-db-password: ENC[AES256_GCM,data:4cp6fAdYannTC0QbW/VgR581efySOG4jJwoHXYntEBKbUDtF+pUKJlS4PzE=,iv:pRZS2YX9OLm9X6waS2Uju3hV50kttHrE4TC060mM/Ao=,tag:HD7cz0xkSqZujO+o/Z6vUg==,type:str]
+pushover-api-token: ENC[AES256_GCM,data:9IiORqyjkDVNHsjaZgzqPslrn8wIN7ZmAlONQygn,iv:AC0SoKtCSqQm8l5QPKK5XvS7KFjirOGBQ0VZoBetGeM=,tag:eq5DaEK4KucGsH4eYNMLIg==,type:str]
+pushover-user-key: ENC[AES256_GCM,data:YjJlFe+OLbWF9D4DVJRcUh8oZ+opJ6k1GUkPFtVu,iv:1haK4nQEKEQyvLEn4cFZjpFGrUJJVL2doHaiUX4jd3Y=,tag:AdHu6K7I/5/AGkhpLdqRVw==,type:str]
+wrwks_vpn_key: ENC[AES256_GCM,data:7KoQMt/NTpnai8bcbbtIeOPJE2dyuN3leUczDa03V/6cT4D39Ji/JRCqjtqGNqZV/LOhUBN623vuT/txUZJYaw==,iv:kRMYH2kglQgSQbVNmHgs2c/1hcdeAqpUkRPPQK322C8=,tag:3FfhHNseVKDO8QHeGX4ZFw==,type:str]
+wg_cloonar_key: ENC[AES256_GCM,data:GbSON+OSbxarTvYN1xQAZmwfDh+JW7yzQanhs7sITfxkNOTxjykPx/rCKFI=,iv:NRSPNwfZdlA7vBsL18iPpDo3bBM+N+5qZI1LQ4g2GN4=,tag:Lb/DS7ATa7vE4gRsKImbSw==,type:str]
+wg_epicenter_works_key: ENC[AES256_GCM,data:YT23qoZzpqUfZbi8OzlT3QFYXF4lytisiY1LeQFHGcSIv6AEh2jmLIV2G/U=,iv:61yDAUxmWKN7Jf90IUV//TGqSZlCsduSKxuSjdrvHc8=,tag:Y4QvNTamIacZZLkxJa/xmg==,type:str]
+wg_epicenter_works_psk: ENC[AES256_GCM,data:8Mz8Rd3Uifbbqmuv7az2JYBmFQDPjG9X/zEjwbLQs8ut4BHGq3U+0Cjm3cA=,iv:qpX8fYckAYY7/fbpgDEnbjpvaPF1/dbsSvqj9SudJbc=,tag:lzaL+IXZeQOgReBt7248eg==,type:str]
+wg_ghetto_at_key: ENC[AES256_GCM,data:6gRuY/h5dxyDWhafL82+zQh/yNnTeZ4LVjNM4B+KuNBi7weJIvbu7a27vS8=,iv:JiwzNLlyk8X1c/rFBVQ7vG5BcGeVajUCf7RKeWRlnhY=,tag:lrwz0zT97/Haz4i+N9Lvaw==,type:str]
+matrix-shared-secret: ENC[AES256_GCM,data:fHN6VaTx8dfMgmI6m/zbthqxMlPYQtFA0KxvhiVOkc+hpL0Ebf4rFMvfmYPFrAucgQWzXYL2hq66pkxh1Q==,iv:2Hp6eJxU8tQeTCFD6z+4e44fv0BkoIRaN1XV3TKI7BM=,tag:YhMYPduqh6SKE4W9HSwamA==,type:str]
+phpldapadmin: ENC[AES256_GCM,data:moIviVTgfDdc687czj6Ck5pFjvtyXAZzP34ZPmPmzsUM4ZxnA2fTLyV3j1V4tcmSLt8t+PZ42qO8nW0dQjEU/kAtC7r9uM8nOl4b2ADNXlpyP+3EfS11qVAgltHvlap6B2D3aKywZjhKxq4ydAZSMHgCxo5DpONJgW4RALyJQxQgSC7VxkdcOzNjXdCe9LYANzht5X+iVghv+wOzDTQAaNGCRK8LuoANnOix3uUhhF0ow5OtdCS+W7q4/W20Wl93+/YMvPmrGRSwHrlUKuU2XRv1zOtL/7qpyP4LB77X4+mYYmviyKKCadOsNmJMcOe4gFmB3v2LveHEKf0xZLwrBuCu2JiUX8K+,iv:ypEMOrI8RoJS+gpIkrSwNULOBlsHYPJtKN66JAukKVY=,tag:hvCRgZPqR7enbDNtpHWzug==,type:str]
+firefox-sync: ENC[AES256_GCM,data:XQT8QQKE+o1ZjjujDGWGJYMddXPKajmlB/WDdhx/44pCS/Fl53ea9hUdCpoACQA7Q4CUd19/LbuDMtfLH0ikh7rxGBCmqYtBVj5/m9fA+KwuvLigMp6M89JDUspYiAAuQvc1klstTfWrmcHF+TQhkEDMkCUiL9I6lwKiauzLj6QA8naKGUu2f4fdwQSfqYg=,iv:9rC9e5S61ELxWGR45N/FZDfb8SI8LuVRMrabHm049Cs=,tag:4UGYHcjde7GEhTrof5/m6Q==,type:str]
+knot-tsig-key: ENC[AES256_GCM,data:Xotza7niLfN9Aa5ZnKcPTnPlw0adiRpyE6cptufwGgVhzhS36VG1gLXHjrY=,iv:kYToZQDJpdSWuHQNp/HgHq/Th3mDc8v7ZNZOUmNUDvc=,tag:/oophT7X00kPSDmy6ZuOxg==,type:str]
+mopidy-spotify: ENC[AES256_GCM,data:jtkEFmSegG6Rh7uUmnvUP4EdEX00WNTd5xFf0mqiDm/CndTimHFrz0mgRuX1DwbYUWfczdWst9n3Bw0PektUPvBbJ9lAXTrv+jegAa4RuZ9C+FcJaEOVTO+E1IZUQiFFpXQ4+f2rywA5ZqExBPjW4WUmtOSUYt34,iv:VfeCWF0VDrkFhp5Ion2D+/aU92A1cuiXPPdPA5UsgVs=,tag:+dghF/WvyBYyjcWSe20Iqg==,type:str]
+lms-spotify: ENC[AES256_GCM,data:rF1kzfqFxnCFcN8qLdVM78oJbobtcDJJnuZnqCRYyLJXfvw8B6XdBnmcA55twrgynlNX6LBujZI2bp3/fLvSRn5sjoWKLESisaHP9J1okVluSS8DJiiViOfGYcPHWPvCVW5x8ss3qNDdonsmjPlljGaV1zYDfc0FaYhKo20z5Wx4zbK+TdNVr+cWOY8VMFUo1nt/U3xMMW9mRD8dk7WC2d6LqqXq+hbGO8BhgxH6//2f0h6l4V1D318vQsh/9pDntXDw9WS8rw==,iv:6jP04x0HWVn9YU7N2AEdkenan1rJ9sLUa1Pzg+GNr6g=,tag:5rtqz7bDZV6KfRLc3YDG7w==,type:str]
 sops:
    age:
        - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiRjlxVzY1TStKdUY2OWZZ
-            Rk05N1E3dlVPU0Z4ekFKbGdKeWtiRlpkMEJNCjhKcUZNc1RvZFBGRnhBakE4VldP
-            TGIrNTBacUROY2ZoaGdpYk5VamR4N1UKLS0tIEV3Z0NScGxWaW14S0hZWE9YcDRF
-            VmxsMFUyZHdFV0tGZ1ZhQVhMQkFlTW8KZEZKOZwMmp2+4MP7loEThNwTj1rBw4U3
-            IUSUFgFfYe1e/sdFTOJ88BBXi29cyTc4V5f+kYfEfmwogbpneUE+tA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4L3JKSFFlWHZTdUNINXJj
+            UjJUTWhiT2VqLzlSMjZzYzlwdjdQaTg4c0RzCnE4ZVFOWWNobjU0WC9ucE05TVhP
+            blZDTW5xR2ZqMzQ5S29FZm1zb2tia3cKLS0tIGVFajVnaGpJNFVmMjEwVEcvbDlu
+            dkdTeHBObDlmVUJRTWhsOWRtSXJJdWMKBTEmvlsjuhIHLeDV8wi6vPC2dnYlrB9b
+            DyXJ2Yux3nJojXUyctdsVoEnLyULEr0faJwhEY6wM8o7q2kulJsZdQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVMlRIRHVKUWEyZnYreHdi
-            VGYzdFRoZklOL2ZTV21WcVcvSDZKUFZrMFhJCmFGbGhCRzdXWGpOMHRsRWt5L0o5
-            bHNqeHFTZml5M3VrTE9LSFlTM2Y2K1UKLS0tIHI0SWNMbFhXUkRGcDZlRmhVN1Vv
-            LzdMejBOMDhlRTdSUUQ2eDJOcndjWk0KAf1Pl8mWk0167VNtp9kZ7D5iaXXpCpgf
-            eOm85DnyjqXB09+kyauo8qV3pJKoiEvZPbTtNs2gxNpys51L73CtGg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2RGFNL2twNWNpL29PQ0Za
+            T2g3UWNOeEFmL0E5Ykg3SFAvTnZySmlleTB3CkhJT1lncThiVmI4WmpUbm9mTzNM
+            T0xEMlRXQzNzckJUVnpNM2JlaW9UaDAKLS0tICt4YlFCaStnMzRLMGhOM2NHTUZl
+            d2FmMlNuVWZZeFo4ampidy9PbDZGam8KADSGf3e66eJShjahca6ce1re8PJVtBT7
+            qfuIoYUW4y70qJ+8C57y2HamN228NqO3FJ1h0H4pM5G7JGWLk7lGaQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzcElRTmMzRXZDZUZ5aXlK
-            amFEcFRTTmhUUVhpZ2lMVGxRZ2tVd3dJczFJClZkbnpGSC9nMHIwaFRsbjZrblNH
-            YzdxMmZMaE51MnppYnpaVEowMVQ0S1UKLS0tIDVSNmJvb3FYTXZ3YTRndGp5Nitn
-            ODRvd0p4d0pkMVJZVUJhRHU0UytzcnMKyPYJv1iS7bEXOtw+kHHmHhWaWbjjPI0V
-            M78VH2jpVUOIbpxPhD0p+VEGCWIS4Ji0e3OZzEjyZcAIzdriEpxfIg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UzJYeTM1VzEycXkxak14
+            YzNNWm8rSU5FVVZxUE02OHNqVndoYmcrRzBjCjJoY3dFeThHNjdqTGd2TG9hU2Zp
+            b3Q5NkpxWWluYlBIbnIyMU9pWUZTc28KLS0tIG9UN0xBUElhQTgrOUtFWGI5TXhk
+            cFU1QnI5SDBPQkhqWkdmUnh2WEhONE0K0Qii/MSgwBJaF1M6XaXpezk8kfV2GyBI
+            yodlsrl/F4PUBGWOOy5YYp/6CS+5KN4ZkwWg/tSkgxQmU472/LZL4g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1wq82xjyj80htz33x7agxddjfumr3wkwh3r24tasagepxw7ka893sau68df
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpbWVHV1VmWjZ4VlVkeFNI
-            TWVFNTg5ek44ajBxd2NGVWhiRWh5U01SVWtvCll3Z3ZwZk1PWWFOZXNoc0VVQVgr
-            MDYza0dsVGR3TzNkWFJzYXkzbGRrM3MKLS0tIFAxdWRGaW1yTDdTUHdqanV0bjRV
-            U2xxYmUxQVpwZnFBbWtmVHpablBLTjQKHTXEtHvAANwOYmfK4WGc/NOrfqKRZp8g
-            IYS8iMs8zEElj/RPWHOGzrKswZHSDdUQocVua1BLb6kyQK0tSgSyiw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVmtZb2xzMU1lTkVQQXY1
+            WUxTTTJzZHdyczJ5VEdMNWhYcS9uVTZPeFRVClNNUEhRdExobVJ4ZnpJbE5iTGpK
+            Y08zTnVyU0dQL0dKN0Y0RVMxdGIwZXMKLS0tIG9xVzVsWnFOVng3RjBDb1NDSjZt
+            cHNTMWhiamRISFJRc3piRCt4YmhqMjAKCGJQIwxYHRw1yh27Q4ZBQANEYxuliuDA
+            dzEEA/xHu7AIXHFUlXNpHFpK2RCVKoDGWOrTK1kGOgJ8fghaFypkmA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-14T14:58:44Z"
-    mac: ENC[AES256_GCM,data:obaJcARz6PA5UZ5OU2FaYR0lHl9xn4a2ZC9C6SqT0dpeJnfps7blgtDhm0/KU7p/lkIZyjq0T4gLrTWa/zCZ3k3vWbZUXpXQry1TAz38Odm0Kt1/gh7Ayo0mi87pYEHWbb9ZB+HIPIB4+YSFCodxCCKIMaNwzRj+WR8acgU/Qwg=,iv:/1m8l/hwFDjJZDsQvEWxy8efnPF+ijMMkTALCXbj/tk=,tag:sbv/3M9XJsBWfTZgk5wAHg==,type:str]
+    lastmodified: "2026-03-01T11:43:30Z"
+    mac: ENC[AES256_GCM,data:FKnbwWlgjKbXbqUCuLgL3q3eZDTOI6U6WXmo4U433eaFydDtl0ALos/SVxNExUiY7JAB/ZncZKX8qrYTX3/ZhC9iiLnhzi3euc+qelj+SLuGy84FDmLrqzoSDHoFonYMLotl9Bkta7OFRMq2N+wzu4iD72qkgFrGgfBk1bbi1Is=,iv:gQ7EgzM6zMWwrkO+L/rUA6EcDpVprUM6Vqv/AYV5FtM=,tag:6VDDIZLg1L9tUv86GkqgRw==,type:str]
    unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.1
--- a/hosts/nb/modules/development/default.nix
+++ b/hosts/nb/modules/development/default.nix
@ -24,6 +24,7 @@ in {
    git-filter-repo
    glib
    gnumake
+    hugo

    # mobile
    flutter
--- a/hosts/nb/users/configs/project_history
+++ b/hosts/nb/users/configs/project_history
@ -15,6 +15,7 @@
 /home/dominik/projects/cloonar/ldap2vcard
 /home/dominik/projects/scana11y/sa-core
 /home/dominik/projects/cloonar/cloonar-fit
+/home/dominik/projects/cloonar/fueltide-website
 /home/dominik/projects/cloonar/ai-image-alt
 /home/dominik/projects/cloonar/bookmap
 /home/dominik/projects/cloonar/iso-bot
--- a/hosts/nb/users/dominik.nix
+++ b/hosts/nb/users/dominik.nix
@ -639,6 +639,7 @@ in
      git clone forgejo@git.cloonar.com:Cloonar/wohnservice-gdpr.git ${persistHome}/projects/cloonar/wohnservice-gdpr 2>/dev/null
      git clone forgejo@git.cloonar.com:Cloonar/gbv-aktuell.git ${persistHome}/projects/cloonar/gbv-aktuell 2>/dev/null
      git clone forgejo@git.cloonar.com:Cloonar/fit.git ${persistHome}/projects/cloonar/cloonar-fit 2>/dev/null
+      git clone ssh://forgejo@git.cloonar.com/Cloonar/fueltide-website.git ${persistHome}/projects/cloonar/fueltide-website 2>/dev/null

      git clone forgejo@git.cloonar.com:Cloonar/cloonar-technologies-website.git ${persistHome}/projects/cloonar/cloonar-technologies-website 2>/dev/null

--- a/hosts/web-arm/modules/authelia.nix
+++ b/hosts/web-arm/modules/authelia.nix
@ -254,21 +254,21 @@ in {
              ];
              userinfo_signing_algorithm = "none";
            }
-            # {
-            #   id = "synapse";
-            #   description = "Matrix Synapse homeserver";
-            #   secret = "$pbkdf2-sha512$310000$PLACEHOLDER_NEEDS_UPDATING$PLACEHOLDER_NEEDS_UPDATING";
-            #   public = false;
-            #   authorization_policy = "one_factor";
-            #   redirect_uris = [ "https://matrix.cloonar.com/_synapse/client/oidc/callback" ];
-            #   consent_mode = "implicit";
-            #   scopes = [
-            #     "openid"
-            #     "profile"
-            #     "email"
-            #   ];
-            #   userinfo_signing_algorithm = "none";
-            # }
+            {
+              id = "synapse";
+              description = "Matrix Synapse homeserver";
+              secret = "$pbkdf2-sha512$310000$eb85q6wn7juP3DnTjobqEQ$GFNbhkZrXRU8gM6SwMFkPPIYPIsJcGyaQXacGB0r.gI.xTEEoeWU3gG6hkSgJHYnjhZtZoELZLcaE4qCd9fKLg";
+              public = false;
+              authorization_policy = "one_factor";
+              redirect_uris = [ "https://matrix.cloonar.com/_synapse/client/oidc/callback" ];
+              consent_mode = "implicit";
+              scopes = [
+                "openid"
+                "profile"
+                "email"
+              ];
+              userinfo_signing_algorithm = "none";
+            }
          ];
        };
      };
--- a/hosts/web-arm/sites/fueltide.io.nix
+++ b/hosts/web-arm/sites/fueltide.io.nix
@ -21,10 +21,10 @@
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIILf3KpvY3sG/l5w4phV3qxOnahFpb7op/8y6i3oLWXv"
    ];

-    extraConfig = ''
-      add_header Cross-Origin-Embedder-Policy "credentialless" always;
-      add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
-    '';
+    # extraConfig = ''
+    #   add_header Cross-Origin-Embedder-Policy "credentialless" always;
+    #   add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
+    # '';

    locations."/".extraConfig = ''
      index index.html;
@ -46,10 +46,9 @@
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIILf3KpvY3sG/l5w4phV3qxOnahFpb7op/8y6i3oLWXv"
    ];

-    extraConfig = ''
-      add_header Cross-Origin-Embedder-Policy "credentialless" always;
-      add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
-    '';
+    # extraConfig = '' add_header Cross-Origin-Embedder-Policy "credentialless" always;
+    #   add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
+    # '';

    locations."/".extraConfig = ''
      index index.html;
@ -71,10 +70,10 @@
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIILf3KpvY3sG/l5w4phV3qxOnahFpb7op/8y6i3oLWXv"
    ];

-    extraConfig = ''
-      add_header Cross-Origin-Embedder-Policy "credentialless" always;
-      add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
-    '';
+    # extraConfig = ''
+    #   add_header Cross-Origin-Embedder-Policy "credentialless" always;
+    #   add_header Content-Security-Policy "media-src 'self' https://*.supabase.co blob:;" always;
+    # '';

    locations."/".extraConfig = ''
      index index.html;
Author	SHA1	Message	Date
Dominik Polakovics	3cdc76bc10	fix: remove cors headers from fueltide as they did not work	2026-03-02 08:26:13 +01:00
Dominik Polakovics	61801639fd	fix: synapse	2026-03-02 08:25:58 +01:00
Dominik Polakovics	7ecb772efd	feat: changes for development	2026-03-01 14:27:15 +01:00
Dominik Polakovics	d79f2c0762	fix: secrets for matrix and import	2026-03-01 12:53:45 +01:00