From 375a85e0e73ebab9b4b2c7f8e4b5476e1c697045 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Sun, 16 Mar 2025 17:54:42 +0100
Subject: [PATCH] Various updates

---
 hosts/arr/default.nix                 |  26 ++++++
 hosts/authentik/default.nix           |  14 +++-
 hosts/caddy/dashy-settings.nix        | 110 +++++++++++++++++---------
 hosts/caddy/default.nix               |   5 ++
 hosts/dns/dns-02.nix                  |   2 +-
 hosts/parameters.nix                  |   4 +
 hosts/shadowshocks/default.nix        |  22 +++++-
 modules/networking/caddy.nix          |  54 ++++++++++---
 secrets/authentik-env.age             |  25 +++---
 secrets/bazarr-apiKey.age             | Bin 661 -> 661 bytes
 secrets/cloudflare-pasetto-apiKey.age |  24 +++---
 secrets/cloudflare-tegola-apiKey.age  | Bin 718 -> 718 bytes
 secrets/ddclient.age                  | Bin 844 -> 844 bytes
 secrets/dns01-admin-password.age      |  25 +++---
 secrets/dns02-admin-password.age      |  24 +++---
 secrets/dns02-dhcp-failover.age       |  25 +++---
 secrets/grafana-admin-pwd.age         |  24 +++---
 secrets/grafana-secret-auth.age       |  25 +++---
 secrets/lidarr-apiKey.age             |  24 +++---
 secrets/searx-secret.age              | Bin 814 -> 814 bytes
 secrets/shadowshocks-password.age     | Bin 667 -> 667 bytes
 secrets/sonarr-apiKey.age             | Bin 693 -> 693 bytes
 secrets/tailscale-authKey.age         | Bin 824 -> 1154 bytes
 secrets/vaultwarden-admin-pwd.age     | Bin 864 -> 864 bytes
 secrets/watchtower-secrets.age        |  25 +++---
 25 files changed, 291 insertions(+), 167 deletions(-)

diff --git a/hosts/arr/default.nix b/hosts/arr/default.nix
index a1a061d..50a7671 100644
--- a/hosts/arr/default.nix
+++ b/hosts/arr/default.nix
@@ -4,13 +4,39 @@
   lib,
   ...
 }:
+let
+  tailscaleMagicDNS = "neon-dory.ts.net";
+in
 {
+
+  age.secrets = {
+    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
+  };
+
   my = {
     utils = {
       commons.enable = true;
       lxc-standard.enable = true;
     };
 
+    networking = {
+      nas-samba-share = {
+        enable = true;
+        allowUsers = with config.services; [
+          sonarr.user
+          radarr.user
+          lidarr.user
+          readarr.user
+          bazarr.user
+        ];
+      };
+      tailscale = {
+        enable = true;
+        magicDNSDomain = tailscaleMagicDNS;
+        authKeyFile = config.age.secrets.tailscale-authKey.path;
+      };
+    };
+
     services.media-mgr = {
       programs.enable = true;
     };
diff --git a/hosts/authentik/default.nix b/hosts/authentik/default.nix
index a5c7a05..4d7e74a 100644
--- a/hosts/authentik/default.nix
+++ b/hosts/authentik/default.nix
@@ -6,11 +6,15 @@
   ...
 }:
 let
+  tailscaleMagicDNS = "neon-dory.ts.net";
   p = import ../parameters.nix;
 in
 {
 
-  age.secrets.authentik-env.file = ../../secrets/authentik-env.age;
+  age.secrets = {
+    authentik-env.file = ../../secrets/authentik-env.age;
+    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
+  };
 
   my = {
     utils = {
@@ -18,6 +22,14 @@ in
       lxc-standard.enable = true;
     };
 
+    networking = {
+      tailscale = {
+        enable = true;
+        magicDNSDomain = tailscaleMagicDNS;
+        authKeyFile = config.age.secrets.tailscale-authKey.path;
+      };
+    };
+
     services.authentik = {
       enable = true;
       envFile = config.age.secrets.authentik-env.path;
diff --git a/hosts/caddy/dashy-settings.nix b/hosts/caddy/dashy-settings.nix
index 743c920..f86edbc 100644
--- a/hosts/caddy/dashy-settings.nix
+++ b/hosts/caddy/dashy-settings.nix
@@ -37,51 +37,36 @@ in
 
   sections = [
     {
+      name = "Widget";
       displayData = {
-        collapsed = true;
-        cols = 2;
-        customStyles = "border: 2px dashed red;";
-        itemSize = "large";
+        cols = 3;
+        collapsed = false;
       };
-      items = [
+      widgets = [
         {
-          backgroundColor = "#0079ff";
-          color = "#00ffc9";
-          description = "Source code and documentation on GitHub";
-          icon = "fab fa-github";
-          target = "sametab";
-          title = "Source";
-          url = "https://github.com/Lissy93/dashy";
+          type = "clock";
+          options = {
+            timeZone = "Europe/Rome";
+            hideSeconds = true;
+            customCityName = "Borgo Valsugana";
+          };
         }
+        { type = "public-ip"; }
+        # {
+        #   type = "HealthChecks";
+        #   apiKey = "";
+        # }
+        # { type = "system-info"; }
         {
-          description = "View currently open issues, or raise a new one";
-          icon = "fas fa-bug";
-          title = "Issues";
-          url = "https://github.com/Lissy93/dashy/issues";
-        }
-        {
-          description = "Live Demo #1";
-          icon = "fas fa-rocket";
-          target = "iframe";
-          title = "Demo 1";
-          url = "https://dashy-demo-1.as93.net";
-        }
-        {
-          description = "Live Demo #2";
-          icon = "favicon";
-          target = "newtab";
-          title = "Demo 2";
-          url = "https://dashy-demo-2.as93.net";
-        }
-        {
-          description = "Proxmox";
-          icon = "fab fa-linux";
-          target = "newtab";
-          title = "Proxmox";
-          url = "https://192.168.1.177:8006";
+          type = "proxmox-lists";
+          options = {
+            cluster_url = "https://bacco.${p.domains.public}";
+            user_name = "root@pam";
+            token_name = "dashy2";
+            token_uuid = "2e63b0df-6be7-46b4-be13-6558ad0be647";
+          };
         }
       ];
-      name = "Getting Started";
     }
     {
       name = "Public Services";
@@ -90,6 +75,11 @@ in
         collapsed = false;
       };
       items = [
+        {
+          title = "Authentik";
+          url = "https://auth.${p.domains.public}";
+          icon = "hl-authentik";
+        }
         {
           title = "Nextcloud";
           url = "https://cloud.${p.domains.public}";
@@ -114,6 +104,30 @@ in
           url = "https://search.${p.domains.ts}";
           icon = "hl-searxng";
         }
+        {
+          title = "Portainer";
+          url = "https://portainer.${p.domains.public}";
+          icon = "hl-portainer";
+        }
+      ];
+    }
+    {
+      name = "Network Services";
+      displayData = {
+        cols = 1;
+        collapsed = false;
+      };
+      items = [
+        {
+          title = "Primary DNS";
+          url = "https://${p.hosts.dns01}";
+          icon = "hl-technitium";
+        }
+        {
+          title = "Seconday DNS";
+          url = "https://${p.hosts.dns02}";
+          icon = "hl-technitium";
+        }
       ];
     }
     {
@@ -135,6 +149,24 @@ in
         }
       ];
     }
-
+    {
+      name = "Devices";
+      displayData = {
+        cols = 1;
+        collapsed = false;
+      };
+      items = [
+        {
+          title = "Bacco";
+          url = "https://bacco.internal:8006";
+          icon = "hl-proxmox";
+        }
+        {
+          title = "Node";
+          url = "https://node.internal:8006";
+          icon = "hl-proxmox";
+        }
+      ];
+    }
   ];
 }
diff --git a/hosts/caddy/default.nix b/hosts/caddy/default.nix
index 212a645..35e4ad7 100644
--- a/hosts/caddy/default.nix
+++ b/hosts/caddy/default.nix
@@ -146,6 +146,11 @@ in
             host = "http://${p.hosts.homeassistant}:8123";
             domain = p.domains.public;
           }
+          {
+            subdomain = "torrent";
+            host = "http://qbittorrent.${p.domains.tsDns}:8080";
+            domain = p.domains.ts;
+          }
         ];
 
       };
diff --git a/hosts/dns/dns-02.nix b/hosts/dns/dns-02.nix
index d503a65..f67fa59 100644
--- a/hosts/dns/dns-02.nix
+++ b/hosts/dns/dns-02.nix
@@ -15,7 +15,7 @@
 
     networking.technitium-dns-server = {
       enable = true;
-      dnsOverHttps = false;
+      dnsOverHttps = true;
       adminPasswordFile = config.age.secrets.dns02-admin-password.path;
     };
 
diff --git a/hosts/parameters.nix b/hosts/parameters.nix
index b3a09f1..aeb6e7b 100644
--- a/hosts/parameters.nix
+++ b/hosts/parameters.nix
@@ -10,6 +10,8 @@
     plex = "plex.internal";
     portainer = "portainer.internal";
     colmena = "colmena.internal";
+    pve01 = "bacco.internal";
+    pve02 = "node.internal";
     dns01 = "192.168.1.2";
     dns02 = "192.168.1.3";
     shadowshocks = "shadowshocks.internal";
@@ -17,5 +19,7 @@
   domains = {
     public = "pasetto.me";
     ts = "tegola.pro";
+    tsDns = "bison-altair.ts.net";
+    internal = "internal";
   };
 }
diff --git a/hosts/shadowshocks/default.nix b/hosts/shadowshocks/default.nix
index 1dc078a..a12523e 100644
--- a/hosts/shadowshocks/default.nix
+++ b/hosts/shadowshocks/default.nix
@@ -4,12 +4,27 @@
   lib,
   ...
 }:
+let
+  shadowshocks-port = 8388;
+  p = import ../parameters.nix;
+in
 {
 
-  age.secrets.shadowshocks-password.file = ../../secrets/shadowshocks-password.age;
+  age.secrets = {
+    shadowshocks-password.file = ../../secrets/shadowshocks-password.age;
+    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
+  };
 
   my = {
 
+    networking = {
+      tailscale = {
+        enable = true;
+        magicDNSDomain = p.domains.tsDns;
+        authKeyFile = config.age.secrets.tailscale-authKey.path;
+      };
+    };
+
     utils = {
       commons.enable = true;
       commons.gc.enable = true;
@@ -22,8 +37,11 @@
   services.shadowsocks = {
     enable = true;
     passwordFile = config.age.secrets.shadowshocks-password.path;
-    port = 8388;
+    port = shadowshocks-port;
   };
 
+  # open shadownsocks port
+  networking.firewall.allowedTCPPorts = [ shadowshocks-port ];
+
   system.stateVersion = "24.11";
 }
diff --git a/modules/networking/caddy.nix b/modules/networking/caddy.nix
index 37a8ad6..d87426a 100644
--- a/modules/networking/caddy.nix
+++ b/modules/networking/caddy.nix
@@ -144,21 +144,48 @@ in
           '') cfg.dynamicdnsDomains
         );
 
-      extraConfig = lib.concatStringsSep "\n" (
-        map (
-          domainConfig:
-          let
-            certPath = config.security.acme.certs."${domainConfig.domain}".directory;
-          in
-          ''
-            (cloudflare_${domainConfig.domain}) {
-              tls ${certPath}/cert.pem ${certPath}/key.pem {
-                protocols tls1.3
+      extraConfig =
+        lib.concatStringsSep "\n" (
+          map (
+            domainConfig:
+            let
+              certPath = config.security.acme.certs."${domainConfig.domain}".directory;
+            in
+            ''
+              (cloudflare_${domainConfig.domain}) {
+                tls ${certPath}/cert.pem ${certPath}/key.pem {
+                  protocols tls1.3
+                }
+              }
+            ''
+          ) cfg.domainsList
+        )
+        + "\n"
+        + ''
+          (cors) {
+            @cors_preflight{args[0]} method OPTIONS
+            @cors{args[0]} header Origin {args[0]}
+
+            handle @cors_preflight{args[0]} {
+              header {
+                Access-Control-Allow-Origin "{args[0]}"
+                Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
+                Access-Control-Allow-Headers *
+                Access-Control-Max-Age "3600"
+                defer
+              }
+              respond "" 204
+            }
+
+            handle @cors{args[0]} {
+              header {
+                Access-Control-Allow-Origin "{args[0]}"
+                Access-Control-Expose-Headers *
+                defer
               }
             }
-          ''
-        ) cfg.domainsList
-      );
+          }
+        '';
 
       virtualHosts = lib.foldl' (
         acc: extraVirtualHost:
@@ -167,6 +194,7 @@ in
           "${extraVirtualHost.subdomain}.${extraVirtualHost.domain}".extraConfig = ''
             reverse_proxy ${extraVirtualHost.host}
             import cloudflare_${extraVirtualHost.domain}
+            import cors https://home.pasetto.me
           '';
         }
       ) { } cfg.extraVirtualHosts;
diff --git a/secrets/authentik-env.age b/secrets/authentik-env.age
index 086a530..d23b9af 100644
--- a/secrets/authentik-env.age
+++ b/secrets/authentik-env.age
@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 l7h2MQ X+9Exzg1MBqWGoxWOoE7Chlht9VC3+tmi04AfP9FiWE
-fgnUuzDaMiHDrqfTSVwGTHZbHbCspzgFP4bk4U2fZmA
--> ssh-ed25519 Si3UKw O1Q/BmFqn8l6PTKJv7ZXFyYx1NAmy6A60DV1l/NKins
-/mgD5JAVUagtWIVsaEGpFOWJYNXVYnMduGffLMbf+Yk
--> ssh-ed25519 3UG3uw s2Zk2OS9qucu8eNMxpLOmRQHSNxfXWuaj1zg4lZ34xI
-Q/KU1YDikdA9QKCW6z7+mE4K9jLDmlI4jM2yOrJfNIU
--> ssh-ed25519 JEhtoQ gyMgaDl4IQ/DnTXaTq/jFiTijiinBIfcqW8f7ThZuhg
-RABtE9ahX4owCm0fci6Tx4diZb53sOjp0cbR5Pr3XAY
--> ssh-ed25519 uqg2jw 5dwaltYPBGFia1ox8jdQK8ndi/BZhXT2LtoZTJjDExM
-xBQEqW6Gtn2QjNshnKKD2mAuydb/o1ah7QIzLyuvS9w
---- ECR8Vxb7HjBihIWig/o2Tm1V8tnSt13MAQ+NBn/YZoc
-��>��m�}����>S%� �جq�b�
��{�O�\KI���Pi?��
-��8#��+}��݋��
"��U�q9(����#H�3?�'WoŲ8B������׹6��[q�ҍ�ͻ?C+��`��%�y�fł �2#>�ނ�>�����!��S�����F��y�l�\W�>oY|t\t��0��v��5��qI��
\ No newline at end of file
+-> ssh-ed25519 l7h2MQ iF9I6qdHJnC4o4LrB6j3L53i5wlQGh9ee0j0eIhTX1A
+HEha6KexIUXtHXIuZScyiEuVsYO3m0HDF1XnP86R1qY
+-> ssh-ed25519 Si3UKw H6FShRJ6B/FkeOpLnK2QQURoNYr83W4F+9vZELiaCWE
+I4ZKXlCALGkQpIVU2dMdwrjhTkeN6bpjPQBDt67Lfzg
+-> ssh-ed25519 3UG3uw N2s3xye+Rp5FW2jSU4Cvajw2AQo+HZtuuBX9GtnwXyk
+brSudCxPLLlG6htwfpR014tpMEOcnNoCC3N8WVmEE0w
+-> ssh-ed25519 JEhtoQ tR/OPXWQm6vYw3pQLk3gjXZfQgKumqET7eTbVlgWNUk
+a2RlOtVDskdUXLxvU7dXmvPzDJ91ja8L6cchlX+Bvtk
+-> ssh-ed25519 uqg2jw p6ZyV56qNraT2vehQzKBV0QiITQJJr4LB4optOqyok0
+cPgXVfgukAGKgHDgaxnkhi6IukGrROnETrb+gS3NXSY
+--- 4/RMC+vcak6JuT1APGkyMlnYevSiQIa5wgcIK+DGB9U
+�ZR���a��k��B�=� (�V�I0f'�.�0b��a�uz0q�&6lm�bh�S���)�|a 47�,{������pB�"u|������K�� Q��Ze����mHbud|�j�G1�hf�/��Ǚ��;����Y~�����2�냬�W�i�Z�?�#4��>֦� n@�X�
�nʛA,�?�:y�Xm�n��l�
\ No newline at end of file
diff --git a/secrets/bazarr-apiKey.age b/secrets/bazarr-apiKey.age
index ef5268534b4c302152612498944ed96fbf79d3c9..cdacd35a2aaecc8312cc7b64c2be1a0624065ccd 100644
GIT binary patch
delta 571
zcmbQrI+b;TPQ6ohk!zWSS3z)&SEYNIQ(<IPaJG-7YrcW0dr**RN?53)yIWwAZ%Rgl
z0avP*Q>JloR;g)9gtwVXdSQNWnRi9Dr)!dFq@|acM`e0Sx_fF#nOAOVAeXM4LUD11
zZfc5=si~o*LU5*WsCT)7ONxb0fssLCl()G>uxnC4lv|-?c!7ClR#IfKS*lM_pmRw<
zdVyPIg`Yt=S7~N$Mox-zKw5Z7fs0{wm}91Ker{G)s#i{>VP>#radMSYSzb<%SBSU4
z#E;_P<&|kUQCa5hE|EFe72y^Ek?HzXRe9#g878LXft~>Y<$+0_QB`i<?z!n)K2^rv
zQ4wiwnTExtX(1^^1)lD{?&*c$l|hx^A(3TaSr*R8o&m|J{@Esz;~B-nJv}QOGpmXW
zs@x+S{WAhAszS4qO$}V~!YWHG{47k0OEMFK3Ujk8j04lTOhZHRf=s+CE2H$YOq`3|
z%#Cvmoc!H$^2#0E%?(mrqtZOx{fs>;vx*%jpJf!UPYSIJvdFP4@iO!@Eer9=%*zf<
zDoAzK&v0`y_42aFD=!L8H@3(y@JRRNaxbVX$TJSAvUD*Ik8mvYHt{Pqj4biXG|G2%
zO)GT_Dm1dpE;ovFb&d?>($&>fa4+*uFUv^wN{fmp^KsS>PAMre(sl|-vGg%B^Qp`(
zH!le=^2-kKbt-U8=6V_<zjKK}>;&d@OWzC66P+HnSK;-%o@+K|)aOrf`FwBo+ZqPZ
K_ZhR+G6Mh<QpC~#

delta 571
zcmbQrI+b;TPJK{nxtEW3hO38ppoy7JS(TZ4R6u~gk+WO6r+2w!T4hF2X?Z}9XNikr
zIhUhJK!$N}pnG0QW<-dqTTx=RQE9HLrH5lymSt{fkzt;%rE5;AshLNRE0?aFLUD11
zZfc5=si~o*LU5*WsCT(SfOfK<TWLl`MxwEMvY~lkn44vmn{%<Fd5D*Zt4o@BaduQ*
zu&ZZqhF3^Bmw&dGwzrqQkAId|mXmLxrAdxya9O!?j<=JSW2s}fX_>iaQAnzLhF3xQ
z#E;_PeqpB0ra^{*1r-H(<zZpDo=%=6MnUBT6|O<XdD-RRY5E1>S=zqISs|WWp;Z<h
zRe5CrzNs17`G&p)mgY&pNtr>(zM)ZGe%eO9<@x#LA-<Ibfgz5Q;~B-nll+S_4GNO7
zokPrw(=7@-qr!_V(o6iSBF*(9y+iX;EZn@(eB6_B%tI`={L-}x(yAi7!;>Nlof1nc
zT*6At3*6Hx3N7{1L$V^1d{WE|i-QeJO57|apJf!UH#IEu4azoi(vPa}$Z&PebN31J
z@bfXycCB>Hb@KDd&2q^}E=@Jg%yKE_O7aN`3p2JXEKKrptxWVS$jS*cb59O4Gk4U^
z%`7)A^moa%Oe+lZiqy~M($&>f@Q;ejbn>W7bIYoX%t<s2^DVQ;H+9qwc5*2WGYoMv
zEzS%wN~_59O{oaX=HgITI6>rjO}5z2DHpR|N2*3Evn%&r5dZme#p>F7sRF4T`VW=X
Js$Axg0|3q9zexZ9

diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age
index 82ade7b..f1553bf 100644
--- a/secrets/cloudflare-pasetto-apiKey.age
+++ b/secrets/cloudflare-pasetto-apiKey.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 BFt3Fg sT11aJ+LgQkfPTMUA7Ryfb2nn8JSvik9ONHbPrmpcjU
-EHC2iDKZXwCjcdL/a9V1BlBcTmFc1mQ+/XgBT76NEzY
--> ssh-ed25519 Si3UKw 1+bphVYp4UKz7saq4ehFBT9u4Kg75l0O6QT5CWVcc3U
-+0xipJ5QnJcTkyk1jPwJamiwheqkLvXKJQoRqUj6aSc
--> ssh-ed25519 3UG3uw n/IVp8jscJ41dmADJPg/93GsthdazPecXT/NEhRFuQg
-ku2no68hEBr5fsKVZQV8lse5y2BWNKYKR3gunYJhFEA
--> ssh-ed25519 JEhtoQ 2B6Am++Sm4lU8JC17l26J4Dy7EbDZEvYGPurw3V2uXU
-Nw65ljTQ10PhFRdCrHmZDatFj79ExiMMlCTWDL9nVLY
--> ssh-ed25519 uqg2jw 1cpbOTsLqpBZYhb8kXTul3Cgm+Ll13ijahBTTBIxzzQ
-e2xFH5hvZrqscXKO4Eh7ukuH31jRBwxSALPHsXzt/4o
---- w9R2MkfytUtf8ibHq6hbzhibDKCBsMqJhxE6vVccvGY
-Fn���h��GS:fC��>d�n��ˮ��ܹ��u,�Aڬ����������|�k�Q�3��ԍj��ȓ���G؅��l�í�I:��z
\ No newline at end of file
+-> ssh-ed25519 BFt3Fg 8//bFUZP6UOvIhKFtMpHNgDUNRZomQK8axcMAjILqhQ
+8FsFBoHT1/usFws9RyiSTwJHOFmDvVRKcYk1DLtKq3o
+-> ssh-ed25519 Si3UKw t3h0HWa4gFFrE0p17V5bwyFYWF4Jl1o6OV4dLMkiWAU
+jj4afqDp+vqUx712heKIjN9tg3gMdL0s3wVzNHRkm24
+-> ssh-ed25519 3UG3uw bcoHQfthBn8ThU5roDoOd5P8hPXjYmIziNw4G7kUIUY
+WLY5DZy3XWkyWTa/KtGFB0unvf4W1JAv5580AxFg0nA
+-> ssh-ed25519 JEhtoQ ujKVr8hsfoygrurWLnGqv6lzQTGoL03XeU4Ty0yI0SY
+FnqfJwHZ/4bDKX8fzgqWLz+4v+kvs2A2x7SHbMyVjg4
+-> ssh-ed25519 uqg2jw 4RFv2xnqRkoA/tOPqJQLbdopT/EUDvZ0PzbGB0DcrG8
+SIc5u6HyOsy8uAHdY7G3J4NLf3Q04gyQxplGVJp1WUI
+--- gWDG3+F5qxnuwvnso96r2KaeuT861jyfsvd62PxOi2Q
+�V~�j��(?�nb@ča9��uB���9%v��.�)ia��I����ܵ�\��w���K�7��X1Sb`E᾿�^�Sr�"u���iۈ��a�+�e
\ No newline at end of file
diff --git a/secrets/cloudflare-tegola-apiKey.age b/secrets/cloudflare-tegola-apiKey.age
index 7c1f96320d1424bc96615d16a98da6196b1fee55..ae48a4c7e146aaef85646b568c66ecd70149d17c 100644
GIT binary patch
delta 626
zcmX@ddX9C1PQ7u7hqJevlUYb)L`sl<envo$M^27uVt9tWPg<6Rzj362c51$_yKz*u
zCs&4Nuy$dUe~y#0SzutOez>n?eu!atNmyQ5lwYKgtBZH8wqIDNNoheyD3`9CLUD11
zZfc5=si~o*LU5*WsCT(SW@eg4WN1)<X@q}BPM}+%fm=yoUXD{lNT^eVi?*v*QL?Fz
zw|Ba`OOR_emutSUV_8yaZeCDYQjoW$OR9Tfeo~r=ud!QTg_~urp+}~RS*lY}nMaAm
z#E%kT0hO*1?*8dMg{e-drMaaMg+5Us$&rp0erB1O?!jikE@hU*6|O-6VfkD|UfFJ$
zrQx0tx&A)sMHW$2+JV{GQ4!9C`dOKgo)La-Md5)V2H|BX?vaz@8O6iGL(GHy-93D~
z(<<^@%2Umw+$^2L{F2k6OoGkxvLmxCv&)^$vdjY`+>*J9Ekm=DimUW9i?RY;w4+?g
z4HL_9vnxXl!VP>Q5<`>oOv|<XEGqK~d?ue^l&CLvO*YIn@C*o!%#6zPHTHAP49lr-
zv2<}PaCY{|PBeASwx~#{aIwq^G2lvcjf_e+uPQF`4odWNH%jz2^opn`Pss>#wJ<a+
zH!;t3EHH^OE(s1RisaJO)m5nSbqgvk@$)XwE)I`$^LO(PsWM9`EX_@f@(MHvC<rL<
zHpxyk$@VfXF7f30<j&go!CHjF>`6kFspQ2O%4-d!)Llx_`T3)HP0ho5wr5z2GFYz3
zv*|t5d$Wh<-P}CCEEeI81-H093LLYzx<Pl|Z}n4+!Mx9=ZQ16R-6QwBko)Pyxl?=Z
OMoB+OJQQ~2)olPjkJ*9%

delta 626
zcmX@ddX9C1PJOPMS7t<oM@d;oX=qtkREcvykx8bzk6WcnrGId+r*C;xzMsBtfT>}*
z3717hp>}4tlc%YrV^~;VxTm*AVMK;UglDcxfRT1amX~{;XJkfczEeO{K9{bYLUD11
zZfc5=si~o*LU5*WsCT(Sm`PY(T3)Gsy1qfEYgj~BmRpslcBxN+r>~!}xl>TMhp%Cz
zzma)<rK7VWS9ow)p^34ne{fYsqGyD6QF)S^S%G^>u0f7}VTiYOMYxxXWmtZ)uS<F4
z#E%kT!Ddc|75V1cKE;`Nu2B`Kf!e<5g~gc}X$HxmMT!1NUQy;=!C|3!hM`<8;VG$Z
z6$Qa5mf9r-VcM2i{*IPrF1`iDZh5JWg&`hA9+r6}1rcHChQ5>I8O6i=Oifb*eJxCU
zoH9(jB8rmoll?1_3v#_H3KKJ<()^Mg{ez10vmz5c!n3*DT#MX2Bdc5uGTl6jz1?%F
zw2cit{ql_S^Rx?GgFMaC^Gtn>4YgAolP8~Hl&DV&@J#ecuC(xSHr7rqF3a}yj7YL{
zGOH{ywM?~eNj35-HFGt}2rLc{D&`6ZcX101DfBY*it;uL%?tBQPWB0O3Ue}ctICQ>
z4+<<OcJs4vFHbMD$mi14)m11?O%5#1Dou1ZEiW`R4oWohGs|}~&QA)?%dhkbs3<DR
z4a$y6i||NuGcn;3_t|%J`mX4X|HTtGo|)*t{HD&~CEHi0Z6{23@vgDi)wIH7%jyV?
zR(&OVd+CCZK!qTI`RCmXy2}q=oV0kwmpQ6#zq-~*wVeM`Y43fdg7?+i-FJ&mNJX@t
PjaQD#i!s*;+usEM)H>Wv

diff --git a/secrets/ddclient.age b/secrets/ddclient.age
index 0fcd1158124fea73411d92dfdf6bee604a7fe1fc..76e80f682082684d99d55b859b9937910d56609f 100644
GIT binary patch
delta 755
zcmX@Zc7|<&PJLFkQ=o~DnW>?dS7c;<WtCa6xqDe;cCxo~LAiFJuWzJ_bB1%8pKpqL
zF;{r8cWGpKazJUiW4>XMdz!JalZmg1hr5|Uaz<dXw@0yIP(fsdiAhmLD3`9CLUD11
zZfc5=si~o*LU5*WsCT(SRj#S4dzQPCc0izWP)fLSnp?W5pNm0iNLW%<foHf!MRr<#
za*$)Pkz;l!S5cy0d0<$wdq8ATMV7CZX-Zl|xv!r~s+mzpka0z-yHQcOX@0(2L{UcM
z#E;_PM&%}HQGrFlPOgy_X=N_KiQ1u6k#6pVSsuPFK5prOd8J<ZX5QJR+OC0IMk&Qn
zu7PFxh85*eo>4yD1?I&r*}<h51$nuFA)#gA?x_}zCPD7*X=RR+;~B-n6MZf6%}okQ
zOsXQQOoOTns)F-^!hQ0}%)IhKJxX(&-Mpi`eR91@y__St9P>=Wf_-zMyb4@{LQE>l
zy)AvxT(a|nibC>|%uB*b%mPb-3<5L#iyU1ipJf!UHxJDB_Q}$Z%JmC3NXsembM!1L
zGB?aF@U{%GG|M$k3-fT#$|w!WD6h!oO3W%rw<yjED^DynHLwiKG%z!&EYJ_tcFOSx
z@`)_UbxsR04+x4d&`)&b($&>f$STUU@G7)S%}R1NjwsajEAkJw2ujh;E%dU?%5gIG
ziYzm!uk=ifN(^;Q=lc3@!>-Hs7Cvgabo{}+H^K+FTUbP`WFDE$)Ly*J)=M)W{EX1~
z9IhY7IFGFU@^iV>$HIAKJGB@s%q6ufrZI(YSUFw#;W5S{iy0f(7I>^%{7&nX&JrcY
z^WMe|NhhKgmoYE;c;J^p%u}`SBYT>g9>%Qay?P>J3UhPT8>iBOXWLlqOoIz2FH)Ym
z_hJ&e`PGI~6@154G`xF0+~4~1p8Z|L-bcKbV}B?tR$X55_u^{4BA@1eUJERjYM=Le
ww(i*z1-b0|GnPK7sQp&u+5F4%T=z=Dmod*Qez#vYluTNby8Xt4pie(I0PUY5Q2+n{

delta 755
zcmX@Zc7|<&PJNj{xK~(EL8W%8p<79+c4bIantNrEWr=Z0fVWSiV_8L2Qkk1YqGORu
zK39~sbEs2^YelI`ifOo?c2H`dOG;vihgojAyJe+UhN+Qbetvpsa&oe(0hg|wLUD11
zZfc5=si~o*LU5*WsCT(SN~%X$iKmfev8%JAQ+bq&r(1=Yfl-A;N=2l<b9h=_xJOi^
zpS!z}k&jb4S7b?YML}?hk7sFUl(%=9iD!UYc(`9=icg`Vd187_VQNG{QnA0AZ)BF|
z#E;_Pem>gemidJR0VclwMiz--`Ndh5c?Pb=i6!A>iKgWqp{5l+DP<8kscz|9Ip#k4
z{%Pis#lD%2<u1AT`Xzzo=J^%QKKc6DmTtKvegVaaX%R+A!QR=E;~B-n%c8QQDx!??
zQ}feG{KAqfEiK)Hy-YJKD=IvVT&v8@63aZY3k{RQoD8$MDx*9j{hjj6%d!j8P2E!?
z0$t2AQnag*!@Z5YGpii6-BQv@io6ZH(+i3xpJf!UPb*1@3{Exkh{%m7@Q%oKb92hA
z@b=70@r&|s(#}lJ$_@4lDlGRe@d$C{%FIu8b}4Xoi!6=E4Ab{<v<x#3@YnZ94=;_1
zG$}AGFG~$|_jN1_3P}m&($&>fC^Ii9*Uz=ccgqVh^fJn`$c@O$DK&R1GEOPY4G8iG
z3Qjbs*EX;8a|?BJ<zkq$Mrd<<pTpuU*}wN^vc$FY?=hV|z4`K~rG7`atqxjL9|`_@
z@z0Dc-m*PYH|dlwcy&M4%yaGQ`F{3%Up=GT1OHpNs+qj{wLhi#rJ`2TN#-EwT~oGQ
zSlb~tQQY_K_g%BDF=S+((|!_ic-EIk7Z>lEBzftJ%mUu51M+j0MMxjHdS;$*FaHCz
zcHP9V!#gL-ZvNM=Y7vvW`_|n&Q@$$qYdLm}GL}pEe4CD~_DXl@OzblaVPH7Adh^|o
wN1VwYs(v|cU*XF3ZdGVu?VfkC%dM8`8{HGEOaHf{@=^cpPY>R|%US3M0DluBEC2ui

diff --git a/secrets/dns01-admin-password.age b/secrets/dns01-admin-password.age
index ae44888..c5bee9d 100644
--- a/secrets/dns01-admin-password.age
+++ b/secrets/dns01-admin-password.age
@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 qaHa5g 1jjvfErOKF2PjuggGYfLRjHuvifeqxpAxDkxWbElNzQ
-L/Lgrm+vV4R19PtVkpMKEd5UVtw83/dpM3VMBv/nQeA
--> ssh-ed25519 Si3UKw 8nySaBjGPK7DrUE/IXtl6WSPq34wk5pmKyQhXroeCjI
-Ft0mi+e+jWcQhvwUXCACpf5JQZJOdAGeS8+6+H2Tbjc
--> ssh-ed25519 3UG3uw GNNCIu5ME+mI+IFUWBRFLGMnG6ubK2U5KnVlcoAxPQI
-3RDrtgax5LZnD/rLAikK7glRDMgYUzqPoQP3HLoka+c
--> ssh-ed25519 JEhtoQ O/AEb7djUkoco+9D47siiWpkMxqIhdsHFa4NY5Po9zw
-5OmCcOpgRd44FXXoWfW8aHQW+CQIutGDd+Ci8CD/7mE
--> ssh-ed25519 uqg2jw xTjnqHO6O+sPYf1MckOEP5fQpJyrB+EzIju6oalTCGc
-Z8z4sfrtbc/BJKIz4lUl0PcVgdXGCARc8GfMprciaQo
---- xyGp5MNdmEgi5qClx73FAGePhN/egCcE5ub79+4grt8
-�t��y��?;b�
-��SҰcS����H4:�;j
����+x�Q��
\ No newline at end of file
+-> ssh-ed25519 qaHa5g 2zhXC9UzK0i3UFtHNYL6F6qnkgN5MCdrAPGtzbkWWRQ
+uCK1Kj5F9gibqY72J1ena+h02pbyvMrSgCPNOJfH/t4
+-> ssh-ed25519 Si3UKw GMBTrVtAv3KM2foQ6aI/d8MW4FYm0anIIGs2RYPsYjw
+0n1tK6msTUJJ3+2aSIpmcZ3HBFoMGaSDb3YXfWlLUwg
+-> ssh-ed25519 3UG3uw kTKqDBeUdJohl/LM117hY2lNxPTbOOMyWo06FR/w4xQ
+lpidNg9P8n4Y7FLCriVC+r1ocyBEQ1ymZukO1c4f2jU
+-> ssh-ed25519 JEhtoQ X5vRJUfSjubbzqJQkHW4ciOHaJwMGrJqjUFXiT4JJRo
+JSe/2WBaooTJJSDWTVCDFCkhk34lPqpG+zcg13QNrDM
+-> ssh-ed25519 uqg2jw 6M6eETGqVa6jBaAoVBnYbNZFXH2PPgF/GDDlNQZFXXs
+P5l7HJS/V0B3ItWduCnZbDPuOE2UWrnpYFFQaSwCRRY
+--- Xlh+ISigahQ5OtQEUvjKjo2IN8dLRVW1+L2KrRYTgA4
+l�e���4)�v�+;@i�+Qv@,�'|���t�;�%���]kW���
\ No newline at end of file
diff --git a/secrets/dns02-admin-password.age b/secrets/dns02-admin-password.age
index 4f4d081..503b7e0 100644
--- a/secrets/dns02-admin-password.age
+++ b/secrets/dns02-admin-password.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 FG6Lew Tn8LMojCuw86EWEwJC9sbWcijLTzcFMYyuT+R5UEd2I
-r1ksIE6O6ZUiy8hyx8k+EMZF+3aw2t59emuKzz5xM6g
--> ssh-ed25519 Si3UKw MKh0kwggd4BLUqHypG2psgL898pGLXxjVdQSdHhBb3Y
-QSyGWmlwGfs2JNPG9g3CqAzwBirccJFT41Fkusk/frI
--> ssh-ed25519 3UG3uw BcnNnU3apTLgJVUXbpS4zdJvUClPWzCWWmPkEQbkYBs
-1tIuV2siiXELhl714gGTRESNuc/BhWhO5C4nVaCzIpA
--> ssh-ed25519 JEhtoQ 5t9d9F0lV3Shs7xwpz1MVHnZpuKsluEgco8JQRRR1h0
-LfucV6aMY3vTM8V/38MPkD1QhEuBtKbPF6JDjPFEm0M
--> ssh-ed25519 uqg2jw 4Oh+REb86EnXyZkgBXStrN+BpAML5F/hA2jaHnEqHlw
-1jCJ0IoXgtr8DJjXnsAfYICUKkFj3g6cJ5zzN3P7Y98
---- WSRkKnNvsK4QmthuHP4yRPESZbc9n+YNhzjeGCx7nT0
-�ԚǪ���=[�Q�1}�5��{���瀾�\������`/��끵�
\ No newline at end of file
+-> ssh-ed25519 FG6Lew p43Mfn0tI1Q3G0USkwZ5EYdIqUoNBc31qysF8OlHYXU
+jTOiJKqTDA1eYdPtn85r/putthjItNx8YbAF4YkHE64
+-> ssh-ed25519 Si3UKw fZQXVoYxaWN3wBj68vQQDcNRZ519EwLHdu6QLYLZFHs
+WRbMAljC6FJub9xCIItsQNZ0yWb6IFERZTHg4g9DB0w
+-> ssh-ed25519 3UG3uw CtY/xU9cyft2+Gco1YYd3L4yJEyUOTaDf0O+12zwmwc
+yK1tNdbi+M5uRVhsMznEWLtFo5KeP2udOZgHW//uce0
+-> ssh-ed25519 JEhtoQ Ng8gHYdyMs82HaYCmHQggpF1rqdsJr2oe2HxktdW9mI
+LtuKqUSNpUzT8d/4eihGHznRl2gbMzr1VZ8xlO5U9Ic
+-> ssh-ed25519 uqg2jw wkr4LEB62gODRn5uZo8QCVwgBuN6r+/aiqt3/MOfKxE
+RQOOd6+JUZ1DauTl1m6rW7g95njvJYGAj/pShgyJ2u8
+--- QcI0CVgcaEjRcRlpRpjDwmOzyeWs4eLLS76qyYa/P5c
+�>+���ۯ�
�e*d���U+�d4�ɶ��f�:�vޮ��gR�k
\ No newline at end of file
diff --git a/secrets/dns02-dhcp-failover.age b/secrets/dns02-dhcp-failover.age
index f603d64..7d1f437 100644
--- a/secrets/dns02-dhcp-failover.age
+++ b/secrets/dns02-dhcp-failover.age
@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 FG6Lew xQP+esRZhn0Nj6F+/fD0jHZALFpYfpGPmvJiE+qHQGs
-4yBaYZPUkDtFED2pfb3tiocq0mYdQIytStTa/L4OAJg
--> ssh-ed25519 Si3UKw Aiyy7RIfIZEAP1jkoUQH7X4eds23JtH94BZVgZzYayo
-pVlFcZkwWHT8DQzGL/+hsfxWyeaZXm8gGwvgGAIkV4U
--> ssh-ed25519 3UG3uw avM+0lYvMLYkVVfe1+QkSODIOk4+PP1UeiW/5v/Rv1c
-gs78WQ+w9bLKlaquMs01tayqZIvui2DFqsS+cmExykM
--> ssh-ed25519 JEhtoQ /5+X0aOGOKLVEx+aB7c6sRRhhcinw8UVBOGyR7g9Cl0
-MAQ2C/YhV8+J47F1zLudTNhdWkJD9IzkHqYEB3Gv1FU
--> ssh-ed25519 uqg2jw fAspGSdFWGDGTPVEe0IM5cDXSlZgIcRYvqv1/BzuwWc
-gEwX1X7cAXumDH+ST7t50Qjk1XLIdpqHcrhddww2q0Y
---- xYzIiveUwVpmYIqNZQvsj0fSRql3q3Cv4v89oS6JH7M
-�6D-r�oy-%�fڑ�U���?��WR8@2��qU�IJ�
\ No newline at end of file
+-> ssh-ed25519 FG6Lew WVk3brMnsAehXLgkXsSSAY1qxW/U2COwCHk3s8lnfyE
+HVBT1Jvqj5JtwpLeE0CNsj7YuU/u8/+7D3MFYGfwwwQ
+-> ssh-ed25519 Si3UKw R0qNWPWGPzeZjd6KNQ5h0NejhZ/QtCpux4stcrvla0M
+Pm1VZrko5MvD/oq5+VrQWrltpRyTpDBqeJHL0C9RZX0
+-> ssh-ed25519 3UG3uw urMsgoJAZhU23ZHdTBKz1NbWjmS+UEAQPlRViI/1Hl0
+JxPLq0H5Jm37J3figkaK2necJpVHR4Suj3I5ih/aGjQ
+-> ssh-ed25519 JEhtoQ PCKOyr+ZgTcNhnrWaV/TVafcV421e8EMZW0Rb5KELVI
+FGgE3RWrxlrnYdH1bAnq2+Mm+vkpHefAsy3EVllwuB4
+-> ssh-ed25519 uqg2jw eNgfPkb8pOpTxq6u2p345BYglnDkizqdZfcALJBKWAU
+WCxi4nQwuHaRH8hsog2UvZsALvJGxcws9Bt45uKRdgM
+--- oEGWFXo8E27YJq7y1sZHwdvpUNPaaNqX22bjxnYtUDM
+��X�ä۶ɘ�;L��硱I�VY�����
+�ìنhݎGv
\ No newline at end of file
diff --git a/secrets/grafana-admin-pwd.age b/secrets/grafana-admin-pwd.age
index cb56cba..ee84850 100644
--- a/secrets/grafana-admin-pwd.age
+++ b/secrets/grafana-admin-pwd.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ FTAZGuDuIVGU19IlM4+2V07xZshkGFHZeT07mWaFe0g
-mMV8rb+tqz/cXJYhjAsMPMv+YlQ3Im9YZ4CgD8AgiBc
--> ssh-ed25519 Si3UKw ecyD/9pEfAgR2OLE79Zz7vsscK09xNOhrPmQXg0zb3c
-V9CFdzMqZMoe9GCLCHe6k3oBeihxHQnrPhSLNZt8h/Q
--> ssh-ed25519 3UG3uw 8wxJGlH0/4YS1bCUa4JC1s1LpOFkutK9Kra766sJ9nk
-vWmvPvoYNDDSPKDspi4ycd0FFDJcbJuP+hRZMXMVjfM
--> ssh-ed25519 JEhtoQ MbF0zX+WHdi2YrCMstLakuzsx09flkxMqVnsTVYoeHM
-BKCJAuH/5czX1EdQk6qSg+vmn25dp+C2BXYMRC8T6xg
--> ssh-ed25519 uqg2jw p+UXsD4OkrKeUnlwq6nhAIe+OtuX5eYhXEswX+0f8RQ
-CZndgPY4kBmbVAjPxPRrszN5fqWrVKOiP23hhAS96SM
---- yhWiq0eMftKTQCyI7WxzPepeHHWyV4ab0pHGdIZN4yY
-�V�֒3B��6N��Is��j�f�k7���y���
j�����
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ oCWIffjuGzInMGcLV5/BLYMrBofvGPh0xOkw24v09A0
+FbtodInhsgI0dlW9GpzdlzuwlZqxBaS/IVoPO1ywqNw
+-> ssh-ed25519 Si3UKw D45uueniVnl9NT177cIQ+DTeJ9C4Au9nrvpE0BSptQY
+H07+Js2ooN1E5qVdC7X9EJ2gOLsZm2TvLPOVd8lqWz8
+-> ssh-ed25519 3UG3uw AOfPVajJOEwnWL0cSjZ1QhtubVByzKOBTw3hefYv3Q0
+DbQjnT4AZYrZjdL5c+tgcfqgWgU7GD5XOgYKJsTYJzg
+-> ssh-ed25519 JEhtoQ v/X3Jw0wd6wAjcEtoPiGqsFxerdz3YbWUlX1NzlMDGk
+KiGmEKeOZY0Tll+LgylYo33ZbzMPYtVbGE0TC3nvbE4
+-> ssh-ed25519 uqg2jw PrLBZuDeIA+UCX4w/+FeEt4enJ8blXR7vfphiq0dDyY
+WubywriCxb5eHlLDDIvG3Uvz57h+oRgOd42gRceUYW8
+--- geaqacA56wYwwIbaaPTNRp1Nu72+UjGsZkONKAvvAYU
+�.�L��
�Dm��HT����B}�Y���8��7{���&0q�xR�?�
\ No newline at end of file
diff --git a/secrets/grafana-secret-auth.age b/secrets/grafana-secret-auth.age
index 4fd9930..64dbac0 100644
--- a/secrets/grafana-secret-auth.age
+++ b/secrets/grafana-secret-auth.age
@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ 3RydPkTkO9NTllaQb+xvdPpTsaXMr6fidoX13VeA5x4
-W5Rf3d4is83s/O+Nl4OmE++DYtADpEgIyF68tQNWV1w
--> ssh-ed25519 Si3UKw qrSZigqJ2F4WQ6XhkkKPpMmE6oMcufAimG41o9f8R1A
-hjvYWlr+c0fvthvISuzLnyjv8dgHXRlhRAdHpdPs2mM
--> ssh-ed25519 3UG3uw aVg/3FG1u3SMmvcPSiYO5ReLaPTIgiz9SiMvdGUX0S8
-yklad0QzVvAwqAIK2c1C+GeTHoA80+EMhCYegRKsUlc
--> ssh-ed25519 JEhtoQ Im/DJgmOOGszRsq6OSQrD7iyx+kZErsyJ7v1YabriHY
-QuXZqRG9bxu5kSv4cFK3lv0KuW+2cS2nU0Y08xiiayQ
--> ssh-ed25519 uqg2jw W/IlZce1ooumCsYEe+t9PIOXumfqyIxJLfZImSNqiwE
-5JJdCjjWnF/QHQx1t/RhUeIrQQmZzNt2OUKTiHgHqtM
---- vRR7EhWNygDhJOSf+uQnomdLdpudq5FZ9zVTtm4foBQ
-"IL�ձ�0ЬB�׾mL�W/���
��[�����e�+��K��ve�m'�F�Z���7��A�rՉ�yM�&��w�c�Ln���J���A%M�˂���n�ؠ̹��V
U�clT[۰[{�"��k�r̶��J�(& B���=K���U�ү��P��
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ AYUPtbVlnh9XO2+6OAAC7kHTkmpr4OXpf64woW/7Mws
+icf4N5XlE/2pU5bqYExlM/bkY0/CY03ZxReybawtL5I
+-> ssh-ed25519 Si3UKw 5mohv+7KaoeBXWRgz1DmsdYAPT5lQcaonqlxOD4vHkk
+AfY4VTeM9DP794I7SmLa5Csao+r56MGay055ws2r6Oo
+-> ssh-ed25519 3UG3uw 4VoZd9YucKji3JDXwdOVVbhUsWyrOCoHhh10+DaixwA
+ssRO8OAWdFBcINEZioj5ioNAFIAR5m3rdO7wZKtEMhU
+-> ssh-ed25519 JEhtoQ R6nuIY1JaJ1OS5zbYkAJj9RvimC0izccdvskHL5x93U
+kGGiK5kchu3KcuAMybAxEMPTsGvewSCT+4n4gCto1JA
+-> ssh-ed25519 uqg2jw EHOXs57x+zMaiWbFU0NfsFBU6ygEjH0O86qqog0ypUs
+EO3EeNxjQGNwlp6r3Q677xysP405ikAGtpVMR48LVKA
+--- 1HmsJuSYEVEp1BcG3Vw37TVY2oDoNebEzppSOZ98SgA
+>���ҳ�_W�ט��؍���������C��
����
+9ŧ�ݫT�J�ά�Ʈ�G�D+�3zƅ6)�y"��U�2�
���Y:����`Ď>�a�]�<G�Vt+��)|���#Qࢱ�;OY1f$��9�(��:ڴ�����qQ5�T;Q��|\+,T�
\ No newline at end of file
diff --git a/secrets/lidarr-apiKey.age b/secrets/lidarr-apiKey.age
index b7687af..f341cfb 100644
--- a/secrets/lidarr-apiKey.age
+++ b/secrets/lidarr-apiKey.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ QwbbbjPHGrJHtblFtsTYkwsmK70I4oPtYCmQB9In9iU
-MvvG4nT5Gsc35+JaX3HeLxH1Q1D/Hvxpg2KH4E4JdnA
--> ssh-ed25519 Si3UKw M1aaHjvNJp6vVS9SIpdaAsZJu6fXljEObh5wCJRikHA
-Pl39R8a0GI20MdgBU5vc2nb/BvvCOHEHCNFrUDvCXV8
--> ssh-ed25519 3UG3uw fH5ssdwj0yu8Nhyf/7qjrXNohxJuCmKGlHGhpC7r/SQ
-f/0DpUvC8A9vUcOeUoavA8zBSe96g4hL9xf76ES8tFE
--> ssh-ed25519 JEhtoQ tvihgnfJw+onTUNs0671iM6VPlxZMJJ9fA4lWoaUhn0
-IYAR+Ecyrbx6li3rX9eeYw0/1pxEj0aYOKWUu6iEaiw
--> ssh-ed25519 uqg2jw ONcHemBooTVrbF88V10wue8dvTdD/awWH6MPX7qldmQ
-atV8hDLuGp770e3nNSp5Hzl1irtIx/wP0r+ZY3HBx+0
---- S6CpK/XkPj/ks9vHtpG3V85ZEJIAwF1vwnS9RjK8wWc
-���㛁?��$��$��C��9'�X��O�Ȑ�vȱN��	Y���豭��s�R���^�6�MR5EJ<�}I�
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ kU0kMdz7qckGDpxPzf0kS7uDheW1/L47UYfeZk+ZdWE
+wuXYsLuNLGmaq7rLKl4tDvPzuocnss/cwREpczJz1ko
+-> ssh-ed25519 Si3UKw ERfEt5kL5q2k2yCE7LlMvjj3UUaILijOFRal9j0Mvno
+3Cvvnd3Z/dQg4cqZWjrB63scnvb1mqll0rFxfqdtX+Y
+-> ssh-ed25519 3UG3uw 4vZT/d60cOlKKjlbE+2a1tyH2CEqlAugKjeBAZuM4nI
+e2SLfkNRysoOjpWUKs4FLyD9Tg6NKnICoeFDUPenIXE
+-> ssh-ed25519 JEhtoQ HEG7kKB8mEqF/20Kc3Oc+lxJnM4ePY3wFLTJeMiREmA
+F1ekNmqGx2mOjYo8aVWmmECtZ6in1bQpxUC+sOgrIYU
+-> ssh-ed25519 uqg2jw 7KDY7tGA34ZUNg81vgCcD7Y5SePhJbMzttiebXhRbwI
+NAkjr1MxprFpRvTf1o8EWli1klbbqoB7KIb7IUySpOA
+--- bpoDFPy2df3uszl7XG/1VXZ1ep7QNQ0re7fi5qZ+4Zk
+�-�*$�;ܶK;��XƼҒ6d&˫���+ߤ|���"ٵ�
�^�l�.����������q#<�����"�l
\ No newline at end of file
diff --git a/secrets/searx-secret.age b/secrets/searx-secret.age
index 85704fe7c257b1af9dfa345954a7c83839573a99..a929a4a37f9ab40458dd5c72275db32e0e983340 100644
GIT binary patch
delta 725
zcmZ3-wvKIrPQ8;?UWHLgS($}zg<)=iNr`?%d1+ull8KvPXt;@~YiU-tzIkdzwsCe~
zI#)?#Xi7>+u3=eHN}y4NZ+=)wlzwP&MR<X+e{xAtL8(W&kAI>?WmrL0IhU@TLUD11
zZfc5=si~o*LU5*WsCT)7n{%F_QK?gSKw+M5zPp);ubV|yXoY!IM50lKuc>j0X_Se1
zc}0FuR6&j>S4En+sY|+frIVklbELUbSe{RYPn2Ioa&B>vVM$4dVM<PzNrs7eW@TXh
z#E;_P=@IFUq2=C%+QsGGq57F2Ng)|&DF$H$dCvJ|Sz%5oMcz(EQ4yxj=~<y%K5mu<
zX^~Eb=KA`nnc*p3mKo_mspTo|o^C;r2Kg11MZv~y<$-SbmVuFz;~B-n)BL=Oa|?XE
z97BygJPb2K6T^#~LJNID&C*jW3yq46@?AZ%UBc45Dl(F}Li4>MGF<#ki#*H&LehLv
z%>wkDEla}#eRHd_(_MVh9LoZIi?hvgTyi2OpJf!UH&4vY&vkVQH!{<<$a73fHw-N^
z*Y|eJ^D#3itI{twFHB6W$S%{)H8D=+D#%DlkMgZZ_D?a$^3KmoGq>=qFgD9cF|aI)
z^!E&K^iOk&tPCp82`F^r($&>fNUt*R3eyhHPK)pfHV^SAEe!Q>a`SdHDylF|%u3g`
z^a(GmuS)R^4sk0k=eqBA{bA9|&1(I>b?gtC*Em0}6PRjIanQQ{QE7ek_GJz+?E8}g
zU05b?KPvGMTh_htQ~s(qssiDeH>ZRgZT#>h>Orh{)Rnh8=TB<C>$q;u@ARx=!q+yw
z>-)zwucquvKEJv8vZQkjIzMyeon1CO+~RSyzx3DgRmMKM52e^>+EjgvEqCMpxXsJH
zLj7Km<H_BV@4uWC{G>@@!TyQsxYV@@v#zDjldCjSF-TyrR4GiJz2$PsgOtw)7l<6l
PoYba!<;i)?^W4$^mAw*h

delta 725
zcmZ3-wvKIrPJL=+u!n(xzDr?INO+KcYEEu>nrCr#d6<W<xk<Wna&|?iWqxr|rbnfd
zD_5RnqKR)=s8N`^PlZLfk7HE2sh7E1QlwLrqfuF<Z(_cQp^H&wSc#>3I+w1ULUD11
zZfc5=si~o*LU5*WsCT)7zF}^rQLc8Fu}Qjrx@T@~fm>*JL{UX{PLPjpVX$_lc4?YP
zxJgO6zGs*#S7v!uo@Z2OxlyH&zN3#*pt+NGq;I%mK~i#XnNgBgctm+YiCaWSRbpE4
z#E;_PNzS=x7ETtX1`z>K7T#F}o)PYenJ%dj$yGj8p{13T-WG{f-VvU~7U3pbX_1!2
z!4+Pvfn|{qmic~`zCKPy&fyi|7Jl9tm1UXE=I(y(mF0dV>3+$R;~B-nb4$ZZynO@0
zf|7i-(~=_e(<~|~)AKwl3(GUBa@<0kJpGLVi(GT^3Jub^yc}~%0?HEu6Mc+>{k&6)
zDpM-lLn6J*3M|V@-2&WPEz8T2g3|&Dd^3wDpJf!UH!Kde)b|fDt?&x5bTcl>4=l?z
zE3^zL^v+E&N%M8G^mld&@hHiR%*k=(vaB-m^~`X~a13&HH_Rz3Dl!j<@Ji3uPSOtb
z3W}`M_sL04%G5S6%r(yE($&>fD0WJ5FK~9vO3N=yiz+ELbqaCK_ckyx_fE=k&&&!>
z*ACCC_je5SaH%TG=X%qeKV=P*X-JpatoO2<ObbeXFA_|>dnd;{^Q`mYKX%WKUX5!G
zeUN!zmi+%YDJN#B`2S73%D-K_@rRvD<eE06-GLXBKgi1k-#?c9<=SOVm2GUXi~1t2
z&kDBLF)QEqa?OGRJ~OiuS$-}}Y`42D>{55)aYIwX+fW~k(~|<e8f&{~*D=f!dsJbl
z$G_pGrN@j-hVeFTK99W<*5|!<VQ9Q(EM|A6?n1<!ZJg;EX?=@-Og~%tc%9eDl^vWC
PibVonibYrh-QEHKJQWS}

diff --git a/secrets/shadowshocks-password.age b/secrets/shadowshocks-password.age
index 0c83aa2a1b9c26d062e5afb60d48f611a47d78c8..8cecabd778d85a3884fada33cade12df0a08925e 100644
GIT binary patch
delta 577
zcmbQuI-7NZPJKaOwuiQUPJxS;zHgqVrMXjKP@;LVNnTlCXuf%QZkfM9vQt_?a(=o~
zHkX^eMP*7+c#uK9Pq=4UfwNIwv13SqZ>Dx&xu0Q?S7=eOxw)I8r?zvk0hg|wLUD11
zZfc5=si~o*LU5*WsCT(ST4qUjW=UpHMy6$&S7fG%fm?WZwzGL?glnR9vZ;$(n2S%U
zw@0eCqhDA#m!)Z1zP3e5TB=DwZl$)fscV#xc4SpxWt5wnce<%ZXh=wfhi|A;VrZnn
z#E;_PRnGdR!G^^K0a2O7iRM{`A;$iuxf%ZX$*Crm?k<j@E=9gY`YA<z!N$H^hI!e3
z#f~nCi9Uh($sXmw*^VJuMt;eu+Qr6>VV2pYhUFDS#y%AWnQ5Vu;~B-nLwzDjEvg(V
ztBjLE%Df8QN>fT*OQTX9wL{%P@{<fa6N}1ye9WSJBb_X`GIB%G!ptjk!xEiKEIqZ&
zoH7l9B7-8m0}K7j^!1aH48u)RtDFm53oElHpJf!U&oi|!4+{&(3h^`z&GGZk3n<G^
zGcE`yFw61u@yky1^-48$^>d8!b;~s1s_-cZ_6#U<_byHjbqzBQ%dZT|NGf&D%TA2U
z3HJ@mNXajXjB+$~D~&4V($&>fFg6Y_HPMeU_wh0E&#%bMPc5`4GYhD4Dadv#bTT(f
zb@mUoFwEAj@bi!K<Z5}*aOz)Gh!e*jHOX&|-`Cb>xE*6RWSSb4*Zs@XbUs74%AQKG
PLg&>>zjju|6te*Ue@?+i

delta 577
zcmbQuI-7NZPJM8Cxp`(uo=al3mseDnt9xFyfvJ9;Pi2I0X1I%?p?+$zTWDgIU!tjV
zBv)o-k$FI3c(JENnz>_XYPz#UT4|L}lB<hPNmNKtaA--IVR^WIkx^B0D3`9CLUD11
zZfc5=si~o*LU5*WsCT(Seo=~RMOukhQmC;>x>=%6kXxB=YN4fXMYwZSYI#awfMr&c
ziMLCTWm!cwSAc(|Q<{sBlR;LMYkH=$MX8IiL6uu>xPE$4Kz?9ZR7h|@sgp}#Xs|`{
z#E;_PrGABu<*p%V{!T?cIpLNj!CC$l`bAk~WogA(xq;r5MMYI687W>q<-ws`20q@7
zUa6_3zHWKR8R?d}<$10axw-nrg(m5yi3WwCd1ij;WsU}+!Ij06;~B-n^9zC^Od``u
zy(^q7EKU6VOY{rUT>ZU_98*obT&nUdywg*Q49ilSf<r90!u3Of(%symyz_m-^bG<`
z3UZ^8s!B47%u9mHO!AF9LUSSuEeaf6L&6LupJf!UcQH1NC^9$n4yep8$;&Cv4~j4`
zN-hX@bPLkA@C?z;%ks!JiVU;J%*_qt^40gw%`z?VaLkDC^~emYEDQ_vGfK|QH!Cpr
zO-~N+j!4&cDlIV5E-DV?($&>f2=NYZPjj&h^tbQ`@l7tv@hmKe2&*VE@bV8xcg%3q
zFVuIkNb~ZjGAeQn<jOlHAG(IsE!Dl^j?LO>^6xeFxBke@nx4pBT5l6!x9R5giN?48
P?M}&lJMX#E{cG9))c(e?

diff --git a/secrets/sonarr-apiKey.age b/secrets/sonarr-apiKey.age
index 2b004b7ce5ddcbc63e4c262ae5203675b54b22ea..2a2a1b33e76cfccaf12002f98b51c25787636154 100644
GIT binary patch
delta 603
zcmdnWx|MZ;PJKymW{R&<NL5;juUlGXN>qVqP)4bFa*4lhRc5w@zFU4lK#5;~tFxtx
zBbTSEn@OUfcBp@(k8hA^M5&=`c#4;?p|eMFv8QX4zf*<2scB+rKv9UZBbTn7LUD11
zZfc5=si~o*LU5*WsCT)7WvN@3MO8?oZ+=0gr@5)GqnnG7Uxur1l6R1=Wl>p9xu20^
zx>=56Wl&%?mr+)RcX5SZetD>me|njzNkE!mNMcZ?PmzmraZY$<pm~*ZT7^-SM~aWZ
z#E;_P{uRmQsri9v5fKr^$r1iZS*F^i#eV7Gg^5X#iIpw}CEB58W#+|YuGx-UrTOV$
zNzRD@$*Cn}A%5w3mT4I!$(9zGMZu<~9=?8wL1x~Sr72GS-WGwA;~B-n9sNp7@^c)s
z0^FSfoJ##d3iHcM@(N5NE6q}!^|M1P3^VhS{3Fe>GQ&N&LPFDB{6gKljZ1U=oGP8&
z+&r?}f}Nd$Q!NaPjEvGu62qz@tBR5`BlImMpJf!UcQ#H>&oDI(3-<SMjc_V(45>_y
zDk>=q2sJZxN)JnQ*EY=#@ea+Z2rp0PiYN&13=K%i@Nx=sarDj0tTIf=Ps}zjFf)$I
z^Qp>ANenOWaVrbS%1-p<($&>fh_pydE;Fl4F89kwE%7T$GAuH&3@Y*rGd9nua;pq1
z*Df^;GVsZA^egoW<T~W!cCGT;<!A@_@<pDa%Nl!AOqTf;Meb*P8Y_9K&#=)bXLjE8
qng!w^*^^~nnf#2L_tTl-!pRb~dK<NlBM%<wM7QuNdhplsr2_z$|IWYw

delta 603
zcmdnWx|MZ;PJMujv2kv2rdwvdrM7uMUWHR(NuF_eqL*2@MP;sgNlto3W<iOMiCbxA
zAXk8Ql9^FvMs|Uphkj{MxxQtTg_ogaU}$-nYq58TZ&G?iT2f)Dhii_0F_*5LLUD11
zZfc5=si~o*LU5*WsCT)7hoiffXP8^DsYyVkSyp0DnOkLedAPnsxxQyng=3Lxj%9gj
znrCuxif?!}S7ES^hmUJ{S&?a0gm!7JWq3ilUusdVv#WDvZlz~sR7ylyKwwZ{Zf1J%
z#E;_PW~P2oh8Cf|?#}-C>4vGUZdpZsi4ppa5sn##hT0~6rRJu|zQ+1FW#y4v`TCZL
zS*2BZX(k1J#U>v9UZMVu*+xYcxn?eDUgh4ANd?*l`r0O?QF-Z;;~B-nJ)=?sGR>U=
zqMQvqQnX79{Jc`aEAkAhj8cO9^|Ku--JJ^!vO+8M%W{jkGD}k|0`#+t5|dpMGqe0n
zTnr0bJ)OOS0z-?EjMF`R(((-4bE^EcUEB>OpJf!UFHH9eDl+#A4e&1yan=tF3r!4m
z*Y}Auj!Y{`wk$PDDm5%mPmRhobuo_Qit;rs&CbloN;gala7(MGFg8u{505epN_NhS
zsPxO%_i;`OG&c^(j0m>i($&>f2rx_wF?0-Z$v4XP%_;~tPE1P6%1KF#$V)Rw3rsBt
zDmEw!@{90KHL27#;NrgOnSLcd@K=<^g4{<9hEtu7WvmKJy3uldl7`~(`3q0HidNX`
qs^WfmOBbsRL!yYB%u373dLQ}TPuEv1-|u@qZO!ek2D{5FqO$;ThtS;s

diff --git a/secrets/tailscale-authKey.age b/secrets/tailscale-authKey.age
index 8e8022b8e1e74ebbe4aa970f7b0ffd0ea4cf475d..c332e5d80617d85f632d0c6c72aeccb66548d4ef 100644
GIT binary patch
literal 1154
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSP%nNrl3{>z=33m)h
zPEPVo@=VY1wkXWa%W?NBG7SyNk17qx$SQR*F9}X|w5SL*3gyx+P0A|r&WtKHObtyc
z3M>fl2v18ccS<zO(vPgPFv>R0H8b`v_bsYQH$b;7$2`NxH&7wc*ssi`xS%Y<JtIIn
zUB5gi$*U|pDAz2!*eAyzB|<;XH^jflC)hJQESW3aDJk92Cm`J4$H*i%Dk53iH`2g2
zDAmv@u*%T2*xgv))330^pwc2L$rIf+C$|z~w{(T%OcSq?sx)usfTR@5D(5g`|0)B+
z6a&Ws@8GJEY>$kzJc|<Js+6M8Y*#LWY>SG(Vk4J=?BFz4x1=af|A34lFC%l`plsg&
z%ka`*cR$bcQq%OTlzepCDuTnqQv(%D6U|CI1Hv=Pf;~&UT+9+nladU51Eb7L^Q!VA
ziUadA3&NrT^s9_4LejYmO`L+tv)odhi}izowKKGx3QV({E1fbUJj=`6T`QdP0{uz?
zl07PN!Z7^iQRe2F>!?s%oL1%R5fWOJ7;J8-pIw?`YT#VvSn6D+?^)<v;g^$Vq+b<S
zZW&da;mH+XniQa)?2!|e?cyF#7UAt=lvh^b>s;m><>79WnjdQ58Rl7Kk`WM=>x%BT
z;7sFC?{Wo;ysXfG;<6y0yb4FdqylY|@XSgNzhd74vlP!@&#ZEP7sq^83*+1f4@WNl
z(3B{@yn-@EQ^Ra+Q%8>=7lVTQfZ%|v!m!jL52F&Z$`Ze-0_PAv4-CH<hq@b=mMf&B
zS^7H{SDIvn8yO~t8iZw(RC=Vky17+)I~7+YTNZgl<t3LCxLFuyIC42hW}9gnc^Xz!
zxkot`W|$Y37z9Lynuq%(n;Uwhl{$HphgCV6Bqat0V8ol3Yeq?aphBgSNmh!#YnE@B
zSBaUknUPbPQ$>Dwnqz5zL7_>QlS#I@OMzEWgqvl#CzorIk7=-HVP288e~GJqcA2AN
za*3N`n7N^LX@;k<w}o3uUTMB*UWsX7IeJKz7N#3zl`H6*=N4v~rdS$PgczIVRt1__
z=46&dIHi^6S2#zQg$Ma0hnH(RJDY_^_;ML1R~7`98&-M*mKsI+6qctK6cy(iN4ey>
z6nI)%I2q?Vc?U!|rFr`K7jx<A>MHnUyIU6fWkgxJR_Rwc=2sX5<wp3MR~q=5mPO>c
zX1Ik~n&landYKtnhH^C}`u)21!|qY%98rhFl9RvV<;0ZaR_>axdiL_)X?yR#P2pE!
z6e*UJn2?${@vn+lctqNHuWEBc9p{-nIqx%V=B3$pU5PF4u(>v&^VEUOD#8D}FMa!Y
Nls{nURYy(PD*zcIe%b&4

literal 824
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4aw{=*OIOG)b<9fj
zh%8La@%9S|3=F8$_Y2X^bqbF#EGqYPceKb$&+!TfcPYpX^W}05@O3T8j7l>oC=c*(
zs&aDHHVDddaq>=!tf~qv);D!Z4=8ks2+EK23PrcAA~-xeHBcd-IHNGw&nQ3JFgd)k
zpdzC@(K4er(K0VQB+@N2Cm<}s*VQ6FFU&vC$&t%DB{0pRD9X|=qrxyZJHn~T*IVD+
z%w5|lvD`5{HPo{#vN$DJJFqZ0DH+|i;7sFC?{WpVWH-;`BJGTHlR)j1w5lQ#=gJD#
zbf?^+Vv`6T^FZfPeM^0(MAKq30~4+kqk;@CXR~DeFdsKRZ@1uJvs7P4Z~Y4Y;vk=N
zLzAH5RL{HucQ1p;s(f_Yj6>axOUo6si#^gjivvq7J$=ejLQMQ3O9Q=%vjaV<%$$mx
z{R+H13Uh+Ija^+U@?5!6EzFIAy?qLd3e3IC!m}KMEqto7v;9K~0u8jCoC+&a{f*MY
zvXk60%UscI^K#87$q!WUNJ~vAHuCby&ocBX$`5o&$xR6_GS4tKHLdVZDt9(dsxrz*
z3i2<^FVE+4Pfo3{D9Xt5($01Eb}BRR2#72UwM<Vl^foK-3(Kr>a&-((Pp+yc2*QZB
z(!zA3ta61UgYf)dr=-#h%kTm}bC(>0!bnG_tlTn>;-boA7kv*i=OX>^>@Y_YM-#5H
z6qDkdu$;`iip;P?@6-~{sKQ*AvT#?UO4F!9Ps=J}e;4Nn@64(YZ3`}4U0nqO&omET
z-;gjr)8e48vMk?_tZ>)L^5m>4@2FDC<Pd`#Gh_E6zoIhpie#=j33IuXvQvyS^dq+Z
zo9=U7GwsQ}yF2a$=0<!weO76f{V@jJq8l2P*Zc}+Kd*TAV@KsT?vEFyBquHWYO|vK
nqx>C@wI1T`bC!4hs9t!8L%qAc$an1op5Ntt7CJ9hCWZh2oi7@s

diff --git a/secrets/vaultwarden-admin-pwd.age b/secrets/vaultwarden-admin-pwd.age
index 2bb5d7b7cabeaf08359eb9c19e788eafe9d87c97..6845d7174154450152d2c3a384a243e26b7be0d7 100644
GIT binary patch
delta 774
zcmaFB_JD1IPQ6QtTefqCkEvr-imO>xUQ%YUp>L2=QB=5BSYd@@n!m4mrg2oHOR&DH
z0he34hlP1cg>P_CkV%lCp|817W`vV_Msb>tuVZLRWOzhcu}NBqiE&7{E0?aFLUD11
zZfc5=si~o*LU5*WsCT(SX1ITlzhhuta-d0mn0atgqFbf2Nlv<FL6pB)KwzY?xv_ax
zPMVu`aG0YBSCo-<kfV82V0n~DNSa|{h>Le*V32`hM4G9&caF1BR$zI!rE$4`rkStj
z#E;_P<-Xae?#Y&BPEk?*rM`)!MQPcl<ynq7>876L5gvI)q5er0zQO74$?3&hC0<dM
zf%^U_dER*?CgH`-DVfe8DM878Zi!|Ui6QAuS?O6OhDpZ77RlL@;~B-nBHawb1N=gh
zs=Sh2%lzFd5|jO_ih~V2vQo1QvkOuJyu&lfL;M{pBOHslBK3>CbG1FvLn93<f;>XZ
zi+sWY3QY=vjf^85%R)koJv?2_Qw_rM{5&R~VU(!P%1%x9)z=TG$P08TDEF`oHIFh4
z2`z~XtqOAvsr1&5Om)nN%nEQaHE`wf4#)~G@F^^-^z=+hE~^M}3M$R3at$-}2(~EA
zN;EaI$O$sbFE*+4t}N!#)zwwVb1C&Gj0|$IFf)nt@=H(kcXYP!ardq?PpK$$&eJYR
zk20+{%FE1(H1td7x@5t&SSigu^@+h-$s@9Sfh=bZhfdbh_O347A9H<mQ)bZXmFxOu
zr5pBT%ur^`PQ4)SnHuEs_^t|vG;_{MGp*R89}J{U-}<Ni{+CubH}Bu?Pahq)6SO>;
zr-DV`%w$<p>xZ?8a$Nf!_-S2<oZPtn?zuB}o!J;Z*ZqIUD)Zyn$x3;Nrt<!$9$DKA
z9;I{hF7XzwTP(jJy(#VZ&zXTL?`+pAWuH}%<*vThUuN8%e@&Pp<v?-5hl6rm;;Zcr
z?RmOgm`l7(MDy=H?XQnpO<AWhy%lAByhK1=eB-{gf1`6<jf<n!XFP5U3s}ncGgh}`
Np}yYrs!)FoX8?e<98CZK

delta 774
zcmaFB_JD1IPJNZBcS*9Pc1A>&k5{F>Pid%SV1}o@X_c3SnR`iSzGu0&V?;z$o^i5a
zF;}2TNok&;lZ#JyMZQm>pNp?YPHwS9g?ULpnsI)KcS?r8SEXNRMQK%fI+w1ULUD11
zZfc5=si~o*LU5*WsCT(Suy2x2exQ?~Q$<yzuSvE=nOnJ;VOXSbL0DOpS#VZXL`AN9
zfWCW_L5QIRS80`BL{_>}iAPwFLB2<MvR`RHj%!G^wsu)as)ehIX-2ZIc9Mssc}aNS
z#E;_PL8ayuRTkQzL4}2x9@@oGX62=Z75Wuk<pt*9r5;{B$zg>NIqnu2CI-n|E&=5s
zDH+Z|W&VlDQT`^*hDqsBX%?0St{DXdCPoFpDgJ?uiDsroS=lC&;~B-nf-_8t{GAgc
zLc@IXO3fmZeM^#@3w^y!oeDAn3Y`in11mB^(mcbB{31fRQVoLgJUxvgk}8wK(_9J)
z@=DyajZDjva?QitlhRzh($dr1Ox!by)AA>uVU(!X56uY+2=k2$_j1nj(f6}732-sW
z2`)->cS|iW3=i|RwDdL4aMSj4i}2(!a!$+e^$0LADRHy(%*)O&%}R4m%(U<_N=eHJ
z32>?`)Hl|Tvh+yGEXd~4)zwu9bN2KPGA=Eth|Eq74JvZh5BH5o4X^U{3JXk%aCRz*
z40W#$Hi(J{(a!VantXWkim;a<<{FpXKVHbp=a^G8uj1%U&hQOeZ1c8g8`$SsZ01fn
zAN|#A(V~gFtSwG9KCE(FYru86rbqbPkr)%+W}eswJH-VG@1HB1>ZwukRU*`*@UAeI
zvD7v81>$PKGA5Sohm#kq;$W#+sMd5SmvOgo-2Js-bxT6`e0b|~>EVj9MedVW67G7;
zm}t&)b5_{LO;7omG<$n1X1FTbFkar__adX^+Z(ghlUz5yZ}mIjQL^Nu_xoG-w>(()
z_+@MPVq3vy;`%GhFY~H1UDzVE<>yxCNqjk}J=2`l>C`?yvig&ZtF%RC<YU<zufMUq
PT$g;%>hzL4-&t7zbz&q_

diff --git a/secrets/watchtower-secrets.age b/secrets/watchtower-secrets.age
index 731f350..0ab97b0 100644
--- a/secrets/watchtower-secrets.age
+++ b/secrets/watchtower-secrets.age
@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 UCdOEA rwtWsO8E+vIYczz3bnBWry4sc8ygeB4GcNE4UFzCPH0
-GVWdLrXe5KZJ4eKQq5W37GrSivdQCJ1z7tYbngnK6I4
--> ssh-ed25519 Si3UKw TMG07B/y9JWgXQuugw4FBs/ViBRVcpizARh5WahZIiE
-uDrX01sid0NatPF9sD1iKjNbqpXHGWR60vhaApRWNeg
--> ssh-ed25519 3UG3uw 4aIPArWqv7oFAWjYAWL63mflRtQOOU8lTKN2e7v/RkY
-4swNcTLBb75IEjmslVGP8wRpsrntKNXWRcOP6WK7NqE
--> ssh-ed25519 JEhtoQ d2h3cYseF5RTvi+baQUKN+se6Hbdgls7WgaKZr/gHno
-dp8tfODTA6c7hAuAZt/4v3NpC1RBFXFUezojtE7flig
--> ssh-ed25519 uqg2jw VjDmDfwEt/ncUWUPYJzHt03ZIvS3PupBkqWMJkH+axs
-LzSbSqvqnsbVP2UbLrVJ8zKjzC7qJ7Z019LiqvaFyEk
---- hI6XyEO5eVfA5r/6p3A5o9+pFuvjPc/F5bD8yNf+CMw
-�u	�3i����}'}�mǰ�a�r�G���mg~nȅ�SU�(+����n�^	�����H����g��1T�q�)<y|��;r|�_�|��x�O��k>���RRШ�[!���N�B
-���b�װ�8G}od�q@?#@��&�4�
\ No newline at end of file
+-> ssh-ed25519 UCdOEA Noal+YwgnLLtYufQC80Vcz6kcApF8MXc6daNXtN5NxI
+RNxi1EGDP6Yw+8Fms1yy374o5dT5ME7Kur9LeUVDh1k
+-> ssh-ed25519 Si3UKw KuZRSy14hTM1L3y91SJkg/RCZKwFBb57abd5SAYA9FA
+tsBO4q5PFVaQJomm1Pc/gk9rSMT3rbLwrdZp6sdZEtE
+-> ssh-ed25519 3UG3uw 3JPnjziZ/puUb8lMcXKIxcm1FCAZ8ov2Oz6BRE50qjM
+QaN3UkQVsUpSRQltBwkveZNnlGnBFXknQ3UG1pTIzVg
+-> ssh-ed25519 JEhtoQ 6MF95Wjct6HZDy/Y8pF7wO+yMTrkg+KXtwZIZJfU+XQ
+S854WSBNljf25lGkAOwDP1OpDPfu/+higpO78bl+ZUk
+-> ssh-ed25519 uqg2jw 3HPI3ZGiTQtojyz1LXrD6zMcpVIrp1GLyLGjPyDubFQ
+QoaBtmW/8kF6UW+/IXN2z0+Gg3KgwmMMiO3uF4sqOyE
+--- bNgc4v/GjwtYU3n001dwo7ToJKBRzog9lzrQOqtb94g
+x֜��B`^��2�Q]?�Y��w*\c��^xsE�,v�R�Z
.��+��Q�nS*&	t+S�C� yd�p����`�m�g�+�"��g�es6ZC�s�'J܉е��e�ޠ�tY�8���g !�@��ߙ���k�{u�a���U�
\ No newline at end of file