diff --git a/secrets/arr-secrets.age b/secrets/arr-secrets.age
index c6407d2..3c4b1b7 100644
Binary files a/secrets/arr-secrets.age and b/secrets/arr-secrets.age differ
diff --git a/secrets/authentik-env.age b/secrets/authentik-env.age
index dfdf410..8ae08d8 100644
Binary files a/secrets/authentik-env.age and b/secrets/authentik-env.age differ
diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age
index 50e3cb4..d1ec549 100644
Binary files a/secrets/cloudflare-pasetto-apiKey.age and b/secrets/cloudflare-pasetto-apiKey.age differ
diff --git a/secrets/dns01-admin-password.age b/secrets/dns01-admin-password.age
index a56170a..f149aee 100644
Binary files a/secrets/dns01-admin-password.age and b/secrets/dns01-admin-password.age differ
diff --git a/secrets/dns02-admin-password.age b/secrets/dns02-admin-password.age
index 6d79b7a..015241e 100644
Binary files a/secrets/dns02-admin-password.age and b/secrets/dns02-admin-password.age differ
diff --git a/secrets/exportarr-secrets.age b/secrets/exportarr-secrets.age
index c61ea51..52f2240 100644
Binary files a/secrets/exportarr-secrets.age and b/secrets/exportarr-secrets.age differ
diff --git a/secrets/firefly-iii-app-key.age b/secrets/firefly-iii-app-key.age
index 06a0c11..5965273 100644
Binary files a/secrets/firefly-iii-app-key.age and b/secrets/firefly-iii-app-key.age differ
diff --git a/secrets/forgejo-runner-token.age b/secrets/forgejo-runner-token.age
index 4ed8f05..ae3526f 100644
--- a/secrets/forgejo-runner-token.age
+++ b/secrets/forgejo-runner-token.age
@@ -1,11 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 kElbzA boFBSR0io7H16hT82MZajpHBFD9TiJvHVgeF7bu0WVo
-GJ2xblkP5ofTlXstlhdvM8uPsFu6bKacHznk3npxTR4
--> ssh-ed25519 uqg2jw M+xMJUwVlUNZZuewkJJepaCNpJ1ZEMZ0CdeSaTsBS0Q
-2q6qZSY8d9mOQr1RgfO7seqqrTn9JAQXR2tPBZfqYUI
--> ssh-ed25519 a0HhMw Fkyzj84jmJaegJxcC6hwpfH7uxgfNIuthNOM0nbF4ig
-ouM9HuShAnQ612Ot6a0+FfzgOR60+HZQtB0qw8l/6jw
---- 99lNeBy8ngZyZ8KCY3tiI9tU1QqGJliFT6HZQrmDH4Q
-��~�FC�G�k!@�(�p���%���o��MA�j�~�7�Z#�f�
-�
--Qb:S��.������CAj���<xy!<S����
\ No newline at end of file
+-> ssh-ed25519 kElbzA V9+ZQ25O2Nr4BS45NvJsAcfv2HJycYsNRpcINlsNUEY
+f1nK2CRANB6bXWJVPK3euVCjYuWMpeRCvDfFvUMTLVM
+-> ssh-ed25519 uqg2jw SR4UcSZ01r7T/Aj0CR5N+t5PjNl6LODQc/Tuk0/b7HE
+KTBm56P49WBbDC/qghZBU7w8zsv9/7YJg5LUAug3xF4
+-> ssh-ed25519 a0HhMw 7nHalpAbZ65/joUSi/Y3LLGncANpLtif2a6DFTRb0Xc
+CpG5w9oRVnPhUdorYmsF9jT9kMs+vzd0eq8EYyPtsJc
+--- yaWuLi/VNLXKo2K1Pn8Wtk/X66XKzxK1eERU/I7XLVk
+P#EF�΀���5�r�����Ϸ?� +wؙ\%��f�e�N����W��]N/��*�R�DZ-���_ӻ��K1�5�
\ No newline at end of file
diff --git a/secrets/grafana-admin-pwd.age b/secrets/grafana-admin-pwd.age
index a646292..1bfca9a 100644
--- a/secrets/grafana-admin-pwd.age
+++ b/secrets/grafana-admin-pwd.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ OLNMgDSyY11NmR1hq/jG/+JUAYZVisxCSWnLG80CWWw
-+vL5khmSaXogTl36872MuDzGAGYsCG17e+jRoR3fFKI
--> ssh-ed25519 uqg2jw uzTHJKypw7Lp/nify7kpvKfkpHEdj/EjXqyUetcOrUo
-ZTcxI5OLpygvE/wdKxnqG9GskIy9rBZRvr4xXd+ZHvY
--> ssh-ed25519 a0HhMw cD1ol08CqDsnqi5GS26t+Do4nY4H0eAPQeEmFmqeVzU
-mYac+X6RczmQKm0rj69nJPOeNNPTqt0Td3D4TXa7mec
---- 61bWEaJxoSjI73bQ7Qza6kSPp4k1nVgI5Y4vWpoeCQA
-c���j�t#
-:�LD�Ս�55�;���XjC���B��7����[��
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ ufJ+iSXA4d4n0jEKiIstpa8Q81fnlTWuA4plgj1M+QE
++FQklw3oQj9KnCERNwL4hEPL38hylhSvHuwAuyrlgLE
+-> ssh-ed25519 uqg2jw pT5E7VZi3ooKIY3zZEvv7Kbas9WWz1XLwXGpzfgGfUA
+SAt+i5CqaeAq/Tbnzwei88H8fgz66U09vmALL2yH21I
+-> ssh-ed25519 a0HhMw oeuWpIkLn6XzRLEsSybt37XR1ikaeddL6WZLPVo+dDg
+CbyndB2+M27Cq7+SsnHmox9tZDx8nqK8/X/twsJbnSI
+--- qcEFQmozRxqrV0VRfBHrSwM+1v3PFcTbVAxu/Crjhsw
+���~��eS�h�G��y�Z�27��:�!�r�z(s.�U�(�
\ No newline at end of file
diff --git a/secrets/grafana-secret-auth.age b/secrets/grafana-secret-auth.age
index 15a071e..ab6563f 100644
Binary files a/secrets/grafana-secret-auth.age and b/secrets/grafana-secret-auth.age differ
diff --git a/secrets/mqtt-password.age b/secrets/mqtt-password.age
index f6378a3..814bf15 100644
--- a/secrets/mqtt-password.age
+++ b/secrets/mqtt-password.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 VfYKTQ MrRU5CY5wYzIzWbQVGkLtLGarIRu9Xdo0FJFEPDZikE
-WsVh2FGqX6LORnjUI3W3B27JhVtN8WISZkr8ytdjcCc
--> ssh-ed25519 uqg2jw imrQr0RmZv4wmtmpIK4fg6fTfs9AlVwA6Lz4dqKIpXE
-wI63PqmUCpfMdklorZ8MG0E0UQ5MpD1JvqPXmANLV9Q
--> ssh-ed25519 a0HhMw f8PONX8FoW7LmBTjFA72H9453QkOGnX91ihF9tJJtC8
-C206evHFa7LhI/aBMN2Pob5+ACn124BQBomCUMDI7ZE
---- AJ+nsMuUbiQYlh6ScXJ3ymqqN0k+qzoHk+2gx1AiqNY
-[�(�`@��Б$��D�3)7P�f0B�J�q�v*����HV��H��
\ No newline at end of file
+-> ssh-ed25519 VfYKTQ xMoobFdxUR6z+ZpRQbu69K6DfjFouS2/VeY14z6aBlI
+Yana0VF9enzOkV/BzZ7z7tmhWDEiCSJzzaiJpjOC+IU
+-> ssh-ed25519 uqg2jw zCL88Iu2tKMpHjcZwe/0CV04acj0vzJok3T7enf/zUQ
+fnrg9+13tzjL0sIiLP2WWKeYufL3ksm8HHljEnIAZJs
+-> ssh-ed25519 a0HhMw AMKdtR6XaroB3cGuXCYc2Fw3HHwNcBXvRC1lWH1CLgk
+HFwgqLhfuHy4+XMafonoqDjgaaQ+L5s71cP+/3kVt+o
+--- qqPpy+/ZW87v13ptI33zO1yxIVkoU0D/dKh6dmcogRw
+�)��Kݾ_��D�_
+77�c%{Us�i�i���
�^�Q;�<����f
\ No newline at end of file
diff --git a/secrets/nextcloud-admin-pwd.age b/secrets/nextcloud-admin-pwd.age
index 2dcc958..5e776ed 100644
--- a/secrets/nextcloud-admin-pwd.age
+++ b/secrets/nextcloud-admin-pwd.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 S1eK8A 9DPucaTWIG6QXWsdquQUDO9tQBz6+dEIKdWumBZxGD8
-UC6ZTjmF6GZO1A9MXysRC6PiskErGtKalvr63bQKf0M
--> ssh-ed25519 uqg2jw B3+6z8h/5/BOlRLHhUdptOddCmTFAdsOvtrBMH+EQxE
-uW2lksoEAkr3nqpV26bPw59sqszR2urBUdFoze6q3Ec
--> ssh-ed25519 a0HhMw mPBsUW+OemsIiJysGRIMoQ5OckkndfzRhIIyfWcGdSo
-NRlannhEAvjj+bHgWIfi2T0nsx+ICgO71zhoJJaqQ34
---- PFOjkfcIXnweWdTOf3uVY5TUbDPlTMJUdD2NkdVFmUw
-ʁ�7)=�ӵoag$Le!gF�*z�K3��t����-��2x�:�9
\ No newline at end of file
+-> ssh-ed25519 S1eK8A F5K7JIXTSg+5AfFuRsFtbxhbX/3a/x7SNZ9eiiG2FXo
+umaFiXV9ypTxdXzRl/X37fyQlWwFsug7TD+prQ4w97I
+-> ssh-ed25519 uqg2jw JaT2wgqEQpnfbzspUpEBpa8M5OCYs53RnRwWpaWpzSA
+OHp83Xf5WdHNxG3Wsm4zsy9wOLZDcoaFpRxQGtoNdi8
+-> ssh-ed25519 a0HhMw yZEM714bWIN657VGrGDBmSZZljOURIZwYZmKV+Zyi1Q
+nL1koyimO4OGaE2c1Mbm+9u6GR7Axi3t3Ay842ck9kQ
+--- ycl+WPu2ZtL+Av2/hTn8tJOkVrQPjNwdp1R4fwI4ObI
+�.C���/
+4�2�Gq%z�)��&�bLr�j��y�!�*I��E>��
\ No newline at end of file
diff --git a/secrets/nextcloud-secrets.age b/secrets/nextcloud-secrets.age
index c5edc26..5c86094 100644
--- a/secrets/nextcloud-secrets.age
+++ b/secrets/nextcloud-secrets.age
@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 S1eK8A BrAFihfr8EbsaDJRMKWKmYiHiH+DN4/HuJp/unKK7V0
-MfpzoIv7FgJCWuAkNpXmem5B9M51KkvHpDAtBVOqHbw
--> ssh-ed25519 uqg2jw k4f3jnxMPIpccQ6zyYBu+xgEKptuv7B2tf3laA81YXA
-rju44tLTondTSV6VLgECkFDMoHvKsoPzo+WgAQqfKDE
--> ssh-ed25519 a0HhMw 0/BqhgCzSkTMBj8wxxsetJSZlK1/AZfwc44qG1Kb9mc
-80N9bekQI+BVMdMFSj15boo0tVPMumI+Yil1/lPgA3E
---- PCbPMF+jrxOjjwJ3Gibagl3c6M7sf8DgbbmLiyAX0To
-���۞�7�0�>Ӭ�}\�+OV-���ܶ�JM�fZ�쿕 �@�"�?_f����
-����A����L(��r�T��Je�᚝�V�P��a.�C��K⽔�'���)R� �V�]�
D�A��� �Ϛ�έ�0���MF��6Q
\ No newline at end of file
+-> ssh-ed25519 S1eK8A gQptf44mNU/1FrEQfodRoMHL/zFrVtzKJv7O+ZTIjFw
+cS8FPwJdiUATww30EyFjSSlG/kg1WkH8CON+O1Mx1jY
+-> ssh-ed25519 uqg2jw LLe5ncbAv83tYFkQunAW6G8htEzBT09/+lHHSniSbws
+bX0IRayOUc0put5+2ShxzAgJwGmlYvP+72Trwzm/eEc
+-> ssh-ed25519 a0HhMw Xtg6ooMonw5zswQEUOVGuriURSQA++JZRI8xupgnMic
+iLDcD+0lgPmlAA3ip42DUWZso6XC4sfYiba8vZvhXKc
+--- ndN2ifpsdcTAAst9NOzT3FiRyQoNFpcT/FjteQ/VJMk
+�Xςb$�"�x��t �J������Rb�����2\�EH��Oɪ4�)�R�;R`�+9��
+�(��P�|�*�d(n�ACS-��2JZ5G���x4��A�����eO1)���(����J�L���y$��	"��e�bZy�˚��ɨ��̿������;
\ No newline at end of file
diff --git a/secrets/paperless-admin.age b/secrets/paperless-admin.age
index 56484a7..1d5e335 100644
--- a/secrets/paperless-admin.age
+++ b/secrets/paperless-admin.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 4sgwqQ UwktYIJUlXiIDiTsGe1vWoeGbuJNU7xyP/ugSBQ31ng
-XA8ibEZIgHM8FCz6K1GNL+21nNHMJILwQbMixp5f/S0
--> ssh-ed25519 uqg2jw RMdFQKfk8WV0TNKFucbGKKuocJnxwg/EtP7zHgU+wD0
-VNUFv6qlshbmO69OwivyOca8Aty3hiy8Uqad/UMtlO0
--> ssh-ed25519 a0HhMw Z9+uJDJvcO73+EXs8WNss8L2knvD1GwTH5CYGtqfY3M
-yaAyb9+Gy8HkLj4Hzk+fdt8IOnkF1PIe2Xd41o5wzjU
---- SM9U5yoYT52VqOeOq1kBErmfstQLQmes5FBkonGRibY
-�.Qy��u�bN��!h������D�����h��}*c"	�1ǃ,z�����X��
\ No newline at end of file
+-> ssh-ed25519 4sgwqQ fpfpIIJi/Jm78+HjUpcytvSIxFbnfoo7nAO06p8lyiI
+9FjqIImtULw3oMFKkfDnQtmeDNBkOAPyVz/byLpMwIk
+-> ssh-ed25519 uqg2jw In9okIAC+/ZOG854TeghH//U+eK4mG+2eE8Ey2FI2mU
+cZNmNaLxUziQ1o5BPxUJDT098J/Y9A1NlSwD1KbvKNc
+-> ssh-ed25519 a0HhMw KgXqxSK03q4/FAeVVSx4PmQnnI98awQi7rKb6y2icyU
+6HgMjyYcfcrBQ1PW1TSkjZfSrJZfPrRCJz0tOQyXHQA
+--- 57OLAFZenPARmYkkMID1UrypBUEif/EzTEEzKK/zz/Y
+���u�����@�>�A�Ǐ7����
 $��,�	/���͋<��VRZ���
\ No newline at end of file
diff --git a/secrets/paperless-oauth2-client-secret.age b/secrets/paperless-oauth2-client-secret.age
index 009ebb4..c57b412 100644
Binary files a/secrets/paperless-oauth2-client-secret.age and b/secrets/paperless-oauth2-client-secret.age differ
diff --git a/secrets/scaleway-password.age b/secrets/scaleway-password.age
index eabbb27..9599ffe 100644
--- a/secrets/scaleway-password.age
+++ b/secrets/scaleway-password.age
@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 PCrpYA RRhA68nnhGukBpk0VQL4mf33VUPMvYhGUg707OpzmUw
-4Z092b0G35gitNnp4CqKOlrCafHNDCfeV//1twXAa24
--> ssh-ed25519 aichPw klJoBYbGW9yMzaJadQVCo8nsgKh3rm7N4jmAatSwqC4
-C4KoTavZctR8dyo8MhSwOXGKQZ3dbXIQbeuSQ3gohwU
--> ssh-ed25519 uqg2jw ZwJZ5pmN4N7qmVLKHzc6Xn4VLNhxdj2kp5eOCRr2uAA
-rGZ98Bf4LRIoaaXolbYemILUJ/u6hIIp6KUULRRDjR4
--> ssh-ed25519 a0HhMw xvLPVKJZB/7JR9F1hgBEBJlhdUdiBoeRaPtvU1CyYw8
-jQ/Ro3g0PPE74l3Rn0T3LsjyeHyiKpZ1u9H4q+MR0VM
---- VPysyzTDevjvIx6Umd1gQjPoHi2AUJh9vb3j1UdOEqo
-�����@�?������5�2^��䥄M�mc��t�,Lǫ�k"Z���|�[m����{:����?
\ No newline at end of file
+-> ssh-ed25519 PCrpYA GMZm6pq9/zL1ixiHZV3XUC4R8y5mYSqJuoE+nlVa9kU
+uWczCTnJYrpwnRDBc+iqyLef0RpGSFfpLPXesSnUKfY
+-> ssh-ed25519 aichPw Sy0zF0rwmX71AiVdJmuqZYL2twBVdJq50EHn+Be88A4
+bQCZRmYP/rj0Vd5Vxywtfvv1v13CM/sLieS17uMhRCo
+-> ssh-ed25519 uqg2jw 8T767ZNAorLStcnrdxxBZHrPG+zsfRb5Eda8/Xeysnk
+ua8TggWuoN3wZiRAKpcfrQrldxwIbVbb2BDgJIxiU+k
+-> ssh-ed25519 a0HhMw R0I0zFL5v6lMdDTSZUukvBXkrGhTeRxSVEy+UF//vEQ
+u7J1pv6gr95eBTY/FuMActu3nkCoxvVcBlXekHoXoKE
+--- 1w+oRBQ7ZvlwiMDjYH05Kzzk9zqv7KzB0LhFLQAX6pM
+��N���d��o!n��$���_��Xۭ���\�CAy[���E�K?�1:{��L\�~�|�"��3\
\ No newline at end of file
diff --git a/secrets/searx-prometheus-secret.age b/secrets/searx-prometheus-secret.age
index ee2a085..b33261f 100644
Binary files a/secrets/searx-prometheus-secret.age and b/secrets/searx-prometheus-secret.age differ
diff --git a/secrets/searx-secret.age b/secrets/searx-secret.age
index f715a20..370c80a 100644
Binary files a/secrets/searx-secret.age and b/secrets/searx-secret.age differ
diff --git a/secrets/shadowsocks-password.age b/secrets/shadowsocks-password.age
index 5e7be74..6116f50 100644
Binary files a/secrets/shadowsocks-password.age and b/secrets/shadowsocks-password.age differ
diff --git a/secrets/snmpd-config.age b/secrets/snmpd-config.age
index b9d877d..a826095 100644
Binary files a/secrets/snmpd-config.age and b/secrets/snmpd-config.age differ
diff --git a/secrets/tailscale-authKey.age b/secrets/tailscale-authKey.age
index 8ceae11..4dc59fe 100644
Binary files a/secrets/tailscale-authKey.age and b/secrets/tailscale-authKey.age differ
diff --git a/secrets/vaultwarden-admin-pwd.age b/secrets/vaultwarden-admin-pwd.age
index 3dbfb83..2360890 100644
Binary files a/secrets/vaultwarden-admin-pwd.age and b/secrets/vaultwarden-admin-pwd.age differ
diff --git a/secrets/watchtower-secrets.age b/secrets/watchtower-secrets.age
index 2919344..bfa26e7 100644
Binary files a/secrets/watchtower-secrets.age and b/secrets/watchtower-secrets.age differ
diff --git a/secrets/zigbee2mqtt-password.age b/secrets/zigbee2mqtt-password.age
index 58643d5..4dcb6f3 100644
Binary files a/secrets/zigbee2mqtt-password.age and b/secrets/zigbee2mqtt-password.age differ
diff --git a/ssh-keys.nix b/ssh-keys.nix
index deeca45..70ad24c 100644
--- a/ssh-keys.nix
+++ b/ssh-keys.nix
@@ -25,6 +25,7 @@ rec {
     forgejo-runner = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFR3nkxurUTV2BYv+gLmgyCywPeVaWQxAIHomTNp3R85";
     n8n = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP18IdsIxK7EdIOLSONJ4NA6AfLnM/3NkR3+OCDvJWXJ";
     librenms = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM/dmfOVzj37ZYwLTs+jjQUQYRIgvW3NrtBDsr8rllss";
+    immich = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF8H49AYwKmHLV5QwgqNjlFRhLVg/k3/kKR53/ihz/cu";
   };
 
   # Machines able to provisioning other machines