Merge pull request 'KaraKeep' (#27) from karakeep into master

Reviewed-on: #27
2026-03-30 10:09:54 +02:00 · 2026-03-30 10:09:54 +02:00 · f6df45b6d4
commit f6df45b6d4
parent 8f0f6f5013 6533d89f8c
34 changed files with 338 additions and 176 deletions
--- a/hosts/caddy/default.nix
+++ b/hosts/caddy/default.nix
@ -104,6 +104,12 @@ in
        host = p.hosts.actual;
      };
      karakeep.proxy = {
        enable = true;
        domain = p.domains.public;
        host = p.hosts.karakeep;
      };
      searx = {
        enable = true;
        secretFile = config.age.secrets.searx-secret.path;
@ -187,11 +193,6 @@ in
            host = "http://${p.hosts.docker}:4080";
            domain = p.domains.public;
          }
          {
            subdomain = "keep";
            host = "http://${p.hosts.docker}:3000";
            domain = p.domains.public;
          }
          {
            subdomain = "maps";
            host = "http://${p.hosts.docker}:5000";
--- a/hosts/hosts.nix
+++ b/hosts/hosts.nix
@ -44,6 +44,7 @@
      "firefly-iii"
      "paperless"
      "actual"
      "karakeep"
    ];
  };
@ -119,6 +120,15 @@
    ];
  };
  karakeep = {
    module = ./karakeep;
    tags = [
      "lxc"
      "bacco"
      "karakeep"
    ];
  };
  metrics = {
    module = ./metrics;
    tags = [
--- a/hosts/karakeep/default.nix
+++ b/hosts/karakeep/default.nix
@ -0,0 +1,49 @@
 {
  config,
  pkgs,
  ...
 }:
 let
  p = import ../parameters.nix;
 in
 {
  age.secrets.karakeep-env = {
    file = ../../secrets/karakeep-env.age;
    owner = "karakeep";
    group = "karakeep";
    mode = "0400";
  };
  my = {
    utils = {
      commons.enable = true;
      lxc-standard.enable = true;
    };
    services.karakeep = {
      enable = true;
      port = 3000;
      environmentFile = config.age.secrets.karakeep-env.path;
      extraEnvironment = {
        NEXTAUTH_URL = "https://keep.${p.domains.public}";
        CRAWLER_FULL_PAGE_SCREENSHOT = "true";
        OPENAI_BASE_URL = "https://litellm.ts.${p.domains.public}";
        INFERENCE_IMAGE_MODEL = "GPT-4o Mini";
        INFERENCE_TEXT_MODEL = "GPT-4.1 Mini";
        EMBEDDING_TEXT_MODEL = "text-embedding-3-small";
        DISABLE_PASSWORD_AUTH = "true";
        OAUTH_PROVIDER_NAME = "Authentik";
        OAUTH_WELLKNOWN_URL = "https://auth.${p.domains.public}/application/o/karakeep/.well-known/openid-configuration";
      };
    };
    virtualisation.proxmox.enable = true;
  };
  networking.firewall.allowedTCPPorts = [ 3000 ];
  environment.systemPackages = with pkgs; [ ];
  system.stateVersion = "25.11";
 }
--- a/hosts/parameters.nix
+++ b/hosts/parameters.nix
@ -36,6 +36,7 @@ in
    librenms = "librenms.${private-domain}";
    collabora = "collabora.${private-domain}";
    actual = "actual-budget.${private-domain}";
    karakeep = "karakeep.${private-domain}";
  };
  personal = {
    username = "pazpi";
--- a/modules/services/default.nix
+++ b/modules/services/default.nix
@ -9,6 +9,7 @@
    ./forgejo-runner.nix
    ./ilpost-addict.nix
    ./immich.nix
    ./karakeep.nix
    ./media-mgr.nix
    ./n8n.nix
    ./nextcloud.nix
--- a/modules/services/karakeep.nix
+++ b/modules/services/karakeep.nix
@ -0,0 +1,94 @@
 {
  lib,
  config,
  ...
 }:
 let
  cfg = config.my.services.karakeep;
 in
 {
  options.my.services.karakeep = {
    enable = lib.mkEnableOption "Karakeep (services.karakeep)";
    port = lib.mkOption {
      type = lib.types.port;
      default = 3000;
      description = ''
        HTTP port for the web service. Used for Caddy reverse_proxy and
        services.karakeep.extraEnvironment.PORT unless overridden there.
      '';
    };
    environmentFile = lib.mkOption {
      type = lib.types.nullOr lib.types.path;
      default = null;
      description = ''
        Optional environment file merged into Karakeep systemd units (e.g. agenix).
      '';
    };
    extraEnvironment = lib.mkOption {
      type = lib.types.attrsOf lib.types.str;
      default = { };
      description = ''
        Merged into services.karakeep.extraEnvironment. PORT defaults to
        my.services.karakeep.port but can be overridden here.
      '';
    };
    proxy = {
      enable = lib.mkEnableOption "Set the Caddy reverse proxy entry for this service";
      domain = lib.mkOption {
        default = "example.com";
        type = lib.types.str;
        description = ''
          The domain where Caddy is reachable
        '';
      };
      subdomain = lib.mkOption {
        default = "keep";
        type = lib.types.str;
        description = ''
          Subdomain for Karakeep
        '';
      };
      host = lib.mkOption {
        default = "localhost";
        type = lib.types.str;
        description = ''
          Hostname where Karakeep is listening
        '';
      };
    };
  };
  config = lib.mkMerge [
    (lib.mkIf cfg.enable {
      services.karakeep = {
        enable = true;
        browser.enable = true;
        meilisearch.enable = true;
        environmentFile = cfg.environmentFile;
        extraEnvironment = {
          PORT = toString cfg.port;
          DISABLE_NEW_RELEASE_CHECK = "true";
        }
        // cfg.extraEnvironment;
      };
    })
    (lib.mkIf cfg.proxy.enable {
      services.caddy = with cfg.proxy; {
        virtualHosts."${subdomain}.${domain}".extraConfig = ''
          reverse_proxy http://${host}:${toString cfg.port}
          import cloudflare_${domain}
        '';
      };
    })
  ];
 }
--- a/secrets.nix
+++ b/secrets.nix
@ -25,6 +25,7 @@ let
    paperless-admin = [ machines.paperless ];
    paperless-oauth2-client-secret = [ machines.paperless ];
    actual-openid-client-secret = [ machines.actual-budget ];
    karakeep-env = [ machines.karakeep ];
    zigbee2mqtt-password = [ machines.zigbee2mqtt ];
    mqtt-password = [ machines.zigbee2mqtt ];
    scaleway-password = [
--- a/secrets/actual-openid-client-secret.age
+++ b/secrets/actual-openid-client-secret.age
--- a/secrets/arr-secrets.age
+++ b/secrets/arr-secrets.age
@ -1,10 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 1nWE1Q QZSj7XvHYx1+J/fZryLr7D1+0AVJOayuo02NbgEuIB4
+-> ssh-ed25519 1nWE1Q cGIpoJKSYdxrQsNM9q+1sFBKc0iaSZ1LLBPNjQyhLHY
-KPqHZORBukdYAjGUvA+lOhrLqT0jU8EB4EVT2ki6XXU
+1rE4usemERcu57GrGjs0riKByWzo/4cG69PBc7vmKBU
-> ssh-ed25519 uqg2jw YIzu9XwGlpsTrVSnlh8eM7hRCN9XOkaf5ame0izldQU
+-> ssh-ed25519 uqg2jw U1QQjVgd/GzRSfwJFIOsI1+GU8xGLfw0Ft80q5huoHs
-4ifucWy56ZjMSdXDJiTCkfUbTQajfnaBu9pbww4tSfs
+/TXUGZPVx1j9zBoRBAgPczxeNilJPlIA65u47+8HKAY
-> ssh-ed25519 a0HhMw M57oWIPG5/10zUDrgCXKEbRdhXjfB67Na1NEuGIkN1g
+-> ssh-ed25519 a0HhMw FwRIvTR6Nkb6n1bMKl7EPJ7CyS1Va6KM00Q7hkppwGY
-eAGk45dRccH7RQXHdEnyXpdv/nFR0jcKrMNY2Ci9J4M
+P3TIs1Hbd8Izp3L2YSYegOjls/Eg7eJwQgkRJ2E6neY
--- II6HPEsG3tUNmMB25WzYIS7FfFfb6/rAnY51xaIePqc
+--- h5xtzXbQAMHptlHsBOg0QzUohgvNDG8kBIBCzylGaPw
-<`‰<>bÈ×[•³<E280A2>‡±0¯Ø™ìT"êí›óhÞRæúHäf/q
+ÒFÁü›ç^å¹ˆnD\?]M(+@Ü•^2 Ü¿©‚§Q8åìyfLÀP/÷Z˜Ó²‘:ïûîôL‚˜Äçh”¸[û™]û^>yYdzYu*ž)Ðz;’0 ©@á\¥'Â¬ùp/ÄËPÙ—è08D¶ßXïÚòWöÏ}n=’=…”w6yžb:ìñùB%bGcëŒ¯5,˜ñ,ùl)¢N±Uâ¯…Àß+î,}?^ŸDAmåÇŠ™ìÑÀR[Jl3i‘<69>),sz.|Ø 9pò<70>WŸ<57>lu¯r¨–é%3D‡UêsóáÏhá®•B¾Vê‚òQJNüKó-9¶úÙ—W<lÁP©Ju*ãÁ4¦M#.N<UŠ«ýÃú0`6Ì½mR¯d“úËYt²AwÈJL3¬c„ÂjP`rT1f°€Ö£+6bÂ‹±‘éB(E$9äŠç<C5A0>û¶óàæqfóUõÙoLÏ
 [¥<>ïON;ˆí XÌ®w„@€«é"|†—=0¢™Á†“»«-/èp<C3A8>¿•’îŸj±¹ž…L6Šðä]ê:o×œTËaV;`Õ‰YÊ6=Ý—Ä	,IN=„ÙuV6ú^ºžnÌY'ÒeÕuŸÍ©Ñæ›¹úlæâzdoóÿøøºs»}ûä^Øª9l1uŽŠSwŸÍÝýÊk|S°—i)ÓÕæòÊ%¡a-ø<16><19>âäVÍˆuºïÜœæ˜‰jÊÛ»§fNŽYuÀ£Â©ö3ÈF4'>¤´Þé?âN `Ñûëßãcb„<62>LÎtM>½˜GÿD*ˆèßèHH"Lù¬ sú÷œûµ1Ç´-½œ„Èáwy{<7B>{/tÕ{ý<11>ÑN^”¥—ŸÅ"¦ä~ôöžQù"¤Ö
--- a/secrets/authentik-env.age
+++ b/secrets/authentik-env.age
--- a/secrets/cloudflare-pasetto-apiKey.age
+++ b/secrets/cloudflare-pasetto-apiKey.age
--- a/secrets/dns01-admin-password.age
+++ b/secrets/dns01-admin-password.age
@ -1,9 +1,10 @@
 age-encryption.org/v1
-> ssh-ed25519 qaHa5g h5zY25CjinOfbc5YWauUa0+ISUGbSlAdWAVlQNZxrns
+-> ssh-ed25519 qaHa5g NVAyR9Y/++RD2PeygbKZw4dEXINMcV9hkmvQD2mx8GA
-Vc7Tcyd+2K07ndYSQafoSUc9wKo4wX7x+KPSXV09oic
+/KPvyFVYiK4FlYR2xrFPXz1tk6YaNwPeg4Sm6Py0Fhg
-> ssh-ed25519 uqg2jw S5XHn+Q0ErOjm6rIO0rNdWNnI/EHa1SaEhWJLOV2dmo
+-> ssh-ed25519 uqg2jw 4+hAmz/pO6LUHFjwtqCG9vqK9WFmkeQvvjHp9kvaI3g
-+2sonjO5Bn5SSygN1LRqKAaI0FxCORaOmRY2M/0p1eo
+5FrYbRHpW/By4qhlh8HwcuEe1Ni9tvrPvaFR0VVkfyE
-> ssh-ed25519 a0HhMw o6NmwrLxcoxP81MaLtibNJQu9rsq+9TA8ydMn/8Dnw8
+-> ssh-ed25519 a0HhMw U9+tqimZGC/9pH772yxsU1CJNti/Jtu6lCfrFY6uryA
-pNV2CkIROa7joF4LOL8WHgt6P6dB5o6yFoevATCj/p4
+N5n12pa5adYkDmLrKzjroCeH5oIZQ1TTLBe/RNTqsRs
--- VRLYHbzwWscRwbAN4E6Zbc3b/jfqr/YKG60nr2WJfs0
+--- QeZGuVNHgut2t6wCBofI+oIYb1EC9hBkUl9eIgyZnDM
-ﾏ_ﾎ<5F>e幌 齣<>そ<EFBFBD>むfｲ7ﾌ|h｢`}从ｹvYQｷF_ﾒ 熔ｭ
+<EFBFBD>Ž×
 i}ÙwÚ-)…0˜"ÉØõÎ”‹ùR¼.¥‘Àœj;æ…÷w/ªxÕM
--- a/secrets/dns02-admin-password.age
+++ b/secrets/dns02-admin-password.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 FG6Lew 2isb+wkEZJGQdXgC40teVoWUKItBWjbbVRrPhD07/Xw
+-> ssh-ed25519 FG6Lew 84+UamfrnCxDPLlUoLOWGkgNApK2pwsMGcVKM+4EAFw
-N3S6Qaj2cWtM7mZdafGG85vnc67pfmoFwnfn6i1fJb8
+6/4Lq+8ZS+AY2DULL8NGbCVOypMyFqCumJ+YPDHbhu8
-> ssh-ed25519 uqg2jw Y0c4gAd9eFDWx4IXcGFmUcgcEA9SaDzqEtjZUJIeZx0
+-> ssh-ed25519 uqg2jw hZafkg3hO0CNRjcFiKm3LvwHKGwWCSoNObZbz3ziBBA
-BwWUjBVJat5IHbnexa3MpZDKXxZysunBFh4vOZzHcys
+M266tWy/NIeIixsesHDmVKF8HbZzb+nEUkWYPIDNWns
-> ssh-ed25519 a0HhMw XFkAyYa5ztKtDHbrO2AmfmtG3pULQxTW8EXfbDHRcVU
+-> ssh-ed25519 a0HhMw M6H2nnDAPsAKOcNuwmkUZX52gRZaoEXzqnhI7z8UtHE
-PsrzypjiYp142+jZXqSusgT4Pwmcp1tcjfMpoRZ8esQ
+UJDLKXn8I24FbPPKMArY6YDEqP/RwMwswrE+QikJwSY
--- NTZ+xC32G46ilifEdyAKioXAcn5e/BVLHkzHbzWdFNA
+--- CmYzBuDj+9xjeC/hqPHg8ZXNiiC4jH0ACs2DSRNWHUM
-â 0|qqÿpî¶þhÁK\ÛÆr[ÓRùjÈ9ÍÖVÍ°S¥QÍçPÊJBf¶]g
+Šk„|SðêtDÑ•ž`˜ôjÎm"Ñåœ¥£cË{:M.'•†é“L:
--- a/secrets/exportarr-secrets.age
+++ b/secrets/exportarr-secrets.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 xSWWeQ sy7XzX3xpdI6v5mEvbg0yIAYxfSRba8bA0BNfvll6VQ
+-> ssh-ed25519 xSWWeQ wty5mvWKTnTTpwEh2rdBwQPYds5yJTuKsjwaQ8tUc3g
-DMvtJXO8KvmWCR2aYjavFzKVottDLJdlFDDjsFY1JNk
+GOP7sK1sYGL9kuTsjAitb30Mov636Y0kYYNFvW2EiTI
-> ssh-ed25519 uqg2jw sDlCdMMoPuPLsl8szoQtsTJi0/l4kCio0/sug/mIRC4
+-> ssh-ed25519 uqg2jw CuyJo8S0dd/Ty1aSSQr1W5B6ZnM2VtrWOko3XKaUbEg
-cb7EbXyxy7yTM3fgokzB0aThpG2hhC8igtPb7MmSsZ4
+iHrfIUFYpJf7q443ftxKq8xKZe5zzJbMkOIyCQEcX9U
-> ssh-ed25519 a0HhMw 1gOwmyjhkAWXKdgGdZXwi5M48x/iYaBgjjUQyLw3K28
+-> ssh-ed25519 a0HhMw MAEt/jgdPLNNDAHnCLiZIjL8ZrudIqJ3Y36spnSA60A
-+EN3XitbuiOWt+rhW2C+9KabGcHT4ZmBAxe5/DSJUO8
+RE0pQ98s0+4mv293Fg/aOBW25e/fNsMlidVZ8f4zI74
--- W7P99GFVUBGeFOkueOOyY9sZ6XKETiEr/jaSo25jzsU
+--- nGHgr1fldmVG37kY1cVjxTgEWgqkc7ZSUoXMNHhyRDQ
-S C÷á½ÇnôDó}Aê¢Å` 2³ëI¦þw“~ê¨UlŠ` ‰ŠÓ2ð@?`ùA¯ƒOºªæ=§/–Gi
+zúª:áãä'—ÚuH}IPsÇ`’\ôW˜ÏÜ®ÏëÀš8/k¬n€ºÑaÁÏ…ð–e7üs›‹1^%mt|x	Ùn
--- a/secrets/firefly-iii-app-key.age
+++ b/secrets/firefly-iii-app-key.age
@ -1,9 +1,10 @@
 age-encryption.org/v1
-> ssh-ed25519 aichPw rFrVOShujauyWiVhRgaxZTwBDRxdQ74CA1m9o3v/x3A
+-> ssh-ed25519 aichPw VVHb+gfBgCqBBV5FO/gNdI0ZkhibuZgCgRSjdpm47m8
-qn3DxC3VfALtGi5xWs1o6REMKU67QnlDeBhKLTxJqV4
+YL5ukjHlyuNOTSpqXtCaLydgAuh/eCmLgw9Upn0p8HI
-> ssh-ed25519 uqg2jw uQG25sCZCxlooXvKNgL7xDMenQFTyYCOVvwMQST3Pys
+-> ssh-ed25519 uqg2jw J9g85mkGd5yB9f362stJLRP6fBeVmUKlALqPHko8mgY
-t0M2a3MaoKzdp06WVDHFdjDKS3Krl8dejuh1kL6GsZk
+axd/un9ib+PXX34gT6/2sSX9u1keaAQ/9TfNSL2ybYs
-> ssh-ed25519 a0HhMw /mCZ8YTePxVsw4HioblbojBhebJQg3yk/L8f1ZH3ZXw
+-> ssh-ed25519 a0HhMw hcUNsRGGooudstAMZzanLO4xEoaghemPMP6iqkEMO2E
-8E9RdwcaTFmc5wV0nchfiNrlXJJXhpsXg7/D281ILgQ
+toYHjtMeMhzUaQAp+tTikjymtl4Bf29to7j9kHPyvv4
--- Y869N5hs6gq7Z3uQlDLNNFQ98/3drwXKB8zY5hSCnS0
+--- O4SP0daawzTbAoOiSl8cSuy4KzH26o3eRklsyyuTZ1E
-sýÌ.»YàÝ5²|Ò¡X•:jy<>^¶¸¾µk]ýþRu)ÞTz˜²_rzg\òºßß’[³jÔùp_¸¶_
+7´nßRôÆÀšìáß› 2¯
¼zê»Œò+aæç$X^ß•”è
 ‡"ß·`„Ó¨ôÄèQg‚IàÚ¦[’pÖ
--- a/secrets/forgejo-runner-token.age
+++ b/secrets/forgejo-runner-token.age
--- a/secrets/grafana-admin-pwd.age
+++ b/secrets/grafana-admin-pwd.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 xSWWeQ 1XKsswYzaYArE6pw8K7Z6/wULDCcbrbH5LRdDVCAN0o
+-> ssh-ed25519 xSWWeQ 28L3MqslgVb12kzUHuHZ3xUjAtu7uL8sHqjF7/qCGnk
-z6+OPgjshECMWHP7Wj0eVRHkWPBhnVvhagUDzG+pX1o
+FdrTdKBJSG4xe8a99gXRqeLSUIDfgNqvD82gTZs9Xtc
-> ssh-ed25519 uqg2jw Kgb7fmBcT2d2XnTHL9wsVjwqHFG3SV6OT/4RThYNjzM
+-> ssh-ed25519 uqg2jw ujAn/G+WqfBUdsxRItmmREHo2vjz7BFEsE/TirLWXBk
-4nCn7FP2SgeFuf9JjyaUfOernSfU2LW/6iWBvyU/y0k
+wHk1TSc7JVBp4qphdwR7pztnkj+pyi0XXtAUPq8IJlQ
-> ssh-ed25519 a0HhMw 09NWM2lC1gkKuTy1uy1VEMKRcM9bl4JtNmxZBokpETs
+-> ssh-ed25519 a0HhMw mk9BVbnWE0LkYZkj4cIuL/D+qlzDsiwP0qEGN5LtImQ
-e1O4XJ/0S6Tjqb78g3VtElCtOqtzm/99/WS+c9rWBHU
+3E5rgDaf0Aa6WdkC2azzjB2/ruugMpjMr3OY9uIGcKE
--- svAyMiCP+aC2qdc/Hx9/cHdJ8wJan6IiCDq1gcGR+oM
+--- LrDhHN62XtU8BNcjpNOvV4btl+GhoSjqsJZtztegPjI
-[	ºme†]11À©Â•ö2%q3Åü\SkºWð-ÏHßŠZñ2£ÂÅ<C382>ûÚ\r%Òù
+é)ñÒÕ5N®ƒ‹•èo38½(·Å:©“IJóBH)î×´@¸êØž,3ù<33>
--- a/secrets/grafana-secret-auth.age
+++ b/secrets/grafana-secret-auth.age
--- a/secrets/karakeep-env.age
+++ b/secrets/karakeep-env.age
--- a/secrets/mqtt-password.age
+++ b/secrets/mqtt-password.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 VfYKTQ IuUYMJ6XmUxY9pNJdgK0/DeS+q57ZVdCspJ3Secv5Fw
+-> ssh-ed25519 VfYKTQ iBIlLK7PoFKyEEDeV9jHyZkW4/6d935SnleQm+v4nRA
-H1yIuULwSsWWJPQbqKDAncafB1zpXmeK8KaKUXGW6/k
+5nLt0LpUMlKUQQ3k0Vmhh7LOVwqL8Njnh8DdJclgJFo
-> ssh-ed25519 uqg2jw bDliowKWbPn+/q7tXmUP+vkve77XAf8MXdW2Ocr2FUg
+-> ssh-ed25519 uqg2jw HSMBnKH/dQzBVz70QMWZd9Mu8YyxH6jD6Y0Lssg5eHY
-qxWWH79C6asxxj8kxC5BGEX3i7+VtxvDktDylv2QLF4
+bynRq6kyyvea/fJRWqK1Xd0wGvJNfqhNsb/2qH56Z5w
-> ssh-ed25519 a0HhMw awOxbTPWHhaRcPjgfJ8244DWV45cclQd7lTScRfLtyE
+-> ssh-ed25519 a0HhMw 8t2ud6Xy0vM5Ftq1drxe5LXAgNa1nfRuD5KqdIcl/Gk
-zG3p0u9swvkgFGXeO2H/+hDS0c0fCxLjFlLUrGs0x7Q
+BU43NnSXWAuHUHkISBQHjjrq+/I1qKoIimcjwIciORM
--- 4B+w7FvpNIqDEEUf5WuVmHcEQt72xSz0Rskdu0oeVu4
+--- aDOAtfQf2DQR6RXEol8OahHIirTvcLmNmm8sjFfvPqM
-}2<>跣ゲL;骰 <20><>ﾗｹ:rEfﾇqZ-<2D><>oにｱ拮p｡竓E冝s
+Øíø)íµ½-ìI’@è Ñ¥¥žLvíL’¼<7F>J÷¥ÍX°40Gpwòµ‚
--- a/secrets/nextcloud-admin-pwd.age
+++ b/secrets/nextcloud-admin-pwd.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 S1eK8A wNR1r1W6QRjbCFHU65hP9h13FPncahjcLGbg0LFUTDE
+-> ssh-ed25519 S1eK8A SLYczPUZqRYrleriTOkCeu3DgdV4ilrEUXAqWFjkvRA
-OgLAIgsVbhxaXziWXGFnV42r2HbWN7SnpLuKhF3VAyE
+lv1Vig2VmKbkMPKGiPy+ZxHuKaRfv/GuK9ONHo5B4og
-> ssh-ed25519 uqg2jw SVAHH7DSsv6mLPSAlz+FAQDEE68OlqeJJOJXHm8nAHg
+-> ssh-ed25519 uqg2jw Rdywaveq6J8lWcxfhqCjlZ5CcSFL7qRCy8yDuFQNZBk
-vsoQTMq7aSGPTvFQEGLq7dgSsfHVo/zK8Krf17Y/Hco
+SG/aFXYdTDz+IaBcwG7xJo9RxEfnqd/XFLOtGpG9c8E
-> ssh-ed25519 a0HhMw Ar5b7aPCNLvuNht9Xf3KmHs9sCgmNi+Wu5KDlXc7wyg
+-> ssh-ed25519 a0HhMw LxadKsY82WbTIdvE6/YMlZfl8VHSmyo4tVirUJLBnT4
-QgodtLxAO734nybwH2+x5iepC6dhZhINr5Avh6owEIk
+h4MkYYUxsPD9BXDmcYl+bBj0fAtOLqLpERYR6gZyV7U
--- HI73XWD5PxgImmP593GcpyZjvmH/q+gsKyBp+8C+L6c
+--- yxrfU/0/I9VtVfy2s0nF7TsdJDrpoEE0EJvJnwmMxxY
-¥ç¹/ÒX¡¯‡Ú“4<•"6<>²ŽiÏ¨·(<28>LË6jævúÿµÈpûà
+°é·è7ó€–9Hx³ÉkØ9Y!c*÷Bõ‘vü<76>ƒú-…ˆa}P§vV‚0Ù
--- a/secrets/nextcloud-secrets.age
+++ b/secrets/nextcloud-secrets.age
--- a/secrets/paperless-admin.age
+++ b/secrets/paperless-admin.age
@ -1,10 +1,10 @@
 age-encryption.org/v1
-> ssh-ed25519 4sgwqQ Fv4In/q0c7yvHvzjY9B8H+gkTUlbfANkg9J+u7r6jXw
+-> ssh-ed25519 4sgwqQ xkr5pu6VMhzLmGKNaz4peVcQGSu71vD84gnq3I/1YnA
-hqsZItiK7I3WNemhbgTMLLEkpNSeFg8PbgJCQ3EgYAU
+MhhTq7TzPVx3uI084xxpLhA64RECkDI6/3QedfcEVlc
-> ssh-ed25519 uqg2jw vP1D5g12VvPueSkdbGtw3+/7DAD+167EhwH9jPoZ/Sc
+-> ssh-ed25519 uqg2jw j+iVbEz9v9WVw4k6kjsFzR+t2nMreuwcUeEeIUjlbCA
-nwJFKunD4W0vIBYnl/Mrlh0uGCNwd5zq3KTMPGQEScE
+WfH8jplsEAmKgrzzv/kZ+W6ojV0ncKkq+fysfBK+gKo
-> ssh-ed25519 a0HhMw uA8/95mwCgqvS1yNpOV7GBhteKeVOBgZ5PBLA15aXHo
+-> ssh-ed25519 a0HhMw K5J7YHzRgEthlOYBif60y72H4Ultnw78thGBQKndpn4
-gr57aZkjsxwbg4lXoMM4XTQf/prk1a0ElCeW/CkeD2I
+VjbIOKDrZAklNTGejV+hQM4opGltgXvzTLclaTIwc3M
--- JoMZrIKxVcQAi/zAIxZJ8OhODrC8dpDkm3tmWMmgZWI
+--- Zjts/izzCaQppy63e2n2XV30K4C/Gpf9tadVqHUuVOM
-^:ì+áEcü‰
+齟賳>]燽BˊdEI僶
-†Š¥{ÉÒ<C389>é®¡œÎn<C38E>–Ì‚¬n= î©ÀEö4›t#ã¶”ÀrWÚ¨¹¨
+(馘"47V'O舌 6,剎瑒韦D鸩堦鯓胼涾Q<E6B6BE>
--- a/secrets/paperless-oauth2-client-secret.age
+++ b/secrets/paperless-oauth2-client-secret.age
--- a/secrets/scaleway-password.age
+++ b/secrets/scaleway-password.age
--- a/secrets/searx-prometheus-secret.age
+++ b/secrets/searx-prometheus-secret.age
@ -1,12 +1,12 @@
 age-encryption.org/v1
-> ssh-ed25519 BFt3Fg dO4m72p3TPSo0ujQaBPR774nQeaGr8VLNpofcdUcMAc
+-> ssh-ed25519 BFt3Fg F6/EawAbhimr7a1n7JPPg2h0P2tbMKr/C5OFLMauh3c
-9eDAuqY7THLwv63XYkAkcM/ioObb9aEVnFJxe+K/hVo
+RVbC5yiIVzxj0SvTZvYsBbxDZMQn4aM2SnNv5ZwYHX0
-> ssh-ed25519 xSWWeQ ATNh3qlDjVzzIS6bqo25SIotMCX+31ZlOaGxlcnx2y8
+-> ssh-ed25519 xSWWeQ 6w+bHj1+OMNrQwBPGSAU1i0T30U5aeKk+6U7BA5/ZkI
-HH4dx/XYO5NOR+WNAaiAWtuJMaL2z2ldvyTQhdsEYB0
+aSOZHmK9prcj8aA7wQc0hYeUPReqsgLmCcFQVdmiBaU
-> ssh-ed25519 uqg2jw SuYi5oAS7nzje4DNkB6QP4cQ5+xri0SQbjsZdT1rfkI
+-> ssh-ed25519 uqg2jw JlGj02+XTLsibH9C2yjII+GWRbhCP2Q8gy6rw3+NuSQ
-9v98AZgqk3vp+PwiEvgUHNxjQb0VYmrDVD7H3CrGXx0
+fzy/eebF3cCmg+er3nJ2bCZbVjyLFL/kYFr0USEwF60
-> ssh-ed25519 a0HhMw lor+1beas8UGrp9e5sIfP8adLr1FIE2KmzV7QC+oqg0
+-> ssh-ed25519 a0HhMw sVakh25ZVURPAgHAkF0HGkLrT2dnrGYkI5ENVazbpW4
-diFQhwfVLGk29c/xZQFaia/6389VwZEXeojtEyxyfKk
+ZB8AgAS3seGZ5GlpIMW+iIX9p4fJZPwy1ZlkJNFvHKE
--- B0IE5ReC3tKrf50gybHriRZJ7krBvHFh/WwbE6xACq0
+--- ZQI1k9iovFEQuhUVGlI5WRLhhlFUepbC+b8zWoIC35s
-’†ƒÿ°iŽ×ì§²ö¥]Ÿgax‚_Ÿ*°¼cš›±ÓP'·*Îše>™E–‘{Ñ›<C391>*&<26>àM7“Ïz¯ æN†²¿œC˜Í’Öëõ÷wžxF‚|È²Þ'¶—ŒÇ
+Ë>s•¬Ò`‘å{h
-ÿ‚î
+úÞy×ºpOÖ¶[Åt¶ÍPþ\4oÀìý´þ‹='×ä§¯Û¹ =G4{sŠÚòCVAìµ2¥†Ïà\×ûËcf¢¸<>êÝK|W¨/ægB
--- a/secrets/searx-secret.age
+++ b/secrets/searx-secret.age
--- a/secrets/shadowsocks-password.age
+++ b/secrets/shadowsocks-password.age
--- a/secrets/snmpd-config.age
+++ b/secrets/snmpd-config.age
@ -1,53 +1,55 @@
 age-encryption.org/v1
-> ssh-ed25519 X+zqAA 2vThvLII6gEEDC9wrDyvRbi8jcW9y/gp28WYZ4ItU2Q
+-> ssh-ed25519 X+zqAA FQCHs0T8EAP2hUf9tLDeX2tE40s1GtbYGoT78gjdbi0
-plVtphehlxRSBjdvWlTIk0IH0blwU8/4UKFVXsllh7o
+YACSCXh3jKV8Bb5tK4tP+WckzRcojaOdOGuWglr8afk
-> ssh-ed25519 1nWE1Q 8k9Xip/3wL5ZKcgVWDkFNzenXYvrOmX93mirRxDUIkk
+-> ssh-ed25519 1nWE1Q gPMZKuRXvOCSlFdgNdM/gdkQmBVEG/W3T9oXqZwfHDc
-8y6T63kv3GM8WyQrmzifrAjm9Cd4kmxxpVGwWiY/aaE
+Xsphjs8Aca6AwKOyZOO37X3YBCIlNoVDJk3PZ5WpDuU
-> ssh-ed25519 l7h2MQ hPw0fK/ExgCPDQbmGQz8a09F7jfbc340aRWlZ+n9h24
+-> ssh-ed25519 l7h2MQ +nxZ10Uk3k/BbqZ3EbuZ/tR5h2H2X8wsAvzNV8BW11c
-YbEx4xvLReuAynBYITcs+NUrnMx7z46WDR5BuiOiUlo
+NM5h3Y7gU0czLtlKobfIlqzrJbFX6Lqta5KmMYg7YPo
-> ssh-ed25519 BFt3Fg Ox46dCUMI+XxsqWCtIgDEOgX5b3NBWfQ41/sTyPsexM
+-> ssh-ed25519 BFt3Fg c5Cv3vHNu6pxkUNco2aP5Ctc7zp1F1ipUi73iPMKRkg
-hXMy1NltIlIK5nqNFXfqZfNgiXhN7DNpSFZNh78x/xE
+8ZPYBYU0WoASStTnZYjXwfojTioNesuGZJtbK+brAU0
-> ssh-ed25519 hhnUMw JtFDAxCx9NEM8I+xKKWMaTpmaRblb5Dmp8aDxipgPGM
+-> ssh-ed25519 hhnUMw /PpGfRTeOGNONTsNLzQvAf3Bn0ZR1AAHOBpPHtrOvlI
-+XOULPlgszCSedMrn+vYYiFvc6DG+KvR9GU1D+E5A6Y
+nAcKBo0bhOG69y7Tn7BoaUlTyursWnyYLFSHuX/O/qg
-> ssh-ed25519 Gwwkag MCtZ17ZNKtzKKGozKAh4ir6ULpYWVqDp/KeX4iX9ZmE
+-> ssh-ed25519 Gwwkag Sx/B9JET5uvxncX3T0r5C7rx2d4nF1daqVckYEoeBT4
-XjaGPvb77UqIDr7IEt8ygaLEHWQKcz/OVDTNQqCOzvo
+AmqiO4X8lSFQiKB5PZ7sL+JGKmT6wR3WsnYk+//yb/0
-> ssh-ed25519 qaHa5g 51YhJFtEzL506DbW2LwqNoDiO23VClZanXZzHr0ruUY
+-> ssh-ed25519 qaHa5g LQnAwaVHmYtnI4cd1C0NX1/gw6WKoe0DQ/sNZYmnl1s
-U+v5EFCrs+izNQ7C4SHvz7ijyo52WnvLJ7XcR/L8xGM
+u3jOJuLSeWRna6HgrUqhGwnmAQk9lH9BieQlGnDqfFw
-> ssh-ed25519 FG6Lew 6N4hGvqP5mxr1m4NzntkvyonIuJ1xkJOpNHgTpOSimY
+-> ssh-ed25519 FG6Lew rinxgTMeVxAlXgs2rta2TtDlIpAdaZgcVacKSlb7n2U
-eg1Ao9GSGfzHOTgWnigu+ekgocSj6TPmN+ToJjZCD+8
+dY8tlgJIT0Dm3LpFce4q113/13EL0l+vbOBzjAyw/U4
-> ssh-ed25519 UCdOEA W+eqV8ue2xUmlFnLcXq8RjJFaMzsk8M5hSPv6J+J3ks
+-> ssh-ed25519 UCdOEA 7kFtygb37wDBg2WPsNjFYm3A+fF+n9mYBV2iW4zlbS0
-VrxmK7m8V8Ib+9kIerxzISzfRBu9fAK1f3ndKyinydY
+ZoTtPuOdCv3VXCpvu6McMxF8sf1GRFFgyUD1PRMkyfU
-> ssh-ed25519 aichPw DEZZu3JTAUPZVLnupuuXwHGaKTIzV/aNGJTmGTeBHB8
+-> ssh-ed25519 aichPw hcDkxK6qaQFxhKh8yoUJ1gMoTCbNzn709ihkNNQdfV0
-+zsdKaEnufTJ+6P30xzVXE6ZxVHA+vaeZr2wgrgwthI
+mone5DsX0iSq7GhIyLbi32rRZ1nhToePQ9t2fL3FTVU
-> ssh-ed25519 PCrpYA gHGGNjL/KCxZY7y2inR5Qugo7XrmtTv8DEAZqZ2gYAM
+-> ssh-ed25519 PCrpYA H6778K5GaQH3XxSxp2+ESPo/QBKo9tjMAh23BVufb2Q
-2FeCEctBgRK9XHGt8krPlZrMk3Arb0OCpK3MohqCLJQ
+3oSStQg6c5RgOlAv/dxpNM0C6LE10vc7h8fZ2Fh5u3A
-> ssh-ed25519 kElbzA J3o3iwCTuhl19qIzn4YBvWmI3YnhdU8xo8nMV/ieEFI
+-> ssh-ed25519 kElbzA Klgd4TXTgP4sx28+egmqfFSgov5zioB/VXn8j08ENBo
-xaopAZWvpzBbRgVvJ/3kDB9Jwwci6V6wj4eJCb5dP0Q
+b5cATDxnii6rnePhAWSzSi2ZN7Mvnm8lz81I4BE5GzA
-> ssh-ed25519 Ux2oFg SiDlMC9exm6qsRt9RP5cq4o0KzBT5juRVFokRJIBLDI
+-> ssh-ed25519 Ux2oFg 9o2o7w3sjVX4cUk/2HilMb1dqULTKdNUWAyV4XJgQh8
-leTJar9b3XjjbYEOo1cKTJo2c0nso8x59oib8s7rJ1A
+CPePcOOfB7pvyCaTzvDLI1MYbQd1/j4TAxqJh58bvu0
-> ssh-ed25519 EO5ObA hPMWpbOEIJQIDjjDMuT0CGxsAQJrC25GloE2TFOwqDA
+-> ssh-ed25519 EO5ObA hYEBny5R609wJJ3vQYW4H3N9BwoWiZMcrLCh1++R/DQ
-/CQPZTXPjdkpd98ZGeLpVqHxK4ylQ0aV1Ed5Q45JhC8
+QMsdD1yxA6sbDupKWI90lg8p6fuuqCJtVUrLCQzxb0w
-> ssh-ed25519 cQlmdQ NS2wklZU0GTnAWIYKMlFABdgQ8/HJIz9hcZHcF4b02A
+-> ssh-ed25519 cAd/ww lxOIYnkketFdAPvZ0Pv8hY3Rs7j5hq521UbOf04dXgE
-iD3QaSTsicCdgR2u76iGdvuUO3D5iNQiZxecNeb+sp8
+BTkgC8x4tSe4WI62o4uMjQCpohyE3CWGIzKPQRIX6M
-> ssh-ed25519 xSWWeQ /NSwaPhPLz45qmFN0/4Tdt4f7Lj0mFdAizaS2AfPklI
+-> ssh-ed25519 cQlmdQ sRmb2ReuzmS2z/wWSdgX7lyXJKH8m+QIO2SXptJezRw
-OhiPkOrNUEAI4uhV7jnExdk72WH8kdSypgtlTBhEt4I
+OREVsF2Gw1cnikMA4n9xCzaBBf7IQ5LLRN98Lk8qFz8
-> ssh-ed25519 svET/w JjYlKSmULA8iSIzkfORfT1Iw39YUz6aD6n/fdEOIcy8
+-> ssh-ed25519 xSWWeQ wT+h+BtBKxbvIK50AYKIZsN4W+8BTjWYh6aoYcnHU20
-tOHWeR3cvgW2G+81Z1iGMKgM17cE3RV4l5cMp2ZgUjA
+xHlo0Su0XOybyDm6FaLb3LhE3mwSlE8QbjhM362GwvA
-> ssh-ed25519 S1eK8A 5OLjU6WoQyCS6DC5e/01FlltugQffbE6I/H+8r8i+Vo
+-> ssh-ed25519 svET/w vX4d9EcNu/OLZwvwiC60edVXWtuIxkLRJMlVhdK99UE
-I2hzqE4m90MqM3LTA/PUCQfy/h04Tho+x6xyEvEg344
+9rF9Uy42qom/u3xaB0JqI+13/IoWzKg53y8EVnr0ydg
-> ssh-ed25519 4sgwqQ 1x7GD4274q4dA7RO972p6WQgifmSNp+pP+Ux2kvDh2Q
+-> ssh-ed25519 S1eK8A WKSCTSGoS4vWKtFwndo6ZQ9Sb2xfkevEu4OCErw2VBk
-1ruiBSg/+eyX4HI9xwSCBygozZrC84L/Y4zLXiUoyjQ
+gdt1269KQ4uXO7v6CoK8Svdq80vNVgjtxyzGzLhC6yM
-> ssh-ed25519 CuqlhA 3qkQnta+Ka/C9Ds5E1lXlerqmAOqCzOxUCGOcron5TM
+-> ssh-ed25519 4sgwqQ KQTRs89EuvU7ev8vRBcHhBMr4AW8xIN9VfOj23arY3Q
-2pOW+fCYHJZwNlhw7lAmJHPRz0RAKYOSYX1DxGhkI8o
+aLD5fodRaxW+eK2xZ2eU9Pj1O6dfaycFcf26jRwySM0
-> ssh-ed25519 HvFEmA fV1/rEMdoUkJ1w+Y1LsDZTHsPbFr1N5MqVVMEUUupHk
+-> ssh-ed25519 CuqlhA TNL0N6g0I9fUDZ+/g1L6r1aoKTMcBjb1dKucbLIu9xU
-bror9RUtx4fWkSK3KbHtSKqP1uFF8vrANTT1pdVL3V0
+U2WqvcLwjCogxjl97nOibpfygQaohQTbrMZQbIixDxc
-> ssh-ed25519 9GYwCg 8NfYUqopF/2YEYwJtnCuD5bsXxteIT9h2mN+wlFuKlA
+-> ssh-ed25519 HvFEmA vQOEbX7IRv+No/juKDDVV/BEv0FveMwDbtCmYbcDzH0
-jb8JXKsn8NPOv1i02ooUXHO4VpYxr58A++K/6Aw+Vzs
+ep7aXbmp9fQrif7CJUJ5DfQ3GmsM8J+dRGF7djaE+84
-> ssh-ed25519 VfYKTQ 4ynHge98NPmnOxahl1OsWXLGyLR4UrDlXlbIK5TDBDE
+-> ssh-ed25519 9GYwCg C8HaxDQGZeRJpVVeY5q2goe3tTIIuCrszFtBQlk88Fs
-dqucO5Fhdo7h6Zu1owPoVxoHZ6I4s8/7I7whsT+bLsk
+PsVgRYvg7tYo4I04Bpe7V9SP034xBkjd5Yn2pDE/ufY
-> ssh-ed25519 uqg2jw 1kM9t8TihvELeOBEeGm3YBaHQhaDgP2qsr1lTaqqGmI
+-> ssh-ed25519 VfYKTQ UQmOB982w1HRy+XNGBdFSBJ2R3DciHJKO4xXUow0fiI
-+3OnNSEVN5JlTFiYn0q0F60VDb19GYvQwVza/8kZpYU
+XEstbHNMwpBFja98cE7v3nMDfmeNDT8vH/jSMYID5Ds
-> ssh-ed25519 a0HhMw MCS+vUtkuaXkO0GQMngs9+xvcsacBwF8BD534H/zAHI
+-> ssh-ed25519 uqg2jw CsEs1935QufPVleML0uYmktVz0EaAJQiuB7ughTJH3U
-D6aZZBz7ZOUOTJ8GVEv0xhLxovxoHFpRxxesMDu57Tc
+Jx8FAqW8jyAzgP10Qiw0oe2gbsAJedPPqbA/KPSGP9k
--- UdKGDgN1b7SHqxZ9Z4hyd49Kmhj6axbph5NoxHeq1/E
+-> ssh-ed25519 a0HhMw 24GQsNlNGohVARm8M9eOdNy4+8VoTjX/glRm26xPiUA
-ä|ì#†fö7ÇÇCîïY<C3AF>²<2‹ÄQÍ<51>-ó]Fmi7‘åèRM.Gù
f\§Ñib`äqØ\ñh¤;RI
+w4Uq7M/+OnPkZTKaAdPTOc4m9CzKXTDi4M1EN+Dq4io
 --- uIOSaVHqwKl7TMll+CteaKkYuErWA4Pev4t/M0aRGFw
 fj“¦°ÝËFSØ'õn,_€Îü?Bé¢âÓÅj&ŽÉ(8zÅêÝ—ôf<C3B4>ÌbEŽ\i“IjüéÂ>µÕ®@
--- a/secrets/tailscale-authKey.age
+++ b/secrets/tailscale-authKey.age
@ -1,19 +1,19 @@
 age-encryption.org/v1
-> ssh-ed25519 1nWE1Q TDFR2vWKm5mAYqFV6/4IzdPxrNQiFC47beqj2Oy9pHE
+-> ssh-ed25519 1nWE1Q dnV+tTHuYBGlWVacrrupLx6nC9lxnKWjvEjYST6ITW0
-qfg3bxid37VY7k1vN8mWAmN6RMS4tz3Otr84RvJ3yrs
+w0D6p5Br67Vpq8wTG6Ixvx6YeoiJebKcRkA0G3bA62Q
-> ssh-ed25519 l7h2MQ kBt0MKPm005hkAx5YfXio+KZQ2zryn6yLtbpAS2q7x0
+-> ssh-ed25519 l7h2MQ jfoPo9+uHciQSiGQABLrs6G6Lj0hi/r7yGf9Hczk3Ts
-7IKuPy3WfxaAUpmUItwYtRy0srh6iE3lCNHOJ0chDRg
+LmNuvdDbT+biVd/Lhgk8C+71q/Jkk5gM0AN0jFOML68
-> ssh-ed25519 BFt3Fg 6cOYxtU+QGZZmI8dVLtqaUG7rtv0AF8iCc16tXYExWk
+-> ssh-ed25519 BFt3Fg q8VCPH5QsSK0nwhGkwYse09pXnm4PNLmlSLxmo2SO0s
-DUBFvMiUnAc5c2EiYz+v3S0tgMC0wHqQEhWz0KPYLXI
+AimD7VvI2az/LrKK+XdSw9vyrvX0kakap3IJcRWm7L4
-> ssh-ed25519 cQlmdQ tU0qUk25d0dCZr1qaorz8tNI0F9u7X1OxVAMV4qnjTI
+-> ssh-ed25519 cQlmdQ GL3PYntDndm/Hz52/5PUdy9QIPQ1RN70bYiEgsja4VM
-1jDk+H72dIpomtswsa7JEt+owUJXJ9t6LpeF10cEQds
+svfKWIqt70fI+dcUKAD2A7Nzk/FsW4docmgfN/5nZTI
-> ssh-ed25519 xSWWeQ DnkIRBleGpfZwDDP3ZGNIuJ5RCne1SutdO30KRlG+0U
+-> ssh-ed25519 xSWWeQ D4llIPk0SgVTidpNpEalcby7E7ge9qgTu6Z3YCUp+lc
-qP8+YTj1pQZcsqsDkJM9fJejhHCIwF3ivzrhqifjDCI
+zvvLXzefNpkpY3h/0PvQ49l4KwxS55E6TouLKIJ6plg
-> ssh-ed25519 HvFEmA AqoLtmdsmRRaCCPcFi4tuOL0XfR7BdolGDMjYQZlQFA
+-> ssh-ed25519 HvFEmA Fg62KZl/rcxyjCU+6XvX6L0AAcnNPLnvcXquKyH5ITw
-yY7wNEh/IqAa4J8odKiEi4C01jeh9NHIXJ2DdLOoL2k
+QOewwklOzkP/0Kh7Kejso5DgCLZzXv4h7M5ud7dD5m4
-> ssh-ed25519 uqg2jw QPTNwwhDXcUe6SmnjhLo/ArMos8mVsqXMnB0BgD5L00
+-> ssh-ed25519 uqg2jw cpr/5R+aWdsxojQRC2+wjiUF8WXimZdYAtHbjoNnenk
-aB8dgGg4/f/xUibwIeiAjA5jJrv9z1I97yhDhtBOLPI
+6SNhMqfMDOsq9+TezwJsEG6us4asANGY/HcMghPVUto
-> ssh-ed25519 a0HhMw BWuOKdRZtOLvHp6tV+QLSbrQLO6JDSlYjpos6YCoPXs
+-> ssh-ed25519 a0HhMw j0TlrE/oqDPdnq18TOHObStMlCLei3JAtQUHNtjM0g0
-rMEonUxmiK/IngvpsUh6WmzBSuXD5SMeBKKPTPEuS6g
+mSvdKEugQ00QMyT3ZNehX7KL7EuhTvXMLdOIA/OTlvk
--- HxIEASYtjEzPutA+7Kbd58zXBU3E3k2oy2PpnvXjHFM
+--- vt4XbhxYnnUGFRRjWJhTIdcURyowmL8P4QHYJW4r/Qw
-ƒA½P|?æã<C3A6>«U¦_â|Ê’*·Üš×4îXBOß‚j
hÔãGR¡¢znÑñ™!4b‹qÂ’lNº¨×>åÏ03jl[ì‹üfËÓ@>vH<þZf¹†êö½
+zm—N‚u•V}ÚÒãëÇáYF	sócüNWªÝ¦<C39D>Æë—å;×våç@×KÕ;=—ç÷íi^ãÀ¿«š1Ï<õqÉ×áÞI«÷,xùä/3Ô•·½šK²8CðZ
--- a/secrets/vaultwarden-admin-pwd.age
+++ b/secrets/vaultwarden-admin-pwd.age
--- a/secrets/watchtower-secrets.age
+++ b/secrets/watchtower-secrets.age
@ -1,9 +1,10 @@
 age-encryption.org/v1
-> ssh-ed25519 UCdOEA s0VRkGSGQisQ+TeOG5W9umxy1yJUeDw4slLB3NT/HR0
+-> ssh-ed25519 UCdOEA 7kUF5gYfwDuqyCB7WGAaHDtMyU11SSXsLCr4TH18QBw
-OmLGE0sRRENGUmuDbWoWVSQJ7hvkXBF/EHcLXKLT5QE
+/NTNm0/H7owUzOzjAn2TeXkyzkikrZATTspNYXq17E8
-> ssh-ed25519 uqg2jw 00WGzss9nmdYEaW7i375nTCvGFhZXaJFVZ6lv2cmaFU
+-> ssh-ed25519 uqg2jw CdnZOR9S8MXR2mqXchVS3nKVjOftXLiu2C4t2v45zCU
-0u0pz9AwW7Xst+wc+JddSR6IaB4/FPfaLbPhrRM3BFU
+YyC/z2P9FEOVdBoDL2XJBjl/BiitLcMUZhE8bLx9580
-> ssh-ed25519 a0HhMw Jwk7L2pH4wWw/KUFUgmQrTopPm/vLH+Qo14W8ULMnlQ
+-> ssh-ed25519 a0HhMw 9og3k1diCfXcXvxHwShsk+Lk3gAwJd427PUXAKlVlFs
-E3qzJRrcXrRCOJEdEfiXE0vfJX3SaHx43s2ge9QAin8
+UkVUCTKRX44VgbwpF5Wmb0X1Z7QXQShPU912iJMuRXI
--- gt8qncg+WRrBOkEYbrzC9pMipfW6oteoE9LlMrx82aw
+--- 0Ihq28cdudljq8G0Pzz5UYsmdtDp8HFOLeOkhi+uZG8
-éÍ‹½½k÷y4<pVnÂI´ÍÄuÃD9=ÿÞÑ,É…Ð]µK-ìÐÃÇmÚê±TF<Î"jk>î3Ó›T˜	¢Iy•s8€Öá[ìˆGo…@$åä’¶‚0˜ÞÂ,i{‚3ƒ.NñåŸ<C3A5>†–{³Ø<C2B3>dÈÎ^WŽÒWÜ•2ExM:ÚÎ¥8Ü–¡ÝgIºW½MºG
+A¦ð—9¤ÓòF<08>?FÀžQð—Cø6}P°-ìkEÉ<17>—Uáè
 ƒDÀË]½[n 2å<>;^´™L·!Í<>Šæ™#A&÷¯i³“(ð=»Âô"tÇÔ\etá£ÅPyû~Qr ‘ÐÝ¶J€n@–'-æ‡<C3A6>QÕáùÒÝÝ‰¤ÕYX=4qC³gÊ?eç2”×4r\<5C>
--- a/secrets/zigbee2mqtt-password.age
+++ b/secrets/zigbee2mqtt-password.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 VfYKTQ NlypNUJ37RmNppt+vQevZSu3IpVA4loSXM3ZzWilBVM
+-> ssh-ed25519 VfYKTQ rj8r8SgtfaT6Y8/wYthrXnVZmG26ZCQgJOXjmxk9BTI
-YxD0+1QGh871/zqd6yz2Td5w0k4wuQ4FJrAx72T13rs
+0O1yTMrCEixW+16U+elz9suzuf06Lj6alB2RtvnjbDg
-> ssh-ed25519 uqg2jw Ot2C0+7n0TImRN9hKfHvPyTKAhQULb/vxd0A+0VIHDg
+-> ssh-ed25519 uqg2jw Tay074GjHU3oryfzmrzfZHynJhEswdxWqVs66k6QI14
-npr4YsrnFXEbTkS2s4XGpqDFVl3zRKtU+8MiWgd21Ew
+/di2a9KdCh3mwF/p84OaYoQDNJEW6YxCFO1cpBAasCA
-> ssh-ed25519 a0HhMw YGk4ewWdNx+/6CgIphl+naZhf026F3vj9BbT3UrGD10
+-> ssh-ed25519 a0HhMw lIKY/1KBTUmvOFVaSfa5+TDZqGB5m5/saXnf6ZppAR8
-Q8bMguDcKzZorDoVkqCCxSy5Lh8aVgKxNwVoLAm1OQQ
+jnI1+mc3pravkwia2s2VW0JwBpBN1X/b8i12iE2YSQo
--- gtoAJ6S1idQ70lHQjqLoUidXmD4XOBTsZEQuENoG7BQ
+--- LJVNeKEZEtb8WgqKz6Zxx1LnffBnlOYoN6rm379mbtc
-g嵂<EFBFBD>Aﾅ貨ｦGeエNs掫獸磔ﾎ6ｪuzwｼﾐwﾘ+&b『Eo6Nh<4E>ﾎ叺ﾑ堝毫耐`ﾜmgﾒC!0ﾊ<30>AﾖⅦO
+±ä@!Š<>>nYÕHæª~àª†’*Sø7|œJò°ôíeq·3wÄ¤Q¾®tW¥GØ&º*5„•·`‚Ê¸×‚ª[1HŠix1+p-
--- a/ssh-keys.nix
+++ b/ssh-keys.nix
@ -30,6 +30,7 @@ rec {
    colmena = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOVg0/MhkyTsZBITT0nZvH0hWskPJ7lyC5Mw70duczq";
    collabora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSaXqZ+gqkbRJxsHRvCXw9U2Zip8YlPjbEIgPEzevO3";
    actual-budget = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICsvkaeZeTXtowXFcKmtx3ElzNXU4cW4Ti6pR2BBfPFk";
    karakeep = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBdfWilvVln+IVIDKmizUja/6reiFqKvV30z+Mc/gaJn";
  };
  # Machines able to provisioning other machines