From 9d623b94e1f808e6efbbf972e0bf5f0992f54839 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Thu, 26 Mar 2026 22:41:11 +0100
Subject: [PATCH 1/3] Add service ActualBudget

---
 hosts/actual/default.nix                |  42 ++++++++++++++
 hosts/caddy/default.nix                 |   6 ++
 hosts/hosts.nix                         |  10 ++++
 hosts/parameters.nix                    |   1 +
 modules/services/actual.nix             |  70 ++++++++++++++++++++++++
 modules/services/default.nix            |   1 +
 secrets.nix                             |   1 +
 secrets/actual-openid-client-secret.age | Bin 0 -> 561 bytes
 ssh-keys.nix                            |   1 +
 9 files changed, 132 insertions(+)
 create mode 100644 hosts/actual/default.nix
 create mode 100644 modules/services/actual.nix
 create mode 100644 secrets/actual-openid-client-secret.age

diff --git a/hosts/actual/default.nix b/hosts/actual/default.nix
new file mode 100644
index 0000000..3b0a2e5
--- /dev/null
+++ b/hosts/actual/default.nix
@@ -0,0 +1,42 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+let
+  p = import ../parameters.nix;
+in
+{
+
+  age.secrets = {
+    actual-openid-client-secret = {
+      file = ../../secrets/actual-openid-client-secret.age;
+    };
+  };
+
+  my = {
+    utils = {
+      commons.enable = true;
+      lxc-standard.enable = true;
+    };
+
+    services.actual = {
+      enable = true;
+      settings = {
+        openId = {
+          discoveryURL = "https://auth.${p.domains.public}/application/o/actual/.well-known/openid-configuration";
+          client_id = "PVOPLIfXxUiXT5ydn9QR7ht6XAoSJVMhwR5Kbt0I";
+          client_secret._secret = config.age.secrets.actual-openid-client-secret.path;
+          server_hostname = "https://actual.${p.domains.public}";
+          authMethod = "openid";
+        };
+      };
+    };
+
+    virtualisation.proxmox.enable = true;
+  };
+
+  environment.systemPackages = with pkgs; [ ];
+
+  system.stateVersion = "25.11";
+}
diff --git a/hosts/caddy/default.nix b/hosts/caddy/default.nix
index 1fe826d..bb831ff 100644
--- a/hosts/caddy/default.nix
+++ b/hosts/caddy/default.nix
@@ -98,6 +98,12 @@ in
         host = p.hosts.paperless;
       };
 
+      actual.proxy = {
+        enable = true;
+        domain = p.domains.public;
+        host = p.hosts.actual;
+      };
+
       searx = {
         enable = true;
         secretFile = config.age.secrets.searx-secret.path;
diff --git a/hosts/hosts.nix b/hosts/hosts.nix
index 98e776b..9d21097 100644
--- a/hosts/hosts.nix
+++ b/hosts/hosts.nix
@@ -1,6 +1,15 @@
 # Single source of truth for all host definitions
 # Each host specifies its module path, deployment tags, and optional flags
 {
+  actual = {
+    module = ./actual;
+    tags = [
+      "lxc"
+      "bacco"
+      "actual"
+    ];
+  };
+
   arr = {
     module = ./arr;
     tags = [
@@ -34,6 +43,7 @@
       "immich"
       "firefly-iii"
       "paperless"
+      "actual"
     ];
   };
 
diff --git a/hosts/parameters.nix b/hosts/parameters.nix
index d55fccf..4c73a86 100644
--- a/hosts/parameters.nix
+++ b/hosts/parameters.nix
@@ -35,6 +35,7 @@ in
     ilpost-podcast = "ilpost-podcast.${private-domain}";
     librenms = "librenms.${private-domain}";
     collabora = "collabora.${private-domain}";
+    actual = "actual-budget.${private-domain}";
   };
   personal = {
     username = "pazpi";
diff --git a/modules/services/actual.nix b/modules/services/actual.nix
new file mode 100644
index 0000000..6396397
--- /dev/null
+++ b/modules/services/actual.nix
@@ -0,0 +1,70 @@
+{
+  lib,
+  config,
+  ...
+}:
+let
+  cfg = config.my.services.actual;
+in
+{
+
+  options.my.services.actual = {
+    enable = lib.mkEnableOption "Actual Budget server (services.actual)";
+
+    settings = lib.mkOption {
+      default = { };
+      description = ''
+        Merged into services.actual.settings. Use `._secret` for file-backed
+        values per upstream Actual / NixOS module docs.
+      '';
+    };
+
+    proxy = {
+      enable = lib.mkEnableOption "Set the Caddy reverse proxy entry for this service";
+
+      domain = lib.mkOption {
+        default = "example.com";
+        type = lib.types.str;
+        description = ''
+          The domain where Caddy is reachable
+        '';
+      };
+
+      subdomain = lib.mkOption {
+        default = "budget";
+        type = lib.types.str;
+        description = ''
+          Subdomain for Actual Budget
+        '';
+      };
+
+      host = lib.mkOption {
+        default = "localhost";
+        type = lib.types.str;
+        description = ''
+          Hostname where Actual is listening
+        '';
+      };
+
+    };
+  };
+
+  config = lib.mkMerge [
+    (lib.mkIf cfg.enable {
+      services.actual = {
+        enable = true;
+        openFirewall = true;
+        settings = cfg.settings;
+      };
+    })
+
+    (lib.mkIf cfg.proxy.enable {
+      services.caddy = with cfg.proxy; {
+        virtualHosts."${subdomain}.${domain}".extraConfig = ''
+          reverse_proxy http://${host}:${toString config.services.actual.settings.port}
+          import cloudflare_${domain}
+        '';
+      };
+    })
+  ];
+}
diff --git a/modules/services/default.nix b/modules/services/default.nix
index 53984e0..4bab929 100644
--- a/modules/services/default.nix
+++ b/modules/services/default.nix
@@ -1,5 +1,6 @@
 {
   imports = [
+    ./actual.nix
     ./authentik.nix
     ./dashy.nix
     ./firefly-iii.nix
diff --git a/secrets.nix b/secrets.nix
index 4a01d50..1868a3e 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -24,6 +24,7 @@ let
     firefly-iii-app-key = [ machines.firefly-iii ];
     paperless-admin = [ machines.paperless ];
     paperless-oauth2-client-secret = [ machines.paperless ];
+    actual-openid-client-secret = [ machines.actual-budget ];
     zigbee2mqtt-password = [ machines.zigbee2mqtt ];
     mqtt-password = [ machines.zigbee2mqtt ];
     scaleway-password = [
diff --git a/secrets/actual-openid-client-secret.age b/secrets/actual-openid-client-secret.age
new file mode 100644
index 0000000000000000000000000000000000000000..04eb2d50dfe31bbb31ba72255857966cc0af879e
GIT binary patch
literal 561
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCTS(5@<UbW|ucsxnJ9
z3r>kjDot@Ub9FW;skC%7b@EL%O|3Lfa`O(&3-`}WOE&U}DCf#eGYWStGEA&8%Zc(U
zDk-z@$;$|Fb~g_853Wou_AKzJtc*(W%}C33Oh>n^v@qQ$t6ag^w<=TH#j`lIGBYS8
z#igPwGAy;QveeKyF(@;_pvtW{&@t3G%hTD|$(1X#z{J4ZBgi=0E6pn+GqNNiEH%?I
zC(%$pMLVRxxX`&cur#eQv9KUAzyjU2L<5fu-*N>vpW-5a|1hu8oNTZBNOOan(h~C&
zqr7m_;*1Il59i1blgLu%jMTh{h-|LN(kh?gLTB$XUz0*F!@!6vOJ^s?fDBJ}%OLY8
z-^9X#Jn!Ptv{0YmjASldU0nt5a+gf6L_fcRlFCGVXG@nf|IqN1DzEY~zqBxCM-$)T
z;;e%3(kyNF3InbM`BHDHmPdvy-EWrjH+4hpi#>d%Reu?lZP)Fadhoko{C#dGGs%ly
zvw3pA`xPp;)c;?}A0WW9aaX+fhIf~$yL8JI#9jWiV8Y#;>-+nc+!N2fAr!Km?S1S)
z(GT~otvzh}D3twY2Sdx#%O?+;@gJ+~kC063FUcxU?PxDxnkATIU-Mk+7`NrlqHTrE
c&x*1?+6#V(YW9nN@;NA}c)_okZ$hGa0D0`xjQ{`u

literal 0
HcmV?d00001

diff --git a/ssh-keys.nix b/ssh-keys.nix
index 79570df..9663480 100644
--- a/ssh-keys.nix
+++ b/ssh-keys.nix
@@ -29,6 +29,7 @@ rec {
     ilpost-podcast = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHo3tGrspZlSVbC1X/MHFFwDGj8G8+ZrZihU28DkbJEh";
     colmena = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOVg0/MhkyTsZBITT0nZvH0hWskPJ7lyC5Mw70duczq";
     collabora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSaXqZ+gqkbRJxsHRvCXw9U2Zip8YlPjbEIgPEzevO3";
+    actual-budget = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICsvkaeZeTXtowXFcKmtx3ElzNXU4cW4Ti6pR2BBfPFk";
   };
 
   # Machines able to provisioning other machines

From 5ab738b231a9c4ca2c3918e715df39c1374b0add Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Thu, 26 Mar 2026 22:45:30 +0100
Subject: [PATCH 2/3] Rekey for new host (actual budget)

---
 secrets/actual-openid-client-secret.age    | Bin 561 -> 561 bytes
 secrets/arr-secrets.age                    | Bin 759 -> 759 bytes
 secrets/authentik-env.age                  | Bin 644 -> 644 bytes
 secrets/cloudflare-pasetto-apiKey.age      | Bin 560 -> 560 bytes
 secrets/dns01-admin-password.age           |  16 ++--
 secrets/dns02-admin-password.age           |  16 ++--
 secrets/exportarr-secrets.age              |  17 ++--
 secrets/firefly-iii-app-key.age            |  17 ++--
 secrets/forgejo-runner-token.age           |  16 ++--
 secrets/grafana-admin-pwd.age              |  16 ++--
 secrets/grafana-secret-auth.age            | Bin 561 -> 561 bytes
 secrets/mqtt-password.age                  |  17 ++--
 secrets/nextcloud-admin-pwd.age            |  16 ++--
 secrets/nextcloud-secrets.age              |  18 ++--
 secrets/paperless-admin.age                |  17 ++--
 secrets/paperless-oauth2-client-secret.age |  19 ++--
 secrets/scaleway-password.age              | Bin 579 -> 579 bytes
 secrets/searx-prometheus-secret.age        | Bin 607 -> 607 bytes
 secrets/searx-secret.age                   | Bin 594 -> 594 bytes
 secrets/shadowsocks-password.age           | Bin 497 -> 497 bytes
 secrets/snmpd-config.age                   | 104 ++++++++++-----------
 secrets/tailscale-authKey.age              | Bin 1044 -> 1044 bytes
 secrets/vaultwarden-admin-pwd.age          | Bin 665 -> 665 bytes
 secrets/watchtower-secrets.age             |  16 ++--
 secrets/zigbee2mqtt-password.age           |  16 ++--
 25 files changed, 158 insertions(+), 163 deletions(-)

diff --git a/secrets/actual-openid-client-secret.age b/secrets/actual-openid-client-secret.age
index 04eb2d50dfe31bbb31ba72255857966cc0af879e..f431e4be80d777fe2757fc469f82498bf48581ff 100644
GIT binary patch
delta 508
zcmdnUvXNziPJNa|Riul4npa3}m2-NaS45SOab${LwyULwnXzYbc|}fTQI&IrX>nnm
zBUie)bE3PEzDub`mTP2iPC-CwR7s#mN_b{kmcMsKzQ2K!lV3@xV`X7MB$uw8LUD11
zZfc5=si~o*LTO>TQC7Kvdq#dvQIbn>m42juR%w;KiJOyCQAuWCrIC}PrCC^Uq`7`%
zNUm#2QfZYVm%BlpQCLo1kfWDZrB`HLTA+DWs-H)QQ)IE3Po!&ANMg8GfpMlml6PtH
z#E;_jxut~xM#YBurbaobz7?K^`WeP)ZZ5$^MkN*@CO-adCgv_#6*(auVJ@Lu<;gxt
zZiVSS!3G7sfnJVPCS^%!6?stwVUFqH+9u%@8KuVMWw}xMX(5qZy1KdwUirq!`em8U
zxn3pi9?8zRMcI~Kh5@O8PTm%lfraKF-X4|pf!+}jg-*`dT)Pe4&R%)?#+(IHLN|2J
z&o^3fpkczPyPK}$Onnq_QQ^$O`!=?Bij~x!wO(Mmbk~6E_#*xo>54lQhI*f+b#nS_
zSLfRtP}8~YFzIp92kC1zyCoJC-TRX!k+JWwigr1VL9P3|Pj7E`{rGa$MXNCA#QR%`
z6>MSQ+E26%mQLm``Em7Gn(}sWMTM*JZIRc-5|`B1`INl<a&DV)`_s&;e4UI;ebcp{
F0RZP(#V`N>

delta 508
zcmdnUvXNziPJO9Sm07Y`a7t8CX^N|vtFuW-rKO{(lW($VYNdISn|EklxPNY1vXM_j
zIah9)QMhZ7VPch8PLy9!NtuODUPg$syK%68aAk6_XMs;;WmJl9Mq0LGI+w1ULUD11
zZfc5=si~o*LTO>TQC7Kvvu{<Vwu@(RYGr0nN{UNGnOkI7YGGxmp>twTW`seNTXCRc
zsB@O5v$2yaS7?EWfw@PJakf{QS43uHNkmv`re#i|p?->XNP%&ob8%p4T4iEkL1ci%
z#E;_jZa&3D{{CTJr8(JN`H|)ZIi)4$DMoqWro|Z*79P%#AtsTf&KaqB5fRy3k)>5W
z#f8q^WxghbUWS1YS(eUDjsY2-?v_F3QND?V1$o}ZrD>r)!5PV1y1Kdw-sLWtUWtBw
z1tpb<`p%XvY5t+%DOFzOWqxU4&W<L&#l>0m1>vPx+U^wwTnqB0-c&7*3|qS2Eaz|P
zhT0c<_)M$*GA!G!+c)*#cft7k+)iea7rkcl<bL-nRBoyNzmh*dfM?^bc<~MIE>(Bw
zmMw_8{A<C4yE)hQ_b<68o_#|oWINmY*n^@U?p<4Z*!EE<`_B%BmZz6b9ya4YR@omR
znbu#DRiLff(O$qbOEAg4=DF4}Zp)oT+X|bX6=i?47yJ^{>=*y!b5K(8f?qS=ghcfK
E08Vhm761SM

diff --git a/secrets/arr-secrets.age b/secrets/arr-secrets.age
index cacfce1a94a3538e5a2ef3e12ff2c60b69111c39..3a6838b315611ef71464ee121ec9222cc8e3352c 100644
GIT binary patch
delta 707
zcmey)`ki%xPJLihaF%&QnMY)Wp|+QPT2xV`Pm#Hcp|*izn3sQIWof>FkzZ1}YpJJ`
z372<3p+}T|kW*=PN~B|!duW-Xc8-5WkxyZWK~|`RtCNXqScp+}rddQpD3`9CLUD11
zZfc5=si~o*LTO>TQC7J^q-RyBWkk7qPC;=<QCM(Zj$4LBs;_xQkh7m<gnxEonrUKg
zszGK|PD)@Xmq}(?X>xd_saaH(Z*WS4i&tidb9P#2Qb=H8R$5-7Q>kS^QhB*aNpM>6
z#E;_jzNY5+;hq8Rruv2kRiQ3L>CO?}u1P^D84+1&PG;tQiH3fzrS6{Deun8>sgCa1
zCZ;Jt$;lq(L4gq-DXw{y5d|q_`gv|a23g78MZSKKM$Va*UM9X=y1Kdwo}OkN0j|aF
z#wDSCxxP+Drr}kQp26mBX>MsrX8J{rd6A~|h82mPsR4z_Ts8@vbCXV7kDj`@v3;Y#
zdhr`lGuhvSD81r%J6q~=2K&9BXTLn2r0Gi+az!tl``+Kry5p@v#F=&FEwVxm4RWhr
zD%G@27v!)tSj0Z_pkUkN-K%x=UljE3pE~K?{4BnWqD(vI2}($}`j~ZncoO@{DxdxO
zoRHIr_4Q%a30LJiBTt#x-kpAgQ^(WKwuSX(X_(nBp157}^3Fu6UrN1N$}<1#%8Sg;
zX7Bu!^Gx<pRZ9Nn|37~0D&Acy_WMcP4dGRmIfhcDeO<xj^UvP>drCCBCU^tS^i0jm
zSD$@4rMgfiQTK;fqvYI2Pr}Yhc9iaVe`k)&vl*RoS*LFAE?S<p)~_$J^Z@_jLo2@-
zpKvo#w_CF1-b?#OehLW}f4{!}I60}M*XLY`uN~9g8SejGv^rkge<ADPq2%*(jY9FS
z?{j`{H9WpWckdkT7O@i#%f%|Id#gG0g-fnh{}t@N=odF->Gb(Wm6koJ`|@pGpv+ID
GCD#Cht0<oU

delta 707
zcmey)`ki%xPQ7`tuUBr0NqA&#g|lN|KzV6_fp4~_wsC<^h(}0HNRf$Kc}QlsV}@CT
zD_3rDpmuh;zjv-ho};UiOK4_UMS*KYQbmz_nX9v9iG_)OVwqD}YF3d&F_*5LLUD11
zZfc5=si~o*LTO>TQC7Kvws(q0Kzeafg}+~rYk5j}j$2xKU_erYu~~3tV5PfXN>OG}
zg^xjHxrtLbS5#V>W07f*qnUp}KxRrorGKtdm7iyTb6})jhN)R%fr)QvKuTdzRHkL}
z#E;_jrCBKjo|!I@89up=<xx4Q&XKw0nTbih+0I4bo|%a`6=^{pMTM1Sp`rO)ep#uZ
z1|E@aW%>C=#`ysT0TBhEiN5BM<(VmEfniCm26-OId9Edq24Truy1KdwQGu=%5y5%d
zmF1?M!7k3psRiYJmZd%h9==r}VIjd@1}WL~>0w5B`9VGwTy<Zg{8rv`pSkt)rFZXI
zFHK==)_5{!<K)NDXDlCjYVC7XKRYk3#%Vi)PVI#0)ki$%TYr|SnmhN{mG9l>1D7^*
z)OdZk@#sC*S;v|C7Ry}JKA3A-`aVWmu=!x?qE6Edvv0FpW<GwZ=9xjE&N;rdisAQi
zPF}xyW2t-n|ID&d^YZ;X9z~&i|JEoi$uWPu%X!!3{?&`8e0o#3LhrJ|3kjj_Nm<99
zM@^TXt9WNJ=gFq|VZA;RUcBXY(R_K{!|LEQo+%q0e!Q-mw|hmrhRDKSCJPxeA0+;5
zyT3n){k3MS&z+0WauVe`{TJ@-={w8L_53K;lGJ%SH~%{F^PXSPjWE?`cOBEhUv$n*
z3S4BrS+}ux?zxvgELW{ih(4$F-Qo%R^x&<37q-v&ad0!+tq0F@Y%(i$^(1CbJ8dBL
z>_@Q(pX#Y2OJ}z!Fn0J(74Ya_{ufc{`J=kne&Q2e``ntDFWSY+13dWb%;ZnId{J57
Iq4}u}01ApT2mk;8

diff --git a/secrets/authentik-env.age b/secrets/authentik-env.age
index 9800e8d0f1cb7bfc82b5e80b2391b904eb3db753..b47de3fc6054e005a80234288d6ee684fba88ff1 100644
GIT binary patch
delta 591
zcmZo+ZDF0DQ}1U|R!~{2?Hb?`m71BA?4Md3njIOH9Uhfc;A-h@?3Gd(5LoO}kmG6S
z$`zVz7ExZ{R$N$8o|lxQ?Pn1Z7#^5vS{7Isni5>;lIvO#oN88<QIHl=%%y9mP+Xj$
zo0?)|YHDbyP+FL7lvS>vA6#teV&YdB?&OhC;$#+L<d#^H6=;&~mXaHmXINGeXzuNw
z5>^zE5fom|Wm;BLl4wv|<Xe=e?`rH^kdzV@oRk}t9i$&%>FTXtlI-Q4S!$l|YiVRK
z@uPUXZ;+3ZiMxKNQAJ`#zJ+<1TVAMnicxr#b7_8JaJFYvvQv0baG|5WakeX0X@I#)
zP+Fo#X;@XLdqBQ>YL0QPv$>akRCcyunxSQ6m_ey;rLl=uL_t26uCA^^zHf+8PP$2Y
zm6MBqkx59UZ+2*Scz%eFOQ?l!U`lXcq;^%krM_FDqmN}aSDVP$r&=4WZoABj5}mPk
z*;=M5`*X2-=ZGHBC^lR;`_cy6psB*@7N%31rhGC{Fj!E(biJsU?dKKpcRCNfvc7dv
zabM=S&Fh|AvYgNxIHgnXZO*w@XEtO;OgJ`my==i3#Wh-4Twd?ysqyj%tn7RAN^JM#
zum2~%dEZdC|M@D;8D(*W`O>F)D~fI~a3w_TP%zyoTYGA2$l;%r@2<Oxw4cmBa<O4$
z+^+ko6WjOtP2~z{IKVhlz{y>7t8tMR-?Y=Y-`4Q_=re6Nf56^rx%+`0>vb)4c?Bn`
o{BJ$8cp8%ID5i5zSJ9bGCorQo)X2*C+3U~09>*R(_i@L40M^*;xc~qF

delta 591
zcmZo+ZDF0DQ}66nRp=2J?CM$+n5u7>ot_b#Rqh{BTx#Z3nVBEq;al!w7UZg5<WUux
z%vI{*R-v6#7?_k&;%{LZoZ=m1p66wvUy)s&msyeORa)#;<zo<BVi=X;$fawiP+Xj$
zo0?)|YHDbyP+FL7lvS=!;9~0SRbg)Im2aM%6Y8p;?56FWm*iKF;a6T(9+I1sV-}nq
zo}Xxv6BeAzl^*PoWM<^#mzk&Um7N&u7!hS07U&h>A7ElsP?~32Wayh}Qt6j%=$;ig
z@uPUXTe^vtn^#a(VNir)L57ibx@$;iKuC~DenFmgx@BgjQ)O_9zoTPzl6x^%U_oNG
zQJ9&#pQBfmduT{tj<2JEwn?aVX-;0MMM0^FmrFrfmAg++s8KPOuCA^^O0jlIaH5}Y
zW?@EziK~%ukW)}-hHGj-QKq)HZ<LXdzMF5olV3$~N}5G6ml^9dOYQUgzm874xoP#y
zCq}1g)~)P5(Q)tL8sDELYC*r6+)ZZx{AHS9JF&Uv#f=LpOBc=D##(CU{~+1?|LmTp
zZhHGSUV9vP?Yhvp1}B!}X%5#jf1f+|iD|}spS!^wbK>M1cy00?$YmdpJhOe<maXmU
zUnG5;JmW!~K#Y8T$qj!M+kJ79su$aCJ@4YC{k_Wk<bg>ppZtm<%B^mj)re~5Jlm_A
z=bESZ>1$+|-~(q~vk8B**H7Fje>?8}^z)DAI$W2?eQuCq{Pp<rOXrtmNJ{Z4@A2=Q
ppKN&O#IudYf7hOPB4nmz%=nPgEd2!Q&D$PtZYQNDsO*t*0suv`@6!MP

diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age
index f2c2dcb7dea2be73fc80ffed5f9a0be5ff43b6c4..28b1c8d3f0ed6fd3044ef3bede418c6061436b71 100644
GIT binary patch
delta 507
zcmdnMvVmoSPJNJpzf)9dX+TA4NnlE1ai~|OX?kE_u2WuMmY-8Vl4GE&vAL;VqGxD?
z371($W~pCDm8qMjkGFPMwzg}2q(@q*xrterWu=QpsaJlmQCUfbSwOOHGMBEMLUD11
zZfc5=si~o*LTO>TQC7J^u|<V<QI1imM^$EMXqjV4k(-lOQc-}HU!J!|Rla9ph;h1C
zcw%<CfoEVkS8#AuWx20UL{6ByrJG-Bc4AOunrA_tU%5fDrJ1>bv!}ngwx>&3QmM1!
z#E;_jmTmzl0j5q7rsa<1QK?x`M!u2W>3Mm^g{2j#Ic84!-dR3Q;g!ji6^;g6rsfgu
zMLq!~q0Tv3rO5@Qk$IMu8HR=y2Kttcc|qy<mAPJ-MNxi15#f$py1Kdw{w5`!#d#3{
zM&;qbL7A4u1sVRv`cBRzmPXE*!KKB4nN_Cs5taca8ICCyTufPh{25ZR-zVI*n58&t
z@A|E|c`X;^KdY#nnR=>Xvr6~6rHp?kx7u!ayK${m-?e+E74$pbD)Ah1xO~YoA%AlC
zoc{Cg=i2dSw5DI*Sf;vAs>Z~lQ0`pd;=)xjLOVV(Tv=JkEX{p5CHlXWW9RQQe$jV@
z#`U*;e9?;2_!Vo$y&>pCT*~R|3O<telcZauWj`M~RuwaW_iEeQ&4>R6^PVr({WKc@
D>Mg(F

delta 507
zcmdnMvVmoSPJO70xptOzdTOX)P;z!zNThp!YhsF7x@%T$l&?{Mp_jgCL8wQfPnofC
zAeVDdU~;5yxM^yBQbvYnKtWJdk)vBlhGVf&k!NI~o1ux9V@9NQN@Q3`B$uw8LUD11
zZfc5=si~o*LTO>TQC7Kvv1M_JiKl0Ze}0*Xp@(6pfm?ZSp<{7CRf?;7uA_N~XF+JX
zk-5KTwn0!iSB{ZOQ9y`KUX^c3RhhS$S*Bx^pL>#Lgh7r)MVP<2zpImXh-q?!eri<u
z#E;_jnNDF&Rf$z*2Bo>49;Qx}+2vVg0X~jto&k}GW&X~N+U|jdN$zE4hQX0sxxPLD
z1y1Q6-WE|&5n1keKB10I0q&)S5nh!B`JM%pLE2@`5f<6zj(LGxy1Kdw5k*zzm1#k)
z`9=m+Mq%#01}W*q`o)e(=|*{u<{p7%RoO=MS-yt3iRIprTvso$FPiD8{QtR6q}-zE
z(Z_Nv)Hc_1E5*!ge0g8K=6b;eMx%F2)|Vd)%Pc9p`z`zUjZdue#93JT(zPcs|2XX&
zxBZOyWbbuf*Z+4&lP=ugxlZPGXhGARtf2oZZ+=$movozQaoOi?Qs7!uVaJVUwxsz;
zuUQ<Ce^2Xc)&}VdD_1r!{Wkoz$tC9a|8`5^a85<{Kz9C+cUmi(oMYQ3o)>TyeSZJ|
D8q2;W

diff --git a/secrets/dns01-admin-password.age b/secrets/dns01-admin-password.age
index 6a8a124..4b5ff4d 100644
--- a/secrets/dns01-admin-password.age
+++ b/secrets/dns01-admin-password.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 qaHa5g UsRzthlQSxgtY/IMRh7szGEGNFup26wkUVpv9My5s2A
-FiifQ5s7DovsqIyAi/fog5bA3LVfN5JODX+VpCFFOyM
--> ssh-ed25519 uqg2jw mE/2emZV5aapR7S1tnQDJVUzfGkAj5prvPrUVVO+G3Q
-ZGNsnhAJwvTzsXC2fC1TWgRbEk3RldgSC+67xDgq424
--> ssh-ed25519 a0HhMw bsNhtDL0UdHgMCIS1Aq/w7zuoW5M+jVqzFNjmxSdbxQ
-jBHkdm4j/nnhEmDcZvwPF3JigibwtquhgYAK8Hc9Yh4
---- 0tIlJQ3e26MMg7RtgNRss9HQccxGuKVxVE03FC21nZk
-�Z�2���t��&F�z�[�Ԧ�L��Cb<�noOgv#gLW��AiF
\ No newline at end of file
+-> ssh-ed25519 qaHa5g h5zY25CjinOfbc5YWauUa0+ISUGbSlAdWAVlQNZxrns
+Vc7Tcyd+2K07ndYSQafoSUc9wKo4wX7x+KPSXV09oic
+-> ssh-ed25519 uqg2jw S5XHn+Q0ErOjm6rIO0rNdWNnI/EHa1SaEhWJLOV2dmo
++2sonjO5Bn5SSygN1LRqKAaI0FxCORaOmRY2M/0p1eo
+-> ssh-ed25519 a0HhMw o6NmwrLxcoxP81MaLtibNJQu9rsq+9TA8ydMn/8Dnw8
+pNV2CkIROa7joF4LOL8WHgt6P6dB5o6yFoevATCj/p4
+--- VRLYHbzwWscRwbAN4E6Zbc3b/jfqr/YKG60nr2WJfs0
+�_΅�e�y �����뿂�f�7�|h�`}���vYQ�F_� �o�
\ No newline at end of file
diff --git a/secrets/dns02-admin-password.age b/secrets/dns02-admin-password.age
index 0b6abd7..e7b7756 100644
--- a/secrets/dns02-admin-password.age
+++ b/secrets/dns02-admin-password.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 FG6Lew mkh8jLUHVwYqJMhjKttYrQebihstIrBfrQ2hRlSs6mc
-fEMU8Qci6g3M4sxzpOtA92JwKuRIeJjLLXnc/oQ9C/s
--> ssh-ed25519 uqg2jw DB7JYD4MQz02i3Yh7hdMgLz4La3qOlD9FD4dWbUozkM
-+LK55R4Oza4a+ZA6z9LpiUUPAv+OobsMFFWV637k86g
--> ssh-ed25519 a0HhMw 0LWnyOxP3WwsyyDz+JXToeN/p9xZdNYwkMXAP8ZkEiA
-l2nkyHG3SRrU4PZWSjxLrLUv94+VG6AVVMlHbDhvwOU
---- 1QYDHSFhEe3UD5kiy6FQ8YE2n88k0vuIHljWfiubILQ
-5�-�3�s����j�?qω��j#@�
��P��_>F1g�����
\ No newline at end of file
+-> ssh-ed25519 FG6Lew 2isb+wkEZJGQdXgC40teVoWUKItBWjbbVRrPhD07/Xw
+N3S6Qaj2cWtM7mZdafGG85vnc67pfmoFwnfn6i1fJb8
+-> ssh-ed25519 uqg2jw Y0c4gAd9eFDWx4IXcGFmUcgcEA9SaDzqEtjZUJIeZx0
+BwWUjBVJat5IHbnexa3MpZDKXxZysunBFh4vOZzHcys
+-> ssh-ed25519 a0HhMw XFkAyYa5ztKtDHbrO2AmfmtG3pULQxTW8EXfbDHRcVU
+PsrzypjiYp142+jZXqSusgT4Pwmcp1tcjfMpoRZ8esQ
+--- NTZ+xC32G46ilifEdyAKioXAcn5e/BVLHkzHbzWdFNA
+� 0|qq�p��h�K\��r[�R�j�9��VͰS�Q��P�JBf�]g
\ No newline at end of file
diff --git a/secrets/exportarr-secrets.age b/secrets/exportarr-secrets.age
index 4f61be5..4a7fef3 100644
--- a/secrets/exportarr-secrets.age
+++ b/secrets/exportarr-secrets.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ pNnGoUwPKJiMHaPtsC4ep0qdo0yIqTECJDu3/pnRv1M
-IYvBS5x3gxu1xS/JgM7OSAsmxlePZNK4hVZXQfwb/7c
--> ssh-ed25519 uqg2jw DxKm8ZKJWARGFoXzgKbwWo838nt4HCNLUvwhnNbPJ3M
-5rrSIwoCJLyewhnqTjcEvnBYegjuHx249VtQGMcXjs0
--> ssh-ed25519 a0HhMw QQLhjsxbuwroODszUO1M3P3xcnz3wEP0ZgsQuYQUrXo
-yNpHzpyX4Omore6sc7+NQG4MyxOP3UtgkLMIX0C/NpE
---- csTun2G1B9cFWLagGYZaZZv0opesN7qKtRjhAQ3ppVE
-�p)�р9~�����V
-j�VAp.�$���&�PnoRm�{<��}�i��	l�K%HR��"��ЭL��
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ sy7XzX3xpdI6v5mEvbg0yIAYxfSRba8bA0BNfvll6VQ
+DMvtJXO8KvmWCR2aYjavFzKVottDLJdlFDDjsFY1JNk
+-> ssh-ed25519 uqg2jw sDlCdMMoPuPLsl8szoQtsTJi0/l4kCio0/sug/mIRC4
+cb7EbXyxy7yTM3fgokzB0aThpG2hhC8igtPb7MmSsZ4
+-> ssh-ed25519 a0HhMw 1gOwmyjhkAWXKdgGdZXwi5M48x/iYaBgjjUQyLw3K28
++EN3XitbuiOWt+rhW2C+9KabGcHT4ZmBAxe5/DSJUO8
+--- W7P99GFVUBGeFOkueOOyY9sZ6XKETiEr/jaSo25jzsU
+S�C����n�D�}A��` 2��I��w�~�Ul�`����2�@?`�A��O���=�/�Gi
\ No newline at end of file
diff --git a/secrets/firefly-iii-app-key.age b/secrets/firefly-iii-app-key.age
index 0eee42a..dfeefb9 100644
--- a/secrets/firefly-iii-app-key.age
+++ b/secrets/firefly-iii-app-key.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 aichPw qb6uv3irBsD4K/6dyR75A10/tOVogexjUJwurHFoV2I
-aqEYLpfyMjSbfmvR8XrvasqyZ3Bhyl1bbsHTVT0MSC4
--> ssh-ed25519 uqg2jw jv+zS3I3rpcZ1R9oGuVfpucjCWwEEnCweXggZOVW9D4
-D/j2L0r3VwU1c83NO3WUk1yMdSHrfjxiHTlypgVwxws
--> ssh-ed25519 a0HhMw BkL5f+OmRU/kqn3In+lzwrHFUaW3RLbEZwMAFSnlIHQ
-uACreZHSBsGLXaeVNJWQtVPVvJaELSl/AE+gTIjtCkw
---- T4s314v0GvYXyHNiLE8RPkI1AotLe70D2HSieqhrVr4
-�O'|�
-A���)�C�n)<x�[�/�h)�x@�*�ryHo�UG���D�a�Xj-�N���P��|
\ No newline at end of file
+-> ssh-ed25519 aichPw rFrVOShujauyWiVhRgaxZTwBDRxdQ74CA1m9o3v/x3A
+qn3DxC3VfALtGi5xWs1o6REMKU67QnlDeBhKLTxJqV4
+-> ssh-ed25519 uqg2jw uQG25sCZCxlooXvKNgL7xDMenQFTyYCOVvwMQST3Pys
+t0M2a3MaoKzdp06WVDHFdjDKS3Krl8dejuh1kL6GsZk
+-> ssh-ed25519 a0HhMw /mCZ8YTePxVsw4HioblbojBhebJQg3yk/L8f1ZH3ZXw
+8E9RdwcaTFmc5wV0nchfiNrlXJJXhpsXg7/D281ILgQ
+--- Y869N5hs6gq7Z3uQlDLNNFQ98/3drwXKB8zY5hSCnS0
+s��.�Y��5�|ҡX�:jy�^����k]��Ru)�Tz��_rzg\��ߒ[�j��p_��_
\ No newline at end of file
diff --git a/secrets/forgejo-runner-token.age b/secrets/forgejo-runner-token.age
index 2f6a83c..7bc64f0 100644
--- a/secrets/forgejo-runner-token.age
+++ b/secrets/forgejo-runner-token.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 kElbzA 7XFHPcqLwIM3ahHAu9AwgoKIGiJHrBWAVrHOgEuGhAs
-Ljweo9FA3AOKDbH1pU07u/kBNewygK+a+TkE/eLn7K8
--> ssh-ed25519 uqg2jw +7N+oyvoF9BQj8qJO6mkhO+dPaUu0VYEaCVFSp8RYD0
-WjZfsDll93kBu6wVM3WCEH89byZqO78PLXNor368aB8
--> ssh-ed25519 a0HhMw 7vRgbfwrsucM18d7iJVcL5SdvjeJE9xoE253k8m2EEc
-u3+eze64HsM8Oi2DbkDfpXIjIP8JsvK7TVLtSQgJWNw
---- /dbF5sBUJ+q+wUISdMGX3fR8ElLJW5SR9HmV9koAKlg
-����yN57�d{!δ��h�1_Wr1�}����6N2}N[�Q'H�}\ڿ�-)��+�"�<A�BmE�O�c��.�cf�
\ No newline at end of file
+-> ssh-ed25519 kElbzA ut+OIh+XahJRAPhN24Fmtjjb0WNf9ThIRT/FrApjl30
+u6YhVUNwKrHJNXPFNVQAcVgKjvxX4Ov0/EjW322JRR0
+-> ssh-ed25519 uqg2jw t0CvoIQW3EYEVAgpnU/C51beiIQOmHZH0IwXy9b/tSI
+GkzEc8wrnqiYKJrr5xU+GK3jWqcFhadRAB/tfoRoNko
+-> ssh-ed25519 a0HhMw x1cpOWbVQhYfsLHGGD/g9S/NIiDAX2oWyEn5+V5ffC4
+9BBqY3Pwx6FiD/CpjmPaN0Fe2ixNS1E7BR0twYlFzWQ
+--- kId7MuCrrwZwtp1VTwdRILqPScKAuZ5ouBC+bcUZbHo
+�����]�1�~Ň|�{������œ eu������H���Z�T1��%:��d˯��&���3���ݔR�@te^-
\ No newline at end of file
diff --git a/secrets/grafana-admin-pwd.age b/secrets/grafana-admin-pwd.age
index 5fe91a0..ee507f9 100644
--- a/secrets/grafana-admin-pwd.age
+++ b/secrets/grafana-admin-pwd.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 xSWWeQ 2Sy0jjGNx25sEEsNHFCfQG3BEMEUCvMj/B864JQ+zCk
-z5GKnoVfs11Y0z7SXJg7H0GqnZt6rw8oR7ui55d8ii0
--> ssh-ed25519 uqg2jw mQ+s0M7gQyUkn7To3Kce7IfT4viC1wdkPNWdAJSziS8
-KBINYOpf+N8UBStsnVguOF+pYhJwv5s/IVfvMYtzz8w
--> ssh-ed25519 a0HhMw JJm4IVBDbAppA/9yfvWr5Z8g//6j27UYz2T1zr9CQzo
-W/z7yteubTAll5fOS7wph9ADLf+oJz0aKhvIrqz6l5A
---- CaEIYuDZLtL9B2YZdxhaY9utBxxlFWwDpc+8IEhNFww
-�����5�j�h�Љ.5V_z:@lv��o^h��J��=3���p��z
\ No newline at end of file
+-> ssh-ed25519 xSWWeQ 1XKsswYzaYArE6pw8K7Z6/wULDCcbrbH5LRdDVCAN0o
+z6+OPgjshECMWHP7Wj0eVRHkWPBhnVvhagUDzG+pX1o
+-> ssh-ed25519 uqg2jw Kgb7fmBcT2d2XnTHL9wsVjwqHFG3SV6OT/4RThYNjzM
+4nCn7FP2SgeFuf9JjyaUfOernSfU2LW/6iWBvyU/y0k
+-> ssh-ed25519 a0HhMw 09NWM2lC1gkKuTy1uy1VEMKRcM9bl4JtNmxZBokpETs
+e1O4XJ/0S6Tjqb78g3VtElCtOqtzm/99/WS+c9rWBHU
+--- svAyMiCP+aC2qdc/Hx9/cHdJ8wJan6IiCDq1gcGR+oM
+[	�me�]11��•�2%q3��\Sk
�W�-�HߊZ�2��Ő��\r%��
\ No newline at end of file
diff --git a/secrets/grafana-secret-auth.age b/secrets/grafana-secret-auth.age
index b7d2c8dc6e8159148e429913820589f0e8139685..d5f28a8ae1dfe502dd7dcaaefe1e016141507500 100644
GIT binary patch
delta 508
zcmdnUvXNziPQAZznyFuQVRn&GvU8bdVtATsX_~KbK%qryW{7^KYfex|dP%vdn`N-0
zFPDc$U}&DVd0}!|RdHriuvbxDrh#EaMR-YKer|GBU}9;mqhVx#VPs}RK9{bYLUD11
zZfc5=si~o*LTO>TQC7Kvw^y>0PlUT;e!iPiRj!%7ms^mwZ&12No~N&4RGz7+SwwMh
zifdlFOH_D1mwBRRK(0raQKfcniA$(SaB-4vrE8gQnsJ!9uYX=eN?2~TyK7WPN@$Mj
z#E;_jKCan06^=Qs!Rf|n?xp4>X(gsU!Dem-7QqE2IUa^l&W=fy28rom<xaj_mAU?j
zMJAON9v1E<8QEd_#pQ0^+EE2L!MVl;URB!VCIP8wj!{`j#eoJ~y1Kdw$>Em1-Vx<4
zriEphMp4-*?umKnCYI@jWv(U`xdr}79_A(W<>?_FKFQ9-T&i<t{}!k_E*Nq)Pv5iM
z`Nk9<yHkIbtWSHT9(mf)Wzpo!8TPlNU+uo^eBf)!!Z-VOtPU>p(CCmmx9aul6YX(2
z>}ikxvnQ!lTr8P6C4)y~_rc$uK`-ttyE?O-WtG#RD=FOG27db%6lCQ5V(?$5F=5wf
z0r%yV&HUQ3@|!bKE;qf-Sh^!;>C6pLtpZEk7A2}|JG<AAqq#({<rD9|Ul9W3>u+cL
F1^^Nf#B2Zn

delta 508
zcmdnUvXNziPJNPNL~c$_xuKg;mSu&Dg}Ymhev-b0v8hW`WmTz1xvRH9cACD0MQB7-
zI#-HkRH0XXaHMHrx?`$iu3@QXN=Butk)eTsiA%Usn1z#3Myhe3S)fOFGMBEMLUD11
zZfc5=si~o*LTO>TQC7J^qKSoJxJhbxg|UBmZgzoho?Cd4MO9Eqv3`EBMUg>)n{Rer
zvWrKGk8y<wS5bC~Z$w(4S4v5aMTDVunPovlm7`ykewamgS#Cs9V!1~~YPOknVY++Z
z#E;_j7Foe=1<7e4>6K<K5!%_thOU8?6~5YqzHTn&rN$)&g^mRl?%qM3`A!C0mPx5@
z<pmj$$?jf70osY~&MC!(22o|M8EJ|6E(KAgNvYaCRVJl{P9-K>y1Kdwxp@|e>3Lpm
z+NC~TrBOL~p+T8mMdneN5jj!WE<vvT78!2!1?I^)$!<=LTr*8(<>!5w+`3M)yrf4-
z{?D2aQ@&YYLfStsYOXP0)$re%W%77sqjK`wb#4CV+WIUi_A+efK5f32)xL~*fnu)G
zR=)GM7+L2i8w#mU7vAtaWJ>IYbvqma1lBxV+Iaez*5bBTv$y`(Xcoa^lzKhnPyU3p
z_G=_PZfmza`?8~<>g~oCNii(j<+_s{*X8-{+2j52wt=s}Z!d=Bt9Wy7s~?+J+p1&=
E00N%AGynhq

diff --git a/secrets/mqtt-password.age b/secrets/mqtt-password.age
index b8cb775..cc0099b 100644
--- a/secrets/mqtt-password.age
+++ b/secrets/mqtt-password.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 VfYKTQ 8W3219VaPezn6ZQ4PV2R2K7HKVWB05qoRm2rNcns+Tg
-4YQMErC28PLENAyg3kbcJ2cSleWz3XU8dbQG5WJey0s
--> ssh-ed25519 uqg2jw /Cszl1RdBO8yVMZk+xvid8hzKSYO4RjzdElUJzOrPFE
-PuMBqCAjKmh/MotxHfQephg6JETLDwavgu4+n/RL628
--> ssh-ed25519 a0HhMw o+5KoRd7Ay6snnXp4h455szXS4fscjiKoe3CdJK0KGI
-LrDvOYCvfnmI3yHXQG3lODqkmWlFTK+qOJQIoTnWezE
---- CqGCYUZSUWV/DsTIKD1taejEHDjPQxw1VGFnS2qeZYY
-J��H��)>AYʺC��Ñs���U�ӯ]�'@'m��r
-�c�~n��E
\ No newline at end of file
+-> ssh-ed25519 VfYKTQ IuUYMJ6XmUxY9pNJdgK0/DeS+q57ZVdCspJ3Secv5Fw
+H1yIuULwSsWWJPQbqKDAncafB1zpXmeK8KaKUXGW6/k
+-> ssh-ed25519 uqg2jw bDliowKWbPn+/q7tXmUP+vkve77XAf8MXdW2Ocr2FUg
+qxWWH79C6asxxj8kxC5BGEX3i7+VtxvDktDylv2QLF4
+-> ssh-ed25519 a0HhMw awOxbTPWHhaRcPjgfJ8244DWV45cclQd7lTScRfLtyE
+zG3p0u9swvkgFGXeO2H/+hDS0c0fCxLjFlLUrGs0x7Q
+--- 4B+w7FvpNIqDEEUf5WuVmHcEQt72xSz0Rskdu0oeVu4
+}2����QL;� ���M׹:rEf�qZ-���o�ɱ�hp��E��s
\ No newline at end of file
diff --git a/secrets/nextcloud-admin-pwd.age b/secrets/nextcloud-admin-pwd.age
index e2e80be..f695fe1 100644
--- a/secrets/nextcloud-admin-pwd.age
+++ b/secrets/nextcloud-admin-pwd.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 S1eK8A a3TRUKXdAk5RbMtSzek98mbxsQkzMhhXdZ2ex2HI/Hk
-JSMBbBfW1/zDF1GRqbOjZXfgPzKCyEcHSHFh4vFV8RM
--> ssh-ed25519 uqg2jw bVMnanOLSY2IztQhiqWrCdG1dF6ofyf2P4TMH5Dm9FE
-MTv3edVC5KeoEf+bQy9qYEuegNXxZTthvl6J2Nx4rjk
--> ssh-ed25519 a0HhMw S1+WP1Wfsok4KhvQbsChyZKEJVq2HhR7XKaMjragLhY
-mAuN6i7zJWW/t3SUg/dp86cr8ub7Nv+VK+ZYgO/7pSE
---- Vx5+auSoLAjdsStbANhvzeYoMJD1wrhKUeAgb9y5RJ4
-��z5��9^�p�
"�'ȋ�g�?��2ɽ��H��'�>���
\ No newline at end of file
+-> ssh-ed25519 S1eK8A wNR1r1W6QRjbCFHU65hP9h13FPncahjcLGbg0LFUTDE
+OgLAIgsVbhxaXziWXGFnV42r2HbWN7SnpLuKhF3VAyE
+-> ssh-ed25519 uqg2jw SVAHH7DSsv6mLPSAlz+FAQDEE68OlqeJJOJXHm8nAHg
+vsoQTMq7aSGPTvFQEGLq7dgSsfHVo/zK8Krf17Y/Hco
+-> ssh-ed25519 a0HhMw Ar5b7aPCNLvuNht9Xf3KmHs9sCgmNi+Wu5KDlXc7wyg
+QgodtLxAO734nybwH2+x5iepC6dhZhINr5Avh6owEIk
+--- HI73XWD5PxgImmP593GcpyZjvmH/q+gsKyBp+8C+L6c
+��/�X���ړ4<�"6���iϨ�(�L�6j�v����p��
\ No newline at end of file
diff --git a/secrets/nextcloud-secrets.age b/secrets/nextcloud-secrets.age
index 9614425..daaad41 100644
--- a/secrets/nextcloud-secrets.age
+++ b/secrets/nextcloud-secrets.age
@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 S1eK8A P8/ji2B/kI4cQ+dW1bfPngYIJlQawbf4/FCD982QwXk
-FlFAgOXNdbvWr9zxL9vDX7tCATqnuHBPpk6zkvaHLJg
--> ssh-ed25519 uqg2jw vpXXct4T7NwuzeVEJeEU27ds4k45kF02FDevVZWQxQo
-nTY8w2ZNCEX7CdqBG9X+bJ/UJC+5cDI8DZWF+lyTLOg
--> ssh-ed25519 a0HhMw AlDSNK+OyXKTuLkYLJMfq2dYOIprBr9Bd5s218CrIhc
-DkbOY98Dg+53rDdXBKMsdzkGqkQfuFGz8I9BLim9l14
---- vwNVOQ8gIa8fnYZqysK7WMcc5hpSJZ4dR1DXXKGJTfs
-2�7�o\���ġ����/�.��V�8�M�ߘ�M2�ɽ;���;��t
�9J�
-��͹�M�(s�G��@�~����S
���W�����}�k���������ǨW��������������
��η�`w^����Ɲ�XVQ��!K�7�s/
\ No newline at end of file
+-> ssh-ed25519 S1eK8A pPs2ZNc8gG5jf/SA5XcW2ZeA8HCAABg5RMcHzKWDWgY
+KlgRHGsCGxVuDsFHKqhdrND0ls6PZIBLZjjQKUyF3UI
+-> ssh-ed25519 uqg2jw q0H5nkKoES9gJUFA4Y3r9k7sByNYMesTfeo5d+xyHyY
+yKtP08Q87BAjJ4M7QoaX9g5yiw35DQ3wK5c3394GiBA
+-> ssh-ed25519 a0HhMw RpiAo+vxo8ziRj5lJNQUWtI0KNh729KlAzIPvzeF1RM
+Yc4GaQFiuUElnEhQBM7cyv8CAAFCCbe/NzAqRRN1xxg
+--- l2zntwzWkFmXFmAo9AQotn6Ym69xrli5fdz/XOQs93o
+
+hcE�f�5���}�]�_���*u@��ZB���Jl!WxX����镴�����]�a�a=^G�&���f�-�|'�)�?�N5�����2t<��o�g�^y�/"
�،+CԚ�'x`�~'Œ^S�����;�Դ��F�/�8?���}i����F	
\ No newline at end of file
diff --git a/secrets/paperless-admin.age b/secrets/paperless-admin.age
index 72ed126..d373075 100644
--- a/secrets/paperless-admin.age
+++ b/secrets/paperless-admin.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 4sgwqQ tVcSAjmHuPUV+71BOcf+BMQWhxq5YPQdL5K91Em0oyM
-ON6VjRoiqXaINqAQKtWlRgyEUwVOPrlwG0vPga2vfsQ
--> ssh-ed25519 uqg2jw MpLLUEpVT7CmrDkkpefXEjIRId7IYDkQkZrclJlW3Wo
-xapV99qynp+ihV04IK3lQVDCWfxDJsf4MxvKziaAmYg
--> ssh-ed25519 a0HhMw VLTa8sOd1BT6T254I8JFuhAG4qc3Ks4+RyDawwx+LkY
-8Q7V/Pp934QPRQvVIw1qCWGjTfTK3st1h34tBlYItug
---- TEARP09q1chz4ubeJ812C1K77jnlICwUgOsZb+awa88
-ȝL��CG�0��@��](X��=r���6ga��
��׬�3�������i��A����3�
\ No newline at end of file
+-> ssh-ed25519 4sgwqQ Fv4In/q0c7yvHvzjY9B8H+gkTUlbfANkg9J+u7r6jXw
+hqsZItiK7I3WNemhbgTMLLEkpNSeFg8PbgJCQ3EgYAU
+-> ssh-ed25519 uqg2jw vP1D5g12VvPueSkdbGtw3+/7DAD+167EhwH9jPoZ/Sc
+nwJFKunD4W0vIBYnl/Mrlh0uGCNwd5zq3KTMPGQEScE
+-> ssh-ed25519 a0HhMw uA8/95mwCgqvS1yNpOV7GBhteKeVOBgZ5PBLA15aXHo
+gr57aZkjsxwbg4lXoMM4XTQf/prk1a0ElCeW/CkeD2I
+--- JoMZrIKxVcQAi/zAIxZJ8OhODrC8dpDkm3tmWMmgZWI
+
^:�+�Ec��
+���{�Ґ鮡��n��̂�n= ��E�4�t#㶔�rWڨ��
\ No newline at end of file
diff --git a/secrets/paperless-oauth2-client-secret.age b/secrets/paperless-oauth2-client-secret.age
index 358dc03..fd63ca7 100644
--- a/secrets/paperless-oauth2-client-secret.age
+++ b/secrets/paperless-oauth2-client-secret.age
@@ -1,12 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 4sgwqQ hC3B269th5ReQgeg/GCsIO2fk75DPT5zl7x5Y58XHCE
-xnPipfLwmYSUBLORUSVJTUTEIGjGNTY7tEToEm6jEXI
--> ssh-ed25519 uqg2jw Kyc7GHI6ti/SOiVzxCND1lOg28hgVa95+VVrS7iP4Dg
-+K+y5H4U4528aGiZiPjdGjrRLX+9S9CHeZa+yhPFCmE
--> ssh-ed25519 a0HhMw crLuKtAVbg/R98gcO/kJrvbJjQyLVHn6HZVEZARRujM
-2a5Xy7eVtl8B730f4Jc5WHNf/sx30tvZvgPLdgy9Cjw
---- KgYGKI1vTqS8ouIvuTDrHewtpG9mslUR8epSm8hbQdo
--n~�M� �à�5	��{���Q�"j5n" \� FE1G��2�
-z!
-lW�T��7h��s��[A�Bby!<0�<�".�*5�踰�u�#�
-�N7]�4���e3���;mG�k=�C޸�jQ��UA�P2���虴H٩37y��[fN��b��
\ No newline at end of file
+-> ssh-ed25519 4sgwqQ TMcTyL1/v/yc/We3E+tI3feD0/RcLxYLjf1UGwZRY00
+Xh5U3+/3agnlKgTOs8wd7rWXNY50rgjkeC4W2LGPkXs
+-> ssh-ed25519 uqg2jw Jgwddw5gGkKNiZwP8i84QNz5/Ob4Aw+6d86ZxaJnaVE
+XBYNdYRFK0fh/+AeP3w7p2XJtNKzJcB0emp5VHA0xSg
+-> ssh-ed25519 a0HhMw jYeoWPhiZKi6Dh27RnGNnppYN5PUiFitU0bXtbxdHUM
+8CuDB0QoxSFiWIh6oqe7UxaMhhpfQVqlJAEzEKzFxgU
+--- 9R61JrU6zFBgOq4sPyhWlYPuwb9P/B3Ahg5DpyZTji0
+Ȯ���Km�k��5�Q �h
���P	�g%�:&�y���K����|����V����_�aC-nj
R����N�;uj�:�RK��&xT�)��E� )��s,�R͖J����d45!���Cև���<���<IB���
�]�n��)��E/�T2���
\ No newline at end of file
diff --git a/secrets/scaleway-password.age b/secrets/scaleway-password.age
index db2274c5fdbe6e002bb88d2b92694e98dc7c6788..b3cc11c84451b38176fb38e68ee79cad56727926 100644
GIT binary patch
delta 507
zcmX@ia+qa;PJO7mzez-)S80()L}0FEiN2Y8X;yA-QHgdynQK%;Q9x0Ixpr!rQE8Za
zBv(~dZc;%(v46NxWOh=xMUq*$vtg8}w@+1CMyiQxroXnQX=b{sOMax0FPE;JLUD11
zZfc5=si~o*LSkleMnJhjW|C#5X|S(Lm6KPINp7K0s#{KOMnObaP?l4ANq|9;ms4et
zZ)94QS!Q@KSE+BgXG*$xL`7&oRz#wkhhJnyl6k0`PgI7#ep0D%M0r}KPe!VniKk!w
z#E;_P+Ch;P+OA=#MFH+*+T}rcktO;@P9}LtCK=^r=_dIR`bL2sRR!UW5up}bxmn4H
ze)+EMW#xgPp(&Qyg@NXdMfxsgKA~ww`C<B=S)Te?Vdl9Z<t5pZ;~B;4Q#`%QEtB(I
zlgj=46GNiXL-MkU&7JeiLi3VSjUo*r{ZjNJ3PLinEZow$9IL9LLaPdm^D+#hs$6|d
zO)Iq{d=0|9gZvCbvQ5m3iz;0U+#O8}jLh@7baizVg0(Zv)4ja1jHB{W^Gix9Omj*@
z@=G!c{R<qE^^3|XlJXt>@&a>$olU*cxlTMfab;Of+`<yo;4^c!{9`FLh-J9VU+maZ
y{EYj&!^z~T=Iq9~|Ct`Y3AU^Y=$q?c@nPP6wG+=16;IuC@yIQ+f8_09XafK!YqM7X

delta 507
zcmX@ia+qa;PJL2vXjVo^wn=GJabcl;PHu&7P(hJpL~^>Lt9NjQzENbJML?)=iAP3`
zD_3brP>@?#h-tQ`f4Q@9wo|3KpNVr-WJ#!niGFTHmYIc9fxn+=VrEW`FPE;JLUD11
zZfc5=si~o*LSkleMnJiOWsap|o~w7Tqep&Hg>R&jv0G?Cn1QypWlDZkWpJr)VnlIb
zPI<9ggm-y4mt{nFws&HRN0M2xe_}zIWlDs1WnyY-xR-^Gd8S`pZj@n$UtXYZqMNqK
z#E;_P#;$H9`o4aiCN8D9p2cRFNkusU+1Z9+?#VeJ`BC9+84>#4mOchKc`m+OL7wjA
z8K&B4B_*!z+7TB1UXJD3+1ds9&Y?bq!KulWrp}qg*`--k8O5%X;~B;4Gx91c%*+zQ
zd{UClLsP=Dv-7nhLjx*8Qv%G=OWmRpld|&s^Rr5Gl8p_xe6$Nf!i~N3jf={C^!<uG
zw37^6UGqar(mX>-QUgLO6U$5jvb9~Ka`Th9baizVLh~vu^i7IGjZ1w(LaT~PgEGTh
zqr$zk4YD#E1DwK*LX%DW49g6CqTHR5xePXxZO;$*-4u`^?>(<`e%@=_BCX|;?H?W&
yWVLX8|Ct>g@>ld{lam6+d#_a4xNTR9<lKxJ{#=rLyH=BRW&vBzl(VZhd;kC?!Lro=

diff --git a/secrets/searx-prometheus-secret.age b/secrets/searx-prometheus-secret.age
index 3bce86868db40dd829c4fec3f48022256a9dd8cc..fee86f181eb8e38143f1690f9a0f099475ad03f7 100644
GIT binary patch
delta 535
zcmcc5a-U^_PJN2MNv^q3fpJJcaK1rlR$!u2K#;k)NnT)TqI;1=n2%pUep+%$XtJ+k
zGM8nli(_eFq<M&kPkEV{aYSUcV|KEyerCRZQj%q&YgnF}S4FC}w|+)gK9{bYLUD11
zZfc5=si~o*LPc<Rcxs@6V~Agdabb>2R#;V)XRujPp<BL@X|QL0iLY~nwy|MUj(?(i
zMNV>Fg;AvimxqT*N`-zzq`#@3e~@;#pJQUCV|Yoamv5qvQI%0nN?Bz{U`9%@YowFG
z#E;_P!KIOzrumM+=6O|FsU|Ld*-mDG0Vc_TrrH%nnFhguNm<2FDItbMY1y7!mSvU}
zj#24_*~VoB+5zR6u4U<=9)1;Bfk_5ok-0@KVJ_w##?D3V5fuiL;~B;4bMlL{4U<w6
zi!DOkiwZ1LO^ZF#0xS|!e2NU+JY9{vbF0G41D&<=3)2m_QZn5FGs@G#eB85*ER*#s
zq5|C#GZXdAj4dp~%A;H(QuDJ)Tq`Ro)4a2}baizVoD4i&O@mUMjZ3_X(o7A~E0a8m
zGJ~SL%(IJ}$~@dM^ux=ul3dLy9GwddxF)p;Hviv{*?0ZT@=f2C#?DVqtZ0g#ueD)M
z@~qh#F9)b^*E%;V)sCBgriAOXiPaZp_iL&3Kk$_?pM0LbYW)J~XMU1xoA%Ffo^h6c
d(zVxLzn9OeaBHeLvFV=rw&^{`x&Al30|0{7!ovUn

delta 535
zcmcc5a-U^_PQ9O3mUpJRmuHxFpmC%@g;_*Sk-LSyg?Ex!P-sPoyN79nxl@j(W1efc
zBUf5PiJ!ikfuC7bez<Q@ML}V%mv5m_X0Ug0iEl|@R9Q~Aez{+`Usz<a1(&X!LUD11
zZfc5=si~o*LPc<Rcxs@6bE1X2ccy=OS$=@4fr)u~lADKnO0Zj4Ntl^qa)z&gMNmj_
zRe6?)r?Xoimy2O!MTog$rbm)VrCC8}sbi^!X>LW5aZX`qa+a$>ftP`0NR?%po2yCS
z#E;_Prn#=+CB_~R!A1q;+4>O$-p*A;z9G)O`k|R+AyJiS#lharxk*_?AywsEo*^c|
z#g&HTroR4;6`4V0h2BAB?k3?y=3#!O5l&u7rXiX7#ZCo5j;6(v;~B;4qssC^3WHtz
zLkbezN)uf@(la7bi=46pE&M$#%5w^w^c|BuE!_%BjGSG$%&H<1Lo&*<ER#z!vn#VJ
zJj2a$JoE$1&5}Y&93v7d6SWPZ3Q~&8i_){XbaizVQquzSO+$@*3xWe(D=UqSEi+xS
z5`!ZmGNQ_ji=x6(0!y8<igJxh3(fr^xqj^s+dXS_e`{joE&fJ^)vwQ2?wH^?iM8%z
zf4<4BrWS!c1@${NCmp!6C+%3kvpo5<bdkf{yW<bP`W-i=n0@iVjpZ9=wET@1$)D5Q
d_cHj=l=ZKhf9}2bJ$b>tB_5Zxl-|pg0RT3g#y|i7

diff --git a/secrets/searx-secret.age b/secrets/searx-secret.age
index afa9ecc41ca87a3235139689dfba1a2f207f5dbe..af0ce7ece0f4cc7687fc68143b916d2057c8241a 100644
GIT binary patch
delta 541
zcmcb_a*1VvPJNl1k5jg3a7k`Tj+>KdhDladZhB=<SZHZVRB%9Orb&5Jm8VaEfvIOz
zBv+umzL~p!wzfrzrM8K`XGMBNv2jjngqwCjQl5c-lv$uzg?3?aW_fZ!F_*5LLUD11
zZfc5=si~o*LTO>TQC7J^rjt>Hzei|cafYjxcBOHcsar-_kh6BNi%FtoTCPt}l6#tw
zWx7#$VrHf<SDA@rptDC*fNOG9PGXj`SGd1%QG}VRK}vC!acD$@Yn6#_xvOPvaCWil
z#E;_jiM}QJf$8ND;pv_c#)Tn%9>!HZ&Ymf*IqAhYrbhYNrKV-+rul}hAx5EGhGG8Z
zM!sd)SrHbcMXr_QW{zPdE|EdS+Gd5?S(ae|zIkP-A%(dfm66F@y1KdwMg_%29-jW5
znFZl~RY74sRi$2GmLY!OegTEWPC1T+*)DnYmRW`FMrK~2T+^1nN;;Vm_}c!#xul6w
zo4n@j(o9;j#4GmdbmuEZ6U=r*`RHdF|8h*6G4GPh?XT7afpyt0=WjMzaDAP=qFz%-
zxxUJ#i}eB<IRy5szG5cp-Y_|;z9ur-jWKrdjr^YDj^{h;w)DO<JAX}8Kxpj@hDYs}
z95n-<Zt&r_e`m^9i5IIssC+M4a;vU<>$)A;wYr5}OJq*P&9jiXTDmyo{-<(FmAJw!
nRS~Is401b)&r5#X?Wn(K&i)UTb00@^KJxNzjfq@!;awd70)EtH

delta 541
zcmcb_a*1VvPJM)vL26}~V~LAriKlO%e}zl9c2%aOWkiW-PH1+8d16F`MT)OQNM2E>
z0aut=nu}3jp?OA<MPYKKOSyKSMP6!1X0TJRM?i6Ds7G0;VMS3ydZ9~pIhU@TLUD11
zZfc5=si~o*LTO>TQC7J^VOeE`Pj*g9a&UUMTbNN%xSN50ev)}{SdN90Sy_>3xOS$6
zcD_MXnRliImw&LMw}nwrzQ2D_h)IZkrHP|^y0L+Isgqk(c$iyWq=lJTNq$vvo_B@g
z#E;_jslG)auEs{0#lcBgA$eW~PTo0g&M6))zGm*J`o*Q0rdc_W0bxeP$u9X^mX`j-
zL8)0jiTZh!#Yw3-<{9DXo?caMp+%+1hQ{um>CW!Pl?JBnq5A1uy1Kdw`H9}%>Dm>>
zWto;1IT1;DX~h)<k&Z4oA^w3C`kDSEVJU(2-ofF{hPh=XT*n3L-k4cW4%xyeqPU@F
zOW}slbv<=fPyVVeVViU|MgHc6#-bf(-`&scR!^2~&d%Pi8@AYNa%y&XR_jNWZLOa|
zt!{n_eioIXBj6=?^{wTFUsFS>7K`t`J^T7&`8SK7UJ3HAe{odb*+uDb|1!&sc_~}n
zr=^IN$oNeAQpCP*>Xlc4UdB9bToa#%T{-kq^wNZh$7Q_RGYbC7PW|ZEWb<r6)J(sg
n=#|D9fiqVnoYgE~kh{H3?m=ac`bmfO6;@_9{^Y+;irfJJ@14{^

diff --git a/secrets/shadowsocks-password.age b/secrets/shadowsocks-password.age
index 3a11e5b9852e91f0416819389362c974d3a29ae6..c3848336b6e30f214bfcf6eaf512babff24a632c 100644
GIT binary patch
delta 442
zcmey!{E>NrZoOlKeyCZBVL)z{v3Z4yXF-OeX?RMxcdD6lk#ClxZ<c3>rD?KbWm$GP
zmuF^fRA#zmqEVnvP*h5ynNhM~YOzN|pnq<WcZGAJQ+keZX?~z%ewk-6m#&>cadC!j
zYKoDmsiCDpX<@oiR=GlecXFwDVntb+MO3+)X|Q)_nyZ16M_5p9Nv5B>iFstAyT5^B
zVPU3wMvy00My64yS+Pk)dX-a|zDbpziFtZ(a)CjJL0G0?sin4`aX^)ae^_o{siWt_
zkK*<DWd&~8?r9dmq5j%Ysm^ZUNrl0M70LPerKJWgURj1tUS`P_kwr$XF4<f;UPW0R
zj#a+qUOq`FDMntI6~(@ZZlUgJ!JeVPN#R+E5os>jW-0lF9-&;iy1EKM<&H*1ZU(uo
zMp20Y1`)0v#-YY8RmBzM!J&mYE+)BtZa!HlSrx7k+Kwh%4nMz#&wIT6>1<sK)7=LC
zuH|`hUc9d!>3-X~!1%{<$5x5eN9Ho$RX!N#(Ydo?!e7@d|EI+_E;JGlThPjDK0m`%
n@G`^Aea~gj)SQ-(@erEz)2@8O@zs$v3cq%}UAwTms^KF5c)+4x

delta 442
zcmey!{E>NrZoPS=NtkCvP+*}&NmPiRk41QTfM;@LNnnAqxpsbTX_-Y*q?vhUQg~)E
zmsx6BkXN2Xnp=o#RzZH1qo<conMZ1oPjF?Zt4mg9Vn|AXw|7!tV5z?Wm#&>cadC!j
zYKoDmsiCDpX<@oiR=I*vK}tYWWLbrNo@G*Yxo>Dij;lpbSXi!qW@5QnVUnkQm3vNF
zp=oBYqia4_P_T(xscDp%UshgHPMLXnc2cODey*{*e@1X*er{2!cVUuuftj;=L`LAm
zkK*;^IX-3<sd*Nmc{v4UVFfM~p-E9?1!?}?>3L=q7G9yrg_b_f=Dxl@#_3#6nI^@R
zWk$Jq<}PU&DQP8Xf!^t^VeUbOh1w}qnE_5dg{2nSp*aO1k&axty1EL*0d8fPZpMY)
zCPhKcCH`T_A(f6fIpKl%W=<8Up+$j~L4jG0E@hE9$@+m@va`Oo+e}zgm?LXa!fUu>
z`r>oV@Ax;(Pk6?>Vm8aMz)z9|cY~yNPkC6(_e9(HK>X5T{+!EMavT|Za~ks6b}tH^
no&R^*@x!0wv)pdok+^VJ<L$$herYS}k~1>$EEabB{r3d`dQql5

diff --git a/secrets/snmpd-config.age b/secrets/snmpd-config.age
index 2141344..28a3150 100644
--- a/secrets/snmpd-config.age
+++ b/secrets/snmpd-config.age
@@ -1,53 +1,53 @@
 age-encryption.org/v1
--> ssh-ed25519 1nWE1Q L+jQU6SuzlBaB2eBck5Ywg5lrKVkhfNV4IzwGSb5Cys
-VUIzjIEUOVqFLVxr8YM6vIixtRQt7JqmRuheW0GPrGU
--> ssh-ed25519 l7h2MQ +4q0jemZh6gM6/OFyLwQnBiBEYlzYDrEf0xKBPhQhiY
-YwSEfFwGos+W9x7pV/wMPiJkgvEpFiRcdFqRsWoBjIc
--> ssh-ed25519 BFt3Fg lNQWnsO+XmQca2vc4RCDUa10RA1U9tHeVnpC3AFA308
-ulbwdxJ6RnobCn2fGjVaTld3hw6XacDs5nxV0aSy8MI
--> ssh-ed25519 hhnUMw LNOU9/M2VkvQLhdhqpTeQG0tbit1qUZZVJAOtkKIsx8
-8x6dylDyNcX7MvBKrdZI5GyU7OtjwSbxrrclqmhXawg
--> ssh-ed25519 Gwwkag +bJyI2sdusKt90LZyDPR2Up7Vp1lIGSD2Gf4OSRnuAE
-Un2/kfcfSP/TGhkLRb4vcekLW11o5EJmf2FYB5Sc7B0
--> ssh-ed25519 qaHa5g jaMLmRZTOR3PRtJnDaGNqzFuBZjQxa7uPAT3MfhhyEQ
-YG+yDXy3WVxsmJpPsA5KujJ3CqdtYQiVrGtHJy8epqc
--> ssh-ed25519 FG6Lew EtmSS3LUaJ0O5sRp4eXj6WcPUhpJg6eIDzL4ytKE8Cw
-RhWerbOVXMLuTy/vDHG2AfHPObQ7kJBNco88KyrlfYg
--> ssh-ed25519 UCdOEA 6icDx0EpXiRAG+W72DGfOJnv/bOrHLYb9idZzu5dCHc
-uJ6vDTJrXKjx5kMrVgqb6r56N6vzSXQtTnAqG6OdLZE
--> ssh-ed25519 aichPw HvlZa+X5OzJQRPXLcdDvMi66s+/YAPCGSsDIeynTP1I
-0I/fpRPP8/mMKr+i0Zm5zDVto50e4J0QI7dnNkebubU
--> ssh-ed25519 PCrpYA 6cVdMiRDvj+B1KC4UcVqKHcpU9ZfwVbv5iY3cIbyjQs
-41BdcDNpwHeLVsDpeF8juOCNLORo96+jyp0x6rXpw4s
--> ssh-ed25519 kElbzA 0m+LCSiCP0JiYIeU++cSymFz+OJzCySlHhWpa7SN414
-kj6I/wVprksObmENKqy8ZLLYcc3kcmrcivgv7sLaI48
--> ssh-ed25519 Ux2oFg dH4HSgtaiqFOwHqRIWT6qrKslzT/2nSN66Er2BrshVI
-0qn3cnwFhhusFEs8wtAA0EZlvKnCOcvt+kzKUads82w
--> ssh-ed25519 EO5ObA Q6COGCoPxNpObdk1OwdMO37YNZM+PW1P0syfCMiOvlI
-PQcSNRcPCh0UFTHMpkdWQwaQv53woNy0S/fzhRnQuwk
--> ssh-ed25519 cQlmdQ sLt9mQVQA3CNWuPjT/cISKpiwypoaoFIeo58q3yd6VY
-jBojShmGKkVpAyCvBF57VulpdeUeLoH5W5PPv1M8r1c
--> ssh-ed25519 xSWWeQ 2l+GkVMcEvsrEA7qxzl372baCIr3Xyfv+1sNn8o/FyA
-Cr6WXP15bm5BnGLpJnsgQ0OeO6WmFuFAvN6NJb2P710
--> ssh-ed25519 svET/w f4JmsQWroGyV8CmGf+loOX9JdpF7m0b3voiACGy46iQ
-T2O+UrRpL9s5pWKZ47vziIRtciO3Auw47wvSH3TQKio
--> ssh-ed25519 S1eK8A AunjDz3h+0coZK06ZrD61YFdxeNJapyB1SZSu6xpUhs
-B95EuomuOyLT/lPI57OWRCUxCuEm7iHHvD+PH0h84l0
--> ssh-ed25519 4sgwqQ EZUR2LeFbBmS1M7IYu13xi4UW3Owj221q+sO/9QehWs
-dFP3iFB549CS/bkIIMwLl0K3YWiJYUtrZlz+ZSPAhtA
--> ssh-ed25519 CuqlhA 0/mH8NXC9xKiOkoyZZhw6xXSuMpUZegC9vf4UmicEjk
-yI9unLwD+0I51sEzxcRvL58BAQdG/h7BRV7MtVrQOGA
--> ssh-ed25519 HvFEmA TyEteAKJGh77sUsxt+CF35GouBrFftQH7jtoqGXHoVA
-p4Jw2ntaN33bCubDTpvX7PIXQ4xz/RQSzPNuxTxjSTI
--> ssh-ed25519 9GYwCg rUqmGpr7CGEzzPtaA2sXa91v6tgbxRV96cunCBskbUs
-uxq8zDYC0yXl+D4zW8p5zXxwdybkFndf5uizb4ocjZ8
--> ssh-ed25519 V2n9Rw K1NLZIXdoInaoom1HGgrjrf210QgVQ8qYiwuNqroyD0
-mRusMjjgcV75c6TK8UjB3uU1D+MQQWCDr+ss8WBOC3I
--> ssh-ed25519 VfYKTQ ktLl4bMWBW172w70uLAks3zrk6BUxi14iIsvK6vRH1M
-acMFg+GCcXEJjWX5XxtZwTVNu6EV2EJ11UO2LEXXt2c
--> ssh-ed25519 uqg2jw a64Vc+OuFabrOVfCOtSrDQxN2NSiPMB7w94exrsKFCY
-Hd6/+aKtHt6/0m+C5/EEmxfDrGr442DIO6TEkbQEn1g
--> ssh-ed25519 a0HhMw Z6n8zUTKBefeUc1JCxOdZQ4fv3l+uR1rBZUQP4IhTSk
-/WFvBhETc2QyPskbDTxoMS4IEXLPBMTqBzWRURPygT4
---- ZDAA87gLlFUx5qOzcpF5mDVPg6o7Hse/7brzFqIn+Gs
-���	]k��BmVTC����0��J�-
��8+�2����"*��׾�m5_�J~�U���|H�-
\ No newline at end of file
+-> ssh-ed25519 X+zqAA 2vThvLII6gEEDC9wrDyvRbi8jcW9y/gp28WYZ4ItU2Q
+plVtphehlxRSBjdvWlTIk0IH0blwU8/4UKFVXsllh7o
+-> ssh-ed25519 1nWE1Q 8k9Xip/3wL5ZKcgVWDkFNzenXYvrOmX93mirRxDUIkk
+8y6T63kv3GM8WyQrmzifrAjm9Cd4kmxxpVGwWiY/aaE
+-> ssh-ed25519 l7h2MQ hPw0fK/ExgCPDQbmGQz8a09F7jfbc340aRWlZ+n9h24
+YbEx4xvLReuAynBYITcs+NUrnMx7z46WDR5BuiOiUlo
+-> ssh-ed25519 BFt3Fg Ox46dCUMI+XxsqWCtIgDEOgX5b3NBWfQ41/sTyPsexM
+hXMy1NltIlIK5nqNFXfqZfNgiXhN7DNpSFZNh78x/xE
+-> ssh-ed25519 hhnUMw JtFDAxCx9NEM8I+xKKWMaTpmaRblb5Dmp8aDxipgPGM
++XOULPlgszCSedMrn+vYYiFvc6DG+KvR9GU1D+E5A6Y
+-> ssh-ed25519 Gwwkag MCtZ17ZNKtzKKGozKAh4ir6ULpYWVqDp/KeX4iX9ZmE
+XjaGPvb77UqIDr7IEt8ygaLEHWQKcz/OVDTNQqCOzvo
+-> ssh-ed25519 qaHa5g 51YhJFtEzL506DbW2LwqNoDiO23VClZanXZzHr0ruUY
+U+v5EFCrs+izNQ7C4SHvz7ijyo52WnvLJ7XcR/L8xGM
+-> ssh-ed25519 FG6Lew 6N4hGvqP5mxr1m4NzntkvyonIuJ1xkJOpNHgTpOSimY
+eg1Ao9GSGfzHOTgWnigu+ekgocSj6TPmN+ToJjZCD+8
+-> ssh-ed25519 UCdOEA W+eqV8ue2xUmlFnLcXq8RjJFaMzsk8M5hSPv6J+J3ks
+VrxmK7m8V8Ib+9kIerxzISzfRBu9fAK1f3ndKyinydY
+-> ssh-ed25519 aichPw DEZZu3JTAUPZVLnupuuXwHGaKTIzV/aNGJTmGTeBHB8
++zsdKaEnufTJ+6P30xzVXE6ZxVHA+vaeZr2wgrgwthI
+-> ssh-ed25519 PCrpYA gHGGNjL/KCxZY7y2inR5Qugo7XrmtTv8DEAZqZ2gYAM
+2FeCEctBgRK9XHGt8krPlZrMk3Arb0OCpK3MohqCLJQ
+-> ssh-ed25519 kElbzA J3o3iwCTuhl19qIzn4YBvWmI3YnhdU8xo8nMV/ieEFI
+xaopAZWvpzBbRgVvJ/3kDB9Jwwci6V6wj4eJCb5dP0Q
+-> ssh-ed25519 Ux2oFg SiDlMC9exm6qsRt9RP5cq4o0KzBT5juRVFokRJIBLDI
+leTJar9b3XjjbYEOo1cKTJo2c0nso8x59oib8s7rJ1A
+-> ssh-ed25519 EO5ObA hPMWpbOEIJQIDjjDMuT0CGxsAQJrC25GloE2TFOwqDA
+/CQPZTXPjdkpd98ZGeLpVqHxK4ylQ0aV1Ed5Q45JhC8
+-> ssh-ed25519 cQlmdQ NS2wklZU0GTnAWIYKMlFABdgQ8/HJIz9hcZHcF4b02A
+iD3QaSTsicCdgR2u76iGdvuUO3D5iNQiZxecNeb+sp8
+-> ssh-ed25519 xSWWeQ /NSwaPhPLz45qmFN0/4Tdt4f7Lj0mFdAizaS2AfPklI
+OhiPkOrNUEAI4uhV7jnExdk72WH8kdSypgtlTBhEt4I
+-> ssh-ed25519 svET/w JjYlKSmULA8iSIzkfORfT1Iw39YUz6aD6n/fdEOIcy8
+tOHWeR3cvgW2G+81Z1iGMKgM17cE3RV4l5cMp2ZgUjA
+-> ssh-ed25519 S1eK8A 5OLjU6WoQyCS6DC5e/01FlltugQffbE6I/H+8r8i+Vo
+I2hzqE4m90MqM3LTA/PUCQfy/h04Tho+x6xyEvEg344
+-> ssh-ed25519 4sgwqQ 1x7GD4274q4dA7RO972p6WQgifmSNp+pP+Ux2kvDh2Q
+1ruiBSg/+eyX4HI9xwSCBygozZrC84L/Y4zLXiUoyjQ
+-> ssh-ed25519 CuqlhA 3qkQnta+Ka/C9Ds5E1lXlerqmAOqCzOxUCGOcron5TM
+2pOW+fCYHJZwNlhw7lAmJHPRz0RAKYOSYX1DxGhkI8o
+-> ssh-ed25519 HvFEmA fV1/rEMdoUkJ1w+Y1LsDZTHsPbFr1N5MqVVMEUUupHk
+bror9RUtx4fWkSK3KbHtSKqP1uFF8vrANTT1pdVL3V0
+-> ssh-ed25519 9GYwCg 8NfYUqopF/2YEYwJtnCuD5bsXxteIT9h2mN+wlFuKlA
+jb8JXKsn8NPOv1i02ooUXHO4VpYxr58A++K/6Aw+Vzs
+-> ssh-ed25519 VfYKTQ 4ynHge98NPmnOxahl1OsWXLGyLR4UrDlXlbIK5TDBDE
+dqucO5Fhdo7h6Zu1owPoVxoHZ6I4s8/7I7whsT+bLsk
+-> ssh-ed25519 uqg2jw 1kM9t8TihvELeOBEeGm3YBaHQhaDgP2qsr1lTaqqGmI
++3OnNSEVN5JlTFiYn0q0F60VDb19GYvQwVza/8kZpYU
+-> ssh-ed25519 a0HhMw MCS+vUtkuaXkO0GQMngs9+xvcsacBwF8BD534H/zAHI
+D6aZZBz7ZOUOTJ8GVEv0xhLxovxoHFpRxxesMDu57Tc
+--- UdKGDgN1b7SHqxZ9Z4hyd49Kmhj6axbph5NoxHeq1/E
+�|�#�f�7��C��Y��<2��Q͏-�]Fmi7���RM.G�
f\��ib`�q�\�h�;RI
\ No newline at end of file
diff --git a/secrets/tailscale-authKey.age b/secrets/tailscale-authKey.age
index 918efa008835c94e6231aba8ebe9aa520f6aeb5a..1b83e3884c6100f3ab33fef003d8dd3fa1cc0760 100644
GIT binary patch
delta 957
zcmbQjF@<A-PJM`rTaZy%xOc8;u481OTbP-?iDy+xKt+*XV5Xb1iFs0LVV049rDcJK
zD_3D!x^YrPW{R<SSfqKjVVR#rZn$HvpIMM^ut`akv42UCg-KAEmvLoLF_*5LLUD11
zZfc5=si~o*LXLTck#C?vwo{3LuXjMMfq`j8wqu29q+41<X1=y}RG?8+QDvT4rB6vx
zfn%^yp?QS?m$|2RX+WiMcv?lGV`xEcsAoxeWJyq^L2*%rS*ELTj<cVKzn4LBhD%WT
z#E;_PX374M6(ynCf$mXJxt<m&VLl~=iJ|W1MI~hhj&2s2&dG*mB@vOX72(-jE}>3t
zWxkoAd5+1Z$wsc3kyYAd#=!<9>Aube<sOBBt{LG~2HpXYJ`tXi;~B-nOF|6_L$i%c
zQw&m^qlyd*6Z4CzEK2-54cshC%_9u`E5aOo!%PbEvO+w$46|IawLQ#@QalUtb4!ZL
zixbVgTuZd`%R{{)yev!1d<s(C3=NW915=78pJf!Ucgf54406gzbuUPZDtB=SFphHf
z^DOl;4RX#)H4H8-N%1!}@D9px*ER^{Dh#mDjtt2%EC`HBE-ox~$@cQKO!G?3%J6XZ
zEO#@`EUPNYD9lXDa&h)Vj{%P|H`iQ81;@gCpOV~^;@qI1L}%xKWViZElaf+@AA^Xr
zAakdb{2X@|->k^MsGLAIN3P09^Kw7e41Lc+$3zn^i~JPtOxH{kX9L5m)C@~M56=iM
zBbO8(|9l^#Y;@~N3)79V$`t|wLj20hGh8B)LsQLybMvw?eDd`ji+uBoEpo$(3nP5<
z>YWUn(p^k_3=Fsuoh(w)-P29<)ATDsGn2|aQ!^d298I&lipngj3_UH)D>Ga&N}T+C
z0x*1+XyB3ITdv>~Uh40i5)@V9?^EVcU{(^Q9q1FBR21mrZ|3C^oD-Q<kY8*T>6{-B
zQOs53>zbbzT2Y^y>8<aXmtIy-9GYPko?GP<TpHnG8tj|u<n0|065v`IY?jWYtE;Qv
zQQ_(87#vxW<ysX`TH>f}?wyokYEc#86l&~hoNbg}X%tY9R~C`w;pWSw+w8bEpvL~$
z<GHItm&HG-5j{0YYx|v9*G(ATML3B`bNfr&Z_46j%DD2_#64)?qAH%eiyvnynk01>
s9-5Tn$F^(5b-SnM#SM(Ja-xOabpJ^^ec8dT%){niRNBtASKsym0GxqF1ONa4

delta 957
zcmbQjF@<A-PJObGbBKASZ=z|4M@eO6nR8`&a#~JeRE}?+Sz%CVrddi-g+Xa?MpcEY
z3727ze`SHcM}U5Dp?-N)m61!RpJi&Wi)D6hm7Ae~aiL$KcSwMnZ=|nzGMBEMLUD11
zZfc5=si~o*LXLTck#C@ag{Nzkr&~xtnYK@OrLkF2v71?GM1^}qZgy@`PHthYi@8fh
zZiKOir%RPDS5lIPtA0jFU{bnsu1|JkP_avinR$RyW>H0?i?2nPNr8`<n{QB+XK_{W
z#E;_PCY9+SMlN|-;fa~qd6{Kq`Ppe6DWyq88KIHhnUTq^C8?Pqfr-V*7H*+jg=LOT
zUYP*}-YNdtDV~9WnT2I}5vBSCfr(Y+l|F{asosX6<;D4Ku0?^9;~B-nJ)JGxe9iJL
z-A$4`!?m+aOgzg&a!Wi6vXe~=LtO(boHLD5^m9UjQ{D5qQap;Yqx`D!42!~pL!H8$
zlFCX-lFhuF4Gla~T(h#g^)uXkd>wN=ocsbOpJf!U&o0vs4@~ooD9R{|G|)FME6Mc<
z_csiyN-`|9@Cq|GcJ|KB_6*K1Pc|&(%Ja@Gu*e8Yb=OZSC@VC|s_^o0iAr`UFNkut
zv`jM0a(A)Js7wm;$Z|75j{%P|H`iQ8g}mY<BeR^)0KX!G)Z*gGY_ED>(*l=#OTSQ4
zGv_n|)08O3Fi$6s!ix0VY%UW^x3b`5PqWYv<5cgoVrRopmy8UvOw$kpbEk?l50g-{
zGz-_nDwlMlbad-V3)79V$`yRv^$p9S!c7uQEIhru4gJlN)3Urn-Ac7fEi#Nk19Hp@
z>pfll{XDY$f&;lc4Z@N$vO+5=`~wrqEy7AN4Z=OLD@sd?oYOKqom`EbQVc>8D=N(k
z97EBqOEmDv@GV#H2-P=D*3b70&-8Wk%F8RrFZYWmtqgOv2*~j-GYmG1F!#zVwQ#d6
z4D{qG@bWeb(~hXO@GuK3G>`Ih^l>#d%8IhE&`#7(PEK+TNG%L>cFHk|$PO~#($&>f
z@ODdgck(qa%heBaN(l_st_t%pDsn5TOb&7`D2_}iDT(s;@eU3!GRn;7I={-rzKT~Z
zM$3HBt4|wtW|Yjoc78%Z^)IG16Xd7<xH*q2?wXYZkI=1P4iko7A1~CEWvnnadfQ}m
tV7Z%Y(buZQ%6X9iyLfwgXX@s=9glR_vPI?M6}HUxccdpV+TA#o3;^DZMHB!4

diff --git a/secrets/vaultwarden-admin-pwd.age b/secrets/vaultwarden-admin-pwd.age
index c747a63f0d00836c4e81aaae5aa826384fd52033..19be90bc361a83446d643f82a854371376806f4f 100644
GIT binary patch
delta 613
zcmbQqI+JyRPQ8VpQMh46YJh&Fad}~OQEGNsiC>aqm}hc{Nt#nisf&kxVT6xiaY2D$
zK9^5!q=COjL`i6JvRimTN>y@3vSmhDNI;;cds(taRHb{GVY0tbaY%@HK9{bYLUD11
zZfc5=si~o*LTO>TQC7KvZ+S&%d9l7hT2fk}iBVx%wwt%Fhm&EkPj+fyaAl-<p>vW;
zL0NH>Wsz$(mqlomn^&%jcTtI-OKMU;L1}oBX;NZJT9|pbWk6(dL6)nfuYrDYL{(P)
z#E;_jr6o?4`96ULUM^8(>BXj&si8hz0aZqxW|<yl0g-N=X)Xr7`JsLhKJLj}NjU*w
zA+CX?xq)uZQ6<h{m7W3R8Ty$4=@o`4CQj~Y;gyCyMsA62Mn&aZy1KdwX>Lv>CKk@x
z`939PZi&T4q3Pc4Io@XBUU?=t8Rq2?m0o7`S>|p=kpV`ITz@t@ua8!$nXMzUM_Y35
zLj@8428#om*p)Yh>M&*8XIpSS{^Tq<ZkLyDY92n*=C4iMa5(tg#ph2V%_Di{do8yN
za_zZ3<>1<Byk~C*7>K{$r}l1Lk=SS5voEX!I3GF1&uKn9*L6PMF|8IS|Jc`@kBvMJ
z7+&73!c@O}yZXwoFohixP6%qL)J6wISWUXwaQyAf3s3X;CE8>T`0}()s=e*2S=lJc
z94VK*Ci2EYLA&%lcTx|{d^LUPGnTr~9esCf4R+su?m9<qS6*Y1kizSyPbMe%%rE^F
zAhtr+iRlw#MN*vn>yJOSn#`EXcl}7#hBYRp#{~VD-~H|h6lvD|d&2%AYrsd#ezE^7
Km61OUqO<@I<ngNj

delta 613
zcmbQqI+JyRPQ8n#bA@kWL4diZe@VKNubXdBl52RbNw8<Jab<8;MuCxGc42t7epabb
zIag>_WQJ#UnzOb~W|Y5KnWINZdRSm(dRU}Kd3JedxOru;fpcC}h-qp@D3`9CLUD11
zZfc5=si~o*LTO>TQC7J^l4puXR#>@Hre&h3hfkiFo11n?iI1VNi=l~WZcs)*qH%^_
zazt86LAj$NmrssIVxd`3Sw)IVVU<O0N~A%kxp#U-p}$##S7K^Fo_A2WN3o@aacHr{
z#E;_jnHC;thWcg}u8ARG1!<0c#x7CGj*e9(`M&1PuHmU6;iX2YmPH|6#_k4OfyU)2
z-UWt!VVM@r0S4JYxhc6p6`rMjp3X_eiO$KPmH|nnQ5FGad5Ps*y1KdwW)_)Mp2nHp
z#umOsmO&AQKE9T@t|=AfQN`(n0lAr}DMe28-iayY>E@-$TrS#``p4=v_zBH*x!L5V
zcR$shqxtBZorP+C>oSxwr5^<^-e9-TuJrIj{=ln~{j;~sDAU^hR?IHnYs%rp1(T))
zHGe8p{#3dCQ03n#x7UOly?h?dWS@Ka+TR=N5|r{(&mWmqI4i{P*2{wpDv8D`vbXDs
zIzCy&JFDK(<m=bK@N}_kZwA5E-|yI$J-=Qhdd>UVzvcBTbFa>ba#8ueLGa?~#3doN
zza`u>EHAjao@<Yhocz{xwfu339Sd3&Ecf?F%@S!#J(Yg2;d#02&C}*xN4hp0ICpUO
z-x+OXeOr@XWKIe`RI(^;eq;N8`TB%eCl;<xZ};1wQ>85wE|R}}^P7y)lYKFFV`@Gg
Ly?W%!<|_dJ!V&qV

diff --git a/secrets/watchtower-secrets.age b/secrets/watchtower-secrets.age
index 8839508..288f45c 100644
--- a/secrets/watchtower-secrets.age
+++ b/secrets/watchtower-secrets.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 UCdOEA 6g+N3SqaDTJH3JWUhE2l1GIrGbaQodwjnmAcPVWs4j8
-3OfHh5hV7P40GvUYHuPL6g2FGTFMo1XHJLbqkBepKRQ
--> ssh-ed25519 uqg2jw uSjMpcazqzn5XbSamA/7TK2BgMr4cBsdIEO0GqrPqG4
-ekx5teNzNCRmGacq8i37dicNWKf24Xuq72N4VfV9obI
--> ssh-ed25519 a0HhMw FVC95zIPJWEUKFjieClSi7++ReomvQJ14hZyFpifFyw
-0/XFqI1PI1ea0rTzGckIZL9SjCoviConYKLz5z8Vbfg
---- 9oO3EXu8z2zAfb17KYGZW9F294A7V07onShpd341gVo
-2�Y��?VЭ"2�<b��ә׌����u�K���SV�2X���
A���Ϝ�^�7�jmO��KR}
��#�h��W �Mf��I;?��0�@s&��F].-6�F������׺TRO`J��Δ���SڝNzZ/
\ No newline at end of file
+-> ssh-ed25519 UCdOEA s0VRkGSGQisQ+TeOG5W9umxy1yJUeDw4slLB3NT/HR0
+OmLGE0sRRENGUmuDbWoWVSQJ7hvkXBF/EHcLXKLT5QE
+-> ssh-ed25519 uqg2jw 00WGzss9nmdYEaW7i375nTCvGFhZXaJFVZ6lv2cmaFU
+0u0pz9AwW7Xst+wc+JddSR6IaB4/FPfaLbPhrRM3BFU
+-> ssh-ed25519 a0HhMw Jwk7L2pH4wWw/KUFUgmQrTopPm/vLH+Qo14W8ULMnlQ
+E3qzJRrcXrRCOJEdEfiXE0vfJX3SaHx43s2ge9QAin8
+--- gt8qncg+WRrBOkEYbrzC9pMipfW6oteoE9LlMrx82aw
+�͋��k�y4<pVn�I���u�D9=���,Ʌ�]�K-����m��TF<�"jk>�3ӛT�	�Iy�s8���[�Go�@$�䒶�0���,i{�3�.N�埁��{�؏d��^W��Wܕ2ExM:�Υ8ܖ��gI�W�M�G
\ No newline at end of file
diff --git a/secrets/zigbee2mqtt-password.age b/secrets/zigbee2mqtt-password.age
index 6e98682..50001fc 100644
--- a/secrets/zigbee2mqtt-password.age
+++ b/secrets/zigbee2mqtt-password.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 VfYKTQ +hcBAbQKgyQQ57t03q7EEdnwwMPfopPAA7dQebf/3Bw
-DdUak+jCI4ZvQhSpRWhuw4AQvOi73aS2RMLATcQeEag
--> ssh-ed25519 uqg2jw Ige4LXJl6J9S2hdCDjEggTGHplmaMizgY+nFEG0Cezs
-BHXJkoPYbkupFAE/5YywG+7VVOZrfDjOqFymR0iJtH4
--> ssh-ed25519 a0HhMw ZupYdXGzHK0d+AqvQ/ymaFeR5tiJ7j3G84bjlIhGNxs
-ebgU0dm+Spet+zcaPJhzpiRi4q8tHEn0vKLM/Bf/zXQ
---- nfewyi+9+pxaWUxtMIE2FwieWodTgFirvK0YB1dZSyY
-t8x���g��ڇ\.�w������K��,�2䕇��`9/=e!Dn)*�i˕ڱ��Lc+6�LS%��.r�����pY}�
\ No newline at end of file
+-> ssh-ed25519 VfYKTQ NlypNUJ37RmNppt+vQevZSu3IpVA4loSXM3ZzWilBVM
+YxD0+1QGh871/zqd6yz2Td5w0k4wuQ4FJrAx72T13rs
+-> ssh-ed25519 uqg2jw Ot2C0+7n0TImRN9hKfHvPyTKAhQULb/vxd0A+0VIHDg
+npr4YsrnFXEbTkS2s4XGpqDFVl3zRKtU+8MiWgd21Ew
+-> ssh-ed25519 a0HhMw YGk4ewWdNx+/6CgIphl+naZhf026F3vj9BbT3UrGD10
+Q8bMguDcKzZorDoVkqCCxSy5Lh8aVgKxNwVoLAm1OQQ
+--- gtoAJ6S1idQ70lHQjqLoUidXmD4XOBTsZEQuENoG7BQ
+g����AʼnݦGe�GNs�w�����6�uzw��w�+&b�wEo6Nh��Ι�њğ|��`�mg�C!0���AևZO
\ No newline at end of file

From 59181d64b90273498b500d6aeeeeed956bee46a6 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Thu, 26 Mar 2026 22:59:39 +0100
Subject: [PATCH 3/3] Set permission to actual secrets

---
 hosts/actual/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/actual/default.nix b/hosts/actual/default.nix
index 3b0a2e5..f0ebb8e 100644
--- a/hosts/actual/default.nix
+++ b/hosts/actual/default.nix
@@ -11,6 +11,9 @@ in
   age.secrets = {
     actual-openid-client-secret = {
       file = ../../secrets/actual-openid-client-secret.age;
+      owner = "actual";
+      group = "actual";
+      mode = "0400";
     };
   };