diff --git a/secrets/dns_certs.secret.age b/secrets/dns_certs.secret.age
index 0e66521..8d0c3c0 100644
Binary files a/secrets/dns_certs.secret.age and b/secrets/dns_certs.secret.age differ
diff --git a/secrets/dns_dnskeys.conf.age b/secrets/dns_dnskeys.conf.age
index 1734b39..72af8a5 100644
--- a/secrets/dns_dnskeys.conf.age
+++ b/secrets/dns_dnskeys.conf.age
@@ -1,16 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA DfzcqndqsUzYetw/gJnMuobUz5YZVyzR+DsAS4CUtys
-hbOXs5Zbw1QeK1QTAryWL6EoTi0tmD2iYd5ACC+nr1g
--> ssh-ed25519 rIwlvw YOBEFhjODvCw5xqtHqaAWTelyYpfpSr0krCllsJKT1M
-Mi9iUBxJ+OZ3p6YonykQ99RbleHllIwT0nlpoFm3yDw
--> ssh-ed25519 q8eJgg E1wagIqjBP/Galo1em3UOYk3ziAVKCmEaucpF9ZQ51Y
-/RhPMgC10KHBpafEBsFanjIlwSZD+qYJWVDXJXh/Lm4
--> ssh-ed25519 pBdJmw TCeREFpI+UVJ8YaewGknyZrxCmmsUKZxaZFIYemFv1A
-C5qOJGusg88QTKeOCsKBudO2z7X7sfb665K/YpRS8MI
--> ssh-ed25519 v2Y09A 3SP4nhLYwjyKwLp/KREWDZwhhmXRSnTr9i4v0XLkn0o
-xZ6aQO+/IrF9UVA3trxCDUep74l+bLjFND4tO3v8cP0
--> t4=-grease E> v&
-sSFNyGaZbRSZ7AG3Y2cV13tzaOmvI2mdeBgzgjStetXpGKZdw3gVIVILIzr4YW0U
-jrxRB4NFYUrqM79G6YVE+VZG
---- I9HCyyMZFaBl1KBelEpaNI3ANfF6GiY7CtkZDMqILJU
-u�ל�P�\Ɉ9)l�!ڛ�7;�^u~R�����7c���SPȲ�$�,&)�[O�<�d�=<�ac�[�!��e@�0WeM���d�2��b�H¦�y>��^�'��=&�j���Ń..�ch@͕_�f8T�;<�A^
\ No newline at end of file
+-> ssh-ed25519 V1pwNA +XdmsmDKDUcu4JbZa+GIB7bXNeijvcjPCX3cl8qtIko
+ojl/wN8Z94wcnpjFqzWucxjb4Cj1aw/T72Sn6HImQRc
+-> ssh-ed25519 rIwlvw EhWuRFm8qmsI//N40Ak3qEBibsG6FtalDu7a2ByBRDs
++alf69rCF58siskxLsyH1j/TY5Abuzety737QxVea7Q
+-> ssh-ed25519 q8eJgg vpheYQurSMI6K0cFUzlRgTCgSh6XVXnfihC5TCpOTAk
+EdABzrQzke1aMRo8p8EwufS6hc1rEyyyQ/Z4qP4Vq/E
+-> ssh-ed25519 pBdJmw tiQopXd0eWJmGG8w58DGjRgrAp8rKVzg1rWsS+MLkFA
+CaZ+uAQy3s5P714hIlNlnJ4xLgD0qJtMf9575tyjDL0
+-> ssh-ed25519 v2Y09A 7AJTfw+VR9xfpDBNV1uSoBNVThyIjlF9UBHFcJksnm8
+p0Q0xlexTBsnib54A2bWgn+0j9IZ9spHcrAXz6jsHRo
+-> h-grease \ F&PIoI^Q
+JKo0JA
+--- lNEh0Ik3wmehWp/RGexGRY83HcDQ2/p7b0IS/oqozOs
+�׼��P�Z�G��	:>��������`U�/�o'���H��8;<����Mfs���O eY����
�d���D: գ�Ǧ)���A�/
+�g�CD/��N�V�J�Y�9��L$QlFL���O~�?=���3��l�>�9kw
\ No newline at end of file
diff --git a/secrets/gitlab/db.age b/secrets/gitlab/db.age
index ad9ca7c..0c20bec 100644
Binary files a/secrets/gitlab/db.age and b/secrets/gitlab/db.age differ
diff --git a/secrets/gitlab/db_pw.age b/secrets/gitlab/db_pw.age
index 783382c..f687f74 100644
--- a/secrets/gitlab/db_pw.age
+++ b/secrets/gitlab/db_pw.age
@@ -1,14 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA oDDXva3pRMe3CSRikmVGGdpubZjpP956O4JV4TqPJzc
-Q/eRz6DvACToZeKn6Bs+lYgyQgqS+0hQjrLJLZ2XtWI
--> ssh-ed25519 rIwlvw xXFVnFqt+dHIMhgfGDBWth5/a0Qab5+M8frRhRaOJVA
-+173cEuzFlJwvpZvzeKgieuxfdvUZ6EWwyekk1B2V1o
--> ssh-ed25519 q8eJgg pZ/mB69ljGXCZjHMzKAOYZhX7L3xfsYoStZIkFIPQlc
-zwq0IkahfA9ZwlzaiLPWsxvINE4v9PMERewxVePN3Wg
--> {&QI5p-grease ry3`{sn& u! ;=
-
---- w3F7Hf1hhITmzVfUpt7+qHBQ6chuYJceiyTetjZOiWk
-��N�L4�WU��H�G͘��^��d+Ǻ
-b���
-�ses͕���|���,S�6Lj\K*%�󮺜^�9T��
-q=p��K#��IL�(Q�����.Z�&��U�z�O�k��/�6<�E-���d�������)Q�qߺ\Q���7=���0z��-۲�^
\ No newline at end of file
+-> ssh-ed25519 V1pwNA SLyqJZr5f8MMO/bt6/EJBqo5ttdRfDwKah3WyebdN1o
+YfDtmgQXMXqr5xLyZq6hW24ximzoOmAWzRXfyLd6uc4
+-> ssh-ed25519 rIwlvw BQGsjpzKjQP1Dw+7aQ+o7sStn37GkOY1g/vtnjMtMAk
+bVZVqd/KuyBvNB038q5iplLBbdDsKACPmcypDKkCjm4
+-> ssh-ed25519 q8eJgg FmX4ccfGCb6pO+D2I2JNWTwY6YhnWElxHWpMvzDSCkU
+nGdjyJNPRkSA0G0VTOhgxPpW7raqvPyJzsZH5Gh77cI
+-> gm61-grease .qRHg X{R[|1r O#:So9>$ HvCVm
+EomX1EI
+--- tsDlkO7xbQAqgLcmz6v2hUUsMN8EVZ7VWtHNmSTXgfg
+�����#��T!�h�P�y/.Ν�uؐ";$݄	����[�/p��,���}�Xc:��a��R��8[7CCoGn�����<�:�*�J�{�����?���"��hE������.� ���-Oei$
�$HTf��8���iP��(��[E	B��t=��I�2�����
\ No newline at end of file
diff --git a/secrets/gitlab/pw.age b/secrets/gitlab/pw.age
index 9780adc..4127f18 100644
Binary files a/secrets/gitlab/pw.age and b/secrets/gitlab/pw.age differ
diff --git a/secrets/ldap/pw.age b/secrets/ldap/pw.age
new file mode 100644
index 0000000..b0f0e49
--- /dev/null
+++ b/secrets/ldap/pw.age
@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> ssh-ed25519 V1pwNA AX0kN3epMM74LV5rSkk9YSmkjEBVcpOHgMsiD4lybB8
+3wPFbon7wHTBI67xENlyXrvNobeFH391lIu6Mtz57QE
+-> ssh-ed25519 rIwlvw +SiD/4Z54cHwpfrwZY2TDTZdbnriUYG0tsnVeL1OnBs
+ycXT27Ghr9XVq8lVPfbFwrahF6cPjRL0zYQLNMsBjmk
+-> ssh-ed25519 q8eJgg lu1vgV7TlY0F9d7YeWrBDCX18tBWWSxvpa4k91NNXSE
+BEPBLvzttBLxsj7RoKUCrs2ET6zJiN0XXdaLdJ/0EHQ
+-> ssh-ed25519 DVzSig LmuwjlScGcud/rcBTzHIF2NzqpudSq4FknGz+EKM830
+BxWb3k53smGaCC7ZgIC9nj2qTpHXRPfqVHkHr5jb9fw
+-> ssh-ed25519 IzAMqA HtoBkw5Kw+3Q0No18g6fKeYkyYp2CNvCiKLOYchZuy4
+JROp4CYz4Iu0QZ4lnzJdYwwqlGeTuKRSQGzIhEEo+bo
+-> F-grease 2~ G1v
+amft7S+//HEUloHGXN6JZkMwTH+93wF/MqmJkqz+03nK1DCxuV5LwePQfMS1pSJi
+srcTmQG8A7WcpOvUj21ljato1kPgjfAVVeD2RC+k4gurgmY21Pf+mTs10qT0AmY2
+oO9l
+--- eUA2j4lvZQfuMA9ugmeGBosgJDDlJVbVE09OUSxV9HA
+^)' ��QN���5!r���i]���in�(8��U��~!�8(|�&_q���m
+! �I>�3���5	�����Qc�'�#�A�����W
��h�^l|S��v�9�Q��g;���n�4��z�U������։�����]�=Ѱ�_<Rr���ʺC���ؕ�P
\ No newline at end of file
diff --git a/secrets/ldap/self_service.age b/secrets/ldap/self_service.age
new file mode 100644
index 0000000..f367729
Binary files /dev/null and b/secrets/ldap/self_service.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 115947d..3115cbb 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -39,13 +39,22 @@ let
     vigil
   ];
 
-  # these need dns stuff
-  webservers = [
-    galatea
+  ldap = [
+    # only here as a tmp basis
     optimus
     kitt
   ];
 
+  # these need dns stuff
+  webservers = [
+    # ULFM
+    galatea
+    # Games
+    optimus
+  ]
+  # ldap servers are web facing
+  ++ ldap;
+
 in
 {
   # nix run github:ryantm/agenix -- -e secret1.age
@@ -60,4 +69,8 @@ in
   "gitlab/db.age".publicKeys = users ++ [glados];
   "gitlab/db_pw.age".publicKeys = users ++ [glados];
 
+  # for ldap
+  "ldap/pw.age".publicKeys = users ++ ldap;
+  "ldap/self_service.age".publicKeys = users ++ ldap;
+
 }
\ No newline at end of file
diff --git a/secrets/stream_ulfm.age b/secrets/stream_ulfm.age
index e12f340..34e2ab5 100644
Binary files a/secrets/stream_ulfm.age and b/secrets/stream_ulfm.age differ