feat: got teh wing working

its not 100% ready for prod yet as there is no way to transfer from ptero yet

applications/pelican/Notes.md

@@ -0,0 +1,16 @@
+# Notes on Pelican
+
+## Panel
+
+* ``pelican-install`` is in env that can be used to isntall
+* then go to ``panel-address.skynet.ie/installer`` to finish the setup  
+
+## Wing
+
+In the config the ssl must be set as so:
+```yaml
+  ssl:
+    enabled: true
+    cert: /var/lib/acme/skynet/fullchain.pem
+    key: /var/lib/acme/skynet/key.pem
+```

applications/pelican/nginx.nix

@@ -0,0 +1,119 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
+  appUser = "nginx";
+  name = "panel";
+  module = "pelican-panel";
+  cfg = config.modules.nginx.${name};
+  serverName = "${name}.<DOMAIN NAME>";
+  dataDir = "/var/www/pelican/public";
+  port = 443;
+in {
+  options.modules.nginx.${name} = {
+    enable = mkEnableOption "Enable ${name}";
+  };
+
+  config = mkIf cfg.enable {
+    modules.${module}.enable = true;
+    networking.firewall.allowedTCPPorts = [port];
+
+    services.phpfpm.pools.${appUser} = {
+      user = appUser;
+      settings = {
+        "listen.owner" = appUser;
+        "listen.group" = appUser;
+        "listen.mode" = "0600";
+        "pm" = "dynamic";
+        "pm.max_children" = 75;
+        "pm.start_servers" = 10;
+        "pm.min_spare_servers" = 5;
+        "pm.max_spare_servers" = 20;
+        "pm.max_requests" = 500;
+        "catch_workers_output" = 1;
+      };
+    };
+
+    services.nginx.virtualHosts."${serverName}" = {
+      root = "${dataDir}";
+      listen = [
+        {
+          inherit port;
+          addr = "0.0.0.0";
+          ssl = true;
+        }
+      ];
+
+      forceSSL = true;
+      enableACME = true;
+
+      extraConfig = ''
+        index index.html index.htm index.php;
+        charset utf-8;
+
+        access_log off;
+        error_log  /var/log/nginx/pelican.app-error.log error;
+
+        client_max_body_size 100m;
+        client_body_timeout 120s;
+
+        sendfile off;
+
+        ssl_session_cache shared:SSL:10m;
+        ssl_protocols TLSv1.2 TLSv1.3;
+        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
+        ssl_prefer_server_ciphers on;
+
+        add_header X-Content-Type-Options nosniff;
+        add_header X-XSS-Protection "1; mode=block";
+        add_header X-Robots-Tag none;
+        add_header Content-Security-Policy "frame-ancestors 'self'";
+        add_header X-Frame-Options DENY;
+        add_header Referrer-Policy same-origin;
+      '';
+
+      locations = {
+        "/" = {
+          extraConfig = ''
+            try_files $uri $uri/ /index.php?$query_string;
+          '';
+        };
+
+        "/favicon.ico".extraConfig = ''
+          access_log off;
+          log_not_found off;
+        '';
+
+        "/robots.txt".extraConfig = ''
+          access_log off;
+          log_not_found off;
+        '';
+
+        "~ \\.php$" = {
+          extraConfig = ''
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            fastcgi_pass unix:${config.services.phpfpm.pools.${appUser}.socket};
+            fastcgi_index index.php;
+            include ${config.services.nginx.package}/conf/fastcgi_params;
+            fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param HTTP_PROXY "";
+            fastcgi_intercept_errors off;
+            fastcgi_buffer_size 16k;
+            fastcgi_buffers 4 16k;
+            fastcgi_connect_timeout 300;
+            fastcgi_send_timeout 300;
+            fastcgi_read_timeout 300;
+          '';
+        };
+
+        "~ /\\.ht".extraConfig = ''
+          deny all;
+        '';
+      };
+    };
+  };
+}

applications/pelican/panel/panel.nix

@@ -0,0 +1,75 @@
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+with lib; let
+  cfg = config.modules.pelican-panel;
+  dir = "/var/www/pelican";
+in {
+  options = {
+    modules.pelican-panel = {
+      enable = mkEnableOption "Pelican Panel";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [
+      pkgs.curl
+      pkgs.gnutar
+      pkgs.unzip
+      pkgs.php83
+      pkgs.php83Packages.composer
+      pkgs.php83Extensions.gd
+      pkgs.php83Extensions.mysqli
+      pkgs.php83Extensions.mbstring
+      pkgs.php83Extensions.bcmath
+      pkgs.php83Extensions.xml
+      pkgs.php83Extensions.curl
+      pkgs.php83Extensions.zip
+      pkgs.php83Extensions.intl
+      pkgs.php83Extensions.sqlite3
+      (import ./pelican-install.nix {
+        inherit pkgs;
+        inherit dir;
+      })
+      (import ./pelican-update.nix {
+        inherit pkgs;
+        inherit dir;
+      })
+    ];
+
+    systemd.timers."pelican-cron" = {
+      wantedBy = ["timers.target"];
+      timerConfig = {
+        OnBootSec = "5m";
+        OnUnitActiveSec = "1m";
+        Unit = "pelican-cron.service";
+      };
+    };
+
+    systemd.services."pelican-cron" = {
+      script = ''
+        ${pkgs.php83}/bin/php ${dir}/artisan schedule:run >> /dev/null 2>&1
+      '';
+      serviceConfig = {
+        Type = "oneshot";
+      };
+    };
+
+    systemd.services.pelican-queue = {
+      wantedBy = ["multi-user.target"];
+      serviceConfig = {
+        User = "nginx";
+        Group = "nginx";
+        Restart = "always";
+        ExecStart = "${pkgs.php83}/bin/php ${dir}/artisan queue:work --tries=3";
+        startLimitInterval = 180;
+        startLimitBurst = 30;
+        RestartSec = "5";
+      };
+    };
+  };
+}

applications/pelican/pelican-panel-install.nix

@@ -0,0 +1,30 @@
+{
+  pkgs,
+  dir,
+}:
+pkgs.writeShellScriptBin "pelican-install" ''
+  DIR=${dir}
+
+  echo "Installing Pelican panel to $DIR ..."
+  if [ -d $DIR ]; then
+    echo "Directory $DIR already exists, exiting"
+    exit 1
+  fi
+  echo "Creating directory ..."
+  mkdir -p $DIR
+  cd $DIR
+
+  echo "Downloading Pelican panel ..."
+  curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz | tar -xzv
+  echo "Installing Pelican panel using composer ..."
+  yes | composer install --no-dev --optimize-autoloader
+
+  echo "Setting up the environment ..."
+  yes "" | php artisan p:environment:setup
+
+  echo "Setting permissions ..."
+  chmod -R 755 storage/* bootstrap/cache/
+  chown -R nginx:acme $DIR
+
+  echo "Pelican panel installed successfully"
+''

applications/pelican/pelican-panel-update.nix

@@ -0,0 +1,48 @@
+{
+  pkgs,
+  dir,
+}:
+pkgs.writeShellScriptBin "pelican-update" ''
+  DIR=${dir}
+
+  echo "Updateing Pelican panel in $DIR ..."
+  if [ -d $DIR ]; then
+    echo "Directory $DIR found, entering maintenance mode ..."
+  else
+    echo "Directory $DIR does not exist, exiting"
+    exit 1
+  fi
+
+  cd $DIR
+  php artisan down
+
+  echo "Downloading Pelican panel update ..."
+  curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz | tar -xzv
+
+  echo "Setting permissions ..."
+  chmod -R 755 storage/* bootstrap/cache
+
+  echo "Updating Pelican panel using composer ..."
+  yes | composer install --no-dev --optimize-autoloader
+
+  echo "Clearing compiled template cache ..."
+  php artisan view:clear
+  php artisan config:clear
+
+  echo "Optimizing Pelican panel ..."
+  php artisan filament:optimize
+
+  echo "Updating the database ..."
+  php artisan migrate --seed --force
+
+  echo "Setting permissions ..."
+  chown -R nginx:acme $DIR
+
+  echo "Restart Pelican queue service ..."
+  systemctl restart pelican-queue.service
+
+  echo "Exiting maintenance mode ..."
+  php artisan up
+
+  echo "Pelican panel updated successfully"
+''

applications/pelican/pelican-wing-package.nix

@@ -0,0 +1,24 @@
+{
+  stdenv,
+  lib,
+  fetchurl,
+  docker,
+  gnutar,
+}:
+stdenv.mkDerivation rec {
+  pname = "pelican-wings";
+  version = "v1.0.0-beta6";
+
+  src = fetchurl {
+    url = "https://github.com/pelican-dev/wings/releases/download/${version}/wings_linux_amd64";
+    hash = "sha256-a2T4BjqS8Hy5YqwDEJpbvGqqsrVjdRhxvJLgk3MCXag=";
+  };
+
+  buildInputs = [docker gnutar];
+
+  phases = ["installPhase"];
+
+  installPhase = ''
+    install -D $src $out/bin/wings
+  '';
+}

applications/pelican/pelican.nix

@@ -0,0 +1,279 @@
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+with lib; let
+  name = "pelican";
+  cfg = config.services.skynet."${name}";
+  php_pool = name;
+  domain_panel = "${cfg.panel.domain.sub}.${cfg.panel.domain.base}.${cfg.panel.domain.tld}";
+in {
+  imports = [
+  ];
+
+  options.services.skynet."${name}" = {
+    panel = {
+      enable = mkEnableOption "Pelican Panel";
+
+      dir = mkOption {
+        type = types.str;
+        default = "/var/www/pelican";
+      };
+
+      domain = {
+        tld = mkOption {
+          type = types.str;
+          default = "ie";
+        };
+
+        base = mkOption {
+          type = types.str;
+          default = "skynet";
+        };
+
+        sub = mkOption {
+          type = types.str;
+          #default = name;
+          default = "panel-test";
+        };
+      };
+    };
+
+    wing = {
+      enable = mkEnableOption "Pelican Wing";
+
+      node_name = mkOption {
+        type = types.str;
+      };
+    };
+  };
+
+  config = mkMerge [
+    (mkIf cfg.panel.enable {
+      services.skynet.acme.domains = [
+        domain_panel
+      ];
+
+      # using https://nixos.org/manual/nixos/stable/index.html#module-services-gitlab as a guide
+      services.skynet.dns.records = [
+        {
+          record = cfg.panel.domain.sub;
+          r_type = "CNAME";
+          value = config.services.skynet.host.name;
+        }
+      ];
+
+      environment.systemPackages = let
+        dir = cfg.panel.dir;
+      in [
+        pkgs.curl
+        pkgs.gnutar
+        pkgs.unzip
+        pkgs.php83
+        pkgs.php83Packages.composer
+        pkgs.php83Extensions.gd
+        pkgs.php83Extensions.mysqli
+        pkgs.php83Extensions.mbstring
+        pkgs.php83Extensions.bcmath
+        pkgs.php83Extensions.xml
+        pkgs.php83Extensions.curl
+        pkgs.php83Extensions.zip
+        pkgs.php83Extensions.intl
+        pkgs.php83Extensions.sqlite3
+        (import ./pelican-panel-install.nix {
+          inherit pkgs;
+          inherit dir;
+        })
+        (import ./pelican-panel-update.nix {
+          inherit pkgs;
+          inherit dir;
+        })
+      ];
+
+      systemd.timers."pelican-cron" = {
+        wantedBy = ["timers.target"];
+        timerConfig = {
+          OnBootSec = "5m";
+          OnUnitActiveSec = "1m";
+          Unit = "pelican-cron.service";
+        };
+      };
+
+      systemd.services."pelican-cron" = {
+        script = ''
+          ${pkgs.php83}/bin/php ${cfg.panel.dir}/artisan schedule:run >> /dev/null 2>&1
+        '';
+        serviceConfig = {
+          Type = "oneshot";
+        };
+      };
+
+      systemd.services.pelican-queue = {
+        wantedBy = ["multi-user.target"];
+        serviceConfig = {
+          User = config.services.nginx.user;
+          Group = config.services.nginx.group;
+          Restart = "always";
+          ExecStart = "${pkgs.php83}/bin/php -q ${cfg.panel.dir}/artisan queue:work --tries=3";
+          startLimitInterval = 180;
+          startLimitBurst = 30;
+          RestartSec = "5";
+        };
+      };
+
+      services.phpfpm.pools.${php_pool} = {
+        user = config.services.nginx.user;
+        group = config.services.nginx.group;
+        settings = {
+          "listen.owner" = config.services.nginx.user;
+          "listen.group" = config.services.nginx.group;
+          "listen.mode" = "0600";
+          "pm" = "dynamic";
+          "pm.max_children" = 75;
+          "pm.start_servers" = 10;
+          "pm.min_spare_servers" = 5;
+          "pm.max_spare_servers" = 20;
+          "pm.max_requests" = 500;
+          "catch_workers_output" = 1;
+        };
+      };
+
+      services.nginx.virtualHosts."${domain_panel}" = {
+        root = "${cfg.panel.dir}/public";
+
+        forceSSL = true;
+        useACMEHost = "skynet";
+
+        extraConfig = ''
+          index index.html index.htm index.php;
+          charset utf-8;
+
+          access_log off;
+          error_log  /var/log/nginx/pelican.app-error.log error;
+
+          client_max_body_size 100m;
+          client_body_timeout 120s;
+
+          sendfile off;
+
+          ssl_session_cache shared:SSL:10m;
+          ssl_protocols TLSv1.2 TLSv1.3;
+          ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
+          ssl_prefer_server_ciphers on;
+
+          add_header X-Content-Type-Options nosniff;
+          add_header X-XSS-Protection "1; mode=block";
+          add_header X-Robots-Tag none;
+          add_header Content-Security-Policy "frame-ancestors 'self'";
+          add_header X-Frame-Options DENY;
+          add_header Referrer-Policy same-origin;
+        '';
+
+        locations = {
+          "/" = {
+            extraConfig = ''
+              try_files $uri $uri/ /index.php?$query_string;
+            '';
+          };
+
+          "/favicon.ico".extraConfig = ''
+            access_log off;
+            log_not_found off;
+          '';
+
+          "/robots.txt".extraConfig = ''
+            access_log off;
+            log_not_found off;
+          '';
+
+          "~ \\.php$" = {
+            extraConfig = ''
+              fastcgi_split_path_info ^(.+\.php)(/.+)$;
+              fastcgi_pass unix:${config.services.phpfpm.pools.${php_pool}.socket};
+              fastcgi_index index.php;
+              include ${config.services.nginx.package}/conf/fastcgi_params;
+              fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
+              fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+              fastcgi_param HTTP_PROXY "";
+              fastcgi_intercept_errors off;
+              fastcgi_buffer_size 16k;
+              fastcgi_buffers 4 16k;
+              fastcgi_connect_timeout 300;
+              fastcgi_send_timeout 300;
+              fastcgi_read_timeout 300;
+            '';
+          };
+
+          "~ /\\.ht".extraConfig = ''
+            deny all;
+          '';
+        };
+      };
+    })
+
+    (mkIf cfg.wing.enable {
+      services.skynet.acme.domains = [
+        "${cfg.wing.node_name}.${domain_panel}"
+      ];
+
+      # using https://nixos.org/manual/nixos/stable/index.html#module-services-gitlab as a guide
+      services.skynet.dns.records = [
+        {
+          record = "${cfg.wing.node_name}.${cfg.panel.domain.sub}";
+          r_type = "CNAME";
+          value = config.services.skynet.host.name;
+        }
+      ];
+      services.nginx.virtualHosts = {
+        "${cfg.wing.node_name}.${domain_panel}" = {
+          forceSSL = true;
+          useACMEHost = "skynet";
+          locations."/".proxyPass = "http://127.0.0.1:8080";
+        };
+      };
+
+      networking.firewall.allowedTCPPorts = [8080 8443];
+
+      virtualisation.docker.enable = true;
+
+      environment.systemPackages = [
+        (pkgs.callPackage ./pelican-wing-package.nix {})
+      ];
+
+      users.groups.pelican = {};
+      users.users.pelican = {
+        #createHome = true;
+        isSystemUser = true;
+        #home = "/etc/pelican";
+        group = "pelican";
+        extraGroups = ["docker" "acme"];
+        # X11 is to ensure the directory can be traversed
+        #homeMode = "711";
+      };
+
+      systemd.services.pelican-wings = {
+        description = "Wings Daemon";
+        after = ["docker.service"];
+        requires = ["docker.service"];
+        partOf = ["docker.service"];
+
+        serviceConfig = {
+          User = "root";
+          WorkingDirectory = "/etc/pelican";
+          LimitNOFILE = 4096;
+          PIDFile = "/var/run/wings/daemon.pid";
+          ExecStart = "/run/current-system/sw/bin/wings";
+          Restart = "on-failure";
+          startLimitInterval = 180;
+          startLimitBurst = 30;
+          RestartSec = "5";
+        };
+
+        wantedBy = ["multi-user.target"];
+      };
+    })
+  ];
+}

applications/pelican/wings/wings.nix

@@ -0,0 +1,47 @@
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+with lib; let
+  cfg = config.modules.pelican-wings;
+in {
+  options = {
+    modules.pelican-wings = {
+      enable = mkEnableOption "Pelican Wings";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [8080 8443];
+
+    virtualisation.docker.enable = true;
+
+    environment.systemPackages = [
+      (pkgs.callPackage ./package.nix {})
+    ];
+
+    systemd.services.pelican-wings = {
+      description = "Wings Daemon";
+      after = ["docker.service"];
+      requires = ["docker.service"];
+      partOf = ["docker.service"];
+
+      serviceConfig = {
+        User = "root";
+        WorkingDirectory = "/etc/pelican";
+        LimitNOFILE = 4096;
+        PIDFile = "/var/run/wings/daemon.pid";
+        ExecStart = "/run/current-system/sw/bin/wings";
+        Restart = "on-failure";
+        startLimitInterval = 180;
+        startLimitBurst = 30;
+        RestartSec = "5";
+      };
+
+      wantedBy = ["multi-user.target"];
+    };
+  };
+}

flake.nix

@@ -148,6 +148,9 @@
 
       # metrics
       ariia = import ./machines/ariia.nix;
+
+      # games server - panel/host
+      optimus = import ./machines/optimus.nix;
     };
   };
 }

machines/optimus.nix

@@ -16,8 +16,8 @@ Notes:
   ...
 }: let
   # name of the server, sets teh hostname and record for it
-  name = "optimus";
+  name = "optimus-test";
-  ip_pub = "193.1.99.112";
+  ip_pub = "193.1.99.85";
   hostname = "${name}.skynet.ie";
   host = {
     ip = ip_pub;
@@ -26,7 +26,7 @@ Notes:
   };
 in {
   imports = [
-    ../applications/games.nix
+    ../applications/pelican/pelican.nix
   ];
 
   deployment = {
@@ -39,7 +39,13 @@ in {
 
   services.skynet = {
     host = host;
-    backup.enable = true;
+    #backup.enable = true;
-    games.enable = true;
+    pelican = {
+      panel.enable = true;
+      wing = {
+        enable = true;
+        node_name = "node01";
+      };
+    };
   };
 }

secrets/backup/restic_pw.age

@@ -1,19 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA d/AgQuQidsB5+UMBxg3/YIA/4EVMF9+BeZrEMzgU52Y
+-> ssh-ed25519 V1pwNA mGy7a3SPHMxFaJ5S68jaRkPk16Ahxqp7C2YGnK6A4nM
-gPmTDd4oeIwwJ5ZdnWp/s6cEupsYPY08TBvmL5fe3NE
+TrEf7fz6yY7G2HXNxhnM4v7QkVrR5D6vdh+eUVbWbdQ
--> ssh-ed25519 4PzZog iR02KGER5WMrs4djPPpMRc3v5qN5FpcpjTkB+O4GyV0
+-> ssh-ed25519 4PzZog 5ixIvICVbbk2z8gqvodMAhCevBWdnfmpskWupnpMm04
-ibvzSePq1ruF03QBsHRr40VCZ6ZcnWjvcJzybB5vt4g
+r33h6oeu1jQQGs3mP15xtbRq50FGpKwtbbqWbSTQ1jE
--> ssh-ed25519 dA0vRg pVsTTA9yknN8gl6K/CkY/HnUc8eW1F/pSqXq/Upq3SE
+-> ssh-ed25519 dA0vRg gUxwHHDBhxpYMxBE+UfTYJ4I8nY7cEdWG1XBSLLWtlY
-3ymQH0jBAk9ktwBUvth8G9ZdDzr9Ozqi9YNVB8fyvGE
+pNawroXlES4EyNZSUUiEPNy+WNdG9AnHnUl+7qLB5Os
--> ssh-ed25519 5Nd93w fSPTiW3c4va0F5IYoFF+QoN4u1tFGRBrMO9lypICiXo
+-> ssh-ed25519 5Nd93w AchMesYdEdLHtphyfCumqrdCRFABzNOEf7KfFgQWFAk
-8MgZPPUXJGGOdmGknXhaV0xgJl76dg9B1e5r0Ud/iW8
+Xnier5jnPDl9n8F5r/R4CjBoEvmwAJRLQWnoWoAudec
--> ssh-ed25519 q8eJgg UFiK3B6YB3YR8fVOWOPLlpGuo5pWpK6b7zteIngC2Cc
+-> ssh-ed25519 q8eJgg AgmUpmYT5z1qAFZ+uUY5a7huZ8Bhifs1ZuDBlg7ZJxU
-K+e9B1V7AdimOMdy7YCJ7tJnHsHoQChAmWmOJDIdwMU
+kgaKF9t8cEKBc715dNocxA3o+2dwpK8erRo42NzeP9A
--> ssh-ed25519 KVr8rw FeMibaL1ITDNByDL26VRXVz6d2FP13SpKoN87RgTYDo
+-> ssh-ed25519 KVr8rw AafFkG0axLsqGVs/k0DrzLFsKk4uXtqRbJIFhuAmj18
-e0LPmpAe9wRRvgKTYq96Qk+WiUhfixiatuWPPi72Nlk
+shiQFq5ZznBovnNXWfTNvSVX/O1X47hK6g13P8r6xN4
--> ssh-ed25519 fia1eQ i5+7lIZDOm48wywy6CRMOLVhHWnmV71WM0QLSbyhqV4
+-> ssh-ed25519 fia1eQ AKbaMyAtdDHSpP5taXQQjaunzvO6yZuCOUjgV2+4iDc
-S5nAEPHEmAn3AGxN04FpVKwVHrWtZS2s/dPeVv4ryCE
+yDFZ54QNklvVHUD1AkiaQ0sntqiRxkMGZw9yos/IvcI
--> ssh-ed25519 3pl/Kw Mhc4y4szabQQaeBWtZ7mVdDnZYRwtninrBhcyHoUm24
+-> ssh-ed25519 3pl/Kw KD86EfxdUwpfFW7wqf283Wmdw8o/qnVzXxTCrtNPsWI
-lQpLgpgU0ak9WDQIJxd5Yz/DUe14szLvsUGxAil+5dk
+L1a9WXktp4a9s1GxF6O7VV14ZPQOp/VqwS286Dqa3Tk
---- eUzkrzEEXETs3FXa2YqSW4yqQiRLFC8Umr1D+Bq334c
+--- +jytGaOhLk0unuAlkbbtAFNde8Z+tKJ/3l3Y3tBgcFQ
-ڙءm“	}ïÁý9Ž.›û‚”I^éY%Kcö¨SšÒÈ®#ö¤hVó„Á{þ7Z'i¸<¡Z#–s<E28093>íÆ<C3AD>šs.	Þ<>„zÒIW=†WÀuþ7ϱÚàX
+€¡VV÷õÍ7Pø=ñOý]àbZêëj
§p¸QKaXIúµNl¢_vž
+ŠÐHsh3~<7E>F«ŒW/¿Ÿ<>ÝÌ ^áa\´¼Ô	#/¤Ú‡i[÷Üfbó¶•áúXøØ

secrets/bitwarden/id.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA xqavLiNuEoc7Gn7MchvoSEC2RrsFDrf9MEGFYVf5vEs
+-> ssh-ed25519 V1pwNA +Bzh++C1+jxdz1VwwhxPpO3XWn8fy7bsP2wX4mlQ63A
-ZwOkERtRi8yxlZ6sUl+mzJ+YFw/h82vV0WzhRjQOTo0
+1GZxY76fwUOo/t/XeoCOEuxxq+oiU8+GDaasH7VTOkA
--> ssh-ed25519 4PzZog eiC4yLeOytE1jTUaQDOxtVHsM2jJAvGLrI75XJXRCSA
+-> ssh-ed25519 4PzZog lkqPlBejVuYcBQwAZX96296VjJqyz3Q7J7O7OzfSDmw
-HJg+GqSKlXld1uB2WPTM28XEygsm3+4iObC7SCMWl8c
+x+bGIiw4SYhEePIkF5PLK6KK7EJ8Iay1oQIOJ18DtQY
--> ssh-ed25519 dA0vRg rStUstoZRf0i7Ot/0Gn6zd1cQMQjDlLQ8ScEIM3XMXE
+-> ssh-ed25519 dA0vRg o0tqstSEhdxxdu4Bu8T/r8al3XJpIHvXp7xe8YNbJgo
-PR2UGWuO5VOBVee3bndRxipU/m2ZRXMo0HQkX8pvTyk
+m1OKX0L8Nn6ZrXI0Sk61fe8JIRbh+os7p0wzCMtdi6Y
--> ssh-ed25519 5Nd93w hn5Oo+ZoIG+UwAb/DUUJmkDcey35fG5WDBgbe494T2s
+-> ssh-ed25519 5Nd93w pYmPUfDB3HfJZDPgNh4Vmdu3UlTimrX4+EtUzSONyw4
-TxUgeQb8UdxlowGV1/j2Tr7DTNqc6d56NGaFGZfeidQ
+C/URv/SZEtUlI2SBPNTfni4oI+bsYZ/Wq3xilcS6mMc
--> ssh-ed25519 q8eJgg vcWProg0hXGuIRVWXpFSzyS4Ei4YHSdq17A08avwCmI
+-> ssh-ed25519 q8eJgg k5Ml805g9vQ5Wv3hozSCAq8EGzvczTfpssrOeBlB+GE
-4iKGWyyGfCKEliEa/9r8y+D5LsyLglFvcUeXyzO+FCg
+IxRgNIg7Xi1RN9MthSqjsHoaLpsFWoUVd9f+ak9Qm08
--> ssh-ed25519 KVr8rw 2kNscJDgyfKH6WrfSKWnX5dgRM0Kk7FztGhoJ89VUWw
+-> ssh-ed25519 KVr8rw 5YvUQVmarpS4FgsFI8EFLz8tucmvs3V3Q8I0hT9q1i8
-/biNgciz7/fDOyY6GfwEI57ESdUyRwmKaI4OG5pJs20
+Lifm2EUWhv5hDU9mwkOu4fH8zyjEtGXW1qVBbC4dfvs
--> ssh-ed25519 fia1eQ lv06SnwwoBlmG4AVAeNpeIFgISkt6FktNuRq+P0eJgs
+-> ssh-ed25519 fia1eQ sSzTT/AeSH5y4vyKt1Vl0bnkT11ZXINQi/pGU+M3oh0
-VX8O0FYWrEyBVR13t8AkvIq1VpwFdkMX+wBUQHBzXPI
+Qm0ktboSsC0/+HBCIsOu2Oa+EAdT/DlStNLRpC+EOtw
--> ssh-ed25519 IzAMqA b0DnkDgWeERguN/u9wgiBB1sbxHaMXmMZdPOJ14/UDg
+-> ssh-ed25519 IzAMqA DhHry81R6JO3xWujL4l3uOmtqvdmk40srcWuXCU03kg
-tmKw26Fs6iKbVq7BBK60UoQSjykp4BzLW59/ZbbD0hw
+L4AWjbf1+bNXSMfBpC6DTKU1hvql+1mIRemeHZCFXos
---- rR+hloCeC8YmoV34TBL7hLk/4CSfmYKwtAbmtUjHvKE
+--- Jlkn7bKGiezveI2e56iV/3B08/z/JxsJxgyvgZ6WhN0
-<EFBFBD>7ü¶RHSIΔC#‡Ä/ù:öH•ôImId÷ëójkõlàa˜Ñlõb\ƒL¶²¬6Ø¥†/ôPÜ¢+c
º÷’U‰MÅYt©
+·Ô|’s<E28099> ÆX#Ï┘²?ÿWÔÊÆîÙº«Wñ(¡ßåˆ@†L[^tŒní‚ÃhGc÷¢Šæ\¿zž^¡><3E>¤­üå^D{*.! b

secrets/bitwarden/secret.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA LbYb1XP9bLe1lcsAfGwPkK2/r2+TnkkEgfS9fi1YKRo
+-> ssh-ed25519 V1pwNA ud7vkafWPnZmwU0gvby16a/lB4VVkUhVpqnwvkMdKig
-Z20C/zQluu+Qanf4d9GSj4pLirCyqJpa60H9hodMt5k
+/PR7w91ONFOWIvObEKI+wD9XTxbjqQoMjlar9yqN8D0
--> ssh-ed25519 4PzZog IFlhg/gbQpiMugcQZUHwfAnSvhxCwW67XmfSNmYOSQE
+-> ssh-ed25519 4PzZog nttwEm+xO2qLIkb+FqRmDeqbdidUune5CdS9AvHCmUs
-nOp4xPFMvIhUH9OUVz8B3L8GI+Um2egjHV0FgmdNwwM
+raINPneffb9cQ6Zq3Jpwfz0MiIaTtoOI6s+1wB/S5t4
--> ssh-ed25519 dA0vRg OAmV1KiprjoIgOPHCYcme2uLiU1xEdohTWA5CiN0yG8
+-> ssh-ed25519 dA0vRg uuSSiAgzEPgfh+VqE2QfB+8fkJlnUJsffF5/3C4Ovx0
-4/LHk5LCGrpMISvpjfo7QuhnRrE3ycFGwGTQ1i6VaZE
+1oFB/dDSQRpcETXb5IxYSqSG7oI8Y0i/myB6IaJqtUc
--> ssh-ed25519 5Nd93w jv27aiNze8Nxp2ohY7NIRtZv5lBxAdKYGWdqWD12zU0
+-> ssh-ed25519 5Nd93w ZZA2ylM3mB4xjxMzLmrYNujWTcjVsgKRzIYVsmPSqXI
-E5Rk0r8To4B39UsaZavEkAZlIPiaXswsShMgsyNPMoY
+30g14yh+pO4moRvnd9Xxe1/QQxmE2h2zHP9mqn8dULc
--> ssh-ed25519 q8eJgg /o798N6b1KlQfMM9gQf48TF9V7nXORxW4SOpcpYCuhI
+-> ssh-ed25519 q8eJgg lkPUz5/vn10nmk03AeA1W/6fp3tfyrdLq+kgoR5Cjy0
-RVYXWwZLFL6ZUjGbmXBzEj0+Pe2wpZFPIj5yH9kRIwY
+fHtjZtjYG18wWhhvZY3cn3FxxJiY41zQg16ltudBue8
--> ssh-ed25519 KVr8rw +N2w/8vvD7/uG3TMYb+9vml/vZhLkoS+03KEDlQWNhs
+-> ssh-ed25519 KVr8rw E2OijEik9tPfGCeRe+XDV+tKHTOOxojVbG0esTKuLCk
-Hne+3S6vVc5Sx7QJ+OCrPCt4s5usZ7B7WwusnFQLmSo
+wXIOcUGlmF9GinF+Z81KQNiVACN2pthS1nwCK41IHMA
--> ssh-ed25519 fia1eQ PJYYKfL1GolRt90KC52dvUyZ/HjWRJm9vMTjBvrCOkQ
+-> ssh-ed25519 fia1eQ VIfFJCbkM8ZvKKXN3+ZjxXIgK2y9vHpFdQopX25kUAk
-Xc7SpT5TZLTOORLO3uE8tPXKx7thUwaJi3ixngLRljM
+utaTUdI2GBRxkDJT6qmxsdbGqjgSRP0ss4ZgQRQhQBM
--> ssh-ed25519 IzAMqA AtoNahZ3dTQasdfP3wf7U1RJyx//Kt82e1TMSIkW6QA
+-> ssh-ed25519 IzAMqA WX0QlrMPSMMvv3KnbOedpKcQrarKBQLHRXThmvveGmU
-neLAeCvnsl4RDq2H1slZJ+5i3JErqy4aRGoscpRUi/0
+uz/jl2Ze8sdlCv5G6U1Dn5EiucQ1wlK4+/wwezX6jTI
---- W8B6kla08fEkl4Kpp+0eAHj7B1j3WYCDcuwJvAIEW58
+--- fLAcK+fEa833GdqAvbD+sIr2ViSHQat1WQgPook94Ag
-)8ýG(ž¶	ìò<C3AC><C3B2>žÛær_št¤Ö©zµ¥|>¢od…ð×ù6µø*0j»…r‚´ñTü«\*v^#‚
+¬‹¬Á­°xçšáI¯ê¿i*ÿÂXÊ|ÔŸ‹*ž>€é!þK•‘GŸƒ£Ù7îoÍà)EU¡‰›7ÛU<C39B>ˆ<EFBFBD>

secrets/dns_certs.secret.age

@@ -1,49 +1,51 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA 5xvtgxFvEOX/bVAOdBBF2Fyb0euGt95YjhOcfpGgHk4
+-> ssh-ed25519 V1pwNA ikotG+f48KCxKj5DIdhwIEYHtspuBfGj9DvlXLchllk
-6oN4Xba0W5g/d3EX2aC4N6UFVf/oHGgdTxBcMbjIdHo
+TQ8OlL5uDpwnjveBk1RbpB+cCOpqlPQtOu7c0/LRiqw
--> ssh-ed25519 4PzZog SjAcOftaZBEAAZ/P+Z9OTira4/QLSMRefC+JkQcf0G8
+-> ssh-ed25519 4PzZog ptPetu+OMhjcqwIZD2EtPWojceX/p+xFRu8SdFBEBzk
-zG0R3/r+PBjWj7WBABmHPXpqx18uLyuFMJKB2az9i2E
+5HKDrQTBiv+hTKhkLtnYOq7sUO8+dKOS52bXGjGXwxI
--> ssh-ed25519 dA0vRg k8fekPA7w/QFMVnDfCrpOlfv531/nw9tO7B0d+mWHiA
+-> ssh-ed25519 dA0vRg nQ1GTSQwHt806xrFMyqwQ86iBSLbgGDIL+GIWMD3AFw
-jp+DndebWEdk9+wt/nvS0LfRsFf8T7+dMffWmx3tPw8
+OPyLNOxp5k40I4WvDStpKun/AdOuWZyEQLPyyFdqtcE
--> ssh-ed25519 5Nd93w dYe/tZ5qHoacI1IBa7yvDL/grZU7Lc40gU8boQY8Wj0
+-> ssh-ed25519 5Nd93w uYt44+U3T3DOThXDGvl5WPDPGj506O2Fc271qlw/lBo
-eBs8fYre18RGW8+RH4J4AleG3kNpCZ0agAfcojSCy2Y
+tcRUll9+PIfcvcdvIzD8fcIU85+d8lw7ThPetfq24nU
--> ssh-ed25519 q8eJgg 9UZdBq2oZ29U/kzeNOGn+q8RbkLbJwM0eSJHqSLV6Ek
+-> ssh-ed25519 q8eJgg wLIZSQp/YAKSohUD5NsbADyYua8p2qik9lRlzdvZuSk
-vqa610t5XxHiKBSf7veOc09ZFYW7EF1KpIbCpdCsegw
+f/b9Jt8Qk7dcor+5xczk7zRzOxTgknGYstcLQv7ztJA
--> ssh-ed25519 KVr8rw 1CkykLAC3c615TDRlOeI4GHmqu0VT2kclWkr+DT9dSM
+-> ssh-ed25519 KVr8rw InbHZ+pieHIQGGW3LOOfYHS+RkuXRMzxMblHHLOV9Cs
-0MyPNEmkHICQZxpKt0jBZpce13c+jn4WC7IJL4uWZHo
+0oHx4kyD8AW5vgpds6EirGHeYznJ+z2WiGmn7+6bPww
--> ssh-ed25519 fia1eQ OtFYStmc1y+yqYNaNgHxEheIIVykYAa/uR0dKS4xX3Y
+-> ssh-ed25519 fia1eQ UTuEfUIL1xVc5W/HSXpVvPxeQriwC6Tot1G0vRaT1XM
-c2HYDyrD6Db3FNLP8tebLngtS2S8LHsmHovbofsUk3U
+6mWM2A8DVPMKzp7ccqTj+3go39xsyKIHuu4zZypHD9c
--> ssh-ed25519 /Gb5gQ rAc4CqbqdkIAFystL0rLqGNH56GrKxOBamqhiIFAY3c
+-> ssh-ed25519 /Gb5gQ Q6uPEnhxFPRulsd5YWVXfrVUJqSN3oM02g4yK2IYUQc
-RR+NsZe0HQdQv6SgeIqy9IcIChXdvrsspNDBngW6Byw
+qqcy7z7RohVz/GDpB2FfjE2V42Bs023N6+G4qIJN9Bo
--> ssh-ed25519 NtlN/A 93citgkp9Aj1LDK5UdzJqYVVYaWgt/Cc6yMJka+ccyY
+-> ssh-ed25519 NtlN/A F4k9xBWDxeIS+v+DldjlN5e0WQmKH7Pt23XnKxkxTVQ
-KTcyd/SygOLp4mPI1zGDTKCNT7LfVUw12Bw/qnTnMpE
+PgCuox8LSeYaamogydWcXyP4aVCQadeVfnjnFngWC+A
--> ssh-ed25519 v2Y09A +fWNE2zU+lz5KGu2Ed2MHb9UXzJPUAUuBWilF/AS1Qo
+-> ssh-ed25519 v2Y09A Dq/SngPnj9Or0XiVOoo7EQNdsh9mby1F9v2zSZOfMH8
-UVJWnAjRcD7X6iA/heoWdZTcsUS+1VMG5leIHxWZGNA
+Y6J+nWC58lxZKc+wMFUGeymONf9LOxJhMonP1Vo/LMo
--> ssh-ed25519 XSrA6w fft3i85PNprS9QqQo2yKr3lx3qHuSVFeVYuT5Gtfyng
+-> ssh-ed25519 XSrA6w KnF8xhrzss3txgoF0JK84/M7b81NuFeB9Ir4590LYRw
-lNOo2jQXvaMElQawI9x8vnQN5bnnNefEyYXD3YqwOwM
+jilyzwKpL/A4CmO/hMOMjZqPfwGsNYsngAw2trX7hKM
--> ssh-ed25519 DVzSig a5q+imjqWqTzyM3aU+UvvGv3wH3RLTPl+kva+qVSSFs
+-> ssh-ed25519 DVzSig A4EU6+2yqw3S2ISYUBbZYOq4xBEfXoEy1fTUhTzGXV8
-Pobzi/5ZVyfGhVK4cMqvMqaAol9X4+P3hEaUeHdiacY
+c6CyaaBcdHA6ZNdJApUcQT/ED0hQYPqqyvPF+zwCLME
--> ssh-ed25519 uZzB3g B1D2S87+yPr66EikAqLw7s5pazfQeQUxAj4FFnk0nAE
+-> ssh-ed25519 MhHMYA ixDHJ+PFXFxsCu41Ye2Vwlk8wVlXofq2ztKIU9qxH0k
-3lEw0t99aSGqkZdi+ILl3+s+JWRKpY4BHLXdrHfFxng
+8JBxpk9/nQqR2y6i8GU9PpoHfyitJwIHxMr8nb2Y5As
--> ssh-ed25519 CqOTGQ urZpNzMYvDnGR1UgjgrRYp06gKWcTEWUDjyb4fdDTD0
+-> ssh-ed25519 uZzB3g zZAxSWF9i6321ifYiizQn6kvadhQ17/fNkYSgOyR+x4
-7jeFeoMBitwGFQLSynYVyIYsEhHe7A8mdl65goiX5c8
+H5jsIQmgVgRoMRRQ11K17eD9HqU78CpKu5ylkgqrtq8
--> ssh-ed25519 IzAMqA QmtcH5afcef4NMRX4AMrUHW1tCPGOlJ+gIhhDFkUCSY
+-> ssh-ed25519 CqOTGQ TzL9qPqBl8M3d9whmAaBgx3Wo/hPKc7Q/P6Kt3pPxn4
-I4Yg8vgoYGcsV43qq04+nrhzMJ20eaQjOD4EJM0z2xw
+BTnEU/156/8BKqdFcWisleg/K69RIiMaNDg6h9MX9og
--> ssh-ed25519 Hb0ipQ CO7nQSSKrmkQ/C6DuJxesIMJmm99eQytLzJ+3/Q38AI
+-> ssh-ed25519 IzAMqA +w67jWJmcVuPwjlkKn5Y/ryZBzA7ZzLl4va6KxfMm1I
-/kBnqeivoQLMaAA7nX0t4/UAvcOIchEu9bJWxIuUOV0
+mO9xeZV3RYUbGu5TJfnRAaJumAzM5u3wmIByawDdFn4
--> ssh-ed25519 3pl/Kw qUD++i8FGbEAuqa+/v6f664tlVTwHGYF3AmTo0cuZyA
+-> ssh-ed25519 Hb0ipQ y/srd2GpXb5EMVySg3BYOr+41u/NnJlx/2sQlhRyEg8
-vjImiKQm0SHiuO7jZTKRg/3MKzDExfE+p9ZT2nHZr4M
+s3Se3Rf8N4WqP6QdmkAmNtgZKgsvmuWfiOpC6pKGNuo
--> ssh-ed25519 SqDBmA BGwTqAeEptBFRbwwVkHZWX+OKQpALqrPvA2+Cl356D4
+-> ssh-ed25519 3pl/Kw u+QbsaYgVdhbsYBlbuusG/1nOXQ3PLCwtwWE2nUTUFQ
-Gg69WAtr+AAfYT1G+WcTSIlCbNqS5DyxsZw81DaBSkk
+laEpITIyaNx7opXwqT9SHo9qNWCRH0WozQYt8SW1cz0
--> ssh-ed25519 UE6fcQ 4JZzLWThfgJQSNDDtDp8ayM7N9o5tQ6PVwKMj28inC8
+-> ssh-ed25519 SqDBmA 0dlLmNcgAOBOUrVUT/t0oaF+AcXUWqkDN3fu64rLx0A
-RyEWRmMbuXezYZntsTdVIbjy/YEbrflqMpirdg08UVQ
+y9Xw6atnsCX66Q+iIMHwsq8vxeL4kxTihIbMut+JMlA
--> ssh-ed25519 YFaxCg LTsikBkuBwOuc2qrnTAMVtRawZyBosZScefH8qWIqzQ
+-> ssh-ed25519 UE6fcQ qBrP+r+1jy06z90mQgk05zLog586HGUMDgHTbExoMj0
-aLiVK7XFI8iDRTCGH2yJnUpydjTp7NF1Ygok6D2Fo44
+TnZAUZUNNIAJzd8Efqb7KqR/n26YXr4jV6zPvZXu4eA
--> ssh-ed25519 elCEeg TKQKeAvY3kn5IuvHoS0SWtX647nEn1txDftt7pPQEG8
+-> ssh-ed25519 YFaxCg SXGoMkrpgduoXNIZXDy93gkzlnKtr1fAOQJxZDcZ6Q8
-OPAFqPGdSS3Ud+gFtMXG0shrXSmVrIBzvwc19Ac1NJQ
+jKdd+OufjXk1UYsXcJc/Q4JeiRhCcHW2nrDuBrHu/pw
--> ssh-ed25519 8vZ9CQ NGLF9epPqcfbQWcbtMeYIcH0jAZMvO4P7UbKtl8lGRY
+-> ssh-ed25519 elCEeg jPd0A53zK9OFThb4pCF30/My3QxiwGyGiDp64ob1vWA
-ZJ5afGOI32OYBpWs6pe15z2IB+5xgO04/OsKp6ixT5o
+L0Rj+47bdVVwii4LIMoI2by9qmzk4H1kHoyEc7rUO9w
--> ssh-ed25519 rmrvjw tfgMxvtTE2vv2qQJtQk1J+YV2UC/2iZSs0nvbVzV1Hc
+-> ssh-ed25519 8vZ9CQ lgEkLneoENKWwNXRtXRbN5VSm1joh7NDSSUn/bp/81k
-HW86DML/9MXoTs0WWn/zNi4Rh9SBhaHl2WC2bkiLbmw
+X2A6sHl6dFe2p9hfVINA1G6nR8lqMQNjBKc1FvM9cnE
---- Q4amxZgWmdHcf7aqav2TpKA8KX8B8ZHuBhzIcKwbFTs
+-> ssh-ed25519 rmrvjw NX2NPt0SVGc3+2p/ob735mUIb4t9nhwUrdbdFk8CnSY
-E¾ã™r<0F><\Å?ë @î}ËkRÕ(ƒù­;È^3P–ÐJäO“ãSÜ‹Ø â`¶¦	sb?9ø¢¯Âÿx$ñû/<2F>ø~4ÊFŸv_¨þp4{5 GZ²f"’<<3C>x×"q‹ºbj¯:cTuWå>BͶ'<27>ã)/¥×]«ôÁÈëöà•wžÉK%þo	B*&Þ׫{\ZŒ•pë£KöŒƒ³Î¯k}ÏåíßÔ}P=Œ¸û·?
<õ¬ºyB…‡sbŠ„<C5A0>ÿѪ%â$¢#"
+sL3zmOASMti3QcIfa0CGEcJex95qGX4aeIqO5LS1LFg
+--- 9+vokggbkBI5tk1kvqpdPkePahvTIcYWtU1MU1zTyCs
+¼ê{—Œû.xX«®qÆ5Á<35>ˆ5à˱È{º«ýGzᆄ6á
ô:<3A>²‡<C2B2>ÓáÊpð²‚6[äÍY„U—Qâ`©—À<sfAÔor»K&˾:r¿ñZ)Œ¿5÷>íþؼýa’R ±•—S]–Ñušÿ‹±®cÝY–X²H" h	äÁ7Þ…6Ú†´o=®*¿ÊˆGèiɨLûA™?ĆÛÑõ†‡TpaKžùÔóùaåÅì2
<0A>n`\ºN34îXÝrÍÊ´·I9Adq»Ÿ

secrets/dns_dnskeys.conf.age

@@ -1,21 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA +Ug8WtIQLZK1chInj0113Okqae8ImSdTvQYYDD558ig
+-> ssh-ed25519 V1pwNA UBWTUleT3gH3VTd/ahMfx1iSc1JTTlZWKxD4Sx61Dmk
-ao7w/Uow6sCtoqRDr3Y8NjuF6f9P62sKfx5+5+3yV8k
+rGgE6UbDrVFRBbCfw2+o49aIlk4qOHDNYD5nQnt97vU
--> ssh-ed25519 4PzZog KZwHoIkqMTVHcHma22+hG19oBgCNZ3zZ9fgs0i3NMx8
+-> ssh-ed25519 4PzZog OGYMrxkoi+q8ysF/6+HYm+RQshv6jhZyjqQr+d5/vlk
-hxgtsHVx2KATvEQM790y7foAaWVBFnqXz72CovkbcyU
+1PY3xrn9dHVnXOOlEukTwnF0S5KL6AsDRXh5MvWioyo
--> ssh-ed25519 dA0vRg QORz3gYpB5PiM5Dgm4s2JNyJSBFTzY15tlC0JNMtoTE
+-> ssh-ed25519 dA0vRg eVrtU8/e3XSCjOHFeujDNIZHPWDq3qcot/+RXmBwYyk
-1AuUbuw4YSoyly/iHY2DGBOhRijWoXjsFfFM1pKKlUY
+mOFaEqWEnYtKxlilozF2QRyKPsOP3HvNWnQ3KLRON9Q
--> ssh-ed25519 5Nd93w glPMyqAhDvJSOgief6VEWflVervhftUbNgnDOVtKX1I
+-> ssh-ed25519 5Nd93w WXvBheSNZ8CJOtyxeK6GBLRgt3n1hgYGGnksp4pUhBM
-xDSl0Oe0UPiWRnFythx/6ErNSy04paTWWKrlheEEzLo
+0mr6EjSJnnJezPk1nXIEpaIMmn30tAFJj7pmpS7vHzc
--> ssh-ed25519 q8eJgg 4Xs8DKl5BV5E8oGE9MrhBanGuTltQZz3JsCI57UYwiU
+-> ssh-ed25519 q8eJgg SLkAt5hvW2niDBIqeKjcYZvDR9CkJzu4wf1y+0Fizzo
-c99NCU+f8vbvFq9T+P4Gi51ae5xygzuyLMFGf8px9CQ
+ZNm7qSf+Bl981GJuZPPjRL1HcCJbZ58eOUQe+jFE7K0
--> ssh-ed25519 KVr8rw mPvw8t8On+jnc97m5f8x79Kcx9ZhHWyL/YW2zVllqUU
+-> ssh-ed25519 KVr8rw xfJAoIGIRNVyRsPxjlARAFXm3jDnYxBZws0/8mkqr2E
-X8CuzLbLfT6sDhZp4rGif9RDD0zHQzjEp+v5PHX2BAk
+w//2SGsPl3BjEgGIWAsomH8jGwnOKCpn0SJsbb4y2EU
--> ssh-ed25519 fia1eQ CRUdnRPTZQtB/YlTqGcghTUjUlN7avoJ3iip5rNgcEo
+-> ssh-ed25519 fia1eQ MjtOJN21srAeob/eGpKQON1FGebBqvZo1bKfQFz2bhY
-IX1fAfmdteXLwXF7S4aFidVmzr7ClQE5Dlh5siyQZPM
+eSRZ3DTQ/HfueI4k56nkAmUdy7MARgcNYgPGD5amCTM
--> ssh-ed25519 NtlN/A BRTimkF1zqBp4N1cep8+Mzet7cX45ZHTz9NekWNaNTw
+-> ssh-ed25519 NtlN/A n5uN0giDnRaRrfa0jCpqkDnzx1x6hQipumVP/dM9Sw0
-//1gIudKHmPM5A/1fJNPaQO5TqbZzV7FDFM8EhEFzIk
+J5Z3ETAYMQbugOUsak+k0suWd3SInz2kfRDrJhP5ObA
--> ssh-ed25519 v2Y09A U0jsaGMHVO2LpKActT5oYiJrbw6oLeSwzgzR7ufQpF8
+-> ssh-ed25519 v2Y09A KxmOke5LEOx90sSm3W5gdNHTxk9Smrwya36g8rxFyhw
-CfB7xVWpyMHsRZbfwhtlBdZyUwAuLic9R0LBm6vXNUo
+2FUiiEe5v1CUG/Gkyu1Gw0/tmo64wCIq/vsCjevL3l8
---- wiRWKVnnLoriKkk//al7FuIGYKru0nO1/XGhpz6yWls
+--- eFkoeakUQHfc0nofk2Sm/k0ujxlkKkahdm/MmMqPHrg
-§$r¶£üþlÁk=n†CxªgA3Ö•^%ÛõøÚÚ8ùs€±öúJº&<26><> -×Cå&Yõ(Íe(jðv€“ù¦Ž¥!¢ä€ ¤?å9^çU·¿ñ>fA¼ê(ŸÝò­„Ó1Ûìæ#<23>\³0c"Zš†Íû³‰^œ4_ÌÜÙ&Zø»•ÏX°¯6+Fÿ<C383>
+Å  
+üúa
+–Î5ùäÁ'?åc0øí¿5SÚîh hª	mÈ<6D>fœZ–’Gõ¢+>6øçu½¹Ï¿rèôâ«ïzYÐ<59>‹á•Þ¯ÇѦJé|ä·a>îò»˜Å7iÕ݃‡Y«˜a‘‰.P&ðÖdKZS£Ì©/J±r;ñ×¾ioÜå±9hN¸Ã¦ç˶

secrets/forgejo/runners/token.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA 8acWnck16a9QK194orAzlQgQKINum/cyUzJqO6i0rkg
+-> ssh-ed25519 V1pwNA kZ6MC1GXuminn2Hlomkep1wIv1lp6KpJOJcpXkhQWWM
-In2UpSbBR6QoTMTZR/GpZJN3x+5CK3hZcEvr5fORoOI
+K1B58FSyb4QpINlhuvVv4dGFNjTChU1KNoezZcS/a6Y
--> ssh-ed25519 4PzZog /YeuXUmWrWFohgOSEmUygaTax668bLZpYO2T7KXl8n8
+-> ssh-ed25519 4PzZog pbxwzRvcsOgY9hd48BZEOH6VHFLn93gJ8yDHQyNIiSI
-mgnBBIsPycR6RMhLk4HQei5xQLzVHiBHaooOzZdb4YA
+Fa/Z6si9vyox/pmPvWTndyYCQxo7tcvdlRuTgw6IY9g
--> ssh-ed25519 dA0vRg DidrxIBYvAfPkwNzQXy2+f6inafUafoX8cfUChA7l2Q
+-> ssh-ed25519 dA0vRg OW2y/LkN/287NVuRRlSpihR+k/MZ+a0R5cIrHFne6RI
-/wfxyJAyrQ3Uycxwov+0b9pKKOxPP9mySRK5g4BzMnY
+U0ZqipfDlpz9LeXKNWkl7tYCnsBjSQz8q4mETBVEalI
--> ssh-ed25519 5Nd93w i+oP7x/eHY/Roj4mdpOFHrBe5rxUL7/4617F4O3jPh8
+-> ssh-ed25519 5Nd93w jDy3i1Z1NWYqdVdw4h+maaBjokVWNrSfHtSQotb2bWg
-yTVD0dR3ljoUSv1qyuKcOvr1fMRm9C8YAZKKjURtCPk
+PtgX9L78wpJHiX4lmP+H0bfRZd/tNfHrUEAShJ38ss8
--> ssh-ed25519 q8eJgg Y0yxgrLm9/E8nYBg6Yvd0GPbY7PwCJCumQ9CtgWFxxo
+-> ssh-ed25519 q8eJgg BCaUEZ3H3BglgKPAbl/ITQaEv9Jc2rRAoFuPXhy4WFI
-9BfGPSP7pTTM8Dm9qXagKaw95hbqvvp7qsFkhQgQco4
+DMqJu0vjDJ8rIXLSL17Dx4Aoq8Uhdo4jU8g1jTSvMK4
--> ssh-ed25519 KVr8rw pXha2ebkoIFX9dMX3uRz+0rcbwcQ1mwPnLWp/wCzx10
+-> ssh-ed25519 KVr8rw dKk0SN9SXTQsPwMFiKKMuoRwzTHJB8kr33nadRzBoDc
-BQQ77pXJl75c6myecmKlEpqHtWB/rSdG6Pwpbxzcfbk
+m2xPKYFMC/y5fKkgaBc+5TVg9ZH+zVSM9I4I3htSm7I
--> ssh-ed25519 fia1eQ gCgas1CqGNZ7n09J7iXOvh2xeGgoszn36ABZwiskBBw
+-> ssh-ed25519 fia1eQ NGl1o/38iTm6QiQB7pl0NBkohMZGLMeaXZ37TV184B4
-3a7WMN9aB6ZvwFyP98At9V9K99hD1vkvSJgnY16/JKY
+zk/DTLhuGfhDU3gNA7S0BjGOowteEhR9v5oNmOkWTGU
--> ssh-ed25519 CqOTGQ DU1oon3RPo4MCdzigrM2+b3KnTzzTSG/WDSvtBaF1VE
+-> ssh-ed25519 CqOTGQ JbZYKqGfWeVu/JEAAeC6wE4QvKLEeidvggQnm6beJxA
-zwKaQnXT004dMojYFXPz9UERL4ULe7mPZ+vwlZMxFvY
+ArogOkTDAnvC1SKPkSGapNix2W6yvku1QFOFs9bvuGA
---- FWICxx8MWe7awI8P5t0XsbA4Ye0zbxCdMbapTs325HI
+--- yWZoUAOfSIL4FbWSAvhVkOEbUA1u3XPGKB1gNka/xfo
-wûùÿŒ­-”¥d!Ñ×=gŸ&ÜžH¬©ó?÷IçÛ’ÚᕪªêÏ<C3AA>Ò¢Ù„öLÒLË-<08>Ù¸ÏñU¿?	)ûVýJæb®éÄÎC
+Á¡þzòõ´lÐþÈ‘ L‚´C$’ì?Hc´®ìì|¥çÛ¹„.-øýÜå¡jõ	©lÂ}9:KÓ®U…Á^§<>í¯Ì“ôŽIO6µ

secrets/gitlab/db_pw.age

@@ -1,19 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA To9tGfYsutlmjqXZbFJ+TttdFAnbwY9odSMEOvItmgw
+-> ssh-ed25519 V1pwNA TtxqHD3bJI046SXF61CKfpDRI+HHTRpc/iznIMdQiUs
-Q8cWN1VF4bVisWVMOEA6IXqhe2JzPl/9M9UUXWWV0Bc
+WWgm2OdnPjj29tIrAMa2sJCNEaR2iTAl/hMfPLv2QoY
--> ssh-ed25519 4PzZog e3OTx6aEjhNCwyiysZkbwSC8ecVvVaVNfZV/3iNpZCE
+-> ssh-ed25519 4PzZog 0I9h+D7DjRwupkHWDUKIxJlVBUWwbCTR1nx8UcEm6Xg
-o8jHkyg0lptJh2Iew9ZtVi3AUOSAtmDzBIz2nE4mj8k
+NIYzimYGAo8ou93B/tzjmB1K7hu2tXy4XMRiwlDqI0k
--> ssh-ed25519 dA0vRg 7smMdyMEq1stuvSBUsBZXJoeap4Aru6AsljjFPPpfiM
+-> ssh-ed25519 dA0vRg 1U+1fUueu2k7FaY8GVN4BAbiF71OvKbGOC4oZ4mV3ko
-Ip5qA83bAGtYIeqv1w0yo5obRh+FWYJICgOU5+JoeYQ
+/fKxmEFW/L9A/1fDIteeTcz/SOv24HNct88oakdAkn0
--> ssh-ed25519 5Nd93w z16A2vTVGdxgKmgHoSySJ9K8cwrQglflrWDhBvZ7ME0
+-> ssh-ed25519 5Nd93w IjwMC1ZruM915vwA+lExdIq/OFT/4SlWgwOm9xgUPAQ
-ILd92pWzyVGnTOXwovlZ3EX7LsFX06hqedW7Ov2CYII
+mOOTbPdcDjORB1GhS0m4/p3MA6TfHXzWXvAMzKhw/n0
--> ssh-ed25519 q8eJgg Rf7U0SdZsP4NEgiDl8Z99tCoOkIwrrl5s0aYpXOG6yQ
+-> ssh-ed25519 q8eJgg mODUrCPf9GAix0jaPaKUs4ws1D9BM4huHbK2mst0SH4
-tg+Y2WHuokaCVI4CCxuv9UW3GIa8CMuX0JJEWTTkwjU
+7qbxM/Wa9pMpB7TjQZgBojXR5qDJUBZvplsrI6EdSO0
--> ssh-ed25519 KVr8rw YUN5VlTaxW7Niwtm9+FTGOILOklbEGL5EVw1BucGvXA
+-> ssh-ed25519 KVr8rw ybBiUHmEOyesWxdTEa1LPwI5J/PQaxYi02QJCAuYyGA
-zXYcis5ANsDGPeFoV1aRzTJiOQY2P1ZLHsJDkE9RFT4
+LoRQ15hQdVGLj9pJY3TabBFhtPGBvU+bnAa2dzrkOY4
--> ssh-ed25519 fia1eQ TnSlOXGQ0BuVk25Yj9YpWWtYmonlM5h+uC9hUq3MM3E
+-> ssh-ed25519 fia1eQ Qu2RTOQiZY9i2SDs0NVlA1zcert0oFcFA3mXDDl59G0
-8KrW7R5AgumY9wLVQyUmKlHD3zcUNIc+VU/X+vvY2LY
+6akg1POXrvIrzITX6B8yTDw3cCqlxsD0k40mYnv5r/Y
--> ssh-ed25519 uZzB3g 9ms4lu4KjQED/2AHQwr9oLd/6ws01IxuK7Z05CY6N3U
+-> ssh-ed25519 uZzB3g xNdZ8eSTFQZ/RcrNR4BpedX2pfceZwPjvgt9Wd8rMwo
-H/4AnWwt5fnZMvWjmXdoe/Os5ttJFYsMmjaHHqBdAxo
+kMxoKyE0bjXEZ9tNykOUMZ0uHkqdx///QJB5QnLRhcA
---- zI2RSKtND2Ep69vshrRkM1KOiReF/m5vdY4jIH7NSvA
+--- 1DKMo46SYm7JlzFo3nZwtaK21TFmapfXqxXzxMXWb0Y
-ûì‹ënà›µ·ÞÒÜ
I¯ü$¨¬Í<C2AC>[ëP…Uó¯"ÕκZX„ñN<C3B1>nNg<19>† àú¶dP}¥GZ?<
/—!«÷c
„= üïhnZ`ß0‘²Âˆª1•nl‘±Üç»vÄÕfw<66>ÄjÓE@2<>1{ßù…Ð
úEØØg“|èñQ\2Ðóe¹~ÇšÁ=Ó¬¾]fdRnó¶á¸
+8îé˜Ì‹}æš,æÛ^mmîH¿v`Ž#ð‘?0 «à¤Ð>Ù‘Xï¹;λåLÇV’8°=]Ô¬¢sEœˆéhÓâÉ‚Lè(ƒ`ÔýÇ"žZKîc¹1¼.|GØåóç??<3F>eÙÈp<C388>_èã™ËÁ‘¹ìÛ¤ÖÆ
+äá·ŽÏzéùë<>uPåqϪ9ªS«V¶évÆ~
§I4õ

secrets/gitlab/ldap_pw.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA aYjPUkjZHoQm86XHx3VbGswLy6VdKNaaHe3f3CGa1ls
+-> ssh-ed25519 V1pwNA 2mRcx22kddqldRvOQY7i32z0sMwCuGlbCkJJ8vlJKDY
-HMuWoZj4tY/nWj1nrgOxob1hJJD/mPD3kQnDgJJafeI
+aL+OgWP6uTute1b5dlPG5Tz12KHeFlCG/Su9+MBTceo
--> ssh-ed25519 4PzZog GojGaXIg5RK7WjJSCZxJksXvsm9TZTlbHITuksMivBY
+-> ssh-ed25519 4PzZog 67PxsXDuqXhmcyvNAu2jZrDtd+XgUQnEakPw4pR150Y
-4oAuKXtJ4ksvusFX3OM3VpdzfArrglxJTN8kCdhIjrU
+nOCZQmAhHCptlAz134hin/UKKpuIL+ueRJ7Kzhf5Aiw
--> ssh-ed25519 dA0vRg AzGx90D7iz93gHtSvV5oIbBkwgQEpVY7DTRQIZ16IiQ
+-> ssh-ed25519 dA0vRg tiN/eg2X6g4x6KndLJs6ze8i8brhXcsBqP1ZWq2s0T4
-GlMsor4NxuhHs1HJg62O3ZtPF6CHHFc46din6fm89G8
+1lx0Qqo81L12eIG4XfQUWYgpimEfgaPweZQ65GTHSaI
--> ssh-ed25519 5Nd93w oAyaZjUSGC9moA7pLR4+dzoKAggFuKUNMnRbn/fm2FQ
+-> ssh-ed25519 5Nd93w Iq6wxlnODEkmZaYpf1s3XxKmROa/JwXLdXOtCpXuM3g
-eHa/2iLWrqv/pPXjgfxtk68MgBX6EYW1YWfs1kXkazU
+0oENjjsAh2c5tIHNEghw1TE50xRfU5yWHnZenYT2UgA
--> ssh-ed25519 q8eJgg xBdXNLjZqKi2o+cbCXGdOOSFnlfPgaxjQb+IK60MYHw
+-> ssh-ed25519 q8eJgg HrJ8YlZTp7YhRpKpv5ZBUbxv/777ATRtYzcbGH1JVhI
-dxV3kTuaJ1ANFgRaYchwAa0kjGZHZ3POc/Wrw/per+w
+Cytu763lKuwmLLUhFJo8VunzHxYn75YRLiN3vnhxyL0
--> ssh-ed25519 KVr8rw TR3AjhWy5K1ntzMx3mZZZWGYi7EvcWiFpTHyU/+pV3Q
+-> ssh-ed25519 KVr8rw s60G0Eusw0rEW3woOFeE++5C4vI8L6NOUXATml2egBo
-Y/xu0hrhaFZdO9YY8vINp3796HZ+LAL+QvBmIWmoS7A
+tPGsNcE3H9crSOCXCkktBzjRq5JyaGvgmx0ZIs3ehOQ
--> ssh-ed25519 fia1eQ zF6CArF4sVXzIRenfDq7WHz06WXFdo7vMgD15NI/sR4
+-> ssh-ed25519 fia1eQ P7oFu5pYYdJu2fcqTYbKuENBWiFnNVQxg2N8QAXNVhg
-m3sGJNMtAeY/yIq+D2nNncGNxX+KKXt0wCO1WMZmSTI
+aZUyPG6FpfFo7GixaofYbCeajExpKFME6PBb6fTzk6s
--> ssh-ed25519 uZzB3g pTocgT3gT7VHD7BWt+rGRIqUZYuh2G+1VeTJxyb7Xxs
+-> ssh-ed25519 uZzB3g hP2SPeZNhsmePX55N6g4Y8q2KIwRONPBEAqSp273Mzk
-q5UYfrUVbgaqJCxWKegc0q0PvPR6AZ7AlI5ff4ePfjM
+y2c9S06vYQl9v0G/7IrbEx+kGv3DOnpz6+9+vo1o1wA
---- 9KS9xFBleYVsxyktikZ+TX9++1wqXmDBZxU3g7vwwLU
+--- 7prlMrCmXuXHtiD1+44Pg0LV05OvyIEF9fYkCiLEv1k
-<{r<>U/˜½Œ°ßR¦*°Jd)¥<>“»,#
ø9ns!LsÈW#_ÙwÒ<77>¤äÃéÐMÃM‰Ãýð8sÏØ]ß•üƒ—8ð3ˆ¤7@·YNØçXlÿ¸æÜ庚¾Il^0p"aºMf«¬çG SÂdBŸ/»sêéÌ×,¡4!ãÌ<C3A3>rPÖ¢Ñ-Cáòky‚<H˜ƒÆ	ÞZì'
+_Á2¾":GËoã
<01>‰*çë.TÀ5 .Ð(Nö£4OS6U1ø	ÅCáíµ§ÂÒcO§’á·[Qèýä¥ZÈäŒ#I›Ÿ1	<09>cÓ<>M;÷/~Ä`=ñ&²'ü?ºn}<7D>e#ž/°›µqó‘ ÎÛ±`xj¨¦¹hŠ:û¸?´Î¥Â/±æÜJ3 .‰ÞÿÀ+ÓOxkÑYâbkdÏ<64>¿Ï

secrets/gitlab/secrets_db.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA rEsQ/q9FmFkVdXfXfYG3zHN4KvXTfRmZBLEibdzbQBo
+-> ssh-ed25519 V1pwNA AbGjaacp7Tp3DYhUzCOUzzNlUGXYDTU9vEv1DJpzqww
-fJSlFRK0Oi4OpGBf7Z65U5+OFu4+Ts8MqKe7B2G+gYM
+grRQCuht2PKdwsdbABRIO/QLX2HikbnnPDYDfRNeeOY
--> ssh-ed25519 4PzZog aOPnUpH7F3AS6IauahbpQYYYSX7hSJcix2C1CgUsoi8
+-> ssh-ed25519 4PzZog loCPiNwbEIOtBgQnBRSuiCuizZdrh/l4lbdvv1/SYCQ
-h83ikYOIqng/YKfo2RJc9MwbdaKV0V3DFLj5socRi6A
+WMu8NXj0LYaWS0qxcuBsG/GdH/E8C8OmbYb2mYuRkrc
--> ssh-ed25519 dA0vRg oK+zniCPQd3Hw/Bm1/cG6d0If6Wq7VVdxR1nrH/MHAQ
+-> ssh-ed25519 dA0vRg 4UnugzCjQxs4Xqii2PWA7prXrjS4wP3wJQtUbrQi4QU
-c9Q6gyqil1XvTsl/QB9dpvYHa9Bi8bbfWNNfEx2wwo8
+HqjVoiYSZ70DdNRui4yZjR5oGiCyR6Rly+CoM0MEbxI
--> ssh-ed25519 5Nd93w B1mA5u9RHQ28ZopDLlJh8Z5Q530tJ9wjOzhMzsJSTUE
+-> ssh-ed25519 5Nd93w +PwbmFGDmpdwKvuHWLQOJExFZm2P8pl15RpRqeM17Vk
-KbCpkJ666a/dnnatT5QIcPbEOMP+dUkiMERcc9tRMvc
+HvDt20lZsSpyZ8z2BShXHlAOzIM+15UpMonz3sqSwR8
--> ssh-ed25519 q8eJgg ps+fnslUfJUthZB+bLXZdvwXgaM/Jsec5YVJiTZy6AU
+-> ssh-ed25519 q8eJgg SYtYX+5Q35sygmo6PdlUzG04g2bGnSyVGgnYPkJKoCI
-vpwxjfgKkieWlxSjWz+b6U0p16zJq4Q+NqO2zXISWbg
+nrZN3mp0jxSQfblj0pDE/7/pO2jAg0byTm4HQOQzQBU
--> ssh-ed25519 KVr8rw sIxHbaWSfSZVoMIchJnvEPH0S1ZrSa0sS+Pa++yUZ1o
+-> ssh-ed25519 KVr8rw CzJ3Fn25Lq8zZOAHKKbLsiHhTHlAMDNHv3yLa7gaqSk
-3pn9e3IzOF0JxohMP424AFWw6IrCPm+fnS70cfnKZ1U
+O1gss3s7y0VfE6ZS2GkdskeCfLJNytTNfFWz/bzEebY
--> ssh-ed25519 fia1eQ XPBMusFIRQ2mqQgnYPpbn40heCrqiqa2P5tiq5H9fgY
+-> ssh-ed25519 fia1eQ WWju+k3tswiyQfc7XR/txDAIaIjX7Xfnv2IcbKH/s2k
-7T2S+TJ5jd7cfnCa9iWLaf2zUHG3YIUZFnt/ek3pHUk
+mAxPhLCJjwX68AwGSkJxMSF5PkGPQDSCkBMoCi1Ozf0
--> ssh-ed25519 uZzB3g NxRK4Dsc4U7a3MPQoApPTNdybonx2RdXUGc61WB8l0I
+-> ssh-ed25519 uZzB3g EbWWbRWM+8jrtg/ZX8AC8VKMOtf3ch0QrBn5QCia6TQ
-YHoL+K85aXdCTAm33Oc9d1/BD6xFXCHZ8uJCqqn8pQ0
+8/TISW7rN55/vfkBH9HKx7GKaWAMIEVz6xmtCh5fjfw
---- BHDuf9Sxnh49jes8mUA6Rq2cTNqBxpsz51UZgL2np4c
+--- +L6TvqJA1YZEmK9PDIzh2r5wtzB1BI+qz+i9JotMejk
-þC
<<3C>\ã2fkÛ×L
+\¶‰éÿزµp‘&‹®6~<7E>Ø<àÌv¯sé<73>ærx§.ùO¢Y
+úµÄ }“sIc’ïø>}ö5bîTì«ê§Ð¢ÙrÂN1ñó,ˆ4æONÁÔRzfíÝ=اŽèNx7ˆûÓÒ»[ÇÓä)×G
òÄgè‘Øw¥ˆÄ!sõN‘>#ggâGÒ©¿³\üÐÿÓkت2šíg#@èÅÊaoï„—‹†ÏÓ47åwxû6mfC„Q<E2809E>2H
-jÚEA-ý­ûyã&N2&M•<4D>ïn‚

4!c²™^$¬^;¿XJÁ@éFÿÍûf*²BIÉ<49>`g†e{„ÍGžËm<C38B>ý…ñ?U¨i«toažìŠ<!”3ä— <E28094>Ó›l1~2W7óC
+„>ËmaH”ï/uv

secrets/grafana/pw.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA Je94T4psgEbYV6YBZ2BSQ4JZbKubHtPEKNuVjL9CaSk
+-> ssh-ed25519 V1pwNA CGCG7vFUJ9hUdJWRax68aDpHZEREFnrjo3expN7oUTM
-Fp8uHwymTnjkFQBfezrFj2ycXsYrnqqW2+KeKfsjONY
+/eCKERrmnmceosD45BENTxtoyLmjGmGVvxkGWAtCRyI
--> ssh-ed25519 4PzZog paDltxaTs3odGMIkWFMuTfe+LnO2RqvRTqAi7pK8EB0
+-> ssh-ed25519 4PzZog DSUIoivSmbzN0AvKIPXhtjTBft9D9AaRioe6biuh6XQ
-+ZtGVOK71gSGzgY6nSlDT32Q6IQFFvZd8xMp42GD/xg
+XlV7xKGi2BY+sCgJCEiSB9AlpXFoQnbeIxKxNhPRetY
--> ssh-ed25519 dA0vRg 2ZGLw9dW0qbzkJb+M1DhhEaW19VaPdgy9YvzxeEuZzw
+-> ssh-ed25519 dA0vRg sYBG5Ld7lMw+cm5zUgVR9Bi8YVwDrRglII36Tj8Jfl8
-Gycx9hEatq1jOQpE7EqF4G8y3+XvRnIC8oNK3hJmOzw
+cQMY6UyMrRtfoU6mn0pg47Vf4DB2KcjwiRHEmvU/Rmg
--> ssh-ed25519 5Nd93w uyUnDy48bjq4cfG/HfIF57bnCxNGSFze18MTW2XmDmc
+-> ssh-ed25519 5Nd93w H3k1nFMs8wkqsVKzGp3n4CE7MuyxJWRZ+xgSgDbnuzw
-TWCJRIC3J9KyjbCaM/WmCoD0x2MtrGGKVgHCA/TBe0I
+2fff1rsfvE5NikWjF9gkvHuthgLKLOey3PebYG26yNs
--> ssh-ed25519 q8eJgg qPb7JIMkwOWIWw4yIhQku0u6d09QqFKtOXx1gC3XowA
+-> ssh-ed25519 q8eJgg UR21V4UAJ7/ALE7IcfMVYO3mD2jbanhBu1fj1iEjpBI
-8+YLpW8xzEzq02zKFhlbjOggEWfMZ6j2G5RGIq/TE/o
+8Yl7/sLlQmCvGJvKZt1B4lJMSnPt6gHi/k1u6Gm2sII
--> ssh-ed25519 KVr8rw zcZRh0qTa55ENUWXRIPk/kAv3tKB0+anEQ+IuEhsFjY
+-> ssh-ed25519 KVr8rw ur14/Gp1Z9ODFFVaUf50i4+ELKy9RHmsXjbaj5h9IGI
-8oN0U8jD1BA07XOS4idvHgu8LA7/E5aciLZOshsZJJY
+FTZn1ZuBixaehBW3hnVjfXrt2m8co1KSp5aUTA+TRdg
--> ssh-ed25519 fia1eQ gkdxv6Uda41PT9GhALDwPCfzzSiCDWluZG5m3WRwKAQ
+-> ssh-ed25519 fia1eQ 5bmpon54otL6GnIhyYT7CbLuCR8vk0td3kPBGxsSWCU
-5YSmnIYFXmBgTur0Z7PcLOT9ANvLJgIech5gp4Pqwjk
+PSngrN6yQODB/Vmu8ka3vvDv5DkShktyOWrhzC9K1LQ
--> ssh-ed25519 rmrvjw H0ZmvmeUIpb4ZAUvh+7k47mUmZidcsKxDHC2oC/100A
+-> ssh-ed25519 rmrvjw J6YtkhTuDaUtc8LUp/zfvQD3LST00arsbe37bZw4nAY
-IjYufbdJxMMANqicCHQQAU0Vh/NvROfCfaxJBM3rai8
+r3TDmtyB0Cc7Mx8EXb1yytvpF3+4//6cy4jkK+cWTls
---- TrZyyHaK0o4ot71wVxZzBT+3mVrVUQ3jKv6FuWNO4Mc
+--- mSjAJK/sd2Qj4Ffuee/T5LTADcNLVTCcKL/4VlqZvd0
-R3±g”GÛVðgñX3cÅœëñÕPÌ\Úy’‹gûqÐqÒ·"KO(ôÜ.ý©
÷8Í·&Ò3Äpëù‹)‡‹4:MRS¦³pK
+RêÛÖU$ìòži‘ŸU«áXô¯Ís<C38D>ÁÓòñãfá—_âƒo/
’&cØ&{*¶‡ÙŠ/äh¬Â\œßLµ[%®=,Qòqè

secrets/nextcloud/pw.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA wC7Nch41YKEjrwpf/sDR+SUWKm1porqP2DyQhz/MLh0
+-> ssh-ed25519 V1pwNA ZlR8h9qHUL9sOogTAS4jhOkSqgeWOMgrI2jpzZeB43E
-Mu8NGcxWphZZLgb0F7h10EJGCPiontn6y2lWNSldNGw
+c1B+g2ke5kRtFZ1us5Sb8gxYdb7DUx5l1IzVAfbXxW4
--> ssh-ed25519 4PzZog 6H6fsEDq6xiIkmIy6gUUGL+Mm03HSEaSGnjel3EO8EU
+-> ssh-ed25519 4PzZog uPUS/whEnUBue936Q95LCG31yz987AGVTULqCLfQrSs
-xzqv1RZijhQqeiWIFq7ReVzh2JLtBoo9HmZJ1VXrMPU
+cGgATnRDcpNJ7CRUkouyoDk80EYB/QgzkX5snfs2qjg
--> ssh-ed25519 dA0vRg UC9Vm0pLH8N9XGxKAZ/3Efe/9SRvx/rlxCYx0u5oljg
+-> ssh-ed25519 dA0vRg gabrxTdlYIjZWYnRMdID7aLu3hgHKmTG6RQHMMnsdjM
-gF4IFYdCIXfvPPrOsJFvGMf1PzrSyureKpOP66ZHB1Q
+HIKk6j8Cntw6/SAtbAjDTSDqXhRzItris/gcm3UQT2w
--> ssh-ed25519 5Nd93w 338ts/scFEwjZ+3f4Vcd8C9Q//E/ZGoSxIutAxKgpAo
+-> ssh-ed25519 5Nd93w 9enbyAo/XabNmXWppWZWC0Do+6hwzjLPc/RgpFSsOkY
-C0vs3fiisD9FsZ8gYJZj/I81mT3Psw3g1jN5ztyuDQ4
+tLBW23QTKZKYZ0nlJ1WDdqsu8u0vsyNoZ10qrk06p3E
--> ssh-ed25519 q8eJgg eIHEYfE/50IRNy+gnNmqQD4jtVgJRla4ilAQp2gYfjE
+-> ssh-ed25519 q8eJgg 4Un1ZATrDODVT5Nr1qNkQzfhBeWcDkujxvFmXumHKl4
-bFNJA6KPlBiZWrB5vjyTilXC+rkW+xqVSWcvHln9H/8
+MW1gkllR6yl4FiR/84jV04TgN/B4WEPbmrIWPVG7yKg
--> ssh-ed25519 KVr8rw Kq/0pxm2r136ezrKRugC1So2cIIx2VTShPv6WTc6m1E
+-> ssh-ed25519 KVr8rw ld3Xw4y/UIN6RADoJt+2gwnMbcl7qC4sF2X/pJcdJjU
-W7VrsPf9jkkxqndVjrFuGBwqJR3v4hwig7Fed9xJSAI
+8b3N70CMfQpXY01EjNxn4dZJ2PwbWG7JgYgfOlGfZT8
--> ssh-ed25519 fia1eQ 1sA1YfEKVatTzHV5Wd/tzqwRiIPUBQlfoKZkJpxRYig
+-> ssh-ed25519 fia1eQ 5J0q5b+gAlELovtLXXTwr9jfhOl5L5SEy7+qRxUicCQ
-lLtPzvg8H0y+FpfGfF/Q5g1nCap1TgW2wipIKU+Q+WA
+k4Xd1ypatsY4rFPAVZoA89V6NrnLxrIrWBhYCY0BEis
--> ssh-ed25519 YFaxCg zUYYpsC6BXvPRcIignITwUmvBhfhy9EnxFeCFg1niQk
+-> ssh-ed25519 YFaxCg UgvKYVP36n85x6AaAIGysm9Kzl4TrMip9GTxVMRuWgM
-QcmAhpDajw2lJyttDX9kn+0bdugmYYifSl1esaa3xpU
+HuTioTpbARDViBacuvqHM2WDNvL+hDyDCb8YJW2uukE
---- 0sQ4g4YxMBe/VBe39F9ZfwVh9XEOHYHqgiX5oakBzPU
+--- ig5Vtym6PTLi2FyPk/bdMBeQV8qICqxGONQGU2lGfxI
-¦cò±hðWÚp@å
‘
"L·<4C>åÒ[)’ØtŠ¼/<2F>+”MyÍä¾ò'
+z|^Ú<>¬~Á0‹ƒ]é|Ѹ"ù¸¯¡Q<C2A1>zb§“¡"¢ª—ùú¸gm¸rëƒ<C3AB>u¤ð‰<C3B0>y±õÃe®ñÖëÚÁ¿$çËûc
-‘8K¼ƒ[©m›}·qÿÈ1«{²µ¯]·OS%ᙯ>»

secrets/secrets.nix

@@ -33,6 +33,7 @@ let
   marvin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIAme2vuVpGYX4La/JtXm3zunsWNDP+SlGmBk/pWmYkH root@marvin";
   calculon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGsmeBfh4Jw2GOL7Iyswzn4TVNzalDbxDgh7WuQotFxR root@calculon";
   ariia = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA4kV6W1/tP/nf2ZWNhRoV1mK04R4pS+c5vdsA1n5gpN root@ariia";
+  optimus-test = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFv0Hb4qfzXUll+Hct1NQOE0bCf0MpE24Cqskd8vAFyj root@optimus-test";
 
   systems = [
     agentjones
@@ -40,6 +41,7 @@ let
     vigil
     galatea
     optimus
+    optimus-test
     glados
     wheatly
     kitt
@@ -88,6 +90,7 @@ let
       galatea
       # Games
       optimus
+      optimus-test
       # skynet is a webserver for users
       skynet
       # our offical server