diff --git a/.sops.yaml b/.sops.yaml
index dfb1c9ff..33b40c76 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -17,6 +17,7 @@ keys:
 - &logistics_osh age1tkkau8vk5h9dh3kemash4eghn7lk84j0hhpmvvf7j6phgcsm9vmsphv0py
 - &kuwubernetes_osh age1q2yjpxlqkfhsfxumtmax6zsyt669vlr9ffjks3dpkjf3cqdakcwqt2nt66
 - &kuwubernetes_cluster age1nmdv4q8hcyj3s6qevrmc9w2vhd4a8tsj5j5e0cry5utex7vqeprslyjvxz
+- &sakuya_osh age1ehdj6hghtr8sf5s5c03rru4y3a02nwrt694e36tjnd6g7eq4l43qfradn6
 creation_rules:
 - path_regex: 'nixos/secrets/.+\.yaml$'
   shamir_threshold: 1
@@ -34,6 +35,7 @@ creation_rules:
     - *litterbox_osh
     - *keycloak_osh
     - *kasen_osh
+    - *sakuya_osh
     - *logistics_osh
 - path_regex: 'modules/extern/secrets/.+\.yaml$'
   shamir_threshold: 1
@@ -68,6 +70,12 @@ creation_rules:
   - pgp: *pgp_common
     age:
     - *aya_osh
+- path_regex: 'systems/sakuya/secrets\.yaml$'
+  shamir_threshold: 1
+  key_groups:
+  - pgp: *pgp_common
+    age:
+    - *sakuya_osh
 - path_regex: 'systems/tewi/secrets\.yaml$'
   shamir_threshold: 1
   key_groups:
diff --git a/nixos/secrets/access.yaml b/nixos/secrets/access.yaml
index 963eb377..f849b225 100644
--- a/nixos/secrets/access.yaml
+++ b/nixos/secrets/access.yaml
@@ -9,129 +9,138 @@ sops:
         - recipient: age12ze362pu5mza6ef9akrptr7hfe4auaqul4rkta7kyy2tnrstqensgmujeq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZU9IOWRvQ2IxZURld0k2
-            TDk4SEdrMUVyRk12RG9yaHpEN012eFV1aWdFClVxaDlxS1VreUpOUFIxbU9QZ2E4
-            UjNvaUJiVGlFWGRDUnpPM1lUZ3RLSm8KLS0tIFFYU282YUk3WXE2OHZxWms4RHFa
-            NGp0M1NZZ2liMDA4TnFaNzJZMzk4emcK+zeTB6l9tCUrn/KZJcBjyQmfgdQV9CkS
-            oTI9H9lNymOk0a/+CmZEWm95LPSWfvmpWSZeQ0FdGUwuoXeOkQmSSQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSVzVVamNqMjIvYzZjWDFX
+            aHlwMFRYZ1lmQWZMdklhQkZQMmlvd2dGdXdJCis0NTYrUk5McFpra3dsUVU5L0pB
+            aEk3b0RFV05sUG9sNXpGYlg4NUdtbTgKLS0tIFNock5vZXR2K08wbG5oelgvc0hx
+            NE40QlRFUFluQXVVYk82SlExWFNGdGcKbJtsOQiTR7PTv8L8FzxJl5KwRYBy1ehP
+            /qVoMlmv2By2ZbvngTqORdHPte8TpX8Q4c+eMjw1H19EbOOhF4hrnA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age176uyyyk7veqnzmm8xzwfhf0u23m6hm02cldlfkldunqe6std0gcq6lg057
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzbmdJbnpyc2VxQVBjKzVp
-            OWJpQ1lSQkNBQXRISGk1L3Z4OUtRZU1obXlRCm1LaTFMSnU0SjFCSWdTaEhEYmpk
-            WUNYUGc2Um5uY3pTait0bVdqajJadmMKLS0tIHpiK01XV01pNndLdU0zMDJBcE9u
-            WnhBZmJ1UEgzY1VKVW41d1gvaENuT2MKBg7sJENQ4WTV+EYl5QYXkd1QUVSt1VxI
-            hTQ7D6evOJ2hv/kkpMc9JLyqc0PR0irmJLgHMrchtCRFalHLGcPZlg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWFZiT0RSMCtHZ0l0Vkx0
+            M0IrZ1V5Sm90THlyRE1Nd1FoVkhzUjZFUGh3CldialdjYzhDNTFkYkZJSW1qQ29T
+            S1RlQW44TGlSbTdVb0hjanZFMHR6QXMKLS0tIHg5K2dodlVhMDlIRGs5RXZ2RXJv
+            NnVVSzNBMGJ1U3BlUUdBN2Z1NSt6WVkKFzKj471vzulNsNhd1lQ7VmOYT915q+j8
+            4A0I5aoPlIjlhda70YEhVQ2rk8ahI9buJzrrUJKGSkSonhged2/q2w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15hmlkd9p5rladsjzpmvrh6u34xvggu9mzdsdxdj3ms43tltxeuhq4g7g9k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpeEFsOVYvaWl0dWJFY3FE
-            UWFmN3NwQ0ZiY0VmNktRRUdLSXhDSGRBZlYwClRqMzloYjRtMjdCaEtuRS9yTmt5
-            eGZJMTk1b3NzL01mS09RWWR2S2tLemsKLS0tIHd1Q1l6NzhsV2hYbEZBdStTUmhF
-            ajRuTFRWTnFnb1Z3MDU4MUFHdXFtcjgKP/JtU+It0izhDsZk8viRIfhjX5dWZ4cs
-            JaTqd1IOTTkdl9rDhaiEmgEP3MSFJVCGe/mQrDvIYd6XxKjzKAiCIA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTllUSnN2T0h6c3JRYXdj
+            OUxCb2RIaGh1Q0pIajI3V0FzSUhMWnBILzNvCi9lUkdGdHkxVkg3QlpDWkZmSjVa
+            YUVtR3hLWmRmZ2hIZEJaYzdHdXNpWDQKLS0tIFg2QXZPY1ZKK3FiTU5YSG9LLzla
+            UVVQV1VCL3F6eUdYWG05NWhrWnc4ZUEKk166PBYwn/BndjcjcXh9KcrVOmRDRCnJ
+            avNpJn6WXKYr9mmBi7kiN++UzVoVfJO3mS4IT2ISjzEaBF3nLsDcqw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age10t6kc5069cyky929vvxk8aznqyxpkx3k5h5rmlyz83xtjmr22ahqe8mzes
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYN2l6WmlBVFNzdlZQVWNy
-            amF0UTdmNGRwOVpndUlQcWlJSWhZYmhRU3lzCmUwWDc1MjBYMW56ck5mTXJHOVVo
-            QlozbjVVaUhPd2hxWmFwbzViTXRHTjAKLS0tIDJxby8zdDJxZ0RvSDJSN3lEQnA5
-            bUdkckdIWjZiUHYxdHB4eEtoRm5Mam8K+zTlTuptPoQM90wr93inrfA0SsNo8vhL
-            Vc7g9erv9fGwt2WyqcxPfSdHN6KwTx00cR2sxeiZeFmW39uCMc1LIg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsNEhRRVVWRWlVTkg1eGI4
+            Vnl4QTFjakhzekt6UFlXalcrTzVSWjlnRDFNCmZqV3NGYlRHVlJrUWR0UHFCME5h
+            RXNLNktwS0lpTmNMY0J6T1hDNWpCSlUKLS0tIGpqMGxobWZqMVF5dUloUEN5M2hQ
+            RU9BMGh5a3Z4dUhFeUdOK2poSDY2MzAK/JbEtJZMMDJpDHOLzPOBwHNOE/A3RMmZ
+            dWw9V9R49ZYWCoox9kOUmkhT2mlwUlAchU4iKkseF2KQEbfrMKH/jQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a2quf2ekkj94ygu7wgvhrvh44fwn32c0l2cwvgvjh23wst90s54szdsvgr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzk1MkZpSXdCSjRpYkcr
-            ZUVDNFN6VzVmVHM3aUZJZXZnQWUvZWMybENFCkFTUHNPOFhTeVhqSm92UUY4emhT
-            Um15cXBFbG5qZElvUzZCSnZRN21ZZjgKLS0tIGQyV05TckNkaURyNFpQRE0zeWVL
-            azExTGlBazJYdGs0ZlF2eGpNRXNVMXMKkuIDAsAhYMs2Xm9ACG+f9tRCdWNtG8M+
-            G3HywsG3BSURX3F1P2GKPq7/LGBshNbYIE5LpxA2irWeeiQPOPMqfw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2TElYQTFoNGlXT3NzRHBk
+            bk1XWkVyMGNCK0dJaStldHRtdGd0em1LaURZCkdONTFaV3Nwb2dxOXFjK1FEN2kv
+            d1dRTGVSYTRTQzNaNlo2VjUzK2dyUGsKLS0tIEhiaWNqT3RkNTdCbXRmdUVZTG15
+            RXhSRkRjanc2NTJPMERTb3UxRGM1RUkKoEyDkcG6XWyt0hnT9kUpvYSgUmFj/7kc
+            fYbsQTbm0NsVzsxwiEB0RjBIewPlrrB3Gp43D2y1we4N8C9MaRNIyQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age16klpkaut5759dut8mdm3jn0rnp8w6kxyvs9n6ntqrdsayjtd7upqlvw489
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaGVrYjgxYVJCOWJNTlhu
-            b04zaGdqKzhIWUlSbXNVVkRNZG9sVjhER1d3ClhMdnFiaGFRNHA3VWNMampScFRs
-            MjRJZXluOENOdWd4aWVLZ25tS2Z0TW8KLS0tIHF4U3o0bERJY0VzMVNNYWtJaTNu
-            SlpLeWJtRnNHRTU4S0lYc2hnZjZ1VFUKy6jnycuFTYYxH00IR8ubqDaecFSPD5tD
-            jphh2aog2L3pod3ktxpggKX7QKbmowvrA6oLMFD0NwXIhRr4RLe6LQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvRHpsdGJuYko3SHpmVjQw
+            QjIxbkN0VGo4di9YVm40VDJuaVZ4UEFrUVM0CmtMV3hRNDVFSGNHWEpZaThWS3Rh
+            ZklmNUpQdkFaeWljRTNWS3JlaDF3NEkKLS0tIFV2Rjk0bXdOTUdyL2RtQUprRE5q
+            U3hRRHJGUFVEaTcxMGh4T2lZSHR4TUkKf5+dcVObyIi4WskwUjvlvAW/DoFGE1x8
+            IJG9/6Vg7JszTjnRwkbbyWgQ0CKqCzqSuIvw/mjA94NtBCc14Ypt6g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xg6zm9t25wjakljm54m38pjdr9q53jysdcl82r5xwkrn0cgyuvvsuh63eh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5R2Vlemlxc0JpQldsT2RR
-            TEFvQmcwQ3JNRXRoUWVnTjgzeXd3dExUd0VZCnYvOFhLWlhBWXZwL2VRN3VIUFJn
-            OXRLOEVHb1A4NWpYaTVWQnMxbTViRFUKLS0tIGVFM011dVlpSUFrcUQ5dnZlNkJz
-            VWcvbElkZW9Yb2dTTUJaekwwUHIxTjAKl9r6GRhzYTqKqG66VhfCITf7jCTukxw8
-            ZMs5yOFbKpFfHQToma6Ph7SHJdAoi9dBgUm3ug/D7AYrYE0ZLvMGMA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBESjErV2pDcWhkOXZNbXJs
+            TGQzZ3ZjdmNFVmRSUWhNTERWaEJRVytKWVR3CkUva2o3Vzhtc3hpMWFyV3hFd3Uw
+            L1ZFNUw0YnQ1NUZUK05EUWZ5bkxHMUUKLS0tIFhMRy8xeEVvbW4vOXlXTDM2allw
+            MU1BUU13NHY0OVFFZlBZV3lvYWowUkEKFOA2vYJKQdr3xQEhWif0VLt+IF5h8nxM
+            xIxcuIQYv+wCceK2Ctkj0p2kd8DL5CYx+kbYZ4u0HLelXyBjj6K3Cg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ktmx2szedfnpe5xumnzs8vkk0ffqgga6ved3drtksg9pye6ndsnsnqq488
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuQnZ6L0wwMXBMQTZiZElw
-            aVRsRnN6dFpWUkx5OW1QT3QzN2dkbjBPMFFJCjd0enduSk9EL0txcE0vc1lXQmZQ
-            ZGYzV0c5YTJGNlZvdzg4ZUVZWlRwRVkKLS0tICt4aUU4bDFFSzQ3Z2xlL3Fyb2RR
-            VUxoWjQzcGVFcGhYUk9nU2NOYUZUZHcKNQTlHjEYtpOiAn3yr/OQKH04cdM1rBU6
-            bvQpKefcIGlCMobaiHVu0CytJKtBVA4X8qBPWta7QrbU5WfcqO8oLg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxRUh3R3V3VlVZMXFSd3JO
+            c0h5U3dhZ0FOQjRnMis4SXpGNjdiYjZKRmdNCjBYOXhwVzNyak1zby9CRk5UNDBE
+            NERaRXNaenkrLy9LS3lrUXFpL2ZxbWsKLS0tIHluYWJhb0k0b3RKS3BoN20zK3BG
+            TDRiTnFYZXlOUVhRKzh0N3BGNHJJQjgKkdY5xTbIW6MH3XIAG/UZcq/r7JxlPEqQ
+            qz29eYy1jl4OwMRRxXFvjV0KNO22sgCRsvz3eNyzOQAuS59fTApLzg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fjcafp0j45sz03zq5srnxyq2mujndmn25vceg3wj2cgzymqm73ssmhdgku
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQ002ei9LMEpaQ0xBM0pG
-            VW12U3BQaHFpOUdLSTIxMlZxTFBlZVhxZWdBCnZraHpMY3ZuTFJ1ZE8vNlRnbnFS
-            MWxJa3AvakI1NUM3YUdVVFNwMjBUVGsKLS0tIDdTSG5hYzFPZStZdTZFY3hYYzRO
-            RDFTcmdleEI3S0ZyQ1ArVnhkZmQxVU0K5tcfZiuQ/+3Us4wX+v9Lh6G4WbzwacsA
-            7xm+A3/tDA0PtJKgd1J172GPriMWwCbSPqyeAVcefaIhKnEhSYmg4A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBK2RMMWhmTmRGcTB4S2da
+            RDBXcUFkQ0diMmJBN2IySTRITnkrUUFwbmtFCnhWY1dibnVTV2pEaS9BeTNIL3ZZ
+            NzFTa2FOYkMzNXNTMVFyK0t0SEVXQkkKLS0tIGp5ZEphM2JXQWlRdTlVbXg4b1l3
+            THNzekt4YlBuSXY1L2V3bzZJdFUxdjAKyrR42JBKaJiMxG68E5jSwrUAewod63JP
+            DZKRNQWhFGeqWXRteLijSe1uzR/Qk/kuwR4Pp3ktqE43YxTlijwNFA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ehdj6hghtr8sf5s5c03rru4y3a02nwrt694e36tjnd6g7eq4l43qfradn6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcUJzT3BhSW1qN1BJZlda
+            RjY5dGdjeGF3S0R6bC8yVUhOZk5ReDBpajFRCjJLMExWVFBsU1lNYUtpSmpqVDRU
+            R1BMWk55Y0kwUHV6S01RdHRrSDBuc0EKLS0tIGIrWE5pUUZvbTN0NmpraDdNYXNC
+            TlhrQjhYR1ZtRDNETG1HU2NpT1BWQmsKcByXFbLPFgpd1HOooFWZLNBy8UOyuxxC
+            XKwTuPb99GvAxaR1EKAWVeTLPnu8CjsfNq1kn3tWBQy1uct6cBK9Qg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1tkkau8vk5h9dh3kemash4eghn7lk84j0hhpmvvf7j6phgcsm9vmsphv0py
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZnFBOUd0dUthSTArM2pD
-            L0phSVJlZEV3ZXFBQmovcWdObUxFZUNZT2c4CmtYTXNKa210ZklBb1F4UkFKRG4r
-            OU5tNVlVejZpY1UxMi9leFRXT0t4dFEKLS0tIDZIMHJNQWM4dXlGS3FOWDh0RFVx
-            RFdHNy9mRUhSVUM1Y1UxZXNFMlZ2K00K5NuiXn//gQ7LNHNIwLgtn3l3VyE9FXa4
-            kBAO4T3aOoD2AlQUufQrZnAro6/fgYqrrOQZ29JNem/6aDMJOe8rCg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5TU9paXE4QTVIWWNvUTY0
+            VnFsaVhxdWQ0S2xwRC9yeTBxQktFRnRmNUhjCkgzS3I0eDNURXpkQVNtcG5HNjVY
+            YjUyRldxektuTWJMbVhFQTdjRHhzcmsKLS0tIERGQWRXeHUrZ3phY2pSTDl6SUQ1
+            VjBUQk5RNkpVRUxIVU1CZGZQaitoek0K5PE22HdE0bFnFaem6Rjyl4JkfITxdZ3F
+            ZEv4cNCJ05qYk4gu4CPqNvZ7P8MppUD0ReAyj/2JgDpZPU3QrL//sQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-05-01T16:50:29Z"
     mac: ENC[AES256_GCM,data:humfCS9LaB0pcAObLZH+8huTED1/eW6ZtR7PVZ33JPrTJhc9ttorbsfsVPGjsd52I0RT4cNNk9iRDGSqNvgCP+BdvOyILDRA0kxKvF3XLX76Iw0v5jWlPBUts0Hi5ch9Mzn5abN/w3E/5D7z1OMQN11kroJtVpnQMdPDza/qK4g=,iv:UNHN2BYkC0AShqtB7gRLIBYqYwASqVbYhA2RC1dSWYE=,tag:Qo/1LczVrlTHFvWkCG3GIw==,type:str]
     pgp:
-        - created_at: "2024-09-02T04:43:59Z"
+        - created_at: "2024-09-05T07:51:02Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UAQ//Vx8+zoLviHeZO8lg7rUZIk5LwTCyaY+vzbtB4HYuj361
-            pC3wgQhXxeLIA0iQIsqNqtbz64WDSsMwVS64uzYryZUAwER/jAhpJisMhs8YCxhU
-            NRv3A4o5GU1Ogdn7ajbdo7eDNK332PUQNrbJQ4xYNRI54dqjwRVNL2bTDtg5NYpJ
-            H+U0N7+Ac96ek8AY+mpGGyorS/pemKSa60JRjQxiNTHYju0m6L+Vt2mt2ZoND3X4
-            jZQmn54A1ykkbs/2n37dR6cVMWWleLIFBDpbOd+fyl5pwfjd2hZPH/LZOHMFW7AF
-            lPZxo6ZUlC5DLnkeQl9fM9ocmltBIs9d05LQeaQeaL5o9cQGlm+fQY+gJYbOTPOs
-            8qyZ7jPDA+BcnovIfYtam1/YtIpRMlRApHKbC/krTX4FI0TqGXDLaPWPGsQkNvG0
-            lbOYEJ6ARvgFk42+tRoXw+tadwgzRNfVqfKEojmxoXYk4r6etfD2cL917pwfmLgp
-            Qn3M70rxZBu3BapfoWK176lWVcZRanpKvDVUesf4gLDWGO0HkDN3rwAxgl3lEI+c
-            vgWAHhHggDmeqqGFhoxvuOgsJgOiX76UEDrYeKMhGgJdRtrh2vfz9IqsXp/AMQjH
-            XIX41pV4HaESqzObL0auYTcKOy48GJA8oJ5sYgp/+A9eUMEuF+d86D4Frt22CFPS
-            XAEQ8dZk3Fk7yWf05IN6RtTwf1vSIt4U8LCkKzKEFYrl5hNy8J20tG+7mzzU1siI
-            ZXXVXg3KfCstnK6l1N9viLzMFDZNU+x338Ts1o7PNdbpn45wKd7d5+TM8BD3
-            =BHnz
+            hQIMA82M54yws73UARAAlG6c+zGkA1S88afoYsKQSsZhmHwk2ir7yYhtDDBwLjNn
+            y0QeiXrzEE7O+4haNVJPwexresikGXKC60cEvEHUtACww7Rt+LJhCfmMde9EOHrI
+            0Vc8W+FPoCiSGSTiEGx+fUVApuliIOFUeVEWxeq1dvapNi9CP+K3HBA7X4wPFk26
+            MZYZfJzGzn7hAoAy/7dgkUJUWuHxKN2xboFBMfz50/2K1ySvDnxC9svem01QcpkV
+            WGGNHW7/eYHgs4psYuNIGT/YLAxhqoM1dgqxwSA6Rwnlfqq1Yu9dnIJemap/NJpO
+            5sxtro50NGO9fKvpNeF9NmLzeJamGCTWvX+Qm8l71AhKoxvyoTg+y0UCoa7Teb1I
+            sZ0li0HWGC69olq5gzShDsE9BpIAbO0YfzNSselSxdESAcZW1wTfzGzbI73r6UVI
+            2/qSw0MIvl6iAOPoirPazMtpBElmuIpvNQ5DFg/Osg6s8plaxQsSE9T+EOS3jWPa
+            qNafMhERIQcFAKeRwx9eQGWVGxYsYBAPVLeI8Ln56LlNNIZQtIRchJQZPAdPy2oD
+            1yFb+awHkEF60GSp4cCjKuvMsPwtBMtLM9W/uACtxB0bEkHcxb1qhXSa07MqDJSF
+            nCJZ4nz4ag5COMj8WtxGpM+XQ3bmnCGzGofTw/AFayNVUIG6TwmZM419ITXwjEjS
+            XAF9ibqfnyc8jx0fPVQC0FW7JyLZtWIo58vLTw3RjDWLPLlqnSNKXIEQE3OqTv8M
+            7Hm3PpCH86vwjvh2unSucW7ywzIpiveKTncjYg+tcIXTVRkPm/7NuTtpa2V1
+            =uKLG
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
-        - created_at: "2024-09-02T04:43:59Z"
+        - created_at: "2024-09-05T07:51:02Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA2W9MER3HLb7AQf9EdFmGAoYejAmSCe7oA9JMi7HJqlbnniRO6jirp/Vwz+D
-            yah+I65PzVvBUF5QResZj61RS5jSt+dClBYI605zEd5yHPy6dXiP48oyS52Ud8TB
-            Khw0TMIONtvchVoUZD8rCqBS9Ru9Q3OIeIAvFYgvjwwxC3t50Cfl/My3QcQVOcHl
-            18KWHIec/meHgeZoh3smkn6bUTT5VCHM8NAq22/q8i1yxFtO0VPbO5+4DgxX8k5r
-            YA33e4Y9rwYMSqAGtiKvXUe4yTCY/vv0cNTpbvbdjCMqgETWIp2EKuP2nz0U+S8/
-            xOeeyKmFDL+eipTiJuscFtRPnaeoRp1MKYkOYJlUT9JcAZBB1f7Ie3/NOxF4yNnW
-            Jxkpqoq770c+ihjTu6XN11WaYG6m93yasD3i1IVZEDcsUkEXzgI9y+73Cgooyx/y
-            MyMZc/1Aeqsxrq+wM/rQXvfq2KIOzEWwZ/l7ANo=
-            =dcnj
+            hQEMA2W9MER3HLb7AQf+MA1E2mHw/ENNrXgBABKi+BI0DGIvCfOW1OFU1JzVoAg6
+            lwTUH7mILoV1gO9UyxNG9K1F0rf++1vRtqNYXxjFFs6PkS8akuINTpjQJ40cDNlQ
+            r0szTzYEZ517Vsf1n+iBQCH3WFRAa2LwMmtOaySiklRpOJ2fVB9Iga1/wC24UYua
+            GEfeDCU1nRHtdaIxam6QrfrUAJqKyKPufKKDRbLHsPAOcs4cijgdi/uDLO35NhV1
+            h1z16isR73+ExnXUu61D7E0Du7NfEXxWOOQOyyyLku8mRucf09AVlu/9tXjgjsPL
+            7V7ALmJXdXJ1qKDUeJ4JinN7eVtsFhjMJceftdnb19JcAWJfsynrC0RPSamd4Whs
+            fMbxrIzxa5T+rbqhmw0jiwItAfXr++HkQqzCK2oBVyrjOr6cLyV4vsEexjoU38En
+            5ZQ9A+D1Ivk254KwsTh5vwoIzLyDp1AV0cseGU0=
+            =QiP0
             -----END PGP MESSAGE-----
           fp: 65BD3044771CB6FB
     unencrypted_suffix: _unencrypted
diff --git a/nixos/secrets/nix.yaml b/nixos/secrets/nix.yaml
index 02c07294..15760594 100644
--- a/nixos/secrets/nix.yaml
+++ b/nixos/secrets/nix.yaml
@@ -9,129 +9,138 @@ sops:
         - recipient: age12ze362pu5mza6ef9akrptr7hfe4auaqul4rkta7kyy2tnrstqensgmujeq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZSHo4NUIzRWZ0UHV4cURS
-            UjlicERub3p1b092TkI2UVp5cVV6UkRMUng0Ci9oNDYyVHE1REVPTGtNRGJPK3pu
-            YktMb2h0MEtFcDlYZDRTMkY3T1dJUzQKLS0tIEFYWk1TcXBvVWRNRVk5ZlhCdVpY
-            WENmSHgrbmlvNVlTU2RJbXlmRUUyWTAKTF3GAmRQjIOf5of967GUS9qNCCzBuwJM
-            9Rx15HZ78j8c/1f/E6buuRKODHTsGPeJw8YC+dHODAsGO+zgeFq+hA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIQW02MlViL2l0dkZRV0NN
+            UU9tRDVjRitodWZDRWF0bnlZTDFmWnZzREhRCnFzWnJLTUtjRmxnYm02eWQ3akNF
+            NEI0aVRmOERuV3gxZ1RBWjMvTkZoY1UKLS0tIHNweVhzK3h2QUNhSDczVnpSVWls
+            cDBOY1U2SEsxcUVvSW5SdWh3dnZ6UlkK0WVqsEz+nsSRVHVqFu/dCQXDpBheLhaV
+            NQu/Hj7ZfQfqrUwI5CZkLpIklD/a/+3XZwfiDzyKdvLkGwPGzZiVmg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age176uyyyk7veqnzmm8xzwfhf0u23m6hm02cldlfkldunqe6std0gcq6lg057
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpWldKRGRQMGxpK3k1RWtL
-            K0o4UEI0MjNoK3NiTUtuK1ZocWhKSmRUK1RjCmxsL1JMS3c1SDFNWjVMU0kwWjBu
-            TUpBbmhYZGRGMHFKRHFWRm85ejRPYzgKLS0tIFdaWlVqeTA2R3V5eEhlYllDVytu
-            ak5pZWFIYTFOdzFGeEtGV3plQjNoZXcKWVrL/UVJ9Yk8CByKKh/kilxJmCL38jqh
-            ncXbfAO00hOYU8WRfxlqCdrYa3zDmafGN43ukoGo96WMUF5WkK3RLQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMlRHNy9MMnBjYVhLd1Rl
+            bUNGSVZGWEVKb3htOXBGVUpiYWcydXJzNlRjCjhneFpLRGM0ZWVaeWdCR2ZWT0dx
+            N1lBMDJKTiszalhjSmlINE5Yemc4TlkKLS0tIFVzR1krays1dG8wc2E3S29ESXdk
+            cDJJeG9WTUk2UVEvYlp5NXFRa1JFa28KY7wRC3eQHhXXPFyadVdN0FyNfszCymuF
+            u4GZvWpwvBNc3TLDLAXw211MeAyqKbcM7O+K38v2xAd9OId98zP1PQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15hmlkd9p5rladsjzpmvrh6u34xvggu9mzdsdxdj3ms43tltxeuhq4g7g9k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRlJaTTdOOTZNWjRISjBp
-            KzMxRTRVSmg2cjVYRlJlKzBHNXQzeVE2dENFCi9KTUNCVW1ZbTRXL21vSytjNzdN
-            V0lad0NXNUtxdnV1bkcwam4xNUl5d0kKLS0tIHZEbkNjMkVKVW0zeWp5VUh6amNr
-            TXZxcmhuQW1NK1NHcDFzZXFzTVJoSDAKMATeJQyP6a4rL21AaYXKzjPvC4uBxK0g
-            srjnKBoQsiFSXU3usbWUAAN268KiWqDLIhepABLkLIZnWG5TVIRnVQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOaTI2TlpoK1FaNGMzdmNF
+            THBQMklBbGNYN1VQUmd0dnJhSnYxT1BVQzNFClh1aWoyUGdTdlZGMytHWCs0ZDV6
+            QTFadDJYMGpYNldOMU95Vml5eUcvSEEKLS0tIHhieVIzU1hWZjhsUDdkYXBNelRT
+            b0Q0TzQzbGZTZk5Xc1VRU2VnL1k0K00KJFCMvjMIgVLo6kxp8bLlCq7im5xkf9wu
+            aCOWYWqK3JpbRQkL3zPKZ5HB1Glec+HXRAz5KJLvmfWJ/7kiM87FXw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age10t6kc5069cyky929vvxk8aznqyxpkx3k5h5rmlyz83xtjmr22ahqe8mzes
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqWFFqRnc0cENFdkNpcEU5
-            YzJDZWdFcmtpQkxZN1RFM21pTHQzeS9XdFg0Ck5ISTJxMTNrYnZTcUVTQjV4cWdi
-            bWk0aXk2YVozeEVXcHB6VGRzcS8yc2MKLS0tIE9sYVJtVDRYWGpPMGdabzVyL0t4
-            SUhMbXEzRGdqU0JvQ2tSampjMkU3cTQKrpALgi5t0E0Dy/343LKok1WgESNPIh0k
-            yZsoOiBnOhIdKDiUVX8VBuW0zmWDYnc3f6bEqrs672pibSNHOGqzqQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNeUtsMng4SVlmaFl0OSty
+            SWwwNm9qSVVEMkdxdjl3WFY2cFl1d2h6RDJvCk9Zc1lvUUlVbzJveTJJQXVvbkZi
+            Tlk2ZURiMVc5UzlxV29lb3hKemNXeWcKLS0tIFE3UkVPMW9JY0kzVEIxOHVMZTFp
+            YXlpNFdZSWwxeXhkRkcrN0xsZUdzb2MKruCSqSNuEszLwCpZI2AFeHLR5gMTE8J0
+            L9SlBScgoXl/c6JmTYO1ypjhOw/6eQkWyR4WwqK17kall9AiIhfsIA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a2quf2ekkj94ygu7wgvhrvh44fwn32c0l2cwvgvjh23wst90s54szdsvgr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOGczbDUzK1lqTjZpTHpi
-            V2dhRmRacVhzMTh5NGFxUWtoRmZlVTAwZjFrCm5tSVhrMVAyaUhkdXNZcFhTUGF4
-            QTFLTVBzaS9JdkQ5MkI1Umd6NDRLdVEKLS0tIGVWVEMvK2NuNXhNYTFiL09CWGtH
-            NWtCOFUxM0NUWlVLSVAzaWVDc3c2THMKWbG+uW5rlRyCbO2fGyCXHkWD6bw4dwOm
-            2WtZXZrsSZOiVULngz2PayNX1URtASI9GJwJa7PZ68CbyIwrCcnX/g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQnBlVE45Mmc4eXkwTXpK
+            R1ZIdlVvcFZRUVVEQnpWNG4vMmJ2SHZoR1FVClpUZnhRckRGNjVGNEQ3ZllkRU1N
+            VXViU2F6b3RUdFZseDdHelJHS1ZPTzgKLS0tIG9hblpvei9hOHFhRVZNTDRJdVFX
+            OEZsT2dZMFFwQzFpMXVKS2V1Skx6YVEKjSTFzQs/fjIkhhWsyLP4JoaEnSYI2+Xm
+            ZYzUur6xPZpVCiO869g+Xu2h/iOA2GJvrPOrTdIDvhe8RZkBGsriog==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age16klpkaut5759dut8mdm3jn0rnp8w6kxyvs9n6ntqrdsayjtd7upqlvw489
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCb2hDM01JK0dKejBjR3hG
-            OXNsV1JhL1Jwa1RCR1MySERHdXl5bE55TnhZCkM0ajF5QnRhQW1kTXFQS2UyRUl6
-            d3VIUGEzODBuMnI2dmpEaDNmSTh4REkKLS0tIFc3bUxBSHFUU29Sck9CamFLbVNC
-            VDlqOUx0NW1nR2F6VWtWVytITmNFWVEK1tPZCG/VNUSuqVbfBy40rWBj8ayh/Uu9
-            0JHYPZBKs4r4hVD5fyUnA48/SVgc+8k1XK/vvy1PGiHKvS1DGZaimQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvUGozeU5RZ1YzZGFuVmVt
+            STBaSUJvdmoxNjFnRXo1OFpiNGIxb2xJOUNRClQrb0d3WnJETTdPcGZBNXNwS2ZL
+            ZkNaVWZFRWY1QTZ1L3dHdDRKWWljTzQKLS0tIFlHa2pEMVp4SVpzckplcG5hYVZZ
+            MFZ6NDBvQWVVdjV2UUJCQ0k3RzZDc3MKreaGTPONE6EjOCXcuufMDj4hXVpmGmUH
+            YQrDdq9hSsG/fIIIgnIB3Y9mAFXcyl++0Mk16xn+G9L+YH13QIgHPA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xg6zm9t25wjakljm54m38pjdr9q53jysdcl82r5xwkrn0cgyuvvsuh63eh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3RldHVkU5UHExaGlzL08x
-            bW44b1FEZ3o0UnBaRTVFc0tKeW9xUnArS2d3CkR5RmJsQlhPcnkrcFQrdGQ2aFZS
-            VlIwdXFIWDRqTFEwd1E0dUpkRjJ6eUkKLS0tIHVQT2FKa0hwcDA3Rm5Nb3pJSTk2
-            OVhyZC9wNnoyY3FOam1pT0dJV0VzRmMKSXCD733vJpIeV4ZAq0yU8y6OYY6m+UOc
-            +tNQF+bGUh3zTHG+6D8QHwYwAYBrJhJHSdzR7UQZPsixphvI4vpgHg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3cDl6dVJ6Umd2SUQ0aE1L
+            ZW1RN2dNemdSQ2FHdEFNTlA5Nlc4cXJ5QTFFClBuVU01ckNmREo0dlFnRHlRK0Vx
+            aDUwMXhuQzdjcUpyRkNtMk5SbVV4N2sKLS0tIHRoNWx5QnU2ZXZ5RE54aFR0eXZ0
+            UVhqVmZOQ0VteEhIeXl5Y2Z2L3cwWjAKFzvZUvBuD5At8B7GNKbPXWrIU/nsPTLc
+            o0zbCs8+L6NtxUL55c5yV9O4zQlhENrVZuvntX+CVUtkQNKN7sxT9g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ktmx2szedfnpe5xumnzs8vkk0ffqgga6ved3drtksg9pye6ndsnsnqq488
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZkhIRjNXWHAzRkp5VitC
-            aUVnUStFVGtQVnhrSmJLNzVQL2s4b0xtTGtFCkV2K3F4QmF0eERLYmZxRXpJMU14
-            aXZSK090akxNVkFTeWJnM3NLYjRVM0EKLS0tICtURm55ek5rNEdySkNTaE1TSjRj
-            dGJ1MUJMcEQwZlJZZkJvOXF4ZFVTRGcKOhVZwJ+9YVGfZlFYObj0fqUju9gF/gSb
-            HbRP+baeA0r954aqaNDZ2Xho9RrsJ4r2GGVFhfIkJPGrvbS7XsNptg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFMjEvb3UrRi9uTkppSWx3
+            TWdtZ1pZNktzQVQxVUFrTVhhY2pqSUovOGtNCkFtNVVJb2pUVy9pVER2V0FvdEJO
+            YzY0ZHAvN1NiL3E2aFRiQUMzdmYwMGsKLS0tIDVqYU0xdHF6TmUwMTdlME1VYzE0
+            SEV5aXprWGlWSUhIOGdrNnQzakQ0N0EK/4O7MW0PMojEakYAdnVUq1yiKXgK9qai
+            ZTa9qyjwdMPap1g0IuuYlQ3gfXEuEBB1diZRrerxqUSv2ZmC3RcpmQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fjcafp0j45sz03zq5srnxyq2mujndmn25vceg3wj2cgzymqm73ssmhdgku
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQ3o4NjBhNzdkSDlpbzRk
-            K3ZrYnpJM1p0R3Zrb0RNM2RnM2lyOFhVMlI4CjZZRFJKUHJCQ3JKYmxDb1dnQzkr
-            L3AzR3NVYzVBN2ZOaVlRS3pzbkVVZGMKLS0tIEl5NDRwcnlpbFRtcmdRaTg5MHJ4
-            OGJ4WWVyaDB2WmdpWmZ4WkJ3S1dKaXMKOlsV8sdyTc5ZIrTnMz4/7wO7gArjEDGL
-            hwmICNn5yxB/keMSFWQAUFT+LkKihYrkbqgvWW+t1XJXCd2H/FuvUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBelNIR1lpSU1rbE9aeGhh
+            cGo3NmdFUElydHZOQjY0cS9CR1I3Wlp6L1Z3CnpYck90RXorWVl0b2J1OXpQZmdO
+            MWhRZnBnalR0d2ZxYlBVTktXSlB5K1UKLS0tIGYrYjc5c2QvaWRGL1NWZEV5alZO
+            UEVKNzVhRmliQ3RUNm5NZm1CZDEwODgK6R9d0GW60F5GoiPjpB3oWfcfhZU5CRcT
+            cDxssXHEbwx8OF/oeIuPqcyr9qoX0eMUwyjXzO0eHsZTSqma3wekKg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ehdj6hghtr8sf5s5c03rru4y3a02nwrt694e36tjnd6g7eq4l43qfradn6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5RTQ1NU5FbTRLYksrSUpM
+            QjYrQ01LNWpTSU9uYUpybWFDaUhrNWpERkNRClFjZjdRRFEzRDl6RUtsblZaNWFI
+            M244L28vbWdXYlBkSHRoMEN2U1RNUEUKLS0tIHptVGE1NzAyMkxGSmxobUlWaDZF
+            RDNBVTZad0FZUFpOMlZyaW9LZHZuVlEKKt/1vfRxjHp/o02FqVnSKBlpLi01lIXU
+            FE26oDyU3PjEM4tsCNGW21JZyC1DSYyNOwDrLPXRVm9l2Q2qOo0WIQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1tkkau8vk5h9dh3kemash4eghn7lk84j0hhpmvvf7j6phgcsm9vmsphv0py
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRkI2QlZlQUo4emx3Vy8r
-            LzhkVC85Q0ZtWmdyU0VISUd3WU5LREFKZFE4Cm94TUlSVExKRXIzWlhSN3JzQ3c0
-            SU8vSkVPTEtmbU9DWmpEZ0ovUXF3ejAKLS0tIDN5MERiUXY5Z0JFMTJJMnJJempy
-            T20zSWJkQXovdlVrTHBmd2UvWlFLZ2cKI6LzlKC3rY0cw0YnN433vqrowRKBX12n
-            CGkrU9CEs6Xk2OlFmm9Iq70Jl3j9QwGb1LLbyTPUc11nX/xFP4rvTQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UGlMRk5ZTlg2b2JZM2li
+            V01DaWNhZTlCVXVUdlFZWlVrNms4MnpyK0JFCm5SL3BDWlBBaWgrbFU0UHZ1UW9z
+            TDlBK09YbGNIOHF1OWpOZitXMVdKT28KLS0tIHFEK1gzWWwwdWo3ZXQ1SHlXUGRw
+            UHlyK1pXWWsxMmoxd05ES0hrNGo4K0EK8CbIth83GNXFyuNNglXWrPoJtZLg3itD
+            9c8IlsWzSIcYvFGDS0Hr4wQk4sn4KMs6KRrZXJuXRwZ7nf8iKEm0qw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-03-14T03:48:48Z"
     mac: ENC[AES256_GCM,data:u7G4YsCFxUkgOsKLRurxlEl358aLdBdFOrOtO9TUu0JUHRx8QjPcYgfHgHFXqNTfJs+0kVvcbAzNJxNAIMWRQrVDy3+i3YFlyTcDAh6CufkIXRM6fxnX1YHzZGEtC7bpBASTpSgGJzVt7XqGrqE7v8H+q63MugjHYsKtmIG7lO0=,iv:0Zrw4+Cmfv6bjn3lYoinkYdj/TinALpyOFP7Nd8w9MA=,tag:8gi04GcF6JCBwfmVEulSmA==,type:str]
     pgp:
-        - created_at: "2024-09-02T04:45:43Z"
+        - created_at: "2024-09-05T07:52:41Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAApk3GYE2URBjfTrOmho5R3ff84LfqFJfNyknokEb8T6Bz
-            r1QbUHqcqv3j8mV/Ap7zUn0XLHmgczS9FGq8W2UXukD5MhD77CRL3q25vse2ciCP
-            b9RgSNOvnOIPQFBase3fa8dYW1QI1qKdU+z2L3e5OHEio4cz69osVdZEYeftymgM
-            PeexFSu4xMMN/AyYUTGjBbBfsP01YgvsCrL+NAG/L1JEtWZ0IyZUPU2fty2tHRNg
-            zURQWuGAGdQ1OJ6+2WGRoxT3kx9E7eKWd6lx0j5vp8uTdUKAG2RF2q/UmQQxtNhe
-            XqaV7n5/mhnK3suvxRfmFhX9lpkLwo5CwzSwHlTqZtXWEvobPac9GTk7kQoFil/K
-            u0YcWzZrVD40tNkqV57doECG34ZXxD2HbX/oOFBjXWBk51tECTsAxlG+KgYVTEvm
-            /sA7cMvxbxvtlelbEWmzioOK4QwfxXL9KyiV1POAXWuvSVPPZzLNPvBbu2XIhuhM
-            nsYaJSedIoNfHO7tVJncpn9pS0viWYVau9cL+4fb99+qPOG8OjzYlUHMAyOwCE0E
-            hXWt0ahcPSghvVtDjpXhVxCxc1j6eF0aF0NWOpqx07LhhbP1Q22W/vXd+P4k56fl
-            ytdUvdbHA+AQ1qKl8cJpdaQvJpmnJADj4KAmwfKKd0OwWr3IC3AiOvSFSGXBAK7S
-            XgGyhXWRju+QYxkE9Kc0I83M4vA7pHou8HbtMN72oNyZxheL8Pwg3bXIAhgIwmEb
-            yBfikU4hLYK+JwjzOrtjZAPULMWarugbPxEy936NHqSvLWh5pFbn/HTcxp/7+to=
-            =jtT6
+            hQIMA82M54yws73UAQ/9GLMjLp6LNOubnid2N2zYvjqnVW659hbzuQOW/n9ED61T
+            P3tHP1sLFiNPlivOjA3MDfDpZWN8hy1j0/ehqNlNAULAVHVB1RTB05KMkWfWsHhA
+            gthYrwTTVsyHA6e5zp+EsjyKKIPVwYX78SBhNDIzQqk+yLnW1s97f1nGqKP0Ho6K
+            eiUz2cXewcJLD2oeZ8IPTOHS00a2wXfSTYI/QzLl3blsDkFGvWa9GjI0TVq4YJQM
+            CmTW9wMHwoSpqyDod60HatM+Lf8CCcuwO54KBHuiRBfVE/vQXHXdsQJH8bM0t9Z9
+            eCCstPbY8tPpBcBrNGoUyIK8whqyh833THy0TsIC+65IvW01kK/xj6ciBIakabSk
+            dq2L/Gty5hDnmciqIyurOB1eD9PgXfuRxmPmQHeXpUCq2x2VMvCekADFJqStJm9B
+            aUv0+ydMuGeBqIF16zDkxJ+YGoBgAMZzRM00tuJrQdKS8d5PNp4IiQUwiTLq00Rf
+            Cq72G7m0yg/npuiCf0dHSctLTdkV4Tjzsl7L9FJQDF7ggD5TiG0tZX21itvnQ029
+            nTg+zCm4yqy7eg17V1jUcjcfZVGxw23aq7jbYfpj66tGv6FvstoZ+WviTjJe8hGJ
+            TYZvjFb04Lr4FV56XH78dvEfFqjRwRHj+clU+d9ovtyyUlOlbqUZ7ChxoX+Uyj3S
+            XgEy6D1KHI6cRpy6eUwGLa7tJH1+eLYHPfBccONH9mYUERuSmOaUfhJG7CWFaYeK
+            FvjjFx05mzRgci/3xwK/zvc6305+gDHxFzB60mTc9mwRftH9FmCV5MIUJQu8n7M=
+            =mT0A
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
-        - created_at: "2024-09-02T04:45:43Z"
+        - created_at: "2024-09-05T07:52:41Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA2W9MER3HLb7AQf/Thy0ZD5mwG1cV9tqieIFHeXK6Fb1JD7SQLI6obmACo3S
-            b++PMdw1TXW5TymsUGjocAuIvjnB92jCJDMWR9wMXPtj5M/Rq9rmQ8L4p8L54vT7
-            ad0VMtpnjH0FU3cqEFQt8Oed61szQAWzRhfv0UE67nn0vKgQN1PQ2KC6i61bTldn
-            TpnABMbupSiV1To8FXyu/3IcYuIbODfHpbrXtfKXczHprAaXWymrUG7FreouijV2
-            qC662H4dFRDYOZFyDI7DO1zb9WoJ4NR7ziY3BX5SpvMFx+3zeKNrF5t8cM4lr2jz
-            juAjfjDgUqdSJRArjjXrjbFrcJWtiVEBzzcpXX1X29JeAfmBwk0nY1B/iBYLESg9
-            pDZUr+KpuiwOf/aiyOr6knCuad51cCiYE4Uj1hw9Q+2ku7BVg54NdUxOJgg3Gxk5
-            Nnx+u8+21ikzzlSkkQp4n1A5EIRCvk3ENqZRmOxzHg==
-            =Owxh
+            hQEMA2W9MER3HLb7AQgA0/wtQOQ9+4GcQ5cwa84wU2zmyyJHqMgvnZhkar/gqEsn
+            YS1QWWuhxhU8y472BLJJfOIalNuLVCVy6bka2oW0nC/feM13sxQmTGbstdm30ykL
+            4UpSRfpKME+ak5OCTukumJjAzqdtIE3gQsR343W5PbQ57Apzk0EP2XrbJGBMcKKz
+            izea7XudTuMim8eqN+p/aiwIACI5GEJpxc7nf+HalSNvstX3of9LjJ20qv/bq3Bb
+            5KYeVCNP+gGPvOoioewNfwzB3EU2tzVwfHoT3foSLUlj2FqRNl3zWt1dCaXx03KT
+            0pujIabnTV8d7dHUHtYlb+KTFDQ8haFu8PK4rZxJV9JeAQ+qfTEeUAvyWJQwFkmj
+            NPwr7pnG8GwVUQREQjsTmjMhTxc4HDvZgrbelVxKcWxPewlCcWMKUMhDoER5+VhY
+            srOijQG0yAJmWKKaxR82T25tDMpzoHCbONG3Ivv5iA==
+            =ZflT
             -----END PGP MESSAGE-----
           fp: 65BD3044771CB6FB
     unencrypted_suffix: _unencrypted
diff --git a/systems/sakuya/default.nix b/systems/sakuya/default.nix
new file mode 100644
index 00000000..4790abab
--- /dev/null
+++ b/systems/sakuya/default.nix
@@ -0,0 +1,27 @@
+_: {
+  arch = "aarch64";
+  type = "NixOS";
+  ci.allowFailure = true;
+  access.online.enable = false;
+  modules = [
+    ./nixos.nix
+  ];
+deploy = {
+hostname = "10.1.1.50";
+};
+  network.networks = {
+    tail = {
+      #address4 = "100.70.124.79";
+      #address6 = "fd7a:115c:a1e0::b001:7c4f";
+    };
+    local = {
+      macAddress = "02:ba:46:f8:40:52";
+      address4 = "10.1.1.50";
+    };
+  };
+  exports = {
+    services = {
+      tailscale.enable = true;
+    };
+  };
+}
diff --git a/systems/sakuya/nixos.nix b/systems/sakuya/nixos.nix
new file mode 100644
index 00000000..377fbbf7
--- /dev/null
+++ b/systems/sakuya/nixos.nix
@@ -0,0 +1,46 @@
+{ config, meta, ... }: {
+
+  imports = let
+    inherit (meta) nixos;
+   in [
+    nixos.sops
+    nixos.tailscale
+  ];
+  boot.loader = {
+    grub.enable = false;
+    generic-extlinux-compatible.enable = true;
+  };
+
+  fileSystems."/" = {
+      device = "/dev/disk/by-uuid/44444444-4444-4444-8888-888888888888";
+      fsType = "ext4";
+    };
+
+  networking.useNetworkd = true;
+  systemd.network = {
+    networks."40-end0" = {
+      inherit (config.systemd.network.links.end0) matchConfig;
+      address = ["10.1.1.50/24"];
+      gateway = ["10.1.1.1"];
+      DHCP = "no";
+      networkConfig = {
+        IPv6AcceptRA = true;
+      };
+      linkConfig = {
+        Multicast = true;
+      };
+    };
+    links.end0 = {
+      matchConfig = {
+        Type = "ether";
+        MACAddress = "02:ba:46:f8:40:52";
+      };
+      linkConfig = {
+        WakeOnLan = "magic";
+      };
+    };
+  };
+  sops.defaultSopsFile = ./secrets.yaml;
+
+  system.stateVersion = "24.11";
+}
diff --git a/systems/sakuya/secrets.yaml b/systems/sakuya/secrets.yaml
new file mode 100644
index 00000000..ab893c73
--- /dev/null
+++ b/systems/sakuya/secrets.yaml
@@ -0,0 +1,57 @@
+tailscale-key: ENC[AES256_GCM,data:MnCZvQHOE4rtQ0snTo1igA0HSP0vsa1tx2AU3mdyaoNof7L1/73fKOk7sU1pj1xPfEONt+g0vQvCuqpWdA==,iv:IbcL4oYiulQhMCdlLneC2xF5ytNvZgv/1pw1KzprOvQ=,tag:B9hK7l3mEH5VwaknchlBNQ==,type:str]
+sops:
+    shamir_threshold: 1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1ehdj6hghtr8sf5s5c03rru4y3a02nwrt694e36tjnd6g7eq4l43qfradn6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBua09JNmxOK0VMc3BQeTJk
+            aHhTdzJ1VkIwTndsUWlFQ1VTNGJhWEhEdTNRCjc2cUREcThZSnVTU0c1Y1kyUDl3
+            SWtGR21yditWdThib2dlZGlaZytTbTQKLS0tIDREUmhVNFNFcXhacUhnemwvalV5
+            TlhHWmdGY2NNUFVTNFM0QlFnZG9kMzQKTmEA+Q18XxHwGD28kmO+M/TXw1wJLo8m
+            Ea8/36iM04M/ik5EH9GrWGp8ctX7Mp4p+VqDr3WNwSFZZFBp7sga+Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-09-05T07:37:01Z"
+    mac: ENC[AES256_GCM,data:2Q48p8IS8gHjzYkYahrRGwqMTRR9WbL8DykcgbLrPZYn0BaM7n6XfNKBhlM5jk9WZ1lF1KD89YNAnsY+QUUZzr9zBoX8JCWDU/YABSC2FuJKjn5wIUlGzRJJ92T/95KJVXmRiE6CzXukXWIApWagPRjF8B3UbJb9K0BmniKVmFU=,iv:7FdZaWEV/Y3seIhFguQiHlbop0etZnb/RGgvVWjm/oY=,tag:Om7nsDsyzNK+AorZYFg7mQ==,type:str]
+    pgp:
+        - created_at: "2024-09-05T07:54:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA82M54yws73UAQ/9E+4Nr8P/ZdhSeVo9unUthyLDj3VKYUrGa5AkjcIDbK85
+            7FtFjzevVNvYvSlZtD+pw6H/u2AS5mYN0X3+Ee4DrMOzvVnad7x7shF0sv2kGpY1
+            YAjMkUvkpE+q2DPD6U3rwIJnYCbfW+S3jZPgyf+XmLh4fjOfIgL5GN2GziEqNKkf
+            i4MkgWtoEOf8NYDruRNdnWGwgXc6y3DCa7RkmFdK+ZDGSHZij4n4EDntoLi/EbeZ
+            K+E3eTPYRDVUMMIAxSDuKl9sNhTcopudTWf6zjcUdK2T8loIfKwhwH9nmnykrAx+
+            eXSEyUrTcn0K1MrxIVS1RZ+vfvb7M+IscnjZ62vUAQGOsdW7Y548pRoQq9M1jdWE
+            fIJW34dpdf6QzXdOsqfNvxMXHZup5XRvuXMsbL/oweP+gqlq8P8dTLiobaODscW9
+            Avd0PcQ3flkGudbSUh7femFbMsIS6/BVWuGeWALbq+UFL9yNA+Xd9cdOBbA12uBK
+            /zh9xmR2qlWgDg1GDRkl2vLULd7sD571mOJS/53xSlzjaY8ETMZwhrwwhgulFnVL
+            jGIJ3VdEVwoHlm4wOkW3/MyxkMExQKtLYFm0rGrRHvgmqK9LdiNewo6fvwzlsbjq
+            /f1uIOnMgDDfirC+oODCQ8XWKWFChoasuoyc7cNGklTPRaZFkk80qdplbTsUsvDS
+            XgEqR2/AIRiU1782o7WjaXxvGLO8KNQeSPXyEGEoIafB77vUf0RpiQ+L//n65BZo
+            uZwnEcx+dmzmnH2N3JkyXgEytf0zBWiUpPyilIWhZAVYZIRYYuNMCE7ZiYe2/d4=
+            =Sg+M
+            -----END PGP MESSAGE-----
+          fp: CD8CE78CB0B3BDD4
+        - created_at: "2024-09-05T07:54:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA2W9MER3HLb7AQgAxfHLjKmHlCztdD67lkFkF7ugeZlE3ADUhmVgkyaw4OJC
+            tixKcl8dsaIYpW+QeE5NFnXYaW2ypfvuN0KpG1vj7hg0HkvTJUiVGSFt9VLNvpfx
+            iHyHPhKBAWgcD1MwJOLcmn2CyHucSYj4rbIOywv2rXgsiVwEzQlPY5ioXmu0RiWD
+            DPJEcA/s1a7cBkuxYL1j/c0yuqvzyFXWkgggUGMH5nQJc430muj17/TgOQzx/9gC
+            ea+PtRnSbRRYdYnzqSrNFpC+IDiKotluU8dawWgTERPDUZoJkjFWOGEZf5c6Qdz7
+            VNw4mfMzswhfkF2F6eVAEmun77rUm8yG3L3ryq70ldJeAcaP29EwWnl3j/DPzuhL
+            pnNzrBSyjeIIXU8oBOFe8gST6iuZFsjc+c6fMpLaeEzrhKry7HaoErGTcnhUB0U7
+            Cdh46/fsr4ZmXE0fDeBeu0+6BUwgwo9Iq0oswTiRIQ==
+            =2YsX
+            -----END PGP MESSAGE-----
+          fp: 65BD3044771CB6FB
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0