fixes for tf and mail

.sops.yaml

@@ -11,6 +11,7 @@ keys:
 - &goliath age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
 - &goliath_kat age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
 - &syncthing age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+- &rinnosuke age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
 creation_rules:
 - path_regex: tf/terraform.tfvars.sops$
   shamir_threshold: 1
@@ -30,6 +31,7 @@ creation_rules:
     - *mei
     - *mai
     - *daiyousei
+    - *rinnosuke
     - *goliath
     - *goliath_kat
     - *syncthing

ci/secrets.yaml

@@ -6,105 +6,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQcDVVU0d6Tnl4Z21WUmtN
-            VVBhK0VDdUFQNTZ3UG01R0UvSE56WUdkekZZCnE3VTM4eThlVnE5ZDROM2VNMDJp
-            UW0xYWYzVmNxbUwycng3T1VXQnZLMFUKLS0tIG5EdXlGcS8wY0Uvajc0NUNCZTdK
-            WEYxRjZIc1NNejUvQkh3UVI3SkV2YlUK2yKYeQlEcGNk+rn89YNY0qP5M1p8j2mC
-            x12ZN591nx/X4K5rQiNAcafTH+WbCkGRtI8nmmq77yGNJtUt7DIwZQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0RGluTXZCWlAzdlRNZElI
+            QnVmVnZnUkRuM1g2amJmQk1BTFF4M1ZiMTMwCjdLa2YreUI1SFJ3NTdnOXk1RFJW
+            eE5JYml0Tkk1d3hEYU1VdUtvT2R0MU0KLS0tIGIvdXVxZ3luUVBQZ2pFbi9BczVO
+            RHFnZEs3OWUwcmtZMjVtc242THp0M1kKTo7qcyCsSgDwnEObsNZMCNYPk3OZs2uU
+            ZfwbmwGjLohwT7I5FAUWaVe9j1ryyYi0KyE4jmsNtSV4DHv/ews2yg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVFNhdUU4U1dMS1R5b1BX
-            K3htL2MzRVNMdTUySGlGcU5VdENEUTJLT0NnCnc3SVdLSVVlRTZqQnIwQWRZWGNR
-            L3N6MEd6aWRSalMvZ1VNMVpQNTgyOXcKLS0tIGNwM3hZd2NMeHNtVXlTSWpVYVgv
-            cjM0YkN3ejUxdzBwUGJsbUJiSnM0czAKlV0g8bC3hTHg1+vSJDpS9PmTOrcchpj1
-            5H3iCKOw/baehoLGNPhSczg8VgQYbesFSArMOuw/h/4viX0vaK0pRw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMVVpQThiUUxLQ25iRTJy
+            V0Y1WUc4SkVjYnFYZ0lxNzF2ZUdreStEbm5VClZpM3FHY1VtSlh5ZkZJNlZ4M1NM
+            WkFxWHB3NkYrNFNNb1hIaWxGMzBreDQKLS0tIHUyeVgvRHRFMXhYdGxCekZnOWNn
+            ZkZwcW9DenFYTWw4cXRndDFoR2VNR0UKDRSyrdbFmG/OVD1xGftJD1909jnsAKWU
+            1fPNg975r0ZX+th0M+vsBxs8qpu8Utbs2t7IrexUPBOvowqBGhXpMw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0c1A1Q3RQblArYnhwT2FN
-            aGFUMDVJVTlzMTNkTUY1MzVlVWJ0U0NaYlFNCjU2WFZhQVcvVzVOWng4M1M0V1d5
-            OGZzK1QwRndxSmg0UHduQ2FSVEZxejQKLS0tIHNSckgyWEtDUEZlUTNpQ2k0a3dP
-            SW0yUnc2VXpvRUsrWk41Wkp4RTZNLzQKEnoANt6UAqpMMJ4zaeLSYUoVJR7/RdHW
-            tYeAmzdnHmFLdmVmY7tbn2B3dacPgTl3Z0/yqwHvFtV6t8vlWjyCmA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArL1dzcDQzM0lZVjFPVkIr
+            MWFhdHIvMEQ1elgya1JMMytxMmhIWTFJWUNRCjJQRmk2eldTcVBXVlh1dTgwZ2xQ
+            a2VRWm5VMW80YTJTbldvbjFGdXJDajAKLS0tIDBDK1NFNjJwTE1QTWZRR3llbnBz
+            c3dmTjF2UEp4WUxpdFBmRFY1YVo0U0UKZYTcLBY55TCax0dwrDC299E2Hl34f4w+
+            wjrXk8GQT3ZeKB2KOXuKP/D2EjgpVX2oRn9dfcdaP1CA/d1PpJkriw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMeVMxeWVJM1BGWit1MWZB
-            QVpwcnZKbTNwMFZ3SWtxZzFKTUVDZmJybXdVCm5jOSsyQkxJeWZKemxxV0lrZUlX
-            c0VqTytWbHdjMXdoRFRURzZ1b1ZkbGcKLS0tIDl2ajdnTVQ5WkRPZW9STWhTMjhL
-            WkUwTi9kK25MOUFMK1NkUmljTjJ1RVkKF4w/ekqXd8rn3AH1EgnXKUdNHM8lYu+v
-            Dhn+kZ4W0ZaDmXTvuF5wetypJy//z2nOaIEv4wRLyD0Z2r/aGom9ZQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlblVzZEtlVEFmeXp5K0dD
+            TXVxT2hjSzdpdDRYZlc3OFRJdEVTY0lOMXp3CkkyUEdSRXJpSk5jZzNvWHJjQ0pX
+            b0d0cFZrZ1NxUkxTVVVLMzB1VjRYVG8KLS0tIDFxejN2enl3anhuVG0xV1Z1d3hu
+            cExlckc4alYyQkJPZTkrbjBLQWtDLzAKgLr93GIH4gn02gzoupezG9JeWz2BuFAU
+            oda82/+oIDLVe7HkwMJTtU6Z7LdqwAjy2ZxmdIHarp0N/+7FLRlkjw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwekhNUFA4MTFUV3hHcDJw
-            Nk5OVGkxN2tHUU43OVNkcEFQQVZJY2c4N2dFCkpFNDc1YnMzUVhZbW5sR2RkbEgv
-            ZnFGL0NISU4vVGIwa2pyblhScHU2bGsKLS0tIHFtVFVQRDVLd3A4ZVdyUkUxOTdY
-            U2NOdWZGOE55S281NGFndE5yQ01Xd2sKannrKuh1iwchmJs82MQC7P+dgH/MFkB4
-            w/O2wYfZA0BsfEZDouJn6fdBegEo75mYeHxjE/lEGsGKT76z1slR7w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6QjBqcktwY3EwYUsxVDJH
+            d0EyRE1OOGtrUEVvdFNKYkptZU9wNUlzZjBRClRGVzZtUzg1bVRySEdLQ3gwZnFH
+            YkF2ZS91NFdRNWt4SjdCMmF4bndxU1kKLS0tIG9WUDdWMXRKWEtIRTNJQmhDNDZF
+            dHdqNmFZeVBGODhlZFV2U215eGJPRkUK2bfMMBOkKzT+LK4KAgCcsPn0z5WR0U90
+            PvNlwe+fyDZCRQZPn1ZGVFstPCPMbAiQrBiLx1F4U6K/y2kS0psDCg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNnhYUnk0VXFiRkllZ2xL
-            UFJHOXhscnI3cWczNW84bHZCdGlqTW1RSGdNCnZkVDV4V252dWpWMWtEbVd0ZzF3
-            Q1ZoZmNzb0IyS0wxYnVaUGlIZktRYlkKLS0tIGw4Smo3MlI3R0diRmF1OVg1UTJi
-            bXFIeXZyVWFlZWxCSXN6ZUZKelpITncKcRiUXdw6Evx46145cjLAo75K4JI8xZew
-            32NANADFDwk53iLtgAuNzn3JARP5lj5D+PcIRYsKiTW79O/7HrGjiA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOE1IeDI2RWIxdTdkUDNm
+            cTBvSkpzMi9WbW8va0NQZ3hHY2JzeDVGSVdJCjllOEJWcjkrSEF2VVhXcTRVelNq
+            R2tZWCtwcW5OV0pHajkzZ0srOHdqbWMKLS0tIENYUjUycVJFRzJFb3lDUUJYRDgx
+            YWp4UFBmNHZDZWJkeGd2WXIrcm1mMjgKCsZ0P0djxAMbbQKEczRryb8LrRRy+16G
+            H+fPdY1rF2BhDCIHZ+/n7skdSlzl/VdF/MoBH1oNDl3hwnTnuyhv0A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGdGNBdGdzNnNvTjNsMU9C
-            YmFOV25wNXJWZkR1K1hDSWc4Ym9vVCs2Z2g0CkR1RVJxampaclA5MFFESU9Pc3py
-            OGFDb253Sy9tUGNDRXVUSHczTEYrZ1kKLS0tIEpFeW9BbHpNVXc3blg0alBwdWJQ
-            NTdhWDVkZXpSME5YN015cE8rUTk2UkEKT5bjhzEkkfgfw0wEEAyhn1BlmywD6K49
-            4nlYb/OGcniYEYsOT+ntPdH0Oxtoz2aDEHnay+Tm0jhfjG5IzCbNOQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZM1NXVmNyZnRiR3c0TzRC
+            WGxpdXFzNG4vOG9KWDNiay9EVHFhdmxpRkRZCkFCTlZTRGVJUUNRQnNaMkFWNy8x
+            d3FPSmlORXVMSUNjZTIvN2ZsZEFCMmMKLS0tIEVaeHNVMzJsVjgxVkZobi9uVTdw
+            akxrVGVPM3Rmb2c3RHJBbURCQnJRZ28Krm9E2Ozm9OFnBcGUPGrRvZoP/qmYIuvs
+            uJx/3D2zr9dbE779mZBH4ehQtvpqrS1rYa89JQSzBgzXxPca3JuNEg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjemxJOWN3MHdNcW4xZEFE
+            eEZnRnljbnI3WVQzZU1EY2ttTkkzVHFlbUcwCi9jM0kzNmZHNUVVRzhybnRRZ0ZE
+            ZDZtQ3RFVUpSb2Zkd1ZvckwxSjZ3UVkKLS0tIHlDamtKSSsvS1FCZnEzTWNDbkZ3
+            QzNxQmQzNHJYRXNzNnFibXo2UUhLLzAKVv7ObjoBbNh1fKEgK2Gcx9YcKlPRqIt9
+            DeHZ8wUYUSFhXKrJAVs4liFJUlyWPVKZjOqHvURWH9w0rk0fxQ6qZQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiaGJnWG1zUlZBQmpaQUZk
-            NVUyaTJGdllnNW0rOTcxWUZzZkJaazhZU0JNCnRPOFVFL1hBNEdFZ1BWTXJkSldS
-            SDVmQnlmOTBzR1Y1bzMwTXZWWmszNk0KLS0tIFlIK3VrQ1Avc2JRdFh4OVhlL1Vq
-            MDByMlFmT1VwMTEwL2g4V0pkMXVIMWcKgK+lIHA70+cJ9Ronncef7+EpCaeIf0W6
-            7nj0qinwzbaaAD3nh+N3rXFwdWuWHdy8uW6HzHRiYCFvZADPOysG1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzcHJtQmVaYnlLY3VWV1I1
+            cWE0QVdBWTRWTDFwNEd3bC96SC83RHNYaVJVCmdxUk4rMmdXZWhKa2YrVWs3SXZ0
+            Q25PckpZVFJMWENTT3VYNk90S1pDVVkKLS0tIGRhV3k0cFlZcjg4Z3J3Uks0RjFD
+            NkRsa0Y0bGtUbDJ0OU5aL2tVa0Y2bXcKNwlIokmq+QLEF5O0Cp4eYW/T52+b4RWE
+            JEpfLB0WpU1l/W3gaPQPDUeSbuU0hTFrbo78SkxhHz2D3oX+cOdKgg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ0dud09WejljNWRrQnNl
-            WEszOERHZXloVmk4Y3pHNlEwQXNPRVp6S0FFCnAzTUVQdHFxWWlKZVV2Z0MzMUU3
-            RjE0ekxjemxWNDV4Q0RRdGtHUEIyaGMKLS0tIDhoVGJUUFFWM3FaV0xDOG9JVis4
-            b2wxOHJhL1ZsYmM1SGVObGZFZXdjU00KzoHRqXrRocb6i3cifkYV7ffiA8zxd6pN
-            oSm+mlKbwG64obad1A32tgOVplka3POkZTeuNCDOs50yeZsN9Luq3w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXL0pmM3J4RUk2SXFJNkY0
+            S3pZY09HSm9XYlFJZTBmT1UrNXFKOXRjSmk4CmE2aGNJUzN0aXdNNk9vZUdIaUdE
+            TFFKS0E0UzhDREN5T3Y4U2dwZGMrM2sKLS0tIDZuUTZSOEd0dDdJYzJtdjRDcUpl
+            Rm5HMk9HS2hrNHVlcGJpcmIzbW5RajgKzmh/YaylCOgR0heqfo3eSFf9CEQVObnk
+            oUfyTYO+sQYJIXfXq0kDwdHHbKy52UnNfWME31SLu+mvF4gSAzcGNQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBURkVJTTg1UHY4MUFFeGRo
+            Q1d4WGt5UytyQkRWcmcvMXFuQnBMQzV6Uld3ClRrcVE1TmFVREduaEpBNFJRcHdC
+            STFwUy81b3FEcWhHVkFxWCs3N21nSHcKLS0tIE5MWGJUbFlPeVRhbkNtQm9tSlY3
+            ak92MXlqUFJpYndRK2tIOEVsTzJxeVkK10mtUKsmhAy75WROgUIC1ftNiPcSAKbw
+            JC78iBUU4vH+NzuOY4BJhgQTv1CQPICL4U+Wb8PPMz+f0dt1Nu5AEg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-07-13T20:01:47Z"
     mac: ENC[AES256_GCM,data:bXjy4R50FqQg7kXdFO7CoylAJYlGFFsgcIw6Wp63lD/MXChPyPrXdxaoDkZb8T3FmzfgWOjiiBn98tN5xSH3e/eOST3SAjlIp6vrI6oNw+I4NLoSJ6xOQcF3OLxErzuQLffK7Gn+EfjUmJjZpyuLced9jyRVPOYKoAweFeeRTuI=,iv:E9B2/HdSL7/56KU5A0HvGiJqDUGodfdN3YDpAlO0To4=,tag:Xr1XzjmCiePtdES6JliuCw==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:03Z"
+        - created_at: "2025-12-04T04:57:59Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAAua+n9lKoYEjvqua9DjTORNDOK6GWgnkbtw920t0Xtpm7
-            tfEf0N49nX/KEtS+CC7j8UhcC8Pvm6Mvdoqjhtjl6bL95e1quao0s01weDr03W2s
-            FihLWRFp8NdRSO3UVnubG6VMwfWFoRNarwkAISbGMyVKWrvP3xyFL2TDrHMzhthm
-            /HAOM6+zX1T6Gyma/KEtqk1u3vL11O1/5Tg2tlSMobz9mI4Bqlqhn0z4xIOOLabx
-            Mn/8QL/dLuWlADkum8b1IuE+3kDN2Fb0Ayp9WqUTnnVPGKEQrDDvK0emPYu8XIzj
-            qBEy8MzE9HmnkQHafI+eDtH4B9uSA5py8CafmjdPj8aY3ji8mmpKnRzQG806w11n
-            r7Cz6uVxLj9I86oYcdwxVi/oqCsCB9pbMum5advaRV2BuigsxobVU8D7LtZ9IaTk
-            U4r1vkGqv8BCYMNTW985w5zFl6qiHbxady2owhu5R+AezD28iHp+S8R0p/sutBmz
-            +p6TjtHIA4MDbAswkMHryHC+Z2U4ieTAYjaRxX5C0zLBvpkUabCom5T7zKfVJp+V
-            d+1g1BqGJf4f8HERQCXMyJBIrFAV4u8muz6e6CZaIlgIMx8OYFotXJKlkxBqEcfD
-            mh/6vWBKebekvKjXyDrNT00eS2XhbC7mHnwyMMry+uJwRazHmBHPOesV7YfmvyHS
-            XgHw1T0X7EaJP0EOuBoSdqc4ge6RRM/BYH3apJGciO/c/bmGDhad1z8syeoLkaIx
-            GvA1V4dJXa4qAPcpVjtRZ8pAAu9w1W84oHZJsJ2FDfIq7xIJQyLdoiDFjkQgqb8=
-            =cpl4
+            hQIMA82M54yws73UARAAuoUHcm/RxRWfCgW6hk6cSSV04ikncQWbGaPDecxFifDR
+            +f0qQao4HjauWtoblf/BAxlW5H9bm0hPJgl/bciVmv3f22jTX36F2Bbkc21wxV4Q
+            7WsZe0qlqRN7HOkiMF+WT8wADiJ/Dutv3w4XmAdkYlUO/c1aUs9ofX5dVLApsXMM
+            HuXelsmRlvrhXwo0odXlTZ93qrdS4FgCk5CawozEfBfSi4avNtl4e7Wt5X6tO3xk
+            EOFBEDUBFNTegjCpbM/HCie6T39iP9sW6dJNpwR2P7pim0MdhPApVdJskf21N5H5
+            e7GvUM5zrcpHmAfWWlsPNTQNSgpJoUu1KYYPpJ8ZGfQANDXh9Eh8Mhop24bBYH5k
+            lnFDzWb6ie9RH/7sXx83dHGX1XCkpG9Lvt4rDu27txKW5fdFSUVCg/4HVvAM7U1q
+            zEnj9AsqLKZC+SLSI2OoHg3auUdLwWmZV/+URnlje5NccLKmY2V+2OjbA7rNifI4
+            3WoAlbPl81wL3knYh+a2iQ4aXBPe62N9N4zDCL+wwNSF7C0DbrJ9ZsAwnOM4aKho
+            N2rkjY+QuL7rvMaM0TPTX8dfMfX5t4GKN8MJPwuQModarV7oAeQ6ehqQIwdkJfwo
+            L1fE39NimXsg/DYTVrKzFOKtcHMTxPQ1nZ+sDwKRgzCdPMmsOywAHEkCEw1O5zvS
+            XgF2aw8UhIUlxNcfH8AWmWp8WaDosqa5GeXYozH0bJJmLQ+bZGBA1ArWQ0YkyAxn
+            F4VufdElS4wEQT/CpNZm3x0SNFd6yCKYCLu4yndg/xS+wUfZKAlXBZMTv8HCXjs=
+            =kJt7
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

flake.nix

@@ -331,6 +331,7 @@
     arcexprs = {
       #url = "github:kittywitch/arcexprs/master";
       url = "github:arcnmx/nixexprs/master";
+      inputs.nixpkgs.follows = "nixpkgs";
     };
     base16 = {
       url = "github:arcnmx/base16.nix/flake";
@@ -374,10 +375,14 @@
     slimevr-wrangler = {
       url = "github:kittywitch/slimevr-wrangler-flake";
       inputs = {
-        #nixpkgs.follows = "nixpkgs";
+        nixpkgs.follows = "nixpkgs";
         slimevr-wrangler-src.follows = "slimevr-wrangler-src";
       };
     };
+    simple-nixos-mailserver = {
+      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
   outputs = inputs: import ./outputs.nix {inherit inputs;};
 }

home/environments/niri/niri.nix

@@ -6,9 +6,6 @@
 }: let
   inherit (lib.meta) getExe;
 in {
-  imports = [
-    niri.hmModules.niri
-  ];
   home.packages = with pkgs; [
     wl-clipboard
     pamixer

home/profiles/graphical/secrets.yaml

@@ -5,105 +5,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Q1drTjJvaFJOUW8zUXl3
-            NTJiSXdqZ3Rkc2lsV3ZjS0ZQNG9OOXA3OTNNCjRXTFlnM2RYR3dtTXRtNDJxQWJB
-            S0IrZ2treEViQlg0bWRzVURmZVk5NFkKLS0tIGJZNVI0cjFlYWxoenJnYTVjVGph
-            RjdoUlcwYUJNTkRCbU0wRkxad0RBRkUKNvuQBBclSyol4uyBdowQsWuov20DGyRS
-            hTmRQJRSyk4DXa9LV4195w6uwPiXwvoHmLHZB0FEF3YffdUjJZ2uPg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFbVVOdTRVMUptdnFjbUtB
+            Z3VuM3Z3Ylh4aWxGVGw5SEpCelhXUTJtTFRVCnpqRVVXSEQ2emJ3RmdCWldkaVRT
+            YUhFNTJ6NVZHMjhvbEJpQ3hBclNJNTQKLS0tIHRFa041aE5rVjFOTE9Hb3V1ZXRL
+            TmV6SjhoMm9rZkNNSGxjOEs0bFFJOEUKG97/46aRMNXYu4DG8tO4rgdkl72DHHha
+            496jMdtyTczcGAiv4Jn1RrCA0kcCeYrjJuyh8XY6mc2wDH428SI7jg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaWklaYzlxZWNveExuMUFa
-            aTlHQ1B1Qkg3ajdzUG1QSDJFYmxPR2FCQmtjClFQMnJTemFQQVFNVXIwRGo4MXFV
-            RlZaYVdlTkJZVGZrYm5uS01nR2VFV0UKLS0tIFV6OHBvRGc0NmVnejNzcU9RaUNH
-            UHZpR1c4OTZEc1dUM0loMUsrd084RGcK4brlH27rtrI/NqDnvdVYQ3BxaWjEfpdq
-            J0YVapFYKor9ZmyUzDWnZ91fRAY/s/gMaItANrq2W2+Ayn0FAOxboQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSUJEY3daNUxHQjg1djN6
+            cTNUdmNlR2RJcTNwL2NSaVlhZ2dLYVp0MDJFCjhHLzFQeldFS0YzaytENmdnMzRC
+            U0didHlqcGZBRzdMUzJIWjdQaDN5Z0kKLS0tIFZmV3hrQ1FyOWlWbFJjTFBXVmox
+            YnZhVURnZEpHZ3ZkZTVLZUV4bUplZ00KsvT18oRAQ+/Aq3de+qo/BlXEBa7KpScN
+            eKBNxxN8KEWYW8YBYT9VPHKRL3OU6BE/vjea4sRh9KLmOkRz9X+xAA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBR1RjUlVZaTlyci9BL0ox
-            SEp3TmZTZ1JrR2dsYW1BY3Z1ODRYeUtPV1JrCjBSOStoTHlTQ29iVjdiTkd1MlFR
-            UDl4Ym1MRU1lSDNCRG1hVjZta3E5TUEKLS0tIFN0SDIwajhZVDdnVnZBVGJvSys5
-            M1hNNWVvSHhjaFkrRk5Bdjd6RHNKaDQKqLREZ5b8fkwGnypNVBzZVnrTbhz8aJDb
-            tAluSMfSsspgmp+j2bygXdIIE4z6hxdfWVoAF/G9HyV0xbeu8U5+tQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZXJmamxBQ05LWC9YcEcv
+            YmowM3c0SVVZc29kK3NQYXpEMktob1I2UEEwCncvM080K28wd09aT1U3M2h2U0tN
+            eTZ5WlVzWk1mOFpOVUU3QmdHYnFDSHcKLS0tIFY4MFZtK0REZHJDREVQNG5rRFRq
+            d1JDaFhTZEhyUyt5bCs0ZjZqNy9CV1kKl0opBF8V7yuTQiNmF4CBn5DbRKTjIj79
+            1DD9zXMpCd7jKBOvko8TQkayUoH4+qY+If/IXJJCkXy8ALQNY2Z/GQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTdWdlQ0dEb1c2QzZ4b28w
-            c3RLTmo1NHVFeW54ZlBmWHJxa043Z3dMbHljCldlRGlmaUcyZmJQMkJBTmZBS3Js
-            cmp3Sm9ISFJISUxNL3pnRXlzSjZYWXMKLS0tIFBMNExrRmdEczY2cmNaMGFJdlhs
-            SnVtVTJvazJWYzVFT0VlUi91V1ljSk0K6Ae06Mih2gwmW2XOir9U46QQm9toJzSB
-            lzcuJuOHRl6vq6V7lxlYWJyvMwbehwIRRhnxfQLyrKVUVtTxBwEFoQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBselVRVnlKOFl1bnFZSDN5
+            a0VTa3VOaUsyeXhOQ3FNUzlZeDlZM0w2RkYwCkZmZGpSSkVkVkEydXdFaHk2WjZC
+            VlB4QUxaSHNtUFJ5RlRwV0hCUzZtY00KLS0tICtjWGZwNXBkelhGSTNHNGVjdXVr
+            TTJ5OXBBVW5HQjZjUVdCMmdiYysxUG8Kaviohi0P4qU+oiJL7d6tiFVVcGgseUeL
+            2CUpSZvxpe6ZF0a7VUgQjKqquShOHg3yEU+pf/fG0fIMSmqb5eu7bQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dk1HTm5nTFEreml6U0Jl
-            MHZZTTZlVnJ5THkyd01oZE5oOXZOaHBWeEV3ClhyRVNKMGpRdG04VGlvNGx1b1Rh
-            dU1xS3BTd05XaDF2WXdmODBmU1JRdFkKLS0tIHU1VWlDV3MwRjlGTmVhd0N0anJ2
-            L3NOSWVvMEgzbngydWxsT1RTUHRvblUKQfTOzHYGE5qt+5y6qdLQnzJfEuGHkF2g
-            d6QKGb5rVgjVyRYyK0OC5rf82dxpb8roo2zeYODNNC5AYOP9HzM4fA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxOW50S2tPZUtUcGRlUW1U
+            OFYycmdOVFRqc3BUc0hxZ2hrZ2hxbkZXU0RVClZSc3EyNXRHdEtxVEFsL015UEdR
+            MnUrelhEYlc4anV4N0FERnk0SExUK2sKLS0tIHNIQ1dNMVZlb05wTnZueVRrdFMr
+            RFRBZlMyQ0UxajQ3MnQ1RUc0QVczTFEKOV6n5e2+WfCr/MgX42nDlPWSXCgFXxEy
+            NHVoct4F8NzqxCJ+IeNbxuZkpFd4BDsg82WCQT7sBI2RcRANWT7frQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHVkg2ajAzd29WUCtHZStm
-            d0RiOEp4NHFHbVhwOHMrU3lFcURlZHhqaERvCjBjRU9MZk9mMUtnMzBVMWJCQ0Z6
-            TG51b01uVlVRNFZrNjNKRWpJdkZRcW8KLS0tIGRkSVVPOTNaZmtiSkI4RlFPRXBx
-            QldqODBYMXdlczVWVHpYcWl6OGttdmcK7OMNGRZShN4nEZ4RiiUM1Kc9kFeJJXoh
-            YSsfnDsRkSUPIoX1uwkLqTZ01cUBI/nurIjWz+iawVQYXipfgjShCA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1azNCeVkrZThUY0w0ZEFT
+            RzdPVHJSdXlhd3djOVFrMXM0VzdWbFVEOFdJCmx4OTg3QzhweWV4MmFNTjI3UFN2
+            ZUxkNmJjb0JqTThNTDE1YXJtdDcxSFEKLS0tIG9VazFxL2hpU1hyeGlzbm5HTXlH
+            Q1FRR1d3Qzc1eUxSQWxWWkdPeVkxMmcKwd61DX0BhZ/CynCOOO7oq99Ytvii9z0R
+            y5qEl8v9iTKmJERin/xYeh1pwV6qz0CYkwKYMPq2++5+aH3BF0l6tg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5RGY0UG91R0h0Vmt0SDlt
-            YUplRS9mbFppOG40UlVDWjYvak9HbnZ3dEg4CnRteXJzdWhDTGJWaTJlRFRjUlBr
-            dDc1eEE0aGlUK1dKWnY1RFFmalFsUU0KLS0tIGhURkF0bENRSEx1OXdFNk8vU0dh
-            SU11d2ZVNk03bnh5WEpUY0F3NGtWbkUKwfrFY+j1gEVnLvWlnDvDtyJsPELLu2D8
-            dzOfRn6pybIMTlAKNzfHPEq3fAmLIO8/Q6mnwAu7rvecnFkq626gaA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUkJCcUJmZ1ErdHVXVFYz
+            WklBU3dVa1l4bXA3VEs0Z3UxcmI2MnVGZ3kwCjFud0c5amswaGdFb2lmNU1INkhR
+            d2ZEUTRrNkNmTTJJd2syL2l5RkZpeFEKLS0tIC92L3VmQXkvMFpwZHg1elUrNmJr
+            Zk9YVmtQaFcrL2hSSXlwcllVbXRSakkKXHUhfnD4haIzktc3UeOerWycwUDw9BK6
+            5/6rIldi0JYS//4W6DRo6pB84Xc59M0yWN3M6g3qMld2019ohsTmcg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqanJOTjJRS3lZQVV3UFFa
+            cmN0NkxmeS80aXpKZVVjZEl0OWJLMHJSOHlnCm5LM002QVdQUWl4dmhYUVQvR2Zz
+            ekR3SzBNR2krOWJyVHQwSzV6VUd1eG8KLS0tICt1NjVvWk1Xby96UkhxdFRYQU85
+            aVFUNUJEeS9kVUxhcEJ0YkFlOWM4eEUKtdW7FJUEQkxTyfZsvmQ34jQCpHnT5FOm
+            +3uKArpPamaIkAsR5SUe0+GXLShnTxexsJ6W9ezz7kvrJ7b4Bjx+qA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaWRQREtKUHgwS0w5L0FD
-            cmRUaVlQUk9HNUgyRkpYRHpRL0w2bXhlclM0CkY5MXc2Q1FRTkZ0RG0zb3Qwc281
-            RDd3dDlSMG5ZVGl6N3hRWUVKbVg4SVEKLS0tIEdoN1kzV1ZVNkE2WlR4K3BQRk1v
-            bkJ3cHllclZnQ0lBZ1dpeWNZOHBGL0UK4ZuYfSlBIpDLvfnq5ly4CWwMfb/KhST8
-            +SPSEmd7bAMKa7eUGqVj7dGhn0BK66PjIgQ6GSMyafRy4wUp5CAu4g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZlJ0VE50NHJkMnJiL1Rm
+            OWVPSDJ4RmhXZ3RvbVJhVTRycUsvbjZleVZnCkJRYUpMOXI4QjlKYmJ6d1JJRXVr
+            S3JhUFRQMnEvQnJGNCthczRkYll3VEUKLS0tIDF2Q3pSSzlLTnEwSzY1THhkNHlL
+            N2ZlTGI4TnRZbUN4RUFqK0xwME9YZ0UKmkomcUw777OLT+5/WWibhz0QaRtMpyeu
+            /70t/Djw4dx05RoFBRmoIBKxZgBqWuTml5vGxmiZwGkAIsRWK4s/xQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObzg4Y2JEejN0cVlkTW9a
-            V1NsbzZUenN4eXlWYnFicTNlVnRhcGpvblNrCm05MGJqWmo4TnJXMWdmVlZHRC9a
-            VVdrSTRuYjZzZEx6dThnR2Fodm4zMVEKLS0tIGJuNUFWQ29iZHVucFVFTERaT1dj
-            TkxxMmlncWhYTE9pK2pCRk01QWUyNjQKpK2q6Vhx+QHs6PBjA4E4LXhIO39ErguD
-            EEg+GWhYf10TUvlQcLOdEa7llkSKznImrT/3Glt++pNKT+tzAPvvbw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNWkrSHJjeVR5WjAwQTFu
+            U1B5d0NLU25nckRITjJFbXQ2Z21WR1NjMUc0CktBaGpvTWVEYU1MMTk2bFNsZUVq
+            cDZuRWVnbHBzY2ZwaHVPYkk3dnM3SDQKLS0tIEVEQXZ4ZWZ5WENQeTBIWTFKOGlY
+            UUJuTFU4TDhrTkUvL1hCK09LRkxTazgKjI1L+wZLXaNfKQSW28u+9HU2irRXfxvI
+            ugtO4dvjzowamoxdjT/jTu4fm8pkuYNInKnPuOBvRt8RWlzsKn3Zxg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsL3lGOGdGR2l5UDZwT0p1
+            bzd4Nnd2QkI5eElEYWllRWZCWTZPcHk0ZHhNCkNBaVE5MERWdnN0aWd6TUVsaEg2
+            YWZUblRSWDk2eU56cHF2OVhqMFVaNzgKLS0tIFQ4K1plU1pjcE5oYllqTnRwS2dD
+            WXRJYThMRzJtc1VqUTJOVmEzSXZINkkKMzPp33Nv18X0CSeWXRSffzYZxXUjg61T
+            pPkAFaiZcBDJIMDcKX0tX+cAoPBO/cTrye34XNlN/E06qOT8GKs+xg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-07-13T18:22:26Z"
     mac: ENC[AES256_GCM,data:k9ml5lzn3OYlJVXFMtJ71dj2FaOZ27BSBPqtLr2ExUKDZUc9AkMTt1DOxQAOIpVmzJdWicVkqFTszfqi03+oPQ11/WZnNFC8FzF4v96LTQ4/OCgVm+ZQhovPV0haw3oZEYHi6tKbtM5BDW++ibjawWOyWQGKL4ZLF+MQEjB0GMU=,iv:w0U2bwC9Th6y24AQBeYx/IaJXROItBPbfPRtWrYEYr0=,tag:92QiGpY2jwszXffW4V9hBw==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:06Z"
+        - created_at: "2025-12-04T04:58:01Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAAjjEgU8iA/LqS9pKB3hgKqcAOtT+CUXVOvikabwawlnxe
-            Ct07d9EpV3JRXAdHp6ZuBt/tixtWKqYRrL70d06Lb/nZQdKZo+6ancvcCh2U88n1
-            NDUyK/TVS1DfWyMM5pOGg/Mz6UKgLaxmHI2EqqqY+WExy6nkNdOczWaTNDmUynnn
-            6ARNbX6CaJYO1A4FFNNmExgRLj/reV8JyF+nQ9DbkCHrqx1LXcVVHK5p/6MW3RKX
-            W101VXm/UgJEA0UzTCNAmUwmoju3J1MfUq6FzycqTQacG9iQGkO30E5GwCw/di95
-            nsalnQ8d4aWIF6QjFI2433UBJum0crRr27oFTVzUIexeRhKZOTFan3R+s9tOxNbG
-            lTx6OL2TXtipVagcW9lkwsHVEoPvIEOBcKYrsM7Vx0a+VFb3znKPdKa3keCOQuHe
-            uSOkEhK/niVrGjZGE4GGXwXItMEnlGgEbOY3hqniN//3pzpbTZZ+hl1kAMODAxm2
-            zi1419CQ5BFHF+f3/lW7SCR3irXr2bIKp23JlmPBd/j2Fc5Ul15NGKkM9p7P8+tF
-            sbwPb/QkXWKHZVjmSFZJrHR2kRduu7dXZp6E5dgDJYTS92mN/8xjX3pU6OUVFl4P
-            eeUrsP67hLLPRD/e/vp4v5/60xBC3q0dzQ3GUh/nV/+X0Q/nDJr8YwtoNlqv0v7S
-            XgELJm97reU/IrIwhQSR5RHdFb3NTF0mcpCua5VDAF1Ah9zPToT38IgPdLV4sh03
-            ZSPEMT3/092xY3fZIOsXxQpCuYXkbydkp5GubVOr8QppB0Mjgh7YyvhQaU5QVVM=
-            =R9Qm
+            hQIMA82M54yws73UAQ/6Aqi3ccb/oR6TPu/VhRgsE6sK5talWCFE3Vz5BhuZdhhy
+            edzQ6CkI1md4ThZxytmJz4CKKkg5GYvRj3IIx2rr+4TO/JTjXB62KBF8BzBIKE9y
+            shO3vSbECAs2nHmkK46e8RLRFHxqFK3PPXwbXNzxuZ/BmnL7T/Ajeu7Wb+pcDnll
+            rs92PYM0reues4JdgwcFKmIw49Oow4CZJr18PeXy3vrHpQ5c25HC+dnhrT5xb5iq
+            vbHKUyvc2bnF8BN5qSMd8mis42fVFEXJDA6z1UOwmqPWCLBcERIspou/+MZp6QwU
+            3Z1qvB/BlPZloLSLEOAouykzQ+cFB4ZT+H50nCvcPnDHPGgx9+SRC8mkRI+iGJko
+            ZH3cgdqcF6Tgs7hIqyi3ufKROLeBDQcPga+Pxk7Qqzhnb5HeVCKZ14OS94W+HbEe
+            LZgCVZK51oyYRO7ZDdLWZZpmsQu3tegFCUFkxlEYupxxBR7S/7WqVFp8C+yd/vlQ
+            DQ7Ud/vXzQC4nJxACkylWJw6SXgyo/43ojUAScenSsXNI8mkYiApKa+8sOjlCRd5
+            bO7w4MsDgu47JN2Z7vIkIU1skFVjh9MuKO1bmf8x6DG2F6aLM6TwVNZlxGXPzq8S
+            P55Y728YwntPqqKWvg4v38SqtHN1Rz/G1t3pgRtJIe/cCxr3UVZyq2yUrcGdbSTS
+            XgEFdzdjWv8QAaZk1gERDwCuoKaV5BRWbUxPoRLivdz+9GIsNsXPmpVsS/7etlve
+            STD8Be/2h+wPBGQFSK8p2dFnNano/t2JvQB1FamUzJqBv8C9/QV9okGPm9dGvS8=
+            =h1sR
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

home/profiles/shell/git.nix

@@ -4,7 +4,7 @@
   ...
 }: {
   home.packages = with pkgs; [
-    gitAndTools.git-remote-gcrypt
+    git-remote-gcrypt
     git-crypt
     git-revise
     radicle-tui
@@ -16,7 +16,7 @@
     };
     git = {
       inherit (tree.home.user.data) userName userEmail;
-      package = pkgs.gitAndTools.gitFull;
+      package = pkgs.gitFull;
       enable = true;
       delta = {
         enable = true;

nixos/common/secrets.yaml

@@ -7,105 +7,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4azRDd0wyWE10MFJvaWVZ
-            cVgyVWJpSy95VmE3RUM4SHFYK1FVU0NFK1NzCkcvYkVxamV3dU43V3lrNWtLeHRX
-            Ulg3YnN3N3JlNGNmSGdQam11L3FrRTgKLS0tIDVGTFRaRnpRR1hBNlZrUVUzZlBa
-            cDhrT1Z6WXZnc2NmK0w2Z2xqc3BXOFUKgFLY/Vk6M98dtJS5FLt2srkc+Xa9QDg5
-            o5W8Nj0wBvDfh99rvmEiGtHGZ1XGTFhbytQAqlC6MFmze7Kwb16PqQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRNlJNaEUvdmpjNW05OG5D
+            RWxtb1JobUdKSWZ5SjB3WDFaUUJFOHEwTVFNClUrZStUK2xMVzVxZjF1aUtBMnVp
+            V1dZK1RDV0NBajdMM1MyUlVRcmpFOXMKLS0tIHlBNFZPVHlDdEhFL2YxTWIrcVhS
+            KzJXRjQwUTZDR05aZ2luNy9vT2ZFa1kKO0sfxaGVaAUoJEnpQ/OppE/TcGqYbiuY
+            3y1fNlFVOOYwqxvnSaqiBn2Dlfq6ugyf/AxW5HKLzp3gtkY0Cd9SxQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4WWtSK1NUMkU1dmVpeWhn
-            QTZ0NHhDUVVxa3lXVDd1d1Zqank3MHdCTkdVCisxc1dlRjlJSFdRR1dDQXhCY28v
-            NWNZRGthaW9zRkRiVGFiUEl5MFlmZlEKLS0tIFF5b3RkejRkR3VqRmEwRWhmNVlB
-            bWFlUGZuS2x3OEpyd0ZpalpGckJaZGMKQgRUfM4L71uDiExl/Ivgq3RAK5G9W7yw
-            IqU8C7jJlllzkX0gecO5kXDHOnkbEsMT+flmn0x6UqaebsMOCD7DiA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaGYvbzNuUUtSM1VEdHAv
+            T0ZhSWtJOUNjL2ZtTVQyaFd5NmtBSlo1T1ZvCkZROHZpN010R0w3MU9veWlVQS83
+            QVZYcmtyTlVMRTBBUzhLaVYxcUFyb2cKLS0tIGhwa2FkZy9YeDFpZnpad3hZQmQ2
+            TUFyNXdsYlFRV3lnUi9ON3FXZlMyNlEKRT1o5RV5gtiuuyxM2hLUxlVzhck2Nqz6
+            DvyZUsdjitw7RpMZbS/verDBelO5fbXqVDrdWm7YnIQKc4SJdIn9fA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuV24xTEVJY3c5TzMxQTh2
-            Mm8xWFZhTEpOS0cwcHR3dWpocUlDNS9OU1dBCjREVS80V01aaDdXeWg5M2pUVVFM
-            ZDJCYm1iMlBVU3RQbSt5Ylp6bXExa1EKLS0tIDNWL3hsMFpDS2hTeHFBSmY0SG13
-            YUpZd2dOWUloQnAxQjBWT2NKek9LYncK4QL+vBOydAZUWJOI0t6A7wtEFLlhKsZV
-            fVFC7JjGzjqaNifFGO5+8RH+Iwe+zmgEZTWKAw8K/z/qO1KWv/jYNA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQU4rS1o2NDkzTndXa3Jo
+            RG5XQ1FFeG1RV0YySHB5dmtjQ0RxWG5aN0VRCjhBUWVOeWxzZnlPYzRJZFd2cXZa
+            OXp6TUNWdEhoVVdnWFV1bjc3VkxocU0KLS0tIHF3QkJNZTRseEFqN2Vkc1cwZE1k
+            UlRpQU15RDRUSmNnaFN3OGw5YmFNd1EKMlJqQPHAtJ55LSNV9vksuTpZD6G//Pll
+            BaYDlXdwBB72BVrC0Q2C73OtwCmbRhbBS7nnNXhgdzzl3qlGW75IcQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHYXFvMU9VT1ZYdkxuUGNr
-            c2tybm9Mc1haN0ZDaVhURVkrb2tCSW5nV1Y4ClJDTFVRanV5cEU3TVN0YnQrYlRj
-            b0ZKZ01kMjBBeFFVdzRsZDFFZXNSWUEKLS0tIHV0dWdoYUpjYzBmMVNzOWgza29B
-            S1FsbGJLMDhZbVFmODF2dGNPSnByWTAK6KyO4y7aacCNZQ76TTWGt90dFppbjmr7
-            xnqzXFjpVg4Tmrgz8MqPxew+lkHeEH+fZfEtdetyg6vkwJaUWakFcw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsc2UrSkdsK3pBM0NCWVdr
+            S1pNWGVndjEwWGt2aFMzYnRyTDdUMXdINXdvCkVRTVovbnVWc0JCNGdHZFB3Q0V5
+            SUFmR010azhXUjExUHVLMnZhblZFU1UKLS0tIEh4TE94TnVKZHMxdkRRcHVLbnRP
+            K0tncHpLeHVZU3hXSjZKSVVxbWFDMHcK20aUuOsR7/mDOPPpg0mLLa9SkWBnCJb1
+            6hcQ7FtrdxHGEoq6TzduvHnIaUV6fo1jBr0DfKIEIeEjS8gova4B7A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPbVEwL3N0U1BXc2FUa2Yx
-            aGpFTEF3Wm1LQ09Lc1gwaVk0K0JpalV2UjF3CjBPUEtoRVArNFRZbjBYZjQ3RkdM
-            aWQxcGtrZGpKWHZnMXVEMzg0OTFoSlUKLS0tIEZBUGRRZG1pYzZHS0paY2ttaHFH
-            RHZFSWMvb3o4NG5raHNscVJEVDkzSm8KYv4iY381gxpEZzhCjPknKNkKTmUY6NFv
-            gswco+9xWmPd89lKSABmIvDDrHbBPSXq3OFhwXcsZEnsqkwsz2TGPA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFMlFjM3hHeDg5aU1mU2F2
+            N3IxTW9wZlhabUdZL1h3RjZuY25ENW1IOWhVCkNIYmFPTHpuUkhpaFVpcUpZQzEv
+            aXlJTDM1aXZWeTBqakk4cEVOOUdrTEkKLS0tIEIvM04wdG5Zdit4eTBBbDNoVVR6
+            MUw5WTF4RUMxU0Q1QlJkZDE5RHpneDAKyAVph0YZf6JmxRplQtRuBwFOc0GsjpsE
+            7wiRaNzPra1M//Mv4L8SbYURqWWmQ3WCpXs1CypT8mMV6iCSu/yQDg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzN0Q5QTQ1YnM2b1NnK2lU
-            WGdzbERvVlduMFdtQUttSjdTbEhyWit1YURNClhLYUhkNkZkYUNNNEZvL3ZCdCtD
-            U3g2SHFEdGlCdzk0K1hIK2o0d2FZUVEKLS0tIGRDR21BTTBaV3RMMTV3dUtGYzJU
-            enJEOVY0SVZ0VW4vNW9YSGtjak9NajQKksTrw0Ok32SejYpJwAxqFYvKZdL7FoPt
-            II4ClueJZTaIv+IvoZOd4E5ehAyafRg0CYlMlkLCFoQO48SuvRIoMg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2L0xQZjVJVHZrUTREMitN
+            eVc2ZmZTbnhCL2lQQXdWa0JSY292MUtYN0QwCmpWMVg2N3ArUHhsNEtac1poMHpw
+            dTg5aUFvbFo4VURqNmVYbDNhM09ISVUKLS0tIGVUMEVxZzZGRHkrSTFWRjh0alM3
+            aUpYa2VOaDUyQ1ZzdE1NMVZEREVZczQKN3qJqD23yo6jx2soyGet1KsuZSUw5UXG
+            5u5FriLsUXqpBHeEDwap5SUtf+8gTh+HTtcuLmecZ2kf6BtMQr5BpA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrbWxyYWZCZXFSTS9XYm84
-            ZFJQVUVBME0yVnd6MFdnRElWR1NMVEoyaHpzCjBzck9oNjhRVEdHY21remU1Snlz
-            Ump5dDY5dkxzZ0VSdTVPM0hEaE9JZkUKLS0tIGtDeTRZMi9Ea1VhQisweFgxbHRY
-            akg4K2dUcmxMOS9EbXR4WmIyenN6RjQKd6RG0TlYINnYbd+kTQiYZ8sFzxeTsmxh
-            tNDlfZBUUiJD4d6Hmd/NPgAX2/7xtrgmHjCJiYCGI2knxd8XpX4Bdg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Zm9OcUlSQjZvR0xwQWQ5
+            N2Y0U1Zsc1hsaUJ6RDNzT2JTVFdxK0tLWkNvCmlCcFNJdUZoaTZPM0dYYjlZalBx
+            VGszZ2c5bFFtL2hEQ3VkK3dtR2QzK3cKLS0tIGlVNmlsSzlUSjh4SVE4d3I1OGVJ
+            MHM5bkxoOE03Y2lRVUp1YzBVcFFPRWcKdMIuBIdh1Kq238KG/izDjGb3FR0volZc
+            bUhkAG1b3/S9SrsIXYRYMfig+UCb6jvTDwCf16DdkDJk40eFMbncxw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUEo1TGp2NGlMSHZERytl
+            UHNoVW5EMEk0aE1wdDVxbHYzQkhsZTJtandzCndNL3VpWkJwZE1JRWtUeWMzSTlI
+            YlRMTHdyNzBtNy84bDViMGN3NWRRa3MKLS0tIHVXQ0NsU0dLZk1VRjB1UEUzZEUx
+            cHpxNkxZTElrdjM5eVBiWDdKQkxSSEEK0sc3YKo9LQmlJD5AgZcAX3w4WaPPSK69
+            QCV/2ArWMk5dn0ViqVnakWHCry1Ye70v2BEp7qPJ3bvEmj7KUcR4Fw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5a3dxdllITm10dWFHLzBY
-            REFVdHZuaHFlVmQ0dDB3TEV1OEk3bG9HYXgwCkNHekIyREZvaHduUk5XRmNlNUFk
-            TjhyMzc3OTZscGpHS1Fpa0krQjFVT1UKLS0tIDloTVdhZlRuMFUzTjl0a2kzc3hL
-            aTlROFcra2ZBQm05UGJSRHVxZFVud0UKex5mv/uFrGpNTpSfDcUg5cmigKm2JmUE
-            AQbpiLD3fjES8UxDsf4QFI8kOmSFCVkZHMIefUekvElxPc5zlb9YBA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBodHNmSld1SFJ3NVdsb2Uy
+            b2YvVW53RFNUUnJjRk00MmhiNE1Fa2VhRXlRCmpQMmRXR3ZKZXg2NXJyQXFJS3Zr
+            cXBMRGFMdkx6ZnRYMUxBamd6WWdtM2cKLS0tIGgrbGQvVENHdXA2OVhrWkdqdG9Y
+            T1pqaUFxMDNpbzFtTVNISi9iNzRNbkkK2KU2I+9f9f+fzbGalboMgEFrCfLlqTVa
+            SIJk3L06kRM2NdbCRFhisGy0wWrWIwkJyHTFtjj+Dhue2JyUN86uAw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIdUt2K0Z6WG9TSDd0Z0tu
-            cnpocnE2WlRHNElQWWJXaTNmRFZuVE5wQUVFCnYyWVVPRTBVd2ZOU0lQY1M5NEk1
-            d3ltOGJVMTlEV3J5STMxbDlVWVlvZmMKLS0tIGRsM0hIMjVhNWJKTzlPZjQyTGht
-            RGova3pLS2VpRzB2VWhIcnRISlVUS3cKGyKpvwd5wr1melbtgbXAoo2qRYhWoJ8x
-            ZCn/vismSmoM+OR/JVXpDiSHGfvxWBEnLj41yV82wsT1hSqigXjdUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQT21zd3ZZY0NuNE5vaVBm
+            QXMvV0FZVktJZXVEdjNQSWo4QS8yZ1lCSmgwCmJHd1J4R2VNSjZtUy9PaS95a0V1
+            MmtrNjJVVEovSWtsdjNTMWMrL1JsSE0KLS0tIHFIRVIyYjRUNm55UHRDYzVXSWtW
+            UzBNWmJJK1FVVHVVMkdEMXhtNGVSZncK0ffIz5JzyiAMNtMB65JbOZkyxklw3F0o
+            67KA74McNqSIjsijzkj2pTKSZguSlkqfFzSe7GwfZ3xVK3A87zFPqQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnNCtkZWNibTZYcEZ5Qms0
+            MHZkS0NuSWQ0bE9aVmpraGJyN3pqTC9JZ1hNCnFBMUtkVjhkOGFkcitVVDVQblF5
+            RkJFbGs0QXJqSE1SVld1TUNGelJHVGcKLS0tIFRYUlgxOEF6NGJWNlRMeXc2WC9H
+            Z2ZzczE1a3BIRWJmUjBKTmNITFAwOTQKzz1JBnD5vb9wuY1tyyZL84MMLKwVH/y/
+            lUHYwC+XJEYXOa+pM4nH0Cuq70ybof4LYY9dIt9zUSmSCE0MAS6H7Q==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-10-28T11:05:18Z"
     mac: ENC[AES256_GCM,data:OGYjjVtNUxiGIwYPc5S6eEhAAEhqZC7oWo0lH+egfpojlpFkaswoj2LhvNoehfUGuedw5hed+B3vXuKT5Cs7m+9cQWCF4wneDDikUB+j+H9L1Nfzpni/b1/xfo0sQN7p48mqRKKz3a79hefGcAbx3ntrBK2Na9aSxzS70bMuKBg=,iv:impbp557hKM5dUPvYTVtaUZ/uy7+p6tNPDewfzc195o=,tag:HfxGX6QSkdr5UMWvcL1N/w==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:08Z"
+        - created_at: "2025-12-04T04:56:24Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAArzBAZrjSYKdCyRC2/osi/3rOoPHq4gzyTjrWCzMgtJNR
-            e0Qxw4CHIFm/cvZvbbAg2Deff5xTZS7ejs1WrsCSPDwp6TNklDBJxXy9L8uXDSin
-            6y585CTFS9cbtwh7OKQL3y5B8bTZXH3CKxnFKrW7lPaxtxAtn0DdE5E6sCH0HK92
-            6XFB2J0X+Vk8gcNwrY9TZ0sxlP2C0gw9zeoZOF1s+BTlfB3VSc1OF9HD7i5i/ot2
-            FKoJp0g2kv3TEOM6eHn0PO3Jw8+T90RTkci8LpzuVgLEzXtcy7n0MeGiSzoSkvmV
-            m8hIBl29Bj5UoQjqGBByV9RTfmyFRtijQg9d3CG9w7F2+LSD1XYPWdIvaxDQ8mh3
-            pxBYsKJhAKQn2/5clzWBn0UTwZuv33442zv7yvaXYZ49E+/Ta95Dl3cu+sozlJAH
-            gR+CsjLr6NRMNjzTcyryBp0dGTt8XDtlrmfxrOqOiycPQ+Ucit4ZJjtsFmGwIoi/
-            rxtaHoMFfIy6pg3/OToMY67Nfpiojh9vWUxi8AcaKhg4aXAJ9lnWl9/DgWTjS8xp
-            YsZnTUoRoM4yilYvrR4IfYk7M+K5RNBia1/wLoQhjuIWx/T4bE0QJxjBluSEQ6ge
-            11uGADzzYO9ou4Vg/gu4Hs35IRWTbh0CooDrTKeU8YsinU/lJjvL3oNCb1pQmvLS
-            XgEJKuPgWilknoZ6g0nj1O0M36kpXJ7JzQVH1P9+6eAtxDHaEvhS45FV2eYH8c3s
-            fGzL3k2yMOA5gcLytDf+2RO2VYPtF5oKI75R4j0PuQIHB8luJglZqEwAaCpcNmA=
-            =9N0U
+            hQIMA82M54yws73UAQ//Tme82Kw+yo1KsCm/SRsek3O7wWnTdzUJr3f/bYZds6fQ
+            eeuMJgtPPGs5ai/tHbCDJJ9FAIrSDtOy4lsNDC0O1SzyVF4FGyIj19zV46WHBJEe
+            nLIZOAYzfSwKY4plz3f81JQ7ehvn8jQFtRFg/3Z1Cl7QYDJueKp/MCy20269zE5n
+            Moefu3HyN6BDfc0+zKbz8v7xWEslmLTqacybvtzH5nSG3cHN2KvnkZvubVwWYGVJ
+            29Q2SRyVBZx5wWbopPFth4rYaed0HNBR+JCmoEAXhS9QgOLE0XZuyjWHu3Ki9hbu
+            G9qG3DucM9APThnTd4Z1lynZmKw2wg2ZZK7hBSdyxemq1yRViDH0QVD4UwI826/Y
+            JBi4OKdVpyltZyiM1HRarVef/qEcpJ10ajQVWlcU/8h0Ax9VoZMuOc2Tp9QVWNCr
+            eGbIT4mRC0jKuSxfkv1+/Zuq3ygEVeHvC++FElPVZumq3h/RgDlZEVS6Q9iIVh0d
+            5LzDE+/efRrxJzXTI/ng1AMJXGvyFzu9z2KrQwCC46dcmBV1babhtOD943IPR6b9
+            ychI2aw8zwnvzppI0WFkfuDCOV2s6z0g/MkflO5HWtNJZ0FRI9aBf3vb9VsduFqh
+            rb1Tuhs0BmtHQWTTBiuYhQ9tpGrDoOks4IohpwKDyKpDnsjNCkIn3zlWAyC/BLLS
+            XgH5cK54l8W6l+M/O59H+tD00IuKP3GqT2OjPiK4igOEALt8182yUheG+BgTiJ3L
+            vZIr6SG71AVscONh8ooMjSUR1lK1JzCGrXUJtNxXygzhxvRJGjVPZRH+G0C9ZJQ=
+            =ZZjd
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/profiles/server/secrets.yaml

@@ -5,105 +5,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZLzJBTWVOeWZsbDhjODBY
-            cHJWR095bDF4WGNId3B6SEgxTGNuRHFmTjJVCjBBOTZDUDhzZS9FSkhmQUZGYnYy
-            KzFRSXZVbjI5M2FZZHI2LzQwZDFoMm8KLS0tIHBKOFpWbHRTVUpTQ3NrbWM0aFhm
-            alBxd2pxeVdKZkUxQUpTZmZ2RkwzT1kKWswtlT8UO7vAinr0VHyAcmdH98ClPTBW
-            ZXib7lDf9yeGnhZO4k0jEvfLDFjfYkd7GsYTK6LLYmbtUY9EY4UiMg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKOTFWL1FwR1FLYTViOWVN
+            NmNTNnkvQ0JCTDVvWmFLODRWQTh5NGFlS2cwCmN4dUkzSVA4U3RJNVhNb3lKQ2JZ
+            Q3UyVzRuazJ1Z2srUTZIRkUydU1ISGcKLS0tIHN5Tk1DMm9QeENRdndpaDBsK1U0
+            S3pZaDEzeURYcmhiUEVwNm1kNGZ1MkkKeflVOmj3bGe7BLndIHsrHDOOEm1rllZZ
+            Oj3kL/cTbh8ul/eWB8W9TCZEEAjWeKYiehOBcyTvYAlc+6QBIFT6jg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM0huWlBRSkdnR3I0MjdV
-            Nll5bFVmajdBbEx6TmVKOEVvQzRkSnAxdlNBCmJJcEFmSktVbkZEaUZyK1BaUVNP
-            cWEwNnNjQjdEZjh2SXdyRzJhSUY5ME0KLS0tIDJmM21zemtRa1FvQWRKQ0lHaXN5
-            M0hlOVF0d2dOTitYd2IxN3hpYXRVQXMK4Rwl29JDWc4UxKc82dLzvj1wee4tw1V8
-            RLPCJmmiu+kEO8PItaGt9ohY0RphfGjWgPyvxyyqluam6QbP/n7hIw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBReHM2R1JjQXRiK0xEZDhP
+            bGJ6d0xDL2xDblNRbGhlRGdyWTFzZzVVeUdvClVHUzJ0VS9QdG5qck11VzI1UlM5
+            dG0rblhDdHByN2p6eHRXUG5jV2lSZnMKLS0tIGhRWVZNTEJKRTBjaG1aYXBBbTA0
+            N3FoQnRxckFqYUZDR09KMFhFeitCS2sKEIk9JG1HXiBvMWrLp10w81qL66m6CbQa
+            JF0U5JhACzqGzYe+pUuBqXg9QHAxmRqgV4ymIRHgDQEfNSXuiqgUUg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTEJna1pNVGp6TGpmZ1Ny
-            Q09QaDlKMWt2L3NxYm9COGRQbGVSZ1JrQUVZClpFU3NIdkVkRmd6WHVHZGI3eVN1
-            YWxCZVdJT0pZU3YrYTJhc2xuWGsxYkkKLS0tIDZjRmNMSE5ieDY1RTZxemZZQ2U1
-            Vmk4dUVHUUd4SnlNeVJod1dqM2RPZmsKOEtzOVSUcPVWgFL4xk0q+Zw4lQy9jYyg
-            PoW/Xc50teSdHo2FeSXGJq6b1CVLsRd7ZW9Zg/++iO/YdTDWQENqwA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3ZkZlUjJTcDlpMXlIeGRm
+            eUlTQ3hZcXRZOExtc21RM3R6Q2xPUFU4UFRBClRkSEJPNVM4dzh2T05XWjhCakhT
+            SWQvTkZIek5MUzJORGVkS2xMUTQ2N0UKLS0tIEc3bks4dWNXc0JaWFNMazJENEFl
+            Qjl6NzVZT0VteVJDa2lqbUFUdHNHQnMKgBspVzhRyIjMnah65YX/Yjw2taHFpfoj
+            0EegEb/jjCinY8kKrPWKMkP9p0/K/SpU9bg7RiomkY4ktO2ROi9ISA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTmVrY1FpdHZsY1lNejVy
-            T1lrSzRGbS9vWHE0MGRGMlpjTUV0NU5abEF3CmUwNkJjZlZIU2pYWitqb1VQbkJ4
-            SEhFL2g1YWhhZ05JQVgydS9ZOVh5MDQKLS0tIFVhbzU3ekFGVVdoeDRIdWhabkZv
-            QW9WeW4yWU5EczJ5ODd6UnAyL0ExMG8KumFrPKwRDQQ3D7INqYCeJth7sgT3RMWL
-            jvQLKqTElMmTPWoI0I+twk2bULeM5saAMzO5rTKNZfltpeIMNZoLKg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaaGpPYU1USG9IbkJIRUFQ
+            c1dDSGdQTFV4eWR1aVIwSTJCNVZGdjdPMWxvCkFnNEl5VmFaYTgrQkp5cUZrQ2tq
+            bmRwdlA4TjRJUEFodXFCeTc4c2dxWDQKLS0tIEd1N1ZvOUVMZEUwVUtUc3plbVJz
+            UU44STU3aTlqMEdCR2x4ZlFZNi9hTHcK8USaDAZZG8Dj0KVK1YO57EziGFD/Yan4
+            oEfXr5B4CbVgAXn3K0YBvtdfzGn+Kt8pJ++/P4ipkswqMNClmNgzvQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxK3hxR25iWTdzK1BRTzlD
-            SXFjVDBXSk9Ob1R0ejl3V3NXVkpydWh0UkVNCkxCc2ZUcCtlQWZuQkhDa0NvamRV
-            bTNUYzV6dGdOMmJITEZMTVB1cjRWU1kKLS0tIHFMbnFvSlRhdVpweWJaSUFTT3lG
-            VVFpeGRsTnd3QlRKOUNtQkRoZG50TzAKMYHdjFAIfk4RIud+ZnQJy5Da3ogQ1rGJ
-            qwDlJGAllRccMlvh93IVwHnK8aTfdT4u2o7Q9xANiz+SZray/fY5Bg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiNk9oRVM3cmpER0NZNHhP
+            VkdOY3hzb1VKSldnQ3JPeTJuazNHNGZkOEJVCm8wdFpmQ042NkVVWUpOWnRUOE5k
+            aW4ydVpZWjA4M0dsRHBPK2xVQjNSblkKLS0tIExjK1FlSGpyMTAzVm5ocWZ2aEdv
+            SmVPSkpsUU9UNTY0ZHROMUxnQzJ6eTQKdjUpd1n25j36c0BXLdofVU0WLXiwV7/I
+            ndfSih91JY1ALEh9mwx6H7Zaoj8sonIgzKkn8e0adizv4FY7cbBUIw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzL0hTTm11S3c4d3J3dzlH
-            ZlVQQ3N2K2VjQ0J1SGZZLzJjOHRjSWpOWDB3CnJ3dUpDSktzU2NYamhuOS9jSnZu
-            OEg2NzdDU1JaRGNmSEpML1dZVWQxclEKLS0tIExBUnlsYk5jNzFjTDJ4UC9XaDNp
-            SDFJTjJXdlBValFybEU3RmNrS1NFRTAKxaJs4y+0MSu8ZCCCIk7oLogDk0WI/aSB
-            jWmzgrv6ntjwxeNUVz6TF8FGjYfn8X4rcxJuIuuBylrlHwi25eOr0w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiVm54MGJWeVhzdzU3amw0
+            Mk9aM3V4VmpOblN3K2xVN1JzZTBoUy9QQjJNCmsxbUtXRXY2NWJNTkVoQ05jWUM3
+            S0RRUXpIMW1jM21qajl6VDhvZTZqS0UKLS0tIDVmWHQxazVPdWVaSWpDYXA4WEpW
+            OFdURnZENDZnb2ViOXU0SEZHZnFLUzQKdFNGsu2gtNg7ozJLkpS3u2qhZyGQ2lFU
+            3/K4hBNrBma4U1opXdHzBvGYrVImvlQSBUIjJkfcpBKjwEDHtxdBhg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBac2RSamZyenZ3NThvTlh4
-            Q2pmQnVLbGdpeXhybGQyazFxWlc0dEF4aUd3Cml5WW9Wam5WZzR0R2hib0FlM2ZC
-            OU1rbEMwcEQ0dVZsbXhkZjBOVDN1TVkKLS0tIDJaQ0VGc2xHUHE1ci80UlZQNHZx
-            VVZicUhRK2Vza2VYQTg3WGpBMEpvOUkKJnTMlYuH3AJ16+sVrV2fOzcC9KA7DNk3
-            jalvdxnHnLWb5S2IKwQMmhO07Ecdy6jVWubsPQButhZk+u+cG7j/rg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUUFEa2d3dG9sTjVqN2Ez
+            MzFUMTZzUnJNMjN4aFNPcUZhMXJVOFZMR0RjCjVOaE41LzhSV0VJSE54T3gvczlJ
+            eHhPVmNteTVlV1hVQXAzbXBJdGo1Qk0KLS0tIEVaTkJuajNLekJ5Mk9XZlR6c1Ay
+            dDJraEtIOXdkUE5YeW8zWmN4ekFmN2sKBrzVdPKNlmfhJfoJagyg5JY5t++/Q13t
+            7Q84+7V7irgsaHyHave+5cuUjrKXHu97VcSy9iqVGXSVGYYTkriUmw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTTJYRUZZVVRzYUk0N0Vi
+            QzhzWjBFMGpjZVZUN3NDWG1sdGZxZ1k0L0hZCjJsWktjeFZHR3ZNalRWKzl4Z0Jy
+            dVRvaUI0clRrMEt1U3Z5RXlVNjNhMUUKLS0tIGYxdHVKVjJySjFFTzZUZnRwb1Jm
+            QnpoWU1zVzBPdzVKSjkwOU5IR1FOOE0KbRmPXDGrXNKTCvhznz4aKWXaGJG/x0/M
+            Eyq8bOMtpHIJ8SpupMJ6WmXO9pf3qHwQHaeRJZvixygn60wJGeVCzg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlYTA0RkVwWUlZN1FDRHRj
-            THZ2YThKLzFleC9JcTMwRUhpZVlER3I2ZkQwCmZOaWpGbWczRjlGQVVUeFdYWTFM
-            SXlsWm5nYm4vdUl0UXZTWGYxREdGTGcKLS0tIEJLSmtNcERuaDNXME04T3JrSGdO
-            aWZma3ordjR2bWswMS9NRnpJSHlvOG8KKK6v0615Jmn2JWDj/D1nhe2P/cYPejJi
-            KBaw4q4pWcNGQ56hEJJ3j0BeaOAVwVW2t4pXiVPUKC8i9Gjpg2AFPA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCdGNKRE9hcHAvY2owTkVO
+            dGdpTytCejRZYkZMTUMrQ2VKaHJicHZLaFR3Cm1URGJ0Q1pPWnF4VU9BbURkb0ho
+            ekJ3ME9UcDRIR2NxcHhHb1dpUG9GamsKLS0tIHR0MFFQVUgyNnVQVURMb3g2OUtT
+            T2Y1bUhNWit6UjFNQks2Q1NqbjI4dUkK4IBQbaoV4aHgerzbgonvGTdRJo3qrFVG
+            43brfMZ05D3ufHlXkRHjw8dnpkHjYeCPaID811tQyJdCZGxjiuR3XA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMUnZJMWV0eHc1aElwZUU1
-            d1pWS2NQQ1lxNmVhaXhzbnJXMVlFYmpKN2trCnFNNzZJd2ZieHV4d2oya3htOXE3
-            bks3ek1VdXRLZmxPb1FCZ3pPWU4ycEUKLS0tIElyNzFXenpTaE5tNVA5bFFlU2Fz
-            elRzd3VOc2tUYUwyRURBVXMyZDBrK00KcpIhilIhY/kutSxTfCLMIQlq+mh2gIaI
-            YztI8MfY2UoP6IChu/hr1gJfxUJ/uHVQn5TINERDmRGq7JXPuZyPUg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPejZUa1ZYbVpKYjZCa2Nm
+            VjJWamUwckwwTzk5eUd3bS90NWhpYSs2bWpzCjVkVHpBcm5mVkRrQ05zUmNHR091
+            ekx3aTkvc1Q0Yk9waWh1RitFZHo0dDgKLS0tIGg4YzVEMm81a2RyaWtaek9FcE96
+            cEhXSFpVcGVPQnJyKzdvUkZEVUNYSUUKU4KRkMb53Rm9PEQlQs4+/l+SYYuZ1nke
+            6ztB6Jybn9qP9qFNBrNsWGTEdgXfi7yJA0j73c6kAXFg/e6uo3wN5w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDR0NuZXFGUmR2eHM2NFRM
+            aDZEMmc0NGE5QnlEK2ZYc2t4emJpVnJOOHdnCmladWMvKy8vWUttM253YmJWUkMw
+            djdOcEFibEljZ0VyZTNJNmxqeFFPZnMKLS0tIGFhMC8weEdFUFFSZ2RQSUJCWFo5
+            cVNRN2t3Smk4Yy9NaXBDMW9NQjhtVm8KzuJnoJbnH9nxZVLKP15b5jAaf3bj8sF7
+            CY3KBbzDPg3jRNLDsaWgHfwxbdCcDSOBT8kTw3izRRpioRZ5vfbrQA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-06-25T03:22:44Z"
     mac: ENC[AES256_GCM,data:2uVqMaPYgG2hbkMZCd3xJjjoEJqsGhFEXAq4p+X7YWO4hwB+H/REJJkHCUBegggWJtKA1zDKDIVzvZv3BeRaIe63Kaj2A/7c3qwjCsBpzm5DdJ3WrlAIffFSgOs7jUyFwQtP0ZsbHigsr/rA5NqDeC+4hVHg9XKgLXKyPoVk+iM=,iv:rzf0xQGfGMirg1wwe3paq1+lNdISerFXRUsPLtZ09m0=,tag:6xkM9kvN/8NqzTYB5eHbVA==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:10Z"
+        - created_at: "2025-12-04T04:58:03Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAAmaOdD6zI8xWCYMZHAN4KmPmmIt8+XxsKHvigkxKasxWl
-            MtMOjVjdbO2pfLkf2xmlLM9KoEAx/397x720E62PyI5badATSWSagTHJQkQaaFDP
-            dbo2majrjp/FYJaDigr11eqY1RKVP72+Ghptu8OUj6FKjO25HtJwLmdunYTW+n4x
-            DAbbvKVOBb33NhJX7OOng1ftsVNpR3Zo2Og4snbXziZSe4c3zUCM9uq+1azJe5iK
-            KhAJZTW9/OFXPImsMGfrYTraL4dH8IyQdIaOHmksEPPthCNiaevLFqAK5IhQaygx
-            o1guhBJHnELiAiuemdA5FYDTmeWr3jWUd16y/Adlca9b/y/lXXybQUgDrL+xhAYV
-            mIy6GLHpyGiQJkwFEfRHRWQITjiGoE2eH1C6F55HO1VAMIvYqvpJMOgymCCXs3pO
-            /iIDHlBNzVaEHI5mqvwoKYxRa71sN5K0t/xMaSF26lE6NVM3thjHjiJcVOfK6Bjz
-            tgqc/n7oy5VZTkHXxw0dh1+wtcRRSAKJkzPq8IwkCtplm/0iZaCGFHpGLCeHi+sL
-            8Wf4QaQZ1VZ+GxJAtoh1rKjUIZPWvAH9WG696nUr5f8wx9WdRxYkkZOaeDriwOo+
-            hJaQh97WfZtVaYNe0VnwasAyYbolpuDQb4qR1j4mO/Jlz9c3Cv9KSORwsK16/GLS
-            XgETdzmHALfoyc3MWmrhYu6UDJbTBzm0UbD6qlWa7RMxjgCRbQ2zZkRZGiQhP9mJ
-            iErg/wf9MSTa/jv9ExaOYSskj/UQcj/zyEdz+sP/9t2X7nX3Nu2GDUwZedRPOxI=
-            =9rVx
+            hQIMA82M54yws73UAQ//SMg5faz+XQK1ax89IRInYsREW+FkiIg9ZzeDRNrUNJA/
+            zbqEFeEUT9X3hAGFv0bSBwfIOqFKKuDWlYaiJw0TPosyeGYHYtx0Yjmj6bvL5w+N
+            zOrH5EuJx0hDHaybthM243/0S9gnjo5LWslCmDLQADQ0pPb+3Ze191GHlw65nQv2
+            noHkzmNUdfiB0UF/Wk/V6RuvqvyHnxJhnR23g972KKJ/1LSOPspiPdwpr9aLGsXX
+            g2YHa8jCMRFQ0HfxJ2E7aCPctuXwiDUOzgR3i/LEubXSz6AhAoDFaUIz1nLh4TAQ
+            kD0PYNn92xpKSUKCLI9cMZKaC2/qxENO/KgdwvdfYTbi7y5v3FlnQwzmOTm7uTwU
+            LJy69YX5JoC6QPSlKwGVT5Opyu4UKTaLwCoqWCaEzgSUsYFzqIG72YLWTgcTM39p
+            ecqsipio3f5OjmGjf7p/zoBoBO3LsLRxA4YyR5VcqbChIT4XsJdJ0AYMt6dUVSzl
+            Kq/lQSxnFzSGTiEV0pquoJztIDZ/eoF7pS8ZtZpFXWdKSuGV265NI5mzbKLSrhyv
+            IekFOp+8+GxwvhV/R3SF080xjRkWdkYdZPfYxR/Dd0Zw8L8x2w6QdiTlXlhXuJcu
+            9rILb9YZwaPLt41kSJ2vS6TIwseKxVdYuBzrakuXTbg61VpROKu505XSzn271U3S
+            XgFUT/gw7DKC9Tcqr3aEA2CBd6+W1WtUg0unzgWb7j7aohv9LenSirwC10Fnkyi8
+            lLwsqV9Hrt96T8eqvmqADY9F0RBWy3Nrqy1OyHzUc9uAwQXj97vThToiUGK3YXQ=
+            =YHPK
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/servers/grafana-stack/secrets.yaml

@@ -6,105 +6,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmNlBZL2NoMmxHUEcyUWFV
-            RTB2cUVkY0JRV0NzbjQrZ0xuaVlLbHVlWW1ZCjhMTEdxTk5WaEZBL3BoakpoTkVr
-            NVRYeExGRUhHVEVyd2F2SURmTXBCOGMKLS0tIGpXZDVQNjBrK0R3SXNZaVR1R0Vk
-            UUVrbXgxT2dEUnkySlpXTUROQnFneDAK0uR7PjK6okSdCki5pZ8nwHqwMmsSALWz
-            o7+jqpdk5iKlKVnA/j4AqiwWvUejwba5IO7TCBnN9DhkzXrtIry03w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhTWp1clFSa3YxS3dzdXJ6
+            elhVckhJb1JnbXdtNzVDZTFyKzJPNVN0dG1JCkdrOUJHbXE4Zml3bGQvZURjT0Rr
+            M3lTUDZack1xM25oZ3VoZG1rdnVyaDQKLS0tIEtGR09ib3dEZGlRbG9uamh3QUhq
+            ajVvbUFQVlJGdUZGL1Y1SFNOOFBtNk0KBfpMrVYerSoRjoM8rRmea43yT2hmU+66
+            oO/Vmdl8n1037ZiMT01s2UD0U7y+a6jbVFuoMWSiAb4ihdG9bK1DVA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MmN6ZDZyN0d0dW9OdDdh
-            eUJqa1RraFZUQnM0QXhDYnBxUlZJYWRadzA4CnNIYlpZbFpPOVB5ZjUzamg1SWVk
-            ZTVHWWM4OXcvcTRvQVU2NDNjN1loN3MKLS0tIGZhTEtmczNJWDBhWlJKSU8rNGxI
-            YlhKc0R5RWNlVGhGUDZKd0FiaXIyUkUKBdt74VTVEjLtkT4JcJcxluuRqcc8fJUT
-            2lc9vgUqVPKhWrTcp906szNRXfqiVcHRCVaWcxgF6gHel9mVm1jxGQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVUNsK2NZcXZzbXBGVS90
+            QzNRSEEyYzc3Ry9GRkpZOEpBNEM5RVdNN0VZCktmN1UwbmRkVm1JVy9XOUpRTk5F
+            WE8vWldNb2ZndlhWU1V0cHVwRlplaVkKLS0tIEU2UkU5NzkrNGZMb0YrSWRVclF6
+            WHY1ZFFYeFJNTjIydlFiQmRScEFleHcKUjj/IjDUgD1UzIEJw/Jm5yn3/8ViII2D
+            q/hbJwnDKZxDdp5bKORusHrL4Aj2ikpRMH/unDOJVe7pQZ38ptNpRg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqOW85MWIxYkZGZk9idER0
-            TFIzYVNlNTcxZUViVjN3RjlxdTA0Qk52ZWpRCmZrUEI4WGF4NVI4RjZFalRNSXg2
-            Z0t2QUJIbnY4eFVpNTFGcDZDUDkwZ2sKLS0tIDNObVNwaDZNMm9kd3VwTW5xRjB0
-            OGlFTzFkbVJXZm1KQTJwTEVkMktSZTAKIfwRb0HpZhxJVW2ZFia7CsjgFKcgqGGM
-            ALqZgdF23u0S6ZNqGkjb5i3A90PDT3TGtFnh1WUlu6Hn1MAGCfYI4g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMM2hFd2xzK3VmM0dmNmFQ
+            S0pzaWNVNkNGeWFDQ2dnZzNuZUVWL1hUeEZjCkcvT2pLM2l5V2lNZkVYUXI0STJF
+            Y1VKR2dEZVpOeWxyVnZQWkFsNHpTVEkKLS0tIDRqTVQrWHBpZDVXcWxaSlpTcVFY
+            TGtwdTFzcWRLQzVaZ2xrWE00Nzh4L2sKqolU5t/lHJf/6faTAxxKFInFhSnrDsYq
+            XZZYm5af713g4RqM/e5W7bNTKX8Ajuo3nXioOa8S2TaeH5reFIk9XQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLS0RXTXN1WUV5L3BMKzBK
-            Z2dnZEFTSUFKOHN2MUk0SXA4ZlRWd2lqRzJrCmlHUTZIMWl3ZW9XT0NrTzBFMTFR
-            T1RXRzR3NngwTnlYOGRrTUxsOE11U0EKLS0tIFhKdXZ2aGRTLzl6aHRlbnZ4MWJQ
-            dXZjSEwvTnpDUk5aa05NTGdmQ3gxL0kKoOLo5tg9QKisWJZHCg2EI4qUacwRE7FV
-            VsthwvVSidTmn8Djd0IqcqwhzE4NuDBpI+EgLw8Y0gJchmh3vM5gcQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhRkxLeUphN3ZCUkVONkxK
+            OG01TkQ0OGRzRVhpbkZLMHZ1ME9vT1pZR0JRCk5XTVozbnJuTUJjRlhvQ2toQkVV
+            aGlrWkVyS216VHZreFViNUx2MHNLbWMKLS0tIFRhTWJCcjdJYWVpQjI5TXFFQkRT
+            Tkw3V2V6TXJFZnhFdDVjMGJrc3Fobk0KGu40/TPjGOgWcKtScn77enLFZDwml7U1
+            uW6bGr/3X1y1WwTboCYoG9dEP5zun7xB8DGB6xJ05/+8LBFUy6EwzQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDbFdlWFQ5TjhuRUpLSnV0
-            WHVsN0lxOE9lZ0RTOXJyU1NrOFRmaldPUkJJCkVFak5OUURTdHB3NjF0YVI0bEV4
-            NlliVDNZaVVsVmc0blUyY2IvQldjSzQKLS0tIEkxbStUSUhyaHhManRzWmo2VlhO
-            UzllVDZBZHdiRHByLytPWXZlMmVwSm8KFoQdz0b2Gq+ZNI3+PFV4e8OyzFsxupX6
-            PNsdSXN/My8mTAErjp/u20eHDt5XTGdRq7LXz1w6Jvyrj2ZDLFAROw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VklRNWNSdW1Ya0p1QmEr
+            L2tXZ1p4R3ZOQVNWcUpSVDhTcENlc3FFMnpzClhhcTBsWVdnTlUweTg4ay9pMEtP
+            UFVhV2RZbTJ0QTQ0Q3JrWVJ6NVpHZmsKLS0tIHZvR1F5R01jRjBYTUZZVHlsN3k0
+            U1hkdC9LNlp4TENMalEwMUVGbS9SbWcKVfLZ9UGQ1PudDhyYks0+Z+nL+cDBb1fT
+            VkFP1bMnmO1rd99GyaoWGJai8V8A8AgjFrx76bf8YKiUCclhHnHGrQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRFZxbkJDOFR3S1ExMHZJ
-            NWpsMitscVB5bzJSTnhKSktjVVRFWno1cEFnCkRGOWFSU240SkVROE9MNEhFQWky
-            bXl1OWlZMG51YzA2alNOODVsMmVxNzQKLS0tIDRWSzNWQkRqOTB4OHJXRS80bjBi
-            RTFOTDRMMUxQSUh5WVViblJiNEZrN3MKYUbvlMlHUtns68pJC9BqmKKiM3+lvpW1
-            XF9mwCvjRYgVNNae8Y4APqtJI9mY0fR39IG6y005na8vR7j4ScSrXg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2aDJEeXVpK1F5QlJPeDFO
+            M0h6clFDOHpuSGJ3VnZtY0krZFl6eHJRWXpNCktkbmpDc2t3OE9Fa0h5ODlFb21p
+            STRWTCthR25uTlBmenNOYkdFUTdFZHcKLS0tIHcrYjh5dlNGRVVWM3hrU0toOVpE
+            ZUhkRG1YMVBDaW1sQ2dxWjVKcU1nbnMK7cGYzru4dUO/zDZYj16BoGIfSr307J/8
+            2GBc07zn+BFoI4xsm+kdDfQaGrSEA5U1EsAiXDydjxnDVbSQ1shY+Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZjBVSlZVY0psNHl6SHNF
-            dmc3ZVNQOVNxalhSYkVsS1NPeFdkcTR5cGdnCkdUVmthYTN0TFlYYWgvS3hxWjAr
-            aXlid3hiVGgrcWV6NTJrdFhnRTRIV2cKLS0tIDdFdGErenFrdnljS3NnUWphaVlm
-            OFVVbU9VNzZUQ2MydE5lQ3prbDlQQ3MKSgW5UmWgBa6vHX+9/MnhI7gVr999su+C
-            Ktt4237TWOuj9PDr58+AuVwe1l8LmkvsN64v7BQxVccaQ3lhMbMH4w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQbTJ0NTU3NHkyUGlXTHZp
+            Q29HMTdWVHMzZGo0cWQxbS9ya0U4OVl0NkIwCjFrazl3MnhJTGpwOXVzUi9KS0hi
+            Vlc1K29KUDdBK25pMjZVZUZOMHRuVWMKLS0tIHh2OFV6K0Q0Q1k0N1l1YkNGdS9i
+            QzZqNHZkckFzeFN5bVI1MlpmQ1ExbXMKKxFAOKuSr2Au5KrA7lEZL5gVtDAqE/9Q
+            tv/ROXUkhcvaRTLp8vSVIVD0WXdD7KZT80y2EGggVuNmBBzbw4QMVQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaWMrUG9nbTdIb0NvUEdu
+            UkRXVm9ZQmE4cndKdk5Zb3dOemhNVlRXam5ZCkNCTTFpRGtUZ09sa0tQdjJSUzl2
+            Mi9SUjlRNG4ydEJNNjBPWHluTmU4c00KLS0tIGU5YTV2MGkyQUlJYVN5dkpHdFcv
+            bkhNK1huYlpSY1B5Y2Z5QnBZL2RYa3MKKhHMKatEVcSh6TbEV5yo0+O0Q2mtSCGk
+            qrixtwyV7JTuZy2UeY+zAIQVfVdDhM5vZkp766mjgxhjGsTpShy7jw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWG5iNHZDS1ZzRk44L1pj
-            WE50blFlcEUyd1BRNlY4WlVSenhUR08xQzJnCnJabGdxSWtuaXc2Rm5mY05uUjlB
-            WGxaaUF1U0w5Q3g1WG9majU4bDdkYWsKLS0tIGhOcHk2V2JDbnk5NXRNd1hJa096
-            N0pCNU81TDA3N3JPdWNGcnRUNld2MlkKvDw27aEGbY2OskKk6tMjRHlyubYP3Fnj
-            8QsxaSO24FReneOizd9EVMRtXB218yPTfKgiCPf+rKpGhjKiNxoYGA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0b05XckVncjBsZXMyVVhX
+            a1J1MDFEZWp0VThlNkFFYkYwZjFTUS91RWpzClhLWmNIYVBlUkZ2Q3dNY0Iwdk9p
+            ckhpNXVBUldTTDE3YnNBQ1ZLYzQ3Q2sKLS0tIGVBTE1LLzBZc2NjUFE3eFJDelEv
+            dGw2ZVBmUmRlaUZkaGtYTkNobGZ6SlkK+ik7RGKdolGmj7m+2/BXeqVxlbpHudvx
+            dGCANq9i9U8TtgSUnpMYfa3qaOhLXKAPRnYjwNW31wvC098anDDs3A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhTXl0QUtaUVNYWDZnTU94
-            Rm1VSnlKcm1VTDdjdmlueWE4Q0k4R3cxSmg0CjBPVHVma014QzRJaUNlRE92cnR5
-            WXJjYi90UmhiNDIxYlRteFMvZGF6ZU0KLS0tIEFuZ0h5ZU40V2FmYXB3a2dxZ0I4
-            THlCVTFhQlNKSWtzcUhWZUdnVW5WM00KWJeBZ+C2dgKTSK4DFFBTBdRJTUD3G2Pd
-            ugv3Jk8+WFuvgVOHm7N75y1/GtB9QIBbcBNRXW5MwMlN0SSjydJ7Pg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwbXczR3hhVkg4OFJmVWpq
+            QUdPTDhncHJyWGFpWEE3QmNqamdRLzEza2xJClhJVXppd3poR0xHUUhIMXpGM2Jz
+            NFZkeDNBY0NQczNuOFdNL1FHQVFPVWcKLS0tIHd0ZklkZ1AvTEVXUmJpamNQeG4z
+            TkgySmN5bE5qbTdMVWZqQTlyWnJHQUUK3IYg/k6Qesh+QZnHQ9MIshN59UXEvrH9
+            E/d96HM7ukrb7xJHgD+sqJoycrc6WklWv6nAjPrWgtDUaL0X8L76vw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dnl5SmFud0ZDUjVKUk5a
+            YmtFazBVQjFHZjNsSnVKUzdCNFlYYjR5cHo0CmU2azVWWkI2SlFpdEl5ZnNMeDBu
+            alRZSkdQajhvOUlCamxrQlFMOW41RUUKLS0tIGxHUXc0bkIweVlXdUlheUl4TWlD
+            OXlPSVUrZHJzZDNiRFMydWg0aEtpUHcK5Hzn+RTpdES1+UEzZp4RvuxoTTjO3WCb
+            QehKZQrDlMPGgHKA+X2r1sCYB+6oq0wBpBa/Pr9rf0b2YvuWBrYnZw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-08-12T16:28:10Z"
     mac: ENC[AES256_GCM,data:7t9dAJPUiOD93Hyt+YLVjR/SdqIcuLi8TFP2/8gzem8Hrn97Yqx5Iow57alFcOWcb1ymhSQLIWjh5RydhlnoeLj/HbacSKxxFirFFv842mBVKqbVyfQcNozGl5D0oo0yd8gKzXQ6BaKqel7ZeOeIeY6XKAzH2RH2r8Gj1kPhkHY=,iv:bZuu+kFJcc8SDA1uShXroQcLMjUj+DTSvsbIABLddFs=,tag:bNLzxOll5UL5uFJeoq5XzA==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:11Z"
+        - created_at: "2025-12-04T04:58:05Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAAvHsg6AK15/i4+eqctGl0YOK4VNrcZF/Z3rfQaWgCHSAf
-            ozA4H1DzQEvqPbH3wcKyEXgYKfiKBF5UcMuTETg6rBUC1/Rx5PARJG8qbaJyWxrS
-            +qqJj/rE/rW9diI7KS8AOKz1gmlAJ1KvpjyKtxUTf5EbOYI8QYTaTkAQ2OeAHWPa
-            Pn2jH0VNppNaHp1bC6XfofwWasEBt5q21xCPN7paSJ+7vbTUkIBptorA0MQJpd58
-            nN5JGwS4FK5Jumh/eIc8UyLDKI9n7HiWPuMfvGc3P4/T3Zv9ekYgK/OCl3GsCew+
-            buUT/5eilD2O/2quhX7p/pz8J8GAqpRxkskRIFPJ+DxiJCecZNTi6QXDB40PL0Ew
-            TYQQ6i+9v0QMyzIvgNTZN5TugOgc9hNAYykG8NGs/9Od1NSEgVNVD2unmg2Rlp4R
-            aPoJWGXApXlnapqWk4jXVtG9sp5hMuiViaatPDpGFBgqAU0/GIMmVtRGa4+3TVZD
-            M//oBuNX5r+m2Utn10Tu6WaWlNOXVtnb3jkw4RXYfp5+xtFXJURLEMmKrkLlkR7V
-            /aPBbpkRPRN71gLpuQKg0hrJJ6FV7kRT80ZbiUONnTpjwnmcrVIMHe14WQiBh3or
-            AcbmnQdZPPQa0oBmExrRrkA3G/XXdJZG63pfKJeUtljIGt3q1YsJk1Xen85P3+/S
-            XgE+GX/Wc3gdpL0fNDfLAOMJf/aY9LG2lFemd32hj1w3Mgg53BkKSZGxx1LELZoe
-            Ng3pml1gsYSB+j0pI+Y4vze+tsvFTqOGq22Fb+YfUxypmg4zmJxS/XbaSf/yZiM=
-            =VC6K
+            hQIMA82M54yws73UAQ/+NwmMaI8jMIwdHnjOFIW7/CPPCah4hqYA8/GuXgTI2URA
+            V+NSMC9RxW08gTJfY+EML3Y+ZlEuZPA7nX3f4tJie9B1S9c1cTMhX5xr0RoI4s7Y
+            VS7nzXYTWmulY9Q2pcbZAJajAzZUsYnraYmrVw9KKHaOVe3dXfmPFdGEDAidNoJK
+            R46RAKwWe55oqI4RBf9w/2DgeA/i93B9BA/IpXbPH4deXRv3d0Y/WPsWQtPcnoTW
+            gu832LLrIW6pwgqaaW/wHGAEviZQS8A5x+q3akwkt1VTNdee3EBjARcmbZ6XKhdp
+            TrWrXyIJXoVnzYWnCzFLHA1pKxNGzb629B/elRtBWq0e2QeD24J7zaxpBB/MYESR
+            0T3BvfInnnrTatZ+/sw8Np+daKK84BgOVk+eaYZcW1NhvUZRViyEi8Xa1axQsl9a
+            MoSyo7c6yJhNSG2I1rXTuIpUpA1ZwhOD6YwqmZYUbAiknDugQAK/8aSOLx77HAtI
+            Hrr6YkEtpOp2PfHFWLWPm3ivPhpobEf6SiEVY57qbNlpZ7o9nggzF0nqMCGOrhWB
+            rXK9LDY7wBgEL8tL5VMIXeMlVxLlG+9NcbsU4ZtneBKv+Wln9+s+opdldMExkWhT
+            vabeAF8AfBJl2ildDyb+IgQYWoPPwBcOsv7lLLMDZG7r132kYFt0WVCq/O6vVJ3S
+            XgHMKk5DyZnrpoNrHX8pOtY7SpM1JPyGnPeRez0pzPgJFZ+Pj3gmPA6KVXIDAA1Q
+            2OBf0rv5ECV0l3u+oca9kmcy9Hlr0ir2qqvsYDLPd63/3RmCLJYef7x2IfhImVk=
+            =TIo3
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/servers/mail/mail.nix

@@ -1,2 +1,48 @@
-_: {
+{config, ...}: {
+  sops.secrets.kat-password = {
+    sopsFile = ./secrets.yaml;
+  };
+  mailserver = {
+    enable = true;
+    stateVersion = 3;
+    fqdn = "rinnosuke.inskip.me";
+    domains = ["dork.dev"];
+
+    # A list of all login accounts. To create the password hashes, use
+    # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
+    loginAccounts = {
+      "kat@dork.dev" = {
+        hashedPasswordFile = config.sops.secrets.kat-password.path;
+        aliases = [
+          "@dork.dev"
+        ];
+        catchAll = [
+          "dork.dev"
+        ];
+      };
+    };
+
+    # Use Let's Encrypt certificates. Note that this needs to set up a stripped
+    # down nginx and opens port 80.
+    certificateScheme = "acme-nginx";
+  };
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "security@inskip.me";
+
+  services.roundcube = {
+    enable = true;
+    # this is the url of the vhost, not necessarily the same as the fqdn of
+    # the mailserver
+    hostName = "webmail.dork.dev";
+    extraConfig = ''
+      $config['imap_host'] = "ssl://${config.mailserver.fqdn}";
+      $config['smtp_host'] = "ssl://${config.mailserver.fqdn}";
+      $config['smtp_user'] = "%u";
+      $config['smtp_pass'] = "%p";
+    '';
+  };
+
+  services.nginx.enable = true;
+
+  networking.firewall.allowedTCPPorts = [80 443];
 }

nixos/servers/mail/secrets.yaml

@@ -0,0 +1,128 @@
+kat-password: ENC[AES256_GCM,data:L4j1gD7OPIzbJ50T6ZhPX3izEq1HA96Eyp1UqiXx32OJzEPuey39BvIaCXWkWNt1maoA/bY5D/U0DRRD,iv:wWlMhuDvHTwrcARg5edi2izCVlEP765wEsWbNkkO5EM=,tag:cL6IZFyjZT8EMvDAck9T6A==,type:str]
+sops:
+    shamir_threshold: 1
+    age:
+        - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWXJobVhxVUdMTThCVUc4
+            NEF0SUoxNkhtRU90VHpjanZUZGk0d1A2N1djCm5kTXpSdzlkYkV0VHdYaGFLQThC
+            QnZDdXZ2MmxaaVRPYThDMTJPKzg3bE0KLS0tIGhnbzhUdzlLellQZ2g3enY2R1Vl
+            ZUlPWkJsSVlLNEtxV2JzaTFCVWs4djQK4mMDLXTYoEnfCG/1QFEtKRw1TMy6H3zU
+            RnASNkT2YMmCqkb0GOuLYPVkkOWLHoGsBOVpGkmi/k/l1NlKrSU83A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMaFN3NVlDL2RoUzJ5Q0ZW
+            ci9ORzZZNEI2OEZ2aXM2MzdnbDVUYmM3YUhJCkFvTVVJTlhZa0RUK3AyajBJV21j
+            VTgxM2VWOEhGY3pSM2tVeVdYVlEwZTgKLS0tIERGaDhuakxNWjN2cDhBWS9pbGZr
+            L3Q4ZFJ4NVRXMzZIV1RSL1pMc3RpRDAKDx5hMmHGdqUEfCSYaJLTdkuWlgx/AwAo
+            scwMkcYDeyZ4up6Ntl4ZM3hLqRdNNzWZ2UoXX+/p93AoZlRmsu+bqA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2M3U3VHdMUWZYc1VaV21u
+            S2FXN0d5V0F5WWlPeVhYZm5nVExtb081UVEwCnVFYnpOTkpTRXhTSG03RjExL2tZ
+            TVRwOUhkSzNLSVJ0S1lRSnY1aXVEZEkKLS0tIENjY0hvRWtYMGM3YWRJSTNHNXh5
+            cDJlMW5pN0lOM1RIbU8yaXViT1FybEEKuPryiHmuSolFcdF2pdf9UfqSYYEGNDkA
+            Q3p9iCSwMIQaVWKQHvk2oaEphY3FwxjcI/sYfDinscBjMQPZRwYdLw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmdDhFMk9oOCticTV6NWZL
+            dG8vYVZRaldlMy9mYlRhemx4aWFkZVZldENVCkJ5YWlraDFuMmIxNWltVDloaWFB
+            TjExaWRBYTZhRmFpVjk4SEdlVEZPcVUKLS0tIGl5YzlEMlBmelZKdHVBNHlBL0Nz
+            TXJObDhUQXJJa2wyV3l6ZGJyQlV0NFEKitl0XyQkAkGp0r/i1xKukfVKrmEwtttD
+            jjxa4qYRdCC7gC+nPAhMfwI/C7s7dsOMRsQUHRhqLigl3gyCjvTaJQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Yk41TnQwZzcwZldWTE4w
+            R0h3MzJrT1NZZUNnRWFiMnNnOWh5UlB0QWtjCjZPVnhNdkdONkEvaytXWi94c3Fi
+            aGRML0ZENjFhOGRHVVNQcERlcWI0K0UKLS0tIFM1aWJrWnM3NDhDVjJiR3p0czUv
+            a3BOYXF3UE1qQWsrTlhOc3RXVXE5ODgKi9jhHeRw45+K69CVunmFylntnrpEgYVv
+            6G8Hlv9IOK4ACjpArqtIiZ6jetWI1zAaYHiBYtguw/H8UIFYwZcRLg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuTEdCN08zazlISkczL3FV
+            Z25WemM4WVM4clFCQ2FrM3IxZEVEdDRURW1jClRGSW1LU1FHRXMxMGVYNmMvc3g3
+            cG5hNFh2QVFvbUQwd3V3QTE2TkxGZzAKLS0tIDZNR0lvcXB4R215SlRWT09jUm9J
+            OHdHUkNsMTZQa0I1WXhTL0NzSERRWGcKEColN8B1Ys4YR7km2Lao+uIFUFugIH19
+            B/q/tlTRkiwG/gdDa7Zy/T9H2jch0ug5H2S3iXVKV/eHFAcldoCMOQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4L1FOYStQWTI2Q1Jua2lW
+            UkdEVnVrN3JrOGoydHZqUmlzTjFIQVhxQnlrCnVmM3o3SmczRGQ3cEFkcm02b0Fq
+            SmU2WEFGTGZBTG1NTFFxZDF0d1p4RzgKLS0tIExpMVVMRlpyaUxFVWxzZDZ1SXl4
+            SjR2ck9BOXFpS3hBUHJlN1FWeGRYcFEK/QuQbxJk0umDvsEZ+mSG9rkLc50dhUFv
+            IHk0BDRc/j+RfWdHXw1MNsjrwf3kWlr3qVHW/AACi/oDIoueb6gSoQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHSzQvTUhBbzE5UlJrS0NQ
+            OThKRmFYQndxc0pDVWdiM3lHMHRLMHF4VlIwCnhlM2MvQ2JJRERRRmpKRW1WUGRY
+            dUtCSXZmK3V4elh0MXI3ZGtmWUNia2MKLS0tIEx0VzhkaWJpZVhwM0dNZTUzcngx
+            V2JpeUlIQlIzZW1BVUM3Q3FRWHNyeFkKZy9/XP4OoXmh+/g2pnKNm8ZK73iQxMYb
+            Pmm47vfqBcwrk+q2K3QBQXeMQVUd2RmMX1od/ttNC/mRaqo48kAKsA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQXBpTktYTk1PMDFjTFVi
+            aGl2clZpU2R5TTUwUVh1Mld3YUpnUVNxNGlzClpWdlptSTlEMUwraXY0RzBTOTJ5
+            bGtZV1dDTThXSFI5TGc0M2M4WmJXU0EKLS0tIHE0RGR1dFJkWjJLaFBvdW1neUhK
+            NjdvdTduM3dPWnd6NTIvS0hkRFd6MzAKJdxjO2eDkbriitwdRGF3V9ZvC3J+48+b
+            WN3DuFDoMKV9JZoAr+6FSsbzwBb5bhX6qNmsYaJWt/jkHC4I95yHWA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6ODJhb3NtSHVQNXhNWkxP
+            UUVqdEE3UXNMNktIeVdyaU1QenNHbVRmVlRZCkFsN09aUFZ6eDJVYmtMZmN4SFBE
+            bjRCb3c4cUJGZTBtUHVzWUJheTByTHMKLS0tICt5Yk9oaDR4OXRzZnV4VkRaWlVz
+            amJCRnlTRzY4ejNnR3puM05xU2tGTHMKukT3QTpEYxheIY3reuKiw6gw9tdBIxNv
+            Doxmxgen/Z3L5sZbRNf4HMyL8De1HopgBm9mkElNlWWTkyk+wf1Nuw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmcTNBdVZjVkt0YXVQODJI
+            K2VVeGR0elc1Um5GcFdPZTl4UVRsNS9BQmtFCnNDbVY2TkpIVzRCNjBxbWVqLzEr
+            aHNxTjFLTlJMeEFEcEpvVmtrc2hNNE0KLS0tIFVzKzBhbXc2NXR5SXJIcHpvWFRO
+            d0o2U1ZRb2xvWm1aMDM2ZGk4WWFPUWcKGxjAWVEUF4EngwwY5vYdEfa4ceh95TIf
+            3spSMNe/xW70f94nl7YFzSjPjXG+TXqvuTU3BiBLYYfv8fNsrpZCcg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-04T09:33:56Z"
+    mac: ENC[AES256_GCM,data:/p206tmUtOuEJNWd9d02wiK5HCfttpA9ennTavNW97laXDEMVsVkgMV89rdpplX+NZAYn1xLXwhUu9Ruz9M8yMx8J0ziepDkrcHQNqBxoRWtmMbfEyk/Lb98BJk8T6SAR9tvFwf+t0OPfO2bpV6h6jTrR11BFDNiZFkIezn3/Rk=,iv:ob0w/w5NwlkwrxEU2shgm9mhA+NQAW72Px4i/GHGnfs=,tag:3y3vQGDWu9h20aKq1nGdBA==,type:str]
+    pgp:
+        - created_at: "2025-12-04T09:33:39Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA82M54yws73UARAAuB2Byq1UieMqwSlOqpGeY740YSt+BvKCqMx+Hq8PoguB
+            T9H+7elDIBAW3ND/RcTSLErEmOHV8jmilpdWvDVxcUudma25ugCGgbKdOo+SryBA
+            c5kCA5X7DCykgdsLvqGBxOFbeGT0+HDn3Ai8+Kq52xvCGShm/RGeYiZlku6lQbrg
+            S6QCOghHqqBC+DX3iKaO5+e0hNCedACYBbGC6n1xhT6PY3ukqHBIcDgLnuHcuA2v
+            BvRjFEExmG+o0758L3FOmr+4TyxW0wtv4g53b3HHk6C2Pfx52A/qwVxa8fSgsf2v
+            mNIYn98Sst3RzL0FxUtINEFl4ISmU+lwYxVhy/HKYWKRjTF/xL0Pv7NRLK2xXJnf
+            vW+H66lMKOF1fW/S0hapRnE2sVIm6s0Ia4Dl4GblveWJLU+5ooHYIF5nkueIvNao
+            vDJ9eCzD8p4oaDioS3mej6LWENYOjWm6GEKbyPLeVi5MtSoRKP8o/z5MMD4dyGiQ
+            P82Le8iDQ4x5FkQwfqFD3a/pTegoMfLWEfPrI+sYSaf+KFdtAUewBWkdTItkFmIO
+            84cil0INjILs1k/4l3mib52U8GIAxTT2YnOfhiJHwxzW+NYsTxMZE1kC5yU1HJIe
+            XNYWwx0SSo44nYxcFGbHbEze1/4VNEVxhAW2GXerlKBhpRgyoIWKbfoMfTRZFIHS
+            XAF9lFofpMqR4S6c000F7xPZwar5HuZihfbubpYOVcCn8ms3Y0EOJuSPAZ7/9eSq
+            6kVEXk+6XIyhKUhWE9Xji5fA+ZxBi+n58C71FkGWSzfy+Udn3IBVJpG1FQ11
+            =3RnM
+            -----END PGP MESSAGE-----
+          fp: CD8CE78CB0B3BDD4
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2

nixos/servers/monica/secrets.yaml

@@ -5,105 +5,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZlFkV1Y0RldYbFhSMlBD
-            UHB2Zkt1dDhvdmFWMFE4M1NiMFNDcG1LdnlnCjJZMWFuMHJWRm5aUnJSd1R6L3Qr
-            R3I2b25oRXNIN2N6cGV2VmpsMm9WL0EKLS0tIEQ5UVl6cCtaRXpUbVRmZ1E2Q0lh
-            NTZjMGM4TFRaUHZnamw2Z0RoY0xJc2MKf1rqXxRfyFuTCdh4QSLz752m9y3OYgr1
-            N77dxedVmjE+5lkHdpxFArD/mg9imO5cX04LtCEy3Oko0L9uKRJTVw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbjM4YTlqR3REdXlCQ1F3
+            eDZrZ0J6UXJ5SkxJdzZmcTdCSmh4d0JqUFh3CitXNXpSaUlDenh2Z1V0b3F4SWRC
+            eWFwenEzNFdFbG9yMDAzcWhTYkUrMTQKLS0tIG5FNGxjc2tXSTZvTlVwT0t3NDZz
+            blVMNjVMamU4ZW1xL0ljRFU0YWFGaVkK0sc52xT12UkLaYHK6TxJRETCt2GN3KM3
+            mnYwxHVbm3BPvQhcv64xCnMM7lmtVBGXGFUyI7ZyB3D6/kPbmEEmBg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2LzdpbFNkRWcwK2NSVjhL
-            elRlVmZSSDNHV1hDU1U1NTBVamt1ejRVWDFjCnIyNnowZDRiYjRuamFNQTdLcSts
-            R0xpMWVhVEt1VE9rTDJ5TmN6QTg3MFkKLS0tIGdnMlBic3NKT2lGTHpvZzBCV1RS
-            SnVFaXRINS8zS3VRcVFMU3FFT3hNVEUK53NrStXKUdw6H0OWKUgrQo1VCfN8pSAB
-            0IjBwYJr4pT0tQXDhpUvEe2I77NNd4a9poLjU2jAerXgX7EOTQP81Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIQkpmZ01zNXVySGNZM2JP
+            ZjQrOTdsREpaRUJFRnQrbU9pZ0lyY1FiaHk0CkRCWDJGSk02RW55UkV2K0ZxYjli
+            YlJ2eEJ3bTVCUFlrM1E3V0x5cnFZM0UKLS0tIDFoTmVTa3htUmNpRXJDaUpOSmla
+            Q2E2R2I4WXNTdmpPTEZQWHFRYXUzQVUK5f/L8U8IZJPgbfelPBwTBmKsc+Y8tjhY
+            eYtaV4ZWz5RwOlbE+rExUJVApIrfyWQAmGZSVul2HMKdBLOmHxoGKw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVWtPakthYjRUbVIrcDlX
-            S1ZLaGZlT1JaU0M5R2NCdWdFUFhhaHpqaGtvCkdKcGJMakJwQjhlcm9uZWpTS0hH
-            K0pVNUlUNFdYZkJKdG5vcnZsbTU4NWMKLS0tIEtYS212SnNBTUVkeHZpcmpmekdw
-            bkJKdFhDSGozRWEzK0VEY3FrdkhvbG8KHGFU7wrR8d9/22IudDRTEYUf7Kygv5sH
-            HD0YI44GRWJ63uj1jkU3k1fXssd+PpW/OV/oDWouyqAn4F2LCvsX9Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxd2NxaGRObHZmc1U4NE9n
+            QXlPR3ZaODQ5VU1ZOWh1ZlVtTEZMZkY1Um5FClNQSjhkR3QweXJkNTZ6UUdROWpi
+            RnNtbnZJOCswUTNjRW1Da1FwRzBVNWcKLS0tIDRKYmVudjAwd0tUaloxVWxINDIv
+            bWh4YVJsQnJITncxSlJGdkxCVzBKOWsK+880CwWu5iApYRBFrXOjEnKAdFFEF9pE
+            2+a89W/7vdclzE8xoQ1HLWaVgGz3ldJDtaGAN+w1dI8w6bqzVsixuA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMnNvaURCV2ZHckU3WlIz
-            d0NaVEkxZUNpc0M2VHlpMmJzVVovRGErVzFrCjludmkxeXBtQm51dlpBTG5ZTHBU
-            bHpMQUtPWTE0dFAzZitDZk5jbUcvdWcKLS0tIHlxMG5Na05IK0NJSkdBWUc0djhh
-            dWxiWlUySjc1MGtXK21FTWxrRXVXdmMKEHC437PVRhVII4dV+1z35ak5fTDMKc6K
-            dKVFkZle2ZJTwf1QwlFZDpJ/o1/VXFO7+26E++cpp6WUBHIPxm3NNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWG1sd3U5enhjbTc1Z3hG
+            b3h2Y3FmY3pwalZhVGVDSDBjaDZpaVRXUFc0CitlYkpZZDlxTG1zYTlSVFlZRFRE
+            UGdtTDlVbHc3eHAzWXFrVzVieWdpaFEKLS0tIERXRUI2QWk0Um1aTkhYRE8rUmFk
+            eWN1MDJIeVRqc1Jucld6REZuV3FReVUKExdjds7qvNOgQLjiCMRBgi1FSGxtXMFM
+            h54rdvLDQh02GMtR/YQCyGGFi4P1njYqy6/tY7BWRBjt8A053Bsa7g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwOE9LZitGWDRPTThlM01u
-            SlFBU2R1cnMvT3ovU01jSVlnU1huVlBkM1hNCmhDL0l3UG5QRFZJdytjNUpHL2x0
-            bEg2OXo0YTJmU0JSZ09kMEZwMktlRDAKLS0tIFlzWFFOV0FpK29iUG52THYzWDF1
-            WXVxMHZWUVlpcnV0SXNUZmM3RFMwNGsKOsKqSWIg2CvO0NNlhspGZrF7jgLb6KXN
-            af81eyREcqaot3K7VEbrSxQB0ytOrRl1zI/cz+GM4uLfec3Bh8CNCQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRExxU0tYTVdZNTRXVUU0
+            SVY5RGRDSW5PWklwcjBXRllUbVBKenk0RDJVCm5yaksrTVBNeElrMUNkZzgzTzR3
+            Z0JNV1BIVlpLcjRadUttWGtpWFU5WU0KLS0tIFIxTHJobVBSdVVXOXlPelpDY29k
+            dGYyamo1VmtVdTVuSlpWdFU2OXFZRTAKweZHnrGMcFq+W3MYGtAC1frwTLnUJpPU
+            dnPkxX42zL8YUxRBJt/sFYk/j1YGcW+3fYibyp/K212soIGzWhV4zA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSFhmRDdJMWVNVnFwV3Nn
-            T3dIOExzeHVsSjl3TklnWU5DQ1ZKNXZXVEM4CmtrUXlqbDRrMC9XMEFJM05IVk04
-            UE0vbjJjc2VmckgyTmgrVmxqUllQak0KLS0tIDM1QmQxVXhvdjZHWWk5MmFWS3lq
-            SmJ0MEJYVWpWbWNZdWxEU0l3RVhqVm8KT/WCth9wptGF5ukV7f/4bMCyD7vULfbE
-            s7Vjj69Sh+ybvwzpjfJEVvF4SbmMvlfX0eNoFqJ6HbpImrEHyiWvnw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Q05SM0ZkUU5hTVJ5TXlh
+            VDRJSHdZVnlMM0lTYUE5dm9SYlBvMGEzSlR3CjZkM0UzcG5McjRUSWp1WEdnUDNQ
+            VHpwR3JlZklFcHNYaXZJRWhnd0JNY1kKLS0tIFR4eDZvcnVZdjNWRDVTN2VTQkI5
+            MHRhd3I4RjdpdDNGbkdnR0RyMHgwWTgKNEkgnpi5CJxjkpa774DD6dt/a/NMt4Jw
+            iVhSKUvH5R3L+qJ9dVzpTJellrBvY+F3Z5UD+YwS9bhXeeiF4jof6Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkd212WDBYVGVnQmZwVFVY
-            cHUzdEs2VWFuemFjTUpMSTZzNC85M2l5bUhVCjBpaGpUeENtcFRHMjBjdE5WTmFT
-            c1hINEFGNGJzTGk1bXRnbkZYWURKSUkKLS0tIHg2WHY4ckFVT0hCd092OEJtdnJQ
-            SmY2dGhSUXdtNCtJbHFnbktkMGNiVjAKBTEQHRs/nVgpkC/s5KydH+fx2siXv7W2
-            KyMh+4uHx1xRiaizKbvKJa03TRAUMYMUv+OMH3pk8eDNd1BZyNg77w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6dTFvbythNnBDQmx3Ym9W
+            ZTYzTXo0aFErZ2FOcE5mTURRekVNWXhDMGxVCnVsck5xdm9wcGhlZEsyQytBWi9K
+            dGlMTXJqTG5HY3BFbzZ6M29rSUJDSGsKLS0tIGsyK1kzNSszSFJCeFlhVTRPNm9y
+            cW1lVGZnVHZQRkQyZmdTSHMydjFxVFEKVE8+boRfoDPd0KFM3IJtbMjkRT67fZY7
+            Dr7Ssmr5OO6z5NrAtDwcL5fCpRV6VS0oL7cM9yVv0QVFVJDiLos5rg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvYTNnYnB3Y1A1MzRxOXc5
+            aU04cUZFWlpROHdOQnpTUnV6OHhidFZKOFVnCkRlZXRJUDlZTGxFZWdSZllES21z
+            b0ZqbVNHd01hNHNIdU1rWGhlWnFINncKLS0tICticHZROXA2d0V4WW12ZTVkU01u
+            dVNUSDR5U1RNaXBiUWRLQmdlT0lEN2cKHMDOgsfIg+rC8AZd50LmHdIz2mY3Ud3n
+            hd02liKhYItGaCXphJtCFdMn1gefpadjB8MpZM60muFp/cVpFkDvOw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFUVUwOUtHWkwwelQwU2li
-            ZnhYY3Q3TjdPWi8zUTRaNnRERlJHT09GVUc0ClhKaHhGNEQ2eXpySjl2ZnpFclpL
-            MnhXUmIrL21sd3lYQlNWV0VGSzhxdDgKLS0tIE1YSHZ0WkxEeHV3MExhdzNLWUYy
-            bVVsV0NnTTBOTlEwZEpWUXFjQjhYeTgKOWvQaejG0Co1S44srXmj4tPp/DB1MJcH
-            66LDXhBTQe+6mfit14H2Xll3KwZU8ElslrWpBfcE8yp3BTUASPNiyQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2WlR2b29IM0JZUUdqZFB5
+            dHNuemJVRlhuRnE3azVpNG9JaTlYajlDc0NvCjVkWjN6Z3QvbmxPcXdsRlZyU2JP
+            eDJZSDhUc3E2Vm5YZVdUVU9Rc3owNEkKLS0tIE9EdUlLUVl5UUlGSWdQd3JZZDV0
+            aU41dStlRGs3Y1lhaVpGVEpYMkIrcUUKQ1qcAOal7P2RBSZB7/hiSj6uUU4gHSiP
+            LntpjP6eefS3WlvzAbAWoKyowF4kLdfcAlcOSSs15L0voHGRrGBzYA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZ3hXMGFzYmpzZCthZVFR
-            Q084Rlp5ZFB2TFV1SFFBTkNVaWhUNHFZb2l3ClRrNjZjOW5FNGV2OXRWWWVJaFhF
-            ME95SEdJT1g4RzlHN2xMeVZqaDhSTlkKLS0tIDVKTHZIME9KamE0Y0hieGtacHZR
-            OW5rVnd5UXUrektTak80a0QzMXBXSUkKhMXsk5jHc36Ml8WWVWobrVHs/6hbs/9r
-            eKx/S6cZbhXoeckMcStmDYZP0hpgtg0OUTQJO1FhpZRz2/eQtT9skQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQaDAzRndNR0ZQMDY3QkZN
+            SGp3akFDWHFZZXNmTTR1ckxQbFYvWGI1YUhRCmI0SGpld0ZuSHhzWHJ6T3BJOElD
+            bTJGbTI1WGQ1SHZvaFNFTlZNcmF1c1UKLS0tIHFEVEYvcmE5a05HT1ZmQSt4eW1F
+            QWU3RWFIUTFweHhpUW9xSGdmMzI0VnMKWmzlIoSO2sGisvtjsf/aauUJmpLxbnqU
+            oSb5eGoaOvP1Ji9u6BdDNujq7YrryilK/84VBStwuCZfBSgA0/uwbg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZEZRV2FXaitBYkp5ZnZ0
+            M0FNdmJYUkZCS3VrbUFod1JBY3dwYzFFZndFCm9IeFZwT0hGbDcxZGxkMml1RjZy
+            TzZWZzh3dVNKTjJMK1podERjRmt3WVUKLS0tIG5uNEtUaVRlMkIyU04rZGVZRkg0
+            THJxajg5R1NJT2x6TzI3dVI5NXB4SFEKI+hmS3XB3W8pbb32t6E+0eI7WvMhMYRM
+            LwYMkUUemk+L/L3Lcrh7913ThD2fsAGlKtpd3tL22BU43Qx9BP5ynA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-05-24T18:40:26Z"
     mac: ENC[AES256_GCM,data:llJ9lZSWogYuVeRJRNfeg3GchCPWvtTKaxNOHYScXBTjs7x37Wx2PCG+QC2hj8p5+BgtI6au+d7qMOSxhiCBVciVyIdeYeM/CVyb8nY08MQZuDBoS6R1MT6qISrtbOI+xA/HEZZtj7sDfyo/LwCi6sjEu132EmufD+iryIsLbx8=,iv:D7AStvmItKZdQWgKh5GcoJ4OAB/1VtZ571bGrkZffNs=,tag:lRtMvscOhtagthAX9S6PmQ==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:20Z"
+        - created_at: "2025-12-04T04:58:08Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UARAAtQeWywospQQRhpASFfO4lNSizDs15oDFDXVKQR7tjtFa
-            w2sJbmGJB2i6YuxBqPXbPX2KBcOr1eZ8XHthiN6fykLKOQIXnX/8seL0iVVxewY3
-            uqeD+ArTGmyNpCTVi3xSAyVmBot0+gJFVYDsJS8JqomuZxiXeBg50mB8HEGNHQed
-            R/fam1TwakSLs0jE/VyhzqCNrIDAntCOruuyRH/0CSXJ+FBfSsTYizRnxEVGtkSo
-            x5+BPxQiPdZlh7dzlkNJUGkCYBTu7npBu+ZmLBvl5ae8VvjvDML1o+Ue5ELT4UnC
-            9uWCY15Cip9jxr4hBhnlsDRT4hjvf/igx5GcKjxdKBeTRgmQyGIsBiDG1QobVZ3o
-            6ySAhKxD7hWMagYbHxhvU16O/1mEZXBohdj6uiAngqSYeWJ+YhNVUTdVP1XgrU9u
-            kld1OWETD0HlAQ2bprCZ1yB7oiMs913+z0naf6fT+LkK81Rp3yZ/HBA4GEoq6jGH
-            yezTXO80OmKZzh/a+8H6vomuTocXLeutrtAp7DV33Rpbn4aT63X5AJD15ywmDkvA
-            EfbZ4PnySWNxv/X16wdpk7BYzQ5fOtGKtMpB7MKX+TEwy9f3Q9k1CoY5tLaLLRSQ
-            xXecy5eE1p/rf97O+c4eFlZGpD9RcCRaj/WYuC6tH3ToYFnuozYibxZ6TRJwVCfS
-            UQFIzANycI1sk3457MJMHWZEQwwCSPDVHtv49S6K8Vc4zcHWO4U8JhnlcE4HORSv
-            sZJ8yu31YVaeA3tCfxOLBoyIwYi8okpTIePGH56f42la0w==
-            =Xauy
+            hQIMA82M54yws73UARAAmqPBnK1eAkB4Nki74jkUtrRES37YOVPORbavTaqUqQbp
+            b5n6NgB2V9/2ENZA2K98UEoS1J3Fh/wnCEy0JWGCy0bQmL1GuOzRoPz03PApJLv3
+            FpO6dgEzT1Sy1vd9L1RgihH3ijberOXw0rLqTids1TImGEsh7hsSXNRaRy9astWV
+            2024iHyZ/luCJ+bnHDXEBM8udPG87Ft+gCCp2w5SJ/hMJPdOIGEysyvW4Io103Rc
+            FW5tJ/faaFpCQnVz6bm3WRpYqk3F8RhxWNzdzVTCaZ9oKjyWI1So/u5r+2lLvt4c
+            G0iVFHb1v87A6g5etEMTyKAr4pomnhgXZqfxkwknbhIVz22oUFBNc78xQj3qtYrP
+            VcGmuAZ/D90PxjaLcNKaUYiSr7G31y8gjeB1pfa49VgoSaGteZdfvcgCctb8epxi
+            s871ec7VAOCB2ts1oCMxAr1yJ6xEJFj8NoRT8vEs6WwDWHuxAOC6rTt3rX1sOysH
+            Zs98V+ZYNBMKthDjJqFmCtrsyYOV5FaqiZp9K+rxn2ENbDq5HFxBlqrVcXi4bzfZ
+            BeQVM7rGggAGPvMkynLH86yjJEOFfo4y/lGYTW56nVVNQJDRgxbC3JejFkFOaZ5K
+            gpCSdcfgUHoFi7Nh8avqx8A+P10XCe8vlG1MlBZa6ffkoZPsUIWbdV9lhRSmYHfS
+            UQGj5vVRho2EuHRAySgz6Y2C7ZfoKIljbD5l2IhlO8CDeuHzi73Ci/nJFltjdubi
+            B2Rbc6VrhRZC7bluCHnTHDr7b7ao3yoqtlzoH78nAiSjCQ==
+            =5EG4
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/servers/vaultwarden/secrets.yaml

@@ -5,105 +5,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYmp6aXpFYmgzZStqRHFS
-            bnNaaGE4UVFmUTVVRWluSGxPK3pvT1diakN3CkJpUWdyWkpEY0lwYmRyS1pDZU9w
-            NWlMcTN2US9mY3RoRVpHVTlKTnBiWTQKLS0tIFQ1ekF5Rng5VzlUQ2d4Y0t3RFhD
-            YWxnRHc0eFdLQys2M1FoRWNPWnN4dEUKfL7KIYMAx7d790c4M2j6s77l0bIJbeoW
-            pue4pnUaOIXBIamcs1HhyQcnjqKoYHcU7IXpnrBtpsSTaIVdlbab/Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFbzBXN2NTZ0xsZUJjMGlk
+            VlNkQUhMZFVOMTBIQ3lFaW5BTU93b1EyOURVCjZIVXpCNC9DR3JnTDhwanlEL3ND
+            Y3lyOHJrNjdkZFF3QjBUZFB1RGx5NzgKLS0tIFN1Z1FiZStXcU5UejI0dFdkNFV5
+            ZFZNYTloMzhXbEN0SndnU1JYYlpPNGMKie9LG3axFKi2j9GVxPcaPSMqpS0Yiy//
+            LdYpKIuHneZw6f7pAM16oa2yOLd1ssDBpCTg3lf7ff08qGYFmhccxw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlc1JGajlicWpUQk5SS1dL
-            UG1lVmU4TVc1TnVZdzhNRDNFV3lWb1BtVVNjClpJa2Y3UnlNZ0V0ZFdublNNZmdZ
-            VzdtYWZ4Q0o2RndGUkRhWWtxYS9TUWsKLS0tIGtJMGNCSXdMcEFzNTVqaVo0VDY1
-            cjFkZFhlQXI5Vk50bytBN3A4Yzh5eDAK+wCmJWLXoRIOW0csP1sHfhYF6xyVAkwE
-            gwQJPx7QvhPhbrm/FL1xF2S4/SBCtXTE5xhOi9ZWsqdaElkQZKLY6w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuMmcxVVNxUERkQUtvbDd6
+            R0lMR0RRZmJJSGp4MFY1SGtuTEFQT2tTN21jClBmSGYzTDJDWkJWNVpsdnZUZXhq
+            dENuZi9PNytZSUNtTXg3SEdLUEJkYTgKLS0tIHRzV1Q4U1MzalhnaE9zQ2Rka0ZO
+            K0VOT0lVMXVBd09SR2dldGdDc00yM3cKNxwiD5/u84h8MiN3tb+7IiUXGZkpCEfy
+            YFn0J2h7I+sr2SshD2MpA7rBHso5VagNv/nZplYDyg5ziFJorlPQYw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZEREcUtwcHZ6NG51UjZF
-            c2p2OEhUUWFOc1lQcFdZZkNFWnBrRjA4dzJZCk5zM0ovRTRrcW1qTzVJeVVyL0lr
-            NW1HVzF4RlB4MjFiUU5DZU13RnVTNWcKLS0tIHBXc2pBaWp2dVYxMWdSZkJhb0Zk
-            MkI0SHZQM2owbTNpRjRyQ2ZnZEwzT0kK0Jmq0F7c7xEBQ2obq9LtS5oELxPrUfCL
-            t0cOTOeCH7OzxBBssfQdPsnumKuQJW7jtjZUg8C3whNEgedd5A143w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1TjMveEprd1drOTlON2Jr
+            Um54a01QTXNzbkNuWlRsbGNWZ2xVS3hlN244Clg1bFBzcGt0bUl5QnA0bTVPRWtQ
+            VGN4bXppTUdxeU42c1FxdTcyVEJCdUUKLS0tIEo2dWJncWNYUlVOSmN5T2tORkJn
+            VEs2ZStkOUZXb3ZobzQxOVRKazExTWMKCkN0EtXysVpEYYt6cj/M7INMCVw8dmaX
+            HqdIe7cawYXkQay2YDohIN+w5eNsiGmcZ8HYsOvX2HPRJhYG226Ynw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnWGNkTEpkMEJBNDhHd1Zi
-            aWZ0bEVPOTRmb0szRWordHFpbHdmT2luYlNNCkF5ODlPMHhncTYxZHVxdHUwNktC
-            NmlZWUdiL1ZFcE5sZW5TTFBRTUFZSEEKLS0tIHcyMzN4dlJzeU5SNHBaa2pCYWU3
-            bEtNQkxIdFNOVkUxTFBkRWQ4dFQ3L0kKZb5Q91aa6gDNGR7ds/0RQ+jSsjZox8xZ
-            3Q2W2bZ/Qx/Nbs4YanHPQmoX9WyZOqJm9HWZB1x8Y9N4DjrLG8WR7w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWY2NXNyd01Md2xuU3JE
+            R3VmbzlvRElnaXJSbVBWSGZ2MGQwWEIzQzBZCmV3c25IbVo0Y29SbWErQjh0V1Rv
+            NE4xVEhTaC9TMGVSUE0zbDkxMnZPbEUKLS0tIElKeWhwcHBCZHFETHpsUTFwOEY1
+            ZlZXZUtwcEJ1NkVqOHZKUXUxQnJNZjQKxNIxZ5/hWLtUMPDiktOnHjX2N4Ynhi7n
+            ycoAzDIojqjjuvdvgj2rvrliZKmLCVv4v+IvXhYP9c+A4cv2gCYPHQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzdkdyVGJsajZyeEJkV0V4
-            VzVFK3poUjQzWFdzVWhUNGoxMlhPTkFYS0RzCkNxK0MxdnJ2M2R3SHh6aHp6NW5r
-            R2NqZ3U0TjM4ZHZwM1k1bXd5eXUxdGMKLS0tIG9IcXU2MlhaOW9lWnRsL2RoOEVP
-            T1Q0Y3dmZkhoRzVyZHBFTXQ2NjNIVGMKO/0QIBFtOZMsdeZeANv2+pBBcJArCumK
-            XaTdsYI8Oa7Dcn0+/mPA9+tjpkXohm+zJc2WCI3BWsGPB4vQcogexw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMUwvYUpvaS9HOUtmS2dG
+            NEtzRFQySXpzSlNEWnZoOHpFQWZDNUF5dUQwClBHOUV4ZHM2Nkp1OHA3WmxIOWFB
+            S2Zjdm4vZ1ZobCtTQ0J2OXBZckRpVkkKLS0tIEs3Rmt4ZTRhRVJYVnNXczJBbU54
+            Z3lOZ25IYm5iYUNGZXRoQVFzNEV6K0kKvoEc2iot6prEAtu9Xy5lOGUuSmUkYUJg
+            sen3e+NKejQGckExGelbKJ/UEOoAeUV+qivbYgnLqG4PM6e6Kr5KKw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WmNtOWlVYml1YzVpWWVO
-            TnpYRjlmMTJzRVVrWEJnbVJmZWxuY0FUMGh3Cm8rRzQ0OW9TK2JNdG4zMVF1elFy
-            d2VUWDNBYVNUbzVSWXBFVnBVQy9uQW8KLS0tIFBhOW9FOG8xcTcyYW4ycjJnM0hV
-            bHRlUHYxQVBKSXNOT2p0d2FZQlc3UUEKFfzUAcfKrgIUcE//vP9hxmQvyk+j6Vch
-            HVRbjhMfwEi1WZ5SWuHIAKU9lSDchtvPElTEqv6Nwl8Mi4mU1gEYsg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5a1gzcWxCZmlKT3lqZVFk
+            czFlcUtUUTlJbXI2SkJCMEpBWXBtd2prRlFJCnpGUDVxSE9uUW9uclN0VDZLSkU2
+            RTFabmIzU1RRb0tBZUs2c2FrK2RyeEUKLS0tIC94VVFEMVhwQ0xzbjRjUytLQmlw
+            a3JMT3VualVSb3lLbmtac2ZVeHVOakkK2qet/fgHpBkagbC+16sSjeDsYK53Pj9M
+            Ss+wK+x20sCSQ7W7pn2+ueX81CVanxbWGCvqpMOJBn+saBfPxp6uoQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvWXR6YkxIUmdvTyttZExJ
-            dE40OG5UMmowUmVQYzF0cE1EZVk1QzltTm5RCnRIQVNmYUMxczlxS3FBSTlLRStB
-            Y3M2VGJMSXQxY2V3N3BMMlQ3WG9ESkUKLS0tIHZidk52L24yVi92cFdreTZ6V1dk
-            d05YT0RsbXQ0ajVRRHVjUVVLaEhEQXMKsyc2OADKC2e7VVoRHPtaDCgmUHZgcjJT
-            hjYMHCRFPZHV3zSEQq8dXQfmZVdrHD2rgExsikv+k7AzXtaLCW2E9w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKR1BvUFJLV3NDQ0piajI1
+            MWVESzNSb1dqeElsUE9RM1dMRXdFMU1SRm5zCmxFeDlUQnorZ2VQTHd0LytqRm5K
+            cFphWnhkNzJUczNYSmg4a0ZyN1A4QncKLS0tIEJaclRrTmczaXdmNXYreVQ5ci80
+            TlFRSmNvNWcwdWpOa251bGFoQ3BIbG8Kv/kND3fCXJGaaejp8SLuvdAZEKuJe1PR
+            m9TVYIosOBj1c9cKlDch5h0w8y8vK/pea70HeLeLtRmDSkizDEYQBg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzTjhCaVh0YUNWWEg4eXhC
+            dE15MDVmWkx3dlI3UlRsaDJDOURLajQrTXo4ClIrSlBrWnRxY21GSVJOdGV2Mzk2
+            ZHpZclNYbDV2M25FcW9wWkZPSVFjVmcKLS0tIGtyaDljbWhJZmM0SWxlZVJYYVdK
+            dVBxTVE3eklobk02TFp2YjhDdExJcjAKtNlFNurCOWH6i/ldo4PUxAcrnWRSGhOa
+            03cQ+tFSSyjS2T9RGJUjThQDyjEk1rK39rMryVeLCBDpK/nJFt0PFg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHazJZM1lOamM2d3BmSWxD
-            U1VEZUtpbWJIdTgvNWF6M1pGaDhkbUtyT0NvCkdPQ3hza1ZITHprbkRmaUJ5bUhK
-            cStHdnhLL1JiN0FqUXRoWUYrQ05ER0EKLS0tIGdjcHZCaTI3M1EySEx5ZnFiQlZi
-            Wi9sSjBvYnlDZlFlN3ZnL2xaU3lvNjQK/CfbTOCKVgyCPzB73K9bZpmUxtQ/DsgV
-            f9ykKS0PIP581wFEBq4AxIYp5GuU5pU7BJ9rr09+1+mJwkeUQ81cog==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPa1U3UFk3RW4vb3pHSVI0
+            U3VDRGs3TVRzWWJzUkpSa3QyQ0d2YWVSMUZzCnZlUCtQTlo4UXZCYWFkSFhwdk0w
+            OGpjWUJtL2NhSlJGZDUxNWw4a2ZzTDAKLS0tIFBxR1ArdzVHQWNydjhkdmxPWHdF
+            R3RNV1NUNitXQlNQTXA2cmpWTTZ5STQKSupF4NXN5EAoN44X/037lUjYZVow8bQU
+            MC2cmM3kxPjOS9buhloV/rNbWq1UarEfGHqScV5tbc8/DvmfdszmzA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZTFFejNWL3R4dHNWVTlx
-            ZjZTSE5YNUJkdUIxYXZmM2pKMmtVRXNkZ0ZzClNKZHRoUytuTWxlbncvc1hMYVBH
-            Z1pDQ0NyOWlpRnB0b3l2WTQ1cEhsN0EKLS0tIFlkeE80VjFyTHlYNW04RkFaaTRQ
-            NzhETk0rYmVsY2x2QXN5SjVtRUJIR1kK4nEMqi+vVXPup03KFbpCmZsAP3lTlGLb
-            EwMayv/k8wTZ/hvmuIh0QJi9OQRX1xgYY49q35IiLYQJFbZZfjzzMQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyNS9VMkVJQmt4cUovb051
+            TmlpcWo4dlRGdHkyT3UvUFRPandRempURkI0CituLzhxK2dMOTRsOEh2b3NiV3V1
+            ZzhwbkNWRCt5L1RuVFFxbVkxV0dWdEkKLS0tIFErV2xoeDRNZzZyMlpJWDMrbUlr
+            K2NxSTZTMkZabWFEZWgzVGFSMzlkaHMKPWyy6Ymm0/Bs3BrRggzgdUTU2a/xLqE/
+            v9CpxgjtxY+mZa/UgnpwyYTcOsDl9l5WwZ+t7gZPSJw5G7Vhj9mObg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKTjMwWEdrYjljcGh3ZkRC
+            N2lMODlJRzAxZ2JxekhYVldpVVNYa2pBaFZNCkY3WHFCbS9ETVhsaTh3R2M2WjB6
+            UEJEWEdOTW85NmFZZ1BtbmlvY3ZaNWMKLS0tIGtQaUo0YXVtY3hSSDZscnNNS0ty
+            dGFPVFFVVTRtU25tOVJoSm1Ob3NHNkUKHPRDN8fhX75mEjqdn0Seqbhd473r030X
+            SMvd/jPH0pzaav0WgLXf5SQaQWqXD3eIWJd5tov0KLBVOvk1CxlXqw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-04-27T00:57:18Z"
     mac: ENC[AES256_GCM,data:8QwxkjAuISrTs8Ls0fFtQ52AhzDRJIw130Dox2c5zrdqnr3rTjZDvz+zmOjFt+gg0iC6gDrvEkYh+4+9+g3o3D3A8wdQHCpi4ia7pSiZ4palxKwHkq8XY9sgDOamYb1534QlLZk5OmpxFPLATyNfDt1+UoM2++ATkZ3t1MjL1PM=,iv:9C59fPOga2/aih1Wty1HFdZJk5T3xyIWRVuogZ6k4dM=,tag:Eh7uYYty+mkC828aJKd9iA==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:21Z"
+        - created_at: "2025-12-04T04:58:10Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UAQ//e1cnSRMGostpskOY4EhYAgMyy93AQTM9RFsCdb9TXxz4
-            3jgyp9jaojwTgMxV7edNUYpYu/QfNsWc/a30zaniCmETeerd4ymdGNRlebsB+2Bg
-            L78wmU4uUjVIA6W7MHmNIcw3aZr6Ss++oI1b7kA0AUPimFzk0zJ+4tf4JwhPisf/
-            bXfZWpGCs6wuaBqzDLn6sgSMe1Kg6WmlDKyxxcuLcM+7D4/3WF6Zvjpp+n8gmc0L
-            7mmu2EITeslGBHC+Lxhv6KUVJIWvIZKsDS9wpeL/i+X35NdLizOeYHFbSNsdvEDp
-            swnN/loviUVCDR7Y14gRWESwojcaQTjOyfEMuMHQ7S6J/JORH6uxJQmPSQhOq5gd
-            VRmNvqW2xJj8IB7XDDWNpf6EgTHL/eJX6/FpIbnrCW+SYbsdHpwUX2ijYFVYcRGI
-            /5Ya3gKF4TswxM1o2jsSRB0actSE9iri8iU9AFfoV1UG2Cvmfj3pWxNR/qn8xzJb
-            fUm5jRhMz/bAmqG5ncdgnqArylK2Vl5VJ99v6lU8xxALhq+8OH/TGJWhmnNLky/d
-            PDo9Z748NTlTgprnbCHG9nZtJzeTHusYCTTHwTQCorwjEDU9imYfoJTdKWjcwxhp
-            T26ClSfSQRS9Wb/zqXDoAu6QvbYq6Iiv3zTpFeMjOuScYpUpiq2oxBMi3i3XryjS
-            UQGskBIEXkK49xI6cEvjXRyRWxjl1FgoWboBgrwYWJgna8qCRka4cVQRKYZ4j70/
-            RhPj6djtk62mMH3bsxPdc/HiDjMkDO5a3cH2nGMKNDfEcQ==
-            =0OU0
+            hQIMA82M54yws73UARAAnTsH8d2fVMYqLM82tIKu/ji8Nra0ELm+UnT0MUhr2aRg
+            sDYluiDodkblLDLzHaLdlYiV8DTvxllqFJDw6cGFEFDpeF9rGx38aSPmV2cA28h+
+            XPLV6CZa8ItbvqhVXEJ6WWt8ulCiFzQzK0fHkJtWWmVbc7Z/K0V8ipgCWvQDTKbk
+            2Da2G317ij3jjpqRHjrrxE1q1GalXWYnmVWvmEZXymkB0PGNK76uv6CzHyr6u9e0
+            EH7NOTJqpfIrcq7AcOzPLKBWp10xiLMLqKWqd/rPkFThBzK0N13DLTubMKDuOOqk
+            jiKUngkvH7O4RRlwmzQIOc2jQc7gXmL/5llDlhDK4NAujp+d1D0v5Nt30av8HE3q
+            dT1cWJHmiBHapLBqCeVe5X1itnAj4H/IHz5Vw+iSiEYWmSChi5gW1e1BWJYbGsrF
+            NsPds7d2lmMrQqjREjSwXwXBhpbfe6JRlHaoL9d32RR/zepb48/cfOgnuqmeWmqO
+            J2fdoXQXdXqozU5p2a484a7mQPPdefljuH/IeXvzDsLSZ/TQcs4/7XpSgtxWvNxN
+            +DMvAcUXC4kcaGX2YjCw91N/cbgM6MdqWu7JPjfcvO7AkrQUwHfRrrJpCaoJhX7u
+            /0yfIAVuglTWeUPU3ZB219SRNstjfS2mkqzD8+6H201OOj2OmDNb8D5pr/ceeH7S
+            UQFyUlK3FvNdOETZFcEHNQ5xXaVPKyjyqPLtMQSUuG+1WgdG/sWYPwkcIyQTH++0
+            XFmXMSeqaM/BcfB8x27eZBkNN27SqbtWKplCw+KyZnt73g==
+            =zDcS
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/servers/web/secrets.yaml

@@ -5,105 +5,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZ0xlRXZ4V2xyMjJGdGFB
-            VmhPMmRjK3hGK05QdU5VVUM5TGNHUGNaRjEwCmZzS2hQZ25sN1VkK0hqNHZsc1ls
-            WW5tUUIrbGtlQThEUEdML0tpM1R5UE0KLS0tIDNKMlM0eEhiUVVUS0tzUm1wK0pp
-            Ym5yNTlxK1lKZjhYTUd4Rm1RblRmY0EKRGnTBApEWmeRtRVGFC6EJDMpXBbmmgt5
-            6YzCp7q55K0zKcLzSJLWs9H4bDC1Lb30t7zg2PTu2JtsBdKnPdfavw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoSWFKeFJ6cDd1UE1sT29G
+            ZHd6VEpEU24wV0o2L3ZRRTRMVVFRT3c4OWd3Cjd3Unh2WlhHK1FLczE5ZjVSVTFD
+            VHNJeWt2MmdReGI0M29LV0ZSeEtiUlkKLS0tIGt5clprb0VXdnJCcDZFa1c1a2E2
+            clB2YjJTR3YxMWJOUVM0OEpyZkJDVG8K2W49cLfKB8+qDfZfGAPPMqXE7ID0Gcpa
+            oRPug5CCfdnptackqeLOzs7TeT69Kz4CDuPvO7n7PRzBqcFcZ77E+g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhRUxxTU9DdC9xT1g1ajdM
-            WUcvbmVodDBLUitvTy9kQmZUWDBvQkxEYVNzCnQyd2xEOHYyOXdxclhmL3FRVkVv
-            YjJ5MkRtZUw5TFo2cWw1MWlPTnpUdGsKLS0tIEZ2MjNEbG5RMExuWXBjNnFtWDg4
-            Q0NzMXFReGFqNTlVR25sV3BrZnFGN2MKbmmmmezJMs0YmoRhao/hZzuAIRtTKvyx
-            kWrk398SVGLRFku+N/Ao1wdtFrNGfvTj5M13mzYQVfYk/nQHzziSqA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0TFdUOU93MmNBdnhES0Vr
+            TjBGQTZlc2tTNzBUQzNLek80c3k3RmhuZURFCnVWeWl1RGdHbGZuell2NjU1T2tF
+            THoybnhKRVRiWTk5QitXYzFUZFZrVTgKLS0tIHQ1WUErRkVMd0xTdUI4RFVkZU9X
+            NnI4aERkMXRHcE9LQ3FHNFJXT1UxaTAKDY6+tybzzsNydpD2t7S5QzWd2Xzj4Mox
+            TU7yr2Xk9mFMQISescYLgyaYE/fIzyGl8SNNLA6OFLYoe90o5EbskQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLeVhoUWEyT0srNWxLOGo0
-            U3R6MEpVRW5qM3N2b1ZhdldVVnRiQU94dEE4Ck9NRE1MaWtHaUVYenpJaGFtZlFx
-            R1BOMTE3dmZEMEJ3QllmbExEV2I1Rm8KLS0tIFhZVVowdjNveEhxdVlqdnRzbmhH
-            SUl5RHVCbHppcVBFVjhGZEFLckYyKzQKIJ+b2URnZdromnsPtCQhiw1yVPtxHchD
-            fRUIXBR7U46q6PoIC9We51kSAlOgWvyaz37hbHeEH/qu7RXlBSNTyA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGeU8vbmQ5RDNWS05pdnBx
+            YUllYUdvcDlGR283ZUpLam1rSHhObjRoV1JrCnpzQzJBbGpUSEpid1djcUVPeGw2
+            bE0wYkYvNEUyN3hSZjJUSWJ4VDRoa2MKLS0tIGdUMmdIbFFwY011WndkTUxlLzQ2
+            RDYyQVZEK0xEajVPWENhVVRPUWI2TWcKoAvc3sBjReRTbhNrFZ215d9S5d7E64gU
+            +D0Olk9VnC8YmaHyteMkYej8T3zMx3g4GFewWf91ZqDOmYhtkJ6c4Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsUWNCSGVVcHFPdUJ1aFJO
-            Z3hIZFgwUEx5YTMrdHArdEJKUklnWC9YS1R3Cm9SdzdXUUwwWHp6MUtyNzJxYVh6
-            Y0ZReTdDdmRGSkJTOGNGQlhGN1hFV0kKLS0tIGVhM005U1Q0OWkzQVFvVFU3cXVX
-            eFlDK0Q2UzNMTGdibktVV2FUamtXaUEKEqXpmLovugqQRmPIbHhVzl7GoGloWxyJ
-            qOUi5GElo+zJyTUunB6MI8aYEWf+iNiZsrmMNQOXTpHiVo0ZBbL4Og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYT1hlR2tNcUlKT254WXpz
+            alNYZndNTmhyQVpybE9pZm9wSHd0c2dHbHkwCmxYNWJURDJaOGw4UGZZNkFIaXRo
+            TjF5Ny8xaUw4K0ZjeXNpVmliNVRzazAKLS0tIGdjMTg5S2llNXY1ekxGK1VVTFc0
+            RHJTTkdSc3VIZ3JlZFR1R21MUFYvb0kK8q6RjpDw160bLxrxu/9Zu6n7Sjnu1GjQ
+            5ME7JQbgusbu2YBh1nOOWXGa6AWYP0iBxkUr4khx6OYsjja1zBKhGQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNc1M0T3JTdUU5M1QzM3BO
-            dGcyVmlOSXpkRHhQM0VXMjR0ZWM3Q0lYdVdZCm9LZkxaem8zcFdIWE9vc1VlbzF1
-            MG1YNVU4b3ovUmEzVTROM2JJR3N5ZlUKLS0tIFVYcmk5TzZNVm5RZkdJTTRFa0sz
-            RGMxbXJzb0V1YjZRUDY1aURPMTVIcmsKQJc25tipK6J8YIJU42MsoI89t+FYXSjs
-            M0TRoYEnj79u9P1KH0kY9Vm3+fZx1XoGT9X1kEWqLH6rk5Bq4IsgUg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEOHZpb3FVUVluaHdJS1Rp
+            VUlnaDFSd28yWDJMaFFEWk9QRWJDYk1RV1hVCmo5Zm1KUXh2UGtDdEw0VnZzVVRr
+            UGpVeTVkd1VjUExnNWVnNkx2ejVJa00KLS0tIE5OUzBnc09Gd0hTTzR6Qi92c1lz
+            cTNiOWRMSFNHVDgzOTFkMGxqekFxbm8KT/vCX0vRkHYScJJjCdLTIi2kV9gtWCje
+            709JPILgyzUA8+Ou00tw3lXSCYUPLS0VAFMHlDaRrImlOXDHhRDp6Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1dVBta2o5ZnBUMFlNM0JX
-            VkpxYytVQzAwSTlBbWJuUXovOE9LSU42RUI0ClhFbEZIVnFRVHdlc0JwK3l1eWYz
-            TkNIekRFVjQydlVnajZoNCtiNDdnbE0KLS0tIEo5SlAxbUcvMUFnQyt2STBIakJW
-            RmJpU1FPbWZMckR2NWpBM0pkbWJtVlUKeLEZxlYFY0ER0uDNvu+9Ln4tAlEcboUS
-            SnyYuqzVX4RiMWprqh1uDyAbZmKIgzv3Xs3FoubQ/Gqa7lxFgPziFQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvT3ZIQ0JMUzFvY0RWczFB
+            a2JPY2hTTEhBTUtKQTJ2Tk1xTVFKVUtNN0JBCkE4MlZ4MXJDSkhHc2RMRWR2UGtY
+            cE8rNm5RYzN5OEJ5ZldQOFlvbHdmaVkKLS0tIGZZZUowRVllRyt5NGlXSERnU1lj
+            azNjeFFOaFBxTUw2RnlvREpqMGtFQ2MK67/r7xthQWc+DCbJBCERr4g7uHqkJ/hZ
+            r6/0kK2HDYqUPMMbl8m9MyNWFXXuRXSPEDK0fESAtzgO1dKf1qAhVQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbUpqaFJVSk00UEk3T2xq
-            MkhtcHlWOENTYS91Y29WZDVJVkVBL2xRbWcwCjlpOTZnekRFUnIrZ1hmcXNNakl4
-            ZUhBb1BDc3VFcEV1YUpubU9zZjNRZUUKLS0tIE82b1A2Sk5SL2dtV1BRVHZOOU53
-            Q004NXV6MmF4eE5GbHk4cWdYZHdvdWMKYKvsly409ktfIYHytChuxz1ZBDjXl9bG
-            NthJeT9M9owhObtE6s3kd36TR4r5AMCkfVJYxqqRRxnzeVv5Gn9kRQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNFZvV2k1d054TTdNUkpB
+            ZzI2bHh1TXBqRkZYZk9rNHJsczc1eXZJSWhJCmJuVkg5UTQ5RGtYUEJtWWNRK1R6
+            L2drcE9rcHltNkM5T1RtMnRXTkdHWlEKLS0tIEtPaGNTQWFzRUxRWGQ2KzZ1U3E4
+            SlNNMVVZTjBWSXdpRzVONEIyZDFKQ28KNmyR9uTJfLOZ0nX1NJEOQz1kOSbBTpyX
+            zQIlrGB+yw9119tZmETRWvQ0x4bUA21lzg3RoGJojCdj7YBqxjDqDw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyc2pzQWdJVVVoWVRTZGV2
+            SEZRLzMwY1dBRDlYYnA4TFlJemRRYXA3QVM0ClZuTGMwN1R5Ni80RkhCbEpGZWN0
+            VHhXc0ZpVmlNOEVzYm4yb2pBelZyMG8KLS0tIFJHZGFuYVhORTFoZS9qUUkzVFNz
+            blVnUmR4TW9ZYnl4d2s4OHJoL2d4WjAKx4e9vhXWhHuU5fqFJ2H3BXt5U5Lj00Og
+            kvtnFejMPLDgxll2SkFWlMqZeUlry0JdUK1raWaMdkgZhqwpLrAlZA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbHdibGowckpCV29QNjBJ
-            SVViMHFuS3RwT1Vud2w4WTJOL1Vya0hFLzJjCmhpMGVSbHhTOVd1SG9CYlhCRDJa
-            RFppSkdVN1gxblczR2taM2Fxa3ZuekUKLS0tIHoycFdGUEo3Zzd4elN4b2tDeUdT
-            VkwvNjUvc2lhVjh3UjNSd2NSbmlIOGsKKJgwskpzzzYaA+2BPwzx9obBe28p3wFW
-            hOc94/utsrCguP6LaArRF7/U+/8O2/qhS6T5jewUs82kMliXJQzwPA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVY1EwRG43V0hwbSs3UTJj
+            NXBhMFpFNmsxOWpUWXRENThLcEtkeVcvbHlFCjEveTdCcERYNjBNTklPZFhQcnB0
+            TWJwMEJ6V3dZZlRPeWw1VVZkcTg2Q0EKLS0tIEdOazEwa3R5UnJZVFN0YzRqYnFs
+            SDZmNi9HNzRsZjhBczhZUnkrSTViTlkKaDiGwivzDkquptztoeD15PEueibm/0BB
+            0YSW0cXf0rKijbD+LmbuB+P2Luzg+qDOuchx1kdtQz2pBAVJYYLMnQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYenRBcDBjNXZOVmJuenJx
-            RWJPL0VXOGhVS2c1OVhNTll3WUVsNTBLdUVNCjV2OFpBMW10VjF1Rjd3SCsvQ3hG
-            WXVMWGd6Kzl3Y1NDMFhYdnNXQ3ROblkKLS0tIG5BSWNhN0ZPQVNSZVRkeTBzK2w5
-            UjBkbHZQQS9HNkN0b01leDRKVDhNT1EKIUPRptezUIjnW0eYzRIf6qvRq5WIqBNo
-            OCglfk20EI/r58nuJMiMUwEfKpn9Y9FhaML8eXjZ7sU4aeS82cDICA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBndkVqWG5FSmF2Y0FCQ1lm
+            azFRY2MyanlkclJacCtHd3VwcnVvckhCZ2hrCnpvdHFvckVYenpRcDBtNjViQjhi
+            eTZHdm5JVzVtZ0N0cFhjL0lxZHcwK0UKLS0tIHE5Lzc4a0F0RDFOQTgvdDhJbzg3
+            bmxpY09wTnNWbTFOWXNtV2dTZXFjY1kKpbXTR7wVYIs+iToMayv/RrUUeJQM1o0X
+            +FmTVfC9VJSG6OZEbtcnWDdc7FGMD0xCEsrjbXX0AgcPSgg+HOqYUw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBickZIMWhWK3g4S2lkSUcy
+            dGg3bWFkMjNlWlpsaEdmdG5BRUZQYzJYaFQ0CmQ2T3pFcWlFeWQzaU8xMzdxKzBv
+            OHBFRXFmVUtiZFZjaXNCZzdEMG5oYTQKLS0tIFhNTHk3ODN0MUIvWXViL1JCSjhG
+            M0Y5OGtrcEJMUVcrRUdlUnNOUGNYOGsKTk5EolDKBHZPw9FSPdw1I9gs0HMylPnh
+            bQ2vhwy96O487LbQ+qo29mmd5Ov+zlIvViRLjKl++171xKgj7CQQdA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-07-13T12:22:35Z"
     mac: ENC[AES256_GCM,data:MXKAesYZVdW9N1BOeNqXi8IkBjWLw1VLgXwanaM0cHe63iS17VegEGhZet0WgiMuvcroPKRNzkRSXmv8pgLsaoVMAswgJAEGJjiVDMUKnvuMd7jIs9PYp16k94VRdl/eEmVUhEmXnfpNI4QeASDbxgbRuRFIXUqGYvqYj+FlJcE=,iv:RejxH3dUgj1oxzMnMeYZ5T+XXCbbPzsyAFGyUIKcrz8=,tag:bGaOeEnvqiOAVMLzTIxS5w==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:22Z"
+        - created_at: "2025-12-04T04:58:12Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UAQ/+MYxizrqIiHuKhoCaG8XeGmlPaCWe87jwKlQnRr1o+7pv
-            anV9T9gFNJKcB5Cmu2JiqxOkM8j4p/lSNiMUaeklcuFF5sZV5C9p3JKVQLI2rRnE
-            zwBowUlfjKsB6smoWkiZY+kM5X2LPepMQl2m+0IPvDozXlQDRNJN3fcRPNQbDt+q
-            VEWOouXsNUorzx6Rds0Q7DbXNiEtty01FmeNB0Vqwxj2DNEWYwJYrRggEyES6yj8
-            uWtXJJhNhKQ9OouqsoIEqC2qCgPSXEaMOLxyvm3JcoyoQuU8V7mjsgiJvVPIxQiJ
-            UZ/fA4Eml77uZcUIyCCHBu3FqUcE+qZFTsz6DK0k+t2waqRWZ0fraZ+jpWI9MO5F
-            JeaXPGj260SpbLGKiPVxf6AabQHd+LJEOm/JSIqBK+eJ/JzpEKxsCoBRgh7bY/HO
-            m8wKwdFWSaDD2lBnM7CuyGDEGJ3x+LUzHszFGhIrLPFm24tx1soLWo6M5vW2Zm57
-            OsZc8aIJf34aflH/a4IYo7X2ZNSr49EdKa+dKBr/k0FQHNxsJ8I2rAg+m0dalkHs
-            XTqqLer/dX7FninPHZzHroufSHxbXO/fVAWJT4FfkY3tZhZWaldhGddGrFVJdsVw
-            yE8e0BlOTKbTieLmib5LBevsDOLgEnWY6alJ3Lw3f5hQDRPXdPr5QQ5K+tlnxv7S
-            XgGOozQlQK3LHn0s/rW78eininDy4A0vecmHnOHdlajjKK37kqAqAJqljl23IzYj
-            wILQdttKyd5edERQ6XaNwSM6crl8KPtRvGtgioBG3Le5LSWAYMuzwXaMVLFoDCE=
-            =q+ae
+            hQIMA82M54yws73UARAAsSvmHucStz5iVC1iFoU+L2bhS7r7keH7F4z5lbWuthlL
+            iXOYobLOyJfLs60wfguYq3LCm8etiamjEYNIpfzxbMzxws8Q5Iqamdw5sK4z/hl/
+            AG+aFcNjJASRgr0MJdgpm1MUixv3mETI89RQqio/MobI7Ofg56gOqdmDrnX1pVgH
+            9MBYuDx0cXrfpib6seZFGd6btXt7TBPn3L2sVoqVqHHWpAojRVILFYHJvaZGvi/7
+            YdVCeyMul9PAurzJ3oajVHZG8kIchJZu3jtCbc26xwAxTIhl92rBCd/06GzYVSX+
+            1NxXyflsqhRvfBT+IHtBbKH+2KbPx0TlJTC/bwqcnGeHvivPtRWIujAVA0AvvrcM
+            pFDE7/3hRgbAFVRjGWM0PZp3aCEuXJE3qrCAwADT2hC+WsGSos5Yic5aj76kKnZB
+            CJbMgO/mgigeijUrW57Y0qaj883UT+fVQXNxsUzJm265rbm7sQURPFadumvWeYYq
+            YhWMjA/SSS0YT/IITI6bBeZo13MpvgepURCm94dxxBio1REAWmGgMj8P8QD67fLu
+            HAKxfarUcJruVDjXK6i4koemNCDcIG/MG+1SxZ6gcuWTqtJOIeb72l3rz8WI62sW
+            o0/s/FQDlsWafx7dL4mjIEkeZ14qstuy3IFrHGTQ6UE+ZjZxOUW7RlKSkn9JiGXS
+            XgGcEpEW5YX51M0NtzD20pii5aXim7k038s2pQG467nEVljWBaHCbEukSohb4mDp
+            kASIFKRNMw86mYZgmvR6rSZqg9UVsVzQOrq8fKq9wUUx4Q2d3L5RIGJ17t8rUpY=
+            =eJx+
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

nixos/servers/weechat/secrets.yaml

@@ -9,105 +9,123 @@ sops:
         - recipient: age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxbkRDcWtyK2FZbUJVSEpo
-            dkw0dnhjWXFhSk5YdkxqcloycENrLzRRRUZRCkh2V25iUExjQU1ONjBJUWp5VThy
-            aEErNXp2ZTZrN2g1c2luSUp1aStkTmcKLS0tIGF0ZFFBOTJjdUc0K0FYeGRsdFk0
-            MGpmYVRHTkhjQzdCbUJCSmhJVCtQVEUKW/hM8sSzvJkrXQVIVhbXfZWI37AB4EPj
-            pwlMrqtTL4grHtIwhVBXOG3b/9qWXzzkeMm8ovHJUO0qrl8VUNbq7g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bDVpOTk5RmFORk5YSFh2
+            UXVNKzhBYjNnY2JDNHczaHlHeDNDVVg0aHhnCm0rNE83bTNhUVgvZmhnNC83TnZr
+            bjRnS2hscW1zM1VzejN5Z2hyT0h5WEUKLS0tIDYzdEJsa0hITXVRZXdZcnJ5eE52
+            NFArVksxcDAxelYxOHVyOE5WRDhDWnMK0BwmJmgzM7/u3NsZj0w1B7Jz3O1sUCyM
+            +1PRcH2JYCyJBDKKnPO9Qbp9ikfCW69La/2+Io7g/PQthxlLQrTwfw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cnu37d5fqyahh9vvc4hj6z6k8ur9ksuefln7sr6g3emmn927eutqxdawuh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkSzdHOTd3d1hsQkkyc2lO
-            T0RlUjMwejFCN1ltRUFCNGpGUzIza2NsQVNNClU3Tzg1eTgrU29YMlJFcnF5RmdR
-            aEVRUzJONXN3VEJXZDdKL1NBcERjQ0UKLS0tIFJta01QdjJpLzM4dTJGTkdSMjN1
-            Z0tqekZnei9HZ2dCVHlxQ1VldU5UekEKI23znutsp3vehDtx7n4Du6TrQa7EcTpw
-            o/qHNhW0IOOTNlDGAYQ8H2+oiQlPwE7zczj55CF31gMZkZRoC7elOw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXN2prYUlJRlFpbHQxWlAx
+            bGE0SDZMNTZsZmZvVmVBVld5SWJtTnZIMWhjCkp0encrRGlyV0tFSnZsb0s4elAv
+            YmQ1c1RYelJmd0NtN3pXSCsrVDFYSjgKLS0tIEx1UndUOUp5VWw3YVMyYUdjV2xo
+            RUJBY2QrWGZKK29Ta1ZpeXlVaEZjL1kK9UpOhJK4HN+wtJEUxOAG2jJJVeEGUPKU
+            oHUahC2z6kvBw8+AH7pfMoqGBy3jK3ABFjGdmu+6ls17DGuo0moQTQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1a0m73qr8hhuz8xemv4vymf4wmpghm2hst8wgrn3pn65ext5mf4ksk0vsdm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcTg5ZUZiQU5ETG92Z3Iv
-            L0sxUXdGaWxCd1V6amJ0NmNPNVFIYkFtYVNvCmNTdnc2NUhkUkZ6aytVUXY1d1Jz
-            dXVTcWc5VWR2eVB4YXFNUTZZOHgyN1kKLS0tIEhaV2xrVnd1MWNlbzJjQk9TVmNw
-            Q2ZWREt3Z2lLcmN6eWNTcjljaWlMczgKo39SAY5LFFivzNLhiP1YXWao082s8l14
-            ta78pc2M89/PS7OM+h36mNpPKRjRjdZuFUFOKXMbvbP0LF2QHqOqIA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlemxKc1F1OUh0dnp1WXlr
+            Y1RKQWpnditTLzVrUG43TkdTNUw3MlhDdUVJClFIbU8wVTVXUkFLWFJCSkR4QzhW
+            ckJKUm9WUVZrTHIrRXQ5dzhWamtzbFEKLS0tIHByU3lmbVlvcHpkTmJlMlRFdEE5
+            UHQ2bkIzQWk4QW4xRkVkeTdvbXF0UTAKPBblsqyZNiXtia91BkkjK9N32qT0fDZN
+            dTT7KxVcQ2zK1jH+Q0DziSfY7rspyvLy1I/9FSpSJxD36Av90Q2JCQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age18hpxz0ghvswv9k30cle73prvnzrsuczqh87jjdk9fl50j3ddndmq9xae0n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzSm5MdjRhT01Uc2YzK3VB
-            cHE5OXBPc2JPNi93VG5rU1V5OFc4dGRjY2dRCldBbHpmV2dTRkRGZ0wwWFQ3am9w
-            R0s4OUNMSUR2N2Z2aGpZZldPSWtaT3cKLS0tIEs3Z0JMWjZPNzFOdHJrMDZRM3Z6
-            amxLcFRVdGVzZmxWMVdKdGoxaW4xNW8KpAye9eYU6prDWvQZFh/biKoYuvGXI3p3
-            a+amYAtJ15w7MK/vqlC51f7yOc9fbRUv4pmHbIOlwiPw171ZqQF1sQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dmRKaWYzb1FLM09Ya0ln
+            aGZmbWI4UGZYYS9EZkdhR0U5UmtlK2ZBYXdvClhvNWhzTStqaFV1UlFGLzZNbUJD
+            dk9OT24xbFZNSEpHdUVKcTRJUGI1RHMKLS0tIHN3WEYyektmTUVndzROU1NGWFEy
+            Y0pJU1Y1NkROdzc1UTJpWmFrbHJsMVUKbD2XVuW1cikmyBvJpUtUnNi79OYgbMLh
+            V8m/ZQ5wz4PrEQXIWeyXUdPLZ8lRI4X5CQY4fFesljnvTJ+2pRIKnw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1xgy03g3vjydsxcl0qpdgm8rahjcjq95ucxfwlgr22zwjx3p7jf2s9jk6u5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHS1N4Mm42cFN1all5bjlY
-            RUpVelhzUlhienBybDl2NzhYdURhS2FHVlNrCmZhRTNRbUZlQ29DNzh3Q3dPWWIv
-            bWJRL3RIdTZTRDEwUGFwb3lqREVaNE0KLS0tIFQwL2V3L0prYytZanVzTWlQUjFH
-            MTJ3TGJIaHloV3FFSFBuQkVKSEpRQmsKjUYvs5DB8Zu/6AELZdUnB86PbjLPcXkG
-            YDNjxMJKjgnwib2jxSEF0HzFXeYC9esm7CrpG50gWAHD59YsYvmJpg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQd1JERVd4Z0l6NkZXWFhU
+            S1RwcGc0b09idy91NExRN1BUOGlQK0Yva1hVCjNLdGtvM3FoN29wdUtFaWpqNFY1
+            d0hEY0ZNeXB6TFBkWlhleHJqbHNzTG8KLS0tIDdDZUNIL0VEMXRES0IvZ09uTWY1
+            MVFaRWJ1SXFvMDVRRitmem1qYWhaS0UKnLW6gVHpRPHdfcY2mdpGpRO7D7Mn8g/Z
+            yI2riHDsGviMDjABkMSoOdbfcu/p77WUo7TQXkeHrTepaT+GbFtpXg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fv5dafs4n3r5n83qm2hfz7xmnflsz0xf9r3saralrptpgf8mvuxq4t8k3u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkVFhsR1IrUnVEL3BEeDJD
-            ZUJxdVNJUnJOQmlvSEYrTm1YWkVpMHJZbVRrCjA0SmNkTGt4VkxIeXlqQThTMC93
-            SWk1RkZraGJXd2lWNWxpUGdmSzRBOEkKLS0tIGdkZERyODUzT1p3MlUwSXVCaTVm
-            a3NCNjJxSHhyUCtoSkZPckEzWldDR00KRPvQzb1Ar0BpRRnmwYf0emQi/YB6FvcL
-            p081YsllAuYNmsLg7zdmodh0mBtN7AaE38ZEz2goe+xSXz2jRpszIg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBZUJpdGtOaGVpOHVSVVBT
+            MUllQkNuSThqRis0TW90bExlbGFxd2R0Zmp3CmlxUCt1VDFtb2x3Wk0zNDkzY29I
+            ZElid3R4WGt3eVVCNlB1V093bmtLQXMKLS0tIDh5OFU5LzRBVFFNVHBKS2trcnd5
+            SUlvc3B6MkNQTVR4TVVHdlZGOEZaR00Kgsi2pIrzKvTyLP0To6NSt+ZvkOkURjx2
+            QwTSGDFWw4InyK5A4KeIqNtX5y5T6D0AoPTSpUO8Xtij8rCuIZXbMw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age120530yclr75k6nrzp6k5jjftj8j4q9v3533guupzk4ct86mjxszqg9e5t5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUWxyZEVCWm1udlpieGIr
-            bmR0cTRaQ1ZLSXY3cTRyb2pyMnV0T0RpRUE4CldDYnZQSlNrWGFycU8zNXY4SHZ6
-            cjZhaWxKWnJDUjBMNHd5eUdDdmxSNU0KLS0tIDZLV1BQbGJLanNzSXQ0QTdER0tD
-            UExpZkxJRHlEV1JoTXduQTdPTEtoYlEK1CPNgYUwz2F2fSpz8VibjO6ri8WQvTMH
-            DsrV+k73SET8GkBof4Jd7995h+hLzdHaA4FxorJkDocRzYs1ICFKjw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6K00yMHFsaGFFUDA0V1FS
+            RjY1d0czWitzR2ZRenZqc0ZpMUZUMXdQTW5ZCjRXanRLc1owL25ta3VzLzV0b0lh
+            MGROSHNmckRjenR1bDBsNVVuS2hoQk0KLS0tIGtQMnVKb0NGQmMxeXd5bU96bDBI
+            K1lTaUhibEladzhvcTFEc0FJdzVVRkkKqrWdIgTxe8a8chYaE7fTGFOq2gAn31+K
+            G9R1EiHokGmMCmAR9thmNdBKc2XyoiDODxruq72R6f3D9fKCj7rilw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rt0ngkum32wt6l2wnyr40hmwd9ulmzqfarg5vk62zqp0uvj4lyuqd2atgq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArL0lSSk8wYWRneitjZXB0
+            L0phSlZJQjYwdnoyWVJmQlQrZldMa0Z0OUR3Cmh3YlpjUXpjSUdmY3htOTdiTlM2
+            NnV6NWxPeTdpNHh0dlhlakxtWTRyR28KLS0tIGZrdStrQ2tTbng1YkVMcDdOUG1N
+            cU93cW13MVNIeVFoZmQwdklKOU55ZEUKOpvhrFMciyI2XY3jOK4urv8UArkwKV7D
+            +nlur6rUodaijF6S4LGA+4SU7FJxNPGYdkrbgYuL/Dukw19p8O0G0Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1c4atxfp05u7zm875s6q8p82ve96rqqpq9smktxlur8pk2yc3qvgql46dp9
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1SFUybDlyNkRTZkRBVHFL
-            LzZVZUkwemludzRhTkNMa1grOGZlVjhxY1FRCmFncmRjSnM1WjNERHVRRjhqQzJH
-            M04xV240UnUxc05OK0M5TmhSNU5wcGcKLS0tIC9wM0NGSXVMTVlxeUtvU3lkU2tr
-            QTZndE56NC81OGxDWEFVZmFXWXJRRXcKjWFvoXyxwXevboaBWdXVWtbkw7eOsKWd
-            71J9YYmRTLd/cZtuTbhYyBhTh5iat9ZmNlfNpGn1fm8l59l8ZL8OcA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBU0pvQmVocVVnQWloTGJq
+            QnZpeWFhLzlYUk9tcGdPcXgxOGY3engyUnpFCnpaSHc2WEEzcitIN0FPU1h3T2ZP
+            YmpZRm90b1BIeC9ESnZ3TUNiK2F4VEEKLS0tIG5jRHYwRStoZTlsZGJPc1BuTGFN
+            MTFHVVRnZEVVM2JseWNGQXNRNW5Mb0EKaYXWtgWgWvC92b7YZOOpnmAC4jsriWjx
+            E5jr5AMUw3+fmChmrpWo+8t85ICgthlA9ppRZHB+OXhzLuwiJe0Fbw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1rjldv3fn3q686647exmcukthr32gmp6s3axs0lhyenvru9ajp9rs24ukvz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEM2k1RjR4bUdzeWxVaWo5
-            dGMrS3JqZkQ3LytPWE9ZKzJHR1pva3NEQXh3Cml5L29XVVRqNXZGaWl0ekVpWHdh
-            WFBDaXNUV0pSK3p0REhCMzlCeUg2NXMKLS0tIGd3Z2FLYnlSOE1ITjlRK3FmS205
-            azFPczU0MnZNSzVVWjdGQStpc0Y0QzgKrtHYSozuOEc1GYP+sMdjwnmmmivV7l9U
-            O6cdm83sRYpnj7xpm/IejNX6ovpHmWe4KIM+aN6LLmb69DgfJkAcKQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpTFYzUk5YYjZURnJtcDZz
+            LzV3NU1Ma2NnWE8xS3pxOVMva2gzazRnMUEwCm1oVWVacDBicC9DekpFRlB0WnBO
+            MXBUdnRDVmgycUJDL2JCVmUzSEY4ckkKLS0tIEFxREk4dGk1cE85WkZsR2NHZWsy
+            ajkvMUhXcnJ1dHhZRitYRlRwcTJ1NTgKNcDZNrwXsjuL4h6V10NKJt+geunKDSaB
+            0rBvSGWzVUoDw4+Q98/d5n26vPEkyPUkKcOafutzP5qMM9XxFYFftQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p9v6xaujkdat2tsc2mc4gxpg9hjr4suvwryuat95z2c53xhsyfxq0gf594
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0bjQ0dmxwejNNMDJ3aXdN
+            Um5wdE1FQjE3c1gwQVphcU9aUXptMzdjRFhnCm1UOWo3RURqTHNLWFB3cHVmZ20w
+            YnJ3NDZpUE9DT0wwNkNEcEplY0ZzdjQKLS0tIEJjNzVZZlFJVm1IcS92YjM4SWR1
+            RUNqR0xqbUs2YkdwZDZmNnBwVW45V2cKRVPJwrjR3qiWzKVtvziPmoMdRMugF8jC
+            XoXJL8sIeID7nJtmvytkKrneG2JUeTSkGriR17JyerxIlagPj0ZPTA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-27T20:29:36Z"
     mac: ENC[AES256_GCM,data:EROSoDKKxmzxgOiGxW9vRyk5Ik95pfeREOGFk/SwPZOFtoETemVh5199xZT1s3Yzim7+fB5efdBAkooUIGjq1JSRVjpkfnozdvRZMYp3dp0b8fp5kBaepYLNCfKCs4e8guNyywiSIBiUGYhi+XZi/N+q1KG/zB/jhGl0G+9DixY=,iv:Qn1MObCfKca7tQn2hGZIcyiCl1PI0gV4fwJ5fFXo3Mc=,tag:X0Ht901lI6h0Ito3lmDvbQ==,type:str]
     pgp:
-        - created_at: "2025-06-27T20:11:24Z"
+        - created_at: "2025-12-04T04:58:13Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA82M54yws73UAQ//bvRZTiFRbmEScs6w26qHAtQMQv0umQbeC5MbKyQxjQmn
-            VAsDValc6O1U1sFr1+/jDF4PRX3hINS0ZkiVHpBjwf8P0WK9Iow2x7pVXa4lxOqJ
-            dClpngyyph7c/eAQ8Q0wx+N7nzbs83jOfUf/V+ogJqYf+gFmDS7Zu8lB70L+9dU/
-            MvYoTvtjm5F5qKg/L4y4V0mnaltGex863DipRF9AQSg6ZaUm44OvzML4K3dojHiZ
-            Gtu8rOvT9251euoiJdEYFkaFPNzDmYwh8n02YPywJ0FiWAYzqha/1mNMoQrOfSmd
-            jxGmUKa5G55fryquqIopbhgJtoUCSBrIO6VXIIN1BDaqbLZEyZqGd5m7ROjPz0D6
-            Nwg3LjwTkq+ArbpgKqD24s630olN6VHH39SQDdEjAhbZfGzBjoncHj2pfWynEbwh
-            O2Lbw1dYnG+54xBiCnQu5M2j4gFrXshvEUYESPkiFBChtPubWw+oekFpg9+jLqqq
-            rWI+fEyWqUwPVbQyqNv7SOHEAgqH9kbmQyIBHzanGExwxkRs74tKVzc3B6up7uhF
-            +C+9+scEtuXgMRUmEPDHATPDou2hYud7s8jLqNAKgZBOBuJetBq4ljUapwZXRang
-            R01mIzIZAW9sEw4Ly7luFTLG16+vaelSR9H77AInFUuLc2HJfhhnhlG+99+n/R3S
-            XgE6RPz4nlVBxg+48g0yLnSZXhDChwpm5QQVoG1YTA/KiMTwqVtESyryTq1eMCfm
-            t1LwE1cNBcSaU2pfZrc1qaD26iOr6VUDBmuj47O+uxOK6XULjG9i3oPv31Jf3EA=
-            =o4+u
+            hQIMA82M54yws73UARAAssBzjr0KAmZOmMnnShaxNx5tdDNQJ6zzIOZugxqqCXPF
+            FvZ1DM9SEQisdsspAND/HISJJ1sedtw/3nhMPvtHYSTkBOTszLA3oPLmOkBaoBhx
+            0XAHeMqAwVVyXrmgf1syl2Hj0sTGRqsvNBUSPDdgDYM8kH3EbYMlYyEDPqMwT6bY
+            TMP+FtIXnmNuh9mgJv0Ys7y9zxf7igPwVxV71+WkAg2vgXx3zV/Xn8av3SwEBjs3
+            y33+msI+hz0WEuAz6zFaW+n3iM+nXaJYYiVikqAOuqcLYO5J8RcF5P1j4P6KoBhy
+            k7k72OZ+bY9JDCKAKtxLrNOn6NJ614lUpq/eHW4u0PpQbWsNxF8GyRVP7p0yjm4u
+            fgrKchqkIg+Z95PXMMd9ZmkrHM/jQv9Dp7Yt9aaIwBBnILaZ8Meoq648z1gRy38O
+            xVzfuCFhirK9M8CLn0eCI9H3UM1WbGWVF8SMqn4/GzzJoCr9z+k1VqVwj0gsPUO3
+            W/H6e3SxGdLFPeBs1RsXaWmSaZ8QVkMmB/0ihojWDY6E4v+4tZSkH2T4x8yLyT9o
+            A1a7YbIsqztWvpmFy5KRPVoPPxHkSmyRcQImfVFcKT5T9p09TYMEEXkKyS6DmgM5
+            qgHIPw1Tbgizjx+g9BUlemPsWooJYOeOmk/nuXoDHTqgb9PoyDvmbJOLQNrB3lzS
+            XgGnqD0v9houg54dC6FsQazEoZJcLDJarWxRPoWwRp4YVjkFWpKVKIp3K1nrx1iD
+            ZvF9CF2x3rthktuKhn6EVHXgx1V79KXmHhsQfOnP9Ixt/6cAWXMInbeFIlqISzE=
+            =uAjq
             -----END PGP MESSAGE-----
           fp: CD8CE78CB0B3BDD4
     unencrypted_suffix: _unencrypted

systems/rinnosuke.nix

@@ -11,6 +11,9 @@ _: let
       ]
       ++ (with tree.nixos.profiles; [
         server
+      ])
+      ++ (with tree.nixos.servers; [
+        mail
       ]);
 
     boot = {
@@ -40,13 +43,25 @@ _: let
     ];
 
     networking = {
-      interfaces.ens18.ipv4.addresses = [
-        {
-          address = "154.12.117.50";
-          prefixLength = 27;
-        }
-      ];
+      interfaces.ens18 = {
+        ipv4.addresses = [
+          {
+            address = "154.12.117.50";
+            prefixLength = 27;
+          }
+        ];
+        ipv6.addresses = [
+          {
+            address = "2602:ffd5:1:301::1a";
+            prefixLength = 64;
+          }
+        ];
+      };
       defaultGateway = "154.12.117.33";
+      defaultGateway6 = {
+        address = "2602:ffd5:1:100::1";
+        interface = "ens18";
+      };
       nameservers = [
         "1.1.1.1"
       ];

tf/gmail.tf

@@ -14,6 +14,7 @@ module "inskip-gmail" {
   dkim               = local.dkims.inskip
 }
 module "dork-gmail" {
+  enable             = false
   source             = "./gmail_dns"
   cloudflare_api_key = var.cloudflare_api_key
   zone_id            = local.zone_ids.dork

tf/gmail_dns/main.tf

@@ -1,4 +1,5 @@
 resource "cloudflare_record" "gmail_mx_1_aspmx" {
+  count    = var.enable ? 1 : 0
   name     = var.zone_name
   priority = 1
   proxied  = false
@@ -9,6 +10,7 @@ resource "cloudflare_record" "gmail_mx_1_aspmx" {
 }
 
 resource "cloudflare_record" "gmail_mx_5_alt1" {
+  count    = var.enable ? 1 : 0
   name     = var.zone_name
   priority = 5
   proxied  = false
@@ -19,6 +21,7 @@ resource "cloudflare_record" "gmail_mx_5_alt1" {
 }
 
 resource "cloudflare_record" "gmail_mx_5_alt2" {
+  count    = var.enable ? 1 : 0
   name     = var.zone_name
   priority = 5
   proxied  = false
@@ -29,6 +32,7 @@ resource "cloudflare_record" "gmail_mx_5_alt2" {
 }
 
 resource "cloudflare_record" "gmail_mx_10_alt3" {
+  count    = var.enable ? 1 : 0
   name     = var.zone_name
   priority = 10
   proxied  = false
@@ -38,6 +42,7 @@ resource "cloudflare_record" "gmail_mx_10_alt3" {
   zone_id  = var.zone_id
 }
 resource "cloudflare_record" "gmail_mx_10_alt4" {
+  count    = var.enable ? 1 : 0
   name     = var.zone_name
   priority = 10
   proxied  = false
@@ -48,6 +53,7 @@ resource "cloudflare_record" "gmail_mx_10_alt4" {
 }
 
 resource "cloudflare_record" "gmail_dkim" {
+  count   = var.enable ? 1 : 0
   name    = "google._domainkey"
   proxied = false
   ttl     = 3600
@@ -57,6 +63,7 @@ resource "cloudflare_record" "gmail_dkim" {
 }
 
 resource "cloudflare_record" "gmail_spf" {
+  count   = var.enable ? 1 : 0
   name    = var.zone_name
   proxied = false
   ttl     = 3600

tf/gmail_dns/variables.tf

@@ -12,3 +12,8 @@ variable "dkim" {
 variable "zone_name" {
   type = string
 }
+
+variable "enable" {
+  type    = bool
+  default = true
+}

tf/services.tf

@@ -1,3 +1,21 @@
+resource "cloudflare_record" "rinnosuke_v4" {
+  name    = "rinnosuke"
+  proxied = false
+  ttl     = 3600
+  type    = "A"
+  value   = "154.12.117.50"
+  zone_id = local.zone_ids.inskip
+}
+
+resource "cloudflare_record" "rinnosuke_v6" {
+  name    = "rinnosuke"
+  proxied = false
+  ttl     = 3600
+  type    = "AAAA"
+  value   = "2602:ffd5:1:301::1a"
+  zone_id = local.zone_ids.inskip
+}
+
 resource "cloudflare_record" "bluesky_did" {
   name    = "_atproto"
   proxied = false
@@ -69,3 +87,115 @@ resource "cloudflare_record" "music" {
   value   = "daiyousei.inskip.me"
   zone_id = local.zone_ids.kittywitch
 }
+
+resource "cloudflare_record" "webmail" {
+  name    = "webmail"
+  proxied = false
+  ttl     = 3600
+  type    = "CNAME"
+  value   = "rinnosukeinskip.me"
+  zone_id = local.zone_ids.kittywitch
+}
+
+resource "cloudflare_record" "dork_mail_mx" {
+  name     = "@"
+  proxied  = false
+  ttl      = 3600
+  type     = "MX"
+  priority = 10
+  value    = "rinnosuke.inskip.me"
+  zone_id  = local.zone_ids.dork
+}
+
+resource "cloudflare_record" "dork_mail_spf" {
+  name    = "@"
+  proxied = false
+  ttl     = 10800
+  type    = "TXT"
+  value   = "v=spf1 a:rinnosuke.inskip.me -all"
+  zone_id = local.zone_ids.dork
+}
+
+resource "cloudflare_record" "dork_mail_dkim" {
+  name    = "rinnosuke._domainkey"
+  proxied = false
+  ttl     = 10800
+  type    = "TXT"
+  value   = "v=DKIM1; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfSxe5JNdrSyHoPuESnOles7KxP5NtHD60YZ7SXLANNkEb8/tSHmg4nGqLhqKrA7+gcrurjowibDYs4hAM/ozkMNch53n2ZVKRl1ExMSRAPlGl5ZNCGGYVuRQlTMGvek2tIp3GbxafGF6QWSG1sA63fI9pxGosf/qc3wX5gtHxmKB9jn1Q6d9SDuJN72StIRjl81zaJFQJswvKx5keNvbW9oOP/xBVFPbnNZq52f/MsIpo4R33Vk0CrFvj5lnEKh5t6Bx1XUpJnkzQE934h+x1B+ypLkAPpLw4VnbDBMNc/ZkGbfJuM9YsasoEYgeoAtWKkyJV2WKZfppo1pUtR7swIDAQAB"
+  zone_id = local.zone_ids.dork
+}
+
+resource "cloudflare_record" "dork_mail_dmarc" {
+  name    = "_dmarc"
+  proxied = false
+  ttl     = 10800
+  type    = "TXT"
+  value   = "v=DMARC1; p=none"
+  zone_id = local.zone_ids.dork
+}
+
+resource "cloudflare_record" "dork_mail_submission_autodiscover" {
+  name    = "_submission._tcp"
+  proxied = false
+  ttl     = 3600
+  type    = "SRV"
+
+  data {
+    service  = "_submissions"
+    proto    = "_tcp"
+    priority = 5
+    weight   = 0
+    port     = 587
+    target   = "rinnosuke.inskip.me"
+  }
+  zone_id = local.zone_ids.dork
+}
+resource "cloudflare_record" "dork_mail_submissions_autodiscover" {
+  name    = "_submissions._tcp"
+  proxied = false
+  ttl     = 3600
+  type    = "SRV"
+
+  data {
+    service  = "_submissions"
+    proto    = "_tcp"
+    priority = 5
+    weight   = 0
+    port     = 465
+    target   = "rinnosuke.inskip.me"
+  }
+  zone_id = local.zone_ids.dork
+}
+
+resource "cloudflare_record" "dork_mail_imap_autodiscover" {
+  name    = "_imap._tcp"
+  proxied = false
+  ttl     = 3600
+  type    = "SRV"
+
+  data {
+    service  = "_imap"
+    proto    = "_tcp"
+    priority = 5
+    weight   = 0
+    port     = 143
+    target   = "rinnosuke.inskip.me"
+  }
+  zone_id = local.zone_ids.dork
+}
+resource "cloudflare_record" "dork_mail_imaps_autodiscover" {
+  name    = "_imaps._tcp"
+  proxied = false
+  ttl     = 3600
+  type    = "SRV"
+
+  data {
+    service  = "_imaps"
+    proto    = "_tcp"
+    priority = 5
+    weight   = 0
+    port     = 993
+    target   = "rinnosuke.inskip.me"
+  }
+  zone_id = local.zone_ids.dork
+}

tree.nix

@@ -82,6 +82,7 @@
       functor = {
         enable = true;
         external = with inputs; [
+          simple-nixos-mailserver.nixosModules.default
           nix-index-database.nixosModules.nix-index
           home-manager.nixosModules.home-manager
           minecraft.nixosModules.minecraft-servers