owncast: move out of skyflake

.sops.yaml

@@ -53,6 +53,7 @@ keys:
   - &nfsroot age18yxgwpakrkzq8ca2enayf79py25se3d8dsed2q523869re30jcaqx6rjln
   - &nncp age15853dr2kd6r2329tkcanwnruh6zd2xvsu5twc7gnxeyu3h7t6q5scckaq8
   - &oparl age14aq8fscrwkgmu5yv86vj7p7kmxclzs6dp7fpvdhvrnmce83ztphqc4mr9q
+  - &owncast age1cp9gsuyfu52exk0hr3fvj404v5njhahakzwlugwtneyrs4vgdyaq0sg92f
   - &public-access-proxy age1xcj6peyaf5xvj2673vl9j0z7supwtw7hzuk782zk7gt69k2ykytqe65mg5
   - &pulsebert age12hdk2stter0cjexxwx3sqn9wx3vmptkxszvx7knq9zgm9uqzjs7suvkcqu
   - &radiobert age1lga6hjmxa95fmtdn3frlmy64ej3hyswxrcuz25qvw0kfsxkqeugs8gjw8q
@@ -331,6 +332,13 @@ creation_rules:
       - *oparl
       - *polygon-snowflake
 
+  - path_regex: hosts/owncast/secrets\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *owncast
+      - *polygon-snowflake
+
   - path_regex: hosts/radiobert/secrets\.yaml$
     key_groups:
     - pgp: *admins

flake.nix

@@ -544,6 +544,7 @@
         owncast = nixosSystem' {
           modules = [
             self.nixosModules.cluster-options
+            self.nixosModules.microvm
             ./hosts/owncast
           ];
         };

hosts/owncast/default.nix

@@ -5,16 +5,25 @@
     ./owncast-archiver.nix
   ];
 
-  deployment = {
-    vcpu = 8;
-    mem = 2048;
-    persistedShares = [ "/etc" "/home" "/var" ];
+  c3d2 = {
+    deployment.server = "server10";
+    hq.statistics.enable = true;
   };
-  c3d2.hq.statistics.enable = true;
+
+  # deployment = {
+  #   vcpu = 8;
+  #   mem = 2048;
+  #   persistedShares = [ "/etc" "/home" "/var" ];
+  # };
 
   networking.hostName = "owncast";
 
   services = {
+    backup = {
+      enable = true;
+      paths = [ "/var/lib/owncast/" ];
+    };
+
     nginx = {
       enable = true;
       additionalModules = [ pkgs.nginxModules.fancyindex ];
@@ -45,9 +54,19 @@
     };
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets = {
+      "restic/password".owner = "root";
+      "restic/repositories/server8".owner = "root";
+    };
+  };
+
   systemd.services.nginx.serviceConfig.ReadWritePaths = [
     config.services.owncast-archiver.targetDir
   ];
 
   services.owncast-archiver.enable = true;
+
+  system.stateVersion = "23.05";
 }

hosts/owncast/secrets.yaml

@@ -0,0 +1,170 @@
+restic:
+    password: ENC[AES256_GCM,data:6bi025f0sAkl+mmQpBSt6tJe866Tw6r49llKDnyW3Es=,iv:qWRtm2KYU/4Md2wMu8wfVMPQczmtC63Op5FcO5ur5f4=,tag:5bUfIy+j5g035QsnOgmfIg==,type:str]
+    repositories:
+        server8: ENC[AES256_GCM,data:NNlNh+sSN423F2TYuBF0f0mEBUhSV86S5iLnuCpYFUHjsFXReY3d7x7TvakjS2LQTrWfi64FKYRinBAJRakexC+2AT5FTaK0N9Wgv+jNMPuYq975YByXYDDJQAQwLG0wIUmDrg==,iv:W53h+C/+DQTl6hhnm40Z8pbnCMX1zlKww9pxKJObMpo=,tag:da4LNx4mGehcniNjEdMptQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1cp9gsuyfu52exk0hr3fvj404v5njhahakzwlugwtneyrs4vgdyaq0sg92f
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRV0ZVekFDYk8wTUVjaktu
+            c2ZzaVZkVGpMYzViRVBmaGpyajR0UjVxWkNBCm9HcDNaSTNuQTB2TzNqVWNBL2w3
+            S21OTUphV0haaytKaU9HVlFGTlJiUjAKLS0tIHJ5TEtmZzlqSmZjWkV6dmpkOUFu
+            aUZXaXdkYWpkbWlHZUJFSWFsYlN2UXMKw/nXsrMF20PBE3oG8CH0sigKzTJv5r2X
+            aM1XP6UO/Vac7CGpTbssmWwJkaeQ5OYY6dsjvHoLbfmfAqs2e1NerQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSzZuOExta09NOUZ5R2dR
+            QUNrenArdWM3VGpSVnA2Wld6dmk5R1ZEYWk4CnIyd21MWEFRKzFMNXc0Y0xsTkR2
+            SnVRL2lqbHUzMXhCN2IzYWoxbTVtMnMKLS0tIE5KSHhheGczRTAwU3pxTFVubmU0
+            MlNrMzhNVS9yVkc4U01FVkNhbVllWm8K1MS9Lx5ZNhxcW8omZp8ELPyvtXu7Wowc
+            1xVrqMWWxJdud2nOfB8NUxk4ini5V28jsdReGTPcCAtI2L/riJy0jw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-11T03:07:12Z"
+    mac: ENC[AES256_GCM,data:hFRVrGULesITXkLXkIZHOE9dnqFnBjrtnEjuVh6CPx+GvsXqDqQUB33okwjfRHGrGkBsz7kBaNxjAtP1/MIjW7J35p8SeKC33C/7j++vjmzAR/CljEqbPXrFV0Q6JE9qLTOYqm+ddpeUm/42oQ6RgXQS8bko+/u/iWZ+1QQmwy0=,iv:H//DQyWXZ01q1TjAgLHN36jMvpZYfTStzpWenCxtd7M=,tag:HW3oWE6gjRB/YXAuf9SxeQ==,type:str]
+    pgp:
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7zUOKwzpAE7AQ/9HDEBz87Vdn0bB/bZ9WZBzkt3c2dAECSw/7zaKbrrAUjE
+            HeZAEvKEj4Z34hChVdfmAl/AnjadtSbgEoXZbkecEp2rl3WQEmBzTUkmGcGjbhKF
+            YNRmQCyyat6/iQDawGswTxnBX9XG3DsPvdpLpHBRI3wMLN1oy1pyrPhKG6lfwR7q
+            eBCn7lR3Tf9lmvW/45o1ZMdDipzlX/WBaKq1+0t+jNSYG2gWyf4zp/K/P8xjgJiX
+            2Y1PlasYik67x2rIYOxkSYf9/sriN0RHbqeykyWRbQ64Ib/dMI42weFbqUs9dNHI
+            jtfx4QVX2mKyqyenEUDQiIlTphGNmC/OEXfIBeWJ3b/v65ORaB++iub3JsYbsGpG
+            IXmpiN4gFyEGILFV0iTsUBomqS0KWo5pqXXNEIAdtKkl+JFwzcFDsh9IKgoo+Dlo
+            Spv8ZJW8l3Xy5F8xgqOWCTsRNBtjVUG0dhs+J9AdnHIof4edO5w80bVScdTy0dia
+            XGeDGYpi0SLMultmuw20fpcJKS6Umsws3T5Dk0UzI2JWknIVbHZ7dPR/fGS5nyOK
+            Wf7xVv3fH0GIcEcn56zlIG3B6TB9+oYJJ/l0I4xAMIum+oYArYDqZWguOmNLJknB
+            LnXI2F2rqSJ14F8kZdH6F1vxVtEeygvDqXf+bl9yX0FJvz7RRQXlmRhCFj9CXc7S
+            XgFE5CFFO/Nfsvy71vaz08qVmsVGBAXhCo1bieTo4y2sBTjtyhxiJSvDYOVPzsMV
+            0QWEID8CCwsTOQbCGwDV3S+AZE4NN018a/z4ElfXHWds91cnSq7WNleyZgN8PjY=
+            =Uzvh
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ/9ElthD/2eWaKnFkjKwPykFq+jk62ZRQUsxTqiuFEkbESM
+            sLx2EWMXHsnCTPpW3ArM0K+hBYiYyG5GOfoNJXBr9BXNmwfFTTyoribyTr17pam9
+            W7AzY5fcuFAg5w975/H8B1MIybQFJN/VUfuA3AGxkI1brTB8w6Ir9wQG5BYsCfFt
+            9rcdiX90/vgVpmup4ecnc1spBRI5t7UeACz8uOQJky2/PKXkE9mauDVSJIMSeWyO
+            G24hDEI9KFV93y4PnF4W9I60Cl/KbpweGwCS/rtrY140/pbPaxm6EWQPj/KXvrrQ
+            32SkAxC2mNeMdMjbHq4Mz7t46wynGsYYdfz2/zYZNpXmTOhF829fRqAL5+3a9KQb
+            +7b5qCjtRQ6cjXQLxl7XcBVgPO1PQ/JWMAY+pfaBnXhLp6TgQSx0IxJQHKFDBovi
+            4Quw3XQB1JjgLn2ZCq59tHtR8NLF1Ql5X5cUkxrTdBWA3AJKWyddxzgmaZlJRJcU
+            29iTkXK9/N4DOFJ5KCj2nuGpc6FGNle08wfsQwuRtwmdPGQdFeTCtm93x/t785CR
+            jlhdeRfh03fWUsTFkpdOSu/ol9FHWwIqyDs+9stPFOuitFl5LciiZRGfYfES33ng
+            /bbsy904otSrv9vJPBrJJ9vsb/lYB4EaDrjMjVh6Dqk2DvGuIrZmT8M4WyJQWnTS
+            XgHW0e1BiNurMpg8v8M7EbO0jITbLSHk5N7f9aUDeCm9b1D3WmPFGOtjd83vb2US
+            DMUSgDF0g+h++fixohwICS57MGs+JXsBRRd67OpppE3a0oh0oeu3c7qUDhcYJSw=
+            =stIs
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAwcaKcz1QfAZIPHrGVHpYcwISnJ7frL20M+ormpZH4izk
+            scqyP89CHE6E5KQneJDlsGfyshHziaTQc0MnG7xO1rY/kp50YquZbzxVbfXRnvTz
+            d+LqwntIg9B8XUURQA8ycY9OfLG0Xx/gi21/Pl7s855fz9pg4CuNY2aYg/+rFBj0
+            p6rZ3shXe0+pL41GjMKlX0SHZcs3rq9rXTVM95mAGT9devHVfWMastuM+8XKX/Ri
+            oSTf2usbsxLr1l3gGjDc5obhLoCzEgGbXu3v32iV59jOrpSvdr1qQn9778isdPHx
+            Pox2HSY9DbjEaVAthrDacqbaa4q1/Rm78HvBE7k5NbRTFLTnJyTQQNk8xhvWwc1/
+            5XXhEwYFtTlVtHbjRdt0tvlOJ4WFC8jKExbSpa0yNTNn7f5VuBq9GI+69eNqN//+
+            FO4Fa1YhmLsbrxvgQjlD5luodXwMTfiwsbnxBrS/xT9D4XE8XVsR7MyQ0WE1ymgH
+            t67n5MHdp/8hj9WcIHFT1jzb4c8AQyUJkiJcdq02gmWv3HE1yCqduefyZ8XheAmm
+            A+5IF2cdSNGUU+4TA+jzhKTTcGm2hQr0p4XV7QkWEXpzgQhV3njdGMIlA6cXXDYJ
+            S27wQqVJORH6+LIO//Yfodn6XA2fJx25hWHOErTBrgNqSoNPXYSoOoKpQpukC8fS
+            mAF0fr8AOlpVFszYjIvqjViRtTrIItQeuZwUVy/l62X3DaI+G3TM/2jqjriP6Bbi
+            Nzne2MOZG9HwxKwhNYGYnrWSXocAfCJqjIUkOc/yg9Tz4JD4fFQ4MQ87UB5uoz/f
+            E4ooQuO3vyrH3eWuOPCr7ROr35IIW9f3gySDt6cX8Ww5n8DSWyfjUCTNq/IdcIXn
+            2u9RgYaeiamv
+            =8nUE
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/+MI1no5Im5Ri/ja2E3ICt/0V9d0YAm5sADT0agNHRUjPt
+            8uNlhQjcEeCpi6V3FkJcPOp/TTzhOJoDhTDLvGAZMMYQGOoW8Hep4BLdP8fIlaNT
+            F+0SrGrii4oXPykk19It3crRzCs8mxADUpvxC/y++3Eb/xAbU57l7a13UzofI+8S
+            eEJMQUcABEhAqOvRfJuUQ1hYW8LoawZLQoabw5s5SnAeLFNXEfqKeMq6r52Y7zWD
+            dPcTiJ0DVQ0PvWLlXmWLNMqoteLEoYyhMqWwDkIW/d2U+knGFpfaYQSmWhB4Mox0
+            MXq4siUJ9q7XDKVo6d2Qv6dMppA1iGp9vRIWkELioy7NAQKN7Zuy12utrjs7Dhpx
+            Dzs3wRXARpkFGQvFiGyO81phJtiN6JOYMtSD3yM6Kt7z5DzvWt3eavVVMJRZP0DB
+            oFcjC3euXl73n0Ro4p76hxl7/ZzMJO1lhjbX+4sRrE6hCRrCyg0FaoARP4ewUqDv
+            Uvun8S94aFnrUsHHlhAhUG5dW7xBqMQ+b6bfkjBELAwkBnJygsgVT0NBSlAnDWxG
+            kUaHZUTTsTwsUtzMCUCBFIPJg40NSaBY25+HZ/PL9vj/UHYNW0pvoj9QZcG2mZF4
+            ISoIwsnTPEbWECH9iU5I7M7u3sVqpbsWPV0vmaEHnS+KdsF87RSaHV+rAlzeVfvS
+            XgFvFb3VLqIYcFmwVB1a9l8X2GYX1q6xuiKX818XJCdQEmBokvYTYaqpzHFeEqQ4
+            Mngb2RgqOZcdZW6yuzJ+mDKuMsrPCyPQht7cnqErmUYVQkhcmf6whFUqF1CqjP8=
+            =hyUZ
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9qJIVK2WMV7ARAAob/1bj180n7Ga/KuVCHEZkeAw8EGU8dekg8Bb/rwZQcH
+            49vHo+MF9AGXoECHmhGqeFToF+AztueBJJfAYBl8Hxi/nlpXeG/Kv2l7f4ew8NXs
+            TRqYeRVw8APnxCuvJ2mAcLQSHErbvnZUiCm97PQ+P9L/bvL8RwrGq6SQlDsZnOtF
+            vOCXHnad/I27kGCjUcWtxEff1QallFCCGUsDcgqz4WKLUsD9DjHoWaUiD08pgPzO
+            TYiisSaJEqV265+Mih6kNJvWQj3LoGt1IIVfYuHM/1elJsGxW64OGnyQcaFRuo6O
+            cytdWbmywfusMhpa3rwAWGjTEN/kgW7lkGvI+HuFy3d4vneeesf9IKl31GLxIaJY
+            3IkQjhNhkb5S+CfPG9YUAxcVxY+P69nQ7ciK0UCxQrRKDPZlzbPsDF+4OlirKDTL
+            cwZEp195kBMRjScRH2J/0erPh7Z7cG1Qqofdl5a1R80Thx+H5ujakAsxcCNyzRrF
+            gBGkEauxlva+RKhPP/K+FKhdkkla+Shq7z3NtSPnVLnk/ZyQwVUFt9Esu/dGyQDL
+            /vqlnp5KiL+rtKbUHIH7aD3kOjTyaea8fARJmBm4paIDMBTs280Mzz/ZyrZD6ktJ
+            LPA1H0JnfDfQnZBAkQAsOpsDCXmKU+qQeY8MZ4ZZmq/7ycdotdX+p+7zJzizniHS
+            XgGAUccjVnkhCil4749LukoAXs0PcdhX8TqL12RtKJ+l5okuReI2V88X9egF7mEg
+            BI1EPiFcDB3rkaGGepeYrusYHnqEGHCpABxBkzcMKWwOUqBwh4SPgjq5uzEymLM=
+            =ZJ9r
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ//dqQnhgQkJ+Rw7H9Tnhl11VGJCzUaJj+OuLi1CnMwWIRP
+            p1m2/EuzK3jASHHW98gwPXBJZfQiHK8f+J86hoaqWzi7E0UkHDAcmyVRs6MD7ea8
+            gIuHz+39NgP58oE81ZWHFSN8tDdf9A6jcjzqsGbUcjlwff7dH3P9+GzZQuwNSJ00
+            xwgojFTmoFEUeFFxxf7Oz5LKX/mnLXP6zvHJVa7RlbgXHV735ZuN9r1T250A+KND
+            1kNSvMeYAn123jwmZ+Dz4a5MGnmjlHeG5B9gR2dkVnnauSnUPwB65J7SlnroBMEY
+            x6wHhIHg1ZBflVH0pW6Ol3wRhI9lulAoeIFxw6Dz5LzjRW41o82WmnLbtHXQ0pDC
+            AdmW9WevWwIDIiNP49376/nD8KExSQeqiPRl6SkYTR6cxSlZwQ5lbprHCT/50Ro6
+            OlgPn9L8hBiaS1qQvCHXcMDRqu7sryNJHrx5r1NN9ZX5RbNedsiY4xoDpHaBKkk8
+            keA0d4juz9NydO00LoO//8zy1xEPW/O76QJjHHmGtPQX3gOstayw9r8HrPlPMdN2
+            JZykuJN4wA/1LthFkmlO9kLImx2hGGZjeQAVTPeflWusS/VrsC7fliMMepmqWyCq
+            kC8DLXrWGR/3DnqJr59M3OxFOtzPp2ZUKLE7m8PRhbbUqhFR6yXYQVor6Iri+tTS
+            XgEWEFqLMV6pnwMn6XIqNuo4uGyeosnnR9+AqIMj5zwByaLchwP2oHw8KAZublFC
+            azYhxY03jJYhCwrSflU2GkXPbX86/wXH5nhBbyrkVkJ0enDgUpZiDrcZ5cLrJVc=
+            =om+s
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2023-11-11T03:06:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf+MPM8mepLm+eT2rsb0fQVnHpW3RQUZ8CV+1vHzILeb6D/
+            /puC6sCdScNT6QA1qAm3ayijLd08P2XSU19ZTq3cA9+lmOGIsDFSA9Jcx0Nxb31U
+            kQKT3nYmRjzqz4JLiLcPPRDf7+diOp+9RZekVsEfN7Yj919rqYOiSz1CHvb3Osyq
+            LFpl5S3CY4BtdHZo08gs9gbuJHO3UGDwLW/vizdBmcy86RaQCyCOIVOHsyY7Ga6D
+            I+Rdpde4leErNiGdAOL1+1taVKlogFUyfpw205gM34f7P3rZ5wNFz7SXiKugzQvx
+            4KsvWZbiV23um8vNDpLoQ8XQoJGv29bR1uuBrJv6m9JeAcvi7cT98EPxd1vTfMyu
+            hgTRMdN9SCkZuOQxNZRtnb8vXFsyfNXNaBcZd+MQ1QXLVD5KMGz48vkZ/kPigcL/
+            BftmE92X96x/grs0aq1tuwsGr374n8IwvcrpRGgN8g==
+            =Pko1
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

hosts/server8/secrets.yaml

@@ -5,9 +5,9 @@ ceph:
     osd.2:
         keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
 restic:
-    password: ENC[AES256_GCM,data:f5HbU5EgQrGONvZnRsQgu3eYnzi2RHRgNnH2G+mlNdK6SGv3vQrfGqPJ0DXiQmhnxZ1ueCIPrXj7n3ZtZ2iNoZ4wlcV1FK5MjvuUP8BxJdjyUsM29XjJ+ALp6szkLLK8Y7wLk+9Fy1Lvim6/vGQIipplPSfXCxn7rPQ4/10OxWmQ8jwyfiZ4Q79g0FC/Fub057AtsLKBFCEjoKUpD9eYGDWE628ndQTQDj9RRrt9IGweKwW3UW4fsCl6/buixEiPMnvIjbSRRNkPNrgVNAqeAxuYDOwS/wqBewbhp+i31EY0BNsPQb71DddK9r18lqcpj4xEpRcieDlgc/EivFSk9eFkocex/Su1VBY889KDDXhliB7DU0QPRdTW9BI2W6/qtQBli5BLS+TWR+kDNa91wCWnIE+V2R95diAIfsYLX3XT7Z4Al6BHmUfjUWPvXpVu2DU3OPxYrqWV/xV5rSKxBaqrbr1vLJyAqnmNqtHCGsQ7qWu+orQBGHdw3o1AXY8bRpk0j1SPKqew2Qod6B0EhsG/jtzwSPmHCco1ETcuvGM+KmWPC5e4DOOiZ90w84l2CjZUbhwEtyGuItETaLSvTErHJJkSjqyKIRqlUEWPHPAHJDI+UklX3IL+gIqZVbeT+6UmmhC7vO09lgb65NwICtvUyfGg8JrqAxZ2YxjkJ/WW200xhahD0Rt4AS25SYv51IPMlOxHZQrym133bouASVXcnSw7n619mtrVRh3ImXwDw6A/eQai0CPS9Q==,iv:wt4n2LKuJDhUB89+89wxber4/0F8LeI4e8y1cpZjb0U=,tag:pfRPMaJFamcVc77RGKbthQ==,type:str]
+    password: ENC[AES256_GCM,data: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,iv:hugiNEzepAQV61yQZG6Soz/Q2QjB9piTxcagJgT+A7w=,tag:oD+BxijXE0/o3ZVDjrErFw==,type:str]
     #ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
-    htpasswd: ENC[AES256_GCM,data:zbtsLh0Fw/+Cp/S4QluBNO9Fh/iEVRkykrPceh7g3KmPrIEsCMetzzoZIdtcfcx0SK9B1qWWX3ZlIFlt1k/SSYBhoFp86g9aDsr7xEtM6tLZndzvkisVA6F1Wjn7IlRT9PwIVucjQOLtMlMKA2oMvEe5pBiOFVaOyTkquaKPRP7Lbz2FKMRxYMSRHgTvOT1599QpLzh5MGShO/VrLdWViC52CdcXm84w2srxGacv9De6q/MTd+zhLduIlYp4gdw5/D3vZU5TdhPnZt08fjU/FcpLqyW4KDP1AI5mEfYBl5jPHUU9nzQm9JBdIuccRLPtrN+R2/bt0VcpWwUTW4h/BLp7q7ve7VLUhcO2xyY2wWs/oYNPGr6w0UFY96S5KEyrM6x+ccZD8tq+3qxXj1v/6/+gTk7nsp0+Nx1Ku59J47vkGaRJw7rQ5sAsXZx8JuzTN8obuOWxoJI+dNTyNpy1iBKvzqbLZs3gOdzfldWPQWK4YuQc4PoHMNUn9kErPXO4XS2LZlyyueL6JA2/hzZqSYLESffYDkDvtf3Jp20aB/DNOaREU5rAh7lx3f+/noD0PkRCcO2X5IrHVOe7bUda7+ejRw6tcw9chYebzGXBGTYw2uzBhkxcMRB+9Cfb7jYQRRxfyAH601fez/vWhyJgXN/h7xMp9Mg19rbOhlj1v0/o9Q5nCyiJ9jIuDvrxQKowmFDtz9hjxXEs6F4SkZZV9lMLTXFYp5qJgwY+rZrbbONHLenCASLBSCe3Moi5zY5E8sRSJHM1lAs8WH4zqOZyxfK0ZOArphhFBtB55D2Ond3CZlfVhTkXKbBjaWogVMLLCF5YiaCnHrP/lHnCRYRECfGvr261SuGjQY4EqVHLO4nV6srf+CqaFs7TOUJmLlJozSRk1c7LdGSLx6WzOb6sQicbkhGQKMPWOUH3qy9UBfJ1kjOnYRQiR9eH0oe0p1QG3fQefNbwBYViPMY65G5WybNtCbDYuBSYGbWn/lu4qc7iKCqxDFICSzK/JkblRDZNGrdbf1NxQ9cCqinSaohBIdHHJJfwnIS6LpDb+4cFtWfICSj5/oKlZAq2P55tqUvwpBXtwWJVAfobk8j+yhnNlS5CIaxSWR3FEBGfPIs0rFpggplJ63WsxV8VccjS7SiBV4YojPsMR3c+FStvBLYj8wHu0ab7d6H03cMmhGhtbuobLX1ivcIS1awNwpiNDPKPbLp2/PNh/EhmqEi4Kqc6GQtREx5+kXQPysIn+ptbIGRoELmc5+oGqAU5j8V0cdgzopLH,iv:QA392z4VpsstJX9BgQY1fAAjTrQ4MBb2Z4LdHeWuE7Y=,tag:rUlZzA70SBfKU/iwI53okA==,type:str]
+    htpasswd: ENC[AES256_GCM,data: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,iv:Wqmt+KfxjxzBDYsHqQzFdzomJppi0Bxfkt8rkD34Hhw=,tag:BFZKhTovip6ftWznVAXBdA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -32,8 +32,8 @@ sops:
             YkFTMU9wNmVYV3JFZDNBZkJOV21qVFkKY0jFwlWgPjSQ/xbpPWBefNS0PCj04cbI
             gUugVd6KbpwcGbK4BZc52SyyBdf9P2ASBXCSZNU6FVIWKUNWHiYblg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-12T20:33:51Z"
-    mac: ENC[AES256_GCM,data:Zoe0cOg3ITOhw/2AzhJjh+Bc7o1gEq/ypBlUmCx20vcFI/BrQFg/6SXQfyeCb9G5tamjTqdsaJoyYrCCvwV/g8fPXGsDMQAZPs3emtlk4Gh+vh4nau7el6Oo1P2y7OR9xJOsULdIQAGACJfZPpKDWLjhe3BjMi4cehSJRC+M+tU=,iv:6EoU1cYBvdQjonHZWIAQXbWwj603N5TjWhuKVVLRArU=,tag:j/17D2W+M1Dbn6sXp/P1xg==,type:str]
+    lastmodified: "2023-11-11T02:59:50Z"
+    mac: ENC[AES256_GCM,data:9sCo9ePlJRK/dXDc68SxKJ/GnSK3BEA26Zf43RH3VNHVn6DV5C7hEKxk/Jav5gkzl7GM1/9bFNC+06NfaxdFi4l8sPrOUE7gLb90eAKdDjBqrbocSxHlwuzNTPURGGpkwEyJiZxv+g8ahheQ/fOrw9TR1S/A7j+ZT1jD9gaIlnA=,iv:ksBCqnw66Y0p4UY2IjjMBLLLa8NpDdtGGCHOrRHHnhc=,tag:8kS2NLnF+Q94eGAqCKnJ7A==,type:str]
     pgp:
         - created_at: "2023-08-08T22:43:54Z"
           enc: |
@@ -173,4 +173,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
-    version: 3.8.0
+    version: 3.8.1