pretalx: continue to set up

hosts/pretalx/default.nix

@@ -3,32 +3,44 @@
 {
   c3d2.deployment.server = "server10";
 
-  # microvm.mem = 1 * 1024;
+  microvm.mem = 1 * 1024;
 
   networking.hostName = "pretalx";
 
   services = {
-    # backup.enable = true;
+    backup.enable = true;
 
     nginx = {
       enable = true;
-      virtualHosts."pretalx.c3d2.de" = {
+      virtualHosts."talks.datenspuren.de" = {
         default = true;
         forceSSL = true;
         enableACME = true;
-        locations."/".proxyPass = "http://127.0.0.1:3000";
-        serverAliases = [ "pretalx.datenspuren.de" "talks.datenspuren.de" ];
+        serverAliases = [ "pretalx.c3d2.de" ];
       };
     };
 
     postgresql = {
+      enable = true;
       package = pkgs.postgresql_16;
-      # upgrade.stopServices = [ "" ];
+      upgrade.stopServices = [ "pretalx-web" "pretalx-worker" ];
+    };
+
+    pretalx = {
+      enable = true;
+      gunicorn.extraArgs = [
+        "--name=pretalx"
+        "--workers=4"
+        "--max-requests=1200"
+        "--max-requests-jitter=50"
+        "--log-level=info"
+      ];
+      nginx.domain = "talks.datenspuren.de";
     };
   };
 
   sops = {
-    # defaultSopsFile = ./secrets.yaml;
+    defaultSopsFile = ./secrets.yaml;
   };
 
   system.stateVersion = "23.11";

hosts/pretalx/secrets.yaml

@@ -0,0 +1,170 @@
+restic:
+    password: ENC[AES256_GCM,data:Ftfewu0ZRptm3WMHhej+pVK3NbiG5OHwQ7+Zh2U9TpE=,iv:cLhRPE81QvCHdaX94Qs0K8ol4SUV/J5WFZ3uUlNUqCQ=,tag:tUXxZSEkJiTfZYYS/t26gg==,type:str]
+    repositories:
+        server9: ENC[AES256_GCM,data:8/V1EN6JnO91w1FcNDc3pg7O0wl6PlD7qxTIvIKYND88JMKG4Z30sjhjFkwEd56eeWvkaMPfz7VpiFAoDB2jpijGT85Zx8WnzTlfEqxN6hOutdeedgleMDEyUeMpiwxO+VhAtg==,iv:2PuXLSjOisaILTgOBExHagNnZ8iLTgm2IqEmVfm4P+8=,tag:K31fg8C8+mbneuLFEqqoBA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u6xeayzwfdj9l0mg3f4xvjd8e9nemz5psqavauvacjgp2nku95yqc4f29s
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzcTNPVDZFaXk0ZFJ0Wk9Q
+            YjRYL1FLTWlSQ3c0YVpuQzY1a0lWUkMrSXhzCnAvRVJDSmg2SGJSLys2MG9pV3JH
+            am95ajFaOXJyV0sxSGVRMXBmRC9EUjgKLS0tICtBYVBzVjFaelI2L0kxcm5lN2lj
+            TFBRNDdFWFVjMytOSVFKMlFmMDIramcKKiBLQiLeEgC1Y07ZiPQ1DrreUckGdNJH
+            AZSpXHM8NnBPRaOnsfwG1HpQHyPzR2JlgtHeCKRcZlYVU80+e2In2A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiOWZSSTZCR29sLzl0M3A5
+            aG5kQmpiamhSZGVSb2RZdWgxQnBjRmlCS1FnClVKSTQxSHpZTWZLZktUY3JYQ3VT
+            ejRRZC9tWEpkcGdxRDJQc1lHNnU1bDAKLS0tIG9HbnpsZEVxQ2FEYnJxdVB2UEJQ
+            TWk4MUlIMkNRUDg3Skw4UWhaQUk2cFEKuFT0WRhztMTRgT2uoU7V7pvn9JPUoI36
+            QkL+mwZC4cU5dD/4gAJPcdbyBCTZbdyixpuEG3lKzMO6YkFp0EK/zw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-10T23:28:01Z"
+    mac: ENC[AES256_GCM,data:Ya9cPSZIymDQ1COrKy9avy6zPVjPHRCEXXsQvwWHffKXZYU4YvkgL8mteLkY+ehzzsO6OrLcyJEjOQmNal+eO2E6aA5Q4T+1jVLdzEnsC7aI/O3idg1i+2NJG/PBPiFToXoFUNvFrl4e+9TRKMFNcEuAoodSGpY9q0bmvtUDQlI=,iv:R//QJSFAq0pHvelhEWkeFVEb0qHoFcsSTKyhM/3BOgA=,tag:kQ5qgLkAfO4/RgxKocbwFA==,type:str]
+    pgp:
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7zUOKwzpAE7AQ//ZrRUgB+kVbq8nQL+m25dI3SJW5Wn9Voqx1WizP6VM0Mv
+            gOX6fqPAaz7+RpfFESHdybEEOJwWMCH4A0MrvgevEiiqfTeInzuDyLz51/ggcE7X
+            TBHfbftD18CbK30pKSVy4T1yYO/igjGgIN/iX1YvHPbYXB4pmKCEZABxLaJrnCiP
+            wMEcMxYP3qCIIMt81u0t1eIPCVpCca5u9D5JDJKBnvk7IeRoqwx6BQjIpvvdUn+q
+            h8ek4VS7bTaS18Y47XF/FwfzgZoK5LTCMz/lB/3erGXzjzJ7Xpvmc828MUGqK3Po
+            DDaeYM3X4o/p4vNUpQjGzrkB8/DE4UCDdQtFR90qgddMW6T8wKI2U1TTBECKaN5V
+            t68UEEdnQUa++PteQhfK31B/EF6aVP0QAjMCCQYP9JUe+2mtbQcXpDdrO60QQNEG
+            iNYeyCpLrQrveq7U9Iun35yY+mg9X+CX2mrq8kCG/9tynYPgFJ7NDSXNkIbdzYZF
+            ONORPd/ka7ec1fLc5eWy8PQHTm7p/q9EBiWsCNsybR1RhXUyZ0n/G2x1SJ4llBi3
+            oIRBx9QOIzr/gxPhuU8mUxx0lRaVW3n3jruGO0VsCIJSPqghC7xmN+ej0tUVvJty
+            g+k4VHUGQYAPhUghOaNyaKA8G3dPwayjEsmjDdyhxIzxwdaSfZOwVA0zF+TS2zbS
+            XAHeUuew4kPUR1uT7WNLyWglodmNb52Wyre0ysp83pDaFANRKgIefhUqWQkxzCGD
+            vzxYAeIqv7flJvUcgQ4CdxiQO7NxgFL2M8wuPzpTiZnAotJxSTQo/u7rNiZG
+            =W/mL
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ//XQMb8Jl9JODaIUaR91XAzd2rq1SiRFmqcuIGY/Q+iAzx
+            /G4+KJD6QQE7AWu9sofTTWDjyyKfGNCeqXBHBSLtaEbicAT7xZ5g8WEkEiF4fkc8
+            ZMkPIzbP33jG1xnPXUOf9GjEUqNl6IbVKB1yg7lH9igpuesXWR8j/k0IcqTnJNRq
+            CjBVlXra+Uv75ocYl+asrT19u2+YOLBZmOdS3WiSYS5lBtZf1wg4nUmC+amh7fSh
+            mlTR5EfowvJvcHSbUvjehR4th57vNO0zyCeUxMeF3o174A5eUqZBc0VXDmDItncQ
+            6cI5NkCNPZqGFh7g+IFpcwZAAYvBTaD+0n+cRtOYOg8uoIgrQD/6B3SCc021lWO7
+            yeA31Q6Erjl5888tfbELhSx9/4zOfsQshEkMUdfdLGu/BvdH7XCT5BlmZA5gfxkC
+            GHyJBrRB0m38QjcoKRn9TuFHb3jFJV/pO7j/EAvt3n2RJk5vAE6UnyT6kyvugdX0
+            QEfQ0XKwG1o0WrT3LCsI56uRDOIELbKa58jNiyb51xCY146y0A+jB395SAM1NYrk
+            Q7nt2udMIZDxwBLksZ6pobjYA6Lg1NMJ1IJdKYURVxZipeDPkpk+8pDQcfPiLfxS
+            KYaWD6cKjKmufuDmXN0Ah4qv5x4KCRswZz8tkf1KNT9cRWOrutd4VlYTeP8csefS
+            XAHX5Z8otY+wpTS+L/88VgnQCnsGh5+Vy/PEBhdY3Rs3IzVaxSsmlkwrH+I5eLL3
+            MZFwmQxa5PA17zuK0f9QFXR8E8u8Q0qIhXwVizCgzTqhei2sNsq4NurExQOm
+            =kD81
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ/9EGyIqwto5nDXEbIt11hCPysW5GV45Y7xHhuwe1ir3Qd5
+            6E7xnlvZ2LpHv4mLprowlzeVgyFi5Xn27V+di0XWTPjgLTNaXE59PQmHl8FV4rmI
+            kuSb8xe6xDIXEvAKcs6I/00tZIAmB2Kbz/us+o6Lv+m1fH4aLDexNQeiTdOWNGrP
+            ELGHq3++kMN2eFKdj7+bGPnUFa70vcMIVLVLMcc6hk8Dx2njaGqUPBJc82qSoFWo
+            n4gJ3XYrjfmiRuIk+UsR2Wz4XP6U7HvtZh5e9thPlFxBTovJYpR4+yFQFDgCcCpM
+            eN6p49w2LR/UmVxlq5R4j5l0+KWD3nPYF/kRz7CpnpFdXL4Hh9tMoBA3SnVbyrty
+            rkanz8pNB2leQZBaYE9yQICe+x0bgQr4UceCzLgciqi/Sa6dttDFSUYy4NeIYd+H
+            pK1JWXEhYb4b2qxy/LjU/KA4W0I9SgN2M2tuPuo9mVMVFNT21vtTF/7sQO906pR7
+            JZ2IyesK0j89XPfj0pXl/Wz2lICmWmgEtdKCDiHe+jsNxk+KEHigvV0nBFV1OZ+h
+            OnX3Jcy8DfuDH2o6I8E1GK41E1SNVElU2re4Lf0VFzdS12ZWxkKB1Mh/RNWXAO2m
+            2hBQBYq/8XFVkmeqymQTkGqPWGDKt1KP5cydFcDxFXuICS5qK+iaLxbTdtdp30PS
+            lgEuyDh5h3lRPj2kGMopH6Kx3l596kwk5jB1s2UAG9kpBRRic9osVdpjnoSlVncs
+            S7PZN6K9wR25aiRY4HD7u/4Gh+64Umimxq7PeMNMepzwldylhX8VkDOG0Zor8+zS
+            mU0bnMtU82SJ57O+mwbha48ANnNGiKL6a9EkN5IohJ76pimdMo2/Fsm1JDTWIKKm
+            +vr5YhHH0g==
+            =ZUzH
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/8CBJxvFqXLzEejnklM1bxJzpsgR1RzcegR2vaFUoZCbbm
+            uh+3A8blElVrN+tLajxfvJ8y0gqETR5WoBGkScfVOOFKO8YTDzeYxX5WKCRvrIW4
+            5+8HlQMhPo0UOVaWpyTK2c5lhpiVIYovMgv+Xm0kQPaoZFlL8XigFRC3TLh2OlVC
+            yR8AJ9D9GcjGn/1eF7Nn/qfJ/i6x7DH7LomsHUm7wYuSJlHpZkQk9WeKSu/nP+EO
+            H5Db3z5M4T4iQG6K+WM4WvOSqXtgwsFKKsFcizNWeEko4VSM/X/rEgXZwLlt4orZ
+            fhsWD71GpJcoCBlXYQcBzej8JzrfISeHHc0i7HGbdxWx/HlilMBBKt9XOWEVpz8P
+            uAZh+nITgB2Z/B0HNMZry1kAUKTGnRFwGs8O0mY2PYsdqEb9JkjCutcT32qQRn8o
+            GdRYV9D4APuD4OlUBOM2gGK42kgrnV718oi2ETPf1o7e0JRGP+Q1QgNqrzo1dbx5
+            jAAFC9YWpgOI0VDAF0gK717/ZK2IbAT+PlD0r9GC/FnytMwt/J1IYlZUpG0uDAwb
+            iSnFjTzIIAbj6iRSvj6GrHStZzZXhnma6GXDpaRNG12jQs5xJNQFkoQOBI4G9bEr
+            GBu5GidrjcV9rNBQykHF00zVE1YxXfUNZNehjWX8MgIlL++Jx0yZ2TYEVFbIcDvS
+            XAF0A6WnSFp3i6h2Ib++UAStbvlOd11TKWoUB7tiS+5jsqV1O3Ju0H23VVg2cbac
+            qAkf+juCXgjBbWo2MNWt3wF1InnW5LdBtNQ/Ew7MDdxckN4bfpAby3ZyP4Ct
+            =fTgs
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9qJIVK2WMV7ARAAiU7Mo3JpIQvRQbEOVo9sKaZyrcKQr9LZkkS/mSYAS97J
+            pqsgCTOMptOxVLs/AGIlXzjCySa7hN0taOhmq24AYWalWaUS5M+/3jMLuVFmipjz
+            +zN8atyXePP/mi454VfI5etJvyKFD/k9emf9GZUcccjWUsCAgLAuxrOsKwof1mG8
+            pK4otyjqwzIHDAD2wvGEaOn4JsDk5fpu+mAoxnftFUQNXNzpMdNmYqWaJ8gqJPQT
+            u/Qfd/q+V3zIjn4ac7xvpbSNW3K0MHgJBE0HjUUmcjZAOv35+Gh1kebjxBmVBcz5
+            ZBYGZn23rJXEJ1B3ll63Hu/bI3cxsJCSQwY0m4gVMaCmcdP6J4Gz2rmfsUofD6/s
+            hxOz3bd7XtRv3VnwuPg+i55mHKVo+gOV9PKLLo2Qg6qJC/1nTa1tA2S4nz7/tNku
+            2WUP7EKltchE7UiOcDqzNGBQ0/O/tRm7phRtPQZujqO5IkGdCKrnKx3ufbjgS8lr
+            m0BeqEXTOv8MnQUj+Ij7WEphnlQZP72D0yn+z43abt7vKDuCQCg4DOkdtvMmSgy3
+            ozQQ3Nxp0Yq9k7NNNFcXr2CP3wULay4lTEaYkP9069p2IJUlhFuzMdxgZYeaImxP
+            Y9KeHVjBvCgZC6vDTrpGzruxSTjqPoIuYsZNFB72bGFRHA0mIyg1ulaXH+EtWLLS
+            XAFeLYmBL/WVdHyTv0qMUiiTxjnXUBggevJKELuG5DQFcGUfqJXiTz4GgPs8MFnU
+            XNW3PfuUAfBnjUL/lMShK8RwjGV5rB9BMFLiW6KBA4SQtR19+VDj4f6/UG1o
+            =N2EP
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ/9FKMrVDwiq7jRUKQ4bKmxxeHEzw2q3Vd6Rg60zYen6i9s
+            lloXo0FPW50Z6pMVWzjaY5Q/5hYZg+ZyZaBQ/7SmPMwx302fWhXhZA8sWOc9IBQM
+            WodC+Se3/UzbF4y+GMr2McaLb+hWI21v5fxR2dNxamlLkwCsD6uI/6OMM8wb9cwn
+            /n5Z+b/ZTbWDrIQsCMyoDl3X/K53tq6XMB8JeQRk5T4XS9viTwpFTVh3Z2qfpDbi
+            IqdQDBtZy+RwQaStsaInfujJ6i2Q+DY9uFeH9gZfpGyv2I/jV834tVt/01XcpMsX
+            WODs8WFCXV102FQmgE/FtSidHDUZhFanep1Np9289eqBQyPNA6Puc5JaTXJQebH9
+            1Pkh0gadHXb0AKo5JC9qU64hYHuZj1XVBKiY/FYZYWf9t1UgOD3svd4ARvB3SXYk
+            zUlXE4IG48tgMypPzsXoWWoKWrZdknk9f3XCAiSMpsGVexSyIBw6MRBUhLy2P+UN
+            2VTY90HxDot+mMX25ReO7GZuSP0zC0c46pFTnjceDyYLOLX0zEg+C6WVt41n8eh4
+            21J/Y44z3EOsSV9Se0c0JY6g0SbcoEeeksl6y7/QOGi5lE4+iiZvLycIUSSuAr1w
+            0KZog7LPFx4x1ldbxSM9IwHP4rjeAKGEcBiurkUwMJONg880KGFiw7Sa4Hj6xzHS
+            XAGLnEMoxLOAQIOsXnKwJaLE9WlvJygtNWUGjAnJ6QkgbQYLvVxKQKO0qX1OQftC
+            YL8AbVFIOVEy1Amv3SOV7Clf/eYf/KJstxfuVDtYS6ExZjZP4vPvQwMFv5MC
+            =QIMx
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2024-01-10T23:25:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf/WSGRCrTOEjDV9BjWKarS1OxtZxst4Q4mDQpK1P16TbnI
+            re32mQWTyJ90RHhO00YOM7vbdT4+QMoIjhprsY5bdktHFXt5S7eyUszpKUif2dCj
+            rt5FaX1R9F/bT6epcWacKknz9ZAlY4R5ZmRb+q4RI50xdFcAUmBzXkKPj2b8jeP/
+            ONbCVl/tjWlrgpja3D1hnJ94Yo0AtmoioZQXjHKM/8jz8EBAty3clVwEbwaF3pRW
+            q8gKeoUiQT12Tsp4bUt7ZxrMFiVDRRhxGvlg1hUSn/NEnOH82Bnd/pRWWUAiCUA8
+            LYskoTfPC359Zv17W1Fx/REmRVRt9bBhZtmt72lj9tJcAf13pB7rFJ40p1E3BAMH
+            3PsFDEYQVbDKGhdDe2HaSLVDq85sMpCyG+MmkpoukQrgK6VOfh+YqqGjmsqBZLoJ
+            aHuGUKpRqORu8RkTbiSIFXlnoO2yg/qFLaS1ouE=
+            =Q2L0
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

hosts/public-access-proxy/default.nix

@@ -139,7 +139,7 @@
       hostNames = [ "home-assistant.hq.c3d2.de" ];
       proxyTo.host = hostRegistry.home-assistant.ip4;
     } {
-      hostNames = [ "pretalx.c3d2.de" "pretalx.datenspuren.de" "talks.datenspuren.de" ];
+      hostNames = [ "pretalx.c3d2.de" "talks.datenspuren.de" ];
       proxyTo.host = hostRegistry.pretalx.ip4;
     } {
       hostNames = [ "vaultwarden.c3d2.de" ];

hosts/server9/secrets.yaml

@@ -5,9 +5,9 @@ ceph:
     osd.7:
         keyfile: ENC[AES256_GCM,data:yUDQ8bwnK7a++XFAVRJscbIxuBsLgef9ueGG6qujWNUyrmAZGvCMdg==,iv:MuLAqz5vcM92IuHEC/OeexSmXMdVYiwZgoxunlM0GHs=,tag:pR/JXDJSF1px7dzelpySeg==,type:str]
 restic:
-    password: ENC[AES256_GCM,data:q32IEdTaD9ZhZfl7Taeh4n+n+bJxD0LLsuAh51A/WY9nFel/xMnh1RrpWAFyjc3Sgz6u6lOQaTMRpFKjVkX1Rxsj1SRE8NvWTTaXb7WuFhtb+lALCe1UwnbWpITz9ud6FYFj1xjMFXJS9nrbQ/579wyTYli8px+IOdmT2QKl8902FvLE/fL4tTi0ZDt9tYxDA/2vS98w332igcdXh06OmbQwmGa1wyOnRIW0E+IHNDGMXjDrHdz34d38tCii4WAtmZVUK3I6fWqkTglhoIxm220Cfg7Z4ObjtR43r+H253wKu+R8K99Ir9wouiWeiK230k/IRz4+tJoo+vAS8XxMRPiS9i8jjF+FX7Cl/+ScIiVI2E+rsa97xZbs/Rs6Whmypu48osjWZMTSQYM32fGAm0aRV/SnbzwGHV2d4S6iUMAl4dDMLMwNJfmpX/mRrHh8BMIMwEHCm/wLbrY4hbN+SDI2nuq4sSGGgvQ7p8ol+eqEDIL0bfLo21GMgbOQ2exKuPt1Dr0LsVBUOfzjh9OayyIR2GE3dvFcwp6G04ekeoBxLqyYSkgUXdzvW0ftx9idwlNG0CRiPkSP7HkChxHzEyDpwiXcZh+hH38UcfFUmREr+RdJDqy7Byhjy0NMYbIElVVTvgnBwoO0ZFhw9BZi+9XJhkjY7yCmRZEOXHvF7oqV5yHrIevdQKvEUQcEf9Ym+Hs59tPkr6IlZFUedbsdaUe+Vc8AVskQg1e9plTyiYIRjuGvdXzepnt4L5IMufrIZye/eawLAla57GUiqfmJiftEdTbqP7OYLPUq9dk7W+dif1rTJNs3Lxy+uyO9tLVUB+3c1okAah0oeHFP9UGEsPzwcslAKYHfaYd4VXK3T1WptxJVaNWjXQvGmH6AVHEPUMvonuJ11wHv+/+1v6CYa8JvFZ4b2tsnYmOOYcTH9e0gh929HelbWxddPvCZ+iabCynUQzWsamuH0WtWsA6HKgkti18CTJGQL4y56sIKDKyd1F0X36l8xfyAZaaG22OzDlouTRSFCQolkncgaPhQ4ZAbkW7xtCF/IVRoxaKv67bQBYRTIwEC9ot/aQTqUuj1nzEEYEW46AR0T/BI5uFPMmAKfX/44PzshThEupipXjWBDMkopWrYJDUuyfeybASskzZbIBUh7xqQZZx+zhQDdKyGMezDVivMmw0V8KBBFDbs9QZT94ncP2OgmLii8thuXW77BxU=,iv:o7keBMbks5ch0Ry+cNGlTgMNeXJQRQzKNoqmLy/dqI8=,tag:nv0iK92YAODAf9XXVtiFSg==,type:str]
+    password: ENC[AES256_GCM,data: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,iv:KC+EBNmkH1r/EZMe8hee8Awn/+P2JRDWEktSGfsBuEo=,tag:IK9kPR9RL0S40xJXxSXVZg==,type:str]
     #ENC[AES256_GCM,data:PHm96Uz+irAo1jFg8CISWCkQNnXwmCDjBMcMFF0wl513tYYbUvLgxFXqiEDvQZlG9HTB,iv:QK9amqrVzWqzeYhELFWMpoo67uTNfouqMKK0/9Cd4+A=,tag:Y2Ds/bEz/L3FN8C4aq/Trw==,type:comment]
-    htpasswd: ENC[AES256_GCM,data:GabCBKBufi6yhRTszeh+pVRgFFRn+vLfzzFSZDE/3GzfF2NZ4iTkqNiSkV8lh3qLdlVKCjtdzS5gfDliEGOYX/M6aCK5ARZsCHmIDKEH1WzgEXmpN3zzxy/gx4hV6+rAgIIncWRi0hP349TLB1ojPuvt+7ss37HcJrUa97Qjxcn9VAGONGDtRJM+K1SFz7usWgx2P/OCiwux2QvslGzzO1ryOUBM2LdErDq1kiVwvSukrFTO3WzWZvbUhFzSgJ3tFBVfRttshLtQRDnw4M69i6ZGkCW4mbDh7sf5s/C3pmXQ3/dCffBpJEt+iuY4hOhRkGH9k/DOsVYwdVnmWu5y96fbfXoI/x7R1LaD5qyRtip0dyHo4QHCRW/Lc7JDjzQ7+AxYsvfAaY/1ZbWM7PtZxZhEP6nlAgxwf3D7qMLyNNBxWHTfuF5nlx8WGHQXb+jL6HudxlATK/aiwOwKj4x9TC2t/J8yRZ+Saz9u/cI36vnqeOjW9/J3PxUyTKv4Rlzh5xS9D4EmKffDXU7sHzM90sKOaCyG6sslKR6iA9uLoMSewEiYugyBMhPvw8aNbzRG1MKLSnPXD6p7yTAWuGbu0fC0q5WPltBq82nnwbjXPIcepjKmwv3zVH2fdYW0i1a2kTAtc4amikUsIURDo3tq1a3ht5FMuYkejYmM6NWSBfu6dFyrxY1zG47zOZk1EBFSdNPppFt519+pbOayfbzuHCj6cHyY0eo7IKY9W7b09rEjvQ/1eVa2jHGAXFyRYapinkahn5nNyP5hhM8E0FzLqIxIi2QSWqG+XdQTppfQ0HAmDxK9qc9nqG0NH8QUtzPT3Mgic1ojy0CdMzVL5G7Of6Wt/jW2TNkERWgM2Lygtbpd9jeiZ9cmn4wtG7a/fX6jpXMEMraX6JdWy6bMbUzGGcxuDeiBNRN28IpJJySB3fdTmlC+orbqhVXK5UIlQX/Og5E8o2dISt9h3XTpReN1aCpbQF71A1BaF3SmW2ygzOoXnv+aw6/u7R8eRcPsu4d7UnLDvAdGBgvHOsOKKqenVRnHB/+IhpbVrac6FZKpDyvwvMJnuD2oXyhAhrD4TMbIKPfJODdi7ctHp+Gm/q9IQn2JF7/PN+HbKpaoIYM+UkFughJAYB79FpPNvCCS6Ni0+MFT3zJJEs5ak/hzcX3X1KRUlV4rvAmTrImsm1Cr8dEjgZ0UqVkn2y8D3Kzur7JThcng+dKNAD5EtNm7f9NRVpl08uaHenYVwODbutMD3A82TzLnlAxA6hxiOJKdR4P1ZWhF4eZrlkfyuUjlbOV70V+JPhucpwn/LRu4QCpsGuTZVA/JTXNVGLqySjcIltmZE/uQdRd77pY/ce3TtsOpnUpgA+v0sVXbLa9NHQqYRChmSqLN2Nh4484ic8YrOr7OsHgvIh7jite8aNCLpKdc/zA0W6JQgs8IRuZvh5iU50z6Gg0Th5FpqMBr7ia/kfbZCE7Zw2jt6Njyio/cvGDjTx6ja7RClGLpAImyZBBmnPx8eiVrflSzpNUPvLuBUaTW5sDzUqfd8jG8W/1P1Q3jjf/RkePETav90EL+ogsQkwgTeJjCbpSmGLmqP9Kc1rhDQYI7QIHVc42lXKHJrU/h0s9TSl8BCAXm0E35WCJ3aiE2zBnbkvOAc5jNWt0wPTyQGmyXhYSTaGgebKR6UXWOUdb+Epc3Pm4k9ccgn9KxjIafUbamare0o+UG9Ds7BcqVr6l0snjoqYzbbz+YWQ7QTpU6Q8Eucb0eQdY5y9WbSrCAbTr/KhnXUBPUTprvXOPHKI4pKxs3+lj88+vRR/BPk3NSrAYJ+mh+poWf7fgzAZxvRaN4wWqkhjKmyUbfVzmZI+6C9K6HPf4kf8WzvQZkkUrfH5IqFsXG7XezcnAFjssxyaE4Juv48S8MFl4gMDRDLGspdrc4tlGjHNHCBxPZCpMsxshgFMfSA+Uz98cGYPRk5h7z145VcEN6742dQp0IpSrAssJCu/IBfmd3/RtOu29S2NeEMcZO6St7NncTBldxStvbqHUW0hlY8pMp,iv:ecP/EZv3yN4perxBa3tHJ7yxtDBw6TPHPrUJ29HT66k=,tag:z2P4t57+DGz/f32nFSgNjg==,type:str]
+    htpasswd: ENC[AES256_GCM,data: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,iv:phsevyD90kreqScr3DsLjDO0/QhZvH/4n8WdPhgSSb8=,tag:DZqMXHO4o+GUZRRYth/dAw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -32,8 +32,8 @@ sops:
             cjNaNGNGNVRFU0VCYUp2V3RrY3JHM0UKHyu9ugwq1UJc01UXNKTp16R8mZCs1cSn
             kpCNZTBID4lWHTV5lCJ1qtgS5zzjZTzIBm0l7XiwPXBXXhxe9YL9Lw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-20T22:32:46Z"
-    mac: ENC[AES256_GCM,data:E1oKo1pcf1hBrA1koRqnOpi+OBQ+EMvUBCs9hBTfkZp7NsGt2TpM6IkfHJv9DnHDuAu6EVEGuf7F876m50ArZP8CksJ1rYUC3hVkhly0pvBHZNGn5wdqtzfaSH4GF8sx/aoPUMGLYnBPNpR8QMk9iiYkKM2JP3U/7mwsoG9jjQg=,iv:tOiPPUzxicYFiSlSQQYNNj9Do3dRcRx0+3dAfZaZOko=,tag:ugq3LVwxgUH7jDv6mlWXRg==,type:str]
+    lastmodified: "2024-01-10T23:29:21Z"
+    mac: ENC[AES256_GCM,data:z/EMEvn8IEeJDSpVeSmPAG5o/9uX+m+xCP4CyXo2ScbCmz1XBBBzJMmswsVDpMqoODvNLVBs7zsBlE5TuGHyEj8SHPezEyE3kO7NEMCCvsJK8RhXk91VAG+bh68jUgctS0yzR9vKY/WPO1xwKmiKzCaT+2X0RCv5VZbP2DXlBmY=,iv:IFMvblhohl4qOas82N65TSurNSJrq8D2WNp7PzjneOs=,tag:E7l5fOy8VbEgJeniDjyhOg==,type:str]
     pgp:
         - created_at: "2023-08-08T22:43:55Z"
           enc: |