Move backups to server9

2023-11-11 23:44:50 +01:00 · 2023-11-11 23:44:50 +01:00 · 5284717bdc
parent 249057830a
commit 5284717bdc
19 changed files with 99 additions and 97 deletions
--- a/hosts/blogs/secrets.yaml
+++ b/hosts/blogs/secrets.yaml
@ -3,7 +3,7 @@ plume:
 restic:
    password: ENC[AES256_GCM,data:5SUmmFclsGFskWM1E0qOQN0TDB7sllEBnDFslUHTqZs=,iv:WoWtaR4byoRjnZaakBhZYHfzBFKrJ1g3ylWj6Vkom2Y=,tag:0M+MXU8Xe3Ig50rmaqwzjA==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:ZW/hRX24sfjGd2G/bX3KR3YEvOmi2ydJfdD0b8A+1RrE1a4XIt8Q/a5qcKHk4Gym7vW7e4927zMD0RiRjUByfRCDwU0pEw2ZJ20w3TtC7/1fweZzxte67kImRhADzW5g,iv:9+Uoy+mXPQ4Ig5EiSgxZUWkFiiZbznbdonvrtV0LHsM=,tag:CdEuZf79+Y6VraKhPjHRFw==,type:str]
+        server9: ENC[AES256_GCM,data:UdkELx+F4EQywGD3hOKf2NiHjYxMhjMKchPsUsozUoDVAOBiY+bt4Zna8CBE0gmp07waM860F7zayDqgf7fluMCMhfW2H2VEp9O3KTjjhI4XlCjYBzz1xtd6g03COn+b,iv:R5afv0aBSSQG61H7D3mbAg/K43faJ4sTV3Qgxl7n0pE=,tag:oqEKkcCgeM+p2U3RruLm+Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -28,8 +28,8 @@ sops:
            dHM4NUhEcFJWREtWbnpSa2xMR3VlUVEK5TWq84p8Mkaw/bVNECTQp2IklmIxvtHA
            pitCs+darbCw7Ux6WLjyGjaGRA3e6BIy2l2BF5l6rlWPRbLrwWDZsA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:31:32Z"
-    mac: ENC[AES256_GCM,data:29m1Vv0MdHg49k4VubXeMij6nWjb7LjXtuKoUMPF5RZyS+wZxl7e2rIg3dqjDmMX7zHb8wyBK3l8WvUQj3zhCWDYILqyKsXCL8DpHSh/xs23R+6vo7TL68tJDdzYc9W/5ApD7ORdE6geUyHRn7S9WU6GWLhgfIDACdDBAq7SJdE=,iv:cfZS2Q29cT8avfmhlXI4Xzhz9+PvQFO33OgbeuyOyT8=,tag:YWid+v3qPzEdYrIp9I0/gw==,type:str]
+    lastmodified: "2023-11-11T22:42:47Z"
+    mac: ENC[AES256_GCM,data:Rm3Pn7sv3uUyuibvu5icFZsLv+1b1MxHk/bDoBfKvs1mPcEmhXMyviG6oPXgWSwStND5K3EG1YJIHWHLlFzReJvDWQN7SPtidkEj6empjNkt0ZDIvelX0RqHbVbbLDFrGdbo0O+tzpe2rE22VvsMliRxi8Frh9on/CgRLeUsxR4=,iv:5V50bnIW/y4o2FDTuS2p4LOcdiclJweLkAIfqUciGtU=,tag:d0DwlYYvUeo3DekTRzBPAg==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:23Z"
          enc: |
@ -169,4 +169,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/buzzrelay/secrets.yaml
+++ b/hosts/buzzrelay/secrets.yaml
@ -6,7 +6,7 @@ buzzrelay:
 restic:
    password: ENC[AES256_GCM,data:SRh/c+JNWuU+MNfbAuHysU6q8AyO+/5wC9mDBlaVNJ8=,iv:g3xdXDWuC5y9Ot8qSJ9Y+TkgyJEZTGekVEa41aJgdMg=,tag:tqKUWjbq/7r7yjI8f8sCjQ==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:Rnc+5a1QBfG2SrANL+rt48Nju1py6g3gBsAPsGAycmy2qgnpJ5NmCc5Szh0lB/clrcB9EJ2YL1YdMCe3zGl0fbzK0ZdAkN02eGk5oGDnxiyNsMk/NPSa7ydmCznE2D2tVq1eoCcJPO0=,iv:espMVQQSGdH0+7+7EwuY9VAV13x2mYPvT/CRYwdKOp4=,tag:4mly1XDZz0jsyMlanVFImw==,type:str]
+        server9: ENC[AES256_GCM,data:Kf4GoT6lTTOAsc9zSEHTUb73Q0mw5iyRnrgfa2VYpY9GKAy29sFvLX9UBGWRV+a1cJY+reculfxGgD1XVj7undRZ3tTbNVhSQ5oJ2ilvLaAwSeMVHjR0HKrLw5aVM1UU9lOK5/BwvtA=,iv:HikHSP+o3FenzbMQRznbbqWpg+Z4l9dzgs/XqZD7eO8=,tag:vKDCwnZpOQ7/zEj0YjKxQw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -31,8 +31,8 @@ sops:
            THRRMnkrWTZOU2pONytuZUVMUkVnR2cKuM2E6N7MFziBTj1E4I805xewCbpAPoEc
            hHKpdrxso5Jj3IkCD3RzbeVpS/ZTDG3z2DIvkEabN7q5DmyM8Z05rw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-12T20:47:18Z"
-    mac: ENC[AES256_GCM,data:7jVdDUL60WP28tZo2U1SMzB78+R3ljtUAicBE4ReOa2xKXo0j3uCNXf/M8sBFcGNIJpkcSIi8Mh2nYmOAR6fmzJNo7kImBS70jxYRKd4hl2kFNy3BiynyKpopWB+TLnQgYJ1tnRxwuqCYuTOGRYhVAuaO+0WYUSpMcj6W8wTfMI=,iv:HSas86SdBfVPXntJhIygMAriYRZKRlbUpAA+388RFCs=,tag:jed9Un4i1+yOujL8NoUmLw==,type:str]
+    lastmodified: "2023-11-11T22:44:18Z"
+    mac: ENC[AES256_GCM,data:Xid791KQORiBL9qiMDEwCZMgzqeXoSuoev2/SBlesTMbE0oV7vYjWgSTa8TlYaK0DpA3ZKpNtzXw7hmkIfG6oQKmZBRbmBr2jInsUD1ev7IhVNq2m3W6n4LgUk71whnv2v6pmda1hd9dzAfGS9hQOFDT2xmyK4RiokHVNd78RAQ=,iv:DNJLeew1GEOnv6IvxDo5ctQL2sOsQBMF8QMQeCjw3Fc=,tag:95RTBhlVgbDx7DODsgrHSw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:25Z"
          enc: |
@ -172,4 +172,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/caveman/secrets.yaml
+++ b/hosts/caveman/secrets.yaml
@ -1,7 +1,7 @@
 restic:
    password: ENC[AES256_GCM,data:f1kQylVfzI1v+W2P+IklKw==,iv:A72uGclgNYtDyTr8EQVgLZ4Ej1qVRWL6DvmmXExXXVI=,tag:kFhaxLWi89tWNoNtbE/FUQ==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:BC4LJ04G+4PCbenk5efyC7dXnbqubI6c0rfSGdmB9fKuweTV2Gq7ypDbIhTM5B0lrbX+dhaKJ/WN6Cgs5w/F8fTyL1GfW5eEa1sKsZAm4uchcjTo8gTojDCVs4Tq847cRNnFhA==,iv:Y9QH6hBfLFzAVJPMT63aptL1dbMwLJ/H0UipUMIxq6Y=,tag:Yif7izUWvTlErx0OAfFXWA==,type:str]
+        server9: ENC[AES256_GCM,data:iLHa9ppMKU0fozooGoTrc/Of6Vh1iDI1Fp91LdWAktZpZ6/dPKyHdug8S3KZT3WpbQggQRmdeB9cgdxd+3H8OU8yrapVx7rIGz9il0eNQc3j0lbI/IIZyboP7HSOYd9soNRKwA==,iv:TFki4AUtMM0lhhuR4a5P33znPASyEWN2MWkZWaBj2i4=,tag:EpPN9BZLp80BAgeAnGzG6A==,type:str]
 redis:
    caveman:
        requirePass: ENC[AES256_GCM,data:08V/ZSarIx+lpGSx5Su0A4Jveejxi83+jj1+Wcqf+nY=,iv:lm412YmiV6rVn5LGx1O5/kCGO457yohieu+UgB5b230=,tag:4cQ7mIlxJh7rGMZqmGIPMQ==,type:str]
@ -32,8 +32,8 @@ sops:
            Z2ZSNmsxR2lQZWpLeDdqVC9jTEJYVW8KtES5IHyQyMs4MuaGrEt724cQf935ISl2
            QE+Fpkg4Wb+8gaBA0H6bWzq0OLuaIVzgK5BEoY1YThD6kKbBxTcDww==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-15T21:57:57Z"
-    mac: ENC[AES256_GCM,data:AejSERpk1n5j3n6kedAfb2/KMbdSl26wbviZoRbJyWv0Nagx6DhUCm+okv1NhXNyAk1AMyBGxX6iSuqxV7Av74axjx8DBTcDArvipsJ5TJ6a5i7WjoTi2lRNAjpOhoSnaiDOZ7dgoQ+itbjr683pWLhA9PssyBYRoAsdfhE49Jw=,iv:ssk6/GSa+gDbwNBaOnsXCsOEtNmP0HgebgCmmV8GBC0=,tag:5Jx/HkUtW4HjzMeMTAdDRg==,type:str]
+    lastmodified: "2023-11-11T22:43:02Z"
+    mac: ENC[AES256_GCM,data:GMNGRHhfnxnhHjxIQ3l0FRnMaGS7OJgSJzQnYVR4IZRrPgesZffqnf263pJdo+tGEA2JDTLbz4W+40pJ4IZ6m66BR5sVwKjsimAGTB86dO8G1RlzDgVGQAkU0i/YA0wm4+5DmoMUsRfOtxxOqsbASv44Ua2H3omKG1aLXQebTb8=,iv:iQys+/zsCegYSFy4EZiqKGSOLQCeQUMnTRGVpi4DSTw=,tag:/p18QhzztAhDFTXd+ZAU3Q==,type:str]
    pgp:
        - created_at: "2023-10-12T20:25:31Z"
          enc: |-
@ -171,4 +171,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
    unencrypted_suffix: _unencrypted
-    version: 3.8.0
+    version: 3.8.1
--- a/hosts/drone/secrets.yaml
+++ b/hosts/drone/secrets.yaml
@ -8,7 +8,7 @@ drone:
 restic:
    password: ENC[AES256_GCM,data:rBbfglIE6DAlL8SAdhGIquR7oj+qusjV1xPGWfrAADw=,iv:7mYmLy7+ymf/qsKefedx854s2/+aglrU796Bgdyi/+A=,tag:Kd2RDXOGdcKSsDhPDEbHLQ==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:pLp0itwQvDrIwaxwm2bMt/o35w7Iz+q+AchoHJYSejqR+Fq+tndjRe7a1jYka32QrndqES4JBhTQxBfyfgpep9MbCtfUShP8Oc2K/5EJfNJRTdFEM2XeUVNrhTvfMc1I,iv:PRgFps5q6A5+bTANsPjmCjQ8ISBOy5EZ1F+vDBWxHoE=,tag:WzQrArAaPjsM1vloUtesWA==,type:str]
+        server9: ENC[AES256_GCM,data:q/uI98ANrIvqXJ1/ke+SySCojM4o5UFieibMZtStZClycnXiwqEB4033f8bK58RVvyCWGZWr0bhTfvaSG0vMIHb/UBfTXgyo42YoDAVSkh9vwUapFRjch7wQOh3I9ETZ,iv:8MbRvtuwk7tdgy+2C/6qB+zSDCF0ECS1ieD6MIzBj4k=,tag:nXp4ERRg4juceODrEcQpmA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -33,8 +33,8 @@ sops:
            NnpUY3Vaa2h5eUlOYTJvaUZUTEU0QVEKl/2u6tMun2UGeJ1JrTrtsdJxEnts2v1k
            11zK2yQO6B9QmcY+eycVMjmi2VO0lJ2/fT3iyh18VaiaukfTWfV6sw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-12T21:22:59Z"
-    mac: ENC[AES256_GCM,data:81AJztIf7QZsHbuxjJ2nTSkbMtjGYLaew6aehK+UHbs21+whG/PQ28CNam2XJ6wRU5j0MmLb4dPEXAR4c9aM9KaImpsPtICLw+JRToRSlOvwQ/YUQ4U0foghXvjh/nnWAhTR7YWsIJOHiJMb4vNEDAOYDUdZDgnTm+Zj+Bh1XNw=,iv:kf68I8lSTSOcnD9UR6rQd7DNkDW95rUk9kfXJRwFT+U=,tag:n/oB/IQchlx8QevcNQwM7A==,type:str]
+    lastmodified: "2023-11-11T22:43:07Z"
+    mac: ENC[AES256_GCM,data:73d7zLDp8uIwx4TC4tXHUGNMzmtDYeOCmkKYTavO1HrQnI1/+5IiXj5Xc8WYWrx+f2TgOmhu3pH5PYWAk+I0e/7JSo8otso9OTkP+SF4LwnshLJ+H+l5QsbaWSNy+TJv4QAtFjhPMZPPz6NARFXEG6rq5TK8RC7RJEvqQN81NCA=,iv:/+6UcFpX0BInltOIFPEouNn7FR3vfBCYp/k8WJqDx2A=,tag:1ve3BURby7RaacsbfmXRRQ==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:29Z"
          enc: |
@ -174,4 +174,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.8.0
+    version: 3.8.1
--- a/hosts/gitea/secrets.yaml
+++ b/hosts/gitea/secrets.yaml
@ -3,7 +3,7 @@ gitea:
 restic:
    password: ENC[AES256_GCM,data:cAiFmuJ7ziJxBhlsmV4hiSz8rhR2V/Oc7w5kwRKFb6s=,iv:H7+x7Xgt1/KLT+ahyl1KbXsIftWYaCa8x4AyRkVrI/U=,tag:UPtgF9EuE2Q4VrDV2HRp4w==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:WCtj4ZBEBZ1xN7PymevYd90javLQkEaXa++3sa8AjdfsG4EgxxjoYbCQmKQT0KvGDAjlN7vldkrlO3fsX/CwD3vJ+xPgTxnXQZ4X1lwiQgn+ze6HuPDtwwMZn0tqWHFu,iv:+/s4LuBCJMNovQO9TPDu/fdCnBn2pqx1F9lvbgMKXYY=,tag:d+otgTxSW1aL6dd/Q38L0Q==,type:str]
+        server9: ENC[AES256_GCM,data:/Wuy5jaHZWfykptZSa/7MninOayPy2yoNOWt9xlBqqNXItbCDZnJck8AWIK0tB74Rp4iKXMhFcr4M10zadhBwQz4oE//aV9LVxDQpRIAj7bmeiX6p5Eczct56Dxm9rkw,iv:2E8pmr9lsR9M8GJqGifWikW1+IBKfYZ2bOpmcvd4RlM=,tag:lz0ThBSIgDW3LluoDRf1rQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -28,8 +28,8 @@ sops:
            REM2WDhaNWsrNkJuYklqaW9BakFWN1UKgsr2Nr+kQULi7JZNa/V8b6Uehu3MAyxc
            MZcvJ3xFXnOFcZIXV5fo74mFN1Ky75P8TjRg4Bv98pXd4frT+sZM6Q==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:29:46Z"
-    mac: ENC[AES256_GCM,data:PwKcf4huiMAcxtcbIvdL1NW8Ih+JDZi0ELEbD5+says/a+s3lohl9rNhdo8NPa+iwMrtXRBtfksl8eLZd/lk52LZY970V0d04e/e/C9g7LT/x6/QZBL74TxvAjzlpSPr5LIJ+ZZfoQLyYBUu5jYoQews3bXtjp5v5z7h/g8JaNY=,iv:sxPIHQC3jyphs5CeClrll1veJRR37gqoLilcmJ0LUNo=,tag:W763d36xkvJJFulhkEjkbg==,type:str]
+    lastmodified: "2023-11-11T22:43:56Z"
+    mac: ENC[AES256_GCM,data:SHERPmklH20+46CC22h7Uan0UWCD4ccvGoqF686hMa9mh4Mj4QcfzbQ8G7tFMe8HHfl1IpMyNjBOprHCBM35AbfCVAZxOZcv8SUwiakDPJDbd8qHEStZCX+33/fzeQ8TRT7xGI1zzajrh5S2JVs8kvGQZ2JjhSgxVBRFxZGrfHg=,iv:Of0ovP37TxMiNVeMnvFgwRNZZHBG5RMsRUF80wHbaGI=,tag:lyJ1fpSm1qCW8uPGd+5RMw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:31Z"
          enc: |
@ -169,4 +169,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/hedgedoc/secrets.yaml
+++ b/hosts/hedgedoc/secrets.yaml
@ -2,7 +2,7 @@ hedgedoc: ENC[AES256_GCM,data:gEDgoHFFEz0X7dJ4eiiG+U0sk5Q8mVR3T2jxqPFm09bmFSie7s
 restic:
    password: ENC[AES256_GCM,data:KUrj0V8A3EZ0YdlE0uAwLvBE+piwH6/tFaX6OSQEqsg=,iv:mIBznBPIyUPHTA8TEK0hhuCmPQdv2rqhQuGoZAZNdF0=,tag:0X2QGR12M8vt8ZJ/2z1zAw==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:AzhoZqGX8bN8X04gKiOS3yVQAwp2sgTlzPSOMMBpTeLJLJNYgM+LK8fY3HSprYf/KMgF7pROlTmIBaEijyxEmepJSZhStMRZgvU9mLkxNZBMvylOe3N2ZVzLfokOazyxAExI66my,iv:hz95axaDuai8eLHGUJzkHrTQvBvTPDqNBtkOcgiBXE4=,tag:KpX+j/PqtYIxMYpj4OujIw==,type:str]
+        server9: ENC[AES256_GCM,data:6cTA/GNAuEDJyfVg0j0iQgv4XjDA9Y+CPzqTtHZT4jp5b/65fqlOJpWQtPZsezYwF4ThEtExUiHoA2+VL2Mq7/mgOGRxe2LDDlUUn6r2o13VrY/hU9aw37DOXnrpR9M7nIglyRG2,iv:uRRsMrhxWiaNrLaD8VoNh23SBrrGiuv8d+U89+mTs2g=,tag:spB/7UnH0sJ3zTUZ9e6A+Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -27,8 +27,8 @@ sops:
            U1ZreVU4TGU2WDg3RFR0QVI0WUE5c00KPhEmtp/dIYKE5kc8Hko3BjJP8G4POH2q
            G1IGqOU8itcR/4LBuuiwfI5DI+P8YDGzGdia+eLJQPL+XjbicO4miQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:31:10Z"
-    mac: ENC[AES256_GCM,data:aPb5tNKNkAcgrkgZYuncRYzxL9eOP+u96XxiojFmqP9ciIFHKiqR3SBbxaVryeXiDnkMsrdsjJ7rcjdQ5nrg0VM+aUBuStEudMzsenRd4pV5nSsgp4YtzWss4GJloRClUCp//q3p+RfczfMFJgYm8kjFzc0Gq0lpUbzhhAQ1qkE=,iv:4T5XAkSFME4owc1NjjMQjicxL594T7/fuwfg6H5gHGY=,tag:fAoBz9SdKyiYzpkzkJPQrQ==,type:str]
+    lastmodified: "2023-11-11T22:42:54Z"
+    mac: ENC[AES256_GCM,data:XYxczVfcmaZEK/MiLLnd2K3ObVKCysPNfZ/7kdLqMVGtIPMlmq1rfKKBhQrlhvVFVtNmrgc0QV6Rco3JZCliJekn58Fdpi8Ar84TWFFzQUGknI1ga5tnjY2+MC7qCb/TdrgB0EY/1NtaF3V0c15j0nS3g7xnMMmP80NSB5KJH9A=,iv:ariPrKsdVxninYEviPxdpoIMBJRs7evC2LQY080NYoY=,tag:F974YZOJwXiRSMQyuFghWw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:35Z"
          enc: |
@ -166,4 +166,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/hydra/secrets.yaml
+++ b/hosts/hydra/secrets.yaml
@ -19,7 +19,7 @@ ssh-keys:
 restic:
    password: ENC[AES256_GCM,data:O5p3Nk6XN2NN2+H3toKh1P0txDAsskPA8+/7zYqahQw=,iv:fbT5m+wiR5LBffzECm3TV3WjstGJibeT41UFm4EjHk0=,tag:Zm0U2zum27YDA4jZl0E96Q==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:yAm55dJJOXhdmnBEyOmtFwzNxCfwDY0tkzxacrqY/Zp7sKF1EcW7l0VHzx0TuMiq7LsV36I5cmreE75Ojuqlc+0e3CJx06FGhC/kn8gurPtQIFcJjGNa1Vaw3dIBOjeO,iv:rAEzp1j19TCeenOyRkAOmGEDg+HPwX4ePUHTr5MJ1XY=,tag:/2A5PCW/S8H/JK5pYo366g==,type:str]
+        server9: ENC[AES256_GCM,data:wEmm1YcSLCYiLj3cK92JLVNO9JR7EqE2CXZwgPILuxRO0BlAz2JPNjc0YqKJ+YnsOnp/r3u1NU5GZTtVbhSTMb7LUG+zAyoEWZ2vKXgmmmayPVcShEUAUgxAQQ7RXpDm,iv:nLlOY5O4d73e5iXhdy50fU1MkPqyN8Uzrf+jKLPcY8c=,tag:JWzu0N+Kqyw8FBjovE+pPw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -44,8 +44,8 @@ sops:
            Mk8wME9Uc3hhVkk1bVFRaWJ3cW1hWVEKym1kyQ+Z/rgT5jLMI7l1qdm+N+FpM+XT
            tKq3ZrJdI6/yhBjMOD8aR6YL3lLo1ZSGse4PqszN/2QKjUz8cJezEg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:29:32Z"
-    mac: ENC[AES256_GCM,data:8NfVxYc7iuaedWYlHSq4ptk/uMzdEjNRJcNRq80kq9JlzDNwrKxJJwBty6rwq19+3Y2yvbv0RT5eNIVHloK12DJmoEOgMUKLCSf9loXTBwuGtiEceEMkkXfyRYrKp+jI9ZzBYddZS1we8cndjQkxxUzSJ9gXaS1+D0DCLfq9G9o=,iv:HOca0u4qO0KptAjy9zo2CoRKPUezki1ag3W04NxnXCw=,tag:G+2UCJ3qWu9xjt5OQbaoyQ==,type:str]
+    lastmodified: "2023-11-11T22:44:07Z"
+    mac: ENC[AES256_GCM,data:7MFxpAJo/7rlW4bTvVGVYT+TvjB/U7lXXusz5vjr5xTI4f+bAKOEV2YyINrEWTle43aivUr0HMCn/cM77dne189ojejZJayH6ICrtjM28nvQxEP4OahXkcUpK2q0Wq6+O/g0u+ApwmILx7EeIoGNYTJ+XJEBM3hfSc5p7BVfTuQ=,iv:vaYRoPK6vQvEYC7loExUbUtsLA0BSI8KLCkJieT80Ok=,tag:1q6GqBX9Tm9rO1lWh6pkXA==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:36Z"
          enc: |
@ -185,4 +185,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/jabber/secrets.yaml
+++ b/hosts/jabber/secrets.yaml
@ -7,7 +7,7 @@ prosody:
 restic:
    password: ENC[AES256_GCM,data:8TuRqs393Ws0ggcI4tKXlx8Kt5Sq98zGK557/Qp8RL0=,iv:iWDbcEHUx6y5csLzSzspMtnGgHVZjKISUbs4mYihNA8=,tag:PWuSyrDjGwOo3g5Q2WT4Kw==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:1NeGxLVy4SIheVIBs3Xma2d3zheHpRMlmYk0MFaJErU=,iv:lkiWddZgmO4vUuyLs5Bk2FsPuUF5rfIwSp+w9oSBvJI=,tag:V/BCwLeAnIJiesCylTFcdg==,type:str]
+        server9: ENC[AES256_GCM,data:ZJvYGC6zQkWSKgeDObBl18E2OQCq/YpUtTZrnj8AE1s=,iv:s1D2BiS3/fQEOdnQ0n+6N9WQwyaNR+yDochymGkVlKo=,tag:ZzZBGVkwhsIlWIrDqUtveA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -32,8 +32,8 @@ sops:
            OVRwampVbUR1blJYRzZxQVBKN2lPaVEKQq9YWlaSMR60+eg/B9roxVTrODHdJxdt
            JwS26xvZ1uAFZhkzNXImCLImeM6x3dbtsP+Rhbqdps3AyDCIr4GXLg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-30T23:19:58Z"
-    mac: ENC[AES256_GCM,data:tsdOPiApzDgDPqqU9w2xGQEMoA5hr9+ZZQFCwCIjPm9e93y5DJjzgymhWUr0M4GOa+YNG8vqbd43VDb1AXzC3nD/Nf6va5MI46Bv6e1Yrh447Vcc9C0UNVRIRD1mDQtr/wQbRsnVz1fSV0n1ysg9zfE9PdshPHz7mMD2WZb23Xc=,iv:N/aGay45PWGRSWpS3VNnWKyexgx1EjF1MA73LMq8hUA=,tag:5WCIwZLgyO6wbNswaZnyeA==,type:str]
+    lastmodified: "2023-11-11T22:41:25Z"
+    mac: ENC[AES256_GCM,data:nbi940Pr0ZoVj9Ul1Isst54I1EfTzBMB2/POidr94fRmcRIhk7P8i1KSnViP+h+Cs0sLrSgDmHtVR6g2zCJWkgGl0UmWK/6yRE4w/CyqoCCCGrEtwzjtqdekpkVw/2+P9BYXB6DadnUOX892l/nhN4FrbT+SWAjaQbJocXtJUlw=,iv:Fl+CZ+zPZE7p6Rv6RIOvPfX5HYdszQMbE6rbkE3OFRg=,tag:2UocM7DgMfndRRxPxjr2HQ==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:36Z"
          enc: |
--- a/hosts/mastodon/secrets.yaml
+++ b/hosts/mastodon/secrets.yaml
@ -7,7 +7,7 @@ mastodon:
 restic:
    password: ENC[AES256_GCM,data:chAXIgrx5xoy3+s2m9Kb2BjQhnAqMp2AcNNi1hTFB70=,iv:ZzfQqv6iAp3gh/jxqMI69uN7jpu+88hw/O6yYCZ+Z58=,tag:mQCL26Y/KjH9Eu279v6rxQ==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:ifoY4cBSgKAJAHPqMZ/BYb/l1BfE5usdzoTQtis3G3+OWjfkJLy9Gl5eHfkYYq3i6wJU9F6Iiy5XF7WAZ+PVof2QZG7qgelL3Je1i0vhMkbrFw/SzdagDUSp80PeSeaNsLsY+nUn,iv:ngCs/ihTGM0s1vRP+BBXBy/G3GxGq44tpSvfKMYJopg=,tag:UlZ73COEpqYKMlNvyls2BA==,type:str]
+        server9: ENC[AES256_GCM,data:u8IPMCQmVjJ+C3GPWcrfOI/AVAvdLKZU01Lx7Ibsf7hFJFNbRpG+bSOhKbLXxFOmKBuA+SMrchBqbCDexpp3PpWpzXNGUv8KrFivjBdgN044tRLz6DWMH8wKAKvoh7Bey03ALom9,iv:0h/Dra3Ph00VIBwOh6G37iKKvpUWNTsWJmjR6KvFT+g=,tag:uFN70Bg3UAY+RgJX1HhdpA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -32,8 +32,8 @@ sops:
            VHVUSnJScGxiNkZzWVJjcEpwcElGZ1UKWc3YkbI020m5jG65fb4H/K2k0P/gvf26
            BuiCWPt29GEgekrj0CKtO1MZRJrbxDTGgpPs07SpqEIZWj9R5n9wyw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:23:53Z"
-    mac: ENC[AES256_GCM,data:O0dZOxE7umo+NCbmc1MOA9Vy7lbpVm/20nE9NjlETYX+meUgF1GLYPdzyZuePRwzvdNOrCGTBjYatuSBsBwPj4A7Co9/51AWbQJXMwJUcAxd30+eCSvEFiAt0qy6DTHxokE2bMKmdgP/Zh3LQy+ZWp5vY/Ua44SsJ5ldBltT/k4=,iv:e/NKsQjbW5gHJFQ66iGXJ5/MCBXdIVvFamLg2PGg4Cw=,tag:WiQN28AAIj9f/CnajJICnQ==,type:str]
+    lastmodified: "2023-11-11T22:41:34Z"
+    mac: ENC[AES256_GCM,data:K70YWwWQJGe0in54t2VgXdELe6D5v+JY9oWsoGa3eregqay70lJcvG07hMS+jDGx0lOkVXnwi0eOyGJ7+iWxSuY74GoT4H7qxfFtnUXiWkb1kXKtdmZS+dHeRuDuEY9b5n13VALp4uqukhhXeXKvGJGVZhbQuj/96vIyAK6HOvc=,iv:m0lonNMsK/h1Dc8CIPyPYuh7mrCzzJzgJwQO5JGh9vw=,tag:xaCck6+qP2r6afBvfzW3Nw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:38Z"
          enc: |
@ -173,4 +173,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/matemat/secrets.yaml
+++ b/hosts/matemat/secrets.yaml
@ -3,7 +3,7 @@ nginx:
 restic:
    password: ENC[AES256_GCM,data:ERBTYAMLZjBuQ7kbMRhsiUZAENBC/Yb/Ly9NV9mpBl4=,iv:V5zGRTioYEAFXUuPAtmyAG3vRDnB1zEivIMGdPww9uE=,tag:PrkyForMSeNzSz89n/CaVg==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:ByBxo6lckBsNZVomLsCkqT1xCeWndOW9BD+4f4JgAg9Jzl9F164GGZw3DcN4sFuqnZ8EiF9qFhk2j+ZY14h0xgyNPNPqn694HtZL5VThuucl1YfXp/IxzTrjj/Ro23X089hqfw==,iv:YBe9bmi7CFSmvozhaW8mhmDW4FO7UqSxJafRHIJN2YI=,tag:xFUdCP7SYW3nsRMIBkS/yg==,type:str]
+        server9: ENC[AES256_GCM,data:QHcL8M6ZTYi0oy7cGBZwBtV3xN/dpT7afRaOTsoLuGmiut5Ip+47dDFSX64t0HeqrAnNG0M33KpH10GMWJJWBKa60paeBedb+PPhyjtGahm5EL/RlhtOtuEUsmf71J2NN8wzEA==,iv:SeYIorwBVQqn1xwZK2+L9ZScODvHJHxVIaV/kl72RKU=,tag:pgDdmQY1FvhiDn7uwrYe5Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -28,8 +28,8 @@ sops:
            ZHdDWXFHYVY4ZGtNcHdGU2NZd2ZOT3cKNYyCVHlkJUVFALKFKN6wQg3u/tqMfFeH
            q9ebHX4UAp61XHrrWdCGHOVgGZMYCwCMrS0oVYmlGuK2oClxRzQOzA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:27:38Z"
-    mac: ENC[AES256_GCM,data:scap6IH5C4bNe3prDaSA2VefN4bdRVXVnE9+0dsvUf0yum2Zvyo+c3tg7NLheFfi+7kpJNBJDqwvqdpx3h3GkU50QBY6EV7H40ObFXbQUr/CcahP8suBxZdRalLB8xhNferDoy0Ys0mv3U8HtnN17fpmhZ3Lr40xq22wrcWg790=,iv:wCQzoh9RY+tIwmI9Y1xSCY6n2yDz09gRqTf7NDIFr1o=,tag:3nI7LFy1k1G0rn0453uVCQ==,type:str]
+    lastmodified: "2023-11-11T22:41:39Z"
+    mac: ENC[AES256_GCM,data:UcZnk2iKavn/KQXYtibXIy8IV8q2SwHWBDXgES3LKrmUGnafLZgC1307X7H0WDDTrw5FzLMbasBzJ5lAiJ5Cu4HQ7OtRoIxqMVv5Wga+6+pxPVcLjlH4sSN8rfdZTHugyqMQsazrGJwnnRHQiqrEkUyrYqQfVpsYLJGFCdLN8WM=,iv:UB/Bm1rondYJ5mCHJ0W/iu+WYbEo8ZdfN6rvTNGYwgY=,tag:cPeJ230658hkCTklBG7WUw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:39Z"
          enc: |
@ -169,4 +169,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/matrix/secrets.yaml
+++ b/hosts/matrix/secrets.yaml
@ -8,7 +8,7 @@ matrix-synapse:
 restic:
    password: ENC[AES256_GCM,data:TjvEKs9ZMF08kH2L1M2zZvlM1B5itvNtTiLi2w9exyc=,iv:BXgRyVlZkOt7qUVxmuvqLmOBPHmlEGtbr/0gagd5FHU=,tag:6hZKzBfUBpiWhAVFjXe5UA==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:9xczasQYnu6l/RPBoGfe1LKg5s1HjzHeG9P9xEvv69yB+65+9lGYuexsC0n6+TU1e2AwhuzFbJ90hCVwIPfgLv7AmO68h3QOjEM6WPDOePj/tPAsiA3RWvdq1cAWhS205pY=,iv:oQotqTLh5C+842/7E4yG+tnZ1Rp6+4Cr4x5Tbqokd78=,tag:Id8i/she3k0r7ACTNttorw==,type:str]
+        server9: ENC[AES256_GCM,data:RrjkLQF71LjN+xJTVAlRbzF+WCzCuyfYIfMGNAiXhs/+esaxUyWneNZkXiiWkpkfO7bj9hd9fMu9LKjD9KPqtRe2moaEFMoisxp4YU5S8apqEhOi1kDV72/43uBvhpEYr0U=,iv:8qqfisk3Y8Dd1FljsV9cwqntQ2V5TJz5vzAWFqS61+0=,tag:TAN1pE9p/LIxUczxUCajDA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -33,8 +33,8 @@ sops:
            NDlsdWF5UDQ3N1NVeGxNaFZoSkZ6N28Kf1V+Lle3WfxsDjZCSqloKTelK5EsVAqT
            bUtYszi13nAaxt968s+VLGiLPOjDcwHiCP8oeDwpNGlRuqkoNiczog==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:31:45Z"
-    mac: ENC[AES256_GCM,data:336Tw3RyMmjzZRMvjJXASrRSHpZf0iPpA1MMZ+Oyw0wNZlCNWlw1fJJpyb6heQQJTz8lWZK6pbGMhOQQU1WAywL7xbnFbuPcMrxUCpBiukq31WGMHjLUJQiHNVQJ+YOvD+jC4ovwaFPENbO3xaYig5PGyC6Txuwe48AwhqUSTbM=,iv:AX5K5U7GqJH19e/Lg4PfWSVTQMzqzK0EiYOT8wnHL0U=,tag:eklEckMU4XiV54llxFKmOA==,type:str]
+    lastmodified: "2023-11-11T22:41:45Z"
+    mac: ENC[AES256_GCM,data:fevb4mdRHzqine/7eZfWC1GlOpJtNk3H344kQdm9EJhDIt8LrVRGDoFxk4T/ZzGFqm+Ki7N2sLn69cle8/71QfsTp7OrkbDz6qSuTY+2+z9W7tHI6s2UYNfQxfAjEiHuxfPikSPzLSX/ANKiJCskXN+N+dYg9XPXdyx9z/tUyhw=,iv:9WSgf/y236WOq5vJOo2clmVQuXCbPg3B8mTpZ43ZzTQ=,tag:H3lYp40pH4M5zrALD4HMtg==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:40Z"
          enc: |
@ -174,4 +174,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/mediawiki/secrets.yaml
+++ b/hosts/mediawiki/secrets.yaml
@ -6,7 +6,7 @@ mediawiki:
 restic:
    password: ENC[AES256_GCM,data:FwzTzJysad41gnMooiqPqiwveTfikSkA9+G5kYjdj78=,iv:EiEPWQBT5hRefkqTRhKOdtx+HK+634A1goCX7GSeOKw=,tag:MSlshF1SRsnSTANEcv40JA==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:V4ETiNiSQcBjCsV+Ku/QjG/EgxlNCqOjnRdtTT/UDXGQ9u4fARR0Kh7cB0vl7jtj3DNzEXykNSGnaIcG3ql8SjfEmSwUJWtN3z7TdfxBqFrC0bZEKBa+Mgy9V/Pv0u+4Fj2gWk/8v2I=,iv:RCUevFpT2AHMTYkMZxksshKCEifSb8geCE/ZVVzrN40=,tag:dGBW3KL3XFMQy/cQ7EyLNA==,type:str]
+        server9: ENC[AES256_GCM,data:V2OaKcXpYFX27/YdWxZfceZhCqwU41K4FFvt/kmL8QxvRikIiPaLdu/rzNPsRkA0Oka/k2G3EsIZcZqZ2UH37VybnMmSZSbMJ+dSTJ5YfFLgEdR73Dp9ihEZdTq7MIGI9zUMb3EbgFM=,iv:4/W9dZz0bqtffStKas23WIbHCvgXxZIDpZgbB3ELzk4=,tag:NMEytxoMUr0/E3qzvVo1Fg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -31,8 +31,8 @@ sops:
            S0ViOVVmb1lBTUlWdEUva0h2dEIwRjQKSQS7NAoKkakIj51wPvHaceMg/5R503Bx
            Zfm550OS4uI7Q5i2FhNUHbyqYAzjx8c26MPwwRB8sxH3GCRCprAe9A==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:27:23Z"
-    mac: ENC[AES256_GCM,data:mK3GnfC1CuL4HXK+c4qbbN6fkxYqSsiaE5Bgfcb1JxY0e8ZcOacdwyR34RR48iKDsmCZdfD+M2qjdh107FngCzw56VJreju3GaOw637Vskg/4jYuwzyPZpUArzwDZsyTJOeapvFMoFRHsBcXPWdlkmxb9fDa7ZG3Sj5dC5JYAlY=,iv:HjdcAHHzZBgy39VezdzMacD5e648F6hyrp6lj9AQrgk=,tag:rWBXJrfkt8fp250iR9aJwQ==,type:str]
+    lastmodified: "2023-11-11T22:41:49Z"
+    mac: ENC[AES256_GCM,data:yXjglwX4ERQaOb9o8PNO+lnCihzCv1aDg/2Nl9PM+M4eGVMDBhHgFwMFjq25ulw87O4R/xOI4ZA4Q4qSktybMHpLaxTFyLagJibHX3rSngasZ1VTZE/JOZZWqevZwxxG7Oa736ZK8BUqzd8RAxnbOdkdOyqRRN5YP+bQDJd4WyQ=,iv:YGYFuKzuTCb+E5ozgAbggBhk5H2rcbf7Vg2TJaRfMNs=,tag:8C7tGRz3zEgrA+Z/UUTeMA==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:41Z"
          enc: |
@ -172,4 +172,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/hosts/mobilizon/secrets.yaml
+++ b/hosts/mobilizon/secrets.yaml
@ -3,7 +3,7 @@ mobilizon:
 restic:
    password: ENC[AES256_GCM,data:VzlrvaX6A/TIPZHrFqQokAIB6nMWTJ1fvlANg+RkNjs=,iv:xcczjX3rDpJAmnOjQ4jvcmuAYAfoR4qRhhOVNZBn8qE=,tag:sI3hpyWOqjKi92oscWBTaw==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:wrqLH4ashixAuwSX9GUjMow6s/T7odfFrlC2SEOHqptaNSjmcQVez63TeZMp00uZiFlCAGwhtEYYLuUHy5/IK9YEkFSVxejzfflJN1fjODlDrkjAoYdeFm4ycRQJNnjXy6aKP68lH+M=,iv:OTcOX+qiF/5bYT2LkzWDoRktxHd3478rjpJ76QEHHwM=,tag:bQuU8DhDGHU567zMhNSaFQ==,type:str]
+        server9: ENC[AES256_GCM,data:8MWH4VeRwOOl+ExCfBaEaJFZNmN53ymrwzlVGe81oemekDwI1o3WHICJqTFGIX3WwMfJ6/P9gHUoDUnPnl+DrRN0FMIRVm80nRqaOtKKpRWKfV0O26Y/WGLh93NkoA9jgGVHBqhVAhM=,iv:ykpF0zkwGhEBRirgSMpd5lCQ575Qh1pFBFD+GiyKuFw=,tag:0IO8s8kIsGdoqDlkEwKs0Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -28,8 +28,8 @@ sops:
            eE5NV1Y5a3p3c2MrNTlJL3NrMXRDM00KIhiEJ1DZHXF5A1bJUFLvCpH9H93d2sFS
            nyDtlZuMKkC8V6cOJmD4lb0HPcsTBlad6oThZmvnn15vqdFAtK+8Yw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-01T12:13:39Z"
-    mac: ENC[AES256_GCM,data:62TeYsWpAuANcAGbAnpK1AaxVJfXV32jdL6pHahjeFK/Z4AHQEeE8UGLDShK/Xqxh8p4+LZA2CTa+QIc81L/RPcvT5SuE/FRoBCjiuv+lQ/TbUS/+dKvhfR/MPR47IckCNJf4eUsiGJ9P0v5BrgxN5LlJKYNtnVzTMKp1DvrD0k=,iv:7T+XAcB/q7TMzZZA5WR/+yHT65nJXKmRSiI5v5cx8uo=,tag:vvMJ58SLewcIHWxTkTa/dA==,type:str]
+    lastmodified: "2023-11-11T22:41:53Z"
+    mac: ENC[AES256_GCM,data:xX87z5dHL6g+kQTZ1k4XE8I7gPvDZ13wk8MnHgnw9ISAuozLY6fZmrEzRUN6+6Fry/fKrCvrZVyiwrJ+4mRkrjK0kDhO2dmDVuaOIAGWI9fEqaQ13vQ2D3D8vo2PiF4FfmZSeoxwHAOgsFaCGwqV/cqwA5ihlRYAOIaBP4JIkPg=,iv:LwwwK91BOJr1STjGPhpUhnNPqjxddP+ANS9qjvsAt34=,tag:zPkzkTwIpS8+kTpYUmfQbw==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:42Z"
          enc: |
@ -169,4 +169,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.8.0
+    version: 3.8.1
--- a/hosts/owncast/secrets.yaml
+++ b/hosts/owncast/secrets.yaml
@ -1,7 +1,7 @@
 restic:
    password: ENC[AES256_GCM,data:6bi025f0sAkl+mmQpBSt6tJe866Tw6r49llKDnyW3Es=,iv:qWRtm2KYU/4Md2wMu8wfVMPQczmtC63Op5FcO5ur5f4=,tag:5bUfIy+j5g035QsnOgmfIg==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:NNlNh+sSN423F2TYuBF0f0mEBUhSV86S5iLnuCpYFUHjsFXReY3d7x7TvakjS2LQTrWfi64FKYRinBAJRakexC+2AT5FTaK0N9Wgv+jNMPuYq975YByXYDDJQAQwLG0wIUmDrg==,iv:W53h+C/+DQTl6hhnm40Z8pbnCMX1zlKww9pxKJObMpo=,tag:da4LNx4mGehcniNjEdMptQ==,type:str]
+        server9: ENC[AES256_GCM,data:uMEOKV1IpnBw14fl2MuxZrEuhv7aDCaZB1CZjCt6Z+II/3hdACizoPBUwajarLMJlXZOQwsVbbGjsgeb1DTv7F2H3B1NyRdpvRubSYMYjBwP07WDW5ySxicR2pWLyyBctVfvHw==,iv:J3iKXBUrqNaQLQIKHqDWTvbvgxqgggwNbB3yG0dkabg=,tag:EgPSeAFhFFMUTUmDA+U9Bg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -26,8 +26,8 @@ sops:
            MlNrMzhNVS9yVkc4U01FVkNhbVllWm8K1MS9Lx5ZNhxcW8omZp8ELPyvtXu7Wowc
            1xVrqMWWxJdud2nOfB8NUxk4ini5V28jsdReGTPcCAtI2L/riJy0jw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-11-11T03:07:12Z"
-    mac: ENC[AES256_GCM,data:hFRVrGULesITXkLXkIZHOE9dnqFnBjrtnEjuVh6CPx+GvsXqDqQUB33okwjfRHGrGkBsz7kBaNxjAtP1/MIjW7J35p8SeKC33C/7j++vjmzAR/CljEqbPXrFV0Q6JE9qLTOYqm+ddpeUm/42oQ6RgXQS8bko+/u/iWZ+1QQmwy0=,iv:H//DQyWXZ01q1TjAgLHN36jMvpZYfTStzpWenCxtd7M=,tag:HW3oWE6gjRB/YXAuf9SxeQ==,type:str]
+    lastmodified: "2023-11-11T22:41:59Z"
+    mac: ENC[AES256_GCM,data:ZYqmfiV97C5UGpGkZS3zx0upkGbeJUXUGYNI+AJoIwU5Ivsfk4qSlaj13V9XF94pKLclUHipDHIyYc0CMMLsXoxbFmRK47pYayj7jng0gk9tBhit4rze0MeMul5d8I0AT6YZoK/Xz6YPYYmzZcC/t7Vtu52lvfz76V3sZWU5n7g=,iv:24kJLLrAILdCclMpXBxeij2aILlh+FnkiI5EKtan3DU=,tag:hNuaQaOjAHDpmmNn4kjB5g==,type:str]
    pgp:
        - created_at: "2023-11-11T03:06:31Z"
          enc: |-
--- a/hosts/server8/default.nix
+++ b/hosts/server8/default.nix
@ -33,36 +33,12 @@
    hostId = "08080808";
  };

-  services = {
-    ceph = {
-      mds.package = pkgs.ceph_17_2;
-      mgr.package = pkgs.ceph_17_2;
-      mon.package = pkgs.ceph_17_2;
-      osd.package = pkgs.ceph_17_2;
-      rgw.package = pkgs.ceph_17_2;
-    };
-
-    nginx = {
-      enable = true;
-      virtualHosts."server8.cluster.zentralwerk.org" = {
-        default = true;
-        forceSSL = true;
-        enableACME = true;
-        locations."/restic/" = {
-          proxyPass = "http://${config.services.restic.server.listenAddress}/";
-          extraConfig = ''
-            client_max_body_size 40M;
-            proxy_buffering off;
-          '';
-        };
-      };
-    };
-
-    restic.server = {
-      enable = true;
-      listenAddress = "127.0.0.1:8080";
-      privateRepos = true;
-    };
+  services.ceph = {
+    mds.package = pkgs.ceph_17_2;
+    mgr.package = pkgs.ceph_17_2;
+    mon.package = pkgs.ceph_17_2;
+    osd.package = pkgs.ceph_17_2;
+    rgw.package = pkgs.ceph_17_2;
  };

  simd.arch = "westmere";
--- a/hosts/server8/secrets.yaml
+++ b/hosts/server8/secrets.yaml
@ -5,9 +5,9 @@ ceph:
    osd.2:
        keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
 restic:
-    password: ENC[AES256_GCM,data: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,iv:hugiNEzepAQV61yQZG6Soz/Q2QjB9piTxcagJgT+A7w=,tag:oD+BxijXE0/o3ZVDjrErFw==,type:str]
-    #ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
-    htpasswd: ENC[AES256_GCM,data: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,iv:Wqmt+KfxjxzBDYsHqQzFdzomJppi0Bxfkt8rkD34Hhw=,tag:BFZKhTovip6ftWznVAXBdA==,type:str]
+    password: ENC[AES256_GCM,data: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,iv:/n2o5SzpMDV9K3v/yIFWJMQ+sWYdx78VJbx3VQqUmro=,tag:8k/QkvPeopSfbOCW4pBR0w==,type:str]
+    #ENC[AES256_GCM,data:IUjVlOjlNF8JW/jO4FvSYhq8C5IuIQPP1tenHvHb59kGVUFhG2GGhfsG7c7ru1912JoA,iv:FPApdF32v3GrSO+n21LXpNSFZ6o5eyKweKnA07OVltE=,tag:hjNMsITlnZ+fa4fSblRJcw==,type:comment]
+    htpasswd: ENC[AES256_GCM,data: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,iv:Ut/RPDLSD+h6PedgAJTZzIScq3LQAK+5XqUw2n4Kr14=,tag:68eX9N7EprJyIB+VAVgqYw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -32,8 +32,8 @@ sops:
            YkFTMU9wNmVYV3JFZDNBZkJOV21qVFkKY0jFwlWgPjSQ/xbpPWBefNS0PCj04cbI
            gUugVd6KbpwcGbK4BZc52SyyBdf9P2ASBXCSZNU6FVIWKUNWHiYblg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-11-11T02:59:50Z"
-    mac: ENC[AES256_GCM,data:9sCo9ePlJRK/dXDc68SxKJ/GnSK3BEA26Zf43RH3VNHVn6DV5C7hEKxk/Jav5gkzl7GM1/9bFNC+06NfaxdFi4l8sPrOUE7gLb90eAKdDjBqrbocSxHlwuzNTPURGGpkwEyJiZxv+g8ahheQ/fOrw9TR1S/A7j+ZT1jD9gaIlnA=,iv:ksBCqnw66Y0p4UY2IjjMBLLLa8NpDdtGGCHOrRHHnhc=,tag:8kS2NLnF+Q94eGAqCKnJ7A==,type:str]
+    lastmodified: "2023-11-11T22:42:37Z"
+    mac: ENC[AES256_GCM,data:bK3uYJyDfWU4Pc0nVxBWJteZP9EJRJt23hvfWWSrNA6M7gRVnAt1HxHSfbZdt8zbpVl19dhnBVNz7xJ16UHZIyRjHQGBjKSY6vubYOg7gk9JZcqRDm0eRq1giz41TtyNo9VLK7vaNQ031/BHSqzNTFTarPmsQmLR9OqcuMprZpI=,iv:s8eIESqodobyjoRVtRz/Rnu4Q7Pevu55I/znVDcIPzY=,tag:kbWBzRHcejKDrZQPmH3T+g==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:54Z"
          enc: |
--- a/hosts/server9/default.nix
+++ b/hosts/server9/default.nix
@ -44,11 +44,33 @@
      rgw.package = pkgs.ceph_17_2;
    };

+    nginx = {
+      enable = true;
+      virtualHosts."server9.cluster.zentralwerk.org" = {
+        default = true;
+        forceSSL = true;
+        enableACME = true;
+        locations."/restic/" = {
+          proxyPass = "http://${config.services.restic.server.listenAddress}/";
+          extraConfig = ''
+            client_max_body_size 40M;
+            proxy_buffering off;
+          '';
+        };
+      };
+    };
+
    # reserve resources for libvirt VMs
    nomad.settings.client.reserved = {
      cpu = 2300;
      memory = 16 * 1024;
    };
+
+    restic.server = {
+      enable = true;
+      listenAddress = "127.0.0.1:8080";
+      privateRepos = true;
+    };
  };

  simd.arch = "westmere";
@ -63,6 +85,10 @@
      "ceph/osd.3/keyfile" = { };
      "ceph/osd.7/keyfile" = { };
    };
+    "restic/htpasswd" = {
+      owner = config.systemd.services.restic-rest-server.serviceConfig.User;
+      path = "/var/lib/restic/.htpasswd";
+    };
  };

  skyflake = {
--- a/hosts/ticker/secrets.yaml
+++ b/hosts/ticker/secrets.yaml
@ -1,7 +1,7 @@
 restic:
    password: ENC[AES256_GCM,data:8tkLinaHpUCCLeHIUZhTJF3XR12FZ6MjZ+c4mVz0Sp8=,iv:qQcKp4+S0xQy0zyj68cncD5Up+tzrcgEZcues6OYrq0=,tag:d6biQlg8NqwKUxkNCDUXhQ==,type:str]
    repositories:
-        server8: ENC[AES256_GCM,data:DMz0J8rKxy1vLazI8fv3R/OFJ0Yc8zu0CzmZOwVkfndyNsbGyZFqgOh02e0yVgU6PnsPPKX8PMXbA+9dDfJWMXyk87oDeORCRQ/wUibPsB7pDTTdpFq6UIyNWJ7KISV/nPs=,iv:XrxQBrtsbl15FduHPhRrrmoM5wVbir7C6jIQBJF2i1g=,tag:oqELIVGyXR3d9C+BcUADQA==,type:str]
+        server9: ENC[AES256_GCM,data:o1WM4jeHqFLRkMRkIKXFkoXrbnzvDRhcU97OZvtHlZKWiCdN06MGpmTIKochX6dr4JrEbwbOubVDyv7CYGt4s85dVoR9kVJBwipiAhiOuth7a212r8MW8QdKVA4Mv4Ore9s=,iv:O/68bOk71Ju2Re/zGtUIl2v1lUMfSmBEfuMga0ZWT9M=,tag:EFhR54eoKt21jzc0uL0Btw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -26,8 +26,8 @@ sops:
            bHI3Kyt6cWhHdEh6bS91em1IWGNGcVUKTEtM6diCmPD3556dSP9D1SqyPY0VSvXl
            xzvaoCroN5lbSV9fwwV139s+fpENQxXjnek+ycpKGm++HG8hc5BSgQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:31:54Z"
-    mac: ENC[AES256_GCM,data:YsMOY2oyekLKt36mBhOaNThhqPNhlu78Na+iAQiX+lsKgbmzMklhiRJy1rQWyetWv60+TmUNRuFvQxrE2jhBHXudqEs0i2IF6NjeX972O+yUQJRxc4c6ydznPsMw8P2TzraBC1EQvycqTtQsalIgI9fLGXObTjQ/+0ENagE76fo=,iv:5APAXIXdz8L07OWo9v4q27+3xxr+hEML+BUhbqN8gPQ=,tag:65zmcCoAF1nonFyLry7IRg==,type:str]
+    lastmodified: "2023-11-11T22:42:18Z"
+    mac: ENC[AES256_GCM,data:Rwmyz3r3X5PCnWwLSj+O9VN5T8HAOWinJ28Y4XfIo9tiKFEDNRHO6WxfnzWhOpikrm4AJG12/QYq0cQj2b1E8uYqTPsbKtB64XrmOFaatZgsnJpTRaMoyjJBfIrzhZtqnPspzcFUMl/SWLr/8BBtwWKOPZJWt2SLl5xHGG0BZYY=,iv:Gdiet8VpNg+2hHOlwV7K/Feh65KvBWT90Ahn8Y1gUHU=,tag:rqbVWtn4ECltJJrmje1vOA==,type:str]
    pgp:
        - created_at: "2023-08-08T22:43:57Z"
          enc: |
@ -167,4 +167,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
    unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
--- a/modules/backup.nix
+++ b/modules/backup.nix
@ -72,8 +72,8 @@ in
          };
        in
        lib.mkIf cfg.enable {
-          server8 = commonOpts // {
-            repositoryFile = config.sops.secrets."restic/repositories/server8".path;
+          server9 = commonOpts // {
+            repositoryFile = config.sops.secrets."restic/repositories/server9".path;
          };
          offsite = commonOpts // {
            repository = "sftp://offsite/${config.networking.hostName}";
@ -100,7 +100,7 @@ in

      # relies on defaultSopsFile
      "restic/password".owner = "root";
-      "restic/repositories/server8".owner = "root";
+      "restic/repositories/server9".owner = "root";
    };

    system.activationScripts.linkResticSSHConfigIntoVirtioFS = lib.mkIf cfg.enable ''
@ -113,7 +113,7 @@ in

    systemd = lib.mkIf cfg.enable {
      services = {
-        restic-backups-server8.serviceConfig.Environment = "RESTIC_PROGRESS_FPS=0.016666";
+        restic-backups-server9.serviceConfig.Environment = "RESTIC_PROGRESS_FPS=0.016666";
        restic-backups-offsite.serviceConfig.Environment = "RESTIC_PROGRESS_FPS=0.016666";
      };
      timers = lib.mkIf config.services.postgresqlBackup.enable {