Move sops secrets into nix-config, move hosts under hosts/containers to hosts

.sops.yaml

@@ -0,0 +1,107 @@
+keys:
+  # The PGP keys in keys/
+  - &admins
+    - A5EE826D645DBE35F9B0993358512AE87A69900F # astro
+    #- 270DAEB0EC5A129CE1F38E2FCB5009A2DB4C5190 # blastmaster
+    - D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A # deployer
+    #- 844267BA729E32B3329B9DBF59E238FC65F349F2 # eri
+    - A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9 # winzlieb
+    #- 9580391316684474BFBD41EC3E8C55248C19AF2A # xyrill
+    - 4F9F44A64CC2E438979329E1F122F05437696FCE # poelzi
+    #- B2918084D9BA194C66AE78769E5D7AAA5B6B2D79 # schmittlauch?
+    - 4B12EFA69166CA8C23FC47E49CD3A46248B660CA # vv01f
+    - 9EA68B7F21204979645182E4287B083353C3241C # j03
+    - 53B26AEDC08246715E15504B236B6291555E8401 # sandro
+    - 91EBE87016391323642A6803B966009D57E69CC6 # revol-xut
+
+  - &polygon-snowflake age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c # polygon
+
+  # Generate AGE keys from SSH keys with:
+  #   nix shell nixpkgs#ssh-to-age
+  #   ssh-to-age < /etc/ssh/ssh_host_ed25519_key.pub
+  - &glotzbert age1zqpep2vgfqeyvtj2jpxczfgrpjffwda429rnuztfp0vpqsrqdq8s8f4yua
+  - &radiobert age1lga6hjmxa95fmtdn3frlmy64ej3hyswxrcuz25qvw0kfsxkqeugs8gjw8q
+  - &blogs age1lccjvj9z8de4hfrdeumm9eu7awef4d9jygv3w7zdash3fhv6e53quy53wz
+  - &dn42 age1726t33dl7pv3xrxxlafj2sexh7c0jm8pza84yu6l3wpz3fw5dauqxlass3
+  - &storage-ng age1qjvds58pedjdk9rj0yqfvad4xhpteapr9chvfucwcgwrsr8n7axqyhg2vu
+  - &hedgedoc age1jt5pj0c0fvmzg7quaucq4n2rzcx9ajzstp8ruwc8ewjpay5vqfqsdjaal8
+  - &hydra age1px8sjpcmnz27ayczzu883n0p5ad34vnzj6rl9y2eyye546v0m3dqfqx459
+  - &mailtngbert age1lgjvtszpds9flpwsstxdht00c7zlk3mz7nlc5qftyt8rhfdm330qqmhl72
+  - &freifunk age172fqj4agvdnh379n2ysarxy2pq9lupu5d7d0g2v5fw33fkqkte3spae2hu
+  - &oparl age14aq8fscrwkgmu5yv86vj7p7kmxclzs6dp7fpvdhvrnmce83ztphqc4mr9q
+  - &mediawiki age1xjvep7hsnfefgxvuwall8nq0486qu8yknhzwhf0cskw5xlpm8qws9txc56
+  - &broker age1dj0d0339f4law7qvuzcv2fs6sf8why63s3l8tja0f8vsj7wefcds9drvte
+
+creation_rules:
+  - path_regex: hosts/glotzbert/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *glotzbert
+      - *polygon-snowflake
+  - path_regex: hosts/radiobert/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *radiobert
+      - *polygon-snowflake
+  - path_regex: hosts/blogs/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *blogs
+      - *polygon-snowflake
+  - path_regex: hosts/dn42/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *dn42
+      - *polygon-snowflake
+  - path_regex: hosts/storage-ng/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *storage-ng
+      - *polygon-snowflake
+  - path_regex: hosts/hedgedoc/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *hedgedoc
+      - *polygon-snowflake
+  - path_regex: hosts/mediawiki/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *mediawiki
+      - *polygon-snowflake
+  - path_regex: hosts/hydra/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *hydra
+      - *polygon-snowflake
+  - path_regex: hosts/mailtngbert/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *mailtngbert
+      - *polygon-snowflake
+  - path_regex: hosts/freifunk/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *freifunk
+      - *polygon-snowflake
+  - path_regex: hosts/oparl/secrets\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *oparl
+      - *polygon-snowflake
+  - path_regex: hosts/broker/secrets\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *broker
+      - *polygon-snowflake

flake.nix

@@ -53,7 +53,6 @@
       url = "git+ssh://gitea@gitea.c3d2.de/c3d2-admins/secrets.git";
       inputs = {
         nixpkgs.follows = "nixos";
-        sops-nix.follows = "sops-nix";
       };
     };
     sops-nix = {
@@ -432,7 +431,7 @@
         auth = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/auth
+            ./hosts/auth
           ];
           nixpkgs = inputs.nixos-unstable-sandro;
         };
@@ -440,9 +439,9 @@
         broker = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/broker
+            ./hosts/broker
             {
-              sops.defaultSopsFile = "${secrets}/hosts/broker/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/broker/secrets.yaml;
             }
           ];
         };
@@ -450,12 +449,12 @@
         freifunk = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/freifunk
+            ./hosts/freifunk
             {
               nixpkgs.overlays = with secrets.overlays; [
                 freifunk ospf
               ];
-              sops.defaultSopsFile = "${secrets}/hosts/freifunk/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/freifunk/secrets.yaml;
             }
           ];
         };
@@ -463,14 +462,14 @@
         ftp = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/ftp
+            ./hosts/ftp
           ];
         };
 
         gitea = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/gitea
+            ./hosts/gitea
           ];
         };
 
@@ -481,7 +480,7 @@
             nixos-hardware.nixosModules.common-pc-ssd
             secrets.nixosModules.admins
             {
-              sops.defaultSopsFile = "${secrets}/hosts/glotzbert/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/glotzbert/secrets.yaml;
             }
           ];
         };
@@ -490,9 +489,9 @@
           modules = [
             self.nixosModules.microvm
             {
-              sops.defaultSopsFile = "${secrets}/hosts/hedgedoc/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/hedgedoc/secrets.yaml;
             }
-            ./hosts/containers/hedgedoc
+            ./hosts/hedgedoc
           ];
           nixpkgs = inputs.nixos-unstable-sandro;
         };
@@ -510,7 +509,7 @@
             ({ modulesPath, ... }:
             {
               nixpkgs.overlays = [ heliwatch.overlay ];
-              sops.defaultSopsFile = "${secrets}/hosts/radiobert/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/radiobert/secrets.yaml;
             })
             ./hosts/radiobert
           ];
@@ -521,7 +520,7 @@
           modules = [
             self.nixosModules.microvm
             self.nixosModules.nncp
-            ./hosts/containers/nncp
+            ./hosts/nncp
           ];
         };
 
@@ -547,7 +546,7 @@
         matemat = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/matemat
+            ./hosts/matemat
             yammat.nixosModule
             secrets.nixosModules.admins
             { nixpkgs.overlays = [ secrets.overlays.matemat ]; }
@@ -557,7 +556,7 @@
         scrape = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/scrape
+            ./hosts/scrape
             {
               nixpkgs.overlays = [ secrets.overlays.scrape ];
               _module.args = { inherit scrapers; };
@@ -568,10 +567,10 @@
         dn42 = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/dn42
+            ./hosts/dn42
             {
               nixpkgs.overlays = [ secrets.overlays.dn42 ];
-              sops.defaultSopsFile = "${secrets}/hosts/dn42/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/dn42/secrets.yaml;
             }
           ];
         };
@@ -579,7 +578,7 @@
         grafana = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/grafana
+            ./hosts/grafana
           ];
         };
 
@@ -592,7 +591,7 @@
                 inherit self;
                 inherit (inputs) hydra-ca;
               };
-              sops.defaultSopsFile = "${secrets}/hosts/hydra/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/hydra/secrets.yaml;
             }
           ];
         };
@@ -603,14 +602,14 @@
             self.nixosModules.microvm
             "${tigger}/module.nix"
             { nixpkgs.overlays = [ secrets.overlays.mucbot ]; }
-            ./hosts/containers/mucbot
+            ./hosts/mucbot
           ];
         };
 
         public-access-proxy = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/public-access-proxy
+            ./hosts/public-access-proxy
           ];
         };
 
@@ -618,7 +617,7 @@
           modules = [
             self.nixosModules.microvm
             ticker.nixosModules.ticker
-            ./hosts/containers/ticker
+            ./hosts/ticker
           ];
         };
 
@@ -626,14 +625,14 @@
           modules = [
             self.nixosModules.microvm
             "${spacemsg}/spaceapi/module.nix"
-            ./hosts/containers/spaceapi
+            ./hosts/spaceapi
           ];
         };
 
         stream = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/stream
+            ./hosts/stream
           ];
         };
 
@@ -642,7 +641,7 @@
           nixpkgs = inputs.nixpkgs-mobilizon;
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/mobilizon
+            ./hosts/mobilizon
           ];
         };
 
@@ -650,7 +649,7 @@
           modules = [
             { _module.args = { inherit nixos; }; }
             self.nixosModules.microvm
-            ./hosts/containers/c3d2-web
+            ./hosts/c3d2-web
             { nixpkgs.overlays = [ secrets.overlays.c3d2-web ]; }
           ];
         };
@@ -660,7 +659,7 @@
             self.nixosModules.microvm
             { nixpkgs.overlays = [ secrets.overlays.mucbot ]; }
             heliwatch.nixosModules.heliwatch
-            ./hosts/containers/sdrweb
+            ./hosts/sdrweb
           ];
           nixpkgs = nixos-unstable;
         };
@@ -669,7 +668,7 @@
           modules = [
             { nixpkgs.overlays = with secrets.overlays; [ bind ]; }
             self.nixosModules.microvm
-            ./hosts/containers/bind
+            ./hosts/bind
           ];
         };
 
@@ -677,7 +676,7 @@
           modules = [
             { nixpkgs.overlays = with secrets.overlays; [ jabber ]; }
             self.nixosModules.microvm
-            ./hosts/containers/jabber
+            ./hosts/jabber
           ];
         };
 
@@ -685,8 +684,10 @@
           modules = [
             self.nixosModules.plume
             self.nixosModules.microvm
-            ./hosts/containers/blogs
-            { sops.defaultSopsFile = "${secrets}/hosts/blogs/secrets.yaml"; }
+            ./hosts/blogs
+            {
+              sops.defaultSopsFile = ./hosts/blogs/secrets.yaml;
+            }
           ];
         };
 
@@ -713,10 +714,10 @@
         oparl = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/oparl
+            ./hosts/oparl
             {
               _module.args = { inherit oparl-scraper; };
-              sops.defaultSopsFile = "${secrets}/hosts/oparl/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/oparl/secrets.yaml;
             }
           ];
         };
@@ -724,14 +725,14 @@
         leon = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/leon
+            ./hosts/leon
           ];
         };
 
         nfsroot = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/nfsroot
+            ./hosts/nfsroot
             {
               _module.args.tftproots = nixos.lib.filterAttrs (name: _:
                 builtins.match ".+-tftproot" name != null
@@ -750,16 +751,16 @@
         direkthilfe = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/direkthilfe
+            ./hosts/direkthilfe
           ];
         };
 
         mediawiki = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/mediawiki
+            ./hosts/mediawiki
             {
-              sops.defaultSopsFile = "${secrets}/hosts/mediawiki/secrets.yaml";
+              sops.defaultSopsFile = ./hosts/mediawiki/secrets.yaml;
             }
           ];
           nixpkgs = nixos-unstable;
@@ -768,7 +769,7 @@
         gnunet = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/containers/gnunet
+            ./hosts/gnunet
           ];
           nixpkgs = nixos-unstable;
         };
@@ -801,6 +802,17 @@
         rpi-netboot = ./modules/rpi-netboot.nix;
       };
 
+      # `nix develop`
+      devShell = lib.mapAttrs (system: sopsPkgs:
+        with nixpkgs.legacyPackages.${system};
+        mkShell {
+          sopsPGPKeyDirs = [ "./keys" ];
+          nativeBuildInputs = [
+            sopsPkgs.sops-import-keys-hook
+          ];
+        }
+      ) sops-nix.packages;
+
       hydraJobs =
         builtins.mapAttrs (_: nixos.lib.hydraJob) (
           builtins.mapAttrs (_: nixosSystem:

hosts/blogs/secrets.yaml

@@ -0,0 +1,183 @@
+plume:
+    env: ENC[AES256_GCM,data:V7pEExE5jGT7JSCejzo1m0QlMgpKuaF5CnHvR7LCvTJSgoCeeNW9ImtVk8MtqtoRngH45jgseuC5wZNzXSMG/ltQ4c3ThDcxKP5ngLmEZ3tOqSlIdV/A3S4ww4f/UAx8YpNY4c/LlL9NuCcfpHyC4zwRFrD6odCSk7BUT0BU+zxOBDpQDAHscBz+YYTbb3cJ7iGYg1fXS6wLJHutf0eXYF5VNcc80SISEfbR+bs9t2f7Dg==,iv:3n+EDT9TO5VxCS6rXZiNKpxtCWeCDi6YT3dQsrECNmU=,tag:ysWwxhR1JNJ7WUM28TIQig==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lccjvj9z8de4hfrdeumm9eu7awef4d9jygv3w7zdash3fhv6e53quy53wz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5cHMybGEzSkNJbHMrM3dU
+            Z1JNZktKTDhYRWp2UG42RHRSVWk4ZHd5a1VNCk1YLzBEdkZJcVd4SU8yRzFYcnZz
+            N0JWRFlaNDlmYTRodzl6YzlYSWFvZ2MKLS0tIGIraHBBM3B1Q3pSTHh1NjB1UlVo
+            eFhuZGtmN3doRnJtaEtBQVVXZFF6dDgKbdF6mYi9L5jFRWoQ2gI9cf+gqcHzlTXY
+            tLgbNyHPNgxDdhgZwfEWO2R5RBA6dDQ38FnkoNe7/UHRlkCO/PinGg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYeE55VzhsUjRHYStMN3l6
+            OEtOQXFOVnBGcTBlK1djSlNSemJidTBzNlhnCnBOMnZjSjJFeUI5cytBUFM5aUds
+            TWpnK094Wno0aGttVkhxdmJ4blJMcG8KLS0tIGgrUzRWcjIyS3BpRXcwOU9QOS8r
+            KzVaYjdxMDBzemVhYnVzckZyUnp4NXMKCBgjoBgjhC5s8dvBlo5auBymEXnSXRWk
+            g/dMA2ibHaR90DcAC//Tau9dZU64rxbKqmUXgBuT83yPM0J4FAR3NA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-25T00:52:22Z"
+    mac: ENC[AES256_GCM,data:g6rMFoNx35MN495v1jKB13isssJ3GbKqyI7PdA796leFuRVgAlj6aUBI99vX+SpA1LpBYkUOu6OeV1EOHtpKlchbS4/FnO5oM0AOpoNux9yjQbeC3CM6soUzHn2+cJrnGMlgPC0sX0kcHVTFKF1aJsa+uLlkKD+F1SSJboz+P7c=,iv:i5I8FDU+j7l5UxgurA3Me2b/4zE7W1Ck3ckmQPqKWrM=,tag:gZCL8bo1YVoLZlxjyTupzw==,type:str]
+    pgp:
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ//fXotd1bN7Mu6+/bEq4mSKH83dnLG83iYknGQeoNA/R03
+            O0y+QMlbOlmxdsot7gV6f9Ajnt7FTJmXBuIzo7Ji6lFWSu9ZUKk0JgXNTpap3kvz
+            IQdBv3YTeYuJTJjPZ+xAfftlCbWhDL5kvvEK64QCLi5iLsAdW0wiAwONhgAflsWu
+            UsiAqkla7JDmFRLu7AbybL0WPPIGbBj6eLws0b0VFSe2kxzs0ccgWUXuRQ3044qv
+            jIg+HMsBiyYy8c2U7XeiJkFDBU5FYs69ipq0TukMfds21ow5/gH62PyNX0Yaqcy2
+            T5tdW1N+/bRZYUgpQNusbHI5XO0dw+BXQlwOE3JsmgA2jYKomk/cPPxijrvnRtZC
+            SuViKAtsrjZC4cOWNVtE1Qvt1rSIbvnV5agACypLp/RJv2bQ9zWFmRnhEkO+/j6+
+            +Fe43/Fwc0GPastLWGGUXxWX6/fgXI1vOKWOunKrKyEabatjyyofXtEK27WRaygm
+            wcVPilOkpk3ROmB3OLgrmWt812a2gP5pMIPvVcB8TiVibP6Ope/JpGdvGuQ2pOXE
+            2vst1t8ScEW/NOfwVGVhbhZC21sozv2M7hCKnH00YE8uIFQnlC4GATazYWIx5LGx
+            aNJZ+5BdSeuQC/8/jlbVVjKNZeZ6vvHeEJIq2+zD+s+moun+a70V0BaBwT5zCcTS
+            XgGLutojrUDSR32vBJsIlBZutlb/VDKmEhJ46FbZqmgyEbROs4XXmE1Uarb6KVsc
+            0MwpZc5YEhBqiBxX5WmWpSnnzRyBomqVIk/EiGjUiiUCRsqt33zgNxdyDJMG7LU=
+            =n/8W
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ//WSYieHrh+Ec9cVG+bMikwbfb2hmyxeR80QskX9iWTx2o
+            DwonZfA3gD1Unwixeo7bghFSULGd319+Ojcptr7dV6xHszq/1ex844O4j02JU39J
+            f5hG3flWw+K71b2hdT7kVvMs+FPuXnbMIVrVtUSM5H8KOy29Vu1CDUEzPU0HzeEz
+            KKfGsZKp4sID7KqLMV1wO/yZEL2v4QMcGwPuZYP/iq1FX9/bTp8cQShTm99k5d6i
+            5BO5IcfrFbY4TgtJg9yjz0aGTfnDZ5915Y5hRfc8vevrsvOeEfRzDEHy7C0/qZtk
+            xF70PG29GuULqpYiIzY1HpeDWk52ZuIVrPTtqkrjf7ECxT9LckysLiuJi24nM22w
+            UMilXQVdWVu73OdOukK3uEdHw0skR81x5cgHH/KDmbToIFE+ujA1di+RKBZup4vj
+            dZkb7evi9oBRjFtrvi7Dg7Nz1DB3ihAWBRMp/jwlOnXbpJQc45snRqzsrF5I01zi
+            2xalS7NukeykavqFK3QHCPJmmq7ByiuuVhX9BBroA37oit5f5guM8ohrer8fR62H
+            b/eQEMhr4VRX7OziNO+Uo06rytwirSsdOfEarEN9qd0xqfTibXv95miAraKC0Q7d
+            kDoJE1Vi0gCOHAkmLqP7KlWwD1bNZD3oT6zIPoPxPviay8vh/BHjo/dZ/VUA9R3S
+            XgESoUbaDMYy57oWZ99XJk1vH9WgjSGASLb8LTnlnVXQRKk+jUFO0idKmZI0kEJR
+            veujut++plGF+K2AFDVi7Xc0z8qneVgVbCpCIQ/0f3AIVaqATPbPq+bs+UJfqnE=
+            =i5Td
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAietGjKoVeI7dRI+RnN2RIrRYaKcar7hjEp5OFXsICHGR
+            FIZWtaXJQr0/Ds/Vk6n6Ynwj9vXEgIi6VKKfil/OKuwKcAj0Lh0B+xSyIywyWaEU
+            ghZnf8HXlG4NQ424PEZnM3FbgWP8VkE95kvz7JpG4tAnZsdw2BNLrruW7WLqmfnT
+            TKNf2K2Uja4fEKKymOOsF5m8Ch+W7ZBwZdkwfa+yj510ytDBfxuioKBR+5pmWLBT
+            U5gNp32WwvEK2vmHmKh1HAg2I0DzdelIMWewIs5+RbNMQYqBG1UFEU6Gc1PJLOe0
+            1zc7BTBRPsMDmlxWssxGnYIkidCWkKWVGYNAZP57F9JeAbnF8rBXAzEHiFaXtGxI
+            wdd+6Z61Y9s5r8xlwac8cBw8XbOgQF1rkq1MbaTg52bn2K7Tt9qCvVNASb983l3M
+            yn3AkV6uxcDODX1Fp3DBDY5+xQOq8rRr/VYTLJTC7A==
+            =gHTB
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAoq0Xv9kV5puxY9AYzzSNClxaDoTrADq//TpfSanpZFoQ
+            ji8h6sVWuU5mlXe8Mlw9B2Tra0fJoRJII78YVhn2h+/FEPtEQBZ1H6WxrQj50Ydh
+            EHz8HtDKIZWBBiMaqYnEwhgdHWtbY8sAZXOSmjNON25gp/MAbpjlAlInwkG4AW4+
+            gOq4UZ4WMkziWzIdUiq4y8+4pmZz2AxMj1VGB5jNIp2ljJGKmYPjRtcg2bIz8Ifo
+            I7/7PEac/UChjEqgKeBPVOQo80+1cxNhZMeV8yGtW7izF/Y7E3AqjxH9HYwcN4N+
+            w3lL7Pqsb/EJHjtdPj0EroxCbkXCRHjjYvk0FKX16TIeQ/W7GD1XPit+ACNM9UX0
+            DNZek5GP7QFen7bxIppHjiUvY8BMW4dwXghXzwNgyvt22uYVnPCLFUXBTR1yyNZd
+            8V5QYUvcYdnqCtoBc1P0MBlPDeLsjgeNPE4RMIVE5x5Y7ViMNvzMMsbUDaCZ6u+N
+            abJVsQiTKrgFYMH3anc2S1a0uHsneGeVQ98lCSQOpkAZQQTazAhIBDDPfSRYacL2
+            X3Nj6foYbwkx/Xq3viLYTPOUgOZdbeBS5PHED9Hp0xBngym9+hKuzkkBjKnnzib1
+            ogXVBAY+z6gsVh7/vPMK8MEPUlKyOtBmw32P8whlWUIv5s73JeU7Iszm/07nKCDS
+            mQHUQU2AfTlexyNNnoRrUtCF/X0lFYdpw/6RwZc4ZfwZ5jA2I30IgSLLrFbsRCCa
+            oF8cp4Ayp1NMQF6fb6HeG0vZCO0Bc3O70J35BjEL3G2SE0xzSB2qDS7X0nIHoM/6
+            w2DrDp42jW9+ptoAX3BdF/sBYMULgMUjWkr5KkwDhT3s8vJxwIPJbiMmWTNyKMpW
+            Zi7P5ipGQ24JBw==
+            =Itwc
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ//QrGHh4qNuj4UnHdyqY9U4cr7nfTrlcpS7DxjfxSuBzIM
+            GyONP3igncH3iPChogLsRRntzP1vkUpgxTXSsY6vRO+ptyncHN5NnAhf//dagh9R
+            cCyGC2FIFwaee2zIoQroIdo5NWsp5ZS8qfQTjwVZjy3REwm4AGdG95ucU3tpXgc2
+            pYZi1vcP22MdzTbmvtm7Zh4GJ2JXdFjj6G0UJa6V8NOL7RQYzCtgZI/46UzTgtOl
+            PVwAzeRX0l0G3yTEhn7XE2tjCP6kKOz/7ORzMLF60Vdq6cBOLGKN8NiERxHuy4Af
+            7fqLyE2sO7dCaCdRRlYd/on5tPdSDhu9eU2ff55M2xjEKWZ0Yztxivd/5/DCUo95
+            3HrhAR0yLnbLftvd2ZL8ahXrZrInFKHbGhreHkSKu9/74j47Xy+tl75vrJboUG4g
+            adzx8hrPX+1a1I+tJXSVKtpnFciKKzvHLK62dMetPcJvtldkRcfpY12TPcOvUsam
+            cKAp3hGckf9l5Z3b5q4KLRrQ73VCmxNZ+lF8EuGpFZ5vqLFfG+Y6DyqDS0FNXGyR
+            wBXx+Zfsx5pfBHhVxiXyzHhA3l5YgYkcuqgHYOIZXp8D9P7UE7R88Tm4f/knu7iB
+            9yY1nV4w307QSm4xBDdFcPP0e+39sSrzZrpER5bhwB/D4VAMJVF+J+BbFilwgorS
+            XgG3TJG835a9GbCZX1203DnjeKw59jw4WAhRpuyL2WN/3/y8M7fRWvQFsgQg8WTM
+            pen8p+QyRhpjTNFlgHjFHAeyDaqsZRPjepuC5eMIWtNOYoswnL89eZDJ2rLb990=
+            =GzQi
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf9Gu0JS7KLgGm0Gv83OAw5PqEIrTfqELE9e84WCGJVvoLb
+            UKZwzzPwJNHA0EgH5phKOWtN4WvqJtUXZBFbYlky4FyDyCYBolniG2Bt3dlapYje
+            gB8Oc1+OoMcK04o/jTmrN6XBk/Fsm52+zXS91VN6zmyBiUQRzwEaEjq7c80fXLLZ
+            13nQwKlYvfRcKB0uuWXfIweHjJOuErAtCuDJ1mZGjnXjJBZdOrWJHk9T+yFLxIRv
+            6QkJ2focYDDwPleaAmLasnTgXwGaPg3mMDA+TLbz5G4/pdAiFmeEdysQM986uVJp
+            RpZW2HqOTYxpt66VsSfSuRPg9VhQucGmS/MurG93GNJRAROdyA+ngHCvJcfTnkjv
+            M0AEhOOlX4eIiWPZR5SqVc4RQ8lRiDn90IW7Xx+DUvWadMct2iC99TT7VU45Atgg
+            86TZYUxHzvAEmDrxRB3jQ+kH
+            =shWD
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7ARAAt25Epo+mAOtN81sTWco0wJe7ug5ttw4amOMjgZOYEpIa
+            u5pPv4PBMKsJTMXSht6jWhSVUbNwFcHNdRVhGSz2BI7HfltwsKyd/IwazKC8ZNIf
+            OX1tlQBIRtDFt3uJCxYyTW+PCaFrVQ9hRD/BkohOUBwhr+o2O1to+syhCXObr021
+            GgJwYh4R5yMI8Xg8uOA+pJ0Nfrs2xPcmc1XEWfIoMGWHF6/qTXyM4WtZP0Z2R4R+
+            fbjBYLvecPxtrt/q3hTQAQqspyDgiZv6EYJ0LwIlC/mB9sDYsVn4B32LrVh/VWiE
+            u/8QByU/msAoXdih+1yLaW4CZuQcKjTS5MlkfBph8ThLYUIOtMFYGYRR6g7wp9jF
+            NLR125hMxvSumU9INHF0Fx8M5Rwl0ThcKAxjaNno6G80TcZl91d9M0vbqA5To2bI
+            r84nvDhUpHf1r3XDeq9TKF7uSHGe3XbYJoNV/oqY0s6urdLjfkeyADEMasY3U15Z
+            RNbPzfWtZ0Cc+xspclB3KME1vMf0jdTsZ/NDENZIjDmfkEm9WjsJ00UhiBlCW9CL
+            BfkQr+cY3yl9PR4IuWGtIHhbkf39xfHpPXKvH986eF823bLXwNZMX45Z4qO/vdqf
+            zUxQf7igRXWIrNG0ajlJjc0laDwjF0kj9XliQWaGqXJqRIb13g1KiITejqX1UDfS
+            UQFdCm8iMc+sUHo0xr1H/KsKl5PHMGAPCi7j7QL7ryvZIeBBOiKM6th+Zv5utKHp
+            EM3PoOk60/t5cRT5CvndlJRBvKQc/34bw7WwRZGy+9oYyQ==
+            =qJr9
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-07-15T23:31:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/+MXAF0XruiPUMRxkok5VKbGQ8CEGbMWioZDg3RLAux4uO
+            hJfrlA/BeKmCJvVNB884arkyZo8xIQPdl6dEWMyPvvcwANZivTFaHHZ8vetiEMjs
+            UYb+pM485dogn40stdbfcLXUqXnWq7nGyJ09e4CdEnvcOGnnOpozg11ko/44rPkA
+            Fqly2joKJZJXbeAlJFc1vnmnQxBWZzITK13IfJan0W1IyDHWrLn9q5+O6JgXpq5z
+            8Y73px9ubl2IRU8+3IIJB3Nkp/NywdG6T0uhpFqLXuAkQ193cBA9l8Yrz9h+f8VJ
+            l03Y89lEzAXKW0nsQMm9K1sXR7rRROoEMYelnqhGvCNxlQslIlDSZyxqDlD0yRsy
+            uwKIjRb/w4dIaxF9KxI21xAadNF/pTI2Kz5LQ2xCaStH1QervjQjbYlFBquXr9KK
+            NmHSv/3QD/jyKHQEWLBRfx7fYYyF+SFCp9LGDkkb4Dw27kwPHzJM52f0lKwY0dLY
+            y5/gjFzjUqxTKlOPkPxrDbR7pXkA7IR2oq/6iik8otlUMg32EOG1+Mj5UBg4ggrd
+            lesteD+x/3Op1AYB3NrDEK23+l0Vx06B5MMG4x/iHhgSI3ZdJguKHyXa0YMkkgL+
+            7WI+Nsb2dFlcnVGzCxS5M4QwTPdpfNXihmpo/PpCe3Sjw98+csnDmlGoQMXOyZrS
+            XgGsAxlIUusGvCusw+As/+Gstw7zN17XItmayjgtaNm+x0cuYAqhNe8n8ItP+J4r
+            Pzsm5iqs2mrO68WKNaakzwEvLCreFJComBoifaUHeHd51gT4AMllDwPKmO9CHlw=
+            =UmVj
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1

hosts/broker/secrets.yaml

@@ -0,0 +1,184 @@
+mosquitto:
+    users:
+        zentralwerk-network: ENC[AES256_GCM,data:VeIDGMe0+YF6eLkTrBsQLg==,iv:h7KcZusBsP3QOWZWhOLOQM5ID1fWdvPkoEYLQn3XruQ=,tag:rcd6CiCauV/FQ8Y6+8FEwA==,type:str]
+        services: ENC[AES256_GCM,data:IJlgEkiND/QjMqBbyXmBTw==,iv:sATxB+Tfr9pLqOCY/jwAjcxaKCcgGhd/vga4e3M9N3Q=,tag:TodfF26KquW3F1KY9R9Wvg==,type:str]
+        consumer: ENC[AES256_GCM,data:m1ae+G/ZsDShSEWnHx4ShA==,iv:GBTRpJbSpnRYjWBttVZq1Qm8YFvhKZfmMwhCZqqBLJ4=,tag:/6uDJ6yRBuQwgPMVyXRQfg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1dj0d0339f4law7qvuzcv2fs6sf8why63s3l8tja0f8vsj7wefcds9drvte
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjMTM5QjVHYjhUR3BoRWQr
+            dFp0ckQwamJibjhSSUt6d0tyYUR0QVQzNUZBCmJaQ2ZmUGtNTi91a214cjJOQXBh
+            S1U4bkI1QVNJNFhUK3dQdVRuVEhDVUkKLS0tIDZsSFo5MTBoQjY3N2xIVThUczd2
+            SXZGVDdrOEhoTVVFM0FNd0c4N2M2OEEK1iySJYxNPQWUmTz0HGyaQR+QpE8QBRz3
+            cX1805lK2KsOvlxs109B4VA2kK0zGRdLBKyZO2zD7/2RUIPaLyssvg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLOVhvOUtQdzJwbmtwL29G
+            NWl4Q0EwVXFGUUdZMTFOZFZ5RG53MkpINGtBCnlvWWhWeU85Q0h6UUFIME1FanMz
+            VGh3M2hGeXB0dzVFUTFjV2ZaRUUyUHcKLS0tIFpCdWo4WWRhdUYvcndjUGttWldh
+            RFpaTGlGaEZrb0YxQzlWeENaTWE1QzQKR0a2MYJJKM1lYv7BJOzzb4ppS+BPnoWZ
+            mVmiPq3CEzzzmus61dUd+i9m1uRn5cf1jmaYxV2desDsU8l08ZOnhA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-07-15T23:47:48Z"
+    mac: ENC[AES256_GCM,data:bf9ppcliQSLegGRvBaG7iQA9dczdJT7jgM05T6JI3gtgba/hHwbIXWHBfXC3qdN/btuDrpokZXRSma4mAWTnDIbooyP5quUBMC0TS7lUqn6yR+HmcSohhCJ1TXloTR8B986AqfzgWR7Z3g/JdlAJsq+KKn7y0whWsuMboS7BPL0=,iv:vbGoy6AzqVgr2tr+aJOZBITCDOZpF9PolweuyT+3018=,tag:6t/CYNM3i8oTUB2S2Q+U5Q==,type:str]
+    pgp:
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA6j84+xkv3y7ARAAqja72tbrlSZ0dvbXjQoHSThkoZw4fD9r/qGoHh0WgWij
+            EC8TvA/EQgT0PM0LmeM5sbp1gDNmA4g3GuLWCuHryi5U2GibNDNjmx1eTPR5Ak6Y
+            WgMkP8jIy/X0FxHX1d2Ee7RAYOxc7tkXhTjqCtiesGLzzzRna5Hl1huHbBYGxdsB
+            rmieaRitx7jQFlTaox/Rpk5iNvZwxo+C7XJmtfY9gNn/lYn2lYQW8OATWP5uNhBH
+            jG/II/2K7yQ+caK93C7fOFnzOD4TAAlyyLji/s72guZC5HLC+y3krOxDCaxVuzCb
+            3VcvklJG0fmemVOuAvh7o0jazfEVsPPz2Dc2JFnliLQJzpP6N3I7OWTxNxQO9Dql
+            X3oBY41/17muMGZEkr45rEnhFOajWUIFPgFr+u9q/XusjJ0vJpuGQL2s9UeZpFXl
+            4YJgcS9bHhMUpmhDuLbTPWzSnpcRVTm+BahdrBLBcc1vOllclVySOcgHkil17bCY
+            4ISYBv5XEUt7v1CqrmPm1Kvwl+uAbJ7K7Zt4IJGYU3Y0LrfzUwaa0f9d9pdmI8IX
+            iAGsoJ7HLXka4GQ6eT8qKoBHGUchFHcN8T9/hC6ljuSrbZAD1c0TlC1JRmSdNdRd
+            +dyh+aYGf4xIFYMU8mE8dLq0jeo6+YHPQnK2R6sosgPoZf97laHs9il12/BHTS/S
+            UQG89GQQmyyJYzLipfg/MoT+HU0W8AuCwPA5ZRh5yhbeE8uQaKgYWe4VxTd0pB4Y
+            gzRNbyku5KPuknO0jDPhkcK/D8IVBxQwANrCYwqNh844GA==
+            =fNmY
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA8zMZ+ak7y/zAQ//dKe9+VPLWfwnhq3gNfKoEPy1T/ra0yp4LDVO/qunoNRw
+            Uxt/N8cs6y7MBO2cNAxiEPVT4eBBFjt4m2ziSBZ4fa9jhSBjRp+dM7aNj3ojBZjG
+            v0sTDfebiNGHXSMypLMep5oRSbyKmYL+IJ0UdPCUOicIYYMCs2g3PJW3vwKGSBmc
+            EncWZqQ7A5T6ZBbZQYj7bKFONqsP8IRxKJJ9CE1oRWJOugyuu4NnGUkvBniMINPQ
+            j763R6oRXiSvFf12C3wGUOt82So+om8smBwNYupoYZQbpr7VFJgfAO9j4eLHvbXv
+            ZnaKQupyCW3PcHjtBoduZ4IzRkdfXGwP0oW7XS2/oM5WyKvKu/G949ghHkD2ZNHW
+            daFj3lEq1SqAiDMhyQKsEQpUTeGGKIyGu9pyEHuaSieqTBsLAZAPx/Pcz0p/+0Hk
+            kyjhYbhWFDd1QQezsJqZi7DavKgzxdA7H4uQYEygCXzciFsT3TB3203CLthI6bHp
+            7HvtWzXNfA7JHNYRm3XM1Au9qm/e3RvuX/r+0wDfNIP+9mlXaBnBtIdOenWJv7zK
+            4+PLNSYxLRmm/YimGpSP2dB45lN3wHsyUIzRsiz2M44mkBlCKUFgMBMonSGw3kyA
+            biEuntTQ2rbQvfxDhPk/XNrVBu73+CjcMKpmJ/AzwIEEUmSpQMzrckO0E+ADEyHS
+            UQEIvmnMKBxGGpXakpwcTC7LrQjSWrbzjwBiGqGchoj2mfuKIXAWtjDuyrz9f8yJ
+            o7c4Tmrzdr+KEZLri5kES3Cny+c0zDQzeI/FlpjLgtO4Cg==
+            =65BK
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA45bZkLXmBFpAQgApl5OISWFwp43XBMIJyw20UKl5TL/CpV8ctVD87z4e9RB
+            cbgb8/phlJYMI2RhaDATDFwuKiL5R4lCJoUg3cQsHjg4q/DCyyIDNoXS2dIqT92N
+            y3AqQvM2qOeVX/lX0gDKd2/mb/lQxN2s9/n/HOXDTTvbr68ygKa0YIq7oMhka4pd
+            Zvw9ZUC6q3kU7IrhPB5UFQ2HYqcyTB/ufXAk0FwedRGTVU1783xv/iaBVfsCdraz
+            8DK5mhOmE8Ul+zcCJd4pISmbqF5YAJ0oqfveDJnLC//sGx2MvnNSIsfOaK7UulgZ
+            fU3sQfoYOaJnin4tpUtDTNn7p/gYBqzpyHOjl0EL+tJRAfoQBcEK930n8O8+ssCQ
+            +N0mAudkaVz5wPQxKLF479uNMIKI2Q6DZJl4csJV+kdcCqN6d8QfzckGau5xiHta
+            CqKJVCNE4d5ymecnLfUKFMpp
+            =sOC0
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMAwMCBBrc/JA6ARAAvgT1bBC6OLZhPggmW9SgxHE3dfEObpCgXEzkeSRE0LDb
+            ZSDx6GjiJ6c5YfMGVCA5fBTPBBr8WTmGwNK7LYErJA1sl+5L19Bn+d8tX5AOIPNk
+            lFKytLAombJklB0IZM0+g9bKv0X56AgUjZYmbIikFnGWZGGVdRzLzP527LGDAuJ4
+            gyeHYdvQqmjlAJpjMr/D879Ygcz/FxF2dzsZKJ8G2jaOY0Mi+B17IDzQ3wpUuOJW
+            liOnzMx1bKnlAMm7I+q+YdKav6Jg38km8qCR9cWlpUM67Xjf34E9S4yZsZW+2V0K
+            0ObsnJhtU7+9vs3VnxSnkAe+VcEOGvszjtBPjl6KcRVY6A0SqQq+X6Yj2ZzkuHJK
+            C6va72MkCJOcDJASMqoe/zAJFE9zAaL3x3bpNhVRwdtOk2pcW63KOAMmUbsdcfpS
+            eXhmHdm3D87QRvbCJgjp3zp9OlChrnGPT+uj72tdP5UNQnncjelBI8dCBDg2/Dnm
+            vcTG0bOsuVUFbUR1zLL4K6KKHYIapb5w8tr+5dvNCAu9qjrVjzezxgT49wDF7Y6M
+            34ZrnmnbjvOjVP1NcavAoIuHJ9Jx6SQ2a76A3IWno/IJIGUOH5nFphFn2Waq+ZH/
+            Mo/e6EjZqKDNsDBBhhNNDbyrhc3PUW9Wm2uSVEn9cfvYpj1r7zSW9cKX4/TDerXS
+            UQG6nc1I3Ckak81BKRDXBFZkTMczYogqnbM4FcowGNWkb7IQt0ppamk7d1W2/EwB
+            LzRUDP+ddYb8Px6zmfETxhSeH/o/BBBbJOkvLNxGrbGZUA==
+            =p+ZT
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9XEenRNYVGHAQ/8CeNT3oc9OIqlKB+2+gozhiJlA39Heepzw4UZMgPI+PSo
+            uYVhX8lov9xmyk2tgCbwxl4mL4iCXq3MNpCO5H2zDUTKJxy4TBeRxHs8QjRrFk8h
+            Eh8YKWoukjR/M46nLv4s5y+HTZAb671i5Yk5tgkLrjyGZUnDJIbjW0FafVbUFRYI
+            ykGHxypw3bZ0PtI+PAQhh7GmsbNwX2HvASGFUc6oghGirJUPGn4tFLSDQQx/+JHg
+            OWi8frVD9vPcJEgD3yyBI/RnYTnMQmzJM1wvhH7f29IS9+h9OvGQDhY9fKh9HFOe
+            oVBcilRzl3IACFSc7wPcXQ9VzM+oNb4q1zo4ChejSRtU31F4Ufmgvu9wPKvDXkuI
+            V6XmBx2AC5eDn5aU/4XE8gaA7lxFvP5xGPqv/QQJrV+L6mcbK1lxSLUy47ZSd/xl
+            CaqJ5X9G3b1RvWhJTvOpZoIE3VUeZRVyhFpwFs06CnR+pxjBo9gHNPjwGcRAYkKT
+            XSmGeV26o90YwdJE//RlUIKQ7nS2geFJWttwI8be8CL5eUBwOaBjEN9ttiGkBJCD
+            cKH3SqjpyInwmXmiJLs6IWyDfcEKLP2wTaxeecRZsS5GjAa5aCOk2MNcpANZq43i
+            hcXsfvhNNzHOio8+0qrOjVRqdPFrCM05UjDXrFAavQ/O7WMTDBhxvO8g1UcRFRPS
+            UQHUPsBTibeIc7OI8w/xn1lTUtyJs8o37ZBqD6YgfmcA9ESvKRF3BRxtN+V4pMP9
+            ZDUAU3EKk9pKNtMP1gkALZCFcNZVU1ej5bgoDRqowRq4ww==
+            =TtKA
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/Y9Ee7T6j2i4HKW7jejoUxv2b2pI80iCHeJ/olAvOUFi6
+            bO7i5OcxDvs1gtOLxMZXnj09NQUXkMp8Pvzp4g4VkL+/wCyArE7vyVh2VW/AD1ia
+            HAi3VNkVwiX+prZjvUUs7xumMGT4rJiGw601Ds8jVSdIyQt55hd/AKq3n4VMf5MZ
+            BwDZbyuSXpSMYCRlTiH72i1c0lhBOG53W4BOEPGv0sRh4ngrZMDh7BtP2OAVgLE0
+            mHKsTh5loKVsQSfQMGWzIwe/wXkRuiKeBqqgyanO/h8W7PGEj1hTxVRP6zOu4tn5
+            kZWr2U9L5La5X4eSVYnJoHMyhvCOn5PCAODldtsrZ9JRAYBtCSriMIS39Qnu+1XX
+            /Anejs4yrPXhj1Qf61E7IEaRx5us8d5ib831WsJ+Krheq/FUfrb16ebVpR0jdBRd
+            1dVd2PCz7GP+O1jZIMEhDQSX
+            =hsLA
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+OJnw2yEBaestKxnyNeUlFR7uWXiCdOl6EC3AcxflnDBU
+            OC6B2ujd2C2KsQPBVpfRTY5CvxpZ2YHu1wu6zTRYnoieMGhQ8FNDoqCY1Y2BtSOF
+            Nn4BsXKDnbqaSJc5uxsIJDbeU8PEJuWGCeKwnMQlK9oOAivmXyWOJaPTLcQaoq3I
+            2QEibE3dOk0qPunN1Ejiyi+wy6jT1WpZQJom80ntjUCNdSTPZhhCcNdsxhDev6Ok
+            pF1ImfyReeDQojSByQ9zAC2dR9JiaJUJiL7P11Le71vFrWClDJ4Rdh7MNmMdu2Nh
+            a6NsPmbe3hbAtVND7XPxAOIndl4PttJoaWj5u5gFwGd6+jmiiQV0p8Y0fB3Sh/3e
+            JVauSnLAjYX3xUWvLtKecr4WJhUH35cXD9uGkF12XJE6KAxYku/TCAbG3xmBsvKI
+            jd2eoWMTj6qyMXCGk2vjByq//M2HkKi5VFzuWgxOBkN9WbNZc8xVaZg+jAIBt90f
+            xE4fLf6FqhMuHtCPq0LzVx/DNSB4+/p+ZdQz/TAvzsIt57l92tDKyHO1UYXn9LkI
+            lNN0JMbUXYBQ5qMHSOxI4vP7Ct7VAn8ZHUsyo5wlFLuYgYvPajFbHeT/3GEH3YEr
+            mkE6JBORTUn8jet29RXmWHs1/CFKYD9cEV1KvYJzuc+C+ADYBurEKej5IeeHZrfS
+            UQECjRI5ggBF9lfvptswB8iVIavEeKztzOsZSgQm4u1Yr+ln21frn4Oq5s8ycKJe
+            9VEN5FgmMQ9pWJXBlu/I0XjRODXIcUj1Rxr9Dt+RcYOqOg==
+            =LHN4
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-07-15T23:45:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA/YLzOYaRIJJARAAnXdJXHrbl9k7W3MmwaLZP0fsOUQ5CUl6NAwP4sHTt95M
+            36CeCskem1KAvT/5KlTnxi2O5FkMaYJGd9cqHCmQ1YLRWVGdZ4UAjuY0lr8VN8H0
+            S20Cn7E7eBTJXUp04ndt6ghwZ6QmVPRbrk4fLtquyZduudnem4qdL7LigZ/NxGvd
+            COWSCAhEYlWxDb7ZlYoogovp01qqK+d7LIj6IEL7+k3STi3OWQa2xYNFXMKYMALK
+            MtGsJjKbmUS9UCnq/ccoIh4unpJwkaYVZ62PeNeYEm0slfPUPOI8n2N1F5ICnrpg
+            sXlOaP0SoZ1bysTbNrghefziWnqwMocdQk6KyaqErhe9rnPXxPIEfQZSFvR7JvbC
+            qxM5RFX2122lzD4qrgIC+82u6zEgyP/bjGLVLZZLsHVkLLJXkDTjrKmJrR4tcwPZ
+            gK13HBNZRv92mi5CGBhH6k/J5400oI08QH4XN6lCAvSrWJ9hrOjBppzh+ZmbQjLN
+            6UkBBom+sshyAWbdHAyAoT2uF0T0TQHvYA9IjixVb4Y9vzTkayy/KL+8NiHWhz+/
+            1H/0Dhk6lY9sbYRUG+IzRzJIy4rOOibeGXMRI3GXLJQnZijxngNwmsJQMnszV2d4
+            kBzFCYErx3zRwhMHkLOTqcQ9d/dYrnO1rLkq/pis1A3Bjy6dbq7De+xG440fr/zS
+            UQHshLmiAAZapYqCEWFOzvOfC+kPM4NS4jel7xJ6Ji1jlg4SglEC0zYqVccSzrfy
+            rSfJZyAAN9qFc1JDsdAyaJLxNURVwNpKj+ugPCVtLixzPA==
+            =/TYd
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/dn42/secrets.yaml

@@ -0,0 +1,212 @@
+neighbors:
+    dc16:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:/2mb6CbeRN3QGPJWZgjjEdpIU9pZIjGDjJ4/AWwhP5+Yj8BH7m2YjZI4Boc=,iv:tCRvqiWj0T/1QtQyMSwKhfp9Myiw7aTm4IFwTCfpgO8=,tag:HNaR0l4Dl6Eath/Ade5mOA==,type:str]
+    dc24:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:MsEm12ODjVgZEMYn/H6OhRlGuX7xuybGCPc6Nufntl0DlL/DCxHr/8jfK4M=,iv:+eBLJWfnLeOJ2sdjxEO2xQcRQpSVB630HUzNLsY6FB8=,tag:PC1/YDvLb3yrA82NfOAlfA==,type:str]
+    dc98:
+        openvpn:
+            key: ENC[AES256_GCM,data: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,iv:F5eYrI28GynapGeGr93HqlACTw21yb4n9oKbzBSql8k=,tag:wHrcZz8Ug++hsXL67mmScQ==,type:str]
+    dc113:
+        openvpn:
+            key: ENC[AES256_GCM,data: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,iv:TSy+xSwDWL92CzgiLETiuWqWUJCd9+Wi16BAE0qlbaY=,tag:HFei7QNPMBw0EyO/USxGLA==,type:str]
+    dc4242421374:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:EQH+LMcWj1JrZ5wTW+yyV8wUQRIn5oYgHv6hwBNrxU+V9iYeNzlAdimy7wg=,iv:XS7X9VtnNgu53qeEFlsyNahSDCX3115WaIZrz+ZVGE8=,tag:kSsRitKp9hW1E+5RT4W7dQ==,type:str]
+    dc4242421789:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:2HJ5BWDalGUEEytPghljEj1CRFEFYws0LOMtDZw5UfXXVN5n5qeWg3mtKDc=,iv:snawAn6NKRiyGESpE++wyNlUW9Se0G+7FfIVjGOX5L8=,tag:qgj2fnZcd/VqnXeh12tfKA==,type:str]
+    dc4242421602:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:8J+knTqkqsyPs5sqbzECS7XPugC00/WsYhlFAWU2RhJLOvgTotMhqMfnPI0=,iv:IpcKsi601Nu0nx11esqZh+nxvmZ9IrjlHMmDE3RYZiE=,tag:4V+7g3lmJXH7EnlGxlUEkg==,type:str]
+    dc4242420604:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:id22cWFEO8ctlyTBVqWHhnIChrIIQMl73RgeAHPQv6J5knHE2jQVvSVNL88=,iv:7CwUR67xZoIGTzSxZ3hUL3lxaeo6MqfEUM7dqkByQ+U=,tag:FPTi8eU6vRq1815FR6X6tg==,type:str]
+    dc4242420197:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:REqZ58vt6hYnGOKJ+0SNEW1nePrkW3u3HMjFiDFjJeWsUJc7k2HQzJecANM=,iv:+FOk+lDueMvSjmUPBCxL/dS/yHtEiwqQW/rSt2R40cE=,tag:ZbzQ98XYgqZL8wM40lCZxA==,type:str]
+    dc4242423804:
+        wireguard:
+            privateKey: ENC[AES256_GCM,data:O04wJJ+YIbyXgNbr5Z6T1uFr/8xQDK28Hciu1hLu3cf48c4efSro5aCyXYA=,iv:lOoTvVpqb6lSUDXi/EIIXlLjFbd44hCgzmPUVllRrVg=,tag:KHWh1a6JjjSRvYcv2onVGA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1726t33dl7pv3xrxxlafj2sexh7c0jm8pza84yu6l3wpz3fw5dauqxlass3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGMUhIOEg1L0swa3JSeTZs
+            Q3czQVhvZElwTTlIRSttYXpoeHI2Q3lrVW5JCm8xZnNjVy9zN2NtME5vdVpZZEJk
+            eEJFd04vaVdGUHhsYlpDWHVNUGJQS00KLS0tIEdPMzhySU9aL3UrMkN0THFVam9B
+            SUJnYUdGNS84RUlyS0VzVnVjSnN1LzQK+gADsc6Vf6NBYFcfrMHOHQZvzaCX37HM
+            fGO3TOsV9E9i51QU4lxHWF0NNh6CnIefq4o27a7HLWogc3SBz6TwhA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmYWl1WmNKVzdWMmxyWWVB
+            SzE2cWpTTXZxYjNodUtyam9tekp0dkVQVlVzCnhxeXNWTDdPSmJBZENoZ3BvOGor
+            RTNFMk9peVd6T1JSK3ljbkl6azdndmMKLS0tIHRzZzgrbGJKRjFjcGRIaGZzUGI2
+            dTBsOWloSXVpR3VlUEJibkRYaGgyczAK066qQW7vu5U0uuLiMVlUfpSovyalmXTs
+            6ECD6rHyI61U8xTyAiA+MVpfoRxvL8LkLLMESEGlKlAvDgR2lsnPvQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-01-06T22:45:31Z"
+    mac: ENC[AES256_GCM,data:6ooG3L6RBMn+DZ4jFsmc1WuS7Pu2hkYM74uGu6lxGEwwOqTPXsEAORtcMdTeCL2OtDKZradmMqcGPNJwm0MrHNwemgmmfn9GGHjM44SfyIdApa9H8Gpql06QjpcX/r7H8XXdvJT6YpwBX7S5htO0kyJc6P0435dg275Jl8m8+bY=,iv:nH3Gz/h0Ikq9kV7n0nHH7fxYuDoPHqwZsdLlAngZopQ=,tag:UJVpBYg+7sjiGqODirON1g==,type:str]
+    pgp:
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7ARAA1blof/jf6JUPX+isHSL2+ZmUaCNNvIe0qAZbI3KtZqPp
+            Sgi8R4BfQrYW5D1Xi6WdYP+q0EcKZkXKty8GW1mENgY751w2+sw0WXIMOwwnIAyU
+            aLEVzGI4zvDRLUfAaiJACEiHnOMfJ/7I6uI8Ag3pswoLLnqObF01uC/mJ6KYzrLx
+            eYUaYe2z1b+xENFMp7TrBJaQgrlInHYl2p3rcXdrfA64ZTlZdRFOXE3sqRWRKuF4
+            tfkcp1VapgJgdPu/SDDgnfqq4xfMD9twICq2yQVo72C1/cM7Rw2GlmT3qHqWD5L0
+            VXuRTdnxkU7Pz07aRun2HEN7tN0tdeeaixZJqdmMvJJbR5hdNrBILSzx/sAKWDh/
+            eTHSIKRnvt6RHQ/qCZDKJhvRvgeb+BRSNJBVQFgKALqHDowDdu7bluRgEVJmRybJ
+            i1MlW0IINhq1ULZs0nud07PTIc8NC0rK5v5RwF8HmU7XShTlfO8XKEHiKBwi8lTb
+            /fk6j+2rfo1Oa8ULVX2vrVMpUpsSm12iaiOizoFRK3nJaFPlLk3VfC5FzSqFOaiK
+            zWgOv5k//CunYpshjs8cXS00PdZ2X8xzubUhN12Awk6D4+bYFAFQ2giTRDYBfriR
+            IxtszoOYssfsFlJVvKsEQIDIO2wdl8ZGjf2jzme2OBQKEdux52tcrT0nGVH6XIbS
+            XgEQYt+VwhWhY8YMLkk335WIgzwG1rL1lfArYcP0TjqYAv52Fq4no68biV1TToOl
+            6BjR6BUX14sUSnmD+FqtLRyKioarMrrFsfYN/HMAd5KyIytT3+hLnlsPWKe/aq8=
+            =LtUh
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ/9HmZfaP+pq8X8foUByTbtJG1rnABR1UpW0JzL2dZmMzC8
+            Na9gCASTu0zROJkEjjfOFOjv82rXlA3KCWsg3uS13LG7yBZiHzA5qo1J4b4zYGrY
+            brCH+XP8K0niZC2kjZkoNoY98NB7CIPBBRlBlmvUQ0yrJCzyTVfN8kwPfAUMVTEh
+            RRm9xMeFfx3Y0oKf4z0WQcOwCy+vrzGGJ3dzyvpGa9+PewJ6BBq6iNwaQY2qEEPM
+            wOvcSWx2mLu7kIH1nSllkDabLcVBk0v0o95uLLK0TKzjg/AL5XYCpUcZv2jVmpNT
+            MKJwP+XAGJeEXjARvQK/LaA0/oPRKvdxTuwahHAAtXzFonysuhzrvCsaKdn0U0DJ
+            wnDeP3/UCiEwCzhKbxL3LleZIp1YPoGFbFIiVuE3Z9NtHXB0ziuhUmxh6lY18bw5
+            f1FsJx6XmSThKUcPb1kWEUL1TkURqhxuBABOBBWat3YHN4+tJoLGreJPeBxlx22v
+            5RW4vG7ogJkhS/AjqQlcHqoFpcy5S5RvIyewvlG2XH5MSXrgcCul9v4XM21+xgaQ
+            +p6Q2rlQAp/BQg/2jYbAA+rXwZuWItZG6vwW+ZKdlL3PjDZIVQ+imzOTn5t5vCCg
+            0w+RXd+4zhkDmzAuPbDlfpWj8zybM9G4WRBFqBSxcCC+wKyZ9PUZ2mm0JQ5UVqHS
+            XgEvG/OSq4UcEQlQoDKexrHYM7bUeJyRzwHlJc9vJ5N8+H6lls73tyIH0Dhr5Jks
+            y0Blog09MqIvJ1wPtsTI7YwqTtuKAaN3tRpn5v0Irjf+kwUOO9xFYq55qoUqnso=
+            =cipK
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf/eDKnVBfmgIxgodwg11IQavjvzV+TL6WX8+/KffdrjbmA
+            oZaTk/1S8qEBGqvlxPH6e/hi8dkGVgGiTMSmyPmcBv3Ku7vJDvpEiiSKBR2p7s7j
+            QUsirBozXIdhIb+ChbTilr6Ub4DUUr90XT7B0CMLrA/R3oGZJeAiY3MeMVNRNupr
+            TTZqqDD28t1bKrFTtoUyaOlTm/Bm3owIx+lpbg2xRda4tCjBmabGw2RIFRIjCKB4
+            LaRfcgcSCmQ1Nyg6/25I9/G59vCFuihm8z7Rnvr4hJV0O5zOoDXrKhpYWiSjF/d3
+            OImS7XxIZ/36cWwFcAVdgnQv6VkwGWkJmhGhP7Oi3NJeAfg34nx9jLp3UQQ+lQKO
+            aKFmCDhveWZg1ZQGNnw9Tu1B+opevgiR9aXnPiyJw5ZMVvhhwib80f0xR30h565W
+            Muvv/zNTWhgL3Bc5QCrcEpeA79Fx4yj9a6iioPeutQ==
+            =/+oj
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAjoIZ3MFENhuDlgtqGHGO+VbfilXLkj8JSkDQ/FfCm9Od
+            fDMj3jS7hGEkFdFgQSR5X92aHPQA8SoSEcby/8fiGgoBMlhPO0UkWni7wFZBAv/H
+            ZTo997yv099PzuBLbNuwfdJQIa3ohiHQ4HaNg3AQhav0keCtX4I+gRKa/k3wXvRg
+            q1pfEEqRzt3yS/z2gtOIVNAvQv2xKFDUOULFQ0eFMCxM5OE/rC2J6wtST5Qj4boM
+            kNFSu/HD8kKMOoLVyOPiezbXyXER9D2naR48BQ1sjhKUS56Y441kCMT9+9PJWgs/
+            8q7PAfZ/TDqV+1occnpIHO5EPgWgBy4Ig1EVQuDHh9NETu7eo51sKpj1ol7SnweO
+            srNvoHaT6nKVKi5aZs1PqO8UjUZOrgcyuDj/PHoCTrHy+8JzyWjZoqzpLzh1zsXf
+            /dE6tB4G/CdM3VA/f66uo/DyN4yqMP4I6SxUOwoI1SKpobrEok6SkgksDl5Fvxzl
+            DmtbZCH2Y794vvSmAbNMP2fxrDcD5VE/nolSHHFn66TKVH59D3RI4L0C6bZTg876
+            gdbbe6qjMIXGdqi/v5bx5sKEYbPBWLFs8KmTN8GLiuUWRkmgHfBbLA7TrGknbn/Q
+            o3189W5Ev2kzjwcxW3x9Yshiqa0vXHlcNLXgU18A5Afe8oqHo4KTya3VFRkBZqjS
+            mgETi6Z0X4ipqEaqY1HJYYpNalrULBc3HR8xvuwX+SRJEodOlFm+nRPwKAztItjl
+            tAPuUj4Y6axit75x53d2ZQnIOqiHWtLfCO8BYq8gnsLQUE02rldbmj5rSIg6TdQd
+            nK7O2t9MWzDIn7W+Isli1a+GZHs0AwxzRsrr8v8InGErq/uamMA4plqlngSTwVqz
+            Yp9P7VifpT3ENps=
+            =rIAj
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAAy8/abI5IsSPw/js6gLm2huUV4BuShjDs6O32jYzNpfu/
+            dSZ+64oos6v2wdSol5WQM7xsnzSu8+kbHpL7jQNCljBULY4ZBN8XyI2tke58+iBr
+            GaG27lNBTQwHPQvfW079ZOo2E/IJuqE8e57+ufI1P/lPPWF3o7Fs4/LPhb8fXp+6
+            GFXotiljGjgo4FKlfeAoASlOJbYpM0YfsPQgS8cOOxvYb/MdMO6c4Q7/1P/HgN89
+            umEIT9c9pG5oojjosvqXEYH3SSqiNoCPh5lDZnjUxaFHlTUI3u2hHiHAoLqtr/Na
+            XDcwgjL0WcxpzkitTN/WwNxHPtAXMRI21AtVkAyots75pwHcORI08HT9Lg0n7CMF
+            FdQObdKrXsoM/Ta3ddn4AvSKPvHxPZXhacpWbu3ZRZs6j5CdvogNVMbzp73E8QLv
+            G6IhB4k5Y4yzEagW3NYplt5sAkyAiw3CwwpAGhe1ybFV7czLon4UYvxr0b7A48p7
+            yW3Kdmu0NsLTxim/Nj5CQXKo93Pyhy9sZ3CBSj3TLwzBENBPKsAxOBhqWNLG+6kG
+            DPhVcRt4UTC0gsKl6MIz1/7iWw2zZbKIp9ICvYmUWNzWKmVCX5dQZV6tphA1Oujv
+            khXPuhjNf/vuVAKiF6KVjOeK8g6sMtIJ2YLgUsFpMtL5v7vH0HV0pAkXTVU2hYPS
+            XgHEysoXtC0q6yeqNMqO629Ga51tFvsK4J35qYnqMlvIzWUgUVKqAJXIjEwRYuSd
+            dpvLLyZqaw03CyViprS31ZyjZX/uODplfSGgEdTX0biDx1V66PkYFS1BgX5F9Ec=
+            =HW+p
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/a9eLCXn+WqW36Z2Y2CmpG6w354DJcnv66Sg3RmJ5pbgo
+            5MEl6jsgoAbaKFCaHTnThHVsjHbpI1EK6IPtUeQq4J0wx3X0tOSl+cVk8BDBo9VV
+            6zFjgx08rsFh7UVv10Z6v2GflqQxgE3XEmj8g/QNAhKx8kULp0BmolA54V64ipvM
+            ptACU1yx0Bzz2P+yb3UC/QUxv5EsdERUVafFzhnr4hHN4yF4hQ1OYfzVID57UjE+
+            3ykAaZQXHLIdlGREq3Lg5tjbbqVn7x7DB5a3HAYDnHRNeW0YWAww0IgbdtOTnQQ8
+            os73dmJjpY+S1CfjNnqGXJlsz+3NqpqgB9EoQmC07tJRAbCUELT9RIQY2H3x7Ahu
+            /kmjy/HrCjSgnoowh72TrEUtuimXsnSqI5n/elGaskP2f0RQmMHaLfDpZ07aw497
+            d0raMR0a4VzvjeFcyB5TuMZI
+            =lOay
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/7B2ptXyoEfcOZarRjx4An6gO10sPm4XCgnrc4IoEl5C0e
+            o13k4qJtpggIxjx3kR4mIGw5nnFHDVOMLtptCMKsbadb97NTAxFE6/eLSRs45Cb7
+            m8bRc9wPHfZNJW1o3nSU9VCWJI3LYMBDB02XxQGEbca7SKfcaTk47HIZkSch7eHG
+            la7s19HiQ2Pw4tCmWUWEBO4S4B3+H6zwHwrxOFJn4YKfbIqx61MJ0ARCG44kwMbu
+            2EXO7qhtFH15IpkWFpKXxZw/lgvBSgAFQ1FzFU5JtjEckd6QvQtOeqXt98OfqIUr
+            fTBXzedj3+sW8c+bNA1U0NrtTFzQ7wHuigiR1xOsOkOIaOQFcOTce6qyvZUB9E0u
+            tuBz/tio7TH1ryFX6TgEVaUleYNILbIfCmLEJKuDD0B4Qp2QJzMv47Vcbr+svUry
+            VkEc4V5/aZNSEv2hoaDljwdGF7EBFVbV9Rf+w8EHTGYruaJXI8gbvPGctUIXamDL
+            TgtETzDwZwWsje17ko7HQJ4fD+xDnjnLCAkHy6q2D/7Yi6++BkGjECzHYyBL3mYp
+            gu4Pi9LGyLUm+bS23Aj1sf6ds4N0tLcrVdFa6P47CorUisai/bZap2SRzsIvEHbl
+            HCPR/xZgjH5vqqsTNDAdfy3AjaTPKSGM6XLotXO3Yqn1UCd065TDWUIIEf5CtFjS
+            UQGLy7qi+Nc4SVs218muH0xwdL2v07gkX/lckRjNDuTkhw3cl1KR6xGOCQyCAXsa
+            w3Hm8OCO32j2vnLAEL2eXAsJFVCsClXdFzF6T27avRtu6w==
+            =/SRt
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-07-15T23:31:12Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAApGdXUvJf+/YZGK1VBjfa6rIVXSM6AJHGfUgCsteNWOiA
+            PVpNRQx1qE0LCdMiqLjSVDoSx8o/crWhqSfoS/9ip7VKzhHuiw4ZSqNI2wIQVatL
+            7+MJWw98wuB1askHy6RdeFbhdGFdRs7hI6v1ByZroqE25eVKRQjtXzMCSvz2/K/+
+            K3LELDzGxWfr8NKMykcGRClSEJ4RXQi2S1WBRtfejDuDgiiNlSKZQGYUZqz25TIc
+            Oh9pI9U+KwAYi8IyLRAsz3WTGLwn++nldiluPCNHVKE8uCtIc9kWwGSNEaQIliRC
+            gCCA01MBV3lJhnwBP+PIx03dJJCLtCm+OIFV68/DGfb0QHjCUc1n7FCemVX+8P8T
+            kC4P9KPMCXr++F/wZWfRzQyDOy7+EgXGSdMv7qQ2+i2iiZN12Ejedk1yNT+THMZS
+            VS83aeMaushMifcpdFAiS7tup8pr9aRK7qaJ/nEi2Nc22EGPW4VtRDvEz2oJlMzr
+            xEY0KQP/1t3dNOeuZetVLywR3srXngZPq6oPE2ZUYpFjD7if72wWlUELWC2IZumx
+            KjuALINSLTtUXQ8WXGHficqS0fiDQ2miWRs4vbuNRrmF7h33ouO2uHR+zpmYqGsS
+            9fw2YVmRQ/Ed506sHuDJNcAA+61CJI9W+AD++F9LqUEUuNZhNr1V1HimucsWPXrS
+            XgEar8ve3x0wiydVvp85RkyOrcSZEqq1Qa0QZlwGZ87YOcRFrikAfdo97jTcJlpU
+            vzLo9Q8rLZWp3BoLJyM6Jjoyaeausz1+LmoHXzJWmJqds/zgwXwdwa0K4WKRR9k=
+            =wvUO
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1

hosts/freifunk/assets/index.html

@@ -11,7 +11,7 @@
         <ul>
             <li><a href="https://www.c3d2.de/">Homepage</a></li>
             <li><a href="https://www.c3d2.de/space.html">Räumlichkeiten</a></li>
-            <li><a href="https://gitea.c3d2.de/C3D2/nix-config/src/branch/master/hosts/containers/freifunk/default.nix">Konfiguration dieses Servers</a></li>
+            <li><a href="https://gitea.c3d2.de/C3D2/nix-config/src/branch/master/hosts/freifunk/default.nix">Konfiguration dieses Servers</a></li>
             <li><a href="http://grafana.hq.c3d2.ffdd/">Lokales Grafana über Freifunk</a></li>
         </ul>
     </body>

hosts/freifunk/secrets.yaml

@@ -0,0 +1,184 @@
+wireguard:
+    vpn6:
+        privateKey: ENC[AES256_GCM,data:5xvDSbVz2r1D8MZVMgKxIeXD5oRTfXD1RfBukHaOxBz6QaDiUjK7IfZRFlw=,iv:jXZSguJofezFvOplCrRokH9vUGP67fQPkb3fea9uKYU=,tag:JXCD+ngAtAFRmf7NhP0wCQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age172fqj4agvdnh379n2ysarxy2pq9lupu5d7d0g2v5fw33fkqkte3spae2hu
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVeWtXMEgwbVhtRVhMdUR2
+            Tk82bjErRHF2a0lnUnFMSUdZUUpSN2lwVWdBCmdOb0lZVmJVQWhsWTVqUkxQc2Jp
+            L09vcWkwK0FxQUhWL0s5T2xPcTdabzQKLS0tIEUyTlViYkx5elMrbWE5QmNKczBP
+            SVBwSCsyaUJQOHF5Um52ZExnT0pJTkkKncpGuqfvP10/GSxB9tPa09FuPTu9tHVP
+            4dIhg79d+TXQD/e+H6y/iKko6/4D9qNQgHRgP9XTyb0J8OxFHj1z2g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVW42dzFMRnBpazVUdUJO
+            MTVZd1Y1V0QwVmlERHZ3MU5VSjg2cjlReTBVCklVV3MxNFNMUHNaZkRNS3N5c0hE
+            eVR4ZnhQNU5JS2UxSzI4dWVxYmZxZGMKLS0tIHNMMER6R3l3aFVWRXB4Q1BKSjJ4
+            cHM3blhFSC9EQjhuVTdEN0lScklBN2MK4CJ2knNWINsimMMTnpQPp6HdHmIaa+jz
+            pgxfAtBT4CV0ZgOEMiF0uSFUBy03/3osO+OzPuS+fez5hWYmC47gzw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-06-13T19:00:35Z"
+    mac: ENC[AES256_GCM,data:RhGB+CNoIAGr6W1WxDpquG76FLZ0REF5OZwvD3DyfNxNai8XzqqDEsY6XneQ0Ac992kAcXdxleYDYC6keokvkOgnNmr+Buc4+rnASAReyRN19lIUWNjAB6oZWjqwEY2lrwklJc/yi+2LOuaigVsOLxOiMtpTs+QVtofRlmNpbGU=,iv:IqZGKWXKYTGP6m+9wb6j7sSVrSJZ++F/CcL/r2LaSYQ=,tag:6MLFHzcEayEGKtIxWZoljg==,type:str]
+    pgp:
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ//eJE71zZHudUhRP8i1k7mOH/0NH4BbE8KGBJrwvCZc6lj
+            HuMiyOZrMHXZwT9iOVKlfc0Fi7nlvnNP14HdHKD2/9FTL85euXCoxGdaDsqer5Zb
+            /HBQE1n6er5314ahz6ns08tDn+vuqzV6NPQpnA4f7TtSqIxE7TDfUSWOLkqhhcY0
+            orMtiTE9e/z1sbFUw2NW7oVx6wOtiY6l8WgNbc8dv3GMs5i5yBzc2pp8ClQ3jYYu
+            5+UJrx+IJ9d1ho3swfW9WYspT/rGwZf0fyz5k1AVZjDbs+b661kYQtB1h/RTdis0
+            NfSs6mTcF9xE62TFtglwh2+0YmRHQV7xJnhkoYS9PCEj5wWRGrL+dcr5V0kmKkqu
+            XtBVcda3MpfA9wX6pFirzSxYaIiZ9FpINPoFKi58ZfcrBM+V0/7lG5GfRAQpePmD
+            sCMLjLMp36y51GO68lkodiAZ6m7FXAT2gJo6yn1MjxcPSg8f88gcIVGJh8bVGyx2
+            pGZizL9rGTPbz//KnUKVOeGe0f2SeL4FE7nc1J+DTQjl1a8/O1FFNBE86tyYozAU
+            6Het7QQ4FySOoz3K3LY08d7JX7dFInxhjAVA/F3HzSuVy+3TjoZK2XwetLA/ivjk
+            iRI7+vOVmQP9KlBKVCvpzhKm5E4ALSgQPIRXJDRkMiFUm+tVaswONFEr90vBvIfS
+            XgFKhQbNrZ28761ItUeCAF48JOpRgqgopuVpuS7PB/xn2XJK30CSZIZn2LGIYRmx
+            TCgOjJsHdKZaLXo21w7dD9td2tjiqXWrqu7jnfVf9ljZ+g2VDk76a6RsxL5oEBk=
+            =3DbX
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zARAAjGxTCPPcXv7+ygIcIOvCgQ7GyF1aQBShqZcILw8MLdz+
+            lnsUuDiGCCsVdwU4j8m5+kq0MHqdmKklbDwqTMvg5NJARITpEPl/fjniZcH3iLYq
+            znyyOV0W2RD3RLkhD+7ol8uir00cKUXZjfi/loNhbiYZsi7XD8R96mnxG/NH+qdd
+            pt3v8Ag+3EAqLSe3qQGL7QcQgW6u53o1cGn8h6GyWi1Wym8LeuYLEOTV5lpurm17
+            tjaVxUAGQA1YAVTAgWNX/m0YJqy9lVrlecEuUBx4VtsE4wi7pKLm7gZBUtFaNIqu
+            TataLq7UEhEwsL+/ZmgdkYuvoUqgpfThkg9fdYhTv8L3fuVdJz/1E8MiYUXtlyXv
+            gutI+IS9ubx+DrnWoqm1qjlx75M4PK6haZpe4SXXquOci8DnNCeRJOY7wv91bEAq
+            Gc6almitTY8v2EodsO/cMk45VNAi7fopuFsWNjV4NdRI3PjkhrzkV6udluAkMpt7
+            J8ANlHJ7xLZmbQjlN92nb9MqWzUyQ5/8QyA1frztjqz4uOYYVJVl8ZWcUEHlSjSG
+            55bo4qhra6hyMxmMnRBElMYkA7DB00TPBL3eG5arXq+KWlKam/8K/QbVLpNObRgw
+            OBL+3kpfKo1uWc68NnXFn5xTMC41h1F7x6ZVYpNcj6sqDYFqdyGG/i3OOUtmI0DS
+            XgHlCWpeSToxq6Ls6K79/RgXJVjQb29RePicfyYSzkmGhn/lXcEoxJnF67ZWW1hj
+            3L4KyFi6Tuzms8fBfFffsmZf9LrcL9fxWRIv19jDfaVmSHzDJ7O65l64lQdRgms=
+            =XRw1
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAryobewl6JFtys9+3Jsv80UJ+aL8oMN/+87Oe4Bkd30CZ
+            gddo2OmWLQEHrVTjGnD7WeonmOxej/u9fHbeAwo5kAZAXn7osDJJOF5F4L2sUSo8
+            hB4Fi9HCFYNSzrcyCwLe3Wl41KX4bwzbM6W6W3XYU/Tu+KhXx52hTNCBNEJLYCiK
+            m5Cumo+lQHml8te46LEA61NNOIchJRc9GYppd6dItLtC6aZ706hUfD8+k/IR6h4B
+            PeMtDOinlOPV4lCg3/fJzCygLke4KPhi5+D1tEDcm9C6ev3UEH1v8kMo1+tV0FDn
+            n3OFEIbmnKzWLhxb1ItkB5u4/Pq5I/JQnOTNJsO6JdJeAYHWtMdmlnw4KjNtehaG
+            A7CfXF0l5zLxbyHg/+sbjXAl+6s7tRVMoUMppZZ6qeMHE0gPGB/bfbj4RwZixKfo
+            JkzOO2QYui9F41RQmOfP92xb8AMi1zKoS7LAJBeIKw==
+            =9bhw
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ/8CgTLIVF55rOmrYFCRs5ZhQaUVtZcVYnnfSHCXOrtuvFu
+            LdhLMqqQU05+IHfqfCMbl788b9YeAmnN7pU2z6W7VRvU3blKTAM3ZFIKwC8ebMRu
+            iAB4v3qKMzob74Vd679MokhMZwF/F2h28n0ia3/pjB2r567ywbjrFFKEjTEtU1ye
+            qbQhY238YbKmHs0H03aJbbsFfHhsQ+Hlb1sOaydrx7JR487SE/3rVwhR3+Gqt92p
+            p8o/zzUL407iLEtidfc5FDOezT0u7XLXFZtkLXlC1DSXIFd+lENM5ta4dJFs6uE4
+            VzKjwPqiPIFyX24aPqAhtDN5opq/zLsBU0YBD7F7OlCe4ukCCL2XXK7sbIvIN/rO
+            8O0LHUIwgOu23HQUyYXHpnhS3MtUkITthu1Va5d6zyiGIE5iLO2bTsrqf4ioOPBt
+            VdfxBsMxqZjxxIWvqes1af8FK39QWL2MhDe6g7Ua2MaQf7dafQ+1J7vrJlXV1DAp
+            X6ADhrc+Trhj/UDSpYX7JAVXUaTHLuRU945h5VlpbICnm96gskijsXJ41eAXTAUR
+            B1QdAGvFB53lXY15JD8Tn6bANFGYc8DeI4USeFbo3jsgN3/TqW58mXlqkkuoi/uR
+            HoZkCPQTFDxTrG1LlMRD2tfozxOBTyMXaRUq0G+8wymN/fMjWDyixa2td+LI/gXS
+            mAHp2hnLDK+s86NmvF/+xpFKrdUruI6Y50pmgypkCTHZEvRKvQUr020/kmWYNg3d
+            2Eyzv3wawfrBy5TQ4wz+hsdeo9tkEQaHiBXPYfYd5C/nnFJF9bAz16zlevgn7OOV
+            fBDh8wLEeoZjbmxTCGYxxKaCg8C+pjVsWFnM2piyegljoXYiqIU7pJCkz3jqqCrJ
+            ORedpSnHAxyR
+            =9vO5
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAAiVkf7qzYyzYT6ptf1LUdBzvHplWYhn0jjLa3rFimXv46
+            PDkp8WEO/s6GcGkxms+m+n2Vfe78wxpc6tpH6lcIGZgJjWgRL6RN9MIGfvSeM2/0
+            EjinwFsTPRUPARw9zR1loDFrEntVIZ7V8wRIWbUmdBSpzR90FS8hV8gq7UuL3/HH
+            WfnyDKIzxjFtL/s9lEWhGYj4oRchgmtMTp7wu4I0rsBpxZdau7gVT9gxkzkt2aXd
+            J7UAKXVsxs7PD0lxWGqPyVON7oAmXq2zAe3NRA+cRAljB5iyZ5LPM5VdyKvKfbmC
+            IN4QzoX4ewqm2Bm8rZNwY/4QMjuEmMGQKrYuBDD7Lbm5G1RngvlQZS1uiyfIM9mJ
+            zmvbdAtBgkWb+Evklj2ldskoM7inox4PTJyzoUWeyMCC3jLMPR1OGOy5KaGKX6Sp
+            /Y820fnmUoZnsTuySr4bfqR47yQuF7R1MNs/sAd7PmqKXTmyRA7Ow5URckFTCNv4
+            nphrojgg6G4cayQyR8oVyAMOTvW2q1Wu3EoSH2Ut/DCm67q9iy2ypiRpJo3POqOZ
+            YEpQ0Cn4G6OWqYP3GrdI5STKtjXuBrka4zcFQWaj0Jqe/At5bzYBog4LqgtWva+D
+            0tmlsM4lWnWJ+Rh/ylS+7r36f3aGy1RC6f2NPwYM5FFEDan/+U0GLlwIF7lExSjS
+            XgHtekoS1yiINJ5dfDTmkUvbGE19Q8xj650eL9R2zGVqMqJvJGXCEyCqNkjHHTnO
+            NDjJ6bVPkGiTOthknKkkoTRxEp/TKLJZNVdsirccBt3xtF+W2XcjY4oMWNHenWQ=
+            =+r/M
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf+PHaC7whsBf1VWQQGmJrbnpBtsDiN35cI2D7f8dNP+s+Y
+            Xi+YA8rvyfUNeQTK6vDTdiksvVl1QUNDh8P5jBSkxbCrSUuktUIxuQf9ed3tMryu
+            AyykA4CecVGIWh+K6EWULqvsSK5v0fVCD343LoPELumczB66BzfIzyFiZ1mcjmpK
+            JzORd0QhA9bbBzdfQ8yKCVTsG9DRvaQe1zRb+zqfP1L7tw+ypjl6/Z7jYEayPliz
+            Ad2a3JRkNKT8uVKT4Dtf2YtbOQbTg13xpduLzGQB6SyQVmvFP/e/bt+fLcw+qHUn
+            FWjDvJf3QUYaA+5DaYwhIiHNeT7LZ7TzAozT+S0setJRAfY/6uVncr51TeBZ7rgj
+            jTcosC4Q4rkhBMTi3ECRjrNzgxmrSfX1UkHu0ICl0vTid2xa7F8gKU/+uYml9CVc
+            1h4DxtAV5FalockBG1uhypMV
+            =8id5
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+IhFmUP1Q+/qz7WyAIwRyibTYgfEHmYDPv+rmH3Kc5iNP
+            JStJAvUA6xrv9BSe5IQ+ruEqjYnFz64IzS8cHonhuaoMos57rJiEhKSAFzg1Sb3+
+            u0/bYjoNjodz2HNwaSJPENuanwpWLwgf/vazgT+qnbIBVkYyk4YTpHSpfb5ThGUw
+            T80VjsT8+qDNxllKMcw06WZQWQPL8Q7eo3I2OisUf0suamrpdjlw7D4Mgz/c0Osx
+            jzlaD+RiOGporzaN5Ah8cW7P1+hvHBBwg8/B7Pf4lQ5OBZ6UtyQlWqppuzn9ZyzA
+            KgNIl8J36JtsjYAM4Nd2G+du1IlWCpktFURxiBPZAlh3mYG7PC6KwUb7SpBOJieg
+            YBs/CtaqDuq97r4henzUexyNfNMjxF6TCylG/5dQuVB6ZoW+DMq/vECSdeK/MX7r
+            S6GjCRJhrufw5D8Uj/Uj5OzUskvWPWJ6O2moT7QOOuzdGQI5qi6fg94bW5DqTk4O
+            TMCdvsQHRtxBcHr7Fb50r/12Hud93dVVB8tKf8yPPaYv/s1/WhOWy0tPNrntpfd+
+            Tj/2HICsHglRllBTuxOCEUfj/g/CjCZPFp5kxPvlgDuFIr4msa9Omp2KT1s0XI3J
+            qpE3NMRFlOXZTb+NhySIX4Db4KnQ//cFJQ8J9zDpITmObjfmpkOEgY7DO/Xf9QDS
+            UQEPpZFtbhYFg5ZxGb9t9Enw85bjmTOO8FBZVboDgzA2qxT6Ss8T7zaZbkdCzPvo
+            8EGv25y3RXJ6FbvJ3BH93yxKtbYeguZRHsYbeyYU4WdJ6Q==
+            =rhVM
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-07-15T23:32:30Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAh2QzaM8kTGt99tgLE4W9Fx/eURB++7ylwgQcNmw0felu
+            aGUSKWZ1TPel7Pf83Dz/oe1Faa+L2InpHUmq+Qh0X5j08JySPx+iRrkkNVdUFYuG
+            LJHm0BKRBe01zQODLfwC3/bgGgHoJmC5mYQgMlyMi7/AIgGFkx98/CluGGafiOAN
+            pYI2Xzti+SD6AOQdy72YV36NIVGQEyHoPtG1E2w21A5g8ylxLqxmf+ZanOfiKUPI
+            FdXS+sGqkQyBBXLjTDQ+QLfDOJki2t4iJ1Ov8gcGpjk6BYEVbyHyAhYP4AuVfsyQ
+            gkyinS3FDMZmEPdCcQEWsgIxp1Q59zmcdFxAlrTRRxsvWeweAAPuabnulT8k6XEp
+            i//1+Ci/3JUalXYCWwYRF3p9pMsCZeN3X9pzKR/usgP4koRfxq+F8a2ajt5WCaBA
+            7l7F5ikL5gcU2b/NSU5ySmzIuHayKDl2qPcgcSgEsLxhpMIn8U7F5qn8bQeuuWV9
+            OgQkbQD2bRtNk1x2nt22J5ifJSru4DJq3o6nBlEyUGR9swcn8iqFdA9/lVE1TvPr
+            ns/eRNE3rCHfDFRap68RLb2yG5I67zDXxzAdOmv+dMVSy6lcRfdT51KoQxLrfPpk
+            0PH3GYYo89D2QflZDr8UcPOBBBxi/J4rkRyOkKktfOX3TQfiOjj7aDR373DzA3rS
+            XgEfI6cnGxkeOFe49Oo/DF+ZPPbAWw3An9EeBRzuhPzmojcLqYXFLK4MKhzLyzfG
+            +ppdvcZ6AZrlkYtU+9tp6X/q6r8pP5UsQr4X6gkeyXcFcw5Elv+UhN1QmpXRe3U=
+            =6WDs
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/glotzbert/secrets.yaml

@@ -0,0 +1,182 @@
+ceph:
+    secret: ENC[AES256_GCM,data:Q/A3/j8UoOzxRWWy6p9YALuHCyoHUVkbk4HILnlWIoAEgc9OhlNNhQ==,iv:5op5U1Bgz0obN/Nelv9xR0dAVhq3O2qlIjynAmZ4QSo=,tag:Gd9HrzEcR2GmCe7/fbN43A==,type:str]
+sops:
+    shamir_threshold: 1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1zqpep2vgfqeyvtj2jpxczfgrpjffwda429rnuztfp0vpqsrqdq8s8f4yua
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiYnJPRHhWSVlyRzlaZnll
+            YURMNmdGc0ZSakdYSkFsM2pCUmkrR1ZxSUZNCittRE9UWllrQUJYRlgwZ2tPM3NV
+            cVZkdjYzenU0RTQ4ZGVldGF5enBwR1EKLS0tIEhZcjA4V2tiMFFhTWZqY21Dc3RU
+            MmlyWStDNjhiU2crYktXQVU2YW5hd0EKWuc8bhvLeEBOTbd6H5HYPSnKp1UM22zN
+            ds8mhMs8dbSYt9+pvL2L3VzS2xJT2mJd39G9qrjGEZ/o2KvW5aLBtA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByWElCSm4wYXZtMThwVVdy
+            RUJCaUJ3TTVIRzVxQ2ZndVhVRVBHNXY2cEhjClpST1llckgyOThJTFREa2tlclJ3
+            c0JVUlRoOFVYL0tMN0dGNzgwZ3dhWmMKLS0tIEc1NTRQMjI2UVN1eFc0ejBQNDl5
+            VlpsUFRmMUQwRUFDbjlFaTZoSkJqMkEKQTehwlO/14yy/lYhPQ7vBQx9l45Mr/+r
+            rsUkbRva6Zxd5Cc++31LI5tWC2m5HHyNnL/O9kPAGXLzYWaF8SUqUw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-11-10T23:28:29Z"
+    mac: ENC[AES256_GCM,data:Hvf+0ysqlOmCh4ZJ3QLNHGjHuQikQhZEbWSSGG98XsOoBpjFCoNtpmZpIlpKJPGLw5IXnd2MS/WPVRX0ka0Om7rnvbaCqr5wcz/nNV78WyEYiUJbyDT9nCrh5FTkwjZlbPTvc5l0xbTXm69y+uPFfg7JDdxT0fUUb6gP9IUgUPc=,iv:pN6l2gmVqmq+JhWBBFMxTGi0uFUSL23XGjF/qMJ1jqQ=,tag:L1FkQ1aScdC9iAJgwUrNVA==,type:str]
+    pgp:
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA6j84+xkv3y7AQ/9Fk1Zd5vkkRzUB1fjpywCni/cH4boUdaTg7q11QXpksyB
+            5i++DjLWQeMlOUoRmJVwQu3e6AqfZJPcNX2SW51Ztwt+TUAZ5jjVJPrdpExhZ0V7
+            Vyvjf2q9wsiOEesIov6DaRGGH5KSZB0QXCo7hFDbd1fvcg1EufZ98WCyoFyn8/yp
+            q88ihPksFbVJB3gbHsvTcheYEwX6fD+EFSEKeIBnoDHRJ7/OZ2w30HLXxfLyOVxI
+            BAx+uI0mDVcNYzcQLmvX5Wnb7x/NCqb5foJnyJExqsHnfaok5xQrFJkU23L5vHBC
+            tXlj46MSoeDyGEg/K95rXXjjt+viBB/v0wO4O2s/hai/j1PYUBagCQoCqFk7fsDa
+            kYkV23QK1blHDKahBIJoLoS74hNzyAK9oeMJTvUzqnNq5CN3NGrOCH8VXNLJ7DIW
+            N8vkpLGuiyUi02O7gzTCQfhLk+33B0zMRkX8RwycLUTzbqJEMrj99/HcfVy67us3
+            AUm8ZFQqzcJDO7qf6i/W57NT5JDpAz/NstRC1WBb2lUv6KY+7zF5cbrGEu6yKe0O
+            OfcGjI4epoxOguQKtXQs2jOyWVkFzpkciVE90cv4Ut61NPVMfyQMnWVkzBbWJprM
+            7wglJu9UUoZZ77hkjMOoY5jii8vckvSf7pc9ZIthlzAfiHOYXv6GCunoP8QjBXXS
+            UQHesXuD2P3cwMlCBKS0r/iEAQKDwRIFLcEqrPxNeo9690z79JBNL4TcZ7knCcUL
+            xBSa6VjmLhE676DePitkIa+vQA1juUD6lraPfShmNX7/+w==
+            =+sVF
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA8zMZ+ak7y/zAQ//QuAWHzSQIHbYOBCtzazdEewvpK1cgKKenSCqjLtZ9QGZ
+            MO2b1OqWanT8P1IC7nI7mGE37+j0XsamWtkfn0+4GnZKEENOu/QRJYbvjdeVu3AJ
+            jLYgR4RQhBo6GGr/Jq/mTC53QdojAzw9kyQUnm5SaKkOlUw1qr2oL6ds4YTtJTjw
+            TFbuwFETtK//T1x+QnIY7qLNu17JNmpi/I06SDRnnbUyZe3X6ioaiytIBqZnzizB
+            zGI7Zq3iwf+CfPmqqmL6xropW6+Wt8XJ3/72dOhJAyniaT64zksLG3tf2d9wZchW
+            o9Nesl6mfUYv6GmdK4yXIxu8bODbGEs5J8WcLzKUZf9czLiXJBEaqQFHSSHQ/auY
+            y1ePhw3KD4mrPKHCW9NkHBRDvErjrZjyksK9B7Xlu7bkdDSssPxLmHwEyq1CVdo3
+            4DIAhUysfsF4goafdUYJrMp5lWuxeMGTxlY6yAXNAl3qTdhjpj4stEEqVsi9CWwI
+            HbOF6xPhDYv8PH7eyAR/oqzTX47wcE4nAt7MPKU+g1iYPQDfUITBgNgNdEdathsY
+            STR90RDHYm7ZWuh7LFVQLsXK119R/AYl+7J3u/Ap5/Kx9H1MFMnUncGqFEVCpRTF
+            ZeH7cd9VW7VlYIYCq3ze2HOCOlVkRe1L4NHutGI7tVs7qrADp9waFX0tD/7DW2rS
+            UQFNOxOWIlk8KIATrr/zUXyLyv7Zv/3IK0yGCH2mbBY7csVdDfR+N7U+XBPcu0Ri
+            4h9DKzgFzCqAY+jOGaFFYQm5N2galaaO+k7NFPhvdEL+kQ==
+            =lgtB
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA45bZkLXmBFpAQf/VGCLU/vokA4akGkKmHV0P9IMVgLIVzWcWFF9EP77Sq9n
+            XO0nEbjpAxfY4yxvwWkf27c8R/iktL7Uw7bgdr6iSCXp0VrAfkVILIAstycF48fm
+            eh9wxbRcuAtxjECpxJpKayiiRYqyCwozggWpePOYOYG2AkX26Xkp6wfSimZD8QdM
+            bXqFr4tVT3rulvWxuYqrpjt3bhUJUBepeBVoU4LQxEpBk9l71StwzncXeRx5L1XL
+            8kf4avHoyk/d8PsxI6C6aWM/N7/aBtqGZFU2o+O1MYmsraZH0ZnbyeGkMhuojeNx
+            YUYpeMHMegHGoWFYEMX89KYCAES4/ZPq/jkW7kvELNJRAf6sHsR5npoL8xTS+aA9
+            kfBFkmlecFd0Gxjgs8CEdLMVhFiZcLsaSiJBmv9fSie6Y7pFzkMU8NAXTBvaWMJr
+            yw/fxkuaRU9iGgi9ZQXMxP7C
+            =izGk
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMAwMCBBrc/JA6AQ/+M2o6P2kLsR/UCXmDQ//OFjd4DlGbagflCp1i79ZyLrNG
+            2qDG4VFn/1YTrCsMOXstHwrp7QtEls59XtrUHF+3gFXSv3LAyVyLv2BseAaTjZAl
+            xBLfFdlkH3NhVVwrHaRy398su+IZF/i5IfFcOf15StFK+z2mJ3DZh17+F+5yv922
+            VDm46XdZVWZY1+0m+2Xf838k7DpMmZPgqnNfUFGmWNuFycWhQ0apm/qK4JJp5Tag
+            Ys1kmwPCZnH01paUBj9FJDWIompow4P3ZE6hV/f8LNeaE5cFGjUkK01lfXAMPYnR
+            +aOhjSV7GmimV+VQEqZbH5qzBOY6ftUWwoUymV5tAyUKBdkGA7ay3u0RiWzCK7Pw
+            09nksH56LdPgmjtduYIwtVCI+fiMmRDUixNIq7UvXuoR7nIQosIJbLf8a9neejZu
+            0HKzHtiuBdg9DZkdsCvArb8Q+GDCo4/2RTiiIFcdVrbYFejT6szkbdxyRVVH+fae
+            9bCWcbG5+LpmS71d0tFvC/jY3SweYSsxJLbmABbuNVQvlWAnFIUVtQEoojMp5Ljo
+            PXXQWSK/o6REZS6R0KUQmiSawSdZIu5RROCAAn80cGu6gb+LReJRu3NB4QX1al45
+            UAHI97Ylk6HPshyws0GxJIJS114ZQiXeefuJJP1Z3UYcnP8pK0ACmIgcFCKU6fbS
+            UQHGPwcEyiFeGguevR7IpsG9I618Yh5dqA25S4kXU7JLjjEW9kbu/tsndIbCIH2q
+            VnWBiSSm/AvHJ75VzNxtBYKyEDViPtOG/YEb41ht4M+y2w==
+            =KMsm
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9XEenRNYVGHAQ/+KA8DLDNZR5cT+gJnXRmTSdAfwVfGPNE2KUcoU/7hA+5c
+            ZSYGPwZNKV4gTGtwnYmCYmnCpEXRJP+NATr2xX0h0OHDPCPpkxNkclI+gA7Cv7C3
+            2kcS0QjiVTyyqH4zbkY0mfyxAUQWefrLS73gcV8IkX7YwKvOwojeRJP9M2L61g/U
+            Z7qFJCagzvCN7YaNIU4zIj26bxmscfgtpbZGNfAYg1HKKaIoXcrE07+80rsLJ7kI
+            4Fpufek90HWO1pG2cTq5rG3NGhxlTamTUqWeWkOotmyUfLvnpPpT4aJIW45/UhEq
+            rX3zk9ypzvYcf7ydj2HS1J8a67cip81/+LDuNDe5d4k5BbFjO8p9eY+IuBdzG2Wz
+            maya4ZI2DYpMu3skEJZ+CepVynpUhCqbJA+9GAMU0qiPVL5Qz81ttT7jjwaq41Px
+            LCtktW1f/BxUDt0iQyzNun/1ayURQTDL9hXDPNXGuClbe8xEEkdYS69k9t+eHAha
+            Yf5LCJqcUboyFoICOxTKQD/3bQ8hJJSc6vqcsVvsZSpjgP8Nbi1Bnm3+acLMsJUP
+            Ok2pI1Bf4eHSjDlJ0Ml3nW/ODPxXlbFH0W7XfpO0IYZMK+Bq9/4nWN2gngj3IDmy
+            rGwnjhaLsOTllPvjY9j5yT9GDxya+mYUk3lgK1GfeboQS5ZnKjXydVRWrL82AirS
+            UQGTNR7KTvdnYHxkYy6cX9nbeu+INx2q0f98etZGjfPHF6dG6uvuDB9j4Yz1ijW0
+            cH/mUE2zERyzzgvyk+t4JTdsitzdf37A5aJYYm18aGWAuQ==
+            =wmgF
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf+I1HeszrASMO33pZgOjq3vE+3mWk2F+C67bI7lLOIRXPZ
+            4m8DKd+CRt5WHosRXi606CybALREQRNG9xWUK3piMm7fsM2ag2yiIfKipB1/XjxV
+            w8E4V7XTuAQAyLvxEA/LDV5NePdtKVecgeA5yLi15JgfTpsgM554slDeF+Lnu/W4
+            cvj6x5gjYt6wgPGgkorUhxcPzxaWK2vbR3z4SS5nd/BBMPpsQwRXBlBQZ7RjwRNl
+            DhUn0+bujSZBnRYBCdij449UWBVCb7a7BQs5hmnIDJ4O+8sMPXL9ZhiIqwBc8ucE
+            RN0QyK5Xf2vs+GW18w2QXeLdlpMSV+j1kH8pQYT+ltJRAYScMU3GphHunXqq8iis
+            M54lLk8UzLMGWmk32Y/AEAwPyH5lBtegE2ur5vbQEMw5XOSlY/m6wN5DimhCwoMY
+            7LRIIATPsdXvtmJq9FV2E3IU
+            =BAh0
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+NPSTVLiIwqdg3wG2b2dzxRueTTiVvI3Cb1ogBgJ9MeDy
+            OThmzbaGfjFpfCkQJR7NOWkI1/OtRAE75huE0ZKkOvt/t0iu1N5046AM+fkoY8Gi
+            NPyULsnUDG76UyMgQG+nKaAVIf9Bft+MZ4i3FUp6OpbmU/+VBIuS5B3aNHSzEIAP
+            FRy4XRpgT0livBY3pO31cZSla7n41IJ43yMeODWV/NqvPvSWjL4X4nTDpFwC4HET
+            RgK11KW8kPYnC5cCaMpLpep6ZX4J7Cr9QFTijTdhwogszn1cY7wlCQIB3Kl/GHQw
+            TU69Nf+SQPAASsj9iV5xqjGykuB4pX2EUcQKX2vXUKDllqEj2vYSZr02sqaeCava
+            e2geKLwACZed0ICZ7+gFSVhO7DRR0P+9bTijahB01tBC+9NcHgDwWqrcc8sg8+ta
+            AjWrTwM2GeMMA/CYTDLtMpXiYVodtpupNTNK7EZtiB0Ijo4n/58Ppislgx8L+JJQ
+            VabKdhCIMNtpUSRd8cHT0weUQULLL50/8NuqEhRN3ggb0e/8p5XIcfoWy8ycERfh
+            ppaI1/PmKv85jVCg4hskmz8AeGUMf3YZrn4K8KEKlRDOZ8th9hUpgVdaY5UQ93g2
+            pF05il6CyMX33p2kjh4ie7b7FkBsqwxdnMPvQ3u/iasvxhyKFXPNiYasR4DcnTXS
+            UQEmqeCRN3MCCC1TfU/8WYXE6IJENScRt9NObh0BKqUb0RcacZc8Cgrb6+YVlk/a
+            H15dpE4Snhh8x3bpk/qu28nucQyu7rkbzgKTI2MxDfdtgw==
+            =bSn7
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-07-15T23:30:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA/YLzOYaRIJJAQ//QfpnCA3ueiFFOdncXpLb7CYpagdwvgsI8gvCgKpl2KKN
+            qBvihKl9VSgqtxHNtGWwkXzOp21yUMtmL9V3tECbF+yOaQKhU+wL8kqwJpBC1bqF
+            ADexC0NPhS8LsRIJbtGvseUNwoejIDIldSc8CtSKCyBc3U83vayrqhwNVBlHuP3l
+            GDijw8soNa9rfjboweLfYom97MuB9f56x7fYT6LAsfT/lCdY1HAVjvG+mcjs7T8h
+            MHr5Rv+YdVUjOW6OChIAWEPtH7wXVRrU/oTmfNDLgDz8avRcPIxE4Z0Ss2VnUxdT
+            WutoiLC0yReWktWR/POaonKcqopfFHhMm2wsMD3X1qdRL+aGCXL8ddZ+dYPy8Lay
+            4z9bEiTZBXhvZnNeMqjs0I/Ns4ooBrc6lCLLbz+6XQ7cQxnNPHJYmpk0FdHjlzMr
+            lsVwHF1497uyg8H7KBrHrpPz4BbHgjlAE0UdlVDO3cY/gz7s+VgVFWkfh+n8buYv
+            +jIVQVKKuMu9gslf1QuKw32RsT1k3CNkvm5u5/nA5pjSPUKr7fU+MhHbsr+eEJsj
+            3blJdYGeWKKDYJeay6fxFg1YlqDrqZMFfXJKB5n9Cq4dUDj12cRJ3eecsdw2GAGq
+            wiFcdbgYiXCQnlSOCYt5KSEb32WOLm4SIvVKLv94gRkNawYfBTNNs4mvDZhlzw7S
+            UQGB7Wo7ZPifwtTaCnJgTCbEug1fmIaq+9+caOKfK8C3sJ9QSImhAxpQ2N4H7qbT
+            m1el7qE+U1LW6HNSKXS6LgRaDwQ0G64jAtRfj9RXrsseNg==
+            =dI1q
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1