change username

like recommendation in description

.sops.yaml

@@ -13,6 +13,7 @@ keys:
     - 9EA68B7F21204979645182E4287B083353C3241C # j03
     - 53B26AEDC08246715E15504B236B6291555E8401 # sandro
     - 91EBE87016391323642A6803B966009D57E69CC6 # revol-xut
+    - DD0998E6CDF294537FC604F991FA5E5BF9AA901C # 0xA
 
   - &polygon-snowflake age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c # polygon
 
@@ -38,6 +39,7 @@ keys:
   - &hedgedoc age1jt5pj0c0fvmzg7quaucq4n2rzcx9ajzstp8ruwc8ewjpay5vqfqsdjaal8
   - &hydra age1px8sjpcmnz27ayczzu883n0p5ad34vnzj6rl9y2eyye546v0m3dqfqx459
   - &jabber age1tnq862ekxepjkes6efr282uj9gtcsqru04s5k0l2enq5djxyt5as0k0c2a
+  - &kibana age15nj7xkv7nrewxam4cd0uw6glxeh9xmq46lu4zdnq23trqch4pufqm9phq6
   - &leon age1cm0cjk2764s4pv5g7e67as34g9xtcltex96ga87wckndw62wqqlsvkscqc
   - &leoncloud age1aw9s4kcd6ys64ddzzfya9ajzln2tv8pm9uvz6d85v0r6eq4dudqq5vts86
   - &mailtngbert age1jr5mc4ekmjf4uk2ue4xcuy0yl202phlu2t6c544qfj45ahzag56s4d0kzj
@@ -54,6 +56,7 @@ keys:
   - &riscbert age148d87gqw59lmst5jv3vynhsu3tv4t4sj49s4lktvnplfcrjq2y5sjcwsu8
   - &scrape age1p60rg45qrzpv2hcfzxl8d8k9afkk7dtrhr98cngeyuhlega83ynssmtx5k
   - &sdrweb age1makkpv2t74lxmw0nk6m89nespva7j700pmt83pl5a4ldtj2k8fzqakw8h7
+  - &server8 age12jcu0jtw7m96evxnd0vu6lvsm8uswslrdhxd2u655vjrwhljmqdsptry37
   - &server9 age15vrlmtckjf4j242juw7l5e0s6eunn67ejr9acaztnl3tmvwpufrsevntva
   - &server10 age15qj8latetnrmgzd7krq02y65kn7lhq2pcwv8cvzej2783u5a9scqs79nmf
   - &spaceapi age125k9uyqw5ae5jqkfsak4d6c6rcx9q63ywuusk62pmxdnhwzqxgqq2jsau7
@@ -87,6 +90,7 @@ creation_rules:
       - *hedgedoc
       - *hydra
       - *jabber
+      - *kibana
       - *leon
       - *leoncloud
       - *mailtngbert
@@ -115,6 +119,12 @@ creation_rules:
       age:
       - *auth
       - *polygon-snowflake
+  - path_regex: hosts/bind/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *bind
+      - *polygon-snowflake
   - path_regex: hosts/blogs/[^/]+\.yaml$
     key_groups:
     - pgp: *admins
@@ -133,6 +143,12 @@ creation_rules:
       age:
       - *buzzrelay
       - *polygon-snowflake
+  - path_regex: hosts/c3d2-web/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *c3d2-web
+      - *polygon-snowflake
   - path_regex: hosts/dn42/[^/]+\.yaml$
     key_groups:
     - pgp: *admins
@@ -175,6 +191,18 @@ creation_rules:
       age:
       - *hydra
       - *polygon-snowflake
+  - path_regex: hosts/jabber/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *jabber
+      - *polygon-snowflake
+  - path_regex: hosts/kibana/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *kibana
+      - *polygon-snowflake
   - path_regex: hosts/mailtngbert/[^/]+\.yaml$
     key_groups:
     - pgp: *admins
@@ -187,6 +215,12 @@ creation_rules:
       age:
       - *mastodon
       - *polygon-snowflake
+  - path_regex: hosts/matemat/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *matemat
+      - *polygon-snowflake
   - path_regex: hosts/mediawiki/[^/]+\.yaml$
     key_groups:
     - pgp: *admins
@@ -205,6 +239,24 @@ creation_rules:
       age:
       - *radiobert
       - *polygon-snowflake
+  - path_regex: hosts/server8/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *server8
+      - *polygon-snowflake
+  - path_regex: hosts/server9/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *server9
+      - *polygon-snowflake
+  - path_regex: hosts/server10/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *server10
+      - *polygon-snowflake
   - path_regex: hosts/storage-ng/[^/]+\.yaml$
     key_groups:
     - pgp: *admins

README.md

@@ -277,3 +277,43 @@ in {
   };
 }
 ```
+
+## Server zfs setup
+
+For the other steps follow https://nixos.org/manual/nixos/unstable/index.html#sec-installation
+
+```
+sgdisk --zap-all /dev/sda
+parted /dev/sda -- mklabel gpt
+parted /dev/sda -- mkpart primary 512MB -40GB
+parted /dev/sda -- mkpart primary linux-swap -40GB 100%
+parted /dev/sda -- mkpart ESP fat32 1MB 512MB
+parted /dev/sda -- set 3 esp on
+mkswap -L swap /dev/sda2
+mkfs.fat -F 32 -n boot /dev/sda3
+pool create \
+  -o ashift=12 \
+  -o autotrim=on \
+  -R /mnt \
+  -O acltype=posixacl \
+  -O canmount=off \
+  -O compression=zstd \
+  -O dnodesize=auto \
+  -O normalization=formD \
+  -O relatime=on \
+  -O xattr=sa \
+  -O mountpoint=/ \
+  hydra /dev/sda1
+ zfs create -o canmount=on -o mountpoint=/ hydra/nixos
+ zfs create -o canmount=on -o mountpoint=/nix hydra/nixos/nix
+ zfs create -o canmount=on -o atime=off -o mountpoint=/nix/store hydra/nixos/nix/store
+ zfs create -o canmount=on -o mountpoint=/nix/var hydra/nixos/nix/var
+ zfs create -o canmount=off -o mountpoint=none hydra/data
+ zfs create -o canmount=on -o mountpoint=/etc hydra/data/etc
+ zfs create -o canmount=on -o mountpoint=/var hydra/data/var
+ zfs create -o canmount=on -o mountpoint=/var/backup hydra/data/var/backup
+ zfs create -o canmount=on -o mountpoint=/var/lib hydra/data/var/lib
+ zfs create -o canmount=on -o mountpoint=/var/log hydra/data/var/log
+ zfs create -o canmount=on -o mountpoint=/home hydra/data/home
+ zfs create -o canmount=off -o mountpoint=none -o refreservation=1G hydra/reserved
+```

config/default.nix

@@ -5,7 +5,11 @@
 
 lib.mkMerge [
   {
-    boot.cleanTmpDir = true;
+    boot = {
+      cleanTmpDir = true;
+      # recommend to turn off, only on by default for backwards compatibility
+      zfs.forceImportRoot = false;
+    };
 
     documentation.nixos.enable = false;
 
@@ -27,13 +31,14 @@ lib.mkMerge [
         ripgrep
         screen
         tcpdump
-        tmux
         tree
         vim
         wget
       ];
     };
 
+    hardware.enableRedistributableFirmware = lib.mkDefault true;
+
     i18n = {
       defaultLocale = "en_US.UTF-8";
       supportedLocales = [
@@ -44,7 +49,7 @@ lib.mkMerge [
 
     nix = {
       settings = {
-        builders-use-substitutes = true;
+        builders-use-substitutes = true; # TODO: move
         connect-timeout = 20;
         experimental-features = "nix-command flakes";
         fallback = true;
@@ -84,6 +89,7 @@ lib.mkMerge [
     programs = {
       fzf.keybindings = true;
       tmux = {
+        enable = true;
         aggressiveResize = true;
         baseIndex = 0;
         clock24 = true;
@@ -109,6 +115,10 @@ lib.mkMerge [
       vim.defaultEditor = true;
     };
 
+    boot.kernel.sysctl = {
+      "net.ipv4.tcp_congestion_control" = "bbr";
+    };
+
     security.acme = {
       acceptTerms = true;
       defaults = {
@@ -118,10 +128,20 @@ lib.mkMerge [
       };
     };
 
-    # Reboot on hang
-    systemd.watchdog = lib.mkIf (!config.boot.isContainer) {
-      runtimeTime = "15s";
-      rebootTime = "15s";
+    # TODO: move to nixos-modules
+    services = {
+      zfs.autoScrub.enable = true;
+    };
+
+    systemd = {
+      # Do not break the boot
+      enableEmergencyMode = false;
+
+      # Reboot on hang
+      watchdog = lib.mkIf (!config.boot.isContainer) {
+        runtimeTime = "15s";
+        rebootTime = "15s";
+      };
     };
 
     time.timeZone = lib.mkDefault "Europe/Berlin";
@@ -130,13 +150,4 @@ lib.mkMerge [
 
     zramSwap.enable = true;
   }
-
-  (lib.mkIf config.services.nginx.enable {
-    services.nginx = {
-      recommendedGzipSettings = true;
-      recommendedOptimisation = true;
-      recommendedProxySettings = true;
-      recommendedTlsSettings = true;
-    };
-  })
 ]

deploy-flake.sh

@@ -1,50 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i bash -p rsync
-
-# shellcheck shell=bash
-
-set -eou pipefail
-
-function show_help() {
-  echo "Usage:"
-  echo "$0 [--build-local] <host.hq.c3d2.de>"
-  echo "--help          Show this help."
-  echo "--build-local   Build config locally and copy it to the target system via nix copy"
-  exit 1
-}
-
-if [[ $# == 0 ]]; then
-  show_help
-fi
-
-while [[ $# -gt 0 ]]; do
-  case "${1:-}" in
-    "" | "-h" | "--help")
-      show_help
-      ;;
-    "--build-local")
-      build_local=true
-      ;;
-    *)
-      host=$1
-      ;;
-  esac
-  shift
-done
-
-if [[ -v build_local ]]; then
-  hostname=$(ssh root@"$host" hostname)
-  echo "$hostname> nix build"
-  nix --experimental-features 'nix-command flakes' -Lv build ".#nixosConfigurations.$hostname.config.system.build.toplevel"
-  store_path=$(readlink -f result)
-  echo "$hostname> nix copy"
-  nix --experimental-features 'nix-command flakes' copy --to ssh://root@"$host" -v "$store_path"
-
-  echo "$hostname> switch-to-configuration switch"
-  ssh root@"$host" "$store_path/bin/switch-to-configuration" switch
-else
-  rsync -az "$(dirname "$0")" root@"$host":nix-config
-
-  echo "> nixos-rebuild switch"
-  exec ssh root@"$host" 'nixos-rebuild --flake git+file://`pwd`/nix-config#`hostname` --override-input secrets git+file://`pwd`/nix-config/secrets switch'
-fi

flake.lock

@@ -36,11 +36,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671331441,
-        "narHash": "sha256-L/Ug4ZJXDLZp0OpJO/nTHn+wEgUcHgdqcyDLKQ8n6dg=",
+        "lastModified": 1672603271,
+        "narHash": "sha256-vEIqx9Wltokb5Ye7dLkQ8khmU1TYeQ4Mt7Abaia5obk=",
         "ref": "refs/heads/main",
-        "rev": "bf80240238bb9031083ce1b4136cf30e92d7c88c",
-        "revCount": 15,
+        "rev": "8722c0085c2ea1bad3a150c22c0a20637258cfd4",
+        "revCount": 20,
         "type": "git",
         "url": "https://gitea.c3d2.de/astro/alert2muc"
       },
@@ -103,6 +103,32 @@
         "url": "https://gitea.c3d2.de/astro/bevy-mandelbrot.git"
       }
     },
+    "buzz2elastic": {
+      "inputs": {
+        "naersk": [
+          "naersk"
+        ],
+        "nixpkgs": [
+          "nixos"
+        ],
+        "utils": [
+          "flake-utils"
+        ]
+      },
+      "locked": {
+        "lastModified": 1671937956,
+        "narHash": "sha256-RhG30s2s1H/bLGTmdyeF8vo6Z+lYN5BcOZXTN/ZAJw0=",
+        "ref": "refs/heads/main",
+        "rev": "9f4bd756c91e02610359b9f5551b26582d66f452",
+        "revCount": 5,
+        "type": "git",
+        "url": "https://gitea.c3d2.de/astro/buzz2elastic"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://gitea.c3d2.de/astro/buzz2elastic"
+      }
+    },
     "buzzrelay": {
       "inputs": {
         "naersk": [
@@ -145,11 +171,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1670028698,
-        "narHash": "sha256-JjmRgUg5004snQL03r5n4TjJmyD4qiwKdPDmx/1GeFw=",
+        "lastModified": 1672426574,
+        "narHash": "sha256-+obOvrQ/GKfmZ4yVsaCxE6q6EUDYRqQZpl75z6pllns=",
         "ref": "main",
-        "rev": "908fb9c8d3d2b0fbe5a17895639ef478f81e3f8d",
-        "revCount": 153,
+        "rev": "54e63744fc934376398de8f09c19030959d41896",
+        "revCount": 187,
         "type": "git",
         "url": "https://gitea.c3d2.de/astro/caveman.git"
       },
@@ -167,11 +193,11 @@
         "rust-analyzer-src": "rust-analyzer-src"
       },
       "locked": {
-        "lastModified": 1671862898,
-        "narHash": "sha256-uWExxLc7cHo1gBmVET/N157mtj8JPgy0cY8mZ8qBJEc=",
+        "lastModified": 1672554122,
+        "narHash": "sha256-vTnoOiRQtjaqdW0Hmtz73GyWEcyQstifpoZ7QAscWyA=",
         "owner": "nix-community",
         "repo": "fenix",
-        "rev": "df5825b50b784ea13753f08802ff12860afcfc99",
+        "rev": "f62d27fa582511fe4d1c32855b8cb4c57e335d9d",
         "type": "github"
       },
       "original": {
@@ -251,11 +277,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671806489,
-        "narHash": "sha256-8umNIoJ5SobJpqgojiJSLJMMWi6jGKnRgsGr/jz3rj0=",
+        "lastModified": 1671934509,
+        "narHash": "sha256-flutX1FzFos0+Va7jCAE8F4g/3gzJ9DsOlYYRsQ+Kh4=",
         "owner": "astro",
         "repo": "microvm.nix",
-        "rev": "7ffa178ebca78ebde68981d860d4983dc901ee2c",
+        "rev": "9bc97fe223048f09ec83de9b29b78766194e554c",
         "type": "github"
       },
       "original": {
@@ -308,11 +334,11 @@
     },
     "nixos": {
       "locked": {
-        "lastModified": 1671773928,
-        "narHash": "sha256-P4PQxizjTYP1oBdIbAey0UAIdylivj0l9/psS/JVwz8=",
+        "lastModified": 1672435815,
+        "narHash": "sha256-eiSsVGKVJelhccfyvXGCWYU2nVyXtbvbkcgljXEBXBs=",
         "owner": "SuperSandro2000",
         "repo": "nixpkgs",
-        "rev": "735ca3b00e501d1504aa46232b8789ef9412bac9",
+        "rev": "aadcb28f842b6bb1817c4a033b2bca406814c6fd",
         "type": "github"
       },
       "original": {
@@ -324,11 +350,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1671631481,
-        "narHash": "sha256-LP6NvQQNKdqDpXngECo6oCiWfYRb0KPGM5+D5lu7mPw=",
+        "lastModified": 1672566874,
+        "narHash": "sha256-/lmz3/xzdghGSFeCcTiKMjbj0uRmUqTZhh4HHeUJ++g=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "9577ab1eaf01a738b015a7a7ab2a4616e158b6cd",
+        "rev": "0517e81e8ce24a0f4f9eebedbd7bbefcac97c058",
         "type": "github"
       },
       "original": {
@@ -358,11 +384,11 @@
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1671892664,
-        "narHash": "sha256-UFpcl8X8RmC9o913z0N7QJyij9fM69HlY7yL/bKAMWs=",
+        "lastModified": 1672606031,
+        "narHash": "sha256-9fZctM8yQ7qUc1poSpAyqA+wFFE5AChb6aGcDU04/FM=",
         "owner": "SuperSandro2000",
         "repo": "nixos-modules",
-        "rev": "50db3061f930636e8995e45b1585cfa4a22a5092",
+        "rev": "91775e2b63ccdbbf4b7e3b19c8041ae472979477",
         "type": "github"
       },
       "original": {
@@ -406,11 +432,11 @@
     "openwrt": {
       "flake": false,
       "locked": {
-        "lastModified": 1671241543,
-        "narHash": "sha256-NREE0mVSA8UsyYtl28BsiwJr/wqutJ1Jqy/tQSinVC0=",
+        "lastModified": 1672491419,
+        "narHash": "sha256-/SKMlksnHYuLkhnKR0+gKJO7y0OdhsL1ScD3AHkU+Go=",
         "ref": "openwrt-21.02",
-        "rev": "b119562a0753c282f3cdab0912810bdbe71a0f68",
-        "revCount": 51266,
+        "rev": "76c9c2b113a8d372b4b4c1a5ccc941fb895dbdf5",
+        "revCount": 51268,
         "type": "git",
         "url": "https://git.openwrt.org/openwrt/openwrt.git"
       },
@@ -427,11 +453,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671875667,
-        "narHash": "sha256-cGuxJPLpqFAbd1rU+mGSQp2WlTPYmdF/Cmo19Q3PcNs=",
+        "lastModified": 1672565412,
+        "narHash": "sha256-4E8fv3RpQ6CZxGENSkxzXODNcTZ7V+Vuhm29W2b081U=",
         "owner": "astro",
         "repo": "nix-openwrt-imagebuilder",
-        "rev": "4e06a30879d9b8ed7c707599cedf06f60ca15695",
+        "rev": "70d50cc4a6e5ffb196253a9abc7a5bc49350bcba",
         "type": "github"
       },
       "original": {
@@ -446,6 +472,7 @@
         "alert2muc": "alert2muc",
         "bevy-julia": "bevy-julia",
         "bevy-mandelbrot": "bevy-mandelbrot",
+        "buzz2elastic": "buzz2elastic",
         "buzzrelay": "buzzrelay",
         "caveman": "caveman",
         "fenix": "fenix",
@@ -478,11 +505,11 @@
     "rust-analyzer-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1671798464,
-        "narHash": "sha256-UtpVOf6c6RVAImQMU1rSO4m7vJtTI7ewwOgM/xYbHDM=",
+        "lastModified": 1672498287,
+        "narHash": "sha256-K2ywmLEJ32D0vtmMHmRUymX2FmHi+kklyLYYcyCV5QY=",
         "owner": "rust-lang",
         "repo": "rust-analyzer",
-        "rev": "fb0db2a4202165cf501a755f4d12210043ffb90a",
+        "rev": "f31733b1d61dd8ab2012bbe466838be244a96dd3",
         "type": "github"
       },
       "original": {
@@ -502,11 +529,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671848331,
-        "narHash": "sha256-KuNCxEZgzTmO3YpHvjNh9i+DUO6wSp6f1/3Qsczs5cw=",
+        "lastModified": 1672540392,
+        "narHash": "sha256-Ugd89sapoMnNG2IGC0goij+XXEGOtD70H5i1bCAiVxE=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "631e692192eeeea85cdfb2a9dccbbfce543478b1",
+        "rev": "f17584a6e8f1f26b8d4606fa35d529466a015dc8",
         "type": "github"
       },
       "original": {
@@ -532,17 +559,12 @@
       }
     },
     "secrets": {
-      "inputs": {
-        "nixpkgs": [
-          "nixos"
-        ]
-      },
       "locked": {
-        "lastModified": 1659890996,
-        "narHash": "sha256-xURgGoznCPmpX35dn5AXcyNYicVn5ruvUKxfIMMiu8o=",
+        "lastModified": 1672104460,
+        "narHash": "sha256-y0xXyFWqiED1Nd5M+iGqHkSuhGgveDLn8qGiSdbWBH8=",
         "ref": "refs/heads/master",
-        "rev": "5ca106f648bef15d9954d956bda336eea28e8d75",
-        "revCount": 149,
+        "rev": "38c8c4f4d128c62b63d948115801750d795ec5a6",
+        "revCount": 161,
         "type": "git",
         "url": "ssh://gitea@gitea.c3d2.de/c3d2-admins/secrets.git"
       },
@@ -584,11 +606,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671472949,
-        "narHash": "sha256-9iHSGpljCX+RypahQssBXPwkru9onfKfceCTeVrMpH4=",
+        "lastModified": 1672543202,
+        "narHash": "sha256-nlCUtcIZxaBqUBG1GyaXhZmfyG5WK4e6LqypP8llX9E=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "32840f16ffa0856cdf9503a8658f2dd42bf70342",
+        "rev": "b35586cc5abacd4eba9ead138b53e2a60920f781",
         "type": "github"
       },
       "original": {
@@ -746,11 +768,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671823052,
-        "narHash": "sha256-uyutoJLPEHbn3vL0Oo5FWPyy0jAFvE9B1kRka8UFJ/I=",
+        "lastModified": 1672094890,
+        "narHash": "sha256-8tkgoE9sdkWFBUv1DSb2JqHLGruEvRVuyIlTA1WawCA=",
         "ref": "refs/heads/master",
-        "rev": "b4a363e05db4783f70621cfd6bdabefc2cf03bdf",
-        "revCount": 1712,
+        "rev": "14bdeccb453b7faafe53f656cdf8d439308d34b8",
+        "revCount": 1713,
         "type": "git",
         "url": "https://gitea.c3d2.de/zentralwerk/network.git"
       },

flake.nix

@@ -48,6 +48,14 @@
         rust-overlay.follows = "rust-overlay";
       };
     };
+    buzz2elastic = {
+      url = "git+https://gitea.c3d2.de/astro/buzz2elastic";
+      inputs = {
+        naersk.follows = "naersk";
+        nixpkgs.follows = "nixos";
+        utils.follows = "flake-utils";
+      };
+    };
     buzzrelay = {
       url = "git+https://gitea.c3d2.de/astro/buzzrelay";
       inputs = {
@@ -142,12 +150,8 @@
         fenix.follows = "fenix";
       };
     };
-    secrets = {
-      url = "git+ssh://gitea@gitea.c3d2.de/c3d2-admins/secrets.git";
-      inputs = {
-        nixpkgs.follows = "nixos";
-      };
-    };
+    # deprecated
+    secrets.url = "git+ssh://gitea@gitea.c3d2.de/c3d2-admins/secrets.git";
     sops-nix = {
       url = "github:Mic92/sops-nix";
       inputs = {
@@ -196,7 +200,7 @@
     };
   };
 
-  outputs = inputs@{ self, alert2muc, fenix, harmonia, heliwatch, microvm, naersk, nixos, nixos-hardware, nixos-modules, buzzrelay, caveman, oparl-scraper, scrapers, secrets, skyflake, sshlogd, sops-nix, spacemsg, ticker, tigger, yammat, zentralwerk, ... }:
+  outputs = inputs@{ self, alert2muc, fenix, harmonia, heliwatch, microvm, naersk, nixos, nixos-hardware, nixos-modules, buzz2elastic, buzzrelay, caveman, oparl-scraper, scrapers, secrets, skyflake, sshlogd, sops-nix, spacemsg, ticker, tigger, yammat, zentralwerk, ... }:
     let
       inherit (nixos) lib;
 
@@ -216,11 +220,19 @@
             ) result (builtins.attrNames hosts6."${ctx}")
           ) {} (builtins.attrNames hosts6)
         );
+
       hostRegistry =
         builtins.foldl' (result: net:
           lib.recursiveUpdate result (extractZwHosts zentralwerk.lib.config.site.net."${net}")
         ) {} [ "core" "cluster" "c3d2" "serv" "flpk" "pub" ];
 
+        overlayList = [
+          fenix.overlays.default
+          heliwatch.overlay
+          naersk.overlay
+          self.overlays
+        ];
+
       # Our custom NixOS builder
       nixosSystem' =
         { nixpkgs ? inputs.nixos
@@ -235,12 +247,10 @@
           ({ config, ... }: {
             _module.args = {
               inherit hostRegistry inputs zentralwerk;
-              libz = nixos-modules.lib { inherit lib config; };
+              libS = nixos-modules.lib { inherit lib config; };
             };
 
-            nixpkgs.overlays = [
-              self.overlays
-            ];
+            nixpkgs.overlays = overlayList;
           })
 
           self.nixosModules.c3d2
@@ -257,12 +267,9 @@
         inherit (inputs) tracer bevy-mandelbrot bevy-julia;
       };
 
-      legacyPackages = lib.attrsets.mapAttrs (_: pkgs:
-        pkgs.appendOverlays [
-          fenix.overlays.default
-          naersk.overlay
-          self.overlays
-        ]) nixos.legacyPackages;
+      legacyPackages = lib.attrsets.mapAttrs (_: pkgs: pkgs.appendOverlays overlayList) nixos.legacyPackages;
+
+      lib = { inherit hostRegistry; };
 
       packages = import ./packages.nix { inherit hostRegistry inputs lib microvm secrets self; };
 
@@ -274,6 +281,21 @@
           ];
         };
 
+        bind = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/bind
+          ];
+        };
+
+        blogs = nixosSystem' {
+          modules = [
+            self.nixosModules.plume
+            self.nixosModules.microvm
+            ./hosts/blogs
+          ];
+        };
+
         broker = nixosSystem' {
           modules = [
             self.nixosModules.microvm
@@ -281,6 +303,57 @@
           ];
         };
 
+        buzzrelay = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            buzzrelay.nixosModules.default
+            ./hosts/buzzrelay
+          ];
+        };
+
+        c3d2-web = nixosSystem' {
+          modules = [
+            { _module.args = { inherit nixos; }; }
+            self.nixosModules.microvm
+            ./hosts/c3d2-web
+          ];
+        };
+
+        caveman = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            caveman.nixosModule
+            ./hosts/caveman
+          ];
+        };
+
+        dacbert = nixosSystem' {
+          modules = [
+            nixos-hardware.nixosModules.raspberry-pi-4
+            self.nixosModules.rpi-netboot
+            ./hosts/dacbert
+          ];
+          system = "aarch64-linux";
+        };
+
+        dn42 = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/dn42
+            {
+              # TODO: migrate to sops
+              nixpkgs.overlays = [ secrets.overlays.dn42 ];
+            }
+          ];
+        };
+
+        direkthilfe = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/direkthilfe
+          ];
+        };
+
         factorio = nixosSystem' {
           modules = [
             self.nixosModules.microvm
@@ -293,6 +366,7 @@
             self.nixosModules.microvm
             ./hosts/freifunk
             {
+              # TODO: migrate to sops
               nixpkgs.overlays = with secrets.overlays; [
                 freifunk ospf
               ];
@@ -319,148 +393,13 @@
             ./hosts/glotzbert
             nixos-hardware.nixosModules.common-cpu-intel
             nixos-hardware.nixosModules.common-pc-ssd
-            # TODO: migrate away from secrets repo
-            secrets.nixosModules.admins
           ];
         };
 
-        hedgedoc = nixosSystem' {
+        gnunet = nixosSystem' {
           modules = [
-            self.nixosModules.microvm
-            ./hosts/hedgedoc
-          ];
-        };
-
-        pulsebert = nixosSystem' {
-          modules = [
-            ./hosts/pulsebert
-            # build: outputs.nixosConfigurations.pulsebert.config.system.build.sdImage
-            # run: unzstd -cd result/sd-image/nixos-sd-image-*-aarch64-linux.img.zst | pv -br | sudo dd bs=4M of=/dev/sdX
-            "${inputs.nixos}/nixos/modules/installer/sd-card/sd-image-aarch64-new-kernel.nix"
-            {
-              nixpkgs = {
-                hostPlatform = "aarch64-linux";
-                # buildPlatform = "x86_64-linux";
-              };
-            }
-          ];
-        };
-
-        radiobert = nixosSystem' {
-          modules = [
-            ({ ... }:
-            {
-              nixpkgs.overlays = [ heliwatch.overlay ];
-            })
-            ./hosts/radiobert
-          ];
-          system = "aarch64-linux";
-        };
-
-        nncp = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            self.nixosModules.nncp
-            ./hosts/nncp
-          ];
-        };
-
-        mailtngbert = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/mailtngbert
-          ];
-          system = "x86_64-linux";
-        };
-
-        dacbert = nixosSystem' {
-          modules = [
-            nixos-hardware.nixosModules.raspberry-pi-4
-            self.nixosModules.rpi-netboot
-            ./hosts/dacbert
-          ];
-          system = "aarch64-linux";
-        };
-
-        rpi-netboot = nixosSystem' {
-          modules = [
-            { _module.args = { inherit nixos; }; }
-            nixos-hardware.nixosModules.raspberry-pi-4
-            self.nixosModules.rpi-netboot
-            ./hosts/rpi-netboot
-          ];
-          system = "aarch64-linux";
-        };
-
-        schalter = nixosSystem' {
-          modules = [
-            "${nixos}/nixos/modules/installer/sd-card/sd-image-raspberrypi.nix"
-            ({ lib, ... }: {
-              networking.hostName = "schalter";
-              hardware.enableRedistributableFirmware = true;
-              #networking.wireless.enable = true;
-              powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
-
-              boot = {
-                loader = {
-                  grub.enable = false;
-                  raspberryPi = {
-                    enable = true;
-                    version = 1;
-                    uboot.enable = false;
-                  };
-                  generic-extlinux-compatible.enable = lib.mkForce false;
-                };
-                # supportedFilesystems = lib.mkForce [ "vfat" "ext4" ];
-
-                tmpOnTmpfs = true;
-              };
-              nixpkgs.config.packageOverrides = pkgs: {
-                makeModulesClosure = x:
-                  # prevent kernel install fail due to missing modules
-                  pkgs.makeModulesClosure (x // { allowMissing = true; });
-              };
-              sdImage = {
-                compressImage = false;
-                imageBaseName = "schalter";
-                firmwareSize = 512;
-              };
-
-              nixpkgs.crossSystem = nixos.lib.systems.examples.raspberryPi;
-            })
-          ];
-          system = "x86_64-linux";
-        };
-
-        matemat = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/matemat
-            yammat.nixosModule
-            # TODO: migrate away from secrets repo
-            secrets.nixosModules.admins
-            { nixpkgs.overlays = [ secrets.overlays.matemat ]; }
-          ];
-        };
-
-        scrape = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/scrape
-            {
-              nixpkgs.overlays = [ secrets.overlays.scrape ];
-              _module.args = { inherit scrapers; };
-            }
-          ];
-        };
-
-        dn42 = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/dn42
-            {
-              nixpkgs.overlays = [ secrets.overlays.dn42 ];
-            }
+            self.nixosModules.cluster-options
+            ./hosts/gnunet
           ];
         };
 
@@ -471,6 +410,13 @@
           ];
         };
 
+        hedgedoc = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/hedgedoc
+          ];
+        };
+
         hydra = nixosSystem' {
           modules = [
             self.nixosModules.cluster
@@ -486,43 +432,66 @@
           ];
         };
 
-        mucbot = nixosSystem' {
-          modules = [
-            { _module.args = { inherit tigger; }; }
-            "${tigger}/module.nix"
-            { nixpkgs.overlays = [ secrets.overlays.mucbot ]; }
-            ./hosts/mucbot
-            self.nixosModules.cluster-options
-          ];
-        };
-
-        public-access-proxy = nixosSystem' {
+        jabber = nixosSystem' {
           modules = [
+            {
+              # TODO: migrate to sops
+              nixpkgs.overlays = with secrets.overlays; [ jabber ];
+            }
             self.nixosModules.microvm
-            ./hosts/public-access-proxy
+            ./hosts/jabber
           ];
         };
 
-        ticker = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ticker.nixosModules.ticker
-            ./hosts/ticker
-          ];
-        };
-
-        spaceapi = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            "${spacemsg}/spaceapi/module.nix"
-            ./hosts/spaceapi
-          ];
-        };
-
-        stream = nixosSystem' {
+        kibana = nixosSystem' {
           modules = [
             self.nixosModules.cluster-options
-            ./hosts/stream
+            buzz2elastic.nixosModules.default
+            ./hosts/kibana
+          ];
+        };
+
+        leon = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            ./hosts/leon
+          ];
+        };
+
+        leoncloud = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            ./hosts/leoncloud
+          ];
+        };
+
+        mailtngbert = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/mailtngbert
+          ];
+          system = "x86_64-linux";
+        };
+
+        mastodon = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/mastodon
+          ];
+        };
+
+        matemat = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/matemat
+            yammat.nixosModule
+          ];
+        };
+
+        mediawiki = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/mediawiki
           ];
         };
 
@@ -536,48 +505,166 @@
           ];
         };
 
-        c3d2-web = nixosSystem' {
+        mucbot = nixosSystem' {
+          modules = [
+            "${tigger}/module.nix"
+            {
+              _module.args = { inherit tigger; };
+
+              # TODO: migrate to sops
+              nixpkgs.overlays = [ secrets.overlays.mucbot ];
+            }
+            ./hosts/mucbot
+            self.nixosModules.cluster-options
+          ];
+        };
+
+        network-homepage = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/network-homepage
+          ];
+        };
+
+        nfsroot = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/nfsroot
+            {
+              _module.args.tftproots = nixos.lib.filterAttrs (name: _:
+                builtins.match ".+-tftproot" name != null
+              ) self.packages.x86_64-linux;
+            }
+          ];
+        };
+
+        nncp = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            self.nixosModules.nncp
+            ./hosts/nncp
+          ];
+        };
+
+        oparl = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/oparl
+            {
+              _module.args = { inherit oparl-scraper; };
+            }
+          ];
+        };
+
+        owncast = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            ./hosts/owncast
+          ];
+        };
+
+        prometheus = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            alert2muc.nixosModules.default
+            ./hosts/prometheus
+          ];
+        };
+
+        pulsebert = nixosSystem' {
+          modules = [
+            ./hosts/pulsebert
+            # build: outputs.nixosConfigurations.pulsebert.config.system.build.sdImage
+            # run: unzstd -cd result/sd-image/nixos-sd-image-*-aarch64-linux.img.zst | pv -br | sudo dd bs=4M of=/dev/sdX
+            "${inputs.nixos}/nixos/modules/installer/sd-card/sd-image-aarch64-new-kernel.nix"
+            {
+              nixpkgs = {
+                hostPlatform = "aarch64-linux";
+                # buildPlatform = "x86_64-linux";
+              };
+            }
+          ];
+        };
+
+        public-access-proxy = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/public-access-proxy
+          ];
+        };
+
+        radiobert = nixosSystem' {
+          modules = [
+            ./hosts/radiobert
+          ];
+          system = "aarch64-linux";
+        };
+
+        rc3ticker = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            ticker.nixosModules.ticker
+            ./hosts/rc3ticker
+          ];
+        };
+
+        riscbert = nixosSystem' {
+          modules = [
+            nixos-hardware.nixosModules.starfive-visionfive-v1
+            ./hosts/riscbert
+            {
+              nixpkgs.crossSystem = {
+                config = "riscv64-unknown-linux-gnu";
+                system = "riscv64-linux";
+              };
+            }
+          ];
+          system = "x86_64-linux";
+        };
+
+        rpi-netboot = nixosSystem' {
           modules = [
             { _module.args = { inherit nixos; }; }
+            nixos-hardware.nixosModules.raspberry-pi-4
+            self.nixosModules.rpi-netboot
+            ./hosts/rpi-netboot
+          ];
+          system = "aarch64-linux";
+        };
+
+        schalter = nixosSystem' {
+          modules = [
+            "${nixos}/nixos/modules/installer/sd-card/sd-image-raspberrypi.nix"
+            ./hosts/schalter
+          ];
+          system = "x86_64-linux";
+        };
+
+        scrape = nixosSystem' {
+          modules = [
             self.nixosModules.microvm
-            ./hosts/c3d2-web
-            { nixpkgs.overlays = [ secrets.overlays.c3d2-web ]; }
+            ./hosts/scrape
+            {
+              _module.args = { inherit scrapers; };
+
+              # TODO: migrate to sops
+              nixpkgs.overlays = [ secrets.overlays.scrape ];
+            }
           ];
         };
 
         sdrweb = nixosSystem' {
           modules = [
             self.nixosModules.cluster-options
-            { nixpkgs.overlays = [ secrets.overlays.mucbot ]; }
+            {
+              # TODO: migrate to sops
+              nixpkgs.overlays = [ secrets.overlays.mucbot ];
+            }
             heliwatch.nixosModules.heliwatch
             ./hosts/sdrweb
           ];
         };
 
-        bind = nixosSystem' {
-          modules = [
-            { nixpkgs.overlays = with secrets.overlays; [ bind ]; }
-            self.nixosModules.microvm
-            ./hosts/bind
-          ];
-        };
-
-        jabber = nixosSystem' {
-          modules = [
-            { nixpkgs.overlays = with secrets.overlays; [ jabber ]; }
-            self.nixosModules.microvm
-            ./hosts/jabber
-          ];
-        };
-
-        blogs = nixosSystem' {
-          modules = [
-            self.nixosModules.plume
-            self.nixosModules.microvm
-            ./hosts/blogs
-          ];
-        };
-
         server8 = nixosSystem' {
           modules = [
             ./hosts/server8
@@ -612,81 +699,11 @@
           ];
         };
 
-        oparl = nixosSystem' {
+        spaceapi = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/oparl
-            {
-              _module.args = { inherit oparl-scraper; };
-            }
-          ];
-        };
-
-        leon = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            ./hosts/leon
-          ];
-        };
-
-        leoncloud = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            ./hosts/leoncloud
-          ];
-        };
-
-        nfsroot = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/nfsroot
-            {
-              _module.args.tftproots = nixos.lib.filterAttrs (name: _:
-                builtins.match ".+-tftproot" name != null
-              ) self.packages.x86_64-linux;
-            }
-          ];
-        };
-
-        riscbert = nixosSystem' {
-          modules = [
-            nixos-hardware.nixosModules.starfive-visionfive-v1
-            ./hosts/riscbert
-            {
-              nixpkgs.crossSystem = {
-                config = "riscv64-unknown-linux-gnu";
-                system = "riscv64-linux";
-              };
-            }
-          ];
-          system = "x86_64-linux";
-        };
-
-        direkthilfe = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/direkthilfe
-          ];
-        };
-
-        mediawiki = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/mediawiki
-          ];
-        };
-
-        gnunet = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            ./hosts/gnunet
-          ];
-        };
-
-        zengel = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/zengel
+            "${spacemsg}/spaceapi/module.nix"
+            ./hosts/spaceapi
           ];
         };
 
@@ -698,56 +715,25 @@
           ];
         };
 
-        network-homepage = nixosSystem' {
+        stream = nixosSystem' {
+          modules = [
+            self.nixosModules.cluster-options
+            ./hosts/stream
+          ];
+        };
+
+        ticker = nixosSystem' {
           modules = [
             self.nixosModules.microvm
-            ./hosts/network-homepage
-          ];
-        };
-
-        caveman = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            caveman.nixosModule
-            ./hosts/caveman
-          ];
-        };
-
-        owncast = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            ./hosts/owncast
-          ];
-        };
-
-        prometheus = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            alert2muc.nixosModules.default
-            ./hosts/prometheus
-          ];
-        };
-
-        mastodon = nixosSystem' {
-          modules = [
-            self.nixosModules.microvm
-            ./hosts/mastodon
-          ];
-        };
-
-        buzzrelay = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
-            buzzrelay.nixosModules.default
-            ./hosts/buzzrelay
-          ];
-        };
-
-        rc3ticker = nixosSystem' {
-          modules = [
-            self.nixosModules.cluster-options
             ticker.nixosModules.ticker
-            ./hosts/rc3ticker
+            ./hosts/ticker
+          ];
+        };
+
+        zengel = nixosSystem' {
+          modules = [
+            self.nixosModules.microvm
+            ./hosts/zengel
           ];
         };
       };

hosts/auth/README.md

@@ -0,0 +1,17 @@
+# Design
+
+We are using [portunus](https://github.com/majewsky/portunus) to manage an OpenLDAP server
+and currently [dex](https://dexidp.io/) to offer OIDC.
+Dex might be replaced in the future with an equivalent solution that can remember sessions to have true SSO.
+New services should use OAuth/OIDC if possible to lay the groundwork for SSO.
+If the application only support LDAP, that is also fine to use.
+
+# How to use it
+
+See the grafana configuration to see an example on how to use OAuth.
+To create a new application edit the dex configuration next to portunus.
+The aplication credentials are saved in sops.
+
+For an exmaple ldap configuration see the gitea, hydra or mailtngbert.
+The ldap settings are documented in portunus in detail.
+To connect to `auth.c3d2.de` the nixos-modules option `services.portunus.addToHosts` should be set to true.

hosts/auth/default.nix

@@ -1,4 +1,4 @@
-{ config, lib, libz, ... }:
+{ config, lib, libS, ... }:
 
 {
   c3d2.deployment.server = "server10";
@@ -48,9 +48,9 @@
 
   sops = {
     defaultSopsFile = ./secrets.yaml;
-    secrets."dex/environment" = libz.sops.permissionForUser "dex";
-    secrets."portunus/users/admin-password" = libz.sops.permissionForUser "portunus";
-    secrets."portunus/users/search-password" = libz.sops.permissionForUser "portunus";
+    secrets."dex/environment" = libS.sops.permissionForUser "dex";
+    secrets."portunus/users/admin-password" = libS.sops.permissionForUser "portunus";
+    secrets."portunus/users/search-password" = libS.sops.permissionForUser "portunus";
   };
 
   systemd.services.dex.serviceConfig = {

hosts/auth/secrets.yaml

@@ -1,5 +1,5 @@
 dex:
-    environment: ENC[AES256_GCM,data:X213Nj0ftMSdEG7Z18hceghX3w9wBV2q4Z/q7enbZm/rbZKM2L2SBZnCtf7NGoFuZbePe95HR+puKCzmHKHt891So6Uq11OA5DvMvl3IdNKkXpHwS8HicIZWTGwtle0CaESzJqI7LJl1ajzXFX/fo3RClGz8V9D5cFza54N/29xKrxyRd+vu9zlXN6ZX/w==,iv:wHLq9shvvrzImMRoYInlWQVACNGqazDEHqkcp25zHHw=,tag:xhaX0oK0qxuQigWXrwRfwQ==,type:str]
+    environment: ENC[AES256_GCM,data:pMU+2qCkzc6G7/U4iVgxQzJPpmdii7AHgrgW9AjedVZt2bh2gXNpsbEth236/ttQGphtBx/5Q6KnObduOvp3ReKOReYzP1SkHTNg9lgumfjflDY07qlzx4iKEmgyXsxjpZ9r9giWcK0Iav4bTn+1qFJVQJDLQT1nh+h8/vBD1RiTg1FQOEXx4mWdn8dIIIsUKpQ6a0xNNnmO7awXsLsbIjwWtefC0agafoHeQVM1MOrAgNhKFDwDnkrQN4nPdzzFClZyCTvh74orNQho9hO1TWSkIWKW5uJyDwtWsYf2ZBNaCuq+1NvDO//L0gXsSbH5triHIn602Hk6tnIp4J0MZB4rSfcrp90iG6c8XW3ohHUC+FkMNJ4wXCblHLGjkbjp7G5+vpuuB5Vg,iv:2lalbBUbCrnTiJgvWDc/GCQPfmZIviouloYysBQ9sds=,tag:rF30GzHyGeAHZ+9kzqm3Nw==,type:str]
 portunus:
     users:
         admin-password: ENC[AES256_GCM,data:Hxcj/ZxBeUmUDh+R6NWGe2fVTtd56d1VgPGKUG5mIf4=,iv:X6/3hk1SylA9xWNkrE7Ynu7jgY7YDU/rmJeALKfDVRU=,tag:y8RUy45n0EcpsYCrmjLrPQ==,type:str]
@@ -13,175 +13,195 @@ sops:
         - recipient: age1y7lxpxskqclwqluft2ct2c3u8weehus6t8evwk7cdnpakxzgcquspn827x
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia1BGY29QTEhEb0JaVXE3
-            cktvbFNHclpGcVVXUTN4S2FxM0xLQVZKUkZ3CnVtVG5aRHRpUDR3ZkhOS1pwdGdR
-            VXBCbE8wMFEzYmxCRG5Od1J0SnhGWFEKLS0tIGttU1RvMFJQNVc2azU1L1VocTJI
-            U2JwaFI0SlprbUFJUjF0WElmSERSS1EKtrQUjrXaiCY45ySJR5gMBB09eNU73ZCA
-            wePnt0MdM7ywiImfgaRZYka4fQffLHn/ZYY0X4sJ0rlji67lxdi40g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTU9lT2Q1RGRCUEtpWGlm
+            bGxKaHZqdXZMNXZES2VjbE5TaWRvWURWMzE0CkRWTFhGbDJzSXdaNVBoSzlDZVYx
+            WG5keTk5Q25sRU5lK3IzZmY1d2dQSVEKLS0tIGw2c1luOFRwaWFqeHNJVTZTdUFp
+            ZnlOeklxU1NYQjlja0Z6UXdDTlFWNU0K7iO32IKiHo7CeTL9zvFJFMYAju+B+/Kb
+            ruOs6+oa7WHo3m8/xu3+QqdmBtFM3pFttmHDplwWuuqfOFmzmu67eg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4eXdZT1VyY3daN2ROdm51
-            My9KTlozaW1JNmYwVlc4eHhQYjd3d1Z1Z21ZClpGcnhLcENoMjNxbnRCcjRvTGhv
-            S2toL055b2ZuU1Ezb0VaVzhQZTBuU1EKLS0tIE1jd3Yxd0xFN1VLRVlvQ2ZwRnNQ
-            OHlKSmZ0WGpJNTNlbGJZdWsvV2JVSjQKChNZeeT4l/ZiBMC0SZXY8wsNnZBtM9vw
-            WfVljqnQTMODkoLjfxcvET2xZjSHSI0wjULjMAgg67lRUEG2bxMp3g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTmhVVW5pc1JXVVlJaU1Z
+            TVRYbG9RVjdwRFhBM3E3MWhndU0xSjV1Z0JzCmNuV1JpcXNLMkRMRmpzNmwxdUpZ
+            ZS96cGtwcWYwb2puTnc1YTFwd2VBOEUKLS0tIGNMdEk4eml5dlNoSkFaNEpBYWF0
+            ZGIzMXJtU3hPbzRNeHYreVludGZpNVEKA5KTXVPs79DKea7i1lSXS5NC1q+Sz6Bt
+            yqHG+B/KhcLqK5WRg8VvU/1QZckCgIbuXW9Ol9fXQD6aZjMB+f/aSA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-23T23:08:05Z"
-    mac: ENC[AES256_GCM,data:rhV9INEgilWifP2XH+9wB1kiYOc+syjHBvhewpoukpbFsUYgLW9ISPjIlTFlAEP85dlCl0FwhR0SA/uJjC7rZOjVbmn4Dj81E+gB/3MfxTqHuAce3tPDdOc5KJrFr8EMw7K3F/sGXeRsfi/rmqDg5dY3KxfD2BYJs1SCbdM5dGw=,iv:b3Gncab2ASlyu5Z8X1JHd490eK8XEf4sFd6Y5X3OYng=,tag:Di0zen2aMdZtvGO+JAG30Q==,type:str]
+    lastmodified: "2022-12-26T03:23:07Z"
+    mac: ENC[AES256_GCM,data:13FewFzAyHTtD/IfOpUreY/G3p73GkX/0ute7y/JVDPvKVRLuA4HmKcul361AqDwAjKiJ0QtASmydld70Dwi9P5IuA8frwlF17y7/Sy0N4IncpH0BiP5VK2+Uv+VH1+gTS++QtTVVee1Nz0iAAx7QMbEZ3aFKu5RMNAupq9iJx0=,iv:Rn25HctJlC0J26zSCQI1gUjA5sKQKesUl//S9Ij0fa4=,tag:+B+MU9v6wR5L0HnN6iTxew==,type:str]
     pgp:
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7AQ//cox56OOXaP21Gcc31xkCLDyA4ZRvldGjlDgl+XP2/ATV
-            6OjBjpbcd1F6m0MjfTFofUUJs/Kwb61b4bCrcBVD7nlJhr96CMLV5fPUzXo7ZcA+
-            T+DFX0wPTlFWdyP2VdIgcntSAcVBeoTF/vUfW4edtFY/82Zl+csHcsy1K49YAJQe
-            m8T3MJX+31cVdyQ25vdXmnMnTGRLU/oQU3RdpneGgeYS9sskntczKgP65PU65B7I
-            zS2mAyMreDw/2V+mb69+PMMeznlDa/Qg3G7miA85R5vCjgl2BVW66B5MyupXlBF4
-            ASBbIZ1oeWGJ+xAErXc67XUJSgGbh4JijbtspiJKKUCqe10gYjytnQkHvz4d6qMf
-            SQsbNhJUNgq3UsBk9EubJnZXSIuYN6ZfxhTJgwtiVJojwVGltmg+Jsx0ya+53MPE
-            Axs8apAb98oPRoojbThscc0DsVjt2+wS42x5Pl7qci54xqfftyHRhN9T3suo2fuC
-            R4bJoCHmFM9681BZen+/XSj5h9gCw5HkXBZKM8vXxtJpa8CMnAlYqhYAvZFjwlk2
-            YJg0TF8BPKTTyht4VlI5CJQSdsHurDCT2SXYmefuAtYr0MvU+QjypT6LczpDaMho
-            lfibrAYp97DqlqAorV0PxLzLVfZsU0c6bJadhRBzPa8NMIBuhGPvv/6uO/xPzpnS
-            XgFpafi6/MSg7jOCRQOXqwAOa1s2ca3K3Sf3gP4O5uq6WgnZWb4KoinlfP6DcXUN
-            tJ6jRVv4qCj+GsP7/wA5zeGAiu6o0KYpz1WdlLJapHkcF6qrH+nGeLNYswvDlWc=
-            =9P63
+            hQIMA6j84+xkv3y7AQ//Vf5sigqokY/np/FLEcdqaGKwh/zOUhtihauga2y0I5N7
+            h3ZftFnQtXyxp4in0sNYbYZPKx2y+6OI0AbpoxiHNvu0GaBph9BFZ507rroh8Lq5
+            wg76cgg7eR8mfeKIWs0eSKWtbme3AtTKBNh1JMHHeWFBU0QT5dXaGmIIa5TX0Bhd
+            slOaxC4sCAhQmaOymbPpgWWKYSUmKhaDmV6QjyPtGrwyUd1DH3v24/9A1Z8Hb2QC
+            8+ePMw+n+rcgKQ+AzloVmJRhpEcYqPJTSCpp6wXOyULX4oXQqipJxI4cumhrs8lV
+            MVh+SayXPN8RqNJfx0/E47KAWaxg5e+eCAONIuv7tfEHpF+1fISze19+M1PAszKB
+            WKdcVDX7KpVym1fvpc5Rbrx9sYcBPKsWjC7eXRuiwpl7lQrXW7Cq5rLCEbsHlDoq
+            lK21a5b4RK+2QqgodMoihtmegjTVgLTSrERoM6JVHvCRKoyYqSy+Rh62As0KWYpA
+            2gbrG29gaOXmn/NQq1Gde1aGGPMjqeBJZBYJh1ywkjaDC/ng5yfi023Pwca0T6Vu
+            TH96LAu2/Dgit/diapUZYBSv3ljwnJSJN2O4UChtBL111TPqTnwGTPgKBTqkViEJ
+            mW0w9Tuyi0rcQQ1bXK0zd84zatiybQxG5WLxm8RPlLiCOq9cjEdSFnDNVo6iMT7S
+            XgEhViobHGtfuYakAwC7AV+1/AcwWA8XRm3yj1rhvnh8Udod1DnohPifB0FDycIf
+            +5ZwRZlg1gCXlUzgzrbyiLzkh0LV1he2nR87UzXpJpFuTndkZ3hgsxUYlU3kKb8=
+            =5+Lk
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/9FMOum2xOYa7nQO99A3dxo5Drdz7l1+bCEkGxPWXfcTCN
-            lpS0+T/tyVPCp012HwUC4UxZM2nen+18lBlu0FJJTEqlQogGlmW5pekAbv7WXsTt
-            lDKcyEX1JtjXhImc8DuN1Rx9SFbpwAUhCpqGzAsgmoUZQGMaS5AfFKuzGpD2u1va
-            Mrcbp5ouQOjWijECbdjvcvtLljlNvHlW4W8Xh3WdBw8VwoxI35QdpZnSINk/F27U
-            3t5Sxd+85xKXQ81WMol7iehNjilwTVfi71gaPhcKM8HxSfYbop7FnbTZ2karUflv
-            COPwlrBVAfqhuA/RE29xKeK3xX5p34KEVrRWMe6tSTL4gygZi97Da5v/dU7PsCOr
-            YhFNVgdS/zAARaNtSdM2e+QR1jR2Y5+7G4HiJ0cvp3yhqDTtz91ojqOFE+UgYKMr
-            ckX92R9t+dq3HR+QcZq2OXpZ6cWJ9vBlOmDkz1ct9mvB3g2S81zqTbOnoDv23SlC
-            W5iTFMHaKabRbHIxD/OgKKRKt5zBmt+vGgngNafKSZz3ftvLbmAulzqRhvxeAtiu
-            MxL0aj4dPSncwXeaqAPrza4r2DXT3iXxnnaDbEoXi3GLrI2DmOcblWRGfnYouGmo
-            R6CbwCIJ1i12i24EZPPmeWTTqNGp4ZroSKFJH8gqaBeeaHDMM3K5yiAYjyrDnw/S
-            XgFsabN3bifV5Ue8f5izDCDifUJPS0rNPfeDnSui/yJMkj4ZNkJGGM25M1gKxXdF
-            vKz5Jgipsz1eHbXnL7uELuuRH95AMt31AhY565zpZIOqiFPmVqe1ajawDNNDg8s=
-            =zj9P
+            hQIMA8zMZ+ak7y/zAQ/9GZX5eKRwzKdYwChVbzWf+Dy7I6Zk10ijg3A0wn8Y+HdV
+            yBf1eyQbwbLXV3lADDdmhMz8xBFEapuKJ9XPXVVO9OyqQ/49Ol7dW8yVVg+eUasi
+            dg1aWiMfNEsgoy8nxaF8NyVKQp8eOUQfnHH2kxtQUmo9mYp+qlLLmJKsKT+jK6yL
+            GEmzVkn/WyLg+flfIKCMogAWPcZF45vRH2/Iu5/oxoXnNp3Ti4hPxqDKQCfoE8AD
+            6UcLk4n+CIizdbGcfxpXik7yarIBYpbPvT/LJo0wokM5vlEOc4Rfv4dhbVQ3AbCW
+            6H4VgUf57Bqi0qicY8uV+9Fyo1i23Nm/Ji8c5FPeyS3Cymk7p5YNfAoTTDSXtIHG
+            ZNZHgPFJA1L0fFVfh2vVPZNyoOkwdh2jLoBNL6Nm4TztVajD/Vne5mxUccArBbm5
+            lECUwcJ0licmVhfYk+4Gdi9KWziND1A4lX0sT8MlXXl7XoFAh6iXJGU4kj6EK33D
+            jBu4bVhfiBCYWiIIVHFBOexHkpReCASwcpwS+v6nmkIhd4W3oYGA+DJGM7v/d6Qr
+            fCKCpYDapTGUxT5xjVHcFmEG93KXD7EmctCWTDdV/UdIIevRJqWIRetpzAClFGUe
+            GSzRKmhQFfqF7iIuAV4sqBX3t+hQwTu6V6CRBKxgtg3xCfsOVYIB3Q7uxw9+kXPS
+            XgEqbuCQU/IFAYK8ENR74xuHwkniJ2gkJA0DHX5k2mENXKcB76lG6/PU8aX7qz7X
+            JkEwBJnHoLH1P8aCe7W237rQySETB5tcWkJeiDxJmmH+BFBLG2+AqxOSC7dYPuA=
+            =U3a3
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf+KCmtLOd7pOx0agWHhgQxtDIXDCn5PvxjU3p+TXQ4TGWA
-            W2+4+17SFMlxyM02p/3nols+mUYQ0W7Dt9Pgkzh1hCN1nJl1JjWqc3Dg62hZS9V7
-            y4yhakVhJ5vbrTfkp4TA4yWaHubjVbGgNuxghLcD/15RhUKWREBVS3qGG4sPOjF6
-            vjwIutkclRUjIl+Dswzr3yQWVmL1k4Xq73pPPAzMFK+4RWqz+h0qUVFVV9CgeWy6
-            JqD39wApRWrV68QhhCPJ6gHU18Zv8gk02F3HvMuUDKXWxsBuwk0+SDOBSs9H3VIz
-            tu8uuVA2hFAb8D0HLK+eQ6CN1mdvcIucuDFd1kLVNNJeAZcWICQeLoNGJRlyxEKB
-            /h+//E1MqBevUKcpZaWp6/I9AIyArNGJrsvGXYsykLrexxRt/0goyC3hwrluTdng
-            Rn6kI6mhvikgO0qmeg+uNooyH5pBZseW2YzaTU6nbg==
-            =CGxM
+            hQEMA45bZkLXmBFpAQf+JjQLEML+3vCQyrCCiY1PG5f0LPb2bC9EeFsbL8M1FamI
+            bVBhnfH8C9f8bKTLwWgAtWG2behR1iZUv8Q5bfQfMEXyV7occeQkwM1HeYgoi+Ms
+            SrUkYX8IllfcBRV+z50XACbiSK2IbyWxP/eP2y2rNU72jLFq9OZGXS2QCOtkR9Bh
+            VoZ0NnWKKj5hn5iW+Ma5DVnNiuXCTcpQ0PvrUsm9gPgBWq3Epm8kdX5ZtnYQQirq
+            2JEnHaLUd2BM82Z831M2T69HIgbU2J7VcC4jxV0VV4PtCm9MH+mxNEJnkrdDsDT6
+            B98LH8PqzgtmDmXvRzM8ImOQMPzLbzVUIpowRsv/y9JeATAeICgtNK07pmpqQp+3
+            SO8Gw0dblN3Hgj6pkHPRE2pXptdTVtjepFPridBDRZ23y2rgbDwh6Bw6MCvPhjFK
+            U/h9mCcpKQsYXCRzybTFE9QVl3wwulJeWJ+MaGYI6w==
+            =oHDm
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAna4LxHXmrM+D8aarX+s2OPP9h8kaLHggbkBw3DgscaHG
-            RvsDAcxcqWqU8mY4GZhM1qJMdxt4rcs4PeZPBKymmWR9CuxmaCChEKXcfBSqncM2
-            BkUu7QbHfhIp6igfC8tZND/kWSLAfkB+ckXKotbusdJHUa0u44wJMr8FXolD95mz
-            WqTWt49QfUD7JB+rPdNCNyHvmY+i7tOjxT0uDRtcOpo6VRwYVQl4fQQvJrz28p4E
-            NfB5PIOdWsVR64v0epaVBci6Ed32OnTYZS9oXxDGed1Ns8ET9+PjFSzSaWc7aE3v
-            V8V9raxh6E8jNsRayrE/B+aQdARHGQ5WfIsvX+yLVYlNS262uEL84guCj2kNBsZg
-            2c0CYEKKj81M0fFMx5kyB6Kykd7jm3cVB0DEMt9eA7BIAc/Bu413UhqVVdUzAG/h
-            AXubA61gmTb2RbojakdraSfbBrdEzkgOKnpXJP/MT4CQ7fXrgaPfeEjWyAW2Ubra
-            k1RNhh1aWCi1ywls+mpx70g/dygmcHmxo+nkBhAvqcIagGY4fmpXJrR4snJByPZu
-            7UUOVGkh22jyXfvKiBWxa0IV1YmtXsgMWYbU+06W/v5dXoYfLCZklsrMVca70v8B
-            8MSroIESEDLNiyMvK3DUyTGzEnXY4mdq8XXn4OTXNAyShGl1JO7cRgUEqJat0g3S
-            lwE2si/ktYjr0bBRFYS0ZnCU44LOKRkcGGcXqmgVGYnlRPSU9zdAHTC9tkeZLUE6
-            waUTF79pemssbbWpGEG3YQcqU+UgoN8Atbf1W8e/ZLPx/UQsWNzLMe2gpHnv3sAb
-            0WQ/YdM42Lj+lECNkwkWVn8Bbxb5hq53jZzJub5mJZ/x2QSk+HQvj6hTHpXI2S78
-            GwGaOx70ayE=
-            =htKz
+            hQIMAwMCBBrc/JA6AQ//RUewLJPn8pd3er0XrnPxzzQ17rDnDkK+bFyeHNnOTJ/c
+            IPZCgwBRu5ZW74ZpEShLwuLhuG6kL6XVPxE5TMOIDo0ZFWV/kVrGtQSxrZ6fgAI3
+            xLiLb1k2b5wHYAUf1TnyLrNRCC+6LBWnMzROqNQ1Rtnig0LxZ5ugSePI0cU6PjBe
+            fIM7nqPBVsLAjpuBTDWtPRkj4Dk6KL9viSx/nx5e0gfydUIjd1bG1WE5edmdbGSg
+            3eI03NgcHSJha8HVLF8au8MgWxB8hkQk6RR6p7HU4jNS8S1kCPDXIoxQXz2Zy5ZJ
+            RtrJV6Jo1gTQ6W3MCiECfy0RpzD0hUd1bv0Yxz0lFRCA+GWwDayaNQNDS9HYUVTu
+            x2ngWcAgrB3xh7qT/oXlFy9zPf4yAymlLaP3esa2qlJljLkfhJM0NvMx78HfXpIS
+            JwGVtZkDucwIfblPf4TXpR5fq3011oaaFn5GgvAFBA1XGkEPT5aS5MDe2w/+r0Mk
+            F88iwLGGdb0C4KTsp8ywrQen3E3ANUSH3ItSjLzSe9Apha5OxARRT2F5B9a4g9y8
+            EQnQ5ASpl8kezdXdVrQrhOwUL3sluhombvhZMBbTPFz21RuJ4xg8eD8w/MBmlrit
+            ABFUEAOvaYvby1j6FSLQSUR2aUpMaFjiKDpyFUu0QMi184FDYmEf841yDydOXAbS
+            mQEep0g8xPGSV81iidUcdi0VtnQqQgZMvxMvqItjTENDF4Tl5dMm5q5mU5GKs28Z
+            ybgSuSfVqhXoyl8aeOt84FS+BKUMxF8gvpJnQk20Ctwz+Ogp4MTefkCqUU8cTptd
+            8HtJ5KK0SE10QvXWOFTRwUgIibtKuFjuntVJepnvaMwWm9aPOVquDGUy41bukth1
+            +1NDgQcrTPGtww==
+            =ANbp
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ/9EqJahhid4UfKo8qfA1CvDXBNWPnnHib+lh73Omm/Q2ke
-            k5wcdgjieXRAE0NxKZVyCqsbmcbXKMurCEFCdiIbzo330kp4Lxy1tHagZSg1hnu1
-            MpFM/GbhwCVj77IYrhv+GAULRl3TOOUx9QKgql4VXKl3e5q3ORKmm6ymVtg5LDzj
-            oSQU2WOEB+O/WxXo1wOnP3dFTUnfUx1oujgpnJjbuyjJc/wO0+m3nZ165o655Ol+
-            ej6MXw4cU8kIwMsYIYWoyksgJCmlLCJ1m6iYUT0iOKmNVbLtZXSZYigKAyg/DLmx
-            ycBgxE1+Ylr7GjEUVQL2TgMsZMgeLHahqrz7DjbVdRNIRaw5i3hyk1PBpszCwRLK
-            5d0jHJ1SF2SE87zRIKKOvH+pkaJvyvOdBCrqXKCjELhV9kDnH+ZPI7VyEzj9qsOc
-            C1DljDELgMnPbnHndCg7V8nxyg1Pl98HnQBOwr/FaXZZQZPJmC9fs3aioUTIdWu7
-            tszYH5nsFVk3usbCU8WDcGFn5MLnDKxmdpdr/G8bwa1pXo/vznRNAd/NtK8rlSGd
-            ogOgr8BIit7Bs6AZHyJLcfoTMzSZmipSIxMvq/BDPAIhPn0PRuz2QkVRHUwd0nYW
-            G9aTizXC7UWJi0PhyyKVnZIlWFp4v2pWmBoivKR/C6cIF3WDY51gfZPjtv+B36bS
-            XgELxQB8bR+TUTVxlU0HYA59MofiIatqyBH+WTI9EDBdOe9+Tr+wqu4seXkosY6Q
-            XBsqRSVZBWzTvfCtqwgc4+Z7V1CxV+iMJDfvbRTBg213jDKiPPhfuBqhvtU2jN4=
-            =LLlm
+            hQIMA9XEenRNYVGHARAA1B189cauADCg/Qc/8qmsUdQpzPyrkIbo4+Cc9gzcn4H2
+            f/761CHSkn634Hm9Bau2LXdgzbJip1+KZoGVT3jrXZelqrNh0HQ7XbJItt5vmtfr
+            QzK1oXTEjgXmz7/HNTQiVWmCKiNmnQd+U/66eQUzG/8YljqebiNKLw5Wjx/6bFrq
+            l2K300Ly7ncaGAOS0E/zf8Xsug6YAs8JKHsMQY2lQ0+4hB4dHUChPLZaw3QdC+Gx
+            RxbdbgAf0DPkUdlTcUk4gP0RsyYjDhmj7kX7JxkRt+ZoLRKehhVgcvCZgOLjijMo
+            1PBqiPI43+3MS6olgpK9R7I+YUEBG8nJyOyhxxuWjmIa4udv2gejJdHw+B6rJmW6
+            oobpbhVPjsAARRS+E7hyFD8IuJXpWWX1Ne2ZVDv+r8nwvFj7nDZ2dtIIG99Wvd55
+            HhMST52zRrr/VC5ANt+hE9hSToHuRoGH2n8YLTRfJ4p5JAlKnszvNEiK+Ozfb7KE
+            Go35TF9YkyEh9RVL1EmQ2k/1xFlcZS2siTdPx2pj1FV0ACsBQkib43Hq1H0tEm6z
+            Sfx2sDAkuUTHVmqpIxlClQUIvw2/Sc1KZzvwPiGnl4u0CpGIMF+yCVwJFoN3P2EO
+            QruEhO3gUYc2HfVpXG5KHROiATENYT/9zIYUQgnLOu875GLBNDNE8mglzqVwwE3S
+            XgG04bFHP/LZ/mdKb26K1jJxoJRT3F44ZuoHgeXO+GQUuOMCkEfzeo0MdHmBRhk2
+            8CLu8et1k4wTZnw69K5bgG8okBG59QEg/KT/456ImkagOqCw+CGaPgSxFktuVII=
+            =gA6J
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/c6nvx1MVEwbF/pZ7o5Dpj/r30GnL0zNpYyAMCgAwXaki
-            5nwvx84vq2/NleaI8J6cbXB3h5NzGArDVWa5V6W/Jg+vbPnLTzhYWmGSRBb34QD5
-            KSJ8C79b/Gv9i9a5my3j0Rpj7iJ9zFcHgbxYMlq6VInWJf9bH6owk/9iMaJfHM7R
-            2J85ykc+5Hn6raAbo+OGoClGAT6rVH7jwuN8V3LQp0QJaBPEfFmF2rH++xUuxaaS
-            Y/egu67yR0CooaiwxSyl/h7L8VtWTs5eRkWsAEFolfR4mCZ2eJwq7D7eljkxaNx8
-            w6mEHgDHyWx9lt/7lZ3TAv7e4I/FnaRgTL6bPJUPKNJRAZQ9tbwpTFWNGsG3z/UT
-            eQu1bhnOa6GEqy6iPSZr1ndJExS3mqq9UBvdKi4z88iKLrAfMgB1HzmkocYwDSvt
-            7rprso1qslJzqpEJquz/I7GV
-            =pz+t
+            wcBMA/Z87ylQaotQAQf/RjcueurDLRwH2pLbB4iLBCPSoNeF68YLHlfd8+STljvd
+            6gKPNRfDksyY5FxQxRzM3dM1IHwZ/AxsLH2as8N9xSOf4/O+C+/ljF7ceLGCrfrR
+            T9BT7y1kFJI0P7hP0MtIjFFhkx97gl5U92vEPQ01yPrILzwsE9/qwZyJKXwC3Nq+
+            g0HHXauK4+qZ+QPpoDo3sh6MHNn2JvzQ6h1y8vi//XiLrhQHRXsvwWdBhoiD/SA+
+            hzrJPZ2ZpwslBFXaJ/8TLsj+TjLHRdQ1XIx23kFJCZUG0Dmhn9W8EJ0kcSlvoR4r
+            iuDiSePUob92okMpPmpe5vWcreBF3/YJ1Z7FbQAv29JRAdNxnn4XI0B0xKph3rSg
+            ZXk9edGQdWzq30Tt22Hf+gFXiEfLmqxtwzDucE++lLdyGxgJSoqwxV7+0770X3jG
+            uYCVSbwuoHZG2oIHqrYT+k7k
+            =wwcl
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+LN9JY3vz5JIUVoYWaAE2kuSnd7sxwDAzRTA0yjYnvXLO
-            ZDsDmkP9AdVg3pj7+HEse7+PfNgTbewoMoytbAzi7P44XACbHzP/4JjXmPaWGARu
-            8PEp8patPvWPrHtSjpPkAjDj90KCOIy97SeTLzC589QgtN1oQlbERMtBkTV7Zhsq
-            EvGPJvoyenrYOSuDgjJwtt0V/qHoT7MhumGYcoojPOV30rUE+mVuUeK+UysAdfPs
-            3LGl1fIAfJNq1nqjOwH+y3PS1A2YJ604hsuzUnfuhkNbtQbu/mJfha1YcADkMAKD
-            srti7pKMSim9wD/zIiqI68vlvFQgdH6IZ2mN513KCXnTxFzcnYH+8ioJR8Mudcv1
-            ip2kBtQS4Dc+blD1usVSStcXZvfF69+Pxp3FgCIX4mKJx5iwppVA31voYiFH6gEA
-            OpVdJCAmNJYc3k7EmABfA06MM9DMtZZkp8X1D+YUgJh3RxE2lwGLIQB9ECl2pa8s
-            5GG9147jNLkuHFIjsfKtCtFHlSbKw+8WqbHZMj5FJNSGuJm04VpG14OGus23jQos
-            SnLo4u0VgSKwYl+KkDZKxsEqPtkuZk6+5xQ5T756cDsYd8VmzGOFAIw+zLcH8M1I
-            8KcBMd+f/pI7msvmbxcjcimCH+7TTEkQD1lwWJHp06czTskJNdeKM1iIdV9MRcTS
-            UQGFKICoH3JboTzTFZZ1gA72+ecToZ5lRVLt/X2ljX9eRO/Hpm1LwQXfoTC/Mlh2
-            4vkxF3en9dRzT2VMyPRvr4dxPVFn2weNpo7MxT3b6ohweQ==
-            =ssEn
+            wcFMA9qJIVK2WMV7AQ//cOi8LbfF9C+2LP18jhdY1FEKM5rTM9YSEp+l3PTQClg5
+            Y0pRNdHSAUFb5RYGkaipTYteOXJSORtX7Vdk9EKazf4p9St9MRUn2nhnDCt5Fcn2
+            dDep5Sv5AiGAVMO0skKWvoKPoy5mgSNhbCkA/kUbv0iE1FHFSx/5bkN97nIaU9T2
+            x5QwwgaMjc0C43+f5qLE3FaRk8XI914EZ0MAm2nK3WfuXLUYmQJ73GQu9P42bANi
+            Y92o9H0HU8Lm52lBdA3TetzHLr+t8lEn8PMmyGRZSoT72/UdeTUg6D7LMRCJwFH1
+            YMLIvctq6+6EcVUCPMMcQNRIcq1hqKdwl89hl2Q4nsr7UwucwT/kpNYnsoLyhOIB
+            xqjoxd8MwryYrs462HuD4uWZKXrtcD7Lepd01xXEi1R30KlRZ5im4DNyZ9XkB3Sg
+            6ltIA71agRDNFJsbIRC8Gq0dvXXi44s7w8CthJ1Sd/Iu+JrHD44+yihLpy218bXm
+            bdoK4QqEYaOrTaP4XcSavl2iwYzv652H5M8p0OrLcg96BaOa/U2ZgBoJPMILZ66J
+            ECEAQbQ/zBqiRZYjKdQc6zEFUbl01zLqtU21Pf+kcprqhur//yYeJjj662eRFkQB
+            dCvvToW1MsL4UdsRbUCiS8KmKwvDfEIJCKdCLJdom9wdk4YApJUx+ix1mgckRrzS
+            UQEx1i8QAl4bpXPSVjNP79Tx4foE6jUcaWjqeKWGuoFRPYqjda5mIKnAWEhuArc8
+            9ZgmvBuvUrj38eJRfu8/LNt0GYnuDl6uGSVvDm1S1fxNTw==
+            =1+gw
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-31T16:18:25Z"
+        - created_at: "2022-12-26T19:09:32Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ/9FsUGc5UUbFQQFrncWkknh1AqTJkozHRYBDhcQ2tZO8kY
-            a54xy9tKub+cVO/f/T9fH6jeFkJtkGlaIoorHs2Pwnizz958BhfPHooW3IFohhmu
-            E7VDjFOrUWYp9spjB71hHLWZ+FTFeT6M/+CfGJuJ+XqtLEOkeL4uFVd6gEDldt6Z
-            qYIu8NFPfDoqk5VxJhmNxmcHEn1OO11ukvhghXXztZ/IKlfeWl7pkDweWuDHDqZq
-            m+9ndgCxIFkbBcq3Xvb9DANdYJfrzF/4g9XApxpF9aPUDtKvlKYynX83Viu5Cbsi
-            ALlmJ2DJIBtWXqm92dFuwJwKSh2RRQZpA5YiQWpnVYxPlER6HWTPIlhiQ6v+buV3
-            6NfBbfwkhGU+9/W5iRD/yvl8wOnWzh7/e9R3Sjm5raKJq8pG8h0Ak6aMY+G+7NYu
-            OOwis5BSqP7B1owvifQdjVjxKeJ2XyREU2EeNTo4eJvT24dRbgUF2DBhdI7jynKE
-            PhI/OprouxCPnxw2oQdsYnKuVtJVph6hTj+UXJRMVR79TzS9JDR5dMCh15jDVGfc
-            U/twQiCF2jaQu5RZWAUXr5DJ2XJXli+PIdS1E/+TC1yYTQY9cWHQ7elRBM+O79hn
-            iEXVAZrFf9kiRWHv2tmfvpCrXG9UsywIN/RXvKT5s39eHEp4dtc0kps6brU+NgfS
-            XgGd5FnZoDez7vDTGxka3DPJs4aUAFZd1kyNussml19b+PPYDil/9SYomXZdV6fx
-            u1lMPZFK0QDME7NGKBO73lbXzs7StaiCXgydbuJ5bwlq/Gx0zeI0x6gs6/AlS58=
-            =ostc
+            hQIMA/YLzOYaRIJJAQ/+JKKGXq/RP/R98uYUlHkkByhlLzZR5sgjFAKkFnZEp9du
+            X2A4PN8+rKkNGYA4HIxsGOh+mJRx9F3ZxUG8l+finqwnfy0R7JMAmdxtwhoMMXvt
+            gHsMgHp5qL1vA6A8dQbCEvGNKEZTTSYQHI5bNmirtV2XOy4o8gUn5aU+ONc8nVvY
+            msDQRNT0FxnkVsd8cn7Ld850ohYLPgF7LSCEB6IjaO0GAAB66LSg8ubrNm2RrkZY
+            wxRRxPq2aAX4CjEJMtk8qZ1ImmGw8kRcmzdPTFHjEvr1jxOUHIh673/BAgkwGosv
+            6G52k35wZLwLPvFEkVlMLtX3VIYghBQ+3CW5RUIPj8weQAtflhcC6Z1wnYVUqsGU
+            RkgB5iS6narBgPR3eNkua3gR9p5v5fp1bYPSZGymYaeqPBEQyi1USuHMj+x13LLx
+            Vq0F0hDabg8g/XDlKHt30unBHacCA4zY91YYgos5iovsxgXT6EflAH8TBbPyWEmZ
+            NyWczYli5qgwxvb4LweQbRHJYn1x8uVsoy8RDaaFYuL7gighFIAsbFJ5/Yi7B41o
+            tfzqffks5vpNkT9EFvO6fJu0JG46T/Ynh2Tb6x6A6zfHmrP+NHt/lgDzI4eoPRIA
+            BaTwfm9Z6eJ+PNmZu5MJ/v9/JTJel1F9gsJX8YkSkuwjUWm+i0HScHAsdwLnJQDS
+            XgHv3D9xsfgSZf0Ei0+xIjQT8C6Dr78bFywDb8S2BBHH21KnTrHzi1AJ/kvwhraD
+            pU3Htg5+8HyY7sgCYcGuWZZBYfCNgtAlMsD8Kq2SErYPKg5/RVhnFGAGCGCCCkQ=
+            =BqtF
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//Wy6cyHMj0kis6jEhQ9GSekhHtgOyWp/Zm3OpdIkQOw3a
+            iulgWhqHcls43GJOAoP4XlHtF1eHErjRBqwd10Hvo4vMS2Daw08WDsTZO/lmu3tM
+            v4mBx790vrbseWpiHcoDajrFzcnhNZnpILDtX4usJ2DI4oBq7eyhqaOdLzGdN/0g
+            BXklmYp+8pVJbUSemgiD9LxSUVy1v9Z3bmXg9GVqg4NF+cajk0StZD0LmZVJy89H
+            CHcAAyLV8dJD2TImIb7W9/fpzQYtBDQ1H0yLUbfJNAdTCm1fCUixljyduedZT9eL
+            2x5kyIcAqyEC7NSQsOxky4CZ18H4tiKKBQjQkSUACOa1CmoaLidvxoT8BLuCMxGN
+            4ybBtH04VSy6EpGQHDiYsNlV/GhAtkOyqShMkm3x9c2ATR+qR0RGCFgZsYUYXT3f
+            Oc6SCxa0/m2nOOnyyzpLdymQ1DGADdA3MXdcbJ9EmeSl0i8PX6ijk3C4A/BWsYC0
+            Zn5nl768q3zU1ZxRAJ6qTxqYHu+kEbQWiHnhugwtfLgpA7aTu4/Zrt/xP7mZwCsw
+            0P2U6BCzt925Idlem7rhWgr7sooNR0trXIebohrO8wQDKEY0la5nP3wql3OeynOf
+            1e6TMsgjOyxHtbjTKKG1BJtwT7oK5zkxCMXKbq2jhi464eeAry6SvqmSvzntA5vS
+            UQGyEphdGY233aj46sWWfmtqHxXybyb7MyyRsF5t7NurD0HmecmtuXodADxFjI/S
+            RH+Lp75dE6Kdr5fUBidqUtO92oAgHuO5H3FaqNHw41FRfQ==
+            =kBOF
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/bind/default.nix

@@ -38,6 +38,12 @@ in
     };
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."c3d2-dns/gitea-token".owner = config.systemd.services.deploy-c3d2-dns.serviceConfig.User;
+    secrets."c3d2-dns/ssh-private-key".owner = config.systemd.services.deploy-c3d2-dns.serviceConfig.User;
+  };
+
   # DNS server
   services.bind = {
     enable = true;
@@ -84,16 +90,14 @@ in
   ];
 
   # Build script
-  systemd.services.deploy-c3d2-dns = let
-    inherit (pkgs.bind-secrets) giteaToken sshPrivkey;
-  in {
+  systemd.services.deploy-c3d2-dns = {
     wantedBy = [ "multi-user.target" ];
     before = [ "bind.service" ];
     after  = [ "network-online.target" ];
     path = with pkgs; [ git nix curl openssh ];
     script = ''
       mkdir -p .ssh
-      cp ${builtins.toFile "id_ed25519" sshPrivkey} .ssh/id_ed25519
+      cp ${config.sops.secrets."c3d2-dns/ssh-private-key".path} .ssh/id_ed25519
       echo "gitea.c3d2.de ${lib.head (import ../../ssh-public-keys.nix).hosts.gitea}" > .ssh/known_hosts
       chmod 0600 .ssh/id_ed25519
 
@@ -102,7 +106,7 @@ in
 
       status() {
         curl -X POST \
-          "https://gitea.c3d2.de/api/v1/repos/c3d2-admins/c3d2-dns/statuses/$REV?token=${giteaToken}" \
+          "https://gitea.c3d2.de/api/v1/repos/c3d2-admins/c3d2-dns/statuses/$REV?token=$(cat ${config.sops.secrets."c3d2-dns/gitea-token".path})" \
           -H "accept: application/json" \
           -H "Content-Type: application/json" \
           -d "$1"

hosts/bind/secrets.yaml

@@ -0,0 +1,204 @@
+c3d2-dns:
+    gitea-token: ENC[AES256_GCM,data:RXHCzJE8aW6ctSAGAF9XT0eQx1qw6qUZiWzn1J7MFRTui0/5b69Z3A==,iv:nFl5cK7hnedaJPc/z10hApVQnA0owu1HhTNhJekYDbs=,tag:oP7yhtI8Utqyx1mSL3v6dA==,type:str]
+    ssh-private-key: ENC[AES256_GCM,data:P/TaTrnCeE2sK8v2mA4BsI7zPHYYEu23biqd7MB4pKq4DjQitfZkMG2rTBc4B0mQmT0lAKd+IgplwcR3n51IM3PhD5rMHJxZDS9BkKHy2MCHgFD9IF8//DIi5s1vOdas6Ddj8EVFsbE6WHqyBcY8RHwMzkSIiNcUI/+8p0kUnRIPcA6mKTop1oi6Z4u8UJATUWuO/kKgIt9zlrottbyjnHgtFKyrtPexCrwmrJlFYjatHFzDzr/I/Y7mkZ/Lt5XNE/dEskzgHT5wRKinxplEnFz7g4a0Up0cwDc3qhSEYd0b4SQqYRyISiUkiuNgK3yOIjxATiMxRUq/zMUR8B1gG463xuSV8y0c94UH3ghFVV4VQtTVqri7FIHvrbQioW/Q/Pdkv2MiDqB3tX6NX38fqnCeccmtY0VH9QQ7QkmZFqhb9x23K0XufNZ80Pnt0c3bgLYrEHuatj3IhiaZu6u9SXY7DaFd7OCxLsuDthfuMrHgmMrrZaqKDi+NzEzDaKsZxCsPfEfhlRZ8POwX8Fuk,iv:zk8xQKNpdxgc+0wz9nF6T9nEOYNock3ieec+IITDxUA=,tag:lr/gaMyH5AHYUkLlGjUiCA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hfzpctkk5tz0ddc86ul9t0nf8c37jtngawepvgxk5rxlvv938vusx4kuc6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ0E1ZmEzWmxyMlRQbmZn
+            U2E3M2JZZmduS3l6WUt2cVZxdXorSHZmdVV3CmRKNVpEalFxM2xEQ1Q3bjNmSUlX
+            MUtRQWkxL1lTTWpxQXJobnViLzhRek0KLS0tIERSdU16NUM5VGo4U3kzZEZQc3o2
+            OGFiQ0JQamtrdmxXN1ZCOWdJanhMdDQKptgLpi9O+bf7byxo/3i64C1AGiSKugzG
+            3TczyCeBJeRqqiC+E8dClQtl7jxn75iJM4ejIc2mJ+h0M6Fg77Qblw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsRkY2SG45dE5ieHJDYmpU
+            elBydjlJWWRSVGgzNVNUWkdpMVM4VVl5dlRNCkFkZ1B4NGdNQmNPcnQ4ZlB3Nit4
+            aUk3cHdROU9WRy92K1JsWU8xb0NPK1UKLS0tIG10L2J4VUNzY2pWNW0yL0xWYUR2
+            VCtjTDZrMXhEemtSNTdDQ2d1UTRPQ1EKMcWrKrnlnSsAuo1W/ZEuMph8MaBYFlEM
+            lKGvxHPxM3jwrfZHS1HYoOqnZuQpjL/1yih9Q3EaloSAb52wpmlsHA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-27T04:14:45Z"
+    mac: ENC[AES256_GCM,data:MjReJqXyYFk5iPtXVrZJXl4pEFdV/BPTimNbF/nf7IN1jbFP9Q3AkMbUvgdAzKv/8GVVI1902iKikMtfpPG5+Z1ZGTxW+kW3E5524hRJQBIa7SBjFvhEEI1hG6f/aiVKr+1ExbZXlLWQD1JwdSRD6psqQNB1HB3ySa6HUcxPI+o=,iv:s3ipL7iMWffyWQIHhFXPzhBq0FJXPUnDMmLOo6cml30=,tag:acoEP73AS/AhZUlH2x3CHw==,type:str]
+    pgp:
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7ARAAkTXOCz20XYDtTC5Qee8a/BqiQZ8NHj+1a5AH30YI5zsb
+            amP40SpMHHlooQ3BHBt7a7Ai+4SxZz11kc05MGk+waMTFbETl5utun+LInnT12ND
+            7jtxgavDwfTCQZqQevFs0S3DMBo0qQH2pX2HPWm87oiDMbQl2H6waJF2cW2RQ0N7
+            iX4A6WbIOW6IWBU7mNW5l4uAoCBXOcZtKVGHdZ7+7ExjpcEO07r403JYkdgBSHrB
+            xw1MKGGqOhYYHRJ8SrSkNQrGHpjR+mnon3qK0Prjqbwu5NBNhXTC1Qia9PGgapCO
+            Y8eHwbteQ8hVZ1qX2UYs/K/MYfsZOwgj3+sCnYAuTPchFr7UCHGQP+8XEOz5JKme
+            S62MkNUY31TNEGX8q7O/Ppwi06c7xSwrCZDJpEfsJ9rEsl7WuPGohDarp2k1+XzQ
+            oaghY8Pj8qhmIF1G1tt6BXbqwpschOSUgZreX8qXjWF9P5IAu3c5gwG7IRfoQ8LG
+            Ed+xYAZl05EDxa6adTsZXu4osppKbIQnw/8s/g20Of9luaxEiekyz0togr1kCug2
+            9wYi1n381IKu+j/zzQrvmrCf9+fH0PHCT4Yw6CcYiFh1KtIXDLSenLoDThMeAZAh
+            qLcQSHNZAK8BYRYDCNBvrX0olbDuFApIb+5Be+RYe5qC8hP7/kg9c3qA2x61tZzS
+            XAEYiTX34lQUnTaTkeCa5htBh9o7n42S6cLCcbJugKqvwiTLQ1MQzKgdjcI9qw0D
+            UqjjMHZGvPVZEj63gfsREgkNF+y4fl4HtIe2GDbtnDc6d/HRfHq/sklnUf1F
+            =o5jS
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zARAAkOCYltg68fdOonrUUwx/oATvcd+MqMMAiTSIEQdrC7oS
+            yzTkUmV5e0CdgTMBajwWhmEzalmgXG+LRPqkVjBlCeYWzTnam8qyJav1N+MSZAKU
+            Tqt4aCXHP99nKUWHgKh1zwd9b/Z1Sn3Be1TSZPt3N2ZDuRI/fdbxXkz9uILkbGxm
+            ccObtNTvdHCFi7IlVygaQwRbtZFL1NL4ZMYGo12Jmwk2rpJ7TzXQcQmPCVs227KC
+            iaOSCIIZ1Hk6dzsSDGtg9/g5Oi9Z5nmkNhw7kg4kITevHREUNXceErJwdzKn+Pzt
+            md2/CnwzsMBNFmFu8kHsbuSJOAt0eoukE6RdBN9g1RLo5n+FklXL8JgQM1ySRbmC
+            QQ91UasUtDX1OhVvi+igLf9FFzDPiZERdW595k8w21WUC303dwsEACTfb1hhahMc
+            ER/FaVl0ix3fPCEZdYbBRC3NzC61nG/fJGudLKRy6c123AP6I18tEt043S41hPiA
+            wSM2G6oR46Ozvt0aC8nPK6/QBzlMGpIrzd9T/go7S3Lz8VSpTsZMawSlXtU8YeiO
+            W9GYwsCETfYPHTsVclyQOX5BNzEOiqnd2F0y2CJRfwTPSJ2PdfJT/In6rhO64xFS
+            23WAIXvQWMW+VozuJOnsjwzIyzt18769y8xmF4wVjXDXHsnC7bvzuoy3yi55pJLS
+            XAFwDREiZomYNWGNSf4sLnv8co8q+CuRtfQ5gSQ2orROOWOhj6rmzf89+5oWew4X
+            tnEgV/KuFFvBfnLoXeoMYed9VzDMII5dMyU/qQrhWTTaZsqdNknhvbwnQ9Jc
+            =MckW
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf+Knrk/azuhzbIwM52J09TDIUEXlJWoko0PZnLIq9zvRtF
+            00/cLGEorZ2nFGzTIMjgkgRUDyZuj/VnpqXppLxLaL0sfXEP6OAkadaVwepqDXV9
+            QciJHWqoV6Mp14U4v4CqqNJkTR4Bv5sLTQfxy09MG14zSy0NS3kR5qPLXq0qV2/L
+            qp3OBb+a2vgos0lZ7677g3ry0bZYvnIxFSHlK/CuhtmDD3BoOg9EJ8s6F/7lRWjD
+            EaaPUL8WU12XxhPpjVEURRMLB6X4DQ+L5ZYwJe/askJmU3XoO8l+9v78BdUTPVdu
+            GcFFxN+1XrIUfDE60k3QzzKwV6p0i3DolbDdzcMUZ9JcAb8sj8XqBbtrHpBgYvXG
+            DHE/3f8r6Jz638dymU5anlE2Qk+J5KXyz5dD5ILQZdfDWN7nK8E61FVOxZkGBjU9
+            J1yf4yJghK2DAw/0NUvzyj/br1fAp9Ov6+f35Lk=
+            =FSk8
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ//dxkQXte+0dsGJW2n8/lrrdw/f55UnPvaYJU2vM0giPq9
+            fjysXEL676nrZ70OGLPPWELCtJfhv8OmoBm0ONUS/dLca4ljZTUccNMMzVU9BC1Q
+            QiULHsN5JN2SUjNT1TyboA479FjolNWFzqQ0zJon/jQ/qX7ByyPhXsSBr9/IQCvP
+            GO/ZdUue4zsvffLc07AWteZ4xtfCqS1dsCw6XN85R5wcaNxwRZyFS+vpoIJNBQHS
+            hHDy5PfwZhDAtcWqD4Ikpya7bX2IhCjoV6dmkzF92E3PusRg6s8z6d+7Yys6rGW+
+            9FmVNoAy8+h6zBYnOnH6JxCqwu5j1HvzO2+H+mQp8W9B85YktWNwxESHS3lae0t0
+            y3VZ2JTVQTuolzPIxV+xnQb+4Pr0+JYTi/NUiHGjq4ZVQH2keUrFOwB82udebtHi
+            0LvL7CMyzOC17N08MRY5rGrEjqgjPpz97IgMYshUt/uUoM0bUw+OGsDcTTTo8w7a
+            eiKFlgjFnOHPjs1nAHDQsQoJVBuA+GB0MHwEWx0gkaifM/2cNZD6JvuzB4JAcaAL
+            JrmgX4dWDx9ygaoaLq+N+JD8lYJiC+p6UlRPoxNnLdbecib2ecdRZjoSHfKhvIA8
+            SUecMFZhPv0Erc+QnpZ7AtF4EN8/yPllNAnde58iJuzg2535z8xZgb8yFlNAZizS
+            kAEfPMzgVjPrLO2FF4vMP9ns6ZCKYDnMjOjuur9xjJ4/gD60ZjQvmw0Prh6MJgMF
+            k9Tc7EXFNIjRTTyFtpM009U9jNYqpv6vmBaTNmmqXvxlKOejznAA1npufL6Yoz1U
+            tXlMxQBaoyXL053tUbtVvYfOchM9zdbVzh/O5af9CTANaYOsx9YRziCsK8MM9VRg
+            4Q==
+            =ULpF
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ/+KcqYyw8lXqXsEBowCJu3VX/p93bdAja1UpGc/VfdWmIb
+            NBHPfoyCW4s1iYAuhfaoAjSyNPNoUWBK2Mvk/TV+RiG3rD6rCf+man3U0Y2ndYeh
+            ZX8tK5rQfNIYlPfG9iGNCPQ9QjbmntaeOOpXOmLfpVfmJ2m1VSolZOSHEqa74DNq
+            RFtE1IAExPS9veQ9lLEUhaB9c0730jjFVsmJG/BbadHC/c7pGLD+MEK4TCPa5CDe
+            nQNp6XUEVnhGkv5YkZb4U+I+3cpvgsl3ATEuqmdp6JCN5GHt8hkXd6e+xJlVFpSY
+            krWJ+mdm4GAmtEzbRJezl81EpgJK/PKRmXo9oPqDGbFD7pNJMmJSGdm0VFCPlDOB
+            5MhzcK6VVUPgDnJnR0dgyQoqcrsCl0vmDiEXv/tBJPOzh6NhlLOwAhM5LPcDwjvk
+            1hcObTkFsr8892QB5M+GigdFcPebOZxSXEq1wAqx1e9im/Fa2AfHuTGQlvxJEOz/
+            wlIuZG+p6x80SUnMXDKxJijQrTd8FV3krbgZetRivDxqmGX2CPfN2V9p6vTU9usE
+            jLJE9J+/4229tPoPWUPTknio0trKjXryScwgZOn/cvRuUDm6WD6/5cFoQx7UUXhI
+            +udNxU+ptKb4SAxB31lyvHIoCplZju8I3YflMMqUo5kuNqhuX7zPJJW1Cqw8aPLS
+            XAGcP7WByNElNFnt6Ir9k++X1gDpBcVBIZanAvYg7txCfulOvsTh21Yv88aZMry3
+            oX4TzLFVwgZHkeK9FjHuywLmFY5PzhQ74BV5pVJgLA89YkJsDC3j+PYzrQW7
+            =eGO9
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/Vs7w7rpFGW/5TfVP3PYEpNOdpC2OF4gwqnn64a/tjFqC
+            ywuilusJwND64lsGQzx0U2V/oPRIpny7J2d0MbKkI8lRN2CmuLKjEW1agAzMAbDk
+            DGpgKgPM17wQotp7nSFElvYbUpLM8bCTLSDAVKR7q06OP+IPNFhn18TEUAKYFeLu
+            S0IqkmD+vyyBoYFWJlKe8VAFa+9nepqeYh/DujMAcJFVqxsDVHFrAQiW32ZA+yGX
+            QWVObtI3KIdtsguTRtX064kzMqpAwNP6nC7u4FMSpwzVgtiS5NiQJHAxufFtHseQ
+            oebWaevfVYOARJ3X3e03gKkQkwTdaIfyYRE7nLPkidJRAVGY5W+BC3KQo0Qunc9U
+            Msyy9QYCU3RTjGGX8GzJfWT9Hm3pXaDIq7IO4UrHsfIYngO8IHwKXIbx95cd0gsk
+            o3p9YwOmYDX6l0+iiNJKAnZS
+            =1seu
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+LwaUGyldQleNLfov1cZS7lCJaZgI70aP+s5eAIbmjooS
+            CbsTrY9BXd43cW+lwZfWJ+APToWdjA/hZ9laGFfO/1bxRrpl8wDhjuJkM9bTYa29
+            Cabe3zupom2yA6qC5MftZ/cxShvgT8bE7KcTNi4GbMutjcz1PpKMkWs6at4gTJWn
+            wlRr570fEPK0NpkmAfn8DgZLVKs4djW7Byyzmqq0VxmW0txjvG998ghreTXojqOa
+            CHk2k8tHrZAR3qvBEuDBAGY13EWK25KvHkBKnl41z6xp58Xc/ZFa9o2/kOW41iSK
+            l+P9DI+v/qOBlqEoGsRewI30Nmkqm1z0TGLb6yO0qKrb15YwWWyit9Wf+RHpeVLa
+            AwWwL8sBNoDmBfozwNcWjT5dQ/ynipZ3E5TdKaBA8mjqoqu+1RDaP7JoLFv6/8d5
+            0fuN8vg8IbCpVw9NhXHQMmbqKcIeJ57xb0EQ4hdwQwTFs06yS9FHWUhUcT6165v8
+            OyQN4mN6w4sZTvKrRLQ92bEHMSS7HKBWHwVPzotNHZqATYd2TPaAp2uhd4ptrpA1
+            t8lwmPwSa3GYjklkVwR8HzrsQmNu4fiSQA8oVKqG2x5whg6g2ScqAJJHgfcfNG6P
+            9we3zYRdLTeyLPdxKa6XPUbdx04KRExDywaX1aYW1UHGuZUYId9d2TU0dO8qzVjS
+            UQFl9rewNQu3VwtE1GLScvRkCVz1pwfTKIiY32lj7yrdSiEGtrRWXcHDfJaNgM8J
+            wfhRlioPpgQ/stbynk10xyhar2SDlt3VNcl5K04DR7sTMw==
+            =oIfU
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ//QS6tZUjaRSJAj5nIK8Z5ZHsVoQ5OyqtvySAI7h4uTBHA
+            FSmBrixb3OhjaaF7xxkebx0Hq+H/03sHu38jJijdC55XT+l1gyu8Uuob282qU+Ii
+            Fdo0Naub1e46sWwwH/n7h3CvVqNhobjvcZcvEG88F1s/uNjXG8rJ1DubbpoKFIns
+            6jtfElex31WDaUU178NaNC0gCTDGYK/caEg9GhkHpHHnupdYkX/Jqc+lx37yt+1p
+            uMLIS8CkHPHp8t+CwyTlPyeuDgTsAK+J/f5mP/KdD6z5FIOo76lz2n20qSzjFJDe
+            FDh46mbUi2OtUzpObRN/mcYDz5HByqO48j958cTljGF7t1oN48ELrVPc0nWJnxY/
+            SbER2/aR8tuO0HsHq0UgsS4MoXCBwfH0GIs0199vPHSWQDq33E5f4cMJxV1bbTWu
+            kJVQYBPFGWEiaavcy0paUtHvbplbUtbbRfmpOqszUMRUztt4CjCAD98hdecUlWZd
+            3cdMyldySiHNRG9nLh9ZIDfiXKijuVYRXA3aa7EcSo9/Di3wycwmJ+M4Mf2M5S97
+            /LSVGX6IrGKCbbQoZFE5EVF7JkN887d/Czp8OEN+y3sPDnKwLBcYBc1j5ZDk9ZjT
+            5DHC64vbyw8cq+DYB62V/jIuHxPqHH+s3mjsPHbR4N72/3LBoZtC62xtYCad1SfS
+            XAFriq1K8ZEqZ++w/B9afOc+8Qx/48PpRBv0xTOYxJPUKARdLa9XfDAtryOdivf7
+            ckwm4BJiIQ1kXwxAWUwGkdZDjAMQgArrKhMK32jzTh/F1B5ZqbIqnbPuZmkn
+            =SGUJ
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAjDbi8Rq7obP+Cpwrfk4617JlZ38zu5n08ac8hRpm+QrM
+            lHiMx/4/ew4fMndKNTMJzchbgeBhkU3zjDkgSy4KOMjZ6I9WuhRYxHLaWBX7EtZP
+            I7+KnOinUtJEOlIVaoecsJrrBLCjta4vtu6KkXsEjZ7dYin+p2il2cDft7bgIoYu
+            WfDs3XKjjOTNEPNfxrUrDqy+E4P0evT1A+LE/uKgjkrjVTQrUAbjY6vNxU+BGN9q
+            8VELiP3Xk70i4FBRFjwofi5JygSej+ycD/fNi7OD8d0ciarj+7p/KnkBRTJelJJA
+            LSjbX7FJBs539gLUhpn3uqRuyvBMGanjmdb3ZB+mMNAdXVO5pt7zbPHXqAitvaoF
+            HrQFVOg42jlV3TRmmGUrfP4FVEpogbcSAY7d2BV2MSDFktUlQlY1RwuCXqyuwp45
+            ZzkfhL8coJN6TU836DbnC6wEwpcFXZvGqA+T9xbPaT6SUt5Wg2MTzaHe7siRsifQ
+            ZZ7vAHD+DdG5OHiR6loiyunDhyfWmUtOaOMGl982HjvKo5BOHR+93xJWAGwWZgA6
+            Y2TEeh8yzDCMckhKNx23QoMLS4iI8WlwnU4xeJbBjFuGv+XZzoHUY7EiRK13lWlm
+            wKQiZlwI1wW4Lj3ae3lqZqv3oXTOEulY7/4BOCUvZk2Vzdl/m6QEBG4folHlkZfS
+            UQG3cLdWCzWHoJgIf180LHKH4ImQkQpIdSViZXE6dufi/TgbNuCLWaOJ8T0lB39Y
+            I5R0/fAyCoZPpbUHcyTmQXfN2KU+T0k1/xFRdcw4sP6q7A==
+            =/UDl
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/blogs/secrets.yaml

@@ -9,175 +9,195 @@ sops:
         - recipient: age1lccjvj9z8de4hfrdeumm9eu7awef4d9jygv3w7zdash3fhv6e53quy53wz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5cHMybGEzSkNJbHMrM3dU
-            Z1JNZktKTDhYRWp2UG42RHRSVWk4ZHd5a1VNCk1YLzBEdkZJcVd4SU8yRzFYcnZz
-            N0JWRFlaNDlmYTRodzl6YzlYSWFvZ2MKLS0tIGIraHBBM3B1Q3pSTHh1NjB1UlVo
-            eFhuZGtmN3doRnJtaEtBQVVXZFF6dDgKbdF6mYi9L5jFRWoQ2gI9cf+gqcHzlTXY
-            tLgbNyHPNgxDdhgZwfEWO2R5RBA6dDQ38FnkoNe7/UHRlkCO/PinGg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUWsxZ2d2dkNNZmw0L0RU
+            YWdFdjRuYmpkTlA4aHU3S05kVm1mVXFuOURjCkhpeWNqZG83d1RhMXpOQzJZZE1V
+            NnhUZEl2eXNBL3RBTG5oVDZYSDBYSFEKLS0tIC9pVU5YbkhMdnRjRjY3QURXeFJ0
+            V2hQTkt1SnJ6RUEySzFNRTBFYWlDME0KX93F2Wuc9GJf6wxi2YppWmPHpldUcyWA
+            G6936ZdBWWlD4icITfIHHkb6Gz1W0PeLMOkfY+Vlfoso6m9vyQ4wTg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYeE55VzhsUjRHYStMN3l6
-            OEtOQXFOVnBGcTBlK1djSlNSemJidTBzNlhnCnBOMnZjSjJFeUI5cytBUFM5aUds
-            TWpnK094Wno0aGttVkhxdmJ4blJMcG8KLS0tIGgrUzRWcjIyS3BpRXcwOU9QOS8r
-            KzVaYjdxMDBzemVhYnVzckZyUnp4NXMKCBgjoBgjhC5s8dvBlo5auBymEXnSXRWk
-            g/dMA2ibHaR90DcAC//Tau9dZU64rxbKqmUXgBuT83yPM0J4FAR3NA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWaWNvU3kvcnV4RW51VjJZ
+            eFFMckE3WkNCU0dxQmxQSTRhTDNZbUhwZUQ4CnNOb05abzdvTFNpalVKRjE4UGhh
+            U2VDQWdwUWJZTXFocGhOZE52OEIzZUUKLS0tIGFXSFhQNW90ZVlFcGptOWhUM3Ni
+            andNczl4SzJaeDNpQ1dhNm1PcUc0eTQKR/hEIrWWsixnW5HGb4D0Hg6RTA22NBqq
+            2QeYsLP2QALu/+y+ljewr9K2nYOb70NOrx5FKD3cAgtq8871Lf59fQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2021-12-25T00:52:22Z"
     mac: ENC[AES256_GCM,data:g6rMFoNx35MN495v1jKB13isssJ3GbKqyI7PdA796leFuRVgAlj6aUBI99vX+SpA1LpBYkUOu6OeV1EOHtpKlchbS4/FnO5oM0AOpoNux9yjQbeC3CM6soUzHn2+cJrnGMlgPC0sX0kcHVTFKF1aJsa+uLlkKD+F1SSJboz+P7c=,iv:i5I8FDU+j7l5UxgurA3Me2b/4zE7W1Ck3ckmQPqKWrM=,tag:gZCL8bo1YVoLZlxjyTupzw==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7AQ//fXotd1bN7Mu6+/bEq4mSKH83dnLG83iYknGQeoNA/R03
-            O0y+QMlbOlmxdsot7gV6f9Ajnt7FTJmXBuIzo7Ji6lFWSu9ZUKk0JgXNTpap3kvz
-            IQdBv3YTeYuJTJjPZ+xAfftlCbWhDL5kvvEK64QCLi5iLsAdW0wiAwONhgAflsWu
-            UsiAqkla7JDmFRLu7AbybL0WPPIGbBj6eLws0b0VFSe2kxzs0ccgWUXuRQ3044qv
-            jIg+HMsBiyYy8c2U7XeiJkFDBU5FYs69ipq0TukMfds21ow5/gH62PyNX0Yaqcy2
-            T5tdW1N+/bRZYUgpQNusbHI5XO0dw+BXQlwOE3JsmgA2jYKomk/cPPxijrvnRtZC
-            SuViKAtsrjZC4cOWNVtE1Qvt1rSIbvnV5agACypLp/RJv2bQ9zWFmRnhEkO+/j6+
-            +Fe43/Fwc0GPastLWGGUXxWX6/fgXI1vOKWOunKrKyEabatjyyofXtEK27WRaygm
-            wcVPilOkpk3ROmB3OLgrmWt812a2gP5pMIPvVcB8TiVibP6Ope/JpGdvGuQ2pOXE
-            2vst1t8ScEW/NOfwVGVhbhZC21sozv2M7hCKnH00YE8uIFQnlC4GATazYWIx5LGx
-            aNJZ+5BdSeuQC/8/jlbVVjKNZeZ6vvHeEJIq2+zD+s+moun+a70V0BaBwT5zCcTS
-            XgGLutojrUDSR32vBJsIlBZutlb/VDKmEhJ46FbZqmgyEbROs4XXmE1Uarb6KVsc
-            0MwpZc5YEhBqiBxX5WmWpSnnzRyBomqVIk/EiGjUiiUCRsqt33zgNxdyDJMG7LU=
-            =n/8W
+            hQIMA6j84+xkv3y7ARAA4hnZJfDwjIk4AOfm8rmqj4KKFdmduj0fwCbIU7UQWqfE
+            CQC5j48A1gobSQQ/xwIHeUUO6r+h33kwdhkIgUet2Rl5zoLCPVNWCk0SkI8/Uxzl
+            n3jUd4CItAIkyuTfAmYtD3awNaPZvHgBPaxs4XKc0v+WFZoVmyxqEyPj3lP3tIEW
+            7eyA8vvreCI2nmti8YUxmcYijMCqD8+cypZKHrMWgc6NKBg1P9PXPrBYYlmAqvzc
+            Kih8F0OzPvpjGMPiWAZLtdABymXr6kX8JlutrzaT4mNGnVAVE5mBWClATuW4Cnch
+            sbDd5aY7ffu3zEVIVlKzvS8s3Ag2UtK+O1XS8G89fYb98VPQr+Agc6/L/WVIyEB3
+            0/azjrsJjefKt7EsmbmMvkYJeM86UOmkYz5z9pqoTGXzmefD+FjufIWwmIsInJLb
+            2+EwXNctIVmemfpuH/ZgIiSKngGcP+yPgTD0eaQA3FMH1aMjftidg41+/0V899p3
+            N0clZIPOPyZVdYlFECwSudQr4/HQ/8weO+D3VsL9BJgm8Hs6KdePPk9h1ORFQ0st
+            x82/gaEczNSqxRK9Jh+Ll5fFI+mIM/IZaCpZL4ftvJKgOaHVNcDkv0FB56BioHL7
+            jwEUwPgFmxhAVaeBiQ7FfgvLPHcE1x3SeReHUfJAy6wYdP4xnNY/NaIAuJ+Rb2LS
+            XgFLRPF3F8I1vz2LoGVvbH3Xni3VOMv4VCYEkZVeuLteLpHGqswnvgULsawMHe/x
+            hulvPyJBTs/Puozl+Yf91z08xxRVat7DvAD9YDD60LD200SVufErkYLfSgE3IEs=
+            =fxWP
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ//WSYieHrh+Ec9cVG+bMikwbfb2hmyxeR80QskX9iWTx2o
-            DwonZfA3gD1Unwixeo7bghFSULGd319+Ojcptr7dV6xHszq/1ex844O4j02JU39J
-            f5hG3flWw+K71b2hdT7kVvMs+FPuXnbMIVrVtUSM5H8KOy29Vu1CDUEzPU0HzeEz
-            KKfGsZKp4sID7KqLMV1wO/yZEL2v4QMcGwPuZYP/iq1FX9/bTp8cQShTm99k5d6i
-            5BO5IcfrFbY4TgtJg9yjz0aGTfnDZ5915Y5hRfc8vevrsvOeEfRzDEHy7C0/qZtk
-            xF70PG29GuULqpYiIzY1HpeDWk52ZuIVrPTtqkrjf7ECxT9LckysLiuJi24nM22w
-            UMilXQVdWVu73OdOukK3uEdHw0skR81x5cgHH/KDmbToIFE+ujA1di+RKBZup4vj
-            dZkb7evi9oBRjFtrvi7Dg7Nz1DB3ihAWBRMp/jwlOnXbpJQc45snRqzsrF5I01zi
-            2xalS7NukeykavqFK3QHCPJmmq7ByiuuVhX9BBroA37oit5f5guM8ohrer8fR62H
-            b/eQEMhr4VRX7OziNO+Uo06rytwirSsdOfEarEN9qd0xqfTibXv95miAraKC0Q7d
-            kDoJE1Vi0gCOHAkmLqP7KlWwD1bNZD3oT6zIPoPxPviay8vh/BHjo/dZ/VUA9R3S
-            XgESoUbaDMYy57oWZ99XJk1vH9WgjSGASLb8LTnlnVXQRKk+jUFO0idKmZI0kEJR
-            veujut++plGF+K2AFDVi7Xc0z8qneVgVbCpCIQ/0f3AIVaqATPbPq+bs+UJfqnE=
-            =i5Td
+            hQIMA8zMZ+ak7y/zAQ//VOPLE+9nwTvtNSmmt3bVBqx1bFJupDQ6jB258NjUajOD
+            dsfvUWoDQdPiCtYihsoynYOn6xelTH200JPbjl8bi17zB/RLuCte4XQxNOPruoJl
+            iGhg2BO47VHgSAqMFP5Zh36UdtwC8vNBijngN56uItM9WmCpj7W/JM9kfOvmnAwN
+            HRjn90F0AUFGMWXfVhmNK+VKfubCcM0eKrjK3pbL8VOKq00xWNiVufs9GJMkQCNd
+            D9p5jN6TtryLTW5Nm1StNloHYnnVWl+yIibMeahQsup28yQlhaLW0lFVDgTC5hjs
+            ua0MoGrcGL/ZxAYMeDUqS4irti2EqY09Hdb9YNaoyICvGKRTW+xvb69t1/kGiay5
+            fsxiAPPo6NJ4UCmURblKQJUPIXe/S5t0o0jB+mBsK7NS4AOYEc33itGjUhlNaBqF
+            ZETI2vbgOp1wHN77MvRjh90XvC1mOlVuU93SnbrQLdS5vb1/idlJ3afexDGp34PA
+            TDN5nywwSK8OsObYkrZdNczTR1vi7jkZV7CNSI/18hd1PlLP76I9YtjRrh3fsDZK
+            tMHM9bljbryDRH+vFlLCKPc+kAH4N6gYxeTH2peuLa0+s3Yf+o+X/HmrMXtlr/Js
+            P9zGa5wcLT1EbRCJaMo2MkadGJQrDPf2fZ0gGd0feUu367KH8qQanddf6x2B79zS
+            XgHjRY31N2t1wC2bzvHg10V+Q4rs+hPpUC9k3PMj3BCnkLWz00AuZTY0Ac0Zw8FC
+            b/q+YoOl7EecE4n859kY2JdJk9mIVWJxwp5uTmogiQyz4Bq6cbXrbZ+jjg3JfXY=
+            =aVrz
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQgAietGjKoVeI7dRI+RnN2RIrRYaKcar7hjEp5OFXsICHGR
-            FIZWtaXJQr0/Ds/Vk6n6Ynwj9vXEgIi6VKKfil/OKuwKcAj0Lh0B+xSyIywyWaEU
-            ghZnf8HXlG4NQ424PEZnM3FbgWP8VkE95kvz7JpG4tAnZsdw2BNLrruW7WLqmfnT
-            TKNf2K2Uja4fEKKymOOsF5m8Ch+W7ZBwZdkwfa+yj510ytDBfxuioKBR+5pmWLBT
-            U5gNp32WwvEK2vmHmKh1HAg2I0DzdelIMWewIs5+RbNMQYqBG1UFEU6Gc1PJLOe0
-            1zc7BTBRPsMDmlxWssxGnYIkidCWkKWVGYNAZP57F9JeAbnF8rBXAzEHiFaXtGxI
-            wdd+6Z61Y9s5r8xlwac8cBw8XbOgQF1rkq1MbaTg52bn2K7Tt9qCvVNASb983l3M
-            yn3AkV6uxcDODX1Fp3DBDY5+xQOq8rRr/VYTLJTC7A==
-            =gHTB
+            hQEMA45bZkLXmBFpAQgAiPzpNI3Pz48GE8Rt4Ma1GGR6oAwGiodM5SA8LME0e63N
+            /v4Deg0C1miwvlA2/Pwb0LCrd/UZRgsO3eRy123+CIrwYa/oEv4HnJsiRU2lzVtx
+            WQY6csW1RfJ25nxB+YrBGgzlP+8aUnxPU3nIee6GQdkRDtGRV9IAmklPwM9GW6Gs
+            ZFnBnmIC2bm+tCqzDC13/IkQwaikdYetmGUS+SZAkpCINiyja4Z/n677ADxIQfj8
+            +Fup2d6McJuR+ox8zUe+5FweQ9iT6UA9DFLNuV2OFkCIyFNzfEgkMmYNhlOTLt7y
+            7rFqOSInKWbHR7HhtKT4bbmy8RffX9G2ZL0fzFR9htJeAT4Rxn1pR5Se2FwNvSDW
+            U2unjXawixpmeqx1oTH/0GytRclp748jeubM1OzuoKWcVdeP+cj93459PGdHLo03
+            p4TC4w7Tn8P1v9VTgUo1zj5egmyd1fH8ScQIjN58ZA==
+            =X+Gl
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAoq0Xv9kV5puxY9AYzzSNClxaDoTrADq//TpfSanpZFoQ
-            ji8h6sVWuU5mlXe8Mlw9B2Tra0fJoRJII78YVhn2h+/FEPtEQBZ1H6WxrQj50Ydh
-            EHz8HtDKIZWBBiMaqYnEwhgdHWtbY8sAZXOSmjNON25gp/MAbpjlAlInwkG4AW4+
-            gOq4UZ4WMkziWzIdUiq4y8+4pmZz2AxMj1VGB5jNIp2ljJGKmYPjRtcg2bIz8Ifo
-            I7/7PEac/UChjEqgKeBPVOQo80+1cxNhZMeV8yGtW7izF/Y7E3AqjxH9HYwcN4N+
-            w3lL7Pqsb/EJHjtdPj0EroxCbkXCRHjjYvk0FKX16TIeQ/W7GD1XPit+ACNM9UX0
-            DNZek5GP7QFen7bxIppHjiUvY8BMW4dwXghXzwNgyvt22uYVnPCLFUXBTR1yyNZd
-            8V5QYUvcYdnqCtoBc1P0MBlPDeLsjgeNPE4RMIVE5x5Y7ViMNvzMMsbUDaCZ6u+N
-            abJVsQiTKrgFYMH3anc2S1a0uHsneGeVQ98lCSQOpkAZQQTazAhIBDDPfSRYacL2
-            X3Nj6foYbwkx/Xq3viLYTPOUgOZdbeBS5PHED9Hp0xBngym9+hKuzkkBjKnnzib1
-            ogXVBAY+z6gsVh7/vPMK8MEPUlKyOtBmw32P8whlWUIv5s73JeU7Iszm/07nKCDS
-            mQHUQU2AfTlexyNNnoRrUtCF/X0lFYdpw/6RwZc4ZfwZ5jA2I30IgSLLrFbsRCCa
-            oF8cp4Ayp1NMQF6fb6HeG0vZCO0Bc3O70J35BjEL3G2SE0xzSB2qDS7X0nIHoM/6
-            w2DrDp42jW9+ptoAX3BdF/sBYMULgMUjWkr5KkwDhT3s8vJxwIPJbiMmWTNyKMpW
-            Zi7P5ipGQ24JBw==
-            =Itwc
+            hQIMAwMCBBrc/JA6AQ/9Er8MTHBYrPDqguQn8aBmq+agGVc56yMtn6pIWmvtT44F
+            0mC0nUxgtpAAWJMnkCAQ2rxJD6hcb9sPzjmIDe0qwRMhMGcQceq7c4TPV69w+Ov0
+            tb/cRfGKIADfzLcuk9hz8QfOUmZm9xRO+ZrXK05YIky1ypnhPvg6wJT1nEU1PHK8
+            dk+wSCEVJUAso+lcr7c5YHZgF1tspNj/orxRoHQAnT5YESP4KWFn7m20AfvqowGZ
+            lbMVZRCE45FTnwU6ShVfmoawzilgM4UQlBb6X+oyadMb0Rr42JV2JDTb3/fSbvhZ
+            YSnyn5HnZ1QJI72bSUDeH75Tc2pSI1z9rQJYBDyjAFoQE88Bjk4CBXSgXqXWW4fr
+            WqO+WpH+1pCigiJJsg5YcJFi+KOu6dUFGiQ+/XOTXcXqLPQ5JIujr4k07ZD10FIa
+            M599lHNlZmwMl2lh+fovTCko1z6dJVMgQ7I9JGtwCEF/uN+STp5UGyzXERO9vW0e
+            FB+o9K4mmu8rGLl3i8x1OjKF9Wgz6efObuNc6Y9erFjhPVNhaDYz9pGlUdH8w0hO
+            cCCmhWFY3YOAQXeboerpBcK1tC+QW44XyBHD1Id1Fph4CW+jmU5C3YsK440MsXfS
+            8RXakzLG819zlKc67gVbQpmTvALEKy6tHGrQpXVJUsIGJjQfPJuL86P68TrrYMbS
+            mQFeBqM2BgA/mYm+OfxpXfi3KkjLW47Yt6G5BdNZwVw0GpDfy3dSGH7r8vRwC+B1
+            tDRD8HcmScace0bFyNPKCL8DwfaJM3EdutXrxok6Th/rZXoVQYdjr229DF3xx+dF
+            Q6t1dQe6+Kh0bJ53K4p8S3ZaoBFp77bSAms7jFBw9OjLIpX3/Tos5nQ/LpZ91zta
+            obYolWstPy+PwA==
+            =4ETD
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//QrGHh4qNuj4UnHdyqY9U4cr7nfTrlcpS7DxjfxSuBzIM
-            GyONP3igncH3iPChogLsRRntzP1vkUpgxTXSsY6vRO+ptyncHN5NnAhf//dagh9R
-            cCyGC2FIFwaee2zIoQroIdo5NWsp5ZS8qfQTjwVZjy3REwm4AGdG95ucU3tpXgc2
-            pYZi1vcP22MdzTbmvtm7Zh4GJ2JXdFjj6G0UJa6V8NOL7RQYzCtgZI/46UzTgtOl
-            PVwAzeRX0l0G3yTEhn7XE2tjCP6kKOz/7ORzMLF60Vdq6cBOLGKN8NiERxHuy4Af
-            7fqLyE2sO7dCaCdRRlYd/on5tPdSDhu9eU2ff55M2xjEKWZ0Yztxivd/5/DCUo95
-            3HrhAR0yLnbLftvd2ZL8ahXrZrInFKHbGhreHkSKu9/74j47Xy+tl75vrJboUG4g
-            adzx8hrPX+1a1I+tJXSVKtpnFciKKzvHLK62dMetPcJvtldkRcfpY12TPcOvUsam
-            cKAp3hGckf9l5Z3b5q4KLRrQ73VCmxNZ+lF8EuGpFZ5vqLFfG+Y6DyqDS0FNXGyR
-            wBXx+Zfsx5pfBHhVxiXyzHhA3l5YgYkcuqgHYOIZXp8D9P7UE7R88Tm4f/knu7iB
-            9yY1nV4w307QSm4xBDdFcPP0e+39sSrzZrpER5bhwB/D4VAMJVF+J+BbFilwgorS
-            XgG3TJG835a9GbCZX1203DnjeKw59jw4WAhRpuyL2WN/3/y8M7fRWvQFsgQg8WTM
-            pen8p+QyRhpjTNFlgHjFHAeyDaqsZRPjepuC5eMIWtNOYoswnL89eZDJ2rLb990=
-            =GzQi
+            hQIMA9XEenRNYVGHAQ//TqRzNhuUsJa2o0IY3uCwktrSSc1t06eR7jpBvoGia7Av
+            NdF3mAlUC4k5A11TXlcplsrQlI95ubq/gOiIBNf5lCnuP6+ziC2VOP2ySC70x4oc
+            2vi+Z21zAhGaQD/0nEUWLDM+H7ZO6qJ/7YOxPUn2gRoTJY8cqjn+cPQcUvzjfERo
+            E3oeupy1FRo9sPh1L995Pp+jTjOPiuv+1Xo//ZsvdQJ0yXpbaez3cJNS4A+BLh5y
+            WH8vHS0+Y4iZ8c8bIx6u7tkxHADfuR4JZArGB8L8rcuena4lITYBxdwUXYEl0lZn
+            dVVAvzLJan4MhFaNJ1b2vhFSeeiamfJYVNcuaMcxzrOsP9TsivGvTxvqHfTeha+/
+            W6TzlKJbxZPyXH8EyJTIDACpkEsu549xkIYI16nqc1xZZj3DF2LSlgzIbm+1mFYw
+            yiWW4cKmr3IConnyd+CFAhD2xZ/uuhvzmnz8c4XAa/s0CSh14TU3pESeUNV4e9IQ
+            SY/ZSDmI26Q8uwof/nwDqj4m0afnNvmNoYg6HNDNliMFGC2ISuA3ixJ3ER+pGP34
+            8CN+DQ8iFmCvkjooLvanFaQSu7O1kiQRY1q1KIYemsS1lGlknH8gRxZZtdBAIO9G
+            8E06jkY3Bp0PJ3TLVBwUwDFXg9V3en/1deQu2HrJcLVOG8Fd1Ss5pITs4quKLKPS
+            XgFP49Uy/rTPUVF+saU4wOhLOxtx2XowpGA2M65nVkyg8s7zVO0h4Cj/aEPUXm65
+            wUdH1+JBBf7QazBEIhMklG8cx2q+j2DjRVmZobMTzFmwSndiajk56gj+3DvYk80=
+            =xlUp
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf9Gu0JS7KLgGm0Gv83OAw5PqEIrTfqELE9e84WCGJVvoLb
-            UKZwzzPwJNHA0EgH5phKOWtN4WvqJtUXZBFbYlky4FyDyCYBolniG2Bt3dlapYje
-            gB8Oc1+OoMcK04o/jTmrN6XBk/Fsm52+zXS91VN6zmyBiUQRzwEaEjq7c80fXLLZ
-            13nQwKlYvfRcKB0uuWXfIweHjJOuErAtCuDJ1mZGjnXjJBZdOrWJHk9T+yFLxIRv
-            6QkJ2focYDDwPleaAmLasnTgXwGaPg3mMDA+TLbz5G4/pdAiFmeEdysQM986uVJp
-            RpZW2HqOTYxpt66VsSfSuRPg9VhQucGmS/MurG93GNJRAROdyA+ngHCvJcfTnkjv
-            M0AEhOOlX4eIiWPZR5SqVc4RQ8lRiDn90IW7Xx+DUvWadMct2iC99TT7VU45Atgg
-            86TZYUxHzvAEmDrxRB3jQ+kH
-            =shWD
+            wcBMA/Z87ylQaotQAQgAn/I8wdFxsbW4yq7grlyPK9iW4KS9tu+CS43XwrYc6mGF
+            hKqqkG7eoU0kwWtdBPruh3jOk12ihv9XMvaHWi1zbENOUpKjWnPqh3AAXq5315BC
+            tcN6kiHYr8Beldt2RFP4FHcPRYXX98tKtrpTANCwEziAvKSi2EZCVSBfn9sgDxdg
+            DhRrrWpMpuKrD/DGS20XPk/vq8zNX5e5TliCbN5yS7UCiwDV7QdJZqxPNuPk6O5X
+            13J27B+5L/wGLuESn6A6xodJd1XRah1ehO5cW0d+Yq4yPHUrs1g6Rp4d6peCivID
+            OXDCpwY9gx1wEL6wjQhy13tizW8P0Iy2ZIGeNAarN9JRAYanSlyN2qpAa8uMokGI
+            dQaBVLwqaPUnRohKIonaP7ITsFhWTyR6u0bitVsznJqkYJUrR+8hpmPK2liVqP93
+            fnEXgWZkmdYjiyOB4IyGhK3B
+            =9RnB
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7ARAAt25Epo+mAOtN81sTWco0wJe7ug5ttw4amOMjgZOYEpIa
-            u5pPv4PBMKsJTMXSht6jWhSVUbNwFcHNdRVhGSz2BI7HfltwsKyd/IwazKC8ZNIf
-            OX1tlQBIRtDFt3uJCxYyTW+PCaFrVQ9hRD/BkohOUBwhr+o2O1to+syhCXObr021
-            GgJwYh4R5yMI8Xg8uOA+pJ0Nfrs2xPcmc1XEWfIoMGWHF6/qTXyM4WtZP0Z2R4R+
-            fbjBYLvecPxtrt/q3hTQAQqspyDgiZv6EYJ0LwIlC/mB9sDYsVn4B32LrVh/VWiE
-            u/8QByU/msAoXdih+1yLaW4CZuQcKjTS5MlkfBph8ThLYUIOtMFYGYRR6g7wp9jF
-            NLR125hMxvSumU9INHF0Fx8M5Rwl0ThcKAxjaNno6G80TcZl91d9M0vbqA5To2bI
-            r84nvDhUpHf1r3XDeq9TKF7uSHGe3XbYJoNV/oqY0s6urdLjfkeyADEMasY3U15Z
-            RNbPzfWtZ0Cc+xspclB3KME1vMf0jdTsZ/NDENZIjDmfkEm9WjsJ00UhiBlCW9CL
-            BfkQr+cY3yl9PR4IuWGtIHhbkf39xfHpPXKvH986eF823bLXwNZMX45Z4qO/vdqf
-            zUxQf7igRXWIrNG0ajlJjc0laDwjF0kj9XliQWaGqXJqRIb13g1KiITejqX1UDfS
-            UQFdCm8iMc+sUHo0xr1H/KsKl5PHMGAPCi7j7QL7ryvZIeBBOiKM6th+Zv5utKHp
-            EM3PoOk60/t5cRT5CvndlJRBvKQc/34bw7WwRZGy+9oYyQ==
-            =qJr9
+            wcFMA9qJIVK2WMV7ARAAsxkI4lidKRCnvUAE0yzc6QoWhsmGTuJpdKQd9UiTZzbI
+            RHOnHOjEhO0OReqhDOifpfo+3zqEABc7uM1XUeDepUSAjPa79IstlSbn9ro+BgKD
+            VSIBU6uvP7Bh/3pVnqaDEHPf9JNTVCWahry93QRZTKMFSUcR8bWnZ7c13OgHbuCm
+            wAN5OHaTtkHH5HZv5OW0Od5d+yK0Nl5oXy7Oi3Qy5otJfy1SdKc/SaCG332VUPJC
+            rTCn7FdI7Y8rCzWUJsRvdLBuRH90aResoCe8tqB40gc6PWPfqUQHFmmx0BZa+5d0
+            /qDlafEoc4hWBj/Vca2PQVTBtbAT/t6gVPAOh4Gylcl7lTqX7Y4VNSDEt/z0UdQc
+            UccbE34r9zuV1NeUH0hXsDxn94olTFhJbYWjjqWF5hGSkg0czFzJj8SLOCRegNab
+            sz4/E81OOXRzLkKYKV4ZkrrjxzdYAi16WRbYKA7B8xcFRu0JT4Pw6VNa2SCz+zG6
+            FFk3Jk0PlsbjyoZnyIKOOHNFr3T0o22Sbdi7/dOhWn9az6GxvqNORqCxXIknJvW3
+            hHLICoW3Y+3okwLw/eusMr9iDY/pEPfpjckk/qQGoHwTI6GMU6UcwBM8s1qRj9ys
+            RVE/zzpmdp868Lnbkt2JeMr+huZeF8KM1ZJXXgMFCdUqLOh+cd6UuIctK2rIrA7S
+            UQFjJa2obfPEKDC//pn13kKtIK0w7Rsdpu1lPzAxiKU5LYV/ONIdq5H2TEMcShD7
+            Wyy3RR9cTBNInt7iq9G3lXS2FOA4489OirM3epcpFpAUJg==
+            =8CF7
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:31:00Z"
+        - created_at: "2022-12-26T19:09:33Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ/+MXAF0XruiPUMRxkok5VKbGQ8CEGbMWioZDg3RLAux4uO
-            hJfrlA/BeKmCJvVNB884arkyZo8xIQPdl6dEWMyPvvcwANZivTFaHHZ8vetiEMjs
-            UYb+pM485dogn40stdbfcLXUqXnWq7nGyJ09e4CdEnvcOGnnOpozg11ko/44rPkA
-            Fqly2joKJZJXbeAlJFc1vnmnQxBWZzITK13IfJan0W1IyDHWrLn9q5+O6JgXpq5z
-            8Y73px9ubl2IRU8+3IIJB3Nkp/NywdG6T0uhpFqLXuAkQ193cBA9l8Yrz9h+f8VJ
-            l03Y89lEzAXKW0nsQMm9K1sXR7rRROoEMYelnqhGvCNxlQslIlDSZyxqDlD0yRsy
-            uwKIjRb/w4dIaxF9KxI21xAadNF/pTI2Kz5LQ2xCaStH1QervjQjbYlFBquXr9KK
-            NmHSv/3QD/jyKHQEWLBRfx7fYYyF+SFCp9LGDkkb4Dw27kwPHzJM52f0lKwY0dLY
-            y5/gjFzjUqxTKlOPkPxrDbR7pXkA7IR2oq/6iik8otlUMg32EOG1+Mj5UBg4ggrd
-            lesteD+x/3Op1AYB3NrDEK23+l0Vx06B5MMG4x/iHhgSI3ZdJguKHyXa0YMkkgL+
-            7WI+Nsb2dFlcnVGzCxS5M4QwTPdpfNXihmpo/PpCe3Sjw98+csnDmlGoQMXOyZrS
-            XgGsAxlIUusGvCusw+As/+Gstw7zN17XItmayjgtaNm+x0cuYAqhNe8n8ItP+J4r
-            Pzsm5iqs2mrO68WKNaakzwEvLCreFJComBoifaUHeHd51gT4AMllDwPKmO9CHlw=
-            =UmVj
+            hQIMA/YLzOYaRIJJARAAl5727K8hxgDMT6lyqhUB77yUIOE+QL83AQhRH5bE+gQK
+            EqASwQVOnUzwBFr5ICgWV38hWW2mvzGbU9cnDIQ2AHYjJX9hqMQKBW4Z6CObJ5xt
+            mg+YHuwb/8VRmjPu6xu20uxZTeDUPu/Okf3bxG7BSm1ePcphMlpsbTbZ81paN8QD
+            3CcgkW8iyFh6FXRCQ3I6jk9ro5A3zvySRl6p9PHkuii6O0LLH7HlwWr1foyRYQPi
+            19LIcXrz3XS64Py+oEEwO3DaEA99r9eTdvAJxzc5EAp1HPAel1Vkdrt0FDkqYne/
+            7jlFgJL0rx227nUBl1irq8OW2TvE1aj5xs1FyXKH1hIVtogN0ytUabiPQbv3QAeo
+            7VQlcFWkJ7homg3V6db8JZY3NxsU4hIh4lppKLqQrxBF/IWG8gh+8qWKyZa+vzg1
+            Gb+XH8x8vakUcj6JNKT9s8gxf/MmgxN5Bh2VN7Rh8+ir1StzdYKqNuBWVRCWEGwM
+            TwWBlhJczUf9zZ1N1K9xtEPZJDgxhmd15NRoLsxHGdge4yexE4Lo7Uy2T56qoUNR
+            RZKvOmlcT5WI0lCw9Ni7rkdGVjZuSaNoP/5yXfgyJORR3XmM5rlCr6C4tiK82bPr
+            NwejvV3tgSVXu8k/7id7mMPBIu2S8aHvGMNiIAztM4WwgDxZWsj9IMRTCpmKoa3S
+            XgE1gH2C4t9kbkgpbr+dwoDgRLTdlcbudDdpfDw2lNAdLGz0/GMf5x8VBExcWhLq
+            yY11sKHM3VueUopdgcB3O3XsOHEjwxXQFwiWImFW2RPZNarOFs4WiqHgS6M7BJc=
+            =XsIS
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:33Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAkieAwbAXo19LyPh2ftHrH8s3Wh3QUTaVBdf1PMNUjVfE
+            fkR6a9QloWIPpIe1x+N4z+46eglECJ5+vQ+SLjoEZqf5aO+nKNcnmsD8Z184xO0R
+            VsMvvQCTWYeRFB/NRvBoVGnuPaKVW3PTy15hLXak4sZjqGMrOiHbJhPT3JkVi3pt
+            hXAP035+L9+U/csTK+XB9jNXjYke5/2+F7qLLS5FPQa6ZIThMrgVz+cC1TTE9qPf
+            x3/6hCaQPWN9yKys7lFvrSKCkGKUn5nLRMrgXhFRwnM4DfnEhZ1EUv0sGlHjC6rA
+            hQkax0D6NScQ7BAoPo80JLzchvBYXkZ/klY2s042RSQ5R9rGYa4LVVn7U0zBwCgL
+            Gc1iEvmEOUpOC8SRbYlnpvFgIbZkHa84GR6g2EbbBZXnhFs7tAIgNHxe8a2uun5/
+            p6XanasLV3RcRnFcyJP7Ld+ZbAPa5egxNtpDQH8pEDxXdUf4Jr1N1csDrBpBIgrP
+            CTELtb9YQ+KZRPypFMY76eC60SCGyBejTRrSz1zvcWMIb/ga/TAwqoVYXeW2SGoU
+            2J7WIMUa+FqcQhICIzZZEoIlTr659/lmdvTIMddfK6rXl3QFku3ygw7htlzDTipO
+            VF1Ll2guhCMbE2NgarlMHARsABvuz56QoZSpo2Z95ea3M46UyG/q2MYsO95war7S
+            UQHhpoEjURJc4eRE/NmQUFnDbSXADO971nhvq8upvoFrTbtJ8rqSB7Za82hf9jLo
+            f5A/EtV6OgGyoPVq5YaOIW6g3hFrkvpUF1e2cxJZ5t5LUw==
+            =iFwb
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.1

hosts/broker/secrets.yaml

@@ -13,173 +13,195 @@ sops:
         - recipient: age1dj0d0339f4law7qvuzcv2fs6sf8why63s3l8tja0f8vsj7wefcds9drvte
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjMTM5QjVHYjhUR3BoRWQr
-            dFp0ckQwamJibjhSSUt6d0tyYUR0QVQzNUZBCmJaQ2ZmUGtNTi91a214cjJOQXBh
-            S1U4bkI1QVNJNFhUK3dQdVRuVEhDVUkKLS0tIDZsSFo5MTBoQjY3N2xIVThUczd2
-            SXZGVDdrOEhoTVVFM0FNd0c4N2M2OEEK1iySJYxNPQWUmTz0HGyaQR+QpE8QBRz3
-            cX1805lK2KsOvlxs109B4VA2kK0zGRdLBKyZO2zD7/2RUIPaLyssvg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzQndpS25CZmxObEdqMHpV
+            YTg1Tm1JbWNFMXVTSmY0bnBMQXQ1aC9YL1dRCjI3UkNLUFVvNUlUc2JyVEs1R0o1
+            WTRvaEkwWlVrWm00N2lMRnk1ejhSMjQKLS0tIFAzVHRVSjVyMXpuTjZhY0FxbTgy
+            ejhVSGxReUdUVUErQi9wQ0dNOUdvQWMK6KQhao45BJLuzrVKx2DnDfLRgcg+mzuH
+            W5rMRN/qiAl5Up5IJYOEOWtVCIhF8KEX1ceNI7ufnAZUZ7rajCx3pg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLOVhvOUtQdzJwbmtwL29G
-            NWl4Q0EwVXFGUUdZMTFOZFZ5RG53MkpINGtBCnlvWWhWeU85Q0h6UUFIME1FanMz
-            VGh3M2hGeXB0dzVFUTFjV2ZaRUUyUHcKLS0tIFpCdWo4WWRhdUYvcndjUGttWldh
-            RFpaTGlGaEZrb0YxQzlWeENaTWE1QzQKR0a2MYJJKM1lYv7BJOzzb4ppS+BPnoWZ
-            mVmiPq3CEzzzmus61dUd+i9m1uRn5cf1jmaYxV2desDsU8l08ZOnhA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQTmU5VUpqd2xjRllvSW9T
+            Ukd6d2xoVzdXNW5FbVZpOHN0WkY1U2VRS1FFCnZIUEVTc1B2cjJsME9GcDRwOGtJ
+            WkMzR0wvaFVVelFUcGc4MDdTMkNBbWMKLS0tIE81N01HcnV3RXM4dVZIelBURmly
+            d1UxcFhCRnIyb1FRYm1EcUZTViszSzQKnLgEt0STgsKIoy6cXuSmRHZeDzSD0wOA
+            o1DAk+buhTMJN+akE4YUAOdz4pc6VuJRqwv1/swaD5jxEdiOd34gsw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-09-05T21:22:51Z"
     mac: ENC[AES256_GCM,data:sA4lWpltQNotBZldLxVALSb4Z7qD/cpVIkIEn0+9ouTSb66rEfEX1z7pQuZxRNkGHPwJ8MXDREplCPBqNMAPwh03OnqxuOKMVr9QZJSLuNlBi/12LOFHxY2AgWXebQlWvNDJXEp1fwrV2ztKg6iGHtD+kMsd/JMybmYPDTMj0VQ=,iv:bvwh0hg7kqQSpJav6i6g5/8FFT1Gs/6YjzZd2hpJSnc=,tag:E8lDOg6lTaX1aOp4vcSIHg==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:45:57Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7ARAAqja72tbrlSZ0dvbXjQoHSThkoZw4fD9r/qGoHh0WgWij
-            EC8TvA/EQgT0PM0LmeM5sbp1gDNmA4g3GuLWCuHryi5U2GibNDNjmx1eTPR5Ak6Y
-            WgMkP8jIy/X0FxHX1d2Ee7RAYOxc7tkXhTjqCtiesGLzzzRna5Hl1huHbBYGxdsB
-            rmieaRitx7jQFlTaox/Rpk5iNvZwxo+C7XJmtfY9gNn/lYn2lYQW8OATWP5uNhBH
-            jG/II/2K7yQ+caK93C7fOFnzOD4TAAlyyLji/s72guZC5HLC+y3krOxDCaxVuzCb
-            3VcvklJG0fmemVOuAvh7o0jazfEVsPPz2Dc2JFnliLQJzpP6N3I7OWTxNxQO9Dql
-            X3oBY41/17muMGZEkr45rEnhFOajWUIFPgFr+u9q/XusjJ0vJpuGQL2s9UeZpFXl
-            4YJgcS9bHhMUpmhDuLbTPWzSnpcRVTm+BahdrBLBcc1vOllclVySOcgHkil17bCY
-            4ISYBv5XEUt7v1CqrmPm1Kvwl+uAbJ7K7Zt4IJGYU3Y0LrfzUwaa0f9d9pdmI8IX
-            iAGsoJ7HLXka4GQ6eT8qKoBHGUchFHcN8T9/hC6ljuSrbZAD1c0TlC1JRmSdNdRd
-            +dyh+aYGf4xIFYMU8mE8dLq0jeo6+YHPQnK2R6sosgPoZf97laHs9il12/BHTS/S
-            UQG89GQQmyyJYzLipfg/MoT+HU0W8AuCwPA5ZRh5yhbeE8uQaKgYWe4VxTd0pB4Y
-            gzRNbyku5KPuknO0jDPhkcK/D8IVBxQwANrCYwqNh844GA==
-            =fNmY
+            hQIMA6j84+xkv3y7AQ//SnR+pg6fUOT7K6z3cxdvO8UYL1+axPcHwoi5TGD/3gzn
+            gK5CgIRy0vG4hRFKQGNoIoSOws36UGktc4Hdf8ESOYc02NLHjskTFF9FSEWheQma
+            fPsSLUjbsU6QHct8f6k+M804eI99MNBrTHjYJZjcIUgfHzYiM48+gIo/FZZTjbdQ
+            5c5CQ98dl9P0SjcLY0/Owu4G9gIBbLh+Voi9C33vuIe4NyAGsef4n7CWjut3a7wj
+            Hz54wTL6++jlWy8Jmtc2w0n1EpXjUmtf5tkziwaRYe7DDvdI+PH8kyvg5GoUD7Ej
+            R+hXlWx+SM2i060xBdcnOdz8esfF+YY1ZfBcYvKXathnfDL7m9DwusnQLbpcPbJA
+            PMbyGlu5DVGIwhhTSPKtgxJbb1iyeUsoOcgN92FKYOzLHS6z/QhHFn6K3b60IuNh
+            l+06Z3HUtWVkH1Ph83TAMUac87RdgfeFbmHCfasN8JdM8mMbsP2IQ3Q3Ae7nqa6n
+            tMvqdhxGmCvNfBAyl7VsVV38kQB+uLJnWMoXfF7+rT6Chpzv/638Q3BZoHV0pV+Q
+            7atok4JHF2DkxQYtfAZtPazBacjwfGsoUVKBMrQcZVg4Hwq/LuNnJlIIt3cwZ1GD
+            /SP6TJ2/Nm9FktbqxqX9EflQtVpSSFEG50KHle9+Iz/i+lfFkhxSz7CQhgFya23S
+            XgEOjdzPQutJ8zFUey8nmZ+c8XBRblpkDAvu2zvyBbX6h9Bfgnl45MS5LMXwcc/n
+            KmLFLKoSWpYyo0BU+hXfSgihR22rxE2jqU9f/bb7hZgQfNhEM7wf4/HiE3xYtC8=
+            =t0VJ
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:45:57Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zAQ//dKe9+VPLWfwnhq3gNfKoEPy1T/ra0yp4LDVO/qunoNRw
-            Uxt/N8cs6y7MBO2cNAxiEPVT4eBBFjt4m2ziSBZ4fa9jhSBjRp+dM7aNj3ojBZjG
-            v0sTDfebiNGHXSMypLMep5oRSbyKmYL+IJ0UdPCUOicIYYMCs2g3PJW3vwKGSBmc
-            EncWZqQ7A5T6ZBbZQYj7bKFONqsP8IRxKJJ9CE1oRWJOugyuu4NnGUkvBniMINPQ
-            j763R6oRXiSvFf12C3wGUOt82So+om8smBwNYupoYZQbpr7VFJgfAO9j4eLHvbXv
-            ZnaKQupyCW3PcHjtBoduZ4IzRkdfXGwP0oW7XS2/oM5WyKvKu/G949ghHkD2ZNHW
-            daFj3lEq1SqAiDMhyQKsEQpUTeGGKIyGu9pyEHuaSieqTBsLAZAPx/Pcz0p/+0Hk
-            kyjhYbhWFDd1QQezsJqZi7DavKgzxdA7H4uQYEygCXzciFsT3TB3203CLthI6bHp
-            7HvtWzXNfA7JHNYRm3XM1Au9qm/e3RvuX/r+0wDfNIP+9mlXaBnBtIdOenWJv7zK
-            4+PLNSYxLRmm/YimGpSP2dB45lN3wHsyUIzRsiz2M44mkBlCKUFgMBMonSGw3kyA
-            biEuntTQ2rbQvfxDhPk/XNrVBu73+CjcMKpmJ/AzwIEEUmSpQMzrckO0E+ADEyHS
-            UQEIvmnMKBxGGpXakpwcTC7LrQjSWrbzjwBiGqGchoj2mfuKIXAWtjDuyrz9f8yJ
-            o7c4Tmrzdr+KEZLri5kES3Cny+c0zDQzeI/FlpjLgtO4Cg==
-            =65BK
+            hQIMA8zMZ+ak7y/zARAAi4DMfXdqSyRQSIxtT11lSy+xfAUTNYpW1XCHitKc9eDc
+            iHQFqRCwUi0QRzb/BmAbwzK/c+xdJQ3IZHR3D090+XOPDQNgiGU6umKGKAaCVwz9
+            TmGHExsYKfYl+QBCTpOr/38YlfUDesrElhV3vs+zIh5oj6QwALdckM5J3gpNZtOQ
+            YRHRrBg17iEgNRmmXq+oNEoIYGBOlfYWWwkf3nXSlt4CuyYWX3zFtNmNRNomHcJy
+            NTREhXuDmrd99H4GtACbhjWy3d3dU22WlnKi49deTAuM0GjZcb+SyvQ+lxpVVsVW
+            ZksWxcRIuG+JpXbhL7uFNwuEY9g6GJH2SYjaOsR15aqjqWFzoZ2imeEtdto1LTT8
+            eHcIgUsRi+xCOU9LgvI5RXdcpnAzQOowGL0Q26poIcWUgY2NttLoFNPu8hWAnKyY
+            llLN3N0kZI/ATcPaXdQ5OutrVINXIyCTqIN8Se5hfeZV7+9qVo2R4JEAb4OFZeFh
+            16w9f3EGhNkhC28q6Ycw33wCXCFTsVtp04WAc568ZukTMcLPILc3IM+rg1YYSzGh
+            Mw/aUcgrayp+WNxsMnyO13Ibl8akC5U+FXI+qufCGUgVkld4zqa0ixFzh/Pkgww8
+            l836oJj2GfMz9ninpPmENAw4QdIaoAuEQ7dwpAwkmfz+ZH+PRc5eKbtJKrcjO7jS
+            XgExN1ljnfYk61fL3qo0WAL7wetFX3HkHMGFb2TcsfpiJ7vfeKC5kHyUjAYS14oG
+            +26bLcWofMxNZsBFedmytaw7I9qHBDqfFUwc3UyLJpyurUri1ijD5n3gjF0zG68=
+            =hagy
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:45:57Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQgApl5OISWFwp43XBMIJyw20UKl5TL/CpV8ctVD87z4e9RB
-            cbgb8/phlJYMI2RhaDATDFwuKiL5R4lCJoUg3cQsHjg4q/DCyyIDNoXS2dIqT92N
-            y3AqQvM2qOeVX/lX0gDKd2/mb/lQxN2s9/n/HOXDTTvbr68ygKa0YIq7oMhka4pd
-            Zvw9ZUC6q3kU7IrhPB5UFQ2HYqcyTB/ufXAk0FwedRGTVU1783xv/iaBVfsCdraz
-            8DK5mhOmE8Ul+zcCJd4pISmbqF5YAJ0oqfveDJnLC//sGx2MvnNSIsfOaK7UulgZ
-            fU3sQfoYOaJnin4tpUtDTNn7p/gYBqzpyHOjl0EL+tJRAfoQBcEK930n8O8+ssCQ
-            +N0mAudkaVz5wPQxKLF479uNMIKI2Q6DZJl4csJV+kdcCqN6d8QfzckGau5xiHta
-            CqKJVCNE4d5ymecnLfUKFMpp
-            =sOC0
+            hQEMA45bZkLXmBFpAQf+PuIHATKh7VOedSjV0QQ3XbY96NnNsZOCfMnr7NCsvFs8
+            lPwjzuXq7Yl/LaZxx+bPosIl0iokjR9qzC9X9KZN2K48sCxb7LFItLOZK3yOtJI6
+            eopdGBSZ9y82M82UfiKL6smlxFRIpiIL7tkjV1OVPQ4j7Y3lvF3PoZ3AmONQjlZv
+            JJJZ9X/uvS7Q8J2PX0ljNg7Fas++NhXUC9eQXKqSSDn6tiMzgYuzky/gwX8HLDX9
+            czpPo2RlLHJhY5ov/N6zIzlfrecfjJfm1cqAKGB+uSBLeQDsuiF2YbwBRKHb5kHT
+            MwKNARnw51G1UigFh7AqfzIX73EKiYMH0StebD90M9JeAbAUmsbJCyjhzApClcPx
+            lnCfMiGet7sYv028kcecK0F67WRD9/CACiyAuZJSzcZoip8ZHoBWvYTgKR3MVksF
+            N6YjLelRGdY7nKlRTaHs3AoJGob9D21wtvK80260GQ==
+            =NOEK
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:45:57Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6ARAAvgT1bBC6OLZhPggmW9SgxHE3dfEObpCgXEzkeSRE0LDb
-            ZSDx6GjiJ6c5YfMGVCA5fBTPBBr8WTmGwNK7LYErJA1sl+5L19Bn+d8tX5AOIPNk
-            lFKytLAombJklB0IZM0+g9bKv0X56AgUjZYmbIikFnGWZGGVdRzLzP527LGDAuJ4
-            gyeHYdvQqmjlAJpjMr/D879Ygcz/FxF2dzsZKJ8G2jaOY0Mi+B17IDzQ3wpUuOJW
-            liOnzMx1bKnlAMm7I+q+YdKav6Jg38km8qCR9cWlpUM67Xjf34E9S4yZsZW+2V0K
-            0ObsnJhtU7+9vs3VnxSnkAe+VcEOGvszjtBPjl6KcRVY6A0SqQq+X6Yj2ZzkuHJK
-            C6va72MkCJOcDJASMqoe/zAJFE9zAaL3x3bpNhVRwdtOk2pcW63KOAMmUbsdcfpS
-            eXhmHdm3D87QRvbCJgjp3zp9OlChrnGPT+uj72tdP5UNQnncjelBI8dCBDg2/Dnm
-            vcTG0bOsuVUFbUR1zLL4K6KKHYIapb5w8tr+5dvNCAu9qjrVjzezxgT49wDF7Y6M
-            34ZrnmnbjvOjVP1NcavAoIuHJ9Jx6SQ2a76A3IWno/IJIGUOH5nFphFn2Waq+ZH/
-            Mo/e6EjZqKDNsDBBhhNNDbyrhc3PUW9Wm2uSVEn9cfvYpj1r7zSW9cKX4/TDerXS
-            UQG6nc1I3Ckak81BKRDXBFZkTMczYogqnbM4FcowGNWkb7IQt0ppamk7d1W2/EwB
-            LzRUDP+ddYb8Px6zmfETxhSeH/o/BBBbJOkvLNxGrbGZUA==
-            =p+ZT
+            hQIMAwMCBBrc/JA6AQ//bLWbL49juu5vxXqRgpLKgKbV/zREmSMcdFp82Bpn0Ud7
+            W1mNCzMzDykhlSQosR0eelTmNFEme4jRFwJ1tLJRyumDk7hu7nxhRyAV82OCm8TF
+            7TdOrU6k5w+2pEyb5y8KDKSjiPAq2ayXjFORQqeUtLPvT63WEQtyMVU+pjC2URAh
+            cVVMFKEEEdO/GKQvOt/bKfSeoOARupUm/AUs9LEgvYR5mm+jmnfBy/+lZ5HBAHYH
+            sQKQWbB4BQL53q5zR0eV9J3c5SQJK0cvK0YaVMjLbrUXS8vRchqYkW8qAqOD9jM1
+            jTdaDr/7MiGcCI4hBjEnkLPEZyjimM+dPhBDneOKgNbqHCVvPQwKoeNDt4s737Zg
+            TOtoCAiaWuRfyvds1U92qB+aXPNFsjGVwXzHa5HlT+4eJ94JucVzj1RsIW5wMmk7
+            14QqlC57O2tSPgN69YfFTBQBj3rZ7vSzItPUznSwGQmv8kHu/BotZItAkGMdtnn+
+            VVZYfRvlzgMejZ00cXla7tEzFOwqTvMqGh4io3nwHVGBD9BdW5lU4+7G1enOtSOU
+            F93cKSY7kAo7r6MgzOppVd7YJYMXUUETg2vh7TgQ4uDErMxZu+M45LE4Mzkl3jrK
+            aj8ukdWpvWjlrHhZrOHYijofh6jatkAvV0VK/NY1Nn+2pgexLrztXc8EgZmN0kTS
+            lQGK/lLDZuqNq8kihwOEpR3emJdD3GkMJZjg+weZnIocW9ktKlErE9RCA6XjIC7q
+            jiHSoMkRnwp0AfP7DXnVvUgsYEoT8bbESWMdMarctLnS8ov+1/CHHtkng3xbrpqM
+            9cpOtziZMtoegZnvv85ZF0xeGtr7BeI9IodDA1rB8KdQypDlVY1Tn6K6TQGhM59N
+            pRMGS6ss
+            =xp1u
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:45:57Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHAQ/8CeNT3oc9OIqlKB+2+gozhiJlA39Heepzw4UZMgPI+PSo
-            uYVhX8lov9xmyk2tgCbwxl4mL4iCXq3MNpCO5H2zDUTKJxy4TBeRxHs8QjRrFk8h
-            Eh8YKWoukjR/M46nLv4s5y+HTZAb671i5Yk5tgkLrjyGZUnDJIbjW0FafVbUFRYI
-            ykGHxypw3bZ0PtI+PAQhh7GmsbNwX2HvASGFUc6oghGirJUPGn4tFLSDQQx/+JHg
-            OWi8frVD9vPcJEgD3yyBI/RnYTnMQmzJM1wvhH7f29IS9+h9OvGQDhY9fKh9HFOe
-            oVBcilRzl3IACFSc7wPcXQ9VzM+oNb4q1zo4ChejSRtU31F4Ufmgvu9wPKvDXkuI
-            V6XmBx2AC5eDn5aU/4XE8gaA7lxFvP5xGPqv/QQJrV+L6mcbK1lxSLUy47ZSd/xl
-            CaqJ5X9G3b1RvWhJTvOpZoIE3VUeZRVyhFpwFs06CnR+pxjBo9gHNPjwGcRAYkKT
-            XSmGeV26o90YwdJE//RlUIKQ7nS2geFJWttwI8be8CL5eUBwOaBjEN9ttiGkBJCD
-            cKH3SqjpyInwmXmiJLs6IWyDfcEKLP2wTaxeecRZsS5GjAa5aCOk2MNcpANZq43i
-            hcXsfvhNNzHOio8+0qrOjVRqdPFrCM05UjDXrFAavQ/O7WMTDBhxvO8g1UcRFRPS
-            UQHUPsBTibeIc7OI8w/xn1lTUtyJs8o37ZBqD6YgfmcA9ESvKRF3BRxtN+V4pMP9
-            ZDUAU3EKk9pKNtMP1gkALZCFcNZVU1ej5bgoDRqowRq4ww==
-            =TtKA
+            hQIMA9XEenRNYVGHAQ//Wnkgf6z+b1vkIE3urnFK+4MIQ/TO8KKvDsgDuZLjxKXX
+            2HvwkQii2fjHj7a99jvKOHnUvflEo/0rBqWvOQv/yRTGfz7XZDYCp0/mBk6aC/Z3
+            HUadE9rgVvgxsPWBsKeP0rwxp65eRVv9JxDqV+rmUcX15lmNUoEkhicGFTYUIKtX
+            WbEbSnTo2lEIZMLUFpuFUo1JCN4zkYQFICSg1d2t0E4XlAVqGKwsroFYVeDS2QIc
+            BAnH7hpzLT2PnVJythpDrEWAZ4VfVNyBrB+r3co8LnMLEeWUL1+sFSr44NnPbnJi
+            qt/eXHd2nK2i5aE5IIKGS6CvYRqBACt3gIbBwy1FvvYOhD/hgd7aKo1Qs5JFuwMx
+            8HUQevkcPui2/lL/NTLQ2xUImYRiPDkWxXnSX0xVzcX0iihgrBFHlJC9GbAfOHb4
+            wQutYnl5DrGHDnYu9UybyiZFxL7bwF/ejOWIY6AOMtpO0hP0Sos+UmWFVNuWBUrM
+            tUVQF5qKLMRIGGqojHytFhML3dS62LI7EhX17JMx34E2/zlxcI4VrAb14u6kerNc
+            6NS7Pi6DxOnrznbm1Y4Dr8kbOjZQPfjfTj7ri712FHzDW+aAOQUKEQOzDioLsTip
+            eRhqW9gkpRgbpAv4y90bCb10KEBO9g3MwwBFKkXzQzyh/WZWFFFfdwVfsLmU5sXS
+            XgGCWVzbJks7y5d7FgJ05p9frgCRz4gtL/BZeVcDpL7aqg/uR308en/OQwe0Dp1A
+            bLZ1rRkIbofDbspZfMXkSJqQwvm70HAL9JqVK7VF3T52LsjUsUn2ygYv30bHJXY=
+            =uRkC
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:45:57Z"
+        - created_at: "2022-12-26T19:09:35Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/Y9Ee7T6j2i4HKW7jejoUxv2b2pI80iCHeJ/olAvOUFi6
-            bO7i5OcxDvs1gtOLxMZXnj09NQUXkMp8Pvzp4g4VkL+/wCyArE7vyVh2VW/AD1ia
-            HAi3VNkVwiX+prZjvUUs7xumMGT4rJiGw601Ds8jVSdIyQt55hd/AKq3n4VMf5MZ
-            BwDZbyuSXpSMYCRlTiH72i1c0lhBOG53W4BOEPGv0sRh4ngrZMDh7BtP2OAVgLE0
-            mHKsTh5loKVsQSfQMGWzIwe/wXkRuiKeBqqgyanO/h8W7PGEj1hTxVRP6zOu4tn5
-            kZWr2U9L5La5X4eSVYnJoHMyhvCOn5PCAODldtsrZ9JRAYBtCSriMIS39Qnu+1XX
-            /Anejs4yrPXhj1Qf61E7IEaRx5us8d5ib831WsJ+Krheq/FUfrb16ebVpR0jdBRd
-            1dVd2PCz7GP+O1jZIMEhDQSX
-            =hsLA
+            wcBMA/Z87ylQaotQAQf/b2aYvDqb0DHcemJHEkVHQbnMZVug80GSbk2YB20HzKiC
+            HvJjzBWTuIuso0aywGREMC3rpul756zdEjyL5+r1jtA2qXdhXVZtW8BnP8tvYiQc
+            i6TLPAAc9IxfYOKfsWxdQFS/+MTFvcTG6S7rgYdqL1klikAlPjbbWxB5x4asSdzy
+            fkonnev1Hr0ddzh2r7Lb3KNBo7zlmG2K4n5ibtufxff8KqH30+TWPMRs/2BPJloq
+            tgoVwDGzLkls6MYPtRIXCX84RIZf02SZUI62DqSzFrLkGOpk/frGjAsX5pSANvzS
+            DArg0Xx0fzcLmUrBfzyMrDSlCTQNlaUpB4NluatJy9JRAQxc+oXPnVtwyKQOQuIl
+            qxqX8qKgqs9NUNF1+5YpB85nirodCrKaGUiNXmLIgu839fM4nmvEU4vWOMFgyRqf
+            5SG06AhI4JgJ8lmU+8kJrHK8
+            =sKTj
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:45:57Z"
+        - created_at: "2022-12-26T19:09:35Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+OJnw2yEBaestKxnyNeUlFR7uWXiCdOl6EC3AcxflnDBU
-            OC6B2ujd2C2KsQPBVpfRTY5CvxpZ2YHu1wu6zTRYnoieMGhQ8FNDoqCY1Y2BtSOF
-            Nn4BsXKDnbqaSJc5uxsIJDbeU8PEJuWGCeKwnMQlK9oOAivmXyWOJaPTLcQaoq3I
-            2QEibE3dOk0qPunN1Ejiyi+wy6jT1WpZQJom80ntjUCNdSTPZhhCcNdsxhDev6Ok
-            pF1ImfyReeDQojSByQ9zAC2dR9JiaJUJiL7P11Le71vFrWClDJ4Rdh7MNmMdu2Nh
-            a6NsPmbe3hbAtVND7XPxAOIndl4PttJoaWj5u5gFwGd6+jmiiQV0p8Y0fB3Sh/3e
-            JVauSnLAjYX3xUWvLtKecr4WJhUH35cXD9uGkF12XJE6KAxYku/TCAbG3xmBsvKI
-            jd2eoWMTj6qyMXCGk2vjByq//M2HkKi5VFzuWgxOBkN9WbNZc8xVaZg+jAIBt90f
-            xE4fLf6FqhMuHtCPq0LzVx/DNSB4+/p+ZdQz/TAvzsIt57l92tDKyHO1UYXn9LkI
-            lNN0JMbUXYBQ5qMHSOxI4vP7Ct7VAn8ZHUsyo5wlFLuYgYvPajFbHeT/3GEH3YEr
-            mkE6JBORTUn8jet29RXmWHs1/CFKYD9cEV1KvYJzuc+C+ADYBurEKej5IeeHZrfS
-            UQECjRI5ggBF9lfvptswB8iVIavEeKztzOsZSgQm4u1Yr+ln21frn4Oq5s8ycKJe
-            9VEN5FgmMQ9pWJXBlu/I0XjRODXIcUj1Rxr9Dt+RcYOqOg==
-            =LHN4
+            wcFMA9qJIVK2WMV7AQ/+I5RXt3zZWFLODwLZqNfijwMMh//iEoKrvcHkNKTIzxy7
+            HnEoh4n/0FKtB0YwatiLowbtCDxsq8F06Ume8htvJ55d/LquFbW5Evgl9CaG7h+O
+            82j8jwAiHYjXDy38oVwC3fFGNCCnCRzN4n40BpdS3Kt0Yiyz4Omgl1KM4jRfj4Qe
+            s7FXMHtPH67w5y+QIKEwBd6H503NJ0ZkEKjrykBOFsqt652hv4Cfh+FEq24KIZHC
+            bBTwBxCaXr1/LXNZRejmr+XBG63oUdJYj/tUdyIXrEoIaD3zfB4Ow0peNed7qUz6
+            I2AtapMURdopg34O5EuM150HEKdbYFpNQFyV2XNAp4Yz/SMbJS+E+E8TvwO38g0y
+            Rh05qR461IHSUHSV04mrC5uY95M3TuetpIduZ32IJb6fYOKaHuof02mVw6/qSNsi
+            YZN4QQgOzr38R5prHy3/exAHVGXEkILREI759WsuDWQh1QtYeesGUguuusNPfCZL
+            9LWpYnOVoVot1kdgVYCZg9vi74zDUm51878uBm8GP7qzsYQfx8+YP+YK7l25Hb/1
+            vlj6KetfZxu/lOtk7w2paKBFBYinAATiQFzQEotB+NBh0PqUHL+Tt+RVG7RgUvn6
+            lVTFy7fnLcfzbkWOKvEQYrhFn9MbyehXs/feQErfircbz2SglrOejeDbJYTMl+LS
+            UQFkBBpzDjgB3yHimWUb9uCSg2+5cH+YEYFUNp8xqtcK/1A+P3CKM92l1DcVLwE9
+            2FxuFJdr9r9Pumog87O0bUqKlzLUwBcisjJRYKtjNiR9Gg==
+            =57hU
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:45:57Z"
+        - created_at: "2022-12-26T19:09:35Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAxoz3mxyixGhxQ6oaWm2q8HO/LlFr0tsWBc1k3lyaKCN8
+            2cps2MNHJXBnIXzC5teaePk48oroayfWajw9pdJfWsQaNFfL5yFfVT2va/CgFMvZ
+            OWX0bY4k0z5oOLns3H2gx0MS4I3mahCSupmSIjrvTeSJrp4w8t8fRQsI0FIBqglq
+            uH1HfhaADVTL4x93T3YqpiACJaiDfeQcpb5GZO799evwuP01iwSU/2WENNhZsfAg
+            obvsZdl+6NuvLuu6a+0ppLLp6JCrT9UK3qIHA8VygQjThnonOPxZNKJD8o6uL9jc
+            AEhThgTX49d+vywoA4JLAeK2eBOGpRHtgJi09IJI17XvhAJgbo+GvNL9VELZBVvw
+            UL/DwR7rtTHueDOlGzerS7cL+H/2zYz2UzpC+29givKho0Rwj7SwXMFY85CD4eBj
+            HjeTJt1wIJjV6cXJ2ZUs8nvcJZV/yvrR0cMsgabt0R/hrUkf6x1K9Dwi0+kYlTwT
+            dT+oJGn/cGfR4V1ul3TOIgATKuU2M/OAvCluI7VfilbZtDKw4gDIKOzImmTIhSAO
+            5q2ZRNvNTkF3bAYnZeTyqtFjS4HqG43x5jI6pWXThr4zUQlVZj1GHmzFYaoI9kg2
+            gq8tUBoh6hZG0UYfmyURciiQum43/HkZRZsFh6CDw/t34MUDtlojcg5bxA5jqlzS
+            XgEPfXzhIMbAb712TGRaNXRRxSyQfm1pHaGiwBaev5hts/a1o2OKMXpejCNUN/Ck
+            xjUCCRWi5qIb1AZBt2u0/5X4aHw8fMqwQGO/5rmLJsPRY0nTEC5+NHKtc2ua4AI=
+            =mdUi
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:35Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJARAAnXdJXHrbl9k7W3MmwaLZP0fsOUQ5CUl6NAwP4sHTt95M
-            36CeCskem1KAvT/5KlTnxi2O5FkMaYJGd9cqHCmQ1YLRWVGdZ4UAjuY0lr8VN8H0
-            S20Cn7E7eBTJXUp04ndt6ghwZ6QmVPRbrk4fLtquyZduudnem4qdL7LigZ/NxGvd
-            COWSCAhEYlWxDb7ZlYoogovp01qqK+d7LIj6IEL7+k3STi3OWQa2xYNFXMKYMALK
-            MtGsJjKbmUS9UCnq/ccoIh4unpJwkaYVZ62PeNeYEm0slfPUPOI8n2N1F5ICnrpg
-            sXlOaP0SoZ1bysTbNrghefziWnqwMocdQk6KyaqErhe9rnPXxPIEfQZSFvR7JvbC
-            qxM5RFX2122lzD4qrgIC+82u6zEgyP/bjGLVLZZLsHVkLLJXkDTjrKmJrR4tcwPZ
-            gK13HBNZRv92mi5CGBhH6k/J5400oI08QH4XN6lCAvSrWJ9hrOjBppzh+ZmbQjLN
-            6UkBBom+sshyAWbdHAyAoT2uF0T0TQHvYA9IjixVb4Y9vzTkayy/KL+8NiHWhz+/
-            1H/0Dhk6lY9sbYRUG+IzRzJIy4rOOibeGXMRI3GXLJQnZijxngNwmsJQMnszV2d4
-            kBzFCYErx3zRwhMHkLOTqcQ9d/dYrnO1rLkq/pis1A3Bjy6dbq7De+xG440fr/zS
-            UQHshLmiAAZapYqCEWFOzvOfC+kPM4NS4jel7xJ6Ji1jlg4SglEC0zYqVccSzrfy
-            rSfJZyAAN9qFc1JDsdAyaJLxNURVwNpKj+ugPCVtLixzPA==
-            =/TYd
+            wcFMA7zUOKwzpAE7AQ//XrycscGr8xMxGns5GHO8zOjfd7OmAAjMx/GBIg0QIhrx
+            6qz357Jk/nPB07U/xsO4dto2JxJUYLTuNuzp2Nl9w8wjWDVk1C5o6c2ZVErksMwV
+            wMtNHj4wDJT0uV/7PHzyfd7+QwVIMtPH6BxJwbtp2uJ9caqw0ZyidINYmZtuDR3h
+            G9Mtj9QcQ4Xa7a6m94YGW1k35SkQ7ejwSDt0wt4Ovs2AdQesQTaa2sb7bKUVCrff
+            tWlji91DQUs8/vuN5KknqzF1Cc9q+egHzbnhmilXy3Gi7X6eRlDjBASErTS6tsVu
+            BM0DEdlBvRjGFfWX95XoLoUyMh28gEgMgRpr2/UgvCcd/fsNNNkOJucXqSEVYZgZ
+            /4Jz+7/Yay0YKcEe2l5ov3RbZei3vrbBmyastsVaWKXDKFs4wqrgas7WizDjO5l0
+            7v11y9cVahzerW5MQNwilE3J4sRxIFAebXxxrN8PGdY81031+rsKL1OfLyHIYHO+
+            Jl0UrR0HdE1F0u29Bk+y6vvJun3n+GdVBtXfhKf4N2DfjL3RmeaFjdCM5XAUmnSR
+            gFFyoi0Yvf4Vt4fY67lwSVSBaaHDvz4XuJZp58XaH4ffztRAvrINSXMCTw2KO9uz
+            M9d6+0sKJav4D1qdCawVI6dYguudOKjHYzwwe4kaTds/MCcv2T2Ohezk02XiBbzS
+            UQHvYAmKnGJ+fq9d0SdtlhLPYzjBhlbxLpBqoClEdEhtKNsuc4oXpsqk6PqSsGfl
+            ghpbsf3cAK9YwqrmWWHv0JNm/VjBdhV2evxNbsAwVrnMAQ==
+            =aspn
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/buzzrelay/default.nix

@@ -7,6 +7,7 @@
   };
   system.stateVersion = "22.11";
   networking.hostName = "buzzrelay";
+  c3d2.hq.statistics.enable = true;
 
   sops.defaultSopsFile = ./secrets.yaml;
   sops.secrets = {

hosts/buzzrelay/secrets.yaml

@@ -10,173 +10,195 @@ sops:
         - recipient: age1j2euh5qt4a7cvx0t93uj4n9t8y8tkv9h3nefszc6g2q7t7gvngxswhrve0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2NVBTVCtFRWtjVklwWnFI
-            QXptV3J1WCsydEF6NVRtK3ZVbWFRMDJkaFcwCi9XaHBKc0NqK2t2eWlmZm90bXlk
-            OGVZZDZVVVZqdUV5QzBUcHBiZ05YWUEKLS0tIGJUaEhqY0xXU29YRWlxYjRjblhj
-            Ry9Hbk1jZ3pJQ3VoVVNKUHZWaGpsencK2U+bj1wQSsfSNsexDe9It68iGIO4Pmo+
-            63H9AqmRUyM5x+RaAwxy7rUUmtFPmLnfAq8htoMgRwvBMIK9YnaUHw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUVlNbHlYcU5yUEVxMjBM
+            cSt5UmlyM280QTNuQTZpWWx0a3crclZESGgwCjA3M3ZaT1RvcjM4M3VnUTRDbVJT
+            UkVRenRLa09KNjRRZ0JrTmtQRFFiNFUKLS0tIDQ0U2g3SlROTEdHNkgwUjFqOTZm
+            WTB0TndsODBKYWVWbVBzNjF5MWt0OGMKAk9j5/COvuUti2W/PisbGgBwtqqOUbLl
+            jpGzDz9IcRDw0w/JZSX9MtkF+qMd0pZTUbvZ4nhQ7nNH0/KSSu79Eg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3MHhVU1FjSi9CSllzWXdR
-            L2lBeWRPaThCeGU4S0d6T3BYalZ2YVMzcW1zCnFvOEtsRE4ralVacElHNGpXMHBs
-            allsMDkwejN6WSsrdFk0Rmt1UXkxTVUKLS0tIHdXT0ZSendZOTI1dlBDREkzcFhn
-            dENEWVBvTUVmWmxwUVNtWUt6eUY0UHMKPl2p5W4e/oYXUFltCGOT1F99T4E7BgKe
-            4awZFXhvY2WTlDC1JD7gLoUY9VeB6/PYAPLzHN948wA1StxAZBRVcw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvc2lhRTBIdWJ0KzFPR0Vh
+            RWFqdytWQUxXRXBPNWJIcWlLZ3NQTnZmdDBZCmNPVDZNMmFJamZISnM1cHdOYUtE
+            NVBVT0NWQnh3dFFLODhlK3RZaUFWSzQKLS0tIEdXUmwzWmtrVFp3L2JHL3Rmem0z
+            Y0YrcVZSaU1Dcyt0RlMvN1I1UktGL2cKnDdeiNiq3xeUJsKGXb4IvguzNMQHKrqO
+            lymktEJ+786MuMxvcR4nP1kEK3o9h/Pt+HRqGcdGV2gu9oOE7GBo5w==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-19T23:43:57Z"
     mac: ENC[AES256_GCM,data:WjsPP7IPUonv+L+itPXTq2UQhCV2z+gvpEQm4sM5v/S2LK3YfUWbhnAqqcsC6z6F3bWFAorMEgvXN/dS83OGwWrczPc0q3Fk9wRdxOSZxliNG8Ohkr3HyawSbfKPAdi6pht5cSS/3nrFfBll9hK1TDeJlzn1ORA4ld51Wn1YQV0=,iv:4q6uMZsSQLGwpDTKwQYZNCfOsZM8WBiZ1URonJqU6k0=,tag:Exsf/deHMN/a+8RhwaMR1A==,type:str]
     pgp:
-        - created_at: "2022-12-19T23:43:12Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7ARAArZLL/uGy9p/1bm8VXhv1TwmFYXwLfcoVf0dF9v0tMiDm
-            h/0LNizUMXSnVIssdpwttZ4M4ebHUmLYHlLiElfCUjLEP3/gZW+KPnQ8B9XyayTf
-            sEqE0mb7wZ4XaNIAiDbuAJwRvhXhesLeDMEhRwzyvUlK8A4k4LbAy9bguGempnCV
-            9jV1c6/UgtJlQ3by5M6PiQHk/pjcBj37iIu6POy3NBF1aOqTrRFTVTS5lty9waNH
-            rd5f2aEbjIhg2xduH364iVBAFAL+nf0JPsb1C2npapoWKZvwfXo+jmpEnxQMQ0WT
-            5IDccLYR9Hdo2itdpXkmu20JzJWqRaWu+3Zkq+pf8IKrqQ2CwMbo4bTahxiZppsi
-            YKLQUlwjMNQnyOt4oqgiEOEQG4j/1+So0GKn7oEyjsHL/BzdVYWICfl0juNGMk6/
-            ph8m5T5abkCZEHkzvvyAq0Ev5AgZahHIwW8mFQIikxY7rkiQiOGXxwy+hr7/jgBB
-            gmrpcM5PoNWRYcAykbdURY0r9rlR5olWzIu49boKzqw2e546Z7VgzAVXabSdCm8I
-            SWjPqTKuzzpXdCtV+Gg6xVQ1G0S8CgpPVs6UQEk5Em3vzLFiHee7mAxtaiR7z0Y1
-            /kRyaLaXT4y727Eu4uP3qvgw5aIn+GaZbrnvlmArKjEb3BOLeMMYONhP/p1pAAHS
-            UQHh8anacsfRAQaCUnj1qXqXY61XDU5E20j6ohxQI+Cq8osjIiv1gA29Mi59lgKv
-            HAM/TGyQiFnPbTjLZIgsNJcEMe7MKAMCAZwmikS0FLv3wQ==
-            =AiBk
+            hQIMA6j84+xkv3y7AQ//eZbxMkQJ6N0NOKf4jNC1swjqlhZJHs163hoAmyqv/W2Y
+            pIOuxujNnzJWWJ4zVLsL1YMwihq2M6bkL0Pls3zSbP9YEVLmdA6VK0zYnjCVD/1Y
+            fCIssuthHV5Rs2XkWOFjiCUEpSAw+n8mtEL/nT3TxQ1YIOlX9vjaqTsMi5zQAr70
+            l3ndPKp5W0Q7FwqeBQE59Cg40OpLuFndV/TpizYfK7jg5nAnq5chKj7Ez/xjr2D5
+            eB3W7LFr++Ve5a1fWdotUuOxHueY9W9ieoayJbFsvVkTqFD0DaxqcX402NcPAeJn
+            fHMGnevGrzOeaTc72NE+1iyD44QNgYuWIZN+bvTPPG78sZZgxwz8obKSGiVRaJ5Y
+            WmjBVrwSkaMDAa6Lf+gA0APXm6htRQJt191u044AtHcJHD0RlJvNza++iHyDa/es
+            PA2b594hTSoX6B1GSZ5kxTZsb4/FwNbX66bqOdxRcFl873bn/WCibNlrju9UOglM
+            L9t7XQKj8wrR5QMgEx0Hlhb6NpmhvoD5FSlcOm8VbfLRbec4MpnpWetq1d7oXNQH
+            WZbz1ZCcIe/EX1bDWZ1+1T87Lq2dfiVnry2b3JrDbbCdnEG48a4GmGSxxi+cE8Gd
+            l1lLdaojnfIBSs0qsVjs+R3hzu64SBaOVMuC2AwGH+KfZPMc9k6lwoyU9eo4ncbS
+            XgEIiX7nQFT9zPSW/k8UiCO4Fg5IQKvbKuIOcOtfntZ8CVbplcwMgmo9XnmGKYJ3
+            HT3KdLGq1XrMLO/nHdcO31oNgCnj2udlQ0DXdS8/x+/A3vCtTS98pWYPCL4wtRs=
+            =Kh03
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-12-19T23:43:12Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zARAAsVUOr02uJaI7lSDPJlElIyKjbGdEk+89OPAwFvpDyiEH
-            jI9L596U4U61/Da+7oX9T8VdzFibHGGq9EaJVA3ey3wF0cKQUkawKPJVC3S67vp7
-            w/s/mranV8jp3TBmvSggelBBwEsiQSmMVdGPNmPML6JdsShgnNusVYrArAHBH5UC
-            TfxfzQzdBPXsYaaexY7chmkFw2Qco+t+AZBYOTzNRxDHzy6tsOvVQ4jJB+s6ymXp
-            JzgAn2Jy/sA8RuuEcPfErcGucaftgTiQ9WSnyzb42IGYLlaav7ySzEQ2IzQK1QTF
-            r3TrNa3vUXA2J+nlL1lOrbJiX8H+XXevrxyu73WnZ0UAO7jB+OqvmsTX4OwG65uF
-            i4UeXtxFpyqcVujVWarm2t4U+jch8yTEQSAvuH8wDkdCXF1kOJokbFO6fSNq8Yem
-            aQ8JIMc0Pyr3+NfUkcZ1v0JnDf40Y3VuPZzuscZb0jZFaQQ5BBfoHVLuC/XFKVzN
-            Ara7Fo7E9OTjorHkgny4cQdws2ZZubgRyQTJzqUdEIudjyDU7bHbedBdnXTFL90m
-            tkDf1Qgqk5gqp4uFo5we+lXgECRYAf8SByqk4w0MAZUgAjS8K/wVG0wyiJKgqPRi
-            SozEf6iAphdumrFtno7hbmsVOaJGgAWvypK+P/xdolV94c+LqhUCz0ljvZjduevS
-            UQHBxcadBktddbS9O30c5NnjBLuV1ue2f/52zeuAfEhdHKxCvP/cW9a6zPh+jSFz
-            oQ/eqf6oZ8K0WcqTlV0rwhUwBjgpVWLtd2KkgSMNQfnh1w==
-            =MKf4
+            hQIMA8zMZ+ak7y/zARAAoezW+i6xNWho3u+1joRebY/Jkxol6Q1rSq9CIcePXCEI
+            cEk9Ilt5EYr+K8L6cyaHyrZ404lUNxLv9YciEClwEKHC6KumHKfF9zXag2rH8rvx
+            cTHPVLDYROEmv+XGQGExsdACD4U0hjhigcRq6nzNgtfGcckJUfeOoo4rmg7vG1s9
+            Nu/DpCl6REw59ejR6BLXCgVbS9olfgi9HYXwzMCQ5xWE+sUL0LbzCLiJhsjVW27j
+            hKvJFdFcbfDZXAb9nRxo72YWiAaBPIyzYLy8S6KbCtJaGRREOEWN40r+qAmotucY
+            85t0OIlydCUJB10kIvnO4ezLEH5sA8W0Cw70ju10bk4t1I0DEenHl1/sLLUmed91
+            ox/u5r9iK1DO91fUEub45afhC8iRRpS5EmWnuvrA4aWWa5W9WqCz/wxUZPCOthwT
+            eA6OAQDyJQ+SdmvEct6wgFJgx3ULfVWBr1WfrMLn/TDOAkiF8bKX/Om7OoFGYcAX
+            X4OdVd0SpWiWyCfseRdp2ze1MgmiFlNFHtjey2pk/8GU88xXAEn1NFvLyjfTLZEU
+            6AB1Mkb6/9/zilanYtgvMx8j3n69CB1e9yQfLM44tHAQltyDwcwS7j5dn3wXkdke
+            vRIiqJ+Opk9gosazsUA2RbWVhW58q8afYf0IWUaXgJX6EB0pGTI7TBBnpOsZNuDS
+            XgH326wc8lWBhEhn7jelw4Xrcs4Mp9A1Rh1Javg/zjHHs+oo0j2Nr3vArPWWeABi
+            /jYN25peGRKbNU7upVnHAjYpjNeEnqLDM3vU++H1C5Oyop+dU24oiyOP3vQxUfM=
+            =NpUX
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-12-19T23:43:12Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQf7BM3K0rH6rh3SE21+YOVeNSY+I4Lk8++Ot0R6pQi6LRd9
-            VP3dMsWpVqAiqcY4iZwoc80vNi1MavJzjtxqEtPNFrYBFBb+nKKvXZgvqar+eSjp
-            T36UmasapoE3ZU/O35dBonTyCdAXS+RuEL1jWYlbeYsw8F8E9qi0DbbLQs84x83w
-            a2haZtoX/jhxWf1TYZ/Vc1mvZM/udUPE99lRqQeropzBr4Dq733piPtVOSc6tQv+
-            ibezV+CE2fhUmDa7TJeFwjXtAK4BdxSDnT5+Fnbew0OCEU4ub8Iq+rYry2oFRNdF
-            dKpVX0M1X3l8eN9oMNp6b3mW6P5pJ6c7Tp9p1FdS1dJRAbSA+y3DravY+axGAEHC
-            DIOD38tywtZeLt8tMc6fVuJ1a26SnXqPjFjq94pebVnRrX0woXE34gtEsNyB9Rag
-            LLyhQCIW4mmb4pwc9TZzDf8w
-            =HkvL
+            hQEMA45bZkLXmBFpAQf/YTz5oHtP8OTrg/uJcklPNEiRnU9DLwbQeU7f+ylwHjhY
+            3qR7jJ5EOTf9/lWMTINXt233OUa+MWOrkvOsZFY/ViJooddL1s78ePmcAm0g1s23
+            nYExekJ3xy3+fH4MYf7PK4JygE57kEwAOdHts2TZC0bHr6Bc9Wo4D9xVlGvA/S8C
+            EGqgyPP+BhMB7jmyW0TWVuUmSYEvxGIdgjUFC0qgF7vgfUXyKlBZa6k9qxPYGoJI
+            nf24xZ1s61otjHDVg9WvFBkI0Za65xjaAKSX84sMmFG+sNy9BKuWre+6MgaMT5WE
+            ugTPxOX0ZeU9iuX9vxowz4UB4NvEKQOshccHrgobsNJeATZeD10z0igms94tZsv4
+            peYj8nwwJAuykHR6tS1FPzjFebEJYrfx/HgYjhPXlTbTokb52gASdbiN4HeFkfvU
+            uhSrvNL90WXWhMSlhkL0CIdLesteZPt2y6ujWYuT9w==
+            =F2bt
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-12-19T23:43:12Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFLAwMCBBrc/JA6AQ/1Fk8ff7+dTnPFah81IFoWVo/DUsLE0/tLkXCJT3uENrEj
-            PWStEFUvv9T3+aJ1ORxI1hlxRBPaJbhDYuNEUEe97q0CcK0oEqmh/1ikoEljG0oL
-            lY/M1YzKhQ+Wikz5k8uWgGV/MzmLmYe6ZEPsbJeXc6ROaOIUQpDav4MrgJTGynPz
-            KnjjvEf0arlI35MXqth+TzgcuHwWXZcbx55h62v3nC4J2HZYHlCzrXWRM+9kjpX3
-            BJ/yGQSlq10T1AQQLwhQ2CPullSkXyLgsFvlr5pqiBl1PIvxY01JXWmy0pA7sJQH
-            MRKKTRs/n18+ufFCEZIFOKR2js0Enad95dvBibdGaJEdiUtarNLA/PXGbtBPokIH
-            Zt23C6Q2zTClPPsjsHzVMtcf8Htcgx6Ym57KKktTwQQ96hfuaVUHzKMMpPUP7XW0
-            c0k2tQOvFCWOZZ55zyH3jBMvZ4HajicU08B1CO+21T6+RyF1SP+ZqrEP3GCLjhx2
-            D2dqnCmb+A2WOXZS60zby865k1lyKQz4+4woh2QWFBo7YRBO3SH1NdUgBryEkAV2
-            HpLgv42rclPlRVIAwASx+Nqfz5nuOS5Zl70/BBhK2gobBav/2qg2WxPcqsi9NA/A
-            MNYS6ju07XXmb6KG85hTCq/eTDKPBni1fb1R5vnCirDmDtaP9ABh5Or0KHYzK9JR
-            AaX3MnCLbBtWr/O5IlhOX5zv3DdsdJfl9mQWAuGrvcTmPUQNreMaMc5Fa0MxVLda
-            sgT98wwezRso0u1lGFbUUdDUfNx4NRER66A9dMa89DjD
-            =Mfzl
+            hQIMAwMCBBrc/JA6ARAAmC0BsCFSgGhmJmp8gNJ4Re8uiQAcRIDoQCMTY2pKXXM5
+            A0haVYMvHTNYwnx9yFPPvL2iPpRObdm3XZa/03NchoMOWp4XR3n4M0qt1vpVZor5
+            nO2G/QCv1A47ZwWkVuYFrHjA4wV6LEQFtSrIDVgNsuU5GFzEQz4GkcLt/BzB8Xby
+            muNa6uu9b3k2ewfVTGdQnrkqMyYGcGivNbsAJ/3UGhUi0vQr1oTnOtZSo1R9v9ym
+            wCE6xb+1AVSM7aaVWHYLfntiigguu3TyQ7UMBGjPQTXzslmKhWN28D8Zj4rBUhMO
+            WupRPb7G5uZyaBaYPl8/CVTHF9gk5aRaiT79bqoT3aocyy2tT11FeyDfJ1zKnoB3
+            zdrNHA5f97Aq6IhZslF/MKKc334JLKNZc80ezqJIoMFrZqH1cl6AY1pGCCXCPSTt
+            F9ht0yIAmr+t9U4jHm4fMYvy9qLDXApTjktwWpRtdYEtoywG8znbEtQudN3AJvdG
+            aG7sxpWM/BiMB0jhQ1X7ZLobbZqwx70mvsjjQooxq+KqR4jHxnzwQifep6mCG+1W
+            N1/WU1kyrXd8422AYLjKh05VmXPWXQ3btF2PIOh08EI3rZHk9XVuQNYBC6sS8OIx
+            Aff9MXTppmeaspFIX0bcf+9hn39CLr6YwOrsgmPLLi/PALNhY1j/lNQ+H2xmxinS
+            lgFvQVrrZkpmGabT1TXNOCA0AV6DIY9D3u35RFiSuPCu96/fnNqCxecIeBzeVNqr
+            yz6XqNgueKHH3ueDaZk14EVz4AYj4BVKebaIEORJxUvpTmL7Nt9xmcz0jOie4Smq
+            2PB3oGPTay7DqLKStWnpcQZ1Vrq/u4qo8ZWs977rCOpvmbTbDX1FduFFRHE007q8
+            ww70qZJ57w==
+            =5qnV
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-12-19T23:43:12Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHAQ/+LHo6iduyvENBUtgXAjh2QGGHsuqtR3A2S8Ce1hh/jIzi
-            LJwys0mFHPc288K22nLZrIm42YtMIFjYqLxJBgpRVJ2c8e+FEPElx4AW4MbDfgfr
-            cF7XkygyiJeD/15/AlqQETbzZvbsnNW/rJr7jVJyWuhDJMXVqgnCRbgXRY3NAOS8
-            LgiB8sSJtvytCSVEAZ0E7n9KvkdadLuU+FwGUjZSTGudMp5wy+IewJ4K4kFpieaR
-            4wv4rIzf631iU5VpL0rtZM25z8Zusea4WY2Iau86JNtklg7nkYjnjrKTc/1PNrMS
-            I97NSCmWH34FraSCzi4y5R2KNCl4sVn8IvcXyUopQ9WfxqYZ0qSf1zg5AwFJnRJJ
-            8XsEImAacL84FL8NYSUbSb4HBl/6fYtziNtrNy1JG1thDWv953rgpQJ0hpM3wRPH
-            rsWP/E0sYHNFXC7X9zxUN7Txcw5XeyMX0ihsMZl9NDdaXLqxvTcRIcns6gB/evPP
-            el98Abpmh+kimk+XlBZ9RGFssFIyxsmuUuEKs2WGatR0jSkvPnUukgQDYVw+MOjd
-            vnvrxN+KhEgwrR3MivN/vZDioAcDzc33pqr8/cL4PSCRVLYq0KPLaTScsTOEf+l4
-            HxsOlZV+1aE0RDUhmlsLx6pvmtfg/dkrXqNSVS829tfsj2jmnwMDQMh6qYLyCE/S
-            UQGyjIkScVSfKm4scNceTu+1NRKaUrgC0ZAAdQkkdAWyghpaxbFgkvs/LVbKkd7u
-            KWWgzLKD8QewtLlhV/No/AY43P9heCRRyEnaVWQ/QjRtbA==
-            =zmb5
+            hQIMA9XEenRNYVGHARAAzyzKP3s9b/dvrTD9BOC1+cyg8756vyt49ZfDO5rh22cB
+            nPnHh6gNyLFvAtGzWRrlESVq8nELlpVAbXqMJ3NuPOF9T7asMd3Zmikhl3h0O0VF
+            GgJlvW85v6SQ21cVNZJIGXWEusNK/s+OugAwU8hcIdjFBtGU1yyhl3xOy1t7EnAp
+            Kc/5U6+844j2uO4SgyuuzpT1ffOOlPaHI4OfkaQBUjD+XkJ6PKXyRC1Uz9+bJIHt
+            XZF3ohCyDGjeoFPiwgPbi6nEr7Q2yz+uY9Rz5wsyCYiKZnehmx1bgIi3xYKdDLgE
+            jtPH6ic3as1aQ3DEcl9nmNbcVrmVcnjP4KSVnagDZkYIw8znPum3rR1cr5sHPhul
+            9IQ9mLfvHapXgkgIjcOi9I5fHUJmu/dKCmXg/1N64en8uPAlGAR1yuE5kpLSN0EE
+            m9NkYDNQiO1ddU5kjrDWM/5NuYo8/Zt7biYunUXcAI/uwEnSCcKsDYcvovgPIl21
+            utNhEOH8ElCiHrejCqyxLMSogrQcUgkAJ9UcEPrri4LxIwsYLWhcXmyp2rbpT0/C
+            yxF7UCbdVJ/9fwcq/4/x65r8rh9eiUdToyf1qdpaasQXEW8p49WCxfy6zo7hOd7w
+            w+KVt4RvPpGoABfx0fAi/rviA7oi7+fnF3YlSkpZVHti2j8Tc2w7YisP+Dy8/3zS
+            XgG0iBwisa30t1SM9y/alj9Li7xTsYRFdd+PumhOEwubF7p5G+Kx8ZF60ZeBSCoV
+            8uMq2J+bXhRNkgHyd1ZegJ0xCLpvLzXq3Ft0O/zZiLDhKA/DFgZvHEfXSIW65dU=
+            =e17W
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-12-19T23:43:12Z"
+        - created_at: "2022-12-26T19:09:36Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/QWSkxe5VHEzxIVmqzAkUwqd3ozu2wXbESAz/oG6IL+ZI
-            UcOcNpEkc+9nAHavBD4Us2sOFm+29tn10NxgsgHw4MvLGcxTbUXCmsO/G8774ng0
-            X2nGr/vvHoISSRJFGf3R1L8KlGjwSoJOPWLPSD26CACFCkLRXC9NDRg0XBZwxW/R
-            3u8Tidwhbzm3K502/YHKwCov/giaEoSxgvkSEs96mhMQYLDqEDNvr3M1Xm2UbY90
-            oKC+FOFyON/OOZGVvj4UYJMW9ptmAeYGQqye2bv7BweVN3BnTM7qycb06mkNDGzT
-            ZvOiKgE2ODUxiZpQoRmmID+T17hijl3v4NBvZJZlbtJRAWlDM1zEcua8NzBwxbZ7
-            Xcl2Wu7G+IhUU8UX+3D+ttf1CCl8XAOTOnq2btTRAms9RUKA/8WgUcwwkMyXgfYq
-            LBBm8h6wWQMYvIVZBJjaw4MQ
-            =myec
+            wcBMA/Z87ylQaotQAQf/fu17GLV6zD4tAnOoGCVfT+xLcwjigrsSFkPJkdk6Jizm
+            RgxRb/xkAPwmPLC7KaSX2Y5XrGEfIEPXcqHOr5xKV4etxZBgk1hWRW27fa3IIxAH
+            wLZ75MJ5NL6+gnDbz4qPIE4g8kq2rBrHiU8BRsU2+2Ba8V2QbOddMusM6nvSBAEU
+            0T68Z28qJQY80DtoIiPf9vtKBLbI4vgML33PtoJ4V1R/ittcuSjQIjGGFUnZfGjl
+            EGF1dSHW907DlPS2iiqTswue4wrk1d7vLqdGRLE4jzvHHKOu3mNKsDEUDTml9gt6
+            NABL0RiOUFm4JE5xt3ip2ahJLU7DJOcIcPax0tTO3NJRAcdvUkqqSLE6OSKqBVNs
+            XbKXRDj7MeI5WkDA08BLxzF+h/NbcqtRMx7p+/F5j+60C+IPaLV9eYBqOdayiF2e
+            bx0TJ+psl8PfCzn2LnywiWqy
+            =ZoF6
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-12-19T23:43:12Z"
+        - created_at: "2022-12-26T19:09:36Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//SQlygK2klrqKWLoRXn6Csusw/WC2E52GxZX9bYoxpMkS
-            HribUm8LLPphpmAhCJKdHNtUPmtW34FqMm6kZYW41jOKSCa6wkAKS3BKzkBYWpI2
-            4mKs65plDHuRQ5x6Bq8FAau225DQWYE4CCSF1+8zc/cZjy9YVcXen005Qd5E+p0s
-            LrqsdKe3WTwIwBGOshG5D5z6jshHNaF9spcERGLbBeoz/xgMmqtqlnZ1iJ0NZ56n
-            KN6pXbLT6j+V+5YNg3MPaGIJuJV7beO3FM7nQ4Hx7SQ7/kJiHR/6qKmZC7mduSzb
-            ftpW1Se1MjrtPNl2+czNib4whxndTsMBc6FU0P0oK3cHTQqGEd7F/OZxfadTTKbu
-            1WNvtrMIOsreB4LQMrU6WHnArnKxwu85+zmp2LvuOYVVpEPB2wwrtiaQSwrUcWcZ
-            slB1aU/PCIolBH/dSUG0jfib71V2aat6inWZCgAr0suauiv7ij68I4V8lLchRSq9
-            zdPr2MaRlxjUs9w+QALXlgOMliFBaIjA3keDbLywUeMtzt32yL/p70KZEjoGqhvC
-            F89RcjfNloCkW5gAI7zf74m5++VoMPiY9SFvaDlsgtetJeAoXSn4dAVVO/2wCsjo
-            f+m1Bab9eYC+r30j2vTcEHo6XwGoJ2KbWGhzPzUfn4XgkAtEno9LG2W3s812UY3S
-            UQEsFFqRAoidk7zl2qftHTBmupYn5klcXa8xNOqHpJ4coyo8cpHBoMr8A2QldXDm
-            S93mLH72lRhowjySBRDBDlR0mS3UBGx3lZLELI31fs5EOw==
-            =tnPk
+            wcFMA9qJIVK2WMV7AQ/9GJ7Halv5T/aBEnI/yvpl738fzt1W6UYKjnmeMv9wfatp
+            o5FPHTBnV4dSdbCCEgk8OWlHwWQC+WNMqF5XlR28R3U3Fd0ADRiPq8k6N599PH3K
+            VNGGiYVv6kAczY7XJx2LdWWoXp2ADnOzQ83/dTafzCI9quaiFHu7iryHvfLdy9YV
+            1sr3h+M44vcNArliRl5KPhYn9vuLPNXccGg42a8GYcIaSg+lpa+j1I4Le9b/bx8g
+            fwdUnl+R8uhi9uyfpOsCgPBV8kdA8bifif80AjodhNbx/8a5aWzkiNXqz0j5P0jA
+            wsbuFaOL8RUiipMzPn4ev+ybZZmNzJETcKXLtcI/8I6JNOd7jghZHRyUVEpVI5Zr
+            h/D9KKwlycwVEGntHKFgTIxIe1uARlGblf0h9xSJF3W0cAuSPUh/hOv/sufbwiFc
+            vc1aWXfmIr2MRunouqzYBJ70V7LHyo0ORYhd8MDzjIVfo2ixgRlMpms2hqDdzWzB
+            aRgQEsYTegEM1DxkzgQwhUAMn6kNn2Pj8vzX9+jcHtVrPuhxnzgzeKAgaR3zRNjt
+            KHkWwKe8fK3+g6IWwLUJeoBMOumnWg0ZSNsIev9QY5XmX2krnK6zSrUhsdafQihn
+            wjgxlH48HoIcNoZJ5FAJaCzUJnGU0l6rbdXOa1V1NDWJ3SSb2lZQWqoHfrsBQvbS
+            UQEOXYsPyGL/bYoCkNLUBrTXCtCPtuiJ/ti0edM8n+l0IeinYjVoN3PjFL+WIzAw
+            ip1y0/10NsRGaFs3oC1B0utOEBSykAQrpDL1Rc/Eq4RzXA==
+            =MJlm
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-12-19T23:43:12Z"
+        - created_at: "2022-12-26T19:09:36Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ//XYTDH0SDA475ukBj8txNGDAkf5R6TXD5wPdcA96NSH09
+            QB+JKOhURiKvbuwhjZnbtRI7I/PVF+yuDdxrwFNxjLetUM06NMyk8DFPwZr8SQjl
+            2dQ6hOfLfxolXHqihgIdmCSFyzZpj0lTuSMOsCOuECfaTjNuMwAqKAUCZFpnIg8e
+            x+DXY7KZZ+uNYA2e1Qq0d90zBNJJ/uQbQtFXOYKk2sf/+woIHI6Q80Q04gtAKbQV
+            cTlV50+ODRBvpO2QVz2qfc3er3FroQryy1S+4uvzgLhLh22qvWIS6Hid+XFS7uk3
+            Gm2TWQvTdoqQQ231VOwv96SqfIuQ7piuRsG3X045ph8dgq7PRRKdyq8bLPB1bG/k
+            kpOKRzeCShx+1apMZvpJvtMsbXbwBocWEuNJFoGSbwcSRuR8tuYpTJtJUa6GMhtw
+            2KfsNfiWzAZTa/HjPxYr5y306HYb/PN2Yqd/i0rHw8g9GfFMmmgN3L7bc1BUM/On
+            88I3sByk2lfbu/r6+QKMiugCLDL1ICD953OeR4CmkYFXzYh/NCCsNYSO34O8tqx+
+            B892W//D0AgK2aIv4B8Q5t77QOX7rFNMGoT1ADlwdvMFNZmmxefdgB7P3QadQ5JI
+            AP+3Xn2Y0St7WrtsRX25wS/j+tR6GGNuR0gZwEAALP1XVbSMYrgZxbNIUAkQgtzS
+            XgHB0hwlFHQ/TUio2QfFcn/qp0vQaE2m1WjJOJozydYWW0Tj5z9g+Az10ax5DrTL
+            nwlvQIZAK98H4zttlGj3LsBKpxqKN4X1HqNdAGO5LFntb21e0RUIjUOWY4WIcz0=
+            =djcU
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:36Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJAQ/+Kyg38zJhSNU1j0raWbx9qptiD0LPLmUXr29AcYkWcEj3
-            9FjPqvjhkPk8SLBef8yfU4Hp3BamLPIPZQLR0kljTr+Zyc0hIFBKg78nnnhZiKjX
-            vt0JC713ogazmHHM8YBNVC9P7EEOypZ4PyvA9ERp33ib2hnNHuAvNC4k2QBHsMLQ
-            x/YKx7ILVsSB0EKP8aS/lrigUyz5AfLuxb+jVBEHrToqpL3if0uApwhzbqldBY20
-            PNV6TmUmhIXMnZFH+TBM+inyLMmphzVCx1+BAGb5eH5F4ZLFBFhw1hwLZqfBSUju
-            5FrUVRuRiPkftmTz5wSPt5YqsZ7hUOvMMHi64obn+ciZDWwvQFWH6fkMtQdMS2uS
-            JAN5HCTJZAqRPLjjj7SVkH+lHaQCaZl7TviLz1bcuZO+gJGlJOQ8dliIrXm9zDB/
-            kWGjXgdVmFieCwtbqKX1CKNJwTeJd4aGxAflugfdoam3HOYoBERSYtbBAV5sO0yt
-            xwZ/jYDchY5YXzukhp36nSnNj/K5C+gx1vYrMOP/zsp969nX0Fq8/lIb+JFfm8cO
-            XD+RggXpSQph7Hg74+L2ULAcsKQLmnAMhZ3WZXq4wY8hVbdx5wMULqQJC2gX5n7C
-            sQSwC8JQTnNVf6GmhvW4eaJiUKQx82o829KSLmGfPWpA+CLCE15IPMYbKZMc9zfS
-            UQFLHnBoCPQSdGYHX+IDm/9h85WshPy9xa75K3ub3qU812Iviq1yGhii1/+nyZYh
-            EnG1rBqh1QhwZuUY83BJPCe/WF2b8NLzVGHOiTaxReBeMw==
-            =mZ8V
+            wcFMA7zUOKwzpAE7AQ/+Lu0pV3Mmx0xN6KuSxYzTrF4kfKN2uDjmBIbed0IQjNem
+            EZkp02QVSQTDiVQlQl0pmv6BJVTd73dgRCKj3Ja44I375BCak0prK+zXvtLeFK1v
+            DuFmEnBeiJ6xuDsfX5xO+COYuEKy3WDAnVKH82ncCgWHraaP3gNcurpYLFdEEoXB
+            2bdZ+vqC3rhXy0+eAi9EpzjQrzK7hlw8QFkWF8PK3ygYpuBm2FtILgwZeNX5lUHJ
+            DTy1wBe2mXnqBfLxXc3Gy/NfIBxnvba/Ms7IPqe4ZOuN5A1V4rN0HsvM7dsdRRUc
+            wZaIEbmcJzd8bkoAfjawK65GqiI9Lq+2MQCaezOr1ckExFWw6XF6Fk8AEr5JWJDn
+            1Z78RCcMI4e+Y4HtjZicXVqSmQvge4URj3Eu9ZIHdM3UqHd3bErenABNG+FTlYtd
+            NzV37F8YRCyhxdvSdIQwo2OrwQp9zC3nZHGmjsN46FbOOwTmg/Mom3qZ1E8crQpE
+            gNA9GWmMRJe+kizNXiS5ogKIJGvXsncnyqeqxol1vp9ZopAWnFGSnAuQx9HeOI2t
+            IW0EYB7bRerjKbucbYNY61SPktQ7tMz2AQ76cL365dgyQS7Ace/pNjOT3mzBK3Uy
+            FbCmDLMDAC/e9aXtFjUFSAVo+6geyllJZLGTwyKc2OAZPHdvJeiq8XmTgXbdGRPS
+            UQGzkQcUntNc0X0EB0sRhBT4S4IPIKO79pox+A+Zy3bNLQrHvBZU89U3KD4gW2++
+            0ycO/B/1N2F1ZKBwp1lrgmy8Syg7iNnvEE0d6C15uKIpdQ==
+            =Ywr9
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/c3d2-web/default.nix

@@ -1,7 +1,6 @@
 { config, hostRegistry, pkgs, ... }:
 let
   webroot = "/var/www";
-  geminiRoot = "/var/gemini";
   deployCommand = "${pkgs.systemd}/bin/systemctl start deploy-c3d2-web.service";
 in
 {
@@ -109,7 +108,7 @@ in
       "[::]:1965"
     ];
     certificatesDir = "/var/lib/agate/certificates";
-    contentDir = geminiRoot;
+    contentDir = "/var/gemini";
     language = "de";
   };
 
@@ -173,7 +172,7 @@ in
   systemd.tmpfiles.rules = with config.users.users.c3d2-web; [
     "d ${webroot}/c3d2 0755 c3d2-web ${group} -"
     "d ${webroot}/log 0755 c3d2-web ${group} -"
-    "d ${geminiRoot} 0755 c3d2-web ${group} -"
+    "d ${config.services.agate.contentDir} 0755 c3d2-web ${group} -"
     "d ${home} 0700 c3d2-web ${group} -"
   ];
 
@@ -193,7 +192,7 @@ in
 
       status() {
         curl -X POST \
-          "https://gitea.c3d2.de/api/v1/repos/c3d2/c3d2-web/statuses/$REV?token=${pkgs.c3d2-web.giteaToken}" \
+          "https://gitea.c3d2.de/api/v1/repos/c3d2/c3d2-web/statuses/$REV?token=$(cat ${config.sops.secrets."c3d2-web/gitea-token".path})" \
           -H "Accept: application/json" \
           -H "Content-Type: application/json" \
           -d "$1"
@@ -236,7 +235,7 @@ in
         # gemini
         status "{ \"context\": \"c3d2-gemini\", \"description\": \"building...\", \"state\": \"pending\", \"target_url\": \"https://c3d2-web.flpk.zentralwerk.org/log/build-gemini-$REV.txt\"}"
 
-        make -f Makefile.gemini -j$(nproc) export DESTDIR=${geminiRoot} \
+        make -f Makefile.gemini -j$(nproc) export DESTDIR=${config.services.agate.contentDir} \
           &> ${webroot}/log/build-gemini-$REV.txt
 
         if [ $? = 0 ]; then
@@ -271,6 +270,11 @@ in
     } ];
   } ];
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."c3d2-web/gitea-token".owner = "c3d2-web";
+  };
+
   systemd.services.webhook =
     let
       hooksJson = pkgs.writeText "hooks.json" (builtins.toJSON [ {

hosts/c3d2-web/secrets.yaml

@@ -0,0 +1,203 @@
+c3d2-web:
+    gitea-token: ENC[AES256_GCM,data:W5NC7+7F2HSwRRyFdqkxwZVdW14PfG8PTJ4RI6UWyv262GMqgLbA1Q==,iv:mW5ahfvdzIng0dqphtZtZwOgF5W5s3rbP0AF0GxmcjQ=,tag:sYyMsqrKerxHcDRM4OkEMQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age18h6vmfduhmj28wxdgur8wugn7scm5vwvwkj5sr4f7nl0czr2zvaqscsdsv
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObkdlVCsyOTNlckZpbzh5
+            QmtUOTA4ZjhCQVJXaUsvRWRvemE4SkI3OHlJCkRJQnhXNmU0dklRV1RGNXR6YU5z
+            cHZSMlVsSjVIZVBna3BDSmUzUFFjb1EKLS0tIFZYWmlYZURoUE5uSVVpc1d2cFUz
+            dStjVFRYMGFFeWhUTWlnSmk4YmI0bncK+8y/yyFf3L2zxjgDzQoV3lKFaCyPZ51f
+            UwFhDop+wcR59B1mxTRRYqzfSH9WBOx0NkabxSYMYTGPqn4j9vOJ/w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwaHA5YW0zblB4ZFNMK0V0
+            aXJseW13OHZLcFY5NVpiSWtwa1VhU1VLMndZCjVuSDRDbWxZYmdGVy9leFFnZFF3
+            V1g2NE5oTFRxekdRTUZWb1hOcXo5QVEKLS0tIGlCb1RXZlpyTE54cDhWRk9rdGRV
+            OWtJZ2pzSXpTVnNrYTY1bGJCQ2lYZFkKerY4F/HPsr9vrMxu68FRVNVEKysE1M+q
+            zOY/n3CNAdlVjnWt6D60BpEHIpDhO5dvBvvqLwsOizI7fgfmwFnGDw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-26T22:08:37Z"
+    mac: ENC[AES256_GCM,data:v1goHC28SBz5G2FtCl/Iwbc3t6piDbNXYsUmXzuXcZrS4wr4e7KpXIXwYnNwMTrEBJ4O3ML734i8qx5BHDTS6FiTgvYSQnDR/cWXmiaVFoPAZDP4Cdx+eUYtmnZ2g8gUmpa2Swpp4gDlm3Rdab+R6mkAfDVcjCcgnxB6eSIk28g=,iv:Ao4+gCGNOOKiFLATBygGvf2E7GfPCyt/fJ1R+nuYsU8=,tag:NBZzrWzpm/fyahzE/27Q0Q==,type:str]
+    pgp:
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ/+P/ISjuyybDfX7stUpWwtY1v/aAe8NvOJaHIJTnDdyjRX
+            emtzTmsLyqj09IFUCg2sh2B6sRvBbQFsXMT6pIN89VYklJmvvkGqvp/z5ve8skTw
+            ntgaINZxK/ibJkkFAh93TgcAILWZg/e2DSTy2WHRlR+4Y6BiT5JFyJ92AUbUITo5
+            gs3iEyowMcInqNkWYdEqnr8wgWNVQrtWz/LIAkbLYho60x0g5DYg9rbvDURFTTYH
+            EfDfZMrYGAlJgzVtKxdK+dttlS7+rPc8YRu7xMc7kNRx8cv2YIEnPaRYczRgXATd
+            XqlnA08jJZnZNv5muuwP9NunQwg/NjHwUOcSUDwUYg5CT6zZsA2MnT+7BEJt8Eli
+            6gGHLCdmtAVzJqICgUc+kbqxaxB4SQ7hlpbPt9C+of0priT44N7A6T1mWbeplFst
+            UCutK8Igd+U0p2qvxJsEoA40qD8Jzh6qRTlUtV1WdsdqHkenHGaUvKfF58lxA7Ch
+            GAE/2JS65mp/aHAKdYpZMIeAVxEoRgrUlK1T0Sst+AT18nF2gPuvuduAOcmAP61r
+            WIBc8J7nsyMpcFJQ3J4AMX70XVfszb8xZLNB9cg4iGEPNkmjALPVtFlj2fG9hVj/
+            5SpQLDROHtdg0i7XLy14Dd6SIhnPycIcEdfMSSdYEOIAwMIjhO6i+X428/oaFs/S
+            XAEk3xSwH28GFgHpIWoPONwUmETij/+CUrfSakqPukjSIWxzab1BpCJJs9nd1P3K
+            1YDIjyOgQvRNEozcL3tVIcHj0EMJJ5LRUyry0U4ubuSNNijD2r5gXfeymqbu
+            =D2GR
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ//YdneFU7q64yfM6TbxzMmTlZ2IFq1aO+RkTodCjN2Ros4
+            FW84FAlZk2Pr0657+EvkPNlrqOkkiMhHFZToYK8BDIvYmJ7SuVMqDc0rxRk/SYX7
+            Luj3KE7mZd7yCgAQVQR2cqQS+nnlQDlWRjdY3iDpkABiCdbTMONp/blnA3QesBZs
+            2GqX6GhpEDs7LJvGq8ZfDb6T6mH42waya6UnXl0NSN1ka+A4s/OBY/PCQ1Ofn6g7
+            RwLO2e9OptlUAmxlMUNRFA7GfQMLZcKWmtDAL3UWmohutE8Yq4gT5qjqVRYqrZYL
+            sInlq8d7MYbuCqUcejCXME89lRQZq8QIyV8L3+I4ZmijrgrB0OeiBtqXPcDZa/p7
+            Rl/qbgpWrbZsSQM+44w9jWf5IF7bQ0slHFFwh4uHNr+sL0HqUX92g9m/wNTj1pq8
+            o64FigY32LmDUMicrciOvx0D2g326aRd2pFkix/H+kFefri9c5tkUXRmJ/VrXsOM
+            CKvXtAA16X1nFNL5DdIJeXlBR72QsCYuH/2wtC78eMGCpM1L2KGyaIjp2WQ9IzRf
+            t99djxNkgZOpLLfmjInYl9dRcqOZObARYnYZMFz0z1fRUvSzSNsINRrwFgCZE5WA
+            2qv/1WF4Nd3dox/JCLlHH1HZYWyO/RQhRkXbDLIEVVnoUdLBoBZEyOt1+x4eAYjS
+            XAERS+kXlaGXmzt3vYeoH3xWZC1S4BbfgBogdOvYMxVwoKgysWhWI8qBg1XGGpER
+            N6dmPm7gxh2MMCjHP2zQB0Ki+SDQre3QX9NMKzU+sJEPJFJiHZXu2yUFYanU
+            =+j8c
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf/RNgivYpm1j2Otu5pbObIAjFRbveX5anM7AHZVt3XcX25
+            eroD+6Ts+qjELICo40/NYinYhB3U6NqOOBZjrtJ3B39CZUdsprZQ8JOg/7qBWrzY
+            EgkQgLoEx//aCVmBjqiRS+c4onpfcnckrhbqOoCtRvBfKjfwq8VWE7SRr1Bx59Zk
+            nuA3QtI+ZdrtPcQLHdXsORfzAPa2JuTSpILN7QCGGXtc6mzUvxo4NrLzAEKAJNQR
+            Yu9E4lUfzPDlYv0MFYvLDgDrcxRF0Bwuwnlr+4LFPBlEH2K0EEkEUCQm/w3EiSiU
+            7lVZZQ7Gt85TjwfPOfoBohN9ONvXhUub6eD8ow/MZ9JcAUQi6h01BRVSE+gQ6tG3
+            5YdZB4XLXmI0caLrald5jckJH89DwYJP8g41KRWMYo9NjI78FAJRkmD7USagNdxf
+            LRlQ1CZSngvW7pYbWQthu7hXzostd3Rn9MqqmhE=
+            =iUxu
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAiqatrSJ7nArZVXkb7i//nuPxk2GIBb3LCnAblbATbNm7
+            LVQjjwebv4td3c5ubMr0oQiA1l93rrGn2/10Gw2kpAC3zeGMdcM0kAmKe6QdVOhl
+            ZEhVzWva8YcmgWBAVQb+R0IRVjTN8Ps6wkjlN5JB4xiEnSiKzHb/Uh8fNsaJ0Iv7
+            VOhUn7tmwgcj36yQjvk6QcW8OTw1F14Bles44Urgm0F3EwkktQPR9xD2UjpFRpgl
+            ZQhaRctyDBPvVhTucFTvuzTaYuqr7YI85//B4+jA7dwXG/UIRORhvCSLMu8L3Xtq
+            dhH1ZUYqKZ6ddB9qlDGRJEcSVRRVDjzHf8AJ7LGCK/vxN4JWh9rOB9fUJ2zqFAF+
+            ciav2TGR/qo5Qrx8254EagKYDamzIeN17KaOLGezUGYTT38JqXwomcRroSNuCHew
+            6G/6n7xsWXONUFFHtb28jLHPyQj+6uRGjTIinkzIFD8YUVp2Ccs8Sdj4R7BPZlUQ
+            Fm2uZhmDxH4MjDvLtJ7++cIht+k+TUPhMZqHkyj5mhz90oZHYBomYnY31pvKzStP
+            C1yIoe+JLLvaQw8LW9/WWGC+AglBYrwnU+zDct4EL0mtnMkF4zfNbWHQrL/90g21
+            KTkDLylJJ6osAtB1kYv37/0iyAwi9nDVULfDFMjbe6bPflxni7/JfbJC26WdCbDS
+            kgHr/UyOvx8S7oPkkgBMwdPS1aWJITciJMSt+Hsz4pxZT+vR+YZ45kUpYYOG+782
+            d71smhlKbXmP25lCJW6URxPJ4ipAO/Wb2HZqDkvGxrtsWTNb2Exug4RYDMw6cCK2
+            L5NghVWZ068kJqoIdBRZfFSuCkc/mM7PSjGTyT+y0D8ner6DA/91oJIEuD3T/7sC
+            1jut
+            =pZ9f
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAA1kNzZ/1SYg9ZDpxBHqfNYOoSwfXbrncNv5mPOO16uwxT
+            +uCmCV3OHDuchQHgezpMm8ImcvqjcprRMHyOeB3jrMewDnxyPFYgheQjz3hTiHPb
+            5pA7s/W1Zew0EbqsQ+GWtwIWbdYpPRVbhRInolczerFHBp7gg4JEqUAgiYaAlzxV
+            a7BQlFOQ4R0q0IBK15L4hQhzdxJ9gQRr320K0F3cKdPpn+i1GrAUID1Jnrmz5yCK
+            6XwHnRThjZorYLPLXfrZtj4/VBSGWbdUF0B1DwQB0Y6tLn9KblNkyrSpKg3h+klB
+            h0dYii1hwdGG6ndDCb0WplGzXRvl0/s318ySbpuYyTbqj4rgCYzQdgboH5KzhYE7
+            dGNfacYDaFCBs8/dzFiGKIsscnXctTkoTGrXY5XV6DJ1qbPozRyk+4wShUsbthtJ
+            u5qPPR8oj3Yc2hhg4eeksZYc12dQgLBiOD+aCtdn8egy/nPlRlLJiQS0ipWlNWGK
+            J8IlNHgEHkfiopiWP4BH6KrzXDyEPiOU3G7rX3GGzUrYXj50vDSzTC85X+3ZohDs
+            lwzbQaoDw19OGjQ+Loy/uVNYgOw5g+nsr3KhmeF4NECi8mkLgs3NkVPJLecT1v47
+            PFIGdUykCS4LRtzocVVfxdl4jbimgpuP4nUGGqk8tzlN2iRgc8LDCRM/81SD/MPS
+            XAHF6r6Od0UL66/lhIqzrP1mtH+A5Eg2sVssw+2MoJV6r/5mmlieaLq3jISrN0UY
+            N8dOUukcHEWvFNjvoh+R/qnh7D0FbFKcGZ40fIP1oWNkwcXVEILPgRaYCBty
+            =MrBV
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/aWmXByWNmb20LH8gUxizjxYjk5NC8wf7LGGPF7+NDBFd
+            vMVUn6ybTJEOTACm1BqxkGn70oMrgFSiMsM1L8mqHQmN9WehDnuQ2rb2rIijRD53
+            iJUPJBQsAsVkQpn9StfTh8Zznd7l9ladsU7VHgjKwzdi6EK2NgZCtIcENgEdnjf9
+            tVAsSCb/IbCG3rIT7dD2tO9QWBAtd7JyflrP1DXRlnRtEBCXETCSlmYczuBSFvWb
+            ARXvyvzoWJuXFzXQpSZNylLNc8fuz5C2KO1PfjqRCOc3gaf8J9Tbc/Q3PTEcSHhr
+            WMbqug3sX4eYPRjpdMqyQSVvB3dxVLznfJawc2hQ8NJRAcdNahwu8S+Bnq1XF2CQ
+            sXNxt0ig83HT5CoeReQ6/mJ6JVK9Gr01dz02BR25OzR4jLXpsCi81e1/ulWyjL4J
+            uP5CL+mjsQS5pyOmS5krBkGV
+            =qUv2
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ//S/k0Ipr8MxFSJ0QantzbcP3VUj+QkJZJtVomKM7e049V
+            ha2nujXdLA7Y5QNYZask4W7l0OBNE8aWQLWjYEe6lxc7PRy4lph/yKXJ3PJH9B+p
+            diPDbjaHu2EqG0p+csqV7eUDjRsXAGF9/prXXUSP6iicIOLTBSwW/+3LZgbtfRsl
+            /K3UCyUgSTr4FAtuHS2wVa2GplOd6JYt/O3h8XY8cy08H5EFnLRBo71CbGRgYvSM
+            uPvEgEdc0bWRE2hNIQMIGOSGIiEOK9E9NKNDdqozu+Z0OnG9cRdnEpgMmNAH4yaC
+            Ie9qRrxOc+HI+IrpmjhWJlgKRns3kCedpFL4IsQtgGxOUJ7EeTJHi+68gPNc0PMV
+            jwOUNVRaDtsAujt1pJS8pnzhX3R3f0MRUJ2JLrsw6EZQ8dj1IMrC0UKeJOcvpFro
+            sVq+TKt3movkWrL6i3D8ujb7PnR50FBku5wxpOROjk4J80cH29amnPZC70WipjKz
+            /60gqyk6awwIqinevP/SRUQXSZaqLYgMJFUNhZ7BURbeafRwS2z52wNec+qEfxZl
+            WdvatEgvejIdRzl6d0Ed78vQX4O2LPCBMSHCz1VLRt61xvTgnT5S4Mglb5oSiDcQ
+            hXQqDmr3J3fyJyzDmUmKsedonlvQm9kGm9Qc08xNPVe1yYyd3s3D3csqO7MTZKbS
+            UQEAffU/Nq6pZxBJWAoVor3hjIeD4NuQge/3UmmAGLmjys3Ig0vvWvTmW7D8GMEv
+            7BqgmbKCWg+eCp5z1ekSEEzjbkN756RuWJLQoQiD5aKK5w==
+            =+0sR
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAArRKKQRXwoRQ5HdE2BUezkB7nenUZ6keq62Pu8qF4kEJ4
+            MrZlWr0PscyWY6GHGXtabOrmzbXlrGCDDXvP6qwBlR0/2W3uLkLMkGupfVx8wlGJ
+            Iet4RWAInEtWx6pWnuLjakGV9XbXzCDmZRQPKchwhks0jQktjJIIWnk07y2oKBAj
+            PeS2bqlqidMyBjhw/akIVMfP1rPNfor8XP+/2tygiQk5NrCTG2kSCkEaiCCDNrA5
+            u6E0lwtREYrvzaxxGCBWaDszxbRUn8ig1RglElCDgG+Hkco5jV8/Rqv09FdZYAki
+            xWZcsYE6fXHlsm4UEdzKuwiea7bAMYU+0L00so/IeU0zotmYaQqtKnS1YfUE7IVl
+            AUkVg8WB6AM/rDG0SsqGPzL1n/j+jlOytFnYTWFjlFhD+ex9W6VYEVe10xg+FVIH
+            DEn6gY+9j8vGnqsybgEYo91xToVlBgyVTkgY5UuPLzfyxgIWuA1tPLV/3owAkMx2
+            HiOMOXNhZ2ouvmgCfzzB/VM37lgaAooNs4cOSxgBhG9lSuPT4/J1IU0Tr7A5KaJK
+            cUs1uAWYKxaRLq6golK/6lq4nwYooyrDxt2Iuh191iOdEO0+3ny3rjBISukxr3F4
+            /l25T2YZw7fpW15wlUJOVAiwM5iDkd9jFhkdXh8r5uf7HSyrxzQBGUhWaEZuVbLS
+            XAGyJnbR44ghnrRAGaXU9n7Z12M/4P2EYKHQCtYgIIXw/4vXFamxzcGMaIbnTy73
+            PV6wC/P3Tuyy0s+vKKQiHbxw3hAJhYc90n27rvst3v+PkuFfsIl/082dLXFA
+            =9Q+A
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T22:07:00Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/7BtP9J4wt5AibAZxSfB9HH/HWZ1tfken+TOufxslEMvMz
+            NCkNTbS3A/AqzFJazIfkJPyu6jWx/eVG8d6xclQnZNpzOVbUjQdgkwEJpq2gb/FU
+            eN2HEckYR4fj2psonHJz+YSM045jdeRX1TBG0y+9EAvZjHiNjdKWewYUsSRFR9DT
+            OlneCihUCYTFXEbLACQg6VzBwswNnmyOKxhc09hsVdtZq/ABTVhu0KtwSDgl9zcO
+            7zDokKl7dr4dCQFa+uNPSVQpgIYHxGUuHqM5VOfxYGGPAA67cUArnMa0f/8b3fcX
+            B0NTK3z9inL3cYu6xkGkgaPHx5NcEXyD3lG4LEylhL12VI1SLam54ArJXxjyzgUh
+            ZX8GjCa2dLGGW62kRdtHESnWoHvznJsYTvlO2vpWmMo7E/4pk9EXFNp9Xbdtw+3n
+            oobSjkTl3rtx3lzNgfWpn5VZw6TJSD4umlWypi+1OQe4T7KXWmMCYqM9W5yrdQzR
+            x1XeBkke/dHIs8hXSNcm4aPiGg6NU0ahR5d1WR5NwSPKDfHvlL5r33VKPLESaOJ2
+            b0MQnryIeRNo9xvjvNSVPiBDI+o76WzH9fZxNQo78L0tbu0+lDNelf44NrmRxgLO
+            +5NyJMbub3pEzWCaNtSwQW7vxZY2c5ddojZgbb75+pSwj1rQpbTFFQwjzmWRt4zS
+            UQGwvsCH3sg///YRoRVs/mKatZIuYRuPUlG94kASzKWYVi3+2X0DSsrX3EqNmEsR
+            ZC+BUKM/CJiXJcnzGTIBQ2VfOOWKEPkHdOLhdDAE475X5Q==
+            =0jHj
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/caveman/default.nix

@@ -27,7 +27,7 @@
     hunter = {
       enable = true;
       settings = {
-        max_workers = 128;
+        max_workers = 384;
         hosts = with builtins;
           filter isString (
             split "\n" (

hosts/dacbert/default.nix

@@ -172,8 +172,6 @@ in
     ];
   };
 
-  programs.tmux.enable = true;
-
   security.sudo = {
     enable = true;
     wheelNeedsPassword = false;

hosts/dacbert/secrets.yaml

@@ -9,173 +9,195 @@ sops:
         - recipient: age1hg0mmua5y82ct7l6q9gpc8w940ce5seqcjhm4dgx7tlzvflznyas7v3hf4
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQ1l6MkNscFl3b0FReENC
-            cFozbUE4clBFSXlmSEtKaWFLV0I1aVFNVUg0ClhTTld1TkxsSWxWcDV1T2F6M0Ex
-            cHNGZnprMlljc1dBcG1iWEs5WTZGaFEKLS0tIHNrVk5uTDRwUlVkSVZxT0txUmxO
-            L0pDVlhTa0QyRWc5MHQ0dEJBOE1DMlkKXT0txgyo3DPYni8QKoZQqcmZckrKOehx
-            UJcHM6O7gwJ1cglkByFcAwhmMB+cPerUqsxoLt7RplILr2bET2gyyg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5UUg5eHY2RWxScEJiN2RQ
+            c1M1MTFtajhHenlWNWlTcEN4bFZzeWFOSFNnCmlWamd4cTUxTElHZlZUNEkvSHpq
+            S3JHNW1SYkFXUjJiMWFtQmE4OHBKWHMKLS0tIEVGa0t2bG1DZWJmOWRXZVBoYW81
+            QlJ0VHJ5M2NQaVhtVEhsQlY1SFZTWncK0b7MQxSVLpnCyRn1CTEMZetjzWLprvcg
+            oCiXlCOcr0+WYAwowoj5T9TPgQdmUMkrD+UAZEI4FMbntt3exwdB8w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1OTFkbXNxWEYzZVZ0ZDlS
-            ak1VYlBzaThma3ZjaGVwZlNuaThXTHJFL2xjCkRMREdKdG9CTUNDZUZDY213cndI
-            ZVFBdEVVbDdwVUdyYzE0d3JVcHB0RnMKLS0tIFFvbVhsR1VKbWhQTzJsUXIzRzNI
-            K3I1KzNqT2RqL2I4alkrVGlBUWJjQjQKE8Icz22zUmZRlPLGBSVYK2O98jWTtsO2
-            sgEx3ZDqJi47bCqUKMhPz55TpIKsCx/bAAQ+qfV8g7DaoSz9UMk+/w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGYTdSeGdnQzB5TzRwNElG
+            dXZXK0JCVU9UcTI0ZnVXVE9odjJTa2haK1FVCnJ0MUxmVzU2U0dtMk44Z2pyK1U1
+            MWs1ajZmOHN4L1kwOEZOVHBWWlpuV0UKLS0tIERWZ0JtQWJTZDRRc0tFSWtJZGNS
+            Z01sOGlaTDFQamh2Zmo2c3ltcEpKc28KMNlbvL0Gfx7mQRSApy6jdjVxDaYtywZu
+            7r3zSB22jfSBrtK16TKvYfWweAstBpOksT36iRpC5nhXOWaMT75zHA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-04T21:39:27Z"
     mac: ENC[AES256_GCM,data:PQtTAEXBgp6MuPl5+6SE/zaOuYGvDRpl0w9XYgUJJHhDqiIEQfcAYIUEKv+Dvtxj94TQZ3v2kjT4Y3FF0ROYIcN8H1K1PtVXRLu+vptr2+wZ1Mahg6K4Ukk1s0eiBB3vsGrMONqaky5Jqy4My3+0NMnBuIvlqErpoUT3Gin37do=,iv:RUTAvD/hczbaX7w7ROPQZNII3kTRnEBG6aMMkTHuV/M=,tag:XLgfZnnDM1ffv6uBLYJXmg==,type:str]
     pgp:
-        - created_at: "2022-12-04T21:39:01Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7ARAAvea1x4I5nwUVUI5DHoflHivlVRauxetPBZoLIyfNklX3
-            oO2euRsEC66ZtuqDzSSoHpUM5NIdDPPgNf0sw6YJnbRH8F88ghNE87NXyevlvGnA
-            8IFOokn7ASjPk2DYLlh8xtZ+T7ZgAhIgv0lnZLa36n5h0tSL4t0OdGAnwWa9j9Mj
-            2gWGKymunpXMjRqEj/PGEuXEDRCdwpvmwi+8YKrh4D9dB67tepAA28MofSfJ5295
-            Sfyer+Hh41zPgYI2WeBRTS9Rn8Ea98Y5eWQsXIivG7+CnKl+uu53nzZevRJDk5NS
-            0qRsyIxeJvmX0fqLgHD1jZJ/UGeUoiRNNkifN9DVIikDj8coAyVCb3ebbQWs63nn
-            NL26fuONgZtfqF6DuIoFpGS+klQscWdmYQ729EIEvxzBo8jeSPnwf2ySyt8gA0J4
-            Y5lxnwoPl4b6nT4TAHSQ65HWxq2y2+KUT4oE3PrN883N5702Qlr6MxN3tFJ/V98x
-            7OyA9UjgkkHuFl7EnumkUOix3BqnBk5za4ABhWvYfBtm0nVVAnesEcjsIeT4ihJx
-            5lhi/CiNPth+PhsIDaqA2QVU2sjswgmOK3KbQcpktAROFoXTDayr2t4QNZUTmbWF
-            vwHxNIZ1CndzaPgl5WI4QJDerWErEPKVxf65HxrLtWft4MyhfevSfH63C0TO4YDS
-            UQHKQhF01t0ZXKPLnQDGAwZijyA7GD493Sr6pFMzenSipvwybvNEnfDOZuc7AU9b
-            4oXevCzGjpaub33hqorp1bcygwgl0aA1H3YvleyHBg5Mgw==
-            =sPOS
+            hQIMA6j84+xkv3y7AQ//fFi2Cr/hdyzff2/c6xEsMjAAa7mT1r7rgaoXSfikn+fQ
+            qNjsNeIf1o4CkTM14OPtwOo+qH3QVkdTHV7YUjQSXntxVarLYuKmK4QVaj32FUr+
+            9fvfy+bkxjSzB97x+V8os3HCu7b12+jsisupf788pLCW5ESZeHL62jPTdc5FYuGJ
+            593qxH82DhEEn720dKU7TZsDR/u1Zii++3rwFoVHsH1bqYKRFwz8PAoge7XN1iik
+            q6e22AtAruy2/Hb5MNRBx8rWJ4z8p4A0pBHzknosrFP8tQu0eKB4MOtUSy5kBsmB
+            uLt6fTdy35amVGLKQsM3YgoWbbu1np9XG91Yi7l/H6bQoMJmBcL921Q1HaJ9/dRi
+            NGlO45NnX4LAT5RUs2EvTv9FGuvj/47PDCjKStTIP/JubRYDVjnIGWkm8D71/YAK
+            oSsC3l8i8ZyVehPS4YBwKLnjxA/Yorb9mfJYalmm7NkNHZMA5bpSP+J/WsROk4op
+            W3J+Eo4UF64qDsRvEJc7kO4VkCANrh8wBLZCse7ApZ7Jz0thZj02y7b/SDBm2AUH
+            Zo02MLIrkMbB8lFmsCouSyRfMXkRatPzZr6daWOc4jSAZSaWY584US+V+KW5j875
+            3ZK2Uh6wKaRu9o6qcjWzrUv/1VRbu07f2EqZC45ZhJy/aB2cflPtZZb6X4Wh6u7S
+            XAFWYUq2HRt0P5xYyZ3IYh9F7X+9iUOL2UEo/jL465pW9OZPreflwGqlslTgqhHk
+            yi7hWqzmnPL9qvN+8inH64q9hxMlwgvgUVZ2fn0Lr6zFAyBpv6ggzWVyGz5r
+            =jX8X
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-12-04T21:39:01Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zARAAuhnyVNytAgqL03jN9rXwwHuqgaqQ4SdjM7kTLe4WVCXJ
-            PwLtPoNNjlFqRKufXPQQuOBx2FMJl1yUQsI4P7OiWGak6/0f41U0bLFczTTGRgTh
-            vmEHwRtRGQAsWi5g+KqP0zAoiZNiBdk7s4THcA24tBBGViRtLS+swhV2SRvTT0NA
-            pLsOB/GpA94kEjfHhZ1RunKBMIxDKYaQvXUFlEPSkv/Q6ek8Tc3wgPMUp5wiN+cz
-            q628/KNM78nWCEyV0rQ3YAccnC6h1Wb6cHCOKE6jJJTfwm503tzZv1klQUkKrP0j
-            BvgFGIdn76XTER47A3sPweDbnHV8Z0qxnJ4z6YGN5zYW4HVAOWCSvI1OvM1q9oIj
-            SiwXVUIuhhGj1kb3LPstSWJvPmJR0bgmO4xSMYpB2d71iRTL7S82p9aWk3/Zzcr7
-            DNYWFxs0r7s0L0xJCDma0fM6krGof/ZcCdo1eRgSJZWbPrGL8ips++9/Fm0/xgzf
-            A8CxWpnWRE6S3dBRQZNfHOn9OyHJGKNVR85mF/gPI14viYmr9iJ4gqDzLcZF27V6
-            uasJrcnaKkSL8fBah4UiT3lRfNqX24HXZnDMhTHwJD1RQHn4qvmE+FiB4m8SEYS0
-            TCLTCxuWZV0p9MtzQbNyadmpCxb5JL2EugKaal2pW2cxhMuUryV8axj7QhD2UJ/S
-            UQE421UkjynmGgjRa8jYiS4sFYlrbNsHLAtRlinRyNya2je8vyOZNekQl59sVYA3
-            mb7bgu0XN1Y3cZtKAxughzSpkLjSGCR9GebNawKdUUcsPg==
-            =VokK
+            hQIMA8zMZ+ak7y/zAQ/9EaViJhCJ7xkwQ5Gcd/H91WZMiIJfUpAAAkHJNxUs0rIs
+            Jv+XfwkgjD9fbV5YNJAPx4Vovx3vp0ilj1bN/P29RxcmiVX4WbPMLopQmlYIUpEX
+            QCUYdvKX8nZhNiG9uJbW1Q0LpSCYXnlbO2AcsQ7YCujvUlYtdYass2mcOn2k6+/3
+            y0WSP7M6BLfQabfeto0kNVkTSbv+y3Mtqag6dl5K+aCiej+ogpLCeo1JYCD+DUBx
+            ZXuw306qC0AMyx4UD+viTbDmKiPFnHqx7yhMQDneHWttW16wZezSH0hhGy/sxRPo
+            eVw5+flKZwTYV5ZY+EXdfHzq2CV6vPk+5IdILyCDGgfvjTfEhpWS1FbLhgDR1bJY
+            3Nfr+IFDbjSLgl4ZV+Z/0VtwXNQ70OtrOcNsB/opzsFRa83BO3Tx+ZeCL/3uizSQ
+            aQxY9Kn9hli+jqI6EqkFnrkORlzZebdhYhdM2H7AqY3NvnFFHIgjomUWUO4/PQmx
+            W7xXWheAiGM0dAhX2L9mWFqwBvaY5Q+dp1oFqVvbf8pdrVnAcOUxnCzARTDD9YEv
+            gCnJSRKhgiN9B1pKqMhJNdzQqGX8nxesxgxWitRUaJonD/sDnFClyw/mb4Q5UAcj
+            s/DXge8g9DihaNyMcFFL5MD+yljlN9yttnQbClWNfbQH1LjRHNNQ05AGu4rf71TS
+            XAG93y+jZ1QN5clKtbcKMTdwGPEHgBzxvUI8mcPVqLYBjHmzd7319r2YpoGcOFyN
+            ng+bfd4hIy77MD7oQFC9h5pqWQErbtlM6L1oTq8t/xHgpnU1pdRgZeQ/SFSv
+            =4K6J
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-12-04T21:39:01Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQf/XjbniHgbytyURYZ3qFCzijhLi7e99Q2jdsOQTQG4sOoE
-            jpPlOP4yU6lGjnYfQVYqH7CgyquqGrSB3M4ZHxUR2916xveG8vjWDUhURGWAUXwk
-            ho5dGm+HZGMJdETCmmCTALqxlrv/TgrUiUfSn1C9MKloR4PxYDFqupk9Bl5RyvQT
-            xdcIzVM6/7+xCasBErKoIQ3YoPKlxNWkr73S4Y/jhEVVaxEZWHoyCtK7SRDA4GOi
-            nIO2TMQ/eCbnrHbftwUsZNkeP1bee3+U7wiPOXOozftLrA2FYuT+SmCOK1/xaqHT
-            n4WwcPamFNqWqWMGyVNQd/rR0/Ry+hDYbY4jzm2+vtJRAXNtZLLw5BmnAbpZ0PY5
-            eBUYkDMJ81ua+I9fJIzg0WtbLTBWeIo50v6SrrUuCXdBbtvtsvMBPHuGDdwoqM61
-            kJoAZV8D9JDznjOnn0wUlFtF
-            =55R4
+            hQEMA45bZkLXmBFpAQf/XEukZIfTqNtAeOZrJWjZb4xolcbJD1cNLfnrg0hm2Vbt
+            1NF1x0v/s4d8fMB+qImPGpu+0F7gVxyvTI6K48+uQaN8LzJlTWVoy6hxROORPtH6
+            SR0X3gKiXJryZn+I/CnAG9VWOug0uyUGsFiX0srfy4lBqDeRN2dUkSHnD3TVofw2
+            HbwXQphaxo2/5N/1GymwD0BFI4P11hMlVLEbS4SeQq4+A2NvaD5fcaMBkc0BEEsU
+            PWV9Qvfl+pJU2CMcIcAIKPBxB2sfHW/1H0p74FBmoT2ydqf3Sm/ZJuRZ5VkrvdTC
+            GJWMEPBPYgSA0PnNTrqNSU4nTytaTUkIWfvt2gopK9JcAVugZv/GNNtYRkQPIwaa
+            vsF/ZdoOqT5EhFn3LB4cev/dXCIDHoAuZvwxyRbJ4ALypQ5euVI9hex2gB4bLhwd
+            gl5cHhNjZrQK7NoxZqaUFRalwY2SH8YoO+kF9Hg=
+            =LxDp
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-12-04T21:39:01Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6AQ/+Ksp81JefhSw9XHfgtutZRbx/yhPi+OX2mMDNPjPpNykT
-            zSMVuZWA2Io/RxmVCOrEcJi1hHGZ989tZS8vPWyB+ddnnCx1h78PabJh0d/jqUN3
-            XTKli26QtGKvMPioVg89NQjD0pTqoHc6tTXdOP1XSS7R6lZCxz4hTn39jPwrhSgA
-            z5GocHUfTWoSYoG5GV8jsKrWNUqd6HwoKlucTku64SvquJQ8Ld+VeiwAbcxXtPAa
-            QuQ3cXkerYen5l86Hp8NkyqOub+DW5fgPfC5LqBdEhjp3tH0HUHsK9CWHv+3tQ+l
-            fDpmGt3RVQ5X5NJM1QKJeVkX33HI3ntqnhThnVbC6R1FBASaabQzyekdHpu1JWxM
-            YP5gh04+VZm0qdoPMgPin1aSKvNBCzyQqNK4f7/iwz/beX5V3wnq7G2hsfDQCzBt
-            W0y0bv7q0ToWlXmj/A2dytxHb0bWIRsbXU2p2Szl/ccoLDZYH5Mz/ZKrKH5xtD9Z
-            z4hq6p8WO2dAe2dkN48Bd8xbddNUs0Xem73T9FoHNKIcWMP/CA7Ir7p0agnYs7id
-            Dni/BB5bm6XIwqpwOPG2TqNl051MSVDLXB1ia88Z5WvRL+EYdm4o0xGzL1fPPxWX
-            S85Y0pe8QGxd8qikPHlHmFc0TLB05yN3LT17+CC1T3zjlNff0uMdFgiioLJHwz7S
-            UQGMPRKXvg1RZiU1GUfaXG/PFH/KAouKx+m97iCRzg2SNULNakq0tvWIV4Fp19yn
-            DpQs+g2eq7KYwW/udKzDpGOM2/IDY/s07YCipn48XEfaDw==
-            =7TJ4
+            hQIMAwMCBBrc/JA6AQ/+OKZKcxAcYVxVdessn+jIETava9fOvYyFGEJsNQ+/qF74
+            +z/m1fTMhjCkc7P+Av2yc43ziNASryRZExHPF0dHymw+cdVINsiogsl+aoFHkifW
+            0N/qJ0g3Jha3rGUrTUwL3NzXhjIbZkz3RjOSWJVuL6UXGkPiblOx0JQ6zsFuP0n+
+            3ZDUrhBnPgkFZe6wdwvLJ0iayxfT1IdvAA1DDZk586lI8C8bGiUJi1NlOvVhN9fX
+            LAZca4UTYE5ucfU/DfflbNTOUp5btoWJRUCvjj6745ZdQ8Ld3+4fHe1HW4ZUvDAG
+            FsKPzOxlvl6Sc9wPnJlsrUAe4gAgB3utJWIoHCXxxKjRs5We0+ky1ky98z/cOhUQ
+            +fri4rI2Lsno7cxhxPDKhIQU/wN0o5NnJ05kQYvyjPJU3Md7c7m+sKms1rLGf066
+            xQYpc8BAngb5dOjFpUAR/sqwCjY16MsoGkjx1/cE/IjIGe1GD7hHZcG6faHW4101
+            mei7HHrrqwnU2QdatvCXGx0yJ/BLQFqvLAndjPYP4NodwK3th7gv6s2WvQKlTEF2
+            oVAkc5eM9gJmehXcrPTyFIUM15SXms8Fq7BB1s6Sbe8FkwSQnKmsdMw4pqODwl5Q
+            CBSKGiSctC/j0KF3S/0O5Uifh51FbtSpzdspYsq6T6640psshGFVADd+EjhPsTPS
+            mQHUlX2sv9/Z03o0zJ7q5u0zZbpDytbK8yssNVdI2rkI1YlFMPAnTiraUDisMMIx
+            m+Hu5zfTxyjqo3SaPNXcCLLBqC8AOnOTkm1qrUu95a7LlJ+HINuYGYlIRsglNbkm
+            OD7XB20aDEj8H+8r71UG0sukvA5mxSF+U+wnRqIGCTZXgMdh8h1ckT2Tq1kuqyzl
+            z+7vhctky5zDKw==
+            =00zs
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-12-04T21:39:01Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHARAAkzr6nZaSnq88e+JHXvkKGBqxduAfWFlGvXYrp/2e1tyy
-            BCpiMCXrzoend43/Kz5pTCjV3KvcYOl22OYJMi2mYObsJKoi1ftInL5mc6NPMU/O
-            ixJncQ8NBa3lv3HGO1j9xETLLTt3220gUc4CKo65YkaIsJYumw2oCAbFhCdZy17g
-            qlzjFRy8VfWad48nAezymnfGFdTWKThxGzvOJLo5Jm98UIt2lC5T7vZjEwQSsjra
-            EnF/I6sAeT9kEVg17m2CEFK5LVb/4GtSr/rXFUDbihO3OVYRbdGk/7y4lo55pRi2
-            daZcwUFCqdj83QUUYimYpXQWhgyBSgIWCK7vb6Sr0rO7j0poqncpm3gX3dlIzmDk
-            bK8N+Heb7u7kZ24+p96jabgEBphLgPepE2fMoXFpnZ2P2e8QgiA8b/5Rqq2KomYD
-            4hbqUmSTpG1j+77+l5LMkbg/ugzRd3VviJO5dKsNvaUsKz7e5NNRV3mvtgaakP1s
-            ygQ3DBnJibKiR2QR6pJRvLAlNTy/bguKCZI8DCMO7SWlRuatBujV3htlG2AgzrKp
-            KLRSU4HuoyZXiOsqNA4tVH4ZklzXzhNAELt30+yYNJbS8evcd3ZZZnfsaZmr3jWE
-            jK2vXo+FUkbJHQrCLCHymURH+TijvvOgCYSYTmzvn7R+4Esfs+abrWugoXLwoznS
-            UQGIyCN+1XfmWTkHiiygdNWRb4HdB8OTTe75rsPnTJSmKbYhafE/Iqhf9rDEPNUk
-            e5l1I1sgwYq/bR2FKd1iWAfZlqa39dOi/C/tBD2KnuISOA==
-            =Ut63
+            hQIMA9XEenRNYVGHAQ//bv7SFa/EnW392upA8A02ariMzGF73e9TFaZdulvdmG2I
+            aEwIyoAixeL7uDhBhtbQ5zvfWVVBlB6d3a+WaRbMR23JWeJmU3QK1Zbu4rSo8Mdn
+            xBPCgn7sZMAUDOYAg8O3oHxiKX83amUIne25Oa+sPsyeWiNi7+XCr5l48XiRDugj
+            9asH9jDHovjxQT30BWTnza8Z5/87JENTP6lXSLunFXmKt8xLsLj2FvSTuxFi+OrN
+            lDeA2zwBNJg1zI3ifAzzpZjoeFYjWczQJlXGgkbCbNTupQCBaF/it0uHNyukGa3Q
+            f0iTCi2vg2mAIEBxqO6u8iK0CsFvhfUy6Tzr4fDHiGDNyItQKHNvg5gE4jGej5wD
+            3qP3Rb2dqvAp/L+6g9ovWzQxM3+0QKeLD4hmTwYvu7uN8UYeeAQ4zoC9uC4D3cWe
+            vr1iQS0kLpUfz3WHSeLJlmR6zipRHXExFk1B24uDiAGLdA5csjUvDwbtj6TAYVQa
+            gEzpZfs1JaPzrkwXEUdylkgnxhf6rLQDp4HoglbJ72jzfJRYoRT5Lmb2rloEm/b/
+            FdINau+CIwLhmK2VmtDUE80LEN2jIbdXWR9mFAPjslTAIq8Ht7ZMK5j6a8KtsEf4
+            xzvnlVGc002ZhzBz4b4oLeTJYbR3gAefPCpD8W1ITw7YhgkrdtAFxbj1r841d3zS
+            XAH6T6NTbs9N5X/SjIXmyJv1Sdb6ul9npXo17zSPxsWrhlsZdpHpMqxR5TY/sIrn
+            PP0vPrIjiR6/kQWyrkL2ULSyAxq7f8+KwWeHlxlbVm6rQRDxA+I4gHOMRT+v
+            =D7sp
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-12-04T21:39:01Z"
+        - created_at: "2022-12-26T19:09:37Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf9GF9yX0w0OwL251Ex76j3k3MF1Q0qOfgjsDBY3Ow56VO+
-            KhJ0Ugn0beKoYZrVn2ezvJZaNa7YAPry/oomul/Kvv3rTZDh2bs4lBu8qrjznj+m
-            bdX+dtKr3znJkkqqQkA+DF8bQ9DoZxDDz7FNQSuZocn+TpMn253cl0vBi7gyxxpb
-            Rfch55vZrhpGU2+QfH9euqSv8k3fOMbMEwVHL82uGybxN7a2fe/BtRwuyeSRjyGl
-            q1L4FrF1w1aUDp4M7bK+3eo2WpqCH9UxgLu74DW6SdVM3MV0B/IUXRU1rEqV4vja
-            bLMxnJ6xsByKsOVUP2ivalTnLyrtZPOcJ1wDe2SCKdJRAaegKPecQEqIuGuWBlng
-            t/W+RD/P0CqtDvly/2ALLZtAmyvXloCOtrMWkz/bnGpoqOlNL609FkY05RY3Quvm
-            C2OTSTvQ//MP7BPV99syTVTo
-            =xgMp
+            wcBMA/Z87ylQaotQAQf+Oa6mOO0PYxyCxB4upa7K6JHk1ExUfBXqyG8TJpZBPdGL
+            kbsuOthDU4z1g7IE80RBoaPfWS66lHj1zHXchbGjR3BLhzTwhpArmMX/jcpaJ713
+            ahWbAxqlRcgEZFAg0EC/MgtbmvHoOduitbtVMl2DZTMR7haIShqbUkxpgEOSVTwU
+            JhVq9I6pvuT+zS9Ess0eiywKXg9+PcnBzeLVtIULEAXcRr3vTs+1pMxXB8m7xSir
+            qoA07MPMq+m9tMg6WIEsB9bM+Srn0O0gCFELtm7mquf1WUsz0J2dcOYlSvOOaZ9j
+            Vn4NtMrTS9jfNcu60kh7O/lN/VbS6MsplBihBi2KRNJRAcoV6X0NPDFRBLELIbjq
+            z9bvbSEuuodLXMi3UrEza08UbuVvPlpar+wh3queWY2PJFwSFukg5OhkxiUasQQu
+            GemIE1QCidoW5O9mdPbZ9VnN
+            =aZFL
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-12-04T21:39:01Z"
+        - created_at: "2022-12-26T19:09:37Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//c9HmDg63M7yWpeVOx7Eha/QVzPtXyJ7/G9dJrGltLbUj
-            B8xn/BeDT+ARVDRFnGJS053RxHJz5WqCIdcEQTZlD4GHp3Ez7vtXPEUJNymTmug7
-            VrCX4GhNjKdb55SlTkoeAbxdlUfyPUIhaLcdQ8pzHqyurcpRs8ZuYoSENbNoAbYY
-            NZbNJZoKJTc2vmI2zrO1HtVNc8HZYtnN5dawvlCn66Q3lhNLZ1wR4AFmmKvKgKIR
-            XFAjbsoEUDlYNBDw+yv8jkB179+wa6pLAhIaJ8NM2asimUz7GWxDumgesNbacTR0
-            ZJXrQWyuHruQ1FbZdVJ3+Ko2S2JnAiN7Ezmauqo3IQGt++ZXNOC5dl/FusY25TQ9
-            lpAW+klKkIqMfIZU0WsWWufhgv6cI8HqPY9z5TalSrGB5zyJeW2bnU2/ZAr5yNH8
-            /rOJVVF/1c4xkEqE0/Coy2ZqbE1IOTq5aiqaMuZIToSn+ftvg2KIxkdEvQ8gVigU
-            uZfnZ4HN0FQqJ2/9BHHFlhW8CdWdffTk8m2GEdfyjH+WIPCoRyvbf7RWAad8NFni
-            RHTf8+Uee5R2hth82UO0wSlMrLrQwdS7ju6ctpag1gm2YxEHRZBs6hnD8Ade//xR
-            RFkmcW5BICAPbBmJM4o1HSUjYqGhk46xU7y3UVNs4R144DtqEAMwjWE7U/IsvRTS
-            UQF2/UFLDd/LgVHt1uVhpzuWl5ot97FU6HIPSYrlkOPAzI49VQ0H+tLlywMbgjcD
-            0HoNDhCDgzTzp2/loq3wECS93QAx6L9+zHpUz+2db9LBFw==
-            =356k
+            wcFMA9qJIVK2WMV7ARAAjR/PGcbCmzQsfkDTB/jtihveLfXEFvPdHXd+YWzAv+7t
+            5CYlZAUwuIadLByrzI0Nc980qk13p9V1IDEJ4wrKMYnbdbeq1OqsbwRmtwlb/GLL
+            6xzaNDMCeNh9tPsRNawpRpNI8oqprnzTjw81hNiKQYtU8aqXFaiJ1l5EYznYWBSj
+            ncduK8zHw2pjLE0Qj4kVaqGLHXqZcOm01U+qpioBOZQB65HhMw6rm7mX/9u+1hOQ
+            tq5+ygFK7bNtxU8dchgw+4fDq634g/AWcE4VWosKEYa51RbO3iIKREE3mCxhiGwB
+            +lYXELoedqemHEjW+UelLzPLuuhMJybjqoAVE8q79X/UpNZaB1DgrOppXr8/4Vzj
+            z/o70PkfJsbFXJOlPP+th/kk1ffeEfLuLKHNK87JymXxbblMHwt10risDcSpoURq
+            R5aphMYJkX711aWqfnRcndwO4QEHQwZVZMBIPHwru1Iwl36C/uMXOooRv5D+xLnI
+            Zav0t7+lVLWVNASSupOORWH9964ysh4tfx/igLD1JDckXSx+xpJEwac14BiUnnkX
+            dWZquxyL5FqdOmskIoXP/CpI82oEwdV8R9TNhZyY8/Ie2WHBhBOgDBFBS9laLh38
+            ubFYBni3ide0g40JKYMIctQlHB7+FM6DQiR7JsDmNZaM6nWAtuCY1pM2fpWbih3S
+            UQG+b8M/wwLnzAbR9iJFx/lvz933XI50SyiMgWxaCJVHnCykB1DrSNOQ4cngwxET
+            wrc9SjnI/XY0NhnwEAi3YFZBYhonEExTuEcrOCGa3yO56Q==
+            =D/O2
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-12-04T21:39:01Z"
+        - created_at: "2022-12-26T19:09:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/9G3JKO/g+lybkmIN5ITNketTTKYeSv4m+l24zNp1+/56w
+            /sjqdHHsaP1uyzIkx5ACuoVr7vQgi9RsUUM5eorPwpVtUKP9ZxygcEW3QHuNqGEz
+            I1pC4wT9YB6ofzOEaZhxwWRBB13wPV04sdxQOOCYJwswcanQQKcJ4DPaIcztBf0X
+            GGO3S3fNlG9FgsYXF0W/F0yTxmbGs43KUU5XjQox+LBDzYkKulpibq/Dmcgo4VUC
+            Nbsxj4VmsY5ebwj2aP3p9wZzaNZ+C+PNdLkK/yjp9biER7tFvA9QP7hRVKv1MHTh
+            C1i9ALjFL6gOn4/DlVC+WHZs3FrwsZb5jcHVVWnLOhf7cT9ZkOT4JUhW9DpnFoYs
+            vLM2mNpYfRQbeRU8FJ+3TIw8xed0QTr4x/+XGXTXozij865+7a2RfzZDsLbu+JOS
+            dMDT35dGkRJYF0IJrDInmjCT2h7j/PySIzEf72VeeQWTVLso/norqEF69uXWZkzu
+            hpuT4TgmfJ/JVNL0mPVKVkNiGhIN5dIeuizohDpdHle531yrE2C/T5lTi7UBILjD
+            glwtZnsrx+rzqMXV/h85D/tscfMV6E98IWBKw0JUse8SchLa2LGhB9/woPpmxuYD
+            p2j+NPB8QEGQQXEZwPwxuAO/2J8sfBaIj+z/jAykoplJkmskk87mM2/D0J5izxPS
+            XAE/12tNAyRolrNyvtnaHskFkUVgWLT0TRn9d1zZq7aUgovCdYCV6FVfwnWTDeKb
+            UfpiJW8fJo0/WJMWB1BM4l9Af1WzRPdmZxn4G33rVhEGCwZfMpN9hc3YZNwO
+            =Wd/c
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:37Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJAQ/8CFz+BjJA03Sgq6TeYzycAjdSFi3mTZ50L/sGvj2B5WBQ
-            WnVwA7tWSSQGmt91XZwSNgf7PTCgm3v6zMTHnYN5WMwk9vaDL/WIGbqD1LZw4zgK
-            fD+Lm/Yc/0vPrEahL9irCb9jrolWGagdPzQYqRLReD1aB5NnYp96FuELm6RF2YC9
-            AU6ZxrtrQkEZ61SsAP9ODTruRmCtmtpbJYweN1CmkatMj8yIu4I/Y939T5lx8V8F
-            ZgT89f/p795/2uFWJ4HpZk0Rkq78RJCO8HytKEw1CVS55P49PnjKKxqzyESZCaVU
-            bLI5MKUQowBSmgoHZWd+B4DO/7+4sgu30A4CuldZR2SZOqW+FwdEAuwdK8HrG9G8
-            d0gzujb4Iq7PtqbAMErr7h73hTXdBeFrUG8z5mgWmeEhP9o0Zlx/oXGpi2JOJYBb
-            VySPDLQxWBV65XpM0Qb8zxsKYAIrouy8YmbbrbNX8nzG/KLgUaNJcj3PYp3WI/cs
-            4MkBc2nh4s6OLGJ7YP5AoCayPSuFwsJ/+WZ+neQ6X1gkgSFtYmb/LoTSU4w35xPi
-            rbDwqxf2Lg1MbPP+hhW/Y0fZKVWUcLs9x4EbhS5LlmlKC66mRXgATKozLpivjDOa
-            kTTIwptGeo02NTIeEegP24AmMvXnvvFzUBZmN57ztCuj/Sckc7ICTMrFV8vo2fXS
-            UQHWb0zzNY1kk5Ui+kL2exUHdIdGDD8lc2Cpz40Fo6emfIGVlNgCCDK/upnu/Ims
-            GE35n8h33MapqihsFQpXJ2lNkzuckV/yIRUfRXTkP4miXw==
-            =RITE
+            wcFMA7zUOKwzpAE7AQ/+Iu13hGt8Wua/YJGNQ40KXeOXMrDLr2qSQRgB2vRGMH3y
+            TYTaQ1xvLedOCRDTLkiyiNTLnz++d0aJNbs+8tZOsR3cmqXXl66ni/1PaE8faqhz
+            5FDK6zJGp76ABaRMZ4Y8yFTapiyS4uE71IAej1Dka+2sfnkaDbHSBnddNUuGdtEZ
+            10Uvpd3hXcN5iT5rAoQg1KWrLmSfknVh83d1SqkQ1yJnrJvfcFbT8HN9ubjACf76
+            JmUcNyvet/bz2ZDeFNILyHoCQlUQhQuBL9LjxrfixsL+CDec6VuTrxm/GqB0idF8
+            4gJFSBapWocUJ7FEwA5vyQbfgs36szbBe9zTDMHLoQAfoUlSix6iPRHotyV5pQrS
+            zWQf717PoPFhmAu4knIKiH5WL6qijO5uUi34A2r9YG1h/OqSayr6NOT8c2x/IhNK
+            fWM+KTUclvxwimxABWhsX211IIkzG3y1Fu9tZCj/rK+VR3rKLnRY5N+BQ3g6JQYw
+            iPdzGf95HxMD2sixrCJlMgHL8Ti0TPeQTuFscDQoqX/7xNh1WH8Zzs2CXfOx+zmR
+            ia7wd1bBxXNGl9NjbsIdOash2qv+bzfPBq5MwxpmwjFWzcdLGQ5Xsh9gUps+/D3y
+            8JnwRNtJvYOSrKLlvV0ffNBUqtLMRvDpGyNYdqeLAJ61CBsYjPI7oL2MtYyycCvS
+            UQET3yqhS5OkGYPNImoyZt6vkgHdfjJhIe07Vv6lT/zTWj7FPMabW+0dtaYLofTE
+            7tArDF4FxuXkAiaAfkxzlwTmfB4YE15IxQNJWDjqNllcEw==
+            =pMiN
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/dn42/secrets.yaml

@@ -38,175 +38,195 @@ sops:
         - recipient: age1726t33dl7pv3xrxxlafj2sexh7c0jm8pza84yu6l3wpz3fw5dauqxlass3
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGMUhIOEg1L0swa3JSeTZs
-            Q3czQVhvZElwTTlIRSttYXpoeHI2Q3lrVW5JCm8xZnNjVy9zN2NtME5vdVpZZEJk
-            eEJFd04vaVdGUHhsYlpDWHVNUGJQS00KLS0tIEdPMzhySU9aL3UrMkN0THFVam9B
-            SUJnYUdGNS84RUlyS0VzVnVjSnN1LzQK+gADsc6Vf6NBYFcfrMHOHQZvzaCX37HM
-            fGO3TOsV9E9i51QU4lxHWF0NNh6CnIefq4o27a7HLWogc3SBz6TwhA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRnR4OFBqWG9LZit1aVRv
+            UFl5UzN5a3dDdXZnTmZ6V1M3OTV6dDV5SXg0CmxjNE5WcitmMEhRYTFRRDlPTldY
+            dEpLRFN2ZVU1WVJwdU51dkxwSVBzdlkKLS0tIEJOd0xXT2FSNlY4YkFRajhRSDZs
+            cHNoTGNhMUM2dlRNZjdhdzdqTzVlQkEKU81lHhEmazzKguq5dz0nKRXhl75T2QP5
+            JVdLItWbpdc8ZIpvNtAbDshVhXer8fIfF7EOQIHEJQb0CsOR+LIYCQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmYWl1WmNKVzdWMmxyWWVB
-            SzE2cWpTTXZxYjNodUtyam9tekp0dkVQVlVzCnhxeXNWTDdPSmJBZENoZ3BvOGor
-            RTNFMk9peVd6T1JSK3ljbkl6azdndmMKLS0tIHRzZzgrbGJKRjFjcGRIaGZzUGI2
-            dTBsOWloSXVpR3VlUEJibkRYaGgyczAK066qQW7vu5U0uuLiMVlUfpSovyalmXTs
-            6ECD6rHyI61U8xTyAiA+MVpfoRxvL8LkLLMESEGlKlAvDgR2lsnPvQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHK05TTVZmcDVvaVVkUXRm
+            M1RwUzV6UW15WStEdnY2V3BiQUI3NERiVUc0Cm93ckZRZEkvNHFSMlg2TGFXZUFO
+            c1F5ZW82TE0xZGhnNUFuc1c5ejJ6VlEKLS0tIEV4TnduVzNJUG5mdTUxUUtXaXJ0
+            S1VYRVl0TnZPL2hVM0FOeEhnT2FqM00K8bnBTMw1Tta26aNxtAD6VuE78oZuaQJJ
+            K3bVn141eghTa1u6K4T8VZ1VjxihdpIntfb9uB/qpho/eqsnFxfg2Q==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-01-06T22:45:31Z"
     mac: ENC[AES256_GCM,data:6ooG3L6RBMn+DZ4jFsmc1WuS7Pu2hkYM74uGu6lxGEwwOqTPXsEAORtcMdTeCL2OtDKZradmMqcGPNJwm0MrHNwemgmmfn9GGHjM44SfyIdApa9H8Gpql06QjpcX/r7H8XXdvJT6YpwBX7S5htO0kyJc6P0435dg275Jl8m8+bY=,iv:nH3Gz/h0Ikq9kV7n0nHH7fxYuDoPHqwZsdLlAngZopQ=,tag:UJVpBYg+7sjiGqODirON1g==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAA1blof/jf6JUPX+isHSL2+ZmUaCNNvIe0qAZbI3KtZqPp
-            Sgi8R4BfQrYW5D1Xi6WdYP+q0EcKZkXKty8GW1mENgY751w2+sw0WXIMOwwnIAyU
-            aLEVzGI4zvDRLUfAaiJACEiHnOMfJ/7I6uI8Ag3pswoLLnqObF01uC/mJ6KYzrLx
-            eYUaYe2z1b+xENFMp7TrBJaQgrlInHYl2p3rcXdrfA64ZTlZdRFOXE3sqRWRKuF4
-            tfkcp1VapgJgdPu/SDDgnfqq4xfMD9twICq2yQVo72C1/cM7Rw2GlmT3qHqWD5L0
-            VXuRTdnxkU7Pz07aRun2HEN7tN0tdeeaixZJqdmMvJJbR5hdNrBILSzx/sAKWDh/
-            eTHSIKRnvt6RHQ/qCZDKJhvRvgeb+BRSNJBVQFgKALqHDowDdu7bluRgEVJmRybJ
-            i1MlW0IINhq1ULZs0nud07PTIc8NC0rK5v5RwF8HmU7XShTlfO8XKEHiKBwi8lTb
-            /fk6j+2rfo1Oa8ULVX2vrVMpUpsSm12iaiOizoFRK3nJaFPlLk3VfC5FzSqFOaiK
-            zWgOv5k//CunYpshjs8cXS00PdZ2X8xzubUhN12Awk6D4+bYFAFQ2giTRDYBfriR
-            IxtszoOYssfsFlJVvKsEQIDIO2wdl8ZGjf2jzme2OBQKEdux52tcrT0nGVH6XIbS
-            XgEQYt+VwhWhY8YMLkk335WIgzwG1rL1lfArYcP0TjqYAv52Fq4no68biV1TToOl
-            6BjR6BUX14sUSnmD+FqtLRyKioarMrrFsfYN/HMAd5KyIytT3+hLnlsPWKe/aq8=
-            =LtUh
+            hQIMA6j84+xkv3y7AQ//Vp5rq7tLFZjkHw2iVedUi9giUGJd6cQPxKoHXobdnFYK
+            DWFUZ96pJRyS+0NLApmt4yTEbW8K9+5kvnDtsEDFaridxsl+w+5fn1AzTYkntofy
+            8634qmDVz08Wey/1zJUiIDQLn+Dg9hXzieztWy5uyJhIS3rTIenhfLjiy03BV1xw
+            5cgOhy62w68JDEHUxHXxBkkrP8AG6LCmjVsEmXtPLR5wqI6AzUcsKqtrrEUs4mei
+            0egGzTtkxBbT7AyO5q4b8CT7LYXt05IAALTX7R9ZG4IiNHapEvLjp+9YwaI/sSJG
+            Ex86VcywX9O8AO3FB+/ySuUaMcOQoRAMwj7FnsKwR1zSVZSvlbRMxmOlEEzZWonZ
+            s/fjHt1dQk4iU8M2v0oKHPI/ChBnQo7qSbe/AaVt943W0Dj4xecsDk5jS5+xyYAI
+            IA5B4lIVRy4makv1n/djWBjI9/a0Ty8n6D3pAi2TR4ap5SYAdSatrGKZTQYpJ5+v
+            dSG3lODXSjYUUsRTp4fK0YQSnMhf+FQTlakZKIi0IAmOGvW7NGNAl86/KjBhrjDG
+            p9hMSnO6FiS6ESQ6sWP/GnCSQE8llSfo7oq0KdosYKdEkTkvx5pYUxsbfr42g4q7
+            iy5fKmS3JyGGql0eyYM+paxGfgobWIC635CEmSQtV72hYb59KAqH1YypRVi6J0vS
+            XgHonH+Q0a/M+d6EIt3OMd0oX2ySGKdx7eVEOc6oXiOQbxWH4UWNIgPq1eTjBTrc
+            QTjIaWBRvhS8PnY1O99ojGfwZH2LzDVX+Q5fh3WyAae99FDRmqUhcvxZegWMrLc=
+            =rSb/
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/9HmZfaP+pq8X8foUByTbtJG1rnABR1UpW0JzL2dZmMzC8
-            Na9gCASTu0zROJkEjjfOFOjv82rXlA3KCWsg3uS13LG7yBZiHzA5qo1J4b4zYGrY
-            brCH+XP8K0niZC2kjZkoNoY98NB7CIPBBRlBlmvUQ0yrJCzyTVfN8kwPfAUMVTEh
-            RRm9xMeFfx3Y0oKf4z0WQcOwCy+vrzGGJ3dzyvpGa9+PewJ6BBq6iNwaQY2qEEPM
-            wOvcSWx2mLu7kIH1nSllkDabLcVBk0v0o95uLLK0TKzjg/AL5XYCpUcZv2jVmpNT
-            MKJwP+XAGJeEXjARvQK/LaA0/oPRKvdxTuwahHAAtXzFonysuhzrvCsaKdn0U0DJ
-            wnDeP3/UCiEwCzhKbxL3LleZIp1YPoGFbFIiVuE3Z9NtHXB0ziuhUmxh6lY18bw5
-            f1FsJx6XmSThKUcPb1kWEUL1TkURqhxuBABOBBWat3YHN4+tJoLGreJPeBxlx22v
-            5RW4vG7ogJkhS/AjqQlcHqoFpcy5S5RvIyewvlG2XH5MSXrgcCul9v4XM21+xgaQ
-            +p6Q2rlQAp/BQg/2jYbAA+rXwZuWItZG6vwW+ZKdlL3PjDZIVQ+imzOTn5t5vCCg
-            0w+RXd+4zhkDmzAuPbDlfpWj8zybM9G4WRBFqBSxcCC+wKyZ9PUZ2mm0JQ5UVqHS
-            XgEvG/OSq4UcEQlQoDKexrHYM7bUeJyRzwHlJc9vJ5N8+H6lls73tyIH0Dhr5Jks
-            y0Blog09MqIvJ1wPtsTI7YwqTtuKAaN3tRpn5v0Irjf+kwUOO9xFYq55qoUqnso=
-            =cipK
+            hQIMA8zMZ+ak7y/zARAAl2o94DzFvx30WAlOvYMZsValjF8HESIry3x1h1dz7tz7
+            arXo/W2Ch2kUJ1zrDFlbnCjWn53gkKaHwCJcru8WDO6C2PIbWLB/s33iDMevTH4B
+            rIkJLxk6IfZYk22CbSbDFAeYjazDnGfas0qxywQiMvlAFFgJ9oCQBJ7If9T53Kgr
+            wTzSks4p/BVPCYjuGB5AjofnG6sbELr6eQDlqVW1JA5WblBKLIlHG0tD0NTPBHts
+            EeR/VDULM1A7ugwzQiKds6v3v1wqbJY0bJQplOOG9Ucc/qw5UYfbim4C+xrgW1gK
+            CtKODuv0Njc3rk9pQXUc8GjaTfYVOQ9HyGoKpPG1LGw6uW8j30gjbv/FBCRglbiP
+            lpRBV4+co3ZGWj+jCCCECCV+qbZAdVrphRjPe6lK+FEiMbEIvStOI4mHCbnrlBH8
+            BeTjG5lu5iTWTKXSGbIXnt7BJQWpudHRhsN1tGdR4N3/ZCRUwqyG6AoEWnHMm1ZM
+            7ZKzyNQPMlS+Z5YbD9+oiehDce0y5aPO/qI4IEHXk46+pNs6UXF13jYM/zbRWvXh
+            TYSpEaUkJj2eix42wyRpyCG5PTwJJOes1oQl3wclyYI50Ji7xLdvWF7smgmXQw+K
+            TFHX/J+J1Q6HzWxzqMkqAnk8/msSxC4H0OOnPZQp6+l+kX5lF9NWv/x2WVSTPS/S
+            XgEfjmAopRdbTiS9vHecTIdYrysmxMpuFdFT27Up5EYbfdxhh+RDpMWGymHmMD8R
+            aAgy5b7YouOR5+ZZv6h02EsTvBSqMa5Dbdm4EO4bv7WYe98tkbT0prf/YzFeCBs=
+            =T345
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf/eDKnVBfmgIxgodwg11IQavjvzV+TL6WX8+/KffdrjbmA
-            oZaTk/1S8qEBGqvlxPH6e/hi8dkGVgGiTMSmyPmcBv3Ku7vJDvpEiiSKBR2p7s7j
-            QUsirBozXIdhIb+ChbTilr6Ub4DUUr90XT7B0CMLrA/R3oGZJeAiY3MeMVNRNupr
-            TTZqqDD28t1bKrFTtoUyaOlTm/Bm3owIx+lpbg2xRda4tCjBmabGw2RIFRIjCKB4
-            LaRfcgcSCmQ1Nyg6/25I9/G59vCFuihm8z7Rnvr4hJV0O5zOoDXrKhpYWiSjF/d3
-            OImS7XxIZ/36cWwFcAVdgnQv6VkwGWkJmhGhP7Oi3NJeAfg34nx9jLp3UQQ+lQKO
-            aKFmCDhveWZg1ZQGNnw9Tu1B+opevgiR9aXnPiyJw5ZMVvhhwib80f0xR30h565W
-            Muvv/zNTWhgL3Bc5QCrcEpeA79Fx4yj9a6iioPeutQ==
-            =/+oj
+            hQEMA45bZkLXmBFpAQf+OI0eEWGd8vEW+SeMz3vQg3U5a+wQh8CVfMIdSsAFdYMN
+            3QGwyB+4GJjppORh9+X+1rCLE6UuI4Ec+eP04Vm/24l6Re+llr+lOVZbO7T7V1Ek
+            mqywcN4a6qd6WaqxGv9DXGPRYbiqhIhotWk4mv4ngcoJNAU4ut1qIs+Qjhhwm2jA
+            GxngYibYdvsl97olmldtydhEJnmNf529xRrmzKS4JuuYNNbyc8p/ZsNZlwAfHCgM
+            Qfe79P0LZ2IptkNAmuVmSbYPAVukZcX5y5cwzRKYLrDlLCQcJnWTldo4U1DEVwzp
+            eKhn4+XTxw2czucOqcjmrMls5+tIVbZPKroXhr1yl9JeAc49gsVidLVnwTLTnQxO
+            IqicziUtL1tWI5UDB3f+G4AYOplEsbXAd/MbbmODsWf/SD4lIZRpHFRP4WW8Plhf
+            eTTFOLoFIRD7alSf8YjZCO35OoM/v0WtW7uLloRVNg==
+            =ZLUO
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAjoIZ3MFENhuDlgtqGHGO+VbfilXLkj8JSkDQ/FfCm9Od
-            fDMj3jS7hGEkFdFgQSR5X92aHPQA8SoSEcby/8fiGgoBMlhPO0UkWni7wFZBAv/H
-            ZTo997yv099PzuBLbNuwfdJQIa3ohiHQ4HaNg3AQhav0keCtX4I+gRKa/k3wXvRg
-            q1pfEEqRzt3yS/z2gtOIVNAvQv2xKFDUOULFQ0eFMCxM5OE/rC2J6wtST5Qj4boM
-            kNFSu/HD8kKMOoLVyOPiezbXyXER9D2naR48BQ1sjhKUS56Y441kCMT9+9PJWgs/
-            8q7PAfZ/TDqV+1occnpIHO5EPgWgBy4Ig1EVQuDHh9NETu7eo51sKpj1ol7SnweO
-            srNvoHaT6nKVKi5aZs1PqO8UjUZOrgcyuDj/PHoCTrHy+8JzyWjZoqzpLzh1zsXf
-            /dE6tB4G/CdM3VA/f66uo/DyN4yqMP4I6SxUOwoI1SKpobrEok6SkgksDl5Fvxzl
-            DmtbZCH2Y794vvSmAbNMP2fxrDcD5VE/nolSHHFn66TKVH59D3RI4L0C6bZTg876
-            gdbbe6qjMIXGdqi/v5bx5sKEYbPBWLFs8KmTN8GLiuUWRkmgHfBbLA7TrGknbn/Q
-            o3189W5Ev2kzjwcxW3x9Yshiqa0vXHlcNLXgU18A5Afe8oqHo4KTya3VFRkBZqjS
-            mgETi6Z0X4ipqEaqY1HJYYpNalrULBc3HR8xvuwX+SRJEodOlFm+nRPwKAztItjl
-            tAPuUj4Y6axit75x53d2ZQnIOqiHWtLfCO8BYq8gnsLQUE02rldbmj5rSIg6TdQd
-            nK7O2t9MWzDIn7W+Isli1a+GZHs0AwxzRsrr8v8InGErq/uamMA4plqlngSTwVqz
-            Yp9P7VifpT3ENps=
-            =rIAj
+            hQIMAwMCBBrc/JA6AQ//cI9g67ZCCl7U9VTaBfzSlOcYU9F9xw6+ZhfC2Kw9ztZW
+            qR8qTBTRoe0uKhO8/ZjYxHXf90pK39SGDT1lgVZUMxY7CjFkgVk+9PVKlkowLWdJ
+            U/Vy9MeBk4QT8kMJNZyT19eR9R/ZmAjYeQDVCl7x82Zw0SMcXyKK6gsa5nOf1bAT
+            sIlAW3i5Nz2BAVcBczLDChnQyP6fKPdFyd1L1r4iCUt2guB1y/TQ4U1OJVeHwwCv
+            QBNPAvAarM7+7RvCPOgSlyS5UI9mur5yICQW6PHM35hog7zAKNQltdU0sUffhQBr
+            2rIGFRkFWTUCWINtIoT4+l0y6d7VsNqF/3hWK/NYXcVQYULk6Vv/O+atAH/K2Gog
+            sTsp2jmwq3I7WpZW3a7sNCiRA5TZhzpVzP77iboNqKPbI92XDwSL3foBjq89k3Lg
+            JhvCfdSoJulJnsreYFlIP2AqCXrGlnkNQNK/rzo1m1ixsigauuN6q2v6fW8INq8G
+            TuKmLuQrVTa2N2cXgGEBjTV2q0t8Ra9UvxcQheq8bn4XaF7Wf3WNQZyoFbgeaI7c
+            eyPz0HtU2ea/xh0KnfbHtDNBmLarcMJDg3sNg7S2zt8kg2ZUvEqxKHU3SP4p0kP1
+            8BTtELhYbsqN/uR0CXV7FJfgJc+C+25jdubJO6bF3E+3z+G/ZFjwm4WX70bVS2fS
+            lwHxwCY2QPBjzSnTyhExVy5ul72m4b+MiKrsdihJaxjBvBhsbA47VW/VOB2mMWHL
+            DpGuQj6s+0lD7JNQxfpRGLkNhMcDhI+pvNXWTZNrrwZAyJUQgM/XUdZRnlv/EO6m
+            FZNDFGwLwN6jkyYEHgWMyV17rqJprAo1UTfWvm/gYzBN5WMIFZjkYlKBDP/bllVI
+            CXyvuDQPIyo=
+            =aMBk
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHARAAy8/abI5IsSPw/js6gLm2huUV4BuShjDs6O32jYzNpfu/
-            dSZ+64oos6v2wdSol5WQM7xsnzSu8+kbHpL7jQNCljBULY4ZBN8XyI2tke58+iBr
-            GaG27lNBTQwHPQvfW079ZOo2E/IJuqE8e57+ufI1P/lPPWF3o7Fs4/LPhb8fXp+6
-            GFXotiljGjgo4FKlfeAoASlOJbYpM0YfsPQgS8cOOxvYb/MdMO6c4Q7/1P/HgN89
-            umEIT9c9pG5oojjosvqXEYH3SSqiNoCPh5lDZnjUxaFHlTUI3u2hHiHAoLqtr/Na
-            XDcwgjL0WcxpzkitTN/WwNxHPtAXMRI21AtVkAyots75pwHcORI08HT9Lg0n7CMF
-            FdQObdKrXsoM/Ta3ddn4AvSKPvHxPZXhacpWbu3ZRZs6j5CdvogNVMbzp73E8QLv
-            G6IhB4k5Y4yzEagW3NYplt5sAkyAiw3CwwpAGhe1ybFV7czLon4UYvxr0b7A48p7
-            yW3Kdmu0NsLTxim/Nj5CQXKo93Pyhy9sZ3CBSj3TLwzBENBPKsAxOBhqWNLG+6kG
-            DPhVcRt4UTC0gsKl6MIz1/7iWw2zZbKIp9ICvYmUWNzWKmVCX5dQZV6tphA1Oujv
-            khXPuhjNf/vuVAKiF6KVjOeK8g6sMtIJ2YLgUsFpMtL5v7vH0HV0pAkXTVU2hYPS
-            XgHEysoXtC0q6yeqNMqO629Ga51tFvsK4J35qYnqMlvIzWUgUVKqAJXIjEwRYuSd
-            dpvLLyZqaw03CyViprS31ZyjZX/uODplfSGgEdTX0biDx1V66PkYFS1BgX5F9Ec=
-            =HW+p
+            hQIMA9XEenRNYVGHARAAxlqCRqjEcVWw3qsjg7yD2Hrp915eItWXgAZip4CTdDMZ
+            b/Ubu2n75rxNURfenSonNAVWIoH8e+ieg5QRf9PmEBjVln7BROPHSysGMSkKGy4u
+            OBE5A1/gqdYnm+uyblUxWI50eXmt7Hdo/Z1nipAji7GvF4hqky+G4z6VJmM/8Ilu
+            EP1/gBsEak+jLp6oUY3S2W6lbEnVfkIIyH9mZcXcLkziwleH35xo6rdFhtandPYP
+            Ox6NymrWmJmV9aB4dwDP0aZiwPFAr0lh4iioywlXOupEu40vRjwSr+XD0z9d89Kj
+            AQ9yQTD/aPiKZitdyrIhU5xMloupBq1JiREKkbNgEZ7hQQPsC0Ay32TGlahQ5yjM
+            k3K2FCSloOJetaXBf3wqqGuexdNs1o7GGE8FeNZq1Wj0XBl0uvs+3eGfhpQUZ0yk
+            wbDgRKqQoESeBedWmQE+2NLMuFcIbnSZx63gdGDt3hAELDHPLHD7SSIyP/Dwe/ul
+            um4kOl/fxhHQzyvGuVUYI21uEXEr0BM1newg+hj0+xjny0sNbpcK6ajcScydSfdR
+            5Y7X96gxFt8Chy9cyERSvLl9iYw9aI+pSdBVKhCq70QQuNHNVxk67NuVPudoz9Jq
+            9XTtlmGSO17ATCRqQB2SXTT1zadKaU8SQ+653BmgPeSvQgoZIBVaACJ0nMdSLUvS
+            XgGD6NUCtLHkFMRH+8Quv1obbyD0olO3aN8+mZOAbvTrPBwTtaJv1zws55dG2rPP
+            TOKgY47He4isnpnqlL+ZX9gy1T0EsYFWW99mguqgdpIJrg6+Riu5of1twAeF2Lk=
+            =bLmY
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/a9eLCXn+WqW36Z2Y2CmpG6w354DJcnv66Sg3RmJ5pbgo
-            5MEl6jsgoAbaKFCaHTnThHVsjHbpI1EK6IPtUeQq4J0wx3X0tOSl+cVk8BDBo9VV
-            6zFjgx08rsFh7UVv10Z6v2GflqQxgE3XEmj8g/QNAhKx8kULp0BmolA54V64ipvM
-            ptACU1yx0Bzz2P+yb3UC/QUxv5EsdERUVafFzhnr4hHN4yF4hQ1OYfzVID57UjE+
-            3ykAaZQXHLIdlGREq3Lg5tjbbqVn7x7DB5a3HAYDnHRNeW0YWAww0IgbdtOTnQQ8
-            os73dmJjpY+S1CfjNnqGXJlsz+3NqpqgB9EoQmC07tJRAbCUELT9RIQY2H3x7Ahu
-            /kmjy/HrCjSgnoowh72TrEUtuimXsnSqI5n/elGaskP2f0RQmMHaLfDpZ07aw497
-            d0raMR0a4VzvjeFcyB5TuMZI
-            =lOay
+            wcBMA/Z87ylQaotQAQf+PXBcVWM5QlFnveREQec45VEQQR+bC6SEgtDCZnJsSARc
+            hqG+Dv6g1/bPWbnEPxDW+TL7LqY2lFGeJJhbY/SrOh0mdwndQqkE0e37XcL/ZMjV
+            3SHT0zlGtY01NGfwNuDbqf3tjqt+hn+8GJI1UzLPtwsQMnmyA1/BoBFQkuEFGfLs
+            JKYPhnc/WwWxSGD2SdbSkVR6EkQkAM21xfCB4KOlQqTpqQ9f5rukYxspotTJTV3g
+            4qwhG1o5gRZlkO2ZD2eA65vGbwwgCYyeZouaNWMn0iR+lZSY/bTIekjRTjQ0OCYJ
+            BTXYjNE0rcNXThiyaMXd2yIlE470uG/pxNt9amw86tJRAU3gRFUvxf2hgQQxpG69
+            5ctWFpVoyRq93GbGxlTxBy1FpP3PDtXV1FOme6hZLs/GkSWPq7+AAtmWMgPnXaVY
+            wMOBoLJRwBv4kXX49UVKRlVp
+            =2Jg/
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/7B2ptXyoEfcOZarRjx4An6gO10sPm4XCgnrc4IoEl5C0e
-            o13k4qJtpggIxjx3kR4mIGw5nnFHDVOMLtptCMKsbadb97NTAxFE6/eLSRs45Cb7
-            m8bRc9wPHfZNJW1o3nSU9VCWJI3LYMBDB02XxQGEbca7SKfcaTk47HIZkSch7eHG
-            la7s19HiQ2Pw4tCmWUWEBO4S4B3+H6zwHwrxOFJn4YKfbIqx61MJ0ARCG44kwMbu
-            2EXO7qhtFH15IpkWFpKXxZw/lgvBSgAFQ1FzFU5JtjEckd6QvQtOeqXt98OfqIUr
-            fTBXzedj3+sW8c+bNA1U0NrtTFzQ7wHuigiR1xOsOkOIaOQFcOTce6qyvZUB9E0u
-            tuBz/tio7TH1ryFX6TgEVaUleYNILbIfCmLEJKuDD0B4Qp2QJzMv47Vcbr+svUry
-            VkEc4V5/aZNSEv2hoaDljwdGF7EBFVbV9Rf+w8EHTGYruaJXI8gbvPGctUIXamDL
-            TgtETzDwZwWsje17ko7HQJ4fD+xDnjnLCAkHy6q2D/7Yi6++BkGjECzHYyBL3mYp
-            gu4Pi9LGyLUm+bS23Aj1sf6ds4N0tLcrVdFa6P47CorUisai/bZap2SRzsIvEHbl
-            HCPR/xZgjH5vqqsTNDAdfy3AjaTPKSGM6XLotXO3Yqn1UCd065TDWUIIEf5CtFjS
-            UQGLy7qi+Nc4SVs218muH0xwdL2v07gkX/lckRjNDuTkhw3cl1KR6xGOCQyCAXsa
-            w3Hm8OCO32j2vnLAEL2eXAsJFVCsClXdFzF6T27avRtu6w==
-            =/SRt
+            wcFMA9qJIVK2WMV7AQ/9FqvMF+twpZ8HF6e2M4hCx5uh9NSyy6sCUe4OjftWGCaB
+            kjtf7syvcMtdDvvoD17TKX0pDtNgP6hJOUOYswi1lpSR6ju7en9ew2DLbhAPiQIK
+            4NspPShXghSwSjMTNn96IhgRsaRNCBWCn4fG4J6xRJm6Kh0kgOQzYgagQClad8XN
+            hOo/3iGvbsqVP2ESSAoOeMF2AlMUgdJwOsivqR4tnc3vWB5neSTxk4iCa57S3cbg
+            CJB2cV8qTEfbgUGyECHwFeU+QQTx6CDcoOY2JXl7yeJZ4Y1lJ9cmDQULKOYla1yK
+            +A1zTcO9TRUaFhEnxFd/hwsQ8iNKJFF7OmKF+Gy7u/mv3q+87Fk/pwOJ9tVpmNQt
+            JlWv3o+Tam3LO2xhI3JogA/NjPOSmPxNM+MJujosIcgKspyhEMbyAYZE8DkyYzmP
+            wwQQvuBBHQnPTlZ3GW+wSteKphaPY2l0KzL4DLonXa79D2VG1jBZTTwOFwA6KqmW
+            DKxAKFyx4Kp1sPPXk21+YMd09GrMo3G4cxeBsHqQ/N4bd4BLr6fFHymkiY0ryf9x
+            qSIS6gZkuRLk4IZ+R1PkENJdfaaQxrvrJON60n2zaDnXxlaxfboK8BcegbGrKXwE
+            gG/veVm0MYAG4ymARghqCSq6rQiCGgdpCXGYefQ7wvWS0PV3S1CqTDtnIVymlSzS
+            UQGrR+iA0wWAbPlHXgn58I9IYI/0ydgfq18olwolxO5wBYKaLjn6vBHTzUtqTIjI
+            khMEJlfj05l19YXwFTpDtsRttK6CEObQCZOjVntN9dUcoQ==
+            =s4Ei
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:31:12Z"
+        - created_at: "2022-12-26T19:09:38Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJARAApGdXUvJf+/YZGK1VBjfa6rIVXSM6AJHGfUgCsteNWOiA
-            PVpNRQx1qE0LCdMiqLjSVDoSx8o/crWhqSfoS/9ip7VKzhHuiw4ZSqNI2wIQVatL
-            7+MJWw98wuB1askHy6RdeFbhdGFdRs7hI6v1ByZroqE25eVKRQjtXzMCSvz2/K/+
-            K3LELDzGxWfr8NKMykcGRClSEJ4RXQi2S1WBRtfejDuDgiiNlSKZQGYUZqz25TIc
-            Oh9pI9U+KwAYi8IyLRAsz3WTGLwn++nldiluPCNHVKE8uCtIc9kWwGSNEaQIliRC
-            gCCA01MBV3lJhnwBP+PIx03dJJCLtCm+OIFV68/DGfb0QHjCUc1n7FCemVX+8P8T
-            kC4P9KPMCXr++F/wZWfRzQyDOy7+EgXGSdMv7qQ2+i2iiZN12Ejedk1yNT+THMZS
-            VS83aeMaushMifcpdFAiS7tup8pr9aRK7qaJ/nEi2Nc22EGPW4VtRDvEz2oJlMzr
-            xEY0KQP/1t3dNOeuZetVLywR3srXngZPq6oPE2ZUYpFjD7if72wWlUELWC2IZumx
-            KjuALINSLTtUXQ8WXGHficqS0fiDQ2miWRs4vbuNRrmF7h33ouO2uHR+zpmYqGsS
-            9fw2YVmRQ/Ed506sHuDJNcAA+61CJI9W+AD++F9LqUEUuNZhNr1V1HimucsWPXrS
-            XgEar8ve3x0wiydVvp85RkyOrcSZEqq1Qa0QZlwGZ87YOcRFrikAfdo97jTcJlpU
-            vzLo9Q8rLZWp3BoLJyM6Jjoyaeausz1+LmoHXzJWmJqds/zgwXwdwa0K4WKRR9k=
-            =wvUO
+            hQIMA/YLzOYaRIJJAQ/8CZWZ/vNOWPWlX0aeyL7ykso0VTeF6L5ZkbKFPEPXMnT3
+            yU61NIorFdyzHZCf+RLSKrOpLNx1BrP+XG1FtaZwe2Z3TSU0KCGvztebPd6WiNoj
+            fgF8IL1wXEkO40Tc3eIKYBlwX3s79ktEkIXZxj1M8dv0UOd0YG4GRASjS0QLtwS+
+            tU8MwzOtcuHoKlhLCoD7xf3ZCaJu7ikWVGv9xYatRbsCluCzjDV0d7WNTu3W01XT
+            +sTYKY8QKt3wUnS32oqUUNYHq4ouKwCMJEaV1DYKN1BOiuWQdRmMWcy5sS9m3ZzI
+            kS/OogZQZUCMwJfI+QO9eiI1fMnnY0sVvu12sr6pXeGLzF8bP+cGrlIhSxWTvA2T
+            WzW2mSgV7WuriLyJgkh0N8BA5NeFnFl94uon2aHl35/JZCzwYfVMlSGvhzIqlc6j
+            GnNBhpj41lnsiKKCWS1ynyb+Yj3DHkpyDqBCYlWcnigcRPVET/M4djpFysiKaSw0
+            RGr3hpTxuwD2addm8I6l8oORNPdT+nVE9TEMk7duUlDtrz5F9zYSOlm4O2s+vg0O
+            78A7xB+WJ64sTyUzUWqhDyjvEn4+ELT94+KuBFiDl48VG+QRooB5qVNfd+fmeXsb
+            JxrnVmcau4XssYZ0lq+C1bx9fJe0sNKBGCNMU3CrUvB+nPSU6BxXa96sh/B0gWrS
+            XgHjlTDKVXyoDt+41jKJNebrb4Dm0GVk3svEWHdOlB5RtH/89+TbTRjRDl2vz3Ix
+            duZL1jpsjzswvySsKMVqmCp3bb7u33RFmUMec6zWUM4JcdIqEii62T/zUbyeLAM=
+            =brSj
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/9GPktbUeOtxR7Yvntip8V4nKfJpHf0xKBk3oXyvOZBqSM
+            z5sizqSV8qVkCCc01Rp+57+o9wtAI0AtUAbe9o30VupRqCgmVkKcEqWkkXA3Kifx
+            h9KM7RcUeYz1JgoPkHYZdYcL8gO+ombXtBT14GzsqIBPzr8YK96Zyb2OTAaBbyy9
+            oLiYfw0yjcVbRv4F+vu84/y31bJDnLb2ckf6jmW/3mLqmFo7khaRMe0CCx/VIfhM
+            EqbYSYfZ8dMELaQh0+6e27hTC9iQYJrl9/hQ68Q50g8vXAOX8JsjTZ6Auv98dbAM
+            vVsl6P+T2i6gl7b+sexwUnctx2IGI/6sw0Ev10jj55ENSXnnmh4UEhhRrLHFM00x
+            Xzi9VN0yRkmv/tvNGMPBQGS8eMnOtpls2yP7CRi06z5EAgvmVqE3NYyfZzJSW+Oq
+            J3cxDQDcYfepB7uVcGmCHEs4IgSlntQPxWsbIg0M5AA8e0aXykhT8uyxytwp/gH7
+            Wg8mhD/5scP8RZEziGbA0e8NZdAG0Nk2/nI/ownFRti2/83njOZoddHoUQeDBK92
+            s1Zv+IFBtCicCiT/+ieYhuD4zLJNCOR4qKZmS50vtB//Mui+jlwbHbxb9UzctSYx
+            2gVkp49PRXcNZIiERUB/DVf/7ses/XSSb3jMLJDfYgg9+mmJBWPdlp8giiO9mKfS
+            UQGoDmb81Trz4pcHeyzba/32Aq2+DmRvBdfzjq54zZ9VvFisuGdjRxDbKS9csBfw
+            rT+F4Ln8EMwFwd+UmPqhdQqR7OKgMS636ulglQjzGW5yEg==
+            =jtMP
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.1

hosts/freifunk/default.nix

@@ -14,6 +14,7 @@ let
   rt_table_hosts = 7;
   rt_table_nets = rt_table_hosts + 1;
   rt_table_tuns = rt_table_hosts + 2;
+  rt_table_ffgw = 244;
   sysinfo-json = import ./sysinfo-json.nix { inherit pkgs ddmeshNode; };
 
   upstreams = [ "upstream4" "upstream3" ];
@@ -26,6 +27,29 @@ let
     core = "00:de:13:cb:9a:7b";
     bmx = "00:de:13:cb:9a:7c";
   };
+  bmxdGatewayScript = with pkgs; writeScript "bmxd-gateway.sh" ''
+    #! ${runtimeShell} -e
+
+    echo "bmxd-gateway.sh: $@" >&2
+
+    PATH=${lib.makeBinPath [ iproute2 ]}
+    case "$1" in
+      gateway)
+        ;;
+      del|init)
+        ;;
+      *)
+        ip tunnel del ffgw || true
+
+        ip tunnel add ffgw mode ipip local 10.200.${ddmeshAddrPart} remote "$1"
+        ip link set ffgw up
+        ip addr add 10.200.${ddmeshAddrPart}/32 dev ffgw
+        ip route add 0/0 dev ffgw table ${toString rt_table_ffgw}
+        ip rule add pref 33500 table ${toString rt_table_ffgw} || true
+        ;;
+    esac
+  '';
+
 in {
   imports = [
     "${modulesPath}/profiles/minimal.nix"
@@ -234,8 +258,6 @@ in {
             FirewallMark = upstreamMark;
           };
         } ];
-        # reverse dependency
-        networkConfig.Tunnel = [ "wg-vpn6" ];
       };
     };
   };
@@ -250,13 +272,20 @@ in {
           --no_fork 1 \
           --throw-rules 0 \
           --prio-rules 0 \
-          --gateway_tunnel_network 10.200.0.0/16 \
-          --purge_timeout 20 \
-          --one_way_tunnel 1 \
+          --network 10.200.0.0/16 \
+          --netid 0 \
+          --only_community_gw 1 \
+          --script ${bmxdGatewayScript} \
+          --hop_penalty 1 \
+          --lateness_penalty 10 \
+          --ogm_broadcasts 100 \
+          --udp_data_size 512 \
+          --ogm_interval 5000 \
+          --purge_timeout 35 \
           -r 3 --gateway_hysteresis 20 \
-          dev=${meshLoopback} /linklayer 0 \
-          dev=${meshInterface} /linklayer 1 \
-          dev=ipip-node51001 /linklayer 1
+          --dev ${meshLoopback} /linklayer 0 \
+          --dev ${meshInterface} /linklayer 1 \
+          --dev ipip-node51001 /linklayer 1
       '';
       Restart = "always";
       RestartSec = "60";

hosts/freifunk/secrets.yaml

@@ -10,173 +10,195 @@ sops:
         - recipient: age17rrjtdgzzwgjatyqqv27pftx42t8xhksls46jc3f78juzw4g04vsd7lr7e
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpd0JDRWQ3dE9jaTllVjQw
-            TTVUYnRnR2ZHQmM4VHM5SThFSjZzcFdUamdFClgwMjd5NFZpaDhnTFBmRHlZM1BC
-            aUZWY1U1czBrL3Rkam1sSjdGalI5NHcKLS0tIENXbVBrenc0STZpVWtjV1Zia3I0
-            cmJsaEVRd01DWkppK3NuUTZHazhhTW8KfrHs8W9DDs0eTWUboYF/bogJoaxHRZ0d
-            2+rTH5ZASlmgDHpOPNWWmwC4NK7ovEuWEFuQ54EA2CEIG6yg9ntmNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPam1oYTZFeEVlbXBQRm1J
+            UGRyM1JHNWxoNDI3c2hXbUNvQVNBVUVOTFd3Cjdwc3g0V28rdG85Tk1nZGJPSkY0
+            MWJnNzNUL0M3emxGOVMrK1JpR3JRbm8KLS0tIGtNaDBaMEZ4RzZoaVFZQ1krRDUy
+            V2VQbnU2Yk5QeTNMVmRaRWRwVlBNOVkKE5qanARgEQb3UU/Gk2ysVTCP8fo2HxYL
+            1VRLIT7jgMXDMbMGBWfSEOnrZGx/zAGcxPlRHAJhZDNyKF9FNC0vww==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvb3VHK2V2RG5vc0hCZnIw
-            N1JDQ2NwdXVXQ2lUMUR1TUdFdkJlWndaQ0NjCk9Kc1ZLQnhxMDJlZWJDVTUyUXd1
-            cGhDdGpLMUtEcXRVZzg0SktZa3QySWMKLS0tIE04SFUwNitrUjNLUC85dU44T01H
-            aVAzcndGNmxVdlVDU202MTlZbWpnNG8K1nY6vmmRRlW4twwwKgm01EVxXrojr9GO
-            NtcTvBrO2k4RVq6oz1yxrhBrFTJj+SolOvuL25pEoLIkeMChmki37w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YU9iTThkbGRmS1hjSU14
+            aGE0TnBTYldUMlNiV2lGN2hKRXh3NjlkZ1FVCnNpNlZQWXlkM1NiUGFscW4rVFFa
+            dXA5WTRNemtUTW4vUHFPSnFNbUdiOWMKLS0tIFZXSkNDamljb2tPTUR5a2dEVGVX
+            YklwNTFsUVZCU1RwZXlPeUJ6VW5iZ00KQqK0K0sizbBsKoZdfjo2QL3+syc5DQJq
+            lL77+ChtwzssaX6d0zCwsoES28n1bNDN65n39K3gBmjTiSFSouvmtA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-06-13T19:00:35Z"
     mac: ENC[AES256_GCM,data:RhGB+CNoIAGr6W1WxDpquG76FLZ0REF5OZwvD3DyfNxNai8XzqqDEsY6XneQ0Ac992kAcXdxleYDYC6keokvkOgnNmr+Buc4+rnASAReyRN19lIUWNjAB6oZWjqwEY2lrwklJc/yi+2LOuaigVsOLxOiMtpTs+QVtofRlmNpbGU=,iv:IqZGKWXKYTGP6m+9wb6j7sSVrSJZ++F/CcL/r2LaSYQ=,tag:6MLFHzcEayEGKtIxWZoljg==,type:str]
     pgp:
-        - created_at: "2022-09-11T02:12:16Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7AQ//ba3un8/kzOQ1e72fldGrUo5wsSjDqXfr+kaWIm07O/oS
-            9All78kdoV+Ygt/HSobpLnSqdZJisloWOeqbExLsuYC/wRf4iYdkkA3pjRFVvaGr
-            vWHbWSmLq1h6gleKOZhMEPt594KiH7PY0cn46lwySed0E3JoLTwqlyCUgFnlak6q
-            4j+mYym9NVeH19AqprBtyMvfmN3V1LYJE968ntONN3V+JK+pWa0FQjq3uq3F9yDM
-            YkwV5YtKJsbBp1PsXnzwyh0+SudR/eaiLYWV/xo91bWW6QapytUtgJqzWJF1W+SZ
-            PnylHKT8lX3tcXacZdosTxHjEDPLqwn5n0IITJkXE4COXeoaEmQKTmVu8T0x3kKt
-            iD0o6dj80GogZH5g9M8l5Ac8JA6nDpuzCwn6u/6SS6fZpvAVul2PZeZKI4uYZpgW
-            mEHc41AXGUmnY4DexGjGmYYtjLLgG8s0zB/gAEdMcK0hqMkvWpf3eceKngNGAzBX
-            lzY1NzywyjXzvd/W/tzQA3VeMCZXoDCxaf//itLe9HF4jG1Pwqzzm0W6+zSqgiTm
-            2qbclZ6+8+LUCP/kF7hoS43qyMTNiaHrdBZRKtsDPoEBH9k7qoKcJqze9rOJtsYc
-            LAuwOZJdhln7vtA/8q5xBagHA421UdnKN6dv5tJybYz1srCK6bJ3y6BZL7CvXC7S
-            UQFV4iSOcAkq9AfaGzMdyFbgR9ez1Xap3OobbzMR15FPJO+AHyfJ40147Fm61BGE
-            U8nMsZhbarNw8XGDnESZd4IZNa6iC8DuoIepVemplHQ4tQ==
-            =T46G
+            hQIMA6j84+xkv3y7AQ//fC6ZiQbGoapUCy7eFEY9+4NY8jyllAPuY18vxfhFSbck
+            y65Nbg8bBpH3Y+Z9Kxb/jcMVr1IeXq10uQUQPDJqcdVaPEs0NcjqhpZ+CsQZvJQm
+            S/W7EZt7qVhwOPTqxh8EjDixCEbs2v6uqDNLG61BdlgWCrPRzhy1TotbpKrpBc6l
+            BPnzKD0TojLPUNg0KsS3vnVBUM7fT7kKXSvADq3qo1AMggah9NTjHcJkZGFgzl/X
+            7H5RAjSH6Okb0i2PzNlOR6cnkUvFqHte5DA6f+jETaN+9p1k6DuH3rIZKhbRgzNW
+            xV7eAQDZhMAScdWtVACY2qcJ8DWiQ1wtDExWjm8aY7edRjX3U+dPAlQNep1O+7uj
+            gZBN6yw1ozUfA/RbD9cQyimsM2fURBczGVIe8iRVyn1YBkMj+PMKnPa15EZuAq8I
+            qEQL9N49FP8m9SJx16zHpXhxk6/rS24RqBpmBmUe4fFLZi4oo7Ly2bIhewJhXF4c
+            W/rcIKYetbZop0LtbfoBsDxGPnVAhGdjBM+5hNItH4QviVkZFNCst5/7QTrVwWpM
+            XpVwoBxfCc2HTifGqTWgrZC009tW7bYp/Ok7lMNUzj+lThQl/pQ8XMn7oJV40jnq
+            pFZbXEvShZyz19vpRa4UeLJrOwFk64dfe0mar9N28zhY+Nq/J024iQmBz1vUxOLS
+            XgHFgcFJTFknFzUTN8ZkeR2yzC8YNgX0bDAQb6lk0GE+HSa239C6s2suI2puVqxm
+            ZTk1sjr1eZR6bVGJFqGYfj3b4YAf8Wtkaud7Ic7vj4MdQSAEGM9OytzbCoErdQs=
+            =6uBl
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-09-11T02:12:16Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zAQ//eEhlT3wKeFrr0gwhdld+rAiwFnvOa4h15W5+zDvY/kiO
-            uRqxyjtPh4P6FE4NakhJPQ3Rxjm7LzsdECLCWIXfNPYSlk5U87pSrrxPEHyNIgZU
-            JH31pPhWVxSxw3KepkZp0BkZj8j8cEyqtQ7i1CuBR8IEB+ZURd5ejMBE0fi5Don6
-            oAkM77YMANiM2RkRf5XH7s4QqKFp/MxgLfd66h2G7ZMENyyBp4VGQAGdUsW/R5Oa
-            dhrFklp9/3wPgGZNWLsDbf689CNQb0H44PnR2XrOegnZPgsPFff63lT1oKmtXKNA
-            SHygqLKetuMx0gqZj6zPT1UviemQ4/3O/hZvNg3zicOa3gR9JncK0nj+IswQSVZY
-            OG8rxaJADz56qVAu6GkwL7eQTH1WvMJe0ci+4illngn+qbV3Q0D5dZ01rdGVTIBK
-            /3WE7CitJ/TD4czMmWSbuNvgM4yjrb/pkjY3xQeH+BTAIRsZsJPnlPqF05q2VMCQ
-            DKdS/ZTzd3o7TRwUsiZ43/5EhNawXxLhpK8eIz7Wa2IkliaE3FA2u6kXQyEj2nLR
-            Kp7ZKTwSE2gfW0fzNS4bANBel7rr3vFzhZqpmJaunZK0VhdH2CsWPo8gURKwNvTs
-            RmGn9sukM7CBC6rcxqcgBaCf1R0Na3daWpv1ZfjynaZtLMTandaGeA5k0QLa6p3S
-            UQFlOeES9wMHXYkpAuI/QNSrUfxT3djT5HKLExbCqi+FGYCl/f/110p8tQFumB+p
-            ogF7mPFO71c6A8aecTSruwZpNInJTpcCmIzQRtv/ii40bg==
-            =+TRF
+            hQIMA8zMZ+ak7y/zAQ//dDIDXtQ7E4+2/n30A2ZC46YzXIHCsT214Z/bsPWHjQx2
+            eISuCOuUDTg7IuNdPJU9wXkHioC4xhPLJUNT4zTwLNUkm4k145i2IK6x3uLRc/YL
+            X/hNNuSfxnkWy7HOM+dRpPWe+8SzyFAMULSbSSyOGfIwB+66lyz+JPu0E7eBMoXq
+            Z+5HVT1va/GPFOTar22EFGRq3dC5/GlhnmT5KUyt8sWRlLQnphx92CsW+HFHcGCW
+            yK6dkhlgd6ypvQKKjdRvrGs4lQUldSbbdQxMwOgiIK2OZg/5edIipdSelRwmG4Sl
+            KTMsKVWf7imywVvfy8c1I8RShVAVMM1DeWyDSCwrWNSrHHXYUHwTk/jADUUOtAMd
+            rfYI0FDzlW/CKtFRTIy4cvrwf9upDd3olVm9Jd+RC6Gr7o/cGEZP1rZGo0E5Ky9Q
+            bNCqsqwCbE10e52Y47/sTTP0AdO9OFLG3Sjjc3t468OwEzgVjHd17xReBjpf6Uxj
+            ZjGdfpUSiPxMsh09HEHMVIOtIGLnGUD8f16eAg/LB8s4bJfjeWGu2M4CnVLD+CD7
+            5PevsdfVqF4ggfErJrqw2IKgZdPP32BkrdhYsKCVWRUWA1JDzavXmQ56wcygJoC/
+            ApiaZR7kOEFqcJjuawkEsFOZ2JaIiI0+liKSXrs0pUw6KAiOYRL9z7Q2d/r1qtDS
+            XgG3K5OJwrSR3Ixq++/zyW9aHPYr56xu8jYAj2nmlJ1urmiJdpNnLDzJQ6TivW32
+            khoHp8VA3u2ovreQ6hcXRnSocObwOoR8M3pGgnGb3QasZpj6cKOa+p0Ur2+Gpzk=
+            =Ei1C
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-09-11T02:12:16Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQf+OaLd+aWluwr+he28LPJ3YlwOBq1SeffHvkQzsm+25hRs
-            gpicio0eEvMjzT6YFNsPXfRuarbL47T4OmPNxkivrUKXQf0r9KSWmWcjeTIYvHk7
-            QYwJuAnGqFaQg1VckGOp+HPJXRnCeumViRyn/IDzPVNDwIQ0e4Nz1B4ybsW8++Ri
-            jSEbKxSexMpce0I6FL+0kILMCdCTacyjE8EzLY43x13wL2oxH9AnOSKlqsv/EVg8
-            dz/yIBR6v94EPMOvquWaunlYE0OoQejDw09IovttBm2AjsRwIESEDDI3U3AUhKpO
-            7cLDQD4SUzPYBtN7umKzsLwH0SHWAxentxi9brYVB9JRAdRb3SlEcybS59lXZokc
-            OSunJDWYNJHDOBdortMgUt/N/1GNMyML4IY83a+sJ4fSJaLlSDVQ5ygmWf/mKfcW
-            1TxZa63ZIgcTdczAtiVysiMV
-            =57Fi
+            hQEMA45bZkLXmBFpAQf7BSX+6YUouF6QaOZpiUBWT7vHLYY21J30OL6zpABOTHOB
+            X6WVTeNpTmmsCrVoHqxppz96MJDNq0tKZTB1Gvl5CO8ggjOE1RGgfC2z3CrSWMJU
+            A1S9d/JoirxFaso4BziZmw80fCbJOuNz/o+7zjd6BnMcE/vikVCDThU6Jr8nNrC2
+            jaxmDBAGchf6I///fIlmk5oR0KIYWDhVwgPn6nSgSkB2xYLAZow35jUYk2xh/DWg
+            1nPHt58AGKj872mDUG44Fne+1f5Qy7mnualOpbucUIc5kXu0DIYC1Sd2swuCph4g
+            WEU6c4x3wYfRR9Yc4dRbbz81WajIZt4kRLhMiM1PftJeAfk8ynr3t4w8LViEcL2z
+            aIB2PxgxdJuSS71qHj91LsUBpymE8P0GKZgM2d13ZBVhncCSmlAC51imHvg9gqY2
+            s50mX6IbnjbiWzOMD/JnMbWy1fgts2AZc2YNB8o30A==
+            =8LIf
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-09-11T02:12:16Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6ARAAoX8tz7sX+LeGKQIwZRhuJyaLuNQgjGStOSzUNH8YEmW6
-            0XSGglaaqpBLjiNMVHqwGc57Cq4w4vkoxPOlP1ybR5CxDxuqhVHYiZRLjNBsl417
-            aiKv8A1zQzr4ve16ayFn/xPOc6Vohc+7VXxvYxLh6bv0dQCmtFc9Rtu8WJDrZuzr
-            TNp1sJuzy1Zjcgz18Jd2sVYC3P49Z0bxsQORZiIz6eGcTaTYTjp4tvwK5S0AJUt+
-            yDewjYhR3XAhbhHMs/yVtHlsE9kGpcuH03eowgvgma5YN4pFGlEvEP49dYRUqFzJ
-            5ZTvfOooXN4F76ZUDRdbFF64ETmp7HZQPY5UoB5r9dbn4jFTXcX+Qv821A4RObtg
-            c7Z+QcBeGAu3fDtIm9cNwFyIbrLVmA7mmaaxswh2qNohLyudj7v/f3NiCBKA0IN7
-            bi8+aSkc1qi1IAl4bPBlKcrOdHvg+3k8UJHhcEBUPnDQw/1ha5q+3pYScUeYCMhX
-            2DIIhV7KW538jxNnmLGTZL2ygBWO5GTtoHWVOUWEWSoofjjl4+7n0UWYXhyC8P5S
-            yiYLCqqvKbBrNVG7fcc4953Q4KDxgC/78acrLHSAR4Pizq1E/EGBvNfNhRxn2QIw
-            FehBz4gCpRXUYjtmcP/WxFnEOhwiCuZgbaqnsvR7Rkf3itBgu+l4vghm9fbVVIPS
-            UQGusiMkV7Lm5VvNuxyU/tfP94cQzQqpeAQ01Dql7oCu6bWXLfQS2Qf2X6EdgWGn
-            55nFg7aHJ185ovLrcLCOGibeJr040plxaBi0SAwLBc3fsQ==
-            =gSDq
+            hQIMAwMCBBrc/JA6AQ/+MKdg2dhmMwIZl8Epc9sFEiHewUSwFqIweaG5QR61yQPo
+            TLEKIbBfHXZVTLiMO9F0wW935rDZOMAr+Q3eaVnnYfvutc9rLzYLW0LxEbYxQZ8L
+            8YIAL5UC/8dbTLUfLsSZMQ8W/Q5au8B8IhzxKkcv6ujrwY19PP0qz48r+m5NuU0/
+            oe6Hew+501taj0qnm1kpUDhuqVj1OytVpM4AnrkQeGhUWfa3kRtyHaQHyt9g9wxt
+            iU6VxssgAVufVyCuyBLKSv7v7UEN86BdI8CR/Uo2wBAZ+oaHULUqxS7Z2Mr7Uypw
+            xN3wd0KRJ8sLrJEwLqcg5iQoM+oEBQDkw9g33xxnJzPOCm6e0R5/8H8KJIE5R8p/
+            bpDpPj7G2j7TiF/82ARf39kfU9dwOEEK9q4tTgXkc6lS8PcVqm3rzAq2f6iAKB7Q
+            rnsU4HP+K0q+dJsTSvJNfUFySGyxstDR4AeLYy9aIlqJ4abQ4KUcNSMllRioL8cC
+            7jjvQ1HeqNmD6vzA79E4VeFS3XqttonR53+g0PzQaa5ZRklrcj0TbvU4Jofg5Bbr
+            yOPA7OmnG5phrE9XvToe71fdydKjBlxestWe25x19bf9uUuJka8QwUW0eZhBK0V9
+            EQsahkaVMfvXDdpE79sHNejffKc60866aPE8i+oSs1GDXjZQ3ZNoVQwil5mmkgnS
+            mAGT2ROcz4iF8eCHBbHovFLFdhjmuU3N+AfnTiSae5lVqifQXHBtIaC3Pf3Vbr3K
+            P/X+IeJKJNueQo827ANKs8LbyQeEO0KxCo4rXOcRqTHzPNJIjYtG60KUXrrMmAU1
+            MgS8JwW7kkHo7B3uH2xPyk7mID3USP41JxxoMWvT7r0ztTutyhfZ830RvuGwb38V
+            ZxNGF5W38akS
+            =QEIm
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-09-11T02:12:16Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHARAArL9srq6qzUsWBXjFjwwJDedgi2mHhS5AhY/PnsNvrNGL
-            THGae2Vkw4B6ZtO3PAFnCdu31SlNMePhMA1ONz3cyVHMHfxsHAXfn/3XslYFsxP3
-            NKtD5/ueW9IPVpB7bVEYM0CAL3BZGeyEw9Wk1NQWioqt/SPK2Z0IvrwaTXBmeEIP
-            mB81mee+u84lPIjO+frIy5oPLuuBAYufgu72M1NsGuJ3Woj5ksYbXXG2h2H9IAPQ
-            p8VW4FuiK5Gv0rtlD/Dih+58b6UCLR5R2Fy1e1wD2el5d1+jXPWhiKLfNLLm8GJH
-            tWWbh8LFaY0hKZK6mOiVFydGpyRa+SJksoBHswfipbPENLSAJ6pdXDrIXP9jWRYI
-            wJrNq8yuOp4uabNsiAuP+OcFqYmaj/J2jddoQ972H+g3fraGnOHc3H2tslMJy2O2
-            VmmdjeLAxH2oMtdPn0BjQ1whnr9ymti6dXnHifao/D9MX+leCxoJn9F55En5RTpO
-            Y3MYEIZfABNZJZ7WrShf/utk1nEYygJvUj86lyfIVmQbh2FO7g05jFQzQohUEyMq
-            e1iUeRWIdHnjfPeyjA2NbbFQtYJMVbcBl/c42e6ApdUssIAWJkcUf2IRfM/efvS6
-            yn4lz9xlJmLg9bva23eFPFg5OwDVFCDq0+FWLP2jLSH23qNjgzRVvZmQtTGA+hHS
-            UQEh9kJYSBmMjyRNGEv37DiFjFa96CoPEk4I9M+yxA51W7q5N8BRJZ4JXTZUgD+Y
-            dWyYQBtx0iYX0YbKwQj5Zo1sY70jcB9jvJv+OM0N9Z16dw==
-            =CgE8
+            hQIMA9XEenRNYVGHARAAkZaDHyiKvy9jP7MNwSpQOLBmHqFCIWIav7DpnuTMroMT
+            lWKzeFC1zHI1bZPchFvWAY9AgHBLSlT3PK+OoYUS2E9ZSj65kft08TNS3ypmMO8t
+            aDQlb3JltGpt66uY3i+0jNjymkQtHyAe06tln3xGtnM54FC6fVOtTL2Of5F5zjuY
+            Yf93rsVFn8xO7018+xZWWBMRA0TOJqM5X1FDcJqypgz00QUf02oodTk9oZDTeKKX
+            J02W7T/TIRMS8IFWaQe+++p+Gm+zXDZZUB5lemIHtPzb/E+OB03BBlv5ua+v7n8C
+            +A0F3Fq0iy1D5GssE+gxy0P8IsDo3TXkltUvasytx8kkBjvnCj0tyfJISHJKyXbN
+            yO1TmYRnWNcFX8G/8b3GTDrYOZ65pP2+CqgEBkPy2ME4q/zdMen+zs1w3rGrS6ST
+            l6eTAOHKTORoTOAu1UYLko5yfTceVuWNO8zciA5h3Cv9ApulviDQpBfVSiz91Qwa
+            E/i0LwBva+81Zezeagq9kB8X53caBh6aL5rZdfjOTDnr2qXRz6/g4xb0ez4V/j9Z
+            Rum+lvmOgzMR9L0fnIfOhTs78/IUHSjLpSvkciejX8e9oK0fOwn/OpEiqh4Gsq9f
+            oqZirX29A6Cxcou9tHxmL+AaY6Ieh02p1Ug/nL6VQMH+kbWHkfLyL4GqoKcllUrS
+            XgERYP0tm2eN8jF7KQLq7t9ODJHZHtyPePcujNh87Xm/rCPK1ORigJ/sDPw9ZZZw
+            UF2/b08CSGw0SG/zma7X6aq+ijY854FMpWEvnaZNgZhQQtibkBUTghpACebCHws=
+            =XVwp
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-09-11T02:12:16Z"
+        - created_at: "2022-12-26T19:09:40Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/R/DLjaRqpV51Z/J9mPCoXq5edGblOzP3f4D66uYpw9p5
-            z6EV+FSzE3cLwmdEYA0mPDnnYBGRrjPEAPYZoJXymhDq0eQw/JHKNgOJv1M0QFzZ
-            jFoelcxFG/JysZld+ZH2TsYCiAdzJ6GVQH6DSJZVY3J8ZNTmxhm0jx1+04TP0Ybr
-            M7M+h/oEMgQMNp3zE3P1EDilgku/PbeHnXlyh22ORV9EHewc01drDYNcglTDMgy/
-            p1MnCOALZVTs3lHngRY4dBgI5aBgvAcMrO26eUf8akE+nSFWJnoqNXUdX6YEyN2P
-            71YVE1MbVfqXJ73JUQ7E9RkeCMp1Oh6+CcJ44qv/QtJRAYpVGRXdrbqZq+3o6qJS
-            DD7DjvbN2j6GQb7zSTR05TG3J3TJhMucXnzj/dyrxW1GazNJXTlraX4Piahy1mDH
-            7hH8146VptOgnmMwK3nYEYQI
-            =0wRw
+            wcBMA/Z87ylQaotQAQf/VN6CV+a7Y79g8i4YNg3ljperMQBpUIDAK7T5UsbRyxj1
+            Jm/hL3dyplhhshW3fiHqOScwpXjUt8K83tXx+cYUdbkx1BxPYFMlI6B2crRYTDF1
+            gt1nV2tPkpa0vp6owQr84h26s+nyD0kWDLIkeDTlgmGVgyu3/Q6QsKWuSRwVgJ/D
+            DiIt9ooUSNmtqnIyGBiGRuDjWXMK01uGalyTJbZpobqcGXNqyf43IZjhrsOgER8P
+            SxQG9qqsKFinh5NOe28Jv+Luw57U7JCTUGRXAwHk8QCh84r8WiOoTzJWYfvI1dHk
+            WZwnh4c4ZvReGpvllKw26h35tq5kCDIZGXt755McEdJRASg9tt2DeWRI8txhYDBz
+            yHlYeXfXTOZqo1g6xnfEtg5IiMCbTa7Vg4Kp45drcvBAtGvmKepZjWxLvmM3jkOr
+            bUTWb8SBDMj8je2MHXmBtAXI
+            =+kV1
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-09-11T02:12:16Z"
+        - created_at: "2022-12-26T19:09:40Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//YIPDgQZq8wPCue6Qb28Php8B18cZTxrX8T8aFYsTP9Te
-            amLVwihegCkekv1HD94eI/HmOpw9JnUeJZ1XIRFACK7aMFZkwndpsJ8TwqjZDB+y
-            Lb34uVjq5wsKmwW2VGwfjt3InTXER6jYSwK/5mB6B73LgmPqNUuNjPquxUeThoUP
-            /6W9GggoX11yKQV550hWrbBEo9pQAgrIe1jDFb+dSqZEl2K1vh8U2PKlX+u39KOu
-            zEqzUK26ZoPNc4q43C+mRCXjCeNaUF8PvO+fvWzqdFh9VZr+ozzcaFaXOtS316HH
-            9XBMyL7/SKjWDlNH1iq69ilLDP2YlXl0qUBX9gHE5eRt18FpjAyFD7lJ0NVl2e85
-            Cc46Ein5d6h8E0Ljr85a9O05Y0eiRadIzD1jiEakk1PPCvy00vWTe1l1TpBP1QVS
-            eDoM7PAqf5nLpUwo6Zt2ofsZn+CEvMeCp8J7UlTfY4JUUfAr/fC6RbRiZlkt9ayt
-            WwN++6pwG0IRqmRB+eQBAexJJdqeltdvHTWG2McbAwUWnrk1/298t6Dn7AZYccc6
-            CX797pK2nzz2TCaehjY26v4aIMhK0SdbLgT4+YS3WU1V1xpY2KALPD4fJyYxsTba
-            rTnIdpmo90CI95pRtETAevYhyPeAfWoLw2G8O8fk/7MDCD5q85MIYT8XUOzFbq/S
-            UQF26hrBgmsar6dJnBFw3koj3VmXV8QiM9akvibvkKHnF9QgMclmpU8pMxWo0qXL
-            6jcFMjhS3YZVN9b/Fpy3RR+2A2Gps3bN7JQ0P3iOUq6SLQ==
-            =QWMF
+            wcFMA9qJIVK2WMV7AQ//XQJiFb7A2TkXlZGiKJhyYg64shnuGtSIrumCYR4RShKx
+            kvC61y2JvEyibfIs18zfriHKXH59D5kBxy1fuPJyD+P4NgHW2GK3cK5tQ5HIA4h6
+            kzaBk2QuoGbHVqjvZGXryifNT1VaNS4uEOEiBPx0WsfsAMhdFCh7Zog7qfWL9bPS
+            BCt9fMvI7puUlI/cvxfTcjCV1JiVBDMkf0EJeLg1rpprm3w6wgbHE0vmuGUJci5F
+            MaieHMXW5WhtS/aCpYAOD0Watg4wBVOD20vxJY80o0/MxsMNusDsXhVkA+mVSNdr
+            JTDTNt6KQhJ4HcwhDXt8ImDKgQ2v5oVelU6MlGBL6DwlkOWXyBsd2JJSz4yjEQFK
+            GXlT3lcoSDKUliNYj3Tfnyf7DG1VlsqpnACQPStfYs2FsaKTAuC8B89ojKR46NwX
+            K4l8LzPo5bJIYWW0h+ZcwjmmHhxO6xWOIMK5N+e2fN44ykqL6VqQ9+0ziRqH7ZR1
+            CbCCOpSuSgpr7rCJcECqF/HinPdkb8QEHEtQVYN89+fyYCfgGS1i36jppRmmCZ/2
+            iS/OEo9t7TBixpM0X6bjaQ2oikXAomZt1qO6XIg1OWCEHH2odtAwAP07ABI+p5Vg
+            zTg8slHAMcZXPNZ+m8soTMDJ2PoW2cL9uEXW1Z9RclEV4kvAraytx+CJkqOXqZfS
+            UQGRIrUgU+c5B+C+oH+toFtlIPAHFu5BlNoDHQUBcHHZu+L7kFYEVct7fog4NkVR
+            CPKNMMyZpt/noI+/j2W5enHGxM3rLsxl1ABWxHq8RcZM0A==
+            =H5Ul
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-09-11T02:12:16Z"
+        - created_at: "2022-12-26T19:09:40Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ//QtWqK0zpOSTZf9zQbENt9Nx8CEluX/KnxAibbPdyoHIc
+            qGE8pW/TczFL52kw5Ry8cuytHCOE/Q7odSKECAGd2nTHI8UMQbAKLcpWnWJrodkF
+            QdXoeQEDEyHLeQtQt8zdV135eWLwMyPVfy9kIuRhuxIk3ri8Dxm4JVDDmZS+nm0A
+            WgvwvDgGo8oyRPOwQvrYq0FnFPq/0QcktsgRP+9/fhbR9jZRbcQ7aSOwqnKvF0Q8
+            FHwWp+8mjSXEUPhsH0vZ1bDT+OXW0skSL6wmHWVMfputPsVtmQwXgdIX7asboiOG
+            uQYzpy25HECVCwfNsAbG2EpdpARvoYsmSsNO+3sxp2GxE0rEcHm+oXmaNWLS4hzp
+            3/ZPAmsZborLr2Rwcto6AOXsMif9OM2A7unfIdGWJ1kO4oPTsDEacCPurtwNh1aL
+            9dQai0wWCuAkp4eFyxeGnFU3En2IhDkTctX142ALAMSk64RT0JZSTunogymeb/HQ
+            N28aOvGg2+XZjB/TVb1nyhF7NRIck9tOnYgn/L36IwKeAgAlB/3sWC1aCcVPwCI3
+            PFa2sjap5ezDrXVV5BxE8EI/rG7u6/FQfHwd24bo+Wkln2r9OTBXOacU7/Q+NYeU
+            M0F4fMasJTO071p4+VHPgfi/udXQOP5gggiGGwQUkQIgrdGowhZQGQzMLlJXnILS
+            XgEkK1obA2ZyQkCBXXKiVeBOA4zkGd1k2C/dKNAyrmse4Fk5c/teUdQctgLVymzJ
+            ucsYxAtWFXi2ukRGlWxYKboXwlhri9oXAND02ER6YkETXPQ1wd5uWkPjHYASTF0=
+            =760/
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:40Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJARAAzk1AuxBkjoZYhzPeeO5eMCjJkCu9fhYNULYFS4Ed6zU3
-            Gd8IIbwb2y2c3RWRlq4F5RKe6oRAIePX5JRUsbZPx/4bZkBhAd+xzce0EzRTuuyF
-            l786TqIJfVWaNcERGICDhogtxpNE3xdt70dNVFeuJ1Y9zqCgIHMYKfLHyUb5en/l
-            HA/LxzE/s+PWhQQzcH18ik84ce5Sg4LYIAp57WyKXCvwg+V0LYoy6qEPBShP5kK4
-            ifIuNLJcDSKWhtCoIfKzVkAb5XfbwHXJ6DHYNqZ9ZCDn0pC4AmOBRObem3XvGfZi
-            IMMQZfUHG7taKLqOiPfHF5Pv8BBBho59T4h4Q5tCaljd+9gwG1yxUWAQ73NBtfR8
-            bdapP+G6Kp5jdefySzvR3v7fm5FpAZcmz/5gCq7VHWmKkTVX+aCJqUnGOKDBK39z
-            huu+7/TpNxrUIqKbU7+YGuIo5FwgikEL4VbA1JdFiENePlFkyjawgpSjWzEib/TS
-            j6z7G2C6ml+LpRne7ZLt0iNaAGW0sgVFN5NKPgtI3gHBhFZZUsGH1EmG8qF6wW9T
-            d8EkAXcZimkBYDOSoLSV3AASQdlSOH6SGWVAjDH3as/WUqtrWBUN8v7q8N/fYrBZ
-            M2AvHrYI7qzdiwD6Ja7nmqHAANYFSwiF+dSk/2FnLARCCtStYGKr6A9HPEgwQhXS
-            UQEdLQpebf/YWU9z9j0KR11nblxi/7lOAmopXrQMJrAPkEYKjjo62BwsCrJE9f+4
-            3r9fJZ+u3Z15TUQ7uJ9mUTyHEf70e6y0rX4TP6ozujXHig==
-            =KQaV
+            wcFMA7zUOKwzpAE7AQ//buN0UL1HZOk5tvBfpjfr5PE4HwEYCEDCT9lUp0jvZ+yj
+            uJ8KmJEKPfNMC74yrAtSQMIHUoQz4KH+h0yczvll70UZPpLXlaRbHEkU65XhbkYs
+            AsP4u6s+c4X1/PWozQ/3zZO0sV7rq0Lih5v9Kd12iNdB2E+D9QNlgGrh/QHJ/eBM
+            7hmkdIFZHrSlIrgZXdxIwhGlwJiCAUWMV9cGeOvELz34gHujTJWoBdg5aHYS2geA
+            NL7fk2v/Z/01fZgT7HSW62srSNqkHK9tHOFFMiiI+LdnR6LTDhR8lDTOe6HV9Ibu
+            qFXMsFCPcuPBHha1zUbCPUKqLN0c6QL4VMVXTG8qd8pJoRBDpLR3cSOPbtrk/0eF
+            BGHYeZjEhwoY92xvRn8NMV/WmVuVn7ohpVKPZjfcTGoBqug9+d33Fh/9r6qCFn6K
+            ccQp37gqOatnLJUtlph+XerAUwxMEP7GqjseIBuztMuopUU64yvQ2OPvXbqA1HuN
+            DXaCPbHz/h7S5aJm7KGSEHcjoOsMbErF7Q4KIiOplD+ivOxd7HDjADk0q65dKQcU
+            GUm+cdm1lkQE60TFmYyW0rDQr2y5dxNkH7qd6IqOnsPIGfLkg1R2Pu2M+LVy1GRs
+            734i+++LlZCYujTRWRjv11af01w60L8IIuADane2MEIFT3tcf2XAOWgk5lTdZnLS
+            UQGh9vZ47QXY8EDB8rUrBgbzDM/qTc6X2qVBYzoy6LTN9in4UY+tpKuzksbj+0sn
+            rvb1axDwGBM4efBamIm45oruVLOTQaD2TaOHGAu7GJrHJQ==
+            =t1i8
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/ftp/default.nix

@@ -27,10 +27,6 @@
 
   services.nginx = {
     enable = true;
-    recommendedOptimisation = true;
-    recommendedTlsSettings = true;
-    recommendedGzipSettings = true;
-    recommendedProxySettings = true;
     sslDhparam = "${config.security.dhparams.params."nginx".path}";
     defaultListenAddresses = [ "0.0.0.0" "[::]" ];
     additionalModules = [ pkgs.nginxModules.fancyindex ];

hosts/gitea/Migration.md

@@ -1,15 +1,15 @@
-## Migration from [imbert to zentralwerk](https://codimd.c3d2.de/inbert-2021)
+## Migration from [inbert to zentralwerk](https://codimd.c3d2.de/inbert-2021)
 
 [based on https://docs.gitea.io/en-us/backup-and-restore/](https://docs.gitea.io/en-us/backup-and-restore/)
 
-### @imbert
+### @inbert
 ```shell
 sudo -u git  gitea dump -c /etc/gitea/app.ini
 ```
 
 ### @gitea.hq.c3d2.de (lxc 315 @server6)
 
-- copied `gitea-dump-*.zip` from imbert to `/tmp/`
+- copied `gitea-dump-*.zip` from inbert to `/tmp/`
 
 ```shell
 /etc/nixos/migrate.sh

hosts/glotzbert/secrets.yaml

@@ -10,173 +10,195 @@ sops:
         - recipient: age1zqpep2vgfqeyvtj2jpxczfgrpjffwda429rnuztfp0vpqsrqdq8s8f4yua
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiYnJPRHhWSVlyRzlaZnll
-            YURMNmdGc0ZSakdYSkFsM2pCUmkrR1ZxSUZNCittRE9UWllrQUJYRlgwZ2tPM3NV
-            cVZkdjYzenU0RTQ4ZGVldGF5enBwR1EKLS0tIEhZcjA4V2tiMFFhTWZqY21Dc3RU
-            MmlyWStDNjhiU2crYktXQVU2YW5hd0EKWuc8bhvLeEBOTbd6H5HYPSnKp1UM22zN
-            ds8mhMs8dbSYt9+pvL2L3VzS2xJT2mJd39G9qrjGEZ/o2KvW5aLBtA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORFpuSFZnSjJhcG10NnJh
+            NmdTckRSQ2dGQy9pamxDTUJQc3NMVlJzdTBRCndaV3lzd0IyL0NDWnREcnpuUGZ1
+            Q3l0TGpMeEY3dnBBRTdkdG85U3VnTTQKLS0tIDdPVUtaU3NOYmVvTFdtK0dmaXZQ
+            aXpkdUZndERtS0ZUcjcwdU9EbDRzdVUK8WzVR8jkqSsfWyf6yLMV7qFVZnH6Vgdp
+            AYZnYyKV5GJMcGcjyGpZGxoUAy5Fpxn85A4qD7mPbhfO58a9vOoAHQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByWElCSm4wYXZtMThwVVdy
-            RUJCaUJ3TTVIRzVxQ2ZndVhVRVBHNXY2cEhjClpST1llckgyOThJTFREa2tlclJ3
-            c0JVUlRoOFVYL0tMN0dGNzgwZ3dhWmMKLS0tIEc1NTRQMjI2UVN1eFc0ejBQNDl5
-            VlpsUFRmMUQwRUFDbjlFaTZoSkJqMkEKQTehwlO/14yy/lYhPQ7vBQx9l45Mr/+r
-            rsUkbRva6Zxd5Cc++31LI5tWC2m5HHyNnL/O9kPAGXLzYWaF8SUqUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZ1ZuLzF4RjNPYkFSRHJw
+            Y1VjanlGUzc5RmFtRmJOUXZ4SklqTmtwQjBBCkZpb1dOalBlaElESDdWeExXYnp5
+            ZElhRVNsTmdIMWxpRUdEdXM2S2NLVEUKLS0tIDNzNWh3SVptcThPN0tHd2FnN01u
+            YldGajMvZUlTdGsrbFFDTTF6TGJOazAKRff0/R1d2JXdxhAZx1prhaz33gNji6Jn
+            NCWMBPrw75H0uWKnZbaDDt+TDzjJ8nqnJtWOoyHQ8Kkhy+E7HxoJTg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2021-11-10T23:28:29Z"
     mac: ENC[AES256_GCM,data:Hvf+0ysqlOmCh4ZJ3QLNHGjHuQikQhZEbWSSGG98XsOoBpjFCoNtpmZpIlpKJPGLw5IXnd2MS/WPVRX0ka0Om7rnvbaCqr5wcz/nNV78WyEYiUJbyDT9nCrh5FTkwjZlbPTvc5l0xbTXm69y+uPFfg7JDdxT0fUUb6gP9IUgUPc=,iv:pN6l2gmVqmq+JhWBBFMxTGi0uFUSL23XGjF/qMJ1jqQ=,tag:L1FkQ1aScdC9iAJgwUrNVA==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:30:47Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7AQ/9Fk1Zd5vkkRzUB1fjpywCni/cH4boUdaTg7q11QXpksyB
-            5i++DjLWQeMlOUoRmJVwQu3e6AqfZJPcNX2SW51Ztwt+TUAZ5jjVJPrdpExhZ0V7
-            Vyvjf2q9wsiOEesIov6DaRGGH5KSZB0QXCo7hFDbd1fvcg1EufZ98WCyoFyn8/yp
-            q88ihPksFbVJB3gbHsvTcheYEwX6fD+EFSEKeIBnoDHRJ7/OZ2w30HLXxfLyOVxI
-            BAx+uI0mDVcNYzcQLmvX5Wnb7x/NCqb5foJnyJExqsHnfaok5xQrFJkU23L5vHBC
-            tXlj46MSoeDyGEg/K95rXXjjt+viBB/v0wO4O2s/hai/j1PYUBagCQoCqFk7fsDa
-            kYkV23QK1blHDKahBIJoLoS74hNzyAK9oeMJTvUzqnNq5CN3NGrOCH8VXNLJ7DIW
-            N8vkpLGuiyUi02O7gzTCQfhLk+33B0zMRkX8RwycLUTzbqJEMrj99/HcfVy67us3
-            AUm8ZFQqzcJDO7qf6i/W57NT5JDpAz/NstRC1WBb2lUv6KY+7zF5cbrGEu6yKe0O
-            OfcGjI4epoxOguQKtXQs2jOyWVkFzpkciVE90cv4Ut61NPVMfyQMnWVkzBbWJprM
-            7wglJu9UUoZZ77hkjMOoY5jii8vckvSf7pc9ZIthlzAfiHOYXv6GCunoP8QjBXXS
-            UQHesXuD2P3cwMlCBKS0r/iEAQKDwRIFLcEqrPxNeo9690z79JBNL4TcZ7knCcUL
-            xBSa6VjmLhE676DePitkIa+vQA1juUD6lraPfShmNX7/+w==
-            =+sVF
+            hQIMA6j84+xkv3y7AQ/8Drxx9JJ7VUhZPPGSPOWRje1pndHsa1zY4yJbTh8/22FC
+            C5o/IGQZZ8O5JNY7EN7Gvcu06RaUkMIxROhBHK5rNLpDhGy9JHwoIw9UFDodJ+cj
+            RrWGAbzgyW36+cZCFNO2BsDNOp7lKnucvG8WEpkPxJ2Cr0geSlh8043MNfribesc
+            IwAopbXcqOiyV1NGUX80J/yRoxIExFEDLG/rRSKkojvzyNTLUNq6+F97RolDAqDD
+            Wv8zZtwdF+ZPXukcsMHUG7S/60LDyepMONG8aYPQkOuvwGtah76h5ukJdbn+zNND
+            LAskkDz468SKNnh/JrTPslihRcgYHeNhPREz7TsQXq3nKA87xJw0nmsPVGcrgmJV
+            2cckEZC10fjdxIJgQ1GfGqjJ0sHUy6vFQFtWgP3eenEc9KxLTll7zTzAPv9Wkgan
+            tL43Y59qldeSwlq8Hm7qX+kFulYGAapNbu20DjHUyKI3xFRnNFUwLF57W2hIuc6F
+            fzaDgw3UQkBTBqOV7r1xO57L2Lqcz7slISzsX1oqthFQJ3jyagXKSit5clneKbDp
+            O4AqcS+wTL0ZUgTANCo8K053ivjeCkIfMWuKbZyaF7AZqOB6CiPveJYrCaUIu7j1
+            RwhuE4GAymNeEEsab6OHSKgiAfww5FGDMLVUH59a7sYO1IKXt6YTglk7MZAKBAfS
+            XAECZaE+xFzWxrSz5j3q9SFGBhrNeLW3ofFTPeOdYutwUT/VjIi/CfPSlmO3+lvw
+            blUl2i78hV4YOMohtbf79aS3zYmnPdm23IhBSkNMnYOBhpGqrjX34iTXMt1j
+            =eU7G
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:30:47Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zAQ//QuAWHzSQIHbYOBCtzazdEewvpK1cgKKenSCqjLtZ9QGZ
-            MO2b1OqWanT8P1IC7nI7mGE37+j0XsamWtkfn0+4GnZKEENOu/QRJYbvjdeVu3AJ
-            jLYgR4RQhBo6GGr/Jq/mTC53QdojAzw9kyQUnm5SaKkOlUw1qr2oL6ds4YTtJTjw
-            TFbuwFETtK//T1x+QnIY7qLNu17JNmpi/I06SDRnnbUyZe3X6ioaiytIBqZnzizB
-            zGI7Zq3iwf+CfPmqqmL6xropW6+Wt8XJ3/72dOhJAyniaT64zksLG3tf2d9wZchW
-            o9Nesl6mfUYv6GmdK4yXIxu8bODbGEs5J8WcLzKUZf9czLiXJBEaqQFHSSHQ/auY
-            y1ePhw3KD4mrPKHCW9NkHBRDvErjrZjyksK9B7Xlu7bkdDSssPxLmHwEyq1CVdo3
-            4DIAhUysfsF4goafdUYJrMp5lWuxeMGTxlY6yAXNAl3qTdhjpj4stEEqVsi9CWwI
-            HbOF6xPhDYv8PH7eyAR/oqzTX47wcE4nAt7MPKU+g1iYPQDfUITBgNgNdEdathsY
-            STR90RDHYm7ZWuh7LFVQLsXK119R/AYl+7J3u/Ap5/Kx9H1MFMnUncGqFEVCpRTF
-            ZeH7cd9VW7VlYIYCq3ze2HOCOlVkRe1L4NHutGI7tVs7qrADp9waFX0tD/7DW2rS
-            UQFNOxOWIlk8KIATrr/zUXyLyv7Zv/3IK0yGCH2mbBY7csVdDfR+N7U+XBPcu0Ri
-            4h9DKzgFzCqAY+jOGaFFYQm5N2galaaO+k7NFPhvdEL+kQ==
-            =lgtB
+            hQIMA8zMZ+ak7y/zAQ/+M5qseOYMb/WF7xLlmvdjUzkdGjoyk4o8W2nRDSOoP/31
+            NGdmyS4TIBXbl0dSNt06PnC8VwXr+rSt8rui2sa/dOfEVuPFHtPEMwuCHPtOYBIi
+            iSdeZ9HtrnTWbFpLuWRKm7sZXMtBfjz73N3yPFb3d4muDbnVKOBeVwfxdIyWRN+N
+            HmoAqbqQhKtPqBwZTa5vhXcM71v7Dw7wZyLQREQdr6YmHBFyaACWZLj3wVHb9yQR
+            5z/BqvJGi13j6ShcuRBt1dRpVAIt6ZYgl6YTt350HDepECW4k1LJT2XNASrqMrf4
+            8gIV81o08m15hqCWpwTIQ4eimrXzmnZsnP9zHtcc7hj4NjUtIwIwfmtIZuWgP6dk
+            5s8fMjWhNYv19rda0a3OBzBWw5b1IRjqEx4Yi4v+85Lzrl032s9VsgIJzmm28Jnn
+            XfBvXFKK06ndEMnP7rjED8Ttmv0/aWYS8a5Ao+7CqJTd96+aQK9PllDcKkCTu5+1
+            dxT3TsCR4rjT/rNH4p7W2+87RjNkernwWKKyRRFUcxxugEgndWGIDLz4cZVLNDdQ
+            IBYIHa1m6KfqS+U7XlcnSCG3fs2sqdhZUQdwJdd6X6j+TGTYFk/YTrKHwFRKZWgG
+            Rluc+pXvtwy5uZogBbjE158TKCJJbH5WbHhnTZ6z+v60XtSBN7Y8KAfRJ/Sxs/LS
+            XAHRe9vs+dfGwMnBYFlJxiBy3Ow2DrjrJDUFbY/nhAQw+iHCfX992SbswkhtD6/f
+            s1oKrPFpKj/wsByALK9RiEJw1gJvv8W6k5UKKqaXCEhzFqSG8s2Z3NkyRnWd
+            =38EK
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:30:47Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQf/VGCLU/vokA4akGkKmHV0P9IMVgLIVzWcWFF9EP77Sq9n
-            XO0nEbjpAxfY4yxvwWkf27c8R/iktL7Uw7bgdr6iSCXp0VrAfkVILIAstycF48fm
-            eh9wxbRcuAtxjECpxJpKayiiRYqyCwozggWpePOYOYG2AkX26Xkp6wfSimZD8QdM
-            bXqFr4tVT3rulvWxuYqrpjt3bhUJUBepeBVoU4LQxEpBk9l71StwzncXeRx5L1XL
-            8kf4avHoyk/d8PsxI6C6aWM/N7/aBtqGZFU2o+O1MYmsraZH0ZnbyeGkMhuojeNx
-            YUYpeMHMegHGoWFYEMX89KYCAES4/ZPq/jkW7kvELNJRAf6sHsR5npoL8xTS+aA9
-            kfBFkmlecFd0Gxjgs8CEdLMVhFiZcLsaSiJBmv9fSie6Y7pFzkMU8NAXTBvaWMJr
-            yw/fxkuaRU9iGgi9ZQXMxP7C
-            =izGk
+            hQEMA45bZkLXmBFpAQf8CeJf7IFw5d0iz/l6v/ENqHQtoBVt2hQ+pP9raldTQb+o
+            029bgCrqrBuYhrXU9xuNRJmUENNsHPWpNei/HyufSTcAn9j8p44lhhiIb+jgXxsF
+            GyHnJRdnp8tfm/Y2kHp+gs8VVPmxNEk4Sn9eK40CgKoXSBsrCGi0BMvC2G0a+4Qb
+            e9tJxhJlO+Mh6Pn43BUsUv6z+yPLexPNwa9ut9BJbDC6ZuMvfrLYj2popx/zkRmW
+            N04RhNIqVOQMZZEfwXp0xAbTVzpXZS49HSoM7zWFJNl9Mb/XNdFNlqz+7sRwg8r/
+            IVV2k3GLDZY1duuAVNvEXgexEuXwjI36cy+PpLtWTtJcAQZ8hgzRME202vf0Enz/
+            PujE5njWqSk3EDehWyGzTlv6Gllsik0kyELr88gHHDuyWBjclcyS4pDzfStsFTPp
+            0T61GN0HgeMuYdvma8kgZhVX5Z4VFrv2GrXmF2g=
+            =ptSP
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:30:47Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6AQ/+M2o6P2kLsR/UCXmDQ//OFjd4DlGbagflCp1i79ZyLrNG
-            2qDG4VFn/1YTrCsMOXstHwrp7QtEls59XtrUHF+3gFXSv3LAyVyLv2BseAaTjZAl
-            xBLfFdlkH3NhVVwrHaRy398su+IZF/i5IfFcOf15StFK+z2mJ3DZh17+F+5yv922
-            VDm46XdZVWZY1+0m+2Xf838k7DpMmZPgqnNfUFGmWNuFycWhQ0apm/qK4JJp5Tag
-            Ys1kmwPCZnH01paUBj9FJDWIompow4P3ZE6hV/f8LNeaE5cFGjUkK01lfXAMPYnR
-            +aOhjSV7GmimV+VQEqZbH5qzBOY6ftUWwoUymV5tAyUKBdkGA7ay3u0RiWzCK7Pw
-            09nksH56LdPgmjtduYIwtVCI+fiMmRDUixNIq7UvXuoR7nIQosIJbLf8a9neejZu
-            0HKzHtiuBdg9DZkdsCvArb8Q+GDCo4/2RTiiIFcdVrbYFejT6szkbdxyRVVH+fae
-            9bCWcbG5+LpmS71d0tFvC/jY3SweYSsxJLbmABbuNVQvlWAnFIUVtQEoojMp5Ljo
-            PXXQWSK/o6REZS6R0KUQmiSawSdZIu5RROCAAn80cGu6gb+LReJRu3NB4QX1al45
-            UAHI97Ylk6HPshyws0GxJIJS114ZQiXeefuJJP1Z3UYcnP8pK0ACmIgcFCKU6fbS
-            UQHGPwcEyiFeGguevR7IpsG9I618Yh5dqA25S4kXU7JLjjEW9kbu/tsndIbCIH2q
-            VnWBiSSm/AvHJ75VzNxtBYKyEDViPtOG/YEb41ht4M+y2w==
-            =KMsm
+            hQIMAwMCBBrc/JA6AQ//c1e+fgLzu00rSnEiMZN97dTpo+g/AnA44rE8GU9aiVvw
+            J4Vl1SxA4sLo9w8AhLv1r/TiFOVllM2125xnP9th9ah3rlXM6EnDMBsgB1TiEtxe
+            73V/BDEVpx6ewawjHL/F6uAdW2IqM2C0brkuUUN4enLMo3Ng92fDe//CY8Uquu44
+            aTRltJ6AWsGwFQg8sJ6hFfyaDome1g9/M/zULRI7rMvciOwBMGOy/ASfpuiQeICK
+            0PSrXAu+6sMweM+xHjpkpFrN6ZDdC3kFMe36b3FT7D9tt54D/WY0BwicKBnG3iui
+            d7ro0PHUSB/a2seDa+yIYSbXwPArR3kCsud/HAzVElMIdbLZ1d3eJV2JOoylXbW5
+            DfHL9z5w4O5Lu3QXVQ41QM6AbIKKFFiYQblpfTLiyY9p83ewBbmBieNrfcvQERaQ
+            ez2xTpA0aArIukjLDcC3/lu2jqO7ouugPjgq9giSMRlH21APOjXUzfArFiqmWEax
+            7Fp534bgANxthLvUFhW/OqVsa7srW1G99RjzKBtGBJ6PF8YS9oVf9k6Pj6O4EBvO
+            PVXtJHA6QCdh+do8CA/YGKbCpwfphxT3gks0JRkYhUq8f4JWnUP5gAjSL36EhCC0
+            WFhjUuVc4KXNv5hvpPXaA35CmNrBlZTh8omhJJR+GpZCQ/5VZq7i8yh5OK+TVJ7S
+            lQH4LBGrW2GexTJwVruhda+8Q7zEfkxv+FQ6tzxQIWRbcpu6SjOBuizHbRaaHg8y
+            tjqGsFaK0ywIbtdkcKXxXKUdvA5cXvq0TZBsnONpjQbUkyecw1JIyokdlZTR/kjo
+            Nh7xKAJGCDtZzwdE7JAOdJrusnAG6TwJ2YTMDSZdQW/3jHCr8ChkwnQSAfBWLK2q
+            WvJ4mDHH
+            =svsl
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:30:47Z"
-          enc: |-
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHAQ/+KA8DLDNZR5cT+gJnXRmTSdAfwVfGPNE2KUcoU/7hA+5c
-            ZSYGPwZNKV4gTGtwnYmCYmnCpEXRJP+NATr2xX0h0OHDPCPpkxNkclI+gA7Cv7C3
-            2kcS0QjiVTyyqH4zbkY0mfyxAUQWefrLS73gcV8IkX7YwKvOwojeRJP9M2L61g/U
-            Z7qFJCagzvCN7YaNIU4zIj26bxmscfgtpbZGNfAYg1HKKaIoXcrE07+80rsLJ7kI
-            4Fpufek90HWO1pG2cTq5rG3NGhxlTamTUqWeWkOotmyUfLvnpPpT4aJIW45/UhEq
-            rX3zk9ypzvYcf7ydj2HS1J8a67cip81/+LDuNDe5d4k5BbFjO8p9eY+IuBdzG2Wz
-            maya4ZI2DYpMu3skEJZ+CepVynpUhCqbJA+9GAMU0qiPVL5Qz81ttT7jjwaq41Px
-            LCtktW1f/BxUDt0iQyzNun/1ayURQTDL9hXDPNXGuClbe8xEEkdYS69k9t+eHAha
-            Yf5LCJqcUboyFoICOxTKQD/3bQ8hJJSc6vqcsVvsZSpjgP8Nbi1Bnm3+acLMsJUP
-            Ok2pI1Bf4eHSjDlJ0Ml3nW/ODPxXlbFH0W7XfpO0IYZMK+Bq9/4nWN2gngj3IDmy
-            rGwnjhaLsOTllPvjY9j5yT9GDxya+mYUk3lgK1GfeboQS5ZnKjXydVRWrL82AirS
-            UQGTNR7KTvdnYHxkYy6cX9nbeu+INx2q0f98etZGjfPHF6dG6uvuDB9j4Yz1ijW0
-            cH/mUE2zERyzzgvyk+t4JTdsitzdf37A5aJYYm18aGWAuQ==
-            =wmgF
+            hQIMA9XEenRNYVGHARAAtm48ZOuzUdMNlZMr39Kz0VMG5WrYvXih5LbF/hBxitvl
+            hJyspkLE/SJeEHz4BG4w6TNIaaW52WM5tNjVroTuKhOApQYQk6T88lDvVpUwbX89
+            PvV4jb85QbIF4NOV6AOFmtIryZjByg768Oi1jQTep71w+SiNV5RHqVWFCTjIzhQ+
+            uyjgdCATRqPAm2V/2RKA6ewhmM6jlNIbsaKZ9nXSDzzUID41e46lM6sxH7SiWEDH
+            aF+C+OWzbvpK2L7mTs2VYpZLEeZ3zjHR20svJqGHVj7uzIzELvyb4YWRfLhKpkga
+            jwR/lXtTr7IvSooFvOsWTdb5BnVcV30y7aZX16bydTJYfJJSGAwrGh794BiOStlH
+            pcVPoxv8KkCoOVkT9zOi6D4TySPuMtxHjn/AJvJ0CvWxeYIfo5SjIBurj0owcLs1
+            ZXdV4wWCKjeMrvJACza1gfERJsPq9hY4j6uYEMewSOgTrQeTf/eQgR47eoyAksiB
+            teRTRQN52yoJbVLUoJwcij/IKbI9UKp5NTn22anMP2I5RNTX2rqlyz/Dxg781yj5
+            mGjXylxDvD4HeEKTxeVcL3Ive8wmlwoFzz66gXAmJyioZXMtFv783KIF5JPzeodQ
+            pyJPv9O3I3yP+9k6iFpx6yB0vTC7AVLXmdM8Cm1vJgAnNhh9Esl35mGFXDcqUyrS
+            XAFm02PM8vhc/VEMM1Dk4Ltv5/UT7svo9+4enr/kIqsmKq053quwE1Am1eYdHpyt
+            jiRTDtjpG+yJ6oBFJak7YUKYK20Ut79f4GF4QevZ3kzNbjeTbTLBfJg+Wk5e
+            =PNhu
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:09:41Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf+I1HeszrASMO33pZgOjq3vE+3mWk2F+C67bI7lLOIRXPZ
-            4m8DKd+CRt5WHosRXi606CybALREQRNG9xWUK3piMm7fsM2ag2yiIfKipB1/XjxV
-            w8E4V7XTuAQAyLvxEA/LDV5NePdtKVecgeA5yLi15JgfTpsgM554slDeF+Lnu/W4
-            cvj6x5gjYt6wgPGgkorUhxcPzxaWK2vbR3z4SS5nd/BBMPpsQwRXBlBQZ7RjwRNl
-            DhUn0+bujSZBnRYBCdij449UWBVCb7a7BQs5hmnIDJ4O+8sMPXL9ZhiIqwBc8ucE
-            RN0QyK5Xf2vs+GW18w2QXeLdlpMSV+j1kH8pQYT+ltJRAYScMU3GphHunXqq8iis
-            M54lLk8UzLMGWmk32Y/AEAwPyH5lBtegE2ur5vbQEMw5XOSlY/m6wN5DimhCwoMY
-            7LRIIATPsdXvtmJq9FV2E3IU
-            =BAh0
+            wcBMA/Z87ylQaotQAQf9HkTyNQDi+JRRo2lpr6sl2kD8No0jrTWviNIYjGRd2aJ8
+            kxb4O941q1YDF9ZhJCUgOzI1dv00shUycwc4U0LP85cOmA+nnkU96mkKdNDslLVA
+            MKY/HN0cLol66Dtwzt2yaQyNUKerXboy6i632uDxyBMqL3wUHwaGFjf4eJn9bp7S
+            x/kXQkegG+UzrzGIFoCWbzv/IJG47zWno/hkV3sjZTTJWTthmNtlJ9Ufn1M4vHuw
+            hxiwsgCrV8nn7maGpOXFWWNixDdex4DSha9miDTvHz1zpg+hYt6L4SCrlrMlBhAY
+            IWVshOut07JeV27bOP8jRo/Q+2PFqM5rBVIBeaWnItJRATtfLTRvtSxisK5u2+Vd
+            LFdnPYkxHPYEZBvZV3HHIaJgzzh2LFntvISrdQHfw3iSTg2pjHRbpCJG3ztCWVDZ
+            19pXuiJz7K4dhUAndALa6hDH
+            =jlzW
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:09:41Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+NPSTVLiIwqdg3wG2b2dzxRueTTiVvI3Cb1ogBgJ9MeDy
-            OThmzbaGfjFpfCkQJR7NOWkI1/OtRAE75huE0ZKkOvt/t0iu1N5046AM+fkoY8Gi
-            NPyULsnUDG76UyMgQG+nKaAVIf9Bft+MZ4i3FUp6OpbmU/+VBIuS5B3aNHSzEIAP
-            FRy4XRpgT0livBY3pO31cZSla7n41IJ43yMeODWV/NqvPvSWjL4X4nTDpFwC4HET
-            RgK11KW8kPYnC5cCaMpLpep6ZX4J7Cr9QFTijTdhwogszn1cY7wlCQIB3Kl/GHQw
-            TU69Nf+SQPAASsj9iV5xqjGykuB4pX2EUcQKX2vXUKDllqEj2vYSZr02sqaeCava
-            e2geKLwACZed0ICZ7+gFSVhO7DRR0P+9bTijahB01tBC+9NcHgDwWqrcc8sg8+ta
-            AjWrTwM2GeMMA/CYTDLtMpXiYVodtpupNTNK7EZtiB0Ijo4n/58Ppislgx8L+JJQ
-            VabKdhCIMNtpUSRd8cHT0weUQULLL50/8NuqEhRN3ggb0e/8p5XIcfoWy8ycERfh
-            ppaI1/PmKv85jVCg4hskmz8AeGUMf3YZrn4K8KEKlRDOZ8th9hUpgVdaY5UQ93g2
-            pF05il6CyMX33p2kjh4ie7b7FkBsqwxdnMPvQ3u/iasvxhyKFXPNiYasR4DcnTXS
-            UQEmqeCRN3MCCC1TfU/8WYXE6IJENScRt9NObh0BKqUb0RcacZc8Cgrb6+YVlk/a
-            H15dpE4Snhh8x3bpk/qu28nucQyu7rkbzgKTI2MxDfdtgw==
-            =bSn7
+            wcFMA9qJIVK2WMV7AQ/8DfxluRc2eFlXV6gtb9XoVv5VrX9dhRqSNZG1IKVjXvuy
+            JvSFNxkiVm9U27XUGPUg6S+CMM60LJeL4ez7Xq3J8EMr+Ip8NgBFhgKrrHb0th2l
+            in0SrbAxEwWR0vHkGM+zCyC8HSp4rMG81CNt4JYgB6eemq+MVfDeaptqNSupyl7t
+            qfcPNMKEqQA2iLFtjp6Zf1ipLFUzMGEjEVY2o2yjAVekDdcFUIlANstdOzRAC/+a
+            z1CcegsXM3GQRQqhZ8dgb8tiOjwhJZqD3jGuGT1PLmN8fEEus/9Aytij9gN+bFoF
+            MQW6GRPp9eL/qjFC+yER62vj99Hi2Cf4wvdrd/jPw37gGB9P+rAloTwZOsXDJ+YF
+            qBSYLHkb0BXjBQ8aIic94xHl5RMh9rrBIrGZNLdQI2Cmbk/4XDl8QZMwRFfBvUFb
+            cInd7hQn5JNcc4EhbrfKsNQEmyArgjCbbyt5mrrTYjVYb3226Dk1pFKdTwWbpuq/
+            bvjc4m39QozjWrlVP4qiuX0IBVvat6N4dMkWj+v6QVO95F+Gtm7o8APMaFK5udVX
+            pLYWfD7NUjW/jjNh0ywwaf2w8cmR9dh1nAvXcc1E44d+pCw8ZsRsWHhhaftuv2HO
+            uKJaI3TFSZvbV6BKct39cVBK9vD4Eg4nyJuBXfUsC7eq6t+i5xhSvSDwsFVkwLzS
+            UQHx+QXuHMQzYkmIuTTMh7e7EcGcQnZFT/5fmZdEGlXrPfxovXDyxLGIK73R1TVF
+            m9qNGw25NOUn8RHEMuRx11TEjtooYCWRg9g6cpyIbLum9w==
+            =kidN
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:09:41Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAvZJxdc3kCeM1LIjOkSwNqPSbjEbDP7DUsnoRg9YsAhCB
+            RLr+4/sPW1gNOIgSUlvQyLUvIzI0MRXl1ytMtrp0xBPqLhQHCXPwJptS3I7yjcij
+            K2qt/vZ+PWIOrqAeOQq0Gmxq2Jv9r7Hy2ijadJPHLW/IvRSlBuL5z535VuM3unlj
+            6Ub0i6s/gooTIZ/9PI/EcWraxMSDJnd8fFS7580hYT8120XbdLkBdMBf4cyrk4+7
+            xLAZrNkY3IWVQywos2giBzIzENJnElcHlcozXdCIbiN9DrVCfqirsQ5Y9zNwRpWg
+            I8g4lLK9mx+BOjozQK1h0RZWqSlokBipuvt73OxMQ+xzJqw+MC+QXRhrnrgtnYwW
+            y5xtKNGN3M46M+Qvuv8swnkEQ5rx3tjtTHWrrcABTrTmtucfLmOrS4CoIg5x6aeU
+            C7j18Dzushdxp/RwrNZvbxcDBOXtjxPRP/6FxKUQVvBH4ra/dTpjSk5U2DqjDFVw
+            tltl3iOB7My9jUCz0XNgn4jJ7WRnwbX6gc2UKljbb+rvunUPZW8HVfhdv1+HTlur
+            j5ksqRbXw8DcJoKA3nhXqM01YwPmHsYi4WN01gK8Heu0NBS/Grfci4f/Iz70IRD/
+            zPvvxgvmlOyvhItWRdt/m8r7fh7A1Mpf6ITLXEbli08DyRJAjeUQgsq4m9YMvD3S
+            XAFmKzoUqyxGId3GCOKdFMGLumRhPCC0u5qEI3ytLXxAeY2QB9plINIekG4HSZq4
+            LRhgmesMVphW9qvXYtEStBdlzIG/9BjujoDyZsPUYSo7Dz7EDhLN/nvtL1bf
+            =y96x
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:41Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJAQ//QfpnCA3ueiFFOdncXpLb7CYpagdwvgsI8gvCgKpl2KKN
-            qBvihKl9VSgqtxHNtGWwkXzOp21yUMtmL9V3tECbF+yOaQKhU+wL8kqwJpBC1bqF
-            ADexC0NPhS8LsRIJbtGvseUNwoejIDIldSc8CtSKCyBc3U83vayrqhwNVBlHuP3l
-            GDijw8soNa9rfjboweLfYom97MuB9f56x7fYT6LAsfT/lCdY1HAVjvG+mcjs7T8h
-            MHr5Rv+YdVUjOW6OChIAWEPtH7wXVRrU/oTmfNDLgDz8avRcPIxE4Z0Ss2VnUxdT
-            WutoiLC0yReWktWR/POaonKcqopfFHhMm2wsMD3X1qdRL+aGCXL8ddZ+dYPy8Lay
-            4z9bEiTZBXhvZnNeMqjs0I/Ns4ooBrc6lCLLbz+6XQ7cQxnNPHJYmpk0FdHjlzMr
-            lsVwHF1497uyg8H7KBrHrpPz4BbHgjlAE0UdlVDO3cY/gz7s+VgVFWkfh+n8buYv
-            +jIVQVKKuMu9gslf1QuKw32RsT1k3CNkvm5u5/nA5pjSPUKr7fU+MhHbsr+eEJsj
-            3blJdYGeWKKDYJeay6fxFg1YlqDrqZMFfXJKB5n9Cq4dUDj12cRJ3eecsdw2GAGq
-            wiFcdbgYiXCQnlSOCYt5KSEb32WOLm4SIvVKLv94gRkNawYfBTNNs4mvDZhlzw7S
-            UQGB7Wo7ZPifwtTaCnJgTCbEug1fmIaq+9+caOKfK8C3sJ9QSImhAxpQ2N4H7qbT
-            m1el7qE+U1LW6HNSKXS6LgRaDwQ0G64jAtRfj9RXrsseNg==
-            =dI1q
+            wcFMA7zUOKwzpAE7AQ/+OvJrKA0sOOZmADdEHBkQ2Xyy2W7nVb+EQ83pqXWLroGW
+            6S+9p9sh3Y4GM4xnRqwuo19kgqosas9prPStt5b/XM9m+ON0D418KUPKuEP0woNL
+            OPl4pFcEbAu6hYeXpCI5mMc4ZTosHjg1+g58Q2/QfbPblClZYwoZbHd2ClobNJh2
+            s4IDJggC6FccIn/ydSaOuXIKwyALkwvSF5IfOwxcCDXWrtsKWWh5eR98iKJ8MNhI
+            VPC8VFpxaO6bmVdlj7KmqVKGFGXooJZ6pwZkLybPxBNx8H2okDZUHqlaU9JTrTbg
+            rN6RgynFEU/cCApMIvkvUNnth4sh3wR7lMkzyBZ0uYJoshgzioxG5j7WzISsttiL
+            OyUMcf/L/z9cNeQA+XnWPqLzSST6ogduyxL/915GJiWSaZsUdBZsTnu94VigdbGG
+            qsuLhsUqz/PbaJT22XwQ5Uqm5Pk0LH15ZvuZCDhYcpBe5QSSTf1yMDUD18xNqhg8
+            ynvWTQ5oMkoOGcWwYV5FTK2k7G1kOTeBUFCjq4soPsL6uNNnsyNMZukwOpaNLctl
+            WLvMt+qB2c11ANbEbiWm+Efrnl+TOmlzS1Wif+BJoHOUSGA/BnJVC83q/sj+kNLm
+            E+Xs0mhKo0r1P9IXJOBc8lJ981+Z9IK7prn8CHV78MtCvwZAoZiCf0bKFz8SXffS
+            UQGOsaUNxe8LgbTNMqC/nlNOPcrlcyjQs7RevyB6wYThHwwynxPVYc4wTRwZaKwB
+            eWYMdAOURC/+G3bvN0Kl7fw/Yv3DBTInkc4EjMswmRRMmA==
+            =8Ygi
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.1

hosts/grafana/default.nix

@@ -50,8 +50,10 @@
           auth_url = "https://auth.c3d2.de/dex/auth";
           client_id = "grafana";
           client_secret = "$__file{${config.sops.secrets."grafana/client-secret".path}}";
+          disable_login_form = true; # only allow OAuth
           icon = "signin";
           name = "auth.c3d2.de";
+          oauth_auto_login = true; # redirect automatically to the only oauth provider
           role_attribute_path = "contains(groups[*], 'grafana-admins') && 'Admin'";
           # https://dexidp.io/docs/custom-scopes-claims-clients/
           scopes = "openid email groups profile offline_access";

hosts/grafana/secrets.yaml

@@ -11,175 +11,195 @@ sops:
         - recipient: age1yahhqn2620300n20k68az5lr2u42wdgtjwysgqyr99a4cj52ay0qjw02pl
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdTlvNldjRGJUWWpMZkVJ
-            dGMxcXpTM1Z6aENIK1RiQXA2NTE0bFQ0aGt3CmExTDNEZFM5LzFqRm9wTG5JejdC
-            ZFJVcE5ubWp3dkIvNWxjcXJSMnZQYUkKLS0tIEJuWmNKeFdBY0NHRm4xV0RxOFpt
-            NEIrMnFDZlpNYUVBbWpZeitTYnNaTDQKS3iTlRI6wuYrjJgYcfMEBRM/SJHxlqd+
-            RlNQb34ra9KHzB4rVe+a0RA0mDnDPkFG9bL4T9CaUTwobLEdpJW8aA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjV2xpUUxrMzI1WnA1SFBh
+            WHcxY0Y2UFpJTEZvN01VN1NXSll2RDBORG1FCm5qbXV3YWMrNzBIdnlydVd4Snpu
+            SUF6VHgwT2hDcktxMFBWVCtoZ1dRNWsKLS0tIEpFUWRkbVRNOUhMUnBqZUNlK0kz
+            N2lqNFMzMGxzY3dhN2xXTU1BSDYxU2MKQYWcpbjY9V6iAptZ9GBYq5dnM4NHETH8
+            YsR+yuQOYq8esNbStgXFVpw7mv71tdAbrWxeIZ3BhMYQcC4d1QsC7g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWS9zN0RVWFNMTVlBYjFx
-            d3JQL2xmM0twdjRMM2owdng2QTQrcHd0cUFvCko1MHBnNkJhWjFWdUQ3cHNLMHNJ
-            SVQ4VndrTjdIUzlTNklXMVdWYzFYcGcKLS0tIDJYbjI4YTcvRnlFV0h5dituR1B2
-            eVN5KzdSQktNNjRyekZUK1U5SnVwbzAKbEYEDJz+gBILvt8KWLzkZ3gQwdQCBAH6
-            KSYuY9d0BrznamgUjNt9zCxWBuzIqZbL5PbTrK30EdVG66d5U+bkTg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbWtMdjluSjhkZUFpbXdK
+            eW9GY1d6U0FidlE5aEtVTVUyRXlLNmZYN1ZFCm1kMk5YZEh0Um5jVk9xZTRQVGF1
+            WmpOR1lZV2dNWXROUFZJWTZUN0hkTm8KLS0tIEpzRjkyTGdaRVpxT09td2E0dU1r
+            RzBOcmN5VStSNW1ZS1lCK2liYlNxaXcK8TJiJ5iVc8Ckd25JU1zuQHeMRP9o5Q+U
+            +0lJ3LFLTYVNXKTHHaAiR2IPnCDyDqYytN/Os4op7/R8K72I0JLp0A==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-19T22:58:27Z"
     mac: ENC[AES256_GCM,data:4RKDTIYpf4urFwnKJC4iYF+xsu7sbZiX7VtDhR+Jl9HeHEjsOWYonA0DSInKhvn0z3zl4VnKJL8DEGh6cmkAv3atHVffoURTIPzKiAjy2uVsIAM1TrmF+JCnM7MpxIJrcrOsNDDA0ZIRFtiGeQTjRmj8uWrUZQXR8jiXIgT9PUU=,iv:5QimYM48Q/oeOU653UYnVlymm3TOElKLdy5zaTTpCxQ=,tag:KVm9r1VDZBiZFkg9ohwj6A==,type:str]
     pgp:
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAAzf8vFbyF2ajzwpoGZU0IxZ+sT/Tw0cEIwD+BpNTGK7df
-            1HnNPpGPdL/lEm2LpMjzgHO85DTbqaI9kJgLkUcsmzMs74fx8lnjADlAQiSm+twv
-            +nGsalFyW3+M8aqrPGy2dpjLaZVpa54kjfv6IvDGskk3lyQFulrXRO0fJBxBmKCo
-            +LiH0uPdK4H77AhG7cn07f8N/MO+89v0l/Ewdg+elbsIepZ/EIMHHrrGDX7PPUqw
-            hi/gr5g/GpY54F+FfIBjV21bucMySgirqx5JCtG8XNhP/nwN9n6hmTfTzmm/778l
-            UYVLcewhNt15yiGtFmUs5LH7wyR4uWiJtvRMzvfRYonA9OqGqxl4CwoLMf52pwnY
-            rJqs6IJfbKjtxFi8TQYea30nXv3UPLVcIlaFsqfGela67GJFdofVS5DrRNkg5t9I
-            KQYxOkd9tV3e+twOCwnf6Fk+J+Ltzd75ABBCotNMSPgje8JOzV+YrqMNttBDmSSE
-            0WbA8aYhFbo9iVOJjXaua//MzxfyTC4+KLKeqh/kL4nGiCI3ebndhulqEJpGtb7F
-            pXNR24SdeKnMZJitfsZf9qGY/2nxD3J/l3nidwIzzJn4zZidFBwusi7aGg9mU1ld
-            AvEpeutLoqaGV7XFr38kXPeBzHlzrfvZTcLYVRDhgMXb5mPEnn54bqC7DJ7Fh+7S
-            XgGYR3qDixV1Akj/Uiuzb3k4bRgRPf27frauSOC3m0PPPx0obIsGNJDOn5Muncwu
-            h2GzY+rSrFOgyk2pQErTbkPlbS51lW06XDCrm7qznrf2bwLsUmdOsViFwxrfWLw=
-            =oho2
+            hQIMA6j84+xkv3y7AQ//WNMOBlYESGuZVrRZFh9ZWnLOHIG0ihHovgmMF4POGn+P
+            FkdjsybkG4agPJIwwMZnUuQn8DOpSk/93pdsxPFgsqpaCVu/koA+rhtY56HIP28K
+            LIz1AqmejmdAioJdd95xyK72bFATH/tqtniuQ9hw3wMxdGST7/ns72DFhw4cUG/o
+            p5mZGhhRY3UT/GqQALTdTzmY1q5sfFuwxF2FGr5t4b9HT8b8soU4YziIIciwHu/+
+            8aVADfJzGZT4iqUAHas3/lK11WSodG6IU59hCkeM6EkIHORUU7e/VdDUoH8XbdqN
+            2aVfKN0KaogtW71tmeRm9Fax2Wswc8OSOZIBCjE3RFz/QW+gxgnt2Fo3/F17cIV0
+            D1emS2xKv8YjbdVkGgOAwzApiXt5xV7LnpQKscX4Ipd7cSnAq3HApcqnmKvkFBj3
+            mGXhpV37gHOQkL8X2440bAJ+ENYYF1WwaHVipfYXqWeh0+LbCles5JhXSE9q8Qll
+            q867V5EQIpB7arKC/vwIHYeCKVgZRM/YG+/PqpzX8j+Z0qCAEzrEma3BurtBkgIw
+            bdhM6s6iPx8/HiTwqt7HciB/VYBJlcONFIc+lpecPKjZAO3uBfSTTdYNdnaX4i9N
+            irYBabr8x67TZZ9SM+Mk6hmQkvADb5ZOQYyUknCPvvGDr9hJOh+jiysDgBgIWWnS
+            XgEb8o5oCiwPDXTSVabucNPjMTGnMTCNkTNvml59lV8J/P1Hno4BFTPCwRVWG6MT
+            qSM6lq9NqrlAq3dLR8UpJ41lz5m6wGcvKVbjLpQXI12voTewFIpQwgKbZIOS7Y4=
+            =vL+4
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/7BXPwyr7eVanyGCrsskqKLcuVwmh5RfVDu2zgAzjZ8bwM
-            dvuWJ57DkgDU8v1fjFG8xRXukmBxSMQrOM7OgacVDF0OSwxCjvfJcsQD8xA+/U1w
-            G02Y2LzSISiYy+Ci9khfhtpodqOqIvVKB2wIscPSk9KGcjTLUaCQega5OAYkqYWI
-            MGcwaWUxQ7QgUAPO33P0VV9oUKdn4DQ+1/JN9SKIxY0ICtOSEmAUCIcChMSmaGom
-            JzpCHujPxzBwCFkDd5u7ffqro3j4X0m0E8FTBj8eZFXr6cL5iT4BGLgoGw56BWOK
-            LyT9cwdPUPYre8pZ/Siy3cgS7ASHzF9oFJ0Emd9cP1hEph/D/xTa7W+8D5B+jAeG
-            PMiKD2N8hzKURv+OqJ/yzHdJkW2dcts4gcX5B/n7Qs6mH0TS99xXu9jjgBYZbZZM
-            p5ztpfH5dBq1W085P3VwpOGJpXhtH9mCy4MWk3Z9pVX/yoBXIN1HrXE0J4JFr1w8
-            hmE/8j/NHTc+nnj1EeWjkayaHf2r+S5WI9xuQqtr6oZxovalW4Fr0px/BtNy1T+x
-            85dOCQIireXQFfZqAWS+mHHdYAXkep4YMZB5xuvOUdNpxaqOlCUWyup2v8TtNC9N
-            8691Etb5EPrOrJ2yrhze05m/MN0iOhI8QohKM+r5j5nfgldvIPy/KrRRvUx47bTS
-            XgGmfmSslJu/kKh2YXmAq/hMZCTlRt6Grdhvwp7u3Jcp4GFdA6QYcK+onGjw8Cx8
-            htZVjL/gyYmkwSABkfx3jmiiJQo61wwaZLV3Yjasi7r4UDjvc95IPeXyOlhfNH8=
-            =8C23
+            hQIMA8zMZ+ak7y/zARAAjCMTV8Uk7sA+iTnKLt1u2igpbK+IpzAtPuNQgK9yQD08
+            /QyNamqMz9bGrSRgUANOpjkjjyaNL2Wm3CSndLlr0thDLxStf1CMI2frRhOcBEP9
+            QvwumckbLd32lPWoac3SXjJI55Cae7sNAY3mA8xzuCb3kWkDLSewFxTYUBVTyYEs
+            Or/gRQBFp8+F5KAKHR+bmczxutAoW5kVYWp7x1VWJIm8pi7lui06ZF2rX1k8QgVl
+            Dnbmw8lQAB053b75QgXk/tru2haIAx7srHMumR/ffRpoiiZ+IKKhONNpHnsZ9SjO
+            3uV5LSXI2BiEcZ+hH35s7+3VEA7Uo104mPRfk/PAdEBHuy794DDxG/2jbZ71qIJY
+            Fbmo1yslkxlDfDCLRTBpw+bzckIvm56NkwxKUJTno241zz6DzUaaVGuXDA+PPgwA
+            VBIy2rqZQTrBY5lmFKn33r/L4K8c7LSLKIZW5J3GGOMtuZYFBLADZi4FPESKzx2t
+            OAUJW5CmqjnV2VOTNXxqhYN0FBFAOVYYHTLouNVtZD0yzaejn8L1GDtBBrl6V+SO
+            UTTU4WkDejVNen684z0Iuc33sU3Dc084u0XHJq/xBvI4eF1LQTyFal0D+5PZspTG
+            q1YwW8sb7AmnFPeNGzqivuHfg/MKAFgeO3/6QTEGYDEBmbpWLb1bxMgBa/YSDoPS
+            XgHjReyzM5fEeAuhylwhkJS4XCTa2rrRImCfoZoynnQ9rFOVK1lmV24T2TKaCH0y
+            tJf2vOYJK1GcicxOd2wHDfEO3UvULoVnZB/isim3kspEmlSgLz8z7tZ4zIqmnOM=
+            =9oTe
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf+MIk2ysBQWPf1V04wc4vOptY2ME6VVN+zT16gqgCcbe09
-            7VoI1PJeQJqm7977tntxzyHCAGv7TBlhu7ictoNpBK1PGH0rhu72NPXWGGEY/ROu
-            4qyZLReR4TYb6k7v1ZhsdtMLBQ7Sc64oNVBNlMeWW4RQKvs4jP0rZmw/wAHZm1nL
-            w1Bt/vcba5Eeo+PY9GznZMSzfO+9laP2uKqacVGc8FpxukQpOx/adPj2SFvFIu5V
-            bZ3E54nYGCo8d+e6qzbgqGmNIyv3q2Z2W6qTRkpe2j2vPk46fYjpmbmhZojBp/x5
-            1N42uJmvI0fVjOBktkXSOS8lYhZAC+o0BsuAL5C9H9JeAXQxOHQiJDR4VkTXUZ8j
-            6ehlCU0DtiL22fkG3ot4qADIa7ymI/oY2TKNyWv13b4YeeOcS2Ps1bsoM4aeIehX
-            w/80QSteJMoH447q5DgB8r5merbVZJQvvhLVKBKXBg==
-            =6+Ej
+            hQEMA45bZkLXmBFpAQf/YVuOsEEPvbv7WSZR/tuzZZqc3u6GeUWz95WOtE052qy+
+            przbZIM4Uz30a8E33KBoESXAl+TIJsa4Bhrj/9+OACjzMyA8BC1MFB5/ApM5fzvV
+            cGhcuyuk20lwWuMhyGW2XMKTknaq6Bs3S+U3z9m3m36v1ZmX5EzQTFytgkWGfN2l
+            YbBZlAmJKn3z7b/hNhJO7MF8KoJ/zMTKzIAaWnf0s9ucgkw25e0ITWVLHYGoujl9
+            9hU6n8TAzZcW+LmWNjmwPwm9A5gt2wuA2DRBmugkzawRB0bRLchiiuef/YT6Svxv
+            vHazR7HD/vdK89vdtZ9KCYXH/58rm3bdQjMP0SjubdJeAaIy8JpoyN66KCNPDj0c
+            JLgjH2hkAGo4TTffmibBLuoBjuBg83h1lo/oowHsUw2//2looCZjzlqzxuO8/+V2
+            LSzIHxiAgE7HXYOQJcvhPYwJzk2GOjEv7jXCv0DBmA==
+            =UL4r
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAjJY77VdNwknWccEDoV/5kGmI/HDTqMHR0sXLuL2c27t2
-            Wn/MJhEGCs4gsY8CKUeuEUeytZN9Lnd1liSdROOuT0SM5nZM+95Nmi8AlCXlKbKZ
-            fQpEBLJxQvkOmyUIDv9mZXORLtCrd2mP86s2HMIoOPrQ4aTpqg0MrgGPORqwOIUW
-            DoIemK1wgGmQRXuUnk1+cwMrhCzMP9MD9e9U95LDRAFev0ZjoqD+/i/LXfK+9MTY
-            naalOpUN8uhPopxCddFvUZX3JvArPmZJd2U/3wSjST997txeIpInaGtcH/rsKTNU
-            C8CNQKUNAH69RkTnM+r+08tcN++ZZpao2VZq/lMbzdKhyT4QYbHoyBSMbKwchriG
-            5yF/yp+QBY62Y9LvSAlf5tg50KPAfVSQP9l46GLrnB8/KABuJsAt6vDbI9oM6qm2
-            FstEKEjfgMMbVCT19S3sRAueJ7byJ/FPnxRklN0/O95aYsI8Pp2IG3Q1PiGGmuFW
-            JJYRtAtqqGGK7wYPN0gAuSqwgBQ7B6/GuxVItWYtKLcSIhsUtVWV0fi17LJlotxH
-            IWf3+yNS+WW2FRQNuXDqQWjFz5UcpJ0KWjZOzyvEAMlP9f0ahR8m0CePtYJp9fXD
-            j40vMij7Uwx1zZE/DcuEuiIjA45d0lxln8Wj8XtIcPq74J2XJsnA+vUD5ZCMbY3S
-            mAEdpFXc1gkm+aou4niU53/AcaTb7xWm/qBXrSPGCT00WcEamWvpwZheHoKE/YRU
-            UE9KVPdU1okhp/WTQKfN65z+Yz/mnqipVQdP2nQ5Y+im16Kf5fqVSzqzYmYBN56D
-            yLeNgZ2rvSt9ZQDUom0OWj0GrTrH+18ErEocxA7moYU2fWvWy3GQ5kQu1Lc1ZMFJ
-            jCLnlNRvHgbN
-            =0bt+
+            hQIMAwMCBBrc/JA6AQ/9HpKuUayQj8AbowzqnwBcNM2WCq5nEDWebXhF+mKqLA9C
+            xzfnUrlSoMQgyj7lzuZ2pZVT+6WlCrrmy5eiO7ApJ+cwJqhZsxrpQPAMe4rcmxOT
+            WEqvpHCoY2bDdVkx7n84MYmG5tl9DGsXCUZt3lARG+ZxHgD9b1eDNdveVLmWu+A5
+            J5eKymHTEoZBQb7TyeZiz2/Off4+ZZ0U7sHZGvuS7xHdNuhd0UFKrMUl8rL5iRgt
+            02buM8WASPRRJLYx4pQaVxxDvgJTAD8KDm8u3G1iQCEpxp3dwWWvpSU1L7qqNrHc
+            raUt48EcciuIHrxMoZFNwtM4TUxhEOrUOnh3O0PjsnAe2PglN3SinEH+yqwHWetZ
+            2zh9/AhhgINv9oaCohdYeqorYsytgDTN3FZgYMvHjCoiLlgFzi85CeOPgggScDoL
+            4SQ6JxkMVMGmofl+l9iPTTyiSlGMtSIiWd95fS3R6WzODXuKt0Qp/FaooNtuLZdr
+            v7HuKDIvvqLSityUmBfZe1WnSzwo00nDYfL4Fv3n7Vt80N7FgTxdOHs0K73WqXW1
+            bGCncHZpk0krPuigy50boOHaOW2pXDpWooa4FDLzE+n3wR/HPxBNiAWk4KljQbmS
+            K2r/W70BEqPu79pGRgpWLKpAbjwmkU2UYMwQAlk/78LiBPsgyBV6JIasPk8VkcDS
+            mQENayGryDunctXZ59uNOusypAWGG3YxDg5UwGWnmsvZt2Ang6np/M3frDUdIWSx
+            dvYsBMc7qkE0P/icJh3Tb8sDnY/iEftLV6gCT2DUE/hALDk73+76BgzBU+NHLTj9
+            7inA2WayldLYLEetxFeVqMbE1Y8YSywfPIr4oGw7JWDuvdZ8I5ftLrMeQkkWOiRY
+            qA6WNsq2A9ylog==
+            =R6t6
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHARAAhPOUw9gFA613UeSZ0WkKED/ckuMNlg48RbcP9B9Cjqvs
-            IiEo4GsQliPEStH7X/5mXNYaKoyT1B5A6pHZrB6PD6AN3ZhDZ0c+HnsIRhxQ9zmk
-            1BXibUxD2WRiWgreNw7yYV1/mfgQTOqh76epw70JiXfj/cabRB3DL0a1NsHUCEX0
-            8iq9ojjWlNDkVBEXO8/f2U1ygPNCZN7cKHl0Q0Dtf58xI8Nk5GTslCcABrhTlesj
-            X/xD3oVwdZn1YuJCyp74PDZkQAiMRsdRRq5xXGvmeq8poxCnM/mngpsJ2bRF2zCb
-            UloB3u9OuH2PcJSgLLxIQ25hIfRgn4oqGdwgup6w8qIeKcQqtByt9YhWueVEoQ1b
-            j13obTbe+60MjufumsHmo/T+r7igueFVhj7m2jm7r1hkzmU0b1j1vlS4ASl2Jvn9
-            a1PSDTo18cYctG4lVS22MHx/cByA2MNHbQytTlHz2jPU1VKTWldlvP7nGxRPCEwh
-            H6XKrVQegKgT5jWLsd76WS6qt3gtj2cWlXQrezd3PUu6Qr/Hy5rpXLm5k4MrLlZh
-            4/VLvY+EvXSpQjFE/C9p2mAU/vcT1qb8G5zWmLWOIekfdV77kXooLpnKxpFtH2Fw
-            hQiG4CVOaxhWheVCZkJgtL75WuuA2h+pzpOldCYnK4rLK6NO/E4TIzPdCXDf7evS
-            XgHKlocDpRIjkgbc6+25+I4fldxTUdt4kcjSOpUR9pM+muEd7CfXpBtURN3hJmm1
-            o5Mi/zsYBVjOPEteT+0EFOYO03FFDvJgIVkHhOo511I/1eG5mhf8i/3yWSsND/Q=
-            =A0aZ
+            hQIMA9XEenRNYVGHARAA37dUs4DRyasv6ZmmG3FHpg0ludJUPU/h2r7a7FAhT2Kj
+            PPAedQWiFn+svSdpAp8qFVCV+4HyWxgXZv3THcGDZNqZ4KdedD9GDnl4zAFPwU9/
+            PcKm7EqKjxZbera2b4JdRXISDZff1XzsBgTrtOxxfKOAuEDfahcSHmBDhw44VA/0
+            /l0OvTV7tvMj1MQ+W5lX68USQx9uHrUzYXxeq+EA59H+igW3os55xNRrQJ5nOjQw
+            t9SQbflMc4KZ5ZJA4UIvr0B4Sd2fWedsdO3SAjc1hGtv2xODTQIpFqc9tA/aygfY
+            GfqLm4HGA+iCOjzkxV0kV8VStFDqa3YdyuyBj6KoWxFfkpMcZjqjw857FNREdOLp
+            h8BuWXTdVAV3aPaY003DLEdIlmYD3znXsOL8JWBiip8VdSyYkA1lRNcJ+UCy6jjj
+            Kz17aXFwGT2ozdIyGTSwhgoR9M8JUcMYn4IiV0jiUbZaYMuiIZLNR0CulpEEYC+x
+            B+n763+09EJSU/9YvYOrJGPfbfQ7Nn6nfpn37ZqPsH1ouMVmcUa1X8ZMLJM1dr2Z
+            MRqu4fxmGSXr5TRkZgkMtAPkAarwY02VCYEvipDXKr57laBPsJa8S+hqvVcAixm7
+            ENrRu3ltBIaUHAs559Spk8Ega8f78KvJcVb9tpefN5xyPkY/dz3AC1D02Jht2/HS
+            XgGqgidT8ZcYz/mcXarwU7wh/1dR3sCXcUvIXKB06CUzypI1zvFtQR6h1nxVVvLj
+            P3nYD4KXqW3EPg3fLfl+ies03dpZ2bpp4mgJuZIhJqpcCkCb14+wXdx9h1Ynfuc=
+            =k9ex
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf+PAdWi8Vbul/ocENbQpT9AY0FoC4yfEkIpU7t/67f4QWM
-            UD8wDcY650+GXLk2+lUTx6edmlzFX6TZMVS2mgG0tmJ1hz5BH/7bO3pWS/TxMNDL
-            Mj1sFaxCM7Wk5Lg/m0+HU4mnNP0mWG+BU17yw8OOi5AhBieRGdBmyr9a6asVxgrz
-            EmCI3O+F/PMWtC8p1xpOKGCX8/21c14cKZfx3+Lgg5wrGF2YOUNhb/tdn9qkqOUi
-            jq0bpJiIahPOQYfIH1Bhm5WZVrhaLHKS+F4MlRX5cOE3SfWYvpCvjG4lGoOmMmdz
-            alY/R758Wlm262sV/nz+bP1VFeG0INwrfW8SO/5CftJRARgCrqS3w00OMTe/4Qi+
-            NPvKChl+lL0LOTG5jPsDVFEZbfdIiSo7Sp/G9MKeIw38uN509o9F4G5171v2nxqY
-            FnFvC0JEOdNzf2Sj5P9HMV3O
-            =xVpJ
+            wcBMA/Z87ylQaotQAQf/RaI/ivBBbHn1t7lDgABH6wMHYVCOwwVpdI+gADMqz/Xa
+            huvww8FRZ0ofI3bXdHP6dnkhLqxsKKmy1gLUj21wpST8zrKyUjrRbE+9dD/JzeE9
+            kgG5a3bqFu609CITcaKB5CGHMxfRekIeJ3WuzsTJrbsxfElNzuTEIOjSonzlfIar
+            zksSVBpuCIA7nFsY6cYPKTwSCtdGEr/e44pj4DPoZlsP4YILJfCZxep9Xs8FL5t7
+            /hUzMUIwlgUzRm4Ups1O3so1FAnv5S9K1iOd66eXpOQuuungKs13Ky8g1i8ycLaS
+            HazhWSKKygQL/Ux4w0KCVNiKduSS+IpzijIyE5aDkdJRAcio0RYMEQ/7ms1xOl20
+            Do8xuK6XFFsX8Z027B99Un9r8Kwv6hwp9xQIntgMIN+7DRoh5+fPSgalAOLr7lLA
+            O3PCQE4xYVyJH2n7f8dwks0W
+            =D625
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//UjuLRvYApGGN/jaCmkwd/DkFWdnrsfP+J8LgKqX0Ai5x
-            Cx1tEhV+Najy/c05hRMaLR8xyC9a+ToedSpJPbL2P6GWy4CvHnWmkG5zsmVVNx6P
-            Wu7pXK2sLBrqv2YOJxP79/M3miFW4p0K13UVP75FtKTDwnbuKVaey9CCBkAF5hXJ
-            lGBUu1HRkbz7SZzls/8Lyd7XbdeHvtIrt7ktT64zugNKJ2oLKZ9T3haUpBTXrsF1
-            mw3b+3KkH/gXmV4z1IVAD9uvKh0W5PuNz/S9sJ+pJGJT3OSLz9EjwGtS2AkAufMJ
-            f2ArmfVfpL4toaY6IxyYO0z3vAdGJslVYvtf9G5d8e5VwgDh8Rdxvs5uWInv2cw+
-            zc4Mf3RkTX3SGI2FNVIboaCpMdQzHuhCebLLlGv1pOT4FFR/K2ImtQn74hkQ/PKe
-            dDOyfLTh2DgLjX1aXdW2IT2Ejsz/SgiB208jqCAV/+rJ4LWdvaHo6ueqZKvC+sBJ
-            +nEwHBbPAZU0wtJS48iqZJ32w6vN3MwpWw8SLEiTKlDHdToZIhZT71FUkICppSWO
-            T/yffo5Ow7ydBQIWgMCzWL3NA5t3Mnah7uwoJ3yBhrFW8gRWWp1bvBPW9DnF7KTB
-            wFG8hfnolbV1UWKA3hNz2BdtqXAf89k/TFCw7EzUKSv3GR7fJCMRdCTIeyYGngPS
-            UQHlCCvH1QcEWbJbo2Ln1i1JwFZj72xbtM60HiaQFCBTO2N8GN2i04ArxlxBMscn
-            wrgycm+Kcs1l3dapQ1VpcXC5FDM7vTsyHFeTm18tkniEQA==
-            =gYCq
+            wcFMA9qJIVK2WMV7AQ/+JL85rh5F5IjBuO+qz1tRLyHeQQlehd1M+6Iyp38ZCgbH
+            P+fivUsshL/k6kNgOvt8K6yMx6c6kv2YB7eYbd7m/5kLi3Ns//bkS+IZJM9IWFyG
+            BhK5FpzBKvUh5grFnR9mri+xjn5iPF6J0n6DE2Bt+MQJVqUX08QNFznCEHnUL14K
+            JB4a8/e646NZDiEYeputjBDpU/RYA0g88OR1xCrUxwbUMjiJog4c2vsJcm6ielm3
+            XxwP4tYTft8w3lXK2zYJ7YMtCo0qTgHbkgTgWu1vcjequR000aVj/1I8i9cbdSG3
+            pSC1PbhVCETVfnIm9heL9NDukAZazwdBuCMVNaU6KJT58Xbu+Pwc9pPYjkKLcvE5
+            ni0UmsELTSyg2vYuUPyBp/xU2QGbVT7tht6KAGjp1afYrjh1RIXvCiakQe4E78wC
+            RBGU4GbglOh40JZWmwYyJKnfHssx+4+ayAW4Om/3xH/E6I/QseoCRFw3XSp2cgnR
+            /nawy22YUW5ohB/+4CFRwg5q0so7WARitsvw/+se+vn8VkSSz3W20vCwodixwMdY
+            jUxeqLUS/EAulop8u2aY77cQZ8g5RcnT9HNHJv39Ce3Wcy0W7OiNtppQ2UlpbKJw
+            veS83zFM5I0sqogJsmZFAW64WySmtMWfsF06sA7jTx0oHQyP5yEeR3/hZE3KW5zS
+            UQHPlonjCk71TCUTo6sU0GsNnunsyhGq+WUx8crfzZt5U7kHQvAZJGTvRJO6yALv
+            RFLOPWlQC/K8W4VI8b/Y8gixezRD/CVxmVAi4N+w0SUhaQ==
+            =Yxk5
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-10-27T18:39:31Z"
+        - created_at: "2022-12-26T19:09:43Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJARAAwjpteNw/faft0j1dwEbKQrr79wB1MNv9ELLFzpQRoKkT
-            m/E++5W2UeIJW+FyVoK8ro1U3UZw1+0xNC9eBdzBn1gKR1dRvGF02tWbTwrecUXZ
-            T3yOB7KMlnxyBLnAbQ1OGb3wQ2s52PFoLoWrqf9wUetUPjdLUogdsB4jElY9JqLN
-            I9dar2souwBPrwM6JAsg544pPhCglRRiRTp2IPfbAmK6iFJ0UpBZaRYo+56zeR4P
-            kclHOVPs+Uj1CKpwtDE2KHfCwaHuKkM25tMAJhw2XR3gg1dP0WwbLwG4UmcAMdr6
-            TkZRk5L8g40nbSWAtsFHZXlH8l4ScdClC/16GrbOwJFcz35ZNsRMZh3luujWkjWj
-            k77JzoDJZaqMppCIVAbFHvoUWmVlawKrZr6KLqC43VDqYoUCxk3xhz77DTkZhscd
-            tinz3cW0iVXulxN3rT1/RVIU2lRIrMeBEXqbP+Omc6z+te84GYQ5lp0KMUWVLxuy
-            cVqGc0Ww/gTy7zft/havQ4Vep0UUz/bK/VkTAugv2iLU+e2adw2jKtrws0akuRE/
-            +tVapRLD83ZtBVs0odISeZzkJCUYgE3smH8T8Uk1tGKvh7PhJ3psm0trjT9fRkGS
-            8vEea6p3/FhRHOAOmbjEokC5zbIb+Iwfdj1K8nA9Sz5c3vViOve4KR901ukuc/3S
-            XgEpNXLd+cCwWstLgKj6CscF8Z6nDIe0W38rQjRRPyt1XRX/kyFi+pZjUujoNUay
-            7iuz6raFPM8Ki1HtOTDg6RD4+3mL8dkHvLJ/Ns/BJ/ueSsieK4s9rYH9aKlHtHE=
-            =7Tdr
+            hQIMA/YLzOYaRIJJAQ//dEf04LkTYWiWm2jqIJ9bYpE+bxg7ZDWY5QPZPWXhw4De
+            dwSGs31UE2UsruAilYp0ySfxOBYEZ3E3LGlNofTYLoHekq8id0Z0Ky9/ImjCt9J9
+            8p/XnHnXw79ZoGyyzt+3xtSyRkPLZL0pxXAugdTPkZUIzdVMo58iTxz4JRM6QiB3
+            9nzHZXII/L6Tnm8UpmBYrw+HYTvM0Dg85vS3VCSP6mdLx7cAWGinZlMwLWPRSrz9
+            PXfreKyuzVOI6Z1Cwp8PLyayMsCKp+eSHf5KxjvptAjSKRYk82/uPwKuH/T7vtFu
+            qwTMyimyTVSDAIQQ5smOKswaT8qwUvKHz9H1uKdKxVZ+bh9t1U+WPt7p0ndE3uqC
+            osdIG2vY2jV163zziCpMb2INgiU7wj4b16yLrJ+IVqBHeO1Qu1eBsoXoHHcIpbFV
+            VV2iub7a161JIbJeFkrj+GysTLoiAZuv+dZCZfYKhwGNSBrJCB2kTI1SyxoflVuK
+            XxnZ3sfIDOcXqH1zYVIut8ExJUuzBaz+eWOFhWsM6MVYYpVYZKboxHdDV8ryZzMA
+            MahfUVNz1FEyLKMsy/k+pz8jiiOcQnWHVXxyCzITecxgAut1ZpI/cQx6Iyq6OWrF
+            PzXHvyw+ogyqE5G2+AR2y24GFhluZYRPIz04/dRLBCudU8/bEU/atE96xVwK6ynS
+            XgH1zCEieLlRR3ImbB1xpqWyhLq+ePy6yDfGRRDy02hv4L3y4t+YQruzKVvqSHad
+            NR3Ap7lGnisCp8d2BVKYWr2JZdRCTndxy75P0Gc8PgF6DigW6TxBL5dHr6ql45M=
+            =F2W9
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:09:43Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+KyH5e3jG25nPpYxGzGBNk7oL4kBfCxZPcaX2BVOCnHHU
+            OfXYzOa4n7aHQSTMhdfNkm+zWqjP22GYrl9zvJwHkoMlcFgfulPkrt7R9SqXvPJJ
+            CauDQEy7RusAAAcXyeabr5VauhX2bOdCnzEu6she/gg2rvlluJ1pGRbb806FySMz
+            vhoqOK3yTHYjO4SKUAzRd9UX0pIZenkGTDslOvZoAHcoso2y5+JxO4PFARoTpoXH
+            KhhNNjzXemm8QoAVDCuKf7km7IDkC2xIYJfLA8rG5aFKC9KRWookxvGLRQNRQQRL
+            pnElO17iX4Ik8JGIPklRdcMLwj8wIGWCrpP7CjrVLZTkhkL9kwXB60AyL6S/tWbh
+            yf7AqOBo5poYJbY6/RRX7Mf9+5ZfMAdRwodx0L5V6RurZ+LzIvDgXc2VRJwb7jxu
+            mIt5aTOwcm5hMrdG2IJKeHpEWaWjTJnHQqy02TYbH+/O938Xp9G4XYiRRb0Jn84J
+            k2iKI1cOXiKSMWYb6ru5hg6w1kTo5xx0ImXbONG8LVxe8yrwoWKQi/1wIdfhymfv
+            Qr++yQnW/nh/VQJ23zlZsvNHmlMSQT1Ccc/NkWULQXl2EfgHgYyXrnQYwGJh6qP7
+            8v+Cllnh3snnQ5mlpiOwVNkW0wCDfQcWGVnpx7psTBf0Uf7pa+HFv8ZtTnnopuDS
+            UQEiYr2BBuadW081xSscZDHtPWcJxofD78Ipzw6tGf0FcLRufDLjpHRDka1InWgw
+            IP5AlUhhO6NrllD+CClq33CfUzTRfjPgAUnbfiHqZN6zqA==
+            =ypmA
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/hedgedoc/secrets.yaml

@@ -8,175 +8,195 @@ sops:
         - recipient: age1jt5pj0c0fvmzg7quaucq4n2rzcx9ajzstp8ruwc8ewjpay5vqfqsdjaal8
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Vk1jb1VqWkEyVzJjeFBt
-            Z3RHd2ovSVVCOWhtSUQ0TmRaZWZvUjNMZ25NClhBNnp5bmtoSm9hMjJlUmlQNnJN
-            Njg4U2tuTGxEYUN2YzI3Y1F3YWRjMnMKLS0tIE9rbFNTTURxYkFGNmJiY1ltdEwv
-            N3hnaVQvUWF0dnRNZ1NEYVRsWmt5dG8KWcB8km2trltXoEn0NqTsj+NNa2IvIcpo
-            5msTFGOL5ln4TSXtGWEVg4hpZxi7WQ4UmhgU1A/g2Xxq1OGsVhwdEg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJa215TFJGbEZxREkxaUZ2
+            RE1pU1dtTTBFSktMREQyOXpBOUQ0K3E1c1JNCkxmNWQvbVBTeDE0a0JaM2xqanI1
+            dGRRV1daUjFQd2JTTWszb2h3eXIwVE0KLS0tIEN1ZlRnOWp0ZzdHZnVvLzUyY0VO
+            N216eDg0QXJsdTBIWHc3UUNTdEpGSm8KexVdyOqkXR46QLmxl5b4FAxvgzlfu4Uy
+            0pkeKdnHs03n4IHrGgAuvO+gm8Cw7q7BfPxnSLu8Kx0qY1Abxh9mXA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0Mm5hTXBUOFVxdWt4VHpp
-            TUNDREhNNUpubkF2UHJWWmVvU0lpZTg3bzNVCkNZNGZQV1ZvZlE1YTJMWFBzR2lV
-            Zjh4SUhRcEZDNDZ5Kzc3SXZZTEswMEkKLS0tIEU2MUNNNmpQZ2pXNWdvZUpJT3Iz
-            b1o0bEdLWWh4WFU4ejFiWU9LWW1lVzgKKP9xfpc5n36bX3qnLCwHGEKenZzgBQO4
-            fQJVL52KwkhLgC1FtdhOBm0WLKdL7cNPGMJtxlOK2Cjlt2u4lrHjvg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNMjNHQTkzNFQzZUhEVlA3
+            Z1pCbGIrUXFoWTRhYXRkNS9ZWHdCL1JDWHlFCjVUQ3BVQ1FIS3hWK3hUSUxsWmF3
+            MHJYc2VUZlNTWHdtSmIzQTEzRXNVejgKLS0tIEtwVERYdGVZblVxN3JCejhDdVV6
+            NzNoTnl6bzY3N1pYbHRUK3RCMklGL0EKtvQpDWcknSSMkSxi+VJm4ICj1+cJAGg3
+            NE5vkDvXD6n+wxw3HMI5fiJnN5sE0/tAVcPhE75wdjmBm6FsuRqmGQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-07-23T21:27:32Z"
     mac: ENC[AES256_GCM,data:b+lj4O0+2b+Ycilc3yejvV7eIvI2mSfX5IYaA/T7zAOdHmXR5BGbVdwEpWOMwFLwIgQoQrVHnm5VBEH8Cw7xHvjtsOPNNJncLPr443zj9gYUI8BXPJI6dBi503WXTUIOXM9a7Jn+NcCmDWNZqHgsyMbKBnKoRORkIG+LCzFBj4U=,iv:1QrsITOplUK/sQk+8kLMoutD3XeO04O1ZjbG3bUVsvA=,tag:XjnLgX+WCqEQK0FqAxKdbw==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAAnwYeYF4m0r21PG6Vx7havc/0zD4TjOM7HiBiAbjN+t6h
-            /5W9ObpfGTibUTN1kGAly+Buq2xtx+MFqg3TtPcN82tYtMUso1dvnHftdco23m41
-            qEohJk6KO6WHpwq32SFDxo3t7ERc/0RXDfszAY2pgjlrp6r+dvsX/Z/Ugc3sR32k
-            A0LX7YxmZGQzQJpBIuBLtWhRwZZWIr9Tg+dBxRCUncqMJs08qZhapDChXHJ3O2yM
-            skT8B9En6DKHd4ZjjcHF/g1ic04GQbvVRWcBIRwvCccnMNheYHNyBVgeAiDEiGnp
-            pLmbRhTpMxJG96b0G1jW+Yp9R53MnnSWqn1fIap2KA41WMRce2mYM1Cw/RkegICB
-            spu96t6hTa+m2FTW2Qpx8MN1HFR1sXjI0dnz0M69y/PFflNf933xjM5bcUc20Ix5
-            ppLheRPyN9gXdX0LNE4XbqHcHjpzA/WNv0bowxdx6R8GlYdhPsRNeHAmZ/LB0kMs
-            vxKPTlBgD2Z0FjuCkBojcuTxw2YfH/eVbWlUiDeqXPDUKrqepq6RM8cv9P452Cgz
-            rb5wLhfxneMyJmb3Dg9WgotP5wGllBfw/1tEZqv434DWImnYnDQIR1k4boNmMNo8
-            mVAylwCVjixkAUpl2yrQmbGBYnK12LZeVyU2P4LJIKz0EwKEDfBpK3UQy5VrrAvS
-            XgHdBaxbWp7vy7gWxx3CSpyOHrRACM0XfpH+prohi1h2Zwv/v0jlFPye0xZg+HGJ
-            QnwmUInTrnIXCYuSp1fJxe88LqtCqAB1Cs5ZSv8+CHAaMGqymh+abBF2G7OBnFs=
-            =ZOpn
+            hQIMA6j84+xkv3y7AQ/+I06NbcnOMbq8P/s1S2lYpvFGXotzmnUUoCsucvRpVUCw
+            n1AuGdjyYZYvKo/n9AtIkvSXH+YQOgl9sNIWHbgZyve4sBzdNE5gxOlv8jsgtU7w
+            opMIx5YBHw/MlCQKiukLtOB0w7Bhf2RLvt1mV1F05UwuINQb8G+5xRhRiVztAOD6
+            P2XdL9sbxkth/n9XAd19TJ2xAIJw+RIoJ3ujN4/moHfnqgumMQ57UBr1qiwEQpLb
+            uUB6zvnPO4C/w5sBkn5JdAEdw+50tZNllw2yzAniLtxo44GFyZycNwxZxfMUrfpT
+            V/OdVIwKZCjnS7aywEQ0sVD4eFCrZjE8h7NTJ+VECp+WElTM1tQ6uUrISMHafFHg
+            hXKK8+JXAAnOdGre+ZvQMClWMQ8Mluxo2Iod91eNGxHPX/ndxRuDpbgHFIk8CoaZ
+            3kwA29FTBeyRjNdDzDlq2EiY0Psu75wAOcSNaOXlic4QYMUuJSOw0EUWdKP49BWm
+            ILeBHPlHjddWEZSOze0qMCwLKnRsiZISJclAhDTfJyjAqHy6iPNsg0HvfWDkwerA
+            gflBwIMwt57GXtbbgLMCrOG1P4K+QlUJyZwOX0c9VepEt+xde+URbetOcpLg3nSS
+            ytvQD5P7Jim/agbrJt6Z4ksK1Ct7VcZvvjSYybpEbWN2I7okOUkVlB20vbky1L/S
+            XgEEc8p+yH5izpM00roUXpw806gPM8Zapfjwi68M+Phit1fxTlOUp6ycj3gZqU+C
+            Y5EVFKb+jedEjQoXl/MTjFgafZuVswABoNLmt3Qp1twYAQ8oO2UQqV4iSYazmS4=
+            =5VFA
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/+Kv+9w9f0bnDH5FqGUtFtgdGuR7E0HH/gZuX+qwqmGNGl
-            THQIzS4vmJ3EU00A0zXiHWvDB/h+m91gn3yot/KGoHXP/d2rE20zBDUtnqmPIbp5
-            cmj6T7mjkGq5+QyItj0g0hmjrJerMvruIM9ZExvTc8Sw6U/3nHn08s0+KsquAuqT
-            4Jt7PSQ57ft9gulCGEsU5SM6gnszLah/vSMcPZObYfhlhmcVvMl9vPh/4myVpLAF
-            PzYB07YirRMZBkEaKzaO7uNWW9sDqzIxfdT4vA0h+o5BNd4c8lb8xzFQBVDZs/Os
-            0atpZpnwqsVRmUDAwqoX+D+4mNFK2bQ+yzemrSYKKu7SM8FRrguAE5Dx8kLrZmGP
-            UGB8U7rYSzloVJOwpbvfuPhuVbx3+MpXD762kDqxY74NAzNHK3F6kKmQ00/Y1uTo
-            M1yEtIv6iJq+BUYjRxKHf8yv5MqBOTeDHBMYwm2qiQVQwSo888lTVRkr0OQNUsY5
-            RIggkhLwx74jYO6aK9Iquzf+p+UUKKPaAYGPbu2evnANuSLOQlRdOXS0fBqK6u6O
-            ak6zsrpQqrnNTDuG919Ug+wfRMbIkKQEhpDtvo6GMKOz1lNuI0Y4+vBjqRdnPZor
-            dFv0HaPYzn8H3bgbhwruIkIqq8/1e4wBwxkN/a4blj3mtXhQ8Ajwr0Y1WT6JaGTS
-            XgGIoqRXImWWQITuxsldAii4+3Bft7GJVMov7va4FnSwH+hD+iQWKB8oVwO+Ee/o
-            SHs+vRniawHwErs4vemUkDkikERaEzUV7wNVW/RKAv2ojE2YX8oN9vgdlToeYlw=
-            =NrMw
+            hQIMA8zMZ+ak7y/zARAA0c5XjJa9YmTgIggsRweCPAXqcNRp6nNcCO7xNEwkaKND
+            Kb6Htfg40QK9n9kxCdrsRFCssgzqVyId4ftQOiUWoMlR1tSk4xOKmNr6LDSWaIh8
+            BaSHDQTWrQE1uRYzgq/HFwX3aJ8WXOAw+onqTjbTqVlleON/XDasD0y7vNTBRpnW
+            Cc0nEp1EGMDVNPQWH66D871r3e7O79Iu2cvG8kIr6+ewLqbvEZBXWmCKpTbl6qyu
+            jbENuFE158r14Wh2Ku8eX3MUQpUoHaS8cOCP1Yd0dHt+1RHRBYyqTsBXCW+6juI2
+            Wsj6D0Xf9ZAysSEcQRYJA1o251IiI6vJJe1Dfr71XWZ0wOQ9BWhPpXos6z/Xgesk
+            bXDD1+Ln9ZL64owAHoLndu9vLZ/M9Xt9PBrMvTd80ugZyVdJiLXX1J/WoUy4OdSQ
+            HH55jCNSAoP/ZxKpAaQzw7rUA4SKKqk0LcCsR8JWKoT55mDywrmOkQGP+Zd4kxfm
+            C5rmVnTgLHLBaN+ikRHu5FkK08xzIVyYG7GP8gzCvhpadEnHe/sgUX15bsxp+NQ/
+            hh6BQ5YbdXnTcDC1IgUnlNWGJKq6bkR0GVrcDKaTz3vymhKSTo1T6kwAjqfZAUzJ
+            tucx3eArDshfZh5T043mdcdHYaRJHZkbIO8RpMH/9TyCgpaX5z1EDH2HUkxHbvjS
+            XgGI0+ppFIKHYrLVSkdA9VckojD7W+GJAcCxyyg2P1fTOi49yFxm1NkR6LwsmdED
+            3LiMxA8+5EA7cZFMu+4+wIUR6A/vLjm4btxPtFpoYXRRmjNMML6ye8tuoXav5KA=
+            =l/OK
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf+LTP7dcr9Daq0NaKPMK2UVlGYkc7rnpp88rD9Vx0OXqJM
-            KAl6REhvAuYjju/19ccXa5cAKwcU/iEaoKNd2be7Y+Xnv7KIQVgyPODh4THuG3MT
-            Deep1QmFdm3h8Zy+5tIjLM4KDA8KKmByTAZ+uUhCgebAIuCOL0e15pUzQdOuBBL8
-            2yzzL+6WvsInWHi3YT2cPUo+HBR1/WIAp4mHcNVN5ZwlAoc57wt5gUmdaY7dRCk2
-            xSCrIdE5SGmBC5CJeqWbVwKjLhFiRByD1KNtMuzHyENDfvawc/V1zJ+KqqA4fVeh
-            DPD46SACxrTsQv9nUlZkDpy5vdDC/ixQWc+2TiCzZNJeAfebVPQgKhGljxJhMK7M
-            TpVwP+tfTMqnuuJ11TdOnac9n+iP0WqiBUSQKqhxCVZcbXWqUVDc/lrPi2H+VIan
-            0ihdkyo84ngb3Q3RtjklJktvHc7KIai6Jp+VoGdc8w==
-            =EBRb
+            hQEMA45bZkLXmBFpAQgAheLbcdYN14VTS8UahQGRcNsrBu/2phQoFze38j9sby93
+            r9fl5WQFtYlhIzQcG33ECg4V5Tf7uyWs8a7zrzKj/STfpCSg1udGF8MRNWEaVPco
+            qGMxnB0k69aubFYCWXXG0k9kFYcXQ2+1Lrq2UEVHdsPD+bYFECtE1dqeptqB1QDT
+            AAIJBB8QXxT43ScJiy1FA0gE2+zGTDPWfIZhhEtsu1qO3h4Tiw7fmqFyG0aAx6ki
+            CH/ZIvPFUaSEHx4tVTubPIKTPvBkrKVo/h5JHmJvxh7ehJhmScvFzHMH+LPDzPYF
+            osTbyOT11NShVLduOlkIxDkgeYgZpyFUKOP6EDTwxtJeATtSgjf14Koj5mBIrX+x
+            tICOXwHmoJJEZdgwa5djHkyfuMMxhzI6B+jHLBEe0QKtsZu0EzFQc1zFGUmwaCzM
+            Q5PggGwlODo1pI5j5DjTrSDmSX1FMUCGKqr/HFPdWA==
+            =DROJ
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAxo2BTjkaDre/SM+YyHNe6Nq33os9j3qTRSq5QlqCGqyV
-            4HjFzc22G7WjF9QcpSbb+xzvrnAHSISsyEUxroU5HWcZK+u03HkIA5Tpn2KIyWTh
-            RMN3sUiMV+A73MqkUAwAHz3oy6exbc6QXeVcKKIeMNhr0RTXTIAVaF/1ZvIlRhbJ
-            eutPDHDAyyfXvb8T5U9zXuLoa4v69bxWQZdxMg/rJpQne8y3jM+1KV7aj/eqlyRK
-            QBF4fd1Xw2+r6Comf4B8uIAGagoCMzKbMMTYSIdsshNZbUFKwfOGw5XhG6LgUGua
-            kmpf2ZCe2VhRupHfM3QOWn7KIkdEDeAwRJpRlvusrr8PFeQfNC9JQ9oJ67SwdefQ
-            FEI7RGIedhOpMOqcaMZSBpBME5FNZVlA08eT/xZJGBYZpCLoPlQm+OyMoJVi4pQT
-            N21ZvF6PHk6MaMootZQsNk7ZRzfTS7BvQecnmct3xz9BxnK1/XfexZEY5smUodYN
-            Bpk7TW42c9YvlNzu2oYw6VD7wAnqnnPTgBVI7TcEckU95+wdF5NZbyXj0hDw8qz1
-            GgaI+TBqXVPO7TdJp98bHaEIzlEp6z+HkanXHFZ68SY/8AD6wtAbBGrM6R/y62sK
-            mBbeeEvwedNKUgpL0QIZsuRptMYUU9J+P5cHeP79M2AJHrMB+pnP7jfF6I9QXWPS
-            mQH4XQvJkS8+MNW87OkxxXA18g8u88o3EfgN7kfItivEkcsO2y1Ppub0XL6HpVe/
-            ncoaNMoKaFlDxfJ8glDlaOBo70OgaNxo2kGQhR5QMfOBDEgxhm1qlMs7HYWQKt3j
-            Nrpj3gKGpZp+zE9+LL9rDr6EXYyc3YhvwxfMo6IVQBpYcG21vjQ5LMse1GQAD/su
-            rs60uv/xP4/lYQ==
-            =c0T+
+            hQIMAwMCBBrc/JA6ARAAo6bMmLzteBOxHc8SJ45anJSdl24YdIFmjIhZhgASrUn+
+            14lx8quftC53LoDXm7Qkqo6vEm18vh1UZ2JSnWVfUC1aSbghq8fJt59/qkZKVsy/
+            CWXixBjeXCLzCmqIVKhKABexgaw1Em/n1fteROxbil5UqdBvT27NUmuoY+8Vjc9a
+            t4VMO8CN7l+/oAcNIvJAVTWMINtQneIhr9sI1zl0KXNpfg5a9+Im8pOErhnf9wlB
+            CzyuZvzCRPz+zbLtYHZM+CDf2SjqdjtZSdXC8DiMNUh31KYo9a5KJCYlG4UkSkxo
+            5gmw1V/BQEF0IBir/7wJ2qSuRXQNneBl6NIsdbTzDF1ifdJbdss/zxBfuI72Zb2N
+            rIsYJI7oKQjDuQYeDXlZ6Zo9t0SU6azJgdnVA0he+iVNhQNmyrJaX2D5gXHIMhbk
+            JYtgRH4Pk65BLywC/UVWlfjaL7XQz/sEz7GFW20dmTGkOHr6cKKJMDGBwOMXIXIM
+            Yeu3cIrrhLcIaqVBLD3dqCFc130t/vAS9BO1ioSqjr23XL9P563xHeyc1sL2TVgG
+            AlQBxJBXhXGc30GmEA/du9l6kxoenW7juNdPpgGIuUmfJw97sv1yB1c3SmHfl6e+
+            LK2xL+Kpx8zkv8MeNa24YOowjO+PJj9OJlSF3SPEKG/6OttOGWfHH/I2/g+NbgfS
+            lwGnxIdRQ/mkphhwci9Avxk8Tkrij/tOsyMSiSgNzhtGfTveGBuCWnXo0oQ5qvoZ
+            a41U4Zo706A2C+TgvWQBlm+67vaM49PmxblU5V/KxArRM5NBS4h3A0yEi6cLNuNg
+            YjBhYH8wsSyaKVa0FCvZ7IWqFo4s4kwtp/s8wONUnZkPya21j/5QyFzwTWVh9h0c
+            Fg5RiT4fSSw=
+            =JXQB
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//SFPDNtkGLq3vpG93GMh1bpFybWThOFcr5FZQQLCveLeD
-            eFG62Cs7GKn/k5Sgvjxn9A6StgJfRBluXlyqW69EKDExvTTJp/xLbk86K3xRoJqB
-            nKTl7Y0kqCISRVAY3X2haRszCmX693H6mUxePXZY65juHVUf/NUhjqjWEw+fbOQO
-            puP4/MnV3PhqpkAhQ3GVr7g3YQayP5NHhc5z2Cwwo+/wH10iH4V1Qb3pyqXM2Kl0
-            Ya3i+HcNe/fchHqA6a2yXkqTQO+YQosk0atdUXLwcseGLQE0GYLIXL8VTofosc5z
-            /qm5k1U+4xnq7RqLej/lFVUyLAvexq2XnYY/XTIx6iTbonzReEnqZV+/PZnM8SHU
-            1Yco7FcHosC9zyZYDInWxo/DUpW038fVSRnhJ8qxU9DgD9SXUmdpumpFBjHDJHjq
-            5j6y+RVhXFcNeyxrerhBtOjQ0crsN6wegaETLgWwtcB6WUwzFcdRGYJQ6I2DNneD
-            hSe/phjWk1wVT5WKvCc1mT4N1cugEQKDY1OoprWVpTOH4JRKjyFcEN2ma7qKtEQB
-            cvo46gSWhr8dgmnaUWjuhOoV7pqKZ0gTC5RxAr9GMkHgVmcM7iq49bYJT8wwvdb4
-            RRVBHWw8So2QaHTVyQfVoenQ9bBPYAsAF5e5OifPfOPUl4BaDr8zdwW3oU+25F/S
-            XgFiExz+xNLQq+wN/X0B+XBCSWt/r7REiNMlU7zBcBb8RxTOa/HuCLCm365ktmja
-            jbmIfgA5SEKXbXKsces8mxvDkKiTKfLl6Q7iQnhpnMB/EFiFc+w9l8uzOdXUKBo=
-            =SLIt
+            hQIMA9XEenRNYVGHARAAhEhsrtEGwchZkGwQGhfD5xpp2SqCBSKncL03ASlCaqvD
+            P9x2dyxP0Kp4zab59C28eLNozsszJfpCEVaMFPboZTGTrH6PzMVXHFNHDciAgMGS
+            JQX1Fceh4ofMvhbtFbaMWq7XYhwsXr9G2S9zRFDoo1L3S4NbLIn/nF4AD3MrKgA+
+            o70W05jNRnwceymOQ25UsMIw+wSmHTnjgp8RakYeHkMQ36EF4GhEGW9DTh319FX9
+            GipCSiqmV0Y7+xWwk2jcZTt4n+/2RMd3yanlgHdot+vxXojXofFv3TMPOIvQ3CeX
+            K+xnliThlNHzurLZywM3Dj9fHmu8Wc4jYtPaP19KWrB+DvAzqQHdAR5SzUSuKcGH
+            GhnVtJlPWyZcJ3KRXHGVWKbdFAueKts4usjqRk49jAsUjGG03Ueh7G5/OugLSDVh
+            2w3ZxM5+0lzPlvy86tUUDXSH3ojUFTD868QpsmSSYm8beCp79P+T/rA4wdSP7uBn
+            WsZrV60egQgES41xQr9K1cs+Tf6NefcijT0G11BkKhZwLl/N3tP1e2XCEw57GawO
+            6dm5GnO8tW+3ZV7xLha+Uzt8S+AJwzo25lx8RFaYvYfoTJQlpolRPgHR/e3/37V3
+            4kKU3sSCN3+L+w/MeaAB0Zd9YMfnlAZsSzkPUaf/z/WYjiBZYQIWr21UiaFTeSDS
+            XgGmkXC8n9z4Bu423VR6iNlTbWnyWa7fvVOz5q++/24lNhI6CHVTwyvHxorAWFB4
+            zYMXSYo7Eh9ge5tBixLPkJyyXER4Iyv3xGqb8Rkjn1jdNS6lb7eVW+nBKMfNAfI=
+            =zQMC
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf+I7Y+ix3lpq9uoeQNZccvuB2kklOedJSWwtg7G3WorTB4
-            aGTsFPCkV3HvoCIWU5umVhCUr/5MBPqhjYUjOLa1FGhi9aloqvwoK/C0w3a7bCeq
-            mQebI1vDWLrpvoDi3l7KzjdJdtE78Y/zp0530Scotp4cqvLnguPr5QVTS6bKL81Z
-            +LjfZQ4t0kJcrrAynh37A0tzlAWqFdxW7MmdyeEcH6avHZNFx8SUrGiUGydBLxcw
-            4CGefmj7TBLeJouQEwvnUnK2l0ZcNwGLS/b3f3kX8hhe/J8lqNZv+PucxuPxSWy0
-            ORWQNHl20GQE/s+Qr8/Nl1wap/5I2VMZucyHVawvqtJRAVUG0mV3n9bdoTMewJGf
-            wbfSHzendmC00QKC6IbEUm5W2iRkQv2PPgc3+WMa7z0aEBsbrlj+lta3Wko0FXJ8
-            RPXBbwffmjwHP303Hja98uaU
-            =sfs+
+            wcBMA/Z87ylQaotQAQf/ZQjv1m6fiX2or4XyEPnXU+IdBZaGsVwVDgINhYBn+efp
+            C756q8hNmYdTFXG0wwgJ7964Roqgpm4Z+Sk2KbVGmKIcdyO+NHTjzia1lGS4RCxW
+            bss25H4q/3BIAUdUimQe9dL3IuJef0zOytcqybsFYy8QPLtlNwk7qpzcvUBSb4wx
+            AQNe/5NE3IYDFtzheCkkJas3J+GCF5ypg75mHcxWOYnmh4SY3apH9irAsCWEAO3f
+            +IrAZsCSMjqLl/8GpS/qsJU39gyzZ/7aLRC4c8Hcfw8uQWPcAPjRhMUIAETmrpQy
+            lzkJRGPF205/gjyDXGPHc5GRGLkkS9U17Zn8OZnMm9JRAUs4LzVW0ifYZU6tx5MM
+            iU2BYMMtcT96oVVFN/mN8mkvczditDshaLspi9Af1muDC7d7sWpUMTnSN1q87xXX
+            aJTjD0CzRUALAfr3Nzs07L6Y
+            =N6h0
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+ITT+ebwtjc46Pkgmdl1JTqJdw5BW9xo0KuFUPojpNyKj
-            3ex/YhlyJJ24AVqa4yLEqS1YZETsi+VEuDn5kvWxhIPDeBAKpNtggf/4Uf+T+vmI
-            1MfhunQ8utK7rWA6ibaYausq8xj6q1X5Vj+0uopd5zw5fjn/U6WFKA/Ah8rdItxL
-            CTkWpuELJQn8P9+vo+S2zgYHxEWkCi4QsXbOKhzn2nedSmHc8JCcBLngmj9Yz2CB
-            aB3VH7l4TIy3TGSNiNkuv1576LQBBho2X0epzPqGQqmfygIItDC9GH9DXh3lsj61
-            iYSIBq95F3eDE03k1V8d57Qpf+MIr7PiNfJefCFHLJFNkbUg2JQJ2iXWLnXCvSbb
-            s40U6no30eg6/AX9Fj4n5OIi3r8U+HW5RsIhhS+r8U4v0QlACi22PTKCUi9SKI1k
-            IybXnbAt8zZzZN4gJK2MpOmIz0w/7GHnhMNIIgQmBaoVWH9numEsA2pV0ubPNOEf
-            ioy9SH3xHIZXzb7NqcQTKWv6R5ZnIuSlFSgimBvTBp+vamPFuuhHfaKEoQ3W28++
-            nw+UEojjcsa8EAGrnAoC9iqSGozK0basqQPVnAFN9qxl2/mBVJydKVYrKoIJnl4p
-            jcm1ssEw2+djClcMEQIFCXN/SgDMqGBCY4g2YxLFCg9NvMjui5oN8jLz03ngI+7S
-            UQGNLKUzzf/iqOVuugrw/oCX4amV3cZ52d457nbgQkjoEqI9+TwrdHoccNxHOxn9
-            BPsvLGzkc3Zg/fDIkf2yo/yeuw26ZMLFwBCx7yY96YUguQ==
-            =2Xa2
+            wcFMA9qJIVK2WMV7ARAAu4CYpW6Dp/GkLh6910AjaLWJY3/surEUV0Vj63OHcNDM
+            0Wir7Ex9wHqra1BB1roKxWcUV83qe0C99QPiWL3WQ7LmaQHI09YxMQl6J587zHFv
+            i/NJ62Z44UQ3GtNvFO1kjbq1hVc95g+ppUMCUQrDuwnS3GpOY1c8wCevk+3rakM8
+            tUR+bDeWeiGVd3o0nusfPnARXcwzecszUIt7MZT+oG/nlUuhDsuK3deyZZllCpuB
+            7RfMxv3Pk1lAdPOz6y9c9MuAa/AGwqmOARj0ZAYAaV5QtJ7LXVHfGQVHgJwClDdd
+            InBpceKVk4Lowd8AVp6qwEkdHIw64U5iTAOQ7JL0HEacbDfCjKeq4i4lbsBulfSs
+            O+D4ZNOEJa8vYUAG3znRt/syzzRKaHCxYTLjn5bOxP6j7P9Ca0C7HVoY12Rzw9/B
+            HeWlHNnfHp5+uc+wVCRZDMu4dhi0NhFORTuYdBn0DbOdS2Nyh2G+O4BoShi4Hwh6
+            X1pL1DG8GrbMi2u5WD9JBLSrcPqbEEezeaF1vaw42/uY4HRhghlzvwFxbSvq9mvY
+            aeGEhKS961wtIAH1acKR1r6C/6Gl9OqedPwp+a0kHL4QAFnY4/X+aiMlul0wVNdj
+            xQbe3oN59Fx6LpwsGnkFCnjka8ad04Kqy7JTtIYzk1QUpOmZgDYAbWJ7uhAh5gLS
+            UQH+rdlnd6WSzq4fXt7Y18OSoGAaIVi43R0pD98C+4L4Eh4WMbtXrjM0FHmCcwxk
+            gwrYWx4fHXxexCRSNiNAAz0FVRsKHy360HQnqgojAkdLIA==
+            =K0Z2
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:31:41Z"
+        - created_at: "2022-12-26T19:10:02Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ/8CwhwE+Hda04B3wJGDuVnr0Y67EkFFtS+ZS1PLWGPEj6W
-            CmCkEEuZ+7Qf5v49Ix0KmGsj3zgjAOXbRI4f5olbk8M8bZAZKN2dqmNn8ZiqYaZ0
-            vGrgmDyKVnXRZzTxABxJnsdu+CtxMxU8zKwpxbge/L2Zr1639ygnJBpQ8vB4XDyq
-            mC/UiiXDPC0+gaKgLQ6erSvmpYtN0Ybyo/egkIKfP8Ox0Vg6ipaZXWLC1cM8LsSq
-            SSXKuSvtPJL1VX0o5WHJJHHDZZiMsBaX6JeiX72IOIFwAe/DhuOxrp7i0wdjgSwH
-            trYecDCcBsavlUKD0SdbNOdmWWx3xadpdIudgY/nU7B2ewL4PsPinDcFGO1Wbv+v
-            hAlR5Aht45hgGxYdnlQVX+irtxEf/LRpyV5JdO8yEZf6ihtC92tiR0pn5qv5AepG
-            Qa+CU9HqIM3q4H20U/Z3+WJd81HUPjR5puUeAJGKLSjbFnYdNKvMdEZ6WJRDjA+V
-            KrhveQYzGtOHbnls11epAQqieEucayKhviJ8WVDRDq2IVTVEZRpYOSjVkS8xe1qT
-            nQh+KU4Q20ag015G7OC66WiCnuKQQkL5D0KcKSs/fLni2wv64nG48R/p7c/9Sf+z
-            fmoab7VD8c6KhlVcWbeIsJAHTPOVS5X/LEG5XiLJ/8896FcVQpzxWjfw6hezj27S
-            XgHx3/AxZkzUu+BjjarThXcpK4sjBKtkoZ6wkmZFcCxWexSu48NyjBe+uT5WtG+S
-            bLcvitSpug3N5Sr5vV9jsNZqxp/MYZy5r31T3WAHB2OcGTpMwmc3GIO/ZctwQ34=
-            =+tZ7
+            hQIMA/YLzOYaRIJJAQ/+PTHXYK6xUop/rA7y0Emf0mCusVbegxN1uD65t1TqvV93
+            WGEEt70tLcfn9vP4QIEzkAdMiQoCecJJvfi+6skSU51D0TpKOg7wyGrDr/jkZdOJ
+            USRY6uQWYE3zTXbvw+Ki+CJsyr38TuVlpaFnTv2uHU1EDFPEX+rLg+YR9HA6YMu5
+            r9EcPghTk5mq/klw+bByB38fs3DDQ5XO8qY52adz4gXhMgUy7OqLgz470VO/92rH
+            BPt2cjahdLlx8T9pssij5FlqRA0sgvCfeJpHKeZ/yfnfZ5/yIDQs+9CB/gX/dnWm
+            ySDCGBRYQ7rR6GbB79BKRPJoe7srhGl2DNydnYEHoUGQoONIRV2I5ElpJjQ85woH
+            4+iXEPr3KmO84gKCcH4lR8uUiuQiEbJESTMWBN6tWFxp2B4ct5xR6q/inY+cal4C
+            LO1cKE4RLfwgW1hTSBE6tsd7RLaQCKkKR3lPIwOOQhtPmTe5sTOfTtt3MDt2KwZX
+            zrlHWXssY/uSryQMtsZkQM+e/k7y6IkyxkknaaHso5MkqIzoQMfBQRm6Tht9Gbpk
+            +JXaMYmZk+r8E26z2RH3lfoaZjm3NrEjNQAf3MQHJqVly9Qx62Q32RMaTP4bcwlo
+            2IxPjjQnzwy/K+3YhrGCF3A59jAujEaDasvfymSkLMJYM3FcYKADhdZOhBsbOYfS
+            XgH7YKS2EKY7wSO/BjXJ2LQoh+H08DRwpCnHGbXhKX0WyQcQnC3TEKXoCKDkoSAd
+            P+SzMW3zXOe3gTl3J8pNkIdg/dQhu0qy8qykT+AxuSJE9iGtwv1NCc86/YYrGro=
+            =K9oB
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:02Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//e6zEsTnU5IzTVqyWjutJRC8Ol8vLK5SjboAlvh+tBXXu
+            r2cz2lyMPBkNyP9lWaNzywPIPA8m+Wr7PSRIWvZwkXSVUHSzI9G93/pp6m9ApFPm
+            +vQ56BM6oik0FJQJChGIfbxnDUe2sYXlORFWI9zg4X1hdT4TJeiePXvwT7YU1i0v
+            IHFDP6iVXbGH+tbrfMzib1Y1l2cefzqWSX4fl+kJnRrk9B7FA0jR58mM9+J5Aaqa
+            3K8oGTNOjGNOwxn6m2xfs1qOcDIUnamNcYziQv4F2W3IsWz7/kMLP59fXbnjMBbu
+            8o0adbWGSZfh0dDN2rxsyp3amBprsJcvv7vAT9iUUSylNOMwo8dULM5k0vopQtmB
+            E3Z+LqaSYRdr+4I4eKQFvHn94hA0CEpBfAGM/IFUjY2N6P6HjZqaSsg7bZ851bfc
+            mhbi9/uTblW1amOwYuPSHGJHJaRXpuYHsUjI0SLsJOPT6LhMifjTmrADkOWCjzkn
+            6P3Qtu0cajeqPB+An5TgAThSX+aypLFoYsBxUby90loMXL/a6VUpIdJjYpd/59kW
+            J69cI0CxjVKJW5i7nNkQY2/FKhZ/EwqliPNHmQi8oTcN2zVo2yG8x8gtyc1cn+lf
+            RVygt0oDSMovqvUA7VwsNooev9Uc6raI0xCpKCIjJRsSY397FAYbR07JSu208zHS
+            UQEgm6+6l/ob4m5j5oLB3mC6pVY2wcJ8ANsaAvyLlM7VbNtIdH3bRZIYb6GeiGc7
+            9Q51aRU3C0FvV1/q6bKwfi9XBCVa64fZB96QPuO198CBPw==
+            =6biZ
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/hydra/default.nix

@@ -19,9 +19,13 @@ in
   boot = {
     tmpOnTmpfs = true;
     tmpOnTmpfsSize = "80%";
-    kernelPackages = pkgs.linuxPackages_latest;
+    kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
     kernelModules = [ "kvm-intel" ];
     kernelParams = [ "mitigations=off" "preempt=none" ];
+    loader = {
+      efi.canTouchEfiVariables = true;
+      systemd-boot.enable = true;
+    };
     # For cross-building
     binfmt.emulatedSystems = [ "armv6l-linux" "armv7l-linux" "aarch64-linux" "riscv32-linux" "riscv64-linux" ];
   };
@@ -101,6 +105,7 @@ in
   # };
 
   networking = {
+    hostId = "3f0c4ec4";
     hostName = "hydra";
     firewall.enable = false;
     nameservers = [ "172.20.73.8" "9.9.9.9" ];
@@ -170,7 +175,7 @@ in
                 # Important for role mappings to work:
                 use_roles = 1
                 role_basedn = "ou=groups,dc=c3d2,dc=de"
-                role_filter = "(&(objectclass=group)(%s))"
+                role_filter = "(&(objectclass=groupOfNames)(cn=hydra-admins))"
                 role_scope = one
                 role_field = cn
                 role_value = dn
@@ -182,6 +187,7 @@ in
             <role_mapping>
               # maps directly to user roles
               # Make all users in the hydra-admin group Hydra admins
+              # IMPORTANT: if new groups are used, they need to be added to the role_filter above
               hydra-admins = admin
               # Allow all users in the dev group to restart jobs and cancel builds
               #dev = restart-jobs
@@ -234,21 +240,27 @@ in
     resolved.enable = false;
 
     smartd.enable = true;
+
+    zfs.trim.enable = true;
   };
 
   sops = {
     defaultSopsFile = ./secrets.yaml;
-    secrets."nix-serve/secretKey" = {
-      mode = "440";
-      owner = config.users.users.hydra-queue-runner.name;
-      inherit (config.users.users.hydra-queue-runner) group;
-    };
     secrets."ldap/search-user-pw" = {
       mode = "440";
       owner = config.users.users.hydra-queue-runner.name;
       inherit (config.users.users.hydra-queue-runner) group;
       path = "/var/lib/hydra/ldap-password.conf";
     };
+    secrets."machine-id" = {
+      mode = "444";
+      path = "/etc/machine-id";
+    };
+    secrets."nix-serve/secretKey" = {
+      mode = "440";
+      owner = config.users.users.hydra-queue-runner.name;
+      inherit (config.users.users.hydra-queue-runner) group;
+    };
   };
 
   system.stateVersion = "20.09";

hosts/hydra/hardware-configuration.nix

@@ -1,43 +1,101 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, modulesPath, ... }:
+{ config, lib, pkgs, modulesPath, ... }:
 
 {
   imports =
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  # Use the GRUB 2 boot loader.
-  boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
-  # boot.loader.grub.efiSupport = true;
-  # boot.loader.grub.efiInstallAsRemovable = true;
-  # boot.loader.efi.efiSysMountPoint = "/boot/efi";
-  # Define on which hard drive you want to install Grub.
-  boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
-
-  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ata_piix" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/6259dd9a-582b-41bc-aced-8aff8ed9ff32";
-      fsType = "ext4";
-      options = [ "relatime" "discard" ];
+    { device = "hydra/nixos";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/nix" =
+    { device = "hydra/nixos/nix";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/nix/store" =
+    { device = "hydra/nixos/nix/store";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/nix/var" =
+    { device = "hydra/nixos/nix/var";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/etc" =
+    { device = "hydra/data/etc";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/var" =
+    { device = "hydra/data/var";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/var/backup" =
+    { device = "hydra/data/var/backup";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/var/lib" =
+    { device = "hydra/data/var/lib";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/var/log" =
+    { device = "hydra/data/var/log";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
+    };
+
+  fileSystems."/home" =
+    { device = "hydra/data/home";
+      fsType = "zfs";
+      options = [ "zfsutil" ];
     };
 
   fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/D8D1-372E";
+    { device = "/dev/disk/by-uuid/93C6-E4BA";
       fsType = "vfat";
     };
 
-  swapDevices = [ {
-    device = "/dev/disk/by-uuid/d5e112a4-fcd3-461a-b2eb-21c6a10ad108";
-    discardPolicy = "both";
-  } ];
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/61ba7849-7815-473e-85f6-d7274eda6ce4"; }
+    ];
 
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.bond0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.bonding_masters.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp2s0f0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp2s0f1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp6s0f0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp6s0f1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp7s0f0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp7s0f1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }
-

hosts/hydra/secrets.yaml

@@ -1,3 +1,4 @@
+machine-id: ENC[AES256_GCM,data:/DmTA1InXn2MWnqmhkHYWaI504qnT0dFoQj2gganMqA=,iv:bBDMsChgDqVk47MHlP3ZeGq8pxurTwMxHDhXTWOXNB0=,tag:mlAljtHyp6LsK/xtnpBfYQ==,type:str]
 nix-serve:
     publicKey: ENC[AES256_GCM,data:sR5wk7yvH5+lLpSIP0zNqCLvDRRvR8ws4Q8rVcVJx8YkrywwPcvIsJ1h6mVEu3nc6SLoZlQsuxOGCyNGD98CBNY=,iv:fFV2D27hWoxGtqVt3EnS4hMlrqW5LnIZ3LB5k4xmFWs=,tag:g7R1ossy2On6B2nVfKC9iA==,type:str]
     secretKey: ENC[AES256_GCM,data:cm84sA7E6AnzpVoYuaYepbHGWkRigLdD2RxN21UsXCe7FXQxeTQTxxbzVxJ3G9Lt3kRXuZnODntOo5EQKhs46+wzpO8YLKQxkJXrdluXoGVIWl3/6QFVq66XLJ2i6G4eBK9IH0DYJ+anj8/i8Q==,iv:GEM8Vmx0A8LfJo7QOl0N67Cgk+JqHpp7r+41VivmTg4=,tag:O4Kq4WKgbyt354HSa/7eQQ==,type:str]
@@ -12,175 +13,195 @@ sops:
         - recipient: age1px8sjpcmnz27ayczzu883n0p5ad34vnzj6rl9y2eyye546v0m3dqfqx459
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnRnJ2UVpEZjRrOEk4VEI2
-            S0luMUFVaWE3cDltdWJ5aE94REJMYmpnUUdrCnZSQWZMNG8yMWdkanZoNHJPS3oz
-            M1kyTmdZS21TVEJuQ2tuaDlKRHgwZ00KLS0tIEowWjdTOWpKVjlXM1BMZ3RQS3Qw
-            cXN5bzZCZXVoTUJmSlpZQW5qMllWZ0UKKiZZtcH0/S4IjwV46fIlG5oeHglKUVye
-            Xfeo5XeHD8JOVYTx1uriOO9Z7Ks1meHG6fRlwlyZZovm5liB3pDcdQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5VVRFWlQ2MEZwV1Z0SzF0
+            TUdMdGY3aEZpeWE0czdUZmhkQ0NSNmJIbTBzCk9zOUczREh1RWpiV2RHZzhTbXBK
+            RGpEZElnakVxaTlYdG1ocE95c0lnV0kKLS0tIDNLMjJ1UDlkRmFpaCtqQnhvSHRp
+            N0czbzNyKy94RzdTY0wyUEpPY09VeVkKj+vJq3pFHDLaxJAf5wiLUk7qsq/xsgwV
+            NPA6aJOrC61Rg1UaN0R92A3iGneVn0oQOwHhiL572Z1xjpiUtt/swQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQXJoYlRDYThOQVlST01w
-            TlMyQjcycmlsWm5tWDBWSzg1WUhQMkZiVmlzCjdqQ0srSmwwbC9IRmFvS2tZMkNa
-            Yk50VDFOU1U3b3MvOGFaTjhlb24rOW8KLS0tIEhwb3QyQ1dSVzc1dVNnaXZwTXk3
-            K3Bpb0svZ1YvVm9ha1ArdVBlN3NHM0kKM6CEQ+dStjEsgppQZYjb1zwyzfwAc0FI
-            O5+vi2x8/N/1OH5jeVzLnLjOhXRXrYcR9EDsjT+KDo0ykYh+NjB0DA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRODdpTzV3OVRiQ2RLMXR3
+            aVk5bDVET3hYWjVPK1lJYkpDUjV3bXZscVIwCkMrc2pyeWtucDZvdWJMV0FoMSsx
+            Ni8wanNPbk9FNFFCN1B5bmR3Z2YyNjgKLS0tIHRSMDRNbGtTNytqTHBnN0V4Wlo5
+            WkRmWkpEYVMrZ0tKQVgrRk5YU0grTFEK3cX9v11MK9LIw4w51hr2zyLP3biGxkdf
+            dl77D0IS9m2u0HipmzUs95m+z5j47hiX4Qo1Uza/sshwDBYyia4upg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-18T17:49:41Z"
-    mac: ENC[AES256_GCM,data:oQGsk4gJ4dGCr3zCanOpSsKQyx/OuWiYe0ef8pvWhqFq0+YvwUzoiF3jQmqahLWGLHUl1yb1kb91GEr7q47G83Z9YXVVtTTzJUWpKZQL1WD12f5ERPSlKnT251fvoMtqNqKrRirGA9ao8OxVpeh3/SQCAGTqWAcpz1J7dxvL7E4=,iv:td9t1MKcXH5RYZxsD1wA4oG61AfLLGSiVIEq/sPRZG4=,tag:UqHGkKqXeeBYXQYtvplCdA==,type:str]
+    lastmodified: "2022-12-28T00:46:32Z"
+    mac: ENC[AES256_GCM,data:iAGu+wOfSh5kYlwonk3DTLQPHEuOfXExv54vHikIRQbk81VNN7GKferJo9uB8d3fos461zGFulsL/Zw4j0EX1X7jr7d4PGybtb1oWIqi8D81TTeBqvfsvgrHfozeQCSIF6xzmXpulTmrTtuIAzMuHRXkV+i85YmYVBKFBi0g2jE=,iv:wafAqiOzpRREVfp1D4+/kB5g9kjd8786XosnrGmtUi4=,tag:OzUBTZ5L7wK47R5axF3N+w==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7AQ/9E0wxIYVTr49cH6MFeE32IxX79+P/P1D+6mFvlMBVbXx5
-            dLxCgPmWFbHoJ0IIPoDDqp2C57hwgEG5HXJbQzBUh7IuIeOQmWiak37xdil4q04z
-            SiIOryp/ecqDYahfPlM6G3ARFM8FHFNyQyo6OUPmtdP0+Qe0bSzyP9DTQKtlVr5d
-            HI/m1PAB+8d6bWJfTd7dGAS83tMzLDwSYY+TDlvZ6aA4Blj4ytfmK16Dqlitax9T
-            UKMsdQPzmWzwF4ihjQFBQaLzW8ICUI32Yb2Mc44XDBiRr8FmtpUn9uvmAKp/45kv
-            FmpO2HbPzYcpuUY5rLvwJ/7/Z79Yr0xszr1AycyGYY3FIjBtf1oqHjsc2SyzX74E
-            Sx7h1Lv9PKsK9HOb/kFVJpgBS1Gq1hDXWQHGBXMHPbYCaDd332/B/SvZkZDBMoEW
-            IuOyk9Iq3/nyvcCKkkfs2DxnW6pzB2MIu+3yFdzqlUFl4Sto1k6d1haaNxHhmW9L
-            rUBuc2hsOnxYu4vGq1gwt1HRx05ArU//AmTYmBVx+y+NpZnRGh/f5PGUxhzos4RS
-            dissNJ3E/jCaSLPejgN/gW6564QviaZSFsc3HCgUacH73X2l31QV5GEmM8z6ggRh
-            5PlCf/vJtm/LKnc6e7kHIbbts5KmKfXjFK0Lz4icLZI0MdC7U7VDm2Kf3BZs1o7S
-            XgEDoz59KKqF90Z/KNZaD5KS3cLqMs3tTWuspz+QveiKgcLHAi17k96vxnll/M9c
-            pi6uuRMzhhzn+fpDpLU8R7UCWYC9IUf4gBqkjDvGkhUKjBThGFnw7OsCN+yY8c8=
-            =3Rms
+            hQIMA6j84+xkv3y7ARAA3ZmZLmPqeYNYRjn5/7EDc3QsEDZxKfkg+kXg823lLwW2
+            9dRiPS2I3GM4NoaHJV1tC/c4c/xlmHykW7W1xsmBX8ctOoZYAFHAJGPMdVvhY023
+            eSHdDV5eoi7VejN8CuGFgPcECpy9PNeYthay3Ppu3+p74Watmia6A9Ik220f8pdx
+            EJj46+IgRt6gjqLOFxThRa6J+oq4ohmLCBTYKhGhDD+hyhriN+Y4jnOL864fAAEP
+            2h3BzcnJgsPRF7tG+igUy+uJRt8MVMWz5jGSUdvKD1xtPWwKZ5jpoJ78gPUPmunb
+            BFUtwnCgGPFP68kmIMupTC+lv8WiZ/F9CUB1Mn/kIf6GlwNoTCO0eGigY1tJbBFK
+            Wu7jYvA9G7BkinYGe8H7KZmkpIj5Fl8fqgZFZWCUbYRA5XiUrCzCNiekpBNluX17
+            FOFJJPTjmV0Pf6SjOZUKG7IBTrZbHrwXTvlE4Kmme5g+opCuqcwxS/g57egmEBMm
+            bcfvfEVwVvkdo0fTyo/abrJR5a6l6fe6X1npU8TChR+4Voh2FuPSzvDnCGQZ1XGQ
+            Tp6sxTlcs6Thj5mhXE35E5KYrKaALgLp6ZElcObT0ciGRVzxUa6HnEXgY4/Khi2H
+            OV8EPKL3XnGoMhg4TF6qMY0n0/zVUbzhEMvvO9jYJDEm/ff+SV4sHEfES0d41uHS
+            XgHXImpzPjgfMiI6aSlF2HWPQympsVXCKMZNKm8twDhGI35YlsxAr/kiBJw0O4aU
+            zUhkMwrfz5Fr7Z7g0NJyvdv+Fvhd7UQRCS4CQfS2ujeLgEPWQf6leFK0OpP32Ec=
+            =OYjj
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ//TX/bBylZ95fpEG3t2d8l28a/41ywBF36aeLGvfHStK0X
-            UmGN+X2D7NjoDVNlefR4k8JX4tO1NJo9dQ7am/Tfd/ReZmInAEt755prWgYTq3YP
-            RqfFqz9czgrtV2AY3GwyJ248RyAfgFiYxuw18CwsCE/ehmnvK2JqDqVJOT5x1goc
-            lZybW2rszKu7SqocWmisoUenf+SI4z5JIe7bu4oSFO15in0cxpxN8TKzC7qJ7C2R
-            C6ObtFnqjrlfZLKlRmVTzP2wkt1NrRPGmqjxmfeRHDsHff+vNv6SXAmyh5GNpOlc
-            mONNjBL8a5oFdUucy1JSm+5oTTZ15JkB5hgOvo3ccgYwe/7ESgg8fTqi9xD6Z9s/
-            zTQdwEGx24z/Jq4q4hdLahPsELy67zjqfg3Lcj0iDMIYgA+rUdJy0Mr45Glqj8+Z
-            szkumni8i90otQ9l04xKJ+2IO/jeH9s0Vh1VW6GxKxVfq15x50+CgpAgAJp8jXDl
-            QTRGIbt3/SZ3dXhx412RLz5YfS6wNOh1+DXN22SYb4tVx+AJXy4werzdNEDUTT4p
-            qYLFjzIayxL6A/0rjnNaNVCwNDd4WV3UGHXSX0gdYIgcdcHjEtuLG344IfK6gg2j
-            igYVvhq0+aycQcHBsHXhSlMpKJUozTXRjkrfWnw5zWDUEjjZf+k9l7QZEwa3ribS
-            XgE8Av9h9/BdWRbavJBPVUiDsgnfdDBtNJIasDYnCx57FRfH53GhQKK6D6dBu+/k
-            J+bPONJqWV9N7IHlA1p7c3CAVWpLs2Hz9wljfO9utpreCl0N0tQjEh5VuBDYztg=
-            =B4nC
+            hQIMA8zMZ+ak7y/zAQ/+MIXuT5r4U2qnuTWFOKra7amHCccpUMg3wcba01BVPzwf
+            j3hCPrTCj6kH2ZIswzlQR/366sgzWX/FU0Vrl/iTCXB5qXYSM3e7EYtCYUa0tBDk
+            WHRIBUGHV/4LSZiZPrKjTs98uRn6RgAw+8f1g6Uxwf7YEwCTbdCRlW4ClyB5eb4G
+            91+wxf9oL0tmXFt40YKD4kAbxtJMuF2DA62E3Zsnfi13bDruT5seSvH9guVLUeZh
+            jEjs0dh1eAl9PgOk7uTxsiI2dL/vI4w7F3nVyV9uAhP+gr8tHuiFnIqZOJt5kQLX
+            azjml/cqzNjnMjgptHjg1Bi0gDdyoT3WrIX8qspCk9M6kZISM1gm6puYNJhGvJ09
+            piQV/mHmuEbqs54JM4ai3ztNC5aNAj2jgvsVSdx4N2n3iUVRnCXbli4ki2rVwsIU
+            yqoT5YrzenzdowAysruH3ga5ZMoIhpH8QCFOyBO4QoFshVKB9IG9bBjyMwz3ydLB
+            HpuRxzVctJsAEjd+STX1s338RXCfu/bbjS6v4LfZuWaRXDetsW7u2Kk8c6Wq/XNy
+            HY8BFmOetrMGl/abrMt3HyQLmXTWkbxOilM563Fo9YL0pc3V0zVfhGuZdSiF+bpl
+            Zf4v6QlZexZcTPBjaZ5hXJ8QhxYciUeITB2b/Ace1rYvGhhro5mgEO/0E7ZYFTDS
+            XgHlir1/2ZbEwS0rpJQfXokMHYtVUd8cZj6hQjzqlifWSp+LgNuLAes7hRBhx1hO
+            oLv0vki0zJpLDFgsBI9Wz61UHvQz3EkQPEunAg3W/Bd0vDlN5qfypxlQQzthl7M=
+            =20uE
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf/Xb1WvRKeRK1MoRk81+qspcLNYvrhPLIa6X79HJU1mqUw
-            uHEGK4BXY1Ew2rtZ5fuCKJrxChBmpnIXR5oEYHMWfeghc09C9jTIikoQO/bcHH3w
-            MqPIhFpPzj08MULx3jiryz7k8UEGN3JggtOecTUTAeGxT5O4dG7yZlQM63WWF85l
-            1y0AaSn36Obv7G5BVoY+0w/cC6f25SrFIDgbRaJOrCnHmpQxUwEQGM+pL2UxZtMq
-            +wywKLY6WIeAWXb4uMaFwSQCAPkLe1GvkziHHgfrgVZ8ENrBxSRUhXFJ/Hnh1cfz
-            DX7cBbaJSTa42vRPw3tGfD9xkBCTbxGJSEl3QUqLI9JeAYB/iUkQjq0As2WQfrrA
-            Vf9r1cp+gpzDjx2Ky0a0UZ/fJzUjwSB9hSwbuLhPs7wUEz4J8P5Jb6hqPbpeebPC
-            jbsmFU2gLxzSf7+jMLz+ODk9D3NeUnVNLMNULjiu0w==
-            =hd75
+            hQEMA45bZkLXmBFpAQf9HBO3mdEPKlCEQRSkQOF/k7lkV8RJfSO1r3hVmZOeHk9U
+            LU3zBV/lEV6c7JB2rvlJQqZqYq8Xj+A+b1SxnpXIOyt5pCgKFFA3d9oGreOWge7/
+            TIgaKWRR0VikhB9ux+12Llrf149Qw/hdfyxVMei9ahnTMCunzw3QzWbZjY4/QWuc
+            GS4Os4rSSKeAZMBklOr+9bb/xefoMqF+Hx5xln4ubJaeXRFuxL13dhNC8d7L+hoh
+            go7wcDq2GAIfoq4nPNXc/10HkiKV9yHgc6tJrZf0Mfw6aYyaWdueSVPX56i6mlik
+            zqvo3XgLbQseQJ+lQygI9QdwwOOxEFS7ZqBZgo9R9NJeASkIlcqqzFVcqiKHgbtO
+            86UiPAiJrNAAMUZOt+9vGT7BYDkTiW83bGbEHsEdISDRMv7994FGWMJBwG12dtiK
+            kjEvnvAyqphSMwvctYjGTn11XfQMpX9fLQqQ2ahlbw==
+            =WQ7H
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6AQ/8C0xl8KQhac+zht93V0PDCksD2Qrv09K8kzpHAOsiLNhY
-            vY6VuBiTOielqiNTkBmHcAYAom/xUY/WoeIAOZHlF8JOn321e2h9E9lT2DpND3Gc
-            Z7pkHJnwaHppQDF/JCzkXgx4Hmh+ptZUZaLZ0i6Sm4QxLX6s2VOGs8tziG6GFDBU
-            sIZdDV1KzFBnzVhVVmZFY4UK8ACE+cZjvbr0mdOiFv1Y6BcFwVR2M2Q/mJf0qMGX
-            489gODuICyQ+JTwJMwj1Y+Pl24d+GT9kSFtC+GW6C+laRsRQwuUVuxpWRKpRkh/4
-            EGMm7YktODKFHmLmtgiT+PTfQW0QlRU37rODcRn/M0xt6O6oJOHzsTjByVxhWYZm
-            7JjCD6HAc/PCds86Ek5Dl4N6vl70Vmj7SmVM5G/v+ynjpJczYiBewvKtfHf57p7o
-            pgHC6Jc2UC3miMbRQcHlFcUGYHgzBBkhP2TiFUUitJhsEJuSzUdJq6n36uN2E0Z1
-            I/U61DVocJKiTo5aTsBL+ghibBGSciRj0JacUbL2OU4xNLGBFXJIWjt613Aaiqzr
-            qzCJI7w/tFl0udpF0OSODuvXTzJTOIRusCDLIFgYMQaFSqTG5oMS16rA8YIzc5du
-            XFv1LJwG7IFBzW8dzw3bpWaSLWIwJl4xt/o9rIzji+ax6r+EYcMNVqQ7l8LxpfTS
-            lwFid7edESVgPRe/mMZwTPNpfxI7YX+KLLLK6ooizvIQQaCt69r6GRDzTeNcuhYy
-            ZxLu43bu4VesX/y0c2A/IIMvLYxvxdCv5W1CHF6C6DOsbFvOeJXNvWMODrBLVHqT
-            3YjmYSf6c8ekB7+BAFQBCzv4fcvhH+VDSRe/xe9roDvlWHMFGyCNaFyw/NS04UTE
-            PkVJ1c5VOD8=
-            =rsdb
+            hQIMAwMCBBrc/JA6ARAAkYm/3udy7FyCg4CFEyAYK07EGjjF2rnFH2yQxjmhit52
+            bIqkieynGIzRK7CQu4J4FVRKRSPGVQbbEzpyiTNANR6S2wau4eIG5h12zJ0bjbsd
+            Piiep0L6eZzp0EaGuBcjPW62hP4qpiJF/RmzYYfcy49ElrTAB9j5M127AK18p+ji
+            GYmG7Wow/0QZenGaRk3kS5ipQ1wI6uKLxJpQipSKCNPoV+U4PoHddkPBnKTgkeZU
+            fhEq4RinTaRUVFgB2/T7S6ILU7e55eBZH6Sg0i5IFd7goYoFVJAh1IwXWBLl2PV7
+            0+ySvcECubJZjv7eCxD7mOyzd2TY+3wyBcsUykYPqltx1QkQ1rcQ9KaQADPoH7IK
+            UQgu3ztOjVXTiY5hD9e3sksuoNxgitHXUQx764vMbrio21nuThK/SqWA4jNCjMLR
+            DBML+X+qIvYKXf+tLy88Cbc7wqoVCpuORuP0TAZ1SQtSkaZTMxABXcnDPP9aYW3h
+            XD48WmYI6jihSadhB7NGa9NP+gqL8bfyBQtR0zfBlJUu7l3xLOwhKuMi71fHv7vn
+            /oz19fwCfnp5yfziqkzH55AP8rl7rCERPycOVXp+pEYwD8BCDW7gPzTLgWygkiky
+            H5M6M5DIRPvd1BAsbC8sJHkng66uz3CA2M635H7TFrT22bD5qMNwELeaJ2Qx9nnS
+            mAENW1OYe/aDF8cNbthGFRqvJff+VNmrX7lX5pbTO+OGd5RWzypxOIrhkMPhFYtJ
+            YGW/TonH+BKPhrJPpZR56yrDMmFAtEeg6M6qpnrSmimsagRZeEcI127pyEzZ3wUU
+            VihJXKPuZEIxNvW6tpLotHeexz0U4jUm2DnqEjmNczoFekc1Ot4VMr+yVRsX3rPj
+            yxeCis3bFAaJ
+            =bZLE
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHARAAl3NBlN46rXBH3desALIBLiRkGH+cQhg8zEaZOaT1jpZN
-            JSKKprlzzxFcv7bGMgAqi6gjEVkjznIdPDYf+jwBg9ApWh3vYcw8Xluahok9La0e
-            YihtDw0U1WF7tTA/T6b5ud6tNjoQWYHZyppncPMCWmxz+kODybtsGEKohz/XXTfa
-            9xo5xyW6MKdzNqTWX1TkFGnPsQ2+sTuYo5i9qVFcQUa/of6kpeon+LpV3l6nMvYn
-            4/4If9USjp70qL58PpKHyG5ryJ6GS23dt/wZXSwt2oHUP9Dpw3LD0h3xJyHbx3j/
-            fYQJVafxBQKtC6jY3eX+G+13tfU6vZUORDfE3f9HM1emXotYysE3dkIy+9eYVRhh
-            GNhWS7qd2m2MSgGS2vX8XnN6Ilt6udHa3Prm3ixTfM7aY1TqR/MCcCPHT7tOOnYG
-            XVg2M0sGRtlHq6XaYkOehUxK/UOIzA02f9DrvYg3dxgmttlgSadHP465BA4cXLVh
-            mNdhNeM+pFjThK35+oOfflGzrWSFFsLvD55Vyzj222CStBuUL7ZEp8tG/Lf6Rqbv
-            ExxZxlpXKBwhUhFLjBhqXe5VhELXCP6pqnFZQov82GIYeKaLhJnxd3lgdEpJ8P9c
-            iy0wIIdi58PqSuYX7T7ZWBWWi8AXHlyJn6s2ZssSI4OWNZf3iNHS4yDerhbHQ9bS
-            XgE8GynSAY/2JvceMAfk8mDPBFA1IXmXzpFefsb7mK24InjjuYNI+J8FvteVkJ0Q
-            kP+orB4yYVeDmYZUv3Lr3wJ4pFV8pFVP6v1/ydPPRZ2bjAZy5caHLyq10mSfAGo=
-            =fQ46
+            hQIMA9XEenRNYVGHARAAvMVVG+k6utM4yRNFbNKSSFUcOmKA8T6SK0lzM7MnE81p
+            8HnpojWahc+EtopvbcnAo9hHtH2hzd/H5Ul6G+/G/vVacHXBMoi/7AJi/Om1cKKz
+            8v4Oh0bbHKCWlM5Vc5Ikg/0FW0Uv4JNIdv0QForwvspTm/J19A3AtDGgagN61oj+
+            u3/XnfgFId4pmhqi8AigyyZmiCt8Dz8ZEodJl+ArSNWokrGZWO0czNRRei/qEyng
+            RfMdo15nCxKnRUrDHuDLRkhOy7XcGOIwWZfw4lGgxsstTrCK+MyaCoMwfK3LwFlP
+            n60SfWundeBSmmBZYZQD+QuI9gE6gmcEDfWqDUMpZptnvmkuibINX/zxLbIwdAoT
+            Nzkb8+P6vBUttPhJpqyhjEZ/R6lPJ1M64VD5ynN3toOK+pZ0HsevVz5FLN0/zGHr
+            Rjr5Gl4tRYnfn6UbR44UlmxjwUSBF/7quAa2mjptSwFK38ACJldO5K35NUH27hsU
+            HRYtvdText333VsxMza2g20JjPn9qCZ5MkP4l6DC8tdMdo02gXQO8EIu4+iqMuAS
+            ekH6YMxo52yrEIbNKRNePHpFowu/yzj34yYkLkI4oyBrOyIUukPIMtjgiAuKDcAa
+            //4vKcdyfzpc0FhztRCXM7tcsT0okWrPvpTSYlATiyPLRzAxCh+mhckq9xJgH5nS
+            XgEqJVGQR4WMzmy9npbUpjuIqocwTYgGLb6qlhEyfJeu4cAK20/dzocSyTXxs88l
+            g4RwzaDfpGaCAzf0rym+bvhMH/uhhxj80hGnpDAQhDL8hKjAvtvUmB4iastg3qw=
+            =QKhN
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/a6mwZsZMherm8Eikq7SLxA82b6UZd/3iUOc0TMr5N/jm
-            IFT9+leGy+Ho9Wd0opvwhKdGN4fqa0cP6tI9qdEYatWD5s0Zd8aN60XJM5CBaG5V
-            y/XV4hMC8NSWe7RAFhdZLxElX52st5O3j5rrrS8pY45VmfJoudcw41wKtlmisEUw
-            qx9rQVVhnYv2M+GDBGjv7ecGVFyHAedVDdO+E2xaYq2DC1WfFnDHK3dn3yTS8y0+
-            GYMzerCswqledjb2I/s7XYdQqLmBw0c50uz7Zzkbf17VQFSREG8HzATIkKfA4PBV
-            TN2QW9jcLYXx18BLFG3Heq0bggcPaI9nilU2Mtne5NJRARWXNiJv3eLbvkBe0z3q
-            WBMPULaMc1q57XKLcZ/gam6sXV/8NBBKnKBAtbd7porETzttevZWdXUItsA3gUDv
-            v4Y4SsPNplw3VAC5n0GASz34
-            =6woC
+            wcBMA/Z87ylQaotQAQf/dZH7qGR09TMzIFJ3SnwUNLWU8tjwRALMowyIzcW8Uiuo
+            osDetGKrueES2f3PQWv0BBpA9p+bn/kxQb4C64rDO2A202agE+8kpKjsXF6Y6bPx
+            q+9Rt5NxYK+h+6+q3KoIX3MRP/qgUjJF05qHd6MJFW8MA89SdXh1saPRDhwlmIYQ
+            PtZlcN+7ho/he5P91/DHSvJf6J7uTd0LLyK+qtALbPPGk6UPFkWbPN3/XV6um57D
+            SRE0eB6pd2hImLCvmmzV3sbybqk+KMgT/LVj7ZUqhV0/0aoYotvc75jQRp+e4s/m
+            8uetQNkc8+PnLEbSwfpGgVKmWh7Ur63r6kX2Ly5Y6dJRATbRhfAXAZQSwkNtzV9M
+            +vVVnWj0ry9hDJFMPJzWgX4MXlUsP1heEWEWdHTBhAEGqUSaJyGmLDwHQ+Ou3Kvc
+            9dkgD+CJNB6rZGGZmzT/QriB
+            =p1Gk
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+KohVD7h0g9/HqcM/aNI2U1Oy6QNCh85iU0sC2Sdgy5YY
-            vV3rwr7CwqTC2d6899ggzocY6zegc3NOwISHoQILG4rmP4+nhJ8GIAdWEiQwVpCR
-            IFF3K2Sva5PUyAYLsY76NWVPC6mMYhzgqqBvd6zM3NiaffIW5b+z9k/6it4ydofe
-            OSkxjf4aIRq0tRIh5yTP/9q5e8FEwDWMR+VCJ8atD/PwocsigeRcpHlS7IAi0g5G
-            cvsoz5qYrZp5vaSyscZjwVC92V9UjNUZKH6a9OYQ25ZB+dLLjkE6iD0q0f9O+uoi
-            KlWLSL71yPg6A5Q4lcu3ifav/hzdWTqsw/xi2QeQpnvaEdl2kreGPL1GmShfuCCn
-            bRlybq5KCgCoiozKb3uL0nQ+H6ra9Ne4ZrNX8JXzH56UTh1Abqebmz8Odh2LZH+p
-            ASig6NiEjPbJPKJXNTUrHR2hPAG5Zn36TBfy7fmHS5RjBx5Oqf1tKOcXLyE+2nWK
-            SI4z8STpdAkDgpFd30BEJHcR8/Lcg3467KBV2FgkUp7sh8d2DBq245qhfGY4Tb8Z
-            ErF63Ob0lzXF4fzyRqgf969EGlZfdAwB6Llhfm96Jy2MMh3D6yXEtIz43JIE967Z
-            yjYH0yiSvPlfgZ099q+qnHAGI/3R9/CS1T2xomJM1ZS5V7FLiu1UvJ7EZjhqm+rS
-            UQHnUheOoOOdUVS6DrMH3ge1U7Q8EJC1GdjrCtsEDsyG+xLazvNdABPwDrBsnIm6
-            C3Si2BcTztP1Y6BbzCyNA2KLP/YatMOAQhzCltmH79voiA==
-            =FdZD
+            wcFMA9qJIVK2WMV7AQ//TIM3k0ut+grpHfunS8vg+64hEt/4ZDx2+aKjv0x1qxV8
+            g0D2Mu4U8YEjO6RIYEIMvpXhEWXLebW47skJfirLT2XwHODbPL4shOotiF6jVYi+
+            CeL/eUYElnLOdOH4Ywei7CcNzgvIqlJxkeIsj3217XbCIXjzIYc18PwPkUuaq4CO
+            TuXCJ4Zxa7MaCxxpgK9LJDni2Dgo0Q48P5Tl6omeDT2a4+y27CDVCXF+jpGqQJOQ
+            snBTphkUiOTglhPZMN3kmb06vdpSj5dAtqrCceHoLQYUtlJSgcbBp48Dvv5kyg2a
+            nT5XW7xN29sTv9qZpHvL9zmU8WHM1k6u62NRj+dUU5G/b4ZftiBLk9uJN0U1XCow
+            VKeLgxy4/bRitfRrKFFTPIgKxcOXKVI1X5uvQc2UeqZ8Rd36U+5TXYeSz4QJRzTU
+            GQS8sav9t3LiYe7FIz0cpFl3pHh9Z2L0eNZ2RgywktWc26HSEtjq2DQ0t6ubWfqX
+            68fc560eu/zPmw0yYBYuU/2ycTbauplKOjmrN1qewYkXWhUys+3+NvVFdu3HPv09
+            6GNq/47tDOQAUFP+1mcU4DVAtEg1+xgJrwvv3Kv9c3nkhi3fF9DCveGGdqHEePa/
+            IHhv3U7CQxH/7FM2UbEKGCpiZl5gNQZT/rR5JyycDRq0w2mU527cQyj2jwNkjafS
+            UQH5uGCeSQ4TyJ8btnZZmETSZpSn1fEA0AaPuNt5uDXhTCMlfb+f8GDaeIdPVYqK
+            xoVUl1XSRyFMjbx1s8SDplT3c+xglnh9hgO6WAQSMC5x8w==
+            =KaEE
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:31:58Z"
+        - created_at: "2022-12-26T19:10:03Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ//SaWPwjm2L3sfKzUtnpBrk4JY9mAHLEzNv8KmaLTZUuI7
-            CGVmDQ6kBz3Fu1L1YFFtqm96AT5d8Ivb6apBwuPykdkjuijTe0bdk6nWNQsUmZsm
-            WLYyuH+bpfwvvMfZtk6/euaFrlJ2qFD8PqqIPlMmffXI6Ziq+cXaRgpUsMrXpPXS
-            Y8pvE0Q0Sy9yi+VAr32zIHi+mJrORM+S1C9AuMIoMQAsym36132ityXvPOw9Nq+Y
-            5p9GUihEOZLOiVh119AwyWwMlePWEX58C4GNr1m3FGWSNh/4FW1+ma8+eFHBBnGP
-            MsN/zVDTsmhOBeQvD/DqxEG+DVGcTSULTH1kf1nIdjJNp3fS4M0g5y3JT49n64b8
-            3Ct91k8ZdJG/i9nY9TybZRfTSZA8VQN1nsY6M/yBDfZlS3uNfZbv7rbbuBmhSKJ1
-            wG6dXGNHjGi3CqqB0jgGWxWf8fs0UMjf2KCAz01MpXH7osD6Vuryk8N9cXiOCCWq
-            MWuYoe6Wo25E0G166cCHtLxszuHse8ofzzJFCsvEAf3pjegTsxlVyobv207F4VT2
-            n72lXc38Utu9AApKxxmamvZ9C6BiNhO2eO5AaQ2Y+4NjfyQxeH2VmHuj1mjIVRfT
-            YS3L/spTSJoXMN0ysHe5+/Y3KDDwVaVyhFO/1t/fpdMUa93jGt28LJQImIBoWUnS
-            XgHG7RI9rkZ+qjhkaFxTlOJrNbZrxa06o2SI+N36CSkTmftpmSG84SwS/2aJerZo
-            yg6K8/P7WuQatlG4+Nb+f92D2wOD0D3F+y/AjvfTW5NatbkXbOoeaixnuGKM3YQ=
-            =AoDy
+            hQILA/YLzOYaRIJJAQ/44rvLl9t52ukmaE2Eljed4C2PC0C6j5ITqaNjkIelCKmY
+            DKqUgsjwn0rJFKKg87MW75Dp/AE8seZfWdiS6ivN5d6q3MKgolSWQPAdKkYPbAZv
+            IoAWXtdchqYADioHzrImWVff2oHMhAFCUFptZj+S9nGYzLVRZf1N98XogJyPHSY4
+            jDGlrLte1C7akq4IffFQHfsJnn1b3Hw8N7Hr2RUXGiKwfstZuZtWrqU+ier/wwR4
+            lYSjzIGN7532mMqt3jCtW52VAxpUujbIPHOuj5GatDsG5S2+10u3t859xJ7wEa1x
+            PSpSbjS1jxmRBsSl2OigXfyYvhTLxOKpOQq6AmMmLTCgb+NLb6/3frlepSK1UZSJ
+            anDOfg5UEQa4RX/CLNpgANXuZVLPxvTNQVKfRzPZQ0NTXo4VtTzA64i9pe5xjbeJ
+            Ov8mzCauO92/QiZ3aiBTNCialzYP9Vpv7GJEApvVLA6S/o9NDQQeiOBwS8cLHrS7
+            Ux1z1/5hOm1BESluJbpE+Km931m6CAcgcZFnWUU0xGFSovvW5IlVdlIJDZ9AQVF4
+            MH+ha/hQTkh9ikim7tq3RvC+Pj6zLcQt9E70aFQuH2Q8luADArOv+aBpJ5rhOUlC
+            8i1AI1Vo9NWmxOzo1GulyxHIH9oJN36o7yXG8+I27NMbi/qot0U81G8EtqXrbtJe
+            AeUWN258oBg7t+tL8JLFfanb+aD0RdKoW4/9KBneRaxQ9JmuJGHyPzFs7V0AAoU0
+            /nxhwaIyBKw9fcakQCvP3luwbFUKziUHiFlb380UD3ubcXNtSKr1ArqnuWWzcg==
+            =nOuj
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:03Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAjCsdYz62B9/TgJKT3wT7XJEYipOaTsAEJoYz0JwyTTSr
+            2dS1KfNDagF05PIcMPb0RPuhtS7nQ03ODk1WtXSCIeR/6qRmMBqeYExshMygnBG+
+            g8y124wFCs0UMOM+Rdtvtl+cfWiQ+2u31kBzbgpSNUJHpVZQKEidMYtiNEEmyRuu
+            0r1sF474Ck+wwU9X87ojfJ7eBjlBSWLG2P7+OrFG0jBMUkMIZA+Rb6Xi4oq+kqVB
+            hO0EpHsBR9eLVvVa8JJBcRRk5WXIsGadUKAyX+ibnkErK+A70ZnmuqLgngHJITkO
+            zJfpy5ylbLScLdx6czWEzEJH0RJii+7C0Tnc7DC9E7wL2XV13/vdodQZlGJ1xvX8
+            YItvuZuXc7oNr4+FPNJveM4GV103xNkKeBlMykdOajmbnZYX1W8nqNy+X2+qqLfP
+            6qGws0xNvZkzKL6vPYXW1caRAnCpXiYzYW1aFGTW9AZ4FfJ/G0hXr/Fn7QeSSUK2
+            SEKrenl+2fiLLu1/j/ijBi1IxPSQ8Cd6208ICRBc47VXAO4oStT6eaOC/Wb0T8Mx
+            U/ys7GIrYxHWBQjT82WkgriA0on8l4VpW0yGauF0KdEYukjW4Jx1rRsbpyWGTsn3
+            2S/JN0Ykx7UnOejqW0CFV20Zi8zbXyCxKidyl+D5RHmjRXpJ7rMaaVSZtQfDr6fS
+            UQE8LaqCxlLE5BPNgiH5pyY/iwpDsCoptiTxAhcQXitfcYx9GKaGB70eDGF1rYWV
+            xNjc4FzBZ7VBLivccGFdP4e5DSgnFR0Qg2AMROUSDkiXPw==
+            =n3vY
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/jabber/default.nix

@@ -53,12 +53,7 @@ in
     ];
     # DynDNS method
     dnsProvider = "rfc2136";
-    credentialsFile = builtins.toFile "creds" (with c3d2DynDns; ''
-      RFC2136_NAMESERVER=ns.c3d2.de
-      RFC2136_TSIG_KEY=${tsigKey}
-      RFC2136_TSIG_ALGORITHM=${tsigAlg}.
-      RFC2136_TSIG_SECRET=${tsigSecret}
-    '');
+    credentialsFile = config.sops.secrets."acme/credentials-file".path;
     # Make keys accessible by putting them in prosody's group
     inherit (config.services.prosody) group;
   };
@@ -210,5 +205,10 @@ in
     '';
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."acme/credentials-file".owner = "root";
+  };
+
   system.stateVersion = "21.05";
 }

hosts/jabber/secrets.yaml

@@ -0,0 +1,203 @@
+acme:
+    credentials-file: ENC[AES256_GCM,data:qr3X373dhIsYZxqbCROXRAF52tCPme3d0h6t5WI5YE0DBHj2RX/215OQdb2wgola+x4h/TnMGrVEGHBXsvpU0zwReFIWpMfJQkwup3eHkDVyDvptpB98DrhoA6nhRzfooOWwubYwdac32QybDa2WgnXtY+54h05DbDxpciqZRh22iz3JtPjnAAhK5hPy+bqHIdqoGs72mmScEgfqYVZ1LYYJ,iv:PELRmoyexdUSpcQ259CbFxNhhdqqe9gD1HpBY4ETm6w=,tag:/puZrWoYb/ligToMhB8uGA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1tnq862ekxepjkes6efr282uj9gtcsqru04s5k0l2enq5djxyt5as0k0c2a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPK05KT3pGb3NPL3E3cWhy
+            SGJLNW9aN2tOMTI5azhwdUhVaEZGa0VMaUdBCjFGMlJsZUVqeU1pTmhpbk9yN1Vq
+            eWNDS3lXZXMxcnVYbFU4Uk04MkRRa3cKLS0tIEllVWJhWG9EYzVRNjFMWHZxbHQ3
+            ZzRiRXpkV0hoNjJ5UXhJcFp4djhaU3cKwTFFdJvi70xh3c9D6swUEUY3MebCxcXH
+            zbs0Flo3QQg/tnti1/fcVw6Zg8k5nNQ0cVc8PFXKDbrb3UiFTLshrw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJV0ZIZXgyQ3ROUjFwb0Z1
+            Vmo0a3RSeWxZREV2YUdkQytQaE5oZ2FPYmhRCllVekV5aXVQbUJCeHhJMG1Sa0JR
+            U2JteS85ZW9COE1YLzh6Y09MK1NnTzgKLS0tIGFOS2dRQXdvVXh5cy83b1hnNDJ3
+            Z1N3bmlnSUQ4WU5oTkdoWTVoR0orV1kK63vCzyR3zc7vzeGG1YJDjtOAazznELp9
+            Wio0FQTlPyu44OOYzTcowjV/+cd+Jy0dC5jG+7KDoscXy8acHIbTgQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-27T00:48:33Z"
+    mac: ENC[AES256_GCM,data:foZWnamhQe0nGL+tliQjoaH5BJZzJl3uyH37mHxKRgGdQoY1T47jLnOcZrSYF6YBEy0YN4K0WJwDKBlCHNKv8x+SPuewOqBZjyONVn1rZZciJPjD/Eb/lP7J4bMroRG44fr8kWAScJR6NxhtuFsMBkRw6IWUJCRqm59WGMOA0nw=,iv:GETpz3YyuAYOue40a8D7jUTDAPv5jV3oVIetsLWy9KM=,tag:Wryo38fdXdfJ4WZ1OLu0fA==,type:str]
+    pgp:
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7ARAA2FvnTgz8GlcLhXDeXZ/WO/PcxnnoPUN9IukXcAPEHlj5
+            bTz95wvnajo6AHjsHI6BsCb4UZAhmExcxuBCjlrCcKxqlcrVUgHHcWmVdtobefKA
+            thtBr1xlkPDzgUdhiCJVg5d5pU13Yr31wDBuRHivlKoDvrI1E2zwxjDGBpUX5Klr
+            KzMjXLuwnHVdE5ZQOZ2I4jzOoxWEI7g9jcjSrKOh+O16p/K6lda2+QLo6ZYNel+G
+            H1SUb8aQWcavAAX5hH4NlzsQ7RwYJZC/oZBgG7cUlHkj1lnKfPAfdx5jJaXCRLup
+            dzkZJruN6S8o1KvR4aY2WG5OKloxSdZeiFEdgnIg/zDWFstYTF9uYCCleDTZNCTW
+            3EgPo2BpS6oDpRJKcuJf3DxYa7hiyiH4dIKqU+8Rr6UqPhfyMZJv+8XjtW9oOzQ6
+            LAmM+YwFM5TQRElvFWLX0+Z469CP32J4YbgTOY7r6HACwsH2r6gx4AvG1VmqXh0i
+            XHQhIPTtqvijFlnaQ/LhcwGnTWVzfhyXNGntzSC/yJmcafH3H0n8mT8S/78uA307
+            bzN22Sfntk9Z114LBO9hMPITejSjqGUlDYUY8K5ryePwd4f3KZ7N6qyfG102WZD5
+            gCeDEuwiW2pR7wwswmTyTKqtM/nSJYjCgzC+S56XajQWAWETVA+FGEgMJYSbZ4TS
+            XgHn3caeebdEj8QdjoihlIRHWr+WVn+1oUIxf4IycMll+U461YYsS1J+y8RZfXKt
+            RNzHZkpL1C28/KCDjkjsv+xd8t+gHFtSg2/1mv7uWGcZp8o/f2Aez0q1IRdgnjY=
+            =SCF5
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zARAAsbBywQLWu8FrqkftrL68RvmbgTWxPgjaO7tfxLW38+1M
+            ZTsy0uglPMMcNx3VF+RsQhFn3+rMlgCR6U4vteHvv5OUIjQ4i9Y+cpJgk/NmvBX4
+            KPg2xWP7NI2i2zfzv54G0PlpcyGv3ojxotL4rVpSIqQ0fv9XxCTC3OKWPukYGME6
+            UB9Zsjcq6JhQ3s1crJ7P7iM+rKe6cdlbWUe+HisJ7yPNYUSKZligxOk70U2f0+40
+            xZIo/o7hcBdu1xx1SNsGwCIppeXDmpdKMaQkfewJHvilEVGzb755W0d9qhtgPafV
+            9hFEs2ZQ/t/HoHgfVAUPZ0GOeZOD6X1IojtmsI3PcBWInaxxwGhm9msxchtQcDaO
+            Ova2IwiEyR53Q4LHg13XX1JLqqtuBqbcni7CYwUcR3/aaHotuzaa+M43nsKKSzXr
+            uyFE/DSj29zsHSLVG0F9vVl6NdCkhMtWtD7f5nIlcgHB5nnVIketda9XxyqkpYIK
+            Xza79tDRw/N+FFJynWU0nyROyCLd9FoNuunTT09P8qU7BruTz9046ZEW7ifyp7sC
+            kVXsR81CVJ9YM9nNv233B4CvD78T9UrXqlass3mHo/6ggsxO4ZwB+0cpTXRw5fzr
+            S0dnkTn6/3aeGE81+4f1fC7xMDmL4U4kV8uufWC+/qCdYlp/gifNIky5oTOD4TrS
+            XgET6VNBqbItBVG+9OZBObpyaSPWe6ZxckBIDwQXyeTgwp5LkedpeergvbLt7m3B
+            x7yoGfivWA/Oe9PungbGizd1PvksAyyJqJhgzGk/gl3Anpea6AlsCyXf/YZNrgI=
+            =LYty
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAsElqFNHgEvhNTWOrY2iUiTY/c1MS2ivlbGkqA/RE3VjY
+            jFGI5V7BbcSHMWqQijp+mzN7QON21XKJJi/VU7NRtLPI2UQ5ZbK7pk/MsDfJA7qH
+            Vg8f72wz/OdhgSbk+HGiSrSMMrjNiRyEi6d+5iFENBrOrOEa2IDM0KlN3hHjtJat
+            faaCL6GFVKjED0a7up62oxJeDGWqOCF1w6k5xZ4apKQhqzgDqk2MocNpoLWfZviS
+            tyPyB1eg0mKSvecv5AZUJ4lyN2dewKwfDb2QcLPwMUtvEsG4wngR0Q/bH6xVGmFx
+            P3Uyhi2/leqYYsKeh9kOv+FdI+PB15MGCIiFjYDMiNJeAayG55y9UxOLn/8hm0xA
+            9Q4i38FQ2o8oGCVieXzIhyLjwT07WJwE6MNuRCAgoSJfeXdGcLU78PIoNuZ6huWy
+            aARhS3hAxcNlgFez7I/rm6V6LcI2Bzo/iaafGkIARg==
+            =pXf7
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAoeHRmg/Q4LIvKNwzl6qsJaiOTWGmK9xd/qXtwB2/hD7M
+            cRp2AqBjTOEdwWMoZjAhL/tGDILKq0EMfdeYsJQA5dipTzczZtlCY+nACcbXmiLJ
+            E68pCXmo78EwlmB/TxuX4Z1zOL9qTAH9A/Kqj0fuUHO2AcfLQuHFIAV7SakK5FUh
+            aBV+25isyc1xglU3/BoW1IesH4adcWbg6XaUbwepILW4V4bbojQ5vsMlHzRsKUJ+
+            WIR26MwKZ+DpvMi+oLYV03uuMkJvcpwM4jorFHYKWOIHLDNMo/sOew+amAQsRXzg
+            nrackfb5+/nfJT2QjaEM/UCy53+u4faFX0chb1+MpjD5gBYjLQ2L5puHKV3DfnBB
+            1cQgT8g8RrQkqMqlcissW8D3Q8nv3wJBwjoRKNAO/lC/3oFsqgbmZqi1Ehbx9riY
+            OIS8Ye046e2RWJrbTzFfRIhBKq/15yykGr1HcWii8+kAkBRYecjgpeo3UZQmf83K
+            C36khyS6z5OlU+CZqYL/a+ylQ8sIK9Nardo3MjZ/QfI2MOBjBY+Jc7Ak0LztE2UU
+            zbeBThUAksRG11GN8TVtFrB1lqzrx2yingw4e9R1PiFHgm0PKtwfpEvMm6Rj56Mq
+            Pdbc6u0RQfu/kOf7eEWhKOcSiNPXJtrxEJXqfy7yummmmRk8HzlMCLo+pVI0XF3S
+            lQHE5IgXD5AKP+usJj2hzFpV84nblPhyw5wRIw0xyV5OXGo2AE1I2JaBuySM/IPR
+            8m0y6N+XbkxgsjXSHIgHZSKRS30eUt0++tVW8NCpA3KziNQW8/oIvgmNUoOrIKP1
+            V+8jTLXSvYivnMbVoauLkxDcRrt1MXn80UxjVFc5pq2PAxvLRhjfYOxxj8fSpxCU
+            obUrj480
+            =Ed9s
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAAjB7jM4iIXVn+UWcu8h9NVVetbNucQoEWwogH3t0Ep+mW
+            flcNt7w7majYkbHGxhqTKKVCBqW5fnf9BRshp5zpWgxHk/QWdGp6/Yw1sP1pTxaF
+            d95E5GVyJPDdBxvcyJk41f2qRcBT82DFgsWY3Lz32lyKWx4ydH4NEqOpuPYce+w4
+            hWIc9WQBTdk/tkihtpDqTLg+QQAuiY/uaukBVMau/wWRhNY60sLomvQscBtd8H4W
+            xPo4LDQ59YAn9M9xommdNF2pEZvaaP2IhKLk8Zd7Af+vD65oyCSsMm+ut+RqHq0v
+            L20iWDu3zOvitQ6gYd8gdJfdFlISgzbzoqVMH642LBkMNGq7pDpDoieskAWxJdWe
+            ZZZkjOjE84B1p62OKUQqrqZyj6/caIURIF8UvUWVBkV4KAYvTHbwJRl2LCmNpPRQ
+            UeR/R8UL8TEE+eXs6jLxe5PP1KRy5piiXNLMxodnlLxGRl26/uWZ1wTUCVDctReO
+            FATsiWY/MPqK/Ekx9e9g1FZhoEe27X/4GoQTA0jiWZ/RBDltWmLImBGmgFGoZll3
+            WKzQ5Krt0fQ+8j5jLuZIlYS7jR0NzL/jhQG0zypEaDt6ZodWFbg8sa52OYApBlxz
+            snhwgVOtSkbj34EPwb3XezmrYsw9lVRsEzFw35LgCN1g59Jr6bf3rdVavIgpLHPS
+            XgG8mVhecqZtr1i86qQEmG5il5StqbmBpi0ZoqbIFm1Hb1czehykkuRKFXRTvhQX
+            njcIeWWO7O5i8mqPwtbeYsRqeKZ5wEibNUr2G4eBY807pdv2JuQAf1aVYzW/ULA=
+            =CabC
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf7BESpSsqMx/qNuFAdj8+mF+GDlcuhMvoo8niJTC2KcJOB
+            f4eeFr7colD9zTj90JlblDnrMvTJlhhULWRNmkW3VMhKzGnblEbnBfPJeG5cFjf8
+            warTcR1kMW13GH3P5OO6AvlOR6EqxyMxPByh8X1XE/XcU8Se3ViUptOxGvoT6NG0
+            taBBtb1BqwXSm0Nex82QK1rmt+diJY8iOmqPFI0Syu3FxOfF6bNjGdFyy1K0zOBK
+            I9OobcaeWVhBvK2K9Sc9LfYQK7SMnP1VBiclBmrSg4YgjGwYmJwXAzTOGPHFUKSK
+            s7WjbLizSXTh5/JA870iz/cnSZBpUAdoUJZ6fi9IY9JRAYlDSBVVwyhUM1ezaOyc
+            SMLpHrOXSR9boaMa2AnA/mDEALfIDcG0sGzM5UmlOjdDhY08fD+M9Vdjj3C1vjWn
+            GRDl0HEtvyDDCCgrSF03gPGA
+            =9HPf
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7ARAAmGbT4e4/nuHE182/WcenZY/vqSfyE03sqw9sYKqZTfAw
+            ybBsJK2TdBA/Bdyg098Aaxae5wreZK5po1Q1lmpHNK7fREcvhhMETFdmi6vKWx6H
+            QRrXBRWXoegotQvBR1Rr3vg/WTIrezLvI8vlkzYRzLHCHfmnMBloSTMWoZYwml6X
+            dVVtPR5ijMLfjFjAJzF59gS3r7HPnnwU5bX+FaMvLtLe/OtYPiJCebFXY82tX5SD
+            Xn9hr9dcCwKangU92/cnE7fpM8FEm78sMt3t59Rsefw8GY8SazXD9vzKt/KEd/3z
+            8YsSDHFOPrsEddL9KQhG7RNEXpxevnSzDQr7/t95D/tGwO07vpL1GzQKZXBEOOb8
+            O7AesSkN8/3+JKlzmht6ZRRKPRcoHNjHZD2NC2HNtkrld8UsBmosstZVzc8Y7jhG
+            +N6t4/N4PtpL7iuSAQV/SxUHDZ7EMNijFs9CQvfy+nN13IAFXYL3ZcaNkbbPwcGW
+            w5zI/7vPoHdCUD9YXb93GmZsdWg3GI6luJ2WSiDD0WshWcFEVmKTQdw0vIfs+WN+
+            ib6wRiP5qyQl7W9VyyhO+ogcLFLUhIW2cb19193uDwr68StJGtf419v6W5sSfOln
+            4RIJ4qU8zlMUMHl15fivvX9ILrS70+kFa8pz/334RUCLQw7Eq/l2Xibpg1y6woPS
+            UQEVnbHnrl+tsEYwrNQamVkiYaKfBXZSmBWKmNZJ8/tsu3/N6yruuYYaPgAKAMfd
+            9T+AG9dSzq0N886Px0QLAqEwwbtlxYtpqwQh9ICy/oMhbQ==
+            =6UYU
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAA2WrEXm1RH/ttIbc2Hh8qIb9EexOT8lg3y8YgjznkQT+t
+            Qnc7ihM+EkZtvc50H57JF6Cnwz+63NuvMJ9RjRxOVo+c08APBGkkpKIeTJddxKla
+            NYK/LZzPBM5Mo/caMZnae+2uSZn8avI7Ak/JRKqWtJcJ5GH/FfiLluPl5eJBG57k
+            j5LLVOSCgTg+MazVVlaYejbsmYQydFYxam38kn4VDQVgCX7aOUFlpWWefrg4Q7/R
+            sqQ8nC4FNhYnBOYJ33D+JVpewDFKx+5qvET4iZDkwVvPdFkAR7xGwSMEVOoV0EpM
+            G6suoOyslTeHMVsAsokljJ/ySO2Aht4wIGe/FCJuY9bKhVeXDWc4Rpesx/WGDlj/
+            K3k+msB/vPOseWVt6DUJM7IsTgpuca+oxUwFH/KxvUp7V7S86Fx6X3bEUi3/hFGG
+            52Iy5Bj2iR54OSyyJhNJa/fk27j01xbwho59yTwzGQJ2/Ys3qvpUvPJOTgF2qfqA
+            g4mBJ1qUNgUoaoSL2/7v7O2T9njCFZ8AUTNpAIlJx7lcbEYY6MBzJn43F0BTCxLP
+            cPx930r5Rr0nCPQ55eb82qmkR/Ds1dkz3ufjjBGujNdv/kpUDQOJlRdI5ly9SItZ
+            NP+NKd7yxzkVPu2iLbmHiwEKbTjCV4kv79vfe0wp7DU/8PyaSZwkYM1AQGSHH2jS
+            XgEZ05aabTO+JTE+Rp2QV0HVIvcn2U1JkEKUhk3rd3GeZMeXzr6wcMkQdnPJB5XL
+            Hmor+hfpOV6DMkz8Z7RNKC7HSekXCRvRWdxLMHooaW9V0B+16xYf4BLZ/R0BmjE=
+            =IjKQ
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-27T00:46:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+NFJHxjRXHnu4stoPvoxHC5/Q9ehUedkCwMeC5TkxdJlk
+            CX4DGDiKW6eUCE4oVFu31F8pl5FniH785y8pjpRoQAJnXXTcUJdoVlsOEi2a4PLd
+            nWdjIJNBuNrKVP0pxF+nxKCaPYH55LEnCmYXkNuzS6Y0trVAuanrePdTgv6GxQtV
+            /k15tcg8BBfM34riLOsG6uDexYlmTHcZbv4v03ggrkSYn6mLtYOxptdiB+h0Oy8K
+            L+81M1iQ2uHk+AsJN3p+QlEqn52yzh3EXOV3XqiRKlGL4K3xW0fw3vF7Hm20V+gT
+            5HEdpZMWeY1qV3UDbQBIof1YrJdja1WmU4pXWX6ASNctEcGZF8hUct2qxZKazm04
+            qfDOp23RwmoUACjiDZvUqCb8h1krEKnMhkglADZ73IPA2mgDy6/ezOxTpaM4R0kp
+            EISjsU+6zUchEljdOzTIP1byZbc7DWaXORvoQINw5KVI3BRT8q+uHej3kekAdIuE
+            zTOE+vtqYESmu1JCXYjr8HXDPr+lSNdsfUxBtAnGppJT3pweuwE+Lj+ydtGDnT5B
+            xPec9gHdHswulhm64iYz/Z7mUBnHfZYUaAOKh/CgMGoIX1bIEPLgZASYyV3p0rCN
+            sxc3P7WSepvWq63Np53dgL3VUa7zR0B6f6+Cnv0cb+w+35V1crwEfMSfyq0DT/3S
+            UQFqiiFtYCW45KR11/M/qK+Y+RddPAYwMwmko2F51gxT0TlvmhTM0jNihlOEtr8K
+            axMUOIo5omLao2Rb+wMNTgUhpO4c2KlilJSeH6iMUCFuZg==
+            =H4Cb
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/kibana/default.nix

@@ -0,0 +1,54 @@
+{ config, pkgs, ... }:
+
+{
+  deployment = {
+    mem = 2048;
+    vcpu = 4;
+    storage = "big";
+    hypervisor = "qemu";
+  };
+  networking.hostName = "kibana";
+
+  nixpkgs.config.allowUnfree = true;
+  services.elasticsearch = {
+    enable = true;
+    package = pkgs.elasticsearch7;
+  };
+  services.kibana = {
+    enable = true;
+    package = pkgs.kibana7;
+  };
+
+  services.buzz2elastic.enable = true;
+
+  sops.defaultSopsFile = ./secrets.yaml;
+  sops.secrets."nginx/htpasswd" = {
+    owner = "nginx";
+    path = "/run/nginx/htpasswd";
+  };
+
+  services.nginx = let
+    vhost = url: {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = url;
+        extraConfig = ''
+          auth_basic "Chaos";
+          auth_basic_user_file ${config.sops.secrets."nginx/htpasswd".path};
+        '';
+      };
+    };
+  in {
+    enable = true;
+    clientMaxBodySize = "100m";
+    virtualHosts = {
+      "kibana.hq.c3d2.de" =
+        vhost "http://127.0.0.1:${toString config.services.kibana.port}";
+      "kibana-es.hq.c3d2.de" =
+        vhost "http://127.0.0.1:${toString config.services.elasticsearch.port}";
+    };
+  };
+
+  system.stateVersion = "22.11";
+}

hosts/kibana/secrets.yaml

@@ -0,0 +1,203 @@
+nginx:
+    htpasswd: ENC[AES256_GCM,data:I1/wMtEpkG/0SxtvWajL+3V97g==,iv:N08Vaqb7qWC5VWnIRVu+Y1T3EAlZkjMt2uTUcgXu0AU=,tag:nGkVd/TXDRp/3qUhV9T4tw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age15nj7xkv7nrewxam4cd0uw6glxeh9xmq46lu4zdnq23trqch4pufqm9phq6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHeExQS1lFTk1wTXRNcWo0
+            NjIrUWZOaklUck9RMmlXOUZZSW5YcDRFZldnClhMQXBxQ0RBcklnamJTS1NFa3dW
+            WTRXSjgzQ2lPd3dIS1J2SjlQV2ttdGcKLS0tIFFtcUgvK3ZRMDNzRXdTbTNtQTJD
+            dzNrOWE5eUN5aU9meVkrajhWbDRTNjAKBdCXJuAt+Sd1zOLHAzqHJgb8WibYndxP
+            EuZ+u5r1Z2OqB9oY9phzcTNdQSZXcPib1MePjyBY4C1MfXhh+bjKLQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4V3NtS0xleS8yUEpSNnJw
+            eTdXTTFVbVR2MXp2cmhzTytNOG01SUxTaTJ3Ck5WbmRESVJROTZXa3p1dTMxR1ph
+            bncxU0VNcmw3Y1lMSjVubUtzb3dxS28KLS0tIElHMFV6Qk1BV3dpUEhKK2k0cU1s
+            S3NtRDVsalZMQ2E5UlVQck9hSHdtN2cKiqC8Uu79TlOtK0kJsXqnRGzUcF2q4zeb
+            nBisi3qLC78xvbs0DckNunZWq79UM9r3Y3vPG1U7z6fnT9UFVPPi1w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-23T19:39:07Z"
+    mac: ENC[AES256_GCM,data:Ja2csLBTT2iI07G8sOJQABjmDcywXNZqYS+ZSzas0z/maBu+ODOLGntZ+KImomds4ZKGL1eduZ6soL4efdQHyaUGTk+P+X8OiAShQcFCv2Wq7SeKbvDuEXP5HRKyhKkYJFeoYrjUgrT3OBzbF1dPyZyveBnaHM4H7xJm8NAK06o=,iv:/DBkKeOI/OGepHndGtkaKpyu1R64vmXIoPHsKwS+fF4=,tag:QpUOSJWm8Gu4uwL077cEPA==,type:str]
+    pgp:
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7ARAAi6gE7UCnETMmvTD6jSIxI7KElhiVMyA09TgtAVU++Ruf
+            HvL11URYGPcZQ2ooFsz81vhSZ+3KJYAje6cB4JqbpXnhRDt/3E2nwLxujSX75j5A
+            BtlxsPlQ/QC6HbmoqMt07Ch/f5WB1MAJ1kDBT4zkYGYoi0NDGzJ5WslXaaSqeVRR
+            50mtM6SZEvQyQWg9ZqYBkGNsEHa471WuAoOwjVmc4F+1SjOhd3STBvxzzdQH6oCS
+            /5qYAHy6d/XKCOkYIjVkvdFFqUncD4DOkPPvZ0CXRXmXdpXt7/u1M2rB0WEydXHi
+            N84Zsc1ivTiD5VdETGeyf1aHkoH9SLCgslK+WtMr8I2UVLlijF23VPnJNNS19RzD
+            1LxTATv8z23XX6QGbYSQqZa0vw6MPExPUDE/9DYA2NnJwCTMaPjDRZoaZXCYas9C
+            lzdRlurn58VXyx0+xCk9aRrY61gFSs741qPDWEpcsJGA3sTESLLf5SICSyAMzQ+I
+            IUM0AjzqJzJkBC7GnAiQdC299migQdNM06Ol6DIZIJcRmNIcWu9jM5M3mRmuObas
+            B7rYleOinkwzshuEP1jsT8VfGEPiRa+k/tpSCsHlfgHHoKDZmUQoUH5ipxHYp0SO
+            Bcxn9Uz5Xl0hHb2eRZTZYuWEd3lUCN6XKVn7cShk9MVYr2Ktg/XmP5al4VWrwaDS
+            XAGzUbhml8acRA4CjO+nopv5eRThOlixFV5We2J5fOSfOTa3QwSTc623YZ2GY+Gp
+            q/4JXiM3gka1ec4M1oTBSl2f+xD7nXHHvA8M9nOriHYKdsLvE2+eQalobvSX
+            =1P0Z
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ//bRV25HNvXE/UfhzYOefqSftn98c/G3WpFqX3FjDj2RRl
+            RFzng3vTR+VLlhlJavEY2tmofl1szAULdjEhY0LXx6JE/+t9qtQd9UG8BPPxS5D/
+            54zTNVh0POjUmUJDqAx0/J2fs2+ATbTzVBCqpM5H83uoQd3nwbPji57mj+ANhu98
+            b9vUJine8Z7shaXsRnawYvSKmq6vAsBgMw7ueYsbiKg4W7FGFYpBg1crhhjYEl7V
+            PGYHIQ7AawVruje/QAqu9KoD5QfT7kpWyj9WdLqJIn2zItN4+ZBbFPHjBn8H9otr
+            OK/B39rHv0CkCq4OJqaDP+5NetV9LXJolqrMrrCi+3QkvVqftqGzJBVhJpqmmET3
+            Z0gqXFHbYyBLnp8MBJhoFKaXj9dxDr0tRVm3dS2oM+MapnPBt+Dip76hnmmjEvNm
+            Mp93N/UejwBLDi3pWxxXtRvksEiVNIa3Y09/dlL6K7ss0lF6BAPvqLArK0KL/2vF
+            SQAWoyEJPvl8lDWprYixZdDKYEw7UjcGsoGBVqNW55NoHWi1WYP9tEsqFCbSNATR
+            TRZ/8xCp7XNrWn49EpuhdNQDMg72olFr1a0cEHI2C6GVcJDYSX0IWJNwprBiHwVi
+            8bA67DLPLUrl1ZBtNXLjmvZ02rhBpNw7pw/aM1pOtPCSN76oWOTL2shbpq7X7pzS
+            XAGn8mMQ12RGaKVEMam4z7x8pgTOp0X2RQGxLqe5UVNSoqPKk1+gdDi+2xG/z3Hk
+            vJvDTj5P4fDtq/Rg+dNZh7HSgu0QvwiUXSLXXbKUerqAnnMB6oGdyDNIZPU4
+            =Z56D
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAkrqzCzeQAnxk3Ef2gNnrG+0XHtbqA8EXUq+mKmIuZn5L
+            2yRx4hys/F6WCrerWfc37rhap69GmZfZraOF/PM+/zB6gO+TtN4DQGEJrBLh2EkN
+            Ch84pL99WZpIF2HM8O4SRQWDMnPHELIM61AIIwW+xURPe/R1L7ATVP3YLjNcpGo+
+            wjBeEX0iNmduitSU9zniezr1TB/EwQHUCF9fBni1l1n9kQbTwedgkG542s1RkjrL
+            p2m5W0iMJhvF5N9OhpViipqj2o+4asXvJevYHohV2WApJ5Bydcp5Xr1Uf2CfuG4s
+            OI9K8Xi+jGN5TBa/zwpeew2TvpjUBcJWalfPgycTmtJcAXqemP5lYY1m8/4rsM2E
+            XBdyXBc4mgZf6efgboXdUWaVLFa7zW2piL8sjlBoMFTAIUNKJ0fWM43KgolaO/YB
+            Oz8FfXHWNLRbuqMIa/IZ/OX1DnDu62+Havzl2RU=
+            =jPPi
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ/+JNKEnHfS38I+1/9xU6DPLZ+6mLUZJCZ2RK3oYOCaKTCk
+            BPbcEdsnpdm4U+IhdT73Gv3q5yorfhCW66RkK/gqkufZfmFKyV0SxBDnyDS+5/ho
+            BfPZV65PKEHNsB/s1Cj7bDX7ce1s1k9crMOP+gvXA6BcZ+1GR7hrn2am/2KOHinD
+            eGdL0khc0R1raacSAcz66oY9fPTqmx88ZqONyfIsz3945tPY5WOmDkuvHESbJtCh
+            EqypaNi+ZVJs2edTR7JiJ8eLYlHh7rTxIew7zyBq2hJBpHPaH1tbTQwjEn+J4HkN
+            qKUme8IXCfgQjz0nUNcbB/19bPDB+LMpdKBcoz0YHGb5Ar47pQzCo2sbrAhW0sx8
+            lbjyxzAx4LycoP6n5nnX5McH4ubOsTQkzaPqtCVhjbVRflhNFqaqX+eYZEJEjP5p
+            tByc3Y618hkZRIxBW+hXrPgxNpc+hHyGXPQrz1+ZwBs3SlxkuuJNBbmMlXvvthsp
+            n1mcOLFL9AVJtx+th+qSV341nf92ski6ctSdjA1t5/Y5WpOMLUeXu0LDlm5VdX25
+            LoREyU0HOtn32SFr20sT8xjjisbDn5viRUNsQAdTEJDUu//hVkF6amF9SYzy6Km1
+            5z5hnlFUpkuqeq/vMVDKSSYRgOC8Ivm2eMnZHQxdY/3OIueCaArXS8fYFegwsMfS
+            lQEK6bf78JARpACZ8nf+aoQz7zAnEBV+xHdaicZ5JSdxJjy0U8SAy2NKaTs2HeQm
+            GhLIBHuySRrzYBTCD3iaKIMUPwYebM2NhGJJzcMHTn0RaqG24JRkfSDlFdKw0OPM
+            TQT3bcI4KQ95oejJsOEzLx4oZ3xEs9gwu7XEhYp88mXaztb9KPzgcFL4f1TLIU/J
+            k6gR+Sdu
+            =Y1Ex
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAAgicDt6epHFLeNZSRsxYL/K/WhAhFmpP1BoTPK9jGGGtF
+            TRgVDjWiiFyHaygOp52dFPxMtnccCIOslg4C+moHWXg/9YR67xUVw6MWVbOe3dcD
+            WbrgV0lbm0Z91S8bXx0ZEzNN7DX1hFaiX1FfoifLmiZewySuBht0rO4c6xUsc7A/
+            BA9Os9/WdEEThW0rUFKFdI64MQe20XUKfqT0nm9wdJYtvPe6ty/7doitk9aVnhSj
+            XQPBME9u8PNTGiGrhZKfpViqi3/OHHRadNain7Yd1xFQ2QilFbQoAjEZXClRIrwo
+            dWPWOsGpJ5+BbcKTNC09M+uLTETMt9KsiqlD7qxHNYaGVzdJ9uu5+JNXTRgsSDRQ
+            qN/PVYSUxfTS9T4oIRUZy1gVdy+9MoPcHzA++BRcd6aBn+ThteRu+HLXzQU0RaR3
+            IcZcgDa5uFo4ZiJ9+mdY0undVSOPDaQrDy6Yb/D32HghlN0FJ2lL+J0GluT+7nFe
+            DlUkyR04VAdoLCw7vBDdMVtrPkb+hllzBqmQWUk8GWtY3w3SsikephodxAxLthtw
+            9cJcss3foQYcGKQFHz1rvJcte2SY14n3dhkF2t1IBFJ0uiESBChApqNk+tsL+IcW
+            Tqx+UXnQNhk7PKG8VOFktuJqmbwF71zEKWkYkZbei8ngxvrjd/BdJtOt1fX481jS
+            XAFwA2Dr7aZ9N7HFPWdwY9y0YbgLaLeKdduX5oAbUREjS51yIBcjDY1WjqXYdn40
+            M1eTda21SGaHOHcG81gU+k5998bHNu5OVg8Phv+FsmcrkjLmJp7dghrnZsMU
+            =RveH
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf+MqQwPkvDuMJDMred/xqq1BgtzKMeuZFZ41q/YdQk6u8i
+            TwWKujhcvyeAcTFJgtp2S3RDMPuws+orqC/FkpSyVekDolnWLMWLp0bmUt6rAXV4
+            qhUGOj/oUCvKPJI8aa+uI3EHDxe2wEYY87QoB9sOFTZgR8FUyuDdqRPtAQdL5K64
+            e5Cxy/uNml5IUq6ABQsM4k/Iv2AxDbfx23r1mfhxJaMIJbKMEQhilwgIzRhSPgCY
+            jwpr6PsbDbsVrp+tbWSlQ15Ah/hVO8znyY7VCS6oEU4jO0noa/Wq143DxMGTrVER
+            28QytUAQDC+ftTCjNvfyAMc9gBWWXid4oedBMqeXX9JRAZGkZ+e5FM4sPu6DuR9v
+            syQvfRpmgj+Qp6CBQd8OqvkhcDZM6hRLJ218UuNRbNsdRGPExXoHRB8j3HAhuhUQ
+            1PJC2qvZKeyyrdrqCGNdhzP5
+            =//oW
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7ARAAuRjzh7fy5ORzm4pqlK7Lcsj1MmOBf33FKkxQ92whWdWU
+            bzmIE0c4G4Kdoy+aGnbYtDnCoQr71mjwSGJ9tDwQoQgGlbWn4NDYgVXMEJIIoeIU
+            5Qnl4kcu232lnK3AgKTpBoACqnQ0790NSDDVupkEfDWoBmEb5i+N+pqXZeF7OxCn
+            aa3K/Ek9LgFC5SIuXQlC0S+uxSdI8DjKLEKv3Ob4lG9v7pxgLnf6YogJ5NRDcR4L
+            5r0vs6iHlKQDBbbZU7oNpSGf+veWlLYImJMhnXyMDS0Lz0ziFaPVot4AYDL0h6Em
+            1fH47zCRKI6aYmGQeuQqAGwbUYl2cmDAcwvmWhXUcxvUgUHn2h+Fkb2ZSO0YhbIx
+            cFSD4HYuWGADdprWRIH/1aGeqnpibg40K6Uwowzbpkoa8FEeHZYwFnxH6c9JWCyt
+            VNd6RNxTagLI+hDn5+4/YsywoV/tKvqo001sIj40swRiRBvToxU+4VEZpaFZBefN
+            fEh4KI7lVOAX7i4YrnyeacR58VlSXGbe5ypZbWcI31Jvw34NJrCWQGjBo5xsfz/q
+            Nn2AfRhMbSNECPRA45vUKwj2uw7TMzRDKChE7bwPXPG+MvXFYFgdUNNrfM2YfIDj
+            B6CKJtkMyBfAecA7u5cjZaE2wQUA6zxDZFks5ejSN8tp4VyEieMqt6my6X4Te7jS
+            UQGmSk8OUy5xvUC7a3hkmkpg6oWBwRCtWMhV6JLTLpkbjKIeTAF/+n9Qmvcuj405
+            HIDcOVELK3FNg/zZCxU06gM6s8QY7HW7ZAuYpFYiOJUJzw==
+            =3T+u
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAA0K0mh3s06t/zVhghKkLwJ6fwmvaWYohz1KQIDW7MJTOj
+            cuebwn0am9idNeyTsMFXNYNo6Bixt8fzyo8QjBCiMi/hgbUcU70Z6wjDdIqnl4Ta
+            OljQFET8G3XZje7ABn6CHCiZTaUd8+XF7qP2R///rUK/kJIJEE98mvAoEDBjzkt2
+            XQgzzotIwxZlw2MbQ27twxyCC6yxvp2I5gRqTAuJm9KC44LaCnxisU3v7Ebl1nhR
+            kxjLpxSb+aM8QBIuFSwkGSkRvmxUJSWFBdXY880JKPMVXLM7TYhcFcytimw2Vjff
+            SXwAWHgrETs9COTXMoJ2yzGAdj10QMEPLA2RJWxThTj/LGOuLLQkAEEXiNYZxYGX
+            tXVARXgIyYWV2/2ogHncbR7SAuYOKj0fle4moJ9TMO+PsLEqxptjem8p06DBftbS
+            VgwuMsVZdKTwv8sHqnIpNAvpCaZS5FZdXCoul70a1bEgHeEdKtNcb8RiMhhv4G8z
+            zYw+vXcwMgZ5if5hDxzBQBqCIxu4Oax3eNJkPS/MKCyfR9A06mWtBaYSirLvWHY8
+            hu6R2vz7sdRb0DckzZdQoCOjW/IDrIRXlij2iGNh7epnckFyEVzPd4y+R2kxVML0
+            iwAiYsimgb/fGG4VLZ2wakI4iaUrCZHczKwxZBqtJYWZON4KPrtlYt4ljIjlErXS
+            XAHf10OHLxIRXdaeA98W8/SyPREQXjX/dKn76pnGIkyfvlUaejeYaqw6KxGbdqfw
+            m2EBscG7U6wNnFGv+hKOQc3KtQgZJjmLpaDH1P8TsnphGmgtM/G9mziak6m4
+            =kViV
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:04Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//f7lCWPyYRmQiQmiSRsoZJ9zMpmOdPfkf/DuY1CGvgzre
+            vt6mKwv8/7iNUTzd3EkcID6rdygl2ugZVYoH6Azv9rtTdgHmXGlqNCZuEj6eN39X
+            nPamm4Uk+vmxFstW5/igqCHrV1SkYbQ9RHh4j86r1ilJ7DNf/B37f44HvL34Dom1
+            l3LpxMHlH8r8bOY7ejLnOPJY+2bcYDPwwcou5X5msEI+V8COEFqomOW6GSDBg2R8
+            GajKtZmTSXpg7Bd3DyPheUpTU8uRqZkw7wzsq0hC6PSt2qWSdMvHyrmh8L8ckOSL
+            7skVrqW+bRjiuLiWt08DjcxHkQWsFiG2XYWuaiP/qinndNFlwI45GBUHeZtNxYpd
+            FXerwDM2samM4qwhZSYtNLEwxkM6HHIZwkSx14+Ebt8G9EWrpXlB3CXJTCNGqRBJ
+            w4bDMlWspsA++7hKqnlDgNLPitAkeTjEU/UBXbqV3gts5Wue/KpvMNNMheEtt65j
+            xxeYNRV0z6bQ8mBtgYQdjRfB610VnQrTmawrUP4ci0Ju3WDy9h7VGrSsa/pPNU54
+            P31aTwt6zFfW3s8C+k3PIynYFkgh1b3sWWhm3CsYLB696kHmZhCJRTYWcQLqAsxp
+            +I0+sisQ3qNvjbEb9EvnGAIvkq5cb4e/YO9EFWcgSJXkVaukstiwLd+V0FYmX6TS
+            UQEBRSdMpInOiOlkRO/kpZFqKDobDV+L0i0fdZlyuVfDe3UN9Zsz5n+BSi4lJLPA
+            IU3EVNXe7AhO64hkSDaFUSx99ca1GwL6ykfZc4YanPd4xA==
+            =XQgf
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/leoncloud/default.nix

@@ -35,7 +35,7 @@
     docker-compose 
   ];
 
-  users.users.leon-docker = {
+  users.users.overdose = {
     isNormalUser = true;
     extraGroups = [ "wheel" "docker" ];
     createHome = true;

hosts/mailtngbert/secrets.yaml

@@ -9,175 +9,195 @@ sops:
         - recipient: age1jr5mc4ekmjf4uk2ue4xcuy0yl202phlu2t6c544qfj45ahzag56s4d0kzj
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYTQvN2YvY2RCekJSWmtz
-            V2VmMmNaOHJiZWJpRGYxSlpKbnJjVHdGYW4wCnBjRUtSQUhIL21HYnp2OHRXWjB0
-            RTNEZUJteUJFTVFCL3NidThLR2g1ajQKLS0tIEJRK0c0c2JIbGRFd0F1VUk1bWVm
-            VmhMSlNQbFprcXFjZE5vTTA1R0ZtMUkKH72hmjOnmzS7VZnCrMWjWGuDJ5tyczTK
-            4yaJoDbBUgUYoxybrM61jadBswo9Sd8Tb9wvb1F3K/ID7i6mWcNKiQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUQ056dDl4WXpjQzMwZ2lj
+            VFhNL1BlTDUrNGRKRStkb0szV2JLRWJUekhJCmpsTGpVam5VN01Od2FTdWhPZXM2
+            OUZXR2tBS2RncElhZlVqTGpxMjRZQWMKLS0tIEFnNHg0VzVNWTBXclUweHpxYnA4
+            NVE0aEFBS28rWWxFanNrYW5pY29NM2cKLdMv9BCdSFl5QInu+9twgymBRL0sCC7m
+            5lEaumOW5srqlA1lXOtflZ8Tj+GwAxehDjrhfqCK7d2srLVVDJ2XjQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsTDZodjQ2Y1NMZ2E4WUk1
-            OWxjN1dGU01DVlMyL1ByaUpJdVp5akhIVHdNClF4U2haZG43UXVtZ2FkckpxNTFw
-            RWduRmQ2cVVQK3oxbThDdC81NmZ2RWMKLS0tIDZQczFKMEhEdkVjeGIxLzNwRUdM
-            N29LbzZiemJtMkYzUDFXemhWUlVWWjgKf9NXT2s1dRNdJtnP/TlDRqfE8CwM9Nfe
-            RmX+eKFzbZRT5Iwy8ET/l292a19Tiruyka+kwtzBNLzWVzr1E3K+uA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPM0pPZFI2WTcyRmQwR0tt
+            N3FpdWdtUlFpR2ozRHhMYVd1dTVBdEdETkVrCkNYQjZZQlA3Uko5RDh6K0ZNazJo
+            MmdzMVZhd3JFek9PQllDRDBhajQ2MlUKLS0tIG1jV29tYzMwZ2MzQUNtK1VNVS92
+            eDkrU203QThrTmlsTHg1L1lmWXBRdXMKmQi7++16oX1CZGcXfmM5m1fNN8bDaCTq
+            kliuy8Jk7eAmXAUI+U9joVJnvwPzuZJ66aThvlIb8HsGo1v7IVHpaQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-19T01:31:00Z"
     mac: ENC[AES256_GCM,data:Ebg1YTepPyNJ7InvM0yN4sJUOHuWELP4ssdSwwy3cuMEkBN+R77vtL0EHqkiM7wFOPq0o6z+LYAlyHwMpLHMwjA/0z9cqoKFUHq8nN8z1GUrlDlFkPcH7jCfIhYkswAsRFvVvA78h5eqbUBs1/lNNkV6FdZVTIsYHw8vWE/4T+0=,iv:fJj0KmxoSg6Tyda45WD4xlXyYHDEJNjyzuOVU/d5Z1g=,tag:h9H2fNzZORLrhddqIU9rOw==,type:str]
     pgp:
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAAzUV8WEkpps06+yhP7Xbz/b5EmKGMq/NqUOzlCONwUT19
-            a/idfIzouKhLmkYjegu6aH1Zl/HEI8bmqT0WDEC8gJlCFTFwKejXxctJt76+Igux
-            Tdtlies4sXhEUyazsDtihsyUS+96fdBT68S6J029iT+SYZCxpmwfOM3R69K9okEJ
-            bRm23YtSWaKGnRynyH8I4CLOrlKX4yzI8ewIbjg1HhyFMFhRVePLH83V1hCqRmsG
-            +/OI7kiLo1Ot7KShW6PjC9Q6eEV11uDNNgae0huAozOT8yKqFw6NzYRUWQRaJ8oQ
-            efqFhMe12Vcs+bt24x2bcqhzV1V6blfxp+Ddc0SXxqjj+mCb2MTBXH0VNIgygwh/
-            QqT/GefSYkO65uhf6ocEkB5SGh+w/pYuDXX4wdqDwCF2zVEGAVwXWDJVUFNCunEW
-            5jUly2Es26GIV2dmNnvWH6ro5thtofIIuoNiyWvw1UDr/PALWsTPGyjgVdwKgPNE
-            JL5sQnzb6klGEX8budlYitzHwORuU1O2fUUmN6VEewwWSbgLw9xUtqOWTpMhxymd
-            wpR2KHkdCAOiMfX/okV9Uvie7BiQXQ+XajsOeo6nbmXcnUrVq8Cczd/USkm7QxrG
-            9p1WVgRT7bMkdyatalqmmbaJEofc8K9sPEUmPu4FOnu/APuMGPNgMsbI+/QWaOjS
-            XgHVUSx2Ac1w5wQYSOL8HKiqePs0s0Iu3A0HcR+FYnjVbNwUnDWmIVG3+foADecC
-            1eo1WTCUJdLUwV0DCf5hlsSCSQJte+4lc5dnos8i88yW23pnAzPmSHTwny/NKTY=
-            =npHt
+            hQIMA6j84+xkv3y7AQ/+Nsi31f1DlN6vOXD/0KwksAcq/pHiBSvZpjeQ1kaFXErR
+            bPU/yImFlWpjhcndkeqJCnpPcpDG3WptooaT2xvVmGTa3ywohgPNpRIbylJHQ++b
+            o7f0mAT5q9GvsBGxJQSrJ80bFKJVHceNa+zuo5qpWGeKfQU32LYSvYKE51LxWJm+
+            LqY3S86iRJxU1aDfBLlcdz3QF57m/qw9bTopqikccJIqwdUX0PE/t3m6z05QsSmc
+            HEbT8vxjfhQDZhPtR2v2GR08T5rkR52ibK/selSKS9pXjovQAu2zXLiDH97FK6gb
+            /21RNoAIvPcWS848qAE7EmZ8K4xNivEW4ahO9FivniRkxEa7x+jEbfQEMQYbREmM
+            G3aEqUyDzP2hqW3sI1pjYTdp16s7yEgotYUWC2pQdjJvKpIEHyEJZNUAUmOPaHSN
+            gaL5ZycENj51UVCBkxWHLan3pUsoRhHzQDF6+lDkBatnvCRkoVz47Y38l2cFafNC
+            kIQh03zmTqBT/TWJBp11htFq/tDzAq0qcAt+QXQCGyeDQaTaav2Px1EsSAMXSPhh
+            7Tao+keYL484fNTdqK8IC1KExQIJGoZ0xXU0Jc6cogpmxN0IppU0Lh/8ZigXdTFK
+            eMxRlQRSsCVbGLdwPIA/Agjc4ngrtuyHyF14CRG95ccP3nyHt2Z3221nkvBwOW3S
+            XgE90wsxfZLSOyXjmSwYcvlpTcFXYbQXDQ2RhQw9soXBGDG9c6mpZDTAT540MJDf
+            unKN4W7bI78Oh+tpa/p9vNdp/ctX96Qv9a0ukAEV6CpWaP4GZiDShH61pr2EL0Y=
+            =YwXt
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zARAAg8SIVsiScu/bSjvPjJ2RJMnviQh3HTINOuXipaYrQQ5a
-            nr9gekOtz3UDfYK22FgNo7YOijcIDbEpxZadpIiHedwk4u7imqTekqMqM/oUcqvH
-            aG7KAbL+x87mECretaEU10TrjfoeuEsMdXoGWWfGKNuykQQxGGksBPK22aJnBlCL
-            JSKotNwNYjsWVZF5h8gYu8QyH3RJ0WXjVmJvs6B6sivjAAZxU8uV9D91W4VSGfEP
-            mQWwRNGBY1EM+OnqABjIH8iOI3qTyzV1Rp0uKucfGPF0vGF/ynWwbUcJfPwzgb50
-            YSHLC+eHbTP22/76l+9oyyYgxF/fO7ltpyhkuyQj5OFGwlfGK6SaCF7AK1SK5+8/
-            5bRraM+IYBkrIbms0431GtwAAHFnoSj5AJ7rK9YkTtwwdBjul00sjsgZEQHLspT/
-            QImAdeW+GLhL5fi70pTIUa1VBh3H1Zpl2x/auEMhvGJt4J4F8Lr0xu0m9mUGMEYT
-            l/ssr9oFP2JcPv8Sobiw3UseVG0Min/0ZToMvzgw0RVwhIWNVF/bWUk+2CHHOLb9
-            sgGjGqNU5tpSmm1qgOjdHimWHli6muRi5HMRThk1nHTE9GYzsnE8gqHZOFlRzywK
-            ST7tybxpHq4HXF8ewTnm2EfqQQAPQTB8EpG6xkyC46FXOQl3X8MBECFCsOISHLbS
-            XgHfR29yNGulsrstsXufxOhbZ0UXQs6MTw2yihOTLRHlsGE9gPJMNJPkUfO1KwuE
-            lQEVU++EbcwJHmB/lBESP9/hoP3VsDSm7YIkXOZpAq0YrIFuv6SDVH/JTorV54A=
-            =BEV1
+            hQIMA8zMZ+ak7y/zARAAlZY1BEe3UvMO4CIRwkmxfDnfcOJyT1eKG+uqfzjjaXp2
+            l8GqJne+dKauBJ8bJafYqHCTXi2JQIuLOH5gZqJuBRt1791Eax65tqxdNoK4owFH
+            P2ovJFZuj4WdRi4Kqj91qg3yhpcE06GdR1AbAjz3o9CXJdARR+3eyI6gGrSJ8T0o
+            grFhlZu48GAm56osnsXRT+hZQCjxtPkl+5tt+IeIo7UPDHIcHEQA3IiIkdKt/jAa
+            90gSJaWNKUO6LoaNBzfW6QrPdjzJ7MwB1ZCstS0UB4IIq3KRWMRxbBXTLEvJuryd
+            8XlIg31rno5Rgp1jfc71u45bbxCpi36r80Bv7wzbTRQ2GmCi0hVr48vLBzrm0umv
+            TB5SIREGTveQ7wtgsAgfuuW9V8AzFMIAIzQPHtoLgXGFKuaionZ1OhE6PKu/ExR3
+            VaarJkfJvkkfD4qCQkyhiUsNlYnWnIekuUY2UHgSwGqIa5l2M6KLN/rk4QF0XS0Y
+            oyRmCooVjSuPKJtoLBab7QeD0KwjZkjLRU5rPG6rn27U8Mc59C5jyI7W0Sif2M7m
+            CBqYiFYFjlWLo1lC8+h+05dlh6UFkZAxM80SA+Abomw9K7P5PDFKJr9Aq8ghDFLd
+            i0YLTEZQLbyoIRqbLU5TpwE1PKXXSpDnxLGbmN+jXBa0BHSLSaAKeSFp/R7fpzHS
+            XgGKNy9vFkKRy0PtLj+/BxCu9zpt7OV6efEDkfXhJgiQO7xzLQO8QqhP7FVQ1LAO
+            EMdwM2O1ZX5yfyj8YoaFz6ihVWEYbeB/5ICz6AuEon447RsqucDHQ/lOmqycBD0=
+            =Bhz6
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQgApZ5o1yq/8EndHHXOu3IgEKOvd4KnALi4gFyKQ4kyVhdD
-            4fN24/7CZ66moAuxQoh2qmMGyuKjIk2u986fag8+qOPuN87r+OaOck3qN6FqRjD+
-            8NX3MJJfdeY3EF9SPqkw9QRjx983zrdSlUVSpgxKExejFN2naFYQtYJ2KHRMux2+
-            wXXQ9xRSv45o2kou8lmGpGcBxSHxaKjGlF+dtmGnzMDlPrEQQ8eEDLXNBiKc0OTM
-            3NkJ0g/VT/Fnywn4AVn3JfmLCCDLiQOQjgTyUd8N7AntuhUIpIW573FUxP0t8UAn
-            t9pQA3U/F95z2cN7FtZhXKEXzK4zFtcAwPiyqrsWj9JeAZXOu1MCCSwhuPVkROXA
-            pXvjSvpDEa2TySF8SweahEYBwZH1Us8KxIPtPamkZTY/+YPdEyDmeUAiUxsTqT+T
-            voUpTER0IcsjHIQylXMNn9Fvf5DfGaNvOivfMf6Ksg==
-            =FQ0z
+            hQEMA45bZkLXmBFpAQf/eSkupg9IaVn0qtoVoV+GlHBGc4bJgIFH6altsnk96NAM
+            hbxHBb+Oc0mv2BoSC81/OBqo8tU49wN5TzDccOTdP49Ng/4iTDrCvmSch7RJKKNT
+            Juf3PCvKzRFah/2mZKCWnfMQ678Zk0BlOIJ8b68MuiHqOwUsMw+GTYQqv98qeVRd
+            /Wf6DOrpFZL29ZYWUMUJcZ9X0baSVgME/NVXXEBXqjU5/xqbBP6fOC3sbKK1uMtP
+            D3azWjM2M1ya7Xg2JEBLP2a9IG8DRSVaXOX1v1MseJoAMhPYVxxsIPfb8wg8+lBU
+            CbHlq/phTqZ5LuqCdJ0I48XbJI9x2rTg7rCfecDSStJeARe/jtVEwvMb+XEiweQu
+            PNRY5ragcRapdebFgHzmXmhNGz8iLGLQ34RwH4cb5ZjefRb4Ux8U/Ors8o0PLTy5
+            TwO3w5P/0HkAYNMmTSwrFp84GVHNJN1W6Jz8BpdMXQ==
+            =Tnu5
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAtoQBjW8yWde2zwD1WTix6xeKph4VXxwppGUP4A42Jrkm
-            x9aFI3QGF/0LixJyb7xDiCB7Tc/SUSf4/Sqo5rEpCXie12r7wUZQpV9vMWWJlGib
-            u8N3tYGLL/lo+EHIPp//mHA5iWFm05XuG3gzyhhmPH/mD5taeJ+cmdj+uVwCsozG
-            7hienoJ6sjbTRNeECwwBqJFrrfLSdw9TiGOiNb3nnoQwT7wap9NnIyUViHwZxOiQ
-            jOYGCjvzTGy340PFCpkh9BvzxCn62SLLVo0N5Rmq8OV1hBZHwJ81N6VhWzoVHNXq
-            4fXdj5eXB3aPNhJ6db+q95K5ysoYILryGap/NzXqZwv9xOFxETuN1zHMXjuM5Ufd
-            A4odtNLX3OFlajAzBdlfoWSCnIht39D2ZL5WbwpW5eymr+KLlNra7M229ruZ4sy5
-            tUJ6kYuHUX536ZwP9wg9PJib3QXxvW3HxHsJYsdXE0Sy8qgmrLiALKpstXYdpzsv
-            +vnBEtjYEoCCs8yUVj/ij+Xf52dHRbfw2l8FXX9Ah3TDStfc7k3miqq4w0oMPZAI
-            LpAHb0KwQv/O6MakAQwpxzPgdR2IZPxOQ/y86by4aP1MDCMkYVtCm96LhRJjKP6S
-            ivVo8b/yKMHs4YEMJR+paYyMCHBg5LR+G3KeCahYs11sZHVHeXamVZIrsW+EHkDS
-            lQH9uXc1DCoonEXsu2LWKoGQazHs1EucwYWbXpwxPr+ARin0itS6Kb5Le7cqDtze
-            XiscVgHb4X9c9Io+Q1iKnxcRrC3KuOIczCckqvWwLWD1pHhoQzYNBdYUfoSjQ6YS
-            ++rjgDDeB99dh5l427yEhmye5mLxv6o4sZHMJsl8zZEXBAQi7qHspWcnIj6mR2Vu
-            TqqeebaK
-            =8ICd
+            hQIMAwMCBBrc/JA6AQ//XgbVMUIJ64K+jBHVt3wOqea6QEUGeC8kVWo8tcn2I62a
+            M/xZ5w23Sr3d1HqApy+UPMp9zuR6lMSOkyKTv0mAcEPumti2KRNu0G0b5QX5b19E
+            1xmGOOj7MKD9OhVdew3pNw+GK3IzJ/127M2rF7bzni3GOWEubOP+BYthdvxtI8Dk
+            fBaIbTj/I5vQezwD89kUnYf8FSJTVl6c1nczEHsYwjvPJzeSp0qQvEjtBFlheNgw
+            ZKtXlJ020JHAX9cNk8D2EHIsLcl5PottIheJ5rHiT7N3XnCj8KxFzZu9OpwkyZOk
+            dDEEEPyUNq7yj4MXNZe8K0WvpzwDvg2tXTmAieJO9hSerpME60rJdxMrv8pLjF/a
+            qMWTLGLg1d1oaTLl/yhP6zLJ/rezEWQ+0OniYdpUkdOowoCuQJhMC74Z6wg1gZyt
+            IxcQrTjEEl6PB8moAD7oqAvlqRsVhZwQeW1Odfa+WVDuKSISrAeNP7/iLsWwCpWj
+            /ebPkZn+o37wW3oSFL0hbElCCGw3uWWxYidZpMXj7Z2EoaAf6wu/eeVjVf7sH2O4
+            OM8aPe4SqTBKMYuu2byvjk2fS5jE5aXu5EzDxMu0d/5Na0EWg3XXpRilSjThCXt/
+            /iItFfWxTzrGd4kNpscwBJEHSqdrP1Cxypf0AgSLUGy6uU6HPoN18SxKkyUNQ9zS
+            lQHZ6jFzu9xyxlpdJuv8vurGa+CkRMz/4e35YWZKpHOM8ZWgYKc8GQyv8TyhGgGr
+            1yIK2ia/enU9A9XfkaRSxPP6ky9vMSXgdtHpdjtghnkuABAX45iZX6BclndJnI50
+            op5TzUoHCBq9E+I9mIpVyWcuadgSxy1HJn6g9P+At+dq8nvwBhAgBSqqTchSwYhk
+            NiNsonLe
+            =c2wA
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//YbYia2w4AJT1bGr5K8lweJIySkI8MGL1hbJH2YfnN5DD
-            cLYQcZqJwUsJIeL/f5eC8dZfHCYfhIT5PUka7KomB/RqjYe9mAoca+MG3/akJ9Ni
-            AeopoubRTnJa/WYwOF60lIoUfZMl/hbONIq4aGTUGsi63By8w43nAO8EwODhWHnL
-            iM8NKvX1z4PTG9r1iBpZH050bM5uvyB2+tj2BRfUGd+JOQPlF8z+qmQmMtKVBpWk
-            czNrb7cLrm/qqwxo7e05XcSRfcY2dG1JfT1w4w3epilxYrcPaoDq1li0LoqMuh8E
-            RNwHqRT/9E04dxeVeTXZq91WIZIhSrN2KCUmjUh0dviEqxOkfDXVR2qmT3tt/1No
-            XfMWARlzSYf7sYxN0YlwV6Y6UF3ik7OzTpqq4I3UCgZlQL8rd5r6FmS4fBfzSTwi
-            Dhe2DYiBZWnxq3EL3lFY90gO9ukq+TUsvcb5Qr3YGZ2qv1uv2iQ9c6j7JJL37cRp
-            0jn2QkLJKg73LVGDO7ZUBAJLb9KDzuoZ5qLB7aomFoMWjKlDSZIBnsZhXCbIS9Kt
-            YGPvG/vDjKHdL9ubcEN9rm4pEbjUNlcwC7srSE1eJZoTXdOg9LIh7OezLklpte4D
-            HilLwrPgWuQ4XpypbWczMxLGWKHaOr5gsgpiyl8XFeOyCigCrjsjo5DYvUs4iaHS
-            XgH2scBHw/ocZV/Uug+R8x34RDYcSweT2WkT9Y4WGrXHTbzTcRzFDOzCG7i+7uVV
-            WzyhNf7dr/ym998f+KoTIl4+ko2wqrma+139UbvSvjg80iJKgfMTCCKn9ZAAjIU=
-            =RpBG
+            hQIMA9XEenRNYVGHAQ//QQtt0ly7YtAqS5WfdznBX50JeuJ9xsl44l0PHG2TqtSl
+            Q4NL/dVVOD4kBwocRKGffKHhwywJtR31tLe9gpEYhVoeKzhKh9vvCZYc7uunicK2
+            ajQLIIDdNxjwMK27zr3Eqg1MTLRnIdgJ/L8A0YQn+ix6CIlqeqTBxe5GUTgBGi/B
+            UlFt+N6CLUAeEjzWhkOhs9IbPtbMyg6d4Xl50py4FWyKbUt/U5Q17ga6hohHB+cF
+            VrCeO/nyByN+w7czN7gZ1wUnvpbZFUlL+qrw4C8IPJpPYPt8Ldea4IFwU4uGkWl+
+            TscmIkJZbkO+fMNwW4xb/4/FZcSFwtDJLKO30LpeDrhdOzDBrfd3qQAG4Olfmw/c
+            rtn18RhXO5140esIFJC0VPbcrrxaYklDOWcJl8Ylrdd28s+PVVZZJ71wk13MBI+y
+            CLl7UHRvp/SaD5cJvZO+W0EDqq5J13PhsM0jB1hvbQ+naDxJ00NxJcO0/Ulu1dWZ
+            /VI/H/1Xvv8cHr25vKLbuLvCeBt6D+49GdfB3llZBKmNm0i9T/NY6jOMxJBKjEmU
+            Q3s61+MtCb58f5rd8av9LjlFd/Euz+e0vtmkEUl15cGSAFJ3HO8KvHF5mr6YJ584
+            AkO3VKYvTVbp52ssY9aJArpYYbkU1qOLuIa55XNDbqTfUXgk7Xc9U5HhOZscgyTS
+            XgHY+Ld3Y90bRLCqW+pDyrgoEbn8qkEuKnvA+dTijnkyC7fIMtbTVf/HWQPhxUwu
+            rkGm4y+Y3AShQ9tvhuExFnu5hmC0bbIqXZ4fWmGKGv0nSqBT25zsodxmrWZ7Y9c=
+            =dEti
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf9E6D59LIOQjePgNl3JqcGnJXDal0zPgfyQIEXzybLCAbP
-            WN+odoCUw/K55ZNRjiZBESSuBFW8zrIaB3a0JMVdsZUOSEey2sAPvEGy01WQycI5
-            WtMwl4hyWIXM6/SwVFlELf4K+b1MwwCAP1LrwM1s3vzR7bt1UNKSIQdNzeZn1LFj
-            JVX9jA2tPen8amHJvcpUyiwOkwrYqznaYbzyl0irvzfV8giByl+Y/Ty4FjdG6iVR
-            V02immc6OwmNFlL4kgWgogIrJQrsvCpt2IprweW+0Qydz++8lxBX/DpiP46m7HG5
-            4RMAhhuDQGGbwin3ZDAzt6kukADaxYqufrLBCOiQntJRAYi0WY+EFSYHiJK/Ib6B
-            EawMyiqvqvy15mcBJ4aH4IGT/ZzHQWTzkWBMu5Pw6778EHvvS4DMnRdVT0fd3IcL
-            /JLKUFvmo1C1Rx98OutktUqS
-            =z/yb
+            wcBMA/Z87ylQaotQAQgAj/Dqq+AoVlbD0X1nKs70eJbRUWaSAHj71gzRanvkzTR0
+            6yfLkfgq5Dnttq3U0jlANvTSfhK38e26/6CmYS8oN8yjjqsPfXdbXvNqIO2PWaSS
+            QJsNi4NqiwNgIAuDQ2geutREjpYKhomUMwHQAtyaiSDjhZoYoi2sLWj9zYVylIID
+            fykNNypqivhInbBCMa8lKeCecz2JKdqYAIDlvU0hzl/fEQG0GV+1yBPKA45X539d
+            7OWUROzN7DhMidREncb3vjW8gDutxwP3CepdjALGVQWrTiV7k8qMlyqXuUXJ04cV
+            WHoivuptJALHbBVHI8zw+UiOZis6rXWxiRk4GfjILdJRAa0rSvP55ObcbYjvjIWu
+            U/2SDq+EyijnlBx58d4nuN/iZT01vsPwW9yNBSmaP7VQeIqOHBaNUSePwl++YJwH
+            m6AE5aUa+lon7v9idRXaetSl
+            =7RgQ
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7ARAArg0md59/nBzSLq+xKs3PIVz+EQKyp6DVWhRdOT75YSzz
-            corX5xOUHtn0YYklu04g6bhiwRMZDQGb1O3a5usEAGk3DM3a0hr+Oh3xbq0UM52i
-            djmxp5U21uxhFLs085TaPNm7zWst25JxXrO/W6QzNWj7t7CIOUGTYQ/qPXiddgWB
-            j3+5jT2h6x6jOIFQes9ZTeUNG6cBPlN749IoTxg5HxTJ0x7gGAwOPVq3Xe0TxoXG
-            WLk9RW4e77LM/gOkA6haLYVeUhMu6gRs0SVtvK4A3+Kl8j0px+KS/j0KfYV1USVX
-            MwO76iIwJ/OwkLIhRTgOTwmyEt/nEhka1hf6zicN3oomi60JlLdbAVWJ2y7SjWH7
-            MsqLzmrIN1FLxQON7OZxx9X6/ffmcJohVH02UoXY+XKOVLe/E6n5tm+oLNAIl82g
-            rbgspWIV5jEvNIFJrsce1bZHAml1Jz2fnU3H91hL1ZWofHg7TH1y/8ZiRePxC5gL
-            wwc2M0qQzkPJcI9iqDc13O9WSpWWmE90G1x08V3ZhSnFWcJA5nN/01a9aYtOX5tl
-            XeVGPu5YM/av9CsymkhYgjIzXXXvlwKACVOpWHwklF9sD84uAZk4P5pN39WJWtkJ
-            ty0SxLwxvMsgltFNNq+xf2e1KytXKpVN3pokK3gRHDeEFxd/V16YkoqlzPXGcmDS
-            UQHZ4pO601zHhEDB/rKkDrM5hoSw69t/pQFoDm+XE1vtg2egd4aTBO0oueFep8x9
-            bBJKDTRi0uiZTprNBz4+KVPc0PO1IGfpFg4M1BZLDOPnyA==
-            =vN83
+            wcFMA9qJIVK2WMV7AQ//Tm44SI/DgSpiPFXxW+1S0Rro4QnJZx1pDXyqNh7Npv6b
+            NzwBOh0kYavga5zHoYTSqYbNiGeZCKeMyfFpld9SZq6sfPdEZJ0VVHUUx4jQJBiK
+            fspycVLq0oQASYVXUrFCIhdAZIy2LmdwexoLUHZd4vP4fqOjQ/XLPq6vXGNbaDgY
+            NOuhzhrFEJNLpZGCNMqekRXw49kVq9QLuGb+hDtl+SyygbyV7kezgkuHmZ80taZ8
+            D1Nl9JJaKVwdJsevnUgHxLK1lPxFmS5PUnPs/Lu8KPLLG6Sud7euLv0QixIHtioX
+            ksgls7mMNFNoYANc57p/eNRamd7Q6hJsKcn9x4NdqVUi8/I8qtFR/cFLY95t6c7a
+            8ys1M0qed0S/XxxDygvfXK5B9THSFklO7Siisrhx2zDw6T74Hp2tah3sd8aTSdcR
+            CChvQgH5oY1myDHF25j5UaIaMSmhntYamCQ2Eg7K3xebsNWac+5LY6T7huLuzFTT
+            hZ4nxcr7oxU1LTlBMnY8Cf/XmAzI3wdgkWgn0GxkaPlAJ7N6icsV+PVKEhZgxwjf
+            TIa4X6R4i+ilu4RaZ9fPyw3N6vhxg9FDsD5rjw+G7f5Ebsh9HXtCFmIoO9JOSErY
+            bhdU0JbrtOG9zaYZt800Z48qPI/gfLMM+D3xMNyzTM6qke+PzuE1rI7GEQu+NNLS
+            UQGvI+WYDkwx+1B/jmfx9hprzgEBIBhYTVjPy6ohIj6oiQ9T+aiKo+uYogABPAIY
+            +bkrCmap8UFGpzAx8oUS+NAPEeC6EAqg7ew2aPeY2/6B+w==
+            =wBHc
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-12-19T00:31:21Z"
+        - created_at: "2022-12-26T19:10:05Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ//Z20jMSo8kgw/TiyhAiZW0CnFmraJSn9WWwYGCV4xqGM9
-            gNlLW53Ry4Uq4TgmAZX3KDdEOV/vypsJTKQ7HNW3XXdxFasvBfz7l47+1tL2VrsR
-            Bm3E1OHua+0304nR1lG6HAKC+egL7pkYTqi2WSUbIxKhDyA0CH7ivc6C+z+JOO1g
-            NorW1zT8ygUjlVCH5B94FwJMVp2Bs/44N0HajkLFmIrIyKQCHOI5NjKqNkJWRRaf
-            ZY1x7XxAcWmWTYWck4m1zBReCl2evD1JOvsKZ1m6z4Ryrwtgjp321LoEsaaODgzC
-            VdKw5veAuaQMuXd3MAqK3qsiSLNGJoUQjpFDNfLFrwuqGF4LD/P9118VXjXWUfJW
-            tg/fAYqYD0xF5E9H4bxL2fTJ/J5DqtUDtGe3XJgzxskS6XrlEQFnrFcgRGSq6xdl
-            84/2h+YSLqdRiv3DY0gXRE3DSQ1RKN6iDgReB5kBezP6DxCv6Z1cv9D1yCEBV/k/
-            z3rguj2td2slm3vxNUOUWQyl24KdasN7IRv21EH1aKwxvQWTW/UUHZ46+/CNqajR
-            WyJf8kA0+vpka5EeyQuo9HK2LZB2OxAVzE1/W+raHyejGI12XJ5QwpI3o1vCE0eY
-            IUnXe4OCd9u/d/Xc7ccxEmS+twKR51xDgrnuo7BfvXm7JsL/r+Nky6MD3wE48+XS
-            XgE7jdnfqTAX2Y2oJCDqhRe7tOs7jrYZPAK6/HHsvjGBW7+pfGWRjDYVogD7DZW7
-            4ySEm9VVkmtZoH3DcoSkkmaTbwGFW3PQjD2P7WzvMQI0mS44jUjMhh+ykw0rdi8=
-            =NUIl
+            hQIMA/YLzOYaRIJJARAAr2Qlki9WXy0ibKjvTsk9Q4UDouX4PZR2SycEmAyiyWKP
+            uoO7Xw8dlQY/Fzl9mYXprS+JtRvR3sgLQG7mDZexEAc0d68c+FvDSb4dzmLseIu8
+            5B2bfP+kdBDdAn7FREIbSe+e6EbBoY79yL6IAUR1IiztZLTCQi3kSxj0qBK4F88A
+            Xewes8kjQ8zyvNENuyWpgT1GMYpgbykEg+I3JpSpl5EpfVPlqgpvdHziXyLTrFEt
+            thKr4UVtCpeIrQ8mOi4SmmzQKPAd/Jav3NeDgrdHAf8i69qvfcKum6zDl6nZWjrM
+            vjhxrgrW8gYDVCKUrnZ+9GrnKzmkA35Cw+oWh3EmUukBiApu7migzr71cVGLNjyQ
+            wahzWn0MomRTzpeK1CeUJ6B+LlpOJXTucYPgFnRyOj7myGGNUyKjYzy6M7T+Ujto
+            iNgKXrB1isedL/80trmYkCSNG2UzmuFYRHWuSSm4EJAMboS8nFlye5ZnS6bNuu3Z
+            nSi2+y1I2bB5WXkib6bgMWkn5fds5Nvlf+arQPOcy3DbtquAe5EgIbMRbUx2nsyH
+            0pF21BQP5C9pZPuz8aK6DIizbh2wkp8cuhlfLKl7IwvcnZ7pxRxIbrrFx36pfbq3
+            f+JiqtFu2SI1eIs2sAEU1D9CMAPNJFHanJmbLhxAndcH7kSKMHlvWotCYw1mxIfS
+            XgG3cJHHY4OiAzdYObOMGSGPSqof5QG2+DRDSj2PHm/DYvuFXR4L8E1ZXr0krOyg
+            r/zSMIkMeN6IwHf4ve8XfbrLI13hv3iZKeS8eLMUtShOAnkLimBDAsOsKtmgOQY=
+            =4t7x
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:05Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAkPiHs3ONhuxrgFnOEJmwupywgWHNLWyOYqp55Tfg7ggE
+            ltzSYlmehUYm1qPnUSlA5bSpffFlmLO22JL0ZMCUp+ezsbV+OepjUhrW3n2nvvwp
+            ofKDZ8LOxwMBlrm9lYySE15GE7wUM8/Yr7jTDNhV3F7uYI50kUOMsPgwzrCrPEgH
+            9dLQN4oZB3UzA6/OSXJXm6WS2+z4+kxKTCe4C3Tx1UvSh6QJFqdkEaHPdxP7g3L4
+            DLsKSUrYvpT7+OVlSsZl9jdrs7eY+W7xfvrny5ORjGIi4CF8TdSAv8v4ZbFNl6/O
+            H2WPnnwOV/Ly6rC57ExkTMLbTj4U0L5fH8EsFvooZuLLTsLkylhjpdIfrAUYbulS
+            9AVrng9O1zZGdxb9pov/2RA1FUIcSBgoNT1P2Jn9BWSmRBP1qae/YE5ab+NcHd2n
+            MJu/lhSUdfZuSZtiRVDH3T2g/ghS7fKlgHbIIXaiTcEuM/NFUSVvDPvgWsk3Ji5g
+            oeKbmLMyfEeZH+tuZF57BeOcH01iKU/g+axFx8O/6aRMBLTDIgBMyB6JYPPYPWCE
+            qnRK5uS397gaQNwoxEwJvOEjeAmUA3MUTmb+6fnDEjeB/PbzZI+cQhodhGqr1vEx
+            tVX02NPZ8AJT1ltIXT1SRnCLU2/m6D5BmPmvO1YwxMPRbPs5MoWN4o/P3SiWGZ7S
+            UQFAHZflPSOWd48i52OlvY7PxaoZNVxvKR88/zcycNTM6okCuiWFJ5OkirYhE2Gs
+            Hk2g82D0PIupHxGIxyx4CunMZh8jWRbknjxz1zcyLHrWaQ==
+            =K3w4
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/mastodon/secrets.yaml

@@ -13,173 +13,195 @@ sops:
         - recipient: age1dcpd6u4psq3hehjyjrt3s7kzmnvxd20vsc8urjcdv6anr5v7ky2sq9rhtt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPUmZnVjR3SGs3MnJSaUxT
-            aVJJZDRVK2hXdDZqeTBRT2ovVmxWMm5SMGdvCm5LSGtKVkprQmlUaDdGT3krZnVl
-            aE5kTG5QZ1JhbjdiWVNwRUp5dkRKbk0KLS0tIFdhSnd5OU02ZTlrMGNMemdYbVNO
-            YlRrbklFV3lmWGRYVXhvUkNLSzdkRUEKWppsjTBRljJnyXTgMSnq4eSlXdzjF0Bc
-            LN6oLoylo3zeT+pWjDFG7A9+fIpCiXsIMcZsHiRR7kfX8lHGi5rv2A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2VGZQRnd1dllHNm00N0pH
+            YS9QN1JJeUIzQys5RVpaVDF1TG91bnN4MWdZClY3d3o3QzExV3lOY0tqNW53eHBY
+            akcrYWFvdWUvOHBVVDhpSzRWMkQ3ZjAKLS0tIGZJTFVUTldZU1NTaWJPc1A1OGNP
+            KzV1U1o5eGJiS1c1aEt6ckdXbTVlcmMKwJtRye5iUKlyk9z0eV+zUZjBKcPsxd17
+            XZWyL7ryeRQaPVlsNxYYkRSGcIAR4nRKoEFxAZOYVPMBFUpCXjkiNw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdmNOUUpxOE03UFVoN2NY
-            dFMrUUwyVHZjeEZYWWhCMFM4YkVFVkpQa2x3CmoyUkhYRXZORnhXVUd2N0plZEdZ
-            UVUvS0dudkdCRkx0YXdMbWVGV3p4dmMKLS0tIHBCQ2RSRDgyclMzeGJwNndVU3dk
-            ZHQwTTZVNWRRTUR5STRQb3VIODdPcEEK7emzmECdUobG5/N3TMRcUaZSTsgTF6m/
-            5f8v8Tpf0Ve6veQhC/5+MYtHJOWDkN+nD8gFgRkPn/IlNz9IAMGx2A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmYyMCtSa1grTjZQbnFq
+            MkxsRlJhU240blczVUk0R202SnA0K0MwNGdJCjRFbHBoS3BwMVdLV0FOQWJHWXY1
+            VzFxOTYwQjRTNnlsTWROS2RIUnlSODQKLS0tIHA3T1d3YTExRkdtMHFTcnU3THhv
+            OU1FcHVDb2xIenVIdm5kNUdjYy9GTDQKRmjJIq4yiWN4mLU/+rJfdsZZT2m41DD9
+            0xlVibN8UkR/uLfs1CxdYSTewFKXtJzDYcQR1vUyb3oLUxP7fghPAw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-19T21:14:52Z"
     mac: ENC[AES256_GCM,data:EA04ymrunaPh5vlGFy+KbeoUORGwT8mWVcosaFSY1QBODwVLB9vR0Q3kaqV4pCsoDEUJBAHmDfCOQNkZLTiHgEpNbsejQxL6wo+cGvHxqkCxidulG9WNkz6KBPnneFLmqCdTWoxyevWaiKc4B0Yfrmt9QSoz77F+PgDNPuKhTZs=,iv:C1CeyyQaUcMMGzyLBYBUnQI+5LxnaYmIxGe+RaaefJA=,tag:wJn9xjW57Tov0obWos9c8w==,type:str]
     pgp:
-        - created_at: "2022-11-30T00:52:41Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7AQ//THu/1WoBYLiEjUWSgMXej4xbmN5sUCSxqnyaMaekcQXK
-            MsUODOaqLCo/c1mfpbZ/Pv5CLHah2R92idqShogaiB5tDqxq8MTk8VCR2bzGcg4f
-            CJHf4dvEBzTWIygUM/TH0AaLB277C9WvLHK1ANE2GolSls6hIN5YYiMmAJboImux
-            QYcwZIk5DUtk8CjMMdXoWXS3Nf5LyoV8TnqwGc8KyIK/l+PSLuOX6KqG5TArCCT5
-            BTCbXqpk5IPGVNiflWZfZBSrGFQ/7L+mHYABBR8bj1cCHKOtYJqVCKNQOkApRsc9
-            Z8UtGHedcArwZUNilFUNYMZjK0Iyrme3Fvjt7ztY//ZvgRgBzIfeUlMMYNCD0stT
-            OhjlclAkh7az5LPyhKW7FxEPhr+XsJCiAaaNpHntSwv/5yjPCDLoCbKF8pkZY7xW
-            oaYVJk2/BuNPG8wQAHl9N15XHN5bPK0JIqT8/aSwRx6rjI2JlBk8tOo5EpmdJrLa
-            xPJ7cS8KEpY+mlWO+GkmB3EomjbdgRtFqx4DEjbLYV/olN4+s2RLqK53WprNjqdv
-            fltEZvY8vWcg6UHc3DhAy9Oa6QnR8ifraPkpKlMUZyIiQFOWcrDs9XCpKx/ATmXO
-            +wpQHGZXq6b47Gfp/XA4HibA7YY9qDz2PDtu4PrKg00j6wWBujdc5+HTfBn05JvS
-            UQG2+OgjrHFdYKIK0+vMovt3WFzbrCAeIx9AU84dUMiUZMOtyHZvL+hU3ynVZYfu
-            Z/yvMM78Q1qEdcKWBtgEJORXQIwWTK3JyYRC0N4/3COViw==
-            =ULdx
+            hQIMA6j84+xkv3y7AQ/+PEj22sKoAsdcnNkfXExmrik4pnxBDVgh5w40URh4FsJ9
+            KvCiPtVe/xre2o7qVd3Zjj0ynyqJt+/t42I1ibuL/qTW/DdVvT0esjbUAqOsTegX
+            Rhag4faIHTazu+XQy6Yn5jN8IMASalu4QQ4pM6oX8FNlm807QhaO1ie3Rn6aOOOY
+            9SwcMCN/QzJ3+ZJU/wc84JQSfBDLmqt9cdo+2IvRjp4rcPzrXlJ21kfXbgZlVkHq
+            lUmu2Qi7a5XTBRYl41xuPvAN8fmw7ZZdldPcICgSKhtKkwUnLSy9uXHjO54xFZ72
+            fDNix+SOWhbETB+QnhNBxan0lhCLV0T4d0M+24WPC/BA9K1u0FpkdTYx4j+iifvc
+            1PdbX3JdeFSXVn3NQFVty8rRrn/Ms5tA91pdLCZnlMzIZaCl9fz/jkgTaqwSfFy/
+            oHRJUAyWa2dSPHuycPknlZlNxqtbPIxRbRljfQErMVrx27Ft7QpqBfQqyjxlOm4/
+            O+kHaloaji/Q0L3UnjrrcmRBOMpz1TO3GV5TpNHdd4EPmN7Ulknr+WHrQPRXbdA+
+            ZALLEqr6NZbXeF8WBfEZhObpqYsZR0rubC8woGJEaGg/+kjs+fzH/P3FyO/QWTbB
+            PZi/p8SSKN8i2m5cNykEcflT0yzV9ImLiRVTaVEfBQ9IlZmuAI4GieFcQX+2IHDS
+            XgEexJI93dsY0ZK/1aUJZEMz5v4DcIGz5D0pZ428CUY1rz2wJFgrjDWlHPPfYNaN
+            vAe9ItyZ5RVI9HvGJCUWd2A68KXHwvcSfUeOZ1nYEaH9q/REfSyVcFUAFqyesX4=
+            =MQYW
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-11-30T00:52:41Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zAQ//bSruuL/XKnFtewxG3weWTIUzLjW2d4b0WffSzRogs3BM
-            FE0vbb6atEQVImnr8CFl8r6R1jE3lz6VEVirCAHdycPFxHFnIuzbzc5WYVgTC00E
-            v5L3UKJSccjzWMONdL0XaXUDHWE78vfiMKwjNMrg/SmLElkjJUvBVz1y9lih/Fwp
-            V/CWV/S4/v5WoO53hldoQ3jCDWLLVoJHB5rBO140hpmrLOkwTvXQNW1pK0GwJb6r
-            dKqzUQzJgmdQcMswNDcmtHQV59HGk7/anaWGMD5FvVz6FQdXA2bBH6WD9OmqggUw
-            xN5sWON3yYEkWZ7L0fmLIoNmmsH6gMnPVIpCK40g2nyFCjiqRdxf2gn5iasq9fzJ
-            LAZkUHt6LSNikRPsm9p/SKl5EfIWSmQfUGWYMRqwkHi+a85NfkDPgbOae2gQhaGi
-            TjdKy3wS5SQ1KZU1+YV19JJx8RnzevcIHv/SV8C+z4UosEDBGuncda3S8VRDvyOe
-            hI/ZbASGBwWXni3UIGQfLiDp0nGZz3NAGKcmbWN4DHN7tj36Xc0NkLe9AuWs+2fq
-            rhnfYCLl8tn8gdBQ2/sMC2K8AwpRLdcoOhZPz9CCY3Qv4edxXeSMMotQwhB3jglh
-            GBNFEKd/XKHMfwZsfWITxHBhtX0yL6CEG8A+OHHrYzXcphAcy981T07ThfTkU/DS
-            UQGAruf+SPfBRKj+jHdIXHtrVlYFtI1SHLueZzAw8vMPI4vXbvbZq2qNdWk5uLIx
-            AJHARp7tFLZjeVM8O3fR13HM5Ho50cJLnkCBqqDLXFKtSw==
-            =ZSmW
+            hQIMA8zMZ+ak7y/zAQ/8CnW9WJh+iPlugd+/Xh8FRHb+DCgQoE6OmVBRQrkGJbqQ
+            K2WzVkYERe5T+iidia+fPwQrXsKCKUt0EszOndYd0fyTvdFFTVXxhKMJMC3rs7to
+            acB9STeM5u97cHoSCEblnJOkxZUr87MEdQt65Xg2nzQfCmdyUHk6nm9mwII7h9zS
+            56DP0wJqAobdjq0RifUKC3Hh+fyJz52xSYnvMwT5bf8ah6Xc34JPAaLmXz8J+X0b
+            qjk9UT0G8h0xuvU8dxr/uTvxh8VE4xBEZch8ph5Y/CJAs3ZzP4jl1W/zilJxeFZt
+            T+WWkaZD5pJOF5dz7a8f76Cl2eWWmUYKy9V5yv+ZzpOtlnsCnJjCLw4+oruV6cAj
+            A3OURYveBPifumMpbtpQGaeInihDzf3BPg5frX9RMP2jAJZSLyOWai3b7Mwun3FI
+            Te/aPyFAO7OfY2cuSP24K3uK42Ip9891NLkHywl6Q+scMkuxXoc5Lr/3NVh3PUl3
+            2YeVkVIElw/sw8l1oqqLxhkJJA0bq5rMrYME79o5/yDrUKQi/abwKXcimJl6/Rwe
+            qM0vURPoCgXGBQrLfdi01UcPwakg5DO5wuDcVoYP6drdel9nQ4EUmErWEZsXX6gn
+            88JvkEsBp6pVkMy0hXtrm1V/vWvxqSIOxaQCpjxTJastXJu8kheXuVa5RX7hspzS
+            XgHqZBPOjNj9zjPGcEdEjjZ6EAwgsxq6DEh41wRZhbDBDlZnL4dR5dV895c3wt1n
+            3EkdytlDtjg2hxgho+Cniztcwb7OyHoXajuCeBPKS+M7/tQueXL/NQ8FMEjjYVI=
+            =T8Kg
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-11-30T00:52:41Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQf7BQARnoKk+Dl65Far++0lF3CvvOeiBttUCQoV8aNmMq2V
-            Sy1CfGGhg53xN6qeqh0GE5gXQU6Qio86KCxKZ6yh0i6wicv0G1Ld19omKGFrD6y+
-            ne6ognWNVXzOxp6jzT6bzTxN4KkIrtKwuFb6796E1N0haVzCOjxQaTqUKig7Vy8P
-            0cCR1K/HiVVDs/XdK3QL47Ty4oSCAZDD/Vj9r40w/fKykTw5PBwRsBMCPL1ZxoeI
-            WEMhxxKdCpp5OprMHtsRkulPoArUkyFOKtsCvCRAnLtwoJaJTBb4I0RcTy+wjwEv
-            ONdpobMPntiXY9P8L/ovmYX+GlQKi3AEHflmPmLPFdJRAdzGII2ZnF77Z+e7WpJK
-            SXkWRdSRwJzatIs2TfnEYKAMevqEpzYTIu2Am0NxbTj7MgmfGw7oUc0n+oGh0gLE
-            Jd5EMV7E8k8nHqyCLoEa3q+3
-            =poTN
+            hQEMA45bZkLXmBFpAQf/QbzN3ODhHXoo4X3UXbJx0pf35Deh6PDh3whbXjeso6XQ
+            J/oxSO1GFZpahOaP8k0jDPGGmX1Ih/GL7YsPzUaPthi5lhw9KAPuISN4pTmJ0w/d
+            Jy/pxtvsbFxmS8YSzrjY7O2CnwRDLxgHDoIOgU0pEsowB4tyFr5/EpKyu7at2tYv
+            mAnJRpd/5g58GKFso1JwbjzuuChJHLJ5vteRCf4t5yRLaNLP+bg3/X6QXI9Tfvod
+            ZgAqZmJjC4vftzNjmJBcTH7neZeqvsK1MujBeusFEQsbbePC0coo9k3LDwK4oZ6M
+            332vZIMEqhrdrzNNY98SdIK59L89xytIPJa+EXv5YtJeAY4DG1gdPkevFJbbm5B4
+            86Ec//JV18ioWl1tMX+8A+lM3pzXzAEEm08J+TB7QReolLjTkzr3edsnvdsih3TX
+            unLb7yjQbhaW0G8zRMRbjDe/yuNjWLo8PLJdj7DB2w==
+            =9t22
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-11-30T00:52:41Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6AQ/9Hz/H90Ab0cQ0mBmFWdgc+zsPVhHXLlKaTszaMbrQ0Hlh
-            Db/1ap7tSQviLZMJFh1O9TjMfRrbCyGE8NRRr1jM2z1KxRSENHMywE+5wR+QlNE7
-            s5v5tNOYyLA5rlkyAL7tezKLnsi4CD3hj27ZVU3igtJ4GXW51rHABiwMQ1FOfVeo
-            vGCQdXAxcFo4TucdIjMWo9hAV8ncVYokw5jq4ufHKjb1keBFq4Ob82dkc3DWwaq7
-            sbUMPGzDkgqwVS2aFk2uoaBjceZeOjY1INNtxtSrmQvjrnJTjoKKRErU11OZ19Om
-            gal7gIUhHb3kJKLkXDZD0l2AD4NUeeFLI7SyVv7PmHD/dI58SQ3+ofsC+Cukvqeo
-            KI9Xyg6+pJCF8wer0tYD1uX4avF9TsdFwVjrrOW2iXvX7ePqP9+ZdwodPOmvB5g6
-            ofxgbX5clek2LCUO/Q8hytx3W/6oBHfqZgoiLitfT+Ss0NoEusGnSDnGlgUAbEyJ
-            KEWEMiRcj8OARw4/jbJrrBjvbIJJaWmdtHBSsqV+3/yY4GqTw8pvUYp3feocLu1Z
-            FwIx/TcvyOmhZ6MFu3sz+xWntyvOnDZoXfnzTLWt7XM2pNHwyWmG62fhlhAIo7jR
-            ENu1Zet7lpj/eUUJAbcx2sWtoClSq8rYqX4PBR4rFnLJBqyPZlVGLzFzlw/kr57S
-            UQGZijKUYvlcDtFjUTiVmUtYagb94Fm4v20P1N1IgwdZp5l00MYY1GT0s7+4QR7Y
-            rRRPLRu4wCvPsYeSpT3xf0bx5tZF7YuzuU0bcr13NcJADw==
-            =44mD
+            hQIMAwMCBBrc/JA6AQ/9Hxayw0gv0JlShLNByg1ZSb0fZzJdc95V5WlAP2p1VcGT
+            EdltPOhNkCdbSj9BowqUorgGfJJz1AntOoYQKAZOEvHdp22oMah7WwkdgL06DZHg
+            at3ES17dkUfQ1xR18zzTDiireOYvL7MeCPPdVPHXAdLE4T/l5aWdcU5cif9gLN9T
+            fE1oBCYZApg2g6dV5U7Qm1+fOYBqAXTtlTc56vg67h3u2N4FCr52aAjTCm/1Dj67
+            O9s+yIiFxvs56OrhNrIXaW/liS4bVwC5TPkr6NtZASbObmuu7q1TyGIqJRxS4lMR
+            zhVErdlL2Ym428INhOhGfjzxlVjdnyaHIPzikVCRzHPCyewr8mC6QiJLcWU2dnHk
+            y8znkwe3dU84rE4nsWBMgx1Hymb0/HQKNXSk47B2axBeHKZGIMrdmUplHussv384
+            SzPps/FjYh+aW3OHczexq7cHwm68NkU3x3ACfGhLfW9CUQOoI+vYQNkhbUsPpRmt
+            03Z0XQod73C0k2TG2/0oquvSoc2ZqJ9yh39fPO9OZssCDQ0rQ+mPDHWgQqsLTZh1
+            sNPpHbEyjVnS5ybwha4r/5Tw3kWpJgF2J6TPCH9C30G9SdnTIvpgjhtiWjda/EqP
+            SYrwDEmUFCVKBeA4IC2Zw12GAPLkQQtiR1DL91AC8vrtpTB4Om6Aav7Sn6X6ufDS
+            mAHUSMnOYuf0DB53P0uX5hWYqbDrAa7VH3yeZCB5JChs1RxRDWGY1qkrMywPSOnL
+            qc8g1x/poc7JJX2ti6j3A2Ux5Nu9UOqKFsLnMGQ+YLNu5MST5lDyPcPO6Ww3CPVl
+            qX5swJwRAqAaWraiDqI2AHLaSgj9dY9Q2X5JxKRA2zJG1SIMa6F8uxodNsE19gbI
+            Qt/v+xXI9aZ7
+            =roKW
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-11-30T00:52:41Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHARAAjqd4Vk98BuS7EGmWe9asgpmuF1hBpi6EGbfIJHy/QdMu
-            Ug27yGxrhVoxP4mX0KcdL0GES6zpcqAuSjKuqnjRIQaBqRmLImvlwpRELQyzJCsj
-            fkhTe3nG14Ew1ukuAPA4LiOpydpefdHb0KiCR4GYggR+P9nPo4CIUVDXIkWdCJHF
-            29b2febhwUZuxAQF0otzvFXd8VpFxP5aqiqjdVQ6wm9R0r/l5XyU8ZwtgN4TjcbO
-            DxvjS73i+CZhi2gPR4Q1pTOFunxQC/shyeOLHFpGnWZ/OkYO+93P9PHPIX9BSUz8
-            PVrBPtLLXm8rnnklqViBTBt+AfwjzyhWTC9BGoKfJ3gmfA//oVJNraQJRXS3AtlY
-            awvIWtLDGSDwzR68cpdoG9DzIES5rJ3gN9u+b/IV6pwvu35E0X3CKA4FN66wdNag
-            VXA6RsJVM1+pCxeKHAyMwD26Udq77XJ1nAxvUaOn0+MGdXD3KKF+WQ+4wv4LW5vl
-            mRKMVuI884B8Qm349TZxUalEy6v7ioC6pJMj13Yn0eWx91z/Kzj8IP06nZ2y486B
-            b8aDmbQUNIF4g3s/LN4y7ENYRVtvL4yhL4JQfDCMeA7wn4Ne/XNIX6/mgcN70JI5
-            ywS4udq+8NX6ZTDoiLNVwZwO3j2V61p1ISx5Q1vPrevCUHHRvUisFL/OzyYYDVXS
-            UQEfC+uXFz7eX15F0esLCcMfDZFWc73IWbGfLL+eXatw5R4Ii2nN+Q8eXLFolmg2
-            DQu+qK0ovO5/9I3VmQM9Y9n0b9CFsfcBLFLA8pfNtj6DOg==
-            =vjG5
+            hQIMA9XEenRNYVGHAQ//VBYG7j32kL1cBKhoZ9RqO2Rt8sq9oUTnYDKKQDIwfDqG
+            F6wRuBkCLN16N1LMJVHS1e3kWW4xt+TO/k/X4AuMyO+c0hOR8RVW5osdj1xwoPD5
+            grDwPy59fJNJPiAf7JikgNgLdglZtdGYBeowYD1Bbh8qzekHFzmiLXRbLyM34g6s
+            am3HpI8pkueanqrmGqEOXT0X7oHHJjao7IAQ+1X5GRiye8jc2TAnmLzvcy2jnpSS
+            l7KVwqhojYCNDuZGVAlspxSKoAmfTCBidJJjMCPi26MeLmPRGnfbHJj4pMYXyLgT
+            jFdULOBRDkfNwmlAwD/m9GMfuewMFEQ3KnhpsuGYKGtxImEdtX6oNI3KDCXmFFP5
+            VCg5+DHA3EkD50MuUPCgZ1ribNePsphWtVMj4M2I00BLzB6UKEn0sXatJmyOfUOJ
+            yNJ5eVAZYwQ2OXUw4LXC53UnwGNAO7SfiPFxB26TjDH6cwLP3qWCaDwhCj5O64uC
+            IJAuxnI+EeeCGJOIb4RxfeQgGtAt0rUVmfoEIDIAU8Ipt5Q5cZJPlNy4FqnuUqhB
+            Qio8k/83uIlbXZT6apOfjRcxMxwUiX3gLLU/tTZV+CyjHaWnTrW3kDl/7uj4Lz/d
+            iw5/HsNDWj7recDFlLDz3708NdxX8KL3wfd2fxHLKFsKk7oxO6dW1AKfV32rV+rS
+            XgGFq/lTwFDz7LQWHiqi7rMCXxJ/gOPrTTkLrIoK8vcHvB6g+OjHC2syyHThSQhL
+            a7WYI7oKVTFTOdYLZqgn/Z63ig9yG2o4lBRt7H1tYCA0Cnep4Iy9F+dmGwL+Kd8=
+            =28Qs
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-11-30T00:52:41Z"
+        - created_at: "2022-12-26T19:10:06Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQgAki4625tAoV04bTPWkawsYck88PbAVctHuwWVi/YprVLy
-            VwXM4nMao+fg16UrRd1sc0Dh1TdPq3E+4oIf9gYJXH8GLcjkj5v3L8jWdaWhC+2G
-            M6IrXdn0kM5uXx3PTFQA6TYkfs/BdNsjTnspfr44EBvWG/OwLmTJo3QC6MDDHZk3
-            JF4cMXXhHe1gRMF5DznexxCHfrod5NYYIzGpqCo8qBtBnY5QnTf7wXwtWnFeRtQk
-            fA/EDgM1Xghyqx7oDxQ7ubaCWPyNREhiB6vKvF8ZnUyWW4oQmx7gmttb+Gm/Pb/G
-            HB9GMixRzmlo4dVGlTF9llYCxcIrvxJNasFEXnuHsdJRAXBwOvBH4JsYgjIYlo0a
-            l+INJ9JBJqvSqbrAadmhmtg7v6fJVaWQiwamI/N50ifHAQcKNxH/OiInuh80Qvtf
-            9utJNqgbFFnzPxx5028FriVd
-            =rqgj
+            wcBMA/Z87ylQaotQAQf+PIxpKgPKftNd9gqXGsZh7U1wQqUYxx0zSiaQ7JdnLQro
+            XAjOxmrwDw80g2SiscGXnoi5u6WTihM+mjN2EPF5BBX5ywh0FzVCmRDe8hlSjFUc
+            l7XB4OlyGA2+RVenlXUubuLO7koyMsUaeWddm+HRLgjL7yfLsFHsKHkx6lqNLMYM
+            sp+XxhRh4Jj+gQ9hiToAAZzJqPMqOMSoUzGxvj/ZR7QHQdX71C0xczccc7cOxBKH
+            dHsZpEekhOTuHIAkFn6atzvZIigRfvF7M6qehcAAWwbWTG1zkpQmIXKrVtmqWndd
+            1OI4frgpWmhVE1VTPVNCtZ7e5I54sQX5MdMvaVX7fdJRAUJ6L125oJspT2eQ3ysu
+            MljIOUp8pZkhlsEdn6Dxs4wX8AtlJruj9SDvsXJ1DcUw1i7Y19r5WayL7Z5woHWQ
+            Em5Kcgp8puRhkZ6JrNCU+lha
+            =8X1I
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-11-30T00:52:41Z"
+        - created_at: "2022-12-26T19:10:06Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/8Ca/FQ2eZdaIerMMiGL0wP8uClgzDqW6Xku4sdGI9nO4s
-            oBzmj3amCgp588PV5/TbyawVrfbMQFvr78GF2T3MQS1KOzFePITQPXceuPia6KzV
-            bFNpElCP80AlYZKWkPQ26Uz1gB+Dk75F+Ws5ttP+A4bgSBUpW7R3CQr4eIM9rN7G
-            TXgTWlbcYZK5IyVZkueOXN+vwT5N/C+rf3Ockv77Yhrasbc/OiRd3kPvwYINrBk5
-            HRpaebK+/1Ku5SHIFhx/TGtyCcwS2ciPBCX1NYvcI+Kh1I2MlHKJqpgY6C0e6QHo
-            sByoi/cy6IIPXupuVMxs/dMzkaZJYMzM3te8D6aakO+yaR/xBlJgGZqzWVgrDZaR
-            7ioncUPcSbR28cGoV4l2bYGu+Z4bQ0oAE8CSV4IYLJeInwRed45E9G5zyTU9//Zd
-            C4dxATU17FXeom15LSoZkFnRLbWWPi6q2SwwidG7+oK5FcMCyc4zarR65/i/02Tm
-            mEUc533y+t0pud9GgdQKrjNyQ654mrsPrXOYviTrBVzy3BU6dkbEjPEmfw253a0Z
-            SDV88+WOSVzwVK9K0EY9NR+sRYlQtBkoKDYrLgthCN+Ucl/tOBIKjwv5lnBUihG/
-            ouTUDJEN5phT2tf8MDchNea31Cm6AT0ph6Iz/Pr0hqUNQOz6UmNgf1ZNH3RCehjS
-            UQGdPPcXxEG5JhmiltTOph024yMOkgmt+5xHyCZ6L1QaaYMjIV08Xq0I2YvJXUse
-            QlZRHAcOAsSI7mYd0jqFxOfj8ZrclTqn15peXweoEUzKIg==
-            =vX2f
+            wcFMA9qJIVK2WMV7AQ/9EeeincaH4e/p3cvQ0yMi7xEs+QzcnmznhL5Z5EZJTa0S
+            nL4A0NS1YKTj5hqEwfc8WYlKYye4vVoyl7REZU6rb6XS4PPr9ATHNgLmmGfgVT+l
+            2SM0oQC7VSc4JHsIKZubgfDV6T4yXLoBdXGqJyQwvOApNbbLSThQhZM2LLS5JTI8
+            c0dGRj7ym8Sdbaop4ri9Jld11XXNU3CcCvuyiw7l3kUfZwwzAQWsFxebSFQ3lSMP
+            pXSLNWWdl5NWHQkyQtG0Dk6BCBU7f2eB5fBYP/8WYyHt8CDCdbjfpD1CIHNzm5Ya
+            4nD1aklYdZbYJPUkZMQ4/Pj0OVti+Zv/5x+M+Hi2URE7ns/Wk2h041TcxaxZaN1B
+            J5WJH5hjqYvNyAiv3vrPVGAOfq35WdMpHLjz/TOCVXz9tmXh/CY/ZN7WjQTiGolm
+            u0Z2bHcuMV0Z+KKg/AkijGyiTZXyxpK3lZeazIiWCRcdPWQcoQff5FTkpAV9oAmC
+            wfuNqdgJlimwZ0wfqNvwpNE/+LsbiVQMc9zHanvLVv9rLESqtiePHZfC3/XK5AyV
+            0hBTkY0FPbHB6WtV4xDydV6pYHLHHZvFN5mQonNjlO70P1A8VUwc0vGQCRbF6FMC
+            IIWc+mWlo6+0URv1O0OQOcoxpTCg/G2L173vrJ/6uC+mwNhDL31n9HylJFBHwu7S
+            UQGTodvUOrVO9UP+aXZlBNo2l+3g/zkwJ5DAlAdbcVKkyY1OvUYsI6CD4IhfrUxM
+            fgwERbWF94zCffbpfQoidplgBkA68l1sSzOmEP77j/7X/w==
+            =IeTC
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-11-30T00:52:41Z"
+        - created_at: "2022-12-26T19:10:06Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAxZq+kCt0yMSwsVhXS14VTBUXueQcR6/URaqse7U6Hu40
+            rMdjlrugOR3Xqy/chX4zMG/L+auH4moTBX94VMCk3H47BCduxHqZpYAow8fUOD3y
+            1+LKl71FxPYpalDVt96rdkT0B4C+n9w9pdQHCSsHXVweaJHsLr40+nsxWxVDL+J+
+            hN452Wmk9QNnTi4ekOk5c/iwAhoXQRWHs+y9LHc+yJhShAXpVLn4/IEYfXVfANBu
+            SdSrXZ0MCRr99keNKwdMYnpLi64QFaiu2JaFJMmp7ojS3nm/nP6XCwNMEobaCL29
+            cJ6f+ZGaw97CyQKjJNJVRCcUhoHY9yA03ZgaveghArwTbbSOwtrjIBme48io6qOo
+            bQ6wHeJmIUFHP4pHJNh0FlgzpQlzndLs+f+hiWC/KDE7Vtbbly4oHr+EiBwyA/03
+            fC6Ug8/VZ4083sr1upsgaUGaJfNmhIKN8TM1is68ykCd2r+tXY4KGeaimW61nily
+            8N4zQSM/MHm2oW7EzVThrLFxjouncBTdiynbHjSeG8m5FBwXLN5ntrRLyJ6qLBmQ
+            9dQTyQvT6mq0471Y8K0VS04nBp+PPEBlEmdm7KkfXpFdiIaqb5IPIKC000Lt2ahM
+            zetclRTx2WIlM2jPsdPOYySS9wdAgcwAxMNYIDxyI7PJ+j7UBRPLGdtP15bfgTDS
+            XgG8pGsUAkv0Bby5M60HvrRUFyWACfkwJyPjywUXU+lufZtExHwA42N9gsRWiJPx
+            Gf3pEdmG3aIOTtF5MTDY+lHX472cZ9yuR+CcF1NJq2IovLt2b+wQKjVNY+YuG2U=
+            =9yi+
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:06Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJAQ//RPrikrIQUJ6qVHdEQVtH9CKnNBDCk/ipP4CU1sdHFx7F
-            S4ssLv/sTDofJzo+LFB0QG3JRWEx1+IgtRF+6JCw0Mm7ed2STMPh6/emaX0MIcgS
-            x1t0LMsEmGa6Iuyjm24x5I8qdLpYtOjZd4r797GNeGEXUzRAUe9zbFEY45lSrzn+
-            H/mbohDAK/xEuvY0w1qYW2NgTkUqjxgpK7fx9df5GpiEE9XPHsQindpPYh7BNcau
-            fIqN7d+A+nMw3DI8YcmC2yYnr/5UWBe2UweQuFWyBxyI6548kKbjKOJcAboo1YVL
-            MPyf+Z3eySNG32MyE8vq2/d32/Sh+Cwk/YG6o4mpjwdSTT65JDNZs2eu2alOXnsi
-            uvGDMTlKwvUP89ynB8tDQ8HdV9bxFT3/9yOFAYa+yU9AguvV13zl6ublpO1pPY1q
-            iJMDc51iyRsH9jv9ALHqQ+FIptQDX1yjoIobHx64zrBaiOKeqkdWgZGUfnldbOyw
-            in8Ooa1qgG70h0T+tearHB0BDTCQx7FvEgUN+6eAdGLncoV9a2bGbtb2IBzm7pA3
-            YHV4Ab308WyO/8MkSwd9uGqlsxE772TN5XYLuWo+7KgcSCGght6vnlLWIDhbQ+YR
-            /ZLMik2Gbsl5bV6cpkbzI9VBEx8vHulpQazkHSAfsxr6/aiqmz0TJM8I0oe+d7TS
-            UQHZoPhsqIYDwOqNDi8erCeeQzkDxSVPlBICv8+YGXd5qSAAte7Fbo/uQvn4fGdg
-            9YAyhaZ/XAWnb3rL3VpKlzGXq6LAaog9OyQ+e+bnP/7x8A==
-            =76ZY
+            wcFMA7zUOKwzpAE7AQ//SRVglepCGd+5+kYSUzW+y7lmx9yL/wclaIe8TGyfLDvU
+            1VkRCn3aZfh14vI0r4YXOiBXBoYoRvyKoE3d5g/IPnnob9k9BIkyrsdNawRB01Cs
+            R0VFmQ4B4Fs2GenBCVW28rYEedyyAtDT5+xUpLHZVuyDd+DIz0YnTXqcqTJwR46e
+            GJ1ixAPPa6RTQ+OSdkNCBGhoSlEz3OwqLrSC+eFzblEuacb3bLMSanUIL+hTqmqx
+            BRqC7q7QVVN+usIoR63MEBd+PTlDp2Wq3wielpmIC0Na9YPwS3ih81pI8S4ahFCx
+            WTykT+jbz2d/plbVDqXW6n8P34XxoqwMbG4gtjjc6AQoVvERJ6vtsgWYicZaz4VE
+            7Ns+LS54qVB5a3zGbluXWO8ZX5u0VObkEUb9PoSXAmhSLbUqk1hHbDW25MSyDg2B
+            Gcpuhg5BNW6bo2PbrIGB17lSVbyJyqADrun6CPsYw7zYPj3uewNm7qzKt3R1DFWW
+            vHxiQq6DMU30O+5+gfkyv9bBBLryI6k+iVNpy2X/ec9g7ROANtUKJEolB7kv6UvI
+            bZgepIWawLOYgLKmKS27gYmQjr/Ejm9wj9Gimqh0of6YhFVZnxSdPoDQLAKSKHSm
+            +owavrUC2x6qWEYgRk+baNKcrmqCmvbTIpNMdY2Uu8yScuwlZL1KNGIUS27A+rPS
+            UQF1qvRZ/BLOX3qG5YZ8nti+NQnbDu4+ktBXZxPi3MdchOcSkYDzlTq9uNOmqVFm
+            cxiiLYIDkS51P4G/7vE3AsVjSmOAUkEiH2vGa8O8KdjWoQ==
+            =b/H5
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/matemat/default.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ config, ... }:
 
 {
   c3d2.deployment.server = "server10";
@@ -19,7 +19,7 @@
           extraConfig = ''
             satisfy any;
             auth_basic secured;
-            auth_basic_user_file ${pkgs.matemat-auth};
+            auth_basic_user_file ${config.sops.secrets."nginx/basic-auth".path};
             allow 2a00:8180:2c00:200::/56;
             allow 2a0f:5382:acab:1400::/56;
             allow fd23:42:c3d2:500::/56;
@@ -47,5 +47,10 @@
     };
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."nginx/basic-auth".owner = "nginx";
+  };
+
   system.stateVersion = "22.05";
 }

hosts/matemat/secrets.yaml

@@ -0,0 +1,203 @@
+nginx:
+    basic-auth: ENC[AES256_GCM,data:VIjP7lqSmGxKswz1XDLxKp4=,iv:meyfO0gUjfqS5bRjnBMzR34UL0uLInvodv+8DS5IRnI=,tag:GHIKdh14N1JGWbRedr9T7w==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age15vmz2evhnkn26fyt4vqvgztfrsr2s8qavd2m6zfjmkh84q2g75csnc5kr6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWHlpdDEvTmt6UzVxZlA4
+            UVZBZU5OZEF5ZGtxM01TV3ZYUHNFSDQ5Y1V3CjdmZzBtUEZGTXk3VHRJNkwwQzV4
+            MHZudlk4Unc5UTB4QmxhYndXK1pJK1kKLS0tIFFJL0pyMFhqMFB2UW5MR3RLQUhU
+            aWNrSDFKbkVScWVvc2x2emNSWVlTc2cKm6rAJbeo0Z4Vh3RKIuvamRCHb/7hR9YT
+            x0FWku1FyCBuGAIpV5UV2uDUgM+SRYf1u736NJSXyUIMYkfJHegjoA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTLzZFZEVDeGxNcjl6N0Zl
+            dmhzQkJIRTYxdlV0ZG5IcWdLN3hNblZSRldrCmxzMHJJS214WG1XL0wvaDNmbWxM
+            ZVZxRERLTU5QYlNUNTRWdWhDclB3Y0UKLS0tIHBjMm1WRUZKQ2lHY2VhaExMRmgx
+            QnpEYmxzdXVoM2lQaWJTRk5jUnY5ZTgKIiOCV2WB+R5LAgj6nyS/9dcqmN6FWIaN
+            SlQTSOzYFop776o7A9r109XtKi00ay4wMssZapTuyGaDkTrdgltE6Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-26T22:16:10Z"
+    mac: ENC[AES256_GCM,data:AysAVvYXKAIw7KMjVCilXmRYEP3+i5QOLc2krKpc+oonfYofTxCQSTpISJXytpLZHX1sP+ACCApFY1+nOgfvSL8meE/VWJb6ltRQGXxccoeLwZkqwyjjD8VW4OBED0CbpZb5a/bC4PyYW1biCrbgnwXzBtlGe5OBkL2s8jLblj4=,iv:GzIo9ca/W+6sLU1vVY3JuNpg+1pKeS0Zqj6GiEPGjVo=,tag:uaSZ/GwnjGcczqCs2dIzmg==,type:str]
+    pgp:
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ//fsPJqKSXqkOz54a0zL6BK+eE2dGnlWIN0P7fuzHEW7ZJ
+            tSH3aJAdIdiVYwhLqxc1UWvjAIw+Bt0rn0F0sQEhzW7Msw139hPD623tkpx4gILt
+            AvnoJW9UuvKxdL3E3+R8wWGPvYjkPmhzU+1V/OF2N+h3T82lmOseQbtq548lt683
+            ccPaxzOU1MU7FzDlbAU40Qe1d6heGollVF8Yc91onf73ItFjbYiBkrzE5UMA/yyt
+            3iA/n+E8U/FtBzh625qfoBK3tJj5EFdJiZXePxtSQMliHLY39deG0tpPr8ynzDHG
+            Kfa/mkUQQe1kzar00WmrKMdE5ANwR64Uo2bG/GZKvoQcYGY20WQORga1CsTOCmA/
+            KTLJIskxe2zIY4l62OkCrDeJjvuVJgjQtVXHBxDg5PPcvDog3yNQM+DiKwXK3jzC
+            WaqWS47eeSVvIeK+AkNP2mzOXwN1fxfguYyU5NT6G+OIY75bmGdNqJnoM0Ow7CYX
+            VKaKS7izfJO7XCdJUK//Rk50/edG0FNVrh45hMtbpn5PAS4Uajdje1g0geEMMtpx
+            q3UGIZvT5ObhEza0w74vBRCRklydvXsnAqNZFmDWReRPHFeVAZ6uoiWB39mUT04H
+            gmO2u2QwlUl7zYhJWfR1B12QprIl5+5SSW1wpEH1N7vi1CTO5swEKf0VUvF/1h3S
+            XgEfni76ir6cq6uSRF6qMZadk/ZqUPpea3HFExVgINjCEBKtoxXI9wyRa2bwpN6B
+            rIpod6FEO2PyWcROu82UJrrs0UuTag5cH4KU2tpe+XCVcndS4aUByh+6mkFsslY=
+            =265N
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ/9HTUWsrULKuMDZBztDwv4r8Slr9c0Ym16hLI05WdkLB4h
+            aic8ViMvrgDBMlkjG9/ltEKyiRWvPE2Rgr9ZmMM7RfPsGlrp5x10/szSdMNjN0rJ
+            DP3r+2cNOE5W0VKcpXBwMc5VLHt+APIMr+4o8t8isU4+F0qieBRFMcINuvoSDx+b
+            QaRJ65JsyIEFcOaUbQWwGDHEtdIMv9jmKtjbgrA2cqdqXHK5HoDpmWduNS2Y7rPx
+            hMi6tGJFBrkV/U70cOh6qArmLiRPVv2pXAIrkGYqKI+plNRIugRRAGCkJa9J4JKs
+            6oOeBpa8BwOUDTyqeAjfkzU+TRJu/IAqhWI+rX/L8LT3AOddJTh2OIllA2r6GfXY
+            2em45GBybYlYUt/yLO6eoMeszbvz793iIqsfRmQxCRnM1LLxz+kJn8PCWI32ixBJ
+            o4fFcX1Hp7dC4ov4JbfOzg8grfO7nGh0F5i6Js2402X6BOlrZR8RwKGxmtgM1XVx
+            AwHn4P0eIirj2oF/DAXM7WX1wrtsRcPBDgfZFQRjCXTmP28Q7c6c9gr44onMjJq5
+            gaE0TjNNcToSH114fB4kwNJ5o1Gecn7eyl7HGKJK/QP7MWTINZ5z9yB9szyLAtoH
+            2grr4Ncs2mT70n/uc50STW+5m6KZdOh7pidDOb7iH6ZOU6dKTIeSd7Na4w2A2D/S
+            XgGvCK7WM/yV35pM6YZRQv2Tsv7I6ulNw6iaNxRkX+2amOQRVEfPXCPrPO2LC8WC
+            hsUe0ArG71DPJN2GzMXxJoB625XTyw8OCYuKz8D11+E0vNO8Bp8tQpWe0+kEC3Y=
+            =sJK1
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAgYcTBFBe5nnux9NyRtzxAQZtzTN64FvyUh9L/Be+otqz
+            zz1J0xtzuw6qQi9LIs8sMmGzFeCInNzLGOpMUQxw8frXeI9WVfGVc2p1NWA25feU
+            /sKx+mnBJopBeHVrYIiuNV6JVwlNsyIHyWy6+H1mz/CpBYOg5fJ9WQQ17oU0fW9t
+            ZFgMjBx0mF71K/On/IMbii0VTPiq5wqZU2CsjniyJykqGtH0doCQwjDYH1yDJYsW
+            JOMFRoeTgZw2a9JCm5131V7MrBG1flQCr/xlh9uLUv1zoGcDsLu3TaaPsFcLKRSd
+            uua0JTRUjNlpE8r84eFWYm3Wqi3z3J+awzkiCS5aEdJeAUPI6Db9DkAvvYuwO+yT
+            Bu0zU8XT/e5FGxkWLKQ27GE6erKeLvfoiQV/ekeDwQsqA1iXdcftuvusX5nklHBl
+            JC7mU/OZKj5QzHtzihAeLP8QBilCLbrWghXs8vleLQ==
+            =akNg
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6ARAAxOekeFMBtecuZLbrEv42ToiXsWG+jn3o0GPMUUKCCDQS
+            zYotGll1hyLqzhoHc9uDLerII5ksQgMb7T0dEoP9cjoyQybWfq2Ry1uwpqKCE24p
+            RzJ/3nJYs9lKBpBaLCV7E/KmJv6T4QqJYGu/ejAEDETtfO0Cr/qtxzoHefIMZiX+
+            TZtDxNnFSvQ9Iou4dNhAJBfFGcUA5UTLEv+QTRjt3ZwsHg0Eqn7/mVt0ftSTsfUP
+            d8PR1POQZqm/xw6M7uwZ+E42/5N4/UQdGmjkWIPeTx4ZNbCM1hyiMj0rmrSClZNx
+            v/6RU3G7Y1FLMzEvjw4xQhB6XywXTTxfSuHppbJRgOs7wnH5V/su7y7pajC+cuxR
+            2XkMoGWgatWFCYxJV+jWW0gr6ezvWqtOkIVHrVkmYahZVqHpjJUBYo1FYUZ42dPi
+            tCnFBvcPkwxflIQEOZmLNbxvEeI7Z39bfsHpRK8CTMCqp8wcf/N9iB+Kzbu/zBnN
+            llBP95LDqwW1UcdBpHEZ32FN6D3u1dVSvdgg/AC90GvzQee+yC+K20fTeUHnUvDM
+            22RBbQARQRmmU12ayf6owU1FZOHz4FgjI5dLD62IHc/3BPnUeGbdXum8LDlKhoks
+            q865dnAmNlPzb7BSVv7/MrHOQxpUFgeMMI3ap5nQfMO2Nn8qc+5EU5MpHDKSa0rS
+            kgGn1suUFUPUfB49cBsWCHnm2abWSpynqdbvHXAYaLped0dDgythl8B9R0ElNO5a
+            vhoq+PB66oN9wFFq+iuOTxJRSvu80W8yYIxjZmE/84axJMUgTEtsGdrw2w09UCcB
+            sDLf4kfZDTstwdgEmW0MM9WBHSmYBAVMgkEOe8SS1TeFe2B+E2VRnzijLpYMu+2N
+            7O6z
+            =yJjt
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ/+NQcFCcSQu68mCXgPxsNAeVJWOItKArxMA1cAWgciSInI
+            1pHPUh7Yba/fjek2yNQfMTxx2I0+XfblmeokKqJ0r8wB+6lyo7PYVJZzlFZ6ne9H
+            1lpl8AfyFHPb/oLbLkPTYaNAX2oZ8HuACBxmIogFi6VOa57EkgLGmbycEMPmr7HH
+            MYwf9zHi2BVojDkavwLsNhfXi56fR/iBtBa3Gjo8hYEiXfyl5Ehnw3x+GgeiQ7Xr
+            xtdwimjBUPKd5kFmrq2DBs8LJTlO1FzygOtydzoI9ZvHO7JVguiLgCTur31BWxQO
+            MRcBu6AufTWbC8ayN+rjQwqiS1FtlUVYEPBUTwJiunZGb7736vKhrrfvJO+zDMg5
+            31X48SinRVqv+9C/ScvLrbw8CVxIuWhZadXGstTUomM5Pqk14EBeV6k1RRivOQia
+            uLxvNRUL0yO5981zzxEnR4kNbERA/2/57wbGeKENLocZqvrVIY5A7cCbaa1BCBp6
+            GRhYtSPTUA88EDhcyxZX60EmITKg2kJvWtQTOoA10YAZT4R16h2Lt+Rc1Wd0JpxU
+            vnFmaQvpNKMzGNM4VquvvhlvE8RSX4odZIGTijHEE0LnGYWlnG/XxWQ8o2kL7nkn
+            9uQV8m0zsaaD5n8dOIjhSJQAX5IGnGn5sD+UCWeC5P9zSi09CovBplSeu8Z4cfTS
+            XgEmI0j0iMMNt/ryp5/MJeSKuxHtf94ABy4mcbc9F3cpIZwBPaM9DgYmcBs7qHpg
+            D6aM11BKhFYjILEOo6689UDps/V14hbfge1/E+QdFe2SBEjMovTk/3XbDiPaLzo=
+            =LmsH
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf6AwpuDuMUqq93KVk4mperhTon4b/om9eSv8N4l1yOAEin
+            AGVVQ6fhGR/jdGWwun2+iFltKlJhxTD70vqIcp9il1/9+GQkLEoizVPux4kvyUa5
+            nQo7qTiTuVN8opEcS1X4BCI+CMWn/vpZeoOgGdmhP9UBpa7T0J1svCnmZhfMrs2C
+            xG1kX6635mOu352qczXr2VjeF/6pBdynv9D6XFkcurV5TXG8iFHwuVrpqYR1xXtJ
+            F+KW8kUta9QVa1tWrZ88Es4F9z9F2umhp/4tPcEnQKq1ORU/8GN7MzgC6e8iuZjh
+            BZA64SQy97pf4xeW8+nNUJT9LSo4o+p7Sv6JMOGUONJRAWKfW1I/7/sehWTrCOJy
+            cUW+WK8m84nYnvtxPMPVbVm2h1FiEpcyTY4JxUjUKVoe33MxjUBU60WSjqnDonCk
+            18AS7MSp5dmh9DHOZznDVhRv
+            =EKKk
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+O+05iidp7bBWVntSrnQcUmZYIhB0qBYvJJ1HfadEGogp
+            /ziXnRkcnTtCKTVfg23+jtHpWvYLzs0f9jf/49gXbTsBg867G6oOFLHCttzyoE3b
+            /RrDMyRA04QNkEvhEN//rgPNrGzz9wa/knGwJWXNSYAI+yk8viqcZP7mIs8jA4JR
+            B62TL0Djp6xOBE+hTu1T1CmuyRzYTwCTFLDo5Ffsrnrdo2dY/nsD3fq4sjGlnacv
+            iD3HLmN8Nnk+DJD6s507gqeNa9htlFKI27M8JeeveOuVXWg33ySo2vdPoTe45vKt
+            oZLfMBGpuW0JbtPgnfXom03YezpyOGo4pchtHQ/fk0YnoLArxI1BDhOqDBkhOkFO
+            OYjJTu666HEkXTNIy+YpmDVIo283r9gZw5j70fau0/0ZRMx4N7NzjHafo0Qjtd0Y
+            xfIrCwDhqzEWR9Msz6IRk8CuT4XYv3sm9KMwkIbxYVNGNlb/x/CsMM4+lu4DrngK
+            JTIKVRgK8FDC40FbNEmZF4s60v5SLrRPLl/daaDdB/tV+uI2cW+WJnUpFr0AhZUX
+            NpyUCIa1+uw1gQwF5xRPk4nm47QldpuH4djsh4VFTSHrsSHZvDCR5joqRrst9obK
+            +1amtGHZvqAjavv14hH58ZwIW6PJcCCS9Exyyy7knUzbg+932khJrAE1LJiw8zTS
+            UQGc9GkQEXww25G6hIamZKeELR25eiojdnSceLevTxxYcbmjIK/B7YxqH0KEsIdE
+            kzvTA07FV6+U9nDZwWpcRW5thpS2X9FwYK58jCKoXsYlrQ==
+            =dFSd
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/+M/azB6Xazc+s+uYZUsHSZ/L/dBKdrnHbkGzcdElx9x6q
+            8rcRB22jABiOzdE7BrzWXe/Kwj0sQZ8mRxM5oS8aNatP7vrYAM8Za0v8rsrx8sgO
+            RyVwAnzqSj1FDJRSzhPNBbo62oqSwfdD2SKe9KnFCGJORpR6ppP8stCh1s3egBNA
+            zkKkuiEJu/siHglTNKolICSK0YXz8BowXwe+Vholi6PC2iUXz/KJmdSru548Jl+X
+            KtCuXrvEQjSZlUuOsGfJH3Nqc7kgdjxLqz4g4WvFmf3QEf9wabhnjzj0PAkU04GX
+            QlBvwrbtr0cz8q2A4nflgjkmB/RbD8ypbuCc0v6Q6N8BQWMH7VCuELS7r1LMaRuA
+            Razn7h1C52Wgbwx58pT3ACmYvalm/HSZ7VXFcopMIyfRI3c+yVqvo+EJyyVnbuOm
+            0/AByQDVNXtZrf0kInUcstGfSUenad6Vfsi6Xu+DCqrqg+uJOgktnFVfxERylE1B
+            wfJ6Orh2xFQm9iOmCQa4Z97bNJesBxaguA5bz9ZHX2xeFQDGWouIUJl84i1IvCtV
+            CUAgXe4Qx6VGyy/4TWpgmVCdaqg/eKdrA1K5T2lHqtVe68Cuwep6UIZLWV7wPqtY
+            1v4ODzROOiXsyl6yr7Rp63rd5jAEL0n79j3pviHK4NIndeKE6yWzcVcTwoHiHmvS
+            XgFv2+j6eICrG+2aD4y5zE/cw0hYmWdtZ7/cYFkHWiOblv3bTLHY/eSe8AdI2dqk
+            F4yZN1UckM5ASdZ5kqvmzMs14ptiAlvLf3oLKMT8NPgzCwvfsaddTwYpmS/iuf0=
+            =Exbm
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T22:15:56Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+L1K5vrHqX8lP32Y4hr+gYhHy7GDCi+KXUVxlao14MHTZ
+            CovCuuy5lekrx9QYz7pTu5G16mYQvdCLp5iHwtxOO3zDSmsffOmS8g7AH5phoC+D
+            w3jIJq1q/sNTSavZG9VeeJr4WHrV8BtkILC4Ns0NiiMHY82oZGJRw2nv7QAE78Yk
+            VABxRXiI9g8ZWy3KSsaUGEosh5fp20IOpDlp7VBkckZe0hIfcvggvqAgwqJVK1qk
+            YTaCQT2gUj1OuXHUwBqYGrlVFqjA4x47lcK0UjiZYozJUtrFXzWdGVzKY1DVaFQf
+            FxLg9A1UxSAtCeA8vipRZvl9CL6bxFzoYKYYmCr4QvP6/UQy6CUDT32KxzZFBpT6
+            E8Fx4gF10yqpo8OAbtpMNKY2VsU9aanRry140AbCb7Db0i5eH/2f/J+m7s+nQVMZ
+            Pg3HC1OHxeA1q/qIGCrWwMINK0ctb8PJSq9+C2ZEGMHmHLHon4zj0PK9VRRsEhJu
+            hb088q33goPIXo3YFEKrIdT7sl7osYoGqui+jYqOrJzIdDfIR+cJdVYHfCGIWifW
+            6aMv0vTjqJCN4gwb0gI8kxntLaTmWWuKP+Riu2EVyTNGi5O6gHBIZxz3u1K2pArd
+            xc832SBEjcVpM3y9B++NHkgWIp+vC5VlNTXPT3t0YvmrBIo6xMUOaNTlnNprItHS
+            UQGiZDsIwk/wnKDHoljUfBneuCv9zwlleVbeqHKr/nFjpVadHXN0N9fXJ2NFOxLY
+            vnnqgsOQezHeB2x8tEE6tTFjPkmC4futxAFviZDMZ6XWCA==
+            =Nk4B
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/mediawiki/secrets.yaml

@@ -12,175 +12,195 @@ sops:
         - recipient: age1xjvep7hsnfefgxvuwall8nq0486qu8yknhzwhf0cskw5xlpm8qws9txc56
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoTFFUaU9KejZrQU9oa29x
-            bittbTMvUHdTZk9jeDNSeW0zaS9leHlOZ0VjCk4xUWdOa214SCtLTElSNC9MdFJm
-            S01scEcwMXMyOFBCSmhIZzVPMGNoVUkKLS0tIE5SOVNFaXpTdG1SV2lkWHI2akJz
-            ZjhqbHI2dU9BUEFZZUhneHVGd0FQa3MKFYCXtsrBzJxxoEFzRPanRpmkl3oNfzIn
-            h8UMf/2NPI+ZhFUnDvg5JiJWDlExhYJQ7e8XhMW/nmhRa3+BBP5fhQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWEZLakVpWnp4M0lkUEFZ
+            Mi9iYmVRaWkvY3JiMVcrRmM4ZlNXOG9XUW5VCllMSnpLTDdralpET3FZK3ExQkpN
+            THc3VjFhYlNwS2JMZDVVVk9XTnVZR0kKLS0tIDYxcVFMRi9EQTlreEFCV0gwaHE4
+            UUNLR1RkOEc4U014NFRYTk4wc2JqRGsKOf+ZMELY2AwVu30W53/P6MWquuh90z5u
+            t/MpkrZIVuql7qOBfsy8rV2LtdS00Yq5b57PmPKKncR9jusb6l6Nhg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVYWlTakQ1OXh6MXpRSi8y
-            L3NWdFZkVEYzYVVWZGF3Wmc3dnlFMzVSQlZZCjMyUVRoUXphZG5rMEFrNzRXallD
-            N0xkbkNiemJHTnZUUlBxRjBaYVNDMmsKLS0tIGl2cVBzcmxaVmpHaDdMaHdxMFFC
-            eVlJdkhDWHRoRy92ZE9SNyt0Q2hyNHMKSfJDmCWOthsdxByJTDgUUPO0JspFXSTP
-            TEA0l8DmrS98w5ewRYOTHuly+2ioP4NUFpA8JvUZ5gadgPzLDLeiig==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWc24vVW85T3M5VFF5Tmph
+            WnlMcmRCeUsra0xpeGhxWDNvaFJySGRuU1JvCkMxNWxWU20rK1huLzRIcmtMVFA5
+            UDZlZWp1SDk4SWwvQkhzMHA5bG1oeTAKLS0tIDF3c1pheXhPYWcrMFlONjNFS0hY
+            dGFiNnQ2YjlYbE10VVY0TS9JSGoxVE0KIGxsQZ3NW8obnIud3H6s+zVNkiFf2TYD
+            8ddmsulRCZAtw3qRuNikMKAbNsE+foO0fLb5Cem9doOcXpcYIwp1vA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-08-07T11:31:20Z"
     mac: ENC[AES256_GCM,data:EbSJkthEK2xBaL3dttiYLVqBRMC6BwwbyovUrE3r2v7AJ4KP7mnJwrmvZ83ZFPyXeGUgcRwcpPgjImcSntUv9XLsau2Se9FKJPUn5JDcpmv49vxrkrYrDt/IuCgSFZk31pxqBcBb2clkJ/7eliEmnQsj/j8i9YzEg60reRxTAoQ=,iv:qGLm2+uAwNW5zURPT+afJ/pG4YomLp2NQz62Adguug8=,tag:6DqsrpjdR9xxDHuXe/8hOQ==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7AQ/+JP5yNH6ENTMJLq6WKcjaRZKr5PTeUCOeY9CVCrgQ7/AM
-            rpZ0iB9mqOMADvm0SnOxetuGEzzv2HLryx/9UwCskq6WSbskemwxoRJGZgFVO6xt
-            pHq1WnILaKBEGOXXlIJL9KKhFQJEmaf3Eeu32gVSPo3z67GjxujTQd74fkiEVz6q
-            j3CjZlui8+Fbv3UK9uJ1SFfcg4JLGAkTt0nIsEsP4d2bcalyjQbImkYQ1/SgECOk
-            J9Ca+zQwg36k/Aw3f+cZfdVR7BJIP1/WRc6G9HeMYlSJvuegSmCwccFSb4T/HFOE
-            vbFoNQjRx5/4mcKubIb1wbdDPOgmUAON/VH53JbnyILcD25NHMfjMkVWNftAx7MT
-            WRIIVOgbktA6/aAipVUvABXOwmxWh/EWyjCNUH56Nie9OOVyhTK5bjYlsI2BpKPb
-            1sbDKW0fdITJtqsnIIT2hWKDXlWlaT4wJnntpzJU5aKN3Jf8L277+kUZ3BTpsWnd
-            yp+ccvAr6fbv5X6JSLhHIFG0O32BA10CcIGcKzU40Z4CnY4UGs+DRpmy5rU4ES5d
-            VnxMqkRfgO9VD/j8FFIWeeoN0Xx0jcRbjN8JKEdmM4O1Wut8FGP/xJVpJiHg9QgW
-            nR1IlTT0LBWw8kgBAhhkJTkKgFTQoQnbqxbpKxl+1jfDgtV/jOwFyactWsG7okvS
-            XAGR9agagi99u1JA1T7dgY3CcWQkdb3IgJjnLAw+gIQCRHp//oq/fGRWWB7uvuL0
-            rS/RiqPhjR8uydr+b90RgxS4cREgyeUrkAsXBXiB55KDQSe8Yzpc+ulJ4JUL
-            =SBNz
+            hQIMA6j84+xkv3y7AQ/+OZD85Y/dappBQ6xPf2GNjy9ZYpAoDh0orVvHJRa2YOQb
+            a0bwDQGa6xqIdYwbNWYkh413wZCmHOVyuxjx3gXSL/LBkqS/y3uIKpebIQguKYjA
+            LxUbg5BwsR8aCdmrxX5nz6ePA4+0kjL/d1fPhiBtEwt9OXVg6mF8z2w/TTMPsdzt
+            OnX4AH9uThWhVKbggLc5z0RXQWl9gVr9ZLVXYV9pGU4kPidfNWs3emdmM3GhmtLj
+            20OMxs4x6eNI7CaJE9XlNR2+Ihzcm4sYfjpyTPph3i7WHx7I3sWhzvMNCkIn7da5
+            psG4XpJ7gmDiJsW/z+FwsB1K6Ex9T6C/wCrgTFyJ0jVq6ZHLPv+L27MYZNlZEYvx
+            /AhEzOZTrI8g0jo/MclqBCyjtufr/MIwwxX/EQ/ZFr0zQEfwnAXgDlRQWNKpXCGd
+            UwrzVLmjlIT430FDie4vWAht5T1PgiGV/9GMPA2CkcIA7Tg32+4R1E9dt0MT86tp
+            A0KSGcagr8AhDtqZ2jHsHG1CkY/LWV0IQXFD8jWNh98pHN4iVx+RokFpYce7NzCN
+            vKl8AOBfvYqDyvp3SaqPEjEpGWHoEvA5FHp6F4RTRyKQc+LkVl1bFlSBKkfy2FIK
+            muNDWBWLAT7xL+cvwp8QgiQseCdyN676X99BJuCASZzwa6tBKDhN1nTIpZBWITLS
+            XAEOfxX4bH2gmw2qrYJL37mq6ZhoiS4Odwx0L8ERsWLBMXEjME2Y0VYdIBUyl8n+
+            gTAXv/Icb8SfEJSEtqwbmwa1QaT17C7gDBTqR9mUBtR4HWGgvjaOIz65JIpA
+            =7/st
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/+IhUZIDiO1v0uf8MFR26Nb67t/5Me+sHBJbyd9Asl6mzw
-            xo2Xp71FfAKgtECh111ziYD/8TDWgS1cZOSA7ZnnociGF+R9dJDeIQheFWqkpJ7B
-            CRS6jYSaBIIwLQMRD2J/VBecQXuichxgngw0nwO60JQ/U7Pto4BgY6VfWis0wf+Y
-            Y5DC9XJCGQy6F7r+6zVoZ8kpQjcG8c8heeUWbpOG8BCTbUjmktyNSpXTtin0ofJU
-            hBOdT9yoJjHdFfrkvcye7EmketXJDP/mGeFEq4+LE3bxDgpgODdqjI/H1FW/2y+S
-            GKKcqTXowFss+ipyyU5qu1ZucrNr3iHP3Tphbf3IjOs11ELzT3Jq5QUBzSDSMoNV
-            0WtcdCrGqH83Nos/PtWkQGBH8KrjQLTgOe9sAWyHytrK2+K6BVS0j6hGWGVa+o5w
-            6VHm62X8GQlkT9U45z3P3RXj5qB7K+pCGUD7TasqkUfqTLWIWBuQPCWY7Rhu9fLC
-            nzu3BJiVEIQp6/AjK0ZBYkG4tOrkpRVWjCwtyyCYaLY3jnn4T7tLnlz4VHdgx0fm
-            8ufaFn+7Ap9In7Ts52X6bFvHES4qxUc6qvApP3/fb5kgt7UocfXcggyiW/xgXem6
-            +NnqZYymTspoW8RtrfySAZyhOBH+MX5Lae09B9quk5+L2hy3qp15Mgr26C21HZzS
-            XAEVAMvFRsXG7kD6t0OF3rj8SgxgIeoxkxJ4iXAuUooTj+HncbFUzzgTWHUilH9P
-            NK5YKX1FC6cAnmoSz1+OtqQFkLUo60aZrNboO+QuT+64UWF+7SXfpynHq92O
-            =10lb
+            hQIMA8zMZ+ak7y/zAQ/8CF+oWk7l2dp3sBlhr90O8so0yYcoycTkKEoF/gQnxQFS
+            zg05TGVSY9SWBTA0JERynHWybQSAbpJY9Z259JLgajSUWM1EDxeNcfNbKE11XhMi
+            lU1sx4rMoGYrvR5pphwduMEWoMT3NLVYsaEhU4TKLoCjP1Oyeb2PqQCue28bHdex
+            QutJjwhBlepXgsxYtzOjclcIaJLH/AxULvpROH7H4WOIoeAr/cWsGpdLD/UOWnOs
+            2wf14/7ebgqtloePTUVCLa6vUcydiOu4Zd6qqwH4vVMQX8FglMEvMFr0xlusW5qh
+            FWNMpgbHTmtsykP33PeW/gYMfRx42Aw3bUJ5b7VUE8e/mAGBlq6h7E8cT/ATx92H
+            aZ9u4b3/GDAJH1XZ+6WFEp2edioXAYjYOMCP9POHARv3KXvMM2ssbQ1xNG66ZssH
+            693qSQJgNRr6Sy48d/aIiwOitv/xmRbq/10eFDZIj32RxXLyVGu27GuLwlA9MCym
+            0z/4+GOh93x/0IQ+fjE6YHnrVStwjQXPZE9UpbPccCH0ALv9nlyHRhmKv5OrIL3o
+            GqGB7DoA9PFNOabvVqv33TdavuJjfmjoky1M9UJCj6br1apnpWJoMhEZ891WOP3f
+            7ymjDbuUh6aRz1PEDROMryYdQEmxm0+CDeCmOinMSmlPEkjPAdLdFzGKFwhK5PfS
+            XAF+ICEdDpGZBQ3PgFrsbLrU/rWE6/g/UTlKpispMkGsww1fxyRQenyYXCpm8fVK
+            a0Qmv75D8TWYYckReQdMImtxaCia29xtHQmaWvSkPJIW8iKfRJ6sNGcgREl5
+            =22O4
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf+ONJZbywJtTLYUmCYkSX66YSRtZz9qOFZXcF8hpyGXK3b
-            13QnWbhS4WAVNcU5T0eTxNmfXKfxgvByPtlxqJY6BOE719SKT+kUWZu7VUstkCq0
-            JHgpfk1CjiLWC44JIGlXlRmuTZpC+L26JGo6+FTddeZrfP7OmnyzibSAWEIVWmm3
-            wPNphkqBwpVH+DvMOIufSbLsGvv9gKiWUcBKm+/Arv2l402GgW4TvyhCVn2+hUyI
-            m8RhlGKY6r3voBtk/6X9fNu6pJUGsxke88s6+gUG4JYwm3OAtXKj9F504LLFj3hz
-            yVEVzYhPV17WD19vNQJzuXvZT2wN5NqfP9lvcfSq4dJcAZb22H1UvJB5Kp56bRoU
-            BhOqojDgwWkXfIxYt2Jsbl1U/PzrsKuLtmDzOPe3jzhBEUFDZECzaA5VSIFzKUr/
-            Bk02H+BiWSxkO37ZI5YR1su0/xT0yyKy1xyyDog=
-            =2mlJ
+            hQEMA45bZkLXmBFpAQf9FhR6BYfoxVbZKBc0lLvr8+ZLs9/d7dMRAEuHre2vOCGu
+            n47WLHKwMt4eIbxVzswlzgwVgDMRqRt93f0yMFZxsjdzRdzFHuGPNZRKrnMm7ci0
+            ddJXWMSMED9CXbBbivXtn7BPyebKcnB0P+cDvHtLcUMWPI7WU5YXdSSD+V4SJKfJ
+            aOFiiX5OYmq9bztvT1OH/HfkS/juR/v3yMSYkesInSDoHPOIQR0GBW6qiz4WyAzW
+            CtCMi3dk2rA6zLEo8RvS7KZJOFaZxy1it2QqjsJ4WxHFuwjc9U06BtFXIecrH7ia
+            09WczbHcdpM4s8spb5xhEebuCmPLC6rusxXZzCUModJcAfT8NWc2ujE8AW3jDQ0y
+            aOQgEWrRo9/V4ZG6RM9GCTpap4I2DIf6ULKuR+EsHZdXZde3WtoMAKCIM7R0IZgP
+            VioP1XnKZZUZQH5nqLTX+6h2JpkHLmzHc6Cg3lo=
+            =9W5M
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6AQ//Wh3hubq7CI+jBUKRYh3cne0AR3EYzzMtm1aTVXiLj6d6
-            2KSJaTMU8FWFIvYq1jeXG7pvU7RoqOC9a6RWexY4Afzi2lloZ00g+pUoSis1jhgy
-            kjvOnPjkRSTowKIYBb6xbPynhmdkgqJyHvTW/02haesBeoE9l0tLgLZVUkhUP3sV
-            GUDf1guZVRjAblfwUXcK72Mn0/8aJtj1Q0rJy6+B3cJeu6cld0wt1ZKinLo1stzV
-            QdT9+pl33kVs9/FS0ZqG8PYJhYhUej3CH0SUFoT5oa1Lyuwl+JS6kwbYeihEc7hH
-            HkOhRUbxnuhzN2B39943OT2FSMl5qcNYTTE8j+aGkynbI3qFrvN803Xby9KZMCfX
-            zmKSugg/RbpCkV4WTgME7wdD3kRjziopA3b9W4kD+gFNr9symwPYYSwIyrp3qL3A
-            L7/vm0N+UU1f5xvzuwAmZApR8XFm6S+QZIzAt0bnCkJ0cf0/KoMd2fEuGEZuP7UW
-            iEhl20oFQXBzGCYx9gxfCIPXZpBuN2QhcriaERfk3+iMMUUXQsxFWfbIlb+LGfff
-            4ah/SFXttHx828kHSq0X8BrcqZ9hX9GfwYDzVrVsFzJAGZt9nhMolJG581QotPQW
-            QONsrkwX0TGlUOSGKIWGvhaBlMYPN3VD+qrIb88GAg30eoe93cczpJh2wV7iBRPS
-            mAHHufxuGDpgVcVoKwW1eW4DHHwqJp0STXaROc5FpLqB4YQPQ5YQohumdJDuILcZ
-            4juSUGE6kpEcFGg2cexpOjHVI7j2dVklZ/kKMYwdhIcYZt1HJc6NeY5SxloXl8+k
-            qF8suwHR5rfkJtboNvD46e/y1kZT1tv8B5bb0Oc6okrsYbBzJicDLA6cHnJiXthW
-            0kC9SF1+HgE6
-            =mgMf
+            hQIMAwMCBBrc/JA6AQ/+OjdPVDn5EBui+i5wv9mGEliI7PZHM4WSEcl4K+C2kM3K
+            cOPz4WRpA+RCXc8uIFDgVvmEGd+PIBq4G6Uwl4QVBupk1TtuSFE4Q6on9jOgRTUL
+            8+nYX55Do9SdOAQKMflj5DfSPwUfLwsoD4EDmH4c1J3FVBscko9L8d9Pm93sjZwW
+            j83k3CoN3f21x6hkAqU1TsHUUB6pBBZ2Sl1VrntoC9Tfqj3y92/tqEUFJbfhEp+O
+            gP13uihKgXWOFdw0vFkRUR3Go60TPhZvI0CxIaiviuC8WZyyK924G3EFHJah0JNr
+            S0dYL7mQo54/LhxWafDhK5ilLrMyjgLLV+QB6tijd4RGCWe8BatkXOfOP3YpmxHb
+            QPzX9cJtM3Us8iS1wWXXNKwOxuDINvlszdhEA8G7lnS3x4XhNdpeU346G6b2NIQk
+            MmKEOMqFjUp4bNflL5pHpZqNbJizkmmlP1Z/LBKjca/2H5oUbRPpyAgvOnO3Q0I5
+            j65C5uIylRIHsXvWyeu/8TxAuoeEcVOQQAFIOdIGsA3kFaEpejvi/RgYfQYrocbG
+            Po2CfVpgpAg4wuqf7pYnHeSaMpCPgBO92BQQHxeQkmfxDurru8iB1ELh5aaqjeCw
+            kBhJ6qd4d+H1iLffTVN+2h0LZnTmqgw+iRnFafJeruHZA5gJf2ICze9bUZ++rn7S
+            mAFRZuG/aOrMiTNSa05j8twvpeG+k0SA+Ya0IycnY5fz84faUCObhEBlAM9fS/vP
+            mitgjyjml2JM70/+jzFqFC7Y4R9zH4+6YI3kXc+Yk3WwAvg9kn6Mro/F025kKFia
+            LZP4Y8Q1dAMipoV+0zpZrVvV9lKlwrnFmWBINldprIvbs7BjOKqo96KWjVQYs0tT
+            jXub169zhwbs
+            =OPFZ
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ/9HdnefgsDEOF9QbOhpc2UZ5VaxRp2mIE+kzIpHIhFH3XC
-            44dTXsyU+FuyJPRTKcs3MD6Y5TUjGAVFMq2h6Yf5i9VbdBuJrhVHhL8R9vNRs4zC
-            X8AGvWwHNvXYNHFkULPRBtas8UH0uuAw8Kb7Y8LJnrcnk6RGB1MnDo1HkIoTU47Q
-            C9gkWBWR1RXHTR9JRlkZrWxmriVWeJpJ4LFy+R6KT6Y2W6itEXE085LM60v5ZcfB
-            VJCqr2WIf8kPhjS5487zD9Bj0gg0BmuUk2+jgkE2PG1LF+YNbZzC3VjxxZ6vC9k8
-            /kJkKwXfNXvVOUm8zAzw2g0FNdj+eiCB/nXlOVtTfOlwJkbLOBmFH038Alwa0xCF
-            ai4nCGnaygA+tpiAurPM+Bph/n3Ml4zg9t266WQt4d6qOyySP+3WZeu/6yaAKeAC
-            HUNFnLELWy1jRmb3PtpVlJ8yyalkgHkLmk6eY+jcsHh6PNILIzFiI36OEqZpb+LP
-            ZQeJupf5oNFeraxigulZGQcG5p4h8DtQZOG0FATElbK4UZWTe3NO12ClusLpVfvT
-            5Fcq4J6PGwDPK73j4S6gBa4+2ib7WI1HuDPp3xPNp8FEDP3UAQIV5OEFPY8vo9bA
-            mYlEPGrFiNGC4YsrU2u0i0rPGIEyqoxxZs3YmMwU23mC4on9lOiwfNV6vCWExaPS
-            XAEWPcOEnMS/63ZlWLikZQ2djy6qFuAJ8q757OPVX+Tcgu+uTx2gwQJyLz4Jx+/c
-            HS8SBiZkhQS9G7nCyR+Akn2Yk6GrSUX64sCxOekrTyAIJnpI0ZgzF52/z8SD
-            =AP82
+            hQIMA9XEenRNYVGHARAAgcQoX9dv906OBlRxSbkf8CHbEE+5vnULBMg7wi1DKdhp
+            vYxVO0MJGvi1+4Uu8QxWCbbqVmH8NDOo+y1z7J0A2KfnN6rLnrWoZXKwyDfG0q1W
+            g+RntSXIvvqlrgLANManeM4DW00ouByrXwZoeR/n6Ol6ixNnl96l9yhHcMyBW8s9
+            d+o5/HMc0ya5g9AZ2UjR9cKPtTCO9F3zk0UISa+CNmwO5xmOHdkZKAn2+mLjBiv+
+            rdjVvitnEyOp2BXnGTH3ArEyqgT3oIUGlkU/XJz/wPn1f0zpCbHPpXrlannkKQgN
+            QX1DiyyI3hkOolOMPJfE/QawrYUDGs2DEUpEQ2+r24ypcfNzoYl0N/M7R7xXH43o
+            ygWkDeAQ9fJwmhDOL6JdTw/8dsH3N3Au6QnVTJy4FAvmEjctYe+Ii1BPWIwlEaZw
+            lKETxWNuBfMd8Vh3CmeQt2gLl1jmO4OpfMLAZIFED2YIHVF1BhWHSLzSPlVGOfUv
+            bKk69B+fotHkxP0CP95ABNGqPMfkuqHMUdJTxVXY6g06wSVLbKYFQhv0viNrXbDr
+            oaIn5Tp1rSPLD+L8YfSdpumXx1Pc3rE+l2tAN6ILj37HO5NWzRLXRH7SyclYcr6o
+            hZSs5pK/QTCKLUgMS+XlMhh4ygkvF0SPK3hX7YsILBbiLCUALTBqikxylfc8yW7S
+            XAG1h2SJot/8TSUUhnuSw7uYxZwOD6njK+7hihnch1D5vR+7uSN8Q8lZf4P1ZhgM
+            FVyT9BAgKDhZIQIc88ENC0DyWk7EEetzIqe8C4BJi+BMIxazMrPN3o2SlhC5
+            =vpmQ
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/UylICSHiyi2qRj2infPxz/hBuDoJZnsXIL+t/wgvkv7a
-            s52ipdS6dr/JefJigmY127DnNJFEvQiZXBD3AbB4tKczTk1JBm/BtJM5WJl/0Yot
-            Z23pet4WA5AVhl6imCno8xyruin5rq9td9PG//gCPn8bL5SCUSapnaUKiQQVWlr5
-            aR9P8xxL37p0gQXqm6R4pLFDkBhqTH0oqAhNdpee85yQcK9Vq1fkhPqIgGzP0tR5
-            CUH16WjxEDGSnhetaViboOoiEuFdfuSv4I/ih7CSY9IZbj6pVlqzCwFjf4146OPj
-            uEHGHxgbBWb5nQxNO645SPoCrnJVPGWoNBMSiUf5gtJRAWnopn2ATizKLpcKhrqi
-            epUOjsdnvSCCM9T++Te66AmKWtsArNkt8k97DuTaYrnytfdIUrfYv4XlMczkzCS8
-            npNTXD7quRkpmWE7i4X0mHwd
-            =NP+G
+            wcBMA/Z87ylQaotQAQgAnt82diL9tsIMRxZkLuabzS2rXhdStMuAdNWVhPr4LoZR
+            Y96fid4YHKEQMnRBLC2tojpKBu+hDPd8Kq4a5paAm3lX/WxBBHVTIR9ujiJ1YPuw
+            Ji1jwPH/LO7FrqRnahXQxcK/2Ieq9z9L0/fP56/qhRKUqXqS5idnHZM77pmBua94
+            lkbwuSCyZj6CoFTSnWuXskfFRDptBCAvbPknVxU/Nm3HLAO1eM+Vp7O9WfJLbyNW
+            8SrjdYh9Nsdat3S0z8M/8QMZzMc8+UKzodm7V+P1+PzqkAnw5kRZ2Q5oey8QDa90
+            OeCJX2LcbhyuIMIa0MD64+pEaql62K7wc6erwmrhytJRAYqLeODMdOvsRhNAraX3
+            f5VjOF5+M8JlqG33/W4NnymM/MuwXCLvogSCpIBF630daZCueXhwTdxk5yr/e9Sa
+            oLSVw1ux3dL8oG3q6Zg6p+zr
+            =GCK9
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//UC/cMsoOP8EHe1WnpXlfGPfJusasKH2quMixb8pq0QD8
-            5JHIw36z7VvNdMh+UQq6hjRkkw5k2jnJWfEVF18hcZ7XB11rnN7UpX/BS0VwDQEu
-            X55qHYtNqXV34A95z5S1bg8ii0xJxnKSgptUWtpdDUqH9l+LkRoAj+quTaZmS/wV
-            XxsBTGnwCG0eFw/GY7gB4viq91Yoz+GfnSfqdEiavT4kyAWIi24lECtQSHz2sfla
-            WpSUhETpqoYTnc4CKXXnDZvSHIdtbx0aw7crRYgd5MJwLk9u8Hb8K+j/C1cofWKv
-            ROeOup4C8TxWDyqCrHKG3a9v/F4n2prluzO+nPtrxMQSoOtWO9SpCA0t5jvzKgL2
-            3b6obNQgBqtbNSmBMJWLOhGi0YkLmhrYOhDi3ta3h0W7gP9xAEEea0JQpWZiu4nB
-            9VOF2QbuFFSvQM9tnZx3J+SW+kF9y+Xh93sCSCFs3+bmr93vc6z6QXyS7/tbxcG+
-            jTwO+xPYGlInFMVMCJFZEnslE4g4+MyaA2+9buKI73BuX8tvMfZHrHxZH/NxwYOf
-            mFRvF6obMWYQM7xkHy1twFWc3BWL8VG0LQYaGItnWcSAtD91iUr9ORBHMKeh8E6K
-            ywa3DL4hCSVU+fcPiNAGzrHgTIzcxxTMLx8R14DJhjU/OrdBWQK17gM6ukExxF7S
-            UQEgX4yyUNX9jP0r8ce1BiMhEv4stfgBdV/B/azrXs4c6U1Vyh0rxMVIFkDIuRTJ
-            aPsW8knLzglmzbwa81W2BN/GxL0W5K8ARFk33H6UzPyOHQ==
-            =nmrP
+            wcFMA9qJIVK2WMV7AQ//VAg04nNRhWiY239GPvU5xgVQbd5BdIv3eJH+KCN3vESb
+            4KuYAkDdqANEbF9VmTbMN/r7qp2K4cmXZluIjnhOXm9kHIomzHwaTyJ7cMJeU58n
+            iS1qZmtjD5x/HsyiyAyk1zZT0iy01k0/Y18pnwyEysmd88FB5FhgtdHZry7cTSH5
+            kTN2/pZfLWyEslvQQSmf/vJ6Ios0H1wk+SIZdBOp6TWD2tmPZWBzoD12u89OD1n8
+            Ac9Yt2ddCfsL4xUZQNhO+v8ETfGO9c0HI80I61L4Wr5HqOXYPFUGYrnie/Z27htI
+            BrSeMHhZFyojbxJDCzOVJK64DBBPab0Q6roUROJ3UGJMIbgom5ombfF5z1C5CNME
+            MZm008UN+AgeUMNtC4ZQQUNHPztQd8ss9orh2o8L6yVYsgNaU2jvAKV7VGBnaetA
+            7AqgzuZvMmycp/jBFcGfl7reKGEiQlGbNwkl3Aa0/524a2dQFOai2yzjfu7K0amJ
+            n8K4fd1CdCqcVmK2Lvr7oDzX4JTZr/CXVN622Sb11QgjIR8QApXJwze64LTln2zn
+            6H6NMVzgOID+6UY4NG+5cjpSIaz1gclGF8F4HlepZ0nBr6R9RQMNXkOt3xiJ3QM/
+            296yRjQVNMNrjsKyPVeQU+Mpooqj4UuWjH3Rbq6mbGsLoM8WpWy5xBxqDDf5VT7S
+            UQFFmjhR8jEVy8V82QGgqTSq0F8U9Fe6YwAWORWuLaADrA5I5K+uAiS1VYE8XYHH
+            mTqm9LfGUWJ0k8Cuk1ttpqAYDOjuDqqdFFVVGvW7w2SOBQ==
+            =iGQ5
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:30:12Z"
+        - created_at: "2022-12-26T19:10:07Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ//fk49k1kZcHpsmdXyovpuDDUJCThLOygDSjU6Ba0USqB2
-            iVBcbEwkO/C9YxHbZeXTqYAL2CXiF+kpjbMzpKeBleZ8P54K95KkTDsBZ3SGsbAX
-            wq9enxbrTQYGHPA0EysnI2D50fPnndwVu82c5sFKAC2Ps5QWTTw64dyAFc2g5w79
-            1hT/d04CF6zi2KfXeg7Jy4oSzmdM7O2EUgMEcoA5J9v/Ic8tREfTdug2s1QAXzOW
-            PKXTwbD5ZV9d+e082+/hbs4digMT2q/iRWl6zAtp54DYw32dgxxFetkeQw9qTj5o
-            ppbY1h0o5rJYqh6M+A46kr6w632ZiQ20f5kk5nz0QV+xCEmscmOPtXuAGKsZ8dI6
-            8i5icHdO6NdhqC5bXSQUnY61m6B1JUO9vOjJhx+zjUsq4SdjkSAyl11IYsA/8OOg
-            kKJDLpErD1ECdcpXPqTQpHTEdOASHah92i0wRMhnuySLqchOjt0/VOJqB3KA6KZE
-            hQKWs+WQtZpI914T50L+BRHxM6AlIiABckNY3YTZACPlzIxmm2Yp/r+G4u20vtKl
-            vrjn/MoY8dHGdUzLwGuWwMVEVo6VrObx8DBpiSWIe3v+PSmidraG/VoeTk7BEWq1
-            789oP/mz7IoGaECA/QyQ1TQLgAE9A8jESMSfOFpAKfeqPfFeWopTcDbpijrG7//S
-            XAGu7Kr0iJrN6w0ypP12CxmymLcrkIUPKQ0saCnn+Y2KpFfLnpDmnyw5wf/pBBMw
-            y+3fCeq46yw3VXFOqrbbZtuw8JSaNgjgtAbPKGKlKESwMQf9jU9lUiM/xO4b
-            =F7Gl
+            hQIMA/YLzOYaRIJJARAAyMRKHK5i+vib3way/8ozyQ24aJQ6FDE2p2pIBzNiL4Sk
+            KUi3kI45my3Vq+G4IigQ+BeHFayGrQUco8ytkvv6VGGq4Q3BNofvkrJobbEhBrzq
+            4bKjDeyRQc1qeXYxTZxMMuA+ciSOcGvWMKtY1qHC9N61hS1nh9cv+oF1Bvzkx2ka
+            Zxt/eGSkvMaYxpGKgaJw7aG997jORb+Nf59PBZhLSarRGHlonBmveRnxxhNBhw51
+            gpLZL+r4nU3FFmDfmW2tNLQszgyM+Q6Ac9KmVRIhEu72J3UuW3ReRnWajyxMyj64
+            /aASBS8YvpPQyO/XZZzbf0wzHPb8GlH3zUVQIcH2s7O3hp4BTAZO+2GNJONZSe3k
+            q5q5QvoAgbsnxA6pD2OZV4Kcxm5xTF0Pw6oKFekORO/TVu8koiEAPjCVbbR8/bA5
+            Vv3rUIAFd+KjUYcIYt+RejL4nXFddUlnkOLm8f1ybM89/Vi5ORBddAjX+tvfu3dW
+            00m+Pkp8jpHM0noLo0z/RvbY2U3XU2Vp4FxZLQCaWHdlHe/3/m5dKzhxegfIwxqe
+            /8kKSMIW+AytNcZSa9uph1QytFm6fuMaANhkzPZ58vMQZDwt6/orjQdO9QTGYIkR
+            EFP7R+QPSfqqWsJBP9R0Yn+f8MAQUbKm99eP5TI/+9bjyk5ZBO8YUK3pp3hEqv3S
+            XAFJvusDC3O2vtYtJC2nvShRzVoL2S2Wa9CC4od38cFQmwAZX2B0JpxwsXro3hIa
+            TBDSWykLlf44IHiXw3nMsQArzSTHpJSx601S/jClWUjsT9i5J0eCKefvs3ZN
+            =dyz9
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:07Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+NcX6iadpE9JEzebdkxqI7inlHxqa/XKfSA9mE2s7C0+V
+            1SkrzZETWXe/3CfRUwdQ0XelwYXBjh9P5D/6Bxx0dG94NKQuCQJ4uA4rt1sO950R
+            0eomTUnapO+3Dx2Fro5lq2Uh7B5CZpDKlgMeujJQnjLhTHPjQijKCzoBS4G0nO/q
+            pCpJpHmuKVi2a5qZfSzvqqCtemRCUUe8aOadLoVmgqwF7cLJqUVnejbVWd9P+7Wn
+            q/z1yuXOIWgC1Naiwr3ykoP/eiP37w0+NvhAT8lRI6wFCjFyap7WcqkOVoLXl+k0
+            JYVMuZk4oKdSxRqI7kOUELvIyWxwQZExQWDwrvliuRjwIT3lIxFjYs4Pw/FVSZ+C
+            lqLhaXQKuqugXNGjDK7V3PMKmwvadeqWqP/hgHK6sfs/Gy5kRDKmvi7z/AWR+8dh
+            dB+0uIDi73GobzugQxE9Eo1EmntxFGKjVPlh4RUs/JZwBtYdv3hUIUSCbTHiziy1
+            EmmY2aQ3idQ0rDP+FZ4DfC9uXTiHCxJo2oS7GvW05bXi7Uljl8ZNZRvSWb72nUEB
+            Th5g0wJsz/1RQcWXd4uUNVzbUQtYlJyn1DSfPL1EnMQYK3t/uYfoEW6V4N6EYP4o
+            hSeSMPIF7iqKhdtp0nLdHUMMSEJW76vWq8fYDnZwD88qhSUUxWIWRQkxCpex9JzS
+            UQHIQSd+XtkwTr+IyVM8PWfAhk2O9+Q7i93MDes2Tyi/gebd+zVT3LuTeMECzoPn
+            UPT1AVLJG/4nfMRNKzLb2xt5EQdA4pqkW6QpaPt478pkQg==
+            =/t4W
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/mucbot/default.nix

@@ -18,13 +18,10 @@
     enable = true;
     user = "tigger";
     group = "tigger";
-    inherit (pkgs.mucbot) jid password;
+    jid = "astrobot@jabber.c3d2.de";
+    inherit (pkgs.mucbot) password;
     mucs = [ "c3d2@chat.c3d2.de/Astrobot" "international@chat.c3d2.de/Astrobot" ];
   };
 
-  # This value determines the NixOS release with which your system is to be
-  # compatible, in order to avoid breaking some software such as database
-  # servers. You should change this only after NixOS release notes say you
-  # should.
-  system.stateVersion = "18.09"; # Did you read the comment?
+  system.stateVersion = "18.09";
 }

hosts/oparl/secrets.yaml

@@ -10,175 +10,195 @@ sops:
         - recipient: age14aq8fscrwkgmu5yv86vj7p7kmxclzs6dp7fpvdhvrnmce83ztphqc4mr9q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBakY2S1lYZ3J0ZGpMblBw
-            OExSby9leXJiREV6TWh5d0ZybE9zMTlsdUZrCmZGZFNZV1V0Z0NTKzM5NTBzODFZ
-            UlZEWVBMd1g3b2xGQUlyUERsNVBoQm8KLS0tIEdmZkROVFJERm93QlJpVm4zMHdX
-            ZFhyN0tQRkhGZHcrNThOUjhJdlRWVEkK3OyhpEV1tVsVAXvPvD5by1Xrja3jnVJl
-            TBJRV+UtJvfZ2lciyqgi2dZ3b4MjnMgaqg6fknbwdDR7YbpBPl4XJw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5dll1NDd2emJIRUVmSnIw
+            cHRPeklrRk1jSFdTZndRVWorN2NxUEE2aVE4CjlYVzJEc1FoNXlYUU55eVA4aWo3
+            R3pXM0hSNEdoL0tmZndpNWpGK01tOGsKLS0tIDRqSnE1d2NGMWR0SzlGNEwwTmJm
+            QjVaY1hhVDNCTkZoajlPdXo0ei9XdkUKY5jqhCN51OlrR0tMInb5wxEKnBBz/MUD
+            ViI7JvWl8fePAD4osjvHGqZIewvce1chStuFWUkLzre+LDy0GR+bdw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsaDQzV0VtVSs2ZWJsR1pi
-            NnE0a3d3L0FsVHRKRWtvQVRNYXgwTzIxZnhZCnhzNVlDV1dqTzlMdk9yWk8rSGZC
-            RTJOOGpoMnNac0ZsSG1KWDJwd2huOUUKLS0tIDRqTGRBdVg0RXArZ1E2VlZkbXM3
-            enN5emhnQ0ZuWDZ6SVdVT0g4V1YrTzAKCirPcuvi0b5rcl/87xB5A+olLmNMaWk8
-            O8JBUNs8SX6+6z9AVyOoCJNR4Rz0G1K7GXK0YpIFc6/AgJRbMfQ7Ig==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuTGJHemtFWWUveDJYSmRS
+            aUFpTS94THF0Y0xkTm5DSjN3Q1p2TDZ2cHhrCkV3SFVObnlOc0lSa082enlKcGk0
+            WEYxbjJmRmVYYzF0cFZPTCsyV0xmNUUKLS0tIHczS28rODhVc2g5eGVBN1hnZWU1
+            VUpmTDNiZDd1dDBRSUViL1B2Z0ROdEUKg9saHCNsVo3BrM0x4fZPxh4bnUeCNdaR
+            p6CM7Qfqtb+s+Z5Mib7mOxBFo8PU/ObDjn42R57ldNsHVFPrz9GNhg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-05-27T23:22:20Z"
     mac: ENC[AES256_GCM,data:3Z5jkBtzU2Md3RLfzndRWhL+iOTra884BKWZhnWvBCwubGF3lqN36Jbl4G8IoA+4+588CSCxIPTcyBXHIgrjhm1IjIDKibUO2UaUDaotSM2Wn1sMPv9N1Y5kGbN+4VLYbA+2v3yMsgs0HYP7HEawlt3gvddFFb74a43kPimCNXY=,iv:2LbAUoBj0KOumMut5z4CRun+RG+edA7rYlnN7LGHC+U=,tag:iJXv/E0u4b8dnVWY74kmOw==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7AQ//dxKmG/fr6csx18rYh5YK4OJNbnV6EYBG91SEQNa2cp/K
-            JpBU/w5s8X5jioo2yCmsDMju2vbF0sbPmXb8IW1gz54MbQUSX8Gkk4ejo9eCImI9
-            66vAGbQfnM6Dfx99dFwT9WW6zwz3YcLdnJLa3DDokHiQ+/zv/y9cfOhOzZ3LjdZ+
-            xz32z+qbPpMjiCVGJ7CA+/onf/uQHDMBoRMgMEGcZ8mWBPFWmU2zCO0TR4dbdoEj
-            nq5/BiTr2qwmcSEAV6ZPdrI2qIjI0c1EIrUvycz5w4UjNd/SbRPQ0mte0X8GdSjk
-            iptIJelHJGWpBfDK+ARGntXndZz3H8hfnVWDY9/YhjKOh9QP+i8xZ5yYh3JAVPuB
-            iurBOHh8uauoJS6JPjZ+zNwyyn51/smjLv4wH7iGcd8tgvfTfaqe2euRyznrgGJx
-            ZT53R9xns8sBHGQYWIQXQ3HpfofzkC20oXq7bui64ILQE7dB89EZtwRWMSt6o3Mi
-            qF8Fki3zAttyi8D1MpJ9YaCgaII00Tp6AjArSKpMOdpUmwJOlGuA+SnUivfmqaKP
-            vZguxtf5K8y/CIIQJWOKnoRyVC2DczPvJUHlh6nENZrQ/RU6O5/YIQr1DZT+4viu
-            A0pbuJCi4l9Sd5ssAJWgqEOOXsmh7YOtDW1FgGMqmCLcJpsMHZEdKfNJHqSzwdDS
-            XgG8RfvnIe3QEDm6VR0fzzBJdo2mijt7oQIgMTShz5unPYCJxpbKP6WsyX0ucT1n
-            fAovqN1HV3QGgoJGkhMOiGJ8MjLXU8kItQri+RdHL8IiAr3YJgxwKDRDdqoVqNk=
-            =ZtDH
+            hQIMA6j84+xkv3y7AQ//QCFEMDAHWieepi7do514CWGf9R6H9rYUxS0v/BUwmddN
+            4Ztg/MCo55v7HJPWX9icrXp0YHy4c5t/QS7zKtZOSQKPT8pMumXBT6IN3SF6Zs6l
+            uwyhgAsghPiYO1+dplArJNLhjOTxjj8CxZ7D0Ouuo3uM7Om/eRU5pEYk6aoLzsp5
+            GvgvrgDq/tbXPbjVJE59n8jyAD8SrPFN6TW6Ts0m/fzUfphDBjaefzi5zFH6Wo+H
+            5/QVjh92+9vcTmzrkqiZPi/wasndBdg2znlV16xtmlQ+ly6EYQ44jyVvUHpcKIhG
+            l6Sj1KGVFU2UcOkexxRzEHZIuknFBWF71uarcGIA8TnhdFq1qcWEtYKp+05m+KgR
+            ELbRukEJP6Aw8yAKhqJgO6eFJG/Du5SjYajV/+orY8S+wKhyeugq3DTtkrvTcKQ9
+            JVl3ba748FCTaVaQ9Dt8W9J/FIgi4MAlpw1hYEaKL3w1adUYMVtQa0s5ZCsQtnZe
+            w9bHmCThqCLZDEfV+hL6DRq3GjxpSoAzMfj3H1h1h6/iibpq8P4V78URPSJjWzo0
+            zXOZK6W9xSSz3wwu5aqAGRefjacA0vdQcwJxqF3/SS6exgkq8R9tymkbUwe3txmH
+            Vw1mEjurqBfs551HiNqHfd7xFbAKmZclX79ZFxEoQLhF96sVJ0d46c/dZoCTdUbS
+            XgE8ESytYViohLHVj+3AT48GAw5q8ElqoebA+gxLkaeAt1x/d7iSIqFdXTqoeVX3
+            ZyrrQvf6rI4dvkkB6BBtn5GCGp899oZQ2JQBzvLgL5NdPUoXWlPGmC3CDvQZwhM=
+            =lBUu
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ/8D4zeX6FRzNnHQNb3vMOJmQhk9Yvb8sBEDrb+AYVz/r0A
-            p6BIDG2+UFFNCHM/WITUE2rdlWGx6rsxd8VX03qH8h9h//RUmBAJw5oomuh7fIHu
-            EX7ukeaDifjUZZ3MrzjsYSzRQpGklz9iddnNJLcETaPw8syj2uLlnAEFyVpRiuJW
-            kpJzCEscUPhCbUlgcsMITVfTob1w3GhzrA59JdXNL4PdUbBQlmdJ5i7+HEweUq21
-            t70HVYPz1I3imL4sYhl8d4407JBfaoUHmFGRXQAsqSo4r01wscZ3R7OpPN9HLM+m
-            j4DYiCaKluGeO7mx/jqQhYzKthDjT3jvFhqgyaivq6hFiXtEFcYcOXmERqeJoKsU
-            RL4enjfxilp3bB2l8fJL3nlQRoWAmNoj/6cvpZ8s9P13WZz+gaPwcmSQwc66Qv5s
-            m8bUd7Sf2uDv+SxOCZgP+xwqsJqFx/SNdDnwKb7kQM+0NHaGPPV7dq9Y3M/VbGq8
-            NRh7QGkqsUuUhIXuBs+feIel86n8G7SfLgEFQzRuxKEZgNc38ve+jVJ0qdICZKiJ
-            By+aMjnrA4xMo5TpDx3y99ySrQVIf+QbMdHCOe7bv/bMrfKrqpFIZ+lVupxBWewI
-            mcSArD4ARTdY2kUtUgNPE2geTV19oNZILdYY6d339D6E/H3yPTGSrJcsfDXsaSTS
-            XgE1G3zRq6LCxKYX6CejgfgujjfhyKO61DOmwCzpiKttfHHbMvglj94koa4IFcgt
-            EVo4wx3HudbUW0zO4zUcZdNHmeR6No5D4/qMBIkz+Piig4mXrPH2uvl/Yzskas0=
-            =Rxc6
+            hQIMA8zMZ+ak7y/zAQ/+NnLn0TXLtAoIjK4kQvTXSzOV2jqQHqi66Pnd0WdRbVxt
+            5ca76p0+Fn+lmXTP06fEtihQDEO8oVjRLHWROEPJTbRfs0gfE+HcdxZuciwCkKMa
+            m0vGWvvOLTlDtzEklTNaA+TVhGay1SnYrAB2d9oe7nNI08pdtqQxzJPlg12+9we4
+            Ui1/wQu6DjqVHeQLPUSH7hLGJPQjvKZRozkkw2INEzRHbQQDROndpSWn5xYfKa6b
+            5Gb8izs9+SLiPpgyWPCfV3Hs+BUlU9kTOQIpDrpEpyTJ05A7TX8bMnipO2EXGTZV
+            V6i0JPQrmC5Y8SN7oQ6VkeXPJuKR/AUv73JjAH9EN31J70NRLcKBlDpnKreZU0AY
+            1i7kmCQ+/iyGtAM3MDd+LZ/1m05pilYSDLgoiPyQ8qrXPDKXmHt/A4X9yYU0zyke
+            BqXNLsb+CQ/KXUU1Xo3cezY9bHhQTTvv21Eq3ISsOUS2a8PrxgTRAI10tznIqjVy
+            p2tx6oYxtBgUlkKRpRuTdV8/C2jWZvYHCONg45WSbgSsnRk9j5HEg8ogcRUAws+p
+            Gf/JL7+HG9dEOzuFHJoOrsw/ACnMjJdzhzK800/WffWRmC5IlAbSx0KVlM6mjlg+
+            v9DruIjlGGzMtO3wFfTl/7WALkl3epRM9MjqHm0t6n1Ok3+QSSCmjtR/amXdC8HS
+            XgGJUfKY3eMztn/ZTj+N//HbK3fZRDzwPHl8/W7pet0MxUfnppfI6JufDnbUWGFZ
+            XoRVajSrpl7nmzIv3W6lCCSySmJ1cHMgAjlkcius6bFBdxPsnVFK7FdxBjFu6eM=
+            =fI02
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQgAicfpQbDrqFR9ALw2BU+XSADmfqZd1yk6Kytzju+vyPLo
-            nwtxVxz3GnhAM5CcZNxez5VfkJCfi9YxRSUW3RG1zxqo95cRyfPQsKa3PfCUZ81Y
-            mQM8N35aLAG5UlZgdP11PIl18tSr2na3rTeSeaCfKuTdKW9FiHkf4RX8q8jKFDXx
-            Nf3AsXVOIL+68J0l5J5jey6V99XaHsPU+wGVnSPKaPInWiRIDctCNwGJuZ3KQdnW
-            UkSNoabZ3vxfll7T9RY83aWuLEmFFLGUBy6IlNXO8iaAi5PRadCvz7YiprTBb8Go
-            9950lJC3Ob7d+BrpnPNe/3cZic/rF9Ywb86q2CZLKNJeAe1MxvLMQd042xL4IdP/
-            p6fGt6WeHthZQzyoEtoAuz4nf1N6Tq5vb6uiP1g83I/Np/mfRbnWuLtKuicf4xeo
-            IsJ/USj+qI0lqT9w72I1NcQgYHwXgl6TKgTVOISNIQ==
-            =KE5D
+            hQEMA45bZkLXmBFpAQf8DulsMa/q5ctF2EczBb6PcblQRlJWlEVTa9Tb+3JHaFtD
+            QHpYqQLMxT6YnqzXKpuBk+/1fXhbP77jbHurRRgpWLmdg0hJyVnTrGF17dvD9eKK
+            AleCdtPCQdEUK7mnwMBKH5SPtt3F+enRalo1teYTLHGLnCJufxCRdAMK0XJ+qzOc
+            vcBqGpx1rlGyUCSdU0j8tCPqcGPBBS8guWWdbXPkmwfJ8XCYK8XbihcR1q/0gKH9
+            fEXWcDi0ragQuIVrlFm3X03JjTnCLO9YGJXTXAfOF38uxRXbyxb5EOXdvwfcnNKW
+            lKwmacFU29SOEewbSWRE6oBSyp+ArVJ+jQLpm8UcAdJeAQ89uBLg8k+DBhSZHPb3
+            BqbHQP+pitIyPcalCORk/Bc5h0xtn5bkt3ztjoS8sJffchzTUE+omDG9FR6eeOjt
+            BHuwjPmkpUp0tnbmrWGIJsmle+iZNqBACoSEGoB0QQ==
+            =eqKT
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6AQ//W6sFfj8wcVJ8oE3I+p2aekB2qRdpoJnox8WpG4f+QHzr
-            eUyeeMmdL5AFLjHKlBi5JqVDBilkg0Qka2oUSRGMxjblg3qJ+IXUL9ouezGSm6Za
-            I4Dusdyawf1zsA/zb7Pmz6yVViN/3wxGuckBvAMsf5eCIJ9sxUAf3E7F1cX3W984
-            ts2MJ1SuhtGU67NpsGbcGyCEip/x5rgwbrSqyAfGw1U7oN1H9TM/e9deJiGx83kK
-            AoSMoJc6C3uEWWk630Bsb4xLs4vPBlYd6RJ4aQyYTNYXxMu8SlCvKbxRVO7uvYoS
-            GinDzXEi+MJeGOiYj5KTDV1FNKQAP56DXqq/AYlVfJJm0oVWOPmwxO/ALIH0uejK
-            zzmf5WaUHwgVdqC81k9OgWj3SDpI+EbCRN9bjULdYfGuqjK7fRIHxPoRnXFG80h3
-            7KkZwY5vJdbOG0Ec5hir+b7j1b29BwlrqiYAUl5m5SB6HCXKVkHTEb+7OG9E4KLC
-            sn2IqEjfTA/G+6Oqa9c9EUJvMZY/ul1A40DmT7NJmw7RFgCnbFm8MhvGOt1cfhPz
-            rfO5g9ciLTlKFQOlDIcHGkm8BppswJf7e4FdkZ4oz1R7qYiGlBBcR+WIW3ECPHEk
-            X/S0E78itbhz+XSTomPoS+TRn3iMMeMnj36i0duRnlGrcGFy5oWJZbyVY9ukXBjS
-            lgHfFgcpPpnpqZjYdB0oDQsrSqm3tqfzpMOj/A7Bi/cBJ2t582klLQzGRyJB/eIx
-            f+pmVZCweqbKXRqIcC416P2KQFGsbV8y0Ha7BtIBnpraSw3vgVlR+ShGexvpYoEX
-            Pyy76cfSCRL2rAD8aM2julzsrJSJtfFwgj/dCr6E81wd3VaG/+NLKNJ5pH4/SGGK
-            KaYz0yywqA==
-            =gbM4
+            hQIMAwMCBBrc/JA6AQ//RErmDgyp1AUyNpOhGTxA3JOk6+x6A7NgssLHlBj4ve+g
+            0F5bhQcUNLoD/Gq6P7FXlDxRBlW2Vn25XQO7YfeyblHnvzZrb8Z/CyWFVWv1igFt
+            5eRA/m3Yfjl6kBTii0qTP0heGZEgPKoVliM7HhinxoWCfQBNo51QW2F77kMkpzev
+            jdgbfOdhUlg8HUykxVkQADJ1W1n+yGvPwlxWnA2d6+uT7cVMCoUoiKHO9AxVMAJL
+            61VzXmg2vry9D27d1ixJYC2HoyPL9eu4yttDGJyNowLv1PnSPQOOn9PXdpuM+dPy
+            g8dHZvuWnCV8yG8i51s2HRBdeOpxHL3L0PjO1+FlL5edrHNxMjVT7kjYz4mi5dg8
+            xKwK/mQ4V54y5ojVELyO7zHJcRJ3SfGknHYEwsPK6lkKKfKNSirHle+dyiQm1dTc
+            DaRrTpKdn5uIxSI2s09egJ26B/msTNDXSwY5I+PFCMHD7DpNQL+t7aClYljzbLSM
+            l5NL7UPycPczsSuQkN5wn+CfIoPybhem5HXlGHqON6Cweu/yS2unjOHe4xnuU5q2
+            nVuCLPQH0lhXrNWCnTRc+xgyjEP9/JsTQoQqKHtQr/PzmP9DxcXNZaQaBOrdG20B
+            IKkcOmxG+Rzrz3kY+/TNgB/yS2O6QbE2oj5sK/gALYm0ti6pl/CVX5k5ySpRoTTS
+            lwHhHyrberId+J2HLucdWi3MMpmFZBJUeaIm322bVyMipCn1BdJFYE/3iaRyhBdP
+            sgYwJ0SQrKy/1MMtSL2w2f1AHtsMRV2k76noCipCfDb1UcPy431+7mkfqEtazPVD
+            CSKH+eGyRd0IR0+DLw0/080Z3IDxgKi7tys8DChGoB2Kjb5obthRB517JNiU0b1r
+            mmkDR0KMi50=
+            =FSiG
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//Yp4zdg3rQVPol+ZVCLObyibpJZhY05ggwyMdFnIiU9WL
-            PWBZR95suP+ls/E2Qi3Riw/U9+X1NeieWKPCmW269KQT/MtORTc5OoQt3CucfcJy
-            LQ3SOqnruP+GuA585mkxHhKRsqEBW6FsfcUbkaZBugb12jkB57MpPQhFlkgG9zZ/
-            mj2nF+l5CWesJM8CdwZwOq7/i5YEbjcLlFj4f4iaQfTdKjW/4IlWScPgWh5r1ONE
-            Lh24Ig+Le0+vswJUvjmwGH+fUHLqIM++aHPUdlSRw/ICAoLQoMYI8HRy4hi8KsIC
-            PCW9bV1ATQcv/7jL3UOd8t2Hm08MbMYLs52xOaDqUMBVfNeqy8ASkobcjnDGlQpf
-            fsz8RrjktcHFt8VgZn05QoshSyoRp+77KYFE3UGoFvNVL2niHVfbTGpyD2mR5Em8
-            jtv5xQciFCReIV8XvvZNkDUVErqkgN96HKxzoL7kFljFzg0EjJI/Zt5tDNVJloN+
-            lD9zsf4gfZVqOnFP23MlskFH9nIbaIP0DrOc3Bpmta7J7hum2mRuFl+3a+rbywiH
-            oijsEuGo7cFdk9lTuOudK2JPR6vxIW3/D62a6EAQV43b6qjStvdKFzQcFXc1ZI+E
-            0wgtHIfXAAQ7HZrBgYrZHAZBoChZky7wB8cRJ2O2n9ZrLAWfNbiqKPxjy6tIplrS
-            XgFL9Hr5Zvk99hF6mnhVj6rzEhhNcoXkifLgTxlj6tsTk/vbPB+qkMi96wdOOPEm
-            FkD3EUU33U79jRG+VDKiaesBrEC8q2+SR1EG5rOa2Iq5JkLS39xh5IEX87Lr6Ik=
-            =nB+Y
+            hQIMA9XEenRNYVGHAQ//db5dbX/liRHRXFhffpq98ToPbKkMh0TyFGPEZf0t6o88
+            sr/BlSiTSh2TFL8dB6D1nZ7ypg5zBh4vA1KQC3qoDssV3AhxcTqEMD5WWxVyc5KH
+            UaxqUd+LBNk7KacSSaroqb/WdnV62LOOeACkzvQgE42HN6XxxcNlzVscoduvy3n1
+            1AjFDgqUH8hQmu39W/veQKy2OY8yBpaeFjpA+9d3BNXtGkmLDpQUp659DQ0r37Pv
+            ypxws6i9EzKhxRCWzWQRZQDgXRjTUfwoLwF2E442kX4S5rOHVclis0J5O/TZcSiH
+            aWBkSsJ6ty226fYcndsdiYb4hB/CgUnKGgKlBCwvLlvHjLbT0R4dz/0dPktF0ZCQ
+            WkA4KrfeOHEWlJQY4wOBf4fZgvouPfYXYiv3ozaU97oZKPUx3xSnkybMgZAidz+D
+            ki46bt7IMwF6QGjuhCPIPk0JCpxrds1HE56wpHD5Tw4Ew+8m1P8om67LR6rMEyAh
+            ydDd/t9WJA3/MGSt3fqg5iwSvj3L6UsCQ9SqQMynp1+sELrIkbxljLaNqCiM5nJf
+            ZsTxYiN20YSULrvq7wqVG9Ieum8NDrLyxGQJIVLoWtBBXtrwzIoMURm1RIGECbym
+            B1gX0Z0pGohCZ2/sjNszqWUiZsuwOtdTVumSxhHXpcuQ1vwU6MpzUjAfWTUerB/S
+            XgHTKHufnpLusJZUoXM+W77ntECKNSFD4Owpy5V0lYEIZUa0tRREMwZ/LKvkS+fh
+            0Oqk96+CXy+1fAu6JR5Wx3CfT+unKyNNBtkhRRREbVN2a7Nz1FP9cnct63nVrCc=
+            =iki1
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf9FUEY/Fqj1taW/dwyUAUixMEwRK9rDvjneTLtwc2oGZgO
-            N3HHjQRC7vAPb6M0Oee7xzsDWqzb2GD+tvvaJWfnXJBAdHrR1QDI2lVSp8BkrAmC
-            FFAbFjofDs11nkqFuNRivtCK3mlHLFjAMSJ7U/NW/m/mRXbI3gsnrjdMyAN65yDp
-            UeRhXqS1RUcQZM8QAxJi2X8Oek+DlpIPTbpLHSBhxcNW3rCrCs8IgBmae3JcM8Vp
-            ztffxAebPGa+jWjZU0KFAtu5uT8tPIrO2oZsMY6s9l67uNiQBuH2Nor8JCJi+u4L
-            +XpF3nM0yJ6JLYsgdDPkLE60v5O3nyws/DsYnuzSnNJRAU6NR+TGNla9+0Fe2mER
-            bgq3TWS5SnsS3kpgmBcXNW57G8iGGLwLxTXcswjprKakO/BnLPPhR0/PPypppudw
-            K/rO7t97YspKaPLk+pWaG1Ec
-            =hNl2
+            wcBMA/Z87ylQaotQAQf+Nc9AIB+KUJTKR+juVrH8rvhsbsTWlY7g6VeFA4UJXMqL
+            giZFeSSisWQhCIYJLccscxHXPDWiKq/8V5HMH0WLePFtziSzOrdDaHe3enw6si+O
+            SQUaeNG+XgGwG4urTxaao2LvGqBTKJAlmyZPIr8lr9f0PHnXJoZoHZt3a5jzy6TG
+            FPNo0DVhOttrdpBMAC3DS9QKH/G09gz7Z480ksbcWA9UpRfqR8FGncomEdrns8QQ
+            tJZJTU8o5wDcYKkrpdCoasDUf7K8W3CsDDlKpJyITVKy+Y0h6svJss6sIrQDQo4O
+            VEJ0NTVMK7mG2bbfoo2BHlym+iIf3suzVibQxy7lPdJRAei+CzGQxtcp+xqVLfiK
+            zccvxWM/qaqv3B6rz4UeYk4EbM77e9RoqS6L12Ly4WoWc1Sp/jbWUcm/sBa0Cyz3
+            SfTtZYlflR3WhsG+Ay9bbnrm
+            =G3+s
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ//SrB/HOwki4cX9jPtxpsqiIggf5GGlwuUJd/IZP2Xp2kg
-            OuZPjf26xyxwBCiI9czQEa8N24X1BMWtxbabn95FhRnqIjQK05YUhvs8eKaoo3M8
-            cYK8+dOPM3fF9wS9Z013HZtWeRUuuE6X1HBKokTWgHEmZtSoOUlhK+b6gXo1s0D8
-            mRLTqwqq5sAF0QhITGGhRXPJuo0zWKJ5WJegtGqOsEjoA46HSPFRe4QuACPJZ38V
-            J9b25Ylm+DML/LKOqw+k8rb2IeAbc5z1KyEMi+2XrhXDYeMQJfjAlb5OaGFPAlUC
-            6HUDUtlmp/5sOrHdm9hB0C5XBM7q8y+WdX1GTEbCfYeUIfOEt4vuOfgBQINIZ4kY
-            3zyO/YRHdw/E/mhKNQl+qfQd4/W8sU+NGTfxo4kdJGwKT2HYorFzPBnTCMHlGQbx
-            5yI2Pgomx8h36OIdCxR4tJTQNLtTXbuhJs6pbfE+fo63cGgW67u1vu7RF/UQM4nT
-            BWRfCc/s68npJSYCtUsChZhUD1ZYM8cmgKexfFiohUQVflN1giwkMuSULSJRU0jO
-            I0HBCD06ITO4ww/JDBC24ZaNj51gK/Gil9/4tAlr9KwjaSo0m6NmsDKyKUkU/gHG
-            Nwt3Wt4u2zfWs5SZitYg5uHZQvef93NPOFVc1XZgeCXZJPgtXQ60I6avt4mnRe3S
-            UQETtJA6w7OOyYYgxrDCoHgXzJtLEnA3I82abwhJ3Dn2/Wu9o6VmAvGLVoLVnEs3
-            RtXegWEyAFFiRPsQEGgcbORwhfvbBBCHUWXNDzv+kEVX1w==
-            =pSK8
+            wcFMA9qJIVK2WMV7ARAAt8Tst/eNKNzsyZhGohFjLU2lWxPcsgr9ffFpdvxt9MXp
+            85BeydU7FwFF8YJU5BSERrUMHcshF727rqDqsoMOVnpl38B3CiEt+6UYZ/5uLRPh
+            5EH1e30y7uNEJX3qUF51EBG86Eu0bhBwF29BqiWnDioSlSMuz8pd0Rnwo6taFdqw
+            p5exlGcAPZuHVKwyZKFFGrrFuUaGBMRbV3PZVo7tEC/MP/0FUVkLKNIqiC3P7Iot
+            aSycNeR7kP/rA7R80UwTc/4snLQQGwNwQCJtnOnye1LnS3Hj2dwPomBkXiqtC+v1
+            2wnW20jnFlLD86GT7RSd7oYpoFeZGDGRraq52dko8IZx5zaL5ppKlNvZlBB3IUlR
+            bf+gQpiolwzuXneZmJe9nPhyi+02QN/SvoT9X4DSPOxd/eYJ5mnQ2UAZuKAkc+po
+            VlE8jCYji5xGdiyScaIdWV6xZ9F1pwatHkt4iJTiINRD/pvScWYRkKN+0m5v2WJU
+            BHxFUipvxXzA9pCfXkaFRaZ/spA0W54W1rSwQ51+UHXL2+5jUh2C94FbglMRpjZu
+            eP6uNVrhqpuB0J+f9lhs4yo1/iwQRpmynSN0LPkWateuqq1tmTvNUIq/8gTqtdR/
+            2YKcJeK76QwmnsWU+uM1+sWDON5nR296XgvB8gP4SsP7ka5b+W1t3t59gVOOtw/S
+            UQHNglXWDvsI8TuBQm5GV5qxCgtKZjtmZF1v+Vw5e7vAi+9BOSxNWZr2w0myUudm
+            0V1rV53tFT2sz1qvfjl7amRwmPABlIqgggSd1DFCj1gALA==
+            =wE4a
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:32:45Z"
+        - created_at: "2022-12-26T19:10:08Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJARAAhrDf9Ttie2gix2n5lanRSJC848rvPmrXLdxPO79fy8xm
-            W1wjnyNehlpJ7hPcV3V8IUffCI7GT3f1NqcIYbsZwFPUHiN6GOTcQptnPVFXjXeh
-            S3fPwlYBAX44N0PCA8h9ParFt3DvhsINB93jX+PH1gzGy7OhBjnVGn2dBFCQW9sf
-            H500jVyf72Vg4BBaLeF9t9m19uZJ9aJoTfs6Wo1NbHmeFZTkd7fKNklkQKMXb8GP
-            M0n9es6+p0xVr+LbvWCvCWqcKkv5AksKPCMvgWF5KGIqcRZJBsgl04MOeRmRRMTS
-            uUDdsXtC6RYHXCyPPvQoWXWrFD+BUxLHF7sY5RM3hIxhKIuubZd1ln7OcCawyhgc
-            mcwGOioZKK2xVEHgdwXbJ0KoLFRVrlQWETxoQIZqEVX1H9GhU87UKMh4FTYq41Xz
-            VqheTYzJqWk+CTMqEE5nelSgziO53albHyJUN9IiBDzFZ5aSzRwc+Vj3f1SAFJY6
-            8tzlDWlUKR62SLjvcLOwIj1Quqd4aGkdO6aZn27+NQbFisoF0TllOboVGWZgLfcp
-            jEv2jfRNXaxIVucV0oWrRVZcBDQfSO/MGYf52NYVr6/kK9sQyEDZ1/jp4HdvkgvP
-            g/66iXgh4pYhbggYn+fy0mNke4OdefN41uxcqZhJtZiTfcrz8rbAWhSS7B1av7XS
-            XgFZIXYNbbPmE6l70Uw7aNebwDh9cn9hg0MbUwhCk2ZXJwxhoXBLM0+u995BJNXd
-            00KzgwHLc7Au4aqn0ZwCi7JVtJW1buFCyBbvIs+oSVLni4dpKlNe6PeF3vSskSY=
-            =7Dgh
+            hQIMA/YLzOYaRIJJAQ/6AjsxNA/FtjHLNYbDn4DQRqgWI8TemprROaG3/j3ROwC8
+            LmxD89Hl7v6VRbC34AQ1MlbffKg1Aby214Bjojkv2z1jKQ3xFDMoVjDf+lb7C9C2
+            1/FP0zqWQfMPMnYMlUBQ27Du+ytrvrnYCPN9XSCAZl5MAh8hmCCPCfIq3L/0fBaq
+            2XvoFeaBntOfxVqcIn20Q9xu0UsYZbiddSUqCs9g9Unr3RUX2fEac7DTgduN9Lfm
+            FiY9vKcyjMOxhOv2a0WfSD2Kej7tphIn4ubBLEysrW3Vc+JR1KWT7Y+8Sih78NG0
+            O/ofAEukEz/AltBu2cG8HBnCR8m7jblSCvPa8xYJXuh5gDJVPTn2fj2bdDERT6u6
+            XGGnDWPltGj7IzljFl5Q/+x7pSgv/owHqdTZJIyoQ+Z79mLgViGLVih4uNJ6cPjr
+            nvN0+qS34ixR9V7V84b4uykL3fG2Q9W/fG//SuLFWd4cgVwldnk3UcOzofVv7uo9
+            IItXsl3V3Bn4hDb8AdUOiB/Uxz0fR/o5RcafbWCezLRQKoS+gUFfrmzlVK9GRXcV
+            lsnZvkBHzMdp0I8mN4ziKNudIZM4rmaZ4FNRx2zEsWwUsGktHschALMwACt69XEP
+            0WMAH5X/VWrM3kDpd8DLLWdgDHVn+T8m9sBpqJct2BscWsO9UPMhYDZmLGMKa+vS
+            XgFPjdA6g//PAEENCIjfEHtdQO6thdi7eEYrrDP8Pxr2POAx+czLgNsIfw39Y1e3
+            dDfShidA+NrKiLcQhYLFuDC95CcpGjP9fklZR9tX8eMIKvkUZVNAnRARTIUSeBE=
+            =fDwn
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:08Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAkl6N2K+sjkH9XmwKi5Jklttm9Ubfxg2SBNbsNZAdNcWn
+            +COsbabLe/sGOesQgwG23hSdQVlyO0PTdQkHOV7f2notqeJu/LRXM2s6og3Qi9BW
+            kH4lhS7bkO3iS1DnvnvOISp1eIiKfo6iYcushZQ4iyQwRRjf6w0MYH38h2+O73UL
+            +YZFf3SGQvkXAmbaFLOB4XNBAHPyTWV1D9ETOYiOsOXvTzTVPnddUXWLZe0NqTX6
+            ziwoJRf9YfUXIkeFX1ydXba6/TNaO4qn+zNl6Nj2/MMpqqwouH6KrrsX7xkxk5qF
+            nfjprWLVIOLDeuDuw1O8kqu+daHhQMzmNJ0lmy/wBbZdqhfECO1kkcJNAp/OZZWE
+            3rvwkAMiY8U30MztQwok5PnChM5grQTYmewc95RaJpb2hlwt4p2xSEt1W+/4wGwA
+            82I+WaBf6/QYg3tNLG4QGz4BGf+bihME1hlXJqGwNCiIKgSXHF1sj+U3omiOIKlx
+            UAZcX4UMAJyrP+a7/c7e3pghjTwFb7/v9KLXMmPIKWKU6tvJMyE9dlrI02ZpRAGD
+            /ukTrYfX/6p3TboLjybXT4+jV/FSV4CegBtVF7u6j1GikrmZPA29MdZPcwo2TSKy
+            mf8R11zXjmshkbUAGclq0GejSYpa2hTqwXJ//HCap05ywej9kFvC0V4GSvl2CYLS
+            UQEUrCVbCQAH0Ba7B734rHEBSZ/mVrGSapDcnyDKdpuhgJEt5jy13578qNrnyy9M
+            53xytK1DaXnCZvpq5laps3jZrLZQwwrePL2aQRRhpNOWiw==
+            =BCtv
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/prometheus/default.nix

@@ -43,6 +43,7 @@
       path_prefix = "/alertmanager";
     } {
       static_configs = [{
+        # alert2muc
         targets = [ "localhost:9022" ];
       }];
     }];
@@ -80,7 +81,14 @@
         } {
           targets = [ "localhost:${toString config.services.prometheus.exporters.collectd.port}" ];
         } {
-          targets = [ "relay.fedi.buzz" ];
+          targets = [
+            # caveman: caveman-hunter
+            "${zwNets.flpk.hosts4.caveman}:9101"
+            # caveman: caveman-gatherer
+            "fedi.buzz"
+            # buzzrelay: buzzrelay
+            "relay.fedi.buzz"
+          ];
         } ];
     }];
 
@@ -125,6 +133,12 @@
           auth_basic_user_file ${config.sops.secrets."nginx/httpAuth".path};
         '';
       };
+      locations."/alert2muc" = {
+        proxyPass = "http://localhost:9022";
+        extraConfig = ''
+          rewrite ^/alert2muc/(.*) /$1  break;
+        '';
+      };
     };
   };
 

hosts/prometheus/secrets.yaml

@@ -13,173 +13,195 @@ sops:
         - recipient: age13xhxqulvswuckmpkmy2fgeqd5jx0ar8e2hst33leljt69r6hsvnsrdw63k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZGJwdVkyejVHb1hLeU9Y
-            QVJ1bURJV2xwV3FaKzF6YXZHTHFyekR4TEJBCkZoUGxwU0trVXdLM3E5cmdPcmtu
-            bE5NNkRNNlBtclpsbXRNaVJtcnVpTW8KLS0tIFpzR1RlM2ZzYi9wSHRQWFZ6VUxs
-            Tml4ZENJd3Y0cmtTdnQ0ZCtTY256Sm8KRKvkk5WDaC8THCqgoKe2cD+AzdAqtfMH
-            GynKYyQU3rgXl4r8K4XUEkEX8g3+SLitfbo35E66531Q/+yQc79V8Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBndm5PckJZTXJ0Z01VRVRO
+            ampnenQrbk9qck9vSmxrSlB1SWZKNXlQdUZFCnBTZ1dGRE5XOUVkNDAvWURHMlFu
+            RkJGZ2lsczh5dGdkMWErUUl4TEJSV28KLS0tIGFuYjhiaktEcGZCK0F2bENnMVN4
+            UnUrdWtDRjRWY0tyRHFDRXZ1cHc1b2sKcpkBh4X/dLgY2vFJgacKYK79SOpdhV8b
+            gByehIyS5czyP1ulNSltpQCEnW7rN586PPtk9QKSLeHKCRIG4G6TRA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1M1F2N3FEY2xiRFZaVlJv
-            cXUyU1NZYXpKVmlDT2hGM2ltNmVHS0E3SFhVCkcwWmZuT2RZVzg3aC9zQXI3aDhk
-            cFp4RHN2b1RRcXRSNXFudmYrY3oydVEKLS0tIE1JUXdpVlFkQzZKNFBVaFFKTkxR
-            dkpOeVJIVnJtNDM5M0RQaWRudUcxOG8KZnHCLuyPFdx4j1WY6fk8nqMeACmpYZzU
-            EpNqjoBswCkUnaRMVcj5lrHvHDjdbQ0Ypn3s/YvI4UBsXMnnv9UD7w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzQVdMUWhraExUc0xWcysv
+            VlJPY1p2NG81czFyTk8yWEd5d2MrdTg2ZG1rCkdlck5vNUFncEVmRGpYcUNWN1o2
+            Vk9jQWlWTVBKWFhBZmsreDNRQnVtMGcKLS0tIGNUMWxZK2k0U09xTUR2eWRFVldh
+            VURvRkJmaUYzMHlmdDJnT2N0WjhmYUUKx9lhKZAxIOx/R4oVAz3DKhcb0sHR6i7t
+            XuXT538o2VgWUEnREbmIP7Tn/iPaqtpmtlRdIRjOc1LqZiRGTP8nlw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-12-16T23:40:12Z"
     mac: ENC[AES256_GCM,data:GXW0hMq84q5DrbV9YLNu5fvgAwFuBoq3cK7fD+FYHdnX1hq/6pTF2ksu7K7M9DE4yetXx7RKBWERm/1DShpV7Qe0jP/+kh31uwhCws6Ay0l14UDT52lL8uQ/jDHKv6ghG4/Q58u1Hvj/xZas34YmYxxJoyEzzCbMSfSgWh6GSMM=,iv:GuBCWI6s9yLhz3tEarZ1gbtXC+gUOVlbc43bezb9nbU=,tag:2bE8yOu87ooLdqjU5Ex1MQ==,type:str]
     pgp:
-        - created_at: "2022-11-27T00:27:03Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA6j84+xkv3y7AQ//bQe3Ci9UwmvIuNasPiFzRtI+872msVZWlthYHc0SkrU9
-            A8exnBo0uQbA6h5sA/so+CCt4wIxhMGikzapgTQZ1oP24fzvInES0aSuUsBDfys8
-            Mgp9lvRGCv5jaxhfF8gAeI46M0qvkIkbSInfaLjjFbQn9xFwPrejE4l8RQ8At4Di
-            NSWkvxNQlLH0qBVyXbFvToMhSYVZFsGoncHcNTOC4nEktnFNhptsjsvtA4u6aatv
-            QXSLrlDY5ng4hvjtDTvrzdS1UH5pE9gm9xgqdb95xiS24zwTUGbACP8sWVIUKPX/
-            E38/g6H1AmaVadK/t9F/fP5sTcBI2dMHxHXbndpOb2MxS2lJ/sA4rbFmaVHmblgR
-            J3w1g7JqPOANEneKJ4JWVDRWYwfgQ2IpB4EAetiDtN7KJTWyUgSrB0unNcmy+4cd
-            2H+/CM9ARDwnohPhypSIovjXeh8L1uHqniUXxlIUbXHoNugRybQZYMxZx3cLoH5a
-            WTTy+KJKLdRjeYxDyxVq00KCe9dXsxP/CTRpxZN+ejVAFvDqukzmI3yfSlgiX/M1
-            Ysaa9su1NiFU5h4xsY828Vw4TsNfeiUB/MkHlQQc0f09cd0Aq7Z7lnGs9oWJQOKX
-            bqI6Fjw3nY1QYkfivFZ3baXq4rbt7kTN5WoA+tPXntNVibp93A4X3jl53X5coPbS
-            UQGz3jOgf7Vm5LUQ0VAErMClgKhddv9u+g0XH/uunfRO1ULw4fLFxBmpq/18Tfdg
-            YgiTyJRW/qEqXGzbRl+k2oJz49rn6uJ+Fj6quwZHU67EwA==
-            =kTaA
+            hQIMA6j84+xkv3y7AQ//SEpxqrDyU9D/sWd8ZJ6nNTkfDp5HbkXXv2fX7YiW0QL1
+            2MeGTgbUfNp2Mrx/8wZBGnN5N4eB5lqwQQ3eQ9QWiHCG10KeBbGI/fS5Kbigp7JW
+            eIH4JqcgfmqXXilZb4GFoV2BxLJuT8CbgKS/QYEtn/XGZzYUPXKR0COXAtEAaKrf
+            rv6vbxteeSn+k4GJv8nqxsASb05iHXA6wZgHoxvU2tKBBetPba2aKOGZyUbIPRNX
+            bBvbWfrzPVEHwRIn7hhXXLggtA/yaHeIc9296MYeXYHuxb4c8ZjYBpCwVre8zBLD
+            kF6QXUj7plvASumXStPwPYvMiY/kLzadeoIIXjZVgDhkxhHnWv2ehbdf93+fjRUB
+            +3wfxv2gvCluWaTel/SBC3+cqcUz94R7+0hjCl6qVdjLMs55HlWVSZeJx2veTC78
+            J8sN/VRYLM+bgXGCUrT2fCdtP2jX1DUU3GJewPXFhEqOp7AzvNNNsGmZM94jqIIO
+            F09JpWhcWhFmahHOmVONkhQz+OtVgXpuZPfa4FXwRnFy4d4o2ik0bZy/WnXwHPO4
+            KXe2WFGru7+wuGeqrPYRMwYrFDeyGNlx1MT9y6h4Lzt/keD6cDvViJ5DQ+YGB9H5
+            upSgMIleVW9ApZeHbtgc/3rgWfU4F88iodL+mQRi5iVt7YXpz4EqJM25YbjD74vS
+            XgHeTB4qzD6XplzvJq85SkTIwBhi3gV1NQ60BjHYORsyj/HIRCJGB3WRY8gzPg6/
+            o7mv3eBFnWHi0XihgQOQlFmAJlYnRJF0rXrkJ9EDGGjhVJt/yUYqrMg5wDZKkkY=
+            =VePV
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-11-27T00:27:03Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA8zMZ+ak7y/zARAA3O9dCE+hACJ84wcEQ+eOF9xlZo96cUbcI/v75+PX9mBG
-            js0ST9ykF8YFtAkAjpuS/B3dwPQY8PdA1fYX83Ke/tw4UeikF3e5kJ2SadlhryGE
-            XpV0qRp79QCHPMauVGYiMK9gLtkgZFGYRcy3GEIz8EDvRpgYnSKJNrJXjDOJhW++
-            WyjwytvSE3WHogP+mhOMgRIn+uYuqirw5c6jIq33ZS3pPuaGe4IR3YysNL8vI+z5
-            6QFa/Vzrh+T2gE6/iGyZ+/Kc0N2Rbg8YwEec5nFGKMAyRsK4nO6e2h+nAjoCR2Hn
-            3NZ4elSTJB+/yRCxcs+TECynPkFpjER49c0sHSvyaCvkoQmRc4kZChukbPEG4SDi
-            qMQnmYNfto5TgkM/2SDpzK+UFq3iYVt+lTySW2sdtn2Kv/oDy/iFfsqFuIix1Egu
-            rlwfSusdLFzvkzD0Lc8ynEevJAA2q7ZnVxSpY7EUgR+9RLfRn3m5KwHzvl20Ylvk
-            O3GU3tJSERY794WmCNiGlmz4q6G84WQTGFo/7e/fxGQJ1gz4btQdxnHMZFJywHzh
-            klO3ZxgFPWfKiBzI47ta/xHxUhcYwjVud3IG8rc/g8LSt4ZJ4aEBIRvrQk6m5v5h
-            32AtP2c3bLz0uSyQWZ4z5OarAxKoReb+7aYPU7BZpoqciElQkyza/hAdC6iEf17S
-            UQFWWEbUvBNW3hWYNhv1sVcIownmObMP5jbwJ/1UuGVBK4MfCCpLcoJgIeVH0m5h
-            LHdHmgwkKO5Rpn7iO8EDn69lBYM2mhbCDeigCaAubLAnsQ==
-            =XHIF
+            hQIMA8zMZ+ak7y/zAQ/+Ng0GGLDSTp9yc+vaaMqdbhF9HCifJ5kLq5elP1aQpkhM
+            6DFTu8pQ8kdKOrmJVJfIe/C77SSOfXGdU9rCmmB84IDaV70fU0t3w4XV3CEe82Ms
+            2enJzvetWC9XDcWbJyTvK5PChoopxMlq0TgfLmHkkQSymRrJq+YlyEQu/MQqOUSR
+            TlFuIsekZFDza7iT85fE0YBl3r2BHmeOidevIJtEncQ22rII+blx2KJAKXetOExZ
+            jJqbrBV7QcIpnuQZ4rcMz2bAKcrmBjPJnYs0I1BNjmBztN8ldr0ZR+h0wgfbGWO1
+            xiKCv3Tax0nl3H9nb5ue5dnMDAkOXBWdhL7v1n3idAU1j50BSrCDKyzFbs5X8imc
+            TGgCwNUSEQYwC1kcY5dJLmEyLEJL8+sfUkowpq5WU8lmyjGpYjZfo8Cy4+c/xik4
+            ZI2TR5XyqPB2Dzk0Cegg+CKMv1DgQSN4ObD3ASRoAaKmd+KeLMXIul1ujf0KNbm2
+            yAYh0pO1Why99a/PEwtcoo5JokiD1Tv89nNO4L4XfaOrVF5NtFk1xr2X+oU72TfJ
+            UjA7fecrhBRGX2wus+Jgb38F0aLEUf4yBgR97AxLIZ3Y9uT6m8m+i91dEr8862rn
+            cvsqW/REnaD9ZQc5IbSG/Fie/qoRxaEOeiM+R0Wu6QyuwDlAfSI8nvFmX7pWlELS
+            XgErGsnl8HmS3PJ5egGtvD0u+zfbPf7NuSGTCjVPM3SBE2U19RPKRfqxP1z7deIo
+            y8f6AzqwSvErMaa0BUai567lBj0Voy3gTztizcuWhIrZ2HcP6BYeOe+p3ubjDB0=
+            =ABAP
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-11-27T00:27:03Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA45bZkLXmBFpAQgAtwj46Mv1ih23i4RUjW+WwqTrt+2d65JK4Kjm5oPvpGyO
-            hoYLuEV2V9dI1WoJgmp0+pUS/f8LxJdo1OxeZP82ctrOFPxcb1wLfoG+Vg94GPHx
-            wMtY9jNn0W3FX66a32AK0GNorSLl1miT7NRBimD2KAvoPSqKEGc1av4xDm9ue1fc
-            tdcFf8MJjAvaNtAfCvnQ4NqM+lJwPjNmH6CtAQlHHJMgHFuNXZvY8lYbGOw7JpKt
-            opGQD11FjMa5EUyxZfTk8vrPuhgTGknbj/hJOaRLJtTRjnjPfFkLULS9lwaJ0RxN
-            UVI0v6FfrBcC/rfRJC7Uda0UvDSaaUNAiYlSlQZ4c9JRAVKh3yUxGC4rEDP+ecGO
-            8VPvF+H5c3xJ6Qe+81Q1B+vm6rq8WoguilPlQLD3fc8C3vqqNTWpA0b0vVUXm/oq
-            /yeF6f4+jLkZ16LNzIpQ9uyq
-            =qkB4
+            hQEMA45bZkLXmBFpAQgAqQx6IHzt1rHGtZsP5yMUDEKhy75S2F8nr8f0wzugDrqo
+            sDT29FI2hZ3YGjRBgIV4kDIWRYxn7BRxZC7Uc/iiYRC2u9Omcsa29+/YCCJN8a3V
+            jo0SW0RiVxdw4E+JYPO/OoGQUikKHhO6pRwZrJ6HrzpMAIulLfwPw3SphiioEY/M
+            dNs0YF2V7/5p2a8rD0AkMSmY5WKY/XstUIBlFrswWnvWcxVSmDJO4IW3g854Xx8v
+            ONApfEw/L+XlYCiB+K++t4dUWojT4g9bOaEWSKf5qqqNP6FRmCcuJosr1D/mklRn
+            iXoPfCbu+oScOPkMcwhitaN4p25kj6oms/UV5Dwl2tJeAULfR5aKieaebjG1Mdan
+            DLzgNovclYykF1MAz8fOJVXWsPRDwjaKMLdKpfMNyjFTAjz4DYh6oSFtRysUO1IK
+            m+EY9AOFoqavUuWEkQun1ayrryC02QEcp0Rp1wVf2w==
+            =CUAN
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-11-27T00:27:03Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMAwMCBBrc/JA6AQ/9G/+euKdVS9Jiqs9yRyqAujcPwPlYr85zAk+Rjzjo1tux
-            N07qtz6z7HRHgHhP4lGRw7PkvUkxdFB19nnF41jn4ohoXGJrSkHlKEXGcrCJP+Lm
-            8bIKAkTqXvN3qqJH6Rbd76T3wpLAQuq9pm4fsxXl1qHU2PMxehbhVZnwHtPT5mD9
-            YkJV0ZVW91tDeJT5Od93vPyD+z+vccS0kBTWVwlSG7I0fMwQsbQwkVtqrJWM2Foa
-            UPYHDgZEKIMEvpYwy33l9NHjrsLf/kul/xNtKxFCzcjOkw9k/pJdc6CVzX2rVhtp
-            shUOMdzFh/DYqdtwm1h7VVS8xGSdlcFb7nxgYGZuIY8QsWuRB/+j/p5vDmlE46P9
-            SvsuwFJnNc7bE8EHuU1GJGJdQUpyVv+nPGam7L3zLoLRggB8OBS07e/z+ORLogB8
-            I7AF6Pcx9g0AwZeeEczhBYQvFcGjuHGb6uJNMYLylxoNm8u197Fyu7On3l7/IJqX
-            q0w4ickZlkPySbx1OeqIEektiw69HwYhr3/E9B6O+0YL8JRJ5qVtDSw5cudhgIlB
-            b5AfMqt1l+KvjByalhCK6msfuOUDnMhbdjLvSOr8iDUXQ/ZGPtiPaJDJ2Htx32yh
-            zmhWfI7Ws0l/z8Ai939k5ssESccOAfsV4WaKcCcbAke581n+jYEwcTp4KQKzoLLS
-            UQE1vWLijpOjby3So2IMu9gBF0ZmN9EkCt12IP1oa3mMU2yZ5wV/VW1BLSezuVvE
-            v7/FuFnC3jvvYxLV9VUYKQ492PS8oLAwirxrL5a45IyrMA==
-            =of/K
+            hQIMAwMCBBrc/JA6AQ//S0tQtp2buot8X5BtJKMh4f1skhcpufQaBWbgcG5AzPEY
+            ny8mjoCS0aryZcQpl80OBuDm9DvT2GXfw0dMuliLCIdiViHELxW11A8JDDFDxMVH
+            JA+O4jxp/blZLBWik0Je9I62hAlYvW1FT6ZtnM/dHdjMYZ2bmM3T6xC+KTjcLpWn
+            rnx5/+hzEV3STBu5WQzOmwbqp5/A/zg//bHrATOY9PE3iVvtY115r+AsyeTPpJn3
+            4mH72/g9pr+2jKe7SyIFeNy90qVlqTj/7qi4mRA6h8PTekhAr1pK/klHI1AXoAAD
+            pe34J/URqgRgLAatjywczjztgh87LSgjtwhIZd4w2KQYJKVxeaTzkmUGQ17B8oq4
+            D9rmPmcaB2s2iAIn/izrlRtodvZro+POEaRMa7Buz8si0eGM0Ra72jzw/UKA8Hpi
+            0ach8AzFimBVDSQjxDHkTeLVv/m/ShuN4siqnbAvwgSvhmZpt9z2iTZ/Gi8MPjyx
+            5tTT6R1MwIuO1Ainmlf97ktCqnutDVZa3XJSJNmmH7Inv4wHyjUMgpeJt7tdf2PD
+            54OCcAVXI0cBD8nCdyG78l2JnspacLyV5jtMkie5B0PTSB3SFc0ClzzGXwwS1RrA
+            T6foETEDowcth7cYB0UqFflQESwPbSm5OXiaPegAA/Kf18vs53O6N/zNM6aGU/vS
+            kwFjZQfLwLAx1qz1TvjBjtr8juuiWugSibUHF6JpfbJjNHc5fj6l4THt9tBB+XZn
+            fywNU+8TMRoBjMKQ8qK1ODjkN2sd1S60tF+uPsAAU2tSTs/WXWyI89hIV0ck6b4V
+            skGpOLoSA0eCv0FG+h0h/YkfFY1HHnnbDpEvp10WC1CHgNWcVFgnHYKenhLEj+ja
+            RovjoA==
+            =QuvN
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-11-27T00:27:03Z"
-          enc: |-
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9XEenRNYVGHARAAir30MBOtYtXP3K0hN++LgCtLefPi6455kns0KWkPI8Jd
-            tIrn7h7/O4Znd4QO8Iz1ouyubeEvLbLjS4wMc4NIUNVoDWpmlWveHDgp9ddLDLUG
-            MYBsswVVx2SwCzsIQHADpAa0m2MSfmhTxwBP+lieFg5T3LQi0Jo30DFrDtdIKLbN
-            GPeHuDFdQ8zB2dyPXvSgsOxW9ZNDXAObwewsuEAWhQtkNvtIH62fH+wopjtEdZAX
-            pbHwcAZCOVciWhbKo3zKme1Jq6XQE8Of+w0mBoMeeVr+f54s+1DRE6vy2hH5QDBK
-            1oWRtWpoFrTKGO/KwN5QsehgP6FqZVaWiAMubAR17k2WGzlTQvIWoCxlpv+Mu7eN
-            tsqbLyEmMvmc1NoN06N2CP31KP1Z9bwpxPmiz9Ph8ZfzL9Qw68zJx+dFjrAJIEuo
-            T1KOuWkfPg6llE5Hs+1WqR4Kj0+uH7irNjRGCv6ruWVoYQXP/7dpnwcHBX/Is5IN
-            2gR4Btn4t+nBNCfVcvOq0CUdFGrOr/O0sUDX7Ob0Gqu7fY3nrZpTwGQ5okPFSpJE
-            1/OkWIUgAEHO1Y3X61nc2Iu5eI+jYmSaF12xjiHdKGwmkLfryt4taQBmxPJSN7ym
-            0uiXf0d8SRuqHbz8keBCjp85RV/y1XGX08yltgPXpU2fmv1k5dKErBtNeAIudD/S
-            UQERFu1HIYfCPzAxwI3Z+WbTFo+euO0dZ1Uaw8CVMGcaMTufNQg7H99d+td2pM+D
-            /W8QfZAIGSYDjYWn6YffgRvDwsNZeMpGRo57XNvwZiIu7g==
-            =xRwC
+            hQIMA9XEenRNYVGHARAAxayhrnpJ8EhoLDyHRXfwysQg2c0vtdNz9WxJLjs/dC8Y
+            2VPFKjJmNUS1ICcYTbdWwBPtj9tOCtpsEilTdGf49o7aO1jolTEOP/euuR4dxg5o
+            9SFKQ2fMgF0QEYh0z4TxbYDu1WaWt61Yt60oc50wVTtjH3qfDcSbSLIdjduW/rs1
+            g+FnpKV6XHjjEONgxNtuUrK4JgHYwtFb0cYYQe9aECllA1Ls2/KnMNZP5KvI7FAr
+            g3WSiOKaxsmfuepxOEfbqABBEnPD4JeN2/ScF9wU0Hk/bJbq10JpyvoeQE+tmyQY
+            3TC3zjRXZtmMQNXpgXin0+tSEAvFbRZWHkiZiW1PFt40gvF1qz29jH+tQ1lbuRe7
+            2Pu/POCO2Vw9V4Ef0IKWISHC7Ym1CQpUkVXRZEVyGBqZHopJ5wCRsj9ZeO21enoY
+            yG6rsk97EJe9N+t1zE7DHKEz6t3AeEgCIEDxMPtiiZGtxXweP0fRGQF+XaCKa3ve
+            NQP8J4TRAI83pHf6JbfRHLM8xcm9jSqsWPs96jGxprNNcNeW1w82Obji/uZiqivI
+            9DXKrsURVy5DakvGuoz7idF8lJF1Z+GIUaGFLCfDdPdJ0QU54dqb3HBsp5S9d4AQ
+            nLHzy1IIoVLeQHg+PyslCs2h3O6+a9WUt06KuKMPf6xHgYa9xptq5Ou42jyqslPS
+            XgH651wbS53OpIKJe+nEiQjYm7Cd/WTlB8vmFI77UhRYZava9vA0A36DuI65ALaB
+            AjlNTKbGTmOXALcLGzx6gJZPGVkdjbKuh+daxcpm08N0mAKndtxlG3uv5A//gSk=
+            =qZEz
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-11-27T00:27:03Z"
+        - created_at: "2022-12-26T19:10:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/ceQh3zHJqWDRP2Q1l5rz69DfEweCJkuCxewVICRKYVie
-            p4LzKUjnZp+8KB3LjHzSEuQXc0eqNXNmGu908uwbwG9Z+xiFj+CIe7KMZWW42gY+
-            I1/nOA0WRzOYevO3vlZSzfZgsN5tfFkQkrU4hMf6YFhuM1m3HOrz5P9pc7uJGETh
-            wHX7k0BSrUjmg8RYcJ+WIc2SPUqv/g0zceLSTE0Btpxg3XmrcHnvs/ThQ6afxHYN
-            K0QEAgIqWwzNU+1+1QkB+yFeAflY10Zbhv0K+WdTn7JzlJZrxyvY32x7lTfCH5c1
-            ycZy/AvGfk5ohkLtSx9f1DxpRCUlOS5TvP7I5X47p9JRAZAaCM9HCG4uMKZwkmEF
-            /Yf7fTJHnIPPY7neR+2qUUg/Y3Th1mNbijBtV0A8XLFpNtWpn8Qzylmak2amYIql
-            l6cwBxhl5N3vg7LGxUQQJfEO
-            =dfLg
+            wcBMA/Z87ylQaotQAQf/ZXrDQlIacm7xlTQK5BiBQpKnea6jSYa6Ejf1hSrzhw9v
+            B8fwOrxfLy5csVzLUsrPBHZuIqHZ0yicPnjoptS1X98yh4lD5PBXWWCKNR2i52SP
+            f3dad8bay77BRw89YkqJ/d6t3PxvHqzoeP3R7PV2s2CoZeBkg2VZBdiDXAQHwTY+
+            UJOR8VZ+onnkA4HmgvKA1f3Cim0zQ6T53jFtr5p1DvovuazXG9e51f7C9qBz4glY
+            jhIQot3iLHEDFSX5FaqFvfOx619MKiMKcDGmqy3qUh6zXEq4q8RHQP7ixLLQljlY
+            ixicxrUCRbWe0BhDSUbRq+GOI7nSLgHEuUXOMWe9atJRAacRVQwsba3zJxmGB1L/
+            svdZLTmRSFhdCPvnHMCPic0XnKjIg8Z0aIkdH2StheUXGnnYifH3KQLZQwCpnzpq
+            1QD7brR9dHXgE2w5OaosDqsx
+            =9nhy
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-11-27T00:27:03Z"
+        - created_at: "2022-12-26T19:10:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+JXfpbLEUdY8fSAmKo/MyaZi9K9cHDs7c4CnEU3Mi8enh
-            9j1/0KTzs99zb6gZKQ/z4MMCiNQ70jK5XcTOgrKtUKeZ0sH969TDamsxxD1Ocfxh
-            Ts+MGTE9C+odIBFvQDOAazkWbPGQ8EheCDauFk8FFZDBj8oK3Vw7hKUxYFMBTM/z
-            UBLAHkbO6Sv38AHmqsHwzsP0+YZgA9pployt28arYXlwX+I7tYAK1V74SkxIWSD1
-            4YHSJvHpos25/MS/PNR4SEQFSceQGfDuFCdwfkC6bKi7tdp3Af34q4v6OqA/iFnx
-            hErcjrXPmlHm/YR2gd7AcLPb7WolB8/j/txl1TAxkSwCRodqcQH8L3bYoA9XxkHP
-            7Yd5gfvivkQy0sjKF3dwpetu4bOdZUEwj+jY/54iHPECKTLK7TFGJ48A3v51Juw3
-            4uU4pPVCTkQnRnkknbhicvs2IzvgS/OfAJTUBKW8+3yPkWenQQfeje0VHSUfT9hO
-            KQ3zafhwGShqXPxbM0J9beigvL3iDE3U7YZYOfrryuHCveSkXobwQZY0Ylok52BX
-            9t12lOldOKBLy127V0sQeZ4eWRiKjoyHC46DFByWN03dn6yRXrcE/8QGOyUgu2PR
-            3SOEm1pnujVa5dhq0MVAxwgHH/+avI+HM0VHRsykYVVOR5O9ywpCAurgB0/wKJrS
-            UQEUAPEm/YDfg7no9GnD/tXCwIgjO1m+H8+Z8e3Mama4hPZV9fuSc4M8GQGhWqFY
-            jYvNgfR7UG/RsqAxoEA1hCoh0Jfu6uLX5/P9X0DQdM8WHA==
-            =KHuT
+            wcFMA9qJIVK2WMV7ARAAiUik+bUh9HttiJDb8nLl6VjNG525DkVF0p5K2BAFMQQV
+            vDQSgvNliTNpH9LMhCZrY1qBEmIsJR8DEgIpXGVUS7vc1GD6IDmyIxWO+xlg+Pnx
+            ZMJjLekuY45VSuNxNBdXweoAhmHrmHFIjGPoBpSJ3CJIp3SWuOZFwGxZH3mREEJl
+            zDPvbluJS04ooMzZWfijzwe9cEtYLfIKW6TpH6YkR73OV66nnz8tp/cEi9QLJRZg
+            0L3VFdxboA1W7ewucdrETu7P7LECrGI/sL23R0vCIbyEWJzWfltC382LZxnhdsLo
+            /GCkSa0HpsEJjSYRUsSWRpZvQf4Exg0fII+X5Pnk40Sc/XiDtBLJAEU5m8JYzGeM
+            Jq8fg8u2lWhng1j/nCvdtuxkBwoBorJoKXn9Pg/UOvlZ4W73sBAPDL5Xs0mBCYw5
+            ctg5BrcXDuilAeYDAbAhJVMmidCM3sWlCvokhDREYqdzCu6aPhPidZ8USwBuFKTH
+            TOQHWXKBkqtIkzxJ9FmLQ2Wqxgz3JTfE3REge2lbK0VkajRiTCNghw2NHWv8a+Ex
+            h7aybCzAvVYd3J/RdZSi/PHrgJWaVDQsl0eEZWEIRPVHgPqgVpQRx5FdGwrOOFz0
+            4n+gY2ga3tmZgE+HdrwK0o345ANId73ZoUavrIiitEahAwZHEiL2+qOxztyZljXS
+            UQGBWgbJBri4E1xBDvNIsXvutz2OU/caEbu6yuuA+1EtoglzOtrvVQ5GNglLAjJR
+            dADMXsR1AfDPTPGYVPHXCVAnnNAcSRUVCX7VhFtSZMJaeQ==
+            =Opqq
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-11-27T00:27:03Z"
+        - created_at: "2022-12-26T19:10:09Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAoPaDBDivM23sT6f0JuxIEP16rS6K0ST7FBGoNDkLjMe4
+            pO87z936+w1wtPvWLnrbq/SxCN2KprcSjYoUcGbd7TmlwztWQrU1CCn0zUXozFRv
+            9eYSyXLGAWhOt/6KavWx7QtYkVupPidt7/2DuM7ZeJ8e4XNDQdUl4HuFihD06aIP
+            0+sMGdpHmisrkHcZY7bTYGAtoAr6AYTNL3kavFo1oa18fjIDQFGNqYf+QZL3qWsw
+            hWSelhqAzbZ8O435+MLJ1zklKKBrerrYlgtoFyPK/fGEOiSAMmd+33xlEcKnk8Iu
+            6WjqTV4DMsNfWa8CaqyJJe580PTP3wkTJiJhR0dYfqGnghk9i5QjOk0yYjlmtNLx
+            twYfXwtal9WLsYlCaGpxKdeP/IpsQ9kTrgTu99d8ekXWpFEItoWKrWEV9iYHYr4Q
+            BFbAo2OGgrGjKDrIBxlGwpa5wMfAkaU4hs26BFIhAfGvFtIySs/91k8lrYwLgfXD
+            ojI3GZMb6Om295CpBXrgm9V13HD+jfN5FT43W7mTC3cMk0jp8gQmkv4WwqcbBYk5
+            /xo3K2xpmGs7/uI+mKVXQed7MbXecXxg8nj422sL8A+Vb/SxatlUL/tuQ6Ped4GA
+            AxoO0lW05eGJT3iLgo0txXFZzXf2qXu+Vd3FGiAeGUtfsYbnQI9Df5mZ068XPYnS
+            XgHlhiAQSm7KSDI6CoDmGbMVOMjsR9yBfqQarz7A0UynjQ4vM9n4097KdVNkEwdO
+            uz6rjoEI6wlV8HY3O7QQL/1aNwKCFO403NnxfiWcazln7oP7buz0Nn2FwruK0eo=
+            =+JID
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA/YLzOYaRIJJARAAs33yYShXtNdy9N+7D0fs5EU7gWYmJfL/lETxkcmQjQg9
-            baX2Zqc2z96jg9TcqFuwbvV6xb/JrSGOs/Qusq1lGPhGaSNHo1KWY8EyDM/6v04x
-            bE9poMb3D0HzIpm+fpDkKZyU15f3Mye5rauQm8a6qgHfd0Aus1HNs9R7RjBeU6pc
-            esEOFOAvbKhg5FcY+E7BVa6nHAHACaK0jiTKNEWU3qfTAqYqarGXhALhujywHMxh
-            YBtu1EQBGimAT6orZCaBMaLbH4LL6ozFk50jHQSgDxti/J4GHDtN4GVzIzySwfkS
-            1S/8PYiM7UglxmdezxopOijzQD36DU0Sh6m44KWIWFPeN2P/Zkau16sfDQ49/K1w
-            sEoZK9RZlFXI+O0PsPHmUkewvUhHMbLF8oa4By8jS0I6rcR+zNPlXQ3Y44v5bEtk
-            y+9CaeJWg0mPf+rtqa5cwkbJhNgpMJM2k6sl5reczVzruYRkMcMO9QlIUF1Apxxa
-            Z6hkFS7TlY7GQ0mpeg7DgKzCOHzHxVPRetit5uH25zxluHzwxYF16G6K2fF+V71v
-            ERlryh/cJDuwAl64aXgIw1DBWMOwixJjO+qfyEUrb4taOXyv5wJ0p+ew6F6AeWue
-            RC1aHcfXN3QJsqXCRRqdI8ceu/Tfo5xTOOAqbNlDzM/kcEXj4rE8WS1cKNknLZHS
-            UQH9XIbJ70Nc5gWR35V7z2Lqos2TRp4WaeTbmr7z902wMDAl2GrjRoyo8EA7k2gG
-            13XKgeObbkdmE7dTwOZbhzrBDFn2pcyI1NsC85iX154pKQ==
-            =wWjU
+            wcFMA7zUOKwzpAE7AQ//XZxqEwMPXVsDuItZzKmBLZHwvfLzEql4iEC+1lZoAhm/
+            T4/lY0k517yHVPW+yWKGX21v2JL0iIb/FcexfakVUEMGKqbjjDZ8FqjrrGq3K7Ek
+            yoLoNy44mtClf3AsmKxhWtQXO0HjfGP5eQGn+rGDGiWzHT5DTpb5ln0qpfjbVioV
+            nYZlGf0csaKAZTUhYEowOGfcOSkBb75tvY31uDqgnodz3dNhH8s+WNG6NeiuLPeD
+            r68NnTcgjO0wvWGWZVWPM9u2NJ5Dp8Hs1om8fZZqa6vDfJKJ0WZfyhWeo894W9xv
+            7nOi/XF2HcVwVZ2hgEBmhYs9xdkgdZqVCXiSUb0ctyVyN6313Db3ozHLKwrVPzf8
+            eyJBp+x3yK4ecKoPA+tSx4PLxA/C/W+sRLkK2gGdliotPOShE3reNBqbbYVctag5
+            8kefDCu5pJQOCa1NQ61+9kavkRjfsPPqHbBdlI3SKiXz6h8jC61H0lJprcUiXH8l
+            GZCo7FK+OSngz6bAFGAp1s6Z7UDTZL99u0umEtf72Y4fjhoJqhYiET3FOgYIzIOm
+            Aiua3rFSW9Vv130F+EbA1j4uyfBze36cB/tIlICJeaaYWvEgF/sEDv/UruAljy21
+            yciFcsQrVOPis+xaMwkTOpJQA/GzZQJLBT0PO4dniWaVZHcmVOgpxTkrhuGY7SrS
+            UQG28aJNk6A9lFBNdpPkv+LPtRqVEt3RV88Ju6sGHMR1aiHxxPoMY6UHLQwXUJhB
+            5z6bT+Kn8eGpYeeczGViGv9fXwjPMCxtmv6a71SyQceG9Q==
+            =OWr/
             -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.3

hosts/pulsebert/default.nix

@@ -14,7 +14,6 @@
 
   boot = {
     growPartition = true;
-    # kernelPackages = pkgs.linuxKernel.packages.linux_5_15;
     kernelParams = [ "console=tty0" ];
     loader.grub.enable = false;
     loader.efi.canTouchEfiVariables = true;
@@ -24,11 +23,7 @@
 
   hardware = {
     bluetooth.enable = true;
-    deviceTree = {
-      enable = true;
-      kernelPackage = config.boot.kernelPackages.kernel;
-    };
-    enableRedistributableFirmware = true;
+    deviceTree.enable = true;
   };
 
   nix = {
@@ -73,8 +68,6 @@
     pulseaudio # required for pactl
   ];
 
-  programs.tmux.enable = true;
-
   # https://github.com/dump-dvb/nix-config/blob/310ceedca5ab2d5c22070bd73c603926b6100a74/hardware/configuration-rpi-3b.nix#L16
   sdImage = lib.mkForce {
     populateFirmwareCommands = let

hosts/radiobert/default.nix

@@ -71,10 +71,7 @@
 
   swapDevices = [ ];
 
-  hardware = {
-    deviceTree.enable = false;
-    enableRedistributableFirmware = true;
-  };
+  hardware.deviceTree.enable = false;
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
 
@@ -109,12 +106,8 @@
   environment.systemPackages = with pkgs; [
     libraspberrypi
     raspberrypi-eeprom
-    vim
-    wget
   ];
 
-  programs.tmux.enable = true;
-
   services = {
     # Do not log to flash:
     journald.extraConfig = ''

hosts/radiobert/secrets.yaml

@@ -9,175 +9,195 @@ sops:
         - recipient: age1lga6hjmxa95fmtdn3frlmy64ej3hyswxrcuz25qvw0kfsxkqeugs8gjw8q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBldy9SeGs5bm9Cc3F0akpK
-            ZXZ6RXdCV2VTbzVuOENjVXJ2UEMvY2Rwc1Z3CnIxUWVZWmt3bVI0NXg4SDRzSjBZ
-            d1BDbGNVL1EyeGhMMVE4OUJuT2hxYUEKLS0tIGJSTHVja2FCbWZoVEQ3bE9UNE5S
-            NHhUTUZZbzYvMDBBejFMTUd2NHBBM3cKLwzTau1WSdsPFcFq+a9Mvy3AESVmMog/
-            kXbHV12ADhs2qk6eJuSf2QCqiozYFhPD0BYZdtE+II3FYVQD9WaqlQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOHRWdDNsbkRaZVBLM0xo
+            Qjg5ejhsdmluVnFXbVMycjMwdTUxRVlVR2pjCjBtTWJlTzZVK2xHWVBYV0xCdWJG
+            OG5sWXkxenMvNEVCN25UQjZPZE1CZjQKLS0tIGNpNWlJOG04MjZrNHdob25sOS9Z
+            TERtUUxNRGRNNFVWdXlCdExMNVplbzgKVM1yYfZlJTyeDbFt5qKYgLK+Zaq9Nw3V
+            NmpDAm9J7WOUdTP7+Z2HFT6bOa0OKKDaIbpbpjyBiQGzrialHd4EUw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByaktLZmFsMVB4NFl3MWRC
-            TThHZUpkUTBFOGlRYlhjSDV0ZXZKenNrNldrCnFlc2xXam5SOEJJWW5xcmc4b01M
-            eHhUa1F1WjJEQUtRcCtmSWJaaFE4Q28KLS0tIHNzdVdYOUdOenROZWlPOW0vc2V0
-            Y2VURjRyYmpVN0tYWDBGdDNUUDE1SjgKw8TBn8xIYBYkkXc2zKUSYgSydH9wk1rl
-            gYcjnz8Dif08aIcunosselqFimFqvCN6HBck8ee//9EiTD02a3qf+w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTHBheEQ2VkxETjBmQ3Vn
+            b1hzZzZxY0dJRjZveDI1Mzl5Vncwdzd6YW1rCkwxR1ZYbGtyU3NTK1U5d2JacXds
+            TEVnWEsxa1M4bGZieHRvSkNzN2MxTDQKLS0tIHh6Tlk2ZlJCM202WjZiZjZjZmdw
+            cVMxem5wUFJkb3pYMHhYS1Y3TUxTaUEKWdI2Wzrj23KdHXYqXwn7S03gY/ohHK0z
+            iOQxYHlLkrlVrgBeDS/ei9WbaKtbRalUp12crHNn6YFgRNxFvQ9ivQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2021-12-29T18:21:07Z"
     mac: ENC[AES256_GCM,data:o0Bvf1y6oBT6iQfSpDbHao+kY0yynnd8esxKOub8x0OiYTJBUfqfU8xCjS+/KZqiHPDGyUSkjHCme/nTEw8zRGq61YuNkoDpiirY1BKOGD4HnRC1FEt9lT7uucLlrC0GnXpCRIty/oqRvYH8llo03idThG8u3vQZj0BW99qA0yA=,iv:O9oOGmvzzicqKN82ljjAc0M+RPttwDpM8ZPaanqwyLM=,tag:CErbyJU0FdaiQsI7htuQpw==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAAo3pK7siDifGiqEFg7usbgSUAOkssCaWAX3S8DmP1YDV0
-            BSXc8mdEntraDk22rI98q7QjFBlaF1RIR7TDXD7iDN1dFZzrRPKeZt790+kqUX+B
-            FC4XPcrRwqSj2nK8HbKaJcsJ2c4qHzDIxqn8TVrJvUU4fhKxFSvCgURPWS8fxIi1
-            gYsj7YEmXy2YZ+AG1bJnDBdqlokdyqOkbzXPMbf4/5KiTkWhNW3c9Mlqgv4Ip0n3
-            sbpi1MyiTL+9SfLnuoBPMQymfkbXEepbnsVcytjgbPgRMy8QtA9TsiRfz7Ox9Bra
-            uSwwXlJX0/9skK3MFXIjbW3TlxlRGqKeJbAhMf3sZmgnQC9TQrN4UcceDcAEVX4G
-            vEgAU7yXhGtZxRka7gJPPpyB69b4AvilnFtzfemEcpFtoNHTYAzlcZgqYo0LlP3H
-            yAc0R1Bo6GZx/hog+5Kag5DuE+RwwPz82f+e+mf+5UojmvoHjpg6/BkuUBnqSBqz
-            zqcjW3RHKjQ83vRBbOW7gQN2QL3bAlY7wG9f2MCLQu4zvCDEqMF7m6jMF4SlrPmQ
-            PIIsB3bD1Ravts3WQ9i7URLK+k3h94BJ5XaK2XVvvPqs79Ows5b72uNtmkO2+vPE
-            499u+0ce9xp6AhnPZZqCjungWa7jUP4DQGw+Nn8GROUiA01vSQeE8wmUEsWCuDDS
-            XgFOwRS1+7sSRp8F95DDwFNHtZjzNWTTiE97Id3rwtLFrnbj3ls652Afcz3arPg6
-            LVJ35Zsl4Yy7Bho/p8MplFptFrMQ11gpd6COdKBp+kz/3oRRBpdUKDmls4xg6bU=
-            =FvBT
+            hQIMA6j84+xkv3y7ARAAvg3imuRUZSZMC6PRC6hA/crs8iU6ad0C64qX1SpRbdXd
+            lvThwtcKKi+d9PEQxWVE1rhPnduL1lRJ9OqY9fIVEKzoUo5nm8rO0uimSKivZ7+B
+            uvXLCcnns/oHsFdAV2oXQ14gtYaY0em6UZZSOdxSPWNz7hIK2JpOdGZQXnOMXwrq
+            YTfXtcNU1SIwZCJR7ULrfflguV/MyQYkoMeD1aloQH2aLWEcGnbkwVFR3xBHaxH6
+            OgGqlRO8P1iAVTTySJkWz/l8+Cj3hrh+LFEoVXPOPHokJ9fOUheyzQCcD7J/pgwH
+            nnRpZ68DIk5wRvKLWtlsek7vA8bKowfXf258Rac+WKgtXIWdUdU92w4wkfxt8nYu
+            2hyEnydgyIvsj4PWCzVcv0VFgO7CsLbumEgTFOFJuGgpyHyRyz7XnhOQPUjnI2oo
+            /+5knOCpp8O1kMWP9yEQxty3k5nimRB6erFux4ohfuF3V4zQ6DwwZr3XSdCDnW9e
+            SS60Kvs6k3ehgPJpauwDBxvcQY/iwCBySP2UiTDtd+P+fTyI64kLoVYkaccurFqa
+            BFCn+Ztr38lB5q+OQYT5/al+UqVwKO0MgkTklgtnrMc0kE2EpwTK1VFNftbkr9vo
+            Xe7LM21mIzlmf5ShEEb304KB/2iKnKCSoMUA5s4pbML+3Nsasbj9/CPI/BjDavrS
+            XgHEym8awR+dwXOtd98WsOR3LETkpyZKMKx2UBisSsrFfaHHHRild9Vf8qUIvRc5
+            erjwBaENigZcX6VBNJUcZvLsrIGUUTZ0JKjTzxrOhpsIq6/10bE2lNvWvtCisQU=
+            =BPJ0
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zAQ//Tk+yIZjCtIUXrE6eaVGiN44gvI7KUEIKcKTvQP7SbvcU
-            jKsPQpu7m/7zIV7QPoEwbA2oMD02tqnmgutdBl2E6RykV8am7BdNXkh4Uo5blkbG
-            MiTIEASw7r2SHK1ouU5T/NVmZ3BDEgxiR9Qp+DZUTsq0mJrhdOANWH18a39dwgbe
-            M9BvDyAM9BMxvladazxWven/ljKziSPmr+ULtfwqmvdgyOZjIPjzPM7cbd/1k5AN
-            17XeAlvuKrYMCvgBbmWN9SW3oq+bUGu3H8lkdoAgX8aM5Eyh75o0IepTlCqGYjOs
-            id5ueF5NfUMTAlpZ2wxkJVKDcjh1DdDfjlInfmq2kGwlLYT9MY0RukuQUNdHDCHP
-            Rgbbdqdft/yvZCJYXA6mp4mwRzBLX0yrvbMIatCuYNbNkoSmAHMZAGjH8GbMRXRV
-            rHHp8g5GZ4OmUeXnvkVTgc6To3jjVmQwfH6XYwYdozwydxEqAP1FimDUR/CK1l/J
-            vL3lV4nVGca49qIgqpTT0UFW4W6F0zRxE09EXWK36uM9oqZGr14JbHe1PPVNY58z
-            3FFWG9ImM+pNfbvPOE1m8tRUQ+hYIMf4iHdVKd40Os22TEODhJAAy8gS4prLGa2C
-            0W14JOsCHGU0FHHJP9S8VfcOdwjPEKmMhWVxJoJVN41GAFSwjpSTBuRbOuSRE7XS
-            XgHPl0v/poFQF70tSmXucyED3qKaOyjepx0o9OD/iwXU1HLEsqcyOwQpsYPApqO8
-            1Qn9zgEfMWE18lIRfkXdBnaXHUmBkwzqFVqsmud8XC56OB8qOWHmUqYoDS9mfKs=
-            =G6dA
+            hQIMA8zMZ+ak7y/zAQ//anZflKUJvV94qODvtck7kQlfHyCzDQKS1Uqyae9J8TNI
+            r6YUSqyILCGGFFw4wKEfLU1gacWjLp2PqU40rn+4ZdxzcsplxnkwAiAr5+qKKMkt
+            ZgrUziL956qveJz4HC0yndl/mv86EilOUAzVmPWz0P/QXR57j+b91Y1y2OgkXoDX
+            Kr/S1t5/6zUdLCDkhWTCfWGHW97MahbqGEXumBCIlZfj0No+7RKVajaQd1iXM5rD
+            buzwU1Kdl4g3/RzvX+vwjJ0xA5K5qLHWK6x1vQfEnxYIo+bOvGhp+idZRLRS7nAr
+            /OhZ3BscHV0exGBLm15E6BCqFit7woiwTFZn/cEuu0/rlV+i3o1onmP/e1xpYwvs
+            ZbbQuRNLHX509oup41v1vgak24eRSFHmQMDBwbx3iDmJwIlcPxMVezt5Is1fLBSU
+            qv2dsQ43tQ5Z7LcWd3ZQCdPKsqnT3A0WP9V2gjlDtV/4qlwGaXjdq4eDsTFXWxlc
+            qgiZirkxWRbs8ZrkZ54jWrEa4nOABbxvPgWwi0p7REs+PPmzShzvtbsqHhaFqyk7
+            pJCPE7C0UNDXFbedn8rmFVinIp40Z7BnkSXV5tjLk1kcZu0L0WBfTX8h9lX6CAig
+            yDee7auxHGxBDbd5G4lzXWHMJlBM/u1tVVOmnGf6wkpyftLW60ny62OWM9Vq9TDS
+            XgGnLvcmXmpyfNUyIGw29kuMEDeqD8hERHhs5LLZNuUZejMuc+70Te8+tftHKFKh
+            k46/n7gorqDqTuGBDXx7K+iWRaORnGxn/LzCZtFFUw5qQP9GoerLgBUejdvM9x0=
+            =sMl0
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf/dLVc3ZlGkxbMC1iri5+kS3HQCs/zt7cvTRIKpamvEPoN
-            lroRbMP3KBdMK692Oh3agilZUL/lcZCzMqNBDu6dwUBgtOSaYHvERrJJSUsl6HhQ
-            uVJ7/YVKHkv6AnUK9QeI4ezheKdXl9uCNTnfZp+phOndm/nkSUskPBukbSsUGX46
-            C8EJtrT2jToZciOnCNRAiIozZAVZA9Kq9aEFV9RczaRli6PvWpfvIf3VVgto2PMt
-            8sD/GkFdN4Ebx76amaSBOUGfh1pS1M8Lj81jMTYYZWqc43hIbnAOYioMT2VMAhRC
-            ceo2bOncmz4kNDXkYbvjcBF/00eW6jnGcV+wXkvJFtJeAXWR7D50u6HsiRsNqstf
-            PPFx+O8w/m7Xs48Zg+q6xiyO5+0vrgN2aLoJg4uVfCo3DosmvJyAelMQFoWzTVjg
-            qazAixo4zU6OJF/kBHf0z2uFYk92Wsm14bv07n6cIA==
-            =BM4E
+            hQEMA45bZkLXmBFpAQf+KHRcGv62fzOZI+OjEWt0BwlJ3QQFRa0uIawAuVYu9Deh
+            O2LXldWUxEdO83ne+M/+w1MNdksDV97lYknMhEP1vaxpiHtxNprhaqFffyoeirK9
+            jCsgp//EjxqOGbs6OVhUCZykVCWKJxEX6MgHwSpp+gXYkykP+ihYcIjI5ws1P82W
+            AjbEbVbmY1x4fYMSifpLF8K6lSBMQIiSzW/lCl3BX3355C9eHqoMNw3ufX9aOhC7
+            052TtA0CIT6eXmJOW1NmsHv54sO34p+jOfZ1RRCSEqHO8VmOHEsVYVi37YIOF67k
+            j9aSq9yZmlufQ2soQiInqnziRieFOUdVH/353DWDTtJeAddxBj3FX+nMnEBdlWE0
+            p7M10WGLo78Kn2eAcjWJyBFVqylD+WW080NX8QO3tOVvkpWPYfcOqYFTdYIQltxj
+            vJtMM05/lsDbgaMAFYQXIyX9QXXLrkGAxwXP/cG+xg==
+            =LOw4
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAjGd9IflbjnHqxhR4DYP0k/aNx/dIJotoo5LuC1rjUogY
-            KvCrFaC/akzQZw4KaUhx+et/k7iTUbwXtVS6diBwpsECpfMialL4WnBya4n8d7l7
-            CQtwuHF103Di0b1x+vCWw4ASM0vLD/6fy77LeOAsYGAAfolTOuMkhxNvljRaps29
-            rGFpTLAQWG2pTYwbO3dib6EdpZcLNZgGWulWO9ElpovMUJaN3TN7D2R6yW0vjVlq
-            klVJ+jEVPl+MRxl5MLdN8w4mmE7euVPMOwCWPxGHcTqm/q4EFcYnbyA8Ww4xOhuy
-            61XSN9CB6z3E2hSya0E4yd9E5OgmYolQ5QpSdWdxtBAbHlZIg03iy28UsNAFwLpe
-            9IMt4h0uwCgxkS3CusRz850pTfc8AOe+xIfza/Nk3/+jetaUKC3X3r3wuZC6mJ6c
-            1VnxAR1xBN9cOXLpd/ygCN0yQVO48QqRfEcUSIN6Q2SN1KDXjTay1lLaW4GBohv4
-            tRKy/NqVHRu5g+xCfduq0Jy5Y/zz2C4+SShsLUKgbQ0IIeFhnSIuu335tZ8uKPh4
-            ZKXGzYmxTLlrUYIauS9T5rj3kPr3Ro1/T4vAfO+uuV02j/DWMX0InpdM2BHmNBXi
-            v7hm/vRaWBTP3smKCm5TEhWJ/9/YsJ/aBGN3kGkm4AOTouFY1KI7aDnQ36IqVO/S
-            lwFdeOrcI8VP0WM7TVqitQ00f5d3BFSQmOOkNry1QGTyu8mFK98rHgc+7YrDfK/7
-            LVzFZWT3v+Ft2Opgj+jeemwD0bV5OtAm2k8OCRzVFlhnfRX8hlpZ/7vrKYixYBUV
-            4Lytz3cq3VjiR7WYbYr35Dus0OunQtL6cU73kIf9jvTFBIofft6O12quY5lsOYHt
-            RmaSLd5GYtc=
-            =hLvK
+            hQIMAwMCBBrc/JA6AQ//VC8tGy/BtlZLWzxPe8RmHr+kJtPd096j2P9OcNvDCeTi
+            PZpqR62QHvFWU9U9ZBCrXrEMFyVp51EhnA+Rc0uL8SVFERX1xcEz0vjGYOEZh1aF
+            Z7gfCKB7j/b6Jk4emrEUStcrU+Qbo59fUvQJS/sbtulefXGcabUaMBkugeKZkfMj
+            89FOpgbu/psF8R6Oi9kPNGLoeq5d+qEDMre9zoRmgKerbiIqc3z6ootxHJWEAUsQ
+            dSHgtwPkv+kbekxk/9cpBOucHFuLkybRa10WFjcgbS+h952D0RwKby8/Cj0+DQi0
+            V1mBmKLN4zXzOUJIqhLogvbwk7hTP7JNYyKdZ+Ew8HAgW+ZkkK3e00N6CD7eTHut
+            JpINa7ssHC4oriFI3alBS871Th8raEacxAErrM34n6umzLHUsTzPVaT+yTfLegtr
+            VvYU9AH8cVzG+Jxo68Qh48AWU5NKvE+pEwLUKImXt3ukbLuzzzxbujc1e4RNtg4n
+            8pxgGXFNwWx373XEYChOJ9cVn3W/thXGg/8Y25HVqMiKCG9MVqQ/Qv1eNtbFUtns
+            Rn9AercOND9+m0MuSA82RLfmMJXcXlDlQBdjJtyKfT83Hi5CJUqWRCHWmq5hiSBy
+            qXKXBEeZ/KM3V5yPK0PImGHm8F9DjcolwxIJmbXhQEv1U3ItgXNrxHnxcgnw9JvS
+            lwH4Q358kUcevD6g0Oh9R20AxxLvDgvZdnNBoOlmylrDLeST0yrbrJG1TLlllyAQ
+            KsdLdefnfIwyIgLV0gKbysbtTT34HWvsyEt7kfkYxOAGUxARQpmJYIFRh1/7ICTx
+            GczvR7PIPxhMbJrGGXxODWpLdfNyujAGivJMTGJWW3jD7lUXO56dlHs+W5J2zz1W
+            Guggdb9yE0k=
+            =CKe5
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//XkqiFfWqqhJWaBg56+44GZPxHIGmPSgdI/7/pHV5L3jK
-            aAYS/JR+/p5yezUWkIIK/aOoiFfXoautgS5PQ+8mGaGYi1pcmMwDTbIYiFVq2tgf
-            pwszN778ucOpJ+HRtAs3Ekpqr7p7wVD60VUKgeayJPkkBaUrd0yJ4MvRbpl8f2AM
-            l/g1UpHRlKOAzLBt0kLBtoPVE6gy6eZuObP372BUukahYUsbgfIURgPseel6ly3z
-            iUjH7klw87RNUPB1qxebHd1s6Jwod8Pht+StBRIaWGzfMYvJBEmssoTiqHUnhHpE
-            KzX99C9GlFvjJtBDvBxCXXnG5stYrvK+227FSmpz0u2wKAShjOtGqnI0HMU15zPq
-            3fpR50W2KwPzEbwbqjNA8mvyP70hLau7pezJ5qFLW9QBlzyr7LNhrKBa5feghRP+
-            EhzRMfQvHD9izWwaFrQpPutLxyhkxjxcmspl83Urn+6xN8NI6o3Qf0wYL/0gI7ol
-            gm43Pt8nq7HdX/aGI8lLwLM5kuboJWnTMoNy4hjmUMKcKpZDGUYK2ot9KO0XWfkG
-            cXZaQzJuoddMOjpOF6X3fHgvyOfIBmcpyYw4LDRT4ZWrZVgXzjOqqeMte6Fsc66j
-            oYPXPDIqZvXL4XzgJCqECE0shcK6pGMTEshS1kaq5Gi6CUouR38j26vQrGOKTKTS
-            XgHIlSnZyz25Ll8Etog637xOIVWV3q+Nn+mr20FKbEahzobxZZ8chzz58vz9fVvf
-            YNrYbP/ld9uFj0CqPqj2YkUJDkQFRoXJLbTVaeZD3uL3kYsP4pJD3brg7TlwLho=
-            =q8V+
+            hQIMA9XEenRNYVGHARAAwFDQUxHFHWBtj83fiI5hpU/v4ywnW4youBoYBPEZkecD
+            Zv4uX1CkEiYaZri4zMGfPi0kGkBHm0cfNdwjgg+oA3n0ur1yMAhNTiKsGtZnzRmR
+            DRAw6Pg5i/9fegm4AK35DOs0HvR9e+Ti0MTrgVFUvxOQs90n8sDFO5q16qqvqdGu
+            x3xe7or1VkzSUGR82XYoPqKxxbLMpdSxebtVMNmnVD5wUMV1wImKORJymq9IjbMZ
+            O2+gzonPQszZRE40jq96akwlff7eqfNvJyTNMRanExjhnoFAmA0W6gcs4pTpgD4H
+            jiUgPJaSuFZhTLTeWm9v4xgWuMD6U/NwCu4zAyampBnAgo+xVmx3UEysA+cndeg9
+            h/2jjC3dgZnYaur7+0K/0Fs0J1viaWHMxqGQFi7nZyMw5orfw9rM9xKT4BhTWfRl
+            3hoiGljguh+Yai+VshRtHuIZnvTBRMr2Flc8sdm5I+B7wQ+YyEag2d73flV+/cc0
+            cQjIap8itxx8K64ZWHcV/o14O98xMfYxAAdLG5L40Mb7k4SbP7jKKQ842y5z43nY
+            d3BbS0/a2toKelcieK8ejFAUy1EhoEeDCmFz5iOhQN4Fy8Ju8b1T1oiXZLATM4PU
+            Wt9rihdSM/O9CiZ5L96JQ4+TFbW4AR0e9WIeNSF9OFza68R7IifHMYfH3bJ2vDnS
+            XgGUY3w2DJojSVLMENZF9NzPKbhcxvRpg/mFsFBYT/NJ4Z0j4V92JfoXsNZn7ChA
+            8ELOIB3Tk9je14P4laLMvCn+iQGs/vYi3lijLrokU+aRJYfEunsafH83EZcCC3U=
+            =7SIR
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/d/ixwCuuLodQ1fQwNxwDC8DXmuTGGYKoO2SsBriGu/tI
-            YXcabvwDrQ9cjSXmk1sEKnZ1hAHqCTTisMH7yOLC0+Fia+LX5mbcpgsinI56kpYk
-            2na+Gv3xzU11L8qn5xJilep3yIRmfycCMkcILieh0yDKi/z4NrXIY7/L+gHLaP8e
-            xKGpgcR0beLMfdgv5FFdVlUN7pQnlAps2wLpVbUfigX8O3kjN7NZM1zeQOE9EwTE
-            ldUVwaYCAIShBkOC/Ckm/UHQZh9a6aOGnDm9Lg94j8qckWYILKmAzsUo/QLzEIa4
-            DZwnumBR1sClkTAZsgl2gt32xnOnc/luh6DQnb++y9JRAesq/4oC0e6yZC8zpHbv
-            PxPA6m/97gh1DR157U2+u4Yyt+p1pAmuZ2VwTA1cs9KEW/QIXVz7RDP0Z/PicYIc
-            R7Xg4XUuyTBx3Cv8edVFxjlx
-            =JFn/
+            wcBMA/Z87ylQaotQAQf9HjysFBTlKjatQsJUaMMF6lTR8yE2vIgmuyOVXr/bM+dH
+            J3HIZ4GHefLYMAmISSB4iGmVo2dapV6HKlvNR4uDQ+3aaDGutvUojCfdbmxLl3mD
+            e5JdZlikDD+TYw770I9P6hu48qNMYboY3O1MJcl5r3eKbFRK2NuNOL9Sz4zFvpCU
+            HvX4Gk3r+FJaZBzB65ZvYRhBTbXaFsq9Hvb2ufNVPQdBgHQtaeE4twaAczeljCDB
+            GCR5Pp2TpylT4KPK9W0HriyeJdBGaCor7CHp90X/cx4Sg/f5aOepgipGYfsuXLLn
+            KKe7QZcMSVheoSnf9DSn7n3e7GWBtj1K/ZjbjnakCNJRAQibr/grCh2AdHwoNnq9
+            EJcWRbmnao9gRVUz9I5U/NHBFTN2mMjhWWLzlYNQhPUchDKJewF6cWmgD9qS5KZ/
+            XAQ4pPLKKqxdxUQam9qEUgZX
+            =blxz
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/6Ak44tD1SomulYtTSzWS/iz81PAfsJNvV9MSti2aXFLhl
-            kCfyG8KxPySZ92xVZgu5Ib6nWY19b7Ps7QNjBPJ3PB6Ejh52L2TNUyiqMdmlllek
-            DnJ2mDGaDV6YXVxUY6N3zma/NI5bRTWpwykrHP7REs/h1n+pf1lxI9fZalvL7t7Q
-            J1Lt7TRUiDk2khk9BG+4dQOsJMtCHkT6aclXD5/dW7a5Hv/jRSI+xRfkXPn/BeCX
-            gjM7WdBaT7zv9meQJd5tlROuGBvQ2UvPOpcFGX8g/9cfuSrXib5SoZ5oxB165Enk
-            Fk527+RfwdfcXCLw0x+ZiStWYn9vrxz8K1CJVxCQANL/lWEcUs1rbL2St75kbQJ9
-            QLu4dAU3SwH9GL2pbTzEt2gAM8P9M47EsZXZsa8GpcGdbknccH9pTxbIT9Uf3+kC
-            pqe7SaR/AHuGmnMsUhv8dhYdArYv9Wo7qjhtyjM62sAQcSBHEeWHspRtFP5fmEYp
-            O2S8BthtBp7B7OUKRJzf1P7SsewLKj61CeGOQe81eyz6GEdlr0fBgq7Hd1Fu+8iQ
-            rM3r2kSPutM/xoHNT3kxJS0AcROYksKaVW7VG3SIH/pXemhtRC28sfG0MKmKqfup
-            w/yTrpLIay0BeCsyws06QVZRX40o+3X9a5ibbs0WJLVFgXBPxhuRCA3mW+qnsMXS
-            UQERszdhOR++f0y9GxVWvnuWUoLL5hEVZgPMafmYPEYNdoRLzBsoJtCZWi20fC42
-            myTOb5+/buT4ms3suT4kqki5eBzcRdW+PDq2PqA4N59uMQ==
-            =7t7R
+            wcFMA9qJIVK2WMV7AQ/8CCErWvZpabLC13VN2ww/Fa9XiWd0YDo6cEIiPWURFqN6
+            tMcwEwmQiY1M3V9f9m1VfF5GBC01+NYYhKpdex8mISpYYkLMjPsHBrgVvQTyRv7J
+            dYcu6zD/QB3NdlxNYK8/E2yvQOApjWDVQ7aeCH8JopkkKupR8Qiegi0U89THxo9w
+            7zJQs2f7K1itPVTIoH8ZHq+hV6Xo4dEel1DbNEcqgNN8AR/3nsHjx46yUpjjYuO5
+            pQVf0gpUySA3h5gA0q3YzWAzHr6VPU8R9W18BJ3lF3WGLiyl4JgCgaAO9S8jCMPn
+            6vEP6BcduZjwRvDW2HbcqwPwbH0MOOzKIulPoQb/ZCFfCWeNMrz0dHjNge1QGOFv
+            KpxcfeMqAC4b4p0NBYID47khlZZ6FddNZySl4VCnAS4GD6C6k/uORRsf+bnysmJN
+            3wVTjJswYs1JC5FJWrVAAyvtSW9J5lxXRlsp8hpzoI3JSxLF2NoajOBQrjNaiNJX
+            +N2L9zA65foFWetkhUStQCqaJpQp2oJkTUnXITCGa022co4CbwyxTR+4c5LSoZFe
+            oBFWv0DWtYU0xUZBtiJe73XH2BkFuhH80IIML++sydDk6TdoqiRhJkSyMGkcKOdV
+            pnp7CrNJgRqqHfnXdl8L7DqNoK1QgXlGBdDHRqFlDuSgjiizd1kKm8h+sfZ+Qu3S
+            UQEbGo4vN6Tmro86WXwPseRWs6xN6/mHOMvvRFHTfR5cLoSmGmb+1vv/UCNgbjQ3
+            I9wN7+1bbNnMhI6lilayaqaBVJVa5GvZpCic8KNwPAQzoQ==
+            =czYi
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:30:47Z"
+        - created_at: "2022-12-26T19:10:11Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJARAA0UPO928PklvW2AJnXextlS5E5vvmue608RDqCC+8tWiC
-            GuyMYkyNh+LBC494J/pnizw4Wsh5h/pKegAwPeEMtSWeXPnrsgdZ6GPW5DjjacVR
-            IFjUlvuVYWkG6GPwZCXk11BUAi2yB9qS1DavrQDfMXgVlLT7z2PMr7a1oqKi1U95
-            C8EW5oQhXt3TCABe+VOYkwUuJZUx16Ww6XJah+MtqFnQW9PJvG3EQM0mmVTeB4eN
-            AJIjAPCOKKsNPvvIkGDBk+7LGLnXeNXRRNxgurSsJPBQb+4nNOU9U45SEnvpBXs/
-            XaDFJjXzY+uy1KvAvxoUgADint3jNfYCq/tiutEcUXuQb+DDBsLTvj7z7ALcrvus
-            UtVfwEaPVmt1OP49CZQSc0CmXeSW/xyryfvaid1W4uXX+84dyh97qaKEiSauKbX0
-            RsB9w7/O2jENEzL3738y8L4+5wZKGntlvf70jRlq5kZHuOh+NhyW7BXEVBplESoH
-            CAWiaHhFUEktl0b60QobRsYoVB7Q5PGmie03s4LtKjhEpXlj8yXpecWjObIbb7BZ
-            wWV+NRm8bAoA8JSPmVYIQuVqtOCJ7laTY1z59ol5n9SMZGC47dz+cRF/THS0SiD8
-            cUHFXU+bo2F8ViwtLZpKdB105P4B1L+zjWtlWBIqhetTnZRbVZAYpY1lSumfSO7S
-            XgFMvWPlJbQjWGDy8IKvCB9URyAfNw3CyZyJSTDyc1iHI2TBPAqgYuLbbcm/jsfl
-            bW0XVpwzE9a3CKfGLFmK8coTog0BJfkCF+15qmR7GeATJ7wN9AEqLt6Uxe+63AE=
-            =wHqQ
+            hQIMA/YLzOYaRIJJAQ//W5n3hRXj2UWjqXVjjCCX9e33aKegbKBb6DdEqYsygLri
+            5mghSCgiPeg3qr2TJRCyEbow10LM8TSnlSD2b4dKoGT6VAegvjCslxuLNE4ixnER
+            crUh3AfRqFtFkBAfTfHA/gbgLVFikvvrbOSp4R6mzhpB59dhYPO7T12zpoLdshOp
+            Gust08WzSONW0iD0UQjZzw9pA4JF//Ty1XCyFFcW/HBtcJFeORuyxd2h3wbv1KDu
+            YVJa/H/I1K2j/UxgBqgrQ14MmBp+3C27InmnLCus9mN6C+SVsL8B4TVj/wB8dQot
+            /eopjDWswkPJz8zAAPId+mY1INEuKuPh0+T4LK/xnICa3fnbmTxfwTGwR7M87yNQ
+            TQwp1f1+LwLyxKBzeFOsq8miNZyxfLycxLIsXAKDSJ+3wFyqiQ94b4XvQte632jm
+            GHPilJ5ewcjtyJzyyQOh/XP9ZbkyVCRYNwuXt5vjeB2lchX9eKdVUASfa8C2uPB1
+            Hww2ZbuNdvrEQogNE7K1JXrbbpVXElKm5R1JH/C3eLc1MVXNOndcslUS8raJV/+H
+            XhlARcG0MSMSU8DfU6Piur2pnWpeCYo//hLD80mBP7S81ZclNCfygfh2JkgMe7Qd
+            HgRMgh+KcHSgRxiXJJuIV/K9/iQudWWu3Yg12vPayu0lXK8gxylx78jeKj3UetTS
+            XgFYQ34oSdK3NwBqHuZxt0uaQqmiJqPgkIJ/hVIAdyp8xM1Zws9dtfTeosGzFtJ1
+            /PL1/mW223L/TOTeujB9nzX07SsDKy+JB8Fe/YmSIsY5j9QvUIexMLZ/k+COwoU=
+            =Cmr7
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:11Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAleBcq+Qr3sRpga/qW0FUPZfIFzP3Nvw52rTjXf6I0HiX
+            ikgcQGJLHUBXqBS/h2SSEzs+FFb4BvOeSL2mfBUpQC90sia8yufikcTiw423pt7W
+            VKCO84OGDyDlpnxBeKyOOmm2shHW02zewpWnRg0CCja+MikX5EOFwqr0Jh2dyKHL
+            qK6OB8Yz/5yDtI8Rd/CnrfGfMDlmQenAKJnZnJ4WcPel1ysDqvJq8pAYS52VN8OK
+            AOa97FgX/WMKcT+I+NzVyxrvU0JC0WcWaDkWRubvxFGFC5o6S3kA7EfoiSqEb177
+            YI0WBmFr875ZlEA73NrQ8sBMtSZGoh9GvhB4LxKOAMxfOXymSvQSweE5CJ0cuHO9
+            TLnPCQ2pjybLkGe7R99KoXHn+wkQeKTZGSe0xzHSjpOPr45mp4zXhGjcipr7YxaZ
+            75YMBDXhmrckMO76rEKT0yop4pBj0Daa1zqm1BR7YpmEqbQk56/pPPgApVTnH9rC
+            i9qpT9OsdUwo1B+fZDR8NrQFaeP215V/RDunCWc0YxM/pq14+tw3F5N3i7TZDech
+            ONuZmWPF9tUJamOmMyfcoXZbBc6B83Ve6gW13FXxG2DnTgTbn0Rjh/TXWcw3gt2k
+            v0NDd1S95sEjJaklEV6okgk/SsjjNrwW/DEaL4pGZrx3z1fhC62SFK1aC1y8ZiHS
+            UQHe0E9HMAHHmBzwJ6GFssAbkmY/vXXKmlIri47EQfrwh7P3PxB6DQi6c4IClidV
+            tbmnstlzkId8eMR/nom8oGCIotZvCP7oRh3IlpLFolhLMg==
+            =UEhD
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.1

hosts/rpi-netboot/default.nix

@@ -14,10 +14,7 @@
 
   swapDevices = [ ];
 
-  hardware = {
-    bluetooth.enable = true;
-    enableRedistributableFirmware = true;
-  };
+  hardware.bluetooth.enable = true;
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
 
@@ -71,8 +68,6 @@
     allcolors
   ];
 
-  programs.tmux.enable = true;
-
   nix.gc.automatic = lib.mkForce false;
 
   security.sudo = {

hosts/schalter/default.nix

@@ -0,0 +1,35 @@
+{ lib, ... }:
+
+{
+  networking.hostName = "schalter";
+  hardware.enableRedistributableFirmware = true;
+  #networking.wireless.enable = true;
+  powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
+
+  boot = {
+    loader = {
+      grub.enable = false;
+      raspberryPi = {
+        enable = true;
+        version = 1;
+        uboot.enable = false;
+      };
+      generic-extlinux-compatible.enable = lib.mkForce false;
+    };
+    # supportedFilesystems = lib.mkForce [ "vfat" "ext4" ];
+
+    tmpOnTmpfs = true;
+  };
+  nixpkgs.config.packageOverrides = pkgs: {
+    makeModulesClosure = x:
+      # prevent kernel install fail due to missing modules
+      pkgs.makeModulesClosure (x // { allowMissing = true; });
+  };
+  sdImage = {
+    compressImage = false;
+    imageBaseName = "schalter";
+    firmwareSize = 512;
+  };
+
+  nixpkgs.crossSystem = lib.systems.examples.raspberryPi;
+}

hosts/scrape/default.nix

@@ -36,14 +36,14 @@ in {
   };
 
   systemd.services = let
+    serviceConfig = {
+      User = config.users.users.scrape.name;
+      Group = config.users.users.scrape.group;
+    };
     scraperPkgs = import scrapers { inherit pkgs; };
     makeService = { script, host ? "", user ? "", password ? "" }: {
-      script =
-        "${scraperPkgs."${script}"}/bin/${script} ${host} ${user} ${password}";
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      script = "${scraperPkgs."${script}"}/bin/${script} ${host} ${user} ${password}";
+      inherit serviceConfig;
     };
     makeNodeScraper = nodeId: {
       name = "scrape-node${nodeId}";
@@ -89,150 +89,105 @@ in {
         ${scraperPkgs.riesa-efau-kalender}/bin/riesa-efau-kalender > /tmp/riesa-efau-kalender.ics
         mv /tmp/riesa-efau-kalender.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-kreuzchor-termine = {
       script = ''
         ${scraperPkgs.kreuzchor-termine}/bin/kreuzchor-termine > /tmp/kreuzchor-termine.ics
         mv /tmp/kreuzchor-termine.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-dhmd-veranstaltungen = {
       script = ''
         ${scraperPkgs.dhmd-veranstaltungen}/bin/dhmd-veranstaltungen > /tmp/dhmd-veranstaltungen.ics
         mv /tmp/dhmd-veranstaltungen.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-mkz-programm = {
       script = ''
         ${scraperPkgs.mkz-programm}/bin/mkz-programm > /tmp/mkz-programm.ics
         mv /tmp/mkz-programm.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-drk-impfaktionen = {
       script = ''
         ${scraperPkgs.drk-impfaktionen}/bin/drk-impfaktionen > /tmp/drk-impfaktionen.ics
         mv /tmp/drk-impfaktionen.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-zuendstoffe = {
       script = ''
         ${scraperPkgs.zuendstoffe}/bin/zuendstoffe > /tmp/zuendstoffe.xml
         mv /tmp/zuendstoffe.xml ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-dresden-versammlungen = {
       script = ''
         ${scraperPkgs.dresden-versammlungen}/bin/dresden-versammlungen > /tmp/dresden-versammlungen.ics
         mv /tmp/dresden-versammlungen.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-azconni = {
       script = ''
         ${scraperPkgs.azconni}/bin/azconni > /tmp/azconni.ics
         mv /tmp/azconni.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-kunsthaus = {
       script = ''
         ${scraperPkgs.kunsthaus}/bin/kunsthaus > /tmp/kunsthaus.ics
         mv /tmp/kunsthaus.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-hfmdd = {
       script = ''
         ${scraperPkgs.hfmdd}/bin/hfmdd > /tmp/hfmdd.ics
         mv /tmp/hfmdd.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-hfbk-dresden = {
       script = ''
         ${scraperPkgs.hfbk-dresden}/bin/hfbk-dresden > /tmp/hfbk-dresden.ics
         mv /tmp/hfbk-dresden.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-staatsoperette = {
       script = ''
         ${scraperPkgs.staatsoperette}/bin/staatsoperette > /tmp/staatsoperette.ics
         mv /tmp/staatsoperette.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-tjg-dresden = {
       script = ''
         ${scraperPkgs.tjg-dresden}/bin/tjg-dresden > /tmp/tjg-dresden.ics
         mv /tmp/tjg-dresden.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-dresden-kulturstadt = {
       script = ''
         ${scraperPkgs.dresden-kulturstadt}/bin/dresden-kulturstadt > /tmp/dresden-kulturstadt.ics
         mv /tmp/dresden-kulturstadt.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
     scrape-nabu = {
       script = ''
         ${scraperPkgs.nabu}/bin/nabu > /tmp/nabu.ics
         mv /tmp/nabu.ics ${config.users.users.scrape.home}/
       '';
-      serviceConfig = {
-        User = config.users.users.scrape.name;
-        Group = config.users.users.scrape.group;
-      };
+      inherit serviceConfig;
     };
   } // builtins.listToAttrs
     (map makeNodeScraper (builtins.attrNames freifunkNodes) ++
@@ -343,5 +298,5 @@ in {
      (map makeLuftScraperTimer luftqualitaetStations)
     );
 
-  system.stateVersion = "20.03"; # Did you read the comment?
+  system.stateVersion = "20.03";
 }

hosts/sdrweb/default.nix

@@ -34,9 +34,7 @@
           index index.html;
           charset utf-8;
         '';
-      locations."/data.json" = {
-        proxyPass = "http://${hostRegistry.radiobert.ip4}:8080/data.json";
-      };
+      locations."/data.json".proxyPass = "http://${hostRegistry.radiobert.ip4}:8080/data.json";
     };
   };
 
@@ -76,7 +74,7 @@
 
   services.heliwatch = {
     enable = true;
-    inherit (pkgs.mucbot) jid;
+    jid = "astrobot@jabber.c3d2.de";
     inherit (pkgs.mucbot) password;
     muc = "luftraum@chat.c3d2.de/Hubschraubereinsatz";
   };

hosts/server10/default.nix

@@ -4,6 +4,7 @@
   imports = [
     ./hardware-configuration.nix
     ./microvm-staging.nix
+    ./znapzend.nix
   ];
 
   c3d2 = {
@@ -18,8 +19,6 @@
       version = 2;
       device = "/dev/sda";
     };
-
-    kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
     kernelParams = [
       "preempt=none"
       # No server/router runs any untrusted user code
@@ -52,6 +51,14 @@
     };
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."machine-id" = {
+      mode = "444";
+      path = "/etc/machine-id";
+    };
+  };
+
   # static list of microvms from other sources
   microvm.autostart = [
     "data-hoarder"

hosts/server10/secrets.yaml

@@ -0,0 +1,202 @@
+machine-id: ENC[AES256_GCM,data:Ix/XS0rRXZhWePe41VmMarJ39a/f1kjz2ZALwWGzKa4=,iv:36fENZzal9gR/3DD4CVDq3yMmLr0rxtbMKaRDGH1Kpc=,tag:M/UmDJD0obr2wh8AnjrMSA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age15qj8latetnrmgzd7krq02y65kn7lhq2pcwv8cvzej2783u5a9scqs79nmf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMTRibThLazNCVnB5R04w
+            Y2lQM2QxVUllUGsyQXdYcG9lY1V3QnZ6V1JFCjhuNGpDa3lqOTUwOVM3akdXdWtZ
+            NGMvbmYyYytROHZIN1MxTHJDMUt4SjAKLS0tIHRNZ3J4OGtmamxOU29yUDBYaU52
+            OTVFdGVWRW5haGxMUjEzajhyaW9UeWMKLFuPXze1UelrLI3DQSOwWh7nLLnvdlgc
+            XYrJ3nZXaQtu9zqCzK37d3Ukw0uuNcFsVcAd5fm7Q4cppHma/pmOqA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwWFd5N0lPekFPcjl6NWNO
+            SFpvank4YlJ6SkY2VkVvWjRZTSttbWR1SzI4ClREYXVLc2lqRk8vU3pPM0U5Y3B6
+            aG16QXg1aHAzUnkyNE9Ib2oyTk9pRU0KLS0tIExCMHlpbmJ4ZmZqS25OT3FGYjNy
+            UzVHYmRsUlhpeGJUQXlXOUUzRTdwNDQKhA6vI08t3YIYVO0Wi/gvJ62RYSym+gsh
+            HKGo+MeKg+gRTDi7LQAPi/DYIiXoNJFuRj1OxFKsqCin1wElEiRmdA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-28T00:41:54Z"
+    mac: ENC[AES256_GCM,data:tXurnfoPGW/4T9CJVTKL0R30Z4evl4lEabOZQbXjkbpS1bisaQ5b3s02mYwrv38NDaxgxxolUn0ol6Tbdi1UF/FxQInG7nM0FU0s+yVOhhJR4dFsR37UXAh+mTWxk1leX8GH4N1dfDWtHpOnaGqydZ9L0BlB7iQaEBvNK68glwg=,iv:zB4NK/n5QrWlalFvafAAaTAw9YWaN9b+P7r+vD1EapU=,tag:3QHjMhj9WbO70E3qFUK/kA==,type:str]
+    pgp:
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ//TD4DJ37OJxo6i5YNFJYcjZ3nZI1TDKlc63k5nqCWzsrU
+            2qICW36YFRvVt8QDtviyWcGzrb+YnOPmlp3H7l1Ec5+dr4fIGUYf8C7s8mXO6VF8
+            DXeiGPj6sMXNi3I/qbQtpnAGu+eamoa09UCPmExOwaQajmvpbbj7PbaI7MH7A48G
+            CTpuYFOjK649ydcEDdedWCgFKWGFx+q5WeqOOYNnUHTLmOcEMXRXdLSuAmjJxypq
+            LD5mRv+vCdoMNOw6iyea84uhaZsEcLJNsq5d2gAfmgWqRYAdS70NdlNCti1lGulN
+            4AFgqCii4aLijIbz4P9nk5eNeRWisIbcJXTPaM8vc7vBVCzyk7ihG9KH/UdybamB
+            hp+igWYYGI52UYJFnj+yRKAqZILuNGyCYYjASjzVChowH0vo41OrmBRNBlVT2uK5
+            6CugKyUqCjKW8HLuJYGOgOi7ciuQiGzEyFiV0vldVN+veJi0/KqcpC0WqYeEocNY
+            ODXKM4WLqma5W9gypg2UJtMr/dz5mq5TA2B6YRj3F96UwheUbMVlO4niq3TyHVIe
+            oaPWuLBnt+4nA0bfCnPv5Bdzg3nw3/XJSGua8SOLPZI0yGkP783OTSEMQZzbkecZ
+            zFhZcaRV9wInkNhQTtReqfsQzw3/3eCbXls9UGTsuwcz5dMhFrS7TxypBNBoMoLS
+            XgEi4TpqzImLazivFONiiBvuLWDT9rvU68b2+o1l7pZOlub0lo0ZcP+WlQNGNNpd
+            Eu+Pg3Ysxr178+nL9G3s3diJ2GY1bqhxztVgW1llRSv/VWh7zLYTAWNiPpIB++A=
+            =tcUV
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ/+IDBpZXcoFydBFcH1yvYhl7EJ4n/GDAxbRzTUgy0UAxoG
+            uSKwLPa2cFlEoO1MZKDP9ufNgMtNK8tKVs9haPCzflDhA0FQKHd2f2NJHm1bH1+i
+            ubGVUlnmFfPAd3m2WElOmqM9yyrkbfH4NUhn2EULuuvf2CNuafMLnPyEyYVG2fxC
+            BU1QwXAgUmIYkS2iw0Ao0hh7dX7DVjJOcxIVlWPlWmXfDjXc6Z6CO5/tviX79Ti0
+            fvLUGO6Q93kgnHiNzunHbAqM8Yq2KQmHR+QG+lfEEkma3YWrv2CLnTG0X13qjdnz
+            nm/QMGBSYD4kLEZp/D/nM83eJI6qbchTXBZGLYdSGTUvQac9xB6hhWTP+g2Tfqzl
+            3MDJIhQGXtRnlNG04JKYzmhOO1q2PdhmjGnZZav5LEIZJOeGHoDwqck18zeTzNzI
+            2w1EjuSx7VgqIuynFXiBYhHshIsEs1FuWIYhuxyFUG+bkTXfSyEEAyovNOX64ei9
+            QQVXw+CM+V7r8XAQxXCve9iH6eevktLzJO80Bgm/+ls0B4ErCOfNTgj7D3ELPqxF
+            /9TuCVNrmMCDM1hyt2f00wk6Un74NC8ptVXALwXg2IQfUE8cQjrxdTAcz238zX+w
+            /HAwLPWKJgCpkrL7puxSJqbYm+8P0oerXfaq9vVC2WslFPDZTZMFktyhlUsXmwfS
+            XgF7Q+xSesGJyqbYLvLWVCM0WZ3hAfHjXD2Hzw1fFrRfXxqYX2yasKtC1XsSvJiK
+            94VxA112OPM29r9lPZjp0KLtya77Tgov0F6MA6VpmUqSwYE5E0lx8EAIGE3ispg=
+            =M1JB
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAq3NrLpslwZ2H9Gu8tTT7VyBrzI8eypHkvT7LTvGsEOsm
+            zDW4NT4ANHCCYfwMfpsRRBQGeWpVyk6WB6LxcjH8CaB4AfHS/wBXh4/jGdHNZTe/
+            1qjWNALoKyEpcUKRSadNErhcdlr2SuZZqB0UFr2emvtC30UkZiEPbFRmBJBQdQiU
+            T/4qHxIy1movEFhOrv6mwDZBZaokp9DG6G86x31YB1fNgl7t8zoeWCIZLRcezgvv
+            L92EY3ooEUwmjj6ElcyflHB8xoWzFbbACr0uUrwfrTLP4XKV2ollqUsbAzOLmaJO
+            tSWkOJ6niP9bzWkxiGdyCgAVQMUt5Fys9z0q2RCLLNJeAWdLyxd3r3VYeSgbSfap
+            j7XFxj4HpbzH/IlNS4xae6csx5lZxdsZXTvxjXYRYiJpBXV9Zqj205L4mFE2iOwC
+            5jkjXkaN+1W+X4+8UMq9HypsR5JdSKr7QQEtF4Q0uA==
+            =Sx6w
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ//UqoiZUr0+i0biAp71nUJb/erNTxfPrxdbUKsl1PhbNMo
+            d+wlqpnKERVLrd+8gtlZRlkQxC5LuVHPTHSgmoyzkeN4KDJC6VXcwQyoJkGgVzny
+            TJYZ791WxFqQ+yiIjiOoAY35GdwkJjZCRK6+2iPnSKy49wB+SCxiWbja58xOEpGa
+            +9XylK7ifIFujnR4C96jrxK60CTx54qco0mkdug2Sht9X821+OvlL4knPQG//rX8
+            +OEMkzPGWn7fLmTfcp9iTSvqKvjDU7R4MUpSZwxCn4atkH42ty1d5oLwgXhCs+U7
+            5K/1/irTuJIri/v15acKFVcuL2yeMLIGolOdUF7l7kd2yHgqr/9wQsLD3/e3eG/m
+            9YnqA9Rlm4kvusGNzMVxbrwUtik7ycII/BPuCiItKiKhBfOjFHgbcfdtbSieBNA6
+            52z9VIOz7l3BPOQy/ksF1R46wrfHu+mu+9KamZKxEnPu+0N/Fprr/0x3rzB95JSB
+            79wmYbEhFYO+cdH6jApXvJL3/Cy5pAUEfOfA6bfvCbAtt3SEnGvlnoIv3coLI8nB
+            yw0EdY2M+W68dOyY/iyZzLSQWjTjAWU8m575jfAl42zMhf0nH1wiEF1CN+EQrk5B
+            UAybv6URbzhgg43/gvQJgbH96+P6c15mOHe47g0Ymf6rVriH0GTWqCltLx2yaa3S
+            lQEhoRSdmPxFuf6V6GQT94naMTMBNj+5+TMv2SNSFuX3Mrg3JFT65tG4Hd2DMqzq
+            a7i9yXekjrL0/rR0Ur6t6LW/nD1ZQV7nKJlyKoEJxDGXKrQ8RztW5YilLCobmWCv
+            4amwnPx/bB7FPPN0NbqIv+EScyUyaVOXPCF3Hya+qp7OUoGGzWS5XE7vqrBDito1
+            ru+syqol
+            =s1m5
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAArPObnYxzSIYRGyCe6lW21Q1PYXBNW7pr29v0BvKqr+kE
+            sYkpg/ZqExkUr3W/Yjf6zZatCZabrzNH8wO9AWeanc1F3UN/4LdDXGGN1UDp4Ep7
+            JYJ0RuRxv7qblRWR3S2UPfIWbR/ml1buJKxDJpN0JjBOfVFMd09J0SRJamV0aRgw
+            7oBDNEHbem3XpG6ZzZzhBBrOcXOQ0kK6Bv19sh1GcgwF6n9Q5VjrVZDnu5ZdwAUZ
+            Hu88Md4eP7Qi6gEVwKrxgLyvnobPow7WNoHWh3CKm/wFKpxjrCmfGm0jmxhuvU3i
+            xb+eOYNVPvjzh7+E1S9yzpT8B69vbvN6H3/Qo85PEQKTpsyGDye3XTyGFQGK2TWo
+            52B+TgkfKPgvWugla8zRDif+IYN9RXWbJMVrgBnxcbXUjgqwWqx4yKB2KYrJ5bVk
+            gsQKcpIwfPon/2/VE/+fQ5EGZir9KeSF5bPXQsDBCz0E2tiBuYpETVtdNpDOp0Yq
+            /v5TiDjxd0Vyg3FeD7Ho0AdsOWwmonZtzCOqaebfeH4VcWqFHxplQhRc1AviRiAV
+            siPcTXbD1SyOAfWfErFd4GKRjwou0q47tCREgD3bhmkBWIHgVfQRavfkTIimlC7P
+            l/ehdjSZesbZTP/uxFVpRCBvyXDs4doYzX8KCqXvu49cySr0nkpW9tZ6ClH0FvPS
+            XgGSd4HjLiYB1f/gM9YlmLFW8XKKcULxNOEpqm0+wLPXdOxMBtZ/zbKdh0ifvq3c
+            QuYAZt+AyXfkKfm1JNPLLknNDGa//c+TLMiEMu2N+pyKNApfZuqmjcPBHA3hGX4=
+            =SyG9
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQgAlc2eVbK7l2a6dL/ctj4yeJqDEGdOeMKpFvBdfww+GPoC
+            0t3YNwKNBYI5giunY9vPX8By0ErCDdMiAoqlCgL0k/x0vod9Olg8YIzeWnzJvRdz
+            S5feurQLsnTzX7lH2lomNwqfmvC49L8FmKgO0XhuUAf9h4H298xPdiosm31S6VWO
+            ONHm7wiWldpvlawwZGPAc56zcVAVUWtOC34JaFgxL0Ee9EV8FHeBYSz3gQ4Mk3q7
+            aaufLaXGRdrYbn3zV6UNOEx0waYiCoi8kIM230idhGoGcnW9bkR4YoY5cVLkVcs/
+            9kmDvRIlHNmfAMFpQiN4xwErPAUxaAvESqpKwft71dJRAbPZkoo1/uh96zEghVAl
+            pnjBYoleKQLcdeGBehCkZ2rmo1ukpODPYUPLDYIzvgJp2unB2PaNeBdL8yKBOJtN
+            tVTTgscgx+K4x5IbK2JrpibO
+            =DeEH
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/9HMfi65yIDXtCsFsplQDZpLIijXJQaV8HYccH7J9/6/BS
+            xWT2wzexi5ejy8I/faBPu8Azb+N4S46EJGqyJa5wJx/Q1b+ZNv6tetjZjoDamGu+
+            e+8o1VbZboSRc/nsCWt44xfdsUUj7rpB/kx38EXCGtvNVYfu0UU4rrmBqGacQ6bG
+            7ojCBGhMZ5mQx9bRIvwxDRBxOtku959Bei6HnjKmcRSw6QgVwRoOLKUfOPR/wLWg
+            1jil+Tv5jT0V9g4lPYyw+Xt40jkEknPjI4klD8hYjnSmp0ER+6tJL9vz6ZRYBves
+            cLQjqxYMFqqAF4knnEqd8HDIEMIwikKLLf9hA+dDQRzdE44iZFVRAxj70uw+x4xy
+            DzdZ61aobpBuHWPiouImUb22mqWewEUCgbIrkCAewxTSMcNsjjdhSWm5L+/OcT7m
+            ZAhUGhf8qR0WZEtA2RlwDAxgMcqorOVfuzIwLpqsO6w2lRog2ALbNqxVAaE3pKf5
+            LLC88v4icbsRCbNjNR5oMZz6WjdP+3gujIT31IByXlMjtLbjEC4+boDapUsPK0LW
+            ZoTio5LmPa5iDTlwErDV7teDy9lvrRj0BdXJbhv8FWH9GNnB5fmixhf8dEXrunFw
+            DR9Hf+auBPmI0Aip2dniKcmP6Z6RxHbJPjARUuNkmH4aFtCkma/33fGRVTnnl4XS
+            UQHbdQ2dv86aHFniWhtwCRiVliHfpXkcn0uSNh/QTl8Zlvx/DarvVdFCAway6bYd
+            rqI1W88eWg2aSlDe0URPPXq/OVXrTaPBluHvwjATZCu3aA==
+            =egcP
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJARAAuPMWqlRav3n97Fsws+Y+vBoDsvpBcmymTVvOtjimkpOw
+            LLU8CU54PLFo7b1lquxS5+6effkVzIh2CRcG++4T+FxZRQx5oMFJ0Zhfr9pb84Az
+            TY1slCRpBbuKTtGc0zpb6nnL+La6zOxm1Jlc7MknwhhdKWxZLlXguIdmGfxFFXzn
+            ECro24hMNzj4Htdt85WDtmvZZRFK8GkpvQejOv2uuTdktpMncTUsL13eGmPThjI+
+            gmRo2/ymzXUluqJLkMCmq1pGn3mZk/YufnfkDDL6dT1izTuUrBOyD2lic4U3wHDw
+            7WETkIAzKzBILix2e6jkX4Jgx07EJ/J2tLeYr+E9Agm+p3hDd2VQUKphtYQMcmw0
+            u9kXroG0AAuC0wPA8OA7nlxb5weyDBwQ1z9irUHf4PgEPDmbxoVAwiayTTw8+37V
+            mrOwXlFEBlPUw8kkHFymZhaDHw/ofd0oVX3Rn8SvfbJWHlrI/jVIvHZ1sZdFSxKv
+            LIcI8mSvmdj+nKhAEZpBaYmEYTuVAmTac3wwg/WhtOuDGx7dvd6ucrSYWG1JwyYX
+            hej/NQDJwTIkpGsmZptNObdCvcuj/avpm1AODLqcdwh9a5m7Jiev9lEAyqqcqnKX
+            a6lF1Qo1ShdgaSqDsBGddvVmkQg1lva2IwQ0SJytcNo6homccVSQcJP5G+uhTuHS
+            XgFNwk9XSR7nvhOao+GNgcoL/lq0ZKn7+kdc12R0uB915mYjkW4J5c68kR2/6KTE
+            zavt6ckcgNFNLZeaf7zKyH16KmIZMMOitgQp05dT0YPnBsU0L8ZjmS1hcjk9m7Y=
+            =upoR
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-28T00:41:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//XpQl+DTT4sHrpevknOgCbD1yOMpR3frEu4+B0Op5xm8S
+            LI1WhuuWOAkwEC9qlJ7BpuaAezcX0xXXXPP9xThIxLXwYmxen16YdOd8CANr4gzU
+            U0094Nz8b6Q8/VcKC/KOxal3xBVmM0h3ySoVj/UNsip6eNWA9buIKlAiygwehzcY
+            duULcjgtN30yQcArsqXZ5BUdIZxU9djtd5eUPvVst3llfFm9saO/w5+WxiPKiJg2
+            9S1tQNrzQGysSXCjUKeuxAq2YH2hCJWmJ1IuftGvtGyyeK6Kj4M0s5W4CSG8WoVZ
+            bsgJ/LgOgrse/nwaLteVpU29o3bZN+oAv2vDw6WJI7MNLPn6/Fc4Du/IbelZeh2d
+            YGczOvUfuBrQ+QqfbnRoKP9eFTbnoE8Wr1i6ou9lWyf0928MKVQ842IF4bz44VXI
+            8SAN/WUmy9syQOeNNLYhQ8O02DTqDIckWDXf/Un4JAWqhDKG3U0Qc1hdd+08V/Fw
+            uvB9tWfYZdGGZINRM3coJ1+9NCN6lzh2srggZCrFzvTg84+rh7idVy4NAOknGv/r
+            TnnxnMan3lwavjIlaB3I09RY1RC0ekBGjp/hbdR16XV7Ou4Grc3V0BPcpTidP/b3
+            z6HFB3fzm7nKFBMys5CcA/R5lelN9xRotXgu7DujfBnWVrhfJ3FO0uItYoVzO/jS
+            UQFWjkW+eWGLXmf46oJzRDeMqPjgOTM7aD0MMKXB9BEAF3Jf8nBSBKXisoSyP0L/
+            YEpJ/89DfOZkkL/d9WO4NSBORchroBQHzPfLW+ydRcTslw==
+            =e0t9
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/server10/znapzend.nix

@@ -0,0 +1,27 @@
+# Quick full backups of all service MicroVM datasets.
+# server10 runs services, server8+9 have the storage.
+{
+  services.znapzend = {
+    enable = true;
+    logLevel = "info";
+    autoCreation = true;
+    # override preexisting zetups
+    pure = true;
+    zetup = {
+      "server10/vm" = {
+        recursive = true;
+        # keep a day of hourly snapshots locally on server10
+        plan = "24h => 1h";
+        destinations = {
+          server8 = rec {
+            dataset = "server8_hdd/backups/server10/vm";
+            host = "server8.cluster.zentralwerk.org";
+            plan = "2h => 1h, 7d => 24h";
+            # just always work
+            presend = "ssh-keygen -F ${host} >/dev/null || ssh-keyscan ${host} >> .ssh/known_hosts";
+          };
+        };
+      };
+    };
+  };
+}

hosts/server8/default.nix

@@ -18,8 +18,6 @@
       # Define on which hard drive you want to install Grub.
       device = "/dev/disk/by-id/scsi-3600300570140a6102b0acad9825149f2"; # or "nodev" for efi only
     };
-
-    # kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
     kernelParams = [
       "preempt=none"
       # No server/router runs any untrusted user code
@@ -40,6 +38,14 @@
     zfs.autoScrub.enable = true;
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."machine-id" = {
+      mode = "444";
+      path = "/etc/machine-id";
+    };
+  };
+
   skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3";
 
   system.stateVersion = "22.11";

hosts/server8/hardware-configuration.nix

@@ -23,6 +23,11 @@
       fsType = "zfs";
     };
 
+  fileSystems."/var/lib/resitc" =
+    { device = "server8_hdd/restic";
+      fsType = "zfs";
+    };
+
   fileSystems."/nix" =
     { device = "server8_root/nixos/nix";
       fsType = "zfs";

hosts/server8/secrets.yaml

@@ -0,0 +1,202 @@
+machine-id: ENC[AES256_GCM,data:Ko/LrndeWRgHEhDKMC7k/6nRbZWowjA/fJXBzW2jLTI=,iv:wdexRj+zlYZ1NkS4MjQvbh28iE6UCUgDqvTeEfxyY3c=,tag:GSdZ0FhBS7PBfG4OfNiCkA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age12jcu0jtw7m96evxnd0vu6lvsm8uswslrdhxd2u655vjrwhljmqdsptry37
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWZEZhTVFMNkNSNUJoeTRI
+            UzJybTZYYkdlTGFpVnQ3cnQ5TFNaNDJYOUQ0CjBaY2xzMnpsdHlCZUNCanF5aTdh
+            TzF1ekREbzZ0cXlqY3lrNUh1YUNJaXMKLS0tIEFCL0srdG9mcE1vMSt4OXduL1RU
+            UTd1R1NWM0hMS051c2NXeGQ1WGNUWEEKZfjNvvKEtvYWfQESKBYMWL8e9avJJBHf
+            U9UmDpylyO5HbaXb9R5CqwTroxMurr0hfBJ5RSguVWT7VNlBA9w0sw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVlV2ekcyYkVkYm1sQ05p
+            ZmFSYmcvQVZDMDJnek5TOXRUVm5vTmEyRDN3ClRObTlNRllJUmp0anpqRjhkQ01U
+            Q1hHTUh6WjRFWWdsM3Iya253ZDlmL0UKLS0tIHliTkF6azZLNFhxbVBYUGM3YW42
+            bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
+            iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-27T23:54:21Z"
+    mac: ENC[AES256_GCM,data:XKBsQ2dhGT+ifU2EoCONcFpPtVzU0q+GkRn52EfwfjnGSRWggv2CZT5CE8vWpM0oDtsv7FYClmyXxDssBLCY3KmkGW39BXf4uTjg1WQItlfcK4iRqBwa/2xdVZEXhs+PvhnBBe+nzHMVGz0l8tKgK9SSt8GooaJjrugZbcLPg2s=,iv:AgHjkh/pTKRcczCMnMlKlY9X/LWHp5oiImcA1MH1Ei8=,tag:L6OFg3Vu9G1Lec0LkdjpHA==,type:str]
+    pgp:
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7AQ/9FXgFJ4wEqh7/YWban9RoQIpdtJffGG12QRJZRi8Il8LJ
+            oNPND8vOa2v9S4pVu0mJXnAloFNqsMBnuE2Y6mwq3q7pfc3IMONfAaIH1JQFhOLf
+            ojcuKX4cq9O6SpjzYPy1Fe3nLNqf3ZgvsZQTJ0kEnIkaGeX+xbDMUfQK+TKNAd2S
+            2ZXJ0csje5kXpwHqrMGqKTAnwXW/5gR5QAwW4a1dWBPJGQBaqxjadzL6wl0iPY3u
+            x4f/pJc1xI/yLKMsoPDP54eobRbXqGOkn+kuSB5WOR8nQoQ7aL52YSL3qclcQYdB
+            hvuhYOYaz7zQ7mKLzIo3Rbqd2gqMQW1Qz/Jf9CbMgmZyNCEGHWdS/Gfax+kfEUPv
+            ZkU7jgpw8pUJlNt4nNuLZX7evIc/zQVJPcy9CpG6IUZA5kH90gr0IZEMxTDzw7wX
+            Dx5DaI9qSsx09UnZ2bqXaPdcygdJNsE6R/JvHGlr/zm25M70j4h8wG389pVQ/xOu
+            LEhM20YuaA054mtWU+MD7f6RuaijU2VDvi0zYaF0KY+dkCB634Ob4XT8qv3Bt9fk
+            AFXFtRz59NTUCy9rpONvsN99YMa2eahr5NODDE6PZehqYeHvmyzVGVkkPrPrvagY
+            sUylQ+HfPfqiP7ohzAPYLhU6bnryBd28o4ki5C5RZkDTFQQSt+v952rMU5BokQ/S
+            XgFxVn1OOvxuZ4HVph6R377gLdFk4b2W3dN1fuR7HscUW+HtAyDwe8y3Lq0zDEQs
+            NHEbS1T3th5Q9u/wKrmaczRDG0OB4t/tLpbyJiIPZ8PMXF/R3gL//78gTFDpZc4=
+            =Z4gm
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ//SGQaslxQn4ZHMEIRcTMDu1qnw0Rnj/7BO1xwbG0svA1G
+            wHo3Sf+K1oVIoXGNl8Vhjzt3plqVx8yy8kd6vWyWHjpKVUE0+IsZ3lMXmbzoAKYg
+            WD8zJz5wDM0YNAZgyy3i9APPFIYPROxayT5GvkwkmmDBtjx6vySxknuX9noVcTI3
+            T6A+CAS2iqhAfXUtV4ri4MooYpvJHy8yMcMI/JRwvTMioiee8MFLIGoGXVdxLSFi
+            0EjPCNp3JcduzS7TS3f1wHhYv7hOhhOcThV/IIRsrKazAvkFAPa8ML3jjYxTy1Ye
+            KmffLcGvYkiiFGAfYGAucpxF9pTOd1qaFso/mYvmPVjzQ8sq0g4ItA7CZbnKgM36
+            IZDywv1Dl7r4E6VCRMdpW64rHSlxbxlVTwIrul2GmIt9YqoH/oUFp543CrHQ/I1N
+            +2JvarQ8DJS0Ozc7+GoPq9/eCI+dBWcnQahMko1uk/Fu1sRsPTiClfuAo17tFows
+            wZSYZBqNnxl7ymfU+o9MOGYOTT6vZBKJDx8PrCb03GnJemQXuKDL9fPdTWN6RY6e
+            i9i/Fn7T33LUC+yNEsIjbAOgq5GUm1NWQUWC9cTWL72FOy9eUCRjC+0C4t+RNYXu
+            wakHI0nUFjAraNLqAuUSzTFs9ChC30Q02w6cmial7s6lPY+8Fuqp6o/kZnrft7DS
+            XgFsf/kKMkKH9v3FiIBSwy0p2bymPQDw8paM3p62Kt693gNVg18vvP+Ivh7HJ5aT
+            cyrIwlA2rRaloVZZcmS/EzN1H7Uu1HCYm9M4y8Vnx3i+rJwMo1I/iQLK7B3x/Cw=
+            =1Nlf
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAq8xRSm70hqYtuWeMKEucRVkOlrC+zC6AErrg/nhU5rDv
+            XvCudRI13m6RpkgbEO5UyGJB3AviNHQTt1/2plpsqsDWnF9r/CNAN2nuPiRK2yuU
+            nR+hocOdIGQYpZ58lGmb1MmCbT9aNmZIYm2o+T9qktWTbw5w3MaAIQjAsV6tq4o0
+            Ma1ddOzMTj2z+hVUmUG2kHuDGlLOyRJDF2xT4c2y4mnQwHt5jL3pkmmM45k00Woo
+            6EtsSWAHdIm+uNzO4TCIOmopHFyePCY/DJ3gldE02hVvyBJ3wa3Ca1AzYSBfuYeY
+            rUEFrtIvlJLoOuvBvU6mUfIJSD/xy177KOYqbifYfNJeAfHnJLPrh8RSpUdZtAil
+            iMFd3zNdRCs/RN4kq2GX1viUJgSECxcNX5Jmn1DQ2gkX9EhN1zdSLM5rhhNMMYe8
+            ma5AiafxHdAfLw2J0q2+/x08OeEbS5celrLtIhqboA==
+            =9yCk
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ//Z79WDPkv8v7XLaHyevqLpSc6qh0GHtRyQQ46DgGcb15q
+            FnOzD7OTkAfr/5F14VLTXoEiXoVUwOoYWBolwAM70iDMA7+DL1rJlrEZ+e8Ze0sW
+            kjMTMpf3PmsU22v8UxwIIs6FhbXh7S6KX/mg9YjQRxYLZlteDrq85Jwbg+xTzSeD
+            Mclmvuffu9mC0GpOICAW8xFddSqJhjCrTzdLNXcmfgGlYELA2i/zbpOkJuWoX2o2
+            u78I7x+4/F01BfY7I44DsWQVA2RoYdthho7kuZ/vSD4pbtwC9HQQ+dxOUpgxhCS0
+            C3bD8K2eGTMwY2O5cCLru76vt/fb1UqTlhWStxeX0KWpyOmlWdrhXcNXbkQEZSKV
+            jhHFpQjj9tZvNj6zt5VVWD+mhdUK101sC5X5GHz9fNvCcrL81AFNij/eduASfAvx
+            UIlzws9jUJUrTfUMkSr9fYfz5zbNYg6utQ3iSrlnRlbst+N8B7XGaTZmn8F5IGY0
+            jtAHxQWxSB3ZAr0GX/hZiu5Qj6hD3sS1N5kHJ/Ha9wQyWDdyOl3T99mW+sxvwDS9
+            7H7Q7wRCmNNFEgE3pQ0FxDcAfczAyjCLFen8hOkhJiM6GJeBDGMX1agBUp8o04kJ
+            k4sSdHBX6pl2z1tor7p3RRNXApuJhRfZQq+Z0wzXoYsfxWSL8HwO+fKoPzTyMr3S
+            kgH05lxFLYhE0CBxNp4dLcknHAxS7KMSejVGQALcMdjugjheoy7G6uTOSdE4v/Cb
+            VrFXMPRWShRSmYx2ODvimUZjD0Cb8YjyqYAnaEibUeZBS/Qz2876/9eBu8AWIn8V
+            LNNc4HkaJnOTZzwnzF4MGoCPAkrBQIMkNkZk1k22NG2vu4iKeJU5LX3PBSQscZqh
+            Oon3
+            =/SQL
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ/9GjiZ0oHSeK9iCGT+PW+5bi8Kisd5OdtBXeihIq6W99sl
+            xfNUsUukUIqgP2ef9Pnz8IyWxBr8Njx16XGbNEv5NQddpx+d/K5ZSGZy1QGNBTLv
+            lsngqm5bg7oZzqm4XFUgvF4AlTkCMoYnRtmI0xP9CJzM7NPvGQoB6Fck7HdDfHkv
+            3i7FtyZeWk+YQ0kpDSu+XyFSB3WFFDlGn2wntYM4LCyhQvkA1HeArrKETPolK2/p
+            wiYYBthV8L2ZuEyhC5YPbplhFWtN5mPcKNhT5XHcPkdNT5E3BE2DspyJ/U3xh44V
+            5Tyuy/NchALj8v+GNBc0C0dNhYswtLjoSxPeg9Ab+jomOX6Uh3mIA9O9YydmEAc0
+            LD+H0IP5pKRze7FUBU7lluTMFCaQPAlBsUsr9zqKQtA76SEeaJ+aFoEZi+LDJQZr
+            9Imd81bv0hyXaaVW41LvTtuz48Kuv2liELrZZ+uK8zvzcXz0q6awFa3AogJwUcE0
+            exohJ6RiUdXOVUdhKFihu52U1bKPpRBmzpHHuK2M2suQVyK6DVMwMhwHbBVDXATt
+            ewDFVJ/vBOFdisPOq72Lplc5Km5Ch+UkoeNxkUxho0JTXZFoPgx/T0ELcwUOfdNH
+            bmCRXsaV0RibN+JaOVHJU1esYgamMXHdBTHS/0K/1JyegevPT0L680ER9is/MS3S
+            XgGbxMF7o5+1FeemI+pLVo0+fttKZ4D33JssdGi71vEWsynA1jMFAI92ZAO/oB+U
+            wB5X2Uud3uaUoI/Gfbw2k+JUlc5wOVABqthk7KThnNp6aEHovWq1z5e3Tj/ZBr8=
+            =KnWf
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQgAgXlokBtKUCEngNc1G/FjaNdwjvElB+H/XvS8LbAr0f0o
+            sMlwjoYND5DEqcR6fLOPoIwcI5gjkocEfMf4VjSAs95XXwOLs243OnwU2IElWIOG
+            0KMoXJJPjQdpq8Benl9nd1j6ZTf/4mTGQ8YRhSWU8AlDNUvoZTPI7U+8I3ni6mZ+
+            tUP3dSX4lSTDjr1GzFD4P8dRDfQBCl1R+2XJPCG16rs2xlcxXDnDRC+EI8Ot7Ksm
+            f5jrDTXs49DGDZ/FWFyOtG8IrI/TnXZcFtfzip+/dYMBJhurFoVbzEYXOV9qs37D
+            GJGdEuN7jCw1y/HroB3nfO2xeFZuERcISKYT+rgF1tJRAR4vZwnrzNSNCQxQCals
+            bJYHYLnX8nD2m7cbUx9YDKWHBaZ3v5BT6OaRsXIBBanbYmEW5OLP/eSsMPio6qnI
+            WAwwpVL1KVnEGxvyNJf6gX1I
+            =0IIs
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+M4+3aN/m7vjcfS+WMK//unQLn4Jr/BEa4Pefx0SZxM++
+            JFIL2fxkHkHl173x2g7br/J1olZ+V6L3wChLrwjpA/g767urBIm3ynS1vxqm/xP1
+            RWqsuwZjqTqM63T9EubuI19w4DBpLQhUmqk4Mz0E6vigT9n3AJvMHM/MICo2D997
+            F0HGHoFD19o9B32Qn5m/nQOD6Ha4tl1ezzYesOrebbvUMh+7Md3MKsRsS9id/TGO
+            3LvF1ndeBPznKbc8Tf5dtI7CsLs8WmEXvAYLA5o0LxUHHV4clHc1qKkylbX6SBoO
+            VPz9UKJHKbLeAig7d9AbfOFdVX3dvFQIe7YDIo/7P4dpgxAOvZz9P5UK7JpMwLLP
+            6G3wLIdAy/HCSCaJrIrLtXrUVMea8s4vyPa8S6zgf400WW8Kzni0yeKlTR6gJHXQ
+            rRXEmh/3XHfYvhroB8BXJXo8XlUAouJ8MRgPtfPmhaRGR0mUu4CvK783L4/zkMrv
+            6nXyvA2jGSt6C/dWyQJO6nyAe2nFIk+y0GUSFdJRmrJsuU95d0MNLhgGaF9NwvOl
+            tT9QBdAtWRQFIspUQIoVZH9lQY7M1a2wQEavYn1g+9P4ByB36fcZPrZ+MkQKewX+
+            vLOaFs9sQ+VYO7SPHgB7uWudesKoG67t14U2MxrLIvEW5boYwLtVrhdw+o18a6vS
+            UQH0R6frZHgTp29FLYwbRWdtK6Yii9/NAyvNwyniomhJMeyOQZ5d4Tu/YImhhfzn
+            2hZvUlVEvcaQgAyom7msiNNJP8yd1nd9R5mHwuZcQI+x0w==
+            =SDo2
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ/+JWR0e1bh3d8oLP5zbMK8sde5lJtCgTfFfzYZA2yDJ0L7
+            ytJKizgEc3VlDEOh9DeAmnb7xY+7aNQtOwclN8oYSfk4V1QfaTl28Jsh8c6g2KFH
+            kBAy+sz9HP71OYoK4IxkIkUCb7qnTE5b/4xnfsc/EbXAPlLtB7z+Y4MltojnvuKM
+            Z50CNqMgKFkx+B1isb0n8+mBCTilwGxYcR2yE06Za3DKCStVJL/RLgm3e48n7wyC
+            cR11dS19MRmYBeRxxyG/pOoaTBQ6KJltZ2E0Nk/i5n7fQoW/931otEwv4x0qGY/K
+            KsMEmyV54Dew3Cjmtu60RHfP3IuFBSvFiuz4JAHYGeVm8SA7soIh25jj/dVo4MEt
+            jOInLwydBCzRFgyEzmBQPfe5luSn96A7vE2cncSkjiIaF+PoxeWFp0QznLFSb6iZ
+            /xQGXHX4ZT6R9A6a/nU836TI2s9NOEtt2z0kiMoPYlqeFZiWv022zPqMECG730zt
+            WqAv2do+8oCdDJKO5d+6FvCuaTSbB/g3FLapdB79lk1A0kJfhwHVvk7QLY3GJgKJ
+            ok18QcMKyqh72qthf1w1vw7fuXvSEm+J5MOLMHwlbAjXmnMf7eVPoGgisr3tQlfx
+            ptPVJhxQHKEKT+t9+iwFbClsf+jt9Bh494x5UJ+W3dsnrTWmQmokj/L/bJr/ACjS
+            XgFIgcePAhqkd0hiNM7JZVgzejXLDBYdc81nDJUR19jig1Yy14J2ywf2DPTaFZCO
+            BaqgRvx794I7LSM9+s28mVH4xr2IIdVC/TPU1d9CNMrMGDCnM9VVpIgPTJ+Vp7s=
+            =K8eo
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-27T23:54:07Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//QyFiPKyykkqTP4mIDndepTuzZRx6g3Le3rBccLzj3w+y
+            JJYAJqdJhjMZ7pyv+T4kdrLzC0oy3ukoCtt4HyN0iKy46Yvsp8O8z39qq59KwSvV
+            Mz4Yw/3p6v5/oc8fEHh6PT+j49qGKydh/IBrE0hyiJjl+oZSJvTOSHcmHxbMo73f
+            Zwm3PovwLjgfaQdGWIIq9Dxu3khAWahtaHePbddwFdJG1yLsdHICzq2E5sugZzfN
+            GjUpurCYxEHjxj6VtQZ8La1Zh3KLT/qIhEe5oYnTfLZQ4UK5RB2DYHkx0lx6prIc
+            8GLoHPBWySSgA7Lb7GO19Q47p4/BNXIk2Pob415xSShVnwpqIEG07wYQ5OFeQkkE
+            0Np+2CenrFfb+3rmOGYenCBypcPq5SzbA74mNZmoKb0NpvVrMQLKHPsXA5P+qJR8
+            n9fyKE2EeudewGd+L8T5UEJvZbattyZr3teqRniGfnFY32FLVXpWAg0S3hgzpKBU
+            Vq6TYW3khoznH+faFvjN3knzUIbRYp92X8Qs+A/qIlfckkGeAaRbsprQ0Pp+vmWj
+            F+vIMOfmJPnwPTZrjmnXjNOwtBcWX8Y7UdwF4efHwAWoCsXruFiV6ZsXRKrhkOG9
+            twDOdRoAdUQV6wSxYFpudQPgbLs1M22REeYujcrdMmhDw9c7xCETmpkDxT0k3PTS
+            UQG5d4gWggcXz/NUr+Z3hUGetAf9wvhcPIOpaIe0SHDBNLRd3hb8XACPsyKtqi4j
+            WgYB7DfkttcwdSa8ClN6KCWtkjptoma9cl2C9C+tIpYpXQ==
+            =u80S
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/server9/default.nix

@@ -17,8 +17,6 @@ _:
       version = 2;
       device = "/dev/sdc";
     };
-
-    # kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
     kernelParams = [
       "preempt=none"
       # No server/router runs any untrusted user code
@@ -39,7 +37,6 @@ _:
   services = {
     openssh.enable = true;
     smartd.enable = true;
-    zfs.autoScrub.enable = true;
 
     # reserve resources for libvirt VMs
     nomad.settings.client.reserved = {
@@ -48,6 +45,14 @@ _:
     };
   };
 
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."machine-id" = {
+      mode = "444";
+      path = "/etc/machine-id";
+    };
+  };
+
   skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3";
 
   system.stateVersion = "21.11";

hosts/server9/secrets.yaml

@@ -0,0 +1,202 @@
+machine-id: ENC[AES256_GCM,data:YIOQJ21rswp+TE6sEKdNu0gP4iJ7K9ohrdXJRi5POoc=,iv:0Qd5ukdhpqQxrE60I7AVX7/U7oOsMvE7lDVXsB4d290=,tag:JbdNljkMRgjvPdxyUhXuIw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age15vrlmtckjf4j242juw7l5e0s6eunn67ejr9acaztnl3tmvwpufrsevntva
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKR3pPUDJPeHpyRWU1UUNS
+            ZEhFaUI1UENQcEdBL3dzTWVCenIrWldBZG1VCjNBQlpyR1BBMVIyV3RUZTAwTFZr
+            QllaMllGcDVMYjdtejBGVHRtZTlieDgKLS0tIDZOLzlrNkxRMFFXT2Y0Y2RhUTd3
+            TGNSUWxmQjR4WUVqMHY1YTF4RytqTGsKQoY1PKashXKl1zDWv8tyLCab/8lwLvou
+            5MiGLakKziUiXiVHg0+G7h6IdjD7xY22AH9vfgxSlHHSeyt5UWOCTA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByUmVzKzI0K1AyeFBZUmxB
+            dzdpNENTbmJteFZSVHBOUkhvaGtoYXpnZGg0CkpWajFVNStYaFBRVHM0Z05raERx
+            V0RsQ2R4ZXFoamI3VjZzdUw1YUI4MHMKLS0tIDMzWjVLTmhqVHdoOEp2NGhhdDBV
+            dU1TaURPUWFOVW11bVNtd2J4OFhDMVUK6YIU1s2aPhY3HL9EFrzcuRoFObiLjc/t
+            HOFh/iFJd6fFPia7HYLYyJ1bv6Blcz9K6I5i9Ptb1AM8RUrBWC7BGw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-27T22:16:28Z"
+    mac: ENC[AES256_GCM,data:HYNf9KMRrLu+o7KuV7OQ7ixz0LDjy5YdHywNYBpkSuCaTp5RXgjJWnuHA5E3lqZmXj1gm6wUmZPA0fsvmBfXVNhdkMVdn2WSk5H8ED/ayMw1Th6g/0MlVYYMWOPvGKY7ZgydiexBJHuqBMznCkSyT1AzGxDu9yVaWXUTkMiaHFY=,iv:iBT9vCi/K8Go85/6Kgp294h2R4QXFKNZJX8yGW2MfU4=,tag:z+Xu9bnLxtqfK+G9e+o9nQ==,type:str]
+    pgp:
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIKA6j84+xkv3y7AQ/wxDvM9EQcGvA2EVhft7ztJqWn4ruMxj0oR0x+kSPY4gDO
+            y7LpEwE7t/vMgUZ6QGqs4gUffJKU0NZkF7P3Tf8qhACLErBwQ+s8RSHznfnPKCNl
+            sV4lNV4R/M3OQqoc2AyKpeSIAKrxvD77vwYGDm0GbfzWJH8GIyLxOJWvOZ3r5HVl
+            UTxD92E62GOKgtxhVINquM6cUDwXHdeEnWnuiuXXLLumApdEvdOmJw5QDFmh/9hF
+            B82s1HF0FctgZPuK5BEhfGdyhmILBhAZaBjfr0lqLgpcUolFnIUq1vkCrk0XLpAR
+            zN8zQE7abrJr/V5h8VrrL2/GKmiY3hDgS4YbvK41LO0h2V53EwS/kvPOAezevlRD
+            ocZ3L8uLjXnH1VlfJhZbGivVKLMEGKgvCVzhEgYj0KtlZrJYPCUAVv+EbKoDTZBp
+            7wDX0lq4JYVkkY2odkWrFoHoJpyy0bxJoOAnoYKrHqrg3uJP97MmyK8HVp2D+0+p
+            6wxlcxe4Cg5b13jZBNQta7rGLuPlSK+y7GJwWcQLx3BZ+XyYJDZ7lJBJA4bYNv9+
+            YhFMbOlKAf/dQLfw+N96+zgZZAPEr53lL+tLZSb1apPw0kB1wQxncrHlAIkofIny
+            hvCF/jUr3tk8lI7Hm8SMZy5K5ys9Wde60P7oGUo8mGzzTRSzF54a0fNioWKz0lwB
+            vFx1TqAA88Xp+898QvizrIWeFzI+l2jJuMQ5HitIP7bkU51SL2jrf1Qxhmk/AwCk
+            1EEHzNV464CNMEJAGVRUdjpR08124WHUkQHIpCRrJu7dE5YhucnxYKBiPQ==
+            =s6Sn
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zAQ//WnAvgqpgeIW6qqrcF5FSdpqbdKkoQDFVqUhkhDCpUhR7
+            LtdPH/GVMQifUQYkwm63dgfEZ0HD3StS62G9lu+hZSmHvwZiRCZMglkSKQJfSFgj
+            JuiXABvqGEYLcd3uFriNgtng8lckAHv800imlw7PwQWpiM8MziyNcOsmBrHmCT34
+            UkfoEn0qtP1V+WyHexb9YI/juWMrqNy7wDdblWe3AjLEhrALd4KHpgLZKUD03djx
+            oHfhzeVfZ7FQBM5j5i4MtVG0eZjUAYfmf6zmWajJbx7VmOaWaJMk7uHzUP31syL7
+            V6FVCv1hK1QV6NESnvgkD7q0zvE8AJQ0yjAeco0KwWgJFB/GS8p+9VrSAPNhQnes
+            C1pdsoBE+jQVC8vBeBErJqFN++wu5+OlTBXa0vEkPovOUP3IGZS1JDbd2+uha1CI
+            LSYdLDJSZ49k6iRgJWjymoc49QOs6g0NfaB6nX3bDiIYYxQWVOl72mox89BR6FMK
+            iKncZIOyLmSB0DaPKSCe+cY9aJm6zFWHytlT96Wp7nmi7zoxiIwJjuqI+FF9SOHF
+            x9/y5QywrVpQg3m2mPb2T7fSZ18ZNHhXMMK8cAE96gYfU3HL6+5E5UOgTqKYmjW1
+            kv9JREmQpscdYi9FALcVm2JRQqSXrbyJTnnfJkmfVqW1wIB3C5maJGcQijIMnmLS
+            XAF5NYrzcz6mOe0A5Nu+r/RNfZsqB61uebptM8PX4pkIaRH+IZE8qvKfwdCPnpYm
+            Tig4JHAlETAujV5koS2aolWJe0xDSfuYdws6c8dq4QSIqDSCKk1rfR6MC7SY
+            =rWN1
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQgAsVIrc1SKnVukuy61FP9PvkPQpnxOlqjjE+b0q3GkBQcC
+            JJQx4UryqBE07lF/hs/7MiLetWtgaV5kn6AEYrw9FNpj0+qYmwHbRXeJqjqi7Mri
+            05qogE7dYYrY40JdLmvYsqbJQis7ULS9EZCFyCziEBlrZjYeqUTW3Lj1q+ZiZ14a
+            Iol3/CzaYsZLuw6syeNtQEEGkgE3uVkOLipMT4sCNa/kR+MDz+Ao0iyoIr034KY6
+            CMIU0nvyqDprw5mhqFosAZAbp/adOLyTBfCH/X186uX3mbnsrFU0ow7kBzslLg9J
+            YVoOrm9lwX7pPeWrBr0zJyD/0+KcfPUvjQsqNeyF09JcAYTVgIC5HDkTJWxCIrxT
+            nAFbfr6vVGst45al7AYGT9G7WDLct7B+BmgZ/4NCAx+oAvu/d0PKv5SToTdBCc5g
+            Q/XFOqK9CRj38jvc6edgR6WZnj/faiZIOzSArBc=
+            =d6Gh
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ/+PaAdk+yN+rTnyhsI1YNfw3k6D9+1kyLXS9HfyHXVppAA
+            WqipuAwYO0pKcRaVssARzumSlaAYWjbEt3d/FlaNMXBGyL8wgWQPdmgTRiwplqKS
+            uxhr2wlGgB+iDsF2kuwoGD4ugpY2HDzWkzbKMx9veIXbvQVTu2wpuhk5osfzLCeV
+            hHdByh+h8hl8jQ5E99cc5l2B57h/XuupxcQw0cvhBAazr1yIUU9yNNthv3ToCRVt
+            CiTOREVpx81pZDjuT0eWEtTrnTKmnRc7n8xVBfzAD7H9Y+B6qZYkjyXwzd307UPK
+            PXuT7/AHz/JaruuoLsOXJqnPwXMu3RusDOcpB619TdbFGfokmz2+Le/itkfCh6aS
+            RptAK4q2gxK0NsHx0aZPUwiz98FDgWeWXoMnyTQo52ervoz32nFyVpk1LQWl5ewY
+            9SV/W+RlAEdcr1/xNdV6xqnJ7YLYnRLj0uAApPMllubdyHX8PbzwUfQgbIBuDFiT
+            MdL/D5r5AMBtUxsAn93FJgi5AzriYwzGtCDx8LUbD7g3RtWxGfHCiHgX/Pj7QFW9
+            wZAMkvg7KzmeDTxTRcgCsIwvAe65TrwbeePkna1RY2ID/8JJL72yfQn9wXRjfTFq
+            hqj4C9PvGlCDJ0UEEiJp+hkS1DaOgPZtqDozgHvP7cd1C6A//u5ia1ilPLaHK//S
+            kgEJeUERsYctipOYQQHj/icIgk0Wu8955tn8Ce0PjeaT5OfhHOT0FKXT68LxYWis
+            1gNdQnHQC2GaK2wM2YARUmWqZ+qIJ73j53Al8/3cD+e5wxwj59nuMtvbJbRuwSFf
+            x7qXxvrmcsnO2h7HmZ/4HSpbD5Cvf76QNpalSA+kwIdIRkiT6wuOQ/VGTleVufqO
+            +djv
+            =xfeP
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHARAAmBW2eDCgIyl4CYtTzxiIqPhmC2EI/t5TScFTtxEQaj4S
+            b4psHOypZeeZkPYHSGr5685n6fJpzxnu+GGc1lwEdG5HCiOMBCtqTIQzovVfiboO
+            zkbjQ1M6T9HqXyhPO1XZwLHh/OUm8Uny2WldnDdCStzTZb1i4azWg0UXyoGPLnm/
+            fZWBkjDcmLGrjbddc1fWrOkGCfl4iQUQvKdRMWhx2pu2ADDaodiAS3VWD0kgnqKj
+            k85wRS419RsnNZGtCB0gWshf6FrlTnMPi0fp4ewYzf020yMoH4rNRICpme+tIJej
+            cFBvzOoFhLBU07CCpoUZlGn+ALZSN+tNr5fyiB7KRQ/KeMvuTWzck7uDYlV1qeE9
+            xp1DanE6cUXAvJWr5GLzaxR2m2i8DDQMynEfO0g9mwgQ+jIkk4ke09F6Y5iQsBUz
+            xfqYvzWNB/7FM1drq+hqe25Fk7gsj0kyZDsRNzImOYZX9CbRd3GQ28LW8i9QToa0
+            ELLvvQ/nRDgplkeWifkTDbB63G7to62UiNYGysxcPsAlsqOeGWZ7MP2ev5vjAn2d
+            mjmCDBhYKFudppYYytXKQ7hCYi3GX/CURZUU7E/qVYFnwxtluZm/9XhKHgahSy3p
+            ZEvC0NT4VUnqv4zxUrnx7K475MAytgNIXkX3/UTVMMLL/tmo6h7Lff5RS697q6bS
+            XAGC+7eVNH4C4m44wqjyR2H/+8I799Eobq2Q0iV0hf871ptHDD3YadaoPeAuNKW5
+            V0HEw7eTg6oTyuIvWSKdxN6wWOXFArG/4CSilCITtPQAIXi6cx2wFkXyXYy4
+            =5IU5
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/TnnS0UHk3IzZ8rMHewTSAX6wgU12fyPKHPH6ryPaSkWL
+            bH62/yrCc1ZpkUnt5OINjZZag9Lw+jwIlDiV1iGCN8GDfFRob4vO8e3Qb8JjUgRw
+            xQsLzd6EkcAdsSYxG0GWnHTlCu8m09lF0acurMZlhE7qtle9X1ZDOHyBrWqzPcnT
+            /cyLylzOzDjdcG/r2ZdSMjBsxMC0ZwoBmBhYSfQpmNYHMQQ9FybWO1/RxEcsvi+S
+            7rB2HWKZ4kdtmnH5//KZMiQ/8pUknCJx85sAeYqkpNq3IngG9zEfmwoJir25Xm78
+            Eh0c5iIn4OXnwSKuWQCupycwOeoOHUJwfM4oVGg3pdJRASeaBzzglSQyqMmDAwBY
+            QiWgzlU5Qc4UMgVLKDZDGLaG/8ACLQEIUaGxlKoG/WmIs2MryvTRXJYDLDttlnd5
+            0fvLxyBxMgPzIYKIx+EOS4qB
+            =VPFp
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ//eYQN29btNFphtGMGBQWYGV6TH4LxIoGZ8fF7djV8zfWK
+            be1LDZcroqu8yooFd5NaJOnZYekAvcz2ISeDfZW2y4rdMKIJyjtk2cGJCtq3q/Ry
+            Nk826sodBOo3YpgA/CHU+7NnVv3jtnFh9n9W3hGZKtUs3cl6xP74jDBpt6FPW2I9
+            CetMvhhIqsfj9L648dd5oW5tPGVxvLFrst1XoNOtxBYadbbwfJqn+PbudeCBj9rl
+            9zKEQvoKmz7heGd7z9p0mv8fx5b1DA4Fq/VV1YiAJp3Pm8jdhkdmNoUcH+SRugNw
+            WknyEgZDkQI0ZFicGCs8u553c0IemAudlIuIzt5a6jtwcvTBj5hQsI+nbBVRPU/b
+            lkNFCDnr/dSsfn6FW3Fx2PA0FcAfEIQx2dUuPkfi/CcZn2UuKGv6lYQjdaXJ7kVl
+            nyXje8HRb317ibbhjWY50Fhr69dS02t2HIF04MWLY5pktB0E03sMDHLbZnkWoEnB
+            ZusMBf2puOaw3KxRdC9QyKwhjFgYnn8Dkh23J34yhGc6rCNQpZ3cD+jrwDcg1WfL
+            TtnYAwpU4s/RiSL0mD7exfodb9GEtGpaj3EM9RWbSkNdIAoL+0tclnXr9ln9FNOe
+            A9E48BxDg2GhNElts6Vt0dKBwxYjCquy0WjPWa/sfrOM9z85WanLmgTFC3ybdhrS
+            UQGxYAA+GuiNUQIxVUuLmlXxYGD77SLouUhTYXnvcL/K0/BPu/YQMWBE2JUJtbgU
+            tD3EtkQxuaWtJpyjCxPujPyFiizWhtznje83mRwxm5sgqg==
+            =4SBA
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ//SBOpDkA6/S/M3WUeo4+aoOqZ2YygN+iv7M4M8KCZZ0Y4
+            nk0+HB9hEMf19OkntJ6/lt3+b2xL3XQYU1pJ7q7f62LZ2KENDCNRQmNYYMgP4xYX
+            1FJbiVb1TZNxEyqxsiN0Y+pqWFsaXSyfhfcKlLLPbtmmHNuJpWX8dXG85PPhi1Cj
+            nkiuZD6F/5L39MG00jURqAScLWSU++30Kuh6wIHBK+fPAfAvQmQkJWoaLKWYnDtJ
+            SlQAHi4O8Inq6wVSOKokTY0DX78q0Be04NQUG8i41f6YNYAIrJxu+t5amRWSBmql
+            gpkpx4YGHfws+IAKlxpAfZ5nhq8G5vU/VybBQlAFGfY0X3Gzpx6kOb4ngG0orHWN
+            KZKpMlBEbP6hCrdRzfZ6XGugAV6me0GfrJDbFumn6D/BQ+WdinNR52gyHye96aSv
+            22hZmCo3st+Fq30uilBL/3g8kcCAi+bexxDu1zNaKAySg4nVvpZMH76toRyCCw4l
+            FtjxJt8v3E9LTgntEJbbYUqBse5DxsUksPF4wmfUyoisJrbaJ3q0agRdWQfq+uBE
+            7kNvwBgpUfVeoAxXqlm+0LkhKSqBV+If0axDICBkCf6634x5KIfXckBf0K3itMyd
+            H7QBldJp6w3DYKU7fV62DcYcO6iFqdNOUCdw2oLJXzuOovJNiym/hQPEYwxX5w/S
+            XAENZqeZryc5HU+XhKxPZ26DTEDNAgvZONxQfJLItx+nj3K/9uEn8zCmUGDIWY2Y
+            T0jFltGebDnUNYnTj/j+/UwMOsHn1yyfrKlsm78zeLSwfIRNvc+TJ1iQx/f3
+            =IcgK
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-27T22:59:15Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ//VQR8lp5KcDlTVSPdqsBhb7OlCVA6x9gzpnqI4sYABjYc
+            OvcQ1WJ3Vj1dCbsWi9Gs60vboCub/H9TCaXYgk3Zgc0vNbISD1SPwy0OTPc/EsCj
+            BgZ1paZ3iWVFmBGqtwOqAMDivw3N81RfH6Gyj566VIrsjKnAdrOWX6GjVc5WzU/B
+            jrKDz+eF71/+XrViLc+59xrqgTbjBoKkd+RxpjbvHChvcV2zpwGM19daH5sKKwLU
+            xEsFz0aqzTM3wXdACUcIGkSCF+PzBLBku3zlObuYCugsyhWxxt4rmKrWXvVQSZVK
+            Fw5z4IbDx87PF9570eCcwfQ7Nr1lSk0AUosPgot+fLYRmrQg3kQ6PS6fb9zJhiLW
+            rK+QfDedoP3eeH/H+nKSZnGVy1WURqC56FSgnfplIxHbD27IXe+D+rIGlAus6mxd
+            9bn+xKdyv8OUxhUnjx3AuuL1H2weGa7XCSdM7qz9buJHBC5MPDpxF2/yBX6CDGz5
+            hwlZbVzZLU/k+BzMZ+xJijlDdJHZyNcHZXB+qPVXsndqFMSrTFq1O1vhyzD5vC+J
+            I7wH2l8IXeF3LlnsvPJyfxF3PM+vTwBYYvgMFEsDk/1Dp0Qwm/3GXTPMknFYdUMd
+            XkeLJ61bCgDgEt7VkOg6HaBdcGiiOkyPp8MaSmX472r2cv+o8+yv23z4dKfrodHS
+            UQH+4S2/851leNG4LgdSUtwxOeuu0leKm81KAY052YWdl/QKZIyVwO/ubbD6oLSp
+            xR98gOQqtEYdX9e2I1h9TD7HkfA8M36XGnJM6WfMWn5j9A==
+            =XAdk
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/sshlog/default.nix

@@ -15,9 +15,6 @@
 
   services.nginx = {
     enable = true;
-    recommendedOptimisation = true;
-    recommendedTlsSettings = true;
-    recommendedGzipSettings = true;
     additionalModules = [ pkgs.nginxModules.fancyindex ];
     virtualHosts."${config.networking.hostName}.flpk.zentralwerk.org" = {
       default = true;

hosts/storage-ng/secrets.yaml

@@ -9,175 +9,195 @@ sops:
         - recipient: age1qjvds58pedjdk9rj0yqfvad4xhpteapr9chvfucwcgwrsr8n7axqyhg2vu
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWHVzNFJ6VDFxMjhxdHFH
-            YlJLVjA2Vk5CVE0yMnJIc2ozREFub29OcTE4CkpFU0JicWJPQzd0c2pPL2w4RTNn
-            eklOSzc5d2x2KzU4NTAvanpWQjY3VkkKLS0tIFRBSmc2TFgxTjF6NlJDRzVjSEZX
-            UW15Q0RPSUVyUURua0hac3o0cDQ2a0kKQ/zKlan8xe1cQ7nRFTEn7LZ8CQDtOFzW
-            OfNG2vr+Y6AwqWvpOwkajp25/OCn45GqRDIIX+NGaeNyMYXH3zEzhg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDQTNkNjR3SFZqT3ptSkN5
+            dm1EeUlNSzg0cmNkK1kzNkpycnJtMnVML3lRCjlqM2VyNzBabWJSM1R4SGlwMlNO
+            eUJFZXhJODhQMDhCZ1BZOHZTbnd5aXMKLS0tIENkYUZkbm1UTzZUQVlYMjdWd3Fk
+            ZjQ2MDRzWjRNY0NnRCsrYUVESEY2Z2sK9yR+DUMg3kKtiux5QeK5kn90N2XQq3/1
+            0GjueHMHAsOq9ZZeWEvECGEuam1SjmCmY0LkOOKOSAjZTJT6c/pZ0g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueDhOTFl0SWlLMU9oNi9Z
-            UDlYenFOb2pQTVdyZkNPK2Z3Vm9FVWZjVVVRCnFyWUhQUGhHZ0pQRkVyS3FtQVRH
-            RjExcHpWckl1eDdrQ21RRXFKSWZYRWcKLS0tIFExK2ZyTnhDUmxDdXJmWnh5VFBy
-            KzN3UEE0MTJGVURqUGsraFJ4c2gzVHMKpd+kCKwJ3VNhQJURN/g86hPIOO/CM9eC
-            2GbbAuq9kNoJMJoS90LfIDwc9l+rtvsXmsLcrhgAR1xkQyLYrjDBxA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQktZK0NLcFVnMUNPcGxx
+            eWtHMXNzSHphZ21pbGVZdTY3eUFubisrN0FvClNYOUJJZjFrYm5keTFFdERmOU1B
+            WGdTLzM5U2VzYm84VDV5N2ZtaHZCNUUKLS0tIFFuV1ZSTGlIQjFkWVdxeUZsL0Fm
+            RklrMExla0k4MDRXOUVJK0kwYlBsdlEKARErzd2aXS8EL7hz64RnFCYrJr+4hCr6
+            ma8GrAy21Z4RxZu9LseD34MHRXIuXiA4e4iaC5XMkmxczwn/wb7EDA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-01-08T17:52:04Z"
     mac: ENC[AES256_GCM,data:XHOxYjkAuPMf9q/p4FiP+LQJDI6Wme9hYVK7+NWgDd/1f745bSgKkhLGXiI0ExoFbtklFZu1vRhdNNMn7R+GVgSjXyaKD3Q9P/QrM2LnZx10t2qI1FG2nsGNWEpKAgnrRTK/3YvkXFO/+Y7sSmzcfzdszyD/va64iyDEtVGkwy0=,iv:nsabCmj7DzLoDAMN0iwnKNHJKd5lzbwAJUAomRb1nTk=,tag:+gtE6elKteAlhjaXPM39ZQ==,type:str]
     pgp:
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA6j84+xkv3y7ARAAhUwoBkuyi2Tu9ZGev0JsrkdOjSEXnFygftUKaQWjTvfX
-            Tz0BXd6gOkXAkbf4ITufE8IZ/z1sZ62+8P+vOFJjpj5qmcCheR0CMsmmP5h/7khZ
-            5QHbcXwprX5v2Ns2OljdoZxhYxMaJZ44HVP2h6b0+92/rpk71M1/q5Byds44I7dh
-            Ij+5RYRDRbbXuUKX4oAmFWyFTjkav+UohcRBKdoLfCHQAjQr6OT2vAJgI+DSKl5g
-            VDzgF4M77U8nSF3kcOR4t2gqUKtHpw5ztxBcObKtquKXWT8JSY4hIwcpi8DGoDiN
-            u5pDFfpnL0wU177bcMiamYr78e6e0NjIna6/8Pxn7ReYTO/mJjhfEQ+jhNV/l8Rp
-            +eruhESxuzp6IjMg/d4dHUGoVtc4QDhjlgZXLE1c+hUV3LmtQACOshaSz4A5YU+5
-            8SRnR32KfeVqm9DQLd+klmXalBiF8Qhvrk/cGuNgtljNk1xE6Aij/UP/NS4vJ6fE
-            pluvVhRcF98jnOSw/CHeQRx7KQBEJ/mMfaMBI49U678H074BBgji7xn/jnZ0w6cY
-            J4+0nJNLmO2wJr4NjEzf8aWvBQW33bH1dsg1jTfcwKqkjnnwXBjYt1bQdt63kIAS
-            rgyNL+Lldq9xjDPpRPwD75RwT+rJH6UqFS6t6RZxz6jAXUWSz2SCSituiNVLFzfS
-            XAGd739TsrBcdw88JgIsKOeDTb6Ru4PNjW5fdSXIU7n4CPj/6/GDpp8jPdwF3aqW
-            d12tlrEO0DqAk9sweZs1j8j4Uxj0M4AADqSUoqfwfbfUXbTMIGDgMvYzshbp
-            =k36R
+            hQIMA6j84+xkv3y7ARAAl7I3KYZTAwWABOqvA2g6yeEnfTXi91Ac4xoFMtDJD1cY
+            DcDx9y6MyemuLPTV9Xp45qwTUTdr85ee8/aDr6dfWo7C2cDHr50VZZm7acl7RwTT
+            zwYBDCQSzS6HDLur9Xge4BOay0IIW+WQA/AonTt7O2W0cChxxc7tN5RNeX8/zEFK
+            sL5pGGip+66w/ubTdW7qLTHIj7svnxWCNWIWDAKmrADvjfy0sjKtbaMiekbUDixE
+            JZLEZNeqCW8B/+C0e9fJTsLynLi0uBkjF93gnQYe8fa5QNyc65DTFM1967qsNe4b
+            9vuWUYaR8l6EkeLEAcv3ay555ctOX59n/VaOcRgmr/2gcL0gtQxj8QT8rVxHCkr8
+            dx6nkLBlfQSLPsXoTwh2dpdrSWs5idSFYs/f/YrcgsongmiqQy7IN+jLkWQtAfA2
+            0zBGanD3LanY+4NGo8FLJqHXiiBB04evyuiwEZtZsAHUZmm5qx8VisD4hkvZTvht
+            r/Mu6p4z1cFyENoLkGV1R+COjpA+VanNQZh9KJbN3kuYUfCY7waPB7EbgzXW0OYi
+            WcWPzGZhBzNR0YSGjDldwgctd+9y2UHKU1hShk7pvuV51PXztAHWAFVqZstG06SY
+            O+mFTR9oZgCyyN6BfJEcLEXHTET/MNyd8YBNKtInizMX+hWv7DJ8d9po5HvWgEfS
+            XAH3W18easkv6xiizE7OiTbtxgWcoI7hS0+mCO+HKUoYQ1akicljgamzTlAcMnc0
+            ScRniIjmsLhHnJPQyMJhlxaX7bDWX4Zh8h6hJy/bRuDjwTdwpp24YZToWwyt
+            =WvfN
             -----END PGP MESSAGE-----
           fp: A5EE826D645DBE35F9B0993358512AE87A69900F
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8zMZ+ak7y/zARAAuDU+2/0MXbNzYJFwAZ1BR/fqK/a64ozb+ESiaw6iBdwS
-            Xkxha/NwjQ1MOTp1RJUx0iZ/xSDxp97CDVtOpJkO0fpFBNaAXci/HbR1zC5RxgxK
-            /ME8Fqm0EMIlrASkOuIg1C4mY2BZAUvtyovzGpfv0ediXKsFgkk66Uuotl5m6QEo
-            HqClxj1c20X9eCO6irXnJh+IKjP0IsXOi23Xb36KcWZP9htU+w//FZn9L7r6EP4a
-            GpZ1bmJiXsEgeHjWHz+pk4NepEgbncmQ5pDd1GUH1TeyxwYNrmp/jV6sLXm86vMp
-            ag0mMeYaqg9CKkZeNZySIS+CqnyOZpkpFkRVfEk0LhFz5NVpJRB1YghsWFlgAHwU
-            ue1S52hhpGA/s4QGoa6I3oTF9x4sE/TH+e7NJMK1VsKFVuUarO6BOxV9bXMspTy+
-            HWc/nlHL26FRPxUL6MMjKBnpTb5wNLnfidoYJXPVP+/0mSo5B+oEpKpjB5hPtkLw
-            YnShcQ+EAdz/I5AdIdMZGxQ+ANd4Hqvdj2ofEX+bZIsJTYWwUgZu5SV+HCf5wHni
-            CrlqE1FBSsYfTGM399oRMkWc2GWww6QRUmA7UmnHxk2RH7fDs0QpOHFf8dqIosjl
-            ohDiKZPGXg1I4wCXUxOAN7xX4iP8jA2I+Rk+P6Ef6bwoL15I04V1+xI+tr25BYjS
-            XAHQmIJCnZP44nWNSo1IWha4XgGi+aCCa6g0znEdnbTb39w+QSAoerEDc2lmpMDR
-            m4XYswt1n97ZC9FVwEHew8hKCGGRZheisv2wa+k31nWYC4gSOi8U4taadChY
-            =774V
+            hQIMA8zMZ+ak7y/zARAAyflQ71b5GMK4d8YqCsiIZj7mizdynR4Uh6cvhX67q2cL
+            QB9XupvzT4+IQqm5gTfoHm+wUkX1/3HdtxFHl6Hj/8KSlVMV4IUyAzNnxqjkxE2f
+            BCtCvYJdI8wNLXhmCGw7lVwR9AQcFHnbU+jZDhMtw5dpOjPB4p5rtY4btWrdyNP1
+            AbyCNVzZ8Dfwe4QjqcfQpsyY7iUs1/BaQes1BRDpbzjmUnQ0q+X5CChdRxh8w9qw
+            Z0jU1P9TsdUiof9zpcOJ9jhLhym45z3BPknTIdeFejOoZMZy0UDtrggxe7KQt114
+            M2/Zi4D7+uC1rfIHNwNViuq8+yufTztakuBd17x6PevGaxJzgvLVKExLOjVzAZAc
+            3SONCmp9cgrD1IRYJIImjPFs8OJhYTm3tw79UZn2JmGCKQPDyT/6gd6w6O1+6B6i
+            kCXAyHP9dkAAaIza5/ysKtn56sQFRt0ZzlLjvY2vy0L+pX3zVualweJT6D5Bl60N
+            BAvqkVo5JLSoBEQ4QfOwJFMadihyxbcCNgNrq1f7Y5NAA6lNQ7UaK3q8tJZN3ODq
+            rn/4DWrAna2p702IldZI9r6FqBL0J4IZIt9vX2KkTFewwfg7Di3ZcnhO2uh8FA20
+            6MWVOR9LygiSISHmWkULIFbaNyjv15BOAEPJD5Z/YE+OWtg4IwawU/EULE905mDS
+            XAEktD7gYg7n3MVeP5D7ve3VEkLW/DW9ICtdbBvkSZ4fp8Vhqj8W3/gTMirgzlRL
+            YdyNOT+6mqhmCdLj7F0BRVHBfLM03finCbgEimAWOY39f8S3FKifTvB5VblT
+            =nbSm
             -----END PGP MESSAGE-----
           fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQEMA45bZkLXmBFpAQf+OXKx5RCWKi6GGn7jbGhvhg55NtM8kxdvE+9peMU9UaiY
-            RoGel0ibdzeVRoIaK5KwgXd+0gtiTxNzazy7N0F3zMrVTmN/oSQ34vrLgow5zFU3
-            8VPL1o+qhI0KiD9e26DwnMoK6tuTd3rq18IAN8x3V/p78unUoKasoOUjpBHeUyZH
-            EoG8TN3TJUgUsefjGA2FEHr0otKD5VG9Nei2YQVjJs9iHGNXsSoRU7NmAZqbttiF
-            KHHsb+Ps3uG+uzSj+R+GG5mfhBpw+SeNA7jSKYPXalpG9HZVgCqkXTBTfas+roiI
-            T3I1X93WfGP9/HEo2U+8KXzsD0F+WL4JgH/nOphihtJcAX7LEpt9Zk8qFsVRIwpS
-            jPfiTiwWwxZsCWYUhxjZWLIWCgVU6xSAwkLRXE5YAZ5m0e7tRDDLDJ9f49g6EEKy
-            JXBa4biDSSm6xYkYbb4DYbXAWgNup6t40Ts0wts=
-            =v1N8
+            hQEMA45bZkLXmBFpAQf/UKQGj3AcO9N3rBvD2M1MtkVYFL+hraLiwL+ImMLxQhGS
+            tTT290y562oqU0RIDj0ZsDIuPjcEjbui6jA2hDc2C+urFATxgJa5IH2TsotXeRJL
+            btu70tbPnwSDS/FHxAvAN8DPSI5VXIcY0lhcm1pS5M4+SCcFCSLge7VxOh0Idkge
+            KSgqfe/6o5oNm1PeGkdAf20v+F/Bad1DcDsLehuUVV1WoEJeEv01LmlFgVoz1DaV
+            NI1aoOwkcElUr6EAUAZ6xD0BzhPMvM/u15Pho3GGeSAUO25S6vZ3eY9KVygXcahv
+            rEOG+Us9MEkRpLM1EucEnAjgkorcAcHi8pq5qcgbz9JcAbqjQdmiQs6x5MatZMt6
+            N9OzxQ/m2eRXjYLXfWmGirQqV91yNN+2DKum8kybEfrYmX5YAnX02TPuOZO3Sk91
+            NlsXtuuwLfYC8v++J4Qau1UGSMI1bnkEzbRFjd0=
+            =uAHJ
             -----END PGP MESSAGE-----
           fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwMCBBrc/JA6ARAAhidH+8NOiyPhdHOn+DFHhLOAd9L57DmalW1qDGBzKh6r
-            nh8P4yEPwXEgzrmFAXd4Lcmp11eYELkRyATu2okxJ+2RxXC/OH5x0iEsx2cY+RG3
-            S8K2u1Ho7w0PtHqC/GMhEJTgaXmNt6rZ+PqjRA09IuaqbrvmXLTHF1Mi8TVpomJA
-            2YyXaK3qNYlSM2P0Wl0pUb3nyzM184WVGT8AjZdsj7jvw4hrygAMlLhDy/hHQTR3
-            LV1lRAINo9xMc+mHOCY3ISqyF4Hc8dJsM0mhE+6UUiuj2axj8hUvvf9pzthnJZaL
-            UUvPuAyEqYH/92UkHq0UVGjd++nhDgNm1TjOWY4NV+P3nxJUHcx5uhMbCP0KdScd
-            Y+Ob7qmeLEQd/Q5uXprZzWqsPUVXSc8Tujf5ntPyS5t+6AN8RFSy96Bd7JtCHdHI
-            qu55evZ3KaPXAV7h1/GwCUYY6CYSnmmOiFyspKRknKK1dMFZdQCywb+zXCLFeS4Y
-            pBDyEdHKHYp1G+tIzTaNKGO0HiameOjVOa+EWEBjsAArdb00Cv7j4p55N7/d7FkM
-            gE67mJCJ+LQX6rBW+4evZS6gQvcCpVw+BiMLynjNAyduoCmcMpJ7v6QTtkVrpXSH
-            o9Qufm46W+qDlN8Hbso05KxIz+1m/kbFosEO+HpNpryexLgW5PHKI2FVQTDcoIbS
-            lQGEbS32atu1XDCh3sM6PzTDa1JXkuuBzlAwGWLDwAvlfv/5a8YZYxDeCZ035X7c
-            5C3hQGdZAycEBlKZiskC/+6iCz+ZZqgA8RJxLAykCVTmJQmTetdAUhDR2Xb+HHza
-            Lw2Og3wUxxAzcPp9miom3l/LICm/zMmt3Tp92Y8EdncLXH73PjFeGI2fjYO9TcmK
-            95p5hx76
-            =HwxY
+            hQIMAwMCBBrc/JA6ARAArmUPpN+yS2wgAUTsMyPOhGJUOcsgpgNxhAzu7H0IQuDR
+            wypdDN0bLbywQW9HPHCZs8fbY2MJ91cexvXLKGalLgyjvLhOXxARkzJcouepCK6T
+            1162odB5k7T4cjqUxSq7iw1Gj8elh8BlYEx8D3kdR8dGr1Gj7uZYpthz7DVF79a/
+            54PA76m2YXuoZnnjH8mpouoQqdyTzGmTyFa7kXvCUpc/g+1uni/0Cn4tBNKyF9u7
+            GJ1fklWR7DFdnIzNWr7+npbqTIMXwamf4jl+iah504DlCCekFFk+q2b3d9le4rZD
+            2GpuETzoOccXLlLZRglTFLix+JoVwp+dbDlJG9P3Dn+tu5EN2Mj6J+rFapaAY9ac
+            1p3N0d6WWr8SeQ5YSZMykfSqzlMPv1ZgE2cBT04+M1M4IJLpAdOGvqGuIzj4Vubv
+            uG7XbMCZjOIobxAhy5zpDCLErigmQzbcGW/FvP5D3D7F1O2j0XsZDykvyoTBJCWV
+            TKKBVYym1f3IT1Eyxr6mj7GvUshz0JIuSzJMHe+vFzjf4+/2ghhLX5i91yET4vLv
+            vM0ZMqFbDsJbzRvnDXZR19aJwZyNL4DctKkDFiqr+VbjoW7VrnAG1813CCZzKEV7
+            UhTGhQK4kLJW8DjEUnotp9Ux/WR1Aj+dAutQ1M2TVgPzkve+baAyE65PF7EWXg/S
+            mAEwBCd1I+1VLJaOR/DEw+NzgoPa5DyjQYTlMk0w5ybIqKeYwK/0ysaJfXD7Pdk6
+            mPpxnHAotN+6/cAbrPjYCqykeNKln2d2OVfBa/RPCZmfZZAzGY4aFLEa8+8a8tjl
+            fYX6yqMvgPuP8b0raLJbOhpg2kI8MaZAPM/329lGjLUBKUTuLmguKcS8/N3CmNSp
+            toX8F3ZK9HBy
+            =Bfwr
             -----END PGP MESSAGE-----
           fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA9XEenRNYVGHAQ//brdjwpSsUcw96nxINizs9Na+CIesYIyr95qtGUT+iQgi
-            GWypK2LcXdHDxWligq48z/8/BW3z8PiLVRL8eC+SZ86V1/KuTLuPISm97Uy1qYcV
-            V8XC9ly8XmkymS1k2hN7Yx+CcFRXt16Kb7MFgQY1zWk5M+XTEgEx2c3yfnGBbhwo
-            /eIBOCu/gkesD8co8ikdgRwYYMpd//AJ/vZa7TPb5JzCvXqmyDyDdE5UV6phrfgp
-            vgvUrMwdxJntrSpiar1+bNE5OphF9WzmF5QlNu5nXDOHV/7wx9eJ3ggL5qszaI7H
-            wezpZh0EI9vV8d9niHx/dPeIFMCOCXheMrVrwvpKHUvlTmv1U0dSSeSEHqmaKn87
-            cZsm59D2aedh4VyWe25QxG/XYDR7FUi+ImyvCn/Q1YeR6xpbZK68rlLucvUCxtxD
-            FMnFnXaFoGqgr9D1kqWUSWYrkZBi2mtb4tGk5VUkDa2Gw43pZ6osga9zxvdGNmVP
-            JNc2PutDNx/rYV6M/jCw+/BItdl0LKGe6VYHxU3iL62SvEpfl92+8IoFRYHaem8v
-            pz4u2PSCEseDAboyHoVtKmZ1fq0pDSmjZDWffckBYLGzIH1kJrLpp+4iUUuIRso5
-            y9ve4V5YUB5nilos+ySjrTTJxDFIYfmar9cYeQb8NUnSTwQ5bG7zCj57vBd1D9TS
-            XAFKRRyo9ymjwDZurHzYMCZiloyXS7p2ddvTiLGGjN0ev/Pw+qYasrLE740qy+W4
-            vbOu6Kz5nOkYBUE9bJ5v/SZjAvVjNpyYnJh76s42Y5Z/KOyJksAJR5Rudp/u
-            =bwKh
+            hQIMA9XEenRNYVGHARAArEK6rhbnV6wE9TT+erFTxITtPLnG7zovNuj3Ve1QcHWp
+            NsLwdQF0O/l8YjCORBmCsumFc+0Pqq5ievdKjsvhexm8BxaQmiXg2wcvfWpsLh+6
+            9fM8Yb4ZxOOltdCXmYiLkzNudkNafeAqZ1nIguoTWokypMc9IgSgZ3AyB8QUEubG
+            zMWv/lj3DXN5mXOa51uaB2e2NnyLchnkCJGZ03GgI9rQZHQfkzsSI7pzpfQZaZtn
+            2+VaRftjd+r5hMGtYd+bJLAHn5a0ciYgNlZWdZ+/SBdcuzV4k3ybaaFE0Ni0QT9I
+            XjEgxGT828u9/+zzlUU/L0+dbmjk6CPKJZrNsZ1Xkn+fDzxxy2Bn1jNCQk1c8uk7
+            3PTnClTH3hlr2ASxLrySt0L2unD5Tw7m14n8YO6FkA9b3d7TEFTSwK+pK7wdnJyx
+            SpvQXJX13HGx/l72pkeTAjyZtQetgUfzmOHzo0U77rqKko0jKy3FQozmHiW7xn1O
+            wgd4HjcQJsGlvRiO1F3VydK8MU9zn4Ef8bpbidyybZukwVeUlvYN0JhoiK0SPYI+
+            tdc3QabZHTvs8N5pKUwUkPweWP7ffohJsbaxxzi+LnovVeLrUpLE9dH/lxZJFsP5
+            /x6zbo72/hwyyEK0x1hQieSvIYc3EAY6KkaGe9E8Jn9WqPPxfoP31GyA1vLX0sXS
+            XAFGacHnhDJP/0I67gpyGKZ8tpX8sIDOaXVGWWaArGt8ulhlSbaCEwnUVvCRA9OX
+            FwyCl6lAvUDlDVtglcUUctJL6fz9D9xYlKGuB4v+yzlUPR56trHmMJDS/To/
+            =1rar
             -----END PGP MESSAGE-----
           fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcBMA/Z87ylQaotQAQf/Y7Cqh+xcILObp/KbFwRziOsrxdSN7j57b5HXE1rzkT7C
-            3ggHVSLG6x7l+4uFPfQz6DbuNUN3p1OJuUVtsA1TZAgRk4STP+Q9sareTJ3cCXBx
-            CPERaXYtAt3WfgJB11EXus8u4YK5vvmJ0SmegpFh42jmkjvua6aDKD2CbmmDkALt
-            2uqofobw2zfsz9GlEEIVUo5JGOW/qNlQGJCnXkFFlA5cIkktzFHUrRDglX5Riry4
-            rTvEhKOEqSIJ1h7uP5vRJm8fNn4hhwycRVio76GdA3CV/NBBbWm/ZFyCocVjk06T
-            f16OlfU1WxrmzIYfiFiNTXfqfe+R0kVY0Y1cURBXf9JRAQQB/qbcCDPS3WqG17Zc
-            c/PK+DO4sX8rm04WJix1mBv+vkw6D+hxi0nmgeZUP0ds7mmimRlP84JvfNA7K8he
-            AxCwofP6L4SnDYykLkF+oeiW
-            =H+Ye
+            wcBMA/Z87ylQaotQAQgAivjZYmHPN4jG5d1qlGiXf8EmLjgwm/S2xms7wU61XQKE
+            oqyeZ2ugAZxgMT7Xrgh6MyCRWP8H+8haYXS/vktbTIiq/cWzMPwMIhjjrMI2IkZF
+            pViBQzKl7MvmIxLZkjeaEs9fp/qrZwfjY8zWmoDr2Z5Ru8tTakF8Akxma9Cc7k0F
+            PnotHOn4J6k4I/BS871Ms6CgYyaNcrkL9ycqs5jgq0MTUnlGe87KrM7/olh47wlp
+            Nbaw9TBhrSFQsM6CXwrtepd0+pbKp7Hon48g/pPttww+OaQh4Yb34pnjATT0pWeD
+            rljyPA1USM37bXzf9t5Z7blsgjLo6qMazuNnfxvz69JRAQeoAHBefLMQauyrL5bZ
+            NQJvM2y/mnP6oRygG0feKJIUEf8afGBjL1fJ0yh+BXmjCTtze/fJQRl8xpnuck+I
+            doTIhda6xV7ydDH2TeEhN7/m
+            =fUg0
             -----END PGP MESSAGE-----
           fp: 9EA68B7F21204979645182E4287B083353C3241C
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcFMA9qJIVK2WMV7AQ/+NjGstEM3x/RbamdafBny1m6wmaR52nkrqV6MJr5erVZs
-            7/WWJqJhq3q5Lgokadif3rDiXfWrDkjmudZ0Q76o7ZCbxCKF225dgIhOxoHcRleP
-            IKc+4Nxv2mXUepWWAv0xbpOeXFi/zmNhwIUk9m7qoJxd4ix2baKD+HYzSJwE8wwz
-            +JS4T4qFcoXBRYBdApWDOdgzpceYAx65Idw/TrsMW1/cJejy679/r4Ad5yxlIdkA
-            qq3LmFixY1EmyW903fpxlcMVhNTtVgnAxnw7nWhK84fwVkd/W7ymCKGiNVAMRcqu
-            NpwqvYxjjMfUMavxrE9L7FZ0RgeEjjwHMayaxu/7PDvHi5PJBfN7o/sXL87GsObH
-            g1C8NlQ0x7iAXXarpnPDo+B9SV3LLZlaJGrkZX8qatEb20zzIbnqpw3iH9IBs8br
-            P9wAj1+E6tlMYMGwEHETvoauJqCI4hOGIHPWGkHQc/RCEaHbWnvEhKWvVoo79/n6
-            0kMYI0v5DehPLThiO9ylp2VnGOA0P4vcy8hGOUpghDjQ13eTqKqA2KhJaLQSio47
-            B8avrds6urm5Ak8Y67UcL77cDXwF/Q7n0l8vz4jpmo9z7f1fwhp9LWtOXctzijwE
-            b10mHRhI31/oMjchJ7aOBTtDbj5I/ulCBVQFxZhq4NqFH+05EYlfc3jWbKjbhGDS
-            UQE0S9hCHAohTjyof/simgnBf+g6Nu9Tk/JRwFn17icKjr3hFzUep0sechFkII89
-            GTcpA/aMh3Vo97SNyfhBokaTAMX++8IGHSvGkMRn50Q7oA==
-            =cKms
+            wcFMA9qJIVK2WMV7AQ//ep0dGuT7yy5SBOrbh4kVMQ2CczuhmAiJ80gQQqmQe3dr
+            0KBciZkZFjg7V3cS/QWiWJ2ewPAdU8aUAsFdrGglt5AmOzpXrviYiEegllLTfBhO
+            kaAzubRTxiDCvZ0hIwcfRS9vVYYLORwfUA6LuWNGCqAno3GFuwChGAdNMWAdpuqE
+            X5g9VZIqhFBwDnnwDI3jrIYK6QF4zPUlODeTqemuogodgN0aFpGbLe4w7prFLfFl
+            HwTC2GY4nWbNNwCbNJgS8VHcAKfDZeF3rosmdy4UbRHOK3p1qZgAG/TteQ2SI1pA
+            XVxUPdlM/J4P9XzIglQwGbpVGg3iBMMreX4Z7u86uuy+SbOVinn/0N5hGF1jq6cM
+            RWFSVrw9PQqQpBTSh7zVoSSIEf/2HKQxLVliFETgpQDT2+Ilxe3A/JgQqpqJHltT
+            xJoNroPfHDmaPuShSoQrnOtb3BENQxL8aAi7Bui9tnh/xhzjY6+Ge6XmRjRVRqCq
+            D6Yjpd7ew1rFFPv9J8EW9+0juCAitsm+m6EhEl3v6v1ILNwAf3pAcTVcbsTLtAlJ
+            c3OXzJNp9vHagOzXxmcnYyKdscRzMc+IjAqYaYTwjt94mRY3jkWlxYy/Yc6TQXPl
+            sMn0TNcecyMtyMFC24WW1cXFSINxqaw5PxO91ufyqIoD+SuB8vrta/BCvi/ZfQHS
+            UQFkBPlrHWsA1fnXOVtXaYnyCeL6/JTKEkAsBUHQmX3jSZfC6KVaXE9df0cD7OSl
+            oxieBJZ+ZzuE4WD52NeeNDDdFw+ukxt7tB2362CdQ+cgqw==
+            =8TOO
             -----END PGP MESSAGE-----
           fp: 53B26AEDC08246715E15504B236B6291555E8401
-        - created_at: "2022-07-15T23:31:23Z"
+        - created_at: "2022-12-26T19:10:12Z"
           enc: |
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJAQ/5AXkKdc6IKsk8QlbPHCzov9ajisXc65Lymu2MI5dtAVOf
-            9rLn94kQ/V48IZXHS485MJpLf+OvR3P46bXHI7SNgejm8y+rdWmkZyCKCKYAr6ZH
-            b6xNyKloEm1UFVmsv96oX6IwF6U+VxgCqDdHF6kLPwYG5aHFjr+JJRhkEOr0djcs
-            n7XoxxzhpUCRTd6ilFJzmc+3ryVe8ZKJJuNy9wL4HLXZwoo9Ul4Uro8JAmbb29K6
-            tJRKuS6WNeQSRyY+BTlclwUva26tAifHexlNe2JuXkQs+FJWJKnLFrXXy/BfcJEh
-            O2GmW90NE+xIgGuj3lp37hYDWGWS+ZV4a9/QXEq79IlbjeLKE2gTTqW2r5p4aj56
-            p3J0oiUeiLF6AMJ13ri6gVeaqyFWx69Mpvmm6rb4sWUk2P4bNfHtexVD8tqmqjHP
-            gFRHBSGQohrRijr5qgqLBjMWixe+dVpal4P6y+fF2PEo+HcWRVpGjr9w+6q9L7F3
-            BtUFvq9uLhsz6xmW6Z4VmHkiz60ENBTtqWAsut8RHdWtxr96AQvQFmQQhMX+T5LJ
-            oEI1eTqVFf1Zj6Vc8di943yZcv04sK+GLh5PKwpUWRrWGqgQhwwMIjsSTMn2sa64
-            VXyVsLGLEjg5momxTbWFYEXAaJdg7nHF2V0SrTXdulySbt5UAqsZIilLzMj5feLS
-            XAGpqyZ/tnCkYAPSK1227Mm3PgjzAGZsVDbDYo45hDlUWNF2PGgRBxTifYhv8/2X
-            wiUJUahNvWewpa04Aa/n8dTdB86fUGWdBDrtMT0VoIquNj79TUhCWIXePMXY
-            =kLXW
+            hQIMA/YLzOYaRIJJARAAydOsxMT5d+uIqJWtB/neJbX/qGLx73vVIVMgRdHPTVaI
+            StOphl6H9t/89k+HNRmxoHOJPHJ3BzlQGClekvI2gAMtikQrB1CqYtcCLmPML1fO
+            A88NMuPb4nN2mnuzikqieJY/NqeyNVMdZDOTIGzUGrcOvckti6PauFOdPcGSBO+U
+            86JMPqOmD15WrpQxLhzXGT2RLnsvtrA04eb7rNO74nut3V4w+blIQG+vQUv4aWnm
+            SPrQcJmrkHkP+yhKzvUlcW695KNME6qiMTWJ/gNgy1e22NxBFuPRMFvDqHn6io+W
+            EfJD/K/u4zqCcVfff1vDU97JLQFjhQflgQ8Ywv6umuTkzHs3CPleTj9hLFP+7t40
+            TGc7wy3/ZIxvHfkaC2f1JM9c0R/Yr0SAwHiY1GCoy8qxCwXD4n8oTERpt7bObhe0
+            NpKNTEZzTmFxziMtkXI6uioqCXBWADhDRexL41f+UmsoaITdhNJeQtNv5VwRyslO
+            GQFZV6IwTeGRw8YOHDtzvxnYXitgsxrGCAhYfEdjVGdHu809M2vehFl2CtjImSat
+            VtvH5hziXw9szryWNwJViviqnkwxmk+ejHAx7sYpDyhBKtpkXQsKMSwhVXmOSFyn
+            B1k6GD7vXHE0OfI/ybLoNsJjIVWwkZyNMg0YiPTRYTKhiUizmU1lcHx2urjatWfS
+            XAForAqvFI7FfhdBK/oEHj8EGvm2mZAi7Q94C09/QiKGHAHnOwi4CBuIZ5ZBSLS9
+            WUlwZwNkytWN7VTB/mSXSidYH87l6m7w1o/lsIak3oT3Mpa/nRnD+UWbnFdF
+            =SmQj
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T19:10:12Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+KyZz1hpIN693UL9rEF1lQJ1SV8qe1tLYx7i35C9RqzdI
+            C6M68iSrINQQ0c3XXiUvxfMorE3Exh50c8iiEsXngVGFZLDfXJsxh2ceWysadb6G
+            /G5Itf6kUPK5XuLxW8olmir1VpECuaxJ7Sj3SAtNcwSVzpDr6nJikaF/L3caJZFC
+            EKk8uRE1ZCpttPOaAnWCjJPZ4drIgEzyH+pU/VBpxMQ4i4Y1H6k8FzLsvWyiJMuF
+            eSiUwse7LnOQpdURwfFrWGnX9nsm7umn9usuk0LWS2cEHoqn/UhV2Y1eFztGGT4n
+            CeOwW0AVAa8g1z3gX6cuJHcZA99vK1ytYPtwM9jjtYTMHzDonhWflNt328Shnnmd
+            O3S4kDztNTaugfzFHmz4D1o0Br7kH/NKk7uW38NqOQ5INfzHykn5uiHZVeSZ9FN1
+            fGgXzD2DCOzdgEWqJ9D9DsI0UpAevnVO/HbUqoPk5LIn3lcsdBPW6mulFBWgC3fV
+            r24e6INK20uFeu8WcJnNPeJ3O15Z2JuB4Eyd7n669+dfrFwup9msQnuGWuGmbw3D
+            cO8UXA8Encz0JHZI1a0W7ZwQDyCZXYVE7NNhT2qjHmEOM8iCAtilzzta8E2JEOzm
+            xxROJxMOqxxMX0WH65J+2yLaXOzOzSUzWIpMaZ6ocZM86f5uT5+QGmA6suP59LnS
+            UQFTJrZgyYFoQVNoJuWY2eQTOhlLF6N7g8KgNoTr63JGLJrFsJcUV5hCgvn1dvjy
+            YIpSzMcETuHiT2ri3qI3ZEiGiaw8omcVL6lfh8shGznWwQ==
+            =5dtN
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.7.1

keys/0xA.asc

@@ -0,0 +1,172 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=FNwy
+-----END PGP PUBLIC KEY BLOCK-----

modules/c3d2.nix

@@ -214,6 +214,7 @@ in
           config.networking.nameservers;
       };
 
+      # TODO: convert into usable module
       programs = {
         ssh.knownHosts =
           let

modules/microvm.nix

@@ -78,6 +78,8 @@ in
       "mitigations=off"
     ];
 
+    hardware.enableRedistributableFirmware = false;
+
     microvm = {
       hypervisor = lib.mkDefault "cloud-hypervisor";
       mem = lib.mkDefault 512;

overlays/bmxd.nix

@@ -1,20 +1,21 @@
-{ stdenv, fetchgit }:
+{ stdenv, fetchgit, writeScript, runtimeShell }:
 
 stdenv.mkDerivation {
   pname = "bmxd";
-  version = "1.1-2"; # ${version}-${release}
+  version = "1.1-freifunk-dresden-c3d2";
 
   src = fetchgit {
     url = "https://gitlab.freifunk-dresden.de/firmware-developer/firmware.git";
-    rev = "T_FIRMWARE_7.0.3";
-    sha256 = "sha256-LPlsfZvi0Hs9h0IM8Xtiv8GkkVLWs8LL+XSewTT+XHA=";
+    rev = "T_FIRMWARE_8.1.5";
+    sha256 = "sha256-DEz9KROKhOSdp0XPvkpV5DCTN06FxIMj2YaVKC0hkyo=";
   };
 
-  buildPhase = ''
+  preBuild = ''
     cd feeds/common/bmxd/sources
   '';
 
-  installFlags = [
-    "SBINDIR=${placeholder "out"}/sbin"
-  ];
+  installPhase = ''
+    mkdir -p $out/sbin
+    cp bmxd $out/sbin
+  '';
 }

overlays/default.nix

@@ -18,6 +18,20 @@ with final; {
     doCheck = false;
   });
 
+  dex-oidc = prev.dex-oidc.override {
+    buildGoModule = args: buildGoModule (args // {
+      patches = args.patches or [ ] ++ [
+        # remember session
+        (fetchpatch {
+          url = "https://github.com/dexidp/dex/commit/dd0fb05386ce89c74381ce49e903cc10b987459e.patch";
+          sha256 = "sha256-71py0pysgS3jDkKeqD/K4KJ821bolz/4PTjt2rDdUy8=";
+        })
+      ];
+
+      vendorSha256 = "sha256-BxFiRHOGIJf3jTVtrw/QbnvG5gyfwAKQGd3IiWw5iVc=";
+    });
+  };
+
   dump1090-influxdb = callPackage ./dump1090-influxdb { };
 
   dump1090_rs = callPackage ./dump1090_rs.nix { };

packages.nix

@@ -3,9 +3,9 @@
 let
   getHostAddr = name:
     let
-      hostConf = hostRegistry."${name}";
+      hostConf = hostRegistry."${name}" or (throw "Host ${name} has no ip4 or ip6 address");
     in
-      hostConf.ip4 or (hostConf.ip6 or (throw "Host ${name} has no ip4 or ip6 address"));
+      hostConf.ip4 or hostConf.ip6;
 
   # all the input flakes for `nix copy` to the build machine,
   # allowing --override-input

ssh-public-keys.nix

@@ -9,9 +9,15 @@
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGJJTSJdpDh82486uPiMhhyhnci4tScp5uUe7156MBC8 astro"
     ];
     emery = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgL2kRs+cXAcUzOO2Tp+mtMBVuHqMuslQy3LN+HLSP4 emery"
       "ssh-rsa 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 emery@fuji"
     ];
+    eri = [
+      # TODO: use a RSA4096 or ed25519 key
+      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqnwexxYY4LG043c53KetolvV06Wz9nnEi8dO2Du3DSMmvKs6+eTqmj83oEyVJkZxGXPsfdx1s3TLc01Opx0n5USCozUXHaaxUK7vrDPGJoz+Uc4f2OszFdKZSeLzEl0Vq6aWOkCKS6539mfbPx5oErT1Nt98GCOWi17cd3CTFA2m83oY5gFiaej3r/jfn5laCZ/NSqlZ9akzE54SXQl0p3/4L1C/QKockRscV8/4iD2+jqdPqaMI0DYKozNtsym5En3n9qt5a0RqGPENBXA1H5ie0ZE5/FXaqiXAY7YJMznnXbv4N8zQP2cFiPhqUNej+lU4RSHRLGaGkfLgYwn2z eri"
+    ];
     j03 = [
+      # TODO: use a RSA4096 or ed25519 key
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW+YfsFtRz1h/0ubcKU+LyGfxH505yUkbWa5VtRFNWF2fjTAYGj6o5M4dt+fv1h370HXvvOBtt8sIlWQgMsD10+9mvjdXWhTcpnYPx4yWuyEERE1/1BhItrog6XJKAedbCDpQQ+POoewouiHWVAUfFByPj5RXuE8zKUeIEkGev/QKrKTLnTcS8zFs/yrokf1qYYR571B3U8IPDjpV/Y1GieG3MSNaefIMCwAAup1gPkUA0XZ4A1L7NdEiUEHlceKVu9eYiWUM+wDRunBXnLHubeGyP8KmBA7PNKgml3WWRNTZjqNQk4u9Bl+Qea5eCkD8KI257EqgXYXy0QBWNyF8X j03@l302"
     ];
     laalsaas = [
@@ -29,6 +35,7 @@
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP6xE2ey0C8XXfvniiiHiqXsCC277jKI9RXEA+s2LQLUI5zl7v350i3Oa8H3NCcPj39lfMreqE6ncxcOhqYyzahPrrMkOqgbPAoRvq8H3ophLK+56O3xdHoKwLBwRD1yoGACjqG4UTiTrmnN2ateENgYcnTEY1e4vDw1qMj1drUXCsZ/6mkBBmHJiFfCaR4yCMt1r4gGi/dAC7ifnBP3oSyV/lJEwPxYYkGlbOBIvX/7Ar98pJS6xYPB3jHs9gwyNNON63d0fNYrwBojXPPCnGGaRZNOkBTzex3zZYp12ThINQ2xl8tRp9D8qpZ7vrLjhTD6AXkOBRzmDj+NsCeEaeTuWajqUM93iKncYUI+JxR1t7q8gA2pBMFzLesMXnx7R+5Kw7QDtSJM7a4GMIfsocPwf64BH6rzxEz68rXFE3P+J77PPM9CuaYw90JXHo3z220zYw2nMQ/1qjATVZw/hiVrLmQMVfmFJIufnGjTBs2sy3IoNyzvYm/oDeNNg1cdSV9gyyRKZhK08fxjXN5GSf9vZkfZa9tHtqaZ99HI40GQBHUVx1K2/NQJY8TVTSA+v16SFnJK8BIbmp/WFCuvDcMkgLIbqiYtDASe7P2mKIib86uOENT+P820egeLiTQ06kFw/gfUa8t69d5qEcjiQZ+lxCeYIs/E9KrEXHvRUWew== cardno:16 811 339"
     ];
     poelzi = [
+      # TODO: use a RSA4096 or ed25519 key
       "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuQbziwBjiSZqzE2b4iOqz1HxjinqHbGjAv1XHLOq+AFfNwMc4wiyQ/u2LpuRG2HlwK9pBeIY/gZSUP3YJZ1RumnrEOxY2Tgmzko0W9ME+hvK1OHZcXI69QA/ctxEVgOUMvTtS8XssFLAbQfkXJYeTL/5yr/Qrs3MDDfa+1UGY7LQlyzh6c4pQ+pBgWJALyzztc0orqgSVUJ2u8naQ210Jv3dQnpE+bwfeG9IuWjQqBXWHwlqxwRDxnnDBVcUj4z24XsMmHHWd/zizD+4C0Qx/rBiFhYBDXP+320U5gpgFzRl3t1HQXiPCb/LAgp2CLpZ8Eh4u9tgIhp6Z6l9r0B+vQ== poelzi@poelzi.org"
     ];
     polygon = [
@@ -45,6 +52,7 @@
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2bxUZkDM++SVg/lR6JI/ANUWVPPgGp7fmcD0mL7AI5u+VtdwUlVpPl4GjPnpBPFD2W3+WAg9DQpiA3+j/MuwaP7JjUwfI9hfVP/4QjdfgVgEyAuCWstHftk2bZvzKa+D5d7r5kOpDmWnxwuffOUqR7vmZscIJfRxSD/gOnIDMKUF8RAF94p4SuTX+1uoTbzmlIFVFZjoR1hqPL+PjA/Rmwncy8/2QKn3fagM5oTeLuk7ebFqL9mEBQolE9NJSTZJsN1IflRI9jxQYNN/jebaxDDF/bT+p8v0WxXGLmogzzyxviqOvrJVCjugyplLRh1AQ4XPh8yBqCeY9fN+LuKmz tboston"
     ];
     windsleep = [
+      # TODO: use a RSA4096 or ed25519 key
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6vi3Y/e5wxJzsehFyM+N16f1QAmepMwIOSL3gO9w7CZ1jUF2Cky6y/40TcNWMDyvgxbcEfobG/Foa8DXQgKcc9LZS8jjGmzTVRCKxON5hQsYXRmxzawe8Fg2bkYxpWeoknW0wgDc/3XJA17IP2ONfVtX3YVQyhf5WPDHrXojnBadXMBUtvK5p7T+L9Z3/cGB80K5BoQCC4ZRn6gkOMjpFOKYXJfIzmLI5WPvTe7B/uuEfZ8IT8nzZsi2VBwru01s+iEXs7th/rAp2Q74pWTW8Q8jhNL1E15Yct9K7yV1p6D7YPF/BCKtXKP6VzU2ULmTp6nlCkeDJvZgLP6UpzLJJ basti@windnix"
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3iUaE0wXfRfG48bLs3pCSRi3TqH8a9yuh0JfycRv/Wai+hwJ/VopqxvN+L+NVFSEGWeTAvQRDzJZhgVgP29zrWALGnuvGCSi6jeuzhm57R2ebZcnXkS3fYiowfV34BJSmYkzM3mIg8ujxIp6R/7LqCx+7IKZfLqjeWAMFzVvZcF2aIs2OP59EWJYJN8fKSXpoMk6elnDwvxHD6zzNMhLu+n/7vKJccUoqJaEaPMd/AWyBi2aFn3C1btkFQ5fT8bO9Ob9t5eh97cyny9MAvlxPIHOR/xbJ80WMgVeqst/rb8atafe4UJVf643lzmzlbyxErBGAaeTY3p9Yc93QdvVP basti@basti-ThinkPad-T530"
     ];