use sops instead of secrets module

2024-01-22 16:44:51 +03:00 · 2024-01-22 16:44:51 +03:00 · b04652173d
commit b04652173d
parent 39e87b0349
45 changed files with 1193 additions and 143 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -2,6 +2,7 @@ keys:
  - &ataraxia ad382d058c964607b7bbf01b071a8131bf166e80
  - &nixos-vps 20d2e2b90c6aa179585b6b6b34cafb9db82f1d40
  - &home-hypervisor a32018133c7afbfd05d5b2795f3b89af369520c6
+  - &amd-workstation 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
 creation_rules:
  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
@ -9,14 +10,19 @@ creation_rules:
      - *ataraxia
      - *nixos-vps
      - *home-hypervisor
+      - *amd-workstation
  - path_regex: secrets/nixos-vps/[^/]+\.(yaml|json|env|ini)$
    key_groups:
    - pgp:
      - *ataraxia
      - *nixos-vps
-
  - path_regex: secrets/home-hypervisor/[^/]+\.(yaml|json|env|ini)$
    key_groups:
    - pgp:
      - *ataraxia
      - *home-hypervisor
+  - path_regex: secrets/amd-workstation/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+    - pgp:
+      - *ataraxia
+      - *amd-workstation
--- a/flake.nix
+++ b/flake.nix
@ -147,6 +147,7 @@
          (import (./machines + "/${name}"))
          { device = name; mainuser = "ataraxia"; }
          inputs.vscode-server.nixosModule
+          inputs.sops-nix.nixosModules.sops
        ];
        specialArgs = { inherit inputs; };
      };
@ -157,6 +158,7 @@
          (import (./machines/Home-Hypervisor))
          { device = "Home-Hypervisor"; mainuser = "ataraxia"; }
          inputs.vscode-server.nixosModule
+          inputs.sops-nix.nixosModules.sops
        ];
        specialArgs = { inherit inputs; };
        channelName = "unstable";
@ -166,6 +168,7 @@
        modules = [
          (import (./machines/NixOS-VPS))
          { device = "NixOS-VPS"; mainuser = "ataraxia"; }
+          inputs.sops-nix.nixosModules.sops
        ];
        specialArgs = { inherit inputs; };
        channelName = "stable";
--- a/keys/hosts/amd-workstation.asc
+++ b/keys/hosts/amd-workstation.asc
@ -0,0 +1,28 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=QWBM
+-----END PGP PUBLIC KEY BLOCK-----
--- a/machines/AMD-Workstation/default.nix
+++ b/machines/AMD-Workstation/default.nix
@ -45,11 +45,12 @@
  deviceSpecific.enableVirtualisation = true;
  # VPN
  deviceSpecific.vpn.tailscale.enable = true;
-  secrets.wg-ataraxia.services = [ "wg-quick-wg0.service" ];
+  sops.secrets.wg-ataraxia.sopsFile = inputs.self.secretsDir + /wg-configs.yaml;
  networking.wg-quick.interfaces.wg0.autostart = false;
-  networking.wg-quick.interfaces.wg0.configFile = config.secrets.wg-ataraxia.decrypted;
+  networking.wg-quick.interfaces.wg0.configFile = config.sops.secrets.wg-ataraxia.path;
  # Mount
-  secrets.files-veracrypt = { };
+  # TODO: fix sops
+  sops.secrets.files-veracrypt.sopsFile = inputs.self.secretsDir + /amd-workstation/misc.yaml;
  environment.etc.crypttab = {
    text = ''
      files-veracrypt /dev/disk/by-partuuid/15fa11a1-a6d8-4962-9c03-74b209d7c46a /var/secrets/files-veracrypt tcrypt-veracrypt
--- a/machines/Dell-Laptop/default.nix
+++ b/machines/Dell-Laptop/default.nix
@ -17,9 +17,9 @@
  deviceSpecific.isGaming = false;
  deviceSpecific.enableVirtualisation = true;
  deviceSpecific.vpn.tailscale.enable = true;
-  secrets.wg-dell.services = [ "wg-quick-wg0.service" ];
+  sops.secrets.wg-dell.sopsFile = inputs.self.secretsDir + /wg-configs.yaml;
  networking.wg-quick.interfaces.wg0.autostart = false;
-  networking.wg-quick.interfaces.wg0.configFile = config.secrets.wg-dell.decrypted;
+  networking.wg-quick.interfaces.wg0.configFile = config.sops.secrets.wg-dell.path;

  boot.blacklistedKernelModules = [
    "psmouse"
--- a/machines/Home-Hypervisor/default.nix
+++ b/machines/Home-Hypervisor/default.nix
@ -2,7 +2,6 @@
 let persistRoot = config.autoinstall.persist.persistRoot or "/persist";
 in {
  imports = with inputs.self; [
-    inputs.sops-nix.nixosModules.sops
    ./backups.nix
    ./boot.nix
    ./hardware-configuration.nix
@ -44,7 +43,7 @@ in {
    })

    (import customProfiles.headscale {
-      inherit config pkgs;
+      inherit config pkgs inputs;
      inherit (import ./dns-mapping.nix) headscale-list;
    })
  ];
--- a/machines/NixOS-VPS/default.nix
+++ b/machines/NixOS-VPS/default.nix
@ -3,7 +3,6 @@
    (modulesPath + "/profiles/qemu-guest.nix")
    (modulesPath + "/profiles/minimal.nix")
    inputs.disko.nixosModules.disko
-    inputs.sops-nix.nixosModules.sops

    ./disk-config.nix
    ./network.nix
--- a/profiles/applications/act.nix
+++ b/profiles/applications/act.nix
@ -1,10 +1,11 @@
-{ config, pkgs, ... }: {
-  secrets.github-token.owner = config.mainuser;
+{ config, pkgs, inputs, ... }: {
+  sops.secrets.github-token.sopsFile = inputs.self.secretsDir + /amd-workstation/misc.yaml;
+  sops.secrets.github-token.owner = config.mainuser;

  home-manager.users.${config.mainuser} = {
    home.packages = [ pkgs.act ];
    home.file.".actrc".text = ''
-      --secret-file ${config.secrets.github-token.decrypted}
+      --secret-file ${config.sops.secrets.github-token.path}
      -P ubuntu-latest=catthehacker/ubuntu:act-latest
      -P ubuntu-22.04=catthehacker/ubuntu:act-22.04
    '';
--- a/profiles/applications/attic.nix
+++ b/profiles/applications/attic.nix
@ -1,7 +1,7 @@
-{ config, pkgs, ... }:
+{ config, pkgs, inputs, ... }:
 let
  homeDir = config.home-manager.users.${config.mainuser}.home.homeDirectory;
-  token-file = config.secrets.attic-token.decrypted;
+  token-file = config.sops.secrets.attic-token.path;
  attic-config = pkgs.writeText "config.toml" ''
    default-server = "dev"
    [servers.dev]
@ -22,7 +22,8 @@ in {
    };
  };

-  secrets.attic-token.services = [ "attic-config" ];
+  sops.secrets.attic-token.sopsFile = inputs.self.secretsDir + /misc.yaml;
+  sops.secrets.attic-token.restartUnits = [ "attic-config.service" ];
  systemd.services.attic-config = {
    serviceConfig.Type = "oneshot";
    script = ''
--- a/profiles/packages/narodmon-py.nix
+++ b/profiles/packages/narodmon-py.nix
@ -63,7 +63,7 @@ try:
    if temp is not None:
        print_page(temp)
        raise SystemExit(0)
-    api_key = read_key('/var/secrets/narodmon-key')
+    api_key = read_key('/tmp/narodmon-key')
    data['api_key'] = api_key
    response = requests.post(
        'http://narodmon.com/api',
--- a/profiles/packages/yandex-taxi-py.nix
+++ b/profiles/packages/yandex-taxi-py.nix
@ -4,12 +4,12 @@ import requests
 import json
 import io
 import sqlite3
+import sys
 from sqlite3 import Error
 from requests.exceptions import RequestException


 database = "/srv/yandex.db"
-params_file = "/var/secrets/yandex-token"


 def create_connection(db_file):
@ -70,6 +70,7 @@ def read_params(filename):


 def main():
+    params_file = sys.argv[1]
    conn = create_connection(database)
    with conn:
        create_ride(conn)
--- a/profiles/servers/atticd.nix
+++ b/profiles/servers/atticd.nix
@ -1,10 +1,11 @@
 { config, lib, pkgs, inputs, ... }: {
  imports = [ inputs.attic.nixosModules.atticd ];
-  secrets.attic.services = [ "atticd.service" ];
+  sops.secrets.atticd.sopsFile = inputs.self.secretsDir + /home-hypervisor/atticd.yaml;
+  sops.secrets.atticd.restartUnits = [ "atticd.service" ];

  services.atticd = {
    enable = true;
-    credentialsFile = config.secrets.attic.decrypted;
+    credentialsFile = config.sops.secrets.atticd.path;
    user = "atticd";
    group = "atticd";
    settings = {
--- a/profiles/servers/authentik.nix
+++ b/profiles/servers/authentik.nix
@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, pkgs, inputs, ... }:
 let
  backend = config.virtualisation.oci-containers.backend;
  data-dir = "/srv/authentik";
@ -13,15 +13,17 @@ let
  owner = "1000";
  authentik-version = "2023.10.6";
 in {
-  secrets.authentik-env.services = [ "${backend}-authentik-server.service" ];
-  secrets.authentik-ldap.services = [ "${backend}-authentik-ldap.service" ];
+  sops.secrets.authentik-env.sopsFile = inputs.self.secretsDir + /home-hypervisor/authentik.yaml;
+  sops.secrets.authentik-ldap.sopsFile = inputs.self.secretsDir + /home-hypervisor/authentik.yaml;
+  sops.secrets.authentik-env.restartUnits = [ "${backend}-authentik-server.service" ];
+  sops.secrets.authentik-ldap.restartUnits = [ "${backend}-authentik-ldap.service" ];

  virtualisation.oci-containers.containers = {
    authentik-postgresql = {
      autoStart = true;
      image = "docker.io/library/postgres:12-alpine";
      extraOptions = [ "--pod=${pod-name}" ];
-      environmentFiles = [ config.secrets.authentik-env.decrypted ];
+      environmentFiles = [ config.sops.secrets.authentik-env.path ];
      volumes = [
        "${data-dir}/db:/var/lib/postgresql/data"
      ];
@ -45,7 +47,7 @@ in {
        AUTHENTIK_REDIS__HOST = "authentik-redis";
        AUTHENTIK_POSTGRESQL__HOST = "authentik-postgresql";
      };
-      environmentFiles = [ config.secrets.authentik-env.decrypted ];
+      environmentFiles = [ config.sops.secrets.authentik-env.path ];
      volumes = [
        "${data-dir}/media:/media"
        "${data-dir}/custom-templates:/templates"
@ -61,7 +63,7 @@ in {
        AUTHENTIK_REDIS__HOST = "authentik-redis";
        AUTHENTIK_POSTGRESQL__HOST = "authentik-postgresql";
      };
-      environmentFiles = [ config.secrets.authentik-env.decrypted ];
+      environmentFiles = [ config.sops.secrets.authentik-env.path ];
      # user = "root";
      volumes = [
        # "/var/run/${backend}/${backend}.sock"
@ -79,7 +81,7 @@ in {
        AUTHENTIK_HOST = "https://auth.ataraxiadev.com";
        AUTHENTIK_INSECURE = "false";
      };
-      environmentFiles = [ config.secrets.authentik-ldap.decrypted ];
+      environmentFiles = [ config.sops.secrets.authentik-ldap.path ];
    };
  };

--- a/profiles/servers/gitea.nix
+++ b/profiles/servers/gitea.nix
@ -1,23 +1,25 @@
-{ pkgs, config, lib, ... }:
+{ pkgs, config, lib, inputs, ... }:
 let
  gitea-user = config.services.gitea.user;
  gitea-group = "gitea";
  runner-user = "gitea-runner";
  runner-group = "root";
  gitea-secret = {
+    sopsFile = inputs.self.secretsDir + /home-hypervisor/gitea.yaml;
    owner = gitea-user;
-    services = [ "gitea.service" ];
+    restartUnits = [ "gitea.service" ];
  };
  runner-secret = services: {
+    sopsFile = inputs.self.secretsDir + /home-hypervisor/gitea.yaml;
    owner = runner-user;
-    services = services;
+    restartUnits = services;
  };
 in {
-  secrets.gitea = gitea-secret;
-  secrets.gitea-mailer = gitea-secret;
-  secrets.gitea-secretkey = gitea-secret;
-  secrets.gitea-internaltoken = gitea-secret;
-  secrets.gitea-runner-hypervisor = runner-secret [ "gitea-runner-hypervisor.service" ];
+  sops.secrets.gitea = gitea-secret;
+  sops.secrets.gitea-mailer = gitea-secret;
+  # sops.secrets.gitea-secretkey = gitea-secret;
+  # sops.secrets.gitea-internaltoken = gitea-secret;
+  sops.secrets.gitea-runner-hypervisor = runner-secret [ "gitea-runner-hypervisor.service" ];

  persist.state.directories = [
    "/var/lib/gitea-runner"
@ -33,7 +35,7 @@ in {
    appName = "AtaraxiaDev's Gitea Instance";
    database = {
      type = "postgres";
-      passwordFile = config.secrets.gitea.decrypted;
+      passwordFile = config.sops.secrets.gitea.path;
    };
    dump = {
      enable = true;
@ -43,7 +45,7 @@ in {
    };
    lfs.enable = true;
    stateDir = "/srv/gitea/data";
-    mailerPasswordFile = config.secrets.gitea-mailer.decrypted;
+    mailerPasswordFile = config.sops.secrets.gitea-mailer.path;
    settings = {
      server = {
        DOMAIN = "code.ataraxiadev.com";
@ -126,7 +128,7 @@ in {
    enable = true;
    name = "hypervisor";
    url = config.services.gitea.settings.server.ROOT_URL;
-    tokenFile = config.secrets.gitea-runner-hypervisor.decrypted;
+    tokenFile = config.sops.secrets.gitea-runner-hypervisor.path;
    labels = [
      "native:host"
      "debian-latest:docker://debian:12-slim"
--- a/profiles/servers/headscale.nix
+++ b/profiles/servers/headscale.nix
@ -1,4 +1,4 @@
-{ config, pkgs, headscale-list ? {}, ... }:
+{ config, pkgs, inputs, headscale-list ? {}, ... }:
 let
  domain = "wg.ataraxiadev.com";
 in {
@ -30,14 +30,15 @@ in {
    };
  };

-  secrets.headscale-oidc = {
+  sops.secrets.headscale-oidc = {
+    sopsFile = inputs.self.secretsDir + /home-hypervisor/headscale.yaml;
    owner = "headscale";
-    services = [ "headscale.service" ];
+    restartUnits = [ "headscale.service" ];
  };
  systemd.services.headscale = {
    serviceConfig.TimeoutStopSec = 10;
    serviceConfig.TimeoutStartSec = 300;
-    serviceConfig.EnvironmentFile = config.secrets.headscale-oidc.decrypted;
+    serviceConfig.EnvironmentFile = config.sops.secrets.headscale-oidc.path;
    serviceConfig.ExecStartPre = (pkgs.writeShellScript "wait-dns.sh" ''
      until ${pkgs.host}/bin/host auth.ataraxiadev.com > /dev/null; do sleep 1; done
    '');
--- a/profiles/servers/hoyolab.nix
+++ b/profiles/servers/hoyolab.nix
@ -1,14 +1,14 @@
-{ config, pkgs, lib, ... }: {
-  secrets.hoyolab-cookie1.services = [ ];
-  secrets.hoyolab-cookie2.services = [ ];
-  secrets.hoyolab-cookie3.services = [ ];
-  
+{ config, inputs, ... }: {
+  sops.secrets.hoyolab-cookie1.sopsFile = inputs.self.secretsDir + /home-hypervisor/hoyolab.yaml;
+  sops.secrets.hoyolab-cookie2.sopsFile = inputs.self.secretsDir + /home-hypervisor/hoyolab.yaml;
+  sops.secrets.hoyolab-cookie3.sopsFile = inputs.self.secretsDir + /home-hypervisor/hoyolab.yaml;
+
  services.hoyolab-daily-bot = {
    enable = true;
    cookieFiles = [
-      config.secrets.hoyolab-cookie1.decrypted
-      config.secrets.hoyolab-cookie2.decrypted
-      config.secrets.hoyolab-cookie3.decrypted
+      config.sops.secrets.hoyolab-cookie1.path
+      config.sops.secrets.hoyolab-cookie2.path
+      config.sops.secrets.hoyolab-cookie3.path
    ];
  };
 }
--- a/profiles/servers/joplin-server.nix
+++ b/profiles/servers/joplin-server.nix
@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, pkgs, inputs, ... }:
 let
  joplin-data = "/srv/joplin/data";
  joplin-db-data = "/srv/joplin/postgres";
@ -7,8 +7,10 @@ let
  pod-name = "joplin-pod";
  open-ports = [ "127.0.0.1:22300:22300/tcp" ];
 in {
-  secrets.joplin-env = { };
-  secrets.joplin-db-env = { };
+  sops.secrets.joplin-env.sopsFile = inputs.self.secretsDir + /home-hypervisor/joplin.yaml;
+  sops.secrets.joplin-db-env.sopsFile = inputs.self.secretsDir + /home-hypervisor/joplin.yaml;
+  sops.secrets.joplin-env.restartUnits = [ "${backend}-joplin.service" ];
+  sops.secrets.joplin-db-env.restartUnits = [ "${backend}-joplin-db.service" ];

  # FIXMEL mailer
  virtualisation.oci-containers.containers = {
@ -16,7 +18,7 @@ in {
      autoStart = true;
      dependsOn = [ "joplin-db" ];
      environment = { MAX_TIME_DRIFT = "0"; };
-      environmentFiles = [ config.secrets.joplin-env.decrypted ];
+      environmentFiles = [ config.sops.secrets.joplin-env.path ];
      extraOptions = [ "--pod=${pod-name}" ];
      image = "docker.io/ataraxiadev/joplin-server:2.9.17";
      volumes = [
@ -26,7 +28,7 @@ in {
    };
    joplin-db = {
      autoStart = true;
-      environmentFiles = [ config.secrets.joplin-db-env.decrypted ];
+      environmentFiles = [ config.sops.secrets.joplin-db-env.path ];
      extraOptions = [ "--pod=${pod-name}" ];
      image = "docker.io/postgres:13";
      volumes = [ "${joplin-db-data}:/var/lib/postgresql/data" ];
--- a/profiles/servers/media-stack/kavita.nix
+++ b/profiles/servers/media-stack/kavita.nix
@ -1,9 +1,10 @@
-{ config, lib, pkgs, ... }:
+{ config, inputs, ... }:
 let
  backend = config.virtualisation.oci-containers.backend;
  nas-path = "/media/nas/media-stack";
 in {
-  secrets.mailserver-kavita = { };
+  sops.secrets.kavita-mail.sopsFile = inputs.self.secretsDir + /home-hypervisor/kavita.yaml;
+  sops.secrets.kavita-mail.restartUnits = [ "${backend}-kavitaemail.service" ];

  virtualisation.oci-containers.containers = {
    kavita = {
@ -33,7 +34,7 @@ in {
        DISP_NAME = "Kavita <no-reply>";
        ALLOW_SENDTO = "false";
      };
-      environmentFiles = [ config.secrets.mailserver-kavita.decrypted ];
+      environmentFiles = [ config.sops.secrets.kavita-mail.path ];
      extraOptions = [ "--pod=media-stack" ];
    };
  };
--- a/profiles/servers/nginx.nix
+++ b/profiles/servers/nginx.nix
@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, pkgs, inputs, ... }:
 let
  authentik = { proxyPass ? null, proxyWebsockets ? false, root ? {}, rootExtraConfig ? "", locations ? {}, extraConfig ? "", ... }: {
    extraConfig = ''
@ -337,7 +337,9 @@ in {
    group = config.services.nginx.group;
  };

-  secrets.narodmon-key.owner = config.services.nginx.user;
+  sops.secrets.narodmon-key.sopsFile = inputs.self.secretsDir + /home-hypervisor/api.yaml;
+  sops.secrets.narodmon-key.owner = config.services.nginx.user;
+  sops.secrets.narodmon-key.path = "/tmp/narodmon-key";

  system.activationScripts.linkPyScripts.text = ''
    [ ! -d "/srv/http/api.ataraxiadev.com" ] && mkdir -p /srv/http/api.ataraxiadev.com
--- a/profiles/servers/outline.nix
+++ b/profiles/servers/outline.nix
@ -1,11 +1,12 @@
-{ config, pkgs, lib, ... }: {
-  secrets = let
+{ config, inputs, ... }: {
+  sops.secrets = let
    default = {
+      sopsFile = inputs.self.secretsDir + /home-hypervisor/outline.yaml;
      owner = config.services.outline.user;
-      services = [ "outline.service" ];
+      restartUnits = [ "outline.service" ];
    };
  in {
-    minio-outline = default;
+    outline-minio-key = default;
    outline-mail = default;
    outline-oidc = default;
    outline-key = default;
@ -19,7 +20,7 @@

    storage = {
      accessKey = "outline";
-      secretKeyFile = config.secrets.minio-outline.decrypted;
+      secretKeyFile = config.sops.secrets.outline-minio-key.path;
      region = config.services.minio.region;
      uploadBucketUrl = "https://s3.ataraxiadev.com";
      uploadBucketName = "outline";
@ -31,7 +32,7 @@
      tokenUrl = "https://auth.ataraxiadev.com/application/o/token/";
      userinfoUrl = "https://auth.ataraxiadev.com/application/o/userinfo/";
      clientId = "tUs7tv85xlK3W4VOw7AQDMYNXqibpV5H8ofR7zix";
-      clientSecretFile = config.secrets.outline-oidc.decrypted;
+      clientSecretFile = config.sops.secrets.outline-oidc.path;
      scopes = [ "openid" "email" "profile" ];
      usernameClaim = "email";
      displayName = "openid";
@ -42,13 +43,13 @@
      port = 465;
      secure = true;
      username = "outline@ataraxiadev.com";
-      passwordFile = config.secrets.outline-mail.decrypted;
+      passwordFile = config.sops.secrets.outline-mail.path;
      fromEmail = "Outline <no-reply@ataraxiadev.com>";
      replyEmail = "Outline <outline@ataraxiadev.com>";
    };

-    secretKeyFile = config.secrets.outline-key.decrypted;
-    utilsSecretFile = config.secrets.outline-utils.decrypted;
+    secretKeyFile = config.sops.secrets.outline-key.path;
+    utilsSecretFile = config.sops.secrets.outline-utils.path;
  };

  persist.state.directories = [
--- a/profiles/servers/radicale.nix
+++ b/profiles/servers/radicale.nix
@ -1,7 +1,8 @@
-{ config, pkgs, lib, ... }: {
-  secrets.radicale-htpasswd = {
+{ config, inputs, ... }: {
+  sops.secrets.radicale-htpasswd = {
+    sopsFile = inputs.self.secretsDir + /home-hypervisor/radicale.yaml;
    owner = "radicale";
-    services = [ "radicale.service" ];
+    restartUnits = [ "radicale.service" ];
  };
  services.radicale = {
    enable = true;
@ -11,7 +12,7 @@
      };
      auth = {
        type = "htpasswd";
-        htpasswd_filename = config.secrets.radicale-htpasswd.decrypted;
+        htpasswd_filename = config.sops.secrets.radicale-htpasswd.path;
        htpasswd_encryption = "bcrypt";
      };
      storage = {
--- a/profiles/servers/restic-server.nix
+++ b/profiles/servers/restic-server.nix
@ -1,14 +1,13 @@
-{ config, pkgs, lib, ... }:
+{ config, inputs, ... }:
 let
  resticPort = 8010;
  fqdn = "restic.ataraxiadev.com";
  certFile = "${config.security.acme.certs.${fqdn}.directory}/fullchain.pem";
  keyFile = "${config.security.acme.certs.${fqdn}.directory}/key.pem";
 in {
-  secrets.restic-htpasswd = {
-    services = [ "restic-rest-server.service" ];
-    owner = "restic:restic";
-  };
+  sops.secrets.restic-htpasswd.sopsFile = inputs.self.secretsDir + /home-hypervisor/restic.yaml;
+  sops.secrets.restic-htpasswd.restartUnits = [ "restic-rest-server.service" ];
+  sops.secrets.restic-htpasswd.owner = "restic";

  security.acme.certs.${fqdn} = {
    webroot = "/var/lib/acme/acme-challenge";
@ -27,7 +26,7 @@ in {
    prometheus = true;
    extraFlags = [
      "--prometheus-no-auth"
-      "--htpasswd-file=${config.secrets.restic-htpasswd.decrypted}"
+      "--htpasswd-file=${config.sops.secrets.restic-htpasswd.path}"
      "--tls" "--tls-cert=${certFile}" "--tls-key=${keyFile}"
    ];
  };
--- a/profiles/servers/vaultwarden.nix
+++ b/profiles/servers/vaultwarden.nix
@ -1,9 +1,7 @@
-{ config, pkgs, lib, ... }:
-let
-  user = config.users.users.vaultwarden.name;
-  group = config.users.groups.vaultwarden.name;
-in {
-  secrets.vaultwarden.owner = user;
+{ config, lib, inputs, ... }: {
+  sops.secrets.vaultwarden.sopsFile = inputs.self.secretsDir + /home-hypervisor/vaultwarden.yaml;
+  sops.secrets.vaultwarden.owner = config.users.users.vaultwarden.name;
+  sops.secrets.vaultwarden.restartUnits = [ "vaultwarden.service" ];

  services.vaultwarden = {
    enable = true;
@ -34,7 +32,7 @@ in {
      # rocketWorkers = 10;
      dataDir = "/var/lib/bitwarden_rs";
    };
-    environmentFile = config.secrets.vaultwarden.decrypted;
+    environmentFile = config.sops.secrets.vaultwarden.path;
  };

  # We need to do this to successufully create backup folder
--- a/profiles/servers/webhooks.nix
+++ b/profiles/servers/webhooks.nix
@ -1,4 +1,4 @@
-{ config, pkgs, lib, ... }:
+{ config, pkgs, inputs, ... }:
 let
  blog-hook = pkgs.writeShellApplication {
    name = "blog-hook";
@ -9,7 +9,9 @@ let
    '';
  };
 in {
-  secrets.webhook-blog.owner = "webhook";
+  sops.secrets.webhook-blog.sopsFile = inputs.self.secretsDir + /home-hypervisor/webhooks.yaml;
+  sops.secrets.webhook-blog.owner = "webhook";
+  sops.secrets.webhook-blog.restartUnits = [ "webhook.service" ];

  persist.state.directories = [ "/var/lib/webhook" ];

@ -27,7 +29,7 @@ in {
    group = "webhook";
    user = "webhook";
    environmentFiles = [
-      config.secrets.webhook-blog.decrypted
+      config.sops.secrets.webhook-blog.path
    ];
    hooksTemplated = {
      publish-ataraxiadev-blog = ''
--- a/profiles/servers/yandex-db.nix
+++ b/profiles/servers/yandex-db.nix
@ -1,11 +1,11 @@
-{ config, lib, pkgs, ... }: {
-  secrets.yandex-token = {};
+{ config, pkgs, inputs, ... }: {
+  sops.secrets.yandex-token.sopsFile = inputs.self.secretsDir + /home-hypervisor/yandex.yaml;

  systemd.services.yandex-db = {
    description = "Gathers data on rides taken via Yandex Taxi.";
    serviceConfig = {
      Type = "oneshot";
-      ExecStart = pkgs.yandex-taxi-py;
+      ExecStart = "${pkgs.yandex-taxi-py} ${config.sops.secrets.yandex-token.path}";
    };
    startAt = "*:0/15";
  };
--- a/profiles/workspace/proxy.nix
+++ b/profiles/workspace/proxy.nix
@ -1,11 +1,12 @@
-{ config, pkgs, lib, ... }: {
-  secrets."xray-config.json".permissions = "444";
-  secrets.tor-config = {};
+{ config, lib, inputs, ... }: {
+  sops.secrets.tor-config.sopsFile = inputs.self.secretsDir + /proxy.yaml;
+  sops.secrets.tor-config.restartUnits = [ "container@tor.service" ];
+  # secrets."xray-config.json".permissions = "444";

-  services.xray = {
-    enable = true;
-    settingsFile = config.secrets."xray-config.json".decrypted;
-  };
+  # services.xray = {
+  #   enable = true;
+  #   settingsFile = config.secrets."xray-config.json".decrypted;
+  # };

  containers.tor = {
    autoStart = false;
@ -15,15 +16,12 @@
    localAddress = "192.168.1.11";
    privateNetwork = true;
    tmpfs = [ "/" ];
-    bindMounts."/var/secrets" = {
-      hostPath = "/var/secrets";
-      isReadOnly = true;
-    };
+    bindMounts."/tmp/tor-config".hostPath = config.sops.secrets.tor-config.path;
    config = { config, pkgs, ... }: {
      services.tor.enable = true;
      systemd.services.tor-config = {
        script = ''
-          cp /var/secrets/tor-config /var/lib/tor/tor-config
+          cp /tmp/tor-config /var/lib/tor/tor-config
          chown tor /var/lib/tor/tor-config
          chmod 600 /var/lib/tor/tor-config
          sed -i 's#obfs4proxy-path#${pkgs.obfs4}/bin/obfs4proxy#' /var/lib/tor/tor-config
--- a/secrets/amd-workstation/misc.yaml
+++ b/secrets/amd-workstation/misc.yaml
@ -0,0 +1,48 @@
+files-veracrypt: ENC[AES256_GCM,data:dNMgtUOBr0X23pfF7J3BUyl0KhJE,iv:4Ls/xNXOeU4yFwrYioBmk27BBVSF51k6kyKI/c4Ijh4=,tag:sMJhjWSBEze2xZvrPpUoGA==,type:str]
+github-token: ENC[AES256_GCM,data:UMADjnHC3WZqXksIjtRjjFA1BEnjfYtukkFT52ReK8ihFDtDYIAuZBR2DyQCK3nAvKUStfZV37Xb4GnL6w6TXkLc4W4XbXXp+g544u61Lxp0zFeZPtOXupBheSwjGhuBerklYqk2txfsiw==,iv:0JWB6Mv9g1yZ8+p+qYicYyrQbq/Vf0xJNtjWWknR3nk=,tag:ZTsWgCEYe0YzhTmbijhqbw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:00:26Z"
+    mac: ENC[AES256_GCM,data:6aICnoUORZ/pptXSryLno2xPdEMbHApXql4osbjR/4nm+yaSsI1zg/RdVDCfCp1m4ivH4soV3F6ZDAQv8qQcGAwv3pHqHBSYc35FRWNc8aYgxnDImG3VcKNgOSvc7btCMNHVx+6IiKhUkfSa7ZdWP8jIJAsQzrQ789PUA9sVvOo=,iv:PBhM8iJrBbSKlrZgq0/SbYR4/XJ0pOBFu8ToaoQTo2Y=,tag:T1keFCAhLQUONJDbNnzI+A==,type:str]
+    pgp:
+        - created_at: "2024-01-21T18:40:22Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf9Eol+8li88oCPJnobMzlc+zAUzuS8svuJuPgtauFG0WaE
+            3lOaGw0D/xcpAz0mt1TfTdB/14gt/hqrVoYGPEbvo3UTVLSnNKnnahEd9VexbDBg
+            MJ79zUft2YFsVsCBuok3oMrQMRUCqN8ktOVEX1ukwce+/nTfLP9/WfVnFSXMEuKs
+            S/8ocZmP9VtVM2Ij7II5wbYBVJ54806/oCs6ahMpRj0hviXMazaeHYsYiyMEqXek
+            I8zOggu2h2hEOdT+TeS3xv9mZEBQcZiDQ0SD3HVUKU9iF0uOqTHe0H5axVde6BIv
+            cNIl7L2UOYUVFNeOvP7/ntd75fMrOZIZN6ixlxpyutJWAW3scQW5eMNmCC+P6axh
+            SUhPt2Dk7WwQigoGXu+M7sk5EX68CEj5U4N/hBYx6KJYmFKNG/Ei++IFXlMS5nSB
+            /oIx1zRp1IqEJjXZ+EFQUiLyG73s9XE=
+            =x12q
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T18:40:22Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHARAAqEZuN62ezZzl0VhwD/cfV9m0vX0NTZB2fpWuDIKUAWez
+            PAg91MTN/bHrTXyAIvYnS4unSWibMCj+XFy+8HUI1h1IDlXbGPq8KUaquN3jj9A/
+            z8s/9j2psE4cDkJ2LvM9YTwHFyakv/MBkkeeAB3mjc6VyZw8YjmABpIiOifinJzL
+            dsY1YE3GUDt+aGljRO6ISjvpiIA68SclSqUVVoceM+C4q8JamCosFmVJdiuDnrTu
+            /oJaWT5i6dEEUyT7eZ7ehCDMklDmdMBHsPXq+7TLzAqYnrwlctQ+lt4qXS2n4jWW
+            GG1EMtJ59KJeri7ZnvhyucyOp8oF2BKVnq0/Iq27+EjrqzBSRnNgyd1WwdIWnCDm
+            P1pCnMcT01p93iLcN6qYx/icDyIdRDCv14nbcneEDzIKuX6ywn7lYCr8QsLACZKO
+            bWVAMFlDctyAo8tdWcmuQEBQ1ZuOM3+V1dXvmmlJxdqVm/TdIWY3BjEFrymgo8z6
+            fjdNvJHJNdJLDnhHhx29iXLRW3hR+nfm8I5KLsess5YoEnPDQUr9GJpUAmdFtdXt
+            50US3N2gUMstnu0g0b5v3IVOInpMYBpdy/WyYjY4MxSLsEXNFNhhd1wGbYT4nPYU
+            f9FzntQXtxg3bwPp4jNVQ+IM/x0txw9VjxqIPRxidtodl09qMYQl8eaIIg8ip1jS
+            VgFnDJ4uB97stBh1gHe9/ERPsk/6M2Zt1qoOFTNAJwy3tYvSP3c+88YQHdjvitZT
+            zP8RJe+sbjk4aMyWDBbuOzhRKMVNYQlKHejof3n5tro7iDneWGDU
+            =odKi
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/backup-conf.yaml
+++ b/secrets/backup-conf.yaml
@ -10,60 +10,80 @@ sops:
    lastmodified: "2024-01-19T11:27:22Z"
    mac: ENC[AES256_GCM,data:EskxLpbdlrpB5yvUsyzgjoozqwPgDnqPLSkA8WcHmreqR+v1mEM/xY2GAije2TA4Bg7WGSKEBonuapk5hMHtehXy7+9iytdloDNQtXJWAoOy2PLd55E7shUdBVilEAa2mCUz5VDBz9jXMtlW0jv13W4iwXQ9ixKmzaUr/JSpnCk=,iv:t2MBxAtKrMOG/BoBOszkTu+o4bELfmU2cVLbvZK+BZw=,tag:u6E7DZDrC58zbpYf9tqDYA==,type:str]
    pgp:
-        - created_at: "2024-01-21T14:49:26Z"
+        - created_at: "2024-01-22T10:23:32Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQEMAwcagTG/Fm6AAQf9Fx8EVyhEVBxQJO1BwmTXDcGKoB7jbd2Y5XSzy39OpiXz
-            0tCidCqp0m3ruL8K+R7sLTMmxsIIwtiu1dJ8BQFMlQ9HGarhQmuYOWzf2I/8nv2p
-            tMK3sW93NwFs4kWTeh9rKKMb+KCQKGSDYVmvjhxdBQw4VHOJLMAU+AcT35DPR2/e
-            fYD3s1BKKVJ9QoWB9e6RYYuis2UoBuX5yT3jSfUeyYJwuZ7gVzjH4GQ9fpDYhPJn
-            Z+qGeEbi7yYWh2KgcI7vw8rOLZvcHtzQGfAaOt4P4lh1yIr+1NkLfq02sDn0+Qd7
-            FhSi6NQqkBT7dReXY2o3g5Bei3or3/subFUzkZrO99JYAUskAk7Q5VuYCRXCrgx/
-            zrF2gAdkI3hLUdKtWInJKPgxQ65YAoXCv7qI8cs46fS75FGQ5dRzOjifrBV61rGM
-            4P0evJNhOvSVve8k/3Tz6ITOwidTptmstA==
-            =jaPO
+            hQEMAwcagTG/Fm6AAQgAi13fp38FAtd3V+IgDTz3BTLCzwxoqEdv1+4JreKEgRQb
+            NZ4tR24j1bQDvPYMMCsojzOoISROEQKx/qTRUp1yVlQQSYWgXoHd5RjmgTfJSqjT
+            0j/q8jldXo0osmB2vhaLKIl8QNJ5YtX2+ndxduhVnPD3LBg5NdhxjLSVlz+8MkOw
+            GwkaQRIRTjZL0ZYvecyNL+hjUD/jOarPoYQNAfRLCtQuUIOO46yumICk+yYhBEUx
+            u9car9bopUA5h5t/pxIJJ9K6AqeftdJGNwM0Q5Qzu14JVByVy/kNouMGeYn/wq2/
+            vi0kAC+Xi1VXWCGga/XOprbB0bc22HZi1sFGVK2j59JYAaoD8mGtFhOKD7QtDVGN
+            COgF7AIqlOQzqWa9ymK6FJxrAZumpPE+0bNyokvBzTpWL/trjt5Itr75RBbYTWls
+            7oZuWvhXtSMkrFEkYU+6Bm1/IZZi079Tvw==
+            =hR5N
            -----END PGP MESSAGE-----
          fp: ad382d058c964607b7bbf01b071a8131bf166e80
-        - created_at: "2024-01-21T14:49:26Z"
+        - created_at: "2024-01-22T10:23:32Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMAzTK+524Lx1AAQ//Z6haefoamhJHaNDYDo+YhWlk7NVz+51P8Z/IO6wOUa3c
-            EFjuZM47r+x9OgPQgJ5UjrRXE4NjWvFEhWm4+LWmd/q/liwFLHfNAWjmNdKxIM4N
-            tHEF8Lau3W4X73AXw7f1SC/4+IP3ykhT2M0mDYhg0t8Xdl6Wi9y6T+NcuwOYx+HA
-            qo/lROX+j2p9KL+p/fZKPh+OMnD83H3LzEQ/NgQ1gP/6BaCwRTLsViJh3G56iWVp
-            W4DstTj4dLwwbSvdKWuxczG+j9L6YzVpcCToWQLhEaLgpbs1ABoQYDofAvNXNRqN
-            49MHRmTE400ddXXR1Mtkp19CSk/3Ai7su0tIKu0NFWGAXCSe8+U4t0Z7I/c6d0K8
-            v1mrahdjkUwEFbJ0nVGOspnkK+yI6mcxI2c8Q1otfNhQLEZ1KBxhf2xLDQJyzPk5
-            WmlwmbNnuli+WOSTCdz+BcpprjY50osQvSGb6v/3oQpNXQhCOmtrTMfWVh7FOOZ6
-            Z3ipaYsakO3blyDiigOanjGRnrnJ2k1mn+bualVt5qu+be1QkDfXNVZXfq5X2M/E
-            mGa0jY0csjT2pfWIIsvu7BPPVzo+fx2fu3QaB7OGU572JIDGYYGKUUJ+YlMXvPLT
-            3zf4aihmmyq+pl1rydBjAkR/wD+GR2VCAK6cg09amUxYZvgafqkYEHDHA2j6elDS
-            WAHRfpkn/tLxNhiLASu0YVp4xUAU0Zmj81raIdImBtGUU6wuBVBBjzzueQcCSPNA
-            ULXHhHI3BrfaqRNUE/t3CSNSo/2Pr9gGP04nhB27kZqHpLEXwWUweZQ=
-            =6PEl
+            hQIMAzTK+524Lx1AAQ/9E2ycecefgJ4SVwkuP2wC8WEXuhbjHYFRomGARZPhnazb
+            eQYE7Eqbt8XqHOGi0WwI4ml/R1F2r66e++jj6UDMCqxNgqodCOOuxWL3Kjuj+9eb
+            J5kjo6XraNSCX+3+YOpWIBoaopMEaqZUksdzQQBXzBo8eARtlaEwFnEn9elV1mpQ
+            PkFPotESZk+Vlyt9cervCconpBZyHPL+9RBNx+FZ4YNcpHMx6bT2PXJEdGZpBI20
+            57588el1c1AfJztsE+vsJgW8oLDBuJhQdkgU9sJeLUfP66OaPXc77QmxAwJ58jQZ
+            0RCER10mZx3DkV35kCdB2vZoHTApIByjm841s5UYqpBIePsmrM6BofpbDd+/eIvR
+            QumOc1KEha5MNqMnj5lb7gZQLbbPg4FAn0MJWQ/QS2Q2Kh9rStr094Hg/WnlL7tu
+            Bg3ZxzYxQ5wAhnXMI3dJW4jQdsbEy9qHqLBaTj/1u1PQtBreJz3oQha4IsRVQN50
+            KFoaopfRwVC/NrWzuytamqJQJ1IKObNUY0IUCo9+FqK+NhaTOj28RNDQ+zWf1KTV
+            v4h2hWvS8fy2EJItiSdbdDi02E6UCNp2x9hWAz59LzVnK/sshIkpiRT90v37+t90
+            Xf4+rRiC0/9ZVIQhUJ/PeEdX/iWgv13c0DrZbk3ZW2M5HeWLFTEQHq/olBNEluDS
+            WAH/mdz3x1u/5meJNe6ZckpVsOZF/kmb5b2hDN1nzqotV4cR6RXoqpKXzhZ66XTu
+            FzbvV/S4Xmg6KthuIfla4yKt92w8sSThgNj6H6J+O3TsUpZiGp8MRXQ=
+            =vNLc
            -----END PGP MESSAGE-----
          fp: 20d2e2b90c6aa179585b6b6b34cafb9db82f1d40
-        - created_at: "2024-01-21T14:49:26Z"
+        - created_at: "2024-01-22T10:23:32Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA187ia82lSDGAQ/+M2lwcOdoyCcB2u57IThqM6o31ciA0Qj9DfJnh36pZz4x
-            XGe+cWCQ9N3mohGUvNxzt+1HDMH/y+VLoOFqVIq7VpdnyDk6hm9dhnIhAWaBPVQR
-            00OJZm7gNlFiOOsaQdxvPrQ7RE1u2lwm5yoX6SAeVd3fYaDtxdESA7IEylb7N+cz
-            8Rzkqbt28Up8QApkHUMI3tSHsN98uVuvixEIWZPFVwVPRrozOaR14M+5WIsdBSEz
-            hL4WzQwhvMfWzAOlUliDQ1U5W5mV2e/bkrAOcJJw0HRzD7q88cqTxNDHCywPOI2D
-            UUf0sj+evMXNrMTDRw+tqedRLJa+3deWwCLZWZEEpYHOLLZ8P6SF3wC4JVhIZxmD
-            PWkWyB4DXlOv8zdm+fbUBPMY0Z5bxwaQTrR4oW7zgBXC1Jew1bLBvFg3sZ6OzHoA
-            W/Ra3TE1Mql45iuqx8sHcpP8SPdRfQmboAnwl+DB/ogTjd+YXN+nTvkcxGUcN1I6
-            Hln37NX0BxoGXCT0zjcocE11CRcDheTM7knbLimynTDrZOIziWHEySojNfdrKf1z
-            bhGPopaDUjwqVpwSYWxadht4d1yYK9Ug+jBo8mV0XyMlqHcrYXPc8G0CSm/vq/Rh
-            ts+KuLlD2oe8saMif8IzEQQem+0QD8W3PdLJFLKOg4hM+bqQWS3I8jIbqF0nH/HS
-            WAHpZIVfwdC2nkkSymvHdPjVxqv0ylG+/ucBV17zai5K+HYCaDnsz+HwkoIjn+BS
-            VGI7jQWoT3fY58bWzURoFqNcFWbbqM7NRChKSICTdnZnICu+6oxds+4=
-            =ODJl
+            hQIMA187ia82lSDGAQ//TnmC8RJpkk16/cFd6pbXhHq97SrwvCUBBkUFIzlnkw2v
+            Uyldt6RZrnd+5FkWynd7NVxr7WZJEReFk/bzYLCDQkUR+0tutLlviVUzPSl28g9/
+            4uJ6RIKNSCKGJqvJf57Z7OLVAPQ+g9TfNiLysWe41zOAMOossBXlMvKmZfnRKX/f
+            k+Sx04x7ttErHHB06UGjCfY9ZGgH3pvHCNG5vvaf1vA5upGvZoNXRPLVcS8fAvkk
+            GTbVUGcn0dTvnozco4D0rGdHFlFd4bDZcdZ7me1DYrU6cMJdgp04Bt3+1V+fMm6t
+            VfmpyKxrX/njYlIOBew+OFZgJ2DVBgS0S9VBgGqNYTUxat87Uuv92Pu8AX/aXY/W
+            VKp6NXtgOpZD9HwUX2gXTanviP8tRFGqPngoEk0xSC+gPEzmxSSGVVT62Ifp3ui1
+            w3IUFceH6u0QKDogwYTXkPZUhURuMK9dqLoctQWCAfScMmZAHy+CLbpF4OHAjKdo
+            JfCJsl1SDTyvcUI+sFVK/DBom2gSYwAwZ8mpglrCXpHgFT7L30ObkVY73218mJKj
+            DfWhDgwKIJ6fuN5IMzT+e6Cn2mOoAxLrtiNkJSq8jBh4+lKqVlkTbE78oAOSyynk
+            hJatsQWFFuY9NWbRrCkG8WY8xJvFVKM+VsT4QQLHsEmT4ZAhVZStKCf/DvVA7mTS
+            WAGa4FUdpF+dX7emfOvlF2r99GWmp6WMWmQPOuN9GPIFJmFwJ4SOJHof2oaVgoAX
+            Ev7OfBYm8xhnujiIm8Ezc+zr+aWUfGLWs6V330sRhEM74fb73Jfb2P8=
+            =yQEE
            -----END PGP MESSAGE-----
          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+        - created_at: "2024-01-22T10:23:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHAQ//Z5aAJSSn7kDPez7GAVYzcifAAl/7WgR9T6gZQ2sIcsLr
+            ZYqzWXy/4iRnp1xiEc+GnohjYhhWkiom4TBdePD9rX1tJjxHEuYq5ZNwvUtBp/1U
+            Uz0UBZRW/C3jz8w0YFuz8EoOY4Zm/ZJv5XdNgox5EkbjUVVhMI2swbVX7W3Dbp3G
+            SAePNCGoYX1kTKOmUn8IdL2UiVE8qwVT4JkTeMc74x2jnaOSXnhltBpEcv61HDIm
+            r9po1vk1O5omJJUh2G7YCFVtYwZBUXd1FrotawNkT+e/+bPQkmZwFmCZYrx2LAR8
+            Di8gITsxfkaMtHGvg1V8U6WA8k1GpsVCSo3CEbCICx5SPYNbIm65j1GMkTeNzn4P
+            WERmt8HidaTAnJtBTQ6OiG3Cc3h6nym39iIxi8FdDpyYQix65JR3r2riYxH89Hw8
+            7Ri+++73z55ViFofIJSBuEWyqD72hc3NNR0T758HhB21dS75rVzCvaIRdyLTN1Kt
+            nYVI9lz36PPadPRqH1Fxgj8G94C5ZhjEE58UyuBKAkNuJMgYT5XvMs+XEMkDHfnf
+            ZqbqGFlmpZi/YBQvkN+Iq9yJA2Iyo3jzPm1cUChfEsxNKPHziDm1ufHAH3JxqjXR
+            S+5bzIlx8afECm2ZyQgKjfgQdh9NPWnsrh8T03aAWtiC/Rt8AEvkJePuvnBmURfS
+            WAEJuHnja9Y5Itufgja9NTFtRDpStVXgOVQ9P8WKA+FeCYNeh3hJCfU6rlaICXhu
+            VsMGYbgHN53wVAQ4PjlTbXTCRzml45qGJDsdTUsIzkZ2mhB/yCtWXjs=
+            =XJa+
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/secrets/home-hypervisor/api.yaml
+++ b/secrets/home-hypervisor/api.yaml
@ -0,0 +1,47 @@
+narodmon-key: ENC[AES256_GCM,data:sNzfMEF5W6aaRAukJw==,iv:WUHbk+SYoU5J2L5eL16EnuH3jMIlv020oO+quWljCR0=,tag:EJ2LguJOT7HZgFjyn5eU5g==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:48:53Z"
+    mac: ENC[AES256_GCM,data:htIZ35knmE7lscDrAHv/FnhiuwWxudr8W63wv39k97FfvmlM35MAJD7hKj2aYj5fk6dHz7XqinX+ibb6q5CYhCSi2gqGp6jzoUIj3Dowo/aBci39GTbnjXHhjCUYFWSJLoJHQDa6YxhHn5LGjbVmcGUqhx2GtfF6ZYkZNboJrgY=,iv:ptcGa8QbPaFz9Ln24QHdd/lMib1c1mVCbZ7YotSqqMA=,tag:GK0RGoQpuYJuQWOW+xSKDw==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:48:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/R2IZjBGHQY/t/6p/HcRWJD5Gb5V+dszuy+dL43ckY4N8
+            7GDdTkkbbrXPMAMYU8pKCbch2ioD6E5grxWvqBxy8NbW1nBOhwgrE7pnUu4UBV/i
+            lZnV6yqXpEee1G5pZIH47FoE8QYXfLOrdOrbICtzvSgCuDzGTRsh1lKAk9vv7UhQ
+            iHKNZkDIEChQ26gkCrY7Dl9oRpP38QB7wCrtFv9m0WAZGMn8M7XsMuKh24biA1Rx
+            XWD2x4roJCu+ECS5qUFxFba4JkZgRBLu3TxJJVTJhJD58gcYot3YBYfojJT8GxEm
+            gMR1BvWgP9E5Bq9E6h+ywWPs0p4iwdumj/QKVuAK59JYAY0GQohdSG/NLdU/Ella
+            xH5sr58dG/M6Devy8Zffcwys8TdfvO7Uo1D0i6o6PMwgFnjz8Bcy5KUaQ//BSb2g
+            lDIhDLBytljJcaaxPtOp5Sq63o59ViczhA==
+            =hK/r
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:48:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//TOUhrPXts/oBMt2NTLuJcyTm847AT1J/mEEjPOwDLBXa
+            Doqo+AEdFG8nq39NVcdnhhvl49hhrwXPVsU2Pci3f+eQWgXnvXIlekuBg/ZkxOD1
+            x2CRd3NE3Ofh1DV7T/5QuoXW34vUpWUx4AZIvoIrHA/HxzFnQ6IdOrhU0J/INp7F
+            +dUUESZ0PzxV+IO0hyAlD50vvX0U9K1Hpi/j9LGRdxLRJcxK2S3QLUwHpdiix+U/
+            bEyrmsOWV47wbIdnotmxQkYJjQY0GjIPHFHNHECWru8CM0iqxzxhzZyMf2PHLslR
+            qPpEolXTltcVuerNTPTRIGg+E44vn2RCqK0nCbrW7M+1h+6w5jYLyZ55LgSEnLhV
+            eukbJckyJSYn5pXyMCJKutDT/3yTowV43dFLBsBejDXT65g1vGup+h7DXGP8WOKP
+            d+5vSnC2M73wnTddnE8kuJ5weYpSKvN2ER3hsxkYA2aYPXLkEfitLISEt1PxpQFG
+            94Cp5sDQ3xCHho2e7nlrquyN1jUbGkHG/xbBuVuAn0XbFD4IvklYuAqR5Z4VMt3S
+            +JzcahiudaQ6fhoMLxvLACbgZRQC/GyTsxhsNUsRqlmf2flyFBKtecInMMqmbFiT
+            iqTv11G5cl8A8w4YPBCs83gZwzMPmKqkamjnc9BmO6Dos5KuyDJNRe8NwXSedRTS
+            WAHofCpzoVbRSFwhn8ktw3HZKR+Eg6ndFWp68IqDUN+YYitc8BOnplbH3KfjBh/E
+            3boi9DaCzdbu8aJGfYhBqmUbnDTm22WCMphGvrQaRdjUl+hOc8ZpC5o=
+            =VzTH
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/atticd.yaml
+++ b/secrets/home-hypervisor/atticd.yaml
@ -0,0 +1,47 @@
+atticd: ENC[AES256_GCM,data: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,iv:8qwGNM8eOBy7gocS9xmTl71MQ5W+fS8BV8KrnJpeDTY=,tag:FAWd9qdZTveWTccivGgqHg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:03:17Z"
+    mac: ENC[AES256_GCM,data:v6XE7S3E3qv/NmWW3o4/xV9T6v59qFLl4XzC/oMMNSHxuHMBF4bxnK7rga31i2YDr79SGwaa+PHyU6Er8X70aIgNZykIkS/YhkUxljRMrXNrxCUw/y8Y0eqUoJC4B2GOYogAtQoXfKRwp7XpvlNxDPfxzPHtJAWd7dxDZlV8yhk=,iv:DCxLACXxDhdRTJ5QN4MTTKttRpxLSRdIGC0URrGTaUs=,tag:O9kwZ2z1zBZdl/ABKQZbig==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:02:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/TlUpH7tCtn5sWFeNNu9umsfkE8UfSqcSsn7gXIlfUnZF
+            RtcidtUGRMkhInjmsLDZINTxbr0Dd4lWKyR8qsgW7qFwAiVzJZ7Ocdsaxnlb3nzc
+            4FwVnOlnmwijEeuWnKK/tXlROQuO0xIOu9G1u5ZnLN+jwI0prEAMx0+YcGXtJ8/o
+            xQ2DL8X4VOtoS+mHrog+2XTV6L4thA+HCha0s6bd7R8ryX365BdihT8dRcQj3nSh
+            1G+dbBx4OesUCFWkUc3r4UOthu2KXGSd4DlezfcusaVQ/66scRTrqto2lTRUja1I
+            BZtD0LyNnw8k5pXUbV4dMsYhHogvEdGgnhTR3KLswNJWASafvdi8RwBIY1Rehres
+            HJGSgm1O2IaNYiJr25KjFdHxIvOb2CbSE4qls9/WyPGIaahLW+cWCnhrPx0/ZE9X
+            x8cgOwMcpllwRIPK3XFVgAa9jIe9Ucw=
+            =iW/n
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:02:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGARAAqmgHFf5eHpgJZP8nA/a33NjaMsFeaQUP6mvCWzrowcyd
+            EjGPJiU0TB74Oy5cGZp4K701a4BLKm9Sf0vvzeDuIKMEBN9dppiCNE0g8WdD3OYY
+            CZHyQJ2S2wjJcYyvNe1cQU88LzLZaOgKGTkow2dPFy1YYmUjt/6WEkYjio6xNr3C
+            etsscLJvXIEozZFrGUdGqWxoI0u/MSBzsD1FddNkhXBFxTZysCtULaR/yA30jxde
+            BgOWDcZ6xNvCEh71KEbaLiXgrGO4ew9V8P8/YtzeyL0hkRNUOVY941flMUfPabl2
+            isssXUEkmT3gtM96XpCA0M3kG142Ibl4+xnxIpqztXEJT0K5/fz1XYGmLcSQ18Li
+            NFRcghFm/6D+5U1NtkPcZ9o+tCZ98JGYcutfzumFGDUnIoGjB97fIrlh3+8ZwnnZ
+            e+7oKT4mlB5gR7zHRhCqlgs9sRUhrsGGmJU9nkXJlkqjdUZOYw1gANKh2vNeRRWI
+            Vg21WJpRf0Y8xgzu4VD2MRf4ozgcLvPuviFNRSyYJzNh/2SvjGMR4XqGXgMmUSlS
+            ZfYijezEMD3Cn7RNXR2YfQ7vX7hhFllCvzjRn775L1SrIvoZV1qPaYLYXGSiVHTX
+            SqJjyBhMW3Ekb0mdcHNu52QPMukblJQ0Ckxi1ALOX6Sm9hVFUY+2FJla641fRQXS
+            VgFQX9PrRqQGB+/vp/xZIe+SqOolSk8YSIEeLKCd9BfnFGJb7+XU4RHX/N0xL26U
+            xnhk0c2WirnnN4kx6YB/0B0UCWdOyRqZaEyDdnU5FW2sMv+9gEri
+            =woRi
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/authentik.yaml
+++ b/secrets/home-hypervisor/authentik.yaml
@ -0,0 +1,48 @@
+authentik-env: ENC[AES256_GCM,data:gyQWquVp/HOa4M07NNZ1cfzxAB2fTtGhc1CCQlHnU6HyRaGoIVHLl5syRQP3CJtCrxtd4FwmtetjGoOzouIEFo9m0EoXdr9iGc05GE3WZ9Ms2KLLeTOr6ZMQTbT9Z0LW94tnyiAZmDboSC+GTSA+Lh737sF8pr58YLPtoOlIdwP0YLgIVZdhckQ4n9VJ8MW9TuP5PorDKikG/JPHBdq6ke82qi1o0P/vruAXffGgrNcczCZUx1GcCznA+H6kubPD8vhoNx7i+/ZobGWXbnwhsmh8Sn1DUgpmV/hQeOm/2kssbLB3JgV2IBsB35fZ8nSijvOfV4tc/vYc0kcRT2Tm3KiopCTb1a6WKdR4goFSDk/16uzX5L6RpgFiQaR/Z01ACiWuj0CIMjVHJqtzKm3BkvxUnN1mOP7gvvqu72igV6bMasWbQ0uHR1wpASsR1N6qLLOznQAmz1zfWOpewTxPJVVyGS+l7QU7QN5ogbMgzX8n2BjWuce6Tv9fSmLtR7vdw/kPYUpFKr08h7cBEC4Vlb76cK7L4PqvIRtm6q652I/7t0h4fPwMJmCMrgwp8estgDrekkQwZdArDxm7dKdyAdG9HNj5TZ+f3aXXdMBIXn8WrX04iFJPq/Um49Bk7LRYVhEiFTmml2jXhV6l68E/U0s3DUOVvAo/UBD8E/dMKlQ9kzuwz+uR92KyWNLlqt0odOYw2FVvRKCRBobc1S8CBQo4uzteJo4NNB1Y68HbkGVtO6xTrsmOEhzHwzeW4VBRkEhvNSbCp9YIC0VrxtupFPBBszPVJ3tIZEjGX/X3Px0QqFI5ri78326xWwNtTtvGMzb6ggBFBfNb3v1tthiz8fphF/OHbtivhDtUbdY4UWcuJmjVdcNcUFNTi7Npdf/mlMoDGDQKFmX+HtjFs39zAu/CFF7R9fA0bfZqjyLapqFShmAJwtSxYHQllkQPWu4JViPpaV7HtmpU28mcEMiHoUpPnhrBTkTSv4H1hLC/AOrJLF0gJQ5nsowLTb2x0J14niaYQzHadzgl1bS8RozShAizskvHzfRb1AyTJPoIJHMv8RwHOBIxriEq0H6UwkuNkSqJdCOzX3evI8roQ9okvBNkb86ILKXpCsDy6Dl2YW8S9inMMCWB8RgQDBLmL7SO8se2NgrcHPviix2zucUX04jVoAvVz2cO2Eday2Mhl6y+t1YDnQ8UgretDIc6cfmhHKqS2GZcOf2fFWJ/PbSK4qI9H2geySubOhidsjW/zoP71GPJ0lbMCADLFK6i0dGJvf0YmRv1wJBrH0vFILFEaSqgbKYE0QKUAiwsSkilJLVgK1K4dgDzqlJ9q0pTyg==,iv:QMfMecO5xgnHakjTQOJlMyh9am12n23pHIL+CndhVDI=,tag:k2+Yx6hpjjgPskBPiq+hSw==,type:str]
+authentik-ldap: ENC[AES256_GCM,data:trkAbd1/delgSdV2nvPjbDV4fK0Eeu0X3c8xGYFIotHhPrYqZeBlgh9m6W1dEBeH/DOqPDlc6hqwGCE7D39Ael/WV5dgQepzB+7eYQ==,iv:dNGa2YW2nm21lLuX0efxYO8TLyi6Or4IOID0Zvl3neQ=,tag:wBDWNxeuahiNw+vupGNPqw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:05:38Z"
+    mac: ENC[AES256_GCM,data:7OiHNkvt6RqCSHtwHSlU8Fu3Lz02J4hKZTmIUNfRiisECa35nFTsDPHT5Tk9C8jKCyaScjiJLR4hGRBkBhKrjsJj0gDZSDKmWErIq26RBdDSjGWLzG71i4TD1PsYYSOfeftwuoRaC3boDsQ5EzTzZCF99rCEkf33YkeUFCWFjg0=,iv:ou900k1mW/SXnw2Bl2pSvazbcjsZia+55acE3narTBw=,tag:IlBmeN2cTVbxxBJbfQrmAQ==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:04:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf+IgnARcPDGfkPt/jQQYREeRz23B4ZE4TfFzdIbmYJbR6o
+            ModOLV0M7sNwSOPKpV+6XlRHfUdfFAZ4hiu/2j1kC2Q3+Q9hnK5WzvDs9Zd6bAPC
+            YPoM9QyRBxidlEUQRM+xSYaADxp8ffGUuS1sAqrqnjiRnmt2zBvDQRcr83Q+/pE3
+            FS+Br+83CmRQ5v4hPQDH/xum2oCmsfvCxQRBNQ4hjE6vv3Ku5pYhzHsPiroh5/v7
+            DVnP1OE3sRaKJ22AtPLwkrJLr7nnvyBgJV8ro1MaLSP1aditcAVXpZUhidY6K5lE
+            Zn5UM6GpOCPJdsu81qKOE0WQdsXJ8he2SISMoYSKctJYAeVSAdjL3A4ZJ2E9Se2O
+            ign9lJO6qV/dsZEWIlRGm+uFCwJI2hVxTjmVqrgX7dpqnvivpqYCjW4IpuWSFtGX
+            95vdck/U4cdg4UMGQJ6uIJWiKKNnARYnnA==
+            =Tl+B
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:04:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGARAAh3FkICLKzvnsLV2zIPseqWFXhwJo5hdYvaVHvWt7RWnc
+            fU8wIWp/4DTpTJCQX8JsgXg2QKxLAs+QYx8m1LCVkx91iccM55o5/bDi39hf7OZf
+            YrWGNqsYE48fsknl1+Rg2UAnE+YsMoHI5cIFcQc5MLmDgzfEKURQntFTk2qYi6j3
+            sL7VGklPq8gJ1SnovgQ5md3Ha2kYi3rwkggYBDGUBnNBHkYt2wJfl2XvVNjiQ8sO
+            f2xymq47EWLAFYXbvM9G/U3+0ZTsJMx2hewoaQKG8bYGssI+ElxfbIf9npNP9BLj
+            WVP8SN9zV2ZnyL1HQRwJljSOLKx1R4gi0Z7LOLLQy2ltLtFBNW6ywGLt1dpRw0mi
+            swudmCu4f+Db62JkoQHNaL/BNQSkQAg9O9F5MZvQ8vUBH+0MI2da9x/WkjzBP59y
+            tD53HfCbSZ76PljzlA0cew2QrrpX3i+xXT1QiT8dYPPslefgaktJ5NQHXS45cdk9
+            iHzyJW10ahAMzyKDhi+QJ5od119zwvaRwiwFDN8AEwTIVmAuf3hLhwE/RqSZmIdj
+            K8hr0/K5zgEodAyruGoAeSVmsa2gukIbxP2iN7bzUXUJ8snXnLTfTkzWFnk1n/Bw
+            aFNsdy3LURA2a7rx3lS0ycUxxW55lVE4sABChihCas000bxiyIUhJ98VBW80dCDS
+            WAHymn7RTmsGWwxWVkz0hGyRLAh8G11kQnzg92bt7cGIp0UXQ6fxYz608NiQi5I7
+            E/X3fYKTaJTHYoNXviaWKNMDwdm1zhZtAsLRc0KFa8nfgmGkE5xzdQE=
+            =7BfF
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/gitea.yaml
+++ b/secrets/home-hypervisor/gitea.yaml
@ -0,0 +1,51 @@
+gitea: ENC[AES256_GCM,data:J+ZBpsUSXOaPycPCjh6RgZQlRv8=,iv:DtE+qtWTIHS2OkFZBhUcjg07wVrwiMm7XsW63ZD4f5o=,tag:5vOIdgsBB8eMkIbRe6pNdA==,type:str]
+gitea-mailer: ENC[AES256_GCM,data:o7JNqMqJM3OoDxSohmeYsPn1n3wb6J6L,iv:agiJl0halqfmKMvWA8b0boXF3rXrbC2bIj9zb5274hg=,tag:DjnNySDnYwVYtP9RNuEYGQ==,type:str]
+gitea-secretkey: ENC[AES256_GCM,data:eyhy6wRwoWxUVGh3GghePwYZxX2BmHxly0Tn6eHq+6qDryDgL6c/fA==,iv:/xMqcni+lTh3syWSSp50pS6VHDTEDsUL2idFWEoCc9M=,tag:qgmGHzc5R6k6OLOEyrBlMw==,type:str]
+gitea-internaltoken: ENC[AES256_GCM,data:BYA9CHQ/IVnwA/apr0V3EYE66vJfz5wdpOGxgMzVdcYKrqVVhfK7YQ==,iv:Fj4gn00rRc2E1A74SWeRZWktm4EvvTeCG04p8K2NSxk=,tag:BanFYGL7GF5Q8zdjugAICw==,type:str]
+gitea-runner-hypervisor: ENC[AES256_GCM,data:vS++cR4ewTzT8W7h870tXJkFYy6F9hV8SA/A94kqIxsawAmeeu5xf5YVQZZcNw==,iv:h9LVb3J909tkoiI01mh7ZgW34MPrB49mC5Sn+b5iIQE=,tag:CJ9kk6Ly/X89VAU2pBOZaA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:08:51Z"
+    mac: ENC[AES256_GCM,data:ranW9+W0x11eRFRzGosVfapoW1xpgTUpUvzzItYcZT0Pr1cRpBMQNTmHXpItNKuw1Ut4PBzUlmtDl/Y1VlefVecy6j9xvEczgYvCXCRH+x5Dp2FAuIwqw+EuQWsxxZ/k32zzdWT2brWsO+z5EmLRePJu0mBoxRx1vqVAZef8vwo=,iv:yEofPQ22CpHLktUjRke1Tlg445TpX0ocpQBeoeWba+Q=,tag:Ai+tbYJJ5BHyNHfnK1elgw==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:07:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/dft5HLvgzmFu9NiZ37iCVqLx/rVM9Arr8bV0e3OVZT4E
+            nGvyLQtQfJXyQ3hL1EFAg40si+Kr5+dyThUk532Ks8SOAWuerK+s+YNJ3ihWeIuk
+            gVFuE4CJrJ86/csdABiXigWU2zVd8229bkrvEbd50QHMfeJ1KcM+2B/WMStS1e3V
+            aemd6XdGF7W3aM8YCshk6mX2Ncr+Zw8DgXx4q7Et5CuiAs+0KaCUPvhY2zarzF9X
+            shH+x/nF73XSWL3VH2CzVfjw8/JIuEeZa2qnEORUymAf9uP2whQtNTiPQo5KDao4
+            5lOR2S1i8c/2lKKQIq8F9yL1N+yKp6uxvHMNv7YCsNJYATNLJK71d7B55aOP4byD
+            EGpiXpnbfFjCSZ5JGXM9SLsQAUYDokBQtgN9eHEAeyDDnvyJK2o/ZF44bxgbKzfx
+            PxizF4r06pwuadUd+1rpJKdNBj0cPmb+BQ==
+            =D33V
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:07:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//enXPe//oJZcZFfaA4uoifgy1Sm+0JvnTSRkif9yHdn8O
+            h1parWcrM3Ck0XN/b7hIMAce+oU8l+AFpO/yLU7sKYel/PvqByZ18umsONadL2OD
+            2fhOpTaagLY8EaXjEnLCUFP4ZScPCUaz5RrMTnM5PcuX2sl+toqPPfy9csZdy3UF
+            P3THKFtf95wiZHxfAaM7vQjnYwQyR9M2YS853NGQAnf50p5nQwrOnVi3Qo2H76qT
+            nH+AZ5aTNRiKOrmVgzhnWsk2upf4EXqe9+gpDg2JlaUL0ySEkEQz2QvPIfW37NMz
+            oUbYNRB0M4EsL+3WGKRqGxbXWvMjjrlxSdaU6dcTHIZP18+ALvh06iTIl3siPJOm
+            pzIIny0wBuT3aK1kYT0Ytdc5Czhlj+FRttQrutEe+2Nvs47b/1EZv0nEsBac6hAt
+            j8wZvV0nmxCRII/SfxHX5wIwjwks3xeooj3Vahe79j2eA7vumFBoSRlxvkwEXzR2
+            vqwub02MOjDBwXL7WqTidKnyJvFIXwGqEoOgrKpg3Wx9fbUkRuWUBW4VDIwM53WP
+            sdntp56xkp0a6zad1d2g0wGZQ1pBVtcduM2CdsCPLOvYyXT8sQ9WKNPVV4zqz7DF
+            QQhnx0hFSrs4QPFzZ1kGG+RFqTaoPyf88OSGkxtTHbFssN+TdTmPVVR3sKVHuMzS
+            WAFLrE6Yx7MQnPCDcgqWOFBiZnr6s82DWkVynStcxqUS+pwkwHv8QRO9kuQYinuu
+            xvgbzvM0QmLxMVpqvDVPJ+4I3kuoyNV8FiaN7VC3AygQwJSn6Y+FKh0=
+            =0K/E
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/headscale.yaml
+++ b/secrets/home-hypervisor/headscale.yaml
@ -0,0 +1,47 @@
+headscale-oidc: ENC[AES256_GCM,data:IQaE/1zXfc72iivZBDH3LmQmaljWIyxIeyMGLRetphJ7UWB//MeQbR4eM3gt7pXaFKudXYxuEkSCjJ/CgrxgTrlLoBFlTNwibr5tsDEYLgLdodCQj/Oih7ru1fSAAJR2XBtM/T4CZHWlTHnbGxRZUrUXRUgMog9GsY9Q+ybbzvI81urZTvaRzKUfHJ2YQKOW/k1Ug5fT1yZUdMyU2A==,iv:Fk4UFEnHsHjgMHbny6L7MEULQFELB5dtR1OtEm2A/Zk=,tag:shKxkfdXqpAppiPX06HMYw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:12:33Z"
+    mac: ENC[AES256_GCM,data:EpMvPZNJ0JCDMZ+btkQQskZ5TGSftq/S+N/aGwx54lH1w7qNqpuyxD9XsadeIb8wTP5yIuXKkBegcRmMmKHfl3/tMfwbJ779yuJpMDRMYGoaFfYiR3r+14gBYtBONFKv+OtI6+4oWYN7xrVIncMYbs3SptD/Q80SUQ5ZgtF7I9Q=,iv:O2IzGK0YJZ7YuR8g/EiNKlAaY3D4xkwjFgftuFk7Oys=,tag:8uUMxgkF24BGesa7vahP7Q==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:12:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/XvXe+tObiPSHxBHkZ2SbTbxHV34EMuvNuTxAFcFUa74a
+            r4mWUkk29UMgjCObv0JQFTEMfUS3FkhMCGsmfYWjWLkT9gq8sUdL75+mp5wB9UKp
+            gTKW0taH9LUNd0SfcLyJP4gaK8yWEhrQqqIqIOaG3vTHfXlbN8fEcQaXJX14mMu7
+            NWs+X2LEdmOpt1fIfH2Yzc20uwm/fihcV1uswj4h0pa6Q7bbsGg/dOrVWSS6IEsE
+            UJLsKVyCg+gc8Kd2pLwN+bN/vpI0snKCTEsUpzziI/FovJvVp0yPly64jvHDLjmI
+            IhXYKJZyI+6+fdnEFLuBXltQ/dfw1AL+x7rsoDB0xdJYAYgpVxcukebiUXzF61Lt
+            6KUVYy6R5Qggv0D8H4IjUqJSyBhpvV3OfCyxmZBRW4ag1m4bVHQ9g7UnndrBbQgS
+            hFS+QU9/NTO1AEGM2I8OCSiHEVWvj9IXeg==
+            =KziP
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:12:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ/9EsIbfQ6dNVZW72WlvZzxhuxn8zAS7Pmekkt4at+XlCnY
+            aA7Y2WjUsMOn9M90VrW2Q8jPCZ3WJ8pH0cJvrQ5JPVuI0cdT3G3ql2//dg67cZks
+            6CoqfKWYnbe3om8InmYqljVXQpcWRQH0iJXv67BeIZ5jTXT4zDV+VlmxwgSu6KCG
+            BiiGRWScVLumJPDKZ+sikg85DMQ3aotht6t8I8cDcT4BPYSjgBdGUmBgnTizdlhH
+            uDD3lMKJ6Tf0BsNEAcp/1MW/zjustHAMtpE9EIOvdPTU9E34zi5rgFENVCnMpAWS
+            8CWUfK3fieaL8aeJtx/Tfgj/irl45mBhhZG6e2h2836WWyC6I4JDj8bAyhlKZmbl
+            Y7tj7JzFK/uQgmkYVC3kJw5KlXsMpwV9eJWoBjjgrhMtZoNb3hLhFonv2g5kdtAF
+            QtIlvaTQ4lDuI61TB4QQFdEq17BfX/RMVrN3XsacEbtzUvVv3lrfaP4v5hJ67mWW
+            PtRtJwGdEHboyXQ1cWNETPSjVNrvfwc6Br6GGksL0I1F4fVZHDEN/tPt6K71s1T0
+            Q6ZwU36ph2x1yCW7ADwWuHyToaN/ff0gLhexoi6DsnlIixu4ovYpLYVb+ykgtwgJ
+            YdQ8GWX72t/yOoLUi/eJt12b308OkqNZu5EzUTiB3lWU5Y8rJATu40G5jNWLgi7S
+            WAFDGD86ALKnYxVpL0yPOKZbAM6YvTwo4TDERMrCb2BmaJgzxvtoAVS90OTWyW+L
+            SxFxu1R3Gv/+J0+X+n0j9r5MN81quXO0mYhHsv7Hd+Ds1VnqFh1+ecc=
+            =+w5/
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/hoyolab.yaml
+++ b/secrets/home-hypervisor/hoyolab.yaml
@ -0,0 +1,49 @@
+hoyolab-cookie1: ENC[AES256_GCM,data:nntVA/KhfdKApuJxjRNHskAQz7CG3BLCONEpT1QrKLMKzwnA6RsvW2OzKG8SgbVyeqCeTTSIKDPth3jImOwk68zK9S2yz9mWRivlPLR86IVdAannbhTFhmHlCqrRHPPYlEZ+Su23zvOGMKn+YVc15mBxnnFCDKYR7MrTiNxkjovSTSr5WwtDwccfu9kcM2Z2u8lEMtdWqcRFHDarnAvThO8QguWJ+DospIRbAMXFD7wTSDEAGAOhcVegoxHni1D/fDe36pbW0x0lBC/J6z4of+yJpEvRrnWvxWsD/eSqzljxmSzovU3mXesB2tyoz+Jd6guERILtM1XQeezi,iv:VM4GPfkSuq6c5Z4sRVFOcn7YKEkFOtEA0PcbYaOhF9g=,tag:7DPK+nyt0ErkE31udEIRqA==,type:str]
+hoyolab-cookie2: ENC[AES256_GCM,data:/XTaJ6YKw3p1A6i+LGjYU/d6zO/bNsX2dWbMDp9fLNCkPGIwFbUCXbiHZqf+enTmk5zzOyxb+B2sJvjeW4kKKP2BDkr0okpUX/AleA+3ReEgPIIiKPNMNL3t1eAVRQEs9t+3s8zj6+siGPjZUpuy7NvrhnETvi7YmVSTamA400X8d9gbKG4Vs7hPB4otA5t8pXZYqJWLuRyjwvvdxYrtgpdRfgzYWhBOu5dZ+rFtccJI/rQMlTcJcPbhmc2vFV09I2xaeXU8piDEMco3y+wm0p3KduPNzP98s6LvfxiQMqM60/baKw/3M055EbQoRinUJDG63eaqL/ACNztZ,iv:+fWtn55dn5fOGjvIlrYfh0FmMzG9/mf/fNOOa9KR5Qg=,tag:yI0bJpXNC5mKKdO3/8cx+w==,type:str]
+hoyolab-cookie3: ENC[AES256_GCM,data:3lDvQRrf4wrl28G6ognKlEPquG3JYieYA9ZQ4cEL/QwB0F+ksP2sTxFeIr9gihsWZQHgfYzeRLCSOAammW0WO/prpCP1X/JzuA0uGF83aMC07n2FSiroHjiBPBJhwUBRW0hPeXSURWz5D4mtDkv6PQB6bkfY0y2V2QNQ26qiT/mooi1tJGL4uSfMZ5Ix+emJwtzn/CCGTr1Y0U9GZf5IiFj6Z76mMPZ1BEW2C+b/XD1huatMr3KLNGoYVqJm/6pCCGr6GkUh+jJXtdNM612oe0r6PVu6UhVel+58jhWzKUoGv4ZOZMqhbrjla93BEfVNI6aRnTySpRWwl0EV,iv:Wmso1lZa65M7Ej7so2Lw7Mbvib2O7upfpnOEwACTeYc=,tag:oswA0vhQ2I2gty7v7lVjdg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:16:02Z"
+    mac: ENC[AES256_GCM,data:wEaG9ORs4llAHChwW7UxXgJ0UIcjzmubfIXF/ufZ+HlD4rxM8SLmWlmyCD9AdwR76VMz2pK3juyZmyGeOubriMegunf0jouHpr59smk6jFES8uBr1ik6GcTG4uL0LSmj+LYeJB43/ob+68VxiTicA05rP4jl+BU0Iy90hX9Hkng=,iv:UdcPrwWOgrdcy8PfveNAxte6yW4VR7VMnknrGItDvVY=,tag:g75nyYRspjO2LMDz+Z4izA==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:15:05Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/TSAlMepbrLuWXFYEG5wOeCB2sVonDGKRgfeYHbMDOIOB
+            CLhYWVlI/jIyPiPZw3jbWCTeCC5+F7+ITKqdW9OPpjChouMoZyEL2HpRBfmSK2BG
+            utnLnSbBj51kkEwUF6cf9YC94QuG5RAcvmNjMQaxZ0qgH6bWOOLkNgS+0bGGjVp8
+            lZxFMmX7HVoFW47Xn9XHkj7S5/FICyFY2BIRF1BvqJsp0Uk7+XrnNSzJ33mJldOq
+            FIlMnVKGlsF6N1hdjI7L5GHuNiYO28zExXvvlDZ2UAFi6hlOHw5THD09Po3AEuGf
+            +WE/x4W6SpU19NH4OJn+8HsTQqu4qFOmH5RuOu9DWtJYAcnLE7pGLzvXjNliCBNs
+            a1VsFYHZgXoKAymhd8mzc7pIlFXTLXA9WBD+pH45X05S7K2mROF0NIFI+qlOSndo
+            C26LwxKhRhY2BwIKN7JA6UCPmxiFPmW0PA==
+            =+co8
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:15:05Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGARAAi+IRdY5guAc1vg3tMdq8aiTN27diNx+imvESIV1hlvd3
+            3Onoqs6IYFKPXPkQMENZXBBFOiG2PixWj6dhm9XH2HYsCnsS5qAkuLcEI+7mupWc
+            fxfcsinTnQIZX5BOMdDhQj9/OdPSWVoR5G8/OuP+tRkaLyw1Khw5nR1l4BWWRlvm
+            y1ZcVRQ0/1TAAEgf+ibsZiutykkIx+sIhHhQGSLiN0D17sRwlXYFt1EkzNOTFUJd
+            chAxuRRe4IcgGJM7RnAgG9cnxxWy4/W+8nmrz0w7skjlNfcLwLeunWn9T2QWBofn
+            iTIjP0nYebtDJd+aIY9H08AegFJ0mBweMfJplvla9jxkcnqJXciQ9pDbQzn/72dr
+            cnj34amA0ixg1dR8KVDpPTsldF1d2Q2ndV5T+iyHCQbwtk+Gcoq6jSHUqU+ycP8D
+            qGVQB5aXpEyzjc9GNIX7R6Gyk1knOGspbZz+ZkhVjw4KMx8TwkD79zSoX+kuf1UU
+            SfJD3VtUokhwOA641KGx8mFnyoyWblkPUyAyOOtZZWKVWndWUqno3X8nXV39ki6z
+            8oB43lPvIQU9HHNnlyWbBlfonJBKLpjC/Jb0bd9FD3muBoOgQ/wHbemB/RIpGUMC
+            S6SPB/X2b/TW8+3GyLXsBbzSkXsEGCnq1j7bxBA2wCaE/BQIiKArtQxHtpEljdvS
+            WAHfaSAcLzuY/ptQNqnx8l68F5Vmj5nVvStg7gbLY88SbXBkzZkFZ8tXnsTXye68
+            ZqZV3ubsTi5GPxtM01VQ0CSI78rcx74Ya91HUWYeB15tH+DxJjx6FHA=
+            =2t3G
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/joplin.yaml
+++ b/secrets/home-hypervisor/joplin.yaml
@ -0,0 +1,48 @@
+joplin-env: ENC[AES256_GCM,data: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,iv:2Z/thukDieJoAfKi3gwIWfoVkjOJQILzr+nlyKPe1IQ=,tag:qwh/+Yld3radIjEdvL8fNQ==,type:str]
+joplin-db-env: ENC[AES256_GCM,data:Jx8rpf5hVn2luuJMvcSi70j7pyjEuBczm0i7X586YrKaMLohH46nYXha5lsO6097EAq64ElUrYexoF/pen8FWVpv/7uQl50wjz0Q6E5VVk9BzHi9+Wvq6cmbHwo=,iv:RoTvXUeSeDY02iI8oNpcGusFe0PZdzx4Fq4mN08J2Ww=,tag:MRq8gV8u6O0McICR5Kw1dQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:18:07Z"
+    mac: ENC[AES256_GCM,data:2I9myB3W8vmooFQznfsBXPtvjQhZf3v5I8TY64BLBivPiUC/Ah2i7xk65T7AnnmgRMVGUYW0Y6RYmeJAk5lsCKhLGg9LEwUPHcKHNqMswYS7UEGvFKTc5dc54P0pt8oTF7GByjkxcVmcf83F0NvgLyz1s81xg3LOLwpDTQa5GyM=,iv:FiEYFTyzhGgN1/nke4G2msNm0gTwUICwMCVjruewDgs=,tag:5ruuyB4WwXXVOZ8wTu4osw==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:17:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/WPobCF5eVuCbUygAjooZ9JZ4Zvgi5EzV+Faky4bdGUns
+            OL4F8iWEJd2L8Idh3bI/MY20F1AYXUawWhvowSXlP4Oo62anSQn0V21jVVoad1/P
+            QqgAj83VTJTaZafV4yBUzj9BLIQzEiUm3F/JY190s5x2Oj2+YVkhnPPZoL1pVkIK
+            s50YfuuGwJmX8PPsAuHLgG82FNaTwgIoLI/0YmH8Ldr3kIN77LqIQtU2tDD7/7LT
+            Yfib2c9y2WVhT2zD8q3kIZY7mOKhQzzkIe1lIBQhq4QUBgjQov4tPczoQRMEMxuW
+            aAl6F/RpCHc5Crlz9+mxBMSIxGnNH99hjcCsq068q9JYAZX13Xq1C1+lgOLDJc8C
+            FGmm/CTrFn5NyqW9CP6nWOaiZurcTMpMOc7bVHHxQa2QzreUy7QpbZG7EYbKBfEr
+            R9878lvRc/Q7n0Axz3adDJTZuwGciDbyUg==
+            =kZDk
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:17:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ/+Jj/6dljDuaF6EulZuQeGwfJvVFt6mnePIBLwkgYVfUAA
+            jyIMGfwhU40d7k/6zQP9qpcLpr8UyfVk6LsF0MDd51mXFlitzRK0y0ET8no0vHmB
+            CbQEoNPI2EXzh3eCzHspjBJzI3Wun09cpXuxxea8roDdipoBk2Ha5IRKFSxnb97q
+            xtMa4S/8FzD/BB7OUbPaTgKfwRFrgjpzNDbGQeyQznJ4+8TnBtaOWSQj1oItBPT+
+            yTntpTOwTlypK7BpNgvdn9M60M8jl+HMS9UZpiGl3D7+5NE2gSLoOlf3F6j5+w2K
+            Zo8ASs+Gv5cgoX6RFxT+lz+UowUFtS4pPRCD09BzGY8Lp9fp1cNRcRq6WkQ2+9Nl
+            7PzZM/3/+3MWP1FzllA6jtKKYzhUN0z1INlD5teYFGl3BsySsIQ4wVytjJId7Lpf
+            QSoNOA+2rxRdBGGgkdW9ua/RTdWrU70cBYN56r/XG/hLqNbOnwmLtf4sI6VpdR31
+            IE8XgR0MHm3TuCiII21y5wafDQG4S98ED+J9I/GNZ+K0FJtlDmxbYPaqkIk6qXFS
+            haDwDFAwinv+I5fMNUejdMwbYOO58ZY3CWilLUptj0icJcgRPGeWU8yQZnym52QI
+            Dg3cIxkpv0Z91ipiVclLFU+uZplHounKrnOawSWvUMnFwWBMD/vGY5bF0ycaoZzS
+            WAFHEUcQAGiCtFRX0bsGc7jZ+0w8OwO+yz+xf1+YlwSYv9zYLZQxQ+GVOllIxGOO
+            lS+s6l0lK5L1lUD+xYe9GfZdK/HKo8R6m64mocFSWiWOHJCo7iRXFuc=
+            =ATdv
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/kavita.yaml
+++ b/secrets/home-hypervisor/kavita.yaml
@ -0,0 +1,47 @@
+kavita-mail: ENC[AES256_GCM,data:KVCL8JhhBR5Rmf8QeVZgqKsIDS7FUPWX+oCAHoxC2eFNhfqztyHpy1HQbWw7O1oCimM=,iv:0ysprc/fq9QHQzuXEcc9EEcn7dimX7pnoz3S1gmrkLs=,tag:py4IsKnRq/bzx6kMk+Mosg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:34:00Z"
+    mac: ENC[AES256_GCM,data:zw02HtH+44VofS6hETzFmsu0zdo4x1D/34ApWjuaJFWMjxbL5hzXp8DT+klJNkA2ZU23R4Y3yO6Ru4qvRRwwVxW8ITotJUK37UPXrHEXxFFcLVvc5pvJXwlBYp/1L8Icy3c7UnT0bBQu9d9nuT5p3Zxo1Z1AnuBy2Sz+yriax/8=,iv:QhHAM+5jSxqlm/wsezzH4IQSgjea2CEVfl/9svkf9nQ=,tag:MKKU0iQM6xa/TI42bcU/LA==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:33:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf+NM27d6O25SfSnXn9DJGLJWZm6VrNniqp3nT5mHdCXINa
+            vEKfbLtGjtAT4dM55QJ+vGDVAHp9eYT/9OGm5Gj+bG4d/XYUEaTPj99Zeb1sL23y
+            YYdQkEYx+IQwK6Wdvm2I3Gri4+WkWBjFY9j/IDPvxF+ZGQq/xjylwteJfdkUJVfC
+            0+tK4hESvG7siWz72rZdjvez5IvZDjW6iIV4YjNO9BbOIcydLA1EtjmaWSTHHSft
+            ETqolFvc4nzZ0aQOY4pGZecMhR9zyvTmyvW4XJK3L+uC0k6Q2cY3g6EOsr0uRQE9
+            S0Rqrb4vh7Q1Y/FEr7qNMHh6oLDhLHUUBcSbBu7bAtJYAe0edEp9zoF0Pahg+oGh
+            mxk7DtJFVoG/B4pY0CfasEdUpSS4yMsY+IWbA14c+0InAvZ/zhI/RPhz+61r8zQx
+            WvQqpkc/VTX2VSg/BJYtid2XwHVxrdKzEQ==
+            =pZ+q
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:33:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//UqTAICPiUxGrKfmwzPwtNNH7rlpsfpoVyD2k5lhIiK7r
+            e9JExsS30ToAmvr2lw36xsrG8pTCj74vCZYm1002Ko2g78g0S/slVMJdZ2w8v23g
+            +2SvIAzqCiLWhmVBo8nAuNyaAzzbIDgrnxYg4IeCgwSrPAeymU2pP/cKpE74+49X
+            CIrb7UoizTuiEzSOUxb05gR6OeJsE2ZnCOMTIfnuGln43vgUQYZ4ZuEYM7h+SMnF
+            yZo5BKOfha8V8S3v5A6n5iTYEGTIhpFUE9R4KIPXN1AI/L9T8fKQtboKg5nCJ648
+            JwqmpemHvvgtipbEvoeURENLQKt4gPZRoeQ88g2YzQN99vYTNIyEkUB75V4CdoAm
+            HYJiTizWQy+YEKrQDGrQBhyHIYvQNXUrupM4sabQdCO1bEfwf7grMxA17SVc62xh
+            iRH457LhEUucHh41018fF8cQkZqn92GJkxEc2eSUqvt6dArZR5GZt7hiNhN/nf2e
+            iEhsiFxW0d5RkcXfVAAhe2lKKWX+rFN6gm40Y1PHp5McMaHMsggzjjEDQyrFqCUX
+            5fiyeD0jU9u7ai6WkFLp9GZDlzHEsReWnIGM1drnQMjvsjfsdoj46l8HdmL1Tob8
+            S/3KcFi0Es1Z9NgKu6MpFkn0X+bZYNiwQ3RmVojm1sk7oZ0uwo8UQWb7XrfJWfzS
+            WAHGcsPU/Y6SvmpJE777bVpisrb3ev8y6NCvjkx2hfSEC8hiaxBTzUXXeDc/CCCp
+            3kXpkze9roU5DxbEdQqUT7AAkAdDltwG7ysOeliGNFK8z4/iOraolL8=
+            =SvHt
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/outline.yaml
+++ b/secrets/home-hypervisor/outline.yaml
@ -0,0 +1,51 @@
+outline-minio-key: ENC[AES256_GCM,data:M/4sNRZsUCZh7SgOxmOnfMXT1kq9fGi8QpLZEqEAXkwHetzdAXTJ57MA+6JiP7BK,iv:jKdWmbR3IdgQHRm2HHJ5d7iUglKiuSAMRKegzU+oEeY=,tag:11LxThvLjInBp0jSdX+3nw==,type:str]
+outline-mail: ENC[AES256_GCM,data:QJODVcELOdwo0uvGK3evX0FjUPcUFJYgSZQDJseJcng=,iv:LKRun/HmYP+bonxtGuib4n0a5Vey1dim7JQ0PHWpYdU=,tag:M1po4KBGGuywfy5bIFABlw==,type:str]
+outline-oidc: ENC[AES256_GCM,data:3oKhFInuabr+vsKzJ0M/6Fuzxg+mJhoDGrKRDS4SNmKN50spyiEhNNIrSgU9hoJgb1CwNUkJzC/cr4BMOGYNbpChQXUNG1E5CGbFoSxUzLYOhy6OPE/QKRvind42mu/xoYuiJCQS9RhFoECI/troZt9qtMEK6o2hUX2nbcv/fR4=,iv:/YiVch9/9SZLVV2z97aNLeUudnAYxHXRd3Hms/Qe104=,tag:4bNirX4djOBO1MQguIshmA==,type:str]
+outline-key: ENC[AES256_GCM,data:tUWH6q7kQgt3/kszWUirwL8nXqWgfrXLPY5Exlg8dwnBKtF34XbpuikLljWgaiCiSM4la/9AQQSDwpSL7Jzs8A==,iv:piUdFf1XzlMzHleGe/wLt12ET3fxII7vI54JMfKD1M8=,tag:gAvb0TkQbUQ8JJMiySK4PQ==,type:str]
+outline-utils: ENC[AES256_GCM,data:G2noIxJ8osKdrOl45kbOrd3in18ogfajPhq5JdUGAQjR+77gpBqk0RDqGwnmZuRKwl2Y39LZthOpLkvpPtoigQ==,iv:7GSLWUpGggfStHHY8Q22aSKLBSaUvK9lgndDXZ7zuBs=,tag:7YXeQT/HXkrqXsmNqbQjcA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:56:04Z"
+    mac: ENC[AES256_GCM,data:xN1KZRMsonfC6/rcQkuBsh1TtRAOaeCWM1hlWsIBuZ9K9L2FlsM5u3lfZMp2yJ+yRvVvZCnu/pTP1AIwxuyW5Js76d++5/vSYlvsEvq9OHhXm8fsmGBCC98uyAYt13fwov9L2t4K7MJWiIlQrxs83JzW+c1/vrtRnsye0cicALw=,iv:TaMBxcRE/MbuCM5mbSuHvp1BKJogjIgHsPkQyo/yTvY=,tag:mJ6a5usXRRLMYKMT+x9New==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:54:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQgAjUn6RMsBeIcxqgxVsf6anibjuVcz2ca4xClZOBEV6xgi
+            6zmys8FtlFyj0u65hJYK1eX314oZ5A2ZNuMCTHpyZrdYXY5NBW6oSrDe9a9CnGDK
+            HHh08+Hy7Z+PeX6w77G7am5cqpzVdH/851Tx13NpX5dqzwmD3eMqoSpZnM6Rjcqk
+            GK/KLinUF8kiamW7bjFz4AZnd4Rz0bBKAh3DiXKIE/9JB2Zr8vFImRQhPhMRA/Jm
+            sBGLQgKktEjbeNuhkWiIGNtCA+yBYPMo7/wyRlum/M6EcGii6n6ZbAfExYrhJssr
+            hqO4b+fWnsxoxFFWzXwjvdsVK9OjFHoRwXkuiuNIXtJYAfacpz1Kl1hH7QkfBOBy
+            Naatz4it663TxXiMb0kXcUssouc1wACIUTQdTWiH6y9co/Xi17XUpeS314gO1q4F
+            SFjKXqc7K+o7xU5+4zvIJXnJ27qDoM+6mw==
+            =/srF
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:54:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGARAAqoK2KPPBJIr7BeBBaOHMzLKw5CNBpal9hjlKUS1vUnVh
+            /GMGXiprnOQzhlJwR7EiLuxHAvAUVcCbFCe/gcLad6WDpzYiBzWJFamSWTIRslqR
+            HkO1YBU+NJySUy5AoSlatv27qFHL7whLb8i6MHfJDd9fO8+l7k1y2Hf46DDcf4Bh
+            BWxnBZdk6n35vb0hZ9RxvmJg25uWdNDrBjaLMeJUy/NxOsmWz7Pa0b9BIZgfXKj8
+            sNM0ehBPkREmSn+cRI3rL9UATjY5Sot3fMc0IRFWZZBWTfECotLsF6zZ9JNMhiK9
+            CfcoiEl5godRGEE7shDE3EVQjsYuWdOYtzvbCR+uRRLeg1LAd/+sf9xztASg29LE
+            6O9KTRwh9halnvZ1X/39ZNptPA0ZgyiDopsmjqW35myBRYD+M66Ae02I/gCGB102
+            YmVOZ4yVWU7SWhiwU2JY+Eq2NE92Wt8Vr1r5K4FACx0DdBXiTDd3E0OWzZDT8K+V
+            AAZQCtpBHssESYqoFGVpUQxhwApyFc/x7bdlkxpzRsUc7RUINq6rC9eCOJdceT0F
+            JPcMJMx1cJIDvRSpSFR+ueez8xJ6g8gF85Zk6tVTA0TD82Z3OEIt3O5iLDyx9qc8
+            tbiA75FTtLEFmthWMg1kXZz5CAvsbQGRugb+wZLfnKpDUxJigCd6K/sGJWtYwQDS
+            WAGIPH6oSJkI0Ojev3SeMcV6D10j8uDqRKUaxzmQ93v14v54nvwsUEnpEfIZGIyQ
+            Q2ykimRQVSXcme67jebbiye3jh9z8wtfQbVFDFTg/h7gqyCQQhr4joQ=
+            =NHea
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/radicale.yaml
+++ b/secrets/home-hypervisor/radicale.yaml
@ -0,0 +1,47 @@
+radicale-htpasswd: ENC[AES256_GCM,data:AGSDHmVm38BiIlPpluU1zoh9yM7FqoKIMJMKqG0s9xGAntAAur5G8VCg+v4zPQvfMUcMwL7HrKcgK98BKYE4YckRKeJZfurfOCDDSG6uMSv9GL0/pKHlzlcZOLY6nFW7tyLw8vRKj/NQjA+Bo6je6ev5XTvhH1PWGdt7qPB5mWmdYsOK2VCIyoZ81Hsh17qvIkDeTQhMZB1VMMGvyodluKYJRa8yw2zYdWKG+/vZ/AdW40Gmo9yaLgG5UqgfnmykvAx1xm7mrR/doavm1DIAdGIKMA==,iv:Ok5yA7gP9XXZ9eji3U/zLNtP0SqhRqkSAGoM0YehOyQ=,tag:o6+ySVNEeeamX0gjvYolyg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:21:33Z"
+    mac: ENC[AES256_GCM,data:tU6ahE5bZm30YQBn8uHwxJQP79w9R0jvfwjgYx+VF3xek+2RaI2qRygCiJercSBP2doUag6YbUoV+hvQJW2RdLJijgZOr/+XM9fhYP12rg6uDscf4aDGsZ91GjpeLzNJ0wnLV5xbfD1D/PSR+GFFPN4cxOBGfaFdFcIeXq+BqQk=,iv:p0ucdbdNtbmmnv9be0H31dR1rIGqwHZigXDZxLQjAQA=,tag:vJopxBMM1sHlNMiupRgqpw==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:21:08Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf+OPgnKY9qa4eg2ZiLNPDoVeGkV+r7olXBjMlo5JCCasup
+            RVVMhOFM/LQ7XKrKl8IL8rO5tPZ6r/vn35P1l7mqoKl2J3m+q33J+z0UoW7240nH
+            v+FvUy9+15PBkZJc4ERQTS/tmpxUZSKf4bUKBCXUY+4PlkS9ZdGWvLgXD21/MXVb
+            hG42mXOOS/rvu6rxcij+wGreBcyxH+DZA7OCVe4fd0x2VoapNvBJdbyBTwhk1X7N
+            fI9gExvVYD2226qWavOXxsxb8fVt067Icjjr55f2cBgSq4/aZ3zftD4LkIdUKrKy
+            19fcYYvvbNCsJpu+odB2371fnTb2xyt9nzaVvSADHtJYAeaLl/iKMzVMfNWwOJjh
+            LxXNMYXqzIhgxQvh/y2OiSnVoaTJJeburS0wmu8tlXRIOCRH3Ty6P4yvkIqwIPjp
+            zJXP6VwpZPzd8/99cH8578tetIrB6SqefQ==
+            =Q2tE
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:21:08Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//Yt+NbWgqHwbatH0rdNd8AmBAsV33rCorP6wud2Ar6StG
+            4SWJ4f2bXr3KK9oLFGa0uqpL0i7WjlJ37700K8uBBImt5Y5krD2wbKAmRecsSjJy
+            olMskNWll/4xOe3P6kpyVs9uY0Spk7hEqsikPNsDw1tpeZPAgNnKleU8T/wtxBJt
+            iMWppg76CZF/t8Im+HQfciawVv1MVOQ9hZZMfBImlZEvW2nPfksI/Obnn3mCKr1C
+            Vr+4gRQh1qorc35xlqQJpcZ2j8YC+rXjdRaeO1NZFwAb982R5kw0GTil8twPWecy
+            dQ2doG1eu/8iSbZhroGU/ZrEyu5VsknG7i/RzucGULvm+HKknyJ6oYkSkw8uzNFc
+            v5emrWBrsVFg+IILf2XKlS9ZEo6Rv5slv2YelN50/39JV6B058E88QmNJIbhqszX
+            AKpwC2zJYTOqDZQ5uzBokbzp/2NC3YZE+18zePAUsWEXs3SvvEgaSvi4DuQ2Hl6u
+            Ds+ATXDyJpZYwFJKao1hBIprpPoSewJC36qQB9k4l/VvzsFp9DD/Ir5yj1JXv+N1
+            OPerwZepRNJF2dR5EMLX3WmpJtdLGKWuj5VsWBaQoFkGR2AsM0VPX+0IYvLbC1Gm
+            kvFvK/K/0xCM9irOT3oqhq5ujaoz/2bYKFOOxCBdzGerb7gTuwgJm+khfNAC3B7S
+            WAF0M3H2jVoxwbLzGBbi/t5DcMHDllMgLu+LcckfnmEaAKAKBZDmomoIpjUKvzbm
+            0kzkmf8Fj4bf8N8hmz9im+UA5O90lEOzf2wcUCdhAPaM1P5K3RA2Hl4=
+            =u8Zo
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/restic.yaml
+++ b/secrets/home-hypervisor/restic.yaml
@ -0,0 +1,47 @@
+restic-htpasswd: ENC[AES256_GCM,data:L5MbPytoJ1cw+0qCqkiFjUs4XdhGhLjiBCYKrhL6037sxsw50ook0RNv+56Edqbi2H0qf07i8UdqBfUAeeUFJkmK5AZRlXIU,iv:tdgGUcYhvL/73OqnhNYGtP040s2ttCEF4Qo9TsgUxFo=,tag:X5MY+WWvyTfj6ukaKvKs4g==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:47:07Z"
+    mac: ENC[AES256_GCM,data:PcVOj6W24yHPp1ULOXPTxmibDTsGORQZxMUxWq+rX0cwByjSCm8lDUq1WsmFGslL2+RPRDKw6CR8r3USaTaLIxXuvPFvL5r1Zx9lXwR4uIwqd8npel4/D4V0QbtQSSthRQKtO+fWl6IXX4SWSdG1pYL0LHt45tjCRKEi8wZ2Tco=,iv:PVUjWWidCEXSuI5iH0dPO4C3AfHzY/XDlCMD7jS4S5s=,tag:OoSBasxW9D6FNMPOFfMDaA==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:46:44Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf9G9EJuVAHDk/wFSM+oA1OgSeyDzdlY6knq3N1y5Al9Zxk
+            p7zJ7ToNWQ0/Q6NDhLhIEn2WhECNCEwVSomtLSB6v08f/ZPnGjnI0xkws5hJlvfE
+            q8omJur0EhTJLHVEBpnEunImYOnSnS7v77pcquNk4pdm9dAoeakDzz2YF8bscM30
+            DaCPL/GcUpytgszmVIqFpsPjzjeokshxhgB4dFVPXZHG5iZyxG18/zIo9MWpEovJ
+            MRdwIetJBM9olQwT0eSO1WJevy+61f5Qz6LOR4BEBnyA0GCi2bSGhIBhlCtgGbp9
+            tqqUHHRiKE8ctNvenpS+2VfS3UHv21/DMjxN3/hB+tJYAb2iFkMxIYKXgagwf+d7
+            oz0w6xmM+KadUL1qF2T+DUmW5t5XBKyedYEK4z5FFgo09Mv4vPTJPHQjSV+TjzTF
+            o9ntFrGhhly5qtWagz//lcyRe1eXQflrmQ==
+            =jGr7
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:46:44Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//Yc8nC4X/FEY3JR3nP0Pt97xqTz/I5r5FXRsnG/PlIPyn
+            v8pyfydBpAtkyaVhT7QqB5qzodomEGvgP9CwlYCFiKO20frIXuIOhchF+zpaemCo
+            geI7MVoAFn+yhVUW9kQimWw9nMnennFbc4lLgOmCXJJqE9OM7rDdWW6QpHtiifuH
+            0CjnxaNus9fBOozihIz9HZOJbgbE6eJdIav+0jmx9IkP56T/f8ipluathOLXU65z
+            Fg3t7B/Svm55a+vWZfJTjKwGMXqns+08VgjCMY3DzRGWzJogrP8XV99hKpF05J7g
+            7bWWDTovJkVR4Zi2fBKpMDD0uFKHVU3ZsSip0fjQ5Fc/F2WxknWys8iMg4DHUCCI
+            /aTEirPa3ggdhyuDD9zd1wzeVfGpZoD7NGg+o7veBssBvmabFYjsayKNsoawWjkV
+            +7Rt5B76qx8ffdZ4L+ltcxHzPXc+maveWCFRNGNJW5ovmwmPnFYw/45f/nEHoBF8
+            EUZgLQ9HWvns+TCAoT6+J5aoxFm4RtzDHf6xqoXl1MI5CJnNt9appDMuBNzgHXja
+            Bl+oFThlu+cQdq3ROPF5xOhQ590VTeD1HXW0ddV/YL5v3B/kMo6HxwXslKNf3K6p
+            fvAIbtb9TTm3iswUjnX/h0bsPyYYS/eAVXoIjh0ovF61UsN2WHEVnKrSycnZBCjS
+            WAGZroKKRJKMObdujOdHjMcVgtrtc2IjeYVLtEhrKrEMN92kEc8GMGFcNdqfqC2D
+            KZCyNWVasNOQul6MTIRcFeD+to401q0byEBB3jcVoLDI7ZJpxCFF8po=
+            =KxLQ
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/vaultwarden.yaml
+++ b/secrets/home-hypervisor/vaultwarden.yaml
@ -0,0 +1,47 @@
+vaultwarden: ENC[AES256_GCM,data:B1qaU/1jsDgbc7wEl3Yrehez3vHCOPDQ5rjpkYPf4QgVwonOvvEf4H7doVwabhihRqoy43QXBeDRuPVaea/ZJythvZV0cez2Mr6YrhG7/BSB+AIDEa+wNQTGgY5IWkztp7j4BP1XmyRA4A42dOnfHJR6BncJGAfhNguq3FZJuf5BClvyT5aov+GKfiO81l93ig324TKsU9ClLqmVarrPCNba683ADrH8g5EkB2rw0LwKJBWVQh0TKhTTyFdMFTNaIQ17K1ueqLwd2xIfHMmN61s=,iv:H6/RxF6LSMD3OUAY3mEhof2VGOCctg6FsaoyOTI9e5Q=,tag:W+nCl/RAWpdXWbE9v/oMOg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:24:09Z"
+    mac: ENC[AES256_GCM,data:+KnkQjRKq7f7gojR4TDRUahPPcOshTQUIzJOmGBD4cspjLj0Ljf9tqoMCvCzwU7CGIg2c4phUCWluyQwlUAoiRL0rM8YyN2nE0PiWOcnl3p9FHwHxV9ElWiWpVnKroVxZEz0vmj0nsabl9PRD5ipX06kDK8GRZXFw+laSCy0N1E=,iv:7DO9ML9ToedihSJA6v1hMcd4Q/PJ+JLvJQk69kQ8btA=,tag:cifnSqY1ezoHt8WHtuyakw==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:23:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf+OiQESIGjtLsyMSZchshIyC1cBkitU+rw5JMrVIuhfGS6
+            I6h7uPUplpCRAxTxkU3BGwSoZkoCWgVcGvnU/Hrtf6Ana3VMQu8TvQWgtTJBnoSb
+            s0BQ9nrbOeG9RNqfaoqk2N6wl2l7mQmzJUUexjtWT4UR/NNTveFDJkjg0C4mLqEO
+            xVEukgsPxE3uPdAkA1H2m+/X8+knOlLtQzq14CsIVmi4diIIULEPxK6kRXK8wKJH
+            T4Q1pj4bARW6gMHgK1RGxQ4g8/gI+u6oaZgJQuIcAjp8P8u4t1plS7YEoRbTG7Y8
+            QueAGsTUrvJIk7xz1xzVNv+W/ki5RpGUDSVknSNOEtJYAQ7By26QnzB2AVq/hCdO
+            UxRB4x/u73YUyjp+IThC3nynfjxdD4ramgMF2VxZRt6YIpvYTVgQbae8sJXdCRup
+            enAVpQcIEJEoFC+pi4jC2vnsLxLSaAkOSw==
+            =g8Qm
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:23:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGARAAt8HuyXgPp38z65SelffN+snzq8w1EXwKkicMseakvJta
+            Jtx1Ld1UlIrBWClHKhdifOcW3fIKdWG/14Uu4GQLi0QfdW9Tgyt65YyZlCtoePBm
+            /oPjJ2JeUFSocQLKPhrAYYEfQMX86vYBWgeNvvvK1emud/QgeWHbC1nwxpM1eXxf
+            vgP9RXOHp+qKvITplii31OLIFoEC4TBAICXMocZCxSQ6y6DjMCF5nO0zjyOA7Kp0
+            X6rUCoYZW0OgiKu8rDijKksRnWMYb9nDUdZRQVNmmErN94CnHuMGcOZ4hmLhqxz/
+            S7rLtcimAADVAidLV7VRSNkYE7BwiZ4oTgPS9aeSI770lylYIrO5kaKliytUvLD6
+            ShidtiT560ow8LFckld9v6t8/qwtXZeZOZ01kMsRkZTK1u+GnqL0J00Sok7S+Rff
+            xddIvOx0tCOAvaUjJOKfornbocbabXyFVQpjnIOf/cpkQ9KvGMfYYzQHvYSlM50V
+            Dcj42lT/hR1s9xiCE8dTVmuSRf4PV947yL31relQ6IYOXtIh+7EJfL/lHsJhgkvj
+            VK2zj4j4d0gIhhBJbsMBt8ftsTEOSNkciGOnGSk3eFaoLAo5hXnIn9UWTh17LOmi
+            ESvBAjMIKCeMa5e4i6bA3imrDv2o91DoA9by9MR6sAPDzklY/dZtCqAz5lARGqLS
+            WAGgOS/TAIgCuVZOws9W2OA8Lk+u/T7DTjsqtgKCHHUZVKwB+y/j67tAQLGyWp6g
+            D7/EyROCktShFYvuLzoVXTbtc72IEoBv9ZXv0c6KLIT6I9Bp5NxZEco=
+            =J9iu
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/webhooks.yaml
+++ b/secrets/home-hypervisor/webhooks.yaml
@ -0,0 +1,47 @@
+webhook-blog: ENC[AES256_GCM,data:0y0fdUR4Ci/TIYhpRMpz6PGWi0UDka1m6z4/SnGU3ln9WpreOVvvuQMIA2bzohDwAV1BI00jXR+llH/3lFOSbSgVGY9th5uNWivGSewvjqZm,iv:lMX32BcOdZXft51IMSETQodFlYak1jqDchuVEPPxU1o=,tag:c73y1Vd61K0Vqiep3siVhw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:26:05Z"
+    mac: ENC[AES256_GCM,data:iRKh4faThFId7VBi1D2k0oUjmSDMA1BWGiVcRUWyknzT1rbZJ1Tk/sT6LgQciiDU/wKLOJG0VMB3A4bRZgJ/HebCFqox2iPWtConQ8GMhOLSp/zrLuzvrrtsJKX8LGcp2fukCS0/yWeDS/ZkSBqgzxNA/VZsTTM3Lzf2ExYAito=,iv:Jgtdr2h1rK34X4nJVr0YJG31WXO9hh0TS994T4TWMFQ=,tag:MtjgZsJB8lGzXwhFz/7rtQ==,type:str]
+    pgp:
+        - created_at: "2024-01-21T19:25:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf8ChW+DWOqld2oVNXLK0v/Q7g/q2wvLCVaWFDSZm76SCpT
+            +dTflss6R0wLh9x+n2DztKhxlZV6GxNs+nWWkWYnGswauoi2gTPshug0cru6S/Ku
+            a5cJs65OVaOZx9FKnP20dO9Y/gtEl2g76UqY4VAKrhYIgUN+KTZrzmo8ybI7ZVQd
+            Re4FIeji9062+hZKMClHpAilthO46h9ZvgGkvPE0sYsbQkB4CFm5mWLRjNBT9A/l
+            Bl6R5RazTFXLJNshtFllbvS+zXwX3GPRKltFMeuunKBxmMldXAnwJx4pK/paM7I8
+            yfwxZ5G7/cirJDSOiWTd35DidaDL4VUhOUXnWPIC7tJYATIBgOxx4RZxmKdZuvkT
+            lXDaKM8/UdIfyvakkwlSund9LLavdR6PtgXmCDSoh0C5+Qj4TuOsb51jVt393SLi
+            oGvkFDdNL6F0/uDgV5YkH9GWYz/lTEMO9g==
+            =wr+R
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T19:25:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ/9EEvo+DO5xtWvMjG1CD8+UqFmwyITTtfUKCEiQhwWh/JH
+            ekt6Msjf4Y85u8MzFvQwlL9jaTtji0fZgXgRXcivi5ITztW2l9VSXU+wboYqt4/l
+            BmERtMHa1mV0lNQyMWmTrhGHBKWNYgjSM78TxWw8YAu1B2ErIop4sOyzGPq5U/Iu
+            xe5bQxm85LiWGKLWi7ZcOsXso/G8ZsQn3Z21dqHqz5cLOxi6Sj4jLHR5KOdN1bmF
+            oEy6Dp2FhKJ2DHvo5m+zdRaJlWhooUwOU5qZSp0ZZSTGevXSVGdXFiDy2LDcBJ9d
+            kvdQXOeX87cQBRY/0RmG75yZ50QaA1DbhW4swIZUUfW5U++iPC7QynpcNrPGy5l6
+            3eUmSX4/SzVgRK6Jq4r8p60KzZEAKGYeF+fXsyMTsV/3LOHeeSffDFs0q0sUTrH9
+            xc32J+4w4arHW5qdv8VrAubJXDHME7antDGooeYNKhZII9yLtJPSu+5gPK4P8UBm
+            PixyzcT5aV9APjJRJZvaQrSpoxqt9Fv1aABRaw3mDziJ6HWuqqrRdHbwzyq4nNQB
+            jWa0UJrZ2OVkUonrWNoK2pZ2O7FGcJzsQRz/3hlv3RGv/jmcjHizbQocAyKBOxUL
+            dIDw8UZKoWQ3GNAA0jS5qPxWWcAxSGo6fQEkzDoQix5Cf7ynfqH3t/yIg8Bo+svS
+            WAE4sFF1RRiQCR+7NPwoxJeKdGVpig94WxdmAabSWkJAgLxB7/5i7cx3rN50Zv2u
+            e4DZCQS+9xgVfJs1WLd+CbjEAlrxGgGC1g95nTrcbmmESXDskY0D/+I=
+            =QPOn
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/home-hypervisor/yandex.yaml
+++ b/secrets/home-hypervisor/yandex.yaml
@ -0,0 +1,47 @@
+yandex-token: ENC[AES256_GCM,data:hkLFgB1f9t352IGIJjStKG53GE3Yis2LM2HRxmpEF2y0hdPFd4Du+dyMI8RV4DOqQYb6gUrULU+EHIbUFcHPLYiFTarADe69sKJSo1CFkksixiVQQ1G/CwQ5yXm9Xaj+9xYB3IzeTWkfkMzdJKr0X3sJTV0ml7kLSXvmIeZuO+lsyg3RZOWDluR3hRAd0woYMyNfG9mUW+7qSBnJIjmDO2AgrtuVglKD/3x2awV7TupxCq7m2f2G0HApEfOXKUkLJ6zcJ7HQGDPY6tkxsqLYCsuJkM4uTdM149mtgkSQWA65Iilco3oRWvdxQGUDCSwX41F5K/jxkLOiE0wpTd3g6kJIXNkaMn1e6uqtGGpxg4Wjm9tSoUJL51qAhzc7R4FEN4qxEfQ2z2lWFJFoiTdqoZYPKjAlejqjDx1i3gr47+1IB5uZ3/+29l8b,iv:orcs0Xi3YjIMJXxFmi2+Hvu+AZynCfF2aM8drESm+xA=,tag:gADNYjV1n2qES6We0E6zTw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T20:01:53Z"
+    mac: ENC[AES256_GCM,data:fvNUUTt6ZCuI6tFJ57oCyX65ZzOcv1nEZS/Wdi9TfIRbgz5yk7l+t3xdJOOyXH86YHyYz5z9877j+MT5FlHEVFwxMERY7c5BXMZER52CLbvAU0LVGJofULEGHZSSHDnaNJVYeXJrrX01yaQfMhlpPi7+6AvDMqmqmxECnp1w5mU=,iv:LgiY/JgVFh4PsaT7+Gw5ur50dOU4tdugvA4xRH8+eiw=,tag:TxP7k5kRT9RNhejZeXS/Gg==,type:str]
+    pgp:
+        - created_at: "2024-01-21T20:01:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf9HrnRU9V8WHMmgLAmUBbAxF9DxkMrRTwLcX48EkTqPQ++
+            YlhR/4e2tSaQq5aKbmBErMMNR6R5wyQcoz44Zny3fp58k8v9lvioVZrW1OJENhdI
+            tXzZddcKnHVK97PnZttM/Iwpzg4Jbi1o2J29k9JVZ+Mtwu3b+7UagEifcoDt0Ydx
+            jp4VRUkCQvMnMavHCVdTF9X0jqJhz0yKd5kPvCg9rTYlUHDdr6iPoyC3IZcRtvgc
+            9qSJCscRd95gLo1zB9CkYdeD6BC1Knzlwuo0kVN1GXfIOyra9Op4AumarZi2xgke
+            wChXDEMP/v3x5zrHIEH+7oDRrLyN8qfEgbVEmqzEB9JYAfUSo29iq6XSpG/z1f9W
+            y+Gc4u7ABWOTGtjR5IaGSE7dHv31Wed8r9v5SL/tV2ajOiGf984ZbvTA9vrFAHFM
+            oR8pcJQCnXHNh2KMXoJLLtc0fei31PJYoA==
+            =XUfT
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-21T20:01:25Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//dAe9NMRs25oYh0C0kcKD8Yzq9J6Jy/tOHUzkzMrubTZv
+            njOuACjCNKhRLzfaX8SvDlE7tNlC7Sh4PHhswEX5InwFCvznIY9WDSJ/5yrdNGY9
+            XUJYu53362SV0ocrL8De47/Vw2dAeAbnYenv28wsF/84zzmSpPkJ83Wgxgj44g5J
+            fg1weYQKVT37cHVyox1ltLNkapUsGqVNU7VBPArrL3YztIzZYcsNyUfbYrAw88/r
+            3H1lQa+Z9U1g2WBriBBtpnMqIgO8dBtunKymyDxlkY3OIwcSYqcBYncKqASvjeNs
+            wsPH1PX+dAB4ubLibgReDqviBX033wCvYBU65LK1HlhCLRVxBXOLqTf6nFaavhcr
+            aLV+wAPO2O/4JRtgAEbYKwqAwdId8dPbpFi+JDXvueCBIvVmtoUZl4CvJzc8m0lS
+            F7BiorZqsPoGkOg4Tbg1JVdNjTWED2JFY+jZ1AYVk3nhNCrZpTiMSvEgyIbKLLjp
+            AKCYt4XeUjY40OOAwV14IL7NYn++AwTyHe+MBOGxYHKipEBNw54+j1AZ33NcYdRt
+            RG/qTubeMdb+VtugDJYkQY05cj5MBHbyVlz4sx7Jh6MP5eyByvt1sTdVcWPPbljJ
+            /Se/L1dmc78PZG5DePWY5gX3HAqD5f6qJbnURniyUhI+JGxv6wbZAE/oqxObW8DS
+            WAHawgUvMkd6hfXK86OAB43+1XCLpZ41axHBsjXtU3ld1CgKzncYG3VHVtAYlNYM
+            t9DGWlORqkwX7YsD5WWmIpbog1fWeqzQ3y/DwUjeu3bkTm3VKu+nkDU=
+            =zimS
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/misc.yaml
+++ b/secrets/misc.yaml
@ -0,0 +1,87 @@
+attic-token: ENC[AES256_GCM,data:mO5g45uO9fMh9EakmjmdClVkhquKurjXmwnc3Qenj0Wq4QCUvQrOUa9xNcOpQPJsnGnVFH9qFF1X26kGqgUtX3vy4pibvgyoEi5EWVMw8d6tZ/OOKqm4UHlnbG1uEHq5VN5o+IRkk5P0pxXSXiWHNh1aUmW2NrQ8+Wcx7izH01rG5rAZ0hrPZAm/a66W882p6fRdGGvVo4KJBUx8T5n4MD8UNPlafGRKPiloZbXbNAb4NFPnvDLvSPn3VNM659AvDkweMUIQuLvsV0dXB2tOc9ZTkoYHqdYqVMDN/vy+sN+QpKJx0vL5x7e4bSbSCQ7ZP1tJHknuod0DKZqMjg==,iv:Fj35Z4G6jscv8hpcASmoTGc6TUWl/wbebMkQeYoEDeQ=,tag:Y0L5NrA0MKFE+/Fa+eL8oA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:02:30Z"
+    mac: ENC[AES256_GCM,data:yia77K9TZeufHwH6CAQDZprV8cldqvGnOYVBYhh6vywKMudNOi17oQBT2M5hAbxa/GRan/mO5qbyxZnqOGed7Ki9dJvcnv6qJ6xQVuNYWj+U6o5IL0JP5kpoPkglz1ShubArn7En39Vnd3lOdDTCEFwSv43llQ35krAeCK5etV4=,iv:b5EAv7ufDPRR6HSbyHg5IohqCu/8BO1ORR012rqgiD8=,tag:iebh6Q9RpqitDuO8AkL3fQ==,type:str]
+    pgp:
+        - created_at: "2024-01-22T10:23:43Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf/bB9lfIk+Bg2D5oSTDX2HGfC24sBwikZ9Bp/bWdSgvwLV
+            iMVnrv3WyTc8cDGpBgbKewkc7M2LoIIw7bwuBBH+ZS0f57kblNmEXjmjgJ6E5uPX
+            DSAisi9FVC4Q/4lsuTFTu3LW4Q7rYetgzT8vU/g1wRQpdFaJUUAPJryBSTGMPq0B
+            CJQ3zNMonz24ywMGL3AqoG08vyvyhohRILbudSq9l3yKY1RjfH7qfnhbN7M2HtRM
+            /HItcGewV0Jp6837je8t5LmaQ6LMW55cL3Iyb4v8fIdA7GBwDom+2E08GhyOWOTo
+            6dYblv6z54MxmaDEgQNqMncKmqQz5lnFR57Dz2l85NJYAYy0/r4HISTNvfkSTPwN
+            8ioG8gZve8S0u6E/LVfdBnAaj+ywWYj53qb5b3h6JJMgDN2lDo1gE+n1oKrHAx7G
+            if6dl/KLaRVEWAJOEKGSR2yLr0MAZDoEpw==
+            =p8YZ
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-22T10:23:43Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzTK+524Lx1AARAArPE5J7vzf8PJ9gfCgnKdeen9qV6bLbr3CIStOfXT7EsF
+            LLvfBHxb2ZYa95tf3QoR1nJPBrHW4w1S9s55BSv9BjQN0xJYf34nyPXJ4btBvE5O
+            FUFpebbyT6EfuZODz1joU/8X8sl3ZUEq7OdYvaSnks+mrA7fD0Ns92Ra/zfay+cP
+            F0SPpUn84O1Kz6q3fYQ4qxUjAMuvha6iAkkTgl3RmtpNWIqGf2p/gCDhB++IOde+
+            E++mLUnj2yr8c7thL51po+n7C+b7Km05KEnHE9jNoLjqSfikUKVjbN415iyjk8Bq
+            vzSZXeC3iH4012KqtckBlB6eNHfKamnU4VKHWDVc2qAGBznWhWK2jBYipMgBW0bB
+            5hI9MWZ/EoBWGqWtknOcMOYgiyLvPXO+z3cGDdNiSNT1sH2EAXKqmKYrhY3kcpXa
+            rZvYX0xj8ruMh4g8144W0Z1P4pmJwvhYomgtkBbGsdwb8PSACsje9bY/tsBOAqro
+            r7W5k7OlXdljlz2k+j9/RkMl6l4iQyiIXuExQR19ncaQfzRXzMiETYrs1F6KsJ23
+            FmuY0TDoyqRGhIo5mu+q+yOphOxf0WY1aBji2Tz1F6SMjPHn2Sk8LsBrnwxzYK3O
+            bCrzMO/3bHPn79WehS2K3mNZJ6jBTAMIitYs+2/79/x17ryd6Pk2IvVb8CvY4IjS
+            WAFYWMFUdW0IzJScY4E4HGCiTq+0GSE4yBxvZtpsnk3pxMg0vbf2xa2H9N+1JWq2
+            +Ejgc7iSxmeHPDHVCyyY16HvBM6qrf043VPY9MMfAqrWAxoIFL8QzTs=
+            =Y2jO
+            -----END PGP MESSAGE-----
+          fp: 20d2e2b90c6aa179585b6b6b34cafb9db82f1d40
+        - created_at: "2024-01-22T10:23:43Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ/9EuSXyQF5ffKgrzuM616YGou3/12MLvUo8vD6m9FlaPnR
+            wvlUwP/wEH2vcN7ZKSzYoSl+vIxwEO5QgmwtSTjGxCfLggIb9j8GeG9rlyK7p9f7
+            44C3niLZgcdpRYKkgoqrl9gxStbP5leErPnEi75CZYaBri6YS/Tgly+flRwNYHjt
+            AexaVY1mg2znsuhEgGOeb/iFgd7MxSBWnLD9daO/nyzjlRQtnd5Y7g/PBmz7oxFP
+            BOQhniMT5aIePTfVicJQ7Of7bFqYNh2Gw5zO8JcADj4gzEIFBYZRNczX19vvWdDG
+            Cmwn/6iutO6CQ6TPW5Xn/Q27Ymnvl2NmYDFlW3DF3O/75Y5TYdbIXpwmPZeJ4ya2
+            R4FcGnMA5eYG2UgGgV8UEsS6NswsBDszxXsdAUL8azzkqelHLfa36X0hWsLShdOi
+            T7qLYSwh2zenIA/up2Vb7spxaCUwDgphHOa7Q7pOUFRqDg1tDvAdfL+0hKVwPvsV
+            oMge7jx1CoQmt8zIOqHwzCJ4xpMZzhwB+o6wNn1zn9ubq1M3eFJA+gXIFRBRAFQp
+            NWWhAfTcYDFaKKPGknLXEc6AbLfp5zbySpsHTrhdLQuTQLBdYfw/WtOw0NqGqyeT
+            Lifbh4+ZCUEVgMvWRnPF9ARdaeqd322XKchZMUjnrhnlMDPDA8VNFPG7rj+b8m7S
+            WAFPT71pIDrJ/56ox0MVgGpBBYd6rWplbColK4URo9v4FSAxjk/oUWlMj0N5kDMY
+            Ou5Cig0WaK921liR78F4g9pWUsIygO2daayII5JfxJVAD59bhXzU4rI=
+            =yqWR
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+        - created_at: "2024-01-22T10:23:43Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHAQ//UvWHRMOFr6ANgwD5QoIr3FEQbT00JXN8/ZiULSy71Hi3
+            0yXWsqh2M6s3rJomWDcY03AihTU1MRxcFiW4aVo+60AnIBH5S329T81Jb8sUOA+R
+            7YnNqtMc/Ye6PNlx9XA0RF0/Rn+47If+J8iPrgHCq8dY2m5NP74PEP6Ik1YN1mj4
+            5KE+i+qwgyWZ9KWBfp/z36KTdJofbR32GIO0uZQpt0QIbSr3wkPKQ93loSXYBc6t
+            60Zue/CTl7lFntIujEuEqObz+SEXLgcBCsJdaWirpNLTuX/Jgm0QOTbNt++IEEnL
+            ZVmPKRWprJIgdmfpdqg9PQIUY+hw8TV+870EoOdoy1osAuyr5nG2SxlQQBd9vyB2
+            8t+f5a+pmfiVsg46+BFpSB+CKFhgtJBpYqrHMWkyb707gys/EpJ+BaWOtP/2wjQm
+            oKoKMA/NvYTlKxEU5ddi3IuxC1IjA29A1OqNyckkH/zUh9cRY9FZv1eEmb4++KQ7
+            ZMi/cVGR/LkwViVaN1m6wT9j1VmG9/XV8MdsRfKINd4vumtKmLkTFxAt3kt65UDG
+            M5LpnAOf1AjG/bdGv8IIDc9tc6B+ro8dsNPKoAg90rnjYKbYSGSYO7Y+CYHvVbox
+            VrrPGLtEFJPfUvm/fB7meSpBdwErp0nKn/Cdz6cN4W3bpEPqfmnh59xmh1q/aCzS
+            WAFZLbHEh0wTa16QqbwWZL4J6mS6Fx9uyzcjKuASAPNxp1HaugHAYtaCg5YbcXs0
+            pdSG5BOc4Sn9hcMyi+QNLyEg8Erf+h6GBZmBwfp/FXKVkjX9zQXTLh8=
+            =6Lzf
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/proxy.yaml
+++ b/secrets/proxy.yaml
@ -0,0 +1,87 @@
+tor-config: ENC[AES256_GCM,data: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,iv:45Fy5Gv9pBrOAlSgA+IrrYvEaVl8084uv2CSNLbU9Ng=,tag:90FUjDpz9mIbLh8wABu+fw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T19:38:39Z"
+    mac: ENC[AES256_GCM,data:0weelqD1jytmJ3Lus6DNycr/LtCpJH6ERXbDiQwludMHYPqFbt7TQJECPTQwSPDhCsw8XmxA4pHvuVR5EdJRK7P7VTsZukXdShCu5RE0mXbobz81VNMWt7yuGJkRfNCQRfosBBTdIH1DVMlcQRXug+9pJt6Y2CGNMAQlz2naJJw=,iv:MXlrbiEBuZQ/qBY2VEKV4x+BOdizfTDAShLLQtMWYIo=,tag:PdCA3haE66oKlQm33UuBlQ==,type:str]
+    pgp:
+        - created_at: "2024-01-22T10:23:48Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQf+PrdpdM+MdicUPTX/2CMT0ZDDVdHdbl63WOdbTrkdGx3I
+            YaP75jy9Eg/PZNkx7ait0z+SEMvC/nVVTjlNAjr4Nag2h7X3MP0eH89Qob1EMt+R
+            PcQ1d6N55QhTLyXuRQkhPiynC/YhQgUJnKHubdqGBz4sgyWPjWWaz8u/YLcRENOJ
+            RsFhswaHV10tSA/oAJX+hdG+ucIBlmgNP56BVT40LNHRl2mOap/ydXhgI8WMaMdZ
+            syoPAwytBNrK2tVpeUyz85rjjET4dDZQHT9dpvY0d3YJs9yi9PQiqTh6rrtB6tii
+            1xjd5Ac0KUD+Bguq3KAp/8yRUJxnWYLw1I5qdH4fsdJYAXsZfYJQuJEpvljk1IV+
+            EddtvFm7QGDZT4Tuqyv58SH6eYcjTw3YNyBCZBxhfDLIOLc2ZldYmX7xK7PZUP1z
+            cpJYQAeEKx8f3h+q91OCO+8AAXravIIg9g==
+            =kPiy
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-22T10:23:48Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzTK+524Lx1AAQ/8Ch0rfzRti2ZZ4YSCqOu2ovTAx36qaL/0qiGaomXJpr5W
+            OuKjQs4RMtFdFKxq18nYRWNFAl6Nhx2UIUiFXzY92V9a3HRgxlDsOp48YBCk7BhG
+            qOxfyL/3F3eiZ8h5hdhnAWtlwfxTnMLVGtN+3NycJlq9+YQ7fgm8SVkTIpc6w+vF
+            I3GVkuEhQHQK1qaudQJYE5Fb3m9EU3QGAoRswnOtO8/K+BtK8mwk4Hx04uiPs1k5
+            Saehk5IIFAmgQwvzeEhWo01NWzZZIeSiNpWgnqyZIeH2k/IsQ/GyB3/oZF9Mg4sm
+            CzFbzAG4afxn+cWJDaZ99/bGhk7xoTBEWGz7VJYLTcDnCnYWGiHlS1oYR14hO2u5
+            m362y1E4pxYl2UeQq7N4kAFKtysTq/f9tbFUwyAtMkppybqAXsAbwzNpXjfgtNS1
+            rAvtTTFX2Sfsxs1RHX4RpJQQhUgVdSVLiHZ88UY1XRyDaInl6vN6fzzm1ol8pAY9
+            /HNU5H1b8skJtEnAASP/wwQgsLpWfM2nueTj6RviybAiZJyhOXWFtekgfp4yDUYM
+            yugOnIDJSg6hAuHbkifrm7VNXPIHDT3KVpcHQ5I4GVMN8L2N90Y9gmgQS60Gyx2f
+            DrDPsMBGh06N2Ao3y+S8Wx0cQ9sqXoLX8Zx1PNnEKf6gRG4bMf8sYChlaS7pt/PS
+            WAFVD82V/dvKQfD6dDUzeshinaZaCqdNwAaVVf/3D7v09ooVFzc/3Wc8rsjAgWVk
+            iAxfkXrXi5ETwh5dH+QVd35373V2xrNClx5IknGTTEfBn8JgowfImJ8=
+            =WMOk
+            -----END PGP MESSAGE-----
+          fp: 20d2e2b90c6aa179585b6b6b34cafb9db82f1d40
+        - created_at: "2024-01-22T10:23:48Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//f8xIMbmjAMNNsyDkWoAJpT051cLjjQf+I7vdRbseOfDb
+            Crl8fR8dDAeGWWGyOeK4MhBeRRxVMSdlGxIveCIObDtI0qnLXeiel6TMNOD0RoEL
+            hZ/nDyNK/iv5EO8Nk4Wn7W49n55KxNOUhTx8vRjpYaoMd25IqneGyMArCFVNiH8A
+            DG//e/IifLd2r4Po2o6xEmM5wEDtdG3Xvg2ONtmrQoamvzeCot6FnRlDT2OEYgvR
+            zueIT7BeM52pfoOfxCDZCqHs59cIrZNYt4ybT0w4NGFYnh3IJYtn7Y9qm7nRvnpK
+            P8GZxbwx9mEtSaNYFO1xBwCxM98AmYUB/X+it1J3+i7Btrdkuo48HVRF02fzr7dl
+            k9GCQ8P66w2h8MvOrx9VRR4hI7KwTeIH38akcLv7ZcmYY/dOKVAX5mf/4B+xlcBl
+            F3JRTyCCw0TxmwCHZhbhtWrnPCWDAuZUeOwYFoNuhrhvzgoIb8WkhHqRXKq5EP6M
+            17P3wi8n2OBNlxJhr9a4RCO0PNd3dz0YgUs+mo31jbHUwCSBIreFxM87qD19RSER
+            H2cdk9c86mRi24HqJp26mVjjYzqWVwSzghIZNnGtF5LEf3l6OLTAko3LznaRXz1v
+            k1bqFenys1Ooa03d8C8in+bbAAcD34qkfCI/O6Rh5mhUhOYnuka6g+kVvaAZJz7S
+            WAHab0uiDpdxExMtLpzXsHMpMJzaPqZGqCj1lgj0ljZzCSj2lEKsDiL3LxmF4BEM
+            G0qhU9gdGM0gvXsU+8gU8d8lq+7t8+NYRIyF6Uh/RXy0mKORMJlyup4=
+            =uEnx
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+        - created_at: "2024-01-22T10:23:48Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHARAAhLQNtQ7L9LjFr7LMGMNAdEPZvpflv19sa1tyl0rxDljS
+            ZGkpKoe9mf1b9gYvKoz6ETVKAtuLyFlg6fKWC7WoJLK/oO+rjv4asoUEKC3IDQUC
+            Y7CN3+wiNWFFZBcX2FRQ4ilT0e/slh8ZQfdo4CnwgWOw5arcCm2ImktU1NRs7XB9
+            9lSi1TWeVKGJbVoyYGnBSHXbBNWY3kiOUVs6K2ysrZ2Vaek2kYbq84flAs7TrQHt
+            487Vy3Tmuujt6XMSCd8nKDXGU7484RoBKLaBtxhofpaGEVTnI6bV+vqmbWQqh+Rr
+            +DUDY5vIx3p28GRdl2+4DCb4xLRuLDdb1GERBe1pGKaGMhu9ObT2NrLIanaEVAiJ
+            7VfED10H374KZt4624btUoh+k+Ibej9BIgvPg72dkVhNpXqmqTMkGvufDOmYdjGp
+            Mfoodu3ighC9abqCZ8IqmcjeeVjFLkWL7RxQboDrIbYGimtbLN3StzGd0NGcfYjY
+            3tDFsBABQmReyga2BLWAHm9KcRoHM2lMoXoFG+G/VNk3i67lxDG/1uGL0ejSN+MT
+            QmRDHrQ9KnqHuA2KHLDipkbx4wkzzy3L0w3b7D4SlvX9XvzeMYlhKRCR8aPLabdl
+            lao0i4CZNFdMtiFyp5LNPYlNRgo+iNr6GMDfgBGJ8lPe7m0kf624TE+CEsV8nnPS
+            WAHVNieQ/6g1rKpLPR7GgFnHi2qQyXl2QOfyerrfrR++QGUJLF00haxnsvChAsYI
+            ybF6z3m6WLDmmWNyKww3NYR0JX/5zNPTA/sH7PX4PHEf0JXST+6UXvU=
+            =1b23
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/secrets/wg-configs.yaml
+++ b/secrets/wg-configs.yaml
@ -0,0 +1,89 @@
+wg-ataraxia: ENC[AES256_GCM,data:DUXlhmTvB5WIJEP7vgr9+YNHlpC0S9Uhcnrp30fvXRehQdGCJvQeOYfHA9ZQ7zl3ZXFHeeM5YbAP0y3eRfvjY27+poW5jzOpj8nv7PB0JKQsF39nYBvWkFg6YpmNYnF6yOWKOK7Ae2cXE4OCWGhGKEtHywv04Mr9b+GgfpFWVxqvanAJ7RFz4nmGf8KK6cKaCyRCeXonEjXh9DfzstIiMYGtBULruw6AZQZP8dRQxoyFQ0/ICIAhiimD5IF/4l8rrdgHYxhn/vZdkhBOfRsH0X19/PiSWdLKAglvCcZK6u0lWEqFMnJFtY77YxXNwEbo5mFN8OVhK0f5T8WGOx5D0dIrkHTaFaOhltMsKwClla5WiYEld5gVuz9TGKoX/W8YANz38fXl2Z2cPShQRN8poHGkTB8iLvVXLx5G3LKMouw01lB+3nrRqZle/THJjFXFhrGla7gGXrKknRq/A/g2CwExiCJIB9num1duTBveQaxSQQ==,iv:h8m/dXC77L6p46rEYIiklZTDUTZgYBg1yiO/klQJGRg=,tag:uEeDkGpaTalFhPT8+R/X7g==,type:str]
+wg-dell: ENC[AES256_GCM,data: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,iv:RhPtay1IjAq40plSm5xVzUGbdkCcLwCVsOVysChDGag=,tag:ML99P2YlxsNIdmcxu6hbKw==,type:str]
+wg-hypervisor-dns: ENC[AES256_GCM,data:bqiFalZaSx1Xguhufa656uHfyfcCdeXJdtcsWeaGMwBJwO7JXAnFw2eB8y2H4Xr1nrwwravnp3hPmEcLI8eIWUCU+IhNDF0ghkU+YtBcb5HWNRLV9lqqs9dGwEcX9SXQ12lTci0uJxo0nMWcNQWTSALjx7GLHQLmSbmRrGFl5Fxc+NjuAnEH6bQflOVQhjqaUwgYYTOnxdIF6ljDg2+28pfM7RixxKsJc9E7iO9JHYzzwL2Q63w103fIlfroBQ0t6S7gqqB5ahXB/gnr4Cgq4gMFdLdL7LCKPEmpT442wvLt4yjNytdC3P+jxjOK4AHpFHQUps+MH8eapkIrTUhnveITi0dgxOVyAIls+wDYphHEYxXUkkSw+BlCvbygSfHfwj9Lxksn7k1E9D0EN68yNtFpR+72Bfl6H/7BOw==,iv:3GcVUj9EzogzQ78ImEkBfT1Ula28i3dKH2be5Q3ignA=,tag:9+54I6P/JKtmqW5RyOLTLw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-01-21T16:36:51Z"
+    mac: ENC[AES256_GCM,data:AmoEIOX4ROFpg60hymSw24oWXs/SodzEvodq7YkUkbeD30woka625KmEwTbpLH6vqaODJU8NS5ioHaFg+ErFY84B+FDz885UYOjeNK0Z/dm4AqjBi3YDxKmfedwpIfzpDO+hDHGOP3/EBALO2Se87Q9hu6NwED+nSRqLqlpPE9w=,iv:tzt2hNr28mSDhTwKBuPVIMhGiD0/KlE/oSx8HICH+Is=,tag:qh29t54uCGxt8flcj43cPw==,type:str]
+    pgp:
+        - created_at: "2024-01-22T10:23:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMAwcagTG/Fm6AAQgAi8xG4FM0i4JxqTVLTaZKWzICxfUGdrgVT6lisLiZjSjp
+            iR6G1UADtWqJDxUhBN8ZBanvaQfm8goaBaE+iH+2IkYnD/+Exfay1ey1NbInSs2C
+            qk8L4WPfRnGCsxjo+tSaciUUcKdH0a+xR0YSgtUctWgsvZ8idQiTV3skdTmDwvR3
+            0rlDxtNhjKGuYybvdVhQzM/tTUbzNk1iBwokf8r2aWWi0UmsfAxtH/pHthARyDIl
+            7HP98/ek8pZirssb301s94Y3fRRhf0kW04gWNA+/m79OCKxf53vLYkz0HEBRriIC
+            +FqHgqn68jFbrbancRI5KpiAfRj1TuAYi7E3ebjkZdJYAfWHLUI8WGekib7v8Fdd
+            YljWDrcA9jK6fxEKHky/29qobOVYdqKsTfYDmPwcODvBXUfiS0Ngcg6BDNPLB29h
+            JsLYiIb2XeH4bpQiHMmI1+Ms/5e5l9cyeA==
+            =TjlY
+            -----END PGP MESSAGE-----
+          fp: ad382d058c964607b7bbf01b071a8131bf166e80
+        - created_at: "2024-01-22T10:23:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzTK+524Lx1AAQ//TqUInIZxoK9rrF1RCF5xCQkL6OKYKuQPNlRxLZ1a8bTG
+            W566jpPwRDgmnIx9OpkBzDrVvEfZZN706ACqnjI4dFeVoikPug4TGx3cHxWS61It
+            Eh/MfzWUh1+prnIzZEIFK31IHmDXUYNNi0GBai+6cUAEd4guHTeFX4cOMVpuyV26
+            fTAdjh0nnMTAKyZbbtDKf2RxhH9/r9jyCia/UJUJD0tukNdxrtiXnENrCL6rBjGk
+            WHLhlgscP1qckl1ls8r4J9oCkcrzi29QP3uHvfZLyTyBKXGKcHksHDocbj2TMYnT
+            1SXJdr/vwiaxK1B+Eu+t6Q/1FG1983tPWfIkRo4TlzRh8V4NK2fiLTiYV0W6wQks
+            cPSnAwAdr2tE6xF7g0Msx1tiyRT+sqf6fmaxZc4FsiFkp9RyufqNsIhW19hg2fsZ
+            BdQUEPsp6i3yvMlAnEsSoGpr49fvoEZke0mLU40lbA9bsky9AI0JOitX6Ry4qsuL
+            3EwBH7c5KmFERiksfzh14q4SyYZA1HEjvnP1kwEyc5y6/SG92a+fs6H7T1d81uQL
+            v8uhKL8V0y0Iip4gSOEIElnQMKnDEGyOo+FN++aOfp91HurqvvYXw9UJ8lh86u0W
+            Rmv1jarvJHst0UXnaYBZiSvtmjz1OuBtiFZxbuL1p9LgHrVURHqpNYjZz0Wdd0fS
+            WAFKB/ZmHLk+U+D9AzK3E8Sp9tIOSU+/ba2P37T2K0nXV9f97xTHB1+B59mYAmz9
+            6XJqhinhwA3+5JXoJ0VT+JcNSReDPNXRDxIWRvQYfQvpk2U2O505vjU=
+            =ZcIf
+            -----END PGP MESSAGE-----
+          fp: 20d2e2b90c6aa179585b6b6b34cafb9db82f1d40
+        - created_at: "2024-01-22T10:23:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA187ia82lSDGAQ//TNnXwmVSWHQ+12O/cQt6A+yR49I0ksMn/TgwJS3DhSZ/
+            I2X9NGAMQYF04xzwxOIaVDKXntUUDUfCneFWxx5qhSABtJt3+2J46GOt8F8eYzX8
+            vMnkBsASHK+EaHfxCmdxYGo2Bba0ALKkU+3vQuSGBO4xZaYWQZys3FMUR+grHdKe
+            DM9hfbcgO7pYJ/7wTVxtsI1J68quWE+MnWYjW4PDeTjmXnfePyKLFKFWJ3KRqSRd
+            9QzwAKPXW4Jyxt9XQgWMQRAnUBNvaCFnxvmQrdrn8PmYioBZrpYUOId86hp577pX
+            11W4sqGl42bW1rPYQD7TPgoL6KHRtGmdz2RvaY28+OKb4W3v3Ul0r+2cr6tkO7Eu
+            WoV8pBqNY0KMsb9VjAhrPEllxQ2ZQYx5nURDQmEMMIvomYZVhjxQXCeIQllBUvCk
+            DZIzcZ0oWS1kRNcZ0JJQUcC6nZD4lIKZWnq6Yoh+PdpaqFBwUw4+Z2QENN3TuQLY
+            H2k0EMgfW0t4NnhtbaAnTQtnhTVX0pun1rZI9id2d+KCwr0XVjhhQCWKrLjXec5s
+            i3zxvKuaWvQGtxvr9hFN8QJG+QP7nhaQ75sHZ/5enGWTce1dqWipfBGmI/WpXxcF
+            qV22sVCSGAn9SuE0Abe/qXiJaYeRzUfCwoYaDfdlws85qsVfb/qyoRzZI3t7daTS
+            WAFW+KMunwYpOdjlqJKMM9ruQY8OBFPYVCvgCxGDxDUSbA7dyZvynBoiFJ/8yBlZ
+            jqvYWdF2PFzhCM9/ZNzxIMnEL8m+B9vojJVbJd4M+5yesXHChobN69E=
+            =R5Jt
+            -----END PGP MESSAGE-----
+          fp: a32018133c7afbfd05d5b2795f3b89af369520c6
+        - created_at: "2024-01-22T10:23:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4NImSg+4iqHARAA4IYyZNdx5FydXXZL8RPLyiX3ySDgPelLwqRBU7yOsJFH
+            JSw4K1p8UNOQCR+ysAu3akzHcNwh+oEOJeJfZDr/UQGomLPq+A7gP36Ai8DsGL13
+            KhEqTnRoCvD2OXSGMx0jjy++ZpniCGmQYDcY1uzOqTq4Q0P4k4bA3qzZz3H2dTUV
+            cl7IiHNtZX/ogJe9DCdSIFjUds1LGii/oeAaf4jLzaO3V9jhh8p7aJVyhVV7CJrf
+            x/0vx7cWp2kjRRqs0IXaWJ0A35bG1SN5xSU8ohAcagIA8t3WVq0E0iaj7unXMySe
+            2b9RGd+sqS9PlRb43x+xRlkII6oIQhBZCpIHFWWZFNwegp4UtJt1GXJl9hsVrqL/
+            fO7l9HWXZTGCYSVZJ/lsC8b4cSobIxGd/tAwVzx9xc/EAmY/2WABiC7uZjk0gqPx
+            iAT/Qzbl0M/u7ZopU+I0DGv1dwClEIvJPd8Tz8AiF5idWzONUyGydu5itQCXAnpD
+            zSNoB+NDINnVdRTCE7kxp07euNkrScjC4x4ruOLzIMLWleDPiqxQJ7NLNG2/N5PG
+            GOlxp3uTmBOkCaPE3KBIlLBus0XGT2oq0mX+DIP8Wk2oJtOvVrYiMYUV7CVppi9h
+            xZ+4VejHXbRpJOSKuZf4lji5b2DspSee6scgjoUkLDt0Zp0bqIKJ5TbxFAdNA+zS
+            WAFv2BsueDg3gm8HYmSZP855Osg3+StrX67sjGst/dwUrSczQyKt4g9JJ2LOVU+j
+            YTDJvhNcBG3GHWnVZl1yE97i46KMDL4uIz/P5TgCIuvvhmGVtabIYx0=
+            =MHAW
+            -----END PGP MESSAGE-----
+          fp: 78fa8fb95e85b2b89f1dd4f0834899283ee22a87
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1