a

2024-12-21 20:47:12 -08:00 · 2024-12-21 20:47:12 -08:00 · e181d8f512
commit e181d8f512
parent 25391c0854
15 changed files with 448 additions and 242 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -19,9 +19,10 @@ keys: &all
  - &m_static-sites age1s4hzwj982zk04kr7c5u0vlemkzalv72wtkttkgzt64xv8a4r25zqxra6u0
  - &m_mumble age14cnx8ttzqndcsdz4xvmx07cvms6val5aanrf9qsg4j888hudufxqz9nm5p
  - &m_jitsi age1cc80558u3f8pdwrmhev8264c0h9dkkm59sy40j7zms97qzxg0ffqza9en0
-  - &m_nextcloud age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u
  - &m_dis-sociat-ing age1nsuxsnf64mcfgnggy5ehuqk3egp0rea3ldzst0f66full7ap7ews5eg46s
  - &m_exit-node age13xddcc3njv29sxzfdx2rjctaejhsxr5rephruga7vjrvjclcapuqnwx52t
+  - &m_plex age16jzuvkchnm53wfl4q0yg93zmg7jmj6rpud79sa6wuljved74hd6qvlw66w
+  - &m_nextcloud age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u

 creation_rules:
  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
@ -146,13 +147,6 @@ creation_rules:
          - *op_noe_2
          - *op_noe_3
          - *m_jitsi
-  - path_regex: secrets/nextcloud/[^/]+\.(yaml|json|env|ini)$
-    key_groups:
-      - age:
-          - *op_noe
-          - *op_noe_2
-          - *op_noe_3
-          - *m_nextcloud
  - path_regex: secrets/dis-sociat-ing/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
@ -167,3 +161,17 @@ creation_rules:
          - *op_noe_2
          - *op_noe_3
          - *m_exit-node
+  - path_regex: secrets/plex/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *op_noe
+          - *op_noe_2
+          - *op_noe_3
+          - *m_plex
+  - path_regex: secrets/nextcloud/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *op_noe
+          - *op_noe_2
+          - *op_noe_3
+          - *m_nextcloud
--- a/flake.lock
+++ b/flake.lock
@ -7,11 +7,11 @@
        "rust-overlay": "rust-overlay"
      },
      "locked": {
-        "lastModified": 1725418254,
-        "narHash": "sha256-2zPzPP9Eu5NxgJxTVcuCCX5xh7CWy7rYaLHfaAZS6H8=",
+        "lastModified": 1733377410,
+        "narHash": "sha256-tZ9JEAaHIs3TPdRZeZzHsnJmUilkcnVaUTvyprbRb1A=",
        "owner": "tpwrules",
        "repo": "nixos-apple-silicon",
-        "rev": "c5f944f49a052232015bb3c03524b69e3fdd2aa4",
+        "rev": "e8c07c3ae199b55a8c1c35a7c067c5cef9c7e929",
        "type": "github"
      },
      "original": {
@ -155,11 +155,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730504689,
-        "narHash": "sha256-hgmguH29K2fvs9szpq2r3pz2/8cJd2LPS+b4tfNFCwE=",
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "506278e768c2a08bec68eb62932193e341f55c90",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
        "type": "github"
      },
      "original": {
@ -204,16 +204,34 @@
        "type": "github"
      }
    },
+    "flake-parts_5": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib_4"
+      },
+      "locked": {
+        "lastModified": 1717285511,
+        "narHash": "sha256-iKzJcpdXih14qYVcZ9QC9XuZYnPc6T8YImb6dX166kw=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
    "flake-utils": {
      "inputs": {
        "systems": "systems"
      },
      "locked": {
-        "lastModified": 1726560853,
-        "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=",
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
        "owner": "numtide",
        "repo": "flake-utils",
-        "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
        "type": "github"
      },
      "original": {
@ -245,11 +263,11 @@
        "systems": "systems_3"
      },
      "locked": {
-        "lastModified": 1726560853,
-        "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=",
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
        "owner": "numtide",
        "repo": "flake-utils",
-        "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
        "type": "github"
      },
      "original": {
@ -290,11 +308,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730302582,
-        "narHash": "sha256-W1MIJpADXQCgosJZT8qBYLRuZls2KSiKdpnTVdKBuvU=",
+        "lastModified": 1734425854,
+        "narHash": "sha256-nzE5UbJ41aPEKf8R2ZFYtLkqPmF7EIUbNEdHMBLg0Ig=",
        "owner": "cachix",
        "repo": "git-hooks.nix",
-        "rev": "af8a16fe5c264f5e9e18bcee2859b40a656876cf",
+        "rev": "0ddd26d0925f618c3a5d85a4fa5eb1e23a09491d",
        "type": "github"
      },
      "original": {
@ -332,11 +350,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730633670,
-        "narHash": "sha256-ZFJqIXpvVKvzOVFKWNRDyIyAo+GYdmEPaYi1bZB6uf0=",
+        "lastModified": 1734808199,
+        "narHash": "sha256-MxlUcLjE8xLbrI1SJ2B2jftlg4wdutEILa3fgqwA98I=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "8f6ca7855d409aeebe2a582c6fd6b6a8d0bf5661",
+        "rev": "f342df3ad938f205a913973b832f52c12546aac6",
        "type": "github"
      },
      "original": {
@ -353,11 +371,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730490306,
-        "narHash": "sha256-AvCVDswOUM9D368HxYD25RsSKp+5o0L0/JHADjLoD38=",
+        "lastModified": 1734622215,
+        "narHash": "sha256-OOfI0XhSJGHblfdNDhfnn8QnZxng63rWk9eeJ2tCbiI=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "1743615b61c7285976f85b303a36cdf88a556503",
+        "rev": "1395379a7a36e40f2a76e7b9936cc52950baa1be",
        "type": "github"
      },
      "original": {
@ -374,11 +392,11 @@
      },
      "locked": {
        "dir": "iceshrimp-js",
-        "lastModified": 1730406937,
-        "narHash": "sha256-y7qpPNAUi9IcncP8U9S/ywmqpIUQxeTQk9Px1NeGyC8=",
+        "lastModified": 1732326761,
+        "narHash": "sha256-g5oPo/B14lEcUccxBuUeqVghhnflExVpVMveYCVFr6s=",
        "ref": "refs/heads/dev",
-        "rev": "e17f981d379d63abd2ed85463ca712496dd44eda",
-        "revCount": 49,
+        "rev": "02851fb2a4870d4519aa7561095b367d7cee7578",
+        "revCount": 54,
        "type": "git",
        "url": "https://iceshrimp.dev/iceshrimp/packaging"
      },
@ -425,16 +443,16 @@
        ]
      },
      "locked": {
-        "lastModified": 1729544999,
-        "narHash": "sha256-YcyJLvTmN6uLEBGCvYoMLwsinblXMkoYkNLEO4WnKus=",
+        "lastModified": 1729958008,
+        "narHash": "sha256-EiOq8jF4Z/zQe0QYVc3+qSKxRK//CFHMB84aYrYGwEs=",
        "owner": "NuschtOS",
        "repo": "ixx",
-        "rev": "65c207c92befec93e22086da9456d3906a4e999c",
+        "rev": "9fd01aad037f345350eab2cd45e1946cc66da4eb",
        "type": "github"
      },
      "original": {
        "owner": "NuschtOS",
-        "ref": "v0.0.5",
+        "ref": "v0.0.6",
        "repo": "ixx",
        "type": "github"
      }
@ -504,15 +522,15 @@
        ]
      },
      "locked": {
-        "lastModified": 1729302939,
-        "narHash": "sha256-slp0zWHKvbCzhiBwwe6VX6jODEY+PKhHyiAoHgM5Bdc=",
-        "rev": "6478f624b2a00367e0e3d750a2c7a9f3afb72712",
+        "lastModified": 1729360442,
+        "narHash": "sha256-6U0CyPycIBc04hbYy2hBINnVso58n/ZyywY2BD3hu+s=",
+        "rev": "9098ac95768f7006d7e070b88bae76939f6034e6",
        "type": "tarball",
-        "url": "https://git.lix.systems/api/v1/repos/lix-project/nixos-module/archive/6478f624b2a00367e0e3d750a2c7a9f3afb72712.tar.gz?rev=6478f624b2a00367e0e3d750a2c7a9f3afb72712"
+        "url": "https://git.lix.systems/api/v1/repos/lix-project/nixos-module/archive/9098ac95768f7006d7e070b88bae76939f6034e6.tar.gz?rev=9098ac95768f7006d7e070b88bae76939f6034e6"
      },
      "original": {
        "type": "tarball",
-        "url": "https://git.lix.systems/lix-project/nixos-module/archive/2.91.1.tar.gz"
+        "url": "https://git.lix.systems/lix-project/nixos-module/archive/2.91.1-1.tar.gz"
      }
    },
    "nix-darwin": {
@ -523,11 +541,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730448474,
-        "narHash": "sha256-qE/cYKBhzxHMtKtLK3hlSR3uzO1pWPGLrBuQK7r0CHc=",
+        "lastModified": 1733570843,
+        "narHash": "sha256-sQJAxY1TYWD1UyibN/FnN97paTFuwBw3Vp3DNCyKsMk=",
        "owner": "lnl7",
        "repo": "nix-darwin",
-        "rev": "683d0c4cd1102dcccfa3f835565378c7f3cbe05e",
+        "rev": "a35b08d09efda83625bef267eb24347b446c80b8",
        "type": "github"
      },
      "original": {
@ -538,11 +556,11 @@
    },
    "nixlib": {
      "locked": {
-        "lastModified": 1729386149,
-        "narHash": "sha256-hUP9oxmnOmNnKcDOf5Y55HQ+NnoT0+bLWHLQWLLw9Ks=",
+        "lastModified": 1734224914,
+        "narHash": "sha256-hKWALzQ/RxxXdKWsLKXULru6XTag9Cc5exgVyS4a/AE=",
        "owner": "nix-community",
        "repo": "nixpkgs.lib",
-        "rev": "cce4521b6df014e79a7b7afc58c703ed683c916e",
+        "rev": "538697b664a64fade8ce628d01f35d1f1fd82d77",
        "type": "github"
      },
      "original": {
@ -557,11 +575,11 @@
        "nixpkgs": "nixpkgs_3"
      },
      "locked": {
-        "lastModified": 1729472750,
-        "narHash": "sha256-s93LPHi5BN7I2xSGNAFWiYb8WRsPvT1LE9ZjZBrpFlg=",
+        "lastModified": 1734570415,
+        "narHash": "sha256-kcsDNcEr4hYuDc8l+ox41FvEPpmQTV3/3hgdx3tuxHw=",
        "owner": "nix-community",
        "repo": "nixos-generators",
-        "rev": "7c60ba4bc8d6aa2ba3e5b0f6ceb9fc07bc261565",
+        "rev": "b8f266f26bb757e7aec18adeee6919db6666c4f6",
        "type": "github"
      },
      "original": {
@ -572,11 +590,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1725103162,
-        "narHash": "sha256-Ym04C5+qovuQDYL/rKWSR+WESseQBbNAe5DsXNx5trY=",
+        "lastModified": 1733212471,
+        "narHash": "sha256-M1+uCoV5igihRfcUKrr1riygbe73/dzNnzPsmaLCmpo=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "12228ff1752d7b7624a54e9c1af4b222b3c1073b",
+        "rev": "55d15ad12a74eb7d4646254e13638ad0c4128776",
        "type": "github"
      },
      "original": {
@ -634,6 +652,18 @@
        "url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
      }
    },
+    "nixpkgs-lib_4": {
+      "locked": {
+        "lastModified": 1717284937,
+        "narHash": "sha256-lIbdfCsf8LMFloheeE6N31+BMIeixqyQWbSr2vk79EQ=",
+        "type": "tarball",
+        "url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
+      }
+    },
    "nixpkgs-stable": {
      "locked": {
        "lastModified": 1720535198,
@ -650,29 +680,13 @@
        "type": "github"
      }
    },
-    "nixpkgs-stable_2": {
-      "locked": {
-        "lastModified": 1730602179,
-        "narHash": "sha256-efgLzQAWSzJuCLiCaQUCDu4NudNlHdg2NzGLX5GYaEY=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "3c2f1c4ca372622cb2f9de8016c9a0b1cbd0f37c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "release-24.05",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
    "nixpkgs-unstable": {
      "locked": {
-        "lastModified": 1730531603,
-        "narHash": "sha256-Dqg6si5CqIzm87sp57j5nTaeBbWhHFaVyG7V6L8k3lY=",
+        "lastModified": 1734424634,
+        "narHash": "sha256-cHar1vqHOOyC7f1+tVycPoWTfKIaqkoe1Q6TnKzuti4=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "7ffd9ae656aec493492b44d0ddfb28e79a1ea25d",
+        "rev": "d3c42f187194c26d9f0309a8ecc469d6c878ce33",
        "type": "github"
      },
      "original": {
@ -700,11 +714,11 @@
    },
    "nixpkgs_3": {
      "locked": {
-        "lastModified": 1729265718,
-        "narHash": "sha256-4HQI+6LsO3kpWTYuVGIzhJs1cetFcwT7quWCk/6rqeo=",
+        "lastModified": 1734435836,
+        "narHash": "sha256-kMBQ5PRiFLagltK0sH+08aiNt3zGERC2297iB6vrvlU=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "ccc0c2126893dd20963580b6478d1a10a4512185",
+        "rev": "4989a246d7a390a859852baddb1013f825435cee",
        "type": "github"
      },
      "original": {
@ -716,11 +730,11 @@
    },
    "nixpkgs_4": {
      "locked": {
-        "lastModified": 1730531603,
-        "narHash": "sha256-Dqg6si5CqIzm87sp57j5nTaeBbWhHFaVyG7V6L8k3lY=",
+        "lastModified": 1734424634,
+        "narHash": "sha256-cHar1vqHOOyC7f1+tVycPoWTfKIaqkoe1Q6TnKzuti4=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "7ffd9ae656aec493492b44d0ddfb28e79a1ea25d",
+        "rev": "d3c42f187194c26d9f0309a8ecc469d6c878ce33",
        "type": "github"
      },
      "original": {
@ -732,11 +746,11 @@
    },
    "nixpkgs_5": {
      "locked": {
-        "lastModified": 1730272153,
-        "narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
+        "lastModified": 1731763621,
+        "narHash": "sha256-ddcX4lQL0X05AYkrkV2LMFgGdRvgap7Ho8kgon3iWZk=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
+        "rev": "c69a9bffbecde46b4b939465422ddc59493d3e4d",
        "type": "github"
      },
      "original": {
@ -761,11 +775,11 @@
        "treefmt-nix": "treefmt-nix"
      },
      "locked": {
-        "lastModified": 1730569492,
-        "narHash": "sha256-NByr7l7JetL9kIrdCOcRqBu+lAkruYXETp1DMiDHNQs=",
+        "lastModified": 1734798432,
+        "narHash": "sha256-JVU+WjrRZUJnUKQ/iXP9O8eQ0L3YkqV1DpFMS4kLZog=",
        "owner": "nix-community",
        "repo": "nixvim",
-        "rev": "6f210158b03b01a1fd44bf3968165e6da80635ce",
+        "rev": "6a4b4221c4ebf1140f73f8df769e97f1828d90fa",
        "type": "github"
      },
      "original": {
@ -782,11 +796,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730648040,
-        "narHash": "sha256-ndWfCUK1LZIbNAl/IHesD0zAe09tkKqENmmlYfMIofQ=",
+        "lastModified": 1734153168,
+        "narHash": "sha256-WE8ySuyuWfSbr1YmeQPj8HIzhl6DeuH4ishFGeB5Ysw=",
        "ref": "refs/heads/main",
-        "rev": "2eb28b339ac9d3d81b3e98f000887bedef02f435",
-        "revCount": 91,
+        "rev": "662ea79b13722806f2bafec46ff8331e030a2680",
+        "revCount": 97,
        "type": "git",
        "url": "https://git.sapphic.engineer/noe/noe.sh"
      },
@ -805,11 +819,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730515563,
-        "narHash": "sha256-8lklUZRV7nwkPLF3roxzi4C2oyLydDXyAzAnDvjkOms=",
+        "lastModified": 1733773348,
+        "narHash": "sha256-Y47y+LesOCkJaLvj+dI/Oa6FAKj/T9sKVKDXLNsViPw=",
        "owner": "NuschtOS",
        "repo": "search",
-        "rev": "9e22bd742480916ff5d0ab20ca2522eaa3fa061e",
+        "rev": "3051be7f403bff1d1d380e4612f0c70675b44fc9",
        "type": "github"
      },
      "original": {
@ -885,6 +899,7 @@
        "noe-sh": "noe-sh",
        "pihole": "pihole",
        "plapkit": "plapkit",
+        "saerro": "saerro",
        "sops-nix": "sops-nix",
        "tachikoma": "tachikoma"
      }
@ -905,17 +920,37 @@
        "type": "github"
      }
    },
-    "sops-nix": {
+    "saerro": {
      "inputs": {
-        "nixpkgs": "nixpkgs_5",
-        "nixpkgs-stable": "nixpkgs-stable_2"
+        "flake-parts": "flake-parts_5",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
      },
      "locked": {
-        "lastModified": 1730605784,
-        "narHash": "sha256-1NveNAMLHbxOg0BpBMSVuZ2yW2PpDnZLbZ25wV50PMc=",
+        "lastModified": 1731561153,
+        "narHash": "sha256-KNam5CHm3OTA31j6JthkL8E5QS1TruquH6kA79Id4A0=",
+        "ref": "refs/heads/main",
+        "rev": "7332fd6fad127a92a2495b1229a017029e0ed7ee",
+        "revCount": 11,
+        "type": "git",
+        "url": "https://git.sapphic.engineer/ps2.live/saerro-go"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.sapphic.engineer/ps2.live/saerro-go"
+      }
+    },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_5"
+      },
+      "locked": {
+        "lastModified": 1734546875,
+        "narHash": "sha256-6OvJbqQ6qPpNw3CA+W8Myo5aaLhIJY/nNFDk3zMXLfM=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "e9b5eef9b51cdf966c76143e13a9476725b2f760",
+        "rev": "ed091321f4dd88afc28b5b4456e0a15bd8374b4d",
        "type": "github"
      },
      "original": {
@ -997,11 +1032,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1730321837,
-        "narHash": "sha256-vK+a09qq19QNu2MlLcvN4qcRctJbqWkX7ahgPZ/+maI=",
+        "lastModified": 1734704479,
+        "narHash": "sha256-MMi74+WckoyEWBRcg/oaGRvXC9BVVxDZNRMpL+72wBI=",
        "owner": "numtide",
        "repo": "treefmt-nix",
-        "rev": "746901bb8dba96d154b66492a29f5db0693dbfcc",
+        "rev": "65712f5af67234dad91a5a4baee986a8b62dbf8f",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@ -3,7 +3,7 @@

  inputs = {
    lix-module = {
-      url = "https://git.lix.systems/lix-project/nixos-module/archive/2.91.1.tar.gz";
+      url = "https://git.lix.systems/lix-project/nixos-module/archive/2.91.1-1.tar.gz";
      inputs.nixpkgs.follows = "nixpkgs";
    };

@ -83,6 +83,10 @@
      url = "git+https://git.sapphic.engineer/noe/plapkit";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+    saerro = {
+      url = "git+https://git.sapphic.engineer/ps2.live/saerro-go";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
  };

  nixConfig = {
@ -166,6 +170,7 @@
        nas0 = mkNixos [ ./nixos/hosts/nas0 ]; # SMB/NFS NAS
        nextcloud = mkNixos [ ./nixos/hosts/nextcloud ]; # nextcloud
        pihole = mkNixos [ ./nixos/hosts/pihole ]; # PiHole!
+        plex = mkNixos [ ./nixos/hosts/plex ]; # plex
        porcelain-doll-repair = mkNixos [ ./nixos/hosts/porcelain-doll-repair ]; # Iceshrimp+Withdrawl, porcelain.doll.repair
        ps2live = mkNixos [ ./nixos/hosts/ps2live ]; # PS2.LIVE stack + planetside stuff
        sapphic-engineer = mkNixos [ ./nixos/hosts/sapphic-engineer ]; # Akkoma, sapphic.engineer
--- a/home-manager/noe/hosts/aerial.nix
+++ b/home-manager/noe/hosts/aerial.nix
@ -20,7 +20,6 @@
    qbittorrent
    spotify
    teamspeak_client
-    signal-desktop-beta
    nicotine-plus-master
    discord
    vlc
--- a/nixos/features/fonts.nix
+++ b/nixos/features/fonts.nix
@ -3,7 +3,7 @@
  fonts = {
    packages = with pkgs; [
      atkinson-hyperlegible
-      (nerdfonts.override { fonts = [ "FiraCode" ]; })
+      nerd-fonts.fira-code
    ];

    fontDir.enable = true;
--- a/nixos/features/nas0.nix
+++ b/nixos/features/nas0.nix
@ -1,20 +1,59 @@
-{ config, pkgs, ... }: {
-  sops.secrets.smb_credentials = {
-    sopsFile = ../../secrets/default.yaml;
+{ config, pkgs, lib, ... }: let 
+  cfg = config.internal.nas0; 
+in {
+  options = {
+    internal.nas0 = {
+      useSMB = lib.mkEnableOption "use SMB to connect to nas0";
+      useNFS = lib.mkEnableOption "use NFS to connect to nas0";
+      useiSCSI = lib.mkEnableOption "use iSCSI to connect to nas0";
+        
+      mountUid = lib.mkOption {
+        type = lib.types.number;
+        default = 1000;
+        description = ''
+          UID for the mount
+        '';
+      };
+
+      mountGid = lib.mkOption {
+        type = lib.types.number;
+        default = 100;
+        description = ''
+          GID for the mount
+        '';
+      };
+    };
  };

-  fileSystems."/mnt/nas0" = {
-    device = "//nas0.hoki-porgy.ts.net/main/";
-    fsType = "cifs";
-    options = let
-      automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
-    in [
-      "${automount_opts},X-mount.mkdir,credentials=${config.sops.secrets.smb_credentials.path},uid=1000,gid=100"
+  config = lib.mkIf cfg.useSMB {
+    sops.secrets.smb_credentials = {
+      sopsFile = ../../secrets/default.yaml;
+    };
+
+    fileSystems."/mnt/nas0" = {
+      device = "//nas0.hoki-porgy.ts.net/main/";
+      fsType = "cifs";
+      options = let
+        automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
+      in [
+        "${automount_opts},X-mount.mkdir,credentials=${config.sops.secrets.smb_credentials.path},uid=${toString cfg.mountUid},gid=${toString cfg.mountGid}"
+      ];
+    };
+
+    environment.systemPackages = [
+      pkgs.cifs-utils
+      pkgs.samba
    ];
-  };
+  } // lib.mkIf cfg.useNFS {
+    fileSystems."/mnt/nas0" = {
+      device = "nas0.hoki-porgy.ts.net:/storage";
+      fsType = "nfs";
+      options = [ 
+        "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s" 
+        "X-mount.mkdir,uid=${toString cfg.mountUid},gid=${toString cfg.mountGid}"
+      ];
+    } // lib.mkIf cfg.useiSCSI {

-  environment.systemPackages = [
-    pkgs.cifs-utils
-    pkgs.samba
-  ];
+    };
+  };
 }
--- a/nixos/hosts/aerial/default.nix
+++ b/nixos/hosts/aerial/default.nix
@ -31,6 +31,8 @@
    fsType = "ext4";
  };

+  internal.nas0.useSMB = true;
+
  environment.systemPackages = with pkgs; [
    python3
  ]; 
--- a/nixos/hosts/cider/default.nix
+++ b/nixos/hosts/cider/default.nix
@ -26,4 +26,7 @@
    # useExperimentalGPUDriver = true;
    # experimentalGPUInstallMode = "replace";
  };
+
+  internal.nas0.useNFS = true;
+  internal.nas0.useSMB = false;
 }
--- a/nixos/hosts/nas0/default.nix
+++ b/nixos/hosts/nas0/default.nix
@ -1,4 +1,4 @@
-{ pkgs, ... }: {
+{ pkgs, lib, ... }: {
  imports = [
    ../../templates/proxmox-lxc.nix
    ../../server.nix
@ -108,5 +108,27 @@
    };
  };

-  networking.firewall.allowedTCPPorts = [ 6969 ];
+  fileSystems."/export/storage" = {
+    device = "/mnt/storage";
+    options = [ "bind" ];
+  };
+
+  # NFS is banned from the dollhouse due to inappropriate proxmox behavior :c
+  # services.nfs.server = {
+  #   enable = true;
+  #   exports = let
+  #     ipList = [
+  #       "10.0.0.0/8" # home net
+  #       "2600:1700:5890:ee2f::/64" # home net6
+  #       "100.64.0.0/10" # tailnet
+  #       "fd7a:115c:a1e0::/48" # tailnet6
+  #     ];
+  #     ipRule = rule: lib.strings.concatMapStrings (ip: "${ip}(${rule}) ") ipList;
+  #   in ''
+  #     /export         ${ipRule "rw,insecure,fsid=0,no_subtree_check"}
+  #     /export/storage ${ipRule "rw,insecure,nohide,no_subtree_check"}
+  #   '';
+  # };
+
+  networking.firewall.allowedTCPPorts = [ 2049 6969 ];
 }
--- a/nixos/hosts/nextcloud/.target
+++ b/nixos/hosts/nextcloud/.target
@ -1 +1 @@
-10.100.1.51
+10.100.0.84
--- a/nixos/hosts/nextcloud/default.nix
+++ b/nixos/hosts/nextcloud/default.nix
@ -3,9 +3,22 @@
    ../../templates/proxmox-lxc.nix
    ../../server.nix
    ../../features/dns-cache.nix
+    ../../features/nas0.nix
  ];

-  networking.hostName = "mumble";
+  networking.hostName = "nextcloud";
  system.stateVersion = "24.11";
  nixpkgs.hostPlatform = "x86_64-linux";
+
+  sops.secrets.nextcloud_admin_pass = {
+    sopsFile = ../../../secrets/nextcloud/default.yaml;
+  };
+
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud30;
+    hostName = "nc.noe.sh";
+    config.adminpassFile = config.sops.secrets.nextcloud_admin_pass.path;
+    # https = true;
+  };
 }
--- a/nixos/hosts/plex/.target
+++ b/nixos/hosts/plex/.target
@ -0,0 +1 @@
+10.100.0.82
--- a/nixos/hosts/plex/default.nix
+++ b/nixos/hosts/plex/default.nix
@ -0,0 +1,22 @@
+{ config, pkgs, ... }: {
+  imports = [
+    ../../templates/proxmox-lxc.nix
+    ../../features/nas0.nix
+    ../../server.nix
+  ];
+
+  networking.hostName = "plex";
+  system.stateVersion = "25.05"; 
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  services.plex = {
+    enable = true;
+    openFirewall = true;
+  };
+
+  internal.nas0 = {
+    useSMB = true;
+    mountUid = config.users.users.plex.uid;
+    mountGid = config.users.groups.plex.gid;
+  };
+}
--- a/secrets/default.yaml
+++ b/secrets/default.yaml
@ -1,5 +1,5 @@
 #ENC[AES256_GCM,data:L8kvdjZ9X/02Eg==,iv:ogyrJgDGw2Y/++iSKiTPHRP24WP4uOSrl6i/4NR29VA=,tag:4B27juuNHO+IEbFwlqENOQ==,type:comment]
-tailscale_auth_key: ENC[AES256_GCM,data:PkcBOx/O0W2GTKARebV0IZUJY/WHovuEn+W8ikv5wQN+lX7H1AiMyCVPBty6uSgllYPolD41UNbRMHguI+8=,iv:eNujfj7wC7imyy0bX7CwM+UaEFnz6qUsVnb3Hs1U9p4=,tag:TmzthPCfiLZSo4Wi+nV8ag==,type:str]
+tailscale_auth_key: ENC[AES256_GCM,data:A6K9AvhzJjuwundx5WijfVMBQbzhq2t3R/ZiEx9HaSe29611COdHkv5Y1BU1nfkK2R8tmI2I90ZZw+hIjQ==,iv:nKORqod3K8v/yAJuQCvZPzjarQrKtQhKsO06x3xy9+I=,tag:CcdLp/E537AI43KxOsg1Yw==,type:str]
 smb_credentials: ENC[AES256_GCM,data:O/e3JChdO3msxD6kS1D3l0W2hfA4/3mFtYFC1MinfUAcGUcYM920MA==,iv:Xru9Ige4/gRvJ2LWqCvnuBCnZf+E+Xu3Ba5f2eeoXzk=,tag:0+1CaTUf0Z4mXZTYbCjNpA==,type:str]
 sops:
    kms: []
@ -10,212 +10,221 @@ sops:
        - recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZN3BzNy9WYXBZOG1NVTRQ
-            Z1VhdzJqV3l1YXFsNnJOMm9SME1SWFdoU2pvCmlkb1JQTUJ1MTFsTkFnTzlLUHRs
-            WTF4dGoyRTV6bzRqdzY4enUwNVh6c3cKLS0tIGFoRHhsbVc3eW5LTG1SUGcxUUw2
-            aGU2cjA3TGRnQko4ODNDK0R6UnN4elkKF5xlebCEelDeaPLhGJLHaTcpZL+zbghh
-            cbJMi8r7It1xc4Wv3XudUh9gltPFV99w25Vbhxce1Svuuzyq4YDkbw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFUkxiTkplTTZQeEZyWGZ5
+            eklyUXhDVW8wM0o2a2tFSldmaFFFOG9ZeUZjCmxzQUhDVlNLRTk1cUVIa3U4KzI0
+            UExGT2JwWkxoK1NzRjUwUGsyUnRjYTQKLS0tIFhqZnNIVnVCMi9hZ2F2MCtaN0p1
+            dFJlWElleXhmNTI4S1ljOCthNFpKWXMKBp8E3Hrc70mQJTYBYgqHd6dfSGhXZfeI
+            s00g/0wAtY9gsMid14f2kur4udwgnD6VYQ/pbyw0bIObMrWWYA5D+g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWU0tlcWJNZ1hHeFU4NU14
-            bDYrNWxBZmw4WkRnbmVjMDAzeGVOb2N1aW00Cm5GcXZuV3ZnS0pPaHhNT2VtNjF4
-            RmRKTlY2a3lKYk9oR2xMajdQc2lMemsKLS0tIDhhdVo4b3dQbEtXYkJTbGd6ZFYr
-            bHBKYVhucm1zRURKenBSQllQRS9PcVEKgvQ7JuH49s8A9PIhZjFyHx+pf1PvS1pF
-            /5oMwSSHxl07Fb4r0ekfZMfjOZzzIutxXOvFKzgC+8m/DGAjm3s70w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArQXVrdUJRdk9sL0NqRmdj
+            ZXNvU0J2N2R3U2xtTXJRenlCNFhFQkxrVzFNCjBlQ2twZEc2SUZqODVSK1MyZXBt
+            RGp3OU1lZEhwcGhMeU4zMmtIN01ha00KLS0tIE5SckgzUXhMUThWd0VqQnNBU0d3
+            ZjA5ZTFMbElETSt2alNDODh2MXE0dHMKjOEdYnggDvcqE2XE0ebiWJqDt4qoEJ3d
+            /x6xe2a/0yCG02iXuhgrnCtDIWzJwB5uzylVomvTLQi2/er+bgy82Q==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age13c5wv623jxjja5mjz7fajg9qqwvypzgsfqrs4tmk7rpgyzu7aufs4ul9f9
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtRkRiMTdUVmlrc2hpcWdn
-            YVVKMTBUZGhEcUwwVDh4N0dQN2pWZDRrUzA4CnBiSG9PVnpGeTltUkhGNmRpZHdH
-            OEc5djFiTTIyRVJ3RDBUQzFiYmNZZzQKLS0tIEhlb3NKUzNJUDMzTVU2cVU0eUR1
-            cG9KbFN5Q3QzeW9ERmNCQjZkbHMzSUEKIrTeHztp5S+ow8LsmZmPmHMOh60wVMbS
-            ELHQXEbSs35eNYDhQYRLKVrCgUog4NTisGUebYXJ5e0pnFqdjuxcMA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaa3Zsc1krTHU5VTc4ZmFa
+            NzhqZWZTQTIvelN1d09EVWtaenNCWWhpSDJJCkpBeWsrc0IyaXBIaDNQY3JhL3ht
+            SlhhMm5jblo0UWthRFVIbTJncGVVZUkKLS0tIFFhVHdIMWFrdG9iRmhvb0lMQnVC
+            bUkzZGE3NHhQYkpkTFRJSjVhRmE5L3cKyn4cRCeE3ADu+eZKxL7ou59oLJs3QVTj
+            NaDs99W4fpINR8gTpuo90bZ7CUZfX5RFc9aSjJk8XMTFtms2CMPJjw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSZm54S2JZdkFmYmYxRERp
-            SEwxa09CWWQ4KzROTUM2QlVhZnExWmdyK3pzCkNrZ1Z3cXJybEdDK2xhcVdqL1Fp
-            RjFjeVI4dW5JSkJoTDE5Y3VETHRNbE0KLS0tIGlvcE1IRFJaSmtEVTNvSzBVWlJh
-            MHBGN2l1a29za1dQTHl4L0dlcmJ3UkUKz/WhitfswcjRT/yEs/KQXW28tCE+URUM
-            JTleqicmQMGy/77Cv98lit9hC+xKJzWhYaZW/rjh0hW5J0pQA2xZtA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNzhLaFhzQ1hvRnpHQTB6
+            d1FOMVNLTlhjLzM2U2xkbnRYS25BRmtzM1NRCkJGbzhybDV3RzhhOGVJU2dYRGZl
+            L2N2eHByY2VtQXZ6OFBZWnpEdEIzVGcKLS0tIDloaWJrM2sraElUcktNeFhLb1BU
+            dTdTSm9hN0FyZXYrS2dhV0xmNVRTWUkKUyyY0bykX43Q9je/0Jfw/zl86iK0NB6H
+            fokFJMRIfv1bBUhsdYv0q0pMNB8wtILMPFOBiDhCDROeQ5fbj9zw7w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWV2p0a1FFb3FaVnBmY2R2
-            ZENoeXlkcW1iYzVjRWxDT2pmVTB4STErSWgwClUwS2R2R2IzTEFQUmFKYkNpNUVr
-            S2FEQWc0MURkMEtseU42Rzc3ZUdWdEUKLS0tIDNjc3VaMDIxVC9pNWlnU2grN0hw
-            QStHTzU1RGN5VHJBUCtJdjdpdFd5elkKs4ycQQP4mI2W9Io35UhlJpFWqsz6mT68
-            ZfnSUiD5BlgXIZnQFGzAkbDmhGnrpbFmkemxMhMW69frcy5kVUE/5w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtT1daRmVTNkJoUlErQU1I
+            NHdOT0NJSlY4aDlQQzFoVDRobldKTVg4REZVCk1PZEsreGdwVk9KcjIvbkl6Y3dX
+            VTdrczhSb2xnTks4NHZrbkNkRTAzdDAKLS0tIHBWOXVOL1JURGxEeWh3MGR0djA3
+            QkxLamVmUlB1MTRUL3JOODdPY2d6Y2MKuk/sMD8g2Hbb5GWdjDeeZf/1n6Pv+mrf
+            CjVLryRgM5dwlGh/uTxOjMnk8bZ4CIprlMy/LvAR9k17kcQGCeLd0g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1jc6ghxfgxe3gx53xa55azxan447cfxaqfqeh5y5yzqapj7mw7ajql8kv02
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZmtBV3R6SVV4akgxTFRu
-            NHBRN21JN2Q0R3ZPdmRxbmd2THVPSFBqMEVrClM0b1Btcy9wWFNONzljTDR4UWJy
-            UDVwdis3WWR4dHFOYmFQWk15YVo5eE0KLS0tIEtBUWFZY0pkSnR1SmxBU3lGL0th
-            ZFhHNk81ZVM3TWx5YlJtdFovNGR3ZEkKrnJ3qtxQNPRrOjjtK3RNIH1fxYpGMdff
-            hYIpENJRXJEjaqVyvLfwaX0u3t4+F9y4X5yMxlYKNUS2Vk1+cetWvA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2TlhXSnVUQnZOd3lWV3Vh
+            dnNUMGxpaW1RYWNCeHI5cDVVcXFROFA0VmpZCmVZMG1oSlBhLytwQzBZL3lkQTlz
+            OXhhenkzVVZJNEczVG5RQWw3U3BKd00KLS0tIHNyNGkrcHFuRWV5Ym5IVlpBRkp4
+            d3UvTnVZK3BoWVlXU3BvVnBQdFhLaGMKXm4ckG/2t2DJdrFFw8vxVRB4SPTZnOGZ
+            P7pwtZZtYHvih+/iUCe3FW1Ra5TUsrt1In8oxqEa6KRzvQA1UGm0hg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1faccfe85637hme39xyzgmvjn6ku9c4aapfmpfc35hswj5emhnedssrg2cq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUeERXT0FSWS95YWhtcmQx
-            UVpuZlpnaTRqTGYyTDduN0RrS0RuRTNiRndrCmdhMllXTW1yaGdoVFFMVmVUMmgz
-            NjRsem94K3ZrclVxd0p1dEl1VWRGTG8KLS0tIGdBM0dNM0l6cWpGU2RDUUQ0VFMx
-            N1dleW1EcVBFK25NOEc4VTJranBScFkKCYSMPRXGivEbjMPMJ5OtS+bEvg5h7WbB
-            eYg4KkDVXMdaEfSvzUPYVYDhSXSwWSUYM+ofCPXeJVHZgD6EsB65Lw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVXg1QU5SbnZGdmNBa3dE
+            OVdZUUhSeWtuUVpDU2xJWTF1MituY3BPRUFRCmRIOVI2QXIxOUtUQ0NWK0J3NUIz
+            SzR5Y0orRVY5Ti8rQWYySkNMSnFwajQKLS0tIDNOejd5L0JUZ3J2TXdXR2hQWk8w
+            OEtYRE5vM2FMNVBydFo2b29nQkZYdk0KG4S+AU8oMnl83JiE5KwGhDJ5Zgkaktvw
+            iVqBNBa9vwULHHNigINhU2Pt9j52leVNK0pjQOwp7R6kzEdL1k1lXw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1wc3czlazkfxphsq6exxxkdpma4lrv7n3v3fvel9l5u96dlljn4fslh666p
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6aXYxYThHb0RIa2VtOFpu
-            aUhpWFFtUXdHRjFYRFZiNGNkanREZytLYkJnCk14TUlHblBzWFQrZHd0WjlLWmNq
-            U2JZQXJVYjNJSnljRmNvYUErRk8yUXcKLS0tIHpFTG1oQVpBTlBCcGMzNDlLVnl2
-            N1NNYVVsRHR0MVUrUW92TTg3dzczUjAKQi9ZvtuD4tKlAiLy3T885wsijOF+8GsL
-            gr9IL0khwarhNy+K+/pF5qcduK3faITx8pmDqLABjSJdUGJlOjRhnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3OERmQWpqa3ZzTkpzd1RQ
+            VlNXWlhQQ0JYTWZhaklzMHpDajZjdmR0ZFNzCklDb2ZNQzJwZFlwM0dIZFB4RFB3
+            ZDI4YlRlLzloalkrcFdtTDJoZ2Q4SmcKLS0tIDhCd0RtdENyQzFIQ0lkQTREU3ZK
+            U0U4UjFtbkxsNU5MWFp5aGt4M3FPN2cKgaJohLT1pcnyFz//BrW0Q34oyfOzKGX9
+            Zfmhdcbp74rsAvQvLO8tofCABaAuw/Uv5+CdWj6NgIyUmzVHaEXYAg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age18net4rsvyx84d9jjh64rgqsru3njwc438qt3993kn865dx9weaqq0rzkrh
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBET0lTSjJDWGZKeXJCaHZP
-            V0F6cjhtL0MrSUVqNXhLd1RJWnJacXkxNzNFCmd4d3UrRm1HYmx0RlpOcFkwa0sy
-            aDFNM25qMk9uQ1V6M1creEZYbDRHaU0KLS0tIE04RW4xemltbDl2a2Z2R2F3QkJD
-            ZVR6ZStsVjgvSXBySEVsZ3ByMzV3NDQKrWI5T7Nlj15Iv+3Ru0P3NGypRIRrPVAU
-            r4oCwCR8QlMV/SXRVzJL27FMc6gnoVZ4lKylPC9QBl9aHng0D39O0Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsWFZxeGVXVXVTL1dmajZI
+            N0x1QUJqNi80YnZWWEtRTlFaTUFWUDFyYURNCmhyWFNtTEVUcXZ3SUxSOVV0S2to
+            L1hPZ2RLazFZcnNtbUFMOFRGeFFGNTgKLS0tIEtnejdacVc1ZGk2UHo2SzdhMmMz
+            U21Ba1doYlBnOHNGTktzSnhuR1pwdjQK8bt6ZcGvI25zXenww5hCZm6L9itPiVon
+            N6pOJ0uCNLJROS+1QG/yYGAoddm9xBvkmMq1l3lwA3LK56adsb5iGA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1mc6eyvnqt4ztmqdzt08zaher2ts37ypgzuh049v3cgv9j0rje96q5rm56k
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBMzRXZlBqdGI3bUI1QjZW
-            WFRSOU9lNkxrV0dEVmo4WkxpVnBhYjFPWlMwCmloY2xEaitoakhuUWxWbDFjS3F4
-            c291MDFIKzJmMlRxTW0yVXRDN1JIaTgKLS0tICt1REV2V0lublJneWdaT3NSM3Fn
-            NUhtcGZZbmU1RjA4T0ZxR1dPcDhZM3cKZQVwJi5r4cBnihAwSqTZSESF6foX1Xmw
-            qKr8kv7sSo1zBUFA/0BYOp9lsdRrPOiBvF3oeWFWbLS9flQaebVojg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueG1CTnRUdlFpdnVNZGR0
+            UE5FQTUyRFhnbEtqWHBzS010UU1ld0ZYcmpjCnFaZjE5SWVRM3hid3pyai8xaFI1
+            SStLOUpDT050U05SeVlRVG1DU0o1UHcKLS0tIGZJK2ZRZUttWWlTVGFHQm1mc3Y3
+            aHgrT2pKTGVyUDNwM3VQZnk0OTBqMWcKjdEyJJBThhFosaN64Q6aAB7Bwnlx/9yy
+            7Mu5ueG6AsTAAU5nYKwsp5+lIWHiAg8sVXlrUQOW1cZ7PR/DI+h0cQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1h7yp3psl5zyze8sl6lld6ksv6fcmul9z8mjwc4k78mwnys58c3ls9mgfdx
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsNndQQW5mODZVYmYyeXQ3
-            c0x1VW5DcVI5aWdSTjYyMG5NVFZlZDZ2S1R3Cjk1VVdjQ0FUcWRCd1pBRmllbENq
-            VDRaUklVbHRNc0JNeWFFOFByWE04Qk0KLS0tIG5MNWJpT0ZRL05DQ2lKUXBZaTFD
-            V0s0c3VVcVR5YnNTOWhvUkJXY085QkkK8uuwnV17Q0C75c4xT2Te3mUxvjrgIVJn
-            CZ6XI18CIXBLA1zC2Um1C/WL/HNcFUr9xEwmZVclCz0r47zE4uwyfg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVnRaV0FZUlc1UnhMdnhT
+            T1BMbGpxWHNDM2cyei9mT0d3WWpSWHVaK1M4CmNSOFJjT3FneE1kbERneitXUm1N
+            eFhqYkQreVZtQ29FdkxMTVdFNm4reEkKLS0tIGw3S3dmRUNjTnVpZXgwSnVjbnhv
+            Y0VLU3ZCcGFEbWNycVl5Y2cxU3hsdXMKmNytNjac2AZiIqBMuBShlCYvBxxwBful
+            xoOj4IXA/JzJ6ko/mYRnMcKntD5AmIDgpzrbtOdD7hoXffBMyQJeWg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1qy9tvzlgek7fq4nl52e05ad6pyvglrtaxwjet9gr0fzq85z7cv9s6uxzkt
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dW9VTGp0Ukh0WWo3cHhY
-            VU8vL3BacFIxdEJUNzFRUDh0RFNXRStreUZnCnlzRFdMUU9xekdCM0JzeVBqM2hz
-            TjBxeU5sYU9oSDJITEQ3MWRIN2xWT1UKLS0tIG1QN24zeUZQNWhGS0syenFXNktD
-            QXBhbUk1VUIzS25USVlycUk2MXhnVGMKRWvUkKgUSZwGybD8ltYZTKT/cIcyOtBu
-            ghIGE1cDP2CYp4GeMBW4AyM8U4PHkLjI72teJtKZYE37oVJAcN3dlQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbWp0aFgrWXZyQlErQzdT
+            OUt6YmN1QWVYRDN1Q1Y3bUxKWFpxeGVtVVc4CjJUeUI2YkRoU2xGVUZvTThva3ZM
+            eGpFdG12bWRwOFJrMmZKazhMMHpwRlEKLS0tIGsvZG5SSThpaDB3QUNtSE11ZmxF
+            aU8yU2pMVSthTUEyQmNLY0t4c3pqYVkKcjoYhYEQyCJtCLxI7I9qy0TmDXVtj9MC
+            VhS5jxqtRUMZoUIjrChLMEj8AE+ITQasfmARFcPA2kxEUzdbjaGzog==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1kh4c0dmn809xzcf7ntpjm26h2xh4ljaq09r9n5s0tsjjpr55ff3qqmkuca
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNFJTM2FUcFlkQjE0OFZZ
-            M3k4ZU5HcjZjbG9Db2pzUEtxcjZzbGtKZVVBCkxJalZTYlZNT1prKzFrTTkvdk1G
-            SW9zRzNWcmFHVlMrMFlmQU9ISlZiR0kKLS0tIEo5V1dPbXFrdFpBMWpKNW5PVVVD
-            ZHpaQUd5czgwTHBRS3drbW1FcDZ3aFkKuIIHdY/LFFKny+5SSeIbtbH/L8J3xGhA
-            z+8qfMvbyyIKznBAliL2Mt4bvUQe4zXNnhhcWbXDkuH/f1JsiiXXvQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUnliOXFDa09UZVNvNDkw
+            RVovdEIxMEYxV3l6MWh2UXFBenh0QzRqTml3Cm0rT2hQS001RUErOGVNTitDY2tD
+            Z3BiQVR5R0N3SDgvMFk0Z0pOQVk5OUEKLS0tIFZZNDlRSUJGd2JIVUlkazVaeE5u
+            a0lCMVV0b3hCb2tVMU5hT21Yekw4V3MKVaQjkezytN8PqQtLxFwZCa8RNtH5uVrH
+            099CK1tVurK7wWq/cLNqkNB/W03YgVeOM9JLDIcJy81XUQ5ih4O5fw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1h9ty40uxgznh7s2d7l3cx74lkylpgvs8lknkvkjvqyy5kn5kfc8qz0zc4c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UTJ4anMxcHZrcFFkQjY4
-            bnh2L0svdmlXNUJlQ1JYb1Bpc1JORGk3dFg0CkhvNy9EU3FrTDhuSmNnenF1Qmor
-            VGsrVmhvM0NSRGIyZmZrZ2ovNzFRSDAKLS0tIHlteWNVTFludlVOUTRqN29UNVNz
-            dkxEdGJLOWlLQ2pzUmc2M09WVUw4c3MKB3IHt2nBvPBOf/m4dgh09RNMzkY9/RdB
-            2w0ZGrDYLpBaNXV47USF1jNiPPIu804lGPbZoDIbPcmNSYGZZxxp4w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTW42ckdERnY5N2VRU2pZ
+            TEI5M3lBbnpNOVFzeFptR05rWDlUMkJPaGswCkJ2V3hLNHJmeFkvbFkwZVJUa0Yy
+            bHBvS1IrdCtpYWF4Q0pGZElBdUNRL1kKLS0tICtDSlphanltS3ZwM2ZISEdIVW1K
+            c2pBL1FkRE44TjhMZEpCWG9XYjFQOEUKRGlsjnE4rJcOGpRLix6nxCXk7VHrx2vE
+            yYFu3NXFZsJ7Pts7g4EdvVFrLSqs+o3+2N47eBpDQHIjmN2Zkwde7w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age18xjdme8vc657l8n7fzpn7twshprmtpc8p6usn257ajw0vftd8p8qxwwywn
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTN1dFZElQc0RUTU5qdnFJ
-            OE15d1hubndnN0VIak9LK0Z5RXppLzBQaEZ3ClpLZUZZWmlXUmJBRjFPNnhJZEhq
-            Sk1qdjg0VXBlaDl5Z0FJTEhTdmlFaEUKLS0tIFlqVmRDRzBXK3JzSEd0SEpJMlFQ
-            cGt5L2c5RVNyc0JBVHhob3FGSHN1NFkKpFlLIG44/mYnWRk13eHIGYTekbNSpgvA
-            /7+kj0f9D479pEmKIrSqntyOhehJ6H3AXRwVBInrpdBvQdkDV2TYAw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZEFodXBiYXdZbFJSYTY4
+            VFZRbmFoZ0xuc0RiNURIOWZXVXhHYWZtZ2t3Cm9Od0k4Z05wRzc2b1hoYWh0UnBZ
+            VnB6cy9oZXZtNkY4UEZQaXQvL3FhWlEKLS0tIHNWTDZZbXlUb2JMS2NtVFZta1U1
+            ZjR1QTNvcFh1UDdwSmJtWEtEVmszb1UKeAmP2Bt9+/yPuFUJm/LFRjB3x9ESIpui
+            xM0xqmzt6Vxmh6jTYo2oeJIIk0by5e00cNQN7V3btk4nIhqHmH+sDg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12f24j7fcq46cjuqjftv5pyffpunyhqj98ypqf729z89xzunzryts5d8kl0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRUNvcjUvcHYrZU4yNnU4
-            S3BOVVFjZGJORU9ZUmpGWDNjM0lIaDczUndjCno1WGxld1YySzhsU3E4cWNBd2l3
-            ZDZBRGVOZ1U0c3ViMUZGbXNSTUI2a0kKLS0tIERQZTlDVjZ3NE9NanFnVDRDY2Y5
-            eTRzQkxEMzFnSTl0R05vNHBvYmQxYTAKKR3+j4ais+KoN2c4jKS+YG/zdV8opbKc
-            erRea8O3eyQ9gFUI60d6IsNcVpzs8CuBB2uivB/lCbuDoL4xzNAA5w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1alBNWG8vQWZyUTBWVXZ2
+            Y3RBY0NRU0t0MWppMkhuRllHV2VwbndPM1hZCk5QWkIxU2VxdzNvRWJNVmZtMU91
+            U3lIMDZpL1paYlNwUG40MmNtS0t6aU0KLS0tIHhicjN5czdwcG9tSGFObFlvMXEz
+            a2wwQXVXZUhpbGU4NDhSVll4MDh2NWcKxlc1+ZSsjj9Zpn5Xs1cu3oHlPlKrlRDT
+            Nn85NByqb2IXNyZLL4GqUmf3F6PlDHsKT3nebUsZK2F2q+cUSV68yg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1jc4a52cukf6d94tt2meq8tnt084rhtdd93hwzjhzecc70rmvvapqtdng8v
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxamt0cDd6NGZmVWJ3ZU9m
-            eDMxekxVZkhXaVFKWTdUd00zR3c4RGdZNlZvCjI4RzNjcEpuVWJ2MXE4VnVRcTJG
-            aHB1UlZMeHBmdTBhUVBNNkdPTjU0QkEKLS0tIFJaNnVnSURSSHlPRkVycS90Y1ZN
-            am5ZMjlHL2xoMldhaTlHdURDMU5UaXMKfjeaus9zRPjJW/pbtJwioBLvkM34vpfC
-            8UCgGQHoo0nu1pQ8//Gu5AoB7a2vtpUqlWNZWGbFLlvF2GelmeQ06w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSFQ3SU9FZC9na0pGN3lO
+            eXNPREU0RUN6N0hqNmx6ME56aDVHRVZyeUZzCmNRQXRkWmVGaDZhcUhJSE82M2ZE
+            YWtVaTlEUk1QR2xtYjZTUUw2SW9XbEUKLS0tIDVobFNJUDBYbDFvT0hTdUtXbmRF
+            bmpYTFh0cXd3ZnhDd1RXVkgzZkY3a1EKQhBjMQWzOMsMOMRX/var2gXv43Wp9gzu
+            gmj8kcZx7mxH9+aXr54XwQ7HDXCoYfio/xwbnCmRjilYye72VCbjpA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1s4hzwj982zk04kr7c5u0vlemkzalv72wtkttkgzt64xv8a4r25zqxra6u0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6V0hFMjJmR2ZtZHU2YlFW
-            TzJxUG1SQjlNNTZKRXphbFFuWDJXS1BaVkdZCjgrQWNCUHYzZU03OGNURThxTDQ4
-            RDVSVHRLb3VKUG1pelZtYVJCR28zeW8KLS0tIGZ3c2R5Yk1WbGxMbktaWXV2aGhO
-            TXkrbkNGZ2h5VjdNMUs4ZURyUVBsTEEKw0ZHrPkymTC7gUTftM7kHA1YZQggKjM1
-            oRJbxJbGdmOhKmRADKa3YIziGmtvFgNZhZ9lsQb4/F1beGOUA5Gn2w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQmx1ZnNLUHVYWEVZQjBm
+            UkMxSnpoWmZSZ3VDZUZLWDN4NTRkbWtjTW1rCmhRZEJwK1ZTaTE1cE45NzBHMkpC
+            MUpsTUNXYXVHY0h2V3gxNE1qNUwxYUEKLS0tIDNuV2hvbEo1QkRacGpKMTJ1M3pm
+            QTdFYmMwTmtQR0x3RnAxMDVoWWdqb1kKs/Qw22vK0vAKprB29SDY9ByQTLOGe27I
+            +hwoz2HsqSuQWVocWWea6jprxtewXfHuPyGi4HreyEMIkYBWwg8M2w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age14cnx8ttzqndcsdz4xvmx07cvms6val5aanrf9qsg4j888hudufxqz9nm5p
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlR2hhTWVodG04eWhWWkdQ
-            S3NXM2xkYUtTMGdiNnJvcitoZ1dRUVNXK0RFCnFWdmFFSDhzdGg1cnZ4aXBkNTgx
-            V2VjQzRZNTIxeXZ1YnppeTdJZTNwUDgKLS0tICtmOHdhS2RYV1UySzFWeEU5RHhm
-            SklEVEZDbENYeHdXZDZ4VGZ0Ty9PaDgKNZt+CsKWbpoJvfpyY4Ll1zzUeV++8v7W
-            x3Dd5ZX+tr0N/e9L6HaoKVFgPaxGYijrZnzmK+tkOX5ImwKOxOrbkg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMTRDSkM2Q0U5MHVEZFZW
+            d1RGZmpXeUxvS2ZnY1loOGF5WXZJaHllaGdBCitBT01sVENseURDRGVCZVptcUY4
+            TGdiWm02c0w5U3lDWXZNbklwNFdEb0EKLS0tIEd2ODVhR2VwdG1MS3h0eGRrQlZR
+            NG1Xd0I5eTZocFh5bnVSTmc4SlIzUUEKvvSvT3vr5ynBVfKCNIcLJ1T0OcPkyAUJ
+            HlWvGuZX/4YOTvccl2viUj6Te5LStTSlMt3G0OmTBkHa/IrOoetjMg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cc80558u3f8pdwrmhev8264c0h9dkkm59sy40j7zms97qzxg0ffqza9en0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRmhGK1dZcVIyb1JZd0JW
-            aVJHMjYrN3JOTWRmWkxkOWJuZzU0RGRFbmtRCnllVUwvc0hJbys4MS9EQ0puTmtj
-            eVBFL2hObXY5aCtwMjJCQWswTmtCZ2sKLS0tIGZIUm9ZN1ZCNGVTd005dVByZGJy
-            VjIyeVhrWGZERlJUZThEek1yMHVGT0UKYq5IJ/0L1icfv7x/rmtdPSeZOCFoK3WS
-            aieE+Di+GljYWaukmT+oL0Sz2ro8f3PdiPIUlz1LTRpMZa4G4RLzvw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWlsS3Q5aXloSmJNUGFj
+            d0RLOVhPd0hhWmlIT0JDNnROaHFtV2dTbTNBCk00dGRPNTVvelNPMmJkUnJhdS8v
+            S21ZU0szRmIvamRIU01SUEZCYUJkWG8KLS0tIHZQU1FvMkw0MHV6UDBFcmRlUEJx
+            QjI5d0NMSHhrbm9LVGZyV0dFZWJGaWsKyhm7eDf667wyRhD9ZW3W2M6wbyUfyQ1F
+            BF7yVdGBbZ4XMY4GCK8laBCoCWShDIQZW7PXYd8NxNr71sKlX44jCA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqZGtIeFRFSFgxOHJpTCsz
-            Rk55aDZqVDI5c3F5RHRPd0RHK2lrYXpaY1R3CmowV1gyUlU3T3QrL0NSK3hGZStH
-            dnJ4Y1dCVG9KRTdkelpBS0tRN3BrT2MKLS0tIGNHRjNEcUpobDhQcDEvcVNDMVFR
-            NjY1dHd5dGd6MzJpS1ZBOEtlMzQyRXMKcnQnLEv9sGFnRlde4Y2cEPXKtNwZYJSL
-            lj9ScEQarqXOc0gwkGPjH9lXpiJM3tGtsZ7cmymdkTbXXWUv/kEKvw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5dWxWMzVyYXFuK0lYNXNU
+            czhiU3E0czcxbGQ0ZUgwTUhPRkRVTkNKUkMwCkhDTXFtd3NBY3pQNDMvSTIvS1V5
+            VittbUwxTWRDbE01OXRvRUlSdTJBZXcKLS0tIGlRZHJpKzNaVGNGRlZyeHFtZDht
+            WDQra0hVdXAzVDJ3ZGhuWkN2bXhZbzgKRtdnbEhlJSULCB3Wj2xeyrEr6Zb3QnBH
+            ux1RL0FhOStbz/hgvTDw09OcPSbyP6O1mae2Y2X/fgz9FIIdAvZ0Vg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1nsuxsnf64mcfgnggy5ehuqk3egp0rea3ldzst0f66full7ap7ews5eg46s
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcFNtcDc5dStxUFltYlBl
-            a1pxdHBFaGc2dnEzazhzYUxyMDhyVVhmajNNCndDdnpiMVNEWUdpa2dTaE5jdDlU
-            aGFrZkc0Zlh5aEFiVDdBS1AxNEsrckUKLS0tIDhwVFhUTzNmWWpMM2pWQVlJZEVG
-            bU03Y01vWGxVNVFaKzl5L01jeG9ZNGMKijKMj/TwNN09F/bHl6lGIRYEnXN/EMYn
-            AbI4UnnChp3X/63MpBey44YYMp0OX2c4nJU7ZTXN4x3xE0/F7XS6yw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3RGtJMEo0clVmMVV0Vk4z
+            UVRNaUVUeEkwSkZVOTFDTzk4ejhnYzQ0SWprCkQyM21rcTZqcld2UlliZUxQK3dR
+            YXZaRGdiRzNvRThxQW43WUUrdlZ3SGMKLS0tIDQraHVtd0MzWVJXNWNNK28vSVhp
+            V2xRWk9VSzA3Z1R6SHJPSmpCMzJ2eDQKYw2Ef4JVrDHPB9A8T8y4SR/6+hqO4heU
+            YFxI+EmSLvDo/DG/169nbcM4L2bT2qOwPhNfxvlVAhCHUuxIt5gI0g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age13xddcc3njv29sxzfdx2rjctaejhsxr5rephruga7vjrvjclcapuqnwx52t
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1bC9pR0p0M2dJNFNNazRm
-            SkIxbXNjeVUxSUJwc3pkZml5ZzNPZVFwUlJVClgxRDlyYm55ZjFCcTZsYWlhZGRo
-            eFZBQnlaMitWZk13WVh1eGJ1RFl6dVkKLS0tIDJFa3g4dlZ2R1YrQy9Md0I3VXdZ
-            dFNleEJCL0dva2s5NjNIK3FBN0FiZ0kKg0BYxxDULQRIYbgP8ihBS+caRo3eHux5
-            5lrVX45YSYYFDPJZJV2ahV+qJglR1x1Ixvm7GaBolC91/MsVd9r6Og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGd0VtbWRiOXJBTER6Wm40
+            TndKOUtvZGYzZ2JDYktDcGI5RVl5WnBtT2hBCjc2YzZna0ZDa1pDbklyUW85dm9U
+            OUJ4VVB1aXF3TGo5UVNKcU5KSUtJTzgKLS0tIFhPREI1OFpBdXBuUnloZVB6S25M
+            MlR6ZlpaanQ0dlZrbHJSZlcxSzRhaEUKKDqR/Qn1hXCi0cKLiZyg0SIpQF4w0FFv
+            ygK84/GuAoF5aN69LLsyWEzbHGr5JPDTDE0bag7iYujqXHbrj+kB0g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-07-16T07:23:47Z"
-    mac: ENC[AES256_GCM,data:H9dYoE7E2ql/HSjCJeNXLxSNE/OhM1cd2EaVEqaPal8QuR8ebUWzFjuypg/OV0lqoBEnKZNA6rGYPG18dCXP1pC915EzwWOV1mC+lxaHIch+E969dExKXVgvWC7rKceGEBqsSYzh4U8/0Jm5VHta0UvsKu/NYQQ0SDaP9uMKmvA=,iv:smJEzPzVupcu8V83FMje+le9PtCmgQXUb7dFG1LqtMY=,tag:hiSNRJLSdwKDstimN1V0JA==,type:str]
+        - recipient: age16jzuvkchnm53wfl4q0yg93zmg7jmj6rpud79sa6wuljved74hd6qvlw66w
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjd2dFTmh2aklUT0V0Rm93
+            ME12NTVVVE94S0dpYUVyc29pWXBhZUVOb2gwClhmbjQyblJyem9PSkp6eEdkSm4x
+            UldPWW0vMUZTVDRFVGVxV2tBa1BmRFEKLS0tIDV0TGtKVUlPUFpGUnRTUGRCMk9z
+            eVA2eitrZUh0blFjTmt2YVFoQVgzbGsKZL8hF3wMu7g9Jwzi7T0gecRWH1xgbdn1
+            UlC4BX9GEb8/IDIhkC/Vei/pvGxDzChlRcnDaWrjdnWg85waZry/Nw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-13T18:55:18Z"
+    mac: ENC[AES256_GCM,data:OHb3aHxUOap6fRDuuzHvhJdtI6wGvAhXOBE6JAeVLyUBFMbl6MD9EiqQg+zOIbLR//mP1kPqF/hBM9RAdk2MC0aBEObWAoMYfpaDjoAXnzORt53CKaxFfWR98PYA6RMemXYQ6zRygRs5dNAQ19TThSCmYKBElWfIIHwxe5YADe0=,iv:rR40yETA9vMVx+d4ikrl+AW1Bw2/kifSw8b96B8Qzdw=,tag:kemWOq4YiniAerPXkYaj4Q==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
-    version: 3.9.0
+    version: 3.9.1
--- a/secrets/nextcloud/default.yaml
+++ b/secrets/nextcloud/default.yaml
@ -0,0 +1,48 @@
+nextcloud_admin_pass: ENC[AES256_GCM,data:2mXUcSOdnTpB5msVzPKqzdtk4NE+mjvu0IbIvqpgBb0=,iv:GjHibB6dfdSTo7tYdc/OX0AjzZfWU/yHYzbIb5jwFNg=,tag:wofXzREyHX+a9STbbuu9Qw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKcmZMS3VjZXdiR05nWmJh
+            aC90eitBVThNV0haUlh6YUI5Nm51STl6T3lJCkx6T0o2bndEYU10cDVVc1dGV3NV
+            S0RoYTZudDBOeDNJNFE3Qm1tc0hHZVUKLS0tIGxyK1Q4YVBieDJ1U3NuRDFWMmdv
+            UzI1V2dRenVqMXJNckU2MWxBL2ozNVUKXwls2JwzuWhxgvVay4cgNTeHBeW95L0F
+            TnAwKEL800RNwgit834jhb7vfO0SubuhWPy8FETs9YcCoAJgGLQrbg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWSsxSHdMbUlPMGQyNnBD
+            WHBMeTBCdXh1RG9CZi82UDhSdWczZjZwR3hBCkl5bjI5MTl4Y0R1QmZ0aDVzbkRY
+            WWNpOGhFWHNxa3o1c0JicjJOcFpCak0KLS0tIHVwdDg5WDd5di9PNE9aaFhTOXVM
+            VGQrKzlkZmtYUUN5YUNyU2txSFFFUGMKxBf0S9X+KvTfTvn8lLY1xRTgXGRStwPp
+            BKVX7kIlJpSXmYKfSn58nGvXnDtsu2VK0ILEIPkr/6Sy9o+rZa580Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13c5wv623jxjja5mjz7fajg9qqwvypzgsfqrs4tmk7rpgyzu7aufs4ul9f9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRjEwNG9leVhsOU5jdmtW
+            ZjZXcmtEb00rY3RuVnUwSzlnSEJuaEE4aFVVCmRFY0xlN0xQQ01GZnFCeklFSS9k
+            RVprVUMwWTE4NGFxUWR6MmszUzBWU0UKLS0tIGhNVTI3NzFmbGhPcTNYRllTWHNt
+            Mzc3dFc1MEE0MzZBWXJTVzcyMVVnZ1UKJtGEDCxCzinAj9jDoyXzdHPBj95/2hGz
+            3rz/xOUS0wkcF71o37FswSwvm4ZCCiMYCCALWzdo+hRD4VRMP6aFGA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxMjd4M1RyMDFPbVU2a1E0
+            THRnd0VnSWlQckNKVld0YVloYVVlcjQxcVVJCnJQdVIwVExOUUlLa3NldE1oZCtv
+            Sk92NlJ1VW9NK2JjTXZyNnJpY2d2RGcKLS0tIGk2SXVrMFhTUmhNMGhxbUVUbGdP
+            UU94Q0lsb1QyYWZETFYveFJ1Umgzd3cKF8DWIKqGWyDgBQYwfsAgixZIFWjPMce1
+            Xg2kB5Tis0/65vEO6XRuYTXqLfa/sBqGYguuQsH3HBdLyhQaYvSsJw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-22T04:42:44Z"
+    mac: ENC[AES256_GCM,data:jbMfCGTupKvy2/O/C/fUIOrsaoYa/NUxljfXYIGsHGGL6c82B2BpmqdI2bbBSVVfvnVYPpkzPfiU2kq2XgNL93h+SBGmS6EdrFyj41qXS/KgWaUiqexMyYj1DXvR4rPwcqPNi4Y0aU+JoMvnyg3grthdoybRUa34TeTJTNjiiTI=,iv:HgPOkeDGizlyyr44Qjc14aer3i+1fli9NBB/PZ/NBuk=,tag:F7k4WAXuQKeFoyI5SQYxsA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.2