From 1db9253ae6a42a083254bffc476298b1225ecd71 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sat, 26 Aug 2023 07:18:27 +0300
Subject: [PATCH] fra1-a

---
 data.nix                                      |   8 ++
 flake.nix                                     |  31 +++++++
 hosts/fra1-a/configuration.nix                |  79 ++++++++++++++++++
 modules/base/boot/default.nix                 |  10 ++-
 secrets.nix                                   |   3 +-
 secrets/grafana.jakstys.lt/oidc.age           |  25 +++---
 secrets/headscale/oidc_client_secret2.age     |  26 +++---
 secrets/hel1-a/borgbackup/password.age        |  25 +++---
 secrets/hel1-a/zfs-passphrase.age             |  26 +++---
 secrets/letsencrypt/account.key.age           | Bin 3917 -> 3916 bytes
 secrets/motiejus_passwd_hash.age              | Bin 1028 -> 1111 bytes
 secrets/postfix_sasl_passwd.age               |  35 ++++----
 secrets/root_passwd_hash.age                  |  36 ++++----
 secrets/synapse/jakstys_lt_signing_key.age    | Bin 676 -> 678 bytes
 secrets/synapse/macaroon_secret_key.age       | Bin 634 -> 741 bytes
 .../synapse/registration_shared_secret.age    |  26 +++---
 secrets/vno1-oh2/borgbackup/password.age      |  25 +++---
 secrets/vno1-oh2/zfs-passphrase.age           |  26 +++---
 18 files changed, 255 insertions(+), 126 deletions(-)
 create mode 100644 hosts/fra1-a/configuration.nix

diff --git a/data.nix b/data.nix
index 5400a31..f028ffb 100644
--- a/data.nix
+++ b/data.nix
@@ -48,6 +48,12 @@ rec {
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBudUFFEBpUVdr26vLJup8Hk6wj1iDbOPPQnJbv6GUGC";
       jakstIP = "100.89.176.2";
     };
+    "fra1-a.servers.jakst" = rec {
+      extraHostNames = ["fra1-a.jakstys.lt" publicIP jakstIP];
+      publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFj9Ktw9SZQlHe/Pl5MI7PRUcCyTgZgZ0SsvWUmO0wBM";
+      publicIP = "168.119.184.134";
+      jakstIP = "100.89.176.5";
+    };
     "hel1-a.servers.jakst" = rec {
       extraHostNames = ["hel1-a.jakstys.lt" publicIP jakstIP];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6Wd2lKrpP2Gqul10obMo2dc1xKaaLv0I4FAnfIaFKu";
@@ -82,6 +88,7 @@ rec {
 
   jakstysLTZone = let
     hel1a = hosts."hel1-a.servers.jakst".publicIP;
+    fra1a = hosts."hel1-a.servers.jakst".publicIP;
     vno1 = hosts."vno1-oh2.servers.jakst".publicIP;
   in ''
     $ORIGIN jakstys.lt.
@@ -99,6 +106,7 @@ rec {
     dl                               A     ${vno1}
     fwmine                           A     ${hel1a}
     hel1-a                           A     ${hel1a}
+    fra1-a                           A     ${fra1a}
     vno1                             A     ${vno1}
 
     @                               MX     10 aspmx.l.google.com.
diff --git a/flake.nix b/flake.nix
index 3883944..202a384 100644
--- a/flake.nix
+++ b/flake.nix
@@ -118,6 +118,25 @@
         specialArgs = {inherit myData;} // inputs;
       };
 
+      nixosConfigurations.fra1-a = nixpkgs.lib.nixosSystem {
+        modules = [
+          ./hosts/fra1-a/configuration.nix
+
+          ./modules
+
+          agenix.nixosModules.default
+          home-manager.nixosModules.home-manager
+
+          {
+            age.secrets.motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
+            age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
+            age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
+          }
+        ];
+
+        specialArgs = {inherit myData;} // inputs;
+      };
+
       deploy.nodes.hel1-a = {
         hostname = myData.hosts."hel1-a.servers.jakst".jakstIP;
         profiles = {
@@ -154,6 +173,18 @@
         };
       };
 
+      deploy.nodes.fra1-a = {
+        hostname = myData.hosts."fra1-a.servers.jakst".jakstIP;
+        profiles = {
+          system = {
+            sshUser = "motiejus";
+            path =
+              deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.fra1-a;
+            user = "root";
+          };
+        };
+      };
+
       checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy) deploy-rs.lib;
     }
     // flake-utils.lib.eachDefaultSystem (system: let
diff --git a/hosts/fra1-a/configuration.nix b/hosts/fra1-a/configuration.nix
new file mode 100644
index 0000000..7f2aafd
--- /dev/null
+++ b/hosts/fra1-a/configuration.nix
@@ -0,0 +1,79 @@
+{
+  config,
+  pkgs,
+  myData,
+  modulesPath,
+  ...
+}: {
+  imports = [(modulesPath + "/profiles/qemu-guest.nix")];
+
+  zfs-root = {
+    boot = {
+      enable = true;
+      devNodes = "/dev/disk/by-id/";
+      bootDevices = ["scsi-0QEMU_QEMU_HARDDISK_36151096"];
+      forceNoDev2305 = true;
+      immutable = false;
+      availableKernelModules = ["xhci_pci" "virtio_pci" "virtio_scsi" "usbhid" "sr_mod" "virtio_gpu"];
+      removableEfi = true;
+      kernelParams = ["console=tty"];
+      sshUnlock = {
+        enable = true;
+        authorizedKeys =
+          (builtins.attrValues myData.people_pubkeys)
+          ++ [
+            myData.hosts."hel1-a.servers.jakst".publicKey
+            myData.hosts."vno1-oh2.servers.jakst".publicKey
+          ];
+      };
+    };
+  };
+
+  mj = {
+    stateVersion = "23.05";
+    timeZone = "UTC";
+    base = {
+      users.passwd = {
+        root.passwordFile = config.age.secrets.root-passwd-hash.path;
+        motiejus.passwordFile = config.age.secrets.motiejus-passwd-hash.path;
+      };
+      unitstatus = {
+        enable = true;
+        email = "motiejus+alerts@jakstys.lt";
+      };
+    };
+
+    services = {
+      node_exporter.enable = true;
+
+      postfix = {
+        enable = true;
+        saslPasswdPath = config.age.secrets.sasl-passwd.path;
+      };
+
+      deployerbot = {
+        follower = {
+          enable = true;
+          uidgid = myData.uidgid.updaterbot-deployee;
+          publicKey = myData.hosts."vno1-oh2.servers.jakst".publicKey;
+        };
+      };
+    };
+  };
+
+  services.tailscale.enable = true;
+
+  networking = {
+    hostId = "bed6fa0b";
+    hostName = "fra1-a";
+    domain = "servers.jakst";
+    useDHCP = true;
+    firewall = {
+      allowedUDPPorts = [];
+      allowedTCPPorts = [22];
+      checkReversePath = "loose"; # for tailscale
+    };
+  };
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+}
diff --git a/modules/base/boot/default.nix b/modules/base/boot/default.nix
index d07d4e0..71e45cd 100644
--- a/modules/base/boot/default.nix
+++ b/modules/base/boot/default.nix
@@ -26,6 +26,11 @@ in {
       description = "Specify boot devices";
       type = types.nonEmptyListOf types.str;
     };
+    forceNoDev2305 = mkOption {
+      description = "https://github.com/NixOS/nixpkgs/issues/222491";
+      type = types.bool;
+      default = false;
+    };
     availableKernelModules = mkOption {
       type = types.nonEmptyListOf types.str;
       default = ["uas" "nvme" "ahci"];
@@ -130,7 +135,10 @@ in {
           generationsDir.copyKernels = true;
           grub = {
             enable = true;
-            devices = map (diskName: cfg.devNodes + diskName) cfg.bootDevices;
+            devices =
+              if cfg.forceNoDev2305
+              then ["nodev"]
+              else map (diskName: cfg.devNodes + diskName) cfg.bootDevices;
             efiInstallAsRemovable = cfg.removableEfi;
             copyKernels = true;
             efiSupport = true;
diff --git a/secrets.nix b/secrets.nix
index 0d5573c..b6f9952 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -5,9 +5,10 @@ let
   motiejus = [motiejus_yk1 motiejus_yk2 motiejus_bk1];
 
   hel1-a = (import ./data.nix).hosts."hel1-a.servers.jakst".publicKey;
+  fra1-a = (import ./data.nix).hosts."fra1-a.servers.jakst".publicKey;
   vno1-oh2 = (import ./data.nix).hosts."vno1-oh2.servers.jakst".publicKey;
   vno1-rp3b = (import ./data.nix).hosts."vno1-rp3b.servers.jakst".publicKey;
-  systems = [hel1-a vno1-oh2 vno1-rp3b];
+  systems = [hel1-a fra1-a vno1-oh2 vno1-rp3b];
 
   mk = auth: keyNames:
     builtins.listToAttrs (
diff --git a/secrets/grafana.jakstys.lt/oidc.age b/secrets/grafana.jakstys.lt/oidc.age
index ba4a4d6..31e02d5 100644
--- a/secrets/grafana.jakstys.lt/oidc.age
+++ b/secrets/grafana.jakstys.lt/oidc.age
@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg FIcNGRpq57RyXSx7ggde3ix79ijt7EHnU8LhMRrXiGk
-feCa7Xln/wTFxSfBt1wW9nJDUunp1ng01kRR4fX3wtk
--> X25519 9a/Z7fQMlb2Ossnx6OQfOEn+Sc7EkjH1qvRnAUNO3nI
-gfpPM7RauKm2NnOfER+zJvJjaVEZOmXjxkbWKFGOUGw
--> piv-p256 +y2G/w A4oYywSwobBVMGs3RTxmvnh7TQV1FYlNYrUVVqEjFUFa
-qVGtilxTsOOkYaSQ8c8Io4JCqxuJSHB8szEEWc9HWNU
--> piv-p256 jNqd3A AsVFA1wUy811MHNgMoCLvd3ETXbd8XxSr3uCgqGh7414
-d366KUCPHzScDv4A+9DkUcqRgfnpzoHwKXPTI6RM1Pc
--> pKOSD-grease jSg. !!V_P>| +K ~E
-JklMXPMAv8vHnxBr/F2g4tAKmDoe0ub/G45MSxmG5E8/HtE
---- zzyjEbFgNDFzw+NQaFyCJlqmkuYubPu2VKnkR2RHIcc
-�ܥ���lJ�NT��s�ۍ�-LL�H���|�C�b��J;�k��JQ4������`���U�g1��ur��{[�_Q�rR�[�=1
\ No newline at end of file
+-> ssh-ed25519 gJrHQg AwfB7w4hVyiTnbbFhZp/TYjwKXh4u1vV4tW7fbRSUD8
+sVSnkjJUZM9sWy7xXy8CaxzzXe0z0ZX4hhKwpnSgaGA
+-> X25519 ZferPUdGyYwe9xe0oDZtzsioOSTO1VOZO/6cFn9oIjg
+4jwGyF6Qhdu1mTLbjtP5rT2poLC5tBaZqwufRIeZ17I
+-> piv-p256 +y2G/w Ai8ntDMBKe2o8AoIpy3bt4zaVGq4PivLBqvUncQ3M6bf
+1XQ1uOpipPR15fWWo5uhNHxlewJDXwIdq3axCIBn1Ns
+-> piv-p256 jNqd3A An1OrvEft3fnhdpfgLYkr2mzJAQhFgXEkrhcMJNzH6u9
+iGA+p7inVs/5L0SMrZXWeKQ7fozTMyBxXTSZLbZCHDM
+-> np%0L/z(-grease nX]
+y39sQdw8Mk3unpOkDXVIyFGlznFUecLzsRTBo1BPjwEAbZH+ppzBceiB8XYJvsGZ
++Zo
+--- gsMsI9JUPzLqFZVh1Zq+jtOsm+D0c2k6POXnXc9nV6E
+Y_�H����f7��/�/[)>�=�S������3��\����+��r���`�ƷtV݊�1��
���6ʍ�l��{�
ȿ���7
\ No newline at end of file
diff --git a/secrets/headscale/oidc_client_secret2.age b/secrets/headscale/oidc_client_secret2.age
index 9015ad3..87766e6 100644
--- a/secrets/headscale/oidc_client_secret2.age
+++ b/secrets/headscale/oidc_client_secret2.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg /05rQ0bweVNFPoI6a7w4CMk8iKdObSnrK5mzU+OtAls
-fEO5kDvRF049alg3AMxTwJ+KiFoh+o/6gRYxFUEdIRI
--> X25519 rGiyMZnRwYcvcoFkBXfwxDy71/F7RC4xL2ILY/3KAHE
-9thFbnnBvOJsopicp366uU3bJGJ2Tu4ETkhKFRWFU6A
--> piv-p256 +y2G/w An1oipHxaTcuwMJtW2C+J7fiE4rafB19fCxouyW6k8Ml
-/JsGUuNknM1K9PEfrwOPr2r07sChEgy80GFytvH+1Tw
--> piv-p256 jNqd3A A77/PWu+DQbUNVjv6CeDB98nSZPojVXlSmk8Ed8cW0Ya
-WPseJycaWCvC15+RvjJSpfyMR2kB8+jK4JIsE6fz2ws
--> +WA-grease Z[ q+*
-p2PdS7tDHpBr3/2EQbUXqFs5H9hAkgvMy2hiYJR5gGgLjXXFdteza2DHAP4knXfZ
-iBXIy54
---- H4QPWaIOL3GIPmPeRirGJ3W9zqjryG/cb4f+tMdJ8do
-OU�"D1�s+��& ����^�)ĎI]J)"��|�b�a��2��dcRﰅ )s�x�s*���s�¦�iH��L�em�m1r�2
\ No newline at end of file
+-> ssh-ed25519 gJrHQg wew/aQ8cC6zokYR5ysGTKl6Hlk5+FkMHGm9tPlnOBHc
+3Gv9k+wQ/1+J6N0SwYkPBQzIY30dUm9vRT70pQE3kRM
+-> X25519 v+zcnSwoOYbvuJ2lJqR8omrYWHLuTOWGIeIHEnPOCWY
+VlUlnwWtlAze04CIjgxU5Hxhg/aKEza9FaB59yTwPh8
+-> piv-p256 +y2G/w Axb188Nt8Hgg1ld9G9WRmua32quiozY137fOJTJ3U5o2
+Czw71F+TZK+xrqlZWLbT4ZXRhOjTqxMWbHa47BPxnSQ
+-> piv-p256 jNqd3A ApkWxW24HNtvrh9FTHoTdL5Slg+egLPM8B4SsCasg6H2
+EQsZGRWQeHZ+MyNH1JLnp7Ivaep8ndGdEaHvCs58reg
+-> ':zBd6BO-grease k )9bGRs +`I+}e=y 1+2f
+EtDLRcOK7FZPcIMAPvdG3Lm/gcZ6BhxVDpwWGaS/5Xbz/l/vCvlxpBKZhDJbLO2v
+pRrCHgwzZ1F4beoEsoUMbetgu+RWeuN20PoRqYcF/bqaEw
+--- Y44uyHqYhyONGZwhugfiL15SYPwNa1Hnc0uWTC/K47I
+�%�%ʹ1٠�%�����s����y,Z?����|�5������`~���
rUpTE�
�
�^~�ĩ��͟�q���$q����m
\ No newline at end of file
diff --git a/secrets/hel1-a/borgbackup/password.age b/secrets/hel1-a/borgbackup/password.age
index bbbc6d7..ce03de9 100644
--- a/secrets/hel1-a/borgbackup/password.age
+++ b/secrets/hel1-a/borgbackup/password.age
@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg uZsTUwEu/YMai2awdIq/BQFWY3abjsVwkMEmdXnGdRE
-Qb2875RKIevWlZLFI6p8nzYHJZWWBEaneJN3O3av9Nk
--> X25519 w4QdhZ6T83yEtmMmHYxuM6OzvfxKYnDRSrFNnT/DUEU
-0/wyhwb9l+apT4f3yLycoNdc8KAGD7jN01MP+rIQSQw
--> piv-p256 +y2G/w A9zY1wzeRZns4KLJw9atZ3yeht6C3hn6ZX5/U6/gKsZj
-WDgCACCvTzWvrGEnyxH/5m8IYF2L+V0Oju+Bpc207oA
--> piv-p256 jNqd3A Aup30eQTR+vsmv1cax857STTmDcLZt/LYGr04A1b+gvN
-EfrHZNnE0kVYs5pFPjMEJBGGvQWQMCduBYcLimR/5uM
--> 8J-grease
-Ke8pF2bIDFLnG7x3WE0nVjs0/b7uiUCWsKkiMGfmGWweEPKp12WzW0I3nbY0W+RG
-mkg2tLP/e3f3Bg1ojHGLAxviPNarGMLHggHfqA
---- OpZ8utdErw6Y+ft54h+M8U7RqSpiMrVLmF5CeVgsOXA
-��0�S���=PF��%�)�t��H�GP��WD��^Q�A##e%��A~��UA>���
\ No newline at end of file
+-> ssh-ed25519 vDjOfg qE1m5wfe6EDznGY1+wSOpjQUKqtTxIDdchhCI9k5XDk
+QYY1XoNgPSKG7FviZ/eKd1JRnzgxqJ1Qk1N4Mef2VgU
+-> X25519 w7kjkHTAfCa/BBR9UIt5Ot5J3E3/5eeEq5UYzeI5kyA
+muOd5sJ7ltp+Qoa/4u2JK6nDKDznOGIdXdW97EJd5kw
+-> piv-p256 +y2G/w AgL2mVamTDtUpdh0aP1uEh50rHRIuKd+2lwx+bJ+lzXJ
+YHrtfcMdVwVRaDlO2w4mRFl/a9B7EUzCChVRk7dZvFk
+-> piv-p256 jNqd3A Al5XgSsapW+fByHbnzuHrf4EOigaCPcddad5uT8IamSw
+7opGoEQkyNwmQpiKg2Cv1iD+QoJciE/ge6cfvY1CGj4
+-> +-grease *T {@-1U qK wp
+A+n+ZsIvo09wWd52WR+ALEPHTcFm5Eg
+--- LJnZrv1AE60TX+PQl1cGayCh4Y337S/Kb48FgTgNDuI
+�k�q|ۘ[�h���]>�u�1�j"�q�o�fΆo��a�c��>�.ȴ��AЮ'�
\ No newline at end of file
diff --git a/secrets/hel1-a/zfs-passphrase.age b/secrets/hel1-a/zfs-passphrase.age
index 5bd3c7c..a44935a 100644
--- a/secrets/hel1-a/zfs-passphrase.age
+++ b/secrets/hel1-a/zfs-passphrase.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg FWA1lK+TeNBOpcRkyTlg1RR1PWcq998uQzNJBJDjIUE
-5Nu5BQE1qjJ9xIqFGVMUCyx/QyHO2r4Ix0oVggUdj/M
--> X25519 5s5tQfEM12E80k9ijUtHJ3reh/eBySGKy8dsdtOuT28
-U3MheuBJ2M9qtBTAE5Vlbx/1sOrr2/MgJo65Sxv9Vs8
--> piv-p256 +y2G/w A24qVT5zeyEx0ZnsoBDUJuT4yNttPQZSuy0cvP5dBuXp
-+ofdTddNA2DULyNCh1G/Sz+AcvIGXjoiecN8Lc5MQuE
--> piv-p256 jNqd3A ApCoXMRihIMxiMRCMyfHWlFCli4RWxi+B4OZbb5rXFBh
-YZkECC647AFW13wUw0//jsoQUoBcjzk/FDVzGdZ8bEU
--> 3<n-grease sr"G g UjuP/CP @Ybu;j
-si4K9TTzPCNThYW9SGoqmrMmbyfwDntvCGNBKNI4+Cs/RNdEbjqSU1XL6h9SzoD4
-EYE6TbotpitFkZQqO6z0gNtPppLm0blqnw
---- lgz2xoEoMtAMctBQus6bHdf5JOtem281WvCTgnJPsyI
-S�+���7{����C�XCc��5r�U�\�&۫g�ҁ�N�^Mrܽ>�G�N�™#Y*�6��wɹ��
\ No newline at end of file
+-> ssh-ed25519 gJrHQg I/eHDEwq5k+VUaw7K9NZMi8QAJB9oRYh++h+MmIwHgI
+aNJrHNG344QJ3Gu5aOglIApuJ/81q+zwzPdn8vxlz1U
+-> X25519 OacNJ2QUbzyCLA14VaFV7iDbvnvxcHGhrbb3W+U9n2o
+gI/gTlOG1Bf6VtnywvbK/sBw7qifccYN//ewzAiqOXg
+-> piv-p256 +y2G/w AzTSWUxWmA2PfCuSHwnvvpptSbuXlJUvcb06wC2NUR9I
+rQk5jOiOaAUY2K/3cOU85Ybc2CQE9D2w7OKEtjQjpJg
+-> piv-p256 jNqd3A AtbxvFxcX2p9rI4nGtO6I+fQpcjOE/VY4zfM0HPZMyuN
+3WzZpLoD7EGUnhVYWtu+RUA6hQlYMZht5I/7XfuiREE
+-> 3;W'_6-grease QPW Lo bMh
+H7kK9Mv1FebKetEpM7OCh88zHZosr2O+knlIUySwcOLyuYuG7YKX7kn6EewLOECe
+k08/HrRocSDsM+xf7TLS6daHq+DtdTM8u18Kt+l8spdIzPdpRBqs9DSp
+--- 4MS301cyK8LfYfi8+rypmOAl5cf8a+BB5JFm6uP4aX0
+�U�̯Neƭ�0���p�r�}3f����\¹ꈞ�q��l|��"Ԣ��ȏ�+f!z��8F���7�
\ No newline at end of file
diff --git a/secrets/letsencrypt/account.key.age b/secrets/letsencrypt/account.key.age
index 6253de38a0e6be5c6c416277c44dec19ff77be13..f043fb0f1c700efaa7368b63699deed9919882ea 100644
GIT binary patch
delta 3893
zcmX>rcSdf4PJMw-h>wp+Mp=cqOSW%irGZgMqNjgOU}bQ4YMOUhT8f8Ju7#1YX{K+6
zD_41LX@<9Dns#7VX+>FvYqpb@c7?fjxwDaFk!6K`V30+CUs0Y>R6$uzD3`9CLWGg2
zsiCDphN*FJnun`%etvp(Xh?uXg|EJ2a*%UiiocOxRDH5zSc!glnR97Um5Y%pSAK+L
zRaJ6nVP$H0aFUl%s$ocFkylEtPkOSmezK>NqrO2zno(k&cTs>R$clo@GTj0rQ!@qa
zN+Wmuas|iSVha~<lO#VU_jJ=>7lVp`tf>4XUxP}c%*a$<=K`a&@B%lJLa*e^tSGLC
zyx<V^q|nIHu<{5O*IX|j*Sso!mppg>kg}{o_gpVS&%EM-luCE^(6Z#ofsCT{Ihko5
zAwH3*B@tEH0r^Q$mX1-585w>Rh2a$zg}x;z*=1EG1qF_N21TJ<23dxtX-364eqk1c
zm7!5#nIVoAjv+aD5&8OVNhPTv#zB?I1+F0;?nWjckC^%CrWd6q7N;ttDQFp6TABr#
z>MNL8x@mHm1X@&jrDR$L71pOadzTlOCRc@qg_I?G8yJWCx<wcSS>z^q1eKQ-r1^&x
zhDGJNx&;}gYKI0odsIex<rk%!a#dCs6y*m*7Fh%(`Bs&AW`#Jpm3a6iTZSb%W@h`k
z`x^ykM1&d^hnGa<n+8@TrdAdw8*%CC>MA5xX89Urnx%N=I(xdMMb=j)8hS;Tq`8`D
zN9KkGBnKJ>y84708@OqgggJ6$W!(9Hm+>cKl%^ApfaBFKn^jHrPTZGcuxa|-{3XAH
zSI5ZMwX3@u@d?L0_jz~vzi3SAkHbPI)t779C+-w{P*i(vx@gKdm+fm7mc~@NT-)Br
zb7ro^l0%-ks`DZ&(@%WZP#95ve_zw2d%}Tsj-E$tw123vC2_2Jc(+_W%i8*Oa`63?
zQ{`eeEZLMYZOPZdLN$GrH!ZG9e*KeMs9upd<=LH%RfhQm)t<Kx*EU><);d_G&vWaK
zfkU&;0mZhMnp(-?nZLt1c@FyhG`Qh;<-pBV@tbR>8?SkwyD)H;TakDc`}yi6d+YCo
z{|?&aegE3QS#I6z+Ma%59k=KIYn&=Cny`Ue-SztB!0o0VHphROv_Lk9vua{s`c#d&
z$g%(l{ZkuFH)*V?%TT&kulF}n>zE0{YR~X#a?LLlW=A+Ko#Wv0D)hqb&w9`P{$BPm
zXoH-vujJ+VGHJ)#j{X;Bym2c>>8in1*3g{~>jS2rE;dqRn-#;zkd?8!?!Wg}){8F-
z;!~F>UDpsOIntEQvHiVO-E<)>hR+i?ZifGeU%X{{Q<P!{f1!^`TDC%gm+qw-&kjh>
zmjCg#uksLs{0%4mfG0&cYeheG-)H@P?n=h|WsSG;p0RB3)_r+G!~aY=i?qlY`7-OW
z$4Z9z63X>veTQ_;85kGJbF?u1eZ1#O%eP4_tP6vluAS?&G4&$zk}#WHODA1jWhS?#
z+2n(@$jg0;-p|>&)LHqfTgO}Bw7~csOp`eeu6$E(>s{RB%jY99Q+E5IpjmfcE}kPB
zbN$2_t3#9T=Q1kVUf(|JR*R#D(u7~W?sjLA`;%vNa2oQTcdCDR<RFL9g=m&N^3tsh
z;&YT0W`1ZC-)IsXqtq9Ev)$aYf3ZO9su||7@Av)cKIFOol$NIXx;gXjoD`X=^7?nm
z=d(vmLij?q&a|4W^MpfnahJibfHc+4kJoepr*&+<QqS`E%l6$Te*1l!ncBGLx#^N$
z0*8e!Yljt0+`68Z%j)Zr=K4ol)z`h>dO^cgK;{DbO1?#lJ)Cl6LK;QW+m>+dFs#V-
z3f-8r$hT~rlcB$+^w~~XQQ^g&eajU7oMS8&^ZxwzSk~)3>ND#Xx7v$4&0m`S>wte(
zsJ<reB17M{`AMg?Ih&kWQ2+04a#Y66IiEVBI__Smh|gOUI+JPZt8ml5o4zI1-_NzQ
zzJL1Tw<B%wLDN|R9<#m`-J`I6YFI|t+85z2W*2_%7B>=jE6^nLq)=G6|JBW<J609W
zTbw$x&9tkd>!9K4BfX0cTl)Gq^BVJ-R&Lp{`DoqQP14&lnmd}lFa7lNwwmen_fw}D
zF-6VZV*U2~vSXnIvpzV5d|fC~e%$Wb1oKJtcN#VyUs_mpyVh*g^8f{l3E^{Yp4F0Q
z*Pr(H<nv@}8$VCOP%S~e?3YjMKk<a^nD}L5=1J|D?b%0nT6z9B>TmO5Dvw;X#r|d2
zzW?B15BpiVgP*Is{gL)G&i{c0iy8wCro>vLth8KUcxk)h@dGZ7+M+jGMfw6B`(1av
z^!A(H(vS5)F>BXYr*SQ^D~$7sw{u^eZu`@NPxEE)KZZjBfvsE3J8wANTK&Lx(UN<%
zDOKW0o{#4|Dw%!g{r9MTtvTy;-kC&2zp&VJ!eZZ^$A^kjrgCiCs=nY2gWq+HcL!4X
zACzn}_6|EL-G0zvl49ajogc+Uxj*^6K22r+WzRWT`E<<v1NCY~0R~EMuixkJ^=~(4
zu=yC?^XgU7t7{6v+>N|}5icKK;=8b^c0%;Q0B!FZGd|z9_x)_r=CQ?5P%dS0)!wO-
z=CaJvE@HRuo#TD_?~0jK3=J0_PoLU!$j0^Hx$H#`C(h59!hLY+uLa?IV|XW4WXA2B
zb@E<RoBO24-J;SPek88DS)Vj3e^vUYo}DLnW!^o1zID2p<k^+!@gnS*FRbPrmhO^z
zXyU9ZaI5wH%4Frox%(1br#>=ToK^G1f9iJqXwehhM{60F^28^{UOL4!SI%$i_wDi<
zW<Pr8zwssiR$lr3|4B28KC0BO{b8E?lHt;WWy<M6e(5G}53~KgY<424v(CP!ep)==
z`XcT!8~Ys^Q<UP@POr)M%)iUFcU6`6s!a=moPV5Uw7a@nvGzy3oGQ;6={bAX-_E-|
zQ_uS%FXzEOodMIO-l!?c?{p~GwI_f1{OvvG{z~-r{#E|0Jh?=|V7s!&!vzMfBjc-z
za{nYa-`ixP;In+854-fbgvYZsPq?#Y!v8z<Pd<CqZB=@+UGx63Eegk1*=GLTUUxob
z?>x?LTDQfm7OlU)Ymj{Q-apxAa*3`V<YwhbN;pMi967Z5Q=r#Z9&4FdGb4F?)<3a&
zoK#-%J#bpAZu)tf&QEM7f0-Xz=c6_4<@;q(cLOgTdK+^5n9s}BmGScuu7&Pf^QM5O
z@~2w<LD{$UO9dQfmcRcw#dS?+$D>7auK9Z}zZN7WG{tu92C;W(mOE`1+VH-V)@@1^
zk4>3)LU~U~Qg_JBy{e6p_E~HiB2jiFhj%~yEqFUu?UKsH?*d!=WZN!0<DM38!Mv<l
z_Uno}8+dOmT+MoCQsl-b-;^Dq4K}gA56S#JL50<2>ct4NZH)EVzkl6LJdo?`pWzvO
zb=mW_=j+TJ-)_s=_}nmgyVhhI<~P5ECN>m#w|aC>tCHDfTzo=w$7#onaYpa_9Lp?!
zJg+r)6ri|x{{JI<zWL#TE#?_HUzap0s@$l(9sIB5m5H@}vVH5{?Ke12axBpPwW0K#
z_nFm>QD5J7&Ut&L;#uoHkNS*w&x~CYA6ZSBu{z_|``3X9xh<*_I2o@M9Glzmed@2-
z?IyX^_4g#o-tYg&9D7VQ>yiAvs)jOeuX}dUN2YVC=*|tD&SYQnGf)26D*cwMiSk=t
zemq-ioEwnFE8U~2!Fc<hmag!QePxeMEE10qd%TKcy5A#t=Jbi5oa*)Ntrd{3|F5!8
z<>7{m<ExHZRJ~r}k;8xR%9Cpi`ssK0mR-4hT~jZGv9bG^Ysf10<*u?5iZo4CFRWXj
zEq%*KXq)R!w}ag=LbEk%EtwNFx^HC5tge2uW$vekE1o*OpX=4bW%Kk5%Zs$4iEPt#
zBKsrW>8n}K+A*Vc(Xo@SJ{Y`wx_c_yZ${7hw|dVv?s>xD8IW1@D)+1F$wgZyMLu1_
zdZKVv3IAh1&EQql%hC;7J{B9R+?#t=W7B@!19dOneHFgHBfhB8ruf83cHIZICPx!u
zoiG1z+bs6qDxzcBFU}qQ+8@)uEw!J=-5FUH*sHgx?EUXA&gB9A_vd>gU)y+tU5%@L
z$3wHFC*|sS+<&@H6r3P@xn_<_$AYQ*Z%*Fa{cn|=M|As?mtT(GOSgR`D(%BH*T`#k
z<bt@*o8OojWd3ycP?US(=eH-JL23VvJioX_G9XX=+LdE+)%j92lSF$x)nwjstPmBk
zoUW=X)|p^2G3o5dWp>IYM~&`^%iL~UzutJpj^v`=h1&&l^Xvb|Y+LxHbaGL(Ta&%^
z!*E>@@0AkD%-8w!ib6MXew?{&=c(9qhw{lb4xull7pI&$@K8L@{ry4bNgX{$PjX!8
z>^=0MQ8)ay%iC{WCv^h-*4Et?__wQ_DW<(rzw-R{cRl-`M~jMP70!P1N%lg+tuuCg
zQ~Vhw_}=~;_ke%Dqw=Qo`rnLxTq`rf&xFOXDQD^!Uu}wD%G)NphI6LGlet<mD)*>;
z(Aae|dFjlrYtq*?TLiH9?DUfAJ!JA}+Q+w2B@5qmzVX?oDDb)A$?a{Q1N%LEZ_0(4
zIUPCjq<7zflx;cFH(g&QJhS-ais&fGzSyN=%fCLA+OhikPTlDuEv38Lcsg&?@2#zK
z^xu=`%lGiIn3l{5*T$W723kyMe?r<GpL}v{sarn3benkYOy9Zly_vs?rTyn`l({9=
zmD=Q*pRnm%Y3z?RN$xMDRiZj|U&>Ct@oM?oipu*o?z%az>J~{V9X{%`xRL*iD$iD)
zlh4=O;5(jfn9qG`kL|&{iPL=YLvzmgWz=7ac$hwS!>>g%{VU$B%G;N0scC)5`r~S@
z)*EwLlXrb!mHl@^TFGR7mbNuFlYrjNBEL;D8$B<nwTl|hb(j{zKk2tlU+epf$EzO)
z*3Dg$leYEWq<r-|VQ2ccJzuuH^W}qIYi6EbYjmVJ%WAq2(`q$G&6ovORoCwQoL(p<
zTzLNekNSpv=TDmm1~F=KHa?BoQgwHZmYN!~!~BGsY9-ANH*b(TzsWSdT1xiGwNon|
zrim&YQ#TYjv^V}lY|Q_~J##j9=bbMxSv$qhC_2bPRMh6+{cTStfA79`X`c)$TUVU;
z3){W%Q>0d`<3Dhw@z>-Uzm;p}m>%qK37o6(HhYtf!od>@>l0UgS$k=TzAAsI_R>2=
z*<19>L=0y)ADjK+TurmV)!eBCe*y$g%{k9Fr_pTpRffCv>;{t`7br3oe*4~FF=4I0
z$I;8_=R4cYOMl-u>;HM8n%bVNkF+OEl#g<ocs4v_%k~$N$=|!3gikAP<m7jiJ=J2U
X^Qbpizjm?rhF6c1Lex(&v9tmJe)cHG

delta 3894
zcmX>jcUEqKPJL-Wo}qb?zmu7dn`Nm>vQMUIfJth8pn0&RuZLN9R;5Q-X=YkkRd80e
zE0?~ryLXz4yP<hSx__vlWqPHBahi*7dRe|(SyrKMQA%j8ub*pXm1TBrD3`9CLWGg2
zsiCEUQIum~SW13apoy<vQ9({dctns(cyUBpSYn`OSbe#pp?;20N>z46a*0bQS6HZJ
zW}tJnQB<%`n14xOd1iLGM}DPWgo(M4uUTPKo?nQCQASX%Q(<vF$clo@GTj0rQ!@qa
zN+Wmuas@|ilPVv-f?}Usi{z?Mzl!9dva;a9aK{iYH}kYyccWm#FcW<v=hVsyqYN%D
z;|OE*(y~nFD$iuka3_5i$B^6#<H!*A<eZ9h=g8Eo<lN#&XA|F~yyWc3fsCT{*#V{|
z<vCHV<ylEiQIS68C1D1^L1ihvmAT&8QD!MAS*3-hKH3I3;hxD{S(b_BB~H#|&KcqE
z`e80<F3H9Po`uOFdCuC-UIrEsu1P_GM&Xqf`GsJQIQi<P7o{c^rz!;I2NcD5Dbz%A
zd1rZ)SyTo38RkUh7Nj|v)SDLM=DN8QSL7L1hUS?$`-i0G`IZ*B<@uKxS(<74g+*Cb
zhIy1H83Y=+7rS_QWpIUBx)@{!S|q1rIa>N;nw6SIhJ*$iny2ZPI)`be8x`l7=j4_Z
zgk~H2m>8u+6oq=|>$`e7W+j$JxpL|1>ME2L`Bmvh`dheVoA{b|)~5$1=lE(n8kU&{
zd1h7y1{g*~xVn2eS)^wdm?v|+TP^YQklMZ-zfw*wl`RNm-s0{O`O1j*@x;B;ghH0Y
zi4~`pCq`-8+q`s0RIT5;JH}{>-8{DAGaVP%ne;h+ynXGzcl*Mh+f_^*{ya<2xV7!{
zm&FBDU8@TXTkg-`{b*NFn_J)Ee)pv1`e3!7c?*M!7bhC8_{L!EZniUKX6K>swx{+=
zUu3g(_uq*O+4gbU<9@%=!^uo$@hK*ccYYO!bog+WjqO&>%SGJ%y{)^IuZ5~H%dd3V
zb@Y_S&xe7gmdjZVuh^FUIXKjJ!<wn;`=2r!lyqI`<M5rLKdnHMb!pg}rw@zd>i<7_
zeRR@EKg(BIznf3b{d>P^*|gpHt}9(Phs}!BY{>9Udih|<tDEv#3#z!pm;!q0j<HA<
z8CidtVcv0i`|C>W^A+!916fvnVL9t*C(bnaK=7*&#i$c+7W&)%W;DE~^Y22oA7egS
z>_^T+Wm;*<v7bKh_9S=xIrqQ!Q|IfPn=j+)`~A2tTZv~p*k|0Fq{`5HY{f;-Iy<Qc
zulKCDq!7PVOT~`$%|wApmH0%hrJcQNH%J~1)%YZx?RC!JP(%On-8+IlE&i5xC+Wh(
zA0O<FNvro?4a>dEFK_ejR@=m6ZH7BP?lGyBJg7e?HD~whe=^=u7hlbMoM#nub>S?g
z)P1WDA2zH1ANR0aZ@J#FR&Iq!Y~OX}tvdFp#O#lzbn<nJ*SZqs8i9K(%k&Lr#jK3T
zR@8a(Dl^i1uiFgYOHw62Z9MixWzKugAL#GzoE6}!QgL?ERf$<ln!R3jF>~9}8iS3W
zUa&aa{&2aS@U(TtH&--^oxJL~K1{6fc#XL0&+X4I`S{$ms#nr>K2%~i$v*nl#Z;3A
z**xAX&L5sjZ$B2;Ip_Scu;mF;?=U*PGd>(8a{2a#4<|#V-#(hQdh)YhDYKj#LW9&z
z_-2LO7xOyNF>CLAOLtpiGj7xSp?@z0`U{x)d7Hm!u)p(rb@R2#X4i8j*-_i(NB#=i
zuJo?+IA{Cvv`vL>{1g4^^Ow)reo*+g=b8DttQKWoNY>8}_c$Nics=ga?$4{geDIsL
zr}CEFt~Wi?&vL&D5?WL$-B)q;V$_`%nRh29ee3f*)*rXv<v;&Of3u{`>PMfd-z_)y
zd)HQH7XEJ86RlO^wby!12q=H%JpP`mG`#s>;RJ=Vx8Hv=N#8U%;od@(YplHWiZ>rD
zNy;^UKUsL2VSi;|ZHN7e#3oUZ&5A#FCS38`$Gxez*tb3YMSgEea4Qp=Zt%*2pY>V7
z!pZ5uJvU{o-f`Bw^3ywaY2BP%`=%D&`Ez{fjFX%b*b5wPvPlIf@J%n1zqIA@g@S8;
z7hG()zA!+lI{n$4{cqP9-Rb$=_CR7!Z9)C2Gru1z+<bZO)bZoxobH=fm415ta+QCa
z(SpTIzUyB}eX}i}IqxEGnBB@Zf|nFOEqUUucpyGj!d3j}fdJ3B)6!PFHah*)I``!y
zueN7wvjjJaY*jyy6EMqlUi-7JzfbS33oPKAzr}e;TDkI7@x46-V$;hTcz?Y7{cn@V
zv-%f`9N+4Xt2akHy;d`+e5SYlweX+8IuCcU-_1I>T4%qG*22mElLEVbi-|^6x+uOs
zqL7hpR^Zj@eBno$4e#4m9TN^qa57A_T=`1fBw}Lj#yED)EgHWq`#;GxOlXh1)bqC1
zxvbe<>WWQ3`geQV0~<rwb8hl#Ki@b<d4j~=ma?#Q?hB&%>No1V*UFq2vU=ie>CV#v
zg^LcpiTv^AFn_O+k^ncy%loU(ZvC^;=HSKTh2A0Ec5l|ji_P<uIQ~UbLpAjEI_0a)
z`z+31pU#>4xp(P*<(tmcule47dB0wJ=88uev-q~Wau83LTorQR>h$~7k=YMABKxzF
zCY&pn;n%-9ls#ip=8>%AdWpAY=_}Uj1UidO2oEp}5!@tNziHB~%^iZa@?SX;9#3{U
zu;#4fF4dZMr)rNMlze|m#>3Q0(#|bfiE-{(wUxVDLr=`p)ttFz$z_8DUQbufHnvo-
zx-P$>e#zlx@6!#TeM|Q&%{sC^)aU!gUxkdJuTSs3lzg<iRU+{GwH0e>t9HoM3$0Jm
z<~*_f75}GGRu76+p8ac)cd_wQ!1XHSClk#KejWYu?9hJ?hvey5wW}YkX?ZHd-`Q4D
z98+>-4sV~}UcdOVvy#fiOO9tB3+_&4Io-j-@_8@!>qs#dwoGw{YvxSK_xX1gaiu+Q
zw-lCL-(Ix$>#UQ%w5D3Bsj}qMUVE9JaIs!vzSN?>O63PN%OiUnuAf@4dj8y)l$3xO
zuZyl4Bu4U1b;_^ZxZmuDQqp&Ueb?qc-)36TXd5X1t3`bK0nfLZzTGih#cQRRd~{|w
zZ=D}mZ78+Uy~nF+_P6ENQe!uC$x9hJzF1-(e0b-<%`=1CJq&lNPqlbmEGj(b#HO3E
z*AH&ut+#i{mzXS3FMdXI-(Ka33KM_*KNlF?(R;~*F~9r#?`sU!yZP^Y|LY)}5qfv|
z+j^fZl0QRP=G_jQ9`%>=2kV)4G0f%lr|;(l`>t9Y{D9?6p~3VUY8DS!3%2j`6D{KM
z(Qs9CHS79!T0-W+xo7(G+lyHwa?jk?Y4|xc;b4OHwza+Wv5TXA>6;s*ZS2et^}D{|
z;f6zI(=rcL&#ZspVSj?ZWkG|7&-_`p_IL}*++BHPeZ(up>lu-Pw;LuNDEjHo(;xKD
zG0dpzl<~h7#YsCEe#WnPz4=k^8?&6L$K0<5>pf<-*~itp!^J>T+PUxekuLVw^n{0&
zOxrCOR!p!>-`Mu(^q2bCbsMCw$}YZI=(_SbXR`moiDwJCB_=rTx$wL2SyNXOkCEzb
zp*Weiq8F@byPizncSwEVxmPl&+L;~E4sF|aU2=KCmomZeq{iF5EyoR>%sZH|{_Ele
zj;mk#yuLB@qN4V(;$0C7iljdTY;5s&z8>E@Z7KiKO`l_?|J`ivur;mi&WU=5e=963
z^%^`X6Ba*st)L+9ny~imNskZbt}&=FJ@zyBY%X$R!{swef9hS@H|3EP?+c%olQWOL
zkX2k9pQPf>`_$`!Si$j4E?h26B75#y{O|rZ{r$70*Sqr%+>?78pZ>z(=Iyi6d3KR&
z)PLVlE%(v>zIFZVp54<H7W@#twg26neU|k(JpSJM4O(L+-S<A-ZLvPQVp?F`0<(*W
z{tH@qA{*z-KFsOJ6ngg*m$FmkBa@HM_}+T6y?)|5%YS{s>iMNIQD1#^4)V)aS7*7N
z5cUnsoRy-?<SF*uVD_gIjTKw+Q@{1Sil4A6o_&MKg6^_y1+G`87V<8Bz5Zsg(K)Zw
z-RAQP>nHLQg{!rGeLL+)`1hZwU$(qpsQJvEWa_)E#rC4_-i&9#x^F5!Gz9;<b9K=%
zp8ke><0F%QzIvtA@M-<-RTG{kYPj$}T=eK+>a}QQk!7Jw;<L)tir5Q(bs4NG-Igxz
z(vtV`%AxBlB9$xC-8OCg*V!F&uyP&Gwj1-$F6}sd$^Tbs{giD+uk*G^s>w+5)@xYv
zZs3c(pej3eM@nVyg?HBu=WkA49x~4_t#VqM+X>B;*<Ut9*45qI^Ks_n)y&6kGUXP2
zbY65%Tzq$e-<n;kji%K_7I*#3RPddoeYfqkc22cqPBs6|C10!mw+cPI607C1{>_?e
z=2@FAN1C?xwAwuAyIEd;Y2T@bXI4JiIkE4s%c+N#xI3kaTFNfQ6kgrQ!*YZ<aLb+O
z9k2P%yx2QmL41ngd-3q2dawCiIhOuAHOZRIBJKD;^Sd6OpSb^0-KcB6_5Jz?Deg~~
z-^eVx(4=wV)$=b>8z)Bdc;EbJzU}p<drxc?vK7y}zxcO*_S1q;t0xA|LB%ZfyFcHH
zZ{4yoIqCKPt&JTsC0d%)M51;m6|*WYous$AsdYxC5ZBTOg`>|oL!K)s{@ZeGMoz6?
zQl!FmK}Aumlb$oaDo;2#WnF9D9i`uEr!n<>cq4G{o%)aIvlvBPul9Vcs@$~f5mTwP
zMU~LL2@YquOz%7OT;+dLwDXYW+gKIrTM6|ygYq}3FzuPQeez=Oh?hK$QRe&$Ke<FY
zzWNugdL?N>NXT=kpR1?*t}VU!$$(el!OWc=r?&X%m*)!He38I#!1vaVg)bu38LYe)
z*uQm#Sfr4&`D`JRt-X;GUhm(0{OSsh*FX0BZO>`!O}IWc=w(^nioefNuQll8YZV>w
zbU312{lDIPa%cIugRA{_-eI)nE!KGSyj-R8=Bp|C^9t|3_3d8Warf~#4)p_kUJJU<
zo9s9#tN*FQ^K~ot)z7;(EQocx=u&Zh?(XKNdw1*;5KGzeT`e|a<sF7C7E2Q^=%!Uw
zZ}16xZgcKmyYA+lOLeODsXWvvTsH69{OqbO+4FDb6rX;{Yh0h=$+5n7ldzj?^AfEo
zebrrmSf?&+|8jd?*Y4%7|BI{D8P1l!zo)>{{>I-aABDcY*cH9S=Jx#`tgKsppA`H2
zEkWdfp34^=g+sTuGP|n9%)GwGLRY^1zob^Gg8<(hzt@~sJdD|1cJ3B@aC2e3^oQ&@
ZIWZz3k@_JwubeoY``Nv@h<WFU4gkT8OWObd

diff --git a/secrets/motiejus_passwd_hash.age b/secrets/motiejus_passwd_hash.age
index b486733ea9d0474a14f416911154e51e31df6724..4e75b0ff2555e59a2445b559a1b8a57a56b0c9a2 100644
GIT binary patch
delta 1046
zcmZqSxXv*_r{2Y~sNCDh!qTb0$2rl%quj-_%EwSUsWdb(vBD%gCn?N3*T~DiC^S4X
zkgGf(B0V?7INUoU)hXM!)Y2fbBq_}|+sG*-*~dS}xG<?C+1<55KdZ1Zn@iVDp}06h
zH#Nn`)YQ;Yq0lAUGt5z;+#)g}(y%zmBhsYMHQYBdwcaJfC$Fl?!raHw%)lbW$EDKO
z$;raf+cD6S%PS?r-^t0<xY*lU+q1ILH#?`I%*Ed+GQT1uEZMZwL*K)oph!E@!Zp<u
z-MVzIB9Fjy1z(FG|B&p6G}F?=>`=?{{LnOG6KCxTXK$Z!GvhK>eYav$GxxyA%*xXA
za;`va@5ti76t^tbd}9|^uWS>q9G@J&?20sl#7Of(*I<*h+_ZG<RP*xO@`)eC>#OoZ
za=Zh=1Ioi4OR`c@%2LvTLsH6(v`xx`(^7*B!?m?@qm11XQ!70Jxgs)>^2`1F%RQ>x
zJyKn=oy>|WN&>=?ON>e@OG1)z156U5N(#zKLQQfaK|YCqgqg2pPLxYlq;^h;kEvIM
zXJkoMVOW+)fJKQ<L4KuGsDXcOp_@gNc2v1ZdN!A#Z+WgsetMp^v13qhl4pLXufA(}
zuu-<DUrupoj!|xSu1SE8kyoI<NAl!@jH31Fj!wBHfo>j|?vXwoxrt@@sm=u<-j41D
zJ{DfNsU?;verY+8X?aeOnMGX1`Yxp=+Qlip9u*mBApz-y?iOZdMUHMIX}+0xzCLD=
z9$5v&fzHL@72tR;$Sl(>Ffuh$$nq;pF?LjNtSTwYj|i!9@eeG_N-{AIEeH>-w<z??
z_b9bUD@?Q~&NHwG@-NWNC@e4z<jQyU3v_bM_An2#Fi1`@_4P@rbTzCj3oS`8E6vF)
z@D0k>H%louFg11z1cjAhlBZ2lx>mAodQoa(aVl3-o<&)nld*Anj*C}>d0~k~h=GYk
zkc)GeuWv@0zGGNHq*Gc>dRo0{xR;Mnx`CmIagLE?MTUM^cviYcRCZ|!m#Mjjce%4)
zUT|7qslKD5Q;=Jwv9D`TK(Mo6c$z^}k+*w_MO2BGYqm*FL~2q>rhlGekyB!1in)H2
zX^3Glm#(g^f}>l0X_1>rmVabvuAjeAvWtISp<i-PnMGh)agc9tq(QyAyJ2E#QE8;R
zE7yiCpNb{trmfVu{JVCKlT!TKo?7kM7O9i>`!P6nNBDPD310a5^z4I3-Mop@r%dOR
z+q&JY`1KEWtIB5kC$0=PZZGI~TyRL)rE!7Jk;M}QwHDbvYSU8vbVG}mWtQ*FcMsCI
x*WWdjewLem&oZmjb)J;8bKda-;>&i~<i?0ic&d0HTix`q&9rjY*z|{D-vIG>YHk1k

delta 943
zcmcc4(ZVr7C)~>;&p0&A$u+{)HzUp5sNB80K;O3_)3~_M$;Z;j-6OKlH_0?m-!a?K
zgv-p>C(JaZ)WzE`xyU&xtK7XXr68cn#V^=7-zT`jDYwegslvrPGN8Q3V&X^fa1-y6
zTz%u>FwX$<kOFg8m$ZDR+>C<C)U0sFVDrRuQ~kU|-(Xjl$nxAkuE2oY%BZp|i|`yX
zZ?jy#$ckKxOv4I)zj70&;0z;^tO&C#gQ_U^iURH8$?=Th^#KI|22r8Tp~ddzX|7e;
zMnTE>J|0E-#aaF(e%i%G$su`>nZZtJQKfGAT*0N0;X!$kB?g{lRi#y>DP^Wce&J4K
zIUdPT`FYOnSt+R*h6P@h?om0BT)K7&5k{t_hL#GZzUGAiUU^y0*&fNBMZU#3`JR56
zWo}6&X$5(~R-qor1u3qssZkYa9y!@uPNk_H#m>o9DG`P~L1w-g{>err`k4jJ#d*Q`
z9$wmE8Rdc5?jaT7xjw#=^_fKL3-k@V3QV2+(p|ihz4DU+4BS)l%(J|6f?dtMEyD7W
zqFl2gA_GIpB18SSEd4Vb^L-1_3ynPe{L_sLt32|O^OJl+qP+85N`uQw&76b%%e0GA
zT*J#j&M(L;(=9MEHB-p)D@-wVRB+5T2rJ7fGxGBG&GiV)DbCVP45&9Y4KerCchq+-
zO0NoaEjB6+DvwC?EDGZaGxiO$D9WwM^Y+!Z(6;c*$WBVF@+~tB%1H4x_Q>%L&JA|S
zsw{RY$nXSN<`8F@r<50<n_iTfSe&X*Q)Q!SlBc6ksO0Wp;GUzaV5yiGuTW(ak?zP9
z<>Z;`Z0c&3nwjBWpIVh$R^pskUYe8Uu3a2dUTo-PQ5@iD=4tL*<Y=63>Ex5`XkHZ_
z5au0O7?$W_T2yM3#N}CRU|b&QY~<ve8kU`<?H^fCm{n$!SdyIM<&#}r;+<g}np>E!
zot^9E;^Ai)YF_2znVszwYM$e%ukD-T%cZNUtKglM5t40E@8abgYHI9aWSEzxUFqbK
z>|d#$Z0a9SS>k1uZB!IgoE(y0md|x1eGBiMch7$Odw1o<_SM#>OT8i^YB-kfJU2-{
zbDF~DPl2K({IS!PeGEEnGNJTyQA6h84OYunZ40^Ew9dl1>!s)EkNY=0ER?yb8D7^X
zwt0Hw+|&OK-sul&k1*OVT2-tYBju>M<s!3)WGBP6kM6ObAEmvXwCCiJUra}zKc2+8
UI%JKRBgcx9txxK{9C>j80Ibkc1poj5

diff --git a/secrets/postfix_sasl_passwd.age b/secrets/postfix_sasl_passwd.age
index 30e657b..00afa14 100644
--- a/secrets/postfix_sasl_passwd.age
+++ b/secrets/postfix_sasl_passwd.age
@@ -1,17 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg 6fa6kHvbSkI6F9S54u7FMduv+YmuHUGTIZz0CiQhhnQ
-sb9iRMQeU8w8GIh4/iczLHfq4HmFEEClyeVq0cTQ7rc
--> ssh-ed25519 gJrHQg 5Vne+RdTULf2Pqq2X9h2uu0Q4hGX9/FjfWcNkTJa0D8
-+Uv7KvCDlAhPhS3vVwzH+SLFMkP2fIiuwvAETksdasc
--> ssh-ed25519 CBqt6Q +gmJpUrMj+6ximFLkdW67k8TKfOQR1YAz20aPsixXxk
-pM4H8b70EF/Ga4y77BPobxuUF/FawBcrLjVBxEdtvsM
--> X25519 qbNRcP9+m4kubmSsRYE6vIU0F3x5D5hilQ27CP1O+GA
-BRiup/KQxlqX5JoWy7aJjon14Mruxv1JvftFshuyZKc
--> piv-p256 +y2G/w ArRtqE+8sVRYvK8r6yj8UhYhCJeqzH1fYGo4yK6y/Mpa
-iJRdwpx5glVPzuI60f1tSbBsWfECWIkUIY6wiIeF+yk
--> piv-p256 jNqd3A A22i9InHF96PSCvrPWLmgS42MLwJwtMJAVYr9u4qjmD1
-iqV25lJ5k+Xg8L+Q7Xc9EFQV+QnSJZgUJDy/eD8PKn4
--> DcZ0C-grease
-auoi
---- XTP2L0fnjBcOJuu3VkZeGvO2QSVngpBuNtvQsqnXRDY
-�M��(2[o��ӂ�D�}5�����$$��*��RZ��ƃ���}���TA�/��H���%w)o�$�37Cet����Z�����7ޮ/���֩��'��9U�>���S]�E	�N�j�kV˕lK���u�
\ No newline at end of file
+-> ssh-ed25519 vDjOfg AfQkw1UeTbbmmLpQDUREbymEhksQcuuew5CVvUm96l8
+MGHzsuUSGxylTki4RiweGpy6qkfNDV6FZWFq0HYqcVA
+-> ssh-ed25519 qDkIVA ae13qzkkd7MOF+K3c9hboyLgIKtyCvIwnwTaJPUptGQ
+NqgLmlyRH1xS8DPLf6K2TkVXyLPq7JoVQIrJR/ZiQok
+-> ssh-ed25519 gJrHQg XPvoFk3rmcR+LUqhEe4lPRRaJX15Aly2Bog1yupGcXk
+8dhK7AkVeBRzHxyeuR4A2aDCEQD1MX6cJ9IjJwEINE0
+-> ssh-ed25519 CBqt6Q +KdvDUniNHGTo0jBFWItMmyNxE0r5xLPGAFxV9VFNhc
+K4Lu5yzchnoCrvxzjR9xCxSgYZvKry+drpjwiKVQ8J8
+-> X25519 88HnH2v3YYipPYB9qk8pmVtMIYN/1vmW43f55HCUyjo
+AThm3DxL6sbDlBnN0YwJBee7X+79QwGRJTwWjBaNTqc
+-> piv-p256 +y2G/w AmxWHRvDHpWeP14zX4osgk6J86rhgwZ0zGu/Tsi1B6Q7
+yyBXrNYjobXhtZJXb7agK8Qv9+FJ5PaJSvC0CZ9Gedg
+-> piv-p256 jNqd3A Am53IYYfiB4zdUsAgBHWSZYGOhjS19U4j3DlgzY0EnwU
+F3CcfTCcsujUhVIBVUbu3umE3Tta+gMQmYzQZBpdGf4
+-> ?FGn:n?-grease Vx sa, pC
+3O61kvJv/TGOMRyjDAFXBA64FQLjL1CyAUi0GrxJ5nBarL8w6iaaWRcRUBBkw1rb
+pY1R
+--- I/iGZ9cuID9D/KMFMMqRDd/ole/MNPygPYks57FHprU
+?'a8�ߵ����rig��9��0c����N�(�hg���RI��Q��#�J�IudX��d�H����;@���;dh�
o���9�05�T$j0��f�g���rcW�y�nI���{6q&d=�)+u���T-�^��ߪ
\ No newline at end of file
diff --git a/secrets/root_passwd_hash.age b/secrets/root_passwd_hash.age
index dee1b87..7f376f1 100644
--- a/secrets/root_passwd_hash.age
+++ b/secrets/root_passwd_hash.age
@@ -1,18 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg +T2+c6s8yRI3DmcMCELDCu9bH5jwkGmWcOe0BT9e504
-ilH6f5UfROVu9UNEG3bwKDVCW9TBez/1tctCo7GqW3o
--> ssh-ed25519 gJrHQg Rj+QeoWpjZzwBD3zRVRA0TbYBKtlZnLIXjza5xb1oXc
-2KJxVI1VCvD7IuO8nQ2V9TjMK0+ybfOh6t2/7dRw9dg
--> ssh-ed25519 CBqt6Q A1VXR8o6Xyt1jzbDhmvAtuUzvjDqeVxIbWObGV/Fe20
-o5o42d6SVooI67lg4nKfx1u+HY/TGL2ys0J/V5lzn+0
--> X25519 uMqXsxlaJlX5WDy/0m4LTGQwqy4+gouKIOzjAQMpzA4
-eYaegTrmE+n7zdet2oSixttbd+zA2hssdg6NoyS04vY
--> piv-p256 +y2G/w A2HUb9rvWY/Wehzh7luAt3Z3bJftC1eSgV6D2G/sivuf
-7g3BjfSbfI97gzpeUpgVyCNc94Cx9j9coc/7huEKxl8
--> piv-p256 jNqd3A AyuHpDNY37NNMFsC5e9RRSh6Ii1WvNhK2JwCgLzxBgdG
-fumXWMKQd3cdCzGhGSrKl0v7AYkUwOXL4iPLQamHFnE
--> %i4-grease
-uHEF74/F+pbG8QNel8l7uqFLqmN7uw4gd0zd5SPidB8IXjzc
---- vuYEQoi+VbObu7O6lokSpYmKLn1H6lOuc+C9Q5FZD1U
-P��R�
-���@B��=sK�N�����h��E�=��ҍ���[�v�y�p���ڔ���U3�*�b�� o.�d�q�Պסl=�ˇ󴵎��d۬MM#J�� �3����|U���|��&����Yd����e���0���0�ZY^
\ No newline at end of file
+-> ssh-ed25519 vDjOfg ccN/cS4ZAfiOx9C6wFErEjvOqPbKy6h893jYT/z2T18
+9ChhXfz2dV5T0D06TzW255LB76g16ifZmQbPVDqD5Do
+-> ssh-ed25519 qDkIVA Fac/jOHkXu8NPiZlb3hk2BqB8BhadPjqfn1zc108ll8
+N9AY1CqLGwtfYiFsJGV/IQ9mJTDSqM54X6fnA7NnXNQ
+-> ssh-ed25519 gJrHQg VF4G1Q4oeb3JVfHQhjh4yJvUlTN1PTEyrhKSBrOcvgg
+8ceAf/cu7cuhTXVzB7nOi2he/ktrlpVkr21i1Z4XqIQ
+-> ssh-ed25519 CBqt6Q bzv7fF4OAU7GKJiJGrihvDev4M6Qsr7+W8JQ9QNHUjo
+Hy9ZIS04J4VMfuNQiTTB7sW2CzoROdoyhIbLldndfvI
+-> X25519 PrY0KyZTE7eXHRGlVSpYzBoT73pBHWQvTRO9eeJCWwg
+L/ukKZtZScR3WkeX8bMNXxGW2PFV9kLnPKFSb+t001E
+-> piv-p256 +y2G/w AxDz+bV/IPQCzwPUt6+am/IRtijuRkf3vTuufzGiyO6Y
+knF13FZXnMLOEF9Q7dOKJZE/2QQg83PqGFpO0kyWFBw
+-> piv-p256 jNqd3A AtRxeHPEitdL4wic71ulRVgM2QbO/sOuNxilHnstQA6P
+Gbrsiq00AnBjMR25PPYxeix3RaUvub/6F02JP6W9AJg
+-> wIqU6'R-grease 33MjIB)v TohZ
+Dsa2LmHh0qb+8Vmzr73952TK7Fy6DdNQTlbsyixrjKy18my/Q40kfKfipM0+
+--- 2tU902KSTImP9fQArgBYHy2yEnPkrlR/LMrSOuaLwdE
+�tD;�8"8�e=(��
�����2�_���#I7�����QX��K�w=_(�r�����	�b�w�D:��t��"���7�u�\D�����l���M��`��e���'
+�@�]wj[�<؈p������
\ No newline at end of file
diff --git a/secrets/synapse/jakstys_lt_signing_key.age b/secrets/synapse/jakstys_lt_signing_key.age
index 0eab883fbb3991f7a93412b578aa2085e404add6..ed9e7f8557459b4a198ff5c4a1ff2ab990cd2ba6 100644
GIT binary patch
delta 629
zcmZ3&x{P&#PJM8)YnG+COI}2fn`eoOSw*FzuXlc-TTY&FaA07nX^N?Ds=H&AXIVyY
zD3_;&tC4|WZoZ>sfrr0gh);llg`bz7XK0CKL2+1MQmJQnPLh6#c7bzBF_*5LLWGg2
zsiCEUacO8}W@d;%u$!lTQMtQWWqD3WmVZX6NwQ~tMtx9(flE+|w`aI>a&BHAS89ZT
zxuaWlo=JYNrJHAYT2W|{Yig>wL2zMkVwt0{nRaN9S)f-=N?wRB$clo@GTj0rQ!@qa
zN+Wmuas@}rPy<i>!a(=*w1R+KpRka?5=-OsY|pa9>>!I`C({(e<j@S)NGD70fC?`6
zwBStjvT$FQ3iATzFyDZXeE*W1oMe|kgAmIyzpR3Y&@3-s?NZN*v>=nofsCT{mQ|j)
zuAyZf5yr`>PJ#Y8X6}XtVSXin#p(W~zIhe_PL-9Z-ugKv{*LBco;li{L8*n_WiBE9
zd8RqRMa~&U-o7cOd6k)g5nfK&-Vp(&j;_T{RRNJ8k0j~orWd6q7N;uMyTvJ%8Yr0O
za20tbhHHnIhj<z}Ru(#1de#?|C3#wS<yHB)IOZ357CTq?J0%qwX(tw&Rum;?Wdxd<
zmN;b;gr_DMlxI1aCwg-gRAgjw>FVk#=!XQSXot91ltmSUSVmZ8S9vCdnB{w0hL|Ph
zhj^vAg(g;(rR5g5q`Q=Jy(<4^{P~&TwfRO(S6Am*FWi;SuUx2gHI~t-&fda`^TpKY
z;)@2{e;QXUtGlJ+eo6X7ZBfb&!87}ETo>DVwb!bNl%FivEN`)GQPs>v$D}^LuWml}
NdAjKCWZQKbRseF#*ku3!

delta 627
zcmZ3+x`cItPJLEosX<h-e}tiTqH(B;V`yoPi%E&Tr*~j*VQ!dNfVXx~Qig>|c2J~~
zD_6K*YNd8WT5@@qu|-fsQgU`!dQgC+WtDkBnpwC<zK^$KRFq4pONN1&1(&X!LWGg2
zsiCEUi*t}=Xp(=qK~_PiXI7Pkho@JHXK0d{i(^iOL48WOi$O+imPul$OQeAbm$RW!
zuv4XfdS!^eS!r=zXsMTXfV-iKfmw!ub7fvZP?2R-Xk@uZR78#|$clo@GTj0rQ!@qa
zN+Wmuas|iIoPt!-$ij>;x1<awv!v2w3pbCvl$-#gtP;aeZ;SNQutd|Of}#r7G*_;~
z++<UA3-chyilp>p$1oSO)U?Fp5O?jw#P9;2piIML_mD6@lN7gb19RWWfsCT{nfcis
zLH<$Zg~q{VDLL*Qem-VF1{FS;mO&;4&QV#VK{-a{S%KP-W)<38fiC41mL`raUIlsO
zZV|yoi3QG8#U_SDZaIlw>Df_css35z5f&~k-j(36@~Tzz(@if*O)O4TsEG3}SJMqs
z2r%(Xt5FEhj4a{G$#Aqttv8SI^EHez_m2$HceG45u<(m8PK!#a$anV6H}XpLFo`Nm
zHZw{JD#_J04tDd;%FQ)(;nLOBRq(J(&M*xMb8@XnPcA47cQ!5ZaLe`xcQpy~2rR28
zajYl^bFwrF3@|Y<;94s0%00<IbdUZa;XKYy3)hJKyvME6a=*2{K+0inT(X69P2}qr
zZ;qt&Msys^+<Kt)e|0XyTJM&NeJpcXGk@INGGUhZ!>9SS->tYpW`3}}$zb~{evjwB
LotKZzxV{Gf(9YJW

diff --git a/secrets/synapse/macaroon_secret_key.age b/secrets/synapse/macaroon_secret_key.age
index 0aa407dc11b45afb7bdaaf20a4b57836e7b2bb45..cead95fc51f3425bd7d3a63bc7100aa6cf9e0d16 100644
GIT binary patch
delta 693
zcmeyx@|1OgPJKpbQIWY{Wu(4=p?{iNm19YHU|70wfoqbxS&C_fk6%f0RjRkKg@uPv
zI+tNVv1xj~c}Tc>a#>NOQL$rIVqmsQL7`J&UQt?<V`gBPsdG_ig;_?Z1(&X!LWGg2
zsiCDpXjD*oaY~SJMu@Awvt>kZMp=5UnR%wSZ%JixRlR|JmREVYxj{x@cyLfUS7}bM
zg=K0|j&@?8d0>Q@qj5onw{u{nL5N{NRJgHGU{-{YTX<DesZW_B$clo@GTj0rQ!@qa
zN+Wmuas@{t)2NJ!vQYQriX@|KQ-7z>lDwc~_atYFMBj9G_aG<Jj8wC5&oD#R!U8V8
z%pzZPS0D2T-|(nV?MgqhfXZZ(BKLyqv~r(P=K!N%<B~k5u&~0^tOD1`fsCT{Mu9<v
z*=C6$d45p_Zmtm-ftgilK~CYp&RHHwm1aTy=2;b{&WWyxDHYCKIf+qT+U7a#B>~2{
zMpc$Zo)!ivVP<|F#vX1F1%XbEMy|#B*(ENK+F9iwkCdnArWd6q7N;td>J|Gbcw3hR
zDEMZ(8I^MRIu&|{MOj9fRn%*z83q(NB?XmaS0?6#R;Cts1XvWg<~XHVmb#>+xF>sg
zS%kVKJ9|`SdAYe{m1{?ORwQ|aaRmoCRk~+8ry2N`yZKlK<yB_oWIMZ6m^)>f=Q;+v
znt1wqL}WxJ6-Q=UIHiXhMER6?1b908a_Q>oDx{_+nueN3lqHt92G&<3SCwgpIGLqa
zlm>)VYMYvC8-)~Grny;`M5Kqh7jv!Y4785d+WN2GTB}T~?sVv9;eh{}GDTumykc%?
z*x$?}_ebHP^MaO>Mw@zyJGmEXTw83aa_rR+$Jehm3v(V!VQk%Gbda-WgCIk0^WFFx
ZI{t!N_Y^s{i_~ZS(En|z|DDMt5&+S%?Z5y4

delta 585
zcmaFL`io_PPQ6=xVyK~ho@ZWJT85i*SV@sds-cHTl}nImQmJ=kv9@cFwqK%eq+3ds
z0atFKW09djg>!yomYGF%xwn5nvQdejTc~Malwm=3N@ZGvZ+W3*WkpnJI+w1ULWGg2
zsiCDpdU>|5yKA6-aBi}zX>e(=aY0scfrq7bVr5EbYQ0OCOL&<_T2-lbl3SnwSALFb
zRJx~swsVNDmv2RQcyeK+c5!)bc%Wg0yI)jUS+-kcQn*JzsF8j$$clo@GTj0rQ!@qa
zN+Wmuas@{dcZ*O%A9o8E?+T{^--5(+UzbcT|G-SA;E<}wEU&_<2=}zea?kv7vl6bt
zVxKJaU~@lb*ED0tq{xu4vg~Bvpr8W3z#RV)L%+~GXSZ;3!vJl!OxOI$fsCT{7L~r<
ziP=U@uHjBW=7rjceu;(2$zh(6S)~yXDZWt^CIN-cnI6W@-l=I^rG6FOg<%Eh`EI%1
zE=KyEzV0cJ!4dv>A=+L>sUazjZaz__DdtsanW>H-k7R}E`FI4n`0Az?r6v}qa(S0}
zCOY~UrI;AHm{=qkRFs;!1=RbSr*rA*>ME34L>8DCSZI6d8|Rp3mw1~R7DuKy23w>W
zM5Y>NCK?C2M&w6jnpU|PM{=orzA%4w(}kd^yWKgQzpS1yIh{NDqJ;UrC-W~G<+S{~
z<FqiP?aG1e=F4v`_kG;*Z{F<(M`k@PS^t>zuSHbe-&k4ad2%fG9P@X7UBNB3T1oGd
XpxUDN`BKT%W!}H@*ktZs->?G!jfv0*

diff --git a/secrets/synapse/registration_shared_secret.age b/secrets/synapse/registration_shared_secret.age
index c117844..caa7d82 100644
--- a/secrets/synapse/registration_shared_secret.age
+++ b/secrets/synapse/registration_shared_secret.age
@@ -1,15 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg ffxdmFgRbbThAPsXCqrmqlJeaKj50YS+hM0GYGLTQkU
-MxEkjQzTlJ9GGLpohAoVa7w1AJKaxCJRca7dYGLtBzA
--> X25519 8OTgARYYgWi1PeFLEDUndJ9xSs/W9Z6p2hETrWaurkk
-D4DvfXCZ7TrloVYbXx/DLIrW5yW5PhhEUzOrte3RPac
--> piv-p256 +y2G/w A4iElwc6M+dTz/LVi0l/vO73zSf3bE0t8gT0/zGF9dWq
-mKdyh0I/8Dmv4DRpcE+RhPjp8tTuV3UI0uI/LYt0noQ
--> piv-p256 jNqd3A Ai4ZOf+hB30/3IkpLVzeDBbBkoAbsSP+/esY3SACYt4G
-Z/DYBsb8TVt75Nvt9KNPqGuGhLRtT+KJcNsgTjRDsBE
--> p-grease %V0%NL0/ Jqtp61!y 4 %*ii3\%
-3CEt8jshnha3CaS3g1/gsHuNonR/Nn17C+aOmMUt7+HTvoVZpsSWMb+y5q4LR1S0
-vHsquuywbw257q4E+foJPlKXtK/nbRATvKXpHAC5sSPwbw+aye4zSLWU8rv+yA
---- 0O9vjzCZYCyhj+Wpf9n8JTUqHmXNLifflFBpYvLFL80
-�
-?�l�t�7-R{�Bf��8�@�W���t���4�K��UI&wU˘�m��O�"�y��O���lJ�I���&��W�B�=2�e�{��?�# �
\ No newline at end of file
+-> ssh-ed25519 gJrHQg 41GyF7UMrtsuI0z2WZgsZf/bmyAcAa74RfLp1AicLjg
+ytXT4+8r0ffudmZ4ZlkICx+ddRm3b+T73IkLfOrJrWs
+-> X25519 guLncWEl3J7IqltGm9TuhN/8O3hrnQ1Prh0Jsxy7PFo
+RR0x9AkSjAM6TNyNWZA1LOG3uZAxqGIjq0t714Msn/c
+-> piv-p256 +y2G/w A+S8K3QVsjfGVFpIyCA3uXV2ZE2CcitAWFs1wdTb/bec
+MboWcsjnwwhggY67m9qmDwY7hmHsdew9fktbmTI0fWU
+-> piv-p256 jNqd3A A+fH2xUnVmcgQxREYgT4v1PaAmPAG9uoC8UrBPucMVxP
+XU3VOt8BsN8hka0XbJ1zLG+1asmfv2qslSirlLlA4VU
+-> =s-grease
+BH6aufY
+--- oSZP5kASZECqlU7b8N7+WSFtstI4u6Vc49QUZl+SIg8
+�Υ��E�����	�!hΒ��3u�P�v��L���VK�22i*�q����ޖ2G��iד�o���
�i�������4[�3��#��c�1�"�v)��>
\ No newline at end of file
diff --git a/secrets/vno1-oh2/borgbackup/password.age b/secrets/vno1-oh2/borgbackup/password.age
index bef1ca6..e900444 100644
--- a/secrets/vno1-oh2/borgbackup/password.age
+++ b/secrets/vno1-oh2/borgbackup/password.age
@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg ESiJkK+AbUYnpPzWzJwT2vXCekr8JFKVHAluKgYj+lQ
-Y1dVxVehvXp982Uv8yFkQMd8bDxmtK6q/vwAV41B6ao
--> X25519 QNnqg1/Bi911Y7W2fD5oTgfbeuhknXHkoBLjTLOH6RU
-upXY8JVRjSTfw3kGQIVl3B+HP3l5mIug5KJCSQfnPgg
--> piv-p256 +y2G/w AyXKFigaApuL9nF/3hO5+KYg+I6dEZ8jt8MdTLQ1Uo2s
-lkncgwZebVAQi8IfoqFdfwBU9Im5z6t95fUxalY85uc
--> piv-p256 jNqd3A AxkBvH1D4M0SKXUcU0xLkVlOGs5N5chQibVBqFyBqATn
-DiSN52dtvrtigH7Ab3WKNUh04b72KT0oTprIDRVZAVI
--> 6jYgXN-grease
-GEvhMWqEB2ERO1F0rOxJacf5QQ
---- ZXufptBo8uDjjxBH5szEVCV0mttzfhra2D0jMijKcFo
-�X��T(�ܥ�Ω�$,[�ִ;zm`��3�k���J&E"ԫ�9
-��
\ No newline at end of file
+-> ssh-ed25519 gJrHQg Nn62/m3DrF4YxjI0ycPFaKriGrkE3ixVVJz+tFYCsVs
+sDa69aqWlf75k/hWgx8OuuPWvvWuDYZlStaWzW3kq70
+-> X25519 3ebH/jOO/SjKrdcPcYc24mYXg5nn4HyvRCxlIJVVZUI
+TujCwZHodT5adBPpKuZ12e2g8ONVI+Zf7ba95FKNFAs
+-> piv-p256 +y2G/w AjBaqeL3p8bjNPGn+uI+MCsF1UiiXLxiRGh44BavzOpH
+96+gVz3oxd4b4fvT0VgVvIt6ppq1Yav4H1rGZgVqUsE
+-> piv-p256 jNqd3A A8peXvU8dS8RxQxEw5+vcPto5aLGVvXKAaAo15x0giVa
+aqZo+JsD02ONfovyNw9y4iRvNFYh6VryNETfZja4elE
+-> 5-grease =2CO W
+u74
+--- YeeJl5cn6iA2PxOVw9NmuvBE9hkwYt8+nA8S4OsGqss
+��ں^�ٞ`�;ιf�}�U���?����gg���y��_�D��n��r�
\ No newline at end of file
diff --git a/secrets/vno1-oh2/zfs-passphrase.age b/secrets/vno1-oh2/zfs-passphrase.age
index eb0bd66..99d339d 100644
--- a/secrets/vno1-oh2/zfs-passphrase.age
+++ b/secrets/vno1-oh2/zfs-passphrase.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg Q1sECRy7lkHYa3bFIQQNNbaIfEjdZShkdGjPqTipWEU
-OzCOnN56ti6HmLFwYOKCZ81qnhCTGNoMtdaOrSPDsRA
--> X25519 gIWhWpUrehSyghn/Eok2Fg2bKo0/28n01+bB3DXaPDA
-i71PJ/nJAgvZuwDwnTeqvxXsQr09VCOlpkCZ3V3NQ+U
--> piv-p256 +y2G/w A2rC4hbY48aKDwZ08hMZPAXTMP6dtUxVboG5ow3bDXPq
-wK9Co8sWTygN+Mp+3ZSy+JLV5TRpA/ZgXoCoqSqtipw
--> piv-p256 jNqd3A A8eWt9X0EyPCwST/tutbEjUcyJ3Id9cL7fFkm75SeWKI
-caMp+o0ziLQLpJukTSEqnwkhE84bXIL76wTu3JAEpKo
--> G`=je-grease z hi^@N@
-Q+3IMD7GELrAEPoCeL0i
---- IOqB7rGBpsOYcNf81wMJfwAox7zL0+lyKVzh6ZhuJH0
-��=����ѹ���o�
-x$D��G�C�1�2��'ը���VL��P���]UT
\ No newline at end of file
+-> ssh-ed25519 vDjOfg hQz/8dKNzISetnpTQAqSGyAzlxJxVKiTMc4iA38yXyE
+2TEo7UV6EyASIByWwliiLTqP0smmfKDi/UkDi8PMwwY
+-> X25519 KlnATfXI6zqAaVTSNO78la8rmyWMtVRww9BlF8/h7nc
+O5Digx7rg+JsCTncY6/aNVPNQeYHKpCf1EYwHIWdnvQ
+-> piv-p256 +y2G/w AgbNt1GusrDSgdy5tFoRrfga6alFvEph85HuU9NQ6lJE
+csay3X8DFRj3VEBrCGDz1ItIcL8lmZUEIQC7VMXExA4
+-> piv-p256 jNqd3A A1kYMKCBVoNt1a7ntDlxB75zZLEpkK+B2S/oEVtLb3L4
+Eim5jOLs+LeFtBW6Mx3Qum1ush7hLc5xm5sskPxkF9c
+-> czlN+-grease Ixf
+B8uHZdeLS17u6pLgeHiCCjNTvctel5Tby+GatAEssp9SzxZYZEKr2w42KpJe0k/F
+iKao
+--- w4iT5CdobRQzEKBiGyU60DIHxAn9SsJ++X0vYrECmuM
+��_�	������W+@#�|3�:;�����U�`2�����ebc��g��T�U
\ No newline at end of file