From 3a5b1e5951f3c7679ce9649d83cbbbd52674bc31 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Fri, 25 Aug 2023 19:52:41 +0300
Subject: [PATCH] preparing to move headscale to vno1-oh2

---
 data.nix                                      |  13 ++++++-
 flake.nix                                     |   2 +-
 hosts/hel1-a/configuration.nix                |   3 +-
 hosts/vno1-oh2/configuration.nix              |   9 ++++-
 secrets.nix                                   |   2 +-
 secrets/grafana.jakstys.lt/oidc.age           |  24 ++++++------
 secrets/headscale/oidc_client_secret2.age     |  14 +++++++
 secrets/hel1-a/borgbackup/password.age        |  26 ++++++-------
 .../hel1-a/headscale/oidc_client_secret2.age  | Bin 635 -> 0 bytes
 secrets/hel1-a/zfs-passphrase.age             | Bin 721 -> 695 bytes
 secrets/letsencrypt/account.key.age           | Bin 3886 -> 3917 bytes
 secrets/motiejus_passwd_hash.age              | Bin 924 -> 1028 bytes
 secrets/postfix_sasl_passwd.age               |  35 ++++++++----------
 secrets/root_passwd_hash.age                  | Bin 997 -> 916 bytes
 secrets/synapse/jakstys_lt_signing_key.age    | Bin 739 -> 676 bytes
 secrets/synapse/macaroon_secret_key.age       | Bin 828 -> 634 bytes
 .../synapse/registration_shared_secret.age    |  29 +++++++--------
 secrets/vno1-oh2/borgbackup/password.age      |  26 ++++++-------
 secrets/vno1-oh2/zfs-passphrase.age           |  26 ++++++-------
 19 files changed, 117 insertions(+), 92 deletions(-)
 create mode 100644 secrets/headscale/oidc_client_secret2.age
 delete mode 100644 secrets/hel1-a/headscale/oidc_client_secret2.age

diff --git a/data.nix b/data.nix
index fb0ac84..c39563a 100644
--- a/data.nix
+++ b/data.nix
@@ -28,7 +28,16 @@ rec {
 
   hosts = {
     "vno1-oh2.servers.jakst" = rec {
-      extraHostNames = ["dl.jakstys.lt" "git.jakstys.lt" "vno1-oh2.jakstys.lt" publicIP jakstIP];
+      extraHostNames = [
+        "dl.jakstys.lt"
+        "git.jakstys.lt"
+        "vno1-oh2.jakstys.lt"
+        "jakstys.lt"
+        "www.jakstys.lt"
+        "vpn.jakstys.lt"
+        publicIP
+        jakstIP
+      ];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHtYsaht57g2sp6UmLHqsCK+fHjiiZ0rmGceFmFt88pY";
       initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKns3+EIPqKeoB5OIxANIkppb5ICOmkW8X1DOKJPeRWr";
       publicIP = "88.223.107.21";
@@ -40,7 +49,7 @@ rec {
       jakstIP = "100.89.176.2";
     };
     "hel1-a.servers.jakst" = rec {
-      extraHostNames = ["hel1-a.jakstys.lt" "vpn.jakstys.lt" "jakstys.lt" "www.jakstys.lt" publicIP jakstIP];
+      extraHostNames = ["hel1-a.jakstys.lt" publicIP jakstIP];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6Wd2lKrpP2Gqul10obMo2dc1xKaaLv0I4FAnfIaFKu";
       initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzt0eaSRTAfM2295x4vACEd5VFqVeYJPV/N9ZUq+voP";
       publicIP = "65.21.7.119";
diff --git a/flake.nix b/flake.nix
index 52e9b7a..3883944 100644
--- a/flake.nix
+++ b/flake.nix
@@ -61,7 +61,6 @@
             age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
             age.secrets.zfs-passphrase-vno1-oh2.file = ./secrets/vno1-oh2/zfs-passphrase.age;
 
-            age.secrets.headscale-client-oidc.file = ./secrets/hel1-a/headscale/oidc_client_secret2.age;
             age.secrets.borgbackup-password.file = ./secrets/hel1-a/borgbackup/password.age;
             age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
           }
@@ -85,6 +84,7 @@
             age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
             age.secrets.zfs-passphrase-hel1-a.file = ./secrets/hel1-a/zfs-passphrase.age;
 
+            age.secrets.headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age;
             age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
             age.secrets.borgbackup-password.file = ./secrets/vno1-oh2/borgbackup/password.age;
             age.secrets.grafana-oidc.file = ./secrets/grafana.jakstys.lt/oidc.age;
diff --git a/hosts/hel1-a/configuration.nix b/hosts/hel1-a/configuration.nix
index 1be51ca..138b548 100644
--- a/hosts/hel1-a/configuration.nix
+++ b/hosts/hel1-a/configuration.nix
@@ -59,11 +59,10 @@
       node_exporter.enable = true;
 
       headscale = {
-        enable = true;
+        enable = false;
         clientOidcPath = config.age.secrets.headscale-client-oidc.path;
         subnetCIDR = myData.tailscale_subnet.cidr;
       };
-
       deployerbot = {
         follower = {
           enable = true;
diff --git a/hosts/vno1-oh2/configuration.nix b/hosts/vno1-oh2/configuration.nix
index e823b9c..e02c048 100644
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -53,10 +53,11 @@
           "/var/lib" = {
             repo = "zh2769@zh2769.rsync.net:${config.networking.hostName}.${config.networking.domain}-var_lib";
             paths = [
-              "/var/lib/.snapshot-latest/private/soju"
               "/var/lib/.snapshot-latest/gitea"
               "/var/lib/.snapshot-latest/grafana"
+              "/var/lib/.snapshot-latest/headscale"
               "/var/lib/.snapshot-latest/matrix-synapse"
+              "/var/lib/.snapshot-latest/private/soju"
             ];
             backup_at = "*-*-* 00:01:00";
           };
@@ -99,6 +100,12 @@
 
       gitea.enable = true;
 
+      headscale = {
+        enable = true;
+        clientOidcPath = config.age.secrets.headscale-client-oidc.path;
+        subnetCIDR = myData.tailscale_subnet.cidr;
+      };
+
       nsd-acme = {
         enable = true;
         zones."grafana.jakstys.lt" = {
diff --git a/secrets.nix b/secrets.nix
index 7199c19..0d5573c 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -20,7 +20,6 @@ let
 in
   {}
   // mk ([hel1-a] ++ motiejus) [
-    "secrets/hel1-a/headscale/oidc_client_secret2.age"
     "secrets/hel1-a/borgbackup/password.age"
     "secrets/vno1-oh2/zfs-passphrase.age"
   ]
@@ -29,6 +28,7 @@ in
     "secrets/vno1-oh2/borgbackup/password.age"
     "secrets/grafana.jakstys.lt/oidc.age"
     "secrets/letsencrypt/account.key.age"
+    "secrets/headscale/oidc_client_secret2.age"
 
     "secrets/synapse/jakstys_lt_signing_key.age"
     "secrets/synapse/registration_shared_secret.age"
diff --git a/secrets/grafana.jakstys.lt/oidc.age b/secrets/grafana.jakstys.lt/oidc.age
index 89a563c..ba4a4d6 100644
--- a/secrets/grafana.jakstys.lt/oidc.age
+++ b/secrets/grafana.jakstys.lt/oidc.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg g0cUapt08wymIYGH8cI8P9vBjaG818mmV4BW9yJb7Fo
-/kT1CMN2oe4BqcPeb/scHANlC7DdVa1uFB1k1h3oSGU
--> X25519 /X86vIxq5E7CNzoWg7hHAj/57jfWQrJY+968Nf00IXI
-cKui+bdQ754Tiz99m4omq29BH2b0d/gNAx9PjbPcioY
--> piv-p256 +y2G/w A9y1M2rOLGK/+RDsd4crWsweJwwngmchoHA0Mll4/gg3
-ZPpfflSkWW4EHggYLOx2ji0fRVU6YJJE8UzULRXOhMk
--> piv-p256 jNqd3A AxJFZsZrrh8tkwacjv+fZZ3q4Q4siPDwsS1xiune9+HF
-5K+zJva+g9ZhzOKD4tsutZJ6rsxoLzUaRTFPXbUwxrA
--> "-grease Uy E' 4<(:Of ;4gD4YCS
-ZU4GUoXlKqEU
---- 4ww60rHhKhcXJZQdDdROkgQyywCwdIQ/kgFKHwmR6/U
-%�eL�?�5Uǡ���g�J
�
E9��(�1�7NE�ۈiϼ���1�fy�4�3�e�rz����uzZ(jA�n+nO���Tii�G �
\ No newline at end of file
+-> ssh-ed25519 gJrHQg FIcNGRpq57RyXSx7ggde3ix79ijt7EHnU8LhMRrXiGk
+feCa7Xln/wTFxSfBt1wW9nJDUunp1ng01kRR4fX3wtk
+-> X25519 9a/Z7fQMlb2Ossnx6OQfOEn+Sc7EkjH1qvRnAUNO3nI
+gfpPM7RauKm2NnOfER+zJvJjaVEZOmXjxkbWKFGOUGw
+-> piv-p256 +y2G/w A4oYywSwobBVMGs3RTxmvnh7TQV1FYlNYrUVVqEjFUFa
+qVGtilxTsOOkYaSQ8c8Io4JCqxuJSHB8szEEWc9HWNU
+-> piv-p256 jNqd3A AsVFA1wUy811MHNgMoCLvd3ETXbd8XxSr3uCgqGh7414
+d366KUCPHzScDv4A+9DkUcqRgfnpzoHwKXPTI6RM1Pc
+-> pKOSD-grease jSg. !!V_P>| +K ~E
+JklMXPMAv8vHnxBr/F2g4tAKmDoe0ub/G45MSxmG5E8/HtE
+--- zzyjEbFgNDFzw+NQaFyCJlqmkuYubPu2VKnkR2RHIcc
+�ܥ���lJ�NT��s�ۍ�-LL�H���|�C�b��J;�k��JQ4������`���U�g1��ur��{[�_Q�rR�[�=1
\ No newline at end of file
diff --git a/secrets/headscale/oidc_client_secret2.age b/secrets/headscale/oidc_client_secret2.age
new file mode 100644
index 0000000..9015ad3
--- /dev/null
+++ b/secrets/headscale/oidc_client_secret2.age
@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 gJrHQg /05rQ0bweVNFPoI6a7w4CMk8iKdObSnrK5mzU+OtAls
+fEO5kDvRF049alg3AMxTwJ+KiFoh+o/6gRYxFUEdIRI
+-> X25519 rGiyMZnRwYcvcoFkBXfwxDy71/F7RC4xL2ILY/3KAHE
+9thFbnnBvOJsopicp366uU3bJGJ2Tu4ETkhKFRWFU6A
+-> piv-p256 +y2G/w An1oipHxaTcuwMJtW2C+J7fiE4rafB19fCxouyW6k8Ml
+/JsGUuNknM1K9PEfrwOPr2r07sChEgy80GFytvH+1Tw
+-> piv-p256 jNqd3A A77/PWu+DQbUNVjv6CeDB98nSZPojVXlSmk8Ed8cW0Ya
+WPseJycaWCvC15+RvjJSpfyMR2kB8+jK4JIsE6fz2ws
+-> +WA-grease Z[ q+*
+p2PdS7tDHpBr3/2EQbUXqFs5H9hAkgvMy2hiYJR5gGgLjXXFdteza2DHAP4knXfZ
+iBXIy54
+--- H4QPWaIOL3GIPmPeRirGJ3W9zqjryG/cb4f+tMdJ8do
+OU�"D1�s+��& ����^�)ĎI]J)"��|�b�a��2��dcRﰅ )s�x�s*���s�¦�iH��L�em�m1r�2
\ No newline at end of file
diff --git a/secrets/hel1-a/borgbackup/password.age b/secrets/hel1-a/borgbackup/password.age
index 89cbe9a..bbbc6d7 100644
--- a/secrets/hel1-a/borgbackup/password.age
+++ b/secrets/hel1-a/borgbackup/password.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg 7G6AKoMP48rkdnmUTx3JoaVKC8vSJ/JwlFFCoh/x0T4
-ZG+sv3YHaDr6wh7vu6c/Y/gfS02qXlVm6w9Q+DtaUBM
--> X25519 oX8s1kdObP8huSEMlzhuiZNnGC7uz4ln/3A6mMDI2Dk
-gO5lVYwUTT+Due0S8MtAnXktRvr8oGSOM29WIP9MmEE
--> piv-p256 +y2G/w AwU2AGr0kQzwqdLH0x0jZr+FC6ERWkpE4uTW4gab/pYg
-WYPix2q28T010olJcK+FH8rOqqN2h5CcHxvT1TmT68Q
--> piv-p256 jNqd3A ApHqnQC3K3YbE32XV7r98uF/E7PhyUup21yMbgHuS+I5
-ec9Y+5JX5fNBjI6t1bjOdARPGmTaqYOcDhtZgru1Rvs
--> Ce^Yz-grease ,JTHPY L+/=
-sESApKm7G6joyMmd2d3KWswKJ/8HMaAgteBHECLsa69531tLEt+ujkCdwR0jqb+n
-BfF9JHqAecuH9eYj9eW7i7NcvoAtbNQJBHAo
---- mcMmuohtYTYiuEkcH1RHStI9R37avlr1LoutOkofD9g
-�حt��*F.;��Wc���-|Kb#�\��
,�1y�w��uT]���"�7�
\ No newline at end of file
+-> ssh-ed25519 vDjOfg uZsTUwEu/YMai2awdIq/BQFWY3abjsVwkMEmdXnGdRE
+Qb2875RKIevWlZLFI6p8nzYHJZWWBEaneJN3O3av9Nk
+-> X25519 w4QdhZ6T83yEtmMmHYxuM6OzvfxKYnDRSrFNnT/DUEU
+0/wyhwb9l+apT4f3yLycoNdc8KAGD7jN01MP+rIQSQw
+-> piv-p256 +y2G/w A9zY1wzeRZns4KLJw9atZ3yeht6C3hn6ZX5/U6/gKsZj
+WDgCACCvTzWvrGEnyxH/5m8IYF2L+V0Oju+Bpc207oA
+-> piv-p256 jNqd3A Aup30eQTR+vsmv1cax857STTmDcLZt/LYGr04A1b+gvN
+EfrHZNnE0kVYs5pFPjMEJBGGvQWQMCduBYcLimR/5uM
+-> 8J-grease
+Ke8pF2bIDFLnG7x3WE0nVjs0/b7uiUCWsKkiMGfmGWweEPKp12WzW0I3nbY0W+RG
+mkg2tLP/e3f3Bg1ojHGLAxviPNarGMLHggHfqA
+--- OpZ8utdErw6Y+ft54h+M8U7RqSpiMrVLmF5CeVgsOXA
+��0�S���=PF��%�)�t��H�GP��WD��^Q�A##e%��A~��UA>���
\ No newline at end of file
diff --git a/secrets/hel1-a/headscale/oidc_client_secret2.age b/secrets/hel1-a/headscale/oidc_client_secret2.age
deleted file mode 100644
index f5700a6486065cec326d2e4880c1c662afe11f33..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 635
zcmY+-J&V&|003Zdl5mKEg5VN#PzbrVX_Gb?PEFIM=`~4vNn?9i&Nkm^zAj&HlTlm+
zLHq$udK@?(a+B!6q39s4?uwJkZ6b%0&mVXej)hy1kyc6W#nEP*I-n#F{2rQRE^e7k
ziXs@a?D=EcLFwFy3*G6CjQMUf9m2xa06&R)rB?=Kx{6hPXVTCMMOo1Zg#~(*Ewko6
zCar-|t8kyHvowGsEJ`|p+fTF#vnyK?SLfUOU*yz!Nk{9E@8pu}>dnwoi}utJ8=x&P
zL2Y(55yDBo6Ywj9@Dps8?+-b`i>6$av3b80EHwiftX34=I8TYhkiquOHhDfIUWq47
zs*Pe*a{wU9IzVFuN%RY^1Pm`!VaT$%!_OdH+1jeji))u_Gh*qGOGMfo5p@#!(kQ3r
zV~!kz9ngWM<~5{MGgjhtIEYw79CHTz@ABn+v&EupyK3d`tTWGM1SVpET{2-*#giQP
zX&I<PTeaZKmsR*M_7KpYrGU$*s95u|WtQ>)f_yj{E3N(zYlML6_!tL$M=rJV%P;Ta
zPHHVO3k5>2*F`*@&6%X0PkDVd$ZaOy$t<@v1dbt>N~8`D9LLf1!i(v&X2ihqdBXI&
z3pWnuJvE&!f`}BzA_44}7IH<45%Pxg{S|-Z+hP4DI{x+PWbfwP->1hLM;G3`Y_*iL
z&l}{m!_A|uM|ZwFljIk-izja%U+*1W{;5;-hl7Ksw;t$MKSq0JUF*k*_}bk#z4$(P
Je(BBE?Z0_Y+z$W%

diff --git a/secrets/hel1-a/zfs-passphrase.age b/secrets/hel1-a/zfs-passphrase.age
index f567dae5bd78830dbb3720d7b2ee55167d687058..5bd3c7cec7390f1b26b3c43e366156a972edfe0f 100644
GIT binary patch
literal 695
zcmY+-yRMU9007{@jnUaeqKShIQYdgBniGLiTH60F6zDC+L@wph%g?n1Ts(=BK7q!>
z#Z4#UVsczg9CR>I7YBU+2S-N-bK>Op0^hyBC;Xk8)kzVd-3^ol<etKaV?578!uM#F
zr35_Cvc3`Ey_raDhAqp7(l~J^>)P4`)MP^GGdC3kzBC%BNm@4^*b2tNl9ddFN@Go^
z25C>70$Z*t(y04mI%5V^8%=}2_F@v8Z}Wc<o3n+nQUFCOe0wcKv0e1FPUeTCFV&_x
zta&f@ig9VtJZ5)5=$Dd410gLWOH|nD#;HguA7>d&f<QwYYgT(<n)ByF677kEW;wi7
z(<*tuMVd*c7Tfr>Qni=697$bUD=nsmMWGu@v#i_hUS~b2oF`Zdtvt)~ph$P^Q4Qsg
zQc1IEiSB-&&SMn$F62ip3yf0v?}}mSbwpfDWHbkpC>($)0uve3tNv`$lQ$7FnN?9s
zV#Z6yVY7Kp3bDm<t;jOR9ErUd)j8OQHc7@gGHfKdakD0S-D#tGOWslJ^Q&`fM+BLF
zFZc00yQ1O&ZpWog$~t~~;gmOHERUF>U|EeWLn~a&1XD%nHUnFyULCr-VlS&u8o~k7
zl5=tbJ;jMr)28MlE)>iLbs0=qD4gY>B8iILdTFF%u4xCb(351eZ9AKEcfbgOz&Ald
zS4csi5P@4rMwxR?-&?WTxbU|$PtEqS73?%UuLqcU(t34zcJb)`x1WDr%OB>ld->TT
xHaoT7+<AQM`^(_{*ON<6;fuQ<`|<AhllmO~I(u?;as9#r?&0sl$G2ZT{{_L$>WcsX

literal 721
zcmY+>J&V&|0Kjnt7X!LG8FUeAFKN=W$s(lhd25nh(xl-yOq%p*UYaLK^U?+sLBYYr
z!9@_nQ4kJy9fbQD!hsyz<SsaPhm)V+_lLg?yrvf~vwf2LFg}18z{(cVe2i|l>!#-t
z6xCu-z-JQ`pm^k_K2MT_iBYy<?8!AX#w}9r3scTsxl@168(n5&P%($B^tS731Bx8x
zVY<>YS8f~FCa(l{A}uV&=!NDC$U75S%PY<N2d&k;nwi^?oh7!&K+J_$f7QiAFHI$f
z7mb`UCM=nkLdYVtOv&Ne4dO=SDJ&b1yF3^tkx-RGcRlb;E-oxOkH@*rT?vU_HWPyC
zpp88-#wwJhxhUP)oo;L}qh5{KSXFkU(cYQO%EaQ5mKDpOJ;;d|s}bNRY9WRGU_q09
z$ODD%mFjXh-nR70;6b29%fu4<xTxy?S-~`QNfu?PRt_3c*9mY?n*GU$5_mbEk_=IG
zGd}T{iOFBKHh|y45irKJvJoVj<tfBuq|JduxBD7^N;YF4P|C7^A+~|Ld39ycO^|u^
z)<dlY!yE^w@$Bee`PAy5E2+ddln@Xxv?QW|hmzyPjASx_#j;}2X|wajhK6k@+E7<1
zsQ3<;cv-$vwgMp->LO39Y?V}fg!P@QUn_BxPwO}t6dO+qKp2b!(#0}CT|~25jXQAZ
zuE$EkMNTb}n9*Ynqy6REW)qEzrKYVdo-b-h)}0;B7BX(Mu@OuIVI*v2U7!xLG#C&S
z^6mWM=kV2ycVA9F-#$D4<9^q_J~8Ka9sA_r+g~q~!Qr*{(u4c=&OW~R@bXmr@mjt^
T-~1ijdVca~K0CTN{&f8>^a}F$

diff --git a/secrets/letsencrypt/account.key.age b/secrets/letsencrypt/account.key.age
index bd8ca6cc683822b412b65843a4e8f11d8395a281..6253de38a0e6be5c6c416277c44dec19ff77be13 100644
GIT binary patch
delta 3894
zcmV-656SSZ9?c$*EPr)SZZS7vPeL|KMmcpvV@zo^P&8$4Q8!aLO-MFZYI#U@b!ldH
zdQ)m^MG7xNM@wczM=>{eXHQizIcIq|GiF3hXLfH!c4~1=a%5F)O-@B=dO2%tRSGRW
zAXqXrH8D9LGFm}VR%CBhQ8Z0Xa&T;DS6EU+S94fqR$);|R)2RvF)wT~WO{3OV{}AS
z3RYD)X;DLKGFnqiR!?+scWG;PNN;&gSTr{>O*U~_ZcbD<GH6n5LUD6%3N1b$aA|fe
za56PEAS-z?M=y6EK`S(ROiplfOl>%0dR0z%V{&$OQ*l>8R7yrSW^G3@Q!!RFFET@A
zd3Z8t3Q99rGbeR+X+wHRV@X#+FGN99ZFn<TR7YcMcxOXdWolz>b6G<)O=50iYm-p{
z6@P0`H8gi@T19tiVnSM3OgD5^FjG=?WKDT(OKVy-WMpb}aWzaUFl<*zV+v|HVK;O_
zLv}-GS4S^aL}o-|GjK_9V^nTKD?>^!I9NquQc*Hjc{p!zZwf6wAVN(oXL4m>b7de=
zZ%}exN+5h$3QKB8b~t)bPBCm*ZE$8mG=DX4ZEZ$Gb9insc~x#ULr+v^ZcTM^Ms81b
zGC4LYPF7kuc~(ewVlYuMM{`6<N@xmIIYcmPQ8;5{YC$<nX*P8?SyWY1F*jx}bwgGw
zXEJkcH*9Toa8+wFOf)iPSaMZJFE2$&L26-jT15&iEiE8*a!z_LSx-1dYcx$XNq=Wi
zV{A<;K{0kWQb}ofQBW~jSVc!lLO5q@a5rNL?yDH(!Y01B`ee(c9dK0xv`0i)>M{-E
zk-e4@RHR-Ob7yy9S}Q+1=|Ev6f4#e0GPFLP2FIB}qCPZ^LGjzx|4WCV`L`rBK>X%l
zDB8Bm^rLWkimP!kgx{DA@jiHcZGVVI-N`wxQzlZLp;L3CVKb=q06RxExm=lv!dHgn
zKO*!UYP*lzSyZ<1w&RaZb;Dx<HeX~k<GJ+^SwQgJ1_s(}>7omdjfJ}-)>S40AE`vT
z#mY$e;ZZd?rv$^OwrBHGRZXz0l_$UD12A-o)Q$*ElrNTWDFvlg?B(Hd9)JJh>&24E
zPC4o-`-97!{oi_~mb-67sYSC^nq4V?XiZ}2;H2u=A1a`F3KjxTjDE%h8FDf^@|ZV>
z%eU)!E6;fE9Z>|S^aRaGJ{JO$z*Fi}AzH}np-(;g0Wsbz{?Kbq0dEFf@d?6qDrO^H
z^6(9eV~YIF|BdpA>ulNSUVo2H3)4CmXyCpxgJLBBjmD_aNq#;W;Oo4o(jZ^8DkMGy
z?2!<8Bwt}FrHPHLuo=TuDDoR?O3pCCfRCrUxKi??_F>#&(2@A?KE@j-kJVOf(+?j!
z{@R9-V=DmM_}&5~bl`u%8l1c9{v1mh(dwDwZaPxcp_&3^zN^E-Hh=$K;dd^lF2;om
zAd&|6ES{>y@^m)*DH~(gIO{DKHz-lOId(5Gnp~+^YauM`>S<X^y+)W#(i(L6JV?G;
zX`b&7QBO}pYEVric+Ila7@7hpjY>XTorY$CQ#0kzIKzkGr#=&wt~1%FgBHovNv~EG
zfyaCoMftbq(o9U<I)5T7L&9`El0RG8(PcE?YYa;SL-6Mtx5iP4oX@6Kr(l)b0YUCF
z!&(&6+pzG-RU7T%maCKI`ed3zfK^f_G!B|p-xf;9h?>3MIY&J+HVZZ1RsGUYPY^Xu
zOE>I*KivDPgVuS2Mb0#9TDG5A`c}6h?uo|<ho@$;aYhf3PJeHwoVURf`$^27x;mn3
z&|@!eS4huOf!AKjyYs8`@J^PzdD=d@?2MPq3+_@9qIDaNc+JsT+~{fDkz)3aO~#L2
zpy~ckSx+`%vnR#nC*5~9PVR<&HdpSZ<SMEceb$V~5F_&m$L|VtSA)TEkRZ+5@Afoj
zvXfxmp(NG?4Sylo;G|-0H}8`ZwlR-+aeatCs9}N?6tf}uxnR^zz6-K*b4`a|=x>c=
zQ-uNsEmNs*`G0B?6JuvnjM*JJ?g@VCPA<;UuAI8Qm2uqs$EBFb36KYHK-mTwP#_MM
zb|2ET)6j6%{h-l=*P&1vduQgHzwNFv+>HB%;26ApaDS@I`{N+l>E6o6$9D-wv#NFS
z>*=abUNWGgf=#dL8umSRnV!)NRz9ih5z-;@q~u2-z+YV$MHj`uP)VJZW~l2j%k?{L
z>5@u@<_4M(u@to@z-&;OMV^P|_4~`aeo=4<pR_}yW_Kgi7rl&d7MFK`4fyH%{<0M2
zf9N3y_J7AGgIML(e3EyWOE1<}`BN<6xd+{9!K*C4EGnUs|6);!`xX^ic|;-a#2{#A
zHgHOXL(uqUJPqyYh>*h=2>_Kjsp=;*Sdne9UIz)ZDEm2&@*RMXhgs5$?R`UbgFhP7
zJWyx%KRv*)R0nL?4J+rdoFkAJy@YmFu1BC-4u7#M?<#4LRI8EO8;Q#haiYQOS@`V3
z4~;S+5DN(D->c2F{HZ*_(PN=YREs|Bu3r|OO&G`YDJUgX>#if!gT6S=*Ov)x^Npqd
zBiTcH>kjSo@2@MFsNyJ^4z%h(7hscmRM6Fz-+NhW;D}j|YGRPiaF|Yyt5pYRvT4L>
zV}BU!HfN}>EKx%hkXKMKR1vZjf3lL=vxpHrAN2@e<C8+btj!s^C4BD6eaFEW@5&rV
zHA)#iMq45Qoy{hxyM<NAo-HYvtfbR0pi1Sbn=?5eI@celf26~MOUr;&j-|Y%YQ(Qq
zO!u++aRF89%e&HJ#fya)QP0+>tbKa89)A+AVk-&Auj&u-$~xe3sm=X3Zqb3tP}h1R
z<dHTo`o;X_!v9D>W0z`utKzJL<q{8xhIDgWbkv*;juE|1Uv|wIBXgw3YsOQHV+6~H
z3<UGN3+q`HL<VUWK-M<`Bi|3XatdbPM>!K6uZMEI^_t20DwR1VB?N4J*6D9x(SInP
z8lwFocfl!lS&Tr}%Al*Com^yOP?+m-)i7aM4V6M~eX+kb_#$HW5Wd!*=e9L?fjv<l
z`h*v^z)9^XO^aNLbFCW!Oe~l~wVzpgF&e2yj7oZ&_NUfmU9gHD8ZklWq(4)`xxurU
zQb$NJyC;=6>vI(ooXE1-UDv^~4SzpGZy1vpe;3RtzP%%nAd&k2&QV*4jnYT~Z;Q|S
z)&M)Z58U_tKoe+H-KXt;OtcyKRRo^fQI}f%3HSxf?py<Rf6L!)Q%$O?Q{V*baWI$I
zCOF{*aJRlr6><tpC`BPfHj4hs7#z^f<}aUza|9S|%-<}4`ITV7U@Nw*jelLETKX?H
zFlModXcbP^u;H-6HkN6^dzpXeNI%FAgrI;(OrM(Cyh{-r-Ko^CSn46yXju{4fRVs*
z`A-awQvN|!GK$JG{)8ctxd8cJtn0JljqEmTmBvTaQ!e8NJiZEzxI{218$*uA#EJ)9
zXJFwu0=GB-sE|Epv4-Ny^naUvup8AKqt$Umspkn}Poa^`aElm_LA=oWapr=GS`0EJ
zyAoa;UUKLKX1e5;zQQM=&gvXxD`|*ZK!&%v(nRDAWROA0DDAz3$1voc!Dz4bqo6^n
z=}ha`mC+$9#&fz@pmH1VP_cwhL)Tx8mZcA+vh!S*{j)bfwPuFg$bUfos5m(;fJk{@
zqu}cxARk3wt?kK3@Xpo%CIaJ5F!MJQ*s#;grTH$>zLerR4d_hilWE219U-G%VkAcm
z<x1cdaL2Ml3Pgewyxlnei~g7I=B3w*Z@}Ij<6md!K-t^P8*V;XtS9@}C3j3K_qDH^
zjJuYhaQGA2zwX?=Ie%;nPfNcrg<O)~OUsKmuUB}MQGTE{(P2-Zgp65%oSVZ5K>}6X
z$_gVwdEzwj<__&k2J7TanoqA_tDkioTJ=pV!4DsMdum0<6HQTRnq(saNf!4ooAStk
zc(iY2_Kxabkh)(7ur#2HcD8Uu)s=A#qwBBPb283KWxF?@aet8va#tpW_3f6#SNHj4
z^t9*zeDeolHBGjJJ<(0QXy#Kb?0N8jQ~uo5qQ(r5fNwLzllkiEDuD8@yQ+}qVJJio
z;iBT<W!75*6sA=I7n*k_atCqxiZH5mwr3wigl_57!q)^8d8ubcvbFw+i(J8Zt_-%=
zpUtI+%hFH!Wq*{mGV5-(873SV4Sy&*4X_Sf&?Oz6xMX>a(C*g5Z?j{kRGv;|d6tGo
z$SJ97^srfee%ZY7nUkvn#@PaGaq&Z<-WM0UU{0*Mt1^~;S#yf{X&_CKE8T|cD{Oli
zY<my6r1g9Mg%ah|T`EMc?5x%|YO>Q=HHVCaJm8MmcYo5p%HhnZ;<=HI!$ivA(hG?i
za)fr#TyfR83<SgjQMBA!xa$wh=)IpH7nCvY7gxnD>kmZ;rT)s2I|evr$No3nNb}@J
z`X#X~H?{AtSQ-oR)9f6k(1Iw)>gV(tv5{L0OWE-^w(GLq<UJs3A<swX{=b{$a8)|w
zFhf#v1b@5p-d}~Zsbga6|FwaLnHYqECKOt@B69^JrIIeIf`yoA5(=eQAjRhiROccg
z{<PMZY<*5*Ss=F&Ar&ggNtpE`kinF$g>Kv;`>mD&jPUFb-tH&(mzn_;Mb(V;dU>*@
z;sSL$IC>JkkU-4}HQz#v)er1)xxy*!T_ii&V1L<CZ?Pl-yq>p{qf1!n3_)5q525lz
zSwZUlS0&V9kW^IX8u_b~`+arU@-Ph;;F-Bd%Ct@|cWn^a=wJZAP1^XO=vb~WsoqhK
zwU`!J5*s(05;V1qS&-|$v&Yq_2<!N~{fBIUjbPWEQt5VXsQu<;)_^Q;Dsse0K*TG1
z|9>}=iFeMyt53Py0Xq$IDB|aLB#GJTlrNrf-|bC{tBBp>&Il*K4oaYl&osEn9WU~9
zN$Z6R)$_Zspj}4MM0n4gyMyJuxV{h;WVH7tU1+J?0JJ!zVbCpRdV8=;QRh6){)a8I
zxuq<6z9iu+ai*U3pKE%G9nbBYbIa)sGk;`B2(OK@6Gk0_q$-q-dy4!8m8FOD+n$QM
zr|bV0CVnxSAK$!iNk7>Al<^Yv=(=09Jlo&+1qHPG$rkhWU=+YEMDz?G!rQe2MJ8OC
z*St6_ABX=LDrG<r4%|-b3Dih42I+~r5#ZUOe;e>?oNQbaR9P=n+0@9(ZSzNias#=@
Ei1`~!y#N3J

delta 3862
zcmV+x59#pD9<CmcEPrZYG-_3CT6SelRWDC@Wod3mM`liBbaOUgYG-Y9S5Z$&D_L%7
zP)1K@MG8`9c6Lm1Zg_DrcUVb!aC1snLTpqxP)1^QFf&a<FJW_VQgb&eOh`>LcM2^&
zAXqXrH8D9LX*DlLVp4K!ICOd|IW=KKV|IFCG;wfNQ8jvacz-KIMQJxOK~h#jWmIT$
z3U)z3QAkrSVM9@RLR42;HArN0R8Ki8X*hH<ZDM6hFnMNIPIfe5WNCL*3N1b$aA|fe
za56PEAS-z?M=y6EL32Y!R#i7|Qg?SoR6<E>a&$0PFEn{%Q+aVtYE*h;G-OdiM^i?6
zIdyV(3Rh}!b|-f;Id*n7d0I+CLODW4VpwK#L2h_QW@m3SZ)8<rbWbZUWNvv`L6cDd
z6@M^cGjK6;F<N9bN>WfZHELE?FfVj-cW-cIWJq>cb!<UoV?=XEQBO8#GYU_6VRcSH
zYd11RSZ+5~YGguHc{5i?F+)^GVs~#@PE>X;Ze=%YV_`CCI0`L3AZ1@lY%OPUWnpt=
z3U)6^Z+S9UcTZ19GH*puS5Hc8bTK$LGJi@-S!GRFI7CcPcrQm|bYpHWYczRldNpB3
za78#scsV#)Wi(VqPIC%zVrOMgI8tFVWM^bqLNQoVGGZ}HXl8XtVsdUuIZ}2oXJl0h
zEiEk|aW!>XRxmk2PFPZNX*oenW-?JySW;wpRzWa$Mnq6HcW5gxZC7zZY-vdfdw)K&
ziCtnDW*Jy8w{pd}AX29Vr82I><W#|ZUorED68WrL-3Q2}cP>Jfn`0zb@y1uY27P=v
zRK1XOb|Iva%qfEM+k$S|C-<Xyo&nbfg*LiO&A6cU2sZkw^6VkB85T%aoq=uUT7~zA
zvgr}R3>-Y6hBa+7FQ@4p|L4pAWPkIX+Jii^D}eCidx@4msC<X<(V5>19NMm{@|sE*
zRaPu5O2uv9VPVK`D+p$jd;U#FijE9-)T6+h+DU0s(kGusc4V6+#@{H!*<!lHJ5V0B
zhXM*P?!BbY+z0lOGQ-=h!D9w2$|eXRbm@(d>|8A<)Ll^{pjEgODDW7aA%9T|7<;*(
zE8W0Y5P;&AoztWQtE5*1lf}eCR5`nRWWS~Wp-$KKuKYN1Pw<!4A!08V(R54s0YG68
zku<FWV)B4xNOGvg;#ZM=%w)wQ6?Nt5vZeOkE*~nD2{CXSoB1fJqZxbYSrYP~Vw_=z
z|39nWVV2bnU+vX&8{<N}V}Ake*p^;NgsH~$6?BoZeknw-T+~)L_paDO+i>tWmF87g
zyo?9!K+k(fBB3Z@zj|Yi$<Mab)jkG1J>5M{3N4ukL8sHi8BW~NeT%MLuPMv1;<|gX
z9-Ls2Kd7<XetWF0hUZ%9M04ebG-#AxM=zu(iHLZ1hHOqzBNX$htbdJIymn%ymJK7p
zgtPR@Tm4DDK;-37ZV$yb&Y&>Waru9n1*h>hq}>z?KMXwMXxVfhH8tupomzOsB(BAj
zxLW3&+mkZ>7)Tj4;DL6lye|vR>Q74Ep7^em3D0i~snQTC>aE3^XK>7%-LeQ{X)a>R
zhY=ejpvkje^?lB*K7WFtoc;rP?Zvd%Jy<6#k2q;>f2;)eMGM)K2BZ6ub$O$dySeqE
zlP(P-JK0h+k-nHw(Y+lKLj>9|N13nzHXT-98rK3xf-pRNsIQ>nbT2UPW=OvbG>#rN
zrI;7m9U)$D_OxGhMI%u54Xhql|9uQ8<zDD*+`U65Hsn`_27f<Yl*E^U0rAB=DPPBH
zpSgAK{D&*NGxfC#uz$4UG$OQw5SCv!$+POdRQ~C|W6D(deW9k@k*ljWj`<WOLfLa<
zkI}4%@eAs0DjLH=jzC~Oq(8zYl|4JdNi-TRsK4MEzJmB}@J`c-NJFkRRjw|11)*1_
zDPchtQ;`SQn}6SB9oEn#QL>6p0oF;-<I2D@T;mDXaV7O}NfVmW58S5QqrHAgUN^+T
z3Q%etI6B)8`);%7g*lqnwI01v)s#)gz%XrkE@MYn0XLqXkD4qwS8JKjDX-oIU2tui
zd+RzR%ik5$sKgwSW)`|-DLG=!QwTq2t65l^z)G}Pv4864+?X-)r_MC*e>J-qVVUO~
zKr^-$a~`&RY;BTI=4jvUe;+wIVrV512a97gmX!`2&S+aUm51>S>Z!bmihbQpk)w62
zSd?>7q$tHdntkB-G+8(L40Ekg)g~U31m&bw5`7=*@Yr)-GD_9!&23Bf46P1RTS{*k
zk1OLD^?$mGZ<aNj6Qn}Tcyx#r?m7wa9g@fRhHEA`0X0JZ-pGhmC=i=``i+7kM?E6%
zl^+6@P3&w?F1S#42(bqa?}Y^gxfU<iC8W7hnxV<!yaV4fE^@wK#>PA%a!9o^!9zoO
z68ZZC_CoV920Cv`99ah~D0i>=v4->t3QVnR*?&cBnOvm+mU7ioO>SSKmiE-H?u#2L
z_GdfvM!;%|^_ADGN~Q~~OL0DEC)LM<?x!lGtEtFFbAmJ}Ro_!-&|QEK3yN&J8FVV!
zJP?_(S=qbf1$ITl09S{<8*siQYR0#H-$YIP#ksS*=*W(EEUYXwb5P*pB&0urwnF^5
z&wmfWDFCs!>l|@-l1)(aMIhCH!JMPLP*guMN>D8X*uviKn=t6JWQc9Q57G{?6cAI$
z%b^+kRB6#IU4uzIxmrhpy^aizkYZO~I1m%)0@0DDeNuU>>~lEf6nJuZy|}+=h|x(b
zDDg`|=S5feagMouY)T30q!owMUO5b>pMMgh(<~0~rrB<lBcgF6s$PtIcr)Q6eF<Rs
z00y?DHH9pfbC?C8-Yqf?X+RCi4+&UDfR9s`&sWgoIh*H4VC$8gbcdvZD8lJyL}Nx3
z7ufr8c4>|d3&3aENS`=c{+#Jc^&8Qt(mOsd)hewYyXgEQVOBYJ``s4?KocGY+<zX_
z7w04Qvpi;Diu)KV+^B?IH+HGT8z2LCxB5{JBH=O@B0%enV<s_C8mEsssvcxambx^w
zajOjfY)@oUy6eeBc~gkpfdwUQ*4wV%ro6kupJrt2y2DIHa~Q=2A+??ad}0&ZjS^^i
znfw=7Ly^z{ZXH^6JA-mxl+8A&HGkOmeJ(;EqKu~|X9-4zTp;Gy+{i~{Jp(~q?GHTP
zY0;Aw&8!v1Xm$p<!_?GKY_;!fs3JT3-?$5w06<K=4QxQAg}*(OJY47irxuADUJ9v8
z*YVwfQNO%xf)pT`5$|16d&(Jq522kl?ErQ-Bhe-ut0#-fkZ50Zobq)0b$^Jd{&9~G
zmo<@L%<;GvdWE9eooDUtiRmNP%Av3yN_b#RdL6wIzm<&&l>=$|wa3BBG9~@Q7j;AQ
z#cX_o<KOf!WcS|4F0aoz_<bqZLhTKU&jKVjV4C)y<3Kf~oRgB$8YEb?OP0LI6$*P@
zG<0(sH_yF4d9n0CoTR0qiGLX0Nq=n~k&5>GdzTGlwrQz!GdL9-gFY2nf>dja6zGqW
ze4z;dI$wYIi?dTWi;&9!;xElAe!W{jzSuW0*Uy9r?<&msN4}to0;5@X9Pva9qBr(P
z>C3Zy^qFs(?^K<rmHMR(&^F!7(ydJo;HZpRWao87)wEe1OnTRstAB*^2rdJ0pD@l=
zw#n5eXM|PhF#U$tpb+KE(#*x4XO;AFKza2>8O{Dh+J5%%z&~vYgewT`E|6MZW5jX1
z3b@jnNFd?fa5SKH<nS>Q$tJkhk^ta#I$iS&*Dp+YvDUM7XI;0#o<@j4)ZZzB!>4e{
z(T3)u2eZal`lmfEPJaT~uY%2`3@Bw1*p`CBD(s+($o{Dl)mELDEme{z6MO@QW>;26
z@K)ZN>!67-kq&amMRycfvhbS3i$S(ns*<}n>_o)<jK$|tbZY)c71UVUR%n3{1Nn$i
z$80dYIUOL%g7|<H6f@pkgEVJ=>R3dEbG1{=wdKUPT<;E_2Y>470Wez|%#Pr!OSygy
z1dHu-h(m<$Mr~4rGctX775+wolPsa7zf^Y&zFc6666~7`eZ?%$A3SI20u}yTGIzL4
zy`G0ytEfPi8s5LqO9o0KnQbog?JFcw5JvO#d-q2?<uznOJuP90Jip9~QsuDlzU?NX
zHPBBGwmi+4z<>91uw;{s9-yvSr`VmjM8ed1rRFiz&UmY;BrreKVq{6(hESFIiOoJt
zw=<LZz?LSaOodrG@=?A?J!OQ)piXvV?$P6Hsm{<UPn}H_=3ODO0IKRv&DsB<k=R*3
ze~R0BQcKbQGHY<Ot*(@%=nfvQvm9Wjn!@)zX;$ochkxvIUpZr~1GO-Z&(9wtO$jM4
zG1w=dz3gW0KBJaQzp9oTcD#?L_^;GJ%*#)@mNBUUyj@4LQJ?*`-C^~TGrhOl8fP;v
zGn$ciSJv}uht3qvkrYItJgEjg3H5|`@+Nx^c}%C;RLn1_m_+u?Z}&(3p$t|<I{XS}
ztvS(JHGgJ+#Ryc!mh(^2&>_>WORaP02Z@d&=3z)LVF-`6O-arKDQCREDc^AieL})Z
z)q2aS1H-c=q)%h`$4_xxLZ`(dodNU`&K+pytVR(`8YStYWjD5AA4i$F;knP7Qa|Uw
zM0Or_i{>P-6?zWy5*|=w7g<&n0ok^XfTDz?W`ARM6!7ad2DuKrL(HwON`lY6K7A;H
zuSdw#PNnbB@u+T>X-cwyut5f}vQsDf0rV_tD4q_U-bT{JW}MIaOE#*tpn6KO`!HVI
z?8O)?M6rp_n^yoHHXQF^H*#O;_evHx`m_L`uOu2PG~ouIfCnmG)TpDkKloij=(Gh1
zqkjaTjYIk);loyw)A6wf90a^+7<6#5Q)ldm`J_C2dLA1dHV|lO6BzTw)yD{3z^gBe
zjrv&BAsy~|`$qg|2M&$bC_vQj42V3-i|H&pc@U86y$wB5NpJ%Tw3ngtgSTq)=i&Tx
zeK}=ky?z^@2VFcrg}o)S8qxZ9^pg-;K4ZA|WQXAGqrs*NaOhQi{kYIoNf{7a*l9Dh
zO+rh;HIsGXCYoqT4dSa}+}8Uz7)C*hn3|z`?L>D)cFeP==R^(esBlqyEvWrt0l^p^
YpESbd7Fh1HO+e>ScNHTIg1Kzwn%rd$?EnA(

diff --git a/secrets/motiejus_passwd_hash.age b/secrets/motiejus_passwd_hash.age
index beec18d46c5e39b44e946dd54f2a0a49cdf648a5..b486733ea9d0474a14f416911154e51e31df6724 100644
GIT binary patch
literal 1028
zcmZ9}$*bH10LO7rgfbvrte|*^1rH^TnMo$ej1@84%QnemCbK12WhRq--)BN8B8ccg
z<sItDs}(CEwp0Y6i1kn&h(f*9g9};_3eS2F55+z_*}ve!_xD@bX4{O6Y?l;n96b|f
zHdJ+6?dO3!ciQF#M$zs7sAz9w*?_=B$jl;{r6f5P4%cj*K+@Jl@{}A7V3yNTX^oB{
z!Y6ty3>nVRO-YNgkx{x=v*{*L8d_GVc&Kj4u;IxqjcZDs_3zbeA>+n2&=ZRgLh?DU
z;L`+WXe%Z|C)t_af>805jY82%QW;vS!*Oe@ggd?R`ilS)u~62wVc+d;M{?aGRR`{Q
zOU&yuI=fB4{9cVB(*hd<N}_c188ypU++rFKo*40v%b?sF6*8E^#x&Agm9+G7FK(%&
zwwOd((c!D6Y|2fA!t#Qw0?yFmh+@5s>2woe!0Lf^q%Hp&5tZ;%5h9QBIfKunJcxPO
zt@hT1l|<@{Gm;I%nEKY@0>4F;CYMu2vsreB6HIbO2Hb<(gvui|<^*u=)MKBWZWrND
zIua7MY9}y?0pJd1p&B3(s3RmODciJY2=Q9!u$u_?#6V?mu|JR2I^!+1@wC!ra%(Vh
ziC9YP6z1iT4R;$ZGUD}cs*4d_s&$D`>Zk(q4YR2KXL)kEK?s2GJM+q`U_q2ZZWiPo
zxKa>wic1gyQJLM$m>kY0^>W2$^VS@Z=KU;eB2j|+V4rvVwb@7&I&n54!Uduls<gMu
z$;9E0tQTGyL?<GpZD-~xH-R(Fb5Hf6r-AeY%XQeG4Gf-Ky$m$)(k5Cu$%homV5aMg
z%qFY~YE_qk#e#S3yesr`g~xbY$_T_BkVBuqn}sqLwRFCs(X52mEk5rcwMM}tWzKyM
z9BD~<w`x@wfiU#zLUfQ>n8u(V?$Mmwo#D-p_kCf82RsBy!QC6$Z9ue~so$doYK9^-
z+>I=7N7BY<2N~!{*%boj!`UP^rg0UwuG^O$x^e5*zwg|-e)F>nrw&R%Tb?;~{_}74
zA@>|`@z3$`;^EWh-anii^xi3NXRo+lee&%24=+!Dc=hA{sW*S;4-T(<`eXXU_a_%;
z-+J`oyV`pPcfP#w_T=^DmE%p`e(`bQ<fZQ(c;vA+?z?=*p1%E)^~e4f*RK9^|JT3$
Yy#L^Z=|>oG?1O8s{c`rNt2e*>7eSe6(EtDd

literal 924
zcmZ9|&&%6%0LO8Ls1O7Z@g!<a+e)lW(xgq<9OP+|rb(LSXPfk}$27mcd73o8pQj35
zw~ITdh$x$|%ccjxF%bn1f@23oyoh+%{DFUfs33TldlWqE@HxMDf1J?o`l(wSZL2s-
zU&xBE*I-ch99))B*Y|Le#71z#fO!zYARkN@=qj4Wex2(U#s$N*F+i#Vu4bKqmtj3`
zo;N*3GiQ(kvZ29wbT7~g!LOxJ>m|$-QwvLKxW>sX5IG)Y@ohYPPz!~ES3_803E_ZL
z(Rwk`O}?iF7FH)jSaZuJP*)4I9<oLw>!=!*5X&}YmKyRh5Jv-E7>kL7u2%|~%e+)9
zHw$8ihAf&6M?CwWHr~stfeI@o5n>#rXa}X^&v#<5v2|8G3@3|JT4OSjE{lv)W+TsP
zA)f-?uHmHn3L%7j-VCWI;1R2@8M<s10Ig<GoT?i_Xpc4PzZ1F5p;q;nJi0$*!5e^%
zV&EfWrf0he5MwgxGq@apB+a0{MWLFF)V4Iyce!PjNS2gIP2$6O&=WbWU5;ln6mQo|
zc`R(>rn|+-0gN2slU@tck?iS#$qp-j;sRTkAsQ%%m0Dz|RSr#Ri&Eq;iq<>Fz@Q1E
zw8SBwPAOq*ly0?f&4To+#M9Tdt;t2Q?fZ+w*<$>^HUC>c&b>Yj(_2&w#AaS_C{T`4
ziO1HeD~6V)@91F93k9Wc6}b+DCfGnnXk3Q8yqr1d0s-O@09@a-1dF<EChrAyPLTaW
z(xyf!dfau!-8YSHSoluq!;|HH-GN_*MQ{o^KNp~xLRf2BV}dZiOKPqrp*Quh3@`h1
zAoS!o6*<{Zp>DSePX@G2p@4Bj$2YKcbuhz3WV=NAc4^k=Mz-lH64f0OBqmfA(j!kk
z@z?2h@4b0>bJM-}#?=>p`E~vL)02xq^lfzuItOm-|90V-5AMeF_{^mnw>z)D(mDBB
z7k}vOx6XckIUaxg^J7=8oIln4@aQ*Mr^8&k!`=CKgkReO7ykU|E9K+{d+y=)?)~xO
ttJMkoL-ou2y7$!8+uvXR;-lZs4n95c$>Yzy|I*#hzPof<y!rP#{{XdGJWBuo

diff --git a/secrets/postfix_sasl_passwd.age b/secrets/postfix_sasl_passwd.age
index 8ab9d79..30e657b 100644
--- a/secrets/postfix_sasl_passwd.age
+++ b/secrets/postfix_sasl_passwd.age
@@ -1,20 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg EiYel1eqHtQEj43hiu6quafyM99P45uFjZY9lYoi3zA
-LZwfmsWIk5h92Cpwapbp3yaCS7CR5UrxEvyT5Cq4rKc
--> ssh-ed25519 gJrHQg LWRDAEKPdaN8twZQIMDdfXt3trtFDlo7XNHwtUfy+m4
-cGyusZ+nAYIbSf8HNk56kaBvZmS611GgKqSNbFcXKrE
--> ssh-ed25519 CBqt6Q +u/wA8HvtevNso40G7XTtNSNKAqx4YEfMHQkenOK0yI
-d6TvbjYzab8x359nCn030BWXdim2ctr3zgcCA5lK+S8
--> X25519 Z7fou1Qt4oIKI8SQ84B+q7xkThME3TSADNqvAsvLC2I
-rxbx10UaMCaYQrsH9JAKpWoS8LMwYh4ohkW5n300b5A
--> piv-p256 +y2G/w A1n6AYJiG0tx27wTrmqxr6rkm1OgRV+AzgJHHPUD9wr3
-mR3Ac2aedvocKhfZa1meYHa5D0vx3FwX/94WKIIxNDQ
--> piv-p256 jNqd3A A9VMS4tvV7B5qXyrZiheZMNTpLayaXvh4f/aT4Ey8Afh
-kRk0hnI94fn9lv7/9wUg8AT/98mPbD69xILMmjA4vfc
--> d+-cp|lq-grease ,2Lg! sJ a ;,
-ubRiOvE+OzriAqp2TSsMn9LjRQq7Vw+1mTLZVdyR2m2nNbq1b27AmKZGzi2MyWxi
-NfA9KyiGW42U0W46
---- q1zYEFDCyNoHsbw/H4/N7uqO8+N2+ip3FEoSOPpTzUY
-�w�}	�pb]�3����f�˸:�����"1����g΀XE�n{�vzR��F �LT^Ƌ��.&<[���c��|A�7
-2��L+|I$�F�,���4�����KO���s��u
-*�DdkgG��Q��&Q�?�
\ No newline at end of file
+-> ssh-ed25519 vDjOfg 6fa6kHvbSkI6F9S54u7FMduv+YmuHUGTIZz0CiQhhnQ
+sb9iRMQeU8w8GIh4/iczLHfq4HmFEEClyeVq0cTQ7rc
+-> ssh-ed25519 gJrHQg 5Vne+RdTULf2Pqq2X9h2uu0Q4hGX9/FjfWcNkTJa0D8
++Uv7KvCDlAhPhS3vVwzH+SLFMkP2fIiuwvAETksdasc
+-> ssh-ed25519 CBqt6Q +gmJpUrMj+6ximFLkdW67k8TKfOQR1YAz20aPsixXxk
+pM4H8b70EF/Ga4y77BPobxuUF/FawBcrLjVBxEdtvsM
+-> X25519 qbNRcP9+m4kubmSsRYE6vIU0F3x5D5hilQ27CP1O+GA
+BRiup/KQxlqX5JoWy7aJjon14Mruxv1JvftFshuyZKc
+-> piv-p256 +y2G/w ArRtqE+8sVRYvK8r6yj8UhYhCJeqzH1fYGo4yK6y/Mpa
+iJRdwpx5glVPzuI60f1tSbBsWfECWIkUIY6wiIeF+yk
+-> piv-p256 jNqd3A A22i9InHF96PSCvrPWLmgS42MLwJwtMJAVYr9u4qjmD1
+iqV25lJ5k+Xg8L+Q7Xc9EFQV+QnSJZgUJDy/eD8PKn4
+-> DcZ0C-grease
+auoi
+--- XTP2L0fnjBcOJuu3VkZeGvO2QSVngpBuNtvQsqnXRDY
+�M��(2[o��ӂ�D�}5�����$$��*��RZ��ƃ���}���TA�/��H���%w)o�$�37Cet����Z�����7ޮ/���֩��'��9U�>���S]�E	�N�j�kV˕lK���u�
\ No newline at end of file
diff --git a/secrets/root_passwd_hash.age b/secrets/root_passwd_hash.age
index 982689b3144a72998fa5f562c831614ad7705376..dee1b87948b5bf989785f3bc6edc831ea7831304 100644
GIT binary patch
literal 916
zcmZ9~O~~7H0LO9AgOH2hQA7fw2Sb<lq&YldnzU(~HhGe?NmD^+l7HTwv`L$nHer|f
zf-=yP==3rk56*+^q)ZqCL6`?GzAzs)Ps0si$b&FJ5AIPPJZ<+MeBj4-5r7t0xtlsG
zqI7j8-2`ZbL#>zKJP%vIBWN1u;7W{DKY)=5fw)ZGuJr*aF5R)v9f?B8Iej|b9!N{e
zRRPwSaDc`rC`$T_PfvYaHA`-)bS2W+%AzS)+@u2<6ffLDNLguZk?EsaFx>RD0M=tf
z1F4n8^Jd!-$woJI9-BCJM=p~2YBZR|&4S)Jcsg?-LLTnS0d5MF$PP-iz0wGio5W)o
zLu$uYL#7~5*3-9~7d)y7opr%zFprxvy`3_%y1?Vc5yNH07v;36VsQ=3-N3O_M>5eK
zATTJUQ;P5y!%Wiw!zKZ>lKmZCB7Ga3NF$=ou_0>GNwY$*Q*HMDiRE}b%Xi6Qn9OKP
ztWj)9jV6+|UDp&6q@_Gio0!+eS;JEhuoobhY?fVQ#Wo%&h}4L7Md5fz!xLeidjX@Q
zwSiHUeJW&8)yfE(fsvY!&@Idp{i(xkD$7PK5H=y3lzc(XNoVL60uGG8WW@i5c~q4?
z#0F$1_6^4$aBR?IV44MHEhsKW2|F(4+|)(cu<Xjar2UW;D{GJBVZJW=nW)$#t0?1M
zF3^C}bt7a35pGpVC=<i25R95#C-5Z5FPAfGENdR=dO{<GlChB!tYUflV7gUjBP!Y-
zX^UmQx9Xl+&qq`%*nmY2pt9fXu@u@vGDm7_3P{=sTdsSf^-^KWEfsiJ<I%=`<aOGo
zWw=nQ)q<<i?rLd-n2zd{tjZ+mfsxrud9=d&Orn-9B5)ern~V4q+Q0aQejmF1_tlp>
zzx}!QY%agAe0=!K_y61rAHVl?_p80b4}W;);_v5PIlfR`sjoejz4`jvx88g5!R6Pc
z<lPsqI3FFs>6y#k(fXGg=Z_APy-&Y=>;C6oy!+(?@8{3P<ENh+-Z+6TkRSYU>BqCv
nYnRTS{pt9HJ5T*}?xyWs|MmDfI61k6UH$GG?1@k2_N)H_)^A1a

literal 997
zcmZ9|%j??&0Kjo?N<c(G51z8kgIK!$@@(S4-!Dm<SJS3R)3go3NSa6Uel*QX4?~8+
z&ST&Y^r9yf5fQuyUW6SK4_*f9&H0$_IyOaz`{Bv`1K$sPP0#5&$+l>-(od6%Y2ghj
z2<X28?)SUCW5XB*kzh3nWY+`Ppk5zFN!U`R#TddU>nv%Qx{*35!};3GeV)}u2dy)^
zEzps+i9-A=+mBYT!3`IO-cX&)6r4pm1ILWnVd!g1q@ttEqnalcyyAg4JWn!x?hvaS
zPJ$srU}U`(+ZbvHd|9?$VJzV`Xm(pB1lDNYVAyzTvhpl-++s`{<*aQ=nfDFRQ~4ej
z#SolwDk?mxF?3$y3OFCaoep)n1lv_<G2TYv0*2iqrW{&bJzX6|0xB^HEBh#5FjX5L
za4s?>X<Ba96GB~$CZacK20l&G3%7&0bR%OFKRwgd|4npC!wuA=R467|3G7_JA#q%k
zI$=*NytE`uDQOH1{S7q*h%u_cUc%M_%+~y5T$Q^O-9jG6FY|E(F%KsQ`wBN1ZF?qU
ze$~%l3<rBH%nfRg3MFP3W_w#lj486U*ULp_WR@wDc0KUfCF$<0krFpfwpalSzE6}n
zKBAa`Qzy$dw-w6w(XBX|U|J>-HWp907KNr>{XZ+1<u*cr6ltotDQK;?9!!jU4F!i<
z)d@5Rx+B$Mvi+1)WY1$cb`1dtLA$o79u+}db1Y_tikx_y(leG!*^qHIj^)_b(M6i4
zXO_2DUl3n<x$hN@xp%<eSbq_0&jFO*h6s*HSs`x)Jk51ptceh%s%a8MGFBS}TrZ+{
zBh;BI)+=JNN#t2}MCDSn>hin+a#0MO2n$_FS2}AWBN{2|P)v#>A|d)w2rst}vqcrN
z{Gc^^o#4AM(C_y_Wl<($!xNV(QR!N&H`AdgHxRwDccB&dO*T^@FU=Zt<^kHxCq7Es
z{xQ=2^v~TZ_a1!kc2NBC6gl2KbE!AH_VGJ+{urEo&Wo?zIq9EVe(%<W=iarl^FIzQ
z6xth~y6NxOjqj9`pKpG73cO1H^;mV|>Swfb<%jEUo%{ak@%w*&@#N*=n+LA*$?K2*
ns(c&YKK=84L?j<d*UIZ(SzkXLn9cp$&%PNYw=SN4{<r*JxItTw

diff --git a/secrets/synapse/jakstys_lt_signing_key.age b/secrets/synapse/jakstys_lt_signing_key.age
index 722de03acdf8fa6806c9aabda83d3effcd5a9e13..0eab883fbb3991f7a93412b578aa2085e404add6 100644
GIT binary patch
literal 676
zcmY+=J&V&|003YI9n6iQf)2(-kQ$q$Nty^Jq<!0_O|NO+HffUKBwtOMrfr%wm!#g|
za)OH@PAWJ!xap>YaDs}si-X*vI0%9c;^N1kayt179(WAb!JLT|W#M8tot&LUZhnJ6
zu=D7A?qQBi(lo)LZX*&pF6w77u3M5yh(<vMyc`FBTIB0ur#l-fOk2!B(_^U-)Jhek
z-*U2?I<OL@z(UouMv4pD9Jefn1Ew!bn<B64AO;@JuzQ;N4+3S#$)=Rxekj-dB`ee$
zc3n0Zzy~RACjj@xK4r*2!zrXpklj)yxmizQ;`v058)Cag0G#pgayAKJ#4Tkl5p*@E
z><Qs;0}Dx-L30^d%O@xw2cbi2Gf%0SUWqYdi>(S1J7|;sf{;blbrgd(!zir`Du^+*
zXtoIX)O0Og0gN*+tX?f=82zvbhlEw@DJ{yb_VMD{f0o~x*##cuhtrV&CA~N+bQwFS
z39Tjr@w7SQAcdE8KZXIB_??`_q&cJm5|*QQ&<H0<Rqc{SSYFO4BB};P!yW02Bl(HS
z0w898=NellTbLU;#@s>Ebul@GDQKIj4>r;EX>EZ79?v>Oy|qT@MM;Bso^x@wr4|Od
znNG{%lx#QxrOzyeG~r^LD|D-pKOWNn!7vOJILo7<QmUk`70&u)IufcQp<kgCp|g=L
z_%u{X9NB486pq|GQCYcxAKuA7KQuY`_3r&6Ki;mK*?xEVQh4miy2T#f)INRu{KCGf
zUU@cr^mOa@#qque;`Xa+`|lhWe&2m~{r1uKAEv9{&LO>9UsiYbt^T~QQ~&k&^~;-Y
GcK!g_1?3L_

literal 739
zcmZ9{y^GUe0D$pH&>py|ix)*vi8V>nkHiBZ{m5sNG;Pwa;UI0^yh)ojX>v)LD30Qy
zlb{^9c%X2LgWzA_E`pQi;H03Fh~lD1ank*PACCz^5iF-+7VNqH@|qt)EFlWT8%Pv6
zMPQXG6@o^R=1jFA!Vg@h9VzRz-UIXmWd#`*Q`t30oNkz1yxnuSD%V%sAzLmeW6+V?
zah(_2YPsFx1!_cOe$z#pv9l5?O)quroQ>B51OH!xV#sR{iNk5zk(fN{Fm%?8QFmB1
z8i_K7vc06Ud=+VR&`W(w>k9=>CDB#@q+Z9=8B7#$8^(KrOjX1dC)Cujr$B8@2Ao%B
zHrnv-mWpw3ZU{M~I$#lo@xV8R?QsK}qP#)r^I2;g!E#gIGiFR76DVO7vA(A3IB9ZS
zBM(L^PgpUO;WA1hOuE#ZRw^x1r8Yv~CdHsssUm1r;;<B9Xq0K%Wi0gM#LAo`s5Uz$
z7-p*^vr?Ak`;zOTzLYl15nibEQZilC8WWwSk~yXkjz`3rK^kJ)cZhHnPtypl2QJ%*
z{;_7t$|4zr@x3__<+(gs+Dt-2p-+Zh+K_mo7XZCZ84@!gF}qZ*=zM{<Oq3ZwTO0)3
zs9(|3sVOhSnm6QFb{^{eR+=x|*qMd(bYop+Zx>+*%m^Uzg~568%C3p<$gqrebJaq)
z_-dic(B!5q77-oAX4M7|7+8}4koLMJFza>PA1%Cu?N3o9o(c_9FKJbw5I?<e@HY7Q
z{qWPn&u4F*?pxBA>pknWfAsv$&f(6hV_&x)6VJBrCokoT^?UnAzb5LX`Tm>bH}&Hg
kJNWQ>mqicWpL%!lmh%Ii^X>~{&)9nK=*0Hj!HeU603~+#xBvhE

diff --git a/secrets/synapse/macaroon_secret_key.age b/secrets/synapse/macaroon_secret_key.age
index 38bb4f3fb382b93f3ba6286566ea723e5f7f586a..0aa407dc11b45afb7bdaaf20a4b57836e7b2bb45 100644
GIT binary patch
delta 592
zcmWmAOKZ~r0KjpCIix#zP()OUsF%>SNt-6S2x;C;lQezhAtGsBrfHj`ZC>?Ikl|Sv
zf+%e0Wx@`6Q<$g+KfpvmL{VXW0v`vJiTVlt{Qggue=XfSzi{dkMso6$uXn-Xm>tLV
zRSNITCKU^0Ds!R*_aiQw0%QvibY7**K`A%Vu?bj8aX%YWQ7_@drUA_astbo27<gu8
zD|`~JWvLc9xx&S~0>Lo2mUj}5r%6d{j|>uSN7HgJFal<=2I!gDwTK=e$BaFXfIcOa
za{iFi99H!34qxX}SvEoym?k4x0#jPh;@G3IzRWbcP|^6G2;8_3KyWn=WDs3U@>qpN
zyI_Mx2`;S#e4sl#;nqdTt+hLIbx;rI3T>+i>nE$#SuUJ525m&ZNxO{o)lM(=48GM0
z1ZgPFK%qOvDH#Eq0OgYY#`8nR7HGzEx(C%rxz<8LKo|7TFnX*yh!n--wY1U<ahECM
zoMq=CA?3ne;P}*tBcLM7)27;1#Bm3xLsrMcsD=ic$lP`<>_24CTWv5B!55r~rBAIK
z7qL3lfXoU=RM37YjbN&|5Rrdh3x#}yszJ4c0&KB7M7$XXgHzSS+Nf1ht+K0^B~tM<
z7oJmPHFxgY-qzjgd#zi$^b!2~&g~6n<<hGY$g?k7uc6`k&kwbG=8ZQm9wXcDw)y?_
zKb!AAzr3?Qd$@o20M*6^mrvuHXO=!<{_c+lE5~=vu6{jw;r^Aalg71}`#oMh_37=S
GCw~FnV$zWS

literal 828
zcmZ9|&CA<#0Kjo!p0eRZ2Fefu50lN<rFm`RULa4J=B-JSrb(0Fko1?grcINkd1(TI
zSG{cav7J45(f?q+@OTk#1M#Le#e)ZL;@tG4f5C_E*N?+NxCdodRGWN%D=%ZT!JxrC
z_;^ePVSrN<#=y-aokuYoFplW-L$Oii1fhlpbiA5Wnq3#%MyXV*Tao3qqZeesAE9}X
zW)t8r?T}36d`leTQKJ$xVc|Ni2D(=@az_(W0WtXhYq4C4MhvrtNyg({6|EOQmGjQy
zTq+QlWH>zEAh|p7GcexztHWA|A%{81J=xmWyq=M%ZnCJvr>5zv2zt&H4ol0@x<y%L
zs<$sS=ijUv*n*H*i~tB8R7aAJ+FT*kS!!!Si}s_b;$~iOVDMChb_<}Dp=bHM=Av!y
zWI8~axfD89DqEN-)hzGO<64te<V&I0G=l=CXc*~m0c~NHo}~a=Ehko8xJ<9`+vU6m
z)_9EBf!XzKp&m}Lr%MUev(Pp&0x{WjO~Lf(NOr@pQC_4mn{fvAH9=HB+{T?rjWFXs
zR;nEWf`!=_Z+c;w6SIX#E$e-`(_EiUoUFIxv7~VU>&<Mt>@51IKxs|m2?*DyFyyg$
z5IUSrgznLp`YF!vbx4i$_B6L6)BopO+1-C<bGQFs5SO8U3}N2|w@#@GEB4ukX9axk
z{R~1))h;Nkm-bc8YC*}_pwk3RTrf&~$~l0U<SsPK44<xd+aj_!V;@HzHC!5d1j$kZ
zn)qAAOi<;#T(N45Ss4{e^Y%sRU;tMP$x{7^WM#EfMx#-&(K(>5F=|pv8`no^pPfX3
z*X}X{N?sZM^g7Ib`Rb?C-LHx(?~&s3r>}K-c5&y88#gXKfB4ap2S304``O3e^y0Pa
zZ~i!Y^22m}^Sj%RzHguXWnOvq*)QD}`6rjYc7D71M`S+!vsT}_{4{>ILmmacdKc-p
H$n(Dees&e#

diff --git a/secrets/synapse/registration_shared_secret.age b/secrets/synapse/registration_shared_secret.age
index 19359af..c117844 100644
--- a/secrets/synapse/registration_shared_secret.age
+++ b/secrets/synapse/registration_shared_secret.age
@@ -1,16 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg m4rtRYPY07eFsAlic15EtlYeZM96le2riRPmbHYvqiY
-iOdi9y+on0YMKlhTX3MX8KHNzQq0LRySZ4HTgXHVQeA
--> ssh-ed25519 gJrHQg EiUpoCUJXu9HSk/wRPQ+RHIIPQP1otYZRu8iMs782Fk
-hlBg3Tipre4ufVYnIVmRAd7dWK0PqCOCuLRfQ4v4I/4
--> X25519 /86obR8d8Jl8aaKncq08i7ZFuo5DQzLp64eRlCB0MHk
-yJa+Vo6JF5y2Y74hKXyB33mU5/HTGrMFJCw9Qa6l/Ug
--> piv-p256 +y2G/w Awl4liKWL0vySkiJhn0BtSsOTpXWo5w2mghdxOrvZXB9
-FgTT0D96jUrFM/LWCgeYdvkm20K1ev8y0cD4F69DaLY
--> piv-p256 jNqd3A A8zrAGaoqSfNPu2nN5kpDgxzf7U3LSLRai/ybOrrxw/a
-L1NlIPrfPal2psnMXJyWXMojGURZCZvu0Md6MLlAlPw
--> ia-grease 8* vU>`M"YB 4g(+@RC 0EBf9>`X
-DkPPlaWTheaefP4kLlUy5nr/AUe1O/ZSx2ZSy53cqYkfIMLabjJtLyOk/GGOD/FO
-OK3AVQTOMzPjWychVK3XSvXbmupMia3kyUy7HrBiOXZZlxJxKPwrW8E
---- uPWs9132FkHzQ7UWsf/9fehJjXipMH6uNFBnMHW1i3A
-D��yV���?��2�&w"�
��ia��#��<NDB�iK��ܙ�Ae-��M-�0:�c�eK����L�\�&��C�'̵����<�>7G�
\ No newline at end of file
+-> ssh-ed25519 gJrHQg ffxdmFgRbbThAPsXCqrmqlJeaKj50YS+hM0GYGLTQkU
+MxEkjQzTlJ9GGLpohAoVa7w1AJKaxCJRca7dYGLtBzA
+-> X25519 8OTgARYYgWi1PeFLEDUndJ9xSs/W9Z6p2hETrWaurkk
+D4DvfXCZ7TrloVYbXx/DLIrW5yW5PhhEUzOrte3RPac
+-> piv-p256 +y2G/w A4iElwc6M+dTz/LVi0l/vO73zSf3bE0t8gT0/zGF9dWq
+mKdyh0I/8Dmv4DRpcE+RhPjp8tTuV3UI0uI/LYt0noQ
+-> piv-p256 jNqd3A Ai4ZOf+hB30/3IkpLVzeDBbBkoAbsSP+/esY3SACYt4G
+Z/DYBsb8TVt75Nvt9KNPqGuGhLRtT+KJcNsgTjRDsBE
+-> p-grease %V0%NL0/ Jqtp61!y 4 %*ii3\%
+3CEt8jshnha3CaS3g1/gsHuNonR/Nn17C+aOmMUt7+HTvoVZpsSWMb+y5q4LR1S0
+vHsquuywbw257q4E+foJPlKXtK/nbRATvKXpHAC5sSPwbw+aye4zSLWU8rv+yA
+--- 0O9vjzCZYCyhj+Wpf9n8JTUqHmXNLifflFBpYvLFL80
+�
+?�l�t�7-R{�Bf��8�@�W���t���4�K��UI&wU˘�m��O�"�y��O���lJ�I���&��W�B�=2�e�{��?�# �
\ No newline at end of file
diff --git a/secrets/vno1-oh2/borgbackup/password.age b/secrets/vno1-oh2/borgbackup/password.age
index 4e4202f..bef1ca6 100644
--- a/secrets/vno1-oh2/borgbackup/password.age
+++ b/secrets/vno1-oh2/borgbackup/password.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg 4DJpYHmiOF4ayMzU+ieivPbylNWgUd2KNEXSCLzhjFw
-dO8WiWQ80IUUp2vhN+8AOgaFGg1SH3D8KCyL0shYgRA
--> X25519 WRne9Vn+HsHn8p0+DxDlvZkFuSHkYknSmhlW7oz/V3Y
-vGMUhOP1/Iz4IXxT/+s7+73HHVT8oqY1EJfis766aZI
--> piv-p256 +y2G/w AzQGzm/IlxT2j4zw3u9HZuYFe+r5bRAyISjguP48DJgR
-NA0ZK/kSc6OBqCu+rmVUi21/CywCcjSwniQpmB2/OMI
--> piv-p256 jNqd3A Aj/f+ri/L2HV37sqS/OjtGFRvrvvITVNujJf6Ocx+J/v
-mGfmsGgtPGSOwKzFdcdVJv1uJfySwh2BUz11ezQZbVk
--> B5;G1N#:-grease
-1Zyh9jJi0wubWSP8TNZpfkLt2yehKWpMQebhdLoNvMAAKjGN8jtigs2OAXLYh7aw
-xQAwNTmvLVc5TzQUSsY78XJhlOpkNb6S5d6138X1T6d8nJrK
---- arNYIfnO0eTAMufSdw2i1+nGfGhIfLjUvzj0PQ4ziEs
-�U��x�Aĺҟ�7��}Z�Vˊ���
[C�&�{A��V��)�T7
\ No newline at end of file
+-> ssh-ed25519 gJrHQg ESiJkK+AbUYnpPzWzJwT2vXCekr8JFKVHAluKgYj+lQ
+Y1dVxVehvXp982Uv8yFkQMd8bDxmtK6q/vwAV41B6ao
+-> X25519 QNnqg1/Bi911Y7W2fD5oTgfbeuhknXHkoBLjTLOH6RU
+upXY8JVRjSTfw3kGQIVl3B+HP3l5mIug5KJCSQfnPgg
+-> piv-p256 +y2G/w AyXKFigaApuL9nF/3hO5+KYg+I6dEZ8jt8MdTLQ1Uo2s
+lkncgwZebVAQi8IfoqFdfwBU9Im5z6t95fUxalY85uc
+-> piv-p256 jNqd3A AxkBvH1D4M0SKXUcU0xLkVlOGs5N5chQibVBqFyBqATn
+DiSN52dtvrtigH7Ab3WKNUh04b72KT0oTprIDRVZAVI
+-> 6jYgXN-grease
+GEvhMWqEB2ERO1F0rOxJacf5QQ
+--- ZXufptBo8uDjjxBH5szEVCV0mttzfhra2D0jMijKcFo
+�X��T(�ܥ�Ω�$,[�ִ;zm`��3�k���J&E"ԫ�9
+��
\ No newline at end of file
diff --git a/secrets/vno1-oh2/zfs-passphrase.age b/secrets/vno1-oh2/zfs-passphrase.age
index ad58498..eb0bd66 100644
--- a/secrets/vno1-oh2/zfs-passphrase.age
+++ b/secrets/vno1-oh2/zfs-passphrase.age
@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg 43+2JoYorh26Gq+ztkmoqXprHS58vyfaOsPhE+asBxw
-sk5ko0QXXriYU3hD5C9Mi8QJhZH6NZVcTg7Q+7rzOeQ
--> X25519 gIvRquOza07NBLJmR9BsOnpJd8PVNm8er5tLRkBGtQs
-VlR87DXF+/3TQrExmQq5DXql0NkIXmUuBx2viOQP54s
--> piv-p256 +y2G/w A+vGb4in6Cj1w/pp4tRNVIcasJl9WoKRFdwi2eDllNHd
-haqhVAjZp5fYVJmawPzWxM6r3QJbqarCZiAxc4l7HlU
--> piv-p256 jNqd3A Aoc8Aw2FlUvn8+Jp63pbsa5qzeg4pWEzTOAiIQqQZnfW
-E4hgbvUnbRUdq6/N3xTKMZE7oxNDIo8eAUarDdh4TiI
--> =H(-grease
-99H7/vADBtIrsHwjg0nlVHzbdgAzlVIWROmT9yysEJlcsgv+u8myaA6Beg2Nwajf
-8WmI5T8HyMve6bdb+TbJOaN83FkLIC8vYPqYyDes3BVg177Yx6kZGmkGx0sx
---- QxfUZt0OBr76ZT3SdiOr4//E+uh3NQl7F8MirQjRLAA
-�����(LJ9�12�KF!�P�=6�1�=Be��z�!$�{���U�gV
��`
\ No newline at end of file
+-> ssh-ed25519 vDjOfg Q1sECRy7lkHYa3bFIQQNNbaIfEjdZShkdGjPqTipWEU
+OzCOnN56ti6HmLFwYOKCZ81qnhCTGNoMtdaOrSPDsRA
+-> X25519 gIWhWpUrehSyghn/Eok2Fg2bKo0/28n01+bB3DXaPDA
+i71PJ/nJAgvZuwDwnTeqvxXsQr09VCOlpkCZ3V3NQ+U
+-> piv-p256 +y2G/w A2rC4hbY48aKDwZ08hMZPAXTMP6dtUxVboG5ow3bDXPq
+wK9Co8sWTygN+Mp+3ZSy+JLV5TRpA/ZgXoCoqSqtipw
+-> piv-p256 jNqd3A A8eWt9X0EyPCwST/tutbEjUcyJ3Id9cL7fFkm75SeWKI
+caMp+o0ziLQLpJukTSEqnwkhE84bXIL76wTu3JAEpKo
+-> G`=je-grease z hi^@N@
+Q+3IMD7GELrAEPoCeL0i
+--- IOqB7rGBpsOYcNf81wMJfwAox7zL0+lyKVzh6ZhuJH0
+��=����ѹ���o�
+x$D��G�C�1�2��'ը���VL��P���]UT
\ No newline at end of file