flake restructure

flake.nix

@@ -54,21 +54,17 @@
     };
 
   outputs = inputs @ { self, nixpkgs, nixpkgs-unstable, nixos-hardware, home-manager, home-manager-unstable, agenix, jovian-nixos, microvm, impermanence, lanzaboote, nixvim, ... }:   # Function that tells my flake which to use and what do what to do with the dependencies.
-    let                                                                     # Variables that can be used in the config files
+    rec {
-      user = "kabbone";
+        nixosConfigurations = (                                               # NixOS configurations
-      userdmz = "diablo";
+          import ./hosts {                                                    # Imports ./hosts/default.nix
-      userserver = "mephisto";
+            inherit (nixpkgs) lib;
-      location = "$HOME/.setup";
+            inherit inputs nixpkgs nixpkgs-unstable nixos-hardware home-manager home-manager-unstable agenix jovian-nixos microvm impermanence lanzaboote nixvim;   # Also inherit home-manager so it does not need to be defined here.
-    in                                                                      # Use above variables in ...
+            nix.allowedUsers = [ "@wheel" ];
-    {
+            security.sudo.execWheelOnly = true;
-      nixosConfigurations = (                                               # NixOS configurations
+          }
-        import ./hosts {                                                    # Imports ./hosts/default.nix
+        );
-          inherit (nixpkgs) lib;
+        hydraJobs."steamdeck" = nixosConfigurations.steamdeck.config.system.build.toplevel;
-          inherit inputs nixpkgs nixpkgs-unstable nixos-hardware home-manager home-manager-unstable user userdmz userserver location agenix jovian-nixos microvm impermanence lanzaboote nixvim;   # Also inherit home-manager so it does not need to be defined here.
-          nix.allowedUsers = [ "@wheel" ];
-          security.sudo.execWheelOnly = true;
-        }
-      );
     };
 
+
 }

hosts/default.nix

@@ -11,9 +11,14 @@
 #            └─ ./home.nix 
 #
 
-{ lib, inputs, nixpkgs, nixpkgs-unstable, nixos-hardware, home-manager, home-manager-unstable, user, userdmz, userserver, location, agenix, jovian-nixos, microvm, impermanence, lanzaboote, nixvim, ... }:
+{ lib, inputs, nixpkgs, nixpkgs-unstable, nixos-hardware, home-manager, home-manager-unstable, agenix, jovian-nixos, microvm, impermanence, lanzaboote, nixvim, ... }:
 
 let
+  user = "kabbone";
+  userdmz = "diablo";
+  userserver = "mephisto";
+  location = "$HOME/.setup";
+
   system = "x86_64-linux";                                  # System architecture
 
   pkgs = import nixpkgs {

modules/services/dmz/hydra.nix

@@ -7,5 +7,27 @@
       notificationSender = "hydra@localhost";
       useSubstitutes = true;
     };
+    
+    networking.firewall = {
+      enable = true;
+      #allowedUDPPorts = [  ];
+      allowedTCPPorts = [ 3000 ];
+    };
+
+    nix = {
+      settings.trusted-users = [
+        "hydra"
+      ];
+
+      extraOptions = ''
+        secret-key-files = config.age.secrets."keys/nixservepriv".path;
+      '';
+    };
+    
+    age.secrets."keys/nixservepriv" = {
+      file = ../../../secrets/keys/nixservepriv.age;
+      owner = "hydra";
+    };
+
 
 }

secrets/secrets.nix

@@ -58,6 +58,7 @@ let
   ];
   buildServer = [
       hades
+      dmz
   ];
 in
     {

secrets/services/coturn/static-auth.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 neExcQ FMwvw6TmjR3KbTH9UgtlHGmC3ZM9s1+g2Lb2B4oSJWI
+-> ssh-ed25519 neExcQ aWk0ZMqV0X4rjWmHHsy9qKEjfAeeLZy2wfOqGw5CchI
-l9TBPRZpSM1Wky9J+uNaKSYVI65MlLxTU7Kh2uC9Ijs
+VOkHSqxDKeXkLFOh4C/fZt+K6wh8FX3+0NweSfO3Zqw
--> ssh-ed25519 WiIaQQ J3tqbCwliMu7Hp/diV45LB0z2EWpLAwivGxxNQm1O28
+-> ssh-ed25519 WiIaQQ C0IQ+YOzoRpWh+VVO1RVd7TAOegN8uCUte4cIBVIlnM
-O7EDQl7x7htiIyVOQfSWHQbIxVWEnDJ/rOwE7Jey6go
+jzPnjg82NviYVRa19q3Xx61/l7hZDa4/p2Hiwpx19Oo
 -> ssh-rsa VtjGpQ
-BE/OvVUprp821b/gLSDol0R0P65wwtYHKulHt2Y1Ik02w/A/GCJbVX1hAbxkhRnR
+MGrM2OCna+BClcp9O1UCWdS3LyTEXiF+KIbauEkO225Glua9QwBeXEagFLyMa5v0
-5em/iKrbG5J3kabFgV/2VLB21yzcrdip0Cvzbgn0HsZ7I0PS80W+Nz054cdH6QV/
+epwXKO4r8175Zwhe/Zjut7wTvobBo/jkwPv9hKWeQ1coMcfQg1D1JNMoq9U02if0
-A+iveZxwS0x5VWI1//mmPp6YGeEOw89r/KyIZ7As8gTmVzQoVEeaqUsP9A2/+VuG
+feIavloFba1pA0B7N4cL0zKX/iDdKGOJzgpIM4XnI5EEZGUeVz8RHkSClPjKPpGv
-J6gbE6vCb5jxJ7OrLZbtBjfJhac3g7KHfy9QcLNRDSR+r0YVYOElUSyYdz3DUbJp
+3hq6BSbxn543RoYDCDk6SDmu7XnyQ8fbS/S7cEvj8CJuJjwmAIKJaf5BeGv0JMvs
-vCkNdm2s00wzAobyK5KLx4k9UB+1kJRPjP52Uxt4A+pEjIviH1vTnHzQb+vL4LuR
+831bPaACTKfdS4nTYqV9xJZYz2StxD1ndjc8O3CCMQnFJsDSmDp87+21xhh8n0uy
-qR6spF4vXHj14eGva51+8bxuUBj3kx9zS4XFTLug9B9xe8XgiPJDq109/fzCLkyr
+QRQdhcO1po9ozcIAJw07WIJxrgvWVHggbZsZ+0VnV3FxV0325c+u2AX5P8K+fkMO
-CZwmvAIUbghLzVw5ub4It+79GKxYXH9GjkWmVQX1J1a6ls7Fvy8pW90Fh2N5M+wk
+7obHNNvfz0JLuLvLWDfg8gaM2a4YlqL5o2o7qNCeE44yI7g0OHUytkurmPeWd9eu
-FTQru+OuwfllWUZaUWpE1mUzu65CZ84Kfg5slm3oY/y8E6UEmHiwdpCD1Y7mxGwl
+0alsgLkPcTCU8nwayfnxapStK9jIeG2ZBYb4Dn5K7+AdRDANWtwtsiCoqGAoNS3N
-hlQAhOzXyiNDHtWdvRaA66if7+heTvkEoKD5/owUJ0tJTMyvZgah0r2OGbKWluTv
+aztmgpe3C/dgC9oCsm7X/kanhjNcQfaT3u8tLoWI4Y3P7Ac0Gno66jc5xnMtkWQR
-+w6DMlKQFtnnW437t3QZFEWmz6r8UV53CzVIjcOv6Nd8za20RKofmOCeyVJ5GRNk
+la19Y2IStPZW5qI64wMoG6/4Ya6VpcsD1BRxDQhruv6QcmIRL8u9psOOdQf0nVHe
-weL94rH3Mv5YKh3/mJGj4fsYgka3uRO+rV6G7fNZcfQ
+t8wsTXGFHQZRQPi0r3op53QOPmZJWi49FoQIw/be3Us
--> piv-p256 grR75w AnCspIRjswTZ8aEXA15AQiJDKmUiHQhvKg4Rhfre3kCu
+-> piv-p256 grR75w Awxhy+3MBKo72bqBbK/q7ddDCKdpjXd+LIW5bOGeKuhB
-Prp1jHRXIdTXapLZgjWwjy091uc37kCIvGstSOxmNbI
+R0RyNmssaLwlP+J3bpYTRXcGy4dCefqnxniXoZWrK6E
--> piv-p256 RQguQQ AxfKlFTYgyFzB7sxct0s3/QcoVs1AFwSysZTTBhJjwZz
+-> piv-p256 RQguQQ Az7HteDIONTuEHxKXOOcWkk2FzDwXsfWWi7piw+erPz7
-GYuHnz8yk5TsY/y2oibHnkFh+Ah956ZiSKXzbT5Fu+A
+9aTQNXl7ck7vzxLggt+gqh9iRQMrhbMDYsvO4vAALAs
---- ++NTK2N0Od5wJsDHGXUg5AbVPNRl2siwehTeRHNMkec
+--- wTKsf5W4lhq8LSSap06iF5OY1UUz1lrWTSuEjLqR0aw
-T<13><>rI<72>ؓb4 <20>t<EFBFBD>!5d<35>C<EFBFBD><43>/w[mA/<2F><><07>\]<5D><>N<EFBFBD>!<21>~岆<02><><EFBFBD><EFBFBD><06>r<EFBFBD><EFBFBD>i<EFBFBD><EFBFBD>m`<60><>Y<EFBFBD><EFBFBD>
+R<EFBFBD>0<EFBFBD><EFBFBD><EFBFBD><EFBFBD><1C><><EFBFBD>3شe<D8B4>8ʰ/:<3A><><18><>_<EFBFBD>;<3B><0E><><EFBFBD>[<04><>p<><70>M.<2E><>mOa<>5<EFBFBD><<3C>#Wv<57>d<EFBFBD>2<EFBFBD><32><EFBFBD>(3<>3<EFBFBD><EFBFBD><EFBFBD><EFBFBD>*<2A>ʰ<EFBFBD>zPm;<3B><><EFBFBD>Y<EFBFBD><59><0B><>D<EFBFBD>

secrets/services/gitea/homerunner-token.age

@@ -1,23 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 1fxDZw HPqtOnCf0xv43GQmB6iSSLGK6r/5pCFFZJC37ioMIw0
+-> ssh-ed25519 1fxDZw +CFLVBuJ+CZ/s1vZx+dJ3luweVyRBY4RAOLVkVPHER0
-VjvteDjUqqkBas9FzZKxlA1y5/TwIB44I7yNH3KBDYA
+53rJqKXzzQANChAnFIyFE9EP7+vYoULLkOnZLh+GGfw
 -> ssh-rsa VtjGpQ
-Xx8tuS0ClpvIEn/diIhCInLuiNym22i0SQZCkFCz5V0FKNM0L9hzlqU2A2wLemgz
+TrpZd7nwYUD2dDA+GB3osD55ncBWLF5Xucbgl7P93qARj+rMFmAXoPFDo7C7HDlE
-iy1So0jNJWGt9ylUCyPI9ucyLUgoXFXiQjaMkI85yj+xuUDHkmereRMW3AQD+2LL
+/uUcx2me9cP4ysYeUqUdiyU9UIzV7t/+HLq4e9LCUPEfR2PW+qBHJ1SojGgsN5Ek
-+NHsmQQchtmQg/gCZY0MS7gq++ULDwlakAkwMP0U6T19i299eBSBL4Zoj00rKNlx
+v6B8KpAEhycg7wHHRFZNkTiRmu5MA25YWait+qnAUaa8lJTcg+YF3ufXwf8oquVf
-KLe0jbNlIe1uhVLYRfyz3S0I9z8gWDSQ8soFoqrJwKVHsO7wmH/3a0dCEWSHRRVm
+HwSkwqGCBnkI3qRGwj0tWp61c9frMSqgIzXUeYsaRIwtCaw0+k6znTrw9Lucjjh5
-MRfU/Oy7A8U+iD37z9DxSN2O6hKRLMDu/NyTXUV95ImYwOcA7ya4nShwpB7vZLop
+uxWpf3cX+8ncRGXFijYfzILZwLyWtVndegigNjv2C6xgQZzlHq/8zDrCS+Mvnjrt
-Vu/BtX5HZ7JvBK3kApyR+Da5LYsBhqrDmqXqtykjn8TM0WG65jLKp5XolEcGEfUe
+ktQVgf/bxc3UbR/zme9cK1sNQlIloePrxBmZ0FdpYpyd9hngCy84IOWruYJqjc06
-KrqVMhVm+d2AijpRvsbOv13B7UmZkxBP9+6/o7uujv9nV5uSoGwv9tZn9ubeZyXo
+PT//+N741QjABx1EVxNlakusya1ai4smctXWx7sXURJVKJQMPA+NOZHS5zeFfYoX
-U7q3MaURqbgv6YV+h/aJ1X0URmPMyjUgkCLI3HbKJV+ZQH1jbNsn0aiVU0d0MXBb
+jQDksr6N97KQb5MtEwAzoZZsthYlHrgXsBgCOsZXwfIPr6OLkDvBVP9BoUL0hZ8i
-cE1NIZdfrQ/+Mp14KuiKoY/ycrJPQkg+Au8LANSk/pzH/lvGO1EP50eBRz4hIqEg
+d6V+wmoZ/IrtWBwPhBS+xVRgs2rBZM0hsnAPt6plzt6VgdzSRDDf4orfZyxOWFKQ
-RaNII+fQosyr10HPvlgMfEZQnDoG6H+Tvhgt4S6Ex9lyjKASnx/SQyRwhd9SPgDb
+jY7wXaUe9N+NTeUTXJrI9uxiU4YAr4hcs1LoE+6e5cX07VdQFeoc39BQuBZrcRJN
-bArbSq4lJ59rqw7TX2IrkjDgvv/FMqdcxjW+kIOTWDQ
+eN00OshMGfp1/ahQ7rq5og7LlD/qQAoFoJZDey0q8Rk
--> piv-p256 grR75w A1d8pk5Qfx1xq9vApCkKKj6gx1elqSYxLezwoChk3k7Z
+-> piv-p256 grR75w AsgOB8G+3eekSVtWjpI2Xme5ujE62NOvFhjOSx7IBH8R
-AeYO+rslswXdRJK/pwe9m3CNHIKsrRkt1lamyysDNQk
+nqHGgyXXVJL1R5UAl9v2vZS0/xz9bIYzvxY/4aMbIJ4
--> piv-p256 RQguQQ AukcSmMTNQQZdr5zDOjMTnsOFZp5H5D5ohuVdIQUpUYM
+-> piv-p256 RQguQQ AiviprbeWgXPYFNaSSC8gAu++rXpwLYstRZZdCNyuTEa
-aJqrWcaXdpfS2vakEu5vi/AMHnoUUrUpm0bRRcCxiE8
+YgnAgSLjonVpHJofnlrq4GBWjyjir5vHnfF+wz6doRw
---- fNTWHdKIXpbJsZo2WnMAPXTNMtr0hKkgivCIi1qiQps
+--- 6wYrIGoYr5lx9B+H9F3/5WiR/crsveCLCtLT/2fGI30
-X<1E><>R0j<30>ebMB7v6<76><04>Ȧ~
+<EFBFBD>m<EFBFBD>m%<25>d!<21>
-몀<1E>8<=
-2i<1E><><EFBFBD>2<EFBFBD>J<EFBFBD>]L<><4C>p

secrets/services/gitea/mailerPassword.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 neExcQ Qx3NuIC3HnyhLAPB6NGLlO8073iIEXQ3VpVDvsPsLVk
+-> ssh-ed25519 neExcQ TcZs+z6qbZbOZiqVUyjFTX+2LmTlm2ykGIl8sxPqBEM
-9Cz7AXaP/EorKrdLxMfaWJJsCIv5u6upJIaNbLiDleA
+R6mRgSRiTK1EptbdHvJ4nU+EUPwcDdPHF8bh4VPTRMI
--> ssh-ed25519 WiIaQQ AS+i8m6vO83lj5vZ1lr+FiM1SO1v7BU6OWertpdTXSU
+-> ssh-ed25519 WiIaQQ oBmzUOHUjJu4XQaYWOWdOfnlp2CJXXewQKjNm8F28QU
-LIitIW7F/8idoKvgHmirFp1V9RlObyqOueDVIdBdRM0
+4jkvYh0ab22+NWqG8nfaqX5C8H0v40DJgn+XnAgnnU8
 -> ssh-rsa VtjGpQ
-FdINMHPfPVgkQk0A5g6uDRQmZxI0h74QkJSdYUtHRfbqBP0R3f4TrqbtO4n6E7pR
+IZvsqhMn/b6yhdcid/m4tCfqBQENebs0aioBq2QuILmlJzOSlCavgQ8UJOSyhx5l
-5NYLkqyZND7ApC10hoQ2UJF22Ja06ZvWhhM7Zsl0X3u/58NhgXsXWy92I2sniBa4
+jBMMG1wr/Dls5lvtK7HqoMd59vWtJ6dq4w9kjyvjXxzILfM020eCo+7VVcltskua
-DF6T3AD4bQOF4Px2A/+lnA++NIWHdroqghojWOAZazvLFaFa6HtIdrTiMb2bojuU
+Msqjr7APLrVxDmLn3FWZemNnErNEpdjx2DVsea4wVrXCUWzRikV57WBqiS99YrNs
-qxepekbRwJBEm9/5bKHZlEmwx3rJsYxrNKEkxPrBvNdPbnwgxrvhOXxeQJghyGGw
+lE8dCuWRHtoqnueAMCfDALMyQSf2tdHByUVm3VRrAEhU0nvqGU0E7fDJvGmZBF9L
-vnCRHKDbqvRIWfkmftRjNQMHUSMitDJHUOPsG9z5KBr4M7n7B1bV5ozsLsVyUUmE
+v5yWyhxFDdJp4/tiu6e7PBo0Az65nO0pdJvujM7OdzGZYqh9VFpg1ebQy84kOQ9r
-6vBvrOPz9+RiE9H61PlAvPFMmKBTQgRf8+mjbU0RGxScqLcUoHCud2x3O+WqlLoP
+taCjAwA5KUN+xOSFZb+03/9uP08Ndpz8YsyhTXsNJWrfWoSJRGbsvXPQmeZDJOOQ
-TMQtye8ayRPgG3PbwP4pO3olcA9ANEdd2Jfo+HG4izbJxdCTbOMfEFTJIEfyGMIo
+3sJhQS9N/O6XhwKXa64ARQRtxXpvQZayrL08lckj8v6hyCgKMR28sVvSqSSGoa6O
-lo0Hh0EIijFAVfyAH6G/Rv1KggpINr8fTxbWz8i1PXTqzBsjfrqbHWWRrE/VJSYI
+wKsDwBHN9eJvbDHIPsY2FO4pIoXTvVVQTinNhJ3iiMy4FtBhCuRgzGebXfhicBCG
-x9bjSHeWCOs+IlZ2YEB8dshJe5smrTnKpFYrj3kvLHOiC1jKUJdDZooQex4nkXpW
+usUBvOIXN4Sq7SlmaAa0TDy61MR9PSZADPmMMSyzQAvxu89kxifEejNpfzrMOZXG
-mMKIOb/VF6/QM3NkmJKLdnMJenIKL1Vqbrv/Lqu1/FaINqRsIGTXCsQs+JjxrcfX
+5BjjDLp11FpUUDT601VAJdIKe7eqKCSEGKyepxfcIbx1nl8RShlh3xydMljL48BG
-zxpzs7Bk2eV/BaiJxJ7Cjfx1gO37GpL0kzCMuN1xnWs
+58dpaTL9bfbvmkgBwdi3G7lNRN0ftGGTrIhrS9ox+mI
--> piv-p256 grR75w Azu36XfRZ2Evj79zCs8RA5lwbMe2Je0oBI5JM+3MC/cO
+-> piv-p256 grR75w AjOCArGvtMun01Yj3kyxvOhN4sTREcbAE0AJFTbqlXc1
-p8nO/p2M3pvEevZLLItNDSz64Ju8yBA2GPBnTWMN25I
+rdUGPA1G9axXj1Ad9eQ2xpqRVtueizx/MNqZmRTKljw
--> piv-p256 RQguQQ Av9ILPK7bsPNqgudLMq88MNSWrB+xrBVfxX3bjVCquvj
+-> piv-p256 RQguQQ A9kErnegVwHeKj+Qxo2VZcbd65Hp6f7ODfIo/HN815fa
-0iwRR9htchLUk88RRooXsP0H39FfybCPMQC8AMxgu/0
+75SvEnpJsp7jG6lPCwiv2FWiiQ92MrBH/AYAXI0rkEU
---- puq9s7iYi1A0v+7Qhsqo05Yfxtg5kHJK66RM1TDLtNM
+--- IDXzkPs1XIUBzloxjYXT7GLTe0G/gJ6LFzXxTjJyh5o
-<1E>![<5B><><EFBFBD>u_<75>(*<2A>0<03>Ŵ8<C5B4><38><EFBFBD><EFBFBD><EFBFBD>"<22><>Fsn<73>"T<><54>-<2D><><EFBFBD><EFBFBD><EFBFBD><05><>w<1B>w'<0C><><EFBFBD>4<EFBFBD><34><EFBFBD>sd_<64>!
+<EFBFBD>+O<><19><>$<24>N.<14>bWv<57><76>G<EFBFBD><47>59<35>P.䒶[<5B><>&^<5E><><EFBFBD>v)5pt<70><74>D<EFBFBD>ѝ<><D19D>Ex<45>Ô<><C394>~<7E>

secrets/services/gitea/serverrunner-token.age

@@ -1,23 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 0qfOZA UTOzjwhqcVLmpf3P/nzO3aGKzKH0YKq04sUbFvMa/FE
+-> ssh-ed25519 0qfOZA yRc3wGwGHe7wXv6J/YeeAi9ol/LbSaIS/Ehrzi02aTA
-a2MMcZXucDEXmy/uU7JapMsboImCGsUiPA2Pr/wB5yQ
+Hjx6fom1rucMw+Hps6U9bdXobt7fbxJLjOkjBhXdIhE
 -> ssh-rsa VtjGpQ
-Nr2g/ocV0oTbZydmcRnESyI4VOJdMGafozm80EMarbQfmeeRCfi76jxct/gpnL00
+PcWUbXFyFW3n0zVvJurYzODYxSXgCeTGBBBOMSubsR5MT88F9NillsyQNv7oHPmW
-P/2d/3pfvqbpuGZRg+Q/BCY0Vm2AujJ1P2UTxpnzC42iZu7qKWd5EY4z0Hok53kg
+a+FZfZSOpgs3+hYwzUyFviuYhRmNlpVm9o2ZjryzUa0POxAU8TprHCETAxYvNgqe
-McPh+pgNhugLr4Yh2KHpT27FfJpD/Pmjajg7G78Q9P5uel6SKXIW4uFO4Lp2yLC/
+TZ48O+uuj7x2OZ+dKkg2pfX6nahcwYIINZBuos6sdO0y948qsa/7EDbhQ6NkSjBD
-vC52XMqxLrR9moCTr72dQPzd0IIhQ2vN9EtZkBnxUW6zt3ILAYJ06VLAGvVwXIWl
+SCgAcedvL+h1RZjVcGHifOi1mMn5BGMH3PSgmMMj9vkQrqXgTtZ+q/b32wNPR5Qa
-0Wjs3G5g5v+H2e+Em5vIy1hdub/3orEL4racHO0m0binK/IVRJY7sjZDVDrrerFS
+zOm5eQOnCfWc7ommnzZphTTtkOL1reZVAy5xb+yzvKCsCNzfW/9TucOdqMOk+TxK
-SqPORQ3a7jmuHFeHxwAlRcmh/O1gEgAnCZTZRfQzgXI+nfPEzuL0yENd/ksUPBdm
+WBjMplGVs7hGPIASmXSjboki/9TYNv3zzNDE7zZ297N7feeElxo2e8z1XoZwSHS1
-q2zQSv1rrj/tLMtxk4vpG8FkPp5UctaYignvHAp95xC+TR14aDUdT4x4MGboHIxu
+8gnp9GWoCHqEV/UOi8plW1G+h6S5upTEANHOleVZ+XTUo4szcXtSuWxBeyxbSeRd
-l6Q3evVJzblwIl3JbzpP3yOA2k25Y1KI+nVDrTqAdi+Yy4jtIOA+XancIHrpLzAO
+TBCJlq2O+xR6KQbkYZTCbIrt+0iPlvYxnwqLUCq9ZjAX1/Vbp9pLInKAVgjmYSLH
-21JO1wwGtAsjUDCdhnYSyMcOiRLRHzPoK7o/BGx6b1Uqk2WmWhZnZft9MHPp2RtX
+wSzCnNLseOqLQYVij5RZBrCPnMQBG/NxrNJRSSoNncsB1Bf8G9e6M7cgC29EoLkb
-Gv3PBMVjz2CO+f3d8B4akPSApgQ9fw1Vje5fY0CDWdORV7tHDCKb6fmTua2d73Iz
+biPlJ5FPSzs7mJDhTxVvg45jIQ+JlM9b7/9TEZCQ/3GWThsvAd0UtnkxY2SIFOol
-ANrKYonqWhjf3F9u7zzM8/xd593AH/Y+aJo+z0S+Z6I
+OTtfIpYMmGFaUTj9Mmm9vdjYJEulQMguhpI+bI9SQ0Q
--> piv-p256 grR75w Ap4du3RBcNdRvbwjQTpP5PPXtNCRuoQePt6ULYEpNM1r
+-> piv-p256 grR75w A0f2KiPenagZ9xL2+eaQ2Xn1E/zA/qu2CwAVeiQcOjo2
-4Qe4c6j7df/TajuxM5Q1qnC/TCBNNI5K9WCDqD4VM1M
+LsDvnh8c97kLciCM9NfUzGGB85bc341iFaxj+exLWM4
--> piv-p256 RQguQQ AoR+aGTAQ6VELef54cGpukkWjeKz37tDbW93ncGWFsrI
+-> piv-p256 RQguQQ AgeqYSRfd6kmZiaFLSI7ibRbnk0l/fr0PON861TT2sBP
-KbF1N14PYEQ28a/MePeq7hW9LAgUaNriFo6UO0eBvt4
+MLQ6lifBd1Nc6r0Em5F5hbat+dpzgGarnaGwVQU5Afk
---- F8GiyUf87+vhg22ldWuC2j5K8WGAK3y5lRDG6yrzBPQ
+--- m1Vg1p0SWx5IujTpCezPwW+TQhIL9903LAWr4ekMin8
-a<18>$<24>-<2D><>|<7C>h.cr38<33><38><EFBFBD><EFBFBD>Pw<50>3<EFBFBD><19>Nh<4E><68><EFBFBD>B<EFBFBD>j	!z^<5E><> b<>8c<38><63><EFBFBD>m<EFBFBD>s<EFBFBD><EFBFBD><EFBFBD>
+<EFBFBD><EFBFBD>W<EFBFBD><EFBFBD>S<><1A><>kF<6B><46><EFBFBD>0<EFBFBD><30>q<EFBFBD>Ӻ<0F><><EFBFBD>`<60><><EFBFBD>Aɮ%<25><>2<EFBFBD><32><EFBFBD><EFBFBD><EFBFBD><EFBFBD>/`"<22>W<EFBFBD>(<28><>]<5D>2<12><> [<5B>݃f<DD83>/a<>,b<19>f<17><><EFBFBD><EFBFBD>
-<EFBFBD>\<5C>3<EFBFBD><18><><EFBFBD>f<>x3|<7C>Ne<4E>
-=:<3A>

secrets/services/nextcloud/dbpassFile.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 neExcQ VfWt68buOl2UetDKcQWuWRSOeJi4HhQxiZVI4lIfcUU
+-> ssh-ed25519 neExcQ L3AvUEBM2tJF3zoH7+pQjnEbMs6lBkHTLA/fFLZEpU8
-GTWI83cLyP2Kjd6twRpaWpBq+U/BYcfDJeljQ1CZ1bw
+R8RXOegx9wDxmTnjTTTWRQsJRuzLIz//uP4Cjp3ETRU
--> ssh-ed25519 WiIaQQ nqwbWtevakrHk3sODtw7l40klSb4cIyi4uSsnpcS8QI
+-> ssh-ed25519 WiIaQQ QMdPpzNrBkATDJ+8ES4AIQRGxs+iRYkXOlt20YVGvz4
-PxfriZ8CdPhPTNtjQL3lsyjfjkpBsnmJc0TRNM1pyHM
+MZ18UWJjYRM0YPoq+0w0pOypF0HlJOFSsWSQ+q6nlbQ
 -> ssh-rsa VtjGpQ
-QRSdhHdAcGlw2c1hxGNmtAp5tPcjQ7CI+v9JkOyOH9W9KF3uOfshrpkz/psFPd+s
+aYAcAtmtZhJ5Dli66rHHjvVvyjGtJnJyZVtWgPDUX831vHWBO7eD9mnQmPuh6CBV
-6eqQDAwEAgla4pO6FHj/H2PK9KDHY3j2e8BZyvJ8ZsefUsSAYJ92hcD3fdISL+kc
+oa6DoU+wUBGvWE4xBa7j8mZ/R1rJXQzp34uXbN6j5jlOmw/pZ7xMbsTV8Q0lgXwE
-+FMx4Dlm9LSeGGqElbPotyU69t2O/WLF01HqLDVgHrlyTzWvQMhvATA5Yzcj1Izb
+aMaAVsxUEipUo4GL/2ea/o5gcHwoxMlGdBS40Y7BRHFQXUzjjuq9qIr+5nd+bU0U
-0AlA7IOE174E448/Ovo5a2T+DF0w2vLEPruH90Kvs2lui+i8yC3StgBwB6flmSfc
+o3qMXMDMfNJfouNaIcb8BLSs0KSU/5WOmyolG69EDNeqADs5dpijYZKS4WCpcUX+
-dSR5qO0XCZ8gK/kkdsz2iZonsBCbEugQayN+EoE8vop6YlPW36EtO8IJnVnKmVEX
+I1r4a8j2aGhquYUPACNwy/mqGsL4tb7tpBYMkbSxwZWg6fEzHXWf8SdNuaMBQpPU
-vy/Rj3dubm5Wsp2hAyeXSXx3ity5fdSJ3TVY7TiPLPlt1yik3Wggtv0DlgZK0AML
+OfEBPxqC1QvDFppNSUuu1UxLF63Oi04uznh6e2nWloHYu+2vYPPelopRhtZTugDT
-x1OJbrZRrzDZKYzxXw69+lOiV5XfVUfk9PXC+IAj3xf/dEz93b6Pief+PbOQg+tz
++D1NwGGchjrdtetkBYbcoOX+c96GFYSsmwnhURwoGE/ofSA/gzjjBHFFZcgnwS6p
-INDWkL67/Yx6rEf41iLCsQananBV16IeM2SndRyrmT/1OCcLUR/8xqBHfOg/K0kp
+ch2ZOYsknwgbJPz5D3DtEH3ClndkqDbcs6BVk27Gw3j8PIMvneXv7RY6b+/42XAk
-lHL7D7/neqRh2E8KOEciHgWFqWT/tV5XpyZVvA8OiYLoVbmLG55q4pexrDfQ9OgT
+77HltTHmi3Pw1tgS7ZVxirxRpOcTc7aatrCA2UUAd/7+D/hx5VkPVAYSxvKMMOe0
-ZDIL94VjiBDH5BmPfxLhRZP/58EhLSDH3WziIWnv6Y2Y1bAl5qiRU4tEV0RCHqyJ
+3fxIrS79USlpXgEd4kUphKJtHZrXCaXbKUs+bRLq/ETINnTqkMBIC+V3rTC0l/iP
-xEeLcqI5uFwDmmt881zlyAb38oQCGq/YRXhGygwwn18
+TPTgkIY9LTGYNFygjCtULatpAThvk6nw6zgZaGGc4/E
--> piv-p256 grR75w Ayt9mI1/BJg96jlkLVjf7xhDoklNuoFe3ZeKLYzFqDPO
+-> piv-p256 grR75w AiLOzlm3AH8zHOKElsMu6IY5V4Nf69wH57My5YjqECdJ
-S3vFS+S4ZVC2O00P5u5GKaLtbabBPUCuuFNFFxcmmUw
+mawOWynL8uwitZWtfk3IS51E6ylSQFkmhRKIcPAKknI
--> piv-p256 RQguQQ AqsDGN35gXkyWaKSRVATyt1Ap5gzLKiAx+UHwhVXdhhG
+-> piv-p256 RQguQQ Au74bLlwnYv4x1NlqlfDE5ApFoEOeQeKrhYXAika+vJi
-YUqypxYBQ2RYbnMclNa8PSLV6atbVRCho4wHUCZegkU
+whz8AhM43gOTrKfqigH9TOpAlwuY2jT1iLrR/JgShZo
---- Bay62OwVx/Q8Nf5MHRu7VOWzwh1LtkWbxQytL16Y5Zg
+--- lyRMjucNorsCo4MOggab5VUuz5SSY4bFipNdxMCNFPk
-
<01>n(/GZv<5A><76> <20>!<15><><02><><EFBFBD><EFBFBD>fs<66><73><EFBFBD>#<23><><EFBFBD>v5<76>K_<4B><5F>t<EFBFBD>k<EFBFBD><6B><EFBFBD>s7P<37><50><EFBFBD><14><><07>k
+<EFBFBD>8v<38>K<EFBFBD>ɪ<1C>z<EFBFBD>0><3E><>1<EFBFBD>DL<44><10><1A><>Rk8A<38>*<2A><><EFBFBD>^Ť~<1C>I<EFBFBD><49><EFBFBD><0E>f<EFBFBD>	<09>ꝙ

secrets/services/nextcloud/onlyofficejwt.age

@@ -1,23 +1,23 @@
 age-encryption.org/v1
--> ssh-ed25519 neExcQ 39vMfysEahyydxnqENrwNOZi9yWpZSIWsNQxkMFBQik
+-> ssh-ed25519 neExcQ Ggq9vKh4yfiLWz38VGaHgzc9wxOT91Po2XTUGYqZ8AI
-bvJK5Gya20UhZ/dWKHAQZ7CPa7v/pISwB90WJejYA5k
+rh6xI6a9CtSxHxNcBHlfGkAw3lR5FJvKFMHeXQcjUSM
--> ssh-ed25519 WiIaQQ KZ6RU6kDjHVfy5YwlmjQhH6YBVkJqrRonUl02iYA2m0
+-> ssh-ed25519 WiIaQQ 0i01wFKdUE1TdPwNFf2uPVXdRcgDUPdTaQQP3beWT3o
-GGsCI2D1tN4lGpsHJph6pq9N8UYdG2mfIY3U9urTR08
+Xeq5r2qARZlV7/6uYzxoL7RHqDDm1cMlMeFgsGizHk8
 -> ssh-rsa VtjGpQ
-a0oXJCsFZdtpHuZIASZUp5C96ZP1QU1I3RSpIe59hnnpGLbXZE2qntXBfQ9ojkBW
+YJoQZfFT0QSBOwOuNISd2S9PEdc0zH47du7o/zvFiHwyQsl6qyWeQNXv9s2kjysY
-bgNdxvAcWLaYAiCbe6Bo3S9+Q2svJQlEqIZ59o2H9jh+swSoLfWgi0Blo/56B0GQ
+4rFlanmAG9Fou8TowOTU1oHOINHqX7555sww0e9hBbRMPYbEqU4Vd41eKJVFxUna
-UrltI0ftMhM20TaszHwmVhvo3yODcZpNhjAMNVkQuAov9BSQdgGRgivBnt1FfYYI
+HGB7Nfde07+d6Cw1GPHVKcg6wXxkt1XtceCp2DTaRNor0BGJrmnxwPGwPiI8j5MR
-f6nqfrE5JVoemk72Ip4jQFVWylK7drEU9W2WlwOsF9zkHOJxdNWiaaHpmnsgOEzA
+oxu0kIXgCxJnRGe0l2pGxztVFA2r0hskfKK+AFlOHevkhua1qJJCY6nAHCAaN6AW
-BIdVqYZTtRElqDKM3j4SdE7hL6i4fIb4QAsfX5XI09eUDQLSRGF2o3lqQ4FVx+hb
+NxQhuXOX9zyBTobMGxBuNCrGInlwC9bVbYxRXLm5GwZJOKAW3eR40L5Hkwc3+86M
-YE31vr6yQEObTCbrf7zmKIK5UwgQbMf8+WbCxDdxF7FqTKrg7jVhPtu+n6UsJlzv
+SkETGPXyDOsZ5k4gLFKcdTY9vVVWwaogFVKI8H4LLhd3bMw+JRcklR6wsZ3Uk43h
-CXsJkKYZwyESZ5oNjCyqYkkkQP0JChl886OPFY507/Xn3gl3qj/Sh7FZyUuLZ92X
+fe548fYSmQweTtF2FehyU4LN2xRilL/FXRL+IGW9mqffBCR7TsEdPGq+VOThp/Gw
-aTHCJ5AHGwQKFnVO1YLXWDcn0F3NIq90YHJ1NsxNvNXZJmcCyBTMtDJGq3q/6Xqz
+wiPplSTKdRnivNdXPT/8PCZ9MVhQ5rbtTYq+yD1nGl214faeqpO81Ny6STPXXtor
-qXpVoT/9XHHStrKYvi2lut/PFMC6nciixmiNaVbE5Aok5eNhG8wUTsUVRIr8+O/i
+QSbUJHE03x26r3SwiB8GKoms6Oe4WbDNOffHzJJw3WK+ZB8oRQuY3qXduNgajtB2
-07aQBeg7RJ7lW6oQ4/kdfufQbQHuQNchQzkdvQf3azXCXBTJ/+Z6uQuVg32MVsjq
+fChdTrCL8MlGzWbapXqFBES1sKRYtiP+lwFbIYHKUqDwtt/Ua8ECDag8y4iYLatx
-fRO2BtrWjsAVThpeVAdfQb2b43wmL9HBhivqYaBK1gI
+1c6RDdssUeyzOsAwNuMab0R8qq4cS+6DLpYfLSG6FMU
--> piv-p256 grR75w A9sg2H7x+75AK9ErkbqMkC06KEDy2Q34seCXCGUguz6H
+-> piv-p256 grR75w A/0ZXAO1v9k2buuajhhtiJCLgbZggu3rf7SVuPNyBcej
-1TchlkXOzymAT+eDr4bpwugeLQ7gAKRvdYC2xcd9DL8
+Ok3DIvsILlWYZXClmVFexfNEC/MNCi2jkyE2rHK3Zs8
--> piv-p256 RQguQQ A364N/An/SMqBAp0yrLB0/osdlmz/MgZFG4RB6Os2fLX
+-> piv-p256 RQguQQ A3z2uuaXoGxo6NIAO43aaEpCdvmrLCOQ7e0EUpfc4VaB
-V4qtGLbpJrTTFWCfTMcWpuVUiLflDdxXkMqPOtG1R/k
+jHZAUtsL6h+07ZxcJAuaINGAyTVoewGs2eK0cDRQPOs
---- O4Xqa0RavBa09l9txN/oIQjAeZIYsur2UsxaSRmhAdE
+--- thw3oVY2cTrKC4oKp1OJpumxJsJc3CqZ0ITYIarotzo
-<EFBFBD><EFBFBD><0F><>`<60><><EFBFBD><EFBFBD>Dk<44><08>/9<><39><EFBFBD>o Qz<51>#fIN<49><4E>J<EFBFBD><4A>3<EFBFBD>Koڵ@<40>><3E>Zz<5A><7A>Ip<49><70><EFBFBD>h<EFBFBD><EFBFBD>
+	q4%<1D>z$y	-<2D>ܤ3r]<5D>{w<>7<EFBFBD>3 GL<>4<EFBFBD>ݚ<EFBFBD>JƲE<C6B2>X<EFBFBD><58>
R<><52><EFBFBD>:~<7E><>,l<EFBFBD>