From 975fb518ef736d2d3ccd95430604cd147a2d8eeb Mon Sep 17 00:00:00 2001
From: Noratrieb <48135649+Noratrieb@users.noreply.github.com>
Date: Thu, 28 May 2026 22:08:46 +0200
Subject: [PATCH 1/2] paperless

---
 nix/hive.nix                              |   2 +
 nix/modules/caddy-base/default.nix        |  49 ++++++++++++++++++++++
 nix/modules/caddy/default.nix             |  39 +----------------
 nix/modules/dns/noratrieb.dev.nix         |  10 +++++
 nix/modules/paperless/default.nix         |  24 +++++++++++
 nix/secrets/backup_s3_secret.age          | Bin 772 -> 772 bytes
 nix/secrets/caddy_s3_key_secret.age       | Bin 904 -> 904 bytes
 nix/secrets/docker_registry_password.age  |   8 ++--
 nix/secrets/does_it_build_private_key.age | Bin 1916 -> 1916 bytes
 nix/secrets/forgejo_s3_key_secret.age     |   8 ++--
 nix/secrets/garage_secrets.age            | Bin 819 -> 819 bytes
 nix/secrets/generic_backup_password.age   |  24 +++++------
 nix/secrets/grafana_admin_password.age    |   9 ++--
 nix/secrets/hugochat_db_password.age      | Bin 339 -> 339 bytes
 nix/secrets/immich_secrets.age            |   8 ++--
 nix/secrets/killua_env.age                |   9 ++--
 nix/secrets/loki_env.age                  | Bin 326 -> 326 bytes
 nix/secrets/minio_env_file.age            |  12 +++---
 nix/secrets/openolat_db_password.age      |  12 +++---
 nix/secrets/paperless_env.age             | Bin 0 -> 340 bytes
 nix/secrets/pyroscope_s3_secret.age       | Bin 336 -> 336 bytes
 nix/secrets/registry_htpasswd.age         | Bin 278 -> 278 bytes
 nix/secrets/registry_s3_key_secret.age    |  10 ++---
 nix/secrets/restic_backup.age             | Bin 784 -> 784 bytes
 nix/secrets/s3_mc_admin_client.age        | Bin 912 -> 912 bytes
 nix/secrets/secrets.nix                   |   1 +
 nix/secrets/upload_files_s3_secret.age    | Bin 474 -> 474 bytes
 nix/secrets/website_s3_key_write.age      | Bin 344 -> 344 bytes
 nix/secrets/wg_private_dns1.age           |   8 ++--
 nix/secrets/wg_private_dns2.age           |   9 ++--
 nix/secrets/wg_private_minipc.age         |   8 ++--
 nix/secrets/wg_private_vps1.age           | Bin 257 -> 257 bytes
 nix/secrets/wg_private_vps2.age           |   8 ++--
 nix/secrets/wg_private_vps3.age           | Bin 257 -> 257 bytes
 nix/secrets/wg_private_vps4.age           |   8 ++--
 nix/secrets/wg_private_vps5.age           | Bin 256 -> 256 bytes
 nix/secrets/widetom_bot_token.age         | Bin 272 -> 272 bytes
 nix/secrets/widetom_config_toml.age       | Bin 4006 -> 4006 bytes
 secrets-git-crypt/paperless_env           | Bin 0 -> 150 bytes
 39 files changed, 158 insertions(+), 108 deletions(-)
 create mode 100644 nix/modules/caddy-base/default.nix
 create mode 100644 nix/modules/paperless/default.nix
 create mode 100644 nix/secrets/paperless_env.age
 create mode 100644 secrets-git-crypt/paperless_env

diff --git a/nix/hive.nix b/nix/hive.nix
index 92d7186..eee6101 100644
--- a/nix/hive.nix
+++ b/nix/hive.nix
@@ -319,6 +319,8 @@
       ./modules/postgres
       ./modules/immich
       ./modules/tailscale
+      ./modules/paperless
+      ./modules/caddy-base
     ];
 
     system.stateVersion = "25.05";
diff --git a/nix/modules/caddy-base/default.nix b/nix/modules/caddy-base/default.nix
new file mode 100644
index 0000000..6356e88
--- /dev/null
+++ b/nix/modules/caddy-base/default.nix
@@ -0,0 +1,49 @@
+{ pkgs, ... }:
+let
+  caddy = pkgs.caddy.withPlugins {
+    plugins = [
+      "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
+      "github.com/sagikazarmark/caddy-fs-s3@v0.10.0"
+    ];
+    hash = "sha256-m5RHlrheqzoGqKQxixq+xTd2hlnCTets9zCT7aFka8g=";
+  };
+in
+{
+  environment.systemPackages = [ pkgs.caddy ];
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9010 ]; # metrics
+
+  networking.firewall = {
+    allowedTCPPorts = [
+      80 # HTTP
+      443 # HTTPS
+    ];
+    allowedUDPPorts = [
+      443 # HTTP/3 via QUIC
+    ];
+  };
+
+  services.caddy = {
+    enable = true;
+    package = caddy;
+    logFormat = ''
+      output stdout
+      format json
+    '';
+    globalConfig = ''
+      auto_https disable_redirects
+
+      servers {
+        metrics
+      }
+    '';
+    virtualHosts = {
+      ":9010" = {
+        logFormat = "output discard";
+        extraConfig = ''
+          metrics /metrics
+        '';
+      };
+    };
+  };
+}
diff --git a/nix/modules/caddy/default.nix b/nix/modules/caddy/default.nix
index 463b85f..e4c1b0a 100644
--- a/nix/modules/caddy/default.nix
+++ b/nix/modules/caddy/default.nix
@@ -1,40 +1,11 @@
-{ pkgs, config, lib, name, ... }:
-
-let
-  caddy = pkgs.caddy.withPlugins {
-    plugins = [
-      "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
-      "github.com/sagikazarmark/caddy-fs-s3@v0.10.0"
-    ];
-    hash = "sha256-m5RHlrheqzoGqKQxixq+xTd2hlnCTets9zCT7aFka8g=";
-  };
-in
-{
-  environment.systemPackages = [ caddy ];
-
-  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9010 ]; # metrics
-
-  networking.firewall = {
-    allowedTCPPorts = [
-      80 # HTTP
-      443 # HTTPS
-    ];
-    allowedUDPPorts = [
-      443 # HTTP/3 via QUIC
-    ];
-  };
+{ pkgs, config, lib, name, ... }: {
+  imports = [ ../caddy-base ];
 
   age.secrets.caddy_s3_key_secret.file = ../../secrets/caddy_s3_key_secret.age;
 
   systemd.services.caddy.serviceConfig.EnvironmentFile = [ config.age.secrets.caddy_s3_key_secret.path ];
   systemd.services.caddy.after = [ "garage.service" ]; # the cert store depends on garage
   services.caddy = {
-    enable = true;
-    package = caddy;
-    logFormat = ''
-      output stdout
-      format json
-    '';
     globalConfig = ''
       email tls@noratrieb.dev
       auto_https disable_redirects
@@ -59,12 +30,6 @@ in
           respond "This is an HTTPS-only server, silly you. Go to https:// instead." 418
         '';
       };
-      ":9010" = {
-        logFormat = "output discard";
-        extraConfig = ''
-          metrics /metrics
-        '';
-      };
       "${name}.infra.noratrieb.dev" = {
         logFormat = "";
         extraConfig = ''
diff --git a/nix/modules/dns/noratrieb.dev.nix b/nix/modules/dns/noratrieb.dev.nix
index e2dc8ea..c753f0f 100644
--- a/nix/modules/dns/noratrieb.dev.nix
+++ b/nix/modules/dns/noratrieb.dev.nix
@@ -14,6 +14,10 @@ let
         A = lib.lists.flatten (map (host: if builtins.hasAttr "A" host then host.A else [ ]) hosts);
         AAAA = lib.lists.flatten (map (host: if builtins.hasAttr "AAAA" host then host.AAAA else [ ]) hosts);
       };
+
+      minipc = {
+        A = [ (a "100.100.2.1") ]; # tailscale IP
+      };
     in
     with hostsToDns;
     # vps{1,3,4} contains root noratrieb.dev
@@ -89,6 +93,12 @@ let
         grafana = vps3;
         infra.subdomains = hostsToDns;
 
+        # --- internal stuff
+        internal.subdomains = {
+          immich = minipc;
+          paperless = minipc;
+        };
+
         # --- other verification
         _discord.TXT = [ "dh=e0f7e99c70c4ce17f7afcce3be8bfda9cd363843" ];
         _atproto.TXT = [ "did=did:plc:pqyzoyxk7gfcbxk65mjyncyl" ];
diff --git a/nix/modules/paperless/default.nix b/nix/modules/paperless/default.nix
new file mode 100644
index 0000000..5cb60cb
--- /dev/null
+++ b/nix/modules/paperless/default.nix
@@ -0,0 +1,24 @@
+{ config, ... }:
+let nasDir = "/mnt/nas/HEY/_Nora/paperless"; in {
+  age.secrets.paperless_env.file = ../../secrets/paperless_env.age;
+
+  services.paperless = {
+    enable = true;
+    consumptionDir = "${nasDir}/consume";
+    address = "0.0.0.0";
+    port = 8010;
+    environmentFile = config.age.secrets.paperless_env.path;
+    settings = {
+      PAPERLESS_TIME_ZONE = "Europe/Zurich";
+      PAPERLESS_ADMIN_USER = "nora";
+      PAPERLESS_OCR_LANGUAGE = "deu+eng";
+    };
+    exporter = {
+      enable = true;
+      directory = "${nasDir}/export_minipc";
+      onCalendar = "02:25:00";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 8010 ];
+}
diff --git a/nix/secrets/backup_s3_secret.age b/nix/secrets/backup_s3_secret.age
index 72aa71e57954d817e2cbc148e766cb57429820e7..af7230234fb4160110188098c8520cce111854ef 100644
GIT binary patch
delta 683
zcmZo+Yhjz9Q=gh+<eHtBm+kK5>f`3;X<6c&QJ89&5fKvNWZ>ss;8_`&VHlX@SYn*v
z$W;_*kY`frZWL)zW>Vm2q-|sxT#|2Ml9_Gp74B#3=;xT7>6l_%Rhr=u%B5?kP+Xj$
zo0?)|YHDbyU}+fUQJSvcs-G7bYFg?PY@F_rnNn1d<(8WlW>J=tW}fL$n3b58rXT5I
z8Re2>;U8kcl@pnkV&ItQpIcy-Wm;flV&-b(<l^p`SXJdw9#mH0l4<Fen600YoEGUg
z@uPTnsZoYuiffX0WO|mnQ=xZKs-<zRQ-Hp9Zb4Xfm0^~?bDF2KYf@4{ihDX&j%9FC
zie*8tVSsi<Zjg_Dxl?j+rEz3xky}`xzF}IBwxO$EMv<FAsJZXtct-JX$Lunnq*7O>
zid@$u|MaM;f;4@TkT4V13a`xcNQ;zEA6JtIk1SW;lyq0FGA|>Ol!#;t|B|RG!wA1z
zKTFpr-(<@ufAfF{PuJooQ?Ig2XCM8NTm#R^XBoxoT|z1&z1_VE{JioC3iOM!!y_$H
zQmPz1O?+J{jf^v^Dx3<Fs&b7&bF(bCa*fJLwUbN?L(DAABZ7*PQZwBXjZ=c7vJ8V$
z3zPG`vrApPEOJ9!jD1bGbaizV3e24i3@rmf12W80E4{S+oeYD_%{(en^Fq=?v?Ge6
zeEc)(Ljp^jqPz@4xolInuRnhF%4@$a9`mLJBA;#?mYsTI|BhbUNxf5h+sgzNyR9{i
zJH1JcEw%g(*HNX}9SjO~(=VU0cRZYR#(;b6u?rVEpPrTrofXF(U72u3T{Bhmr$@%B
zN(ZrUw^s+xBwai;jW6uXys66V!83Q&9-C{Fq`OjW<|U=sSpgNvhfS}1dBai_y-;*z
XyO>Z`(z;(#rDaF!u13^cDV+%b=!*3_

delta 683
zcmZo+Yhjz9Q(u;5m}8J{?rjm}8RhQkRAE$M?phV@?QS0G?G{*4>Yw3Mn5FMmS!h-f
z%4LycU}0vQ<Kb*!To4tdpW>PA9c-Lt?xP*xYT&7zYmjDCRalamW>Qib%B5?kP+Xj$
zo0?)|YHDbyU}+fUQJSt$WE!6BSz;Nc9pbBBRa)Sl<re8-?pEYkWfT>hT;iQ!kQ|;_
zk(lUXQRZR6m2BW;QC?}09+aD&?`T@)>S*kk8j)y`U*utwm>ZtrnO@=L<&x+WoD~u{
z@uPTnlv$N=L4Hx5cet;wfkjY7L3o%+WL9{wMWMHwWksGvj$g1@uyJsKTd*gWp}$F_
zpL?2jR%WEWlb4Hkd9I<Cag={XK|qnOV`fN7s7G3qv4LrBaB}|Sct-K?<O-+ItRffl
z;*#(bZxaIpe|;klFJI%xWN-H@7x#kjs1lRNLc`*)l(2NJ+;XFepb&Sr@XT;eOH)fP
z3wM9#kOKYe%rFa6?QA1`?W9Prf^th!{nYZwXBoxoEs_FFe8Ni#vy2?`Q}Vn#lEW-=
zT(h-}U6Z4n(!xDL!#o1Llif}7oXb7AQasaAQhZE&LVQc}v|R%OO9N7Ty!^7=!zzo*
zLIQG)3`{M{0z*UdT-~#|baizV!aQ@bb1Yp_oWjG>Lo&U}oV<;*(o+hGebU{t%gXdq
z+|rWjqkLQ=eRD$$xE6H&T+Hk4YWve5>EEe!2c86MWYc=_<h)w{XSujAP5W*Goo{=W
zl@%nOSYF#%@O({M|GvoMYmY~FY_vWzZ<9k8d$fE$Z~AVP3aLBWHe051J*keYUHdJ*
zxkK^Du^%7qi0)sh!Pnj$%^I|Ddl+B+o%5Wb>V=b*PE(ritQs8kx?GBN!Tb<s+c&0<
W5|3=^uW<X%#4%go*#9k>UJn3xh4r}r

diff --git a/nix/secrets/caddy_s3_key_secret.age b/nix/secrets/caddy_s3_key_secret.age
index d734f8e50e294220306da65e608c68da766d6337..fb3f1f48ec1054af7c92ef1b15f832eac210f897 100644
GIT binary patch
delta 816
zcmeBR?_i&xQ|}&-Q&OB{8ju=ZmYI^Jt({(y7M5>Vlv$GJWEK$NVdiL_=^qjq>K{;<
z&6VWp5oO_?6O~aE;uq%ckz!$ymg4J_kz0`;WRe}?5@z8NR%qc|7!a-<%B5?kP+Xj$
zo0?)|YHDbyU}+fUQJSuh65$)_V(#POli{Tu=~tFp<rd}|nG)jU7!m5^>y%nt>X%*~
z<>BiRRb}AIm1Yr@q@5S#W0{<umT4Fi9ANGg5s_wUXpx_ir5&ton(1$9<epL-ni5bv
z@uPUSzK>66s$rzJiBXBKVWD3|RH%QDS8jSxX@S2-a7cbdse5@|cBE%gq;oQtWqP`q
zV}WUMioa=Ls8?P^U|6DORamx1nT4lma&D1NPHsU)p<hL6fKlM&ct-K?v~;(E0K*iE
z?9gnNygavx^w6q`{8ICR2>;^Bq+s{b)Kb5Ef9K#r;}BP_?2M@Ng7S(C|B4W!ibw;$
z9FJf_!xSTfzzF9;k3tu(+^C=^BR{u@VEz2bXBoxoJyHS^ox{tsB3$!B%H5-Uv;C{8
zlFCX_ODs()i*v$@1A~iQ3RBATgAF6O65X;~OI_XbQw<FQ9aFr@BU3UxvLhWUv;2y@
z%e>9KJrWBO^#i;d4FVmxbaizV{3;wn%Kd`V%uUR4vdcZ3ip`uYU7hodbG$Q3{Vk0B
z1Dq1;ef^UP6EgyRx%$M6m+pM*&~|xg*@@~8tM7Fi>gV5oyl&F5Nwu9iA!Q!H_32m3
zT}zL&K3=u5-pWhyPlN5kr|c&jPELBU#Hsbt$+ELNdW|pll{ToQls9jRi%mK3-p6JJ
zcf|+c`;Er2exlxg_6An_FpEy}nKj>NqDtc5I~EVr@6^{U=yKb-cx%mrZvUi%t1IuU
z)N<PK>+FhzpHexQ$y4-i+v*<rJ!v(Ey|SlCtXV^F?8zmH3uRBO5_u?>{AlhY(S@=N
z_0EcUdVBvDi(AaF(Y`m~S*o|LL=Cr_`nT=dB$Hpftv{x@lvPtX#f|-9*PYn?0w;Ta
zUFcq%{#&!GDk7R){ptHI6QM0xtq~hC)jf`1^t?PL?5@KNy%Q_0e*b*srkCRPEspZ~
G1<L{PLO#U+

delta 816
zcmeBR?_i&xQy(6b>!_dSom1(ZobBQi<QY|An3WV+?rolu>zU`6VQLW+UJ&Z*9FXN~
z!sQ=fqHR=?>S|`5VV)UT?4MF<=$;nnT&bU3;9g;B;h7n1n66*uR^{dB%cX0lP+Xj$
zo0?)|YHDbyU}+fUQJSvc>Ft|S98~P>R*`6&;%Sj%>6U3|kXYuTUv5@pk(*IfT$Soy
z;%MQNoty2-rJrb-8xWrC8|r74<>(h>sh?!7pC4Er8eEc55S-;ykXlmdUzDv~;pLe<
z@uPTnR76@<N~N|}W~rB9s(EOXdxcABsZqGOzG-lJxJg)2R<MVOzE5UOMxY~?VPKlG
zUy6~oSCV^*hf%JnZ$y!4pjokjMN*PaUUHgGa8W_7MP^2rk-ov?ct-JXUjx4=bIa5M
z*NUj{(8v;P#~g3h#LOyFuabZu*F4{RgFwqn!{nrlV8>*xqGHDa(<sxR5Rb${i?EUq
z4}A;gqA-tQ%VLwV$nd=U%5sl<XN!!AoHF0ZXBoxo%kokx%JOrJ^j(8|9le|_BTfB%
z0t+pSBEmh2iX(k}(+Z1Iy+cC-Go8}8%Jg$As<i!lE0PUNL!I0cQ+*>m!(GBtBE2g@
zBg36N1HvqgA_AN(Li~KWbaizV$|_QPB8@7Na|2Ry%|im+3Jcvm%*x9gQ%$_9j7%zh
z9U~&@%_4Kcd@_Qvx!Clja&$LjrvLsu+jmB#6R(7v@acM{MWrSNiC;yyJkDNY+$Ng+
zKuh}1v72^kXSdvZExhTYe;l`|pZz!6s+Q`xijN~$Z+x8izwn#f_R0#^yl9=BR&p~!
z{r#@b;5;7ns73M^%hh>nnDm!q+w8x7*JHBSPlh$}y!Gqlrkq-5F8!qONs-u&h-3}!
z_=5#&CRvL#GvqFCjPH(UT&hysz17Oyd(YM{M{h^996e{qxA*0hnuSZJ9lZEk<B9E$
zjc=QTRr6)7VvRXiy^Yc?8HH{>@Y`8t`6T1lJyWgJw_RE9dUj@-n&?;0gKCD1b8fEt
z@?P-B5seP@Gg^N$)mIsaFBY5dFw@+WP5S5C->F{<-n9H(CHBLwb>7PVj*nJKUH)jF
HC*}tL*CaJ^

diff --git a/nix/secrets/docker_registry_password.age b/nix/secrets/docker_registry_password.age
index f97c5fb..83a4bc9 100644
--- a/nix/secrets/docker_registry_password.age
+++ b/nix/secrets/docker_registry_password.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg I4FIet5K6KGjWaCvKbhK7UV4LFJthRpRVDO/FoARzxw
-F/KQtQI78KlLe1jT84oxdg4UG8QuG8xAVAutzVM+kJw
---- TEgDiZeZQL2K8Nq/xqUKrkPKSXyO5NgRbx8SkfGl62o
-(Lנ*�2����ڃj��E�D*
ȹ�^䥶IJs���y�:�7
o�Re�
\ No newline at end of file
+-> ssh-ed25519 qM6TYg 0u8KWoP0daJZA97H5KkNCSn839ObF87VYU4AChP2XVw
+PqtYdZR3xokf7iIQ9khrz2pt7n6FipWn5y3bmzDfdEM
+--- 3tTg1eoL9exHUTtn3Uww7xWecgmzf5EyyQEZ//Bbjic
+�|�H��LX�
Z��'v2"���<�K#9�$T���	�_��
�}^ao�4�
\ No newline at end of file
diff --git a/nix/secrets/does_it_build_private_key.age b/nix/secrets/does_it_build_private_key.age
index babd21b4e73aa04a131cc0c9c9fbf6ca05f86ccb..81b84bd45fdeca5ef9a86d1be3445b784c32fbca 100644
GIT binary patch
delta 1893
zcmeyv_lIwSPQ6iRsB=VsbGUa|o{y`EVR&Y)b9j1sfkjA8UaotoXR<+digRv~Z(4>?
zI+tIdceb{Hc7{(xj!{ZTa)FVLnSX9zO1Wu9aZ*V|c!qCcsAFMLq`!w>IhU@ku0lYv
zTe!A+x~XBgkzZ+*XF!OllaXUluBmC7k4bo8K)6|iSG{(6X<A{KnIji}`a@rv;C0XQ
zE~!;)p5P*vpwE4rr)6o0bf(VZJ7QM3Rgr}+Y%ZjHRrtK*#U}>d^JilXxA$FDQfWJM
z@zjq6dbj+QE~^~mOEanrp6FXL>xb9zWQHmo1?i{#&tg8A>F>KPDRrlO>Pg+hDqi1x
z9qjLLP0)VM5Voz}Q?0Y=&td0-A#0rk!{*EPWh|DNc-w{XYe}q6_gR_P^_!QoF8Mo4
z??U!IiKF{o{x`mnnRmSXO3tFi_ri6(!cu>lK3QY5`g%^`udM>%ZrMCnv)6>VoBdWa
zRq5YS=$NjuDd$IBijlQhB$rCfq+c}(dToxrXXPhtmC(!GrQZCpxPH-&8C<7dPMP)C
z`(W)<`5hm>b{)v5nvlZYtDSZ#Pm49YbqiZv+;wlRCx+b&QfG4PdBn>+--Lfv`@<F}
zxIw?+zUQ5F4pRlCGG_ZHt*&(V@N;eL_x%snx=a6cx!u&dyK3Q!QpVkkceAzD>6gBA
z(!X<ZZLj4Qt2d`CCB!!8UoM+je`<N`hporVeHrK6dA_tT?Z?FpJDQEuLv1QqRCV1-
z7%QLNa+)Om(`uGj##*0u{j2_Ma?lBR`?-W~-j#dn<)_Gn`E9@H`uM6?y!woPod%|{
zbDQ=xp4jgEa~kW`Yv(k}i`F(jxv-iksHF21=Z4~W2VbY{kjaxdSS3=ptGMO0v_5Bj
zx#P9_9u|*d$^_jEUv2J*(P%e|(2L8wn16S=P?7D8-Hfdsx6TSbb(<g(pUr&1{`Zl0
z8)`qgOK|I)6fd2p8p=Ay^&iIpk>!^j`ahboU+H;cT9EhcT$M|ym8p3WXDp^OaWNcc
zShsz~zu7jMeK+>%PBwp;lDuHUh9_+M|1VK$DXZ@mPrJHT+t%Cu)zza9Dx8(yxICWd
z!0@Hrx1h%8&;lEto||cPbqyQ!CO_d0k#JSn_o_4D`HH{SqVz5wdh3+>e5RSta{a`6
z-=`NnHFt2#RNBUGVIQk1{<NSh=aoE@U84M-X+>8jIX!gEOgNUN{cHXV52k2Cd9ys$
zmN$oT9qr2M1?zpJ<zFv(;$6j**y`uacthgN4dK&g{S*ui71W&ce{<rD(VH0;o`%Q#
zwmB*;&obr4@rB-I@xT6T-|{V#<@=%SY-{g5_lS5{Diw0R*7Z+(!NjwQGT&~0k-u4y
zlM>+Q{@k+i_O*na-=7)pC<$hgO6QsTW=gVt$BIY&6OOHUlTllLT&{H0<B$uU99!=E
z-^TOy)bgTGZH67~Uu4Y_W=$^I_T;~m&aLzuzW$|+AudY$74EF_E!z6``WEl0ZXsd3
zlbljTrXH!;;?g%?ug<MwEjJf`hsbML)m4f7-irUiq<1KuKc~2vF>mI}ju#FAwqh59
zrN8s3DdfEWWT5xGwLW~$zxtQAPo5P{zpz$X`R}tCH*deyG@f7aZ{q!$uZ!!C@N38C
zE?_!+E!u43@dwu?@B0^X!eDDiSOx#pzwz7sRnyH^KYO3fC?43gS>2P3W3!LIEd|yR
ztBs*;oBMx$U75XP@r~OrI)mOOKVEBpi%aucBJ0$Hx7oTp|GE~bv~JB7Oz-+`Twi+R
z%|}knTh2W5*fw_wxJEdh4xg;Y_bs?0{Qq*b2T_-9ZsBW_GoO6NVB125wy<q~^7x)k
z6BApTxWwX&p3QQHd6m2s#_v754p?kl-hc0-F!wJr386^7O`Cm#8E(E>a6SC(=f|Nr
za|I?XkEqBwEV912@n_iD9TN_!|KZMGwymGPzCY^Zq>YjBGfJab)Bep5OSZWEUux28
zmBpP>8+T6jU-td0)`ZDb21|IVETmdY|JzHKs`I_uS{-=7z?Eyo(mzaEO?7&)Av>9}
z92-9#*!}6miX9&tG;-ZmCF*g0`NOni`K1dl(=2sOaxR@uQ}&oV)9A*}mc^AP!xFjb
znclZgkV&ZTtWJC{wflq2tV_Gt;~Ng&;NrY4fBUG6sY!VHnr9(eb39IpP29u8W3xGY
zx1-#l8;=A|UCw;<+T+0d&;FfWZB@t2CbrIQtXnpJ?oFPypsp6<XKZzSlJ#=t77bB}
z=^D0nIdS%EKkq57;k`2{rEThpj6bR|5^dq8n!jT@!)_nYuNRT|pqR5`Z-^F0a>bNS
zk{V?`?+XqDOk7~MFMY@Mbt+|dSM5sJ&;M7{wzz!N#<<&@NnAcf=bHT3ZX8#P?ds*8
z7Pn`$qW|JDQD;@_-{;)++pj()>2q!4!Og2K2?oi=`fZf;o<G+>%Cq&=@<)x|bYx@{
zB&J{cy&#1(;0mYllZUtCJeR+0y!7*ix3W@l&DTjQ^w##pFPvP-x_jcBDRLYk{{%c8
zLp@YNWPj$lAO5$gu(xCBDyE4CPo$m;bx@gn-};a6Rffy$UpfUU4(DsFQ0eJTKDJB!
Q`3#2jMX%<wJv{CY071-#G5`Po

delta 1893
zcmeyv_lIwSPQ9T)kz=rSxpuN|X<($AYk*f)Nm8guaHU(ZkGogCOK@PWzoA>9r;(e1
zD_6LeNpMt>d3v^qWrT5dWR!18YDq~_a!GiEZ*ECtMShrtnOljWu~W8RAeXMLu7bOV
zdy=-JnRmXkslHcIm3OdlVraIBxszj9esZRPV`*wsR((lfQks8pW-?dg)f^RrqoIc$
zZ+))y`jyc9&fVv_n#BI@*dyPwWJZI{lz>qCub$j&4F+?o0_yAMD4a=_7LyZ|s()vH
zx+i0rrqR;v^~!txbg_24OYZ!AoA*G?<@5d3=Y{uuceZ)v$dS0R);mP|BA4u={K+Cu
zG82{5E-3ESdDmIL&dmSh40nk+sk}cz!#46ixoLDyYe~zpR|~q9f4i$)%xS-JbIul@
zF9nQgr%#uB`pvRXTmNU8^3;#=Ve@Zlz1k?dZ`wlN_mx{uH_xcL`n-O@kD3b_m(o0?
z-I|^$%iXE1l05Q{$I<UY_imjqf9^~29o$?~g2F!ve9Sm|q*izH?x^~2CW{aEJF%ZW
zC-Lw0hAWq%+I{PGuk*U`<ZxLvi^!fu(`_}ieAcWuo;u^jE{>`HwyoXQkh16*n->3y
zPzRqcs+kkctvr3c*k#7H`wAaI4;t}?=bt(msrLGxMEjY?d}kj#YSPsFsre#Xwwn3m
zC*__Uvio~&+_wnqS(NzqbKd;G&}sD&hEsG6rnxp<+LQQLuJ%vG0mn@BLq{c#Pkyyj
ze63vT;Zi+I^A+A3H0}7+dp-&<2t>92yb%A(Igo3igT*A(@?((=T1o*|{I9tCyR2FM
zUXgE(vz5!=f5G?X_eVYZcjQCWe~XfoZ7j#{Tb^rsreQK8KDs+;#pay{^u?+z9#-GC
zs6Xx)^2(_)_4>*kvi?tgo!^uD<G{m9{MYN>^UVK$v5fJDcHZ@kS&g^uMq0S8{v^5~
z$G5<9#VnzxE1%vv60>L5w~Q@zd?&LD)r@X)zs>2ocr{_JUg5N3-($+$vy=0M&pRHR
zSba{fbdH~~?Wt%}*ChKdEq^}V=h+bF#hCIY%-ZBry&Uf>+sZ{XN|{1mDwp{PUOQ!S
zY_m>?gF<E0_6;X1zr8WKds?z3?ca)X^Gb8?*j6%4PTJSJgexO&7fZ&k2WQk0Z6B)Y
z$Xe_$G5Y++$o~8MhiRUk(Z4cn#q?_?Ui|UrU8PI=?F;WF&F6JxJ3r}8(z8d7an<TM
z7m{D+&hUEnfAfp_OI!kWdml&_md9>NabSIMcw^c76&oxk&)De9y!qwsD{I_O-aB?G
zKxJP3uE#UWJ*;$<tXX}n{7;8y|LU9nWNyuaUeR?jiz=f}SFN70%+dDbWTy5-&X&Tb
zk34u2l3Ki}Gc7QMSHSkcg3D=XJFB=`+ZJq+6IpYP*Podo+G^4f=DGDTU%JY9@)`K&
zZdtT4|InIw%Qu~Jd0nO4JhAWpce$b@Bj$jvuz26T!(U^+bF7?nsQ&Ez!@<(U{&D|#
zC3FMoUJ6U*WQ6H+3%rlzJ9hTqGx4h`C+8n=+;*C`Mryxn<er}Ep|e-MWtsM5c7aNV
zFGq01;-Ksg&zDWJ5PNr~c1q+FmHNvk_@AF&AN1;D*o<p?D`xNbZOQd$>rROf<9mh$
z*W|C<I4m%`V3D0v+sQTIuOshu@VBq_vUl&5xbD(;X+wZm@T}{x*QS2WWqjb<=k%>*
zWmMy`mU}E6p3!%@XJ5NzwRX*sH(#}n$kvA3>DQB(ZocqfS8!_L@-Js(CG3AY9jJSA
zsQ!fMjF8(GWyJR7B<^~&fMvbXHwFd1MmOEn%==y+Ueac9UXwq!@a&y{w5Ena@eZS_
zHx^D*&;P3RxnuE~g{LjcwZ9b_Eq(dyI>U=(UjL~Nq{G?UryGjCbZGK@tMcL8-=(W=
zCpWlU;|||nR66bW0ggVqMGJ+d?hQ-P*5;NkSbjsKzC*s9Bi2;yr2hY`jkE291ZuvW
zb==9{Q?ZcCt=N?H<gJ{Zl^Gd|><%~Wy;J!vF1s-Oi=k=ht|XNsai=?i`Yk0SmQFRE
zudr|4g_CV8n>{S+-psA}erS28kx|F1uhIuHdN$n=5O+B_<z(RI54%F#1ZwVa{@9Z8
zPTEm8ds4@W33uub`)#O@=8Dt$bE)j>)0-bEg^xY9wd!%1o2Yv0?%l|m5N?5sj;)19
z(q5JYGNssBW!`MiS(-V=)@EOY*Sy+mk}FcCSlp|rG2QYpplG-7C%=%Q(;JU-YG<iA
zWGaZLy*MMZsXMO9yZf^H*=*J0PU~%K%coVCpV)p&IaBoR)NkI&^>_S^tG7o9Kic|z
z?T&f*Gc2R_x95G|?jX~aap+Y{?wXIbYRlF-Wjc733QglJ<ZhakBJJP8b@iXbjfd8M
zHYy%_nk_nUs_iXll_2S-C*(5)*FNlK(JRt8r*v!Ez5Jz1&dsZ9aOC}Yb!Yjb6Lv>#
zOYsWH9&Jw)J5aapV1j6t?yH=*sfSKzcXRkKZGD}jd?4sNo6aA}1ryHi7F3+KYqNaU
zvj|?LrLK{R3%n|lds;4d${lNIFm0@AR%%ZQVhwg)uxPSVo!jGE24-{Dy;+}m+3R}S
T3pKO$?3A}Fj!4b^D|HP3V)&Pr

diff --git a/nix/secrets/forgejo_s3_key_secret.age b/nix/secrets/forgejo_s3_key_secret.age
index 8313430..ae631cc 100644
--- a/nix/secrets/forgejo_s3_key_secret.age
+++ b/nix/secrets/forgejo_s3_key_secret.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg pA28Ib4AvSxoAZuGE7ZDW7CpA1GQkYm77WKNahcUFEE
-HjzZ2b/iVig4reIgU3z0O1El+tct50LS5fp+SiQB+Pk
---- ExFpE2FxaqSuuSMtQTU+kzVz4rI2SriLKhcy0JHZXPo
-K����z)`Q=���gX��g��}�|�
��R�!�w�D6����?^4��HγMV]�`7L0T��6�1��N���d�1\��ץC~ϝ�F������
\ No newline at end of file
+-> ssh-ed25519 qM6TYg z5yLpu5zJ9m7Ukl3nEHZND8Ot2cYnADJidYjELzfr0k
+qy1n6TSeWniRFXLc1Zkpvz1+pmjFaMga0BeSE1q6RSk
+--- fe6vqb3f0bRvXlQG4JglZ0h/At5kUPIM+VkRh91BCtY
+��"�.O��
J���7���6���~ԥS��H����-�4�0���[vA�D���=���^T��y"@A��@�,������P��|�q!؊M
\ No newline at end of file
diff --git a/nix/secrets/garage_secrets.age b/nix/secrets/garage_secrets.age
index 0da71d3087bb3146420e55ae4b31d135a815528f..7f33bee3408de17e9140ea4ca694103ebe5276f4 100644
GIT binary patch
delta 730
zcmdnYwwY~$PJNbFu$OUacv5b;cVS{-qK84Avtyc9hFO)nL3yBspGTxma)z02R+w9+
zFIQfbueW7IX=1uzZfZ`dSD3F^qMy6BacGvdk4t8DPI!r9l54SRSYlL>E0?aFLUD11
zZfc5=si~o*f~8@YM`^l3PP(6dn5Djdq>ou)S-wlYshdfXZ+Ui5R=QV(xshv-Nm03T
zrIU}VxtEhCmv?2Mf3k^zzG<dkX;M<QaapOGS*mGaWkGRrs9(5yM6kbhNLik%nL%j!
z#E;_Pz8*#v$%d&;5zZcYdAZ@Ku9@CRPUeMqg`VL_hK9+Rkx}^tLFL|tIaTFc*&apa
z7WpOm$(CNh=04h`;n}7U8P4TV7L_K3$*$SXX<3<Nrk)`l5e1%;;~B-ny^<obwKFq4
zDzrngi}H)J(gKVuGTpNR1C4Y1+;Z~Ge9Tjma{Y7ty{d}2yaPSV3d7QJwM{HS%|faY
z^K;7s0=)u^BZ@7&oFfdqTuQ_IO3k!WvO;|)pJf!U57#eoxA4lgv@i-uF7pl0jtYx3
z^hz(u);FlkcF*w+F)=sv&&dxnvv9ZIveeH^b*s=WP1COO3H443FY$~F&2+8w@W?KY
z^zqM#uy8Ah3NXtrEzpnT($&>f@GCMb$d2&yC^OK`aY{GwG7il1Hc2zh_BD?356>zO
zaW2oQ4~_Km4RUnK=6X3bwAk}AXO16JiqD4wpO#+WkNb0y{bV7tzGT2u7mk=)FK4_{
z-FokDvB^Sr=QID#@4D8Kn7)U9(f5S{HM$*X^R;!lU$AbHttsOx$ZCy!(4yDpGx^jv
z+n!}V=Z2oT|3pTh`#`+?@+5aQwa9Xz*Kb#Rs^L$oGYKpVn)Ov{kx#`km0R7LBd3W4
ztSxf=|M1{dKUtj_S>en2TB=SySgq_Wb@G$LndP6iE1PdqQk!{ho}BHvC+-yszWXiH
UV`<6jl=C+i_>x?kmRuDA0PtuIq5uE@

delta 730
zcmdnYwwY~$PQ7DRS!HfiWspT)Ub#z@r(>#xMOBcIYmq@pUSUMCvuQ{~x{Ggwn~`N`
zGFNVHWMx%GV6J6>d67q0X{L9okzZ~~U`3IUhijsCxO<*kTDfPrQ({s^HkYoQLUD11
zZfc5=si~o*f~8@YM`^l3XlZ_AntoV>QE^p(S$V#9h+A4^iDOQhez=cMdXT4nmanOk
zcUVr4nPFZemr;a4PP)0iN4|-%U#OFlwoy=tuX9F0nTJofZ<2YLqhFYBrkQqjp0j@T
z#E;_PChn<Wz6NPY;ZFYLp026srj-$e-r12^{!T^O*^UL7j!98fW)+SG#(Az>RsMmc
zrBQ)th8{VAiEgQ;`r1`4CZ=9~Y2_w?hMw*fP8sFFDIs|lS(*8h;~B-nvw{tByu+RH
zJVQeL3X(ITLPLx^bJI;6vnvwa9E*dDi!7Y{%)$y&{j+_!{EDm0y)7f1{mV@}T=d=2
z^(&2%EIp0FjVr>l0-f`s%nHNHEQ%{KT#F4RpJf!UH}g$NGx3gaF$hj7^4HG`57IA7
zwoFPZ_9`p3@Gs5tGN~%AG)Xfv&&hP<(l!n+aZa`{ERQtt@+(ZQaLy|*&M`|%b2jix
z%#HM{axY3X%QY}cx9~~k($&>f$PIPY4$m;~H1H@)H*^flG7Is`Eh;j})AuhiaH{YL
z^$IemFAB17$}<fP<?6aq6Y|$i><5d}Uq59{R@+GtGv*!I{j$@2X3X*!y$&;Tt<G1M
z_uVKC-93f(&5E$5$<y{MNqwj%pW<HdgyH-7@>`<ri<twz8ct9X4K{suWR0U?(Q2!j
zv<duQo1_)2|H~~5eSS&w<f=P|Rx++;VJe!Nm2dEBvPWQ4tnzu6xBu3ko_NDA?SaD2
z><u^g{QTdnE}A;um`6!?Tf*yJ>p!vizNgM<D_IGge82nzQ_Q25D|t7secM{MeHx$U
V+}nw1I?jnbn~t6ImYywE4FCmT4u1du

diff --git a/nix/secrets/generic_backup_password.age b/nix/secrets/generic_backup_password.age
index a3789b1..5dd7134 100644
--- a/nix/secrets/generic_backup_password.age
+++ b/nix/secrets/generic_backup_password.age
@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg AcP/Za8jdEONeSNcC2fm0rZg1VOMvqCreXdpd/iDKDY
-dgBlpFUcvP/n86idjIWuKsx7jX6xEWQJKY+pdGG8XVY
--> ssh-ed25519 91VHug R4SIqnNLIoIVGIR0XnUsh3RCz+20M3pWoQGJta4y2CM
-s4O6GBECMUQpUX7yhx9CrNgedDn6yomCg8Bkke+4vu8
--> ssh-ed25519 XzACZQ OVHPNsSR5IfrAslyKuIMAZakz+k12GUGNYsGc7e5WQ4
-IQKyRtlh7lkwIdH79IYCYod93+qAqap6rGL/VJ04Mdo
--> ssh-ed25519 51bcvA NYivGhQwqPbjLY+Bb08ow38Rb1SBfbEotPwdDr/v7gE
-VRT0QUnImc0unH4DoEg07+PhQ0a3IsJRrJIcgDzBtjU
--> ssh-ed25519 vT7ExA 6gW6MAGGmz7wqrE1cNgAJqhLyLBDnAkh3IFB/EJf7Us
-nhE8i7G/n/CnLTOUYsprFFjWCA+v/CmOpYRB8dAAjaE
---- WvW+S65yf7YP+UsQH7VY1CSRqIFyNQAMBzVDCKcgk28
-���wBэ*�N�%uz>��9`?T7��L���?)�:��g��0��7޵
�L�bx��a��޷$��?��
\ No newline at end of file
+-> ssh-ed25519 qM6TYg WSRKNimMa2qdIrTxZIsnybHi+gzOweCGmCx2D3DPciU
+e6MO1QIL5FI0ATaR8hBUeE2ayLoyP4P7d5eO7liMBHg
+-> ssh-ed25519 91VHug JZjoc5tcVSQjIpbVGVca4P2s80Rb7NTIEKPhlXx9wQ4
+QWqufjXwphL4Kes5Ky2tWozdusA5AJwqgzT5JWCQbvQ
+-> ssh-ed25519 XzACZQ ek1dpX4Lqf6hd13B0dX06tTTmNRhZswxV3W1gBLKkXk
+LQMnAxrr3ZfUc3Brn39BzIdyBe8Jma8LSML+eaBuKJE
+-> ssh-ed25519 51bcvA zA9GHEGOXETl9zX0yoHHB9B5On06KlEcYRba8eKGKEo
+yPTcsFhDLiSLpWoZX0b7dNzZmBaLTUY8PSMVFCUzlRA
+-> ssh-ed25519 vT7ExA N7U+hiTEzwKvglQ0At36e/p0TTA7xVRb7UvuX/4Bbjs
+acP9zBODifOsHVmM7COfBX+tkxZIPnQCUR0TskHacQ8
+--- tOLU9ascA2rI4R0oIg/0vsn2dEC1LBLFN6TFRcyrcvI
+{�đ��q.忳U�َcO��)��|¥�,+^]���?��PĻ$3m�4�Ǧ|�c��)�.R6@r�]���
\ No newline at end of file
diff --git a/nix/secrets/grafana_admin_password.age b/nix/secrets/grafana_admin_password.age
index 7598694..53e26d0 100644
--- a/nix/secrets/grafana_admin_password.age
+++ b/nix/secrets/grafana_admin_password.age
@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 XzACZQ 3nDPKBmskuTAvsJAqjRdIWyRBmz4r6sPAKkgUu4DWV4
-VHlijfVCMdwh7VruZkldVzEZoNLanXxq/yDzmiZFIao
---- glAFu4uwb5Jk3cSyOCBWJr4BfJVAi9HxzWkvTVm1dZA
-�ƫs
�ȷ�ocp"���H��഻`�3���M���r��P�avEP#�9"b}%��
�w����Bo��i�l�Q@X�C~y"��zP4SԊ��Xh}P�æ�ڡ9���
\ No newline at end of file
+-> ssh-ed25519 XzACZQ jIs+NClvISjvJSkJlkkGX5ZJzFge/1Nj2Wi4en/viRw
+H1sfzg7cCWmCVg9GpFF5QNVVJjllxbmt7wBETRfM8hw
+--- hOo2vi9EjLwAa8PQzJGdzUZ/VIzfhM7TnPsQ+OYJzcY
+%�f>8������Àuw�[	�l*�V(u�2��)e&����X�)
+Ƽ�Q�"�X|iO���,'��;��Itʽo�Z�՝k���E)��I� �0v/��?
\ No newline at end of file
diff --git a/nix/secrets/hugochat_db_password.age b/nix/secrets/hugochat_db_password.age
index a0c5bdeb1f901d7c0b02956dc2aec8f88af083dc..fec59be17cfc087c53a1d386796c2d3fcc51ed3f 100644
GIT binary patch
delta 304
zcmcc2beU;_PJO<mTTX<&yLoVaiEp7nMz~jau~S}YNv40PZ>eQLgjr^!dAV7Ize{MK
zBUhllW0Y};cTRbxX_0G~MQ&hlpqsvVsZ&LzK~R`$Rbp0(cT{PZyH8bFI+w1lu7X=>
zmWN-tWl&nOd#P_^T0xenvt>qpc(G|_WMY<fg?WifVZE2RNlsx{aXQz@LuCO=6T2Mt
zta}+K_-?}HCqW8&vmJD}*&aAp|9em^&{R>9_T0Dl%5i=dH}+RN%Dtt^I{8vh6jhu}
zFD%Sn?bXP(e%e+4=4VMKF0DIz!X|U!f^vW6v#F2clFZg~rnP@duy6a+RlJDz>E}~Z
z6EkwxwjEEXZ;aQ>Hk^Az-fn^c%R3du>|>ACOf<KaQF!~-m$!{g`n_YvhbxyGU)9$y
HGhG4z7H)k*

delta 304
zcmcc2beU;_PQ6)Wg;9k|rk}BUainopQc8KYv$k_VgomR`sc~6wYHof&u6I>Igt<?a
zE0=GUc6v@qsaZgAa7aL<d00xaQ)F0Tkwu7KRe7FcWQn<VWLR2WsCjy3K9{bpu0n8L
zMqyP*Syrf_c1}c^uTy?nVz!~PNqMPHlCeu*qOpHqdA)DCqfvfwMkH6^Qjss4_U|iX
zXxY3rGX155!w*57dJoPg6YhH3-0RDD^uwGzqkHlmzOU&|t^V=|YUh3n?GRrfemN&?
z_xYlVyUx~=RyZy==K1SEvSXuZ(9(c|Uv}O$=b07XA;nO!c1Ec5qs?Z<vNcaNc0bdM
z-XTzbWqoUsf`6Unw36uDlI;D0e4KqYKV6jj=PO^WfA!{=&Ay|DQ(su!+n%uh(D@<-
H(Ox|OUKoEb

diff --git a/nix/secrets/immich_secrets.age b/nix/secrets/immich_secrets.age
index f485b4c..08c97e4 100644
--- a/nix/secrets/immich_secrets.age
+++ b/nix/secrets/immich_secrets.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q wDQ9QOIpJMfsxGr63x9PozZEVfy1M0XvW9MvIjBjlSo
-eAbDN8ZB52vcC1zEXKqjWUYb+vvIJVQ+f9CZmk1Jcos
---- ZRGd4IncBO5g0BIoezzfvCxNMAVP3cgmsF8Co06u+fc
-Ui�,���W�b%d�9�:�d���q���{�
���ŽL�[M��	,�d���8{6
\ No newline at end of file
+-> ssh-ed25519 yMKb8Q szKG8gw88EAiUx26fzY/pYMVb7Vb91FZC1FEQTYRZDY
+0jBl8757lsXnxWE90iZLJcO5VUXz+E2+7m/ZfNq87J0
+--- huOResyzGVCip/Sdoyvid3TxFI01wiXNaHdZ/oGI5Zg
+*c��lH��x�Ah�5H(d��U�'�nҘ;M.Vx}���"�f� ����9��f�~Jv�9�
\ No newline at end of file
diff --git a/nix/secrets/killua_env.age b/nix/secrets/killua_env.age
index 531b5e3..3633642 100644
--- a/nix/secrets/killua_env.age
+++ b/nix/secrets/killua_env.age
@@ -1,6 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg 4XizqcJTul2c4nKebIgHNBlX1wfNM6ZdJIi+uD4STCI
-wLKLC8dfC1jVWNLQR2pmJM3+yvlILUkn6be+x/l1Se4
---- kgeOkLbbLqXAK8urZUOVhqPKn4AWulo4hGbOkgr+fOU
-����B���S�XN<L��㵆|sϮ�;Á�v�|��p`9�"��h��U�i�n8����d�U�Y�������oPuV��Jg��7�H)#�G
-�¿�u
\ No newline at end of file
+-> ssh-ed25519 qM6TYg mMvnBUGVS8d0di+drDXo7mws4Uz5T+nZmQY9uUpKfQ8
+rea2peORLvRF6qYtGKFnylyEdnV0NTc6QO3xSgp/y1I
+--- xyeBOfVq3hwyckUma5LWOU9cWHzg/XY2f8T/0Vc+njk
+G6kN0!�Um����[r�H����Ꟊ�t}׊X'�yq�L��bE���Y���:��n NHnH��ݰ���'�������W�|�3���z{٢���
��'�N&M`#��
\ No newline at end of file
diff --git a/nix/secrets/loki_env.age b/nix/secrets/loki_env.age
index 75520f96fa4d5b07be5f41615639b72017e4e2d8..3b49086d19e726dbfad8e15f94fcd8e5cc54bd5c 100644
GIT binary patch
delta 291
zcmX@cbc|_&PJLC9g=<Qoc7%UgPP(~wK%RDvXHdFho{vFtsYOOna$3HZOM$<?cc8mr
zK9^;cerln&Poj^DV{%z&n17&~XH{{YOQF7Da)xU}MygX#c4@h5Wte_SIhU@ku7Y7k
zRY96hg-J%Xb9rF4S*c-OhNFK;VNhhMr)gkjQAt^fOMSYRzp0CFVJO$KM$Ijkt!)`9
zZ~Tf)inn|Aaq7ZpqMMrhS6shev%i1!`+}-D98wmCC3@Dc*${D+W&fG)dw3bD8N^q;
z%V;jW&1G)7Q)}M-HX(y+4^rP7KRB{Vj_H%R%4_Gi3yD%W+j+ko|2(xS>HAlXCzBW4
vP5XGkp;5~zXZ6GwnTP60k(?jcQhh^;pH7-J>r2o%1+G;`zbVQ|h8_R_hbwxo

delta 291
zcmX@cbc|_&PJMa0X=Y%gr%7H`sB@ZMSxS+%Ws;>+u%C}%WtMS;abc-fVL@(oNJ?^0
zI+vqkN@}2Ma79>NS&peoR$*p@NvW|#wvV?-nu%+$Pl$(WS(bljl&M=zF_*5cu7YQ9
zXh?~dPl#z@et}O&QNFoxZkbDHV4;~oR;9jCrCCLqbG>)Dv1PG^X&~3L;(cp8S3Gxm
zSbX)<4hH_oX?=P}<fpG*7`~-uVSvN#H6lT`zV+SbpLl1TV&}z4e;P!tDJ5^pS-qk{
zY^em>`^i=s-}<XrUhV(zu>I%M!grA~RQo<0Y`D7Tp8#9dRiD=;Tfge%6ij(jn0aiy
w+pQ-Sk~@A%avZCFFC%ha;-x~eR{=xl!Jn5daG%<}@lc|0#&+J4=f7?M041k>_y7O^

diff --git a/nix/secrets/minio_env_file.age b/nix/secrets/minio_env_file.age
index 180971c..c046394 100644
--- a/nix/secrets/minio_env_file.age
+++ b/nix/secrets/minio_env_file.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg bv3MPWeJTJj/lrwKDBAv4T+OrRdD3ViwX8HLCmCKghE
-MGP87vT3Rmf+aqhMMXyZIs4OeMkS+uc+je6Zkod0hrY
--> ssh-ed25519 XzACZQ cUkJyWCO6HkdxCqSnv9onmEUhEQY+Pj4seR/lH8KSAg
-qTUgF/iT2IoJf7UOleaayWbkJbn5dgSVHKctKWnqfIw
---- BOvXie+k6OIewLDVF+Rx2YzkpytshqkFGCL/uYgljNQ
-�}�p��SS� �y*Sp*>�ݖ�
�u��:0b��:=)
t���S\HN�b��9_m��ٝ�j��{��)��(�<�3&Ә`�R�	��[�{aܓ��!���
\ No newline at end of file
+-> ssh-ed25519 qM6TYg OO4FC/zdYJPzw8ujHG66sX2ShWSrWfCKRj1z9FYOwyU
+84DDDS2TPxxoGxxaj4WLJN6zZfVIH7m1xC1mRMMzBaM
+-> ssh-ed25519 XzACZQ YydvMTzqlr24U79p1vCZ0DIB1DmLNxp/kLptb5WtmCI
+KaJ0zuNwVsYr0pLRB2MJIix22xTdujqspFPISU3Q9EU
+--- TzKmJkMsYD2ZS7LJw9qdVRsBeoxMPQjOyovIoopesMI
+��������S ����p+�r��G�F	�"
�1�9����,�kV�K�Ъ��鍆S�
�h��nhy�ld�FX+�����d�;<�fL�~�Dg�-'C���B
\ No newline at end of file
diff --git a/nix/secrets/openolat_db_password.age b/nix/secrets/openolat_db_password.age
index cc08707..234ac01 100644
--- a/nix/secrets/openolat_db_password.age
+++ b/nix/secrets/openolat_db_password.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg 7Nt/x/IT9ofXjrRRV7coT6nrrCSOCkqUqflm1oXLXTk
-BafDaEiVpuT3SDVXvuD31WIKe0QlvAGoyn4MzUm9LfQ
---- BsY9/meRTzX5oCBD+w9f+2TO/TdPD936xOjgtQMWuag
-RN|�-�
-�[�6���q
-r�7��d% ���[3K`�I{�!�u5����ƃn��ӺMvo�d���z A��~�������ǍT�	Q���G�h?N��w/YB�Qn�_�`�����_��,��Z����F�V�8yw�
\ No newline at end of file
+-> ssh-ed25519 qM6TYg anB4Ljud6na0zsnFkNjgBcicE6kFUg0y2xTlohEUggI
+gUTv83/Mktm8CyXdKEf1eu7NpWJd/hmiGzKs91WyPCc
+--- zxoGip/R/tIH30MATCWht9P9oUxU//L/jnf6T/DwKEI
+U�͌5��f��q�{���!���%�Z��E���;��
+xȻ�v�n��k�����t��P\-�1Pۺ�B}gMn{3���o����*]�ڦ�0��z�U5�2�߈���@y�r�U�gA� �-4��)F�
+�>"��U�b�
\ No newline at end of file
diff --git a/nix/secrets/paperless_env.age b/nix/secrets/paperless_env.age
new file mode 100644
index 0000000000000000000000000000000000000000..1da8fb8135d02fb883434d6e52d0b9edcb5cdf23
GIT binary patch
literal 340
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCTy^z}}%2vl(Pi?qyf
z^Gh<!O3ny#wD2l&b_&jlN;G!O2nf%~@icJ{Gsp=w2?+MeEaoaP@(xUovUJN2(Ko8B
z%*skjbM`ZgC=Ku{Di1eE@%5>4^>s}&Fv<@K^ySjk)m3ouch1n(uJqMT&rUNdb8@Om
zPcHV!Ee|csHmvmYD|adN%M8*EHT5*gHsHF#bI<1Y<?E|?be3GRe|3L#<Kk+YwBY1f
zmn8o!c+A3o(7TRd<rW!@!xDcZO(Xw*s%a6mxW~3sJoJU7OXRzf`%@KFweQ)nmc7(F
zF3!`r?To>Co6Wy%il1#+u;xSEw=;EYtGg$Z<vx5D`OsurpeifNSItI0zRss@>#lZ&
s8R&lVc;0;c@ZAGKrA59MrL9)aT&T-!7*xll`sJ$IwD-Q^GdW)X0G}&}qyPW_

literal 0
HcmV?d00001

diff --git a/nix/secrets/pyroscope_s3_secret.age b/nix/secrets/pyroscope_s3_secret.age
index e96d5b8a313babde14bfba7bea6036dc5000c39a..637f94230129b0fe981a6da395714bae63dde8d0 100644
GIT binary patch
delta 300
zcmcb>bb)DtZoQ91nYWXfd1zR;Z&tXaNuo<wKtxVpevo#VV{&OoaFSbgm6>mVvqyL_
zSD<A;ZitCrpjozYdbXK)KuWT<bB3Q|m1kwCvq5-rrDu}1w@+bcp>}pMm#(g^LVlK8
zs9R`NewJl~WujxSnMr1nsefg<S4x1lX>nGNw!VpFP<>T+qNPE3HkT2%=GJ&+LB*o-
zzh@clt^1kdar4uLy<g_=ZC_~@`>VdPv~nq@`<)w0W0My%mDuT@DmfLy5_^4SfPGi;
z|KDHs#tJ$`D_a;P1r@ucsQyU!zhD>7@dDL*7le-LAM@C-XI)m%lKUSD)@Z+UXTP$i
zcK&R!mRCpBK54tCO7!V<tUJY+AK_zZFC-OqU9RM`q1C6f<@`U5glZfZSveDP%vS;c
Dz<+kf

delta 300
zcmcb>bb)DtZhdNzd1+;ssi~2Rp_^q!NQGNul9^#~m0x&3s%J%UNRf%JSx|VChoMU(
zmy?@Ol8-?}sacU@g^{6aV79xPg|}a_zKM2LVZOeBtC_!rWm%L(ct%<vm#(g^LXvSo
zYN}s;l(|7knR%{bNnn1qmxX6&x~o}Uh<iX;Xm)U#MSX!;R%Ujh1=pn4Hf*lnx12Wj
zsSdyY)k}QZ_UV@sg;ziK=RE%<Uvk?upVMEjEsSo7NV%=6XmIM_F_X~um+j}?bndO(
zS3j%DFo$>b-qa(93_qmGDaLzF3fQ&J$T@Xp-wheV`A@>vRn2bs8x~Z1E89`xW7wR$
zvsa%uFF%{~K~wdN>Z)xkWp)MiTrc1MI>Yh$wQ@(ZJ7!TUclCeCF3fpyKfTKKn)lzA
E02#1>AOHXW

diff --git a/nix/secrets/registry_htpasswd.age b/nix/secrets/registry_htpasswd.age
index dce3ea840df7183eb91ce1a733f7700b83dc4ff2..5ffafb6492d9027815364a9a8977dead5d5d2f78 100644
GIT binary patch
delta 242
zcmbQnG>vJ3PJNWOxocK%Mp1!zV7OmsacGreL`8OaWoS@fx_M%Fh?{w6R!CHkwoz!9
zD_3NpU#_`Za+;4xs(xZdRYsX-sYSY@my>6)w{d>HfthikcA!T@S-7R4FPE;au7XpD
zlW}mGYpI*Qu}eUqMPP}0ex#+halU&{Xi{-_nYoXrPj+#NcY3j@TRE3(`_WG^OAZU>
zeZR}A-nT?cKgeX3sf>kL_vAa(Z$#qiovz9yu1<e9%ixIESta?yD}qnRuA3Ob(VQB*
uuqvGQs18H6P+$M4yQZcbFaNBY$&zp+So7Z5AD{f0&g$l`Jg_Zg%X9#cFI+GH

delta 242
zcmbQnG>vJ3PQ7=zmw~BoNU2v|SVo|Ut5K9esZ&K@l2^D%d110kS!hm*OR-O-Q$<l`
zF_(UYzhj<BplfNibC6|NxUqSfWn!LZv2jXOQMyNxk*kNhvvX=iqFIHnFPE;au7Xce
zQIfH*e|b(>u}?{QQJGV=fpbb=vT<o%WPwLjU~rjtNp_)UuzpssZ#vhbN41MSwFOU=
z?cKC<)ALESMi&_#{7w&l^h~maLu*UP{AD~0Up*(PoV@*8oZ+WlXvV6VoZ}AX@2~y4
vGIG<|z&TIjl5FH-9<1Kv)G02amacL%|H_a58TD`2MP77n>J7{_tY`)RKD1+U

diff --git a/nix/secrets/registry_s3_key_secret.age b/nix/secrets/registry_s3_key_secret.age
index 5649f2f..72fe931 100644
--- a/nix/secrets/registry_s3_key_secret.age
+++ b/nix/secrets/registry_s3_key_secret.age
@@ -1,6 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg /73Z7R1RE4lfUfVSeJqZjbGA5yjygfrxKi5iuMMxrno
-tsbPaW/x9HFT/tG+5F3n/3SsuhmswVIfHVLNRAzdiP0
---- jHapfTz6oq7gdrgBn+XNQdMZ67DbrFPBY6KKzb+wfjE
-���U1�r(R�MN8��Ol�$���DN�u����������3�Jo��n��BOc%�AT�~RV##�[����;3*����6�/�5gD�]���2��������%�f�)fxv
�
-��]��h��:�d�{_O�~�2��t�i�z28�� �W>��BT(a�%�������͉l`�\�
\ No newline at end of file
+-> ssh-ed25519 qM6TYg wkP6wv0rewclikCkz1XjByNu8dWtQgk23SW++uoNmy4
+Pqd1t5ITKxwLmBZxQZqQ1jHn5o+atN2L5Kdk02SZiDQ
+--- vcfVaVUg2W8jTf+BrDYg5TKccjk0I6iA7bJEovIvsVQ
+�	EcbMf�%s�ч�߶����:����ռ^z�m7��C��n��D;��3}�ZѼ�P���5%
��B���1�C�u`�?`4��z����}my)�^��⤅܍8�;�4v�n��T��I,S�}x}��阘RC�c��"�I��z�h
+�;"�(?^�a�F�oO��0z�c�ʕ3
\ No newline at end of file
diff --git a/nix/secrets/restic_backup.age b/nix/secrets/restic_backup.age
index c968ff04bb49dbfed9dc395368bedfbd6ede363e..38f35603c306c37e838a8a35dd71df98bf20d4b5 100644
GIT binary patch
delta 695
zcmbQhHi2z|PQ8zxc2c@|VN!0ChnZt;s;{|kR#kFYT6tNBOHpE0pr=<wo^xPkWMo!)
zAXiCLQh07uh^bkyZ%&>`xqEhUa79R}enz%-d6aQ(K}k|nNJVIXziVVwF_*5LLUD11
zZfc5=si~o*f~8@YM`^l(Z&8N6XHKz6RH}D)rcY6Fnwv$giFtXTWsYNbc7SD;cW!A;
zm1A&`ub)#sSF%rtn{Qy4NqL2db5uxqKxs*qM__@csgFr{SWr-fpJQr(rDJ+(grT3w
z#E;_P`4$;L<pCak<=Q?51(AgnDf&i9$pseq#(u_S+5vefo+)9Ll}2Xism88czU8TI
zKBfTy`tDxg`h|{Fp($QoX~w1=DPg8Y8RaDb<xWBQA^v5NktLy%;~B-nGlNp|jf(Qk
z+{3+m+){kA%1Tno9YfL!i}H$tGn@=eg52Fba<t2RGXp)jJd0gJEX{(w{0q|c!xBsU
zqKf<zldJqHs$4R&EIdlQ{fvVP3{6ABBNII*pJf!U&o-_~@eVSJC=aPDC@(H3%5yFE
zE;26gGxiP(%W*Wy3J)sq_H{3_a1Alx^7S@0b~eejOz}1dPfyA-bP4n*&GFZc%C^+b
zGxth1Ov+0&tujpuEC?*-($&>f$cpmtFY^pDjB?D+Eeh06&h*PPEXXsp^a{yH4NgrC
zaY=Qn4+%7ONp&g;<l3dNDza#6!A^&>pSI`P$UX?xs?6T+qusD_zL@Rj-$9SP)E>t1
z_0IW~*=yWV`*b~1NX<Ns11?@6vPG=VZZ$k>aC2~Xd|-3k<6P7mckR=kobRyyy34(W
z>#w{|WbiMay#9>`o+dL`G53p4KGOcc%vk#$N1^8u9X-`Iu9M^VwIj>;ZSCfGh@Oc{
j>=a%*@j&rO`74|oVtqf&ox36CgwX?^*r{%hl|BOiO2z#j

delta 695
zcmbQhHi2z|PQA9XWmT1DrhcBUlT%5NYp!c(ex*yLNrrD~NwIfQikZKsYekqvUYfs0
zAeV<zx~o@ORd7m4RYgHndS;19mSJ#WWL{Kmd6`RQaB#A@nYpocYNT1F0hg|wLUD11
zZfc5=si~o*f~8@YM`^l3R%oPKaHgBSws)wvM^&k|o0~<kuYXRswtr}Dd1^#dd2)`0
zOSo%kQEI3!m%m$SkWZC&cAjszYhIDJV`!OaMObNiQFxAtg{gO9Wo2cee^Hr1xKVKV
z#E;_P&iVd90b#)rK~Xs+9)3Z7*`c8xJ|RWrk=cIck=|wDk)bA~ruh~wrh(;Lz6O>N
zP98<3CK2Z0xrvq8SylQ4o~fCh1{G03S&n{TK_Mvt$%Ta;zJ<P%;~B-n-L!LyA|stV
z3*CGwlCr(aG77Q-veL53)0{kVGu+&Yy!}$c5}opVj4JcFl7rGL(n=yc45O;@vOIl_
zgCoNdtMr|NO)Mj;j0{pN@(a^)!pbZXbMw+CpJf!Uck&DN$q&iTFb?!d^!1MP3)VKV
z4EBxkGR#dXDt9a@EeuSHDi4b)sR(!E%J*>(&5LmK$#aX0$g+rZcQto3k1#fHO-)HL
z@NjguOb&PPaW*wC@JTn}($&>fh;S<O^m9uMa<kMn^w+O6x2!6!EY?oV4+?P4PV!3k
z&nR`TFZZ_ab9VD{<+|OpE}>K7)5+`W1TXWr{GY+Yc!BA}A3NPL-KNy(&XQd*?-hB}
z?e7UDMx9qYmc3_FAmg4n;*MQ=H_VXw^6=x@>}w0|ea#Dz>)YG0o$00hq;i(*4Ud{m
zTB={D?YsJ-$UgJC(z1Ko8Im<rC3?eGURe}wy{ysNs!A{J#gaLT7Va+YzQ8UfA(O9q
kM({zJ?~(U&zw#fjw0gQiQ{=;=$sCS{H}2eKKX(TQ02bT;umAu6

diff --git a/nix/secrets/s3_mc_admin_client.age b/nix/secrets/s3_mc_admin_client.age
index e64d1a44751ad9bb2956ee36fbde58cc646a86b8..0287a9e1812413cb2bad3df29d28aaf92c638e81 100644
GIT binary patch
delta 824
zcmbQhK7oCLPJLB)gjs5?nYNL$xvOt-fm3EyR;r^%wohnKSaC#nzNw3kxleXbXr_~s
z0auxMx|5l6skxzLo?o_mq+dmDfR9_TN2y=9v!i>tv%ZB>X<}h`nzv(^0hg|wLUD11
zZfc5=si~o*f~8@YM`^l(Z&{_6zK2JCZc?d5Xoi!Kv0G6@o^P^6j-f@Fp+!|tihET_
zm1lT*YD!f;S6-I8SxJg<wr`SKSyXvhdcJXRVRmRyUQwo-Wre?+cA}9>X+@5kvsY>0
z#E;_P0mhYS-sNdIRUzdmF5W&RA!&YjX6`xJp%&VXMkYRqemMczCXp`Q9(j>mu3`H6
zDV7C36-k*UDS-ju+1}*^<`yCPeopS*ZYe3IA%UKGi5b2w<s}A_;~B-nBT9Wt0#j0*
zBTa*fQ!I+i%F2V&jos371D%7a0?qx+Tue&xe4>o}OpWuo4E*zQiql=)yi7c@iriey
zt2_$xoqQwA1H#KJ4RYNg0+Xt=3yVS{QUgLKpJf!U4=9Xq^GPWvvha^`cXadhH?VY1
z^l)-13{EmM^$9i$cM5bVHwp{YHpp}2@+@(6HuUx^@eQqX$x87kO>s{4%e5%ej!X)5
z%nYhB$Te}P()M#V^2svb($&>faL@EJG&3l74|CQ|F(~!S^Kg%FP4UTbj>yvY4EC*b
zPfskXFU|AyGYSeQ=5o=z{d}Ifz0UN&IXPDa3)!`$<rH%7F8txxZ<9HB+aKe|KkrXl
zdQ4@k<x|jqyMFlx53_ImJL@8?gI1MQW}UiK`lI33701Wr6>C*$GfZ?hEq^G-9LD5o
zaVBS{DEq1W+fJXhPV~@z>f6?RbH|hrR&^1<7RjzC<@(N!zkBoQT6F||H;A6@c;-0e
z=;wZS?uFO(tU27fyiVcka^>3hnvb(2zPz0K`oz;eO&?DP6^fpm8Fk!6zkc_j?m0jI
zzCB@|lB8I9JFnv+<H|o1J$2X?o@w{vlF6T^e^9jjbWK3}+|wyfC#lxT@iA$hEVSbd
z>tZwvxN_L@S(5#0eec-%hBHwmO1o|esU>_%F4ir1D{7|gGWl2G!GPA~TIuuhn<Px_
O9i)#-D>6LwlLY|S!Z*YK

delta 824
zcmbQhK7oCLPQ6KXNtV7#igtFTMTL2uM_9Q*Vz@;{R$+2hYQArnWqMFpnY(FPu4!gS
zK9^~6L|R^!mr12hn!A}tMq#jXa)xtcslS=8o3C%KySAZ^dr)vrc9ogF1(&X!LUD11
zZfc5=si~o*f~8@YM`^l3NN};4p=YRhl6O!=Rfc}Ki<`bzut}I#SW#G&n?Y)&Td0Y#
zv8ADfiD{4tSDw3BMM!2@Kv+apa;R^(rB6^;X0VHKX=ZA9MMzPii&MBqP>O$4T2ylW
z#E;_Pk?F2ZPLX~gW+{c?KHh1T{vIJ|iREEg9$t=lo`ycfA=v@`1)lyPxfSVLo~GuN
zi7BN?+AfX(sg@pr$v$poiAMUlu0@$ePI=zBAteEZNgmpXCi&%);~B-nJ)A?!JSy{|
z%3UkmT!Ipf416qua`k;f^34nUoy`)<%H6^(T*KUw%qxAl(tIN$3PQpoiUR!&JxmRK
zOv)n-Ox!|CGs~k)Q@uP5!kjF9v_s9!j2tZ{pJf!U4=yfB&oC<Y*7kDC_sB`{^-Bt~
z40a52uP}}DF)Yx|&^L<m&Pew4^EXcCD$O_WFVzo-3N|q{E=%*xEDg6b42^P3Eq4!2
z4hSv_OfAnd3NrI6GYl){($&>f$PEZDN;h__bT2du^Yaf(GSD`xDl-rBF3pHC5Ao0P
z@d(YXFAps$tO`v}=JL6zGtqY8q(XN);~=x6&&pDw+$;75?ftym^sM0q!$+!p8y1S?
zBz`|<abAtNR=y*+-y);okBaY>ZCa{({Wc`?eN>28!+z#V+n#OR4rav@n5XMK;qWy4
zpE-M#^plQ{2h66)y^+c}rhk0p>WYuMp1N$g*<c(alw8lKzbVq&PO8o^KDYR!qi46+
zoTt(<`>WC-PabQEEt;SB^Jw|8)gFw&{}&owSRKOnNB(4p@TI66vx}=NmV8{WER#1~
zK7HYi#VZ?ky>Pm&ZuBhZ5bLf@m#nM`{y#e*G^;n_hH|{b%Qx?yi+=p^=wm`a%$42G
zg*g7F?Ci-gx;%A3fj);AS6Qyw`Ah9fcH5qt-&4M;e8B|%(4zY4g05rhXKwOSJ+vp|
Q+3EGk;?rJz%BkH906qdf82|tP

diff --git a/nix/secrets/secrets.nix b/nix/secrets/secrets.nix
index 22ecaff..f9fed44 100644
--- a/nix/secrets/secrets.nix
+++ b/nix/secrets/secrets.nix
@@ -32,6 +32,7 @@ in
   "website_s3_key_write.age".publicKeys = [ vps1 ]; # only used by Noratrieb/website GHA
   "does_it_build_private_key.age".publicKeys = [ vps4 ];
   "immich_secrets.age".publicKeys = [ minipc ];
+  "paperless_env.age".publicKeys = [ minipc ];
   "wg_private_dns1.age".publicKeys = [ dns1 ];
   "wg_private_dns2.age".publicKeys = [ dns2 ];
   "wg_private_vps1.age".publicKeys = [ vps1 ];
diff --git a/nix/secrets/upload_files_s3_secret.age b/nix/secrets/upload_files_s3_secret.age
index 50ec7d6a2ad423cac91555e4d5810def9d70b3a9..631523c23af390151ecd68122003ac31f9178bf2 100644
GIT binary patch
delta 440
zcmcb`e2aO4PQ9~1Vp?gQb8>iEilbw0X=$RFZ?Q#4enD}HetC#dP;p*jn0|?mg}$ew
z0av-3PqA-QZh&8Ierk52Ym~2JRBl04x?6f`n4^nvwv(k(MNU+zbGnC-1(&X_u0lz8
zm0NIHh^bMDiJ@^oNkNK*ad}cjgkw==qCr_sm`P4valLbyPo$+`hyj<&qq}@vTPEDm
z<Jqe3GsipAwW5btY|)g*HhSOf_9Vo(W}Ilv{{Q4>>CXDiQZtt>{P<Wk#_3GbDucco
z$1i=@za*#ksgj%XtJ*mId$x0*Z<ac*wsVD+`77}mxsLDlz6ckXnl$nG6|VhJB47Wp
z&1ZLSG5O(oq+&`+{fFjjRy!Q5-nutGk2&11PI7BXxvIVN5?S3{cSCP&*xvc@_!_x4
zt^Usp{#+<Dbp3GrqoGSo;4|s#^S`!Bhg_R7FQ+Y-eZ79;i=5vT8x>eZPE8W&H#nl6
z@+fcCkMuQ1Ix;qyv^{M&v1tFlHK`2e1>W3^kNH<MZOY1jb-La6_20cQY?qlf!(CbB
xB}?PVgLmQz_7p2er|4bhik-=`@5#5GRTpx!c2piIJN8j9xarW3+-vs^0083x%x3@q

delta 440
zcmcb`e2aO4PJNbtrC+&4dReh+ny+(}p?^exi)WyVfuonXcX@JgP*s^%aHwCBtG<7T
z0arw5MwCHLR(N@ZcCc}Bs&SHjcuqlxqjyk5mZ_I#M3%9;U!J#idR0MXIhU@ku0l{!
zU}9QEdX!smfSXxaKygT+i+iPqQDt~}x>;_8wqL4yP`z8eX+fH|S0LBQds9^dI`7Hy
zo4LNP@MnFWdQ5-Sf#p9|?ux#{81=7%XY0KK0+BMO*XW<l7gY{><F?^lnsY|I_lAN#
zL#7{!n{v}0M{JFa&R-YTd3~BZOSMN)$hBYBzdWDZo_$8(+Vl@|Uw_ROK5_HRt)%|E
zgInI7lmBPWEm|Z|@3Fb@NtWj<t9$8Dob|6(-S3^a|2wm@QB&zMey#IMy%NQgH!jk>
zm?ZhDbGLHvmR;J`S1$2Alq%p{mQwl4;LY3WENzu`fkn?#_^r;XJv6$a7jXT+ls6(K
zo#zdA>_2KgrSEh6`gshD1y6K@40o-ZvQeN`!DbzghFijgh;!Vjt62;eMGEkn_;xQZ
vx&P>xOO%d5#-(-<m#HpCG~!>@J=$Bj?|sQ_)9*jKZshAfX%JbxY~DTqJx;?I

diff --git a/nix/secrets/website_s3_key_write.age b/nix/secrets/website_s3_key_write.age
index 96b92cb19f93e747d1c2813d300d7f31c8d63131..9adbf2230a4e1a0e60a7c01b8b5c9ccadb76b417 100644
GIT binary patch
delta 308
zcmcb?bc1PvZoRRGw@<N~V{%1?vvy8tW@?ayeyM*%NLWU8Zm4N^P?*1~XQZKrtG9<M
zSE_GeioSQEMYg47skTo^M4De&x^{46c94HjzFEFwnR&5^pKqCevWuY!m#(g^LUFQZ
zRfe&5U_pj|MMYGaXR&8wx`lzWfkkDZPfDVDW^$FUcD+fsxv9HvK9|y;Pf4;D()|{G
zXJZOdDfJhs{wN}qt0E|q?KJhs=B72boFlZuMf3!%@6Laed+YX(xq`VI5-ZLwV7vCI
z?^(*rL-PuSGp}>ax+|Ju^W@pq;J{G5uUQS<4(9IbwxsS`B~)l=n4{*WxtL+*#y96a
zFJ}-sx1h23Lhw%AJ(Zzcx2D;Iu)kU6vF_WW+qVNn4Ohh5$#wUXn5@^$`rp@o<HHJ$
L|AO4swj7cG@bY_Z

delta 308
zcmcb?bc1PvZoO|tc2ZKgNp7Bjxof^}T5@nkwt1CBepXSHyNkDzzoTnKaEW<JXqjO)
zmqlo9L`i|Ak!fjBUVgD-WoovMQ<9}~Kt-5uX0Ul+aiP1ubBK3TNQzN0m#(g^LR3Y*
zYgACFS5lQrK~+w2P;qgYyKkO(k+)k;MX*I_akfE4UVWstrGAEfF&A5mkIVmj?x2Vh
zQ)3e1T|FoApRi&|+Y`cLntv?9)4G25(vZ|8)mrgRCI=O}9h1&B_n$r~KXbLUdtJ&s
zrurN6wz|A$nrzA+a3Xh3uCB*>p*e3^c$B(69{($$%plsgbnVq-L4(7)4<}4L8h3d~
zVdShA=i~U7ZgtdM_bK-6k#`{%pC$7ytWJ8j?!>eXo>xM`Ytz(b{NCE$@OzPmG4ED2
LWmEG?UneyHa;tq*

diff --git a/nix/secrets/wg_private_dns1.age b/nix/secrets/wg_private_dns1.age
index 76fd998..f218338 100644
--- a/nix/secrets/wg_private_dns1.age
+++ b/nix/secrets/wg_private_dns1.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 LZU5Eg 3Bde2BfrG8qdngKCIg4xeXnkqqdrtcAZfW0REYwkmWc
-0Js204/ZpkBK9mDZwhYOY1IGW8yA5L/iMAmrZR1r940
---- V7Xj3KkcueKzPhl6wjk12zRrEmFPMpUcQd799p0Dqr4
-�~�TO80
}	��Q.���{��q6��Qu��׆�%N�6��Ќ�a�|��41ր�Z�Հ�;D�z�*�^���ѻ
\ No newline at end of file
+-> ssh-ed25519 LZU5Eg OKL541Y7HQSCBtUqWQVdIxZK9HiWeaPyAWwkcj/bsgs
+PviTqNl4VLbQtErGDpXFEJSeRf59Mx0v3qcznEZ1tTo
+--- yRq8T7TGu/yBKFx2r+t8gbohrUHDkyXdvsB3n5csgpY
+kM�Ql?N'!��.LlL��BoD�Y���:���_��V��c����t�ci= �3�rKv��M�f�Du��
\ No newline at end of file
diff --git a/nix/secrets/wg_private_dns2.age b/nix/secrets/wg_private_dns2.age
index 1c04d1b..536fb4f 100644
--- a/nix/secrets/wg_private_dns2.age
+++ b/nix/secrets/wg_private_dns2.age
@@ -1,6 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 5bWSnQ V/5bLxQqdZEF9tgSPGgm7nEpnyNGScgSVfjS3KOvxA0
-oKHKz5IIZNdsWhBCTCqvHVLAJGC+LEC7RuMgQHI9Wkk
---- 71jtq96kfCYsB8UGSccc2F6qWtj7DO658MeVWSD+L64
-U��X�d2�C��lEV~Fg��i����p��%�N6�
-��t%͢Ż{LZ�@��B9$�{�g&P�BHQ�ہ%4
\ No newline at end of file
+-> ssh-ed25519 5bWSnQ KNg5E8fLL/rDMbRGQDujv/NaSUVGY/HmxFgIVK7vox4
+bH+Gywr/dDW3UPfQpLpWg9sVZq+LfE2aDs29chCpaDk
+--- mYTYZH2KoiKyxtfrxgIomqaaCyfnLVNwXkUzp+cDl7c
+�Q}�B��.�$b��q���{4�;5-;��3�Jyble��̞�d�o��#i�(�{�J譍����y���>˨]�
\ No newline at end of file
diff --git a/nix/secrets/wg_private_minipc.age b/nix/secrets/wg_private_minipc.age
index b5f0470..2fa88e6 100644
--- a/nix/secrets/wg_private_minipc.age
+++ b/nix/secrets/wg_private_minipc.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q o1qLnZBL+o8wrQYM6bo01DsCKVmA/NCzLe84aO4NSlI
-iEnVZGcr4wyMN5b5f9Qzt1lmycZVe+km/8ApNvq6ME4
---- MiV3GRLz1rEy283zGsbTtrAbQgmdW0pobJE83BmPrmU
-����G^��%L��j,��sC��IC&@�>#�t�$.2��R�+p.��4��
���k�e���^+�sCg��n-�z�{
\ No newline at end of file
+-> ssh-ed25519 yMKb8Q 8ESNEQZaTfjWl4qGZJV/GPN+tFozDmiZZtXCctRD8yE
+w2+Pjzmotz2X0O8ehb3TTOLk9YCk8hqRqNKfNNnLQIw
+--- pfmBROvSCK/41HS44uMmwU5izVCyHrRirYjL/WBAhZQ
+m �*Q��v"����+��JQ���Ā�'�P��hD��>G���J�]�
��Ġ����Lݩ����	�N��̤ۀ
\ No newline at end of file
diff --git a/nix/secrets/wg_private_vps1.age b/nix/secrets/wg_private_vps1.age
index c186827a391b40d78823b17623332594a6988942..a9442703dc960a7f1486f18065350ac5cf14f3be 100644
GIT binary patch
delta 221
zcmZo<YGj(AQy-Az6;`63Y!cw&X6$F;kz16Nm6z&Y>Jgq=>5~-|Q10zwP!N{r<7Vs{
z%H`)_YU!2kUE-B(SrY7<ZRDMnm6PEUob6-bloaNeV^F0Z8BypKo|l+r!KJIKtB_^t
zWMYzKV&H4x=w)J=;+PawT2Pv8kd)$>m0anl9U4(!78Y8W7H(8(5y>^J>_d;p$2GRh
z>ls)!Uwjv;bLQ@h14Yu6O&07I^}_hu_PI~usgJYceRJ)hxaO4^vCn)TPVJpr5y$v!
YL(hd!--c^bc8iEDjaeM_*rjhV0B`S8KL7v#

delta 221
zcmZo<YGj(AQy*ATnHB08<(3f?Y+2x#<(HkB;bvM^pq*h-<Q1Nslk1dUnVK7wWSL}~
z%~esA<CyGJ91<RoTI%a+ndV*LnVu46V&YfsnCVuQRT1e@7@TNfmSzy;%cZNUtB{yh
zl4)WX<r$D;>KmSE8k(DDV&H1#l%k)doe@^(nO<D#5td&Tl%Haj;mDP|YKM&WRmq?o
zR-f0KtF~+k@Kt%zsJheV#i{ityDw+VU@t!G<?_nwM9zc-=Y1V-?5yzLqxU+gf%W0v
Za+cdqBQ{mMKlu5p3(LD@GtQ-b1^^|ES)u>{

diff --git a/nix/secrets/wg_private_vps2.age b/nix/secrets/wg_private_vps2.age
index 7b8faa9..3cf2891 100644
--- a/nix/secrets/wg_private_vps2.age
+++ b/nix/secrets/wg_private_vps2.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 91VHug 2cqCCA9Di37CBwXKIg2nRfgX90fqVQbIDlvbys7uSCQ
-IKMUR81lUusM+BqXSMiuCEyfeAfup0ljLCZ09GVjv0M
---- oisBggLksra17ZbAQcWuIX3iOo2hE+De/mtXpmDDXGQ
-�ڗ���7�������f-1�|H8���B�U�]��j��q2�
I6�ۖ7�yBL�4ij����"d_�+�%�]�U
\ No newline at end of file
+-> ssh-ed25519 91VHug nuqwTTdoNOLWvbQAIhl9WguvArxG0jNfkFn3qM8VyjE
+NvhMCreuxdWHezfH8cF4wXjO8ZbG7yQC8+sVnWFghFM
+--- OGewUdFWzL1PzHGBHB7ulJVi5eX6UXKLFUyfbvGErmY
+ʋ�.\��Ņ��iқ���~`�Q�,��W;m����pQ�TY
T�z?]��T-s�4)�ZP�,6�H5b�Ԅ7��h
\ No newline at end of file
diff --git a/nix/secrets/wg_private_vps3.age b/nix/secrets/wg_private_vps3.age
index 50d20a415a2d9afa74e85c51941bf567a97504d4..5cb419d45a29ae348afb586c44bf9e0767d1f022 100644
GIT binary patch
delta 221
zcmZo<YGj(AQ(qC0=a-de;1lHGonq=5<XYinQJLlGpPS)a5t(lpknC3;YGCT(S5g_8
z%~kG{S(Te^V4RbiACwbhm|<SwY!U9~7g698S(KP$kmr+P9$w&YloRRX$fc{RtKe4d
z5}X#|Tjd*(T3nRk?NaIF9T8;|80_ril^9TH?i-Yu80K%`;pJqS?a9TH@;r3A@<WRj
z2AQ74wO1Y;SQKs>)Dtr^r(bN(cgb=mrI~Wlk9UOZvtQj|anCM%y+e-E+g<j{I<4+}
Yp8UN`n_2x@m-?<r>%X$sM5^%v02hx^{{R30

delta 221
zcmZo<YGj(AQ}5-kZ5ic~R;FK+Rp9Os>|+t`lxt*R7G`K>l4#^yUQm!&793@w?V}xD
z%#~4?=9rjM>XGMR8sSmpsh^*0ZdhpUk>j12@8Rp1<Q-s{oNiej<Yks!&ZVoXtB{-M
z7#is8mhD#RTWo3?S!7lop>0&C9Tw`VpKP3AQRJ6o7FMbqR^*lE>dU2BKUd^^_&>LQ
zyPjli=K3bp!dQD)=D5zG8wX!)zb)$;<G$qb!)bTbD&Bv0Sg*6aBf3c2=Ku7v?H@Lk
Z?^?n%U*||p$x=6ojU~JEHv8|)0sx@TRrmk^

diff --git a/nix/secrets/wg_private_vps4.age b/nix/secrets/wg_private_vps4.age
index b39120f..7915ceb 100644
--- a/nix/secrets/wg_private_vps4.age
+++ b/nix/secrets/wg_private_vps4.age
@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 51bcvA CkaPksfSDKWRMaL4FV7vI4VZ2c8Fd2RlyRW8DEkOkgM
-NrvBSSPDrwNL+YKgBTHqQuLhKgGy1+/H51JTsA70Dww
---- 6qkEageKcIweJ7wWcqb2HZp9zJNTyLcoQ+Gv/+O6CJA
-(��,�����zf��D8��)��]��|P+��a���
�{n���$ �A�x"���]������K����
\ No newline at end of file
+-> ssh-ed25519 51bcvA jfwnJ0gZN/FeF0krZ/ERWq/eqKBGwANBwea3xCJLeHw
+x8ccoxcT8Yn99d6aWzZ667jUjE4dHPfz3ZIg9qG4xe0
+--- H0b14xAs2FTADz89JQx2eOSmAgN3Rs5A2o316xzISwc
+��@��}`͠&9���WjWS�E��H�@���V�˒x
[�����?���U�u.���~����J*��7��ҷ<
\ No newline at end of file
diff --git a/nix/secrets/wg_private_vps5.age b/nix/secrets/wg_private_vps5.age
index 3f4dbff24b270648ed8918c639b9f7ff5d5e3f1a..d870bc4ba8a4edfc2ca6a466f2e34995954d2289 100644
GIT binary patch
delta 220
zcmZo*YG9h6Q*RnsVBntY=pUGr9+Xp&>FJd2Qexz9>gR1xmGA0j9FP(k=<inST@oCT
z%w=Y3tX=FCUhJG2SWs$~m>!j9VHy-_=I&oq;OiBs9g<X4803=_S(cYr&ZVoXs}LL+
zVqxN+Tb7rcQf5*T80ldiP+DS998p;4Xzb$@WTNj<8X8s^<{Xyfm(KO$+o!U4$E5w;
zmt}mE(pH@eGMgJdclJWFgBhs>JNB=c=6&*2>WB1cI<6O4A3a!MozV4B>90F)Md|*3
XVU1F6S2{7p{m{;S``m1w;FIS79t2k}

delta 220
zcmZo*YG9h6Q*Y>`A6DUGnw0BYSem0<WSo%_ULNk{l<eZJ9}!sLZJMDSn4BD58XS}r
z$ra_FZdRIX65tnNY!YZtZW$crtY7Tyo)l?Ro*!;ulvt7GnU(KR;TM^o&!wxYt5BF+
zoER8lUR7q~<Yt(aUFB72lId)aV`?6i7-m*j9%Ygn7MhoD=wjqrSkC2m@>gxF@n5#G
zEwk1#E?d4)*!zyM=6~*^=ex}>NA7wreN$3E&|qssdBg>`w2QX`KRxajb<19p@UdF=
WROjT%70pWgb|Qr_ZeLX6n-~C#=~6QQ

diff --git a/nix/secrets/widetom_bot_token.age b/nix/secrets/widetom_bot_token.age
index 366d1b9d1890667fa5839451ca8673e0c8c082aa..c9bb8389c87718a17c75c4634e3c5db0dfb69d20 100644
GIT binary patch
delta 236
zcmbQhG=XV?PJN-Peo%yYaaw6gc4BzCwxy$CR#1S2NkE>vv$I8-d8LtKrm=xVwx4!Y
zI+ssgWpIFDWO=Hwv8%ItiCcwnXr6&~U~+|rzGrc=vqxgSiDh0=scTuT1(&X_u7XRX
zn^8$+QNEX<cb=<rVMb_Kl}}}Ug=KlDkE4F7tA}ZDN~)`0xKUa_STdJpUWap)k4V$$
zB%%3Cin9Wuzkafl&C1cRJT&3d<re`C?bYuNecwC9I#GFwQ{&0Ig~|pCd$nUff7R{Y
oI?eY$jOixPiPis`H7DkXCWcST{<%5G*>!e_O!773{hM9`02t?51ONa4

delta 236
zcmbQhG=XV?PJK>zNraz&qOntISW;wuNr+2Cj%l!YRf?0PzEhHciC=KGPnnxzm~U8+
z1(#D*Zl!C8VMtL<WR7W6cDaR#v7<>ym1n4bwpq5TadB>HQiZp3q;pYGK9{bpu7Y!p
zXI@~Yc42XZVQy-$SzuDKSEQSVS7BD5iFt~Dk+Wk+PHJeDp;=CrwkMZ>``f5vM?;L}
zi!b%Avzlq~VOsxb&v&2RzC5lo{n!2fRw7KT3@LhC>yjDe_<lRHvV^XZWEB0srN!gL
ogUvDem5&~$-D!P#slW47dRxRnpRP2?&-=6G{*}tFxa?6602F9k4*&oF

diff --git a/nix/secrets/widetom_config_toml.age b/nix/secrets/widetom_config_toml.age
index fea9a10a006f3a7499b727380dc1b99c3b8bac64..af313d3a6781a81ffb4869949b5bf2718cd688b3 100644
GIT binary patch
delta 4000
zcmZ1`zf69DPJLKZL}jUuZ;*RNVu@pMc9wRjr=M|2Muc`{d2vBzfv0h}g>iUEMu>m7
zFIRwnxwdy{p@pYqZmCI7re{!oYI%NoN@|!<WRZtUl74zsU~y5XYoNDwIhU@ku7aCK
zVNPLSQALnJuxWX^TXL9-fpL(xNr7QtVtz!0k&{!XOTCwoUw(0ct1H)|3IC7v&3+&@
zPjSnwWw+iI9y6U>$Lg-JX_bWDRYjpI0XtuA+OM%i?0VCLSs!{Ea#zTCYWjOc-jds#
z>dxSoAJ#qd!||}6Cv`NWPG35DoV)oR>(<wtuXDm)$+DVkQqgnhl-wBnVq4)!r-<y2
zrU{+T-?6%gyT4biSNoQ!^>SUa%h$f6cdlydMzQ|seKTvyeb1jywbdEzayNSJJ;V^&
z)M_cw@$<IWqs_9)D|DGm>OY@+V0%Wk!Cg)IYqX<A!Ny|oex(i5oYo2W8ZFYvXDrl|
zd>r-qrs}zziBi(v8{ehA`@1t}zG|~=)i;G*#oP4^*pKLFB&Hqd39jEX^Wh}s=*TBC
z<CsEv>h7POxo7UpUS=0XYvzS@&E>ab9Zq|_iT;{(qu#tKDk1c6^P2}VcvYtaCc4fj
zUts*}1iN_4vGbD3`&Tucd#Vugx_8~0b<QrXXOdU*C0;&w=@q}pMVo7`B1ZB4^P`k4
zwPe#)w6@2Y-=CFoMatiMa-YVJ`uIQhig>-+H;PZK4PD%B7v6hWur8^!`$@RCu5Pwj
zx@*FUulYsR7a0v0EI4a3pDk2idA03(q=@^k_3Ni!ntyM}hNQ5><92gRUw=D$k4gX7
z5%)CNgB*Jw1sC24UaldrEbbkzRKO((OYW$|UA8(?_b9N49enpFIIrHimHDHK+~Rtf
zg)<lNoxb9z7+o88D&yw*pnC_7hFN+{lMTIoq<Xus{HCBr-L(5_J{nfPJG?kFu>XpZ
zgVzcVi61i#x^CJmw!UcpycOI`F2Uv!|DE2xUFK$H>3Ziu*<Jan72CEkte1a&|6J8R
zmxm`z*YcFc#2B@`mq@>RV}kpPuN!ukNN?Hydue@|<>Xo0!X90ARjFL&w|Z4x@qLpQ
zmtUU_h|riUdQB)itwwV8<`?!B5er^U&E|ctkQ;JAP{TjR;dZF}d+AdaHD|x-|Mz(m
zt1xM$ND5mqcg19zw%sq>zo({`e7le;n!q{vdm^h@x$pXvUqROM1V#6~v^^jr#klM8
zRfC#)Kiy}qt9M?#rtrXqnSy*@^(EIma5>t1Y}<mVHx~Zn`1LlgEp27!0nV@eI-B=N
zon<qz*eUnkME2{gt-@m8rX~B?{ZF~2CmHhbN2cdy_15~r)eWL;yAv(#YBF~JQ+X!y
znCZ#ms$IqT&QcL;7TEnf@3U8!k88(Id7DE~nY*~8iu{kyz9(B&FR(|ZDAW6)ILo`e
zlfK`SVom;B`e99p=b;l%4X)?t%deUCSUWAPL3o|Z{06`O1%4?@{5ei4s_?&C%Ww2e
zciqbVho3l-_P_eG@JJBP)Z^aMI+ipnd>U(V{nEC(?D@Rb1yM7%S=pWcZG3iGBiALx
z6#0kGrf)uxGL2cwY3_`f=elg_8-pJl;LdaKKRiw03|rjZ@9CM(Z0Dc#DOYotIPKoM
z@72tc3UVJDTr4fbBlvHzi2PnDWt}gdGq==L3yYoFuvO4_PCZw4<5rtVdJAsub(Ea`
zNV?-on$5H?@0edcpLvZl=kv6Hw=(Ks%c?|KzUY~Du(E!*Ej{Oh>-lbDsW#E=GH2?a
zN982cO>p_Kdev-BeeOlG_VTbPO?6!zvx7%0vSIeTDgSp(*`Alute}47s%)xK62C9w
znkjPwr@rPsacWyCkJ#VLd2X-I%B1OZW`xX^>sPq7dz#cHcWwD7LD^Rfq8D}wA6dCu
zaLeL{6|=mLR3DxmbTs9(!g)sPD!!-gFSk89wzdAM2m8JKTY9s6HZJrE$zB$1%US7v
z@u0?0#i0C^yU*3S?WupTd#lPsCXqKLXPVX?OkOPamdW$!A_vnX*B5_!H!F2n@iG=n
z5)88Q`966{LivIBn{Ix5tN%3MgJi}3jq95(T~jDN-n{jj;_~~#nx)g%&Y3S^@ta*o
zdXuPS(VIBg-Sv7OzHzmEP4z9VtNpZS>eo1qbu!t4`Dfa99nx1zHqO`H(B<+nMo+FK
zYG;nNo{RNX?jJ6<VyixcbjI!BQix^H{Fx<JlcE%x@kPGy%^|lMy~q-lwc8TD9(|%<
z>a6}*WPkL;&-25+-4}>_s53JvO?lCbOY?p$zj-A!m2K)_&g~KPdLM4xpSLE4XOrvf
z%9tp#%A4>1MBfnU_Sx`7Zl>qOm8x!w_ImaxObVaewd<(VMNjVuc3%yrsNUG>Gw=LD
zfsc`l%*LsY9Ig1RD=&yldc%8G`ox|uFPraZ_$xa*%}D*V!0)r~%jf1==?2Fa#~HJ{
zv{YhK_N$)H)WN&{(i@gEmcn`^foAzz0tcQ;*@f;C-}3sQCwKZ$2iHQCYj0gv2EMo9
z+xRu8c~{Z%WshI(V)#2R_<WJ;!*5fBM2;+udv)NDUd68y_Eoc#r6xYwarHuTLHqsN
z=Z*{A{}6QUo}u2X((Xr(KCwDU^-Ndz{ANm6)_<Xc6&)YKx{Y}5iQIi|oM=6DV_5xC
zBPY2t(T$ad7wlM2sIM#{{{CM5<B(Dpj_nhf=iO+IsJ#DpqCp2sVnTkq+5D_OU*{xQ
z#_qJVKa<WWvA*Woaa&IB`Jc~}%>DaFIcKf=^^48t9A1m%+!TIzn?vt%*W0hzcOO(*
z9r+z{IY3Fn`B&uEEe47*|MX6u+{-;-QyY)s!}>jwzxY2;>lQ2VSlRS!=jAWwTMBlB
zttsPbv{F!Mb2N)fcKCm_cG<%T`x~FdOud_$C?>Ip>BZzsz9i1)Ho*d~Uw={)_6j?C
zL@M%-)lrA9hu!wxb2%yWW?NA4mGql?UpAx(d)&NQ)HPwHaMOx+E8qTHdGb{DuV{;3
z${W0n{ylTyQ@y{rSwg34hQQJi<&e0f-Aw<A?n`-QO>cecvF4(Ax;1mY!LRzMwtbgc
zedc&ec-1#{{;WI8_d8Wjbg%rjh`U`s>MvY5n-<g-*0`DLrL~1a?ZO394dc|GSBKwR
z@P{QU*>%R2+vyE%ZSCf~E;ohT?|LR4w!Cmm>SFO^uSs>gH>|FYUG;k1wA2=h{qa3H
z@j;u`t@Tl9*z4tTq&j$}`LWZ6i4IotehTgW@a?nazW*2hvTWKS>w7gz=9ak#>!b(s
z%`QFl7Pwql-ZiD{(eghcu3x4k#Z9ffyK99i-=Phq9U`42Y4X;&-ZI+Lqu*X#zIgN5
zGg>(xVlr2&{FK`+99^;Uc53~f|Avlb%a%>lJ=(BkA4lY#Zcmloj=GfX8gmLSg>L0|
z=Fr;W6n<I$VeS7PS(om9=shpqDq9|+<zZkH{BgpSB?<c??W`k}CzQILm*(tTD7LB4
z@b1bzU-fT9Tb=p9ryTj<Sjj>5+0ySn)fX->4Q&40%N!6=85(e;*yvh*oqN^8`kT=a
z;XB@|dYtiH_wn1|BysB-g<It;7f=6US2fM;52sx7?M2G}G}JBi{8>|e`&C)=>;JkD
za`niiAGV)<^LF-|dgPpa5vuv~cR;G;ob0>O)xZ3{Og7(pG0=bIig%S?nxFB=9$I{1
zp>WAc=6CwvQoA=>J}6%%d4x-5dv@^YoTZiZy-NbW1_$<Uf6-#GvfZb*)%3~y=)mBL
z1|KWY@_<<3nMsG{)woZ{zCLdrpK<u|eAd#<^JY$9nsp_-bk8S!--_L}nWq!)3mM7V
z9oOJn^;5d?rbMMOSNZ-o)!AYPWf-271~7e#)%f}P;)UNuWlgf2_o5no`I7aD4;zQC
z)%apCwZ1r{?A>vGx6IsmWdV8osj=1;N7uFYv=*+4KGpxR%70z<Gp~89rm^Ra-PyH`
zS6{f1yG-@S(lYK=tA^bo1*h)a3R79KceY+LFMrw8{{~j-zwgzp2~xew^>g;-2a_}E
zT7z{Ly(pa#&bws)sTZog4<}yKls>sK_2t(cJ)XPm_8i$&f5<oJ6}wsEV#)KX+)E`E
zta3KaQuJrI$N1kpDA?rC`A0k~jO(0ij{eTBmq_+9`S6*;iu>CARl8R%`y?G=|Gzpx
zk#YWC_v2SYHb2c^KF40azvJ!y&-Xw5ecg2+g74WIsl~g$Ex5uNo3JH(c9`w@Ph0tZ
zbS}^MwLj|6;un#>-n+`wGm9~~te()ibH}L{9DObJd+Igk&6Aj&dz5>b^~@5{)7Ia*
zDh_Db?e$E05jSs%nRdbAQ(xb2`m|_CR$H^VV4iWt7nLP-^4$9;KlR_EQ*XdJH*>k}
z1N*I4Pifg3@2)$Y^?~#DNqzr`jE2rVjO9=ARvhu!>+0*#v3tg%Qy-aFKi#fRUg5X2
z=&6Rpj^xzpO?P}GBz=-?8<vav&i(l;aOUdieDQO|-FI0A>hzxN+Y_?KF!<bsUj3%W
z-ahwUF67_%G%Ib#ou6lJyqZ`lbYzM0-V?{x9XXYGRsEi&X--RouV15i%elAbKR-KM
zbfn44)oW)I@84fn=A@fm+x_DCP7k+mhU)qr-n7W9+GK|43lZ^5TC*ir{^xz+X|-N1
z%vsOj<gE0mjmDzVEMKiHSz1j0&ajzqsC;^Ck*C9nlHba6&9C`f^yJ^E*mvW{F|9;>
z)gIY}oy!@7IkzkbU$;(T$#wa%>DA!^e;>|C6Kj+;Ic<8Q|0?_Y-Ikf}Vm7>Bkl~Vf
z@}6yO{ljMKqYrJ`i{uooM9zBiZLoCEExdj5Vn;>SI>T!FO~T&hrq>HTK57d;+^^<g
zvV6VI!K*EMxjL*nvjqxsxEr>ay!!ZS;k21;+J_2{f14!|`?9-KWX>`r*|zMDvo9`>
zy7Mpb_5EXF@o$y6Umn&9uj1Yk%44{u!03<ExAw!`Z#LHp_8B*pF5%Ww_?>xs>%n=o
zDR1Ag#jKgqbhkN$LE-afw)0QBR&-an{$%gk<z>xtg73zPd;ir99@hT(sIck8y8Fx#
zN46w9t=`F-x{PH(`GkkQjRNb!wF~S2F4Wk*CzE$^C4<Hdw^f<VY8P$<J8q5Ly|;eW
zi^dR5>%+SiJ~RCs*IfUXd-n^|t9o2ERX!H;rYFx{=MmWGA9wA0vE=uCmXXi<7UpX?
zYR=-&ePy4Wb}>afGbZWS*ECD%`z0sxBVR8P)|z_lT~IR1-s?I~Gq*Nx__c)plHi&H
z(Y1>ncKivddJ#8W{FU^HZHKOH+9VyjSxaQfQWv8gjaAD`&$4e(i`XFazTVKv&|e{H
zQmu%CYtdr{-sRKI$e3y=IWIU=ae0o5@a$s(y4$86NVwp}U22oe&Z+aOe%ZYO(|Jo~
z34FZy<5T#?H_y4-q7$A)*J|4Y-kcvTwcz(VyMP+m#eyD3rtWHfTzGI(<L`^hCoL}7
zWT4wBcRKUP=KFG)i!ST195YUESJ`PQx%BZ9pXL>A)iTB}q_^HnpX5`ySm}XAQOA7%
DEvlqk

delta 4000
zcmZ1`zf69DPQ6iXn!i(0kV`;TWMyiZiK(|wnYVF@tC?3=az(z6Ws1K=sJpqRaj>a-
zAXi3FNmaO?zEO6DrJ<XtVYykFcS?9pMt(t5aY|Kgm9K$MUUHIoN>ydPCzr0Su7Z!B
zTSR4Ou8UbtMsiq4l3BiGxOah{Tcm|YsB21jVNqh4Uww{`Q-GVcu`k!zLXT;`-^+*?
zid$ScQEMvldb(E9PuqZUY4fL6|Mf#1f1BU7dVcMIM3L~d=QEyc*c`R4_+!gC)#pB2
z56O1-Ik9AGy;&f##{5|l!?8$r$IBe=gIjJtQ~Kz4Rp^?Q*nD0Yq2)_2FdS6#`r8+4
z{pxJVeFdI7sxKAm`);MRe*DvrTkhj%QD$R0OM=(ufmF*J=HT_bTNddw-1^nBLUHB<
z_mzQ9{#C8`nm$MF@Vg^QGIg!(3*CI9j+b;+ubyu8y34!dT=D&X*$XCZ7XER?-QZNf
z*$c<^KdbACTP53hcf!522@<QOc!{=k=}#6pR+92GEP#3STvLVf+h^9x9{k#Py}`D(
zmh1fFDJ*^E9DOf3ViG;wWDdqVE@g{Q;(2DHTYX%jB6Hj7Z^30*3wY$7uH18>hA+H3
zY~S`-4j(1I-e0BsO0v>*4!iOenInlg!Bd}YE)3W9|MuYF0<l%T%eg~B?P8Y+_}pN(
z`tM#UuMiY+PGr+8wjIW)z7^$X>W>ue)OTr{eZ}!0!=Hzi{Fau#g&LIRzq5$n8ggA#
zI;hq0p8M`of8CyMc+}O<>b#MoD>GOjx920z{jVQ?Em?Yb=aTG#n|H3fIpQgHM5R+i
z>f62mt;7`vTf2VOJ?cAq_BW4!{(U>f%;1{zJ-W;vU;O{Kp1EZA!jj~JT|uddhq;c_
z=iaospb<P>S19qg_ugnGy$`!2UKN~Ln7T~f<&u<Q_pNh!P50L>TIP@<J?CN8#H$j&
zpRDZP5T&yJ;i0wHJE9LPbD1X0chNy4vO;hMdx+b#>5Gh)*jOC($ca0&Xz#&u`<6{+
zc09Z*(A&P}!-1SfN0nq9%hv65*s`fG;&fJFrnE%8?6l?FAxoYuIhV&RK56-p2R0|?
z9`pM(X$8-OVAYvR9~?QJwmB%RecxF%;ryBUGcJGB+F;M~;F$Yt$-635x3@W_S~aL>
zi?nj@ZL<6HuZ-X3rj>$yw%g%F-S;HfRJ(j;FMhC?E9Y<aTITYNY6*^74dT4Y_I<hw
zmVQ$bS8p<4jjk{KVW=$f*+EEjiuXi`=WII8IZ`@&b)VDLTfSx!kGd}Y|CL#<!=Llf
zi(I~Jv8(&`C~fMTJ?EyJyS>Rwbkd_^2i`8cCu%X3*{QO?;ZT#$%e<Z^*ZkP$a<R%t
zpO5w4>v;DB`?^;pt&ZpGrk$Ac)#~tE^{MJxA68|YwYv67oH4QaRlV6o7nhiQ*Oz=g
zbNtX6`P))U_SNV2S$g?5bse2`@Xe=W>#YUHA0#lx_OCjYkbE<G!NP*mjUQf!#4Rf*
z?$I*69x=h|T+yc)!b)rfv(&pIR!=h#X`8Zpmhy&+(>GsK3^zM`b#CvCFMh7e7Oc&S
zlVdP6IHYj<pNe$g!I$#-r@}8b)vw;wWK`}Ko%X;xh9h;(^FP;w7=9HVw<+4tBRJ*Z
z;$yR-^p+fTUb_41y-h~>k=Kf!l{y5Q6*%3Tc$~B3&1(L&e{ajRv-Sm>H2;%1cU+}*
zTHl8&rItx&41Tp;+@LjS=hh85C*7T!+g%GiZ@F)sUC|NOxT0&Cy4wd2vyTTeA9489
z$1Fbn&T`qyszYhrPx9nEFD`6!d1MrM$;XnP%Zp3tSMa;k72AUAC)n<spWa@3{6|lu
z+5?|wTO{usuipD?ew7KswA=Fqmgamja!KOVTWx0k?LyWZo)v}fisfbmO7E=<J#IOb
z(QM5c#*Hs;Iv-+QP(I;?!wOfgO*3**_a}WY%v@Z*^okpchsCmujRrdovC7R^-4jvv
z^hCUd&(|4!bx(4cg32uaKag-)zjE>RuRC1wl_%Vs`t0M2Mf;!1Mf`Ao&A79ArOE2|
zUuvwC$^>$|JDk|}oNtnUa_}#2z`3H`&$>(Y_N=(V6**shF*C=dmku!|tLE9X>t#JN
zJ8p1WInLbW^_qIC*4sS$7SD>fWjKA8=qG=n&cLW?6&Be)rT>QBzkg)ODc;l1W={!o
zh;2TUHuH(sbH1DjGTaybvFa615V;klb?(~p*3bnZtCSb5yYPIE;~V$cR)4khSD(DY
z6m?Vc)ZFyEoKFm&68=uPcX*bgpxpuX)U7wapEnUPTf-}$7C)ECrK>(f>4v=5^1o*;
zaDC7HZa=%M_iawl-Fv>thqudZUjC`F_t%jW&MPMIHj`f5nY(xvSM!a_oqt&BW^0^#
zP<Wx$I6&m2#g1b|CqFYM<?Gq$xODFQR;3=cbxrMsoV?(#AGD1^-OjQ(SYG?$@yBzr
z=&B8+x6Zzv<DJE?Y-}ic-s04pCG~|*vlKb|);0M3&p)W$sU+vV>SxVrw*&3dh4}7T
zMsNPFJcY|3{G7<V$D#Lj%VfLQ9{bKMG`aNCg~Tq!(k+_`Vz=F!GrdIagxfYxwew4a
zI<)4<S?+&y$}h>ZTxo0XNk5^*nNzn;<TGCVKwdt@YHnOh)Y=U$Odea+4}=`P5Fgf7
z-==k^?Fd7d^JDI3`l{T@kMEpWWj4*-|Mhl>Y3I)UYBZ~P!npa>kIO$a^3G3cka@7^
z?ac-GEN?$Yt-2?qfAOmUzq*>#u>+QIH|hmlTO1{_8*efuTI`&$%v$XAyX7&f&rT~`
zXrwb;w7*r=%|+Ck^Y5(_;d|%m6fb!7dG@@Bec>YYJZw=?C3W1>7k_&-E#08{>Wb&B
zpOh2i<|IXG9(S}8h@ZkxWPQDKYi1<Zv7l-9%BCoAxisxw!?@_c7AEVOYum1`Zcp6P
zb@%FR-5TQnS3fo1sn<KguIFvOq_$!0_S0tWZ>*WuEpa<(Sh8*Qg=?__Qx{FG<n#Q0
zsyDpSDc`fE^g?}UH-E(hV>bg%_3u-{m+ol{t9e(Msl%u;NnP`nOa8Qg@=L2Hf0AJT
zA;QP`vedg?Mbl}0h=`;B&kX-XnJOQiTH0zjo;Y!4`Ba5JH{a(ym=VYLBv1RLmYLSk
z90N_mUJcHP((^>j_IfwGXSnWmI`9dj%qOdk!UUuG+qx#=`^8V!@7lTJhlr*s*TF{5
z(2ifzKW%SNGV2SU7r!&SP_Tf%?DMRv9PRcsex8-NulYYSY}-^aK_RC7vrT)Q!I8Z5
zKQCsxY)j4iHji`G+sHE$12_A;?fh(-7TM<?oGe;dlptYIwPL&Y5>1g))_eFo3>Lce
z2bi<(wqBE5uXJwNi!GN|W!4{GkaIBDWeeNsMJA<}MD$8`ajdaE@x${-abtIr_MI5M
zxk6f3h2~DxWQgQQZwjjENX*-_^RB91_KXm@dLfBV3p@TV5L#ZJaP>cXipP<>%NG+5
z-d)ezEG@UlUTdH0%aWWqLL3Yq`CooN{zN#oeB-?zYdPP=b1oG>y?)s;mz$X<>UZm>
z3f(V}ns>jY=TJigL(jGYH$L;tyqo#x?E8~VX-Vu;xdM1K4zu{LzIiEW+LH4B%Tv{s
z=3L^lyb+eM!&ievt2>a>_;lpj2aFma?^PGPj&#|U+jurUKFU&bw=B!1-M=pBPq<UR
z`P5Vm^><v-Gv}og2)#6sPpr#on6aX(C@`{q_7BfL`z}_#dwOZsdqdC5zc{*!maxCk
zEVw)|@q+%&NuOPPiwes8bz|+^F5g+w<g#tav8yGP8kZJrDmZ$=C-M4ymYoZQWEcL=
zUi;aHaZgg^qx(PVR;fFN^DmiNySa&bL*&heJJ{|&+j?Z5K4<s(o{qkD=YZm@#zy1I
zKMNPdSD&i?{+z3czuh-=$J^T(xd+vv)J|=$;{9;;TIeF@moIZ!Kdljbcerc617md1
zTZSViKi!_NE@hejaq&izrqi33S<hT_ZhemLLPv&$OKTN+cK?;$_RxB}jcT^zYj6FC
zyX*HTZhF*lVbh5~=2MNK&1{afAqO(0yv5kwZPRcSG~vFukfEMu{l1&07Ru+H*wG?!
z=c}kz(6k3`z78S}K3gmQox37yeXlO-HO&f{s%2J3)?G2b{dCg%pNyveH!a${;q=|j
zLff|<za3;C!OZw4)2Al>pZ|T)Mz#~(0w-Nf?2-fHYpk|*3TQEw8=rcV(k~shO>>9N
z;vn`P8?ExU&y{zddNK2;e7zHoQT5VHN9nT<mw!33uPmv-|6R#PH~p#AXOb=KJ=Zg<
zUYva+I?tTvf5W0j>zTA|nZ>r0=IwUhQB|#aZuV|b+py{FX6xtg@w#+#R?j;Az(?tm
zW*DxIoX#uvo%@T(7tY|kFE#m_k{>=h9~mYt&gUF<V0G#Z^CxG{u4;0hIIT0W-f;r+
z*&U$?wW$aBex@Zq)LfACMg9WMoJnr0*U24W>FV@#WAQdU9wRqTY_mI;&!J0+XCGuQ
zXVX5?yU#Jf+*#+(vX?*Wljf|Rv~Y7$*7}aG$=R`Qlp9scdm}FL?5kz(-XAG%@yFAC
z^BtZoa@SY7t@QD3Yze%%l5dvGKgEMN3~}`*=Xt(a=RIrR`sh_Vf9yZ`&LS&5sPXI_
zfs`^qnbkXwOl<UMu1GsIWvkr3ysM6p{U<-D{P0~_%fCtG-nIx{lZpl3xb@4@@-oeq
zo7{DJw@UZduH$q2rAw@BlJw+Po+_DLp4QB8ZmM(g;ne%bV;YxOUvE@?zUv-mfNbG@
zenUI`L-jlT7RfiMB+ak<Wj47cxWJ)oQL!HH{@)9h=Io7dd?=QZ`$GR_g~k0-pAWtk
zX<73*<asZ{-^0E)l5?)@Npqe5WWrCY`~NNONloXL>4-Gxw!KrFS84xzC5wJ*{X1Qw
zl6B8lf2^}uRGz`2_vA#?XCHl*3(PyBl<hBDKbrkHR^QR4{@=X4YW=^391cI7Z_2Vl
z#-?SuS=g&Y=`((Zt)x5nV=i4PisZZW^6i#ACNZY+iH{_#KC5fBD!)y7bSG=tJo&s0
zr}>Ry%S2UQ|GN`t9_{lfSLw-liN#6Zr}OT3^?Bz0`PmL%wAJr^tKK7IG{wd>PAM-{
zZ0b9m{oKz?UbY>a`E5b{4v)`ezkj}CVJ$r8^6ScnrjAd++hPmSr^jt*KdV`%cJ84W
zzk}IfgL8+YdHoBoP7N!SQ53hSS-aP%FDG7l@qE>_`b`Y#rEgC;{ZEKzIik9ralhIW
ze&ugh109<;P5&H`mXw#azUIr}^u<yMm*$=p=MR$o#dIuJbz_k2In}fL_4V1u1XOAQ
zg;RFUaJ*G~ukP)v^Gs{^E&VP%jpM-)8~yZGr*7nRCBE`GpLsm%a`DDfr<e|D9qLv+
z%f!`D`G;|%(W)AY1DUV*a`P<aZ~OJDZ<10)H`8CqPl0Q`uQL{4W#@aWc$a$}<I0Ol
zH<uo0tK3<ewdJ?Vlc`4qyO+mscy3_Hm9+Gd`gAJA>G-my6;Bq$eEV`CN<qx)!=t9f
E00i%!TmS$7

diff --git a/secrets-git-crypt/paperless_env b/secrets-git-crypt/paperless_env
new file mode 100644
index 0000000000000000000000000000000000000000..21295cea8355afe60a01c79d06f392d69fec2121
GIT binary patch
literal 150
zcmZQ@_Y83kiVO&0xc#4Jb00_Cvs*_r?cRqA@j2X@w)&b|q(EQmL1X*l>TTtF*VR3;
zKg;y}hQ`7JikwNGl?~)IQ;!;^--z5__|i~qhE~C=5GH$1zZVC~RupP(Jo$L4|5_yh
z_mEDTn{tw`=KaiSy!L9}{5uzgdjD*GmsHoVF73r?zsHQqzgaoY-+06S;A713Joz-0
J*HzbN0RU#GNv8k+

literal 0
HcmV?d00001


From d41530b65f62ffe45b7c1856a10e37db8f246f8b Mon Sep 17 00:00:00 2001
From: Noratrieb <48135649+Noratrieb@users.noreply.github.com>
Date: Thu, 28 May 2026 22:36:23 +0200
Subject: [PATCH 2/2] step 1 for dyn dns

---
 nix/modules/dns/nilstrieb.dev.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nix/modules/dns/nilstrieb.dev.nix b/nix/modules/dns/nilstrieb.dev.nix
index 1d0fb7d..c013f4f 100644
--- a/nix/modules/dns/nilstrieb.dev.nix
+++ b/nix/modules/dns/nilstrieb.dev.nix
@@ -18,7 +18,7 @@ let
     vps1 // {
       TTL = hour1;
       SOA = {
-        nameServer = "ns1.nilstrieb.dev.";
+        nameServer = "ns.nilstrieb.dev.";
         adminEmail = "void@nilstrieb.dev";
         serial = 2024072601;
       };
@@ -34,6 +34,7 @@ let
       ];
 
       subdomains = {
+        ns = dns1;
         ns1 = dns1;
         ns2 = dns2;