hack

2024-04-11 19:42:26 +10:00 · 2024-04-11 19:42:26 +10:00 · 49f293a574
commit 49f293a574
parent 90a2cd876d
24 changed files with 506 additions and 421 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -14,7 +14,7 @@ keys:
  - &citadel age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
  - &rickenbacker age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
  - &shodan age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
-  - &daedalus age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+  - &daedalus age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl

 creation_rules:
  - path_regex: .*\.sops\.yaml$
--- a/README.md
+++ b/README.md
@ -30,6 +30,7 @@ To Install
 - [ ] Replace existing ubuntu-based 'NAS'
 - [ ] Expand usage to other shell environments such as WSL, etc
 - [ ] handle secrets - decide between sweet and simple SOPS or re-use my doppler setup.
+- [ ] keep it simple, use trusted boring tools

 ## TODO

@ -56,6 +57,19 @@ TBC

 TBC

+## Manifesto
+
+Taking lead from the zen of python:
+
+- Minimise dependencies, where required, explicitly define dependencies
+- Use plain nix to solve problems over additional tooling
+- Stable channel for stable machines. Unstable only where features are important.
+- Modules for a specific service - Profiles for broad configuration of state.
+- Write readable code - descriptive variable names and modules
+- Keep functions/dependencies within the relevant module where possible
+- Errors should never pass silently - use assert etc for misconfigurations
+- Flat is better than nested - use built-in functions like map, filter, and fold to operate on lists or sets
+
 ## Checklist

 ### Adding new node
--- a/docs/vm/impermance.md
+++ b/docs/vm/impermance.md
@ -0,0 +1,4 @@
+
+- need to save ssh keys on reboot
+  - else you end up with sops issues & ssh known_key changes every reboot
+- need to sort out password
--- a/nixos/hosts/daedalus/default.nix
+++ b/nixos/hosts/daedalus/default.nix
@ -31,7 +31,9 @@
  mySystem.system = {
    zfs.enable = true;
    zfs.mountPoolsAtBoot = [ "tank" ];
-    zfs.impermanenceRollback = true;
+
+    # run impermanence
+    impermanence.enable = true;
  };

  mySystem.services.nfs.enable = true;
--- a/nixos/modules/nixos/containers/arr/lidarr/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/arr/lidarr/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    lidarr:
-        env: ENC[AES256_GCM,data:5VcdBPetwTfS/WTx0vToEEbvswcX68u8VC2ocolffMs+lcXNHL2A6R1U0nqEj8tulhc6mZnTutVSS6uJnp6eoSL5wAwiv5Fa3Z8m/tsNtlFm7Wnx6fGr69+xyM5yvPDVQNLzZbtc9OLCYUyrjt8=,iv:TwjX30spj+xvNSwQp6ZR5BPYN417Qeo3mwqB2D809So=,tag:T1sNCbzCs/cOAtwIRyLJZw==,type:str]
+        env: ENC[AES256_GCM,data:lxWrT4S/irVLwthc75RUX3bM5JEHcsGup9sdJlUe3Utq4XJnBfcFE/tcdOdjGrQuSfRguOFnoAlFSAsQkl0SLUb1OodcfYylKhY7CMg1ZFcpl5vWZdq0Ot6/tEGxkUqeDZDRg2RNedotJ98nrPc=,iv:gmnwzagAiX4XCdsFy4Xp2n3FsgPUD017S8XL8qOhOjc=,tag:1343PXN07VjR9Jct1Pk+Ww==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZeExRVUE1RklEUDc2ZUt4
-            SlRXT1FqQnJMdENhRUZvNlY0bGx4bnVNYjN3CkZaWFR3SDJwTWtONGZoaWwzaStk
-            YVErNWhNeHlMMU1Ic0J3Sy9wbnFDT00KLS0tIEo5NFBHaVJkZk9sNHNURlNQN3V5
-            QUhSYStla1dyMDBOd2tIVndBTU1vMlEKZVlCF2cRKWDidWFe2h+KfLulFwmp9D7g
-            TpTnX3Qr8a8xPZVqFTBlxVD73n1ymZQMoSosIOcQVH9zSxwO2+e6Ag==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcVZDNlJUZ2dJRWVEYnpU
+            MU1ud2o2UEVxS21DZmd1QnZjcHpLMjlpUVVBCkY2VktEdkM2OElTdS8xUkovclBh
+            QzduZ1A1VitaTDFjeFZ3SElOYUV5amcKLS0tIHNBQXYyd1Z0TFI0QkcrVC9FQWdx
+            WXVvMjU4eU5QZCsxU25QZStBTWhZQWcKv6Mgm2Y2SzrtuzkH7Z43by6T8ROxCgus
+            QaEukJv1ut6ISvYusApAJvKDaF5KofSR8zMNHcUZqtYKP4TppB7Qnw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1eCtXVUJ4VGhxdms5NVNa
-            UUNnUUY0UW1pWHpWQmxvVGlDc09yKzQ4Z1RRCm41Y0RIcEtRRE5sSFRjb2RPWUtX
-            cUJIUHpBSU1pR2sxMitMTG9SR3krcFUKLS0tIEZTZWw0T1NFRmxJR0k1elpwZzRB
-            aGhQRFBra1Z4eCtrYVhOVHZTM0pKdkEKG3Stc2gT3PfbUW805D3w1BLSQTnoSOe7
-            Jv/L2M+Ua4qs+wcvtC6quaq/9f8fQvEPrO28itQNvKqOJuR8vCQDdQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtR3EwWFpDbHFNMXJOSUkx
+            SG5rV0JRcWNLT1RnYnBzTFIvRmorSVZMZGxnClRvK0JWaGQzdDY0eEFEV3RMbXRP
+            ZGhkWGpPVHRhc3RULzlJME5qSkU3SXcKLS0tIFpCYThyV3pGcUtYcktzSGQ5WU5v
+            Q2hqUlBkU2ZITDV3SFgyTDd3WC92TlkKbS6OxsGcP4v2U1t83ucQ0zUUVbgT35sg
+            C5KGUS+2+W6J850hzjvd8aYTxx1fBrC6KrWGgqhLUDYfhmHUP0evAA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXZFVQbzk4NHNOZEJlcy9q
-            Tms0SXpYZTBOV2psWjFKMGJvRk13RWMvTkhNCm1QUzh0UzNWeXBzQTN0ODhRelB5
-            Rm1tS0ZlZ1QyMHlvalllOFlVdmkyU2cKLS0tIHFJemc5ZXVJV0pkeTNma2RubEYy
-            bk40d1ZkTXFvRXAwWTZPb0lCaHRBU0UKVUkaMOEYngiAAfN/0+Cxl8x3fzOc5x5v
-            CQf5V3PbwWKrNuxsn7tqwy8H43pei71fwHvVfV50skBApH9afsglCA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArVFNTUldORnN2V3RLRUdT
+            VEpobWdISDBHTzI3WXgxd1JaOWJsaXRCQ1ZFCit4UFdmS1N4cTFnYUVIbTN5NDhs
+            WDJhS1JxZlloSDR5aW1sQ1lZZjkyYmMKLS0tIG5IdjVOWkpEMytmUWRYbjlRZkxo
+            ZDNQTCtucS81UXVXYm1BZWZzaVFCR1kKjfx36fR7lTBAa/NNn6NhIVKmzmfpZ4il
+            sxh0ISEEjqCBo04WvidZmxPK2w21Pbkvj/yZ0n+sjY+FBIBBo4GH3g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaU9nNWNxb0J4dVRxMWN0
-            N1EzYkczQlhuaEhRWXViUUVoUzRTS1h6S1FRCnJjZTJ2dHdBNDJ1UldkRjljc1Vv
-            NHI0aFpsVmlhM3NtNXk5a1hhVkdadHMKLS0tIFVJbjZFc3IrTUtuc01yV3JaZklR
-            YlB5N0NxOXBkUUNVemJ1aEJGdEgwa1EKzsIdKDUjdQKkWKVcnxgYQLMM3TjY4+sP
-            rOHnsCGNYG2TdwwgxYAJrKXwj/nq46h9su9KYn+mKgMq/bznR6y+Pw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4KzdtYTgremIzVS9RMFdZ
+            Z0MxRHM5eG9HSjZaNzhOdGZoY3Q2THcrWGk0CldIbk04anRGakNaS0tmSDUzd3Mx
+            WHlvOHF4SmIzTUxmRktYb2hqcVhrUUkKLS0tIDdKSTdienRncXFTZHlZYlRJMkN6
+            N0xTdkJKNzdJNG9JQW5HTU45UkQrSWcKgW99UNgbs3CdMj8rmtLxRa4IRlx5VwYy
+            yNbHvTnl41DJRdv7kn7e05pFJ7Y3WeYH0XfozKw+Tk3pct7h7hGOBQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzbVFTQ25rLzY5NjMyRjI1
-            RTJuMmt5SHF5RXh5YWJCSkwwOWdqeHlHb2dFCjZpQ0hIYlpWbUJMclFCN0R0bjV0
-            OHpkL2NqVlhud2c2dlpPL1dLUU5mNVUKLS0tIDVkTkFFVnVEVkFVOTd5UEh3RU43
-            ZUw4dWNpV1pVbmIyYjNFUEV3dGpoencKIeSU0U7sRtpNRLc1Dp/z3naCn3KEnLwS
-            nkGEPj76i8tSoi5Tbd7JFE6B9nIx9qI4axdDSod+XmqAdr32fiFR1w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVMXJmRFlxc2VqMnhCVU1U
+            THhVSG9QS3RKRmxXRE9VL3pUOFBYd2VrbVFnClZGdFZnOXBjazcwQ2QrcTNWT1lV
+            OGxkM1pVVDV3UEVjM3krcWpGN1cyeVUKLS0tIDU5Mi9ock05YUMvOGFXdUNpQWUv
+            RjlsTWJueG5tL1dxUEgvYVVVUHhjM1kKcHay9WYhxOY9BHDAd5logzzMmGzMuW16
+            Njz2FcsymdZ+YBFhQ0oyAk1v7oYpu2JrMwP5MI5E75/PgGsbQgm3uw==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtK3EvMVM5YVVjdE83dWJS
-            eTJHNnFKOHk5WGhwYmxSRk5HNFgzSmJ5SERrClJiWktwcGdoSXB1TVJZTG9vSC92
-            TzMzM3FoaStpRXUrK2tZSFVsdnJRR3cKLS0tIEtVQU1SbFZ5SHNrandWdXVLVHcy
-            Qk5HMTJ6TTI2WHdLUjNOQnd6Y1JwQVEKIX+Ot6xGNJXwlxof6oB+HbvXPNDuoGbS
-            weKDAQP7hcMcHMyI6BypQt9088ox9ZIR0jvkkHqkwI814GwXffB2CA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGWVcwN0g2UHRnUlNuNEl2
+            M2FhTW1aQVNuMkQ3eWpVY0VHMFhrQUZGc1hVCmlqSjljWThkeVhPUnZVbmVEN3hx
+            RDJteC8zWTdDVkRaM2xEMUVROUxkTlkKLS0tIGQyZDIrdmtLWnZQN0ZXTDhQWEVG
+            ZzI4ZGNYME1IL295NTNDYnF5eUJVNWcKHtkBcI9hycZbL3FJmZS5VH1Ig8yhbvk7
+            lvZEAbNpObvFiG3pNyuOSJ2oMMT0bOEGAnBUER/rx8S1s8GDONONBw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:i5ZRQqfGI2sdRpl2psShpTevdTk4XWCBOslWxedZM9bFTk6w6+vIg3rXtueOzDY3+rKiNitYA5HtruSuHxFxut8zKWVtzR6PhPn/zv/rBZyIJAsvfczkuENS6ioE2CY9gAVnwVnLEB7Hx/KriKdtmjRPnLIR5m4scCHEDS4kXkw=,iv:S/8N0ES3D71S06MuQxb0/k1uUdza7ee+bnPW7hdDV7M=,tag:jjWLbUOFxlz+0EIlgSp4bw==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:Dl5La9KOKdZHMx5xtdgpJTOD0t7Tt3YoUq4i7y7yjGV5ylVkHRXIg3thaADIBcCgu4sVcJjGz46fqyDbezcSoaWgZBu+dpJEpY4VMBjIIygn12Nj0Dwhc8ILImnIH9vQydCc2hukdM80eZfKgeDjq4oBjLtZqhiENoP6EnWh6fY=,iv:JY62wTyhAzlTQgCi0WtWFb1hUCjJZ3VMtcIWanNyQlY=,tag:5jAmHLV69B5CkVXIJVKrgA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/arr/prowlarr/default.nix
+++ b/nixos/modules/nixos/containers/arr/prowlarr/default.nix
@ -47,6 +47,7 @@ in
      };
      environmentFiles = [ config.sops.secrets."services/${app}/env".path ];
      volumes = [
+        "${persistentFolder}:/config:rw"
        "${persistentFolder}:/config:rw"
        "/etc/localtime:/etc/localtime:ro"
      ];
--- a/nixos/modules/nixos/containers/arr/prowlarr/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/arr/prowlarr/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    prowlarr:
-        env: ENC[AES256_GCM,data:ttFiYzwi1aWCLnAw2/Qlm/P7F54SG0YWzLR8jORFk6l5sFaDe9UI7d0ycsqrE/a17bK6LMkGNAMAqQUWvP05jal6YAjWybWcEjGBkQxsjWJyp+U0P07OdxG6EpN0mZBnT5709Zzje0Z36122NJgilB0s,iv:z25dpR+MUYYe5btSkSOapgxmUqkjwT/RCOOQBweXmT4=,tag:NL0beLYPvq39ZJxrc5m1tA==,type:str]
+        env: ENC[AES256_GCM,data:hUd/39VQBX5mrtVVBE9pB/10FysJflAPgbVbSZpsw8DFXj3yoHxjJX6SAzRIz6K1iHD4kLTLjlO2jQ/L/C95byuLqNhgUHuGpdMQNJvkye3apJSwnCxE4wv2oNnB9cJXF81K8efvP0cqBNhBMfNUwNYa,iv:UCk6Z7oVY40c7hF5gJ8xR21jgxV5n6MIIAD3YZ9r6KU=,tag:EfCCHmJ+IqA82JEhIAzQBA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhYWxRYk1ReWt2eEgzN0dy
-            VGFUaElPV1Bma29ZS2NFTFY1M2pzQTcxVTNVCmZuT3JFT1hwZ25RR3dWZGszb1VN
-            R1RBV3RjZjZuK3R6Mldrc2tGWS9VQmcKLS0tIEFTalNNT1NvTVUyWFcvWHRsaXZH
-            OG43UllJZkZUUHBWb0xqVGFjM1EwSVUKqZlwvKul4KADfh+VLJPFM0vK6l+54+Bk
-            uubeoLU127aHSY0L3gISlMOIVkEB5LaMiBiox9C8IEUj+mUlyeACUA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoTUdVOUc3R01XREtPODN6
+            YmpHbS9wRlZsaG1nSi9uRkVXNTc3cE9NR0hzClNXSVQvSW5KU3pkSHROU2JhK1VE
+            NXVIWTljYnJueG9udzBmcUJEZDNnSmMKLS0tIG12VW16dkxrQmRYOEkyNFBCWitH
+            d1VnTHVjTm9VK3pzY2FzMkptMjk3VE0K9Wz2lmxhe1MdJ+7Z/bIDsgxHNkHGDVB0
+            eM1fRSOWBdmZJvd7UxJ79LTgymgiRjP/gDGUAtIuLMaAHkChIbN8Ww==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArUHdCbTNobTRNNk9zdlhS
-            ZGFtd09YNUYxYlpvVmRXeWllejRET0g2eUJvCndvd3gwbkM2OEhNVnpvc3pVK0Q5
-            eGJvS0l0TGFCUkI0dWdhQURBaDcwMzQKLS0tIENnN0swSXk2RWZNMkp4QVo3ei9X
-            cXhZTWtBVDVlL2crckduMkNXQ0s3WmcK26vLTr4ZC2x2SToTzFKa2A6A6MdXp4AY
-            USHFbk9QKD8tmXMDPiQvCFW2ekGNuPgJFVs8ABYv6eOYVcxk/rZs9A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4MjR1azhEcnhqaGVtazBJ
+            eHNwN2lYZ2VRRVJESkZyaDJ4TEV3eEc0cHo0CkxLL3ZpeFUwd0dIY2JKemNlcWFq
+            a1o5a3F3RFVSSEQ1UWc0K09QWXg0aE0KLS0tIDdJb05aTjZNQ0czWlhNQnRmdXVy
+            S1o4STZydVNZbzFwSm9kUjhpcHRFUEkKdmKu/jDfBgwhMDKY1sfz9bKjaqhu/1Eg
+            uYqLGaf9TCxOnYSTtdSQH+Q0usU0IV/DcrPNJZsJbkRpXpJLIz11/A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUjBybTdLdHViaUp6VVdM
-            ZDd2bjZpWU9RaUhuamEyaHZ5bjFLcC9iWEgwCmlhNnZRY3dmdWVPSy85SVZieXBT
-            OExseGxLLzRZT0h4SmhGYUtRTEpZT0EKLS0tIHd2L0hITEFqaHFVcWVuNTFYeUVw
-            bGo2cXRlMlJOUVZGWENHN0RxVzNEZ1UKytAEFgq8+1veqz36HfYHTGiGJlRApbLc
-            I53Z5L8T/28woYDCps00/okIogOMwG+v4hk/znl2GXE8u97NDy1jrg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvbGpqbDdZcWdlbVYwOXBm
+            VzdDQ3JIRGNEQm45TjV2OEZCZjVlUm9uT1JjClBtb1ZCOWNNbnlVekIxREtKRnRi
+            V1hDK0R6QncxMGdmVGh0eHB0ZEJNbTAKLS0tIHVrbXRjVnJhUkNNYnIvYmg1Y25H
+            dzQ5SjYvUHA0bTNJS1NkbXlUK2tDYXMKx4u7Elq6jjqSR84PBnXNwqyKJCETv6f9
+            Bn06vcCHuzApT8SGuvm4+v34IbZmUwFK930aZiMkSnjDn1LLF7DqcQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRnlzbWFBbUVSdUVKTlln
-            eVVFODNuZDNyMzZqOW9xdEJnQ1NPVXZrWlFRClZBMmdoOTlUdGVqanJ4QkNKWkQ4
-            U21kaVRtbVRLemROb0Z1USt2UktqdWMKLS0tIHZOZkpIVmEwR3lEWWlKUGcxWDlU
-            bzA0aVpvaU14QThycDYzWXZIU21scm8KfTdtJvt6XXmvyezjMhTZJiHHx4te0XVU
-            8CBa5m9jtnuWUPWXbdWtdTEd9p0PKVfi3UZdQ8P4zg8Bb+MtTCoeog==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZVVWU3lRSnRvbmdoTll0
+            c0tYZkdKYTI3eFZSSTRuUlhPT2lHQTFYRDJVCmdUeTJvZWlIdXRqdjNBVXhWL21r
+            WHFmdDVuRnN5S0tzcmYvT1h1Vm9qUjAKLS0tIDBJRTNVaG11WFo4OWRGYzVya1Vn
+            VElmRlVDRVdLNGVvVXRhNGkxY1VhQncKo3zk7GuHxOzDg1eYKkCLRSvulQ0PmNff
+            HrJfk6a4CprFKKdhv0EPIu7u/ggBsOyWpmHRoN0+0IzMgkXU4Sjthw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeGt3d0pmZmtpaDlwUDR0
-            WGh2ZEZPVXIrL1BoS0FWMVdzMDBRcTd3Y0ZFClpnbDZkSEpEUHpiYWlGb0owOFNq
-            VnZ6cHFsbEJlaFZrYXpxOHdvVzBtS0UKLS0tIFJiTkJXQlNBazVSSWRtdnY0K242
-            b2FlRnRQeHA2V00vTEJCRGV6VEdlQm8KrvSQSvYJqqkv8/SjoldoUrl0H9bYSJp5
-            wbMT7Z9vp0CgPv4eFGLwox+SaDTj2uitDJwVbJxLY7XEkV2n8kcglQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNys4ejR1WHZwdjdCa2ZM
+            VCtmS1ptWUVwNlgzVEs0c3RkTTBVbnJRNTI0CkhIVHZVeXhJdGtmM05yTEFhdVdl
+            TDNDc3FYa2pmY1hVd0ZrSDBiT0g4M3cKLS0tIGJuOUZIZCtUbkZYZGFyTzZheTZp
+            QjdZS0IzYXl6d01xS1ZTR0xLRi8rSkEK19L6i+KSc9rnZ+pF2BKfIrp1zeipyNNy
+            VGcwyh+YD2K1S9KAgCffvr1zJ0Vwf/Ttc4/pqiSTnYIUJeBHNx/s4A==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKOEhNYXBDRkJNV2lLbjNP
-            T3NDRjNNaVY1elM0MWxCWkE0aHlYVGxxSG5zCmFCOTFsWE02UnZBVWNCdHJXZkdR
-            VGVGMmRtN09oOU0wNkMrSTluNW9VSXcKLS0tIDRuVllGMWowTml5NEU1NnpIQWwr
-            VmZHblNSN1kxd0x0NEtUUHMrUStQeHcKiW5m7edcx80xgpb2jvORnzRLHSgLb2Qq
-            0Z4qiQyKrHZeBBzz0+FwgV+O0zBxcfu5KWKjnjRPoOtParn/eOp8Kw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6ZE85THN3MDF3Um5TckU1
+            SHJlaDc5eWRTUGROU3krcmorbkZmTEFBcXhJCjRFNTNOVXIxMW8vQjZEY1U1OE5C
+            ZS9lUFNkNVhHaHYybTc2YjdpaWxIaFkKLS0tIE1lZ1MvdG90aVd2aE5PUXZrSFps
+            cmpuTEp1U1BoTjJ1NnVtcTNlQ0FaS0EKDtNAMdObm+nK0WQ1BtQllguTkzchIIZ7
+            99kkhXumgi/qsri19ZSXsz9GhDliISNHW2oo4ClCwJg2Wk3wWIRUow==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:5hd/GvbEK65LQ0dVg6PCaRcj6wKJ8R4kLw+XaDe67NCIYTkjT8vZNFkV08iLOglu83VMUbE7XpDq1lzxzxGfAQnhkKuAIK6GwLSJiwndd9/HBknazYSEEZRzqPxXrWBL91h0Ybpu5Mwe0xIz0qV8jTvly9k+dsHNxeylmGt33gg=,iv:+CHZw7gK97hoVPRe31Ie+GgkQpTdxK32trHDGLT4PpM=,tag:+yTWSXd4eAUrHnS8W0tubA==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:nxW6oesMxMTUEy492qiSW6A3D7xZHo2YaIaJ3WZCk7Pr9bPPzGQnJmkYeiANiIOJNPdeguMZrBJ69Ng6wObBzn4YQc/noLItuMOPzJscpg/p7obPdG9ijMpl3/HIcY1HVdV0skJsXW8l3LvcCE6Ynx/jxbbxzXtyEV8Pm5KU6oc=,iv:l0nE1E/xjmk5fzqYyCzgmZMaSdfGbKbZ3XkXBW1FeTs=,tag:HHqtBv3rFOzXqvb/IsOl5g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/arr/radarr/default.nix
+++ b/nixos/modules/nixos/containers/arr/radarr/default.nix
@ -49,7 +49,7 @@ in
      environmentFiles = [ config.sops.secrets."services/${app}/env".path ];
      volumes = [
        "${persistentFolder}:/config:rw"
-        "${config.mySystem.nasFolder}natflix/series:/media:rw"
+        "${config.mySystem.nasFolder}natflix:/media:rw"
        "/etc/localtime:/etc/localtime:ro"
      ];
      labels = config.lib.mySystem.mkTraefikLabels {
--- a/nixos/modules/nixos/containers/arr/radarr/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/arr/radarr/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    radarr:
-        env: ENC[AES256_GCM,data:JHFR8ADXmWjjyZ9AUvGSEU96VaD1wkVmQUXlQsUqYVU003JNKtEpTgytWkpNCblxVAoAQMrRWBFLPIyMWhIP+nj+I8sHKHZFRs2jSYz3iRILCEStWOpRsntlF1fRprxnIkMnFlKZ/ZVfxm+dpFt7HhfaYs2I9G+R8jvSFirguA0GYZjixqp4yCpbOFHPWftIiesrS+X1ywN5quu26qH0QTPpBdMKUFJCyEyXa7oVFr/Z/6D9khsDlw6SqVlhNQl+jP2qkogQCC5yqjra1r2f,iv:45SFav1hhD7c7TlMAwq+4G1Hz5VPJqOShlqrYpybD2U=,tag:75ANZ5bMhLkw0/uJnjw+tg==,type:str]
+        env: ENC[AES256_GCM,data:ukUND0l3OVMVD2ChJhzGXwzeM2fCgxkEVygfXdRkWo0XH2QZB5FlYSqx+AasTAXcqOaaH96YrAIQWeYQADrXP2mmSBG3e2V7ZFOyADN89MSEkwr4XtSdTEBl2l4v49geN6mhkHI67Wm/kdV3Vpnj8ViOTnwXIgaRgTc+r9Jp0pyg1WXdZqdU8jOtPNbniCzfRemcxLM5MBIF5Wd5bBrHW8/+yj42/1xL18iO6bgpN9k1tenq7/60ajgDXD00AiAMYKtyCDtJEqvaKiAF/1yf,iv:e/Bb4ztBM/cSnouFxgxQy5iVkRYnOwaz1bYdDKA6ySQ=,tag:UcAGRhEI6Gep+V4L+YjdMw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpTitrY2dmYW9nUGs2YjlV
-            YUNFZTB0Y1pFelg2aUZjWmk0eVRDUTB1TmtFClZhYXE3dmM5NUNoVy9sUldiTWNP
-            dzZtaUlJcGZ3Sm5hOXFnUFdUTFRFSzgKLS0tIHFRSko2QXFlOGNveE93VGh1VXdM
-            Rk9QRXlyczFrTi9HdVI5djN1MVVWWWMKRm2cu9hKeBXfBkNZRz/ySnFuYbwycyEk
-            MIb6RDP0ZngnI4bgGTRxCPk8lWD+f5PGeEn1OQri03QCrKwBtQvVkg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwN1ZCTHkrRkRzY2FvMEFB
+            TnhuRFdFckY2UVJBWGxEOEE3T05SOXlRaENZCnpPbGc1aG9vQ1Z2emlSY29rYVNJ
+            c0xkUWRuK0tBelkvOUpvRi8vbERGTWsKLS0tIFQ2Wmh1ZzRmdElBbEo0S0NrQWNM
+            MG1LMEJSTzBzcDlPYlhTOVhJY29mb1UKU6F0gaSPshJJ/7s5E8nFcX8sznmNGAAO
+            U7e2YoImKOteHOTCp4mCIDvJMbTWAls7LeElkVTZrdG8Cd0qFQLbZQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArdmF2WHBnUGhHWU41cmR6
-            MkFyeTZEZ0RXeG03ZTNkelJ2cWNnR1Qzd0NzCk45Z1NqWDZZR3BOQXEzZXFsU05D
-            aUxvVUhzblNGUTZmdTd0cUpVSVNxdXMKLS0tIEtlQ0hlQ0V2NHRrNFR2U2xRYlRE
-            ZzhyZ3I5Y29EWWZMd2VVMVhyRVV6UTAK7mtK1TM+ftlU4TO61mKartXrDifIT5+0
-            5fiICMEFDuTyeDa3e/WUCays/8usWh0Q18O/BI5Jfs5WXfajP0C5Qg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYUJycWowckorWDI5TW9W
+            WVNuaFJrbHRqUUp2MG1MWFcxMFRIc0lmTzFVCnZ6N2RpRWphaTN1dk1iU2xYYWh3
+            VUhmLzlkVWxJNzNpc0dPRTNRMmZaU2cKLS0tIHkwdHlYQ1hDRzlxUGVlYmZZOWZO
+            M05EYmU4SDU3YlR4Y1FNTjNrNSt3d1UKjOYnX6tAYGV1FIQ1KhsxlpP3G4iGKvzQ
+            B856D24XmztXROWxLekQRqG2zA/tfBnRzyeNnnPf0k///4lPFBfhRA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBySC95QmhSUGN4OHQyazZ1
-            K01OZjcrSy9KRHlBZE5HSllyaFMvdmlFUUhzCklWREZNTVd1VjgvKzN3TEFNcXdN
-            UUpnNU5JbjZidDBxR09XNllKSzBKSTQKLS0tIDA3Q1JxeTBGNWZ1aTk3enNRemNj
-            bEFaMFFLMzNZc2M3eEdJTVlaVHFMMzQKypcB0TVgfHuszNoqXpNwqJ62GAr0tBpV
-            K1x8cOKW5usVLZn4PhPSA0HUPcXdysxbMo883lbWp8zcOg95WHeuOg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0OHZjNFBxNHJPaXRxMGpt
+            SS8yUDI2RUJraGRXV1hpMzRMc0ZnUEJrN0hvCkNOMENQbXlJd1JxNytFT0FpS3NB
+            VXNUd2NSWTBFbmhuaVcyTXFWWU1SQlkKLS0tIG4wTGlxeEx5SlN6NEhjbm9ma3R6
+            MWNGdlFvZkg0OTl6M2pOb3RyTEQ0ZDgKVJ161HNXY9dh6bTIlf/G093ZJNUuDFIW
+            inXia0GDh06Vq3V6f9Lt4DW+a9HZdoIT8NaAOcNmc+8a0F1h/5jZxw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQTVhpbW9VOG5YQ1JTQlJ1
-            UUdPN1BrOFdLR0lidDA1SngrK2RuSzNIZHpRCld2V2pHcjY3SkE0M3F6cTNSSG1D
-            eWRLL1ZybDV6aUV4VUdycGZwbXV0aWMKLS0tIElWeXFNRE1CM3JqbGh2R3ZpR01D
-            QVE2Sk04VXQzN1l6K2ozemRSaVNsUVUKcP5HNUfvGEXkxSpzRBA3MTdVNcIpHLmK
-            WCbT/aMNWNGXJGNCGhxTon+V+GAdFmSbyPTLpdrPvItgS9unCq+qbg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMejVkNTZGaDF5NVMybVRE
+            RE5WNDFoKzRURjdMbHBHSXNsajJiQW90MlRRCmpyaE1MQVFGM3pDSDU3Q3lPQ1BV
+            QjVRVk5rcUVFb3pqdmVPMitRUXFDWlEKLS0tIElKV05IQnRVbFE2TnI1OGxOcENE
+            bzZpZjJtdDJpWWVCcUZ1YVoxalFDMlUKnhnYyirfgIhVZBnYN8PnXY3eRm5eDWn7
+            NMnsvahaQfplfIzY7nf3LV1y4s4eptnpmpPrygn52Y1TNiC8neF3vg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVGlMVVZIVWczUlZlR0tI
-            ZHZNYlpla2Y3bGVoanVxRDdpM2psbGpjeVVrCmNkZjQ2K0cvVnNvM0Vxbmh5L0xv
-            WWhsL2VIOHRobVlPWktWeW81cEJWelkKLS0tIEJuWk8xL0VJV2xVaTh6YlNpWlA1
-            bUl5cFRhMTUzWW5VZTJoUzJPWWhrTzQKxn1PZRvoUxeMBO1GyB5BYc1wlJM3hbTy
-            QgT0j9jVVLyv+M/XUJLXLvGmiBsPylcV87H3l1w1MauqL755BlevUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5SElkOTdpRWN6TnkyQWJt
+            dHBBSkVYeWRERXlPZWxwT0lhRzcwd3FrR0FZCk5NRmg2T1dZZEtOcjk3QytnUWF2
+            T3JJR3lHV01reDZPZ2xtY2RKYnNDTWcKLS0tIFNHZEhHblU5aDBJUGlBMXhGQktz
+            QjRST1RQVWNZZ25nM0p6Q0FzQ3o3bzAKQqKRumMEIggkkzcPfuRfDkfRqbkLLbok
+            9DDYqxWQDuEDa3wDm3n13uoN0iwVzdDIUj2V2i5xgNyQgFFyEvT4xA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTWRMUTRSem8xaFpma0ZC
-            OEVtYU9wWjB4UWFkRHI2OG5qZnUyRk5nS3o4CmRtdnkyeUlsbjJ5WllPeDBubFoy
-            NWlJMmJ1WFZUeDN0QjVLdE5EbE1OZ2sKLS0tIGNxakR0cUVJV3pLbkJYSERZZU5P
-            eDRadEZFQ1FmZlNDS1hPMFAxNC9qNkkKQmYKKOcY53eh3bKJgqWWo2Gew2PpMfUq
-            bWb36lw7muruQHBk50p8fp4PE7GS9SfycorJNGQF0ukVdVE2+PvMhQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYWlJSVBCTEVVVXB4SVJS
+            NVl2ZXp4b2ZxeDFKRk43ZEMzL2FQOTZBd2swCll0Tlc4OEJUWENWUDh6THhHYWtj
+            S0RzdEtQemF6TkVCSUZJaFVGZVg3T2cKLS0tIGRqclN4YXJNNG9SY09TOHhmWWc3
+            Z3RQZ000Lytoa2lwUnN6SVB3UngyNGsKnF7qVwcmVJmJhY8GfW3yrC9QEu/V0/wv
+            eHruyTb3CfUqJ9rrhhQ0uOUCZ3YHZjg0rMfOjj6bsZPjGL3kH0OeWQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:VhQQJI7su94H3fE4bHVPGEw6w2jCUI2xre192siezXh5a+9lx6ywtgZy7ztaDWhEAjhvDZb6xsZf+TOpGBSdKw+mUev/nOtjSiRN0lwxozfrKfKcn2WYe1FT+0nAoI33H7+pho3fHOh1N76P82LbMXPaxGPOuVZJOWhRbPvw53s=,iv:Sx6ZscVR6QYUw/ZNErLf6M3KNQ2by69pCAbAIqxgEno=,tag:zNy8nDYt8kyS+KO+pUGtkg==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:1GVohNu9Mz+6v7QHjAvsq8QVYaHnjdmWAG/CpMU8Xg5e/4MJr0N21jh92M8/09hZ7quv0Tvh9KfD/O0j4cssuYcZpCGZPrKSZ5D4NVTYN6bI4oVGgiloPtMR06g1TLJBOmov+fdwGtU5JPf0J8HjbUx/63ZLBB9o6CjRWK7C3Ns=,iv:lxn7ZCH6YWcccZ6Rs7d/hEV/rhDkmGVMb12W27zgN58=,tag:LejroHBhmmHL9NPMHa+y+w==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/arr/readarr/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/arr/readarr/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    readarr:
-        env: ENC[AES256_GCM,data:HpWbwy9kWEO0T/SaiLL1dk7FGIM7iIu3NE8JFaX1/mYMkpqRh6tLM3DxMma9LurThUpuzrU5Ajqajoz4o5XEBL7X+iBt61dApEYjgPmW7wJ8ipeszOCBfjMWUfKGc9F/76i63Mw45jsgZsIRJRDhEA==,iv:SYeIoCZ9dGwUai3AImMfSXmNTTNJs682bWpVE+FIPec=,tag:VuHLTvaCTPhngs+UEQ46BQ==,type:str]
+        env: ENC[AES256_GCM,data:E+p2naBJFyYW3FsuwT9pi+w/o/s7Kf6LCN5v2fiz9cMxWHTR4X9WYrqPhYPrWFoVxc2xyYZgNQWH7+g1Oncy6tWcHVN2AWiVzNXAH+zKkiWjRGbhLkxiAJXct3BUXtB+x9YP+TVDAsXkE3SbIR1KwQ==,iv:/qsVs0cI7Z5oFzVBvlvmirMBF5jWqqqPOlHn4XGqz8Y=,tag:4Yixp4lN7dDdtvMOo/Os9g==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSM2FKSktIRWl4akluKzdR
-            dVRiZnM3SW1VN3VzbUZHVHRCeVhFTk02Tnc4CnczTFpvaHhiWFVJcGRNU1dTakJX
-            ZVFyVDhSOFpUVENSclFiQ1Z4c3NhSzgKLS0tIHZ6L09vOXFHc2kvMEFGanJiOWNs
-            T254Q3dVRTVydDQ3SENvUDVHVXBZVWMK88KSYGnR41jdtMX6M83lkd6gSRCcvrti
-            giUgyWZkZ3QGLoN+1IpPJbbqqtPyh82mR6ZQgR1n4nVlRE1xYYCjaQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2VklCdjREc3R4MFdDVTFp
+            ZllReFdrOXdWQXUrdVd6SGVuRDEzMkNIZlUwCnQ0MWFHbVlaV2xvNFRKajZJbzAr
+            ZEFLM2V5THcveXh6R1hmL1lDWi9wbEUKLS0tIDU4cmJMZTdIYmZmOHZ0eC9wUWc2
+            emRVT0JXU25hUzdQY0Vna2xFQ0tpZ3cKr+pvCb1xnyBfE4FcCNwHvcVkNJTmmOsB
+            jaD7VxiZy/p4WRndex4VVHpJ+qFJs8bPyCCT8a618du4ZGv1Y/xX8w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiNHNEL2RtNEVMcFJYekE2
-            bks0bEZvb0U1L1hJSXpvYjJuV3BvR3M4ZkV3CjdDSTlJcVBGTGZvb3BRSFM0d1Ir
-            N2ZJV3RvamJ5dHp2NkR6SFBTc094U0UKLS0tIG02NEhmNnFsQzN6Z0piczRldWEv
-            V0RRay9Tdmw0aG1FRENlYWYxM2NNR2cK8j0r9MPQdzoWsbVMixnNKZN3E6XWwg3S
-            zYH35CVJm16oSGSNBPsWSn38Qy7q8sG7YuZrTktHsW0tmOpFSyPg1A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBneS8zSXJRTHdmY3ZzcXZT
+            OTlCQXRvN2FONWphcGYzWlhlbzg2YkJ4R1g0ClkwSGJ6QU1JbEtZUC9xQzdBMGEy
+            VmNZT3NJRERpV1I1Ym5DL2NYQXhKVjAKLS0tIGVGZEYzQmg3YVdRL0x5TDBsbEYr
+            ekpvaytPeFBoSEJJL0pMN1pybFFDVlUKb5pQPix1Q0c/7VTPFeinRy+l8WqJpyzb
+            ueep961qEfS4jtesoNvHGdS3Vf+yq6ucfcryJ14vvRFks+OlrVhUNg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2SGVNWEl3WDdzQnQ1Yjcz
-            SnVOenRXTnlRMTdsZS9mNWtOSHlNMXFISTFBClIxNURhcXVDK2lQU0Y5WFBYVXlE
-            SWdQTklwZ3haWXY0VTJlK1BZZ1hSWHcKLS0tIFZTOVBnOGtkUnFKWVIyTjlnby8x
-            ZTZYalI0VE42V0hQSWRlVW1wek5tVW8KuB1ebAKhHvLf1ITSQGUhP5Vtsozu//RO
-            YGSypynn9q+gAw8+BxWlReJSvvLjN3/IMtxnZQkEctsHxPTqStDSkg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXSmxEQXpYaXA3aHJ6ZDBx
+            YXpBOXBBMlFDQzU2c3FCQmNIQStRMHdiY1dnCkNTSDVwTm9QRkhmWDZ0clBuNjdq
+            b0tJYXU1ZEZyaUlqOVNiRTVJQjdVeGsKLS0tICtjdFVVakp4NTU2ZEpGWlF6Rll1
+            QzV3OTQveU9XenhDZ2FWSUdrZlRpeDgK/u5xjNdLQNjZnOEd4o60loTIuEr71vak
+            MxXpg/2G115YSY1p6o4N8uy0GN3Shh2quTLYjkUm1PPAzvbE8arkpA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTWEwc1kzaXVvb0cyR1dr
-            UWViR3RZek5VZXE0ekhwUitacVJ1NEdIV2tFClBlZysxd1pjbXZaZEtOaEZCRU9H
-            eFRwajV0ejhVZVhOK0hpTUIzbEt5VjgKLS0tIHFGbjV1ZGJkeFhadkxYWlN2SlB4
-            Z2NBdnlhM1I1alJMdnJqRVVieFBiU0kK6tp+7WmaG20QDmfMwdQH8XzlO1Em3GEc
-            4Cnhq2tX92UY4EdoQHcSXF4jiq199VXGv+gsPNDDT3gcE8irYtSnHA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4WWM0ZDhKeC9CKy9tNzA0
+            UmdhSHBJcVhudDBpZncwMzB6WWt5TyttMkR3CmQ2Mm1tOWFoZkNXc0hMYmJRMW93
+            UzB5ZXZCb2pzM2NQVW4xQ2xoOVdDTVUKLS0tIHpIajZsb1kzVmRVN3JjN1p0YTVS
+            K3AzSWx6QUI5Rk9uQTBmZEI2NEhHdDQKAlE/XMS0NKCZXORSWcPcknoFGWjq7pBf
+            BjEbBX5Q8hOW0thpw1gythyxav213cHj7xzuwCer+k04/OcKzF/F2w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmelh6K0U1M2RmeU5DSERn
-            a2lobjRtS0xXSDh2cEd3bVRISk91U3NzbVJFCktPMS9sdWdtYkEvclZMOXkwN1lK
-            SGJpYWJraS83ZFRGMGxib2lPYktxV2sKLS0tIEVJaFoxT2swU0E3QTFtRnlHVWpl
-            ajhsNXIycVVPMnZZZFFqczBBK0JLdDAKwlaJhGwCtgjb0ez3J6QvLcYMKToq93ax
-            vvPW7s4Lt34xiIYqyJqvJnpI2nbNT8iDbduAZ6TXD+PcAV9LLSzUIw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOam5UZ2VweGw5OG92L2hK
+            dlk0b09TcnZvK0RHUmd5Zkd1TVVYLzM2Tm1VCldWNEVMWnJnM0xNZG0yOU5oTTcz
+            MGRmQW1DdUZmWStUNHFhdk1DNzMyVjQKLS0tIFJ6czFVN2VjNHZxVmI5eStOUmcr
+            WjVIU3JLdWg1clZXbng5TndXd0lwQ0kKil4CF12Gnb5BQFxcH+QWPfHwabHDSdaI
+            bC2LpzoLZRlkZZwmmL2tLosaSBHqFzPMA3BR1dotRnQtMF0El0MnaA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4aVo0alZFS0hLTXVuZzFi
-            eDJDTEdYQVZFQkV5SEZsQTBIMWk1ZU1mWDNFCnVjS3V5cW5mdFNCUE1PYzZWNFNH
-            N1hvRit2cnVTYVA0OFA4N1djTmFjYjAKLS0tIHBGZms1N0ZlRjJZcEs3c011K1pp
-            V2Z6dVVIdk9NV0kyQ2srOVNSUU95SW8KSob2dJUqov+6ctmaH4eFKeKAt5kj34sf
-            gESn+HyVSLVTJ6nZNgHAbERxhkvY5CyzZJceHZV0JePXOiq0lPGAWA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOTF1TEEwTDFZYTRIUDJ2
+            cHpieUN3eXN5b0ovVnJOUThUWEwxMnNBelM4CkExei9GaEgxNUd6V1lDdTRRbzRC
+            M21MQ2p2MnBBSXRPU25WSGJESWgrU1kKLS0tIFg2YnQwS3YvRnh1SkNJQ3NUd0NW
+            VDA1TjVZWVhHakJCdHM0dXRVTUdKaEUKMYzg0tMqXOds30d+GF1JCb1J26DOghYb
+            P58AMxqVAG2IAtVFFrye2RRUlAfa5t7vzilpWUWZqRPYXvaDVoOE3w==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:yMyOL2ZNBHIg8057UuQPJGLxWf9JVsVUtajK70so3A5S6SZKyDX8SH07uP9piBg7+8KZqJBD3SkLLvVCD1P/wv0n+3Rz8zaAvLG77EtNLuj1t1dDSChIWnWpykjNJuewJKUW7BPZaYhaAUt81LvTf6UNxkso8bAqY1s9vjI5Pac=,iv:SI70Qmh8UGMKcLJiqtUSVZawzTj+AfUP2Dj0UR0oC6w=,tag:vlB01OvUuBw1riOoRYuFMw==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:GeVWlsIrfEoJtANhgAvhLGsbpYCQSrE3/2V30/wTUjoywdO23Su+0vcmQEBbppH/ArGCVA4WwnExNd/jfORXffGDdJL9336pHVvlJ+n4QTYNx97lbwu2IAgixM//qof45Ob3OOvThfffAyeENcAANrBNb5eIPFYV1uurbhAEixA=,iv:NWzQaAO5/aCcMNwiQxpB0/2Hw74aqSzZrO/6JyRvWKY=,tag:I5nLIZI8se0hCjaQzB47sg==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/arr/sonarr/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/arr/sonarr/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    sonarr:
-        env: ENC[AES256_GCM,data:mXRwE1qY2PjrOsJHfjvs0H2CSYsj88mBY89RHPH69FVmSCgmo6lLUvVqDDuQq17uQxCbuetAkkOGoNcnRnwD7CMzYnsP18+1skXgOrZP9V4+BwoIVGGOla3c4MgUihu4/k1sWYf5S62qd9cGAo4ML8uoY3TQbwHrUd8Fc3bboYcp3P7j/kHCzW7TwVCgtI2uJ+9R0tS1v0GZu90WRKpOB4so0WbKxyOlzvyTRkre28aJnQWVo72GDdtYdrtjqLTFej9MYtPYCP7X/TNP238Y,iv:JbJLWSmCwL3rD96K3HZ49NBEOUykKnAHvDFslcXGVFc=,tag:KPW2HC3y1rhCHD1rg9yrFg==,type:str]
+        env: ENC[AES256_GCM,data:kfTyr1nndHNK60uADWYhS5bMr8U2MolgdHGM72t4wWhjIRL3OHFF6zwFtAU7nbOHw3hroa9v9zjzFRSAoHNpzqOE9Gdj4zIKzU3FpxulRyhUzI983zZkN20aZCVJYTdPm0KwJP1+bLdaaJKMqhYePM17mSMCxAJPEY9vLeEI+C1OwIdr8V6XJ5RCD54PuzCsBNjX19vhFjADJLasDUAT3IZCt72zhPNp59rJPlKMLyKPwbPiILHJmP5ly3ZmldaZ3iz4I/+c4HCy36qBQ9xh,iv:4AauiPFfgtFMvf9g0mTMpSOD/78eN7qL0OL2fu4J8aM=,tag:nLw2hgQndHUKdZEzoaNkGg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOWXpsL1ZLaUNwdXNvWnpa
-            L29kZnZyMXZPcGYzZ2VHa25KZ1dHNmc0dlhjCncvZjlGa1FlTmtJSEVuQVJDNVdQ
-            a05MNENWR1lJSldKUzYyaU12am5lNE0KLS0tIGhKWXRhNG1TQ1FUS0lQNVQzeVA3
-            YXdPY3g4V290bkJSNEQrTlFSR1FvRzgKOU96UKrZy+4dQc9qeh/o2vs0JarI09C1
-            i5zUHQq/yrdZJIrx+WcBKBKHF0G1uwf+mJfYphpXf2UxYPodjISttw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Y2g3K2t6b3BQUzh0NUFP
+            eUg5aENGcnRsZlJBd0s3NDlzdlV2WEZ4NndNCnBKeldSVTdVYUNYd0EySkVYb1I0
+            S2JFUTBZcUdHQXZWYk5TYWhxUGhnOVEKLS0tIGFQcDlCN1VqMk1tbHdNdk1yR3ha
+            REd0R2RLSld6dVZCVGsrTWNLRE1XTGcKYlqyo1Hu6Bs22mAVQCNZoKLOZGX9tl3b
+            VjpYta/cVokokWIP7xA9fL1zBEbOiFMBz+wNE+x1OT10VH0GllKrGw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxYkl5a0ZDKzZWL1ljZjNp
-            aDcrc29kNlAycG1hNy85Y3lVQU1IQkhMMFZNClEvVUZ4ZDhZSXgwZjVPaHJ2U2Rx
-            L2luZENOdjlqZEhhd2NhOXFLN3ZiS3MKLS0tIFQ0UjdWWUVnOVFtRXpDU3lNWi8z
-            YVdlQk5vM2U4RzBYSGR6MGxiMUNTWU0KUiGBpd/zvSGUu9bpnAoAh2qtIWh5qxxV
-            yfsgObsHhxaDn8zGpJcSc8SE3ESrc7J3dLpxmjCgBvaQ68/7ecTxRg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWmM4aGJzNDdVRjJlZGYv
+            S2dSMGFnMzFrbTU1NnhySDMrU2hhWk0wMjJzCmJVZVJIYVhVUy84eXg1Znp6U1Zk
+            V2ljd3VVc29hTmhHczM5MkFhS2pMTXcKLS0tIFNqanBSQksrenJTNHlKRGhyeWtE
+            aXRQRlNuYjNKSGVwRzJ5cGdRV2wvSjgKtg3q7su7I0E2bBIhr3tRrsnPTm1yYRHX
+            5lRDuoz9kvcgBxzCtyWZSFwXfHQfdoFcz2D+u4SjyNH3ELpwo/Gkmg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaUVUc2FxNUc5eExpYUJ5
-            ZDNnQTVBRWlFMlNuRGk0ZExsWGEydFdZQlRZCkx0RWlMN3hiU05zeXdyQTQzMlpR
-            TUpYRmpLK2h4bFNFK0FDY2M2Yzg4aVkKLS0tIHVRU2U5YnZRTGRlV28wcnA0M1Fu
-            cncxNzlYeHYrK283Y3N1cVVpd2VNSWsKGXZij+grjIq2zwwSEn8nPN3wX3sh2JT5
-            kVm5CUG/TLl8e8ZqRcxCZOzv7xc5HkvRzI/FWZsCei9XPNJVngF70A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXemxCWmVUcFRTbnloS1RN
+            RUJGaExmSHVWVjl5K2VPTUVHdzZvNUVwd1hBCmpyb3E5QnhsaHlyZGRFVVluUVhG
+            WE5UdGoxRzVkTFRXZ2hzNThDNUtZY3cKLS0tIEtkL3l0WW9abG5rMjJUbjlRSVpa
+            ZUtwZ2dML2ZocWJvMERUbWJhVk1kK1EKzu8syOj2Wrage1MDSv3bXDaYMqZkCP2G
+            cRW02byav6dHdsrGHRiLpLEbRUP3QXf/P1QuZGQvnF6p4mgZ/FHfGg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzMFdBOThlL3F3dnN6SXBu
-            Umo4c0REYVNhMXhYNHo0dTE5ZjArcDFaTHlNCngwL0tyVjYvOEFtMlIrdDNrNXEz
-            b3YydnkrVFp4TTcxNlgxamM4bnVQVlEKLS0tIFRQY2lMZGVLbnJQR25tckFBRDcr
-            TDNNOXJEQmVmZkdNWTN3RGQwZzQrQmcKo2HHy8P1oESMsiOpV5EwSpte0UeDxXtj
-            3gZ7DopDUr1hCmyrGa+KA5rj6NcVr9gAFr/PxNtcoHYfGs96Yt6nhA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VWd5dnUzbmdueEUzdzAz
+            R1lsTmNMd3BSSCt1MDZpYldvNVI1OWhqZ1ZvCkhWY1FJSzNlMFoxVnFLVTE5blVM
+            UXNtWU5LN3FiOUI2aDJuMS9VQ0NSZFkKLS0tIDZmZzkyTjJqdWRjcUlXQXRBY1N2
+            b1dBUlcydVA5Y0tNaU0rcGFTMW1Hb0kKwNHD4G+k7o84TjvjTDCoSS5N8D5AU2Kg
+            TUeYt03ZRILHd7f+9Q3ko0RC+oUnYBHVPYl1YQOlJhvLib3lxTL4xQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTzdZamJ0TG5ka0dMb0dR
-            OHhwYUpKVUNwSlBQRFNZTEk5M3JSa0RyeERBCnNVUnFzMFVRVGdBdThrOFZ2Wjhr
-            UFozUnFqdk5hcFZjYlF3S3VMeHIzSU0KLS0tIDdwMGhtWWx5SG5pSjJNZ0UvZTBq
-            OWZsT2lURXpVL0oxbUN4RWY3WlRuWFEKEeOFfDbL6ShEZ5BpAIx3MN/nPv0uoyAN
-            F5r6vGhWBy4cOfJjEKfWDjVNY/Tvz/IAYcrEJiS41Ek7wcahn3vxYg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNXRzT2ZHd2tYTmZWVWJ6
+            KzMvQU0veXpnTEgxMGV6Nm1EUDg5V0VsaWh3CmJNTE9uZDZISnlqdm4waHRGVGcx
+            TTA4Y1VjL29wQzFpWjdBS3pYRmdWNXMKLS0tIEVwMFJGdVhBZFZEM0xTVWVZTjZW
+            K0xQSWdlbmwveGlMbW1NN2tVelkvMjQKndZZ4Bw6c93Lp/IjL6mpdQ0vQFamNeZN
+            6Xpte6FefJefauux7rtPBod7mA477zmLxGcXwlQDYLxTFilzxNLzhw==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNjFQM0hzWi83ZVp5cmpK
-            YTk2bHlXMy9KWTdSNzRubGlDd3cyaUNLcFU4CkQyZTYwTjJhKzQrWlMyVXZCZWNX
-            UStSdlFoazdZb21KR3pJbkVkVDJYQVEKLS0tIEx5OFQ1ZDhHdWF3ZEdoTit1Rm95
-            UTI3aDRoNURrNEEvdjNZNzRrYjhVS3MK6mc10Zc7uP3mTMFxO2v3XMHuXILLyIkd
-            iDljYw1Jfvh8gZ64sEBMiODh0gxF6eQSw7DL0v/XPtEsRzS/AiyVDw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuMzczVnZMVHZDS2x4RUR3
+            cG5CWHNLa2lFRFc3UVc3Q3dXcmc0UnJFb1M0CnpsOXcyMXBXQkwycHZ4dVZRa0Ns
+            Zzc5MXpwVmxWTkNzWGtBYUd1LzZGemsKLS0tIHZHYi9ucys5VHh1SzIrbVRKcU1v
+            R1BkQWZocitWNFFienNDeklVOW8zelUKi4JyarjoWZIOf5yFDG4LrKCs2BcnfhHD
+            iLo+h3PVWMaqEQUqkW5DwyOtxeAd/wkCoe0Q0cNyohxxSponsQ4k3Q==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:Fm4Fk3LI4iJoXWWnPmf9PyxPC412EHsCL0/iIrGv6sVDLxj3tfoEKdvlWa9QG/azmrnR9umCkQNv0PzxfVJ6SdkKtMqnOjGvo0kKC5dNtJRj5F1dRi/+UduAVRKlfvSB3Fgd9Vp1E9KRi5LJ98+aDKtrIpJYKxsArZQAYlR0GAA=,iv:D21Hj60ZFCEW6AdW211CqnP24STuWWeGcbIsYYiMYkY=,tag:gBCDUWSxWW/6muqncLp84g==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:1iCI435tp39RXAL+rHrOKYHZFLGXRWJ1RN9m0AhTuQV3HbqKTl4RS1qrs3tEBM9T660QfoxMLxcBDPpyJW6vqogKu1BfGKH2KtDBtCvVaPdnZewS6aJLfn4n9cMWBbhbHrdl+zP/X54eZtWhveuSs2y3dz/B3lT9Fz2Gb2dnXxU=,iv:X/fp7H5rh4UGbfYLBJB24/dSFQrvpApTt4DqGpJJxiQ=,tag:4i17h5kdVmLWLXhUGpL93g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/gatus/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/gatus/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    gatus:
-        env: ENC[AES256_GCM,data:PITPQjW4Kq9EFFoNf0iqzdNvIUiCPLBNEZR2fvU8pXZAqcTnyjrkA/VeiTV4NxWBOQ3ReHUksFxImZe0NN3u3eabrG7SCwgrmNZDOrbAX0gSVG+H1fNQAv/jywXoezaHobhT,iv:I5W16q1vGoN3utpAUSXmNCTTUU3ubZlUUKM1fojGu80=,tag:sY3+iuc7u9HLf7TPvyZ6VA==,type:str]
+        env: ENC[AES256_GCM,data:eMGiI7GIWa4nPbT/mb08KvaOC64krGnzHlR6zR5PVBocLsD2mlKGhPzRHXJYdfubuhs/aUn8ML1PyKc6CxZOk3N/Fg4m20cT8OuWJzid5Z0u7kDh4JFI3CO2lKwTTtyQu5by,iv:ffeXqvCH0jLe68q+zjAd4nuVglkSPeBDLVg67EYROwg=,tag:SFwvCcEbzxN+hpuKGTXNoQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhNzlSWWhVQmtyc3JtWTli
-            VjNLVGk5eG5EVkd6K3JaMk0rRXdEelFmWHpJCm91ZkxiYzFOMWt0RWZGMHB5cE4r
-            ckkvc0pHVVlZbjJ3Rlg4Ums1QWJoUmMKLS0tIFRBcHllZll3UUYvSXNFM0k0UkFR
-            TjNYTVNmc2YyUVNNaC9PZWRJVmNOTGMKgwvaP4ghsJtG91YYr1pQ5iXcpRRdgNWd
-            0dT18EV3cBfrru0Mi4UN3TEdaMJ0n0umI4QalNRMdhWErzqdO9hMFg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0V0xPSnVpcGNTNEkwcTFu
+            c0pTUGFlQ0s2cjYyT0IwdHpPOTREQ2paSlJJCllMRW9lVm83dVZkWDlTNXBlNmtV
+            TDQxcmI5YkNEeTlJOGt5d0o1NDVSdDAKLS0tIGFPeVllRU1RMkRiVGtaZWtGNFlG
+            SnFuaUxJWll4KzNaRlo0Q3EyMjRLWTQKzl7TRHQwyKi1YMjJZ/EUeioWP3UONAtJ
+            1lkNGggPSQ/rlpoxg4lNvoiCnzQKhoEikJExCVWCLQFmsTNCCzEQug==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzeHNvUHRyQXYwZk1LMzdM
-            YTFUVlZjS3ZHeTZsT3pjRVpBUTVvRUZMQ0dRClVyaFF3bFFma2UybDdyVUU1SkR4
-            SjJnem1zYkxNbGdhalY3ZmhiUld5VHMKLS0tIDgrb3ZlMTJGelBYakl1bi9Rd1ds
-            a3VqbFlVNkFNVzh0bnBqaVBPRlZ4eXcKKHiuZyuP7cyoyl7BJbUU/mxFXWSJQpiq
-            PUmFoh25cUVSEuwYB2bB3IsAQgRCMtgj/AV8RWcvAgNWIF3u/uyVvA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGNDlSbmY3RzMvS3FlclN4
+            VlBGN2twazgxaGNrWUc3c0RwM215djhoVUZ3CkNRVkhwUWdObzBtaXJEbDZrdDV3
+            YTRld1pOU3VZQm5GMTBKYStNYUhWNVEKLS0tIGNBbklXVUhmaHdVOUlMRU1kL2VE
+            YUVXRzgwL3NESE1RRCtpM3BFT2R3OUUKITmM4vr/kbbaZS1AayK3SL0lVpylQDwz
+            5cU3F+Ykgo86A4RqouSm3grd2PoOnXCpzxRDGP+MLiQK6j+Z8+HXOg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNjJPVi8vVlFnRENoU0Yy
-            Umc1S0dob01tb0p5MGJJRFJqNmw2VS9nM2hjCmZzRHJFM0JiNFdhWG4zbm5XSHlk
-            aENIUTZuMEJqTnA2Vk02YXJoR0I4eGsKLS0tIDVrUTVuT3JlQm42NmphRE9Sempw
-            ZmVJR2RITnpaZHFjUDkzOEV0TnVpS2sKDQGKzwiMY76sXFLD0+l9BDTWmkVVpaFW
-            9NL2rEQLd+UQr0ivyWIUCHwg7RvnCJ8zPqYDZJe0PY/gvHQzOaZZpQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2WGZ6RzFxREtTb2VubVl4
+            bVlyWW12RDE1dFRqcmFuSmdMemxQWTY5YkNrCmlQYm85YmJQalVVSDNXTGw1cjBZ
+            ZlVEemQ1TTR4dE94Z0NVTzd6YXB0bFUKLS0tIHBPd000M1ZTaW52RFArNHYvNzRm
+            eVZxRkNRcWIvbzFvWUVCcHVQZC9KWXMKQROjso1zSegkmz0G1KMDBSLDwMuYmwBG
+            rOBnQGjVeXzFi5pxDO+imE1BkbR2Z0xftWVPooB9/ZfAYbNd3ZZ96A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHekh0TE5OZjZ6Y0xYZmJI
-            aGZzQlNWMEpHSWxGNmJadXVsNG9tQVpwMDBVCm9tNGYyYStlN2NQSnZiTzNTdG5o
-            Tzd0RnZQZ2QydUd2S3JMbUpvNDNOVWsKLS0tIGsrR3ZNZ3F1WDJFMzFHVWl5RUN6
-            NmNVNjBwaWUzdUxJRjdCaDJOV3NCTDAKj/z6zfCxaMXBxE9AxJ6jJgzmvBF0JECp
-            tiRl55PcE/OI1nUWEKd62UJ87pV+ZfZfUwRsPkZ2uMap/B63fhBqrg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycFdxSEtERHEyQTcrRjha
+            c0hEMy91TW1ZUFJ2SHhJVTh1aS9Wd3FtWTE4Cm5kcVhwZno4MFB6eHJoNDV2YU9m
+            SWJaSTlMNkJVSnN0VTdOUk9NSGNtVmcKLS0tIEM3UVVIUEhXRTNBUkJEMzdaY0Uv
+            WFV3UkRRV3NnL1hGUzR5c1dXRVlneDgKfrRxl/eAx8gdBlujm/KwVGlElJWZOELe
+            nEsEu7g2ECOaIjiZo45sn8GcmQUwbetA8U2xoGsvO9kcnEs4cvbG2A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKT2VWWGZEMnoyYW1CeVpk
-            RXJNQWxxUkg1cGVzQ1VXZUc1STgwOXd2SVFJClVSaEpwYVNBeXBXREhxZ0pGQnNy
-            cDFORVhIOEMrL0pYNVRvVGIwSGMwVG8KLS0tIGR4QnZ1UWhtRDdJRWRtcVJXSXpG
-            WjlXT0g4YmlkbEdMa3c5TDlkd2xHUVUK02MG3THGL8g1r42dkr6WH+shNw/yY/7q
-            mWZRam75rPwYH7ddXhMdV8DJtnZDS+l/P6Dl4NLwugUL4E8nVk8f9A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxOVZCcVRwU2JhR3k2all5
+            a3hoWlY2Q1NwdTVwQ2tHUWk3NUhuWEdlMFRFClVKTzNCSHpuM1VwQlJjU1ZFSUw4
+            NzJMWVhRQTErQ0hzcEgrVlR5T0QyK3MKLS0tIDhSN2FQSzYyOG4reGFuOXFiK0R1
+            Y0hpOE8wTlZlZnlBZDZBTnVtQWUwSVkKOmQTv5OdFAYXFmOzSWpcRtjDnQ/8XbfF
+            eEDsEOshSVtvW8SYUsxMwQxlQfwuJkASGQfqhY/HJ06+B1yNqReiaQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMd04vbzMrZllKeDlQc3J5
-            YzI4NnY2WXdIRzhKNzlydytEdnMvaDZnZENBCnpGOGtRaXVGOEJIdTZlS0VnVCto
-            VGtaSUlLeGNkdHNoS3dhcUh6Y0l5dmsKLS0tIDlFT0EyOUJKSXhSMXd6ejhrVndH
-            RWx5cVFNQWlVcENhSnRLS3dFRWkvbWMK/kG+e5eixdjFo7RX/CQc6YHvLCHiX24I
-            o2F8jqDCYbC5iHNYoh90GIhHYqLmhwekDgidygWmSpbL/q3Ug7auVA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVUh6ci9iYURmZzNDV01h
+            L205QnpKVW1jdm1rZm1OWjZIUTNSRkRvdmo0CkIyOXBrbkY4b00rT2xqM3I2RDc4
+            a05JbERwTGYvV29yTC9ST3VYeTZiN3MKLS0tIHl5Rm9Kamd2Nk10SkNXZ0ZtbWRw
+            My96ajRqRmtIZ3A5d1ZOUFVVVEhuSHcKUpLC/u4V2+gsYkkOyWJIqZoAgSf9YDDG
+            PzBbnTNmyFzH51rY/NJqJtLvkC+iFFKpIyc/6ujW757DTDT34nGR8A==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:Miis6pE8IcktWYhtajLlCLyLFARNDEE1UUeYyoduCINtOcEBsUB4jnByNo717q3RTN7FTBO+okk8l+wBCABZcr48EeQtU2u0MJ/t2U0PgPEGjVfwtOQXU0Ei8112VXogrNIH5e+tHLXMQoQ1bhglfeC2Yxkx45YM5rL6nvhckDY=,iv:oj0d+q55A52V8SGYPRTIiOeGnC9uxrCrAZ5RBzD6MJA=,tag:WZncsy3R7CQwEYDA3l1D1A==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:/w3KbS5sK9RVZjNfxPFX2TWBLxvVCj16vXs8rI3n5tO1z9diGYJL3PYOex07fdXSuU/E8c8zpgr8MzeimiazaQry+XYxOQrfR6u0xVz7EFZsHFM2Y/trNs11rw5MPfYBgiKKvB4k1pW7wDKgPq6oC/NfNNylioDl5hf3dTtrg9M=,iv:59PgjcBY8yU5FaE+el1Mhvol4cL/DIzH8gbgFp5wpZA=,tag:UBXKM3+yeWBDvNzL5U0fYA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/containers/homepage/secrets.sops.yaml
+++ b/nixos/modules/nixos/containers/homepage/secrets.sops.yaml
@ -1,6 +1,6 @@
 services:
    homepage:
-        env: ENC[AES256_GCM,data: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,iv:c6KZ6S5+ef4OgChrvQ2NRbVKQLNzseDHHpjIlaAxIJk=,tag:JHJgdJp59baGat+NHoDBBg==,type:str]
+        env: ENC[AES256_GCM,data:g3DEqsekcQ2pH0sDo77bGSwBOr3zfvk8mgZgZdDi9G1xbTQPDXtAc6pjmEmjglkM131Rf87gTffHJKwD1poLF54LHYOJ+Qx7fhy+yjerV418QumccJaRkb9GqJWGoTLYZpdYTwHg4Wry0S2QiOxfQ//hDK1INIl/duJhdaeGNrpqMXviq+PqOM9fbWkI2iRzTvWjQioUINiF8I4YixuYXLTqAwEOdcCcr8tBZtToFaOzWzLtCICHKm3l9D7TefLCn9RBTTgaN8ahavMNPBKC7HRKXFi7b3NRyzJuH9zXtzMpNz9XNeG7jXfmhN+W2gNFTlTVbqYc2aIb+OI8hYTDk0EiA5vJ2rqYXl884CmcxpCE872Zo8xynelZO+Xjn0hq/2WHjclTuN1H9J7gIOfbrNQ9NiFc2q2d3UeyS0aX73tkp4Zx55J2XgTB1uS2pm3Rl4KfgYsCc1MyG0f4qVfpMOHCZsQoBdCFdp/yJzGsdYJt2K9R/acO+1JA4nSB2v/MvckluldzHOUVHXqs8WguCBXf3RERq04+Jt0kVxtk3QUOqBVhRUBDKiJ4Fyqye2bkG5ZmT2KNWKBKoLH1oJrBqNIqwqHytAqPgltsn5uq61iAZ/6kVRsmpHQz+itUBsnApiH4vfh1Q7Wv7S0KzhQ79Lnf3koyIqH4ZJu6YmfaGEbXpDzhx83A8T0L7ZCfsWWfwA41YBiPlf+c/TCNr5RaDcARZfGKi7hxqK0Cd0bHDKMWfPsiNfNt2MP9lBxFyItJ12yI/doI+lk/rwtVuwl72qW62CZCrUuIge/t9fuwYaUZtA==,iv:JBQxAqYRFKzAD7poNGjvqzEwfxIQcXGMzwLiP3eqcXg=,tag:ZSPjAkr4OnLuiyW4+QG2Vg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -10,59 +10,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFdUNsTnkzSHhSeEJqQXVC
-            TmhPVHVvZyszVEpxbG1ERlg0VEpzSDRETlZ3CkRpUUxaNXBDRVk5NUUrb3lTTmV3
-            OHppNG1VTlNTOWdaby9WKy9qYk9kMWcKLS0tIGlkSU5DWUZuT2tsM0MrUW92bVk5
-            dW1HNUZVOU9QdE5kM2xtRy8rME85VWcKx0/QiswFUFRP0VDTrSocERXkRFK7hKkh
-            muRJ+KFBRpwxX+zFdSVHVWsKORnf/73FEHVOYISCX/NwF+PmcFqcXA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuN0lFdkdyYmZibm9jT0dG
+            aVZGKzBpREVRYlZkbkRBNmlLdmhQRTE4Zms0CjZLYUo4K0hWcnlzTnNqUWZ4SVFn
+            S3VFQnBycGJzLzgva2hObCtINmRxRTQKLS0tIE1IR0orOS83Sk8wLzJDSi9aOVNo
+            ZGUzeHZVdFd4bHJjZXpYRUJZcWdXWWsKVgJAiuoSekJb9656urzv8fg5rCRorZ+4
+            zD26aBUA9lB/BqZgO/sXaE8Vw90FsypgSO5+tPMyLiPMNZsRFYsg0A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5V3FjMEpVd3A0L1g2T2R5
-            c001cUt3NExIbDFQbnhSV1lLZWVGZ1Q3Wm1zCnVYcXltMWlYbnNlMnN0am4wYnVV
-            ZnU0L3lsYmRpRDVuaWQvZ3dMSlF4aDgKLS0tIDZWVEdQZklDMUNvQUVNOTUyY29j
-            Z0kzZk00VlkyUmpSZ1pHaXRUVWozNnMKhYLDCpGGq7W8n6azFu2KDz1UheyjdC7J
-            /TSzd9X2BK+S1/ysC0030dgtflcncIOgzY26eQ8I3i+8I0SMEW9FWg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4WnRWV0VMbGZLQ25pMEdv
+            QTB5aytUcGR6WEZKcitrU1F5MUlvQUJoZEdNClZsQXlQN296UGhreEF1aUlSQlRD
+            ZFdGb3NVZmNwWU5XR3hZTW5MVVNXSU0KLS0tIEV5Ry93S2tvUGlwYVZSVU84MnVU
+            NmtSUzV3Y2M5eHBiSXkrSTNOTGQyS1EK1oAfIrAx9s1TjkvqKvdWMwNXVDK2m0b0
+            mGW/JDm8rGr8BaY5NpYJnKBn6OwwAlFsOt82gHmfKhVYjJFOWGuHpA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQU5vdUY4QWovT2pGY2xZ
-            Y3JkeGVRMWJtSi9SUmtGd0d0MElOS3Z0N0gwCmx0ZkJsSVdZT055M0xhTFppRlBp
-            R0NJWVk0RXZFZmtsSUtJWGRneExYL3MKLS0tIHBlUnZhT1RMQVBRZXB6M0JnRjdp
-            SW0wbis4ODZZejNZUjRNMkVvcXovdDQKmAmflaOEVPixdV0LcXrrE9oU9+PHHiGZ
-            OeYpZW1Mi6KEDrujrBuUj5MwJagSPQ5eEZtGfTylTLdweCsHUN+S1w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZEtJc2lCbWJpekN1dlBJ
+            YnhnOUt3TEUxRFdESEpTcmlFMDNsaGdOK1ZBCjdHQ1M2d3hZQjNkVG43SGdibXNm
+            S2RoT0N0M3l5SGo3UTVwN0p4dU1rbVUKLS0tIGtvdTgyZGhTTDl6Z0xuSXNIK2NT
+            RE1yRitIMSt3NFVua1hDcUZwek1STmsKgTMExZ/Dnlh/yPRAid/yMWR71Txjsyuj
+            7tUY0roAhMKBPGECbJinpit3vlDouwfWAIhOdLpybSgkVaBi+MO96A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuWFFUNWpJcmJLamloM0Zy
-            RUZEamR5TTRqK1N6S0ErZENhU2g5VmJyNTJ3CmVMSWRMVXlUTE1tTnIxYmZQaUxn
-            ZFY4OUhLVmkyN0wyT2QzM2dQVnpFQncKLS0tIFRHaXVobnFFRk1BMEFGSlRZcWtB
-            TEFmK2FwU3hscC9UMXlqSi9icWVGcGcKtGnbi5dYhcARo/yRbNb4pYKR9WP7qBfv
-            Ap+XQW4OLvZWGbRCHbJRhZ4XYSeyJAiCrpTAXDQROLV87e4DMIkBjw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPdmZxY0NmaHZFYmViWlNR
+            WXUxZjU2WjRPdStNVXBPSm5XZ29RWmhJeGo4CmYzKytFN242RklHYTg0LzVldHVa
+            WGxWb0hRNzdvUTlEL2dyMkZpbWpqRUUKLS0tIEx6dlNpWVI3WkEvcmQxdWFNblI4
+            NGZyK2tXZGRicng5MVVLYi83WmVmN28KJn80I7V4qiMrLMpZ8ZkUBKj6ng3vyzR1
+            YWx0IRufErdXF2v594839zqjw563l09BhHTX3hA6wJmwktwxkLpbNQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGck4vNUZvMVhYeHFvUjF0
-            WUE1bWFnNFdwVmgyV3hFaFFwK0NzenhXakQwCkw2eCtZY0xkb1c2N2RHSEsxMlh2
-            VVdQcDh0TC9TZStnN3pWRlJmMVVIQ00KLS0tIEY4SEQ2NDlaKy8zZUZha2Frc1pM
-            ZkJuN08yd1hzMDBUYXoyOEtuUStDd3cKAXktV6niJeL7UJvauFLmGXRW743nvyan
-            NanJvxaBcU6wGOXczqvdKcj61aBjkH9F0tA+Q/rG320jakAzpD0ZWA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBScFUzdDlOVUI5UmQxdEw3
+            V1ZIM3ZndjZkRGFsV05nWUZyaFRFNHIwZjBZCmNkcHljR1N0ek4wWUk2Njd3OHpx
+            L3BPSEpyb0NHWFdCemdOR1MxbXRwQ1EKLS0tIFNYSGwvL3h6M21Rb2hTNGJNdXJa
+            NEZNR21RWG8wajJBQTEySEpVdTdEbVEKgo8VaYuBs5Jg3Q5gnhCVTy3MM99bBC6A
+            VpomgvMz6ELblyYXz/mlcOfkTkHHlwjbw0ERHs5i09idDBM/HaqQWA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaWVtdHd3WEVFSGFmN3Nl
-            a2F0dSsvT0dWMUN0UFFRNUlJclM1dXozUmxBClVGQ0pUQnJ6WU10L05xTDZHLzIy
-            THo0bWtkcUwzSHVIRUxZT3pyM1c1djAKLS0tIC9FMURMbjE5andOcTIwbnR6NUlv
-            T1RtUTlXcWYzclk5M1ZVZW1wT2tvS1UKXysxgSA+46PcnN+eG62LMUnd3++iq7dd
-            806MbIpcpNo4TFR0eYZD20EGQHmZC6PnWzcy4ApmPPJvmeyi1MfTeQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOcWN5M24ya2hTbS9rRUND
+            WXJWQUtPWlRVTFlNMTltQktMT1lwRXF5SUhzCnBNRXJSQnV4djdBTmlqeThQUVJn
+            TjE5aFFyQWhSclFwenV1NTY1bE5ZRHcKLS0tIGoxUW44d01NRytiRGowanFiMTR2
+            dkVDRktHejJQK25HQW9vMStDODJENW8KUYt/n6qvgaLWgiUA6pZcO8QtiCiHdkwo
+            GIZXXpVgBazi3zOtZZ6Wl4NnrFH824VQZqTL8sJbtG4Oz3HZ688YHA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:AVIJQloEZhaVBrSDNMeLuHQI4Xs7o/EZFUhq4+hQMxyXlTBWy1QirCbP1BiOp/iXIBb3n/liSAFXIvE/om77AwJsqZim4EtQjVIZjechlZNX81IZnz3SF4B7Q5muF9JfQWcUcMaO4BiTWRNOr6IqiaMTlYcTr4SRFd9inBVwko0=,iv:m1zNugT/bhQ3h5jsa+2Y8TOmWHoZoeKvuIrg1UeknHo=,tag:oZg/Ffsg+JUmewFYUmj0jQ==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:2HwYgQj/gyEur81qo0w73B0cCvZB5hCEBkYDEAALn2BW53ZyGX2s0qj16S6WNh9UxKDgnsPeSxmq7Pf8CtkfwjRAXpNxEfYDY2htVj68DR/UGaWauxI20EfI8T8uwaNZ837oW6yJbtk8IKj2eQusx4PgvKwBZvKZUncAbAOWBXQ=,iv:RCmODe480/Yt8JZBLV0o9ZVh1omAOvbWRkpNjr50uTM=,tag:yXeZ4iBQm3euk2O6zX69VA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/services/bind/secrets.sops.yaml
+++ b/nixos/modules/nixos/services/bind/secrets.sops.yaml
@ -1,8 +1,8 @@
 system:
    networking:
        bind:
-            trux.dev: ENC[AES256_GCM,data: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,iv:yTgcJuByIX7qTK//m2QHedJrh8PF6zuwTPkR8Ox8ga8=,tag:/WC6MI4uedeN5JqIxBd1gg==,type:str]
-            natallan.com: ENC[AES256_GCM,data:Yt/Slxh8ga6WA2dPv8up2yUmHz/CiOflPgcPVqiSAaIknETrvHfWOGvlKgyAC8KrGCXQYL/vQpNwQ4Z9tOrO4iI5TfsFivW+EcIout4r6K3tbPYQsHkaMbgLtT8JZDp7ew3g/bC2HKslP5mh/v74vrs2QePUURa6KLTn1f+aXaZTWWfBM6F7Qtluuyz8pW6+ujdjp6Rx4SjxfL4WMaYmwq1++G2x0Yc6+m6zXS1qVt9mvkzLev4nrGZUcUN079P5/HunKECSfacK6yzc0+/fSoCo9Y0JIDrmRiGllYXaKis2R7LJ2r5Qbz8liP/pHssUu3g4dGoz+Qw3hRFBRwpEp7T5jWfLL7t0aV7cR0H0uhEzcAPSEvvk/9dkiAlF8WQ2QIgKXuct0Lcdj1H1+PhqdunNUDSXMvqGvjssTAEPOUMeBsiVBUjnLGCHOzenLuoeP0SneFOJCgEVweo/kpt0HCl1JIZS6tihEla1Gw24U/0L3PuSHmWFc0my/9uQ5KYNE8vi+ZUH7XzniwdSUFFjU+7wxdZsrwfxndAWT5+sWN0Bdrjx5LBgrySuFDamGNIeELCEAh5DeS2jTLEXUvbK5eERJwGeGrw+HspDFYw19p8gILzM1JaPrLe5YExEgUCo6v6X7h95jMVN23JRrwkyKqIcHVSoDzaK4wFx2gaWYvGzqqXLsa+yqkAPqenmnsbawjRvNEGR0OKbD3goX/lOIXEj1edlc9GD1zZtIeEFbXRBr+xQ3vq07aJQsxTWd+JQzms8VqX7ZAzLPUUHansdpElhDu7Nm+ukvpn0Ow/zk60r0iZG62R0Hg==,iv:QiSr4mi/EtzviqGpZ1G6HoRCaEDIOp3IyXIrxbRoCic=,tag:Sk9R6JQew7TEBe9R8G95Zg==,type:str]
+            trux.dev: ENC[AES256_GCM,data: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,iv:pjMSO0iSk9K4+Z1TpYfI6YudZETkL7b2KndChnE0ITU=,tag:kMf6a1UornfzCjzuPUTvvQ==,type:str]
+            natallan.com: ENC[AES256_GCM,data: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,iv:OeFQXQdLbXynTqHxfV5OtWIzwckGDkEzL/IRZonpukM=,tag:ex0TYR1Q7LsCAIuHJJQlmA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -12,59 +12,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMmxXZUg2UThrMllvSE92
-            WHlnTnYvbCtaQ0VtUkgraXJINzN1OUVBdmdFCk0xaXcrN2Q4RDJaTXcyNDJmb0Qx
-            TCsxZEJEdjFQYXVEYkpmeHNVejNMemMKLS0tIFcvR3J0cE9YdVdjRnJEaWFTQ1Rj
-            VlorTW5VMEluLytSOFlzSE9sNzZJcDQKzQgoKyLjo+GIgDthWQ9BK7nDGiHAiqgr
-            7U3iaOsk1F1WkhUGfAefSARsB4Rw4vSX26NHPXPFHKLm6jX1b4DnWA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RjJQblo2d2NINTdabkhx
+            MUl5enArczB5V1JteENjNnJmb05uN3VDSkFzCm95THZkRmg2TkR1WklscW5UdEs4
+            MXR2a0JxZWxjeENyeE0xZFBYL215VXcKLS0tIHNZOEVFbUFGOUZEL1MreUlNamZ4
+            Q0p0MGZpdnVJc28zZUFOdTI0RjlkOEEK7YOXO0412wSTu+1oW3eDoA0p90bskEGv
+            VEhdI4NgUn4Ibg2xOFLP4dTtFRLVoghkehCb8YO0Hci82gdAa3yF/w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhN1doRkV2VTc4cE9KMTI3
-            SUU0WXVkeFVvMjY1QzBJQ1dyc1IybHZaMG5RCmc4cnZnUm10RStwZ2szL0FCV0ti
-            VGFYdjlFdVlZVEFrc3ZKTlBPTDVjWGsKLS0tIHlYOHhTQXBseUwxUWlZY1pRZFNp
-            SUUxZU51OG1uc1I3VVAySHZZY0hEbTAKUaoobVmJI/mEoeqc/IkMHZXLkxLd36Nr
-            9APvgSg32vEhd72pKeNX9GR2AIHJhA6suoggwBtpU4ggVs0sP2ZNVg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNV0JHei9pOFhvaFFuSGRC
+            ZWMyVFlRZ0I4NklJSGF0WDRUNG5RelhTNDN3CmdRRC9QSkRnMGMrL0FLNzNEbVlB
+            NGMwQndWNitWZStwWmpZSStYMzJEZXcKLS0tIFdHVDVaL3FyZk0vQUhNM2xRS3o3
+            K2xiRVFOL2hQSlFCNHNBblphdG1VR1UKMhrKTi5bsNAC1/JTcz1BTndXV81ylHZk
+            AqxpgFh6M/fI52KCzXTACQPbNUW9oh2vKmdNHFJiThaZl3k8vgbbhQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4bGRhbFhLZktCMm5KaHlR
-            OGluMDJaR1lEWFoyZzRrUE0rNGdmcDluYTJ3CmQ2TExxMUJkYitsUy9EVkZDTHp4
-            WWhjbjNQNVpibWVxditxa2p4b0ZtL0UKLS0tIG1HR0JnNVFHa282MTFSbUpLVDEv
-            L2pkem82K0ZZVjFQQlN5c0JlZXc0NFkK8BEYMO1AhVlYsABLzwRZizAqDUr1ADNi
-            uLLS0magRXUTaLwTTUCPn4wwLlf4XC34c55okzjTG/un6j0XfuX5Ig==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcjdqWUs2L090TlB2NGxp
+            OWFwWGpMNTNvaEk4OHlOaXNzRjBEZW01SW1ZClg1d21IbkpTWXNHUjhGR3c5OXlp
+            cDY4d3p0MzJ3ZmZBSkxEa0VNbHpsOFEKLS0tIDI1QWZsTERodWZIVXV3eFhaeHRK
+            MURpU21sNm1CYk5xd1dDNzAya0xiVDAKD6q1WT7nqaEb3ZxtZHvHWu3KP3QKf57j
+            35+K0BBQwvQajR8Pmq6z5uTP0SmuJhKrMG9/WbwCL0laRJHZ1SO8sw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPN243RzRkQ1dSRkxUUVRI
-            M1c4c3ZNS1R3V3J1K3BuWXRDVWVOTFlWc2ljCnpWYWdycVRHRVV6azdmb3BmK0Fk
-            N1B0ZjF5QVZZcjZHZFg2a2pwVVRidG8KLS0tIFUzaklvOEtGZ05EdXZVNHNicWJz
-            UlR0dXhlU2psaXllZUpjUU5iMnI3bEEKykLSfbOK/j/Z1mCdGWyKistMiDVbu6lI
-            Fyem/awRCzWrjfigWlldWoYVWxq13ZVrCYvmHOWxZZW5GRlxfNMU1A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjVHdsSkRiVk1ISU9SVVlm
+            Y3NYTWN2V1ZIdUtwaTE1bllsY3M3RTZtQkJNCnU3Z2RINmZMdWNTVFpLNEpKNmhi
+            OUptWEx2NXl0ay9hYk1qWGRtU0MrdUkKLS0tIFVPRmprU1RwdjFjc09TeU9tam5K
+            WEtWdENWbkFyb1o5b2FUc0NocWNoWG8Kt3qnXdryCQMSHlzQGdb/yd1L0zP+e++Y
+            QdYLfvzFu5QXoFzwbEPMrWMfZvt5hJ5hxgWTO6OqDX9p6b3AyMmOxg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3U2g1QlY2RTRVSTVtYUd6
-            N0xtYmNxNVpwOHZwcUwybmdac3BXRHVQNW1RCjdqaCtHYUhmaHpFRjgzRzEySkg0
-            dHpqOVJGWC95VEpGUG42VFdVRkcvRWcKLS0tIGk2dHBML0JvRmhEWGVSRkVFVHpJ
-            MU5KT3NqdVVoR0VFWitia0lSdW4zaGcKG4BT8flDqJ1tkajccy/DivBgD26Pf0I7
-            GNBYuKnYm4CTz6ha2ZKS+IhUIeKMZRnmpmk0EhlW0IMRUZQR1XKVKA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWlZIa0J3bndUeldPTDVV
+            K2xVNFlHQ25xMnNHcGdEOXFlOU9qMS9sY3hzCnRONTBaRHlTNEJ5bTF6VTNVeXpR
+            TjhWMlk0UFN1d1dqT2hFVERwZ01Ca3MKLS0tIDUvcTh2aEpJV1RtYUM2Qmxzc2x1
+            K21pUFgyb2ZHM1pmcVQ2Y2VXY3ZTR1kKGqi1hEmSR+wTaabmwZxvq2hFHlJwXo6K
+            BNSCTKdEMLuknH1+Hn1QkPd05eBRUj6TlNMP//23BHBN64K5BusdZA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRW16MVZiVGhaeW94SU9N
-            WVpVNXNXeE1XWTBnVFZ1VUVEYkNVd1FaTHljCmFuVWZ1bjZ4TVArL0NDeUdqK0Mr
-            SExPUlUxa1lubmRuTm1qdjdyUytOcU0KLS0tIHhvZ1Mzdjl1RzhqWXpVOUZSVFdW
-            WXY0aGR4SFpIN0dyVkVwRnl4eHc3cjQKJgoV3NZc++GOIzXLmipaOo6CuEfk4hAn
-            06Qh5EqUJT6SFzywZitkOxi18OzNgvATr9YuECUBy+89t2n3SViObA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTkxrelNzYmpCclNHSld1
+            YmlkMUpXUVpXYlc4dE1oR2NNUU1rSGJrdlNRCjVtZ3BTdStnYWEzMnA5RmxwVU9N
+            dUc4aGFWQnNXTXZYaW9UaUs3V0ZQQVUKLS0tIHRqekd1NU9lcVF2RHo4Njd5WjhJ
+            Y3VsOEYzL3dtZVRWREtySWU3OUVvcTAKiGVzvIu9hTFbw3KEWKzwp3hr8SJC5Ck6
+            1oiLHPK36xK0iTiCFxrHfypwjiuOPC5hYNWBqAXCQ9lJ3qruZLjoWg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T14:08:36Z"
-    mac: ENC[AES256_GCM,data:8/UYlavG8yYH3xCEX1l9LR4HBJvYorg0kFNMz/J1/P8ktp0gsL1c3hesTl3FQEdsANK2WRGN6Lr4gys4lc/4sLpERq9HBahAHoix0At8magp3LamlX/UQRFHYDuKnAOEoKUkQv1B4ygEOE1lLEuUjesHXP0n8u78vUlRwx7iAOw=,iv:6UFfX2R+kdz2IZYiOB0hnnNWUgBKpFEYVjYcHDevtfs=,tag:ARR/ipJILilO+OIj0a3GxQ==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:TVSeK1Ci9IpnhQonAXqunPvNJ/zQT3E4JnPZAqjaXL7xu1Hv1YAGea9RH6xMWB9jhU2nm8GiBO768yPrx32TQ5iMk0hvE556FeY3od1M2HK8fxeqebySuzw9+EMHFHdNruIyh4XGZIU+P99EnfsMnH4AsZtlkvF2UrhHudpJYBQ=,iv:G960JXYcvKGQBZf6nWhtXCPfFyRRuHxiTTXdar3QevI=,tag:u2RgMusHWBHrTFZQ821img==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/services/cloudflare-dyndns/cloudflare-dyndns.sops.yaml
+++ b/nixos/modules/nixos/services/cloudflare-dyndns/cloudflare-dyndns.sops.yaml
@ -1,8 +1,8 @@
 system:
    networking:
-        #ENC[AES256_GCM,data:TNJ/7Qherd3FrrAXgzNP8ZoaXw/wp6JbcF+0AQgQUXBM4mfADFzS/ofLD/0/H+QelI+2qH/D0IJqtseHU5pYce7UfCQGyyHyxvqVeQ==,iv:R6m+qOuSUXGSK901g4CJt3hZa8i69oWeXaBHylOJNiI=,tag:wKUD0tthIZFjkJeyQmNieg==,type:comment]
+        #ENC[AES256_GCM,data:xrdExx+mG8yvJowdOsxDm1aXWDak4Fc2n7n8W3aFm7OnlAGrDymmWh4EvCP9UImfT6dsgWjbb/TcFbGH8ATLpj/sjXfA91Y2iK+GDA==,iv:K7eNWL9MKzDu4lSZXrr6HDDco+BgUuLnwzXSjUPT+DA=,tag:y8nUEt+XaMfmA1JJqwDN6Q==,type:comment]
        cloudflare-dyndns:
-            apiTokenFile: ENC[AES256_GCM,data:3ayr6Bpxrq7oQy7WjBPIfyU3f9NJd31CJ/mbJ0fMsJBsDI6GKvOnAdHouquzQlLVUzntGKcqcniWsxuSbBk0P2ZCPevTNKzUVdoJSvyulbVefXHqhar4XJL7J28OEd+sE2Rr8XtPoUhTP5Ibs3X0h33Hhg==,iv:8NLEMX2loRVfrFf4aHOvXoj0W94B9q1FoYzjATLIsI0=,tag:ZXRAwM4TSENjd/ibkkPYhA==,type:str]
+            apiTokenFile: ENC[AES256_GCM,data:Rp6OM+m1nN2JTDwmtHeVeyktWGCeDoklE4pMoYFZlf9nw7AEPdX7fLpZnnxcz7yFx1Yv6ycKo7s/1S2VpoSEevsxLcDQKx+9AEhvCH7SxZGJrhZX34qgeez2hZBN9EGRcj0yTzWxfPcnVztXym4AoNlW1A==,iv:frSkgoxKljh59CqzKIlU1tLcqOU5BSy6zHfyKA97I8A=,tag:JZVKFScpTXCAdGhSViB9EA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -12,59 +12,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrd3hEOUpldXVUQzducGNk
-            dkpXSmZqZWVUWnZlYlozWVZJellZUlpjYmlVClNGdjJvSzRTMk1FTjYraW84ejZJ
-            V3JrUTV3MDdGMWtEZnVrRW1QTi9EZEEKLS0tIDBIWERSbVFJaC9QYUt2Q0o0WTAx
-            NFB4NVBpRURNRHY3a0ZSUTBoYXdjbEUKaQ9wTuNSGMNM3wrYVM61nF7EAP8f0zTN
-            ccGCgbn3qzWCtLlka7qaQ+7aHJQY6WKtC3T9PAEignFxMPMhOerQOg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5YkQrUjlQRVhPRGtSNUxD
+            VHl0SUJEcUs0akplZzNRRkFsYkVOdFlacW13CkVvVEM2Q1J1ZXVxeXJVSnRWNDgr
+            UlUxejdXN1JLSTRWSjJ2UGEzRFI3cHMKLS0tIDF5RGhkK3BWR3JaUTIraUw3c2ZV
+            d04xbzFPVnFob2JQbVhoRkYzd21zQ3MKZldbeUx6NXLU8qxOml+WXqfcpJVY5JRY
+            IsSALDe5yK/CgrgmC2H69GTBshYCHBE2las+UVJjSvQfUv4WMHsBoA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtVE13OXBTd0pNYnZBaC8x
-            OUNWTlVCcHBqd1lhaFdxVVJOVnhJV2w4clI4CjQ0RVVnZDg5Wm1rOXowNldsbitp
-            K1NwK1kvSlRhdkFpRXdKcXFuK1o4WTAKLS0tIHk0WEdnWk1FMVcwZDYzNlNadXZ1
-            L2taZmFSTGErL2tnNFpaTWQ3VmczNzgKA3rqDCTBOOITcSZiRPpS2ZONiQPnNU/5
-            BwpmH5wSDfTYjO5Hnbjd2GFyxXDvg/s4jsGA4NAsucmVyXaQkY/tcw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNY0hNWlVaRm9iOWFxRkht
+            SVBaZ0ROZTJFK2xhWHJuM2hNdFd0YmNRYmpRCk0rR1BkSFdrRFhSN01ZWDZDNkta
+            SCtzb0k2a3loZEU4MHRUZGVSVEVXdUUKLS0tIEFBeE5BaWt3ZkxYajh2VlR1R20w
+            WHdEV2RucDNnSlZ6K3A1Y0JVTEN4REUK8OGgcNn9J2BQAoVw9YVU/C0jt/7rUL+Z
+            QRGNHxQfn41+v0qm5fiX7Rfyjx9HUfcLf+unj0oCNMwKXvRayMZlbQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZdC9MU1pxdjFmdDQ3d0R6
-            b3MvNHR5T2FraTJld2toMDRyTDV1TkYyVWo4CnYwem1oYnZiY2ppbWgxNDFCNElj
-            a3VBcjQrQ2pyTTc2ZWNVNTBCWmU2WVEKLS0tIEdheUd3MnFTWUNuN1pEam4rODR5
-            bzJ5bUZLbW9vMzFrZkh0QUE1Smw5dEkKUB31QmGecZXwXWwv1yKKQZmR6O/TXtKh
-            ESQ8/hUCx/6EoN35nFcpwnhit11sSj6m8FH/OTvipJ6ngDlt42/geQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZml2STc4MWR6RUZxRHlj
+            UWRZMVRSQUlxa0VyUTlPT0w4aThrdUtyM0dVCnY2N0I2YTlncVpadUpKelgyVXZa
+            dHZNQkRZNDlnUmIzK0IxdGJDMUlWK1UKLS0tIFVrR1FsM0JaUE9RVHhsaGttTWxL
+            QlJ0VWxBT3p6UkVVWVpVekwwNUJMU2MKreBun8A7dy1VkUjdTQqTmKz3mb60AmUd
+            axdWZU9Qk78S0AeE3zrr80NQHw7i4oiSFs1Lyz2N2MtmdMMdGSVROA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NGF2aEVKcVpodzlFS3hh
-            cTEwUkVRR1hreTFYbUZsTkdGWXhYRENlakJVCkovc0JuYnNtVjVKeWMwazRTTjRs
-            c3JmcEYxV25PaGpBVVVwT2VuQjZFKzAKLS0tIGV0Mk4xdHdHaGxxUHVlNHhRQ05Q
-            YXYrTWlROVQ1VUlHNGZtYnJiR0ZabzQKxIty67AhW7+jyd5i5whfgXHUEuBrbhDB
-            oGgS4GGNrx8onxZXpRlEMx87H2GQ0XcCxjYKqCl3HS57mAVf03ICmw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEcEVHQUtRZmpwd21lOFdV
+            ME9IbVBOd0lPQnFvdTVhU05yaEVON2xlTjBvCnBiUUZTaVJSLy80SVJGQy9NVlVw
+            REJRWEhrZHR2Z2lJeEVxVlBWRUd3ZkkKLS0tIGhPZDdoSTJ0WCtCVC9IeXRwVFBp
+            WFZFbmtVMXo4WW5NQkE2U1RFLy9JMEUKzYezCTgRxYKwSn+3cNZ5KgiX55pvwZBf
+            vFcy2V/nYpyvULGZ5+mdPkPwJQqIE6olD6GtWoLtIc2y1GUk+T6M6A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4SVpkSHU3dUVKdkpaYjZP
-            NFdIRVJhQ0hlUHBHOFhoTC9yV1JNOGg1c0VJCjRsUXdGeElPTlRsU05Gb3FKSDlu
-            RVo4bTRnajJTZndjU1JzU1Y4QXFURDQKLS0tIFdidVU3dk9ZU3RQWXFMRUdZL3F3
-            WlZkZmF6Rk5BZHJ0SW50STIrYi9uQmcKuR8X6KZEhPuuWbAq7+WbfPaSoeosfrAz
-            khOotokaSiWaF/XjKAzJjlDcA+B+CMc6UAB8IlnSaZoDwIT92B6HJw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWd25WNnByTSt0UnhnTStQ
+            TWZlS1V3elNjZGZtWXlvSGtIemFMTkpTemw0CkUyMzBkRkZ1SzViTTJFMHo3bGFp
+            ejR4dkFFZ0lnQ0NhRFRvNnBxYkh5R2MKLS0tIEpLZHZFZUxxWkN2alJGZGs2VS9L
+            cnBRTnYvYk5Kd3dMZXRrYXA3YzMrME0KtpMwDN2wTJumIyGcR/ww36VITWJ9DGvo
+            kf0QBL7cGbEQTlpcNAwD43Mb4Wakk5COK9qWbSsL1qy1UyaUWpqA/A==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCVGhZK0Z1OXpZUmw3UnJo
-            TCtiSVgvTkdkWm9lZ1U1K2REUkhkWlFNMFVrCjhUMzNTU3dwNVV2Yk5VWmxzWTFz
-            SThDS3p5eFd3U2ZZUmZjUyt2bmdkbW8KLS0tIE5TcitUcFRpUDBtL1JtZmdic1Jr
-            dXJHeW1Tc052cC9ZVVdNOGVFR0hHZVEKOZHq2UWtqcfryKp0YOkV3n0ZovwtO5VW
-            IgkaGysYGuDGdBIdJaVI2cDJk1MAthjdwE2Y3K0ZeBBYP8u7iReHiA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORTFacjRLVitKRDAxQ0lp
+            cG9KNkhGOGo1UWtsU0lJa3BoNDBMQ3RncVNVCkVQbmJweElOQWl6UlQ2RlJpOGVY
+            anpISGlEZVZNZnZMczBKMmNoSnhOdG8KLS0tIHVvTWJ2LzFYQW5vUlliZGVTY2dN
+            UVZPL1p4ZkQ1Z1pnMEkzU2x3b0tsdGsKVPnAAQd9RqYQW+TUJ+yMqdQIVUyjqvf+
+            mcEbwNKI2ZHvGn86JzqJNGnBLy8kY742aQcKXv3ce8+R5zpMh2jchQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:7aHW2fB9ZW0uQnD4zWLEViMrkcEY4LbycU5Ns5LEOLzeGZE+XIO+3GIzbM+yQ4+1e3JY6eAiqpWQ9LeAJbbq0Pd0bVApWvsO2ACQDG2h6n8G+7F1AvhwphwUX4/UNz1V8cSm0eJ7CNXODRE8ft+X/emqeWmqB+ZnRd+ben6UX3o=,iv:4BKnmdySEwhsze/N3XCjIIZFvIxe1QFbZP/GqFQzDwM=,tag:OijvsV0y5jKN+MMJI171vg==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:qw4g+yKwgoOa2kS/tj1dryk1fAUfhsn0fxj6ZAFT3qrv92d81vvb1ioj5qqGFNArCe1/vnRxDuTB8Vv0cGwIAxQf9X6rNYJw9/QzxeVDL0pI8/EK+mz/SmFA6T6l9/2K15USLOzcFovqTzqoK9EqcI46jLKYH5jvZcH8B6K3OGU=,iv:YtTCXwza5zIMOlTIGD5f7/JronMPRnM0uLUYaeOahAw=,tag:0t0mCAunDrsxB34GVywaLg==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/services/dnscrypt-proxy2/dnscrypt-proxy2.sops.yaml
+++ b/nixos/modules/nixos/services/dnscrypt-proxy2/dnscrypt-proxy2.sops.yaml
@ -1,7 +1,7 @@
 system:
    networking:
        dnscrypt-proxy2:
-            forwarding-rules: ENC[AES256_GCM,data:0kyDD+vcgTK/S7L/77fSrkDfaTEnzHtKRjQVfPBEG/3DT13xH+mcbvAf7XbP7w==,iv:2U0A9Z/A/WxiAeHzPAj1zqJXYAaRq/vd4na5xH0oFJU=,tag:9peBCvRO0qe3JmLgoKrXUw==,type:str]
+            forwarding-rules: ENC[AES256_GCM,data:OqEb7P7c62CRZ8oGa2q7g4fuVQmG2H4nLpxP6XxKC0i6ibOqrRMXj9smSorlTGtGhQEk28i3rXlTZblQObXYnXn2KWglZhmA2EDOZQ==,iv:XqdkpxdqFALb4nv2JVSagjPtcuSmUZ82k/OGzrRfkzs=,tag:fhmeV4AO4CcNSe1TLQ3uhg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -11,59 +11,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjRkFHNHk2c2ZnYnh4TzI1
-            SEdEU1l3N2FHZ010MU1uSWJ3Z3RLem1XbVY0CjVRYUJMUExZbGVQZmVGR0wxUkJ0
-            S0hYYzZManNuZVRoQUVNWXRRa09WKzgKLS0tIGdxRFNOL2M2Z3JTTnR0V0NvTHdN
-            alppQ2ZLSFhFTnZFQ25GVFRoUElvUXMKkBPoO0zYo+Wm5p2q/Ma8SmBY2IAza0DA
-            JlMR/VN6xGWMcXVRRrmUkpxN4H0Gl9IqkveiTvzaDXM/N4ng296UHg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJT1lrUUlRNjEwSGVEREVi
+            cHp3dHVQTXZyWXhWNmk1U0sybm5qdUM3aWdrCnJkZmZWVkg1S2Y5M1I5UGFNL3B3
+            V090RXUvdEtkNEhBS1BSUlpHbURkUDgKLS0tIEdSNGdWRyt4b1c3cFh1VFBZTktE
+            Yzh5OWdvdTZwOEpnYnBRVzlGL01LNFUKPpXMygtxw4tOAKmboe8yxmiiRoDJhVkh
+            4YY7sbpeoDYVwfuJmMkaKGfPWDr7REbxVzZDoyw8fFh/Ea0lcqVfbA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UGZKeFFESkoyM0ZkZith
-            TWl2U2xMTG93eXRITEl3TUNkTFNMQUd1Rmc4CmhSSDBsZW5XY0Z6d1NKMDBoM2lo
-            ZFgrcHd4OVRpbWZZeEpPK3g2ekdwcDAKLS0tIFhRc3Q5aFQ2Y08vUXJhRktkVC9M
-            clZ1YVBpYVRFeXdBaTBmSllpd3RHY3cK7KxAUrdszURnHAxslga1qgyiV/GtIoJn
-            Q4u+LLYbZ5smXOBTVBmYBhCa1lCksSE2lh9yziCiwAwiO8kwfMQa9Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUjJGNFlmbk5PdldYOEM4
+            eGZwaGJNdWdPZ3dpbE5CQWJRRFYyV3lPdGprCmZjQ1YwdUVra0ZvQmIzOC8zU1lU
+            VU1nQUU1ajhNOVdVNFVDbUR5TXlSZEUKLS0tIC9GZzJXS2VQck9zbk1kM3hhR2Nl
+            dFdjRzgvMVBCckFCdlFnWVAvTCtHSW8KaAMKb+P9TaavlrFt1esYlOO7XuQ4LTzl
+            MlxgJIjgSGmOc4dRLK1fRFvcFRTRl+0LsqZT1OkE3wWLXr/ElN0OoA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4NUdJNHFGSVoxdmVUN1pH
-            UXB1NTRDU2NIbDYrZ2ZLSDJYQldrS3RGWXhVCkk2MzJUc2JDRTRqVTZrWEozdEZD
-            UWt6Ti8yK1NoM0Q0ZUtNWTY0Zm9DcncKLS0tIG5NbjFHTmYxRlZpbk1YSGdyNmVh
-            YjgzTEprODJGMnFlcmdKaFJGaTVIOTgK3g+421UcFQL08362ebnV+KCGYq3W6gH+
-            TWHZE5I/lIDc0mjCbyNOzo0y0hQ3FJCJWE4BC3iuGtld+vxxs8zcDg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXT3UxYWRzaU5oRXZTYlIr
+            KzhQVklzN1ZzeXZuc0doOXErNjdwZitHb3dVCnpMaVRuZ2gxWFpSd2JyK1U4Sytr
+            c2FBeTdBOGo4WGFyaDdqaHdPbGUyU2sKLS0tIG4yYWVoTm9oc2RtRW9XdCtORHda
+            WVkyL1AzNGZ4YzNrYjRPYU9CMHpqeU0KESkMmihHwhh7oIW3mmmHJwFfdfEDWkI0
+            WWA3656EKVXQ2s3bqUfeOS+6rPLmnU1bkXO5okWIG6j7BXyO+dPp/g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZG12ZGVqRjRubHA0UmVF
-            d1dOSmNNQ2gvVDdLWUI1dExOYjBqV0UxSGtnCkc4dkZmWkN0WkpBZmI1a0NoVEJ5
-            aGRvTE5lWnppY3dBRXRvZnorQk1RMlEKLS0tIDVDRTkwcVhTdlZzbUxRd28wdTQ4
-            ZmZnSU80cERhK1RVbXFUV3picDZBZWMKM2mvWp8gnODvgV2aBga6va8onbMAmzI0
-            REPYMn0sJt4H/6covkRI8b8INHuviLeDowOOtHxxoR13TzFygtatkw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBR1dDZUlWand0ZXNlZ005
+            WXU0djlkWHhIRnR5L0FNcEFZc25nNlMvelRJCkV0WERlS1A5L1RTUE1jSlNYb3hU
+            YjNBMTY3d1JPNHdSaGxVSHhpR1J4dGsKLS0tIHpRYXdhR2Q4OGswNWthSXNCL0ht
+            RE1YNnhzWXV0U3VLQkFOMTJINTE1eG8KcvhtqFq0ywMDxspOxq7hKoteU8rTixsi
+            M0xrR9hSFDpytNqr1qv0hZIaIrl80GaBkzhogRaT8RDito01B5r7Fg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwTUE3Sk02MUFMdklwNmFi
-            TWRKNHBSbmdDbThiWUJ2L3VvbWUyN0c2aUdFCnZIVlU3Rmp1U1F0ajhnbVlaNG5j
-            dWdKL3RFakxPZkhITGFxTnZTSDhmNWsKLS0tIHgvRmUyUUdPa0hjTm1pRFFaZnlW
-            WjAvLzlWcER2ZHZmQkFvUUlPTFRaVE0K2FHjtFgrAVOGFXVMTqX2hSDY1jUPaovY
-            6htMCaDEdDXAOgRtj4pu3XcM/hkz4nCYzKZfmrbmfHQ84UIu676CYA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrRVFYOXVpTVNpOXBiMGI2
+            N1UxVjkxS2lvT2ZNUmF1cnFCb3Fsc283NVFRCllQR2wzclpGTjJjWjV4cW9mdmxQ
+            TjRBaXdtbzg0dDZZcVU5UDZOMTBuR0EKLS0tIFg2UVhGbEYrRHVUT0I3UDFTUUpp
+            YUpzKzUzRjhhc01ZL3dERUZ4R04ySmMKpZb+juKeLyo2oIg5ottWszJ56uiRbQaW
+            BVdydsbyo/++odMEQzlIh+MHFaHioSSztyQ0el2WDzAkby1xK7iGOQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzTGMzQlkyWlIyY3BUcW9m
-            N3BOb2dwNnRGNDAxR2E3S0czb2N6Q1ljL1dFCkE5dU84NXVYSU5KTzU4ektwYUdp
-            QUZMRWJzMm1EQ01lMmhVVkE4Y1JxT1kKLS0tIHMrQjRNNHFrdm02RmJVR2ROS1Vm
-            eFJHQTJhNmljNzN6djBNVCs5K2tST3MKkT+MrqhsOcv6uSZRVo+mxmPlqNcD+yT1
-            VbLVqx41REbtKisBrGcsUAdQUlt3L+3P09IXuPlOVgXZgoDpvi7jlw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueVJ2MGN3WVJFNXFSWUN5
+            ZmVFWndCYTd6QWZKamQ2by8xT2xQTjFGS2lNCitsSzhUZWVQQzZiUUpDbUxtaEI3
+            dFdyeGZUOE14MG9rVDRXRTJTdTFkbjgKLS0tIDlEM3hjUFR1YXVUZzdNc2tUdDNV
+            OVlPVVgySWNsZlVTcXBBVVhyUUVhdGMKrc7PnV32vHEcdOC5bPi/ZEEfwDkvwkIF
+            OJeCIpfOQ76aeV7Lsb5xSeDYkOFGEfsnvnayXABZjsp05Vz4Y6Qspw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:lgW61a1k+CEOaDtbQlN0wrGV1MX3G/KbNjSHGwaIjBtIo4J+IVN0VGFWPO0g1hEp2wKmQjHnwkQzCqvDxOKa+zt/S6bhw8uZlhKB05Yfs1cPUPPGMmFuHxPjTGpQjABgbUvdZW3vHM4SA2XVyQpBRUB+0PgKdXEttP5Bx9vTYac=,iv:z3SkANpFQI/NFr+41Y2ADwK5Y051vRh+Iv6EuZXn4TU=,tag:iAPu6A/zMiyTOs+a7J9M7A==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:qJxctGzBG+I9sb4NF0bRRf08C9ughPyvIxDk1lvG9ypbU9eqZ/sZXTbhyBvz8D68CfyouIjnZctsts/1urjZTBD0Z4C3eWtuwWtJTqnO4MzuiMLUCgpNaT1ouhCFKQSpaJbtF5ioo1eYZ/DuGRD04WDoFkuqhB9J/otveuh4+9A=,iv:Ly92+d3lcVSv2AMOnUjpqxsXMozlLYMfAG2DQGQRyYA=,tag:InW7hx7Yc3Qve/JCe2pq2Q==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/services/maddy/maddy.sops.yaml
+++ b/nixos/modules/nixos/services/maddy/maddy.sops.yaml
@ -1,7 +1,7 @@
 system:
    mail:
        maddy:
-            envFile: ENC[AES256_GCM,data:6+i78kfbtFVLoPsrDTvzGqy4ZeB34tcpW8tP73asauCn+7jt4BAg8PhigmYYsspVVoJy4u/6lC3oZfqtAlC7lyUa8NHDZ9/WMloV9H34xIbdZh2QCUtV0mEjMIzFy73a235P5brhjesJxMWPS95x75BBS9jmZMqt51BgzDI2o/7jzpw=,iv:s+Op7LxddpHTD0roVyR3iLV2ItXv5WeTpbT0UN/wnZQ=,tag:Ng9jCTnkDDPh3axe+YKIpA==,type:str]
+            envFile: ENC[AES256_GCM,data:O7Wj/RcP8aBWnhxhDrxwu3pZdXFtarqPvRIK5ijO33nIfZ7Lvuh/tJcriQAvu3kSQ+UwfURLI2z/1BPOsBx9T9J8gJvPUwT/9BbuuaTsAfQjf/mmF2tBWBLtJ16VL+omS8h0gJrzOw8Zi4HtRAnO6+IW7vvqdNqH/0KGKeINpNs/Dxs=,iv:DQDHphtI0I95V1E1EvcTfIktr0Q5hyGL46IHtIczLFY=,tag:yK/Bpwf6BgZK0KODps0/Mg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -11,59 +11,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvYURReEpTdGVpM1Y0ZVA3
-            a055YWJKL0k5b0xhNlBGdEcwVGJ4ZFQ3cDFjCmY3Zk8zTFZtZ2Fla2FxRHRXaE1B
-            UXlRcDZMYjFXMFF1WXZpZlRYRk9KY2cKLS0tIGE0VTdYdGliSlVjcWh2NmZjZzRW
-            bU11aHBvWndiTTRqc3dDRUpsQzNSdXcKMyW4mbKxXfcsNoxLXNmUHQFKsn0ngeD/
-            Ar3+tdTWpdW9vaIqaiXbwHdv6Ia5bjSkt7SH7Y8bGVnM7qAxidjrAw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1VkJURmFnSlBqRFMzR3Bv
+            VUVzeGV1UEdqOEZxQWFhTlR0ckhHNldBckNvCjFDbU80WmFTKzhPSkJoeWJoVU54
+            ZWNmbUljKzBqNWxIOVlNeVQrenNQRG8KLS0tIE03NUFxcGVueG1ueXdNZ0xsb1o5
+            MWhmMTk4R0dUM2Nsb3o5dUlvZ1k1bE0KBXVMIte5E84vKgyEUgZdOfUasJNTN4US
+            1IpvfJ98Upss6id5UhAgQSLEdnUJNjOjz38lxhufinbvxwsiuGzyHw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQWlNtWWh4UzdDbWpGdjVK
-            VnU4VFNISHNoOGo4NC9mZWlNQTRjakxKSDNZCmdaWHBjZllKL0ZjdEhhMXBqUVln
-            dWtNVXZKWEZaZ3h0dDlSam42OFJEMDgKLS0tIE5lVzhqQ0k2Q0dKYVk4ajNnVkZ5
-            U25RZHZYaFo1amFrcVE4UzNPK3hQMlkKoFmxCebO3tzfXHiCOYjvdrf+s4kqqH+S
-            GSDS4ln/r/QaHQe98Q4UBU1mH0x7lZg/XeTeI4sG79HbsVPKq1CYUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1OTdhekNmTVV4aDhQZ1I5
+            d2Faa3BJMlBab0YzdmNjTk5McGZvZzhMMlhvClF1K3lKV1VCTkRIRDQvZ2RQRDk5
+            cU9VZG1SZjN2b0MzWmZ6cEVCdUh0NlUKLS0tIHV0bXhFWkhoTEQrdzF2RkZnTmty
+            Y0IrcHhHcnpLT2Z5M2Q5YmVuWGhYSE0Ku8WrjvwEJZQXdLKoUvgZQZTM/akml0kO
+            lSTUMDfBqQLj5mXwwMLvffqNdiJjL3ONpyUHeyDlWQG6MRTY/kYjnA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZ0JqMWdlcVVuVitUcVlO
-            TmN0c1NDZ2hKK0dLQ3B6Z1B3Ykk0NzZodFFJCkR6NGRjYWxVUWdUZDBBWXpIRXZF
-            aHNQcU40bEdIaFc0Z2taMmJFUSt6ZGsKLS0tIDJyQ2t2RENMcTVOck5iZVdCMm1E
-            UGN0QUJpQXg1dXVNS05XNnQxY29xYXcKfELz9B1twcS0YaEeZe273QZl4AIQN3GT
-            wzTnMeMqMrg2aVh1xbQYBv88Uv3O5x/MbmSWIQ42Mg7vX+J/gbCltA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZUw4N3U0ei8rNUV4VCtv
+            ZEhpZEc4M2s2U0xlQTlTNjZWcnNMYkFndVE0ClpCaldTVFJobnZtSW5BK0M1RFI0
+            bW1PTy96cHl3NnZJQllNYzlMdy9lWm8KLS0tIHRKT0lGa0NGc0NRQ0wwY0ZseUlZ
+            N0RxTFdoUU1LdkdQcHg2OEIySHFVNDAKeXH3fzCqd5zoCNSykuNIp39S4Ntvrg8z
+            g8UgS8edE4q2/wzvhKh3yZXhEnyUfVPKzUFHVaVcIzaQmQitzF8kgQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvWUNudmlxN1Ryb1Vtemlz
-            S3lYOGF2enRrLzd0Q2NUbWNEQTF6Ry85NVIwCk1sTnhxdllzOGFxK3Q3b1FERG9Z
-            RWhvMDd3WW5iVTlJV0c2QkZVMmZaZzgKLS0tIHJlUHBTV0RyYU1vNzdLRS9zMUx6
-            Q2NaR2hyVTlpRmM4aWQrc2hMZnRXWnMKm9d6L5/CxFSwXlHs9Ud+HAxqJyPzwiOD
-            fSO74hYSbQVHa/dnm6u4jNB6qNAExJki+xR9vkKT0SaPT0UZ0bDKRg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRazZyVmVDYXFuL28zTlZ1
+            QTFIdTRlekZJUzcrZlc5NzhJUG83NWxpd1VRClVnalNWaVQ4NjB4V3lnSTUxOXRz
+            VTZkTCtPeVdpUEgrbTdxcllSTTBtOTgKLS0tIEpSK2ExT2pHNGh2SnpvMnBoenVG
+            Mno1dkxoc21wNGJpZ2pCSDZ2cGhSL2cKz568EszLyjw8GjZcvYB2uHkjUpN+owhn
+            2Hg3fsqFO/Q+pYEZ2uC4aPs2pVkoI3GN8AnvXpX1UdROlPpoZB4S8Q==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZnNkVy83NGNmYmFmbVo2
-            V1l5enhwNzdBL3Ezb3NabzF3RmFCek4yNWhJCjRlbzJGb3ZYMGRmVFBVYXE5N0dx
-            K1l4ZG5wdit5SGtydTBXM2cvQTFqc0kKLS0tIDJ1VGdJSEQ3ZDBRZGhyQ21pbVVp
-            Y25URVdYWjVTK24xamNBSXk0N25wMG8KOOWF3OkWluTuAWI/7wLwfo0DMR9XYc/k
-            FSQZGMah9iDXdrIFINyGcNAIxVYlgKd8hoKHHbhbU0Wc77CYCI3EpQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtMzA5TlVRRjZrTm9mSkEv
+            UVlRU0Z2dVRsbHE5WDVacXA4dUkrTDdxWjNvCkt5b3pFSDMxSkJvK1NBa3BEK1pQ
+            WmF3VlRDRlprRFNjRTN2NEZVMS9QZk0KLS0tIGxvdUhSdTlrNmlTejk1Q0xxUnJI
+            dlVRbEk3QU1kbmkxYmpiRFZMSnNua0EKup42WKbdn/e52YIys7Btt5dGbOS0C0t0
+            r3ifAGANhSGm/47OGmrp3D3zBdDPJynt2DXjd+Z4eSpGyXlcNmKdSA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORWFERkVSVElESUlVU1gv
-            Uno3c0hodi9POEN5MWtoVU5yVXRWN3hNSWxJCjBiYkNOeEE0MTByTThvNk8yaHJy
-            WWZmOGdUZkg1L3FIU2U2aUE1K1l0WWsKLS0tIEFjMDcwaXh3MWpkWjlWUWFydmJ4
-            MVFuMmtuZGVtMm1mR0I2S1BZSGREOTAKa58nx/GX5SaBm78F4WBEvocmwcuG/TOl
-            HQvloemcg6fsfb7T5H5kjRMVoDv/5V4lvIZ6NyNhgHFhB8aY/M7yFA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBseXp5L2F0SmFYV3JRQkRy
+            TGdQaVlETFVYODNORUxDRHh1UTJpZFI5S0c4CllNcGQweUUzR2Q0bE9ZL0dtWVY0
+            WUNMRk96YzdQdXc5SmxLSldEUDd4WlEKLS0tIE5HY1kzWXRxWGRRTEJnamlBbUhk
+            UEdsT0tsRnBWeGRTNHRtMEw1STFRRjgKEFLv+SdRAulVyQyUZKQjOKkg+nzqlnY7
+            qvCpAqEciZbFVlpD/aaLQ58jP2Ly/t1aHQFcWnEIWuhPYXw+k1gmOQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T12:24:05Z"
-    mac: ENC[AES256_GCM,data:zVylmpuq+kEEl3WwoMvK6KgObZZ6Mmm10Yh/nw8Dgih/j8QdPScjHxjZz9En1u1qQ1CYvvb1dqV6e217NMWbe5beSJEMcnY6UW8JYXPSGdVC4wOPDIr+j30uEPPu9sj42+1jIgrrpTxZ+KW6wEqN6KnYbOy5FvFC9MAcx1pn46Y=,iv:shdQo2uKc8uiLQp5Uyqn+iIWXj1JgjC+/aDFmW2dG2U=,tag:vqcIuClhJGkyWMWZatb0wQ==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:bMDjOYp2S9uT4671XD4T5LRYgoVBftLLbpNKsmx7ALlgcbSpHHF64k8IiR+KgUeGPp7uNiMGe6BT3w4be//yWUxJVwydxjF/V56q/VkYa4SRU+PZZw8bUp/rE2RnczvJp6OwSt/dAmyFfY8UG9bhNOGWeBBfwjrgzS0pfzIyVJ0=,iv:p5tDvddXy0cApRfeQaYcEYEpqGYPDXl/TrayS9qcmCw=,tag:Khj3RUhrbFDtPtwE4BGNmQ==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/services/traefik/secrets.sops.yaml
+++ b/nixos/modules/nixos/services/traefik/secrets.sops.yaml
@ -1,8 +1,8 @@
 system:
    services:
-        #ENC[AES256_GCM,data:penNbU89uq8UJRzWYUwkPtrAcOZRoXcUC116HNUV4LMlP9ViYIHereskW4mxcCkGL1pETpTXz5S+qznBMBh1/ld8RrYsEAiujr6zHw==,iv:ifdN2V9CRPZK1Zs+v8eVBP2z5Th1x4m2DlUaJqyyuzg=,tag:Ycj4SnH9flRqzHfN0HJW8w==,type:comment]
+        #ENC[AES256_GCM,data:YEM+PywM4mm+0BlFscjwyDRdQLzJR2E11RumZ3NFJzjz7vyD+yZQI3dC5mIAFEI3ZmPNtxadtvGvQIIMs5XdHf3bm3lcVX2bsMfqWQ==,iv:4JhcykwwFc98iMXZZp9gBX13TFyic1kVKmimsT5a9q0=,tag:8TpvQcQQgoCD+z4+lNcduQ==,type:comment]
        traefik:
-            apiTokenFile: ENC[AES256_GCM,data:eiJx2OxePVB66NFgMnAHbxzjx4YXP4muKmLXWjbqpRv8gv34mmI61B866S+vxsOfPpwDuhJbkAnEWlTqAPlHY1DUaNm2iGQS4q4PkCgXpNijNDyzQqG/X2Irn30609A3ZQ==,iv:X82pE7RNgSGlSGkarrA2mP8/MTFbNbeuymD4cvvF0oc=,tag:HZFd9bw2N11xU6fX0wFeMA==,type:str]
+            apiTokenFile: ENC[AES256_GCM,data:BoFswFKyWhg2nAkdQ8eNW0+rWSMeIKvc/p0e/7ZHOsiltI/vgcYGQdz97mvwh2zck7OUvYRJbKZQ/W2bLmSZSmPScd1+drbKGPdo8s/K1KZSlqhfk4ldXqr9kpI+QV6FUw==,iv:mupO6Dj0lXafJK4+vXp85PlkVJLRP8HuQ4Jfj/EhcIs=,tag:CPhKdlAvtBtAs/IFZq+ZFw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -12,59 +12,59 @@ sops:
        - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTGtXMk9EUFZqcU15VnRk
-            aXR3UGNRcmFjQ3VwZ01rbzlBWnZnMm1GSHhJCkU1dlUyczEzMHUyYmlTcWhwUCtR
-            SGVXRzBDc0pvUWhyWFhOTW1tbzlxaWMKLS0tIEFvdWI5K3ZkejNYUVhTRXVoSDZ1
-            UmJiS204cWw3aCtvb2JzWUVNaXcwQzAKxEcMaf0LPlGxUn8EJgQrJfJFHaRLgxB+
-            cHFoAU38ixb2s8hYmBWDO1jcODnjoNDGDUlObE3ZC1jAVjnbawFzpw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDYzFWUDduWnNZNVFHd0VC
+            aFM4aTR2N2xTQ1FXcFU1NXRjZHNoanVxc3o0Cml1MHFxcU1oSXZSWGhLTDQwRjBS
+            SFlkYW1LZUhpUU5Kd014b3ErL2tVbGMKLS0tIFVIaXIvZXNWMlhsdC9YME5lK0JT
+            NXFtV01BVG90dGpqT1YvTFlhZGdHZnMKMgARGl+FIQRafv5n9H54jdtD9K82J8b+
+            uXXJgLas5GKc5dPKUuMXIGgYQjuDKbpn9282OhXBeNXtxhk6LPiHcw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDVTJ4SW5UQzdEbVRYamFN
-            YlNlQkI2Tjl4WUZ3WUJQUjZJSTd3T1hBNGhJCmlFYm13ZUpPVy9ZTUdvUjVRVjdh
-            L1paN1JEUkdIczk2MHRaeGY4ZURNaFkKLS0tIEl3M3Z1N0huNjVRcEhzc09Rb1ZR
-            Zk9ZTVB6VFNvckp4UTRwb0NWcDhtK3cKMR6dTqYsXJeQAaAgZLE/FVq+lK4VUlnK
-            NiVa/qcZeRReS5crMfOLFAhfVeYTGZs9qWRPy3mbTe2eOyOQoE3QVA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNemtaYlNCWm9ReXozU2dt
+            VGVRa1YzRU5qV2xueFFGZXJwNGVuUXdXVDNBCnp2WnZmMUVvZmk1Tnc2dGRrTVJV
+            KzdjQkZRdU9pRXUxay9KcVVkTlhma1UKLS0tIG5vZmt6LzkwUG9adnVxUmRZVE8w
+            cnBCTFl2ZmFaa0RMa3BGK1lSRlZHNzAKytTZsl1Qs1Ln5lUFsWf4B3sTtMNUjQsn
+            zOWT/aL5EkDhKYI5afpaMLdgjrZNcUn53UTsN1QqGJfN9xz8I87VMQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjdDI2d3RMSTh1UHRaMUgz
-            QnRDNnpOR2h0OUE3cDg5Tnc5azZHYmpHY213Ck51NFczQ014cE9IWHJibFMvV1Jo
-            RzZrTXZuMktKTU11eEFQNGl6NzlmZDQKLS0tIEU3aXcvZ2VIaTltTm4wcWdQYS9H
-            b0ppNURBUzZuSzlLR2NGMFhCQ1U1Yk0K67WtzoZar0Uwt/bfwQkVfhJ2vEyCgA6Z
-            8vIH30RpgI7wMovJ3r8W22mI3jD6WSuhAuW5QoAe0YxBE9x/lPPBlQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VVovZ0Nuc2kxQTgzWVAy
+            bCtRMDVlOHJ6R09wMDN1NHRVc0dKQW1FSEJVCjNpQ0dUbGdEWDhKTFBEdUQ3Qm9N
+            RGZ4ZmJ6b3Q4YUl6b084dE50QkVIMmMKLS0tIGt0SGNsYUUzRTBwbGNnR1VPQVBa
+            YmJtbEF5NW9Od2RTcjNra09JNERwYkEKL3yA04+igcbuwc01x7vx9DcnoUL34YHo
+            P6t+eTnKP7d0TmFHSieKSKu6Kk4rzeFVoQCkxlsyjrSNtht3QCj91g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWckttQzBOd0N1S1dsUmUv
-            S0RDREhyaVM1U0thb1MwSithTWR1TFVDZlY4CnhJcExUNE45NEJRTGRPMUdsc0ZM
-            MUhTNVZ3bkFwV0pubGRMR3hIQXlDNk0KLS0tIEVSWWpJL1VsVGR1MHRhaFo3VzBF
-            Vi8xdktlOE42QkljaGRaa1B6Z0U2WEUK0/UypxbpZ84OBoGLktvXxIoMlSJ1CVkv
-            Dz2Hg6jQcaXY0ytnA4w3K422gF506vqTJpfOUzGTyhROmh8c68rl1w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTkdNdEdPcGhCRkFHVlR2
+            bVpKZXZDNjMxdjkzVGJEMFVHUDdMRUczOEVRCnlUeTFzaTdOa01rdVhNS3pTWEs4
+            YnNPdGNKbkdJUTZpR2RmbGhqTkdZcXMKLS0tIHlwK0Yzdm9SSWtycTU1Wm1OSHRn
+            b0pBdUxtcVlsc2NDTlRBUTd1b25oajQKFnpXnZ/8PmXD65oICcYpyAj0Op0nDSRH
+            0hCWLscdq6KQiyG6Zi0/EQXHhXDc8PJbMHgGQ1rn3tqWhXozOP9ZTQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMlE0Y0VvejNGcE9odnNa
-            clpZKzc4blRUaisyVWJVNndFRkdqbWVYMlc4CnJEYXdrRWhJWTc0bXh4NS8rc2JD
-            NXZEUlNLbU54MGdUcWJndCtkZThEazgKLS0tIG5CNitzTmo2eUFVZWJ1WHBVa00w
-            c2Z1bDJISGxMdVZLRWg4bE5YTjU1QTAKHeoCMPmrH0afCetRLlLwnyGkEkzE4dRX
-            MDB33FutcWQeAgWBhHNmHeosyZbPlzcO70GGxOGUEfke+L2/frDTuw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJM2NmMzc5K2ZwZTVlSXZq
+            YkdzRWttdWZPQjBFaDh4UGUwZFFRVDlETFUwCk83emxCS0dXWitCV0hHZWphdnpF
+            R3dLQlZRenpsRlkweS85dnpGSzVITGsKLS0tIGlEWUM2SmowbUdhcVgrRitaUkVL
+            Q3ZaaS81TjQ1MTE4ZVUwR01VUTNnMVUKlyPkDLQmkT2B6+ud0yrrTEbuHqaEQN4f
+            7ABgPx3GHrqgbZY/Xi1R75NiQ9n7+TGoB3v7AAjc+xc4b90yRuyx1g==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1w4ctvdenfrc7ew4wkvwkekmlemup4g9g0jmfwxd62ccu2edsx4vqj5yvt8
+        - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXRnJ6TGI5VG83Mi9rM2ZP
-            QjN4T0lYcTNzWDBsdnFYQktvaXd6akJuWDAwCnk0Q1BpdXNLYkFRODhpSGQ2djVS
-            a2JoR294bnMvV2YvYUlPZ1EyY3lBSVEKLS0tIC9XZ1k2cnlkZ2VSMGI5b1g2Q1lG
-            YUl3OE9nMk54OTJmcU9EZDJkSDNRbFUKjBR059OuN/8WtfqBkbf2tq7zjTUILSPM
-            Odf/6G0OYpoi34DAZ040j2Ujny0Anl9ZRxOwXTNCN6SOeOB/EQPgtg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSk9lUTNGUFJaK3psT1Zj
+            Y0h2akx6SktqOSs1ckRRL29YNkxIcHhVdmxnCmZSeWdtckFQMHNtZUxEN1FNSnR2
+            VmxjR0ptT01FYjBRRGRZMjdSS3ZEcDQKLS0tIERpWmcxSHM2a3FhRy8zOTdmaEtC
+            blZJb3F4MTdoQVIyRVo1RnVCR3FYelEKYDXcpDVDrf/VYTEzNAM/XHkrx9cLkdC5
+            OCGfMqoqJPHZn4tGJOD2FpfZK8AVhih73gZKAHItDizm2aBuaT5yig==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-10T13:37:38Z"
-    mac: ENC[AES256_GCM,data:x+Ft6NwNALMqQ3ljujQ4t42FW9PDhUy/cROd9xPhjMegFVkF4BfLYmzUMQKu50zTur/dfPIRUaqPzqGmupz+Uze6nBWQkrvyjnmSwG4K/wwcXmCWJ54DFcA+wC1RlSHu6TlPZH4p/4feDAPwJ7uXwUnG/OXd9mbPv2x6VNr8NrU=,iv:z29C55zw9vm9RF42Bu6o9Ojs4cTflA1VlLTQwCA94HA=,tag:UCJQez8eHfCH5BxjhYP/9g==,type:str]
+    lastmodified: "2024-04-11T07:59:07Z"
+    mac: ENC[AES256_GCM,data:jpvoc5aacRAYifmVljRBZ2p8uXaeUiIbflGyjaYxVIy25N5Fa4v3wQOqmC1VGaSoOIMmx0Bt+p8ihdvhf2ihRwLF/L/jO+oSl0EiVqrx+u6xIXB19jD0flvw8d4lTE4E2DTxqvPGwGAOAp5g2fstdPAbrkDY+3/f6PMhlbvlPFw=,iv:T3HESCilOJ1S2cntErmaFmBhrLLmLRC2cFZN8gUFAUU=,tag:qXgobz+R/rDsrYs2wQhQQA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/nixos/modules/nixos/system/default.nix
+++ b/nixos/modules/nixos/system/default.nix
@ -7,5 +7,7 @@
    ./nix.nix
    ./zfs.nix
    ./nfs
+    ./impermanence
+
  ];
 }
--- a/nixos/modules/nixos/system/impermanence/default.nix
+++ b/nixos/modules/nixos/system/impermanence/default.nix
@ -0,0 +1,58 @@
+{ lib
+, config
+, ...
+}:
+let
+  cfg = config.mySystem.system.impermanence;
+in
+with lib;
+{
+  options.mySystem.system.impermanence = {
+    enable = lib.mkEnableOption "impermanence";
+    rootBlankSnapshotName = lib.mkOption {
+      type = lib.types.str;
+      default = "blank";
+    };
+    rootPoolName = lib.mkOption {
+      type = lib.types.str;
+      default = "rpool/local/root";
+    };
+    persistPath = lib.mkOption {
+      type = lib.types.str;
+      default = "/persist";
+    };
+
+
+    impermanenceRollback = lib.mkEnableOption "Rollback root on boot for impermance";
+
+  };
+
+  config = lib.mkIf cfg.enable {
+
+    # bind a initrd command to rollback to blank root after boot
+    boot.initrd.postDeviceCommands = (lib.mkAfter ''
+      zfs rollback -r ${cfg.rootPoolName}@${cfg.rootBlankSnapshotName}
+    '');
+
+    # move ssh keys to persist folder
+    services.openssh.hostKeys = mkIf config.services.openssh.enable [
+      {
+        path = "${cfg.persistPath}/nixos/ssh/ssh_host_ed25519_key";
+        type = "ed25519";
+      }
+      {
+        path = "${cfg.persistPath}/nixos/ssh/ssh_host_rsa_key";
+        type = "rsa";
+        bits = 4096;
+      }
+    ];
+
+    # If impermanent, move key location to safe
+    systemd.tmpfiles.rules = mkIf config.services.openssh.enable [
+      "d ${cfg.persistPath}/nixos/ssh/ 0755 root root -" #The - disables automatic cleanup, so the file wont be removed after a period
+    ];
+
+
+  };
+
+}
--- a/nixos/modules/nixos/system/openssh.nix
+++ b/nixos/modules/nixos/system/openssh.nix
@ -42,6 +42,7 @@ in
        # Allow forwarding ports to everywhere
        GatewayPorts = "clientspecified";
      };
+
    };

  };
--- a/nixos/modules/nixos/system/zfs.nix
+++ b/nixos/modules/nixos/system/zfs.nix
@ -13,7 +13,6 @@ with lib;
      type = lib.types.listOf lib.types.str;
      default = [ ];
    };
-    impermanenceRollback = lib.mkEnableOption "Rollback root on boot for impermance";

  };

@ -27,9 +26,6 @@ with lib;
        extraPools = cfg.mountPoolsAtBoot;
      };

-      initrd.postDeviceCommands = lib.mkIf cfg.impermanenceRollback (lib.mkAfter ''
-        zfs rollback -r rpool/local/root@blank
-      '');

    };

--- a/nixos/profiles/global/users.nix
+++ b/nixos/profiles/global/users.nix
@ -6,11 +6,18 @@ let
  ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
 in
 {
+
+  sops.secrets = {
+    truxnell-password = {
+      sopsFile = ./secret.sops.yaml;
+      neededForUsers = true;
+    };
+  };
+
  users.users.truxnell = {
    isNormalUser = true;
    shell = pkgs.fish;
-    # passwordFile = config.sops.secrets.taylor-password.path;
-    # initialHashedPassword = ""; # TODO add key
+    passwordFile = config.sops.secrets.truxnell-password.path;
    extraGroups =
      [
        "wheel"
--- a/nixos/profiles/role-server.nix
+++ b/nixos/profiles/role-server.nix
@ -21,7 +21,7 @@ with lib;
      group = "servers";
      url = "icmp://${config.networking.hostName}.l.trux.dev";
      interval = "30s";
-      conditions = [ "[CONNECTED] == true" "[STATUS] == 200" "[RESPONSE_TIME] < 50" ];
+      conditions = [ "[CONNECTED] == true" ];
    }];

    nix.settings = {