diff --git a/nixos/boxes/colony/vms/shill/containers/jackflix/default.nix b/nixos/boxes/colony/vms/shill/containers/jackflix/default.nix
index e5cb23b..4986a86 100644
--- a/nixos/boxes/colony/vms/shill/containers/jackflix/default.nix
+++ b/nixos/boxes/colony/vms/shill/containers/jackflix/default.nix
@@ -28,7 +28,7 @@
           server.enable = true;
 
           secrets = {
-            key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzzAqa4821NlYfALYOlvR7YlOgxNuulTWo9Vm5L1mNU";
+            key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPUv1ntVrZv5ripsKpcOAnyDQX2PHjowzyhqWK10Ml53";
           };
         };
 
diff --git a/nixos/boxes/colony/vms/shill/containers/jackflix/networking.nix b/nixos/boxes/colony/vms/shill/containers/jackflix/networking.nix
index fe9d259..1b24ec3 100644
--- a/nixos/boxes/colony/vms/shill/containers/jackflix/networking.nix
+++ b/nixos/boxes/colony/vms/shill/containers/jackflix/networking.nix
@@ -4,7 +4,7 @@ let
   inherit (lib.my) networkdAssignment;
 
   wg = {
-    keyFile = "jackflix-wg-privkey.txt";
+    keyFile = "jackflix/mullvad-privkey";
     fwMark = 42;
     routeTable = 51820;
   };
diff --git a/secrets/dhparams.pem.age b/secrets/dhparams.pem.age
index e1af127..227deb9 100644
Binary files a/secrets/dhparams.pem.age and b/secrets/dhparams.pem.age differ
diff --git a/secrets/estuary/netdata/powerdns.conf.age b/secrets/estuary/netdata/powerdns.conf.age
index 2ac2ea6..4ee762f 100644
Binary files a/secrets/estuary/netdata/powerdns.conf.age and b/secrets/estuary/netdata/powerdns.conf.age differ
diff --git a/secrets/estuary/netdata/powerdns_recursor.conf.age b/secrets/estuary/netdata/powerdns_recursor.conf.age
index 27dacbf..3d5310e 100644
--- a/secrets/estuary/netdata/powerdns_recursor.conf.age
+++ b/secrets/estuary/netdata/powerdns_recursor.conf.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 n8CpUw +a8D5DCZQCK5Yv/U+ApOAP8TxcA7cjAXG2aulHdQG2I
-9WDr8i1YxZ29daFIeT0yDwhHPNvx87JmBp/Rg5cFOJI
--> X25519 tDJjrmPEM9C5JmjhCkXo2a15u0pGubRRuae1xxaFPD8
-tGH3wzDZJzK4BbozX2z9T2yXabriR2fdg4ZVO3KZk/g
--> SQa:-&-grease g ~"{ :m <Jo\5dz
-o9KTHn70+oFLRHA
---- i/1z+jWIvlhCTq08UYqceDpaRe6CJJr8remSB6LVAH0
-L����e�S�C���ނ��[��ȡcѴ��C@ټjvvy��ל1����a�c�z�n7Ya=~"�J'���H��RZ��,����{���F�1[�KI^����|��%Yh`�Gx��$�5�RC�z0�t�0�u���Ɠ5^���
\ No newline at end of file
+-> ssh-ed25519 n8CpUw jKGiqsAWbpBN+J00jrEo5vqDKgbk8zjh2vBjQ358Hxg
+Q1rXDzyXlIfkcAd/NAtzAtg06xKsPKL7ZPbhbMGEItM
+-> X25519 I9tfvyVwRvD4V7FvwiiKylz6ju3QyuJkSlKpabqN11M
+ZBeuhP/gCmABHIeY310xX0ySpzo0iLDS6Bvb5czrrUk
+-> 5-grease YR%W&-wu W\}D xqfc&UH fCCRrbPp
+RLGT8KYDcpXBbvGJxdN0iMTeGH1OR/ZQxuXBaClXAH0BFo/YL/ncnw7cSVpDBWnN
+4YsDTBYo
+--- 6mxmM5cE3KL0zBf9qGXg9PTLitJy2Oq6M21nhB2E71Y
+'��ɡV�^��_�ph)YP��Ї!6o�vI!�@!)�q=K=��^���(�jfC��KC������߈��V~߳ۡNT���x;��4���^c�SS0��~I�m#5�c����|�g�h�1X��̿�H���c�N���
\ No newline at end of file
diff --git a/secrets/estuary/pdns/auth.conf.age b/secrets/estuary/pdns/auth.conf.age
index 43f4fac..0dbbd7a 100644
--- a/secrets/estuary/pdns/auth.conf.age
+++ b/secrets/estuary/pdns/auth.conf.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 n8CpUw DOBT0UVIyRCCL6hLk/F1El4MbtNYskMz+IMjD4UuOns
-NT0PRGlEpQ3YcxHEUdw/90QhD8xGar6id17maVwUdb0
--> X25519 c/SwQBGz826ezLHbZfOPNr0uhqFK6RTvxEA8HDb7+xY
-rZa2TqG0icjqMLFE79ouCFqsInQHe7a4FsaY8sPiDl8
--> 0A*gt-grease F:X-O^
-
---- 6nJnd0CERDygNJnpVCIrKQhpmUQJisAV/HgX1RYyf9Q
-���<�*��IR�
iq��D��O��k�O�s���:-����]�@ch.�׊�O�	UMEW%k
V�C[�r�
\ No newline at end of file
+-> ssh-ed25519 n8CpUw nYdDNRkuKV2O6R3Xq8vDZ7CjUG889QT4NP0c8OYs1XA
+zEf0rePe3yxQuZdaoeIcaPQbbFXJIB6VUZUdhjIORCg
+-> X25519 yKAOrPLmEkUakxRzsNS1qcwAltEwAUiyIsvyp+4dXCg
+eRsuGa9bl+qvSDMDThF/X7Ajj2AZdzDcdQCRvzHNh74
+-> W-grease Q.H-b\G B<eK<mIg 2L i6p
+c5qaK9TfGppy7QXMSpaCwRM
+--- Nl9BebzgKQPBioEYfJuFoZqD7HPZVR9sBqiSgbpb6R0
+n�*ݷ�Bj�Ƨi�k��j5Q:XnC �S�`���A�<K��;l4�h@m�c�>F�I�i�鹨�����L
\ No newline at end of file
diff --git a/secrets/estuary/pdns/recursor.conf.age b/secrets/estuary/pdns/recursor.conf.age
index 97f501d..16e1555 100644
Binary files a/secrets/estuary/pdns/recursor.conf.age and b/secrets/estuary/pdns/recursor.conf.age differ
diff --git a/secrets/jackflix-wg-privkey.txt.age b/secrets/jackflix-wg-privkey.txt.age
deleted file mode 100644
index c443dc1..0000000
--- a/secrets/jackflix-wg-privkey.txt.age
+++ /dev/null
@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 vf+WVg 46AUsv9pdxNRa3OqRbBhNCZ4mtmeoQ2/DPBTSiEiZTQ
-Ib4PHWRKr1x9hcxjY+DQMpahA3dpTyFzYRZ9JFzcLNc
--> X25519 lm03ugY8fnUPThuqOA1zkDjLgF7swWURECXYD+lXZlY
-dW9tb6Bv+7ofIhZHV0E5Hq4jhtHMDC0wgQ+trMaPLUE
--> @-grease {3]QG.2I OR(T <FkdN$|=
-3ktwWgIO8kgJ1GPY
---- aOCS82AO1gSIkgDRP4ISFP9Q/XVzyjzl9ShgpxPoWLk
-%��0��_K�A���p��9l�i��ޱ�D=3�ڝ�Ƽ�?/��%�]5Y��r�}�S�a����|�1J���F��
\ No newline at end of file
diff --git a/secrets/jackflix/mullvad-privkey.age b/secrets/jackflix/mullvad-privkey.age
new file mode 100644
index 0000000..5b14b41
Binary files /dev/null and b/secrets/jackflix/mullvad-privkey.age differ
diff --git a/secrets/middleman/cloudflare-credentials.conf.age b/secrets/middleman/cloudflare-credentials.conf.age
index 5c23cd3..b0a0c48 100644
Binary files a/secrets/middleman/cloudflare-credentials.conf.age and b/secrets/middleman/cloudflare-credentials.conf.age differ
diff --git a/secrets/middleman/nginx-sso.yaml.age b/secrets/middleman/nginx-sso.yaml.age
index 8988c25..f6e5a06 100644
Binary files a/secrets/middleman/nginx-sso.yaml.age and b/secrets/middleman/nginx-sso.yaml.age differ
diff --git a/secrets/pdns-file-records.key.age b/secrets/pdns-file-records.key.age
index f0f95e3..b7e521c 100644
Binary files a/secrets/pdns-file-records.key.age and b/secrets/pdns-file-records.key.age differ
diff --git a/secrets/synapse.yaml.age b/secrets/synapse.yaml.age
index 524c5bf..fa03a45 100644
Binary files a/secrets/synapse.yaml.age and b/secrets/synapse.yaml.age differ
diff --git a/secrets/user-passwd.txt.age b/secrets/user-passwd.txt.age
index 19c9517..dfe6175 100644
Binary files a/secrets/user-passwd.txt.age and b/secrets/user-passwd.txt.age differ
diff --git a/secrets/vaultwarden.env.age b/secrets/vaultwarden.env.age
index 97bcf4c..d8c447d 100644
Binary files a/secrets/vaultwarden.env.age and b/secrets/vaultwarden.env.age differ