diff --git a/lib/default.nix b/lib/default.nix
index 6913bd2..783745f 100644
--- a/lib/default.nix
+++ b/lib/default.nix
@@ -234,6 +234,7 @@ rec {
         v6 = subnet 4 3 all.v6;
       };
       vip1 = "94.142.241.224/30";
+      vip2 = "94.142.242.254/31";
     };
     fstrimConfig = {
       enable = true;
@@ -241,7 +242,7 @@ rec {
       interval = "04:45";
     };
   };
-  kelder = rec {
+  kelder = {
     groups = {
       storage = 2000;
       media = 2010;
@@ -251,14 +252,9 @@ rec {
     vpn = {
       port = 51820;
     };
-    start = {
-      all.v4 = "172.16.64.";
-      vpn.v4 = "172.16.69.";
-      ctrs.v4 = "172.16.64.";
-    };
-    prefixes = {
-      all.v4 = "${start.all.v4}0/20";
-      ctrs.v4 = "${start.ctrs.v4}0/24";
+    prefixes = with net.cidr; rec {
+      all.v4 = "172.16.64.0/20";
+      ctrs.v4 = subnet 4 0 all.v4;
     };
   };
   sshKeyFiles = {
diff --git a/nixos/boxes/colony/vms/estuary/bgp.nix b/nixos/boxes/colony/vms/estuary/bgp.nix
index 4cf8071..78ff883 100644
--- a/nixos/boxes/colony/vms/estuary/bgp.nix
+++ b/nixos/boxes/colony/vms/estuary/bgp.nix
@@ -15,10 +15,11 @@ in
           define OWNAS = 211024;
 
           define CCVIP1 = ${lib.my.colony.prefixes.vip1};
+          define CCVIP2 = ${lib.my.colony.prefixes.vip2};
 
           define OWNIP4 = ${assignments.internal.ipv4.address};
           define OWNNETSET4 = [ ${assignments.internal.ipv4.address}/32 ];
-          define CCNETSET4 = [ ${lib.my.colony.prefixes.vip1} ];
+          define CCNETSET4 = [ ${lib.my.colony.prefixes.vip1}, ${lib.my.colony.prefixes.vip2} ];
 
           define INTNET6 = ${intnet6};
           define AMSNET6 = ${amsnet6};
@@ -53,6 +54,7 @@ in
           }
           protocol static static4 {
             route CCVIP1 via "base";
+            route CCVIP2 via "base";
 
             ipv4 {
               import all;
diff --git a/nixos/boxes/colony/vms/estuary/default.nix b/nixos/boxes/colony/vms/estuary/default.nix
index 5e78aeb..dd41f68 100644
--- a/nixos/boxes/colony/vms/estuary/default.nix
+++ b/nixos/boxes/colony/vms/estuary/default.nix
@@ -188,7 +188,7 @@ in
                       {
                         wireguardPeerConfig = {
                           PublicKey = "7N9YdQaCMWWIwAnW37vrthm9ZpbnG4Lx3gheHeRYz2E=";
-                          AllowedIPs = [ "${lib.my.kelder.start.vpn.v4}2" ];
+                          AllowedIPs = [ allAssignments.kelder.estuary.ipv4.address ];
                           PersistentKeepalive = 25;
                         };
                       }
@@ -339,7 +339,14 @@ in
                 };
                 "95-kelder" = {
                   matchConfig.Name = "kelder";
-                  address = [ "${lib.my.kelder.start.vpn.v4}1/30" ];
+                  routes = [
+                    {
+                      routeConfig = {
+                        Destination = allAssignments.kelder.estuary.ipv4.address;
+                        Scope = "link";
+                      };
+                    }
+                  ];
                 };
               } ];
             };
@@ -388,12 +395,6 @@ in
                       dst = allAssignments.valheim-oci.internal.ipv4.address;
                       proto = "udp";
                     }
-
-                    {
-                      port = 6922;
-                      dst = "${lib.my.kelder.start.vpn.v4}2";
-                      dstPort = "ssh";
-                    }
                   ];
                 };
                 extraRules =
@@ -433,7 +434,7 @@ in
                     chain forward {
                       iifname { wan, $ixps } oifname base jump filter-routing
                       oifname $ixps jump ixp
-                      oifname as211024 accept
+                      oifname { as211024, kelder } accept
                     }
                     chain output {
                       oifname ifog ether type != vlan reject
diff --git a/nixos/boxes/colony/vms/estuary/dns.nix b/nixos/boxes/colony/vms/estuary/dns.nix
index 49df046..bba06d9 100644
--- a/nixos/boxes/colony/vms/estuary/dns.nix
+++ b/nixos/boxes/colony/vms/estuary/dns.nix
@@ -214,6 +214,8 @@ in
             valheim IN A ${assignments.internal.ipv4.address}
             valheim IN AAAA ${allAssignments.valheim-oci.internal.ipv6.address}
 
+            andrey-cust IN A ${allAssignments.kelder.estuary.ipv4.address}
+
             $TTL 3
             _acme-challenge IN LUA TXT @@FILE@@
 
diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
index 2e41e8b..ea0e3c0 100644
--- a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
@@ -172,14 +172,6 @@ in
                   dnsProvider = "cloudflare";
                   credentialsFile = config.age.secrets."middleman/cloudflare-credentials.conf".path;
                 };
-
-                "${lib.my.kelder.domain}" = {
-                  extraDomainNames = [
-                    "*.${lib.my.kelder.domain}"
-                  ];
-                  dnsProvider = "cloudflare";
-                  credentialsFile = config.age.secrets."middleman/cloudflare-credentials.conf".path;
-                };
               };
             };
           };
diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix b/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix
index 414ae90..4cacac7 100644
--- a/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix
@@ -45,8 +45,6 @@ let
     };
     "/.well-known/webfinger".return = "301 https://toot.nul.ie$request_uri";
   };
-
-  kelderUpstream = "http://${lib.my.kelder.start.vpn.v4}2:80";
 in
 {
   my = {
@@ -370,39 +368,6 @@ in
         };
         useACMEHost = lib.my.pubDomain;
       };
-
-      "torrents.${lib.my.kelder.domain}" = {
-        locations."/".proxyPass = kelderUpstream;
-        useACMEHost = lib.my.kelder.domain;
-      };
-      "jackett.${lib.my.kelder.domain}" = {
-        locations."/".proxyPass = kelderUpstream;
-        useACMEHost = lib.my.kelder.domain;
-      };
-      "radarr.${lib.my.kelder.domain}" = {
-        locations."/" = {
-          proxyPass = kelderUpstream;
-          proxyWebsockets = true;
-          extraConfig = lib.my.nginx.proxyHeaders;
-        };
-        useACMEHost = lib.my.kelder.domain;
-      };
-      "sonarr.${lib.my.kelder.domain}" = {
-        locations."/" = {
-          proxyPass = kelderUpstream;
-          proxyWebsockets = true;
-          extraConfig = lib.my.nginx.proxyHeaders;
-        };
-        useACMEHost = lib.my.kelder.domain;
-      };
-      "media.${lib.my.kelder.domain}" = {
-        locations."/" = {
-          proxyPass = kelderUpstream;
-          proxyWebsockets = true;
-          extraConfig = lib.my.nginx.proxyHeaders;
-        };
-        useACMEHost = lib.my.kelder.domain;
-      };
     };
 
     minio =
diff --git a/nixos/boxes/kelder/containers/acquisition/default.nix b/nixos/boxes/kelder/containers/acquisition/default.nix
index d75064c..85d9715 100644
--- a/nixos/boxes/kelder/containers/acquisition/default.nix
+++ b/nixos/boxes/kelder/containers/acquisition/default.nix
@@ -1,4 +1,9 @@
-{ lib, ... }: {
+{ lib, ... }:
+let
+  inherit (lib.my) net;
+  inherit (lib.my.kelder) domain prefixes;
+in
+{
   nixos.systems.kelder-acquisition = {
     system = "x86_64-linux";
     nixpkgs = "mine";
@@ -6,8 +11,8 @@
     assignments = {
       internal = {
         name = "acquisition-ctr";
-        domain = lib.my.kelder.domain;
-        ipv4.address = "${lib.my.kelder.start.ctrs.v4}2";
+        inherit domain;
+        ipv4.address = net.cidr.host 2 prefixes.ctrs.v4;
       };
     };
 
diff --git a/nixos/boxes/kelder/default.nix b/nixos/boxes/kelder/default.nix
index 0eb5b4a..6e19501 100644
--- a/nixos/boxes/kelder/default.nix
+++ b/nixos/boxes/kelder/default.nix
@@ -1,4 +1,9 @@
-{ lib, ... }: {
+{ lib, ... }:
+let
+  inherit (lib.my) net;
+  inherit (lib.my.kelder) domain prefixes;
+in
+{
   imports = [ ./containers ];
 
   nixos.systems.kelder = {
@@ -7,11 +12,18 @@
     home-manager = "mine";
 
     assignments = {
+      estuary = {
+        ipv4 ={
+          address = net.cidr.host 0 lib.my.colony.prefixes.vip2;
+          mask = 32;
+          gateway = null;
+        };
+      };
       ctrs = {
         name = "kelder-ctrs";
-        domain = lib.my.kelder.domain;
+        inherit domain;
         ipv4 = {
-          address = "${lib.my.kelder.start.ctrs.v4}1";
+          address = net.cidr.host 1 prefixes.ctrs.v4;
           gateway = null;
         };
       };
@@ -153,10 +165,12 @@
                 ];
                 "95-estuary" = {
                   matchConfig.Name = "estuary";
-                  address = [ "${lib.my.kelder.start.vpn.v4}2/30" ];
+                  address = with assignments.estuary; [
+                    (with ipv4; "${address}/${toString mask}")
+                  ];
                   routingPolicyRules = map (r: { routingPolicyRuleConfig = r; }) [
                     {
-                      From = "${lib.my.kelder.start.vpn.v4}2";
+                      From = assignments.estuary.ipv4.address;
                       Table = vpnTable;
                       Priority = 100;
                     }
diff --git a/nixos/boxes/kelder/nginx.nix b/nixos/boxes/kelder/nginx.nix
index 1d5eb21..3d7214b 100644
--- a/nixos/boxes/kelder/nginx.nix
+++ b/nixos/boxes/kelder/nginx.nix
@@ -1,6 +1,7 @@
 { lib, pkgs, config, allAssignments, ... }:
 let
-  inherit (lib) mkMerge mkIf;
+  inherit (builtins) mapAttrs;
+  inherit (lib) mkMerge mkIf mkDefault;
 in
 {
   config = {
@@ -10,6 +11,15 @@ in
           owner = "nginx";
           group = "nginx";
         };
+        "dhparams.pem" = {
+          owner = "acme";
+          group = "acme";
+          mode = "440";
+        };
+        "kelder/cloudflare-credentials.conf" = {
+          owner = "acme";
+          group = "acme";
+        };
       };
 
       firewall = {
@@ -17,6 +27,31 @@ in
       };
     };
 
+    security.acme = {
+      acceptTerms = true;
+      defaults = {
+        email = "dev@nul.ie";
+        server = "https://acme-v02.api.letsencrypt.org/directory";
+        reloadServices = [ "nginx" ];
+        dnsResolver = "8.8.8.8";
+      };
+      certs = {
+        "${lib.my.kelder.domain}" = {
+          extraDomainNames = [
+            "*.${lib.my.kelder.domain}"
+          ];
+          dnsProvider = "cloudflare";
+          credentialsFile = config.age.secrets."kelder/cloudflare-credentials.conf".path;
+        };
+      };
+    };
+
+    users = {
+      users = {
+        nginx.extraGroups = [ "acme" ];
+      };
+    };
+
     services = {
       nginx = {
         enable = true;
@@ -25,6 +60,7 @@ in
         recommendedTlsSettings = true;
         clientMaxBodySize = "0";
         serverTokens = true;
+        sslDhparam = config.age.secrets."dhparams.pem".path;
 
         # Based on recommended*Settings, but probably better to be explicit about these
         appendHttpConfig = ''
@@ -79,58 +115,61 @@ in
             c
           ];
           acquisition = "http://${allAssignments.kelder-acquisition.internal.ipv4.address}";
+          hosts = {
+            "_" = {
+              default = true;
+              forceSSL = true;
+              onlySSL = false;
+              locations = {
+                "/".root = "${pkgs.nginx}/html";
+              };
+            };
+
+            "media.${lib.my.kelder.domain}" = {
+              locations = {
+                "/".proxyPass = "${acquisition}:8096";
+                "= /".return = "302 $scheme://$host/web/";
+                "= /web/".proxyPass = "${acquisition}:8096/web/index.html";
+                "/socket" = {
+                  proxyPass = "${acquisition}:8096/socket";
+                  proxyWebsockets = true;
+                  extraConfig = lib.my.nginx.proxyHeaders;
+                };
+              };
+            };
+            "torrents.${lib.my.kelder.domain}" = withAuth {
+              locations."/".proxyPass = "${acquisition}:9091";
+            };
+            "jackett.${lib.my.kelder.domain}" = withAuth {
+              locations."/".proxyPass = "${acquisition}:9117";
+            };
+            "radarr.${lib.my.kelder.domain}" = withAuth {
+              locations."/" = {
+                proxyPass = "${acquisition}:7878";
+                proxyWebsockets = true;
+                extraConfig = lib.my.nginx.proxyHeaders;
+              };
+            };
+            "sonarr.${lib.my.kelder.domain}" = withAuth {
+              locations."/" = {
+                proxyPass = "${acquisition}:8989";
+                proxyWebsockets = true;
+                extraConfig = lib.my.nginx.proxyHeaders;
+              };
+            };
+          };
+
+          defaultsFor = mapAttrs (n: _: {
+            onlySSL = mkDefault true;
+            useACMEHost = mkDefault "${config.networking.domain}";
+            kTLS = mkDefault true;
+            http2 = mkDefault true;
+          });
         in
-        {
-          "_" = {
-            default = true;
-            locations = {
-              "= /".root = "${pkgs.nginx}/html";
-
-              "~ /media/?".return = "302 $scheme://$host/web/";
-              "= /web/".proxyPass = "${acquisition}:8096/web/index.html";
-              "/socket" = {
-                proxyPass = "${acquisition}:8096/socket";
-                proxyWebsockets = true;
-                extraConfig = lib.my.nginx.proxyHeaders;
-              };
-
-              "/".proxyPass = "${acquisition}:8096";
-            };
-          };
-
-          "media.${lib.my.kelder.domain}" = {
-            locations = {
-              "/".proxyPass = "${acquisition}:8096";
-              "= /".return = "302 $scheme://$host/web/";
-              "= /web/".proxyPass = "${acquisition}:8096/web/index.html";
-              "/socket" = {
-                proxyPass = "${acquisition}:8096/socket";
-                proxyWebsockets = true;
-                extraConfig = lib.my.nginx.proxyHeaders;
-              };
-            };
-          };
-          "torrents.${lib.my.kelder.domain}" = withAuth {
-            locations."/".proxyPass = "${acquisition}:9091";
-          };
-          "jackett.${lib.my.kelder.domain}" = withAuth {
-            locations."/".proxyPass = "${acquisition}:9117";
-          };
-          "radarr.${lib.my.kelder.domain}" = withAuth {
-            locations."/" = {
-              proxyPass = "${acquisition}:7878";
-              proxyWebsockets = true;
-              extraConfig = lib.my.nginx.proxyHeaders;
-            };
-          };
-          "sonarr.${lib.my.kelder.domain}" = withAuth {
-            locations."/" = {
-              proxyPass = "${acquisition}:8989";
-              proxyWebsockets = true;
-              extraConfig = lib.my.nginx.proxyHeaders;
-            };
-          };
-        };
+        mkMerge [
+          hosts
+          (defaultsFor hosts)
+        ];
       };
     };
   };
diff --git a/secrets/chatterbox/nul.ie.signing.key.age b/secrets/chatterbox/nul.ie.signing.key.age
index 2d794de..fdd28d7 100644
--- a/secrets/chatterbox/nul.ie.signing.key.age
+++ b/secrets/chatterbox/nul.ie.signing.key.age
@@ -1,13 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFpCM2U2USBzb0dz
-WUZWdWVnb2RqMlU0UmlRaUlpQXZGYU02ODNyQW5yb1FZL080TENnCnN4TDFxQ0Vq
-eDhENk11NkJGaVJxcmNpNDQ0RDdITmgzMjd6U1ZNdmpNcXMKLT4gWDI1NTE5IEhR
-L2sxYktBNGRndVAxaEpVWmF4NGo3ZnBxcC9xTk9MU0FNbUNTb1VqaFEKM0RpdXZv
-VkR6R25rdWM4MGpheFVrRzFXREw4QnlKVkh4OVdqU3ZRd1pOcwotPiAiIi1ncmVh
-c2UgZXB9cSB5d09uVmBkYSB4IgppT0drQkhoeUxxS3BRRk5ESDh6bXgzU0lPZHQ2
-N0xhSGlQdmhUTk1NUWttcHNHWVJOSzd5RURQa20zcG42dEZrCnp5d1ZYeXpOdnQ2
-VFUzMEovM0UKLS0tIE5KS2ZrcW1MQjA2WmUrRjYzbEo1VGpQVjV0TTFGT3lIMVc5
-bE9PaTQxYzgK5NER3DWdaq8ESmVHzRb0QR8RmN1tdUMtUaa3PJX8tZFhw8EDddQr
-BHif7Yf3Ip8QVIr3IL9QV93DTE4AlgI5ybJ6u84sez1SgVIQdHUWLedrkRIZPH5C
-My61+Q==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/chatterbox/synapse.yaml.age b/secrets/chatterbox/synapse.yaml.age
index 1407f03..39c8510 100644
--- a/secrets/chatterbox/synapse.yaml.age
+++ b/secrets/chatterbox/synapse.yaml.age
@@ -1,24 +1,24 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFpCM2U2USBmeEZ4
-NlhaTHVFY25BbTdUVThYVjFvb1dBdmUyRVJhclJEWXFSbklrakdvClorbnZ5V1pL
-Yi82Y2t4akI3UlNXbldnZ1l0TzNwcStFY3JXemVXaExpNk0KLT4gWDI1NTE5IGtv
-K0l3WHl5aXY2b1RySzJscnhZYnorb3BjNFM3WDhxN1RETVpZeTAwVWcKdHdSUjBL
-L2txS0VpNWVoM1BET25TRTNEYkpCK3VqTE5PZjhWakhacHkyOAotPiBfLWdyZWFz
-ZQpQNFNoZXYwSWtaV1pLUGJxWGM3Y3FyV3FkS202ZHZrU1lOSmRjTW56T091cXR0
-Y1MwZWQ4bHcKLS0tIEhkcG9DRitpWDl2VkpWM3YrbExWMVFrMGFqc3pjUVNmd1JK
-NDVCelNTeTQKbjaXilXK+ugzVQxDcvcMGTpZCWB56iGrsmjSpU2NHl4V5qu4ihuC
-urPKk+It7pkNW/0JREyrbNjs+z0O7AsTDTikDGU/rBX9qXumi3aJcqPMc6vXj9iv
-wuP9LmoA6Pq/ZFxzEd/duR0eOsQ1WXucKfp2ZfslPedx7hS29WbKJIg95Ar11UKk
-Ky4slBE1jUVu1QYsWMOz3SzBLOWZ83hMJauqFEPazezL7Du6HnzieKEDYr5Kxz3Z
-a649tOo+nvXQ2WiX4bXKXfEcLeCHz0QvYinLCYs5/aYtFake0KF/acGZSe5iLjO9
-w6CTzvhhnmIwzElQuX0FfwU5WzpM/ONs71AWIHQut/QV7mprcEFLYXun2GXH5+S3
-EOEh3uWw21rOHVfg9gYqdZazqkZU9IrEYvuOaVlW/dv7nk7MlB8cM0VYGzYYijX6
-UWP0fRMcZ+brNW7eRhxMRDmjtChjqtj4cURDTZYOciZTzTiCxVYLBGAs7xqWr3ZG
-mb+AE6M9kFSxsddjMxCrgPiOyu/cqazZmvvlfFAKqdog/U5DuSg3HxbglMQPAGlE
-m5J6nSoVOoNJvfO6xHpMJsEKee8ZEuXMKckaY3t56+MPk+fWugXJcj/X1FLKbIwQ
-FEQHNgIcriJ32egNpjHMxreRV7Zqy3TVcWrvdiURDLJ67WgSjdO8Rh+Nb4b7re4T
-F1YPhL8zlVekx0qX5/2qdpMVc072606rjt/Noj5NVbFiEynW5DzfUL7sy+t9TCyP
-NOnPw1r8bRT0tz8gnGb4arLC8FzNzuoyLMbebiYYoCXC6YffqfyezsBttt9gChGz
-dxhe1cAZuLAuHk/vvn3U9jF2i9lbnfyO5T4GRBfAg8tLo+yKRBbOfITFJxCYjavy
-siQZ3GxiQ9ismt7iTHzf4TRqONhbkPvOCeEObgokZlxzsqHb+AdIM9AJs1Pe
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFpCM2U2USBtaDhj
+RzdGSEtVQ0JvQ1VOQXVwNHJSUUswQit3TzA4Z2E2SVBmVWM0RFNNCkRmNVVzcjAx
+bXRDQm55c0Q3K0pDS1A3cWRlcGpvWEQrY2NTemlBVFZoTFEKLT4gWDI1NTE5IHhx
+SkVEQ3liY0dQV0gzTHF4OWQrL1JTajhvVlFDZ1EvaXV2dWQvUEtuaUkKbXppK3FJ
+Y1FTbncrRjJidzhINkZxNEtjRThRa3JFRHZFRTlIeXB0QktnawotPiBFQCd3Kk1N
+LWdyZWFzZSBNIHZSJ3xXXCBxYkMgOFw4eApnYWphTnBnU2srR1lsSU5xYlZmQ25s
+N2pEVFEKLS0tIGFFQmJoQnphcTFva3RrdXJPOVJlYi8ybmFIdTBqVXNHM1IyY1Bn
+UXVoZkEKMUNGrZKVybn462ji7b2syA3gCT7CU5ldQ12ro7HMkck14K9sxiHj4bNi
+vBPWsoHKGUsQvdkflEN2G3OlWI86snSmOq2xD4M9Ml4BQgbpy8wA4JQp+RsyBOR+
+89npPRhiSafJSg9IbSc02+dgiz0xHz8E3TwgaRYOBxWWzZnFZNGBS3s5fN+FjAUg
+K8wWsXNJmJnr1/co1/Bhq73gZimTXnbHZOdxcikgSKMaKxjF4MLIG/yskliHTFPA
+rAkQ1YHu8BDfk7TR1VZhbjvHoxYRHZbg4Mv/U1ko+2R2XH3VrNQK4ibFka6Jq9NM
+jAidgXNkNZL/B+EWHLhWUdYoUsg0zEfLby0aL7Rqju+7IA9InTAI56JTMao5RsIP
+aCjAT3+Fi+HvSBqM2Fd4saCK1I8+XSzB7yA3Y6v2QASqFiuDeE2DzhduslNZBAEg
+Uc0tQ5paKNoGsZcGM7C7Xb55pF3AJJcPqgSGy/wV/NdvfqeHBd+N2cRFS5bxLlsK
+safKWISlKWEDNlHREmvhPBhL4lD/ql0Ks2XVIsY4oXfoxZJ853jN07WIz7lS+Jnh
+2tL92Efg5Z2Bf7RSAD3xo4d+hov4LuDyM3VJSV1Yb7x24TAk/Decl6bMJ2pZ079Y
+aFHdYFc2lNcDYz3cIi5erN0zv77LhATXXYZEq0BVrztvsFSe0l5SvvtD0sxNRD8d
+87hZlTE+oxS/MRg7Rniz0WL8wVYn3zpZ/3JHm4XrquMx0wjWwakdCR75aGf0R/QQ
+FJBy1+hpGdh7BdvPl3WlJVntnyrVvSm5/U35TXX2BbX393JkEp2Bzqoky5TgbBU0
+jN9dbZe9jhknpBBqKYxKPYiFQRBy/pi+rn81C0NZ6j1/9lJB1RHIGQ8oJ5GrMNbC
+syDhM2rYCYnYch5qNwGf5GPT5ceGyf+WUVp2pAj5iKjBXSqyBdxUaGd8
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/colony/borg-pass.txt.age b/secrets/colony/borg-pass.txt.age
index 13e23a5..e6532e6 100644
--- a/secrets/colony/borg-pass.txt.age
+++ b/secrets/colony/borg-pass.txt.age
@@ -1,13 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGo2N0ZYUSBzaWpR
-ZGs2STgxMDdueC9Tbm4vbkFyUXZyZVovMlo3ZnRlUFlrc2k0aW5jCkZteGs3V3hv
-UTFBRHV2cDFFc2Y1YlAvTUFUSGpyRzVjTDBkSTFJWHg4UVUKLT4gWDI1NTE5IGZu
-QVp2ZlBVQ2lmSDczN1Vrc21FUTZhK25MKzRDSkhjWW42ZVgvRHJTMGMKeUtJcklo
-SCtYTXd6cEtyUCtiekZxWmFmU1BzZW5CRlM4ZXN2dDlFbktmNAotPiAsJi1ncmVh
-c2UgLiJ7IDk0UT1nIC0yLE5GJSBqV00KT29zZ2psUi9PZ28wY3FLUTMraXJFV2Vy
-MnJkVEt2NnRyR3lPQndEQWJGRHptU0lKbE5tVHNoSDkzMXdLK3ZZWgozRUhCa044
-Zy9ReWxBaWVGWjE2U3U5V0RxUnNMSU9TSFgxSFpOVG5iK1B6bTFNQ3lHQQotLS0g
-WWlEWlREUUpVWmdaVHJLK0hIY3hvamNOS0lRL29TdUtHaHc2dmtZenlKOAowf9TV
-PYrbdDe1Blf3CYvHIRY5PC9CYk+fNwQi7dK6UtICrUW8UBnBiPy7FVPxAsH4MOTj
-LFlICTZ75+0MykDMGqjmzdnX4Nc59k0EqgvnxPURDQbdJZBuOeI/5eOMsZrC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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/dhparams.pem.age b/secrets/dhparams.pem.age
index 2ad1729..1cfda5f 100644
--- a/secrets/dhparams.pem.age
+++ b/secrets/dhparams.pem.age
@@ -1,26 +1,30 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZGY3c1ZyA2TWpU
-L2ViZDk2cytDcXVFSnFWM0lzaWFZZ09DL2x4Ymg5MVYrVGprTDA4ClVNc0U2eVVF
-cURSR0JoMFJuQnRxWU1tRDd5b0JtNjVzeS85ZTNUdkNNMkUKLT4gWDI1NTE5IFNO
-cUxiTUdoaG5YYkFZQTNVRmYvdjlaOXpLdkV5KzA3TzJuZ3o2SlRnbHcKSXpXS2JX
-Uk5ubDQraE1QbFRqYlJXbHNGYmZHTjhrRmNzM3BybkxFeHhkTQotPiB9dGtcRC1n
-cmVhc2UgOiJqRwpUaDVJCi0tLSBZMzA4R0VZTThRbitYaUZRQmt1bHZudFFGVXdK
-UVhySFlFc0ZKV252aGkwCqq3kRmldX71qj+xeF+0OlZ3k37BoxUk55+TivtjZrGS
-iYOeuwl2qXkyQ4JGGRKvqYsX/38wSDQce8noV7qv+2B3/s9Bv2623e5rXIw9Axx1
-E6a5XJEkHK3y7krORd63WVS01jaZ3Dn8rIIqIPWAtLTzzTTbvg/vtLtaB/DcMJ/v
-q3HQY2jBQp41db9mWpRvVMscrBilS1xoNiwPY7vxCpK3fRA51WrBZBV0uYZBKA1/
-3UiIOkGyUbBEittxeTx+CFRViYo0eQvhcKK9w4VPPUSU6DEE+nFfzS3VJ6WtN4lj
-+ppWEZibjl0F7uPOXlwvcKkae8Lbsf6JrpGlolmBDjoeWB/3rW+4Wo45bthLqwe6
-DmdBa9Nawvq1sdfjqjyJYLig3q/UjF8azldRHSy8AEYBg1XCvyq0MnxRSQggut+L
-oN53dI/HlZYiVlZIKAECeGGQji9GEUzydKNAXBb8zyirrL7urv0AQT+gNPvemoiy
-emmXlx1fcOYt+En9hEOCYv6ZjAeWW0/b+y9avFMNWWhf53YvY3/AnQLwUXR6IuKp
-Kg0hrHFkbXcCkmizpGykiXE/GP+Y4/pecg3l4Eze8bJtCw46k9VE3rVIXbJworm9
-WZ8c5lmODC4wsjG3/c1NAoQd/Y9QSPv9ea51nocP9UF500kC22JUrr0EJY8gFSzu
-JIyumSBVQRfXtl1FNeyFWEopieO632LRSy808AiIHRQL18oo3Hdc3yLtqlaTVfAl
-898/pSIg8VQXkRM1gL6GOhYoUeZLAbx0ypjo6Ld5pZ97IXMsFShDQDwlxx3sBOZM
-iQDKKxT33aq83fTvbZHbiF/84Hg+cmJmE8y0+/b8x8A1Pull/OiHZ5BiCU+UW+/e
-rmvcCyL0kuZoo487tVYCZEmOEdKz71qG3aleMrKJc+ygEAURGOBIYWEBJFXhFOvK
-UEAEMJyXwEiuQDkLV1uBS+o/sEmltH5Xytr7isuaPgI4xoMIJMjuZfbtmXoJNlYp
-vepxqMLZNnYc6+Vg5TGg2OHu5BzKj/7eBGmNrRMp2XjpCWtyemB+cBTwUjM9jFvM
-qQ==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/estuary/kelder-wg.key.age b/secrets/estuary/kelder-wg.key.age
index 93a5119..852e0f3 100644
--- a/secrets/estuary/kelder-wg.key.age
+++ b/secrets/estuary/kelder-wg.key.age
@@ -1,11 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBvYXFt
-eWhuL1FkVW4vWnhmOWZlTUlVdTBML0ZzbjBqT1BvaEJYd2tpTFNBCkJzQ04vay95
-SzdHaDViMjZyMGNQZXJQZHJhem44NmxWWUFoOFdpVGlGaFUKLT4gWDI1NTE5IFpL
-TG9ia1NFY2Q4NmFQejUyeTlpdVhNelZYWXp0bkRzWEQ0T1puT1pMRm8KM0ZiRm11
-cFZsUE5ZeHRsNEtoU1FLM2tOanM4OE9LRHo3eTd5YlNYOUUxNAotPiBjLWdyZWFz
-ZSAiWXxiZEggUFB+Ij0/RSBrfiZtSG9gTgo3cVpYbjh4Z0xpTHhwcnFlRVJLK1lI
-OVhzeDdIcGcKLS0tIDRLNWZzOUN6R3ZPL1U1ajFkdGptMnlVMGJxUEtwVk5sZWlv
-TTUzcVY1UFEKBfX2d4c09v/4Yd7uFWc4YHzLvfEIRKEC9MERsZkSV3+N3HjYHleY
-oBN760QIpZEqxehG0xprLbylnEPBxi3KkNSFMHdQc6xjrrxgE8o=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/estuary/netdata/powerdns.conf.age b/secrets/estuary/netdata/powerdns.conf.age
index 8293ab6..5071582 100644
--- a/secrets/estuary/netdata/powerdns.conf.age
+++ b/secrets/estuary/netdata/powerdns.conf.age
@@ -1,12 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBHR29x
-dUIzQ3ZuUDBRdEloK200RTlJbk9ESUVoUWxUaFlEeStNNWZqbFdnCk04ZE1EcE1a
-cVJVTVNSUTNlQitwZndWc1pSSm05SmMvKzhDTGRzWlRNMVEKLT4gWDI1NTE5IEJm
-anNXblBqMzJWWndBZy9leUprNENudDZmMHY2czQvTktTMG10NVBPakUKZUo2SFVt
-NjFFbktPMnMzNUNqbEJQL245Vyt6UlBQdWFrZXVXL3RDazVtOAotPiB+LWdyZWFz
-ZSB5MENiQgpoTlRoaVBiaXNDYy9GQXdWUCtwNTlkTU8KLS0tIHF5elRDeGFoR09L
-OEJoSVJjYkFFUU5Nc1VoNVJQTFgyMzhoM3hXSTZzc3cKoJJ44bRdYWIJJ2ddK6+j
-Z0B+v7P6MarUL/3Me7j2WZh4bUAs2Z29OtEDh9tY0fVsKszs/Dvln9OHBp1gMxQg
-tQlIMh8QMCpOOn+Mgq7PwQPM7jcXv6RUT13vt+KTkZ9A8fhdwRVy+OCjdTwNTC//
-ahi6nPCADDtsmVJA1bXDHdE54nDcLZtzXmqfRrQ3HKAGXSPA9Q==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/estuary/netdata/powerdns_recursor.conf.age b/secrets/estuary/netdata/powerdns_recursor.conf.age
index 81a9c52..3bcd83d 100644
--- a/secrets/estuary/netdata/powerdns_recursor.conf.age
+++ b/secrets/estuary/netdata/powerdns_recursor.conf.age
@@ -1,12 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBBVHhO
-ZCttQlpqSVBWcWprV0lqMjAzUnJWT2RidkJEazB1eGovaWNHNUJjCnJKRnpGN25h
-c3dIYURCekFnZTFvT2VqaXFoOStib2wxOXQrbzhrMnJXbXcKLT4gWDI1NTE5IEV3
-WXBKcHV6WkNnR01UTjV6WGtSVXFRUDRsMHd5MkJDODlhNFN0Y3dFVDAKaGpWWXNH
-V01jNlFUcXZMUWxNeVVRcGpjQ0w3eFhHT0d1em50YmFRdnc5NAotPiBDVD45LWdy
-ZWFzZSBOID53SXpXaSA1c3kge0xkIwpGZWdmSE9OOGg0UTJyT00KLS0tIHdzeU1s
-cjl1S29TRnNwVU9meEE0dG5xOTExVHViYVBMVXVNY2F5N1NJWm8K58iGhhV0S7UH
-9kJBKzxjVWTRoeT9Cio6Ar/XrgIQUN5VfMhcE/874Jna0BVFYMMpa7hQJt1xfEpM
-neho37pyShHBEke7q7/+IXBnwK73ZOYHvXCzV3kD+f/6HgFRqqu21ZkC4LgTL5XQ
-ygEQRMyLqUSZqGsXP/bxu1HH53OvTpXslxy8MqBBJwsUtUP4+wWjR27VrQ==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/estuary/pdns/auth.conf.age b/secrets/estuary/pdns/auth.conf.age
index c77ae28..092ad8c 100644
--- a/secrets/estuary/pdns/auth.conf.age
+++ b/secrets/estuary/pdns/auth.conf.age
@@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBsWnZD
-aFErL3ZpdTlYTndKcUloTkppeFkyc005VCtlbERHYlQ2SEhvTlZZCkdhZlNzZ2RX
-V1lxZkNiU0dyZkppZUR4b0ZYelZnT2VuUmtNTkJXcU9VV2MKLT4gWDI1NTE5IENo
-cm1pMVY1cE93SnpDOHdUbmtVaS9vSUJTMFkzLzhMaDBzVXVXKzM3M3MKWjE1TWRJ
-TS9nSVpaVGhRZTB2MUp3eGJlQ2RuaEQ0a1lFOEFOY0s2a0JCdwotPiBNPTBXei1n
-cmVhc2UKcVBZY0JYVVcrU2FyQ2MyWE8zeUlLZmxGQXVnQURFeE0KLS0tIE5jMThD
-TlRuNHY3dTJzM25aMVArT3ZEMzVjSDYzeElzN3ZnQzdRNEtNT1EKEikrZE0LFFGW
-EIZrV5YkOS9AgV+yx+5jEaEx66QaACKXaPiizeT23w+mXpYdWG52b4uLMyrnx8Xf
-g1NNT8XKVRyl0ums5E2lqd+q
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyB4UUlv
+K2dxbXM5MXI0RlhvbEZTOW1QeGVQMzlacTQ3VEh6V2JKQ2tzNUNZCkw4MmY3eW5U
+K3kyL2grRDdyenAyNGZyYzQ5M254bklvWXlkcDYzZHZIMVUKLT4gWDI1NTE5IFN0
+b3RsY2J2Y1Uvd1Q1MjYydk1LQ2c4VEZVeGsxdFpYTzZ5TTFtUndpak0KSGg0cnk0
+YWwvSnY1eUM1YnV5cjNJNFh6Z2FuK1UzWHdBajFYQ20yOU1CWQotPiBOWEotZ3Jl
+YXNlCnVwZEtCYjNZRlBiRVJMUTB5Y1ROMUt3YzQrVFdGaDZHNFVkamo5SEN4cHcK
+LS0tIGdWZDh1U0pYd2ZPMFJQdHRxdCtmSzlOaUxzb0lwTkxyQTZ5VzVxL1BhWE0K
+Tg8J8hWi+2uJxCoNvyP4Oy1fLwQONQfPIzMtmrg0e4JvJaJ4dNT3wOXo5qOjhvR4
+uzKYV8OgqnVR/gWLfJ3Ho1jg2VmvM0Ddi3v/
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/estuary/pdns/recursor.conf.age b/secrets/estuary/pdns/recursor.conf.age
index 2be3600..407fde5 100644
--- a/secrets/estuary/pdns/recursor.conf.age
+++ b/secrets/estuary/pdns/recursor.conf.age
@@ -1,12 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyB0bUtM
-OFo5V0ZGemU5YmNEQU85a05yK3hzMEUxRGFHSTJTRkFjVzN2OUdBClY0aXE5aGdu
-eWZ6RmU5ZGRlN0pSaW4xL05hWXUwc1htYy90WVhuMGZEYjgKLT4gWDI1NTE5IFd1
-NVVpaXNsZCtaSlZkTUN1b3NJT29CMFY5TVBRenlRTitUajhYOUlyVTQKbEJqbUVB
-TmhDMlZlNC9wcXN1c0kvZW1IWk51Uks5RUZzeHBGUGdHd1U1RQotPiByIig5P1JQ
-Yi1ncmVhc2UgfT8gfC0wIG1yJy1NXXx6Cm4vSVQ3UU9PRzgzMVNVTXZwbFpvdytr
-WU1DUXdmanVpTzNPWVJPTWRzWmI5OVBYbXJqWUJrSGxzM1EyS3p2ZEEKdlhza0hl
-bms5WG1Yamlab0dMRQotLS0gWXE2VmhWb1VhRG1BOVFUZTlhM2RGck9lZXRKV2hT
-R2Ztbk81RUFUanhHRQpWHjKGB9CwAWNId59nC4lFZKTXBbhsaCL9jwLJ6/uJoql2
-ovCiHzXI/xJZ7El07QrwPfb9Gy9hsFu8FPGGn2acfWc5f0javGj42Ds=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=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/hercules/aws-credentials.ini.age b/secrets/hercules/aws-credentials.ini.age
index 8c3b08b..cead928 100644
--- a/secrets/hercules/aws-credentials.ini.age
+++ b/secrets/hercules/aws-credentials.ini.age
@@ -1,13 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyA4SWQx
-WTNObTlOSUFLM3JGRFF2ZU5tcWlSWUlvWlZJci9jTDY2U3NKODFVCnppZ3YvZWpv
-NGtPYUlVbWVTMnhpVTE3am8zeTUvTkQzRjAvWXhkYjZFMWsKLT4gWDI1NTE5IDVO
-OFdtSmJPeXVXdU9jRXV6YzZmNmcwNHB0MHZaZmxwS2JxY0FkZnQ0bU0KU3BZS0dY
-RDZFVllFakJWZ0Jybzk4Z002d0hxMTI3V2ZuOHJLc2NrT1RYMAotPiA5W1pIRSUt
-Z3JlYXNlIHNwISBUX1deOFBTUCBjbT4KdzhyUFlXZEt3WDZtQW1kb1YycEg0QmQ2
-ZG9HSUhJZktGcUFUSncwcFY2ZDdBWUpHUmcKLS0tIGxjZEs2bENPMWkrWGk0Um5R
-Q3k0MStYbW9uMzZHMWZqMHRGWWdPSXFlUW8KibwES+E438c36xJmpLnpHvGOCBS/
-Y0X/DmzG12N4iziRH2aVGTx60nybA+YrnL6SPiLJ3EF8i/g4BFGJFdP1q5qTzujr
-m9yNW0c9Ee5aeGUBV6YfutL5aNEi62Mb4m+wZnSqFI51R7hGY9iZGUYlxpaZuN3t
-GZ1PhL4tTfXwe74=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyBheDBK
+Q29yNkhqWWVWYkhZRWtSYzV3NFM4QjR6RFk0ekF6eWVGSnJzV0dvCnlWTjRrSTdG
+cC9oanIwNmNWM3R1dGEzQTgwTm9RLzNMUitnbURDWkRLcXMKLT4gWDI1NTE5ICt1
+ekhWREdZYVI4R3dIZXhwRlk5RHc1QkM3T2VhWHhQcGtjZlJKeVZBa2cKK1FPVit4
+aXBzc2wrdDFWSmdid2hHT1BBdDMzcmNtUTBrTlpTZzB0cVdpawotPiAnRzc0T1Yl
+Pi1ncmVhc2UgdTwiKnIgYWVmVwo5ZVhFSEhCZkRWTVg4amEwWjJIbkNpNWlna2gy
+L3l6VDVaTStTdGVpRGJTcGJ2RFlqTURJdkJZeHJoa29UZ1dpClFaM0c1UlQxRDVu
+SWdINUpOa3BSOG1vQlBVQWFKV1RkNjlNQWtVUDRvcmR0ZlJ4ZC9CZlZFdVBsTGcK
+LS0tIERaT25EV2g4UGV6KzlTbHFRcmRlaHJHd0pNaThBdGNUeFJCM21QUit0WHcK
+90JM8qKq2sRdd8HvOp88SHq85/f+reiXVRJZKzZP3WaMZec2/8EuKFbwrLqIChzR
+iAeN/GQD2Cy50kLvEo4R8Lp5jX0RTUNMw7StML9kY61NiZPhYxYNYDCuF9wJNx5S
+w8O/RUl9wihZuBAs8wrWNrLmOQWEWlwwEOMnPwCjZjs=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/hercules/binary-caches.json.age b/secrets/hercules/binary-caches.json.age
index a02025f..5961337 100644
--- a/secrets/hercules/binary-caches.json.age
+++ b/secrets/hercules/binary-caches.json.age
@@ -1,19 +1,20 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyBNTzEr
-WjN1NnhsWk1YTWE2a1VvVWd6TTZtZnhPMkFEdm9qZ1duQWI3TUhJCk9ISFBvWlhZ
-czdRaVpzdzdWQTFnUDZNQ2szNnc1TzB1QjY4aFdxa0RyajAKLT4gWDI1NTE5IFdV
-ZlFoYVNyUFZUWXJ0SG5DaUlIVDNudjFRZmxnSzR6T1BKNWZSaHY1U1UKVC83dzZu
-d2w2K1YzaXVVM0dycXA1a0h5L3BSc1dEVGhLY3l1WmQwS0NIawotPiBVeWxJUnlk
-bC1ncmVhc2UgQDZhWCUyfTsgfSM+SHlEV0cgPEc5fDF0CjZHQTdNRHUvZnpRZCta
-aU14b3RUMXlrcEFiQlhuZ3V4TUY2UTNyNGRwUlhQZzZvSDRNZDc4ZHZ3ZXcKLS0t
-IDBldzhiMHU0SFhialU1NFZ5UmN0L0JYSTQyLzlZRlRpaXJReFhqeUx2RFUKhLkh
-uo+iBm0vk40kVIXUNS2Mfcgud7OqjeZ3IjeL4b3zCn2K4Rxr2ZG6P0jUtOMoyr7S
-mZe+esqUVAbJNSqc0nzfO3Un8xqcVDoJHarLux8jKq+Bz1ukOVSptsQ176cj7Mdo
-31LGpmVkmuRTmvAgRyiFtNaJjLHktc03H2+rPfAeqDSI+q402Q+BebouLVP4MtBO
-uyfFnr/PxLgCr0uyCnJhYruFydZdDKNV1JOYufbWY11bRic1NfNDSChAaSuUqUWH
-LehSeJneox+jYPfkFGRQKdmPR/XJE1+SiB1W2UBffgcVsDIQ+VLCd96b7jXz9Kcf
-GEa1JZsW1s2Jj+Dl9wot27CBcf0tL7iCk0t8eJl1NUGY6qKzOqlczJFzkHu2lHit
-9QuPWgWHkNBJviT3sYPCyqBBoLRPSCcBE4XflCclYBud6B3KMzxzSLf2bu1pbLwj
-it5+J7adICTYq1BiEKOrBLHYtvxpwxQN70nTIPQG/wqrXSZYF380+xlLDBj7jrPs
-tYDn3wKJpYcvOH/EaTCv4+lY0nc2ud9hCseOCyYbdl2NAI4co4CtNI6Y6A5mDUXI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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/hercules/cluster-join-token.key.age b/secrets/hercules/cluster-join-token.key.age
index c44b6b8..22a8546 100644
--- a/secrets/hercules/cluster-join-token.key.age
+++ b/secrets/hercules/cluster-join-token.key.age
@@ -1,17 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyBia29N
-MmY5ZmxieWZ4VnFuN2VOZmExSkRRT1NLN0dqU0I4R3VKbGxVQUc0ClNVSEZ0UFMz
-UFFBMkZ2MnN4anoxNDJjRUZMeFVHUXpMRUs1NzFDRU5DRGcKLT4gWDI1NTE5IFJy
-SlZXTmxTTlBjY0RFZlp2MGR0NTd1c0xOU2F1UEkwM3pkR29CSVJKVWcKaFpXTEVI
-VG9BeGVoZG9uOWYxajNRWTVBOGYrU1h4OXYzRUZURHA1N0dSbwotPiAsI09jNTkt
-Z3JlYXNlIE8zbElDfTkgY25sXWp+MApmSkVsbDhXSmtUaDBIb1dxa0c5VEttNHI5
-VldIVDFON3AvRHRNcDhCL2E4K3ZXeWZicXRKTWJkY3d0Slp4WjBxCndMWGdmaXFB
-RWxVMXBBTnVCdi9xaEE2cnNrNGIrUm8rS1lCdGIwN3RpaFVrQnJIK1BuQQotLS0g
-RjJOb1RmOVhlSGQ4eU1lY2FHSzZIS01DY05ZOGVwK1BiakNXcWVFbWFSUQo3TNUg
-K3vD0DtZ8FQdrRAXobC7hVDe5AJXq9pDpHNizqPNRP3gbcznzkReHmFP+jFTVANz
-BFgNMb/HSX9ffI2s4AHIrBF/7576v90jNpK7gKPmaiv6gR9vZnxGBZphD2l43CDl
-q8/jygfQdTqFWw2ZberBaSOHmza8vgxhejE0cJXG1yakWP10hMcKyMKrnofNpjJB
-hrOTdknfS3JAZ16XYI8L1l1jgkUwL6z5+io/uoC3mHq38LimktzBVWEnG4sV9I2w
-tFzQV20hLyHm3y+FOL4ktrqrA3V+K4PNIigOtu5q7sGgzyEOexeT9nI7eEFC7AyK
-i1zuJPsMkjTw9v7bZOoW0ywgQnlaHHeE
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyBvNU1L
+L2xDdERaeUJTaXdxYnB2K2ZDdHh3S0UxdjYwcHhYcHpFVWdOaGlFCklYTG03LzFI
+dW1ZODQzYnIySHdKd05SaFZVeWpGRS9SUlFJc054b2NNNkEKLT4gWDI1NTE5IHVl
+cUwxc2dBZFNML3YveXJFUWF1bUZZcXJ1aUw3MUttZXQ2VW51RUoxWG8KMHB5NGFx
+QTR0SVJTakM0MWIxRnE3RnluT3YrQjJNMXVlMm84Z3BHV09NdwotPiBnLWdyZWFz
+ZSBiWVFkIGogKQpBMFovcWNBCi0tLSBoME0zaStMT3ZkZWF5Zkk2MVhHb0V3OTZh
+cU40UG9CZXFpUWhsK1o0YTBvCptlvABwro0uFuE7N1yszpFQuwoALFQZeYhfkWK2
+fKG6mqebCgo7FvRwEly7KosJ0WHQsQYQkf5Uc4YEMH1WkBqwTTcBsf3vCyv9F+1N
+pRxXF0sLGTDhYcZHbKlT16wwUphidkYIKKfBnSjX/d+i7Dojm+YP93XfumJ7PJZw
++nUELyTaunQhIcjX8D1swZo4tu+7D9N21jEt6ObyGd6b3IIr7Gs70HAZ6tvM/W3d
+tRJHpqotgPjp56/+x5g6nniLJdF47ITYvkjQW379e7G7qB4wtV9q5Z5qUcgsifbT
+JH+RP8xzEcr4XBK5PoXyFBTaii3ud+OP7JW2yoNcq49sXu9E6bHxxFzlyWMWH2s=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/jackflix/mullvad-privkey.age b/secrets/jackflix/mullvad-privkey.age
index fa9ad4f..dd2b1f1 100644
--- a/secrets/jackflix/mullvad-privkey.age
+++ b/secrets/jackflix/mullvad-privkey.age
@@ -1,12 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGhNYTRudyAyWVJI
-MWM4bmx6NE5adk9kRUtZUnl4R29BSnVOZUlVbllDM01EaUdnMTE4CnhRcVFFRllO
-U1JCb3NvRmlPZ2Y1R00rMS9xblgrMnBNdkExSVRJcURGNTgKLT4gWDI1NTE5IEhD
-T1RzaWtkWjZIaXpUZzNHZU1INWgvV1RuajlXQ2MvSFJJZm9oY3RSWEkKbGw1VlR1
-L0hBTlZBVk9HS2s3cFNKUGJZOFUwUFd1Um9vY1RiMXdhZUVHMAotPiBTLWdyZWFz
-ZQpEb01nbjhIWnVUYTB0QmRtZUIwT0VYcVRQK1ovc1Z3SCtucnZpWlE0WTRpNmN0
-WkZmdFZUNE5mKzY1SElmOTRsCncvMUhQc3J2RW1QbjBrVE5USDZYaVUvRjhlNGxT
-bDAzbk9QOE9RTXpaeDZCQ3cKLS0tICs4YjhVemhjVXpUbUsrTmM1RWJjOFl1YjFS
-MmdoMTUrZlpyTzVOcHcyUWsKlctqS5EB9vl76mVXiu34BNCV9kv6ujOZ+a2RPXoH
-eNA/MMjUNaZBGBefKSkQQ+4ib8cZ+drapnUOGC6citpFEJCV/QHpVKfp/tm+ECE=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/kelder/acquisition/mullvad-privkey.age b/secrets/kelder/acquisition/mullvad-privkey.age
index 9913155..5d49cfe 100644
--- a/secrets/kelder/acquisition/mullvad-privkey.age
+++ b/secrets/kelder/acquisition/mullvad-privkey.age
@@ -1,12 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDdXUTlQQSA2VGVE
-WUZaczJDVllpR0RUREVwdTcvSUQ4ZU44RUpUOFdDMUJHb3k0YWlJCmxwQmxabDB4
-VlRHcGdpaU9TVnU2Yk1BOTh6bVdZQmNHMFhZWjgvWDRTeGsKLT4gWDI1NTE5IFBB
-ODJRaHF6YkFhYXBBTHRvbUVzUUR5MlMzcFhqNWNiTXhoUmcwRFl1QWsKcU1YVm8y
-N1BMWXU5M09IV2tFcUNBaTc1dlgvRHBZREFVYktXZkE2VDcxOAotPiBALWdyZWFz
-ZSAsXjtweApBTzl0S3EzYkVPS0dBQTE3dmRjRkZJUWlTTzNud3N6TC9iMlJmZW5L
-cDd3WXNNazgzQnpVaUJBdy9EWWNEanMKLS0tIGpXdXFTR2svSXgwZ0ZkYTRZdWhD
-MU5QYjBjT2MvWXVXUXRmUURDZHNJWkUKAp2RHgrTk9CXeftTqUCSbWeQPdPWhwcI
-hbpqT3bmmtlrgnd5wMw6D+3N6OAuxWPmlIboDPHxE7oGBo5TYnfkytoblvAPKsSI
-kS/Vkhg=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/kelder/cloudflare-credentials.conf.age b/secrets/kelder/cloudflare-credentials.conf.age
new file mode 100644
index 0000000..da9158a
--- /dev/null
+++ b/secrets/kelder/cloudflare-credentials.conf.age
@@ -0,0 +1,15 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBxTUZP
+aFFkdmRYM29OOEswcW5ReEJvOGhWdG41Rmc1WXEwanhTMHU5cEVVCm96dCt4L09W
+NHY1Rlk1dU81dlp2NlU1QVU2NU1mYWFhUm5OOElBSDN6b3MKLT4gWDI1NTE5IFU1
+M0RSancvaHhhQURZRXFoV0pjSUV1K1BIQWpqbElMQVFHbWNaZ20zV1UKVVg5TU8w
+WkJKcytRS05Uc3ZqVCtTZ1VWZkFGNEY4WlFKUmthcHFJaENQRQotPiB1LWdyZWFz
+ZSBvLWF+PERWQiBFbngnXypvIC0/egpVVTBNQ2RZVFdDeHJOUmhvSkgxM0xEL29q
+MkNhcTlFbAotLS0gSjRCQmorZHJPWDlLcFk1QTFuV1BNdURNSkZQU2RnZXZMWTd5
+VEc4dzFPVQoXzNPkM9y+9vb9U3ivbj/UFzfKQsgKryK3sMoADAdTIm43D/mnHlcX
+qNtNYKlkfzMr/tjqvru4sE/gek4hO2DWlVV3qFEBmm7LfAmSw/6/kxeLUgequanH
+kxN5BPi130sV07kNBnloeQl6YePe2OEsif9jZRHXoifCwm7MUr3Fau2P1MERTv2s
+RhROMyErTBlAbQI85h3Cx3gVcxSABSb+A+PDBJRt47Tzg5x8Dm/pPrOgreCaSfyq
+MiXibRs41ySIT/Um0V0Cc5GoZb99E7I7cJiDP2XYJlFNo21xO0ve6LmGZ9gA+LnJ
+848=
+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/kelder/estuary-wg.key.age b/secrets/kelder/estuary-wg.key.age
index 193903a..c284909 100644
--- a/secrets/kelder/estuary-wg.key.age
+++ b/secrets/kelder/estuary-wg.key.age
@@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBSeXRJ
-UmV4S0FTM1VGU2k5cmhPbHFUT1dGdFNTM2FLbEx2SmNMSkl3YXp3CkloV1F5RTJl
-dTVUUEcrZ1I0Y3pVQlgvM0laYlpORUlEcjlVY2RzUXZRbzgKLT4gWDI1NTE5IDdO
-VDgwN3poeHlUSlZKR1NzTk1jbEhiL3lzV1NMdnp6cjNLK0ZvbW95V0kKOHlvaktR
-WXBIV3ptbm1tS1FSQWpDNHNmRVJKQ0ZVS1RXVHc2M1dGaTYyYwotPiAxM3N8flci
-XC1ncmVhc2UgVUkqdSBnbCZWNW0iCnFyKzBEcUFxWjBNOTJNKzB2YlFHbXdITG5n
-OE41M1dYMnJ5YndoR1RPTWR6VDlRd3ZMVVduVzV0S3kvZWxkdXYKWjY1Qkl0UFJ6
-RWVtOUlsdDBmdnBCWW5kTU51TVE5QnFxbTE4bXFYckR3UW5xWG1IWVhtQm5CUnc4
-aE0KLS0tIDJ0WExrbEM5VDN0YzYzUXdFL2h3bjNnZzlLYWpNQ2VwTlh5M0w3U3Vk
-V0kK48BtL7/ajg4PifGBpBFGbYryt3dfGddqSLwT6E+rCdQ5xFyIuCWXK8u0RUaX
-jipdtRSfqXe+QphKnvBWjFS944NZ9Jo1z94TNVxh4LU=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBmbUtI
+OXlPaUx4azFxcndBUjJZdnZsWGJPUVgwaTZzN1RTTG5TbUZJeXhrCjlkWCtXY2ZO
+dXd1cmNVWFovNzB2Vzh3ZlFpMUZBUHV4bzdFV2VoblhEQU0KLT4gWDI1NTE5IEVt
+Nzk1NHpZMW96Slh1Q3B4Wis1MHdlL3loWFpleUdmMnVMeGR4TDY5VVUKcS9SUFhp
+aUQyZFBLczB1dnNTRHh6MzRwc2xqUG5weGJ5aUtVeFhNZ3FsQQotPiBZd1opKktl
+LWdyZWFzZQpnM0Q1ZzUyTkZiNmZ5b3FsVDVJY2llbW9ENEo5amNSZ05XSlRJTHQ4
+ZXFyWFJ0TXVrb3J5eERQMjQxNTZzdFplCkRTMnBXQkpLWVpEejNhbW1sQmd1YWpM
+QkpNc09VUlNPT3JnSG5TNEQyYmMKLS0tIHdQcE1RajJ0SzRoY2Q4djgwMkJqU2Zs
+M0tCdllGUVZySmFUUk9RQVd4b2MKnlnrCbhW0y6nyToFvPTZ7n7o3eoF/5D2BEbd
+uybZWgMOO6WU9tSZRN5jzp8eMeFbk9LNn/YpxIZ9KSr4hxtqSbqxDuPe65+L97gV
+Ufg=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/kelder/htpasswd.age b/secrets/kelder/htpasswd.age
index fed3fe0..761f3c0 100644
--- a/secrets/kelder/htpasswd.age
+++ b/secrets/kelder/htpasswd.age
@@ -1,14 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBZOW5M
-TnQ2NWEyUWdMY3V4T3k2RnhpN2NRV0NDd1c3dlNHVjNac29mVEVRCnc5Z2FsZzJB
-djh1ajhidERJcWFNSjJOS2ZFZ0xaL29xeHB6UGVHanZ4YXcKLT4gWDI1NTE5IFJl
-c0dtYmk1L0ZXT083TlB1MnQwMnlKaXdFZ1JvcnFYT2RHMFhOcGVOa1kKREkxVkFm
-dERTOUVrSWZqdkdleXhINVU0MGlGZUtqWm0zM3p3YzhaWXFwSQotPiAsOmw7Z1xj
-KC1ncmVhc2UgLG9fIHdKOGxkcUczClhqaDI2OWFMbUJmWWxPV1A5Nk9nb1JvVHhl
-dzZwcGlEbVpPamZpMDFPR0ZMd09EeVNGOXd6UFRNc2RRM3k5Y2oKaXE0WVpEZUxk
-ZDlkQ3BvZDJ1dG5tVExFbXJkYzdFRHBDYUtKCi0tLSBSRWF6N3EzWWJyZGtzRHBP
-NWtYZ2NIci93V0RTakxWZWZKKzJTQlN6OWdzCqtZKtTsduPF58pP9XWpiEtJizHF
-diAG/x9bJdE6kkbRcpcV320jqE4HAbl5MR0BmH5Nmt3k1ch+umwwNmqO8Fvqft90
-eX0Ua+VP+DHyRJ5H0KRCxIZ4Fff86PVpp/1jV5RRKxH4lFgAdWeqTQJcvFZy4Ttt
-yoyf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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/middleman/cloudflare-credentials.conf.age b/secrets/middleman/cloudflare-credentials.conf.age
index 964bc12..02b0642 100644
--- a/secrets/middleman/cloudflare-credentials.conf.age
+++ b/secrets/middleman/cloudflare-credentials.conf.age
@@ -1,15 +1,15 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZGY3c1ZyBRdlVG
-dVdFb2FFb3dKamhGaXN0L3ZEZHI5YjJDenEyU0JBL1JlWGg3SGhNCld2QmIvN2VO
-dHRiQUVNVTRtRW9FbnBuVTgyK3MwZEw3Zzd0SExoWGNiWW8KLT4gWDI1NTE5IDFQ
-TG1qMG5mcW5RSGFoeHdFOVBCQTZ2TWFFYTRTRzFlRjEzc3RJZlBld2sKdGpsSHpT
-eUlUQlJjYmMzSjJCaWd0S1BpVk5wVmI1Y3d4UEwwUXZoQjUvSQotPiAtcndTby1n
-cmVhc2UgNF88Q1RJCm5objlDQ3UxNFp1OAotLS0gVWhDTVc5RDJXYUxGL2ZhTWZQ
-L0UrUDZVdXE0VlYxTmM4UWloVFRhLzBVVQpfSffTSZbAAfIZGbp3ddfFRcgj9UKX
-Gxyf4ESAvIIBw0IisaswD/K4tu/IU7fyhHDOqFeInjgKHbGdaBdsyXydRQe0dYAD
-AnwvAwU8Uizei+ntjc9lgPiJ6Rp4ANnCQCwgGdUIA9RZ/N4rQH6FIIfAuLg3IXr+
-OJasz5IqU77vcCuqbAG7qbEpLfKgDtxxwPvWa6gUnUZRdMjMpmO7TBH/fCd/lMWV
-2gDEIahpZhULh9U3dL0qmO1iflDHHCFF0Kr9r5H5tqxWcrfo1VmkbIVBbWKq5FnX
-8UzdE4powJAMExvp6P7+KNz8IfQSBBQGSP8KC5c23p0bnSMvczzCXHFS+iY+lLzd
-N6KhGQ8fvHcu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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/middleman/nginx-sso.yaml.age b/secrets/middleman/nginx-sso.yaml.age
index 5232fce..8f56806 100644
--- a/secrets/middleman/nginx-sso.yaml.age
+++ b/secrets/middleman/nginx-sso.yaml.age
@@ -1,21 +1,22 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZGY3c1ZyBYUnN1
-NDJyaVBGWGlNMEhqblVDTHdyUC9RYUlMQW55TnRxNUhjNEVIR0ZrClppVFZZaEk2
-TnBwb2xBUnAzZDg5UnEyaHNnT2NCSDRiVUh2MmM4dGNjKzAKLT4gWDI1NTE5IDBR
-b0MxQVdoMmRWaGU4RXRBZG5zNGkrRVdDUDBhYjUrT1RVMFlqK1pyMUkKdG1IQTJG
-ZjY5amdCdWl3VWVIdGdEME5XSFVHOXVFbnBkTHdGSWFYRDYyVQotPiBAKy5aREJS
-JS1ncmVhc2UgWFkleTEKaXhCZjhhZUtjazRXenhpREF6MzFnVnhOcGE3QW1NRkdy
-amZOZmcyTE41SjNRbzhza1dKcXdMZEVQbVF2M2s3NQppVFdXZW5Jc0sxWktzdzNv
-Ujl4anRxanlvWEtOS2FXSXRsRQotLS0gNy9IbEZta0wxWW9XdUd4dEN5UXFXc1ZQ
-NGFUQm1Xa1FlVzRVU0dMV2VZSQqpku4VkYjnF4JMYU98yq8kqbIE8N7lA4r5ThaT
-YCQ8IHvBIVvM9Pb/vCSA/mOT2XMyJ+ND6BCGsmq7UE8dgWaTDmW6KKKLp0JmkKqT
-7zj6crVxrsSO/XeXlg7W/wVRpIq1OjGOh90k+p6MHaGaryRy6flORHuyiRUVl6Yu
-tmG6asPD4yT0k4ptzGYB53XZfE2MyWtJDGER8q1JlzULLSBqMvO5JQVxIzWu/O4K
-rpQIbN1m3uHJjfsRqyaKDsOuEKFXSwvUx+9M5wczMBA/SmXuDiUwRFMowWFRKJim
-pE6vMvJw1SiFOl+qz5e3+7mBxltNsgL8hMAZFW1aNEx1TjB3Ktrln0cMvwH3qG1v
-O1KoDh1VMjH3yXpxD0vgYIQtX8c8DMBx4vs0QUgs06DRUfy4ZRH4MeU6oVIxtzZm
-0Lh6FFlzGQMmllLAmB4R/S+ZzTgQlja9YpqsHkifgI0A6tFHL57kt3U/bdn9/oz8
-V0yv9h3EgwwFEZtrBANKmNryO3or0p9O26IMKr1PKao/zdo3Cf9GZZ2NT+JUOT2e
-Bkjm1HHrKOj/+oeluSTuOVMv4zZfwFVgB3LfWUju9iSv5mFCcnlK8gCojkehtSfT
-5wPuXyTWmUiacsgOtmA2A1WXICnk/9ckahCOtfg1VakQK0Qp51FzelaivXk=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/nix-cache-gc.ini.age b/secrets/nix-cache-gc.ini.age
index 4955065..896f85d 100644
--- a/secrets/nix-cache-gc.ini.age
+++ b/secrets/nix-cache-gc.ini.age
@@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEJhUWxSZyBYbzVv
-eTZucHpHbnMzUXVxUCt4R3VlVmt6c3VMZGlWdVJjSW9pbnBLWHl3CmxRRUJ4cXdE
-eXJyM3QrZ202c3VMa1h4RVVwT3JreXU0UjJlTW1RakxvOE0KLT4gWDI1NTE5IC9m
-SWdJczZPRFowejFQMm9hUk50bDl3YVNORmxwK3c5eTRXcHRTcUxSR28KbmVFT084
-UnpWY1U3Vitid0xmaTNCQXEvL2R3WTV1SUxQN0loOUhXdUQ1UQotPiBvWnYxcTEo
-LWdyZWFzZSAvCgotLS0ga0U0T1c2bWYzdVdoU3FvRFBiVVo2cTQvRkNlc25uZDlM
-Q3hZWkYyNXVjUQr9W48C2szCN39IOF8I5LNSH330AGnZByr+1guZm6FxGNzQPMuX
-jIbZHOBYRhqZON1TvI4jR2/Yvtn5CKKSosdPmIl2O5qPCQxYV9/vv/xGyuURX/aL
-WgIZBxfU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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/object/minio-client-config.json.age b/secrets/object/minio-client-config.json.age
index 1f888ef..c2ec8b6 100644
--- a/secrets/object/minio-client-config.json.age
+++ b/secrets/object/minio-client-config.json.age
@@ -1,17 +1,16 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGhrYnR2ZyB5N0dZ
-b1EzU3dlc01DRkhPQllJZ0gyZlNpbGt5aEEwR3N1YkZOOVpoK1drCjE1VWJoRksx
-Vnp5eVp6MEYxUnFWREQvRjZSZTNFaHJjR2xMSXIrVlVyQXMKLT4gWDI1NTE5IGRU
-OWNzUnVYWWZDbnJoWHhsZ2xBdDdFL004QlBhbXByWjZZTThoVGd6U00KNkJwZEN4
-cE9MbTkzTEVPUm9NclIwdmwzYTF0VGFJb1pUcDJZUlc5T09aWQotPiB2bjptdE1x
-Ky1ncmVhc2UgPixaKQpCeFhtbXUvaC9ybXp4MUpzV1VYM0cvdjNyM054UVduaUVa
-QVYzcjlMckxhNXhWcW5DZXJYNjk3S2JLQU9NZGJrCjJHcmc0UXMKLS0tIDVIWlRT
-bkNkSzgxNmd6a0VlYUQyUU94WjJSbXJFVDB5WHh2TkpOaFNvelUK4X4nWl1u2VA7
-24U5qd4GT2WAoebG0RoxXI83J5v4WMc/CRuPhhnlQjp2IwjLqRuB+0wMHRFB1L4M
-x0jEtqy2FQuB1DZBiWxm2RFBQNPmYdm6WxjP/wpxA9+h9ocTEINxvbJZRz1xAZR0
-GmUIQIuWYh3lX6dvTmbXSleLWc2bRnfMCapBFgYpt1hSLVfaiSVoOGq8+F5d5Zkv
-uQJX/GoDXe7e7XcnFvFHr73SSdR5SFK7tcmbE7Pf0VPBcNE3U6yNvEUfO9qI/oau
-fQnFWYj41nYHQyKHU63r/zPfYyzQv6UUsT6c7p5eQkyN2VqRh2vCDpP7pMpT4XRc
-Y1GQKbreTN9lICfpVoNJlXYG7CB0aMgiwKsfljbl82mMSjVUH27TsC534ChGv1JX
-b/3HDbmca09Jl73TfKtHDIQ=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/object/minio.env.age b/secrets/object/minio.env.age
index 99d5a56..a7687dd 100644
--- a/secrets/object/minio.env.age
+++ b/secrets/object/minio.env.age
@@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGhrYnR2ZyBtRDdI
-cXRNNlpXeUhyZnZMY1pyVklmYm90V1FUdlV3TExCMWhrU2t5MVZJCmoxRkR5Qmt6
-MjgvT0dlOUhaNUlsbW1taFNWVXd1M3NPeXBRVkU0MVZSalkKLT4gWDI1NTE5IGRN
-ays2NU5JYWxXd1lUSVo2R3l2U0R4UVZrVHgya2RDTHdVUHNYcGp3MTQKU3AvcEN5
-aGpCV1hrRDZLRWJROWt1V0FRQWYyalRyWjlaTUpqcElLVmhaRQotPiBXeX0rKksv
-Xy1ncmVhc2UgdDlccQpkOGhtay9RbEJGZDEwMGdYS3NvQ1F0TERIYllDVWJrT2hD
-R0R6T09LbTdkVFo3b0xIQy9ic0xzT3VVckQyekpQCnhzK3VOTzFUdlJOcWNBV09u
-ZWNIN3hQNTRBCi0tLSA2clZPdGVESEdGZEJiYUpYT1RRb2lnQlkxTVd6YkxMd2V4
-OUZYN2FtcXQ0ClUdmp1fMrdVf5dynjUyL2DPYqXc6Je21ygGKxzxlvXHs6y2HnCr
-C7tbuS/HlvvqaVTQBK6WC5u0WEbtj4MZeDpnF38PZunT6BDpT3vDtnv+txJ7EMhv
-VL2Lk+bz2Q==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/object/sharry.conf.age b/secrets/object/sharry.conf.age
index e554975..8e66677 100644
--- a/secrets/object/sharry.conf.age
+++ b/secrets/object/sharry.conf.age
@@ -1,18 +1,18 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGhrYnR2ZyA1MUY2
-WHZlWFZ6Qm5NbUh0UVJBQUdkdDZZYWNNTjZpUFhSd3BqL1Y0QVcwClFSeUJNQ091
-RDQwZUk4OWF3Z29nWFJsdTNTbkp6ZmNyMXJQR2N6c2tuZjgKLT4gWDI1NTE5IGtS
-bXVQcXZScEcyU3JaUFUxcXdBRXIrd2hXK3pKTVR3OVU0OW5RYVdsM00KWTBLSVFU
-MGF1ZWFEUXRldWFVd05FVnQ3RU0yZS84U2VXWjBMRWNqZElIdwotPiA1XS1ncmVh
-c2UgYmE2WnogO2RWID4genkrCm1UV1FtL3gzVGVEK1JRMGk0K2hMMGlZVVBEdmp1
-RXhyZlA0eDV6TU9NcFN2WFcvVmVaM0NJYS8yNEhpOVVzcmcKZnpMdGxPeTdKZW1j
-eWtSUjlDbnVkSWsKLS0tIDFuS09yTmd4MzY2RVRSek5RTlBKVTZaSURLVE1paU9w
-NkV1dVV0MVJpZTQKQmL0EFysABHb6WIA5hzW3z20VXH7UhA22vEMmhOpUdGFEqB/
-juRQyOjIZqEEJaBMtzlkQ/RR6/QkW+Zzx7UgeECfpHfVGLnwWEKoJcQMFUkF9y3D
-g0K2uFHPKSJTuvZf7/vHqBiheUrQaxxhdSOvlIi+Dj52dkP+LWDXwlE5ekRDXx/E
-P828WNGWD8ovpDb5UFBs/ymwdmuoaLUomLEHEViMQxB1O2uqAHuRJ8VYLZ/58qBV
-wQHqALZA1Y8EXTd6vV1Xa1iZW9QZ4MplBeAUSxoIuSOZlCAG681oHDzOraYC4k30
-VegDOZ8VcxiRxYXFi6EINAcvuPTs3/ZWkpyo3nsfxfEKvnQJimF5gMxmV+YWKZOl
-9cxFqyeil5mZpEAtc1bnGd3IO3bod8U2LYAXR+brdLZXfN+j9EUgu1nH8bJWe2ct
-0YUMI0EiqcW+zC5hBeLRz+TxULgpmA==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/pdns-file-records.key.age b/secrets/pdns-file-records.key.age
index c477650..9259582 100644
--- a/secrets/pdns-file-records.key.age
+++ b/secrets/pdns-file-records.key.age
@@ -1,18 +1,20 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZGY3c1ZyBLS2tN
-amFtTWJzdVM3OEdUY2s2bkdtRlZpRDhkMnhDNzJsWWZ0enZvakFNCkdHYVRxMDg1
-d094ZzZ5RldJRzJ0dDR5UlM4VmYvRzNWSHliNHdVUkpRZEkKLT4gWDI1NTE5IFFz
-bW11ait4UDhUeHZCcnpvMWZmUWxTRTJXMmlYc1gyRlRyRjhoeU5nQXMKYjhnako0
-ZVRKbzE1RG1OanVtRDNwMzgvK1NiUFl6Ym1NbWxnM1lnKzRtVQotPiBPPy1ncmVh
-c2UKMzlJWHJ0U256eFBsVk5KRQotLS0gQTBITHkxSlJwWnc1aHd2M045a0E5L0hi
-MjF4Vyt4NVlFNTdpVGUyanhEYwpV8y9HB4Fg3pFss1E4Y2sIekapLyMPqFB1+VCP
-0OkrR52F0Fcg3FL1XBoVFBnyi0OfC6W6nwGsDh2npzFTneIJNzO0qUuHBA+1KfDx
-T5NWi94gtn/jv5p5eVaztdfduhVu7BKRereVvxV9TSYw5eYIcDDoo9f0PsuJTXxG
-zENjlBCZWjhLTnbJYT3U3qTlIqNr7o76PHhcS9xQLsbBya6VJZ5/KkBNzxj17MUp
-GG/PlMeWudN1ZFUtc/JRWnTfc+y7RTlwZAQr6ZNbsHLP8mXCJB7pfN1xScJlHk4/
-mKWR9w4PLkqv/QYfZSQHCHUMtg5lYlo0ExlO7jX2+4SdTNPVQrmEfHoX2q2nUgol
-z6/BMTVy/DtrFT7bdLXW1KPJE1eedbOOSTFm3MvZ8UDhhCjIhSdlSe/AH/BKfE7b
-dxV9MzLLSVpaVmKWK3tM5yiMb/SJB4HN+nBYtptklPWQUH0AJ/op+Ai+VnmZtTC9
-ZW5ImFzOQHFDteI8QgTBYL5Lx48kCUqU1wpg4VIKXw/BAy1y+q85PWMDJVVwk1p0
-fjAxGF10leqmTgmBDJoqwEhFPlOfJjVH9E2oYacrhD8=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZGY3c1ZyBxUWJD
+RnZPNmt4b2F0UHRxZ2p1UFNsVStSYjIxRCtMaTBncjFpWmxGTWhRCkwwWEJWWWpO
+MEQrOVMrY1Bjc2VoYTdsaTJBalZXeGVPdWN4c2k1VkJPVkEKLT4gWDI1NTE5IHNo
+TkVSK3VNMktVS0dxMVJ5K1lUbjZhR0MzaW5XYlNuUnlYMVZsZWYvV0kKM2pMUnpM
+d2I5blJPUFFOeGdmTHRrNUdDVFBGbjhjbzdVTStqUnl0RW5VZwotPiBMei1ncmVh
+c2UgRnBpSyFdIDljNlVhb20gSzQzCkxwL2RFdnVKNFhGOXhMcWlIZ3ZQMEVhcHdt
+MEE3RCtIcjJFQ2hwZjdiYmhVS1Q3ckJnWXZ4OFZrOFdrRUtmRWkKdGhYTHNvdGd0
+NDJQYVJtVkluZEQwTlk0QWM0Ci0tLSBMRXhRT09CRFZSYk5ia3Q4OFNwamU2bTg1
+eEg0WmhqN2FOK2pvaEU1YWxvCgDPh8qxet1lhQL7cs9k7G7rOHZnrvhwbtG/0u/s
+z+fIQgh2h0hviNHkW13xCLqQCk3ns9cCmpSChHFwq/PeSscJkgXHQOyc/aWqKCfV
+tE6KJk1Asrwe/s19er9vHuIpSEB9HYRh5fxjL9Q5yS+kToFJlVSSO0Ah5Y05oGVo
+jkeZsJVGyZ8uxnWZf+oTy4QjPVQXCCZy7gDz4V0eHQvltl1FHA9cVULzYbxwNP8J
+UnDV3awz1O7iItxdyRMY+PO+/e26BE2sRqYpls32pgTXF/UP15/BwMMaRKzeL0z2
+kipR/xvVxSMtLc6mz9bLAlsz9FRt9K4E1be5Z/TgWSLDgRxLfYY4AOwhS7dWlnL1
+DooSS6qraa82BMQt6bd7FrSnQzCO3IaBfKqImb0m4asErYRN5zZVrMDMiwCQbvNE
+nHgJBlUEPQt4KY4sjQNqoX7bcivYF8wqq+Pusaz67iVEgbUv8ErbgdE0OXVoeXTh
+SHCYUbIxanCF3vK7JUTM+eiHnPn7QoAKnpGbx7qpbEbhIsIL0juIMZD7NHKatG44
+Rn8v2JmaP3AbLoYUyLjHF8WcT2y1NcAQwvI08z4vcA==
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/otp-secret.txt.age b/secrets/toot/otp-secret.txt.age
index dbd7f94..4065572 100644
--- a/secrets/toot/otp-secret.txt.age
+++ b/secrets/toot/otp-secret.txt.age
@@ -1,14 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSAzdHRC
-bkl0b3dPbVhCdVd6akpCMUZBOGxMcW5oc0FBK1hMNEFpN3JmbWlJCjB2Q0dLbjhJ
-QkFYRXIweWZ1MEJ2ZmtyclpYRzJFTHVhRTJGQlRkVlcwWU0KLT4gWDI1NTE5IFhQ
-Q3dHQUxCM1d5NzNsTUN6cFFHUnBzU1FaenVuaUUzOTV6bCtFVVhBeHcKSGdTbEtG
-cDF6Y1F2NmlUMkVGUEQvYy84Z1B5cUJLY1dZSytZRUNSVS9FUQotPiA+cnhGdj9m
-Ly1ncmVhc2UgV3tyfEouVAp3aEJSMUxNSUppaUtMY0R2SmtJTzNXSHk5QVJ1TjIr
-aEtqQ01xS3pQU1E2cVczK0ViU2tTSDkwUmRDSHZLbkZwCkhGTENFeXhJSWE4Ci0t
-LSBvZFR1S3R0NzJoSkJmeDZ3MzFVSUxiOWJiRmxwT2c3QUJHZnNXSnZMZVVRCr8Z
-APLJ+JGZpqb+L8zO4fjj41BG2sJnacB6cTaGjsMo6J0/4so0iasExS59BJkDeBA6
-SQTuZr91+KKNQcr57vA6RZrXw0mf1xafQx4mUzJaXJCBJdrRw/WETjk7RZOGaPHR
-AIfHZ5io/uOOmcHZT5nGjekZtGJcyO1RG/IgRQG4pktZHniA7iZNdQdyj4Qu59TL
-vqDbGhbOwu4K/i6UhyKl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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/postgres-password.txt.age b/secrets/toot/postgres-password.txt.age
index 16acaf3..a75e53e 100644
--- a/secrets/toot/postgres-password.txt.age
+++ b/secrets/toot/postgres-password.txt.age
@@ -1,13 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSA4QkpO
-NHVvS1pLL1BZR01NaWR6WnhBd0V3a0UxMUtVbEZUK0wzaUhRR1VJCml5SzdsWGQw
-eTJtNC8yNnhKY0ZscU1pSU5YaG1UUjRvejZMZ2s3bDhOZEkKLT4gWDI1NTE5IHZM
-UTQ4djJMN1JjUHROU2x4cjF0ZkhEQWlkckdjNVVxVzdEa3BWdVFVRzgKSHJmUDh3
-OUNrUVB5ekhEUkl4cjV5Mm45MXRYWVl5V1JlNWlHa1F2QUxWbwotPiAsMiRSLWdy
-ZWFzZSBxJUs9PEIiLCArYTsgbzxfbyAkUXdUcSsKT282TnJpWjY0ZitnNkVDbUNJ
-K0tpY2NEaXFJRG5xZlR1MTJ2RDVGWXJVakxiNHVVZGN0Z2lEWGcraEdUck9KSgpt
-RGhoQUk3elBjVk02dzYyeEYxQXUxMXp5MzNvQkJtWU9zUVJpNEQ4NitycWx3WEtF
-c093TUhyckJybWt6RG1MCnF3Ci0tLSBUdnE5TVFJdW9GTUZjRDVBK3pDVjMzSmt5
-SXFWWkJsaGFHQWdBVk1iZVdBCuXFy4h3YcLb2mJjl/is3Q5rd/dMo/u36gCr/6Od
-kEXj86TxNJP0l35VEuAHcslsFFU=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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/s3-secret-key.txt.age b/secrets/toot/s3-secret-key.txt.age
index 2808059..d2b4448 100644
--- a/secrets/toot/s3-secret-key.txt.age
+++ b/secrets/toot/s3-secret-key.txt.age
@@ -1,12 +1,10 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBJRzJW
-Zk5weUJvMTVKVUlXZmRFV1BZVzVIbFhUNGlJZm9uMGs1OStRUjJ3CjVzZFJtRWEx
-SWhiNnZ3VE42RjA4UlJPcU02c0MzSGxUMXVteXFTM01oSW8KLT4gWDI1NTE5IHZF
-NWdpRkNnSXE4Y1AxaWY2cmpOcDVoeUxrcVJ6Z1A4RmYyMU96YUNvVFEKODVzdXVa
-bjVHdFdUcENTN1hLQURiRG9yYW1xWmg1cVMzSjZZVXRoZmNCNAotPiBfUi1ncmVh
-c2UKbC9hOVZjdWpNZnFoZWNrSVZLVzBVaU5VU29DZnhIK1BSbXRCLzBnbkI5dG1o
-QWluM1BpOHRyL1BhNEFDNzJpNApPY2hURTkvN2RzSUdXcTFGd3I3Q3VBQ1FmYXZ0
-cUZVCi0tLSAwZkxsdzhSN0YyeENZK1lpVHlNcVBoMXdiVXJ4R0tQNHdoZ3VLS0Ex
-eVhrCvULli5yGkTvWWb5gTRMcFdSx/53/KPP0JLFQhOt/Xl1Qo2AfRUd1JSxbNh6
-Pa7D2LA=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBCY1pN
+dUg0bFhWcmlWS0VhZWIyaTFtU0tSMDBOMXNXenE0SHlRcEJ3bDBRCkVDZ1BuZmhL
+VUF3LzRSUWc2cThEcE12anNrOXZQeUhJU0lLZWJxYzgwV2sKLT4gWDI1NTE5IGx6
+OHNpbkdyZVZnNnh4dzBmSE1Pd015Qk9GNUM3NExXSmJ5NGRsSzZEVFkKT1B0U3Mv
+bFJjMXBaVFIwem5GWFdnQXcxWXdtTmg0TmxZQ2V4SlNHZW9EcwotPiBpLWdyZWFz
+ZQpLckJmUkhFYjJFTVh1YkVsU1M4Ci0tLSBsZk00eVlDQlRndnRSVThnbFVrSE05
+Z09POG0yNmRzSW1qRDIwdkFYS0Y4CqeXVamc8N6KPRRvXsf8crK2QbIOXsBhA9oA
+VTpMqHLku0tfEXAnBb6HsQ1zKy+Ng/w=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/secret-key.txt.age b/secrets/toot/secret-key.txt.age
index 79335b6..01e1e6a 100644
--- a/secrets/toot/secret-key.txt.age
+++ b/secrets/toot/secret-key.txt.age
@@ -1,14 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBRTDhq
-SkNBcTZRa1VzT29kcTlvdnBmUGRJS3NtTG9hdGYwMFJ0TEFGYWx3CldzVXJTU1h1
-T1BxT0dnSUEzb01UazNjY0F0dnl0bkIyWGxpbi81VHRqVTQKLT4gWDI1NTE5IGJH
-cWdzQlBmT2EwSmJraWpPZ2xDL3p4eWkxb2lQalV3M1VaKytNM3dNUWMKTy9FUytW
-OWZFV0trS3pNanRqbHE5UnZoaUlLZXE0SHowQnI4MXhIamlKawotPiBdLWdyZWFz
-ZSB6QislCmR6bVJUeldVK1dJYThDWEoxK2tXb0xwL1ZkSUl2WXU3MlI4QjVOMm9q
-Ym14R08wSStmTnJoNytRVm9wMjZHU2MKOFprWjdGaUpTeFVSCi0tLSArc0FsUGdz
-WCtOVnQ2ZE1JM011Z2dRaVQyRitaSzZGbEhPR1A0TFhlMmdnCpjzBfRIhQ2wPVxK
-vWlaXIj9dsSpuAfUlRThKCHSxyhRfiz/kwLs4sgK7VGk9RpL6qy3VwL8GLLNGxwp
-yQuCIN+brHrwfhL2obZ/0JJZp59AjjZUgnG1YQJSiqe/cvE1gn15CK+BMz7QACxv
-+S7GY966wCs7TE600Cez2QW1YEeyoDYxbOLWI8nkoYilCCGMOOjmFGgmJYgpcF+Q
-b7NQsFlC
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBNL3dt
+YlFYcys4clVBNHcxNDl2V3prWFE1RFQ3U3R5NCttWGhGbThxdnhNCjZHMWszQ1Zs
+NXZwZHB0M3V2bEE0SDUyREU2emplRXR6dnJFNzZOU0dkV3MKLT4gWDI1NTE5IGZt
+L0VhanNlZ2NHb2lYS1lJYWpvT2VxK0h1VWd2cXd0cXYzY1NPakpRbk0KR0ZVK2N5
+c1Z3Q3Q5WVA1b25pRytvaHV0Sk9sak5tRkYwSHU5ajduZnFpNAotPiAjczJMLWdy
+ZWFzZSBLJFdzPXspIFIgJUltUFU/WCA6CnFqMDRHaStYWEVPQjFFcWdnU1pQVUxl
+ODJhaUhHSEMyc1hFCi0tLSBvT0d4SGhPVjVNWGNMOERXZkEwTnRKTXZaZWlFa2VS
+dnlpUkpUdUhlN1EwCvfg36Oq4+T1ktBWRmPnarOpYk+MoASauHpoBuS9PQNfrIUk
+uRUVCzsPPzj9eDapBoYo+4FbvVH3jq43luiCPDLH+pr1c5Js9OrCRTLWT8TWtzqj
+gFjVNBQ0l8+rl4EDSzzDpoCLZA3V8dgLcD7OA8ThqNABEr59obYf9UXTEJnePDFi
+l9HqZa5fvwG4+YUM2X/8xHnvAfe6roi8t3LIfh5x
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/smtp-password.txt.age b/secrets/toot/smtp-password.txt.age
index adc81af..3c02ef7 100644
--- a/secrets/toot/smtp-password.txt.age
+++ b/secrets/toot/smtp-password.txt.age
@@ -1,12 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBBMXRq
-alZBTGJ6U1YwNGljKzl2dFFxYXRHVUg4M2dTVTYvUEZjUTdFT0F3CkU0a3lVNnI0
-MEd4WWpEcDdwVUd3dC9uc2hRZW1ud3h4cXNtQnV1UGV6MVEKLT4gWDI1NTE5IExa
-UmE5Tm5uMGROMThmbVhCQjYvdi96eVBacGcrc3ROTy9mSDRtYk8rekEKSVpiVlox
-WjRCWEw3WklGajNjVENsUFhZemFOSmhsUGQvUmx5UXRreUxrOAotPiBuLWdyZWFz
-ZSApWCBOUyB0X3JzTyUuCkJZZGY3enZCSWZMMlZSYllVMTdoWUpmaXdSeFZKZFlT
-Z1U2YW93QnVUaVZ3WHNlem5NL0FCTVZ1MkNYKzRMTVEKQ2ZlR1ZUaDhzeFJKNnVI
-L2hSZzJrd3AxNjJnWC93NAotLS0gWVBpakRUbC9FaVZMMld2elk5REUwY0tteEhN
-enZ3UVdjSXZHSkRubHpjcwqaRtnEU0aa1blt4GoSR4MZ5K5jGl3qenZKMJomh6ve
-xTU168kK0KEiWMS1raKoS6Eo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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/toot/vapid-key.txt.age b/secrets/toot/vapid-key.txt.age
index b328e6e..7fd842d 100644
--- a/secrets/toot/vapid-key.txt.age
+++ b/secrets/toot/vapid-key.txt.age
@@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDYySmNjQSBkNllO
-eEpVcU42OE0vRzAxM3F6b2V0dmYzTHplVkQ1MXlFMzRrZEtHT1FnCkxMV1kwM2lL
-NGlyZGd3YW5Qa0pjL0tTb2htdjZ4UmRWY3N0Yi9DdzFBWDAKLT4gWDI1NTE5IFRZ
-N3A5U2dnR29hYWxkKzVMSkpVbGE5Nk52eEJNSG1UZU1HRzJmcTNYU0EKeE9VaXpr
-aDNuWmhUSjFvbU9KN0hmQUh2YWxyNVIrTngrTzA2bUdGc1VzawotPiBoQSYxWG1r
-Yy1ncmVhc2UgaDMgdWt1aSA6VyAkVElaTmsKSHEvYW9uRkxreTFaL2c5aFV4Zwot
-LS0gNUZtczB0VVRReTl6aWF1L0p6N0t2V3pEQm1YMm9oc3BXeHViQnM0Ymp2SQrQ
-0ARq6ATsp+UtblDWXSl1/DOCqRb7tdH9mmLkyWZAFCPct5AvXaUcz2vkFy95Ru9Z
-d/HzlaVMbSP/JKoOnBiA0mKbfAHo/DSreWDpkg==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 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/user-passwd.txt.age b/secrets/user-passwd.txt.age
index 5003fc9..101abbd 100644
--- a/secrets/user-passwd.txt.age
+++ b/secrets/user-passwd.txt.age
@@ -1,45 +1,45 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDNiQjNaZyBSZGRl
-Mm1Ea2hPZzJTUWdqcjlPZlRqbnNNUnJaeDNLOG82ZWZiNlo4Tm1ZCjgvTXBRUTNj
-dkszTmNNVHA2c3hZN0J1Skl4akdKWGk2OHZtRHdvd1orWk0KLT4gc3NoLWVkMjU1
-MTkgWkIzZTZRIDc2eHhiSDlBWEN6dkpsZDJDT2JlaVZlVUc5NmtCb1VHeHVWcXo2
-cEhLbmMKR083U0YzbTloSm0zc2tEbUthTW1tQkhSR1RISzlCVDdnZXE2TnJyblZS
-RQotPiBzc2gtZWQyNTUxOSBqNjdGWFEgdVB0WUQvMmZqcDJxK1VrZ1RZRW15ZEtu
-cmw5dVZOWW1JYU8wNVo0RkNTSQp0b2tmNTFEb1FJMy8ydWZjcGdXMnR2K3JybXZH
-aGc0b2V6MEFnSEo0SGJVCi0+IHNzaC1lZDI1NTE5IGMwVE5hUSAxT0NVWW5XRTRj
-UUFQVFBqdlZ4dDZvM3gzbXFTT1Rhd0ZjeGNHaFg3UHpBCmNyUHBJMndVN3JSV09k
-NE1xcWI3MDVBbjQ3L1Z0djN5TXZGa2NPcGN1ckEKLT4gc3NoLWVkMjU1MTkgbjhD
-cFV3IEVLZ05jaVdmRkNqMUtmNFRoMWQ5dXpTeXY2Qm85UkxSOXpWNHM5UlZ6VjQK
-MDVqVTJ0cDJBQ2VsVzVndXpwcmFRVGplaGtmN3ljUy9SUmo2VXorTnlOYwotPiBz
-c2gtZWQyNTUxOSBoTWE0bncgMGVMbC9GNEg4TjQ3WlRDTlJFVEdoTWNaRVlYcERI
-Wk1sS09yaDYwUDdFQQpFbHdWaXlPbzEzWTVhTkdncHFsK203My9jNy9nWTlPeEVV
-UlVQbXFhODEwCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBibVg0d1JTeHVmWWIzYzlz
-YXA5N1RXRlZwZmVqbzl0bzNVcHR0WW9XcHlnCklINW9GdmdvMUNVVUszcXdHOGpM
-TnVmM3lEUEFUa2k2RldWTVpmY0U3R1kKLT4gc3NoLWVkMjU1MTkgN1dROVBBIFlo
-QktDbmxBY29uWkhiWmdGRGVRcHExVmRsNWRHdzl1MDhFSnM2SjhEME0KTHkrSm9E
-K2VhNlVBdGNkbElXc2lvVXBSSnExVUxMVTNiMERqVzVtYzRWawotPiBzc2gtZWQy
-NTUxOSBWRmN3NWcgaXROdEU0TXBsVHJ5MFlhSzZpZW9tWjJPUFlNc0Q0bWhORlYy
-amNwc1B3QQpXZlA1T1lxam41eWRVR1dWL1hLRDhLd2tLSUpJQWcvaHpNbXkrRVR1
-TEw0Ci0+IHNzaC1lZDI1NTE5IGhrYnR2ZyArcVNUZkw2UUZOR2FJN0pLbW5CYkh1
-VXRlZm9BZVFPK2gzdjRONlRFZG1VCmdhQTFldE1BenJRODJTNGtrcGhXRFZkMzdJ
-ejJuTDdhYXU4bGxQejR5VUkKLT4gc3NoLWVkMjU1MTkgQmFRbFJnIEhrUjJFcnpW
-bTN6U0VuMGt1eFFvQ0tsdkdXRWx5MnI1VWo1cnBwVzN2WE0KMW1TNFUzcnJrUCtS
-MjZvdTl5YkdraGFHR2ZSRFZVWXR1a2pzendZSVl5QQotPiBzc2gtZWQyNTUxOSA2
-MkpjY0EgL01GbitCRkFZc2JYRjFwMm9ldXBzNFRZV3E1d2lrT0MzVWxCZjN4Wmgx
-bwpydC9mVDc4S2hrMlQyQWx3czI5UU1Remkxc3hMM3pNUjBxbmg3WmVLYVpNCi0+
-IHNzaC1lZDI1NTE5IC9oeC9kQSB0VWI4ak1NNFY0TUgyU2htUWwvOVJtVktBRnow
-VkFvNFBzRTdES1hlQ3lvClhRZnljWUNDcEUwU0tYZDhtUDdpeXBvWTBNanAvQlJ4
-R3VFaFNhVlZiR28KLT4gc3NoLWVkMjU1MTkgSEovSjdBIHM0eFkrY2h2RFZrMHBx
-YWozVXZzY0NUN3VUcWlWSVZzazg0N1NFSVBCM1UKYkhxRmREQUJycFJBSkFoYjFr
-d05XL2lrNGZRVG9YTTBLeEJaSnZoWUZMawotPiBzc2gtZWQyNTUxOSAvRUpYdmcg
-N3VRc29jRGhaejhnTS9zVCsxdzF2RC9qL3A3Y05ySTN4TUtQcjhNYUtqQQpNVm03
-QmwyZXg1M0twRzRBTkoyU1BidHpqSmFzQTl3K1BKUGtRSDlySFlzCi0+IFgyNTUx
-OSB3Z2EyVGtUOHk0TCtsVGxNbEZZZTl4bThucFJaNFplNUplRmNia3JSZ1M4CkhN
-NEl0Mmk5S0c0Qk0wTy9NeGgvTVRXUUtlSXQ1dTZBVTJDRC9lc2xEU2cKLT4gWFIm
-YiItZ3JlYXNlIG8zdCA8IFogJ3AvdQpuNFhTZFF1RXpHeDZtbHJkZ2ttdmU1Nm80
-MnRPaXlDUzNCUEhIN1kKLS0tIEF2OXBJQW1rbmozdXZOeU1PV3pnSEljVmhVb1lC
-ZVhzVzhzYW5XbFB6Q1UKy8FeP1uH8ADKxwM5CTqy5btqMdv5lxSQnacScFSNcIbj
-8qgMlbjx3siYJUdTFzp3lBymeMBfMSh3tMfGvvWqwPSaDYGb3CjYyllUkPxh0CL8
-TjlnIZIjloamI5tA+EQNc3zEXuv6gvXKBu01t88zZOfuA3U+kWG3f/2sgvhK4peg
-D0C37c2jWq4KIw==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDNiQjNaZyBySjJE
+VkZMWkFOdUpZcm0rNmY0aS9IUmJhMWorTWFVV3dKNlh2N3BMVzFNCkdkNklrVXM5
+V01hMHdWOUxuUHVSRysweWx3Qmh1TnVPNVJsYVAxdXZSQXMKLT4gc3NoLWVkMjU1
+MTkgWkIzZTZRIFRwSUQ1U290S3ljV2dWL3Z0MW9LMmRLeElDNFE0S2xqOWJIWjFP
+MnRJRjgKQWhmU2liMHlMK0R3QlU2NWVveHl4RDliUTh3cm9hMGNMNm54MUExeW1W
+YwotPiBzc2gtZWQyNTUxOSBqNjdGWFEgdVFyRS9sdk1ZeVhDTHJwOFVkdEJRckFP
+dFNSWFJLV3RmWXdWbXhUc2FqUQorWmUzTEpmS0toV3oySmQycWdyVG41OTZHYlRF
+VGV3UnUwZXZNOFFkYXBVCi0+IHNzaC1lZDI1NTE5IGMwVE5hUSBtVU5EM00xUHNX
+akNNV01GNG5xbU52NmZGcWRGUml4K1hXaDFrUEZKakQ0CitJZjExdnNhWHJ4bkps
+NjJHNzFZNTFhS2xSNHVFS1I4SEJ6aXNLdUpqcUkKLT4gc3NoLWVkMjU1MTkgbjhD
+cFV3IDI4L0VxNG1KdmdWaEpSU2FldGN2RWRqeXdNRnVFVXhwOFd1UDlIeFhKazgK
+d2tzVEdxdWt1My9uWVhScFViZ0p2M3VIYitpeEZQK1cwZHVDMFJsYW9vcwotPiBz
+c2gtZWQyNTUxOSBoTWE0bncgMTc1N0NodHEzQXlUbmpwbnBSeWhINGFNc2xrUjlk
+WlFiWGFXbGJMSU1pcwp1U0lNZjhrL1MrV3Y4TXg5UWZHUGZNUVRJd2REUkZYRFlB
+ZUFKYmkzeWUwCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBiY3FEdVp6ejVmYlh0eGFI
+dmdKTXlESGR2dTRTSkduZXMzaGNUWEEyZGdRCk52KzZSWHRQbUxRdTNaZzJVSmJw
+M1RZZjNQV1Jvd3NOdlgzRFBobGtPVUkKLT4gc3NoLWVkMjU1MTkgN1dROVBBIFl1
+aWplNWxhZlFGQkZWTGtVdVE5cEpFOVJDTTdBcU1RK29oK0swTiswakUKNHM0bVRT
+Zzd0VlI4eXo4cHRqaEVaMVhicXA4UnJoZXpINmtBbEdRYW5PNAotPiBzc2gtZWQy
+NTUxOSBWRmN3NWcgNkdIOWhsOXJyb04waFI1b2Q5WFU0ajR4Mml3ZUZLZTBxQVJq
+b0s0YmJUYwp5WUsrQW9nbEdBNTE1WDJSeWg0cGVKcTVpTEpzZkZVS1VYMCtvejBX
+Tm1FCi0+IHNzaC1lZDI1NTE5IGhrYnR2ZyB4VDZuTW40cVROTmVZN0RmN1dMcjUv
+SVZLNHN3MitSdmdEY3dvM08zc1dBClA1MUpNSGwvQVorQlNQZFFraWNDeFk0ejdI
+cmtWVHc5UCtxNnVYS0hyREkKLT4gc3NoLWVkMjU1MTkgQmFRbFJnIDhPY1BudWFl
+Rm9kTHkwRWdFQ2VwRnpTSjdqTzBlbTdCRUQ4bXVKOXJ6MDAKdVhOTmpYb2NWSVp1
+cFVCTEh6T3haZUIzSC90YXo2QWRWRWErMUk4UXQyZwotPiBzc2gtZWQyNTUxOSA2
+MkpjY0EgUWNzdjRiTzRPamVyWkwzekk1cHhaSU1KWS91a25jWThiUm9UVkVoekFs
+cwpyaDFyd1JyZnNXSDNJalBxUUh6MHFsQU9RajJhOEdwejZhaEt0dG85NGU4Ci0+
+IHNzaC1lZDI1NTE5IC9oeC9kQSBaTFlvMjJhYlE1Z0VoOXVJZXgwNERLS0ppRFRE
+S09NQjk2aWxLQkhhNmtnCjdSTzJnV1NGRHRvWEZlVDFiTFVSd0hrYys2WnQ0ZHFB
+cks0cmlPNm5SejAKLT4gc3NoLWVkMjU1MTkgSEovSjdBIHZDS3QrQk9BZXpXVmln
+dFY4YUlNMDgraG5hRUlKajZBdi9qZm96a3hUVGsKeFBvekRmWEQ2dmVway9lcmQ3
+Z3YyVVRqQzZhaitNR1V2dVk4ZjIyVzZkbwotPiBzc2gtZWQyNTUxOSAvRUpYdmcg
+ZjV1cUQrd3ljSEhaSE1TeitQWERtbzA5ays1OE5jNkZ4OHAvWGJ2ZWh6awpnaFZs
+d1piV0Zkci9PdXVTcjFmOWExL1hSaWVYUEFteFlGYU9tL0pmcUM4Ci0+IFgyNTUx
+OSBKa1hmYnplTDlFRUlkQVB4enB1a2E3YUlVMFE5dE82Y2hHL20rUzh6NWlrCi9v
+R0pnSVRyeVp0SU5rTE9TRjVYZktJMFFIbDliSVRoNmVGS0FEK1RxcmMKLT4gUEFP
+YC1ncmVhc2UKbjNxc083L1hsblBHbHRWU015Y1VBcHFNWXByd0tTdndPdGZDSEg0
+R0paOXprbk0KLS0tIEN2dnlxcDRlcWRYd0EzdmlGdUUveEd3T3JONFcwVHBiZko4
+dnFTMTkvL0kK5jDeDhrvxbax4/x6bAX8ayIPEWL4K4HzWPLAWEvBuI+Q8PZECyW7
+U1ACSX4gLCKDkRkBCaOKGUnCg6GnsrK05GZE50RrHypa9bqCvzORerV45xa9CJY3
+oJ5rIP3uZKS7yOgyUCNyoCa3ptEkUVGjKHec65hdbm5HePQP//mpk4s56GX8i3Ai
+XfTz0w==
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/vaultwarden.env.age b/secrets/vaultwarden.env.age
index e5340e5..72a7f5d 100644
--- a/secrets/vaultwarden.env.age
+++ b/secrets/vaultwarden.env.age
@@ -1,14 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEhKL0o3QSA0MEVj
-ajhVUlRvUk1EUHF1aWxxdmkzL1U0dEZsTXNGQ25zdDRnQloxajNjClRvYnhIRXdr
-TjYyWVk0R25Odml1dW05VVh5bVo3cmVFUlM3b0tWYUFhUW8KLT4gWDI1NTE5IDN5
-NDE2Q1ptNy8xT0twTzdoNHJTUms3Vll6elBvaU5nOWxwS29ybG5sQWsKekZwc3Fq
-N1JrcTNGNkFQOVpMVXpLUzI4NE9nZ3V2WVdFT2tOSzc5aENFbwotPiBuNS1ncmVh
-c2UgVU5AKmZ4ICs6R21DIElzTit4JgpuWGdYUEkySlBDdmhYN2hmNXBxRCtreXFw
-YkVnV3JYTjNCYVBrZStMNWMrYmJxQmlNZGJvS084OEd4V0FoaUhKCmtaNDhjaGVR
-RC9Gcnh0WTJNcWxEMVltbnFMNWZSN1pmUHh6bwotLS0gOHdWR1p1NEFaOGJCRzQ3
-OGFsUi9JRy9VcVVCK3RsdmRmanBsSiswdHd2WQp5cmVtkg2KgLXeQjt586jpszpo
-hdWVyVpRUT/9+7SS+7pt3g/kSTpE4jnQtHJ6Yqs8lTRnRJRjaQzKAV/vl38mw2kZ
-r2hGntzH24ocBBlQZV3uF0H+k33zq8/XY2CnXK88cSil0qTXFhwiE04e0wVSTOaD
-iyYF0R+geQib858mv9Ps+d/ZdiC+4ufjmQ==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=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/whale2/valheim.env.age b/secrets/whale2/valheim.env.age
index 08576ff..68e9d90 100644
--- a/secrets/whale2/valheim.env.age
+++ b/secrets/whale2/valheim.env.age
@@ -1,12 +1,10 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IC9FSlh2ZyBkUHhJ
-UWVGL3R5S3lsTDF4aTFnS0FYRFJjWmF3azE1VkMrY3RiYTB4bXlvClBETEFBcG1a
-WWlLckpyc3d6NS9RL0loeGR0VFlnNFBTbXJpbjVqRCtSbE0KLT4gWDI1NTE5IEp1
-QXoxcE10djlNRVlXblg5WjVGSS9tVG1rb3l0VC9kN3BQOE5QZDhxZ3cKdkFhVncr
-MXZpWjdjQXJGOERjajQzYXhlVWxSQjUxMnozMHZzTWE5VElJVQotPiAkNyxmMS1n
-cmVhc2Ugd1d6fD1LWXAgfFRjbXg3T0sgNiw+aT0ifFEKMUpTa0kvVDZIclJhZ0Z0
-QWEyK01SMk5QNld0MWhqWTdkQzltdncxdmNmYkZXWldCTGlxeEROREVkd29SaTRW
-dApDMlNCQ0lHRjRXWWdORVlWCi0tLSBybmlxWHJSbXZweDVJemVsV0VpYXBybWNy
-UG9DaXI0d2orWjdiRFBSN2lFCp8m8bNEcr56+bz6qSz/UZWKGe7eYheNi8NM+2WM
-uvghtdP1UpbD0cySMNWS6qRCwHVX
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IC9FSlh2ZyB3UTRt
+dFZubWpvT28xS3VGMmVsT3VwUWdsRmRTR0x2S3RBUjZBOWIyUWl3CnZ0UDVkdlNE
+QklMOTNBWDJwZTlyZ284ejMrWjQwS3JSTTM1cDdsamtTWXcKLT4gWDI1NTE5IDhx
+YXB6ejRrNWR0ZGZHZG83cldsU1RLRks0WDhsYnRVRzlDNmswdlFyUU0KTjFmai9H
+VlNwaGdVRDdZUlZwN0dxVkl5Mjg0K1J6WStyNXZQUDJsTmovQQotPiBccEtnLWdy
+ZWFzZSBNVXEKUGN6SjhuTTVUWi9SUThneGM3Sjl1Uk91UGcKLS0tIHlMTG1Ta2tJ
+OHlFV3VZTjVJRlBhU0NsWk9tWFRvUFdNV3JUbzNNTmhqY2cK85i4gj1Us1fwPhM5
+Jtp0/TK0RpygFwlNi2yZknZ3ChxekQPjSxn9Z2i5vNupMWp9Yd4=
 -----END AGE ENCRYPTED FILE-----