client-add: rclone (finalize age_pubkey + grant shared secrets)

2026-07-01 23:50:37 +02:00
parent 1ad31fe33a
commit 5887129202
7 changed files with 190 additions and 139 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -26,7 +26,8 @@ creation_rules:
      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
      age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs,
      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h,
-      age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
+      age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4,
      age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
  - path_regex: ^secrets/gitea-pat\.yaml$
    # Write-scoped Gitea PAT (dtoro user). Same recipient list as hello.yaml
@@ -38,7 +39,8 @@ creation_rules:
      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
      age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs,
      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h,
-      age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
+      age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4,
      age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
  - path_regex: ^secrets/gitea-tokens\.yaml$
    # Workstations only.
@@ -60,7 +62,8 @@ creation_rules:
      age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
      age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs,
-      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
+      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h,
      age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
  - path_regex: ^secrets/netbird-authentik-oidc\.yaml$
    # Authentik OIDC client secret for the netbird-dashboard provider.
@@ -71,7 +74,8 @@ creation_rules:
      age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
      age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs,
-      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
+      age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h,
      age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
  - path_regex: ^secrets/netbird-pat\.yaml$
    # NetBird API Personal Access Token. Consumed by the dns-sync job on the
--- a/hosts/rclone.yaml
+++ b/hosts/rclone.yaml
@@ -13,5 +13,6 @@ mesh_globals:
  accepted:
  - netbird
  - tailscale
 age_pubkey: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
 mcp_endpoint: https://mcp.hubris.network/mcp
 secrets_issuance_endpoint: https://secrets.hubris.network/issue
--- a/inventory.yaml
+++ b/inventory.yaml
@@ -423,4 +423,4 @@ hosts:
    mesh:
      netbird:
        fqdn: rclone.netbird.selfhosted
-    age_pubkey: ""
+    age_pubkey: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
--- a/secrets/gitea-pat.yaml
+++ b/secrets/gitea-pat.yaml
@@ -5,62 +5,76 @@ scopes:
    - ENC[AES256_GCM,data:/UG/8LQD21l/Ca0wfEodKw==,iv:f3tW1ZNLLkzE5Oy8acQ6GfyDvzEH3++kp8duBOI8+Is=,tag:IgfhvEaX9EGyPHhr6FSAjQ==,type:str]
 note: ENC[AES256_GCM,data:vRDjHXh5fYlhwJ4LyS/hcqMGdS+Z/D1W2oH6NaJak/XRUr+nFVQqcXSH/zUgqEBWNrMv6j8n2Ouxex/q2mr+p3Ds1jfThJTobX/MFqMkxvxk0TmB7ucui7CDa4mcVgSo3wyhcaba2o3erObByZ3o2uay3mmqzAUdo/wy2bCgQTkTG9/xqVSf3EYuR1j/A+SAzSvpsOORMNUjC5NRP1DUL+3hZkPXsfkXuy7sV6T2vF+oOrbEI0WxR8o4/JcF1B/4ezFAJ+f+nukCMz6eSCwur/wHffbcYa8mtD6BIRuV1pTd/Zob8arhe2ir19MB0fR27E3UkcCwyCkQ+QWuGzisvciCPtwR4JidH7xOpPW+4AK3vqEjmpEeMSWlyxbZadQFuSi8f3bPH+8eB2h/UFvT0BU6xw==,iv:r2dUnKyUWhyafIeDIjHOdqh+PNFzGtVZfcHc2TAhvvI=,tag:Cmg6esU4mQ8/9UbIQQL/gw==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
-        - enc: |
+        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2S0ZRV3BRSmhWaEViRDJG
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIa05CSXpkcUsvbFYxcnNM
-            RnhlS3NUZTd2N2dLL0ZQb1dGa09IUDIvUVZRCmVIN24zMnQ1ZUtpQnF1T3REL0ZM
+            b2o1ejFFRVdUaVhzYURPRm5oTnBxUXgwYWtVCjY4L3hvcy9NMHpDM1Q0WGJMZ3Mv
-            WDBVbC9tWis0cnMwTFkrak9MS2duVXcKLS0tIDY1bHRMR0hiKzh2czVtalkxRito
+            aXhVek5uWkIrdEI3cFl2N2NUUjc2ckkKLS0tIFpSRDZqeE5VM3ZsNGdYTHRWcUQw
-            VjNJci85VkkyWmhPdFIzOVA0TGxHUlEKRb9oG7s1l+qJx8zVN4vQ1qxwvsIhboid
+            QkhSSVZkVm05TEp1RmFNdXFydVhpQXMKgpF5MlP8wkOLkbCxozmtG+axD32rs/SA
-            8dcShpX3NIKYQH7dhQAM23StMp6eRNUGXB9eEkIGqlQJB3AirC0XKg==
+            Oc1Eo/ggRT54EGCFoMPITnzsC0ELqZOnOjpZi2FU/Vh1pEhBXCOwJA==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
+        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQ0NmSldIcGVpekMxUFgw
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxeXFyQW8zb09QRm94M1da
-            cWpNOHpHek43dXlUVDFOWmFkZTlvUmdGZ3hZCkFhYUVwcmRYblVNaEkySTZIMUtG
+            ejBkbCtzMkQyaVF3RkxscWk1cDBiQW5SdmxrCjRCa1UvZ2VhQ3Rqb3pXcjN2d2dS
-            RGhEMmUweHFyMVhlV3BzYllxSkN1eTQKLS0tIDNsalJkZWR2U29LbHROWVNLOWRr
+            VlROVHh0ZnRWbGVhdDYvY0ZDWUUxNE0KLS0tIE9zT2VvZ2ZjWnBNYWxTaWtFVjkv
-            N1R4S2d5VjNUeWtXWkJlSXBTUExiTEUKKqvErCTKMuYFrndXRTGFaHCE4UKD5PsA
+            S3VIdUgydit1Wk9kMnd0ZDB5NE1iaVEKLvVToIX8zc6lXi0Ro59copkeCl19Nv3H
-            0X6xKiMTK/6tQAEpaK06zihYnEp8X+N9z0O4hxzZbtHywrBkMsxR8Q==
+            obbUoW6v7tVnM/Khiw0DhHzzhLbgLFfSm/e6h/8o4Wok8CSHvp35iQ==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
+        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGNy8wN3hQY1FJU09uek1P
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMy9nek80M3k2cTNPQlRG
-            N3p0Zm9LT1dZVmpQTGtDbEN4WGRTV21zUVQ4ClJQdWhzU0ZxbDllTHFtekthZnJz
+            WE42aGtsWllkaHZjOFg2b3ROdmZuWUNLQXhBCmNZZC9mSXNkU2xLUnp3MDNVZ1hn
-            WlZyN3NLc0thS3hkaUhML2oxcXM4U1UKLS0tIFUvSVFWb1dmdWJlZDhXVVlVcDl1
+            YTA5TzRHNHJMN0xqMDhhZGxxSytpZDQKLS0tIHVwdHNRczZaLzRrK3QyLy9qU0E2
-            NERoUEZHdnF2MmhqS255M1ptMW9nYmsK8oEzGVaHg6TFg6lciRweWU3fMPJ6YCwE
+            anExUUFlRzdiY3dFbU5VMW83K2I0a1kKFaQVQH6mjh7I4r9UNk1Uvw2hyYnwLGSJ
-            KDX6I2Y6qbIJtTwhaYlgjBIZoQSVvRwkvLdi/q/WUPtXYtn++8bjrQ==
+            Z9PxVOucYfODHoWMq1jWcW2vQQO5G8dWtE3S97yoqNVteAf8nmH4xw==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
+        - recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAySXZ4ZExlRkQrTmhwSG9O
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDaHZmTzkrTjhETkttOWho
-            SjZuREplSEN2OFArdFE1M2ZocnVYVkRKaGpRCnBML3ltNVpMV3NTdXNxd01hMGhh
+            azcxb0lTNVd3aW5iZzBxUkNZQjE4T1EvblYwCnBSdFN3WFhBYWRFeTlSQk1MbkQx
-            KzN2SjhBdkVYRUlsY3BoV0tqYXM0TVkKLS0tIFR6blI4Y3Y5dlQ3alIzcUw5M2h6
+            bm9ORkJRbHhJLzJva1pvSDF0SU5pZlUKLS0tIEZLSmxBdmE0RHQ1Qk05MnBnUVlL
-            bXphandFODVQbDhJUzdZOFBHZjBZNFEKxLLbNbd7WQm/+2vSoTH+HIOL3nASwlGH
+            aWtDcTZHZ1BWWmtLNHEveEE2K3F0eVUKO5Yi/DEmFL5wJDL3XVFlRfWTjPTNVFKz
-            bxoc47XhNXVnY2aeDsL96WOdE6pZearD++c7Da8zOcZUK/poKILWcw==
+            G6NPwO5qeC0kFCOZWtKU8+6f0m3tw2ZsNylntnCZbRScbshR9QhVEg==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
+        - recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzOHFuNnFMT3U3dlZTVkVW
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSkEvNm1NZFgxRlJaeVZu
-            VVRLQkNPZEZ0S1hPSmdpdHJuU3dkUWt4eDNrCmRwTCtJUEZlSGNwYjUvVXRNRlBr
+            TCs0L3c0UEpTWmlDRnV3QnkxUWYxTnFIZjJnCnlOMm5lOS9MbmJwekNoczZsZFFa
-            NFVoZ05HdS9ZRGcyRGo0dUl0RHdwN0kKLS0tIFFYc1VvOG5hNGp1bEx1ZW1IT1E0
+            R3JKYWZoNjNLTnhscXp2UGVrOHBsUkUKLS0tIEx1K1lYODBuczllRkl5U0JTTGpC
-            bnRqNDRrQ202cnI1RHI0dkRqa3Rmb0EKj3NcVcTIa+rf2OFev3y+xmeQzV9BRkZN
+            RC9Mc2NyTUhPekJnY0VWSDVpZzlhVjgK1bFDQaqJf0Nz+IjTPPMgi5DxbW/ln5Po
-            4bXCPXNO1eNvA1bP8i8ha71X1KuIotWPiPssjEodREMyDMq7L+F24A==
+            SABlg3INzGh2pyAgOroBEKr0Dl2dU23/hX4uixP2YxkJRkbamU3+6w==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
+        - recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4U0ZoWTVrZXpCYzZMTDN4
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQUE3RHhGS01SYzMrZ0lK
-            c1dkMTdEd0V4b1paUU4wMlo1eURESng3NERjCjJGaHdmeHhzKzNyeFVXVFRkUEVk
+            elR4UEQvT0w1anVjeHNKN1JERGxwcUoxc0c0CmNLVEFVMWFDdGNlM3VLcDFueDNa
-            VG02eEtaUnBSdVhVUk9lWUFXZjFEYWcKLS0tIFVrU3M0b29tYlNBQWVXSjlLeENj
+            SW10cWhlWk5KMWtYMnFXTmJYbFQ1RU0KLS0tIGNHVWloaEtIeEVoREMvT3lqT3dS
-            TWdSY3BLNFkxWXNVY1VFSWZQL1pKbzQKxXPpqmfwtHbr+0DTeG5dZX2ihj1Ogb61
+            ejZwcVhWS1NmNVByRGY0ekM4V2lKQUEKOWxj1HmtSPoungbzek2Z0okRS59A2QwY
-            3wscc5WFDlrR/Jv4xvx/jFYxPxQHQcEg6fnS+pxczO2jv+aBhrTiDw==
+            /zXoEXgIskP9Rjr4zf29cE4RYSYW2UVU4aeE9fVA3Y+NrylGi5I3ng==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzYWQ4RHpNWEpKNWpMRGll
            blpTUWpmV1lOZ3lKdUwwL2o4TzNMY3lnV0NjCmRUNEQ2OU93QXdhRURveXY1bE5S
            alAwNzVGRVZtaXg0TU9xclJZMGNvSlUKLS0tIEM1SmY3TUhkN0FRb1JUMDFKVndN
            a0dIZlZ5ODZBMGtEZmxiTFRNUEdKQ1EKXYAaezVE0H1viKEo49D60i/zqHv8xZsg
            8c4oVRGVW3wLzb4Dd4O2MvLpNpy1yRgd1pN+qUB/Pft2G3IwWWw3BA==
            -----END AGE ENCRYPTED FILE-----
          recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
    lastmodified: "2026-05-20T16:24:18Z"
    mac: ENC[AES256_GCM,data:d3qcjEqpPIFeut634ImvISJLdit0MQWcdFYomrsqriqJ0NUKdyq3XCk85+vvPvDWikB4WEApk6HMXssSY8mhDci95q5Ssmr+JRAhLebMZjs9yXUf9A7vXpNFswmdldu3CKBiDrhm2GE08qUfsCkcf3jjihEqsfHhxMuWSd5fZpU=,iv:VZgvZ3bBArRChgRX38U6/43XoX5aTnts7Kd4S9spBPk=,tag:/5oOw5yvulvFT6KXv2zj0g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.9.4
--- a/secrets/hello.yaml
+++ b/secrets/hello.yaml
@@ -1,62 +1,76 @@
 greeting: ENC[AES256_GCM,data:eNMtZcpv04PHl/lGBZGBp7xAcO/5Sw==,iv:A4jtwePX0p/eDTP5+ztfV6gege9RwdPfLBY2N+DPfx0=,tag:MU8HpvLt/PUrNMw7BNUVIg==,type:str]
 phase: ENC[AES256_GCM,data:oIeo+kmkwaMDQrf10iY2PqOXJnq+hCIwOROQ86xgpkU7EJEeJKFssrNgbvQPHhIRZUZblQg9ZPamiZixQbYSTOXQSTWWu2FOnu6XFb24wCay,iv:TYKqoHcN+V324/roNopYhkwRpmv3cPrTFcmni5TajYQ=,tag:g8DXqEyORbQZ9B7PaFWgOQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
-        - enc: |
+        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWWkdsbVRjRUtTSFB3L01S
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzUFNydDVhMEpvMVNyMTk5
-            Q25RTnI3V3dtSm5EWWtJRDd4cFUvVnYyQUhjCnJtTHM2dm0vZWdsS1J5YkIrUlBk
+            N3ZiTGZibmNhWDBMajlOQW5BVGllQ0lWcnlVCmJsQVZ1Z0c0WTNIYWFYbFk2R2lZ
-            NHJuWW1MdVFmVStJNElkUUNEUWVibkUKLS0tIGNkRkRpaVNVK0NRN3NVNWdVc2Zi
+            RkUyR0M1Tjg0SUxhY0RrU1FnYlNrbFUKLS0tIFdSWlllREpVUnVOVTh6dTRxenhk
-            SnJUNjc4VTBkU1pMeE9CMmFUOXplajAKOHvgNGT3ba3HqqTeS617LRiTrzMp+zxc
+            WndBSEdid1hlRUZmMTl0a3d5N2lRbncKIkcQC2JTSxGES+DOzLCT3G8KrrIO2nUK
-            7r545Rvjz8dlfmIFL+6xHh8WFj7MtTqCYZ/eKQgZZmnmX6LxsW7XqA==
+            jjovwCLP1XxoTwXfv85nMPNwsJkCddg5sh/FXGTDglSBHfZ94RFeYQ==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
+        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSei9SU3BvUGFXcUFSa3h0
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZEptakpiYnRoaDNhek9E
-            VEViNkoxQTJ3eHlSeDdqcEd0dkJwTmpDbENrCkk1b0NsWVFnOWtNc0RNU2FyUDhC
+            c1NKSVNsZDBlbWhabTJ4NkM4RmNNTXVTS1ZNCmJ1RHUzNlZ3aGdsUHZCaXNEeTBM
-            UmZON0p3WFRTaERnUVFrU0p3ZzlsY3cKLS0tIGZmSE9UNmUvaFViZFYxZVFuOWtv
+            TTIzNHY0Nk1sOGRCQkVyRlc5Y0s1VHcKLS0tIGx3NDJDRmZiYzdTTUc1clRkamtm
-            UTFhS0NnOVJHRHl2aythaENCV2M0SGMKgudovCO4ZW/zhZvDGe0aln7rK3Qury7a
+            b2gxTGpZbEdVUS9oMVUxODkrVERqUncKTsngnt9pySyKqxhBOlDFbtqaO72Bq3Z4
-            xMAMfA2H7pzSu3nLRYuV2d0qHiOCHtWDEq0YL2IyFZK6M7CkzFcgDw==
+            CNVVigYh73xWK8CHVU+nj0QG+VFnRr8FJhRxpxJw/ZfFpHvpSKSxtg==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
+        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcEFtYlBZMnlYWmU5L0Zp
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5eDY2V2U1YkJhc1ZwSVRM
-            Q0tWeksyS1dvcTZFSmRBSGRrNGJDR0xyazJzCjV6aEdjWHVEY25ZN1VMajRPa0F6
+            d1NnQ1ZvUHpVbG5tWkoxT2N2M3ZRYml4NlJJCnJDVmV5bzdvTS9FZGlxY3pheDBu
-            NEdYSmNreXRUR0Y1S2E2VEFaNUhoajgKLS0tICt6RG9STlU2eHVyREZGcmJnWjE2
+            VFRWZ3pCdUFFV1R1dUtTSmMzcHdrUlkKLS0tIGRHcThteTlOUUMxOXZSS2tlVVpt
-            YmhXdU9GOWVMUEZQaTRhd3hVcTZSZE0KVroSqBqz7/zqOLmyVvxLefnCYJ23weQB
+            ZGl0VkJpSlVxQ2pzaEdmQnpmY254L3cKQ51TCwCzDpN8T5qsozW2ScSiBvvERLg6
-            T7PgXxoaBQTtKrmzPhsxhHq9AZz5yzsGR2TMq5CPJiWfTrwAMRtrMA==
+            p2128rIityffiCCUoOCUt8gHdqDBBivruVnofINlp7fN7m3xss6NcQ==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
+        - recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnZUkvYU50MklrVVU4eWFX
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNbHBLU1pJRXlIWFN0MzAr
-            enJVNHNpeFRrdDdVVHRHTTNQSnZreS9QYWdjClVPdXNCcXRTelhmSXRBd3hSeTBM
+            bnZUd3NoYXVsMmxKNkR0ODBlcFlDRkdTUm1zCks4Q042Y2dCTVV5OEJTS2REQm41
-            MHBuemdsWDl2ZTVKbU5ZVCtyai81WHcKLS0tIEdPeFNZYWgzVTB2QTR5MHRGU0dF
+            b3M4RVM5Vk8zSEIyYTF4aDdJWDNKbHMKLS0tIGE1Tzcrb1VTUExieFRxNDJPSFFa
-            VXMwQk9FVDNBRW1Zck5CeTVxOWM4MGcKmDZ+hx0R3j2NYOk7NG4rbo7yfoSQ52JE
+            SkI2NTMxdUhraWduSHpLMmh3SDdZaGsKzjZvj1Y9UlEoGZp6FJoOxW6r7sX7g7Jj
-            7JElgEXCoVpWPVzPEFKBAOGQFAPV/yOMVc25kRlAsQK9Aj60m+0DIw==
+            FpK4QiUhiKztNeUIdx7abte2rKSFqyjLdq45SKdqi4Bg1iiuqh6Umw==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
+        - recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkdER4aEFnWXJKR1VSVEVC
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNEhuY2Rrb2hzWTVFQlZM
-            TFM3eUtzNU9CUWVUajdwcWthNFpUN0tKa0U4CmxQMXI5WGo1eDYyd3dRdHVnTzU3
+            VHJURUJxQSt2dVhqbTVZNVBBWVg3ekpBeFJ3Cnd6bmNEL0RTNjc3UXEvOFA2ZVhF
-            bHlUTk56N0xaQ3NGUmdyVE04L1NHTWsKLS0tIGwzVVJ6UXVwTnY3SXI1dThGcDBv
+            dThNNkd5R3c5L2JKRTA1NDhNRXYxU2MKLS0tIFFnVU9TK1JHQnhRRy9CNWpzZjdy
-            ZXF5VnN0bElGdzZCQW54TnQrcGlBcGMKfO82YfNyoy416TEsqUzCopqxRENvaaGT
+            OFZYb3E4YlB5VlcvRVA0TFM0bFFLeTgKSFvNi+X2CI2zvWBdcctv26ocG07Xvtw1
-            2MKYiyP4psmwrN7ClStTYX0FezxWNfuoGn+jDTejKTEvvaPTzJgjzA==
+            mstp3VQUhwMYe63YVl/liU/JnBSC9EN0Q0/8WdsVUycm2HEIRBnIUg==
            -----END AGE ENCRYPTED FILE-----
-          recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
+        - recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
-        - enc: |
+          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMVUYxTzFoTnpXc081ZjFV
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Z3FRVzZWUU1UN0JUMGdw
-            NTd4ZjRRRlNGVUFIQXZmUDN3Z3o4ZzBMSWgwCnh6NEYxVEZ3bnRUWmZ1WHoyMm9V
+            T05yaU05Q2wzc0xpTGNkSThOY2U2YkNSQnl3CllYbUlwN3FxSHpaM2Ewa04vR09j
-            RHlwSVh0djNZdVBRb0ZtOC90MFYzK3cKLS0tIEtreUx1bk82djc3dERYa1dtL2Rz
+            RlF5a25NSW8wc1ZteEpyR2NJdWl0ZWMKLS0tIFBQQmJEYWpNaTlTMXdqdFh0OCt1
-            TEdUMk5hYTZGa1BnWFhPOTUyTGJ6UG8KDnCXxwLwKMhCmiLvHdbma8w37rm5OeZS
+            eDF0U3oxdXdQdFpNMjBBRGNFZnY5ZWcKvYjG2p6/MEd7VV5/K7tnNTqZC3R1BsVd
-            YtEnnH28myCxi1YUYdsEaq1luv0e099Nd2sXuvtsya38+fC5bmLpOQ==
+            oAHqKo4+mcqyRaS0UYoSfiDo6XyTUXNk8n3zRGMlKuSaTqGVpv/PMA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPU3BuZ2ZERWJDZU0vdHVi
            cmxwTFc2WXE1SjhBdmhnSUJIZVRrb1FHRnpzCkdiOHdFZ3NCVjM0SVN4cVZ3MkJn
            NzFiV0tFMzJPUDB1Y21mSDZGOGVzOUkKLS0tIDFUVEpUd0NETy94KzlCSU5UTG5G
            K1Blb2EySlhnQnFxUm1zNXNOMDRES28KXeFuHSpm3VrdVdzK1cMiFQQEzvjko/Xq
            Bsfu3mZ7fNlHW5szZtAFsyxPyvaELCPGprKmQFzUn68GFtphJxmXww==
            -----END AGE ENCRYPTED FILE-----
          recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
    lastmodified: "2026-05-20T14:39:14Z"
    mac: ENC[AES256_GCM,data:CAoIW1sJkIbNoXMaVlXwfHdREzATNqDKpSN5ecaSiRARThB0/tcLNbkazXKyV1Rx5b+b3s+yCpBzwmNnH6ytaCzG5pKPcnfd6YJq7C5rm/EQHyaVGrPdBsSfqiz4yBXKClej//v3+qkD5Ls2PMppv5KmqigOKNQC/ot3ht2c7lM=,iv:eOmDDclksr9f9CDu6dJprSFwlWuoggzVFjyfqWf5Uhg=,tag:IU3sMlIi92ohM86zOIJdAg==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.9.4
--- a/secrets/netbird-authentik-oidc.yaml
+++ b/secrets/netbird-authentik-oidc.yaml
@@ -8,47 +8,56 @@ sops:
        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZjBPQ3M3NkJwZ2dDZlA3
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhYmFWOGllS0ZTeU5yUkdO
-            MGR2cTM1b0NBN2ZETFJZUW95M2lITXo4dlNJCjY5NEMrc2xNaEpCVUtkVHJYa1Rr
+            QUpHMHdXUDZsY3VFaFJjbkQ5aDJVUk5RSG5vCmJ5RWNhZXZhdkJwdUk3anNjcWlt
-            citGL3ZQQnlMR3BpVFpmU3d0eEhiZG8KLS0tIFZGejF0UDJZTUVUMU9KL2hySm9L
+            WG5WSjA2UzN5TmloUm81VVo4eGdCdDAKLS0tIGtpclRlcjhlSDJnSFBmUkluM3Rz
-            aEx2ZWRuTldDdFJrNUlmMHZVay9vRnMK0XMd/S3VSdD71eh2MUJGs8c7Jdxmfpua
+            bm9NK3Q1NEhMSStjM0hSSXlBVUlab0EKeR1I/tAHV0ivIeaJkr0OC8W54Wvwpyuy
-            p4ZN4Y4MARz2XMA8xqDpw1SrMevaceD5+p+R+zhunb99aFfhtV7WxQ==
+            qc5QCjXeD9tpMltakMFqk+tDNtItRebWO33RD9TpSkryPhiYxywF2g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3aXdya1RpSGdsQVNMYXlQ
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZelpTaWIwbFN6bUJRemZu
-            cFhCZDUvTnFUMWdpQzAreGprTm9ZOE8vZUI4CmF4K2ZGQ29QOU1kMlhUV3N6RUNk
+            blF6VnlqZDdKNFpaY2ZXTTZCVVZETmtxUGlZCjlEaVIzc3cyVmxXQmNDRm5JdVpJ
-            bzJwZDNmR2NITUlzY2hSekozdDBsQzAKLS0tIHI4cy9IR1gvWVo1emcxbzFURWVM
+            bm9hbjNZNGVLSldnak8wWDhqZUpqRGMKLS0tIDhoUTJjU3FDRjdYcFNmekJ3dXAv
-            YzJvRjlNeE5KancrUUtSZndQNWxhYkEKAedJLVpc47R8rgm4YRyT7Z9G4tfbBnqQ
+            QW1tWElyWGJPSldhdWF0ZkFTekVoVDQKlBub868JsuRRrPrHkopMyD+GkeQo7lSn
-            c1UObcIa551wR79n7vJvVb2cSLz3VEURe6sNi4OqJmg017qrMOS5Wg==
+            s7WoYd2q0oKeF4JDgO9yNZbH1zGg+5Qa76wnOqk7z2zphGIpADmyaA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrazAvYnovQ3ZFQ3YvcTh3
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Zzc5NUJZbjNVQVAxUDdi
-            eGhYdFFTZ2ZkTElzVmFta3ROMGpCMlE3VEVvCjNXd2x2QTREQ2NVMEk5OU1JY2Z6
+            WVIvUXZnK21uWmlWVUVLWDBrdmlnZFJlbnlvCjhsRG41NTdRU1NrOTRlMStzZHBl
-            NHQzQVVaMVR0bWM4R0lxVVpwTEY4YXMKLS0tIHFTT1dRejNyQlVoUEREUnhlM09V
+            M3ZZUkpPNFBaRERLUGQ1cGZKTVAxdGMKLS0tIHYzdytHdmJWWHc1eDdHUUxNWnBl
-            ZEF5WFlnYmgyVDRUYXBTVTgyV2laWkkKdE7hAUxtDZJt8P4LrfOomK8rMTlXeXd0
+            TzJBTFhxZy8vWkFGNnNTNVZjK0ZIaUkKpRokUUB7W1Xt9jP7eVQw9Hch7Fn2oEQM
-            fyY29wRnXqn8s0IkpibWkByWLgyXHe1nNHHgsiPsxYMFbCRW1iwZoQ==
+            cuWcayD3w/DliXsEuS3ZGwn7bjzbJKLpDZmcxCNTwd600UdokAc/rQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdzIxYUlkY1YvTVdrREgz
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRUdQZ2k2T1AydGlBRWg2
-            bEhrTlpXRDFST2MxTUFpSWwrMzF6ZTVsUFRNCnB5WVJKaHNFL0hQak9ZbTEwNjF6
+            YUtVS29BV2VDWGVzV0xuYkF3U2NvbzdtYzFRCkRkK08vaDlOdEFsVHhCaEJ5cXZz
-            YmFEdVJ2YkEyS3BDQkUwZjBJNXh4UUUKLS0tIEpIcGV4N1R6aUU5S0l5dGZOdnNV
+            bEZ4cUxjem5oM3RlZm1JZXdUcStGZk0KLS0tIHM1a1VYS1krUlg2OGVNN1pCdTdT
-            Njh1WlAwR2tsTXZoUS9JMmlYZm1ZUzQKcqXYn1KgSzAXS+m13/wLmeriNf+fTzY6
+            TVVLK2FBdlRWTjdqWEc0WXlibytJczQKUoAigx2KB4JYy+LxbpAdUcuTW8afL7hz
-            TSBcB3OxgqvYAWwZutXr6UScVauZPuatSjwE1va4HJQuhSVoCGwqcQ==
+            9eTizEzZRphfoEioIvIes+sLAraTj1hQH/jSFYaM9iS3sE2Zz8u35Q==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4blY0TEdsU3VoSmR3M0FK
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1cXRIWk54U2VyNVNuRGl1
-            dlg4S1JCRVpZRnc4SURNaWdSUjVQdnpCazJnCjhobHN2dmpGZzhrMWs4UUFFdVF6
+            WkxlbFBMa24xdStmcW0rTUJFcUdDTUNqdmhnCms0cmdIUWtUYXNpTHBOVHB3czZn
-            RmtJb0VaQlFIeGhOMFA3Ui9iVmI1K2cKLS0tIHk3M3RhaUtSSm5vajFJUUprRzNa
+            Qmh1UFh5RkxXdlpPa2sxK2c1M3RmRFUKLS0tIHFYQU9jUzdqQlVRZi9RNmVzM1ZN
-            c3JiWC9WNVRYOXJIQmMzUHZxbUZtS0EKsE5cG85lsDFABMbR/A80TQMlurf8qHDR
+            OStmN2VQWHhXMjczRjdtYU9wUUg1WUUKrkjJBSPWowCpNFtPm4kvQKTiKBAquilo
-            tVxZuMQPIXBdg6Ov72xnQeMGC//apWO40gnfjGn+P3oZGy7m8XJBuw==
+            fwV5/ds2gvsidoTeC6aSNIP279TZu+iT6n/K6vdt7h+Gz0Xj5YbyNQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArbFZkV1VmWXFvNE5pMXRq
            a0ZDZUVsRXJvVUVNTENDbG15MmV1ZDJ4eWdJCnJWY1dhTlRkUUd5anl2c1hYajhJ
            NmNzai9GSFVralRnaHg1NElIeFQxQVkKLS0tIGROK2pGMS9mVTJpanFxQURPNDYr
            ZzUwdDBEdS9kNSs5bDFYV0FUT2xuaDgKOwWcRF2vk82imiho3y8RliyBYzhG7AP8
            NIham/3UzYOLViPTHmMhNY3fEwUf7pv07Z1tsAglnPm3iaxbBl0Gog==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-21T20:13:20Z"
    mac: ENC[AES256_GCM,data:bi4o17skIOtZoxJGzLFJ7IAv+X265qIhgnQz6wr4bch2xofwPZZfzECck0I0xDhcwxcDtx3VZ5E2VBdvHWk+iSan+clRq7735k9+DIpjdWaGxIHuylmelZl6aE5kE36UO7fQdnwmiqCPHxiVq/sKuqknFXkl1+FvO1ryrtSHQsU=,iv:xxm+5rK7o2c43iGS1j2Q274QCRsbDn+k+wskpp5tzeU=,tag:sZHk9eth/TwqM8tIWSrv3w==,type:str]
--- a/secrets/turn-shared-secret.yaml
+++ b/secrets/turn-shared-secret.yaml
@@ -8,47 +8,56 @@ sops:
        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZnc3SXVxWlJHV2FlZU91
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3S0pWdGZGSFcyTG1pMnMr
-            Q2pVRXEvbFNOODVaQ2F3dzVva3o5RTI0TTFnCkI4MWN2TDR1dnR4OEhmZzhZMW1Z
+            ZWpOQ1RpR1R4T2tDYTNMdmNtcnFwVzlCRHhFCkpJQm8zaDNnWS80OHA4dksyTE1P
-            a2wxaGR5MlVNWmh5YkZwb2dTbGJJZncKLS0tIEUyVkhYZWJiQUhNNTNtS095ellm
+            c1BnenJ3ZWRESlRNajltWXgwUSszYzQKLS0tIDcvdk5CaHgwWlBQanIzYmJ4V1Z2
-            UnJBZGVPNC9lY0xKTGNldWs1aFJGSk0KvKBYSxJ0jwddf9OycUfrfYYmH8MoxIbC
+            V2pEb0M1WmxGZFF3TmZacXFBakNpZjgKyv7Z3XvyLYTGoyS2e8ptPgIALQWKi18t
-            oO8nk2sfY9enGziu+A0GKEmCIzhBkD+Cj/8jyqTH56NKFykKNpFQyg==
+            b3qO9TTY98HGUwTLBU7Tf3IcHy8aO+u67sCVMbDhfFTd4g0bfdrNOw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZMXpiYlVadUgwei8xU0tv
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByZGI0ZmhWMVlUT0x2MkpM
-            bkpoK1RzS0tnYlJFN3hqRmJiK0Q2VVhyN1NjClZLRVZMcldNQ01yOVhQdnV2QkRE
+            dUk4cFBZSXFYcHd4dWt1d3hCYlFzUkJEdEJnCkdIaFBDcHJyS0p0aUZXb2xKckIw
-            bUl3YTQwSHJPSmlpeEpqUG5tSnZRZ0UKLS0tIFVodEZtaVFoYzFkdGd6VkdIeW5P
+            Ky9CT2lLWXp4dkUwNEpoRmd3YWNDaGsKLS0tIHdROUx1Uzc4NEVrZnBxMHVmUi95
-            bHQvbnhYNnFuR0JGbkljdVRjVEZ6a3cKXccTdlgR94QmaeLGYnXXKOYFuJYkJ08Q
+            SXdZaUZGZklIalYzd2xZdjZtMFQ0MnMKxEKbyLvlwdrDx4G1CmUs2qs1nJbdIlSu
-            JYkpwRlYzYMfqlYNuANi2LYTZePQITIYZ+A9sHajCXQlUGjs9PCWsA==
+            coXVNnkbt6FIzNO08DxTGBP7Q2XQWQKMvRpBFDYYUssOGBHL3JPVgQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bkppcWFWZkVxWGQzRzli
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWU243SmlKVHRwKzMvaFk1
-            bkMvemZ4SGJodEUycGVxNlZFYzJqQlpnZml3Cm9UNFBjd29MTm1NTXI2OWljNFRZ
+            U2ZpcnJxK0RwZXhzWFpQOUNyS0JOZlljbFgwCitQU1hTbzMwNlltcUZaSUxXK01T
-            bGErNC8ydVFjTHNRcWpWTFFvNFQ1V2MKLS0tIHpXUzR1WGpPRnJNa3JEWFhFQ0N0
+            VGFxLzZCZGZsUEtXWjY5b2dBZmxDcGcKLS0tIDM4S0Z2MW1rVmlyZjJ6N0NZQytq
-            ZWhnMzNEaTJ5RHRaRi9lMDZyVkxFd00K/zh7XlSjvO/we8GNDhKvhmPBAPZTi1o9
+            d0xLUlNHdE1mZVhOZjVManA1OXhBV2cKgoo6S6kVypzCljJSqSRQP2fSYHizdZQF
-            kBruJ1OAFIJU4h/6dOmgGsj1Jxx/KZwMMAcHNzUBzm8x282MlFzM4g==
+            H6GNSOCj5fYbkZQwa3WUyun8YRl0BMgdkg1Uym++b2EGGCOFoHSuyg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqUjZXMmpXTitCam1HbkIz
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrWU5PKzk2R1h0VVIwMFFl
-            Y1UxY0xLR25GbnJucTMxV2x5Wk9SZFVVUVFrCkJzQmE4cUkxSGV3VjAyVlZEQkda
+            MzBCN1BXUGdvS3FobkNiTGZWRnVkckVWUGs0ClVSaVEwclBDdnkwalllUFF3T3ln
-            aW9SRmdGbWwxd0o3OTYvV2pmUHJxN2sKLS0tIG44cXZRTC9kSmJLcE1JSVVqWjYw
+            V1dHL2Q0MnR0Nm9BUTdIbTRVUlJQZk0KLS0tIDRjd1hjT1lja3hPS3FyQndnNXJi
-            QkQzTFZZWno5dHhmN2pEWXpycDdvUjQKmcbWAZh85vSozzsX4CndtrxneA3em3JG
+            SzczZU1pVG5xM05TMUdtcHNNbHE3WjAKITW1sBP9TqZ6+cKNMnvQPzuNAdawaX8m
-            nhESflBPc/E2KckyTHOEJkPBq48UXiAvM3pY0s6FGgkhXHriTVJ7xA==
+            H4aAjlaR+BCrJPNJmv3J+VT3NZxw8rFIKQBu+c5h9RaU3RX1o/A2PA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdWNGZi9JWkZnSjF5eUZN
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3d0p3Z3J6VXBvVjZpMXVa
-            OUhtZ3B5aDVaV2dpU0liOHdtZitQSUcwbGpZCmttMEI3Mm94SnZwNEd4bUYrRHlD
+            TDZ6V1BEdTQzYzErMitDeHpRT3NFQ3FVRURzCnlWaVkzYjhXbStVSmp5eThBcXZY
-            aGJBa3pKZ0VRVXlkL1JHVG41U24rU1kKLS0tIFEvYlliOE9iSHhIbHR3RVZNc0dx
+            RG5MQXpWYXB1aVhISmNJZ0p3K0k4akUKLS0tIFJWa3NkQ0tEc1NscHRjR2FmalpL
-            VDVkN3dYVEJXb2dPYjAzOFU5Z1VaU2MKzVcJ9/z4+9phsdwyowwK//Tpb0Ga8rwo
+            SVBrem8yT1FqRjI2dlpQTzB1N3JSWXMK08Gj8cRPmImMVPbS2/0W2qHqJCZ9Gy9S
-            nTcLYw50wOKKG4ju1ISB5RuuUckU34dmUV7k4se9/oxnnectFwYVgQ==
+            VgvSaI1PX1ieOkpqvl6nNUfWLzykZkdcAu9DhHC9MSwDDYy8vOBHPw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSdVBpMmFEcUZkYjdKY1Qz
            aCtWOXFoc3FGd0dZUHNwNExuRFF3cDhXNEhBCnQxZWNkbmxQMnNSaGhjS0E3TS82
            a25OVytyK2lnUkpwYmRIUEJmZG1yLzQKLS0tIFA2U1VVUzdNb3B1SUFnZmF3VndQ
            R0NuY0NWRjU0MmVEWGhyYWN3dk9nbmMKbN0hg8Sd8/TJxTSvhMYicpwLnR7LPD7P
            HeH+hwrqzT/3CRDpL7DRpILommAEQ+3j1dbaLTdbE1xhBp7jegfD3w==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-21T20:13:20Z"
    mac: ENC[AES256_GCM,data:PXXEpDbJIoIwWuNwMetpALtxrcB7yJhDYqp6LSKV8WFQI2TJSDgDHiNQ2cngfB9PXKmUNNhlvhmB52Hi6WQSWQdXjiy79T1fOjMhbUAKmykTaZDrwvlrDGkPgiZ1cFSb8+hx/5aZw7YhdQO9+7LAmymeIldZIFEpEO2pvuPZ6MM=,iv:mJb3K8TnsnY183OX7o9pF7oVMDcwVU/rOgX74KTRpr4=,tag:f+M+FT0Vjozm7a8LFDI8lA==,type:str]