From db83366f1d23934fe1cd8df415897f33a2ec98b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nikodem=20Rabuli=C5=84ski?= <nikodem@rabulinski.com>
Date: Sun, 24 Mar 2024 17:56:17 +0100
Subject: [PATCH] hosts/kazuki/zitadel: add master key

---
 hosts/kazuki/zitadel.nix        | 105 +++++++++++++++++++++-----------
 secrets/alert-nrab-lol-pass.age | Bin 384 -> 384 bytes
 secrets/alert-plain-pass.age    | Bin 339 -> 339 bytes
 secrets/attic-creds.age         | Bin 452 -> 452 bytes
 secrets/github-token.age        | Bin 693 -> 693 bytes
 secrets/hercules-cache.age      | Bin 979 -> 979 bytes
 secrets/hercules-secrets.age    | Bin 923 -> 923 bytes
 secrets/hercules-token.age      | Bin 888 -> 888 bytes
 secrets/leet-nrab-lol-pass.age  | Bin 384 -> 384 bytes
 secrets/legion-niko-pass.age    |  12 ++--
 secrets/nrab-lol-cf.age         |  13 ++--
 secrets/ntfy-alert-pass.age     | Bin 907 -> 907 bytes
 secrets/ntfy-niko-pass.age      |  13 ++--
 secrets/rabulinski-com-cf.age   | Bin 380 -> 380 bytes
 secrets/secrets.nix             |   4 ++
 secrets/storage-box-creds.age   |  12 ++--
 secrets/storage-box-webdav.age  | Bin 382 -> 382 bytes
 secrets/zitadel-master.age      |   7 +++
 18 files changed, 105 insertions(+), 61 deletions(-)
 create mode 100644 secrets/zitadel-master.age

diff --git a/hosts/kazuki/zitadel.nix b/hosts/kazuki/zitadel.nix
index 71d0fe3..ae51d32 100644
--- a/hosts/kazuki/zitadel.nix
+++ b/hosts/kazuki/zitadel.nix
@@ -1,44 +1,79 @@
-{ config, ... }:
+{ config, inputs, ... }:
 {
   age.secrets.rabulinski-com-cf = {
     file = ../../secrets/rabulinski-com-cf.age;
     owner = config.services.nginx.user;
   };
 
-  settei.containers.zitadel.config = {
-    services.zitadel = {
-      enable = true;
-      settings = {
-        Port = 80;
-        Database.postgres = {
-          Host = "localhost";
-          Port = 5432;
-          Database = "zitadel";
-          User = {
-            Username = "zitadel";
-            SSL.Mode = "disable";
-          };
-        };
-        ExternalDomain = "zitadel.rabulinski.com";
-        ExternalPort = 443;
-        ExternalSecure = true;
+  settei.containers.zitadel.config =
+    { config, ... }:
+    {
+      imports = [ inputs.agenix.nixosModules.age ];
+      age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+      age.secrets.zitadel-master = {
+        file = ../../secrets/zitadel-master.age;
+        owner = config.services.zitadel.user;
       };
-      openFirewall = true;
-    };
 
-    services.postgresql = {
-      enable = true;
-      enableJIT = true;
-      ensureDatabases = [ "zitadel" ];
-      ensureUsers = [
-        {
-          name = "zitadel";
-          ensureDBOwnership = true;
-          ensureClauses.login = true;
-        }
-      ];
+      services.zitadel = {
+        enable = true;
+        masterKeyFile = config.age.secrets.zitadel-master.path;
+        settings = {
+          Port = 8080;
+          Database.postgres = {
+            Host = "/var/run/postgresql/";
+            Port = 5432;
+            Database = "zitadel";
+            User = {
+              Username = "zitadel";
+              SSL.Mode = "disable";
+            };
+            Admin = {
+              Username = "zitadel";
+              SSL.Mode = "disable";
+              ExistingDatabase = "zitadel";
+            };
+          };
+          ExternalDomain = "zi.rabulinski.com";
+          ExternalPort = 443;
+          ExternalSecure = true;
+        };
+        steps.FirstInstance = {
+          InstanceName = "zi";
+          Org = {
+            Name = "ZI";
+            Human = {
+              UserName = "nikodem@rabulinski.com";
+              FirstName = "Nikodem";
+              LastName = "Rabulinski";
+              Email.Verified = true;
+              Password = "Password1!";
+              PasswordChangeRequired = true;
+            };
+          };
+          LoginPolicy.AllowRegister = false;
+        };
+        openFirewall = true;
+      };
+      systemd.services.zitadel = {
+        requires = [ "postgresql.service" ];
+        after = [ "postgresql.service" ];
+      };
+
+      services.postgresql = {
+        enable = true;
+        enableJIT = true;
+        ensureDatabases = [ "zitadel" ];
+        ensureUsers = [
+          {
+            name = "zitadel";
+            ensureDBOwnership = true;
+            ensureClauses.login = true;
+            ensureClauses.superuser = true;
+          }
+        ];
+      };
     };
-  };
 
   users.users.nginx.extraGroups = [ "acme" ];
   networking.firewall.allowedTCPPorts = [
@@ -52,20 +87,20 @@
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
     recommendedTlsSettings = true;
-    virtualHosts."zitadel.rabulinski.com" = {
+    virtualHosts."zi.rabulinski.com" = {
       forceSSL = true;
       enableACME = true;
       acmeRoot = null;
       locations."/" = {
         extraConfig = ''
-          grpc_pass grpc://${config.settei.containers.zitadel.localAddress}:80;
+          grpc_pass grpc://${config.settei.containers.zitadel.localAddress}:8080;
           grpc_set_header Host $host:$server_port;
         '';
       };
     };
   };
 
-  security.acme.certs."zitadel.rabulinski.com" = {
+  security.acme.certs."zi.rabulinski.com" = {
     dnsProvider = "cloudflare";
     credentialsFile = config.age.secrets.rabulinski-com-cf.path;
   };
diff --git a/secrets/alert-nrab-lol-pass.age b/secrets/alert-nrab-lol-pass.age
index 353ae7d7ff945f502d8a2cb5f5a33c8555d7ef11..0734ba7b62dfae57a6e701385dc17e4bccbb2152 100644
GIT binary patch
delta 349
zcmZo*ZeX6EQ(xfZQlanU<Q!xW>Fu29Umou6pAnvIR25NVP?(mLtM46ImRwlwm{VaK
z%9Ux6tzGVB;_K;ekz*KM5}0F<TIro#l<A)xZdMpjW$71~?U_;J;*sHK!KG`bP+Xj$
zo0?)|YHDby;O?DKR-Ufllays-o?Pyjsqf{OXOS8lRbP@8WTIb^nBr;SZ*1i3Rczwn
zon4$1Ruq)YWn$!%R$%CB<{4<=>7G$s;vDK8<riKOkY(a;=u)1UTI!T%k(23ap6+47
zrK_u};A&W080Kc~VwN3Q?ptDH6q@g1qMeaf>QNXLP?8vul;mEVSdr=FY8c?lwIwmw
zk1yx*qA<NQ(Y@=JrhCn{<`OcNSouPfMQ_@tH>VpPvh_VMjk-4Tb7o!FYd%%Os(x>u
wb8Y(?RxER8QM4E87Pnu$I{(;b9tm-~*IG%QzfCv%soGffa(=~wwXN&j0P5O(*Z=?k

delta 349
zcmZo*ZeX6EQ}3HnSXvsX@9JL~mQ-AjR%zyI<PsL<ROy@NY3y565L{ImUglVyQ<NF#
z%N6SARbuLq;bIb+?_=bf5mZ#}Z=9d(?i^`RW@Ky-rtPMkmF^Z|l$4Ym$fawiP+Xj$
zo0?)|YHDby;O?DKR-Ueql3(PXmupnuk)EHPSKwKZS09`mVB`~|pW#yMn(5~f;%(t)
z7?71)Xj$dRmEmtt73>vc;^m&?7hV<V8JOyx5|C705mcHQR+?0pQRP^a?ctIb;8S41
zrK_u}kdu*ZQE60S67K6*kmnf|s&D4%?BpKlXymBxTjCq#m7Wvj9-QOj9gv^S<?h_f
z`gws8cUbM`I7Xv;9mftZ#22ZB6&*S8NcBT_p1;xB{D!*2k`;bEOmbVcO^GRYEv(B;
w)_8ekLGZuSv|H-i7G5}1VtVws)W`p!Q#j`tuTMG<dF)xx6%*Hgv5!Mb0O`4b^Z)<=

diff --git a/secrets/alert-plain-pass.age b/secrets/alert-plain-pass.age
index 0509d9551ce95c6836253b067498d082c29d0511..3d0d1032c2df2ab90912f311c67012608abf3e6d 100644
GIT binary patch
delta 304
zcmcc2beU;_PJN<Vk&|btOQ>bJw|jnAc0`_Oc9EB%sga9gYMP}-XoiWoWln&8QdU}^
zCs$;cnPXb8acHhtUcQ-0ltp-;QD8`Fd7g`}ae7*6MOai>nTL^IZf3TZ0hg|wLUD11
zZfc5=si~o*g1dJ{S$VpGM`CeAewCB9fxlx`fsbjWNqtq3yM;kYcBXSqu1ShpVxdKd
zQ+kPhRaB)fm!pA4rMY*BcTsSXUqqpqrEyTPNlr?HtEG8}Us9m9Z*Xo@n0u;)ws(*T
zm#(g^LPlm;Zb@LId4ZpKQb<UCo`JthSYBCBdT@q&RbW_RWVvOSM{%)Jd2X&J*OO;6
z6%OwId|&gq=3LRslNwH}Hrn>xv_!G{!q;1jPYykmH@O?1@%xD3)@PNT9vbTy)@lL(
D)*NlI

delta 304
zcmcc2beU;_PQ7=kWmaTblwm=Zahi5XRJxg8kXdd@Rc2DLPf(egeo?4nn3HyaMMZ#z
z37213PH1IiL6E0gpi#MFRHCO}N<c|+Wpa^kpnJKuOKDh%lZ(GaaJFxnBbTn7LUD11
zZfc5=si~o*g1dJ{S$VpGQC4z(rE7Lcd7*w`iKBK|aJ`>NS+1d(pNUhNcSuF9pFu!I
zSZ+#gc4(C^mrtOhrD<tOVM<P}bE;oXNoIL?M1Dn9l0k@>qqd2ErMpjIiKAPIX?CP9
zm#(g^LRFPzMq+T9Nq%Wjd045rc9^kaURY?hxmj>paB*aMW=LRmcw$j$m42xKmqFr$
zblGVq!ZZ(_+_>=0%i`^M$``+>dA7*zJS%Yfdfb*3A!>7c->z6TY2w6PTA52T{#*tC
DxN&e9

diff --git a/secrets/attic-creds.age b/secrets/attic-creds.age
index 18f9e54022d192a3826bfaeb4edc4ac00ca56b90..0c7e18ab9e0695aef7cbd70606f895f71dd133ee 100644
GIT binary patch
delta 418
zcmX@Ye1v&|PQ6iKc5!4@Ra$aDRFy|wkZVL(xRIrAMtE6bRivkHW>`>oSXw}Op<iiG
zI+tZim8pMKQEFgNYO-;0kXKMiN|lMRPlShGNQp~od8tWSxW8+Zv3o?QE0?aFLUD11
zZfc5=si~o*g1dJ{S$VobX0Vxsd4#{GNlH?YM~1s;PQ6)JKtZ8pW>jK`mxoD(n~`gQ
zPgq1nWm#4zS4eJ3eo2yLMwWYVX{Lv1qK~JuML>RuNmi6uhI?tHer~C&bB3u?P@aAy
zm#(g^f@NBiw|;VRxKWN#L1ex~l0|TMif?jhM1D$9kY7-`g}X<TshM#^nRBH97yFaU
zEh00XzO8?=j@O)dc5&#2Jv%2Aeo<FvwSHS5b7kF}V)q%AS*}GQPhNF@EiTHETXMU2
zbzR1_P`S*%rE)VD1l--fG)(kPf#=Ct{Y!<`oZR_)ZAZ`?n=(VQ=kqj+L$3x%FWDB?
z#y{1xsAR$8>-SR2y_bBhocwFbiz#fvnh6toxLk~1AJ9ttBhB&cuh2anImMev<=Z&c
Sgo>U2|0Cp)kzZ_k;!^<Xf~D&K

delta 418
zcmX@Ye1v&|PQ8A9MRA$7NkEE4Qd(F+xOQquQeL8YQG}tFi@BFyL|RdDNThjjQixM|
zI#*tiYo%*dXmP4@WVw-RS&mn(S*5;viIab%mw#eWlC!^Ya9K%Fg+)<{BbTn7LUD11
zZfc5=si~o*g1dJ{S$VobMT$wGZ&0?jg<+wuyQiUFM7?`nWOk^lpSiPdXhx-vslTs*
zaZzYlNuY-TmvM!5YNoHbMQNIGSyhyesfS~VMS6aqp_99ZtEZ_+T2+v%zD2UHMS-ya
zm#(g^f?q^PLAjH2YNl&RmA|pSbD2+iqNjmdaAkH*psBuzk!4;<S*TB8zEQ3#*Ov^&
zPw)6tX4QXGXi_Ya_~bD8o{Es|&u^1m3ama(3J4H5n!DBNc<GDRJx!P2?s;P+&}F`Q
zftgI;GD)}ZtG`Q_e5_%$@$B(YG+_A36<y~l@;A3e=d9k9yVJ{Me#oWTF>SF^p2wtc
z;kZY?+dd`kDbs(Xyhx1dNp_X_si~|JedJW=&ZFTUtA9yJe?Jv}An3+janbFsbAR4$
SIe+%l%GX!Q?SH3S`vm}L*`v|`

diff --git a/secrets/github-token.age b/secrets/github-token.age
index b9e993b47659678dc6a72f4b673f30fc2727f4a1..d0473f3f774e72c294e104af93b46cbee46aea46 100644
GIT binary patch
delta 602
zcmdnWx|MZ;PQ7=9Q)!fEp-+URql;NoQm&Iza8jj7iDPnZfTw9jWJrjsw@Hw>p=C~a
zD3^z)Q*ub8Sz=Luxn+)fu%muTVo{lAs(*=#dquusVTr#<N`6XYiDOtnAeXM4LUD11
zZfc5=si~o*f`v(zWp24bc79-1MsQJqmruU0Z&6-Rp_@xoNqACHPNK1kYf`pvRgq6&
zh-FH6M1X+_ms7UBzh$bKNnSvyPiBcpQAk0eZ)9>}q>q71u%D4{O168BfpL+Ae}0k4
z#E;_P{&_k2rHP3d$>nB-nU(<tKE|1DE=dK&1(`)v!Hy<A+PQ`%;gO+LZsn0&j)qkk
zo~gza+Fll+1ySMoZf0R#WjU3lrG=%X2L6U-MW%(mWdUAcmK7$G;~B-n0=$g;U81sb
zBQ1i0iqZ{?&3sJq%0gVj1H97x%))&$%v{n<(#nEDEAt$=yiJ0NOijHjvpn=OytI9j
zER6De%fo`Iiqg}PqJn+>Ej@Ef462ffa)T$IVU(y(bTrovNiFvDObbo+3w2BM$w@28
zjxZ0YGPCf=weU~(bulOjEzF1tbxP;bPV=dZFvu<{@^v<KE2t_@s|qQuEKhd}@ir|D
zN;UCz^G)$FO>>C~&GzKd)zwu938=~_cM3?&j)*YK&2>o%@y`wqx6E@gOU^b=smx9F
z%*qaO^GGZ-F%GlfikR_W)14~a_ZCcY0=_3!tjbNeTA=aQzv2I*tNI;TKaAg~I9Lcb
p@hF|x>?C>ZMZ{i>dmPyrIaz<0W<6eLvDo9KYrvZ&!tVv-k^pWx(Y^ox

delta 602
zcmdnWx|MZ;PJN(rd1XMDrCViARat?haZ!1ole4j_ev*ZLL2yM%mXS}XaYU+xYf3;~
zBv-kiv$MayuThD2sAE!2USf{9Pf&zMkeQi9xxc5MTZ*4oab{+iNt9uDF_*5LLUD11
zZfc5=si~o*f`v(zWp24bXo011ut7w5s#~FPXrymorJHfSMX5=ZcUG#lcSNGUvrm+l
zfm66opngU&S3#IZsZ(&Uzk5NxM~0tqimz+FXK<;pdA?UcwyRlog|=T%iD`03rMG|a
z#E;_P2H7RqVd;71$t5OvrD<-Sk?yJ5p`|8%ZmAV+fmP{gW}%fOUQU5U9)^)zA-P6D
z236V-RbCd_dEr@(DQV7T72$p+p2d-V6%kQ6hN<Rek!B^4X-T1z;~B-nBC9-uOp`rL
zGb(&TLUU96^~+sTLrpw<k}N{~&9t4ILJfi{J-qXLTtd>hvVF8Ys>;$0+=EN>O|$*O
zBLlqkg9|Fs3iB!~OuP(oQX(UQQ@vb6GLk2sVU(!P$T7_<4M<Hb@Ygp_w@f#8b#*T>
z^7PING;<Bi&o@j9EpsZ0$jNoFFv#XgE40w|%&<r_DGRGgcTIIO4h(cFDas2s$aC`4
z_fIoP3e^uzck?rG$ui;6)zwufsR+%^GY<(&am|gY2u)AdHcu<a&n+$qcTO`)F4xa6
z3QP*}Dk(IIFb?zO;$x6`H8Vb8n}naYv%rOH9kI_XEv~27LrT7d^_H#@{Iyl;X_L~+
qi7}GLZI843*tc&D%RT1hd%k8aN%_4fW#7W0GlxGaa?Rz{{saK656@@-

diff --git a/secrets/hercules-cache.age b/secrets/hercules-cache.age
index b5456e654ecb60e4e37d9695e0503e72b701322d..c8f545e7c48c7d7151d708cc583db31c4f35acce 100644
GIT binary patch
delta 891
zcmcc2ewlrOPJMo2aJH$Ld7f)QlzzIUfq_?*wo7t=VQFrOQ;xoAT7^qeib1w>K~R-r
zF_&p>cvf<HqNQV1W~GmpPl35dphZqbK$&@vuXmxLcadv(NUmvsQCfavIhU@TLUD11
zZfc5=si~o*LS}w|uZN?8iARM~PKZ~4lb?TJRA6qlsauw_SD0y{zP5?EbE<w|Vn9{6
zORA@DfoZNUS4n|>aYk~GqmyfPnnh$tq-$|Tq*-BVP*HxqcCLYEsbzjvrCUZ)Mov`v
z#E;_PNomG`VL261F5!_D#(_~OUS35Oh92&IrDkb)IYpM4Zb`}cVUAfwh6a&bK2Bcd
zuIVP>8HL`(K2?ReX69y|PEHX?h1$t^CHX#8#Z`XZp4vuL-k$lB;~B-njS}4qvfM&F
z1Hy76^DBLGLn2Jl5<?BW3?iM(DvQGn(<3v2Owxmr%PS4IOnl4zvW)`L@_d4{BmFWw
zw2LAmeT$7Uj7xHZ0zy6AeT{OAB1#i|3jJLtpJf!U&#=^XbI;MvEeqB6PH`!#@GeLX
z(l#mb)eiUatjrF|^>xqlaCOT!PxtWT()SJyjEpSI@pVm2*7l3ca1O}x(vC0+@+tMp
zG_^D?^T|pnEX#{5@v<!D($&>fD0b3LEcP@hO)~H?_s&f=@h#7G%1!btvIr^-cJj&%
zPK!*cclQWzE;scn=W3g{>YQa}eA%|Jh!v+Vefe?jc!24q3-kA_iGCU%^6vhEc+qzm
zR`Ip`li#t*9pc+HtxaFW|B+ZS!+G^%e}dod{!{exkY?@nXW1<ZH-uQ0w!IhqvsU}Q
z(?PacjW<0i;xqR?o!3#IwIyKhqbDn0#I;E3Z(jdm&bI^gJ2SUSEZxg8dGp)_H&?v$
zn`lvW<-y!#MLX@d)mEG9>=QKA(G=X~tm&1J`*A|DT5G4ZAs6GSJ8KOpvs11mvAd|G
zzh3ULMYCq9w07@yUhePhzMt=zDJfg--tchBe${}@D&=0yj@nku5>_)V$Oy{4b8>lI
zzGiR23Ed+%x7R5=$u4?S5Xlw#hGj4Ngw4DcPs!}9wOZg{xAtX$zx9k3{`U=Ur@Sio
zc>PBir~Lz2ZQZ*+S#B(yl;mGC)92UEJ3rEzWF9i=X_@VN!7jb0ZBGe9)T85k=kF`X
jaj#vp-)BwI&&2nWr4~-ys;a#-E#4_k&Lv^TvVdLy{O@0e

delta 891
zcmcc2ewlrOPJLCXOKzrlV48EWV@kPpsB@@6RzOlpy0LpvNn&cKx1nKjl730JyIE0?
zFPCSLf1q!fWv-Wrwq;nDnT4lopl^`5k!40%h`+wKv#Wbyka>i6YDGz2B$uw8LUD11
zZfc5=si~o*LS}w|uZN?8MNzV|d8J8^XK<96XNh5ng_~cXVOdtVtA1o+n15DEy0&j&
zK#{3Od6b7QS4C8Qptie3hN+9CYf!jrL4|K+S$VjAWsZALX^?h~V@7_IS+TRRcaVGJ
z#E;_PW}$g*>1O6`2HDOfp6<DU0R=^67J+#dRmD!0-X)gB?oO^*?)vTqhN0P9evXc1
zKFJ~4Vd164MP@-21_c4$;l&k>6&{%>MXq_JkuH{DMP(*|#zn=G;~B-n4NcsW%u0<6
za|%l`O?}giDhhHfvXXqtJ)8r>JzPCXiw!K3oJ%SqeRGnz{PK!R3tg*>6Ag>9t3o48
z(>%+}ER0hMQqnxLf-}9#!;ABSjfw({12Q8gpJf!UkH{!?bB*#htBg#_^z!wL&@L|t
za}UYPFD`X2h;;PzbPdSy3ogm4%n3E%D)X{TDKSlQbE+~lHFl0l_wy(VF*I<=4)=7=
ztqM0PbT7{hDGSecEGhHk($&>f$O$wJbjeQ-h;Y|8F7;0_%rVaiw)85|_sn-U@Nmxd
z4U6!r4>Sz$PBO{Q<~siCPI>$a7stjmyA-FNv5nrpW_?ojl*m^fwq~fNA4s`&bHj7P
zo8=4#{F%1Z_y359n|Z~$tp4vx%c+ZRS{}DpT6O<q#M!AV`))sTU-ahu!Ka1#|IV*C
z>15_9bE3j{|Kho<``*v~Fg@w_TJ1e|BFc2V);=ih4tsdA-sbvyy;ClHr3_KW-^p79
z%KIBwvZ=q-Q{FOpaj<iV(7MAHSlFlg9&t3Z-MHrB)5jN=HJ&~mro-vI`~JSJ^0X9*
zvzq$t4_-&!aXtED-=sX@7~`JDv*z#ANGqB3_>mLa?yxCr-;+0bW@qotJnd=!*>;=w
zyrPV2&re3NHhS4E(VALR{Ch{*o@;g6<6mqszg~TOmO#?+=kxz+ozXO`Wxlsc@zI1e
z;h!=>Co7(OtoBxN(JYT?#h*7dEs62u3XE~$)U8&VZ1?V(eVA0gm8OeknGb*F5*MA-
k)g^r&*)Pd2-oas(C3eC3wTad_=7uM$y(RxyFIzDU0Q%ZxS^xk5

diff --git a/secrets/hercules-secrets.age b/secrets/hercules-secrets.age
index c7437673f39f31d201829239fddadcf12fd96a51..8c204e4c818c3d80f37a4108bc3984305d7cf649 100644
GIT binary patch
delta 834
zcmbQuKAU}lPQ5{<foon)sIjH5g_(JQrD2J7mS;s|xUo@Ccw|X-Rd$Y{WpR#CeuROM
zBbRq%u1kPLV41gtS7LajepymkxmS9IW1+U0zG+U5iF0;=iG_!^MV^zlE0?aFLUD11
zZfc5=si~o*LS}w|uZN>TQCXFXd5BkWT26YllXgZ{o?BXkk7uNNcw|Xder2#xUUs5+
zRZ5V5QciXtS460@X>h2!epqFuV`hbOlzVn&WLlD+Ye-a5a)gh6c!p<rkfXn2db(Hs
z#E;@(1@3MpL7Bc;p&1rNQ7M6@nNFeU<)v<EmVv(Ji4m^l2A+ON0ZB;}p-$;s-tMN_
zM&(AiMS=NYk;U1$$%ZD8*~Wq8=H70hS%DrYJ^{udiRHoJ-UgH77$w4u3{sqo@|-;l
z^CHUgJcA7jQi6Q5%FLYgJp+u5Ju1D-P2KWLeM2oX+{?K#^YUE-e8a;cliV$m!lMH6
zEsIhUv%<{{Ln7QVGklCKf`bE`igHqY)6*xPWfZS3cF8r)iqg+Z%Suaf4bMm|@+`{<
zb@Mch@K5xK^bd_PbxA344Kvh^GIZpMC^U92%&hWG2`{b;_c3tHNXjpDbS(F*G|JD{
z4t6*5F|G>DclS)G3=HMc)zwunHSl!G_Kq?OD055l3@Gt8i;T=DDh~I|D-KVM2rJ4e
z4bra9Ev?Ef@^`o3`seX>!nKu$GoRH?sXlPp|AqR#wEFO~d#8F%tdM)8{FdcbxWQNH
z?Jq^_mU~P;s2KB``SXjVy}1(K%;)e&*)4ErHn%?8R^lbG^4Pp^T?M~@xUC-HoN~3X
zQ%=+>o!lbnYFV|r;79$v#PjR-2%1#+_5YSX*FDAZNPR_{#N3{3pD!Fc!{?KzyRfji
z{$I#WSDm<=#wrH>h3D4HYkDR+d&c%}{E7UVSK1%m#E_aHHGR{j&4tt5R<lNlJymu%
zZmaD1;_#dDYP~-yubn4PPhikFQtSTb#2>FS<|Rwyw?=N5{AA*v$9wG9zB5OPq}_@<
z@JH!j(OtuY2Uq4@u}XZm=(2QIXKg_GBE{$ao;e{8CvWJJn%gq_{3HdJkS8@+R}V`k
aJr`LRVewtD<M*i)hx+_zky+7_*OUO+szoFK

delta 834
zcmbQuKAU}lPQ9gNP-sNCc11zBx1(!HhEsS@dXZsKNQhUqqhp|@v%hy_YJ^3Gk9V$%
zD_5dXzG=FJx4Da%g>OcZcD8v)Ql@KASwW;{L{4B%cw%aVcDZL}d5KRzB$uw8LUD11
zZfc5=si~o*LS}w|uZN?8b45vNR<dDcriW#spP6=5m0M+HdS+<4bC#cvrFogYL0NKC
zXt=piL_m5VS88ykzjk<rwogcTYLuT#j-!)bk$HM<sEMh6YEqa<s9T;_a7BP&h)b%$
z#E;@(1|>;ZMyVCS-q~r|smYZYm99y?W)=G0+UZ$^E{W-0nI`E)rCHjURY4|P*=a_`
z$%c9P0h#W}{uZf5Ng;Wq;UVruVI^K+-T|fQCaHmyCVoZ9Ub&Ow7$w3(+>0|)(#s-4
zGlMcba!V3J9leVJEB*3K{5;Y#65Xq^Gg3^QD*Q~UTpYO)eKS1FDswY(Q<I~N%_~BK
zOoM#V%nU6mO+0)8%H7=E14`V@Q}gnj{VXP*WfZTsbPFku%rY>t%&82@HFvLyDlw`m
z@UqM|H%d103r%qkFG(#mND6cfa?R$7u*j?ka1PejH+S+3&eC@D(a$K0C^Gc)3$8FS
zFZS}yGs`hZ_R20Y*UsnC)zwun&Wp?mEAce8(9Q@n3@|Kk@+=Do3UxCK5At_6F9|8h
zD0Qv(EG>vCt0*YuI<#z(z34MJm%Z`4+Q%+C-C$^r%X^W<*udo_bob)fNm8Fby!l<{
zT$fw2{`bj+x^BC7F1Y^J=EC*Z{~}M0{<Y{eWcd-_zC|Eo!s^8yQNM4y2vjV(`>^Ix
z%ZEK_4u7s0uG^gGD&;BrI`!hdJdcFnsLR)$?b&gAp-lbH8X2CZwr%MOPp+jJHX1oC
zpWJ;;!0qCmGIep$Phsx^w|?gP8}jjZo}_&P=Wdxsf8ihOR<G=I4;*d_=98Q17y2;l
zR&e?omR||k?7?dommfDdyyf5Ljt>=K3ctAa^HnE_J7~K&h-&Wcn{##vw~?3oQ_J}g
zmc5@>rE)9?&$eW-nsQB6@#FDD)e|I+o^G*xt~+=7jmCq8VxJ9K3>v5Yp57*Hk+7|F
b;h!lHu_xZLF63VJ!{zIYqYl}>Qf>eMhbl(v

diff --git a/secrets/hercules-token.age b/secrets/hercules-token.age
index 6159676166c279c50596443c8ee3cfc59f007a3f..c11597d8e6732bac4859a583f330a12b6db3d30a 100644
GIT binary patch
delta 800
zcmeyt_JeJLPQ8;wd04txvYVw(l8aH8iE(B{q*q2@qKR*EmVdCXhqGZ>g+W-JqkCyZ
zB$sh$j$5ExieH|ON03{RUr1(YZdqWFc0_1_i(!smRZ(tgpqrD2iMByOGMBEMLUD11
zZfc5=si~o*LS}w|uZN?8k#~N8OG&1MkG7e1rBi-bpqrDvL701Sns#7;d6`#nScS2f
zNv@$~Wv;skSFxu>sF$}}fl*;vZctT$MR<{Eeolx>h_`occ0p)zcxgyTNkDj*vte-h
z#E;_P#jcjFsoAN?zDbUe`awx1p^1jZdHG4s6$Uv~;ejqisg)M#hOUJn`Vl5vDQT`A
zMG-+hl^zxO$;G8U<{@cOCQ$|{8R5>Q{@NMlp4p{NX+8$|=H>>I;~B-n3*D>2N)r<U
z)AD>X!!r#{^h+%>@)Dzr!}T-G%w3|&68-Xh-Alvu{oG8r!ox}mJkr8EwM%l%+)9m|
zEOW{%{R}<L5+f?IUBi6RORI9djJ&fVvy*%$pJf!U&o*|ha87p249)iR%ka%DG%)f>
zax^IlvMh*7_I9r@^C?Yssth$v4huHnGWPJwba4(b@(437Oz|jB&T}m-cXD&G$cpqT
z@(uJ)FUm|xbgytK$q0z#($&>f@HNeI^G*rQ2`DLdbThSxC@swK%<{?zEl4yf@$;-S
zEAkAecQQ!KEeJ_U=GvV%r^uOscV4f8h{XYORsXi<qUZk}w)g9uv}fUx-CHIum1$RW
z&0j0Ab7nfD>l`6Buh}*Wr)+4~_*Q=)YsM;%$`y@2`_5lE>^*bNUYQQwQ!m|_Jg2`Z
z*~yURbN*>-pMufk46&37lU39IWxlwwgHcTXX3dlT&424(-mH7>nqDoHxV39qP8Q>$
zz{$+s+X8oev3M8w|Hed3^Ki#4XBYUb_R37z_AKtO$Ic4=o%>=pt(|^LV(XVl(ft+*
z9S>gmukz<>Fq~4F%(LrKYekp!tFlwh-t!#n9F{O2&az&R^~?E+^XecMlixR1>T|rh
rEyS=;R8gzueZ_~MS>hX~-`8(T(Y}2`Wwpi=gB+jvDG#+~JK6vMZ*nr9

delta 800
zcmeyt_JeJLPJO<kZ(*T(SV%~CK%$S2qkEZURa$vQQe{+bxNEX$QkGd&nYmv?SV&T6
zHdnBJfxcr@zJHX5Phv%Cs(V;LvWvTOzFAs9RF!^Iu2GVIMp2QMsY!}~1(&X!LUD11
zZfc5=si~o*LS}w|uZN>Tn0tCqMrx2(q`pO}QMqewiJQ5*lYUZES+cufj-!c3xnr84
zPi~cakfU2RS9wN3gpYQ9ct}7}xTA$@NPcjDn|7pmzJ5xHfnP<QZ(?GGzJH=mT9~uR
z#E;_PK@kNR8Bv85+8!z1MS=c-Ue2Kr=HZ5!fk~w<!DTstu92=~iJ_Uf&h92$9<H95
zjscmT<srtU<sl_0UT)q7VLkyB!6~Vh?#V8BZu(gkPTH1^1-_n>;~B-ny^6xzlR_K|
z!z?l)y}d({f<isgE%S|C{QLt-a#Fnujoe(aEM2_Zik$PgeA6p(T=e}tbIURVUG?3=
zLS0M4%K{Ap60=<j4MN<_{G2MHLbQ!a(%n5LpJf!U4~;bOk8sM&F01r6axx7y%n6E&
zbPdhUNe;{p49yBF3D3)`G7YRMt;)#e%F8QCF3l)RPEM~3G0X5O4zTbyaL=&F^Un0}
zGYPdcPY*0KPVy-CEJ;u2($&>fFe){(w5&+>(k^$&bn!?tF3k4Oc61Ck^o#Hfb}TP5
z&hpHv56Ov)h)Q)S=W=XJySJCmd_t`70dD(e>}H4OPd=7hw@fZ$;wJGX&$G#qC5!eJ
zUkqUMIr+2x(8URDUcW^9__myUW3X26&-OLbF6=t)<>kDl@$j(>_8)!j`zjMU#1`o+
z53MPl<>vVD?S+t%y*Kj?|2-KL)p4t5lHi?#df%U`F;1zEuQ|%cptVkOftQ-YnQf<>
z()9ZBO4t5BI_YTqvOT4qNoU)*4oA+Ju6JOfs*uovFRl}(nSb5P+h*&m?tVj%>(_41
z_bkiXznzj7=G&R)%`s8I;C%bmQ+1No3yp8Jo_%qsLOk<aifbT~@dmw@FBdG;GIvR3
qE=+Vcku&}F_5bwOiQ+GhguEAQH93D;eR(&-i<i5ih1n#U?DYXu_cApA

diff --git a/secrets/leet-nrab-lol-pass.age b/secrets/leet-nrab-lol-pass.age
index 5d4884da5b55ba47a987a509f4b0d15d2f27601e..11318749846b8e4d0b5376f8b01a1b00d24e808c 100644
GIT binary patch
delta 349
zcmZo*ZeX6EQ?GC08j+b1;#Z#UmF4A;>ztF45u$Bo9_3pa;^XI&n`WBt;vQ%b<x&x5
z!WHHc6k+BY<XmhKQD9(L>1eEP=~$KMXK7aIYvAE&WKwS7R*+&E;$H4m&ZTRoP+Xj$
zo0?)|YHDby;O?DKR-Ud9WDuNh9unZ58)cSiQe2tuQ=ep!V_23RuC4DD9_m?|=2@In
zkQ?NZSCN&?73y6UVHoOL;E|ae?CP8A=Iig2?Hy>ClW%D1k{*=iS>c>-lvouKVdj|3
zrK_u};A7#G?c;A89$cxP=<Q`$VNzOFU|Q<s;+h+gYm(vYS6UKi;bh^JnVE0Eb)-|Z
zD1D-fe%Sra>**ORi$acF-aS>7XU{(FeBL~-zbhtBRS7rPo>_CV`qRaa`-K#nk_tj5
w&*^%bs^vYCQ{jW?V%C=tYu{ceUB{gnG2g1rKSoeCLRn+a!a&U+hhknw0OnG9x&QzG

delta 349
zcmZo*ZeX6EQ}1n<;u{ea;%Mp<R9T`QXy{rMP+F0jSsYqy>RVc9?w6nD>mC&3?r#!o
zz?Ef`<LKy~Q(mcE995R>?i(EDURqgXkmv4HU}#ZTQ5Ni;UFB}(<(`<7&!uapP+Xj$
zo0?)|YHDby;O?DKR-Ud9no*qRTbPlVY8haX=9!djP;cN9nQY<_QWR1Uo|NH~?C0id
zVxH%e65*K4mEo7^tnZu`X`EDMR$gRjVv%O)RpJul<EQU!kra_;ndqdQ6z=C3VP@{j
zrK_u}5TNhxmt1a?=wcph91s%hlH{3H6_g%q7MSC1QWEN`Uzt*%ADU`j;GdVz#gNQ*
zDnE5$df2AK-QQI1emb}9+bM@LQ)PK4?r}Pm_g(F1dq#lE+7h2xPox~DtV+3%b}4+m
x|9TVmYmRCUN;vx+*D5thSu0A-yRWnSCu6}yu6HHNOSw)2CcA|eXzj_8008boee?hT

diff --git a/secrets/legion-niko-pass.age b/secrets/legion-niko-pass.age
index 883e11d..e2ec36f 100644
--- a/secrets/legion-niko-pass.age
+++ b/secrets/legion-niko-pass.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 ioPMHA Swzz0jWR8ergR4rY0Mht17fW281TfqCIMpCvZihB6Ek
-9ZTI7oWuFheb42d2tHJEH+IITrbLmNeELzQ2st3MuIg
--> ssh-ed25519 GKhvwg 37Rw1F7e8ZMopUAKhm/L+fwTzAC8wYpNm3Ingt5xXWQ
-g7hTguWj+c/atzV8GvCS0TxAILqEAHijJqsG28FEgoM
---- wp7RhCcX8WQng29KppL/B/4Vn7PbX9YptE15FDOENRU
-�`lj6��\�UD0����:{�0���á`�x�������g��.���?�EU���Ħ���yX�a,�s�C[���M������N��X�����ࢉӭ
\ No newline at end of file
+-> ssh-ed25519 ioPMHA wC40k2E26e/5foBXXf43FFKYGSlnoQyFzjJtQRshJw0
+F7LlDuPFfyKjKTT9orFBBUqcmON7DSFrsqHC24x/7jc
+-> ssh-ed25519 GKhvwg LvajdH8hQ9LQ09qgzIjxYyQfoyJJr649Ks41rmFNWEA
+8kLSIbryosex94KkLqJILIUWplrf5vtf59QjJdprOTY
+--- 0XLL9dP31jyO/WdtwUu+C38NqCVcOjkdHKhB82rPUiQ
+}��5��y(i~�B+��0�q�:!�-V1�΋����"�ӧF>�l�	��U��B¼��7"�e˝��o���%p��+�Cާ��:,,��W���T��3
\ No newline at end of file
diff --git a/secrets/nrab-lol-cf.age b/secrets/nrab-lol-cf.age
index 82b9007..42c2b5b 100644
--- a/secrets/nrab-lol-cf.age
+++ b/secrets/nrab-lol-cf.age
@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw ILWqHbxvEqIrjjXBJM57buPfjqUzShGomwOsLXP1aCw
-JSyo00R8+WemsEX3hnOchb3tPwdATp8pKFyAJxMzqlE
--> ssh-ed25519 GKhvwg k5C6W1n0hD+NPMUXcJF9CHgcUoRGGSmHOd2J3gDFeWU
-wXHLNK21wC9nno9CFyRDozFJxikyRdaXyG1vnsn2Hf4
---- 5CTApyYf69lPis/nqSnSez5JZKV/sdG9IxhsRPh97dI
-�Bw��^#��A+������n�C/�l�ܬ��(Fq~�jçx��Jo_�e��kE���ơ~V����u1��'s�[-�a
-��
\ No newline at end of file
+-> ssh-ed25519 84j9mw ohlOIpKzRlZtkYBMgi1734hmjfOlOmElKSwkDz7Eh2k
+74RT2Nozr3Zv16Ph4UGkVVgmBQmm2YxI15QTyIhINIM
+-> ssh-ed25519 GKhvwg i4Ek89wcdeLvPY/U8xgwV6WXJzQOu6NYXqOrN6s3CW4
+G9gAx1FRpqYxA+JmnFSvRajOHcADu8mYAXcPdOuSymQ
+--- A+gFn/mv5ThI3Tg+SdQfI49l8PfvcLBWQZBwr3s1S7U
+�Qb#���Z� ο
R��24��P�Z��윲@��(�TTp�r�������l�������	�"篊W��J��8��h,����1p
\ No newline at end of file
diff --git a/secrets/ntfy-alert-pass.age b/secrets/ntfy-alert-pass.age
index 59aa10ac8067adf76c1fb041e5dac54feadeda81..6d157ff0ebe2f2ac187d5515ea378f4214c1417a 100644
GIT binary patch
delta 819
zcmeBX?`EH%Q*T<B6zG>yYMvb6R%PLwovmM#o$DX!n&n<m7N}q0<CW!=m=|tb8E)<x
z$yJ_~R^^l)n3k0nW)foQnjahx8d2cnl$BUvkez4g8d+9a;bq~QRUD}8$fawiP+Xj$
zo0?)|YHDbyU}2JFnOm-q;g{oGWsu`<;u(|@Y8jXm<rWs2=a!TfSs7N5X;R?lr(fiz
zpBd$wWo(?!m6zyi=n|HnRuUPQS(s#&nCa~8?-6d9ml|XgUKZrz=<H}_;%u7k>t9+t
z@uPUSi*Z0wVOU6hMNnS8uaiZ9k9T-PkYT2Fc$RjKQ<|fHRJf;CQdCBSZ<sGvN||Sn
zTUupFpp&sjWQcK&euQUapnJM^PDrt{PiCQesd=JBNM1?0Pr2*lct-JXi;}#+5{pEa
zoPtaf*GOaUi0t6-P|J++Om_?OK-a9KG}G|lijtIw!thY8C?A8MyiiMT^P-%fGN&{%
zqtXKHfN)Polbp%|^U{di^bD^|&-}z-m(ak;XBoxoQwohjOq0XRoiiee{IjY&!i@6$
zT+5u&EFvt73yKm;tNdLu!mCX3!m2E|3d3@f9Zixe^bPz1O<kM|f)ZUywEe5H+{1Ho
zy(6?kvPw)-6D$2qwT-jUW5Cm`G*Y`<K|9zyGc3};E3i1%$H*%sDze_(F}bq9Iorp=
zIoZP{DylFbz%8XXu`18Gn9I1#H_OM}!?mQqvnbNvH7e93z#=8TB0bVuJJ_>4FDERg
zATvBaKP9We72P^_?~JnYbOm$22%nGui^9kXH)Cg`K*yY1$3TmS)UfP4FY_uhAEy+f
z`XYTlgWw8Zk9;n7M^EQ+C*wfv!pMAgKTG$>fC7WU#E=T@z?8rWA7@j85bYdK-^_r3
zv~(_AU0sDrefP2o|A<om)H2Wf^a{&-?WpqH%*^C8e>V$1-`vWSBJWTqQ}^JkkaRBQ
zd5NwyR?B+soc6f*L)zk4+Lo956t88?Hq-L>H<eK+c-NbmIf?Tm{sesSO=;T88XsG3
W$IYtap?cG?>Ekt5p;=z*Qvw0vMHMsv

delta 819
zcmeBX?`EH%Q(so#7hV(@Y#CUn?e68B6jk6;66_on=4eq_mE`B|YhLJ=U+7_+<nK`#
z$(2)5VBlGjXy6@L9Ox62QdXLi<)7~67vfw}9$ZoBr=4fu5|M0ToR{hq$fawiP+Xj$
zo0?)|YHDbyU}2JFnOm+9Twtu7QXFiWS00fRXd0?-=w|4bkrSAe?iv|hQevD{>6Ynf
znUs|0<`$C7735ywZJKIU<z^9;<8M%2UhI`*8I@mJl@yp+m=+wA6Od%=YEl|jsBaQD
z@uPUSS&+9!X<~qfQ-M*GUrA_DUZ{mnx=TcnOKGrSQdv-zdrEnVlXgnFafAhzS$au%
zNuEzysdJH`wxx?<P`amIc)oL>N4aZhc0ojTL2^=fszttevTNkzct-JXvw(<{h@`Bn
zO6Sm0&rD;_yb@=RV4u{a0!P2Fz_b$IWT%jfByXdnQs;6mLyMBC60>5HNW-E`$AGMm
z;Pi68BDd09qsZWNm*BM2^qi1H--@(ce=m#4XBoxowR0of%)BjKl6_p=!(Ges-1S{U
zOjAk%owU7Da*Zt<y**4VEcK&IoU#qLTuR-YEljJ@$~>|Q@>8NRE1Z4P{Co-$&5{fq
z^HL)N%`FqnOWeyc^1{>6W5Cm`G*Y`<Aurd%*upv3C#b^3+{ZA~IKAGfEGN^qD$gl7
zI5M&{Si2<ED?Hz$T;H!UpDVo7Jhv(=rPL`Z!@MFfJFD2T$Un^_C^%O;Akncn$kWF-
zH`&4>*DuT~8{Im0?~JnYbcNE0@XDyHa5uvM6VHfZ|70`saO04`tlSKDN2fyPF#iCP
z`f!(!qU6*PCs!_g&#a^X_q^=VQa5MEJU4%*@XDg{u;hTUvH+)`BJ=Q~s`7FVM-P)C
zM^`RgU0nsA@L)6FfGUGf|IEN_{Y1ym)C}JUOHU_H|EiP%-@<~7yrke9?Xsk7pJJ}|
zpu-L-na#o5uFq}ycttdpN&2(brs=6$k7;>%u76&T*T%>(bFZGnNx}8I7*3gcOF9H@
Wt#^`H^ZciBeWCUf=FT<s`cnY*I2Jts

diff --git a/secrets/ntfy-niko-pass.age b/secrets/ntfy-niko-pass.age
index 8b9a9b3..0dda63e 100644
--- a/secrets/ntfy-niko-pass.age
+++ b/secrets/ntfy-niko-pass.age
@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw hEtr3ET/9edzqFXoc39m5fmrEF4AA9msJJ6Q7NlPs3w
-anGy/8/x2OZV6Hvy8qt6uFH5HeDh73hDA0yPn70dwEU
--> ssh-ed25519 GKhvwg juWch3g5LsM6tz9YCuXx+apVRpmtH2M9hnweKwnoOAg
-lDiS4TsYik7oM33adKJkaJciT7e5cxdqvf6aXRRuqDo
---- tU6RdGReOS8XhGpBjpBJRu6le7xh8u4vJ/wHFeK3ewY
-($ÔI���v�
-�Z��a���I81�Tߩ"�K����#��ᙦύQ
\ No newline at end of file
+-> ssh-ed25519 84j9mw NPno3Ox+binqR7DxgPLHoPxfp7aScR4bEyR4Sck6VEo
+jnQrnf7CrWL5nhj/GFEV5mXP8SFQV2EkL9NCV5mhgxU
+-> ssh-ed25519 GKhvwg v8SFsdzsloII81FQZ89krfNaWEKtfJAK0VuYXHSzfR0
+j3sOP5IzAINcai+kGjkCX93bkmM7FWSxj8TseWirOrI
+--- WsXIVgFQVz5CmYA7d28aanO6iaHb1DP/bcwwmNrdGQw
+#<!�0�<h��G]I�S�τʪ��3��}:z��>������H�D�9
\ No newline at end of file
diff --git a/secrets/rabulinski-com-cf.age b/secrets/rabulinski-com-cf.age
index 25cef0a31ff3111c8522fe161543a7f31f823653..a68d27609ff2b06dbdbf3e4cd4715b277379fa0a 100644
GIT binary patch
delta 345
zcmeyv^oMDJPQ7tKg|AtuMMadccTrNlcX@<%euP(`MTVQdXIfBFdWe&gnNeD5WMIB?
zAeWh`zkjNklVOCPu~||?VOCzKewamIWl3>qNmP!PsZVKos84X7sd=e|FPE;JLUD11
zZfc5=si~o*g1dJ{S$VpGagv*5K|x7+mVS|TRk?RSdcBvKf2fmZc9L&;P*IhedtR1N
zl82eOrBQGwS4NP3M3PH(SVV}MYmPxcewa_CcY%>*X-ILUzH5+izO$E4a%hHjd3uT~
zm#(g^LQ+Lws$p2BSw>NEQLcfjp+S_kzhQ1!io0K4hEYbPrMsD*TUbGUX=s5X*EW&c
zw-+ov!Vu)A@cretlO|kBANyph7&nLA>`1z%yM|ef;n~`42{(`2k*PTPET6T0T5;+2
tw}u^Qeggk$+StO+Z9AJO5p<nl?ZuLu7qR9ns)yePM#j&*By`}1EC2wNe~$nF

delta 345
zcmeyv^oMDJPQ7`4j&?{$acD}edtOmhic3j`PiC%5j+?osYk5RPa%Gugs*8t{PjN&@
zI#;PtX}OD0ML<BVX`#P`wy$qtfqqD~m!p?cT6(%mVpf=8p;=&xYe`~ND3`9CLUD11
zZfc5=si~o*g1dJ{S$VobrbkMFuVqz^g@uQsxr=*LYQ05ap;54*Wl*SJdSXOoM3r}9
zL6C`MhDCTFmsehjd!UE2p;=g!k8@>KT6kHZWnqw+w`*EdWN}4yN^+5#dvTGUMTuu5
zm#(g^LY7BRex^^je}<!vVOoY$o@H)&PPvnXX;5x}pOb5VS7?%Rc~*9+eq>@Gmm+uO
z<s<uAR|hpMD8BSk;7;$47yDD~H{HFH6T`UlcN@nOp~(LotaBf|ILx(sk74H&hC8+{
tFaF5nRlPhA8Jl7Gc1DZXzZcs?wJK_6SK06JThy=Ex#7O+1=)M=%K@u$g+%}W

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index b58981e..f568cce 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -80,4 +80,8 @@ in
     keys.system.kazuki
     keys.other.bootstrap
   ];
+  "zitadel-master.age".publicKeys = [
+    keys.system.kazuki
+    keys.other.bootstrap
+  ];
 }
diff --git a/secrets/storage-box-creds.age b/secrets/storage-box-creds.age
index 5042f31..dd97048 100644
--- a/secrets/storage-box-creds.age
+++ b/secrets/storage-box-creds.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw PC6bFOK3ckx+3BAhkeF4uQFKts+qv0iYBDfGZFvm9lI
-qQVTypBokLOfA8Dy731amUqDOMhZW7IAvscVQPpLbrk
--> ssh-ed25519 GKhvwg jRZeUjFXgdMC/wPTDTxkcCRBwWvZrrAbOyRXW9/TqWQ
-Xyfz103+dug2SjKjxCZHLR2diFU4E+CKqOsvdGupbkY
---- 4sX0V7sT9x5VYJhIJFABFDWjdwJkZ1c+tiK8aQXCjGk
-W"�/|5Ͳ:)�.t�vNS�o���oQ�1�@Y�]������ca�5�N\N="���O������V�I�x�`�6Ac
\ No newline at end of file
+-> ssh-ed25519 84j9mw Hnei3vVAC9dL9O1H9GIVL0WqR8/rinZ04AM8vwacgwg
+vPzKjQDCPKdwEHvdDibg6i/LeDjFwXBnINkzwlh0hBk
+-> ssh-ed25519 GKhvwg PAvDfn/sTrH8lhbHZ/l9hmyjNXIPSdN7MCOYkD1ZC1g
+Bh+PCt3X89RJZMS6XCQRFCC9dW4BWlWPbZgdzVniW9E
+--- Ad8wu6O3CZUDHmsxhaFiVcpTLHtMmSVENddCD2Ns4r0
+���Mg������D_&�����t��]V��"Ri�K)·?e��v
�)��	z��֤�9DN�<�*1�Gl
\ No newline at end of file
diff --git a/secrets/storage-box-webdav.age b/secrets/storage-box-webdav.age
index 15903c5eb85aa0f90d7fff3cb5afba6ccab7e70a..35de89f66314eccfb790c35b09ca691177ba52f6 100644
GIT binary patch
delta 347
zcmeyz^p9zRPQ7bYlAC{uOIUDjdZKS(mX~Q!fw6aJUT{!xR+)2-kFj}Rs#$1gu&YnF
z1(#`(Pe^%+M@o4?c7R`Eh@)AdTdtRLX_=RQXkM^mQL(2_hD&COM`dP}Czr0BLUD11
zZfc5=si~o*g1dJ{S$VobdXA}CT4`8uNTP94Qjw)gVtuHOwwIZ&Q(10KMuxsuNLh%P
zrK3rNrGHR1S6X^%P;P;?c5s@je~L?@Pmq&#NxHv@XHlV7xxY(DNnV6`Sf00sd0}NF
zm#(g^LVBKAxv5d1n?ZiKrK^R9U$LpBscTqLfu(kKN?<@%o`-W(u0cwQg`0~fSI?!g
zlgpSHYeL!u+blR#e}|jzJpU$XpY6)Ed9gcx{I0$6&^)y7NRn}D#e0=gJySPK5P9hN
v_o02-Cl8Z!$5r8s?BRlXyB;(o8$GykV)j3~{F`4jCo<G4$~~KWM~)Ey4}5^p

delta 347
zcmeyz^p9zRPQAB#erRTaXK7ZFlUbRoX{3pZdwGzvmw%dfSX7F8m0PfPa!{^!nOmtx
zIhUDZXn1<5g?@6le@SF+x{r@bnyF8jg-3Z=WL3FAfQh+fWUh&Oc3^2?GMBEMLUD11
zZfc5=si~o*g1dJ{S$VpGXL5*zx0{c<lfRLXhe=|2N_}CWkA7HAT3)C}iC0B(wtJYd
zcUg{yPiS5-SAkhYaZZH0kyn7epJ$#)NkE!mL~^2eVX>)cfKh3vzo$u=mw~C1Wki@G
zm#(g^f^Uj>da;F@VQ8t7o42K-bCIWcT7X-4rFM}=dS$3tgrRX}xVcZ6kA9*j*S54L
z%fH?-{T%YtiG{c7d+YXa$u|~ehn1gx;{KJo!z9W*K<wsy^W*pTN!8xjzC=&zdu*DZ
vm}vB+?+bKR9NQq$bR?j|#?N4n+>Jx!=U&a)Ew+2ttiYIm9D-|NqLMNJO@4rK

diff --git a/secrets/zitadel-master.age b/secrets/zitadel-master.age
new file mode 100644
index 0000000..c10ed7e
--- /dev/null
+++ b/secrets/zitadel-master.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 84j9mw EBpEqtz2Zh60+OUcGzl2dpVWkOhbf26cW7ftTN0j3l4
+chTq+MDv/RiD9hWSwVPY0X/lKp7AW+j0JqRuKOOHuns
+-> ssh-ed25519 GKhvwg 2o2gRmU9IrUTGkg2J3YFT7PwwngjXiDQ5T0/C/TKPQM
+Wnh+tniVr23bkWHGkeEQkrkuG6henkSC2VNfonMOAZQ
+--- ddtNvxlAxHvmsi7nVE5mBc5IYTVT54Sko87EABHQ5fs
+ږ�""��BU*9�sߍ�B����kt�6�fzg�NZPUc3=��Ӟ�k�9�M�������D�
\ No newline at end of file