From 16eded045532015411c02caf14e19efef4c82394 Mon Sep 17 00:00:00 2001
From: Xavier Morel <morelx42@gmail.com>
Date: Wed, 24 Jun 2026 15:56:42 +0200
Subject: [PATCH] feat: updates ?

---
 config/mail-postfix.nix                  |  21 +++++++++++++++++++++
 config/vault-vaultwarden.nix             |   7 ++++++-
 containers/mail.nix                      |  10 +++-------
 modules/containers-terraform-proxmox.nix |   8 +++-----
 modules/containers.nix                   |   9 ---------
 secrets/auth-authentik-ldap-secrets.age  | Bin 575 -> 575 bytes
 secrets/auth-authentik-proxy-secrets.age | Bin 527 -> 527 bytes
 secrets/auth-authentik-secrets.age       | Bin 724 -> 724 bytes
 secrets/db-postgres-initscript.age       |  17 ++++++++---------
 secrets/finances-app-key.age             |  16 ++++++++--------
 secrets/gitea-action-token.age           | Bin 479 -> 479 bytes
 secrets/mail-smtp-relay.age              |  10 ++++++++++
 secrets/matrix-maubot-cfg.age            | Bin 886 -> 886 bytes
 secrets/metrics-pve.age                  | Bin 517 -> 517 bytes
 secrets/mqtt-exporter-environment.age    | Bin 464 -> 464 bytes
 secrets/mqtt-password-frigate.age        |  16 ++++++++--------
 secrets/mqtt-password-ha.age             | Bin 449 -> 449 bytes
 secrets/mqtt-password-mqtt.age           |  22 ++++++++++++----------
 secrets/mqtt-password-z2m.age            |  16 ++++++++--------
 secrets/papers-environment-file.age      |  20 ++++++++++----------
 secrets/papers-password-file.age         | Bin 448 -> 448 bytes
 secrets/power-password-file.age          |  16 ++++++++--------
 secrets/proxy-dns-provider-config.age    | Bin 596 -> 596 bytes
 secrets/secrets.nix                      |   4 ++++
 secrets/yarrr-env.age                    | Bin 1508 -> 1508 bytes
 25 files changed, 109 insertions(+), 83 deletions(-)
 create mode 100644 config/mail-postfix.nix
 create mode 100644 secrets/mail-smtp-relay.age

diff --git a/config/mail-postfix.nix b/config/mail-postfix.nix
new file mode 100644
index 0000000..ce610b4
--- /dev/null
+++ b/config/mail-postfix.nix
@@ -0,0 +1,21 @@
+{
+  config,
+  ...
+}:
+{
+  services.postfix = {
+    enable = true;
+    enableSubmissions = true;
+    settings.main = {
+      relayhost = [ "smtp.protonmail.ch:587" ];
+      smtp_use_tls = "yes";
+      smtp_tls_security_level = "may";
+      myhostname = "mail.plg.m0rel.eu";
+      mydomain = "m0rel.eu";
+      smtp_sasl_auth_enable = "yes";
+      smtp_sasl_security_options = "";
+      smtp_sasl_password_maps = "texthash:${config.age.secrets.mail-smtp-relay.path}";
+      virtual_alias_maps = "inline:{ { root=home@m0rel.eu } }";
+    };
+  };
+}
diff --git a/config/vault-vaultwarden.nix b/config/vault-vaultwarden.nix
index 38ed641..ce9b892 100644
--- a/config/vault-vaultwarden.nix
+++ b/config/vault-vaultwarden.nix
@@ -34,8 +34,13 @@ in
       SSO_SCOPES = "openid profile email offline_access";
       SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION = false;
       SSO_CLIENT_CACHE_EXPIRATION = 0;
-      SSO_ONLY = true; # Set to true to disable email and master password login and require SSO
+      SSO_ONLY = false; # Set to true to disable email and master password login and require SSO
       SSO_SIGNUPS_MATCH_EMAIL = true; # Match first SSO login to an existing account by email
+
+      SMTP_HOST = "192.168.68.33";
+      SMTP_PORT = "25";
+      SMTP_SECURITY = "off";
+      SMTP_FROM = "home@m0rel.eu";
     };
     dbBackend = "postgresql";
   };
diff --git a/containers/mail.nix b/containers/mail.nix
index ebc4d84..7cbc4a9 100644
--- a/containers/mail.nix
+++ b/containers/mail.nix
@@ -11,18 +11,14 @@ in
       swap = 512;
     };
     system = {
+      importConfig = [
+        ../config/mail-postfix.nix
+      ];
       port = 80;
       additionalPorts = [
         25 # smtp
         465 # smtps
       ];
-      services.postfix = {
-        enable = true;
-        enableSubmission = true;
-        enableSubmissions = true;
-        mailname = "mail.m0rel.eu";
-        domain = "plg.m0rel.eu";
-      };
     };
     logging = {
       enable = true;
diff --git a/modules/containers-terraform-proxmox.nix b/modules/containers-terraform-proxmox.nix
index 3608fbd..aad488b 100644
--- a/modules/containers-terraform-proxmox.nix
+++ b/modules/containers-terraform-proxmox.nix
@@ -1,14 +1,12 @@
 {
   config,
-  tools,
-  lib,
   ...
 }:
 let
   cfg = config.my-lxc;
 in
 {
-  proxmox_lxc = lib.mapAttrs (
+  proxmox_lxc = builtins.mapAttrs (
     name: def:
     let
       c = def.container;
@@ -25,7 +23,7 @@ in
       network = {
         name = "eth0";
         bridge = "vmbr0";
-        ip = tools.build_ip_cidr name;
+        ip = "192.168.1.${name}";
         gw = config.globals.gateway;
         type = "veth";
       };
@@ -37,7 +35,7 @@ in
       };
       swap = c.swap;
       vmid = config.id.${name};
-      tags = lib.strings.join ";" ([ "terraform" ] ++ c.tags);
+      tags = builtins.strings.join ";" ([ "terraform" ] ++ c.tags);
     }
     // c.overrides
   ) cfg;
diff --git a/modules/containers.nix b/modules/containers.nix
index 11ebf21..1f3ff84 100644
--- a/modules/containers.nix
+++ b/modules/containers.nix
@@ -334,15 +334,6 @@ in
       (import ./containers-terraform-proxmox.nix { inherit config tools lib; })
       (import ./containers-terraform-authentik.nix { inherit config tools lib; })
     ];
-    tf.data.authentik_outpost.embedded = {
-      name = "authentik Embedded Outpost";
-    };
-    tf.data.authentik_flow.default-authorization-flow = {
-      slug = "default-provider-authorization-implicit-consent";
-    };
-    tf.data.authentik_flow.default-invalidation-flow = {
-      slug = "default-provider-invalidation-flow";
-    };
 
     nixosModule = lib.mapAttrs (
       container: def:
diff --git a/secrets/auth-authentik-ldap-secrets.age b/secrets/auth-authentik-ldap-secrets.age
index 9bbed386d17791b78c6b89846f4d9e3535eb81cb..14409cf6063e57c29c97d09e463c5de4f1071e2e 100644
GIT binary patch
delta 522
zcmdnbvY%ywPJM=RRBlpgich&^rgwQxNqDA7UPNNJTfSLZxRZr%vUX9ir>CWdK|qCD
zK37(%XGu<gM?qz!YoV8UVo^@2pQ*WXQEs83MP^n(g;RQZs(V&gaI!&ZAeXM4LUD11
zZfc5=si~o*LP?=-S&*YbSxB&>V^Xk>aYl}tPf|`mnwvqTsbN`ghJR{mX<BMnpigj_
zzlX8Avx!?aSD0C4kxxlcR7zM_NUDcLc1BQUzPE+1S5>}Qra?|nxPPE&YK2coxp$!F
z#E;_jo<?QG7Ga4=#_2{Sf$336X%-ePo|Q?3{ubq>S+3<C&Jhtt*~w9!5$Ta!MWw+;
zNl67MW`&k!9=;LgrBOK<Nf8DS`PrHIrJez9e#V*k#zFoCo@v=!y1KdwrruSKnJ&&D
zCgCZ8Il1L-z8>D0&Tb*Tg$710{#8aPg()WWL8iIsA)Wz|TxzQVXZt3<GmaOztvTP@
z=E<x;=ZA40_D7t1Fv;OYJHx@eS?f1HJ{kMGbs^(>R(X@Dw`F`kGDYRoKE3un{n5v=
z<@L+9PGLNwm8JXIM@(>k>#id+&kOCn@XNNcwc2Rwfz5LZeC~MKxf|S&)wuZZx0%<<
z`!m*;y%Vs!Ynr=i>6Uf73w5K_*6;neLu=87mItEFZY%W!?(s>4UYfPt^5|6m{j*pC
UOKt?{UdWz$=YGu2GNIrl08uN>AOHXW

delta 522
zcmdnbvY%ywPJMZlp>}3KxsQKpo{LdVsgqZPVOoiSe}q9`Mo^JYnO|l_X}XhBgrjA8
zI+vHTc3z@|Ns42-d1RG#Xo#DoQ&O6rVQQkWQE-$=sdsT%L}_Zdi@#4nGMBEMLUD11
zZfc5=si~o*LP?=-S&*YbahPjjj)!x(yKAL>Wv;e&rdy_YRcU~KKtZxWM1@a4nWblH
zlvAZ?sC#BUmy>TvzJI8(v2#>nR$yL8PDy@pfPZjCrglJ5m6uVWQ)Yl^n5%YCqLW+s
z#E;_jg+`{i={~NZ1=)pJX`vM!<p!Q+`URn;WhUANKHeEA={c^IS)u7kk-4E<+S;jx
z2I&U*RXG+}L1}(P!P<!d+9mm}p>C%6PN{xDrUvd_zE0t3DQ4wdy1Kdwi4`Tqj^W;h
zK}m)|<z}TJ+AfBf+Nn7{CD|sa8D3@S+U_Ow<>u~@DJdD*T>P*8u{^KJJL1aqPBYpk
zZ))tk#I;HmN#YH+KF`n>mN|T`LQ8sUfMrGV#A}s1rmR<eZsG14llGvV`;KIdc-uvt
zPGzH|&lP8HoL*Adf3dABnCF&<e~8M;pCy++#7V^1syl6*@RT`5rpNj44=Imhi^E=2
z83;Z&XZbpy@?YG_hM&uAbvk~;%{#)Q{_o(#gO8W5EELsP5u5Ikc=q<>pM`VxKlGdU
TNo37(J*kQldD;(Mx2*#J7<|Y-

diff --git a/secrets/auth-authentik-proxy-secrets.age b/secrets/auth-authentik-proxy-secrets.age
index 7d9b9f6c2b9a928735977447f1f7a88e3d5c1abe..597d268996ea063e99ee7b07de919ac7b5c04a58 100644
GIT binary patch
delta 474
zcmeBY>1UasQy*nqUKmyBW*lm4l$0Hr>l@(goSWwDUFhy#SnA^E=;WT59^z+g;T;hg
z%B64VQRq?><dJCV9g-Rv?i1=B8W51=<(FliVdzqj5uR-9QRV1TWK?Wnz@=-aP+Xj$
zo0?)|YHDbyP*Uhy7UZa4>KRd<l@{cd;h&Od<mVNf>t>i%;hthroNiiGZj$L~RBlo1
zW|Ws#=28{NWt^k0om*fQoL?4fV4+=B=;$2a@12p7SDxlqQes(No|BvDlxmpbY8swB
z@uPUXS3p>liFr_FYGzJ(NqAabh*zdbLB3h0ldrK$wy8&@Z@Iszr)7mpd1yITfmu{}
zmPb{Ac2aO@p0;^vNRmZqSh0JhyIFQ=W<^GXMM-*bq<?;~w^<;UuCA_vez3Q%QJSfF
zdWlg=N~F0<l0`~lQGi)kP=I?{dTNP5Vr50WiCcNPd7@i3SNn^8tNbG`-)=drv5N19
z_qmG)o`pmk3xsdze`LG;iL&+P=@Zz@)%3&n?MdEt;ap{S>x7nzw#_ANqC4Y_w`O(5
zU5#u|Jl3G1^(^Utd4=UU&SOm}i>voe-Tuxp<lFfarY{U9?IyqM%vr|0X|DQ*_=d;(
UcHXG_ro(xtq~rJpG092Z0QX$9CIA2c

delta 474
zcmeBY>1UasQ=gVq7#tRwSCvv}nx!9^=@aQ*;8CUT=4lp~A5a+_=2GCC6YOM}m67cd
z$z`aWVVGg+n-^H<Y!sH7njh-tVU}865LBEPQ4;PN9$D#{TBu!~o*$K4%%y9mP+Xj$
zo0?)|YHDbyP*Uhy7UZa49989B<y3Cw?4M)q;a{3<?B<*vU}oeTS(=&?Y;GD>5#%3b
znjVrB<?dp^6&P3)5$;)#QCMJN=;x{L6p>%)kz^L`teq6$oE_y_nVn@3>6B*Rs+}J>
z@uPTsVW?AJWLaipR*-&XRAHj2p_^YwrA1|Cp^3j~Kt*z7Mv<FqSU`Y5S#UX5X>eJP
zQ<;B|hjT`Lc!gO;c8-}}adN3?W@S-wQE^H^u7zoUkG6l9Us^JkuCA_vafMN8xPg9U
zZe(soRDNNqTZK!utGTI>u|-jlWpH3=q*+>hkYA-`W<g#)SKI%d2W<jhKC``RH!$(u
zzvR=c$uB!XCke%VI?8y{>F1)oyKBGtJ)LOPv{m@>Mf=(q3FGN5H~7^*e_^d|eEjR;
zp;J@O@>Ux@oN}!4Zh^dv(boTh-ePPfag`rkQ%iTx=rH=?>gCe&V2_4)L2QUew(G28
U&))1gsLok;@cmq;HJ0pi0p2OKX8-^I

diff --git a/secrets/auth-authentik-secrets.age b/secrets/auth-authentik-secrets.age
index b8cf917dfd61be0bd04cf8289ae2017fec51b733..f25d276ab840a8fabb72829ac6a8e17997c78cf3 100644
GIT binary patch
delta 672
zcmcb@dWCg@PQ7`7MRA&maad?#SWtM5nQL)YkY`STv!kV-S5#4jVYx?6a+G$kQ%F{(
zFPD=?NN9>@n0c^KM6!>2QkaENWSGBCM6h$7S(aZ=ij%WpsI#$=e_FnCK9{bYLUD11
zZfc5=si~o*LP?=-S&*ZGe`Ta)YHDy|S!j87S!lVVshf*$zJb1RrgmUzx<`3>ky&t9
zx_)SmUqwzJS59bds#}qTUsh7GZ&6C5fs=DsqElFDl#6R#u#d5SnwP(qxsy*&P+nH(
z#E;_j6^6;B&S^m&p}F}6+EHchrf%t``c--9p}{_h>5j(Pc@~A0u8w|g;g$JZ=^>^@
z-kz@heu+_$>5kbxsez7(72#>#rX?jFZeh;JxvA;;xdEoeWsVkHy1KdwC8d=GzL_qj
zS^Bv~F6GX}`MF_vE+tj2dHJSgrsi%&p&m)~VP+xbo)zT=TvM+bI-LB_<a_MZwrN~5
zPxWz?*UMQyc;TeK?7{Pir~Z3q)f)f2q$pY76Z>JpJCCfd?I!$d<3&BE-8l4dspvE7
z#Amlvf~C&;oz&O&pJJjWEwbp0lBaoUjTVdK+Y{HrPCwkyxXwT2<VvrU_X||_?=y_J
zaovei)uz7uy=?k^g9qhLAIrGi<d=SS(DvAY&}doRyIQ{_d%csKR#g3Xr{d&j>&sf5
zdtZHB(s4!Y%k#JRl!?r|Y|p3NJ>$OmR+Sek9rYT+TTH*PRckDtrM2{HSCaEw)7UR+
z+e6q~6el%rTDiVo=T1eOzp&_|T`zj3FOt&zS@Ecwar=|w{ujJFK4nCCEzxq$J<Ve{
zu~N9(tG(ld4|j{)@=3}2FBlvzR=j*=?vge7rILT=uUNW_Nulz`(e62m?yTMJylPgG
VTle{EpKV!Y-wE#NnZI>eKLGmO5i|e*

delta 672
zcmcb@dWCg@PQ9gDWnr3oaY1fnTApF9Ux0pDXtG&Ku~&|{sb@%)g_B2qMp9IPcczJl
zD_4j`X+}n}X@S0@lZClgV1}`mS(cZ%t8bRSc2S0fp@+7MMQK>5qmh1EF_*5LLUD11
zZfc5=si~o*LP?=-S&*ZGze%=NKyjeIuXeCepn<Wuwp&4dR-$=okY}EYo3~d<MrC-A
zS(dqhQLdvWmxo8PsgZASPFO%{L8PNgkhyD4u|-O_X-=}gvxPx`tB;psh`ynVcc8KF
z#E;_jZq7zt#@Z!OPEO7#Nd`_8neKT72Bwa|!C^s8Rc=oH!6jwE6`r2qftkfz-kv3u
z!AX&&UX>=EX^}ahX^vj$l>xzi*#QRrCZ>)S7VdfJMaiLNmKE7ty1KdwQNbpaiCF>e
zp=rLAUgcT&jzL*@fgy!O?p`jH;W^sjSydMGVMdW9US^fPTy84M&VKoR^?u$o8;g%G
zf-=rXzA1EJkx$tud&RW({}HAMC5g2q{65ngqj(<$3#?DqwECCE=ASD*>rBb7oj?EF
z(fGIDJ2S<?RB>+A-9L3LTO&jDO|tGhSorjT_{uGUe6#i#Kdzm1Y+3r}^qO8awYyfc
znx$5SS=CQo_vYrLDj)InRqKsRre@c+hwRP^YL6?we|xEdj{Wh4oIe>nPq&@kwj=ql
z@EbeF3ci+@3yZu$l!MFn@$!qQ^VSx9P+TbD7&&p_5`B*;=k@!uCuT))ds!5m`R2`N
zCvoCyWkPS)Q_J#&tC!qZ%vt>W#RLWMT9q${q8ZfwtoZ8We_u3MdO_^AODPdweVN~E
zT#<P4>%(vV3~w@d-Fw}%Q$s|eH|T5XSEgUd`{j0?JGbNhByO8|`&(8W6u6ltAD$_B
VMChDouI0A(&i7J2?7si>5CD^55fK0Y

diff --git a/secrets/db-postgres-initscript.age b/secrets/db-postgres-initscript.age
index f0e7685..c8aab86 100644
--- a/secrets/db-postgres-initscript.age
+++ b/secrets/db-postgres-initscript.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg xNDlDdho+Amh4Wf77L/0OfMWevmRQUB49fjNAgj4sXo
-iRHPgcqPqsBJVtv4Map3WRpG173YQlwZ9hJI1hgbIB4
--> ssh-ed25519 tqMvRA MGYTH08khPjQrLGFbq2Evd1fFkFbI3ap/jM9jiDnoBo
-sgWaeJ3IWV4E6LYgmFVHTIOrGZ2ZHUmFRJY+CvAFjbk
--> ssh-ed25519 720szw sC+xKVyWtGH8Hq9hwcg4X6gylYDYphP1/NanE07hhBc
-30HqQ7wdYr0n1vVNwx8pkUrm+6vxtPTz/70QkJxXrlg
---- qpQfmx0AAz4q5Z7UT+vhiwRztZ0dDAotEUDJy7xR75c
-�SFN3C�Q�Bv窂�l�L|8kL�ۅ� lm��C��
-Q��ڙ%	���zRT��-.�Q�v0-��{��$πz�zJz����"��,��Ph��^�:�X�9/
\ No newline at end of file
+-> ssh-ed25519 jxhkLg YNVl9EvnlsfS8rqCORhExodr4U7doD2sc2V2Igh6wyM
+2+9ccgcBxgtZiRARbYb3CGt3t/iUbJ1Z4GppNuxKpWU
+-> ssh-ed25519 tqMvRA P5GUVZrILJSE/ZvF/cmSAeocAP3XWsohA8kQtW3zU2s
+EFmkyCY0QZsqRhhUjYIdjV5Tqy1JrdaV0Px4rImB3j0
+-> ssh-ed25519 720szw AuUmyABlgdDYkotBpRF7MmNXjz/bgnSeIF7c6t7GnBE
+MfJt7x8ChIAaGNCs46gM1GbXPKTfU08/e+A2v+G+4I0
+--- 78XdYtCgrNbwHYR3wk2cyVTz7nJNvbbvU2a/Vv5JIBA
+���X�;�%�Ir�X9��/��$���
�h�L��p���� =�3�/�$� �7��l�t~��S�N�z9��� ud�������PT~@
4*�F2
Pӯ��r�
\ No newline at end of file
diff --git a/secrets/finances-app-key.age b/secrets/finances-app-key.age
index c1c8c14..22e9b9d 100644
--- a/secrets/finances-app-key.age
+++ b/secrets/finances-app-key.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg mwMAP1IoULmBo8MiQbF7/OTFqHGEDvQAWtyu88KPkWA
-b7rx/IbvpHppKH0nkomglxRkcjE6L0/SHlZ0rwSKVi4
--> ssh-ed25519 tqMvRA 08jdQsatahCoJu552xIsjf6aeKR2kfHqcpigtVEN6lA
-R8VfTa9BUs7B6LZD3ZeW91VaMRGwNbP7+WkBi7mU2ec
--> ssh-ed25519 UJuwpQ ZFeIg0jF3Wgp3Az9XRaqynaAA9gVETjqMHAAHpn5o2I
-v+9C2KHhDPzDDGJjBgA03pbuALaBm0VP29qtpzeDe1c
---- ucg+XE0J0RL8ZN4pH4BAly3A5eMoSUSG/AqQSfXJ9Ro
-lBE��R��I��@8��P�,��]���?��al�mK�2*�:���crF^׿:S&���q�y��� 	����"�������*�
\ No newline at end of file
+-> ssh-ed25519 jxhkLg jmZEdYs0k0ZW68F6fhW9fCtyT4WWNUeBfvoMqAdLBxY
+PW8qcAecC7ouQWBz4lyEYS/Tssc7U9D9RyI99tO+D4o
+-> ssh-ed25519 tqMvRA VKn6tGS4/gim8rLKoi9N/NrsGLgUph2Xjl0ek3LwyjE
+m0fNiJqN47AM7NRgFY+Wda2QL1FJYt7zKMKx4ngutLQ
+-> ssh-ed25519 UJuwpQ UydkFFa+9kSqWRmhLe7878GPVrC+wAPCIhxidM93VgA
+YDeQwo+b/bDrCSNyar7Je12RkhFKkN5BRKgk037uPVA
+--- 7OoH3mHI3xhpIR9wG7x99bpAgRz3f/cATOo7bC1mUFI
+�h�#���>��~"����ދ��{,汳;��Pu�a͑�Ц���t�GȒi�•ٚ��"�>)хr� 	C�����i���
\ No newline at end of file
diff --git a/secrets/gitea-action-token.age b/secrets/gitea-action-token.age
index 8cd81026aedcff5e9ea6a32f310ec068353b15f9..5db7e590d0f313940bd6888bed001620b77ee5e4 100644
GIT binary patch
delta 424
zcmcc5e4lxOPQAZTN|lRyk%4J}hiOq@k+X3|d8J{Rc1C)TPpEgeNs@O-YIvZwer|A{
zE0?#gkDo_&Wr=r|M}W3dMOlDrR-vO~h@o$!PikSPcAA%qPeHMvVYs)a374*&LUD11
zZfc5=si~o*LP?=-S&*YbRi$x?sc*1*N<~n3NmYQio2#FDx@TT~VOe>2Nkq7}XIV&w
zm#ep>QATJWSAeUDxvOb_yS7PGw!V34x_P;NNo9C`xQ|PQMUkterI%|!aZ<jEqle4H
z4-)m3UWTQWrQZ44PEOA5=Ed&XL0KUN7KVYjW$sSd&X#6LzUKMa<yAQq#>HIb;hqsj
z&OV_oZjL#HRhIeTzGW@}Re?@XRS^+R1yx}Nsb2YEP8r@l-UeK{y1EMHxrNRZX;DT_
z0e&gP#Xgxi$%Rfi#rb)K9)5X-;ei!tX~hwSIe}#cmR_!0KSL+`?>NZvucuJ_v!ous
z)Z<&LRvtN?w4%NE^Xs?<<B|!gsXxQHPj5QI|5ERzeZ(eVpW`ouIX|BKnRBzvYEHMp
UG0TU}0U_5^x+J+fj+&hX0Js&HDgXcg

delta 424
zcmcc5e4lxOPQ7n=j;nuUn!ic7nXid<R$zHmh<9#TZlbHRXNgycYnFCqo>`GwKv;T4
zAXlMFc#>sElDBucqknctXpvW_w?|$?Nmg=Bc11wGMS8h$R+4^hPPVglHkYoQLUD11
zZfc5=si~o*LP?=-S&*YbQdXi-WO-_ZYeBwOd7)Eyx@)RePF19fw|`_(s(V3to{K?1
zgri@+e}+>!S4B=pWJa2Hc6Oqve`1zbc1dNpMUZ!3rDc?BSc$J;Ua@mQW=MWfs&>W1
z4-)lBk(CwBrUj*W`5BgFIms63837@wMaH3ihQ2w)K_=SaRoVH4nUMxw2A*8ug+cz>
zE>Zen`o0+fsl^c?+Mb4nxdkQuhDMR4QK=T?B|#RIk(I7t=AK--y1EMfi9VrjW!m0m
zxdyo*mBo&QNr4r<0j8yC#^s6G?p|)8>3I>R#@>G3sY#w(R>m)68A?rd{aK~S<+J2$
z-Ok3^m3n_G-kQX1S#+yGG}NQ?>lAyj>buQ8KP61>iyA1JdRYsc%#8c7w)36PTJ;si
TQM&qp^Y=bmkX1J4Yk3I(Oe~p#

diff --git a/secrets/mail-smtp-relay.age b/secrets/mail-smtp-relay.age
new file mode 100644
index 0000000..2f4a938
--- /dev/null
+++ b/secrets/mail-smtp-relay.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 jxhkLg +poePGAJ/ZVLHPXEK/Yr8tpmWZBRwB3bdx5FnLARY3A
+9/OA2Mix1X+uvrFEEpZVOJZHoloVRSL35iGhxWqv2XM
+-> ssh-ed25519 tqMvRA DQ+gJqcSfjmYxs+L/6DJ86yEkGtV4v+Y4xJExYNuVDI
+lqv5OaNuHKtXjpgEQwlyuahp1O5a3nc83W8joaNn/mw
+-> ssh-ed25519 SEy3Fw 09q3eW5ppW9JO0DWQo34VdaXHEllKlxnTdCy+K2SoAQ
+bQfnSNiy5ZZCT7hpfNiLVVionG/UMVsYBxMWj/1359w
+--- yiuElsPJeYH/0XB2YRd3gnwYFMPtPDXJQ71zVypdJew
+�ah)�o�Z�Hp
�@��/����fM.[u!�p�=g��
+�s����F�`�
FE��2�K%w����K�mi&`L.�*�@R�"
\ No newline at end of file
diff --git a/secrets/matrix-maubot-cfg.age b/secrets/matrix-maubot-cfg.age
index b44ee67067f42dfbb8baa6c877b20de48149402e..cd24c3ad6e2ba336f9eb0603415e98138530dbcc 100644
GIT binary patch
delta 835
zcmeyy_Kj_VPJNDvi(jU1idRy(dt^nZkAFl?RkmMbv0H?`Yh}7iMoECDU#^j}W2AAq
z0heo%QDvUFPhp{jsaaaFYj{bNv42HHWlCB=YPM;TXK0y$WqMR{PGUf|E0?aFLUD11
zZfc5=si~o*LP?=-S&*ZGexjjiWSV<^fk#-TZ<T>_gqyZkZhCT-Np3-8SwN9nQBt<I
zvv**IQ>J@5S6X07q-9t^YD#WUNqKUPwrPM-M0#RgrJuI9x0iXbxodGoUWQ4Qe^pTO
z#E;_jelC{!PN|NriI%}`ex^}bVFraE=|16Ep{{2BX8tM3ZpCKl-f4M-CWf9|#o_)b
z?h$z*Va}P!B_$DsSsta?9%dHh<=NU%Mn378VHOoBWu9S<25zBTy1KdwKKjLuW-fmI
z<~bow`UM5$1zF*KMix1RsY&G(rOs7Fd5MMfA>J0|xlZn(ToZgnEh~;mip`r7<+f(|
z>em|{-4&O<C3xx0rhn_N>&u$tb-ekIRLI2L5`CU)|D~G-S_cj`?rb}3w{_+3SPkxl
zWgZKbadaCkN^ewWt|;C0n8Ss4{=UqLXS?flr%Ko96t2x^vgDb6wCm>!IZJI@FWuOL
ztWDz0_VwzI4)>qZ%uTP^U*NmAIK;Ad|Jl0Dmo{7M*k16*DS1kAkM0ER)MNYK?y3s)
z|MdBii8?>0*v1!(fr7txgquv2Uiv6I=6&~(vUTm66DP^dY)omEzj*7?^5dO9rn+2`
zS+l!c(YjcW&6X)@mH89j)0Ga5KC&~yo|pPCuha4J3GS1r7cM<gR(9aZ>go-S*1eB=
z*MAV|RC?p)r1xn-+PCR<Sd6`&tekLu>Jp2>pE1Am=lto6D&SqB@<g;n#8orC^=9wA
z)RnHMk5A-M_WHi&-JN$lG7tR2Do_6P<k@k?;Z4wa^Se3UAI+-bWi$1;<+;^v)&A4Z
z#GVViXqYW7<9%StnKy@ubXIYwO=iw{eBa7BDm8Pu_+)#ZC6BKDm3%nevYzpr{pw3)
zHdAipwyRV-MI6mo|L*Bx(R~GGdw(@WS9q}gxn^H~&iYIIg8OR==Uv^{<YC76|JoY<
kGVuU4q1qX_hnExysl+DfE*4__c+}YLpUgRzKaMre03;w}E&u=k

delta 835
zcmeyy_Kj_VPJLEjW@fI5k9k^hzDt^ZcvyvLguZKXMM+eVTcDFihFfl0en@~@l9NfW
zD_5dtu0e1`v1vwDhO3i#sefRqS(QglQdo((Uxj}_sadjis(-nEaEfP@1(&X!LUD11
zZfc5=si~o*LP?=-S&*Ybu}h$(r;lTLK~iB=aHV!do?B^TnM<grsi|R=g>R^SSZ1j~
zhPI_qhDl{4S5$gZK(2XEl~0*ho}qJ^cSW&RpliOLQ(2~=kyny;ak^8ANn%k(o`;d+
z#E;_jE}^9<9xj1F+Bud1DSo+LAxWmGxjv4@hL%x2#^ui1#yJ_<mL`GWu9?|f$>m-}
zo`FTq9;GS1o@GI<h0fXq#>URYrD3LKo?-5lrG`-%e#Svr#ooSLy1Kdwrs-aV0R~}?
zdBv%|f!;;siCGn{X_jgFZjtGgrlFyg;cmJ0{*Hd;Nro1lT&t%3+vNIJH?`5ZM9bUu
zds^S&y^q@Le>+C6F>zg;G}Zi`^)2iBQLl_o?(x)~|DgGV$G-npokXU4{-2}2>CKh}
z!HLygIhStb3HsYR_|_I}30T3ht#HrgKfkklHeKO2v;OeHIsDZ!ozM`0_J|)pChl3Z
zVU2{XXK6j>+(PM7(i=DLReqQJbJt!c&5iYUr#O0C`1i&){(|B9b7q2kS{d;jcPDYV
zw?6%AG@<7;k6_8$Pf4A>PtLiwuyk&n(&axX%z@^9FIGo!i}xGW{QMO$FT=??ApO0G
zp-oTz;oD1%Ud`Av?atbNSr$){z1Z&hGAl%9EL7BOYM7m*S<k*nH1ex&!GYpwhQZ(K
z7Y8<|ulW%EJu6t{_LB5^)|GNm@2)d&%alA@^7*Vz`tOAE*Uvw0pY-JvQ)s<NP*2$p
z*I#8XUN6e$7O1LbxzF}$#<cI}!-ZFEdZas}wqSnJW-EP{4|=Eki~Q^l&bz*B<0mGr
zo|xOhlUh&3htEmT(ciYOD3<5a53k^OrgERTY`KLMTJ~!96SWF8w$Hq_^!uAhTK70N
zEm+2#VH0EdbLTbp)jLe|&U`$)_Or@I|J0v8JB42z^L_2{Ao-IgqxI}6Punurg1UMp
k!3oFf;w|f$3a8}mUJxyAzgpUi!`wBOcjnpMf3<2o0IXYN)Bpeg

diff --git a/secrets/metrics-pve.age b/secrets/metrics-pve.age
index 2cf53bf59932412dbf91eb2d61346ee9505ac6c1..227a8e90d5acfc905fbf813e7c6cdbe720b27127 100644
GIT binary patch
delta 463
zcmZo=X=Rz9Qy&r*=;T)%ZtCThlj~XTo9U6~VHA{{9GM?tZenOwnN^XeZLXc>86M*7
z%Vm+~Q4tW9omS>nmTYEGkris<k{Xen<Kq+_=42G;T3BRMl$PP=<7HkD%B5?kP+Xj$
zo0?)|YHDbyP*Uhy7UZbl=j&>eo>!FRl4>3jWLfFq<z`uG;_nxv?_Q#BT#*@68J=NS
zsa=s`nPpVW6&@1elcevSY>}Mj8JO?r9a-Y<7U8R(p5?C}Vys=5=9(SlW$77F?3YzO
z@uPUXL3&_rRz_J_zK5xWu|;mKc2rt^USLW}fs1>Yse6EvZ;HNUWU)~}mWMBwbE2!K
zxxaUoi*aa5a8^`#UVdbHR+w=>a7bdVkC&yRX_RkhUR0KUaHK1juCA^^c7a)zMNw9c
zzq6^OOJGt|UXGc!Pe_`ftGThMMTxgTcyM}MhGSl!f39UDm*BqY>+fgtnE&=;`NQ^c
zgXr`s{&ko9d{ieftXu75UTNwnEcCqIc*_FLHQF&3ywA-mHQ@bJ%E>%|X}wm{L8s#l
z=1eWd(~dg2T+VxF#`bpsx7o6S`I%|24&J$Q<4epUo2d-u|I2mG6a{N|=88SuAfyp$
IroC}L0EB*{;{X5v

delta 463
zcmZo=X=Rz9Q*R!XY!PH>Qk57I;Te#Wnd6^iYGB}5lBOL{V&-nF9T{qFSs0v>r0-&2
z!j)MTsGn7&ZyfGo5m07WoS0FR?;IQ!7~xYKo|2dm5@=Fs>XQ>3V(jLU&ZTRoP+Xj$
zo0?)|YHDbyP*Uhy7UZblTOO3-SW@L^SY()KV&Gen;uaR_=4e@z=bPo^t8ZMD>El#f
zY3bvs?U~`qWnSS^VVGlV6zUflR2J%&XzJw_>};7-7~vn4=pW%@Zj@;jT<RKB8kw6u
z@uPUXTSQrAc!{x#iA7dQc1e0pq`#SKVp2}BL5_j9VRDs8g|V-;n@d(zUQRZbt8;Ow
zqi;cRvb#%Fpm}aiR$5d>l3TEIq<>&Vu7RJWlb3l|Mx>*Gm#Z(AuCA_vNw862RaJpm
zm06a4hN+*vepQjLK~`jPRHT<hc%XY>K)O+#Pqu$aM1^xCmx#}8>!Q`NUPjXnPK;@M
z#qwBFr0KC>{>$S#A58qrztQHOw(Ml{|9gKF%$Twx)M`CziNM3IA5P7p8|3!nsXl+l
zar1=ew>9T>om_MN2Wye9+XulLeqnK0O)41`9GkZ~Y)#XV%TMr|W<F;&%Zn6K$Ih50
J*)#7B0RVlbsBQoN

diff --git a/secrets/mqtt-exporter-environment.age b/secrets/mqtt-exporter-environment.age
index e3b2d48a5a7fb43bce2f2445a19b96b087dfc5b3..f7a990f10798219c7b8afea1902b0e385c15b47e 100644
GIT binary patch
delta 410
zcmcb>e1Um_PJMuRRhd(fkC&T?tA$HuMp~d@PE=7zxS@GKre&m8P*QP7aaBl0N@j>_
zB$s<huwiL=cwwc1dqAp5igR9|XNjwEaFR!WZ)TZ(MPPW4zrJ%sc$J$^F_*5LLUD11
zZfc5=si~o*LP?=-S&*ZGv9Ez!MwO+PrB9x|S$<}2rCVY^n75->dRDn%rI~qorGc4A
zR+h0>vTsB&muq@uZkcDfXL&%7r>S<XNs6y|W>RE!WRPi+p=)7rRj{E;p_z$=e{pX1
z#E;_jK81lM2Ks?{<(7utt{KK@fhA65<wcdDSr#ebei1pQ+2ww|kp>}NLFMIKhI!eU
zPNh!nk>0t%&bgKDX0BynA%^~r76CqKWxg&(ImK!EW{w4c`C;i?y1Kdw#VMwNo`J<d
zNiN2g1=@~5;bp}p!2!7id71jg5k-#a1x1#g2HKGo##OG#TnBZmj<}rN@a5?8#Z%4%
zo_TGX@Bbvz?!w|v!W9{kR`&dk6?aT6?LOZB?|(6KmsJpN&@Jg-<@a=|{WWLKuhHO$
F0009-kfQ(q

delta 410
zcmcb>e1Um_PQ7VyL6KWozGHcqV^(QiPJmZrYLuy&Nos+Qws%#ivyVxTc7&sONKs<8
z0asO0gh{@yQDU)^tDjS5YO+~zm1#v}SwUD@Kt`5XU{Sulc4D%2l#54tD3`9CLUD11
zZfc5=si~o*LP?=-S&*ZGuXeD3S!uX|d2y+Em|=FXft!9vVo;e&MUsnglD4~3d1+Z-
zmU)GjyN5?Umyw}?b9jhvVNqyFKyrwGYMED}Nxr#DS!%FbNkNI1MP*rfer{2ie{e?n
z#E;_j{+_;NZdE}6!QsLAA>O7QiD4Dm<*63tX*uqNj)hL9nK>z@Rh1>FCeG<x2BkR_
z`R@K%!G(U|-ic<(Az>EA$tCIOP9+sShORD!g@ySAl}Y;9#qI`Ny1KdwPNe~<70CwX
zp`n>2A=(82p_##z5tW5G=8^gSK1tbGu1RK|o_Wa?-iZ<ET-K7jY10=m9KGZ(*frz(
z-rcI1M|w^_>MZ{A<=X0?iL#=pb7y+3R(|#I#_OBszk9KCWNNNz$?Si$LU-k(-j?*n
FuK*)OmjD0&

diff --git a/secrets/mqtt-password-frigate.age b/secrets/mqtt-password-frigate.age
index 9ef33d2..696295b 100644
--- a/secrets/mqtt-password-frigate.age
+++ b/secrets/mqtt-password-frigate.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg ZLzOFFu6isbAWkrXF/etG1sjvE2O0hvDCz/BFsvONQg
-gagibzhJwfpwgr3XGZJcaaD7IztcAH+HlxLwlhaYah0
--> ssh-ed25519 tqMvRA c7VvH+2ZhDozgIH24PiUaWzkEgYYHgjIq2QrQ9XAWy0
-SGsGZOVSCsodoc3unWEgaG2swbZ61G39rcQFJX6utQI
--> ssh-ed25519 5VK9ng g1XMAKsB6l8vWxAAnIJIJWhzBVBeLFLg7JqzadibyBM
-2Drr46dDuVJOyH0kp91K/qVdQsq1+Xd7hgoan0yc6K0
---- ApI3P3YMJmzY8eFcZ+YzZeGvJRdqvgpMtW+I0KM0Y3c
-Y�}6���s�(�q����v��c���j叱�?ھ
\ No newline at end of file
+-> ssh-ed25519 jxhkLg WOtezChzCSmy1x5ob8CFUKcjA8tTTJaLrUj0dhKUgiA
+iYFJ0cdtpHdsK4FXRgTRAaZI7CYS8VAUKmvHC0TP0x8
+-> ssh-ed25519 tqMvRA 7AQf+l0+15W34unEqO3IyqD8qu2mIMXpVTActsUd8y0
+3xcW7LAmcUXxQKBO36WACH44IziCiHt0G1SmT4SFC/I
+-> ssh-ed25519 5VK9ng Pvw6cet2AVlGx5F1F/5OM63r0fgGYEc7dCsipRPAkVQ
+3HtvmxOzT4bGn9aECfusyNCpaTCNFSRgUSbeRik1wwA
+--- 9dSUckyaEH5FpzcEdNTnC6M+5v7BwJapMIcSIFR29Tg
+�n@Y�½�h'�ۯӬ����&��w%��� ��
\ No newline at end of file
diff --git a/secrets/mqtt-password-ha.age b/secrets/mqtt-password-ha.age
index 694ca89caaa41f61f334d32d467efbbc5c543936..91f91709f2b9fabe729ab76be87a85a4ebaf3712 100644
GIT binary patch
delta 395
zcmX@ee2{s9PQ9yNd6rjUaH2tOg+Zl{Wnh(ut4oM`dS-68mv>fXhQDc8QmAP}kZ(w)
z1y_J}WTub5XQF3PkeQo_dr5?MiCb8Rt9givZ*GN2fP0uxKyhASdS+0NFPE;JLUD11
zZfc5=si~o*LP?=-S&*YbfqrR`yQiB;mO;5$u(y9$s#~~mRb^gAvPE7-g?mAEmQPZJ
zeyE#Qcvh7GSBi6}dr_J}g_C7jYG#Rxb5vkNUYbWprBQxFx^uXtuW_MsP<XMkS7CbO
z#E;_jVQ!H@E_p_QRUVl>#ZH#)rNstC8BxBjIR;_LQQC#BVHTO?$rYx)>ABfl-cDtK
zp_X2y$%X!|#l_l5iTOThRgpfKAxYl3*^UJT<so@4#rhrrmS*`}y1Kdw<snhN=02_!
zmL(RJE)nMLp27a%0XcbzN#&-Mu6cfr*;$TOQTY~*<sM<lTsyWYyn9kyawCNQ<?bln
pvy6*26;?lJKVpAmnRJ)uyLD!Z&gz6u?$<6YSh=4!#HD*x8~`u-i+un9

delta 395
zcmX@ee2{s9PJOwjfp(=yMs9enS%pP-adBR1ph0M8NvdOnlXif<V~BC3VO659Phwzp
zAeT{jMv7rYL{>(re_&XZQF4@Hu6~+RVUm%%i&trCp1X;wYmP-gM7C*uI+w1ULUD11
zZfc5=si~o*LP?=-S&*ZGPl&5wnyW{0sdt*Tg-K{mzFTFmL70(#qJNOFx4vs}vY%r}
zUS+;vnqgifS9X3?dTv!ffN5ByVMv*KWqM+wg=Kc2k#lZNen_^zsc&$$pLTd~Rb-*T
z#E;_jmW7UCK|bZah0dnMj{c@5UZ&apJ|<-@;YJ<?dB$cDQK_y5RfWcZg*mQVndZTz
z#oj4Cnc8V-&c->;PLYuj289-Gp@9MArBSAp<zaz=0fFJUITemvy1Kdwd3oj~fjI?P
zUd5G}AuhQtLGF$jrXjw*9y!j=o(19AxnB8Jj+K?!DPAstTnrW$G_FhU|C!G@_v_QM
q5pk1sXZ<)JVIlHw>uvMj;Rl@8^~mwwe)FLA=FxfY)?4aUWdZ=c^NV``

diff --git a/secrets/mqtt-password-mqtt.age b/secrets/mqtt-password-mqtt.age
index e0b2008..30a101a 100644
--- a/secrets/mqtt-password-mqtt.age
+++ b/secrets/mqtt-password-mqtt.age
@@ -1,11 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg B1+QK5IUkrya5HgZLF8oWpMiL7cBK+OYNCvNeodmqkw
-mTglq5BlxDDKiYBe78Cs8tNMv0yksrvS4tyhCZKJu/M
--> ssh-ed25519 tqMvRA la4nh/Nr0sNaV6JVhSi7cYLkI+kgbIhEr2fTTa/wKRA
-W5qaU2lfPLVPomrkHvdwB52LxJPcUvvcgI6wN/gqeYk
--> ssh-ed25519 5VK9ng vsmrq5wf3y4CiSgyNT0aQvrxLTJ0WcdG8B+zAbdpgGo
-hDADh9v99hacIc85T+QP2oywVDyqJjlKVa0skJuf3BI
---- GT+Ns1ZRlOOO0HwG2WcpgG1XLf5NJzX2Hg3aJAL+vOA
-�0��r���O>�����xI48ϲ�s<����n�g���q'�DM�FP*���Q�P+ߥ�f���g�
f6���$xo�f�q�Z$ޝ8r|=�v�&�
-��L���>,��
�K���5YI\�Uc0�<#d�3u�՝|t�ʏ�}s��P
-�v8=Aӡ�?���������}���+�5�P��?1�״m�p���Z&c�ˌ����N'�������
\ No newline at end of file
+-> ssh-ed25519 jxhkLg dADzUsvWJkprV9aYYdTQ4tLd3V6H/lMRNLaAC6fNty8
+NVzvSEd7KBDfkqbkrZgVgRJkFi6UmlqEIPr2sK+o6t8
+-> ssh-ed25519 tqMvRA XnsNo926VyUqSppFZ50N1KtzK/QCbi1lF6LJZYWUsGM
+atsaJ7XjRum1dWvIjxdUq3Fr3Ypp7/RO7kqSqWfgUrM
+-> ssh-ed25519 5VK9ng PJRg2ljsArsWYgAsHk8optwi7P/vZirhhX5FbINHjhs
+pFJ2uibaYO2hWfSnyElxrvoFCC3BpcZOrnxET8ynBUI
+--- 3vf+8iS73Sk0CeHRLkxxX4kGg+py39sAQVVDniljAEY
+\��E~D�3x螜� `�{�
��4[��&V�2\]�c4/n=�P.�
+\E8os�w�b�tC(9��J����4�F-�+�d�R$ٜ:#����a)�YYH�Y3yg
+�
+���h���u	n�K��=kWnW������۞��<?�Y����Q}z��G����yA���%x�����xk�H���3�ԯcjZR=j��Y׼
+:�EMei�m��o��V�E�BX�R�$�u�8
\ No newline at end of file
diff --git a/secrets/mqtt-password-z2m.age b/secrets/mqtt-password-z2m.age
index 5c7d538..2f3eb4f 100644
--- a/secrets/mqtt-password-z2m.age
+++ b/secrets/mqtt-password-z2m.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg RCq2VAcmya10eK7zwPVFB0klV0zSNkHmF+WlnJXaWzw
-8ySn0NB5FNb7a2qJOzx1yiCdH2MTJWBUUPc2i5ytly0
--> ssh-ed25519 tqMvRA sB9nTKSEnh1AQ0rYf1uYmd2CzCabz2hEJF1XTsvrtkk
-ASWOYP+4XiLxf2OLbYXRDRTXfiuLqvxN5gkoEauL8c8
--> ssh-ed25519 5VK9ng KkXWseT01qSmhEAeotqEi6CG4zzz+50TrKclYdn57AA
-hThUinxaRHWTD/wAhELcYWj6qcQ8V0Ybi60cnUc7pdk
---- h3P58TD8hmBfKLliCDSL4m3bCJHLs80yZ4i/croZp48
-�]sM`g�����|Z�=0'�x�c�Є����ʐ�_٥T�
\ No newline at end of file
+-> ssh-ed25519 jxhkLg FFstKIybiFO48aoLNDSnDSdwIHAZEwe7CSWt6+YnqyA
+3i7YRHdvQ2kD+frqH1+wvCnWx4py78fahA7AWAEMx1I
+-> ssh-ed25519 tqMvRA 5KeC4teldBf/QTudaRtHbP+6LfpZ/m75wxVq4M8LxEU
+H8Ee4v44FRfapY8tRGEFOneVzji8QOv/u1uIUD/mrJs
+-> ssh-ed25519 5VK9ng K/C8z7WTlyjLsH4n4ufAVrCMCkVgQuFPpyNz6Mcxl24
+dsZ/aO4DIzni7Dkiju8JVPnklhvAdiujunaL7WfAaOc
+--- kJ92gmMAzGRD8THcfjF/k00eo3+oMSiETAYR4wJOsj8
+����t�����X�&ڽ������nI�3q��:��<<�Y���C'���
\ No newline at end of file
diff --git a/secrets/papers-environment-file.age b/secrets/papers-environment-file.age
index 51e2637..16db7ef 100644
--- a/secrets/papers-environment-file.age
+++ b/secrets/papers-environment-file.age
@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg BZflK7sIBRQVRQFl06h25sX5KiWHsu3g39r/8uMpcwE
-beZ8ZBKgRvJvY3EEhJ/ylKdDdWTz2u08pvWbVaFg8m8
--> ssh-ed25519 tqMvRA CQtMI9v79kBZoiBrxLY91756LiAJGogbTb+ayd6cRmo
-F2MiE9whRNZ73cskxhXeuudvMgA4JOvbtzotNpHMIf4
--> ssh-ed25519 KkzjXA uH+5mcV0ZZ5oKNfq88ihWHY/Z8YpgPjzvkcvhMJOKU8
-4z8x8XyAYsaIkXFylMEAwacHyQEJ/1mYFXsEsdnZ74w
---- vlF5pHK/D7m3ErKazggz4xxdn2hcwGvvIYrZtn2sT8Q
-o��5��
�2���x6�N/N�H��_��SH�B�^Lh���
-{�,Cj�ƽ���啐4���51�%�c_`�41�@ڑT׸��|>���v��v6
ڭ��(^����%
��ս�
-1x����Z��>���7�>Oֱ%�����-J
�s��@�FU�G����A�
\ No newline at end of file
+-> ssh-ed25519 jxhkLg b83U678xLJlB1FFoxSaeG7JN/4v1sVU4QsITY3j/awc
+Dhc/V5R3bK9x7i2ws9FQ4O4HHT6xTlaEKt3SXJhihTk
+-> ssh-ed25519 tqMvRA KPLjl31HwXs/ucQ/LJwEL2+px2mSkCk812bGk9rTiWs
+qADzPQi44e9QiQpXpoyhNNDuULJhTXo9x0109lyOq10
+-> ssh-ed25519 KkzjXA 6Xwc9hqBdR7LPYNmfEn5+M0n6QTEBkuNTBk/t7ofh3Q
+GjcVMhPZ6X4ybBxtIabKFegicdTZbq+zQWvn9PYNeME
+--- 3ZY5ysyGfwJ6Y0/FEO7YpsFkAJkn9B4D3gIzpZBPx10
+;v"ޑ����F�>��J�4�^G��e��Zԍ$�ʱ�c�L�ܝ�
+n��j���%HM��=[]J����}IWAE�dg���W�����bߚ�B�|_�1
����\HeLz��ю�U�F}E*�Խ}
+ȱj#_��cʭ�5���}����?�-<���<M5lI�=�����
\ No newline at end of file
diff --git a/secrets/papers-password-file.age b/secrets/papers-password-file.age
index 05c1e9e853685ebdabc585c443b3c85edd3753a1..54866554f7c306f9096fba6dc4069f0de94320b3 100644
GIT binary patch
delta 394
zcmX@We1Lg^PJObmUrJ@5ad=31c|@77aY&wTVqt~3d1;cqQ(%OzX;PJ!k%y^saCk~+
zI#+~uX{ozoURXe2Vx^0vmy4%idZ<%UXnB5#hecqxkG6Y>b762)K(2>HIhU@TLUD11
zZfc5=si~o*LP?=-S&*YbqF<#^khf)OdZ~}Udzh1Vs+&`CexQGNm}8-#Z-_-|MuBT&
zWJyMTRB4a}m$6YmXmX%ukb7xxc}`Sdj(MnCL0OPrvRApQdud=`xl?AAOJ;CtM50&Z
z#E;_je&OXN$$6ofCgvHzq3OjQkwspil^G`b`fiS4ZmD^}iKThLWq!eaF3y2meqjN5
zzUiTco`LSBJ`omafzFl{RYpZ6dEx06RVJ<;9_eA8L6*h21_7a5y1KdwUirCYrDlPt
zK9R;b?v+N`k>25vW)_t`WgeE67GXZ&85UKRX~|iE9=RdqTntK^8#JEXo3zt*$&)zU
oYpIF4eLFNZZ+Z8@Zc|5!CEK?e<4rB@#gk6|oiOj{6#?gq0Qy>rr~m)}

delta 394
zcmX@We1Lg^PJN(xs*9&_c9lVDkh8W$zFU}gxmjRXmYHcqo>{tIj=80wp+!-;f3{I>
zK3A%%Z?1cWVRE>szeh!Jm~pVXOTM3nvt@{9T2NSJMYxNpOL&Gyvb#lzE0?aFLUD11
zZfc5=si~o*LP?=-S&*Ybx@DF@V3=jOc3FnLUsOhxn_FO-e`bY8sIhZdWl@A>uuEV?
zqPc%^hJRHtS7LTllD=z}iGjaYlwrA#sYz&opJR53mziOBlB<Vhd1AJ+V{ulohf}7>
z#E;_jj;Z?T`bDWm0j9-OmL|rI&Su^bIf40R9_GFVsRqT7J|5YH6|U}CZsFNn`abzN
zCPk5s9zKqNeg@hB=?3n}mY(JL0U_Szo@u#WWuc{^7P*;uA$gu$y1Kdw&JnH|&XK9^
z1%6)P#lg8D<>^H^PHvVt$v(kJ-ie+eo>c{wDM8w4`7YX?Tt3@kTJs)siyc`}dQrY>
nDr1kr!jt;W3#AHv`*J(4V&=>DDKuhZUsseMdQ3mPe1<gu#5{s0

diff --git a/secrets/power-password-file.age b/secrets/power-password-file.age
index 4fc8b02..a5e094a 100644
--- a/secrets/power-password-file.age
+++ b/secrets/power-password-file.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg tYj2oLp8OWZtYmj0gKJnEE5G+3tmfPul8tGt5fnnwDs
-/SujjcZxvPmZurlLWETwR8JhH8LIJh/MeoogW5VxP8w
--> ssh-ed25519 tqMvRA qY8Cv7G1UJm139N9NxA4dAXAfje42n6p7ZajU8r8Fgo
-Qw4WobdnlixxHxAwiTCGyeJGzcfOWxslOmS/sYhiTug
--> ssh-ed25519 DVDL4g Lkxuay1WN05O7uO+onML4INymrsBf8DrBHyGPhSW5xQ
-sAdASiFmiCDRl7WfI5k6Qz+fKY/FG5H9dLucFluSFTI
---- NjnXZAi+St4JHuxdQ6/rpT//nwTwY3MA59MotWicycA
-EwL��K��?���i6jw��2���YM�ˇ�rVOP?��-�
\ No newline at end of file
+-> ssh-ed25519 jxhkLg Jt0tBomUSwoxIf+D0n2leQ8ULQcrpWJDN4Tm/obLnyg
+yct3YGS4BiDsAZPlKZybD7GVoqQdL1EZ6dlHXSY5b8U
+-> ssh-ed25519 tqMvRA amDzRhpIGTVsZxAHWSUacZ629OEttMU1VAOVKdCLyFE
+2fRvar0fSfbYyw+O4zpE3DusNKtuFDOCVxSzMccaMKg
+-> ssh-ed25519 DVDL4g QIXLyMveRBfhcNCrbI0ZpZqjaB5j76ROsXs7pUquZXI
+vYciNWwJrTuGOZToE7eoCYhrGOlwqd6tuYeIUXQGjTs
+--- 0J/foPauSiv/wNTq2TkTVBnQOqm1dll+xyqwFqM9lpY
+���Ƃ1L<���!��5T>�K��m��+����5b��o�����
\ No newline at end of file
diff --git a/secrets/proxy-dns-provider-config.age b/secrets/proxy-dns-provider-config.age
index e7e235d54eee918c7e8d822ed6df22ca73cb4c9c..17e8f4d6d4bcde0888280aecc80b98accdfbf5e5 100644
GIT binary patch
delta 543
zcmcb@a)o7rPQ8D=e_@_yPL)fFuSsQQl4rJGg@I*SxO-leSBj5Wpjn1zL7{JuuT!D1
zBbQ~Mk9KilK!{gnWr|mnuUlG(VY#V(VT4a<uvun)vV~7dd3L0JZeosEF_*5LLUD11
zZfc5=si~o*LP?=-S&*YbxqES0M1DqUQm#+BcS%{4lUr$^Wu!?^MoK_rZk~sBxj}wv
zlu3SOfTy7eSCW&9V`8zJt9NCUd3uzySz1bgYhqEcpTAR}Sy*{_wu@zUfPuM3aeztw
z#E;_jiRRhbnU==xJ_RM_uA$}?E=9qqQ5m@*S*GOyzQ%senPp)CW#OUWrADq?Y2jWu
zA>jpqQHJ5pWre;@$)*t{-f6Ds`4&O?zA3)>Cf;fOVHv^UZf+)Ay1Kdw-cCu`8J-cL
zK~4rqIqv$#$r;|kfq4cIW@cH2e&tn3ZXrJP1?8oc=3X8qTxDv!$BQx!i!%JN-)8gf
zfL*kN@4J_(vXuoU*MIRJ)lp4TUi!~^J70-+<FZ`AqmB&xTjtgBdH#A5xqDK^(>V=t
zty7B??wAO9Y!py@sOai&_eoRCjJglAgM<R@Dx0EpUwfUixYQ*xk4>hpBm2IQ_JU9U
zq&W8P_2aYnGN)?;mt0!AL}0^a@oLR;B7WO<L`?r;(7#{V(>Tib+y2O<o(=V@Vik@p
nGinj=3*Nd}BeQL;oc-@}hcv?$&HS-$P2;ASvi;S8nQsaJm(a|#

delta 543
zcmcb@a)o7rPJL-%ZegKUxN~8Cph0j(Kvb$zxKCa{X}V{inM*)mu4z(6UXhP>aGHrx
zBv-JTxl@^TR%ujJm}f;%VSciKSE5sJL6kvNP<WuHcVt0WYGqhxctn|t0hg|wLUD11
zZfc5=si~o*LP?=-S&*YbZc(vCm4BM4es)xmzP?jfp<7~JQe<FoQIMs7Sbn6wb4rSr
ziLZfgT4<;Vmw~UVkC&HYcw%yLL6xO@SZ-pLTS1g_kY!P%UruPGbD2rHvtMe2Nq)M?
z#E;_jrBVJVRRIxhzIhhqVa`=Ksg)jS21V(CIf=Q&?#U&-=6->ZMf$mAq1oA79)Ugv
z5vk@y87}^=g=S{jE@cHN!G2NxMcyGvAui>qC6SRCm7!^2!KS`ky1Kdwspa7zfxh|q
zB~IRz&JkhWmgdR+;dudB;mO+Ou7>#qj`@N0&PD}Bu13Y>Tmr!|O|$c_oL4&~E0=ny
zo<DBZr>J6`5{rcP&j+15ZFh@!cSsz6v}%rVqygW*dpz%t#2=`VneP}owO-*;LBRez
zA<;5v;pwmJ%nvWTv}?Vb`QwPNK4xEzP-oefw<A7U{-1HPj8&Q0{_x4tg$*~>=UPbJ
z**Qb`o}ZKa$s3E$3aIX$CdI|$&HKgkOw3{h=F`_Iers^3Z{KHfRlm9PuyWMD#Ccaf
p@Xr@x`nkMny6Ug=quvt>E*z*?#`CgQ_l#HX+_c4q1<!gU0sv_p&=vpy

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 1e3fd1f..c29f619 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -31,6 +31,10 @@ in
       group = "nginx";
     };
   };
+  "mail-smtp-relay.age" = {
+    publicKeys = users ++ [ keys.mail ];
+    extra.owner = "postfix";
+  };
   "matrix-maubot-cfg.age".publicKeys = users ++ [
     keys.matrix
   ];
diff --git a/secrets/yarrr-env.age b/secrets/yarrr-env.age
index a1c67ab146f8721fa3429bd434863464332474c2..1c6a07c8b023c9400188fac303d1c2b6fead9f9d 100644
GIT binary patch
delta 1462
zcmaFD{e*jhPQAZ{WqxRoi))@wda;X>w!T?vva5Dfo=1L(M^L0|QJzU;khf2$XR@i0
z0atE#X}V8^mu0zAmT!QckG^L~s=u38P`YVuV2O!axoJp=e_E({ReE-n374*&LUD11
zZfc5=si~o*LP?=-S&*ZGca&>}V@i}!xQTv#PDq(wh+Cjrn1@GdR&sG(Wnx)md8(Io
zT4Yv0s9Rn>SFVeJS*2@{e~wpLXh5i6V4k*bzGZ%Sv1O*Wt7(RJK#8ZJQ?ap!Pk@)n
z#E;_jL1hNX5h;#d!4W3TIjJ7n9{ypLuEpiXx!xvj9ub+^E=K;DW=Z*l>7mJ7#Q~WX
z{*|8Lp?=Bc$(g1>PM(RL0ZA#^VWCk09w}wvsd<U!22RBmss6rPy1Kdweub_j208h~
zg<hfAWmzsor8y?9j-e^WuD<5UeuahZPG$x5z7~0Isd+iYTvLAXn_kbmBKNIuP5isL
zk}G3VQ=^M4dmk=O>VG_WL6p~=Q$f9RA2|N?=KOT~q?tj!`=6L-2?p(TZ+@nUyyIIN
z#}Kk@W5=eIW_7&@4YQqJ7DdQ^>v*hlQd0F|-=xyDM<wU7tay2N!p=>Cn$KcG-$)uH
zC8u2D|5(3l+uMCN^?u)9Ja@*HsOOvYb-K^iyh@zdzKJa$<nXgXQC)k(FCRB_+HGU4
znKzYNTf?*JnCK6Wj+@7S%P<yrq~*PH7khDL*@wU3yPejE1;@F>`u<y?p}^acBfG=q
zefPJ{q_weH+P8M3@GNvH&D68dvFeNTsh#`c`K+n-0++Pw>-~a-LfQPctx9XyeE-E)
z->D1t&ia~bbkJ(Ds^!&~`C<E&oL0}8c>3f4pV>EGGxh0p^{H&RXrRdYeD#x(!{^;*
z#onx!>WF%ix!HnU!D`M7Pm8PaGepkorf-&TtP~cMmlRsHzG>g4n(dXlvo*WL>J)f$
zDh+aPUMt#k@y)ICj{e&9i#e0-b=R0#vNx`q9FkFTirY>^;#uiNcTR>?Qe6ub<rsc6
zv;VLyZ(6LQc}Zg5+x5otpKlH6WKD9J6uzN%)rV^npUhljBOO$(dC}WIM&QI%U9r8l
z74|M^ZdlJbrRz%2t_v~#UxVId9@mN8e5g~pj`zfzFPx_(7TFfGeD_{pHMf3(w?^Fa
zHj`Ar-G&Rkl-CANG}!cg#mYcuqgz%C^)eGxYrfBkDLCWw-CHqG=Ifd*pVC5R_1Ws(
z@-VFoWN#2Od>`?9#=fFMTU1herfokVTNiU^1%J51>N#)sO_x4?!Q_(YrYSSFWlv8j
zTI@4l^@??sd-uaim%nz3O3w20FJ8-^S>Gdk_KG@3%OW$!TDL<=A=@8?ocVosTDEup
zq)NtZk92Z2Mo-__Ftu<Qk8_}na?dZ(Q=4DwNq?wSxqNrQHU*Oh+7te<`gky;9XYF?
z{d2|h1a9t`Qb*QmJpOQhtNxO&GrnEAviiA$NsgJnlhziauT|gmgcn$yE9crbS>$lv
zoYn^O`m)l7yr;#Q@~edP7ydE6FmYmLK}q*PV|%8+DK<wluT7I!c<7nI=O>ekmN4cN
zFM7avN@tHEZ`@SJ@3(3XztY*6_)hhS(vS4_a;trnd;V-V%I7;vMa$J|Ro%SA(uhmy
zN^bGnvN}F@@0-6z=wPkFlT+QAekZ$L`spowC@G+^<q2QC`{|-x-{d#~c~V7KFScjo
zHM=HgZ@gFb{nQ>G^*1HP1qv&Fzu*1y@ucF%Kb1H#L|1>_)0||>V7vdOHE&njtf>>3
zl{1zuzw=9<izC56N^fJ^=A@%n&eT}XoO5048_$Q&|HL-hr<h)Gb28$O$+qI$=eT0#
z0-1oi(<c{3m(*U7xtpptufa#~;GrqYznstWPkXn4X<b6Nf~1f9wIj!_OBKA66LatK
zy<fd?M%Tj)3xtGE{&6xiw(;I`ZRNTMW5N3Zjc<-FYTLZ4Fuh6VX3J~lz?s^CcdwUx
W<56(*<kO%0^Hkb)*&VYEuLJ-YbCUxA

delta 1462
zcmaFD{e*jhPJL!zd0=UVNtk0%Nm@l=mYGvlN{~sixv95_U!_rEX<n6SvY%U7L{)`{
z1($1JL4K-nl2@j&xxaaMR)A}uex!?2fVOFrxmQ$JMOdL{a*)4^wswK91(&X!LUD11
zZfc5=si~o*LP?=-S&*YbR;96HRh4m|Sx{PLUP^XVmYZ8xpmt!fVQF%xnR#ZOWlEHf
zxua2TMwm-FS6QI3c3EX+MXFbFQK+wprE_>zK$)d}MVf1VMr62KaZaX5LAZ9PepHm_
z#E;_j+WEdlx&AH%6&|kI#R0x9mLX1=&N-=Wmd+;niI$b#{^7v|rMZrN$!_Uf5gs0H
z;psW$g*oAwxo(xY=|TQUf#Dh1X_;w;`F>Fz9+8FtL8XqC$!3vUy1KdwhGniP$rU*n
zKKbcs#;&2BJ}zFK8Qz8d7CEIACf)%-K^|W9xfxNWQQl7FTz<mmq}#sj<IyWtaGx6W
zD|hDUund3R8^$(0RkEAkFM583WryS^%LBKH7I8c%E!+Kmd1d#N3F1HRiEmrLmTR)`
zd0nkjq;#aF(HYaLA3r~o`k**{`?kmS9*_Q>vUn_zI@5#MS;&oT@`j)Nsr!}n4s#|7
zIJ-SK`Lq7qkN9sBueV1kU0thGm!Mx~|0Zwl%9Y<H&pxnFT<4?tkqaxY9k(*q+;!vQ
zwktbx8P2r4TJ4nHbS~=UDgNSaHLhMEyXVVHl-BJK%~m~d-7M|)F5mF;jR~UNIz1m|
zK6Br?aM7gNCTG|8?qTU|7QfxKzuoB;&sP>u6f82>z9;%QYklGLFvgn76Po1;&ijRa
z^V@gG#(wgj{dD%E$lap0xh1cA<EoY%dsyEra_ZTs+Z8)DPvs33dV4n`LsG4z_b{(!
zaO&Y8qv!h*>^I$D7F-<lH`(>r_4BG1n9u3Y-7>>LZ>^*2yMr?hxJUI({@Yk^q&W56
zTI;Ac7rg2he|4^1&$r08KHgsTdd!hEVZPB1Cw-3=@k~5Xnf51r_0FrSH|Nim`OsN;
ze?#e|&5yz@-d#*`?YtPUZiY=v)U<`F<`Y79r)HS27Ck<|I91V}{iL|w6K&Dw(p!($
zEpB|{zvY8cWU!;_=hZ>-w*%*%jAnYlc)I)Vg-_L;-2NM$%{+bfNWk&#cgtSXyGS0%
zIlDypy!Pa3*Suyw#hnp8C;3vFCy69i$}NAe((+>C<9gi{MqP<#nDrBErH@EY;gEiI
z+w<f!8~sh*cNdqXTIh7>Or6#(n7907LYiCRR$Yrdr7YQB63#ZaNtV>F?6mCM)ZOH3
ze?Xdbm!ORd`(od@%p#)6$=$31FME4>>l5t^3|$;W4Hmq5o4x4h&gGs)PmUa4Jd2;H
zYLDxaPp>>o(_U@P?N8OU`d4D>pj)o^+@<GC-Mh1Uui2gFJH%_DE8r9_C^J*$xzrw>
zv$ZdjS8o3DL%vMia_5szu1Q-=txWzK)a`qB;{R9H(j7rNZkSDds$n-RhDX_AW!Cm3
z%!`uh7c4f})Ma?AbvFl7IY(b)!WzC$XP;R%HS;oje1ADIwCnAoCw~|1Xa245cF9eb
znWhuP*-lMgy1VT|P;u6SGp*GhuDi2rZV`wH@7-~n)!~Zq1LucFZ#blFTi(rEBXYQM
z=dm-1LZXlUZIJ1nRCc~2_rghm)ywzY<)0ANqH$$6yJuOwsN1y0HFk`g`=+0ZHZJnG
zp1(DKUs-bRw?tRgpXxJOU$~ZizQg0W-#=fYqx)xv{}xuZ(paq!udpP^-`#>ys~vj(
zO?<(${@;9t+wbqcuTtKynlVCLqT)}^J)gxd7PZ8Qe-Zj26!;^S^BKo&(RR15TTfmR
z{bl#KsH64HUEShG>r+>3tqz{^Sb$Bkb%lVY(uDWiwaEfzJT=EJ*_aqUot)d!U>>)y
za9>kM@RakS*B|G{9#8hNcV2f?J~L}4pRXR%lKgA$?(uKjcIS4A{fEn^-s`Yte{srt
Vr1tufq~-1-Q_F0QJh9T$2LOvFn4bUu