diff --git a/flake.lock b/flake.lock
index 6efed62..bb39572 100644
--- a/flake.lock
+++ b/flake.lock
@@ -403,11 +403,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772408722,
-        "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
+        "lastModified": 1782949081,
+        "narHash": "sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w+6NWK9yA=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
+        "rev": "17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e",
         "type": "github"
       },
       "original": {
@@ -512,16 +512,16 @@
         "uv2nix": "uv2nix"
       },
       "locked": {
-        "lastModified": 1784572521,
-        "narHash": "sha256-QJEiBOLAVGeYBym4EUtnDgeIyJyDQWgmat70/yujiz4=",
+        "lastModified": 1785776243,
+        "narHash": "sha256-S6TSGgpf37N8YgbTv70dT+LaPiiaQ4/lJV+js2hnCPk=",
         "owner": "NousResearch",
         "repo": "hermes-agent",
-        "rev": "3ef6bbd201263d354fd83ec55b3c306ded2eb72a",
+        "rev": "3c27eb6234bf91b8ceee9e9071591b31e9b148cb",
         "type": "github"
       },
       "original": {
         "owner": "NousResearch",
-        "ref": "v2026.7.20",
+        "ref": "v2026.8.3",
         "repo": "hermes-agent",
         "type": "github"
       }
@@ -668,11 +668,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1786014936,
-        "narHash": "sha256-ToQkMfyiH/Af/AMpkJi5zR0fVb1QO1lg9jiyzhLVyjc=",
+        "lastModified": 1786856790,
+        "narHash": "sha256-i/V+t7uAD7Uo6p7POVZpbhYTo8HxNnW1P89CrQdv5aI=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "5028d4667177f2593ceac30f9c8395afaf6a54d9",
+        "rev": "dac632fe2759854b901cbab78efdeca6343a6c0e",
         "type": "github"
       },
       "original": {
@@ -698,17 +698,14 @@
         "nur": "nur"
       },
       "locked": {
-        "lastModified": 1786261845,
-        "narHash": "sha256-377VD83YnIhJtkLbbDDGlp/pfeuP/EqV2Y1TY8ULS64=",
-        "ref": "refs/heads/master",
-        "rev": "f2cc6b59ef08efc785097571fe2c4b2b7200ef71",
-        "revCount": 114,
-        "type": "git",
-        "url": "ssh://gitea@code.m3ta.dev/m3tam3re/m3ta-home"
+        "lastModified": 1787411420,
+        "narHash": "sha256-RPDb9TNA9wQIb18sd7kIJweY5jNByb/fwAS3LQ8lC30=",
+        "path": "/home/m3tam3re/p/NIX/m3ta-home",
+        "type": "path"
       },
       "original": {
-        "type": "git",
-        "url": "ssh://gitea@code.m3ta.dev/m3tam3re/m3ta-home"
+        "path": "/home/m3tam3re/p/NIX/m3ta-home",
+        "type": "path"
       }
     },
     "m3ta-nixpkgs": {
@@ -725,11 +722,11 @@
         "openspec": "openspec"
       },
       "locked": {
-        "lastModified": 1786203962,
-        "narHash": "sha256-gvweVFd0Za5AZN6srXAhYK10NYLSfSVG2Xnl/Z73iZU=",
+        "lastModified": 1786795567,
+        "narHash": "sha256-+fc2Zo7Nf6Td+/x5Y8SX5qxPM3hi0nH7i/L0vgosnGI=",
         "ref": "refs/heads/master",
-        "rev": "6962de7e076ab68e1ead87770982a7d2e676fc02",
-        "revCount": 377,
+        "rev": "b8b541c3329509b0df3b57d384ce5886d3cc0d47",
+        "revCount": 380,
         "type": "git",
         "url": "ssh://gitea@code.m3ta.dev/m3tam3re/nixpkgs"
       },
@@ -749,11 +746,11 @@
         "openspec": "openspec_2"
       },
       "locked": {
-        "lastModified": 1786203962,
-        "narHash": "sha256-gvweVFd0Za5AZN6srXAhYK10NYLSfSVG2Xnl/Z73iZU=",
+        "lastModified": 1786795567,
+        "narHash": "sha256-+fc2Zo7Nf6Td+/x5Y8SX5qxPM3hi0nH7i/L0vgosnGI=",
         "ref": "refs/heads/master",
-        "rev": "6962de7e076ab68e1ead87770982a7d2e676fc02",
-        "revCount": 377,
+        "rev": "b8b541c3329509b0df3b57d384ce5886d3cc0d47",
+        "revCount": 380,
         "type": "git",
         "url": "ssh://gitea@code.m3ta.dev/m3tam3re/nixpkgs"
       },
@@ -930,16 +927,16 @@
     },
     "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1782847189,
-        "narHash": "sha256-twXPFqFsrrY5r28Zh7Homgcp2gUMBgQ6WDS98Q/3xFI=",
+        "lastModified": 1786711500,
+        "narHash": "sha256-QvnceIGTBeDvDd9oCn+GvdsnkquliuwbVgpiRH68qaQ=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b6018f87da91d19d0ab4cf979885689b469cdd41",
+        "rev": "02e08985a27c65ffd33d434eeb2e660a2e4dc84d",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-25.11",
+        "ref": "nixos-26.05",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -994,11 +991,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1775036866,
-        "narHash": "sha256-ZojAnPuCdy657PbTq5V0Y+AHKhZAIwSIT2cb8UgAz/U=",
+        "lastModified": 1785318670,
+        "narHash": "sha256-dN6Ou5x/+23FZLEpYP3IffO+NyJFzUlGumt1uu3MMaY=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6201e203d09599479a3b3450ed24fa81537ebc4e",
+        "rev": "0954f7ee2f6bb3dc7d4e3d0d8bcb8fd4bde4cfc5",
         "type": "github"
       },
       "original": {
@@ -1010,11 +1007,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1785747939,
-        "narHash": "sha256-D740uKsMbgsfK2oaDenJLLPIZfq7W0/g4KN/Fls8eKs=",
+        "lastModified": 1786719841,
+        "narHash": "sha256-QcpQOT0NQEFkI77t+YXPZqDJc35iIodG7zinieOwFUg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "104240a772428cc2e20d8fd86c9ddbb886bbaff2",
+        "rev": "8be7bd0c83f12e2e3bbba07c9044d6fed9e66f7f",
         "type": "github"
       },
       "original": {
@@ -1300,11 +1297,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772555609,
-        "narHash": "sha256-3BA3HnUvJSbHJAlJj6XSy0Jmu7RyP2gyB/0fL7XuEDo=",
+        "lastModified": 1785115949,
+        "narHash": "sha256-8AM37BfyGaL2v/SZyg4PupRxJ01Y4htvM+WrTjWrPpo=",
         "owner": "pyproject-nix",
         "repo": "build-system-pkgs",
-        "rev": "c37f66a953535c394244888598947679af231863",
+        "rev": "62c0d86027edb1c4f39a5facc09876348144f7c9",
         "type": "github"
       },
       "original": {
@@ -1345,11 +1342,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772865871,
-        "narHash": "sha256-/ZTSg97aouL0SlPHaokA4r3iuH9QzHVuWPACD2CUCFY=",
+        "lastModified": 1784591072,
+        "narHash": "sha256-zP/WaDxrRu8GANZM61+V2LT/7ycEEdoyLWn7M6WzU7M=",
         "owner": "pyproject-nix",
         "repo": "pyproject.nix",
-        "rev": "e537db02e72d553cea470976b9733581bcf5b3ed",
+        "rev": "e3b599ca2e7fcf93d4edf65d7f19bbf6491724f3",
         "type": "github"
       },
       "original": {
@@ -1680,11 +1677,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1773039484,
-        "narHash": "sha256-+boo33KYkJDw9KItpeEXXv8+65f7hHv/earxpcyzQ0I=",
+        "lastModified": 1785277507,
+        "narHash": "sha256-9Tq3UDX2hD/aveW/HvkBlAmEwJTOlY5HQXJM+L5BGmE=",
         "owner": "pyproject-nix",
         "repo": "uv2nix",
-        "rev": "b68be7cfeacbed9a3fa38a2b5adc0cfb81d9bb1f",
+        "rev": "5a836d395cbf5fc22670eb98dd4aa4fc4d406977",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index b1056d2..cb8c56f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -16,7 +16,7 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
     nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
-    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-25.11";
+    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-26.05";
     # nixpkgs-45570c2.url = "github:nixos/nixpkgs/45570c299dc2b63c8c574c4cd77f0b92f7e2766e";
     # nixpkgs-locked.url = "github:nixos/nixpkgs/2744d988fa116fc6d46cdfa3d1c936d0abd7d121";
     # nixpkgs-9e58ed7.url = "github:nixos/nixpkgs/9e58ed7ba759d81c98f033b7f5eba21ca68f53b0";
@@ -46,12 +46,12 @@
     nix-colors.url = "github:misterio77/nix-colors";
 
     m3ta-home = {
-      url = "git+ssh://gitea@code.m3ta.dev/m3tam3re/m3ta-home";
-      # url = "path:/home/m3tam3re/p/NIX/m3ta-home";
+      # url = "git+ssh://gitea@code.m3ta.dev/m3tam3re/m3ta-home";
+      url = "path:/home/m3tam3re/p/NIX/m3ta-home";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    hermes-agent.url = "github:NousResearch/hermes-agent/v2026.7.20";
+    hermes-agent.url = "github:NousResearch/hermes-agent/v2026.8.3";
   };
 
   outputs = {
diff --git a/hosts/common/extraServices/virtualisation.nix b/hosts/common/extraServices/virtualisation.nix
index 34576e9..e5b67e1 100644
--- a/hosts/common/extraServices/virtualisation.nix
+++ b/hosts/common/extraServices/virtualisation.nix
@@ -21,9 +21,22 @@ in {
       };
     };
     programs.virt-manager.enable = true;
-    systemd.services.virt-secret-init-encryption.enable = false;
     environment = {
       systemPackages = [pkgs.qemu];
+      etc = {
+        "ovmf/OVMF_CODE.fd" = {
+          source = "${(pkgs.OVMF.override {
+            secureBoot = true;
+            tpmSupport = true;
+          }).fd}/FV/OVMF_CODE.fd";
+        };
+        "ovmf/OVMF_VARS.fd" = {
+          source = "${(pkgs.OVMF.override {
+            secureBoot = true;
+            tpmSupport = true;
+          }).fd}/FV/OVMF_VARS.fd";
+        };
+      };
     };
   };
 }
diff --git a/hosts/common/users/m3tam3re.nix b/hosts/common/users/m3tam3re.nix
index c40e6b3..bd23954 100644
--- a/hosts/common/users/m3tam3re.nix
+++ b/hosts/common/users/m3tam3re.nix
@@ -210,7 +210,7 @@
 in {
   # ── NixOS user definition ──
   users.users.m3tam3re = {
-    password = "12345";
+    hashedPassword = "$y$j9T$ORX4btVZgs9Xjq2oIvzJm0$lXiPwaa0D6t.eMDIx1UBesEAMOkWXBoGwpeI7X0aS8D";
     isNormalUser = true;
     description = "m3tam3re";
     extraGroups = [
@@ -228,8 +228,9 @@ in {
     ];
     openssh.authorizedKeys.keys = [
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3YEmpYbM+cpmyD10tzNRHEn526Z3LJOzYpWEKdJg8DaYyPbDn9iyVX30Nja2SrW4Wadws0Y8DW+Urs25/wVB6mKl7jgPJVkMi5hfobu3XAz8gwSdjDzRSWJrhjynuaXiTtRYED2INbvjLuxx3X8coNwMw58OuUuw5kNJp5aS2qFmHEYQErQsGT4MNqESe3jvTP27Z5pSneBj45LmGK+RcaSnJe7hG+KRtjuhjI7RdzMeDCX73SfUsal+rHeuEw/mmjYmiIItXhFTDn8ZvVwpBKv7xsJG90DkaX2vaTk0wgJdMnpVIuIRBa4EkmMWOQ3bMLGkLQeK/4FUkNcvQ/4+zcZsg4cY9Q7Fj55DD41hAUdF6SYODtn5qMPsTCnJz44glHt/oseKXMSd556NIw2HOvihbJW7Rwl4OEjGaO/dF4nUw4c9tHWmMn9dLslAVpUuZOb7ykgP0jk79ldT3Dv+2Hj0CdAWT2cJAdFX58KQ9jUPT3tBnObSF1lGMI7t77VU= m3tam3re@m3-nix"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZcjCKl0DRuOUOMXbM0GKY5JjvmyFpVZ/tRlTKWu/zp razr"
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZbg/Z9mnflXuLahGY8WOSBMqbgeqVIkIwRkquys1Ml sascha.koenig@azintec.com"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCTBFMPCOpKerJBlcvH44602sGyJvgXrwYUegYf96D0 m3ta-adm"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZcjCKl0DRuOUOMXbM0GKY5JjvmyFpVZ/tRlTKWu/zp"
     ];
     packages = [inputs.home-manager.packages.${pkgs.stdenv.hostPlatform.system}.default];
   };
diff --git a/hosts/m3-atlas/programs.nix b/hosts/m3-atlas/programs.nix
index 829e7cf..cb33be1 100644
--- a/hosts/m3-atlas/programs.nix
+++ b/hosts/m3-atlas/programs.nix
@@ -5,6 +5,7 @@
     # here, NOT in environment.systemPackages
   ];
   programs.fish.enable = true;
+  programs.mosh.enable = true;
   programs.nh = {
     enable = true;
     clean.enable = true;
diff --git a/hosts/m3-atlas/services/containers/default.nix b/hosts/m3-atlas/services/containers/default.nix
index 7572900..de12faf 100644
--- a/hosts/m3-atlas/services/containers/default.nix
+++ b/hosts/m3-atlas/services/containers/default.nix
@@ -1,14 +1,12 @@
 {lib, ...}: {
   imports = [
-    ./baserow.nix
+    # ./baserow.nix
     ./ghost.nix
-    ./honcho.nix
-    ./kestra.nix
+    # ./honcho.nix
     ./littlelink.nix
-    ./matomo.nix
+    # ./matomo.nix
     ./netbird.nix
     # ./n8n.nix
-    # ./pangolin.nix
     ./restreamer.nix
     ./slash.nix
     ./slash-nemoti.nix
@@ -16,7 +14,7 @@
   ];
   system.activationScripts.createPodmanNetworkWeb = lib.mkAfter ''
     if ! /run/current-system/sw/bin/podman network exists web; then
-      /run/current-system/sw/bin/podman network create web --subnet=10.89.0.0/24 --internal
+      /run/current-system/sw/bin/podman network create web --subnet=10.89.0.0/24 --gateway=10.89.0.1
     fi
   '';
 }
diff --git a/hosts/m3-atlas/services/containers/ghost.nix b/hosts/m3-atlas/services/containers/ghost.nix
index be62bb2..7f09340 100644
--- a/hosts/m3-atlas/services/containers/ghost.nix
+++ b/hosts/m3-atlas/services/containers/ghost.nix
@@ -4,7 +4,7 @@
     environmentFiles = [config.age.secrets.ghost-env.path];
     ports = ["127.0.0.1:3002:2368"];
     volumes = ["ghost_data:/var/lib/ghost/content"];
-    extraOptions = ["--add-host=mysql:10.89.0.1" "--ip=10.89.0.11" "--network=web"];
+    extraOptions = ["--add-host=mysql:10.89.0.1" "--ip=10.89.0.11" "--network=web" "--dns=8.8.8.8"];
   };
   # Traefik configuration specific to ghost
   services.traefik.dynamicConfigOptions.http = {
diff --git a/hosts/m3-atlas/services/containers/honcho.nix b/hosts/m3-atlas/services/containers/honcho.nix
deleted file mode 100644
index 5a2d482..0000000
--- a/hosts/m3-atlas/services/containers/honcho.nix
+++ /dev/null
@@ -1,209 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: let
-  serviceName = "honcho";
-  image = "ghcr.io/plastic-labs/honcho:v3.0.6";
-
-  apiIp = "10.89.0.24";
-  deriverIp = "10.89.0.25";
-  redisIp = "10.89.0.26";
-
-  postgresHost = "10.89.0.1";
-  postgresPort = config.m3ta.ports.get "postgres";
-  honchoPort = config.m3ta.ports.get "honcho";
-
-  # m3-atlas Netbird mesh address, discovered from `netbird status -d`.
-  # Binding the host port here keeps self-hosted Honcho off public interfaces.
-  netbirdBindAddress = "100.81.142.56";
-  netbirdRange = "100.64.0.0/16";
-
-  dbName = "honcho";
-  dbUser = "honcho";
-  redisName = "${serviceName}-redis";
-  runtimeDirectory = "/run/${serviceName}";
-  runtimeEnvFile = "${runtimeDirectory}/env";
-
-  # Keep auth disabled for the first deployment because Honcho clients need
-  # generated JWTs. The JWT secret is still provisioned so enabling auth later is
-  # a one-line change here plus client token generation.
-  authUseAuth = false;
-
-  sharedEnvironment = {
-    CACHE_ENABLED = "true";
-    CACHE_URL = "redis://${redisName}:6379/0?suppress=true";
-    LOG_LEVEL = "INFO";
-    TELEMETRY_ENABLED = "false";
-    VECTOR_STORE_MIGRATED = "false";
-    VECTOR_STORE_TYPE = "pgvector";
-    AUTH_USE_AUTH = lib.boolToString authUseAuth;
-  };
-
-  sharedEnvironmentFiles = [
-    runtimeEnvFile
-    config.age.secrets."${serviceName}-selfhost-env".path
-  ];
-
-  webNetwork = ip: [
-    "--add-host=postgres:${postgresHost}"
-    "--network=web:ip=${ip}"
-  ];
-
-  # The shared web network is intentionally internal. API and deriver also join
-  # this egress-only network so LLM provider calls can leave the host without
-  # exposing any extra inbound ports.
-  networksWithEgress = ip:
-    (webNetwork ip)
-    ++ [
-      "--network=${serviceName}-egress"
-    ];
-
-  apiHealthCmd = ''/app/.venv/bin/python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health', timeout=2).read()"'';
-in {
-  system.activationScripts.createPodmanNetworkHonchoEgress = lib.mkAfter ''
-    if ! /run/current-system/sw/bin/podman network exists ${serviceName}-egress; then
-      /run/current-system/sw/bin/podman network create ${serviceName}-egress
-    fi
-  '';
-
-  virtualisation.oci-containers.containers = {
-    "${serviceName}-redis" = {
-      image = "docker.io/redis:8.2";
-      autoStart = true;
-      volumes = ["${serviceName}_redis_data:/data"];
-      extraOptions =
-        (webNetwork redisIp)
-        ++ [
-          "--health-cmd=redis-cli ping"
-          "--health-interval=5s"
-          "--health-timeout=5s"
-          "--health-retries=5"
-        ];
-    };
-
-    "${serviceName}-api" = {
-      inherit image;
-      autoStart = true;
-      entrypoint = "sh";
-      cmd = ["docker/entrypoint.sh"];
-      environment = sharedEnvironment;
-      environmentFiles = sharedEnvironmentFiles;
-      ports = ["${netbirdBindAddress}:${toString honchoPort}:8000"];
-      dependsOn = [redisName];
-      extraOptions =
-        (networksWithEgress apiIp)
-        ++ [
-          "--health-cmd=${apiHealthCmd}"
-          "--health-interval=5s"
-          "--health-timeout=5s"
-          "--health-retries=5"
-          "--health-start-period=10s"
-        ];
-    };
-
-    "${serviceName}-deriver" = {
-      inherit image;
-      autoStart = true;
-      entrypoint = "/app/.venv/bin/python";
-      cmd = ["-m" "src.deriver"];
-      environment = sharedEnvironment;
-      environmentFiles = sharedEnvironmentFiles;
-      dependsOn = ["${serviceName}-api" redisName];
-      extraOptions = networksWithEgress deriverIp;
-    };
-  };
-
-  systemd.services = {
-    "${serviceName}-postgres-bootstrap" = {
-      description = "Bootstrap Honcho PostgreSQL role, database, password, and pgvector";
-      after = ["postgresql.service" "agenix.service"];
-      requires = ["postgresql.service" "agenix.service"];
-      before = ["${serviceName}-env.service" "podman-${serviceName}-api.service" "podman-${serviceName}-deriver.service"];
-      requiredBy = ["podman-${serviceName}-api.service" "podman-${serviceName}-deriver.service"];
-      path = [
-        config.services.postgresql.package
-        pkgs.coreutils
-      ];
-      serviceConfig = {
-        Type = "oneshot";
-        User = "postgres";
-        Group = "postgres";
-      };
-      script = ''
-        set -euo pipefail
-        test -s ${config.age.secrets."${serviceName}-selfhost-db-password".path}
-
-        psql -v ON_ERROR_STOP=1 --dbname=postgres <<'SQL'
-        DO $$
-        BEGIN
-          CREATE ROLE ${dbUser} LOGIN;
-        EXCEPTION WHEN duplicate_object THEN
-          NULL;
-        END
-        $$;
-
-        SELECT 'CREATE DATABASE ${dbName} OWNER ${dbUser}'
-        WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = '${dbName}')\gexec
-
-        ALTER DATABASE ${dbName} OWNER TO ${dbUser};
-        \set honcho_password `cat ${config.age.secrets."${serviceName}-selfhost-db-password".path}`
-        ALTER ROLE ${dbUser} WITH LOGIN PASSWORD :'honcho_password';
-        SQL
-
-        psql -v ON_ERROR_STOP=1 --dbname=${dbName} <<'SQL'
-        CREATE EXTENSION IF NOT EXISTS vector;
-        GRANT ALL PRIVILEGES ON DATABASE ${dbName} TO ${dbUser};
-        SQL
-      '';
-    };
-
-    "${serviceName}-env" = {
-      description = "Generate Honcho runtime environment file with agenix secrets";
-      after = ["agenix.service" "${serviceName}-postgres-bootstrap.service"];
-      requires = ["agenix.service" "${serviceName}-postgres-bootstrap.service"];
-      before = ["podman-${serviceName}-api.service" "podman-${serviceName}-deriver.service"];
-      requiredBy = ["podman-${serviceName}-api.service" "podman-${serviceName}-deriver.service"];
-      path = [
-        pkgs.coreutils
-        pkgs.python3
-      ];
-      serviceConfig = {
-        Type = "oneshot";
-        RemainAfterExit = true;
-      };
-      script = ''
-        set -euo pipefail
-        install -d -m 0750 ${runtimeDirectory}
-
-        db_password_encoded=$(
-          python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.stdin.read().strip(), safe=""))' \
-            < ${config.age.secrets."${serviceName}-selfhost-db-password".path}
-        )
-        jwt_secret=$(tr -d '\r\n' < ${config.age.secrets."${serviceName}-selfhost-jwt-secret".path})
-
-        umask 077
-        cat > ${runtimeEnvFile} <<ENV
-        DB_CONNECTION_URI=postgresql+psycopg://${dbUser}:$db_password_encoded@postgres:${toString postgresPort}/${dbName}
-        AUTH_JWT_SECRET=$jwt_secret
-        ENV
-      '';
-    };
-
-    "podman-${serviceName}-api" = {
-      after = ["${serviceName}-env.service" "${serviceName}-postgres-bootstrap.service"];
-      requires = ["${serviceName}-env.service" "${serviceName}-postgres-bootstrap.service"];
-    };
-
-    "podman-${serviceName}-deriver" = {
-      after = ["${serviceName}-env.service" "${serviceName}-postgres-bootstrap.service"];
-      requires = ["${serviceName}-env.service" "${serviceName}-postgres-bootstrap.service"];
-    };
-  };
-
-  networking.firewall.extraCommands = ''
-    # Self-hosted Honcho API: only Netbird mesh peers may reach ${netbirdBindAddress}:${toString honchoPort}.
-    ip46tables -A nixos-fw -p tcp --dport ${toString honchoPort} -s ${netbirdRange} -j nixos-fw-accept
-  '';
-}
diff --git a/hosts/m3-atlas/services/containers/kestra.nix b/hosts/m3-atlas/services/containers/kestra.nix
deleted file mode 100644
index 8882d8c..0000000
--- a/hosts/m3-atlas/services/containers/kestra.nix
+++ /dev/null
@@ -1,32 +0,0 @@
-{config, ...}: {
-  virtualisation.oci-containers.containers."kestra" = {
-    image = "docker.io/kestra/kestra:latest";
-    environmentFiles = [config.age.secrets.kestra-env.path];
-    cmd = ["server" "standalone" "--config" "/etc/config/application.yaml"];
-    ports = ["127.0.0.1:3018:8080"];
-    user = "root";
-    volumes = [
-      "/var/run/docker.sock:/var/run/docker.sock"
-      "${config.age.secrets.kestra-config.path}:/etc/config/application.yaml"
-      "kestra_data:/app/storage"
-      "/tmp/kestra-wd:/tmp/kestra-wd"
-    ];
-    extraOptions = ["--add-host=postgres:10.89.0.1" "--ip=10.89.0.18" "--network=web"];
-  };
-
-  systemd.tmpfiles.rules = [
-    "d /tmp/kestra-wd 0750 1000 1000 - -"
-  ];
-
-  # Traefik configuration specific to littlelink
-  services.traefik.dynamicConfigOptions.http = {
-    services.kestra.loadBalancer.servers = [{url = "http://localhost:3018/";}];
-
-    routers.kestra = {
-      rule = "Host(`k.m3ta.dev`)";
-      tls = {certResolver = "godaddy";};
-      service = "kestra";
-      entrypoints = "websecure";
-    };
-  };
-}
diff --git a/hosts/m3-atlas/services/containers/netbird.nix b/hosts/m3-atlas/services/containers/netbird.nix
index 2b67dba..925afc6 100644
--- a/hosts/m3-atlas/services/containers/netbird.nix
+++ b/hosts/m3-atlas/services/containers/netbird.nix
@@ -1,5 +1,6 @@
 {
   config,
+  lib,
   pkgs,
   ...
 }: let
@@ -121,7 +122,7 @@ in {
 
   virtualisation.oci-containers.containers = {
     "${serviceName}-dashboard" = {
-      image = "netbirdio/dashboard:latest";
+      image = "docker.io/netbirdio/dashboard:latest";
       autoStart = true;
       environmentFiles = [config.age.secrets."${serviceName}-dashboard-env".path];
       extraOptions = [
@@ -131,7 +132,7 @@ in {
     };
 
     "${serviceName}-server" = {
-      image = "netbirdio/netbird-server:latest";
+      image = "docker.io/netbirdio/netbird-server:latest";
       autoStart = true;
       ports = ["${toString stunPort}:${toString stunPort}/udp"];
       environmentFiles = [config.age.secrets."${serviceName}-server-env".path];
@@ -147,12 +148,15 @@ in {
     };
 
     "${serviceName}-proxy" = {
-      image = "netbirdio/reverse-proxy:latest";
+      image = "docker.io/netbirdio/reverse-proxy:latest";
       autoStart = true;
       ports = ["${toString wireguardPort}:${toString wireguardPort}/udp"];
       volumes = [
         "${serviceName}_proxy_certs:/certs"
       ];
+      environment = {
+        NB_PROXY_PRIVATE = "true";
+      };
       environmentFiles = [config.age.secrets."${serviceName}-proxy-env".path];
       cmd = [
         "--domain=${proxyDomain}"
diff --git a/hosts/m3-atlas/services/default.nix b/hosts/m3-atlas/services/default.nix
index bdca969..c697c87 100644
--- a/hosts/m3-atlas/services/default.nix
+++ b/hosts/m3-atlas/services/default.nix
@@ -7,7 +7,7 @@
     ./rustfs.nix
     ./mysql.nix
     ./netbird.nix
-    ./n8n.nix
+    # ./n8n.nix
     ./paperless.nix
     ./postgres.nix
     ./searx.nix
diff --git a/hosts/m3-atlas/services/gitea-actions-runner.nix b/hosts/m3-atlas/services/gitea-actions-runner.nix
index 2d88e25..8e9875d 100644
--- a/hosts/m3-atlas/services/gitea-actions-runner.nix
+++ b/hosts/m3-atlas/services/gitea-actions-runner.nix
@@ -5,7 +5,7 @@
 }: {
   services.gitea-actions-runner = {
     instances.default = {
-      enable = true;
+      enable = false;
       name = "${config.networking.hostName}-runner";
       url = "https://code.m3ta.dev";
       tokenFile = config.age.secrets.gitea-runner-token.path;
diff --git a/hosts/m3-atlas/services/paperless.nix b/hosts/m3-atlas/services/paperless.nix
index 4c86a5f..fd63d82 100644
--- a/hosts/m3-atlas/services/paperless.nix
+++ b/hosts/m3-atlas/services/paperless.nix
@@ -1,4 +1,9 @@
-{config, ...}: {
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: {
   services.paperless = {
     enable = true;
     port = config.m3ta.ports.get "paperless";
diff --git a/hosts/m3-atlas/services/postgres.nix b/hosts/m3-atlas/services/postgres.nix
index a7b3ef7..4bcba85 100644
--- a/hosts/m3-atlas/services/postgres.nix
+++ b/hosts/m3-atlas/services/postgres.nix
@@ -18,17 +18,13 @@
       # Localhost connections (IPv4 and IPv6)
       host    all          postgres     127.0.0.1/32    scram-sha-256
       host    all          postgres     ::1/128         scram-sha-256
-      host    outline      outline      127.0.0.1/32    scram-sha-256
-      host    outline      outline      ::1/128         scram-sha-256
       host    paperless    paperless    127.0.0.1/32    scram-sha-256
       host    paperless    paperless    ::1/128         scram-sha-256
 
       # Podman network connections for Baserow
       host    baserow      baserow      10.89.0.0/24    scram-sha-256
-      host    kestra       kestra       10.89.0.0/24    scram-sha-256
       host    netbird      netbird      10.89.0.0/24    scram-sha-256
       host    authentik    authentik    10.89.0.0/24    scram-sha-256
-      host    honcho       honcho       10.89.0.0/24    scram-sha-256
 
       # Deny all other connections
       local   all       all       reject
@@ -39,7 +35,7 @@
   services.postgresqlBackup = {
     enable = true;
     startAt = "03:10:00";
-    databases = ["baserow" "paperless" "kestra" "authentik" "netbird" "honcho"];
+    databases = ["baserow" "paperless" "authentik" "netbird"];
   };
   networking.firewall = {
     extraCommands = ''
diff --git a/hosts/m3-atlas/services/rustfs.nix b/hosts/m3-atlas/services/rustfs.nix
index aa56f8e..784b9a3 100644
--- a/hosts/m3-atlas/services/rustfs.nix
+++ b/hosts/m3-atlas/services/rustfs.nix
@@ -8,10 +8,8 @@
     enable = true;
     environmentFile = config.age.secrets.rustfs-env.path;
     settings = {
-      # Reuse existing MinIO data directory
       RUSTFS_VOLUMES = "/var/storage/s3";
 
-      # Keep same ports as MinIO to avoid changing Traefik and client configs
       RUSTFS_ADDRESS = ":3008";
       RUSTFS_CONSOLE_ENABLE = "true";
       RUSTFS_CONSOLE_ADDRESS = ":3007";
@@ -22,18 +20,18 @@
 
   # Traefik configuration — same routes as before
   services.traefik.dynamicConfigOptions.http = {
-    services.minio-console.loadBalancer.servers = [
+    services.rustfs-console.loadBalancer.servers = [
       {
         url = "http://localhost:3007/";
       }
     ];
-    services.minio.loadBalancer.servers = [
+    services.rustfs.loadBalancer.servers = [
       {
         url = "http://localhost:3008/";
       }
     ];
 
-    routers.minio = {
+    routers.rustfs = {
       rule = "Host(`s3.m3tam3re.com`)";
       tls = {
         certResolver = "godaddy";
@@ -41,13 +39,31 @@
       service = "minio";
       entrypoints = "websecure";
     };
-    routers.minio-console = {
+    routers.rustfs-console = {
+      rule = "Host(`s3c.m3ta.dev`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "rustfs-console";
+      entrypoints = "websecure";
+    };
+    routers.rustfs-old = {
+      rule = "Host(`s3.m3ta.dev`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "rustfs";
+      entrypoints = "websecure";
+      middlewares = ["subdomain-redirect"];
+    };
+    routers.rustfs-console-old = {
       rule = "Host(`minio.m3tam3re.com`)";
       tls = {
         certResolver = "godaddy";
       };
-      service = "minio-console";
+      service = "rustfs";
       entrypoints = "websecure";
+      middlewares = ["subdomain-redirect"];
     };
   };
 }
diff --git a/hosts/m3-atlas/services/traefik.nix b/hosts/m3-atlas/services/traefik.nix
index 0fba395..9acde64 100644
--- a/hosts/m3-atlas/services/traefik.nix
+++ b/hosts/m3-atlas/services/traefik.nix
@@ -37,6 +37,10 @@
         };
         websecure = {
           address = ":443";
+          # NetBird (signal/management gRPC, proxy mapping stream) requires
+          # long-lived HTTP/2 streams — see https://docs.netbird.io/selfhosted/maintenance/configuration-files
+          # Default readTimeout (60s) kills the streams every minute.
+          transport.respondingTimeouts.readTimeout = "0s";
         };
       };
     };
@@ -85,15 +89,6 @@
         };
 
         routers = {
-          # ── Hermes Dashboard — Netbird mesh only ─────────────────────
-          hermes-dashboard = {
-            rule = "Host(`dash.m3ta.dev`)";
-            service = "hermes-dashboard";
-            entrypoints = ["websecure"];
-            tls = {
-              certResolver = "godaddy";
-            };
-          };
           api = {
             rule = "Host(`r.m3tam3re.com`)";
             service = "api@internal";
diff --git a/hosts/m3-hermes/programs.nix b/hosts/m3-hermes/programs.nix
index 92f7c2d..ce14d2e 100644
--- a/hosts/m3-hermes/programs.nix
+++ b/hosts/m3-hermes/programs.nix
@@ -1,6 +1,7 @@
 {pkgs, ...}: {
   programs.nix-ld.enable = true;
   programs.nix-ld.libraries = with pkgs; [];
+  programs.mosh.enable = true;
   programs.fish.enable = true;
   programs.nh = {
     enable = true;
diff --git a/hosts/m3-hermes/services/hermes-agent.nix b/hosts/m3-hermes/services/hermes-agent.nix
index 454a7e4..4d90f3e 100644
--- a/hosts/m3-hermes/services/hermes-agent.nix
+++ b/hosts/m3-hermes/services/hermes-agent.nix
@@ -73,6 +73,10 @@ in {
     extraPackages = with pkgs; [
       basecamp
       docker
+      herdr
+      opencode
+      pi-coding-agent
+      bun
       git
       curl
       jq
@@ -123,7 +127,7 @@ in {
     settings = {
       # ── Model ──────────────────────────────────────────────────────────
       model = {
-        default = "glm-5.2";
+        default = "glm-5.3";
         provider = "zai";
       };
 
@@ -290,6 +294,7 @@ in {
     isNormalUser = false;
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAVF7jGP1S6vc5CxeBFD/UxiImHOgbPlKg8WYyNtOA3"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZcjCKl0DRuOUOMXbM0GKY5JjvmyFpVZ/tRlTKWu/zp"
     ];
   };
 }
diff --git a/hosts/m3-kratos/services/n8n.nix b/hosts/m3-kratos/services/n8n.nix
index 00c2653..456c22c 100644
--- a/hosts/m3-kratos/services/n8n.nix
+++ b/hosts/m3-kratos/services/n8n.nix
@@ -1,4 +1,4 @@
-{lib, ...}: {
+{
   services.n8n = {
     enable = true;
     openFirewall = true;
@@ -7,7 +7,4 @@
       N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS = "false";
     };
   };
-  # Temporary fix for upstream module
-  systemd.services.n8n.serviceConfig.LoadCredential = lib.mkForce [];
-  systemd.services.n8n.environment.N8N_RUNNERS_AUTH_TOKEN_FILE = lib.mkForce null;
 }
diff --git a/secrets.nix b/secrets.nix
index d784293..e374d7d 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -3,13 +3,13 @@ let
   m3-ares = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+M4CygEQ29eTmLqgyIAFCxy0rgfO23klNiARBEA+3s";
   m3-kratos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl+LtFGsk/A7BvxwiUCyq5wjRzGtQSrBJzzLGxINF4O";
   m3-helios = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIyHuLITpI+M45ZZem33wDusY2X988mBoWpD1HDeZNRJ";
-  m3-atlas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBYK1wsFkUPIb/lX1BH7+VyXmmGSbdEFHnvhAOcaC7H";
+  m3-atlas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmmqZ4GgDEXJgj8uYrZAr/EoLIA6LJGkTIyKGQD/60a";
   m3-hermes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXJ5y9u88KptDaG959Aj6eq0CCBePOw1SvEh/84wb4M";
 
   # USERS
-  m3tam3re = "ssh-rsa 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";
+  m3ta-adm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCTBFMPCOpKerJBlcvH44602sGyJvgXrwYUegYf96D0";
   sascha.koenig = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZbg/Z9mnflXuLahGY8WOSBMqbgeqVIkIwRkquys1Ml";
-  users = [m3tam3re sascha.koenig];
+  users = [m3ta-adm sascha.koenig];
 
   systems = [m3-atlas m3-ares m3-helios m3-kratos m3-hermes];
 in {
diff --git a/secrets/anytype-key-ares.age b/secrets/anytype-key-ares.age
index cb12e49..50ea2be 100644
Binary files a/secrets/anytype-key-ares.age and b/secrets/anytype-key-ares.age differ
diff --git a/secrets/anytype-key.age b/secrets/anytype-key.age
index 20b8f0f..12cd18a 100644
Binary files a/secrets/anytype-key.age and b/secrets/anytype-key.age differ
diff --git a/secrets/authentik-env.age b/secrets/authentik-env.age
index 375d186..fdfe7a9 100644
Binary files a/secrets/authentik-env.age and b/secrets/authentik-env.age differ
diff --git a/secrets/basecamp-client-id.age b/secrets/basecamp-client-id.age
index 1a874f2..c8d5c30 100644
--- a/secrets/basecamp-client-id.age
+++ b/secrets/basecamp-client-id.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw KVgzdtYwUeHfTWI0kyVizuCXcavP7QRNeF+8XkQAADI
-RLRWb0CqvON7Ue4kDnSDFjcFBqVqM8DDp+XjOuvZPIc
--> ssh-ed25519 5kwcsA t/1m3S8bTGxlspSIsJ7TYkNd2Dj2LwI3QujaViwWgkk
-Y5hrADXvBnWEJffiP4eE+x/Bk/osoEuWaHe40WwAGgA
--> ssh-ed25519 9d4YIQ ac6n1mFXDfGKxL0z0/meBxJ0uBp5u2qOntQCzpF1/BE
-d4GUD0y2SMhSG7chSzy5J5fiPe8ubxgYqpoOfeQtgHw
--> ssh-ed25519 3Bcr1w VXpq7b5+Ok+rmVbUTHckj77rlPH0T1t8F3L1ioyKx0M
-8q8tKBRBV9dZTnKVoOsV8y6K4G2eYhqwh080WvqumJo
--> ssh-ed25519 c4NQlA Cxx+PteoMdLYR7ARVlSY+hXChZhFvrr+EWPV0rz+wj4
-QXQy3n7FoVWgKQ4xi2x2y7d+l4AqKLBqGwY9Vxu1K7o
--> ssh-rsa DQlE7w
-sBkktyV7JaL1NViEHoH4CxTalKI9vIkoCZPBkyomCnNJexbfyEFLH88JUeBuJu2f
-zxVZOVRqfUyTPnPV7KOdMEFuOXZn92PMc3Qd4/mk3jmWgQcHd1DB73sWlRtrrJfn
-PJLJwFr6WXuMz/wo7Vnxa+dAH09dhSoR08LQy96LDLYCt8sPzvPeYCBI7eZ6VMyr
-+hhJp8tD1pRDbG3SE0R9VgLUX/FutFIuS/7ZkwvQtor37v9ne1e7/4kbYah+RPbe
-qUFVXOEq7A5QYjz7BBXbCtf7Iapg4XiIMHD5TRFhXvRfCymdHXtxKcIf9osWtRH9
-nBWqjJlLIi2r32IJZbM2Nx086vwM0F/MrTzFNydKC3UzCI2W5BCNohw8tCNLLlAW
-Ef1oK0HjJob3NUqAbVuj5vzpEaziksdqWX+khmAZYwZuu/9kTdaKj8DVWEXBC8Jw
-OKG74kTEpe11ZsUNYcVxG9e2OvhpCStcPZdzchts5ZLyZoS6JDXQZgnk+amgUCSY
-
--> ssh-ed25519 CSMyhg vRXAIXq6DOzLwlRPgKYM9tT2FTGM3Sy9oiWpKA5ZZwI
-8vsuNkP+NS1cyi6dU1BeiqhmjC1OQrUY4IJSns6nDyY
---- 6L/OMvw9H0PR96XMTSOh4NS5lOHl9aJumliYuxZcPCM
-+.�� ��UE�L����s�>u!�j���\�e��`�,q?�v��r����ṣ��]�w��2ʸ��{
�m���
\ No newline at end of file
+-> ssh-ed25519 WyOB4g hrA2+5CnksFy2xF6LsztnY/8tWZbxVH0WAY95BrjcW0
+/b7cqI/Erlc4McGqU9e+DVJcU9PCWvN9wnsgxKhSygQ
+-> ssh-ed25519 5kwcsA J5ClFMFoVad6kACaTAZzz1y27X15k78J9fBiP1FqwR8
+a5+RRCZ63Bnzaf/ogZLUJYijewDhc1swR3MeFS/uX0w
+-> ssh-ed25519 9d4YIQ 4ndCPUlYQ51RAWHtZfCAM34fSGPnKr+Zr6r6IJAMyzA
+BFH+m8/ttDMNPEtpsk3XcwVFkiohvuutlLM67Z+Akg0
+-> ssh-ed25519 3Bcr1w YfUqH5spneMxZf9u/OpS1nLPKHRcrxrbwG+Z/HGXGV4
+EMPTt1zmhJuG0FsXnF0MsKmEJI9uPeX6qQVQnZ8Yh1A
+-> ssh-ed25519 c4NQlA BmiPoNbWU0QEJwiAs1ICdLDw/UMCDG87HpusXUqIbX8
+wx5k5RXIkOux31kkMiIBpQz522mQyvIub+SVAB3b20s
+-> ssh-ed25519 ++TqaQ se2jxoqQAKfbgbMENdtiIG7IVLsIVRUaTfz759yEHi8
+PMnQ1CPGN5omZVrVDOUIvwa5E97B9tPtd+Vn5LsZTVc
+-> ssh-ed25519 CSMyhg RJ9KHxLRocI7GKO0sjav5sGh/X/2GjrlicQ08nxKVwM
+52l5XnpdMj3a3gzNhwdV7lUdeRJyCwZ9j0HOn6PTt/4
+--- KHsdd30ddmuUizobsZX1AuS/VNT37N1UNb/lLiBaWJE
+)m�Ξ��^��py��q�y���^2��.���}�T� z���W�ʨ�1�ro�:�ٵC#��h�wLt�]q�Hv
\ No newline at end of file
diff --git a/secrets/basecamp-client-secret.age b/secrets/basecamp-client-secret.age
index cfeca37..3256823 100644
--- a/secrets/basecamp-client-secret.age
+++ b/secrets/basecamp-client-secret.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw zVS6W9IOVIQbpXQhL7GGWm87MPV/57rYwMU6gWrCPyI
-lgWep7WTRJ/uZLgH44YIYdsnsJclXTWBBPpgPY9VWKw
--> ssh-ed25519 5kwcsA awrHu9+jzXjvSg3ivJqcffXvVTtNV9B/W2Ey3pbzJBg
-8GGXhUrT405a2KGZIztnnOF9S8oNnOHGq3icpRH5YxM
--> ssh-ed25519 9d4YIQ BHTm2aHH23DrESeUOoPqCENbr69tOl46VDePkqa0fhE
-L6V0FRRQGDSRV0NoqdyPS+Jw3sTzPj1JkSuTx4mhd54
--> ssh-ed25519 3Bcr1w 0Vkq0jms2bT+MtXfXeWBZ8WJxGADKBk1dSCSiVL9DWE
-rTPKYMFe2VnBnOpcLIFeyFZDp3RS/Hz6H4XdTWGDzRc
--> ssh-ed25519 c4NQlA oij0yRVXl9hn8Rn2/ebOmfxUdJwTGiZO/4CSBXppWSc
-nPx4rsjWfumRRy7IctmVEl+IV41dmhsYD18Kntn3Tgs
--> ssh-rsa DQlE7w
-lRns1CsVo49lMc2zmEqEgtLNyK9ltQOMDhuzxITte6RwFeUTgll7jJgPY/EKK5vG
-KUWyMqNZ59StUxmgJCYsu9jKMuTkd8VPlz2BM9AVHrA8iDpwbzkRUl5qvl7pC2vJ
-Y4h3K1vw0Hjq7kB0XxMyf21aX7sIseC5J6FfieGbU41sFDHbGALDAMuuBSMXeAqd
-XgmOeoXt4lTSdO3BX0csax1waDSDKfLkzSI0GWoljPRHhDU+5SnDAeraYZrC2d7v
-BsTLiSSNbAKd7NnmT8w8l5HYloA9GStTmU2VGW+BOlkpVOXszbGrPrm07q/syPMy
-ZYQHLEaD6P65UvqMQAFOTewYV3Dtht7z++W6CJl86sN8wMaLKVWXqym5z9uJzJqh
-HNK9oCWGhPr516Y6rhGvJFn8opuwgteDYIz0tN3K/CEtRIgeuaJzDy5lYuOfU0Jt
-jag2u5lnPqXJAJH62FOoCFkpWdQ0pSW8FFBgGphe0dIIE8Kdxw1N/VFA4wlHC3Ke
-
--> ssh-ed25519 CSMyhg gIOL+m8JjlSCAWihY3RFZ2XSjcLpf7A9OPiB4vFcFEE
-G0MtxPT8xpXaTx7ktqLxui7OcKhHCjItLe4pvAV/2DY
---- eB/NDnhF6snyeQc9C8DsCZr7Om87zIcGBdddskeQvmo
-�Q�w�Mr��+&;~�V�y�P�C�������H����6L̍��ƶ�a���)9��C�J�Ð��~l�6+��
\ No newline at end of file
+-> ssh-ed25519 WyOB4g uzM5wk7ZIKIt+Rq5oXSV0oCAF/knLdpb8UMlCSrvzx8
+ZVDlIKYDeIgyB51ywXtuM2h/hhc8UHWS8+u86T/LMkI
+-> ssh-ed25519 5kwcsA 1mStFttlOH3YUPrGPqgrkcuLC2ORpEs6wc7Z5KZR8DM
+zc8b/Uq0qvnRYP+zRpGTzqb7jjGd9y6EjtTNoa4NZ9c
+-> ssh-ed25519 9d4YIQ GZqO57qrMLBBCpSPMm9kFTvswl6aT2EWzz93e/9hPnM
+5vZLSO0IKHSxu04e1POYFwiUSrBRFtIPmeVhFI0tbCI
+-> ssh-ed25519 3Bcr1w Y3w5ReBbm+7GsSDLY0w5ffBHo5DE/yV3MrjgDqiQITM
+L+/c/9TEpjr9dz1vj5abnFz7iSG882oEsITmx0W1yqo
+-> ssh-ed25519 c4NQlA Y7XtK1ZjEalXEQNJDM8e7v72nn65p3xP9gE8fE6SGks
+wL7ySo+AEwxlYJifZeOpojm1hO3MxufCA5tZDp6FKZg
+-> ssh-ed25519 ++TqaQ Vg/yfEZb+vdjim45WjtyFD8znry1W8lJLacrVFYdKmY
+SKimb6BidrI/CRU0sZx8C67qnvlCjka/dquIfSi6gfU
+-> ssh-ed25519 CSMyhg SZGrbDwQFEO7NKD5PNCmwKWUeRgeR+v7B0eZklSCZW8
+hjcMmlhhkQUrWMAqqpe+aIxW1PXvi+YlzwlUXNrTLFA
+--- ZDXA3ywzCiiHfYoaQcvGZDXDd8V0Ebe9F4/DEwDstL8
+?Ak�o�>��^�*���3';9z$[;)�Q~��Z Qt�_�G�Vk"�v��c�$KY����ٰ�'�
\ No newline at end of file
diff --git a/secrets/baserow-env.age b/secrets/baserow-env.age
index aa07182..6a755c3 100644
Binary files a/secrets/baserow-env.age and b/secrets/baserow-env.age differ
diff --git a/secrets/exa-key.age b/secrets/exa-key.age
index ce66530..6475d6e 100644
Binary files a/secrets/exa-key.age and b/secrets/exa-key.age differ
diff --git a/secrets/ghost-env.age b/secrets/ghost-env.age
index 26467cd..7b858e8 100644
Binary files a/secrets/ghost-env.age and b/secrets/ghost-env.age differ
diff --git a/secrets/gitea-runner-token.age b/secrets/gitea-runner-token.age
index 33cce24..00eeda0 100644
Binary files a/secrets/gitea-runner-token.age and b/secrets/gitea-runner-token.age differ
diff --git a/secrets/hermes-api-server-key.age b/secrets/hermes-api-server-key.age
index 777f7c0..d823a86 100644
Binary files a/secrets/hermes-api-server-key.age and b/secrets/hermes-api-server-key.age differ
diff --git a/secrets/hermes-cloud-env.age b/secrets/hermes-cloud-env.age
index b62a4df..c4ee09e 100644
Binary files a/secrets/hermes-cloud-env.age and b/secrets/hermes-cloud-env.age differ
diff --git a/secrets/hermes-env.age b/secrets/hermes-env.age
index d8a3a30..993c954 100644
Binary files a/secrets/hermes-env.age and b/secrets/hermes-env.age differ
diff --git a/secrets/hermes-gitea-token.age b/secrets/hermes-gitea-token.age
index bb942fe..443c92d 100644
--- a/secrets/hermes-gitea-token.age
+++ b/secrets/hermes-gitea-token.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw j+zQu+BGTMVhIEzhqECFLMqs8tK7P8zDF/0fumWTrSY
-RqemJfrS6bf6r/Owh38FNV14JNqTP2ZtN8diUqJ0NTU
--> ssh-ed25519 5kwcsA gYZEiF1oFwd7kddSzmmvFC7umpaD0y4DL2LAOHmmkkI
-KcOSW/aExT0wJl2Fs97mVSj64CYGL8DsHbKZca3BdTo
--> ssh-ed25519 9d4YIQ 41Mx+hpizRKeW4lu1gMcHVI4p5PqN202F/dJl0n9oTw
-G9zr0kdbswSifyHzqlWNyYB1TEaQjxFyxs7mz9XM7Ko
--> ssh-ed25519 3Bcr1w 3FnDPnyWym3Pv70DBEg+tewH6GNM3S/mbbYPGjb1LiY
-TOpFTHq5XDoJoqfsDnProGUlXKwuGJQhYJf/f23bgKE
--> ssh-ed25519 c4NQlA mpZuWGlXdmhqkta3SxcDcm/4dw017Zn9KS29WBznnzg
-3LjR5O5uezXy3toWAEAEPU4nVx69GYpbYQwQygoIwf4
--> ssh-rsa DQlE7w
-iK5n9EFFD3apn6eJJiAB6dom/llqgneXeSYWNN44Xm0Qez5H3slpn4779BiQwMrI
-863iJj91E7KSgANfm3yP3JP8veuuwATk1lRjnk/Xx5AbIQjhlANK7SoNB938unKc
-Syd5sA4NX/SRy5rlJUXmc1ZtJex1sc880xj9xEOrclhd1pMD7zPE647SUDz8FcEU
-BsHckU3+dKvlLcUVbFJCVfH9LBQezVRE2ajRQRy6FygwTkgrXpD9peTCXLBOacye
-IOzPCJUsDB0Ats5osq/xdYb23Qz5RaiztBhNuurI6gWkAim17f8sGIdlWirjQOvH
-NwTIArMT8vexBJsLtiYW0ZbLYPX+byidLRpuk2RXT1pfUMkeVWA2g1CgKCHKJbQG
-ef4EMFRPhRZ5Knd6279dXalbE2FTbt1uWpxhvjOF8E5O4lM6+3ApWf5d7c0qM6on
-jP4+Bn/sOIkVsiB1fjd6YqcXdyORNLqlwOsaCtvfLJ5t0EfebpP5Rigk13f2xddf
-
--> ssh-ed25519 CSMyhg M6Nc06Maem8c92oFktCHl/FeNdevn8fazYJjxLygxSc
-h6E9GHEO8l9cKVEO6RlpzVJovuo7aOmKYXVDYHVBs1s
---- RlUihZA7p0luD4sv9EY73wq9qIFWMHNnoNmxxVMO8OI
-���r	
�cCuaٹd���d+޻W���w%�߉����sM��)�y����=\j�p�"�����ql
\ No newline at end of file
+-> ssh-ed25519 WyOB4g WsqwH1Ag1bQRiiB80jjzdZutoisT7i0gDirpqHU0Mkk
+Eos8bh2LRVN7sHx3cfpO9wmxhP3aBEOEuc4UPuUSAlI
+-> ssh-ed25519 5kwcsA 5XEok5gRN/JV3k5JyerBCdyyi2ZPnTod8CNFez1tKms
+Lzx4PYb6uSRxULUyDTy+t2h6YJ0plDQTwoMasc34DRE
+-> ssh-ed25519 9d4YIQ zPPsxbjSn1UE7UOIg0cAaQwEBGa2WFWC5tH/ti8T/mY
+ZF5jJ9Sp7508+QBj9AOydlQjxxN0nkHlQpnr2Lz1abs
+-> ssh-ed25519 3Bcr1w c6jCupUbwcWx+tb3qHvLDaBZ31+Ba0RzD7erg4tw3xM
+OExbAelnOzx3D8O2LjVMZ/hDHdwCJW1m3nVFX2gz2hE
+-> ssh-ed25519 c4NQlA pV9sCS5xsTtt56372D7k+G0vAWRNmgiI6zbd8wFhqhU
+U/6W1jfBS3i0adR39cgRs3cOX9SXq/h7/M+JdVP9syE
+-> ssh-ed25519 ++TqaQ tb36ZafJp27IVtmx21KOXIB40SCmsxOq730Ff7aYyTs
+ZlT2QTXzCrAVyfcJwvdQMR8uejcfodDTHzr/ua0Y+Cs
+-> ssh-ed25519 CSMyhg mnYb1m3nhfibLBK6V66UZiG01NMUZUXrVsbAme/tuFM
+FT5g0MsjBS/9dTs6BJbkpbLIdcouM8rAMab6S+6d2PA
+--- S0n3laCPoxtEmNRe0C8KG6e0ZiI9YG7/J2ax6C8g0aY
+A:���O�᠄��r
}�<I�D�.^����nC��ȣ��7���h)�A�6�V�T��}5��H�(g+=���
\ No newline at end of file
diff --git a/secrets/honcho-selfhost-db-password.age b/secrets/honcho-selfhost-db-password.age
index 87cbb94..e83f53c 100644
--- a/secrets/honcho-selfhost-db-password.age
+++ b/secrets/honcho-selfhost-db-password.age
@@ -1,31 +1,17 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDVrd2NzQSBJV1Fa
-U2gzWjJKOHlsK202dXAzVENFdmZ5ZmJsc01STnRnTWMvdjFyZ21NCjU5Q0hwbVlV
-dVlRTUZDb0JESHBaTzk5ancrTWNpLzYrMFk2QWU0Z0EvUmsKLT4gc3NoLWVkMjU1
-MTkgM0JjcjF3IEdia0tSQTZWcEE3ODE4VjU2M0ZGay9rbXlzbFNqZWxpb1lGSExw
-RW5keGsKWDlwRzcwT1BaTDByT0R6T3hqWTE1UWVyN2xhSzhSMlhBdW5FakNjZ1Ux
-NAotPiBzc2gtZWQyNTUxOSA5ZDRZSVEgcnNJRnA2SVVkMHRXZTErc0VFbmduMDBz
-ZkQzK3dMQ2xadkMyYllhOE1rOAprWmg4T3RiaTF5QXdmRGUxVDVpVnZWdWxRYTJv
-WGVUQUhsT0VjKzl0NnJrCi0+IHNzaC1lZDI1NTE5IDROTEtydyAvc1ZTc0hRd3R4
-V2U4dEpaeEZEZlVyc2ZHSlNiVSt3T1M3bndsVXpPNkhVCmt2WlplcVcza2YxV05T
-bnRIOWpMYWpxck5jSzRtQVZ2L2ZQS3J1VjVTWDgKLT4gc3NoLWVkMjU1MTkgYzRO
-UWxBIHZCKzR5RXN2RmYvc3ZPTGJRRG1peUN6bmNuVFpSd2NPdWJwTTJYdHllRW8K
-TEo4QUI1a3ZzQ3NSQldSN1lTMlVwVGhTcTRPaHpYVHZVdHowYmZqR1czVQotPiBz
-c2gtcnNhIERRbEU3dwpvRzJjS0h3b2p4RXJrSDI1VEszQ1BvckNUS2laV3hGVVlx
-TXd0VkcvQ1hvWElNWnVNa1JoeHhMTDFUUWZnV0YxCjNHajRtZ0lmQzVXZmhyM1Nq
-SWoyVTFFdmowNTdZV0J0WHE5cXdZb2U1OVJOb1hYb1lnSjdqN09Bd2IvOUFlckMK
-d3hBc3pUK1J2Y3VnTjNSR0Q0cVJUVlluNllBazJ2L1dmOXVvZXI0WjVYbjI1RXhr
-Rm1EMzkxcStrYWRJTFNJKwo3YjZ6MEZ3RmtLZytiWGdBWWZEYU9EQWxEZWtzV3dD
-dGhJUUd0ajcvUFlxVGJqTVhlWmhSeHpkMHQyWWs5ZS9DClNEV0gzcWM2YlJTQ1lM
-bE4zTFJKSFU1VjAybFJvY1FQR2tNSFo2NFVDczBTUW9UWjY4aDVNUzlYaVlkdzJm
-dUsKckVaVld4YXpsdGYwWHVrWEtTbDJBU2cwcXlJSGY4ZEhlT2o4QlRBVGxWRHNL
-OXlMTGp5b1ZWbnJYV2pzaFFIcApQVmJzVi9kWnRpeWcyaS9weVN3SncxQjhlanBV
-dW5FU0VtL2lpS0NSTWtoOVI4akxXOUlhWW5xMkp2SUszSU9QCk1rZVdoNkI5TGRB
-L2twWWpPYVlSWUxrRElRcjhHMFczM29lcWlWWlJhbk0vcGFEQmw3UGdXWXJBNXJV
-VURYcFQKCi0+IHNzaC1lZDI1NTE5IENTTXloZyBpOEE3YUFzcytOYndXWWNreThp
-ZEdveGFlbHlPa0FwZ2xBY0lCcmIycTM4CnI0ZE1DM2d1bzZPV3diL2lZQi9SUnB1
-UWFjVVFueTFpMzRINm9Ob0pZMTQKLS0tIFJwZy9uRklOUEl0Z2hDNmx1YWsyNVov
-aHZ5VVhtMnVyYTMwbCtkaFFtR28KZzkT96InPG4YYyVKq0ZOrIBPtCJBbTXUJu+8
-9G03diIRwzYb6cSBRMtKKGl5NEfbJE7B2OnXeHPeCIPiGArKudKxFg9COHGOUP0h
-hUDDL9RGVhd4sMs8zRkxNghRwQzD
------END AGE ENCRYPTED FILE-----
+age-encryption.org/v1
+-> ssh-ed25519 WyOB4g PQFhjQHeeymsGZEc13bLd66087sPelcv37ewU6cRN0Q
+VWfJEoNyNZPt8ihoMfA6mBITf3ptMFn09bLSLykYD9g
+-> ssh-ed25519 5kwcsA vgY71RKCRyyxJW2m0mEA4BwWR7zzcImLeCFwejDv0zw
+0hTGhczM2SQvJ8dwtD1aY3GwDFFI6sz4/h5rysFBPcE
+-> ssh-ed25519 9d4YIQ biZntIHyd3wZIhfQYHubpsdjOzmHp9+3DX4d/8DrXQo
+lD1wij8a/OiBevf2jhcbrtJnVFvTxMzYqI6SsXyRffE
+-> ssh-ed25519 3Bcr1w x2p4/XpPfRSCBNjU+WnZOuxqPSvEqnY+jrUItmS/WX8
+JJZ7hJ+yVy9ATFPHm13ESUHu9FvUkasKmezTu/WbmHw
+-> ssh-ed25519 c4NQlA eFxngNtcNNU4OyOax4aRRcGhvfbFW/E0T7w474VTCiQ
+S3zPMdTmNQTs9CLJL8w6/7ai3S7Ec4Zcqju7zCIjXig
+-> ssh-ed25519 ++TqaQ QbmnKOBSFcYlGlwa2MsBAA8UzFQJEF+SBw0lwdoGEHQ
+2fKEhwjtrnXMBJQr5HKJte0YN93/IhFcwYGAHe4ueLY
+-> ssh-ed25519 CSMyhg aHMev0x3RlLEKNi/1F7+bDhYd3TARf3ELCfX+IdIA3Y
+zV5MbaCCPCptKK4FyuFUuscQmUBoXerzLx3/jg45Mi4
+--- R6IzuH0eeM8VmEHHJPRcZzwjlFVzIwcxn5VTlao+yeg
+��P���]9ӡ�j^i`�-w��0H'Fs����C�O31�@����w�!�	�>b�J=��ם+���WXv\ #8</�o>�Z��3ya���_�W�
\ No newline at end of file
diff --git a/secrets/honcho-selfhost-env.age b/secrets/honcho-selfhost-env.age
index 55998ce..4645d45 100644
--- a/secrets/honcho-selfhost-env.age
+++ b/secrets/honcho-selfhost-env.age
@@ -1,30 +1,17 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDVrd2NzQSBKZllV
-QytCeGYyVmtRMUxudm5iWmF3aWdITlRQVE53RnhFNUFabXkwbkg0CkE5Wk1mbXdm
-TzRuQTdvNklORUdSdHFIZm1zSVdvMWVnWWpRTUxDSzFBMHcKLT4gc3NoLWVkMjU1
-MTkgM0JjcjF3IDlISlRMdC9Sc2hic3JRV1o0WDNsbzByNmdFNnZDdjJSLytEa0xS
-VzRzQ2sKYXJGSjJDa2xuYThLNnhIMFhwTTNUSHJWbnFFYzZSRFQxVlVWK2xjNWgv
-dwotPiBzc2gtZWQyNTUxOSA5ZDRZSVEgaGUweXhJZmhTOGt3VFQ2R04rQjNOckxx
-c3BCMTBWZ0lsQmU3NmlVRkRYWQp6QlMvQkZmemVjekdLVWlDTUlNRG04MTlzaHAz
-cW9xd2JjNlE0eFF4NzNvCi0+IHNzaC1lZDI1NTE5IDROTEtydyBWQ2FGUCtFQ2FZ
-Wk5uSzZyTDNBTHRPUTkvTlRWR0Q1bHdqRjBycmU0VFc0CkdpSUNZZGw1aGJwUVk0
-VnlIR2IxVTJNaFVSNHJQSDR2YWxuN2ZiSERQSUEKLT4gc3NoLWVkMjU1MTkgYzRO
-UWxBIHlDYUlJRGxabTZxSnNpTUNWUDRXWUtHa0h3Z3BYTlZkUEtkall1OUh1VzQK
-ZEQzSW5tM0xFdWd1a3hibXlxa0N2N2RlemUyMkplRW5CNFZHUCtTSEhWdwotPiBz
-c2gtcnNhIERRbEU3dwpoNE9FdlpHYXJFZVRYQnBZNFZPTUhLb3RDdWpNcWxtU2gv
-MVF5Tm1tdHBuK3NLQjBnM2JudFFwQVZnb0VpUUljCjhKQk5HQnVrY05yeU53QWhK
-MG9QUVN5M2NXUEw2eEhQajFmaHZ4cWpFaXcwd3ZrSzNRWFNRREl5bERac1Y2LzYK
-c3BDVXlvQ20xaUt4KzZVRkhiNU5TYkpsbGQraFdvM3RvSkFZRU54SUV4ZWNnVG0y
-VVR6Q2swV2RFeUZwNGZxdQoveVhYN3JXVXBpQzdxa1ZKVXROcXRDQXladml5c2ZD
-ZjFVSVRaUkZiRVlNUHA3bDg2ek9mcXJnVG9YYStza3BFCktzVXlyZHNCZ1BxYTBO
-TUt1T3ZYQmR2VjErdVpPWVBOVDlFZm14Ukp0dkdUamNxODZPNFNTMXNabzNWUzVT
-MHIKUkJocFBhNitCMzFkWUhyV29FU3RMWjkvMWNxbzJFbTBHb2NpbW9Cb1dheHhn
-Y0N6S2FIQ2NROWtqQm5ORWxtYwo1NnF2RVQybnY2Wm5CQlJZOXVTVVNLUGZIbWZh
-V2laZWFQaXhEaGdma3pIWnlSaFpjSlRqNHlRZGNiaWhsWXlYCi9UM0Z2MldUMW01
-ekZja1hLNXptaFVCVFN5UVVlRGh0L2wvekxEckNmNTJOTUdoUE9wRzFaNzhqQnpM
-dThmWDUKCi0+IHNzaC1lZDI1NTE5IENTTXloZyB5ZzV4Q1pIOGpBOEtUcG1rNVZB
-QjFPbEt0OThxNWl3V1VhRTV2RFVrUGhRCmpwSHpUTnhNdlRHMnRvYWk2emJlSlhJ
-aWwweUg5dG1rYmRMMEVDTVdHdnMKLS0tIHp6alVpN1IvQ2E5UEV0Zm1nQk53cWJQ
-WCtTN08wSXlCSktkaDlPRG9Wa0UKyLX9C4xDpcPIVFsimn4OmCWAKZ1IPxeSzgr0
-W6Shg1EWCeMm3dQVJ8O9mji4JW/SJHKwqlJvFTMPhIwcdIo=
------END AGE ENCRYPTED FILE-----
+age-encryption.org/v1
+-> ssh-ed25519 WyOB4g XpORoNWRCbKsJBAUS5TeC4FRoyL71Qtuo/tooCu86xo
+EO+6IcAhhcQNehmN8eBFfjHnipecr9QC6W2IMpey0KA
+-> ssh-ed25519 5kwcsA dLm8uQ9rf0UwDZLFW3Xzrm6XiPSjZGekqkl8uIYH/3U
+JW1zBEhQ8cMAUGY5DuZjgPlGAx/xa+JLgiZFXD/Mukw
+-> ssh-ed25519 9d4YIQ bfemPyKSM2E2/MM/jDo8SlrA07T5AWlkOu/m1N1D6SY
+XHVTZ/qT08FULKayVT3I/Ey62XwnOrQtLIfxfCWgfrs
+-> ssh-ed25519 3Bcr1w a9eppZxhd0S3QKD6DndecGddXbUnMKT//2M2g71OMDw
+Q6sjYSAG6POHBUTMEF9Pj8wkiYV8AYQdjG4Q/HpCVpA
+-> ssh-ed25519 c4NQlA Kn2Jmyc1V5PAP4YsCdqpRI3Aw2jQEEEnzoLWSGxEIXc
+Jsz4ea4eQltZoELfeyC7vDzdG8lLmJxPzZBRkiNmoBs
+-> ssh-ed25519 ++TqaQ VVn0zZ7ZJLA2xHAVug6BphSYUPMhrZ/FB+JvUZzViEk
+58snUe1dHJcUrD1mCXBl6SBu2grnJ6yiuBmXtI6nhCw
+-> ssh-ed25519 CSMyhg yebJxcw1VBxrJkjV7C0hKM+Lg4bsBG9LoeSsdsZVLHs
+rFjrnj1558TjSULRqQIcxLaMpoJmjBfL/qeoDxw9k5o
+--- 7tNtB1EI4ULIpY5ZHnGr4J4hZRynWlqP/WcTkOl/Fe0
+�]�W�9���yD����겖�JӋ��$O�@���
HM}u�d���m��s��B��6[
\ No newline at end of file
diff --git a/secrets/honcho-selfhost-jwt-secret.age b/secrets/honcho-selfhost-jwt-secret.age
index 7299082..fc875c2 100644
Binary files a/secrets/honcho-selfhost-jwt-secret.age and b/secrets/honcho-selfhost-jwt-secret.age differ
diff --git a/secrets/kestra-config.age b/secrets/kestra-config.age
index 72aa501..ccdb9f7 100644
Binary files a/secrets/kestra-config.age and b/secrets/kestra-config.age differ
diff --git a/secrets/kestra-env.age b/secrets/kestra-env.age
index d38dee0..3c7fa87 100644
Binary files a/secrets/kestra-env.age and b/secrets/kestra-env.age differ
diff --git a/secrets/littlelink-m3tam3re.age b/secrets/littlelink-m3tam3re.age
index 10d50aa..7f8983a 100644
Binary files a/secrets/littlelink-m3tam3re.age and b/secrets/littlelink-m3tam3re.age differ
diff --git a/secrets/m3tam3re-secrets.age b/secrets/m3tam3re-secrets.age
index 167e6f0..cc9bfba 100644
Binary files a/secrets/m3tam3re-secrets.age and b/secrets/m3tam3re-secrets.age differ
diff --git a/secrets/minio-root-cred.age b/secrets/minio-root-cred.age
index 85db3ff..efea308 100644
--- a/secrets/minio-root-cred.age
+++ b/secrets/minio-root-cred.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw +/zFX1Q/Bgw6220OgEcI7EgWsI91gngvh8wLMbRG0S4
-uGbKIkhPA1HjW179Q/PFEph0xmvm5CWSB6ddNDW/Mjc
--> ssh-ed25519 5kwcsA hRPrKuvK/7BBT1KdD2dEAF++6fTzzaHIFnyqVwM0J1g
-G6vohGGmMxHqPKlP9W1YItDA+CMXA7TCKvlBndKhjLw
--> ssh-ed25519 9d4YIQ czK4KiVSzplor6qhuBGz3UQQBH5VALPnwHaTLn07uTk
-FxD8pNNNUcHNNhEudMoNSd1VyDyBgTUr52OFJV84OFg
--> ssh-ed25519 3Bcr1w Bj2T816YmBI6EB6E5xt0zrkfV0ZfEf3WkrJIANOcWx4
-oGr6INTE/9gx6DU/nOuhMJcXbYJAWnpmI7+1hatzvhY
--> ssh-ed25519 c4NQlA 53VFWqLxNuz5966Snpw/ALV3+nm6dzJ22oHG7HZenCg
-SBNtTs9hjRGqFdZQSlhB1ZVDfIvo0chQS2tFeMB1mwI
--> ssh-rsa DQlE7w
-lj9ZZGpjvx5QqTxVqci0b9eCOT//bn1esCMggSoB5L7qgmdDDc2uv9lwWm/8XWIb
-R6VKTUtUXRIH3OKd+fTbTsvVN1cOghnODqyEffOa6voZGMnnwkcvU7B0LqGrnIgR
-657gTDs1BPW3Gm8RB9Rk2CQpwcuIXbUvUR9lYXs94HbTuRIVJJFV1nnVVed3P12j
-dR3O8H+7ohOuZhSMoh5Ja1Z5fstWoV1cdKDfmSW3mFK0eZc/qsf+7ROqfKJVt3kv
-f6TClLZf004yf0p+snrqguWlVBRZhSeqVpm9PTfzizxLg+rafXIhbw1G9ankE+nP
-2yi6MT0I8sgVxnUcNmbwMG510DheJ8Su0rfAOEE9Rk34EEADnzwAY3Bsgv8iw0Ws
-E8dkSqX+gETf8Uaf0r8OyNmDLj7/DECq9uCvr80wwC5AA2F5DAyn2wOjGZbm3DdB
-erAe0RuZFVGzroLCIwKVS5jKTuTmNfpmiYuhOeoqGzbBU8ZQBj2W6UommHD+xgwv
-
--> ssh-ed25519 CSMyhg 1wAgIuMsX6VTxrdo1BMcDzInrgWtYEXxGdgOME+5q0Q
-BfX6Wp14JURZ9k3BEgJ6SqkhPNA8kQ89plMJznCDOzA
---- ro5KrLuMtpIM4Gf6sybFLkG6IETPspsa7vCKF0IvXHY
-+��×y��V��MS�X������E��t�eLv?��G��QX
��������
A�τ��,���/��,�r��j�Hpl?c�fj�=�����[�:cs^�
\ No newline at end of file
+-> ssh-ed25519 WyOB4g ljCDQGc4h9hHCCcshwWX0EBMHUkwLuT5anYkDT5KcFA
+iOSs9IXQG9C8E8+955EcVYxylMNXfkNmCK+0VeF4Joc
+-> ssh-ed25519 5kwcsA G3Kin4iq5Bx67kWGxovrxSx1IB/P3zW+EE5/lQr/UnM
+Sm46LiJHtLNBbHEjEk+3VE7+khoB/AMUtY8YabTv4Nk
+-> ssh-ed25519 9d4YIQ trJJTwPdTSh25Gt1JIzn1z5JHZNUxeM1jKtCPRUQsTQ
+ShPXrA9zcHNzGvxf24yltKnE5LfqaSPnCm4smGp4Q7g
+-> ssh-ed25519 3Bcr1w 80a9OItN6RrJj5twFNNIDaC3Cby8UVmMohpGjh8LsG4
+LIMAVI0Mo86MMcoiMBpbSp3zLdDt1omv/k4sYbycHiw
+-> ssh-ed25519 c4NQlA Z3B5IiE8uDB4ATkDDoOrHeGjgQnAxWkAwXE0Rs16qis
+1qAWH7Q1rhVbn+rv544L9rGfpymGq+3cq8n+0KsI9SA
+-> ssh-ed25519 ++TqaQ oi9ZHcziV/F6fN8mVOnXaCJb3ITjHGpBNVUDiFWWfXs
+vrLp6d+CpYuvv7nRx4IZyRh+l6lUEQO4bJJ1DcTiUpA
+-> ssh-ed25519 CSMyhg JwMCpsC8udEhILdfhBiFrBB8H5/yPIWw//T0CUO/NUc
+lGigHdJyba5CiK2Qfq+mW07zTX9qb9JgfmtuWLO8oik
+--- LRkxYqMQFbeZQvFzrmZ0zG6owRxOTGBcZRP8COuIflI
+��g��.�{���c~����YgֈC�怠�]�)���grs�O@�A2(����
,���!���\������6��J+W̤͜���W/4"��ϙ�;3�
\ No newline at end of file
diff --git a/secrets/n8n-env.age b/secrets/n8n-env.age
index ec69ac6..d2b6e4f 100644
Binary files a/secrets/n8n-env.age and b/secrets/n8n-env.age differ
diff --git a/secrets/netbird-auth-secret.age b/secrets/netbird-auth-secret.age
index 8059cab..599fbd8 100644
--- a/secrets/netbird-auth-secret.age
+++ b/secrets/netbird-auth-secret.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw 1YeW9LfXmOOApAit/eBGIIl1qFM5IBJP9poT47IIBB8
-+oqa613hyllTSpHN9yjRXTDwZl9X4fffj6teZIdKx9I
--> ssh-ed25519 5kwcsA +gCzfVL1SAJF/xZ8SN8WLqJbPy3ibAarBkWJ31nSJBM
-LpIa6NsLJtEnFpp9p2br72A/5gcwpx0uISejYg6LzjI
--> ssh-ed25519 9d4YIQ ZabgFxZX1mG3d+wFejcv9DdTT1TS4No7WYqQIQvw8Fk
-Z5cYGTk6Ma4Wb+ZzgRAbsZuIfjT4l98uOOBn5vuXUM0
--> ssh-ed25519 3Bcr1w MxiP5fnT5BWjNAlK6ttgwWY/7FxUjKv9IqFVEh3Ac38
-+uxaqozcx5DS/bEU6s9fWy4wUUgsdiw20mOAR36xYCs
--> ssh-ed25519 c4NQlA B1WL0A7M8xrbsBN5UXamNXN1RQ/0U8ISqiR+rolVoGM
-5mJNAYf5AHIwVOeH8TPniFd4na3p5GmgjsZA+15CCTg
--> ssh-rsa DQlE7w
-gn4MxqdrSk/dqhe+GBlSXyV4DdottL+CQo5H8oYWL98iJD7eDQuKxb1ewWRf6WqE
-ommyFB8hBXW2kuUtEscNllL5RGaHNWrP3CBfto/vxhaDPdTefhTS+ynmkppXv38R
-4FYrF3hswVZs2eepTWaR6MPSRyLsEsse0W0kcj4HiOnLZ/UDfe0VAzEB6C1DOvpt
-XadU2YAR6tiNzmwkegBTDVByyQOf5VH7YFejeI4Rf2Q8qnTLfYDsEyThhHq9oxwV
-AZkaVHGEazIUkDFG803qFZyNhLeJyh4rLEFrJbuRO4WIHUhq96oMJ9IJkX0qbZdh
-g9PYEX1G9YUdZpWk5lno8aPLLdDR/stBtOyw0EAv19yg5vuqYKJnk75bZ6Dba8Of
-8+e/KHVid39n2P73JQlC4dVNWVcAcecVKyxim1kwxFB3MVTvjWWfhVYIdMUr2OpN
-D7dykCmoVsRc9OJrzEjQ4RqY045YHjbKGw6GAnRM5ZGSk5vTFE6eBkhy9T2LFFZ0
-
--> ssh-ed25519 CSMyhg V6U7l5m3lgV9f2HhMaiP9jO/5E3iH2yXYzCS8Jnj/V0
-sjvk1WhfKNtpoOAOGAqAzQCcxxMP3rAJN2gp2IG0GjE
---- kKNuLSezCfpaCAQNTwnE6uArT0INDfeq5/C+1CE3Gh8
-�̨\����f2?n�}N<N�F��B~�J��=����#�9�"p�(��*��K��n���e��>�?8���+ �pS�
\ No newline at end of file
+-> ssh-ed25519 WyOB4g NnoyvqOz1aSKCLa6e+meCG8vYk4AgnK2yFmR6VFIURQ
+v8MuGuZLZPoKCSiQu+NReQx3WXAf0rwAyxGCy07yqys
+-> ssh-ed25519 5kwcsA 0FUhtgonWT+I+aM65nArDRtRLsG8EOWKz5tAeNmXAmo
+QWQxrAojs1o5lMeSxf2hduM9IKJGIFAnxl2x6aHyL4M
+-> ssh-ed25519 9d4YIQ HZM/NW9ZmaQbvzIXyd4GzXYWPyLJma9UmyBLz8GJ4TE
+fCWdHiOtRB8JfP/sKm6Lw+BHQV5DQrfh/anluUu4Ius
+-> ssh-ed25519 3Bcr1w 2MceCqTHEPA7ZzTlEDQsHkTvDCBl5J84ZwpEMT26wG0
+Msk3G/wHvDkS/lxnPpgNvxxCKfakNnEORvTT8oyQErQ
+-> ssh-ed25519 c4NQlA FAleJbDgTdLim62jYz/jVEwAQg6Tc3eHaZTGoTumCiU
+7Ia2goemrkRfCavUpjlwn7v+C7ixtQrrvGz6AiptiVU
+-> ssh-ed25519 ++TqaQ kHh034/ivTVbxlSXhcH3xsjbrISkpO7jn/cZcJFt0Bs
+AddJ0nSWKRoa89UPHT0aXPBU9KKdt2u0285wTASsyrY
+-> ssh-ed25519 CSMyhg /XwFvkVMST7FhpE2iiqZ0A39wXdWdRX5/i6PjI3BuQk
+OzFYtdrU/Edp/wNJA/1Uoj6sn/GvwnsX1ywnmIOCaMg
+--- jAXyWeAqVJLlV6F8qv2TjiglIsuImfwYn8eimbVoxlo
+�Aݟ^��GƬJ(���3��@�8Y`�1���Ev�[mR��zY@���#�3�2JEm]�wfp�qV�7i�F�D��Z�\
\ No newline at end of file
diff --git a/secrets/netbird-dashboard-env.age b/secrets/netbird-dashboard-env.age
index e38c80d..9189de2 100644
Binary files a/secrets/netbird-dashboard-env.age and b/secrets/netbird-dashboard-env.age differ
diff --git a/secrets/netbird-db-password.age b/secrets/netbird-db-password.age
index 5f4fca9..2f3c171 100644
--- a/secrets/netbird-db-password.age
+++ b/secrets/netbird-db-password.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw +LvrzIjrqMdJqhqt0EXB2nIhXoQ6k19icPKg2JfcMzQ
-q9/tvlJ4qzJMFQb3W8NFQ1vUhCEQJZyr4zZyqPSHk/c
--> ssh-ed25519 5kwcsA qomVI1vW/9dIxUCs0ZI9yzOdpuVsH3qoH/aLUKWOCH4
-0KeaxSICJBSLYBP5wl5PxBEXBCyKsldabmUrT8Rmrks
--> ssh-ed25519 9d4YIQ taF4thF2VLbSw24kmAICp7LNDNZMsnjRkK4hz1remT4
-wNESxs8Cc4Bnu/+24V5RdA3Q7Uw8VAHS/Cr+8UNSHL0
--> ssh-ed25519 3Bcr1w YrGrQLH9TrqAfKzrxfEMOIC3dHbR5cliHHG+jgpkgiM
-hoXOnFmFcX5m4Qqk1+LDP+zZQl6+NwPlU8dTXStBy2c
--> ssh-ed25519 c4NQlA pZNL9SPPc5gYRotMzYOaqm6WdEyujRTrI/k3qOgk7lg
-v0op6BPTpog4AHuBb5sSCB6BQbp8QFSZdJDn4ppSdC4
--> ssh-rsa DQlE7w
-Co9vmAJuKJstMQ2+rZJsyHHKplTPlWCBPA2YsOdpiVfMEkjuhF9WdtRFHQ72JZZe
-ktZhCv3MUsXOew0ktObskrgYsa31Ejbhy4JD5PcqIKRUr9SxuKZrBDK04B3xYj9Q
-FB/ziQb48sSDdnAp7kZ6KtFyG9eOTG7LhYc9rHK+DBUiDRvp493ypRMXDd1ZFhYj
-hirIQMIwiQmKMo5U/q5vYrRiTb4YmJsZpH8U4sl/xldtz5FCmiUsq9sIj7hvIaD1
-AmyCwCYYJemi5bQIfGiKnEZ4IYLt9h57CMDL/vXr3SzmoyKvUwgned7w5OFXFuaA
-B10CU2vN1htYtVz+g2c4Jx5ASVT2UMfDDdBCALfW6R+wXIYSbdzO1vTKcGFBio37
-DlnfctNpqUgduICZIIGi37zjPhM0tV+LpfcRV12a7UnHQFhW7roLtra+gfmGwrcO
-ivYCkdD4NvNEjCKRCst66Qb6/gYgGVEo34mTjh/3g2agxHuzeJOVwCRXWxqebtWI
-
--> ssh-ed25519 CSMyhg ZU1CbyripaWZEZI1U/qZP/EfsDb1JKSrT5suTQKecG0
-pyC1p2nnaF5A7KnFBjJuxoyzKEAuC4wHFAr2wmX97HI
---- 3KxuO0ZSOS3goo+OoO1R+pXgfeuhetca9PTapAjkZOY
-��+�iQ{��@v�� �I�y�Lͤ�j�0�93�G��a`K����WCn
\ No newline at end of file
+-> ssh-ed25519 WyOB4g gP2rRYMsnNFAgksIuYcBeEvMLT8MCB0XF3FYl8I2f0s
+4MPgXZ3VngItftYmhrlZ6fgR6jbtouVLo9dSlP48p9U
+-> ssh-ed25519 5kwcsA +WJSr4faVINieGeP2v/Savo78NrIfU18crziQ3jHP3Y
+3XyuJ0+fB4nQ5jMp38hQCBFUg/vFlWyBcFcvG7dHZe8
+-> ssh-ed25519 9d4YIQ dB8aqBpClhWLD9mSP9bjCnK5xmO83R6ZMm6msrT+jyg
+/WsTTeJBLldW9oRuziVnz7DbPGFM7JlTgYQ2vl7402A
+-> ssh-ed25519 3Bcr1w wFCUQ3gMqHntpujPfD4q3a1zX7quALvmOsowsYnQpRA
+CbRQFe+whUwvjs8aC4XHJ7aosfN3ked6R2c9hFfGcEI
+-> ssh-ed25519 c4NQlA JYbqbza55Wjyf3Jsgxn8vkGyLjp0IT5UANt8c8MhtWY
+8m2FIuJ/7T2pBLA5WwS8n2BbdT55G0elQG/RituiHVw
+-> ssh-ed25519 ++TqaQ c0OGB33Si/Htv4MMQmC/LgeLxRf5UjuzPLuhrDn4WiM
+QVwajFZZ2faynhUUZ21g/0bP1lBCy9q999JrFyNy5Xw
+-> ssh-ed25519 CSMyhg PsEMEe1c3iZuSDya5DJowxK5eS0SrviIUAd1ueydMFQ
+XsDN4YC+RaCjmq/t3mCHVQrXMnIbW/DkmnpYYPgCMho
+--- EreT7qwTgYYLF1gan8mirsQLe3RQpF8iWT33SXzTOeE
+١��uy��můE�}2`z)f�n����q,�2Uk�72e��O�26���
\ No newline at end of file
diff --git a/secrets/netbird-encryption-key.age b/secrets/netbird-encryption-key.age
index 9cfeb80..9417686 100644
--- a/secrets/netbird-encryption-key.age
+++ b/secrets/netbird-encryption-key.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw FWpC9T6vAIctX6K7NR4lUJux+hnW0RiIYBGhHfr80SU
-lpuAN98zrnj2XSrN68GKMKa1fRqInN9qoTAby4daos4
--> ssh-ed25519 5kwcsA 5iDc5J0ZLtPofhWqxA35mUJ/eAtyjL+zS5IUl86572U
-z13sCitLAndU/23P2OcAu2iS/6FHF3SyRViHTHz8EBE
--> ssh-ed25519 9d4YIQ eEaMwGGQvQ2gwsJQEAOunyxpadkazt3218MGk4enakU
-i6Vtw8ODaBgkc/biFM/5OPb5tqfc9O1pEj8gQ81zyik
--> ssh-ed25519 3Bcr1w U5qcbz2AJA4snHpFbVcHumlzTzgan59UD0uroVzvPx0
-0rS0C+521gEMpRys5t8ecqFMkhZ1a0PKb+BxQsNCtqo
--> ssh-ed25519 c4NQlA 8eKxwuYZYphL6NZemr1WfQjgEWKX7UMQYPoFudgWGV8
-/x88KY3wxLrnQmMORRllRYUh65KPyZT9RELiRu6LKxM
--> ssh-rsa DQlE7w
-DLrdKj7KY7jUBcsYlBksTdKY1l+YHMmTmyiWeiANwgM4co1rrjZirtnntJPIVPn+
-Fc5tNJ0S6y+RvN+B69F4BgTljzoRLuIW0YYctk3NaNUuX9QOzF9jhbXoAW1iN4bj
-f4PK6Cw+Bn2ZJ76Feh+4xIQJxSAK0dIVaiJeHZy0/eI2GZdmRFY6f7iytdlacX4D
-cJZkFdB8bPRDJuagTZMifWERhYZExdF1Q5XDYRpxycehSM9s1fvW2xCBPJMCjlCf
-dCbqSAnCn+tDUfgV+M9FDRQwz72RLov92DcOWoIcP4D2Wm0cOMnk0Pbb9yB13E6e
-batyaLvuVPXKLle58bh09b2OR9zgy6RKsvTn3PNpogV8T50jEitVd7lDT+OvPcW4
-Dueb7q63IUKe/iuKmmW3w/S5Fi0JLUGVU+Ip8teIrNhJ19tPCkbRvbDWA5Mq2QAT
-ItYsEWTBf34JNrjEcmqOmnz70XgaelouClC0KXpLszSbOfEjxClBxOLfPYVioc8k
-
--> ssh-ed25519 CSMyhg V0o0nL95KeGPxAwZF6RvJ19ZoDCaQcJusm6MXHeJJgs
-YFOaM5jwE9bUWx7al6JheB6BBT5asF5Tm1QjjVxueO8
---- WCfgjJe6TKNKPtcU9BEWLZjF/z6Ccd+J86uiRwIHqbM
-����p�*����$�Z����V�oEb�"�w���6~,SR�\��
�:7�D�����<�n����oL�taBp����12��
\ No newline at end of file
+-> ssh-ed25519 WyOB4g QghhMC1z3pSAP8vYVvafwhCv2nfiN1YS/Q+IP9FtnWo
+JbDyF5P7g7UIUIhL62y2DB9oQcWpuXNxr8x5h+aRbts
+-> ssh-ed25519 5kwcsA arPTSjFhEgZKN2/POEvleAGYntcz4akDlhxZiPP66G4
+q2W2urqZir/aEnrEkGxVaVwfBMOdyERKsNxkI9k2N2w
+-> ssh-ed25519 9d4YIQ 05hqWNllggLu5aqHwR15Xe9LYoppEyA1GN+/2LINgAI
+KN+E1yvJEnQWg5HtiBPO/eOB1AGnUdpL97W3PO52XQk
+-> ssh-ed25519 3Bcr1w CPs9tLsmIW30onKmJP4kslK2YP8GT13/YRLwHKz/mAI
+XlumXiAnW34rkXYfiern7ZvQjckor1Z7tbg5sNWryd0
+-> ssh-ed25519 c4NQlA 0FDNEjaGV4O55CYn+ajvt/vSsquzeT0XGsFvgU7qdjE
+d55BnlXMunb2bnvJOLLi/v71vuBmthpHj+DYSYiwNiY
+-> ssh-ed25519 ++TqaQ l+6k9qrH0ZtJYA5br4nTknpheYPqw4B0hjyWQZ9itCY
+z+KJDXvebRzaZNeWHiRad40RUkpRY608Z7rKQCgr9tU
+-> ssh-ed25519 CSMyhg Wg/VxX/6/Ed3rnWoHIVexAScpIdPMoeheamdzo5Cc2M
+Sjg0lNY5853hbO3WEvs+o59a8xCNzp5avVFS8vYQEeI
+--- 64bKdonXtquzkjrQOZIYrm11QXObp0bBlR7JFe2Ji0o
+�u,0A��[�� z:���A�*C�������,X�G4U^�����Dž�S�ܹ�fE�쳹|v��
6� ���W7c+�
\ No newline at end of file
diff --git a/secrets/netbird-proxy-env.age b/secrets/netbird-proxy-env.age
index 6aadc3d..c52178f 100644
--- a/secrets/netbird-proxy-env.age
+++ b/secrets/netbird-proxy-env.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw 8/2l4YLhR20UzhNC5C1ALRi+ERnJmzfbDKOgiayqJh0
-+AA7Ol+Ni3Dw0ba9czlqqcQQRG6GZCKYRuTEsaDttqs
--> ssh-ed25519 5kwcsA 91P0Y0VwfQHOtkS+aoMiysves73MVHTYmjSBU7H7bk8
-rFX5VbH5G1Y4q8Q1AtSj8m03Q45pIehMsZA171N3oX8
--> ssh-ed25519 9d4YIQ 4mQa4BvWBnp19042Ajz9KBDkwHeT0qgOKzxrfPEASwg
-T5ipjK3xHMFsDY600XeLzMuFgb45Uae3keSC5fQt2Wk
--> ssh-ed25519 3Bcr1w TxEF84qjfrzLscryLyRIB0wplcqTU68sHZNzSQfUBBQ
-6uYAHPvUFSFDRs1ZPW5YpF73LV3Ubyc895weNME59vk
--> ssh-ed25519 c4NQlA mjiiGsAJINaPkgZTvbo08SplW8HnHBOBlItypKvsShU
-mebaeE5sfaaslPtCaqwDh3O0atlXHIirvVHk70d5NlU
--> ssh-rsa DQlE7w
-qex5N8/fRlkGdX08bMiYVxXV6bwSuHyeoVKp33lxjDJHriSgpJGOrRIPaztRIoW4
-gyukJZoqlHIBSoLzXcmrXydaHUSPcDPLqw4csZZPfGJq3RjuDQKQMyiHe7xS9+Lh
-7RSpV5kpu81FwdV5szFF4cjV6klv3aP2sMut7WQyzxvJiHjO5gdoJnD4TBcdAa78
-twWn8Bb6od8I9xMoqNOnq7w6nlC+AWmspWv5Iz1gV9KUMnbwFcu73axNfYHAFgU2
-R6CvL3LwYD5xkvS7JknYKcagDIuzOc1TvwYmEiQR476smP/vbwkn5Jnb5oILLcR7
-6QNd8NAg4Hn8Efcl/Uavm9i6ywn7RNzIS+PHV8iHha6sx8BsxiiYdMsS/KG9qogz
-eLp3/t47dFMvp5etdgHojGf/nH6no9EWjuX+oNeZsTExyW+HMMh7ItDxzupg3g1r
-2HZYwGvX44+IoSICROAxHuYmr8oUKhiAWTAGGUCcdPPAX6pIaXB6WpaY5fFyPXJt
-
--> ssh-ed25519 CSMyhg e3b1Lr23YzRvHksn930vZYMl1z8xRzlQLiltH8ASmGg
-URFCzy/EhYs3l/hYJgZ/ufotlfX2x0/E44Nhu/9SbXI
---- Ni5yTPCt/3piVUbdKPeYZTGyoY6J1o8HwtSYam2FgRM
-��t���-Yt�`Rqst6���p�ᶃ�zC�r!�=co��k�w9�"�T�7"�"
Y^���'�,�+N��Xk@�BC����e�
\ No newline at end of file
+-> ssh-ed25519 WyOB4g MpjRbeds5q0uRthy9DWseQfvwVZXeHkIEQk/BvgqTBo
+XB+qMM6dErcpLE1G0MFlsgvvHlSQU+PwkxM0rlM9iX4
+-> ssh-ed25519 5kwcsA I5DqOw/8secbtxpm0A4YPa/9kJzfDkA4cPUPBpdlOiM
+9V3SnCPYLONzO77mfwaBkPmTtmgNhSwA8XGgqZDAFfw
+-> ssh-ed25519 9d4YIQ wRHFpBUN0E1Oz6qRVr7ydv9et+xpXAsnDfUCGCTHxU8
+cpDNKgQDilUMr7Ru+22XTAJuJ8QTX2cjvSW0pNF/wxw
+-> ssh-ed25519 3Bcr1w snlBREU2AM85xkM8wwl3vIY/UjCZrey1Ws/sOQYfLGQ
+s5tdY09lCICgySD/jNlP3A072kx+YWZMREVxfR6Vo70
+-> ssh-ed25519 c4NQlA M6texP/eQb4Q346cCI+J0AqmlWw3mVlRd0QhSbUzsTQ
+ue2DUqBShnlMHSDcLPhVWoTQHv9T5O/TJa+jN8IqGOM
+-> ssh-ed25519 ++TqaQ +X0FlafOJwP9QAu29l8p+blLaQiZNOl8t6tBv48vdT8
+2EYKZSCA+3sO7HaiaRCWd7YzWmBy7qvku3y52LeEUwI
+-> ssh-ed25519 CSMyhg zJ/XnwOLBJuZosafj29J9OMI1nV2fpXmkT5bgEAtsGA
+4ZeWdGbiiVK7cxyGU7d8QBjncrmacQeyEMgfrIzZ12M
+--- 8vjxije+hZQfjzhhBDkj5GZDKReXUpKn4Gr6GrPDBPw
+�B@�==[��A+��Z�xJ��޻�)�'	L
�Zo�0|f���I\��=�ٓ�La~Ϥ�D趫9����mX�\9C�����03��B�

\ No newline at end of file
diff --git a/secrets/netbird-server-env.age b/secrets/netbird-server-env.age
index d27d221..bb0a815 100644
--- a/secrets/netbird-server-env.age
+++ b/secrets/netbird-server-env.age
@@ -1,26 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw p2ZuCHmfgR8iAF83JYqmwew1KUgW57xiz7WPTRC32l0
-Cy1600fvFxYHq8JkAi4N+/i8xwBqdRc4FfGEX5KNnPc
--> ssh-ed25519 5kwcsA +FsTe6rqd1V1Ml5DXer/RWQCA+213bNrG6uhYFv+zFY
-3fnw5cBKZOSw+mCfFcXw9VDjz4iR13sB2+CTvPtTOA8
--> ssh-ed25519 9d4YIQ rsT4Tv0IAOGmMrXJT/K8fzfhdwIV37zDemrKQHYLQzw
-y5nWezhU56iMGJlbLx3T6hqcfELeLiRSaERLJ54cIQQ
--> ssh-ed25519 3Bcr1w FN5u1gjtjLZsVZPYP1HnJq2LS3lJ9cP2yz6y9H8qB34
-mziulAWawSGJoBCJWt6Ctp9U41G0SAaHT9b2RYTmyhU
--> ssh-ed25519 c4NQlA gY9Cax1u3TdZSuhwuwn/oROm6h2/4hdj8O4HiiPkDGY
-eYP+yEzRtlTIprS5NfKr4pHjOjk8RDOlpCuGqflO3/M
--> ssh-rsa DQlE7w
-bx+TsU3GEALbh0hD+334S1wggvGA6zcUb3R1f5MzF8OcNwFFWMGonStJBPXLodEa
-cvfgSSVEJHHq8P3pmQoxgB5qv1fpgNRqWO/G+N5EmPFdnts2XfDfFuvtrTmCwLNC
-5VRmLiCdVH31wIe71Qkomw37AjE2vgyu1MYe9fHECiRNhoyr9WEhSis/O2akdGVc
-IOL/mOPEwucoqVIJJG0qZHa7QXQJnMhC0XEwZJIGYbMRs5dLrgLtFq4TybRRyXa8
-x2ELgT5SU0sdwki/raiCLyi5CD4tTOHImwSYEhfU/6rgJjzA4vI2qCwBgjEi6vK9
-y3LJgwV7d9ngXuWyKI/hsw7Mgn4eDL9FzvZ7ifFzJ/gWfaVE1xkSgv09eTvFY5cJ
-naYgeHwPitVQU1FmYWi3KcOwpUTa6xis6Jo9iJbT+511hw0B78p1x6WRA6077b6F
-ewjay+HWoswL9tMwokYN6XUnDu3DGqvHT5pSmmNEJmMMrOIVPIIM6D+wVFbzeUFH
-
--> ssh-ed25519 CSMyhg juce3JYlAZOusDXo2AIeQUtIzkDw9VtWp9PiiRone2o
-W2awt7uAMPrtNNocRuukrbKzpn5iUFXhkt06ngmMyhg
---- HgpiyiLgi81TJGFpYJnGHFEFvXsrUakUwBvc56hqevc
-���]G�a�:v3S����/�0�/���^�㬃cds�����{�-Y�����O�A�
�����I���t5�bs/����hrj�����yE��mpT#]�1�S�@�
-�Vf�G�miw
�m�қ|�沵�f�Д�
\ No newline at end of file
+-> ssh-ed25519 WyOB4g paYz+itgMDDQKlHS4wfZzN78RtsaH4qowEt7KHggOFg
+DpSekGJpOKUWlOwZ/Sn5I+apOJdEJGlwAPuOjZnPU5Y
+-> ssh-ed25519 5kwcsA oElzpBP+4jWqhmB8P/yc2aQQILdwuZ163bMbB6wTp1c
+MKOznEs5OU5zB6wus6AYwrSUjN99NqbP2bImIkfZ03s
+-> ssh-ed25519 9d4YIQ 5lYmmCIsHPEsV48uoXu4HPj1JSWp7aCMUlfYCqbxPHI
+r/1bmUMZRCg4hmM9DnP/x+RaOL4iRS7VXz5JdKmtOHM
+-> ssh-ed25519 3Bcr1w L6UtFDF5y1MNkC37Z5jGEnDFfEoqWs5pAVqShY0dzVw
+dRioPbUjZhIxafJoGwXvkSNInuEXLKwvcAPOSyzBHjk
+-> ssh-ed25519 c4NQlA qC4VmGqP3TC/x3W/jaYK8Jhdf2BW9oYlpHdZpGyUAEQ
+GSgfw7qBBKHFTL40V4/t0VT4Kc7Jzr1Z7fIv/qmclrw
+-> ssh-ed25519 ++TqaQ T/Sz7uHRj4gkxsSKNwrYuRIVkklGH5iCPfQlVxCh3n8
++EdxFCPboc6drxHsvdFK51oTz3uafGgv2lnaG/poPj8
+-> ssh-ed25519 CSMyhg JDFjwNOM9LdlZO7EBoTOMTMI+a7kS8L7i9n2X1UqRmc
+LHsCXWiQyTjPCxQTSsKA8ierxPApGEWr1sK567+EIBI
+--- x+gz528sBIH8ChPbbCutRQ0JgtSGL1BVje9crfAsfS8
+�J�	,jz��M�M��$YCݑ����]�T$��
�؎�k�I�5�-$Ōt���h�DX������1��!zy�(���"g(؁�q�Ig$��ؤZ��xz��	]�~M����.�Q�l�@=GUD���v���
\ No newline at end of file
diff --git a/secrets/outline-key.age b/secrets/outline-key.age
index a01d2b6..a104122 100644
Binary files a/secrets/outline-key.age and b/secrets/outline-key.age differ
diff --git a/secrets/paperless-key.age b/secrets/paperless-key.age
index f752fa1..38c955f 100644
--- a/secrets/paperless-key.age
+++ b/secrets/paperless-key.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw 00116Ozm0CeNhV+xXkojclJ5B8ulP/M1CV6u6thTFGg
-Pacikayyy9dyJqJFm/6fd37Oz2j2GEDnYEVJ3NQ/lbY
--> ssh-ed25519 5kwcsA Qvk4nvZ40VIrhLE+uZgTPLO82eRCNdHRilZ82X/H9jE
-rjJVe6jyl9/zBBzQmlDguD8Lgy8P1/7PlMz8W3MSzXQ
--> ssh-ed25519 9d4YIQ kBSkme3/hpSAFVhc+zzBcSEiRkVlHFN4rx4PRsuCvmw
-qlKxGNd8dbMjAnOuGueug1fJdPnRrBN7vjaEBEqF5tI
--> ssh-ed25519 3Bcr1w 7LNSHsaXOkRtWVeP6vaZAVTPwwXEOHjhO/lsh1BqVRQ
-GgCGG9HbgvvJMtYL2/vfbc+mYb+1hPvSU6fb+I/okak
--> ssh-ed25519 c4NQlA dcXm7OXRmSxqvC91dT89Usn2aM8sR+uK18HVPH/E72c
-/YW75+3nTlbPzEy43DOT6FOQceTzJVnPygG0NUvXvjQ
--> ssh-rsa DQlE7w
-KhfZIR/ucdUx2I9Z7/Tqk0KMQar3OWxoZEz3pnZgi9hC24VBxhyS0j1JXKhMrl2W
-oZF9uVb9JOc3duAXTbJ0g416QGQYG56eo7FzA3m7/ALOmTJzbXJOp3DuhmQ5tIxl
-8jSFtrZVuMDMcWNObBZdfipfRgE+Cn0P9dONsXF2GxxGn8/DXVjDKUxNI4DKl2uZ
-E4K2/5nf3HhNOhjMWX0+VhbOTs3qtcs5tWycKzipODLl2j9svpW3okWWqy8aWR+u
-KNVX99//Eq5FleHJQk52BOOQBIzrkmiLluHlDFLsXiQGWnh7PpwmC0ip3VOeFaSz
-vMX5t6b4rE+28SeeG3iJ5fNz7XKRNJvZsDyGN5HhEcZJp3m42illxLF/7EXQxtLM
-mvPBsJa33xusTPkM9D9pBbAHzJIyR6ZLMI0wdV9KeWXH/yzNtTndYMekJw4k55yw
-kiflVaRDv9jt4XkyApLo93GmwTc0nly7Eju5A5JI5GrfZm1WwbcQlCcb+v3AuRLW
-
--> ssh-ed25519 CSMyhg 3dnbUyluSARc0W2xBTz9T0XDMNkv3U+q+r7MG4oyNSg
-v3cECLlOG62zczYw1ym2SHBUtSP3Aw9KcENWD1kh2M0
---- 1IOJhGjkrbvb3bB9Z4PKu9xmSa3FDChQ/0FuO7Zrepw
-}��Y�a���5|�Ɨ�)�Ұ2.�);I;}|F'|#� o���֬���NY�+�����CS0�њi���sx�%���
\ No newline at end of file
+-> ssh-ed25519 WyOB4g /TtTfjVbxknyTe4mL4+RPpFoDjh2hYI5RvjHedV+NmU
+ct7/LFi56ileUQ1kOpUrLjOQl7XSCDFx0KnATG6qGPU
+-> ssh-ed25519 5kwcsA vyj+IQdPpdbpRLK/3ImD3qDRyjcJ+5c1+OaksgahiAQ
+fuGq/KG2tt7Bwrboa4WxT6YJvszElDZnGlLkE+AYV40
+-> ssh-ed25519 9d4YIQ uH9k1p2iSRVyI8RTw7kvs0tPwvp0xCt75RDW2y3JN3c
+WcM3MkcuYoud5Gz5YxM0zdF2VAJrNszDRi4wKSjOQZQ
+-> ssh-ed25519 3Bcr1w A9elhJ+ljCHah3ekVgYA/tQuUtyLrB6NkEYyJ1G7TH8
+8Gl/N9msqylMEWq21AyccqMtNH9k9OpPi3W6SJKT2IY
+-> ssh-ed25519 c4NQlA OX0h2QjKyNsNvw6X7k63T28y1BaH/g4hGtly3i1eW38
+CbPT+mGWcS0FLz5WaHDCE/7+Ep+WzC1ourCBRGD8fFs
+-> ssh-ed25519 ++TqaQ 7eyn8ACphPZYOkkNz1rTs3s9/yvDpnJR5HqjWhnXISM
+c0BOsIk2hPrp0S5yJj3AJZn9aFBlYeVPuVSAGz5SM9Q
+-> ssh-ed25519 CSMyhg duWS4ZnQckLwRaLbmiaCprpqKrAYYacdPp+vpf3VF3s
+EpDEvhbokTd+8vIZRLefsQYdssXlqZivDNosNO+4dx8
+--- 8pOU8Ur9VJrDyrbseLz3ZA9z1tlpAe7gS1rGrjwdka8
+�/�im)B.����y?j�����N͉��Oj٠��
q�:�*6Ӯ~�^1#�A��&�sQ�MJ�?
����'Xj�������
\ No newline at end of file
diff --git a/secrets/ref-key.age b/secrets/ref-key.age
index b6db882..7eb515a 100644
--- a/secrets/ref-key.age
+++ b/secrets/ref-key.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw ONN3gzuDgI2PMfsfIb++dqxp8wPw3ThcbsdbTDkxai0
-Zac4oZfgwLukIycGiuedjLFbJ4Me08BsjurBWjuqHWs
--> ssh-ed25519 5kwcsA YdxxIewjWoWo2JZT6ywQWP/exKrGMfqJN6ktJYn8ayY
-PX60BaNwuasTnvStUsu/KOqrnI3nWyCscH24fMCcWCw
--> ssh-ed25519 9d4YIQ iraKK1wYdMGyPbD3s33QzCqueVkoaGc5PK8KcCl1bSI
-pIhd5Rb61KQpP7/QaVzT01HVL/WKMS/rGpFneyqPOF8
--> ssh-ed25519 3Bcr1w QTRRX4Bty5KQiOoy2BWpzE1/1YrDAeC9RCENrc7/eXQ
-UfE3zT64FwxbbFeygEmN/cb24H82hQjv2LPnNFig7oA
--> ssh-ed25519 c4NQlA ppG/ZxQLVA4cEPxDcZw5o1SB42ORHLdlIo29O7adWFE
-HcqGBMnB3aNMoIK64Wv8eMqOOP7wic3qgRRH8m7H8do
--> ssh-rsa DQlE7w
-ZQbgQQR98VppYA/B+yYjboDeufJQwpA8t7o1dq3oBfMQgexYciRD73rasSqcZlIR
-XbELtn0XVxJIOF6qfUFrPPza3ewsr+5n+rxw/9PoWloLlUqBxWSwuUOtwKx7Epuy
-3uJ+1238+e/KR9vLFcSAPUucCqfgQ1okXdHbJwI0qPDX7MJ0Kxk+dJIoyI9fwcfy
-PbgxqinWnAewM0Brcy4I3n/tBnVW8YGQ4hWqLhqI2tNwFEdZnyuMJQ6stfJEz3dq
-4FxOe4S6NZ0UUsVrenxi2+5O3FxQ4vl7yDxAxdGs0aPHiyPvqUZuvu10WrdhtMft
-iXhR8+XZS9FAF67DLOXDxF+mMMIdN/SszY/fZ6R7fa+sXbLpfGEtAtPL0/t6jrwP
-W5gMzDQD9/e3+wrYnVYvilvmUgYanC6bB2ne5L8TjnSokizb9r5sDzph0ztQVbn2
-5A6TmEqqtPFL5qG/CSrfoTHCFZ6CyhXU/NZ7ZWMCJXEb2ab4aaqJkPWfcVweiHQt
-
--> ssh-ed25519 CSMyhg 0CeHfAwRth+O5PnBaR8VyhWxEXP8wT6ki0spZTXhBwo
-d78TJ+iK054rPfRO6pp7t2kf1dATi/4bYFDLE3Pcaww
---- 9g35GK8Mvzx2dm3qr+L2aU31KEYHbAQrherGZzX16Ro
-#U��f3.�G0�
"gw$�N�ʧ�\<�?J�~0�g@]3vں�������
\ No newline at end of file
+-> ssh-ed25519 WyOB4g o3fGqMXmFCUZc9sovrIP54jUGeZ/22YuyFp03RUJqgU
+xeRAkIVWDjptuSmJTLYFJaXfEyUWmU+GojprGGzHVas
+-> ssh-ed25519 5kwcsA K61fOEcKdu2z11bCV1ei16gh+Tdd7o4sygiPA4fMvVw
+xCmkZbcIougORgZ5SrVY0LyRJBLLH8W634xcmYJbhEk
+-> ssh-ed25519 9d4YIQ ojKpx26VRPfzZwi3Z5XqRMb9PhGok2I5HmRKWxLd+wQ
+NiETzbpoCzFzwz5bczm0mV924YHRhHTZQ4nA5UIhZ9g
+-> ssh-ed25519 3Bcr1w qVo0BVQSJcb9QBiOrZ8yqxk6nDijapUkwP33MQMEPFc
+D6C8siF92VmOCoioWiZbY05A4wy6BrAuGB5mqI6yERo
+-> ssh-ed25519 c4NQlA YEwq6ULLIFbmpicbD3OUQy+7b6C0Rsmhf/1P/CJQTwY
+Nznm6HL7mSGTllcdY265/rDAzSzXkQITWqlRIL1qytE
+-> ssh-ed25519 ++TqaQ qe7CEy8BcKfd2Mb0JyMk93YTZXqdxhpCR68tYTr/ukM
+VFxO8jM6+UNSZAVidpizQ/Ni7Vyyu5ffyhdHae+PIJA
+-> ssh-ed25519 CSMyhg Zis9qFXNRqi23QRmYNyxSgYbFoRdtKm62yWjHWAh1io
+u/IqQsvUtUVYOR3OtmiGdYd1bzreTa7Hii0iOaL0w/U
+--- MPhR+LMo453VFvi96q97cjaJklD18b2hmSax9wBUvFo
+�(�J�x�E�AÍ���$�Ʀa�Yf��e�`;�E����0H�E��<M,��N�7
\ No newline at end of file
diff --git a/secrets/restreamer-env.age b/secrets/restreamer-env.age
index a3e6349..640b362 100644
--- a/secrets/restreamer-env.age
+++ b/secrets/restreamer-env.age
@@ -1,25 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw quA7yedT47agjViOM1rm2UXkFXlkBrQ/szMyrP4pogI
-j5cUgnyMNULbb+HjQMp9yPwvcn3EI/JZ2V4fRdlcnFA
--> ssh-ed25519 5kwcsA mIMaDoRRSddDpiUBj3vn43AQoZPaD9Nj/LaqDD19CQo
-CxFWtIIoXweSdcGx7UwGMbgwYMk88H8ZmJ1u3C64HBA
--> ssh-ed25519 9d4YIQ FHkrz8DpB8Ly1QcS872wAYaOp+LkgHK63/ydPCCMQxE
-wksDmByI4LZyAcyOJR3GZaOnUHvE6mpAQ5AWt5z9qbo
--> ssh-ed25519 3Bcr1w t9n1d30mWWyBddc5z0bKxxZg1CGs7XN2lcECA75WjVs
-CidXDNx36aHh8IIgktW1Ybt+nzXWlmqhFH5TFoXC7mY
--> ssh-ed25519 c4NQlA 4jkAxmcrfsukN/meIthnMAgAeX50urT8LOY0JsDPU10
-VTirLbQ5ywSnXBk+om+TRmRjI2S3Bu3Byu7f6MdjweA
--> ssh-rsa DQlE7w
-R7ki9bXDeaSCxk/zLb2Xvmy06UntcBBIAyO3S9VcA6pjlfamaOJVt/qUS+2+8g47
-U2EHL9Y1TazLDxTSJGO5pRKv4OnKtPn1CYCXjBKh7UenRkjzLS6RfpFAoch7CDpI
-OSDgHPYG3TEGG5Y0UIph9IgCzuREsJh6ckl/CXrHHDnbs9PW2ySQI7hWGua+xf88
-8uktoJ2AcNDQvrevtZdf2H/eBumEWKPXmIKXTIfosYHLXDL6lXDN34tZGyEMjI8e
-L26nn8gl9CUBy3zYx+RNJor8Ze+NT/6mX12jAtCRxi8cGbqUS7W5QarsIEcsXj7d
-dib28LnfuErvk8F6e+P+zHHADgAoBiWixy0QrIvUEpsAtJKcMAkJAAD9S63t0/k8
-lYVvJfbpr3EKkXxlYNyOH7d1S0RsPdcBeGe0sXkwT6Q5D7h/OuuGdGTdMBmL5Af/
-f774JXDXYmfMNwqqFL9ey5Eh3p8S3tOxl8LrgCu0bdpOFOPEgYtDCIxoGrMUVG1+
-
--> ssh-ed25519 CSMyhg VoSNTWJr8Q9PtedzPJ5r3P0MO/vFpDj+mQ0kjWCnKBI
-UE5LnlKJNgQzn5oyliiyP6uaTokQDKewZYQ/02T4N/Y
---- 0dA5QHaOHsPmtWhbvhxhux/jAsXu0wI3Jnp1Yz0Io+c
-q̭پu�Q�7�>]q����7`�!���k�
\ No newline at end of file
+-> ssh-ed25519 WyOB4g znlomRQwoG7F8EoL60SJ09fRN7/B/LWXFKtDISmrm2M
+MAIitMZbd/oJu3rImFifUmQva/Igu9C+4sLFbY852/M
+-> ssh-ed25519 5kwcsA 59DIcdEsC9uifVJ2rGHn6Lv4od9T2XvG7G1tUdwHsmQ
+rkJBVsrDmsoat9EHQDVts6YEgA68eTHgyVp8tDLiEjU
+-> ssh-ed25519 9d4YIQ FANDf99gKci19znoxixOQ7v70eq5rDFlEE0TuleUZhQ
+k/ABQI9V2H65nNThy8axq/0M2CWfZgeq3GV30AKVcNQ
+-> ssh-ed25519 3Bcr1w CDyTGjL9d+JNFq+fTiHfWPQZ4usZ2TdskKcwieZpM1Q
+13wmA6U6XQW5OurCwJ/K9giJZv47jffySDhD0C3l8RA
+-> ssh-ed25519 c4NQlA SO0XyKTcsJGf6epggAgQDs+On+yzILjUG92GIQ5bTWI
+YW9ATJpR60LJN1FNKeSCJ76HAkaJ0psm7R6NoXtyi28
+-> ssh-ed25519 ++TqaQ JXzpUgF4ejNqTBkTeW865WoEuqCZN4Wt4jpBQtjmxmc
+Oz7gs6cyMiDZ5jWjp7vphF8PHh3sok8UNrKIIaV72Xc
+-> ssh-ed25519 CSMyhg 8heO2O5eCd5rt6u+zfR62yeQbohefXhu1g2FjoJeAiM
+YDD/bUR6xihsw1WTfB3/USUvEv+S0BJZpfT1rKL23oE
+--- 8778I13zGa9k2O2431zFt7jMHp1XkHqAW1hAxbbCbfU
+�p��ρ��r�����]�����-W���a`
\ No newline at end of file
diff --git a/secrets/rustfs-env.age b/secrets/rustfs-env.age
index 3d9e267..e16833c 100644
--- a/secrets/rustfs-env.age
+++ b/secrets/rustfs-env.age
@@ -1,26 +1,18 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw 4yocYUNwOH2fkSzRbkhJ1DN58fiFHKGQlQY8ljkgykM
-68DuFPNFjyD2+avOMlOlRQm3bs43Bk84MIXygS35MtE
--> ssh-ed25519 5kwcsA cC38K7vS4JlkGtSEPn7D6x2m9H08XK4vuhWysJcFNG0
-kKbUBKEfUUkhmnr3g5/Bz8chDouySQf3Mk/+LyNNQls
--> ssh-ed25519 9d4YIQ w3u2BX/R0lVgy35DoFtxUM6f/nYkcNVeAoPDNDSX5yU
-XOo2/yrO2r2mn2FTcR+dviKVClU94Pi8Wri17emUsoI
--> ssh-ed25519 3Bcr1w 8ncD6gl8tHVOYO83VW4dXI3XVUNXdfbFoZutCGGykxw
-r7k0ltk9XK5q9+gyLwqzaajYbTRgsj3rALJTCnQ0Lyg
--> ssh-ed25519 c4NQlA A8WnqWlC8ljCaQVMa6wJIfe4uA3OQ/q9vJRAF56ovVE
-xwh0RE9S+z5Rf+PCW0L/flKy506HRel0dVJJVzyO1M8
--> ssh-rsa DQlE7w
-f5iiDuIUPzKToC7cCUtQUQzkxKPkYsDuHHM+9BHsQmwSOT91Z0J1F4udOlEqUcuE
-kUMCbHvhFEQnzfKruEH3+tRnW1YWtqTzhgvW1MvY/gv8PihekM+TSjB/mxwYSC88
-yp3NhNxxonBdIjTUcgYBGijWQjPVCuggZcseqyy+h37rQCUNG6whacU7Q+ELbtTW
-ssfofJrKU7l8uBpNuM3ULMK4ZzM9IurZQyqt43n++y21G1hCKVkf7g6q0IQ94SL1
-y6yGyx2JGNnFO8e57vggmAtyFMMv+660plF0bg1pyQfFdmKHrPXmVHFURdQixhrg
-dZhcOq1WZIjNE/SALmZj8NkNxCIjne0oIE94RNq1lj7sRFolbyaYTjfa3lnmsjsl
-0s7y3QR1igJozNc0InR6koal1/WzykfXDqNwxFNyknfaGT75ZtsXJ8PC2mLbqxvC
-YKYHOBledBfLASMFHeJjXx1b+X1X1DzllY51Z2p1c4BeWxuheNCd2zPiCLfzPk0w
-
--> ssh-ed25519 CSMyhg /KgSvWyP3WRBq8uKV8VacXZEeGna+HmH3f+4lrJKnBc
-PlGjwoekR9PhGTxvxbl81BKkVl4z2JqCH+L68qfoyow
---- CeX80TFkreEFbDMeAGswnT0Y+CVfI9kTdosSCj49Hlk
-T�"��q�<E/g��|`.#�8Z2F��D1������+:~��
-�)�.;/Twz�Ht� �agX0��;��Oi�)s�઒��F��U>a�ꄙ��=��G�-s��A��
Hg&,xաA��/%n��kb�u�W��R|ph�2��s�2c
\ No newline at end of file
+-> ssh-ed25519 WyOB4g hhAvT6VcNCahVtm1KuZKvHCed3hcpQz4RN+55QfcWlo
+y31QEfMiLzAHEvtyyiZH1s5nVwXyCWpTLUPsMd2+OOg
+-> ssh-ed25519 5kwcsA rtaPMyOhhH7Iz6QZHPNuc6QD467/SXjFwWSNSXYTkAk
+z0Rt9JTnNRv7Krc2NPtONKWfo16XWbG9aOnYE4aujJ8
+-> ssh-ed25519 9d4YIQ B/S0exr09e2vMDHxHoOeiTIePEED+aQQbgHp6AAJIBk
+MY7QxSjQEGthNl3w/qIaGUtwp2CyAiWp2NrYANnwQ8s
+-> ssh-ed25519 3Bcr1w Af7dqP7+Izj2+17BKUZv0OYCJjMO+YkxWavWvrif6Q4
+IpbODCD9Y8N/L6z+49uJcMPXYqY17QWJ1E46xe2H7dE
+-> ssh-ed25519 c4NQlA RlMioymSWV+qj4e2bRgvkMeXRtzSp7hrKMPEcD3LZxk
+3MzuySB+MkYeTWGduPETRyxSDrbNHLsIUbpbuTqb/Qg
+-> ssh-ed25519 ++TqaQ D4N5MfbrzKJK2d7TXwhFKL9/Ge9T6phvRzoBeebc4Dw
+zPA2L8bPbOUPY5XVLskiSTQ8GzOCGtp0NyhGIk8dB34
+-> ssh-ed25519 CSMyhg P2mwMRB9MsTcph04/9KNybekb8o3NS++9T5OF+i97Ss
+57BkC8oe2HzhCQ0BFIK55bmyevMgx0S4cRkLmAUbUaM
+--- kNaEN8WTXkWGpfu4ibNUgydnIf3bH4++mRMDuXuuxgM
+-��w�'F�����d/[P��%�XVqW�����i��**v[����C#�Agr����D���]����:�=#��,�����)���U5#D��n���s�	�4�� �s\��*.Yb�%e��ꎫv?p�	�	�.�q�� �
+
x+R�%�L��
\ No newline at end of file
diff --git a/secrets/searx.age b/secrets/searx.age
index 3810188..c830bd3 100644
Binary files a/secrets/searx.age and b/secrets/searx.age differ
diff --git a/secrets/tailscale-key.age b/secrets/tailscale-key.age
index fdff17f..16ba7e0 100644
Binary files a/secrets/tailscale-key.age and b/secrets/tailscale-key.age differ
diff --git a/secrets/traefik.age b/secrets/traefik.age
index 8b7a733..0d0d29e 100644
--- a/secrets/traefik.age
+++ b/secrets/traefik.age
@@ -1,25 +1,18 @@
 age-encryption.org/v1
--> ssh-ed25519 4NLKrw L3agH3Z6bj+Sq9E3DfaTN0V0oZ5niRM8CBEFROroQkM
-BwL3I3fvhGoEAqcRFCaj7eyiwTKOlgfaUu0j7oX0ORM
--> ssh-ed25519 5kwcsA +oFqz/Gi9yCpt4zSSmtFGlLb/vR2472qSjHrJwFbDjc
-4fE6ksDuzdCb5CTM/9l0BCBHdBW5EjgKbdZZORpBewY
--> ssh-ed25519 9d4YIQ hdRYhnLz8V62eC1JPgYRdau2a5DSOGKh3wL0qJmnCnU
-oKIB8WxnmTJ1OxPpkvQ2vbJmgGTbtWH3at5ppFeiZi0
--> ssh-ed25519 3Bcr1w ZP7GpdLeUAvAIUyISp80xvsoKBQK8li+KS7QpM92jWo
-om03ep2OHLSijw9LUGTHPnFdH6oGE44hvqxwe8fuAe0
--> ssh-ed25519 c4NQlA XHPJbNCieeQN0NyvD5yK1MxkiJXKAWvKTm+jg/nQkyU
-Cq6qEBraBwNwp7Cfx4FDNLSx5u94akf27SIQjROR3j8
--> ssh-rsa DQlE7w
-K/dFkf1KDDiX+HIakT+lv0qMiPv8iNt0wFvaSxpETa2v3Z+YxPdu5MlfAuaY3YCl
-0/pSOLUOA90ugAZkj6SF02HValGS/SnXqpQYN9NTSLwie6gUSKAMgfkV1UDNRbLj
-d04rTcSF9XqpQLmLZbQY6/CALiaGj6QPqdKU4lFTDNEyiEzrKUEorAnMnKGULYws
-y+1QAlKY4yyzRaHTRq/IbBC83oUjpj391Z8fFUelHnN8iXXZQpmigOpw5/XVqRP0
-21+iZty2e046r1TvSp+QpD/IvqqWUMMRcaWWUm9tCJQCaMOyapyrFNLjvmJzhgvg
-BiEFknqde0lfYJQIa4Mc5qziM98wGU0cVnsieYXp3AtcJ6ozhW6znDfedkS3TgrX
-SQWwWbWNskjOAhLtRenACfoOkupq//ZCce3HCrJYbHCWG+lw6SfU0vA1EO6O1/SX
-KlGSp2zr9Rp/TkxABRuciiMlLMVDi4EI5iuubWhH0OY8Sy9140hOYjDUFrNeJN4n
-
--> ssh-ed25519 CSMyhg jBp/C2EF27oe8TuNMy/GYutMb29ST2ciVjg3Bj6OZUE
-WHPnk6765AVdMQEbxENGd0b44vyefRR2rv4rxPDpNS8
---- bFPtf/w/F/Mx/YycTvC1SKGQiOT33QluwD0LaPYjK5U
-2x�N�?��x%����k��3̇��ʞ�&�
v��n!8�б8�tUE8�愖��[��sD/*��[@�Ͱgc�
�*�x��ȶ��M2H���רcaK�P�/�
����>�͛s{7��
\ No newline at end of file
+-> ssh-ed25519 WyOB4g sgNJigC1mHTfc99a4Zbbvs5CjYFWBzP6zavZwcH+gD0
+rsPuP996M3iEnoroYuyu2Wubdl2/bGLubP+poZaLdNc
+-> ssh-ed25519 5kwcsA uuRb8F+MulRQJ+J4a/qQFA/gblaD0fnuY4s+5IivcTo
+Ff79mN0PHGPfjvcxuzrVLV/xlHtnmxEpeBjx0bhCnVA
+-> ssh-ed25519 9d4YIQ eagO4M6TMAlKPHbA1Pxn/gWGbVM5qMIfwXjpgQcSynI
+EgLCVcLN9DmxUUzOsQPW/0rFnJxLqI2twoLwK6IjbJQ
+-> ssh-ed25519 3Bcr1w BMqOBhbxvEVN71hXp1k1wvgdMI/CJ1n0uMqCALS0rC4
+EW0b7pnmX9VUAEnutmVKKnf84dqsZQFGD3VdhEbyw4g
+-> ssh-ed25519 c4NQlA RAWVceQjC0n8q/cQVLep/nq/9+yqSu+p+8Md2jRSyhc
+H4Jnm2breoj7pMrdViDQVVaE97ugvMyotrZPaKL3pl8
+-> ssh-ed25519 ++TqaQ 39Vgs3hRK8xFch23bFpt98JkpCPlBe1tW/CWNMLzxxQ
+btV7hNCoOosE+nuIdLCC1b77Iysgx27VYoAjEvoIxls
+-> ssh-ed25519 CSMyhg A/82i7cqPl6YsUR3SUSf1jbZmSdYTXQ8ts/WRP1h/00
+w7VfU5nfA/PJiE0qtAQ1GB0UB1kYIHZ0HbPnXNOqi6Q
+--- 1qTrY3rOpD1NV7WhFdghygfv6SvfRf4eVmRUkFPVi4c
+�LՉ�5_FY�e)ױ)Z�l~��uwy��{;��N�ez��	·��
+,&["uA:C���hn�"�pJ*U��y:�ñl���Y �;�q�':}0
��u���f-������$O�66]z�S=�l�
\ No newline at end of file
diff --git a/secrets/tuwunel-registration-token.age b/secrets/tuwunel-registration-token.age
index ec0e266..e52f85e 100644
Binary files a/secrets/tuwunel-registration-token.age and b/secrets/tuwunel-registration-token.age differ
diff --git a/secrets/vaultwarden-env.age b/secrets/vaultwarden-env.age
index f12ca0c..68e50bf 100644
Binary files a/secrets/vaultwarden-env.age and b/secrets/vaultwarden-env.age differ
diff --git a/secrets/wg-BR.age b/secrets/wg-BR.age
index af0c0ba..c68494b 100644
Binary files a/secrets/wg-BR.age and b/secrets/wg-BR.age differ
diff --git a/secrets/wg-DE.age b/secrets/wg-DE.age
index b5ab719..0a9b358 100644
Binary files a/secrets/wg-DE.age and b/secrets/wg-DE.age differ
diff --git a/secrets/wg-NL.age b/secrets/wg-NL.age
index 8277e80..3113156 100644
Binary files a/secrets/wg-NL.age and b/secrets/wg-NL.age differ
diff --git a/secrets/wg-NO.age b/secrets/wg-NO.age
index 6016291..217412b 100644
Binary files a/secrets/wg-NO.age and b/secrets/wg-NO.age differ
diff --git a/secrets/wg-US.age b/secrets/wg-US.age
index 0cd6cdf..96a4d62 100644
Binary files a/secrets/wg-US.age and b/secrets/wg-US.age differ