3/20

2026-03-07 12:05:37 -06:00 · 2026-03-07 12:05:37 -06:00 · 9d8bfef042
commit 9d8bfef042
parent 817aa75f84
26 changed files with 540 additions and 276 deletions
--- a/secrets/cf-acme.yaml
+++ b/secrets/cf-acme.yaml
@ -1,43 +1,43 @@
-env: ENC[AES256_GCM,data:G2O7yhOE3UKukq+1zXVWAW/REdTVdBCY0WByZbC7jnxR773ST9lA8rwEL5leB8h0bTqqQh8bwI4AdFR6/r0UQyc=,iv:IaRUoGY2zfaFDofSedHjtSx0UIGoIqX6oQhbrKCE45c=,tag:MW74dIOol8PZNxyUJEbPyQ==,type:str]
+cf-dns-key: ENC[AES256_GCM,data:VkWmeh1RXgC6KWpzGteK/+8meO9iLYEB3JVs3Pikps2HRNtY+WWBOFem08ri87O7tV8mAHZVP0G2l19QL0W/jmQ=,iv:DzIutT49mYmA4OUDS15jOYw5tM/jfDmG12CVGaw5u0k=,tag:sw8nS7hlICPsj7qU/ANPow==,type:str]
 sops:
    age:
        - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQ3YzNU13MGFvUGliY25x
-            TmxIRUwzRjlPTlh5Tyt3R2Zkc3lCMFhBT2p3ClhlR3VXM3ExQS9CeDNSY1Vvb1NC
-            ejE3elFhSk40ejBOaHdTK2Y5cVBSdHcKLS0tIHQ3TTRnSmdLWjFEWks4bnZFNkt0
-            ZHU2MkJVZUErTnJubHcxcDhxVDJwS1EKtx8pjBpjz8r8era40aUspZ8Nyg2uKBfJ
-            2m0FXMUyI/4KzGXAnFxPPqdeVun+NkJ61Wv4jT9Xn6PXf35ngqJ0xw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByMGVJMlg5aTBwSE90Z04y
+            a05zeXBzRFgxQ2VXdklEYVQ2bnNxcitGNVJnCndVdFpVNXYxU0xYMFhzeE5SaHJn
+            Z0JIM200QVdLbHRuTksrZU1OOVgxTFkKLS0tIFFwcTlqZ2M3MUp5MG5Ed1V1dUJz
+            anhVSnQ5empkcEpyRU1GekxPQTZ2MTAKUbj8UKt6RIlYo5JbqzzcEDDqG53sORiL
+            xTDjVD1k+wjKXp3nrtlpOE1IDs0cYzX0l/Fh9rVQupEA3M9X35DrSA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLYzdFY3J3R3lOcUUvRXJi
-            K0doenVhVHk4Q2syZWNidmNXNk1BaTd5Q1I4Cm9oWWYvQ0s3T3pQMEJGYllyWUl2
-            MEg2eHZZWHdTMkVwdjRMbXdPN3RPWncKLS0tIFFIL2NoQXRkbnZONjJOZGIwNVBl
-            aXZrNGVxRHdRR3VLbTFOS2I4czFGcWcKUzvwpiCHzQIgtX/cikMwvHoGu/8QxPbN
-            HIyjqxwxpBOWPvLV4xdayQAnIbVwK4TrQ2lcXVPJUs8/ZfTF7MREHQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2bXM4dmVqYkZNa2lndVB6
+            L0lxNGw1QnAyN0hqYjFtRi9zMXBZTzlscUdBCk55RVhlVHFnU0ViaHd0Tm5QNm1U
+            UmNDcW9vZmh5N1FzemFYV1UvYzhoeWsKLS0tIGhNT2NobjA3d1o5MHpLLzBHd1p6
+            RzZIZktmMGNTbWFNanBnZXdqUU5rMzgK4qJE7L4QTgjt7afxVcKMkVW6oEXAfEBf
+            qREmsQnOX7xK6SYGW1LJu/JSM1qOaKJHKriwboRweot3u+F8+YQkHQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBV1pNTE5oNmZTZlg1anpn
-            Q1NRUjRaVVBGaDRLYlByVEo4ZktKcnQrL240CkhXRlc1bENhWUdqVHJ5bkdyNXox
-            eGJ4dUNwb2M0U2o5SnQxcmxCaTJKQkUKLS0tIHRqaDdwcHVlZ21JVVh2SzQ5SHkv
-            d0RtZjRKN1ZhU2VCWE4rMDBvYTBwUnMKlygdEBamBOQnhDOH7nzhbSYFDyFS+3q5
-            eSqIZfCWW0V1yEHbe/t4SwSLYiVZLY21DS63JZ22jrnl0v7521ntqA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArM1g0WGpTVjlRS3VjaFhC
+            VzE2dUZPUm0yTFJ0cktHZ2V2RVZjYUYrakVJCkJpWTJxRS9Ua2tRQ0hLUVFoU2Rq
+            YTBLcm9DWWcrcWZSejRsRzVzVWtDZ3cKLS0tIGdiSjZZLytTMm00eUhqdGZQZ2xV
+            NEVrSk5CSUVMYWpFK2hiMjJVenNtR2sKmT9WUxD2Z7b8/jp1JthrDUErZQGiddKg
+            kVGho/HAFf3dCbcZ0XNmOIHOhReLbJ+nGOepoJn3meRgQ0MG2ebr7Q==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw
+        - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaGZUM3hKSE1BM1JscmlS
-            ZGZST2g3MkZzbmRISnN3TkltK2lleHpmWHlzCmdFbnZKSXZWOFZoWFhhV0RON0tm
-            MENsZnprTkJka3pJZXM1cFpwNCtUclEKLS0tIFR4TUFSQkxkN296aXJyT25nK3RG
-            b3pxaExSTjYxbFFwYU1PNUJBbEIrSTgKzxlxMiHPdQpvciHa2fNr3/QIRrReq3mm
-            xDjklnlIAdYTrq2mr6rS3sZMer3aOx7A8glOTcVL2VjgyQ1/s30+uA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBucmtQYS9JeURQK0RtNEU2
+            SStaMTQ4SVljUlJHT2dCTlgvaHQ0bCtNNTM4Ck90SG5lV2lYVm02cXFoT0RQWVBQ
+            MnQ3dmJlQXdpMDJxK25qUGtqZGJnOEkKLS0tIGFLZURUWGVrOXA1aWIvalI4cGN3
+            MWNoaHpkNTNNMks4ZjgyWENQaDFOb1EKW/97k9X/YGbQH3dTivwiJkEb2C2Rlabq
+            Qeg3p6GARM2jDkUnH8lHXiCY8ZGbW5qBsG4t26eGKKQK0wyWMZ+/qA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-02T00:02:47Z"
-    mac: ENC[AES256_GCM,data:l3I8KNMoZGrUUS/RzY0fAr7DkvyhynOqPW/09IfI8sKYBP+gavdf3/OpW3uwhYzuS6pRWwCaUTa0F+HELu7rBG8FwpvyBpdeAgZb1hVFtKeBuaCjXDieuxKjj27IKLx3UbHx2iRm91oB7bIMZaXYMrlYVmrs/BkgoT8vHj5j7Rc=,iv:KaB9qaUTYbnS6ix297MjIHxl+LSazZnRW0Lu2bP/kmk=,tag:bbncBMsk/qOfz0LRmrqiUQ==,type:str]
+    lastmodified: "2026-03-20T05:17:52Z"
+    mac: ENC[AES256_GCM,data:uDvbJnGkS659IcvFz8M48OGm4LiDD8ZRM3pzDFFAu+cqIDsgjUjYtf6bvsJr2kxMdqQWvqwXZkuUnYlzgtR1Q6PbMKPHHAEKg+Z6kVbKGzjr5EbftsLo1JiAGvW1UA3g6V/fOCv6tCHqwBP2Wk6MBowbafGuKBAf2w373NiXYkE=,iv:jE+q3n+DtGUoDVcflVfmZxEqv+DZXFrTwx//a5GGrE4=,tag:ILjZwzG/EzjpcazKhd368g==,type:str]
    unencrypted_suffix: _unencrypted
-    version: 3.10.2
+    version: 3.12.1
--- a/secrets/forgejo-runner.yaml
+++ b/secrets/forgejo-runner.yaml
@ -4,38 +4,38 @@ sops:
        - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGWnNRSHpLWkdMVGpDNVdF
-            QitwMkoyUDFVRk5STCthU0VvaENOMmhxUW13CmVCaTExQXRsTXI4UEJVM0tNSGJC
-            NHg1cU1FTzlrRithbFNlejU5N0p6QmMKLS0tIE81R1lxVmw0YUtQT0tLWWlFR0VR
-            QjlJTVZTbENqa2xNMlJzR0wwN3NwMkUKbhEnJPJu46i+Zx/cjlCMgahBwCsFWTG3
-            aIlCS9tPZNHHw/BZ0qoOeXAzRsAbqQaelxTRkStnksslgzZPdfpaiA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFM0xmRkpXc3VxWTF4Si9z
+            SjRVVG5ZTzdvSTJFWFllZlRod3I5c2h5MUZBClE0eEZTMUU4UjdIUkNqTWxXRzN3
+            bVg3bmRzSC9XNVFEdzRKUVNIbGtJelkKLS0tIHJ2TGJkTkVRV0dMZGVCYjZIQjRp
+            cGw1ZGg1MEF1YUNkVVZnNDJmNHoycEEKqNHygsL701KEZiG9/fJBWGqTyB1xoCYc
+            c+3D/F9WNcqBaiwXkt0ukiqiLDMKB8VlPlPnGaQX+mKuvSX0KCCFJw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNSDdTalFXelU5V2JWQUhr
-            UHhKSUxBek1HR0dEbkdyODFOWVJILzlpVVFrCmtXM20wMjkwangrS3cveWp2aE5Q
-            Z1FpeE43cWwyNk1DbGoxVjJzNXJHWHMKLS0tIHZMM21BRy91ZE1kU0RVTys5WStW
-            NGlFYlJTMXRmZ0NENXBHRVkvV2tjNEEK9PaKtAHAnlkiAtXm0AcqTSUm4ynB6WFi
-            XAX4I/Yv6ykAMA6FyfFXQjqPA1pqh9HjrlVimor91Puwz0omCJcgjw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiWDJYbXE5VUpGbE85NTdp
+            My9HUkU3eG1uWnl1VzBhWEl6ZitzRHF1eHdRCjZQeWRJd3J4RGhybjYwazZ2dG1h
+            SGJEY2xmbzV4ZHl2NmlDWWdvL29aK3MKLS0tIGs5RWVibzVYdW5XOFJaYVFZRnZL
+            bVVTSGc5QkFDZ3E5eTkvcURJUTRvK1kKtkq7v0hIzt72QxM91L62rkU8RUlxB2s6
+            aNumIrYkSxcHsGgxEnUY8zhj060e9+3L5rUtXnRkMQ60xsFGoOBP/w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRktOaW5XSU1jbitCMjFJ
-            NDJTcXc5enNLQWFqWVpXbkM2dGxpb1lpN3lVClVJZWEvYTBHbm1vd3dwVTV4Y3Fn
-            T2JRYmlFNE5hMDB4cmJwNUs0RlFKQVEKLS0tIHM3cEpwUFZIbmEvZnkxbW5BQ1E4
-            dDVpbFVoVGprWHF4K0lJSnVOY01TcUUKWzrAsKsGMVWqds0BuYjXxo7In1RSlmQP
-            C2BpEutA3uQ8GrNEM5N0r1Nauy3x+e0n+j0/LS7hzSaj0HQLTKUR6w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L1MwaFIrU1RwbUM2d2du
+            bFFDYjFDK1A2ODZsYi9BaElJT0wzYnoxdW00CmNZNURzbnhkVXRsaDBCdXNVUUJS
+            ck4zdWF3L0lHKzdiSDRyUnErUm9QazgKLS0tIEpwcG82NG9MbEordVA2UUV6ZGNE
+            c0hQNkNZZ3gzRHo5YjkxUFJsWDMyemMKBhwfTb4daTl/kPC4wbQk9WwgT1VZW+JM
+            DsWIE5cldZmE9jYGT0hAHRgrMBJiz/AHjgxrcvyzGfaBC6pLoTlmIQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw
+        - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NUJyamdFdHh1YS9BZjN1
-            bWlvWVpjRGFnUXhoSGNHSDRLRFN0NWJvY1ZjCmFOL0RHY1JXbk1hQVF4dEp2anNu
-            ajRaWFJ0RVVRZ0NGT1NFeVBVQzd2d1kKLS0tIC93d3NvdWZtMXRVWHNHcE8xT1Ew
-            bzliRFhSUUpVZ3RJZTNnVlQxdmlaMUEKmPkrlHyc/bXfHKE0qbFEXX2/w4rgiRSB
-            bbk+uwK1IhoZnqvPhwWxiHTlvSgYCJmxzYzP+f+qO/rl+hkAaePg0Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxVjF4MzBUZlBMVVVCUmtq
+            U0trZjBMTnUrMjE0RjMrWnVmWFRuRTV3MEMwCjJBWWJlVUlEdERUbmsvM2ZtQXEz
+            SVI3eFgxTjMwbmg0WUFucGppS3VzUmMKLS0tIGN5UnpEbENlZnZ6a1ZValpaSXRS
+            ZzRvNVg1UTVsNStxNGJrcm85Znlua1UKaJl5E3ke2AqdL/y2yQTdshYEDaUb9o7B
+            5a6ID6cZLjXtjhYs62bzWDyuRxCg5thZRS7jE1+5CyN/rI4vvuxq4A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-09-27T18:30:16Z"
    mac: ENC[AES256_GCM,data:nOs0CUT0DD5dphyPTN8ev8WTdflFmNScg3UIPvXtlhGE3nJdPRW/MjraUEd5gQZ4qrwkgo99fsD1Uv6HiWBQbg59TqDNQOwhXU3SYto/zVX9Y1LGwvGurMymiQNbhHjzn+VN1tXdwyTbvhUnRSwz2a6uu1sl9m3VNfRbMewuQnM=,iv:FtMd7i5V9eRcuK9HhjiKETx/SWs5+MijVExUB/mxHjE=,tag:H+USoPhnzWzTNl7um39Pfw==,type:str]
--- a/secrets/k8s.yaml
+++ b/secrets/k8s.yaml
@ -4,38 +4,38 @@ sops:
        - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidk5Qak9TZGxxbEhOa2c5
-            Vk5walNpc2lsL0RieHBUQ1NzUzFJdXI1NVVrCk1JRkN6ZjJKTWh2T0lWUWxyZjB2
-            K0RGM003aThuWnZxcmhENGFjYUhGWXcKLS0tIC9QQU9BRE1LZU1TbElHQ2dFRXB1
-            M0xGL1ZwcDEvV3lYQU5XN3hoN0w1elUKnmnIHsA1wNdXhF32O6RymrTiabnI78Ho
-            Gg3LFTTj8DxZP/OZwOR+djW7xjwzw8NHWbxc1gT3YiYTWiP7DRepnw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UUNJRVorWWJ1K1pFWXNW
+            TUZvSEpnQk9PU05CdGlBSmdGQlI2Ri84ZlU4CmpUZUI0TmtxZ0xEdlY0ZTl1Tyt6
+            QnVrRXdNQ0NRaVIyRVBOaTlCZnRqMjAKLS0tIGFqLzVYU2w0SG1oZFdmd1lxV1c5
+            YWFmbjNPZ1VMcUE3YW9RSEoyVnYzR2MKlvwWLtgKL9R0D34c006H++pPR7BFjZp5
+            HbaMk9ld9FNR20aqF0EHP9tRqdaAr5kzIsDRN1P31DQUwphuj2WIOg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNVZaWWs1WjdxanYvRmt5
-            OUE4SHd2REE3RGZNTEt6UmFVSVYrZThkSUdnCktrZWk4QTV5dkdBTFlGQ2tsdTJJ
-            eEpTQ0FEbkVRZ0pEdysvWnVLVUJxVm8KLS0tIDRxZEgvNFk1WENGTGdUZEdmU0tr
-            NGxUK2thclU0cHd4cS8rYW1kQm9WT1kKX7oKMJWC3G4o2ZFlyxzl/dCEi+uUTFI1
-            XStgutdWvyMQ2nmJbQlhnN12qTt6VDj36QXVH3175U47KaJNOGvdZA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTVdCTVNBdVhEL0VBQnVu
+            bmFoeWZJV1gxTW9DRmVLTWJuVFk2ekR2U2pRCjZVUEN4UU1QYllrcHpLNzhHQWI5
+            elAxdFhoNys1ZG1paU1aZ1QvMzV3cUUKLS0tIHlzQWlXYUljUVNkcFp2YlE1cnR6
+            cDJjSUVqWEFmSExpbUdqd2tQQkFqRGsKNj6fe+49wf6cR3ZayXe8ADwMw3CtCxRc
+            C+usr7O9dk0xqgfTSxTXve8fNX2ouDnsMoZ51PV0U1cgf3+qK9m/gg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtclF0TityOStDWFZsMzA3
-            Qit2d3g4VC9kRWpqd016ZXM1OW11WVhKQUh3CkhZTFhmaklWYlBwSXhuOUo0SUdl
-            NTVsVVNtTXNmRStBVXI1VzlYTFgwSlUKLS0tIHhPeWFsUmtkZFVvZDRxVkE5UXN3
-            STR3MUphNlBHcFNrS01NOUQ2b2lXV2MK1AxEIpS5+clX5EoMbQoyufLg/+Rh+NHz
-            /Oe/xM4IqrKAlFn2vHXw0DxDxj16ReucUBRsp8haixZiGr1pMVgHvw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNGJBWGlqTGxwRkV6c0M2
+            b0lCbTF1Y3dhTVFhVmpTc1l4b0lCYUhINW1NCjNqR3J4Y2ZGRHBMVTh1dm92dFND
+            RmNwSDJJcEV4TlIvMGlKbUZBaklJcUEKLS0tIGI3ZUVDVWpvS2h0RVh1K0VqSkpa
+            dkFzZGh6ajBzblZRaDV1c0d2OVRlaFkKGpSvVse+3KtESzdkks/Ohco/2ON2e0cs
+            xXhe4OHjRKFR7RkAoPGwzAZKiIpn7h4SnkZDwjvI46mINDXQbjYmJg==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw
+        - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNzJacDVvTnB6VFNmL0dW
-            NzRmSHRpeVVVZnBJZXJOZXUrb2hWQjhDZ3pVCk1QbnpPZTFxdEFaSW0zMmtwWTBm
-            VXZsN3E5Nk9GYnF6WUUyMElVclRpZ00KLS0tIEZJWkNVbllvS0ZTVWY5ZnpUSlpU
-            NzUxTHZhL2Y4YXpvR29JUW9aOFRKemMK+fPgPXc1eGfVsJU7gyo7OwLVcpm3PE7K
-            x2GFKtrw84aNE4CMxKvx3dRUoIphj2vw45cLOriJRpnig9xnMQIbCg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRKzlUUnQrcEM3YkFzOTV3
+            ZzlKTG5ydXlEUnhxeXR4NTZJSXVkUW9EWWprCjVsRDFtNVZtU2ZWWTJWdUFLR3NM
+            d3htTkU1REpUYU9BcktYcFFpa2pycE0KLS0tIHh5N3ZUSy9OSzhycnhwMkltM0p0
+            cjNUcGM4NzRoMmhzZmk5RXVwZmVZejQK8fhhp5v1pEiSXuFfyVEjBwlD8gPhWjC6
+            bNpfSQmfRdRkO+Vu/7C7+ei7s8S0+XZuaN4S7dD7fvl6/Xzm3D7zRA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-01-11T20:07:38Z"
    mac: ENC[AES256_GCM,data:JNF6aQfUQy1a+L2BbMAjSCfnntUaUlWcyfP9kgXpwrxcVK/qEbXxHPb+NDOliWvOPp4cMDjVphBgyQtjNTzTRfkMeMqtpKEIOkYUpo9dN69uHrws6rGq+tDCn50UZOgKirA3ojvrqEZvUKS8QgsRN7l0XK4RJjgTATBJQfNjGRY=,iv:vEAJJJEF/rPSDAfcxp1FbhnP78I3Uuk+GarWpHSGCUs=,tag:BIz3mYMVjmugWtKEg9WXiw==,type:str]
--- a/secrets/pi.json
+++ b/secrets/pi.json
@ -7,24 +7,24 @@
 		"age": [
 			{
 				"recipient": "age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNFhWZTRlQUZ6YXVNZzNE\nRFVrTW1NU2d2SXZHZTJVd3ZSb2hKcDd3RmdZCmR4WG83emVYa1QxSlJSYnJTVnYw\nSXhjV2ZIQVlIbWs3bDZRaXlaeXpqK1EKLS0tIHR5NkFFenJqK1ZQa0RBMWNuQi94\neVFMaGlwdlRDa0ZHbTZxeWZLSHY1SkEKazWsoA+aF3g3ZelooeuqeQA53/N1eu71\nYWo7Zmzv7KbrRJXzNUEiByjMV2sDsHJyELO8CAKr7193cyY4UzTViQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKVnlsWmJuSE1pOGI5cWE3\ndTJmZnNlY1dwZzg5MWVtL1d6M2hpd1VZL1VRCktvbm51Y2trc0JpQ1Nnd3lsWHBY\nVnlmWFFRTWkxV2pIcG9kbmlHTHQ4R2sKLS0tIFdCclVoR3RiV1MvTUJ3VUZtZk4y\naVN3ZnZBMzNoWGNFTGwwNVI3ekVLNGcKRmVz4g8e/AeX1Ra+WwAEwwp6RG8Ap78N\nLgOW4QSoxDnqjggxokOr9h5tvjZMjFMhc/ZFe49O42/tBj2Tz5qPzg==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUN2RWUzczbk5NYzc5bXI2\nQU5YcFlMWU1UV0NoTzhla3hIakd6ZUlmamlvCmZDWG91dHhWNVRpaUJPeFlqcVFO\nRVgreEhwajZMVE9nNTZpN2NtVjhkaU0KLS0tIElxZGtNR3lXbmxORTN0TTBBRGsx\ndllmOE94NHM3b1kyUVpueUlrM1JMTE0Ku4gXUodVqqxf/joVQqjA5RmYPWwNNCsC\niXNJZdUJLzh9xpaTTHLkEXFyxWmZ6gKCjoavLxLf03ReuJOJ5iBnFQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTUorSHZMZ0RkM3I3Syt6\nWHQ1NzhKNEJubnRydHVGUUt6YmxHOGZpL213CjIwWGx0NzArR0IyVncvaGg4RlZP\nWUlsUS9NUUIraVd6RCtNY3h6QUxqQWMKLS0tIC9hYmR2eTNlUGMrd0EvMFJrREhR\nVXlSMXFFMFYvcjgzOUJ6djRlbVRtRGcK+pEm+ibYOyKPOpFs/4hRaXVoJB2KH6mS\nWK1U3w+H57Ws7MnUsg3ESeOEjvaH0viGd1iEpHGK4BNTMYsOgS34CA==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4M1FPaEoreE1yckhzZVpS\nVjJSNnlTQS9TNUVEWXIwaVJEWXNPYXFpV1RBCkhURHZ3dENGSXA4SU9LU3g1Y2cx\nWnhRRnpDSTZsYTJkNkpvNUpFZ2FhYWMKLS0tIHJma1ZhdHc4Qlhkbzl2VHFvcDE3\nQnlucHlmYWFhQmF4Sm1RaTk0WU91VmMKMlATZR0OXeJpvbVYBEsnOjq6hzr63MeM\n/esyDm57ZJ7Eqcuev+VjXaWNZZEuW+PQW9Ybct6NtEC6jH36m9za5w==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWL1JhL0xUSlFNM1k1M21m\nSW1QUUVGT2RLZGRCMEk2QkdqM3VTc2tXTWljClJ6R0d4YVZlVDlsZ05kSjU4S1lM\nSWZzS3NidDZZNUFhemdwM3hZVlhyaWsKLS0tIEEyVTladHRlR1oxWTRnV0kxcEZu\nWkZodnBpc2RMdk1hRXA2ajczUE5vTDAKn4jcQf+/wqzn0syQooEj21AovUTB66U0\nCO4JXN8rWdjJamy5juixDWieIWoCbJzV/xJqMUi5L3rTSlxebW9yJQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlYXpxWmhqT3cySWx0ZDJv\nZUFkUzFmMjYwME9xb2UvMHBPNVZmZUVuc3hRCmFucldiMEJEelIvSVFZNmtERUVW\nOXBoK2VrcktzdytsTEZWTUkydXFkQzAKLS0tIFlQMmViSk1saUY3b3FScGRpYlFT\nTlg3Y2ovSTZMRkd6eXlTLzJYcmdMK2cKw6snshtmgbY3Inv4TCSYz28hwmG+W6qH\nPo6dl9h99tJRfG69VeOF+SMt/14N6I/fLqHn0e0mr3i34XV9EQx4DQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTURiY1VsaTVYZUlKSUU2\nTnBacE1lVnhua1lZbkgvMTF0ZHhyM3V1clhJCjMxazhhY1Bab3pkRVNrQWZUMG96\nSkU5bXVKb0htdUJRcy96bFJTdGJybEkKLS0tIGZwZHNvbkVlYjlidUpaQ245WDhJ\ndXJGNXp3UWpiTGdmeWsvbHdBdHEveTAKEuZTunhoCWvR1hmBlatrruoX6ako/TsY\nCgXCYEw1KLOL+FKOX2jOGmTZ+jhxmUqstj3yIEVpVaGZqjHUcSsgsw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2026-02-27T07:28:25Z",
-		"mac": "ENC[AES256_GCM,data:QQpZUzMpnZFsNevQuEf+r4FXlCLFVAoXBfkxOYT8aOhWFLYVFm4W1wvkBnOn4UBtYa/mVadXkejzjfS2kLLt59nPx2gOjePGWCOuxzaSuipAZDP45bNsZpuMT8/KG+BOBjgSbhR6yyRAk6EFglJ5G5i15m3vag493kXxtYNs89A=,iv:m1SeK2OO6c33vJm6a7hGYRLTbszDqaY2CpLdXuHDqx0=,tag:ngNn/36Zzn2omb/091ZxBw==,type:str]",
+		"lastmodified": "2026-03-08T22:16:33Z",
+		"mac": "ENC[AES256_GCM,data:+3Y6ie/hbbu8eQEe6pA9aC/wj4vOrduJsrHUf4LZh+LXGarCj/VyspegrPvJRR2UZIGRDuNTxIfzfcufT4bKQdqjutO0++O8hh2EEoSvPzZQ2LEeVww8/rk0A7kkxctneBXDffU+Qyf/CNXozPLaSUv8cZXRBUTrfFaa0HVKWcQ=,iv:VcMZUfPS2KzlsWTkKhYCvc2NRlycz6yGNHCfGRKwlwA=,tag:i4a/R36/ZgOH+/QWwi+wxA==,type:str]",
 		"unencrypted_suffix": "_unencrypted",
-		"version": "3.11.0"
+		"version": "3.12.1"
 	}
 }
--- a/secrets/restic.yaml
+++ b/secrets/restic.yaml
@ -22,38 +22,38 @@ sops:
        - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1V3hSa0VVY1hLLzNEZkJw
-            OEp0THhMM3VMOWMxOGMxZjV6UVdJMTMrZzFZCnlrL0sveTBqL08zSUJDeVZLUVNO
-            WUgzZGhYdytRZ1FVa2N3Vmd4aEFnS00KLS0tIFJHMStGQ29pMWFGUno5aEg0REU5
-            N1J1c3JLT2h1R25ZWVVoY3g3bzF4M00KW4YOac1MZEVvtlovVcEvVOGqnghq5JDF
-            V0uBNdqtYEyIBVCQI0gXebtNmtxkfg06PI4JdGiUkoUKW+ztIk4TsQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNGZLR2gvcUplN0RZa1hu
+            UjlqVk5uS0Zab1dvTFlIMUFYWC9RR3d3YUV3CmdySXhUTENtdlRIMmlHbzJwQ0ty
+            NDM1STdOLzgvNERLZ3VPTDlIYkUwWEEKLS0tIEhqeTFGbXRhZGxQMkRlNGtCVHdU
+            RWZoNXVaQTgyb0xaQ1dOU2g0ajlvclUKWq8tL0XJSo8eemt+e3fYV3JykvKXDBq7
+            1BVzXzFgYpigPRY6JwPSLVkQpXuRyML3INEBU2uFo+C4BjYHzKnpVQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuV1FBTGpKc1d5cjhRdUUy
-            MG8yQ3BqTTlsemhzWFBQTFR3UXV4SEFOaUhnCmE5ajdYaTRsN1BrY2JMYnBGUTZJ
-            VnFvS0gvU05mT1hzb1A4NU5xOXFMbGMKLS0tIGdOZDE5SVJXNkFhYmVUbVZ0UkNK
-            R2Y3NUdlay9LZmtHVCtSQm83bHBJWlEKCzXphy/+kQXUDIkhYDZ8oaQlenP3yfFe
-            RmPZ2/asS8Ol0xkJui54i9Qqvu+18VISJVHGqcaYw+YrQnCGRPP92w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRG1oS0hYYzJXa2xid3N5
+            TlNKZ0xnYVV5RGFsMm5LT3dzVm9OSmtJTldvCjBoeVBaNXY5emRUZHM2RU9mYU90
+            cmhOSWoyQmlTa2ZucXpvM28zVW1GVjAKLS0tIDRGN016TzdReHcwRE85T0l1aUVo
+            Y0p0YUlDTVRFY3lYa0gyYlpOaGxpNncKRkM/M75QPAWntvZWKv1FvgzHAfPlh7X3
+            aX3sL05hEFHnHn2W5d+FNZuXpb+wO7pLqh+UW025cWZVGVO+Y+M21w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRzBPdGp2d0k0RzFWNE94
-            dWRlVDRlTDMyclNMMnQ4UE5sSTNsRzdMbm1vCjZFZnEzbStzU1lyQ2xGOU5DK3No
-            RU5jTGJra0NuQWhxakVQMDZMRSsxcG8KLS0tIE9xOThadmRISWRLb2tmeGZqWkRW
-            RFRxbzdKa0MwRDlqOC9ITjBkSDV1Z00KI0Iq7DnOBGNmvx3RZvwdG4KYcKKgUQbB
-            myqlctokOU3cKkGLVdVn+dYUsYqU814oIAuwiqQmD7OydIqfhbSQVQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCRXpBbzZiT1ptRzgwZklR
+            RS90SSs2bVM3R1pNRitET09VWUY2Yjh0WjBNCm5qZEhnQWtZY09xTnRmK0xhMzVQ
+            TkppcDVJL1kxamNpd2hmYUZzcWdudmMKLS0tIEtQL2E0WnlSRmNZZlpZajJkVmJr
+            cTI1RmF4dDF1VWhEVHVuNzNCd0ptcEEKkhBXkFIzOspJobsIKglWjwCEUNNjuNec
+            9wx0Bj3Bf3ld2wIIuTaJ6v9zTWbAJCM49FYROcFTJRtN0Qp+HbdTJw==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw
+        - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMEZML0xZRHFQdXJXVm1x
-            elFhWnorOTB4RXFES0VCZG1KZVBMeCtMd3lzCmJFZnpZT3BUeEVVaUJEeXc5djN0
-            N3d0ZzJ0UHNFM0hpTS85T014VUwyY2MKLS0tIGVremFqNGh2YkNCWkNYQnNiRy93
-            WS9RVW1VcXRXVjlaeE9ZNHhzaFdabWcKUbNHbMPw4O+sDjWk8ziRPoTRzzBF07ul
-            TRVXuiIAzfAXcf4Z9P5fyY0saPJhBijaurzdTD0JUP5LZh8jreWJRg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Si9UNTRENzNGYnJ6R0dJ
+            Y2dOU1FLQWNXZHJNOEFjenptMk0rbUIzWHpRCmJ1OG9uTjA4bm1SMjhyQW83OTQz
+            YlYxV0IwQXV5b2J1d3lIckpXaWpBUFUKLS0tIFNHL2FJenI2NUtqSXY0NzZqcElw
+            ZjhNbmE4WVNJdUNzMzlOZ2dVVW5naVUKzhseAwIS25vYBUkNg5q9N18FKaej5s/P
+            XOgcd+CTLU115QcGCA7pPy+RlcjmGNDQA4CY+qDNGODkq7TnzFgYUw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-09-27T20:37:26Z"
    mac: ENC[AES256_GCM,data:30D/RyuIjhaJkRa4kBb3JK3FOGbbGL0aKAOlPgyNhpPyp7OWY1eYo2uoQSVa6lnjRgCV+YbmquXF6iNzUgWbzUWs6UuOfN+hIb/PKydBgITgVLp1bOfUQs8l2X2feYJ/QatBwr6VMgbBdrshppctSdypc9cTNv5r6sod0QwfpHA=,iv:uhwGM/bru/Z3UqnmOUHImhQkNm97zad+aH+VNXKy9m0=,tag:Zpdgcp2lPBNP4FjlTeXtKw==,type:str]