flake.lock: Update

Flake lock file updates: • Updated input 'catppuccin': 'github:catppuccin/nix/07beb389d69a52c4dd5895da9553463c3740a26a' (2025-04-04) → 'github:catppuccin/nix/75c26f52a685291fedfd3a9c93f5cbe80a5d3321' (2025-04-11) • Updated input 'catppuccin/nixpkgs': 'github:NixOS/nixpkgs/2c8d3f48d33929642c1c12cd243df4cc7d2ce434' (2025-04-02) → 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/8aa1c071bbcb8a270bb841e4797a0d14528709d4' (2025-04-11) → 'github:nix-community/emacs-overlay/b7b033aeb63bf3f39d928198abc88e1aba7f1974' (2025-04-11) • Updated input 'emacs-overlay/nixpkgs': 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) → 'github:NixOS/nixpkgs/f675531bc7e6657c10a18b565cfebd8aa9e24c14' (2025-04-09) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/60e405b241edb6f0573f3d9f944617fe33ac4a73' (2025-04-09) → 'github:NixOS/nixpkgs/f9ebe33a928b5d529c895202263a5ce46bdf12f7' (2025-04-10) • Updated input 'homeManager': 'github:nix-community/home-manager/f1ffd097e717a8d1b441577b8d23f9d2c96e0657' (2025-04-11) → 'github:nix-community/home-manager/e43c6bcb101ba3301522439c459288c4a248f624' (2025-04-11) • Updated input 'nixosHardware': 'github:NixOS/nixos-hardware/de6fc5551121c59c01e2a3d45b277a6d05077bc4' (2025-03-31) → 'github:NixOS/nixos-hardware/1fe3cc2bc5d2dc9c81cb4e63d2f67c1543340df1' (2025-04-11) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) → 'github:NixOS/nixpkgs/f675531bc7e6657c10a18b565cfebd8aa9e24c14' (2025-04-09)
New pike host
2025-04-11 19:15:24 +00:00 · 2025-04-11 11:08:47 +02:00 · 2025-04-11 11:07:54 +02:00 · 2025-04-11 11:07:37 +02:00 · 2025-04-11 11:07:19 +02:00 · 2025-04-11 11:06:47 +02:00
45 changed files with 646 additions and 492 deletions
--- a/flake.lock
+++ b/flake.lock
@ -26,11 +26,11 @@
        "nixpkgs": "nixpkgs_2"
      },
      "locked": {
-        "lastModified": 1742599566,
-        "narHash": "sha256-xr6ntmiUPXSh9o9mJ7og9vxALMQs1EQhIhWUAO2D1M0=",
+        "lastModified": 1744375180,
+        "narHash": "sha256-s2FmOufSMIz6H0UrGOHJ7RrQfqvhCjUIvk54J8LlZFA=",
        "owner": "catppuccin",
        "repo": "nix",
-        "rev": "5e303e8d7e251868fa79f83bbda69da90aa62402",
+        "rev": "75c26f52a685291fedfd3a9c93f5cbe80a5d3321",
        "type": "github"
      },
      "original": {
@ -83,11 +83,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1741786315,
-        "narHash": "sha256-VT65AE2syHVj6v/DGB496bqBnu1PXrrzwlw07/Zpllc=",
+        "lastModified": 1744145203,
+        "narHash": "sha256-I2oILRiJ6G+BOSjY+0dGrTPe080L3pbKpc+gCV3Nmyk=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "0d8c6ad4a43906d14abd5c60e0ffe7b587b213de",
+        "rev": "76c0a6dba345490508f36c1aa3c7ba5b6b460989",
        "type": "github"
      },
      "original": {
@ -122,11 +122,11 @@
        "nixpkgs-stable": "nixpkgs-stable"
      },
      "locked": {
-        "lastModified": 1743067111,
-        "narHash": "sha256-v9VJXx7525gMH6S7WesJM84Dr76jxRubATuBJn4L14o=",
+        "lastModified": 1744391153,
+        "narHash": "sha256-z69fdabsWBX+l6gwP3amNzUsVhqHa0iyStvxjBAHhvY=",
        "owner": "nix-community",
        "repo": "emacs-overlay",
-        "rev": "5c22a2387d4ac1e1d64d66489e7d3ecb0a30cbcd",
+        "rev": "b7b033aeb63bf3f39d928198abc88e1aba7f1974",
        "type": "github"
      },
      "original": {
@ -245,11 +245,11 @@
        "nixpkgs-lib": "nixpkgs-lib"
      },
      "locked": {
-        "lastModified": 1741352980,
-        "narHash": "sha256-+u2UunDA4Cl5Fci3m7S643HzKmIDAe+fiXrLqYsR2fs=",
+        "lastModified": 1743550720,
+        "narHash": "sha256-hIshGgKZCgWh6AYJpJmRgFdR3WUbkY04o82X05xqQiY=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "f4330d22f1c5d2ba72d3d22df5597d123fdb60a9",
+        "rev": "c621e8422220273271f52058f618c94e405bb0f5",
        "type": "github"
      },
      "original": {
@ -387,11 +387,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1743082807,
-        "narHash": "sha256-qmrCYHVqE6j0TQApfxGx8aRYNdNsqtOrZuH09A+cjTU=",
+        "lastModified": 1744380363,
+        "narHash": "sha256-cXjAUuAfQDPSLSsckZuTioQ986iqSPTzx8D7dLAcC+Q=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "171915bfce41018528fda9960211e81946d999b7",
+        "rev": "e43c6bcb101ba3301522439c459288c4a248f624",
        "type": "github"
      },
      "original": {
@ -464,11 +464,11 @@
    "lix": {
      "flake": false,
      "locked": {
-        "lastModified": 1743151582,
-        "narHash": "sha256-aPtMrs2Nwg4ZCN7GQohQXTuRil1FCSUI4RdLGxTf44E=",
+        "lastModified": 1744302352,
+        "narHash": "sha256-QJQecf/Z1rLZBpVoQaI+EunLX5U7c7uYGER5iw00YrI=",
        "ref": "refs/heads/main",
-        "rev": "b52db5e7c120fdf67e914ba9fec648a461e08614",
-        "revCount": 17743,
+        "rev": "81d476984901d1f00fdcac36a0a8f06cb54048f6",
+        "revCount": 17777,
        "type": "git",
        "url": "https://git@git.lix.systems/lix-project/lix"
      },
@ -505,11 +505,11 @@
    "mobile-nixos": {
      "flake": false,
      "locked": {
-        "lastModified": 1741101701,
-        "narHash": "sha256-Kup8HWWC2AR1j2c9pAjXQXLYmuhyv8sRRfX0o03sNQg=",
+        "lastModified": 1743812405,
+        "narHash": "sha256-BedQ9Z3+nqtp9BRjHjJNPUeLIMVbTsP3Udbz0b1cUn0=",
        "owner": "NixOS",
        "repo": "mobile-nixos",
-        "rev": "8956d72cf8fa9110dcc5fcbc537adee45a8014f5",
+        "rev": "6679fd7a8dd4ccf4aa538b82216723861cfe61a2",
        "type": "github"
      },
      "original": {
@ -569,11 +569,11 @@
    },
    "nixosHardware": {
      "locked": {
-        "lastModified": 1742806253,
-        "narHash": "sha256-zvQ4GsCJT6MTOzPKLmlFyM+lxo0JGQ0cSFaZSACmWfY=",
+        "lastModified": 1744366945,
+        "narHash": "sha256-OuLhysErPHl53BBifhesrRumJNhrlSgQDfYOTXfgIMg=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "ecaa2d911e77c265c2a5bac8b583c40b0f151726",
+        "rev": "1fe3cc2bc5d2dc9c81cb4e63d2f67c1543340df1",
        "type": "github"
      },
      "original": {
@ -632,11 +632,11 @@
    },
    "nixpkgs-lib": {
      "locked": {
-        "lastModified": 1740877520,
-        "narHash": "sha256-oiwv/ZK/2FhGxrCkQkB83i7GnWXPPLzoqFHpDD3uYpk=",
+        "lastModified": 1743296961,
+        "narHash": "sha256-b1EdN3cULCqtorQ4QeWgLMrd5ZGOjLSLemfa00heasc=",
        "owner": "nix-community",
        "repo": "nixpkgs.lib",
-        "rev": "147dee35aab2193b174e4c0868bd80ead5ce755c",
+        "rev": "e4822aea2a6d1cdd36653c134cacfd64c97ff4fa",
        "type": "github"
      },
      "original": {
@ -647,11 +647,11 @@
    },
    "nixpkgs-stable": {
      "locked": {
-        "lastModified": 1742937945,
-        "narHash": "sha256-lWc+79eZRyvHp/SqMhHTMzZVhpxkRvthsP1Qx6UCq0E=",
+        "lastModified": 1744309437,
+        "narHash": "sha256-QZnNHM823am8apCqKSPdtnzPGTy2ZB4zIXOVoBp5+W0=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "d02d88f8de5b882ccdde0465d8fa2db3aa1169f7",
+        "rev": "f9ebe33a928b5d529c895202263a5ce46bdf12f7",
        "type": "github"
      },
      "original": {
@ -661,7 +661,7 @@
        "type": "github"
      }
    },
-    "nixpkgs_2": {
+    "nixpkgsSisko": {
      "locked": {
        "lastModified": 1742288794,
        "narHash": "sha256-Txwa5uO+qpQXrNG4eumPSD+hHzzYi/CdaM80M9XRLCo=",
@ -670,6 +670,22 @@
        "rev": "b6eaf97c6960d97350c584de1b6dcff03c9daf42",
        "type": "github"
      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "b6eaf97c6960d97350c584de1b6dcff03c9daf42",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1744098102,
+        "narHash": "sha256-tzCdyIJj9AjysC3OuKA+tMD/kDEDAF9mICPDU7ix0JA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "c8cd81426f45942bb2906d5ed2fe21d2f19d95b7",
+        "type": "github"
+      },
      "original": {
        "owner": "NixOS",
        "ref": "nixos-unstable",
@ -695,11 +711,11 @@
    },
    "nixpkgs_4": {
      "locked": {
-        "lastModified": 1742889210,
-        "narHash": "sha256-hw63HnwnqU3ZQfsMclLhMvOezpM7RSB0dMAtD5/sOiw=",
+        "lastModified": 1744232761,
+        "narHash": "sha256-gbl9hE39nQRpZaLjhWKmEu5ejtQsgI5TWYrIVVJn30U=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "698214a32beb4f4c8e3942372c694f40848b360d",
+        "rev": "f675531bc7e6657c10a18b565cfebd8aa9e24c14",
        "type": "github"
      },
      "original": {
@ -726,17 +742,17 @@
    },
    "nixpkgs_6": {
      "locked": {
-        "lastModified": 1742288794,
-        "narHash": "sha256-Txwa5uO+qpQXrNG4eumPSD+hHzzYi/CdaM80M9XRLCo=",
+        "lastModified": 1744232761,
+        "narHash": "sha256-gbl9hE39nQRpZaLjhWKmEu5ejtQsgI5TWYrIVVJn30U=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "b6eaf97c6960d97350c584de1b6dcff03c9daf42",
+        "rev": "f675531bc7e6657c10a18b565cfebd8aa9e24c14",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
+        "ref": "nixos-unstable",
        "repo": "nixpkgs",
-        "rev": "b6eaf97c6960d97350c584de1b6dcff03c9daf42",
        "type": "github"
      }
    },
@ -877,6 +893,7 @@
        "nix-on-droid": "nix-on-droid",
        "nixosHardware": "nixosHardware",
        "nixpkgs": "nixpkgs_6",
+        "nixpkgsSisko": "nixpkgsSisko",
        "treefmt-nix": "treefmt-nix",
        "vscode-server": "vscode-server"
      }
@ -992,11 +1009,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1743081648,
-        "narHash": "sha256-WRAylyYptt6OX5eCEBWyTwOEqEtD6zt33rlUkr6u3cE=",
+        "lastModified": 1743748085,
+        "narHash": "sha256-uhjnlaVTWo5iD3LXics1rp9gaKgDRQj6660+gbUU3cE=",
        "owner": "numtide",
        "repo": "treefmt-nix",
-        "rev": "29a3d7b768c70addce17af0869f6e2bd8f5be4b7",
+        "rev": "815e4121d6a5d504c0f96e5be2dd7f871e4fd99d",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@ -3,7 +3,8 @@

  inputs = {
    flakeParts.url = "github:hercules-ci/flake-parts";
-    nixpkgs.url = "github:NixOS/nixpkgs/b6eaf97c6960d97350c584de1b6dcff03c9daf42";
+    nixpkgsSisko.url = "github:NixOS/nixpkgs/b6eaf97c6960d97350c584de1b6dcff03c9daf42";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    nixosHardware.url = "github:NixOS/nixos-hardware";
    homeManager = {
      url = "github:nix-community/home-manager";
--- a/hmModules/emacs/default.nix
+++ b/hmModules/emacs/default.nix
@ -46,7 +46,7 @@ in
      nodejs_20
      qadwaitadecorations
      kdePackages.qtwayland
-      copilot-node-server
+      copilot-language-server.fhs
      math-preview
      emacs-lsp-booster
    ]
--- a/hmModules/niri/default.nix
+++ b/hmModules/niri/default.nix
@ -29,7 +29,16 @@ let
        };
      };
    }
-    ."${hostname}" or niriVars.kirk;
+    ."${hostname}" or {
+      floating-gptel = {
+        rows = "40";
+        cols = "140";
+      };
+      floating-btop = {
+        rows = "40";
+        cols = "140";
+      };
+    };
  run-floating-gptel =
    with niriVars.floating-gptel;
    pkgs.writeScriptBin "run-floating-gptel" ''
--- a/hosts/default.nix
+++ b/hosts/default.nix
@ -92,6 +92,7 @@

      sisko = {
        system = "aarch64-linux";
+        nixpkgs = inputs.nixpkgsSisko;
        enableHomeManager = false;
        vpn = {
          ip = "10.100.0.1";
@ -120,6 +121,33 @@
        };
      };

+      pike = {
+        vpn = {
+          ip = "10.100.0.8";
+          publicKey = "16ctjunXCXDPLSUhocstJ9z9l45/YuJFxlLkpoxChjI=";
+        };
+        extraModules = [
+          inputs.lix-module.nixosModules.default
+          inputs.catppuccin.nixosModules.catppuccin
+        ];
+        extraHmModules = [
+          inputs.impermanence.homeManagerModules.impermanence
+          "${inputs.homeManagerGitWorkspace}/modules/services/git-workspace.nix"
+          inputs.vscode-server.nixosModules.home
+          inputs.catppuccin.homeManagerModules.catppuccin
+        ];
+        secrets = {
+          "pike-wireguard-private-key" = { };
+          "chatgpt-token".owner = "ccr";
+          "cachix-personal-token".owner = "ccr";
+          "git-workspace-tokens".owner = "ccr";
+          "autistici-password".owner = "ccr";
+          "restic-hetzner-password" = { };
+          "forgejo-runners-token".owner = "nixuser";
+          "forgejo-nix-access-tokens".owner = "nixuser";
+        };
+      };
+
      tpol = {
        extraModules = with inputs; [
          lix-module.nixosModules.default
--- a/hosts/pike/default.nix
+++ b/hosts/pike/default.nix
@ -0,0 +1,176 @@
+{
+  fleetModules,
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+{
+  imports = fleetModules [
+    "common"
+    "ssh"
+    "ccr"
+    "nix"
+    "networkmanager"
+    "bluetooth"
+    "dbus"
+    "docker"
+    "fonts"
+    "qmk-udev"
+    "mosh"
+    "udisks2"
+    "xdg"
+    "pipewire"
+    "nix-development"
+    "waydroid"
+    "virt-manager"
+    "ssh-initrd"
+    "printing"
+    "pam"
+    "wireguard-client"
+    "binfmt"
+    "greetd"
+    # "syncthing"
+    "hass-poweroff"
+    "forgejo-runners"
+    "teamviewer"
+    "sunshine"
+    "mount-sisko"
+    "adb"
+    "prometheus-exporters"
+    "promtail"
+    "zerotier"
+  ];
+
+  ccr = {
+    enable = true;
+    autologin = false;
+    modules = [
+      "git"
+      "git-workspace"
+      "helix"
+      "shell"
+      "zellij"
+      # "element"
+      "zmkbatx"
+      "tremotesf"
+      "firefox"
+      "gpg"
+      "mpv"
+      "password-store"
+      "slack"
+      "hyprland"
+      "niri"
+      "udiskie"
+      "xdg"
+      # "spotify"
+      "lutris"
+      "wine"
+      "cura"
+      "chrome"
+      "email"
+      "digikam"
+      "dolphin"
+      "tor-browser"
+      "kicad"
+      "monero"
+      # "zulip"
+      "teams"
+      "obs-studio"
+      "calibre"
+      "reinstall-magisk-on-lineage"
+      "vscode-server"
+      "zk"
+      "catppuccin"
+      "freecad"
+      "zathura"
+      "imv"
+      "libreoffice"
+      "emacs"
+      "vial"
+      "chirp"
+      "sdrangel"
+      "discord"
+      # "ib-tws"
+      "zoom"
+      "pantalaimon"
+    ];
+    extraGroups = [ "plugdev" ];
+    backupPaths = [ ];
+  };
+
+  boot.kernelParams = [ "ip=dhcp" ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    # "ahci"
+    "usbhid"
+    # "r8169"
+    "thunderbolt"
+    "vmd"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.kernelModules = [
+    # "kvm-amd"
+    # "ddcci"
+    # "ddcci-backlight"
+    # "i2c-dev" # needed?
+  ];
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  fileSystems."/" = {
+    device = "zpool/root";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/nix" = {
+    device = "zpool/nix";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/var" = {
+    device = "zpool/var";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/home" = {
+    device = "zpool/home";
+    fsType = "zfs";
+    options = [ "zfsutil" ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/4AA5-7242";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
+  };
+
+  services.zfs.autoScrub.enable = true;
+
+  networking.hostId = "30fc8ed7";
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "schedutil";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.enableRedistributableFirmware = lib.mkDefault true;
+
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+  };
+
+  zramSwap = {
+    enable = true;
+    algorithm = "zstd";
+  };
+}
--- a/lib/default.nix
+++ b/lib/default.nix
@ -13,6 +13,7 @@
      picard = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ1+1z1IsLVJ6aGarMgzw3NbmFKcpYVgdUjl7xDsewxT";
      deltaflyer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPETMwELvGTnhKJbpK0oFs4lK8vm/kV9KdgL9wufYDDQ";
      tpol = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQxHSow2l0TDWTonBPPaGvTgVvMS/xsQOf1nHnvLSwV";
+      pike = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPx3Hy9L8w4mpr5HFcqLOr/wUk/wJeB9HjcLy2tt0U+x";
    };
  };
 }
--- a/modules/ccr/default.nix
+++ b/modules/ccr/default.nix
@ -70,6 +70,31 @@ in
      type = types.listOf types.str;
      default = [ ];
    };
+
+    impermanence = {
+      enable = lib.mkOption {
+        type = types.bool;
+        default = (config.environment.persistence or null) != null;
+      };
+
+      directories = lib.mkOption {
+        type = types.listOf types.anything; # TODO re-use type from the NixOS module
+        default = [
+          ".cache"
+          "Downloads"
+        ];
+      };
+
+      files = lib.mkOption {
+        type = types.listOf types.anything; # TODO re-use type from the NixOS module
+        default = [
+          ".ssh/id_ed25519.pub"
+          ".ssh/id_ed25519"
+          ".ssh/authorized_keys"
+          ".ssh/known_hosts"
+        ];
+      };
+    };
  };

  config = lib.mkIf cfg.enable (
@ -120,11 +145,22 @@ in
                };
              }
            ]
+            ++ [
+              (lib.mkIf cfg.impermanence.enable {
+                home.persistence."/persist/home/${cfg.username}" = {
+                  inherit (cfg.impermanence) directories files;
+                  allowOther = true;
+                };
+              })
+            ]
            ++ cfg.extraModules;
          home.packages = cfg.packages;
          home.stateVersion = config.system.stateVersion;
        };
      }
+      (lib.mkIf cfg.impermanence.enable {
+        programs.fuse.userAllowOther = true;
+      })
    ]
  );
 }
--- a/modules/sisko-share/default.nix
+++ b/modules/sisko-share/default.nix
@ -1,3 +1,4 @@
+{ pkgs, ... }:
 {
  systemd.tmpfiles.rules = [
    "d /export 770 nobody nogroup"
@ -34,10 +35,63 @@
    };
  };

+  services.samba-wsdd = {
+    enable = true;
+    openFirewall = true;
+    # workgroup = "WORKGROUP";
+    # hostname = "siko";
+    # discovery = true;
+  };
+
+  services.avahi = {
+    publish.enable = true;
+    publish.userServices = true;
+    # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
+    #nssmdns4 = true;
+    # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
+    enable = true;
+    openFirewall = true;
+  };
+
+  services.samba = {
+    enable = true;
+    # global.security = "user";
+    package = pkgs.samba4Full;
+    # settings.global = {
+    #   "workgroup" = "WORKGROUP";
+    #   "server string" = "sisko";
+    #   "netbios name" = "sisko";
+    #   "security" = "user";
+    #   "map to guest" = "bad user";
+    #   "vfs objects" = "recycle";
+    #   "recycle:repository" = ".recycle";
+    #   "recycle:keeptree" = "yes";
+    #   "recycle:versions" = "yes";
+    #   "hosts allow" = "10.1.1.0. 127.0.0.1 localhost";
+    # };
+    settings = {
+      torrent = {
+        path = "/mnt/hd/torrent";
+        comment = "hd";
+        "force user" = "transmission";
+        browseable = "yes";
+        writeable = "yes";
+      };
+    };
+  };
+
  users.users.webdav.extraGroups = [ "transmission" ];

-  networking.firewall.allowedTCPPorts = [
-    2049
-    9999
-  ];
+  networking.firewall = {
+    allowedTCPPorts = [
+      2049
+      9999
+      139
+      445
+    ];
+    allowedUDPPorts = [
+      137
+      138
+    ];
+  };
 }
--- a/secrets/autistici-password.age
+++ b/secrets/autistici-password.age
--- a/secrets/aws-credentials.age
+++ b/secrets/aws-credentials.age
@ -1,32 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-LejiskurhcggIU/f+WpXpYAU+5Ct+wgO6qLU4l8Zw991t7+LQoDYdZThQt4aFDRY
-/KyNTJD5+SvobJvPpS0vwJeITL6c6wWmlBhx4WlhsCWlSKGz7jKxw4JpNZamfkDN
-fDt7RKJI9fxoDIJGVi5BjScR7GfryzpXFu5txVx+Hp8sWckl4US9sPxTGxJ/Qbc6
-0QFAO+qnm8FqtZWH1GZiJ2IAqc/sD6FHfd3aKtQ0PTuHoq11L0iSWRAJr/eW2EGJ
-nGEp/y2EUkwDd1z4FcHQHoko7j6f3friNHZH9I2SCALonw+L1SrXHiYgWRx19KAc
-xaLu+VjMUQ8LPN1zW9J8sUQWle1AA08x11EKB29hKmXE9clgY7Jx/zKp3EDgLIbU
-Pg531bppFse8I0xD6TgQ/yWDZfXTIr3y67dPWxjKf82dDxCKJk8nYW9uIAPjLTdk
-MkqWtsiVi0++HNMQoSlZMOFTiPyCGRGovmThpjpPP5GqGBUQmNDdP2hs1ZYoAmw1
-7dlj6PeGF50Pkita966qxbtAX9Ru7fsgYi+E5Mi067fgVSLg1i3Sk1CbSbxqbw5Q
-BkY1851VMgUBtmjsOGdyDTfITFThHOcjd9lzLrloPLeapOQ9Z6k/wJ7f2A5HyPL4
-zTJWZ6zcFBEbfeDtFtntwoaZ247AQAJC9unA2AC0xhM
-> ssh-rsa QHr3/A
-rSEk04k0mOPyll5cN5D9ktP9WTb39cUqFX8EGG8BhIWd9xwO7vF1xWXtCzpDOYCv
-PxfqiwCsNcCCNAd1CWYT52PY6P9zaTOV/ptk2U8nhpi8s6EDdyne3z8zR0SS1Wvz
-53Ml1fUjiTguulzANoRnZtEsaqoF0VPW03wjkTl6XUZUrNMC0Kgq6VP1tmt0kn08
-eGuD/P8BGiaaKAVN1iJK6U58O43Y4uB0od913BgALKsBjtcH4WvHcgcF359YrdNx
-qwQkiWTDjDtuOKm9djuZyuewosRAYsCZmHONmNnMGMVeZbcUipFMHsjeU3CfidaE
-pfxnAqB2G8x1M8qg9w7IiOxH5cH/qcfGk9yIxt25E0pyvaLziYCsKxzhuwnPW5sR
-ZOgIeECljKTywStX13/ze1hlWikj5ej3JerEbKn1WOD8NEV2vPP/9G9EHLJth2fT
-Si+2ZosRyWPmg1M391Dlr99Rjb/mXCtW3XBX9GeuL/puwg3I9QnGo5CQHx+GarhW
-RBcRO9SAYhoQtxba0/0mm80RxKn8Tdbe5ej6yzD7gdkywTArIRM/rMLLyKi2Im/k
-lDDDIjYp+fje0iUaQQO6K+hhW01EnG2HrELdq/VYs01tclGPdK6lI3lloeOXJ96c
-crlJfD+b5tK06w91w89w+itqUPIgZsbiq5qVFhfKyRY
-> ssh-ed25519 /WmILg RogWvabCGwzKFKQ78EVKpnpupZr5tKOXNsL6mpE1pzg
-QQcSAgC6Lb/Fk9eYG1q+o12ty/KyhFJbZyVB+3ANSxY
-> ssh-ed25519 +vdRnA jBfvf1o18lTbKfx2tKMzUJBmws8s5MMwGDlhUDHn5zY
-nZLNNbcy21SXXlTLT1tCRDfvlYOE347p6R4CLmEiWw8
--- xARfOI6GMc1FZ580lD6fGWmk2AjJVIoxsD+YETvcT0o
-mBË'ÂÚ‘ë"q
-űoŮ3»fŁôŤ˝xŇůđn_lÝëG‚'¬U5‡:?˘QźÉ§q-ržÁLTvÇśÓđ~'Š†iÎ{Ç…Učá8Ţ!ó±xí_8P©ąaNxd°UŻ®€ý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+-> ssh-ed25519 /WmILg I+1/kLgE5kycRCq+75V9rIo35aOWpsrWAkbaZDZ+elQ
+5g14cfb+Ig8g9k4mVQ9ar0aycs/8fYMYjZPJZy33fsE
+-> ssh-ed25519 +vdRnA WpaITQ02oRuz8bB+G0sVPCdBzugr9/nLPdsKQptGrjQ
+vbfFxDOlUj3FVKXyoawkXorTmPvY1Z75L4f0cP66KDk
+--- JdH2zcNZJNeRPZNA4EvSMcnbO4nMZy1QT+DyDsZsgOY
+_31ĚđeâżMH´8UůŞ¶á±qs˘có2‡Ú1TçnâľŻ(NV¨
¶Ęr+;7<>ňweMTý<54>Ä|—OĹWö¦ćmĄ»b[Şč±őŽQ'j“€qĘrLG¤¨6a5F>µGjČ
--- a/secrets/cache-private-key.age
+++ b/secrets/cache-private-key.age
@ -1,31 +1,18 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-P7Wn4/FoKxWdlxKlaSW05cajdFzxCZZaASHvHHvzJGxPsX/gmCXpsZ7nFZlJvtfV
-ENGjG0inZZhegfNue/VMiH29ovq9+hjl5o9uZlUBVDoYAU4lthej89CCbbwlbxrT
-AdKurfwWiBPp7N6WQN//TrWuLgyxnUeGV0BdWZjUeS6df20RDCWRcm34MugO4pDh
-S587curSguesGm6N6LF7QpyXyeR00OGNWvh5709EKIveDh7iwGZ+NAvucI7hjxbP
-Q7puN6G/SbBVA5dPQHwP+IAL0I5omeBNx+HLrjMM6ArTUNfMjhbii5b16eTKQQp0
-BIyXh346Dk4RD9i3az8THEOk3TGUh84jCMCTcW/rYGprz4iPaC9LNhIso8wnnGzE
-xaAiIeThrrcRrWBxU6FC1ACRgiSXrI/MgPisTHJqU5AkxcL3N/bd24dXJWj3+ZLa
-iPyhHGCfoPkoyeKLlDVdWzygVHSr5FLH4Dyxv0WOM7MrnkxVD4jQwAtXu8QsB+k8
-2E/KRS0lPmklY5vWgPXq7jnnOztk3OUCaXhJsOo+nAjLlslpJJz9WLryzEY+ojYj
-p90EHuhfnVx/H7J7BpsdWAjN38cFEOsMIC6QDPEa/P43RoejYcebM/i1hsXdz1HK
-3FcimDGmMR9jYoERUlBONZOGn2WuxjPJ292ehaQnXQ0
-> ssh-rsa QHr3/A
-ta6ztr+/tCBmQKGub2ZCB79SrN6Nna3fxStfGaLqgmEUsnM2kAh6Hp9+W3jbFEWM
-5L2mMusmoytYtXcR/JjAK8F199p/TrJifXHTnot6dmHKm428tauFRjMxsbWsaT6i
-X2rqtrIwXW6QEUFuya+WHI6t29aMZipzmhXjpTdcWyorUyGyNo9YaOt5ohRXzTPW
-f3ELf1aYVBZMxXmVC6E4cbH8dOWKlus/TPTcOirJzR0m3KjeAr5CNRct2qIVxixT
-WMViwu9xQgWjcUfra8YKO8LEBf/PaEk5BeszIHt7qwWr9sJt4v+206LNQvW8row/
-sIgdllzVklaqZtkukger7FHkxSasQXLdP1DPE9h4bwSN1H2pEMgJlAVGt8/m4n6T
-w5qUeDr2HV5kuz/kjdJl1hv6Ihf4de6yS2+7jtMN1FnICIVq67A/shsvA/JDNoOz
-kLM4WdgBVsqtGCEfmXQCRbz96yBb+ie3N8raJDKhNwWuQ4f3YJNwpVKmySrfUTly
-WFjWeuTDXv8LwHbUWtzFaXBmoS97EIlRibZqK0caOpmUU+doG03vDlJskfEfBD00
-nKBPTIiKGoQkbnhMl8YMW7uqhZVvJbPtPGUCpq2w87Um0lh5BuvBTPxNEQ26A/sJ
-XDByA5rIZqVIw29CjhBsZptR83nhFSa3OUshxoYR6xY
-> ssh-ed25519 q+UPnA Y8JxsQsN0qxfPDBVhiVuUYL3OImhUc4RyRpxr4Fff1E
-Ai1PLAYzoCrm6H9P+U/jA93IE0Mgc2B71AraDnsB6Lc
--- EAiuid1wt44o2ZGCLWO0tCcWm2ao7CuHrYdGmYx+yFQ
-ƒðE'Ú¨Jý'î”êÈT\¡ˆ…S0:#z<>
-Í×íý®Ù`¥äËµ˜àÍiaG‰…vBs“©…Ú;éÒC×ÉH=Å™‡Nu Ê©ßòR3¯×ŠBz‡Ç…ç†ïŽ»+¡×c†7%†Z¾u›w)jÕ;ø¹iœ²:·•Ås
-KäŽi„a=#/O·)4ªï
+rWU4MBPVO+M7FPMzApYCDMs3hDRNTEH0lCTFiHHRi5GIWVtxRerOfoCh3M++FICS
+vErr1NOhTHgznXSLUi8LROC4CHtPBxJUA97yijzmWmcRRnemm5dUcI6xfsiNPRFZ
+JhMCTgT2USEjHTejVzHBl/kfggpAiFmBX8RvOVwaX1mGhZ4QEGePfl0n1l3KZfsb
+recANprjssuAzvB+Vj20NTgjtlGYV9QmFGPTs3xCy+9n9IUB3NWAdflE3omdndco
+zL8OSCOEXxvrqXaokLbESG1x/RPlT4hNRPBmNB057GJxaC94zOVYc75WwjX3iED5
+f4jczIYWRVwJcA2B1B64dQB7HhX7LOmxNARF4R/d9lao+hXE28IUcIR8e62nDO2i
+jeDV0zv2bwO3q+3FAAz04reR3nILIbPZ7r/fmPjFQNRLNxkRQ3Ba3PtrA14pOptI
+a4LFTCJo3XwMjDfRNckb1s1K84qyXun2VOhVStGBlhoHDM70KalNRykQqL51+GEH
+jZtsj8DM9ErY3oNfrmMDVS4fahb7S0LLsmj08iMLRNfxuUm1X+WO3V3oSI8HF7Y3
+br4+YtKCPPi0gsH03uH757WllNmx+VI2oZuKmt+yEqreb2EtMTywASNANazGd3k3
+jTm+L1qBNmhRWMA7abl05xG9f/nTneaxzSxkraElWIE
+-> ssh-ed25519 q+UPnA RD50yXDxXVYGmYUZ1ORy6zMVaTqBdzKmitvYNdTCXRI
+Yxi5TEquvJO1X7fRR+TkJrxbbc3R7wBKzCX6DNI/5f8
+--- ctmSdUA9UXwm2OpTPTKSOJmOQOonUZ3fJXOSRuWEwcQ
+ƒ›‡¡¶ÛÛ¯ò
+·y»¾^ó2>E
ÙËnAÇLÌÆÍ4bgÂ¥õäþë%Œ½«¨Jö»JElC"ç7/T<>?n!”'LÈIçx6jOùèŽöV¯Ô¤=°ó–Ó‚Ù*¤{—É`ñºQšÄÖO4M.ÀÆ<C380>j±¿AQXjF-“rëëõ™÷™Z<E284A2>6÷'¸ê
--- a/secrets/cachix-personal-token.age
+++ b/secrets/cachix-personal-token.age
--- a/secrets/chatgpt-token.age
+++ b/secrets/chatgpt-token.age
--- a/secrets/cloudflare-dyndns-api-token.age
+++ b/secrets/cloudflare-dyndns-api-token.age
@ -1,17 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-qbtCO62bJ2e8tUAZHoGTjyrbvp/nkh4XUeLJDeuZNVsUWuvmAyrdb43V4x8cZprl
-90ac8YG6xCZ8Jjq8KYV/CtS08HSDLR09om673lrQ5huUYu1kWVUatmH2102mQYyi
-tlRNx8MtYWlrEgh2cw1E24DJhzUILvW13yHfLyYH052Xaj+uXFRj/c7AyYSoOgzQ
-IrfFU5yncmC6IMiO5/S9TGFLpq8zL983JzeZuYKdYXW+MiWaD15nxzsQQIgXI6YH
-K8GYXcugB8O1FisjKw8edYr3bRbHYNNSK1U+v7Wu0ge9f/FXLv2eDKQszcKPxUCJ
-XLHi1A6PyHmGlAvYfbj7Dns7KW4DoMmg+Low6VQ6yORbPlN1bbEcjq0qE6f+e6TJ
-QQT7617PkmL1KVw2EryIql5Cq7ConTNQaaj1118mjBpW91b64vOXOmWZfOzNo+M1
-Cbsb98Q0VyK2dXDMwPNXW1dKxDb1TGOrPCg9jIwGASco98MTeHFV3/G2F8n7aKYZ
-8erixoeKQjyZtNxW2Phq5Wmhjif22qmfJ/+wWvB43CSzLf/79Zcf6Y/qrdqwjzED
-fI3NhbAlZVsywBXQnTpuZlN1CE+lR5h0QtJVDy4CWhj/SbucCWL7hmtG3CW8Covq
-sa0CJMCtfX71m+h8F3v9oXxlg7Mh8j9c9dHGIbzAYFQ
-> ssh-ed25519 +vdRnA 0FOXCOJg0HIZ2yeW3PKHHOQxtJN6d2L1z6qtW74vxXw
-6xthzPbBs09E4iTgki8bxSvp/WhnO6AqrfL8ZEfYrBI
--- eH5jp9jn2nUTrUHVdGK6WF+cyms4icim/UjLByNsUOw
-2ÉØ>eæ†o\îþj¸ïr…ö<E280A6><C3B6>Y·¶3eŸù¯ê<>@qþ.s‹%>yz[9Å/á”„å²!Bµº.lÁKºç4â\ñ* ôN=OÖt˜W°]êÿ›é¾½Õ‰‰¸ˆš6cRö^|H+¹è¤ç~Ô<>‚ù< ¸ðîÓ¸µ§ƒO*ÁŒT€=uïM~šµ_Jæ‚PÞ[±°ªŠ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+-> ssh-ed25519 +vdRnA 23Gviu8hfWCEBPHP7xYIaOx34kFsxJJgJ/BNUDlb9Cg
+ROiMY2gw/rpNBmJnlRVb7Qhi5+8TY3Velj8gEZcaedI
+--- dhmvfQoCjuRUJtvXNI/eCjH0W+IeJm8bFRvYk1JihD0
+qMCĐ,Ý<7F>˝Ôťęě‹9-\‘K<E28098>Jˇă]Á˙J đ˝(ˇSnź°.ńQpá~Z$ó±eŘ"ęí”’\ůŁ'rS’l‰˙uÜ
+UD <äŐŤvĐÚáÓ]|/g[†	W_“Č>-fl•›8|wĘŮŠČlš–˘ÜőB•[\ňá.k(W±{=w 3N}¤qGĎ-w´Mb^‰ŚQ{
--- a/secrets/deltaflyer-wireguard-private-key.age
+++ b/secrets/deltaflyer-wireguard-private-key.age
--- a/secrets/firefly-app-key.age
+++ b/secrets/firefly-app-key.age
--- a/secrets/forgejo-nix-access-tokens.age
+++ b/secrets/forgejo-nix-access-tokens.age
@ -1,29 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-KzSLRxyFMN7W5Qt1uKkq6Kv83/tCQVf1DtjEbXak8DQhEfBH+CCQkVGqq4ainTxW
-0ND/rEUlcVRoPSO12Ba+4ghjk2SedqLdmmleaOpWv5+gQxeHl7LdRTeXoHhUiDvC
-QwDcajIcdRuccAemsoGh1hnpS1M5ONq3/rv7AcPVG/bGrdlp7+PPJtBF3uTXwU7/
-x6viuRvplN/eEAtvKG4ISoM8aUzccfeE0vi0RxXMW2HYJ5JDjN6vHTumHFmw+1tf
-EjDCf81Ddc4+ZF8lubHUzBc5/QmUsNS9cMEI3LOR6SmYhm4NYkqL3O+8YGVjBOdG
-rzGXitzgz3AAJkA3ZvG3HFJ3zYTfeeRxEpiQdjZ8CXc3/f3VEZUCJGrNm7Pidr2f
-WBGQY1RSLnafxNH9TVQrXvAETEnrHUHVzgQpRUEg355u6SqC/oNuz+TOQWU/qeT1
-Kuqowaigpi0QuSYiJP3rIWDUiVc+mwRR/xhL0taLTyb74RI1GnBIGNwLwUpv6ybf
-0VpnfbH4WWygGPDXmKFHZcAh9zFE/P9xdpHAfviVKsSO/aKECrJjgc4hQSeUezNK
-nIzRdtUT50zCEeAKVeAxV1j+L6sP4eW4KTfo3wfJWSTx3eJD9vEPB0HYLka908LA
-+SmSsHJ6pI3ZGARZ5uAC71wX2O7DL2YcnlJkHYJBcjk
-> ssh-rsa QHr3/A
-p5a0cPmR0JE9jrtFgBUSTmi8DhY2Rw5frNvHA0qG6wXqR/7k1qdCMDHxET2pdfLp
-FuEuW7OUFOwREv1Z313LwT5ARfsdNg+uQ/t+h9NmF+ws2uFUyqVqOz9px9pLzjNN
-0qlwxpQg13AX6JQY7NNN4gIHfy4moV0e+iGLXz991XC2fwdTcKGMBeX1hmAnnH0j
-Df4UetHRiCZVJSnMthmK+8dPsRZehzYNYQgm8D3E1fuUtbPXGNKYXQ3Bi8TgGB0i
-1VOQsiWHoEdXnLkYCnBIl01BRp9BXfOKq31ow8w/CuA6wePhp3WrugqV27WGxMp2
-C7SmnNf+nTmpz0L2nwgapM+NqfJUkru3jqE6FC3fvhBuJeB15cDSGdBNtk8AeKg1
-tUMp875C3tsK72s4ivZAgZsgUzhhTZLioamCxkbvD3uDzvf1AEbbkXKBWFSPB+Hr
-fmIz142EUBH7I/VJblC9EOusgi3CxPufriMqtyGz//HeTxJnUfLbO5wvNWUlDm2C
-rkNMQPczurQ4mkxyTz6uCV80D5Z+Q9ABtyzMb8mUYwhMBVOY15nC7e8QNKU3Cnoq
-gps4SRijnZgLNJ1WjS548K0WxxsasJR7gEpbdSwLy0+K/YHYwlyhmG7+LMVGSs02
-mswg4Y+W+K6rOEeYXdPCSdy76V9OhDle7FFOrePHLCc
-> ssh-ed25519 /WmILg DXuUNsdlALUPr3ULUpoEQ5fRlhRkrnUcHTWAxdy7DCY
-+StTEHWk8y+fU+TxXfmh/EoNovME9arXHMu1m1HLeQM
--- VTojICHlhNNmITiRWucloGuIArtXxIV9ttGrK2DROgw
-PcëÌ!&|Ú)«Ò2Mˆ]Pä,§\0äÒ%%ÍOó»2AßÜr4e(VŽm»ž&Âáˆ—²`ºÛ\L¸ÊHnPß
gvp½çt5pÎT‚°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+-> ssh-ed25519 /WmILg J6zdvQoBfhrEdqWc0fu4Btd/0BTxGvvZF4A3DUynaAE
+FcTsenYm8S6xEtB+cxTScU3TFfJq0LcAIEsRnsu3nvA
+-> ssh-ed25519 OYRzvQ SrbSyaa8A373WtB+a3bDkOt4/KzUPNHQvVEW9xaOSzc
+XpuBn9jXaUSSgyuUHKID6PI0wJsKF250qlMctpZGFt8
+--- 6RUGIhuMoK/WwDKg8jghy22j+CM6PDu6Vzp301Yh/Iw
+#sàùÞÙL‰!$»ßãM[2êŸ×Ã0ÆøC…·¢‚,Ÿt†/$_·õ?œ™‹æl4xQ¡6úµ¶%¨Þ¡êsK¡Y;ªƒ]œZ³ÊUE°NŽ
--- a/secrets/forgejo-runners-token.age
+++ b/secrets/forgejo-runners-token.age
@ -1,30 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-P3hgwGmP9M9uTVqkiAzFrqZqyMjafLFFHqHNqP4fsAdbmZmdWudSBnm8TRmSWUWY
-1ONw8ncwtqTfu07ChWzv0RESTWmcOp5afysLCDE/Fz9dByI1iPLxixoAaiA6hncA
-irblHoiXdFVXvX57jTddYX0BMK8lup5EoIde6r1o+7L3/6VwAvM40yZekw6jsZn5
-ViA9ClsiEdvIKV5KVRA6oGBXoRHbvcWrMwGDCU55xSIdpjdoDi/YTQsqnfBMyQAg
-i7FGclkHkpBUQI+8W6l2tqgwTJKQC/E+zVRI3VK+xJyHmpnXzZ4SEHStkB3PnCJu
-fGCg9ywap0dji9Cnvk4PH67c2u3gIlaFZayErVX9q0I6ytnHFcALSyDLFGRnfaHY
-OTpIZ3m9cYcMhpnFCZRvxul5x2OuPEWMiRKoVm++U4BmWTRc314HDo/ZBfl1DAe1
-XtvP7ITpT4YM/3rduqW1kVIpwAB2e/7EBpoJVvsGIBTkQ/jIB/MY3j5CC5JX82C0
-rlF7oT6EsWqbNCIGmIvYGTlpmCOQT2KOLHNKkynBPSC1mPKkBpInSEtx1NHl/Sgl
-NPua8EaV9lF0h0I3GZDXD1T0AQ7AUK8cP2whh2FS2qBlNqOJMfW8hg975gb0cTsH
-IAOvLYeQtOz1YDNwTc3Ctz0+FCHQEJhIuB8aTMuP9SY
-> ssh-rsa QHr3/A
-cxnlH/KtwnL/4TDqg5YQfaBRCSBYpiywl7Hc4r8tbArIgcU9AYhNRzbT4LtLWA8e
-G4DVpE6fis0cw8ubowePCupAxnKLE7cIXydbOJ1w0aukjjmeHNpw23E7F9Flv7ye
-4q7pHE+NL1jQMDf7u377IsC57KDimJufjWXvLjPVdX4eyaH07715s3bU0jgADRS7
-ViV+ccxBPUCkPB9Pdg5GxPOmkduczCZJ8xQhixrnXzA7CgnN9n4uPyihN1GdTbvv
-h/mbGuKjnXo7TQtw9MZRV7j9aQadtpnhYQhIrcV9MEnwCFRD8wFzIcAxUb8qCu/f
-Cmr2ny1imn5PXySDIxMUEEvCF5w2jhqAaJR8AVkJ12LcZ3FhowUwJnVkB2yalnUT
-wDlJ7W8ZBZb2PITDiuY4pzdp3ibK+wmhueNd+rr86n0zVe097+wYbewKZ1/yF3Al
-cDESeaxhU5GbEkSwYSn2W2ofpAX4A/5YnnhnbMlVMH6IvNfJxYhEfGg7vEfdFr40
-yN67cyZY7/QoVmRmd/xhadmA41Z2oOWtcgcms9ALf6hhehO6GYW+mKj+Z4xEMDp0
-P6ntUyuBRbdUez9k9Tbm6NB6aZdXi138JIXKQ2mXhPJbx9B3fN8dOIL6ofyZ3C7l
-FAOQ+TQlu344RgcrJX4w2bRRQJKLM0wXRXWueEXHwlc
-> ssh-ed25519 /WmILg cyT3XEAti9DCnVgmK3TIxKaPnZeBtlyEFxqJsvuwimI
-318xaKk5hK7UoinPt+aVGSIOwPzQHEaLxG/87HIEKTs
--- oZydNo3QihjYRb1k+MuiGKckbC+qBqIR8yTOYP0Fgd4
-š¹Ts^pÛ)‚’AE’ô·±<C2B7>ÿ»|æ‰Q<E280B0>CþÝò}¬Îðv•‰¥
-˜xÈìÍu¹ÆmÎ¦™1¿ù©ŸfÕ+¥„ŒñÂxOV®ÏX®à_
+L/R/OsACkgoALVEEcBhvX+BR8f+zdbhiL0Mq8bSsctkSYfJXuO3jUGGH0SpL1bns
+ZRRtQM43ThirFxS8P0Z15HKyyUCbsOiQta4F26XvZqZ/+RWp+BivAwsGUzmiJZFs
+0gMaq1xrjP34IclWqDTEfhjrMi7Wh1Ccex7qYyfn5BAZAgccDMQ7rHCXC6Ou+L7y
+6JNOU/cYx6vMLX7Br9jxBZlg698SXcfvX3QymuV2kjrvkKeq6gVe9Ju5JeM+EiG2
+bHTE6A8yHe/UZTHxeWMNUkw0JbcUunIBLM87xCE1BdmCfLkUXMRdAhc5axKCtSsG
+/Qtsi6u2ucT+6V49+OLQ7KzrjJ1dqPjY7GgASswZCeg3K7IITO1nfTYywzjkLnYC
+iWUze/IoIVlC2msur4ZVDk6ySJ85yUubIByuteAkFtynBFfeVNcuKBYvs3aO8k9A
+mBL10w+u3hVr1r6N1x98RDnZ5lsQ3Zi6TbaIQxzXfSi4ztv4QR68k3eiQ5X9Fr+m
+yuJ36z6+MCIqiW43I8LU1a22KxYrSqrcvJCyHi6Mnyc5CIemb1tuR9WnnnE9i23z
+DiPHYIYrPYl3UOetADkzWfRU+uAvypi/zvPB3nGZXwXwuuw3BD883OqDDD2jvnh7
+VAO291rzfi9sdfz2v1ezYpgSZZibDq1TqPQjyRgT40
+-> ssh-ed25519 /WmILg NAhEtnM2S0s9CiQNyIALXdkUqT7nuYJsWBrqK2x3dW0
+Rt9IHMYyHG9dV60LXhi/j4hnIU/V0w39PlBcpJaWZz4
+-> ssh-ed25519 OYRzvQ mERn1AOi2HnJjqYi3tzshh8PxL7JPPdxwj0PvOkHel4
+Fb3wrYfVVAucaZRqnzJnnzc3SpiaXY79KFGt7CXLjic
+--- SbN8GRT0Ej22hlS3Oh/nOe3SM/Bcik1FQGGMruI53s8
+
ß/»¡C„Î£]œ¾þ<C2BE>Å¶qM[É„/g"„¨Að’é(9òhY¥àëaæñ$l…\ÓÜeö›++þBà¤L¦¥RÊŠw=ëQrþŠb
--- a/secrets/garmin-collector-environment.age
+++ b/secrets/garmin-collector-environment.age
--- a/secrets/git-workspace-tokens.age
+++ b/secrets/git-workspace-tokens.age
@ -1,33 +1,23 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-l8D9gFFyPNJpXMGJoPt1WNpR/4JDI5rgr1h3kN2kNOOP4nBmE0NtbmgmTrBrAmfM
-EUJPM10unKHWpwC9CcrHOtb6pXsigTcZs7q4oL0y6K7UqoKlcHhtwn39jFrXBE7o
-9onIUOHXqYpXvHg+ZwNlwcf6+M30Q1NJgA1KWkDacHuQ4O05lmTHATy2rOcbScx3
-lKOxP0iVGAE1ZM5dkFnN1waSoIXacbq31U9h57nGg9ZwWqXyFy83KNYxXH8pwwZQ
-6hOjGpbOU/0S/W1L0Kyra/N6J3LsjxkDEcnTGh2bnRtX8z/FcXJIFsRoW13eOCpt
-Z1rM+ebOdTn9hSGg9PQV/EMQnqwo7Bk8nbl/z+bniq3FS3r9xRNhGiJwia0AaSTV
-oyiOkgk8li3YeniAL3wBDbo9r7Xji5mT2MeEpgvuht3MAR0FNmK+Dmi1hl78bUWu
-yj+RC4hkro6yWIUmkCVCwP1SkziXXyz8/tkpsdUGiI5eVPv43Pb9JlDwDBEu64WT
-npdsc7L6Wh/fbq3da0I5LMoNVH7nZNAlDUvdWZI9XdIMvPCheGie1p1i1JpwSfdv
-00WIgQOdTABqahpab3GBXDhxGty1Muifuzp8ktgDjyR2Yrj247rTpa55Ypcuyubc
-tc1typ/8t12OSxS0eNeZtIS0AO08wVVH7skVo1wbFv8
-> ssh-rsa QHr3/A
-Z9y6Vu201Nlwwk+3TeFOoDpukvUkFBuV6JkToEUdrbndnDnSIf0OoNXL4iCYbqnt
-dbR1OYUrEM/k1V/zJqjPRP/gMaCUGvFgX862NDGmzzXGk6wjLtlUWdFSGnScOGFS
-c2ToY1y+MkXunCQ/HxRvaIRA7UhTwrOhnJLITbFH3oQ2cClUINmcgozZLmh6mQvM
-0VmpQUJ5J6wsu1sNXv0nmvCNb0Yb7YWnnA9nDNlxha98wwyRvUOcllMNYvEm2KRI
-OgGaUqRkXPI1WPnOeMY2pIdtwsH+Mr/WXX4yeTLSbWavD5hU0q7axwvuD6VLiwzL
-zxuUGnMzTyvOdDWeZKSKECdE20ZomiMuAGVqJJfPrp9oB+fP2eLwJtYRd9FZvCpJ
-NHr8dDcNla0yu86wPd9+A7gg0jXuYonIxQouoyPCU6ehkq20H2bTj5WXncUr3ykK
-ddFOTV8VK0AsMRnR4f4RRKhEYTrv3e1jHbuhhmrYRFQfwRC9MSk1H1rXM9mCnzKI
-uKVP10+9l98jtbT9jhdUIwFa1Pi+Pzg6qEqVY9Op6qKKqO0cL8PFxYl7kKr18hsQ
-lpKyaDyLU3JmeeBBN+zc9V1Q3IqFMhsB2PaGkpCORkczOQgRLaJHnErjHfuPJy9I
-gMSZcnKlmg+A1Q8eLtqPpvIuWLDt2KbQpaT6YXAWRBo
-> ssh-ed25519 q+UPnA fcSil1+qsZBucOPvkhYpUN27jkivaVWcCLBbdN4JOmk
-YZNIqx7oVBjpwr0Vma/ptzB0h225jmz9i/CPtzAvk4Y
-> ssh-ed25519 /yLdGQ lIwhzVRkYK9wSfj0d2lGGdQX+s4S4cUINe8TbaDRgSg
-r/l4OdWRbl26Lktk+wer3cyGmLNN9QB5rpPoLPxD1iY
-> ssh-ed25519 /WmILg H411Xc0YhBctelzz46HC4FOWWQsPbLJcbi/GbgAHgQ0
-TE5POCRIgSBlgmJNcE9go8LnXSie3+TfR50GwhKKurU
--- TnlU1FiLZrtOsqzbjqVzc5Y/pG6YxqlinedIAh320mg
-±Üć˙t®’‡ü˙§-Y×fß9_ťÝŻGScâ•^Zt„‡ŐzĘťëˇîĘä¦rd¨ź<C2A8>2Ń¶ĆIŤ†ű`őţ]ľn®ič(ĺNzkëq÷T†
+Ok/LGdcecEgDG4Dh4FPaUjokhjQxc+ZJsP3b2i+vf0j9P/OkaSmA0loM2Avxy1rY
+tQ55+74x35Aosaqx03auPVBcWFwI5X/WDBbYYnq+kHH4UpDBuhSY4cL7XPloKHcj
+ZEkc8DnbzWYhygSVV6nL69HhJmnPudZdqKMiY4KO4PdvGaGyMALcOB4iIw4UjQiY
+Pj/pjajRPMRYYRP3u41qw4Emmoniw8ZaoVUpeIvk1Ei8ZtW3GJjyVbwtmJ4Z0fWK
+XxgT0+98+EDbvJ/C6t1pY3Ox1w6bBBymQTvuyi4YnUbF80/fk1fYC2UmBGWSF1Ds
+lPbjbLvC/pV42w+965aqiKCPWWGxM8G9DTNCESFrFX9YxhFT6aVMVq5RcDXcCyDv
+0p9FaH3LuGZb1g0C3HO8IlSBJwOZTwR2/nI+IAoWsbWIZ/avdNXkZxIzLj8zB5C5
+RsASkBrGLJsyMzaA7uRJCRpcT4+ZSo1TldFZBOMH4Pki6G27yFF0+g1BQi6QZ76
+QqornXeeAxElrk8eVujS0HpEcpxR7S7HTf7O81JboBIZnChLrLGT3eCYvs814rOH
+q873iYDfbS0KFfDFDNOBCg6suSFvLfG0YcHPoaNcyXFOfft1UZ2v3YD9Nlr73IBE
+b/Ds8NxxQQvMVG0wHQmTu2BiN/6iiejkwVtmfLVrfr8
+-> ssh-ed25519 q+UPnA +eJ8cMdaEONvCl/FivO1egm9//WUJn7LFl4qq7Xqnxk
+yYy6QxNpPf+14Dx8L6+OaIIGyAWTlAhoC59H2gJPXg8
+-> ssh-ed25519 /yLdGQ lInbsPsqXB/K0cwBsNwGO/bdYsodFz+TgpzWhdiDYzY
+GWsACmm/WjNFhF2iJQxR/GPI/+ONsKFgGHcThoDV3hU
+-> ssh-ed25519 /WmILg St74c241V8gFw/kJr5UckBtGkEmLRlUuCK+XNMGrKUY
+2abU+1HYMb64ZTWQ4X48n9SvzvMheqFtHLIfqcA6anQ
+-> ssh-ed25519 OYRzvQ PcV9evAILedG9x7KWGJnYdhEGkfmtu/kedR4IB9M2Ek
+Opnidp1vp48EOEJRrvJNl/468+EcasZRIIqoyEr7YWg
+--- 63o15vmYf/4lByjTk4j3HCpFddjNB5XxfQQbthXM8sQ
+`àý*O÷°§'h¶ÉÔñ’ßÀO ýÑ:0½?h£æ€gE»d“¥Ào4àcö¾‘|dg™¬¯Xs4vX`q™P¤Œ÷4)š¡æ¡Ï…ñ¨
--- a/secrets/grafana-password.age
+++ b/secrets/grafana-password.age
--- a/secrets/hass-ssh-key.age
+++ b/secrets/hass-ssh-key.age
@ -1,30 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-GTbJsuAbQ3I8g7J7G536vWEPfBH6Aw7Zwl3bmqjw4oGrEmpgMO1fwdj2WNGe6dg+
-+vzlB0NnKtXWtbz77ukNTOnNtwAJV+TxvDh5k6fID/Mkbyc+XUQqyCEnq1Z1L8tF
-tt+oPm3QFK/WZcBZTXmtfVgeCfNUCbQgWL+s7U8QPHoDm4gn5jwazfzVUvcDkJSt
-Q1cqsgg2RR71dtETpjKV81sqj9JstcQPMnsi554Jr8qv5BwOVLBIAjZqdy+EOQcv
-QOSuH09PK0RUqbNHwpnCuG2fbuH4oJT4lspa3Tbv8ygUySxcm073HlgnpGsC2wix
-B+HcoSCO7vYVt5PUdKCPJXb/En+VO/9Rk9aC9oukopZFgaAwv8mVj32padN+Ss/Q
-9Oz1JHB3clmT9Z5iheafIu+CtbCl8ZptcrOeJG7ljDYoJ9blIHYRby3SlAz1qgKq
-KDg3i+/C5+4Wiot8gPKfBZezr2XU0cCyZZK4QhV6SUFaMH6MzR7y/z/kNIlMifku
-I8Ac5s6H+/c3twUnXhfHqVlJXy94+WxvrLIxsY7P30isPDWuzq2iW1y8nYC8sqFf
-POSzmVe4tvRmJ3XLIAb5aiOWZlgHY9d7pQCeOUk2Mn551lNicE8zzQ4AImZ1JlHn
-ZgEnyYHxl0jMIn5ZTemHIoq43EPwmOfFLMQFPAwf8nI
-> ssh-rsa QHr3/A
-lZm+MrSeX8EBi0FyHt/1y/WG/C5xHVd3PTcEimbKApioGzxRv/feeWJB990D/Yv+
-13EyGFZrv19PqDHiZSIE2gcRf1nZTMxvjkXzs+4/3rH/mpCM6JwkmIgOUgMJ583b
-okyK0LAzYGrGh+Yk971wtmdnXk8R/Zt+utLevh+eA4NPabw82/sQ52+rbMQG7FrX
-ARTuUPOexlkUY95w91xzJJ9tAvDLnJZ6RvazFYQx+HhAFYKN2dtv/IzqZS+r9K+T
-AZxkpPfRTGbF+ABDJ4YUtzG/Trrumo7/Nd7U74Kr8ebaF5tv0VAZPZypz6NEJQUo
-79kICP4V1POtoSnwcnIbx2+t45t95bI8zwmRauDG9d0sBlPhf21SbhsR2Bx/AsKB
-SZiXGXpAoWj65dxEg/CQSI9RNHZyTTZH6tYdyRu0mXTb7y4kIzR4R7yZWsp9gYrD
-rgj0A6JPS8A8CdZmMfKo6Pr2JzwwtnEBcVonDdQ8gM7Apj/wCAkwZ+5AV4thd/2L
-+0j1gDqpAfcWngrDO1KnSq66KQqbikJiyuriB42sLuPqp9GkPQPhnpK/nZ4IarbY
-1FBnMtQTjNMk+NzxzPRmKoVq6FVs6V/NXZIXMdRYin/oLzh5z+snaa5DBiDvPbT+
-fQv24w/ZZVb+CxqvFEEEtTxFKXep1fY8x2itA59URVs
-> ssh-ed25519 +vdRnA 6X73NcBbgHQZfLEWMxXBYN53+FflkvnOoS89ljFkPAw
-Lc+M1JrU9ii76ju3U8MpM2JgnHKqGLPnalWiv+fvW3c
--- hck+Hf7FxxdQRBKcMV3p5sdEuEGNtHlINF227dgqPWE
-¹3•ïÓ9’/î¡f·îâ@ ¯pzé|önççn§‡¾îqê+:éI6mFuháI\Çu±¹¨Šõ{°`eý¯ÃÕM‘Í[–µ¸Úwx<77>52}<7D>‚<EFBFBD>v*Ìÿ_ "=M…»eî<03>šñö_2Ýÿ–x‡ávêDðBÀã“„yøì_«
ÿ$¢65óªqÏxpCµ£Òú±	¦¶5è=¯èø†ó
Êq¬<Q¶¯½ÞŸŠs§“³pYÐ,Ó-‡ÁTÇyuÝµïÑ OÇÝ¬Ím,µß.è±ýê¥o	‘«¤…ãpwýœsó§öîbIÏ:² Á×+òá%åò#SßË7¹õþ2Î²Nà¥ÒÌš©¦Râ‹òd©È1Ó8è"UÎÓ'1ùÊû¿¿‚„VW¯U'çüÛÔ#¹á=hÐQ[<5B>`ÔVðÌsŠõEØ¤É·›AØÎ¨
-œ‚O¼Ò
;¨ŒkÙejÐ¥ÜwaÄ	'<27>*v£¼[{CŽ‘J8/¾M
sx;
5<4<>öõ·ØKe[ì£%¨ÿnb»òA9ÌÝÅ%.Ô±…dï²Û³a
+N7YiJVNr1Q4V28AWMSnczchrFXCeoecSQ3EKS6heFm9WaBI7cw5eHaLR+EHeH0w0
+gX9ncgKjw5diZdXQi+J5CeQemoIfkJ3gcQlVj++o4VSSiIZzCNkFlRXEq2nH1O1O
+pC7vX7FkGLQr8fhhkx585FUjcp9zTUpzdlt3kyv9pBh5+wKHo0wmgMtdZHz45bGs
+o6XPGeMS6MQEKpHgtF+AIAFU88ldgxCI/w2cpx0rOKe0AbWmlee29HiJYTCE0y/w
+WyMIO6V8k4UK5tJD4W7qJX6hc6AohrT4YpYUcWFFyc4JaLmEUl2XgsQybSfjlcET
+C+CuLoiwMWjfyXJ9RC37MHBf18WBMSOe/O1Bxq4qNKnUP1W32Tdp6v537/Jpye/P
+ZRaIgEEmTTVm/b89Sn0xaz7CwXc8FA1hb8Ny/tQdccRk9ODjJhzFKx/Ek/RX9E4w
+lxnQ15xy8Q9/Xy8fFJnhVAF8KD1XqZJt6ARYhtET2g0KDmmN0ClelYETDILnZUDg
+W17+YCn7uQvv7ZA+x8a6l7Xxt/kLegoQS7Dc4cqvsSv+MuDT9edCQI2EC66JxHIw
+OHOorqh9/XqmVEFuUv/o2RPpt6wErZw24d7Kdled1Hvg060Dtp8B1th4YRFlaXcy
+yTULJHFE2PgQTRy+EttQMNqFY7pnLkOquKfFjrRsZag
+-> ssh-ed25519 +vdRnA o4pJ/9oWKekb+lZXQdUAx8M5g4geeicqgl9YdmUwqkA
+2YBQtnQjpF1wftdEqCQexnJB1TM7LdMKQ1oSnXXYSyI
+--- Nz8h7k2kSGT5FKmFNo1kLS45tnGii88fSWkN9bk6Aw8
+.GŐßĽżžÜc\5[z	‰Ë-¨—]×˙ň ^N¦Ľ•˙…ě†Kx=Ř›ŽM,‰7Z7Ŕrabš‚ZľřőŃfpĺ»,¬šěhjá”O·rĄPAřPTzźJ9ÍP‡)Ŕ3mŞĹ[ü
+a«d€	™ăJ¦V%ůź—m’QÖJaŘ¶VëÚg„°‚FăŽÓ–˝ÝÂq3<71>9NŰż˘§.S(Î7+—fDŤąźű®!$\‘÷,<2C>ˇ.fk'ö1ŁčÖP—'‰xáżśŠH°HMcŤfe¬¤2
+ňWşüŃ)x<>†kaíÚ{ăD‘Ä‘łĄ=!§Ř/ <20>™Ź÷.I<&a<>uyŚFäźž`5&…9$îˇ8t›řÎLé/„^‚W€§Ëw|~”˝;«×ŮţT»hÍ9˘«ŢK¦÷Ól^¸	© ě¬÷Ć°»<C2B0>ÎĘfÄÓ›ý:9eÝ/Í6SĆíexď[ťÄî‡„‰>ţÂţMúççž~¤)dŽJö"lŇ„šÝ;el˘±É0ď%<25>>qGbxŰ0ńUA¤L"˛aě<61>ął¦Âţ4vĎKˇěM
--- a/secrets/hercules-ci-binary-caches.age
+++ b/secrets/hercules-ci-binary-caches.age
--- a/secrets/hercules-ci-join-token.age
+++ b/secrets/hercules-ci-join-token.age
--- a/secrets/hercules-ci-secrets-json.age
+++ b/secrets/hercules-ci-secrets-json.age
@ -1,33 +1,21 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-WiQKuCmH0qC2ENhLHonWQ6WutfZVQik0LfjLHUkbXEkrBcnoJVgT3LTz6NMqYTDP
-NRMKTjr7sL7fL0hm/Ijs/m4eaQuPHYP6sf/5uMlnfAEyRnXNp4SRw+uK3+yvwb9O
-eqTFKXTRuGm+u7+pJtGjyDoGpbNv9mQ6CG2/FFsl7n/d2ruhiFOir9JiwhLpwzya
-9qSOg4j9j8/+majZcbwbhE+Fn7IRutlQ6Gm/2whOsUsZXTVkP03dnPWrfS/0BxK7
-ATphcYRpbF/56TDM8WZP9IMwx+HTci7vsqh7Ku5Uw607m8+hrGqL1YmNSkrvBv3/
-w1r49H71T6wEr9mAsIkEF3MvvednQiLaLAtqaAcAigNjniKZAjq5nnfc4/uv5VsC
-5meoQ5Of1MTQNAjel62UV5ezn5Coe8N5XhEATltsEom6OSIFnKFRfUWg0HuIDEKR
-lZ4hHvsjgNrt5HRKz/+XbpmNhbfa48j1964QIlKc5QqLXd05dGSFeC9hsnhdOIDb
-Kgwe6dWaDiKxnCVgkwAwKuDF8EFlK4UeQtFt2KyO30yoxFzcb360Mbk5rAA3lglE
-YTbf5Bq4NDVPDuXFxXLG5vy6HunhrkKu8hKPTA+4MnG7W3KKHDVtN6vQZ99ve9eJ
-7qOzn3JaLQSu1HX6Uk5YEx3xW1INFi8vXhLE5pQ4lMo
-> ssh-rsa QHr3/A
-MuqiTZFIhTk74Ujih8ecGWGxo1zfgc7salw6CNCof52xDtsp//ucg5Y2pVF1C3gd
-j8OGZve/4xoAIK/N1l292RwOQ87PMysDTGh1hlbc9kD7mxRHnplkrsQQlYA2Z5fD
-Ii5ovEK0MynQloOgfmFwzuFEiqRIofyhWLB2oq4x2T8JtQhO+JES11gyKS8l9iwW
-KixrUCmLoInfj9JjIPwUJ93fu00R/d34Oh7MbxFaNbDZ+TjwwSIftodtKi1ScNor
-YUhhInk3Tvx0ON+v0bxZ80DH/hKfcLwkU5dn4PS6+GZKC39baThg37nZfqR0qFZ9
-J5VGOwwjtsn3lBvQY/Dlff6aSfkpL7E1V+1YTbIPqmzNJQ6JL44Xh6jPMvtFNW/P
-4nbgXabczB6XiY9kYbbr5q/oTOhOea1P/bSU49nYcRgHggDd50NAFGL/FS5rs9Fv
-vytmcd2V2cEwxTlMx6AYL00GODowRlttZ38hmgfFTMis+aG2T3RK9ZQuomQXTkgJ
-rYsJJgv/sRpYiVRJp+1+EYMJL38HjQfMpkrjEKwLjq1wmy86Dff0nErQtVpI2Xm9
-wlYvCsv0WQDj/k3qQl0JcrG17xUISVGdBLBU+I+NZ5ojDBUVIJq3htIOcthgS+GE
-RhKb1yDJWVOzulCnSRUaBljqdOgKPjScHBvjg+F5ZBQ
-> ssh-ed25519 q+UPnA bqHOKm5e31kuqCD0TGZwol2VKe7Bggx9DAioNk3aSxI
-D8l1Ok1HQYf1nvt6kNqsVLeagQWSowOood6mOqsHBeo
-> ssh-ed25519 +vdRnA aUNc3tu3HCKGt8HL7JiPfuWmVMU1t3XD4ws0ZLbH1jg
-Wb7CfO1z/zzZ0R/roAi34P5sD8qSEaZtQuArkfhV3Bk
-> ssh-ed25519 /WmILg jLur9CKRWK6vqUBSEe+U0qOHFgGO7IMxbullvVQf7Hg
-ZCY3zIW0YHFNqNWZeOBPUr3C0VvCE66UUih4ZibBUl8
--- Vcofpjjyfd4tAAuq5PXh54QFAV3mod76Ymzr3OhYeFY
-µÞ|Â’×¬ÝÖ÷êM€“†µÈÓN+»<>ùG  7»<37>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+-> ssh-ed25519 q+UPnA dAJG3yFxT1Wlvq3ksjk5TJqBM+vd1nW+RHo34QDDES0
+JfUs2KXj69iAxmWyeNoOrfHDXgPSEUbfKMEoBcajM7g
+-> ssh-ed25519 +vdRnA fJJ2rtzAd/DooLSPNUK9JuClIbKEPVS3EsgcL7C0rkg
+hVCzOrr1uygpISLkaqlqOw0RBrMfXqmb9GRklXEsBYA
+-> ssh-ed25519 /WmILg ynOzrynzwHU97OIkrSgcKsjtNiqrwVh34qGAppCEnwA
+Vn+2Xix32jItKgwvmUmCMq11AtMYYxu3e/mpDFFDPPA
+--- fkWf31D4YZe6d3X3+o3+V/X9Q6vw6Rs7fPWkF2gvYHU
+%rÙ†[04ü)KgF)z”öuÏžAò4!!#Ö
hG³>
--- a/secrets/hetzner-storage-box-sisko-ssh-password.age
+++ b/secrets/hetzner-storage-box-sisko-ssh-password.age
--- a/secrets/home-assistant-token.age
+++ b/secrets/home-assistant-token.age
@ -1,29 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-Q2vgJ5hIP92ny8yk2gih/ZbmUpz+CdGMeQnX2ekORZAkWSuCQvGnBM9gAvRyhoa2
-2pmPOjP72HaL8fapcdZlcKHZ7IiQuT+3VWekQmIrrMSlSIwVnvasnOBInxA9f91k
-hPR4Np6szQJjMLY7jsgwC0FrrUbgkZIVJp+y+zW+Vk09jdVb84vnBX0QFu/T01Qe
-B0GfAmyZnWnxaKkNyNZb3afd+dpWZiZ79jnA4qOkjfXhhmiW2Ng23XdkHfjS8ekN
-UptlWH8zbBwhzcFCGDkLEMs6/IewozqvzyS4eqmDfwj8saO78ue2R5pE2skNwq/q
-EOneH592KqEIWNFgQPS6P4gjmyWtMnJsWm5SvEcg6mDaE1e6acJ7kb/kYI5zyK6y
-PF7lzqsoge/+ptvbQxTwlvhhJIGob3Wqf2/soep+o6C4Vh87Wt2zhHmKR7Mt4Nrl
-IIs94GU9SDTz1zDOjaBW/msPDagskVpQnu7z3p9iTnBKdxs4WEpugbPZTUVioChA
-c3T8PxLy4pzhm88Rz1KNK9h++uTCPIooGOHVQj+WQpUf+ifWEWiwYEdeTbeutjgF
-jz3Ntl9YOzm/w1JCzOVdOge7dvfx0J6qAFbf4OkcLhf8bv2ljSL429NH1lp3DCHY
-qwN4wlKpOMGThw3pS2SVd6GqINwehrbS4OVobE/kVH8
-> ssh-rsa QHr3/A
-OjdbkVy7w5q3kxFm/4uMbjuIMyVuLSqSWQDvfE1T3vEwkIRJ1w8DOIwahO1qP6CL
-oZOH9A5xnS+UcJOSdTqiN4hHC03uuxx1unh/CHPm6zsSksCDHkLvVVhHMaVINvQz
-YtV/bek9AWdgT6zMke0pv+zzuCqFGLT7Og1k+aCHtECkF3mB6Etm2P7knggJ2BX3
-L9YzsxSO4jj0PBFGX6nHR71dfq2bctik+mKW8LjS1cQ6plOdEsNHUR7s0bwoslrA
-KdD6WOHoEOlxfTLiJmNB0A5pZb+iXJOP+ygrpC6WfJHU8nEWZzglNaVqrv14pieH
-uez3nji2ZRsfkeXZI4vQJJ8EQ4LJtNhqki9+AcDYxX8pPUQs3e77ytcMYUMkhZmf
-p8rC8eXPP69vS+Ia1xyL2nGqPmggZh7iT1VKOC8kXcHX0UB9WZXcJqPeDtQUO6l9
-cbGFSF9GkWfuVya7tl7rnRQVQs0Ko6XjOAFiOF8WA0YFNACV/2wVawH4rJ6Km48z
-Gv+65Zk3yCXP231saE/Ztv3W43XLiJVDuw2RlUFXpJarGqAAZBhSC4qtDAgzHYLU
-CxPrRtoIzOMv4iTzQmjJQFpArOBXU0yWZkaVwn57w6jEzk9NyqTZ02Oxb7DwK528
-F/fQOyw1b3GYJY7igv8+KbB+Bup9QQuvHxuxpRaqnek
-> ssh-ed25519 +vdRnA 2bZe+2cbP6T+Aa1g4lWhnOLkJdT7YqfCxTLKZ6wOKhw
-i0+UOKIioQz01GfATEmNZVdGeIM2QRIiaUyRdqTgXCM
--- +1qA7qnzAo1u6/yQytQoq7MsZ7owcIa5uAqdg8UQ3tY
-•q¨|þÇTë¦iòŽ'Ú«˜¼›^ì%£ø»<C3B8>;^4Ç<34>æÂ‚}+Ô%¯Ï¡Çü~ÄÈØ¢žÏâæ¦E²¦Îª>’ÔÑ€ýÒ0ß%gÆE<C386>õMßgÁ.þFPð<50>ÙWÞÇ €\±¦$Y;2^‘ô‰ò¼;—¡LiØXM@%Áßç\V¤”à¢¼sà¶ö¼®‘$s¼X´–Ô¬±½Ì¢|å°¹¹¦\ÃJÜ¾ÉÞ3°®À€«¿!ûNžCŸ)ÏáÏÆ¿rýQù›ûˆ¾ÆŸÙAQþO0	Ù©‹ÆÄÃ£(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+-> ssh-ed25519 +vdRnA XoYbjZ3p3itVK2buwZZ6WmtQ7m6HButXmsBJ15vG6S0
+Jp0Dxa7DBNKj0caa++21V1IMTcUP69E6YdlXpbbGaoc
+--- CFN1ErdVcKmuqUeKUnW1AGl9+Zg9JhQheVSRlq3px3Q
+DA)=\ý¯á%A!¼òbQ=W¦¦’ûÝÆ!”Ö-<¯â¥*mèÌÚ6¤ûÙÕæýŽÂ²ƒÉW³‹õ‡B²q%@,$û‰\ënâE^âÂD\ZÈŸÆ¿ÒúhfC,|“ë¨W±fþ>\÷øðæ§ôl©‚^`ï÷Ï Åzÿ{mÄO3k8~ëˆ]Š¡–Ó’)‚tÑz½ë3Ívˆ>eÿ½êŒ¤"ª\ÀWwF<77>³¡nT;Ï¿¾oƒÍ„"í´‹<C2B4>‹/M¶ðò¢X}¿ý ÐçG
--- a/secrets/home-planimetry.age
+++ b/secrets/home-planimetry.age
--- a/secrets/hydra-admin-password.age
+++ b/secrets/hydra-admin-password.age
@ -1,30 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-NlF3t9JuPeK0ovrAch1Vn7JFlsTROCw7OneyBq2pYGNBMKYCe8ahdAMtv7AxXEdr
-LMIXeHvhgrKvbz1ZJtw6i+rheEjGVW12nukCCakZEZCDGhNhMDY5lsowgfu18PdL
-ud+D06vpGCviV9dblpBX/WpBYX2BOLqzztCcw+em14cLxlJ3Ocnjin01RIdm8eP+
-eX6Dotzm99cq0l7nuB6FGTlb3xW+Sp67ryneh08F0uSD7c2nibadmmecnXYeh6Xu
-iTYV/qIBB2PArV09BDotkfLh1C+edROXZ4i4MqQCNktaBJrsMzD3/r7/GorcwguV
-OFDKVIgNtISZZ13qKw6GafI8dwkIHjWkzYbPe9OGn9k72NgN5Z0ABCMwkrhj93Le
-Lkke5OpX+X+UBB4FypTVIHi9l4F2xElpzU6h3Cxw6gIdWnOzjOS0KTQa9sMyjVBd
-CjJ757zWSy4OjN93LsoR81mMMmqzXxs3dVLhxGV6gBoA/YzSi6pKqoPmIvI9swn/
-iujA/wq/vkMNEjBR4uRVAU8Iemqfb72duHYVMm5ss7Jl4poXRVV/1zivWSLuGN0Q
-7qB/iRk04WxTjU2ybGUuGe7RoI1AtXS3oYTgYbzm83rBjMy311enb/jv9OCqe5cc
-cmX7cRaXLg08TZMQ2UtEB/MFw8xenKqcPmmWMViSU7Y
-> ssh-rsa QHr3/A
-LC1vc3SXXmYJnuOSwtSkdHT9i75kX9u9A7MlSPU9nf088Xa37uULhd573uI12Xab
-WTJKUZe/ZOMz+8oelwlpipNgMm81osH7lTq6xLkKf2tP76BDtjOAPSVTESsFFENd
-mmp5/lyTYjstjgTufAAw3OOA1IvBdRfGcncX6zBKOtyUmZWB+dU0kkerZmALgPkL
-V+Ab8uph/ToP/ZexIGo7hRO7NUPhwV1A2x0taBz9sKqSDZY6j0d5WIg2WNSlV1VV
-5Hcu2Hjr9UTJxuqTAJD3fK1+l3c3xSzr29j/9QrpUIfn94DFkbTnIrQoBWuwfrYm
-EUMENTaqUIWozFv45NcEAqjAVBS5TzIXzL5YQ6zR7TgRAnbI6HpGXT9GtQ41xPEt
-mgkr1mZ8BU6pi/C+ZY08rwhFEBlEHRHRebhI0xGP+qTEnjFb3bzwXJzy0KHcUo8m
-QcDc7P1768yQq1REA3SsnX6yXXr9Lc3VnaroxVe914l2iJta3ipI6CTXcFTCwgNL
-/m2ZpDMstX+64hhnz4kiV3v2F4tlwi21AlQLpdbuqobJDkXYy5uboPfL97xffn10
-jdhcuCeSv1Wabh/sIl2v4yTNngFpD3Bx738auX1TeTauIZSuk+PwDjyn2xO0SYoz
-7lxK5F8CiCmxKFpP6aPGkuQt+RTLaydqdvLt2wHZTp4
-> ssh-ed25519 q+UPnA hJl5F3KJbhDDY/olYpkzl++bXtFAl5G5oQdFjqSZ/zE
-0jQcyANwEuBYvWhBXvfvgTIiEiPdX47VKBjUBzdtRno
--- AsOTpKHvR7obXINLNmlag5zBsfRip/ykxGphCMbP2EM
-
-"ƒQÞ³s£¯hÍk;á Š³{ŽÐllœ¶:ÞgÎFnÃh	¿”oŒ³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+-> ssh-ed25519 q+UPnA fwloW9Ax04f4U2n1+JJVr5UDj5c0fMXwkPC0bApgvE8
+Bp5VLrqD86eZmg8tQLHaExoU9tx/PgBq4x+fqU89j5U
+--- 0ufXPayRvNFE9cvSosBB837DUWJS932FsZ5M0t4MtR0
+ÿRÜ%®ÎˆµñÉõå²xÌg<C38C>p©¡Zb/¾4ž& õ‡ïÑÄå‘=P³°
--- a/secrets/hydra-github-token.age
+++ b/secrets/hydra-github-token.age
@ -1,29 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-Fe0pelj+N777GlWVTKGO/T9opoAORhVVaJDch+GAoOh5fHk330o2dIAfLBsRSq3Q
-LCPgxpbrXcm4QTWK51eDRvFP5cMLIt7w5yY75j15P4m6q2tgxVMw3jChmcn4MSiQ
-6aewkok0zsw6YFVqSvdVAcQbTM91Wq1lmSk/l7mD0L/m5oIhHw4tApeYh+vc0+ST
-iMnzIt31hAPPt44inEwippSfEI0LeIfXp75TerEEgvx+9vxpBKOPg6mk2wUkGxKE
-V1nJs9IX5xWiGocYx85ZsB60dOQs976y+6RX2s0xFRjcQTf2WmQ1FTToTltWKimw
-zsOs0hCMqz5YRAHmDDRig+v4K523Pk7Bc637uosnYKq5zifTjgSEITTEEKeyfTIX
-yJktN20Lt5icA73+qWy52AqTz87shMvwEpkQA1mfrCyKhtr9y7Q/CAH/UW+M+8mg
-VjcTU+skd6u0Uz8K2/n8zSxYuk/HhD0+w/dN72/ik7bUwt6+GzBGxbFrFPKqF2/2
-3xPTlUVT0PZvFUfAYbUJvfF/eB6z1lFgurJsGcAHAruxqQKwiVMem9ZMFxj/NB/c
-kM45+mRWh1vOrxD63g8UvwKbqF8FfRFZYavQA4gZD7V3zAYpmKl0ee0h6XP51i7Q
-FtLkESoqEWwm9nwIOrxA8VWvCB7ydpSP5+9qkDpiyo8
-> ssh-rsa QHr3/A
-LnrfxxaLe20Jm7nnWJCwynS6fCMhqPwntvpSV/TxKj9UHzpW5Kkjxb4SfdUTbkHW
-Y6bIJJsduktMJ6f6o9+2txNvPoaBRnoLhvpAOrj4ZKJUOePajaG9VIqqJRoQtfYs
-wcxkMdSApqhWPzo176BQH0Su0TwngcVZR2Yodc2rkfJTY9+XEywpTbyhVs4/V6ZZ
-P57kbiI/HtU8StzVG6gQR8oyPR3d571PyOg9zQD0U/0YVgD9plmSoDsT4x4FsJb/
-WkBUy9QdN6ezFSKif2nGK7mp8yJSz1LvWB4TTE34crh3QYLtpxLHBWfkokY1OvuQ
-pesLe78R82GhNoROqrSO23YnkAWnWF8BZsOo9jRvTXV4BJ4c4DSQtDHY9YdH3oom
-f5vz73CmHSLJQz80cjO1/H3MTT9a+6+Vtkjcj600j5cco1+r3V4Y7aAFrkYtIpTh
-DdYypZVSkSv6UGXZN1w+K/7BxPLNKaSmcJWrvmW2qmKgmW+ev928NZoxjlRD6Bt5
-LV/pJRWZnEUGeirrg7NSqJS3IG3B2z7roicRCnrjjObMlC3VXMsx1Se/4OQdelR/
-Xbr1M3jgCDVV0mbFUvjEaLy/wS2zaY26XPbjhvzdiQU/pItUVJZwrGeIx0cG8kzZ
-vYGCtSeYTcTzvjvmn3TqIOVoiBSuJlzVHx7nh/0I1Yk
-> ssh-ed25519 q+UPnA MyH8Ye10JSgUMF5d2DW02xXz6ZqRm+ZNAuUTIB7WOAU
-EMwBlc4QMdtN1Ozd57f3ozZU+NUZXaSujMRJOsbBAvA
--- uCpRMA5i83F2dzJbs0wLbY7jcm4W+GiMZnmfARFwiF0
-·o–o*|}MřŢ¨vĽA|]z|„RAĺăŤH˝(kľe¨Á<03>+Bę<1BšŽă,¦g8÷iÖË‹É/,™´Ţ±ť)8ŔFÎ®>ˇ@^ôi2Ő—OˇU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+-> ssh-ed25519 q+UPnA PlE1A9nxfSXmkDDtjTFg9yyHCsWAdTIR1s9czofed20
+cfvdwkEdENSMviOTx8Jnog4dEdi+YZ5Exr6Xc1vL9zk
+--- Fj1h5F69adWg0k3FhtKRvsd7LVQC/d8GlOXgtTEdWdM
+@´¡bÃ}ÎÉ5#ÀÔƒñÈÖá£•þëÙ
=o<>e½ø™<C3B8>Œ–‰ØÕ$èo 7ìõOo©¾Ù …ªLE™ïÑ<0B>R#Õ»À{öpIcÛðXÓüÉK
--- a/secrets/kirk-wireguard-private-key.age
+++ b/secrets/kirk-wireguard-private-key.age
--- a/secrets/magit-forge-github-token.age
+++ b/secrets/magit-forge-github-token.age
@ -1,31 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-Gy7+4P/3PLgJPnir/FY164mMTBJ9UpDUxDjsJBiTcgg4i8f5BVyjF2fYPscUPXuj
-4+rPrzlsza23flJkCscmmwTcV/qVFjgNVS9bKtQ8UFEsHQH2K21EjZdmrZFOvSuW
-njCcKwKlGsFLODS5j05tD6JvMnz0uPCZwPDabaQHKiI4YCggbFjiwFbczHY3yfhB
-aE1eEdT/OFOJeQdEdiyOZ3DIRMPUlX07CLHGFoWdjklvPrHEfP4u2+YidrXc0lNE
-TGbE3Pfg195oMOA8E9iCQTcBu+Br2s1+fmcy+QeTgZmIdJ0V5PfrBswT7WUEMEDy
-xwiF95mDLsZ9fx2SXmSBToljMowK5WxKgKOenjmhQ9U8Y60OZ3s85mkI+JCQ2XLz
-kvQA9b3p7C6CSYOU6Cgy3qWhKLWNlO+/vjovrZiy7/9r37O/u6LxWGuuw3qpQChj
-c/BmKPBi9Btm/b+3GIJH13ICGO+taJi3bkWnV0/SXSuRqGmjRBWkDcGSi8JAoKX6
-1676KYR/IUhd2dXzilfEYRQ8m4OwSYDLsBBAoINLqvrSXqFDVaqRuiS5XpzVEmXQ
-Hj1uW2MXyiqdTDt+zbxc5lZNtZjZjxq15jCbLwgEFpbN/3uhEZnj4XkRJZFqUSJP
-2AsV5xuwLva4TTJYA8GrqKcrGMJKSr10KsCTGB/LVwg
-> ssh-rsa QHr3/A
-F2YNuhkUFgx8KrSd4llqqbJWEFhA00EtSCVVBdPn4j6pbnOkhqt7V6ayJYNn3Hfs
-1/W2N8qU8tQQ19tW5tQMu6UYr9aHfW1raNkTMAG1GY73O/o08dVWOHRm6nOT2mOQ
-P8k92gWCCiK7Dz+U/aA1ukX2ddgw0gma4lWYY8SlY7e4p8csEP+1jJFCjrzSxyQA
-VCkhF/4XIHnSw8HxONqhx/V6qRSVHtjMH2TffDuN2O/+p9cjPJky8Pypn15MsWLe
-MJ0SwIhoLuQDo0jzhV0wDbc7gBcYoZes+GPQhxrAfZtN/FWMPXB5So41iZf5A6Xa
-KPn73bXXxBpXoYt9HGQVuyjteN8hutzwyWMEGaLrm8/YBSeZ5ECJZjdQwKHtIrTX
-GZQqpRWu4bJcahka+ajwwacvpW5yBJZfCAyjaKz7XMmemiiQJxX7tshNJllzaRVc
-QOHzFVVrbxnIQAGWH3TMkav+neXqrOyUIu0jrGAtMsGzKwnw0juisC7FJbypbEZj
-HCPRM+AtqEHu1lWfOYtHOkmsnr3W4tIn/EWo7HUvc+FX5rzQYU9Ih80sNHG0RkA7
-g+g+ylgiL18vYY3VS0D3M8yenyZbQgnTEAejUhB9daEJzCexH4zN9iO+2nZGK+qb
-bJBLPT5hz2Jbte8gtjGaM1YcHqe53tjkakw7GwAi3Bk
-> ssh-ed25519 q+UPnA O+16+Um35CFPFkj506piwZ86j53RLGwTfPPOLAcUPD8
-od1Uq94VCnbvSl6hqKoeCgeMIfVstj2smIuU8b1jRUM
-> ssh-ed25519 /yLdGQ EkYYMh/wqk3w5mfEL1sIyeCP7Cq4kNB+mR37i/835xI
-cRA2WfSRaluB1F2WxIouDkYgvr/gXB+yejXFvTtdA38
--- Cj/TVrIh2XcGnGLJsrbbPR1VvhacW8vmYpfDItMLU9o
-Q3äã  lÃË½6iÌ™4ƒ–cÎ‹ƒ˜²O$˜=Â®ç0^"U§†Y¦ì÷C;Êzî£L²@ö¦ÈúPPÑ;¾ª3èÀ
+eey5HLNKSSPfJSfUQn8DaAR1j/cFP+3/9xNips+QWHAgdoZ4LNe+CB/qDp9c3PVt
+CuWtjSb2dBfZg8AfrbZf7olZaZnjJEtSzqVzSHMyEEcF5+iNed2isDPHrG36tLiF
+tAIIpmwb8itf2CuVpm3GqVW600e9NFIR9vCNHrs5qkUS8NypNVzujllhE0SxdnDl
+u9vEetoCFlxqO8O8JZYzBqnN8PFdEOUYVcAFYGs7F4Lbva2pxgbdGCl2xbvhmLsA
+htG5w1N61Rb5wjE/Fa75yTkhADeYjrwgRyjTS4dRG2uJ1GXyrBfBRy0B4X8DVnpu
+UTluCuhty0wK6HVBa2b1K6oNK+jFfn2Bp1EPl6jlbszk6xchmTQxFAWX6m9XrTlg
+TErfyrgLpjl75WaEBkqGynKBYl6JqlzOu2hP/Q+qoRWPpxqsDG+6S1Wv0yOQQuH3
+qoeoLW9DdjjLNzFKJ2sI8C5aaLg/AIKQgVeurPlVzAOj2RP57GLtB5zx3z1TmYcS
+3odGopL9Eu8eh7ONvNv8/Wc5i+mRpjqbl/dFqx7bZ+IMMxl5k+9lMLpLBHDGziuH
+3+fvWa9Y4FGwxa8gZRzsPlEWFRgIVvh15tJUQgPCVsNXvtGKztasuRUsrKjmpTqI
+l5g+dzx8x/nkbro2iXvrHw/CWKyldyc3Pj5MZS2kzOA
+-> ssh-ed25519 q+UPnA K7uWuaJ6GPeWpM3b6hqdsO0/p5JH2rVPYZupUfx65Ck
+PF0AzdXwZuOVeia1zhw6NCS6mfCH1T+jNx964Ve9rcc
+-> ssh-ed25519 /yLdGQ b/7g3+9vhk9EUniS7nSi6we07mzlmfRKep1iKYweH1Q
+NHkRQ3nXQ49wctg1vCWqYHAgIIDo6GXkl7uPseYy8E
+--- I+nIQ9yIhy6ww/VFhErHU+WBTPBlxfuh7xal/B5D+tM
+ü<EFBFBD>Ã=t©±“¹þ@'LUû>”<>ßÑæëJÅ]†îyy<79>Lü+8ö|·Ð^ÛÆÏç<”±Ê ®¯êSS*-ÚÒ„šõNd2
--- a/secrets/matrix-registration-shared-secret.age
+++ b/secrets/matrix-registration-shared-secret.age
@ -1,30 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-LyWGdc/bqB5xeZBpGUdfY+h8A9LnrO1ayy0B6nKs5lS1GkCjOOZYBg/K/KNN3dv4
-Ymgj9ZF8pygy0SRWGLjnJvXv1776koEdSsIrjIBJTylS7J2kuvhZ+hExBk2/63Lr
-nYseyIRG/0XLe9inWfid41IduW6zPtkB49mQptMEEz+B3MI1ZcP92dNuOZzpYIfw
-u24kINWcFOJxXsYICawP5att/EAbtv6y5OGw/V3w9+HiaDtWNaA12FSYPAol1UKR
-aeLCXgFAFopN2d3dNbA176c+z64gHNMnpCYAONcMwwETo9/pJA0Pbpp+g2dHaBIv
-3D38T+GwU5I/dH4T/kHRbhRXIbr3s50jodNfeJJ6Bn8Cf0mCRG1BRmzH9+EpTX3f
-1FqaQ0aDlfikLVqkkjcRhqDy80sskB3Dp/HmbAzn81CMr50pnwnHvzJxSEmCUkJg
-Pf8yiZgIOWBa04NZu5N/V/YyUuL5Pi8Y0tD8d+T3ygAgWUzIb+zVxAgbvsca2x1a
-vbCN1lKDY4cssXCq8xI/g8Y7kw57OMV2k/Ca1q/Dky+BaeM+lsBhBydwV2FRLBH+
-qxq0kXEwBTLCe7+d1aMdk7mTPR4kMrKiBKRRJ//1p5OoUNC8H7F02UOwrr9LFC4R
-Co750gRdYHQIdIhRQrHqadb8LhBMECJ4fsgb6Zc7vBo
-> ssh-rsa QHr3/A
-iraKh+rC1td7LFoREM27z33NGEEjZpRbdOI7PT0Ma0JNocYD257EUYOJSwr60A7y
-6FOiUn3aSRhi/qca+kxuLdq3E8zrad1fMpIcL8bxooswf9OLhqcKsfy1mkAdkm8H
-arRa7KqJqZAJv12MZ8UnQXx43rShHF1PFZsHfd7eKkHfjz4JgMNJVA3/mLMiK/ac
-gc9RNU955HiEqngOrX5web5A84ajjQAVoTmKqQ+sIV2du3e4kcCtrMUv5lDoHFCL
-+L2vREc8PdfVSwWpIAxH5rBRUENnYuJU52SW4yOgomrR6bVqdVB/DzNq6flo9nFE
-jTprgE/Mj7AO6Iv7zACMRKM4oLfjuRLu98Cjv4zE1P/jOrCLM9Uh1H7wsPYjFXKu
-oy/Y72chTYJPTXWL6t7H2Qd8nAqDp1A4xMPBpKrpJCHZwcoX9blOlwbHMu3c7Bn/
-GL/kFWo/Z1gOebBSeaaMpALhn4avDko58wOixh163BwZBC/ePAqZhkLY1Dck3dsb
-RRTJXYJlGCPGKQ+kyyWrj19x3kgPOmhf0ev6Q76E0WG4bw3cwIFTFv5fldD5frSN
-EPyzwP5SNSuKmtMpBuIEQYJoxApDJUjN97v8vfAAsgCkVOuUSD7qORGu9vVHb6lE
-TvFAqLdpCBPvF1b66sC4WeRPWHeBikSD+7A73IRyV1s
-> ssh-ed25519 +vdRnA TxbWEdi2XEMh16Vv0iiwUyYuuTKzpwL8ZILCoBnH5hQ
-8S1hpfBI8vc+Gqk8kW4ZlvrLuYe0g4f7Uad+DBVel0U
--- BQ3vUfo8FPKjIPIQ3Rztw6bpLAAejuWXWozFla5hfDY
-–sÐRTÓ
çÊ1†]ëWV×Â‰60sÙ‘•œ$®ÙI®%<25> /hâNG'cÔ
-bä*‹ŸeXÏ]ß5UÎ‹ÉG‘;<ÑµøÛ‹ "cu¸RÓ4ÚŠØÔÅ³•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+-> ssh-ed25519 +vdRnA KkRZ1VgAc/You8Pv3lvrXqa7JrTbUtjT9xtZrW0LtHk
+ZCPmTQCTOYg1olWelLDNjzjgueouf9cHIp3TNAU252I
+--- WEpHzH/7Eft0WeztVXOxPYSk2Op9ptrNfy5HNDQXLxk
+D‹'ž€=#Å‰eÜÀ‚f³‚ˆUI”ÞSÓvoØ4÷ÞÃzVhi"…ÔÈa´?qN./ÆrES]»€–ÌPã·
Ce©6“k\¬¢µb^Þá/ƒ2w‹e
--- a/secrets/matrix-sliding-sync-secret.age
+++ b/secrets/matrix-sliding-sync-secret.age
--- a/secrets/minio-credentials.age
+++ b/secrets/minio-credentials.age
@ -1,31 +1,19 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-E12H0QXFFjXnEV7aCEg3O40q9BSrFndat5RnprDO/4cIvW9EDi28WL9vAylS+AsP
-42SaqwpFgEM1x7yAfhR0Say4s31WNE4U6ZbJ69GCTDgo1/BLUb2G/ZDAD22la833
-ZFJ5kkumuoQAn8U9CHQlhKmkngyCcpOUuKh2PQhnYRbTFLpGPgazRVjCPGXhP8zB
-29+bV+Ona2LhEUfMNYCI7sQsD2llZr3AvJy6lT0+kfn3+rWOz2Ef2VAhuxNEOmlZ
-Rj7hE/26JFLObWupfHRye+tuW9CMd4zDHo+oQwbmX3Z6TyF/HGIqMdUNhQgRcNY9
-qBO/O6URtMOK8Ep3dexkarpI+BswFDfF4CxqdQMySvgjlc4AI7WaUXYJ3yolcdPn
-NrNhHbBjOthNpsFCgpRxUo32fZM0+Hn+1acgxM0+PqHynLJ3uCKAsLFcfcYN3Iux
-43vy+VZfSaVAknSilXMz+5KmDlP9KD25+CzAqOkSttrARVAUDY8y48IXatd7oyPO
-i7mFQU0YeGWNXIfkqH/XTyUauNVpLB2/P1b/8NJ2l6qbsVu+t5NRlaGPnR2Itepu
-gnFE7MJ0RwOdpsLOQwIWEbu3dN4Qsi3KBiComwiVwlj+8201f0znGPixD6qX9S0I
-IS/J1+TUphqiAq1Cfeck2WGu1i9/YGubkGCMt9l4kqA
-> ssh-rsa QHr3/A
-gkL2UE+aQUw+/SxW1ruRn92QHzZcV5s2NMjDEfae6CG8ehSxmi5smkUb3PBZuQ5L
-6bSAu8naXJ3nGlB9IWqj+A5jIO+MmwNVYUsvTgPLHFb4Uy8kdqykECNkgrtqqJrd
-3ZFBmsYZEPJNam7BbKN6KThdzYRyE3fHEFMGnVUS2suVH8jhrJylvCa6FZMFu/QP
-uFMwHl/JiEifCxtlpTqjzyPPVYDI6e/lFdUv1TDCsPB+bF9OoUM4LWizLHdiN1Vu
-LfZ8xgUipsqrEbArkd1Dlo7FpDhYotu+9lioSyn0aAIVxr8ZwpB5sT9e4F9gVRBx
-nRWFhxNmWZtTwW5nGugftYwZqy+F0D88u6VBhuxJR4UUP78vg+suDKBHJA9GXfda
-VhOKDnyhVDpLC5F7SL87U0muNIMCAGZSkHRaVk2V1dXEbZqMWdmSxCxjqNpC/2by
-AO/SgZD0+Mg6MWYk3caLW+zhWyEMwXvkFcCD6ubDg45Jwv4J22+U643qE+fjiHZH
-E41GfJRcgzYC9AYf0ZYVSeveOxh6SWr9SkaZ4nSBKSwZhVTWUOwTda/c2oPMAEgs
-XZn8csdXfBP5ikRjqFMpyK2zLjGr47qbb4+X+p+qdPuWvs+P7iS5nxFt35ztVAGn
-X9LaU2RmR0TfOc2GnE2oSODKPecEMgZv0D6Ghz/tOUs
-> ssh-ed25519 /WmILg 5zR9ToCpPvD3gfX/DZkSViSyH/k/mc17r9PkHyTUBRY
-Dr1vkLrZaxQrksmkDNHCIuvcWW66vnfMX6ApHo2VtlY
-> ssh-ed25519 +vdRnA B6tOXNobJUtx1AXG/a2rGb7a2lTXox3b6CvsNg9AhyI
-M6VWGHl07La5b4xfLa2fq1fPn8rM8ZER36HVIiMSctE
--- ZYI6+FsdFDX4gXbp/tfcmGdN4mZM6CSuYB+C62M+JVI
-×Y +ßí¡X¨¤¨Lsºz\Û‰Ç/°:—žŠåQ_PBÒ‘£%Ý"¸ëB`440ë|DáÅYŽ0TÓä<C393>otôB¨<>·k*êm8ç¹<þÎ^ZÅñÜÙvm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+-> ssh-ed25519 /WmILg 0Mp5aS1udTC3rd1cQb/00tWtvcCLwAbbfuz06OQIb2Y
+HNn5QSUBy4K9WDsySx7RYiKi6NB8NdSJJy/mf8xYQhI
+-> ssh-ed25519 +vdRnA Defq5I6VWeVIHIF7GRaPGSnfrsq3nq4aOs/+cXh6izU
+v5dL0ZiDtlXRKi0ATleO+HS0lW3BrA0cWS4497AmEuA
+--- oK6lEGnwkCmPBgwukR2tLRCgeWU3fGcPE5S1+4CbprU
+)ª;(ÿ=
ã7Ø §øP¹ª†í‹òOÈ’¨Üï„·‚¤ÒÛÍQOµÊï×‡Qç¯t•{Ýº¾¡h	9Šø™	~W’=^¹£ãY.ñ `–*%4çs
--- a/secrets/nextcloud-admin-pass.age
+++ b/secrets/nextcloud-admin-pass.age
--- a/secrets/picard-wireguard-private-key.age
+++ b/secrets/picard-wireguard-private-key.age
--- a/secrets/pike-wireguard-private-key.age
+++ b/secrets/pike-wireguard-private-key.age
--- a/secrets/restic-hetzner-password.age
+++ b/secrets/restic-hetzner-password.age
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@ -11,6 +11,7 @@ with keys.users;
    sisko
    pbp
    picard
+    pike
  ];
  "magit-forge-github-token.age".publicKeys = [
    ccr-ssh
@ -22,6 +23,7 @@ with keys.users;
    mothership
    kirk
    picard
+    pike
  ];
  "hydra-admin-password.age".publicKeys = [
    ccr-ssh
@ -40,6 +42,7 @@ with keys.users;
    kirk
    picard
    sisko
+    pike
  ];
  "hercules-ci-join-token.age".publicKeys = [
    ccr-ssh
@ -87,6 +90,7 @@ with keys.users;
    mothership
    picard
    deltaflyer
+    pike
  ];
  "cloudflare-dyndns-api-token.age".publicKeys = [
    ccr-ssh
@ -97,6 +101,7 @@ with keys.users;
    picard
    sisko
    kirk
+    pike
  ];
  "hass-ssh-key.age".publicKeys = [
    ccr-ssh
@ -117,10 +122,12 @@ with keys.users;
  "forgejo-runners-token.age".publicKeys = [
    ccr-ssh
    picard
+    pike
  ];
  "forgejo-nix-access-tokens.age".publicKeys = [
    ccr-ssh
    picard
+    pike
  ];
  "garmin-collector-environment.age".publicKeys = [
    ccr-ssh
@ -164,4 +171,8 @@ with keys.users;
    ccr-ssh
    tpol
  ];
+  "pike-wireguard-private-key.age".publicKeys = [
+    ccr-ssh
+    pike
+  ];
 }
--- a/secrets/sisko-attic-environment-file.age
+++ b/secrets/sisko-attic-environment-file.age
--- a/secrets/sisko-restic-password.age
+++ b/secrets/sisko-restic-password.age
@ -1,30 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-TKW/pV8ANvSWay5wTsFhV0CDSqn/wZAzNRP0WgRzBJbsrFP2/YYkhRHFtwkMjeXm
-qEJPeXYdpgT6+FXq3nfhTaK/AbeebBRWO7dgGfKBosJ6Mc+PMhephrQ+oH6/zbG5
-l5QclAZ4NOfkD3f/nnqog13nKTijHjHcTnEWYZZz8RowaUEkEjo4Xbgw1MUbC8yJ
-khyqZOTVFnfKgcSW5rlnsbrZKkmwYYY8mej27I9AFeSLgE0DOF3OWxrNxuPdxICp
-h/kfQ2lPw75TWX5vj8WKOOxjAvheIiJDAAdfOoroK1BqKAUmpC6HjpC3cJZhrMmE
-Xtob+esC39M8QBO1vUB639/I0AKAMbn3rE617StUr2QyyyNahnOOOPaZplCk/uM8
-Sde8d+VwTuvJXosuxi7Z+lQbeyCg7WmRigRoSiL6+9HcdMtDMDRjtloVq1o+iHXc
-5A99Eeq0D/rBVSDmXKkVpcwLfruWL1v061+K7PPnjKa2CjnoEjAZDfqeQI+OBLZP
-zqJ1CcQUnujYEpyhy4YV1ZpLZYOt48osEhUvG/eFnfymeDeAVAts725uzboN3uX8
-ETM5k0cW1ElSTL0BltRn8hRs8BSVXtKIucRXERomIwK+45ux8DHFS2NQlEHs2x1g
-d4coPbCgMt7nBPYGnAUOYaWyw6dcaCAPNoVVIyUP1ps
-> ssh-rsa QHr3/A
-GM2npxcLnNk81fSJUW9tcDnaKcx42cuxaObl8oCB43GIFm7K5L89FHj4Ww9RUJy0
-V41RQ802OBgudJqOI63DcW7mZ905fqLTnKZ75EJJSGgqjY0EcCOc2Oy8kV/BidWP
-scmDbd+mQ1INuZBr9GBkD1brESh4vHtByPD6wkFKXlVkVTL49EQt8uBw8/0+uF0B
-5a1aRQ09IkVPjluDMy2fc4VpgvkdnuXsMRD8vPk6gGzVlii72htGwYYWtIP9CgpY
-trp85RxVGuqUTULFBOGXcc7YjfE1DWkPoeokCL8m7aVzdasZl+cl/Ick6rJueuQI
-5ESvYKqRTfZ+oA8MapNtAZ7Nl8CT8VJoRyI6IQvPynRXCBK9D6gEAWc5l6Kv15Fl
-73c8Q5I2oIaLOfeMYcZ1bL5Zvspa6Rsb5BtvOuOkacxx7GjMar1G2tUY4W3vFqn9
-yf8/Uc61LU6BYVvFh6DI6TwHp6xp/DrWZYhXCvNfirMn1NSw+8q0EEcIr2sUdkbx
-gf2onMjtRP/Mki0oqkMTXnIsCzL/Y7D13GdouVqz0Ttbg/BEa8RnSaJxDIwQ1Wlz
-VCC+oK/jTr+0pfP+3iR75WuGC0ce+muEN/L29H6wFk4N2oar/r0BYZZ6BtV9I9kS
-8xnIxKvrcJ4O5dYy4f/lMeTRlPp6pz1jjtb6AVcNzHE
-> ssh-ed25519 +vdRnA qQe9nesjyr3dCtSa7xfgsw1RjKx5UGTzg+/XrcDzl0A
-912JZmwcsvsg2D8G9LakTfOa70hCkk4DALZP1fKcw2A
--- GzPDMAdvn0Gvp+gqVd/1EKvMPtqPhIjpVYRDAcvhwaU
-È˜ xó•²
-yÃdæO<>SaÐ)avŠëâGœÎ÷áƒ³MXü%OÍ=¶Ü`~$	ªÁù
+pLExrrrritKhmHonhKGK5X5BZ2u6ywexZoKSqIqG5drChitojcAspTaICrFIlmcn
+nrKVKDiwCvdekIHV0iotyg88FsBOCh/CtyWaay8lhPOwhy/zYNAZbe+UG7yxOAUB
+rGvGzOLfOnk6FHDpsE1GjHtthhel0IYyXkEfAj6TFjzI2TlRXN+VwX3Yu5ko9cgu
+N2t1fzCeTzFZ/4QhRKfjvswl/LUCxplwT/h/i9b6hMtyMpV3TDYXYCxYcLkK3eCu
+n+MAD1ZgxmxExYF11YfKQFZppOoEPdimmCbIlzZKHl4+4Sij3bNTtBtXyk7QjOBr
+1FuwNKjpc05MdDnWYsKCHfqjNDmdvrDB/UYIJqBdPVj3HO8MQ6loRYhoimBQqug9
+HF/G/4PR3gFZXhbXaTih5ZQ5ozp0scEHwtNWK3jN6WF3KqLxkqVjcwMv/picoPRS
+ceT1hNTUoR4PyBTZuRAYvVcdc1z3nkN0FZ08b+PTtyAR7yWlhG1GBLqQmQG0w74R
+iYAT2ZntjzDUki6MCl8cqyfQeysqNk3JYmgDNYW4bsMKVrzlD8ULNYt8Zo1pbL8r
+J3Iydedbv+l3eg/QYv5kPz7/6oSjmNiSB2nsFFvvTdChWSOgNUKUvYhSKuH3JGPA
+iGL9l3m4UBfot9DJqRzW2k4RmckeOTBossrj2YOdmqw
+-> ssh-ed25519 +vdRnA U+pN4CpCDWkcsI153U2rFfRZpVuGSCkHSNgoB1ZssnI
+ew8vABvUVp9er3y81OBY9Wll72WoqESgatcQ55QdjPw
+--- sxKlF/97wNPlrfT3/8zW0ln9IH3m8aka5crPz8W9vKQ
+“MÍ±ô†þ/î®Üöq¥ë}ˆ¥\ÇØ*%øÉkôã
õLæofÀ"èq[©8.€ïA
--- a/secrets/sisko-wireguard-private-key.age
+++ b/secrets/sisko-wireguard-private-key.age
@ -1,30 +1,18 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-cvRfm6k7zHvcAWGj9Kpu0HphlcfmYdZtp21VZUKx5RWH7hcijvSxo2mgk26JVwb9
-D8sB3n0QoLlE5+Ej3bmpepJUCeaUVKhbLiwMzeKGNUxlzGhbOlh+aj14iWM9aWVZ
-kn7f1TlnzhEqn572z7DvKqVptDHiCJ+b3eeGUr9Znhgnp6THvoMIKdr2wK798oxT
-RBnL0bCZDDJUM9rYZb6qF871ijKAqxpCtkjzYfSGKHBcgQ+lsehRQxH7t5O79j/b
-PXIvg5ZZLjjXsUo4tO1P7TCv0L6CheQwlibCHgkwdy0u5VpZ/Za2IyRAxLD803QI
-K0JTjlgOVkPHMWeG7VMgr/DLxn7xhK4ZpnrzglaLe2+wueK+VxxSkInoEgbHWfBx
-vj0MUaY/lHcAs6RJIu+7U2Y6NnV1+kNpE7qqiDRCi/pz2fAAgIbeM64ymkNsNDOM
-J0yv5guQNG+gHWqGK0B4BnNQUANZhhr2tljzGL/PTwDHPXSQ2Qz0tFqHO3VxSHEH
-uyqhAe9oC0IunIcukbPYB8dPPM5LBeLvaT3l63B/I0HosRUK6Q/ts0hZsBgr37oK
-MVuLibW0Trj491UmSNEfLoLTvXv+sHQy83IjtU3Ubwa4fXxpg6ql7WbE9sHJGPR9
-8u4JDj8b9iYAWa6+SUUf+a3y664FRFrMSWWw8uINKCA
-> ssh-rsa QHr3/A
-OCTxQPpTZOSsG7ZIupk6vp62ueJBX9oE2aFF7DRo4uM3fhtrojYSELVrmpvpIxCP
-vepb976mdGS2IE1YQWLfZMW2KMi76jOPNKIFWcnvTRcVVsNwj13xZYrQCGfRx1LJ
-Flenvyr9IL51xhw4fiaO0lBcGJZtTGe4sK9uQj0g1zaFx70t/4ZAu+w0GdGn4df2
-xs+ikBhzWovQNWsDjhXZJuxkds2S43luncAT5sElHOvgw8+wV1zFAwNkjyJnEOj1
-grUnYK7aZdMalu9N+Iz6S89+m+JfRRHsL4fk3570NrdQDfRw1fhEong/EaNOx5+M
-mW64h9ac5TrpwTdJdY6v2etBfnjeDoRmxKPdJBxawSb6baJi2d/7L12wju07bEIi
-HRVvLNTyvPiVB+IPyUUpI+eogMN5tJXEQKwf3K8hiWgXyX7DmubgdBjEqqLfkUjn
-CS27J85QpSdPHFaVr3g7w49LW9Pey/s+zuIpdiGjVh8+fMB+4y4zhKWvVuY0X0n/
-QOxgaCykB/mlR3Prz8bOLEmN11RVVE0WWoV1+x205/sX/THdyWcg1/v0+sx/IaVs
-mh/rUFV1cpVsYluS3VW8/BrjwrKwRwqtgqGu0pG+sKetkeRY0rf7uGfQjlwQJbej
-YcfuuoVy/j7ejnHP9fdEaHrBvVbF9CkH2iDrBJvd2I0
-> ssh-ed25519 +vdRnA pKUeraMwzhFh8kCFPf2Tm7NVvQkX5NPB8emAk/gY1jI
-0q4Kzyxs4Izmo/NpL7HSt26KWFpkhT4TUdbSdMtgHLI
--- /W7t86EbCxe1cpyDfpD9wzk4nqycHHqNiNzaZ17YiJk
-Ç¶üAŸ+n¢TW“¯–<¼^™µzþØpæ{-<0E>¥{§
-m¹'<27>1m¿!¾ÜëlÉ¯u¦Ð'<27>²ãF0ûËéŸ™B¸?ø?$ày¿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+-> ssh-ed25519 +vdRnA 8hlOzHTHf+CajHxLpt56IAqY1D5uODIAeW9w2C2PGG8
+S8qyq6QMLfHd+hnCDwHubuOZobEdtH4tWNCuDqdzSfI
+--- yIbeEytnq5wrKNrxCoOLWEIabw39pTYEgtUx8dwMBmM
+"Y~7ýpýT~ØÕ‚„ÚW6Õ
+¬É9ªƒÃYZ®%LIþŸg<Öß¨‚´fæÚi‰<69>m>øL
þ`³QÔ^Êpšü	êpsÎ
--- a/secrets/tpol-wireguard-private-key.age
+++ b/secrets/tpol-wireguard-private-key.age
Author	SHA1	Message	Date
Seven of Nine	f114b732d3	flake.lock: Update Some checks failed / test (push) Failing after 15m27s Details Flake lock file updates: • Updated input 'catppuccin': 'github:catppuccin/nix/07beb389d69a52c4dd5895da9553463c3740a26a' (2025-04-04) → 'github:catppuccin/nix/75c26f52a685291fedfd3a9c93f5cbe80a5d3321' (2025-04-11) • Updated input 'catppuccin/nixpkgs': 'github:NixOS/nixpkgs/2c8d3f48d33929642c1c12cd243df4cc7d2ce434' (2025-04-02) → 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/8aa1c071bbcb8a270bb841e4797a0d14528709d4' (2025-04-11) → 'github:nix-community/emacs-overlay/b7b033aeb63bf3f39d928198abc88e1aba7f1974' (2025-04-11) • Updated input 'emacs-overlay/nixpkgs': 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) → 'github:NixOS/nixpkgs/f675531bc7e6657c10a18b565cfebd8aa9e24c14' (2025-04-09) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/60e405b241edb6f0573f3d9f944617fe33ac4a73' (2025-04-09) → 'github:NixOS/nixpkgs/f9ebe33a928b5d529c895202263a5ce46bdf12f7' (2025-04-10) • Updated input 'homeManager': 'github:nix-community/home-manager/f1ffd097e717a8d1b441577b8d23f9d2c96e0657' (2025-04-11) → 'github:nix-community/home-manager/e43c6bcb101ba3301522439c459288c4a248f624' (2025-04-11) • Updated input 'nixosHardware': 'github:NixOS/nixos-hardware/de6fc5551121c59c01e2a3d45b277a6d05077bc4' (2025-03-31) → 'github:NixOS/nixos-hardware/1fe3cc2bc5d2dc9c81cb4e63d2f67c1543340df1' (2025-04-11) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/c8cd81426f45942bb2906d5ed2fe21d2f19d95b7' (2025-04-08) → 'github:NixOS/nixpkgs/f675531bc7e6657c10a18b565cfebd8aa9e24c14' (2025-04-09)	2025-04-11 19:15:24 +00:00
Andrea Ciceri	73814bfa47	New `pike` host Some checks failed BUILD aarch64-linux.pre-commit Details UPLOAD aarch64-linux.pre-commit Details DOWNLOAD aarch64-linux.pre-commit Details CACHIX aarch64-linux.pre-commit Details ATTIC aarch64-linux.pre-commit Details EVAL aarch64-linux.sisko Details / test (push) Successful in 2h1m31s Details	2025-04-11 11:08:47 +02:00
Andrea Ciceri	ca6f5e6919	New wireguard private key for `pike`	2025-04-11 11:07:54 +02:00
Andrea Ciceri	205311a514	Allow home-manager modules to use impermanence	2025-04-11 11:07:37 +02:00
Andrea Ciceri	25425b6b7c	Use `copilot-language-server`	2025-04-11 11:07:19 +02:00
Andrea Ciceri	035540b33e	Avoid error in recursive let	2025-04-11 11:06:47 +02:00
Andrea Ciceri	e3849773fd	Fix samba	2025-04-11 11:06:33 +02:00
Andrea Ciceri	d9fad9be8d	Rekey secrets	2025-04-11 11:06:13 +02:00
Andrea Ciceri	1f41b9642a	New `pike`'s key	2025-04-11 11:05:58 +02:00
Andrea Ciceri	27fcf24a80	Bump inputs	2025-04-11 11:05:48 +02:00