Merge branch 'main' into 'jitsi'

# Conflicts: # .sops.yaml # flake.nix # secrets/common.yaml
2024-12-07 20:18:43 +01:00 · 2024-12-07 20:18:43 +01:00 · 0920561e84
parent fe7a6479ab 8b9800d008
commit 0920561e84
26 changed files with 1051 additions and 327 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -1,8 +1,10 @@
 keys:
  # Hosts keys are age keys derived from the host ssh key.
  - &jitsi age18wsmva2ndn774jwan44sl84kckg9f9n2tpd62g7fy6vcq8eg9swq6zsyg3
+  - &apprentix age1yew8ls8j5pq45k5vxfhxh5xvlnesyfktd0mskxmwq4t53vmezdaqax3aqk
  - &neo age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g
  - &redite age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0
+  - &thot age18rv8q7stsn2zv4gxuj4g4ktkeywkg2wngtdwza858jjme8wdvp8s9hkx00
  - &two age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x

  # Nounou keys.
@ -40,6 +42,7 @@ creation_rules:
      - *jitsi
      - *neo
      - *redite
+      - *thot
      - *two

  - path_regex: secrets/acme.env
@ -57,8 +60,26 @@ creation_rules:
        - *_pigeonmoelleux
        - *_shirenn
        - *_vanille
-      age :
+      - age:
        - *jitsi
+  # Secrets for apprentix.
+  - path_regex: secrets/apprentix.yaml
+    key_groups:
+    - pgp :
+      - *_aeltheos
+      - *_bleizi
+      - *_ds-ac
+      - *_esum
+      - *_gabo
+      - *_korenstin
+      - *_lzebulon
+      - *_otthorn
+      - *_peb
+      - *_pigeonmoelleux
+      - *_shirenn
+      - *_vanille
+      age :
+      - *apprentix
              
  # Secrets for neo.
  - path_regex: secrets/neo.yaml
--- a/devshells/default.nix
+++ b/devshells/default.nix
@ -6,6 +6,7 @@ pkgs.mkShell {
  packages = with pkgs; [
    nil
    nixpkgs-fmt
+    ssh-to-age
    sops
  ];
 }
--- a/flake.nix
+++ b/flake.nix
@ -18,7 +18,13 @@
    };
  };

-  outputs = inputs @ { self, nixpkgs, flake-parts, ... }:
+  outputs =
+    inputs@{
+      self,
+      nixpkgs,
+      flake-parts,
+      ...
+    }:
    flake-parts.lib.mkFlake { inherit inputs; } {
      imports = [
        inputs.treefmt-nix.flakeModule
@ -28,6 +34,11 @@

      flake = with nixpkgs.lib; {
        nixosConfigurations = {
+          apprentix = nixosSystem {
+            specialArgs = inputs;
+            modules = [ ./hosts/vm/apprentix ];
+          };
+
          jitsi = nixosSystem {
            specialArgs = inputs;
            modules = [ ./hosts/vm/jitsi ];
@ -43,6 +54,11 @@
            modules = [ ./hosts/vm/redite ];
          };

+          thot = nixosSystem {
+            specialArgs = inputs;
+            modules = [ ./hosts/physiques/thot ];
+          };
+
          two = nixosSystem {
            specialArgs = inputs;
            modules = [ ./hosts/vm/two ];
@ -50,7 +66,9 @@
        };
      };

-      perSystem = { config, pkgs, ... }: {
+      perSystem =
+        { config, pkgs, ... }:
+        {
          treefmt = {
            projectRootFile = "flake.nix";
            programs.nixpkgs-fmt.enable = true;
--- a/hosts/README.md
+++ b/hosts/README.md
@ -19,12 +19,27 @@ Voici la liste des étapes à suivre pour ajouter une nouvelle machine virtuelle
    
    / $ loadkeys fr # ou ce que vous voulez

-    / $ mount /dev/sdX /mnt # monter le disque dur sur /mnt, usuellement sda. Attention, ce disque doit correspondre à celui déclaré dans la variable `boot.loader.grub.devices` dans la configuration de la machine.
+
+    # Faire le partitionnement (pour MBR)
+
+    / $ parted /dev/sdX -- mklabel msdos # usuellement sda.
+
+    / $ parted /dev/sdX -- mkpart primary 1MB 100% # Si besoin de swap, mettez moins de 100%
+
+    / $ parted /dev/sdX -- set 1 boot on
+
+    / $ parted /dev/sdX -- mkpart primary linux-swap -8GB 100% # Si besoin de swap
+
+    / $ mkfs.ext4 -L nixos /dev/sdX1
+
+    / $ mkswap -L swap /dev/sdX2 # si besoin de SWAP
+
+    / $ mount /dev/sdX1 /mnt # monter le disque dur sur /mnt, usuellement sda. Attention, ce disque doit correspondre à celui déclaré dans la variable `boot.loader.grub.devices` dans la configuration de la machine.

    # On configure maintenant la configuration réseau
    # Vous n'avez besoin que de configurer le minimum nécessaire pour que la VM ait accès à internet

-    / $ systemctl stop dhcpd.service
+    / $ systemctl stop dhcpcd.service

    / $ ip addr add 172.16.10.XXX/24 dev [interface] # Faites attention à ce que l'interface réseau soit la bonne

@ -54,7 +69,7 @@ Voici la liste des étapes à suivre pour ajouter une nouvelle machine virtuelle

    /mnt/etc $ nixos-install --flake "/mnt/etc/nixos#<VM>"

-    # Mettez un mot de passe quelconque pour le super utilisateur, il sera remplacé dans tous les cas.
+    # Mettez un mot de passe quelconque pour le super utilisateur, il ne sera pas remplacé. Pensez donc à le changer après.

    # Vous pouvez maintenant redémarrer la VM et vous ssh dessus en tant que votre _user.
    ```
--- a/hosts/physiques/thot/default.nix
+++ b/hosts/physiques/thot/default.nix
@ -0,0 +1,43 @@
+{ pkgs, ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./networking.nix
+
+    ../../../modules
+    ../../../modules/services/nginx.nix
+    ../../../modules/services/restic.nix
+  ];
+
+  networking.hostId = "bbdd1133";
+  networking.hostName = "thot";
+
+  boot = {
+    loader = {
+      grub = {
+        enable = true;
+        zfsSupport = true;
+        devices = [
+          "/dev/disk/by-id/scsi-3600508b1001ca2198968a17f65ef3963"
+          "/dev/disk/by-id/scsi-3600508b1001cd540705e8551011ec02d"
+        ];
+      };
+    };
+
+    zfs = {
+      extraPools = [
+        "head"
+        "backups"
+      ];
+      forceImportAll = true;
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    apacheHttpd
+    restic
+  ];
+
+  system.stateVersion = "24.05";
+}
--- a/hosts/physiques/thot/hardware-configuration.nix
+++ b/hosts/physiques/thot/hardware-configuration.nix
@ -0,0 +1,66 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ehci_pci"
+    "ata_piix"
+    "uhci_hcd"
+    "hpsa"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/backups" = {
+    device = "backups";
+    fsType = "zfs";
+  };
+
+  fileSystems."/" = {
+    device = "head";
+    fsType = "zfs";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/8E4A-8E9F";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  # networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno2.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno3.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno4.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp4s0f0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp4s0f1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
--- a/hosts/physiques/thot/networking.nix
+++ b/hosts/physiques/thot/networking.nix
@ -0,0 +1,52 @@
+{ ... }:
+
+{
+  networking = {
+
+    dhcpcd.enable = false;
+
+    vlans = {
+      vlan3 = {
+        id = 3;
+        interface = "eno1";
+      };
+      vlan10 = {
+        id = 10;
+        interface = "eno1";
+      };
+    };
+
+    interfaces = {
+      vlan3 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.3.14";
+              prefixLength = 24;
+            }
+          ];
+        };
+        ipv6 = {
+          addresses = [
+            {
+              address = "fd00::10:ae16:2dff:fe76:290c";
+              prefixLength = 64;
+            }
+          ];
+        };
+      };
+      vlan10 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.10.14";
+              prefixLength = 24;
+            }
+          ];
+        };
+      };
+    };
+    defaultGateway = "172.16.3.99";
+    nameservers = [ "172.16.10.128" ];
+  };
+}
--- a/hosts/vm/apprentix/default.nix
+++ b/hosts/vm/apprentix/default.nix
@ -0,0 +1,33 @@
+{ config, lib, ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./networking.nix
+
+    ../../../modules
+  ];
+
+  boot.loader.grub.devices = [ "/dev/sda" ];
+
+  networking.hostName = "apprentix";
+
+  security.sudo.extraRules = [
+    {
+      groups = [ "_user" ];
+      commands = [ "ALL" ];
+    }
+  ];
+
+  sops.secrets.root-passwd-hash = {
+    sopsFile = ../../../secrets/apprentix.yaml;
+  };
+
+  users.users.root = {
+    hashedPasswordFile = config.sops.secrets.root-passwd-hash.path;
+  };
+
+  crans.home_nounou.enable = false;
+
+  system.stateVersion = "24.11";
+}
--- a/hosts/vm/apprentix/hardware-configuration.nix
+++ b/hosts/vm/apprentix/hardware-configuration.nix
@ -0,0 +1,45 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/9d40d40e-4b3a-4740-9773-6ac23df546ac";
+    fsType = "ext4";
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens19.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}
--- a/hosts/vm/apprentix/networking.nix
+++ b/hosts/vm/apprentix/networking.nix
@ -0,0 +1,65 @@
+{ ... }:
+
+{
+  networking = {
+    interfaces = {
+      ens18 = {
+
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.10.150";
+              prefixLength = 24;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "fd00::10:0:ff:fe01:5010";
+              prefixLength = 64;
+            }
+          ];
+        };
+
+      };
+
+      ens19 = {
+
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.3.150";
+              prefixLength = 24;
+            }
+          ];
+          routes = [
+            {
+              address = "0.0.0.0";
+              via = "172.16.3.99";
+              prefixLength = 0;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "2a0c:700:3::ff:fe01:5003";
+              prefixLength = 64;
+            }
+          ];
+          routes = [
+            {
+              address = "::";
+              via = "2a0c:700:3::ff:fe00:9903";
+              prefixLength = 0;
+            }
+          ];
+        };
+
+      };
+    };
+  };
+}
--- a/hosts/vm/neo/hardware-configuration.nix
+++ b/hosts/vm/neo/hardware-configuration.nix
@ -1,21 +1,32 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [
+  imports = [
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];

-  fileSystems."/" =
-    {
+  fileSystems."/" = {
    device = "/dev/disk/by-uuid/89589639-21f1-4899-97e9-d1de6eb16d45";
    fsType = "ext4";
  };
--- a/hosts/vm/neo/networking.nix
+++ b/hosts/vm/neo/networking.nix
@ -6,17 +6,21 @@
      ens18 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "172.16.10.137";
              prefixLength = 24;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "fd00::10:0:ff:fe01:3710";
              prefixLength = 64;
-          }];
+            }
+          ];
        };

      };
@ -24,27 +28,35 @@
      ens19 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "185.230.79.38";
              prefixLength = 26;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "0.0.0.0";
              via = "185.230.79.62";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "2a0c:700:2::ff:fe01:3702";
              prefixLength = 64;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "::";
              via = "2a0c:700:2::ff:fe00:9902";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

      };
--- a/hosts/vm/redite/hardware-configuration.nix
+++ b/hosts/vm/redite/hardware-configuration.nix
@ -1,27 +1,37 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [
+  imports = [
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];

-  fileSystems."/" =
-    {
+  fileSystems."/" = {
    device = "/dev/disk/by-uuid/6aab06d9-2d09-4929-a680-719c6818a663";
    fsType = "ext4";
  };

-  swapDevices =
-    [{ device = "/dev/disk/by-uuid/24f88af8-323d-48e3-8872-402b8bbbdc13"; }];
+  swapDevices = [ { device = "/dev/disk/by-uuid/24f88af8-323d-48e3-8872-402b8bbbdc13"; } ];

  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
--- a/hosts/vm/redite/networking.nix
+++ b/hosts/vm/redite/networking.nix
@ -6,17 +6,21 @@
      ens18 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "172.16.10.139";
              prefixLength = 24;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "fd00::10:0:ff:fe01:3910";
              prefixLength = 64;
-          }];
+            }
+          ];
        };

      };
@ -24,27 +28,35 @@
      ens19 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "172.16.3.139";
              prefixLength = 24;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "0.0.0.0";
              via = "172.16.3.99";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "2a0c:700:3::ff:fe01:3903";
              prefixLength = 64;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "::";
              via = "2a0c:700:3::ff:fe00:9903";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

      };
--- a/hosts/vm/two/hardware-configuration.nix
+++ b/hosts/vm/two/hardware-configuration.nix
@ -1,27 +1,37 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [
+  imports = [
    (modulesPath + "/profiles/qemu-guest.nix")
  ];

-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];

-  fileSystems."/" =
-    {
+  fileSystems."/" = {
    device = "/dev/disk/by-uuid/49b72b3e-4c52-46db-8655-d7e3d93c1c56";
    fsType = "ext4";
  };

-  swapDevices =
-    [{ device = "/dev/disk/by-uuid/98accdb0-7e99-4280-9fb2-43ccbbefaeb8"; }];
+  swapDevices = [ { device = "/dev/disk/by-uuid/98accdb0-7e99-4280-9fb2-43ccbbefaeb8"; } ];

  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
--- a/hosts/vm/two/networking.nix
+++ b/hosts/vm/two/networking.nix
@ -6,17 +6,21 @@
      ens18 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "172.16.10.135";
              prefixLength = 24;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "fd00::10:0:ff:fe01:3510";
              prefixLength = 64;
-          }];
+            }
+          ];
        };

      };
@ -24,27 +28,35 @@
      ens19 = {

        ipv4 = {
-          addresses = [{
+          addresses = [
+            {
              address = "172.16.3.135";
              prefixLength = 24;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "0.0.0.0";
              via = "172.16.3.99";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

        ipv6 = {
-          addresses = [{
+          addresses = [
+            {
              address = "2a0c:700:3::ff:fe01:3503";
              prefixLength = 64;
-          }];
-          routes = [{
+            }
+          ];
+          routes = [
+            {
              address = "::";
              via = "2a0c:700:3::ff:fe00:9903";
              prefixLength = 0;
-          }];
+            }
+          ];
        };

      };
--- a/modules/crans/default.nix
+++ b/modules/crans/default.nix
@ -21,10 +21,14 @@

  # Enable some utility programs.
  programs.git.enable = true;
+  programs.htop.enable = true;
  programs.neovim.enable = true;
+  programs.screen.enable = true;
  programs.tmux.enable = true;
+  programs.vim.enable = true;

  environment.systemPackages = with pkgs; [
+    nfs-utils
    shelldap
  ];
 }
--- a/modules/crans/home.nix
+++ b/modules/crans/home.nix
@ -1,14 +1,32 @@
-{ pkgs, ... }:
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+
+let
+  cfg = config.crans.home_nounou;
+in

 {
+  options.crans.home_nounou = {
+    enable = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+      description = "Monter les home nounous";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
    fileSystems.home_nounou = {
      mountPoint = "/home_nounou";
      device = "172.16.10.1:/pool/home";
      fsType = "nfs";
-    options = [ "rw" "nosuid" ];
-  };
-
-  environment.systemPackages = with pkgs; [
-    nfs-utils
+      options = [
+        "rw"
+        "nosuid"
      ];
+    };
+  };
 }
--- a/modules/crans/users.nix
+++ b/modules/crans/users.nix
@ -1,7 +1,10 @@
-{ config, ... }:
+{ config, lib, ... }:

 {
-  users.ldap = {
+  users = {
+    mutableUsers = false;
+
+    ldap = {
      enable = true;
      base = "dc=crans,dc=org";
      server = "ldaps://ldap-adm.adm.crans.org/";
@ -14,6 +17,7 @@
        '';
      };
    };
+  };

  security.sudo = {
    enable = true;
@ -35,11 +39,11 @@
  };

  sops.secrets.root-passwd-hash = {
-    sopsFile = ../../secrets/common.yaml;
+    sopsFile = lib.mkDefault ../../secrets/common.yaml;
  };

  users.users.root = {
-    hashedPasswordFile = config.sops.secrets.root-passwd-hash.path;
+    hashedPasswordFile = lib.mkDefault config.sops.secrets.root-passwd-hash.path;
  };

  services.openssh.settings.PermitRootLogin = "yes";
--- a/modules/default.nix
+++ b/modules/default.nix
@ -5,5 +5,8 @@
    ./crans
  ];

-  nix.settings.experimental-features = [ "flakes" "nix-command" ];
+  nix.settings.experimental-features = [
+    "flakes"
+    "nix-command"
+  ];
 }
--- a/modules/services/libreddit.nix
+++ b/modules/services/libreddit.nix
@ -7,4 +7,3 @@
    enable = true;
  };
 }
-
--- a/modules/services/matrix.nix
+++ b/modules/services/matrix.nix
@ -3,10 +3,12 @@
 {
  services.postgresql = {
    enable = true;
-    ensureUsers = [{
+    ensureUsers = [
+      {
        name = "matrix-synapse";
        ensureDBOwnership = true;
-    }];
+      }
+    ];
    ensureDatabases = [ "matrix-synapse" ];
  };

@ -19,14 +21,22 @@
      listeners = [
        {
          port = 8008;
-          bind_addresses = [ "127.0.0.1" "::1" ];
+          bind_addresses = [
+            "127.0.0.1"
+            "::1"
+          ];
          type = "http";
          tls = false;
          x_forwarded = true;
-          resources = [{
-            name = [ "client" "federation" ];
+          resources = [
+            {
+              name = [
+                "client"
+                "federation"
+              ];
              compress = true;
-          }];
+            }
+          ];
        }
      ];
    };
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  services.nginx = {
+    enable = true;
+
+    recommendedProxySettings = true;
+    recommendedOptimisation = true;
+
+    clientMaxBodySize = "512M";
+  };
+}
--- a/modules/services/restic.nix
+++ b/modules/services/restic.nix
@ -0,0 +1,19 @@
+{ config, ... }:
+
+{
+  services.restic.server = {
+    enable = true;
+
+    dataDir = "/backups";
+    listenAddress = "localhost:4242";
+    privateRepos = true;
+  };
+
+  services.nginx.virtualHosts = {
+    "${config.networking.hostName}.adm.crans.org" = {
+      locations."/" = {
+        proxyPass = "http://${config.services.restic.server.listenAddress}";
+      };
+    };
+  };
+}
--- a/secrets/apprentix.yaml
+++ b/secrets/apprentix.yaml
@ -0,0 +1,220 @@
+root-passwd-hash: ENC[AES256_GCM,data:wHR2Uk5qdfDE2MWs3rkkW72mpeDm1dz5Kg==,iv:SFw5rt4QiJOseWU+CMzbto6CAr6jjnXc8kwnSKByJyU=,tag:zNME8ZxbvWcaEe3WbAWWxA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1yew8ls8j5pq45k5vxfhxh5xvlnesyfktd0mskxmwq4t53vmezdaqax3aqk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbUt2SE01clNUVldyMnIw
+            RXUwbDJCcTZwUWx3cHFLbDBqUit5M3FPVzBnCndkamt1Q2U4THQ4aHlmWEtoRHlD
+            emtVWVY1enl3ODBaTEdxUDJnRVkrVzAKLS0tIDZLWDE4eUFzOFhBV1pjMlJ1c1Zp
+            b0NObmpwMHpTU0YxYk1kN3pFdE5IWjQKQhFRtDHOK/sfV+pNhivQDX8aUf0IVaJy
+            JCT60MR/M0JD8+k2JrwkZxJy+wOqivBuQwdzL68OnslQtGR2E/Slog==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-07T14:51:53Z"
+    mac: ENC[AES256_GCM,data:zgvseloTGUaJje6emsM36vKzYp0flRlV3UIVRMs5PbhrsGNrQIGnL0FkBGBFN6Rjss0KxWeZby0cK7QKQuZvwfvGN+HZi7sYI0AEVjgNPO6355zKRSxx80/oAZYyNLvb61INwaMdee+PbbVF96qY+OcPMT59P6TcdbqV1LRogX4=,iv:TGHgxgoD6oBrKZh2pYJC7d/67skmfSSF4REF1I/Kh0k=,tag:wNk2W0NQgN4antRq0cyyzw==,type:str]
+    pgp:
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DtMjybqIQmUESAQdA/ZBC+dXCHwm699TtX2UdrJ5MU6e4ogFQOTUvE/V0kR4w
+            rgqplX13xLq86pt3ujxMbsE9zs9zLLh7oeliktR29vP6KfsocPfWF2FfLKimRNYd
+            0l4B4VmexVAn8APL4HlaPKJAQJz8CbWoesAD8IbnKTD351gxRUWgH6spEOMN2KLM
+            KIvyGV7SrLCSmPUgKTwDM50NQm4b+C7lv1nBreAydfgy4j6MoplDwuguZWmT7DqD
+            =P3Im
+            -----END PGP MESSAGE-----
+          fp: 0x40CB48A443B03B5DBA484D279A130774C458F4D4
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8m7r5bNaN8eAQ//Yx9rjU4bBAdMIS5fFIrCFnCvvvacZfSnhaPm7175L4eU
+            8S3TrDX9cEIFxXuLgJEMKMxcouagtLPqahJEqe4eoVHi/vDhst0663+3/noNfdkB
+            2IzHKaQxobXqD+9RblJf8Fcv0xQk8nLePoIExfmK2ikhaHzUmTqGk/FUgS9WjtbT
+            2x3+i9oeNF9fpKFzloTfxQGoXVU0+4oB7Krwas7n3RmAzHpRxO8e6i+mZ54SL8B0
+            roKu3NUwsBVEppwA4BfJy+c8PFpf7Et10bBQ32ORMyeCP0XkX6WQ2wLC0X2aYjqL
+            nWWhUAS9WTE7r64P64smFFN2b+nqFnEEaVMhDx4cbIwZy8xw5nNSKY1ckSle8qkX
+            0Vi7BXHMytxNPog2ra+PPs1l8Bi4wqRLCdRka4eNeZQQJ5jddn583MYbsK/AveNP
+            l1VSE7Qv2LhiPATqWiFRHMYri8L5paZF7l3g38LgtrhNOE2SKS95U87NJg/bUnWc
+            9//piRa9jxuwA3RWaz3qCJXuDrTo13RtiKpGUF115CP7lTb29snTb7wUYTCKblv5
+            NwpjyAt3jgGEfYGWX7pTAFUV/ZPMTpF34ndN1WSBYjTGte24Yfu7dZrENIhak+n0
+            sipt3m7Cn/aB0Pv39VE4uMNEM7wmorkJmxYGY3AaU7+NW8RpHwIjDDudaruJSqTS
+            XgHgD075H9uS6+xO4uMNyWIymo0wbjb3gxYxqZFVQLJcfNp0jlL5TyfL0VFIniRt
+            nN/UDOqAdCQI9hLfGwGzFt/hyTL3Hn8ZJTGJcnzBXQCEUBp/0oYN1X7ZIa0CjSE=
+            =nzNo
+            -----END PGP MESSAGE-----
+          fp: 0x9487E782E043EC0D9E0F6C27D46D7E3364433208
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9A+dmzvmzOLAQ/+I+ROcX9MIvF/7vmXASAiYInPtLu9U8Ug19Pj+AXuVadX
+            3R3op9PvwS1IbXTCN/nkAhEndOLFUbRR0SxCED14xolsJH+Lrnm0cuuqhVzCkg4/
+            g7wedh5GoJcX7AiZ8RnviVixIU+fVm41UPA2eLetHIgFfoLZafcHqQSOPC1+lUj5
+            jECr2cVoQsBKCxAYN9NwGar46q4QJiNFpeLrYo98Xb+8qUf7Czc64O7/X+gft3/q
+            bGAZmcGN8YvTSy9ELnDPRPbMksrcNZoNNDyJ0wRjoVCsErj/wG3IS+yBxSLtpxMB
+            n71mylqojtu9qSxvOU5XAbiO8RJvI2kt5sbCl3r6JAUgVZVqzHwvxsWQPrAmRaIU
+            J3DkQlem63pVLbFfhjaDIhLE5bS/ODy1YrSSPgvw8tDgqyv9jN4OdiRgTPgJXlSe
+            IVfbJubFgKCdHxZ3gIpGd8QX7BwlNPqVqZCEZdijo1tmF7EgPj04l111CCecQIyI
+            o0xYst4hcc1tfjicUjiiOmB1rK01Y4QWheR6c3k6tZa5+of3QjBtsdgMRGmai1lz
+            Hz6oH0wL672ti3Td+j1gLHupFYF2XBZrERKRtbJJkPiO7yIbu2Cu+4xdBrwu6khu
+            KN/I8IS3g2ZdigI9gtoArteB1qAVNZNdRWjUN7Av5JEsyCCpef2Exvi17ppHLbnS
+            XgHStUrR/Zmun/r3IZZG0rKioNBcRC4nuw6Ky+bv+qyseFiBWldSBnNfnrIER6jV
+            kiWIexVMekdlZ424ee/tmgKf+ROwvTJIR69H0lOcETujALXedWBrMoNaaK+3+CA=
+            =NpUl
+            -----END PGP MESSAGE-----
+          fp: 0xBC354C0D5CC674D11D3EF7AC2BD76BB280787FB9
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DRBWo2b0h4f4SAQdAle9eSFMLrJXyleUg0J2h/xhkELTd8LKVbHKGetpDKkMw
+            alZE6czx6HLsTcKX67zUL6ugHePYHd+pboUkFogwJpgkIIyU2+ofNn1YqW1WzVBX
+            0l4BY0J5TZly6XGyy75UiC01nZcuXbEqSnvflHG8dCPkrtapnYE+NbkMAWm1r+Re
+            xI1fZ9UlbzXFv/V/oEXIewtuSdB9s7vly7D/KvffKC3nOD9P6oVZyNJZuTNTEC63
+            =wOq8
+            -----END PGP MESSAGE-----
+          fp: 0x572D19D312825B1A504C9003531DDDB6EB559FBA
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA2iXGbkufjklARAAltyeYNFXHJotSZszOP3EwjcaQTGJ9PWkgSfBnZmm3kJd
+            78DhtrQ4VPtj9U4ZfUuXl/ePK51VI4rixioo/7afKWWi34mEWZH8QvpZWNhD8s0D
+            GVds7dC1VjqOMdPX04rI8+8BUGzrhCRBT5bTbaN9D+R2Xe5jI1qEVzdtRHP75UOw
+            myCzqdG2Xy7CZTYyGKcBBJLQkxTsZadxeGDVT5QKUjYMSjLQ45rtreLlkN3esUoI
+            A2e+Gh3CeaEek784dU2nYmgzzOTI2QnozyEz13/Kvz2hvCY2BhlT3vGr+GLwxoun
+            Zwjqlv398SQyW6DMj9Oztxd3Pl87GxpwRWeVL9H0f0vfDSNFPAY51FRcKCJZ1wrU
+            4XFvgrtSO1pIyoj8kisYC7STkB39RKsVJ1gyyTGgIHcBvwAIWDfBc47Ekwn90T9F
+            WJmv696cxTy4GtyjMd8FsuDvpMP0YPfi0ctbHRNPSNVngS5e8rTNzItZyKNFHFIW
+            uygQWBDZMI+ay0VkEoYl73oeqASBXDxlr7gmL7jKKN7wGupydggPaRNrQr/Wrmuk
+            4hmMg9Mwh7FS8Ve5I6dTiucqZW+xEvwGpT6saz0yEUr7XE+zrrkTUMAb2CjpGZ+w
+            lEBUPyVSf73bATN/n4gi0SwFRog6O/S/6tkYWkIDzx5Vs43G04p2TxQCXc85In/U
+            aAEJAhAbEUFXGj7MVXN0mUM+RxiapyAU6S3Punfhrk3jsckZOPFhwc9c3RvGXzhq
+            QEpeHKIVm/oX0xCJ9YcEIFvdgyHaqm+Sd3L1dehYrhCzLLisV9/ivSXECdC6UsT3
+            Go0wZ/PGMlKx
+            =euxN
+            -----END PGP MESSAGE-----
+          fp: 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4Uty74yOFxLARAAloRgO344TAsArBC6zdjWz6T/Ea1W8irpNKY8vyBrHt5u
+            CeKlWy+7ufEH3cDI7vPeLvUY5v83jK30p2R0uNrctAxKWxA88FxKp8UC3dW0UpWG
+            J+fhmzNhID4/fw++NzEpcErisB8OONEtK1s70HFEJ+3ZLCB2FOL36brAD094Hj3U
+            RkmRZFexGuH32XLuI/tWfahpG21wNwOUl3UZc+UcgcYC0UuZ+JOkRB/NUn26+LfJ
+            szoivDUk71tC8M2DZTqKEfhLfn9dAo+oGhh+z889tvSyM+OhdmoCPoSbrHqa9vHV
+            vKWj5UCPkg8cUkVkACgGzE7/2CibD6D/MjrUIQI979dNZVOGerI6ltvU0NePC2WI
+            ppN2OZVTWSR80FnAG/qMMgoqVW+3RT2RKFaguMLfzIZ9mHJmWJP8JCCIGUjlf5Bp
+            uYQnE4scl9zq2RjVMIz8LZOrBUln/wu50NVswxEkIaVEZaCFvFOHcA5fy36mOUaN
+            aKGUd5XzrN5LJ/2Fh5X8fGsoYaanGX/XN22zKQ6QLBbEOAGpSf27dztYrXQAtUVe
+            gkkp6iL1e0CujViu9uXCgt+XyNg5ReJuRrKQHpnxIDlxI7irJOKdI40f7jcWR21Q
+            ybvjo81GBxpzjEgqRX2kqGXKzycdbuk+IbtnHJBSbITIKH8zFYxNaOQT6RXsUjDS
+            XgEVTM3sAR767EZgK6QFRNHGCjc+x/u0uItqaEO0wBTIhIMrdh1EOvRrVq768oNY
+            cxqMeYNMuqbP9/8LNMqzJSxBphGOkbwiaUijALY1syMDJbqZ1CgkPWH3RsNJJ54=
+            =hMqW
+            -----END PGP MESSAGE-----
+          fp: 0xA534E46682DD8C35377352C88DD28608BE411065
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DIBqTX2T418ESAQdAp665HoLg7r76LztlYrQhbUIOys5R3jvOng2T76vC6Vcw
+            05L3TI4c/h+rm6rHEOLwAXXNda/xtNKVWi/Pl0/Yuy4Ispz4VETSwIHYG4AehUOV
+            1GgBCQIQ7ML7gSRf3HebptDFvEm4F1G/IIKs+GmSGvpBYaYGVoFh3roX6CMuRALd
+            wEF8YPGTJIBz0nE8CmUZyjSlk9c/XDEeJUnAMCDwHQCp8rd8DOYw8KB9gbuqWZcC
+            Tlt6fx7vTW75kQ==
+            =4wfP
+            -----END PGP MESSAGE-----
+          fp: 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA7auZh4eKOkIAQf+I+Mwg7cnO+DGUvvMC/eR8TSIowoZwrUEFzo2gDxLKc4P
+            eAdB/cEbxzmVCyRmi95IE4v+c/5C+8FNjncD/RAyzMknXt2ychnE7r/V/I6jk204
+            UO/QCxA4qTOamcrS7DDeNXFa4jtJyA1ZsS/7XAw/h1EywRnJlJFVoPGiNaMfRdCI
+            j0qovqaAbGtdWten7YwuwnAX6dWPMz4ioKzmAbTA8vVqtz/O9Pn3wVRX8ScZy64U
+            wV74Wp2a6dmR6PFNIP1TyFA2xJ+c6mQnyp9IV7ggkIO5PClKaF7ec43OcD11ERiq
+            4d/GGxpSh2Ot0fG3tNQOXp+HghS7u9Yky8Tf6Ia/3NJeAQMwZtlrUAxdxx0JrwZ2
+            TdMaD23pnY31QCIUi4UJ88f2DND6wN7j5zjqz2xlAxbgZiFEf/S0rKnp23RpZf7C
+            vEJrrJfBZAiMHIiTuOUNEX5bVStTqSB9mxnKsnJCxQ==
+            =aXeC
+            -----END PGP MESSAGE-----
+          fp: 0x49BA444CDC680527B4835F7C3C1AC435CD1F217B
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA11f9zoCBF1cARAAgoJdyillpkxJ0j93cdT7PXe+AwjrEFXjcIYbUV1te25B
+            tSlD9ilhBjipaTKkatvPierMaqEOzmA33wkDw9N/gdSJSeAEJ0CVgCwFLWeV6apx
+            D+YucdrrO05r8lLbpANv4eVAboZU5AbLhPnHHPsxVlgckrNtydlnvJgLgp4qDh0w
+            yZhNmJWNPzk4NWz0JyMAmqS0SaWFQX5iMX18iN7ZEzvhW7OYAkU8ZkLh3nbDoPi6
+            mQG6acn7OxV6edj/Pbj6DEh696j0iwshwF7QWqYJI4v9CUYv1VKCa7bzNCrcFNOl
+            qrUz1Ig8otLv3VchH/b0dOeCaHbK08YCZCMKfhLMG2NkDav6dELfgVn+pfIyaRyA
+            pua1xgnfvhVKdv9ZiaTI5P2kG2ady2suyIQ9jeG/PYjEhAuiLCiU/PeXVnnJRgzJ
+            CwtGv5CIsGnsSIhGrwvpj5xqwmt9VyYcsfFlRbK4GIaC0Mk5AoIpYHrwbHzX7BTg
+            qgaQz73G1K2PDOEklSiA8jQzaE0AEjDX6wOvrElBpHrhMJ/CfbPDyAlp2E4gDU36
+            RJC8FVfL+q8uHLTzH11IshXGMkz/YLvkn65bGFJuZLmoGiJ/D8Ihg8yhGX88NW2D
+            sxEHmMBP7K9kfOkzm6J/YLzUshiEb0TZThUqKjEVx9+im8R29IpJatwKpNohhNDS
+            XgEaxyXzX66J1c3De2dmKpIR1iocYyfVYhula1CwPc75sqw9tRp+cVDL8i5Yn7nG
+            UG6bJcBth/MImg5ARYLGEUwQGWEqhHoSuQDRr1g/arSLrjbET+J6+7rwJmceySQ=
+            =SkJc
+            -----END PGP MESSAGE-----
+          fp: 0x9AE04D986400E3B67528F4930D442664194974E2
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/HTIsSK0VBlAQ/8CG6lZfxbXQz8I3c4qdRZ71CjGTZrfeQdhSEnSCvjYqWM
+            udsitJU4aw1+6DTfJr53S/Q7RYQcxpAWKJpfawL+N4nkw7Zdbb9YuXZN+sTeoAfw
+            XV2GsbkD9FOuoMiPUY9tfXeY6LrWFuf6FgCxF3ZVttYaBaSSzI5DOX+Nb/uWWsSP
+            wKk0lZvxQTbo2VRq3ETMadmobI7JjstV2X6WpLS7FGpHIB6BMypGonbB7uRkYH2z
+            +rw0KARfVW/V0CSEs0J7NtpyfQH+l5UvlFndKtAlUIvM0QUMg5yEOKgF8b9Jvrse
+            zDiEpeze2OZWQaHJSZkUF9ZDm+mNpF3GlcrRDhI01+ceVDMflOeg/7X9x1s//r1a
+            LnxEDqXSpiLwxqEi6lKKhXqhHg4VMGRtmnGkB6sHa4UBNMsRCuFMmlwNulQNqcqy
+            HXrQ/gLjY/cws80HT9f8xGXbUOuCPAFIdqE14Xmq4tlKcxIWoFUgUW2UF6ix14z2
+            NvgPG75sNarnU7bJ+LaU+/sX3NtVpQv+Li3IZ36NLb1K3kJs/qclZOR47k/mIxeY
+            MUWIt9TwOSV86jfVAfnsRX//N+K2h/xchqIrg2knqlueXxWPvlp/ilnOO948VmfZ
+            AgKhLHX5ItcOiP4r5gxShqijT8ka4wK9oB8YP3NWbHuO7AHkyTuDBOjhWOSY8QDS
+            XgHf6ZS6d0yvD5GDICw/D0PvxCsO2EsDGgbjKIUNt+Do23bgRUPDY6ASKC4NV0PP
+            LHsoHcKyAX7yIBMq2GddoHldtVBiCiJOZKraaJB1dCEdDS1KEMjb1wIfNlqBKp4=
+            =ljdD
+            -----END PGP MESSAGE-----
+          fp: "0xFA47BDA260489ADA"
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DYIEGJeT64uMSAQdACF6vmNwDliN+1IkgTTO0SPuvpR0OLhxks+9oS+8d+y8w
+            JPxG9PPh+u91eFtanZWK0beCNPuG0AQrSDzL4E4Z58gP0VlJ/bTzjVdKG/umEaIq
+            0l4BrDu6CHYDgq8eeUB0pGahxmr8Zk9ngUrfYEuRL54COkjCZQ1hcn54UiTkRBvU
+            HZ3M21q7OZdtpg2Ot7tAa5P+5dBGIoSjz4PyqR629pA4H30q1lU6Q/0jRHp0rc5G
+            =iCEK
+            -----END PGP MESSAGE-----
+          fp: 0xE474A4AB587CD834813DF35D03FDB411169D6C8B
+        - created_at: "2024-12-07T14:16:40Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMAxrcfL3KHjCOAQwAtJ1/AB1buFLWwJOpT77K8hU/TgXZZBUVIjHqgMvr17GJ
+            KXh2l+HN+EszzadTp1nz2Hmk7rmo8SF9K1Hx2+xQVkaYXpzJQpdr9U76ETKgiEDE
+            at8FnS8Qguva5RtemiB/5QEU89n52FqgkJrp6xO1pCgSKuMT+zKHzTA7R9ktHRVY
+            F1aadImQQcaSi+zPk5oJvXLFvQPSo9imK1+yiq3FNWpcHTZE12baK/zvdA3ufVmd
+            nu93AmFJQ3oRJpMfAw/Q6hvdLFB0Ueh0JJ2iviaQf5xavjffO8l4E9zSw0DHh2ac
+            MK8Lt6vb3vYa0xZxtECOwZoy+HFxSHRFxacQxQMvPjWlqyUxleUvZcJ7ilRQMV0f
+            VKLlgfXkxu8Qv1qx7HtgFYsXXeDodUnK4/3LdQNZnP2eZHdZ35+G8jzM8xZWZ7rF
+            QIiHKcf3BvHp0ExbeJWnKlkh9Rj9VlWp/CyChso8NR8grH4vEtSJ+P5C6tBxzwbm
+            IAbz3UTiytwysxbuph420l4BCz1fQ0lagS9BtlpYSTv67ZQmetHochI1a88OAK43
+            saz9yDwtwW1WuoDc2sLA7cQFxWPn2Uav3pE45IcnIua+DpD1l2Q4xfBNA7afF8fE
+            w3PZc2zuVfL7zpx5LpV7
+            =xrME
+            -----END PGP MESSAGE-----
+          fp: 0xD5B872E407D438721E5887A000E765FA7F4F2EDE
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1
--- a/secrets/common.yaml
+++ b/secrets/common.yaml
@ -1,247 +1,256 @@
-root-passwd-hash: ENC[AES256_GCM,data:TueFl3zXBTnpVtduQTLIzYCn2cNnxECiFEf7F+zBeq1A+lghV2ZUf82ZU+fajI/fcjMij9xMcLOZchksUkRRZ9SNHsoDTamiChC3ecOsxcndR/SElN8Wpr2yqsV3NNAt/4EF4leNyEdrJg==,iv:Lo6/odISnTOVd+dO3tRJZVYNzivyXuPowJWk+d8C+Ck=,tag:1zEh8Umy1tgM+SnqOLxvig==,type:str]
+root-passwd-hash: ENC[AES256_GCM,data:7/7AduuEfrhmwmAn6UVkc987nyFxsmTFbSBrD8c8t14=,iv:X5SK83w1VGrXPuUrt6Lt8Uu1JQW6GUWwCB7LmZzIdUs=,tag:pUKd2fdRGkDxVqS5io6phw==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
-        - recipient: age18wsmva2ndn774jwan44sl84kckg9f9n2tpd62g7fy6vcq8eg9swq6zsyg3
+        - recipient: age1y3l4j0axyltq80d5stly43h42v0wfsc9mun0qcm92qjfc8tn85hsnmadgz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4L0xzQWEySzNYMjNORGlP
-            R3lvRGo1N2RzWXVoNGZ4Q2lsSCtYMVBoQm1vCkRmd3NSNjNaTG4yMW9pL2hPRVFp
-            ZFZPV1F2Q1ZXUXl0SVpQcW5xdFVUVlkKLS0tIGliR3N1VkdMRS9BSXBCY01ZbW0y
-            MXlhd2VrczNCWlVUZGUzSTFpMDRnbzQKBlMNagdEH6BKdz4H8ti+fbGwvaohkpDF
-            ge7uT+GbdJaVKj1+tlrGwB0NUGrP18kQ0ArYqovfP6d/qECWLViQPg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYzNocXZJTUhpU2tFRmRh
+            WEEyVlRYazVtYjFFQ0xQT2krVXpNSkNwM1RvCmtlQXZDZmlhL3hQdjlhZUlwNHpa
+            UXREMHJHNTNpUHZENCtCOVpaNDdYeE0KLS0tIGlFSkFheVY0bEhsTk15bExZN0J1
+            NFB6Z2lSSmtIUXdqZHZyT1hoZ29kOWsKOhm0E9PhbvbI3eWyBlHZ42/Pvur5leJ8
+            Pn4Pg9LYLKNotAjDYwA9lEPlp2pJiTKepGOyRgSIph49nYG1cfl5eg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvUGxzbjZtUzQ3Smloay9G
-            K1NhTDBFWThQWkxJNFNrYzAyV1UwaE83UHlnCmhwLzEydlVSbU1GTmhqZHh6RzBo
-            a0FWelVwb1E4QkVLTlN3enFMQ3k4bEUKLS0tIGdrSTVIVVJ0a2sySFdWRDEyUmw2
-            dGRtNTIzMTUzVnJKRXVheXNLZzJjUFUKgb8vHhnpQQJvAJuz7eUNeNNf2/Z4lc8o
-            qOmpip14nII6JpnPo/uv6Yf6QbzcDcwIYEnJVZ44XYvPDPgIbsSyYw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxejNGS0NUdmVGTXZYditw
+            QmdubDZmOEVvSmVwVytOZDNXOFhISG5PbFJrCnNPWmdoTjViSWVZQ0tuRlY3Vi9X
+            ZmhzL0c1ZUtyczdOb1RYU3lwbk9vT3MKLS0tIFhCR3pqSFpZNVRsOXhGWFhGNzI4
+            TStMU0xYbzdxR3JQUmdIVXk4T3pRVm8KPqy8m4GNd7g1TAwRFwNVw5N3WcXDKx3g
+            6s/w/5HPTmWhsH4joPbCj9L10nZAU54Qe+ZY7weMVxXXgWLNUWOm8g==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRM2U4Yjg1bGVPRUFVN3Ry
-            cDNrM0ZCaS9Hd1dXRkIwWEJqams2UDBSN3dBCkZJU1J3TDM1ZTNaSUlELzNXQmZt
-            YUxxZVVKWHVrL1lzYk9MZGRKMDFIdFEKLS0tIDVxbTlYNDE2R1BvVzJOUGF6WXZI
-            RUZ1TFpsMThjTlg3cXVHcHZOWGNnMUEKcdcIXPxaOjvm9TFGZu9HLdEuxXvnQ2gy
-            pWbmZmCK3H2or27dLwMn0y56KaQrPQS2+LqAkjrlBuK6i1NA/IONIQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZGNaS0xGdndzWGk2NFJI
+            Yk1zdk9oV2NSbTdqUHJzMkdjeUFacEdGK0NVCnVuY0ZpREJzelJPSGt0dGhHVVJX
+            S1d5SElTanAxanRiZTBta2JCNHJxMzgKLS0tIGdoQnZ5WkNqYkQ4YTF0eWhZY0g4
+            NUhkNHA0eXJobUpFWmVXWlJFeTczZkEKG+rObffEUxnC7QBr79Y4z1rxH6Xd6Zq9
+            b/k7FeqPm15feI7qYUfByrZJvkO34mjDYbigIzIULZ7CnnvNbCN8YQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age18rv8q7stsn2zv4gxuj4g4ktkeywkg2wngtdwza858jjme8wdvp8s9hkx00
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOT21IdGFEUXlVKytkblZX
+            cVVhaXlKOFJyOFIvS2lIbzJYcVBHQjdpRGpJCnM5bmc3azZNQ0t6OXBMMHZvdkNF
+            Ny9CRU0zWkozTFJqTHY3ajFuWkRtUmcKLS0tIGVWVHBXNVg2ZGFKaWVDcDZaQlNU
+            cFBzaEVoUDRpNGNseHZzMUxUNGJRT1UKshSr1mxzr0cHKRwA8Nmyj02TOrbbdOM8
+            XFjeo/g6nQEC/mpC0E0DZwZNkdaq2OWY5e9kNRn/HlYBbQb9wRzDHQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSytFYlVBVmlPa3NQOFE1
-            VjEzcW9tSm9ES1NhbTY3Yk5QV2F4Rm5na0VNCnZHYzZHUjFrZkNYWldDZmNpcVkr
-            TmRRelVuVS9DdThBUmN6UkNOeExBTXcKLS0tIEoydlh0OUVxQkZkSzU3d3gweklF
-            WDdHS3Y4N2Vma1VzRHdPRk1HK0hPMzQK7cv/8g8OfM97Ur3PurwWfeh82/v53TCH
-            WVMgI6KPB8AB7fjyfZCAqr3Ihe7x/3wK5lWO/h4xzv4xcuH9qLMt0A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4V2tOY0l6dSs3bEIyOWlC
+            ZkdxcEYrSVZWdEg2QlAvYXFxNDIxUzlKMWhvCjNtTGluV0Vhc2h2amwwUkdNd29B
+            Zk9wVnhwNG14N3Z3aEhnOWVoWTJTWHcKLS0tIDRjdlR2MmQ2U2FFTjFGbWpzOTVX
+            WnpsOFgwZ01jYjNBbXFvL3c4T2F0cmsK07tekO8aEc6LVNnNe8Uo59m5es4vr2X3
+            dH/YwqMW55+YyN6AkfzQd+7+VqlkE6YTXfbON6jSwOAhAKjapRC38g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-05T21:38:50Z"
-    mac: ENC[AES256_GCM,data:ZUA6Ij81846B2xumn9YjrlRufj9KfoItf2MCViVbIlQO97or1rJAz+iWxmf/I0YNzhOKzuchyG0X6669fUkePk0qNKrk9HBQLX7BM+O51qgEijrqq2SXlo8hyNTC7zUFL202yT1ATL8uD7lgBZpqgxBOcYp9D7+dkvotzFTOAco=,iv:2o7OGekocDF3Lj8OCnLOwGBBs/k13R1/a0CH+GTFsyQ=,tag:FqPF0Vvbuc5/D5tRLA+r9Q==,type:str]
+    lastmodified: "2024-12-07T17:37:07Z"
+    mac: ENC[AES256_GCM,data:D27C0Ymorhf35u82yZnAKhYe+7RJe30AxzfBWxeFd+ppN2UkLNHDAyAFdoNn+P658vUDrS+c7nvAyAoBjXKJBjbifJQw7fdHBjih2tqs+ODkP5Ln9tCnnR6JTlDYv4uik3RvtA6VXuNcO3vikJyrfU98rbV2V4h0/728Ys3TKZc=,iv:6k0gEL/PucUrEIJPKIpm9dL8sm3mmkzEGf7D+d6TJzw=,tag:rdBWjatmuA5jzabHXFTSXA==,type:str]
    pgp:
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DtMjybqIQmUESAQdA1cLeDA/bsfaxP6IIuPR6W4MI6gMN/0fXxdHRAfe6amAw
-            VQj6xb9GhLBHsw1heB8OWap/Sru3XKht3nVY4d/iepSgwfDtIupSIT8AYm+2L22t
-            0l4BTpXy1Lqfi36NPLgRwnTpp6XlbvbSxPz1qquqrbbU6zs5NicQx7b0PZEJSMGx
-            lNoYq+j4WVV5BWVZeFgwkfCgIF7xg+FIZ+iALJ0oz0Z1DMEm9xHfJuHd/ftxHRaE
-            =o8Yx
+            hF4DtMjybqIQmUESAQdA2msgdai5xT2XAga4nnhvEbu4BucrmyeL5EMf6cJa0gsw
+            7+B1Mb/Z2fBhLV1uiSJIGyNU4pphzu45Difb9LFTJAtLWGgyIUcVPWZjW6ssgcuv
+            0l4B8pAmvGrdAZYVzUrQDOiiE0QiMWetF4lROM0w7TcpV5qToTWnRFO32ZtDUW/V
+            vL6KfyacFKSQ+hD2xS3Wqi75hOzkLrBWE8EK/hxZwdurnV08MGWrNTj0wXrR0OFq
+            =hA6G
            -----END PGP MESSAGE-----
          fp: 0x40CB48A443B03B5DBA484D279A130774C458F4D4
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA8m7r5bNaN8eARAAntYLkghxgdko3xMTN1AaI/ici0w1b3b24b7z+WjmHcIt
-            RN48mngh97MxzlyujiFu2IfZfCbIr/cQe5C3gvNqhrprs8CQoIgqc5q/PQ5Rw4zf
-            4MA+WDHgw9BDQXnWfs0Xxnr0X1rBHnPSJNFUSZcm8o3s4HIrIcxZU3AIU7wmiG6L
-            6WOybg2VGfzgL0UaXWVb0N6Ep3vR4Fn2I9hVHw5ESLHhUFA/dvq7eZt39bCQxHzn
-            L8jVgwvnpI4bO9boK70+f3HV9caApjktdhbzA2c5liiSH3Xd31go9WTa4tzEbH6I
-            6waHQpPGGLbes2nj74kU1YrH4GhtWkKgvuN2t9WApENMRx9sUiYxCKJjtV/h/pZ5
-            0BYR7ZcUXpJKdSiSY4gtwGJkeFM+Hr33wzi0+Mayy124eke6kIKgsqfPD5XsVOsP
-            Oi/ku+G2FGT8C+yqaFQwcF2upAP+gSWbs+ehRD46rqlHZdqHLUdU7iE6xrPocfEo
-            sr1kEhRqhlnBsz1v2GAfjv+sNJgnAIuc074k9m1X3udZZVFOPomBbauoraOj7Nt4
-            BQB/boUkliroEHhJdX6rf9if2oELlATtnsQu2saxUw7G0i+x40nQ4cvI0oxK9pcN
-            kUSXP+Jo2hjl+hY7IWFTuxQgfwLnC6Fj7RDBRCagBnfT/255diM0vmSkZ2rb+rXS
-            XgH19Z19YE8wjpA0gwEbhTkaDTSgX87GuYS6SUFSHd96rkTdPY3XhaTHht4sXVOK
-            1dOY/0Or4z6FAbYy8zTLZ3pcTbxiYuajFX7Pn0PrsYnE2YeBZSj5/MoNNloF3jY=
-            =9y2E
+            hQIMA8m7r5bNaN8eAQ/+OY6RAm3Z9QHDlR6YiS02VPz9NpNrTrysFvhSR9SOFpVR
+            k4dAY8/9wKm2nrOb2mo0xm6vG+0dAfNgS8gLl44LMobKmx5C+A7ybOpODffV7pnO
+            bIJZFc+UKQ7eGM9m5aFDNQ8dGx71RMQqNEy/Q3H7HFZngJFRKNtg/QxLs8VIYlp7
+            9lYDg46TNKTWBZxN3Fzy5B8nUePReDnEaEBpF7+gCeOdq5/4VYMzllcL9UIPq9Do
+            H3471ulfVGItiYMgDyLKgUBpjbJn4+cG/f5DdJvoVuT2lOO05nnCu9AyCglSbkUR
+            B5dQDwONNL0/USo6bkuWiza9JQKSASN93h5JIw5e/5zjk4ZCG2ajX1DpaXL6bB+s
+            nse60rdKKB9jFqBhXFszHYJww4DOFVX374gCXp71Rr+Bx2fO/DGY1Z1mMz302Zbt
+            qNebLRKwzk6UsoNag7ab0/MWMZPCIKtf/Xcq2PUkEFOL9IIA4LixkV2puNJ4C1Wy
+            b8Q0uCm65dj9rzjKeX9H98SWEGStgo5gQhf8QHl9yyxj6oCZGUcIeBmTZCrVgAOw
+            0I8vj7B6Lilj5pJBOD+9eEWUySRfF9kkVsgfVoXl4FnGWO8XytU7lwuh00kNmH79
+            Ua0gsXaUPb9KC2YzvmqbUtI+kanRM3Zthhho8D2R498dCh8NDPZl5DqTLUX9KB/S
+            XgGZ44Xm50sE+JVqzrZ5uA995FboS1+TgUpOwb4wuMRVmc5ExgorNDiLiDNmXOAl
+            rYBCV6/HYTTzwQD4eGVXdRjsUs4G3ObYz7/NIySDE3pTQxK23ZhAVPXcfH51Qx0=
+            =LNYN
            -----END PGP MESSAGE-----
          fp: 0x9487E782E043EC0D9E0F6C27D46D7E3364433208
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA9A+dmzvmzOLARAApnk5K3hr2ue/G5c/UfXQuMdWZJpAYrhn8rh21C4Z08Fj
-            1YHo/JHVd6pStJ8INfFWTUKNt+rJmNFG9gnwFwPkfE1VSdixL9/j+3zWg0q+FXDR
-            vJkVcVCEyYEnEAHefNRd3iexs4LcRiWKTt15pD2CG6ma3Javl73vt9Mi2+BefXpU
-            TSWiLAuNE0MDESW3CdCk6qu1HPKjrvPKH/nTLsFtAfcp5VGtH8QIlfS6HUOYQ7XE
-            o11kqdizDVeechMgxNA//q94CoBc/DuOIV8+HH9qZSIjHPPScLFVpVHQOFKhaE1l
-            rdOpXOfMeGXWWmEkiVWD9ymrvYteror3aGhPRnbI1Q5qqWG31Em3XbI6B2UeVQNS
-            hRFddI/SEPmLgrrbFiCY9mG2EDB+O8c4IumNKRwAjoMwkP73phAMYWibuJp45Ma1
-            ruCO0QS9mXRdFl1QIVQdNlIqI5REDQdvVv79IO7S6tZkNVugs1w3tUGHv6KSk2zu
-            OqydxVnrG1zvSES/v/VBEqSw8C4xkJuvcfvdU4XPvnCrBnKq8ZCo/eSer97VQGSv
-            mMu2dXXfbqI4CxzJERwiRjCkp3yYDUxh3bTilNzY3Q+yt2o902WT1tEcKCH9jpch
-            A3UDBCFxvFfFTGOwzDn2XA1J3F9fibfox79mqK8KbC8UIKPgEdigjD+7r74/AkLS
-            XgHL74KB0RCSHVKdYLUk57FAId49czYcvh8tOVOtiFRDMbmETQEoL2lGhNXs7qri
-            hhvXf4NTyGsdLUMlR4lkW2Jy1sRp0KxP2CivuG6GvHbhiVo65NK4DTMUE+HR6lU=
-            =OtnW
+            hQIMA9A+dmzvmzOLAQ/9HRna/80D8+Uvh2WtsTXKAJUo4/tEwQONPm6ZGtel6BF4
+            4oWxXcxW2VN7CaXmUDVP9Bp7Y/RuEpGeB/SxmKtdnOr6sxofMqqNJXlsbTBGissP
+            NuKJ8ERORhay/aY+eUo9BIYLO1Bisu75HRn4bHPTQSfYL4ZMN/Y5vunQdpecsHf/
+            ws6dBzoA4z2m+RtAhA9HxqzDtFLyMvgaD14Gimnw7kP20yL8gUyb/HliwJ4YqhGO
+            8x43AKAt5M8pMmn6y1ADKKT4pXVLe+UNtXAoo88fl9CTjyPN3oyMLqADdAA+lEGj
+            2+7BLxuIhSn0ANKADOQNTOfZVqcd+53/WkpVUc/sS10IDWnK9hcPSHqMZnyOmuif
+            WFdI5OTKKaEV7Fid6/z5dN11LZDpUXZ3AUFBDMdWsNX7PeLC3YXKyBL5NQ+BcYr8
+            L9YhbOWv3yWWtjltacB7wT1SApKs5F/H2QgGgEqbuJXUM+A2DjjnmiGuEZLxbIwq
+            J2PSrYQVzUdKcqY7KC8l6QJNZtMhnrehhZelmWPdOftsEAGvUhBSz1Z33H52R8KA
+            wctkFeD4W5ojlj3Vu1/y4JOsdGXK+5HvHHarvnLk0fU2HEjz9ZlRosw9iFPoNxAO
+            /31zt0Ndsmi10EWbMSJl9tek1qVSbbf3C+szCo+I3gVOMNXTClpfvGwyhVL2w8rS
+            XgEGXkUZFskXtjuR2fCuQJq9tyiTMAfidhixLgYXaZWEXRpbpznCvoaMONL2Pw+t
+            NUw8YfZu/Gn8SMK+DGZv2uA+EBPIIBmxX1pWqMpSoZFqljY2Z+h+WWtiHppm9dc=
+            =xqAR
            -----END PGP MESSAGE-----
          fp: 0xBC354C0D5CC674D11D3EF7AC2BD76BB280787FB9
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DRBWo2b0h4f4SAQdA4wqDvhem29fQigQMSZDkpC7YuaMiXlh59F8XqfMoZDQw
-            wCFvIXg3WPtVCLQykVcer/E/mKkSVPGighH3HCq0nLlqknKFeCzpvw4QDfEbtUL4
-            0l4BmYTU3C91Q4n1zQK+kC1vxsEpG/TuDcv4cW3zU9sW59dP4x2yZm/VEEaFKoPE
-            VmDPw8SdMIDQLRBclLNmRrJlgLpykwy+Z1Ft2LyrrEfOUhh38+HeFsRU1HDAvX4I
-            =ErOj
+            hF4DRBWo2b0h4f4SAQdAAb0ghvdz3cxYFC0ad7l+nim9fSR35bLl7ZKMKkik8jow
+            mBpPv63L68zr4cvtPgbJfCcekgTPhQFSf8+4VrhYxrw4g+pGGyAi2P2eW4Lt3btw
+            0l4BFzsf+E7YJ3NPLSFsBABrrW49m+00n0jNorbNeDgcmuB3nlq+7Sw3ndLICxfz
+            UmMGYr+dyEvYmPwIs0Ly/VovpZdNirI8u9H3wIQ19aUAZRdhQoQ0Ewjs9pxhkFXy
+            =/ivD
            -----END PGP MESSAGE-----
          fp: 0x572D19D312825B1A504C9003531DDDB6EB559FBA
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA2iXGbkufjklAQ/8CXwvY4luhyGMttDy0/xsztotznwwCYjgg1E8F12Nw0IQ
-            lmq5Zy6CSCi/sarJoUtH7l2vf4qXnJPp6Fp2EeWJeI95Z7NuMLcfrhlYRVch+6fq
-            Up1ikcGjpdrevYp8lA5oDxEojrev/21m1y+bOz2N23Zng5cGacW7SS3Pat/Orjd3
-            gyAcAlWydhWSknumrk9aRJvVRwIy5sBMePic8tsv8hANfUUmy5RSa79s/iRS8u6y
-            Zz8icS4zl6EqO5CpizTJwFDBRnWmPCxhz++uXHaQiVySDzU3duylJWaHK7U4YP9y
-            My5KW8ZSYlK0DAv7iio1MSw+1eoRgaBlR2s9rQHLCMIN7XLPL4Q+TOrdtpHF23OV
-            x3shRsi1y0wBgNVPOmF64RQdYznpATClUJ0q6d4TBNo6QWpPSkaiRqVBJcq6q3rJ
-            YEPtNGlH0KjXWsADIKR5K+pStUx1XhV4c/LJnu7x5q5Jm1YDVpAhmB3hP+6Fk4K/
-            hwW/0MDS0gk+IrE2zUdjEnrt+b1GUBLE3GgrMqwXTUSNJux0hy1ZoXtoZh2cus4+
-            HplZSPBfbzcOtg0C87qNzy9mAaZXfhQisBJHCgZJYrZQFnEtbj0JqrBP/7eZKmoG
-            runkoV3GOb1R6Z0muxprJ1t2ud4Gkc/INRzVGZRhq1Sny9XgsPI3Hw8BZHcUhx/U
-            aAEJAhCr9okJ0aeCG4uKi/jAHanKBQSssDQl81UXr/G3VuoHLquBWLX9alcpNtQ0
-            t9IVO43lWgz/6kDe43IlagAVYFPF+GfHU3+RYmAVvMDMAVRg9vWBVh6KssJC+6g0
-            WAx2tY8zRMyw
-            =VEuM
+            hQIMA2iXGbkufjklAQ//Q5QxxFpdzA/VmHGfTmAYnp6Iy+fkeQDYKhKWbvrozpql
+            +e/nCsn/yZr4JRqhGsV7Rfct0pcldmsvwT7Rk3gItO99I9/FDE5AYgxs2UDRX4sa
+            UGqtvLC5EUVlZXnpOfmSSB2IE/u8s6kLeuKOnfKzmC+eCkkopWWOAMpkrXJQUXPu
+            hKV7x80MF7Z4yQxNGywHMMpPdIwl3WlYVkF3MZm/GqfIla80fioaet/VNNPkmzC1
+            JiowuuJWfupF4qEYJPoUBCdn6c3gOMJQ/jmXYjEaIekKOsCuVq2rVnjfUn4VcWxG
+            nuB7eHUHX4+mHvQeMNk6mpDWcG+BBTlt1TGUH8Pa++LmntbbzXnKhc4wtlWPWXYb
+            Yp60krOu/4DXwgmo2U1EBd0/GrxMHf5kqDwhAKLTkKLohv9zScN3oI60E3BAMC+Z
+            K3pABKZus9mYgFRWo09fQCBND85hOwqQnsfw2Jvg8vf4M4pWUV9aeNZo7IwjgJVO
+            UlfchpmrUPKOo6MAbLCY/nhWY8AuRH6mZ/zc7iIOpdZvdR3S3YDyxsX5vxM8d0nV
+            7eoxPNAwG34nE0kOwgeTrjwle8cad/ih4jq7ByVyZQDvTGbZRWjQoTtt8AclOgQC
+            UVb1ByDtVwfptcDCic0yeg5lkHkPNNDpfCd906lcTyeF+Q8gKXAuORMOCt4JoIfU
+            aAEJAhCJ6hCJc8YHQP2Dpnd/ZgFwa4A7KZCmrQcVzC5dKiDbDg3WbbaTCjChoAfI
+            l08mRCGonClDkglCI025wmFU2HdSJiw+7VvpB0Xhfnag45tNMa7DOR5GscWfizAl
+            CDmT6Wmt8kkv
+            =snPs
            -----END PGP MESSAGE-----
          fp: 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA4Uty74yOFxLAQ//QJVlwTy74q4B6bFXIpdRa7g1c+QvnQxgyDudl4/liG/Q
-            4dYpmpHZ58sNQjHyfr4L/WdquN3yruFzDSq5SgHiPi1sGlj2UFT1QY8/hHQfJjCk
-            nu00X9Prz7Rq9wFe8XPPWotZpS2KDCmYeKyUEoMTwWG2MyFenG5s4/bVbWyxzqDf
-            44cgSOCCX/7V6TXSCIjacXF/3zVdBsXX+NyrP8selSNUlSRzMV/yQNeTJ5hu7U86
-            kD6jVZnzJvbRYSplJkCGSw8fkOTpa/mA39KDLaXIm7JcZARQyEtqXzwUOVwTKieC
-            6d8Xl3Do5SE5lYsuptMEvCL8FNH9uyFkwrgF+reWRdiE0qACxkRhleIGUG59unLC
-            Z42mbp8ezDKphJCuuIOxQwjT5hpO7ETI/0aP+AdORHei/GbAAOgkThSr1f+susXo
-            wQqh1vESy8fbt2IYby0IO5BEr8LZfJI2CyMTMmyKr+pHxTX7tkI2hx7iNnh/SEUr
-            2VoDR7/GtjUBdmoDWjCEmVRaIHg+EC1wLM3XMEAMeibKI9Iw/ywO2WdZNSOjZBbd
-            CgxCViB9oMqlRazMbY4d+wQo9S+x8aOVzIRdow6aeRiDLixMZCwMaUmKPu02Rr8S
-            25DeSVT1/2J4uAzUwwaRumWxWKqiv3QhpaSizpiRMfjSH0PtNhVRdh3BIc8NWLXS
-            XgHlHuJMoFqBLqrqVQO1fgNFjarSkUwzYxvK/s880h7f9YNMpNNpSKEOr+w4JQqi
-            3ftVVYPoiJ+e6VqbZawism54G6zT52NCrUHZ8Ut3Zu2K98h1rKiUL6mmzRwYmWk=
-            =0Nnk
+            hQIMA4Uty74yOFxLARAAyQNkJUZ4zA7TJFQOs/Ivrz5RiAkY66wmJ2IXpCnrEqe8
+            fKiKdRIdrVpg9rznmSQ+/uRm8DwQxX+L7RJr6sXlR+hSFCy79zzLs2F9aJ8t+X97
+            /JYYJKVcTQSfyH1whZ4yLtSj+sJBAe9dA5qTrz/T0x8Q2fVyBYWI/PYJ6/sB9X+1
+            ZETKuOdXvvtElgJyhmF0zaaIJmTB0W6JDowsBH8FqwG6n8Cq4KEwFWAwaRi1rZ3p
+            lhE5hivBr4F3CL+BJELFqRF55VxWTSNPJkXq1WL89jy5yJ2utRgFMocN8AAQ+RgY
+            I9sepoaC1YU+2kg7q3kKQ+y6DPqpnjDdWrY9Omqlftt4dCHPZZy7w53NcwAJLSxK
+            ocVwHNYtThpi9DbpCBYQhX+V6Y8bq9FqoQHFkkiIWF+xVyjojrQXbMBqdmkJzC8Z
+            VeZYkbyH5rNGOPluzOQfKHNT6molOY/eK88IWA+omEQPvmszpdSsX6Kr0v961p85
+            p+7ZphPfoRV4qrxhqjhnOyeRe66LTbBFl0E/VUzvre/tN5l1AAAnOTvHapLzJMje
+            YAInBFwXJm5viDmCIiX556UZLkdIagYmghzLvw/PKBH9uATitlDi6ustMnIPnvks
+            PS6xPC76BVG6yU0W5NQjGqm+4QTfwyaBq8Z9V/Pkr37grh+/zg9NJD8OK3+41UzS
+            XgG+zf4iBmwXPvjT2xFUAirYn/vdGS5c7YwUhqlB4tlWeyRPQqs7tLhUZwnlik/J
+            pnKP589XMAJG49NRHNO8WIuRF451//4vTF5q/kJ+4GVbH2RHWuYN2V4xvmeg/KU=
+            =VXai
            -----END PGP MESSAGE-----
          fp: 0xA534E46682DD8C35377352C88DD28608BE411065
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DIBqTX2T418ESAQdA9kBzNT1rCbaImb8jbHoaAgKYsA8yKKUqoM/Jq4nO/Uow
-            HZ1OjII3G2m8V9xh/YyyyadiUIB9zK4gcXmGwPfRJMFLJfBFxQoODBCMS/mjAjVe
-            1GgBCQIQqLUkyf2nPFXm2Kr4Yvm25TpykDDRGnHcYDTsv3CC+ZvWNfRoLzNObOki
-            RR3nTVWMFkl/XtL15O2vtsdZ+uTUWgV7aMf3SUfrnZao0FxFAwrDGRTg3IbMewUE
-            UsHEcNUht/UKHg==
-            =b3QZ
+            hF4DIBqTX2T418ESAQdA+mp0iY55CP3o0oJ6RK9xYCdqBva/4RO8Br6hSE9WHw8w
+            xrb5IEITYbuLFgyst0fMuC6TyAmsKqOTT02tuFwoFPmkIQ+Ggap2UTOrWUmNHNWo
+            1GgBCQIQ5qq9Z+Zm7RdtQTP5dwv+ZI+Cs7VwwbqvNDwg3PjgYD+JCZTochOn803k
+            S7hd0KOR/O+cYpqyglu/Qh+wvf1qsDqCSgcKcVmgGC2X+AuZv6fkFgsiSuoWMHfe
+            t2TZQWEOjdvxEg==
+            =xp70
            -----END PGP MESSAGE-----
          fp: 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQEMA7auZh4eKOkIAQf+IVg++pNdHTZUnx4zCp3poz2iOAam0FjaqCrN3J0uOSdv
-            WSaYfUY/eR0mtIEY3SfJOGUFpL36F3wT8FnCiIr3BiTsA3odyeC8U3pRMMSEMbv/
-            rg13dKB7ZQ+5OnA+8Nekm1XmQ8wS/niyJLCKLYg4G3wbr3zkLy8x4g6b+q0hsnnP
-            4cX7YvrVVPa9WcPy+DUIITwfdGNntMWQzl8FcrqptAqq0H5Z0VNb76vrmYEY9X4s
-            8HmsS7QWyvTI9X2Xin7w/eLsY63qkdHgFVZFlReV5ngMOdL7HdraXQJuoPljfKhi
-            8YPG4xKXW1Kbv1CvCIWFDafvWWFwrZekPnCsc9kRL9JeAT6Gza0lSNwFHvPV4mZl
-            dv95LnDtALfQOb2TIqGUAeSLFh0CELIMdhg2NgEqEf0g0cn198fTmynM+Po8BVlu
-            p0RW8iVXn4Tvz6kNgukbfoWQpiijZvxOntrbue0z9A==
-            =8E8F
+            hQEMA7auZh4eKOkIAQf7B9rJ1OoTg/nykZBFjKqSXVwdY/20KiqIWoBjn1WPF5sX
+            sLxJBYXGmCGNfLR383AI2g6KJXNvhOKUjVfWJCkrlzvXOcyCmGwvlBgCVcAoX7ha
+            DjT1wafjl6zpa/Lz2EZDrpabtCblfBpIS4pB3VRS7d2Cwv93CsthrWrXxyWGZhM3
+            G8sK2EFxYDDGo/fB/MzTz8TS8y7TS7hRLSG3xEJD+nCMb2zAv5TFuBhH7ltqYBcc
+            7j1D7SrVS4eAw2Q1YkiBnG6u2tiEgElW01GCl7dRKQTbCmfpvmtfrg6WvrB686Tc
+            OSRGdAXiO8HHnTcKaWpX/uUTxlRkg/B0gIECwuprrdJeAVHkx7//EpusCU78L4CI
+            9VkRSU+1veQrc6VAgD4E3mprfs68gzR6mfBf53gVnXXt2w0ps9n27Y3/+EbxIk6i
+            pzdX3CVZT0hyfQYv9B+aKMW/dI1bNaEiXONVzsxZ7A==
+            =PVq3
            -----END PGP MESSAGE-----
          fp: 0x49BA444CDC680527B4835F7C3C1AC435CD1F217B
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA11f9zoCBF1cAQ/9GEKpJbdv2wTU1IFWfvX4Pd+UwNTzE7MjfCEjR/28w1sX
-            wwppdgr1BvW1lPFulmYqiwpH6bnUtz5DtNk3rIxkP1V8p0akzjWX4hiwYDT/J07C
-            Di1xP2gPJNC5cxDFYoF84/InWzmMNHyKBFbSb2XFsvh2YtpKfOHt258bW3Ix0bb8
-            ceFfNJZSDj5maQu1XqR18Wm/u6o0hqP6mmiK8Dp4njvR/a0XbrkYVkoqLX9oEF3+
-            aXgDYZ6uBKLnHGnj8+Es7TENdboDj9By3vsnL9ui9nuZWo033TVpjowWFSQsfelY
-            EuLoR9+8WsIj7xpskaGq4bkfGuz+sUyyhLVOrG7lsr74MQfn7uk+lYHkbC/RBMyO
-            KpOm1QBu2i7901TnSHV7gfzBw65hpNAUMQKhGkaF7UGui41wBa7lSwj6l79IZ0Ed
-            01V2ifqfgIvoGlsjuHvR14H6dmuYGjVxhzqDSByzDC6jOWoYjiItTMX0brxNGNOo
-            p0OXlllp6rMJPQNCCxmoMHpxKPatJX6XS+GKVpZs/6TV2j1xz15bOWL9fC4H8tZ4
-            nurYDVpQGIWH9KcEWHi9WlFMr7i8pkhX2DRoFOczNZWBBJ14b5WRwVN5QiKqLXaS
-            qcAXXfdo6gfCLRZFRVWWZOJ7oAY+GTs6X8OwK/7O4nccMaTSoS+SKkJPU0WY61PS
-            XgGNfz60fDB8fku66meyXVHkEtDZdMfUcmcpIfUPprs1kRfRswkJmTyVyGJdKNKz
-            20Pil8InkQ9qbK6Coo8y0imEwqJCh88ZYLS4A53XfzKtQLwPtFESrrt++uJN+e4=
-            =mO2q
+            hQIMA11f9zoCBF1cAQ/8DGGOwf/htYHZup1pzf8Gt0O/MZBDX89nYqALwJWMBKg0
+            W9bwwpVNwuhQQGaq7yU11ccLms9J8mUEMxiGJI0817cK27Zn3Rh3sslxryDZ53wK
+            eH5OtRYAUC+Q6IWHc8xhuVYdBzMKKFeQadgdBo1hs7exy/FgevQSVaxb5xy/jKCs
+            bGYTe3O5hnQlpRlQmMmsidXqpxPhlmmGd+FRJpqUrW/O6amuwU/2CfONSu5COx+z
+            bfPP09EnXH4h9ZET6GtrIt/hXJyzUDhQLiMZ2rCgFT46RyOX/PEr9tg8ycbjMGXE
+            5F5Cc0nWNqXnB4q67ox5FpTgo4ChuA7fodPuhyH9T/2YVGOBhiPohfrkuxHQ3f69
+            NOq0jO/mCZS3LyiZ4yIt0shdkIQZrHhq5wy7KZl/TjLsxUpg6QtG3g2MswbD7nUv
+            NfnA7146o4FsMW5ML/Cef/YmZdlRbHnAfUbs7+g2Gv4Bet/42EeTcEJhGhWfUWiS
+            T7F6HqoqiLYicrFv64YBN4m4tuV16CUpy9+ZJY8Vtrfv5008y1pMTf+tfSQz6NOF
+            7IRlAFeOp1cDIaD7iKeyWI1iJbv+V/X0/WbaL4Lh3DuDu+APVJW8suYtn2cEe7Ay
+            XzoLojXv+Uk0qV9y2XPRRMmQi/a1t/5Guymz5Odz9MZKtiBlMA5UMz4ruPcPIszS
+            XgGXH0cv2m6T+lwdlVyCIqt324dMqc2nw2wLPsOdJ24sNpXwrHxjh3yg43w0edv/
+            jzlkx71DhbKsbjrQyRGRC44oFkTcHBzrlG33g1px+YGldtUaHZGcQExOlZKRvsw=
+            =P4ll
            -----END PGP MESSAGE-----
          fp: 0x9AE04D986400E3B67528F4930D442664194974E2
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA/HTIsSK0VBlAQ/9Gqv8ifZPE3vNxEtED9glDrORtim9YR2Cpa+00fNzrTgb
-            uZwIarDt9FZNxPXCOFXElWw0pEoj1VM3QVkUrbO5Vqr0kPSMuytao7drncPZqFRt
-            FIls6wINcBLAEYjoqbhPxBfGunlnoiWp4r/eo76hdpXnrY+kQV8hAsN/820cPmF7
-            1spCv88nd3bPpE5Ekb4cDAhSl6x7WuT9diELy137LpuQER0eNneqTXuGn1L3ckNz
-            meum4XN9o/heOyUgX+JFEa0Sb7gJ0MWA1ymuv3NFtNjcoxgRKc4nTueocDamxazm
-            9rD4+TWkLpG3ghjlOfRSYmm92kSUPMp3kg50loGSuRXyhlJpRmVWY0eOO+V+61Yy
-            RUAW6nuSgJGr3vaUsAI/Gmo81QpeFmu5SOsB3kbv9I1Hrl946PGMsyCXt8RuDaL+
-            7G3gzAezCkeu7DD6wXorL3Rt9stGGKh2zMWihdLbOY3652B7NPQtP0SwFEe7IQc0
-            bqG4GdRby+es/ImvgbpY5sOVdUSNabg+Msq3FItYJn3VWwxM0pExje9l2GcUFCQU
-            eEktY2W1THLtt7k3cfz5I6qjhEn42zJ3BhK1cvLDUoBFygEaIav0E38N8Dy2A2Kr
-            7O+8q1owrJ+JqicDyFvTcmW1jtcl96zhk0L85Hp3CP73RFXRoGTgHu5C8xWumILS
-            XgH+KAG3QYJfU3cqUy4nl5aBPFVeplaGYV8JdAe6Xnwrvpm4CPv7jM4V1h4IWiw+
-            5tbZ//EMW4d/S3dhOmn65nozTrafp6ReaaR/gIzODwymDBBNVVQFWAkVnGza190=
-            =Ki76
+            hQIMA/HTIsSK0VBlAQ//ep9FOEokS5/i86xOsWIekOPYvi3UN6baZE9IoRlE49w2
+            6O8kAoxLNqjxep7Y75a6S6qkIyCb3uSf2bf7Wc8WQgHSWVZY017G7O1i98wdbEi8
+            qry9ygekcJIPjTuHxE7RadNoABdUi7mfeS6Kv3qEyCbCpO9ZVweqCQ4KzLu3PWiE
+            TReHT5+ZeWUvZUjpB7ZzKchvh/34vYF28/8gTJZw11Lv9ehIF6tN/vQA5kNL9v9l
+            MWI2z6DusNOWI4gfIWajFwkLg8/7GmgQ+ThFET4RzulVA9ul7kmcVDSoMpSOJ/HW
+            CTYXdJZyNzwg70qbLMOMglfJTY7Fc2a0+ReN/M42bQdW/M5P7Hqay9DNagb7IqNy
+            E782iVdhS0gNsV2zFWlbhs6OLbOvYkqWduM5JII0P/eJEaSeChEtzwJQ5xzK+U9b
+            15O/VSXgeWjmpxTS6gZLGBuSEsVbOfcbfCxECMl88pbkpy3Fz49o8OEiJ6/8Xtr7
+            Olo3+UYqDPUfZKBpITbqYwcufsVnd/4tFaTHKlgblR4wR02aTCxJm0iGnK0KubU5
+            TItsMFgqQujWf4IE10StZVUi1FgU+4zujUGep4AGFSzANNFaa2mJXTpPt09P/H8z
+            HBq90ZBaDF33T6U17Xkn1NR5ESp/iWnYLW9BSVV5avKti2pwsMuZBY6n4ye7TyvS
+            XgGdXytbbBLdp/xeXp80EkO1NJh0OpvjDUiFHudccVAP31dOUOCQAZQCDEX8f14J
+            iiHr+B72NrPR0/reLDyP7D/Su7isXn+V66GtpbOJW42nu2elKdCeO3cDlgJTCMs=
+            =HJlu
            -----END PGP MESSAGE-----
          fp: "0xFA47BDA260489ADA"
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DYIEGJeT64uMSAQdAtl8B+3uEPeBWzgzWpILRaXEO09pHttBhsEMQozRWECMw
-            QPiYcYzJCZHk4kBap2yD4WOv9/BZzy8FH4vzJhym4U8vvt2WrvYw8SFvIFpK6crY
-            0l4BGsVSf/nkbG7IL6UJ6v65RcNjRXZdUduZp3VllE4bd5inZP8np5ggrDeq1THp
-            AhducNDdtmf2RNp+Mq4TAgOmSIUkEWPYsaAWaEhbQUcY7ZoBNPwD95YGQvp+7yGw
-            =bXDI
+            hF4DYIEGJeT64uMSAQdA50X4+sbx3oJ+ZyBVgnlVWEm647fMtmUOO0baw1RdSBUw
+            BOfInzsySFnQvc02duUigld2F3ACOlYwKVP8FRv+jfGi9Mxh44ljUVw+u7deo14Z
+            0l4BGi/lF0cFFTK72V0ddZYq/Qm8bm+yubM8T1UfNnZhTfUfbue2cvZSkeVaROZd
+            rsIJY7GRl1eGHVR1jsEpLgTMPWMI2nTSUyAmxr8o7PXCoiKGA/liSHdCvKnvIPIK
+            =ML1v
            -----END PGP MESSAGE-----
          fp: 0xE474A4AB587CD834813DF35D03FDB411169D6C8B
-        - created_at: "2024-11-19T16:53:01Z"
+        - created_at: "2024-12-07T17:36:46Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQGMAxrcfL3KHjCOAQv/Zf/rEcojghY9Eqx6Amsz8LOzLUx6HMUVezoDpEJOQ+sU
-            XckkGFGHfBvBHEEi9/tnR5kpVDPJrEGbU6uAvolEu7XpdijYYwMxiihikHJvaczD
-            4skcvwQehC68jnVF6zrFGb4Po3ulFcyOajggBdjsf0KKI5YO100cqxYz73ROHKKf
-            Hd+ZZSxtyQjQrg6ePrTCDPe63VvzfBeYwehsTZWkKlvhKlSivyG7XfddTOKTDi2a
-            o3kYnpgzv3Nba4wlfvAX0WdKCWrLUGlcyrJMvb6k7qzjppaZuXkN+l8VDbW2CDGT
-            dnp2ipXRiHmjK4olE/XuAMx1ZMq6jjfHaqe3fXwSfDFqPYgel1ieXLy+yY/Zrojd
-            yhrCWk3A6w1mZXZWJJlrWIyXkjVJBkBZIPXkidYQ05R3ICLqTUIry2PwkE7eerq9
-            o/zuq9vmyej5Xn6vLQcZqJiTvCCSQtQCPUQyvjfW5PhSAS/xS9rBv4/Wsvvy3/aS
-            MowcFvt3Jp7ys+v3w/yD0l4BYz/CdUYNmzNWgdhzjNb0nK7zZKv8bhfw9geciORn
-            aXkXtYSdf5lko2ZR+5eDnbBY+wMVAni5bDS9+yE5lwUJ03eBqPMf6PLcFMtUQ+jE
-            toiBI3SQqELZZoBxkk6/
-            =HOfv
+            hQGMAxrcfL3KHjCOAQv9G9aQDkBDtEDu5PotXxb7/uJ5qRvBFALfu8O22Bq0GMiC
+            0edP7O9TwxVBt0kdVDMxgoldrPfVkpswA4P9qTfw/MdvrtZ9E/aaxpM3XbYzWMru
+            keJrW9r17J6Tk2i60D5Kut6Vl1sHVJd9NB2S8ERI+Rn6D3gwM2Kpm2PTh6lI+iWC
+            1Uwt1M7eBe0wSPChpPGxt0Wlf+Ad+NqylH6SeAZMsXUlk2sjb9sX3NyiVLdZq9rr
+            JmkRWftIRdtyOO/Nib5E/0lN7kKy5OI6oXzmXnLExFnRIZhfyUOKR5qxM3KLoGIR
+            Xr89jFAu1j/2Gb5tnB8IJzq53ro2m3y1Fo+zYCJ5VqAnxFX7S5ItICAWxLSHkHFO
+            hUrM5QkMfQyLHHY4lSoXnS1rPKBV6QdrVEn/08nQihU0+jzSVRcS7aVCBk4mEbCN
+            RmRC/tOIW0fiihBDMF3ufYWxuNHqO3RKRNJ0fLSkJ4NTZYzGdZ9Kzp5UwUYFhDFZ
+            CWg2Q3/KpYQYYRVNsq490l4Bw7Xig9bUO3W3K66wSlsXcmmQL+nmqc34bal3BQRe
+            AQ7+0PQZObNI66MHgNoRqAe7/dtx0Ca+j+WV0rqP3AYNbaMkj5USb+3AmbbToWRY
+            FoX5+YCcFiI1YpBgP6Sc
+            =zwdT
            -----END PGP MESSAGE-----
          fp: 0xD5B872E407D438721E5887A000E765FA7F4F2EDE
    unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.1