diff --git a/devshells/default.nix b/devshells/default.nix
index af1eb17..5e9e7da 100644
--- a/devshells/default.nix
+++ b/devshells/default.nix
@@ -8,6 +8,7 @@ pkgs.mkShell {
     age-plugin-yubikey
     nil
     nixpkgs-fmt
+    pwgen
     ssh-to-age
   ];
 }
diff --git a/hosts/vm/nextcloud/networking.nix b/hosts/vm/nextcloud/networking.nix
index 7fdb3a8..729af5c 100644
--- a/hosts/vm/nextcloud/networking.nix
+++ b/hosts/vm/nextcloud/networking.nix
@@ -24,6 +24,26 @@
       };
 
       ens19 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.4.146";
+              prefixLength = 24;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "fd00::4:0:ff:fe01:4604";
+              prefixLength = 64;
+            }
+          ];
+        };
+      };
+
+      ens20 = {
         ipv4 = {
           addresses = [
             {
@@ -56,26 +76,6 @@
           ];
         };
       };
-
-      ens20 = {
-        ipv4 = {
-          addresses = [
-            {
-              address = "172.16.4.146";
-              prefixLength = 24;
-            }
-          ];
-        };
-
-        ipv6 = {
-          addresses = [
-            {
-              address = "fd00::4:0:ff:fe01:4604";
-              prefixLength = 64;
-            }
-          ];
-        };
-      };
     };
   };
 }
diff --git a/secrets/restic/nextcloud/base-password.age b/secrets/restic/nextcloud/base-password.age
new file mode 100644
index 0000000..df0f178
Binary files /dev/null and b/secrets/restic/nextcloud/base-password.age differ
diff --git a/secrets/restic/nextcloud/base-repo.age b/secrets/restic/nextcloud/base-repo.age
new file mode 100644
index 0000000..52eb252
--- /dev/null
+++ b/secrets/restic/nextcloud/base-repo.age
@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-ed25519 /b16EQ h3o1A+lkjp60+GbWBzn5X80SiMc5C2BWUkiwOQ/Ce1o
+LgVIoaknvsFcbOZMcaSjSQ6sN1axSXcl33LudMb8BMc
+-> piv-p256 ewCc3w AkbgocjkeGCGoqwUkxt4+nUgFizjkpv5g0UMqN2+/Jwx
+jcSLoynzd78v6DUoB5Vg+mfmMC6HM8+/kOyU8uJz2P8
+-> piv-p256 6CL/Pw AgVKNHVcqn5/TaXDLP7y7aRqLKlhNzDung+zqnaVv4TY
+EVyCYrGRujcor55bQuaDSTcnYkFfG7GwiA1L9UOojxs
+-> ssh-ed25519 I2EdxQ FYC9hhwUDC3Ny/LuU3QJKdbcJf5WWX2+VexDZsCIdhY
+6FG8tfDK1H7Cs5VF1BzdQaWZnCQkHhKedpTqrHdkbfM
+-> ssh-ed25519 J/iReg pgrkKtAJtZxfdu6OWBOG9K5NuI+93QNlmfqu/OQbdQU
+zT8Vn369wmCjqc6EI6VkONyZF5t9/dVEF4R2kFGP5hE
+-> ssh-ed25519 GNhSGw QmfrulquW5B3/O/BgBGnPd+P343sR8OZVCKtYO+eigk
+U/fYyEuzLERPZ1GqBxAwk/UlHhjPTg4RDResF1kfzTE
+-> ssh-ed25519 eXMAtA Y+nxmyrQV7ieAPE2jCq5lVCfNhgZkLWynu0YBhdrTUI
+T0bTnwnxFktvvqu+5AzLQzW+K+6t4y8g0HgAWK4k3so
+-> ssh-ed25519 5hXocQ MiTdS5yr63azG20TfqHBXUkpGztPIGvbwrgX+UGv4W0
+B2agr/KqpwJSC4X8q0e3pV7qC5i/pLHUOPTpuj3Qgxc
+--- o7yL3QHbFdaxZiOOmSmCbnF9K1sc2kBQTcRIgEguCs4
+�w3j҉�������pM��O��{���g2bz�Qa�Pj��tZ�&N\H�&�����uܫ��4�
j�"��1�n�䔄*w
[�pǛ�/�#�����oD B|�2�K��\�D���y��u��y�t��=��|��xpF
\ No newline at end of file