diff --git a/devshells/default.nix b/devshells/default.nix
index af1eb17..5e9e7da 100644
--- a/devshells/default.nix
+++ b/devshells/default.nix
@@ -8,6 +8,7 @@ pkgs.mkShell {
     age-plugin-yubikey
     nil
     nixpkgs-fmt
+    pwgen
     ssh-to-age
   ];
 }
diff --git a/flake.nix b/flake.nix
index 8785258..35903ef 100644
--- a/flake.nix
+++ b/flake.nix
@@ -60,6 +60,11 @@
               modules = [ ./hosts/vm/neo ] ++ baseModules;
             };
 
+            nextcloud = nixosSystem {
+              specialArgs = inputs;
+              modules = [ ./hosts/vm/nextcloud ] ++ baseModules;
+            };
+
             periodique = nixosSystem {
               specialArgs = inputs;
               modules = [ ./hosts/vm/periodique ] ++ baseModules;
diff --git a/hosts/vm/nextcloud/default.nix b/hosts/vm/nextcloud/default.nix
new file mode 100644
index 0000000..5bea3e0
--- /dev/null
+++ b/hosts/vm/nextcloud/default.nix
@@ -0,0 +1,52 @@
+{ pkgs, ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./nextcloud.nix
+  ];
+
+  networking.hostName = "nextcloud";
+  boot.loader.grub.devices = [ "/dev/sda" ];
+
+  crans = {
+    enable = true;
+    networking = {
+      id = "46";
+      srvNat = {
+        enable = true;
+        interface = "ens20";
+      };
+      san = {
+        enable = true;
+        interface = "ens19";
+      };
+    };
+
+    homeAdh.enable = true;
+
+    resticClient.enable = false;
+  };
+
+  services.autofs = {
+    enable = true;
+
+    autoMaster = ''
+      /home-nextcloud /etc/auto.master.d/home-nextcloud.sh -t60
+    '';
+  };
+
+  programs.fuse.userAllowOther = true;
+  systemd.services.autofs = {
+    path = with pkgs; [
+      bash
+      bindfs
+      gawk
+      logger
+      openldap
+    ];
+  };
+  environment.systemPackages = with pkgs; [ bindfs ];
+
+  system.stateVersion = "25.05";
+}
diff --git a/hosts/vm/nextcloud/hardware-configuration.nix b/hosts/vm/nextcloud/hardware-configuration.nix
new file mode 100644
index 0000000..7b9a662
--- /dev/null
+++ b/hosts/vm/nextcloud/hardware-configuration.nix
@@ -0,0 +1,46 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/342946cf-cf7c-411e-9e8f-876ac18aa443";
+    fsType = "ext4";
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens19.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens20.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}
diff --git a/hosts/vm/nextcloud/nextcloud.nix b/hosts/vm/nextcloud/nextcloud.nix
new file mode 100644
index 0000000..890d8dc
--- /dev/null
+++ b/hosts/vm/nextcloud/nextcloud.nix
@@ -0,0 +1,51 @@
+{ pkgs, config, ... }:
+
+{
+  age.secrets = {
+    nextcloud_db_pass = {
+      file = ../../../secrets/nextcloud/nextcloud_db_pass.age;
+      owner = "nextcloud";
+      group = "nextcloud";
+    };
+    nextcloud_admin_pass = {
+      file = ../../../secrets/nextcloud/nextcloud_admin_pass.age;
+      owner = "nextcloud";
+      group = "nextcloud";
+    };
+  };
+
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud31;
+
+    configureRedis = true;
+    hostName = "nextcloud.crans.org";
+    https = false;
+
+    maxUploadSize = "4G";
+
+    config = {
+      dbtype = "pgsql";
+      dbhost = "tealc.adm.crans.org";
+      dbuser = "nextcloud";
+      dbpassFile = config.age.secrets.nextcloud_db_pass.path;
+      adminpassFile = config.age.secrets.nextcloud_admin_pass.path;
+    };
+
+    phpOptions = {
+      "opcache.interned_strings_buffer" = "32";
+      "opcache.memory_consumption" = "512";
+    };
+
+    settings = {
+      trusted_proxies = [
+        # hodaur
+        "172.16.10.145"
+      ];
+    };
+
+
+    appstoreEnable = true;
+    extraAppsEnable = true;
+  };
+}
diff --git a/modules/crans/home.nix b/modules/crans/home.nix
index e95fbed..e2e4bab 100644
--- a/modules/crans/home.nix
+++ b/modules/crans/home.nix
@@ -1,25 +1,38 @@
 { lib, config, ... }:
 
 let
-  cfg = config.crans.homeNounou;
+  cfg = config.crans;
 
   inherit (lib) mkEnableOption mkIf;
 in
 
 {
-  options.crans.homeNounou = {
-    enable = mkEnableOption "Monter /home_nounou.";
+  options.crans = {
+    homeNounou = {
+      enable = mkEnableOption "Monter /home_nounou.";
+    };
+    homeAdh = {
+      enable = mkEnableOption "Monter /home-adh";
+    };
   };
 
-  config = mkIf cfg.enable {
-    fileSystems.home_nounou = {
-      mountPoint = "/home_nounou";
-      device = "172.16.10.1:/pool/home";
-      fsType = "nfs";
-      options = [
-        "rw"
-        "nosuid"
-      ];
+  config = {
+    fileSystems = {
+      home_nounou = mkIf cfg.homeNounou.enable {
+        mountPoint = "/home_nounou";
+        device = "172.16.10.1:/pool/home";
+        fsType = "nfs";
+        options = [
+          "rw"
+          "nosuid"
+        ];
+      };
+
+      home_adh = mkIf cfg.homeAdh.enable {
+        mountPoint = "/home-adh";
+        device = "172.16.4.2:/pool/home";
+        fsType = "nfs";    
+      };
     };
   };
 }
diff --git a/secrets.nix b/secrets.nix
index dbec4ca..0756af6 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -28,13 +28,13 @@ let
   ];
 
   # Machines
-
   hosts = {
     apprentix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCJV6jqQWEYuwi+OJ9r/4TbBN/cK9NvYWNiJhpFzcc7 root@apprentix";
     cephiroth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOsBGkhiu6l3jeo15cQHMu3dPyL025zXPV2ZH02EDYEt root@nixos";
     jitsi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6jVMIZ5y2oXX9HOkw7r5UUjw95MlFaFuu7FnEC0Q8z root@jitsi";
     livre = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVfKNokHG6ig32hhQxTep+fKFmKahlDClPrX/dP4/gb root@livre";
     neo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMGfSvxqC2PJYRrxJaivVDujwlwCZ6AwH8hOSA9ktZ1V root@neo";
+    nextcloud = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMgSP9UmuJw8Bi2ML07WHsWvxN8akkc9XZxXyOgdjXkq root@nextcloud";
     periodique = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHTdfSIL3AWIv0mjRDam6E/qsjoqwJ8QSm1Cb0xqs1s1 root@periodique";
     redite = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwfVmR3NjZf6qkDlTSiyo39Up5nSNUVW7jYDWXrY8Xr root@redite";
     reverseproxy = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOx/lUQE6naP3EBy81sr93X8ktZmivU09ACx6T43Odhb root@reverseproxy";
diff --git a/secrets/acme/env.age b/secrets/acme/env.age
index 72ebb92..02020f0 100644
Binary files a/secrets/acme/env.age and b/secrets/acme/env.age differ
diff --git a/secrets/apprentix/root.age b/secrets/apprentix/root.age
index 97706ae..9138932 100644
Binary files a/secrets/apprentix/root.age and b/secrets/apprentix/root.age differ
diff --git a/secrets/common/root.age b/secrets/common/root.age
index f7dff4d..104ebb3 100644
--- a/secrets/common/root.age
+++ b/secrets/common/root.age
@@ -1,38 +1,40 @@
 age-encryption.org/v1
--> ssh-ed25519 2k5NOg cR5ohdfnKc3NNlGxdVDsLe+jAmLBIfOiaGfFAPPmrTg
-848H6k08p4PzbkD+c4AdtGAK0D3fxFFOEzrvqvFDgbg
--> ssh-ed25519 iTd7eA AWwcHOwmn5hHn3POEFF5pJpvWJ8lcbrMe3n3JqBfyX8
-D2PdIh6BFBocjfNeDLY6f9Th0yixTBp7V6sMVEzoXjY
--> ssh-ed25519 h5sWQA pWqJ5nuVHkg6rFvGn+8tkdH/cKQ/xwIMED/giZeCOGY
-GOKAPL951GOkyQxM2SEst9Yv7Omhp+y22zW/Vbu0x0Q
--> ssh-ed25519 /Gpyew kRpo5sKEN283fFQpr2ML9GuhpugiqRsQ0Ezc4BjBKlQ
-8hKJmmgoNapIruh1hc+EUyB/uZVKvtZrocPPd68naMk
--> ssh-ed25519 FtI9pg Ieby+KtL7TViX81m58F+y1Ll3aZubWndFBOpVEEr5jQ
-JhpUwA+U5ppm+SCPzQ0JNA/hjGGUGd+6xpDenjPsnt8
--> ssh-ed25519 hTlmJA HTUuHAiK0jRB86m9kxk+K/U9b7cnTLwJ6DizUhpNOjw
-T6VuoPzd196TizLAJgi4xa4pMXlF8nzrbQMENRbRlY0
--> ssh-ed25519 GCcVXA 9mjW03T5ockAAAtZtVjIZTIYOXwaCeG4nAK+K/97EDs
-yYYVpyomBECUSw+huUaX7p9TdBclUukd0m1tZbrOP/0
--> ssh-ed25519 LAIH1A 6aYzD3onWE/lZE22Y+ZRcXqZX8ODq8gM84fvtIuG3ws
-kuNjmtOxsCC6xpsMpDN+d5/nmKgKo5Q2n/NvVEJGqVk
--> ssh-ed25519 qeMkwQ UkTD2aRW1DcE1pwwcUY5jdzFry47IOfrgcFeb/7U0iE
-0K3bYslOGMvhvD52C/OYKWLCSD/GFYUnbAMNGOwJ4O4
--> ssh-ed25519 TqxOLw ucyZoaPMI+iC/lC8fdZlSwL70ScqA/18rFgZKGrWbw0
-fNLP3zECUQUOz33Rf2XZLHiY4uSt6oc0z5U7x0GBmtc
--> piv-p256 ewCc3w AocWW7SEg3MVI/sCjCHu9obVVVVbFcfFazpmTTR+PRMj
-498jlz/DJgqzZxmvF6sRHruaOK9ssXpuM1UfbZwzWE0
--> piv-p256 6CL/Pw Au/taJ3kM3uj06PdSgUPHC6UVCCOYDbMY2m2Eofbi63V
-9NRjQxdkGM6lNnRvqWyR7ugweuvw4R6oCG2Qm8JBPuk
--> ssh-ed25519 I2EdxQ nek4QEs28RjB5LmGI8QmI+PovaBsP20H58HLft9t314
-7kD4VKhSe8GVI6G5nEEB9S75nqiWcw2KIq5yXQW6pkM
--> ssh-ed25519 J/iReg NaSxlV2jBjaEHjddB2x5wiUfu8dqzgPOKB1vaRo8cUY
-b2Wak21uSh9FEcCsXAc9zjuakI0B7e2D4j1EmyKHCS4
--> ssh-ed25519 GNhSGw /0K7Q0S2PLsIa4gFjFpwcXYHhRuDdRJH16FMX2/tJhs
-ti7iUykOROYtos8+jPlQoyCur3hhgZumzzaqHwE/k/g
--> ssh-ed25519 eXMAtA wx6srIjvJ9E+lZzvg6jvtAVmTg/0B6x6f1zv8D6LuEE
-iFjLVZ/c/pevSRzoBUee07TX2/tVFUThvvP6Bek4LIQ
--> ssh-ed25519 5hXocQ an1+7W1qN6bEdGXBfio99DzkTcZC6gEOm2ZQe11x5Us
-cbPU+Ih4aUVSOOveg/mQnV57Tn8boE4CKusOag5ZgNU
---- Ya9fvOnvystGbDpL8ti3cqD4sNIaMNF1Yv8OuviMgjI
-����V�j&q�n�Z6�#�;�
�8�B��C��GE1Ws�b�
-4��.�	���0�cj��A]I#�M

\ No newline at end of file
+-> ssh-ed25519 2k5NOg kY65gzsGymzU9ntZ0Vvz7idvfbELlBCqHE9C8SS5pD0
++GiXzZpljPFhO6R+KjUKrPcFmt/iQtgEA2jCtzi4Klc
+-> ssh-ed25519 iTd7eA /Psi5YxTac7iZMQ+yb4Q+iq1JowMXDsQ1FkXzS0ceG8
+1AYld8Y9DfVO2WTWfhQ4s7qLPv/6vrTp2YoiME0gr9c
+-> ssh-ed25519 h5sWQA vNM9h/4NoIKwGaxrwIQfPt0Xbt9xuv9g8ZfUqsQVD00
+8ob1GxZ+hqqWRJd7rSTzqtHeOyaBQV0x4BjkiLgXIMQ
+-> ssh-ed25519 /Gpyew B2C2cQjxiPjab401sw6zfhIFzCAp17y5uqyuMCYT410
+xXKMlOccbhFEO2gqfPb4gv/oZ2I/ddvqbmcHIAlHhYc
+-> ssh-ed25519 APVFfA 4u6vnSPbm/XP/pIEzz3EGu4R2c3nGccwJXxiQLE9nXw
+0WKEx9pYp5JrfErmkbYmJO0BPqEJJ5kIc2CqPQgNHRo
+-> ssh-ed25519 FtI9pg 2ZY/tlMgDqM9Q+ypugFLRqhJPlqhMPlMR7Zu7HsRtFA
+wVQzjOm5gUFLeMMRFTUNXZ2z68N4BqSFPIsZBFpHlos
+-> ssh-ed25519 hTlmJA 4wQuFsSprLERMIsZ9wCAs7eZQNEzUPAK+IfuvHjwt3U
+90alltcXn2QKdW4ZP95LBSZW4lmWrqSiLYlaeBpuNQA
+-> ssh-ed25519 GCcVXA n6V+vNJVtoN5vx1yqXEf1nOTdBhbiDJ8dNxG6iZ3Ang
+PBNwUqYeTU8ILKU8S0NtE6MzA5iFdkSvdVaWg2IQbRU
+-> ssh-ed25519 LAIH1A GE2DebHrYjsRkilv+L8wLAYW/SK7oGx4Ekc17HsQOlM
+FXCF9y8kbwkjBJqokouOujN+IjT7TI/QHxd4EFSCbQM
+-> ssh-ed25519 qeMkwQ l0u+A4lRMJ7QL1Zs/hWAlIdvu1rrsOt2/Li025N99mI
+7CV6fEnsPgImtQaBLli0zQW+SVh/ADUOQB21txm/66U
+-> ssh-ed25519 TqxOLw fJvGKe3x9QOanXL/8KZgMkx/v44d+QszCPYJnIabhRA
+Mmu+jg9gHEs6hssud3O7Z5jp1GpAb5Y114e/BHLXvg4
+-> piv-p256 ewCc3w A5qq6I1OXB2RRoZDr+oNHlzwhavOm3vtf4xSoHABBKqP
+8SSy5A51xaUUqNd7cQjDytU9pVPQ+9IiBU2rfkt5g8I
+-> piv-p256 6CL/Pw AsQ1cRkLNF/tupkIss4Bglz+4clYAev+yQw8PJIaFrWS
+y8+wbkzHcTpLwukKz9DwP+L4oqvKivaaaZWZ9lrVMvY
+-> ssh-ed25519 I2EdxQ uodJabvJDJXYbHyDZbraOonPEHgGt0eHtOAKxSn7YHM
+mARwFZTfLUVjfQGqzNTL/bOaRjHYDyuE9ZrR0s2KDPM
+-> ssh-ed25519 J/iReg m7Q+fH13E0iusz1Zcll7bOY4uq/S/ofCqEi6pRlGhws
+ZsMvf65cgmtFpcD7ZB/5D8cUehmWcn701Nkrhx6tjdQ
+-> ssh-ed25519 GNhSGw 0SgJWPT5zLIqoOcxtT9BkPdaNZ4UXa+r4YPCBGMNFHc
+eF+pqs9mvgomiUpFqnlxKRyhLc1muzonX4ON53ISC8U
+-> ssh-ed25519 eXMAtA pSh+yGsCxOArzqXjRAjf1EMX2jRw2xsbk2vI+0RFrSA
+I8AEuWWFbaq2mfJS6BkVpLHvrD57BlFDhI4eKjFSVO0
+-> ssh-ed25519 5hXocQ Ekknm3agijK4JKHZsdts1q5AQXgcCu1j9LVSuw1Hlgk
+xrZUeEVlAxvDF8YJVWAI1xVzBU0xwlh1LqA2oCiGZ0I
+--- SiTXG5EGtNY+sUbUHK890FnGBYWgRMuYEl1LyEl9AdY
+��ޖ�����/���!���ۂ���,�
+U_��ܶ�
	8Z���$�>B�mcR9c�xb�),�*i�
\ No newline at end of file
diff --git a/secrets/neo/appservice_irc_db_env.age b/secrets/neo/appservice_irc_db_env.age
index e7635bd..6f61941 100644
Binary files a/secrets/neo/appservice_irc_db_env.age and b/secrets/neo/appservice_irc_db_env.age differ
diff --git a/secrets/neo/coturn_auth_secret.age b/secrets/neo/coturn_auth_secret.age
index b0493c1..7fbda15 100644
Binary files a/secrets/neo/coturn_auth_secret.age and b/secrets/neo/coturn_auth_secret.age differ
diff --git a/secrets/neo/database_extra_config.age b/secrets/neo/database_extra_config.age
index 604be95..b9e5e48 100644
Binary files a/secrets/neo/database_extra_config.age and b/secrets/neo/database_extra_config.age differ
diff --git a/secrets/neo/ldap_synapse_password.age b/secrets/neo/ldap_synapse_password.age
index 0aba78b..b546281 100644
--- a/secrets/neo/ldap_synapse_password.age
+++ b/secrets/neo/ldap_synapse_password.age
@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew oaVD79l3EZWfSVKb8XpqWAV8NKXySVAPbWLoT1UA52A
-+kOAxHr3zaV5i0JpQAtlAdU95Q9M3rJqGtIJ8XvPbkQ
--> piv-p256 ewCc3w AivgKvbuHgMuIJkXqo2/Cp3IF5MJAbfxKBMngMbKvQq/
-OKe5ZZH1BcR02enuqgNYQR1xUk4nwHnHUwFeWNa1+Eg
--> piv-p256 6CL/Pw A9Tk3dUEE9IL2Mke3E3mOe19oqDS9YTDZK3yRV75eJX4
-8qCQHjVWgfLk99WfT1694g3DvCozGbfYrf/cvsWygGU
--> ssh-ed25519 I2EdxQ iD7bG+gD5EB6IKt37N5wBIK+gykxKX08nBJmqUMIKyE
-xs5EhKazMdwtYiBh8DWyZfp9N6oHUXKAUwJ3ipGnoUo
--> ssh-ed25519 J/iReg z+J9LYzBpAmrk+qs/bKM+dWZADzaCG1Zn2++aqngiUI
-ZKj2uEEtSxI+VZmFMTIs/YCN27Dzaez55OHcRRcXGGg
--> ssh-ed25519 GNhSGw QiKR6ruzN9obAMMWEX1SJP6cuWG+zPer1EOEOubWcyQ
-EGxT2dlZg9SBCH7MI6HygE6bgeyM2Njj+bfc9HVHAHU
--> ssh-ed25519 eXMAtA iD5onNylX7xPzgCZDnbio6+5GtbuO9lXDE+mwVb/jlU
-rdadtpwMGEAwZOhYId9xeryALddEK3T4DQP6dfgSYN4
--> ssh-ed25519 5hXocQ bhNzIK/vKeNNpqhZA9dEtHOlfYQ4sZpwF4Xy2Xm+yA4
-pD1xgl7iR1nYEjt7TcMQC2WzBlaMukoMNwBgomm0zzo
---- tMEzkXbsknws8FNrhwbH30AMAvDUtmI+IiQwUYCTLfs
-׿�[��Gl	
-�"�7B�M�ػ��r6X��5M�d�	D2�s�Y�
�Ǫ	�v�E[p
\ No newline at end of file
+-> ssh-ed25519 /Gpyew xR94/qEfy/eHZf7lntB6VD1hLqdLCT9byz8ul0xTbUY
+cfbKctBYGamlwCwa/ewWWIheFuhWuwhvnlrn7AX6UiY
+-> piv-p256 ewCc3w AmZz292KNF36/aZZj2cgY5ssrlht3h3nYuqrtb9IJoCT
+mWnKUcgLc7S7pmaXB7o+oy2/PiBh21vYxJvlRjD6Klo
+-> piv-p256 6CL/Pw Ajm9Ycp+C2XIaB3ipP2LhV8m9ffF2gDsIG0Agpdm2DbY
+cSpO+5oELV6Ms006WWxDk+qALErvpHDguEIZrNlA1Tg
+-> ssh-ed25519 I2EdxQ sqKNBSBmHOIqsQyb4VWtBzAJLoBmcqJ8JedowtBrv3Y
+boaqeqnUVURhlJoApXbGKKUpUjokRUV0SLfIp8umanU
+-> ssh-ed25519 J/iReg 2Bu5YnpF/ZdezwiOXXZaHvkQkCP4z+e7ktEMQexX4zc
+lQwneMnYESvSaMku6+paCQupYo/jYdwI+mVHiidOVBA
+-> ssh-ed25519 GNhSGw h6WyAtpmLQb1bNxpHEGW660j4UaTaN+X5VB0Mgj50lg
+WjnNtLCwAKRD26x1mJE+PpHK13bvWWYa6gQGOyImJfM
+-> ssh-ed25519 eXMAtA 2PJfk1QCItSjIxVp4cad6J0cddHcEwmgIapGmoJ4hAI
+Mg+qttQhyXsKfQyhYX49i4KiFCsBfkLG770hZqSToMk
+-> ssh-ed25519 5hXocQ F2ttAC+sr3tnsHVjiND7POs4pA5+VgjDhRZUI2uS/0Y
+Z5yinqHS8v8+sOTecNOcSkkswPrazKwHh5TQGx2TZOU
+--- 6ONblWIeEEYmZjqnJaMgXeoExrTm+E1bD5WTmr8dap0
+@��Lb��o
��J�3���)8BC��$Q������:�;A;�ї�Ră�hwr-cM09
\ No newline at end of file
diff --git a/secrets/neo/note_oidc_extra_config.age b/secrets/neo/note_oidc_extra_config.age
index 4e0abde..39b40f5 100644
Binary files a/secrets/neo/note_oidc_extra_config.age and b/secrets/neo/note_oidc_extra_config.age differ
diff --git a/secrets/nextcloud/nextcloud_admin_pass.age b/secrets/nextcloud/nextcloud_admin_pass.age
new file mode 100644
index 0000000..387ca2e
Binary files /dev/null and b/secrets/nextcloud/nextcloud_admin_pass.age differ
diff --git a/secrets/nextcloud/nextcloud_db_pass.age b/secrets/nextcloud/nextcloud_db_pass.age
new file mode 100644
index 0000000..53f1b68
--- /dev/null
+++ b/secrets/nextcloud/nextcloud_db_pass.age
@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-ed25519 APVFfA DN8dMoORUy/3O5x3gg5p3s34LuAnfbrREnrdahXkAgQ
+/tQZITJe06U69rcm+p+8c3l0omfxC/DbdppB6MVFfWQ
+-> piv-p256 ewCc3w Au52fwH3PnRByoY9hrxoFyjD3EInz0ueUG3Ug5olfQN8
+CRHLcoVqFqcUGBSxsDC9MyGX5NYa7gH0EerszcZgUbQ
+-> piv-p256 6CL/Pw AkoiBQs1LI5Gv6+G4iSsU2aoUJwS/DRMOf6kyLyloC4R
+dECNDzemJyKs4BtVP9a9rg7BkUNGuzogmz9hc6RS0RY
+-> ssh-ed25519 I2EdxQ ETCMuBhXkK6kaJnpLpwCoFENI8GWUOfy7Pg1+TsNrRw
+2tTRPla8zbzKx7B8OztR5RdkkgBpbK+5UuXEkeVFWi8
+-> ssh-ed25519 J/iReg jCSk/bMV7uT5sP2G2ugRsH/IiAs2RnJedk3aMl6VCzQ
+6V1qyRH5B87PhlwlfAqiqsmeIShbjA5Ef809hjnkD1U
+-> ssh-ed25519 GNhSGw 8RMzbnJiiAbujWEQAnxinaRkr5o71z6s9XTzLO8qGEA
+59YwZHpm4x8M6K0SSGngWqlNhGMfcz8ELv9GfGW1UKk
+-> ssh-ed25519 eXMAtA 9aJs5tHUoOyjJNNSvg4lqM5sA6Ojm8UZYtJUQl7e1Q4
+ec7sFWWV3c2W4esIiYCxoDkAg2pRSN3UqpTlEy1uEL8
+-> ssh-ed25519 5hXocQ yTV/LcPEDuoiP0q8+BeZWOKJHUy5uKqTclsW4RicpCo
+i0WtAzTYluemX8zUWjaBG0swG3a5Jl92CDbcgzSNH5E
+--- 6f7T9ShzpgeRebDb3kd9CrmYM+ekRjqxtvu5bfvyLUc
+���Tl�D��泥��E����z[�������MaR�WM��l���@�������0
\ No newline at end of file
diff --git a/secrets/restic/apprentix/base-password.age b/secrets/restic/apprentix/base-password.age
index 10ca63d..0d93de1 100644
Binary files a/secrets/restic/apprentix/base-password.age and b/secrets/restic/apprentix/base-password.age differ
diff --git a/secrets/restic/apprentix/base-repo.age b/secrets/restic/apprentix/base-repo.age
index 84f0507..a0f6dc8 100644
--- a/secrets/restic/apprentix/base-repo.age
+++ b/secrets/restic/apprentix/base-repo.age
@@ -1,19 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 cZNEGg bcq2jdSV1iE6alm6V4KPX9MJUGF1MwIKVczTCKp0VGw
-+MCRVeS46FKPHMH6VeSQ1P9aCU6+LmYtTlgdnHP8TUw
--> piv-p256 ewCc3w A34SQY8XltI0bXv5WNFztuk5eBbUiT2Vqmue4xRUTn1D
-r76a0kI7G68qf7onVGAq4S5Z32DR6BEmCrSUZ+oYg8A
--> piv-p256 6CL/Pw Am45lx4DKBrRYWaDQA6F+5aN83+RTyPOuls06IuN0wR7
-39yE14NK9KhezDSFADfvIIzFoxEgUDV6REtb4ztpS1s
--> ssh-ed25519 I2EdxQ TYjJ2+ItmyRRzJLeQxNsyEtDy3GKsE7+X2EtqhEDmWI
-6D3WNy7XUrRphd4qSeCJpgxIvuUsaO5Ip2geK22DnbI
--> ssh-ed25519 J/iReg lmLKh/Sl9ZCMmLsfsh7jx9GdUbB49w/zrYtSM4YfaGE
-tOtKJkQrqI/xgVfLf64FCjsnJTxjj5YuXk1EmjXD79E
--> ssh-ed25519 GNhSGw UnFhELQY7g4PgkSJNXEFHIeeKwlW9NiUQmrQTY4KuCw
-F7buN8iYpM0CkswV+O/jyMG73SjD6hY+AjULp7t1WCI
--> ssh-ed25519 eXMAtA 2n2v9JWA4s7b91DyfaYau/cCx06JgNKeqlBXquSJYUA
-ToeRSuVsb9pLmZQxYKTxIEF/i3XTZDAM6MqBuEidClY
--> ssh-ed25519 5hXocQ s1XTnL4QkBRhW9SRQt0KrOj6gQRhfZm139UYGe7t2TM
-tT5EdRyoilgWlZ8X6qfEB1Fe6GQ1f8V4gFvwFweal2E
---- bjfHy+S+lcKqOAt/hnbXDtlbDz02YuRsce6XM4KMwXg
-H�e���L[�1����q�r�r`����趘������RIp)��� 8���^��A���v_6x�������y+�.�d3�d���38Y��%��̡�=2�C�����e����|�p�%>�[t�W�9���]�8Q9i�#3T��
\ No newline at end of file
+-> ssh-ed25519 cZNEGg sBPY2mD2Dtk+CZHiqVb35sLpGG5umiCeqmjTUKwnG3g
+k1aREu8EDO3c1XSmdNjbHVeTOWFyBoS97SjduAKKygs
+-> piv-p256 ewCc3w AxXOQ7DzQudLMdXcStv/dTfp/57yabG3VG4UMP+Hi/5o
+BUVAe3cVer/dilXkj3LdNLA2AYWhk/D2W7pNyiAqzVc
+-> piv-p256 6CL/Pw A7nxQyxYLgvOyp0MxKTnlvRsY3+MTX2c83k+786cVu+O
+31edmnCbrOfPO4QZvVAAY1Fabf0Ejl2VkDHe31JZxEE
+-> ssh-ed25519 I2EdxQ PMcJ6QWx8NQXVWUNmEZdGLDuEjsPLYmXxadojoh7cHs
+nugdpvknl2zY5bAgKr3srK4kNNICrErbFM9jEImuJ1M
+-> ssh-ed25519 J/iReg /IiOaDKLHgR1eJk02i1SbL5COVXzaVBSALbQQ9M02TE
++9zRwK5UEHkekjzxok2X9m3aljvq6bSS0CT8DwS3u08
+-> ssh-ed25519 GNhSGw wq3OfTc8mq59YasL+hfLVQkZItAnPBiDDP3Rwn5YGQQ
+CAzwCrrIYVIHD4OZ83pjZTM+w43BaxGVZ1QnCkkd6bA
+-> ssh-ed25519 eXMAtA BRmO1j5v1nG7gvSv229jYtIsneI1fbRbZhzPTczWpHo
+UR4aLs68WfCcPsAN5+nQMP+k4KhC361naXlTMDkqZB0
+-> ssh-ed25519 5hXocQ fl6+1AaUL9DdVARaPF7wA6KwlYcbMISNNW1Ol0rpJSY
+TakgUAkvrL06rnxyRlAcLk60rKdSJodrdN13vFd8spo
+--- wZ1MhlLw3qpZkQQ+UUmCIRmMkHdS0QIZwWzcEffRprI
+�a���Ӆ�kM!��6�(]3A%3KC��Ф�._�2\���e@=�dWvOw��iD"u�j�j�F�2�����T�2�J	v	��qV%�y{�8��LHi��o
+�0�����p/�Ӷ�����<�O�����wV�zd�Ȍ/)�
\ No newline at end of file
diff --git a/secrets/restic/client_env.age b/secrets/restic/client_env.age
index 77d12cb..25a4e83 100644
Binary files a/secrets/restic/client_env.age and b/secrets/restic/client_env.age differ
diff --git a/secrets/restic/jitsi/base-password.age b/secrets/restic/jitsi/base-password.age
index ca05a01..0a6dbbb 100644
Binary files a/secrets/restic/jitsi/base-password.age and b/secrets/restic/jitsi/base-password.age differ
diff --git a/secrets/restic/jitsi/base-repo.age b/secrets/restic/jitsi/base-repo.age
index 61d0ece..6075d54 100644
Binary files a/secrets/restic/jitsi/base-repo.age and b/secrets/restic/jitsi/base-repo.age differ
diff --git a/secrets/restic/livre/base-password.age b/secrets/restic/livre/base-password.age
index 8cbb875..b1ddbda 100644
Binary files a/secrets/restic/livre/base-password.age and b/secrets/restic/livre/base-password.age differ
diff --git a/secrets/restic/livre/base-repo.age b/secrets/restic/livre/base-repo.age
index 8a148fb..d05850d 100644
Binary files a/secrets/restic/livre/base-repo.age and b/secrets/restic/livre/base-repo.age differ
diff --git a/secrets/restic/neo/base-password.age b/secrets/restic/neo/base-password.age
index 6e8ece2..d9a8ea6 100644
Binary files a/secrets/restic/neo/base-password.age and b/secrets/restic/neo/base-password.age differ
diff --git a/secrets/restic/neo/base-repo.age b/secrets/restic/neo/base-repo.age
index 76f8d7a..1327f29 100644
--- a/secrets/restic/neo/base-repo.age
+++ b/secrets/restic/neo/base-repo.age
@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew mx+zUDoJlBkJG4GUEJpTmF+7cekgNMAqGf8L/hLKdAM
-TBwEFgEWExFwuINvzdrfck6mnBCIpUAekZdTBlX2jyw
--> piv-p256 ewCc3w AtCGtCqOkpF5bFUtuAiYe84lT+1G6MxDNkRU2pUqk18B
-3/G5szghCSHCvmiCc7/y8hOZyanfbU71VI1P/CQ4g8Q
--> piv-p256 6CL/Pw AmvS4ErSMMakjmPgkc6uuAW93uB7dkmLzwIWLnfELyXc
-0LzlaXihUe55n4gSERN2IyQvjBZ1sbBO/sg3QuLSiaQ
--> ssh-ed25519 I2EdxQ cwwjiEWrJhC3QlZxbCEGjVBPf3jlpjgroeDBzHh+NXQ
-V9avgV8Fey4NRK1SYZNUThYncU7zfKU14U5EvQ2kasg
--> ssh-ed25519 J/iReg BbZPEVsU+QcuK+R7O/iyM5QynQ01ve5mpYOmGS7T/Qs
-VN2037c3niLVO/wCpl2aJag5yoH04Xs5sFRwNgf9Szk
--> ssh-ed25519 GNhSGw LGM6jIDcmvJJjst+IZGZtIFqopu3VA5pJsX30LKh7BI
-cHv8yBQWrrZGnfP+/iN5kboEQHR5fBCNWXkEED7f8vg
--> ssh-ed25519 eXMAtA RXk5YHqqh9G8XIlFcm1yFHjEN7yRQwjT3+OIAu7JHj4
-xNZVF7sCfEIGU6fFrPutCks7b+ZYrXXmPrmsm68Iqjc
--> ssh-ed25519 5hXocQ sCyqDVxD7B/hHT69Cwr+eI/kYI61Ea7fW974qrv9+hc
-WyHRkS/KyupY1/REGTrOuVsCkAUgOZdZBDNU66fq3X4
---- ySHYrP5bMWtiO3uer5Updjm5yAOeuX9fnUFKH4vwUSc
-�"�>l���J�����!]@l�)y��Cp�>Ἑk�����'�#��h�7|n	aa*Mǻc�
�k2)o>�L���D�>V��O����G�IX�/1���c!QsMT����S)d�Euc>R��y(Z_��
\ No newline at end of file
+-> ssh-ed25519 /Gpyew wServOg2rBKmBMl45h8t44f2E36okteuVbjXQadtyBI
+1kZRg+QpThqy4L9L68NpY/oPWtnxrNXpvzljKRnksIc
+-> piv-p256 ewCc3w AutBKbQ06J0RXLru8ChgZ+2NtbPVSxGYl+TyTpncGVgA
+xzi/8fSY2B1+Um8rVJl1wJRiO+G/UseIm3qOBJg83Uw
+-> piv-p256 6CL/Pw A6gdLvzn0Nv1G2i3JpKSwJGjKt0bwBYCj2YapbA2nzcL
+7HHvTzTVSXniQNQVsrpQiftZUnce/yuvUXISD9jjqZQ
+-> ssh-ed25519 I2EdxQ JPZ/Yk0L8Gjk/6i/vg+JJq8mDc5TKOpmVYwcngMmmjY
+fwBLmxvRC4f+IZAVuxdPLM8Fdw6ZEg2vXBvCTs+uAnU
+-> ssh-ed25519 J/iReg ivixcHapYXiUc+BZ00dP1Ju4yCLcaZTDc3MFgOx7axc
+//dVc8TIcmh13iG5j77yVoRxAZobqVqdQeHg0qA8pC4
+-> ssh-ed25519 GNhSGw P8E/bdYSdLJ9qDcz79J0MR+c94C5OjuIAc1wHkmcdAo
+2yfi08ApXF1vaJgLA9bks/dB1oQ8kjkP3re/VaBunvs
+-> ssh-ed25519 eXMAtA /hpszp1lN4+XEDCv1LTdoNsnh6mn8e1fQj9Nw6eCOUI
+wAHhUPf2uScHq3zmapm7hMqm60ekMkoCYeWLQpfOSBA
+-> ssh-ed25519 5hXocQ clyFp1R7y293dlpWRAZOYhYI2BnlZZ0tTYHOw/n+7Tc
+72tVGXi4VHvAvQALRMt14LLpxNxfmNtPuwk6sbFGnpI
+--- tpxgbHlMmdVQkPsdrIWO1fYVAKq6F7wYweWBasH0g2c
+���8��,~(�Gc/��
�u��G`��Z�X���h�p)��`P_|����W���V3Ԥ�K��`���/n�Y�}1O�R!W��"�[n͉
�jӣ�6��1���{9�w%k�ڨ%��<Xⴠʟ�a
\ No newline at end of file
diff --git a/secrets/restic/nextcloud/base-password.age b/secrets/restic/nextcloud/base-password.age
new file mode 100644
index 0000000..2a99f60
Binary files /dev/null and b/secrets/restic/nextcloud/base-password.age differ
diff --git a/secrets/restic/nextcloud/base-repo.age b/secrets/restic/nextcloud/base-repo.age
new file mode 100644
index 0000000..a2562f9
--- /dev/null
+++ b/secrets/restic/nextcloud/base-repo.age
@@ -0,0 +1,20 @@
+age-encryption.org/v1
+-> ssh-ed25519 APVFfA Rd+43UcN+tQy4BVX9MUnML7XfHWTEQiMoQpWb5iPiz4
+bdwX+jnuPkwYYfk3wirhr9/e5qh2Z2ReK5BGfEx1wB4
+-> piv-p256 ewCc3w AjZ9znaq6TFEZQmuvjHP2MuhSATIKu0MP90SrDqalcRR
+cFbWL2n3JZgQ0CPohEp3ZPMxQ7nzbY/WNAn4NVsoycw
+-> piv-p256 6CL/Pw AvEWn/2xEKqjSsJ3zMCBgIand/WIDVx/2RJNm+Pa6zPx
+2xxTw5fPna1tj2UZzd7F3B4MHjQAY5K4Em2KK4FajIA
+-> ssh-ed25519 I2EdxQ fZ4ilC+LAl+DQUGoLRVaeDRu/2STX4XxSJdKkcBlWVU
+vmoujj0EoXYXqajADKo+7iuVw7zuK6+uGo0WBOy/A1I
+-> ssh-ed25519 J/iReg 1JhbPsfoCx5Yz19Q9hhXXRGbVtwDx1is6wmisK5kYyc
+o3DiqEXDUU+yYSg3CWh5qLI1TB55fkDCcA2rPxZthfs
+-> ssh-ed25519 GNhSGw zT8ClZ0NjaBKdp2aK8vlB/T+vPdnP03NUH1Ui43InWQ
+3Za3AVL7yQS/tovgXiJUv7Cb1s75Uvs+/+eNZfQwS1w
+-> ssh-ed25519 eXMAtA 0U5NIC3r51c+YNCTiT6NkK26DX3B5Zau2PzCnpnU1Qc
+EzvtcSjzvssYpCUBkOHN/K4ipxE47/rLQNeKUEpCD1I
+-> ssh-ed25519 5hXocQ jgvQp0fyaoTt32sy2Tabhm3MSpkSMQ9L9qwj5JJTfRs
+/Z2i2GWVoYshopEM38VUXvgPCs4mvIPFzl8tOuNu4W0
+--- HlOfwD6uKrIulHM/Hv8Kamc6aSPkxLbj2/CzvTw2T0Q
++�8��'�
+x�G�~Aq��QZ%�5�\��Vw��rؑ6�4Z6���;��E��iG$@`�7M���T��Q�Y�~+���km�_�$��x�:��줈��61�i=�����V�SJ��й�n����QL���6��0nx���E
\ No newline at end of file
diff --git a/secrets/restic/periodique/base-password.age b/secrets/restic/periodique/base-password.age
index 395572e..f607add 100644
Binary files a/secrets/restic/periodique/base-password.age and b/secrets/restic/periodique/base-password.age differ
diff --git a/secrets/restic/periodique/base-repo.age b/secrets/restic/periodique/base-repo.age
index 226fc0a..8c39d25 100644
--- a/secrets/restic/periodique/base-repo.age
+++ b/secrets/restic/periodique/base-repo.age
@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 FtI9pg 699sQyv9A2DsVBx0u2Q+StW7VP8+DiUX+uUOZDP9BXc
-7xQrHSWDkEGu9iPBx/jiiDmJ8+KRSfeeLqjtSHHIKxk
--> piv-p256 ewCc3w Amal1a3gRYmqp2KDdlgN7mWzPzJG4EHeDNbBnDp9ZK75
-LtEh4MK3tpLh/IIjuD+dXzlOeNK2Efgjwy8L43A8/gw
--> piv-p256 6CL/Pw Ap5uHl9tOPVkCB5/BqxgKGhtGjVxooNiVAAagKiKfxO1
-zhMl4yVJOe+dzjwcaYQBCjYs47iikeykXFznYAUoF8E
--> ssh-ed25519 I2EdxQ KXijPMp2Yb2ccGAfmX/xw3TB+Wcw5+WALWLwE2MUJF0
-X96+UxQo5R8+sZt0uCdauFdnDUP4otRs4QlAVWbS+ys
--> ssh-ed25519 J/iReg WZykIiadzSf9FrirQODpSPJc/XMggldDUuAUvSA6kDw
-JQeaP8u8fo3l8xbZYGTyEft39KYRVYzPXvtQOk9hhqc
--> ssh-ed25519 GNhSGw Iwyy/AoqxB3ZP8L2fh/tIUMo5VhNnB2A2qouHzj34Hs
-FFzA/w9lm1EHubBipx6kqQAPw0oBjiFVxkKoZDAqM2g
--> ssh-ed25519 eXMAtA fXjp2bJasqd3A0qO8JHThWgchw9Zb2lnAA5ux+z0+Tc
-5UIgx+fg1a5qzEeXHmCzVPlUy3T7uwosjDN5DU3acCc
--> ssh-ed25519 5hXocQ VaoJWjpaDZXOvPgw0oFWuvFWJm2U/wT2KlgaPG7QggU
-NpqFs3pzV91c+5dMcdsjHz3br8jxKg3obeMj1M2NBR4
---- 1XXLm39XkQcmHtbW2Gxhw+NtGvB6vaZtavkwBYL7sZQ
-��X�&ỵ�r��Ng:u!`�g3�/^1�1���y�/�-�
:�G��S�����*P7j�l�&��	ؠw0�>W�g�����13m���-S���Z��ҨX�i]Z�b6��%Z�T�Iu�1�:���ҵ�33���
��~N�����b�
\ No newline at end of file
+-> ssh-ed25519 FtI9pg 4Pve1UsKtmZKZ2bc1z8dZGIa5L8St3SUjFg33dPiaWI
+yZJBqcQrpLbx9zKwxM0ehlubNwI2UZiBY4KE/qmfuis
+-> piv-p256 ewCc3w A61EBAaLaK7VGc6L6FDYi71UXFdVhH+DTeYdNNhKL309
+Q5CbO0JVzHl9OvKtuBUJUrk4rrSzOG+Yo0Y00tlRuis
+-> piv-p256 6CL/Pw AwZ4/CluND/cHaps73wlUWRzupRMevZdoa5QK8xJWe1K
+3QAQpc/jaLGh+F6QXMfJUQ6np09j22PPPQKrrqdfdbE
+-> ssh-ed25519 I2EdxQ 2HzZ5i5SQnNvAKx3D+6Sq/PSGHQ6QaDfXPbCf4OXZRg
+mVwepFqkBVnd4Hwtwa4VsCUcKJzSmPcipTV3gYl0cq8
+-> ssh-ed25519 J/iReg NIhQ654YWHCbXoLGFmRrqpmU3ZUH/2r842Q9dpvZYAM
+w4tzGUacCxbjMIgexp4mjMKIc3XiejSXqdponjIQCq4
+-> ssh-ed25519 GNhSGw EiK0f8/eD9okwBlO5Px0+EdmDYuCPLVFbpoBDAp9xz0
+cRkHYlYQuaCT1LYMGCqmaS5hSXcoXl3NHHyXwtr+K9s
+-> ssh-ed25519 eXMAtA mr5YF1C4JL/MrZorzKcpEJmZ1cT+rd6Xz1gG3tFhATA
+3aKuiEdE0fmXZVXKCVB5KpXpOOlSSnq7vJAtwn3jNZ0
+-> ssh-ed25519 5hXocQ NczsjTOddyHQg+Go8+/W0wvBsozqhnOf55pz7pQ5eA0
+QcFfQ6MUThVyaApM8NtJnA8P5SVD1ABk9UBrYJndNIc
+--- ot8DZNu3cGmnWmHag3AIbxGoqQvSumGzQE8GGGJpOKc
+J����Ex
��v��m/�}���az3�5�Y�M|L<7#/���Nᔧ��|�;���fV��|PVJ>+�!�r,�]�V���ۮHH�z��غ�@50r�5&�J��%�M^�h������+�R�l��;y������A4�A
\ No newline at end of file
diff --git a/secrets/restic/redite/base-password.age b/secrets/restic/redite/base-password.age
index 3da9a83..28fdffb 100644
--- a/secrets/restic/redite/base-password.age
+++ b/secrets/restic/redite/base-password.age
@@ -1,22 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 hTlmJA Qpkgty4nvIX6hujZOUeXxe3eDAVOwqVKMumHRtLGElg
-XAhZAzB38Ke9ksFQOmPJDF4Q9FIyhDEKsidU8yeVj0I
--> piv-p256 ewCc3w A1PBG2IYLVynzRQ8LAEfgl0dUwU90/FOfE/6phOIp05n
-QWJvcxD4QVaP1EnxiiKfweh1gU6CrcszeOPZj/hCJpY
--> piv-p256 6CL/Pw Atp4YJbQaBplip1c26/gNGGVNz8ktko9g96s6AA6xhdX
-AHAl4myifoCtLsgDKcfhr88fkXFfslgIchFTreRyfIA
--> ssh-ed25519 I2EdxQ 33Sp74Bcnqoef0xRrrEnSUEMMmrWnjH1rEQmQucO6QA
-o53n6iMk1QLIlREvovIR5qyd4TN6hnNWQaaD3nKItHs
--> ssh-ed25519 J/iReg 17kg2/A8UwsMqIxFBlbBRCvw6Y/NXknNA+tjKKiQdX8
-CkQ8WmM/JVEH4zAUoArOIZJITLMTFcSd6MBqbhwhTe8
--> ssh-ed25519 GNhSGw QIoIrLuT/n9UutWmL3Ei+nLlSfpcL3v5vlavGpFCRC8
-/qiAkQkbxmgy73IPCiBpm5FlaixM/jmhvWvS+TJwTqA
--> ssh-ed25519 eXMAtA ZqTSYAKDYO3J2bHyG44E78hkc4pgib0//DwcgujfcHk
-H+Yy0+yKYEtqI9r3EfXhTlrrsD7vu2xiT2TCwuctLKU
--> ssh-ed25519 5hXocQ SvYYiI669xqm+FWGce51b3J3KnBYu8mYzgAW5yBl2k8
-03+c6rOOJpSq3ZWkeLUtrHvMSLOp1FG8O0D0EBpD/+4
---- hIGT4wmuDnqucqEsFa0/qmFm3ZjhTwWbL8oQKCEIY4Q
-����ƲZ!�ŭ�o����Ԧ�yr����\sG$\�����T09�_Ӈ��Li
-��J��ab�9b"��k<8�G�R�D*�
-�~�Ul�s�'-��!5�?�viw�"w�;B��j2[��U
���K�:��Űd�f,D�#3�	�H��R͆[���[���~�0�C8d�ѽ$��;�'kؖ�\����P���c�5�������]O����;���Fب� �H�Ţ�P�[j��	rmQ9���ҽ��W<�
-"S{	gĻ��LB�e���No
\ No newline at end of file
+-> ssh-ed25519 hTlmJA sW0pIOtlle8ngiUkj4ceDG7jxjVb1rcps9GmzF0+sGM
+OYnuR8qWmt1jw2RnYRr69FCL4k32DPZeXdPlgcP5xhg
+-> piv-p256 ewCc3w Al/DbcauY/GdqWqbiukr2LROefTU8H7MwNC0SbEByqBK
+xEs3fuVMUdLwR67Un1Me75yMLmaoPpjeTvi0lzeUrQk
+-> piv-p256 6CL/Pw AqPSRY8+61lhKbtc9j7sNmefZiECqWk4sRHliTpA59Pk
+nUDEtonQ8pTmGNJbV4ugtOil1GTXLWAunr6VdBoCiJo
+-> ssh-ed25519 I2EdxQ JCuWrWiaA/N6qvkRxwdWvlbd2zc3GtFpsymnyNzlQWw
+DCvLP2byNtJSfdYU1Yrs5Xz3qqxoKPueYM1KPTPUJmo
+-> ssh-ed25519 J/iReg RYo6GcSVTDmydGV+bBxcT+iCKaJ3ywphWtdUhc4GXX0
+xBNlIkIp4KdsYv165OPOShcgcLaMNbpg2tJhvHj1Kso
+-> ssh-ed25519 GNhSGw JvMYTR24Vr4vlwrSSMQyfvURsW+dyGeKnhYxydvt7lc
+BsLU7SWwMhy56zcGf552GQfHUQ980XshEr4zBqZZ01Q
+-> ssh-ed25519 eXMAtA bw9vWCneaL57lq+fDwiBijvFHRyJ5ja2JSGi+wT2PFo
+OvDOFITZSjGib5fI1cyGuA4AtKhgo8bIIZq7xomU8n4
+-> ssh-ed25519 5hXocQ /TxjJB1mYx+jZKq1PT30XiRv6hgWJZ9dOo7n1KZ7zVQ
+zgRw78wohduD2xDshgxruRpOEn30710Ltt+C0pnK3RY
+--- EwBBbfxbdBdFhPHKQyKVPLVmzvESGsJa9/es/k3faiw
+�^R�lu[A�!zo�o
���4r�7At��fĮ�-
+lM�v��hu��_�0R���|ކ�
+J�
|+��4`�[B�|��%W�B+w��Љ'��#�3eF񈕮�Z�9���ޏ�?qmĘ@�a���ܰ�!�Gkg�vM��i�u�J|H!�uJc��p<?��[b�c�T?;����i�Bf�j�O8�RL�Wr��Ц�l����ت��{ڂ��ڕ���^ε�����m���۶�M�o��f,�&OCU'���G��]w���ie��A}�o�۔"+��Fe�x��
\ No newline at end of file
diff --git a/secrets/restic/redite/base-repo.age b/secrets/restic/redite/base-repo.age
index 3ffcc29..e2339c8 100644
--- a/secrets/restic/redite/base-repo.age
+++ b/secrets/restic/redite/base-repo.age
@@ -1,21 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 hTlmJA FwyYHqXJq8FnP/kKDOyZYMsEpOVVvdxcPka7dxH9TEg
-hKPhAZz5/6DP1ugpv3bHOZrbSoVs0hpZSP8kycw0hds
--> piv-p256 ewCc3w A0NZ/VH4wQ07JGUjRnD2QU7VlrG4zMeVzHa7g46Av+jU
-qCXVqCAtOikfPENz7RJpy0PTdTw1tAwusSWh1iDlVT0
--> piv-p256 6CL/Pw Awzu5nbYg4GuVnEloOsPVwQ47BicdnAb4sS1mG+0w/Hg
-CeDZkaghyrRT4Qokg6dTkDLrwND4mix7dhFgMEXzsRo
--> ssh-ed25519 I2EdxQ MrZNzDREuwEhfu7lU21VsJ02Q9orNM0TPB87viA78XM
-NSlPC8lW9U2ppLIGySpmU0HJpemN+GUA74RBFhnhroY
--> ssh-ed25519 J/iReg ZWPGgqUI89NVHp7iLK37iRdwBGroJ0pDxI3ZMeIJ/Ak
-PxJTCoNmF/c741FTeXYsjUjogf4/ZLZU56IoEKHX140
--> ssh-ed25519 GNhSGw k4VJGNkwALEyUJfqoWNjm7gVS4EL1PDQtigjrJyKJ0Y
-f35rY9JCJSiEkXEC8E9O2e8RqikKHL4WG91y+Q/0Dxw
--> ssh-ed25519 eXMAtA 4exKSkUZbK6IGNqms3oXHZjqxdanDxruBIWzlWkud18
-fikqarrrB2wEAS8b033Cp2QpAGxy1SGju6wcfcpgWPo
--> ssh-ed25519 5hXocQ A7y23nvH1k2eh9YhzkDfTX8BTsds6HJfTzEPgP7A10g
-CXq+VQurL+CrAZKu9ycJp/iSz/S8CTP8F00OAhNzuwg
---- TZLMHnfF4+CThKdhjtmeSzB/66o6MEV6r4Fh5CzEkCA
-�j���`���3H1TCZ��6/��z���R���
���+����q��рȲÜ�Q�FK׳8,oH,�P�D��n�fnT�����I���\��Yn��
-ﵖk
-�f
�	�M��0�Y��`��.�\{ԍ%Ʋkp
\ No newline at end of file
+-> ssh-ed25519 hTlmJA 2Cscsl1sCGHSXjRRRd6wm2isvU5t4YDr/gP9MltzKUc
+v2zZ+2lt2F1FWKetouQU2EZbj2+kZKABCue8WU5O2ec
+-> piv-p256 ewCc3w AuvtE6ey+xtQydN2XRG59oOCD33TaeiEhffeRzV4vsIr
+LolBrGHboIiXl2XWxuH+GfwPF+yrkltfYLFINhc39hk
+-> piv-p256 6CL/Pw A9VYv+ZDgpb9TKut3n2yHwS+6tO8r26puFdmZT5cZHqm
+V8NSw2bE32ypGXMcKilkWMA509hALkxkj46stm4aAyM
+-> ssh-ed25519 I2EdxQ hnpl7aEBLitqrCkzYIxEzpS809KEncAsQ+40VCGn0Ac
+mnj1ul0F4F6jKpbWTV9pWCS88q0JgUINbFeDEktMhrg
+-> ssh-ed25519 J/iReg gPOp+BNbD2uG8OOguPv8PbvHnI/3UALR8uokp34wN3g
+DACJqGoi6CJvWwxzh08pYkyroMy35wGa3HJy6P9i8B0
+-> ssh-ed25519 GNhSGw jvCp+EYJNKzXBOiCUMHPJ0Sd7vZT84C24WCxhVOxFx8
+KNsNt5Hr3WMv/4k21wiFt6vqbKADxrlShDZt83YzUsU
+-> ssh-ed25519 eXMAtA 520usONBbV1sodlheEjpAqXFB4CrIswVEOq/2FGVCEI
+uqQ2VFe/axtSBVaGisrd/Xqz6fcuWy0GJpSztn025vY
+-> ssh-ed25519 5hXocQ 5IytwxHjgaM3BoGHpQwd6FFpPK7amgqeK0U/vBNuHTU
+BHJcHS/gm0dAP9MV9CRYbygJffZ+WwDg/RuxKvjXk0Q
+--- rkM08VGRZLfu3boYamQVZKNN1NZQY4Y0yZtLo8IxljM
+J'��ݟ��̝��@�­�*��d��d�@���L`r�ͮ��

+A5}���*����f&e�DzHc��u�^7�$�%gT*�p/��
1�(Z�t�v��Y��^��*�!�&� �Tn(ĩ��W��2P7�.J�b�
\ No newline at end of file
diff --git a/secrets/restic/reverseproxy/base-password.age b/secrets/restic/reverseproxy/base-password.age
index 297fd73..a65af5e 100644
Binary files a/secrets/restic/reverseproxy/base-password.age and b/secrets/restic/reverseproxy/base-password.age differ
diff --git a/secrets/restic/reverseproxy/base-repo.age b/secrets/restic/reverseproxy/base-repo.age
index 6a068c8..04f63e5 100644
Binary files a/secrets/restic/reverseproxy/base-repo.age and b/secrets/restic/reverseproxy/base-repo.age differ
diff --git a/secrets/restic/two/base-password.age b/secrets/restic/two/base-password.age
index 4562140..0bbc22a 100644
Binary files a/secrets/restic/two/base-password.age and b/secrets/restic/two/base-password.age differ
diff --git a/secrets/restic/two/base-repo.age b/secrets/restic/two/base-repo.age
index 8de1bb7..0b366ce 100644
--- a/secrets/restic/two/base-repo.age
+++ b/secrets/restic/two/base-repo.age
@@ -1,19 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 qeMkwQ Bi93rI91LBDaaY/yPJDhvx2Xz4Sc3N/QHCuaSIvY4H4
-SEm6Su5gjKvSF6vyl/M80LMS2+JuzllJ9h8R9LWyaK0
--> piv-p256 ewCc3w AtUZadXsE0CuZPNJg+Rqbbh8cxna7+y2VGVa/lH/N7dh
-O7V0wXiK0qncQ6bagJEgzWsUQ5i/K1nibxy97pmDgRc
--> piv-p256 6CL/Pw A0WY0KqpmfB91+nNKnda1hudfI0OHxGi+AEBSTyoYBg9
-l9aGu0kEMfK5g99UADmGN7v9T4c9VPOB2ucmoN+Lry8
--> ssh-ed25519 I2EdxQ QcTXfmdoGtiGnnBsh8iA7BMhMGUdGz753VGTbnM81zg
-HOAA19NC/kbQcpCvpBEhxZvIFQbJNlbW3SsC5D8er8A
--> ssh-ed25519 J/iReg rCs+36Az9gPC0z0bZOkY64kqAQLTRJNIGDPeeAsLLQo
-E6i/Tio41CtWvQpwPjgVN+RLyHUb2StBsT65LMnSgTM
--> ssh-ed25519 GNhSGw 8iGHolR8qo6hHIVqLWtOGtrqQwk5lHT9hZA9MtW2vz4
-vPyPAHUkRWVRr1oZ8kzR5Tu2d6Q16hpjPajv5TxJEOU
--> ssh-ed25519 eXMAtA l6mcO5XxwwQaTrfwd32ANLFma+GlwFbqlBNo+sI7/jo
-VwjyfbUz//5bbDfCsTy9azFspvykY1+am2TDbajulJU
--> ssh-ed25519 5hXocQ VGfJz+xp5kUTIGLNKE3p4bneECJ8lhETRxZoYq/MaX4
-apxhOfB0uEWMtEoT7oSfWkN66swG0XuN/eK1hWPd6p8
---- hEoLlgb5t9ASMlVBOu4/QoBBRr5551YqDw5C3vQJ6C8
-5G�3M&4sS��=���'�N�]?Z��U�:�|��/��?�9�X��ǣH����~yRz��0�Q����/7�ʀwV����+ɢ\�(�c�ޥ��7>�}��'��1��Sg��5g��&ij>�
\ No newline at end of file
+-> ssh-ed25519 qeMkwQ Q+3C4UHwex4CTv/IcYql1aVteax75fd6xv5wsGSyN3U
+P4J4stLru9Fo0DouVNjaRKpa9pW8faWPGDnTUOcM1cA
+-> piv-p256 ewCc3w A3Y2W4NrIBNls7GTQ6D3CIqXjkEMWxDl8VXYxA+uA3Q5
+IWwLMNdLWtC9TcqDLpw/wLAXmjlzFcJ7afCHhAWB10E
+-> piv-p256 6CL/Pw AhyAR03md2g+OHF4vnhKihasqLgeA+ig34y/Ng7xsurG
+ZiPfzV+vA4bNGhynVzUeYDtF0JN7k7slRP8y+kMBGAA
+-> ssh-ed25519 I2EdxQ zHJY2tvpDpymbyzUxHc3lIePD3zWu3LwMNRAo0a1HDA
+CPbY9TD5YV3nxlOwD7K0TMbwcUE15E4bXLtQrDJSXD0
+-> ssh-ed25519 J/iReg 69RwM/RQbPpNfyGmrSCbW/d0Rjb0umEeEhJlDaQh/i8
+Ozua2c4XvBpENQXjk72ssxp2QmyzDLNgk9cTcQAwj1c
+-> ssh-ed25519 GNhSGw q+GY+PnIkX0pa9Ac/nT/Hk/Hp36P/cgtNTxyCQJ4qx8
+bnixcm8o+4K4oSOqu7jDiiJg6oWWl2i1q21Yyzj8B6w
+-> ssh-ed25519 eXMAtA 8XKlCKSU3liImbzgv20bu39hQDp9hP03L0CAm1skwE4
+SGHzRu1DiKA3F04XykxpRTX9zMVejHeEK1eFvPH94KM
+-> ssh-ed25519 5hXocQ rS2HOq9hALKyk6QhYjDslkXDA8Q0eYnvbLvGvLm7Sxw
+djq0J8I53eb8DnUUMwAOT8E4Vru+gMl9GjQsaDf3uXE
+--- r66QW8nN0e/2rdLZl0Xlb3sdynP9jVaMSwv+wxSYYhw
+�(���ɶ XrwY�����
�h��t&L�0		��m��[.Y��p]MoTL��e$�=yH���w�>�d}t���,5
�s��/?��./N
^��BcW��
+��r����"�r���;�-�A!3�RE�
\ No newline at end of file
diff --git a/secrets/restic/vaultwarden/base-password.age b/secrets/restic/vaultwarden/base-password.age
index cb0999a..71a9a85 100644
Binary files a/secrets/restic/vaultwarden/base-password.age and b/secrets/restic/vaultwarden/base-password.age differ
diff --git a/secrets/restic/vaultwarden/base-repo.age b/secrets/restic/vaultwarden/base-repo.age
index 885f483..f133bf3 100644
Binary files a/secrets/restic/vaultwarden/base-repo.age and b/secrets/restic/vaultwarden/base-repo.age differ
diff --git a/secrets/vaultwarden/env.age b/secrets/vaultwarden/env.age
index a74fe04..de0c392 100644
Binary files a/secrets/vaultwarden/env.age and b/secrets/vaultwarden/env.age differ