.sops.yaml

@@ -5,8 +5,6 @@ keys:
   - &server_jefke age1upnqu4rpxppdw9zmqu8x3rnaqq2r6m82y25zvry5cec63vjsd9gqtl9e02
   - &server_lewis age108fn93z2c55g9dm9cv5v4w47pykf3khz7e3dmnpv5dhchwnaau0qs20stq
   - &server_warwick age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
-  - &server_talos age1h5q9ul9f8vd7w7s2fvmpytaghgpv97a9r237agwzc52c76xsdegsugml73
-  - &server_pikvm age1smqas3tre2hptnyn72fdzghqcnej48066l4hp6y98n8lkpm3ds4s8t8s0w
 
 creation_rules:
   - path_regex: secrets/(kubernetes|serverKeys).yaml$
@@ -23,5 +21,3 @@ creation_rules:
           - *server_jefke
           - *server_lewis
           - *server_warwick
-          - *server_talos
-          - *server_pikvm

configuration.nix

@@ -107,7 +107,7 @@
       };
 
       loader = {
-        systemd-boot.enable = lib.mkDefault true;
+        systemd-boot.enable = true;
         efi.canTouchEfiVariables = true;
       };
     };

machines/atlas.nix

@@ -4,8 +4,6 @@
     kubernetesNodeLabels.storageType = "slow";
 
     nixosModule.lab = {
-      storage.profile = "kubernetes";
-
       k3s = {
         enable = true;
         serverAddr = "https://jefke.dmz:6443";

machines/default.nix

@@ -39,8 +39,6 @@ in
     ./atlas.nix
     ./jefke.nix
     ./lewis.nix
-    ./talos.nix
-    ./pikvm.nix
   ];
 
   options = {

machines/jefke.nix

@@ -4,8 +4,6 @@
     kubernetesNodeLabels.storageType = "fast";
 
     nixosModule.lab = {
-      storage.profile = "kubernetes";
-
       k3s = {
         enable = true;
         clusterInit = true;

machines/lewis.nix

@@ -8,7 +8,6 @@
 
     nixosModule = {
       lab = {
-        storage.profile = "kubernetes";
         backups.enable = true;
         data-sharing.enable = true;
 

machines/pikvm.nix

@@ -1,23 +0,0 @@
-{
-  machines.pikvm = {
-    arch = "aarch64-linux";
-    isRaspberryPi = true;
-
-    nixosModule = { config, inputs, lib, ... }: {
-      # imports = [ "${inputs.nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix" ];
-      lab = {
-        storage.profile = "pi";
-      };
-
-      environment.systemPackages = with inputs.nixpkgs.legacyPackages.aarch64-linux; [
-        (mplayer.override {
-          v4lSupport = true;
-        })
-        ffmpeg
-        v4l-utils
-      ];
-
-      boot.extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
-    };
-  };
-}

machines/talos.nix

@@ -1,11 +0,0 @@
-{
-  machines.talos = {
-    arch = "x86_64-linux";
-
-    nixosModule = { lib, ... }: {
-      lab.storage.profile = "normal";
-
-      # boot.loader.systemd-boot.enable = lib.mkForce false;
-    };
-  };
-}

machines/warwick.nix

@@ -5,7 +5,6 @@
 
     nixosModule = { lib, ... }: {
       lab = {
-        storage.profile = "pi";
         monitoring.server.enable = true;
         tailscale.advertiseExitNode = true;
       };

my-lib/globals.nix

@@ -46,7 +46,7 @@
     syncthing = "lscr.io/linuxserver/syncthing:1.27.9";
     radicale = "tomsquest/docker-radicale:3.2.2.0";
     ntfy = "binwiederhier/ntfy:v2.11.0";
-    forgejo = "codeberg.org/forgejo/forgejo:8.0.1";
+    forgejo = "codeberg.org/forgejo/forgejo:8.0.0";
     pihole = "pihole/pihole:2024.07.0";
     immich = "ghcr.io/immich-app/immich-server:v1.111.0";
     immichML = "ghcr.io/immich-app/immich-machine-learning:v1.111.0";

nixos-modules/storage.nix

@@ -1,126 +1,27 @@
-{ lib, config, ... }:
+{ lib, config, machine, ... }:
-let
+let cfg = config.lab.storage;
-  cfg = config.lab.storage;
+in {
-  modules = [
+  options.lab.storage = {
-    {
+    osDisk = lib.mkOption {
-      config = lib.mkIf (cfg.profile == "pi") {
+      type = with lib.types; nullOr str;
-        fileSystems."/" = {
+      description = ''
-          device = "/dev/disk/by-label/NIXOS_SD";
+        The disk to be used for the machine's operating system.
-          fsType = "ext4";
+      '';
-          options = [ "noatime" ];
+    };
-        };
+  };
-      };
-    }
 
-    {
+  config = {
-      config = lib.mkIf (cfg.profile == "kubernetes") {
+    fileSystems."/" = lib.mkIf machine.isRaspberryPi {
-        disko.devices = {
+      device = "/dev/disk/by-label/NIXOS_SD";
-          disk = {
+      fsType = "ext4";
-            nvme = {
+      options = [ "noatime" ];
-              device = "/dev/nvme0n1";
+    };
-              type = "disk";
 
-              content = {
+    disko = lib.mkIf (! machine.isRaspberryPi) {
-                type = "gpt";
+      devices = {
-
+        disk = {
-                partitions = {
+          nvme = {
-                  boot = {
+            device = "/dev/nvme0n1";
-                    type = "EF00";
-                    size = "500M";
-
-                    content = {
-                      type = "filesystem";
-                      format = "vfat";
-                      mountpoint = "/boot";
-                    };
-                  };
-
-                  pv_os = {
-                    size = "79G";
-
-                    content = {
-                      type = "lvm_pv";
-                      vg = "vg_os";
-                    };
-                  };
-
-                  pv_nvme_extra = {
-                    size = "100%";
-
-                    content = {
-                      type = "lvm_pv";
-                      vg = "vg_data";
-                    };
-                  };
-                };
-              };
-            };
-
-            sata = {
-              device = "/dev/sda";
-              type = "disk";
-
-              content = {
-                type = "gpt";
-
-                partitions.pv_sata = {
-                  size = "100%";
-
-                  content = {
-                    type = "lvm_pv";
-                    vg = "vg_data";
-                  };
-                };
-              };
-            };
-          };
-
-          lvm_vg = {
-            vg_os = {
-              type = "lvm_vg";
-
-              lvs = {
-                root = {
-                  size = "75G";
-
-                  content = {
-                    type = "filesystem";
-                    format = "ext4";
-                    mountpoint = "/";
-                    mountOptions = [ "defaults" ];
-                  };
-                };
-
-                swap = {
-                  size = "100%FREE";
-                  content.type = "swap";
-                };
-              };
-            };
-
-            vg_data = {
-              type = "lvm_vg";
-
-              lvs.longhorn = {
-                size = "100%FREE";
-
-                content = {
-                  type = "filesystem";
-                  format = "xfs";
-                  mountpoint = "/mnt/longhorn";
-                };
-              };
-            };
-          };
-        };
-      };
-    }
-
-    {
-      config = lib.mkIf (cfg.profile == "normal") {
-        disko.devices = {
-          disk.sata = {
-            device = "/dev/sda";
             type = "disk";
 
             content = {
@@ -138,30 +39,84 @@ let
                   };
                 };
 
-                root = {
+                pv_os = {
+                  size = "79G";
+
+                  content = {
+                    type = "lvm_pv";
+                    vg = "vg_os";
+                  };
+                };
+
+                pv_nvme_extra = {
                   size = "100%";
 
                   content = {
-                    type = "filesystem";
+                    type = "lvm_pv";
-                    format = "ext4";
+                    vg = "vg_data";
-                    mountpoint = "/";
-                    mountOptions = [ "defaults" ];
                   };
                 };
               };
             };
           };
+
+          sata = {
+            device = "/dev/sda";
+            type = "disk";
+
+            content = {
+              type = "gpt";
+
+              partitions.pv_sata = {
+                size = "100%";
+
+                content = {
+                  type = "lvm_pv";
+                  vg = "vg_data";
+                };
+              };
+            };
+          };
+        };
+
+        lvm_vg = {
+          vg_os = {
+            type = "lvm_vg";
+
+            lvs = {
+              root = {
+                size = "75G";
+
+                content = {
+                  type = "filesystem";
+                  format = "ext4";
+                  mountpoint = "/";
+                  mountOptions = [ "defaults" ];
+                };
+              };
+
+              swap = {
+                size = "100%FREE";
+                content.type = "swap";
+              };
+            };
+          };
+
+          vg_data = {
+            type = "lvm_vg";
+
+            lvs.longhorn = {
+              size = "100%FREE";
+
+              content = {
+                type = "filesystem";
+                format = "xfs";
+                mountpoint = "/mnt/longhorn";
+              };
+            };
+          };
         };
       };
-    }
-  ];
-in
-{
-  imports = modules;
-
-  options.lab.storage = {
-    profile = lib.mkOption {
-      type = lib.types.str;
     };
   };
 }

secrets/nixos.yaml

@@ -22,74 +22,56 @@ sops:
         - recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc244cytDZ29QSG5LMzlU
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByOVluY3hiZXVNNnlINHRG
-            RXBwZ2FWcGJTMCs2R0o5R2YyRXZOUklIc2hBCjJVS2l0bG1SK3Z4MWpYUWxaWXgv
+            K2Fwa0VIWDlETmZwUzNFbkNHZSttNHhUbnlVCjVVdWZHVzJCTkQyS3VlSXA0WFhY
-            ZWVYeCt2NFZGME5mYTVycUloZ09wYkUKLS0tIEtPMzRpamc0dkFoZS9JZzNEbzFI
+            TnR0TEZBQWwzNlVVdVl2K1RnUzE0UG8KLS0tIHhoU0xGM0xJR3ZwbHJNaTlPUHBQ
-            MlBUT1RJanNzcTJkb25rWjZwbW0zeW8KsbrRPWw1qMOBCXZWkgdlVR1+tEqXYix2
+            VzJCQjQ0NG5sbWFLK2phM2lEdlpuMG8Kw8ftkoEbYrA++cJSfUZRthK2cU+iIzNy
-            sOV5n3DmeljL2NrKX8j4qRTuxpPQKuJ9FU7DAF8HRWRkyXTnGJ79ow==
+            oYxlHm5va6JVZ/Sg05mxBB8kWX410/yCW9nH6ZkLrJ5YmpugePzr2g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJblNBTTFuNFNVSkhFRkhq
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bXZMZlVRNWIydFdUcE9T
-            ZmlPU1ptRm9VblB6di9LeStVcDV4VGZ6cEYwCngrVVVqdUxVY0RrWFRCK3FxTWh4
+            c0FMN3AvWXUyTUQ4U0VJL3IzcVpXTnVGOTBNCk5rWFlWeVA4b0JRZXY3NHhSbEVp
-            cEhHOGM2Z09CREZSVnFRSnVVQW51M1UKLS0tIEl1K1VoMjhpeUg5UXBsQWNiU0FP
+            RlA5cGs0SVg1Rk4xZXBVdWtUcHFURjgKLS0tIHlwTWJQR09DZnBUTWY2NWdFZWZN
-            UFE3RDF1bXBZOVVFbVBBWWs5RlZOdDQK6LXDGPl9HBmbYgVlmtjiT2BmQXJ/3K7e
+            RkxTQ1p4VG9sZ0UrWW9ZWnZLNjZtQW8Kax+WCtGOaNYdkmV/Ty2pP9JFgRaHe/Xn
-            2eFhmEzFzpE8DS0X7pIV6dSYWHku1CslwlsQK60rJr2ipve6u62sdA==
+            C1o5W2hMBSoLcC14mlokdVKp81dPDQuuxLtDcCgCQU7aOzvWO3CqKg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1unkshctcpucc298kmw9a0qzvtjzgdnjytrxr5p750dv0z95feymqpn68qf
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJK0Mrc2pnZGZxSW16Tk1j
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoMkNqQnY2TkZRaUJaTjAz
-            dE9WaXdUYmtjMVIrdHQ1VkRJSWlhVm5kdzFjCjhkZGNqTEdVblFMdm0yRjZ0TkFz
+            TUxVSUhyMzRsMm1OYVllM001UmpvL2lNcXhNCkRxQlMxZHBrNlNlNnIrQUY1NHpn
-            UWxIL2JEajRXYmhBb1ZFQ3VzQzRsaGsKLS0tIGgvcXVocnlNWGJGaXZ6cXJ3Mmla
+            dzNFeGhlbE1wMlBwN3RxWUZyT1kyYUkKLS0tIGhpRGN5WFRCT1I5eGlhdUhWc3FR
-            U3h5dnlXRnFYQUlYNG5wWTNsSGU1UUkKc5jEmW19ST7/MgR4igBhuB6ic93Qy6GP
+            WHZKWTlmN2llUndzeEdGV0xDSGZqZ2sKlZ0CGVfCtDdRl2vW7BxVkrBMFOZ5Fdk6
-            jtpUMeH0DDU3Z1/f5400DrHwWgUQRb3Gv8zV1LndzqJMaXL1Afiwdg==
+            9Z9oqBOde0Mp9FGEwnt+IC79FKIknIyYfMf9tpo9Is85/IvyDHTMwA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1upnqu4rpxppdw9zmqu8x3rnaqq2r6m82y25zvry5cec63vjsd9gqtl9e02
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOMXorems4ZVh4T2NQZFFj
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIT1VNTTVjcy9rakUwVFBY
-            a1psYXBFZ3ZXWnYxRnQzOHB5dDlKS2RaKzFNCnpwekhESGMzSzFYVEU3a3V5c2Rq
+            UGh6L2l0Q2I1bFlWcG1XYVJiMkhYMnA4YlFzCnRXVmZDWnY4Zi9TK3NCc3huaC9W
-            OGpZa0I5RVVQSzhZZkFlY3FjMXlXV00KLS0tIGRNODFGT2swb0FOZzRDR1FFbzZ5
+            dDQ5ek5EY2FQeTVhUWpHVkV3TXhxbncKLS0tIDNKN0hYNjVUdHNaMXYzdUE5Mm85
-            VzQ3bUkxeTlLZnNCd1lKc2h4enI1SzgK7vhR+pyRiVFgyt75MYt84pqjoUHsPj1k
+            NSt2OGp4VENRS1pLWHNQVFdhRU9STXMKXfcamWoU/bz39wstSEEuIJZknZpoOPzE
-            42d2AKB1ZWiD98/vN8LOAGlIyfRCUJB1j9rw3W/PkFs08qvHRLqy3Q==
+            W/kDJ5xytfydUkYqoIiGH7s1JyHyCpqbRplPrjQZCmNDvXtcq3L/uQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age108fn93z2c55g9dm9cv5v4w47pykf3khz7e3dmnpv5dhchwnaau0qs20stq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjeG9KTkd6UysxaG8rV0I3
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZS1hHTTJudnUrQzJDYUh6
-            ODFKOWFBaXZpNEdCSXZxeDBFM2xVSjVsdjFVClhxV2lLaCt3cDNMS3ltQUNBTFBX
+            ZEhjYTFaeXRwQXRrL3g1b05LaXdWMit6M2t3Ck81NVZyTUE0RVo5ZmdRcUZ0ZTBx
-            NWZqRGU3NzdBNzhHcGFDQ2syT0NRZmsKLS0tIG1oZ2dtV2tkbURUTUE2RlJZaXky
+            MkdUVDRyZ3Bmd21FZkdzckp3eGp1bmMKLS0tIFk5blFPMUlPdXJ2NThYME8reGxv
-            VlFCdENqUnFJOVFVMHRXQ05RZUVnUTgKESkjiK2JwEGyXtET794bzGkURLix4kkP
+            cXlZMTMvcFhScVBObXZRQXQ4WkI2d1EKFYLSfJlDx2BlBWUebBOy/PV0gu0KyhY8
-            JB57xHBf4B1/UXu+h+jWQAotQSOFFa7IbtDOVejqT8dHqGDs+16HeQ==
+            WSYL992HR043ENrbmkfbpVHaOZi8imyNKa7FWpLaj/Nuwv/Kfvy7uQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4SFpkRlNQcjBFUkRjRjhk
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqZU9Wb0JLTG1kOWZ1YjJQ
-            TW5kQzhTbE1wSmFTZ3l0cTNPSmdydC9nRTBjCmxneSt3TGhzYzhjb0tEY2xMT2tC
+            SUh1NWxqS0ZGa0xEOHFUOWpYR3hTM2dQRWdZCklBb25LajV6RnZhOUVKLzJjY3lz
-            bE4wOUgzMFR1dTVOUDFRUXdWOFZQcFEKLS0tIHR5cHBwQkN1d3ZMYitWOG9JRVJh
+            MTYvNmRPTEgrc0dJK0g5N2RkdEt0RUUKLS0tIHdxcFJCaTg4ZE5TQVVKS3k5K3Bo
-            ZU5tMTM5L3c4QVN6YjZBZEJkRk5yYWcK7TW19C9wI9FMWIDhn8otcNjLwNh1n5lr
+            Q0VudEFzRUFGWlNJcHc0VzZJUVRwbHMKjTMUFFbHhDeP7QLmR64yqDEh4naazL9f
-            f92zaPrmHWC6JVxeKmm3wB3uvONvW0v82DKZJI/gxl41zJTXsapT+Q==
+            etbOvYUkgj4IaB9UgDerG4MjyyHiVVY9Md8Jqe3dOQN0rqXRxNOW1g==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1h5q9ul9f8vd7w7s2fvmpytaghgpv97a9r237agwzc52c76xsdegsugml73
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaWUZMVEsxQVFnYWhiZjFQ
-            bTQxaC9odHpXS0F5VHBrRVZ0UE1yZnJmTVRBCm9Uc2hTdUNOQU9JYVV6MHNiTmor
-            SUJrOXhta2lqMERWaVNseEpIaDNubEEKLS0tIFBiUG9CaEF0NzhaRm45MUUyYW1L
-            TnZGZVZONkFZWDZpNGtSek5Ka25PSUUKEXTRK8MsGnSkT5tPX+nFYN1Mons+nEZu
-            EFCtGzSuAeZWCW4We+264dDZjwlfdj47oBPCk8iwx9N1yoR1BF4LfQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1smqas3tre2hptnyn72fdzghqcnej48066l4hp6y98n8lkpm3ds4s8t8s0w
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5cG9WMzJRbXFXS2JyTzY5
-            clh5QmZXc0dYcEU5UkRzMkZKczQwelVhYWhNCi9md3hwSnVRMVU5TU5UZjBWcG52
-            WTZRNVlXOXgrcXdKeTNDTEpYcXdrMkEKLS0tIFIwMW5BV1pSWUF3UW5DaHUvVm1Q
-            dUZJVWRLeFFnV1ZpVThBZGtxai9oMlkKja55rkW/ZthR2AbscOIgHRfYDUCxIAm0
-            HKgELNQDz2QXFwS98aHeelLCLufb/hyWBn1y4kx+WWppAtQewByhkA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-07-22T20:27:25Z"
     mac: ENC[AES256_GCM,data:zIY2DotoqnJmz/aBRHq+4ZLi/Smi1Bn4phmFsngMY1w0LVauKX95jwKwOhE0PfvIyd8E54N+BoCQ3QmRMv3uvBddScPNSGJgdgDRn8LDWol4/8avDoPFISpNvdS32Ac00UDnMeBEkW4S/oo9CwYHCpEsiwjL6FgjCX/KOK++kzA=,iv:sGCFNJ6gsEOskMlLWUnR9Gnsp8Emc0vdBAl4WN2A1f8=,tag:fHi4CR+exp1roW7UOzhMmQ==,type:str]

secrets/serverKeys.yaml

@@ -2,8 +2,6 @@ atlas: ENC[AES256_GCM,data:TgYf6Jck5L2feQyvyUb2FcLm2M3aSwN0W0xdH6qLU3L4q7LSeB0yB
 jefke: ENC[AES256_GCM,data:PH+4rNhATssck8cmKZrhw4VoyHtkqKlRt1wH+BlOvxdhw5GNDsiT4DOf0cveJ090XcOpkAxEf2yqnpIiZhallKVMJS3aFxpNpNw=,iv:QJQZo6x4PE3mNIK8KaQ16BlJeZsdorX683lpf2FjAJk=,tag:rljZMJ/xv7kbkPKP/pqZ9A==,type:str]
 lewis: ENC[AES256_GCM,data:rdm5YMnWkg2MpY2ZGYi11HHGJzY/ssKA5DCv/wbcf8qIXRhRt5heA1un1zCJdYBKlxsVGOuQEtHMKuA/vLYqNnIXxr5NxDxhgIo=,iv:y+fyLns2B/JDuumHIuk4p9PybXf8isd7Ve+1gcX0mp8=,tag:VoAORxiU+6WbhAgkm9lAgQ==,type:str]
 warwick: ENC[AES256_GCM,data:8ABH+BMdKjLaVG1FkLWksJRtIO8Vu/j1USLGaAAFi6KA/o/S2X936doUl3/D6MKz71i8FwEH410K4JcGJXVboY45Dfp2g1/6bog=,iv:pvXBQcWs/dFSEVe807bpQQKI9n0A/IUxSG0Z1Sl00/Y=,tag:l/sTOe6sNJ34Z2UmmBBBNw==,type:str]
-talos: ENC[AES256_GCM,data:DD70h1qX06cuQ+2S6EIxdBWqkECZFO3UmusKvLKXoocuJfA7CU4sM03GJxnlff26mv53LyMUtZsPWgWWQNrwrICXmhg/I4CDAuA=,iv:zoWlL1SjyxXjemnkbQBtgutfXL41/eqpLk6l/fXntmQ=,tag:v64nkexcG9Y2gCqAE8kcwA==,type:str]
-pikvm: ENC[AES256_GCM,data:CrOdqkb+MJK7t6+3mkm+MdUqwBRtYY1jMsQvtBOoZYF3h1vPidJRAHZvX5n5aBsbf5DFCcWXRs5v7I18ANyA1TbkZVKLS0PsrQU=,iv:LMo9zpoRF3EEtQ7GtmIVRNsyVFga7Vcvpv7DxHQRhjo=,tag:Ca3KqKmZJzyEcs6SAiuJZg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -28,8 +26,8 @@ sops:
             eDdFZERVZUJ2QmYvTUlGMlFFNTlna00KLil0QQySKHDAdFxIZAlWvkCRT2v8RNL7
             CWIs/HhjmGk0BEoXIVlmbnAVNATABCCWnUTHFKvvW/8KIDhwgu72Eg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-20T20:59:29Z"
+    lastmodified: "2024-06-15T19:19:59Z"
-    mac: ENC[AES256_GCM,data:KFBbDkz2ZhG+j/yGVK6spADmNM0t73C0QyD7/KoV/gLCD4jwWRxfAxCAUNlBeHIFrZDfyW2KR04oPA2LBDqASnQcITgRYhbNj51wFjiU6kCT0LK9uIx+hNo3RuAtw21/2qsg9Xf0PvAC33yB+iaNrDDBtiWyg2Aq+q0wdMzXRfU=,iv:MIF4iqOCSaoLyFuyZ32rCN6qCGtlWoNtkt7mXE/njVQ=,tag:rCsyRPNSAam65zarTKLnHg==,type:str]
+    mac: ENC[AES256_GCM,data:Y+aBXyowjQTXgteYLU2j1I5cv9UFU/ylrVy9QQub3NLzBbpW4pb+oI2wVcZI0K40jwSX7xOEjgGOtjdLRGTG8/xHm/yf+R0Wgs7fyIxOzcZv8XBadR6f2jUnAPA74ZDQ9ngwh1xyJteQPLwr+XPuGNlylYn/mj/EcwFs1SCok5A=,iv:/7XR2P/nfEicarsCALXhKIbvzsqUYhg9SgT2Z7P3W20=,tag:+uHRHU+WVfWefjHcH/C4fA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1