diff --git a/cluster/config/cluster-secrets.sops.yaml b/cluster/config/cluster-secrets.sops.yaml
index 42a138ac8..511de78bf 100644
--- a/cluster/config/cluster-secrets.sops.yaml
+++ b/cluster/config/cluster-secrets.sops.yaml
@@ -4,103 +4,108 @@ metadata:
     namespace: flux-system
     name: cluster-secrets
 stringData:
-    #ENC[AES256_GCM,data:WyMoeg==,iv:RKv9a02hjIyUlKy+3bP3JiE4SVxM8J6MWFJW+tqiFkM=,tag:pcQGWT4atozHNPgxuEEmJw==,type:comment]
-    IP_ROUTER: ENC[AES256_GCM,data:ix1zahwuoV4=,iv:26LAM8y2Ctpiy7vsX7F3CDrnyiuPLp78lhhRwWip4R4=,tag:Ipztj/PUSFA2yq59RxHpXQ==,type:str]
-    IP_CLUSTER_VIP: ENC[AES256_GCM,data:T9d4JwT3Ahm3,iv:ioGz7SHdXJE0cK09ToYSItfHsb93RzpM8dclBL7iOrg=,tag:iw4p3NGEnpiaXAAzvobHgA==,type:str]
-    IP_CORUSCANT: ENC[AES256_GCM,data:eGwODsP/Qtc=,iv:yg6H5rU2Lu+8zbSrF8Q7nh+vAZH4XRmevNc1YHeYeNE=,tag:vmS8wlNCM5JlsvZ0wkgFwQ==,type:str]
-    IP_CORUSCANT_TAILSCALE: ENC[AES256_GCM,data:eNWWhmIhFSsOgARX8g==,iv:7+dzWyzu7oa0Vg1VA4TS/wfOaJHDLq22TcDKIHfzNLk=,tag:uyY6gcNufr+QMY8pb8orjQ==,type:str]
-    IP_KASHYYYK: ENC[AES256_GCM,data:C0QgZc+fSk0=,iv:kVwfPX2F5XG5gx/djn9a/YlGbkSaBXs3fD06sB4BdcQ=,tag:SPxkX/lcF0SSHbTXMZSJyg==,type:str]
-    IP_KASHYYYK_TAILSCALE: ENC[AES256_GCM,data:ZG3R7HmiPfkGub0z0g==,iv:73ZhOZSqrhUuzk+TtQ6cUOXiww0bRkf213bRLgJ3IGQ=,tag:WtKvdHpAKIVZm88XSn7Sfg==,type:str]
-    IP_ALDERAAN: ENC[AES256_GCM,data:CtIjrzu4lsQ=,iv:a5utwufZvoI9gGavQs07VvleGsWJeuiHfC5WzPGfkzA=,tag:SA+p+p4c1wRXlYmgmCZtjw==,type:str]
-    IP_ALDERAAN_TAILSCALE: ENC[AES256_GCM,data:jNoXdpjPFBl8ie/idA==,iv:BUyfw6yQT9i/sr3XWcKTrDDmE1Ydrn3HA76BZ1pxVh8=,tag:g5D/c9Uf5i6lEIRo3rEzXA==,type:str]
-    IP_DATHOMIR: ENC[AES256_GCM,data:wv6FHX+tFeY=,iv:zHvd4i4cwqSAlnib4Ffci6OiobSUiZ6cA74DtBKcvho=,tag:Ryfu5IJ+jnnZCL0vIWelfw==,type:str]
-    IP_DATHOMIR_TAILSCALE: ENC[AES256_GCM,data:FGV7qs3A6oTgpiY+,iv:ADNwMw6MJZCsTVxhTVTUKK/AGknyaxeJMiEz9ePidHc=,tag:OFqMrWnkVaZNAxlZrHp2JQ==,type:str]
-    IP_MUSTAFAR: ENC[AES256_GCM,data:jAGJMZgvh5c=,iv:RP1OlvuHkJQhKpJd77m/DSmV+4qpHJoiSgxnZlNLo1c=,tag:nvcb7kyTwl3d5z3+G+w8yQ==,type:str]
-    IP_MUSTAFAR_TAILSCALE: ENC[AES256_GCM,data:nJeMNl9ft2WGi5FKwQ==,iv:deN9YqiLBlvC9Cc82nsJSw2U3ZovysVbQk7l2nJm3To=,tag:sqTcGLQsUS47Xxs6MrZUFA==,type:str]
-    IP_JAKKU: ENC[AES256_GCM,data:J4oPsr6nTDGcU6NK,iv:Ec2wv2ME6fdgiRMuZm/OxMajc4PhbN9OfGVx/V/hQQc=,tag:zYbtMktYExdnA8Sqrri06g==,type:str]
-    IP_JAKKU_TAILSCALE: ENC[AES256_GCM,data:l8XBPGzQIPOKFOief6M=,iv:eBTW+8p/1GkWiF0WlLhqDibA9J267lvQqOw6U6CnqhU=,tag:r7QDUNPlvAs4fEviyCVvqw==,type:str]
-    IP_RYLOTH: ENC[AES256_GCM,data:hVbvI9djWM3X,iv:4bctgmyKkPFAz2YsiuOL1xk/aj23EVCzFNNfM1cGRpI=,tag:VF1VnBDOJEwa0fYnxKVriA==,type:str]
-    IP_RYLOTH_TAILSCALE: ENC[AES256_GCM,data:VD4yonZ3ova8Z8BTiQ==,iv:nflrNOhxp5Vn1+vqJeXmOcIV7HOKHCxdQA6XgeBKv2Q=,tag:8Q5YVeYekSN27UkVsqp56A==,type:str]
-    IP_ILUM: ENC[AES256_GCM,data:nwgOM9qp72wO,iv:XriF3+bYBlqPeHKuyzQAYOMvO9OHBZHtyRQSnFDVE10=,tag:7gxpj1on+sNv3F6GJxu85Q==,type:str]
-    IP_ILUM_TAILSCALE: ENC[AES256_GCM,data:e/QW/IAkGnK5ZNHzEA==,iv:x1biDWUfA0g6+bsEz9Hrtb9qxTI/qxhIBaxk60A34Hg=,tag:9HI9jtMk0TlSS5CiwraK6g==,type:str]
-    #ENC[AES256_GCM,data:jWqLgss=,iv:uw5y9Qkl5F/8DNAledDUjXIZq80uj4tgIj7BfPI+UkQ=,tag:lsbhieqhqvZZ6GgiRBz0jw==,type:comment]
-    AUTH_USERNAME: ENC[AES256_GCM,data:oLyoWK7F9V/IyQ==,iv:YZ5S2YLkEwwTEwCwBXYOb+9mL0Cyy/WBhiX0awJs8Bk=,tag:cKUA4vzkUl7ZbMqeA355bw==,type:str]
-    AUTH_EMAIL: ENC[AES256_GCM,data:nMRnzo3EL2sRCJkYPKI2+toQ6A==,iv:Z/6oFuJnYeXzSqIC/G0CNhGYLN5d7sAKJ3PZahDWJ+E=,tag:xhkYfsjygmt4ujGDsq7z4w==,type:str]
-    AUTH_PASSWORD: ENC[AES256_GCM,data:8sdX4hs1uu9OO+jtX4lpeGxN/0DBuU93e8L5Ln4i0NHK2mEQIkL7Rh9ImCyc2RpnN0oga2tlZQFKrYEMew5KN1Sn+s5iBiwRIHCeRCrtIbmFbqjH6xJ6orrui7x/OLdSwA==,iv:nZBnoIVdgkM/w+oFM7Bm73jaFrVQ6zAXiVLmutJkBNg=,tag:fWW95lCLHZTIZG+m+3EfMQ==,type:str]
-    AUTH_DISPLAY_NAME: ENC[AES256_GCM,data:yK0ILvGP3x4PgnQ=,iv:mXRV8KQPMM560Vn7m9UzcxjTKrZyWcKS5SU4oMykvPE=,tag:7qzx41pdvGaBaJ9ef61vgQ==,type:str]
-    AUTH_OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:2dzEIZtVM7VxbLDKToQJJRWmCggF2lrVvSP/AO1b/Jbzvkq5LlO0gWD29+imtng3WNFgRtkkL6oUyyRnzhAFvwIViQge/uKT,iv:Yv1gVub9/GIcvAdZ7S2uGzCUSxbRjEx4Sn7ZimMGR38=,tag:8Zqe4J75uxw/OYDiEzwdig==,type:str]
-    AUTH_OIDC_CLIENT_SECRET_HASH: ENC[AES256_GCM,data:CBZ6FHo0E8gn+IIbXHYdik/Ab8CbX9wOJLaBwbodKvFNYSHDb9qWWz22l4uuvGEyEJk+cH8X5gnChaZabBW9u8A4zi3/9Pgfx3mFDxavTamZ6XtpoB4P3Eg44F7Cah01n47eukRMe6clSEvw0zmIxGv5eE61wVAYoCo+HF9DXsTrE3Q=,iv:D/AFjxSc5jCat6pPydDPp1GIDQl6gq6eRVaC+KGdvO4=,tag:B2ucHNKx6WSfE4MdQ7RsyQ==,type:str]
-    AUTH_SARAH_USERNAME: ENC[AES256_GCM,data:P5/4PXxa3ckY,iv:eJ670Ibp5cuXr+u7mCvEFffbA/kUcdtwQmlc22TVXm8=,tag:bOsOWcj4kTys+wdqrVxVPA==,type:str]
-    AUTH_SARAH_EMAIL: ENC[AES256_GCM,data:O7IahU1cUGlOi4oTbJ0A1H4BS55E+70=,iv:jqoM9LkiwkU4WdGzWgZPs16QI3tcECn4Axq9A0OlFXw=,tag:+pWihZ6XW3LwxoruXYSoEQ==,type:str]
-    AUTH_SARAH_PASSWORD: ENC[AES256_GCM,data:NqevtPARobIaGiqlqIgrTiQyGAA4cFIfBclJly/CrzdIKhj0L/VFBM2E9sT7td3dFC6VfPB5xSyPv4NxE/+GEGhY2/+oVeAqtYwJa0PpHCsh8fNo3dOszKvwMAzha9kIRQ==,iv:LIa0mAqTRS2cI2BTRm1N24dy/VESqk9kD6H2h3ssuA8=,tag:Q9s+adqdMW3Syq51RqpkKQ==,type:str]
-    AUTH_SARAH_DISPLAY_NAME: ENC[AES256_GCM,data:DcgIAgdEFMnkJA==,iv:zcLPfsSku1eiBr8BUCF3M18IIDWLv/7clQkuja3v8pM=,tag:53kRiHkWWA2cXnv4FPJmnA==,type:str]
-    #ENC[AES256_GCM,data:87Cn6Zo=,iv:9ntS6yuCihYDYZgSlMt6yrKFwYD2h+TtVm8NN+aqtBM=,tag:o+gF2OpH5OLCLc7TVNsVFQ==,type:comment]
-    SMTP_HOST: ENC[AES256_GCM,data:jDCB3xXBHgEmx5613FuoUt8jcw==,iv:+nk813YGFHZFjKQzVzTwoxP0Q3E34M0tsVeyjrn0Phw=,tag:RB1v2jnHRMnjp97PL2K/gQ==,type:str]
-    SMTP_ACCOUNT_AUTH_EMAIL: ENC[AES256_GCM,data:iuvpqyNoTLHZaqD8s0lpVHRsIA==,iv:3P0TCnClMyHNZoKJXX76ipyjAbWlmYZq/ki4EOBPExM=,tag:gmqXjstvCNAt9+k/hXzWDA==,type:str]
-    SMTP_ACCOUNT_AUTH_PASSWORD: ENC[AES256_GCM,data:XFi9kI2bq087xXfuSF5MbmT+bQm7yXvwVg1LLXYnBFPLm4nQjzPsV6IF,iv:FH0GnA7A0HN54M0mqtLhZRj+VnWw7YLcNDgTouu3eaM=,tag:QOKv3E4gPva+FNsqWPpIrA==,type:str]
-    SMTP_ACCOUNT_AUTH_NAME: ENC[AES256_GCM,data:Zl4GX+GnJrUgaclPeUzqhcsbmqdQ,iv:54JZNI5Asplh5O0syz7dhVL4bTi82oLrBx2xIk6mg24=,tag:FICnj4O1XeyIe8ofHfsM5A==,type:str]
-    SMTP_ACCOUNT_GITLAB_EMAIL: ENC[AES256_GCM,data:JkzfL4FjTj0dS3fM9YJG37J+9Pvt,iv:8Fm6mlr2bZGl9Aj7mt3VHIUscj9Nhv+l9yzbLyKtSVk=,tag:NjJSUWu7Ao1FpuSR57HXKw==,type:str]
-    SMTP_ACCOUNT_GITLAB_PASSWORD: ENC[AES256_GCM,data:Hci9PWYQJvplY2VnRstvqInUBFk2VcXBUjZBuXB1cGbGaltUseZbSSBC,iv:LlKfB3HfbuelakoMeoDp4+heNv8ung93y1NcBDgh5nc=,tag:xBvwAhYP3o5gQR89ttszyA==,type:str]
-    SMTP_ACCOUNT_GITLAB_NAME: ENC[AES256_GCM,data:TWQUQSQs0TCHA9WOdsSdT5V8eM5DPW0=,iv:ZpqQV2CGthGP+10gvgsIiNExKh5t4q1Vde2bwWAt00M=,tag:77zMdZidp94qJ5iFSIBbcw==,type:str]
-    SMTP_ACCOUNT_PLAUSIBLE_EMAIL: ENC[AES256_GCM,data:FRw382BeInVrjQVa/F01CZU4fLLv5fsO,iv:YQm8I4aTi01h/lnRGQYXo4kDUor/nig/yS1lOvOJBNE=,tag:dGsZarHtzf8KMSZ2JulZdQ==,type:str]
-    SMTP_ACCOUNT_PLAUSIBLE_PASSWORD: ENC[AES256_GCM,data:lm3RjP+JNooAbHgriWIbuMDEnwYCqA9tsGKsGdqmoEpH9t+E82l3MAqd,iv:r1IFQRBak+0rxzEjPnMMNaCaduUMyBoME+8r9nnbJnI=,tag:ViYIzzujjTR12I2nAe2/ew==,type:str]
-    SMTP_ACCOUNT_PLAUSIBLE_NAME: ENC[AES256_GCM,data:O+kAVI7AHVSqvwQ2QcSG10l8rM9bn42/aaY=,iv:OUME4YXdmLNoL01BzVWwquvcqwLFVvTgW7KOsaWZybI=,tag:cI3s/38KMBehFgZg14y1qw==,type:str]
-    SMTP_ACCOUNT_VAULTWARDEN_EMAIL: ENC[AES256_GCM,data:BtQFS3zt/+dPOmxEGLf617MtlsQ=,iv:4tzMnKvJ22UUyzQlDo7D7uGJmWMQnyne927XDFa+NoY=,tag:5uwrOklNPpyQnIZUv/W3iA==,type:str]
-    SMTP_ACCOUNT_VAULTWARDEN_PASSWORD: ENC[AES256_GCM,data:8CNRmesyhw00fo/lxH1aAk+2BMnlf7DVnPSBckRpXF337KIzBTaRWdXA,iv:MaXOZWn7FwxnsKDhcid7S4WLz44lOA47ugfGG3zNoYE=,tag:xM6pEhB64UWIKsCexDo7GQ==,type:str]
-    SMTP_ACCOUNT_VAULTWARDEN_NAME: ENC[AES256_GCM,data:STFrcAPz86pR2B+p3XEOCyb4aoK6Qw==,iv:fIgEIZjiwvvohomGOBJbQ3huODE99oVoKsS5gX9P1qw=,tag:kiLqP0wDAM22NK0WH6lpZg==,type:str]
-    SMTP_ACCOUNT_VIKUNJA_EMAIL: ENC[AES256_GCM,data:iC86Ywmjh98SHGuhNBbIZ/coYhc=,iv:/DS3nJE+3dwGUankzCauZ1fByz61YAinIkQw//iAjVA=,tag:4OyyO0r3NtIjbDoJRhrtag==,type:str]
-    SMTP_ACCOUNT_VIKUNJA_PASSWORD: ENC[AES256_GCM,data:mtQbyAgDLV8KMgBsg+lGwg5tapjKZn13CfkluO/TUapDXMdsF+AoW/oY,iv:uugjImj82DuxbDGm2EvuzP6J/rYY1Wl61PCeeb3Fjy0=,tag:2m76jX/dgSqk7fGcSD3Yew==,type:str]
-    SMTP_ACCOUNT_VIKUNJA_NAME: ENC[AES256_GCM,data:ODd9HMcoIEwIKnuT5ymuBu8Pjz3NWQ==,iv:QVYeW/lMHiz0k+Nkouzmx9LYqqrK2mbo2Wv+XL4wPBU=,tag:OSGs0JwO8dTgr2ToghcLLg==,type:str]
-    #ENC[AES256_GCM,data:apWOfjEJpqAI3DI=,iv:W9++27eb1hsPdKFdj0GiBiFXhYKRGc/BtfkxN0Nyvtc=,tag:pM9vWSzTk24I7dsKXS7f2g==,type:comment]
-    CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:CLwd/iSsSiJsCbt8xWZmca0YlcyIjU5iGlKfYJkwDnCHJmXoypAuIw==,iv:TPnfAhH8DSEtpSExZJQc/76VySuyBYQkwaTSdwmLpH8=,tag:yoIqpT8sbLj3qinMGQT8UQ==,type:str]
-    CLOUDFLARE_API_TOKEN_METRICS: ENC[AES256_GCM,data:SGIl6zDDiKcqXq7aiuvOk1LgRQC8tPV2SRm0Uu7Ao+9Ndap8Gq9fJQ==,iv:Bp/YX14ct4Q21nFO60O1oY7JL8YYzRkO9bWRr0xNnVk=,tag:1rZUkKzKVgWX/oQ4OT6F9A==,type:str]
-    CLOUDFLARE_ZONES: ENC[AES256_GCM,data:cw2CbF0KQ9rOreZbkY1yROuIqgDCZDel1PVhRdG34LpZX5uHUXgY8QvJaDhSppTjyxy5yttCCNLh2HmGKN43tjvp3+snneMWsMybA4EYfa78ctg2KN2urd7Ujz+d4meYBcy86rUoLizwecidTE+T2pKUygmXYgCW1HWTXhBaS8EQn+s=,iv:k0av1d7Dq81jSFMIriIiQ0ILgMib9iVAh4kRt5H6oY8=,tag:l79xOKX35BQY30ZJcQ72Fg==,type:str]
-    #ENC[AES256_GCM,data:lKU3KrCUjg==,iv:KBiEUf/g3vk9YXmc7itciMrB1iWckr3eudAEz5WprbI=,tag:Pk7Wh+n209wFtLmPhhuMhA==,type:comment]
-    VELERO_ACCESS_KEY: ENC[AES256_GCM,data:acfcTDesbXbISgKzscE3N5vsmPod4jRMqf3sFezYSQ1q3OeSh4nccB3B,iv:N4TARwpyl8idsdaBOsUn/fZVMhB0N/I/h78IZS/F1xE=,tag:7F3QcXu1DrlNGr+fwLNnfg==,type:str]
-    VELERO_SECRET_KEY: ENC[AES256_GCM,data:LugxsHKCE4FgH8e1Of9se85DfkQ3WdVmAIu3DSQlYwMzcUfC9ItfIwWe,iv:w+sh5rWyGahbc2MzPhNP+Okw/b8ry9jcmWYIE+WNFmI=,tag:r/oOpXTxoq0i5RwJZiqcRg==,type:str]
-    #ENC[AES256_GCM,data:OIImL1uCTwmgTVbPAA==,iv:Qmn04dWAT1BhoFMkvHsUUv8FUHas4SeNY0s/wFWyHAE=,tag:LxUmi/YUrN8RG2ku1xVpVQ==,type:comment]
-    ALERTMANAGER_SLACK_CHANNEL: ENC[AES256_GCM,data:B5MJlqH/XA==,iv:7QBjQQnQnASGXHWpT5zPwomOxnbx4nGXzWYXHMjHhYs=,tag:KXHcCiaRrIIW7h5owiBADA==,type:str]
-    ALERTMANAGER_SLACK_USERNAME: ENC[AES256_GCM,data:lTdgJ8pZTxHZsg==,iv:rIQjD88IRSoQwOENHgOlOxb+s9wiWcvquV9yJA21VJM=,tag:gAyHeSwHx/BIfalXplQ+yA==,type:str]
-    ALERTMANAGER_SLACK_URL: ENC[AES256_GCM,data:UIO8Bw/nFm8N/24agzP8PWZ4YF1ehOrmVKPf8FPTQwCW8ukpCSsoodKZeJ2Oa1xfvOwx+/XV2k+NZ41H2ACDBNBS0+Lym3nTEOeliE5lew==,iv:qGLwvuajI1QmKxVawo9WUg0ndaS6nnR742Oz98yrMjc=,tag:rXaq1V9P0K07KpnlPQYW2A==,type:str]
-    ALERTMANAGER_DISCORD_URL: ENC[AES256_GCM,data:W/ouG0UepKQ9DZdv+Gn4/Cy1uplOIpj72r8MkFDtSKe6ZogRy21M+6o/JuzQ3/jEI2UsGZOWwVkasN+HCsAa+WvvVdr141uGjSn4T72mFvHHC4U8IX2E5zwaR3serR+sqAUYdfDyKFkIUo1i/Dm+4G+WBiKcoC09Jw==,iv:S8Vo3Ad7IB/DWsOQEBhsAoSM8O3cGLsvvTdQRUJ7mJE=,tag:gG5nkstbqdn3H00VrYPo1Q==,type:str]
-    #ENC[AES256_GCM,data:7k75fIISYi8=,iv:F/mDc4KjmQLN5xbQk40xGvWGiTTyeqN7oJm9zDXn9dU=,tag:8U/epQZ2K5WcC9XzgBd42A==,type:comment]
-    GRAFANA_USERNAME: ENC[AES256_GCM,data:q9rXcMmPm3UCvA==,iv:3tuvq4++2SZ0RfwcES3Df5bPTK9vTi0iTEFaEk8t9Qc=,tag:dxaK9jBaC0v3QY5G5aXL9g==,type:str]
-    GRAFANA_PASSWORD: ENC[AES256_GCM,data:s+SQHyRMm9TWqTEdOH3DAtYsVhFBpRXS6Oc+W7eZk42rbYhjzqcg5md5,iv:84dhH0Wo/gDdFY+U1JYzf7VdScDC0Ku0giz6orWMX1w=,tag:vw1Jm6fB8Js69hiWF72vWw==,type:str]
-    #ENC[AES256_GCM,data:e4wgpcCE3mg=,iv:A5ClXA8cx6SvAZVsEyLvAykEc0NIi5NX550WFg8m/+E=,tag:yzy9ghJ0dX9MTIGAx1LxCQ==,type:comment]
-    HAMMOND_JWT_SECRET: ENC[AES256_GCM,data:+a7rV26+O3Pe6aaTfz0V+K4FBVSXnp6cgtShazj5gNGlqs+9HImR2/dHHaaLjLgcPx8mtP0f8WUlmkJvkALCxp7zK2ltZBWuqqyfi3PFLSYg5X23xi7FCw==,iv:r2b9jU90SoKoB5uMuew36rkXHCmRDxUeuADak4NCPXE=,tag:1O74YnF2qx1+CwJ3zzlEbw==,type:str]
-    #ENC[AES256_GCM,data:Rh4YKCVqUc8KvIMGTQ==,iv:+uo5o31neLHynJIF9u+KdZqLnOPyw9Y9S0wz4NNaT1A=,tag:q8Rt6NSTIgrO84gKmUnURw==,type:comment]
-    UNIFI_POLLER_USERNAME: ENC[AES256_GCM,data:l8aWtWTGBQ==,iv:FYEijUrBFO3c39YMB/fuZ2I/HwoNRquLj8GCvJD9OUA=,tag:tlcbGu9Vw1UNXo8vQG66dg==,type:str]
-    UNIFI_POLLER_PASSWORD: ENC[AES256_GCM,data:mYz2TPOfe1v534gRQXAlpGQwZVu3XXSVGG4Tl9e1Rg5LLpPCnLCLnwsS,iv:HhrY4idfte3OHhw7QGZELXg7sPfLvp5Y+Jw+ZqdTCfk=,tag:xXC5tsQKAj9JxgwzncDjsA==,type:str]
-    #ENC[AES256_GCM,data:TTl6rlZZ,iv:S/PXP/IM9NKKQcHWvydRSZ0rH8Q1TlUZNyMoM4QoKq0=,tag:8l1lKl6TtQbT1/DYE5Y9bA==,type:comment]
-    MINIO_METRICS_TOKEN: ENC[AES256_GCM,data:HquB9keZAe+H8FilmhpgD13iHjTl3JJWVtOoP1cGV0vSFodr6gmucT0T6VycSMcPGn98oH6YpGNXMVrXpaFVj+6nWPRyvjXGNJR/6LdQw7xqaxAu8D94hRb5TICRKy595oIHZdQr//oTz+70Dj9li3bkJ/863DTs0H3eIbRR8OkZUvp9ZHPq3Hxa/PwZ9Y+LosY4eJI/NjIdJCC0mUBbDD3SaCC64/qoIk0IVxnvlVBmLseOHKoQJh+FjU9/MuXlVhd3ngMtvA==,iv:fOZLjKAC36oY29JWtgBb0T6K899Upwj52Sthgvxrucc=,tag:/WbskucG6mmsh3Rr70FRFQ==,type:str]
-    #ENC[AES256_GCM,data:8U6nFLXfAydJoA==,iv:5VdLotcx/AxB5GjNTyKDStxvPdJcgNFdp41bZDLaWwc=,tag:RrKsufWuQLG6wSXdZO8aSw==,type:comment]
-    PAPERLESS_ADMIN_USER: ENC[AES256_GCM,data:agw05SJYcBw2oQ==,iv:CWdOPJQxqlwudaN9/HQBq0LmZwLGVLtXHQLaYL/R6+k=,tag:tpDg77nZsOXRcttJoASJOg==,type:str]
-    PAPERLESS_ADMIN_EMAIL: ENC[AES256_GCM,data:Euxz3wE1LBMuQEYqCSB7cBKIcQ==,iv:DbO2m9kaN6/cTO8aeEOBOl8m9k7ExRsf531LuS5MJjw=,tag:aWiGmPDmyEgQAhaehLf3Fg==,type:str]
-    PAPERLESS_ADMIN_PASSWORD: ENC[AES256_GCM,data:f1WiexBiV6SFRMN7E0xX99aN/k6g/+xrC8Y0GvFVu1N9ZOKjrp5jiZud,iv:s4H4XeLdlnQOSPByikWHCBbHInbibKmcnbTp0R2Csus=,tag:FRDF4jS7jp9bK7GubDxGbg==,type:str]
-    PAPERLESS_SECRET_KEY: ENC[AES256_GCM,data:wHGRqpurgaidipn/5V4zM/OfEvjDzz5i3AHc2KhftpFdH0x0h0JhkAFA,iv:7VW6djQ4mQqBxeY8bCYYrJvEDPfxT7AiNWxXSc/vGhs=,tag:vVP5B7fHSMKEXn0b9oHm/A==,type:str]
-    PAPERLESS_IGNORE_DATES: ENC[AES256_GCM,data:LSIrepzpjVY1VEhc2noRjMGcTpojkC7qBNuH9d3Lmgo=,iv:09hyc6a5Z+d6zD2WB5PHhpGv9GHRZrzvo0vh7bwuSvg=,tag:mU34fDuK13ZqrbjLKdCBOw==,type:str]
-    #ENC[AES256_GCM,data:Qi1Z/ct1rjYruQ==,iv:1kRKXDfU24GDnPagu4YQr+zDmV98Q0Txsu7GfDqFZ0Y=,tag:6RBydkwGsPani71IbSDh8w==,type:comment]
-    PLAUSIBLE_TOKEN: ENC[AES256_GCM,data:5xp79q3HYurRpi76cj7O2tUHIzhu2X8IGVRDibQ1exOhTS41hhbuFpxt8DGmL6BZja7fPoku2GAw5fO885AUXA==,iv:hYKsmDxZZ/x6h0eibTPX2wDHxSHUAiVze/OODbGnqVE=,tag:m7zWDrtm2/qmoi/Ati4RoA==,type:str]
-    PLAUSIBLE_SITE_IDS: ENC[AES256_GCM,data:6ymc48dmcm3rFUiDZ4gs0r0Zp3wMo8Vc7s2nhd4Dkj75Cq8pL9uaEJjAItXVOX6TzOSiMhbyBkpagckmvtopykU=,iv:JRp5N3Urz5oXMmAFqPqLGIfCz2W35IfclNynDaraV6w=,tag:+PLwGgFlNRS2z7xVWgwjkg==,type:str]
-    PLAUSIBLE_GEOIP_ACCOUNT_ID: ENC[AES256_GCM,data:cFON5hux,iv:z7F4Sfn+t+Kwy2zMVU6Rr7FuVnKmhv9Kq3ukMWzM+wo=,tag:0b7mdxEb3BuU/hNsuQZfYg==,type:str]
-    PLAUSIBLE_GEOIP_LICENSE_KEY: ENC[AES256_GCM,data:upRkdLvAGgwFene34qlyFg==,iv:QfCa7xhEzAHa1InwUVNdPA5ens86kUWTwYZH2dvQVfI=,tag:2n+VdbyUg1/g0jS/1c2xCw==,type:str]
-    #ENC[AES256_GCM,data:UdSbKRU831hx,iv:GFuJdLojzMTYJNS72fafEzsRX/gNXYK5sGmuYi16U/A=,tag:urEhyFSXpUUFRCDHYtQEMA==,type:comment]
-    LINKDING_ADMIN_USER: ENC[AES256_GCM,data:lmC+eheDJC0T/w==,iv:ZtCYbJK1yMr0B9GXmZkeRdH39vXKDOEkib7zmlgSHjk=,tag:0nAA2qhSeR+X00POn+W3xg==,type:str]
-    LINKDING_ADMIN_PASSWORD: ENC[AES256_GCM,data:xpG6IvwzqIxY/lu6qgXT3N3YTr2P9fIfdmQvkmAs4666EYVKgNU5lbwO,iv:FV4Eu16ZALx5O3PgeQY3TDft/FfZsUQ/fn4Vpp5VASM=,tag:XvUC7DrlvKIhe3gYY/IwGg==,type:str]
-    #ENC[AES256_GCM,data:UrTMyrH5Ag==,iv:MNi2M53tUwSkmMJUCr3PnQeNNiqumH0Dpvp7awPZAT4=,tag:qiNw9QkVKGTFcu/6djNu1g==,type:comment]
-    GITLAB_REGISTRY_EMAIL: ENC[AES256_GCM,data:5IK5MNnYdsZQzSaTgeZUC6d+uw==,iv:PKdvPXJuvYeK8bNjRCIiB+0GTzCEFCuKM5eg+wjYar8=,tag:L3QR3WAaLexDT3RjPhFpIg==,type:str]
-    GITLAB_REGISTRY_USERNAME: ENC[AES256_GCM,data:a5tZrMNZvFuCbg==,iv:Wf36MWb8OIb4aY7YnMQwZa/kNIV1hyLRY66pJr34Rdg=,tag:uO8iWVOdhxRmiPcZ/qxIzg==,type:str]
-    GITLAB_REGISTRY_PASSWORD: ENC[AES256_GCM,data:odZuacZ/uN0WUmBXHYtcI+QoZNE=,iv:YvTSAQRgqS+vjgksAFZ6xcZUzgolQ8snid0l/V0Etck=,tag:/fQDQDcUVUa7KV7mManSUQ==,type:str]
-    GITLAB_REGISTRY_AUTH_B64: ENC[AES256_GCM,data:MAh3O3a+TyMPtgrWt9/Pt1HWobc1/+UqTuHMwiZak9oeiBc12AmWlBEcaRY=,iv:44XbHon2PY8U+De8B3/M1Js9eLvD8IESg9V9Qt/h7NI=,tag:JOzBD3j1/m0cMLgFI2ajGg==,type:str]
-    GITLAB_RUNNER_TOKEN: ENC[AES256_GCM,data:JiEx0kLuvCVZufWROoIOo3QCo0kKqwZToQ==,iv:1JYUbdNst57sn7nSO+cLaxwNmltAw6nS5455ZSAe9iQ=,tag:rssO8rkyv+HhV56D1L+WSQ==,type:str]
-    #ENC[AES256_GCM,data:VQr6OON4ptYZ,iv:/5fJdxa6I6VmNU4Rpw/zMakRMOWl0N1KexqXOzv0y6I=,tag:7felcKNVi0AQcvs/F/kWzw==,type:comment]
-    FRITZBOX_USERNAME: ENC[AES256_GCM,data:f7i604lmaKhR0Jn7drI=,iv:JAOe9jBhrumdPyEkxa3/79SAH+abR0aCLTPkmHIHAsA=,tag:/xpYLmyS0JqnYoZzG9GRQg==,type:str]
-    FRITZBOX_PASSWORD: ENC[AES256_GCM,data:hISjVVsd3K+MiOXK9IJ8CveYXMjrXezlT2wRLC/omes=,iv:+Buj19sF85ymouiyPuj3b7FT+51v2N76LO/nFxNal+4=,tag:NKS+disaTToDwzTg5Y0M2Q==,type:str]
-    #ENC[AES256_GCM,data:uyGzAqq0Sg==,iv:bJM0HZCemMCPPtGLLtYGRrkc/0/SoeHCc4/EHTDnuQs=,tag:KgPges+RbzFv+LIZ2TA88A==,type:comment]
-    SENTRY_DSN: ENC[AES256_GCM,data:/PwT4+1Q8NsruxOe+xJ+cmCwqMK2Rl/yInZbLUqFs2RH8JGn8DLJF1Tn8xu3GIvki6x1VyVSjoLO4p1LCFOii5causJZvd4=,iv:Bn2HQ9rrIc6wPXiOEulWZDenCRLzXWg28cFnF+96VTA=,tag:D7GaahuloHbQvrYoNeMfog==,type:str]
-    SENTRY_DSN_LEGACY: ENC[AES256_GCM,data:h7WcwWLgMlZyWlI9jfEO4wMNAVPXiS82/IwNm4d2zk0fHQXTbAYnv/AxJjJqTBJ32EwnfjoNng9D0SYmG7eOq/byTufrsj8Iox+NO29/Bogi2s8SwTYV9xEhY69LtO+U9bAz9Ai0gOw=,iv:T4lLZcGGS6zJ9mNut/R2IYF7+iF1W69aIBed7yqOcAQ=,tag:dIMiuz2bTbw7QWm8RigXaQ==,type:str]
-    #ENC[AES256_GCM,data:dOKPxvPEw9bT+lSL,iv:jhKYwuKVoy23OXch1VdBsuU5TjiJndwUyiGtRLYX+Iw=,tag:D4qqbdmuPk7SSaCKy6YhTA==,type:comment]
-    VAULTWARDEN_ADMIN_TOKEN: ENC[AES256_GCM,data:BoMDowZ7wrmwt0yPObZGfNlxZKuhd78TNJ1xbw0sADvVBPr6KQk/qRhWieFEr0AgjyMOMyxVB6aJXl9b2vC8sPYYrcLvm/Fnk8T0DJ1c2c9WE4IjrtwiBfk0wb//WEyViqAhm8O1uOSV87FTCmHsMguiiiraYg==,iv:6urEK9Bcd5G8WGVxm+fEBH2SYFdR3xG4XEjRinLGeF4=,tag:Rm8n+rpoYEVNJdE4L+zygQ==,type:str]
+    #ENC[AES256_GCM,data:Ivrt7w==,iv:pNxtxYUi5JtMJaBVrvPxk0hDLuqTHIQBgH+diV++8e8=,tag:XG9EQr9jcLen04d+NDAp0A==,type:comment]
+    IP_ROUTER: ENC[AES256_GCM,data:kfU+newV2TQ=,iv:d5zxxvPypciWpE9gL06reH4E0LPbSokBYJQxqi+ywOI=,tag:JulMjSfqOsvzB1Qi9Bs84g==,type:str]
+    IP_CLUSTER_VIP: ENC[AES256_GCM,data:C6cJlR5Koi6S,iv:HlfxjXxW943ly1uxPHitzL0qBdCjfmjJdOQzDHmCQNo=,tag:LpRhE8MmjTBLJfn1BCrRZA==,type:str]
+    IP_CORUSCANT: ENC[AES256_GCM,data:/m9BsrsEVdk=,iv:NPISatEssO3sr4JWktAsHbqGLzcZRyvg1WQeHmV7BGo=,tag:fdN88O852lE8ZmvzcLM7nQ==,type:str]
+    IP_CORUSCANT_TAILSCALE: ENC[AES256_GCM,data:HYf86u5v7wyqxi6LyA==,iv:2tQJrrkdBfIsxkv3wlIcbmxyzK29/6IKPUjQr4J520Q=,tag:tBhgqAk/EYUYj42t3X8N0Q==,type:str]
+    IP_KASHYYYK: ENC[AES256_GCM,data:hC8mMoxqxEo=,iv:5UUJFqCq7bX175XSyTho36woHGnfmrBa1DdmIdYsM5k=,tag:b4rEZblpgApmaTb87/Vprg==,type:str]
+    IP_KASHYYYK_TAILSCALE: ENC[AES256_GCM,data:jze8GJk0ealh2JpMmA==,iv:/l+v1SksA0eObutS31HUyOVrZABLVBvYZdlqnUhrplc=,tag:zSK3pXYabtXtrNS9L4PS7Q==,type:str]
+    IP_ALDERAAN: ENC[AES256_GCM,data:OfiCLdrjEnY=,iv:+MRJxuReBNfDp9tzDUIuQmdBG5IkqYDapWPU/CcEDFI=,tag:sgvZ42mP0NA5PlwRhzk+6Q==,type:str]
+    IP_ALDERAAN_TAILSCALE: ENC[AES256_GCM,data:uuWmGd6d0cwxYKtpqg==,iv:KEAuDaZeUI4i6wCJZnnHwhPoMH5Y0TtzsWwIIMQLtrI=,tag:wlpcAoJ2YRJOykGVAUuyQA==,type:str]
+    IP_DATHOMIR: ENC[AES256_GCM,data:8zJT17lCytQ=,iv:whJ0wN1JrxmhA7yRhy2vYRAyH8QzuB5QJdQQAURJnjo=,tag:ZrtdLgz8VFJxklgQtDAPMA==,type:str]
+    IP_DATHOMIR_TAILSCALE: ENC[AES256_GCM,data:IlD0EcH/N+EN19JE,iv:P8Bujct7GvN2p3+Hqlu/OjZoNKRnW2hArf4MS2VWVj8=,tag:fhyQvazfHYJvtWjHHpfcDQ==,type:str]
+    IP_MUSTAFAR: ENC[AES256_GCM,data:44PCvUND4zI=,iv:HNf4zp5cLh9q9xNM8XR85VyNblq0Or7Nqa/DVnAm3BI=,tag:6jnNOe0lW9HRxECEWET5wA==,type:str]
+    IP_MUSTAFAR_TAILSCALE: ENC[AES256_GCM,data:5hM3IvwuavnMKLfTbQ==,iv:yejdwpZ4ADIsuZh3yQsyD84Rn/yptAST/4v9EWmL8w8=,tag:5ZbAxljq0DFaPLx+7+tMBw==,type:str]
+    IP_JAKKU: ENC[AES256_GCM,data:7Owq0XN1ejkGfmtS,iv:gNn6wCONkCJi1N70vKSL734Xik+INsi7T6i/p7j9SV0=,tag:eFNkhE+pL3jhVn5A6Jtkyg==,type:str]
+    IP_JAKKU_TAILSCALE: ENC[AES256_GCM,data:KmM1dKanr1jhM4QlnPU=,iv:P3I00eoKANm9A/7r90L+8xE2SFSGYp23buu5q8WMHsY=,tag:N4QiBF6tLqu1ecdmZQqIeA==,type:str]
+    IP_RYLOTH: ENC[AES256_GCM,data:pPLF2R9q3aS7,iv:K1AbV8sUfKuk7rIHaETLzQUtEwuTmum3gTl5yjLirAg=,tag:y01K3SbBsKZQRqs8eskiwg==,type:str]
+    IP_RYLOTH_TAILSCALE: ENC[AES256_GCM,data:i+2QNz9ADvLxVpHBBQ==,iv:+dkj065BdbtW9idOEb6PIxBxjxg/SP56jrJfktCuWJM=,tag:d+fGpHfYrB+mP5FJLUsvzA==,type:str]
+    IP_ILUM: ENC[AES256_GCM,data:ocx5+gbn2RMg,iv:n8cxlQbQG7pN8iuC67u3tPOAN5+A/ZRsCdWwWjhFRfY=,tag:xMpXVBLhf7EW9aPTt04oeA==,type:str]
+    IP_ILUM_TAILSCALE: ENC[AES256_GCM,data:oCm2L/M5JbIflQvljQ==,iv:Qq1ZCXjOSHVM9tk8nStsyvYExA5cq/+6vhJwBgo8wCU=,tag:UmcBGxkgsr3G3X69//+wJA==,type:str]
+    #ENC[AES256_GCM,data:2OOcF/Y=,iv:oNQ+s2ywvqzOVtWRzVCVs/UsQI038J/yemC8LFFF/a8=,tag:1zRJeKN6sN468x+1tpD8tQ==,type:comment]
+    AUTH_USERNAME: ENC[AES256_GCM,data:BPrKAUnIXXM8dg==,iv:gQAb+MqhJC1CG56+tcnjiapFPQhQ3JRKcxm4dKKQUI0=,tag:WmcBbKmi1O7JeykHyUi5Cg==,type:str]
+    AUTH_EMAIL: ENC[AES256_GCM,data:512H9eZb0IDbYM8DhNEC9dDLmA==,iv:ULoaBxM3B/94Z0O7rE/d06a+Drw1Fodouls3mY+1zdE=,tag:12r1ZhQiD6IrXM8b/dRmDg==,type:str]
+    AUTH_PASSWORD: ENC[AES256_GCM,data:wp9AsK322B3BWmo4sBX9vGH03OGQUEo3HOkdidp68FYRhx2y3O27Np935EZGEoyKQ0Frs5tnkqEPK2vpavvQ4VqVO4+YYe5rCyYckLBPBFb7qDot7dMhymmLsfJjnDVQAQ==,iv:2Te2S8hfGsFphVcjtlp+Dwf+j2L+WknJMYQl7ZSqDHE=,tag:QpP/UPOWib0LVP2gRCmdRQ==,type:str]
+    AUTH_DISPLAY_NAME: ENC[AES256_GCM,data:yeqb6TzT2rxcMF4=,iv:AqMeM9hjKY3nNvgp6WSMm8ZBRJJm2PhhQfd+NngqWLU=,tag:/77VM64lWSyvYg1jdq2BXg==,type:str]
+    AUTH_OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:e03fa12k18mBlGHIbL/2HiI9GvNHHEqQOnNazGbbKj/8vMLiunxMD934gqZ6GjbeX0LaI0PskRyRxBgqlbzwK6FLhlVhzS6s,iv:t0nL2rOHRVRulBdCPIFah0G8T+CpvEuNVSYqoH/lPBo=,tag:ZwKLKXGAZzSelkNpFBuqAQ==,type:str]
+    AUTH_OIDC_CLIENT_SECRET_HASH: ENC[AES256_GCM,data:N7TAUzkFvQHcOZdsouT66iJR24AGXG3T+PAvH4Io8F6ymOiIQ7BDPRzaqb8oswYywBSs8SW5klXqCLtr8pqOb/Wrjjoa8okhceThG3wOTuWLsfHvqLcWBudDzMF8YOj4O/Ana/a5IcxFnDUyBPD0M/suWCzLvh3Pn2K2vCoRAkwfSqw=,iv:d1yjfCvbKvM/Gs57hWWAN5Mtb9Psvgcpk+FXJhnMNyY=,tag:mQWorxnQWSkWUSkJQoQJpQ==,type:str]
+    AUTH_SARAH_USERNAME: ENC[AES256_GCM,data:FMfiyWw5xfKv,iv:zN4gqzVaa/oZf9j3qbHQGggk9qzvGpTMJfgjr09ganA=,tag:rG4bVTCPQFAmz4tdttNBmw==,type:str]
+    AUTH_SARAH_EMAIL: ENC[AES256_GCM,data:erYzwBJkAIl6zuL0/1UoTMssl8ep8Dc=,iv:oun3w9rA81d4nx8jcWdu5hZrCI4krZFrzvBxDVtI80Y=,tag:kgvo2eOQ8TeTrEv18GgI5A==,type:str]
+    AUTH_SARAH_PASSWORD: ENC[AES256_GCM,data:EL8BdV5CT9x5Ub0Wm4gLiBmsDBrEYUWpQ0URnVwY+OzIbUTz5gLob9Mnx8etSw+fALJzvYUKTI2yASFBwvTCyJra7jRupZv2XlSYfAp7oMu5y6Ny1zZiKgGiAfdJQE9+/A==,iv:lvxqovbUtBq0/OJUAGz5wFGoYVt47AArRmFKtiVrhjs=,tag:McuYCfMmeGkmGWcrhZVSFg==,type:str]
+    AUTH_SARAH_DISPLAY_NAME: ENC[AES256_GCM,data:cxJq4+QHNrOtHg==,iv:/rVVO1ht+GApoYtSc4Y381vzB02Uwdf5w+aaxYMOBMc=,tag:tJp9WJAKF6uqxrfloeTffg==,type:str]
+    #ENC[AES256_GCM,data:h+4EFsI=,iv:V9U1uorw616RyZ457Lm4XcuSmP70ayTB82OgAOn+iSI=,tag:85PO9wAAU3fCvX06u0hctQ==,type:comment]
+    SMTP_HOST: ENC[AES256_GCM,data:tB1v7bUoLb7Qr5BOgaRsY0ybjA==,iv:jozuW9jSeNYP7OG39WCPtNu1Sus/His9lT+lUwxl86U=,tag:sh3VYKWERwHY10uvNYKMcQ==,type:str]
+    SMTP_ACCOUNT_AUTH_EMAIL: ENC[AES256_GCM,data:A9VKryRBOVT2zzz3/deL0u2zGw==,iv:26+2SthOEbJxAnkTR39lq06UPAUvIJZ6w/5QcW2Ge74=,tag:/ilEs2sAMdpylhIohLxJRg==,type:str]
+    SMTP_ACCOUNT_AUTH_PASSWORD: ENC[AES256_GCM,data:lEBNytbBXU7H8IknT7BP9mIDpTfDj0gNnhWt7IKOedk1ONT3sjsSFwJj,iv:LLy/5Wa1uxsPGlTharV0L5bKPyM7TN6aVrpev3VUVec=,tag:hOsmUOps1po8rDLXoPYXAw==,type:str]
+    SMTP_ACCOUNT_AUTH_NAME: ENC[AES256_GCM,data:LapAAI7Ib2qFdz6tZZy3qH/x4Nxm,iv:l6rgMflhOniChuN0nfwQWQfSgPRdgfBsjs+Ncsgvz2o=,tag:hqA0XHm/8UkwSpfp1cIqeQ==,type:str]
+    SMTP_ACCOUNT_GITLAB_EMAIL: ENC[AES256_GCM,data:WPAg9vAgTNOoawTWaykaHZuy9M1F,iv:GJHZh0wt6ixh/GIy4gvhyR0bVgNuLu1esBGmBY7q+VA=,tag:ULDtTtbVYMNYyC7FyLC7HQ==,type:str]
+    SMTP_ACCOUNT_GITLAB_PASSWORD: ENC[AES256_GCM,data:Z+ZsukbUFnLxPvugKRIBxEO3JfTj9bRQt0A3VXBCXTW/wRbuHqB41Bq2,iv:PLiDKEF7EU+fLImHK7pQtIriMb5YI4E8xB1KdHGuB1E=,tag:vg7yIopQQ48YDaXdKb6ylA==,type:str]
+    SMTP_ACCOUNT_GITLAB_NAME: ENC[AES256_GCM,data:rvO3bM4sMSLzu24c0BqQgHP9MNHzIB4=,iv:Io/2uW35VMWBhaTRiR63Gh3BIBCi3yC1i4gJiJNYuoo=,tag:2zwqPIqGeSezAD8PYs21qA==,type:str]
+    SMTP_ACCOUNT_PLAUSIBLE_EMAIL: ENC[AES256_GCM,data:O8abz7V2VMD4l6R7XuSlGQXwvSc5VXk1,iv:7AxuMetDO3cJEQk3NZ7u5FntqWVGJfBkjS69Ve98dOA=,tag:oqmx8+bLmQECOEu8m118Og==,type:str]
+    SMTP_ACCOUNT_PLAUSIBLE_PASSWORD: ENC[AES256_GCM,data:wmYrIMl8c3Eip4iw74I55IevxV7hO2XhnujP1hadsx+chH8HCc9Re8oQ,iv:+fLZmzbylf3XlwUDmXCnIWALe9Ggv4foHiq+o6u1a7Y=,tag:F6odFiHiKPhy1ShKgffWxQ==,type:str]
+    SMTP_ACCOUNT_PLAUSIBLE_NAME: ENC[AES256_GCM,data:KRmSBV+4jodcCZ+yJ+bP+Ii9HDDANwghQkQ=,iv:a/Dvr/NuYnKjQdU02ez19Sseon8o1iUmPGYo8hkgj1Y=,tag:6lhmGeHaPsl0EEbs0Sq5qA==,type:str]
+    SMTP_ACCOUNT_VAULTWARDEN_EMAIL: ENC[AES256_GCM,data:ZIKchPgbH4jh8TkhbwbRhO/C6l8=,iv:5/GWOndM2ctOl3/gr93VIVNM6OhfDbLV4FMAId8UOak=,tag:Hkeu8jNC62vk3oUY49FXNg==,type:str]
+    SMTP_ACCOUNT_VAULTWARDEN_PASSWORD: ENC[AES256_GCM,data:ZQ0o88oixbdrXYzh6O8FejdDf/Fu2c3WylkDLEjrad09OkQSzwpbfuoT,iv:h1Rmf5tKRxxN49ipiAFPYankdLW5y4g5lDnzpeNrW6g=,tag:oIiEH5KlXLSgzwAP9xcRLQ==,type:str]
+    SMTP_ACCOUNT_VAULTWARDEN_NAME: ENC[AES256_GCM,data:9hlnWVge6BwP079amyF4Rl0PoUTA3A==,iv:yRbBzbS3e1Op5YxBQ2/oeb4C7u2XnVYfJ32WKMYCHvw=,tag:IpqLkAhm7CLJUFxSErgo1w==,type:str]
+    SMTP_ACCOUNT_VIKUNJA_EMAIL: ENC[AES256_GCM,data:CdRpg5R2tLrIEsWS++aH3nrGXdo=,iv:k+6PQfyg8unVeVdXa7hneexbpUO3pBscFSLM70i0u+4=,tag:/D3h9z08hbSpB7C56i6rRQ==,type:str]
+    SMTP_ACCOUNT_VIKUNJA_PASSWORD: ENC[AES256_GCM,data:VHek37Ax/WtZCCW9D48UesT3mvnfK98xw1A+VfqDAgMRYMGeRz4fIfMM,iv:dlflZzjadboWNOQ3jdm1/+fI4E3Gik2Hw/jSZFP8GU4=,tag:o/WkgOdQzVafLN9Rsg+e8w==,type:str]
+    SMTP_ACCOUNT_VIKUNJA_NAME: ENC[AES256_GCM,data:+CiWOju6mYArvkUASYmkoOsTolkraQ==,iv:k7H7K7sQD9n1yj/sjS+PHP/iqLObYSlrZEbQpOMhqu8=,tag:BcQ7HymazYjRnG4dBSiVuw==,type:str]
+    #ENC[AES256_GCM,data:c87W56ZYT2txHYk=,iv:LEPVUqogy0hM7gYnNDDJAtpJ4xgVCHukIpckMrAyaPo=,tag:+sFIhqRWU++t0Ms9RqqL9A==,type:comment]
+    CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:KHc8SxxGlO49X9PyJA5mzG6CDqvgq7w18Gqm8ddjBXQVXByGffL6BQ==,iv:92gJjz/RGvV+4qZhOhlGS1AadZYdPYw8OIO/TpYa8zI=,tag:mF5ALIi+tQ5PmeeV/bbbAg==,type:str]
+    CLOUDFLARE_API_TOKEN_METRICS: ENC[AES256_GCM,data:oKIJ4pOnSzLSKqMdyBvDjqOJGntUnImyoHJGaIXfA2/Qa8+D1YcbiQ==,iv:/n4oHp76b+zJmivKENAXad6gKoNh3H1FOjEjxYw/ik8=,tag:xkxhnBxACZqGxKlCy9Hghw==,type:str]
+    CLOUDFLARE_ZONES: ENC[AES256_GCM,data:lyMaNUW/wqLmxmwH9SPt8/z28PepWa7UCoCCMEFDKkURmIAsOh0mB9wgkLklmf9Uw4T38kvmYa74bkrwwW4quzQT1P3dfY1azVzpFP3uV/3eNXFAV/y1d3jSMv3cfZoX2Zz2e5U5po130dJVTYQgXGUNS7Y+H9RYFeDprMhMl5dC+cA=,iv:7p0W7aLyHS/X4a0E3ZIg1fKVRXRSFqJIeHRqrtCiKQM=,tag:BunJuU6S8+DKhQGnGu4e3g==,type:str]
+    #ENC[AES256_GCM,data:hkYJRUlsbg==,iv:qhGsf7SSwbSraYeTlTFa926j9twYxk/bp61RWYrA6sg=,tag:4OA4jsCa1SepPIdAuXF2bA==,type:comment]
+    VELERO_ACCESS_KEY: ENC[AES256_GCM,data:mWlewuUK+tnDEHIfJYp+2rpfQZc9xn3YU2QR/VwBNjhj53GjZToVH3Y3,iv:qDuy6EYZXUflbglz9lSFKr8k1a937QsADcZiLG2yGfM=,tag:RhsR4C6kth/jUMt9UzA4WA==,type:str]
+    VELERO_SECRET_KEY: ENC[AES256_GCM,data:IvNSL/4Kv1rEk5kCPHOPouVZHMJEX65HzouuTJBeZWmE+nuogEfW4qrl,iv:EYuyQVdC3sDO59MGCUUyjxL7mq79uh7kuOD1v90HCTk=,tag:b8D/fnWs53tDMGzFsUaJaA==,type:str]
+    #ENC[AES256_GCM,data:gS1589JsXBWfAld+KQ==,iv:+MQDkDqcDnxMpbbLlju8ret25HI3JEi9k5ui9Oc8zaA=,tag:eS+095afnPwvYyDBRTIIEg==,type:comment]
+    ALERTMANAGER_SLACK_CHANNEL: ENC[AES256_GCM,data:eqRwyyd9AA==,iv:VTzBJyXNA1Aa0+hdCF5EdIuOQmY9WCrDNtpuUJc2Cf0=,tag:R7FOHa+GL1FEKNJReUqEDg==,type:str]
+    ALERTMANAGER_SLACK_USERNAME: ENC[AES256_GCM,data:XSQysnwGJjRfrA==,iv:ftZQDwAX1GGWLl4oDnoA/tP0tlBXDsBzBzZAhujSKYU=,tag:DoT5vvWeeK4oir8WKeAYiQ==,type:str]
+    ALERTMANAGER_SLACK_URL: ENC[AES256_GCM,data:FTDsniIiAYAYatSN6kaZdOw1GuJQg3BbjWXY7QFZXzVNxW/rTl4K5gIVuX+N9miQdVbx2BuUxkA+J7/Jrhj9KuFtumUNjj4IdP7IId3rsA==,iv:r2JGP2snNmQI82Qg+S3lm0Ulmoap32CL4XaRxAH/27g=,tag:unaVbeXsBOkEUfVULCLPpw==,type:str]
+    ALERTMANAGER_DISCORD_URL: ENC[AES256_GCM,data:FZnnrXQv9o51FdmESBHhJwG0JMSRBRHRDicHh1szfq9XqCODeYSHxC7BggYYVtVK+QieIgi1ecox3FW0vdwYlSBcKiwI5o6MKCj7d9GlyFAu2p/JOW1XHTvrdnMt1igE6kqHK3ni/WS2UYbDc9L2Z78YVKC/aUxx0A==,iv:qTw/ycod2c7OETy4GjfbGDoxcfms3l5zzQP22yIKxXk=,tag:m64cd04+3Z8ch8LjizX9+g==,type:str]
+    #ENC[AES256_GCM,data:Z2QjvoiJYM8=,iv:xT1vzqSppLgw0izFyEbWsCwNFJp5QGbQzEBYZ+WGr4s=,tag:eZ4qH+NzS2C0aDrsfu5OxA==,type:comment]
+    GRAFANA_USERNAME: ENC[AES256_GCM,data:2LOaCEuSkF+dwQ==,iv:PTT7421DVNim/Pb8K5dmsQKJOYcab69fQx6eeGt2VhA=,tag:R8ydygIVAp/LY7cGS49pYg==,type:str]
+    GRAFANA_PASSWORD: ENC[AES256_GCM,data:Kwn6y7khTHq6crkODzdGzk5UYNU1MixA/QK88gb2zdvi2PefZJSoEB7v,iv:iwLyjsKNkehepVaaiNHLAT8biplwRCuXbQnNVNru7ts=,tag:W92jLGS2ebALUlwCuPX3VA==,type:str]
+    #ENC[AES256_GCM,data:g64vXXQDNwU=,iv:Ip10PSjGzK09ShLy2H8gLfljq63CykXu4Hwqt+z3JQg=,tag:ScAoftL6v/s0Cce2JJOw4w==,type:comment]
+    HAMMOND_JWT_SECRET: ENC[AES256_GCM,data:BiW74yfx/FFB1EQIWnGzzdiJERtae+yDhYizN5SqyDc8J2cFiKmGdCAhgS8MG+8eNtlGYdZ/7bmArx8q+XHykg7K14eFYK1PC1++mBVa5gon5bnTmT5CWA==,iv:OFpf7lcqgF/41feUgqW5NMJnpu2Dezp49uXg6c+Y/Gs=,tag:e1VFLRBA1lZdNJ8OmFC+3g==,type:str]
+    #ENC[AES256_GCM,data:zh1y3nqFOeZxpv26eA==,iv:Abmf1/hJo6sf5TXRD72BQZtrXFWm1NPeKh5GqKSfYhM=,tag:+/uuT3pWee8xsknwiIiwUg==,type:comment]
+    UNIFI_POLLER_USERNAME: ENC[AES256_GCM,data:uE4c8s4W9Q==,iv:cmM9zXDpXkBqzSSvdUFrrsQq8GX2ODbz639LbG4PpVM=,tag:G8pNhBkc0iP0TcBoErL5+A==,type:str]
+    UNIFI_POLLER_PASSWORD: ENC[AES256_GCM,data:JLDBiq64ytv1lpez3OJxgqxgoXdkTX7z7zeO0FCyu6onFLHjP5zWLduZ,iv:tQRzjrp6/UgRQu+x3x+m3kK3+lSGlpkZu+LlsI66/H0=,tag:BysvfMd+EOiBybOA/MxiOQ==,type:str]
+    #ENC[AES256_GCM,data:yIGC7l6q,iv:V6dNVgZAEZb5tKE5EtEKeGAWBOGb7TUd8AYCo7HY81M=,tag:m2tHDxflWpTiCkcguBJtvA==,type:comment]
+    MINIO_METRICS_TOKEN: ENC[AES256_GCM,data:2h8InvN1sWHF2o3ZBMsS7rGp0e/Xavyz9FQ2g2DcokR78oD+CcLRPKIWx46+JZZOnQT1DO8J1iIlwsvZJPSBAXdY9XIB4XxRSKW2ft//uPQipz/DiIRjs7mgCDs+2MMpu/3c/rUzMURTV3BmywAoDH8Ok8mOLCgXxg0J+BV9+giBpJGtubT1x5NaHN7oG+LB2J7pJNCo1YZtQiI/WWOemKjEjdc1kj/YysumhLNI332nsFQHQQawi/YkATChZ6KZEH/WqlP5Zw==,iv:YodqKCxIJxtwvlJoSni/BoQXiFm8RlEK41GL4RfDDtQ=,tag:2SY6oU5dobWtpPqzUicrig==,type:str]
+    #ENC[AES256_GCM,data:uJTiZiKTwgz6Bg==,iv:5izkw5GpmkfTberotQ/pCmn8LQskcbk80KVUcf8dBog=,tag:gnyDrHIwzlonUT3lcFC5Iw==,type:comment]
+    PAPERLESS_ADMIN_USER: ENC[AES256_GCM,data:liPup0lmX7//ZQ==,iv:Z59QqVtsDayyopLlWPY8HQwhiLvuGQWAkD+evaBMAMs=,tag:hCHLHyBdwKNCgaPLAY3ZYQ==,type:str]
+    PAPERLESS_ADMIN_EMAIL: ENC[AES256_GCM,data:iOoEofgwwiiREsg8nWGlKRhalA==,iv:k8GB9PJd6k1lVohQsSfHAtvKlhAj9Fm5HerZUsifrH4=,tag:3KF8JYXmfsmFsLAa3et7Dg==,type:str]
+    PAPERLESS_ADMIN_PASSWORD: ENC[AES256_GCM,data:ctRIrW376EKGin4q1d7D4pk+1DYQ7nH30w0GFYqOCCr0MsmunBEIGlZD,iv:Hgt9+kWMPwBB+EKksDib9BMYqh5Ekfr9UOQWscKGJ0E=,tag:M0BpLbS/gepI/lFaMdNgtQ==,type:str]
+    PAPERLESS_SECRET_KEY: ENC[AES256_GCM,data:Iz8xGnB7cfsn/z9PFTCdF0MEkMAMYk0Q0K934aDV+dUbdGprx0ySBxc5,iv:zXeMnq2x6TUpKxvZFJ+cks8Su+DNReroUnoGUn0IO6g=,tag:uk05Yk1q3syyb/a/IcOgcg==,type:str]
+    PAPERLESS_IGNORE_DATES: ENC[AES256_GCM,data:oU+js0F5pJdKuJqh/cQHNitW94HPhi4JMfv+T5xvMrA=,iv:OwdOscq/jr+D4yGIkLElrdu+En9hGCdG0x3KcFoMrbs=,tag:XokiLqiNROE+jGrFXCcAow==,type:str]
+    #ENC[AES256_GCM,data:ghN5pHRmhZh0YQ==,iv:pY6QBI3hkOjjH5wTOFIWXxB9AlCcgvofoJRk5M0/6FU=,tag:+zW3wCnKyEmKPzdnKsZWag==,type:comment]
+    PLAUSIBLE_TOKEN: ENC[AES256_GCM,data:IydlxLXrVq6sFRmvM8oPC1kiWakkm0rNLZY4Snq+t3H63tu26As6lV7Vz7CSxaqm8WzLCn4b6GuNkDRbHREZMQ==,iv:nvcRDm6zFi9gYQJJw7IzIVwfoiSALMB98s0iAkltUzo=,tag:m5AxsZ9buCN9qjAGfeBZPg==,type:str]
+    PLAUSIBLE_SITE_IDS: ENC[AES256_GCM,data:YjStE3wLElBq7FfQtBmMI/J+gvQd2QGiDduSEjJ+RQPPBwFjRhD4sNvL3V/M9EooWMelVvNJvl1nx8ZuBZjOdfg=,iv:1LgLRSuoC4gQ7U7kZG0ahBGlya9f2DysjSRnPxrhkfY=,tag:x6SpFahMyKN2ZIm+biZQEA==,type:str]
+    PLAUSIBLE_GEOIP_ACCOUNT_ID: ENC[AES256_GCM,data:yGfdTZtY,iv:cyzI+HpXMXFGi32T9RoIv/EGWvnBOsKxN/ksvv0hTN8=,tag:DirGIT+V0oQyYhS+2tmnJQ==,type:str]
+    PLAUSIBLE_GEOIP_LICENSE_KEY: ENC[AES256_GCM,data:mKQpF8xKIwJ6VrU1OiRxxA==,iv:90gCDyq4nrN/6uIX+EmFbS3xOMIRe8qvENrghI3kulM=,tag:w9VDhlh+1ReLjIanyQFVcQ==,type:str]
+    #ENC[AES256_GCM,data:bqD1c7h7A4JM,iv:VMDol3ZWzgc4FlXWhlNI31hGjDRuPAWHM5QiHh9tiBE=,tag:CnuIrOdqXx4LX8odRpBcxQ==,type:comment]
+    LINKDING_ADMIN_USER: ENC[AES256_GCM,data:IjUBRTQCNk9sRw==,iv:dzPjPOithQTPO6S3rBMTmFNN2Mjd6F7TQnoje9zuMbY=,tag:T4w5SDUGH4bvl2H+SfCdxA==,type:str]
+    LINKDING_ADMIN_PASSWORD: ENC[AES256_GCM,data:1CFcCtimI7W4UPUlS2IrYfFXUyWkW/zWV6Y86bd8HrhPHCkydMz4PKaE,iv:P005CVGLLL2RthC5GS8p156/kjjajNndWAzRtH9PgM4=,tag:HGH9hQdMvqH0O98r4XCdaw==,type:str]
+    #ENC[AES256_GCM,data:gqAmEd0VXQ==,iv:QvWw5HTURvr4vEUhr5eR6DcVMcvxKnOL+GfiCG7d+Fw=,tag:vQZ7B2f7ULEUe8aDeh7zRQ==,type:comment]
+    GITLAB_REGISTRY_EMAIL: ENC[AES256_GCM,data:iS9tvGUzv7VON3T7zmTfKKoSpA==,iv:IcNPv0WmZqE5UKuerAayDhIWhdVTaVu+QOYGkDL5qoE=,tag:uyqcqWnIXy1NAsSZ3p3Zvw==,type:str]
+    GITLAB_REGISTRY_USERNAME: ENC[AES256_GCM,data:1WhgNW3xjxyUbA==,iv:uFDzPAuU6aASC0zTmbpI6eCUBXqvSiwDbvVOUHm+yPg=,tag:ALLzCawnTVmUqFXMJFLfZw==,type:str]
+    GITLAB_REGISTRY_PASSWORD: ENC[AES256_GCM,data:SE7KafO6ttja8PTxZnT/Gs6Ur/Q=,iv:xhzHVyCZpb5F1P3BcdTHB1mwcN7UN1xlV/UUkdNYSe4=,tag:+Yu0yM6hI7KZBe2SYgWznA==,type:str]
+    GITLAB_REGISTRY_AUTH_B64: ENC[AES256_GCM,data:nViyxDo3eesoCzlzrDEkVuxQc1Mk/tEoB2OIt2WUUon68hl8q3R6uJOufrs=,iv:R4F6gHtgL7Z9VpNA81kMUJaQiy552UIbMVsJYWaC9zw=,tag:Vr5Fl7UTQIEcoR2qK+6VVg==,type:str]
+    GITLAB_RUNNER_TOKEN: ENC[AES256_GCM,data:x4J0Lb17xNoMgmfX4ULw+5V2W56ST6Uj+g==,iv:x6rQZenAXF+mni2WC++Y3o3Evt+MCefBrq79cYZeA8w=,tag:PUjQBNQL+rYUSw7s8YHzFg==,type:str]
+    #ENC[AES256_GCM,data:yKbzxPZgAtQJ,iv:W1EzfKXXx/phCMAlIzk/u/aDztV6DetCMNonEGyKA74=,tag:LX4tg8mdUEeHFuLqbIUdSA==,type:comment]
+    FRITZBOX_USERNAME: ENC[AES256_GCM,data:5pc7qySNdOFBJTDBHZM=,iv:1n5saotl0DgDWDDLwtlomtUkTws3x2WluYFjdPsPT2o=,tag:aP9gz0UuLhfAvZRohLtWGg==,type:str]
+    FRITZBOX_PASSWORD: ENC[AES256_GCM,data:By1BcOkbjqOMyDi5LFKbZWHg3XTQMJOzamkkT2EZ89o=,iv:slJ/6EoFOu78OBOWHzokGeAuBQqGo+hUR1At9t3+UWo=,tag:cFB4F/wWgoKYkI6uXzumfA==,type:str]
+    #ENC[AES256_GCM,data:xJMRchD/Yw==,iv:wqdpPgijE7wR7ssX1ISbsA9QLWtSCpy+V3oKHHG9x/o=,tag:NSmeaE/3P6XEDi1pj/DSvw==,type:comment]
+    SENTRY_DSN: ENC[AES256_GCM,data:85uaNPfVxQUgpRt0Of4KFdf7J6/3uVaNfqxK7cGUubh+fgZHcU+BUOSU3EKNM+/1xySMWYb8/gdbIvg+rfyvrGHdl75gPbw=,iv:BKXxlyMMQuG2sv7VkvYhvnBNCyUxqGtszgTpvh7BQa8=,tag:0xTdocVB6ERx8KpCVpx6aQ==,type:str]
+    SENTRY_DSN_LEGACY: ENC[AES256_GCM,data:5EA9IIqRy+vltViC8kUqITj7DjYItpLrzPRGDlalOFTP20M+PYbAqWpbD+K21B1uUzIzKiGoJ+kOighgvDmqQjUS6f0O0PEB8HGpzMDwzFFM2HXLXP66LT2CG26as5EpZfTOdAz+TIw=,iv:U+RqMFkP8O/QivSBQI+p9ynR86a6nvmGmeQkG+5FkSM=,tag:8F7P60ZmYOmBQoNicHWduA==,type:str]
+    #ENC[AES256_GCM,data:q9AZXkPrUlxclA==,iv:GD3NDkueAkrnEqTHFVSnISiMLgeZFEA3E1JUwhuKuUY=,tag:dotmWuSVI5H49R7hKYYfXQ==,type:comment]
+    SEMAPHORE_ADMIN_USER: ENC[AES256_GCM,data:HiZU0lZs/S1ADg==,iv:2pejXvoiHjAX6xzwbu6k4Gwp8fqgqn/pxUIdsgWsjG4=,tag:AR7TsgkoKsxlZHyoV7Wagg==,type:str]
+    SEMAPHORE_ADMIN_NAME: ENC[AES256_GCM,data:RAIZzi2mlB2eVF4=,iv:+AaMkntip+Jh/SbLJ41QQbYytJtBfBfj7PtwXYsP2JM=,tag:BMnSVTmf9cncvmEDLqxaRQ==,type:str]
+    SEMAPHORE_ADMIN_EMAIL: ENC[AES256_GCM,data:LbHd1as/2UVLxFntWpGsqE/eKA==,iv:OAHYgcUk5Xqn/WQCfqDBXyJB8pDWQ3LxgZwgPgDZN4Y=,tag:2mbXYjYYzEjlem7VV9BkEw==,type:str]
+    SEMAPHORE_ADMIN_PASSWORD: ENC[AES256_GCM,data:b9kkCTjTtA3WReS2sXh/+MVmIRitk+o6cOi/4YDgNclfVbiYMADwlKdS,iv:x/z+VykHX7LVWp//9vsK5ckotKwTQ7mc9WNctPC7+K0=,tag:ZKO7qdQMsXhtu16qM8AsqQ==,type:str]
+    #ENC[AES256_GCM,data:GoxC2UKFmEf2PSG2,iv:rIVEJiz3SB8AH+0w+9mZexFiCienGFVqXyrJXWGHcH4=,tag:NkUiF8PD2WxcAQtzcmkWnQ==,type:comment]
+    VAULTWARDEN_ADMIN_TOKEN: ENC[AES256_GCM,data:+i3vd1oxxy9V2E9ogV+HcQ2hWUKdCYlI62wUbpzvprzFLCpUTDilnn8u5xAzEt+rEKIcH8FkbAkpcLYF+1o2T49evMVPxqsFk9wtsiHtYmwfsnMPtmlBmnEACW7uezsmmsv8j5GTLYxC7HaYxRXnX1ThbSpJaw==,iv:DecWIBZX09uyZXXQHvCgp3t19YQqnauwmMHYZo+IB3k=,tag:v2AXBgtSNDR7bTyVKj3yaw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -110,14 +115,14 @@ sops:
         - recipient: age1znmsndwgl8f4wxn5ydl3f0gkcvcz5uqd5zeervevmmsaygwvrfysgx8xpp
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3Q0x6ZTZWbndZWkk0REsz
-            YmgzNFI4bWd1OWZvSDVHMGtzMkhGMUxDSGdZCkZHQlZuRWg0aDE4Vk9pWUdYWkhl
-            WlNwUWJnVDN3SWN0ZzIxMkw1b0dHQUEKLS0tIEl0MzhORy9BS1lSTXBNL2V0VFZo
-            M1NTcjBxeXVUREhoNnd5aWZRSWVwNHMKp1WWFpuJhrKWs0tTT8WWhj5x3TyDEaB2
-            opIkRHwLfCMrodEFFuQAW/anTo91QfHyKjwtlkjWG4/s9GoNLPvkaA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWZjJIdkF3VCtoakhtbXlu
+            TmtLOVBpNDZSUHlzeStkWXlocE42UjBacEVVCnJ0c0REMWFaOWwxZFdZTmVkZkJh
+            TmNmU25NMUlBSTZXUXh6aWs4MFhOOEEKLS0tIGFYMzVEYU5tZjlNUjF0c25XS1Jp
+            VE51T2RiRUU1Y3dINVNlQ28vKzJJT0UK4C8PBK14Oyd4aW/jBlJSGb3+oSTEy81b
+            IzkbQOpud04e8ME9BzGJz8G0oq+ptTE1miTpx0c3Ie2x5/Tnr60POQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-05T05:43:17Z"
-    mac: ENC[AES256_GCM,data:4q2O31w5jxg0ZttfgFxISdc1/JbRRmh0oUQztqeqOX4YPVEoLuxASrT0/P7diBwtNUngbgYe62oc1Gmzippk8z6rmkmrfeMBstS13wLj+fEAW/I9L9O/zfqd0wo4ggnslZgWsSVk19S6oswVezV2TQXOY1LqGIxShiYYZdKk89I=,iv:oGvhNQDlGncoJN9Vm1WapRtuLR+80aU61Up9iQEeKOk=,tag:11Z8RvzfocFH3tJDxv/mvw==,type:str]
+    lastmodified: "2024-11-11T23:22:46Z"
+    mac: ENC[AES256_GCM,data:14F1ZCjSUHKzAGUSzpo6WZMTylNoTMtaPciNWUJO/vB5NQ+xQe4JIVNTXgEql9ng7cujLNvTPnzwRbhiV3XaJZDdrLzMKamnYpZJogZuv/OYD55aximllMg+AXkXHN7rQ135pBAGSqMhl2+M2GTC95W/6h8vw2RGhbeWVZddsbQ=,iv:HhT2GB4odi/wQ+OBeUK3Up2yG+a5OzRzZd0LJ4hwiRI=,tag:tc6U7YxDt24lqwLwo72Afg==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
-    version: 3.8.1
+    version: 3.9.1
diff --git a/cluster/services/README.md b/cluster/services/README.md
index 275af98e4..45939a8c5 100644
--- a/cluster/services/README.md
+++ b/cluster/services/README.md
@@ -15,6 +15,7 @@ The following services are deployed by this section:
 - [`monitoring`](/cluster/services/monitoring/)
 - [`paperless`](/cluster/services/paperless/)
 - [`redis`](/cluster/services/redis/)
+- [`semaphore`](/cluster/services/semaphore/)
 - [`snapdrop`](/cluster/services/snapdrop/)
 - [`traefik`](/cluster/services/traefik/)
 - [`unifi`](/cluster/services/unifi/)
diff --git a/cluster/services/kustomization.yaml b/cluster/services/kustomization.yaml
index 6c4b7126f..5afef3bef 100644
--- a/cluster/services/kustomization.yaml
+++ b/cluster/services/kustomization.yaml
@@ -17,6 +17,7 @@ resources:
   - paperless
   - plausible
   - redis
+  - semaphore
   - snapdrop
   - unbound
   - unifi
diff --git a/cluster/services/semaphore/README.md b/cluster/services/semaphore/README.md
new file mode 100644
index 000000000..6406b41f9
--- /dev/null
+++ b/cluster/services/semaphore/README.md
@@ -0,0 +1,23 @@
+# `semaphore`
+
+## Introduction
+
+tbd
+
+## Created Resources
+
+| Kind                              | Name                |
+| --------------------------------- | ------------------- |
+| [`Namespace`][ref-namespace]      | `semaphore`         |
+| [`HelmRelease`][ref-helm-release] | `semaphore`         |
+| [`Secret`][ref-secret]            | `semaphore-secrets` |
+
+[ref-namespace]: https://kubernetes.io/docs/reference/kubernetes-api/cluster-resources/namespace-v1/
+[ref-helm-release]: https://fluxcd.io/docs/components/helm/helmreleases/
+[ref-secret]: https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1/
+
+## Links
+
+- [Documentation](https://docs.ansible-semaphore.com/)
+- [Helm Chart](https://charts.pascaliske.dev/charts/semaphore/)
+- [GitHub Repository](https://github.com/ansible-semaphore/semaphore)
diff --git a/cluster/services/semaphore/database/cluster.yaml b/cluster/services/semaphore/database/cluster.yaml
new file mode 100644
index 000000000..968a4e1b4
--- /dev/null
+++ b/cluster/services/semaphore/database/cluster.yaml
@@ -0,0 +1,21 @@
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql
+  namespace: semaphore
+spec:
+  instances: 1
+  primaryUpdateStrategy: unsupervised
+  storage:
+    size: 1Gi
+  superuserSecret:
+    name: postgresql-superuser
+  bootstrap:
+    initdb:
+      database: semaphore
+      owner: semaphore
+      secret:
+        name: postgresql-user
+  monitoring:
+    enablePodMonitor: true
diff --git a/cluster/services/semaphore/database/kustomization.yaml b/cluster/services/semaphore/database/kustomization.yaml
new file mode 100644
index 000000000..2856b007b
--- /dev/null
+++ b/cluster/services/semaphore/database/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - cluster.yaml
+  - superuser.sops.yaml
+  - user.sops.yaml
diff --git a/cluster/services/semaphore/database/superuser.sops.yaml b/cluster/services/semaphore/database/superuser.sops.yaml
new file mode 100644
index 000000000..0744a1d41
--- /dev/null
+++ b/cluster/services/semaphore/database/superuser.sops.yaml
@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: postgresql-superuser
+    namespace: semaphore
+type: kubernetes.io/basic-auth
+stringData:
+    username: ENC[AES256_GCM,data:1nAKwhBYtTo=,iv:HLbAZi/qC46m1QI1AyF+YW0OOpH9fFEO2QGG58wfIb4=,tag:SPc1K7U7Wakxu1E+zbFZrw==,type:str]
+    password: ENC[AES256_GCM,data:Uop1RSjtbk24eFL0ZRD3+qq3Uho32Ih5WVPzB/T/IjeIGKHKK94jPMiL,iv:rKX1AYD6braHxeirbUUFqTyGpeV/UxROIQio0O8BUt0=,tag:7gtWvOXscawyaSOb9WKxHA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1znmsndwgl8f4wxn5ydl3f0gkcvcz5uqd5zeervevmmsaygwvrfysgx8xpp
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWbm5NeU44dkFPMERsQUxB
+            Rmd4WVdvYTJMeEVHL3BPRTNTSUVNNmRKY0RFClpLOWszQW1tSkgrTTVKSHFuTGtY
+            TUNtMm4xeVFDWFMwa3dLY2NjdjY2Mm8KLS0tIE9XSzl4Y3dlaHJiSHVCWFFQMVJD
+            MFRFOTUwZDlueG4zMVNUdHA0YjBGcEUKlF5J0me7Djyf2vHRwWQGy+BiVQvV4khb
+            c1xBwCSmjEoHRpZC493pQeIV20wFHfy+kS4iTwmgGiqsG+0O7xptLg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-15T04:33:40Z"
+    mac: ENC[AES256_GCM,data:OE2K8zBAgc3gHY7vk3DOGHa80AFWDonIlH6wz1oVrC579AIJU5ZBfDWC84eqQQAFyyvU6y63WIizIaPWpemliRV64E4fInF4FFzkG5DH9dOoMGpeYfq2qjZh2QFwBw0jj9t4/CggvpiINdNaMxtoW3PUaNvwHwzl+fxMItATP10=,iv:0LFFA7F8c1bdlGWzxETtQQsZJhnipmUkh1nKr3lKcQI=,tag:NIYS7/1ZFurCh/XjpD5rLw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/cluster/services/semaphore/database/user.sops.yaml b/cluster/services/semaphore/database/user.sops.yaml
new file mode 100644
index 000000000..adf4d663f
--- /dev/null
+++ b/cluster/services/semaphore/database/user.sops.yaml
@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: postgresql-user
+    namespace: semaphore
+type: kubernetes.io/basic-auth
+stringData:
+    username: ENC[AES256_GCM,data:0Nx7MiuScibi,iv:ZT5CqQ7Ths5e3C/SutG6UDMcXkq+QF0BlNX8WccPOR4=,tag:2jQN5klbYWhss3j81NEu6g==,type:str]
+    password: ENC[AES256_GCM,data:u7HHcormofnK+4j/p/hv1NrGcuOrlQLz+025fZisWM5k46nneEa/sFMQ,iv:FCAygS8BEojATJcnPrzYYqDpunjzg9MCOJJW+8siMKQ=,tag:SLU0HilZjDFVgSmcDAaaHg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1znmsndwgl8f4wxn5ydl3f0gkcvcz5uqd5zeervevmmsaygwvrfysgx8xpp
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzWmdVaEQ2Y0NIK2J3R1Uy
+            UmZFOGFvekpBeTlKemcxUjVNQjlldVBVZUZNCnZ3U2NWMDdmT0Z3VG5BdzByREFi
+            RkczTlVxcyt3STJnZUNWZER3bzEvaGsKLS0tIHdueDlSUmJKREhPdWZxZ1k4ZWs2
+            emFiMjE5L3ByMGc1cFUwMkJGY0djZUEKXV+zDMQVAeCvmgOahxjCKHO1R6eqT/rM
+            uX8pxotFSAEsmEcZ9uc0ndyUE7RFH3YKcCBs9RHb6FcO8VikcGMMlQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-15T04:34:30Z"
+    mac: ENC[AES256_GCM,data:JMD+RQI1bA2eP/tQ1PgTFVhFUIbnYVBKu/uKsFfPj977B0TO4ave2ci9oatD1PV/8/p20MLfkRymWdi7WVhNOfWB2hvZjfZKyF9PZtoacVuYrxk/TnypwuVeKq8EOGYy8vSu6gtKEHIcpLysCGQlm/ykn3rCKp/qXgcBD5FgBCk=,iv:oHcvvm1vDiB9F3UvFIgYzgVlv2BU8kz/bOeAsfLBAqA=,tag:fR69q0SMrZGdiNAbvTK6vw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/cluster/services/semaphore/helm-release.yaml b/cluster/services/semaphore/helm-release.yaml
new file mode 100644
index 000000000..08914057b
--- /dev/null
+++ b/cluster/services/semaphore/helm-release.yaml
@@ -0,0 +1,60 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: semaphore
+  namespace: semaphore
+spec:
+  chart:
+    spec:
+      chart: semaphore
+      version: '0.0.1'
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: pascaliske
+        namespace: flux-system
+  install:
+    createNamespace: true
+  values:
+    image:
+      repository: semaphoreui/semaphore
+      tag: 'v2.10.35'
+    env:
+      - name: TZ
+        value: ${TIMEZONE}
+      - name: SEMAPHORE_DB_DIALECT
+        value: postgres
+      - name: SEMAPHORE_DB_HOST
+        value: postgresql-rw
+      - name: SEMAPHORE_DB_PORT
+        value: '5432'
+      - name: SEMAPHORE_DB_USER
+        valueFrom:
+          secretKeyRef:
+            name: postgresql-user
+            key: username
+      - name: SEMAPHORE_DB_PASS
+        valueFrom:
+          secretKeyRef:
+            name: postgresql-user
+            key: password
+      - name: SEMAPHORE_DB
+        value: semaphore
+      - name: SEMAPHORE_DB_OPTIONS
+        value: '{ "sslmode": "disable" }'
+      - name: SEMAPHORE_ADMIN
+        value: ${SEMAPHORE_ADMIN_USER}
+      - name: SEMAPHORE_ADMIN_NAME
+        value: ${SEMAPHORE_ADMIN_NAME}
+      - name: SEMAPHORE_ADMIN_EMAIL
+        value: ${SEMAPHORE_ADMIN_EMAIL}
+      - name: SEMAPHORE_ADMIN_PASSWORD
+        value: ${SEMAPHORE_ADMIN_PASSWORD}
+      - name: SEMAPHORE_ACCESS_KEY_ENCRYPTION
+        valueFrom:
+          secretKeyRef:
+            name: semaphore-secrets
+            key: SEMAPHORE_ACCESS_KEY_ENCRYPTION
+  interval: 10m0s
+
diff --git a/cluster/services/semaphore/kustomization.yaml b/cluster/services/semaphore/kustomization.yaml
new file mode 100644
index 000000000..d563e7e97
--- /dev/null
+++ b/cluster/services/semaphore/kustomization.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - database
+  - namespace.yaml
+  - secret.sops.yaml
+  - helm-release.yaml
diff --git a/cluster/services/semaphore/namespace.yaml b/cluster/services/semaphore/namespace.yaml
new file mode 100644
index 000000000..52e6689b5
--- /dev/null
+++ b/cluster/services/semaphore/namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: semaphore
diff --git a/cluster/services/semaphore/secret.sops.yaml b/cluster/services/semaphore/secret.sops.yaml
new file mode 100644
index 000000000..a934c967e
--- /dev/null
+++ b/cluster/services/semaphore/secret.sops.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: semaphore-secrets
+    namespace: semaphore
+type: Opaque
+stringData:
+    SEMAPHORE_ACCESS_KEY_ENCRYPTION: ENC[AES256_GCM,data:Fta5564cl1XO71fKuzoTA4UcWEFgzmMsA6NHFr/3f4sJRzqkEcX2r+mffj4=,iv:s8Amdj9jY2CQ+nAc8TwYPt/aVa1tUAdkw5bE6UAR7Ro=,tag:DpI8VJ2zmakl6Fqzf4nEHQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1znmsndwgl8f4wxn5ydl3f0gkcvcz5uqd5zeervevmmsaygwvrfysgx8xpp
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Y3NhOUMzUDZpZk56TEtv
+            cTNaWXVFVDUvdExUZUhUR1cveEtKTzhsb0VvCmRNQmxsT050djJPWlVGSjI2Unpt
+            NmZMSktoUFdxVXFZTEVNTmhKSmJVaGcKLS0tIHlWZVVMV1daRnRQczRMUFZNRmQv
+            U2Z1YkxNSVFKbS80OTcwZFVyMURBSkUK6LOuTnE+X+EatFQ3hiCMPbJJCWTsL0qf
+            xS59yJUlVpaVw8k5MU63BEHXogOwwcqB/Yc1IB89ytKtoWq+OVC/yg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-15T04:44:07Z"
+    mac: ENC[AES256_GCM,data:9ij0YWrR/rnnmythg/A6ZZE/sYJV4ovaJ25t5WUesAw2hFQB37J/fft5mqmZ1J3r9iL5L9Yy0JFO3qNI+u35AJDFSKLWGiKqPJJ5f70rwtMUxsGDSETsVA3ssftB1kT4GnDMo2T17xtE9SosFP+I8sSlfDZTyZmPv328sT2AR8s=,iv:The5ohxw+56w0L27ZQE9zJpxZRE+QxRiTmqvRp6+JIc=,tag:G00r2x0PvV7PbB4ZQPhPWQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/mkdocs.yml b/mkdocs.yml
index 93af4b460..e54c5bd9e 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -99,6 +99,7 @@ nav:
           - paperless: cluster/services/paperless/index.md
           - plausible: cluster/services/plausible/index.md
           - redis: cluster/services/redis/index.md
+          - semaphore: cluster/services/semaphore/index.md
           - snapdrop: cluster/services/snapdrop/index.md
           - unbound: cluster/services/unbound/index.md
           - unifi: cluster/services/unifi/index.md