separate keys per app

clusters/base/apps/authelia/secret.enc.yaml

@@ -8,14 +8,14 @@ stringData:
     users_database.yml: ENC[AES256_GCM,data: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,iv:0hzOhnHbAQMTa/4ar++tfFpderZGkTtMVTDu4pHbOgU=,tag:8KC2KhYMoS2UNzlSle1Cqw==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age1ncw6uagcgncd5m2admqxt73ey0mcd99jsw9sa9lcdv3gu70mcerql8ya0k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NG4vTEhyeDIxd0M4UE53
-            Q0xIdzY3aVVmaE9HYlRwODJ3aHI1OXZMV1VnCjdFdkdibVkzR1JGOVBITmVGbFdo
-            RVpqTDlrc0tTYkdjUXE0Zk9KckxwUzgKLS0tIC9oOHJTbG1iMzJjZlRaUDlnc0tv
-            ZldqTGtiWFFKRGRZRnJkVitCTDBuK2sK/Jnc/sA77mZxWMpHLh6CSvgFICZIjTQu
-            /3ipR7IVtYYVXDJj9g0pGuGMsBeuHYlZG/7hJHKyTj/aDYlibbPUKw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydWxoMG45a2RyanVNa2Ny
+            Zy8wRkcxSDd5K0RHckQyUzBmeWhWd1piZVFNCkQ0ekQxNjU5MUxtaGF2Wk1QdUJW
+            bzZza0RjVXhIZVBySkptOVJ6VFFQMGcKLS0tIEp4Mm83Yk5hUTY1U3A4VWh0YXR2
+            QlNCT0ZMWkwzWkUxdHY1Wmx4OHlPQmsKveUBGibc7hfoIEribfzYXfYiWOUNo+WO
+            2OuIbrM/YJlSFUtG6zVSJRkII22V7QOk302HvC/X+65jK5KJyDo+jg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-08-01T16:28:12Z"
     mac: ENC[AES256_GCM,data:E3w5jKZOu+Ab/NRfF2Frr4op7rdqAXsFTW1hrDe8CCpusMbP9PDllUqeWr/nrsgAAIydNW+N75ye1uBkW+E4scCF5uzqwRIDbOjcpiRAcZ9fMdNL2M72+SFIVirexxvC9PK45Kn9T4K2aYrCS1D7eFMIO2TCy3XL5W0tfqbuBis=,iv:/iLJtY3pzLa+AkgM9niSFYz1v29wFqbSe3h0dPto430=,tag:ChCgvHRKoTBEysuYHHgMaw==,type:str]

clusters/base/apps/davical/secret.enc.yaml

@@ -9,14 +9,14 @@ stringData:
     ADMINDAVICALPASS: ENC[AES256_GCM,data:1Zq7duPTIfJX2Stp6AEhKcLHkmQB6vWf4y1f0Iju/zI=,iv:PMOyD3O7UzVPRlFmHTOQSAys032iD4CF8JbI51agWcg=,tag:eDgMbg2lRMnl57NCf5iIkw==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaRzBGb2RmQ2tGOVhVNjA3
-            ZzB5NEptK05Vc2p0UXZqb2pTZllxSmxmTGtJCldZcGc3QXcwU3krc0pUT1NWT3Mx
-            bEtlOVFFd0phYlRnSlEvU3hOYTdSNXMKLS0tIGwzTGpIbENyZDFueW9LV2NJWUk5
-            TGRZTTdjT0tSR1dFZFZmRElScmNoU0UKo6Uiuqjhlmis2F+aznlqVRSJiJd5dyQ+
-            GBw+o6V8YgbjdTStCABDkLylWNJaTz7ES0eud+rFA7ihRau/CwTYpA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNTVJZEFuRFhGazF6T1Yv
+            dnhhTHVUb1h4SEN2eEtDUGREUERkR2wrTUVVCktGSkVLZmlYR3BjekhjNmk4L3Q4
+            UEJsQXJjZXY1VlNDaFV2eER4NTdwRGcKLS0tIDJxb1AyYm01YlNUVk93Tm1Hb0xK
+            NVh0K25yOFUya0dYSGt2SGdJQURnQ2sKaKgwThB5ePeM091/zYgQXmiPeBeIhTdo
+            60PkAPNs659xyVqnlZw2YKEhxbEHS3ZMTBgC4tgng0yjClBizcTv5w==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-08-08T16:37:01Z"
     mac: ENC[AES256_GCM,data:OoE6fml/3DSH2EMafCoeYz/JHo89Fb9uwQ58k7hxQDU6YMazdO/eGM0jKX5ghjuMKJqA/zQs4FeZ4yASkIUT1CBbxRpycmE9qo6Zny121NLeqveBp3YMjmUZGt3tgw2dNqtkhpOnl/BmHQCtTTvX2brtSVmANx3LbFxjqbK2OGM=,iv:8Us7LJSZ2aHZQnYIjnsvkR7Av0KeHFEYEETZd7WZX4Q=,tag:7NbbEOq1k2c5IcsnqpvlOQ==,type:str]

clusters/base/apps/immich/secret.enc.yaml

@@ -7,14 +7,14 @@ stringData:
     DB_PASSWORD: ENC[AES256_GCM,data:+bJ/+NEQCT3ZEqjnkzep4OsbLkJ9gyLZmGxCpoww2Wo=,iv:n1sLYgLl3zNZBdjMBhIrbSv/qHJFQ/nvZfBknFAUdug=,tag:DFnoc5K6XvHngVIrgJlM6Q==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNVpqUGJFMVhoMXdwa0FC
-            d20yRWpjVHd4UFJWOTNNUWViNUNuWmFncVcwCi9nRGhUY1JYMXhTa05MaVQ2a0Q1
-            L0E2TTZDN25MUGdQM3ViT2JlVHNtc3MKLS0tIFRsMDVzTEdxUjNtMW1zaVpJZXlR
-            bVl6UXlLU0NRK2txOFpYTUJIQjJhVXcKLUeTuGJZZtC5zY2I8QjLS8G2zcjneUz8
-            klo8dqrnrJBwmUPLV20f9GVPYUsbKYuj+kca30vqUE9jhXitP7uKjg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtd1hFZy82d0c0RXZMd28r
+            dWs1VWNlVG9tTE5WZDVLdGpFSXhuVXQ5anprCk5LWWMrWUVCd1N4Y1JENnRyWExC
+            d2VRNDJON2RzSHRyMGhRdmMva1NNY3cKLS0tIDNML2Q0YXFRMEs3V3prUkZYSS85
+            MWRGa3duNHgvbjNvVnZLOXpYMW1mbGcKaN7h3W0YKsRjnyk6P9+bziDy6If5xLQ8
+            kxFJf4CX9XU5jgYXqw2UNqRDusphclqfULUMRaEzMJkkPhd1cZ9PvQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-08-21T12:23:20Z"
     mac: ENC[AES256_GCM,data:vGSUhl73AIQr1Ld1SHc+i4GpvOc0b0j8Vx9DmoRDjNs17TQSfmfulEZwIua12P5DHIz36P9yqggHfSyyrrEoMjfaUSTIDxCIGGvsfTl4vBt9Vis0e2gALaHtAgWZwxr5QMe+OP1tkXOZoX9E8VcoBq1ULvbIjqsPs2uxPVKsEWk=,iv:1exDUqurlFdBt1eZYWWMlkar75HbTLZ6RZelC0RsYcU=,tag:A0IhJHjVum2HBT5RwHo5qg==,type:str]

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -9,14 +9,14 @@ stringData:
     OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:63S/0TsEis959MJRLd5atPXQrv5pNMC5iyMHJvT67luLLPkd2bdgfmX4Pu7R3Hr5YIGoujn1/xCuOdZH0RtIog==,iv:3Gi2ZukSzU9SIy7fPzmlvWbA4ykaNgta95DuviHf5zk=,tag:BPUXUPMIxW9kbyyQqoz0gQ==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxaG5NRStTVXlIMklDSjI4
-            cUJxOGxuSWxrM2FQQWhkUjZsUEtXT1BzTmpFCkdnWHFUQlRGdGtjRWUrcUFUT05R
-            SDcxWi9SOTlIT2RCL0c1ZExuUXp5NDgKLS0tIG9EVi9WMW81bzd2REpzc1ZFK1JE
-            cTVIVVdTSkt4MXRYNHlDZVMrQkpBNUkK9uaUyjPZaFyWbxrZpEVgzOSw+1pWX/rF
-            tu0eoMSzf0w9l/zSiBAAQeCd1jnLp1LDw4eZKiYZ9DF5P0AclVT4Lg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOVJCaXpjeUEzWkN4SEdz
+            RnFkZmtXa0IwaE9xdGtBdVRwV1B5MkdDbVMwCmVYeUJpQmQwZ29BbnRPK1AzWGJx
+            NHV0NnRxenRWV2M4MytrZ3llNmxaMzQKLS0tIHVOcDVyTDkrNHJRMkhRVzFPSGpW
+            V1RRNTdiUTBjSWZlMlEvRXF3OUowZ00KXf/+ucgZuDAczE1WlEW7D2/cR+sB66BQ
+            7JC42VJiyEf2djlODmvK26bDTeiJ/Uk9HsSuvamGUM8b8vAj2w/r/A==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-07-27T06:42:40Z"
     mac: ENC[AES256_GCM,data:XRxbyHL4iJMoRMb4X6C2y1ChTNSkqou01bwtIb6zNfwcGCt7uMGbm1HxvmjbdeJI/zQIIVfgxbbTxhZw+sL2FF+PYAjPcaGvaJ86O97lr9fUB30NC0tMluW82pt2iiisK+6dEEPH9i/kGFrJHN6RlaYVkEfv6U8xjlpIcaNx0+A=,iv:YnqMRlHl1WVYNqqN9hRH88hgIALrfgv6WrJGyeNDstI=,tag:M1DYFr3G9ub/R2kNF8ZnNQ==,type:str]

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -7,16 +7,16 @@ stringData:
     passwd: ENC[AES256_GCM,data:YpTczjZ73h4Td+TmEZIgil9DN7WfVwBsi75F/t3D1oWGjGsifklnRsZUJqXiXyUwIxTxlFiWgfb01LjmILE0nB9rxoEbFdrASaLgtnCoYz/fvSZLqwCK+FSSub3+r0nJTNvxzD+bC/av8JEPNDW/8CSrHMrTrVCcLhAchOAvviRLgO18862XWcvPh1plO8luaZG38cuh+VbKKwidkwozc6B7Ghys5NfZuB1rP4vLZ6/f1PzcFRugtJ0fzzl/BA==,iv:9FKm4V/lYXott/6aVBKg4g8GtzVqgT/xndj0CKqMm+Y=,tag:41gCVbrK6Rp2IvVUt98Hpw==,type:str]
 sops:
     age:
-        - enc: |
+        - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZ0xBSDQrY01xRDhwbkJp
-            STd0SG9MSFF2eURhVGtOS0ZyNmNrV1VqNW5vCm9kTDZWSDU1NkpoWitPNW4yY1Zj
-            M01yYkRGYkxLaGpIOG45ZG9Vb3VIeGMKLS0tIFA2L0FseTZNUERuTXRXcEI1bkhv
-            UGZha2lMZDZDbHhZdEdPYnNiTUJVNmsKRXTg0i7XdYVSZWrFww3SzJOYsU/4ZXoW
-            Xs1vTTO5DP5qIfLbAQUGr/jg7uu6Wm4zFCOZIURqXxU2Ws/W/3J3Wg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobk1BQW0yemEzV1FQM2ZJ
+            YkZJbjJPZlRiSDlyamx1WVdyNTJBNXo1YlQwCnhBT01SeE0rZDVOcFRkZm9KQ0t2
+            dUIyOHpzenVZc3lsa2hmMjF3LzRGMFUKLS0tIENmM05Ud2xGblNpdjZjWWFPeWg3
+            UEtuZWZ5enkwSGk0MXR1czBibzQ1M2sKfp+76C0X2DgsffWZVtBevI4lCs8RM09p
+            tzsrneX4iIX6WCn1kRLsWTZpN6Vg8Wsl6kUWnSA3WfHWI9W4CJdrag==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
-    encrypted_regex: ^(data|stringData)$
     lastmodified: "2026-07-21T19:09:49Z"
     mac: ENC[AES256_GCM,data:qecTVUaC/3j/oP1DVnXEKV9Ub+k5gvGHfteol4W5I3gq8IB2YYZ+vfuinPVJJeSsN5HvK62ftnIgRNu0dtzDOrnuZENczEMwPrOz90RCUbX7WBeKh23KZ8gSSw2MBn6gsDsz1gXFWENIyjQTJFZ4qAJY6jfeH2IFC9RkpoU3j14=,iv:ksLG/aHHBAkl6aA52Xufs2vijZlpsaXccoxheYV3Gm4=,tag:4YiaPGMBWSWhVBO1tNF6vQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
     version: 3.13.2

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -8,16 +8,16 @@ stringData:
     ADMIN_TOKEN: ENC[AES256_GCM,data:pYY8Nc2PevrFGU2pbZaFH7O+WNJzOHSEXMM3TAFYHO46/GGzQjrxYbc9IY/8PgY86N73kQAFLvw2bpVnjiliilLpnxm9Z0LyYDlAhui8545J67IqoQFDyZt5o3NHceWRP2eCxEL4Bf9gD6j4YfObRVYrp38x2Q==,iv:IvzPkKi/w/S8ueYl/m8kckWiddfl1oQKYiT8S77IVAA=,tag:rD5RsmPt4uihMHWSt4gGwA==,type:str]
 sops:
     age:
-        - enc: |
+        - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLNlBSZlBhSkZzc1ZFM0tW
-            NjVQeEpleldyZVRVWVlCeWdsbUZCWnRoSnlZCjYxME5DeERvbFByK0pZS0dqTTlU
-            YnJqWFovajVJN1hzRG9ldE9tZ0xJQlkKLS0tIEJPTFNicDFtemY4LzRGUDdBSkY4
-            MTNjaGJGOEE2YUFXa0EzaE1peTNSOVkKf2rsKzwoJmgKPpbMjJxp1AzI2Iwr5YhP
-            wXWFND5VaLTbUgERUrjByPN2Lfoz4LZRWzV3Ws9U2Vrwj9fOs7tFWA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6RVkzM041NFZDMzlYRllw
+            a3BRS0JGZ1B0UGYyaTRLUkp2UTJ1S1pybDFnCnZhVWNYMFRlSXlFVTMvRXlpdlF3
+            Vk1xT1pKV1hzSUYwQXd4ZG92cnhDY0UKLS0tIEtLWXZiZUFDeGhFdytKbTJHSjRH
+            YkJhS2FJOTdLbHlRelBpUWRNUTdTMDQKhgb66tV4L0PKkPY8DvbypTpcBlavUvRH
+            0+Rz/UxfZpX8u8G9GeqF5glIpNG2x28VSOHchJxhvMKHIUq9ZUrHGw==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
-    encrypted_regex: ^(data|stringData)$
     lastmodified: "2026-07-18T19:13:05Z"
     mac: ENC[AES256_GCM,data:Ufdytxb9uH6JVXsWu39YhE1AfD/oG7bXhIwoTXYhYBE4IWvugrwZLCvBrgkfuazVXyKBuDIuEa5Vj/bzlTGDSlRNx7SDqabvilhmYAsBcuU5DAVU47pDz1YnXeHd9TuQI1dHAc1Q3uvkZwWNxh2YYXKZGwNMy3tOAkaOxwI1rMw=,iv:iUZenTP/9JhmjcR4p5+RM5K2YuXBLnRj0cd/RHseqFY=,tag:pesF8Pp8vBoQXcniwrep9g==,type:str]
+    encrypted_regex: ^(data|stringData)$
     version: 3.13.2

clusters/base/apps/webdav/secret.enc.yaml

@@ -8,14 +8,14 @@ stringData:
     WEBDAV_PASSWORD: ENC[AES256_GCM,data:Rh1ryftcmxgJAHvC/N1o5QeagCvyb3XIpDS7jOTCpJm3Wb5rUcLNmtcW22f0xljw,iv:GmgQJEuzUzSEql+fx5KURKv8CnhXF/z5UlmEn4ta+K0=,tag:AZD1CEbVRm6DiBt66pB9Vg==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMSHg0S0dSTC8yNUpPUk9L
-            blNobStHNCt1VzRWWnJRMVFSSHRuNEdRZjJVCjhwKzdpYTRVWEF4NlE2RVRKTllX
-            YjFRL1RZeUxuQWdrWVZQVkZLSE5rYlUKLS0tIEN3WHV5MTJiOXFsbXpVSkJiZk1m
-            MDRObmNYb0dDT3NQNEZMKytrRENrTm8KbtGEFVOOhofeDtcP3+ST3qtxysuVWzTb
-            s/z73tRmakfXnPT9qgBTq+6YcZS+kpgAp7L5krQX9SrsPISAYczdtg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UkRLNWVyZUpLREtZcm8r
+            V0VPTkZDN1pSWDNxWFZXOUlON1c3cHhSZFVzClpEMmhvQnlFMnF6aXV6MjJnMnBu
+            c2pxTDBGZVBUYjZNR1doQ3UraDQ3dlEKLS0tIE42dTZWMUhZdnVMYUNLTGdrSWZC
+            UFM0V08reGVmZTRMUWw5T1R2OUdGWW8KWAZq4TG36Njlw4//vPCxzM1Qqr/6Ievw
+            taBvLXpw9wkrjfZJ8gBU+0Q8WrsEy+tYtR9chfz1n/SmiGHCkskFGQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-07-29T18:57:24Z"
     mac: ENC[AES256_GCM,data:bW2QvjSbA4JmfmZFzC1oIfEnVBxf1pE4jtKDsp2sf7mozVEdqMTD2nNpq4Pro9zRiXQfzxQAXAyzT48dBhIunXKDNIS7vbPpLUbs0nwSF4Dgp/q02ZX3Vrewx80iz5wdMYvLk6c2viZ9ndMwRqBbdBBsuSa5O9nIVj1edG9tj70=,iv:8bgXaA9RiQtbd1Xaht5r5NB3lFedX7Wi/X4z10VLLuA=,tag:Qnr8Ij6XN/FMcQf9Kx1IvA==,type:str]

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -7,16 +7,16 @@ stringData:
     secret.yaml: ENC[AES256_GCM,data:mDb7Vt4sOSaqn9+T3QEAR0yutRIFwiYpBBZDMQI4FMvAPWPkAdsYTIfvv+41JbpBafklDJ5gzPPKZJ6Qk1f8KBvjRuHP/bJqTUPrv+Q46ZKsuXECQq+qB8TKAj51FiJssyx0jYy9bCYgn+Z9r+WBT4YSAvv1XS/UHs4S8UA=,iv:8RHjs0g1ee38yUSHjvQv06Z7xbzMOG6LNzCJ/7s4+Pc=,tag:jb+VgAVApqIpN3lERqrfBg==,type:str]
 sops:
     age:
-        - enc: |
+        - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRTdJVkpZRmRseTRvQlB6
-            UmZiV1ZZYk1rOWo0cXZ5ZWJIQkZJY0xJc0g4CnJYVGRqanVuTlFPN2ltVExRK0JN
-            SnVVQm50bDVidkVqTjlocHNoYmQ2bHcKLS0tIE4vNngvQTNqdzQwbVdwVDFNRUhK
-            bjJVaDFVbkdlRm5mQjZoU3c4VWZqa00K5iO6dClHE2sFi2brd8xVuC1hfH/v0bpM
-            NK2GgJDcb/mcTFpA62/iHfuNPDYp/FpaNIrqh9LB0i9fxA+61AJZpA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzcUFqU2RpTXUwR3hsSEJr
+            WUV1NkpqQitDRDF6MUpWMWlnSS9TaStRZ1hNClNkSEIzOVVSTUh6LzdXdTdld3Zj
+            U1pVcE5IaFhuQ0lTZlZ0RzFDSHVkREUKLS0tIDdTbEJLbE9KUmxRei9lVlc4TW1t
+            TE0yUERpQkpqZFg3aGpvSkg4M04zMGcKcYmSgyzhpZ8BGAp+0zkQ7+ZnF2w/Nk9D
+            ZT8zwqCJcaRldg59JzmhLBfiuYAtnH2wqWj06LiIfvt+P3pgY79f3g==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
-    encrypted_regex: ^(data|stringData)$
     lastmodified: "2026-07-19T09:01:11Z"
     mac: ENC[AES256_GCM,data:fKfDsAg1Ya8c//x0xw9ytQR7hiF/BssuqlwA57PYiB1yjCW3Kddcdt95UF1amF+9tvJb2XwRjb2LwN4RrYj0RyScLmLa3u/l1r79EoUKQWQ4qF7GNdD5ZGaxqnWjgorxkfYcU7ahJBRDEIsvJXJivk6Wjm309ISzl8xR/tUpFCM=,iv:TmFo1gbRsATh6O0uJvJxwyj7hSzCfpPPuo55EkQQabk=,tag:CJ0cTn9BJs+87AvdwJ0MsA==,type:str]
+    encrypted_regex: ^(data|stringData)$
     version: 3.13.2

clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml

@@ -9,14 +9,14 @@ stringData:
     AWS_ENDPOINTS: ENC[AES256_GCM,data:HWVPThBb5GLpiRqAuSLvmAat0XiUu5R5CMv2Fv6jdieZ11lUmbS2MBD6lx0vQDSIzC36hd6Tu0hgqtknQA==,iv:XLqWSNHgj8O0uQPeBbnN05Za8G9VW6F802CCPoUoq9A=,tag:dsKXCq21hDlJy4KTyQTp/w==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NlhEbXd2dnp6YU8yK2lY
-            QUkvL2p3dTBMTmRnQmM2UjVqaGx4S05iSTI4CjZtZWxDTERWcVVicFlqdWliRmw0
-            eW5zS3lPQmlkRmk3WWNyL01vbjZHUVUKLS0tIHFGUDB3d3FtNmYrQkJ6MzgxYmhU
-            NHEwQytweXloazA5azNPR0ExTE03b3MKPHTMF/rbABGc/hlKI76naGTSQipoegT7
-            mWPHHDtSCCqsKZNXLSs6B7+mLUVLp7AjdCUjD0Me2wo4RdphEDMzHw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRndobTFybElvakN3c013
+            T3d6ekVUM0V4OVNEMjl1ak5XTzNPS0xKRmtVCjBXMjVybEs0bFZKN3ByWmFpWm9K
+            TVVLVVBPYmE2NnJMT3Q3dVJRa250aXcKLS0tIEVKeXBGQ0x4ZDlIWENMa3k3S3Zz
+            YUdxZXoycXBPbm5raWxFZ3owc2xkQmsKNzw+5kn73FZhApzfN/RBj4yAd7GLl5/X
+            wyXVy0te83ZDeVQvqhXLkUPsbF8CYewC6xibZSdSY/WBh2ojedJXrQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-08-11T19:04:53Z"
     mac: ENC[AES256_GCM,data:SO2tMq3UA0JcsTZyH3oNhmCsWZ2OhxEmJSn1b/3sH78cZvWalXUsdQqD1GBArFgS+oCSaSgarl2Ve06iNJtM8k6oq0fDkm0dxsLou+67qHlle4CbkP1KPFEQid2Nx8o/5b6cjI2zHz3bYmQTQh9DD7mE8roqo6lX3rYY35MpPJw=,iv:Ad13teWF+lZfzOY/PIALI3/Wohn/0BBoSuE0mtiH8/Y=,tag:sQVQfH0mFFMLnF4zbRC2VQ==,type:str]

clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml

@@ -12,14 +12,14 @@ stringData:
     PROXY_SECRET_KEY: ENC[AES256_GCM,data:iU6GHL09tzxgyxcl6wKlDNhaO6YVYS/8yy/qCPbSxE3RlHk0Yw9EnQ==,iv:i0R6SzOJlEDsyEhxLrLMVaJu7ZAzNsnnmdyrxbv6ys0=,tag:h290ZIcFevBQeImcfqQbjg==,type:str]
 sops:
     age:
-        - recipient: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+        - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwaXFldzZyOFVoeVo5eFlh
-            ZkljaHBxdXNhTHhtaUVrZWJDci9nZDR4VlRRCmZTVjVuMWM3dFJTSE9SUzV2V2pj
-            aE1ESENVNWFjZ3l3dmU3T21RZE13cFUKLS0tIDZMZ3BXVWpCbWQwOUFkNk1tU2VU
-            bmlWVURHM3o1NmVvUVZMRi9XMFQ4bUEKQFFAWDVvh1b5kQVsGb/RP6lIKH168G5i
-            M0XRs5dvwg3bcb0IIA5eznUiNHoSEYTPTCt1TziXE9h37/xVbTVJbg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxR0hwMUhqVHFJSVBUckZW
+            cTdCeUx0bC8zdjB5dmhRNDJrc1ZOTnY4WmxVCjJNZEUrMEFEYmNGUWQxbHRZL3Bj
+            S3dnOGhENlJkV2oxR1RhSmdCWXczVWsKLS0tIHIxSnVSdGtKaE52UHNtaWVnRUNW
+            Unc4QUJ3YmF3N2xVVDg2VjBrZW80QmsKZ5HiOTiYRCrfWJf2Qpxyc4D+1wNWxHzK
+            hCe6G9ANAX/EAlGwmOIn3k7cFbN1VRt50TV/UCj+FsJBuifUYVMvTQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-08-11T18:28:22Z"
     mac: ENC[AES256_GCM,data:eICyFKuJAyCE8ZbdpWc4rOHRxtnrFhdxTeznIWXie5CrHRyo+n21CPg5L/VQUy2LF1rXINIDJRNqQWcLXJEXDKWGpqyaL/YcW+OawpbCq0DMJAe/DsvBdy5ySwGFdRlwU5x7ivVjsHKnsr8UgcbHdE/ZVRq93nZOfZlUepjb1u0=,iv:l+SFwIobBbxeZNUmwK6U9W5YpLh4t5GOtnRIH10Z7W4=,tag:6Zs+tneNcF1d5i43ns6Rmw==,type:str]

clusters/home/apps/authelia.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-authelia

clusters/home/apps/davical.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-davical

clusters/home/apps/immich.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-immich

clusters/home/apps/markdown-vault-mcp.yaml

@@ -19,4 +19,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-markdown-vault-mcp

clusters/home/apps/mosquitto.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-mosquitto

clusters/home/apps/vaultwarden.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-vaultwarden

clusters/home/apps/webdav.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-webdav

clusters/home/apps/zigbee2mqtt.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-zigbee2mqtt

clusters/home/infra/longhorn/longhorn-system.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-longhorn-system

clusters/home/infra/longhorn/s3-backup-proxy.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-s3-backup-proxy