separate keys per app

.sops.yaml

@@ -1,4 +1,31 @@
 creation_rules:
-  - path_regex: .*\.enc\.yaml$
+  - path_regex: authelia.*\.enc\.yaml$
     encrypted_regex: ^(data|stringData)$
-    age: age14x4jjs2fwdgw28g2pkr6jyj2yzmwc544xwmaaglrxwz5e99seutqtr8jv5
+    age: age1ncw6uagcgncd5m2admqxt73ey0mcd99jsw9sa9lcdv3gu70mcerql8ya0k
+  - path_regex: davical.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
+  - path_regex: immich.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
+  - path_regex: markdown-vault-mcp.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
+  - path_regex: mosquitto.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
+  - path_regex: vaultwarden.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
+  - path_regex: webdav.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
+  - path_regex: zigbee2mqtt.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
+  - path_regex: longhorn-system.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
+  - path_regex: s3-backup-proxy.*\.enc\.yaml$
+    encrypted_regex: ^(data|stringData)$
+    age: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48

clusters/base/apps/davical/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:XNfHGAnLbeY/ia9ic5dPLyXyO5KtRCSfWuIpMkveu9zHbRlEf9n0MkzDgzOMci2r,iv:InIm124GL4wMSQe9ZBdtPiRvzMEOtDt3IkD1HX8y52Q=,tag:UD6wuzIYRAUU5SHdLA7v9g==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:XEhP2zDIz0QCpAXXnZi5JtPsVIfns9zp4fvxcg9/bskHiLU5rR+EgU5n/SdOEDkJ,iv:wR3CGk3csHSCSBqFX+ukOUAmS/p+oZMmdNgvCFNHZlI=,tag:ttAe0GuLmwqA77cWLlne2Q==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:M18edLFcg3VqxoxtWrI+U28a8enyfq18uNMBrJVL26KBdgd/ZPbmmm/oqaouRwTN,iv:d8iiniqeK6el11QcgAhhF1XZ6cl6OcVvbYqbReiOZEw=,tag:osEWwYVv0Gt3ys9NMcvQng==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:d9RazQG7xeIH4g3ovti6HwyiIyLTzyaPjAcQvLmhsrwdgev7i0AJK7yQeRXxu/16,iv:9ZdfWTlOuyUNpV2ycykOgx8SY7Golz7/Lb+gfTa9fW0=,tag:eL1euF9uQJ+nDLsR1kxtvg==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:gLiGwSWBia3aosNcFRbBPVmCqnwpGcQXAHKj85lTIfQ=,iv:Sa5nty4tICHPZm+BBRr4GJFsChc1aI1oWkJhnprCEpY=,tag:bX6MxflLOtD8QrHAsOOORQ==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:1Zq7duPTIfJX2Stp6AEhKcLHkmQB6vWf4y1f0Iju/zI=,iv:PMOyD3O7UzVPRlFmHTOQSAys032iD4CF8JbI51agWcg=,tag:eDgMbg2lRMnl57NCf5iIkw==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHZ2N0Mkg2bFZrZkRpM3pC
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNTVJZEFuRFhGazF6T1Yv
-            Si91dDN5dWQrWU0rTjRaTlBIakVDU1VDbUJzCmNaWDNCV1ZTZmI4UVRUL2Q2NG5M
+            dnhhTHVUb1h4SEN2eEtDUGREUERkR2wrTUVVCktGSkVLZmlYR3BjekhjNmk4L3Q4
-            d0wyTURaVjA4L2hjMDNldnFIUlpMMTQKLS0tIDFRQ1YrNVllcHNrWXZFUkNodldT
+            UEJsQXJjZXY1VlNDaFV2eER4NTdwRGcKLS0tIDJxb1AyYm01YlNUVk93Tm1Hb0xK
-            Z3BtU3B1SCtPUCtqUDl5V3czU2N4NFEK0X+GFly2b9OQG3Uqvzd6UeNKpsnHjNVd
+            NVh0K25yOFUya0dYSGt2SGdJQURnQ2sKaKgwThB5ePeM091/zYgQXmiPeBeIhTdo
-            nZTGNHCDPqFvPhLXsO2WCkvmEn0ujtTeP1BS4xF/a18/6ZLdlsMntA==
+            60PkAPNs659xyVqnlZw2YKEhxbEHS3ZMTBgC4tgng0yjClBizcTv5w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:12Z"
+    lastmodified: "2026-08-08T16:37:01Z"
-    mac: ENC[AES256_GCM,data:wdZd8HuNeinlhPSdskFmpfCeFk1xSJofh2Z1Mh3CAX6RpVDny/2fv/s2MXx80mnlpkYgMkrmdaHjxv3D7olmdPaVB1FxOSSWPsQsLYMacepoovXfAx463NEGNKAQxRMk4GAsIkrIzMkmDns5FByvbwFxFJnmO8cSsra8emEhorg=,iv:M4MxGA8L6NL9tDqMLRunwT6D5kNzRm7RP5PRnQmXo64=,tag:zqshS9efhEw0qTwDrQTbKA==,type:str]
+    mac: ENC[AES256_GCM,data:OoE6fml/3DSH2EMafCoeYz/JHo89Fb9uwQ58k7hxQDU6YMazdO/eGM0jKX5ghjuMKJqA/zQs4FeZ4yASkIUT1CBbxRpycmE9qo6Zny121NLeqveBp3YMjmUZGt3tgw2dNqtkhpOnl/BmHQCtTTvX2brtSVmANx3LbFxjqbK2OGM=,iv:8Us7LJSZ2aHZQnYIjnsvkR7Av0KeHFEYEETZd7WZX4Q=,tag:7NbbEOq1k2c5IcsnqpvlOQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/immich/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: immich-secrets
     namespace: photo
 stringData:
-    DB_PASSWORD: ENC[AES256_GCM,data:ln8BOjE/yW0PCi1IVC3fF2UnvdO6CDjMMQJaMu/KXgg=,iv:nLKUtDjsM6Hamb373aDrHId/vJ89ERIsE3sH1ltLPN0=,tag:SoA/XtpWmR27OWrQsVR/EA==,type:str]
+    DB_PASSWORD: ENC[AES256_GCM,data:+bJ/+NEQCT3ZEqjnkzep4OsbLkJ9gyLZmGxCpoww2Wo=,iv:n1sLYgLl3zNZBdjMBhIrbSv/qHJFQ/nvZfBknFAUdug=,tag:DFnoc5K6XvHngVIrgJlM6Q==,type:str]
 sops:
     age:
         - recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZVROUjJMbVhWTytjcFFC
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtd1hFZy82d0c0RXZMd28r
-            bEwxcHlQcEVaaXA2YUUrNDcxbGdJY2dNV25FCjMvLzY0M3VBY3N5aC9mbTYxUVhx
+            dWs1VWNlVG9tTE5WZDVLdGpFSXhuVXQ5anprCk5LWWMrWUVCd1N4Y1JENnRyWExC
-            UDlYQWR4VE5rT3V6UHQxNk4zL1lHRGsKLS0tIFRkV3BYMEdMVEtwV083RDBtTEV4
+            d2VRNDJON2RzSHRyMGhRdmMva1NNY3cKLS0tIDNML2Q0YXFRMEs3V3prUkZYSS85
-            RkN2THlYMWZ6MkR1TjlFYm9KYUI0STgKhnXosf9d4hRBYW5byrQv6+kLlrmpfc29
+            MWRGa3duNHgvbjNvVnZLOXpYMW1mbGcKaN7h3W0YKsRjnyk6P9+bziDy6If5xLQ8
-            JMkML9MP0o+waMYih/U8DzQEI1An866ngPZYJ/6a3sYXkpvk+ssXUA==
+            kxFJf4CX9XU5jgYXqw2UNqRDusphclqfULUMRaEzMJkkPhd1cZ9PvQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:12Z"
+    lastmodified: "2026-08-21T12:23:20Z"
-    mac: ENC[AES256_GCM,data:7ssc4VqLST5FUHiZ+OEBAm8tOZnlDsU8WvyLRx6MVhR2+QlIBO89uA30lOb4vJIfmZTSw3eL9yxYaqR4ZLrM4jWaNA8tq/6eUkOrsOv4rk99ZVV/oxPXmaszRtt3S2ud+eyV8tSsQMuTkjDpYTpD/BgGoTnMPqKK7aiCzw3dpj4=,iv:fObkRF2+5AoSqXJTiqDAD4/JDhq8r2ePB1Yx9+ocCKo=,tag:Mrt5cb2AhpSNXE5Lu2EaBQ==,type:str]
+    mac: ENC[AES256_GCM,data:vGSUhl73AIQr1Ld1SHc+i4GpvOc0b0j8Vx9DmoRDjNs17TQSfmfulEZwIua12P5DHIz36P9yqggHfSyyrrEoMjfaUSTIDxCIGGvsfTl4vBt9Vis0e2gALaHtAgWZwxr5QMe+OP1tkXOZoX9E8VcoBq1ULvbIjqsPs2uxPVKsEWk=,iv:1exDUqurlFdBt1eZYWWMlkar75HbTLZ6RZelC0RsYcU=,tag:A0IhJHjVum2HBT5RwHo5qg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:YpxB66s2W3jvkmreeglCwBd5fulZokVTsP1/3uKAAapGw+5DJJBdQ5+6zg8bYc8giPSjQsC1g9F7+/Zk3iaYUw==,iv:Eyq/Q44nsTnYmQ/4ZUAndqy0XE1G0DQ9cbkYqvvmQVE=,tag:ByW0Ahvj8o168jH8NYbyHQ==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:vRsc/kmZ1qySDUrI1dMeLqSSn+jEgvPivw3dRYTLr7NRm6T7SYnmhhBb81CG6xQAl0Wz8RfOCescQpUJlbPl4w==,iv:Zha9o8uIdR6DPMk+KRL6ZnKdh3zPXuyjCCK9yKnuYFI=,tag:l+8oHY/hgZcKVQx9yiaEmg==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:yt4E5RxkjCGl1dwy/87JOeskC+ejlYFLSBSn2PRhHGsq5TIJxWpfSLAoX52jFwSKeZCtljc4fdMPC2cqOt7qbA==,iv:Zjr2/21zFkLbyOE6zxCXL+wGF9q/QFAeAoXk2WbrN+o=,tag:gXtFXxscaLtsFTdznKATgw==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:2unvRtI/V0aTULgSacGvEoYYQN0uWBR3b2TKjl7hjvQTXesuglTtSNz9YsjDqc8ZHGNBndiz2Q6VZagS3ERprw==,iv:fjMhiKamjbIrNYAK9TU2PPn0smJR+Kr3qhRhEUbjm04=,tag:wuUZbccOBoFcdiTPqb8QCQ==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:eb95y7jf2nZawM6OkuVWXRkpApMPftfnrR8ZXtmcg1E7Jd47A1CVs8mfiQoBkbgDvKhZdlGL3P87quwwEyDD4w==,iv:7wy+40IyZ4P5dKEnlaA+rDnz4yWjJLn6NnspDaQbG2U=,tag:dN4wP7R6eV5M7SlMPq5phQ==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:63S/0TsEis959MJRLd5atPXQrv5pNMC5iyMHJvT67luLLPkd2bdgfmX4Pu7R3Hr5YIGoujn1/xCuOdZH0RtIog==,iv:3Gi2ZukSzU9SIy7fPzmlvWbA4ykaNgta95DuviHf5zk=,tag:BPUXUPMIxW9kbyyQqoz0gQ==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMQWswVEx3YW9oYWxIR3hS
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOVJCaXpjeUEzWkN4SEdz
-            QTB3Y2d1YU91bTBlSllteS85WnBCS0xXMlEwCi90cWtBcnVaZyt5eGl4L1BHOENG
+            RnFkZmtXa0IwaE9xdGtBdVRwV1B5MkdDbVMwCmVYeUJpQmQwZ29BbnRPK1AzWGJx
-            OUxoY0pLWjdDS1lRb2J0VnZuOERoVmMKLS0tIEtSS0c4V2ZSZmNSYjNGaCtNblVy
+            NHV0NnRxenRWV2M4MytrZ3llNmxaMzQKLS0tIHVOcDVyTDkrNHJRMkhRVzFPSGpW
-            RENwRytnT2UybWk0UGZtV09PL0JVSjAKZ6/rIou+ANPigbIjVtWrX0iXEq9cPF/L
+            V1RRNTdiUTBjSWZlMlEvRXF3OUowZ00KXf/+ucgZuDAczE1WlEW7D2/cR+sB66BQ
-            pAnD9WHIZoO22SWEwdNpaKrRJdqE84MgFoNOwmAHLb15lJrdGLIOHg==
+            7JC42VJiyEf2djlODmvK26bDTeiJ/Uk9HsSuvamGUM8b8vAj2w/r/A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:13Z"
+    lastmodified: "2026-07-27T06:42:40Z"
-    mac: ENC[AES256_GCM,data:aUqYvC+YLgI52ICa7gbn0BSMdajrcuITa1dAzViRW1ni0NDWiVrNxpIy9FtnYhZEQzJzr2M3H2Y90ATunS3ScwpALW/NRAGCyLKg4i5NGde10M7Bq6jwz/gJJzV6l3NiaeMTYAz1rQ6hhKSJL6yfM/tT261z2SPF4UYG5Mr/vqE=,iv:VyhMY3yJ2/uqdyIVRPlXliWyakvXXAXsBeMQSy7RgY8=,tag:MP8VV2yGi4paxJN/zGVa3w==,type:str]
+    mac: ENC[AES256_GCM,data:XRxbyHL4iJMoRMb4X6C2y1ChTNSkqou01bwtIb6zNfwcGCt7uMGbm1HxvmjbdeJI/zQIIVfgxbbTxhZw+sL2FF+PYAjPcaGvaJ86O97lr9fUB30NC0tMluW82pt2iiisK+6dEEPH9i/kGFrJHN6RlaYVkEfv6U8xjlpIcaNx0+A=,iv:YnqMRlHl1WVYNqqN9hRH88hgIALrfgv6WrJGyeNDstI=,tag:M1DYFr3G9ub/R2kNF8ZnNQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:yr1xGmM4c3Npf9lDrDWeguNWq6sctVxMIk0lBgpB2FuuK3FcqTTYG8e6TIxwqqzmTFp2QNauN5hdE6aKs4tF+kRRwIvs1Cl3mhP671T9AUGP9s7iKGGlGxgKxrlvoLsos4clFLzt7tS9hPSwjgPQF/qlhN5UaRTy2G4l+FHf65+7BTuJETgqj24VCUD6hjCM80FTgKsPG+ILGhZLUbOGj9xag7oFot2QHzGb/Ht2dPrxEcz0496KPasEBRuN7Q==,iv:Muo/FO2m3rRHw+0vV4NOc3Hx1WmDomSvhG681EHTeTA=,tag:6NDrtpy7CtDePPMwBDzclg==,type:str]
+    passwd: ENC[AES256_GCM,data:YpTczjZ73h4Td+TmEZIgil9DN7WfVwBsi75F/t3D1oWGjGsifklnRsZUJqXiXyUwIxTxlFiWgfb01LjmILE0nB9rxoEbFdrASaLgtnCoYz/fvSZLqwCK+FSSub3+r0nJTNvxzD+bC/av8JEPNDW/8CSrHMrTrVCcLhAchOAvviRLgO18862XWcvPh1plO8luaZG38cuh+VbKKwidkwozc6B7Ghys5NfZuB1rP4vLZ6/f1PzcFRugtJ0fzzl/BA==,iv:9FKm4V/lYXott/6aVBKg4g8GtzVqgT/xndj0CKqMm+Y=,tag:41gCVbrK6Rp2IvVUt98Hpw==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2T2d3WkZkSGNIbFBRaGRx
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobk1BQW0yemEzV1FQM2ZJ
-            SVpXb283K3l2TmVPcmtPT0JDK3pMc2JVK0U4ClZQWTl4U1N6M0JTVDJzNGp2NlVQ
+            YkZJbjJPZlRiSDlyamx1WVdyNTJBNXo1YlQwCnhBT01SeE0rZDVOcFRkZm9KQ0t2
-            aTRYanFzalE1UkNOQzYyQkRBM01FUFUKLS0tIGdRZ0JlcTA0YzB2SGRHZ3FjY0kv
+            dUIyOHpzenVZc3lsa2hmMjF3LzRGMFUKLS0tIENmM05Ud2xGblNpdjZjWWFPeWg3
-            VnZUM3N1QkxvdlBpdUppUW9kNUp4aWMKUddmQ0c0rH3/pF9Qq+tMNH2QIwDi4E6S
+            UEtuZWZ5enkwSGk0MXR1czBibzQ1M2sKfp+76C0X2DgsffWZVtBevI4lCs8RM09p
-            y87ajT75RaDavZIttpcpxy7X5zc7o2oA+yaUUPVL05Tjc34i1NfDgA==
+            tzsrneX4iIX6WCn1kRLsWTZpN6Vg8Wsl6kUWnSA3WfHWI9W4CJdrag==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:14Z"
+    lastmodified: "2026-07-21T19:09:49Z"
-    mac: ENC[AES256_GCM,data:h5q81is9qQLP89Y3cEoCVPZTAGAiDGN0rmPd/l4QQyZrZ+UKxd3EfFlJc1HMDH3hQmmzLJu4inF3C8E+XaAtdpbdW3QqGaSjeRe+8gHwJVSkQJkz5PapAkxyHVGKEs+NdEU4onorEsdqCD/9IuRWiy43EYlB9ws6qGEelNdrZp0=,iv:I6PCoL9b+/YUkH1zsLCTmX9NzgfS7qfdpdCBqXGyfqU=,tag:lqsbEqR1x7O6+OawKfwUMg==,type:str]
+    mac: ENC[AES256_GCM,data:qecTVUaC/3j/oP1DVnXEKV9Ub+k5gvGHfteol4W5I3gq8IB2YYZ+vfuinPVJJeSsN5HvK62ftnIgRNu0dtzDOrnuZENczEMwPrOz90RCUbX7WBeKh23KZ8gSSw2MBn6gsDsz1gXFWENIyjQTJFZ4qAJY6jfeH2IFC9RkpoU3j14=,iv:ksLG/aHHBAkl6aA52Xufs2vijZlpsaXccoxheYV3Gm4=,tag:4YiaPGMBWSWhVBO1tNF6vQ==,type:str]
     encrypted_regex: ^(data|stringData)$
-    version: 3.11.0
+    version: 3.13.2

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:sf9WR58GLSaAzYAjOPcdIE3+8ZDeUPA3M5rQmlVqVZZFqLhwlFqhurGL/yVyazrKo6a5wTZutCW2,iv:kL2+u+Tij1WCHr9VCIoPBCGsheu5vG3iae3g1k5mOOQ=,tag:3CdQ0uf1VXk4ENq6Uyw6wQ==,type:comment]
+    #ENC[AES256_GCM,data:b8Yuhc+eN6k2X6xPhUUBAMyNmJhZl+cpszwhb9OUiZeDJUNC1CUFTSD4//XH81kud+iM3/6o854S,iv:0F4/f5sjeFBqp7zZfJhYd8tkiDRlfKJ6p5n337THiWo=,tag:ZNHbaR0tbHT6aWzyfqeqPw==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:fS7aOacxcGh+bnyK2WbjcCC9aZsvrbWRXCGeIZK6OWb4p50tx8f+WvHdvAEDwS9KwWeF5TqHqe8bEurD5Db4iwVZBIbNfuOQfNvbE10ugPYdOsoEm5Wwk6PKXqqikKzkSKlAwrPR202IIGVeR5yVQb5Lz4mBUg==,iv:KMDNUL+22Ez+WxlZBTiDw8MCfdeLr3mBDE+artBU2w8=,tag:ZhZmXMs2JzYl4wG9e/XnbQ==,type:str]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:pYY8Nc2PevrFGU2pbZaFH7O+WNJzOHSEXMM3TAFYHO46/GGzQjrxYbc9IY/8PgY86N73kQAFLvw2bpVnjiliilLpnxm9Z0LyYDlAhui8545J67IqoQFDyZt5o3NHceWRP2eCxEL4Bf9gD6j4YfObRVYrp38x2Q==,iv:IvzPkKi/w/S8ueYl/m8kckWiddfl1oQKYiT8S77IVAA=,tag:rD5RsmPt4uihMHWSt4gGwA==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWZHR5WnJiZWwwQ0tFOVUz
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6RVkzM041NFZDMzlYRllw
-            RFBhKzk0ZUpWdisrY2tvTno0NXYvSGVFaXlnCndDOFByYS8yci9lQkk4eFBVZnZm
+            a3BRS0JGZ1B0UGYyaTRLUkp2UTJ1S1pybDFnCnZhVWNYMFRlSXlFVTMvRXlpdlF3
-            SVdmY3ZCcGgrTG5xTWRrL1pwTzRxSWMKLS0tIE4rS1JWejdGbzFRdWZTTk5PeW4v
+            Vk1xT1pKV1hzSUYwQXd4ZG92cnhDY0UKLS0tIEtLWXZiZUFDeGhFdytKbTJHSjRH
-            MXlUVXFOOEp6RWFzUHNFQk9UL01mUDQK3L6/R8KwXdUoItWmcBvEzTDC+Cs+XvFP
+            YkJhS2FJOTdLbHlRelBpUWRNUTdTMDQKhgb66tV4L0PKkPY8DvbypTpcBlavUvRH
-            0n+Pmm6Ox2GgHK9szGcoEOCLRfi4LH8/jTe12TdiF0oNYk8V9c2UlQ==
+            0+Rz/UxfZpX8u8G9GeqF5glIpNG2x28VSOHchJxhvMKHIUq9ZUrHGw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:15Z"
+    lastmodified: "2026-07-18T19:13:05Z"
-    mac: ENC[AES256_GCM,data:aILNqL/ek2HfRY02xEWzeUElwPhxOL7ismU1uIBfQHJCvTCWgLhuLd38DwmvLKr10DjlakhsQdRkEaquhsIAOMFLxtXXXg9xV3o4oPJNOQS7gFR4RaC/csgoGMW8x05BIX1YTgNV5sh5ErmbsuiWrebaj64N6i0yLk8+V5wPF8A=,iv:L0wQsO3XLrisTK6778ERrwepB8rCFyhbaZD/mxo/kd4=,tag:LLcWkVYV1fRId97ZFjvmtA==,type:str]
+    mac: ENC[AES256_GCM,data:Ufdytxb9uH6JVXsWu39YhE1AfD/oG7bXhIwoTXYhYBE4IWvugrwZLCvBrgkfuazVXyKBuDIuEa5Vj/bzlTGDSlRNx7SDqabvilhmYAsBcuU5DAVU47pDz1YnXeHd9TuQI1dHAc1Q3uvkZwWNxh2YYXKZGwNMy3tOAkaOxwI1rMw=,iv:iUZenTP/9JhmjcR4p5+RM5K2YuXBLnRj0cd/RHseqFY=,tag:pesF8Pp8vBoQXcniwrep9g==,type:str]
     encrypted_regex: ^(data|stringData)$
-    version: 3.11.0
+    version: 3.13.2

clusters/base/apps/webdav/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:axkOd1I=,iv:raEbhZlSIXSSX1deBBPWlEx5e/gbf8broryBcs2ctk4=,tag:IEgg2oaDV43tKBuP9wGsbg==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:BeN5VS8=,iv:XpUr5PG9RWTRGXs7/EzDyLGwUm05Mr0YWpW7PwzNfm8=,tag:3py47tIcTeFxuuAidk2wBg==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:IPG2jsVdD+c/racZ1TI9kcSZWpVIAjBAahWEeLR7+XoXP6kVZskshmAEs6XHn70m,iv:5ypzLeEVJ4/2t7R+NJRz7qjtjVQszqr+IWXIfymGl54=,tag:hwc+3VT31p5ua1JO2ONPnw==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:Rh1ryftcmxgJAHvC/N1o5QeagCvyb3XIpDS7jOTCpJm3Wb5rUcLNmtcW22f0xljw,iv:GmgQJEuzUzSEql+fx5KURKv8CnhXF/z5UlmEn4ta+K0=,tag:AZD1CEbVRm6DiBt66pB9Vg==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXamlLZXhLSUt5TnN5Snpu
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UkRLNWVyZUpLREtZcm8r
-            UUQwem5LeS9OU0lNMU1aZFJuWXVzSE9EZXdZCnJrNlZkVjEvZUZYMFNiU0tCbEFi
+            V0VPTkZDN1pSWDNxWFZXOUlON1c3cHhSZFVzClpEMmhvQnlFMnF6aXV6MjJnMnBu
-            a0I1TXRycWdQYkhnS3QzUDRhTUlFTVUKLS0tIG1yL0JiaFU4MVorMytqdWIzUGdO
+            c2pxTDBGZVBUYjZNR1doQ3UraDQ3dlEKLS0tIE42dTZWMUhZdnVMYUNLTGdrSWZC
-            MiswRysyUHl0TVg0VHlZZUorK0NFc2sKPgkBwGFjEtlgb1DxtYPb54bn+gLgoi9Q
+            UFM0V08reGVmZTRMUWw5T1R2OUdGWW8KWAZq4TG36Njlw4//vPCxzM1Qqr/6Ievw
-            cdgDDnpbUGBcIf+EUcVT3vzcYfz2hOrAT6GLdG8rLkwwJu3cXF6fiw==
+            taBvLXpw9wkrjfZJ8gBU+0Q8WrsEy+tYtR9chfz1n/SmiGHCkskFGQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:16Z"
+    lastmodified: "2026-07-29T18:57:24Z"
-    mac: ENC[AES256_GCM,data:SLFubqt+z0viDc6Npcv63XS7hEpYLdPGAsWQGbrEwmGpZfuTJO5fcOO9WphXdxrDfHEwbijzyHXuRvwJGvnK8slNJUE7DBlpf/H3A0kBHJtv3AS42zDh13uQs5QTUY5OqSkFyOASO045biD3dvN5fqUVpVO6gY0Yt8uqBeB/K5w=,iv:pM2akDL75Kgy4JCv4Xk0p+tFkSNatwlnsnJHraQe3e0=,tag:+1Zg39ki0cBCR5DcldJfhg==,type:str]
+    mac: ENC[AES256_GCM,data:bW2QvjSbA4JmfmZFzC1oIfEnVBxf1pE4jtKDsp2sf7mozVEdqMTD2nNpq4Pro9zRiXQfzxQAXAyzT48dBhIunXKDNIS7vbPpLUbs0nwSF4Dgp/q02ZX3Vrewx80iz5wdMYvLk6c2viZ9ndMwRqBbdBBsuSa5O9nIVj1edG9tj70=,iv:8bgXaA9RiQtbd1Xaht5r5NB3lFedX7Wi/X4z10VLLuA=,tag:Qnr8Ij6XN/FMcQf9Kx1IvA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:afw7IkReB1kIvMkvmpMuTK5sNg3jx6fW7/QRuaTbHRiZJZKzaOoe8qvMP/dra1IfALdnsYsVCAqhBtVF96WFu7knuUkJiQ3ZjC2F1CDVCFPXmjwGddsldZCKURO5mTZNctzQghDU2LKOo56cRlgL+cSYP8+QE3asL31Mbek=,iv:KHHmNVodTi+miz/xyTAX80gaN9atQNRfOqc7slSL34s=,tag:2+kuO8veiuDFhtU72hmp7w==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:mDb7Vt4sOSaqn9+T3QEAR0yutRIFwiYpBBZDMQI4FMvAPWPkAdsYTIfvv+41JbpBafklDJ5gzPPKZJ6Qk1f8KBvjRuHP/bJqTUPrv+Q46ZKsuXECQq+qB8TKAj51FiJssyx0jYy9bCYgn+Z9r+WBT4YSAvv1XS/UHs4S8UA=,iv:8RHjs0g1ee38yUSHjvQv06Z7xbzMOG6LNzCJ/7s4+Pc=,tag:jb+VgAVApqIpN3lERqrfBg==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHOGVrSDloaFQwbURsc083
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzcUFqU2RpTXUwR3hsSEJr
-            ZTVFa3JsNVhCTzFtdzRCdm9FbUJkaWt1UFM4CmwrZUxIeXp5R3d3T3IrQUtlRFNC
+            WUV1NkpqQitDRDF6MUpWMWlnSS9TaStRZ1hNClNkSEIzOVVSTUh6LzdXdTdld3Zj
-            V0FYMFgySmxUcnhETmtJMnBmb3d5UzQKLS0tIE1QcmpGOHBacXcxeEcvK2EyV1oz
+            U1pVcE5IaFhuQ0lTZlZ0RzFDSHVkREUKLS0tIDdTbEJLbE9KUmxRei9lVlc4TW1t
-            SjJzNkUvVytmUHJPc2kvY0g2UEd0dXcKVIjRJv2fDvYGHyzZ4Ua1ApwtSjs0zWrE
+            TE0yUERpQkpqZFg3aGpvSkg4M04zMGcKcYmSgyzhpZ8BGAp+0zkQ7+ZnF2w/Nk9D
-            zsu9yJsnAw5zUoCggq5q1w0x3WT1ibBmr9p9MGrWfLXM3tm4JfQvTQ==
+            ZT8zwqCJcaRldg59JzmhLBfiuYAtnH2wqWj06LiIfvt+P3pgY79f3g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:16Z"
+    lastmodified: "2026-07-19T09:01:11Z"
-    mac: ENC[AES256_GCM,data:Jxtc4mKGJxaCRauQZ1ErI7BUMfbRdbAs4X2CaPlKzlBSR8TavxQdwyhF8nXidY5NzppwWfIk3fv7D3rxCGhGiuAadcF+LblQRmZAnTKRYANZKsFoBCe9AjSwqm97mHBc6GTuKOdiDk/DkKtQvZP/bYlwsRjoa52QkMDtsqFeQUg=,iv:MRe63edrdtXf8oV/M8+5fKfplG7m5pqZBdi14RxX2zs=,tag:pp+2H/990xodeTqV2gTeig==,type:str]
+    mac: ENC[AES256_GCM,data:fKfDsAg1Ya8c//x0xw9ytQR7hiF/BssuqlwA57PYiB1yjCW3Kddcdt95UF1amF+9tvJb2XwRjb2LwN4RrYj0RyScLmLa3u/l1r79EoUKQWQ4qF7GNdD5ZGaxqnWjgorxkfYcU7ahJBRDEIsvJXJivk6Wjm309ISzl8xR/tUpFCM=,iv:TmFo1gbRsATh6O0uJvJxwyj7hSzCfpPPuo55EkQQabk=,tag:CJ0cTn9BJs+87AvdwJ0MsA==,type:str]
     encrypted_regex: ^(data|stringData)$
-    version: 3.11.0
+    version: 3.13.2

clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: longhorn-backup-target-secret
     namespace: longhorn-system
 stringData:
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:iOcapA6BKzviIBFvjRcA1dV46oo=,iv:Wk91ScSO7+0X1O3uYr6S5DGzCCOTrDq3HN13hbeWpKw=,tag:Zswokxm+FMtqsOWXCeuphQ==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:QPvQnrkMSKK4Whj7DaMONoDW7LQ=,iv:K1x/VDp4VZUnC7u86wpEfVBDW7T9cI4CZojMZMCaS+A=,tag:eFAAnCMCVjNBHnFAhzFS3w==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:rOVE2/0UfAk3kPxcwRQYbi9WgebCHnucFFdFRlSkiwxeb7rBKZ86Qw==,iv:i8Va5cEAPs7jqHpoqLVw02JSQwZV3oJTsLJO9Ek2Sak=,tag:YwgQZvBzZsviKbBhMaaKKA==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:zFjxH1uqnYRrxM4Yrll9Na+mDj16aLtiJC2ZlNO+2r70JcXJqnTASQ==,iv:B7eV80h4APk3QCuoDR9EFpKs5dkMF8GjQ2v9lSF/ev8=,tag:xLbWN0Gy2idB9j2G8HZYKQ==,type:str]
-    AWS_ENDPOINTS: ENC[AES256_GCM,data:/EBiNr15q5kowjAGg153sqm28TYnQuO1WLoqkbHFHtFjeoNYoM1Ko3ffcYWF0wQNBEqAXb0f7n9hL/eXyg==,iv:FPrqkcut8onzQgmajp+rRNGMFNwjNLQoR+74EV8wbmM=,tag:nx+cMvWqcBLj7paT7gHm1w==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:HWVPThBb5GLpiRqAuSLvmAat0XiUu5R5CMv2Fv6jdieZ11lUmbS2MBD6lx0vQDSIzC36hd6Tu0hgqtknQA==,iv:XLqWSNHgj8O0uQPeBbnN05Za8G9VW6F802CCPoUoq9A=,tag:dsKXCq21hDlJy4KTyQTp/w==,type:str]
 sops:
     age:
         - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtV21jcCt4T1lwTmFkV1J2
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRndobTFybElvakN3c013
-            MTJIL3VIM1VwdDVwU2dUR1djTUxNK0RxQUhnClQ2WlpFWVVyQXQ1eUl0L3RsUzFw
+            T3d6ekVUM0V4OVNEMjl1ak5XTzNPS0xKRmtVCjBXMjVybEs0bFZKN3ByWmFpWm9K
-            ejdPQ2ZoUlZJZWNPSjR4V052ZHZCV0kKLS0tIGVGbFQ5OU4xdGZ4NUNMVFdKRFhh
+            TVVLVVBPYmE2NnJMT3Q3dVJRa250aXcKLS0tIEVKeXBGQ0x4ZDlIWENMa3k3S3Zz
-            R09Yb3lSSjNQMWowaU5BYkNmcE93ZjQKHk1a2Y8k+2M7rAqNiF7EHtuX1WgxXTg2
+            YUdxZXoycXBPbm5raWxFZ3owc2xkQmsKNzw+5kn73FZhApzfN/RBj4yAd7GLl5/X
-            JcTXe2qusMYPSqwvMJLwzKzZ27Np1zk5E98DbCLEfeaj+HhZGnrWaQ==
+            wyXVy0te83ZDeVQvqhXLkUPsbF8CYewC6xibZSdSY/WBh2ojedJXrQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:17Z"
+    lastmodified: "2026-08-11T19:04:53Z"
-    mac: ENC[AES256_GCM,data:EtHEGJA/K5HiZDKe2SWjm5x+5Py2RtLfvmVZhOfjHafCVtxIx5QloxTxr8bIdH2tBsHcND6QSSE13hR73lfKcrmQ1Bm1HlABtputlszmsu/ZNkCEAscRjbf3kf5ditxMBLK1WDBmF7RRtsuVBHXu4SsYIXAojh+k+JzbDD56JmM=,iv:R6+NBN14ZYoRBpze4MxbYG9uKsXf6ZXMj0MOmu6yK18=,tag:u10RF4ZGhUahijb4IGCe3g==,type:str]
+    mac: ENC[AES256_GCM,data:SO2tMq3UA0JcsTZyH3oNhmCsWZ2OhxEmJSn1b/3sH78cZvWalXUsdQqD1GBArFgS+oCSaSgarl2Ve06iNJtM8k6oq0fDkm0dxsLou+67qHlle4CbkP1KPFEQid2Nx8o/5b6cjI2zHz3bYmQTQh9DD7mE8roqo6lX3rYY35MpPJw=,iv:Ad13teWF+lZfzOY/PIALI3/Wohn/0BBoSuE0mtiH8/Y=,tag:sQVQfH0mFFMLnF4zbRC2VQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml

@@ -4,24 +4,24 @@ metadata:
     name: s3-backup-proxy-secrets
     namespace: longhorn-system
 stringData:
-    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:kyC+I0ONI9rA8vn5cDvJAmq7Jc4=,iv:buchhL9pym/eK3/8GkSnffhXL/F7ua7ntR/0sd1RW6g=,tag:NIdZtj0UGbK3dMxaJxhf5A==,type:str]
+    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:YP9bOIarPh6DJVo0vevVN2T3c3A=,iv:bTKwVx/Ij+GMCisO4WEDCJz8rsHe8PtSET/h4+P2dyM=,tag:fdXr+wAx/SvKNwlYlmKvRw==,type:str]
-    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:hxI2ZHcL+p+DJ/citZgf8n4EzaRJoulzdTO0aqIkAndUG+huC7jXmw==,iv:Th/tFpEnkEbyIYkuZYJToTWlzmc7XWJuvFyHRyvF/LY=,tag:++aIcShe5F8XLrWuukzLuw==,type:str]
+    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:Aa0ZYxiVipW2g4mGzyhCspVF67m7hnouMg4Tcr6kSinY+ULpHtEDBA==,iv:txr1ual5z7dXi/27T3FOMsccQtSPObHpg+7IfxvfWuw=,tag:MW7fl0iRB/6flbN+iA+2QA==,type:str]
-    CRYPT_PASSWORD: ENC[AES256_GCM,data:nIIfDcJIErQ9r/dqP3FEmul6kvnjTKyN0lFdvxhZeE8B0loGLQqVY7GN6Q==,iv:VuyZY7UJ23fZg4VSS4cMXyz37zCR+sFTofWD0XNzJWI=,tag:LmpVBMh2GOQHRIjRsRXFrw==,type:str]
+    CRYPT_PASSWORD: ENC[AES256_GCM,data:x8kMqkX4OzduFbW1BGc2EcFxaVm4ah4BBgLNxzQfIHeuL3UuJXt+Cj8isg==,iv:xoFXHqUDK/yamkDaSaQaMIkC7p+q/4qtsrYNwKT7944=,tag:92nej0/10KVTsugwFzdB0w==,type:str]
-    CRYPT_PASSWORD2: ENC[AES256_GCM,data:qR22z+qSiwJJRikrYQs3FVXJ1qZBKEWhD68kJmLxK7wgqlQht/IjZ5DmaA==,iv:WFlD9EdcIEh+Ue+Oj46zbOuRCJ/WVYaohF1b928Ky8g=,tag:f3VHN4aeaSxDcn9+WyH+UA==,type:str]
+    CRYPT_PASSWORD2: ENC[AES256_GCM,data:TdcfVmkgd36Hq80XaLRM8lY2dUq95h4v4ONCy/O7DOMoRwVxDUktgCRgNA==,iv:9EluJOnjKjCo2272sIeJ58iFu54DKfbkX785ZySj3C0=,tag:WUMKDLASA9grCilKNLVmZA==,type:str]
-    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:hwviUpa1L7h25Rx7Lbk+gKtjoJI=,iv:1W3Xxt7FnR1EM5szuUz5a7iu627EGlVt/lMMIgTEsCY=,tag:JcQwQw6nwhj1vD6mrCODsA==,type:str]
+    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:A1ZF8ejApPiH3nISLvrO7+vWTzM=,iv:fSFwYL/6zxtK4wkz+G3WItzq6P92eGviQ7WaVquDYuk=,tag:n9fjuW/cXU7QWe5IUkXf/w==,type:str]
-    PROXY_SECRET_KEY: ENC[AES256_GCM,data:3botHi04CbgdaMREJI8Il4I3lUeD+XNBNo3AjgSMRLKWS+o5wDXV1w==,iv:Okaj0P7u7nx9H+3HOQ548Jct/embmOwjKFufLK9pHiI=,tag:ED5LSpbcIBn0T7W0PiesaA==,type:str]
+    PROXY_SECRET_KEY: ENC[AES256_GCM,data:iU6GHL09tzxgyxcl6wKlDNhaO6YVYS/8yy/qCPbSxE3RlHk0Yw9EnQ==,iv:i0R6SzOJlEDsyEhxLrLMVaJu7ZAzNsnnmdyrxbv6ys0=,tag:h290ZIcFevBQeImcfqQbjg==,type:str]
 sops:
     age:
         - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSGt1K0dPc0c1c2pKS2JL
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxR0hwMUhqVHFJSVBUckZW
-            TnpnSmk4aHUzS3cyVDRKS2ZseTZtNzZFTndjCjdaTDNweTNBd0Zjb0JZSi9kdVA0
+            cTdCeUx0bC8zdjB5dmhRNDJrc1ZOTnY4WmxVCjJNZEUrMEFEYmNGUWQxbHRZL3Bj
-            YUhEd1RrVUhtczNDUmxCVm5mbkpFdW8KLS0tIEJPK2pUVGwweHdGR01jMWMra1I1
+            S3dnOGhENlJkV2oxR1RhSmdCWXczVWsKLS0tIHIxSnVSdGtKaE52UHNtaWVnRUNW
-            SkVBYXBDVU5QQklJWTlUZEtNZlZzYVUKLJk93Tq+2xGcR2z7V5fUuOCnYDomxiKZ
+            Unc4QUJ3YmF3N2xVVDg2VjBrZW80QmsKZ5HiOTiYRCrfWJf2Qpxyc4D+1wNWxHzK
-            Ed/bTZQcsalLMSAJzNHrMGFYQX94Bp2jrVYbu9qapluT3vAD4YuxLg==
+            hCe6G9ANAX/EAlGwmOIn3k7cFbN1VRt50TV/UCj+FsJBuifUYVMvTQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:18Z"
+    lastmodified: "2026-08-11T18:28:22Z"
-    mac: ENC[AES256_GCM,data:v7tRWrNjeP4IzRs7ZOvZN9wJlTlHmOet9HnR+mdJL8NnhLylXVZglMRNMrtAE7ETw9b12ceI8aHbVUPy7O1IFNvJ04x1MXjyaDuuHsFfZg1K4ifTWLKR3Y/mHXOHP1Vz3eHJnNVa7nDhH1IO1FbAg+U1zPkvdQRy1COhiE7rcq0=,iv:JHbuNzICGiF7H5tQRE85zqlf4KWVdyXU7lDjWBYaOjw=,tag:Gy8PaSRWzIQMaQy4qhRypw==,type:str]
+    mac: ENC[AES256_GCM,data:eICyFKuJAyCE8ZbdpWc4rOHRxtnrFhdxTeznIWXie5CrHRyo+n21CPg5L/VQUy2LF1rXINIDJRNqQWcLXJEXDKWGpqyaL/YcW+OawpbCq0DMJAe/DsvBdy5ySwGFdRlwU5x7ivVjsHKnsr8UgcbHdE/ZVRq93nZOfZlUepjb1u0=,iv:l+SFwIobBbxeZNUmwK6U9W5YpLh4t5GOtnRIH10Z7W4=,tag:6Zs+tneNcF1d5i43ns6Rmw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/home/apps/authelia.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-authelia

clusters/home/apps/davical.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-davical

clusters/home/apps/immich.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-immich

clusters/home/apps/markdown-vault-mcp.yaml

@@ -19,4 +19,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-markdown-vault-mcp

clusters/home/apps/mosquitto.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-mosquitto

clusters/home/apps/vaultwarden.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-vaultwarden

clusters/home/apps/webdav.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-webdav

clusters/home/apps/zigbee2mqtt.yaml

@@ -18,4 +18,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-zigbee2mqtt

clusters/home/infra/longhorn/longhorn-system.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-longhorn-system

clusters/home/infra/longhorn/s3-backup-proxy.yaml

@@ -15,4 +15,4 @@ spec:
   decryption:
     provider: sops
     secretRef:
-      name: sops-age
+      name: sops-age-s3-backup-proxy