diff --git a/clusters/base/apps/authelia/secret.enc.yaml b/clusters/base/apps/authelia/secret.enc.yaml
index fceaf42..690e70e 100644
--- a/clusters/base/apps/authelia/secret.enc.yaml
+++ b/clusters/base/apps/authelia/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: authelia-secrets
     namespace: auth
 stringData:
-    configuration.yml: ENC[AES256_GCM,data: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,iv:bBX5Z+K1tGb3EYX+DOkBQ/6xkK1vtaJpZRy5F+kEo10=,tag:dKfXy8Pq1nubGSUVIbKGjA==,type:str]
-    users_database.yml: ENC[AES256_GCM,data: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,iv:NbQhV9psFvNhe9sJ0V1FlCc1sHS3QVS3xDrpeYZVVWA=,tag:62e6CbTUr1khBuSrb4YGBw==,type:str]
+    configuration.yml: ENC[AES256_GCM,data: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,iv:QCHMaSsWDBkGgnBmW8oyS9z8jfi8a8+RBWFKuNWhrm4=,tag:ZSgGAQml9KvO3z0rO8bonQ==,type:str]
+    users_database.yml: ENC[AES256_GCM,data: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,iv:INkzIe3MSUdSZKztkdYovrn6aC4/ANO4AjyQH3fRMP4=,tag:TWMJA4tI1JQ49KGe9rlaEw==,type:str]
 sops:
     age:
         - recipient: age1ncw6uagcgncd5m2admqxt73ey0mcd99jsw9sa9lcdv3gu70mcerql8ya0k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWbkVsZFdXaXdVOGxQcGpW
-            MlpJeE9IdnM1VnkxeThhNWV2dm91ZFJFaWdnCjMyTDhwMktJNWxRMnIzSU02ZVIy
-            dnhSL0JxR3dxVVp2OU1lZ3FqNUZuRWcKLS0tIC9BRDh2S0hmVUhFcmlrbWxBdUFI
-            QlIrRzczSTlVNUU5OWZvblIzbWVuODgKscZ85YAAX26MVcUz60+lXFGzNaHMV9zF
-            kKxjnSbkO44Pj/Ml1k7TMEdMaOftBBjr0mkGZu+dbpT05SwuMvauIA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUTFsd2x6WjVrRnIza2hn
+            V1BPVWk1d2p0Q3k2a1hUSjBtdFozZUZiYVZrCkk3bkhpTnlRZmF0c1AyeWVDRkYz
+            YU5jUmQ3UkZuT1JvTkp3V3N1T2JtR0UKLS0tIElNck9jV2J3dTF6M1ZiMGNjVDRh
+            cW9Mdkp6RXhZY0hrMmFNdHkyS1prRW8KHi59K8sKhquDu/Wmw85JKAJQ658O5PIJ
+            MAgWvfr9OGCwffInaAloNBAD33s6nLEOTin2cwuy80AeSLgaa7zsCw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:34Z"
-    mac: ENC[AES256_GCM,data:c+ltwOuCTojq/xbrwMS1WVwkRmZg4ameoqO1aMEQY25h3/IyUBisq7fJlJx6ie1wh9ad37DmSq51K8U82PDJ/umDEOwb46ufqZ7ck0WIc/m3JGNc60Op2vYdmulb4Px0R8bAokaQR+0/1ufgttI27mqYM6ZIz69bh1sFOryxUvE=,iv:3bhn1q2N6faUlSUmXpE4NFL3T3AGT+mdTwrsd8ZAkgc=,tag:pRIIDz6HcVyrKtFatZISzw==,type:str]
+    lastmodified: "2026-08-26T10:27:42Z"
+    mac: ENC[AES256_GCM,data:ha+jbYEiDnGBMNWuVVDj5+71lgox3L0SZ8uyHnNr4PHiw9WOhShOE3qXWq7cHTjEfrVksiWX3r/pslQHkZU0Drj26N5+Ych3znlULpzUBitAlgyExmP3wOUVYQzou1KhSNy+sDzK5GLEC+yE/GhKpJYoiuZsFyU5ZxX4Jd11lIk=,iv:eRBreP6ZqnaRxh5D/NNtUCA/3VZ4NT3DDCuz1NQXHB4=,tag:2wNwT+zFPb13ctLDY/28FQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/davical/secret.enc.yaml b/clusters/base/apps/davical/secret.enc.yaml
index 0da00f4..fa3d21a 100644
--- a/clusters/base/apps/davical/secret.enc.yaml
+++ b/clusters/base/apps/davical/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:WDcjTW2EtFHpgl9FxJR5tZmQu/kvGBG8FY5nilph/ijvbfDNARtLr95vwen9jo4p,iv:Srnil7n8/UWaWXzjqey/p2ZHgAQZpaskEMT3ZVev6Rk=,tag:i8v517gwteIE0fIMZd/Z9w==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:Bp+462uDEUT+f075QBKCj1CBcWUY4InkTKN1hIPHy7XLHoyRNznoZmuOzFzCfsN7,iv:pPErSQQ1aRUS0Bi1q2/DawfUwE9Top/RwG9cuiLDLlI=,tag:djQqp6oWud3H9TTdjXxl9g==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:XLViuT5Zl/EAO5X9GhUMHS7DTibomRrZ1y2lprx9iso=,iv:lnmllMsgyGXE7iTNEBZ8m1xNVAkmYbOH5G9uv/o7FmI=,tag:FDZzJajLey8eTr6jHBVPbQ==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:Snmm6h3ZE83eek/6XXgGOouQMXiEH+UfJJSH1gyxN9Vp2pF+Uaix4z6dH0kCTJQl,iv:XEzn2zxCjeV87DNoMyqmK7bDws8nHjQziwDOXEF57lo=,tag:AH1wAD6++Qqb6nLPnltfPw==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:agre6KaJifEwUOuUQfKs1aVhUjQenmX7f3oZztNnsuZbwXPdGcO5EX9J5sxs19I+,iv:7PDkYQSDdOEFkj8M4LlV4owfy40mDWEgMuf9kvxTUDc=,tag:NKUTqiCsn3Xej03PG1ZZYg==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:XJX6XHLKNvXG/wFBZ4Nzzi3OKvao1Vi/YuBt5AvQKEM=,iv:XO0uBtsCUoFLRQ3vv5UKhBaB47mn8gkHn9ECuVAWtoc=,tag:/uV+KJnJr4bwdrXx8ACIfg==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnUk1JVXJhbEZONmhZZlhE
-            dGZLN3I1RWpKeVlqUlprbFFFOURNR1FobW5JClBhUnlmRHoyYkFEbVRnWlhMTmxV
-            dXhyZS9FRjIwenlhTmZFTXlRc04wcTQKLS0tIG8zY0lHN1plMk1nNDlyV2QyU1M3
-            b3UycEhkQ2Z2UHRrNFBUVTdEV3FERzAKKP7vSAf2cAWK0mOBjr7bhjDRuUOew5Id
-            SkGE6Lt5/zdY1VIUspljRXSOMI7akF+7ELyTCPz6WQrwPh5yvrJyxA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVWJNdTN0eEhORnBwOWVS
+            L1lSVElDZklHamM4SXd6VUg2WjFDbDFKSUV3CktVTGxpbUxQRkcyU3pha2p3VlJ0
+            SEh2bkF5alBycGl6cm02Syt1Z2hxbHMKLS0tIHZ3bjJKcmpUQ2tDTHpGcWxCb1Jt
+            aVFuSEliNjVSNjVmZG00WXJRODU0RzgKe+uwi2Qhj0VFmy6dLJexJ0mYE1elRCwd
+            OZMY5AASicpGjQejyzJpJpllvyxCPqQOqyTXJix9Z/PxsU7wnSAOlQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:35Z"
-    mac: ENC[AES256_GCM,data:0x4PZkZKB+h2yw2KwKBtQO3JzifqhZfiOxey1nVJbKhKgnp/dxmHnkO+E8ZeaU1cmcMBkzre26GR5lWcq5Ut9qhQlBvQ27eWdRzVUcP8yel7kowPjxaRCajrfPaSP5/YFlYh18hab6X1W/UER4hh6BlVv23xugGOqMBUHl+XxWU=,iv:dtp/C/wiizeKBVsGSN/SZfoPdBo5csUdZE6ackoI8Pk=,tag:ITMWSxZCagKzQ5NAsy363A==,type:str]
+    lastmodified: "2026-08-26T10:27:43Z"
+    mac: ENC[AES256_GCM,data:eLuZMTzTe9qQEAZY6DCEoAXaLV/qXDGiaLQra5bQqg4cXS0W5reEKibhLPsB2mR73So4KXP8NI6UNTePIw0Q/VOBjT/Kf3tbe12kaOpe6upBNsE49cgNG9xR353v2AKDzvsLk+r6krIV203tpr7/Lcedc4ewkWsQqJi1a3Goe7I=,iv:LyrLz1uP4ekDo1lE3Edm+Ppp3Rqg9EtdkPFIiCCmnyc=,tag:jZBTURgW6NvL92L4uAjxLQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/immich/helmrelease-ml.yaml b/clusters/base/apps/immich/helmrelease-ml.yaml
new file mode 100644
index 0000000..db7a0a8
--- /dev/null
+++ b/clusters/base/apps/immich/helmrelease-ml.yaml
@@ -0,0 +1,50 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: immich-ml
+  namespace: photo
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: immich
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      ml:
+        containers:
+          app:
+            # CPU-only: hardware-accelerated tags (-openvino, -cuda, etc)
+            # need specific host devices (e.g. /dev/dri) that aren't set up
+            # on these nodes. Switch tags later if that changes.
+            image:
+              repository: ghcr.io/immich-app/immich-machine-learning
+              tag: release
+            env:
+              TZ: Europe/Moscow
+            resources:
+              requests:
+                cpu: 500m
+                memory: 512Mi
+              limits:
+                memory: 4Gi
+
+    service:
+      app:
+        controller: ml
+        ports:
+          http:
+            port: 3003
+
+    persistence:
+      # caches downloaded ML models so they survive pod restarts instead of
+      # re-downloading (a few hundred MB) every time.
+      cache:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 10Gi
+        storageClass: longhorn-single-replica
+        retain: true
+        globalMounts:
+          - path: /cache
diff --git a/clusters/base/apps/immich/helmrelease-postgres.yaml b/clusters/base/apps/immich/helmrelease-postgres.yaml
new file mode 100644
index 0000000..02e2e66
--- /dev/null
+++ b/clusters/base/apps/immich/helmrelease-postgres.yaml
@@ -0,0 +1,65 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: immich-postgres
+  namespace: photo
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: immich
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      postgres:
+        containers:
+          app:
+            # immich requires this specific image - it bundles the
+            # vectorchord/pgvecto.rs extensions immich's DB schema depends
+            # on; a plain postgres image will not work.
+            image:
+              repository: ghcr.io/immich-app/postgres
+              tag: 14-vectorchord0.4.3-pgvectors0.2.0
+            env:
+              TZ: Europe/Moscow
+              POSTGRES_USER: postgres
+              POSTGRES_DB: immich
+              POSTGRES_INITDB_ARGS: "--data-checksums"
+              POSTGRES_PASSWORD:
+                valueFrom:
+                  secretKeyRef:
+                    name: immich-secrets
+                    key: DB_PASSWORD
+            resources:
+              requests:
+                cpu: 100m
+                memory: 256Mi
+              limits:
+                memory: 2Gi
+
+    service:
+      app:
+        controller: postgres
+        ports:
+          postgres:
+            port: 5432
+
+    persistence:
+      data:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 10Gi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /var/lib/postgresql/data
+      # postgres' parallel query workers need real shared memory, not the
+      # default 64Mi container tmpfs - matches shm_size: 128mb in the
+      # original docker-compose.
+      dshm:
+        type: emptyDir
+        medium: Memory
+        sizeLimit: 128Mi
+        globalMounts:
+          - path: /dev/shm
diff --git a/clusters/base/apps/immich/helmrelease-redis.yaml b/clusters/base/apps/immich/helmrelease-redis.yaml
new file mode 100644
index 0000000..62c18d6
--- /dev/null
+++ b/clusters/base/apps/immich/helmrelease-redis.yaml
@@ -0,0 +1,33 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: immich-redis
+  namespace: photo
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: immich
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      redis:
+        containers:
+          app:
+            image:
+              repository: docker.io/valkey/valkey
+              tag: "9"
+            resources:
+              requests:
+                cpu: 20m
+                memory: 32Mi
+              limits:
+                memory: 256Mi
+
+    service:
+      app:
+        controller: redis
+        ports:
+          redis:
+            port: 6379
diff --git a/clusters/base/apps/immich/helmrelease-server.yaml b/clusters/base/apps/immich/helmrelease-server.yaml
new file mode 100644
index 0000000..2ca28e1
--- /dev/null
+++ b/clusters/base/apps/immich/helmrelease-server.yaml
@@ -0,0 +1,82 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: immich-server
+  namespace: photo
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: immich
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      server:
+        containers:
+          app:
+            image:
+              repository: ghcr.io/immich-app/immich-server
+              tag: release
+            env:
+              TZ: Europe/Moscow
+              DB_HOSTNAME: immich-postgres
+              DB_PORT: "5432"
+              DB_USERNAME: postgres
+              DB_DATABASE_NAME: immich
+              DB_PASSWORD:
+                valueFrom:
+                  secretKeyRef:
+                    name: immich-secrets
+                    key: DB_PASSWORD
+              REDIS_HOSTNAME: immich-redis
+              REDIS_PORT: "6379"
+              IMMICH_MACHINE_LEARNING_URL: http://immich-ml:3003
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+            resources:
+              requests:
+                cpu: 200m
+                memory: 512Mi
+              limits:
+                memory: 4Gi
+
+    service:
+      app:
+        controller: server
+        ports:
+          http:
+            port: 2283
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: photo.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: immich-tls
+            hosts:
+              - photo.aggtaa.com
+
+    persistence:
+      # brand new, dedicated library - deliberately not reusing the old
+      # docker-compose install's NAS data, and not nfs-photo either.
+      library:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 100Gi
+        storageClass: longhorn-single-replica
+        retain: true
+        globalMounts:
+          - path: /data
diff --git a/clusters/base/apps/immich/helmrepository.yaml b/clusters/base/apps/immich/helmrepository.yaml
new file mode 100644
index 0000000..e0d75b1
--- /dev/null
+++ b/clusters/base/apps/immich/helmrepository.yaml
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: immich
+  namespace: photo
+spec:
+  interval: 1h
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"
diff --git a/clusters/base/apps/immich/kustomization.yaml b/clusters/base/apps/immich/kustomization.yaml
new file mode 100644
index 0000000..d205c70
--- /dev/null
+++ b/clusters/base/apps/immich/kustomization.yaml
@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - secret.enc.yaml
+  - helmrelease-postgres.yaml
+  - helmrelease-redis.yaml
+  - helmrelease-ml.yaml
+  - helmrelease-server.yaml
diff --git a/clusters/base/apps/immich/secret.enc.yaml b/clusters/base/apps/immich/secret.enc.yaml
new file mode 100644
index 0000000..f3b28c7
--- /dev/null
+++ b/clusters/base/apps/immich/secret.enc.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: immich-secrets
+    namespace: photo
+stringData:
+    DB_PASSWORD: ENC[AES256_GCM,data:7Pzt0sgMCbesVzcVNX63Hi8FmmR0WIlS1DeWhYn4EKA=,iv:Op9riDZatzmYYuQpzwfJ5J+rCTyzVK1WsLFECXQKwAY=,tag:0tI1N8eu70om9GEU109f5w==,type:str]
+sops:
+    age:
+        - recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TTlvZVo0NGV6RitxWC9w
+            d1VoMWRJQkdpekY0QzEwTHprQkl6cURTL2o0Cm8wRnJYNVFMWTIxaFpZd0MzMm5w
+            NEw1QUpzUjBrSG5kZ25ZMVl2MVVFU2MKLS0tIGMzc3ZnNUwxV3NOaGRKajUyVnI5
+            dEpEQTd0RVh4RGdFRnluUXZmV1k0T2sKJPSsUQPrKpUKVUeSkfYGvaPjvbaZl+UI
+            UNBx6B5oLbiIaB2gRjEVSx1ppC+n1L+LYszGvFvRTJuLLCGXcEaCmA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-08-26T10:27:44Z"
+    mac: ENC[AES256_GCM,data:+bwvNRkXRw+cneVf+CLAxjGFHtnvfj6O0NZxSxcRqcWUSOvLcL+4Aevrun0vCk+49l9TED/U2TbpECVIH3f576UK4Ge0EP9enPsNBJezJURsTdCeWWXJHs/R+E8/agUDBU4zXGo9hmABu687V5e7c8U2ZCm1o7UdO4SdvUukSDM=,iv:275XCj4coFIxhIlmDmlxoYXIvnx5Z79oDEi3mtupXTk=,tag:o1tEkjNa3vfRVZTuxICMQw==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0
diff --git a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
index 3ae3ae5..8bbb990 100644
--- a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
+++ b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:vuko3RNaepAnSy+pgcb/FlSHlybr2LFCWBOdceiRFpFAaQNmElEEPaqdaVJU5jsTN/7uOq1cL6Arg8hUsrSn/A==,iv:4rQmPd2PBHeC3zU+x4a46euLI0T8p9TMAf6u6AAdCLg=,tag:uBd++tGTBQkWFm+x0/daqQ==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:2GZeGHdM3J3OcMOroDN2/Oz8DLcYuHWJ7UDCLiIXNWx4a4IwJL8PgH5hW/2v/XwaF3/8e8IMPoeoXVodsNKJqQ==,iv:knrWs2Dr6Gc2hYkHlxY4s7kpdfq6w8w38e1VSZWuigM=,tag:vtx7yt3wRjUsa820zdl6bA==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:3pkP5Ds85wVhQe9upEknsVfWRGi6c+ikAhgSRUu8viP48K2P+BGs0reGfgpJif3E+ItsfKJoeeHfAjWpfRljsg==,iv:JG75Fx5ohwR/LVAkMzEBw4WWv2ohuQnYUuS4RkJL0BE=,tag:QUncosi4cV7326lpsvZfew==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:6kWzb6qyDtbSznDRSnwb4EeC8x+4D64QF4D6Zb/f0dmwPIJs5jWv3qIl6hEtyq1kzmkNv4aiqkSB+uVQ3Uyv0w==,iv:zeFOWj1CY+k2VA5VH5Msro63sChoPIlRAa2+1fZj2cw=,tag:d/AGfdGatL1dC+Ia4WHKOQ==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:iWahoE3GUca+bb5lLhp/TyIYgIn9davvpKmPkp+9BtvRi/kyBdEwpQzbYlQ7A+Vn3yT+0Vr34sWW3EcvN/kAiQ==,iv:v/48XL8zBzJDfO6ntUBEhiUxhintludda9jb7bTNHA8=,tag:pyT1hKJs504GmTLSIn6cwg==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:UDcgkrEn08K4iPh088/la1EiY4UiOavFWhYMduf0xNd6sfKAeJqL6ufM7eE5G7D78SlGUL2sWzHb7PNJ0nRY/A==,iv:KQLQxwMitHxKidtUyHfVgmZIFC96V0dqqETEjlp1Duw=,tag:jefp4bL4OmqOYS2m3Zp0sA==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUEpRTjEyUEh3NGJsbUVQ
-            dTlUdUUwdjVTNnk3QXlRSTB4RnJJS2RPUURBCjl2dVNRaFJQclpISzlyTEMvdjBJ
-            UzBITkM0N2lvNVdVMzF5YVdUNDVhUE0KLS0tIGZMTi9jWThuNzNaaDJZSTRVWkxn
-            aDFsU2FrT2ZTVng0Zm91ZmhyWGR3KzAKHlBOG+o5EdTNMPgRU5nQNsMUniNua+8b
-            RUp8lYB8bIAmQFMfoa5G+axUpVgrvhMcWdmFmsdLVdIrpOr59mm89w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM1l2cFpzaUkzY2lMY2Ft
+            ZGtNZkZGZzdqWGFyb2tRR0FNRmE3Tmo1V0FVCmRVcEM5MWV3NWVKbldPMUQ1dS9Z
+            bHdJbVFGN1lBeTJyRitENUhrenBKVjQKLS0tIG14YzVvLzhwN3EwQjhEVzA0dnhx
+            SXIxWUthKzVqK0M4UXY1czkzbGVzd2cKf//DwDlAjyhIlHcHAPPimO3K+2CWF33c
+            MASAMz+lCAgPj03q+Hbq7YnknH34KspzOnGCo9RgahcHGbladFfO0A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:35Z"
-    mac: ENC[AES256_GCM,data:pagUJrLPwKiRxa1IOqP26jWDdPaWohk0xUNCSq5ZlcbsFR+sZ7ENa//N4C8LCniGU34BSK3bUq5F5gwnZhFQb5CCnYkEVX3nIFvkXO3INY7l75BVGkQ1UJCNCYW3JPxMUIbAHP3zJnqhCFQjlwNADFuXzlqhi1gdTVxAgzCjHjs=,iv:RwWW9SvLOvUB5Sx2sm44UKeYQtqOqjhsWWs+R251C2I=,tag:O649ckRslfYES1N4uPXbxw==,type:str]
+    lastmodified: "2026-08-26T10:27:45Z"
+    mac: ENC[AES256_GCM,data:wtCnG17FfOqGqPxLW0cbNY1COm0IBvxUcmdlj64WkOwd7NbdQ/H4BOLFPJMJb45O1+XJAFcZyB54U84hT005FhCrXWyweUfsMrxtkqa6ZlymuxNdxCwHSeN2Py4BHHNdeRAyfcdW9+P0IkjFF95ed1Aa9x+Zqr4z9UOJgG/9LdQ=,iv:vRp9HnQihMYtUj05FkccM/j3Mg9OTbP2ShIzuOzwDnA=,tag:tmKJkt/b0GcGak5A75NGzA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/mosquitto/secret.enc.yaml b/clusters/base/apps/mosquitto/secret.enc.yaml
index 5c106c2..d9acbe5 100644
--- a/clusters/base/apps/mosquitto/secret.enc.yaml
+++ b/clusters/base/apps/mosquitto/secret.enc.yaml
@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:a0yetbNB9n5ExQQK6131bjkB0oP20EvUNg+4+yHW/sMLRKfya0WtB5RhUvuZOsd93KIf9fBKWsKbLs44ekyQsY+u8oOIb1VUh9Wpx/1RJs14ZbviRpNiVdYGfV/5CDregPdMNIMtkBjgbTZWjTD4NmbKFVNjakw4X+eO0Ukyqt9QHl1xDgMUznboElHkFa/1rr1WEOlmXmxW70hU/Z8kev5dRJnRj1wPrs40VA+v5CHcSv9q68CQXoFvoa2hcQ==,iv:r3t/W6VDAidnm4Mdxt+CQPATCdLAYwIRmfc8IVPgOXI=,tag:oXALowjRRcOomv12jC7v/A==,type:str]
+    passwd: ENC[AES256_GCM,data:SK64d6ZskCyI8Jv7+V5TsybQi3GEn+iYkbMsZeOXc9QcOqE6DHkZDIZueAEhqE5PmhQYln4tw9pACHgptaPhmURJrwkzvFWvsu7Yug3QVwCz7UHqbz0k/lP8GWOFGwwOvFpgTFhVBZBYaT+mhi1F51gjUKLdntoa5tyZXL5t8LV3KlolcliOtg8BsMIpQghBbGJD2UBRcLbIQuKLPgzunuya/hl+q3P0gKHEaIOfQOAeAuDelxDOizgdundAow==,iv:cbdk3htdVYxUxPA3XoWDsg76YnPkQm1yJnST02nbcts=,tag:mvYTdi0HM7XwB3hcrhDX5A==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVXpBSWJkSXFhVVlSemln
-            bHVGelVoVTV4UVhobnNIelVxc2JDeTBkM0Y0CmMxRUhKZFhPNXlNbmh3TThYNWQw
-            bDB0UTdMNkxhQ2s5NWs2RlBDQVo4bzAKLS0tIENpZVZpSWxkRjJSSDdkVVIvamRD
-            WDFrQkM0UXFrS2lmL2xrMkdBcXpVQzgKbYdAW+VIQECa0NEf6kegoXtUzZECV6XM
-            Mzk2iYvkOyWoN+kyRU43hC72IzK08DPU8RpRPpIFFfjYlHKUlKuBXA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaG5tSVp5c3V1K2FQTW9D
+            Yk9IbnBFK0N2Y2l0b25INWRPSy9RR0IrdmhRClBlcnN6bUVDUlZCQ2UwMHlhamZN
+            UkxjcllqWWVhcjVTNEVVb210V3A0YzgKLS0tIGFFR2IvbEdLRGFrWVdlbGh1aVdE
+            WXF1bXBOeDJxSXVLNXJXTFVqa1BjMFUKEt5WIFdKeWbGLmI5d1u+NDYCpPm4r1tA
+            f3Fbed6zMgZlfFoaWh11bmnXZNmXevHA/+8n9Qj5A/rzHxG20LCOBg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:36Z"
-    mac: ENC[AES256_GCM,data:ZfP/c9cb8sVtgmqEIVSr6v437RIXMODdbbD1eC+1Hs/HUddbTMLKdgYjhdQGuU+lkujNc5ye7YK//tFT1WoBDzSCrL2w4I5b0/r0DD4hMaCXu8rd5mj/5pr7VWM0pZo2qfSiuyyMRCCXe9BK8uTMV0YOOx9fizUd5uosBQjurCs=,iv:cSmG2gtkNXpld28Ke4lQ4VLcu3DlonVyVtCr3Thq0/A=,tag:f36JCnSj4gXLOVXrwqaiww==,type:str]
+    lastmodified: "2026-08-26T10:27:45Z"
+    mac: ENC[AES256_GCM,data:CHrnXuYPDncyy0pdEUtMPVohJlbdzOHgBcCWFV1q5shMpR72llCSrEPpWuORELZQkeDucjGgvVAlA082H9v5qHy7isji2Z7M/sTaZTGGePUIsPOtYY+kMiKGuPTXIYJKIDrnlJapa/YcfGgdS/d2KGBm+8a+X7NDI7iUqUEb2oE=,iv:6S/6T36Mbr103Meg0zWHVIT9KBm0ecMDch062cEpmwg=,tag:IRRLRDg4Pu9kQKqZPc9brA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml
index ba655cb..ad95bf0 100644
--- a/clusters/base/apps/vaultwarden/secret.enc.yaml
+++ b/clusters/base/apps/vaultwarden/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:TOJlEEzTx2BJH3Unw5Z9evuAv4rJTzdaihTVy1FPtSFmFo8VSMIcKkcb4D/veGZz4dXIq4nR2s6J,iv:u0hAryIuyqnvAWCawgPWCzNlRNcLFbJfASNkdYcHXQw=,tag:JmmuHintOMFFjCM3IxWMDw==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:zRnyCbqHTqjbvj8HlwYfj4+Vmq+8C04ivSDfYkoOGkUYLMKhMbF1IlMoBAY2yYA4ESbnAytVHdHXmhMGa81QlyzsLaYXUncVBbUsV+Cp3w8/Wybc7OdnLRH6VOSZUnQ7x0sarut03hkMmNl3piImBiPofi/Bdw==,iv:inABwESPKyJPDWpKjVapdf1J8VV6k5SwF36VeKcwamI=,tag:YTSAZKnYNuv8LOAb2Z/D+g==,type:str]
+    #ENC[AES256_GCM,data:rfU8h/pq/vwPZ+03ME6JNdzoj2MEuaVTLVS5LLWgxEXkV+jJju1h/a2xxvyEH6xBgtzy/OVSkbHK,iv:T3eQiK2bKNTwdT+3DjsMWCXc1//xLdZ3v3qbpvy2m2Y=,tag:kWMjPVX1v86xgR4d1MkXWQ==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:Bz/8MdtbxlnzkWC5lH3jtC515hGeoHR48TGuejsTAlMGaXk5G5+VCSs+6oGKdv0EyWeWSOHjKlalfC/2agstoVNbYziWnN0wcGZ8l4PRu3i+wtOd64Ydf3nyjOGRWzQNX0+lb1YwEsjzdHpU0qq2XGTfXzOfCw==,iv:tdIZyLby6EjtEWhBxREZcHo44+nXlzY5WmPzqPly5NM=,tag:Ko0jsJeZwLAz+jbSsLj/XA==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmT2w5V2taTndmMTgvMzh4
-            MXVwVW5HWHlFeDA2cUpKV2dNMEJURloxYUNjCkhoSFNOVzRpanUyTnBRT2cyTkRB
-            ZEp1WXdkZ0xEVXVXNnVPbUtYYTE2OHcKLS0tIDF3ZEpEbVRxNy9VNGdNWkJWQmJS
-            U3JWZHZpZXdId3hITkc0eU82Wi9pTXcKVR6qDQV9itXPXVoS+IbcJtQ2Uq6zEVsV
-            uAnTpFxv5Pm1URpBmkcvskYOTnigCIpl5mrRvrKUANGVQwfa9IcJIQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQkkzeGxEMEw2WEExU0tM
+            ZnJLbCtLOGZRQWhOMXhTTVFrQkFuNFBRZlI0CjJ5b2FMSnUxVXI1NWI0RStOQmpx
+            eGNqT0RMbUtWU0wrTWNtaGRNdC9ieGsKLS0tIEl6SGNkZFJkdXJNa0EwdSt1TDVS
+            eFk3Q0pUZ25hYTVTNXZYeUsyMU5pcFEKb+us2keyKcwUx5oy3wIsujscYiA3hGgw
+            vqu/cf4eypT6Ju3/6WmJuSX5FjexzenYPTbOI7QyRYtN7bc4G8WQAw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:37Z"
-    mac: ENC[AES256_GCM,data:Gz5vhQq9E1vI6nljJ+9HkS+njCjl9CaaTvOFS3oQy53fcGhekrslS3zZ9QL27XqpnuolupObT2N2qFem0VJCovBGILOaF5Vip9DZbtRBKi762a2l8xvzj/Tm4ZxqoG9eXGe9+sKNVznkaVduLP4lxsCVRbToPgHpMN77+DouwAY=,iv:4CEKGXrOQUS8d2Z4p87nyfbKm3Y1SqfOcG94mrtXSus=,tag:YO73BhxGhbFyVn3zkMEhKw==,type:str]
+    lastmodified: "2026-08-26T10:27:46Z"
+    mac: ENC[AES256_GCM,data:aos1VAzIQBorTRhTmF2lIYNwNYsc2+bljeKzt8BIHCFdR9TiecZaEfEzVi8z/Sdv68ye9m7xR7odjN6elCmQsLrCWWfjWqeHQQVfi2DbStCRX3QAMfbjCO1r84pZWGGN7fdfKCOcmzP5peDjdhJBc6fCyxiA4FAE/tnIdOwloTQ=,iv:Qvz/HpogGNLMGoV9ohdy0RsH/Cn4TTwr+eedmLbTTFo=,tag:kNpBeQkD59H+/NjSfwQWLA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/webdav/secret.enc.yaml b/clusters/base/apps/webdav/secret.enc.yaml
index 771ba3f..c4b49dd 100644
--- a/clusters/base/apps/webdav/secret.enc.yaml
+++ b/clusters/base/apps/webdav/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:hhcWsos=,iv:UcfZ2fNoGSF+dR/w24rjuyp6tDlz+m4kHIUYihw/DCE=,tag:2uz6OfCEL8/u4/rNHdj8xg==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:5vnIbAIWw46GT4VhdKmFne6gWSj2LRG9zPxIe9cDX9BlL++xLrrMmWpxI6zTBdxQ,iv:EQJF5aXWC6dMd3cSfSUPEwWLlnPSj+923ESxxZRsX+o=,tag:YzlkV5UeaReoaGhPF/v0qA==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:QtaIzcw=,iv:7N9iscatzvJXIebiYlExngGvL4Qf03FjsVCS0pJj3pY=,tag:pQKAIdqtoNgKNOy2iYqdrA==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:ljhKLIbM9+uV7RQPGmzeYctlvB/OliWnTQJgIj2UuWC+juc7N0jd21MbCRShgnq3,iv:kbT0D9TYnpsnraZY4ynJP7CSysUkWfCicya+bxxqf3E=,tag:LZp+/pBxIa7ijkc1aVm66g==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudGQrU3dGb042aUtaQ25Z
-            emNhY1FSWHppZ2FqOGYvWHBpYktDRzhOdDBvCmswWUJtclEzdkgrcDlET3ZXWFJx
-            N0RxUHVEUlJXYlB2OTArZXhlSmJOUjQKLS0tIE9JRWxHT1lsTEczRWp3eVlxTG1F
-            MHU0ZmcweGxKSms5L3ZnU2loNlpRU2sKZPRWWN7xpAgnWTCdoxAXHILoxz4OjJ6Q
-            iRYrdJjOmJFgPVH39Pggr3oBwDtschyz0wwrUIr8ZDCQgFud3t/9DA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBicVpFRlRCL1JtaGw2NldB
+            eTg1L3gvZ29wdk1aRVFxUGY2Y0tFYTMwU0NZCmM4VEFXK2tZL3FnNjk1Uzhudmw1
+            RGdhUzRjVWl6eWozR1dzbGNvaWVtUGcKLS0tIEJpTWF2bU93My9VazNZWThTMXVU
+            REQ5MVZjYlc4cWtXaUlyV0Q0MmoxYzgKREQ/Pq3ysir1FmafeoCTTjA0ol7TdeAy
+            rhLjuR+baNZXEU0FP7hcm2q/UmcH412tEFqQlDlCfSe+/DHhfKRGrQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:38Z"
-    mac: ENC[AES256_GCM,data:pIvd3Ms3G/WVwOieLRMAzHX10rENORRM59mptHozvWfBvFWrwvKBXR4b1cWMmh89aKfJT8dx5XYdPXqpc5DUky6hNxgVB1Rz9n+llK2vpW/sS0IKfGdJUxih2e89oUCGgJpN7pb46Vwl9BbJ3doLeogZtxjcDnRNi6WW37Mt3+8=,iv:IqHuIAVAOa4xVjmhC9qVISmdgxO9+Yxm/N78FD7H2v8=,tag:oQ/eClwpWdv4c60vdXrTcQ==,type:str]
+    lastmodified: "2026-08-26T10:27:47Z"
+    mac: ENC[AES256_GCM,data:XrlGWXa+s7IWEzL1P0Ve2IHDXWc5Fbpx/OzrfroUgcXCVOIZs0dwslsyR08zeo8kTukTfAoGsds4FJtqoNLQ68mzDiipDU2yksza767MXGfdrUNxyEfW3s0p5vJiBr1d1Vkb9k2l9e7zU59x018q+8sA4e6sBiaYcJvYX0nPP3E=,iv:erucFEVH5lo1/4nwBtRkGTTVZ8rNLW69hiWluPE0WEg=,tag:f79y2+AZydahk3d0RB+sNQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
index 3b0c51e..d228c0d 100644
--- a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
+++ b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:1Bp5poyu4nQxKudOFPT1ceQUXOokIdas6zbMHoxb+u4fFfLu6jy8KG+hroGLTH2g2AUGF/dPLoUOC8wT5Fg8Ml2YnrZTtqBpBkbEQiSJ/BNF9H9mQi5U7VnymbBFm8hmGj+YKLw1dSiWk7xSfo/xfaAaRglE/H/DY8PsaJk=,iv:UdKFl53EEkrjikGwc6LGJOR5qUzqXiIq1SMEZAl05ts=,tag:0wHTgAnufpR1q2o6LEIRNg==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:GjLuGVn7TEjugBqZuhEea978efvSulcbkjRaYImd9wWzu46jU/sn5mvSkKzp2a0RKpH0z85tWK3OrqLBtCSWX2gksX42XDbFf1PKQX/wnnhiSZFRnfgHBRGUeHXJHGZXkuoXaCSbJJJ7JHql//Pq1xNHSGogcwmVG4Os3K8=,iv:XasBz8jdQuoiAiVO7PXlcmBrdS9Gro4s8vG5m9lfyYw=,tag:sXKp5rWbpMckfdeWfXpR5w==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQUtaeTQ3Tlk4K05pellu
-            RWVrRWJmcCtOcitoYUVPNDNlVVhET0x5VlFnCjlndnFxYWpvVlVKRTI5cXRPaWlH
-            N1E4UDdMdlR6KzdLdEZ0cE9rVXZjUkUKLS0tIFpReEwvdW1acDdDT05qVlozYzFy
-            NURoV0Q1VXduY2RSTENNZWw3amNveUkK5XTjccXl0r8wSqQfZHlAQnBfL2y4zxsD
-            aK/cAqAWu64r5sfNsWdzZ2LCbpRo4C1riM2zG0ij8xnHaNULsHUedg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreFltNHRoU3BrUzFTcU0w
+            cmN2dkx2RXp0VXhZL0lOUnZVRE11Ti8rVm5RCmFqVHJvWXRsOGswTS9FOUdjSnN6
+            bG9LeXhpL29LMmgzelNzN25UOXVHdjAKLS0tIGZFak4zR3VwREFQRGx3dHF0aWNk
+            Njl1MGpjdVZyY2JiczBjd0pVbXJzM1kKTiwYaEaqs15UFe+MF7MiD8JREMYTvOJR
+            xucZvj0CHKDXeJcp6tLUB7rBSZhNjJL8KMhmpNcp6ImwcDu/5wk8xQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:38Z"
-    mac: ENC[AES256_GCM,data:IdGCXliSmInBqft+9V2+pMjSx7y7PidgTSqiS03LOqOYK9lYn4WQqgyFBPobgS6xx7qS6lX0KumqS2yIgPFZqOSUVfGq/iaPGcksCelY2sWAnE0VZaI76RuFw5+3spweX8yiVUTTvFcjj8WIiOYPZr093biHY5h/IjTJ9XxTSB4=,iv:lnoe0ds1PXc+k9Se/DqDHcRJ9PA9GoaxZlNubNufsQM=,tag:9IQ4LEI50IqSL/+oRpg9MA==,type:str]
+    lastmodified: "2026-08-26T10:27:48Z"
+    mac: ENC[AES256_GCM,data:9S+lSTjgaMCNcSbCVlw7wjxP8u57g/KatbzFnaH5Ez67vv5nlpFU2bwwCE/yhczTqrWqXsPe6Ro+ufGsCWXBZGiztv3YN1LtxP6Rkdbl6h7c/mj1JS7sEG162qASrZrlpN/gObWsGDFTGZgDUkdTsmTn0M12RbVByjzEJOiz7ms=,iv:Oj5ibov+3CYFWxs3u6aijeMSK7kMPDE2L73N3mcyJoM=,tag:jY715s8kPORNpo4FL+U7ZA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
index 7ad70dd..2553998 100644
--- a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
+++ b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: longhorn-backup-target-secret
     namespace: longhorn-system
 stringData:
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:z7rr7TRv+dir1Dl71X6yowBvKKA=,iv:tCvlOWco7nMqoMrw5mxX+sUejPe60rlnyutSw3gTJW4=,tag:A+oruTTZkItlEYM4U0qgzA==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:kqc5UNtldJ4IvLFYMFG+UL5LiyWqU26A7y/7RnQ8sI7xYBXoFgaFwA==,iv:a7CglsoXqSL40FacD6oZMOd93IsTj5CRFgk8ehKdfYI=,tag:xdlyiAGjRzl+zmBhUkD0xw==,type:str]
-    AWS_ENDPOINTS: ENC[AES256_GCM,data:sweN5KDtM1S/JXbE6n4AA3ISXOGWwtKchEuHISX2TCXAbDloO3jukh9VYrc3UkWBhzIyp8xC9gzk+RnLWQ==,iv:qIrNboYNnk6MsI/ZPmwNAmlNGjY2nntI0eWz/WCnTtE=,tag:rg8stEVKjyQCh3+7ptTmSw==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:MDFAe4ED+pNdJITOH8U7L//bJqc=,iv:Gr1M/UofheKqRjIKG1+78vJCSNdCjMNhVVvGM9DnSBU=,tag:MSfXDBde5iiUhLb/uZ8W7Q==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:8QmzN6tuUpSoC2GuF3KM8F0HBmDuaWoaioRKONUW+kWS2zqjzIw4sQ==,iv:dWWjM3H7g8DvH+LAJEJW2vee5ng5me6W7TzR7iu/5kA=,tag:MFb8H7LN6WPVCpCmILSbDg==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:dxkmPtfVJGK2IcuDuiv4zfaP8S0JHH+731M4K+6YMrmy/uXZPuBTfXhM6WkRc4L8XNzXHAomAXD5/IeyPA==,iv:+gWza61xyv2HnPGmbdReAW2UE9PRi83QQs+TiQWWkR4=,tag:rAfc4lnPlM2S+8Iz5BIHqg==,type:str]
 sops:
     age:
         - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRkpyU0lJM3hvYmRaTzRS
-            bTAvSmIwU2IzQXpOcnVRWEZ5RDFXc3FZSnpBClA0Wkh4aEVzdzlnNm1CYlRuS2tP
-            WjZVaFJZRDFDVUxQcHBNVXowbnBua2MKLS0tIDdqQmJuc092cS9lR1o0L0tlNHFa
-            QWdUSHd6cDFaWHdTcmNzaVdtNEl5NmsK4y/mqCLVHt7VYXeb4QOWRBOUOlW80cw3
-            xXnLR9YDgU2qh7rhV1R/Ivowt4Z2nPq6I1JOZfGnG9jVobnX5FG90w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1V3lYUUoycGx2THdCYXFO
+            UVVocUZZRE1DRi8zUFNrSnNkYjVDNU9KZzMwCmJ6eFNyQUV4SUZod3pFL2toOW5E
+            cDNIVlZCa2ZnL1hqam1DK25NT3VwUEUKLS0tIHVWaEZvSlVBV3JwUXdjam1jY242
+            OTkrb1NONTlKNHBVSGxkckVtWDJpUnMKKVu5KvpVYsekISatyoblkMvdfoVulhvb
+            CVBUeFG7QPlsyciIRWglIl5dDh67cGjV5hj98A7TjrLIrZvXRUJK9w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:39Z"
-    mac: ENC[AES256_GCM,data:2g1ifSCHFIUKBscdCy/LXVMYeXmLe6sTkPNxci98xNJMPqOFOQol1+EdMC9VyU/zoyfSADmSdCrGL0juMF9jo0Bjo1J7syN66t9alCASduSj6YX0bMav794Yx+7ZkYXysdU1auQvHE1ZlfCHzGTE2hdlPggxOQWBekgezNi4SYk=,iv:JB6vY+a/5C//q229b5CnvXcS5XiwHF+2wjrbVGt2kmI=,tag:nlsPrHeCghT8AMj4puiUnw==,type:str]
+    lastmodified: "2026-08-26T10:27:48Z"
+    mac: ENC[AES256_GCM,data:8pUtim8rGYKbNEx4p1Moh+U2+Wyc3oTRnDNfqBIQTYLcib7lAfd+amHnon/TiKkG/eh301x90Z+4LMmg5VSEHDtvQs3WS8diSWOT5cKmi7bX7+g9iY3qIj0iGJGeJAc4QRd5S+7K8GTOxt6O1xRhOAMaLAqyqx76H7A/H2L9nb0=,iv:vLj/7STqmh40aAKiTr8CYPSM2pptayGEiGASfAsLhyE=,tag:TIRwswwmnPz20MkVRPo6AA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
index f0008f1..f3665fc 100644
--- a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
+++ b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
@@ -4,24 +4,24 @@ metadata:
     name: s3-backup-proxy-secrets
     namespace: longhorn-system
 stringData:
-    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:J4t+I5a1QzbZGYuqKhhlo4t7Bx4=,iv:CHQntadI/BUVnz7NnUb4bHVT0T1wIAxXbujdvmXiKTA=,tag:gDLusfF9XSw1MugzgEUr2A==,type:str]
-    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:UgsZPjk/aeT/UiVyQkWv0MCu3/8Ksi5DV+lU+l7DAn5lMlqqiQ3EVg==,iv:qDbCorDwvPweemZmfyEvmtoSYFvW8CVf7hMmWg5w8Ws=,tag:ZYzWoKjayKPz62EBrSplWQ==,type:str]
-    CRYPT_PASSWORD: ENC[AES256_GCM,data:ldr4AGJxu2Rk5XmAJg8ieL0vOVlvE7qJmQy8A47S31nlEkaVW1+q4l6hbA==,iv:vM10+ungkH7H/ADlmRlOsDlSjj8M+yv9tGS9XXyc+mo=,tag:P45JyONMRtgYsi+MDF3t+A==,type:str]
-    CRYPT_PASSWORD2: ENC[AES256_GCM,data:Ixrsh0SOErFNFwdxdI9tX1KGICzIl/UQcyUtvT2oAbWO6vl8FV0pQrAYjQ==,iv:ZOCROwclVQ2Hxlv83+CFHSBU1EIbOH3BSJNdj+pQpBg=,tag:v4ooEI7suaYYGwaizSDAgA==,type:str]
-    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:f2whrd+WUjNrwVSFOC0oKwtycIk=,iv:AMHS+BTsW8SjY/LBc09CNVvNGu1RXtLuQe5irT9WQDA=,tag:7SAgQ4hyrDbHESStXPkf/g==,type:str]
-    PROXY_SECRET_KEY: ENC[AES256_GCM,data:UxpDzFTsUwmSG43sZND+iKx8GMOEBPkBoHhJO6FKnvNdLAInrh70UQ==,iv:2CsaGrB85ZCBKN2qGtN+nUljnWOvr+EKXZSjUyDPzZo=,tag:MyzBMUkRGJKt55pyOi+7nQ==,type:str]
+    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:LKIjmD2hBfSIWDuBHdeq0ih0NqM=,iv:DylX57HzCAZzQ1Jyu3VfunVo2Y6gv9eodWDT9CAqGYA=,tag:/463+al31uZd7ejBuV+TXA==,type:str]
+    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:VABMxcmwp5Tz35mOyJubR9CiW6fkCIl8oMb2CN2Q9a89VIZvZY+QbA==,iv:hZktpWghbx7OhCWJyWEyVY5jVRHnT4KsV3bKrOG49BY=,tag:wjuHUFF9l1FQxK6mkUg9EQ==,type:str]
+    CRYPT_PASSWORD: ENC[AES256_GCM,data:iwJH8lbeEle7e9yCTt6JhS+JgoBJ24xz6crP9Y4kJ+3SdNpJfiAk0vDKSg==,iv:hY593cPbL65d902q0/hKL3qRFFaScNyhJ4vfNkV7WP4=,tag:w9lC3eZD7czFuE6GdYTyJA==,type:str]
+    CRYPT_PASSWORD2: ENC[AES256_GCM,data:w/I93QhSqxnqoHEOuBB6tEq8JgxLjp6axnwoFR2scuX/OOgzN2uaMTISCA==,iv:/Tdmur94Mu7iIo42sFyM5hMAOOoDDPdcaPI9HBHjgEQ=,tag:4GMk4uiftNZqJDS8m7NbVg==,type:str]
+    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:1tTUPcQlM3KlX3JEleGKgSFQ/VQ=,iv:1hZ5HzRQSlYnM5QeD4OSodbWdaRy2dCI8BviD7Qeu74=,tag:vMhuK9NljuXUWJC0PFkm7A==,type:str]
+    PROXY_SECRET_KEY: ENC[AES256_GCM,data:iIe6dXX8tBFKgsRpVCTKD/ywomR0bORqqB88iPn4TQjAd8CGXcWX0w==,iv:W1PfJOUk9AZtPkuG3EevifcAWOfwQElIdieIZXH8UZk=,tag:JWBUwj9pigaByao5QZCRnQ==,type:str]
 sops:
     age:
         - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyWHA0b3EzUUI2Tkt5RkZ0
-            SVUrS01oSzdVRHVHM1BaZFNHSHdGSGJwdUE4CnJ3RmNhdjBmRWFUYytXNWhjOCts
-            bitybTJWMlIxczRYa05DOXVUaDJnbXcKLS0tIHUxdlVvR2tCeXpOaTduaWNrQUZX
-            Qy9UVHdLNTZVcGorWjdFMjcwYStuNWMKsO20ffsi795zUvLsOuN8YL58aWIAY4pi
-            xjtkJSbc2+jc3+MENDnaoQaClaVfHaDnuaTRb1QHFnCeQap7nm+MDg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSDJsRVlyeUNLR0VnaWVs
+            T0s4YUVLNW9wYkNVZnpEY2I2WGhPSjJDakFnCkxnQ0JzZ2l5bDVqM1NJaFBCdlBs
+            MmpWR1dBaWcrSlRBc3dkZlZ3OTNQWDAKLS0tIDRsTkl6QS9talZHWkF6d1Q5Nld1
+            WTZFV1YzeVJzT2ZIK3FJc001bjU5YmMK3saW6t+tMcpHSRsJHe6BQE/zsAXsEPMP
+            Yyi5wRPeXilb5AITdkIwhapJvOUg59QeQXbjaHm5ponx65xgsX2z3A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:40Z"
-    mac: ENC[AES256_GCM,data:EO4zFVa8OGiroPf7pSD1/R1j8OV+DtrrLLwHGz24ePg2F9DusW3MsEeLNSmj73oocyD+7HE2o5wRNQt0ZT1xdcg83tUd2q8eEnlqyk5GPLDbVhlWrz5zXnEWEdSwhkv6fLGCR9reoz13mpa43PlTz/Bgv1p5l3EcyqriWnTi7WY=,iv:UR6695v4lKppCOHYfa8f8l+uKwDDed8Rdyvf9xLHgV0=,tag:I6UL1/57ItNytUjEz9Ljrw==,type:str]
+    lastmodified: "2026-08-26T10:27:49Z"
+    mac: ENC[AES256_GCM,data:9SmNLuA+OzG9d+kORaXRXx1Ak2XfoTHZIwS6dSoWgC6hAagFXlRfEfNBCFh2VsRkllcOrEqpNcZg0SPRUBrPgTseEVrmmqf2GE0bwUgHlmycIIFck2y8ATpciSyPsD0A6teSNdQdsLU5EM+e+unPS5neRvW1gfDSUnXSgTt/ifo=,iv:GaPeH/9J4QJYRkvoHc/bUFIF1sVssSB9cHqqlWOxf/Y=,tag:T6lLGinraOPwF/O/kaDOFQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/namespaces/photo.yaml b/clusters/base/namespaces/photo.yaml
new file mode 100644
index 0000000..9898f73
--- /dev/null
+++ b/clusters/base/namespaces/photo.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: photo
diff --git a/clusters/home/apps/immich.yaml b/clusters/home/apps/immich.yaml
new file mode 100644
index 0000000..73c5cb2
--- /dev/null
+++ b/clusters/home/apps/immich.yaml
@@ -0,0 +1,21 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: immich
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/base/apps/immich
+  prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra
+  retryInterval: 5s
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml
index dcd3c1e..e33f142 100644
--- a/clusters/home/apps/kustomization.yaml
+++ b/clusters/home/apps/kustomization.yaml
@@ -15,4 +15,5 @@ resources:
   - infcloud.yaml
   - syncthing.yaml
   - nfs-photo.yaml
-  - photo-stats.yaml
\ No newline at end of file
+  - photo-stats.yaml
+  - immich.yaml
\ No newline at end of file
diff --git a/clusters/home/namespaces/kustomization.yaml b/clusters/home/namespaces/kustomization.yaml
index cb7ffb7..bed8eba 100644
--- a/clusters/home/namespaces/kustomization.yaml
+++ b/clusters/home/namespaces/kustomization.yaml
@@ -15,4 +15,5 @@ resources:
   - ../../base/namespaces/finance.yaml
   - ../../base/namespaces/nfs.yaml
   - ../../base/namespaces/syncthing.yaml
+  - ../../base/namespaces/photo.yaml
   - ../../base/namespaces/photo-stats.yaml