moved radicale to c.aggtaa.com/server2 and davical to c.aggtaa.com/server

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -34,7 +34,7 @@ spec:
               tag: "82-1.1.12"
             env:
               TZ: Europe/Moscow
-              HOST_NAME: c2.aggtaa.com
+              HOST_NAME: c.aggtaa.com
               DBHOST: davical-postgres
               UPDATE_FROM_OLD: "false"
               PGSQL_ROOT_PASS:
@@ -74,20 +74,24 @@ spec:
     ingress:
       app:
         className: traefik
+        # no cert-manager annotation here: radicale's own Ingress already
+        # requests/owns the Certificate for c.aggtaa.com -> radicale-tls.
+        # A second Ingress with the annotation would create a competing
+        # Certificate for the same host/secret.
         annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-prod
+          traefik.ingress.kubernetes.io/router.middlewares: pim-davical-stripprefix@kubernetescrd
         hosts:
-          - host: c2.aggtaa.com
+          - host: c.aggtaa.com
             paths:
-              - path: /
+              - path: /server
                 pathType: Prefix
                 service:
                   identifier: app
                   port: http
         tls:
-          - secretName: davical-tls
+          - secretName: radicale-tls
             hosts:
-              - c2.aggtaa.com
+              - c.aggtaa.com
 
     persistence:
       config:

clusters/base/apps/davical/kustomization.yaml

@@ -3,5 +3,6 @@ kind: Kustomization
 resources:
   - helmrepository.yaml
   - secret.enc.yaml
+  - middleware.yaml
   - helmrelease-postgres.yaml
   - helmrelease-davical.yaml

clusters/base/apps/davical/middleware.yaml

@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: davical-stripprefix
+  namespace: pim
+spec:
+  stripPrefix:
+    prefixes:
+      - /server

clusters/base/apps/davical/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:F9vmsL1RhEBLZlTm7cYmehgIeL36t3PfiEaGPpD/UGwKOAcXPzDSuOYYL4fE4Fa5,iv:V55cLsEUi6bYW8p+e9qn2dRyo78HN11fjk2/ifQ+nBI=,tag:8EMBxC98sn/MiVEKn+fYgw==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:Q9fxa0/mANahCC2l9KrUKZJcslNtUFIiZSsigzQvvfNlTTThIpoprM55zNtgSjJy,iv:pFtqdvo8+BBjip59py+sOatb4pOjNCgspxlf6pywG30=,tag:ERt2S7DTrFTsIbt9dRWmwg==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:/R/aQ7O0FK2xmjom3rN1t57cdXPhzhwhoeXH+uO/RkU=,iv:et7ixzBm5srmi5Y1Qfg5iOu109GIAJMrlVFiL2fbP8E=,tag:M7Kjcy7l/2T/BiYnxI9avA==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:kov7rlxHbjXaoayqP3UhjGPPyagsxA+DutQbuNzMqo41PTa+1AA8cQoZZ5QbkLMp,iv:4hjs8aBgm11Iq9K+wxXDcTG1Ee72I7m8i0s7rGfl9sM=,tag:zuOnX/6y9YAAkk4WkF6HJA==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:UGHf34tRRAVr5A+dHSxYkdDr6vFunjreFIjQsnTV0eiF4cXT96RKZDnWX/tAYzzC,iv:uZLRYgOEgfNbbMBIQI3uVEOr0VtgCCQlwVJxBhNCZPM=,tag:2azyVW6oj5Tz5riN4LEmUA==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:nHWF4fD207skRQsF6ZHloPlXUc6nOBNNSG4By6K84aE=,iv:Pbt4nx1MWmgFh6EltrU3qleng2HZpEynTxc26CGgPMI=,tag:8RK/nzUJJH/lhBeYpWWleQ==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqbm94ZjFiVGdVM0RJV0Rt
-            TnZuM09VbXZGbHRWUUlJVjdETmR3L3FnbkZzCkFLMmsrWm9zZk5UbHprS0JHV216
-            Q1hjRUdERGFLTTNVeUZTQmNJL2VFMHcKLS0tIGpDc3pZTkE0dFdHYkxlKy83R2pB
-            S1lDZFZScitOWjVheVF2TzNWQzZKRTgKT2eq78o94ZZEqJh8NlZ/vmq+T5XfSIRZ
-            2AAQ0uFlummfxOPkYt3AhOvStyjFOfzJ6nKTad1zYym1JBKqYCBRJQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuMGt3OFhScWI4K2FMeTZS
+            djc2ZXN6emw3dnViQXNpLy9obTBzeStDZzBnClBjcFJjU2hEc2xiRGhMeW5RWFFz
+            TnNvUEhsZm5mWXBVVFI3L2E3S2htUkkKLS0tIHRNQjhIeGZtWlBkWUt6WTFELzQ5
+            TURuSDBJdEZRNFFrWXo3YzdObE9tdU0KFXr6yBqTsrtnWeae+yONQAphX14HmAt8
+            ptypIfbaxaLjtvNw0Dg7p+vPbDkCeLcLKAaIgo/xVnZFAaxJqzCXog==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:48Z"
-    mac: ENC[AES256_GCM,data:RUp7nDlmoNBgQ5txyshNiXSiP8uobdzmPEnlb0dz1p/ERaIdYkZ//1vGjUu1+zzCjLhzA/qMNPep7OygP81anpHcWEszpHUUhLJpn86gVqmtrzTCkzhD4j2LtCpff7vr9gygXgPWjeE2Is30Z4T+jY820k97OJuha3ZPDfiPHH0=,iv:xrM6SxvByUmFILWP1pw2ZAPVT4bTwx9MEXUsa2yxHPo=,tag:9M/EneO6nFTeCd6exA5dyQ==,type:str]
+    lastmodified: "2026-08-26T10:23:55Z"
+    mac: ENC[AES256_GCM,data:vzYxxZE6kkuskQrjC0dHFbTk9fW9S28Vk77qYz9depHmNyTj0jxIhdncGEiI6ymuKIOPdUAnkWnehMB1nnpowVQ5gC7kbxcuhTlhJQy4pEDWEcOq3967+JIKW1yj1/pZSw/+EP7GkL/3WLwhZy6NEajBovOfOxOyYSWiJFlCkrI=,iv:1lUPYy6lMNFVgSS94WRlJAeu7tS/LZjcixfhxYgJD1E=,tag:vcffA2DsUPppBuZGrwNuIg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:wnjs8cQ540XzvapSOzZXhrhJUtf/3k90Uej4P+0zWyU6XCVSp9snVwcLUUFX66QrR4/8YqEytQhPRN+5esC+8A==,iv:ebwbGC/rcF4jRiZ0+gzrBNUB6jcPVawBqxZr5h+VhVA=,tag:O537kZd9NNxJyK+K3qUCmw==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:0i524L4kKsJ1flPkW3Yl6kB9sccddkiKcykdm4N5/aEXChh+amPVaO+B2XtB9jyB74S5jw52FpIxKUhYSwfvug==,iv:CtDQSmSiKYH9lY4JM8PIHxLdf1AXNhxIrd3IV2sJ9CQ=,tag:zek+T/cW7Z/E/Ue7BaJIKw==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:zYIB6DI4+2Wk5kdVC7PEPC+WJMvYg+9IHMGGxm6rP62CUOZvnkRK05RRq5oLbL6Gi0G706VmZ/CRYtWSslckQg==,iv:4/NxKZlTcKRLM7YzsRa6+B3w+PJv9RKru4MMCz7LP2I=,tag:F55gRQY0Z0yIz5Vevq0Crw==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:aKY1q/Awo7+ci3xZMHZaAKK3+paQQgyy2LMHq6ejJhv0b1x+szeS0sQn1gJN3/ZTJOZe9JXPys101fdwpjq1Sw==,iv:31PI17QQzSDNptlSNRm7F+Y3dMfYj4bZ0NkHVDmqMmQ=,tag:NJGfmYZbf0M3kUspvXnkew==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:0LlmY1A1QJtOe7RsojaKc27/a9JucRgdCbdDmDmZWLnPc4OxeeAxK/7fPbZxJfnurOD8vhlDGIF0cH923QUkxA==,iv:3Z347Zfby5/YK6qHC4+XmXYm5fuEWk8y2PJRfLWH5Yw=,tag:Sffxe4aFabT34TuPzYBPkQ==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:eTtFXHxc3Q4S1CHgVduVE336gWetZmRhwNyMkZVgWPz6vScohkBAFB0cr22igy0ZNaKH2UOAX6PwdnnFJnxVwg==,iv:JqEgESEhvyqkBBUrC2xmsJObfu6m6cNVj36Fl2nICiA=,tag:eaP7f96gQtFzW+bXkz2tEw==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUXdkTEUrWDRKZUc0akRX
-            MElUa3gxK1dHT21VNWkzWGJ4UTFvY3h0QVhzClp3OEFYNGkzY3F5RWVmcnhOaFdN
-            ZXZlY01DakJxZjNDeW03S1VnZEtKK00KLS0tIFUxMVR3Rk5DUEtoNFI4LzRqMnNz
-            R05uaUFTYkN3Mm4wdER6dkErR29mNzgK9OhbBwd+nSETBXr/6kfxFRsNuRzgl5t7
-            HfkubCstROWVcLqQKXR7Gc+1R29kiV4kLFkTlIbFjcz0YAwycMvqYQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3cXMvcGJOaUIrT0hMajZx
+            WWZidE0zWkxuM09Td1pEdVJxbXI5dXV5cWpBCnB2R2pERXVmWUVSa29sN0I5OVNE
+            WE5KSjREa3IzVGFnMkVxdkJiOEhlZ1kKLS0tIHlMREtJcDJUK08wOVNsQmtUNk5z
+            MHZKaVpIV053SVV0dElRQlBFTlFxR00KRwVgrNpuSQOGITUubQWKleQOP6MgD3NO
+            dSl2vElhmgpFuE4ktjErm6uAIQGJwnObhQ0/AqqqTE+tCPsv82zWXQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:48Z"
-    mac: ENC[AES256_GCM,data:+L5rabMwEKPnDvzGLFI+hwcYsz8rJCVmgAgQtlDu5BisHyNRNzYpbeqsNlOUcBV8tE5bSbfj1Y1M3VYGu46UybNvSLFI4xmm21WPSVU26eVhMDD/HMYcI9l0+oouaQc6JXVefoqH+bj/oq4ZmgPAT51YHX045lkMzPFHAls/s7o=,iv:Qa/y0S2PtKKXHJ71qUaQ0iNBQl7QP9Xp8HZC+CkLXAw=,tag:bQec24mFEXmV0jnmOLpmbQ==,type:str]
+    lastmodified: "2026-08-26T10:23:56Z"
+    mac: ENC[AES256_GCM,data:BCRzd92MXgbAPLsYefL+D6jgq9K4qu3gzjwcr7w+fG/VUG4eo3NG+UoBxhe1MATLddbhW05/OadluRm76NXMXZ5KlJTE7wxDHhQJFJ6BFdhjYHs73GRMnZqGCYzAztWUD+E5Tk88bOnm06HN/YtFP8Mow4uyWJ2FV1IvmQ+8rxI=,iv:HSuZTorUrnt7xpFOEr1RHYtcMAiuYtaR8R43LcMJIC0=,tag:U/KvhjJqPisDKtc/IrvGHg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:e42O88wTB6WJSS/pJdL745ytq0xF79S3S1q8F/Vbelbm6wg46dsvbop9xZqbhqTPuMKC7mQERQg9zrZ+qlB8YAtPpDE/uOhOL4OT2ekVHPRlVHJpjcTGibpZW+8Mc0cPr9vuuoxgQd98Q74Pw4FM0ZChqNI0OhxUq8nFhqm9FKLhkaAoqGyKJfSMiF8U3gT6Kg4uKGbPejvOpC/8Z036TrH3csGrDvvKA6c0HhdqFLMkAUeIdE6QWXgeGlcvFw==,iv:3b7mJUBfaROarYwof0Q4/GPp5jIqh7L8FVmtR10bRzo=,tag:w1G6kF/h9cQYqIbPHyB9gA==,type:str]
+    passwd: ENC[AES256_GCM,data:4pQBsZr45voHIjkNNp0/uCv35gWYOQjc+YtIH62Sx5JPYeHYnGuFxK24jJiDW5CgIrnbtV9gxARqX2CWDL52TuePa7LhbQ4M302OuOE+n3N5fC6OLWV2LFs0+vgfNjURkk0XJ0uxw+IFASWMcyuBtoz+Fk0plXG1hByxczGTZZzqS4VPz1D910ksqa9S6GaEao6Tf/xMzRwNMPyAVgXBO+cIzTHtZ1Au5ju+N/4Lz18niqTMr0sCbrvtFQu/+w==,iv:x9eZFk1PJrXt05paqSiysCyPRxk1KbMgekWZ/X8JIFg=,tag:B48buiEEmzii4gbtGBTV+A==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZk5GR2JFWnF4aG4wSk9D
-            Um9mWTZsMzJ3Zk1pN1pJRmQ5TXkyK3hvdG13CitweDdEbGg5NE9HNzl3OXBkUGow
-            Y3NUalZsNU1VWUtNRlR2MHh4YVZRUVUKLS0tIHhKeEYydjJ4aVhTdFNQSTBLbWdE
-            aDJiVFhkcExvYTNRVnBRTDJ6S0NNcjAKPOpuiXoSsXLvXRtJATDxbg1T4wulQrxZ
-            4LJRkgLwwtksqLFBfkYG9MH1v8+C6VlARaARdVVpnq4WlnLTwI/wCw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUENMVGI1MnhrZGdZUG56
+            ZmRkZGVQNlc5ME1UM3dKVXBmeGt6cSs0UnpnCjA1YmVKYkdHckNFQncrQzNqUUNC
+            VTJHN0RCZHlnWGpBeUljSUVXaTNrZ1UKLS0tIFNYN2ZFN3IyUkh5UWtHKy9ZZjRE
+            Zkpvc0RLRkRsdWRVZk9wYTFIcTgwSEkK001PBCsUl8TQVsg21F6zMW36ZIkj1O7Y
+            ZvMRu8NGTGbIT9INMzXtGaRnQTOiy2zekyu6ApRqYj5WmPFCcVg79g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:49Z"
-    mac: ENC[AES256_GCM,data:Mo1RiEbhwyA9Qs/55pN6SUQ8MQWHvvys/HRmgoSev5ENIrywyAcD8gPTWXP9CB9k3ZeJDdEiks6EDV8X63TlBW0fSSs3gc3kECbMyyvYY36U01UkBofUsXVvtCkE8tqlEhJLqPKqER4uZZNHGCVXh9PNZ3duxF0M+k6KRDDvngU=,iv:9KKwb+6/qj7UCrFx9RBilGU2dz3H9Gix8ssiEXRyPtM=,tag:C8pIlA4oV/TGl8bI8ntBzA==,type:str]
+    lastmodified: "2026-08-26T10:23:57Z"
+    mac: ENC[AES256_GCM,data:BZKVfk5KKnJUJUlmDnXuL+VLzUbURsEqiF9yGDnOgfyFvDmqym5eviuxIxN18u4I0NAcBBwpfB94+a4D24gUgcUx1HlXfIrUnyRRxNgd25f01pEfF0+VYGOd/PQd90EfgVMvhXWgdQ0g1elCQdI31vjF3nAnYcZi+awnSggNttA=,iv:6DulSUFPoOa+FXMZArMx3vVes4yWXXhZAGLJdVDmOSM=,tag:JxRCtgetKK6458/YM+xSMA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/radicale/helmrelease-agendav.yaml

@@ -23,7 +23,7 @@ spec:
               AGENDAV_TITLE: ""
               AGENDAV_FOOTER: ""
               AGENDAV_CALDAV_SERVER: "http://radicale.pim.svc.cluster.local:5232/%u"
-              AGENDAV_CALDAV_PUBLIC_URL: "https://c.aggtaa.com/server"
+              AGENDAV_CALDAV_PUBLIC_URL: "https://c.aggtaa.com/server2"
               AGENDAV_TIMEZONE: "Europe/Moscow"
               AGENDAV_WEEKSTART: "1"
               AGENDAV_LANG: "en"

clusters/base/apps/radicale/helmrelease-radicale.yaml

@@ -40,7 +40,7 @@ spec:
         hosts:
           - host: c.aggtaa.com
             paths:
-              - path: /server
+              - path: /server2
                 pathType: Prefix
                 service:
                   identifier: app

clusters/base/apps/radicale/middleware.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   stripPrefix:
     prefixes:
-      - /server
+      - /server2
 ---
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
@@ -18,4 +18,4 @@ metadata:
 spec:
   headers:
     customRequestHeaders:
-      X-Script-Name: /server
+      X-Script-Name: /server2

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:yzdsBQJq8wIdf25/795j1xycUH033fbMenHIbJogzSPgHqYAf6YiffiEtMr6nDO6On52OmylGOdg,iv:TitipQ6QUo7MQq8II3G6b0zBQhPRZmRY5HhhEXBAzbE=,tag:f2prkk9PJYGHU8xrXOeWww==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:RU29VOy5teNTpFivSqRfDGSKVf/rYLSH8fKXwTnBLHNM3SC68JTR8UfUs6mqspfSm0TeYT07QbnZXvlnD4DfrvDUbprEqG38UH5jJqKAtAPwNrFfNqFO7M3ZE6yjGpeMmwOIWgJNIkL8S/0lryF40XNbUFmSYg==,iv:x5dBZOjte3FYWOXzhwLyE+v45CLJ2OFU+wsY8A+jKA0=,tag:UwSQH3wh18DjLSU82zIuBA==,type:str]
+    #ENC[AES256_GCM,data:ila2w5bp4I/Q93l0DydzjnfkeTCz8QOLMfVlPZMNdFSCEqGMZ4UKMVBD8M9Og0bhtE7yZoUBVnbE,iv:1fDKmv3EU0VEkaQYoXHyDO/VE6NGE0Czp8mjxNjsSqw=,tag:uDlk3yPvXxiqwPHzTsyb+A==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:1N20XxzglpNoa7QRP1OazPWmvSKJd91a0yS7dsrfcNxUw4wfZKFZ9XgHLuvaJIUT2ur6r+dixH5KepqvIgchTNOxIYDe3V3Tv6AqU7C9VqkvtnOEUoCwv4IW7bX0snwsQRwaIshOjGY0QHJ4ZIfAig0B+t/otw==,iv:7X73ausPfwLAl/xOSUujR/pNrBvm3FdzI5qBv0bm5PU=,tag:godlm26kktM0NWa5xevtXg==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhTGcrRTFGQnlQZG5FSGtY
-            V3FRUzEvelRNQmJqV1lEeDVEQkQ4Rk1pTFFrCmt4SDYza0dYSVlIYWlSMDB5cXpy
-            SzRESHQydVBIM0xPNVhWWmpvTENEWGsKLS0tIE1RRnpjcVA3M0NVYzNTS0FVTVJx
-            eUZpMi9NWk1ObVUwdVVLdUE5TnFHNzQKQ2cVp4uFpkgG8Y16AXgzpOVjOU9lqji7
-            /od6VvTIYBuUoej4/FxemBY3KmO15w0uDTsBcc4hKjs3tqrA2E5JhQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbnFhaHdBOURWQlR4ajJ5
+            Y28wSHJ0bTJJYzlmNUFDSWxXakhiOWRrc1Y0Cmo5eENqN2VFUC9VVmpBOWlTRkdJ
+            Y2VkSjUvZ2FBQ1FjS1JDZnlveVBhOU0KLS0tIHRRY25hTTF6TVpJV1FuNzNCMXhs
+            dHMzS2praXpoa0pYa24wd2Mvb1F6aUUKSMl3gXAQTW/n3CFzYLPiRfWmmVnUHJxp
+            cMVEwPIoKT7g3a2e+isrCMIFzYO6DUB9R0kOcnHJp/GhYYQ2YBXBzg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:51Z"
-    mac: ENC[AES256_GCM,data:Uop6TQ4pHci5QKh14iYL12nXlWWMtYp1woHcsgbVpHOtZJdZcmwGTN/VxMYBbnIHwCTs2evuVbv95Hd95lii1pCffWAc+fhwbPFO0jNU1Fu97XnT9niWVKp2imZvogr8bXjNpaAkvHrzA+FaqXTVBgqhHu3FHAr6iVLZsOVe8ac=,iv:Ue9BVHy3cVnlNIJ6JrEVX5H6dTGyb9i/7lZY3MA/gdQ=,tag:R0B9JNlG0QDzlKS12LLBng==,type:str]
+    lastmodified: "2026-08-26T10:23:58Z"
+    mac: ENC[AES256_GCM,data:qnYgvLthPxLuZlFegesa5/Qr/9GeOVnk+4FotDPyra2yFNQcpOKfv9jW7gWZ5uJRzwr8XEOHmkxpmKnl6kpCEsUSb7+nPFFY4kKswXPuZQxx+l8y0/6ptAzc3dkLpJr5j9+a/WqRHAvswUbTDzSxFPrXzw9h8PLHpwwlCT/BC+I=,iv:4QbB6wxcjjruTttctusi0zjBDW/9mmVqLr1rhd5HIig=,tag:fA2YuRCK+DIrJMVsHpYZvA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/webdav/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:m/9uR3U=,iv:yz6l5oPOsO2JyneQhK+g50RQvxm2uGfLigZ0JDvvIaQ=,tag:njjKt3C5eD9hxGcdpHGqPg==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:ihC1StaF89kl4CFle2+gCRylp28Ll+kmucPhIzyQpyhKZ9S2lEfG5pTffcPOat5D,iv:7ka6qJU28M1a1aENXOMqSZvJ9U6QDxoiFiB8mdsg9bc=,tag:s07EeJouICHZJaYf9d0JoQ==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:YHfzo7Q=,iv:5raysc/XOAw45l0Ok3iRSBNuXfkAH2AvKsRfymRZE1g=,tag:mTEOTKYYunCOtXzcTJGkIQ==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:5Sjh8CchRM4HjuP8CTeS/ekriRc1j/qUlA/TOuQLZuKV7wwSXhWZYHxo6zTX8wBM,iv:M6WWswYzJDQaPhOBzlnB7JE7UEAjF41ZUe+zfESd3Fw=,tag:WTYqzNxe86vukoipK6vCww==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVYVhQbTNycndjQlNvTzFx
-            Qkh5Q25ybWRZYSt6d29QbnRTNmc0a1YzMGxBCk5vakZ4bVYrMkxUTEN0UFNmVVB2
-            WXpTNThBak5iUkEyMlF5elIxSU9LRU0KLS0tIHJvc2JwOFRKWEFBVk8yaGx1Mk5r
-            d24wdjZnVUh0ZVp3eXh6dFN2TXBmVVEKPCWMRk0YkA+LBBZIjG6jt+eIQeKenAYn
-            kHGOej8/Yt1u9jxuXHSnmD0+bbV0A6Zfs2ODl/rPc6LI4z/mE9bG8w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRndoamcrTVF0Q056WlNa
+            ZjhRQjY2aFJWZExYOGlkQWZlMTFDb01Wa2hnCkM4czdUOG9aUnJpWHVsRHhUVUR3
+            OUpwTXF3SitjTnFMamJBUDBFcUliUzAKLS0tIHRXV050SXlIdENyWUhQSXRSbmZm
+            ZmlDS3h2cFhDQy85UWwxa3BBUElPM0UKhodc181NslVLEl3X2Q2Bt4ierkyK1ZJs
+            8mT4cJNowLL6J8kb/EZkHVvBNsNBdLXd+TxEkSBHDVHramxJnUhiWg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:51Z"
-    mac: ENC[AES256_GCM,data:AjNbhL26BH/FdIJhocu4LpU3DYELBdz4dE9Z3ue2W5TwFUxMDl6QV1sBND8ktx8gGbDlubmSsJIJu1o7e0QXan6TxUVMlSskigG8SlySvQET0H3jZh43zT+sYNQSop6fa+58r6MbXBhUn6jYmVtVYxvghLRDv8ypjjkgwoS0f2Q=,iv:e6EscDkjjXz4VWavU5aJu7C7vja4wJUvDPvYNmXUQys=,tag:BParuiWnv7llwj8y2ImpPw==,type:str]
+    lastmodified: "2026-08-26T10:23:59Z"
+    mac: ENC[AES256_GCM,data:VH8OzH6gpfRuHqBHRctUER2b+2ZfANg4tYM67pZKOuznEoAgyZWSjt7WDXjtV2yHQWGnK17pZTcWfJf0h0KfLVx1Ab3JOWwW0I3TBL0gNoL6TEtCU6Ot5+f5l3s6d4ZXWEqx3hovqZQPSwon+sTPuvSaQ0fEXIyTZE9U0m/McAg=,iv:b4Tmw7RUmMZeIj8PuSTiOBErovqnYkxz/QUpPwPAHVo=,tag:HZq1YckgzEWmw4+zN/9B9w==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:O3ZibINM06TdCCCpe/aIF3+Fezr4RpIszPFgdrkLbJTFU8sd50yXgHPa1GskhtoUqu58Uf6e21NYYBgvPoti4VQp/T528HNRRkJkP2FO7dPfpAsnRYc1hnfeYcaIdAR281BtYvGJVAzj/uwBvT6a6Nk4mahSt/gud0HFKvY=,iv:BG9mF5Wy6AKT1m3evgQPFlQettJg2TslOvsOSx6qY6U=,tag:Rds8xr8qfp/xv1PxPX22EQ==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:XNaYfWzsYQT0SxtzWlcwtHqdhUqMS3S4/6J+rdw8xC3fqhOGmCCQLHYieUsbSPq8jnRJkFdICc7eCf94EXUp54MyO779iKrfHi6BuZ7Ejs9+cbnwr6uh9bwl3thtQNTBtiZcQFLw3OD3r8vWJ0v7G+IPCE9sbdZh4Yw3dvI=,iv:RBUJIy2BggnnKYELCBn86Q3Fos9mpRbTIE6rVc+st88=,tag:fseW9mXV0a0Idlc/PEgfoA==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDL1JJODZMQlZjTVliS3c3
-            WWoxVjdKR280S09BVGVVRU1KdUNGQm1oNEIwCjZoQ0FXSnBxL0FpZHp4ZGIrRFdm
-            Q0llWlpIVE1ESnlacVVFWWY0NjVmV3MKLS0tIFhmOWluNWk5S1JOV3pSSVN1RENv
-            SHNEV0xseUdHL01veElVejByNzJjdk0KEUeaS7BrHcApYPEmzTyv/jK5l0ZQzyCS
-            BgIsWC08edGW5WzoMP0Owb579YMiXx2fIr8grD3K8uTaT2yKpFsp1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBReVNBK3p3OVc2SkhIRDBv
+            L2s3UFFyZ0ExZTZqbWt4RHYyS21ZcGVOUkhVClRIc3BrTkpZN25oc0I0YlpDSGh1
+            R0NIUUgvaXUzWi9JWmJnR0tpcWVaZ00KLS0tIEFQUUQvbytPLy9xckRZTFVuUmdH
+            SW5icGcrM2tsQWlWR3VtSVJkZ2RIZmcK/T7qMB8Xs/QtGUvEC+naP6AUBBGDj1wn
+            HZvBD8LT6Gox+KDm04OMFELo0ez3GPpm23aKEZusRQB0zGVAfnaDhA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:52Z"
-    mac: ENC[AES256_GCM,data:lHBkDFsLLK1bKIKb5JJld2LyD7Nr/qQ30olf3Vaslu51s7ypp1qMCo5XgvMVD+cOw7wMSV9tTDygyRcbXJJKrm8i1AlhMF1q7xFWYvJcE3O0sP12usdz5SI/JeLYuuMfqLCUADwHcknOwTi+11ejkabD8v18rYe3/q+0tArUEO0=,iv:UXMzWeEG8a3AKLVHzr5pFvPP5hslcMa92Y4a0xxXOpo=,tag:t/yDQd9Z9ec4L7S7oltYKQ==,type:str]
+    lastmodified: "2026-08-26T10:23:59Z"
+    mac: ENC[AES256_GCM,data:ohMEmtfNFExpgx/nB6UdSpqnKMwo4NwezBzrSHUZXRgvfzee/eZmKqDV1cLTmnMKAkdZfV2WOHYJm85q+2oZdkGtneiEY5FTMwEMlNRoLKG5aIXID7UOdDKjjJBU4n8qnCMyqnVQlnyu+QKvSArl43amKC7T/LTaqE6yVd1JgSI=,iv:BRN+VdWLkh30Gt9Bc3f7Zec76y13nYgFOMiprAt0o2w=,tag:wEd6XHace8vadHSL78eyZA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0