added decryption to all layers

clusters/base/apps/vaultwarden/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - helmrepository.yaml
   - secret.enc.yaml
-  - helmrelease.yaml
+  - helmrelease.yaml
+  

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:Uy/+m1mFpQykAeuOfTVEapaAHhdeAWiipON8euR0VSSPAQ35R4qSrxcMeK20yL2CKflPT4Z2QJTs,iv:Opl2uGeOa9F3JMWK7XGAHHPOhOTh+ltRihmFYJxzioQ=,tag:oODO2m9nHsVZUGYe6e8TZg==,type:comment]
+    #ENC[AES256_GCM,data:97aoEG9/vrrxEReD+bSwY2cHvO8h69mbyWYnD0MxQ2jnIftYvpjXsP182R9vTj8NwwtrhHNLG7SA,iv:x0oz4TNMIYsd1U8IaVG1TWqT+ia3shymCcxDt6A67Co=,tag:NVL4Ex6aIBjyKqgz65cVwQ==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:+J0fZXOsh9hGLF6x/HjgFnVRlWpbmNcIjVhEywYhVtEOxXQJ72R80qck0Xy/5QO35R2KzLhKUhOMsW8UzRA8pBej0UsA8Ugo0N+zTskYI6B9aJt/L7RrFcJNOw+93+rBBd5vItobkI7gT8eVaxa99OtTmx8Iag==,iv:Q1Xad8r7vOfnQc59y8oB/pz5m9lr68MbrWBINPsXDGw=,tag:QqHUkdzt0M7bfZxha1QM7g==,type:str]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:nMwAl4FEaz2Vi4fEDPn9TA1H5dCm1mS10WBjDZubL423qioazDC70wT7mjHlBU4nzmf5EmUsjkdvKS5QxM8/BMWM4M/VUjlHNqFTnHASxWTtd7jTtc5jrWuSleIw9IDhA8jd24dagfl/Ya04bf4XJGpujM34RA==,iv:UYdtC863FYN3qRZfUUOSPbs8JbYDqCqlnuGM6lq9IOw=,tag:FeNHcR1QT2rz+fHnL/YwwQ==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWdisyNEVPcXJ6UHdRRHFS
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGbWlKWFBHNENqdDRWTmZT
-            MmR6YTdqOW9Hc21CWU5lN1d4V2FkUXl1c3hVCkU2UUdybU5uNXgzUTNDQTlFeURD
+            RC9jcHFJaFZBUGlzaTBtUC96cWd5TTZ5UUQ4ClJjMVVwQlFSaE9zQW9abDUwQ1ls
-            QnFjMW1NYWFkQ08xM283c1dWK3VEWlUKLS0tIDRGWkV1QnBKN2ZJMlBCQjI4NFh1
+            dHVpbUg3YSt4cDFIM3Y0MGhvYVcxS0EKLS0tIDN0YWR0QjRDak9tZ2wvQmhidis0
-            QXhGNjNsWGlKazhWWUxVaGViRWdBQWMKTcDjzjbqIUrTQpPFPcydUz+21YmiePU/
+            cDlaZ0VoWGE5TVc5VmRWLzlzZk14WFEKCxIPcI7gmfbOi58UOCayqsR3ktZZpNYA
-            PBcddlsb2rehOqpkGhBJVrEjxGD5pNdG/KM2+p7lqnLqKmxkczY+fA==
+            AfFHJbY/opH4SmlW5NhkcJsHUrh5u3kSIDKFqY7xsb9KH7cRT7wOxw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:17:34Z"
+    lastmodified: "2026-08-26T10:17:36Z"
-    mac: ENC[AES256_GCM,data:QGoWeQz0NleGjpB2DkU1og/uTPdXNw3lvU7ylUSTec+Yex9ahCansSGhV2M+bNR5Y9hwL7b0rrkHTWA5S3M2VR9jFB5fUJIN1eo3+HEUT/DVU5z45DpTb8larEWygWZQjmfuOv1VMZWS3UgNxaafuLCfZukxxMlnMS0vcONneu0=,iv:VIqQPWqpnz+DCNFeKum1B7kn+8b5rfOwxC2SSwFogQw=,tag:cvKyRlGr/YgwazebsVy9KQ==,type:str]
+    mac: ENC[AES256_GCM,data:mSWeO9h+Dqr45vjdKGpC6e07Vg/rkH501djGty/2ncPtasiPTmL8/YrAZu+7tv2WTezX1FA5qhVTpzTNBfi4lsToAhfc+5Pk76TdynGOOkBw+Hc1nh2BhhzDafpeEaGLcUavVBljfGd+Eq5GDo1GIEZkcXoXSvupxbyY7yA8bh4=,iv:GA25lGz1cqpq4H4qbAET68553IZt6loAbN5qH03uk94=,tag:3PBujBeE7wIhRtlgp6QfnQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/home/apps.yaml

@@ -13,4 +13,8 @@ spec:
   wait: true
   dependsOn:
     - name: namespaces
-    - name: infra-apps
+    - name: infra-apps
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age

clusters/home/infra-apps.yaml

@@ -13,4 +13,8 @@ spec:
   wait: true
   dependsOn:
     - name: namespaces
-    - name: infra
+    - name: infra
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age

clusters/home/infra.yaml

@@ -13,3 +13,7 @@ spec:
   wait: true
   dependsOn:
     - name: namespaces
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age

clusters/home/namespaces.yaml

@@ -10,4 +10,8 @@ spec:
     name: flux-system
   path: ./clusters/home/namespaces
   prune: true
-  wait: true
+  wait: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age