diff --git a/clusters/base/apps/authelia/secret.enc.yaml b/clusters/base/apps/authelia/secret.enc.yaml
index 7660bc7..bf9cfc8 100644
--- a/clusters/base/apps/authelia/secret.enc.yaml
+++ b/clusters/base/apps/authelia/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: authelia-secrets
     namespace: auth
 stringData:
-    configuration.yml: ENC[AES256_GCM,data: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,iv:U+s93EZpk8vSA5w4vNIh4Rm8RkiAlGutnUWZ/ahJZwc=,tag:Cz36bua9g7/kFlt0B1Tz3Q==,type:str]
-    users_database.yml: ENC[AES256_GCM,data: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,iv:3Hn3ukZdbklbG50IKgEd0Bk9D5TYhMMkmWqiUsSU8Bo=,tag:+aXhidsW0fVMrDEqouUqCQ==,type:str]
+    configuration.yml: ENC[AES256_GCM,data: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,iv:Ooos3VfOffy4Kq280mXyUxPWYtXkuSt+AqL1BRJeyZc=,tag:odNsEjNFqz5lr7gSEm+Pig==,type:str]
+    users_database.yml: ENC[AES256_GCM,data:6dd3ScoXcZg/WlGbu5NmV7CGEb15wFNJjFnoKU95luHP0OjmcRCGCBBusV7xb66ORO+zLCLgYYrcisPAOxWUiLjm/1k8eWEhDDSgESeRac7ufyuDz1O3ijWDjRYezUhkMeey5sKf4FDbeZMeRL8g6C0u/7Ak+Vkbx7/FFXVbTa3XD0RTJCutgPgIY9IChKR9n0dvU1z6vlA2BZ4rvbDG5V4eV05X5kFuPrXK64St1+NorxiU77q2EVGAyp1eMlSsXJweRqslqldeyPE5LMs5zxQnntWXkLFeVwvuAvG+iSFI60IM35dLR+R0f/H7Tvro9wtatp7PLT5skSWbBORIVBaphA6TyYvlM3zXb+I9nMbxnUBzj2sWssUhNjo2wKok1WjcfXYUSEtOpakcAw1PTG8Gi1xojvXz9BWQAwQElMQdVTAPCVFSJjxGX3NqEptz6O4E4CAwvfgxpLyQTz0iUX2roazGOFc1M8qTD3p/574PFIBC7nFSyIwUFiSXQMxqFM4gBgVIxWWpxOPMtHZ//BlAUtcENuYHtAeQvPLgYknezX4Wn9knAgJSzK99m81XgWnPIJYToPHdVglTcQdWxABCu+0wZGkr7l5EmZSoLMe/oBm1dXZ+EmmqaHoJSrBabsjWTYO6EyLplYAPbcWLQxpH2IZI0mP2M7An3vQR9LdOgK+QNKcYVNe7a34sl9Z8Ut5vylKOL4zK+TSlXli3Dux5EBrMUfrEIFsPPPqKegsDHfXA/ln8/2ZroZ4dBD9JpFVDYUE8IV1i3mP8FuE+cybL2eQc3tII6fU8YYLoiqEzqe4fSzOWx3/3OI2Lve3SiVy3dAXx8sH8A78rnRIgcDmz3qVsK/KygJE3PzRX01ERNE/iJBMSD9a+apQ2TbQx92O4eJSKk3PMSo2rKou5O/3VgfQb+GOD2TLsMzDYLlwIaM44hu/00YJyRviHufQMiHQy9X7KjpUntBUmVmKIxDk4IK7qZjzAjvic4SHaJZOJ9uPyNkczYFRSJkRlw5P9bwxs8ElYyFdjSiZ3ItMh0of28JO3zN1SEq8zKuB5yoRCKkxo6qQlEqi013mcuhyicW+qSLeJ5lTVJhWFRQ8VGW3Y5HCnneE9SyYSzRWUWjQdSzBf6/3PbQ5MrG15moPa5OP9M1UEgmClMiDRMw2ZlHcyN5M0X/8yYVbyYpyFtxfxc2e/Twfj4zdGPy1fCPIqGKycfqcEX+yQfhBBy9SkniuON0se6OKf2DhXyUXAbEE+NoiWpxgTUC9nEMFNyZA7Vqj8qp8YVA+bZ//hd0E/nCihfa41Sz1H3CwQ1Y8FauUmx9IUvpZloTxOqjqv0aFJvFqpu+tCCZG4wE2VUW4KOygqt1tOjaridoWSjoA54LmK8A2oPi4SBCtbu7ZczxEY0Ris7mi4B1OtW53yMtFw3K0dOm37pAd9sidA/IkBCLcAsh6zD9zvohQJeQ6PXzjLcvYoy3Yupedz3dEc8OQzzRTiooAjJOmgpum+R4/7n7oppu8BbKgndMQbzPdLi/hTO5OPJKhSwhOfXJbc+cGJQFX0rTDEUQbUdXn2CcvGXD+O1CNusK5vgW+TqQHA+hkgSUW9/j22rsj0htJOfK+8ugbiAYS5CIeg67nGfmdq6wEf8Krlo9yqTO3Av/d33JiHpX3TiZpPvtJhx063rUIpIyO400Ml4DVxoLLnI28Cupde0BxkQzjczHW0IrItTw==,iv:+ZD6HooZ67ktlTp4zrWyioVrUPuzm9kznswlAhBx6oo=,tag:7soi/SnFBwO7kKHTf5Mdlg==,type:str]
 sops:
     age:
         - recipient: age1ncw6uagcgncd5m2admqxt73ey0mcd99jsw9sa9lcdv3gu70mcerql8ya0k
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKZ3g0Z2xPODlSUGU5WnBI
-            K1VUSFNVaFkwTXcxcGYreXR2M25Fc3pNWUdvCkY3Rjdqa1N2U2lId1J6YXZITG1Z
-            dnUwT292SXkrVTJCUVBZN3JEa3MyUEUKLS0tIDdrS0gzcE9sb0pzbmxIOElsUkNI
-            V3NvUjRZNHMrMnhraC85Z0pxWkhzR1UKLwJl4x03Bj7bo8t8AfpI/MNMasN8nFqs
-            VYLiT8Q8FH/fjMWDnGMJpyx+8w4nFNpxGJcf6/zxxAUE9onODzq+/A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBReWJPNHFGZ25ENkNNUVkv
+            SHFyTElRY3F2ZjZmN2poM3FhUGp1eFRJN1RBCkh2WXhLd1RDQ0pqWjFRTnlzeENZ
+            S0xIMWFOSGhSSTlPRU02bnBCcVVQd1UKLS0tIGx6bzlIRXU2czZaMVhUTjFXVmc1
+            SDMvZ21GSDlLNHFwZ0lMdVZlc0U5Y1EKNS3br+jExKYyhXakxbP+dVwI2FMldvoF
+            TthkoQKC66SasQNqIDkHlJKLXAShRApxynstNOgagIM7wjEzLJ4l7g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:18Z"
-    mac: ENC[AES256_GCM,data:udjqrKFG1W1dbf9X7WkIY9W9MT1g/5QBTmlPZYB1RIN0QRYnUecRja0h4cPlTK0DjoCAi1JvKZM73UUhoWzXI856fbKWOlZHsg69vtCfU+IC7Igf5LHlDPDsPPehI4N6GXFxh1xatVPlcQbnPtwTFUsFP1O49078WqwdZjxey4w=,iv:qDFQyT6o93q+WwhDlIN115gmXFKaUExQRemLNfptywA=,tag:4i3vsjfxWELnLHkS9dyVvw==,type:str]
+    lastmodified: "2026-08-26T10:26:27Z"
+    mac: ENC[AES256_GCM,data:8UAxINLlDH8MrkOiRF3pTRybsXv/ucH8O0Jc1MSwDC1LSDowEDBumqp9LhmzC+p7OawjSVOFC5XEMFAnXly09IuKpoHpcUTUlS7tKsN8ONgIN7VDEOo5k0CxZ+Axo2mdw6YtkjN0q9cJCLKgRu4eagYEBZGLhUAISSz+er9Oc2k=,iv:seszRb1B/GvSGlYpl7FgvqvSuAky0N6vwjrVOCVLjB0=,tag:JNhxKvh4RXE93k4DltbI6A==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/davical/secret.enc.yaml b/clusters/base/apps/davical/secret.enc.yaml
index 974b75a..26e88e8 100644
--- a/clusters/base/apps/davical/secret.enc.yaml
+++ b/clusters/base/apps/davical/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:iQ3ChnFoNT3bEBsy4BzABi50d/Xa1nZdoTLz+ebaZf+Dcb9T66S89swk/eYgQYnj,iv:KEy1kYjNHI449piEdz5KNfojZOCsKWiI8UoXNNJqEuY=,tag:LNWUcsLsEYjwrisMq5qNLg==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:9ReNefhXO5G92aC9H9jV1MuUKGnx/e/s+YS9JdvOHD3QrbWAcNl7Bu/Znk+WdPdX,iv:PIIOHHrm3gznocJUYbetWXUR9dRsH+A0I7KNrY9E0jE=,tag:pvTwEBQ+q6CjpMty5AOIyg==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:D2/uVvEGbfiLODTQPUyrIu+EZ0X1gIXxp4u+fe5iso0=,iv:L/y5xgUoBnNhYKVS9vtToDUrmlPYSHXX9d2GVDZirPc=,tag:2AQQy+cPRBo7bS7gceZrbQ==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:d3/uq3ocK3kYoTcCXWtCCM6UgyF8obgqyILCQnAdfRQ6qGbHJ7lNZ4Dwark6TUxN,iv:TXqRMZMSzlrc7X+mzMlWy7CbKJK1cIhUKC3i/bbn928=,tag:NAq3H08XxT6hljw/PZYDDA==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:U+yPqm+JJ6jeY5vauEKhBMXOvHRzrL+BCz728iFRQU8NuV2pG/uFFFLvidbcJhUp,iv:KuqthbqDMFLvOJ6q6X4GexgSdY7x0JZEfc4FFJO2vMY=,tag:M7lMcSBA3V14MVmIvR1G7g==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:zJAvMGchenU7dy5YyW9J3yE7OxMfmUx6JdSl7zt3tRY=,iv:XYaE/uO4LfT9OXe/jykkCcUxc7CcGH6VHrpcY24cV5g=,tag:trrq2UsHGdqjI/nYDlR9uw==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQd1JrWDY4c0w3a2w4aStv
-            SmM3WXo1RTRpUDhuelM1MlVLWm1hWFBVbUVNCnM3MGRJTEpHMGE2Mk45bytHWGZT
-            WkRjSlhGdDB2YlcraXExT1ZmQk9Ga0UKLS0tIHhVZlJTTUFObzdLbElKdXZWUnNB
-            czV3OHBBWmIyVmc4aXpmd2lYbjNwakkK8zMw5WcQOnD7bx3PW9uUjBWCvYUMeF3o
-            Pnjg2O5rBFE8QJUEYfteMclmOViXsYzCK2LwGfeH8rIQWBpI0xTJwA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQTTJqNHZtSmlSaFNaVFJu
+            VUZ5alRXaFYrYzhoUjVWcjltMm9vRlpFZlFrCjR1TzJjNUZtcXVGTkgzWGNjNkR3
+            OGtCY1RCVkZnUG1TUkpLQlNnVjhmeW8KLS0tIDdGVEw4OFdja25yVGVDMU9ZSW14
+            QnRoU2k4c0l1K1U3MDhHb0tLRTdmNTgKzToAkiRTHkEN6J34Efzz0EJculyKf/46
+            zUDKYqV48oqx7b3WoRszNYvn2+pjQL72aA9kgJuEp9uyxzqjbS4AAA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:19Z"
-    mac: ENC[AES256_GCM,data:z0mVZ478jwASZXI2wUduoNuhflgdXuwCxjQFtD6BGZeuV0zLTk+SW+vffHIuKF4KkaETQj9yx3h8F2gzpn3pgdj4EpM30UuXujFEh8K37mBOadi2N3iBXs12Utxxadv9JMM6WCgqyh6GuB1+411Os0tvxuoe7R7Fjb5054P901A=,iv:u4x3fhMgpv6nWJIYoMhfp1y5B1tb0l3iJ8815WOjbGo=,tag:F0Zv/dLaOZrn8jxJKUNeNQ==,type:str]
+    lastmodified: "2026-08-26T10:26:28Z"
+    mac: ENC[AES256_GCM,data:8OcF8zTddH0wIOj1mEsHNgydiM4jXNBuQFe5/An0v1CivwmdxLCs1ROaMh43zS4TLodNJxoHORXBtXx+JDokdlbax4CtKD/P3BpWMYZ5VlDzLtO81JsGf2lF2IOjlih2ho053TJPExSqTdnh+JuLqkZ1u14LKSmXtAdmYCCzPMQ=,iv:dCaYVeVkbF2Nnrb4feLbEDix8Y+98TTcZs+PZlVbeWg=,tag:oukiZ6xufBQQNV4Vdflrtg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
index 12733ea..c856fa0 100644
--- a/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
+++ b/clusters/base/apps/markdown-vault-mcp/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:ddjdqtF4vOuWw6YcP4B0E22a45De2VfIrFwCRerzfcf6QW1ndcrzZqcXtBJnpqt7O03e1HkxGK/mrXvQW4lmtQ==,iv:HageUJ+oHJzbIaZllzgFGW+cmncWvuK4876NeqBIeC8=,tag:rKy+n/SGKoYm9vWlmGvUzQ==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:Wu+mzhesP11cPMMLxwc+GlNtNPbHuGE02rUyBrCEHYFDZpvKD4HPgseo5zyDdbrsgKVjPJm6Qz+RBUL9bMafnQ==,iv:yJ3sj7OPAsNxmyNV6lpefOTJpp4OkFES8gndGdVxePI=,tag:NrlhTTa/+RHAE06BzZmrng==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:3QAoKhi+B9btznZkyq0TU2q//hIABGtm5qmR2RtnTnmr/Rtfyc+7j2R9o8MnKug8LQFv0TqUi70KDB+gkPYJmQ==,iv:UT9KT9KFyrv1b8K/EZK+cT3ovrmR7X+YUMt5b30P7kA=,tag:wWehe4X3MIMw4olK/xmZMQ==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:smIDe2D44OZUsTp+Qxtfn1ikyq8gTtxiULw0WTT6jPCsIs9f/vDkGFUOmbnFeGrPTJ9NG6cGA+uDi6DSrZXGuA==,iv:r2PdMlVdXhSU9fKtENIJB4dzScvnVW8J8Kdvz1HG3aQ=,tag:8tSV0MioUhZPCZav7N9I6Q==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:n5MdpERQPszciQuXDAE7uUpSmARSq3Mkg8A8fxfxqqcArvOz3FghK1p+QeyoqzqtXWx5y044Jdd8xN052fZ6kA==,iv:0zb76TH5Epq3Ua2h1fU7LuilXidSNiJbRetu4uuVhbQ=,tag:XL0sG8E50d9yCCg8dn9cbQ==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:DbKM1lTXO+WROb91u1mXX8X+t3khCX2p/Bwqx55lmJ3Oq3DxzegRbKRKToW+NCLodCUJxZS3o/DJ/exll9whcQ==,iv:JvkrNxf83Q073F9nSO7/wY7ICxUfw7EHPZ+1ew1XUck=,tag:rwwz5CSCxANRjpG/yCJ8Ew==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRaCtYUTdIWmNTOGgwa0pD
-            bjJKQzlkUzN6UWVLL2NnQ0lvK3dFV1hMVGtBCkZzcXk0RFFCSzFPU1M5amV0dDdq
-            TERRSXVrcnVsRHpwZXZVanczRldpSncKLS0tIGFnRXZUY0hlL1RUWjc1Y3BIN2lx
-            VzdpcnlPTUd4bzhoWTJ1S3RwWWNtK1EKcLnckRjPVCYeoOF4Y/LzkSJN3w/ahcZQ
-            TVGv31cyj0J5Ee2ULeA4g+tJjJl4QHTLZjf21BRXK9r56Gyb4774JQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnREdJYWE4clBDUTZHRGxy
+            M2xxV3c5ZWNLRitlRlFnT0NLM3RYMlh1eHljCjlFdDVTb2NUdTd6VC9lMnk2M1Nq
+            cHE5UjVlUElLWHV1Yzl6eWdOY3g5TkkKLS0tIDdXY3VZcm9xSElrVjM3NEYrZ05I
+            aW93Sk13azFXVzJvYWJwN1gyc3lTMkEKAz5w3LUnlhRlWuY7p7B8udmHS1WCUKDA
+            UsnF8hQROKOem10sEZb0b8d9PW0c3RyiTfLWdFpd8niCyCNgZQRnkw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:20Z"
-    mac: ENC[AES256_GCM,data:uhZvKW9YcZpnvBhLE+PJ34KkuUgz5p3qujamB57N0chOtD8nnEzi86s8EHDoYmPzwioJBlFBicgCS+jI7zArnLRmTXzMlYIRzdlOyh066g6ZOa42Q0Kh/+pH9vGhYuc2Gyj+tBnQdw3YiPHLGWCEcKRWBDa7VP0dKutzqdkjT4c=,iv:UazdelCz8J8LRHJ4MYsiXhyNQtVW1UtqCxYoysLBKDY=,tag:QVg4ooL9MIfMtg0wAYG5UA==,type:str]
+    lastmodified: "2026-08-26T10:26:28Z"
+    mac: ENC[AES256_GCM,data:Jrwzzb1FGYAioCIuVAMWn1Vp2thJoDG9lC30a1mEb06oWyV1uEcbO9c4AuXsSCNlY35s766ogWOubRsxEGO4Bqvm4l65HUXecFHSsRdtUJgxkvrRjgX4RuJGaLPuJKHNX15+5JSMFUERaoZeMzVraMVHQN6txstEU9+XkMDzjAM=,iv:2CEDBDdzghqqOro/cH0eofv6w/eJUXHMozKrCNoYw88=,tag:18PtBAyOD3lr26/h6vEuDA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/mosquitto/secret.enc.yaml b/clusters/base/apps/mosquitto/secret.enc.yaml
index 201a4b1..95bb790 100644
--- a/clusters/base/apps/mosquitto/secret.enc.yaml
+++ b/clusters/base/apps/mosquitto/secret.enc.yaml
@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:3EKSXCej9iCP47Jgtd/YDvE8iOcL6ythBz43RdHDrRDZobqgBgP42eP00X8WsttykJIe4lYUwBIHIG4l4CCFanxx5phSpTwJLXGmcqKtbizo4joiMUzPMWD3iatuVK/L3QfHvBfOIORgILOQ2hUFPjjdejyX1X6zWQCKIG7ZBti1aDV/YbZnIOkSRdbhus03DSvh1BhQ7se1FfwEc2AUm684+OyosRTF9Woo1iu2LcDmtmWvuZMlETFn9XYrVQ==,iv:SzVzyN9FMEh1aMMx9sSOXS9PNmIB5qPQ0o2opg2WiPc=,tag:+d+WOvat/b8sO0LEt6blww==,type:str]
+    passwd: ENC[AES256_GCM,data:pLEYT8+BtYZJSUyxVHSUuePD96lLk+xeuFVVpicT6fy/N1jvr4hAWpBxLkLnjB8xdDNKNPwyLzUq1SRkpy5m8G1p0u3zO28rkKWLAkwBIYGPGYAmlOeKrhn4KrmleFcZQ/aBvfXeYND+Hysd5THIl5SRkkJ7hYb1+n1/yL8l/ybcTe+q7lGoSG9Oj+rAvD49muZRfqmZI5TcgQ2t6iwaoVGHaaYhGky2KS5MjdBkwjNHyfKazhfc4SFVatunOA==,iv:exkWU4x2PPAkhgm/QJxtT44bDVSu6IaGChlcSBcQCHo=,tag:HnXPNIloqu+mVCJ9msYJ0A==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhU1NOV0lWbURtNmxBdzho
-            UTlTbmRXR3JpN1ljOEhHTjNYVWkxZ21kV2pzCmFkMkp0WVhyWExLREVJSy9nM2NV
-            THNXb2ZGTmcrdG1jL3k0YSsxY0ExajAKLS0tIHFuUWgyUzRnTjh3VTdOZ0tFcG5G
-            QXk5eVROMkdRdlB4TzJzVVZlMEhjYUUKN9QGNPAJg4HFppNxzbM8FMMzaODY0n72
-            Ndswev7LSM+pQWmC2nAF7r/X+0Y6uLQNHDGNP/4lglruXjzVaqf5og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraEpFRWRGWFJkaE5xaTN3
+            Tmc5Vys1M1hmajYvQWdtYjFLTlpvUXRYd1NFCmE2RXZoQ09oQlhpdUwyK1NLT3pM
+            OFFWcWxINGZCLzNMTWFoU0U4NkVuZDQKLS0tIGNrcG5jeExLaVVoT3FoYXlXazF1
+            T0E0ZGUvblVnQjFwMWtrNXlmOS9JY0EKN9LdvPGrGQGtfDnGSsWOQCwoSLeNPwJ8
+            kkEHuhl0xyKiQ9aDRr0wUM+TSjB7pjXHbm1/fn/bg8gX5lNyS/z41g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:21Z"
-    mac: ENC[AES256_GCM,data:vpSZhf7tX/dKUlw2bh3vB/FKlCUE14Va3TfyP+MNc4nSwc3RhQ6PljwLxyiIaDYlVm3UPec1XUHM744KyzT38nvrvu1wF9hcyIjmn28+0Lh9kGhoOYxqm2Po9Oab04+0aH86IpElUODL5oJdzRuCIO+yM1Qn3qCwpVDOkk83Kps=,iv:JoXL1OCh4KqNYou8aJDvAAr/zH+XV0K3P3a0ShnlO04=,tag:BeofaTBUVCyaWy43rLZVUw==,type:str]
+    lastmodified: "2026-08-26T10:26:29Z"
+    mac: ENC[AES256_GCM,data:IM6AYTu55phKYKpS+ihX5zX1eeHwsnBG4SjbaJIx2LHlAZ4RRdfxoYq8msp0zlprN5ndfDoQLWaZ/wYD1syTReYNadjQDm3yDdVvDjxNY5jMJv4WkHM5Y75VtaPEsem69bhf38sKHrps2/6Be7ELAfYq6aCreH827ffHB6d0ycI=,iv:2NFKVbuRKT4+xeVMZwRGy9tQw+EOW7jHx+bZ09WHWIQ=,tag:CALPG940+fd3u/GRSZBtMw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/nfs-photo/configmap.yaml b/clusters/base/apps/nfs-photo/configmap.yaml
new file mode 100644
index 0000000..f70a151
--- /dev/null
+++ b/clusters/base/apps/nfs-photo/configmap.yaml
@@ -0,0 +1,51 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nfs-photo-config
+  namespace: nfs
+data:
+  ganesha.conf: |
+    NFS_Core_Param {
+    	NFS_Port = 2049;
+    	Protocols = NFSv4;
+    	Fsid_Device = true;
+    }
+
+    NFSV4 {
+    	RecoveryBackend = fs_ng;
+    	RecoveryRoot = /recovery;
+    	Lease_Lifetime = 40;
+    	Grace_Period = 50;
+    }
+
+    VFS {
+    	Link_Support = true;
+    	Symlink_Support = true;
+    	CanSetTime = true;
+    	umask = 0000;
+    }
+
+    EXPORT {
+    	Export_Id = 1;
+
+    	Path = /export;
+    	Pseudo = /export;
+
+    	SecType = sys;
+    	Protocols = NFSv4;
+
+    	FSAL {
+    		Name = VFS;
+    	}
+
+    	CLIENT {
+    		Clients = *;
+    		Access_Type = RW;
+    		Squash = No_Root_Squash;
+    		Protocols = NFSv4;
+    	}
+    }
+
+    LOG {
+    	Default_Log_Level = INFO;
+    }
diff --git a/clusters/base/apps/nfs-photo/helmrelease.yaml b/clusters/base/apps/nfs-photo/helmrelease.yaml
new file mode 100644
index 0000000..6eb737b
--- /dev/null
+++ b/clusters/base/apps/nfs-photo/helmrelease.yaml
@@ -0,0 +1,177 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: nfs-photo
+  namespace: nfs
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: nfs-photo
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      app:
+        strategy: Recreate
+        podDisruptionBudget:
+          maxUnavailable: "0"
+        initContainers:
+          fix-permissions:
+            image:
+              repository: hectorm/nfs-ganesha
+              tag: v10
+            command:
+              - sh
+              - -c
+              - chmod -R a+rwX /disks/base /disks/sub1
+          mtab-setup:
+            image:
+              repository: hectorm/nfs-ganesha
+              tag: v10
+            command:
+              - sh
+              - -c
+              - cat /proc/self/mounts > /mtab-vol/mtab
+        containers:
+          # mounts the two disks and exposes their union at /disks/merged via FUSE;
+          # bidirectional propagation makes that mount visible to the "app"
+          # (ganesha) container so it can export it over NFS.
+          mergerfs:
+            image:
+              repository: ghcr.io/hotio/mergerfs
+              tag: release-v2.42.0
+            args:
+              - "-o"
+              - "allow_other,use_ino,func.create=ff,category.action=all,category.create=ff,category.search=ff"
+              - "/disks/base:/disks/sub1"
+              - "/disks/merged"
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 50m
+                memory: 64Mi
+              limits:
+                memory: 512Mi
+          app:
+            image:
+              repository: hectorm/nfs-ganesha
+              tag: v10
+            securityContext:
+              readOnlyRootFilesystem: true
+              capabilities:
+                drop:
+                  - ALL
+                add:
+                  - CHOWN
+                  - DAC_OVERRIDE
+                  - DAC_READ_SEARCH
+                  - FOWNER
+                  - FSETID
+                  - SETGID
+                  - SETUID
+                  - SYS_RESOURCE
+            probes:
+              liveness:
+                enabled: true
+                spec:
+                  initialDelaySeconds: 2
+                  periodSeconds: 10
+                  timeoutSeconds: 2
+                  failureThreshold: 3
+              readiness:
+                enabled: true
+                spec:
+                  initialDelaySeconds: 1
+                  periodSeconds: 2
+                  timeoutSeconds: 1
+                  failureThreshold: 2
+            resources:
+              requests:
+                cpu: 50m
+                memory: 128Mi
+              limits:
+                memory: 512Mi
+
+    service:
+      app:
+        controller: app
+        # cluster-internal only, consumed by webdav via
+        # nfs-photo.nfs.svc.cluster.local
+        type: ClusterIP
+        ports:
+          nfs:
+            port: 2049
+            protocol: TCP
+
+    persistence:
+      config:
+        type: configMap
+        name: nfs-photo-config
+        globalMounts:
+          - path: /etc/ganesha/ganesha.conf
+            subPath: ganesha.conf
+            readOnly: true
+      base:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 100Gi
+        storageClass: longhorn
+        retain: true
+        advancedMounts:
+          app:
+            mergerfs:
+              - path: /disks/base
+            fix-permissions:
+              - path: /disks/base
+      sub1:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 100Gi
+        storageClass: longhorn
+        retain: true
+        advancedMounts:
+          app:
+            mergerfs:
+              - path: /disks/sub1
+            fix-permissions:
+              - path: /disks/sub1
+      merged:
+        type: emptyDir
+        advancedMounts:
+          app:
+            mergerfs:
+              - path: /disks/merged
+                mountPropagation: Bidirectional
+            app:
+              - path: /export
+                mountPropagation: HostToContainer
+      dev-fuse:
+        type: hostPath
+        hostPath: /dev/fuse
+        advancedMounts:
+          app:
+            mergerfs:
+              - path: /dev/fuse
+      run:
+        type: emptyDir
+        globalMounts:
+          - path: /run
+      tmp:
+        type: emptyDir
+        globalMounts:
+          - path: /tmp
+      recovery:
+        type: emptyDir
+        globalMounts:
+          - path: /recovery
+      etc-mtab:
+        type: emptyDir
+        advancedMounts:
+          app:
+            app:
+              - path: /etc/mtab
+                subPath: mtab
+            mtab-setup:
+              - path: /mtab-vol
diff --git a/clusters/base/apps/nfs-photo/helmrepository.yaml b/clusters/base/apps/nfs-photo/helmrepository.yaml
new file mode 100644
index 0000000..7df387a
--- /dev/null
+++ b/clusters/base/apps/nfs-photo/helmrepository.yaml
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: nfs-photo
+  namespace: nfs
+spec:
+  interval: 1h
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"
diff --git a/clusters/base/apps/nfs-photo/kustomization.yaml b/clusters/base/apps/nfs-photo/kustomization.yaml
new file mode 100644
index 0000000..eea457f
--- /dev/null
+++ b/clusters/base/apps/nfs-photo/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - configmap.yaml
+  - helmrelease.yaml
diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml
index 9f8cc0b..82cca38 100644
--- a/clusters/base/apps/vaultwarden/secret.enc.yaml
+++ b/clusters/base/apps/vaultwarden/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:SvVfo0iwg4x7q2qrvgwj2A3XLhT9Q8mjLMYZJqs8VdrTB0UCCbwejeqyYpTghPsLiVHf6jco7Zla,iv:ThZf73YcwmE574az59m2DIpgmqSHF4OXExZaD62Bbiw=,tag:Dk0U/ejl7t/GlMYoH1AUKw==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:s1gZ6P1KEyC5GXjcsMy75VYa29Y2wnNx9vMLSYB+UugutggqOPkDcofpLHlaHmVQBaeWt1XI3iC9C1TVmW2It4WFB2i5Qm6dqXHOKaTpTimKRkRi3R17taDvRs7GMMG35San3lioJF7GhSsHCK0S5BM1FSZnmA==,iv:gnspK186C87RXoaGMWuMi8p6WzxEKz2nYljfLlVTtrA=,tag:Kqon1pFgzKxVm1NpptWc+g==,type:str]
+    #ENC[AES256_GCM,data:AtTQnPwdiXYzyXqPllioJorIzEE/9BO3kF8faH7mMHoU1966d3trNd6OZRK4HIeHPwSXnfZgOFGJ,iv:82iAcGk/O8quLAlWCr7fpGYbq9mD9tdmiqd7oM2F6k0=,tag:t5zR4OOrXAq7ZbVdhOP5jA==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:bc3bPmHCN7Vnj6SOkNiTtX3yprpjq+2J0e1oa0qEZuDxgh3gBM0AwDaUwSMrxR5tVO9kl5e1oR95Ey8tR70pVMUqRlZO81ppymarfWzv46r43wucdocdSQJG+G/a5DpFy2VTSM8ES1MrBJIMAbGNA4g6tJSzEA==,iv:jdEj3OgLFWPzLNubpVxevsYYPXwyGZmsx9CeoQuk9U8=,tag:7mOvS+JRP5c5f+0AoEplaA==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIYS92KzJXZkFhM1IyT0lU
-            NzdHam5hUkYxNDduV3VibEtIZW9JZlEvMTFvClN3VzhlMmErdmYvbXIvVlh6dlJ3
-            U3JtNUxLM01pWFVMd1BRSmxUbWdodW8KLS0tIG1BeWdteUZGNktTSlhSQzVnMy9w
-            M001UzdFTXo1WndLenVkdzlSdklIdlUK1QqTc/8mJgsvQo9HdQ9oPnBfCv6qw0on
-            qQvpNYVzw4mVFZjiyClwnxGdK/VAQPmgG4eRYmvehYG91763/msYPA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIeFhxazlZUjRwZ3l0TkdJ
+            SjY5T2krSHYvMEhNRWFpOGN3RjFTMGJMM2hrCnFTU3BxaFZ5elgwUW9xS3FxR2V3
+            MEJnSnh0eDVZVmQydFRpV29XNHExa0kKLS0tIEt2NVhpUEp2c3JoajRQV0pTTTlT
+            ZVpZUEtkT0JVMU4vcXhsT3NzSk5ZTFkKuBaHWdEOkFqvVI1zK1wm1qZChkAL2NAi
+            F+9csHkvDaNo8luqNLAtxub2C+hyeHoBFtCqaMgpdQ3VU/6UMI+BZg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:21Z"
-    mac: ENC[AES256_GCM,data:7Y9qjbvxJfPwgd+Ib7xxANwbPvl5JTCOVTlce+UZnBkjZN9KnY8A1+yaChMitk5y9N2payS/T8c16FOAZgPlJ4QFO2jzuwUyiQqgq2wNXnDXaEo6QkbvtX/G3mfDPSRukNsLsn+4xk0vaOZdpGPsFLyOwKXOyUG66WzIkD0X5DQ=,iv:M3Nqe0fi0l1PMTFhB3Ros7FXqD0fUyfUvgZh5bsWPho=,tag:Cgog9uYgWER7+mXL9/G/aQ==,type:str]
+    lastmodified: "2026-08-26T10:26:30Z"
+    mac: ENC[AES256_GCM,data:rNc8F/N7mH8Xm5Vsa4nn86C+b31uXDZZZBf7eoVp1tM1gZwYQvrLvLhIb3v9/jghtlxksJPAMcjX+xJgU30VVIu4g4VFk4/igNB/0I4feMJQsunLLd4enLuY9YrlysRMMGjaz6WZf/HeRw7/yxho5eVwyZkoxhURqp1X6orfBUc=,iv:AzIWm3nhDRPekRWb5kswdlPd9FB8OoP9pkAn9H+7UeY=,tag:cAWy3N4RLSp+47bdU7Qr6g==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/webdav/helmrelease.yaml b/clusters/base/apps/webdav/helmrelease.yaml
index de1a244..15ca38a 100644
--- a/clusters/base/apps/webdav/helmrelease.yaml
+++ b/clusters/base/apps/webdav/helmrelease.yaml
@@ -90,6 +90,11 @@ spec:
         existingClaim: ganesha-export
         globalMounts:
           - path: /webdav/export
+      photo:
+        type: persistentVolumeClaim
+        existingClaim: nfs-photo-export
+        globalMounts:
+          - path: /webdav/photo
       sda2:
         type: persistentVolumeClaim
         existingClaim: nas1-sda2
diff --git a/clusters/base/apps/webdav/pv-pvc-data.yaml b/clusters/base/apps/webdav/pv-pvc-data.yaml
index bf298df..33db217 100644
--- a/clusters/base/apps/webdav/pv-pvc-data.yaml
+++ b/clusters/base/apps/webdav/pv-pvc-data.yaml
@@ -36,6 +36,42 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolume
+metadata:
+  name: nfs-photo-export-nfs
+spec:
+  capacity:
+    storage: 200Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: ""
+  mountOptions:
+    - nfsvers=4.1
+  nfs:
+    server: nfs-photo.nfs.svc.cluster.local
+    path: /export
+  claimRef:
+    namespace: webdav
+    name: nfs-photo-export
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nfs-photo-export
+  namespace: webdav
+  annotations:
+    helm.sh/resource-policy: keep
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  volumeName: nfs-photo-export-nfs
+  resources:
+    requests:
+      storage: 200Gi
+---
+apiVersion: v1
+kind: PersistentVolume
 metadata:
   name: nas1-sda2-nfs
 spec:
diff --git a/clusters/base/apps/webdav/secret.enc.yaml b/clusters/base/apps/webdav/secret.enc.yaml
index 10138ea..98e0e92 100644
--- a/clusters/base/apps/webdav/secret.enc.yaml
+++ b/clusters/base/apps/webdav/secret.enc.yaml
@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:eXzFiTw=,iv:ry96a0iw0AeG6btL76w6SJ2aYNATghx6ng7OW3++1l8=,tag:RBol1Y94WqTAKYNgMZHfEA==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:WwwaKK/1VcEsSMQb91+pZoFSyGs5yAsIRj56Aza4s8eCgUs7bnEeriVaV6dN+WCx,iv:h35gWssjsOzSKlro/90sgQhf491RdWcb6VHIEePbVxs=,tag:HjbF7RefPkjRiZUVmSgFpA==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:6f/Nz0Q=,iv:OEvH03Cf8+Kmd6catIEZiwqRdx9qSuTiC7f/fKCyWNQ=,tag:6O693+36QcyBWVe6V54vjQ==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:U2qBdy+fbywRu/9dvviUEghK6taGf/R7OJ3Wmpyuj/hHAn4/UE8rzC4wBAlmCX+e,iv:vlNXDlN/PnEPRRSQ/p1HzmN2aF/0vdZkvxbjqSByGck=,tag:XYBBT4+imMHLJMu+QIdOQg==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxd0RjRWk1ZWR0dU9MakFK
-            MGlMR05kTWUzMDNFa2htaWlydExsMFdwSVdzCkN2VGYzdTMzWnhYWW9MeXhjd2Zo
-            MitLSzFTQzVFRTNUTktXeGtldVZQczgKLS0tIFhsNGpvUE03MktSazNvRnFhd01n
-            YTEybWd1THBKa1FIRHVSOVlrWDFuSzgKcuJb1p6cNE4y/j1PzHr+NKnpCa9GpdIz
-            zMBE2PiFu45BJOYUWPb7pvRvAneHNyMJZbWXJCy6jxMkagnkT+f5Qg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVQlRtbWgzenpXNFhGbncx
+            b05WYUk5MGlGQ3JHMWRoZFY1MXQ5SHR2MkZrCitFaEVpaDZNbWNORlg5cFpDTk85
+            b1IwdFV2OEl2Y3o4czNwYUkwNGhmbkkKLS0tIFZGR1RJRHZMUWF5QVpSQkpSU3pV
+            VUZDMWd4QUVRakEwSXp4R084aktGcGcKCzrMbCS0XO6VpCg16Ufk2x73yNK6v5yn
+            io8+2upqXhlJxM/6tXAuV4hFic/7z5xy0jT8dIlovZIfSbcLoQD8Lg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:22Z"
-    mac: ENC[AES256_GCM,data:XqS6nL+usQDub+P7Fr4Ohrhin7DzO4LX1GQuRk5tTZtllq7wKlPHhYcteL4Fq+MCHRTAixo5/g2FJAjW3t2sMN2iMCLTvY4KYoYQIqDAR4UzFG8e/gGnpEQOE6ky2ThdGNAvNkvuufSZjXNxzitLD+8AtSqcH/f+uRZJ/3zOReA=,iv:HlmCsWH8bVE7ox7suIic1nAHHe9tknWxrk2yNuZU8dc=,tag:V2u6xpE7xNmKwQ+wniIl4g==,type:str]
+    lastmodified: "2026-08-26T10:26:31Z"
+    mac: ENC[AES256_GCM,data:WF/6fs0eimqddFuq+IL2wzAmFO2xSWwbpQYkao9Mp4yV0uh4bopvfZ4coKLQYJP/jmS9Iq2GA6JO7u+Iypiizo20ZkLt1fXy/A8+wvdnPdRVfEtaeUc+cMCalMoSiwLWFJgKhoGIpgmt6DR4XEOnYQ41OIpiLTNHfZSk6bInjEU=,iv:nUzoUvj9w4TZEgi51z1e6ZNxTPoYYoWjU5Dxe5ZtbLo=,tag:b+XA8mWmmUhD25Z2ARP4QQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
index ede4c45..4bda474 100644
--- a/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
+++ b/clusters/base/apps/zigbee2mqtt/secret.enc.yaml
@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:z6AXwALq/CSVk5WOKBCbg66uspkEXB5GVtjK1ALFqoos41JmTrRmss53/O++tEKBfu9hHnl+QwRqmq2P5xmY+txWDzTJJVsqPEoRKHS4ocLBOZhSZ7kVMomPG5wGJvY9Me7DUuWRVJtkXEa/Gvk4ej2WKPv6iloHH2rqTrc=,iv:wf3+co0yK389VFb0ZEt5xSS8JB/3mFFto2mlPKxKKOk=,tag:g6tRDbI31/8H1WKvXtY3cQ==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:9EMz74Ed1NfTYNMyirbVpYtpCDQAT4xT5B6Ct7SfcUrmhavBh26CbyAu5mlnTwkbI8wy4DOCeKDbvEiSZfSn7gBIgkDUvrU1+E8ChgJIN1WbKW1EnaCbWf6gVUfSQmoYIdMoRCi1MdisJrpTzWz6vqBzsjZ0n6LmZn9KCIM=,iv:DRkF6d5ijwjLBC/nDYvTSfdxJ3LxKhGfNmWoipaHxpk=,tag:iCdPlixi8O2WDwsOM8ncUw==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUHk3MDVzWTM1QWRONVI3
-            dFdiNlh4RVV3L0R1d1J2bWt4eU54TUxlUDNnCjdobzhVZ0NaZFExeU5qVDExdytP
-            YTNmQkVpMUd5aGlDSjUxbUY3NU5uYWMKLS0tIGo4WHlIUWFxUkpyZXhSM0N4WjJQ
-            dEpPL0c4UzE3OWZaZ090bGR1MUkzVGsKQ3ptIPqfzr3KXzTCZFbeZKhFxxX0VdCe
-            DNFpGQehwotVWoUfinG0aOpYBUoBPfF+Jg9SkzRERYGMDoP8U3JFxw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBya2VtcUlsNXdrdFNEc21R
+            Nkdvdk5peTRtaGEwUmRNUkZxemlZSDZhNTFrCjVJWFlWaC9PcCtGUXNoaEpHUW53
+            TGtqZ2dMZ1N6SkFKdG5jYlZ5aUlqTkUKLS0tIFlyLzNWbk9VeW1YVk95UDFxQUxK
+            akhYczUxRnBUcEdpSi9mQTdSaWl5RE0KT+ovgpj7yFOU2YPNUAK78VFpTq5sNMtm
+            Rri8EcToPbYWwKVHV0hv2xLdupjCx4t8qWkdqqyce6/cYTxDb/NxCw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:23Z"
-    mac: ENC[AES256_GCM,data:7dcxizCUFi7krRbLye+b/9ApA7cN23Hs88NiojB+aZGX7LezqL3NrCV9k0IZ80AqzODrAzw/kJ/XvPdzPujLu9Dcd4giRXd85rNXbjMBJCHD62fqUncopOXx776Q3QnRV8FXvALqBE0wawXiPylVPSt0H6dHtkNZxCg6R+kj1mA=,iv:A4imdv4e6IlGxao7qfEtJZN0PHRucJqkAVv9O/FJvcY=,tag:us/JleVQTYjjaj/0fMsS/A==,type:str]
+    lastmodified: "2026-08-26T10:26:31Z"
+    mac: ENC[AES256_GCM,data:sjHIWp7pU25MO+o9FpY9PbQ1nnwzASodnd9iHlmoHKjWYnsqyMi1fetTn4O58kkx9Dc0gJH4sYnZj7ty/1xyHkx0wL/8RJaJ8B56K8iBotBqdFC+vUW8i7JJpVB1b9GNe22sMEDx/AK4QXoLSLray0ylpt+1D91s6GIPXc8uvDY=,iv:sEFLaU53oyX62j5bav8WT9xrT+RID6tO3q+L0o4j+6c=,tag:c67cWXEw7fA8Y3QzqErYhg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
index a552985..532d3d6 100644
--- a/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
+++ b/clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml
@@ -4,21 +4,21 @@ metadata:
     name: longhorn-backup-target-secret
     namespace: longhorn-system
 stringData:
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:BZSa1SeJ+tDfXCvlPNz68rBratI=,iv:/vtZb7F/Qp2Ae4D1AXfVnUSFltRBsmN7S3upgC6k8Oc=,tag:QNGoH1XeHTK3JI13J8Z95w==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:mZIa3ifnXUuw47Tk1dRFQI3QNY0wZJUG2+4yXe8PeZvXZW7Ek23FZQ==,iv:2BvAN6buuJ5QzvJGBuq0Qas3TY1+lFgJGXNNi1m1CsQ=,tag:Vf976plqDwHy7eCoGpQTDw==,type:str]
-    AWS_ENDPOINTS: ENC[AES256_GCM,data:yJNIyKwPV5DfLfrRkX/cnZ+JmY0ikTOCS1/iEUD6+rTdyY5oL49VOHBYaNpjasA1mLWWhCk8Pbk3pOLT0w==,iv:sCwOkNr4LR0NTROudqk0UYMGzsYpRPRe2XE6tbiES1g=,tag:3XNveRYVG0Jd6GCVmdKNWA==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:Qik8qNmHjivnm5xSwHMSHy8nZv0=,iv:LS3BPVI/qdSlqizAwJ0lBo4XcJnG31ggIq81mFHKQks=,tag:Ia7gHqRFlli0BNva6Q0weA==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:HT+pgbFgDI506VlH17rgmbogOe82mh1z5LDDq5o461cbn0sSbEk6PQ==,iv:zB1Aow+3J1bITC2lubzA65vsd5VN4UUgqneA4uwIAVc=,tag:TGd939wAahspnSUwRtC6Aw==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:qnMEbsrS02a2pHuaxfks4rNJtywfGJtaF+FR4hFYJgNFnvR/R19hNn0AEtmUAZ+N99HT5SamNMrVY7S1PA==,iv:MnjuS8+40pLaJkHSGra6pL+1+ITqKSny5u7bR9yb7Gc=,tag:gqB5MyU9r8xpUNaJ+2PowA==,type:str]
 sops:
     age:
         - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1Z1NBOTdwVG8yQnFocmQr
-            cE5jUjNrQTl3blpCZFJTTjJ5clE3L1M5Y0JrClVSRXh1dTU1NDNSNGdQdk11bXdO
-            NnpwV1RZNnp6b25KYVl4dVVWSWFZckEKLS0tIHA5THhqMlIzelBqR0gvenk4TDR5
-            MWlRZW5vQVR2QnhjUkFJS0twRnJiNDgKtWephKf8WlGucqR1l6U7UG9Uthigg3Nf
-            PlwmU77QSXM8xBjfdqH3YpCsa/nsd6B4PnWvdwGVAgsgU8oMT/cr7w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZ0xtNGc1M1ltQXNpakpm
+            YzVSYUlQeDdXZUZ3ZWRyd0pyY2dIU1dEaG0wCjV3ZmRjSzZ4OFFkY2Q0allod3l0
+            S3JKaUtGUnA1Ti9XOVVLOE16L25xYmMKLS0tIDFTU3MwcmJpcERVaklDbHJCa0w1
+            OTcwVGp4MVN5VVFBR092eUQybi9na0kKwhjDUzvNUym7c7O/+CDHWBfFFLAuG/rj
+            ekYmlO4EKATG+yp1NQ8Hj7NcR5PQSGiNSBwfqCrEgqVcYQSmlFmU8A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:24Z"
-    mac: ENC[AES256_GCM,data:eEjeOIOqynweKjXMKXBydlUN7vCPKv07TeYfmc4+tLa1JRMZL0kH7eDpLoMmEkHlgGLDrAHrxhLQBgx2857Efy14eCTPvham8ywr/ZQlFKO5H5INt/cBChvpE6rspCkp0tVuFDnkh1ZFolcYK+1sNzjiAnH+QovlN23y5c72OxM=,iv:jtioOlRs093ulVJOg4cznXl06pXBhuxXcDYowwuoUAM=,tag:SluA880045EeePiEsbQL6g==,type:str]
+    lastmodified: "2026-08-26T10:26:32Z"
+    mac: ENC[AES256_GCM,data:pMkNlkcxO1HOPzBjY/BTuBM3AkEgvz84Zb+/rHsdtQIJEQbtHZfc+VPhaqpPGjAbac5kpe9JZd1tj6sBcN8VBqGi+Al/j/BBbdJ6xUtOJzbg49gYJ6voBw/IZtjr6sTK6Xx0znpMV5zwJl508hJveUxvqfJsMpCXl/3FR10+HGY=,iv:xris7XsSqMDEjdHScWE5ucKsjrNLPQceGrEiv59rz9w=,tag:SXvzncAFyxuEPL/pCW3Lcg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
index e04248c..1d4328e 100644
--- a/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
+++ b/clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml
@@ -4,24 +4,24 @@ metadata:
     name: s3-backup-proxy-secrets
     namespace: longhorn-system
 stringData:
-    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:2OOqOTveehTfqlzrTkGYJK0i2Zk=,iv:V8JhC4wNFNavUuWvcxsOGYKJtNgILyCCbNg8hRFVS5M=,tag:RaKLUcgDqSj34Ashyztu/w==,type:str]
-    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:YfUx3NgQyjHiRjgYh/Aa5R02InHD4ZwY3J51GjEP+teCcyx4T88wzw==,iv:fscryDhOf8JfOdKunZE1W6x6gEv45yZXgefYh2aP2v0=,tag:xT3k5Vxoj45DHvSdCLP5eA==,type:str]
-    CRYPT_PASSWORD: ENC[AES256_GCM,data:rKAcOjhs2a0FmOYxdZfAjo9DerRhZQjzvHQ9SLvlDt2SVns3FBmkZx9F+A==,iv:sjpApU1xdfSknCyqGp0srsueznQfI+WXo0DrkUEWLcA=,tag:Tfotc7TotjVE+QsavyqlPQ==,type:str]
-    CRYPT_PASSWORD2: ENC[AES256_GCM,data:YzWFmE9HDLflI3BRgwYjKFfemWH3+UjLt2OFt6dcJPyc6y3UtdN9aQ+tqw==,iv:l5FK4KB8+z8YOe194IwyB7A3lLlCe5fcOsdEBLd52Y0=,tag:XNmlvBjt76rat4lHXMgcJw==,type:str]
-    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:e7JzZnAKL0UR/AjsoQtEXt3KvAs=,iv:lWhfdKR/so2q2NDexdeM18Gy80Jupk8uYM4YxrhIhTc=,tag:1lYVaMOaTwGABFd57iihCg==,type:str]
-    PROXY_SECRET_KEY: ENC[AES256_GCM,data:eUJa0JaFvTlpOiCJlSiImKVn4ZiSIHomNAsXX43412KQNbadntzR6w==,iv:wDEBvpbGtdzty0U9CVE3Bw5Vp32GEiW2vt6tB7G7Zlc=,tag:/PmDbF1jtXfLaxrvK0aHwg==,type:str]
+    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:qlK+ONGDavWmaf6w94j8OyMbpDU=,iv:nEd5dOva/EbeGID4fp6kdF63+aoc39dW/J7UE6HVX3M=,tag:bIsQqnOS6c7A6LtsdnZ30Q==,type:str]
+    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:1NYGslCAcqssRSvBSiqfkvq/uM0oF5ctrf1/Zo2CwrfGejugE7q8Dg==,iv:LboBdw/YLf/0F12oZwKTpP7Iv5C9huABKaK5flk5ETo=,tag:KzvGSn/jjZeMCq4Sg+f/zg==,type:str]
+    CRYPT_PASSWORD: ENC[AES256_GCM,data:khxfQINBuEcZt1jga3jxKVMKGeNiJ/b9SluvsSnCJ8hMrYFw3GbCW95CNQ==,iv:E6YOKLI1DZSaqDLySKJBELGP+EoC4QPvM+9ahalg35M=,tag:SCSloFW+9GzPYpWE3TUmWg==,type:str]
+    CRYPT_PASSWORD2: ENC[AES256_GCM,data:m8omkA6TESbAFsu+ctTI/6AJrdsvTtviFUECvayt0/QbFrTQeBGo/fEGSw==,iv:VmZ1SFO7dCU+AYyCDncxEfcpCmRDPpSiDh3ioQnfeXk=,tag:UVhsVJcD7dCpogXg29YBpA==,type:str]
+    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:H8uXYwuY3dQmmqez7jXQGWKt/30=,iv:ErmZL2ygfshIDM9+EwNXL+qIk4cB9wXgS+NO0mfc9Yo=,tag:bbq5RmgSK2sD1sA3OjMfHQ==,type:str]
+    PROXY_SECRET_KEY: ENC[AES256_GCM,data:CdoActn2NaBtT71KyxY/i4/KaPPYiMjMdYxo15k6B0KtBTPIVBKsOw==,iv:LHpa1F/MF6+aVWIdw1ojFx4n1BeAowHaYSLKwS130CM=,tag:Ogi5pFlj/gOSKpcwR3PSvQ==,type:str]
 sops:
     age:
         - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVEhpTG8vR2QwdnpsU2h0
-            ZWFpR00zVCtFelMvZVZKc3g5aCtNRTRleHh3CmZvdWdMNkpFNWVwam41aXMwbUQr
-            TVN6NzlUYVdQaStQTFdleFJUS1k3cUkKLS0tIEtoVXRTNXZiTWZjVldGZHkrbnNz
-            dDlGUkM4NWVmNWsvTGV3QXlSbEtvdkEKf7YLaPgM36V9uPy8Bsfnp7KSbFWH95nC
-            mQhkHGalJ8U9nmGhyz56lXqQGH2KOYW7w7Y1JxI44yPnoPxkHBLcgQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3bDFMOG04T1JqamhRZVk3
+            ak9RQS9oeGpTR1ByckljMEVkT1FPSTFmQ2djCmN0Z1FXUHBYTnNFMVoxS1Vsa3h4
+            U1pRdXZYY0dNSkk1a3JvZk5RcG5PS28KLS0tIFlqOFNkaVJSTFlyN1FqZ1loSmR2
+            VlEwR0ZLYXhsUWkvMlF0b1d1aFRPR00KFQOqTck7M98qjTZK2z1nGxQ6FKkup+IK
+            b6/YELW+U1UHoBdvQXIueN3tN8j9N8qOD4QR7VlnwiPkVxKMt10eag==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:25Z"
-    mac: ENC[AES256_GCM,data:+sVEaUECtEsZsbTatKi9RujqaCff7rdjgJLpPpwR5khN/QfVXCrwVHmM4txFlPQNFEZRvQ3xTvCVHqgJToCQR9Ne3eIQRTqIFdJA7k/IWZhAwPiYoP4EWolo6In9sjaqSs7XwnEmGrLV7yILPspCClSZNYodMP7vlMFM5pqM0/s=,iv:h1eNngOV6rLo5Jgdrh2m49aTPpMISCzQbFTihcItpdY=,tag:YDLFxYlbzQO2nGZ0X5BJ+A==,type:str]
+    lastmodified: "2026-08-26T10:26:33Z"
+    mac: ENC[AES256_GCM,data:TVnh59knYi6LPEuFrQmvUzsKMA6mMwOyEycfg3FVz7b9oBpCG28Ga4VBDA0PLoCKNym8Ant1SauE69/Tuu6/AhpJYhPx+s6ZYLSNGaiBKl6V/jcVk+hzY0sh2zZNguz7EmN9eSAfllle8MDaBCJVz8pUUh6f+EjRjqt6DNDxf0U=,iv:pNhafgK7PLzpTwuUTLSfB6ZxbFmP8deNrHE0KbvOFPo=,tag:RJ5ccAW3lxeie71kh7Xpww==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0
diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml
index fffb412..5e191bb 100644
--- a/clusters/home/apps/kustomization.yaml
+++ b/clusters/home/apps/kustomization.yaml
@@ -13,4 +13,5 @@ resources:
   - webdav.yaml
   - fava.yaml
   - infcloud.yaml
-  - syncthing.yaml
\ No newline at end of file
+  - syncthing.yaml
+  - nfs-photo.yaml
\ No newline at end of file
diff --git a/clusters/home/apps/nfs-photo.yaml b/clusters/home/apps/nfs-photo.yaml
new file mode 100644
index 0000000..890a480
--- /dev/null
+++ b/clusters/home/apps/nfs-photo.yaml
@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: nfs-photo
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/base/apps/nfs-photo
+  prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra
+  retryInterval: 5s
diff --git a/clusters/home/apps/webdav.yaml b/clusters/home/apps/webdav.yaml
index cbf073a..6a6c6cf 100644
--- a/clusters/home/apps/webdav.yaml
+++ b/clusters/home/apps/webdav.yaml
@@ -14,6 +14,7 @@ spec:
   dependsOn:
     - name: namespaces
     - name: nfs-ganesha
+    - name: nfs-photo
   retryInterval: 5s
   decryption:
     provider: sops