fix for davical /server url path

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -27,6 +27,14 @@ spec:
                 if [ ! -f /mnt/config-pvc/davical.php ]; then
                   cp -r /config/. /mnt/config-pvc/
                 fi
+                # Apache's SCRIPT_NAME (and DAViCal's base_url derived from it)
+                # only reflects the /server prefix if Apache itself resolves
+                # that prefix - Traefik forwards the path unstripped. Add an
+                # Alias so /server/* maps to the app root; idempotent so it
+                # self-heals if apache.conf predates this fix.
+                if ! grep -q '^\s*Alias /server ' /mnt/config-pvc/apache.conf; then
+                  sed -i '/^\s*DocumentRoot \/usr\/share\/davical\/htdocs/a\        Alias /server /usr/share/davical/htdocs' /mnt/config-pvc/apache.conf
+                fi
         containers:
           app:
             image:
@@ -78,8 +86,10 @@ spec:
         # requests/owns the Certificate for c.aggtaa.com -> radicale-tls.
         # A second Ingress with the annotation would create a competing
         # Certificate for the same host/secret.
-        annotations:
-          traefik.ingress.kubernetes.io/router.middlewares: pim-davical-stripprefix@kubernetescrd
+        #
+        # No stripPrefix middleware either: Apache needs to see the /server
+        # prefix itself (via the Alias added in the seed-config initContainer)
+        # so that DAViCal's self-referential links come out correct.
         hosts:
           - host: c.aggtaa.com
             paths:

clusters/base/apps/davical/kustomization.yaml

@@ -3,6 +3,5 @@ kind: Kustomization
 resources:
   - helmrepository.yaml
   - secret.enc.yaml
-  - middleware.yaml
   - helmrelease-postgres.yaml
   - helmrelease-davical.yaml

clusters/base/apps/davical/middleware.yaml

@@ -1,9 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: davical-stripprefix
-  namespace: pim
-spec:
-  stripPrefix:
-    prefixes:
-      - /server

clusters/base/apps/davical/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:kov7rlxHbjXaoayqP3UhjGPPyagsxA+DutQbuNzMqo41PTa+1AA8cQoZZ5QbkLMp,iv:4hjs8aBgm11Iq9K+wxXDcTG1Ee72I7m8i0s7rGfl9sM=,tag:zuOnX/6y9YAAkk4WkF6HJA==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:UGHf34tRRAVr5A+dHSxYkdDr6vFunjreFIjQsnTV0eiF4cXT96RKZDnWX/tAYzzC,iv:uZLRYgOEgfNbbMBIQI3uVEOr0VtgCCQlwVJxBhNCZPM=,tag:2azyVW6oj5Tz5riN4LEmUA==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:nHWF4fD207skRQsF6ZHloPlXUc6nOBNNSG4By6K84aE=,iv:Pbt4nx1MWmgFh6EltrU3qleng2HZpEynTxc26CGgPMI=,tag:8RK/nzUJJH/lhBeYpWWleQ==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:wjO3esTrwjxbYAZtp4HRGYC5ZDwtf/mffrLQVaylxFAOdKaLylw1UMrnIY+IaWi2,iv:JhqqeHspjHq5zrmXYJVylV4Po8JpTADnu7kxvH9i4VE=,tag:p1/UbYNDP0CtpZTUdMMQEg==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:+xwtbmfk3UuU9BW4Gj890m0ow5Vhi44dplgOzJTlHW1g76Y8UYNa33ZJthroh8u1,iv:r7oSMEmpXaEqe29tkN5YMhGUKGT3pLcAZ8KGUdgVOqc=,tag:bz8I9Sht4mXS48xQ+xq6LQ==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:I8tm4WPCy40BF2cDei44XIolSOtyTHXkqkwXAkD3/uA=,iv:HmQoCl9jPNL/stYrYhFxkupSs8BF+LyERz4Qol8rbH4=,tag:HvO4/BCCKVV24kkRJZOeYQ==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuMGt3OFhScWI4K2FMeTZS
-            djc2ZXN6emw3dnViQXNpLy9obTBzeStDZzBnClBjcFJjU2hEc2xiRGhMeW5RWFFz
-            TnNvUEhsZm5mWXBVVFI3L2E3S2htUkkKLS0tIHRNQjhIeGZtWlBkWUt6WTFELzQ5
-            TURuSDBJdEZRNFFrWXo3YzdObE9tdU0KFXr6yBqTsrtnWeae+yONQAphX14HmAt8
-            ptypIfbaxaLjtvNw0Dg7p+vPbDkCeLcLKAaIgo/xVnZFAaxJqzCXog==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhV3hmcVdiRm5NWXRXRUFn
+            ZlF0R0l6Vldxa3FoSmJpYUFKWlFRaXFsYVFRCmgyOEdvZmJkMTN5ajJGampGaGw0
+            eFNPeEZMeU5icXpxb1dyOXdTRS95QWsKLS0tIDBiMVFiblVHbElBdGpIL0RVekhD
+            ZTB2dzVUNVBkV2svVENzQ1piOHlxcVEKIro5yzooQiQm91YqLJBPu2attAqPmQzO
+            Dd7+1wE24ksi/2ZOkW41TQEe+6hrjE9x14Ffczza5w1XpGIqje0SQw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:55Z"
-    mac: ENC[AES256_GCM,data:vzYxxZE6kkuskQrjC0dHFbTk9fW9S28Vk77qYz9depHmNyTj0jxIhdncGEiI6ymuKIOPdUAnkWnehMB1nnpowVQ5gC7kbxcuhTlhJQy4pEDWEcOq3967+JIKW1yj1/pZSw/+EP7GkL/3WLwhZy6NEajBovOfOxOyYSWiJFlCkrI=,iv:1lUPYy6lMNFVgSS94WRlJAeu7tS/LZjcixfhxYgJD1E=,tag:vcffA2DsUPppBuZGrwNuIg==,type:str]
+    lastmodified: "2026-08-26T10:24:02Z"
+    mac: ENC[AES256_GCM,data:OVYAkLZ/CQtMjs5qI0mFaZ/e9FM7qR5hYruBYgQDJy5vonVHuaxdUyEdVYYd4eLC4MFD/QYnuhsEwh97+ypgVf2esns48ArLERJw4gdJO9FOeFoc9tvCWAj95ui9pXdwRUKSDbEOn8j9rSr5NvH5F6jlhZ6P8P/xkEDjo3w6ElA=,iv:dB08nWzXDvUBJZ4jcGG2OS+dN7bjESQ+9STZ6PLQ1Wk=,tag:WyQEpoBCZ2zpxAPnpID+MA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:aKY1q/Awo7+ci3xZMHZaAKK3+paQQgyy2LMHq6ejJhv0b1x+szeS0sQn1gJN3/ZTJOZe9JXPys101fdwpjq1Sw==,iv:31PI17QQzSDNptlSNRm7F+Y3dMfYj4bZ0NkHVDmqMmQ=,tag:NJGfmYZbf0M3kUspvXnkew==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:0LlmY1A1QJtOe7RsojaKc27/a9JucRgdCbdDmDmZWLnPc4OxeeAxK/7fPbZxJfnurOD8vhlDGIF0cH923QUkxA==,iv:3Z347Zfby5/YK6qHC4+XmXYm5fuEWk8y2PJRfLWH5Yw=,tag:Sffxe4aFabT34TuPzYBPkQ==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:eTtFXHxc3Q4S1CHgVduVE336gWetZmRhwNyMkZVgWPz6vScohkBAFB0cr22igy0ZNaKH2UOAX6PwdnnFJnxVwg==,iv:JqEgESEhvyqkBBUrC2xmsJObfu6m6cNVj36Fl2nICiA=,tag:eaP7f96gQtFzW+bXkz2tEw==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:DIRUkJ2+LLXL2iYqG7ObfobjnOB88ESvjVGc9pvs6nR6uzCS9LOHief3W2bwll7LHwU499uJDVmoqida/dUp+w==,iv:+RY/lzSEH1SHJx93x0uU2kflqunQ8tl74gISO4qHl9c=,tag:IpSeUkXpnAcgZG3hrKxAUg==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:OmP2cig28ZFM9JafVbjp/G/l3cQQpuDUVxNimIDLherkoHJIexr/NoeuuvjA/Ji8ijjuoQVaoVih35olFB1GXA==,iv:vudiiLhSO39UFBygFVuUo7y8sjU5K0cX84NT81iuC+o=,tag:vfDtQ9164zcKM5R63mfs7g==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:5vWajUlpvZ9v8BlbnVTbnPOvR71PJX5JdReL7kG4BjSK4JQOn+pTv4N91cuSwlc5ppoRP9+voTZ4TtMBRHBlbg==,iv:iG6VGgfgXxKBexLdF4GKbKd8yx3/GV7NZtzvu85C7Og=,tag:xlI2QOf+IcMtuhKDusiqRQ==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3cXMvcGJOaUIrT0hMajZx
-            WWZidE0zWkxuM09Td1pEdVJxbXI5dXV5cWpBCnB2R2pERXVmWUVSa29sN0I5OVNE
-            WE5KSjREa3IzVGFnMkVxdkJiOEhlZ1kKLS0tIHlMREtJcDJUK08wOVNsQmtUNk5z
-            MHZKaVpIV053SVV0dElRQlBFTlFxR00KRwVgrNpuSQOGITUubQWKleQOP6MgD3NO
-            dSl2vElhmgpFuE4ktjErm6uAIQGJwnObhQ0/AqqqTE+tCPsv82zWXQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4KzhpckdvU0M5S1h2VmZz
+            bElCdytBTjNIdEdPR2U4ZEpVaU9XTktkUmtVCndTdzBXTVVNbTI4NTYwSG91Ty9p
+            YURnQndKdFJsd0ZOTjRSUDQ5TUxZcVUKLS0tIDVpTG5aNHdDUnplSGEza3BVdEs4
+            SXdGWWJUMjI5U0x6YXUyUjFGQXJNRG8KEc/g0RrO/JRvoWrSDgTeGLmSVnnFoeKW
+            7ZouJMjiZmDyw5jkJANjoLdqsyMJ0a+VyTAwKCE/zWM8LV9/JEJQMw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:56Z"
-    mac: ENC[AES256_GCM,data:BCRzd92MXgbAPLsYefL+D6jgq9K4qu3gzjwcr7w+fG/VUG4eo3NG+UoBxhe1MATLddbhW05/OadluRm76NXMXZ5KlJTE7wxDHhQJFJ6BFdhjYHs73GRMnZqGCYzAztWUD+E5Tk88bOnm06HN/YtFP8Mow4uyWJ2FV1IvmQ+8rxI=,iv:HSuZTorUrnt7xpFOEr1RHYtcMAiuYtaR8R43LcMJIC0=,tag:U/KvhjJqPisDKtc/IrvGHg==,type:str]
+    lastmodified: "2026-08-26T10:24:03Z"
+    mac: ENC[AES256_GCM,data:gSi/TFC/QJoHHAJSaVB/t3QMagx+rA/LvL/olp5kmNiCohJocFzZZsWUuFPhBPT8hOwz1JAosIloC0xinqWHkLYAFGsYtIj+fxix2fHJWf+uK7iRms5METDeRaONaSYBIMPlA9tijY46n3W5pCKAbBS4grv/RhrogutkP5v2LBY=,iv:TMMB1ZtYpUAmn1l2TrHP3lRsisOAmbwubjSSu1Ekok8=,tag:t8u234c81Pik0EyE3c1vVg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:4pQBsZr45voHIjkNNp0/uCv35gWYOQjc+YtIH62Sx5JPYeHYnGuFxK24jJiDW5CgIrnbtV9gxARqX2CWDL52TuePa7LhbQ4M302OuOE+n3N5fC6OLWV2LFs0+vgfNjURkk0XJ0uxw+IFASWMcyuBtoz+Fk0plXG1hByxczGTZZzqS4VPz1D910ksqa9S6GaEao6Tf/xMzRwNMPyAVgXBO+cIzTHtZ1Au5ju+N/4Lz18niqTMr0sCbrvtFQu/+w==,iv:x9eZFk1PJrXt05paqSiysCyPRxk1KbMgekWZ/X8JIFg=,tag:B48buiEEmzii4gbtGBTV+A==,type:str]
+    passwd: ENC[AES256_GCM,data:c0S1wpkhfIcpo8khx8YCoS5pyKo0j6UXJDgpwzzK0N0TBtyO6unrCDNF8gjNk89Ok99r9qkQ4mf1oxtEnBmIzclEbM75N8wyq9fbewy9NbSHbXxBUp+Rad/trb+iwkkeynm4Bk3Fd1j+f8wmMp1ZOjxYVhJ6fPEudP7V1CHx21/BbhD07dJj38dKQRcZY+JDT7MVzwzvkRmE+UF21zySZBVZT1pAnDHlWN6SyhgIhp/vD9YsIrOgfQRAzo2Nlg==,iv:1Ia8w9Gmb7posSsmG0OQkYCzAXvRZlKYjA4D2S9xbqM=,tag:Go5oP4DkXURTtWYgaBEItA==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUENMVGI1MnhrZGdZUG56
-            ZmRkZGVQNlc5ME1UM3dKVXBmeGt6cSs0UnpnCjA1YmVKYkdHckNFQncrQzNqUUNC
-            VTJHN0RCZHlnWGpBeUljSUVXaTNrZ1UKLS0tIFNYN2ZFN3IyUkh5UWtHKy9ZZjRE
-            Zkpvc0RLRkRsdWRVZk9wYTFIcTgwSEkK001PBCsUl8TQVsg21F6zMW36ZIkj1O7Y
-            ZvMRu8NGTGbIT9INMzXtGaRnQTOiy2zekyu6ApRqYj5WmPFCcVg79g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLcmFiQ2M3dTljNDN0NFRH
+            WnBiYit6RnRQQkxFRHhEbFIzQmRtSTl2azM4CmhzRjBXd0w0RXRXUHkxbFVZN1FF
+            ZlVsZWdZNGtSWDR2SEhSMFl5WFNreDAKLS0tIGNnV3NZTGNTbjIxZVpKRkNGd2dV
+            U3JaZ2lXejNuZkw4WVhjL1g1blNjaUUKZvGTLj/yCV4kRmgt59TJ9CuIUufuMwuc
+            D4rxxWzwMqKXDcjA6IY6BZinAdAFjSsnLLfgoJNdVcxnHzeZ0R7NGw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:57Z"
-    mac: ENC[AES256_GCM,data:BZKVfk5KKnJUJUlmDnXuL+VLzUbURsEqiF9yGDnOgfyFvDmqym5eviuxIxN18u4I0NAcBBwpfB94+a4D24gUgcUx1HlXfIrUnyRRxNgd25f01pEfF0+VYGOd/PQd90EfgVMvhXWgdQ0g1elCQdI31vjF3nAnYcZi+awnSggNttA=,iv:6DulSUFPoOa+FXMZArMx3vVes4yWXXhZAGLJdVDmOSM=,tag:JxRCtgetKK6458/YM+xSMA==,type:str]
+    lastmodified: "2026-08-26T10:24:04Z"
+    mac: ENC[AES256_GCM,data:0ofQPJjA9bR4RToDYR4mDV8o0mVfRuJHMc0UjDv5ru0hZEvKtT7f5fbcehDjKFZWym4Uw4Mdalhzm4KRbTkEu4vHgTHYvHnfnMasujRa5AF6yhGfk1q4wWwTNQQx7673xzGsL++B8jm/mDk41TkitZ/a2wdzbYe3NvxrcgWsOb4=,iv:h8jV4g7i6j/wJXkuasQVa0qvj0+8dgolRGzxKNXHTdE=,tag:AB0orkpAbmwwTIGdYcszjg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:ila2w5bp4I/Q93l0DydzjnfkeTCz8QOLMfVlPZMNdFSCEqGMZ4UKMVBD8M9Og0bhtE7yZoUBVnbE,iv:1fDKmv3EU0VEkaQYoXHyDO/VE6NGE0Czp8mjxNjsSqw=,tag:uDlk3yPvXxiqwPHzTsyb+A==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:1N20XxzglpNoa7QRP1OazPWmvSKJd91a0yS7dsrfcNxUw4wfZKFZ9XgHLuvaJIUT2ur6r+dixH5KepqvIgchTNOxIYDe3V3Tv6AqU7C9VqkvtnOEUoCwv4IW7bX0snwsQRwaIshOjGY0QHJ4ZIfAig0B+t/otw==,iv:7X73ausPfwLAl/xOSUujR/pNrBvm3FdzI5qBv0bm5PU=,tag:godlm26kktM0NWa5xevtXg==,type:str]
+    #ENC[AES256_GCM,data:EEwQlBZQpVObJD1Xu0fnnbyH76C31T/NiZhR94qluyrwmIj2yWwTS4OnZh4chEZK9F7J323TdwkW,iv:69ifCcVOqvnf0n8I6Go0+g9mgKTykn+9oo3PYpsr7Og=,tag:OYKPIhsEAAFIEOHN+0U4kA==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:rVFf4aTiFzX+U3aokh0I9qe825Mg33+22eNXxna8X5aHH6JbeJoY4MPGzWfE/PKMKS1pB61rf32tLGbMJIHJVgm41kfjl8qeFWsURUoxemYo28MyNCNlCee9qYLoxYMPiA9Kj5v2n6/rm1eaP4iSbZ/+j75M2g==,iv:qgj6jENs3JwiGinznDvo34bhiZz9mKaQlAlXbHs1jT8=,tag:iLS950rE2SVM2SxnA8QG9g==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbnFhaHdBOURWQlR4ajJ5
-            Y28wSHJ0bTJJYzlmNUFDSWxXakhiOWRrc1Y0Cmo5eENqN2VFUC9VVmpBOWlTRkdJ
-            Y2VkSjUvZ2FBQ1FjS1JDZnlveVBhOU0KLS0tIHRRY25hTTF6TVpJV1FuNzNCMXhs
-            dHMzS2praXpoa0pYa24wd2Mvb1F6aUUKSMl3gXAQTW/n3CFzYLPiRfWmmVnUHJxp
-            cMVEwPIoKT7g3a2e+isrCMIFzYO6DUB9R0kOcnHJp/GhYYQ2YBXBzg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxR3ZEWkNCcUZHS3pqNVFS
+            REFEdmw5UVlYVmxUUE9VRXg2UDFUS2xXd3gwCktyK3NIYTYySmNnbm1nUnFGc1lK
+            cHd2SGZMSURBL0dIRzhZbEZkdUMzWXcKLS0tIEpvRkdKUXgxckF3VUZibFNqNzRR
+            Nkx0Z1JvZGl3UGdyN3hhazlEbk51eDQK4pNlFagF5B7p7kLsXU93oPwjrVhMTxZA
+            gfHLIAIZqRmtoaf11vQkMrR9so5d5u94mtMdsjKEPKeuv5l8FDfZ/Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:58Z"
-    mac: ENC[AES256_GCM,data:qnYgvLthPxLuZlFegesa5/Qr/9GeOVnk+4FotDPyra2yFNQcpOKfv9jW7gWZ5uJRzwr8XEOHmkxpmKnl6kpCEsUSb7+nPFFY4kKswXPuZQxx+l8y0/6ptAzc3dkLpJr5j9+a/WqRHAvswUbTDzSxFPrXzw9h8PLHpwwlCT/BC+I=,iv:4QbB6wxcjjruTttctusi0zjBDW/9mmVqLr1rhd5HIig=,tag:fA2YuRCK+DIrJMVsHpYZvA==,type:str]
+    lastmodified: "2026-08-26T10:24:05Z"
+    mac: ENC[AES256_GCM,data:s4CJh32SQVs2JAY/B6nJbtABlPOWBH8vG9mBgmh07g+njr4MZmTffBRm1G8iGd8vQKu392I12YaujB0UnKlOgaaADHxdPcbsM0rwDGmr9seNfBdm7vSiaCPdx4LdF33cRQUzO2RJDzsPwFdi9CZ/adniAF4KKpMXP/q5No9nfVs=,iv:O21prp93PERYwsg9gDDCI3u/TXH2spTYBqLFGxrFj6I=,tag:olXERH/80BWk9cts3FYBwA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/webdav/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:YHfzo7Q=,iv:5raysc/XOAw45l0Ok3iRSBNuXfkAH2AvKsRfymRZE1g=,tag:mTEOTKYYunCOtXzcTJGkIQ==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:5Sjh8CchRM4HjuP8CTeS/ekriRc1j/qUlA/TOuQLZuKV7wwSXhWZYHxo6zTX8wBM,iv:M6WWswYzJDQaPhOBzlnB7JE7UEAjF41ZUe+zfESd3Fw=,tag:WTYqzNxe86vukoipK6vCww==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:Zg3bTcY=,iv:7tDs39PgNMfNugPU3yUizj07SPSQ0v+Ff3wbAlYNs6g=,tag:aOLQuabbgNAWWgok1/gWEA==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:u3/voFWRSMe7KHtQ3psaMk+8+o2/wv+5YXGGpUkOoOO9E26mzs0CCK+oevwQliQL,iv:6SK9Ms4W78JwMhguQC5PLb9BR2hz3lv+hRFZ+eOn7kA=,tag:wLEaUo59NdhR9s13BEzaQg==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRndoamcrTVF0Q056WlNa
-            ZjhRQjY2aFJWZExYOGlkQWZlMTFDb01Wa2hnCkM4czdUOG9aUnJpWHVsRHhUVUR3
-            OUpwTXF3SitjTnFMamJBUDBFcUliUzAKLS0tIHRXV050SXlIdENyWUhQSXRSbmZm
-            ZmlDS3h2cFhDQy85UWwxa3BBUElPM0UKhodc181NslVLEl3X2Q2Bt4ierkyK1ZJs
-            8mT4cJNowLL6J8kb/EZkHVvBNsNBdLXd+TxEkSBHDVHramxJnUhiWg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoeVdvRzNrWVRla2dkc2JD
+            ck01d3k5SUdzay93UW9mNXYzL2ZTY2V1Q2drCjJoYkZJaTA3ZUhtVERXNi9odzFK
+            SE9rbjNULzRFQXpYSjR0eVhCVXNFWDgKLS0tIEVoNVhwSU0wc0UvSEN0cWRNQkhv
+            Q2oxWGJyWEJIU1cyNnBMMVRjZnR2K2cKo9iJzlmHnymjAKsG9O+UmESAepBsrgFb
+            6HsnbB7IO8hVvyRqaYiSZ17gr/bN4Nafz2CP6WOkVgq8owNW+aCf/w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:59Z"
-    mac: ENC[AES256_GCM,data:VH8OzH6gpfRuHqBHRctUER2b+2ZfANg4tYM67pZKOuznEoAgyZWSjt7WDXjtV2yHQWGnK17pZTcWfJf0h0KfLVx1Ab3JOWwW0I3TBL0gNoL6TEtCU6Ot5+f5l3s6d4ZXWEqx3hovqZQPSwon+sTPuvSaQ0fEXIyTZE9U0m/McAg=,iv:b4Tmw7RUmMZeIj8PuSTiOBErovqnYkxz/QUpPwPAHVo=,tag:HZq1YckgzEWmw4+zN/9B9w==,type:str]
+    lastmodified: "2026-08-26T10:24:06Z"
+    mac: ENC[AES256_GCM,data:fgT0GbLjGPrcgu5va6XfCi587ukrBWWQNqcdUoZRnf1kBgPhEdxoJ4GgjoBnngfjlkf0m8X7G+QN8hgnGcMgQMqJrHRAVKA6Iy/EtKLyhNaY4DtPhJaRYYcucBnRZ74s4bRbKofYY6VbvAS2JkMv2syF1NWc3ZTBn5BxLKbAhMI=,iv:N8edVd1co3Qy6wQaY6AJeZHBEw0FttjZCMwgMA8qGGk=,tag:reR1KRPqLmwwNCanPZFbog==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:XNaYfWzsYQT0SxtzWlcwtHqdhUqMS3S4/6J+rdw8xC3fqhOGmCCQLHYieUsbSPq8jnRJkFdICc7eCf94EXUp54MyO779iKrfHi6BuZ7Ejs9+cbnwr6uh9bwl3thtQNTBtiZcQFLw3OD3r8vWJ0v7G+IPCE9sbdZh4Yw3dvI=,iv:RBUJIy2BggnnKYELCBn86Q3Fos9mpRbTIE6rVc+st88=,tag:fseW9mXV0a0Idlc/PEgfoA==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:yDjSGOEbAKCHAOigQEPK585e4YPAUACn81ffp47+KGJuRvCgOt1gNkbqpHIp/pUFoA+3kAEtlrX8n8xyEJyMPV1ugLxeC7UwpI2cRKsaBRaebxxfHs5/23yyGVhEqVZVX/rZZ1mlgH+96JjVVZjqWsk31eAXqMyIWPaObPI=,iv:CpKbnPCO3j+Qa/29CP2x8/qTLNA2hrkB6Q29+84pEIg=,tag:xlnxkVIK5d+KtNgR0T4+6g==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBReVNBK3p3OVc2SkhIRDBv
-            L2s3UFFyZ0ExZTZqbWt4RHYyS21ZcGVOUkhVClRIc3BrTkpZN25oc0I0YlpDSGh1
-            R0NIUUgvaXUzWi9JWmJnR0tpcWVaZ00KLS0tIEFQUUQvbytPLy9xckRZTFVuUmdH
-            SW5icGcrM2tsQWlWR3VtSVJkZ2RIZmcK/T7qMB8Xs/QtGUvEC+naP6AUBBGDj1wn
-            HZvBD8LT6Gox+KDm04OMFELo0ez3GPpm23aKEZusRQB0zGVAfnaDhA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEV2N1VWJtam1JQk96WGVQ
+            ZXQ4Zng3ZTJOTzZJblhoNEZIY3VsOWxMMTJ3Ck1CY3hiVlY2dzdyZVZ2Y3FONWxh
+            dlBWNXRPN1NUNjQza0xjK2VDcUNGazAKLS0tIHhta2xxM21ZQk9nQ2twTUM4SWpJ
+            K3djaUhEbmtBZ25VYVB4Nk5sSjJXSUEK88O9VBUtegyLxBpcJsysi49pTfPL0Oyi
+            5ODOjdrywDNdnp+O0FtdQo4hh/KBChqnyKVa+ejVPvzszwKVWxSnkQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:23:59Z"
-    mac: ENC[AES256_GCM,data:ohMEmtfNFExpgx/nB6UdSpqnKMwo4NwezBzrSHUZXRgvfzee/eZmKqDV1cLTmnMKAkdZfV2WOHYJm85q+2oZdkGtneiEY5FTMwEMlNRoLKG5aIXID7UOdDKjjJBU4n8qnCMyqnVQlnyu+QKvSArl43amKC7T/LTaqE6yVd1JgSI=,iv:BRN+VdWLkh30Gt9Bc3f7Zec76y13nYgFOMiprAt0o2w=,tag:wEd6XHace8vadHSL78eyZA==,type:str]
+    lastmodified: "2026-08-26T10:24:07Z"
+    mac: ENC[AES256_GCM,data:1/8hwIr36WEoBO5R6VzFx+RNLUKwiTnOz5IlLfZqsPG2CP1JHy/rZXZjrbluyb8oAe+SmqP/PreuRLev1aCzuZ9ovKpF3yUhccbSb/vZHdLzrOsxqF/l2yHkrJC3Ux0eT009Wih7DNqOdvGdNYA4apKnUlrxHVdgiFnTHyLYPys=,iv:xiVfSdNXJu6N7DZ6rn4xtwuEBl7lPorFsqbFyYGqL5Y=,tag:XT2/fBL9XG1oslhNz54GKg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0