fix for nfs-photo not exporting root dir

clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: longhorn-backup-target-secret
     namespace: longhorn-system
 stringData:
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:UAfpfQVSxY7M8Vuy9auxRbQyCLo=,iv:HyPtCLEVmd75URjUUX5x7nhyfyu7HDy5qzO2aHOvxQg=,tag:TsWcRkUrQAekFFF2el8KSA==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:PadmaaJ060G5HEv4LHntZkMBbGXwJVAKsAWKKUkvI302zMV2P2gVew==,iv:xwexyiLseILBc9nZoN9Guyw0ta6JzctaRvqLO9gHWrQ=,tag:+uKETvBh2c0UTsJ2So1lUg==,type:str]
-    AWS_ENDPOINTS: ENC[AES256_GCM,data:gzlcUgCtTWMSRoK2zfiWNLh+tex9OOEjx6auG1EDSR5Y5BjcyyVFK3mbWuRFm221m3mfoWlamjCAQE+KiA==,iv:ZaZLMvSJVggHw1jWtE4XM3W807wufMmVauc/B66CUes=,tag:Yz951hKdoSenW3VjsnQB7A==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:MBmPqqFQatqLTAwL5sivEvV93/Q=,iv:A4ywENL0rYdluFPJQZVG+IdHhNrn47d9xL3rAr1sHME=,tag:FRJOm53W4UK2EY7eptVrcg==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:LnSc0k1APg5Y4EKjMtFIu1TgelTqYX8QzYdKF+CWHgHQDhNnLS6bBw==,iv:IbybtpV8QHT0eCCm+7IpATezXm2Nj3l9RXKGzxME6xc=,tag:CK38V4FRTw8AaQPuRuoFMg==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:am94HquHDne9XyGcde38ZBMBXo5twBVkSnqDAGnmfGFLoIFayqkr69bMF+7t8f3Nb2TgpwJq/VT6usR1jg==,iv:ktyeXYE5QDVdRq9WDmshTBK3sdMw71O+dfSLhMzM7Rc=,tag:xdCBLJdy4vqUtsbM+Q4/9g==,type:str]
 sops:
     age:
         - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMQ1ViZG4rOVU3WUFZN2tK
-            S2ROcG1RTFVZN1pJdEtsVE0zL2RQc3BNYlFBCkNTa01vSXJaMDk1TnNMUmQ2c05i
-            eHE4WW5mM2Z1ZFVTVU5Dd1RZOHkwZFUKLS0tIC8rVEhCcDRERGl2cEY3V3RKVzNm
-            QkFhS2VCMzZHTWZxdmszaXliS2RSajgKxsKmvpW7HUg9MLfN0uhmPjNauvRc4JLK
-            x04c6Uxp3E1XEJ7Mno1IP4b6VgYf8Np/s27YPw1VDq/NAVzzogrGIw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0LzZ6N2cweWVMcHl3MjJs
+            NVpNOVExWmQxbXhkR05MMVpvbCtHYjY4V1NFClNHZm1BZlNqVS9aaGp3MHNGd2hH
+            eWs1RVB5QUorejdNWlZYdGE3YXNBQ3MKLS0tIDRURlh6U2FmenhjVldxRVN4OHdJ
+            Tjl0SlhqWTF2TXBCWXY0bm92TDBWY2MKpy3gQGz6MM37p32Hhcyo6Q64gIcVMUH8
+            Y2gJu9Hx2z1wrOXK/z1lEiXsWPAl4KIaleewdEKCCbuV4UlrS2x5xA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:41Z"
-    mac: ENC[AES256_GCM,data:6lj2LI+yllaE2WzrklOqNQ70sMQU57NMK2Zza+skImhc9ILBN1WzfnNnlBGs97m4m4+BNKFeJ/gH9DoNheBSk+7MJQeaPeOk1n02i8rYWibJT2t3/7jW84R9a2mPQCGDXjMjY0/tNITXLWrwJPipDuFisl5xY1Mme3UXnJIlzoM=,iv:Qs6T3TvbDV0iyX/R84jREOmf212DRU16sWH1phXXU8A=,tag:1KFegi9I9Y0Tog1OqDyXmQ==,type:str]
+    lastmodified: "2026-08-26T10:26:49Z"
+    mac: ENC[AES256_GCM,data:vK8KqKVXonkJxkVOr+LefxTEt3uaTgbg6aSZlHsEFVjBfilC9K2C1j3baD4LYFUUiiALPdcDJGCUpvT8dlqxBnKcf0q+La58c5579QpLqi/p3TdYhubhPqw/J65AMnkhXFXkAk5Voz7SSeXFhidqXeSR33XIXgEqLxtdqFBRfMU=,iv:t20hqKi2YRqAAYC9oiqxB5hBu24l1Zox+7mtsN9wuhg=,tag:/xRJV5oACz22AJJcK7v+hQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml

@@ -4,24 +4,24 @@ metadata:
     name: s3-backup-proxy-secrets
     namespace: longhorn-system
 stringData:
-    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:b9v8b9BwBGDibu9rQthptt0NP5s=,iv:KvNxaQ+nk8esISuspb3sf/1SHSt5MBClps/Ycfmjj1c=,tag:wyD4EgO59fdx4sipfVYQEA==,type:str]
-    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:c8wNVSc7CtYLINqmG7oY4ftgCGwTxb630ofYDBkLMHiyDBfunjszwA==,iv:yiNPYuUjb3yaWUbX66MyazUWO/4AZw/Cc/ua4Zgq0Hc=,tag:fNLFl1/LY7Io05iPRuhAfg==,type:str]
-    CRYPT_PASSWORD: ENC[AES256_GCM,data:7XEbJttEVF0JKzV0zPXLNeLPQ6SZ2oFN83z5XxzpqYHl1/XiRvP6+asiRQ==,iv:JQ0GK9T6HEh6SuRER2ONl/OscpcoJRAcmy3ZHW4HQnk=,tag:v7cTylPaQqcGjMBTdbGpQg==,type:str]
-    CRYPT_PASSWORD2: ENC[AES256_GCM,data:IVYIFuSDKeqD2jBaXOv6GvcXCqU2dZCNIwkj/q/k0ohm+73iKih45YwVXg==,iv:eGTVfCa0TRsz78Am5CsO8KouKFTbiL4owJd6w33MmeM=,tag:1zr10qSTBwmGEpcAVcvXlw==,type:str]
-    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:n7IE2PTAZfG6S2u8A9DTXFZmP88=,iv:ChgymxBVm8zQdPiDw4TB8w7F5A7VpNe9EktERxVamao=,tag:5U2PVK7c1HZvmQEXuhWFZA==,type:str]
-    PROXY_SECRET_KEY: ENC[AES256_GCM,data:6yr7+p+Tku/usMeH2vei6bEGbQPC0HKDzCaZwpbb06WJE5UlXGSCTA==,iv:7SxHkt7TCKxCNqrwGx4kb5343st8CyX7cPNO1TaEpUA=,tag:eq3pdZFvgIgkv+Pw9ztCLw==,type:str]
+    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:xFat9SY+glW15F+iNzffaiCqd3s=,iv:tiY2NSCH5q5DTZIWQ38/ki6coEH8P5Cp0zE4uiE8iwo=,tag:e8qehUKU0gtMdPgHwDU0Jw==,type:str]
+    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:htJ2+IAz/+49FAwjMPyn5XBt9G+THHqc6zFve4T6RUu0z3f4Cwg3Bg==,iv:rWgw34I3Wp1zfRkARF9Tb1WQoS1IpyUbe0eI+AeozY8=,tag:wGTV7tIHYRtjlPkZsJENqg==,type:str]
+    CRYPT_PASSWORD: ENC[AES256_GCM,data:YU0rWn5a+eZIZwkLFRkrRv1W4LCdQh0rJqvL6+nF1qACCqVELlavYGVr8w==,iv:ZI4YvjnjcJ4QWq8S+sHbKsOV6atYS3VnxUtgWdFFjpo=,tag:w6xBf0N/NVQXzcsl/3Be/A==,type:str]
+    CRYPT_PASSWORD2: ENC[AES256_GCM,data:oygeIgD2T7TiOI1IUtFf0qQsox1CsJPdWqygK+Uuf+YctJwS6tn9jQQhrg==,iv:R0wTrZK78/YRFgka7jFhTTUM0nK0R3DB7jf/2dU4A/E=,tag:7BmRhpbtIUp0O1+tVGDHTw==,type:str]
+    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:u7iwGFm+BfqBg+5LYhdibl99auE=,iv:7y7IQaJRL89nD/V3CtueDGuy7+6SeyqQu9CxxsQo3sM=,tag:r/9B5NAT+VNIrTTyzKwBVQ==,type:str]
+    PROXY_SECRET_KEY: ENC[AES256_GCM,data:E/LBjeZ2WtZEQlaT3Uhd2/5LsOWNJG2Q3oSPicBAOxy0l1mAgv/ylQ==,iv:D0zKRsCaXCXsLA8P3eeiXJNUb/RhFxcpgm3EJpp1KV8=,tag:rSRNFSCLwsrYLSROdo1qKg==,type:str]
 sops:
     age:
         - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNeHdrL2VEcFMzSG1HRWFx
-            V1NkZmVDejQwT1o1aFBHWlRZOFJobmZuSWhFClBuYnhaTVkrTXFCSG5raWlGd1cz
-            NlJtZWhoeS9RbC95clVmYUtOcUtGc00KLS0tIGFscnhhUWhRRTBBcExKeHBhNXlp
-            aHZGcGczeXVmNDVCSFJVVWplU25jN2sKQgPb6JCn/ZgXPxsIGSSzC+M5gKWe1aXJ
-            Umc5kkL4gafF+dGrFLza+03jYIAe+Sv4NG+w5V9/GcAkv72hzltq6Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUHBLTTZSOEVqSVU5d3JM
+            UDF4alpkRXBRTWRINDIvVW1kbDFBZ1F3T2lJClhqTGUzN0VqZkNkUmc2Wi96YWJW
+            RVBSenY0aWYzNThOSkxzQ3N5UFd4QUEKLS0tIDg4aUNJeExweGxRcjVhVmdqUW9m
+            Y0lWVFVoSHBhVEMxcCtkS2RLV2x3dUEKwwYpcdIoTrOlVXeTmA+f8suylPGTFH/x
+            gadjmEKauIN80Ejovl6A6tgsuiTkInZvpKFLWp2S/rPVJTguW5TWpQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:26:41Z"
-    mac: ENC[AES256_GCM,data:pR42/OaM6QjgAI9qs4z6Oyj7dwWlL2TkyGbzvaQFLpwRXPREXpTJQ7cAJpda20N2uktbizFqLwj6BG0kKxfEjniMSt3Z77jOdP7nED94KqyekDOIGvn33CwcfOhh7e+Pt3uICXC89cdGkqMt2xbqGQrBtr05lhVrxUtBhyDUuOg=,iv:E1sEx6Y8hOpEeroWURMZog5MbPmMdDL04RjcvrrJdk4=,tag:aTO3QvLUb3xY5vbN9YkeNg==,type:str]
+    lastmodified: "2026-08-26T10:26:50Z"
+    mac: ENC[AES256_GCM,data:8aW/6n2DklTwuuaCKMwVeeQC4CSitEBZNOL/gUrOH5phc+TWmMhKHa+YCTFBcLsYxgv+m0gqMve4gRM4gfWUtQYczyiolRSh4m3MvG6WnAoXFgyUS0OzyvZr2ArmxBJkTDyX70wHv6aoQVPwVIPfPsVlS0x9eITaXXtgVcZozag=,iv:N6oHGPJu5IDeVUa6eTyRfhlHhI3r7z+LDwc8SwcY3vE=,tag:ghEyWnHu2VbPrEs83R13XQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/longhorn/storage-classes/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - longhorn-no-retain.yaml
+  - longhorn-single-replica.yaml

clusters/base/infra/longhorn/storage-classes/longhorn-single-replica.yaml

@@ -0,0 +1,12 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: longhorn-single-replica
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "false"
+provisioner: driver.longhorn.io
+reclaimPolicy: Retain
+allowVolumeExpansion: true
+parameters:
+  numberOfReplicas: "1"
+  staleReplicaTimeout: "30"