feat: add ssh key derived age key

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-05-23 12:27:20 +02:00 · 2025-05-23 12:27:20 +02:00 · c91caf6b6d
commit c91caf6b6d
parent f69eec0a2a
11 changed files with 195 additions and 100 deletions
--- a/.secrets/hetzner/coturn.yaml
+++ b/.secrets/hetzner/coturn.yaml
@ -9,20 +9,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWaDFlMEYxM1B0QTBCblkv
-            dnlxR1pXZDZOamZhbXp4cW9QelFUNDY0alZ3CmJtZmU2YVpzMFh6eXhQWngwQXlz
-            VW5IK3B1MnBZWjR2cmZGRjByNmVOSnMKLS0tIFBpMUZIcDFJbU5DYzZKdzlyVmgy
-            c285MmZINC9TOFdEcWpjaEFnWnhuMnMKniLkzEuEBOcrGVVk3z93VtAzYKkud5nB
-            lhNhqW7KbvXC05u20yPtYpD8z6pH4iulPG+yyvhahWBmc7gdgTZKdQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPbWoxSHQrdFJOMVRJRzBi
+            RnRQMDl0WnpCTHpOa2hKcTlmVEFJSnRmY3g4ClhYNGxyTlVyVUFzQnRWUmxWOTNy
+            ajJxaFpueE1qQ2VlUkV5WGx1ZGZlMkUKLS0tIEY3TXQ2SE1SWlJOM0oxNXo1UnJP
+            SUNxcHZJMkY5WlFBeGFuNVBPL2pQSFEKp/du1Bk5NDV6EEbSTHae2eT9jcqoDKCi
+            Dh78rpQqI4ycVmHuKF27IWqzc7Ypzcg0xdvtX5M1VAHVzfTam2uBpg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqNHYrVlJqeXVqQ0kzajlk
-            RmZ4SzRWOTlaUlpSV1dnM1VSQ25XTk1ydW5zCkgwcVhvVGhsdW5UNHdBVkkxQkdv
-            bXJVZjRSTzY5MjhoeXMzYlZqb1IrUGcKLS0tIHV6Y1AyV1hKZGdRZENEMlNlTlYw
-            WHRNMTY0WGVVWG1icFdqYVp1b2ZkR00KM5C2+YE99mWkIwaCLuGrdyymT7ujaxv4
-            MBU2TP2gYsN6bzt+LvyRC2OiOQcJ/2HgGimwK4FB5Y7L+uWiQIMpKA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvU1FFQ21VdDhmOGVjVm4x
+            dXp5eXNFRUJ0Y3kwbWU4RXoyQ0Nud3dzL0JVCnRMOEZsVENCSXMxbzY3Zzc2cmRD
+            TlMzM2JpQ0V3NkN5Ykl2cVl0azVJM0kKLS0tIHlIeDNOZXdsWFFIN1JTN2Q5V1I5
+            QVY2a2ZwNU5IQTFLTkxKQjY2aGRKbDAKG7ayD0zv6SnR5lR/eitYQ4T2zTMSBwua
+            RAXETRKaEpjO9GNizp75Jz7iC/4F1gxV11YJt8qDjLweX8X5wYBJXQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmNXBXb2NXdXNuRHpjZUYv
+            TTZQamgzUHd1MTJGNENZRUJpSnlIeGIrZWs4CkZuYnRBM0hrNWVuSWRVQmFveE9S
+            Qmlhcjh4K0VQRlgzcWJFWVdFSm1yWGMKLS0tIFZCV2kyTWxWVWhHTERtUUJhUHdy
+            TkZzTVdmOFBYZ3ZxUGMvQjJmbVljeDQKx08juXBS3n0yQWCG7MtR1/TDFusK7S4L
+            gDrpZ7r5d6bXDnlvVHfI6Wy+h/1A2upwFmi11AXKvDPrKKYBURUY9Q==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-09-17T08:21:45Z"
    mac: ENC[AES256_GCM,data:A8p487vIXqxZAaD9Gmr7DcU3BkRVPvJDpUtK1xgCrJzmPYko6E6eL+n4LY90JSDOPG6ab3ns4URjnE34tL+QG3/M2viw6LvrYRbfAyubwnkYUX0QWXa+x3XMCuqKv0gY7npW9dZXgUJQx6KIB5jKNiLP9CeCyFz0C0FQI34DGwI=,iv:k7kKcmaM5IBFl4Ickl+YKBfOPdqAFtmps5rgTMSFjmw=,tag:NVATG1TG9MS//ZAxdYOAXQ==,type:str]
--- a/.secrets/hetzner/forgejo-runner-token.yaml
+++ b/.secrets/hetzner/forgejo-runner-token.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBOUVxRXduVWhjNHdnZCtH
-            U0VLWE01VkJaWmNDUzE1bmorRDN5RWNwTnhJClRkcDNzb1U2MzZ3TDhXSnI4Z252
-            a1A0dzQ5eUlScDhhYjl6WEdnYnlxUm8KLS0tIDczaXlvcDVwUzdQY1h6a01QM2p6
-            T3FBVWJqaHQwVnIrNFVsWVBub2djMG8KsbZb43UkVe1Up0O15UTC/PdsEkwwOnVW
-            9P4AGO097HfTLkAjKJHx5QYF02dJ+4xb6rgzUYt9Nr8h8+GD0xRAfQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0MG5wbzdndHRCdjJTbFNK
+            WUYyeDYxLzVrSUd4R2F4NVpGTStEUGx0VkNjCllEOENwa0p3N0NnMjZtcStCU1lk
+            bTVWdi9rc3Q3Z3UyWjFPaUtoQ2hBRE0KLS0tIGlEM0VJUXp3MzN6WmdJekE1WlY1
+            a2JOeWZzdW5Od2ZJcjdrM0ZiQzFwb1EKLsCXd512uFw7FmiPTOLcBMIg8y/xZmtw
+            uZRuHua2jDegV6bWUkAg16f1Q4DguEL5JZFqCjmveJclZDUepWgKXw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdlhZbDhqamNGU2QrZDN5
-            MlY5RFgrV3NJUk1PYWJLSnpCZjhiTUF5b0RrCmRHV0JnYlBmL2p0WE9UTzJUcVhK
-            dkhiYlJtYWtDN0lseHRCNTUzb252TmsKLS0tIGZKbjA3dkVwcnZNK2djV1BvSkJo
-            a09FM1ZqSWdsdytjdVFCanVldHVoWUUKyy/LXNd/vZLdgXYXfloFkNviaddvrazw
-            4Z0bJ/fqGvRPlLkTUzZlhWKVXfZFGgo5nQSEvyphkIb6UCyd9VamnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJOUNwUW5GNEpqVUc0OENJ
+            alEwcVNCZlBpYVV1VE05Yk1kcGx4akVOTmxjCjd0enpYQnp3aFFwQ1kxbnlDQ1ZY
+            T2RGOGsrMEc1eUxUbkpOYWt5N1RIcUEKLS0tIFVUamVUVisvcDZyV2N5bnBLV3JJ
+            SHp4RFpaOVRWeU9pK29PSTZzSUFuV1kKsrxzf7uGudHrIR91Uz7ne/GSN6KtF5PG
+            Ib3HDxZsfyutRAPhz1N0GfoDuZZl7h2VjXkuDxi3ENMbH/5GdvwPFg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGblRFVFFhbTNrcS9ScW83
+            a3FteDlrb3pDNXFma3J5NFAvemQzQTV6RkFnCmgrNXU1M0VMeFVvblErblBIRmIz
+            WjkzaWNIMUd2dTlaQW4yemR0cCs1UzgKLS0tIFdHTzlscnNJNEZVT1NROVdxYWVo
+            V2NRRWk4QVdNRW54KzgxZnQ3YjV5aFEKy1CG2ZBq8ZcuCKgarCSddiScN09ul1hz
+            +rK4tg44k1sPsrmK1OIY5GLNVg1oKL6huxS+/JOe6FWB47CqRDyW5g==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-06-27T11:07:00Z"
    mac: ENC[AES256_GCM,data:A73eobLa3aPeHkW1scY/xWWejVnCcEPJW9Vnx03HzEhk8Gv2dYAA6Xvt7hXMTuYow4A2ixmAFjn5GltvvOo3dUgumvHBlf6Kt39bwumiNmLD4mcLAKGnL55hSFn0gInEL5xjiqvlIokbPZFJec7CsS2f8PsL52/cYe5u3aSsqmo=,iv:ch2quofqaCUT1EjsIoWAlQzswfxxAk/eTfjB2tWsAzg=,tag:BlNpCt9r6iZdzJASCWHThQ==,type:str]
--- a/.secrets/hetzner/internetbs.yaml
+++ b/.secrets/hetzner/internetbs.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHT3U4dmhTTmRGRnFxMmhQ
-            Lzc0RWdQaThYZDhtcHFTSHNPNS9pd2RKS0N3CnVlUmx0V3BCUHhkQ1d0Nlk3NGEw
-            bHM1YWQySEZVV3VjZUcwcE1TSW9scDgKLS0tIFNYbnJxVzA4d2dsQTRVVXhDdFUv
-            OS9xVXVUSTFmbStObGdLRUl5RWlGTk0Ki6/1TMHB/BfL53qDYvQwmW6xHes27Ni4
-            exk+T9OlgKsHQfdRpu3t3TrdnFIJYmAJeuU6NNdlp18juNPp9kbBEg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzV21PbFBYWEpad2JEc3pI
+            dGRlcWVMVzdHNlI3S21PdGgvNnRRZW9Ha1ZrCmFuQ0l6RzZENWMzVjZPZC9YcTIr
+            emd4N3JXVnZJNUFiQWtCemUxSGw2T2sKLS0tIFdMSkY3K2N1OWd6RXpXc3MzS0I1
+            TkNwOEVlZVdFU3Z6WDU5ZSs2Yk13UU0KO/5ZQuzWjk4JocFzCL1Zl2B/s7ptFYpZ
+            gx6RNlcyWVWR+xAZPs+YbwyEmLwvho888Pz8FL8CYjkhyLR4hlXADg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUY2VCS1ZtWjc3VFFLSUhl
-            R2EzbE5SMWlWOXZhWmVuckFzVGR1aFp2aVQ0CllkemVFaFhwYzgxNFNlL3Z1QWRP
-            d0Rqb2FtYXI5T2ZzUjJIMXluUWwwdnMKLS0tIEQ4Yk1vRzVpZVF4blFxVkdIRGFl
-            ZmMxald2NU9HSE1ZOUN5R2twMXdmVGcKAXcUXemrleTxGxkMP+4mWh8uYwN1FTDc
-            cHbaln4DsDOqHtqqpJheTqN0mMOmkDvTCq2jbiKIkr2sruh49acIoA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0bUN4SVBOcWhYUlZwT3ow
+            UUtWYzhnbnk4Z1paQndtSFVRUVgxRHdUdUJnClJtWmY1VFE4ODJiVzdZdWJSTDUr
+            LzhYN1NtVlhWUytUd3c2QTg4eXVQcUEKLS0tIDk5d1QyWnFwQXhISjVhdytERTE4
+            TGI5REFOd1lTOVN3U0V0L1RtLzBzRlEKCtJcJQBKnPa49+J+y6BGdJYgG8NEaYSv
+            odd5rU1RTbycoQtzytFRlXgNTyq4APVjdC6Z3aowPAfDfm0dJqWRxQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONzRMSGpiZHlpbVFyY0pv
+            Vm1OV2RuSzNMaXhGUFJWWEVRRThPUlRucHlBCnRISUJtQTdmZ2xPVTFlZ1pOV2py
+            TjlXUzBVQlU5MUxJREtKTjRETUFtaWcKLS0tIDFhMWpZQlF0cWNsRHlITEFYdS94
+            S1IwcE1zR1lQYkIxZWRSWjQxMHUwbVUKK+17OYaVy1gC4S25LHurCCx9hE5zNTDi
+            HvzAvr8djBN5nTfUIvBtSXWzgyh1qpL74fgf0MfVhg0Tt6BZpkmE4w==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-05-17T14:40:21Z"
    mac: ENC[AES256_GCM,data:tksLD103d7/GD/Tur1eqYnl6AMYdonE0pnuPqV3cyCW90Hd2g0RyZEj7ni7H6wWezKQyAV2bOiWt+iJenwzkS0y8DlSY0nS/WScbJ4uz2vgaSM6j1ESxfUbN+Rjtu/Inw21FHlflrq094bsplV++KNo9SoC7SVKyd1eo8/+eh7M=,iv:9cNgBh6HewMupgm1pwc3jCUgpkiKt51pY+buEb1S3WE=,tag:MAoZfYrw7CSzyXvEkwzYxw==,type:str]
--- a/.secrets/hetzner/postgres.yaml
+++ b/.secrets/hetzner/postgres.yaml
@ -9,20 +9,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBOUVxRXduVWhjNHdnZCtH
-            U0VLWE01VkJaWmNDUzE1bmorRDN5RWNwTnhJClRkcDNzb1U2MzZ3TDhXSnI4Z252
-            a1A0dzQ5eUlScDhhYjl6WEdnYnlxUm8KLS0tIDczaXlvcDVwUzdQY1h6a01QM2p6
-            T3FBVWJqaHQwVnIrNFVsWVBub2djMG8KsbZb43UkVe1Up0O15UTC/PdsEkwwOnVW
-            9P4AGO097HfTLkAjKJHx5QYF02dJ+4xb6rgzUYt9Nr8h8+GD0xRAfQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyQlk4cGtMeHh6dmFsb0xn
+            aElOWWlLdi9NU1FuUFJuS2c2bWRwTlJneTJRCnRhUWN5OHVJd3lDbGhUeU9SSExq
+            TG1RUCtoZmJ1eWdqRmhDOWZKRXBwencKLS0tIFA0NlVuSmhFNndlN2RTZG9iNnYy
+            L21KcjY3T1FlY2RVZ3B2WGxOYTdjcWMKWqUkrLNAhhKGXO9zm1CmEdK7hpJWMi3n
+            2OPPpK1kdrGg2ksZ6GDlEHslbNe9uc7ppKbJqiargdiVMdbNr6KWHw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdlhZbDhqamNGU2QrZDN5
-            MlY5RFgrV3NJUk1PYWJLSnpCZjhiTUF5b0RrCmRHV0JnYlBmL2p0WE9UTzJUcVhK
-            dkhiYlJtYWtDN0lseHRCNTUzb252TmsKLS0tIGZKbjA3dkVwcnZNK2djV1BvSkJo
-            a09FM1ZqSWdsdytjdVFCanVldHVoWUUKyy/LXNd/vZLdgXYXfloFkNviaddvrazw
-            4Z0bJ/fqGvRPlLkTUzZlhWKVXfZFGgo5nQSEvyphkIb6UCyd9VamnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlSHFjdG80WWdpRjJybnVm
+            NGR1MXBvSUZ6eENheFR3dDNSUXFXa1NuaGdRCngvZHk4clpIa3ArUGl1TWU4RmtC
+            SERHNlVDTDIvV1UyUTkycFE3SE5WWGsKLS0tIHN2NkdZdFlsa0NkeXRvb2Z0aFF5
+            NTVDbVZFOXFKWUFDNEZ1YWtPeG1ZYTAKzQXiE4TtP4MwKe/Lc2Zz8CIbR5IihaQy
+            Tnm/r+wpgL8hiEVBNf1M2JZ2OWuRXbRU4iGg4tioCUQTj+c6Vl+gpw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNXRXMEw3NnMwQTA3aU9o
+            UkUvZWo2L00zeC9kWkpsaGhULzU4bG50aWtnCldrTXAvNC9DYWJZNHlHb1pIaXJM
+            alBzSU9jeDJTKzRvSzArQXZya2RGaVkKLS0tIGNodFg4ODZ1MCszRFJDVjJ1azls
+            KzVncWhwSlJEaWV5Vk5ST1c5WFBVdmMKobROw57uATH20rLzLrAEDXdOGXWZj7DK
+            Az8GC7h0IAtujZGni7DwNsW1JLwoWtvEk1mbaTjnxsCg9WzUJwoKKA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-10-24T14:02:40Z"
    mac: ENC[AES256_GCM,data:7yikTQ7wsy13Hfwo5VKpUow8KW2/UYfzrWuA6Rp+21FglG3f7s6PLlrpMLooDPiaHxiPfc1fHg3u6UDcotyUljMZMQCCfvmLC1saALB6lFHEj3KoTa/NtgimYB2FeK92RcrU+EymmwZItmI/t1CuH8/qvXydWnO9zMWplMtW89Y=,iv:PEmElInahA5pPQvR9aatpKt+JhsKEtBPCPm926/59Uo=,tag:mflo6uSOh8SDKoC5JLHDIw==,type:str]
--- a/.secrets/sgx/backup-s3.yaml
+++ b/.secrets/sgx/backup-s3.yaml
@ -9,20 +9,29 @@ sops:
        - recipient: age149fqcw5jze00vd7jauylrp4j5xyv7amlu57jjfuzghkqtzlnxajs704uz3
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRjFydkVQTXlCWEJCSjNl
-            Unk1ejJ3K0M4dFVNeFFHK1c4ZjhwTG93b1cwCnJkN3BQZE1Na3VyZkc5SU1PNVkv
-            b3hVNzNIRStnemZ2RUlxSDJxRWtGTDAKLS0tIGVmK0d0Y2twMTE0U0hoRmRVR2R0
-            cjhYNlJZdG1QVzYyRzhoUm1wLzdGY1kK0QNSItqjmwLTxQaMEC1bYrtlpE8EGlHb
-            hkWADj/Qw8m7Hbi1YCL6YWalHfoHM80VlfGGV6oAH4KH7l2mykqfzQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0QmtUZ1UyVnhpSWRpL1N2
+            WVQ4dEdmWU82a0RTdzlPT1BrNFg0V2VtSVhJCnh2ZlR6cVhtU3A4RE1Ma3NhN3Yy
+            a0dqS0IzbGRBUDUwWWpSakhqWGpKOXcKLS0tIEZaUmpFbXZmUncvSURyNzc1cVBC
+            bHJWeHBxUHUyMVk5YUFuWmcyU2IweW8KhDIFhQERMQLT/wO4rODWMuyui/yBE+4g
+            0R877zKh3Hs7VazzncnRzVM8lI7N1rqQMLcS5EKt26mXfSyoj8Lh1w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNcHc0NXY1YVhiREJ6ZFBz
-            cGVqM2ZvZVBYSnlZZ00vS2ZjeUZHeEVrelJ3CnhQRWhWcFRHeUJrcE9OaU9sQ21n
-            bDJBdnMrRTRKdEtMcWpDQTdqc0R4dDAKLS0tIGZPeTdGOFBSMjhTOEk5TEVnS2tm
-            QVZ6UEU3eFBEZ2RBRFdMd0sraVl4Z2cKOxGZrvhamIKuYubd6xvHS5VgFuXw7i+x
-            JvB7Wuu1+GTKk3VM7n66tjZrcZId4W8N9kYtl7w/mE4l5Wg9zIK6ig==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNmR2K2FBZlNtdUM3QzYw
+            Z2JGU3d1Z0FsRHRwbTltUVZ3VVBJVlZyRHdRCnR1bGJ3ZUN1dnhvT243VUovcDlp
+            QnZTQzYvQXZHakQ4Y0FkSml5VENad2sKLS0tIEx6amNLQ25CVk5hYXgxS09sOHFX
+            UDE0eVFWR2hJZyt3N2VEa0hNRWdmNHcK6uvt5WmxA/8J9jhHz4HD/IPF1uz8narX
+            tOHudKLfNcm5KHPzoQdGyvknrSTWGBgmauSAgZqTrk5kMlQ5it/nEg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRDNKZ3dvaTlCM2hpVG9u
+            TkV3ejhPMytiUG5mK0o0bWJ2Mjk5Sy9oT1dzCjk0S2o0dmZWR09UTHNHNm9YRG9X
+            ZzcyKzM3dWhwVXhSVGJ3bUtFUlBwSjAKLS0tIDRRR2RFTlNTVGVva2lJOGtVdjll
+            bWR6MHN5SmphMVNwM0NJWU5ocW5pWFkKTreTD5MXWvtV1fcApUlUVl27ae3G8YMC
+            t3/QD6oahwNOS+oba/We5WmKy99gMOFDISVo5mumv24KyKY7dzjJtA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-12-06T12:32:28Z"
    mac: ENC[AES256_GCM,data:wkR3Z6WuR2h2MuA9vPwcr1Lw0xJrNRIa5REUYT8j4Fhxd+zLghzemp7CoSBxzYaVeD5xIS4FYYvjAxkAV9FZMMWznjkFI+RkBMvlA6O7cUrUtTwh7YJ4ZTfh0iNcihuBXH9XWA7Ku0C9SwGUjGj+uaKPW4JCaVaNxDg0VzdyFeg=,iv:BdI68VoQlPF+eT7FglGyMgtgUT+3okSp9KIZQsIZSZo=,tag:hzQ9I/WXdtqwYjQyeD9XcA==,type:str]
--- a/.secrets/sgx/internetbs.yaml
+++ b/.secrets/sgx/internetbs.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age149fqcw5jze00vd7jauylrp4j5xyv7amlu57jjfuzghkqtzlnxajs704uz3
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaalQzV0VpQXJVUFVOZWJw
-            UVNMNHI1UURCSEVaaUxlZHN4MnRSeTlRandJCmlwRlNFTHlHY2g5WTc0OHpEVG9m
-            U3ZsYkhPMHd2Z2FMSlF5TWlRR29OVVUKLS0tIHhyYzNUcjlhL2J4VlVWcTIxNE9D
-            aDN5RURrZXF0YnVEZjNDN215ZWd2OHMKtyOhWXFIJOhRUf8UoKql2S9xd4vXuZR1
-            SCpyveq4Pe518MX2wQ3cnLBJxHrEKiEhtzCQu+7vfsHIaPBKUSBcsQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1RVlBTTFUOElETEE2RlYx
+            elk2cjRqQnhPdmxIcnlZcWxKaG04L3FyeENnCmM4Q3dVdGRUUVJuOEYrZTl1dXpF
+            N1pWeTIzYlU4bFhRcFREcDhNK1BScW8KLS0tIHEwT1J6LzhSWHFML0VWQ2NTalFk
+            Z01ldWxLajJ2MHdybjBsRU5kclVCL0kKQrpeiV14c7Nu/jDRxPo9rPdTLKaKgHJ4
+            hCaFGuteo8bsmmMl3nVSV0n8aC+o08md5PmbGHlRFazm4I5MbtwYvA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VTRLV3BpYlJqSjVTSzJ2
-            c01XZi9EcWFlOVhONWJUTEV4ViszZ1JadGt3CmttRi96NVVqQm9MdnM0OTZnWmRG
-            WUhlTmNjWWlhNC9Oa29ITDBDRXRlUEkKLS0tIEt4Y2dlNE9BN21YQjBLZ0JmazFS
-            NUVyeW1lQzl0YWY5ZTRNODJWUXBkQk0KzzDHgmAGdc6PwaoMYm1p+vZBREjNVPv2
-            Yi13wXXtWPV1hhHATZKplEeuw5JaalAsGwZeeoKWNBiVUDNXywEFng==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TXdXVGhhM3pKSTVJeHFj
+            N3BMYzNTNDBDNXpzSUtnOU5TUzJ3bVNZa1I4CnBDZVY4Q1lvcUhkZVdyZjYrVThK
+            clFiajZFTjVkcTVMdThlU1pmMnFoajAKLS0tIEZqdzVrNmp3VENQdmcvVitLRjg2
+            bVhQakZmd1QxZE5OalF6akFSaEY3OEEKyXZi3ry4eHgcfghaKaXul1cragqzc+Df
+            OizFz3cBfROvyU2l7BccGFAc4dnlnNw+xsvjsKK5eGMyWBwUS4HOHQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWnoxN2V4K0VkUWd3NnVt
+            UjhrOGxDZnlLNjk3bWF2TkczcTI5eDFkWWs4CmtIRUNwR1Z5OUQrM09iMXQ2YU1Q
+            bTlPUndnVjZMMGFSTWlaUHNQdmw0YVEKLS0tIGhJK2orOUt5YmNiNXg3U3YyRXo3
+            Y09Oem9HbkVQQWtMV20zamxMNjdheUEKgVozaRsPGYBr/4lrqrILV+ffbAhmO9Fe
+            I0+gJHU1nW3Ean7U7g1LB6v8B/6wPwG/7j1YcNw6lwA0eGc4CuWFDw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-12-06T08:50:35Z"
    mac: ENC[AES256_GCM,data:Tz1EutxDgl2DQgNWNJWap5cwSAgR/Y4EjLUva7qHtXIMWa5jKPKqimY2IQhcsbqYv1zZmm+OnbO+OCIdZRbpnDCk5waBhywQNxNxjGAbv9fo/hbRFg9cm/vwA2BrXk9BR1L+gMcejRyZnnlMwEK+NomBkqAkpDZDlKjE7ebHoz0=,iv:Lk9kE3opD9y4oheETzLOiPn6Z5dLx8JEAuyCaYbkpQ4=,tag:/KtGrq7sGUxfi7BaJObhOQ==,type:str]
--- a/.secrets/sgx/pccs.yaml
+++ b/.secrets/sgx/pccs.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age149fqcw5jze00vd7jauylrp4j5xyv7amlu57jjfuzghkqtzlnxajs704uz3
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3VXloZWZoWFpPcm9KMnJp
-            c00vZDM3d01PWXpnVy9tb3NXZkZ0a0JlaVhVCmx6dXZwaUNWY3FzbTdBMlJNTEVB
-            MlNHa1Q3VmlrUnhNSlpFYmc4Qm5mNFkKLS0tIHlzY2VMVXBZYW9kaUdRakZUNlk3
-            SXBoeEZxNktZSDc3aUh2b2g2OXpZQ3cKLNHjYAAHR5LwoSKfaFT8eLJxYNmk/f1S
-            xNaGpR+sS/6xNSHtkz2w++crcPa/mt9qlQja1kLSGB3PFURSqfUjRQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSTmw4bC9JZG5Id2dvbWk2
+            S0paeGI5T1ZDY3ZNd3VzdU91QVdnL0ZJQnc4CnhHTkVZRDVhUjYzOVVjM0NTb2JJ
+            cys4Q3p5YkZ6cCtQQWNnUTQyMU0zRFkKLS0tIGdVSnlJeUtKVmhJa1kxaGk4cW9q
+            WGo5WS9xK3duYS8xb3d1UERKbGxKNG8K2+5fx8hjh6t21YvOb8kz8eAGX+36pXdz
+            /3GbWvi8LUpU7H8kV9PIDtq7DeU8yNkTLXwSPT8rgQmcFkiVANxfZA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2anNCTitMRzh0dmt3M1pa
-            REs5SmhJdExtS2lubXd3ZzY0OGxrTEtnVnlJCmRQNTQ1Rnh6aVpVdTZyYzl4aGJY
-            OVFiMHNTR090UkRqWDAxS0wwMEhDREkKLS0tIHVDU1A3Y3dKZGh6YlVud3FWNDJj
-            NW1jNlNVd2cwYXZyY3ZZQTJPM3ZRUlEK8/MXSxDhEo/P2NlZT8IrgwuWRAM/75XA
-            vrnlknbGJI9bto7O5j77O4OKSuniGat1/ZA5xG/o8YhumSbDtk5ZTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3RytsclB5T2IzdnBjbUt5
+            a3JFYi9POVdTdHNpbGdSSHY1dEI1WnZGekFFCnVEeStGQ0xYZXAvMFRvL1dBbGNZ
+            UEUxOVRDZlAwanlCdGhQWVcvSHBBV1EKLS0tIE1LbWc2RFJ2TUtuNHdkNTJ3bXdu
+            UHROaHpOZWVmR21oYmRXc3RER1RlaFkK6E3wiWvrpU/df6cxbbmu7zCQdgIEU+cw
+            UA2XegTvIVXmFzr5vqXYRfeu0KkOTFEPcQP78w/w+h3iRRDx2yI12A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZUtHbWx4bGJGOCtPMzkw
+            RHRQZGtyYVJFMzQxcFNCTE9IOXlldnNTcWhRCmpyWjV6UnVBaGtPU3VRK1dnY3h0
+            U0F6RVEyYVRNSko1U3ByMjUxOUd0RkUKLS0tIFYzRVFwSXJxOHRwRHhPT1BNRWdx
+            M3hDblNrWkRMOXp5WHpQd3B1ak1mL0EKSZY/IOKkFfV4Wibnsp/VK5aKmX3xEBIZ
+            Mg+2NahWR/RzFjOC8fEHKNusE/QA+RUjQBKEZiAHmQ1y0LGIdJS1Bg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-12-06T11:31:45Z"
    mac: ENC[AES256_GCM,data:5nHxMRjWM8OQ1eyU5KtaC7m74Ss/L4/FF5Bn/zKCfX/x0GS/Q01lwGmHk/4Loyj66pt8wJCtK8mzL67RKPARAiX/9BS9pENYgfRwRk4cEmo/OdjSTOKkr7BO8Q9vAd1beMbDkX1pY/MJpmqvsYdK1yd5yNioAh8IC/PvSh2wu7s=,iv:a7cM8dpm+LMUysaQRT6odCChuLPM1biPHQOFTilH1o8=,tag:f330s/P+rlFVgr0CMc5Jjg==,type:str]
--- a/.secrets/sgx/relay.yaml
+++ b/.secrets/sgx/relay.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age149fqcw5jze00vd7jauylrp4j5xyv7amlu57jjfuzghkqtzlnxajs704uz3
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2R2VtQzk0b051NC9yRGh6
-            cWlUM2xDZkJGYWQvTDZneWVBYlJJNCtqV0VnCnY5NjJpZ2VBL215bWpHTWFicXVF
-            WDFsUnI2cU5BRi8vMWZrT3lKU25EbmsKLS0tIE9iVXNTK2laSEhMb0RDWmJoSEhF
-            SG8vblBGczBITUVCWlEwdCt6TExDb28KyNeytOtFgmCIb7guFaMkXscywFwMDgwH
-            eXAXxmyLytCD0BJzySOkiyVU3KBxLKR5dKmlXdP5nbYp490A2CFHrA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbEp2UGVLak9HWGczQzRC
+            Ym1tdmpHYTNoajN3SUUySDhOMkJIUXQ4RHljCnRrSnd5bUl0VExHSU9rZktNSHEr
+            aExHb0NwS2lRS3JPTXJ4VjA1WVFsd2MKLS0tIEliM3k4cExGL095dWx6ZWxnWE5y
+            aWR5L0lhRytWMUxibU5nNjFyaGlFSEkKkdtATX6HW+UX4agafbfIjQG8j6HxQzF0
+            SAcvbtuyTYxbPW1UrUHc0J2YmAY+SOPRTfAKQHis3vDHAxPuYDQfWg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWUm16d0NrUS95VVB3MmI4
-            WnZuaEZMZXlzcGZpU2xVREdWaG43UkZna1hJCnpSZHd1VjZENlRrNUJZY21lenJi
-            Vm42cThZY3Q1TVBuSTFMVzQ0VW9UZEUKLS0tIFpkYXNvOGhkdVBNTFY0cENoNWtI
-            TjBUM3NhdXdRNmE4S2hZZWdDNFhsKzgKhr/h3AB5QrXtw3cU8Uj05mUVvwiXWnkD
-            QGIUXkeYGRpydARKtqS+JRfhBEqNvbGA7ZQfRl6nthVQW6+Z4A/meA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2c1FtMFZWbzMvZzk2Y0tz
+            OHo5anpSZEpGbWQ2MmZMdG5meDhXL0lHS0dBClQ0QTlZT1dHckNMYkhLYVJWd1d0
+            N0ZZTW03ZUdpS1FCeWtzRkJscm43YncKLS0tIG5VVTJwWjVmVDYxYjhUeXNndlM0
+            ZVdHTE0xaHAxWlI0WHh0aVExT2tvSkkKtbvJ+/l4XrLcQxfOHUbbBSN8MLI1vyT3
+            v68I9155q+E1eMNmyT3idpCPuHzDim0bTCk+O9ZV0zeff7ScRTOKsQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBadVV5VTZSbkt6WGNaZUdO
+            ZEV3NmI4WFhuQkZLVUdvc0o3eXV1Z0hvaEJNClBnVnZ0ODE4MFQzN2pzYk9SK1ZW
+            RlFyTUk1K0ZCY0RuZ3gzalFueGdnOWcKLS0tIDJFRGFiRlM4WUlWWG9PK1orMk5J
+            aE9GOTN4WFNGTDQ5NlkydzkvVmYrQTAKNVsZZyKble71kJV2v5/uED9rYl9lJh5k
+            w0t1FWmnVpsT3Tq+jP1sljcxnk8c7pHe/m0t0m6APulD6959WE/uCA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-05-21T07:23:21Z"
    mac: ENC[AES256_GCM,data:CYBVtcCA+9VnoywXYKDnwW4CQ+ej6Z1mJjXeVOa2QnTICLmjFYw8RXlq/MiXOICUUR14/f5MkEZ2cDpfT75VMtnR7H/8/fyztyhrqADE7Zq17I46OY/9DQSPVn0bIHkxIObMV4/zUZlKxEjPIqs5E9q3bYVbBNcvmFTatlwguuQ=,iv:33edv7Y0OIgrQqhW+K5EAZKqr+WRyJGG7EKBwNIAqSQ=,tag:udCcDkdNmPxLbcfXk2qfFA==,type:str]
--- a/.secrets/t15/backup-s3.yaml
+++ b/.secrets/t15/backup-s3.yaml
@ -9,20 +9,29 @@ sops:
        - recipient: age1f2yu0cc826ej7hs4g865y29zy9uqfy0yp32f2m80typpk2pxqp7sfcffj4
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBheng3clhCbklBZkM3RTdI
-            Sm5ld1Y4R3VEdjFLV0hMMVNWVXFKK21vRG5nClptb1ZXckQ1YmJQVSt2VVNFOFVq
-            RUo0ait0eWl6dXBwd3UzUjNBTWNDZzAKLS0tIGlwSnhpTTFIRUVNVUxnNWxnNTlh
-            VW5ka2c1dzFBSFFqaHJKWXBUL0RBbTgKwdvyBXOa8B2K1VezacEuO0sYX2ApzGt6
-            JUHUiIOTEWL703FGnkv+hRAtItePYHXmmotpysc1bA25F8Pl4obrqA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJd25Nc2x1VWN4aVlyV1NV
+            ZFVsbDF2MkFLZFF0RGRkRGkzaEVMQU9WQzJVCmgvMC9zd2FKLzFoQ3k1dHNVT0dB
+            c1lpQ3ZVLyszOEd3VEZweWpLalprVncKLS0tIGFhakZOaUFnS0x5eldaUUNyQmta
+            eXo3ZUM0TW9xMmVvbVc5aEQ0SjJ3Wm8Klc0EVJTnJr0ANtLLDsxN5Mqc9dmaVS9e
+            nGwr/F6Ej6lucSKIVf+HVkVk9YHhbS9s01SkrCZOIKbHNWaxcNcUBg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5ODhLMzNqVm9DMTJ4Sm1p
-            bXNZMTZreUNPUVdCelJyWGhlUGVYai9hOFVnCkIzM1Vrcjd4YVJhM1hKQ200b3FT
-            cDJyK3FqTGNHSEtKc3U4bVltS252WEEKLS0tIHViSXB6a1dHZlQrbjB4N2FEcjhh
-            YktVSFdCempHOTVvL1kxbG44c1RpejAKSMeyP6ayLajIvDKGcG7s5JwIvVXiKaFU
-            VDDj3eTOEKNBZYCyOoq4IA82G8AvRWaacefAgqBk5dE25LbD2xYHLg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRazR5ZW16NVphSWVnVnRw
+            dGl6SmxTQytlTE1YWk5PREhyUi9IL05IVlVjCloreXcxTklQcFN6Z2c4RnFKRVRx
+            dDZnTUZHTkFTc3hKbXZ6Sk9Oa2FGNHMKLS0tIHMwUlVXdmQzc0VhdXdDR1QzVkt6
+            RjM2U2tWeTBqUTlRU2RERFB6eFY0WkUKoQqPczErpsi8aDUl3y5NyaidY+2rZMLC
+            gI7HeSK8M+IrS+oFgxuE4BcXSG/PShZl2K9YwsGYkuVe10rNMlyH2A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFR2gxWFhrMHhpZlhpNEN0
+            SzhqUDkrb2MyamJQaytQOHU3WjNaNjd0VEI4CmhsWlFzRlBuaDZ1Ukk0QVc4VjlN
+            dlhUanVneldkeHoxc29uaWYrQmNBWkkKLS0tIHllQWR2eDRSYmdmTDhWTjN3MUhN
+            T2NRVkQ0bVNnRUV5YzY5SnM5NWQxMG8KDj31Wb0tFHre0y20u5FzNWeqKJnGzRQX
+            vsuOD1eVPubDYPwbWHJrG/uYNVMnLvzPKwp3KQkGSsOggNIvQTPSYA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-12-18T13:32:35Z"
    mac: ENC[AES256_GCM,data:c4Jum1uWOOsYORM5c3Woo/rjKII4femGBDfc4YPxl8BSKR9oo6Z9R+88lO5egrxT7CoKdJz+izuPgT2EjU7C4OvQ+7aDwpMV2X/lHgvB54V5Lq6I+lLKL5gXG8lt1Bm2YcDrFIWsa+RfInwO9S8yBjkCVbdTnOZZGwNlAYrI31o=,iv:dGK1WmLKryXpjEHvmFXkXYOESTLOIS6ovaunlreVhmI=,tag:W88dYlb2cJ61m7JWYJQIJA==,type:str]
--- a/.secrets/x1/files.yaml
+++ b/.secrets/x1/files.yaml
@ -19,20 +19,29 @@ sops:
        - recipient: age1z87u2na6vts0sqg6sc73p9ym6e5g9a0gf3hp9e7ha47e83zy4efqcjhk0y
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRXJtL2lpZlR1TDBRalZr
-            dmdpdmRrVGF0TnJFZHExQ3BuSS96Z0E5aENNCjNHbmJCRzdUVG9GOEdMaERRNzY2
-            aStWNTR2UHkwL3MvNGJnZGFhTXFaencKLS0tIFNlTDZWQVRpbWxJb2JlenRFRDJY
-            SFVUUHE0emZ6MS9VR0FWcytyQy90elUK3g0fuPB45+JnrRxgD+7Iijz6yUVVXct2
-            w5T1UPZElKZQM6VL0QMozD8/piu5sk15cubMnmLjxESztpMRxrgPnw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxU2YyaWtuSGdwS2QySXMw
+            Unp2R0oyaDVtc3F0UTl5QlFscUNCOGowL1FVClorRDl3U3o4ZzUxRGlvdng4cUcw
+            ZEdMT0dLNE85c3ZFV015MXdLdVZFYXcKLS0tIFIyazdFWXM5MkpTeVFJc2tHU3VS
+            SHhEdjVqczlWZUtxd2MrbkZ5dDZXQkEKlup4uKrhSufn+g04TxIJCf6RUqdm+9nQ
+            JhXdwd0k2JpACHHZbTTmWYFWPGR5ZYNekBK654QF6ix9dj4RsOeWQA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYTdLcm9yTmRRaU5Qdlpy
-            M2dsalNReWhpZTZtNW9xL3pNbVUzOEZuMkJRCmpXcHpCZkt3NEZJYXBNMXc0Q3BY
-            ZlVBZ2hCenViSW5jRTc1cXFWVEJRZ2cKLS0tIGVROVBxaUFMNXVjdkcwNEE2VzJl
-            blhTd3BhbmgvZHQ4dkF3TTJMcERRN2sKoPKAYvJzRm72V5WEee+vNqjw+mRL66ir
-            DQRas5WfwqOIxHcPHpXHLu9zhmwlNKS+vt4GcG81l4eQLFDFmBol5w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoY3c2UjlHdGwyN3lFV3Nj
+            Mi9MNnpINGRCcUJYczJDOVE5L3JqRndGS21BCmpsUHZEYXprU0VIV1JKWThnMDU0
+            aUl2ZDFUelhkYUEzMjluYkxZWTQ1MEUKLS0tIDFZdDJNSDBZbDNxUC9nMWpRNi9J
+            aXUrd3ppK1VZK2xPZEtpY1hSaUFjNEkKDN9dGt+V7rurnHRcdC2X+GgLcADYlvlH
+            Bpj2CTNYAKGPKIiGQI9oKaYl8xQiaZCY6vaXhzfAZEB7RytCP7jP1g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuTGFzRGdTWnB2TUVSQ0Ni
+            cERrclBWc2RjZmhXcEtBcU5hRGkwcjJWQVFzCnNiMi9xdnpRdnpmdmVxREpPdXpS
+            VTF6VThyQkpXN2FUSlUvc2tVdzZCMEUKLS0tIG0yK3FqeTN3TC96ZmF2ZS9pdDJt
+            ZktoOXRCUHJIbEhYQVhWT0hHRjUzMU0KcL64LuhLbd5wSM0KzLA3ObUm7s4kjUZ5
+            IQ9S8DnWyaCurfd+6/fZQR+SVjImI0n67I7EvoFLWUt1heXaRKRqLA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-04-04T11:23:03Z"
    mac: ENC[AES256_GCM,data:l/WirVeSYQLuaZEjAPyX+5DJu3hfqiw1ZzPUNAbNKFQ1vUQf5Zxo3tfM7ROO+x95T9jGE271TIchTJAVu0C2XFTSPv7fJ9+WWyUr3JeFN1kFXt/k8Q5aLGdffAInhN2exsw/KKP0IXta5t4g2QfFsBZTDKCqLaj+WUeGBEJfjoc=,iv:J+6OIcE6i0Nt1Nb4m+aBBYeCj1iLNFigrRWYyYbY5GU=,tag:XTBvtWFNgRzuVyT7sWkGlg==,type:str]
--- a/.sops.yaml
+++ b/.sops.yaml
@ -4,24 +4,29 @@ keys:
  - &server_t15 age1f2yu0cc826ej7hs4g865y29zy9uqfy0yp32f2m80typpk2pxqp7sfcffj4
  - &server_x1 age1z87u2na6vts0sqg6sc73p9ym6e5g9a0gf3hp9e7ha47e83zy4efqcjhk0y
  - &harald age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
+  - &harald_ssh age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
 creation_rules:
  - path_regex: .secrets/hetzner/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
          - *server_hetzner
          - *harald
+          - *harald_ssh
  - path_regex: .secrets/sgx/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
          - *server_sgx
          - *harald
+          - *harald_ssh
  - path_regex: .secrets/t15/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
          - *server_t15
          - *harald
+          - *harald_ssh
  - path_regex: .secrets/x1/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
          - *server_x1
          - *harald
+          - *harald_ssh