Working crowdsec config for Authentik + agenix rekey

2025-04-07 13:09:12 +02:00 · 2025-04-07 13:09:12 +02:00 · e96f16f2fa
commit e96f16f2fa
parent da4ee48f72
17 changed files with 199 additions and 171 deletions
--- a/secrets/cs-lapi-key.age
+++ b/secrets/cs-lapi-key.age
@ -1,21 +1,23 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBtSzM1
-UEtIRlNNOVFqb2Z1bC9IVVBDcDlQV0xKN01VZjV5WHU5VEUrWmwwCnFiaDRDcWxV
-WFBsbjNhaXpmTkdsaWR1WmdtLzZKbHp0TEdDODJseGI3R1kKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IEhETUdtYnhJeXVBYzJSYUZXTjBVK2tvZnJKOWxOcDh6Q0lpeGNV
-VkZSRlEKZWplWThuZVo4aFlndkxYa2R4cXhCOXFYZC9YWGdIUktrSWh5YUYyYTc4
-WQotPiBzc2gtZWQyNTUxOSBubUtTK0EgbVRrc05IT0ZFK3owbUlmS2h4cVZCYjdy
-UGIrdmlvTEdOVEs2Ulg5MlBTbwpDYWhtYStNYjVBaS9IT3ZVMnY1YTA0RkRyYzd6
-dEppeFNOZHRxUUE5QitZCi0+IHNzaC1lZDI1NTE5IHNpbmd2USB1eXE3SzZ4aHJU
-T1BXVUUzL1QydmdiLytQcUQyejg3dDlQWlZyVDBJb3l3CnZRNE5kbDFwakx6WEVX
-N1E4T2FnWUlreXZHRk5PWTJzUkFwbERxMDN4V2MKLT4gc3NoLWVkMjU1MTkgeHFt
-eWpBIFZxL1R1Q2pHTDBSaWt2RVM1aFlNOHBmeFRobGpaTGR2dFR4aThoYlRieGcK
-VzJQZDNOTFA4dllFb2J4YWkwSlJYSEgyYkFBZHZsTFBBVGRwdzRHOE40MAotPiBG
-MXFyXC1ncmVhc2UgNm0mTzgyKwpGVmRvbmhzSzRLemM1V0RPd2puV1puU1duL1BQ
-Y0EvODZWSkdEWWQ3UzNVRTRQRHcrb29VN3RjQ1F5QVd3UkU2CnltQ0VLQUZRVlhO
-K1cvTUhFTm56Ci0tLSAyYml0dXU5L01Lc3ZZblgrRklxUUFRQUhRL0c0MjVydVhp
-VHkrMXVRVFRBClanb1k/SsDaLPXwFGBVjixWNP/Vn5WvHzem3k1ySCLLasBcEnab
-Qg4jwrEAhETRp/o+xmY9UX/k6jD+4jTymjJrt2NfZuz0NYfLT8v3HHLTLPfSX1nH
-gL1x1KdWNB6MFO8K4x7Hzsi6GU3MJfkDb4SL+NPUWQTP2zko9zPpYCilBtccCW11
-gUhq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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/initialPassword.age
+++ b/secrets/initialPassword.age
@ -1,18 +1,21 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBwZ0Fl
-Rm50ZmJmeWM5blk0RU5sQVExcGRsamJ2M2t3Uk9tQUJMK3JXeFd3CmJZWFJJdXVi
-Zk0yZGRFVlR1eHJoZlBTQ09FU3ZhdUJpUTZyMHZoSlhhZVUKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IFdxU0REZzdQSG5OdzBNVVN1VHJNcVZ4a2N1VTlHTWdyejlXUmpX
-UXQxem8KdnY5eUdCbWJMNkJRY1pBOFQrSUd3OCtLczlUWFJnZ0dTZzhlMXp6dHk5
-ZwotPiBzc2gtZWQyNTUxOSBubUtTK0EgalR0bGUzY1orS2Jqc1FVZVczUG84YmIx
-WUdrUnFFNHlLbHFQcWJoMTJsWQo3cjY1Zi8zUUlqeXU2clk0RS9uY2xCT1V3bHNV
-NWd1cjBaR0JnV2Q4N1VRCi0+IHNzaC1lZDI1NTE5IHNpbmd2USBWdnFrdGpIeVZX
-S3pLOWhsdFpJUUhKUmVGN1FiSE5NcWFYZ0EyaXI1a1RFClN5VU5BZXZFWkRycVlE
-dW5WYStEMS9LUGk3aFlNb1V2NDRrRkh6Qzc5ZTAKLT4gc3NoLWVkMjU1MTkgeHFt
-eWpBIHpjaEdBWitvVWtjMlNBb0I2dUlyRG5GdkppV2F0Tk9SNTNCRUVsd25LM1kK
-dGhuLzFnN2JDZ05aTEM1ZXp6K0k3dG1pdVBuNms4UjRCU0dzemFHTDAyUQotPiBv
-dCVudi1ncmVhc2UgcCAqa1xVXGwKSjcwMHU5ZG9EYTFqdmk0bGF1cVQ1QUVlYUJV
-K0Fvb2RiK1FpK2RBeDErWjhmaThFYWNndWtDR2U5eFF3ZGcKLS0tIDRFMHI1aGd5
-S2V1NU1UMGN2MzF6Z2ZUR0xEdHlBNWo5MGg3aFByN3NrZ2MK61WFEz2M9I38JC0R
-zMvY1Nw9CwpmUkRT7fQzH2LksXkMTv1kxsAy61xo8XjJerUeYjfNJmo=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 -----END AGE ENCRYPTED FILE-----
--- a/services/forgejo/secrets/forgejoDBPass.age
+++ b/services/forgejo/secrets/forgejoDBPass.age
@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBWZlV5
-WGlxaFpTSUF5dXozM20xZUZ5QzdVVmVOUC9rV1YySTFSKys0UWo4ClJ0RUxjVWNq
-Nktkb0hTNjBVVkgwbmJmeWFidHhXMnE4elQ1WllMNDhVL2MKLT4gc3NoLWVkMjU1
-MTkgeHFteWpBIERnRDVWKzE0cEtmV2RZd3NHTnRYbXZBZUZISjVEd1FRczFYS3hL
-cGg1bkEKMmpicDNFa1lkQ1pqQW1OZFNCeGdrOVJJWUFOWlBuZXhadGZRazkvWG5H
-dwotPiBxenMtZ3JlYXNlIEBEayFdJVEgJzcgOyFMdApaU3VoekdmaUc5cTFJY0h4
-RmdNSm5YcTlmZjZLUmRRNXJQeXV4YlFzM0dVWWxTS1JOZ0l4Ci0tLSBNWG5nZEJ1
-VFpuNHczRWF4UU15TEVrZzQydzJuVDRIbWU4M3FaZ1BFZURFCvPZt4lkp3K9Uwt1
-zTiWeel1vTPPB1qSYstgkp82FsvDMsqx2bAedAhc8eiH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 -----END AGE ENCRYPTED FILE-----
--- a/services/grafana/default.nix
+++ b/services/grafana/default.nix
@ -132,6 +132,14 @@ in {
              }
            ];
          }
+          {
+            job_name = "crowdsec_authentik";
+            static_configs = [
+              {
+                targets = ["192.168.1.125:6060"];
+              }
+            ];
+          }
          {
            job_name = "nginx";
            static_configs = [
--- a/services/grafana/secrets/grafana-db.age
+++ b/services/grafana/secrets/grafana-db.age
@ -1,10 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBXVW1Q
-ZVE4V2UvWW1pQ3NOOWJ0S1VaWnhHRlFIemNOa3QzOHlubzN1UGxBCjZtdkJSOWxH
-ZXRKYmR5Q0VmSy9tMmFPOWdVaXFQcElHVWZwQ2J4ZVFyYmsKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IGFldTZzbFZqcm93dnRKNTVQWHZOMXBBT3dwRmZRQSt3NFlYc1NG
-SmtMekkKdXE4MUtkYzA1UG9uOFR6djl3L2lTRSt1cFZyQnJ2VFU5RHBWeTFQc2xX
-WQotPiBALWdyZWFzZSBRdG4je2xTYgpFVklHeEsyeGFKM0wKLS0tIEpqQTRLbjVj
-QW1kL1dtT0lxSnZ0UFNmajJ5bWtZOHNzNXoybEYyejlwaVEKgpYJEUuCz+AWecEf
-8GiHeRChjlT4rH7Ka5U/xvj58hvt9DvYetDIgLrm38Xr1Q==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 -----END AGE ENCRYPTED FILE-----
--- a/services/grafana/secrets/grafana-oauth_secret.age
+++ b/services/grafana/secrets/grafana-oauth_secret.age
@ -1,15 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBRNSt3
-Y3p2WWw0WUtXeG5YQ2VWVjA0M3U0UEhQYkw5TGdvQmdPcGQxTVNnCnVDYXA2bmNN
-R3hTQXJHVmc2TGIyTVFwVkdIU1UvQ0ppWnQvQ1Nsb2dJcDAKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IGgxRWhrM01FL3BRV0FkT0VmU2dzcU1HZnY3c0lTVHd5RjE4KzJh
-M2pKQTgKQ2l3eUI1RXdjWVRVRHdUTkFJaTVvT1FtMExJWmhmQzhFang3U0dxYThS
-RQotPiB9bEZWOjRPLWdyZWFzZSBbKG4gWzZfQyBPSEsgWigKaUV4VjBLdmVCbVNl
-bUwydWpUTnhOYWt3ZWYxNjhtUWoxMEw1R3dlNG1iM2UydWRma3FZemUzTG9USDI0
-VThmTQpUUXdCSFhUN1JRcHdscHNYQzdpamhQc2VycWE4ZmcKLS0tIGdoVzU2aHVt
-U2V1N21MRjhrQmtyWHdMbzdObHNlU29YTEJsaXhWek1WV28KXlaD1WpX0ZFHNDbS
-Wp6PLbR5W/qM6jhMr2D221KcI1XL55Wj51EHVQZwjywHi/S7iC1GwaUY3fYmXZfV
-RTvGYEubawKoMCQwM9qLw7xXg8sq91mXYLvV9yivMYtfINV258fcf7cPv91BOXio
-jjCKrJ4pb0ROMiWR5JHYHvWgdW571v8SuMoz9cc/EMacKpQBqPaF2Duo024M/O16
-zeRP+BM=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 -----END AGE ENCRYPTED FILE-----
--- a/services/grafana/secrets/kuma-token.age
+++ b/services/grafana/secrets/kuma-token.age
@ -1,13 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA2Ulhw
-NmszUHQ5VlVGV2VJYTdNOEoyc2hWM2RKbUJWdGtvQ0ZnZUx1Nkg0Cnp4YUFsWkVw
-eG0wa1puTkNBbWNzdnpnZ0VUN01tK29zcjJGUFFmUVkyY00KLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IEhnYXdzaFlYNEUrZm1PcUtjbDZlMERORHlhNzdGTUJIYjdkQU9i
-UlFDMkEKMUxVbEFDTHJJZ2d5aDl3c2UxNU42ZTlTZzRpUlFEMWE5NFFpVC91NVdn
-SQotPiAreC1ncmVhc2UgUGc5OSBZcEM+Rlgga3N8YTgKV2pCcS9Bd25aUklDaGRH
-Q3M2MTdLd3B1YUZtb2htT3M3VXlZSld6VWlqUFN1azRsS296aWNLVmwvL0dVelhM
-RgpFcE04THVYdTdqOGlBbXdrTENoMUpzTGN0dnVCMWs1UmpaYlhhMjVUc0hNVmJ1
-djhrOE5jVzQ4aAotLS0gWW0rTUVKelJSZ2R5UmRvbGVDMHA3cS96WVI4aE1RbUFQ
-eG9iT243bXY1VQoJ0Wi0xaPoJ1uTAp/PpEBhspnoSI4FlOuXURMi4+OG8tbCg5LH
-jL20iYfhWvZgD1DOV9Z5j09n+XdGtPZsxf2VJtWcXxFtOnyuM67ywQ==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 -----END AGE ENCRYPTED FILE-----
--- a/services/minimalConfig/secrets/cs-lapi-key.age
+++ b/services/minimalConfig/secrets/cs-lapi-key.age
@ -1,20 +1,22 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBtZWll
-YTJ0MkNaT3BMSGpYSVdvNUlDUlpYT2NtVVZMWG0zcFo0RFdHZUh3Cm1pU096ME1W
-OElITmVzZkQ0VFVTcVBMaU5XL2I5Rkp0QTkwUzYxQVFOalEKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IHRCZktlYjVqTEVhU0paRS9TQTlhU2VhaElacnk1MkJvVkFvTE05
-NmN4VmsKenNLaUordTdkc1hiU0VIQ0x6eHh6ei9WZ2dVN1Y1WUZIU0NHNHlHNGFx
-dwotPiBzc2gtZWQyNTUxOSBubUtTK0EgdW9ENDkrYkdrZXlTbHNPTkRBbWtaZEUy
-L3czL2g3T1RCSTJuNFJtdGhCTQp3amhCUGIxVlRPQ0JISnJ6WkhQT2ozRktFWHFN
-b21TR2QzNnBNUlVTWXdRCi0+IHNzaC1lZDI1NTE5IHNpbmd2USB0ZWhuSUhzQndM
-WmpVa1NUN2hnUDBiSmlzWithelg4ZnZ4RFNyUVAvRUVvCmNiOUtLTFYvVU9QUXhH
-Z0pZK0QwamI1N2FCaWE1alVKYzlwVVN1SnBnOHMKLT4gc3NoLWVkMjU1MTkgeHFt
-eWpBIEJTa0kxemlBdG1wVXl5S0Y2d216VTNJYUhDMThPOEJmWjRTNGhRZHZaeGsK
-S3FuNG0xaE4xQUorbkhNU3hJY2tvR2lYL1ZlbFI3Z2lJS1grVTQramNPNAotPiAm
-JnwtZ3JlYXNlCmcyQUxzeHNlNlZtcSs3TjZCKzhmMEVOSHJob3lmYXBLbm9wNU1u
-eDNaWWoyT1hwT2RNdHJSbTU5MXhZTkx3Ci0tLSBBYW9MUE1yL09lMVVqUXpSeHMx
-OGpIdE14djRGbGFEN2U4SUtRQm9CZmlBCnPlYADB+W2yzvad9xUJSpdNoL0241Kv
-u0AXJa6yoIk94tBiWlSyee8slru8229VT9Yqd3AkGsbvaUQV+FPTay/VvZKp7CAV
-MhzeGdjjqssSIKWBzdMsHgrQzVvr9/nfiacCiMCMnv0dJ8KC2fgCDzR724Ta9Noh
-AAoiBphunk91WQzfzeiQ+RXi
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB3eCs0
+Nk9UMzBuKzh0MHdNQW9sM2JRZUFjS3lXRm13U2F0SmxwM0szcG04CmkrMm1BRlls
+bXZacTIyR3RWMWlGSUMxcytYRGUzSExYd055emNEQTVuc00KLT4gc3NoLWVkMjU1
+MTkgd25FVXB3IGNuRmFFa1lYd0xsV0d2WkRhYmFEVjlkc1g4NWJURitnNzBhMHBj
+WWhnWFEKSkw1K0V2WXdpT2krQ3ZtbHJZT0hGczJ3ck00SC92TFZVdWIwYmoxRDlP
+NAotPiBzc2gtZWQyNTUxOSBubUtTK0EgcGJyTXpoTkF1Z212ZHUrVDFoVXFualNM
+MkNyQXpNWmJReGoxWGF6N2dHMAppY0ZiVWVMNkp4eVB0VGsxUmRmaDN1RG0wRXM0
+QkhyYUF1OGdPdHN4dUpJCi0+IHNzaC1lZDI1NTE5IHNpbmd2USBuSHpPaG91UXZG
+YmdvQUNVQTlEeG5DTWtiSDJCQ3dzeWM3RXlCQW9kMXpFCkw0bUxuVzZlMThXUytT
+Znd1MlE1WnpOQlg2bCtnT21pVGwyYTdjb2xGNlkKLT4gc3NoLWVkMjU1MTkgeHFt
+eWpBIHNqUUxQM2QvSkV6Y0FucU5kSWd5SURObXN4czJiN29ISW11UTJjOTB4azQK
+ekN0RUkwVWsxSHhqelNueGNGOTNoMWExNkxRd3RaVkluNmpIYnk1WXY3awotPiBz
+c2gtZWQyNTUxOSBtdTBmbkEgSm50VlB2NEh5ZzBmNVpaTE5sbHZEcnE2ek43T2RH
+M1hwOFRIN3ZXcmx4YwoyK3QzeU1ZT2F5MUM3blg3aytLTGsxSmtxZ3VDUkNFVjZs
+eFdjMTBSeHVFCi0+IDk4cFViLWdyZWFzZSBYekczVnVnbCBpfXpGIC5HClRvVDlB
+R09XcDYxQzNWOVBhU256a2MwRHlxK3VJd25teDJZMDBRCi0tLSBBZXdLcy9sVTFn
+TEpESU1IWE1aOGowcjlGQW5wZEhwZjFMaWxMZmN2MC93Cic+Mcw6l7P3Pog/UL3J
+M2HIcSjqjtLKtk52uNIb8b7A/fOdrUhogyYVfAt7nWhQ0CCE+cE/Z+JnI3g8skG5
+4ZGF/r9Y+9orKLdskFdrkWBYX1jx3Xcwme+Kg86AO9P3Os3thXo8iDctAFFiAWvo
+AgOOjmobsPfXKQfRZw84nDB1CXzFZkDngYrB
 -----END AGE ENCRYPTED FILE-----
--- a/services/nginx/default.nix
+++ b/services/nginx/default.nix
@ -60,6 +60,18 @@ in {
              };
            }
          ];
+          parsers.s02Enrich = [
+            {
+              name = "gateway";
+              description = "Whitelist Gateway IP for VPN access";
+              whitelist = {
+                reason = "Gateway IP";
+                ip = [
+                  "192.168.1.1"
+                ];
+              };
+            }
+          ];
        };
      };
      fail2ban = {
--- a/services/nginx/secrets/cs-lapi-key.age
+++ b/services/nginx/secrets/cs-lapi-key.age
@ -1,13 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyByTU5i
-RzF4ZE4zQk8zeTNqN2hYVGU1cmZwYkR6bTAwZUlZUWNaNGdmc0RVClRwN1YyVnZj
-a0pjRERBY0tPbjdyMVNpVHZONW9uKzA3aHNGbjUzeVNmbFEKLT4gc3NoLWVkMjU1
-MTkgbXUwZm5BIHBxYWhuVDNyZVNFbjF1aTVVQjNERS9FalNSMGZKa2FSV2ZqaGFk
-Z2ZxeTQKcFFYNm5aTHRzWHJqb1pBdHAyd3c4OUZFSXdhZVp5T1BvcS9oQllENmlD
-YwotPiBrfmFlTnUtZ3JlYXNlICM8IH5iekBhWGo+CmsrNFE2eTkzamlLeGVSRUFP
-M3JRTEVaaEpQVDhuOVhWQ3hPdjc5T21GU2xJKzhBaFprUXVWY3FmUm1NCi0tLSAr
-QVY3S2kyOU1SL0NEaEJNMm9xR0lmUHVFU0VVYkhJcTBkdEl3Skp0N3F3Ck+9Y6el
-QMrUREWKK7hxuZRE2gVoSQj/ia8xNWRALMOgY+FgskwRwFLaJhI+hwfAexUHuDbn
-I80dUbUsM/ccELMs3nx6DWbchUWh9KMHYejyBMRX6NpHy1UDq+q80zile9WPygtk
-fmVPd6OOd/84e3pFmIcgTteDVnadLiZNvDVapVVbJqm8B72h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==
 -----END AGE ENCRYPTED FILE-----
--- a/services/onlyoffice/secrets/office-dbpass.age
+++ b/services/onlyoffice/secrets/office-dbpass.age
@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA0YWdJ
-cnphWUxTeldXM25FZGg3NC9sVlppbHE4N2szS00vK2VQL1VPendJCmhTME1MUzhI
-MTZRSG0rcVFvdjllZ05Ockkwam1kYVpObnJSdEYydGgyN3cKLT4gc3NoLWVkMjU1
-MTkgbm1LUytBIGM5NCtPVGZJWVhNR1ZvTGVGODF0M2N3aXdzeVVDYU10aGc5bkVO
-ZmNPd2MKa2xiZy94cjEyOFRBU1NvSHpvckQweWh3OGRQejhQQVpqMnJLQjI1RVQx
-QQotPiBcJC1ncmVhc2UgXDFcUyAqfV53PyArZSFFc0sgenxXek0KdTh0UFU2V25T
-bWNoSWsrUmpkbzNabmdJZ2t5OHh1RTgzY0ExaGNLS09hZHl0eXM3MXB4RwotLS0g
-UkxxWURhVzg5Q09EUGtObEhOeWN3MXk4U1ZxeXZWLzFXVURpQWNrYzBmWQqn7LYQ
-6fgnb/DRZjA8yhMgTSIcIJSm4t/+y6fGTOMmWK9Sjsjx+bK1kazPnPZgp6A=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=
 -----END AGE ENCRYPTED FILE-----
--- a/services/onlyoffice/secrets/office-jwtpass.age
+++ b/services/onlyoffice/secrets/office-jwtpass.age
@ -1,12 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA1QnNv
-L1U2eUljam4wM01lOURXQ2luRkVGbk96OVFuVm9kS1NxaFJ0N0QwCmZxak82eW1w
-SVBMeEZWUDh3a3lmRkJhSkcxcW5kSUg3R1RiVUxpMTlPZE0KLT4gc3NoLWVkMjU1
-MTkgbm1LUytBIENxbWI5ZG4rbVFEb3lvQVZLMW1tUFo5N2hzYzQyN1hSZnZUdHlv
-Q2hDUlUKdDdmd2JyREdPYWdLSFBUN3orOUJkSk9WK1JYTElhV2JyaWR1cUJLM3BI
-QQotPiBWYSo7KlItZ3JlYXNlIHBJXCYgNWZjb1RjIGVPOT87JF0yCkFkbVFkTWlN
-bXk5b0VZdmNza09JanVXbFlCUkNVdkNZZ243TzRLMTB1bkkzTGJzS1pIdkdmQnNt
-T2liSWdjdjQKbnBITzM5L0JlS283MndTenE1UTMveHRXL0UwCi0tLSA0eHZFQnhQ
-ajd1SkNvanNuQTQ2VWpKYU0vbGRmVkZJWUZURG5xbnh0UDhJCtVjowaW++5XN5JY
-pZSLB0peh5Zu7P/yeAmDvnjO2BhfgQ+9sZzNzAcVwM8We03Tr8M=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 -----END AGE ENCRYPTED FILE-----
--- a/services/postgresql/secrets/authentikDBPass.age
+++ b/services/postgresql/secrets/authentikDBPass.age
@ -1,10 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAxVEMw
-KzViTWJzNEtlb3NiZ1F3Rk1ud2V5dU05VzZLWjVCcnpCNnI1eENZCmQvWE9OUU1M
-c0xFVjMwUHZCMzJHMjZXYy8vR3g4VXNQUjd0SExGVzFTSm8KLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIEk1YWFub1VHVkE0cWpVNG9mL0g4bk82cnFPM2NQaDI0cnAwdTZE
-eUxiQzgKS3g3S2JOWnE3eVpweGEzczlHaFlSdG1jbTczOU51TjRoTG5KMExBMXdY
-SQotPiAhLWdyZWFzZSBJfShjciQxIDpxayBiYyAiXk5FSzYKMlA5MEQ0VUo1UncK
-LS0tIEMzaFpMRGo5cTBMczBOeUMrSlhMWS85WVQ3UDRSeXM5RlJWS1dWR2VhTXcK
-a3qm9ASifZqqohCsRoGnW9ijFoy2bb1Myg/jaZBD1P9/2KQ4yHV92nap271Sq86R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 -----END AGE ENCRYPTED FILE-----
--- a/services/postgresql/secrets/giteaDBPass.age
+++ b/services/postgresql/secrets/giteaDBPass.age
@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBhSllo
-UjhSeHFNangxcWVlQVR4NGJxRXU0cDB2NjdyU1FTUmZZcmg4ZUZZCjNJVjB3UnB2
-dmhoRncrTTR1dURtbHVHeTByaWZwYTRha3dTWnZMRWdCVjAKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIERLL1l5R0VVWTRlMDNCYXpTb09zWWdhTmlLQTdIMVhPZXM0ZFdX
-N3VpeE0KUE9rWFNJL2dpK2VGMkNucTZWZDVqcGt5NlVkOXJ3amhybmFQR3ZVVjNP
-VQotPiAubyNQcXtpfC1ncmVhc2UgKyRRTFl8VkkgZEgKRWFjTDdzL1ordGg0czFQ
-Q3NtWjdLK2tNVUhsaCtXZGxCRysxYjU1YTNDNDJnZHc2a0kyQVNGVjZOYndGYjBS
-ZApNM1JJQmE2WXpXaEJGcnNCbVk5WnQrMHdrMEgzMGRqL21WSGUzWFM0WlREVVdO
-T0Z4MUEKLS0tIGcxcVZWQWMzS0FlclNJYW9jSldoc3huUXl2eXVoQ1dzdVc5YVBa
-aGRvcmsK9L6wCJ22CZeAuJQWW8t/i7M5ysRJJUjvzOAKvI+gO5G9hagP2t+qEK9e
-hvE=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB6K3RY
+Qy9yU0ZkVG9mSGRvOFQ5aUozNHNGVUpMTGUvOGU4US9yeWExaWtnCnkyTDlXQUE4
+K01scktWMTJkWldUOTQzUUZNWHQrcHlNeElwVG1vL0hDQlUKLT4gc3NoLWVkMjU1
+MTkgc2luZ3ZRIE1qclVJYlQ3UHhXaE5ub3JWNDVUVTB4c0Y1c2NSSno2aDNkVCts
+S054RzAKclljZkJoSUhtUXp2dng2eDJlUkphMXRFbXJQdUxPYm1OTUtMQkxZaWcz
+OAotPiAmbi1ncmVhc2UgU2NUIHluCnp4TjhnVk01OWRVZUJVMnlPNmlzNWNJZk5J
+OHpsTnpGLzA4eE0zNitKSWF5d05BcEhjU0xCd2lRMXpLVXB1TlgKLzB2VFMzcmJo
+aThSMDQrU0JaSWNUMVZnOXRUNlhDVVoyVkRRTndUS1pnMUhhSTQwKzdXVFIwTFFi
+NkdTYkZScQpaRHp6Ci0tLSBRVFlXSGpLYzd1QXNkRlJjdDFkejdyM1ZzelRIN05o
+UkR4a3JTSWhIQlN3CtTJA3S9lKiHg1j+GiDIZtbLjWlnCQG6R8XbApPIWPPNm+wt
+mtCq8RC9uHH+
 -----END AGE ENCRYPTED FILE-----
--- a/services/postgresql/secrets/grafanaDBPass.age
+++ b/services/postgresql/secrets/grafanaDBPass.age
@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBPTW1I
-Skp5c0oxTmk1VWRPM3ZuelNBblF2UkZOYWUvOGNXTGJPRGlISGxzCmhCVWlCSUZZ
-UkR5RW5SWjN3SzlneXA5ZDJUL21LS2lXcndidmxnWUtpMlkKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIFN4MHplVDJZbEozMEtYZ3N2amZDdHpLTmpOUlhMNXUzMHZFSFRT
-amhCMDgKMDUzc042UklCSUs4YUVTY2xjZUFaRlRBM09TTEhwQmNKQVA3YkgxZVly
-OAotPiAraXswWVwlaS1ncmVhc2UgNGdhM30gZ0xHRE11KEYgM2pMPy8uTQptMWYy
-T2JMVTB0b29lNHpqN0dPdXNMZEtwTWtOb1dxQ2Q0S1c4WFpLVExaczQrNjhVTEJH
-Ci0tLSA2MjUwM1pqWTZWd3RndHd6N3krenYyUkM4aDd2WFVsQVllZEg3S09ZSFlF
-CiDdh9xPzRx0vUkFn+5DHSXNOd3aF4DJHS2+Rc5bBvJsik+E9gBcBHN5eawHmJg=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 -----END AGE ENCRYPTED FILE-----
--- a/services/postgresql/secrets/nextcloudDBPass.age
+++ b/services/postgresql/secrets/nextcloudDBPass.age
@ -1,12 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBicitL
-VnR4WFh6TGZkZnhpZEZ1MFZjditqeXFzSXFOUW9ienhjdHFsam1JCnkvY254cmZN
-cTNYRDdtWUNHQkNmMzFCU1N1dllqQTdvTm4xamhvS2F6RjAKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIHhDcERwWkl5QXgzamdlNlgrOXlMWkpSb0JWSUtSTmwraHFTdEwy
-U0Ixa2cKMS9zUVR1WDdDYlBic3RIbXd3d3JGVHlNVmVsRHY0elNWZ0o5aWVUazgw
-ZwotPiAsSjwtZ3JlYXNlIF8xcCBKU3oKb1RoZnFyOENMWHQxSUlUS2xmN0RWQWxV
-UXFlTFhmdVZRVXY0ekJYQmRBWWxJYWovcW1EQjRHSHloWnRqaTEwTQpnZDNmMktm
-b2xWUFRFamtvTVRoYjJRYwotLS0gMlNvRC9nY1pTWWx1ZHlJMmE3ZkpQUGgrclAw
-bERjMVhMa1RpVzZwUHA3TQrcYKrxC2Ij+0RmtDozhBTBh3Th8NehZ+FUSl3Okyol
-XX4KB2lT5urYECGsan+HOKo=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 -----END AGE ENCRYPTED FILE-----
--- a/services/postgresql/secrets/onlyofficeDBPass.age
+++ b/services/postgresql/secrets/onlyofficeDBPass.age
@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBuS0xp
-Znc2ajhKemNNSFJpUDdvdFBVbW93SDFmaEpaRXBIck9PcXJxang4CnlzZzJ0MXdT
-V2U4Ykl4aTlydGRaeHIxRmZkVHg0dWpnV1dtOS9WdXkxZXcKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIDJnS0xoWFAvTVJXdnJBSDc2dis4bWcrTEhmdmE0aEJJZzFZSm1z
-akU0Z3cKMGZNcG5ZNWVrdWVWQjhWQXVIL1RtcExBcFhJUU9pa2ZaOGdqaFdWc1pL
-YwotPiA3LWA2RXs7LWdyZWFzZSBESUoKd25SMDg0czBNcmRIb0JGVDRLdEZ5OGph
-eDJRZjJodXgKLS0tIExLTDlPSE1Kd0lXMlo5YzhpeEI4K3BDUGtrem41cFdsYTVz
-QjQ3OWdJVjQKEnu24xPsxg8m+TYOsFp02Rv1lm61lwFsPgVEvfq+siEm2bvJiCut
-LQBgsEpiyzvv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 -----END AGE ENCRYPTED FILE-----