Restore docker onlyoffice IP (nixos pkgs works but old version that does not work with FF CSP)

secrets.nix

@@ -3,19 +3,23 @@ let
   users = [tbarnouin];
 
   grafana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQxvO9vdd2f9aV4F3LEQrrTJaLwLvSLbLtjB9qNxc4z root@grafana";
-  onlyoffice = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbnzv2/Or4XdQXLDjIbr7oIDTQEvgSMTX4aiNCQk4tC root@onlyoffice";
+  onlyoffice = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQoPAt9+8vdvqrp4AKL2Yn6nMJYfW7UhfW7eacZ4I2s root@onlyoffice";
   postgresql = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJW7qA7j1sICuu1RAfs9ifR9dmOlHq45tKu1ga7CKaob root@pgsql";
   forgejo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMf3Cc/S0p/LFcW+RLMEqpxOOv8q/HrKO4I9joHmRxl root@forgejo";
 
   systems = [grafana onlyoffice postgresql forgejo];
 in {
   "secrets/initialPassword.age".publicKeys = users ++ systems;
+
   "services/grafana/secrets/grafana-db.age".publicKeys = [tbarnouin grafana];
   "services/grafana/secrets/grafana-oauth_secret.age".publicKeys = [tbarnouin grafana];
   "services/grafana/secrets/kuma-token.age".publicKeys = [tbarnouin grafana];
+
   "services/onlyoffice/secrets/office-dbpass.age".publicKeys = [tbarnouin onlyoffice];
   "services/onlyoffice/secrets/office-jwtpass.age".publicKeys = [tbarnouin onlyoffice];
+
   "services/forgejo/secrets/forgejoDBPass.age".publicKeys = [tbarnouin forgejo];
+
   "services/postgresql/secrets/nextcloudDBPass.age".publicKeys = [tbarnouin postgresql];
   "services/postgresql/secrets/giteaDBPass.age".publicKeys = [tbarnouin postgresql];
   "services/postgresql/secrets/authentikDBPass.age".publicKeys = [tbarnouin postgresql];

secrets/initialPassword.age

@@ -1,13 +1,19 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBIZzc3
-NEpKbjZKaHNJTkUwbUVVWkRNYzRVZ1g3aHFWbmw0RjByQy9DNUY0ClBraUZmM29P
-dW9RZXNhUVZQajQ0VVZzN3E2ZjlQa2hIN2QrOG4vamVhUTAKLT4gc3NoLWVkMjU1
-MTkgTVRPMXBnIFBFbFVLNFBSdmQxeWhkWFcyRkdidUJDMHVhcWtuM0RNYU9MN25G
-bWtqaGMKM1dDYTJjY3lwQlRGSU1nSERxWkYzck1JU21kaDBvelgyMUhXd2NabzFJ
-QQotPiBzc2gtZWQyNTUxOSB3bkVVcHcgN3NVYnF3blJYdk9NMlpFeHBkSWpmL3hX
-SVlZakZ0VG5SZjJzODNKZ2UzRQpXeWhBWm1GU2czTzhZN3hvQXErQ2xzWlBrdGM3
-bjFmQXRTQzJTNzlXeUFRCi0+ICZEazJMXy1ncmVhc2Ugb0Qga15CMW83OGAKSEk5
-ek9EV09TMm4vUGJEWDgwRnY4b0I3Z3ZxQk5GS0x5eEgyNFUvS2h3Ci0tLSA0RHBw
-WXNxTGtDUHlVQ2ZHWk5WeGtuTTVseDFHeWxBcFZzNFRwUWptZHRvClgW5JGwRhTf
-X5W+zQOJKbaiChYCtdqrPnEd4tRJMnMtm19UIUnR7asWmDdl8LU7DvodK4UA
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBiZ3Yw
+azY4YjhIelVwdFVodkhRRUppM2ltNUl2OWlsL3VhdFhmSk1vc0JVCmR2WlM0b2ov
+ekFPYzh1SDhQVklHNE9xZGdwbEpxQk1qaHl6OTZkaVV2SUUKLT4gc3NoLWVkMjU1
+MTkgd25FVXB3IHNxQ1RWNTRCaWdwTkRVS0FYaDQ0aDFaOGZDbzlkNUZrYzdZRVdY
+QXpyanMKeXUzeWdSUG5hQ050YVJuNHhCNWVLRm5ocXBOZTNScWdvdndEMWVTQytn
+OAotPiBzc2gtZWQyNTUxOSAxQ3FvOGcgbE5GVHREdmFDQXBVdGlTNzhwZVhZaEN0
+VDI2M0V4VUwzdEpVSGxoRHZVOAowVmVDSGd6RWdtR2NYYmJXOXUvYmtGUnozNFRq
+eG9TUEJTRnkwcUxXK09FCi0+IHNzaC1lZDI1NTE5IHNpbmd2USArc0JnMWpXUzhV
+WXVaK0RZVStVa1FZMFk0K1lRbTVhMHJ4bWRZdkRpcWprCmVZQjhaWEpSZmxGd0pT
+TWZKMG0xOW00WEI5K1NCVVBjZ2ZzNCtNYWduK3cKLT4gc3NoLWVkMjU1MTkgeHFt
+eWpBIGNBbkdWcWY4Tkt4OU1tcW9PTTlhRHJGMVNpSG9Nckw2aDJEOFpKNTNNQjAK
+cDQwcE5tVnpCakdxT2xuUnovOGNlRkdjZXZqcU5PcHdWeWF4eXFLdnBvVQotPiBw
+YlcwbCpSNC1ncmVhc2UgKiRrPiBcXFAKNVRJT1RFdUpSRWRlWG5VSUJXMmtpa1pV
+RFlncjhsSTN4dWx5ZnpKK3VDMDFoNVd3c2lEWHc3NFFKS0huSUNZVAplLzZvUGpJ
+UVpPSVJkd04wUnA3L1FxYTBQOUEzTVEKLS0tIHQ4cUYrc2hDVnA0bGNtd3Q5Tnlp
+RU50ejdZeVZQRE5UWnNSaS9zVHJLcG8K759bKzQ8cPAGH/QQAyc7Eea+woEtxuSk
+gR20Q2qpZIANT98tX3PdljrdX4aBIRMEOaUl6t0=
 -----END AGE ENCRYPTED FILE-----

services/forgejo/secrets/forgejoDBPass.age

@@ -1,13 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBaeXE2
-ZWQ1VFdHZnVaL2ZMc0R0aGRRcC8rVlozdUxyRkpkV0NYbnJmY0JzCmdIS1dzdlYz
-ZW5Wd25FREZHdjJBUkdMOHVlTUNQNWNNZG5HWE1HNE5lOFkKLT4gc3NoLWVkMjU1
-MTkgeHFteWpBIFJ4Z1hkUC9QT2ZiMjJMRVQxQ2ZoS016V0FLdHVaWkduYzFlK09V
-YjhsaU0KRzB5L2hpRnJyUGZOVVd3ZFkycHRsVVdqME9sNHdiemRUeHBjb0NSbFo3
-NAotPiArdE8iIy1ncmVhc2UgekhEID5Sbl8gUydFIE86IltpCktRUm85QXltM3VJ
-NjJ2M2hyZVVjL2V6R2s3N2dUNXErVVpLT3pSY1pVeTNydlYyMFNNWktnZmhVM3Fy
-eSswOUgKdEVxcjk5S25BQnYrUG1JR01GSjNpc2FqTUtPT0JtV1hOV1B2dFV0WDI0
-dzNBeXZKZXZBTWNUV2l2SVQ5YWcKLS0tIFAvK09oWjduaDJiUkVGTXdETm5uaEVa
-K3JOejBhRlJ1UE91S0ZoOXBSazQKn5G3rTSmRTYc8Z9R2pjuAWFnJ/CuNblQKgK/
-XjUtInmR6DDQpEvZaiuWXTM=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 -----END AGE ENCRYPTED FILE-----

services/grafana/secrets/grafana-db.age

@@ -1,12 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBVTWdl
-dnhPSGdhZzVUenFmaXYzbGlOUkhqZlMwRTNXVm42ZXB6YTNvMHpnCnZYcHlOVFFP
-Qm1KMk02TE1YOVRweDIrR0RxbU5DOHlRUWVxc1RGaXVObkUKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3ICs5bkhiU3ZzWHdrWE45a2pJRlhYRzBsSWJQQUk4cHExU2ZSeG92
-T0xVbFkKT2FOQVJ0bkF5aXFDUXR3NTJMRjdBdFgyNGUzNDJpSE9xSkdjLzkyNWNP
-RQotPiBLYnJtUHNNOy1ncmVhc2UgfXN2JGFJVCB9aGtBXFhHMSBFZjcxWGknMAp0
-d1FPZnhaSmIwb1lZT3BDV2RFcFBOdXdFbXRXZ1Z6NXpkcnB2QjA4MjNrMEJHNTBX
-RjZ3SGZrTVg4ZXJWZG1jCmh2U3F1a1NmdzFWRQotLS0gVndEVzltTm1oeWJyU2RD
-d0JHajZYelpNRk4rMzEyK3J5K3dWSHFkdHNPVQoDlFf05gno+UFqjBNaUkWkcTru
-4w0knxnS8kgIkMoklOtaA8Zp+wPiA5D2wgpz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 -----END AGE ENCRYPTED FILE-----

services/grafana/secrets/grafana-oauth_secret.age

@@ -1,13 +1,15 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB3YTc2
-dFJoTkttVnYwNW0rY2pDWmVXV25aQTNvR2tKY3pZVmlvZlVrWkhNCkFXZkxrMXAz
-dVhrVXhVMnJOZ2ZlTE1LS1ZyckJuMHB0a2NjNDVIZFJGNlUKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IEZVT1dYZHprQXJpR3JjVzRWcVQ1WHcyTkxkZHNqM2syWkNzOHpQ
-OUx1VW8KVWlzSVhPZnhZcmJEMzFabytQY0MwbWNQenJRcUxvV2w5aW9LV3Fickh1
-MAotPiBHTCcvQy1ncmVhc2UgTV1zNgpZNWswWE5DdEZXVVBzeFR3R2taZFpHakxS
-MEppblllczc3bWt0NmJzZDZrZTlYblJIWDQKLS0tIFJHWWVQL3VvTHF1OVBITXFH
-WVlhcUlrRldLQWNUZVJIOGY5OUtIZzlmdFkKHUb1KkIRJuEKk430LNP8gNQpDtlo
-ifMWwhBcrDDOUxQSpEow42sgbIbCpvHt+gMgMCz2sLbdBnEUfCAIuG2SRZF3sfvD
-JxY8/0mtK0upF+7jb3oCeGN9ah+gGoHEwKjRnBP6zFHG+yRMNQEiqO5h07JGEtrV
-junjkEC11HAgybtC+gzr7Visx91cyK52ZIsNdg0AI9wM6EGUIX3quC3zGpw=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA4aGNT
+Tk1ZRGg5UGthd0hJdDgxR0dhNEVMZ2FQbnBxUjR3R1l0R0hqbUVzCnRYT3kwT2N0
+a250TkJydWROTmlQT1QvemtyZEdjL2ljU29PUXBldGdSdlUKLT4gc3NoLWVkMjU1
+MTkgd25FVXB3IHNWM1doQm9xR3NFelkwMXVieE02SEVndWhKMW0yM3YvL1JmaE13
+T0FWMjAKOWV1QVREdGNHM2R0K3NGbUx6dUtVS0JxUTJ1MExwWjdMazQ5ZEE1ODJy
+UQotPiAudjcudzBpKS1ncmVhc2UgVy8gRDYtUFRiSiwgLFIxIFMoQCJ5RTsKbFpm
+ekVpY1pQakRZRkNKWWdwUWZMVjVZNTJadXhJVkxBSzNjSXkwV0lyQnNUVlFkRlAz
+aVJSdU4vaC80cWViawp2T2JlRVZ3cWQzV2szeXJselJJNU9iVHRmRXNidTMwbUI2
+Vlh4OHdRSGJqNjNnCi0tLSBibEc1d01CU0k0dXhpOWJkeUVZVGxmUG55RWY1ZEU2
+R0FldzlraU00eS9BCkXBFDJvNYa+OCBGOsjH/oBcUSb4X46OW8KzLoDffueXy+49
+YTp503kumUz8ySsjfShC+vBlQ6q+ViSEFUpYsmyg30xBevEB2BXSgYxFie+iIW0L
+TWiAaqghao8+1x2vvhQjQoQwfn/bkXjmhvSTiA3sWU11D8qBmMTeXmZe1VV5kXUV
+FG8fmB2HVnq5wGv1priTT7nxg9IcN7quovWuaIdz
 -----END AGE ENCRYPTED FILE-----

services/grafana/secrets/kuma-token.age

@@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB1OE5Y
-T3FiL3VKNG1HRDZHcHpDMGtvaDR1V25tT1dOYXRRM0VEUjYyb3c4CkRkSE95dkpp
-SnVROXcyZGNmTkZUNjFtQnF5dDRRc2syaWoydGk0V0FBRWcKLT4gc3NoLWVkMjU1
-MTkgd25FVXB3IG5yMjlBYThRMkdYZjVIWVhIbXk3UjNMTmtKTktkQTlVaEdqZDEw
-d0NYUzgKbEo4bnVpOEFlT05PdWo2bGFlVTMzVmJOODFpTzErWDYvRm5tNk4wbm1G
-WQotPiA5NHEtZ3JlYXNlIFlHI3NaIFNBfDIgKzBARwoxL1BNNzNQWkU1elZqVDhr
-NEJURHI2TQotLS0gWFBJUXpmRU95S1p1eDR0cC9Pajc2aUZJL0JFbU5XWDZpU2Va
-SGcvaHJDVQr9/6z8OCUSXg88ib9iqQAGp7ozAaslowdoONR/gSUelziKvaCEP/Cc
-1GQOMJy8W2Q/oBwAavq+qi4QKTSYXQ5dDmkip8fBU+Df14euww==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 -----END AGE ENCRYPTED FILE-----

services/onlyoffice/secrets/office-dbpass.age

@@ -1,10 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBxVVZD
-ZUFVVTZESHNCb01Kc0pPb3dKOXZKR0RYS0ZQcXhvQ2RzbXNKRGpJCjFaV3AyQUY2
-OTB1L0JrZTlFMy9keElTS01IVS92YWRBSVRuKzFFL2pSVU0KLT4gc3NoLWVkMjU1
-MTkgSXpNcXdRIGI4U202VWRydGhVSzhJUFpLeDJZZkVoeFIzZFRQRjhYcWcybkhr
-ZWM4MFkKSXpzT3E2OXRJVjc3V05XaUxCNW1aQm5kKzlrYzhWRUxoWndCaTRqa2Q4
-MAotPiBWLWdyZWFzZSAyOGsxIFI2R3EgIT0ueSBDd2o9NGp9CkZBCi0tLSBWRlc4
-RFFYOEkvUmY3TUFSa0lmZ3kvMG9IdGxUakhvMWhPWjhzOXhERmZrCkil25ySWO1w
-BYB6Wt5MfsL7I5Izfdfpw0lqniC5r/4oh+lDQUcvsi1vQx+BRe8=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 -----END AGE ENCRYPTED FILE-----

services/onlyoffice/secrets/office-jwtpass.age

@@ -1,11 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAvVWNp
-a1BjZG8vWC81SlhUT09SSERWUGtzNGtFYzYwbjJYTEZZL1VZKzFZCjA5djJNQ0tJ
-SEIvSjVCaDVaK1FvUG8yNW4rd0N4cTdTLy9PT0p3WFd5bUUKLT4gc3NoLWVkMjU1
-MTkgSXpNcXdRIFp1TmhSSlRKdkFSeUN6YnJwV2pXWVFyZTBkWWZNOG8vbDFrenlu
-QWF3VGcKUmNMbUVkbnpwQ3M5bnJTSjdGYWZiSldncWtwU3BZenZ2OWZ2YStrTHlh
-SQotPiAwRS1ncmVhc2UgT2lrPQo3YVREamovMVhQSSttUXNiNkVZMW83alFDaDRv
-N1JzOXg2b1dTNWxja2oyYlNaSS8KLS0tIFQzc1Bqdmt4Zkc4NVZBOHM5b1NNL0dC
-L1lRTjA2enE3NlFDRkN3cmV0MjQKEI287XlTGhe+gTmysPhQXPNALUj3QzDnmznB
-dnY2NmBArjrXnanMONycttWH2hwz1Q==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 -----END AGE ENCRYPTED FILE-----

services/postgresql/default.nix

@@ -27,6 +27,10 @@ in {
         file = ./secrets/grafanaDBPass.age;
         owner = "postgres";
       };
+      onlyofficeDBPass = {
+        file = ./secrets/onlyofficeDBPass.age;
+        owner = "postgres";
+      };
     };
     services.postgresql = {
       enable = true;
@@ -69,6 +73,7 @@ in {
       giteaDBPass = config.age.secrets.giteaDBPass.path;
       authentikDBPass = config.age.secrets.authentikDBPass.path;
       grafanaDBPass = config.age.secrets.grafanaDBPass.path;
+      onlyofficeDBPass = config.age.secrets.onlyofficeDBPass.path;
     in ''
       $PSQL -tA <<'EOF'
         DO $$

services/postgresql/secrets/authentikDBPass.age

@@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBDODRK
-d2pTZktDczVpSjBYdWNSVFdUL1k2TVlmMzlJRnAxQ0dhcXV3elhjCkd2V3BXVWMw
-YUdtYTFzUGZyaU05R0dPWGNHYVR2TWYvbUtSdSt4TUlVQ00KLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIDZ5L3I2ZmErNjNuYnh5QTRwNkNVVGhLSE9JMjZROFU0ZnMrelQw
-WUJmQ1UKL2Y1T3pER2ZIdUloTTl1dU13RWRKL2tQangycTBzWHJ5dVByYVNuNVdY
-WQotPiBrRTwnPigtZ3JlYXNlCit3QldhZUhmZ2kzS3VHK1pweGRxQ1V1eFA2eEtu
-bmJWRzZqdjY0SUNlZFNaVG92dXRnCi0tLSBIb0JVbk42aVowT1p4cEtVbUJneFRP
-dmNlZTdBcm9OZUVuOUxIbUc2VUZNCsahsNPPKDASJc0LKL+vxvXC81q3fBoSz9c3
-Vxw9grzRH+aWXhKY+cxrOl6WOXTjCQ==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 -----END AGE ENCRYPTED FILE-----

services/postgresql/secrets/giteaDBPass.age

@@ -1,11 +1,10 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAxUGZT
-Y1JMSE5MNTlmR3N2ZXJQV2xoK3BTNWZJa21uVjhac0VQOTd2YVZnClJqbnNEWFln
-NTZncyttV0RBU2NBbkRrME1mNjluaFkrQ3pMTWhBR2VPTEUKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIEZBVytVcWZ2QVRmQm1BblZ1UEgxWVRwTFgxU1BJRFRiUUdGa2Ny
-bnJJMmcKRms5bUtDdHUvS1BzTFViOTJ5RnhuQ212aWFWSHFXdm9uYVZjcU9sWHlz
-awotPiBRLWdyZWFzZSBkP1RWKHxtCi9LQWdLV0hwRTFhQzhSb2Y5Z2QzY2xWd1ZS
-dFhoZGFRbnNIS2loeUZDVUZpd3VsTllLc0xva1ExYVpXRHY4ZwotLS0gbVd5NWZq
-NDkvY3JUbkMyS1o0U0hiMkMxUjdFTTBqWGZDT3ZpUnNYQThUOAqBMtKcCEvvDrTm
-Rz3S4csriN1X6gGEOURKVmKDXO5P8O7yMGzRjl8MkpSOIw==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBBQVlo
+bTBqR0NjNm8yY01CSStNVktDSTE3aFY4TGg0QXd6VG9aWU8xWndZCkpFSlUyNDNK
+QVovcklYdkEvMUNRVUNucVh0cmpESVJpRkFHWEFXM1Z0dGsKLT4gc3NoLWVkMjU1
+MTkgc2luZ3ZRIHM1Y1g4ODVZRHRQVldHczJVWnpFNG1hQmxpYWlyT0ZkM0Q0YVk4
+bW83UjgKd0dsaEhZWjNoYnl0aHN6RWliYTNjVEl4a3V4SHI3RUUvVTJnRlNiVkpj
+dwotPiA2Xi1ncmVhc2UgRFVEdUNdekggSSk7OgpKUQotLS0galRKU0lxUUUrRlRq
+amhabEJrRDV5SkRxemVuSHYwWWJhcDFqa2VhRWJJdwozi1FuY7z0h74uhkX81rQ7
+37JZ+zWjC9J+9Lb0C1Hj+glDFBXq75rtTsPvDw==
 -----END AGE ENCRYPTED FILE-----

services/postgresql/secrets/grafanaDBPass.age

@@ -1,12 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAvQ0pw
-RTJFR2wvT0ZoeHlwVXpkZldkVDhaMlJjUCswM1NMQVZDdWltWW5nCkVnT0xmK2lk
-L3d1Y0VRK3hYbXVBQjFCd25jUWkxTlZtcEd3SEF4REFyYnMKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIFFrVnFRaW5mT2JPQjgxMjE4V3ZQL2xtS2k4VklZeE5neThzQ2dk
-Q1kxRFEKaXFkYTJkMVp5QkF2SDdrUS9TOUU5THBuc3o2R3RuOXViYU5GQnMyR0tN
-VQotPiBdV0EtNHBfLWdyZWFzZQpuL3VYc3M3aUJoTDdMdVZXRnY4Ym45T1k5aDB5
-Q3NGa0lVa3Q3VXA4aCtyV2h2YkRzMnp5R2JFU3ZITGZxR0I5CkpGblUwQ0JhV0lU
-WDZxUlR1NFpoZlM2MTMzVEc4M2NpdTFkMGZLUFBDY0VYUFJxOVMzZllua2sKLS0t
-IElRZ2FnQ3RmYWRzall2MWZwVkZwdkNPN3NCeXFRdFhRZlo2a0RRWG45bG8K2Z1Q
-p/H9Vagg8ADTr4ol6fn7m41/tyD2tbzTKyCx0vKb57KUQZ/MQr0qfehWaA==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 -----END AGE ENCRYPTED FILE-----

services/postgresql/secrets/nextcloudDBPass.age

@@ -1,12 +1,10 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBxaU02
-T0swYkQ2S2cxblRuM2ZHZ0F4WmMzNDd5ZHJLcVF5SjJiYWhJS1NNCm9pcTRCWHJL
-RWVUTEJTalEwOHh0aDlJZHF5S0NWN01zY3hMVG91SHk4NWcKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIHdoL0F2MHY4VWxTWDR1c1c4bTh2eHVQU0FoWDFwdHhsZE16Wms4
-UXFFaXMKSFZhTi9TRUh3akNvNStlQ0w2T1FnRTdOWFhZaXh6RGYrQ0NlUkdyejAv
-UQotPiAlJilLPy1ncmVhc2UgUWB3RApyZVFkR1Y0SXdFSUxzUzAvZVZuWEthODY3
-Y3dVbVFWMGR3ZURqZXdsSzE4KzVNdzFlS2dRcW5maG5MQ3Y4SEdZCnlLMUlKWG1Q
-eFpLTUtRCi0tLSBsU1pRemZQZmhDK21SbVRvQW9NSFlCdG9YR0ttRlM2NXUzTjM0
-ajRBc05zCo0JQrIpSdXQTgcTULp18sAFF1aGwlgthv6lSetqlQLeusaEuVnR/rf2
-G3ecxNZ2TA==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBIM2J0
+QXdiM2NKTVVybWZYbzBreWgrYkp5aU1YaDVIMmRPWUVQYnkwNFFBCms1bEdoV2ph
+Y2lWSUdBN0dISlFaWkthanNhSjhweXNyTS8zbmNhNUpMVW8KLT4gc3NoLWVkMjU1
+MTkgc2luZ3ZRIEkxcTRidzFMSm0rbFVJWXdkVm5QS2JHUE55SGNFay9tRnIyNDFO
+TE12VjAKSlJ1bktObkJnbkhZNUNjS2w1R3BwWU4zRGFvamxMdllzMUViK0xWNG1r
+VQotPiAyTHQyTi1ncmVhc2UgKmAKdk40MjlsS09LV2N0NkZYalBIaTd4eFloCi0t
+LSBZRnhlYVp5VVZxQW9vbnNyOXJMR21vMCt2TUs5NHNCM3Z2bmNqamo3UDMwCjiW
+trqEyRPACZ2V293CH0SMkUUTQEhZpdumP5+y0aNXoMOa3jDgd1ilXsMjqNBpgA==
 -----END AGE ENCRYPTED FILE-----

services/postgresql/secrets/onlyofficeDBPass.age

@@ -1,12 +1,10 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA4eHFK
-NjVmQ3VNMkljRlRtUGthelM0dkZPVTFpQ1M3ZDczdUZneE5wdzFzClcvUkJNSWEw
-MnIxNmZHN0lLaTBPemgyZHZ0aGRRVXhYMFc0MEJnU2k2dHcKLT4gc3NoLWVkMjU1
-MTkgc2luZ3ZRIGFqYVFWWVRSUWQ5eDZDczZUUStpeGdHMDhidEQzQ0RlVUQ3VUtF
-ZHUvaTAKejNOY2s4cTRlR3NLQUw3VlpGUGN0cUlGOHZ0UDJ6dXQ5b0hUYjBBUEgr
-NAotPiBxLWdyZWFzZSBESjFsS3EgajtwSGotCjRsRmVKOTlveG96aEFvM1FBaW9l
-d0swT3VXQi9saHRuUzdtemlQVlROR05KT3c5TUpUSUhycEhOLzVSMWd2bFkKdkhj
-N1UvT3dWUVZRK2syMDhpK04yQnRNK3NXeDA1dUE5SGcrM1NrRgotLS0gN0FGQTRs
-aHZyQzNRSjlsV3o3R2EwRGxXV29IU3FVbWdDdFBDZ29DcU9UOAqI+4PESny5uNem
-Idc5C5BHpvwJKrvVMKxhwnboH/oziNJL1KxpQSBOFMh3Zqdu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=
 -----END AGE ENCRYPTED FILE-----