Fixed issue with cert-manager and nginx path requirements

components/monitoring/controllers/base/kube-prometheus-stack/grafana-auth-secret.yaml

@@ -5,19 +5,19 @@ metadata:
     namespace: monitoring
 type: Opaque
 stringData:
-    values.yaml: ENC[AES256_GCM,data:RWxkOVXqeE+NZQ+0BrKPB4lrgNZ+hZVIz3/YkdOsu/HzDrPKjyaK,iv:bnC0wh+K9jT6X4VEC+Nb4zfuPPF/BFTqAOTFv0YUdTE=,tag:tWW0pBNPwY7yAOMTh+CIHg==,type:str]
+    values.yaml: ENC[AES256_GCM,data:92+CCaQRpzVoOmOB3KEVnvEvUQQmm+TeeZ49SQLZjPJQrZtZMvZa,iv:GEH+lFkOge6YdlVQJAerA/quKcq2FDHWvTq1NlcBlZs=,tag:AGA/M8jR6uDNDFF4QEn8cg==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WElnVmpXL1JPVGdxSEox
-            WlJITU42eE9jQ3RuQ3RzR1J6ZXIxYjVGNFVzClRPNlNlalZZRTB3UTlkcnlNTVF3
-            ekh2Ym02SFlFNEJKS3VIaFJwZERtNVEKLS0tIERybExNMDZDK3AxM3ZUdi9XWFo5
-            clZ6MEIxbCtSZFBwckM0OTFxUE84S28KCMsNp5dtYQhH5J8/G04vzZu2ejNO4FoC
-            CS9dFSiN8zZ9lfUtwKkTHVR9QeYKtOXeFcpPMH7S8ebQ4apPHP/NUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFU1BqYjZaUncyZTRVanZs
+            NURaVlhsczgyVGtneDNSNXFBelN4dTUwK1hzCnE5TmVxQTdUb040eUVyclBGSUs5
+            aURKUDdHYm5mWEtSUlkrQ1BGUm90QU0KLS0tIEhOVXI1N2I3OHExazNRaWh3OG92
+            VFVGcVJiU3JnWTdlVU9VaEVlQjJJS0kKEwflCvuyRJGVE82FQJYv11eQGR3RBTVc
+            remCV/a2JBbc6FHr6CFA2UK9utgiqjLgdEIV7op9qnEB+VPK/WrV3A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-06T14:33:36Z"
-    mac: ENC[AES256_GCM,data:n2tiJq10ECYPeyptwawf1APEDXPm8pclxDZsej1xmsQ1KC/oG0M/WhhPzD2AIVJ23cKHgoV4m/6g7yt+WIAcTSREq4doHJbXExvjNY2yrVsVuM4Vq/ISM1GgPCHfMGFIzSQ9dTHpUmf7twVTsKfOehta9VAjamlts4l1kBctHK0=,iv:XPSkwFdF6vXAs5rlojt81TMkJBgy2gXOT5WnA0j74mw=,tag:KiJm+WDtRGxxiW4weAJ/Zg==,type:str]
+    lastmodified: "2026-02-01T13:30:30Z"
+    mac: ENC[AES256_GCM,data:npYGp6HghCG6EtCkLWTQWcF/NkxxTZ7goT5S8YN5msGDb8f8z9Ky336aKJExYbp07UqMtloAncCdKsmF9Kf2BkKAqgjtq/0LJPN8cy2963ITK4JGRgLrvDMiYIx7MjEkJl5bSi00gOG5wLNnl802xL1vRSjrjv5frkx7X0aTeQA=,iv:ScUuhHPIU5WtxKi6l2vHqmG2VLiOsbRTwTrzp/5VY58=,tag:MHh1rOWLJbCg2LOH+cVmZA==,type:str]
     encrypted_regex: ^(stringData)$
     version: 3.11.0

components/networking/configs/base/cilium/ip-pool.yaml

@@ -4,21 +4,21 @@ metadata:
     name: 1st-pool
 spec:
     blocks:
-        - start: ENC[AES256_GCM,data:AtRtTh+2KLJl1we+,iv:kGE5B2p4qGaYBQw/1xt4Zhlk7HuEFLHJnZuEMlYiO5E=,tag:qRgE3tr9tSPDFQnNmYldyA==,type:str]
-          stop: ENC[AES256_GCM,data:CAXUaHPDWoR/SwgV,iv:BqOGR7A2qZSaW0oAJTf5BGRjsRPcoWA0AKCIgas1UUY=,tag:Bw9gv0UtapnJuC3gAq7vkg==,type:str]
+        - start: ENC[AES256_GCM,data:26y0zfU3PAIY3X56,iv:bZhfz8YbxzOdRlYyo8djYhAbLVT4tZr86sch5LuUwS8=,tag:qd09uoW/55qdory1H9JqMw==,type:str]
+          stop: ENC[AES256_GCM,data:1ncnUkw+V2sqiJXt,iv:RT9RCMXD5fWn9XAaHA2XTsdYcd0E2x9R8X3dgr3n6cI=,tag:ljeCi0OHNIbYkNJinJQ/Og==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5
-            cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz
-            Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0
-            NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF
-            kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr
+            amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY
+            enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv
+            UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR
+            wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-29T21:18:31Z"
-    mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str]
+    lastmodified: "2026-02-01T15:46:05Z"
+    mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str]
     encrypted_regex: ^(spec)$
     version: 3.11.0
 ---
@@ -28,20 +28,20 @@ metadata:
     name: default-l2-announcement-policy
     namespace: kube-system
 spec:
-    externalIPs: ENC[AES256_GCM,data:uOu8sw==,iv:TbIpLCquwJyXqA/rWVmci28pOIpxlooMwUdQvdkwpW4=,tag:0H2MDoglCc4kc+2YFsrViw==,type:bool]
-    loadBalancerIPs: ENC[AES256_GCM,data:+0SbWA==,iv:IC/dkCV/Oo9n4WMehKE75g1rpZvZ2RwTamueKPYyPiY=,tag:lhrXx2Io0Td8xzfVuoO98g==,type:bool]
+    externalIPs: ENC[AES256_GCM,data:UbMC+w==,iv:JcLNojC5qSRmDQgDtlWSMCl2KQCSASxtOb7+ZapKjY4=,tag:SpoUA20u3MszDUj79tUXqw==,type:bool]
+    loadBalancerIPs: ENC[AES256_GCM,data:ypiEtQ==,iv:CZna6f6TeW1W8kjDQFE5lYBMAam2n58iNyByMnUQu10=,tag:w2AVMVc7bxWU3W3g7oHO/w==,type:bool]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5
-            cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz
-            Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0
-            NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF
-            kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr
+            amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY
+            enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv
+            UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR
+            wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-29T21:18:31Z"
-    mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str]
+    lastmodified: "2026-02-01T15:46:05Z"
+    mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str]
     encrypted_regex: ^(spec)$
     version: 3.11.0

components/networking/configs/base/metal-lb/ip-pool.yaml

@@ -5,20 +5,20 @@ metadata:
     namespace: metallb-system
 spec:
     addresses:
-        - ENC[AES256_GCM,data:tP4f/TFwbAcdAr2Gb+S4oKXvwKPJOYwIy5ve,iv:ouTd5THMWaVBkQJtNK7zRUupZu0jeQ66qblE9YRXnuU=,tag:xG7f0R0RPzYh04p18m+/FQ==,type:str]
+        - ENC[AES256_GCM,data:2JfDDPBooVrhzSfhmi3XbSX5S+7WharHng3z,iv:nVd3gY5hGufg9nC+NOEITuk/A51LSfVW3m17tKaaWdE=,tag:GR+//ceTKR4+DApaQokp+w==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE
-            emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth
-            U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS
-            N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn
-            c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p
+            a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt
+            U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK
+            K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD
+            +fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-29T15:32:48Z"
-    mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str]
+    lastmodified: "2026-02-01T15:46:17Z"
+    mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str]
     encrypted_regex: ^(spec)$
     version: 3.11.0
 ---
@@ -29,19 +29,19 @@ metadata:
     namespace: metallb-system
 spec:
     ipAddressPools:
-        - ENC[AES256_GCM,data:e2KiGNLv2BY=,iv:kd6NWV8M3yuV8+NALCH6AQLBswxiigklY+SsRlL3m0A=,tag:eM9KMcehxPo7j7cdIUSmsA==,type:str]
+        - ENC[AES256_GCM,data:Zq/dneuU9TU=,iv:ndq1ZId44lKMM0miSjY3SxrcmGh5YsFydMNeCDY7mKs=,tag:hS+DeXKNJqSjX3bmdwzkKA==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE
-            emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth
-            U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS
-            N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn
-            c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p
+            a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt
+            U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK
+            K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD
+            +fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-29T15:32:48Z"
-    mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str]
+    lastmodified: "2026-02-01T15:46:17Z"
+    mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str]
     encrypted_regex: ^(spec)$
     version: 3.11.0

components/networking/controllers/base/ingress-nginx/ingress-nginx.yaml

@@ -24,3 +24,7 @@ spec:
         kind: HelmRepository
         name: ingress-nginx
       interval: 12h
+  values:
+    controller:
+      config:
+        strict-validate-path-type: "false"

components/security/configs/base/.sops.yaml

@@ -0,0 +1,5 @@
+creation_rules:
+  - path_regex: cert-manager-issuers.yaml$
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    age: 
+      - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq

components/security/configs/base/cert-manager-issuers.yaml

@@ -1,31 +1,30 @@
----
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
     name: letsencrypt-staging
 spec:
     acme:
-        email: ENC[AES256_GCM,data:n3PMXRaaOw3mHTE+,iv:AdKUp2cgIs6/4wM2n2WXI9xZ1dPzzrPQhtRgsOaI2Ug=,tag:x74U/+A85Z5v3N7zCEAdMw==,type:str]
-        server: ENC[AES256_GCM,data:LHJVbmwjg8iwAKE2yR46R/hivMKCvQGI8HHTnROjPMtUdpiMyoGXslJeck89/qVdW6hgTBGb,iv:8uCZu9xWblgu7sRWvVP1i6q+YRQFLHZffL/XJGCmcpg=,tag:PJdmgsDtwkK5CmA3r7AW5A==,type:str]
+        email: ENC[AES256_GCM,data:YqOjX7qe1wmEPl7c,iv:fjKZIy4P9LhOeQEa2jbzAX6FBqEPq3Cz0lz14h2jOyg=,tag:qdY9y8ouPl2AbHWkDWfbDA==,type:str]
+        server: ENC[AES256_GCM,data:LCgLx35YyViA47qKsY8q3+70jSRkMHfs7INxrzL19NPQ3ePGeeZiCAp789/6EOTxQRHJQDSS,iv:ooe5aF7rwdFsix3WSbcb2ZmkAE8boDC4FrYZ7lS3EY4=,tag:cIyWhlnHAXM40CiTwYLTwA==,type:str]
         privateKeySecretRef:
-            name: ENC[AES256_GCM,data:Vg4c9Mu5V159/QXz2I3qe45cTQ==,iv:aUvbj+Kx3VmDmxx+QWIjpfo3C4Nc08phZhQwWpfNE88=,tag:90ey7W5TL2G+hPtEG3THZw==,type:str]
+            name: ENC[AES256_GCM,data:S6lMfFyxX+OIwoIzLd31S0HUqg==,iv:jpBGHY8Fnko4gDrhemr8p+x3lFojd/DVGLrXPXUZkME=,tag:IyePts+acrcVAuNZwF9dEQ==,type:str]
         solvers:
             - http01:
                 ingress:
-                    class: ENC[AES256_GCM,data:zIu3D/s=,iv:+Uv62H9i0VGkSufnt3cjjX4VBvr6ONo6tvQzH6r8BxU=,tag:pY57Mbuyg/wwzCTkLoFx4A==,type:str]
+                    class: ENC[AES256_GCM,data:scHkNT0=,iv:B9X58ltjN69bNQt4pW4MDCwwH3fEGQ6VoPTPcTZY528=,tag:RzCVgfJi/H8KbkV46WLIOw==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxa1B0c2F2TG85RUZqVkRu
-            RmpYY1d4Rm01NlJPZlVHcDQ1cEl3ZzR3OENBClgzTXAwdDJuZTJ3dGF0N3hzVXJY
-            VkZEdENaMForSVFIbTg2YmVGelhBMncKLS0tIEJtTmFvKzNYRHEyZk94cGMrTnF6
-            ZTVLMnBudHVqTzB4eUNrQXBid0c1SUEKEMhX2k0MNYt5rrgMRy3QTIOiIuP0lwJ7
-            2Pyg7kj2RTQu2plwRZBNzQ2kBfCBkx06MBaJASHHsBQIPUZhtMLelA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280
+            RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2
+            S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0
+            VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya
+            h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-15T23:47:15Z"
-    mac: ENC[AES256_GCM,data:B1opGlOCwM0nCFRWLdpteNuCAb06emGf0I0KKOhlNh0u36DTr1aVRzGV57sJRi8b4rSwPBucP2WzIKFAHY5yKincGdHwPwQ40dun0TreaJrtXiJagz19n2nqc2vZfzlE9G8QdG6Bnos17UaB5b+I5dWYlz1XM8oYOk0pdzrCGas=,iv:fuC+7nKNxHfn+Q7psFQmweRIUFzIcBuZN3rESFmnJL0=,tag:IEVeHB4Kol9GNHJOolamRA==,type:str]
+    lastmodified: "2026-02-01T15:44:55Z"
+    mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str]
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.11.0
 ---
@@ -35,26 +34,26 @@ metadata:
     name: letsencrypt-prod
 spec:
     acme:
-        email: ENC[AES256_GCM,data:WROzrrll22ZOAA4i,iv:6c6oni+U4kJO7wKSPVmnkvIyesYR/vYvK0qTY/9RslQ=,tag:d4thMfoyWRU8kPOCaptTng==,type:str]
-        server: ENC[AES256_GCM,data:hr4tgxj0GJM9oKaMaUjqUBdWByhOwYAQaavPiIYO/vVthmTTG6BY5/5iWa/xMA==,iv:hkuwiVGelzxSeIEBHNpe1tFQm1LjpiQIPfC2hliMQLg=,tag:b9sN3ffRKq9/y+QuBkl0og==,type:str]
+        email: ENC[AES256_GCM,data:Dh5rc5Wak2MnQqR7,iv:uLmnMlYhjg1X91vwfIHdubVV61u/3tQGKaquIEG2p1k=,tag:vLEWQ6pP6goAwKE5R06uqg==,type:str]
+        server: ENC[AES256_GCM,data:gMaHtIORxKiv6WuLDygFvr8GhMjbqW6NWqWZSTCLoSi6cQaULD3/j1l30A9IPQ==,iv:mPOqGFikZGsqT6widt0EIc3KXreZXApuZtdjXBK7HuE=,tag:iJLVIOiOd7iwIyjDIRa1vA==,type:str]
         privateKeySecretRef:
-            name: ENC[AES256_GCM,data:6euJ7/Fiu/4DcLY0CK4f3g==,iv:9hLzhVY7/3uWXKrfgvXAOXudgGMc11JiDFuDD297WvY=,tag:ujjexmTBX7PtClg3iGsaCw==,type:str]
+            name: ENC[AES256_GCM,data:ece7iyTmT7hq5+x1bN225g==,iv:xV0B2Q4ZOwl2itYAtenk/P+9LtJNV2ojuUSXp388Uc0=,tag:uEmv9aKXGTpjr2+HvDgNpA==,type:str]
         solvers:
             - http01:
                 ingress:
-                    class: ENC[AES256_GCM,data:6xOo5yo=,iv:g1GO+PME54KZNzrf1mZC+0G8aw+XJ1CEw+i8NakqVPM=,tag:NaIyYrnJOMPsLdoNBCqMFQ==,type:str]
+                    class: ENC[AES256_GCM,data:HIwSVYg=,iv:suD5+sQF4uOsWyr/C7RaG+WXuFf38kh2XHKulAxbcPU=,tag:wgT4E5/2Zpn1fETnu0zWpw==,type:str]
 sops:
     age:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSGhmM2F4Y0VSRzhWSWRX
-            cU95OGFNRUxNM1FucTBVOFlpUHdBbFIwSWs0ClZvblN0OGtSbWdSZ0RUTVZHV3FK
-            QW9mck9TOWt4ejdiT0ZHak9BdWlnemMKLS0tIHpNNUh3b0NFNlBQckZQZzc4cVgx
-            ais3c3orMDcxbjlIUnZlbEZyVVZUTTQKbOMIUUOKX4b3qDsQhrkqWpsuJcSISc9R
-            Zg3Y5Ph5iJxrxmftDA4rxl0WFfGhI67JCTKPDpN0Dzfm663eMnKe1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280
+            RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2
+            S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0
+            VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya
+            h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-15T23:47:15Z"
-    mac: ENC[AES256_GCM,data:pUXu12zIDvUG1+Qfu2gvYmnLfSMNAl3DU4Z1ZPIYVBg0XX6btEyO8o9TXssoG6efIH+FrMkNVj41BMIdJnp12zcjMyUcD9GKvlJIYQla59uy/XBVArgvgYF8iBaz6PfzTFVYPUoP2WPi7Q9L3w12jsw1wRyEpYshAFtVJxtvhCg=,iv:o9oatVlXBl682FYCnFbqcNxQ0sKLlj2qI4m1k1seVKE=,tag:t46aEUU7RWHA/vPTFPinew==,type:str]
+    lastmodified: "2026-02-01T15:44:55Z"
+    mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str]
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.11.0

components/storage/controllers/dev-arm64/nfs/nfs-config.yaml

@@ -1,18 +1,3 @@
 nfs:
-    path: ENC[AES256_GCM,data:8HEV6/qPUHdwAnNkzXUjBnQ3Xf2Ea3kQ7t+Gu5FoiA==,iv:CvoDqqPrut7OqEEMLDXh5X9jW5aaKK7Y3gpGm8nTta8=,tag:SG5rN+orDcGvvj+vCwPVNA==,type:str]
-    server: ENC[AES256_GCM,data:1CFxEkbv+LEICGo=,iv:6VKteyWM/ynkN5eiYvAhISBY9RTRo7UsBu2K6K7QI1Y=,tag:xXw4mqi4bM6rzWeN0yJbWA==,type:str]
-sops:
-    age:
-        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0WEFFZkVVbzlTeGhueVlR
-            MjQ4QlJEVVFSWVgwTE5PamE4bEp1WXFaWVhzCmhBaEp2WVJmQzI0K08zN2drSUlI
-            VVd2ekJSZFozcFJERmRMWXFkWVZDbG8KLS0tIGZzWTRtNXFaeGFPMS9zaURaWDQ3
-            L2YzbG1yT1p2dnl5V3d0bVJRZ205ZjQKnj5uH/35GJl6y3jrAW/f6XjW29fFn2TS
-            lWyX4RESe3x+hQbx53PUz9Exqj2UPG9IXUzLxca4r5N7Y1ScbkXsPQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-06T14:55:37Z"
-    mac: ENC[AES256_GCM,data:xStfwYj3KJl/PcNhgz1JI/ilnEd1FPewWMcf8Tyt1yQfd0x9cbnCfoPujie1tEqoPHXIMNvyrRXt4R+CwhVcHnuH72AFiwXdF0mynOQbkZh5gxYkKSThqvL4vQn3jPI4/dWnfbB/K51x2gcj5pVv7IClrBR5tvvYRAWS8HV2924=,iv:/j38bjZA0H5p2/TEgbOB03/OhZrBn8szahlf90j24Y8=,tag:MPkMCYrKKCH7fU/WnQgjPw==,type:str]
-    encrypted_regex: ^(nfs)$
-    version: 3.11.0
+    path: /mnt/kingston-ssd-nfs/dev-arm64
+    server: 192.168.0.4