Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -7,13 +7,13 @@ metadata:
        metallb.universe.tf/allow-shared-ip: internal
 spec:
    selector:
-        app: ENC[AES256_GCM,data:usJsNJv9EA==,iv:63dTG5r6VV/M5zoCzOPlRq6A6J20peblzuAP6y6YnEs=,tag:FDXN2LkNwu56p0uj9Xmhdw==,type:str]
+        app: ENC[AES256_GCM,data:ZJMBQqoEww==,iv:w/eJEa0GVUavkLxHOgvOhCR5MV7dbVeaUR4fjWOP6NI=,tag:i1Q8+5vx3Vl748m8KiTJCw==,type:str]
    ports:
-        - port: ENC[AES256_GCM,data:zTHd9Vs=,iv:if+UEKbuRpbNhRfnGeebB6hCs/1Ws2ltNED5X/1OvNo=,tag:vpoq1Su0+yMqt25mVMGJEQ==,type:int]
-          protocol: ENC[AES256_GCM,data:7jL+,iv:H8uHSONfl46Dij12UhL8SYcApRiPmeFOqWLoh2AzNBE=,tag:p8PPWMWtlrw8u2xmMWfY5Q==,type:str]
-          targetPort: ENC[AES256_GCM,data:aT8ZLQ==,iv:SidId8X7ARPsz2RFTwS56TCySCNQiUphlN/CJcSYBFk=,tag:5lvXmTx9V2MlmtgVGlnFpw==,type:int]
+        - port: ENC[AES256_GCM,data:GNT29Wo=,iv:5aiUuQvXRdEtd54x/E+8LPLwYiho8/t7ojGvb8fC+74=,tag:qKV+Bder2SbTMqD+VEy2Rg==,type:int]
+          protocol: ENC[AES256_GCM,data:h5Db,iv:DbNmw/d4YnLVF5cVyZTMqOVLqdP0NuIZdBNJhV81dQY=,tag:x26s+BZpQ9l0zs34eYtgcA==,type:str]
+          targetPort: ENC[AES256_GCM,data:Q0VE+g==,iv:KayAaoxUTEpZkTkkH54x+egZ92A1/KZ9zAux6Z/s1Bk=,tag:2fINytoj0Nf6KVmgC5NAYQ==,type:int]
    type: LoadBalancer
-    loadBalancerIP: ENC[AES256_GCM,data:y8c+DfKN5D8AVJKW,iv:6VTUD9IlHPu+jfdjjPaMMnpfo+SSaqcuyXjoeW3lros=,tag:Nb31vbEOy618uHq6Ff1FCQ==,type:str]
+    loadBalancerIP: ENC[AES256_GCM,data:449y/+dW/Z2is28Y,iv:pc6wGDI3SbUujS8DF8rXhLB1rUA49twyjLesntjn95U=,tag:KPCt7GHzvHcNXxYvmf41+g==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -23,14 +23,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1YUw4T25yNmFoL2NUSzlD
-            RURNdVBnMHErSlZmcEpCN0ZtT1VleXQ4bjNVClBPNlI3cmpKNGxjdTNzNGhVMkEz
-            Skx2ZUpySFpsRFQ4d0wyMzJXVXhrZU0KLS0tIGFhQXJNeHlYb0VHTysvK3ZxTU0z
-            UVBRZEJKQTJocFEyZ2JzVTZUMUM1WEkK+FiEmZjQ8uW2o9IN9pr58kHEFC4P/mhm
-            PJFKoBDWyGkwWfNyq99yvfzRzd87WvLeqdMVOiR/gEnLtR3hA3/5kQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZOXdySysrcSt3SExSaWtn
+            L2dHMVdQTzY0RUp6Qi9rYkFrTlhHUnp2a1h3CkJyVVAvdlhYMlF3RmFmQ3hpZG9I
+            Ujk4ZTcvcUNGbWFYK1o1dWpoVTJ2TGcKLS0tIE50YmIrYndOSjF1blhiWHhkOWt6
+            Sk5OazhNeHFHeUNrN0VKUzl2dzk4aTQK5VomsC9DIBcJeb1+V/ZNOdNdujUdlUGk
+            ktIEFWc57LMZ3R7twRpGMnfjLGAUDALrc0Wwnp88YNc6dTVYqGkX3w==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:VET68uHmNLGvFdmPR6vSXXGDbFjk9jBzz98QQLVDelsbfjL95wUvyx9QvevLqtwDjAtd2OWOgaKISxffxjl81CWGMzRI4VNzzFhm90xrwuoMGqXaIiwyrFSbBTT4pTZXxHU8RFg6OxYHQS4csHbaEJ2RFn5RZAtUHC/5FMTfQYM=,iv:IYn3RllwdjMdiQe3YFLRdhkyR+niEAfwEvjtwVyWEhc=,tag:AF3r7CkoLmPQaPnxlcDkVQ==,type:str]
+    lastmodified: "2025-06-29T21:31:03Z"
+    mac: ENC[AES256_GCM,data:Kzl1LVymrQq1EHMbU1PQnk26pH3JIx+A2p4xCblSIqDMtS5MkkgA0Wsydz3fBW47vFgRk6QoviKgKh2lvlGmdFfWNwuJOfCB1plqTIOVIUpkmUNJtLQOjHNuAPLlM6o65rJafDfK3pNLetcQ2l/ugMtS+Wje2+UbZQkxbZ69lQw=,iv:49pA6YSaJLICFwZu6Us5Aq+y+ZDu00scmaZMrThY0x8=,tag:Jq0zqaCtZHKGgAYOOT4KeQ==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -45,18 +45,18 @@ metadata:
        # < label for tagging and reference
        app: calibre
 spec:
-    #ENC[AES256_GCM,data:6x686tHurkBfJweBjPF4r+aHuXUh50uIVR0F,iv:lJhMWzc2QERpL+p7hlBcEr525X6Wf8vcQtv3ifjLN0w=,tag:pg3KrWDtLw+FZKfmK+2wJw==,type:comment]
-    replicas: ENC[AES256_GCM,data:OQ==,iv:9w1J7drnCfbdpEX4ENfUPCCMnXQbi27ObJDUz0HQ6GI=,tag:KBjwp4inE68maimOVAkWRA==,type:int]
+    #ENC[AES256_GCM,data:s9aEiyePFqu9sh4mQcWm911egIFvI7BMMSpu,iv:V4Q6b71ivyxY403Z7+/1m7fvahhDo8W7rOwO3IKXuf8=,tag:ClX2jLF6jIFvZkRVqpXgxA==,type:comment]
+    replicas: ENC[AES256_GCM,data:og==,iv:avGOv8mpngsjlYDVwluhuDqhGrNsfgdW02FFayvcG0M=,tag:7owfHqaD0IcN5xbvSTqTdQ==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:a3LedRGimg==,iv:lLU5xDyyOMDnF1SFSZ4KbW8ymyelb+4kd5oqW6IticQ=,tag:PuzCzqxlL7WABnKKU1tGpg==,type:str]
+            app: ENC[AES256_GCM,data:O3IsJKhCtQ==,iv:sy5uV9h9aD/tnvj3mTDNyXvlhA3F1lbbNrJV1TsViAA=,tag:YIpEPPw+8i/4v9vhoimiqQ==,type:str]
    strategy:
        rollingUpdate:
-            #ENC[AES256_GCM,data:Bh4+hxcSo/ow3QixQmxqigT0XOtwMwcDD/Ycmu6KCTB5NfyVd56T12R7IQ5m8wQ1AcaxvfGdgyxV1o3Ge856+KKJgt+edR+4GUSth5U2TN5ChemtGo3ZmSy5Sg==,iv:mGFbi0tKPHMjs7SyOVhtSr2YyycEL7nqKkKGkWQg4x0=,tag:OtpFAyUArsDk1hkn1Xuzwg==,type:comment]
-            maxSurge: ENC[AES256_GCM,data:1A==,iv:myvyx7724viwfeT5dZsOLWt1lNHp7T89jE027j4SvCI=,tag:rTMgNOxavaPlu8gk6ZIObg==,type:int]
-            #ENC[AES256_GCM,data:W5rjrnAxbb0wtkkcSpiPSVD5Rm3inQnZZK/ULUl4WZX2Pw3Bl8PEYruwxu61aAPv7Gy2hY2i797uQ0bYD7O/er11gqEgkLA=,iv:nPNze86ixN3L2+hbiNH+vMDWqCvy01W4rlrfkyT5Zpk=,tag:zDx75q8kFjuB6LmPHTcfJA==,type:comment]
-            maxUnavailable: ENC[AES256_GCM,data:tw==,iv:kwlFIPPzjETowpgUBM62AzQNfcWXCkrjSiexku+85O4=,tag:5UIxLK0Nxbbu5Ig1Du0pQQ==,type:int]
-        #ENC[AES256_GCM,data:RqPfyC45EYiJng31tz/ovy2fErG2SGzE/27XEwFCO86IBtRaFBRjuaWoT0eWZtZBMwqMSKm4wvs5AOt3nL3vQl5My03WzQ==,iv:xrIaPwth3DYKeBsquFusC47Vod/keFnJx600AGdBxqM=,tag:7/+knBt9m8BAKKpHbWRJkg==,type:comment]
+            #ENC[AES256_GCM,data:7my/YhgKd/hO/c2ehidU29j/98vv7tozJXpr470ZWCbYpNEx/Jgq62iHAIkvfBwOfcTb+UIyQ0Iv3eOxAf/pUG6AfBev4YdS1e+QbKZZMDtVQ1FivB3IxDBKiw==,iv:Kldrpn/Ta+IYluw2gWJwJ+gG7LYpn4QoVFAh1bL9s5E=,tag:mhF7QapEMs3NUeyuy5Wg/g==,type:comment]
+            maxSurge: ENC[AES256_GCM,data:8g==,iv:4eZgZxEb8jkeqTacifadsLxmvB9JcTaS+Yl78OOVHN4=,tag:eYc+0C9/Vrdf6m/RbetPPA==,type:int]
+            #ENC[AES256_GCM,data:aKLDnLxbvqsp3n3pqlz3XZ7l2NWBzi4jVK/Od0OOzGaZNMCX/daeaX7LWv/R5hcyCiLR4QAlu393RnIaQuJfxKA+tiGueLQ=,iv:oGvIQf7ZXTeeshu/YevPb6xi+3QYHYiq+Mj2lXzJGiM=,tag:hIaVRfKdYyYPWldtu4uZxg==,type:comment]
+            maxUnavailable: ENC[AES256_GCM,data:Xw==,iv:AqYku/+u05BrapSodlvjDl8Q1PwWBcVfuErhshCp/f8=,tag:HB6EvEj5N+lRZkGo0zqseA==,type:int]
+        #ENC[AES256_GCM,data:rBk9Pc+D4r9T48cQnXyPEx2+Q3xfTvfojd8y7I9dmpqneFrmNLV7UwMCah/HwR0RcxgAxheo4egQBlxVbHDwr/XbEuQcUQ==,iv:KUomi1Kdn98BnzXRsU6FWJO6Y+BvyRlMCNmwti6UIc8=,tag:YGGdoKVn33FkSNt3tOUhdA==,type:comment]
        type: RollingUpdate
    template:
        metadata:
@@ -64,42 +64,42 @@ spec:
                app: calibre
        spec:
            volumes:
-                - ENC[AES256_GCM,data:yq97DnphBkgHWQDxk+m8aI0NEE6MjpowG9X7G4SKKBcXrOVYtA==,iv:aXzbBeOgFDiyohPRjGeiS+N1FmJX+feV+Dpelncf/tk=,tag:rgs7utDPXmri1q49qSCAKA==,type:comment]
-                - name: ENC[AES256_GCM,data:biB2kiq8kUuTqnac4Q==,iv:H9eETC89cJdOJw7JtJ+Z/PNTG0YYb7l54ZxYzR34cdE=,tag:iE13YXNfr2cDbUuMXs+OeA==,type:str]
+                - ENC[AES256_GCM,data:YcMBwhM4I4vNFzKmmG4N81eLViJuMfOG8oT54H4MhjGp7l+fWQ==,iv:BW9DJVEZt7uo9XJVLk33HPkQYfpIdUpUaMQ1GKCxb60=,tag:hI3CaURZjCQ+YBUPPlKDNw==,type:comment]
+                - name: ENC[AES256_GCM,data:Xtqj1UdDCdntW5hKnQ==,iv:dhfBbebgRJSoF6YKKWJs+hz0SGHuP01lEI67uCix2/k=,tag:w9iMb5EvNMwFOfCRw+Dl5A==,type:str]
                  persistentVolumeClaim:
-                    #ENC[AES256_GCM,data:fjCnKmCiHTwnBjAo2atmz0C5TareOH0EBkuDmrCMDstscV8+9/B74OIFBA==,iv:6O1IwRR4x7BuaYm09YOPaQ51/XfP1m/ZZRCr5B09O14=,tag:V1M1v2D0LscJE5Q6884f9g==,type:comment]
-                    claimName: ENC[AES256_GCM,data:ywRKR1d1YG58f789GeiFApE=,iv:Iz3dwR1A2br9EEIfKg6uUY0nGmTV3qmZWOMRnfd1fHo=,tag:B52uDIhBdv5vHqluJx6g7A==,type:str]
-                - name: ENC[AES256_GCM,data:Qj9o+z0Vzk0EwqjH,iv:ek8yDHNYS88+EL0zqYfbgcOqdbSzI6whkPlUvoCcMkE=,tag:LZ54ajXRVNY/MTfcnPIL7Q==,type:str]
+                    #ENC[AES256_GCM,data:/1hNFvnludujqOfA7o9wFC1Wk+WDYBJ066R2AOfM0z98UwCYqUkKiAIfcg==,iv:et0C5XLYbcuzWAGb80JOlDNN2zheQIPkcm/cKl1c8Yo=,tag:Xu4SX4x+QRudIWUu+BndEQ==,type:comment]
+                    claimName: ENC[AES256_GCM,data:net+ErcqAkuvKy6N2CjcGz0=,iv:MFMy8sYXF+QJq/5Kk2SdufYTLCc/9G75JO8O1P/X4Q4=,tag:mOrQjAlcGYu7CsPuWsMHwA==,type:str]
+                - name: ENC[AES256_GCM,data:mgL6pZVMsklAW1LP,iv:fvvGNyzXGO2z5/OAOGx5mjlcDqjximva8uvN/TD0gRc=,tag:MBjA1zUWnmtxEefEpp+BmA==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:GfQ0iBY2uJsUMO4xQlZhww==,iv:weE/+8DuHV7WQwiJeC8yBG7a8Fg5z4ByIOWtESCvoH8=,tag:0G2AGf8EMkLW+rSPot1iyA==,type:str]
+                    claimName: ENC[AES256_GCM,data:zDVux5hRPrMr6BYCPvEDng==,iv:VJYvO129Y+nKWmdVO0FiuUE1j/CsHmEhMI2Ap80Ylzo=,tag:C1QkumnkSGeygnp/3u8obg==,type:str]
            containers:
-                - ENC[AES256_GCM,data:GD2VNHqLNBxcbgBDK7VBuvl1raDKqMeok+7jabOLJ00wfR+sY6mrEbHdnQ==,iv:t6MpfTqHqpc3Zpj8xDs9u0YRR/kjRpL3qibRgtq/ZUM=,tag:r+1nKZIyvtDxF/R94h9myw==,type:comment]
-                - image: ENC[AES256_GCM,data:k15FYzE6fjeDdEwKjZs3hVqhUx9Ng9tsVBsuxGEGzmxpYgY9Z1zeDGd/bNI=,iv:WQDXOykKTy11zqgXzXQ6l1FyKQ+2D4caL5PTAcy3xug=,tag:W7PCqPUrUJDDhJblECydUA==,type:str]
-                  #ENC[AES256_GCM,data:4WbM7lCOCxg//S1nKUyGUNdTyJo=,iv:y3TgTYIYZuT5gcprZssOAu4FlknpX7fQvmaq3n+/xeA=,tag:oNz9n2uuBmN0bWA8FtEX0g==,type:comment]
-                  name: ENC[AES256_GCM,data:RrLpugDn9A==,iv:/Sng12AbQYh1aWnO5Na/+zOaObo4/Yt20sP48azZw1E=,tag:CRWt3KwHH1c+uqet4iWpkw==,type:str]
-                  #ENC[AES256_GCM,data:1CyNZKr55j9yZ1kUgJ6Juq7rPuTTGNdDYCG0BPyrZ93mhfoPa3b0fhvyjMbt61xgc2iFQlUvbm8t2A==,iv:jTuGITU3ITPHr25od0odrtKkdXuMpZulqLYlb6UnWbY=,tag:p3Bj7SNSnXa6sGcLxoWP9Q==,type:comment]
-                  imagePullPolicy: ENC[AES256_GCM,data:WY9K1GzNl9KFmlz0,iv:p3qlHDOWADsdeR1O3OBWhpDWMqNK+KDJa7U4HriDWu0=,tag:5nluW9e/KJxcWADhPWtOjw==,type:str]
-                  #ENC[AES256_GCM,data:dRFGwHiufQQuBjJJs2zJzUia/+RAft+VAe0D1LKhS0k6STaVANaPMKJcwEUifTYgCozV6RnMvQPYcW3Gy5sezsshsIFFLjgeQoH+AA==,iv:Brw3KEqbwKtHsO7aDpKATIcK/mQkLNqj/fXI6cIST/s=,tag:/SaSjOzvB5Y7p+W0t6JoMg==,type:comment]
+                - ENC[AES256_GCM,data:OMeFfg+fgArParFgb18mfYARVY7eBjdU8PUOz6iI7O096L/moY7aeUbslQ==,iv:cCDrboDV3bGcnegIg210xXDIFzCqZ2NwVIpSZ1grUZw=,tag:mOo3XPuJiSFUQw3ACYqCJw==,type:comment]
+                - image: ENC[AES256_GCM,data:fqVJ8tcu6vIpF6427sZmox9P/0DBmLWOxarOJYmsLx9L2bMbaOwy5j7itcQ=,iv:f3sBWZh+HRg/sePt8nuQzYLMB9MLqjPq+hkZeuzFOeQ=,tag:EN5ohV30j2IrzzK9oTRWpw==,type:str]
+                  #ENC[AES256_GCM,data:UVBT0aJqrAwKJR+iTmDe3hqhL20=,iv:0CfIIlFpkAvwfyQM2DDbSwVkCsdVSGas6e5Br6l3oKw=,tag:kiK2pUaohNh+Gm10wcYe3w==,type:comment]
+                  name: ENC[AES256_GCM,data:jRo8i4nE1w==,iv:ZYN9EeDiIEpd2nA2xHuibrLLUSv49capziT0D/uH1Rk=,tag:YHeeW8JIFy981PFGiKfuCg==,type:str]
+                  #ENC[AES256_GCM,data:gf2xFBxcPxmvTTOWOsjHX4mengi4FVAvIpUvATiNKeZcKgeUrGA/lXgsWkluX1VlS7jp5DCo2kRjjA==,iv:IMv0TO6m0xT966WkeCZshJZdGXDU8/A4zXkvSpJIeek=,tag:COdVi+iWAsR2ipHL3trcrA==,type:comment]
+                  imagePullPolicy: ENC[AES256_GCM,data:PYXrQgSG6/UTS+6U,iv:sc0MjrctljRuOTL6Ceu0P4+E4NApzDp31akBOUqo+qU=,tag:2HQFZ9H3zMEZ8hemKJSacg==,type:str]
+                  #ENC[AES256_GCM,data:8drI+zhC5xijAUrue5bU8K5WXetZNCDeWoQn/t6eW0Df+sSbyYFjpRi0stRDEWVR4j6T7B5pK3ekbh0yfItK/OqyOhAwz8BwQ35DFw==,iv:2oVQQqYXTJTIn3PSZSA6vSOE1DPLv9VmqhfUDGYAA5c=,tag:6BtUgxnWZ1Ib3dSeoybg2w==,type:comment]
                  env:
-                    - name: ENC[AES256_GCM,data:T/I0vw==,iv:BHBSCcAay5RagbrfhtY1O+GVU/LDHHJ9NfF00KAneWE=,tag:B2k6ltvDXsgARjZxMTH1Cw==,type:str]
-                      #ENC[AES256_GCM,data:PuRUzRirTCs1cJpSlpAq,iv:SZdzRuUBlL2wCVSVDH65NPqjj+2gW37SpUeF25x+zOI=,tag:3gxNSsv1aY0ztdjzaNWBLw==,type:comment]
-                      value: ENC[AES256_GCM,data:EAFfQw==,iv:5U5P7Vn3kJ7/HysuY5SdIbx5EpktDcQG2Fcsh6pvQ+g=,tag:gS1jLeLvUPuZ9CWUZVqIBw==,type:str]
-                    - name: ENC[AES256_GCM,data:oGy7tA==,iv:+GHq82sWD4UtgfP4wo1khlhhFURyjzTJHY4bH8rHzvA=,tag:GxvM7fUT4VStkH9ilPCBaQ==,type:str]
-                      #ENC[AES256_GCM,data:l/tVImM1GGH001JqI4M8aA==,iv:quEUzyzz8gWwQRXZr/n+zJKwte2QRztxusVzAS0jFZs=,tag:YwlSdmZsh9qm0Z/ZdOW8mA==,type:comment]
-                      value: ENC[AES256_GCM,data:o9T2Cg==,iv:KpzM4zVlUjk9S8GXwqTE0E3+W1s9m7ahZAwXlmR1m/I=,tag:evuDjqFn8rZeI7VOFt57ag==,type:str]
-                    - name: ENC[AES256_GCM,data:ipQ=,iv:yrV5ZTGnRGJuLB5tw4OddbVvt4IO3u4cULwSavUDsEU=,tag:lEwscqR+Z9HfVEmJxaSOog==,type:str]
-                      value: ENC[AES256_GCM,data:EM1Ny7ZtFiex0Lg3ft3wAA==,iv:WOV2FEwMvZoWj3ICny5q7GpB0oO1GwT0YFUnYAqSvo8=,tag:wQl9X8bk7uwHQtz8iSBb5A==,type:str]
+                    - name: ENC[AES256_GCM,data:Cd6+QQ==,iv:d21llnv2YSG5MDrEaCnZ5dGhp3B4VcW+H06OY8zDQlY=,tag:3eFZwjQ3QhvO/T86r0liaQ==,type:str]
+                      #ENC[AES256_GCM,data:qCGj+AEFVWhAEJD5Gzon,iv:PCv3jRWHoVNrCY9nWxPls+8nkFlKPcnedPqnhnQeODs=,tag:DD8ghKlk4fM8bRTK6TdZGw==,type:comment]
+                      value: ENC[AES256_GCM,data:YDOucw==,iv:E3MMYMyzeS/CZRYxe9vNWKzS/9hd7+/iBWkhoo076m8=,tag:6iNnL9QpFoR5e6R6nDdtrA==,type:str]
+                    - name: ENC[AES256_GCM,data:kbxrkQ==,iv:lP7WBx3aEPERP6VNJ49tqwOJmcbCAdAjA5NUoEDs1C0=,tag:dA5OSKGUvEYKx5r1yS/l8A==,type:str]
+                      #ENC[AES256_GCM,data:8CfYMklYfyFaavBEH4HmwA==,iv:tafrpTqwoeT3OlLsGbbbYODQTb78fg1W33wxoF5Z3FQ=,tag:mlPPJtjjR0VGxlo/dNkeWw==,type:comment]
+                      value: ENC[AES256_GCM,data:OtIw4g==,iv:Zr5sreHUgNP1s1/VRehx3K+fW27CMp9WUg7C62eaPlg=,tag:BqRDVROkrJa5BckKfyiAfQ==,type:str]
+                    - name: ENC[AES256_GCM,data:Akc=,iv:b5oZllkI7Fh2dyLJAfLJv6tNWhr6hhC6qvMrirGB9pA=,tag:6YAnmrlxtAB66NCt24y/tg==,type:str]
+                      value: ENC[AES256_GCM,data:QaZKHaxe0+dPSsX0DQGsgA==,iv:culdtI9OEqZ3m7qX5P9sHnJ+rbj3VQ4atDArBTC8xKM=,tag:v3BdHydXH9LHxrE6X8sLMg==,type:str]
                  ports:
-                    - ENC[AES256_GCM,data:ZTEjILs0ESzllFG19Rf8HEZuB6+7sDu2qtM4yxvoFNFMUKy4XjttVUUHzLD+G/zkZoDTfjhcA1MK7f5g/B47nBxpuUPEQ7lLEDLfp85vD0DWNA==,iv:OLSxzmBwPM2jr2HdGID9AyxtOQMBTuIlZ6LYh0eZwlg=,tag:paOAjnDP2HsToMJ1WLf57w==,type:comment]
-                    - containerPort: ENC[AES256_GCM,data:H57kBw==,iv:FRjjeHjJ3WkFT5MHhN7MATRH3D9j+VmM1gU99Rq8Kpk=,tag:AsWBkH6v6znWoxRdtjr5aA==,type:int]
-                      name: ENC[AES256_GCM,data:BUGtwquTcLmzEw==,iv:y9HxoP5K75wx5z4h2sGaNUIeRbsEl4gkDsMvi5QMIRM=,tag:+hb7QBzoB9tDp7++6wKQTQ==,type:str]
-                      protocol: ENC[AES256_GCM,data:1VNC,iv:Ggz+sEIxMMOYAAdvsM6xIoi3b5w34a7vKrSbDNK1D0Y=,tag:Qx1/NMmm1z5p19oarAkwKQ==,type:str]
-                  #ENC[AES256_GCM,data:1uPaAVNXoIhxlwMRrsu+vUWtIzDglHhZx/CVlAzMVq7oXbrshqSezvTjgNSWeLYI6+n9qV3JszsiUXDKpYrSQ+AWnN3GjgB+KBiH3iHInA==,iv:NIkzfrePYdKVUyTltr9G2TM0cLb/LfoZ8btMGcPVdSI=,tag:PopkYp6+mWEXtHrvOA+A4w==,type:comment]
+                    - ENC[AES256_GCM,data:0VQJJIveAkXH9MlJR5GKfk+oBbGWr/Ina+7MFZp0PFvAyKdUjw8ZvI1/nBZy9pAQ9YY4xnUB11DxTjRh/XqBoEGWaHe4znnheRa2IrqRIRZepA==,iv:lSdlnJVqhoO78BHww0cJiWnZE/HatBZUsTvs/GURXEs=,tag:dAKndWu8GS/JRr8y0uotdw==,type:comment]
+                    - containerPort: ENC[AES256_GCM,data:oZzFhw==,iv:g7bicAuVXePor7/NH3g7D3ld+7/oDzXeaTuEhTxWYxA=,tag:2oQ9tqxnrA5n08oHOwACyw==,type:int]
+                      name: ENC[AES256_GCM,data:cdT/i9qa0e+wuw==,iv:9weTzuli67GzhXoWFtFvhTDVVqK7DlVQpjIU2Ou31qI=,tag:hiPFBPOVQ+YkkfcSGbT9ng==,type:str]
+                      protocol: ENC[AES256_GCM,data:2c6F,iv:k0lonACOSuEbvjJDaZzAv08qi+Tg7kltTQBj/FUNG+s=,tag:rEnes01XinWYxWf/t5N0Ug==,type:str]
+                  #ENC[AES256_GCM,data:D6u2wWZvxlwUz8Ey4ltnEt87b1vt8fid0iItpW96hNxsiZMu6KT7BNm4t8M1KgmJOvYzicqMVl0Mnio8MRvsJ2RYOGXqxxk1wYnVMKF3VQ==,iv:HpOa4wLR/4BhIcG9QI3LmXF5Gfr82ozhbYYdobF2T9A=,tag:sfV+eScu2oDs3K5EmiPUqQ==,type:comment]
                  volumeMounts:
-                    - mountPath: ENC[AES256_GCM,data:/1yE/J2W0g==,iv:eDIxA3z/4EfqZN3maS+zGUM4R3YDMvy4SURM5KI8IH0=,tag:xe1NyzkeoPfUw55Wx45A3g==,type:str]
-                      name: ENC[AES256_GCM,data:DanLKL64ORkn+Mzj,iv:nh22qyCqeN3fp53/WU432d28l6JPXHr8KXDPRiRpVW8=,tag:H6kSJpFCtVCk5WSfcexYeQ==,type:str]
-                    - mountPath: ENC[AES256_GCM,data:gF8uByyt,iv:GxwovcM90rccH1+rvy8jPuouHbha0WPNUI+EQk/AGN8=,tag:xTZhx6Ud1v8aqO6nzMrfMw==,type:str]
-                      name: ENC[AES256_GCM,data:NcF0uj/GsJ+Df4lrQg==,iv:gLsYcDe19unF1SCEkvdVnbRhwXbiaUNQDWsnzym9n4Q=,tag:H8CKEgAyNw7nmuDrsieBlA==,type:str]
+                    - mountPath: ENC[AES256_GCM,data:BMtLV5wvlw==,iv:CGPWfMM7UclYrgkUzgZ3uzLraqYfm7ioM7N+l7ETxaY=,tag:jdsFE+OlXz7ezorL8obD0g==,type:str]
+                      name: ENC[AES256_GCM,data:sxEePkHpcDuZq0Mk,iv:LKPaDVqKrjn79C4db6yafsFkrQbxcFYwjHPyB/qTpq8=,tag:5gygRwpg7HmzobHh316H3Q==,type:str]
+                    - mountPath: ENC[AES256_GCM,data:2OUJIXfB,iv:kc0Ajg/KJ6+S/tw8OOwZSpAGah2xxpTikNmxg6s4ynY=,tag:iS6AIFHWuyvd9fFTrpFB8Q==,type:str]
+                      name: ENC[AES256_GCM,data:KHhCmUQOghZ0+gClew==,iv:HkQWXDsy+QMSbNCWv4T3u8VFJfzDUOva/NCAQRiHwpY=,tag:p4KjoxG2iZ3r/AzakCZhUw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -109,14 +109,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1YUw4T25yNmFoL2NUSzlD
-            RURNdVBnMHErSlZmcEpCN0ZtT1VleXQ4bjNVClBPNlI3cmpKNGxjdTNzNGhVMkEz
-            Skx2ZUpySFpsRFQ4d0wyMzJXVXhrZU0KLS0tIGFhQXJNeHlYb0VHTysvK3ZxTU0z
-            UVBRZEJKQTJocFEyZ2JzVTZUMUM1WEkK+FiEmZjQ8uW2o9IN9pr58kHEFC4P/mhm
-            PJFKoBDWyGkwWfNyq99yvfzRzd87WvLeqdMVOiR/gEnLtR3hA3/5kQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZOXdySysrcSt3SExSaWtn
+            L2dHMVdQTzY0RUp6Qi9rYkFrTlhHUnp2a1h3CkJyVVAvdlhYMlF3RmFmQ3hpZG9I
+            Ujk4ZTcvcUNGbWFYK1o1dWpoVTJ2TGcKLS0tIE50YmIrYndOSjF1blhiWHhkOWt6
+            Sk5OazhNeHFHeUNrN0VKUzl2dzk4aTQK5VomsC9DIBcJeb1+V/ZNOdNdujUdlUGk
+            ktIEFWc57LMZ3R7twRpGMnfjLGAUDALrc0Wwnp88YNc6dTVYqGkX3w==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:VET68uHmNLGvFdmPR6vSXXGDbFjk9jBzz98QQLVDelsbfjL95wUvyx9QvevLqtwDjAtd2OWOgaKISxffxjl81CWGMzRI4VNzzFhm90xrwuoMGqXaIiwyrFSbBTT4pTZXxHU8RFg6OxYHQS4csHbaEJ2RFn5RZAtUHC/5FMTfQYM=,iv:IYn3RllwdjMdiQe3YFLRdhkyR+niEAfwEvjtwVyWEhc=,tag:AF3r7CkoLmPQaPnxlcDkVQ==,type:str]
+    lastmodified: "2025-06-29T21:31:03Z"
+    mac: ENC[AES256_GCM,data:Kzl1LVymrQq1EHMbU1PQnk26pH3JIx+A2p4xCblSIqDMtS5MkkgA0Wsydz3fBW47vFgRk6QoviKgKh2lvlGmdFfWNwuJOfCB1plqTIOVIUpkmUNJtLQOjHNuAPLlM6o65rJafDfK3pNLetcQ2l/ugMtS+Wje2+UbZQkxbZ69lQw=,iv:49pA6YSaJLICFwZu6Us5Aq+y+ZDu00scmaZMrThY0x8=,tag:Jq0zqaCtZHKGgAYOOT4KeQ==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -10,21 +10,21 @@ metadata:
        cert-manager.io/common-name: calibre.k3s.local
 spec:
    rules:
-        - host: ENC[AES256_GCM,data:sEQyO+oR3npv3Pvr+worJHU=,iv:koTdzvFu1vp+N3xh+fRjxYE+7/Xsrs4zM3UVsEQUbSI=,tag:CBbHElyufd3ndYMOm8tBQg==,type:str]
+        - host: ENC[AES256_GCM,data:uwP7ndgD3B7uulFyyLa5xOM=,iv:HXdmTa4ESskcgc5EGG6jLa0qMjurOI9fEic5d98xutU=,tag:IBS8sfx9c/0g4uI5jD5z1w==,type:str]
          http:
            paths:
-                - path: ENC[AES256_GCM,data:kA==,iv:TNyug5csy7Q5ooGtk8aMsV2Se6k3KSobU/ALFBFaj6I=,tag:bSpzJY3id/5IetPR0HbHgA==,type:str]
-                  pathType: ENC[AES256_GCM,data:G9RBy6jU,iv:bPO6sVTcvGe2rZ3VogjOFaDwAbb2HJZbLoLAdOV7noM=,tag:ApMlw8UCKKi5fbdlpdH0pg==,type:str]
+                - path: ENC[AES256_GCM,data:Kg==,iv:lUf6MwQDjqLz088PDKWfOkr+Fq1PWFd3Mf7a3sWSFPg=,tag:YrDgv+A4iGutzCvF6JB77Q==,type:str]
+                  pathType: ENC[AES256_GCM,data:kbvMInQj,iv:Q1gZG73JQoiGkg5e2pdE05tQfUQ7maiAdQhry2jCBmY=,tag:QCZkDI6p0YAyv+n28WlMRg==,type:str]
                  backend:
                    service:
-                        name: ENC[AES256_GCM,data:AIlZIIGNlPx4ZEBLmCfGdtlvqA==,iv:v6LS+wkxwtLC3tfHMnJojDnEeEW5goAgj/UyHtGDGUk=,tag:oSAu+qbWVhGxO/z37iGPEQ==,type:str]
+                        name: ENC[AES256_GCM,data:sMG5+4MTzfo0jdEWJhzODzWNUA==,iv:ExxIppAPkf0IurpiIsU7bR7Gmp0clFdltpYNrBX4oW4=,tag:FB+IE/lH4ZlONgX0r2QJ+w==,type:str]
                        port:
-                            number: ENC[AES256_GCM,data:+Q6Q8w==,iv:xBFa8ZjAnOUMSxKsTrP3CQ7R1WIpUb1b+BieX3CT1Hc=,tag:oORj9UbiBLDUUnO/MHMg9A==,type:int]
-    #ENC[AES256_GCM,data:SSV4C/wBGxPV9L768DUJkjV1E5ObaxyhXqd9TilczUW9CBLKo5iZ9PEvwtlx9pSgm2tJpqPfblmPj6W2qKZqYRcS8ENssSXIRCTSvMh8GId5oXChvb6+B6QU5yBU,iv:0wYIZjW75tkrMeZsd1rEfXGnebqdiuDl3ht/VD5nm7c=,tag:nKcjkUWjO4psFsoKmAD1UA==,type:comment]
+                            number: ENC[AES256_GCM,data:Q5Fd0A==,iv:jwPUr0xJhcOyhkPPiBPp0zh3F5D6EqQVespVa2byM0Y=,tag:8Wd69GAizjI3gFqvWZ1INw==,type:int]
+    #ENC[AES256_GCM,data:6zi5gRSexwtM7vTWEg4uTOZquZ2mIh9I02fD29hBnR96nVw2SihntvQz2S0wWkINmSnPvMzm5Vx2fEDtU3QbM330PrWDhAimEs/ZNEiBjl434blaRXCBtxCJqpSz,iv:L85B/Tn90zGDFLsYH6sSemdVa1EwQZhyHHMUWCTBTks=,tag:RiKF34QY4VaA5Rl72jHzxA==,type:comment]
    tls:
        - hosts:
-            - ENC[AES256_GCM,data:R2wwQoHBqM/FJHBmJC+3AZg=,iv:6ieVyUBkQedyMi5ZLuKP3WKN1Nh4UVZFffpD4+00xVA=,tag:GpFDew9qOTFNf6fz6AFWrw==,type:str]
-          secretName: ENC[AES256_GCM,data:2pheJz4HlrJ34p32fxwU0A==,iv:hMWVu5MaGdUw2StH1cFgP3btOHH7gs3vxRzNnl0ax9A=,tag:v7EmCBh8y+IOJFdW+QKIGQ==,type:str]
+            - ENC[AES256_GCM,data:NE8AK7cTVQFCMBVVrCh3eH0=,iv:J0bEnd+/cki6smr//K0c9cnBADcRlN0AyVJP2yGeFw4=,tag:OhiiOnoZl3dCkka2yAmTaw==,type:str]
+          secretName: ENC[AES256_GCM,data:iRmtpLoO8G6Niv/Rw77wlA==,iv:3A+U4YKK2rA3jT7DGbXsCv6wnrraCfzRoUlEr77sftU=,tag:YhT9MFSoWCzlGyKXHkAO0Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -34,14 +34,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByWnYyS2tsT014aEYrOVdw
-            dHdGY0JBTW9aRmR1bk9UdlpRVjBGcm5SNkRnCisyUkFrN3UwYmQ5MklWZGl5QWlB
-            NjBvRFlkUENPSHI1cjMya0F4amJEUkkKLS0tIHJBS2FQYnZPYzF6UEdhU2ZTV0FX
-            ekJjSjg2ZUxuMXdiMTR3byt0bHM2S1kKTK5pWiA7eiuRdTBlX8uy6mPPccCNKY1A
-            y6pv+NaGXKGe699shrIP3cceGoh0ktsDqVSxWr7s2m4PfZ2TIT9q/w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNU1TOXhEL25BOVJGd0Z4
+            TE9DZTRmZ2c5eTZlVldLZlQzMFdKN0F0a2dNCkM2NVR1WVVmZEdMM1lJYXJRMVJa
+            NmtocW16aTYvQkxFYTFPeEdpUzR4eGsKLS0tIDlPRDlIQjVZb1VIYVdIYU9hTGlx
+            bHpmbHg2SE04QVVZcjVxaG95Z0g0ajAK0ewwPfjMZFlZeVqC7aFlx+BvDM5SoU2C
+            w0NO+iW8qmlv3wCAK+O6yvgYE2wgETTSRcOw5Otg8dCZOVQjRcNciQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:XJm1WgRf5Q8OlsxZycKp4SabSj/KeogGs9AR3osKBh/O1xA4qM2ynpWZF+Rx9bd6J0v3tjfGvU8gXnsF0sGDjdXs9ej38XiwsfOj7DhkXRyAt0ymfLR9yF+b29MZohTwVOks5hNi2UfiIgk6XIfGI0fIPMtxmPGGl51u60JLGII=,iv:a1oaig1dUEBywzZXphMC5w6DdmSze0P2kPXYwJ1/kKc=,tag:iPjR5en2lqeS9BUqvf1MQQ==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:3ieF7A6KFLXen4FgelyiCyc/gA2QjMahF4BpHm3ra4w62hx5i+BukKuev2GNypqFOelWf6bBsl0ui0oB0pVjTMOhHZe5sH48w4GCG8WT+7v8PFatk7VSeN/GBe0falYsW2Ql0j80Nwp33ZeMwsPEpWjBokiRrz2pjLKPZXrDorI=,iv:y4Nh1e/YdvduC7B+cIBpYi/ukM337+7Vy+ec7tI89eE=,tag:tFM6Etuf4MzDzqyhBHqp5Q==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -1,19 +1,19 @@
-#ENC[AES256_GCM,data:NYZXldS4+uSo/5kBusU/ACvHyHGIDbHjkUoc/dfDz7I=,iv:8eXN9LCJ07opAKI5FQ39V8ooPsya/pPCWUt7wnCoDdc=,tag:9Cb//lPj+HfJHROG5GNilQ==,type:comment]
+#ENC[AES256_GCM,data:geHxNqJ6dcF8uPdh8KtxU5CNXiOrj65BCCVQbfV73AY=,iv:6ytaSNHPuMx36My2S0FqFx54IukV26Gux3asJ4omBuk=,tag:LFkTHNCdkT7N9iehOHgv9A==,type:comment]
 apiVersion: v1
 kind: PersistentVolume
 metadata:
    name: calibre-data
 spec:
-    storageClassName: ENC[AES256_GCM,data:gkGCGlLX,iv:+4tQjzC2DTrf76KUThzQMfkOTvLqvvygc8x8I5uYSAo=,tag:qjL8U4DsdrM8/kcgIvpyfw==,type:str]
+    storageClassName: ENC[AES256_GCM,data:X/QQdgYl,iv:nq76yiaxm+nYfNiZ+XOePiaucsn9rTO0ElzS1GuNefc=,tag:fiatK2cPItFU/dKcv3u6yQ==,type:str]
    capacity:
-        storage: ENC[AES256_GCM,data:uesh,iv:X1FFdVbXb0pm0aL6s0iYq/1aZWtgSr/p2IRQ/03ZlrI=,tag:sgl0gKjuVEG/qg6xiEN+DA==,type:str]
+        storage: ENC[AES256_GCM,data:zMex,iv:UMsn7nqU4kL3MVQhazVvL46s8mADs4E5WgSw6sLUOdY=,tag:/ajNrqMgGav+f8+T6Toh9w==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:pFx7f+AJz/zyUHcuuw==,iv:shJAZqvKmP3y0yRHA3GTjRAOk0ryjHonFGil9247OFU=,tag:bKLXgkNUAqPAJOgwuJuPlg==,type:str]
+        - ENC[AES256_GCM,data:1WI96RxmKeT9kCUMYQ==,iv:jsXG9EOgPyoHqlxWEPv5sI/O/RL/Lq/CRMC56fgvDYs=,tag:mWt0EIowoft5jv2pWmlDuA==,type:str]
    nfs:
-        server: ENC[AES256_GCM,data:fHdv5NcsER/Xzbuw,iv:Lje+f8zuVIjhd3R9YNSV1gAqhjGK4zg8mzpTLNcDj0I=,tag:ebV9+Hy+XMguL5uQ5kl+vg==,type:str]
-        path: ENC[AES256_GCM,data:veclnORaPvORipBoZD8qfOCMr5Sk4J7g+pI7HHP4GI4m4w==,iv:vD/hTPO8HzOrAjokk0xiE8anW5wGS2MlpRu/Z4LhOms=,tag:CEC5woPLwpoj2ubPxNwmiA==,type:str]
+        server: ENC[AES256_GCM,data:pmWfbmrzQVTojMQI,iv:MJc6mUCV6Z0OfTTUNS7lFZ9Qvbne9so7gZ1OLlAucrs=,tag:rX508zxtTfyyVeBN8XFR7w==,type:str]
+        path: ENC[AES256_GCM,data:qNtNcbPrx/uCOqcoATk8OzcNXPUM70DD9/GoX3JJ3BYDwg==,iv:E1tJAhcx4Cp2O/s4qTDUv/HhdhxT6IjfJVshv9qL5+A=,tag:Fu9ccHGfB2iyjURR3Vu3ig==,type:str]
    mountOptions:
-        - ENC[AES256_GCM,data:bFQqvuuqrBwxw3k=,iv:Lw/gYVwtLJ53eMyawUx3XR5r83ZJfSBsEIOiE8CcPqY=,tag:CFkDm/sN49yx29DaeQtf1Q==,type:str]
+        - ENC[AES256_GCM,data:/Xpi9/JmNHHqem4=,iv:QMVH5JOYWC8m0k9j6ShzG0C1jInO2aMMHPnkDDU4FhU=,tag:s7+Chs8wpNiOw+KLp1sqzg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -23,14 +23,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Vjdyd2VnN01MRjZ5RGFM
-            VW9YdVZBRjJiN3NMVW45TnIrN2MxZUVRaFUwCnY1N0pOam0xRTg1WXEwREJQZFJy
-            UlpIRTZ0TzE0UGtQaDRIU2gzYzVlb3MKLS0tIFVNbXJUWTNpc3B0SmxyR1BhVkVw
-            amdvek1kcWtkdzB6cHp1emlwT1NlL3cKMgOlyHO4bglOvIIhSIc97yiQEP27Cus/
-            2Cwik5AZbBwQOSYwMa63X0ZddESWmzxTeQj+RED6ZuxITVRCgGNHbQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdHEwaHVOM3BJdzVRUlFi
+            UEFjOXRmRFBpa3krYTBUZmVUVlJBanJ3cmhnCjZJZVN5cWVlYmt4cUJ4dXE2T3Q2
+            eHZnZCtWUnB0U0JML2Y2NkhYcU4yQWsKLS0tIC9GcWpGTkZmRUVUeWlMTTJuVXhC
+            dVVKRy9KMUtpSHN3NEIvTjZLbFBweVkKGz2oCyTIHeqYoWfCXlh2YbSsQSH/eXuO
+            kw9T6IkOZlCofeq7eWVxbmdBBH40FVYVH0ZmTi1DhWZpd1eJy3YboQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:Xa1xPIoWWBc5g741rEjbrmkiD6Lf4HvQX2L9+3u25oXSa9/9pj9P+Y6yut1glEZ7rGIOVG4GDgBG9DUODcLl/ZdNg0Bmpk8FIjyLp8suPmA+UFv+lFWDtxt1xsbIyg57vhu6TnLazEKTmcN4/wPdVpgRJGs/KKPN6mn+smOhLh4=,iv:Mntmb/+Gk1jjYYksT2bjQFIs9h4uzzvwpl3KcDN70G4=,tag:ZG8SrxZ6DrMaoBjRmsfiTA==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:0e4MFVrUFiMYvEhre8imOC57Mj9gdQXsyYSgBQ408JwJ1/lWbtZngVvPyMWdHNfPRMJmmBC8QSSepzKP/rWwUn9tt/uTkFGO51lSW03XO8+ozAknS9ZB5svofJMAXJzHoCgrDdrdcMVoHunMwO7twmNKt//geVn3vSfRvblSQDA=,iv:Lr/y+7JOKRVL41F4KkFm80rCm2TA5/bfqbDgc13KKgU=,tag:47hNJFmg75qfaSt7BCbpJg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -40,16 +40,16 @@ kind: PersistentVolume
 metadata:
    name: calibre-books
 spec:
-    storageClassName: ENC[AES256_GCM,data:J0QhhyP2,iv:0aEjtqWbU3J5htZrOMPZ0ElGfxhWgQdt4M+CdMwK5OQ=,tag:/LZXFXrDk9MB81NL79/9tg==,type:str]
+    storageClassName: ENC[AES256_GCM,data:cB5Q7yts,iv:J8zheLS2OR+Fuh/wizrXYBsSRp2hALXD/acV0DxqT+A=,tag:xtbpymSVBgSK6IixtBdjIQ==,type:str]
    capacity:
-        storage: ENC[AES256_GCM,data:I6vI,iv:fRNOQn0TEcMnMTq+Z+iyY/Lujkuo9KAiu2c4906lQF8=,tag:v+nH1mSJc/SFsSRSY3+PbA==,type:str]
+        storage: ENC[AES256_GCM,data:FW3B,iv:8yvwj86Gu35gtG0AceOVq8BEsn6s2IpMRX8Vwb5QLs8=,tag:bv1Cr6l4dRO2GR8KggKFgA==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:SI12B0mLg+318qC0Dw==,iv:tpr6bvZ6rJtKkKVNR2dXqN8BGWOJ9dSXoJxgtOZtb8I=,tag:5SIGRxpTOuMyJgf5FYveiA==,type:str]
+        - ENC[AES256_GCM,data:0IXsnyL0ynGjV7uX0A==,iv:v2IVOMqC+WXIwIl2M5eXLI4LA3mMhDEQRBJy3KzvKGI=,tag:95a2hwdOzc7qzSKFhCHavA==,type:str]
    nfs:
-        server: ENC[AES256_GCM,data:A3S0b8JAhSxKlM1Q,iv:7+PpU7j/VGKOLmjDl8yPMkUR5V1VC7QS1BTcI3zJjPc=,tag:DwsxMTMoksRYqQKxCumKnQ==,type:str]
-        path: ENC[AES256_GCM,data:oPrCD+uTffG4I7LwvbmVP+3iQEdfDYr7vaphdt6jAYtsHaE=,iv:0T20VpwVknD+u8bZ22A02uASS5c+H7MYO07aeR9FACA=,tag:+WraghpBfarn7jvHbLSX3g==,type:str]
+        server: ENC[AES256_GCM,data:rcugi9RcMPNKtjln,iv:+mNp0ipRMnj5G6rKsUnQhkXgpr7hAC2SaEtrf+oDB9s=,tag:8ScNc0MPCo3d1OFcNhW2HQ==,type:str]
+        path: ENC[AES256_GCM,data:7bwWxKrFzePIbghQfIPdlw/WkZM6uia+WPK5+cvvH+IwrJ4=,iv:UMwcFVJ35Fz3FXbQda52HCXlKMCjz9AgMHYPKmpfeTI=,tag:dKGt6wGch2+lGBGm3nuC+Q==,type:str]
    mountOptions:
-        - ENC[AES256_GCM,data:w51PnMMgQ+mlUBk=,iv:MSnu8AVzweWohc+V/tfUl//B23qpxr3mUU5fELBiCHc=,tag:leklhukE1Bc4tpVFR9IYpg==,type:str]
+        - ENC[AES256_GCM,data:F3hRcL57Sjrp+PM=,iv:m2UHMwqI8aEGCKks2ob23FQ9wJHdhhnpgeDfXA7OldM=,tag:tNapB5ztmHrAYBCMFMKy/A==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -59,14 +59,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Vjdyd2VnN01MRjZ5RGFM
-            VW9YdVZBRjJiN3NMVW45TnIrN2MxZUVRaFUwCnY1N0pOam0xRTg1WXEwREJQZFJy
-            UlpIRTZ0TzE0UGtQaDRIU2gzYzVlb3MKLS0tIFVNbXJUWTNpc3B0SmxyR1BhVkVw
-            amdvek1kcWtkdzB6cHp1emlwT1NlL3cKMgOlyHO4bglOvIIhSIc97yiQEP27Cus/
-            2Cwik5AZbBwQOSYwMa63X0ZddESWmzxTeQj+RED6ZuxITVRCgGNHbQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdHEwaHVOM3BJdzVRUlFi
+            UEFjOXRmRFBpa3krYTBUZmVUVlJBanJ3cmhnCjZJZVN5cWVlYmt4cUJ4dXE2T3Q2
+            eHZnZCtWUnB0U0JML2Y2NkhYcU4yQWsKLS0tIC9GcWpGTkZmRUVUeWlMTTJuVXhC
+            dVVKRy9KMUtpSHN3NEIvTjZLbFBweVkKGz2oCyTIHeqYoWfCXlh2YbSsQSH/eXuO
+            kw9T6IkOZlCofeq7eWVxbmdBBH40FVYVH0ZmTi1DhWZpd1eJy3YboQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:Xa1xPIoWWBc5g741rEjbrmkiD6Lf4HvQX2L9+3u25oXSa9/9pj9P+Y6yut1glEZ7rGIOVG4GDgBG9DUODcLl/ZdNg0Bmpk8FIjyLp8suPmA+UFv+lFWDtxt1xsbIyg57vhu6TnLazEKTmcN4/wPdVpgRJGs/KKPN6mn+smOhLh4=,iv:Mntmb/+Gk1jjYYksT2bjQFIs9h4uzzvwpl3KcDN70G4=,tag:ZG8SrxZ6DrMaoBjRmsfiTA==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:0e4MFVrUFiMYvEhre8imOC57Mj9gdQXsyYSgBQ408JwJ1/lWbtZngVvPyMWdHNfPRMJmmBC8QSSepzKP/rWwUn9tt/uTkFGO51lSW03XO8+ozAknS9ZB5svofJMAXJzHoCgrDdrdcMVoHunMwO7twmNKt//geVn3vSfRvblSQDA=,iv:Lr/y+7JOKRVL41F4KkFm80rCm2TA5/bfqbDgc13KKgU=,tag:47hNJFmg75qfaSt7BCbpJg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -77,12 +77,12 @@ metadata:
    namespace: home-stuff
    name: calibre-data-pvc
 spec:
-    storageClassName: ENC[AES256_GCM,data:68mNx+29,iv:408I+Zki/Z7NZfbpKKqG1okCnMhbjknv0FLc//EiH7E=,tag:mlU/5UPkXB+OxnEHDSqD0A==,type:str]
+    storageClassName: ENC[AES256_GCM,data:C4s6/36Z,iv:gvV45OhqxWLh9GH9WEMib9cLD6vGZJtvLfsfv6gfYhI=,tag:m7lbnqlFCMAwyDEP37woLQ==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:I5nj8W3HSSJ89aEm/Q==,iv:V4JxpdKr7bLjPbrKE9wKJ2wPftvfHjaWZva5W/GTLvE=,tag:U0v11L0XWXghvCFR0JYKSw==,type:str]
+        - ENC[AES256_GCM,data:PkgX4tG0Vqz0EkwxEA==,iv:EgDrSqotKnJMhB5vSsodkJk7b+/dCkYG0sSDHiHUnio=,tag:IYVpnS1hIF+qAAca8GU3Og==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:CZuk,iv:TSM8ZNqI1B5QRo7/9A9p8fF9IlFwr80a2T4dn2qCgcM=,tag:BpOa+SDBbiykXjQnzQ9p3A==,type:str]
+            storage: ENC[AES256_GCM,data:cWiS,iv:WI9JV0YicNKa2/BvXABUz/a8o1ppTjRlshCkgw8n1WM=,tag:wA817PhFbwkR+plglsoZ4w==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -92,14 +92,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Vjdyd2VnN01MRjZ5RGFM
-            VW9YdVZBRjJiN3NMVW45TnIrN2MxZUVRaFUwCnY1N0pOam0xRTg1WXEwREJQZFJy
-            UlpIRTZ0TzE0UGtQaDRIU2gzYzVlb3MKLS0tIFVNbXJUWTNpc3B0SmxyR1BhVkVw
-            amdvek1kcWtkdzB6cHp1emlwT1NlL3cKMgOlyHO4bglOvIIhSIc97yiQEP27Cus/
-            2Cwik5AZbBwQOSYwMa63X0ZddESWmzxTeQj+RED6ZuxITVRCgGNHbQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdHEwaHVOM3BJdzVRUlFi
+            UEFjOXRmRFBpa3krYTBUZmVUVlJBanJ3cmhnCjZJZVN5cWVlYmt4cUJ4dXE2T3Q2
+            eHZnZCtWUnB0U0JML2Y2NkhYcU4yQWsKLS0tIC9GcWpGTkZmRUVUeWlMTTJuVXhC
+            dVVKRy9KMUtpSHN3NEIvTjZLbFBweVkKGz2oCyTIHeqYoWfCXlh2YbSsQSH/eXuO
+            kw9T6IkOZlCofeq7eWVxbmdBBH40FVYVH0ZmTi1DhWZpd1eJy3YboQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:Xa1xPIoWWBc5g741rEjbrmkiD6Lf4HvQX2L9+3u25oXSa9/9pj9P+Y6yut1glEZ7rGIOVG4GDgBG9DUODcLl/ZdNg0Bmpk8FIjyLp8suPmA+UFv+lFWDtxt1xsbIyg57vhu6TnLazEKTmcN4/wPdVpgRJGs/KKPN6mn+smOhLh4=,iv:Mntmb/+Gk1jjYYksT2bjQFIs9h4uzzvwpl3KcDN70G4=,tag:ZG8SrxZ6DrMaoBjRmsfiTA==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:0e4MFVrUFiMYvEhre8imOC57Mj9gdQXsyYSgBQ408JwJ1/lWbtZngVvPyMWdHNfPRMJmmBC8QSSepzKP/rWwUn9tt/uTkFGO51lSW03XO8+ozAknS9ZB5svofJMAXJzHoCgrDdrdcMVoHunMwO7twmNKt//geVn3vSfRvblSQDA=,iv:Lr/y+7JOKRVL41F4KkFm80rCm2TA5/bfqbDgc13KKgU=,tag:47hNJFmg75qfaSt7BCbpJg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -110,12 +110,12 @@ metadata:
    namespace: home-stuff
    name: calibre-books-pvc
 spec:
-    storageClassName: ENC[AES256_GCM,data:86AANArA,iv:4mG0o0WPUkEu2eIs05e1Ufnq/iX6kmfuQL9qjo69Ljo=,tag:McmBr7QrTytrbAlH2Os2Qw==,type:str]
+    storageClassName: ENC[AES256_GCM,data:p13iHhWG,iv:ZXe9Ote9Kyes+BPx27kMrMG2IdJXefYwpt0zX6Nrqyo=,tag:RMlnwUaQkdpDvWCi8bxqww==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:JTopNtx0VrZG2hpQuQ==,iv:nd4XGI900JvfoWAaqSrrpW1NNUhjNFiddw3yVQ8YJVs=,tag:DvaK92TE0l+U0V219hFmJg==,type:str]
+        - ENC[AES256_GCM,data:DqlJc4ShvggM4INFTA==,iv:Lb+uwCrw77I3psQdLaayP9LAk2QvW8fikh2fssaw+1o=,tag:iDz9EZ/8RJAMhrvb2pyVdA==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:GwsC,iv:AsvjzopR0rMSfcfIQV1y6+yVeFu2G4YRNHYBPcY94hU=,tag:5HxkelYRbX38+DfPQ1NFGQ==,type:str]
+            storage: ENC[AES256_GCM,data:JNEn,iv:d3NzbeTdarFZlyi8+hMXAXj4dqAqi7Mr3L9zt/WMB4o=,tag:POOh2mGoECe/1OEuDM/Y7A==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -125,14 +125,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Vjdyd2VnN01MRjZ5RGFM
-            VW9YdVZBRjJiN3NMVW45TnIrN2MxZUVRaFUwCnY1N0pOam0xRTg1WXEwREJQZFJy
-            UlpIRTZ0TzE0UGtQaDRIU2gzYzVlb3MKLS0tIFVNbXJUWTNpc3B0SmxyR1BhVkVw
-            amdvek1kcWtkdzB6cHp1emlwT1NlL3cKMgOlyHO4bglOvIIhSIc97yiQEP27Cus/
-            2Cwik5AZbBwQOSYwMa63X0ZddESWmzxTeQj+RED6ZuxITVRCgGNHbQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdHEwaHVOM3BJdzVRUlFi
+            UEFjOXRmRFBpa3krYTBUZmVUVlJBanJ3cmhnCjZJZVN5cWVlYmt4cUJ4dXE2T3Q2
+            eHZnZCtWUnB0U0JML2Y2NkhYcU4yQWsKLS0tIC9GcWpGTkZmRUVUeWlMTTJuVXhC
+            dVVKRy9KMUtpSHN3NEIvTjZLbFBweVkKGz2oCyTIHeqYoWfCXlh2YbSsQSH/eXuO
+            kw9T6IkOZlCofeq7eWVxbmdBBH40FVYVH0ZmTi1DhWZpd1eJy3YboQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:Xa1xPIoWWBc5g741rEjbrmkiD6Lf4HvQX2L9+3u25oXSa9/9pj9P+Y6yut1glEZ7rGIOVG4GDgBG9DUODcLl/ZdNg0Bmpk8FIjyLp8suPmA+UFv+lFWDtxt1xsbIyg57vhu6TnLazEKTmcN4/wPdVpgRJGs/KKPN6mn+smOhLh4=,iv:Mntmb/+Gk1jjYYksT2bjQFIs9h4uzzvwpl3KcDN70G4=,tag:ZG8SrxZ6DrMaoBjRmsfiTA==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:0e4MFVrUFiMYvEhre8imOC57Mj9gdQXsyYSgBQ408JwJ1/lWbtZngVvPyMWdHNfPRMJmmBC8QSSepzKP/rWwUn9tt/uTkFGO51lSW03XO8+ozAknS9ZB5svofJMAXJzHoCgrDdrdcMVoHunMwO7twmNKt//geVn3vSfRvblSQDA=,iv:Lr/y+7JOKRVL41F4KkFm80rCm2TA5/bfqbDgc13KKgU=,tag:47hNJFmg75qfaSt7BCbpJg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1