Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

k3s/rpi/home-stuff/nextcloud/obsolete/nextcloud.db.sealed-secret.yml

@@ -6,9 +6,9 @@ metadata:
     namespace: nextcloud
 spec:
     encryptedData:
-        MYSQL_PASSWORD: ENC[AES256_GCM,data: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,iv:xSIT+dVL+5rF4G7BAeoD64knbQTi3YpKPZqwVxCJLso=,tag:WTcgH1ysprFFuKGg1rGutg==,type:str]
-        MYSQL_ROOT_PASSWORD: ENC[AES256_GCM,data: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,iv:BcpSJ4WDs933JWH6UhaDNejoLDmeXB3VzRD6KztsEs4=,tag:koDKdTr/CWmi55x7drxmtQ==,type:str]
-        MYSQL_USER: ENC[AES256_GCM,data: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,iv:I7Seo+Y0q9ahSD37rqjOFdTY1XsxM0SdQnnIvMlaMCA=,tag:lommKHqEU9RJtipmZmnLdw==,type:str]
+        MYSQL_PASSWORD: ENC[AES256_GCM,data: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,iv:KhPFtfjJsJu2TNofCgYCShBn3mg2+ffXS7VJ65olTgE=,tag:l4L7Ii2zUx7CfqJBkoaB1A==,type:str]
+        MYSQL_ROOT_PASSWORD: ENC[AES256_GCM,data:fW7VndwX1kIbVU4w2VtomS2M13PgfflBAseMD6DMF1SXMQ0sISC98nXKvbRjQ9sKxlQxILSEqlXisH3iAWRVuTH4xUqbcNJO5lljO+G4fAUf1anuCAGdoaIypDdHN7FYJWI/cgODHLD43RrG3BKjQrifjAqe2wKYesW9qh+6twN6LMUmqDy+gr0WMaRBOtFF7zY/jUiVvOV2ncQc6eC718IbSEQpMpLVB6aEui/efZjvbTrQ4tb8l35feTrXZ0ca0HPp2t1nbU/imAQp6GuV52ohELc/Ap53JucJgyoTRX/trZMn+YDh8k0EqAohtmIiXsg9KGrkKTU+jcJCyUzWpJAd/qUwumeAqdXzFixXTy2ardigHPdyTzViVwJkCS1mP2C1iI1YS6mtJDxzEgMOKh/lyV/EHBA4Sfn6ZLoB7wTdhZX82qeW74HqFK3weQg6sjMZcn5znnaznOTUvvPIg7prL7vpl0HPhPNp+UkM4mtqFaxjTKWNFv5YgkrrHUsG4EzNPRi+th+OHPF7oSwmvJ6cS1xJA9a7TUsvq62k9SxYqTSsZ1naQct0CwNfIwT/crmO4sELzMv1D6OqxM2JyqsXuaiMC7L/1jUSVBUynR21zlpHEbK3r7qjoQFFVqOu69el8vWlpZ2G560DWp+N8DD9NnLcwpUuu6vOSA20p1rSqhBV2Dw3pCtdD+XKTRjTXZXTvoEXYliJkV4kZcmx5i9iM7IH0WRLLb6CUONP6E8kfMNH5Rr8/5UXQSyY+g2D8k0gcWbm15JRgRfvn0rb0VwUVgnsbA4Fcj96LLeD1EFa+5Z6uSR3xWAwstJzGBwuAtrrAgWGbsDI0qdqSxe81ccnINAkniPbmdB/vBbhAi4gL60QteSWvBSaiLfP4WB72rBVm95q9YlV1dHKE3EIdCbEhRj3MV6HKxIaL+VNYAyMtX+nbT/mLscQxa/K4m6/,iv:ld/ANK1uJAY99l9XrtNHFbCWbCvbrgdIZfU/6arEP9I=,tag:b2wptaiQ6b+4SvBe2U3oEg==,type:str]
+        MYSQL_USER: ENC[AES256_GCM,data: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,iv:DwnaOBC0ejxev0UL0lYMB5ETnfKc/G5VTUBjRX3Q2pg=,tag:fdwOVmvnDEcEHO15m6ccow==,type:str]
     template:
         metadata:
             creationTimestamp: null
@@ -24,14 +24,14 @@ sops:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPQUprS2V5MnlHanozV1I5
-            Q25NWWM5QlVQd3owQW5SYTJSYXNTeGpYbUI4CmQrRkFKcDY0SGtoR3BURlhnMDJI
-            cWdnSUJONWFzMnJFTDk4amI0YkJnc3MKLS0tIHgyQm10TEJoYWY5dE15YXdmSDBV
-            UmNMUlp6dmlneXkzdGFBemdKZ0NDUkEKBoVhcmvt6z/ZGOoKUwEk7aF1R0LSiIGy
-            tKctCJd81nsfnrmzq5nMzjp3bbcmwrfVwUJDnRwUyc2UBHMkR7e1mA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2WkdZWmY4bkFhaFM5WlFJ
+            UmlyRkRoby94OWVaNGtKaDhpem1ZZUh6ZUVrCnRKajgvVTJCckZ3SGZPUVloTHR4
+            Q3VvUXBSdWp1dUVjUnFNbHMxd2JrdjgKLS0tIGl5T2xVTUd3STVTVG9FYVhPcWcz
+            Sm45VWpLQnhYdzBVMXVlVWx3bE5GUFkKVcynwc/OtNXpM5rHLr7zKViztSg97SZP
+            +A6SwPMYf8kztt7eq00qQnmTyh8G3Pi5941UDinwVYBpqy534A8eCQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:I+UsTbFeaTGkcymA/U99d5p3b25JTroStUnLx4hC5I/vvhR1ILwCx8j5gxSh87C1rdas7BqyOkGVtE5xnyMWUC/VZ46Ep3RzRKURKIjypVCcJ4HfRRmR1SoGx5nytI1K0m84K2BiQTTwVqq1Eqkkuk36RXs6ckxnkP1Lv9Y4Gns=,iv:xLNLsvWmqzmMenUUo9wDufCOT8sPvo0i7n6VAhuUvwY=,tag:SA4tY+wZ8aGh3aHfB5RyIw==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:fSWzits+mijugp6Vt+KwX01XEwRjSgk5Rx0kb6swPpWJv/CsAJjW+vAeDtiEIO5U0RinameBzq7XMVvSUI18dnWIRKQWf4qua0FmU8pIWkAU54e/pwOognCdTIShmS9/eDdZIzk4pgMSFpeS1EuUQao4Pp9H69p1e+bBdC+PDjc=,iv:51XCRumMww70tdlH0rTXbNO1iFpdar7jbbDhSVbBQkI=,tag:mSdm3j4qWSM7EswES0lQGQ==,type:str]
     pgp: []
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.9.1

k3s/rpi/home-stuff/nextcloud/obsolete/nextcloud.db.yml

@@ -1,5 +1,5 @@
 apiVersion: apps/v1
-#ENC[AES256_GCM,data:0BSOOGC1HVZzKet3KlpEmWNYmvSHJP3b8ULf9C4hpssmtwFiJPkXN2uGzxxt8j+aBLUs,iv:6lwrFMoJ2DJL0IG9/dp90hSv6ZKvUH5Lo4YrEcQ/V2w=,tag:x0pZDVef7x0SCuWPxwP5GA==,type:comment]
+#ENC[AES256_GCM,data:4Sa862XywF5SjE1U4siP1oirnezwYtGJ/tDuE0HLQqgNPg4IUPZSTG+NjQ8LmrJjoCka,iv:5NlWed7bXuunaXgBu+21cmayfeNU33L4lO91BqJd7c0=,tag:6dUh7rezvnZsaUcxp9TxVw==,type:comment]
 kind: StatefulSet
 metadata:
     # < name of the deployment
@@ -10,51 +10,51 @@ metadata:
         # < label for tagging and reference
         app: nextcloud
 spec:
-    #ENC[AES256_GCM,data:rfvWaG48rJ57LLpg0IN7Y/NL9PmXJXuh5Fbdu4TrNe1eKNaFIP+65nC1uyjKkfO3,iv:17M6oLHL6Ps77UmGoW+hgbTQcvJPdsK7f/j4sVW8sfs=,tag:ZNH7eTVbPTnktW8/b3ecDw==,type:comment]
-    serviceName: ENC[AES256_GCM,data:hrG3YN6enblzVUWi2JwUVBVyqgI=,iv:+AOn2f2XB2y+U2zaC7FXSdrByiTmmLy+n2wv/pk5nvo=,tag:KOmEvvAJtIaahKA8hBLeGw==,type:str]
-    #ENC[AES256_GCM,data:hRk6FvOd+k5LTs3LUkeipqQMnpg1h1lhu+Xd,iv:Q4p2U6C+25DEqznBDMsjtMUkDVa+9JVlNUoK1O/fqLc=,tag:NjSGRRKeCEUuog1pMXEPGA==,type:comment]
-    replicas: ENC[AES256_GCM,data:EA==,iv:By6SI7SCsq8EyL5Wp2U5K4H8NBHzB+zpWqhe3GpWmTg=,tag:V6UMCZZ3ekduGNXz/1j+7Q==,type:int]
+    #ENC[AES256_GCM,data:RpYp3/iR7fJxgAj1GVMhqnqhqRqdd+K1vDPIZ6hch4FnSKWjQqYUDmSN/LlzX6PB,iv:lq5PqTyRMx0xNIZWOWQ87AWXXV3f1rxZjGbikIevwDE=,tag:TmJv17h44AIGifi6tM0Ixw==,type:comment]
+    serviceName: ENC[AES256_GCM,data:8s8CdF1nIKztqdJHMBswIyh3V3A=,iv:UrUegcxd76B3w9b8AeW9VXchFEHWcdGs2sgxFxFvJNA=,tag:D4N0XPH+/7QfcnVPec/QKQ==,type:str]
+    #ENC[AES256_GCM,data:xEvoeQEkOGsSbG6bBL73Z0BmoU3j4vDQDbvd,iv:40HIMCN8w4r7fugNBfAdcGY3uYOJGVcpT08IgJswS6I=,tag:m2nuzGvvVgMxNRbe3Fvm4Q==,type:comment]
+    replicas: ENC[AES256_GCM,data:xw==,iv:eieZtT0Sa9TBYz4Fg3TSUGtjQw3cuirC/UcZkoYiSSg=,tag:CgPNrKp65G1Fe+E5hqOvGw==,type:int]
     selector:
         matchLabels:
-            #ENC[AES256_GCM,data:2wuTp4UhYvJueDx3zo1qT5Vg5EK5XitTa5L5aYNlapkvsc5EPpM=,iv:XUAt1AJEAek+GsO6ImTFtxoDo+jBfCYfVba41bNFixY=,tag:od9NCI/nDIbbmz+UiI0nvA==,type:comment]
-            pod-label: ENC[AES256_GCM,data:RwCawrdztvq5kpgAkX7MBg==,iv:d2Q5AmoYwhAHnXeDvozHHxObgConqTXkEgLuHy+32Hs=,tag:Yt/xRGhIkJ9Clox2YWUSCg==,type:str]
+            #ENC[AES256_GCM,data:+QIpxRIQkVmrcJsqCL6U7XfgXI5y3zL6anKW7Xokf+FJbhDo3qg=,iv:LH/UD1sJ2HxEqY8m8Z6mYB0zTZMwkeRe7qTRrbEkjqY=,tag:S/ft4bvJ7eYQaCWRyvTx8A==,type:comment]
+            pod-label: ENC[AES256_GCM,data:Ayio/1TsICDDQ/yjxYY/GA==,iv:O5gEs/gK+KbMKL33az+ijmhXdwbFAbiMUtRZGezvlcc=,tag:EiYUmPM1CFf6KG9+RBqAJw==,type:str]
     template:
         metadata:
             labels:
                 pod-label: nextcloud-db-pod
         spec:
-            terminationGracePeriodSeconds: ENC[AES256_GCM,data:WLm7pQ==,iv:ZQufs4RsAg+lxhzhxQm+qEjiLtaMsdYHQRuIcXFVzIE=,tag:3XFcp9ELu+/TLuwxK9nfCQ==,type:int]
+            terminationGracePeriodSeconds: ENC[AES256_GCM,data:YoJs7A==,iv:RBRiuGENyfKyRDl5I+awIKyDbBPWsJA9gXeq5iMZPHM=,tag:/9PVlBn3UANjm9oh/1kcOQ==,type:int]
             volumes:
-                - name: ENC[AES256_GCM,data:xuHVKfZp7nX4wIb4IYhN4Q6Lyr8=,iv:muRGY9ZhHnUKhXLcqng2AeHAEE2UbCHyQWUpLMsLn4k=,tag:JODjFThTzbKnYI+wbnJZaQ==,type:str]
-                  #ENC[AES256_GCM,data:Jq9Inc4dP94AyFNVC1RuHB5iIeay4Y8O04KGz/bRs7J5hkWuJg==,iv:+BBiiugQ0l+00UFlXH+3yIN0SA6JJpZWA+8aVPA9w4Q=,tag:WPvyKHg888sKBLUMU2PYUw==,type:comment]
+                - name: ENC[AES256_GCM,data:L/fLExSse3ofYj42fP/Or/Xl5Ts=,iv:s9Bwhh7l/rt7QH85K0qgDVoIgebU4L/5bZvYmXSS2mw=,tag:FF6EGxoGysUbpHcB1eWzAQ==,type:str]
+                  #ENC[AES256_GCM,data:5OgPWK+DYj+8AOEg/GAZKWTEK2bsY6kD039bC791+S0mBLAhGw==,iv:bSdYJphrE86oeGwrpgQo0/NpOyZLf6Igci+8rCzV/Qc=,tag:U+z+vto3XbKLOsaDUMfyfw==,type:comment]
                   persistentVolumeClaim:
-                    #ENC[AES256_GCM,data:LJT8LpRFT3kBwGGVdMmcjVn0RNlVkCKJ22A0oUhfCLtZRvMfxo05fyD/jDM=,iv:YCkW2hxlSVNR+3C8BmCtDmGpk2geEx+baolZh28HYrI=,tag:IbjLzT7nB3+q+GUZcpMvHw==,type:comment]
-                    claimName: ENC[AES256_GCM,data:1hLomlK4TLAy4VKxfRAwxg==,iv:WdfCyYMrTLFZW2kp1rEs+NXWuw0T5wcpbTJssky8GK8=,tag:/n5T6k7ZwMcEgyMVqynSpA==,type:str]
+                    #ENC[AES256_GCM,data:6wzTY7bLNP30Ibx4fOJyAJoI/8fI6SfeS2ghLdUGynIn5VoAZQEGW9C4Waw=,iv:grA5/BSKTxE4YSPqLHgNXuxeUUWIqr2OYtAGWdrG4Tg=,tag:T7ndlS/bJAbQXlZ4lLftOg==,type:comment]
+                    claimName: ENC[AES256_GCM,data:ZasrujtyddXu+BHoQv+CyA==,iv:AQJyrIyuD9LFfuThAfHbCEYnnAErO5JjOq2f0+dEIJs=,tag:x18K7eCW0nbRbAMGvjCnbg==,type:str]
             containers:
-                - name: ENC[AES256_GCM,data:qjhr5NxYjQ==,iv:iDoL2QrVENKXpMr6L1P2s4jpjR90ZhVnR32GOFD49NQ=,tag:sg+blsZrjDHCWhpTmrS+mQ==,type:str]
-                  image: ENC[AES256_GCM,data:tnVCzPPyeUK8eFRmd7WxCxC9DQ==,iv:hHcXwoLXkh0dffGgpNCvNAzvWa8zNqvoqWYcz1dR6xs=,tag:vu/IJc+YW86bArFkMNX9dA==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:6e4Gqq2E,iv:Dtux5tqYXWtXUpBKIUnEasl3cpI5saDC1aeKG6RYOus=,tag:XuyzfTUu4QuDLyCC1zbDqA==,type:str]
-                  #ENC[AES256_GCM,data:6VtUaeifJ7+I8IqT57uNpDlj2vMH2pZCYgLFIpxqrwVnMwNnUOSXiw7h6KzevzGTNWclehvRf9XXVnZ20OsJlvznCX3A0GLckk4=,iv:RPaOQvaHdV3fgQy64NGbhn3mN4eVMufCglxaT90EOgI=,tag:IGqZDqmvVWcu9gXGL0corw==,type:comment]
+                - name: ENC[AES256_GCM,data:KTcwtzBM8w==,iv:69Y1Ski3mC08mZ5TjqpzlrsJx7VuC5zg2uwQ5ITFe3A=,tag:Lvbp6/4ICyeYGtB1LVlfXw==,type:str]
+                  image: ENC[AES256_GCM,data:XnBn/DP0KBsfPULFLhOUIyUh+w==,iv:BwR31e2/JknIynbR/BhzNlTqB44DjlsSJ44vjDy6v4w=,tag:t/IhyDLDD6ULDipm8VfA5Q==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:ShZjBtMq,iv:N9KU/gdkv+qH0TKEQy9wgUxQSofymKZGKDzGP2aw2vc=,tag:cJ5clc45lUW2Yi3hCJ3HmQ==,type:str]
+                  #ENC[AES256_GCM,data:0SBGGx1hqnpBmXWC0wqT9aouKTlIvBI85Su9OEdr9HbX+XPxyFcb0R57rXjhu3q1A915HqtKyPvh2ln5PZnoa3/bQfadOXRYL8g=,iv:ua8NvchsDdc2L6VRtW2rddi2k64Lg7vboxxli6R+2a4=,tag:BNJB4ruxpFxLGs0q++jNAA==,type:comment]
                   env:
-                    - name: ENC[AES256_GCM,data:Yc/Kzg==,iv:65x0vKv2P0OFl6k/EkR5csUzcnRt14y6iGKR40tX6J0=,tag:GJoYtYUho/gX6TsV6VdLvA==,type:str]
-                      value: ENC[AES256_GCM,data:WsLcww==,iv:a5DXXJf9sUQTS9Fp3XCZrn9vTV62UKDSboFVIof4Swc=,tag:ID8HfkZajuWwYEG6YqP0EQ==,type:str]
-                    - name: ENC[AES256_GCM,data:NvnlXw==,iv:QIsRPSb19hIhKiIyaCXX9F/FiYCbxpXBm4iGIWwtysc=,tag:iDGOazaJIhXtqaCrSZ6y9Q==,type:str]
-                      value: ENC[AES256_GCM,data:mlcjPQ==,iv:E6txgqKzarDwzPUfnitzSdOs6NJQjT1tU33WzyYVapk=,tag:mrbQWvxiUbtg+3IEtcVGsg==,type:str]
-                    - name: ENC[AES256_GCM,data:h9o=,iv:e+BYan0sSOzvSgMJfCrEac21I5DLd/tOCiUsUTeemK0=,tag:sO76DhtVbj607heEW+dPnQ==,type:str]
-                      value: ENC[AES256_GCM,data:P9AHQb7PxYrMyMghwl+npQ==,iv:0dtsZfbBoqVXy3IGJ8aFXR4xVMaMYLNRZmhwuwSoeHE=,tag:ir8fZ0t0KEfNYNHtTRF2qw==,type:str]
-                    - name: ENC[AES256_GCM,data:mStxZUkTzfi4z9N2yPc=,iv:2bkr0F+wHfz8AZfsJMavHzFKNCOBjQ+hbj/dX5iBg0U=,tag:FOcutSX7X/P6HgLuxkmqAg==,type:str]
-                      value: ENC[AES256_GCM,data:nxwuSQmY+Eco,iv:IwNW458tro+yshNYbsRyOK/zntv+KIg9jqSabJRjbEk=,tag:KuJ4tag/qKIFbIem74MOCQ==,type:str]
+                    - name: ENC[AES256_GCM,data:CPYT+Q==,iv:cDHy5/0e+bbTaiZYmsfoXSJFWe6g48dreOTgeDJefgM=,tag:MZIvi8WDH9LPC2PGTcW8sQ==,type:str]
+                      value: ENC[AES256_GCM,data:tDYU6Q==,iv:Z6r19hWHSYxo+N4R1izmsmyle1beGbLX7ZeEUKijAuE=,tag:Jyr+Wa71QLse5Jhc4EAE/A==,type:str]
+                    - name: ENC[AES256_GCM,data:upJXGA==,iv:5sJUHsfV/zQ9jTMNOVMKSxerJw16QOLnh11FVov8ZUk=,tag:QpRaoyXn06e9eq3mi3i+Ig==,type:str]
+                      value: ENC[AES256_GCM,data:lJ+exA==,iv:kPdqWuCv9FEnbhXb4ZNAvmAE74hYa+ETn5gwuxSgUpU=,tag:98BWZUYdMn4acXmGbGFwMw==,type:str]
+                    - name: ENC[AES256_GCM,data:DqA=,iv:/jynJUNKoVUqeK6RJ7fLp29CB4QfeLw239p72cXGbtI=,tag:AxIgsBzWwV2xyywIjtQdCg==,type:str]
+                      value: ENC[AES256_GCM,data:QuUgxegPrUWsx7jTaCUHuA==,iv:At2sgapiEDSCqBOYdjwpcBW2J+/NBDHQD0/Ua8gokMg=,tag:xM1c1RuTTz3mIVZBp6xB5w==,type:str]
+                    - name: ENC[AES256_GCM,data:93+GsM1J5ae7saiQ/6s=,iv:XmGz7sKV6iHRhh+adF7ez3uO+UrcbeLUKt2P5qQiWgw=,tag:sy27RNS6AV6IQ6L2BMy85Q==,type:str]
+                      value: ENC[AES256_GCM,data:AhCIfuMKPfiq,iv:FrK9fQzsDLiWnzvkehufSPomv82/ofdGmaGrq4TkGVs=,tag:vY4JkKQnBtwxLWxTtvJ/gg==,type:str]
                   envFrom:
                     - secretRef:
-                        #ENC[AES256_GCM,data:AJO5eB+dJS5cHhUmBmBhS5c8aA7Lqfh4cvR5oSuy+T1GARFjLv3x,iv:4BZS44DPz3se+P6Kcz5UraiBNROQEq4NbtZvAkAjrzc=,tag:+5taMHiQKDIU9bMMgUsyxw==,type:comment]
-                        name: ENC[AES256_GCM,data:ThOfZ6F/xNGG1+WajF6vCOkOcw==,iv:Se/XqFmYiJgYOoQ2CkRCHa5lIt+364Q/GKUCIPsSpIw=,tag:tm7+BF16RQBWaOVknN/mOA==,type:str]
+                        #ENC[AES256_GCM,data:BdoRw/SLO/Vmb+HaJWSRODjkp9/V3OVKAB5hnL/AlvAgoyRKVO8J,iv:wZlBZFKlX79ET3d+qJq7SNOwPzCVwjZupCemT35aWuk=,tag:4qXjIJQYo5ie8YBXqBgDJw==,type:comment]
+                        name: ENC[AES256_GCM,data:sQkJm6ZGa0+UgYsUaFGlAsM6TA==,iv:4maeThGvdFKtmbvKeT4k217OLwcZbtZTthl9ZZJ9+dg=,tag:nP/Fo9D8Cr5Ef8+xPpOnjQ==,type:str]
                   volumeMounts:
-                    - ENC[AES256_GCM,data:PJC8US11tObZMk6oruZsJr7LNimqz9E2vsWKxbZEPnBero2Tnjde9RZZ879p2VBS+k6yymM5aeEm9tTUC/h+4vM+2cmtSAfGLsnsjykz3Q==,iv:erftQ8bfEpYwdklAjQTl3XmmuEG53R45vyuiNhi4xWM=,tag:Oa3tPnaDI3Fu8lGSjSdJaQ==,type:comment]
-                    - name: ENC[AES256_GCM,data:RDXtZpzwHHpvPZEEBQ7UWNvnSfA=,iv:HnE03auXrPWz8puWwArhY2wOpW6TW8fUSEV/PvzuGgo=,tag:NjBXjxw1lYB6LZ59jG3qpA==,type:str]
-                      #ENC[AES256_GCM,data:znkPqMTDoL35xxLuqooWp+2GKHrUNA4hga6kOoHKdp+bIQ==,iv:/8iOfpJ34t09F+Nkwg2Ig1oa0Gi8F2SgGCo/u7LEGbY=,tag:RPfqF4p9EZLfRba/q8d6RQ==,type:comment]
-                      mountPath: ENC[AES256_GCM,data:cPlME36giQ==,iv:dqV0hFdFF+mKaO5XAoEae5iQMC4MLK6C5tvZMoVORy0=,tag:D7wOUr/ziq4sw3xZATSqxw==,type:str]
-                      #ENC[AES256_GCM,data:u3FIkw1lujVWMyoHvvbP2zZQClPQMieSt36lOM6yCLkdjasrCGmylxH1ELahaj07dQ==,iv:UUNxmnet/GHVUcGWnXkXrL7EQ2pHrqRph2+j+fOXDKY=,tag:/PpAts+FlY5qYH2c5vwmuw==,type:comment]
-                      subPath: ENC[AES256_GCM,data:mdaHe485/bOGICn5AvY=,iv:slFrpf0D3Z/ubGp9YmwHD9dtBZQaVZmntn9PQv4751w=,tag:DwmWYyvOyISYv7Sdg0uHoQ==,type:str]
+                    - ENC[AES256_GCM,data:KTYX9f7273RNgQGScphAqbIbZlvS6y84Bv6fGmgz29SC2lxLLb1f6vK8XfcYvQN4dHGbUZkJ0WdPit6rtNtwaZajRpOil5p0r5TBtJr2Qg==,iv:WOcjP8QtpptWm570BNjrb96GjOGgqFx8Rc7SKrng2wo=,tag:oCXBqAlyNmIrgo2FPLkRzQ==,type:comment]
+                    - name: ENC[AES256_GCM,data:dDEvrrrKsCVtdnLXuwnwvmIn3Q4=,iv:C5WLqWcB2ikEi5IPB6nSZ8BHg4YR+yTVsy2bSgyawiM=,tag:0fKhqf1dXqqeiST+Ge6saA==,type:str]
+                      #ENC[AES256_GCM,data:ZLzyVl98AD98S3ed4/+Qglp8IZsLsKa0wivo1W2jtFq66A==,iv:4jYJor9jMVitbjHUhNLX4Um0ahKWBJGepTc0DrkTRPE=,tag:kzGDt7dcnLE8yvRLfrrYPg==,type:comment]
+                      mountPath: ENC[AES256_GCM,data:Hw39tqvmvA==,iv:VA7SeOG90c3Catdcp9kpTXIyL0C/8hcvVBYGRqkLZdA=,tag:hVdc7LhRs59aiXBuJ1WwVw==,type:str]
+                      #ENC[AES256_GCM,data:2r7clEzNF1N/kiICf43wuMBlaeZT0zQOZ1xpRLAydKMFyw6YydSCJWAjXAbAvZFBKg==,iv:+oEfA+Y6dgC7l9dTDcDw83oX9KKmrAulF1No2z3zI9U=,tag:kTUVz5i5p34C/qwXJ15VYQ==,type:comment]
+                      subPath: ENC[AES256_GCM,data:wRWXM2bXHgtFR/7GWzg=,iv:1A9mRdFnyByOHiNgzPWye00d2XfgKApHAPgHlJhnVPA=,tag:6xSj/CTrKqqQ0GT21s1v6Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -64,14 +64,14 @@ sops:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBseWlNcmVsRXhSd2gvNG1B
-            eElndnJPbVd4TW5IMTQrTFMza1dDMTd6QkRjClZnSUFCQWVMTkMvWVdsaEZacEIx
-            a1lINVZjZmIycGVFeWpLQzUwMkswSkEKLS0tIE1zU3IvQjNuL09GZ0VMNUdaMVJi
-            WGhmVW9zUVY5R29FUjZ1NWVMYVlNQUEK8EzjXyY1W74feONuRgKiVmRE6HEpKo2k
-            O+2fwEOUFt9uivB5FIy2Dl36g9jN25tVvmwiY+Ctsd3qvLlyy6a08g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRejRFT0ZGZGV1Uk81Umwx
+            QkJid0FuTHp1V3oxcWNqdDhKZ0FyNytyNWc0CnA1Znh2L2JLd24zMFpTS3MyYnk4
+            bnQxUWxZKzdFaCtwQjFYWU9QRmM3UWsKLS0tIENvVGpBRStDeERZeUZRelI5c1da
+            MnljaTM2SFNtRjlFWWtkVHJUSmlqVmMKP6gnsaRX9YCWGHF9fQlWxe/wpRJpHNmS
+            R4Xs0WklOdgyaJVlICUAUeq39nqE4DcMEhT6IGAGeAQVpZBnG4HIaw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:eHrYt0NnlVPjDJDEfYwA8k05hKtdJ6Ijg8DTTNYTnXRGvsCDj8TFp3ygUeXU/PAUpKhBUNj+31h5nmqZDOUO25xJaQQtl2naE0mFhpFr9EGYMw6sZLB0PAjBlx7uUFaMBAdbhAVCozgFKTqMCV5ffEnik+NzhBiK6+xSflR7p1M=,iv:Uasc1Fcidv/OemGnNMHgXZ1VWRTB6YLGoABL3IZaawQ=,tag:pGGRPVH0f902O/3pl569hw==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:7XSbVvF3WEzmEn93HkrZNK73aVYM8dF1qtHi2rF28mPaOEIzHyVua/5TqeHyE6oaWox1a5b/jcaHUrleQ+J3LltzIbDsD5uEps9wdstGGlR3LbS//KvFpcuZG4PK96vSyT51QQnvB587G/YBXcOLUnd/rDmy0vCU/O/Xe1PuRcw=,iv:aN/XsS+YVWBcDUSxK7jEG9M+pW0e5sigcUBlfbME480=,tag:JVIVSx/x8g3BEMSFMNLuWw==,type:str]
     pgp: []
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.9.1
@@ -84,12 +84,12 @@ metadata:
     namespace: nextcloud
 spec:
     selector:
-        #ENC[AES256_GCM,data:hT7j5uWB7xnHYAR+h7buSMCf5VYEZLKUrNpIt3jDG0i89fVd4GhEz/bKwsOgxrJ2S3lMZ5qpuZHYYSDWuN2EtrvIKKeZFn9yh00z,iv:hOpRWbmsjnyY3QnkiEHPlK74yzTrIWyTzEH9LL3HqZ4=,tag:dxjPpXYGVcyfI4D8sEAi/Q==,type:comment]
-        pod-label: ENC[AES256_GCM,data:KuOE03pauzQqyqi4NM8lKw==,iv:LBDAZe4lv5iMYbJzDWI8e9whrDunsliqXGqrdJ0ZJic=,tag:MfsCYlsMZzFctB+n8FS6AA==,type:str]
+        #ENC[AES256_GCM,data:qUcsnNbkpAfQ1XC56PWezmz7OJbpZPdxTpE/oq75FZ6+ku6RwrxHKM7qte6bIPyjcVhLESlkHnk+KbNhiSryb0QYYr8+g5ZXZaO7,iv:JtmwjWzON+hF1KzsXK/VNGpGp32mq0yt+HlNue5MuMM=,tag:gbqolaLXFriAfX/XGICFdA==,type:comment]
+        pod-label: ENC[AES256_GCM,data:Ld7zA5g3lvWPpFW1aNkWlA==,iv:8xfTqEtEdC4Om07UmrPB1h5g/6JguPWvByG8jUY8tTk=,tag:1sQBmY07LlPrAV10PIic6g==,type:str]
     ports:
-        - name: ENC[AES256_GCM,data:Q/Kgw5c=,iv:4d8XMUfbadksl724vY/jXecZ9nE6ZVKDck2tQgDDlMM=,tag:/CoHD/bBNS0pwVbbeSdmZw==,type:str]
-          protocol: ENC[AES256_GCM,data:uIvn,iv:vVLMl/OH4+5h9eRnhmvjcnSy8IFx5wLPq/OgRqOXwx8=,tag:1d7bkKixPjS09KI5+UcUcQ==,type:str]
-          port: ENC[AES256_GCM,data:tn1ybg==,iv:ZOBI79NCtpojTG7B+iv+GTGJl2Vmqk+3I9acjyeRpLY=,tag:bV3nHGlHgyvI2ib3ve1u/w==,type:int]
+        - name: ENC[AES256_GCM,data:jxUTQpQ=,iv:eakw550SG6FSl08Wb8nG64ATcYaMimVWjkaQTedJVsY=,tag:f+gE9RSnw6yBEIfmocaNfA==,type:str]
+          protocol: ENC[AES256_GCM,data:dnSZ,iv:LH2YIkdpADi0C6p4Ude/KljbFruWvlmTH0uNdD6Yq1k=,tag:YZJP6/u+nIPtyrYKorz05g==,type:str]
+          port: ENC[AES256_GCM,data:6XG4bQ==,iv:GLkCNLndgtklct3FBG75dNOhVkzndUdtZhPVJDm9oP4=,tag:HVhoWevbHcMAX6WG5D/Yww==,type:int]
 sops:
     kms: []
     gcp_kms: []
@@ -99,14 +99,14 @@ sops:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBseWlNcmVsRXhSd2gvNG1B
-            eElndnJPbVd4TW5IMTQrTFMza1dDMTd6QkRjClZnSUFCQWVMTkMvWVdsaEZacEIx
-            a1lINVZjZmIycGVFeWpLQzUwMkswSkEKLS0tIE1zU3IvQjNuL09GZ0VMNUdaMVJi
-            WGhmVW9zUVY5R29FUjZ1NWVMYVlNQUEK8EzjXyY1W74feONuRgKiVmRE6HEpKo2k
-            O+2fwEOUFt9uivB5FIy2Dl36g9jN25tVvmwiY+Ctsd3qvLlyy6a08g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRejRFT0ZGZGV1Uk81Umwx
+            QkJid0FuTHp1V3oxcWNqdDhKZ0FyNytyNWc0CnA1Znh2L2JLd24zMFpTS3MyYnk4
+            bnQxUWxZKzdFaCtwQjFYWU9QRmM3UWsKLS0tIENvVGpBRStDeERZeUZRelI5c1da
+            MnljaTM2SFNtRjlFWWtkVHJUSmlqVmMKP6gnsaRX9YCWGHF9fQlWxe/wpRJpHNmS
+            R4Xs0WklOdgyaJVlICUAUeq39nqE4DcMEhT6IGAGeAQVpZBnG4HIaw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:13Z"
-    mac: ENC[AES256_GCM,data:eHrYt0NnlVPjDJDEfYwA8k05hKtdJ6Ijg8DTTNYTnXRGvsCDj8TFp3ygUeXU/PAUpKhBUNj+31h5nmqZDOUO25xJaQQtl2naE0mFhpFr9EGYMw6sZLB0PAjBlx7uUFaMBAdbhAVCozgFKTqMCV5ffEnik+NzhBiK6+xSflR7p1M=,iv:Uasc1Fcidv/OemGnNMHgXZ1VWRTB6YLGoABL3IZaawQ=,tag:pGGRPVH0f902O/3pl569hw==,type:str]
+    lastmodified: "2025-06-29T21:31:02Z"
+    mac: ENC[AES256_GCM,data:7XSbVvF3WEzmEn93HkrZNK73aVYM8dF1qtHi2rF28mPaOEIzHyVua/5TqeHyE6oaWox1a5b/jcaHUrleQ+J3LltzIbDsD5uEps9wdstGGlR3LbS//KvFpcuZG4PK96vSyT51QQnvB587G/YBXcOLUnd/rDmy0vCU/O/Xe1PuRcw=,iv:aN/XsS+YVWBcDUSxK7jEG9M+pW0e5sigcUBlfbME480=,tag:JVIVSx/x8g3BEMSFMNLuWw==,type:str]
     pgp: []
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.9.1