Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -6,56 +6,56 @@ metadata:
 spec:
    selector:
        matchLabels:
-            run: ENC[AES256_GCM,data:1z8r3P2e,iv:aZz759jj3znXr4XC83DxWME2oc8KhLR6lx2YWYoE3mc=,tag:G7mvnDVMId9KMU3T1jk/ug==,type:str]
-    replicas: ENC[AES256_GCM,data:6Q==,iv:Q2W3ssvmRtYbYKHRf3PTqQVzfVqteJdrQ5ayOZvd+fI=,tag:bBHY96N5egH/q9W3CRdzmQ==,type:int]
+            run: ENC[AES256_GCM,data:/uuRxO7M,iv:obrSpypXI7jPl16gPx2tFWkcHOtimAQgwq+/aBbMuDQ=,tag:ft0w1piAnLhnMNHhvAibQQ==,type:str]
+    replicas: ENC[AES256_GCM,data:Bw==,iv:Mdoz7V8E81lvfvKM8eg9wrbL7LKYzo05mp5EPOMPKCE=,tag:UQaWHu4vaJXfFEFc+9OOWQ==,type:int]
    template:
        metadata:
            labels:
                run: pihole
        spec:
            containers:
-                - name: ENC[AES256_GCM,data:15bIJWK2,iv:AK8dP6KFOBPzm4i0w+XRZ0DNEepN2tIt6hEUBiEgAfY=,tag:XSAhgW/IQu5FD2hpxhnM0Q==,type:str]
-                  #ENC[AES256_GCM,data:SR3rGgVHwGa9AbdIlfffCv3Kj4RMzR1FqBgY6URkpIJEzGeEjP4zBWOv30Q=,iv:CczKDRBZekPlrauHgWfpNhhoFb+8Pad4t8tqQvJJpHM=,tag:F+AyZ77puhZIFulB7Ww9ng==,type:comment]
-                  image: ENC[AES256_GCM,data:E3ZF1raqOME3jw4qzGXF8X4mtg4=,iv:P4DTwHfcAWm62wpHpQ5cYnN0KF2XqRrFLcLTb5Tsjo8=,tag:DrFx8Ft1eMSA9c3aYg//vg==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:291zlR9A/+ujab+8,iv:h0JHV6cuKZ7nt5eRO1P2wBp+QOb6Tqwua/WlM8rakoI=,tag:CBgg0hCwGnu4pT90UreiYw==,type:str]
+                - name: ENC[AES256_GCM,data:m+su6MCO,iv:pF3ELxf+pBAtAu7Nx+v42zTIll0H6yJ9U5ufdHj9aY0=,tag:ngK+GMpkeqWD+lM8RAAK1A==,type:str]
+                  #ENC[AES256_GCM,data:hjF2mntrG9Q9teJxUJ0pApTed7WpBKvCcRDaiD01cIAZUWSXkYYVAuRUuFs=,iv:J7/uh+5CUdSvB2bT+phd4WuE+QhCXJ0YSndbcWGW93o=,tag:crxOQHLI4GELylKxPdVBZg==,type:comment]
+                  image: ENC[AES256_GCM,data:j//vUz63dKfjtRdMgzArp4YIhTg=,iv:ZoEJEcpp0MxKm08+eQSRSmeuUaP1PRLfdEYiRadZhSs=,tag:PymW8iebPmbF9Z1Pu8aekA==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:7KCcp+dvgVIMC5ir,iv:n/NfMmj7FUh3jnpgOadmm88TaADxrHC9bPkAfVG2xcs=,tag:6BqvZZOeoOGgfxQ4DJMKyA==,type:str]
                  env:
-                    - name: ENC[AES256_GCM,data:1d0=,iv:SwQaDbgPtvQ+CO7rlFOsWY9T8TRC58gsEQ+LkhwPz6E=,tag:S/9vUm95gUpvyBliUL3cxw==,type:str]
-                      value: ENC[AES256_GCM,data:PD43ekNhJQqd+TvL6A==,iv:tcQDG15Xy/oRrpLmSJy/67DCaRk68UtnT5mDe9Qmcfw=,tag:Fdh4kobN8fMulckERdFE8A==,type:str]
+                    - name: ENC[AES256_GCM,data:LYM=,iv:xEJkV1wURpLCCuxwSLGvh9Fls2wcU4rYFwoPwE/3hVA=,tag:ScxeIRkGNk7K7updjlNLvw==,type:str]
+                      value: ENC[AES256_GCM,data:5zWupIhd3y47ibkrwg==,iv:oMsNH/iLCii8VVCqzyJkHs6/LZwUVCb51SSs7U5CTvA=,tag:ekx9yj3sKyZbyoDTR5dYog==,type:str]
                  envFrom:
                    - secretRef:
-                        name: ENC[AES256_GCM,data:AkbVkB8MuZ+yLwoGrYiRudQ=,iv:1CaKRM0yLHUzrgxKhjhLvSzqRnKkZJ3XMLXO/nCFLEE=,tag:9Qisiz/90Pn+AYr3+UAIJg==,type:str]
+                        name: ENC[AES256_GCM,data:6HTlevDVT/uM6C/LhCEKrqI=,iv:x/YspFY/Q6gY82DjYg65TxJ5RJopXtqi2Voc8czoq24=,tag:Zp+sBZU3B+Mc8EEdsdnlyQ==,type:str]
                  securityContext:
-                    privileged: ENC[AES256_GCM,data:MXMdwg==,iv:IyZrfsbJb1BgT79mEyiiESMW0ZdlgqSlvRBT87U2LZA=,tag:udYv1/kBldPRYlUr6zwrjw==,type:bool]
+                    privileged: ENC[AES256_GCM,data:RWzZVw==,iv:OQwf2fIOLmN/NtSftsyz+O/q4LcD/hnQev7HlLkYEz4=,tag:E0Dt6K9380A/0Y+dHU2h8g==,type:bool]
                  ports:
-                    - containerPort: ENC[AES256_GCM,data:bcg=,iv:H/hTkaCGmAG37ZXHVczxZCTpToD+UcnRwpExyrgStio=,tag:g3BpMmTahhRxRxNKJPBulA==,type:int]
-                      protocol: ENC[AES256_GCM,data:Ojf9,iv:MiTLU28YH7InTwifq3jptn0UHOVKSbhC+OXURJ/sX7s=,tag:6dGOvSTaMPD5usq4oHeq2g==,type:str]
-                    - containerPort: ENC[AES256_GCM,data:uZU=,iv:1RKvDxP2MQlAxOieSFEwVIY0keMl+f+5RiXrJ8QEeM4=,tag:KKrdrsFNZJfbMnsep6669w==,type:int]
-                      protocol: ENC[AES256_GCM,data:l6pq,iv:Vawy27l/tlLVoTqzAxKLVWs5tPQOW+43MGtvVgurEBc=,tag:lXw5+UB07/novTuPSrVY/A==,type:str]
-                    - containerPort: ENC[AES256_GCM,data:n2M=,iv:+bf6VIgZuA47Y7x22bLMh2Hj/7jNK1x6kYp5lHPI1H0=,tag:2mbDKpPSmL3c2t2z3lUAZg==,type:int]
-                      protocol: ENC[AES256_GCM,data:4Wz8,iv:Mx6nddFMKyvGDM3aerntDNV2+webbEW0AMkdTb+DROk=,tag:JzPmgGz0a4wsKzUrJLSTQQ==,type:str]
-                    - containerPort: ENC[AES256_GCM,data:5jA=,iv:RxdVYgE3oznD5pme5cxdFYYYw3YTXg/reWDrBEvHsuI=,tag:en01NuXoERMRuUJFKRc4CQ==,type:int]
-                      protocol: ENC[AES256_GCM,data:wLoL,iv:KDiQqWbEbwHC3OL3C6aoe+MnFmbl88C4ZMN1xen32oM=,tag:q5Ucs8tjcNIIwRveIhPvOA==,type:str]
-                    - containerPort: ENC[AES256_GCM,data:d5J6,iv:FQbCtizjeMyw92wgD9NhWoF7WeT5H5AHNJuuV2wNgXM=,tag:Jq6VfIO++nDYzvuSMFO1KA==,type:int]
-                      protocol: ENC[AES256_GCM,data:48zq,iv:tF2M0Llv/RyiWTe3jOqKEV+6v5cTjUYB5wF5kL0ImkA=,tag:BK1BHvTpPraPjOd8k5cOLw==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:MEg=,iv:7mm5Nks2DANtQ1R0CQYCNHwqIwJ2ATfEUXpO4yEhWsE=,tag:/dqVbFwNOD4LRF3Qk5D9ww==,type:int]
+                      protocol: ENC[AES256_GCM,data:LiKQ,iv:JeDHCkEDoj5o6f5KzGlRQdCS56sZVaQEfEivthN7viU=,tag:iX2uUu810aPj8xQmDW59wQ==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:EQE=,iv:6jMsmSxRJUlcHFXSaJLPqWQ74oxlNylzrp8cm7aCkZA=,tag:mQ4KE0JR4uM4qOaQiF7DQg==,type:int]
+                      protocol: ENC[AES256_GCM,data:H3+P,iv:W3uMk/TDB/8Wx9+km9mWUjD1ihR69HIZOmxQcFjUvPs=,tag:6PUz87KWXRKSb+vL2DgvZw==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:zYs=,iv:G94aU1+7ntn+2rdDycQ/oJ5by2e5zWR54qlyHvhmVmA=,tag:+5E+GBicqdXmUgIlAjJSSg==,type:int]
+                      protocol: ENC[AES256_GCM,data:j/ve,iv:o8x4oxyTE7qrolwh5UBvey/j4ua9MlGUBiUMKwugYMs=,tag:q0QKev4DnyjeK1s++Pdhjg==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:RRo=,iv:TFW1siCHaP3P2nBqbT9TP2ziawd+Ner5vTK/EV7efv4=,tag:WAzSt9cbGQstp+Lh3SLYKQ==,type:int]
+                      protocol: ENC[AES256_GCM,data:qmVz,iv:KhjfONzrFIQdp8PbTJQEjqTLa75SX+yYMKB06gkayfg=,tag:xjzCXWb7qMF7VWab7X27ug==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:rt/G,iv:JrQD2uaHGUACM9CU8CLXop17ywbccHJmYhgVUo2I5+A=,tag:/8+GBQ/LiZ8tI8M4ZUKwvg==,type:int]
+                      protocol: ENC[AES256_GCM,data:jlvF,iv:OmFvZhopv4v+YJoNFFbFwcjaZM8oYNeGNHgLCiK/lg8=,tag:fpzME0QbfsccCZpRWoJO5A==,type:str]
                  volumeMounts:
-                    - name: ENC[AES256_GCM,data:Pbghq6nWzObr6d0=,iv:TWWlX/0t0/sEBiNpFR1tQO8KgvNVCoyEK4iLtDeq6tw=,tag:1BUSN77h055nBwGpBhatqg==,type:str]
-                      mountPath: ENC[AES256_GCM,data:FfwAYSJmQfAiCIE=,iv:JfzJaSkBI9Cl+6dvrizFugEFUEXqaDf5JH3Jxal899w=,tag:TeOOA+oEvkqaB8lTv3AbQg==,type:str]
-                      subPath: ENC[AES256_GCM,data:StugpJGv,iv:RLtb9nIsF+U4vMyLqxDlwUDi/Gc2G2e12NfKo6vy1rY=,tag:AZLfWwFsuuDEXTr9tIx1vA==,type:str]
-                    - name: ENC[AES256_GCM,data:78JOeiDt0w6dKdA=,iv:1ZLLyCpLiBmbMs++GhP1YbGQTHhx8QKSB2USZU68euU=,tag:tXjTFOPwnwKV96wc8ClHHA==,type:str]
-                      mountPath: ENC[AES256_GCM,data:ST5jIR30TEj+0kYo32E=,iv:HX1m+BZAlaQLIIiegKkR6MvA/oFWJmVmEBRK8vhi7is=,tag:NRXO6Xg6FXv0l+dMDJTyIQ==,type:str]
-                      subPath: ENC[AES256_GCM,data:gOSJ6mw35XZl,iv:uj5+Hpd4hJ2jTN5+Md6e45vmiCFMjLbafEO0oGBYjD4=,tag:5SosUpIvbJKjR2Zy6z/q4w==,type:str]
+                    - name: ENC[AES256_GCM,data:YzHRG0/CebKmZZA=,iv:06k/VdIk6FgMQnXXS+8b7F+0LzMU2m8F9F4EBZzUOBE=,tag:F68lkeC/ZbLtNpzHmgK4Lw==,type:str]
+                      mountPath: ENC[AES256_GCM,data:PhU1Pn+78vRhVS4=,iv:6nNW3SXYJKRZpIyQQLYeNe7Ur5xB+iYbXbFShoR52q8=,tag:ayuOMHodGEXPdbPpaL4/fw==,type:str]
+                      subPath: ENC[AES256_GCM,data:T8EOyeS4,iv:04z5kUfy1o2Qqd//XK2NCrugcp1e4gKe5nZlybif0dg=,tag:PhGN79kd4Au6ge1aTwIl8Q==,type:str]
+                    - name: ENC[AES256_GCM,data:nTFALFsMimi9wPY=,iv:9gCw519hEBnIMrfZw2khdlQZiC6Zg7g9cbvtfZtahcw=,tag:SfBq95ruTB7P2TJa2ZptEw==,type:str]
+                      mountPath: ENC[AES256_GCM,data:g4sxyKGJVWP7wkDmgtk=,iv:gh6VIXOOb7lgORnPPfToAr3TJN04ElBfRnfUobtXNK0=,tag:f0Sc4R67X5wegUZjCj8zcQ==,type:str]
+                      subPath: ENC[AES256_GCM,data:dnrNmP9Lv2go,iv:My1iGXPeJ/eEmIyNpHF3fEbfoiXVkHd3zQ9Cg6oDm8U=,tag:tVfFNvINF6GdqfRwiqVx4Q==,type:str]
                  resources:
                    requests:
-                        memory: ENC[AES256_GCM,data:BiQTDm0=,iv:pD+iNN+0UdG6Xxc5sDJ8me9mVE1KsJ2JPF42Ir7mWis=,tag:pDk0Fkz+ctRj6WVhNEJbKQ==,type:str]
-                        cpu: ENC[AES256_GCM,data:Dqcr3g==,iv:0L/4JZR4+j1+WCz8rpCNzRM45w+ol5ft7oPXGJyMpjI=,tag:NiBzaZrrruWpXHD3mQqlvw==,type:str]
+                        memory: ENC[AES256_GCM,data:sooz8UA=,iv:Gln4JcTfl/td6oSJ0tEhfymT13wlC3rA2qaDL5Uh73Y=,tag:qd0KnytkPhP6GNlRpN55EA==,type:str]
+                        cpu: ENC[AES256_GCM,data:QMI7LQ==,iv:WAtXoxR7sBQgg6cCKuevFnkpaf863XUp7dpxS0x05k0=,tag:etlBC57SUzgi+j5KAbUwUA==,type:str]
                    limits:
-                        memory: ENC[AES256_GCM,data:dfNL,iv:LBMmkUiEMapLA95heTUFoBlhvk8+yLHiroKJbvKbKmo=,tag:Bx+XExbvWPtCD9h+AE4WmA==,type:str]
-                        cpu: ENC[AES256_GCM,data:Lg==,iv:oRbaKibX4tchYdPOXgt4jZAoTVp1DVs1VxAllOLPUw8=,tag:/xdzGleKbbS3acKd3ywe9g==,type:int]
+                        memory: ENC[AES256_GCM,data:+6v+,iv:xla6sYX4r5Pz4GMnPQ6tA/Sb36ZewG281c9ttQYxlgM=,tag:KK++xCvj688GCks+ocdJ5A==,type:str]
+                        cpu: ENC[AES256_GCM,data:Xg==,iv:LJwjTVpMmys5QeO4AmKIWGFld99jInDveq8fW4GzDZA=,tag:CXiZYx+19bDZo3We8x7dzQ==,type:int]
            volumes:
-                - ENC[AES256_GCM,data:28qTduxCRvUyBHAGosL6uDLMMJ/55lr0gSJExSe4Hy2xyZRSOw==,iv:5+hFjMcji3olnkCGa0gubMxUMu7xXA6bWQVf0CuJnJA=,tag:thjYTGL3CjzNeoX4rtqMzw==,type:comment]
-                - name: ENC[AES256_GCM,data:rHRaZR8tObyg86g=,iv:zyuegugG826NRWg6LigHCDuv57rFF7njE/7UjmAjLtQ=,tag:zZfE19j9zMeOEEoeq+vJ5Q==,type:str]
+                - ENC[AES256_GCM,data:C7058BkMfNo04mlOm1CV6HLWRsIINx7pjyfCOhvxib+WA6N7ig==,iv:8TvQZ3xT1dTDsgNLCcOYb7ryOuzawqdmWRyddvggRrs=,tag:MpJ1a3LcqstL6z99MJJcsQ==,type:comment]
+                - name: ENC[AES256_GCM,data:OyOmbYH48Hw0Occ=,iv:BePQc4spwiElEJ0ayXwVVD0/qV0seaqJnw83faCWAUs=,tag:dQ3fDJBSzigOCiIPqbeaJA==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:/e0Ymbjqb4Yxfg==,iv:jWj+7+CtWHO8ciZFg1PBtbJHnHi0Q7JPVIFZtMmxIRA=,tag:El+xa3n28y/JMgSoWOC1vA==,type:str]
+                    claimName: ENC[AES256_GCM,data:+ciV8Cr2I8kFgg==,iv:HuQ5FayWYMjIHK0spSZhPpcecdWmjYlfB6hLkTooTXI=,tag:4GtfRzmmw2RePQAGyH3+ug==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -65,14 +65,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqeFR6YlBLeVF5VjhPbFJI
-            T2Q5WGFYdzdWSVJiM3FIUkxNUDJVbThrUkJBCmpnRUE4bC84bG5iV0N2RnorL0xn
-            NjVvb2tjYXZTWmRNWDlKU1k2azBxL1kKLS0tIG8wbi9CODZGeEtPOE92VFI5ZXBU
-            V3FmZ2RoQWhuUTAvTUxPcGY1bkt4aXcKGtME6hl/lO8M9XwV7ixluWPxowmsXkVa
-            XE3FMdwpUJ61QhW3MRk8QTsnxg/f4zTkF6UDgr09ydhotg+ysbjCrw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydlRhNFR5Ykt3VHRlMTVF
+            TGVHVFlWa3RrK3lFY0JMNU1NZmhYeXo2NW1jClMwQ1NPZ2V4aHBWaTlxanhvTlhu
+            VWhhT1BmcmNNRW1OV0tWckIwTTNTY2MKLS0tIDVieUdZaUFTTk4zRWpObzl4M3pX
+            b0pjMzBacmE5RTVnR01Ddm1QekYwYWsKiigExJVnXb3IKVxQXL4fth80cdYUYpUA
+            tU7jqp631XA8XtxyoWDbiLgfPUp4NZjOYx5zI3N9u78zt7Ff/RNffw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:11Z"
-    mac: ENC[AES256_GCM,data:Kroeo8aL0yIlDPOl1NFX7TVsO0w2UCVBFseTe2DtNYmrf/F1Gemtnq//otv+HrptnYtCz0o/n0Blmn0Y918k+rWRy1vbdLrRqOwOKfWaZ24HNPV8cZ8q+SzkzB0cIzdE/A5Dmt+wXIQpXasZI/7PlCZHuoxuSiJJ0aB+fZQWKF4=,iv:Q1nD3lPAtM1XCxObAx4rHEbcE0+e8ZHsIe7IlnrdgYI=,tag:5aN6UmWCGCnOMkHtcdNAJA==,type:str]
+    lastmodified: "2025-06-29T21:31:00Z"
+    mac: ENC[AES256_GCM,data:WIQmm+FrWc0XAO3mhtvCVNI97c1OTtqUUuoxA2fez1rFQSraphxGG8yUNa6X8F8wuws2IbOLJ/BRiMZBe+nENGJ2uW2A3kAJJPYfo5KiRdnZARdKRVdxyHXdPvWSL0YmdYD7WD5QJ7qSGbCy1Bd6kFjRFyz5+gAQer4Yklxs+zE=,iv:egTUHSHLEhDfr6v9qCQ7duw6A3U21LT/0NLAqPDEFgs=,tag:rs/r9F67YYBl9AMdvwR8bw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -5,11 +5,11 @@ metadata:
    namespace: pihole
 spec:
    accessModes:
-        - ENC[AES256_GCM,data:Vaq9HMPFDdr5JRnQqQ==,iv:qItAC5g30KImSEX6QbsoWhruFJ+E/46zAWQoMdSpa2M=,tag:r7CCzTgp0MHM7Bog6GeksQ==,type:str]
-    storageClassName: ENC[AES256_GCM,data:M9U7B6p+sCQyCg==,iv:FnFEKeix0hJjybsjebAyvvEJrjFPCMX4fxwW1lmlwyo=,tag:DpKjwxYHUXCeu+JQ8JIAcA==,type:str]
+        - ENC[AES256_GCM,data:xataQBxxtkQIYd9RGQ==,iv:Po5TA6BWpyj3L28c+XB/eSWwqNkSo6iBVcjF0JxozIU=,tag:Lll782V2uex+q8OqocN+DQ==,type:str]
+    storageClassName: ENC[AES256_GCM,data:mgteiOtWCd8dwg==,iv:/CubGGWn2+IctSo7D7CnPn44/YH2dFjzLol5KlefEXc=,tag:/3QvezORnHiS/elYDefPCA==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:EeYvwps=,iv:HjVJqaOFFesLuOuy1ml4Qu8Jd8KZmZicFrDxPeZL+JQ=,tag:3OxD9eeZK63In/mN1kAg/A==,type:str]
+            storage: ENC[AES256_GCM,data:wITz19M=,iv:6owyKT/G1CK+ajFwHACpBi4uso6+0NLp/++AoQJAd3E=,tag:cmshCYY73a+79K3OftNdWA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -19,14 +19,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiakxyNjIrcm1uaEtBQ1cr
-            RDY2dFRoQW5telFINUZMZXY5bEM2dkR2U3lvCkxGTUdxZFVSbThhdVhDN1NkTXFB
-            L3lOMElQdVhUaldmbnB6dEF2YVg3VUUKLS0tIHBZaHF2bnd2bDFJME51WEs1RW9E
-            WFk4c0MyZEY1bmVrL3JoUklGeW9nKzgKcrpTG8cMAvAXquChUOIiHst7k2yaiaoz
-            ZoD0/G82CGCL90c4MpSkdTJbz1mFThP+JICBr+ijj75OBiPrTjJGdw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYU14MGtaTEMrMzFZVHVz
+            emhiWXhvMVphTXUzWDIyZGhkeDN6aXR3VEhnCkRES0VSWUhZZGxYU2JWRytnNUt1
+            djdIY0x0Z2xVTVNYL3U2SFptcnlaU0kKLS0tIFR5NU5SRkIwVHc5dy9RMVlzVUhO
+            eUdWcTRNL1JzbDg3Z3VqOFFIbHZaMzQKLTVADcc0yz+kWU9mKShQk/oItEEcJW3/
+            0ls2CaYwqPPUdAnkCCFUMvbUtw2AUKxfKmCHTLwlxfmnaTHbfJDemg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:11Z"
-    mac: ENC[AES256_GCM,data:r35qIJ9p51gSiuJIt0mPvXusrWtmJRVfCNF9Yy91xjA632wdIcHPMtwcMg7eoN6ZlgRBGsUqSOZlUOgx+THhKIkv0sSpM52fuX56iDZsIOF5p/oltv08o1kWzOMt6yJTT8GsB5Hmm82W2khCuKSV5I5zJITItN35TcP9hHS11SI=,iv:AxdFfdpSeidxhwEmCCeMSEgIRORDlpvFIQjfE6q4CwE=,tag:451/xx9FQaAjdwaAFQXK9Q==,type:str]
+    lastmodified: "2025-06-29T21:31:00Z"
+    mac: ENC[AES256_GCM,data:cNgAgM7zuOvo1Mj7/jODy09p2geWqUb5b+t2UfwRWemZKHn700CfpXadRiD4M2olFlF9bPqp2hWxULSwD6G1Ib8ABb09BZUz5LLxqPlNWi7I/Y5Xfdm8sflvQ1rNv+dTmhDqYplcyiBo8BEt01a46QDBrR8Jj/kWurTB410KXxE=,iv:KhEsp0NHjLXtZBZSan5vBxdcNymWLxG6b0xAW3fyoWs=,tag:CW1AHdh1HKriTPmauzlBzw==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -5,31 +5,31 @@ metadata:
    namespace: pihole
 spec:
    type: LoadBalancer
-    externalTrafficPolicy: ENC[AES256_GCM,data:UYs+Eww=,iv:W29ALZt9nkvaq9nEIQqBeRz3z0DnDb8HkvCSJm4i8Og=,tag:dpJQ1IxT0uMEP3Iqpyn0hA==,type:str]
+    externalTrafficPolicy: ENC[AES256_GCM,data:Cs18DDw=,iv:2iolukq8d2olO0p3StuEItCG8m/iIMEfxfnBQ/Jfh4k=,tag:4LRe59IdrNUjH1WyPYmr9Q==,type:str]
    ports:
-        - name: ENC[AES256_GCM,data:k5a7++o=,iv:Av+lJQ0bA4lMlRB5ZIhvCfBd1zf77UQawxn+vUzrGsY=,tag:+y7XI7qmSOH2PO4u/zCFLw==,type:str]
-          port: ENC[AES256_GCM,data:BSh7,iv:QPho1swz9fpicaHDCNYiD5+TBIS9fQ1Dg/94FPpALe4=,tag:n/XnJlhqNlXqmgn7BICAnw==,type:int]
-          protocol: ENC[AES256_GCM,data:skEy,iv:Tj1J7dqPPc2NHD5/EihTF9+J8ajBVrICCBFqk0mr3eE=,tag:OPqTBPUF7hMojyImRmCVLg==,type:str]
-          targetPort: ENC[AES256_GCM,data:pV7K,iv:YlpgyTCAiW1qbvbVLWRUTQ0s/Lmw3KbfZArR3dU5oEE=,tag:ZrXlU5R4LtlEaMVzCG++Cg==,type:int]
-        - name: ENC[AES256_GCM,data:K8Vvmg==,iv:gOAtR3gSZUYrQy3i2M5K+LrC8MSjovuCrwdbSQ5gxJg=,tag:fP31OgfKZ6GoeqP+O53b5A==,type:str]
-          port: ENC[AES256_GCM,data:aQ0=,iv:fOffipExnNVgUwXMFXqmZu1MLNAdwTN+K5IiuOCoYuc=,tag:IBQg1hAMMph3RmxbhTRMSw==,type:int]
-          protocol: ENC[AES256_GCM,data:lFMN,iv:/KoKf9lIzofeMtSMk830KNPvwaQFX7rJcvn2miw1+gY=,tag:dlbO8LBMw4fxY4FY/nGtgA==,type:str]
-          targetPort: ENC[AES256_GCM,data:Jok=,iv:og5YG4A7BMO6aaOYyi5yXAebdH3avw4bO0ubhe51sug=,tag:CVstO91l+tJRdZwGcuvang==,type:int]
-        - name: ENC[AES256_GCM,data:huTf0tBDLA==,iv:1T9dbY7eN1bDEiqE4SyQFxlcFsea398eM6Y0z/SopZE=,tag:b6bJfSPGnebN2vFczOYCiA==,type:str]
-          port: ENC[AES256_GCM,data:C4c=,iv:TIhuPPi1V7Wgdq8q37k4+A4D9EH30jNh0y153oeBSD4=,tag:Z9q/StgNwUH2YWM2F/tHiw==,type:int]
-          protocol: ENC[AES256_GCM,data:r3En,iv:CyYepNyeSevBTjvpY78Idaxs3o1WNKFWj493ElpTRn0=,tag:Npmy8bWWA2ToWjLt2kBeLQ==,type:str]
-          targetPort: ENC[AES256_GCM,data:LVY=,iv:pogSer8mDakSCtBSE8N3or6gpePmpvgsrfw+r0gHWOc=,tag:MVidxEctWC4Ci9604I0VBg==,type:int]
-        - name: ENC[AES256_GCM,data:xC86I4xA2w==,iv:pcfiOLshVGmA43o2Hkuudbf/kY0yDal4X7Xp2OUgtZw=,tag:qeNUb+iLFghoEdLq+r1EwA==,type:str]
-          port: ENC[AES256_GCM,data:Hb0=,iv:AqWsaDIsgn3NgjIHAXkeWOoPJSbuCI5SxZTcYaoXwPk=,tag:AoeDnhDLFmEby5Ndn5Zx4Q==,type:int]
-          protocol: ENC[AES256_GCM,data:BAc1,iv:VHjXv8TOuKFDlnYUHkCiXsZV6QwBJaG9MC3O4KOtS9Q=,tag:79c6MyiBkCYf3kKeLfL0tw==,type:str]
-          targetPort: ENC[AES256_GCM,data:OLk=,iv:bWtinuO6Rl3VZDv0VyhqnCWK/kuKCuzRTJTJd5mZAOo=,tag:ipgPowvJXAzmVJ5lp8YWoA==,type:int]
-        - name: ENC[AES256_GCM,data:GgVKOQ==,iv:b8r1TubuYru0a7uUsjRIK+XwKeOY9wLciO3iG6BjHB0=,tag:rhuWwvWnVTVdXKNreFX7pw==,type:str]
-          port: ENC[AES256_GCM,data:5JI=,iv:dbxFuJOwYWuNtWzCYvpcDW81+ipQyip2R7cmjz/ybj8=,tag:WPIKQrMtgysuu+nApea0ww==,type:int]
-          protocol: ENC[AES256_GCM,data:cRoh,iv:+GngKDED7LSLvs1NBVMoN7B1y7ZvMgFE6X9dp8XR3xA=,tag:tdZQ4i1MEn+oB8AQdxYT6A==,type:str]
-          targetPort: ENC[AES256_GCM,data:ixM=,iv:nD5ZcGyN/xX1KxZDY4XZLSbPEUcTrj8v+Ueb6yciTVo=,tag:k1vNeNimMzZC/1WXiryqQA==,type:int]
+        - name: ENC[AES256_GCM,data:LFYYNgs=,iv:us+1ze/lBOFw2772bTvKp2LlyAg808MDzgAxsnpxnFQ=,tag:h0/39pSFTmdgaU+jWaMheg==,type:str]
+          port: ENC[AES256_GCM,data:uRIc,iv:bL9OgpMWtTN9Qc44YvKhrhsLs7nLV0ompAWaH2qwyng=,tag:Zl04dBgV4FfjGmb982K40g==,type:int]
+          protocol: ENC[AES256_GCM,data:hCxp,iv:rT+VW5mawvYaMBvdVO/Se0ayzADH0xKVqcMMR5sB7aw=,tag:kNQAq1j8vuIptpqmuulYGw==,type:str]
+          targetPort: ENC[AES256_GCM,data:mMJH,iv:Er5V7BG1swJA/BskeAVopzJMrDXtB1MAlNFbbBPjfrQ=,tag:4RUbuEtVxRx1a5OPOgpmvA==,type:int]
+        - name: ENC[AES256_GCM,data:jNsBbg==,iv:YZtGu/nCSQ8W4AyrbUC0VExjLKf4d63R6zxvtA3zPCY=,tag:5oIW/uHfRx1sS29iHwHG0g==,type:str]
+          port: ENC[AES256_GCM,data:E1o=,iv:UhkFq1/pAZZlNaG43IRDeQMzIxEmRxtyIC/VeuXAvnM=,tag:ffXDmxJoAbbAPOmPmYwxPg==,type:int]
+          protocol: ENC[AES256_GCM,data:JTDk,iv:Y8Gjc2g/JkM+LF4kLImeWAj76WhjK1mFzD4iA+LYrN8=,tag:OycwkQ4E30tC8zq7QvfZng==,type:str]
+          targetPort: ENC[AES256_GCM,data:FnI=,iv:IgK4RpAqc/jTZfIL9SbW5NtcjQAJjdaba6vq1wifPrY=,tag:I7aDHmhqKN21m36wFjsrxA==,type:int]
+        - name: ENC[AES256_GCM,data:JZwob7sc4Q==,iv:ojKEi2obESTM59ow2HiZNctdMPG1af2dGqDQdWVa5EM=,tag:VMsW+O+ceo7cMvkHdS/uxA==,type:str]
+          port: ENC[AES256_GCM,data:SCE=,iv:6VHjUSP9hd2IQeHC85kgp003Ud+S6tN1QNDSpTg2zPs=,tag:q4IXxJgYOHaRIyY9x9uxaA==,type:int]
+          protocol: ENC[AES256_GCM,data:ISwh,iv:TEux2tvyvf9waYC5DgT0xhc5IMIdFEUe0v5spPzusbM=,tag:E1sJhI4RcBDrrlv8YahAJg==,type:str]
+          targetPort: ENC[AES256_GCM,data:8bU=,iv:0P5c+W4EBoxDnc92dZULEr5Iz+hpb5YHpFQtiIcrHs4=,tag:8kIdMgcV8yPdMuKSw7fABA==,type:int]
+        - name: ENC[AES256_GCM,data:wOj3MClsMw==,iv:VjJqewFsUcBnFJoI0yMuGzYlm2IBJ3J+eAb0iv3jZe0=,tag:HgwKi7oKCqVrgrLNYPH7MQ==,type:str]
+          port: ENC[AES256_GCM,data:LqM=,iv:Rc97/sN0oTHmOzBRr8AmTTRzmU/t3uFiEep4PkXfJfk=,tag:IeT4fjZPNpKwehtjmcS4Cw==,type:int]
+          protocol: ENC[AES256_GCM,data:STtm,iv:5gpzwzmr1kV4qCh6GiLiFElqmLMW12tnekH9ggjb9KI=,tag:CBxLqZBatHH+gOoHKdnjDA==,type:str]
+          targetPort: ENC[AES256_GCM,data:Nr4=,iv:Pg1qrU3tWsCXH6fH2hb9hI1Xv01rQXQRGRB8xkTVR+M=,tag:ODU16m90f79yx8Ey7hRvRA==,type:int]
+        - name: ENC[AES256_GCM,data:zKnkuw==,iv:r3V+XWqnmEsnIkoptSoLIK3+294wfeRS/d0ayxCrqDs=,tag:Fl2SI7RWJUqD6+lsCQlIkQ==,type:str]
+          port: ENC[AES256_GCM,data:baI=,iv:ai3aQvEtLZx8AiZChY76IPSQ+Ul60Nd0wEc6pj8HUSw=,tag:l2yQOU6tahVMcS9FDX8QgQ==,type:int]
+          protocol: ENC[AES256_GCM,data:SooK,iv:HkzvTYMxBJTqFLN6n6/LmdHLPw3/Y83MS9N9WEjKLJ8=,tag:QdpaSfoXE0pjL2D0qxxt+A==,type:str]
+          targetPort: ENC[AES256_GCM,data:DQk=,iv:fFFXwoJl2kdDSgcsTOxjYYRb9SUy+DBQMEjMlPWI6z8=,tag:jNbiMkyaJJ6cwoE3k8Km2g==,type:int]
    selector:
-        app: ENC[AES256_GCM,data:MKu5COJj,iv:Rtox8c95PilcIDMnRlc0LTnVyasMGxC477FQS73VAU0=,tag:R+ot9EIrLBRoJRqs9q4XBw==,type:str]
-    loadBalancerIP: ENC[AES256_GCM,data:WDg7KyW/3Oe8BG1G,iv:ARTFjqYJJR2OTHgx9yZ6qgbIBQ2toS65ZFD2AoNdcTU=,tag:BEm9elybVt/tRhRkoZLIHw==,type:str]
+        app: ENC[AES256_GCM,data:2u+ipV6+,iv:kBqXksfLdoyUr8KtE9L34N14DD2iZyaKbFMxogUVhfI=,tag:Hcye7V0tDO7FMT8DoMjUcg==,type:str]
+    loadBalancerIP: ENC[AES256_GCM,data:knT8ri8vYKvb/wIr,iv:zVTcEGZetZifzB8UAK5mXaX8dOal7IubOVjyCTYwrm0=,tag:x0VsHfiQt8LpT0n5W7ZIlw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -39,14 +39,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVXdWdnl6MisvYTMvZzZL
-            L1ZNMzJKZFdFM1V3VzBBY0F2ci8xYzh0VURnCjd2N2V6VTNVaXYzSE1HQ0M0ZGFs
-            VC9NYXhQQkFBTVRsMEhSdkFmYlJXck0KLS0tIHh1Z1A5UXlNUk8vT1RNdVdRdTM4
-            NzFPdlZIV0hJRDAxc281cFhkRlg3M1kKAVry2s1+/u5mx3BpxcZh4bZiK0D29W+d
-            jD5bdqW2M7g2g9Esiol7yh2EYiOvjRTufxaWAS1BXQmM5OMJXcFNpA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQU1ENkt0YkNuTlA2OWNM
+            TDhjSGExc1hOSTV2VTRJVmpLNUZ3L0RtRVEwCkVQMjJoclUvVVF2aVBqZFdzLzlW
+            eDBvT0RQWHNjMHZmWWJhSEhnRGEwVVEKLS0tIEJUbk00aU01UEVkZ3hJdWwxS2c2
+            cTF3TXVFbCtaMHdCQ3R2U0RSNVVBYkUKMj1Atgp09uQiwArx8CwdIdqmBSa14EzD
+            dhvsmM7tdYJlF0XLKofKGD7R3Vg2Ob2bWlxNyDuUWWEL++grrKepxQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:11Z"
-    mac: ENC[AES256_GCM,data:7ohpKAevE7POLIuGnkDv8AuOsk1Z84z7Lf3wkCfqdnt2jAVKPRSq5B9B/JnAhjaVcy/t5QoPmfhOhU8X3EossGHrjvDt+xvc125kCG7YK67KlGUqBkDPi7QCxQrlOpmo2+cXmd+eIPSi3E4Sh6KDqNKlmLUZ1Fcyb+X0attRcxs=,iv:ZtWCxn8ZXZf/joZDW7EszAQdz9AjtcJlW6Xsg2LWnOA=,tag:WvsTHLCfQJBj7qvkDbUP8w==,type:str]
+    lastmodified: "2025-06-29T21:31:00Z"
+    mac: ENC[AES256_GCM,data:AyHnjDSA0fgm3dJPjIUaIkhHQb/tHFco0Uzqy2OFh2ZHETxEQphfvdjoeAIXgJtn3P6aYHWQNBDNb8Zbrt89UkINK5b9+JVWN10IdOUnWXsSZJXs3n/FAT11tkwCnP8l9V9Z/Oxnd5lkHQnsBPUtT0GbtjKl2OfMAfxIEEIqMM4=,iv:AjWpjgq0XrKEdbrkiyBz1vPT5fMxat7xcdhK/c95TRk=,tag:3Dv2g3awCmxN9H9rIrbeEQ==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1