Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -7,13 +7,13 @@ metadata:
    namespace: home-stuff
 spec:
    ports:
-        - port: ENC[AES256_GCM,data:bSOgn3w=,iv:XGMogH8J1/UWkl7QdjNNIxfhgMq8jKxhF1Kxsvvvr/M=,tag:Pk2l844gXiDr+OVhePp40Q==,type:int]
-          targetPort: ENC[AES256_GCM,data:B2SwsX4=,iv:0z+NKjO397L9O7japSoiozbEXFjmSB6SH7yossqTR+Y=,tag:VSvXpwpNm++2we6pm8CRZA==,type:int]
-          protocol: ENC[AES256_GCM,data:TYVf,iv:CvR9pbX1Jdl5vg2pZP0i5w1/LODiZDDzPAdpR0EYqdQ=,tag:zPEh+yjVui+kBBHz5F5bnQ==,type:str]
+        - port: ENC[AES256_GCM,data:bxkWTA8=,iv:CacZRATTbqbTDi4rU/Su1MjAY53zeaePH72Wp9RSFmk=,tag:HCWb/zjoxkS84dQutaFOOw==,type:int]
+          targetPort: ENC[AES256_GCM,data:uPHT1rY=,iv:Kc5u1D9qW6i9TEoHmEQCCyyLaXyKNo84Swv5eAJWQs8=,tag:rIxPQY6tyWrzNUjlRq4eHw==,type:int]
+          protocol: ENC[AES256_GCM,data:SAgg,iv:liSCmillI9ILDf2dgUmpxjVuK6xhgxat5Fv4oHSzKsc=,tag:gDg9AXVcVJI7ubgPbHOtoA==,type:str]
    selector:
-        app: ENC[AES256_GCM,data:YGOvDsgpd1xJ,iv:8j1nfMdAsrNgkXjYOmpx8DrhWyRmuEnjH9FbGmacvpc=,tag:KlPp4XsB5bbfupi5McGaZA==,type:str]
+        app: ENC[AES256_GCM,data:TebiOZVSkoJt,iv:5Pck5NyWxE2TXEp2Bv4J9uTKH+GNze+foKSNuI/LFsg=,tag:XpLp8667CnHJDmOcl/FYKw==,type:str]
    type: LoadBalancer
-    loadBalancerIP: ENC[AES256_GCM,data:3Jfc8/hQk/EkYYFOeA==,iv:dZXTSUJqC8+JmDzMnrGjpkWYkH3WTXT7Um8L+55rsiQ=,tag:ZzjPlHXWVdTdA6pPTKoPiA==,type:str]
+    loadBalancerIP: ENC[AES256_GCM,data:De/ZKp8Gm9iMgQ1dTw==,iv:V97aT51OyHbT9EouczAM2SPw0eXP1DTe0tnI02odJqw=,tag:rFyLLufmI0UITh9elezf3Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -23,14 +23,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMeGwvWjIrSWVNN0tOOUNr
-            M3RscGVQZXZEaDZpVEplQXMyY1YrVm1YcURRCnN1SkNqaHVYTXdNdWZnZHE1Qmo5
-            RkhvdGdBVkdGZ1VPbDU3UHFabHFlQXMKLS0tIHVMY3hzME1pZzBSUDUvZnl0b0VY
-            UlJJclA1bjVWMk1uQWhpdEVYR0owNWMKI8ACinc5dveiZgpEL9EOyUj9t/ZeiGRE
-            k7kpB2S1YTmAwu99Y2N6Sd+aPlM2ZKT68pNYOzb7CEOOxJrNKMuwCw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNDRqRjJ3aWtDR3hWalRV
+            NkRjTXR5WW9kQjhTbXNOOFpRWUlhZ2t6WW04ClV0RWwzMjh4VVRhMWxGR2lmM1Rh
+            NWhMeWo1YU5Ka2hvT1lKODd3R2ZWdzgKLS0tIHdaZEZ4ZHorZ216MkRsY2s4a3Jx
+            eGNzWlpCNTN5MVc3NkExczFmczJUTncKSeEJJ/RrQ7Dtcn4wqFisfo2CgeW9kpCK
+            5btjM9dE7xfOHuyFb6ehEdMel/MnbsaLVKJxiYAvxE72oiZJSTGvZw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:XPS4Wil5WhdoYuCwHogm3yzo2jBjtMrH0b8v7POwzobwkC7tW4dxgO9w8HGZhiOR1Gs08dlOpAtwiSYmAlUcbQFPuoQoz/MdwCi8hlzspTdMEq6mW+77SB7UB8PGRhlkRPT8EWvvN2eP/AfGY6Ss4Gq4q8NSG2oHrObaxCK0D9I=,iv:Frv/lax03XdmxshpfiN57nqpoKqxQeLAp6EAHOv8P4Q=,tag:xHoewf533DhYjnL6cRMv4A==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:UsTN9AjkPmiqm2tl/KjMR30EqI8wYSgPxrO79LrkJEde3lNEJ4I85xCg6pm7tRVQmLDR7iqH4oGhh+F/IEzg4HvURFuqhb6MPAQ5ZCQv5s3eIvJYivigKDgmbkjsGCoA6uA9iBYxBiMcsRh5Pwwwn9pbH0XFo9Kf8MBDBG3Di9M=,iv:B9bY7kfYHCGeK6FdUSkoLHFOgpWapbsqASvpS2LH2YM=,tag:kBfjpqiDZWGD8ExU2cRSTQ==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -43,58 +43,58 @@ metadata:
    labels:
        app: wireguard
 spec:
-    replicas: ENC[AES256_GCM,data:8w==,iv:ujwV3GLhfqKhiNZPPYUUh74asr/YZaFM0fTmc/zbBPE=,tag:InOy+/INMRM3Srg11Ojpyg==,type:int]
+    replicas: ENC[AES256_GCM,data:pA==,iv:A+NZFuWaUEMRX1e8BRH5cgksSw1LpktwtvcUilOydHo=,tag:DuZLmEEFCTzxtphIBoD+oQ==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:5vU4yj1jtV5m,iv:c/ZM9lIe2kmec9n3nrZpheIHh18ymfUzZMBTQyuqYhk=,tag:wI/F40QhsS5iNWvUc1XpfA==,type:str]
+            app: ENC[AES256_GCM,data:U3kBLKRW2UDx,iv:PhxVfUaOgG66H7lS5pFJEaq5jiE4z56LAlCLUAlosOs=,tag:HZgHY41Q6XZpyywfR0MlMg==,type:str]
    template:
        metadata:
            labels:
                app: wireguard
        spec:
            containers:
-                - name: ENC[AES256_GCM,data:1MSVlgc34CAb8nbXWA==,iv:UYDEbLTG36YgH+nPBWU5xfmYBSzHkk52r8qNmexxrLo=,tag:gCpwgMVW1mMvrCUcyeGBBA==,type:str]
-                  image: ENC[AES256_GCM,data:MRqJrsbkrC1+/jCBCcNI0gK4vqt16rjPdgZr5TZRn83GMziF/rOIx44=,iv:vOx14SlXaKdwizpqyoDz1JLbKrK4+Tur0d7O7yLdn6k=,tag:x8X+jwvS/Qli4gWRNKjx0g==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:syq5eZG5OiD8CpCD,iv:UsmqKyd/J8R0ysoqas50oInWw6uY7ykhBprX3ehra6M=,tag:OFr+xKSrBu451EgktGsYiw==,type:str]
+                - name: ENC[AES256_GCM,data:JmI5tHtl25j863ozZg==,iv:9G4hXwslPTkvPbTBo794J7i6eKJZQ/yp9TrdMKske9k=,tag:xZ2FzZ2hYh1OMbnDREvuPQ==,type:str]
+                  image: ENC[AES256_GCM,data:j+yBVw0xXCxl/is3VlUWVElyA+XAgw7Tkoz1owtWIzXYaPDgYo558U4=,iv:2rOj/RSfM+PH0O2b9FLu0NrVbnoljp1Z4Vm1fhEDGm0=,tag:LVT2ceE6jBQsZBdnfgs4iQ==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:OvRM4ENjl9DquBuz,iv:dwQbZz0eZiDuKS3NZOULiUMiS+HKi8P8EvMACLMIW20=,tag:QtDcDT0Gw6daGNieQxmTLQ==,type:str]
                  env:
-                    - name: ENC[AES256_GCM,data:I1Y=,iv:inQIMls6pqjXMTfeRcgAmhCCJWlD7g672ztDxcMRFWg=,tag:aIQhqPXCVXPH9DBZ2ZyfEA==,type:str]
-                      value: ENC[AES256_GCM,data:4pU6,iv:hoztYodWKFoXBJN+uO75kcrmktdqNZ/EFrllGqwxcX8=,tag:QWcpxr7WfyLE4CHFGJH+ng==,type:str]
-                    - name: ENC[AES256_GCM,data:E/6H1rhmgNNO,iv:dXUZ8+I82ivMCCVd4oM7nbPBXxj24y3shfHbK5NOkFM=,tag:lsYMB8DJ+qiS/GebF8xB+w==,type:str]
-                      value: ENC[AES256_GCM,data:xGRfT1g19XBPyTivxNnBxkDBOSzqkg==,iv:iGIQyksGPy5YZKqXxvcUTsjx/2iayCPWBGuCWcPWI3U=,tag:pRZOd/e+N71PhSTaw5ZExA==,type:str]
-                    - name: ENC[AES256_GCM,data:eH2nAbakX19wGA==,iv:2aUly8M6v3B/T/R8DorY6fKgMzfigKE2q9a1Ip4KnjQ=,tag:7iWLZb83mZS2qJsKs/chbw==,type:str]
-                      value: ENC[AES256_GCM,data:rWH7Eos=,iv:sYKlk6A4TUHOMqV41XIerzjQDVM+2VmgvwQG4npypBg=,tag:vDg7cto4Y9adv2c4/7GU3g==,type:str]
-                    - name: ENC[AES256_GCM,data:z7plLA==,iv:gAvyYsCac5XH2FZjJyaXSwPIlQflYIgSXTzdkcM7ARY=,tag:kMc75v6pYKi6DWYye8VW2g==,type:str]
-                      value: ENC[AES256_GCM,data:aRICQw==,iv:57j1AhXc+glVO3casIm/w2sGXHDADTkEs8RThdfTDRs=,tag:dat0nF9RyN6rINT42JPFqQ==,type:str]
-                    - name: ENC[AES256_GCM,data:dDEZZw==,iv:IbLOEyOOmT/Lmjsqsswqgospd1iFu7fRfoSguU7oOAk=,tag:DNeU6MPbzsGR05ML5ojMng==,type:str]
-                      value: ENC[AES256_GCM,data:gYj/Fw==,iv:DC1usnz9EQC4XeyFdq+rbmF58PEQ/TFxU5HoiK1ctAU=,tag:6KFSqLDFaG1r5FEzTRDhpQ==,type:str]
-                    - name: ENC[AES256_GCM,data:MOo5GvSxDXzt,iv:jh0FI+8EuP5PyosZccf60ZJP0knqqukbKtrMKGOb5ok=,tag:x0QK9f92LsrlFiot6O4hyA==,type:str]
-                      value: ENC[AES256_GCM,data:8UWe3g==,iv:ih/ekDJgRVtZqhO/H75ycpsOAa5xHKR6McTP3G/jwbQ=,tag:zeOdo+UgtyFjekoQbdbI9Q==,type:str]
-                    - name: ENC[AES256_GCM,data:to1jyZA=,iv:WRtgTCIHHuzn392knPmvBUWj36TLt6Nz1VeZFvRRzsE=,tag:LXJPYcksiyzdbJQHZ3LT/Q==,type:str]
-                      value: ENC[AES256_GCM,data:MfvrBSy/2/zr826W1IanOzhwJHE8O+c=,iv:qUO8ZGEqYBWu5ll2PeoiZXHYUWUKwYZSRsGEpys1CWQ=,tag:dLdb4D36tKqNTh5IUMFS+w==,type:str]
-                    - name: ENC[AES256_GCM,data:sHhUnFlFAQ==,iv:7nLKqTP2AwmFdj0Qc0TjPPtQh4a9F75oOdsmw5Tr3Bg=,tag:1+J3oOu+6fjXmoU/BWo7tQ==,type:str]
-                      value: ENC[AES256_GCM,data:Y1lCq/HnFw==,iv:53LNDQJ8QshG4MN/iH23E/fcUNrObT5w7U3f+2hUR8w=,tag:OzFpO533STtTzizjwPNmVg==,type:str]
+                    - name: ENC[AES256_GCM,data:j6A=,iv:llj/+jlxkBB4JZNWLAwH2wLlpAqj8SsP65vP/YBzVR0=,tag:p20yD55h2iKG2kFhDPDivQ==,type:str]
+                      value: ENC[AES256_GCM,data:6a52,iv:FfVb80emW7xUtZogBp1w0d0/Vw4CrVbAbc4zOCe4uSI=,tag:SIJNq0lNF1MUh2m5xY95bA==,type:str]
+                    - name: ENC[AES256_GCM,data:YnkpOcSPR7Nc,iv:iKahbqII6q5rYvRJ3dX6U5gyifAjvFEqU9Zn0f0yxAM=,tag:2M2bJNW2Y9gftYZ0GsYeJQ==,type:str]
+                      value: ENC[AES256_GCM,data:VbIQuU2ifC/j6bs6FZhuF/Iogo9CPg==,iv:ghOXmYHvFUbZ549HniwaotEyTAd5ri94oDJ9LEBUGiQ=,tag:eyH23DHUsdprGTunixbYoQ==,type:str]
+                    - name: ENC[AES256_GCM,data:XRi57vXPpnK4Aw==,iv:i07m/mCHkgO0xukkl4nM16nDBR6lSI7giGWb5WShBVM=,tag:zSzD4/Zn1kQNOgVU0GKtDQ==,type:str]
+                      value: ENC[AES256_GCM,data:oxhcEOw=,iv:lDji3gs7uy98OH+1yz78lMDrwcAvzcqFciyiX7cPFRc=,tag:5+qFVjX0dA8F+ALOAARPfA==,type:str]
+                    - name: ENC[AES256_GCM,data:P4YSNw==,iv:UoO7HMPvLyIcUzVDZ3JZZ8Fwg4LXWdZKOgMUecXx0Js=,tag:U9Op+K63qvNZbC2BlYzg9g==,type:str]
+                      value: ENC[AES256_GCM,data:kGwCmw==,iv:gPTmOWzdUZ8UFiOF1GFnX3ZbvxoXqQfjvUJLLRkqPcU=,tag:0IgfWE41ZmERYrSmk5p9Og==,type:str]
+                    - name: ENC[AES256_GCM,data:rXgQ+w==,iv:13WFQh3ROoL7YYpvlA7l3o/A4Hwaid5kyqWNcagG2Oc=,tag:OIqJbW2C4kHHNShNOK/2cQ==,type:str]
+                      value: ENC[AES256_GCM,data:Y/Na+g==,iv:YUQwuJr+1l5Pb0lcibdrvBIS59mVa0UaO56ksOE6arA=,tag:/QtWivzUWr4e+hFNPK2VAw==,type:str]
+                    - name: ENC[AES256_GCM,data:tbN/Zmw/pdVQ,iv:v2049zVgmOVH7YcHpGesb5xnnYFRih+4zgX6KnNRV/c=,tag:zZo5K3Yl2jnFx46stuhEHw==,type:str]
+                      value: ENC[AES256_GCM,data:wcIpxw==,iv:wetJ2BDxRfk1fxexZdq+GQPK2LNWipxU19nEbPYia3M=,tag:7XtHWh/hkt5LbXezJ6GwSA==,type:str]
+                    - name: ENC[AES256_GCM,data:wXnBsB0=,iv:KXjQh9wJOMPxSc9RlbVNOXtC3FrMpWpcA6HnvOP/wcM=,tag:r+NbsrkG0nFu9JrkEV2b4Q==,type:str]
+                      value: ENC[AES256_GCM,data:9oEyZ6MKhiD+FN/UfgHmJVARBqcAkyc=,iv:QBze6X3Pu7nSV9VHXkVuYgad4txpT79Ux25vRkhDB7o=,tag:tnOBYYn1ahzb8nB3xTXG9A==,type:str]
+                    - name: ENC[AES256_GCM,data:6OGec9VenA==,iv:2+7MOu7x15oiW616hblaQxSKuOhywFr9xizYYb1fptQ=,tag:qSpyXyn7jmXKxDek58zePA==,type:str]
+                      value: ENC[AES256_GCM,data:kr/6iTIROQ==,iv:wxz1t3WB77FTowHiUtykaMf0V7gjqXcN1vPw+2C2fz4=,tag:z67yfe5do/JRN5018B0I1Q==,type:str]
                  volumeMounts:
-                    - name: ENC[AES256_GCM,data:Tk70qUArQkFF/NnXbIPMnw==,iv:bkZ9r3MrJHYe3DjSfZJzUt9b+ZnoF20RbB1Lmz2L94c=,tag:nXSyU34FpVJNDzCTg4ajMw==,type:str]
-                      mountPath: ENC[AES256_GCM,data:zvbxaot+KA==,iv:cyoNykSFPZ7BsouN9bfDvPTesq8DfeXp1fSD1jSI9gI=,tag:p/AFXQngiLK7bFnpNBpS7w==,type:str]
-                      readOnly: ENC[AES256_GCM,data:mQAlYSE=,iv:NW76weYJpXwomsmtkyTXsFE2UbLP0AgVe+H54mKLXWc=,tag:y9lCdGzzjhn27f77xfYf8Q==,type:bool]
+                    - name: ENC[AES256_GCM,data:XHtERgiTD45/s4IiEOG5Yw==,iv:4F5wu2/BSud4B++NRV2OyXrdNsz0BmnR3an4kG05ouo=,tag:5UYzM6pwMTmxRk6X9viWqA==,type:str]
+                      mountPath: ENC[AES256_GCM,data:cwY1UGAWHw==,iv:13MLakD3pGew+6170+RUlQSzqris5FRvY+0xNeIRP7c=,tag:QV1IMWDqChXITWhebdNMXA==,type:str]
+                      readOnly: ENC[AES256_GCM,data:Fl9auZ8=,iv:Ts0EN8/iLVZWVDcKqMIR0H/W+IV/tgW8Ows9aDL774c=,tag:0pTjraMhoaQ4u2wLF7S32A==,type:bool]
                  securityContext:
-                    privileged: ENC[AES256_GCM,data:GFd3Lg==,iv:kPlBOrcrCPhh4hHhbO2KbOpUtPSFdIAZa6GaI+G9p+U=,tag:1CJ136fwxhsmFgBC/Jw2ng==,type:bool]
-                    allowPrivilegeEscalation: ENC[AES256_GCM,data:xXIREA==,iv:ZX3H653vW8YJ4r+E2sV3xJNRULK09qGNtjKbqRDt5XU=,tag:JBnzI1LNL+UlNYZAtyi2Xg==,type:bool]
+                    privileged: ENC[AES256_GCM,data:4W6QWw==,iv:7ycZJeGF1ztnOA6DGtNkKojZLHJ3ZWh6poVQq1KEYno=,tag:tFgpLaAz+9Xbl2KEx9bYpw==,type:bool]
+                    allowPrivilegeEscalation: ENC[AES256_GCM,data:6Udjpg==,iv:6p1NWKWnZ27bC2ET+5z1VXY8HCqy7EESXIFOgxGWngA=,tag:hWb9Aw2UjaF3iRUy0Ue2Ow==,type:bool]
                    capabilities:
                        add:
-                            - ENC[AES256_GCM,data:ZyYO+ayxU3cy,iv:GcO8MH9WhIwa1hiwxU67BY4uwje8nMtdJiCv8YQXJAw=,tag:9hljr43iCzIUbYDnpyZO8Q==,type:str]
-                            - ENC[AES256_GCM,data:b3Z9GIhHlZaqBw==,iv:9Qqu7R1muVfbcg3h2vQL55VjKu5jNmNVmSWO/5bkp6c=,tag:DQ3RiISvaEPg3C+oc8evEQ==,type:str]
+                            - ENC[AES256_GCM,data:c3wcsDgeb9MC,iv:4q41+nCDIbDDfFXdI1l+4Go5ERUSj96K26+1L67btmA=,tag:w4XvL6il7yCDkvb2cEOelg==,type:str]
+                            - ENC[AES256_GCM,data:p2jxugIquiQ3zA==,iv:QVd5S2ENxS34xpgsrPzXMrqZARH2xDRu3R9iCma/VWE=,tag:RHi0obkVc6NoPGYwnsjNcw==,type:str]
                  ports:
-                    - containerPort: ENC[AES256_GCM,data:cZ3zT7s=,iv:ls+fjIZq8zacin6eYFr1JOs6nS0XyTa3RFcT84x3trE=,tag:AQ0LoeXxQ7gr55LZuukRBA==,type:int]
-                      protocol: ENC[AES256_GCM,data:N97f,iv:K10I+5MW2V21Mq6ZwM7Obe1syEACJg3qUTgeGmer3cM=,tag:CfixqxYvU49zCgLxJ2Ii3w==,type:str]
-            restartPolicy: ENC[AES256_GCM,data:q4rx2QWh,iv:3YA9akuyANKE/YmuOl8ZLhcSGMJXGt+VoqvKRpI8xM4=,tag:GVc3tL1QRQsdtoo+EiucYw==,type:str]
+                    - containerPort: ENC[AES256_GCM,data:U1hnU+8=,iv:3XyLzLwx9cG8QJGXaHKgHfnBsyKdGk2yYX9VTMh+Pxc=,tag:0C7dyDKSfSZsmQon9lgoMQ==,type:int]
+                      protocol: ENC[AES256_GCM,data:Nttr,iv:BTWPmX3Tt/V/lH6q2CL32FpWCI7B3gw+5JTTaz851HI=,tag:nuDI4PGhzh6GqEvpr3wBKA==,type:str]
+            restartPolicy: ENC[AES256_GCM,data:NP7O6vqM,iv:srzKoZQ+J9VLXXOUQsKnxgFMXDTvxXvTc3OD3XZq3rk=,tag:/x3TAKrX6zRggAecoPx+Cw==,type:str]
            volumes:
-                - name: ENC[AES256_GCM,data:EwGdOHox9vY0O0FkPKtNXw==,iv:xZY7J1CS7cpPFiFS3wz/RihyacbKv3KCfHo1yTERHsQ=,tag:RuSX8x60DCK68KfDLdMSrw==,type:str]
+                - name: ENC[AES256_GCM,data:UYqb5n3W4RflM8nf5mw4nA==,iv:0PzJrqFTv9XE6YzO0qPdn7oJxeCQ8buHbBjb6iUAap8=,tag:O1L4UjSX9KIa6hk7T4V6QQ==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:4WLfc+IA3+Qs6iQE7ntVBwl3sV8=,iv:BceQTMb7SXOnBXpOiZMgqWS3IrIExq8itEAX0u1Ulfk=,tag:G7ubssWPTmei/TTbjB5a3Q==,type:str]
-                - name: ENC[AES256_GCM,data:ymoNIqTbh7UKcty2m3jTkw==,iv:F+yINlG0U61N09zx8S58Nzwy9SxpqH/kr6HyfVSRd5o=,tag:I7YS2inGLTKeUATxqKl4DA==,type:str]
+                    claimName: ENC[AES256_GCM,data:JDONVG1yptmFgzuhzU+Ix3mXoLk=,iv:KxOZukBliLmJnqdeYVggnfvwqmJd8PugQrSdrud3mJw=,tag:ozHssOnlFYgG5B+2VjWtNg==,type:str]
+                - name: ENC[AES256_GCM,data:NflcO/veuByT8nHctHuqWA==,iv:tLN5jy3krFIKUtjg8KUyppNXmTSPRXN87s1WDw+pyD8=,tag:13NLs1YwVnj5lFVBwZwFIg==,type:str]
                  secret:
-                    secretName: ENC[AES256_GCM,data:0HkIk97Xe8wERxOJOQt7sR2r0/IQvEQ=,iv:Df6/Fok/WvH4wMaqfTFwvPXUhHVFLmR/9kViYYmFMag=,tag:/HRfXbDE0E5EJRgZOT6fGg==,type:str]
+                    secretName: ENC[AES256_GCM,data:z4zypb/VZNChof3B/oddYY0gQd17EHs=,iv:nQ/VtZ1CmSAFU6kaaAyUiCUGxN/a0Wx5bTxLqOsduAA=,tag:jH/CbIiesAyBYpl3iNE4/Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -104,14 +104,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMeGwvWjIrSWVNN0tOOUNr
-            M3RscGVQZXZEaDZpVEplQXMyY1YrVm1YcURRCnN1SkNqaHVYTXdNdWZnZHE1Qmo5
-            RkhvdGdBVkdGZ1VPbDU3UHFabHFlQXMKLS0tIHVMY3hzME1pZzBSUDUvZnl0b0VY
-            UlJJclA1bjVWMk1uQWhpdEVYR0owNWMKI8ACinc5dveiZgpEL9EOyUj9t/ZeiGRE
-            k7kpB2S1YTmAwu99Y2N6Sd+aPlM2ZKT68pNYOzb7CEOOxJrNKMuwCw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNDRqRjJ3aWtDR3hWalRV
+            NkRjTXR5WW9kQjhTbXNOOFpRWUlhZ2t6WW04ClV0RWwzMjh4VVRhMWxGR2lmM1Rh
+            NWhMeWo1YU5Ka2hvT1lKODd3R2ZWdzgKLS0tIHdaZEZ4ZHorZ216MkRsY2s4a3Jx
+            eGNzWlpCNTN5MVc3NkExczFmczJUTncKSeEJJ/RrQ7Dtcn4wqFisfo2CgeW9kpCK
+            5btjM9dE7xfOHuyFb6ehEdMel/MnbsaLVKJxiYAvxE72oiZJSTGvZw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:XPS4Wil5WhdoYuCwHogm3yzo2jBjtMrH0b8v7POwzobwkC7tW4dxgO9w8HGZhiOR1Gs08dlOpAtwiSYmAlUcbQFPuoQoz/MdwCi8hlzspTdMEq6mW+77SB7UB8PGRhlkRPT8EWvvN2eP/AfGY6Ss4Gq4q8NSG2oHrObaxCK0D9I=,iv:Frv/lax03XdmxshpfiN57nqpoKqxQeLAp6EAHOv8P4Q=,tag:xHoewf533DhYjnL6cRMv4A==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:UsTN9AjkPmiqm2tl/KjMR30EqI8wYSgPxrO79LrkJEde3lNEJ4I85xCg6pm7tRVQmLDR7iqH4oGhh+F/IEzg4HvURFuqhb6MPAQ5ZCQv5s3eIvJYivigKDgmbkjsGCoA6uA9iBYxBiMcsRh5Pwwwn9pbH0XFo9Kf8MBDBG3Di9M=,iv:B9bY7kfYHCGeK6FdUSkoLHFOgpWapbsqASvpS2LH2YM=,tag:kBfjpqiDZWGD8ExU2cRSTQ==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -5,11 +5,11 @@ metadata:
    namespace: home-stuff
 spec:
    accessModes:
-        - ENC[AES256_GCM,data:GjeUE4w+rVVElUdc+w==,iv:paivblm/EUqoJulUuKdVSqR+qQOSEpLyfNQ6B346kjk=,tag:9uMJwWiSB2J2aFd8lLMJRQ==,type:str]
-    storageClassName: ENC[AES256_GCM,data:FQZgf66SHhttIg==,iv:kyCg/josGCf+HnZCJIA2Dpd99xpgQKBlb6OCQTkO6kw=,tag:PFBOWfCLdCa0gdgk21bHUA==,type:str]
+        - ENC[AES256_GCM,data:NhgJNkucXDZww0+lFw==,iv:HcpJ7dCYosxJZaL6nGCmTKvZ6EydFoOV5x/I/GoBCJQ=,tag:TK2SEb27S6pOzXKGJxY1xg==,type:str]
+    storageClassName: ENC[AES256_GCM,data:Cff0aBKvKm073Q==,iv:uanwicVVu+4W8DLCQJQT8fS9aTmIQI+8w7RNyg8WvW8=,tag:+JV5ZiZbw2Cn4zKY/dTzzg==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:Gpg6jcQ=,iv:ulO8OeZjwQqvvV6syKe4npU/Jd6J9liBPIgDVexgJRo=,tag:zfSPuCL02pqSDD8CTcr8mQ==,type:str]
+            storage: ENC[AES256_GCM,data:GOydfhU=,iv:ItD0/ruCLkVPDhG1uMGCFrzxYNJI9y9yKnpt8kou2no=,tag:JXmttr5pus1bnXbGitDDrQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -19,14 +19,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN3JLWnE5QnZCTkFLdm1r
-            UVJwR1MyNG0zQjVOSVlGZjZvR29ab2R0c1JFCkJDZmpDdFI0ODZzMDlKMVJMTlJk
-            Zll6N05wVnJDSk92TFJobVRQb2pWSGMKLS0tIHdLQkprTG5XdENJL3UwMUxwOUZa
-            cjcxd2hCZCtVS1ZKWVNtYmFjQTI5VlEKD3gcOSIrL0H15cCTfDqhwO5tTXXppkvE
-            w03Ei7b5BvMgfPbs5BODJAMKig2IgIjwAMaVJbmO2nrFLIYLfJLQBw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDb0plYVd4eElPYmVTSDk4
+            cHl1c1lYd1YwQ3VkVUxXZFJ4WHd3VjhnSld3ClhuUlRqRVFndnVsRXJGMjFyRitp
+            T01XN1JxUHFVNmYxQjhVSWNuVUk3dGsKLS0tIHd4ZU55M2VEY09zZjU0ZVAwaGhH
+            LytHNTUvekZ1WUoxS2svazZVRkRMUm8Kxo339+Pdvxkok+aZ5K0Tzr8z+WbPDxo8
+            fH4QTet7n4fH7D9qY2X51GMlyP6gvXt2F4ZQmzqwT9I+QohErgFY2g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:TNSBkk1up3Gx7SuQ4B5ha41z1Wi1S42NGASFfV+RKmoYFNDgjd6srg4lCdPFCOxwncslvRHzTq4qd+iieAOFX8mv0dj6v45Suy543sJfKrvxPI3bsqhQQkM6jpfOEztIeruJmk0DGxmygS2uvNp0yjVlklFHsrLaEAmTMFit/YM=,iv:FVPEJSf8V8HARtIEQG8LR/cIG3LHT9s4d5y/ww5JfTA=,tag:XqtKCoPm6O+xE/xOtUS9Cw==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:RiOPdKvIU8CHGzCDfv/kp7xhrUkWYowffB3acHc3j4FWJbbTy5ulp1UkxVxaB9gNnO/8NlYGaAsmBBi+8UN5e2ptov6narpZAG0XKc/ccRtSwTFZ9bE6ZCOxRx4xiHrvA+6/fyiVxbObSEPCanYXLAvsij2Vqjd3N+9wXywCLZQ=,iv:O2RlOb48uCvKlQmSyctG9nkx4adteGAA0ABcC1sDJAQ=,tag:jfepZG5vqi+Y1qd+mLyAJg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -5,7 +5,7 @@ metadata:
    namespace: home-stuff
 type: Opaque
 stringData:
-    wg0.conf.template: ENC[AES256_GCM,data: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,iv:/80PcILX4ibMRKxgdxFlxhlREu1wAt9mhhkbNLrbRtc=,tag:mAshmTxo3yQ1cLJDYa20JA==,type:str]
+    wg0.conf.template: ENC[AES256_GCM,data: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,iv:iaZR2dCBTQb2hZenH7fkQ90STwcWBVbCLnOROssqes8=,tag:W4YMWn7wpaHSsu6BiHT8mQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvdkkxV2c4VlJ4Zk56dDc3
-            dmYyTHdIMFI2Tm5hRW5aT1dybmdBS0NaVUJNCkRZUWFTZm9TWGpBWk9oR2NYVWdX
-            cDlPdFp0ZjZXZlI2T2lJVXVhQU0wWTQKLS0tIHhjbnlSV1ZvOFZXOGRMaGcyT2NX
-            eWQza3NpOHFETDZiVVhQMENTNXp3U3cKjmoRylSvvPHIEPxE+LZ1ep97AHBB5NLV
-            olUu6XUvwmk3yQEwK9wwEsITnc5R2fQXd5iiIQGwmQN2AM3oujqoEA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjN0ZVK0FmMWxnajd3Rkdh
+            cUVDbmFqdnQzVU04bHkxN3A0cDdhejVQK0FzCjZCMUdXYUJRdU9tV3RoWVRWQnUx
+            RFZTOVFESjBiQ1RvV3BCNld4U3BCUFEKLS0tIDMxYVlOOHc1anJwY0Fwd3dhNkFp
+            b1pJcUFhYTJhTXNjam9yTHVQTlRNK2MKfQjhfdxkyO44AcMUuCbObI3LnVaUsiFX
+            fTc0olBMwnQ+ocygIlQ9yLweR7EH+ZfhPSTKVb/S3l6OMltSPJeRTw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:12Z"
-    mac: ENC[AES256_GCM,data:qPAyonOi3SecIZNtJARIDYfXLL3H2gFTzaxfqnfNZUS7Cz1GZKBOrEPfqQPNJeTwSXS9ZE5JqO4wPLKBA16061kqoXRooSPHTRj5IClpyu72+l+qN0prXLi6GC0bn0DMEk1sOekqIOgDjnZRKYK1y6aof+DVmimguiDoF+sVuHk=,iv:FyuvxO1gnGwcWR/dD45gLwPG61oAbK8awa9QbrPxWbI=,tag:dHkxhx7Br3Ta2mDfwI6bSA==,type:str]
+    lastmodified: "2025-06-29T21:31:01Z"
+    mac: ENC[AES256_GCM,data:JNXnk/2osPmg4s8nlUytUw2RSZvho2IaQInF5oxF1IJ0e0S6CdVurK5bQzpB1Tmxg3YshMcv7KO/NkBrcteWMD2kEwTigEbJuArNGb/yt85FIuIcrnOdyBI1k42j0/58ExWrDm4J/9ldm7iSzfioZqE9Vh4bjUjjZVqtVF+gRH4=,iv:nWyDEQ/zwp6DTO8mQbP7F2rLGef/1/lVagOOtTadzAw=,tag:YgVPuHb2JgSliL0Ei6FRTA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1