kind: Service
apiVersion: v1
metadata:
    labels:
        app: wireguard
    name: wireguard-listener-svc
    namespace: home-stuff
spec:
    ports:
        - port: ENC[AES256_GCM,data:qUfB/t8=,iv:o10LN6XTvojbZsUYNQk+l7P+l72Q6C5EHcWKaHQx50g=,tag:9g27GcLA0u4AlvEn7YwRpA==,type:int]
          targetPort: ENC[AES256_GCM,data:0yfi1Rk=,iv:A9ij4gUxP8hW0WPyqX0jsVeCghDniHZ7ol9G4fa6UIk=,tag:vVfweeENOUgWxZndZ2r5yQ==,type:int]
          protocol: ENC[AES256_GCM,data:XFDL,iv:oPFpeiwIbgmubmR0qu3OnOfi0l/9JSg7eweGXKLniGE=,tag:45ha+XBw8pBojyQyHI7u3Q==,type:str]
    selector:
        app: ENC[AES256_GCM,data:hnTtFFC5gNBD,iv:LdJ54GHlIEG6kvlYPoU77w9djxS5jpBy6z0B6VMu0Ak=,tag:HFzCNf5R4PhiPzQh/j+S1w==,type:str]
    type: LoadBalancer
    loadBalancerIP: ENC[AES256_GCM,data:KeASFIjJe1NDzZJFyw==,iv:ZgGgnp3gs3dsrYlragnUxuoqIcIct0e8TQOe2tGr/h0=,tag:uYmaQ6Kv0yTuZ8xRffx/5A==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSjJJQTBrNlMzeHJYaWtm
            anJYRVJRVC9XMUVISXVLcnp5NG5pbkR3M25VCkR3ZmhRMjhNU3A0d1ZmVzVtS2Ro
            VHhqeFJMemU5TG5vMU5CODhvNlptSTQKLS0tIDBKVGtBVmVMaW95T0lXQWJxVHhr
            SXBoWWJDV3ExWjJaVEpmTENKVlltNjAKCgILlpgoMh29sa70h+gshFbqHx0rFv1x
            LhRW57ZQcDnPiScaEkx28Et5b3EkgbeN7SyOb3f7vac4/lqo7/DDBA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:0vTswJO86N5CsY9LUupuch+ljpjULNMtHl0pidyn56vEUpM4b9QszrHiyODRvgnSDgfjTPXmJtr2IDPtbAMfi99nFtWQIhNUCSskGPLuZ+zJ9n8JCYtYDds+BWCOZwWvX3nzpdZFgWcmh6jggKDCcOK5SdZK6qyy7itr2O3p2Z4=,iv:j8UefpUkTYKP7U6wiY+elcdyyyVa8mUFxS8HOKW63Zw=,tag:m0KTK9GywTh9ygOh/CCmzg==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: apps/v1
kind: Deployment
metadata:
    name: wireguard-vpn
    namespace: home-stuff
    labels:
        app: wireguard
spec:
    replicas: ENC[AES256_GCM,data:Hw==,iv:FYqN7dwzhaHoUQNykb6Mlr6IfZK1Rvt/2ocb6vNJhkQ=,tag:DxK+o6/uyl8g+afkZ7xHhQ==,type:int]
    selector:
        matchLabels:
            app: ENC[AES256_GCM,data:NCO8ourhmyx6,iv:h0mhr5qTGUZX+vzhwc1QTleiVA1A3NEStMw+LTEGEhM=,tag:9l2QZaAO+6PwAslgdUl42g==,type:str]
    template:
        metadata:
            labels:
                app: wireguard
        spec:
            containers:
                - name: ENC[AES256_GCM,data:2EqQdnu6EMdoarPfrA==,iv:0RuJLBwLBG1hynEcBD7fpmsoO4lsBvqdaL0QRtzx3mQ=,tag:2BveZS4XvNFXrJrpFbBbjw==,type:str]
                  image: ENC[AES256_GCM,data:HEaIsvIZIYRxvxpTf0uYD9nxg+eusk9T/aPWXVam4WuOzLgsteuOjlo=,iv:9JFN7qBaaP7OBreIUiadI7lI0zAddkPzncrBjMS+fYo=,tag:wkh92Agonelw5pSZh6zH9w==,type:str]
                  imagePullPolicy: ENC[AES256_GCM,data:QNP5bIUz26O1A6nz,iv:QdDpDDj4i2Ls98WkqQ1ZStMVmTggsxiR710sgYjQIzA=,tag:RcywOUWB/FUE2Ds4qfz1mg==,type:str]
                  env:
                    - name: ENC[AES256_GCM,data:cVE=,iv:mKbN37LW5Q9lwXr6c6yNLTJtUnbeq07rvKtAOr2hSSw=,tag:8HzPZJ5pHN/bnqa4wGhkjQ==,type:str]
                      value: ENC[AES256_GCM,data:1yN4,iv:JUqxUitYHsdLWduMhf+aNDp54cF/UJ4Z+75S+qBjuDE=,tag:e9SSYAhZFJnrdgus6fBm0w==,type:str]
                    - name: ENC[AES256_GCM,data:d7e0PqnvSpAD,iv:wxVGtVHlz5Us9CA3KSMrNu2FAsYnVTILiMvicXYogGQ=,tag:x4CnOzzFuKRcSl4MLBrxlQ==,type:str]
                      value: ENC[AES256_GCM,data:2tBvDNgov889TUsIXXQ79CTZGj/16Q==,iv:G8fXqZC2Vc4plORdi5eWyZaHS+xkyMqfJQlQi/BSLLQ=,tag:0kZvPYkeKoKfsN7Hkp6Sqg==,type:str]
                    - name: ENC[AES256_GCM,data:5pZ3B8fvvf5Vrg==,iv:QjV9c7BiUZnSnNzgm+ssJQynUdNguNlGwLVSus5oSks=,tag:7So5BbmfDv4cPgY/YNJMHQ==,type:str]
                      value: ENC[AES256_GCM,data:HYEEL04=,iv:02sdwh6BuQLG7wgnEA51Z77zqiOaa/J6iKtcqVyKa5M=,tag:Om72S7Y+n447S40NAXkGIw==,type:str]
                    - name: ENC[AES256_GCM,data:SlD4eQ==,iv:fIgsU5vnvZZluizanUI+5FYP/tHrcrFmXBoom/o7nPU=,tag:7VIOzjwgA63kHcK70qmxjQ==,type:str]
                      value: ENC[AES256_GCM,data:RCBxYw==,iv:p8NzqvjuqRFUpID9FpRnA1Vc+CLlmW208TdOLImEjGw=,tag:Rzjmf9bDEHY3WGVK7Uu7rA==,type:str]
                    - name: ENC[AES256_GCM,data:4YpfPQ==,iv:WTDfbgcxVrI2+2eiIes1QWGDeQkPxcG4YIwl0tzfgvQ=,tag:oDAj5Ped1nb8RMJI4+iQ/A==,type:str]
                      value: ENC[AES256_GCM,data:6/tsUA==,iv:sWDMTVJ7SKwy3Y+4xIFbGOxk3jhffWpGvb+VpsWGyLw=,tag:dwicfCMkewLQUH9I/W6zTg==,type:str]
                    - name: ENC[AES256_GCM,data:+pINRrHczqK0,iv:QIl+Hpb4W6Kb42uHbZX+ZbTw2FpmC0vJuplzBTJ6N4M=,tag:2JssJtdGFy1Ffa/wlLdApQ==,type:str]
                      value: ENC[AES256_GCM,data:M8nOWQ==,iv:L28tdtqOmNaZ+7HC5T3t7qN+NvKZC9M1o1Pv40L7WJ4=,tag:kWTJWiBq3X5rwJwlLdCS+Q==,type:str]
                    - name: ENC[AES256_GCM,data:KaEseJo=,iv:EV6tTBpYCbrLOU8SEbvTQFRFTHT//5/uDj31Z+IPefU=,tag:DC6kz1U6LVTuOIWux3ocUw==,type:str]
                      value: ENC[AES256_GCM,data:wGUXSyF57FvU+CaWpcHAapkZ8xLYp34=,iv:h1tOHe0pKQjplb47XKp7xMFiEmlKeZMU50smrgH0mzk=,tag:+oZS+t3K1mDYB/8U/MvIOg==,type:str]
                    - name: ENC[AES256_GCM,data:XH1zUop90g==,iv:bkoE8/4CUedW2W6WVj3r004B/i+8w1ieTzhdxIpyQ3k=,tag:ojPKCUTwV3J/M9gGozO7yg==,type:str]
                      value: ENC[AES256_GCM,data:cq5ZbOMSNw==,iv:WlLIEJYIdCTE+iNwc4EFdyXU4QdJKH2Byz8HRIeUztI=,tag:5yrIOnHaAKWiXchqzZkbaQ==,type:str]
                  volumeMounts:
                    - name: ENC[AES256_GCM,data:bY7KjSbm26p6mNUOQYdBgQ==,iv:cLbiRn7rFHqHzIfEOzM8b39WDZ9Do67TnutErOt5+ow=,tag:oj+INJIPRB20GYijwwL0Mg==,type:str]
                      mountPath: ENC[AES256_GCM,data:8cYWqH4J9w==,iv:LZ/paPdCVHm6GKKbSHQ9nsMvPR1Y2wgUNv9IKbqwcr4=,tag:+TZQeUgsr1CFeET/hvt9mA==,type:str]
                      readOnly: ENC[AES256_GCM,data:NN/V3MQ=,iv:urHcSJjRX8SlZ2wGVZCI+JTKO98y86B9xy5ZVl3OQA4=,tag:XQGgWzTBsyY762GB1YOggA==,type:bool]
                  securityContext:
                    privileged: ENC[AES256_GCM,data:fy4wTw==,iv:ADoWv7IceJsbJk+zmoIXZi8FFptrPDgC9rWMKYA5kDM=,tag:YOxor4Lyen6cYEocN93rCA==,type:bool]
                    allowPrivilegeEscalation: ENC[AES256_GCM,data:pGCOQw==,iv:MwMF8uA+DvApmu9jqsZfamgF5DtQ88c1utWcuT5PHn8=,tag:tPsdzQ4O0tDSTyHJ/TnV3w==,type:bool]
                    capabilities:
                        add:
                            - ENC[AES256_GCM,data:HjXi0gXNZKtw,iv:KBfWAAUU3dzT4/oxUdN/8WUsEdwdyB22/kxoln7vnWA=,tag:n67MUkmgKmwL4KAZ61U4pg==,type:str]
                            - ENC[AES256_GCM,data:PpP8rzH6V+NcOw==,iv:iJxeS2QOwOrqURnKQHgCJ49EblsYXhvJ+cvgpet2wS4=,tag:Vb3X4bQD6qTW8PxMNZoJGQ==,type:str]
                  ports:
                    - containerPort: ENC[AES256_GCM,data:v625npQ=,iv:Md/2hxgGS8az40zRWpJdmoXdVpbuBLPmfMssKpQ7Pgo=,tag:BHM6z4oc84y0Uj84vdCqig==,type:int]
                      protocol: ENC[AES256_GCM,data:/5Pt,iv:guKzSn58bfj5cpkz/W7d9Svvw+//PHjLlC9RvdUvfjk=,tag:0bF2zfsRSItOAccn3ip+Cg==,type:str]
            restartPolicy: ENC[AES256_GCM,data:kIqiUtal,iv:1PYvD7B3U1wPUh9Bd2K3rbzpt9pryj4ziV9cvFcF1RA=,tag:iaBNoaKTUU8Mf4keEU6+Tw==,type:str]
            volumes:
                - name: ENC[AES256_GCM,data:60YRM/ytTGHzJyIP0PER5Q==,iv:O/9/XQS/GaKEqTVIWjNTSp2iaOJALKTMmLTlCMaSdzg=,tag:8WsEnVo2QzBke9HNppvemg==,type:str]
                  persistentVolumeClaim:
                    claimName: ENC[AES256_GCM,data:/AWlau3+w2h1ZQ7s/q5HJcr+vUk=,iv:peXXenBMtB2DI+KHnkJxcKDOZZwxbUXcQ84/fQ0reVU=,tag:7iNdfG11sbEIN9Iq6GWPRQ==,type:str]
                - name: ENC[AES256_GCM,data:M7wN1aDFMuyUSO26Fn3O1g==,iv:6Y74r5KfkpiOMebtdWWoEIiOZp8JjPrSyB8MtPM0oDI=,tag:eP8/yoD1xqVov/rewmQ+fg==,type:str]
                  secret:
                    secretName: ENC[AES256_GCM,data:anPTrrflII8zS0iGqZkmjYdEoZ4rtTI=,iv:4710kkqceHTNWDLvQnGK6RrufHqoyenjkQcN04N7LEc=,tag:mQcLoGDwEMhFmzfv/mPjFw==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSjJJQTBrNlMzeHJYaWtm
            anJYRVJRVC9XMUVISXVLcnp5NG5pbkR3M25VCkR3ZmhRMjhNU3A0d1ZmVzVtS2Ro
            VHhqeFJMemU5TG5vMU5CODhvNlptSTQKLS0tIDBKVGtBVmVMaW95T0lXQWJxVHhr
            SXBoWWJDV3ExWjJaVEpmTENKVlltNjAKCgILlpgoMh29sa70h+gshFbqHx0rFv1x
            LhRW57ZQcDnPiScaEkx28Et5b3EkgbeN7SyOb3f7vac4/lqo7/DDBA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:0vTswJO86N5CsY9LUupuch+ljpjULNMtHl0pidyn56vEUpM4b9QszrHiyODRvgnSDgfjTPXmJtr2IDPtbAMfi99nFtWQIhNUCSskGPLuZ+zJ9n8JCYtYDds+BWCOZwWvX3nzpdZFgWcmh6jggKDCcOK5SdZK6qyy7itr2O3p2Z4=,iv:j8UefpUkTYKP7U6wiY+elcdyyyVa8mUFxS8HOKW63Zw=,tag:m0KTK9GywTh9ygOh/CCmzg==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0