yeet pgp, rotate keys

12 files changed, 283 insertions, 323 deletions

diff --git a/.gitignore b/.gitignore
index b2be92b..d529b8a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 result
+.envrc
diff --git a/.sops.yaml b/.sops.yaml
index 3a89dd0..74029b9 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,5 +1,6 @@
 keys:
-  - &admin_oxa DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+  - &admin_frituurpan ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+  - &admin_toaster ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
   # hosts
   - &toaster age1x5cpzua9h9kz772d0udvlmvpmk688ua4fxjmmcqfm2rnpxsp5a5sn03r0z
   - &cloud age1j3xpuuqaph5z885er90mftfsu6g3hw4q469k37a3veqktwntzdpqgue4z5
@@ -15,61 +16,61 @@ keys:
 creation_rules:
   - path_regex: hosts/toaster/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *toaster
   - path_regex: hosts/cloud/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *cloud
   - path_regex: hosts/minime/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *minime
   - path_regex: hosts/auth/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *auth
   - path_regex: hosts/radicale/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *radicale
   - path_regex: hosts/immich/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *immich
   - path_regex: hosts/miniflux/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *miniflux
   - path_regex: hosts/forgejo/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *forgejo
   - path_regex: hosts/conduwuit/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *conduwuit
   - path_regex: hosts/stream/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *stream
diff --git a/hosts/auth/secrets.yaml b/hosts/auth/secrets.yaml
index 31051aa..87d2f31 100644
--- a/hosts/auth/secrets.yaml
+++ b/hosts/auth/secrets.yaml
@@ -3,42 +3,37 @@ authentik:
 wg:
     0xa-proxy: ENC[AES256_GCM,data:q6vpJZy1Cb54MhMRj0nm8QEX1a38S7Adxymex6gMtwkA6A9V3nLTHPfdJAc=,iv:EsRkUqrpUXoFVkZ8SGE2jp22SeqTlvBx8OTBCRxOjDA=,tag:JLv73iYYV6ZvJiODQOqfEQ==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBkSkFE
+            NXBuRDFSM2VPMThnUm5GUFE1dGMvc2lOZllEVlpxeEtWOVl0TWl3CnNzdzdwa281
+            QjlDcEYwQ2sybllRSnBOSDZiNE9manVNTGN6bzAxMkpka0UKLS0tIGRnVXRreENQ
+            QXE3STV3dk9vWTU5RldTRGRvSXhlMjZobHk3YUMvZmoraHcKVzGIc+T5EJFC5tPl
+            W2xBG90+KNHicTX/OkUg2qnUq3Kdbb4DVda/rYIfpjq5NzHP6G7csJvJYhVheive
+            wWGaYQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBtSGRU
+            TG4wMUVrSEpwRi9PZS9xRExEN2d0SkZLKy9XVHJRVFp2SzhWTDAwCllHczFyVnc1
+            eW9HMVRJTkh6M09JbzNnRGcxNjFuYnkyWUd5ZWRRL09YbFkKLS0tIHR4OWFnZGdY
+            WGMvdld3clZlUUZTa3l4VUcxN0NxVVZ5MnhuV0NEZHhnYjQKOcL30dTkKrxUAPWY
+            eJF58GBz4FPMJz2MDUj8UmO2IXQciV45nXSRrMXO0KspXr33N5fRKQcg2NH80wdV
+            iaiVrA==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1vzwz5s35w9g8ck9l5zaq5skrnl3mqzf3hsnc9w22sj4k8tu8kqfstpg2a8
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwaUZKenJGaDQ3WnNJNWtR
-            ODZVV0drWC9ZanJ2Z1h1UHN1RWh1UGxHQ1NjCmE0TEhYRVNBN1VhelA4aG1ldkkv
-            dXdCT1AxUVJzNEEwY0FMSGE4cWtja1EKLS0tIE0xVjM1Tk5taTRKeEpOMXM2Nml4
-            QjRNM3p4MnlIaThXUmpNL1oxajRtdDAKhMMdQ0rK7FL/CJc9BQci5HF2ByyjH812
-            JLNq2aOXPNsRn8p+EsDeAoJW4LXhyashxcCdRP0yJV5tEk2LIOvW7g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNXAxSDk3dVNRK01VdnZt
+            TDZWWVRFZmtzUzN3Nkh3azllRWhDenhRdDFjCjR1VnFGcWYybFhpME9pODh6OFFk
+            OUJLWTRvSFlKMEFzTEp3eHhoRXc2eUEKLS0tIFJIcXFCbTRVRUFsR05EaGJrS214
+            V2puZzZ4djZrMTRzZzdSL2c0aHpGd2cKAGr3Gac1BcKlmpYG9S1m7RgAsEZEFvHN
+            8Uf40hHABXEKB1LXo7D8CxxLWTU+w4LOLAblaG1Rcp/mM6NYvmxhFA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-21T00:19:40Z"
     mac: ENC[AES256_GCM,data:oqKBofuW0pUMjQ5vvKSj/DO4AqkZTRoDuD/KahzI9Q20Jyoj0lNTzxh872ngWdKhIizoB3yiWW9GUS0zWp8rj1yzwFmvvNXBnk2sWHbskDFIEgfom6jfmz7csmXQXaU0kFNEmTvyxnsTrhvdcETO6lZBTooFN955ECrcoxspsbA=,iv:JU7AtvTluophE0IIZJJiVvdpctxzkaWLFGwUWFcufvM=,tag:ro6Kf8QaFJq7wWtx9oOWBA==,type:str]
-    pgp:
-        - created_at: "2025-01-19T17:45:49Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ//QneFptbsF2rFz+nRFT6L/iVZflLVkDkTowGIIobs4xjp
-            UZlAxFYPuHeviyap3End5Db3IrCiAYka07NqNyTeHFAmqmfmYO/A3XPPSqa8Kzh1
-            g8+i/21a5ZrBOu/jItddDPCoEwoF6+B45Ce1TkjZUFZv+uQ2oMf2sF78YNwGP+Oc
-            PLTjONn6d+9gui7mQrXT0s9Wm0ggFHJNQ3alrNh8QOuofuhGmw22S+pLO1YLksc8
-            Rc43+hRmsGxf0YLcCgzR5qL92kPtBuTwE366Mk+/31/BHUvgJM7S17SqO5CWu1XQ
-            EYTrAkxgYMO/xJ2GX9ny8hnH1LbqdvlzL/YVU9vrlpLmZezsq5SNeOCT6cKC3/+/
-            IFf2yXVikTYPPxczE3StFERCEDW5nAsmbgW/pbPpiIOKCBVddUaMY9H8L/wY/VZX
-            Yu1zMLT+gpyJusZOOVPk2Z8s7Ln3upGFDbQ5gnd+TIWL+X2JdscMbynCZI2a0Pe2
-            66negRkpS62Ff24Y67v8moTvZzUFarbNazkMnaG6cHTHaEUGmo4oWPHu/oOzxt5r
-            JDSecqAl3bNzcLzsIVgnrAtwtH4o+ZD+exr4GXp6m8fuj8WvOABPRn6zbsCLfPfp
-            xSzL5ITfOKsux2clMnp60EqXoLQ4VXSw8dzBHe8HdArGBdeecp+httV5bjoWx1nS
-            XgEoyZOGEHOmNO3ywOE6dEOFP45QATd+ZU1aFCb1oIf/cr3ST8yQEGpxRxRY2xBO
-            OuLKUNt5NrNXGJNXWMj2zQSuHcIU/nMAclI/Kf+v343O7MYR2fGoCpdEM3ByegQ=
-            =6IaY
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.3
diff --git a/hosts/cloud/secrets.yaml b/hosts/cloud/secrets.yaml
index 358c144..b3adef1 100644
--- a/hosts/cloud/secrets.yaml
+++ b/hosts/cloud/secrets.yaml
@@ -2,42 +2,37 @@ wg:
     0xa-mgmt: ENC[AES256_GCM,data:Xbeo+c8F+0JcTEE/LICWH4tEiqyGwCJ7JJZhkWxNFgKC9hVD6t3sPDWcJ2U=,iv:B0cbrPHdr+eA6FebKL/UrJpE06yOi+nUeyZ7x+Y65go=,tag:yTgVkzSKVhYyNPauVdNZxg==,type:str]
     0xa-proxy: ENC[AES256_GCM,data:LAcfaMPF4IHPtWSUMH2OK/Ez2Ec3YBdtYUiRtu1ApWmww7IdnDze9inl5L4=,iv:NnNzSPfUqQFDoo21LRrlnuLZMzN2uIBBu85wlzOzrd4=,tag:U2Ama40ONwIlEO+hwJymbA==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyAzaUx1
+            Q296QWROem5hVGs5MStaaXgwZi9LSitWYnIxS1pyaUZOYTRCTmdzCjVnRzFVQmhl
+            b1ZVd1hHejdTc3lkZWx0MnZjM1N6Y0VOZzJYeTFmZkVxbkkKLS0tIFBVNU9oMlAv
+            TGJMT3JKMWpmQ2dGRmJ2YUhqa29RQWM2c1ZacS96NUZIWTgKEQiIYQzbdvY22hGJ
+            RhUBeuGDiROS+n9JSXT096gHnTTJhId0DHxSDwccSrDOMhDpxWCvSO2V9rvCZG5b
+            T9iHEA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBEREtu
+            eHJ3V3pYWk1Mb3hWR1QyMEJKb0IyUTRUOUxpUUN0QUhOTjQ1V1dzClhLeEQ5RFFr
+            WVZFTFRmbkRFWGFZaXdvelc0anBpb045VHlodE1mYU5iNzAKLS0tIGg0YzFxcUNL
+            Szg1N2Z6U2duamtxMVpPalZIcDNMaCtDRFpTZGJIN2VQTm8K2NgKC22pFaSfgE0W
+            1kvaKKbZoL4vDXAUEvA4T/QZrf1IzzEPU4v6jGISfBoYzzKnRU6D9CFfkKP4gndX
+            p8vypw==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1j3xpuuqaph5z885er90mftfsu6g3hw4q469k37a3veqktwntzdpqgue4z5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPTStCSnBiakNsbHFmaEFU
-            dEJYVjdMZ0NlSkcvQWNha2VPLzdjYmxETG13CitSUis4U0h2eWNnRGJBWlJkZkVm
-            OUJLdWI3K0txNFJHSER1NjZDdFQ4L0EKLS0tIEtmMytkeFRmeWtKd0RCaEprREVy
-            aC9tSTVrY0RFcys0LzZONXhhczNjckEK+3E6zeUkyikrZUD8WFkwWgldVfOez51y
-            EgDsxxynkRx7nX8ASne7pdP6e26hooVsrS2oWW45JXpuKkn0ELv7Xg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyS1BNVmVVOWJ5eVpMY0tY
+            WGlBV3dmM3hNdVRYTUxsMGpieEV2MC8xWW5jCjJUTGpjM2lSUm92T2oxdnZjOWV4
+            TVFPK3lwOEoxZXQ1aXRiYkRWaVFYQmsKLS0tIGprSzFMNjBlamhaZDRGN29oMWNw
+            bjNYRlpMc3kvZjlFSmdZZUc5WHFNSUUK5Z4G6eD/f4g/DBP8Otj1BdJYKJouL5qU
+            AczzFT79yvYCoXNAzADOGAj4QvrY2nWVrC+YaUlt4Mc2BSvmh+QU9A==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-11T17:28:20Z"
     mac: ENC[AES256_GCM,data:ihAoc4uJ6hjsUCVYbI1fzVoC1JfkMWGJYW4xE3AcKxdpkHqgvI/yLNY/awNTDowv5Cy3Ubw/dkocgszf1WThMLDkhWoZNWP1CcYtHp8Kc9moSnPxDutGXGVmCC30jTfG8DqmR0evtgBp4oqriW3trlHHuDyVGhYZeiplW4o9L1A=,iv:ggmE88UwdnKJn46fp81Mw7q56s2nGDssFwIrqCnfIRQ=,tag:Ejrmg/+hbAWbzXoygNJUpQ==,type:str]
-    pgp:
-        - created_at: "2025-01-11T01:25:31Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/9Ew7Ubwz4AQ4S/a3fD6jscD3bDFgTM7UbaIyIb9iNf4MI
-            j1IJtNVEVbLf7gg/CVeRZaD1OzRB8LYWkkVwco7JPsSygtRA4ntVBUTpZfpCKD5R
-            Z2CvamM1Lzkap4Yk1oYWAbOtKp/8mZsjlKv9+Xaf/XuHXg06ZumThtQBxGBVOMSX
-            v+ClGxUY7nYSOf+jrqcfyq/zCCyD19AmMw/DfpqJ9w4x6mQ2T4yiQz+FugXDVqHI
-            LCaiyCvg96Jk/5zega0ePtXOKFaBPgSi+0sWuvoLIbCTbLJKGOliWfyQhMLit/XB
-            BjV7McHIgNpwQ9E+TX20GEVCukQDmL8LiB5DVPaOxiFzT7ZVWUU60BrM04RBZA5f
-            DYm9a9njaZ76L67VGyS1WiHmfKMIYWQanLattsMpBs3kH6YoRVLDEN44LXVHq3gJ
-            gcQj6piT+GyKdrmCP0J5KznvK7UGUF1L/blEZMl4x47K2La+ehlBT7V1AAMf0Pjp
-            VlstcqFVJAaYl/Y/+jiHvgTgazSuWQWlhjfjMn/gbvEKfnVf154AHGbM6xsytTya
-            hgBgrU+Dtow0IIgcHEofDuAYgQG33w/WQwOG3aeCIG3gRr5nt8rfEd8kYxaRgsLN
-            PzCIB2h7Nz4BVoPxIYqajA4D0XYRtZt0/akqXk+sbEwdY92Qrt9nJ5pBUMTpYSHS
-            XAGflfE1sdOQvDiKsftF+3V1MBzrm3qhoz9XIP/X0x1CktgJHK41lz7nEzXWu5Fg
-            G+OhkAN27nNOgyaHq5AGVkE+XpsXqUNzV/gH/cmyqd2MJ2KCzb5+MqGPNsv6
-            =x2MX
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.2
diff --git a/hosts/conduwuit/secrets.yaml b/hosts/conduwuit/secrets.yaml
index bf1f154..452ca16 100644
--- a/hosts/conduwuit/secrets.yaml
+++ b/hosts/conduwuit/secrets.yaml
@@ -1,42 +1,37 @@
 wg:
     0xa-proxy: ENC[AES256_GCM,data:e09UIAn928uOf6asUaFSg0VDoeShWGyd1c5gF0O0nwVEk/1ldVvaIyWMcwk=,iv:FS+LAI0S5XOOQO4WVpNfEUIxYHGY1YT6mITh8FpSiZU=,tag:1eM6wN98D3Bz0XlikCu5Gg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBQYXJG
+            Z2xYL1IvY1V5RDA3MDZCMWpXWEFiOHovNllZRVB0TlVlN1pwdFg0CjlqN2ZsSzNq
+            VjhnMGpjT0lmSTk4NHV1aXNvYlJTUEFZTi81TWpVVVRFZWsKLS0tIGpmYUFsc0tM
+            MHFqNHdiMnFzUXp6WitBcUZmaTJoVHN4cGpucE9mQ25NVkUKz3MfVWhDdViyVW2k
+            9EaCQbmTQoK3ilVKtG2KPynVXMaHVCg5NXtKqwdXwnHM5SaQIYONLNWGoj6B0Sz5
+            jFUKPQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBRQzhN
+            dDVuY1JJQzFjOHViaThSUU9ucUVlY1A0cS9aMWgydE1EN01VWlRFCml4N2pubVhv
+            ajlvOHp2SkdQM2xpMjBwd2dFbzN0b250Q2VMeVZTcUM3TW8KLS0tIFVySVVKQWR4
+            QnFCNExIZEtZakwzekFORjRINlpSdjFYNDJyVDF4OUd0Nk0KhqX2zSNmS9iv5PmA
+            0zgy/OnXxzVQ4tfht0jNyqw1BFLxgCoPL7UPguBhD0yEeD1SAnmOQfx5sIw4yOmp
+            MP3elw==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1vd78txz0chk8sum3tceamg7u6enzcclh3vnpjswyrmarvmdmp46qdx7mqt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1akxzWFkzSWJYYk4raFlI
-            ZStVb1RaV1JUZFNZNlFvQUFmeWwrdDBjSFhrCmpuMmFrUWpXNkdwRThJamcrVGRD
-            NU41VkRwWEJ3TnhYMmt2UFZMemZDZ28KLS0tIDl6bzJXNkd2SjVldDltNDZWS1ZX
-            ZU9oZVVSQkwzWHE0ODNZbmtuNnRuQjAKP2zLzUDCe2aZKVzLjPloqirNyac7UcwX
-            q/hHXH/v0HPjCbjfbleEqN9g0r4RiaHVscpl/viaoIAnAlQcrtj6UQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWdmtVQWZQOUFjbVlIWXdL
+            UFBRNTNobWFuSGtRc0ViL2VpYVgzem1lY1hRClpOWmVZUXhIcDFnanZPa1R2V0Zj
+            Zi92T0JuamZIMlpSWDVMZnVJcmRoMzgKLS0tIFNrQTV4NloxUFY3cHlRd3VUVTFN
+            TUE1eG1QN3F0YjNIYXI0cURSWDRHemcKm/ATwZaK3inWv16CqxfNkYI4SuZUwxc3
+            o6kuJgUr5AHy5LhFZebhBxJZPxlG20D4Ib4FD3kqrqXZyPy4I+0g6g==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-05T20:41:18Z"
     mac: ENC[AES256_GCM,data:LPaVDxkZF3hlDIemauZpGngWspGzLINuhI4UIdP1+vP5gX0EBVhpZWty9wCSfJEeuU1ycKPJFAok0A3hgLbXQdjlvTxW/ba5g3hvVHEoyCXPrOPZiEK2EsFZRaM99tMOijBODVHkGhRY2O0sms0OLs+oQg6A+9fe14+dZxoUjWw=,iv:spAY8/Ghs8XhbNgKB8NQILC/qC8tBPiInnOOzfnuxZI=,tag:cLAmIvb4p0Sz2IIEk98/rg==,type:str]
-    pgp:
-        - created_at: "2025-02-05T20:40:53Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/7BZQnlte11FqJkoLZWL8zZzou73zSLspXn1QJNYs0aQck
-            PhFbsuDvmyGWucvcyHTSuTUpcKMchGeClB5ebCLRzmc8FpFF149XTk+PtHx3P+W9
-            CfuokL2CX6oP6xGg4+yVOPt3fY8KzMXUcCJt7Jm9u18M9WGxAHIdfWlDCAnTC1b2
-            LnaOLeq9Azaz6QHn4DxGnNUI26HYa+fL7BzprqaSNlSoMm6A3kYttjw64oGE4Xom
-            qSgXariWdVxzjHevabj0rdMkSWM06q3B50Ug0oaaS1GChPiFDxM0ihngbKRgysfW
-            uws3FyUwWgDD2/jA4ocKlNkNOfynf252rnnDdn5AjzMsUXsPcTsJZbOLG8KCymmf
-            c8abr6fEi6TBbTAJaf2xEIL0mJHkiokYVh5gRCYSue9lGZm8n6yvIDxssJuwjBE5
-            KktSbfWBInskoIHpmqcOAzJT11sxLv5Em3leU69rtuwv8SGo+4pbifvzF6rdjx8j
-            /qLElqKJUnugyLuXnFDJeIOYZkEmUUAOflVT/yCsVUgUvb6hjwZlegDdyQ3Ph7Ic
-            PibWs01ShaC4KKrq6Yk0n1c64SP+CsiCDGuVxLMrlMbRThyJtzWgS/3h9kH6rrCo
-            4x7q6uM1B9+L3wn+uuObtxKF4feYv3bNvPCagOl8IIXk1Af88B1KPyGTnamrAcbS
-            XgFserwnAQbEXt0hE7CQWeo1W8rw3EUptBnuVqz5Um/yaDT+flgwFx6BpNHIGz+l
-            Od8iOIC/6UCGGS+6nNnz0bprvbuc7Ltfifv16Tpwb8Gsvse3lX8okwPVBNOQUrs=
-            =/7Ff
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.4
diff --git a/hosts/forgejo/secrets.yaml b/hosts/forgejo/secrets.yaml
index 1bcf0a0..a3d42af 100644
--- a/hosts/forgejo/secrets.yaml
+++ b/hosts/forgejo/secrets.yaml
@@ -1,42 +1,37 @@
 wg:
     0xa-proxy: ENC[AES256_GCM,data:DZB/1S2Ev71DbnN+8C/K0mjIf/13Ki1f6vOIOdhsS6qyXKr5OwpbNb9KA0k=,iv:Gnd32DRJtP8LsC1P9GyS98oCLq/MBSCNcxrZngVXF6g=,tag:gyrzJOx9CS+1Kw5JRONIAw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyB2OXBT
+            QkRaOERCYmJPdTViMXBqc2FUbGUxZjNkNmlqa2pCQzZ5R1JYT2xjCm51THQ2cTMx
+            WkV6b2QvWmQ0SHo5Sk0xTFB3NHpXUVRuWExzcy9wQUNQdUEKLS0tIGpvRnFRbUpy
+            Q3pqbGszM2p1eXFueTF3YXh4T1hzV0ZnOXdYODFRZ0JQcEkKZfPbYqMxfD1Qvu31
+            F7nESte4mN8YtUPnMTWHR0uNXWeUBAW2l/pjOOH40B8xHwmG/+4jv5fBVQJc2GKr
+            9REjvg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBjRU9t
+            MWRoTEFsSFpUb1F4Mis5U0o4N3BldzlkSU53L3EwVTdkY2ZnUkZFCldvTmRNbjhD
+            eERYOTVob1o1c2xyVzNlbHd6ak5mbnk3dHc5YTB5SXNuR2cKLS0tIGpMRnRORy9k
+            N1F6a2lsQ2JCTFVHTXFtRTRJZHlUL1ZwVXhhNE9PUm15QlEK7Udv/Nx6FKfhjkBs
+            /hLzhzbZ3lwjexNhuyER+rpeZ70LtYmKm8EpcVnPdP3H0w5kyVyK31gv4iabpAUv
+            vNW+Wg==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1gknaqevzuq7dtqalng3547w5qflk9a0kugymea5h54eg6twu43pqpkr4zt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyV0ttcmFIeWtCdTFuS0Y1
-            ZzZHdUJmZ3ZlaUx3d0x5NGVaLzhXZjdtZHk4CkprNUZ5VThydVJ2dTBCdE5OQS8z
-            c0VtY1Vmd2N3bThEdDBFZWMxUC83RXMKLS0tIFluRjRrNG1Qam9MSjVvUWJjbHdq
-            VVRSM2JuOHpTYXRmOVRRSUN0NzlZeDQKcZ6ym4DTJqZjRpAUcWBcYXR/nVYZzhLx
-            vhtZzCmaQc2qYSVtDZE51N3cTqPWJD+l/cr8zp2lo0GCfNWO6BQthg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByT05nL1Vla1k5S0VpVzY2
+            ZXgvOHlycnljMFYrb1g4ZGI0YTBzMytTZWxVCmNKRW9LWld5enNyL2lKVEQyZFlw
+            RUVOQlFsOXFvaW91VUJUS0w4RWR2ZW8KLS0tIHVpVU8waXVYY1hKTHhneVV5NlVD
+            TnQ3SFFsd2ZYdlRhQ2MyNzV6SzZJS3MKlAJNMzDPlxBYcyl/AyvApsq825FnOS1s
+            Etv58L70JbhMgOuJY6tu/4uBAQd2dLphTb8lm4slAQxxtp40pXZ3IA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-03T18:25:04Z"
     mac: ENC[AES256_GCM,data:sSG52AUXjzVo5klAx+t9rhWn/alKAETF6bPUSYP5Dz7WH3vcY5bs87RCm+BdxzlueHMTn4HBQ5iZ2V4e34403GPJsQMYgWSkKapbWGBRurT0xBO5aCJhxZWpvjFSPdehOGNODKGtYFgBVd81PwZRWFdx3MrkwIItyYEq4TAtIyI=,iv:p+t0QmQKDaSiwtuHfLzR31AzmmS39NFq1nn1BAG5YTk=,tag:FSm77zDvPbHCarkGZCgtmg==,type:str]
-    pgp:
-        - created_at: "2025-02-03T18:24:33Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ//fcUVRBuEFENKNck1l2/QVMIRwfZzxJO5fMy/r0GQzKiR
-            Nl9X4z0HGcxlCwfiUImif1UtQdMWs1RCXQ7HtFK8kKyNgIb07y5306TI/dmkhbP7
-            nWD0EstGEgbSiVGiFRlT/gy4FIVyKhBPxJqfT/dbAuRZb7NXsl8Rv1fsnZZFcJMu
-            MKO1S3DivJUS/YVXteoRf3T5DLobSpO7/5ok5LUXuuSpYKk20hUxFdJqhv1hsljZ
-            kjckGJ2L0OlxVz16nmg8Z1QI0jDfN6dLl/X+di3U2VACDQDMF+K9LCPLfAm295Y5
-            TAtPSv/yE5os9crJ+MCVKHbEI11Khe3mfdRWvVboVZP6jXoD4ZTe/ccXLZCN8pgE
-            KdSZWs/L2Ps66KYuxujk/c8khmmrmLpPk0qJo9zW0mAf9TSC8UPnMYAxbroeijIe
-            PVYOJS2AzySnRtXQY4MBPLqzlQ0tKf8HxaCBpZ6eCMsX0/9IDjJJOhCMuMavL+oJ
-            DnNQQwtSDXAtXcgvwIccEMzawjyPMS5QBx0hYuH8t0rSJtCYutk2op6yKb1vWmOq
-            5EDksdNevT3QzGesjtPErh6s3hu3YUAM2k2h4MqXVCbFdchA//FBIHequPul+UMm
-            JMLsPLAk2FmtWAiOuXxdCPtoY7Jnd8Ziqiemhd961WTiWrCtsv7NSn7x4PIMeLfS
-            XgFpMQ+15G4NNCDpgJWGUUXc1H+OKj3XepY5EoONnhusT/gJAtxT9vnuJ+T9LDTt
-            a0Ye2g3jxugeupJ58vbZUifHy/B0OtSeXKkRHZuycCJd3bzxzNxpXLJ23ds40JA=
-            =/5W1
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.4
diff --git a/hosts/immich/secrets.yaml b/hosts/immich/secrets.yaml
index 5639aa7..45637d4 100644
--- a/hosts/immich/secrets.yaml
+++ b/hosts/immich/secrets.yaml
@@ -1,42 +1,37 @@
 wg:
     0xa-proxy: ENC[AES256_GCM,data:4sJGq0MnoKwca2/CHGDzjxqNK9UH2lxByt/xZzhYVzgsmpjl8J5HLbb/xvY=,iv:SOlqtNMxlSp18AQ1j+B9xA8R+0xURkmrtgnACvG4n8s=,tag:5ittu905Pz6go/Otm5ZrBQ==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBxbGRo
+            emhsNnkrYm8vNWhObGNVQnRJb1BaTzdrbDRmUktYMjRXSGlLQlVnCkd6dHR6Umpt
+            SXU4TzVMVWxYbDFIcEZPaUVjQURYQStjL1FKdnlXUGxZSlUKLS0tIE9yMEI4bEkw
+            aVl5Vm9FQUZjZWZIUEZVcTE4OWpUS0VEU1NVMjBvNmNDemMKXSDvFyMt+CiQj+Mo
+            WMWtregXZ2jMYk8Z9bJDeGQvymJxoUf98qvaTYSDXs1kCvVBrrOToGYHXwZ9j0cf
+            Uyib0A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSB2WXNs
+            dkdyZmtHYU9TYU1LQTNOUk9WYi92NFdBa1ljYll0ZVhGQVQ3WUJNCndCMkZPUmVq
+            SEhxS25KTEJoS0RPb3lVNVJhUXl0dnkyc0xzUDROazRVM0kKLS0tIEorVnZYbTVa
+            dkZwWWJhNnJUSGVqMXVJZHFmSGRKYmVXUWRWOGVEbnV2cUUKP4Nuqb4O7kP1okS5
+            9AbA9GC/eu7jXdXQeboEDY40U1yl+nZoCc0PcP5kXKGiMycP/4eaJtyTWVOCAFHq
+            4aYVOg==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1afyntwvj672lcq2e4dpxmw3syplzurnnd8q8j3265843jeedpveqkp465z
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiU3BSLzg3c2FMMjlnNDgw
-            RktIM1FyakRzNURLdHpYcmNudW9BT0JlQmpjCjg2WEE1SFBxWlQzeTdmOGZhSGwr
-            cHRaT0FJcnN6TTJtYXFEeFM0RlNRNVkKLS0tIGoyKzRhdDRPRlBJZzJ0M2IwdGZN
-            eUVaVTdsMHJRRVA4WjNCTjYySlo3UlUKFph90mF2p5fclE8AuYvWbDrWXLIJO5gL
-            tI6pCM+fmY4WQoDTIAfSyXOSF0x29JYPfnIFCtnmYM/0ILzSDyWpGw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6eWFzdE05aCtjQkhZU2V5
+            Y3VtRURLbWp3M0NOcG95L09SZktvbHFUNDNvCkVoM3kxYjFRTkw3SU1ZSkFqOUwr
+            ZHV0R1lNbVdaek5rRXlTODU1N3RCUm8KLS0tIEVYZHVrK0dGTFh6YmQxU09Hd3Az
+            SXB2bTJQYzRVZ3AwWXdlUjhJRUJWMG8KObHGuGc9xuGGsJhrD7SztKDxMmT28OnA
+            QtM7P1hEEtlC9uxvB6OXGRstHN7WRBj66hkEObuKuCJepTQE1pMV9w==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-21T17:43:24Z"
     mac: ENC[AES256_GCM,data:oSaH4N4EDusCP76dupUzPMzNLZtqUHhmBHdA6sVkwx3kJilj/U+fQjLuBwD2XMxM5Z194yKnSzT+ZCP9b0V0NiOQyVp/ry/e3Hgs3aW0NPAFBPF126/iYts5fenDdonFO9Z85ge8ovorLVrziXLP6QQYCvfJdwh/p4faJdtkhWo=,iv:N7qCXhJFHyw8WNTATXlcwgGHh3d4i3Vr7fABOo8L4P0=,tag:4pZmCPrWxI6NkqkixgLHDg==,type:str]
-    pgp:
-        - created_at: "2025-01-21T17:42:17Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/8Df3Q3j5ibjLMxw+n4qekGsL9Mc1o+T36GS8rTsSh8AYw
-            J+Ezh/D/q27lnqMxf5l81yeni6bFDPcDiVw3lquhvAm+8xmsM8NAh+HCGYkLN4y4
-            Ce3eHKAlR4q9ygfXggvbdddKLGz2PPmKgBJhSyaKVhcCGQMAsCrJOT2j9WgjcJg/
-            vkaaKVViFmlszwhoF7x/tgK6Pgrb3LDMcoeMu4vrLKqth2VrHpsGZ2WQ0YaS/njB
-            A83bAefTkoaY2g3INDo5RPs5Dv4kwOVg7Qyl6+8TD0FWs/T1lObjWS0Z2OfOoMX5
-            R9k+BZmj2WObx/+yRe+pqsRMWqiE89ABjDdoP+0md1q4UTly78P1gQi6OZ0EpIaI
-            Gw4QnZxCvWX/e1iJ47xMCq7Qpa+jmljGjQ2b6Vf3WmkEZLUdKnj5aUppRxLYrTgS
-            7eYNySEOXUBfI9CIwlP8qMM8XC63gJ8LqP8H6bHoqo1yHiDBET8FBMHZfxOxQUcM
-            mCmrUIj+k1C4Q/6z2GkC9LcZqbQ6NTDeGbWbQslVGX9FFjGtlGQ21v3eOU9yT0I2
-            RCpIhCjdQuxTdAVoawrMpURmUr5mdpSavjHc1PnWTldC0ugzJAXeOHh7l5vZI6Wh
-            R4vPUOxz+nHyGCeb3pETf0S2X/P7Lp97y7v2r2Jtn8L7EPkSt0sJQDpLoSW0JcPS
-            XgHdusbP/tkBfkzkyybGkvUxiLSxUbn5HoRAC71P505snUOq2FivpNNUQLS6Un+B
-            FMHHfMmE/yymeXMsbcKHPfE9D3NdChPZM9EysmqubxPVAHRxZmpdYudne4Qn90o=
-            =rEC+
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.3
diff --git a/hosts/miniflux/secrets.yaml b/hosts/miniflux/secrets.yaml
index 30143fb..39cb3b9 100644
--- a/hosts/miniflux/secrets.yaml
+++ b/hosts/miniflux/secrets.yaml
@@ -2,42 +2,37 @@ wg:
     0xa-proxy: ENC[AES256_GCM,data:v8YxaUUnPuNAUU+3zvy5UzxNNMztaq5q1zli20JkAFdbgN+6SXzJeBcxs7M=,iv:0iPIrKtZzgxMMy2S+zLhEumitEEm8go1pfaN9D/e5C8=,tag:pw6DZFiFaL7skPxfUAGZ/A==,type:str]
 miniflux: ENC[AES256_GCM,data:KggPU65HAQbkBwebFw/CibolkenAUfZacz0tXruHQhExMwuHALOuxVVeATjp6nQoNfa3XNYN5w9EPhNWwvx0k98o7vxdg1pCQs1zu7UM9QiFykwYNlZQcbTMvBCoZkPwcjukvIwW25WrwDQREPv84kL7HvXPg6J8lM4x4WMbxW2t2qDjOt4SQE7bbXHZOliAW0YYb9KG8V2Mcg7GnPL/aWv7t0qur3ZACR0GgVFJIV90+qtVmr8wsOo60TtwDxOXkLFeHDdH67LxqQWry6v9RQ==,iv:Sv62ohd8tY9SMC/i3W4o/QP59Ka7w/5kk+R0Rhu3X0E=,tag:a5Ksf6V/lmLcqLZa4Qo+7Q==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBZcEJZ
+            cTFGMmhjN29zWHQ4WURmWXgzZEZkRml0a0F0Y2dKU3ppcEJmd1FnCkdOYk5ObEFI
+            QWFHT3MrQlI2TkVEd1VYOVcwbjM5Z0xpV1BsUmExd3J2STgKLS0tIDVnemRKc01X
+            ekxGS0NLYjZLMm9UVm5Zc2NZY0hxSFNtRGlJYlpBZk0zQW8Kzv4W9yy8qWP4EQbr
+            KA4BncMHEWQ6xcnD1l3iFHIUeG8EqvH3N3eOZ/8OrPfZDkYHcbVMmtmQl5sDOv9P
+            3b+TwA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSAzZWJj
+            YVBnYmNqV1drdDhIMnpBTE9BVCtpcmRvUVJkSHU5clNkNVBhaFJBCnlsU2M0Z0tl
+            dE53V0graVBMNTVQT0o4bDVueGtQUkM1aGJzMUFEbVVmd3MKLS0tIE51SkdYNWVa
+            SFo0K00wUXRhaXI0Tkw0SnlhZ01oRExkcVAwWkovblplY2MKp+F3ai1mKWgHVjx8
+            Qr72eoyQJ4+OjzKV1eqGNGLqb8H+qP6ynAQeLpQuhs/rLUxM/nZy47uPE5mllIoN
+            4/39SQ==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age15ja22wd9tt60vn32sk59pp6c7vtjsn8y3rypn8qfnvxthug8sp0q6f72uh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ejVOQXZ6UExVbkFLdkhT
-            TTN0TEFIYWJGUnNGekhWT2J2RjhabVN6M204CnRWcGdNWHFhcVNIT05WYzBGVThT
-            bzR4VjF5V2gvNWZaYi9iN0ZQa1R0ejgKLS0tIGJxVVRxNUd6d0hxT2tZaVdVU1Rn
-            NXh3QWYrMkFhdzV4bE9GY09nTzJUclUKwXlC3R+A2cdk8Q9vzceA2FMSBtfu0SZU
-            x32/tjQvRE7B/nsZHP3BSq0DXoTTtE1huNPHcvy0CC28HhNPsmFUNQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQjNONFc0T1JxSHB6S0F5
+            bWVZQzlyZXY3VmRWNllWL29jNEVXNWxoeGlZCkdtOFRCakd5bVFTSzVlVFpFV3M5
+            VmlWRFV5U0F5QXZwMU9IT3NWeWx1cjQKLS0tIEpwaVdZVTA1ZzllbE9YOFZvMVdS
+            ZU1pN0pLZTRXb0NKNFlWakY1L0x0ZHMKMmhFFufDWZMPxjB9eIf0rJmdIzabQWKk
+            4NcZwriNtTHRPKnqHF/eoV7jOjN17A9mzz1Ln1LZDwFg5iFtIrjNYw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-25T01:09:45Z"
     mac: ENC[AES256_GCM,data:euRvs3gMaxqcTzDhacFdBVPprggN0eNki0g7BKuCr85se52CzpSCj13OF5LJE4Wl3vVOuGbpOsGUKjKKHANGddgPRPvs+zGYKrtcI1fYLE7XJXm5CwxvCcnTqmDCx+8WtXLhFhXVTCXOOx3miB03IC+i8kdZ0LLTTig2oWEFxZo=,iv:tVZPvRsX0XTwBxjuKCP8mGCMmKWTjFKUTMdCgddM9SE=,tag:AywLDckO/ZjORRXxbjQ14w==,type:str]
-    pgp:
-        - created_at: "2025-01-24T22:21:30Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ//buLyt9yBVQr+fQLoBG6kYp3UIxvgklWtnBZQ8/QjXE8r
-            QsTJ0VLLhmb70Thrc/0OC29z6ddsroIogUBT8tFtyhZZ7aKc8NGVA/7c0/C5Vi7i
-            FazyogLOcMeN+E069XgVOJ5xQ7WINJgV1l3I9G0C4OKlwkfEVTcV7kdMlAjpmY47
-            7rSLYjV2lUw6xN90dQ71BWNLHMJL9wDC8R3QbMw2X1/Xocgm8WS3b7A4jWUpPn9U
-            eN4KJ6ITWVo79moBcFUn8/J26lZ2SfdVZiYehR8yaeSD5OPUkkZ/+YsoUKBR2Kkd
-            debCc/KkmL+cQzUonLHnjoKSod6oCzK77O7f5YuPW7vmbnZGsxw8FCUPXStC3bT/
-            lMZva22SBrTp2drfWk8E/SnM5WlseObBa/pFC2RWXq8aYsBScVnwnbMzN3W1c8oq
-            aCyZKYONLmOVnBVX46xrZZ4EgpEBOzR+m+Jbed1DB03Nfm1HB3llF01xxkKVv94H
-            soGnyu3Z1PfPtzAOCLTPuZV5k4whMjuGbusiuHH9jzwth07FyUP+cG59Qsh7gibx
-            pV6APc5EMPsYuH1GMIppSnLc+QospcAY5jagtN8mOebyKlMlc5kpcPWhIkAmHVuk
-            GgqCGO32W49EZA+A5VBzq+smy5QqdStgT6oVnrEfhRAsZncK/ffiXtWlMI/ASijS
-            XAFUIG3CWMs224S+F+3kQcwLaeVN2liRNQJSdzI5SSFUALigS3kgbGKeBj9LX+Gp
-            yLV6Nx2xPX7Epf59397LAyK7lDI7YXeoWTRzCkbnYKXJl+sDsg56V5xzzHEm
-            =XnHE
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.2
diff --git a/hosts/minime/secrets.yaml b/hosts/minime/secrets.yaml
index 93275ec..0a7e03a 100644
--- a/hosts/minime/secrets.yaml
+++ b/hosts/minime/secrets.yaml
@@ -1,42 +1,37 @@
 wg:
     0xa-mgmt: ENC[AES256_GCM,data:ki7/S+BA3vXtv9FcHcfLvcLW7Gm8/88RiIeHUryrJHdRo3MeGAa/sFGSPp8=,iv:bsfjP2Le69u4MMA3ZzWJL0chmg9OD0hjSLRgdse1aJo=,tag:l6NNLzdpaKeX1/R52phaGw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBuVDhZ
+            MmpQSm9XWTdjbGpBUVdFQ0ZIMzU1UjZYSTJ4QlRpRVdlOFNqcFM0CjFkeWh5S0Ez
+            TGNRaXhwNjd5UXUvMTcrUDBia09RNnppRzVGOEdPL0ttVU0KLS0tIDFlVDdWTnB5
+            TEphTWlXY3JjaEpVU1BkTnAwM0NIdVQ4c3RwUGludENHR0EKyixz9cdriUL8XIbm
+            9g+0zOF4hIMerjH93qBoebba/+bGyH1fKjYhL2hyLdBw/f1/YolkJ4uhBNHRGTa8
+            nMk5Ww==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSAxSW9x
+            dDhWbkRQeXBEdlIzUzZoYmRRd2VwVVVPb0JYTXRiS2dKM3ZTYnpJCkRJRmwvZVZy
+            L2x3RkNETklTM1F0UTB0dHRwTHdpWmJPZTNlMjNIZ2pmd3MKLS0tIDI5c3lBSmRj
+            bU01cDFhVnVDVVpPTk5XbHM5WFlaZ3ZmbkJYVVJ3alJqQ00KU/+FS3TmhFdrDRCh
+            7HPMnHBZMB3GnVmF3FAJfMRMjXPNGwBtKBGnKIFjCnb0HZmeNV2AZzNDwFXsNuxw
+            IYAQVA==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1chq5k0t38882rtyljez8cwmvtcstu4tafzvveuhjrujvsqk72f9s9guc06
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKUTdwRzk4anJPTTMvOFk3
-            MXBTQTdLTTVXcklPL1VHeERrTTZTQUVNeTB3ClFWWmt1dy84VUhaSWlOcnBDZ1VU
-            STNKbVZTRVcrWC94WWtrV0ppL2ZDSVkKLS0tIDRxT0twSHUxN1dvcUJPb1F2aXBv
-            Y1hHaWlQVzdnbjlHeEgxTjdMNkpSM2sK41qX3+ggD5PSm4lR8kka3roYmiLco/55
-            HIHxHZhw1K+FaHGy2DxeGmXi8gnVSA5oyihqvAn7PDPi/L3sB0dLuQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTMmc3M0xGczYwUmEzYTN5
+            M1RiRFJrR212eCtxdVg4bUJyS1NoSTRqdFhvCjRMTCtRZHMxeVVzRERIMG1OMkU5
+            TnlnSVpLam9CU0V5K1NJUU04RnlKOVUKLS0tIGozVmU1ZmJSaHNmeFpsMmhyM2dP
+            dlBJQlI5VTNXZEVkbVI1VjFwN3VYb2MKgkzKDsqjYM2LaYUIOYRo5Ax3l4BgnG8+
+            SO15/0LmZtIJ7bQt1n2L4xoYG5rnusNPvJQvkeeTBAXTiPxxC/eULg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-11T01:29:33Z"
     mac: ENC[AES256_GCM,data:h7PY7X5uIykwnnocTU/cUQrZB0cRUgjY0cG6XeQelwZXPcPUDalptT0uim/E9xs9cUV2OepMYu+Wf1+YoRNHjsl5GZ6SgY8KxlJM6P37VY5h0L5a6HXTIJnr1Z5KeMZgh0c8kXBQNsn0YTWGI0OcFlpLlWsDNtJlupqlVbK82qo=,iv:P8TDZOJnVNK7ETD1pbJMrtGnDfSH52o9/dUVRIV/Yzc=,tag:lGD0h7am7rumn3PvRoWhdA==,type:str]
-    pgp:
-        - created_at: "2025-01-11T01:27:13Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/8CuvFPV+eO0SG3zNZLsy/DNeqLDnMRJen/qOwXspjCSzI
-            mwl3Npdp1d9sX1MJYUvMZDby/EArrIs2MSkk9iAKLPTHf14ZxJfYTYbhRUn/SNuK
-            JJBj/hEL4GoOFNkEjUC53ywSpplP6TO+q7k48kYzPXuCA2EMBz2MHRbeiTdztRJv
-            r1dhpwNGwvcAWNLbEeqOgceYpQ6F3ou+FDI8W7873LMoUAXinN6I3f7XKP8ew/N4
-            8OOgvhfZOQqAaTqAaaz3ILQzrMTUzPM7cvYbtYL87OKYeezxgOmZhBmg6d62q4fD
-            lTc28GpMx0Xxycir8CImpcHL43J8b3WuYehk934tInaWH68TxvRAgvS9ZuMa1KhX
-            cVFFCwZAxnJZF0gbcE9OZCgI2VSH8u7Iys8mPwsEvUJtbDN4Qb+TpBaD+xxg6xBk
-            HGqxDeT9Lybzsn2wTxjUUfiwFZyDeYRlcU+UyGJzLQcPNvSaHWcwWKfRtBE4VNE0
-            8jwopfWE7pVYvABXC8hGLhYKT8OwIPzRWuXoDhw61XiMDnkN71afZLbpExi77lE6
-            39Wizb3KhRLbPdwPquwS2QLNIY/3gjGW1Ml4Hy0WC6S4MeCo9gOsdLJ+j7GeEA9Z
-            wtiy5LPHhYZuw81gzmDWsBvLAsPEWLHBdHsSZucaOPozMeS2VCglL6EH6liECkXS
-            XgGPtg8IY+YtmkX9maGKOz+GUsEVaQV7RhQfPxJSZrEyRb2SwEKHmuBROQFXgNdd
-            obcZeQQWizccZZO00ojD8K38MFf4m9WKePcNoV5iMvDzq2xISgFe8LW2osTf2BI=
-            =QTzx
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.2
diff --git a/hosts/radicale/secrets.yaml b/hosts/radicale/secrets.yaml
index cbf99ff..eaea8e0 100644
--- a/hosts/radicale/secrets.yaml
+++ b/hosts/radicale/secrets.yaml
@@ -1,42 +1,37 @@
 wg:
     0xa-proxy: ENC[AES256_GCM,data:am8oeEjo7QUJp7lutrBgUovOW2GXf4tS7KUhcZKTiSt6ilk9FVXnG9AYCSE=,iv:Ra/aZI+d9ozGW4lv2lCVXaL7Kc5+xDvUtAAEeX+SZ0Q=,tag:WqRN0llEoXQkaSzNVEaPUA==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBTVzRY
+            L3J5S0ZJcFR4TXQzZE9FbURJTG1UREVEQmMvOVBRbnl2TlFOR1U4CkxZUEZxalIy
+            K0lLYzUzZDRBbVlhNjVMcCt3TTkya0xzQmxmS29qYUp3VzQKLS0tIHM0UU5od1pL
+            aFZDOGorQzA2bnhsb3ZjWGQzNHZoakhDdWcyTldqVXpHczAKpz7I7nyegOZAR23M
+            J/hCBRLgPL4F9nlHZtkNrKUsuXY9ImWmoZNT5CxaCHiLt1m2LUHmquUVN/oSAmny
+            Fz5qaw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBqcWdS
+            T09hUWFCRjQ4bWVUZTFwTVlhcUhabmtuSjhwWWloN3VoZWtEaTBFCk41OWZPU2tY
+            QU9HdFIyYzdVUDZpTFE5cE1VSTI1TVpqcFJhZzlKL2k4eXMKLS0tIE9QaHA0WHox
+            a2F2VCtpRW8xRXA1dXlGSTRjMDBPc0MwQlRscWY5VExJVkkKWfwsMGjQfafj5Xlw
+            0wZgUX23Q+ggvNun/ZBssu1hJtqqIYmYgS5/j2EJrMSxkpFyJFpAUO5bLZpimt3W
+            rR+Dog==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1j6z39kmnxkqa7jdcjsydy5cryjce7fttf225fh3pldyvq06ax3fq58mk8c
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlZ09mS0hNQnFFb1BIdWxp
-            Q3VOandrbm9Yc3BzQ0Qxc2xocE5RMHhmR2d3CjI0dEZhYkFJR2wzQ2lBYTR3V3pL
-            bUY2M3BlUTJLVHNpQTdhaEhJV1ZLMkkKLS0tIHFkQnBzSDZFakxIaEVjaWdENkJC
-            OU16akZaVWowcjRlQmpJYllnN3A5ZzAKv13wAORghjJ/WoMyGieLTh4VFHvU3TuY
-            pcUQSDzD3zen0uZodv2z+T3/8mrk61iyYbw5ALDpE4VMXHW68jopbg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSmgwSE1zd1ZYdTQ3K2RD
+            WXJTc2JkV1oxNGNOZlhNclBSeWlQU3lNOVZvCmplWlk5RDROVHp0anRuZjBPTnB2
+            Sll4YkFoUy9LNzVPM2ZzSkhwdUNHdkEKLS0tIEkzSmk1YndiZjBzTVNJcDQzRG01
+            WGtQSnhzS0FVcWZDMmxYdWdPN2tPWEEK3PePBWzhB4zMvtsEQ63zVuiYyzQpIqje
+            mdH8xZDAU6WIn3aPRZw7ohIIsjVRNOtKHFGQvhYYI7y2qFxtigRRtA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-01-21T00:19:53Z"
     mac: ENC[AES256_GCM,data:iAcX1jJNcJNZ6kQ7dKiTJejhcdx1E/B9QEQwGGYeIKuo31qAD/vWWwFrPGWBfqB5K3fgutNVNhrlWeok7M/16pI3fPSmJZLdRxjmV38dVIL9zdjEdUKfRjHhUVh11BRHQ1he1hX0qhCw9htA0F1tgAoLd01VFtY6KEKo+aPs4Qk=,iv:PDR/S9EgI7pQUpjiAENbI5qCc7Q44h88/ZWaEqgg1X4=,tag:EE4wCIZt35fvUi9S3lmBXw==,type:str]
-    pgp:
-        - created_at: "2025-01-19T18:17:36Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/+LAMEykBkJwMlsBrAFo2FhcuLDEcKu91E8IPAWnHjKL1U
-            0VKPpZgK+5iQ953AW4lULpfR9Ic26rCwEbYiuG4hsaRrHVkteO2tTf5Z8sWirbGB
-            9VOS5igrSi+UefvfR8rUzZTzNGoYaR/+9GkJ1ZDM9a13RnDTxyxwG1YCGI8Osvyi
-            eqVTaR6PhNBfTtzx4zMA23Zqhjv3Hd6lNSlhnSGBPfCvekoHuAkT2ciIUrEdpexs
-            8Uz9QLbthKuxRlNCgZchqZSRyWifSUsHMYqPbesz74LIyETICNFQXVHolF867jai
-            rL7l8bkJmRsFais9RsGU3nr6Mg4ya75rEo1ftvAl73L0135K/jYjmqWnOFMpJStu
-            CZGjMVoKF8j1Jan9bzEmLWmXPU902lbEWWjKBF6PIzOSyPxIgcFEMM5wrhT0upRN
-            t9x81L3gAyuM9Bb8FewMGCpxHDGF8QV6I6JshGJSAR4q+f7bjgwD5PkAWw687AcD
-            I/GQsC572Y3PtY0saVRoSmzabebxDbG/kE1/1CqJQ6ddLHHs577Nnk/4oaiqbmdO
-            mexq60Scv7IvPk+AheL6wpCaXIQ+Gy0Tx7FLVgK5Bq5+EpOr24cUGj/DgiUnKuAe
-            dvCjXIlgimsfGRHXOOTNHYRQGhPRsQiYEOF/+atWzMrLQTxojxW6GrsjCnan1qDS
-            XAFHhWhQrq/vVSLOkbZ0WnReczDQXb1tm6DN7WYLh7Xs9GQvnaOWMk2NlxuM0oiN
-            3v57kIJhyMnhrfJxZDMY/CYKQr+kICaGXNdgTt6ojNm6RST3X0JSuQiwAbc+
-            =8sVt
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.3
diff --git a/hosts/stream/secrets.yaml b/hosts/stream/secrets.yaml
index a75b120..d26d805 100644
--- a/hosts/stream/secrets.yaml
+++ b/hosts/stream/secrets.yaml
@@ -2,37 +2,36 @@ wg:
     0xa-proxy: ENC[AES256_GCM,data:uZfFc4elxCAVZvdIHJ7lgoPs9qKkD9ZvLhcYbexDcqn0alaMzIr++CY52FI=,iv:CREMt6GrLHs4Jwj/55awDFHh9hQlJPEi4ZQ7ZLMPvRA=,tag:iJAGdqzQbyezmDj+tzjdNQ==,type:str]
 sops:
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyB5Zytw
+            K1ZKTHBFYy83WU94N3Izczh1RnE4Ry9iRkEvMUxLUUNaTW52MW1ZCjIxWFI3NTJ6
+            eXlXYXVVbHQ5Qjkxc0YwSU1MUjRVRi9abFl2dm1QSkx4N00KLS0tIEtaeXgyUzAv
+            UWhnSjR0TlJyMkpEVlJkaEdNZURXNUhQdXpkcWRYMmxFNDAKFIoZevnllkATCBog
+            5R7ntMPrAlub8WnOjZVT5QdMgU3dRmxUnnfXY4PY7QpLNKyjEUxQ/5zvEeogYOSZ
+            IUVfhA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBuVVJO
+            ZS9Ed3NrVEl4ZGRpZURZZVRaZ3pwcTZVRmJmQ3lrdHlQaWYzSjFvCkJQTXNDR2xm
+            WkhxdnA3RlhPRkpnMWIvS0RzcTRJdEFISlpUb0NaYXVoMlUKLS0tIGZDSGw5QjRG
+            bW9vUzRSRWk5ZG5rc0tjYjFzSzFuVWpJTExEVDhmdXloZzQKzJrWm1z3KRLSLkxt
+            ZsmunVoD55HjrFsvPNnVear40c9JB+U3+m1pjdL5eax27lrX/rlvXx7rhzOhtTkN
+            9IDAjg==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age148r2q3cy9sjem37rvgtcc4qjx8usxkdg77pqexa56gmcexn58aaslh3cnj
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsSko5L1BCOTR1QmZabGw3
-            QS9kbDZyWEJvV09MNkNqbTNncjZrOXl6WFZrCmxQelVzbjdvUUl4aVl3UVFVL0Q5
-            S0VDNkdvcDZnZytCdjBrZUZYTFlEZncKLS0tIG1NWnlnRGovcWxDL2JYMTc2bEY5
-            K29Dd0t6b3FMZjU2cXFBbEw3RktkQlkKCh+jXv65KfAsSR4/0+UWwU5tCphrEEgE
-            WDbIdUZ8j5xHHQwJ58cU7uQ+BSy0yZlwwr8vPoaKdXQzMgyrQfq3gg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLNG9vM1FqTVVBSTFYaGt2
+            Rkpvci9ibXJyL3ZVbHNYbmF4Umk5ZHJ1bURFCmVjalI0S084R1dsdzdHQ0lZbmcr
+            SjBXSDRUUGtUQ21wN2kzUmxwZmdKWUkKLS0tIHNjM1pkemxJbWZDNGZ4T01GZVli
+            b05oNElQQjUrUklpYkR1TCsrTU5uUHMKWB5XybfmmjTfk/c+mRT2PNgsI4q8tbac
+            nV6pFb97477fcnHH/vpbBD24bixFt/X8A90G3ilbjqL+1rd4G+K7jA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-06-12T22:54:11Z"
     mac: ENC[AES256_GCM,data:15EU9VupWfvR8CrfKrX3nhpD60hYB2LY3vuAPvdqzKLliqSqolNj956fOFicfSHvmW/s+7x+M+5FROnOzSbToTZotFtvALQihHH999veGZMx8Q8oIyljT1PBw/SU9djXPI1KjG/zzYOAwu7y/Ffm0QKhMRziH7CQLn30KR0o2w0=,iv:ghdyTvcpgnBi2L9s4UrzwWwt9TeU0WkGquZ64+w9IN8=,tag:4m4hYFgejlEaQROB/OEi6g==,type:str]
-    pgp:
-        - created_at: "2025-06-12T22:51:49Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/8ClHQoCuiC0AH28bDit4qjNh/TnYq3IbAdyITOqUYPRc6
-            th8MCDY0CfxvzDTLYxTlHH4MNDOiWWTMg/shC8xV3MrAIpEQV79ivYMay04aWpCH
-            HqlhjBynCwAnJRanc9Ch5zW1wCjpgMp+kMDX8JhhUL0Rmt2fd2nSp4R2bb+/HRvn
-            vAaDq3TTLkLr1OHcTNKFFbXafGLKMahxkQGRMgD1DIPCLW+nUxerUnlxHo4yjj3B
-            WKXBVKeWowgBHvelHqUVf6yeSmWZyFDP/jFxFEi75A+BYmwxlQcRDn0L0NKUlMa/
-            uF3jtW3XBMS/sLX7aRscBFeEq9XPce9urJK4KPFNVFI3X1WbD6O/Z87Y+MHa2n0s
-            DuxIwrffpw8p4qSVBAJLbSW1vR/suGh/0Cr31mzo4FJT92A93wc8JdLdpHUfTXL/
-            bEbt6M7OSqvIt5/mor7Ad6/HRkEl+sZJnHqeU/qKfAIKKfz5UVG/ZCZDZlVGTmpp
-            lV9Dn8QjA1ut4lMvACJBocnrlH4T6150ULL0r3gHuVy5YhnGR+LWFdgaCJ4v3f1J
-            A59eAyQENNMoSGZU/YZx95kFPc1O/GIkmiMpXZxBISN3F70QP30ieqbP1qnZRfMg
-            GldVAFhfaHct4lujlgRfOkmwcNG3gTIru4wAqg+wzriI9jm9vEoF0MDJs2cwNYTS
-            XgE32jq6Li59TMUQH9iB4l0cM42QbQ8BcSn6o/NhmF6HHq9W5yuD6EIs4KNfdHv6
-            ikgqQuGGO9v7qDMd0piyqeLRGMANepxrR5uMsbFmMnah9RUq9CjRbMADLa+8DeU=
-            =fEVm
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.10.2
diff --git a/hosts/toaster/secrets.yaml b/hosts/toaster/secrets.yaml
index 1ca60d4..cedb549 100644
--- a/hosts/toaster/secrets.yaml
+++ b/hosts/toaster/secrets.yaml
@@ -11,37 +11,36 @@ mail:
 senpai: ENC[AES256_GCM,data:nLMlw+Gw5p9pcyElvHy/d+GV0/dbTj3+Et+lzBs1YEUcsYT2lM7sN+5+4PEF6weJgHUreTl007fh8+FO8S+mUg==,iv:+5szUWaARn93RTQvY13JGn2zJ3y8iyjv09i3KtbhaTQ=,tag:OsD4IoRv8wGuUbEnsld7Dg==,type:str]
 sops:
     age:
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyBjcmRG
+            N01qdnpSa25mNy9ROXNrZWhLNTZZZnZCQmtjN2o2N2NrZTY0Y2tjCkg3U2ZwSS9Y
+            c3QyL2Z0TFJuR29YSjVkaVJhbDJqSkZSeTl5LzZuWW15TmMKLS0tIExCVFdqOW5x
+            eFdaWHNmb21pQnB4RGZlaUVacWZRc0drR1pnSy9xQmNDNXcKjANhuZGaYBoMazfn
+            F/vOHtcMO3Yq1bIbUMXvnS+V3X5xM+UYlckAD3Vx6uWusiSEKtNfU3r0PUvCivbc
+            Zn3B6g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBqNjBZ
+            K3BNR1RRMmFZN015QVdoMXJ6NFBYVksxcUlIWDFsMDRtLzFvNHpzCmVHbEpSbVdr
+            OUxscVliUjVDSkpKMDdmUDk1OTczaUxvcnlmNGU1RG5ZWXcKLS0tIFdkVUxvRE5W
+            RlBqU3Rib1NSQzZZM0hRQTM5Z2ZSRHZwVFBKOHU2OVI3YkEKd8sjGVUY77pKVnkX
+            g3sEt/AVrrr8MTn4VqOTp22XIEtIxZB7NqXOt0pdSzbCPWWCzRy+tWVrqaXO0Ofi
+            RfUnag==
+            -----END AGE ENCRYPTED FILE-----
         - recipient: age1x5cpzua9h9kz772d0udvlmvpmk688ua4fxjmmcqfm2rnpxsp5a5sn03r0z
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMk9uVmNoVjQvUS93R2R3
-            YTJHTTBieVdqU25uRTJmeFRXTFNJWWxRUGw0CmpnSTVrcjhWZnJQZ0IzVHJ3eXNQ
-            UFpSYkZTSXZscEdSOXNlOFJTZjhoWTAKLS0tIFp0bzVsYThMeEJtclZsTDZpc0Ns
-            dm9iYllyWjRiODY5cW9aalJhNjBYQTAKEzY8tpMfLAWujcqFPLi8YCWhm5SjAWNz
-            mCRKbkAlB5pS26vu9KHt4Agri3zNZBy3yqcwwp4b8zR7fSzU/GOKsw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSUY0RHhFVUw3RC9oZEMv
+            NFVORlUyZi9WVHRZMDhKVUwxRmd2ZUxiVGs0CkdVeC9DT3RJT1B2aCtRM09sN2lL
+            cG5BTVcxSVp5Q3VFbFVpTXJSSzZsdzQKLS0tIEtGQ0hheGYrcy9xNVpobmtBWVRK
+            cTFidG5zQ09rNmM1MkRlajM4VnUvYkkK9VcdW2z2Bb6j7dcnRlZqKmqf6XfZZjlJ
+            00lrpZ1PZiJ36eJGlkGPcOfxbNKpvCP3i4JRw5ne5ujchL9kHydsZw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-05T19:41:58Z"
     mac: ENC[AES256_GCM,data:5u2hJYMHwpFd5fcHXKzOblHfgnRTjNIEL+glBsHct3xZ+G1APQg9WdgZbRWc+ypdYPFfhqXKV9RBl/UHtFEyljL7JQV0U8EfumP1WNjPaMgnWftm5qLOe0PxmrPbwsYYBdotO9GVoplghrNd1euvMsxd3F+YtU+MnY+u4dcr4C8=,iv:A61rDNajtU/NOqcemmCN348STdMI9qqPRvdd6n/EuKg=,tag:Y1zi86LNX1xlXpjbslmRAA==,type:str]
-    pgp:
-        - created_at: "2025-08-15T19:49:16Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7zUOKwzpAE7AQ/9GOZwDEObK1jE9T0JUFsJDtFQKnLZZGGkvRx5fouMqwV2
-            u0/F3vWDxPeXWZ2x6SrEgFeRMDwmPj87+lq3r0TB+iEsql6VQv9iqpFL33W8ElYV
-            /uuLP4VGJMr1v9/NIGlyV1iFZUDzoOxwHtaRrpgzwE8iHVS1Ct9LFGIWhTBMr8Ae
-            1x/SDU0mHUB5RYM3hfLsOvMqCDjpfwV/Om0wr3Y1n0CEEtFi5/gTK+f3/7Ymf2l+
-            tPRFojWZlp94DVCu9lLOJKP2bS6HVulJ7TmTOPnWs3graXfd5H3BxsdzHvePxGXO
-            QGrcVR3YhZYl0pc9m4QRs4/y3/DA5LvYBV+MLRwa6M3Tjp9i97HuMT9e0y7hn4Kt
-            eNA4MbjaNdwo+3wRfeUGX7rBClZG32XlZgzyFRFxDFtqa3erUlp2/PXMfYdOeCPq
-            dazfJT7GLLYgBZAneV6/WdpuRIil3oDsmV8mbmzG+zuS8tG3w9hjYq3zip3JO9GP
-            gtwVvpN6zI1d80gOgIBzl3C4SpfDEGGLr9bs+z6hnJimfKY41CeF2POaLeSvtp3F
-            jhnHDF/gC22YDbY0z2ClUwx4erT36W3WN+qnxks7Zw767CAQyKf2P5yhEh2crhY2
-            ZBiESxcmXy84O7qqys2TRIQsJmjYjeT5293Dl56RgQZT3gXoOdmlYa3F02LyCIvS
-            XgEI129p+h+dLED4+3c6C4ANV8P3Q5lKVYnF5yBjLb0rzhqxyEJtFjrYFWC8gxd9
-            0vZNMalKIISawlaW+K6W42EgonbvUKfZSOwC7yLxuNRDgwGPUCfpAwXYS83mGII=
-            =fUR4
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted
     version: 3.9.4