nebula

2026-02-13 13:14:35 -06:00
parent 869a320ede
commit 6ebc1bb103
6 changed files with 293 additions and 175 deletions
--- a/modules/nixos/services/nebula-lighthouse/default.nix
+++ b/modules/nixos/services/nebula-lighthouse/default.nix
@@ -0,0 +1,53 @@
+{
+  config,
+  lib,
+  namespace,
+  ...
+}:
+with lib;
+let
+  name = "nebula-lighthouse";
+  cfg = config.${namespace}.services.${name};
+  rootUrl = "https://lighthouse.${namespace}.dev/";
+  ca = config.sops.secrets."pi4/nebula/ca-cert".path;
+  cert = config.sops.secrets."pi4/nebula/lighthouse-cert".path;
+  key = config.sops.secrets."pi4/nebula/lighthouse-key".path;
+
+  nebulaConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "nebula";
+    options = { };
+    moduleConfig = {
+      services.nebula.networks = {
+        jallen-nebula = {
+          enable = true;
+          enableReload = true;
+          isLighthouse = true;
+          ca = ca;
+          cert = cert;
+          key = key;
+          lighthouse = {
+            dns = {
+              enable = true;
+              host = "localhost";
+              port = 53;
+            };
+          };
+          listen = {
+            host = cfg.listenAddress;
+            port = cfg.port;
+          };
+          # lighthouses = [
+          #   "10.1.1.1"
+          # ];
+        };
+      };
+    };
+  };
+in
+{
+  imports = [
+    nebulaConfig
+    ./sops.nix
+  ];
+}
--- a/modules/nixos/services/nebula-lighthouse/sops.nix
+++ b/modules/nixos/services/nebula-lighthouse/sops.nix
@@ -0,0 +1,45 @@
+{
+  config,
+  lib,
+  namespace,
+  ...
+}:
+with lib;
+let
+  cfg = config.${namespace}.services.nebula-lighthouse;
+in
+{
+
+  config = mkIf cfg.enable {
+    sops = {
+      secrets = {
+        "pi4/nebula/ca-cert" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
+          owner = "nebula-nas-nebula";
+          group = "nebula-nas-nebula";
+          restartUnits = [ "nebula@nas-nebula.service" ];
+        };
+
+        "pi4/nebula/ca-key" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
+          owner = "nebula-nas-nebula";
+          group = "nebula-nas-nebula";
+          restartUnits = [ "nebula@nas-nebula.service" ];
+        };
+
+        "pi4/nebula/lighthouse-cert" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
+          owner = "nebula-nas-nebula";
+          group = "nebula-nas-nebula";
+          restartUnits = [ "nebula@nas-nebula.service" ];
+        };
+        "pi4/nebula/lighthouse-key" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml");
+          owner = "nebula-nas-nebula";
+          group = "nebula-nas-nebula";
+          restartUnits = [ "nebula@nas-nebula.service" ];
+        };
+      };
+    };
+  };
+}
--- a/secrets/nas-secrets.yaml
+++ b/secrets/nas-secrets.yaml
@@ -75,6 +75,11 @@ jallen-nas:
        server:
            username: ENC[AES256_GCM,data:pD7AWpTcwU1G5fHo,iv:y0Ys8sjgIH/bwsLLKzyfPowgrlKAaGBArdXlPqGT+6g=,tag:AKbdJ9Br9mpla/hr3rOF3A==,type:str]
            password: ENC[AES256_GCM,data:HGh6pPDCV0w=,iv:lFPjGjFALlX6U/4MWLCJ282q5OReNdklmAR+qFmSCJs=,tag:AYrsjhuST/eSpgmRpv+dfQ==,type:str]
+    nebula:
+        ca-cert: ENC[AES256_GCM,data:tJgJ01YwftotyK9vHrACH45210Y8FbbfB9IgRBHGZGa6H+jRo2MxQ/70C4yx90R4+XkVVQ/mWcUe9msIgKjmPiGkj94IDYXwXfFoqEL+jzXYVVbGo9abADY8BfkSsLpz2XhbPOlcOwpinPgj8zjUuM1SsScAxeSb5dmyuvLrH4FNAn3AWU6afRyomC0kvYiaiAxpqNEV/vDeqjER/YDgaWfVFw7PjOPdk+uRkZXbjmwM3UPHKwZesx1ML2Ddp6WpE/ndvJdE1fmibBE/oSphaKG/K5HVZUtGpCjzE4HEl5j3hC/BMm9Rw7vfe7JwW5bOovMOgqVJv+CCvorUxA==,iv:vByzR6wOWFQ+botfyQRj2IE9FUOSTYhnF0IfInHilxU=,tag:wgH75f2NNDNnOF0RHNNjww==,type:str]
+        ca-key: ENC[AES256_GCM,data:AldM5QTLWo7B4kC2wE4ShWUWiytVu/quPJHNSUGH21tfMrfXICPxlAx0nmyWXP42p6w3ZI54p+SiqAw2YhN1mZL4sZe5d7XYUB90nt9lTsmCZVe9u5s1mdbdlQTWhiSsolN8tG6CDCEj5dCC74Gi4K4U0XAB8w1KANGrMZ7s9GpEqtlUDdj2kbhLo6ZYTh28PAZiuMPf+DxiVyH84F8BtO930PBmx1eq19nli1lK,iv:xxNgIv5s0dRU/MQBeha45SwPz/lUbfI/sZat+32kLKY=,tag:alAm0f0Xcbz0HEuF8bcE8A==,type:str]
+        lighthouse-cert: ENC[AES256_GCM,data:zo3kUEDxEJN42fit7GmdSRC6BOQUQBkd+bf7pC1hxdVyJ9Ws6+ZeJAiRTYxrSVIef49kUioXRhE7jYcX61pl0mpMO0HgVwjGSu0yAkED1AjBDI8btISIti2zeAU0jF3N2/IDdIZF/fLo5fw5dAplAv0kgtTyTr7IaNCeJivQgHfyc8IM57xmV/vqmJJ2COTIuwbQ/qClDG0k/0DvqY5Vlxq9aNiigryw68iLxVUWnPp+JmJczzFefkxUsVSyKW3goeOBTeo75ztcVEkapHMycEjabqlNTa011rb+dr8X1sonBomRc2b0e/mY3Ni6EDw0TEOKrXA7uQCIUrav0nog8YnB2O4kQ39wsjIDzuZzBmURKzz8jy3Jk28Qkk6zDn6tyPTDXAgEMPXpcxMa65Qhd5XiN8sBzc3vk+U=,iv:cTmQPMe3HBZ4WPakrblddKZAh4u4VYjgPF0X6tYDvmo=,tag:YFp9RSL9WjadWzOH4aMD1w==,type:str]
+        lighthouse-key: ENC[AES256_GCM,data:YP7AkkPxDj1jctEziASe6D7gm/xscpPTwUJ/cOUfxXYq0euBmHP2twaZePOwohGbbEU4mzNYRAuQuF+5KzzbXfU89QixZ4XpMhACHgB02q71vDOFeX+gPQlzx+biL3TfbhVnZRRParyLJg9uqToa3P9csygacWCnH1A8FdY83g==,iv:PONNwnjIC+UNkZ1bCjJBeA7ic7IkkN96YJVYmao1SJ0=,tag:rO2Hnl/zizSliQVd8t6kNA==,type:str]
 sops:
    shamir_threshold: 1
    age:
@@ -222,8 +227,8 @@ sops:
            L0gwQm5takNjMkVGNzVlSStJYlUwWDAKP8QA3rRUHYbyyhPC/k0Eq2EIKfjyc7Co
            7BkHH3msC6h9g42BB5iIYe6KQ+UGxMQBFvp+qSB27jaIfajN5MP0BA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-12T04:19:13Z"
-    mac: ENC[AES256_GCM,data:t3sxHQSeVb1agLpIuC4Mm/6hIvlhA4d4WWJu8y3vm3rHafhZK9HKQYDJ48fB/oMNpszy0IcgSP7j9WQPPKKAcsDRj7fHu67Z9lFyv+C12leBm1kCKmp5e4fl8aykQRSxT2Sy5eo4yt+8PTUOd8Cet3tYO/riSgvWtL6iCEjO9ik=,iv:7uLvDk7suunzx2kVoK8JV/bAFeHnJDDF+vInhiw2K6I=,tag:Dnov7AhsMzLaJT9p9f99Sg==,type:str]
+    lastmodified: "2026-02-13T18:10:02Z"
+    mac: ENC[AES256_GCM,data:jlpS9HHfFqZPUZGr+2pgun/zw5Yr6HRYO1VepqvZzQC1DUK3dBTFvkfJlmsUME52bPFZac/0zRRo85C6FGM0prm+G+aROQxJ1OdWgzK8CbULs7UpMdWxUJLlJT1N5ov7S0NB612D0a0SgI6kQQDIvQs5JaWMEjDlhLy/pTz5/zw=,iv:ZwultH7UxHzV7NosnqdFV1JMUd+e2ajBuOaBgxJdEms=,tag:4d7FPC/ba8A3L2vzYyGwRQ==,type:str]
    pgp:
        - created_at: "2026-02-06T15:34:30Z"
          enc: |-
--- a/secrets/pi4-secrets.yaml
+++ b/secrets/pi4-secrets.yaml
@@ -1,176 +1,181 @@
 pi4:
-  matt-password: ENC[AES256_GCM,data:2gQOr6LlHNAL0CBk12R8lu1pgMLWc017k7M4xDNSpOM1iqEnoODSeFa2JhjJqf2st3kaJuDVucmiPgBcW51Hm1k+z15Rokz78Q==,iv:pcBy2UWjSEiPIcLayi4wWw2jRB7rdxYUqnVxt3DHKKc=,tag:wSOEVbjDEpUYjrZFe484hQ==,type:str]
-  sys-public-key: ENC[AES256_GCM,data:4m0G3buO6ao+hzpEQ5pFAjqrd9DjLE+ld+N3KT4mYdRfUD/SfcIrpP0ML8c4Omx34J9xPIxBJPAeJp1CNdvMfG4OZ56AB0p+bHVTS3W5GUx+eIeiDsoGQbM=,iv:kU0O88hShlik8xNnk0j2Qbkv+5KNCk03w66stkSlOJs=,tag:pg6SiaH1Mb3my+U8aqE4Lw==,type:str]
-  sys-priv-key: ENC[AES256_GCM,data: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,iv:hzbJ8cfdpiyXAjSRWxyNHqsq8D2LNNUP8nNvRswJzNw=,tag:ubJiNhOKz7g2hhAsj9JJYw==,type:str]
+    matt-password: ENC[AES256_GCM,data:2gQOr6LlHNAL0CBk12R8lu1pgMLWc017k7M4xDNSpOM1iqEnoODSeFa2JhjJqf2st3kaJuDVucmiPgBcW51Hm1k+z15Rokz78Q==,iv:pcBy2UWjSEiPIcLayi4wWw2jRB7rdxYUqnVxt3DHKKc=,tag:wSOEVbjDEpUYjrZFe484hQ==,type:str]
+    sys-public-key: ENC[AES256_GCM,data:4m0G3buO6ao+hzpEQ5pFAjqrd9DjLE+ld+N3KT4mYdRfUD/SfcIrpP0ML8c4Omx34J9xPIxBJPAeJp1CNdvMfG4OZ56AB0p+bHVTS3W5GUx+eIeiDsoGQbM=,iv:kU0O88hShlik8xNnk0j2Qbkv+5KNCk03w66stkSlOJs=,tag:pg6SiaH1Mb3my+U8aqE4Lw==,type:str]
+    sys-priv-key: ENC[AES256_GCM,data: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,iv:hzbJ8cfdpiyXAjSRWxyNHqsq8D2LNNUP8nNvRswJzNw=,tag:ubJiNhOKz7g2hhAsj9JJYw==,type:str]
+    nebula:
+        ca-cert: ENC[AES256_GCM,data:FDlXjLyMcKdwXVSP+boKAjNprWDYkKsdmdA7RHK9/+Pa8gUpmhqJKRuJp0ta2T6KTCGdh+cRFBPy0PgME7wkjY5ygjiGJV5ixGIN8x+JkfP+1Moi5GZlYK27JTGoX5I+9bRmSWN9mjoGqby4ms+x/gh2S8OBTpOMWCUhDOjtShr7YEJ57Q4z2stxv+IXxIKkfFAtnpb0a0QdFJZP2/2D5KligoXEL410FGhigHJ1dOLIoXYtqXDtUVMxoouzLf4lrnWCljVYr2OeI39wRPLHOkE+MnhYIHTzre8M9urchCHVTN//tQBWaeeia/lI7rGbduk6vqHZo7fXku1D1A==,iv:3lwMkR9AB7wWxXqW5HTaDFTI+vB4ebSdR1Yg3an89qE=,tag:vLn+lrHa2yLg5KSzW8HUKw==,type:str]
+        ca-key: ENC[AES256_GCM,data:vKbPalJqrqS2uNiykKMvAZOSUYPZqEovo7xCO80RPqNhoUKQ9snpfsggWTMhk5U5tWWu9aUSBJn7XGXB7aRLuGXCpqtR+N7Rtz+2Ec2BNb9ETnI2AI8/BsTkZe5P2U2cn2va1hXPTPN1xWW7n11DLAqnQTBGizOVNH4mTXktW2JS37k+X1C57CazQoc90iNbOJqPlHI0QjHdhcH8yO7DOnY8f9LdHvBPh6ANfUt4,iv:qtyDl3TfNgwDvTY+H+hJuNEj5g1+01MXixZG9dGJyys=,tag:pyeNhIiiKOilhNEIaJ/abg==,type:str]
+        lighthouse-cert: ENC[AES256_GCM,data:EJq8S1vI/SZ8A5MzSdMcuvvSZADuzB7CwPa5dsSUvqSeBkapHbCkJiki885D0TpXfc8SxDDZCMUvv4cAHbH2ZlKhuOB8klT4tm1fP3p/P10WrV8SPje87XZ870mtH8bdoVLrdPHjvmotBkXCskTeSDcDlgS4+fMUrxO8gB5O/HIx1tFn5eDoUtdOAlqYAGDiZALGbI2c3Acwtl5pzI39iHtag7YmAEEUQSY1732e/G79wWd4iaOpKZDo7Uig+PIIpymYZgweNtYNGRl7+xKZsJcB21gVnpofUIm6QDwhg1XJ79WIOacBL3d1IKrdipj7uBMd9HbIhlfioOl1noyqICdg8IjlMgSX2FVDu75gMQu+WpuFhaJn1lcnO1na3UoLfz16bX+7T8fuFWhONAxwKmI7V6nQfmplBsE=,iv:hHsCuoBL9bDnDSlooEJDVFYo8pn38eT+p2bQ6EbJwhI=,tag:/7jZvWvcgcPcQp/HrFY8HA==,type:str]
+        lighthouse-key: ENC[AES256_GCM,data:BsGgTwdse1aBdZGYUWdNTbn1+tw/gnj+hvxGbaK6hZLoL3Pp0ytGbwt9QcyXUrqJd8SDByhEQM1ZdZQt9PYnA7Urs6RFFyw+nFJCClC8RJ4ncpkOcElu8yRcUZdlQtpRQK3+db6E7/15hzJTEufLf+CUO1Bg8UfDuJQRb5ur4Q==,iv:2/o63fIvyvqb0UdubUI7wyTm7a/hYWl9kQzOoO3IDFg=,tag:E9Fl4HGkTQFrqmOuQLWHzg==,type:str]
 sops:
-  shamir_threshold: 1
-  age:
-    - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1NlFoc2hlSEtzQXlxRkdz
-        YXU0SFZoT0QzbDJ0cGhZVTBGZVJMYkF0ZkhJCkxkVFJueEx6S1VlQUJseWxnQlZH
-        aTVrbVRyUjNPMkp6dXJGS3lLWnBVV3MKLS0tIHhUYjE1NjdHRHBTMGd1UVZUQy9S
-        a1Z6U3VPQ3daOVBIZ1M0UHo3VGV4QXMKoyOfYaPQOgdFDPthdnsSu/d3fv+KdY/D
-        KxZmSd8V4ECgcwhI39d/SRbs1ipcr9915lKT31c3MFqGNXrN1kpxnQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSExvRGwwT1dobmt0R250
-        R0JPc3lxRFVON2xIK1ViTjg3WW5JdStBbkdRCmdTc1NOTDY4c3hVMWtNVE1ERThr
-        K2hWeE1uRHFsdXI3Uzh4S3JwY1Buc0kKLS0tICtUSWovZWZLdHk0cjVJSktCbW1s
-        djBhblNsQUtINmxRc0VRbDlIYUJwWkEKZavXvFPT9pzaMEuH+Dl5NNlerG8PQoFa
-        zlbwXbRj2nqlQ/fxmPhsaak9QXOHa13mzpnQp6gZIBf75g7ip14XNQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTOTlocHFoZHoyN0s4Q0tV
-        Z2ZQdzlzMGpWZnBpaTRVNGljNjNVamxFc0Y4ClM2ZWVTOTFHNnM1ajdJcGpSN2dv
-        TDVTTWNZUjZqbStMTzFROS8rN1B6NDgKLS0tIHZVZmlMTHpQOWFqbEoxMkd5UGJC
-        OXlOMVMrcmh5SEViUkhMSUROOGI3a1UKXsXMhwbxySqr5yawE47OyzJtMeICZXgT
-        S8l7/3dFybBZ5AkDRY+81ubJO893/wGDfgYjJn+L1uAw+FM+FqU7Ng==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWVpXakFuL2QwbjdvY3hG
-        NDlXcjlFOGtRMWVXQ2NwSXBXNU5LWU8wZFJZCmlrWlM0UzdRQk5IaXRKNkQ5N2NY
-        YytnVkpFRi9icnRWRHo1N093R0YvZXMKLS0tIGovMEsrYzlNN1c2UEhEZUZWTSt6
-        YjI2UXJ5UzhiSVp6Q01aVHRUOFBTZm8KGVSZPOEpUsw3U3nL51F1lH5uXpknRDqN
-        OhaRmuoW+XosHMOuJ3ZBMp3tLoxYEg6kZ+nQJp9oiGfl01UaFqdQHA==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwR3ZzU2lQZldqZ2Nkd0dm
-        dTd1eGZrZEFSOTJLTXpzSG9xWjgrWHJza1JJCmd4QWlyUjVGV04wd1dveUkvWU1t
-        ZjRzQUk0eGJxd0FSaDFpLzVHYTBMWDQKLS0tIEppbW1nUm9nWkdlQXg1M2FYb1hD
-        eTl0cG8vUlJHYUJFQjNvb2tuZEt1NGMK2ZKzwoUwTHKixc8XfUg6pv23m5ZqjPgZ
-        Y/1Z4RyL2OwNQRxeqiOY7p9LrGmPgszMuAlFQb/r/BlAgaEkNLl0fw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4bGs0ZnJwMUVCa0R5TWFU
-        OW5odnNvcWc5V2FrTGVkR2o5Vy9UTnQ0SFgwCk14TXJmL0djcTBzQlVaUDJJTzFY
-        RFhMNzhPakJyNmtTeUhiMkNaUkFSQ1EKLS0tIFVLNTJiNy9wMDd5RmdrRnZQM0l3
-        UmJ5eXdmVFJrTVd0cmE0aitITC81Z3cKtWRvDiKJUserIJWVhD4+nnpckVexdkaq
-        GkJJPRiKmxP7LtO0vJV8m7xKV33frSNk5772H5mnJu/STdultvwd8Q==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWUmgyMyt4TG04bjlzV1BJ
-        MENrV3Nmb1dhY2t0a3dBRnFJZzRudDNlalVZCmdzOUo0UEJ4QmFBNXA4aUlkY1do
-        QWhMR29sUnhuZlprb3NCbEhhMnd2RDAKLS0tIGFCUk5DS0M2dk9LNWlpenpXQk8r
-        SFZUYXpsbENkS014Tks3ZWJPNCtDb2sK8CtjOC4EnBgd8xSc6GwGtXnoGX/Wf1s2
-        r1L97kqmMRD7Npwhs2gT+5kilEJBpIT+djfsc0KlezONOTVKJiiT0A==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxeXY0ZmRQL3E3enVQMHFh
-        Wk1scFpoeFhwMG9iQmFMTklWMzhWM1Z5MFIwCnJJTG44NVMrZXVuVEtXRThxMy8v
-        VTM3U1dCRnFZOW15aHZoemh6YitRODgKLS0tIEVQaHlPankzNHJORHhyUnplSnRw
-        QmZESkVxSlZ1aUMrTUhZRFV6bjZXVXMK6n1TE1RTHxlqV198Hf+GjSMeSCXsEDpm
-        1LVqSF1t7hQzXAf6M1hncKWmmvf8QZDzFPQsc1Rmoo0JRAeL1CUlYw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia1lDOEFIYXRxbk1yaHVG
-        NHNrN016UnVyUEx5YXdwWXRuUVJ2VkdzT1FFCm52dFlNYkp4M0YvRUQxZU1UTzBx
-        SnBZdVZGZlIvaUZIQzBxY0NuY3dtYWsKLS0tIDFvTVJBNlpmZ2ZkOTM1bVFHcGRi
-        VFB3aTlNUFlOUC9TZmVJSGdlTU9UVFkKdL3zout9Xl/tYCdkGmO3rUxPXF3XhchR
-        cTvSkyqOLcfno4AwB4nC18pGfhxYh0O1AsJrfUYfZUDm4AydqC6RIg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBbnZvK3VyYjdiQ2VFekZF
-        aXpSbCsrZEFqSmdkV1c2OFZJdkpseEFSOWpFCkpTS2dVYjFiNENDQnFjTEtUK010
-        Wk1kVndqZldhWlVVV2gyRkdUY0dxMEkKLS0tIDcvVkI3OUJXZnBvUC9xTmxzdHFP
-        cHEwL1oyRUl3blYrKzZaaE5zME8xU1UKhPCOFlYU6SuDe5riehIIuMhUB/KSSyD7
-        YZ+CqCBVFECF1vhfgvPj432Aqdd0yS6M/9r1Bqt+fcj+fRz2bGXapw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRm1IMjJXcmh0cnVwOFlY
-        MUV0d3dNYjVqSkNqZjNqdHprc04zbGViRDI0CklVVklkV0owUUFJVXNqc09tbFpn
-        azA1M3R2eUlJVVBaUGFhZDJoLy9rTEUKLS0tIDI4S1pZSUZ3Q0ZPOVV3T0FJQ3NZ
-        UFhFR3R4emR0UHpFalJ0b1dwZmhRYUEKn849C7Xp1uDeAZRNXqF/WxSx+y204U9q
-        uuEUgbstlOvqRGFs6buGRFTLFi845qfv4J0QnXvj/COLZfNjwl3Jbg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyN1U3WkFuSlZ1ekhkVVJU
-        VU51WjlCc1hySnlLVWFONWdnZ2VPTHFid3pVCkcwNmRXendXZjRRazhkSzRWU2FF
-        Z0xHQjlsVllYdkN1OGtmTEVXcnUwSVEKLS0tIG5YTmxGTzUyQ2IxR2VBMmQwUThX
-        Uk1kQ0w1VGh6YUZaZ1NvSHIwelZFSHcKtjHNHVWu9bpDEsUmibm3vXwf/ff2Zmtk
-        YiZmlU2imQ6WWPcTfGDPsNZ0YhA8mPxoWdzpHt10elUCwCpyi3L7iA==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNDA4SDJIVnJySUVMMTZw
-        UnZxb05OK1h6aldBT0kreE9jRHYyYyttZlNvCjZBQTlzajFweUoxSnRCMUpCQWQr
-        V0Q2eGVYOENpSlFWWlFUQThOREVpVG8KLS0tIDAwUWk2aW1NMFZsWWFabGhSKzMv
-        NUMyN01MVTlsbWpNV24yOVVhZitGd1kKa8dbwXGW5Bthym+BuGr+E8bYMbHb07ew
-        YbTskFI7vkMRWg1VGWMbrzvoqdVP7xJpUBtUo3okL4j/au+hG+br5w==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MFFxUmkvVFRrNWN2V2Z1
-        ekV4ejJlMFZ3WkhycXBjRGFZa05XWHdHQjE0CnpuaG9TVjJ2ZkkweDNFUXgxWnBt
-        YmhLRzFzRzlSRGpKTm1LMmcwZVdlU3cKLS0tIE10a1pVOW5jQ0kwWHdWcmlNY0hm
-        ZU4rL3BiT29jcHNGU0xzajIvb0hqU0EKtkiSn5PVzJYZmCEnsa7a3AZW5PhlwWXt
-        8TLrM5WYljSR7rzeqmVH5PaXT6olUXo/NCmbqiM1R5nizNBDbKGLbQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBib0ZWUXpJVXkyLzdEdnN2
-        TDIzd0F6WkdDbGgrMW9BS00rTmtvSGV3Y0RjClI2YTkxb0pUazlYY3dsOFBmcXpC
-        cFg5bVJOL3ZKQ3N4L2lSZ0xaTjVPMFUKLS0tIFo1YklYdXZNam5FbnhEZDUxKzYr
-        TXh5SmQxK0pmRG80bjVzUUNYWmRKcG8K5xbwbYccoMcpmS3oSSBFpHaYkZizfxhK
-        03lO4cEDsufZAt95OzD6pQZCaBp8dVsyZTJQaDTMsnsPTQ5Kxq6sng==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZnQ0U1FieWlWRVpYWUQ0
-        ZGNRV3l3MTRvM2VBVjVnSitwTXp1Y0l5bzFvCm4xRXJXTzA1YmhERkszSkhVaVFF
-        Qnc4T0pVRi92MVh2UHlUd3E0OU9lM28KLS0tIDZ3TUZ3cHBUc0NnTHl4K0JLZ3J0
-        RWRidzlRQ2Qrb3hZQmI4UkNiOXlNTXMK7e3ZpGsleiDmH3YscwbpkHUo1vF4g34u
-        dx7EBE89sCYLFHPXk0bkZIOe/CTXUDBDiFHew4zL3I60mwMJKKnisw==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-05-29T02:27:07Z"
-  mac: ENC[AES256_GCM,data:KYA6RTN+gyczOqCj7c10TJjyVb70zzhD6xDVvLTmpi0oZgl9hp5WNGL1EqcjcPon70U6UpoxixmzRnYil+GNzQWU76CyEaK9xUdrOV+8fBNlknGbzktO6pww6nzO+WuBhLF7fk7q1ozVihuELD5kP7ojM9GtXi+966IMx2j+DWM=,iv:P6WEAZhDxNeqlNEqrlOvYlPUiZJO7c4w84hi0vxnd/s=,tag:C6vOLe2TBGvgueLPAG+iaQ==,type:str]
-  pgp:
-    - created_at: "2026-02-06T15:34:32Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
+    shamir_threshold: 1
+    age:
+        - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1NlFoc2hlSEtzQXlxRkdz
+            YXU0SFZoT0QzbDJ0cGhZVTBGZVJMYkF0ZkhJCkxkVFJueEx6S1VlQUJseWxnQlZH
+            aTVrbVRyUjNPMkp6dXJGS3lLWnBVV3MKLS0tIHhUYjE1NjdHRHBTMGd1UVZUQy9S
+            a1Z6U3VPQ3daOVBIZ1M0UHo3VGV4QXMKoyOfYaPQOgdFDPthdnsSu/d3fv+KdY/D
+            KxZmSd8V4ECgcwhI39d/SRbs1ipcr9915lKT31c3MFqGNXrN1kpxnQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSExvRGwwT1dobmt0R250
+            R0JPc3lxRFVON2xIK1ViTjg3WW5JdStBbkdRCmdTc1NOTDY4c3hVMWtNVE1ERThr
+            K2hWeE1uRHFsdXI3Uzh4S3JwY1Buc0kKLS0tICtUSWovZWZLdHk0cjVJSktCbW1s
+            djBhblNsQUtINmxRc0VRbDlIYUJwWkEKZavXvFPT9pzaMEuH+Dl5NNlerG8PQoFa
+            zlbwXbRj2nqlQ/fxmPhsaak9QXOHa13mzpnQp6gZIBf75g7ip14XNQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTOTlocHFoZHoyN0s4Q0tV
+            Z2ZQdzlzMGpWZnBpaTRVNGljNjNVamxFc0Y4ClM2ZWVTOTFHNnM1ajdJcGpSN2dv
+            TDVTTWNZUjZqbStMTzFROS8rN1B6NDgKLS0tIHZVZmlMTHpQOWFqbEoxMkd5UGJC
+            OXlOMVMrcmh5SEViUkhMSUROOGI3a1UKXsXMhwbxySqr5yawE47OyzJtMeICZXgT
+            S8l7/3dFybBZ5AkDRY+81ubJO893/wGDfgYjJn+L1uAw+FM+FqU7Ng==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWVpXakFuL2QwbjdvY3hG
+            NDlXcjlFOGtRMWVXQ2NwSXBXNU5LWU8wZFJZCmlrWlM0UzdRQk5IaXRKNkQ5N2NY
+            YytnVkpFRi9icnRWRHo1N093R0YvZXMKLS0tIGovMEsrYzlNN1c2UEhEZUZWTSt6
+            YjI2UXJ5UzhiSVp6Q01aVHRUOFBTZm8KGVSZPOEpUsw3U3nL51F1lH5uXpknRDqN
+            OhaRmuoW+XosHMOuJ3ZBMp3tLoxYEg6kZ+nQJp9oiGfl01UaFqdQHA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwR3ZzU2lQZldqZ2Nkd0dm
+            dTd1eGZrZEFSOTJLTXpzSG9xWjgrWHJza1JJCmd4QWlyUjVGV04wd1dveUkvWU1t
+            ZjRzQUk0eGJxd0FSaDFpLzVHYTBMWDQKLS0tIEppbW1nUm9nWkdlQXg1M2FYb1hD
+            eTl0cG8vUlJHYUJFQjNvb2tuZEt1NGMK2ZKzwoUwTHKixc8XfUg6pv23m5ZqjPgZ
+            Y/1Z4RyL2OwNQRxeqiOY7p9LrGmPgszMuAlFQb/r/BlAgaEkNLl0fw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4bGs0ZnJwMUVCa0R5TWFU
+            OW5odnNvcWc5V2FrTGVkR2o5Vy9UTnQ0SFgwCk14TXJmL0djcTBzQlVaUDJJTzFY
+            RFhMNzhPakJyNmtTeUhiMkNaUkFSQ1EKLS0tIFVLNTJiNy9wMDd5RmdrRnZQM0l3
+            UmJ5eXdmVFJrTVd0cmE0aitITC81Z3cKtWRvDiKJUserIJWVhD4+nnpckVexdkaq
+            GkJJPRiKmxP7LtO0vJV8m7xKV33frSNk5772H5mnJu/STdultvwd8Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWUmgyMyt4TG04bjlzV1BJ
+            MENrV3Nmb1dhY2t0a3dBRnFJZzRudDNlalVZCmdzOUo0UEJ4QmFBNXA4aUlkY1do
+            QWhMR29sUnhuZlprb3NCbEhhMnd2RDAKLS0tIGFCUk5DS0M2dk9LNWlpenpXQk8r
+            SFZUYXpsbENkS014Tks3ZWJPNCtDb2sK8CtjOC4EnBgd8xSc6GwGtXnoGX/Wf1s2
+            r1L97kqmMRD7Npwhs2gT+5kilEJBpIT+djfsc0KlezONOTVKJiiT0A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxeXY0ZmRQL3E3enVQMHFh
+            Wk1scFpoeFhwMG9iQmFMTklWMzhWM1Z5MFIwCnJJTG44NVMrZXVuVEtXRThxMy8v
+            VTM3U1dCRnFZOW15aHZoemh6YitRODgKLS0tIEVQaHlPankzNHJORHhyUnplSnRw
+            QmZESkVxSlZ1aUMrTUhZRFV6bjZXVXMK6n1TE1RTHxlqV198Hf+GjSMeSCXsEDpm
+            1LVqSF1t7hQzXAf6M1hncKWmmvf8QZDzFPQsc1Rmoo0JRAeL1CUlYw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia1lDOEFIYXRxbk1yaHVG
+            NHNrN016UnVyUEx5YXdwWXRuUVJ2VkdzT1FFCm52dFlNYkp4M0YvRUQxZU1UTzBx
+            SnBZdVZGZlIvaUZIQzBxY0NuY3dtYWsKLS0tIDFvTVJBNlpmZ2ZkOTM1bVFHcGRi
+            VFB3aTlNUFlOUC9TZmVJSGdlTU9UVFkKdL3zout9Xl/tYCdkGmO3rUxPXF3XhchR
+            cTvSkyqOLcfno4AwB4nC18pGfhxYh0O1AsJrfUYfZUDm4AydqC6RIg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBbnZvK3VyYjdiQ2VFekZF
+            aXpSbCsrZEFqSmdkV1c2OFZJdkpseEFSOWpFCkpTS2dVYjFiNENDQnFjTEtUK010
+            Wk1kVndqZldhWlVVV2gyRkdUY0dxMEkKLS0tIDcvVkI3OUJXZnBvUC9xTmxzdHFP
+            cHEwL1oyRUl3blYrKzZaaE5zME8xU1UKhPCOFlYU6SuDe5riehIIuMhUB/KSSyD7
+            YZ+CqCBVFECF1vhfgvPj432Aqdd0yS6M/9r1Bqt+fcj+fRz2bGXapw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRm1IMjJXcmh0cnVwOFlY
+            MUV0d3dNYjVqSkNqZjNqdHprc04zbGViRDI0CklVVklkV0owUUFJVXNqc09tbFpn
+            azA1M3R2eUlJVVBaUGFhZDJoLy9rTEUKLS0tIDI4S1pZSUZ3Q0ZPOVV3T0FJQ3NZ
+            UFhFR3R4emR0UHpFalJ0b1dwZmhRYUEKn849C7Xp1uDeAZRNXqF/WxSx+y204U9q
+            uuEUgbstlOvqRGFs6buGRFTLFi845qfv4J0QnXvj/COLZfNjwl3Jbg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyN1U3WkFuSlZ1ekhkVVJU
+            VU51WjlCc1hySnlLVWFONWdnZ2VPTHFid3pVCkcwNmRXendXZjRRazhkSzRWU2FF
+            Z0xHQjlsVllYdkN1OGtmTEVXcnUwSVEKLS0tIG5YTmxGTzUyQ2IxR2VBMmQwUThX
+            Uk1kQ0w1VGh6YUZaZ1NvSHIwelZFSHcKtjHNHVWu9bpDEsUmibm3vXwf/ff2Zmtk
+            YiZmlU2imQ6WWPcTfGDPsNZ0YhA8mPxoWdzpHt10elUCwCpyi3L7iA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNDA4SDJIVnJySUVMMTZw
+            UnZxb05OK1h6aldBT0kreE9jRHYyYyttZlNvCjZBQTlzajFweUoxSnRCMUpCQWQr
+            V0Q2eGVYOENpSlFWWlFUQThOREVpVG8KLS0tIDAwUWk2aW1NMFZsWWFabGhSKzMv
+            NUMyN01MVTlsbWpNV24yOVVhZitGd1kKa8dbwXGW5Bthym+BuGr+E8bYMbHb07ew
+            YbTskFI7vkMRWg1VGWMbrzvoqdVP7xJpUBtUo3okL4j/au+hG+br5w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MFFxUmkvVFRrNWN2V2Z1
+            ekV4ejJlMFZ3WkhycXBjRGFZa05XWHdHQjE0CnpuaG9TVjJ2ZkkweDNFUXgxWnBt
+            YmhLRzFzRzlSRGpKTm1LMmcwZVdlU3cKLS0tIE10a1pVOW5jQ0kwWHdWcmlNY0hm
+            ZU4rL3BiT29jcHNGU0xzajIvb0hqU0EKtkiSn5PVzJYZmCEnsa7a3AZW5PhlwWXt
+            8TLrM5WYljSR7rzeqmVH5PaXT6olUXo/NCmbqiM1R5nizNBDbKGLbQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBib0ZWUXpJVXkyLzdEdnN2
+            TDIzd0F6WkdDbGgrMW9BS00rTmtvSGV3Y0RjClI2YTkxb0pUazlYY3dsOFBmcXpC
+            cFg5bVJOL3ZKQ3N4L2lSZ0xaTjVPMFUKLS0tIFo1YklYdXZNam5FbnhEZDUxKzYr
+            TXh5SmQxK0pmRG80bjVzUUNYWmRKcG8K5xbwbYccoMcpmS3oSSBFpHaYkZizfxhK
+            03lO4cEDsufZAt95OzD6pQZCaBp8dVsyZTJQaDTMsnsPTQ5Kxq6sng==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZnQ0U1FieWlWRVpYWUQ0
+            ZGNRV3l3MTRvM2VBVjVnSitwTXp1Y0l5bzFvCm4xRXJXTzA1YmhERkszSkhVaVFF
+            Qnc4T0pVRi92MVh2UHlUd3E0OU9lM28KLS0tIDZ3TUZ3cHBUc0NnTHl4K0JLZ3J0
+            RWRidzlRQ2Qrb3hZQmI4UkNiOXlNTXMK7e3ZpGsleiDmH3YscwbpkHUo1vF4g34u
+            dx7EBE89sCYLFHPXk0bkZIOe/CTXUDBDiFHew4zL3I60mwMJKKnisw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-02-13T19:10:40Z"
+    mac: ENC[AES256_GCM,data:HaMU0o8ORSUCrcmppdJwpXj4YgKESOUy9YJPktBvY7s1QhQVqvzNigxcvJcpGFexvy9/I6mBxzc7JYDPuMmSyaaFQyTZ6e47cxshqy5Sxxs6U7lyxPWynnC7nU1F+CWhkqULQ0+v45NB6wilHc+ASOb1JGSF546ffZDmbJ+eDU4=,iv:+5+S63+PtrCvVFdfSAUHUoS342g6LzoICFUpR2OL9ns=,tag:WnksdwIcQCDCmMiIwbSUpQ==,type:str]
+    pgp:
+        - created_at: "2026-02-06T15:34:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----

-        hQIMA0B7mmjbybiOAQ/+N+WG14Kn6aqETcs3SDEvdeREb//2S/suf27VIT7NqdEY
-        VZWa19oWO20+pSD1WZAQDatXFo4Ty13az1pSIUhKRj6jwkzvtAwAXQcH3i6oRQPv
-        Fsh2mMfeq6+bgLqCbD74DckM4j7e+sj1mENMKUwTALdY6ecdoADA97vcxEuvPWoJ
-        g9KDwX4xKzjRujsmPTa7Q2daq/9/607WU+FlkkdQK6wCUgn6eNXSXLSdITB/TAe2
-        YVtEGj0+bgMawItah9uro6eiL4hpOJhVDk8R2Vq7/qkV+eSI5DW6hlXAMlZXZ4SU
-        WtaqQ1vb7sYQ9PHHpMkZ0qo9TxQDo6RpKonj0qP2Ihm0hh39n/hEcHI+Q8L78OcZ
-        ZcdnxU9RsLqXEgi/QvDITGCxFB58Ng1Kx0IEYNxav+4s2Vb28KqukpCPPwBOf2nI
-        MqzDn/mDtsu6RR/d0OO8qN6Rp+fg2k4RBoB7rYLM5mSFmx1S/MYbM1JTdVmSGvCL
-        mCnuZE18WGBgd7qfH7A6J11H/jIWCAB4UyIZXtJcGm/hCqIkDATqe0f7QMC6S+qR
-        Zl/3zdzv3MaKTotLTfJC9Y+teOrMlk/OYrDjEg5btHI/XJOn0V2lxE9O3Z/i3l50
-        16U/oUK54jaZi1+ZvHgHwjEFcDJ74IoyWvBh25vg1qhQVH9a1to74a/yq2zKYIzS
-        XgHVF+/WTjQvEl44RiuLuUDxlDrxOUwer+bTM8Rx9BDFhqDfH+GKvZKwQdwu72Ri
-        hvUppPOtx6x1Q++S9/luXy25dlC/EDkmUyzQgT6m4GzlxiOWkW0dxfob547PYlI=
-        =abGW
-        -----END PGP MESSAGE-----
-      fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
-  unencrypted_suffix: _unencrypted
-  version: 3.10.2
+            hQIMA0B7mmjbybiOAQ/+N+WG14Kn6aqETcs3SDEvdeREb//2S/suf27VIT7NqdEY
+            VZWa19oWO20+pSD1WZAQDatXFo4Ty13az1pSIUhKRj6jwkzvtAwAXQcH3i6oRQPv
+            Fsh2mMfeq6+bgLqCbD74DckM4j7e+sj1mENMKUwTALdY6ecdoADA97vcxEuvPWoJ
+            g9KDwX4xKzjRujsmPTa7Q2daq/9/607WU+FlkkdQK6wCUgn6eNXSXLSdITB/TAe2
+            YVtEGj0+bgMawItah9uro6eiL4hpOJhVDk8R2Vq7/qkV+eSI5DW6hlXAMlZXZ4SU
+            WtaqQ1vb7sYQ9PHHpMkZ0qo9TxQDo6RpKonj0qP2Ihm0hh39n/hEcHI+Q8L78OcZ
+            ZcdnxU9RsLqXEgi/QvDITGCxFB58Ng1Kx0IEYNxav+4s2Vb28KqukpCPPwBOf2nI
+            MqzDn/mDtsu6RR/d0OO8qN6Rp+fg2k4RBoB7rYLM5mSFmx1S/MYbM1JTdVmSGvCL
+            mCnuZE18WGBgd7qfH7A6J11H/jIWCAB4UyIZXtJcGm/hCqIkDATqe0f7QMC6S+qR
+            Zl/3zdzv3MaKTotLTfJC9Y+teOrMlk/OYrDjEg5btHI/XJOn0V2lxE9O3Z/i3l50
+            16U/oUK54jaZi1+ZvHgHwjEFcDJ74IoyWvBh25vg1qhQVH9a1to74a/yq2zKYIzS
+            XgHVF+/WTjQvEl44RiuLuUDxlDrxOUwer+bTM8Rx9BDFhqDfH+GKvZKwQdwu72Ri
+            hvUppPOtx6x1Q++S9/luXy25dlC/EDkmUyzQgT6m4GzlxiOWkW0dxfob547PYlI=
+            =abGW
+            -----END PGP MESSAGE-----
+          fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0
--- a/systems/aarch64-linux/pi4/default.nix
+++ b/systems/aarch64-linux/pi4/default.nix
@@ -72,6 +72,12 @@
        };
      };
    };
+    services = {
+      nebula-lighthouse = {
+        enable = true;
+        port = 4242;
+      };
+    };
  };

  services.kmscon = {
--- a/systems/x86_64-linux/jallen-nas/apps.nix
+++ b/systems/x86_64-linux/jallen-nas/apps.nix
@@ -142,6 +142,10 @@ in
      };
      minecraft = disabled;
      mongodb = disabled;
+      # nebula = {
+      #   enable = true;
+      #   port = 4242;
+      # };
      netbootxyz = {
        enable = false;
        port = 4000;