auth

2026-03-06 09:25:58 -06:00
parent 86acd96e07
commit f1493146ab
2 changed files with 205 additions and 176 deletions
--- a/modules/nixos/homeassistant/services/homeassistant/default.nix
+++ b/modules/nixos/homeassistant/services/homeassistant/default.nix
@@ -20,6 +20,36 @@ in

  config = mkIf cfg.enable {

+    sops = {
+      secrets = {
+        "home-assistant/auth-client-id" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nuc-secrets.yaml");
+          owner = config.users.users.hass.name;
+          group = config.users.users.hass.group;
+          restartUnits = [ "home-assistant.service" ];
+        };
+        "home-assistant/auth-client-secret" = {
+          sopsFile = (lib.snowfall.fs.get-file "secrets/nuc-secrets.yaml");
+          owner = config.users.users.hass.name;
+          group = config.users.users.hass.group;
+          restartUnits = [ "home-assistant.service" ];
+        };
+      };
+      templates = {
+        "auth.yaml" = {
+          content = ''
+            auth_oidc:
+              client_id: "${config.sops.placeholder."home-assistant/auth-client-id"}"
+              client_secret: "${config.sops.placeholder."home-assistant/auth-client-secret"}"
+              discovery_url: "https://authentik.mjallen.dev/application/o/home-assistant/.well-known/openid-configuration"
+          '';
+          owner = config.users.users.hass.name;
+          group = config.users.users.hass.group;
+          restartUnits = [ "home-assistant.service" ];
+        };
+      };
+    };
+
    services.home-assistant = {
      enable = true;
      package = pkgs.home-assistant;
@@ -311,6 +341,8 @@ in
        "scene ui" = "!include scenes.yaml";
        "script ui" = "!include scripts.yaml";

+        auth_oidc = "!include ${config.sops.templates."auth.yaml".path}";
+
        http = {
          use_x_forwarded_for = true;
          trusted_proxies = [
@@ -328,11 +360,6 @@ in
          purge_keep_days = 180;
        };

-        auth_header = {
-          debug = false;
-          username_header = "X-authentik-username";
-        };
-
        # https://www.home-assistant.io/integrations/ota_updater/
        zha.zigpy_config.ota.z2m_remote_index = "https://raw.githubusercontent.com/Koenkk/zigbee-OTA/master/index.json";

--- a/secrets/nuc-secrets.yaml
+++ b/secrets/nuc-secrets.yaml
@@ -1,173 +1,175 @@
-hass: ENC[AES256_GCM,data:WfnVfA==,iv:fv66AU1oNjqWSlUmfBIM+i9oyNBZE2OYycGA01RFq30=,tag:fsMd8SoNcBD7wVkbp6AxnQ==,type:bool]
+home-assistant:
+    auth-client-id: ENC[AES256_GCM,data:8vu3Zmhi3bkGCQ2nmhlvasOU24wv3NeEgYhVISKBGARESN5Lzo1m3A==,iv:lpoUR0NIrWo/8jMgm514j+9Jvr9gGV9SnOM6s7pZ3AI=,tag:FMtwTyHtOvgMwmeHUUYTcA==,type:str]
+    auth-client-secret: ENC[AES256_GCM,data:9dC2o+SihvatdHKq+NOhueoHSEpR2T8FcuaUw8EWAla5iaVYgNFb3WJTcyQlGpzVlVoHWxJGJPOg6Hds+3mjsQAB/GdyDf7GqtRv3r2Ly0Nm6r2IYO/tSIubQg+ol5/2wDz9vEwlXdGbCxX8bt3ZZQjh50YA2KDjAbRdhHkoU5o=,iv:hlcDmikRmE3qHGxB25TnCYscIGRKSAclsxinEKtInAQ=,tag:dxdZkovhsyamnlsYrNlUEg==,type:str]
 sops:
-  shamir_threshold: 1
-  age:
-    - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3QnVqUmhGMlNZWDh1SDBT
-        bFczbUx3UDJPMUlEc2FmZ0hGR3JZNjA0ZlRrCnFWTlluRXRIekswa21ocGdYSHNw
-        WElrcHp2MU8zVE1qd0RwaFcxOG1CbzQKLS0tIEJtQzRUUTl3amQwSkRhc1lVbW9p
-        a2FUOHJBL3o2YWx3bm1sdzJreTljYnMK1A4ElCJzsnvh+MLzSEg1v3eknrpmaFnm
-        cQ4UVSn3gKvFScwOpJ46U6/p4z67enPvG2jCs2mdTnZkkmw/BOFX4Q==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOFFLci8za0Q4VTh0WnZM
-        SHlCVHFMczRpNFliVCttOEVQenRkVHVTWEdBCk52Z2pxYlgzUm1GbjVlMm55RjBX
-        QVlHT0Q0c08zMSttSU83WTEraGgwd2cKLS0tIHc0SmhnL3V1blJNbVNWY1RjQlE5
-        QTlJTmVvWWpJbm12OWIyeVMrT1lzSGcK0hZVuuTffl8fY2Rv81gGwy0Uz0cWijk+
-        7oAMNqonkX9P8VXBqlWobZGThaRIQNSXFtkWLqjM7c6sJ6D9zI1Nhw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwT2dnRGlISFEwVTVyL3Z5
-        dUlsSWFMYXZ1aHRiQzBtQTBld3dqZFEzajBzCjF2WGJkYkNHdEMvcktzRnYzVWdP
-        S1gvaDV0YTFSeXlhNnUyUFcrU1lIQWMKLS0tIG5NcWpZYVdZTERWOVF4SEJ5b29D
-        WmFHRURjc1ZwaUVNM1NLTUhXN25ia3cKNFsvlo9hFbNLj20hmIbLRX/1gd6S5Ocf
-        e7boo5Udo9OjF9ogWIdCTEM7goMYqE9ig4Mm1TrkEIajZMQ/wFAVag==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMnJ4UFo3TERBNVhqRytN
-        SFhudlVGYjFCZnNia0lBNkVON2swUnpDRkh3CnVDK2REK3lmYkc2ZjladThsRWtO
-        eUdMQWtZMVVaejZJMXR0Y3NlZUtzbzgKLS0tIGp4MHcycGgxOE15bW41TWJYN0VW
-        cHFrS3NBZVhOd05JYVVDRnN6QjRqSVEKtQ18L7ZKfVqvbvJi2IldGq53GZQQw17H
-        VeNhTXDqVkxBxetzNXasQFDkWNObKeetNB4EP+8oMC/HP3wjtPAktg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiS3lNRkY2ekNIUUNTRDll
-        bUFLUVZzc3BRWGhLZ0tla3FIMFFiSnpsdGxNCm8xYWp0SjVOYUQ5bFhiLzcvYUtx
-        SXcwM1pvY1B5azhFWUtyOVhnb0Z6ak0KLS0tIGVKTHAyS0ZrOGg4d2NSR0prdlJ3
-        b0VOenBIb243MVkxQlhlR0pndlR2WmsKTbOK5rOZqJ3pyRKDZ8Nobff/Oxwb1Vj/
-        IMmII/O38W/T2B66zcWjCEMpqI99bthznEY/YHhivFOmOZF1e2xnYg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHTzdkY3hETTFQNjRvWWo1
-        bXpxVE9xZEtNY3VrK3ZuTVZSV1UzNFkxQ3pjCjI3eUFSeHdtQ2V2dGtuY2N1b09u
-        a2llNllNYXZLdllwSmJCZkM3SCtFZjAKLS0tIDBxUjEvK05lVGRiZ2IveUp5SGVq
-        enRJYUNQeVZyK0JPUFZCbFhjOVo0MUEK6I9V4KAfoEyhStwViy6wA94PJs8kC0Lc
-        hwnYWCotPJc25Y9DCWt73n2oy0UH6RnAJ3aFUu7w8s1NbsH6UvTHGg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWmxsRVFzSS9sTTlNbFV2
-        Z3d4YjNBOTh2eXdCcTVmVGFlYTc5dE5wY1RrCnYxd1ViUjN3SDhJYzdRM2FYM290
-        Q0dBQld5RUhVK2xrUzAycWZFMm94U0UKLS0tIGZ0UWZ2Yi9DWXR4aDVtS1NIaGN1
-        bEFsMFlubko0TFBTZUlxM1VHUFIzQ3cKEl/h0+Z78lEDs1NkP4OI0IDJ3f+WO4GV
-        oKTrTZgnVv3R1fCEqJQSDQjmbTIN7nz/FAOwCpEIwTpJNFtOcnpu1Q==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4eURxVlJaNk54ZnpHOWp4
-        bTNxTmt3bVF6SDRZa081c3BpdkpBMklVQUdjCmI4NzhsdW0waVBHNzd5ZkZOQkl4
-        dk4yM1B2UWk0RXBkYWF1TnJmWFp2aWcKLS0tIFNyREwvbDF0OXVnZkhHVnJ4R0NW
-        Ly9iZW5aRnlPU0Z2VFBZbGU3QTZ2ZVkKat4y8tBeGoNW3F9k3bsNJy4dVRSzvyPo
-        tfda7IJIrgdXNxu19v3Zxd++6SNxN/XqP8digBJ/TVxdWeRzQofW9A==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ1VwQW1IOE50NGdSSW9R
-        WDdVTUxBZEJJRXdoU1RsM1NjRlhDbytmT1VJCkVuK1A4MG10Kytrayt2YmJRWVU3
-        NTJ4UVdxZDZ0cUFuY1VSZ1dXZFJ3aW8KLS0tIDVSQ1Z4RXgzblhPMXBudGMrMUMv
-        bG9uZWp2dU1SNTQ0cHhKeENnS1pOSzQKPntp1EWTbdeRnTfzvKm9w1tyyuGNEn1S
-        jzDm4ReA4aqZgqpCBW9TPxBlIgWSB7B538fMEUfH2ji5gMDJFxwlaA==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMzdEV3BWUWpZMVNXWEp2
-        NGxDNVNSZ1hRMExybGRYUjVqSW51eFhNYUNFCkxGYzJWUUc1RVNPVWd1YVBXQkRk
-        dFU1NTJOM0Nyck11cHFZWGVNWWdOQVkKLS0tIEo4ckt5M0F2VVdCRHI5ZGQrNUxn
-        bnJWc3BJUEJPVE15b29saHNjdUc5MFUKbUEBLSnFxb/ujPB50L5rSiSlYY+lP7c6
-        0XIETgwctZHjPef/0FfSROWsdQ3Q1W1vOaUWE0fee3mtdc+ZIC/vAg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2elN2Ym4yZHFwdTFNNTMz
-        bURvaVRQWURxQUM1RmJkUHY2TXhLNUJuc2tBCmtHUUt5Z0x5UDg5Z3A1WGRYbFNQ
-        UTdxWlVPRHdDV2hOZ1Z5K2YrNHdweEUKLS0tIElMUUVKN1N4T05jckxMVHpZWTJL
-        SDlQYytMWUJwSm83amxqaXd2c25sMDAKiON37il7spgi5yYB3Iio3vXew03wCnKq
-        9+s7CvcWZRY2xVSZp6P/Wj8W29jVkTM2Nivbz7AE8H5YyzEph53Wpw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cWhuWU9wbUV3TUV6OHRX
-        SGVYVk1kNG5IQkNXMGdJT2dQQTNBNkpoNHdrCkRLYmk3NmRYWUI5MlozOWRIcTEw
-        NzQyeklmYkU5ZkNpM1FhTkhtMUthTkEKLS0tIGIwT1B2Q1dLNGVkNHlyRFl2b1cy
-        YzJwL3ljUy9XTi8reU9IdmdEcFQ4NVEK7SR6dAcuMPtJ/QvlNUQY1n4kD9yI2WBT
-        PioTf71bUkHkLL4va3F/+Tvx9uv4RadcnCjmH6PfV+NerrfZiwh5bw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaWRlcHlKNFVTWlBjWlZt
-        aW5DeXB1citzU3J2OWNNMWw0Z0FaTUdXV1JBCjc2aUZrendSUUZzK0RoN1RqMDQr
-        bFl5V0g2Y1VhME1kWGRmWkxUb2RGVGMKLS0tIG11NE9zVHhCTlV2aVRZSTJHMWFU
-        cUlJclNRdERMdmROb1RFSWhyZ2pGcFkKzgprch6/eszE30g0i2Z9WIB4E9KiS7nB
-        l45qs1qgNuKuBJBEaGYlAqBw8DmAgP/nPKDf4SLJgzZYNVBV/xqNJQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaVdqTEcxeFRIM3dEZVgy
-        K25ETmFwaHlweVZuM0ZYdlczb2x4enV1Q1JVClZwYVRybE02cDdtQkQrMVBkNVM4
-        Uk0xdHlzNjFPSlo3Q0piQ0Y0S1BmOVEKLS0tIFpGTkFERWNyTERPZ0xqQ1ZBMDVr
-        VlVLdTNRcnpYK2tRVDZyZnNneTNOZFEKuK9uHZFiQmEBqYfiX3pREj4tgkK3waDS
-        zxh6ZmhQ2N/2V1/SPJVrIfBoYqsofdO9PqQ6xKNBOXQAbTJSDwYr2A==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY3ZoU1cwOGtvUng3d2E2
-        cHUvNEMwL0thVHhPMFR5ZlNiSjU5aDlRQUNnCkM0bHAwa01WZmcveGNmeWtxT1hR
-        N0I5THlkWDFTcHM4NkFKQnNESXhJRFkKLS0tIEZnaTNyV3hIQmZsTWZUaEZVVzdy
-        TktaZnEzSkZHaXAwYzlKWlgwcTBFaUEK80U/JkAZLfSHJ4DCUNvN/LNos0XGVxVc
-        wiqhKS/C8/HWEYBRb6AqN+6r6Xveb83CypFq6eVUZEI1LIxmBd+eRQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraDZjajVDYUhXMnN0WkRG
-        WEM5YUo3by8xTXBFYTd6cEI1alpaT3pzQUVrCmFmTmVMVmJhZVo3R3JxZVZBaG5n
-        SHVWRVZ0WEZZd1ZscXNPZ1RiVzBlUUEKLS0tIEtHRkZoRnhjdlBDcXRveVN5TW4r
-        WFJONHNsUjJuditvVEgxQ0Y1RVhXQ1kKwBM8ljdCTTbjdasCdtLj4wZ+fX2XQIXf
-        IMgacJ5kxYHaYpNpY5wyK2kHzPY9Ovz75WyXicPj0SCojhoKvMAWXQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-07-16T02:28:31Z"
-  mac: ENC[AES256_GCM,data:c9bacPoSQ/6iQW6ICJfBRMPM4iPbXh4xPqU5XgGIYD9ssRV5sp2KI9eloTZNdxh5T49nfO8qkwlXsOFXTVjOlz8KAiRO0T6/Lq4mF8AsyRE0uPn2sZqrjDhcjTd3FYIVPCLna28UqvdO1dL8/6yI1t7Z2JrgrWxCqHG9dFtBWsA=,iv:54SRSm6WLe42EtvIm9vRzkq7xTiLYEItUyNuMyNsFas=,tag:ZTL0ON3s1TcNzEX/bLrmLw==,type:str]
-  pgp:
-    - created_at: "2026-02-06T15:34:31Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
+    shamir_threshold: 1
+    age:
+        - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3QnVqUmhGMlNZWDh1SDBT
+            bFczbUx3UDJPMUlEc2FmZ0hGR3JZNjA0ZlRrCnFWTlluRXRIekswa21ocGdYSHNw
+            WElrcHp2MU8zVE1qd0RwaFcxOG1CbzQKLS0tIEJtQzRUUTl3amQwSkRhc1lVbW9p
+            a2FUOHJBL3o2YWx3bm1sdzJreTljYnMK1A4ElCJzsnvh+MLzSEg1v3eknrpmaFnm
+            cQ4UVSn3gKvFScwOpJ46U6/p4z67enPvG2jCs2mdTnZkkmw/BOFX4Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOFFLci8za0Q4VTh0WnZM
+            SHlCVHFMczRpNFliVCttOEVQenRkVHVTWEdBCk52Z2pxYlgzUm1GbjVlMm55RjBX
+            QVlHT0Q0c08zMSttSU83WTEraGgwd2cKLS0tIHc0SmhnL3V1blJNbVNWY1RjQlE5
+            QTlJTmVvWWpJbm12OWIyeVMrT1lzSGcK0hZVuuTffl8fY2Rv81gGwy0Uz0cWijk+
+            7oAMNqonkX9P8VXBqlWobZGThaRIQNSXFtkWLqjM7c6sJ6D9zI1Nhw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwT2dnRGlISFEwVTVyL3Z5
+            dUlsSWFMYXZ1aHRiQzBtQTBld3dqZFEzajBzCjF2WGJkYkNHdEMvcktzRnYzVWdP
+            S1gvaDV0YTFSeXlhNnUyUFcrU1lIQWMKLS0tIG5NcWpZYVdZTERWOVF4SEJ5b29D
+            WmFHRURjc1ZwaUVNM1NLTUhXN25ia3cKNFsvlo9hFbNLj20hmIbLRX/1gd6S5Ocf
+            e7boo5Udo9OjF9ogWIdCTEM7goMYqE9ig4Mm1TrkEIajZMQ/wFAVag==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMnJ4UFo3TERBNVhqRytN
+            SFhudlVGYjFCZnNia0lBNkVON2swUnpDRkh3CnVDK2REK3lmYkc2ZjladThsRWtO
+            eUdMQWtZMVVaejZJMXR0Y3NlZUtzbzgKLS0tIGp4MHcycGgxOE15bW41TWJYN0VW
+            cHFrS3NBZVhOd05JYVVDRnN6QjRqSVEKtQ18L7ZKfVqvbvJi2IldGq53GZQQw17H
+            VeNhTXDqVkxBxetzNXasQFDkWNObKeetNB4EP+8oMC/HP3wjtPAktg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiS3lNRkY2ekNIUUNTRDll
+            bUFLUVZzc3BRWGhLZ0tla3FIMFFiSnpsdGxNCm8xYWp0SjVOYUQ5bFhiLzcvYUtx
+            SXcwM1pvY1B5azhFWUtyOVhnb0Z6ak0KLS0tIGVKTHAyS0ZrOGg4d2NSR0prdlJ3
+            b0VOenBIb243MVkxQlhlR0pndlR2WmsKTbOK5rOZqJ3pyRKDZ8Nobff/Oxwb1Vj/
+            IMmII/O38W/T2B66zcWjCEMpqI99bthznEY/YHhivFOmOZF1e2xnYg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHTzdkY3hETTFQNjRvWWo1
+            bXpxVE9xZEtNY3VrK3ZuTVZSV1UzNFkxQ3pjCjI3eUFSeHdtQ2V2dGtuY2N1b09u
+            a2llNllNYXZLdllwSmJCZkM3SCtFZjAKLS0tIDBxUjEvK05lVGRiZ2IveUp5SGVq
+            enRJYUNQeVZyK0JPUFZCbFhjOVo0MUEK6I9V4KAfoEyhStwViy6wA94PJs8kC0Lc
+            hwnYWCotPJc25Y9DCWt73n2oy0UH6RnAJ3aFUu7w8s1NbsH6UvTHGg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWmxsRVFzSS9sTTlNbFV2
+            Z3d4YjNBOTh2eXdCcTVmVGFlYTc5dE5wY1RrCnYxd1ViUjN3SDhJYzdRM2FYM290
+            Q0dBQld5RUhVK2xrUzAycWZFMm94U0UKLS0tIGZ0UWZ2Yi9DWXR4aDVtS1NIaGN1
+            bEFsMFlubko0TFBTZUlxM1VHUFIzQ3cKEl/h0+Z78lEDs1NkP4OI0IDJ3f+WO4GV
+            oKTrTZgnVv3R1fCEqJQSDQjmbTIN7nz/FAOwCpEIwTpJNFtOcnpu1Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4eURxVlJaNk54ZnpHOWp4
+            bTNxTmt3bVF6SDRZa081c3BpdkpBMklVQUdjCmI4NzhsdW0waVBHNzd5ZkZOQkl4
+            dk4yM1B2UWk0RXBkYWF1TnJmWFp2aWcKLS0tIFNyREwvbDF0OXVnZkhHVnJ4R0NW
+            Ly9iZW5aRnlPU0Z2VFBZbGU3QTZ2ZVkKat4y8tBeGoNW3F9k3bsNJy4dVRSzvyPo
+            tfda7IJIrgdXNxu19v3Zxd++6SNxN/XqP8digBJ/TVxdWeRzQofW9A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ1VwQW1IOE50NGdSSW9R
+            WDdVTUxBZEJJRXdoU1RsM1NjRlhDbytmT1VJCkVuK1A4MG10Kytrayt2YmJRWVU3
+            NTJ4UVdxZDZ0cUFuY1VSZ1dXZFJ3aW8KLS0tIDVSQ1Z4RXgzblhPMXBudGMrMUMv
+            bG9uZWp2dU1SNTQ0cHhKeENnS1pOSzQKPntp1EWTbdeRnTfzvKm9w1tyyuGNEn1S
+            jzDm4ReA4aqZgqpCBW9TPxBlIgWSB7B538fMEUfH2ji5gMDJFxwlaA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMzdEV3BWUWpZMVNXWEp2
+            NGxDNVNSZ1hRMExybGRYUjVqSW51eFhNYUNFCkxGYzJWUUc1RVNPVWd1YVBXQkRk
+            dFU1NTJOM0Nyck11cHFZWGVNWWdOQVkKLS0tIEo4ckt5M0F2VVdCRHI5ZGQrNUxn
+            bnJWc3BJUEJPVE15b29saHNjdUc5MFUKbUEBLSnFxb/ujPB50L5rSiSlYY+lP7c6
+            0XIETgwctZHjPef/0FfSROWsdQ3Q1W1vOaUWE0fee3mtdc+ZIC/vAg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2elN2Ym4yZHFwdTFNNTMz
+            bURvaVRQWURxQUM1RmJkUHY2TXhLNUJuc2tBCmtHUUt5Z0x5UDg5Z3A1WGRYbFNQ
+            UTdxWlVPRHdDV2hOZ1Z5K2YrNHdweEUKLS0tIElMUUVKN1N4T05jckxMVHpZWTJL
+            SDlQYytMWUJwSm83amxqaXd2c25sMDAKiON37il7spgi5yYB3Iio3vXew03wCnKq
+            9+s7CvcWZRY2xVSZp6P/Wj8W29jVkTM2Nivbz7AE8H5YyzEph53Wpw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cWhuWU9wbUV3TUV6OHRX
+            SGVYVk1kNG5IQkNXMGdJT2dQQTNBNkpoNHdrCkRLYmk3NmRYWUI5MlozOWRIcTEw
+            NzQyeklmYkU5ZkNpM1FhTkhtMUthTkEKLS0tIGIwT1B2Q1dLNGVkNHlyRFl2b1cy
+            YzJwL3ljUy9XTi8reU9IdmdEcFQ4NVEK7SR6dAcuMPtJ/QvlNUQY1n4kD9yI2WBT
+            PioTf71bUkHkLL4va3F/+Tvx9uv4RadcnCjmH6PfV+NerrfZiwh5bw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaWRlcHlKNFVTWlBjWlZt
+            aW5DeXB1citzU3J2OWNNMWw0Z0FaTUdXV1JBCjc2aUZrendSUUZzK0RoN1RqMDQr
+            bFl5V0g2Y1VhME1kWGRmWkxUb2RGVGMKLS0tIG11NE9zVHhCTlV2aVRZSTJHMWFU
+            cUlJclNRdERMdmROb1RFSWhyZ2pGcFkKzgprch6/eszE30g0i2Z9WIB4E9KiS7nB
+            l45qs1qgNuKuBJBEaGYlAqBw8DmAgP/nPKDf4SLJgzZYNVBV/xqNJQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaVdqTEcxeFRIM3dEZVgy
+            K25ETmFwaHlweVZuM0ZYdlczb2x4enV1Q1JVClZwYVRybE02cDdtQkQrMVBkNVM4
+            Uk0xdHlzNjFPSlo3Q0piQ0Y0S1BmOVEKLS0tIFpGTkFERWNyTERPZ0xqQ1ZBMDVr
+            VlVLdTNRcnpYK2tRVDZyZnNneTNOZFEKuK9uHZFiQmEBqYfiX3pREj4tgkK3waDS
+            zxh6ZmhQ2N/2V1/SPJVrIfBoYqsofdO9PqQ6xKNBOXQAbTJSDwYr2A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY3ZoU1cwOGtvUng3d2E2
+            cHUvNEMwL0thVHhPMFR5ZlNiSjU5aDlRQUNnCkM0bHAwa01WZmcveGNmeWtxT1hR
+            N0I5THlkWDFTcHM4NkFKQnNESXhJRFkKLS0tIEZnaTNyV3hIQmZsTWZUaEZVVzdy
+            TktaZnEzSkZHaXAwYzlKWlgwcTBFaUEK80U/JkAZLfSHJ4DCUNvN/LNos0XGVxVc
+            wiqhKS/C8/HWEYBRb6AqN+6r6Xveb83CypFq6eVUZEI1LIxmBd+eRQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraDZjajVDYUhXMnN0WkRG
+            WEM5YUo3by8xTXBFYTd6cEI1alpaT3pzQUVrCmFmTmVMVmJhZVo3R3JxZVZBaG5n
+            SHVWRVZ0WEZZd1ZscXNPZ1RiVzBlUUEKLS0tIEtHRkZoRnhjdlBDcXRveVN5TW4r
+            WFJONHNsUjJuditvVEgxQ0Y1RVhXQ1kKwBM8ljdCTTbjdasCdtLj4wZ+fX2XQIXf
+            IMgacJ5kxYHaYpNpY5wyK2kHzPY9Ovz75WyXicPj0SCojhoKvMAWXQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-06T15:16:45Z"
+    mac: ENC[AES256_GCM,data:ircyr5fVawgOdc0+4QU0EFzrASk3LQ+Rks8wsdWR8lncYLKZDbQjSaJQPUqWAOe7vJ8xZuzSHSc+5cZ4Xpdl4PjFNR6sulIioS9C4CeuN/ZkYlHxvVNN8uqZpiZNoftMJX5DbXM6jN36swdk5InLwbzFs46MBnbNMsB0RC+xOYM=,iv:37kXynrwkPZg6l0p/ZnNx84Ls/aX9I5wGNP9jDHlFzg=,tag:CP7zSOEd8FLCBoWE1MQyAQ==,type:str]
+    pgp:
+        - created_at: "2026-02-06T15:34:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----

-        hQIMA0B7mmjbybiOAQ//blUsfVtguOA4xjR33s6q91Kbi+e7bI4MGG21/R8hF1V1
-        ZFk/uxn9yH6w0I+Jlkf4bHCGyknMhd+eadwhsSXqCkl5pdAZiVU16devSmBvyizN
-        1zbwBPqUVtonEjxJoMkqBsivnzLHLhcxDvaL9CuHSMguHdhZTdYOSyMclkijDwTe
-        YmLFnm9H0iXMUImFzylKG3eI7GRch4SDUz3sRjHq/OPhWrD4zd1jBPwpqbphn6Tt
-        OlggLJiE8u9z47W2zUabxcx8E7fnUsW4veOLYamENdErvCqquUE7oK/+8pRFeKdj
-        bWmLkAmQRTjG9HENw1FX+kx5RTvwyqkPN/goYMcVu/Po1FoSW+PSDvrMa824NtqN
-        97i03Tn6WSzLaxaO4RAwGdp8nYoQQqcPbLR+/5EsPnZ/s2vdAESk60XEGM54Ewjx
-        rRdVytxheEH12Es25dxxaAUTZyfRsBj0tJYUt+0F//ZXoC80KshYuMHHNaZ/KuTA
-        NDrmDKc2lu3jDDK/HRpC6t3VwplD9de0JArxMTTbfUP8v4CXeT1u/gVAJHYKJNMn
-        o3+GJ4yBHm8MERzAj/IZ6rmME67H/KBAtS0UXEzboz8l6EUKH6+pntGecjN0nTX9
-        bLkQJ7tSLJDNzAREQL1O9nZyjQqfQtQ6qxUD5PrzvAOAk4jOL2RwTw0usSI9YiXS
-        XAG+CuHA4+IoMitlKPAW5rQxxLs4UDS0k/RavRl0yoND0CnSx0hWLhANKJIHK0te
-        smCkFQlvZy2veyjeTkuB9Xy25k9dZyY3jN1MVO53CObSJ43fLdX8dLORWasK
-        =d9lO
-        -----END PGP MESSAGE-----
-      fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
-  unencrypted_suffix: _unencrypted
-  version: 3.10.2
+            hQIMA0B7mmjbybiOAQ//blUsfVtguOA4xjR33s6q91Kbi+e7bI4MGG21/R8hF1V1
+            ZFk/uxn9yH6w0I+Jlkf4bHCGyknMhd+eadwhsSXqCkl5pdAZiVU16devSmBvyizN
+            1zbwBPqUVtonEjxJoMkqBsivnzLHLhcxDvaL9CuHSMguHdhZTdYOSyMclkijDwTe
+            YmLFnm9H0iXMUImFzylKG3eI7GRch4SDUz3sRjHq/OPhWrD4zd1jBPwpqbphn6Tt
+            OlggLJiE8u9z47W2zUabxcx8E7fnUsW4veOLYamENdErvCqquUE7oK/+8pRFeKdj
+            bWmLkAmQRTjG9HENw1FX+kx5RTvwyqkPN/goYMcVu/Po1FoSW+PSDvrMa824NtqN
+            97i03Tn6WSzLaxaO4RAwGdp8nYoQQqcPbLR+/5EsPnZ/s2vdAESk60XEGM54Ewjx
+            rRdVytxheEH12Es25dxxaAUTZyfRsBj0tJYUt+0F//ZXoC80KshYuMHHNaZ/KuTA
+            NDrmDKc2lu3jDDK/HRpC6t3VwplD9de0JArxMTTbfUP8v4CXeT1u/gVAJHYKJNMn
+            o3+GJ4yBHm8MERzAj/IZ6rmME67H/KBAtS0UXEzboz8l6EUKH6+pntGecjN0nTX9
+            bLkQJ7tSLJDNzAREQL1O9nZyjQqfQtQ6qxUD5PrzvAOAk4jOL2RwTw0usSI9YiXS
+            XAG+CuHA4+IoMitlKPAW5rQxxLs4UDS0k/RavRl0yoND0CnSx0hWLhANKJIHK0te
+            smCkFQlvZy2veyjeTkuB9Xy25k9dZyY3jN1MVO53CObSJ43fLdX8dLORWasK
+            =d9lO
+            -----END PGP MESSAGE-----
+          fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
+    unencrypted_suffix: _unencrypted
+    version: 3.12.1