From 25854bc608ff282fafb8476fac4ef36da7e5f3f9 Mon Sep 17 00:00:00 2001
From: Dmitriy Pleshevskiy <dmitriy@pleshevski.ru>
Date: Thu, 9 Mar 2023 14:15:44 +0300
Subject: [PATCH] machines/magenta: add woodpecker ci service

---
 .agenix_config.nix                            | Bin 4123 -> 4415 bytes
 machines/asus-gl553vd/default.nix             |   2 +-
 machines/canigou/default.nix                  |   1 +
 machines/canigou/hardware-configuration.nix   |   4 +
 machines/home/default.nix                     |   2 +-
 machines/magenta/default.nix                  |  13 +---
 machines/magenta/hardware-configuration.nix   |   4 +
 machines/magenta/services/gitea.nix           |  13 ++--
 machines/magenta/services/traefik.nix         |  33 ++++----
 .../services/woodpecker/agent-docker.nix      |  37 +++++++++
 .../magenta/services/woodpecker/common.nix    |  28 +++++++
 .../services/woodpecker/data.secret.nix       | Bin 0 -> 220 bytes
 .../magenta/services/woodpecker/default.nix   |   9 +++
 .../magenta/services/woodpecker/server.nix    |  69 +++++++++++++++++
 machines/modules/docker-swarm.nix             |  14 ++++
 machines/modules/traefik.nix                  |  70 +++++++++++++++++
 ...{window_manager.nix => window-manager.nix} |   0
 packages/woodpecker/agent.nix                 |  17 +++++
 packages/woodpecker/cli.nix                   |  17 +++++
 packages/woodpecker/common.nix                |  37 +++++++++
 packages/woodpecker/default.nix               |  11 +++
 packages/woodpecker/frontend.nix              |  40 ++++++++++
 packages/woodpecker/server.nix                |  27 +++++++
 packages/woodpecker/update.sh                 |  47 ++++++++++++
 packages/woodpecker/woodpecker-package.json   |  71 ++++++++++++++++++
 secrets/docker-config.json.age                | Bin 0 -> 2161 bytes
 secrets/gitea-smtp-passfile.age               | Bin 1429 -> 1412 bytes
 secrets/mailserver-users-family-passfile.age  | Bin 1451 -> 1417 bytes
 secrets/mailserver-users-gitea-passfile.age   | Bin 1443 -> 1384 bytes
 secrets/mailserver-users-jan-passfile.age     | Bin 1473 -> 1471 bytes
 secrets/traefik-dashboard-basicauth-users.age | Bin 1366 -> 1423 bytes
 secrets/users-jan-passfile.age                | Bin 2428 -> 2426 bytes
 secrets/users-nas-passfile.age                | Bin 2417 -> 2481 bytes
 secrets/wireguard-asus-gl553vd-private.age    | Bin 1607 -> 1624 bytes
 secrets/wireguard-canigou-private.age         | Bin 1379 -> 1361 bytes
 secrets/wireguard-home-private.age            | Bin 1524 -> 1552 bytes
 secrets/woodpecker-common-env.age             | Bin 0 -> 1433 bytes
 secrets/woodpecker-server-env.age             | Bin 0 -> 1544 bytes
 38 files changed, 535 insertions(+), 31 deletions(-)
 create mode 100644 machines/magenta/services/woodpecker/agent-docker.nix
 create mode 100644 machines/magenta/services/woodpecker/common.nix
 create mode 100644 machines/magenta/services/woodpecker/data.secret.nix
 create mode 100644 machines/magenta/services/woodpecker/default.nix
 create mode 100644 machines/magenta/services/woodpecker/server.nix
 create mode 100644 machines/modules/docker-swarm.nix
 create mode 100644 machines/modules/traefik.nix
 rename machines/modules/{window_manager.nix => window-manager.nix} (100%)
 create mode 100644 packages/woodpecker/agent.nix
 create mode 100644 packages/woodpecker/cli.nix
 create mode 100644 packages/woodpecker/common.nix
 create mode 100644 packages/woodpecker/default.nix
 create mode 100644 packages/woodpecker/frontend.nix
 create mode 100644 packages/woodpecker/server.nix
 create mode 100755 packages/woodpecker/update.sh
 create mode 100644 packages/woodpecker/woodpecker-package.json
 create mode 100644 secrets/docker-config.json.age
 create mode 100644 secrets/woodpecker-common-env.age
 create mode 100644 secrets/woodpecker-server-env.age

diff --git a/.agenix_config.nix b/.agenix_config.nix
index 13c7930e42be92a31f72595f0899ca576e40c68a..3b16faafc9fbd1f6c6c684089448a83f77fea6a0 100644
GIT binary patch
literal 4415
zcmV-F5y0*MM@dveQdv+`0NXVuhfXy5dt3X26j~7;mLb3l!DNlePXMLB_iLsV8w9t_
zed8#?E|Z)8{Uo`@zaB<{qH#gt-E#Q)WIx#ns;WkGQF+a}>%<@`7ZY<-?yab+CTHGJ
zmU)<*p6j2<!D^QO(~-_NOZ^)u2|LDqn;@*kFP@p_Y;Sb}Q65)hJqy=bmeA9Xu9N$m
z++*jtfaYeV*t))Xijy9xUH)We&$s^fo%lu=g<R^yD~)hX9ONUty?n3r<9SZNP^zf0
z;%<Nb%zh>QP%{l5U=-uc<?C&rHdP{Ih<E#LV5MYCGsxaz=NKu$6qiFzeK{&TfJJsD
zV(c^BK3FQME^j6Gi%Mvo;Eo2jYj{aL+pBUPX)sf)=mNlv8*@Yi-+|(=o#p%$M1e6l
z=uD=XZ6VC`f!^o}cck`L*74(b7GG0GlDPsF|MAuY>&I1gc*OY%**{#Ssi723{3V9%
zc<cEz!sVh+PsEUOhVeQgH`})SN#-&*EDyj%6%q7<?KxXsOpB}uan7@4Irp$@2T970
zP&xZg0H!y3nuv|17o#>nmxA8brRF_O+KM2#@hr_tvBY2yVN^^^OqDc*L-%0}m2jzi
zo8?#_kHPeEfm$pv0EvJWh{u$OxmYZDpI87r8nWCS0zsK;8~K_kfhjE{j^(6p+J0L@
zKRHE<i^vUlOiqcTF{9G`HKcD=$25E{gFxE?n9$0nRUtH`NfO*mHGjmR?Xu3=f<x;s
zE`EQiXk-4?31r9&_*mo(lJI09_-?o17K&W%01K!Sn1Wi|@{y=iz+&OFBk|y*(w1Y>
z{?4;bE^VKO4_4wNT4D**^GThk0%jx}Up7_bza2>W2C)`)1ql7As@?_X6aKT1I=P1N
z?$y;o?A!(2zi-1-58`oa<pkzI_WheTy+u;_gbC*{A##){b#?TY*&p!*iQ2K9M9A0l
zn`Dk7KU9}f9PywPGU4zp9>BZV5ZYC%PRu2nF0SxxPSP})=}azmB|q=7u%4ni5?+!L
zOe@lUP=3ZcEeO}#$}X5L86s?SI3izoW$m<ovpTWo35vUGME@Nn6b8V(c%sbLI369+
z9X*ouLK<?&^;mm%?3f<`W6!*eIzcWBVAwT$X@(Lhge&TBv6PMix*2<_>kc{A>R1)0
zwr>`O?M$iLT6!(PROGesZtv=!3sXgvN8TLl@mV<6MY)}wmesYIlL8N9q?{ejv~k_J
zk{SMTF{1VP;uL?Rr3jJ)q#!)pSO)IFOVOTh+4`Awxx2mZ5)lbL_4ICcqz*s4dowkE
zf15yK4vY|4Mo{Ab;YTm4K#Q8B@I}Vsv?cGdivf4a$1NH7eTCVX3JyqViKh9k=VlX3
z`7~;<du9iJ189tMB?-4<>-?VG&TbJVq^v?Lsa|yl6$XWIucC>X3~RG|RLb|m)NRoc
zCu<>#1G*m_BIXagQht5MXaDGY)<pn~*DUhe9Oh&!u7F*66c07@i30F1q^p#6l05L=
zoRFEoFb@|WIA$cAiL;D(>$I&EA1syMZ+nn&h`y$m+2`DI=26MJ_8C{kwPHZFwsv;<
zbYC<VAx>ad6hFLQ-Y-las_)}$fG&7>1oe|_n`_v6>3Kkbm6>}ZqB|H0aGX{c22A!X
z2(#C}f+R=wjy5~!i5vnOh*1XqL_Xyi;IfWu?}ATgp8N~pfdG)%tPFX6zP<mc&LA?u
zh|T0s%@yWa&{ii^6gZS&6=X))nVL~>8wirFS+Opgj1)m>mKnBg#bX%KHD2v%iU@mE
zZwqH>hbB#-v6{P011A5=vKn9P6p%;Y;0W0%gSLT8uFWqVmr_EFz=l|uepEh-_rD#?
zol<`s-Z6BQ{P)4PagLuz9(p@+%%~YU_ZADxLZ$oUxnyl9fGSU4F>tQLw_5AP#$TeZ
z897Z-sG(8JL1L;)6$vW~43v8>7HNYsY!$U*$<W9AI}j|NZrrxSyC~_8ur|2?DkN;v
zV;@{5LHs;EgEAq*X(HqMk$!E<%Gjmull(G+B)QNs5H^I`o^Iy1Ye|Tp&93nv5xjj1
zbv*<k)gNj5$hf{wJ3%UsFq*!tIHYr3-x1CBu4e@&S99GMmR2FBeqh==q$nMck2V{=
zbd_j}>!-NGVuW9R$m(4uG14uJWCO=H*|j}aUS%8{5&rkz35fbNHu3q((j8^$6qm7#
zkPJ7b)X`iDbVwhQ6(}PBa#e75%OeTSByzf9q4<U^mG3+yCp_j<#}>_2FEUa;x51pk
z1DJ%l`@}GT+Go>k;V+sDJEy=`Q^bn8H~R_;;pj=k%Leaw-#^h$%_nhxQ>LN9I8~7=
z?15?*>W4r0n4xP+!P7ai%SG~YEpN3QYN+82q=V!NwMu>Zb|gUq1=<9GL-A%H2GFwY
zq)p2V55iHBWsr%Hs!6qUM#<muBWqV3#I1n>hbm+<0Sir&yo}ZB;{82?TL(Lc&M=^M
zI<_GUZR$93wcV}$v={vyqM4lp?jILb(eLS*e4`i=l265_ydbCr&ys`f9_~+ULVch@
zl9&*?Oeia6ag#yR1aDG6;F~r`B_&&$0msIn5LJqlxuuLksNMOMQlUMK5VeFhC*o;p
z@!H$pmC)uEF!T^h;<a(GS-_<yzjf2#hPi2Idm3*j;2H9)Uyx4~eNi{ZP>BxjdI@d*
zisNT6AvtNPU2cT5>9ZKXS!}qr|KN;`di~}2?f>RH`Vul5qjKV^qlWsX@7x|0Dp=57
z!eojr@90gBLs$IE97hk`*HhldMd?HANZruDlL3cQOju*ARhX4;(qiI4EKDK~9OEr~
zkJlSWTx_2VP9VXC0=n;VgFV;u<bplNFI7x)|1bk7P+E|dV!dZ0e@LE1whR#gbH`rf
z2YxQ+0Tog}9NEKxVB2gyd8@AgjIBKLyijszJ32r&#2&GM#5u}(weRz^bPQTj#9Z)K
zQ*cg7mCiS)JTcdK_XT0J2MPB)+Zxfp+Qj_DidE-PLI=qWOaF=YRgeK(b8{O%oYZ3l
zH*)iFUG`bY@AZ!?kvyA3qA8jc$H+d-ajV|^G4#EXR_N`Vw|#h_&o{3PE=Bwq6-zn7
z*pt|Sx<wC;r)@|C%n+{Q3IDXT#gWPLD(||&Nh@xtI89sJQB&L;(5Jw>XmF|)7>cjl
zJg!zM&F4O|^W984W*T$~|D<dSn~^MafrL@OU!&gg&+cEDi~CSjicVjzm(mZO&4LQv
z;3Tq1U98CmRH~(f-2}~sb@lG>0?uLqSSk4_30Y+7S@cW3WzhxjLEAg*ZiZ~i`;fgt
ze7B63O`H{u%8$&CdAiFFKDl$k-?>?tC|dEmSd6J8T4&`QX0_&cA!eKK_9JZ}Dfy<+
zP*{#f0oD#ykC6dm6LVVgR{#>;1Ey^ol4tdQB235IaF4cYWG>bOZ2MozOmKf=!tHcU
zG0s)=X4cXj^QzeIOln-)NH5q70AB$=h=0xlKg9s>`#lQTM~3kzT*&kodP-Nn?4(OK
zQS>`tX+E;)FwZ0$M8Y3UGrV7&{e!A1ZUlU<q}7vd@=f$mZ!PoQPsH95S|seUBgYb7
zCt{MnbX9lK+14{bO1=vSf>0;^9@hB=S5dRFrz=q%G6uQ4bNWs_Ny!k{Bi4t^aydC*
zeD=HSlG&IvCM(nYi&OwHYx)%H2T-FF?-um_Qv|A9{ycB~-<pCqhkwjblAY!dyQRK9
zDbU2JivzmX55mUxPGiXCN~A0MaUDw#N4sQB-94u9JW+~oQ;_hgN16<uRqS(Hf4VZY
z1P4>ue{)=tK{(x1XuUh)K~;hw0F>oNQ)L77uXD1}kLce9z1+*UIXW*I&f=&^!N3Kp
z^4a#Hrok)vq1-D7tD7Y4*;Y+}`&v3bx9JlOv+`?eOiy8GVE%y0$9jru2gA6;8+y~~
z+A_KS)szJlrS$d^rfpqi+bU31!G?48J63zn!4(HHID&W70nbhBV6o~@!>o&X7<y8V
zx)MjOLlmyvTx=A)hp`3d<|5btmoQeb4}|R^hL#{Yf`-B)9{|PLKdfXIG5S|UOv=TT
zJ0)>uL5B#K5xC}+i0Q3pX9SL16c!_+hq0b%o!Oj7zS7hnXREUJ@V24ij;VH^`=K@5
zyOHe@6tV4K(BFF$QierhgOqU9Y7jBud3Cj3Ne#Qq>ybJ^-e`{S(^1*J-q_&it)x{>
z*sV#S;i7lu*8(xN#?cNl^9!;&w!%XIf9Ap1`A*mA<|tR9+`~kId5OJ+wtl^q{uN^Q
z?Km;oC0GZ4Mg!#f6V7VoUiRU7o}*k5TJL{9_FwXstwFgs4!uD9!67|wOF}e2K?-KL
z@{dD@`&)&`z=(5$!M|u>7<&G79U9P_nzWdvNF*1INS{3fRBm0I5#Z0kG16p=0KMTi
z%smoJp+QQMQ38$|P1WDUnIJGAU?TJLieYm@oobS*3GTS|<#}^)(X;g$BX&d^rw=Yu
zE3+;%_((%L1ew>)K(J8G@_r#d5uRYE>WonRLlXe4Y9xn`a7`#@M~&m@>ce#@^QA?i
zU+3?4O?!#IC<5{OuVCo_kAcG}@vEd^wIYgrMj(OH%PnCmh3&A@<Y?{JYXk>Up|jLF
zFVy2#d#L8~JDqd6=gU}Lcb-x*ETX6K&4W{Or?rK!e;plJefIXv+PxLn<}>0F2GzBQ
zY4YMVI!^3RsDHb+TKzJ}vCABz9vHQ*3Hj-9jQKSD06Phu?(mKi&{8$G?CYKUCYEbT
zNO!llT#Wt&z0ms_hEGe&I9OR|L)TI@*y(DAOm-1%{|J!_pJ%-w{p)B6!E-K+JA_a%
zXSf|pojITgw#f&|Pv(B1PZ3h@IZ&n?uG(%<v+KY>`QSt`n0&+Goyl-)GCVG{RtLsG
zaIMB%l)0p#uwg|G3{sD%WoLQejZl&3UP%l|g%szV4*>MJfvy~4VsC|H^-O}{@}t{J
zSxUPj|B#jqk_3P!EH$ytH!xA`H{vKduC@Gw5Ws5&^O(_t4G!j9Ihwac5Smu1N1y=!
z1ks*dpru0q2_utf*T8P)c{OIxGcJ2VUCWnTc+m|&D{^A%|22Vb_ay1Xvy2n~SW1mG
zHf*zE&;U3B90bws9^CFEpt2i_B+O4uP*@Pj<}Z!L@gic;WFXp~#VU1kIu|8set~X_
zg?+iP5b?(4q2U?_V@sFe-B#+{Q6803ihRG=5oy^U+N1L%l6Ed)@!}}GBFAT`25gqQ
zqo2C0kBUt%{O=ho{MLJXxoepE(jxn9PH0;SaCC_(cE;4a$5ua+z(8~lErL1TvQuRG
z4@44m2sGuU6)d=fEyU(nPCM`S)U2s!BX$QbaiWUlD4l#)bqHJL!*R^zhXHsWAHW`W
z+mgd+vOqW5RT^@4I0r07vl&z$98)ql$Uu1QD$x#Qo6XGQdAha%Y}aQqHr%hI>9Y&{
z5kB4@!$ZzHDp<v=Hvujr3j&wUxhcnhC>(Ms5SZv3ml<&yq0{icZ>1aj0eYsemG7hJ
z#@!X36fW<LH-s$my7ds17dvh^V!uq7g2qY(`rlga9N{4}NBaEi1|X1$ASB9zoW3)t
zDnJ5IHn8R;MhA&r7JjXR-(iVYW*xreeS~!&kAJ&T6RScj_PaBywr9Q<++5v$&%=Yc
zo_BE^Qz=<;qu7zK`FY<UnYt}s^FC`VI@yj^Fe_JeY@ZdS0-WMSzRCgf1qeh{n=H7v
zKcTLoPVU#D-d8uSDi0p-)DfCuqWi$j79~ZS6*~H#XgI&sN!St{66+ZQIj>@otT(5}
zm`J;HKqcwfMv*%J0-iYFB9U!1@&!<wqM(gu<v$qV#ovzy!j4Hi)pVEm{|lT-_iQ06
F4QiuBg?|75

literal 4123
zcmV+$5ajOwM@dveQdv+`0J*DJ(&lTf?`z~$rF*|DcPE`==nQg68Se4XNPl!POoYy!
z7j!>Y+1j7P!Xp;<W7;(@5Fc7%xhuGw!E+hkPnP8h>dw6+Y(`7Pu(^q~d6|nRdGkm7
z=&!bb<~>4h8InC<J+g>V2uYR)s6~Pc?I&arn$W5NAz6pSK+i(OPSfp~Ci}6Xmt7K|
zIJw;TO>rPqE==*Y74)bAByCnPFDbUr_h(4q4myzr0$#CeNGXrUqlIUZNe1jMQ4`Xv
zCbri<Om*L{nP18(6c{^%xU^Z&%`w}MK|IZ^ziRv>K}HHL^zV4ER&A;f3n&XnT?~!y
z-P)IB6SJBWU=6Ytq^p_zpQ}LLTLFh71N>^<zU{w>Q!w*;JJy>?u>HM|-s2H5I9}eL
z%rq?h*LyZ7{jiAF3hy*3)SWb2sF;*zpkj>Gx}DQx2QrrTt&3)ZL;@)6H8~O2m&SMG
z7ef9M{+qDNs_jp|^I=k6%97{(6f>|$4GBX+lA;i%k!@UR0CI8g0SgHdNaYEH|FcgO
z5uXy7z(TNuUp%TWs<-oGpV_}6@+(Dfb<lYCZI14NZOk585FfuEN2(xb#B%|pu(VIF
zSEe)|24r#V$yq|{?llVvXi>IAebbiv0L-pL6fuH&_2zCI4=lx}zTJsGO&8R?`-%1Z
z#Uql*QRhV_c24WN=lcmU*(!P*l{hr*grRarx7r&U2wKO@4<$BDN4KId`YsUw<O$aV
zXaPxf?gCeQw8X^G94>0o`M)&B1hjowU*TiIW9~#4Er`$yb1_`Y=^NO6Oo%)iq#6M^
zLCm}|`{U%}@qO{jGcCfW)uNZ}`KCZVu2Nq|ENP65B4f=~{;4Z+Dtt*F<qHsn(FE?l
zxZ;el&5;Pl7*#i$B)4#g1D|4vMS^t!bXy!m-Ny!_T0gMnRvuF6?G?N|+q)Grry@Xf
zgsG5%$0tL^2cIqu&`CydwSscTjda$2CPGQk=^K_0tW?2jPhBd8SE!Re*f9NH@cP8i
zWsEx8r%=;LT<U=4TUHPxgsp_m+$(^7;N(&+yCclDLff)ENAe2)Y$Og~iZ?gM%cM9w
zXw`E71l5@5(X;A)D~6FCB>bG=5=2!F5{HIB$VqhTu9Uru4f4Du8Z>F|%6-dslP467
zdaA6$wOE*OmmTQu<TT<i5{t`AddcD=omg&kD~>_y<s{4}2-vq<D?9iT;erUA4D6D9
zu8mSCz+(`x<?@QXYYiVxSGRkb#^x-GKrAk^SG4EpntJB~=~hiuR{ZD=iG)7vPo>!l
z<8ew${;glz1KP!6#UrkDy0z5nPF@BwGHQjEwZixy-<m^}vP=g!GVYA2&l^Ec&=dSf
zg-Z?Y;*Ri;q{)CcJZ~1MybD{IuoyMRG$(_Td4iabj{lA~k>?WTw|;L`QD$o-V2n|Q
z`!*HLcRH8oV3W*E?Z*6Q{<+8T+=D$m`zE&)+J`{?zKXFw*ka9MV{m^}c#6(k(%BN6
z!tQ$6xDS;?lDOA}@kn@{X+Kzw8DyY(tE?+Q@sr)fr%J#Qu*1=^8J|OC_^hTGnQm6V
zO<9S<$5}Jyg2?@Iv9aK(ESf-scDIflSp49L3-9pwOJEK&s-n*A2CPTB<gMSUfi%}P
zzL-Qgax*cIwUJ!=UC|>3UnlZafik*-B&8ZS<gw%?v@l}`*z2UOfCDv==7ET!t2Aqy
z7jk^Wqn0pRi3*gwrCv?&;Ug1yW#N5Spgo@%=#68vs;o%xw2%LFyk^OhCbBN{?H~&W
zN`4vhu^^zL$_N|;EvCEv^f+!8$AuA>>EiIxqwS5GrG3^8&@7mh|I0{1Zmy9X;nPOW
z{ApuypA8kXN{1QLadm{2qFM=Ug}NUU+`0Qkclz4=wS$9)6KJ+wt`p~gb#6AX^&o>|
zegicbw-gbCG^*_7h0`injdkkIh&Tm!d?E+FL;6o|O2(%KFoD~B3m3*5$x)Fk1p8>d
z;Nw9si32538!Q%IYrA|gnA@a<0}?cve5z~#l4X?lAInOR6ti7*N)->8b{oDS;0zJ(
zmHO9lU)Ucn)JBgY5~4zvO{kldwlVwtrCV~n<J=;<Ug_qaM7-cZzf}Pqj^j*b6Dk0S
zu19GqHO8b3VdAG;=-09d*%0lWQsz2#@T5G(HOx6hRD5=#{Nn5R5KJ;;G&}07d^?~t
zT}v2|De7sv>Z$XX1gUK)yXm&O`kCF0)WysLSKWcc)#1O5*b4XpvFh!mr!A!r-aI#+
z&9Sj1?*B^xmb|ojJq;gQa|GM9>qH9}E2hfQ-OAX>Pq&h}!*_X|yb#ZTJnR<dz6hBa
zOI+pcLFrrDNMD9`$@c^q28$a|0>yIqprWp%J9-yiy-h?JI>3N>tWNdIkhKGndk}HF
z(6Ic@H1L*5nE)R-hRP0Xp0w<Q=}`)xKcHe4Kzu{;MiSI?HKj1aKyzO6I^~+Si#}@L
zj;jS^yFUWLG|c<C66Rb5La1B`9O}5Jyd(8X3iqj3QjlTT+7kUx5e(XE9^=*tW9=ce
zM6k**f`a=YmlJ>y&r7|1+8d5qW^DP<@P>t{@dIT^>g<?7gOczW39^uJle*Mx$IUd6
z-1pe(x3EAO{itb{UTzJT+?#3eroX;+9_UE$x@Km!BROANWzns(YyNo`T)ObSz>j1f
zzE=bVQRsZFiu_6F460RI$$`?ayR)5lS!n^X@W@N>Qa)TOLwUS{xua`LtmC4oWOZuc
zV!qL5+qAbEC;b$gJ0iMGFw;zy$gf*n>~ZYeZdlB8T?%)8PsOwd4@V;0;H0MXA*8wZ
z<`k~4E(3YN>lBu_GFwvK#u4lq+7d_TyX>Q4&FiyQKhlnbE;AGH6p2wO?txCM%Ci+X
z;_0<iTq=g$FMJ{)0Lpnrr;H;m{nygUqpv36BJT$NA3`K;<rT@A8TBfY_ou!D`FsL`
z=9=nWcet(qMV5NYq}WzeoSbGD8@<)PsTt=e1KKi?ADz2c6_W`}lFTWsiD?-jfZX$2
ze&dqlSmFs0V}|roCj#8X8mh*Q<8`WvmI%rR2q`pI4x9>K?dD|JC(P5T#pw>O{!%}T
zF?2O_q*_g@5tRuw^QehUe=wd7CGqp*mehse&iFxzN-51+BT-n%M`k-J(vmco4yrxo
zLM~N_PY?Kx;^=NJK$bzHx7kN=PT-B{)fru4ku-M^0$a$km<t=49;_G;9nC2Y_yPf~
z%$|QUga&w!B_x;vfyc^mGL-mt&Pcp$X8As3D2KW!cpM4$PDY2e%QONvibwkMCjNml
zeD`R8$xjov_15T#ylHiBLo`p;bP_K)wvWf2?b1tn)S#s!FsH_5lds4~jmBJ5j}Yb3
z+iC!v6?tRk#K#Ggbx=a6hV|xj+4e3;V5%zCn56$UULxx>+<^|WCu#IXSIaQCZ|JiQ
z2r9jvdY8*QbfnVcW?1K#tLZbbV892-xJX`~M71guG|3(w`V6CmMBhUEiQ}Uk9lMGP
zzE)mi4<=&oxml5V_P||YpkCGmZcB!zYNLB)D=1%Hh#Sq~xltS5fsTljH74VPThb*5
z8b`?*F=CgT&KkN2!t)sbOBvAxgqbosz!VE|pY*+n!x9}5k3X2ZK_1z1W|oAuGw*84
zx9ZY+6f^U=&`H-s&odJ>Go$@)TjuIQU;a$c+5)8bP;8r|ZsLe~07MwFa&WC$r~-Ta
z11Xw8^w@#p#{CE#n<J`qkB?Fl&NEd#B47TiY1{#|ixTal8!Ny-+D@rGnL+zZ`i(r4
zAvc+Z4`^Lh+}w2kp^n^YZVML4oM;TigTU+>fIo6I?{|u433R&OEuZaAzKMqXkS%O#
zEFc(ogCk0k?lIQnjbM>QNSbVPpLl)`8x_?Ee#X1~VpzJ+7$Q`?$kB*@fZ$qHytBj1
zhREzV17-YgUNTS_AWyeRhI7v=C{c08n=37KG1Iu?pDiqR$J8k~?yI_5Uv0n#zt8`(
z6s18($$VTEPF=d?+YLe?$Z$y{x^cCtC46WdlMwee5s4R0d-L#fxEj&5pkw9<Y8&&%
z$i^-v3Lav>z0UIo9!sK@E~jBP;@o0|XwHx1>}DH0aKBnanIBVojC*k~jTkwiUXL5(
zgMnRmr#7U7_B)h&(jGVht$`xZ$qe2mz83Q4U2-9+nB_GUxUv<7)QxmQHyMk$ULgET
zWe&om1*Wvg{JQM);w;kIrvuGq(w#%ez%8{#CrN0$IHKbX>=i<Yd-71CO;eiT4qJ3T
zelr>lQ|lXN1R_&z8?O46XTW$!%1(?;Re5DAG3z^?($_mC*ei#2D9kT^UPO+Xv3B-O
zYtR9|Zh;tb952U60xyQm<f@qzGd@VLyap}`@z;WhCqL4^0xp=6PjdbNmljR8_K?h|
z!n!FPd@Y=uY~A}jVtDla193&H9oW#f>_OOFgTX&eN!j!mgxkh<ADJu!iP&jCbrUfD
zU@9Xl$bSO=UF<xX8R^KHb^KOQk0i7i3DGC&ERbcdkcAncugu}IIN{|cQ}5lZix{*I
zIOaU^Ubk`lc(CCmVzex}1j%MaiDpTkea3r*+RRgl9NjEmxZ(U{Yja(xN`*&HRSY1G
zq4xXEz@hWE0MyXK#tRGiF!l8KFZoBz*|Y50W8*i;>PR&z^TmW3dSoDLA!?$E#jMLL
z$4I7!slt0`kd*N&oM-9{a}Io^n4U27pC`{#67xuaIJo!4xu*h+q#GCgB0ER9(c&A2
z%0l(>@eLyFx`lWT7;w6+p=8;NMR!t1V-f1I;T#l@sAy+DnRJyX7*#cq6qW&Q&-(3Q
zvvOMd4=QN*3Smtvz-NW@x<NmFzs^6bTkXDCc&@IKpt=H?NV~DJ+^H$GB5P(GPt%VK
z$bTw0l!ba>sx>o1xmTiV{goCWof?uL)U6ad+6${`X;sGYTvCZ!J!|wye<oyZJK^Si
zl!03<3XVV8)Gd1jHv;M^o%r(QlU$M>fq`3!?<j#lWQHG#kGIR59>^dPkK&}S9DVu7
z-o<yJ>WbhmR>XCtAq625JPPo1wu;<tZ((X@K(vH7B4XYvx56=Ik$8=gIJj$Y6X^7z
zjW6xafm|OEK6;l2X~W6*I%_cP*D@V=T)kivveTv;Bx)3vF(vB4GgT~y@Z|kRF}0Kw
z=dk^jg0hnVoddf`(VlIL<4tZSs9h>40LI9x&^^W08ztvIC(&YpT0a8b<?7Pd1Ef%U
zy!4v`RN?bh^OO<rVsEiUmWkVZslIudhDq@%PsiYb92Z_r+Y--clnbH9(ap8Ul@LBD
zI2=M<I3I6=$7eeg$4nT~XIk?bD*}%EOBCo802TRiOu{8gT%^Y5<ZW{Pdb-oGw&(iI
zE(MRv@NA3YP`*A8R)C-x2_>G;Mt)MdxW2)*%2yN+zM*<u9=I}{o{`ii(5MAVc2z|d
ZpNOzw6aw>HE;ce~CJUOkz942zK)hHy`EmdN

diff --git a/machines/asus-gl553vd/default.nix b/machines/asus-gl553vd/default.nix
index 44bb8ab..aac31b3 100644
--- a/machines/asus-gl553vd/default.nix
+++ b/machines/asus-gl553vd/default.nix
@@ -6,7 +6,7 @@
     ./hardware-configuration.nix
     ../modules/common.nix
     ../modules/sound.nix
-    ../modules/window_manager.nix
+    ../modules/window-manager.nix
     ../modules/fonts.nix
     ../modules/gnupg.nix
     ../modules/nix.nix
diff --git a/machines/canigou/default.nix b/machines/canigou/default.nix
index c2e0b5c..123159d 100644
--- a/machines/canigou/default.nix
+++ b/machines/canigou/default.nix
@@ -10,6 +10,7 @@ in
 
     ../modules/common.nix
     ../modules/fail2ban.nix
+    ../modules/docker-swarm.nix
 
     ./services/wireguard.nix
   ];
diff --git a/machines/canigou/hardware-configuration.nix b/machines/canigou/hardware-configuration.nix
index e54b5c4..d6cfa23 100644
--- a/machines/canigou/hardware-configuration.nix
+++ b/machines/canigou/hardware-configuration.nix
@@ -6,4 +6,8 @@
   boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
   boot.initrd.kernelModules = [ "nvme" ];
   fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
+  swapDevices = [
+    { device = "/dev/zram0"; }
+    { device = "/var/swapfile"; size = 1536; }
+  ];
 }
diff --git a/machines/home/default.nix b/machines/home/default.nix
index cfd6efa..e896386 100644
--- a/machines/home/default.nix
+++ b/machines/home/default.nix
@@ -6,7 +6,7 @@
     ./hardware-configuration.nix
     ../modules/common.nix
     ../modules/sound.nix
-    ../modules/window_manager.nix
+    ../modules/window-manager.nix
     ../modules/fonts.nix
     ../modules/gnupg.nix
     ../modules/nix.nix
diff --git a/machines/magenta/default.nix b/machines/magenta/default.nix
index a34ac4b..971143a 100644
--- a/machines/magenta/default.nix
+++ b/machines/magenta/default.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, pkgs, lib, ... }:
 
 let
   data = import ../../data.nix;
@@ -9,13 +9,14 @@ in
     ./networking.secret.nix # generated at runtime by nixos-infect
 
     ../modules/common.nix
-    ../modules/nix.nix
     ../modules/fail2ban.nix
     ../modules/garbage-collector.nix
+    ../modules/docker-swarm.nix
 
-    ./services/traefik.nix
     ./services/mailserver.nix
     ./services/gitea.nix
+    ./services/traefik.nix
+    ./services/woodpecker
   ];
 
   boot.kernelPackages = pkgs.linuxPackages_6_1;
@@ -33,10 +34,4 @@ in
     defaults.email = "dmitriy@pleshevski.ru";
   };
 
-  # Enable docker
-  virtualisation.docker = {
-    enable = true;
-    liveRestore = false;
-  };
-  networking.firewall.allowedTCPPorts = [ 2377 ];
 }
diff --git a/machines/magenta/hardware-configuration.nix b/machines/magenta/hardware-configuration.nix
index 40c8d65..d611882 100644
--- a/machines/magenta/hardware-configuration.nix
+++ b/machines/magenta/hardware-configuration.nix
@@ -6,4 +6,8 @@
   boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" ];
   boot.initrd.kernelModules = [ "nvme" ];
   fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
+  swapDevices = [
+    { device = "/dev/zram0"; }
+    { device = "/var/swapfile"; size = 1536; }
+  ];
 }
diff --git a/machines/magenta/services/gitea.nix b/machines/magenta/services/gitea.nix
index c1cc7f8..1ad2041 100644
--- a/machines/magenta/services/gitea.nix
+++ b/machines/magenta/services/gitea.nix
@@ -8,6 +8,7 @@ let
   robotsTxt = pkgs.writeText "robots.txt" ''
     User-agent: *
     Disallow: /github
+    Disallow: /external
   '';
 in
 {
@@ -105,13 +106,11 @@ in
   '';
 
   services.traefik.dynamicConfigOptions.http = {
-    routers = {
-      to_gitea = {
-        rule = "Host(`${hostname}`)";
-        entryPoints = [ "https" ];
-        tls.certResolver = "le";
-        service = "gitea";
-      };
+    routers.to_gitea = {
+      rule = "Host(`${hostname}`)";
+      entryPoints = [ "https" ];
+      tls.certResolver = "le";
+      service = "gitea";
     };
     services.gitea = {
       loadBalancer.servers = [
diff --git a/machines/magenta/services/traefik.nix b/machines/magenta/services/traefik.nix
index e45b8af..bb66b56 100644
--- a/machines/magenta/services/traefik.nix
+++ b/machines/magenta/services/traefik.nix
@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 
 let
   traefikCfg = config.services.traefik;
@@ -14,6 +14,8 @@ in
     inherit (traefikCfg) group;
   };
 
+  users.groups.docker.members = [ "traefik" ];
+
   services.traefik = {
     enable = true;
     staticConfigOptions = {
@@ -36,21 +38,26 @@ in
         email = "dmitriy@pleshevski.ru";
         tlschallenge = true;
       };
+      providers.docker = {
+        network = "rp_public";
+        constraints = "Label(`traefik.constraint-label`, `${config.networking.hostName}_public`)";
+        exposedByDefault = false;
+        swarmMode = true;
+      };
     };
-    dynamicConfigOptions = {
-      http = {
-        routers.to_traefik_dashboard = {
-          rule = "Host(`${magentaData.addr}`)";
-          entryPoints = [ "dashboard" ];
-          middlewares = [ "traefik_dashboard_auth" ];
-          service = "api@internal";
-        };
-        middlewares = {
-          traefik_dashboard_auth.basicAuth = {
-            usersFile = config.age.secrets.traefik-dashboard-basicauth-users.path;
-          };
+    dynamicConfigOptions.http = {
+      routers.to_traefik_dashboard = {
+        rule = "Host(`${magentaData.addr}`)";
+        entryPoints = [ "dashboard" ];
+        middlewares = [ "traefik_dashboard_auth" ];
+        service = "api@internal";
+      };
+      middlewares = {
+        traefik_dashboard_auth.basicAuth = {
+          usersFile = config.age.secrets.traefik-dashboard-basicauth-users.path;
         };
       };
     };
   };
+
 }
diff --git a/machines/magenta/services/woodpecker/agent-docker.nix b/machines/magenta/services/woodpecker/agent-docker.nix
new file mode 100644
index 0000000..633a425
--- /dev/null
+++ b/machines/magenta/services/woodpecker/agent-docker.nix
@@ -0,0 +1,37 @@
+{ pkgs, config, ... }:
+
+let
+  nextPkgs = pkgs.callPackage ../../../../packages/woodpecker { };
+
+  canigouData = import ../../data.secret.nix;
+
+  data = import ./data.secret.nix;
+  inherit (data) userAgent group grpcPort;
+
+  dockerSockVolume = "/var/run/docker.sock:/var/run/docker.sock";
+  dockerConfVolume = "${config.age.secrets.woodpecker-docker-config.path}:/root/.docker/config.json";
+in
+{
+  systemd.services.woodpecker-agent = {
+    enable = true;
+    wantedBy = [ "multi-user.target" ];
+    after = [ "woodpecker-server.service" ];
+    restartIfChanged = true;
+    serviceConfig = {
+      EnvironmentFile = [
+        config.age.secrets.woodpecker-common-env.path
+      ];
+      Environment = [
+        "WOODPECKER_DEBUG_PRETTY=true"
+        "WOODPECKER_LOG_LEVEL=trace"
+        "WOODPECKER_SERVER=${canigouData.addr}:${toString grpcPort}"
+        "WOODPECKER_MAX_WORKFLOWS=2"
+        "WOODPECKER_BACKEND=docker"
+        "WOODPECKER_BACKEND_DOCKER_VOLUMES=${dockerSockVolume},${dockerConfVolume}"
+      ];
+      ExecStart = "${nextPkgs.woodpecker-agent}/bin/woodpecker-agent";
+      User = userAgent;
+      Group = group;
+    };
+  };
+}
diff --git a/machines/magenta/services/woodpecker/common.nix b/machines/magenta/services/woodpecker/common.nix
new file mode 100644
index 0000000..9c7026d
--- /dev/null
+++ b/machines/magenta/services/woodpecker/common.nix
@@ -0,0 +1,28 @@
+let
+  data = import ./data.secret.nix;
+  inherit (data) userServer userAgent group;
+in
+{
+  users.groups.${group} = { };
+
+  users.users.${userServer} = {
+    description = "Woodpecker CI Server";
+    isSystemUser = true;
+    createHome = true;
+    inherit group;
+  };
+
+  users.users.${userAgent} = {
+    isSystemUser = true;
+    inherit group;
+  };
+  users.groups.docker.members = [ userAgent userServer ];
+
+  age.secrets.woodpecker-common-env.file = ../../../../secrets/woodpecker-common-env.age;
+  age.secrets.woodpecker-server-env.file = ../../../../secrets/woodpecker-server-env.age;
+  age.secrets.woodpecker-docker-config = {
+    file = ../../../../secrets/docker-config.json.age;
+    mode = "440";
+    inherit group;
+  };
+}
diff --git a/machines/magenta/services/woodpecker/data.secret.nix b/machines/magenta/services/woodpecker/data.secret.nix
new file mode 100644
index 0000000000000000000000000000000000000000..c86dcc92e392a8942ce2bf7dca410a35c4d51bc2
GIT binary patch
literal 220
zcmV<203-hZM@dveQdv+`0Dz`=_h;V5@=vR&sXVfsVemPcUqrX~;Q?@zM11;jpMG!Z
z0E!4J1u1q7TuS|!UqgSwvg;Vihq9_L@m%qXt|Zl7SDlP&A(@7Q;}%9$lJqjwQJAxw
z;@Z1fhLEh_3g<yBq2y-M{bs-%FOOt*z&X_SrViLPJ`YmeyQjmDwyrH4RusLPtA9NA
z5TJUwtKotG8XnD*iEx@o(bAa+dU=v-Cb>eK#r?5~E3Qa#iq?w<73~w+<GUR8QS#{e
WuU4;Z1F7<4S+&u$AE(*QTzVw8b#Zh6

literal 0
HcmV?d00001

diff --git a/machines/magenta/services/woodpecker/default.nix b/machines/magenta/services/woodpecker/default.nix
new file mode 100644
index 0000000..b800dfe
--- /dev/null
+++ b/machines/magenta/services/woodpecker/default.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    ./common.nix
+    ./agent-docker.nix
+    ./server.nix
+  ];
+}
diff --git a/machines/magenta/services/woodpecker/server.nix b/machines/magenta/services/woodpecker/server.nix
new file mode 100644
index 0000000..580234c
--- /dev/null
+++ b/machines/magenta/services/woodpecker/server.nix
@@ -0,0 +1,69 @@
+# https://github.com/Mic92/dotfiles/tree/035a2c22e161f4fbe4fcbd038c6464028ddce619/nixos/eve/modules/woodpecker
+{ pkgs, config, ... }:
+
+let
+  nextPkgs = pkgs.callPackage ../../../../packages/woodpecker { };
+
+  data = import ./data.secret.nix;
+  inherit (data) hostname port grpcPort userServer group database;
+in
+{
+  networking.firewall.allowedTCPPorts = [ port grpcPort ];
+
+  services.postgresql.enable = true;
+
+  systemd.services.woodpecker-server = {
+    wantedBy = [ "multi-user.target" ];
+    after = [ "network.target" "postgresql.service" ];
+    serviceConfig = {
+      # See: https://woodpecker-ci.org/docs/administration/server-config
+      EnvironmentFile = [
+        config.age.secrets.woodpecker-common-env.path
+        config.age.secrets.woodpecker-server-env.path
+      ];
+      Environment = [
+        "WOODPECKER_DEBUG_PRETTY=true"
+        "WOODPECKER_LOG_LEVEL=trace"
+        "WOODPECKER_HOST=https://${hostname}"
+        "WOODPECKER_SERVER_ADDR=:${toString port}"
+        "WOODPECKER_GRPC_ADDR=:${toString grpcPort}"
+        "WOODPECKER_ADMIN=pleshevskiy"
+        "WOODPECKER_DATABASE_DRIVER=postgres"
+        "WOODPECKER_DATABASE_DATASOURCE=postgres://${userServer}@:${toString config.services.postgresql.port}/${database}?host=/run/postgresql"
+        "WOODPECKER_GITEA=true"
+        "WOODPECKER_GITEA_URL=https://git.pleshevski.ru"
+        "WOODPECKER_DOCKER_CONFIG=${config.age.secrets.woodpecker-docker-config.path}"
+        "WOODPECKER_AUTHENTICATE_PUBLIC_REPOS=true"
+      ];
+      ExecStart = "${nextPkgs.woodpecker-server}/bin/woodpecker-server";
+      User = userServer;
+      Group = group;
+    };
+  };
+
+  services.postgresql = {
+    ensureDatabases = [ database ];
+    ensureUsers = [
+      {
+        name = userServer;
+        ensurePermissions = {
+          "DATABASE ${database}" = "ALL PRIVILEGES";
+        };
+      }
+    ];
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    routers.to_woodpecker_server = {
+      rule = "Host(`${hostname}`)";
+      entryPoints = [ "https" ];
+      tls.certResolver = "le";
+      service = "woodpecker_server";
+    };
+    services.woodpecker_server = {
+      loadBalancer.servers = [
+        { url = "http://localhost:${toString port}"; }
+      ];
+    };
+  };
+}
diff --git a/machines/modules/docker-swarm.nix b/machines/modules/docker-swarm.nix
new file mode 100644
index 0000000..3be1e64
--- /dev/null
+++ b/machines/modules/docker-swarm.nix
@@ -0,0 +1,14 @@
+{ ... }:
+
+{
+  # Enable docker
+  virtualisation.docker = {
+    enable = true;
+    liveRestore = false;
+  };
+  # Source: https://forums.docker.com/t/error-response-from-daemon-rpc-error-code-unavailable-desc-grpc-the-connection-is-unavailable/39066/12
+  networking.firewall = {
+    allowedTCPPorts = [ 2376 2377 7946 ];
+    allowedUDPPorts = [ 7946 4789 ];
+  };
+}
diff --git a/machines/modules/traefik.nix b/machines/modules/traefik.nix
new file mode 100644
index 0000000..409f9a7
--- /dev/null
+++ b/machines/modules/traefik.nix
@@ -0,0 +1,70 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.local.traefik;
+
+  traefikCfg = config.services.traefik;
+in
+{
+  options.local.traefik = with lib; {
+    enable = mkEnableOption "Enable traefik service";
+    dashboard = {
+      enable = mkEnableOption "Enable traefik dashboard";
+      host = mkOption {
+        type = types.nullOr types.str;
+        description = "Traefik dashboard host";
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [ 80 443 ] ++ lib.optional cfg.dashboard.enable 8080;
+
+    services.traefik = {
+      enable = true;
+      staticConfigOptions = {
+        entryPoints = {
+          http = {
+            address = ":80";
+            http.redirections.entryPoint = {
+              to = "https";
+              scheme = "https";
+            };
+          };
+          https.address = ":443";
+        };
+        log = { };
+        accessLog = { };
+        certificatesResolvers.le.acme = {
+          storage = "${traefikCfg.dataDir}/acme.json";
+          email = "dmitriy@pleshevski.ru";
+          tlschallenge = true;
+        };
+        providers.docker = {
+          network = "rp_public";
+          constraints = "Label(`traefik.constraint-label`, `${config.networking.hostName}_public`)";
+          exposedByDefault = false;
+          swarmMode = true;
+        };
+      };
+    } // lib.mkIf cfg.dashboard.enable {
+      staticConfigOptions = {
+        api = { };
+        entryPoints.dashboard.address = ":8080";
+      };
+      dynamicConfigOptions.http = {
+        routers.to_traefik_dashboard = {
+          rule = "Host(`${cfg.dashboard.host}`)";
+          entryPoints = [ "dashboard" ];
+          middlewares = [ "traefik_dashboard_auth" ];
+          service = "api@internal";
+        };
+        middlewares = {
+          traefik_dashboard_auth.basicAuth = {
+            usersFile = config.age.secrets.traefik-dashboard-basicauth-users.path;
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/machines/modules/window_manager.nix b/machines/modules/window-manager.nix
similarity index 100%
rename from machines/modules/window_manager.nix
rename to machines/modules/window-manager.nix
diff --git a/packages/woodpecker/agent.nix b/packages/woodpecker/agent.nix
new file mode 100644
index 0000000..2865711
--- /dev/null
+++ b/packages/woodpecker/agent.nix
@@ -0,0 +1,17 @@
+{ lib, buildGoModule, callPackage, fetchFromGitHub }:
+let
+  common = callPackage ./common.nix { };
+in
+buildGoModule {
+  pname = "woodpecker-agent";
+  inherit (common) version src ldflags postBuild;
+  vendorSha256 = null;
+
+  subPackages = "cmd/agent";
+
+  CGO_ENABLED = 0;
+
+  meta = common.meta // {
+    description = "Woodpecker Continuous Integration agent";
+  };
+}
diff --git a/packages/woodpecker/cli.nix b/packages/woodpecker/cli.nix
new file mode 100644
index 0000000..b5eda9e
--- /dev/null
+++ b/packages/woodpecker/cli.nix
@@ -0,0 +1,17 @@
+{ lib, buildGoModule, callPackage, fetchFromGitHub }:
+let
+  common = callPackage ./common.nix { };
+in
+buildGoModule {
+  pname = "woodpecker-cli";
+  inherit (common) version src ldflags postBuild;
+  vendorSha256 = null;
+
+  subPackages = "cmd/cli";
+
+  CGO_ENABLED = 0;
+
+  meta = common.meta // {
+    description = "Command line client for the Woodpecker Continuous Integration server";
+  };
+}
diff --git a/packages/woodpecker/common.nix b/packages/woodpecker/common.nix
new file mode 100644
index 0000000..3603781
--- /dev/null
+++ b/packages/woodpecker/common.nix
@@ -0,0 +1,37 @@
+{ lib, fetchFromGitea }:
+let
+  version = "13f878c10ac77d16ddae994b9253fa8c23c4d5be";
+  srcSha256 = "sha256-ifyQK3eCThNPu3Qnfy6WUYba5qvop+6VJmwpWcpWJVE=";
+  yarnSha256 = "sha256-XsyMw2xqTjng4DoeiUb2+pJ9rGtHw2yZgy7pzLSDkas=";
+in
+{
+  inherit version yarnSha256;
+
+  src = fetchFromGitea {
+    domain = "git.pleshevski.ru";
+    owner = "infra";
+    repo = "woodpecker";
+    rev = version;
+    sha256 = srcSha256;
+  };
+
+  postBuild = ''
+    cd $GOPATH/bin
+    for f in *; do
+      mv -- "$f" "woodpecker-$f"
+    done
+    cd -
+  '';
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X github.com/woodpecker-ci/woodpecker/version.Version=next"
+  ];
+
+  meta = with lib; {
+    homepage = "https://woodpecker-ci.org/";
+    license = licenses.asl20;
+    maintainers = with maintainers; [ ambroisie techknowlogick ];
+  };
+}
diff --git a/packages/woodpecker/default.nix b/packages/woodpecker/default.nix
new file mode 100644
index 0000000..c0028db
--- /dev/null
+++ b/packages/woodpecker/default.nix
@@ -0,0 +1,11 @@
+{ callPackage }:
+
+{
+  woodpecker-agent = callPackage ./agent.nix { };
+
+  woodpecker-cli = callPackage ./cli.nix { };
+
+  woodpecker-server = callPackage ./server.nix {
+    woodpecker-frontend = callPackage ./frontend.nix { };
+  };
+}
diff --git a/packages/woodpecker/frontend.nix b/packages/woodpecker/frontend.nix
new file mode 100644
index 0000000..267fdc1
--- /dev/null
+++ b/packages/woodpecker/frontend.nix
@@ -0,0 +1,40 @@
+{ lib, callPackage, fetchFromGitHub, fetchYarnDeps, mkYarnPackage }:
+let
+  common = callPackage ./common.nix { };
+in
+mkYarnPackage {
+  pname = "woodpecker-frontend";
+  inherit (common) version;
+
+  src = "${common.src}/web";
+
+  packageJSON = ./woodpecker-package.json;
+  offlineCache = fetchYarnDeps {
+    yarnLock = "${common.src}/web/yarn.lock";
+    sha256 = common.yarnSha256;
+  };
+
+  buildPhase = ''
+    runHook preBuild
+
+    yarn build
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    cp -R deps/woodpecker-ci/dist $out
+    echo "${common.version}" > "$out/version"
+
+    runHook postInstall
+  '';
+
+  # Do not attempt generating a tarball for woodpecker-frontend again.
+  doDist = false;
+
+  meta = common.meta // {
+    description = "Woodpecker Continuous Integration server frontend";
+  };
+}
diff --git a/packages/woodpecker/server.nix b/packages/woodpecker/server.nix
new file mode 100644
index 0000000..d974126
--- /dev/null
+++ b/packages/woodpecker/server.nix
@@ -0,0 +1,27 @@
+{ lib, buildGoModule, callPackage, fetchFromGitHub, woodpecker-frontend }:
+let
+  common = callPackage ./common.nix { };
+in
+buildGoModule {
+  pname = "woodpecker-server";
+  inherit (common) version src ldflags postBuild;
+  vendorSha256 = null;
+
+  postPatch = ''
+    cp -r ${woodpecker-frontend} web/dist
+  '';
+
+  subPackages = "cmd/server";
+
+  CGO_ENABLED = 1;
+
+  passthru = {
+    inherit woodpecker-frontend;
+
+    updateScript = ./update.sh;
+  };
+
+  meta = common.meta // {
+    description = "Woodpecker Continuous Integration server";
+  };
+}
diff --git a/packages/woodpecker/update.sh b/packages/woodpecker/update.sh
new file mode 100755
index 0000000..48f362f
--- /dev/null
+++ b/packages/woodpecker/update.sh
@@ -0,0 +1,47 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p wget prefetch-yarn-deps nix-prefetch-git jq
+
+# shellcheck shell=bash
+
+if [ -n "$GITHUB_TOKEN" ]; then
+    TOKEN_ARGS=(--header "Authorization: token $GITHUB_TOKEN")
+fi
+
+if [[ $# -gt 1 || $1 == -* ]]; then
+    echo "Regenerates packaging data for the woodpecker packages."
+    echo "Usage: $0 <rev>"
+    exit 1
+fi
+
+set -x
+
+cd "$(dirname "$0")"
+version="$1"
+
+set -euo pipefail
+
+if [ -z "$version" ]; then
+  echo "Usage: $0 <rev>"
+fi
+
+# Woodpecker repository
+src_hash=$(nix-prefetch-git --url https://git.pleshevski.ru/infra/woodpecker --rev  "${version}" | jq -r .sha256)
+
+# Front-end dependencies
+woodpecker_src="https://git.pleshevski.ru/infra/woodpecker/raw/$version"
+wget "${TOKEN_ARGS[@]}" "$woodpecker_src/web/package.json" -O woodpecker-package.json
+
+web_tmpdir=$(mktemp -d)
+trap 'rm -rf "$web_tmpdir"' EXIT
+pushd "$web_tmpdir"
+wget "${TOKEN_ARGS[@]}" "$woodpecker_src/web/yarn.lock"
+yarn_hash=$(prefetch-yarn-deps yarn.lock)
+popd
+
+# Use friendlier hashes
+src_hash=$(nix hash to-sri --type sha256 "$src_hash")
+yarn_hash=$(nix hash to-sri --type sha256 "$yarn_hash")
+
+sed -i -E -e "s#version = \".*\"#version = \"$version\"#" common.nix
+sed -i -E -e "s#srcSha256 = \".*\"#srcSha256 = \"$src_hash\"#" common.nix
+sed -i -E -e "s#yarnSha256 = \".*\"#yarnSha256 = \"$yarn_hash\"#" common.nix
diff --git a/packages/woodpecker/woodpecker-package.json b/packages/woodpecker/woodpecker-package.json
new file mode 100644
index 0000000..9d89a21
--- /dev/null
+++ b/packages/woodpecker/woodpecker-package.json
@@ -0,0 +1,71 @@
+{
+  "name": "woodpecker-ci",
+  "author": "Woodpecker CI",
+  "version": "0.0.0",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=14"
+  },
+  "scripts": {
+    "start": "vite",
+    "build": "vite build",
+    "serve": "vite preview",
+    "lint": "eslint --max-warnings 0 --ext .js,.ts,.vue,.json .",
+    "formatcheck": "prettier -c .",
+    "format:fix": "prettier --write .",
+    "typecheck": "vue-tsc --noEmit",
+    "test": "echo 'No tests configured' && exit 0"
+  },
+  "dependencies": {
+    "@intlify/vite-plugin-vue-i18n": "^6.0.3",
+    "@kyvg/vue3-notification": "^2.4.1",
+    "@vueuse/core": "^9.3.1",
+    "ansi_up": "^5.1.0",
+    "dayjs": "^1.11.5",
+    "floating-vue": "^2.0.0-beta.20",
+    "fuse.js": "^6.6.2",
+    "humanize-duration": "^3.27.3",
+    "javascript-time-ago": "^2.5.7",
+    "lodash": "^4.17.21",
+    "node-emoji": "^1.11.0",
+    "pinia": "^2.0.23",
+    "prismjs": "^1.29.0",
+    "vue": "^3.2.41",
+    "vue-i18n": "^9.2.2",
+    "vue-router": "^4.1.5"
+  },
+  "devDependencies": {
+    "@iconify/json": "^2.1.123",
+    "@types/humanize-duration": "^3.27.1",
+    "@types/javascript-time-ago": "^2.0.3",
+    "@types/lodash": "^4.14.186",
+    "@types/node": "^18.11.2",
+    "@types/node-emoji": "^1.8.2",
+    "@types/prismjs": "^1.26.0",
+    "@typescript-eslint/eslint-plugin": "^5.40.1",
+    "@typescript-eslint/parser": "^5.40.1",
+    "@vitejs/plugin-vue": "^3.1.2",
+    "@vue/compiler-sfc": "^3.2.41",
+    "eslint": "^8.25.0",
+    "eslint-config-airbnb-base": "^15.0.0",
+    "eslint-config-airbnb-typescript": "^17.0.0",
+    "eslint-config-prettier": "^8.5.0",
+    "eslint-plugin-import": "^2.26.0",
+    "eslint-plugin-prettier": "^4.2.1",
+    "eslint-plugin-promise": "^6.1.0",
+    "eslint-plugin-simple-import-sort": "^8.0.0",
+    "eslint-plugin-vue": "^9.6.0",
+    "eslint-plugin-vue-scoped-css": "^2.2.0",
+    "prettier": "^2.7.1",
+    "typescript": "4.8.3",
+    "unplugin-icons": "^0.14.12",
+    "unplugin-vue-components": "^0.22.8",
+    "vite": "^3.1.8",
+    "vite-plugin-prismjs": "^0.0.8",
+    "vite-plugin-windicss": "^1.8.8",
+    "vite-svg-loader": "^3.6.0",
+    "vue-eslint-parser": "^9.1.0",
+    "vue-tsc": "^0.40.13",
+    "windicss": "^3.5.6"
+  }
+}
diff --git a/secrets/docker-config.json.age b/secrets/docker-config.json.age
new file mode 100644
index 0000000000000000000000000000000000000000..8c5c910800206148b754c273b25eb0dae873ad49
GIT binary patch
literal 2161
zcmV-%2#)svM@dveQdv+`0BX@|d*-|eLs6ay#5Y_l3$sWQ&`o9pH*jE-gt3C^stF%L
zLqsAUhOVei)i%gf<l=%ZXbah1J!{Y55z(<|7A})1PjUQ);#gYWG5Up}UsKyT<TSu~
zIXcE%qz-&i?%?FVFuk6wk@xsk+4K02E4eNl*QSap!{QnWNw`p0nerJDjH2aA*51@e
z7@O^8IDDn6?s--1I+|gDlk-q{eyw*A?^`pl;id}%%aIryXhA67HHpa@R}cDZ5b4}g
zfNQBiS60H@OyX*~987lXdn7EEly%N-8)Zd8w3t6L1e$!9<MC}_hkyFvOU%tJXJ5BP
zZKCn59c~57*@j!c77m1~6H;LBv*3GL3piMa(zZ_F{SI_5-wLv<RknEkjsi1PNh0~l
z>_44erq&`)7JRrz62J3sPpY1GNCQvb#K3h?t@y>m{mgFk77-lqc?atCdikiTAe5M0
zb9x7ELnvI+)<b)#xA3s{P<kSMPt&Bv2>u!!WC~qn4R;>+PQ<jpC=zqT2&xwS9qDZL
zhXrM~8>PG@dW)|n&=AzyUcP)M<TFH{P14*Mj3QO#$!^4+Q|p-mAgVn5ru?{HYoRUH
zI)yp4=%BorVxp|zrrIC-l2<U2oQL33R=g(78p#=UH)Jl~7!F2DJt$LyZIUE`AM0u1
z1W)8(K%dBkOt#bI)&p<?s!-akh!P+^B!EmaORaT@$cagcwY?~z{KN4$k98M7B^z#w
z-LhwLB7?g$pbvmtPrWpw*WZ@Q<&Y2PMW<`GF%EtJyzklBe%ZGK)NOr?9P5)0*tAvO
zb(Qo<)o|v#;C6Nrc!aq>Fz~Qucy-^q)X)IYGfUnPS{C=@_BK~*&aalP{(?s?lHI)n
zk-g9;_7={B`I7WS_uSvRIYYt!uZ}^Omf&fY5X9)#hXVB+#)1LTE^B!>AQ&;&5R<17
zJUV5QLJ)%;?}e{B1SH%=l_zzFw#nQHOAlP4o%OTAf|SUMkaR50;T8b{?Qn|J3A^w!
zc@z^LaoyE%suyX+@!&Fh=AJ?veqaLctt*1(OBwm)V&^F<N&8p*sX@+hwsN*kv`~ET
z?3jXa!b)dQe(mr@rpY=@R@bEttz!AA!E3t?JcvL2IPgK8NhCVcAmL%M{M1D~%Q0J*
zAjMHh#?2_n5}tHfME>-QY)O#o3Q?AIJOWZ7iA*0@c>qjby;!5FPnAeFEY*7n1j%#$
zgEi`Sj~82T_<VtI$7q^61Xb{8Vuos%c!0r&5AsL07nLX$ywQf3`dqW)#YyxhSjQ>q
z(&d9L@t30`Mue3Q%)Lhe0~#r@O)trs5j~?)gVUKHy-U`)CmB{gNqB51L`37(UrrSD
z&%?rI)5qNjNm%<;9k{8_eg@hAK7LWI{*=@|<TZ;MWxSstf~kT{%s9{Q0AWkDS)Oin
zau2pK)5-M}1Ey|9_rq@eiUZq)Dv{BaNMn|}yqULk&iD#E@Nif7LB2-vRc80z(MLHk
z@G*p4A;z*6LCGo()pw4d;hLq7N++Hk6|+`-jjYic@y1C@9T!CJ7_5iK=~I+X=-H4o
zHSHj+1^P7-?*29KHMPh4e%g3tP2nSlCY<6~?HICtoenlQOKM{>{kX*!x`zlRC{JyA
zOP_dR-1iX`F0U-s<~Ah!g+!W5c7zf&G7nA^2tC8d+uH{+=SN9n&3#1wV7i?Z+qc4d
zM<=ed+-W7~hH<-gmF9NzKS#*)@(*=u)rL7{P*B~L!rs@9l~JC6PZ&&kqX^GzFk7h>
zR`Y>x%t8LW3P7}k2Xf3)<hGdbc7?A<Pmg>;=ExN#BYiOC+yHTs1utZr%&1KsOO}`g
zx+1bk$wceqOz`(<HHP`H_0`*%+~Y1+u_zT;yt{Q$r{_=Lr1H~6pE_#^B@p@8wD5ml
z`(PdQnVdCEKp-aZ2l3(Y9Z$kUw~gF-oia&C*4rJqYq-2&2`cz%75U->p9ABCOjSx@
zTU=3vc5*t;-rq`tQPo2&`gFIfa1Fyoc6Vd{p&sM~tv)iz27L4H9UyZSz5J-(ubX+p
zg=?*EBx<?J+yzrez8_YIX5efXa-%R%^OS>A4>lC(3&H|ABjyKIM7qW$%>|2wNWns}
zp|8?`YUR!dM2Q}>`~#T<XSY9o-ilxQ#9?hbb`KsTxXRw1@gX3Q_DIR?wJ1I^t~8eL
zwI7o53MJdsO>EXwB*42wxVSEu7m8$7HIhVjvCTy-WxOK;B92kYGDO(tID$WK6<ki3
zEs$!$nKLMS1h)7frBWy$ao2pjBg<1$H858jz%CnlcCKWsG&V(gk$h`jVbvlt$>Y?%
z(!0J}(!$oq=otU#lly@j<Q;dSZtkA<@VDBK@)|*P$<yM-)R~^U9lSti9wY+l!NU#b
z{eNl-LrNHM4LNZtSAa`v2?ji0zv0_avp(>k4m>_@z_o?V9OqNi{&_do1UQ!3gEk<2
zGNG9G&dGQbi_E;JpUI`v^Z(%KoGVkce(yk(SpcU!3z?g*#jWhOHkk}<V45+08|6?f
z+0gklai}t>4xN0_a`|!Ll%S6i{S5f<#8*N!K7uY>LCG7Tp%V;ttT2C?ov?*fsqamG
zC9?fJ8-c}Pg7e=a8YG*6b2q0lE;yJ;%x~YkwkxHCO4?EOi)|kFO%hO3)<wqEAo_SB
zjNLe1k`gZKv+%X|wbFGH6{#roYHXC*K(8C{?I<8<v?zl-Hvv$GIsD|(xrWlOSj}_D
zhR9>3cF}JXt&qodYq#+NsC(V|ZB*cIvzGY#sev)mtRZ8nD|u7@==?8Tc>Blo^(*e*
n4ysXQ5R>Cbdx|omNCssH&WG~BCfZN8>wM?8iBl6g8X)&^%U3ua

literal 0
HcmV?d00001

diff --git a/secrets/gitea-smtp-passfile.age b/secrets/gitea-smtp-passfile.age
index 8978c619a1b6159d95daa69ae2e38a1a9c4311e5..ff743b0058db0108e45555c233068e22c0ee68c2 100644
GIT binary patch
literal 1412
zcmV-~1$+7cM@dveQdv+`0Q);^V{9Y$;Tkc_&3I)I#-jB<3<>A|!tu*&o_o5j=)k2K
z14O%nNvj7w5p#M6sjaoP`h^{m{8u|R8y~y{A!CC8(1aySq|KlRsKlQzXf3A!UOu{O
z8Dlckf#@k;lwp!b-w>ljfS#r&MV$bO=QAmj27<!(tdCh5wN+`|{^uLCAJG-l2J5wn
zNi6!hF7oJ)&hzRMd8|w~%G&?&dvINjWT}>Dl@E^mN)La_QU4c}kGodh+Dgpvpv{w>
zBH!@jAn4c2N~38~xt+Fl@Y2gWpkbL-Iwi+X>TV0r5LVEKA%8S3Z^I(qxj~BW80i08
z4zYr^nSn4zo~J^m=Z2z6xbAu&2AR70`*RJdTI&39Ky)9BCqV=nb-t21PclZ-CXuVs
z&6;9s6o*YX5=XMLgql8<37up9HK!4bx%hLiFd#&A7MUOWPMNls^i48kPg6N(q6(!?
z$F?&<X{kK~W75nlGn@-x@>RJk`@RS4Y$55sK{<2-G=(kN=aGok%qb(kbX?sa=qpT#
zA9DiQbG@nLq9mxMusO}%HHr7T&d~1pRCZ-T64bTN?AlJ~KJDd9W2N4r@4#T@L@Cay
z4;VZ7l34`05ZhG1i*0+&uTW@9z}x?Fw*QGu36ugoPmfWuHYR66O=P#rqtx-(m(}AI
zvqeRO<F5FIMW)zzadSoh9(y%=YbKqqnnq!#Ht1k&(jO&8<ioxfLkIM(9^NOo-|u}!
z?P+t=I6wW~m0<s~W3XllKU39=!@Vd%hYqx=a4#jt9E^c6+86&zIW4(25q?~*B5)Lv
z`8}zCI?B5r#?i?85M_dRaJ^GH(&+M;4F_<zLTAN~94m|$kak^?tflcyqV?aBN=8s?
zkEoXQ&Q}UJ$=K{zpG(-AjU7ZSgLz7Ojm$667s!ghshpb(nu5T3Pruw5uV_P(s+Bd&
zb$s@2Y+zfnq8=8?=@^ldGc|{M7FX-0rI_`O<e#DPKhMG#AuJufQ1RoRNv&+Qa0x<l
zLe#!wZ_M~R)P?GOe^8w+kmT!PF(Pd08I4GVztm;blM9I@{{WcaNzj~nwaas1sn$0d
zR87Qq5ZfGtYwAoHQub0!Ec~Yvq8uNpVb*X;B(eVIWT7`_o<**`f1gUSdvBeb`h;&G
zk4;Bfo9j3DyEiPk=$fZlT>sKYY~qbt$iVl<y(e4aiP3LHGF_9Ks+UcwVBG+I200n3
z{Q>>O2!k^eceS`*md;7tgs`ICdzx!O>Y!=&(^sZD<{-1Pikv>KX45flwc92Mk7|(*
zVOsrW8x6WzN%?2FR4hN|-m1cWKe&s<K+LTV-0X7CoU~JJ4!LP7eLwMaK_qt%(u)2A
z_^(lOyROc4v<8kF$)h}b7R^T0C<FB4SjTygZ=Le#qpVc<s%d_!L=XGvL{c#?zZ8b}
z5|gx?=r?ZE?;<T+2Ypn&@dRbNGTH(=D{~S>KMKUPNm7~Ej~?1z7nQUcB2Z&229Vaj
zBwg#&%m98g{5N>6zD9I#EDigyQ*}eP71dh+mZ_PXY6hT-B)gN!iYXLd^E@lr5%*bg
z3JDAQv^8I&Nl9$QFt<4QJ48}~Hg2~caY&!@*44v48#~$Ra}c9)>W+#u>P^N{;oKr~
z0}dlHnG_h4$Ew_ecQt*6%eh?gfj*Ayn{U;FDmmU@GRkDnX~M@P&$ZHF0M|IgSY(Jh
z8%_g)dJ!K5MWoXpT<NhvWY(JXd-7zb?+3=#HEUl_lCiL0LJp&RPo8uHebG;Hn|^Vg
ze2>oO-_=P?t>H2l=O{vOp<T8s8B85yDu7Hi&2a{XwmVQK$e_CcG!QlxpCa;aqp8>G
SvC(?bbrOn5eCD$yK{oqvDZb+X

literal 1429
zcmV;G1#0>LM@dveQdv+`0G#IQrF&yOmg$Vh#zs8(exVp6y^3K%Jj=A)+4;DaDX?}c
zl}Y<3@Htj5yC%H8)WhZxP$D=4y<I0A387-OqmRD7dL(QaNlm!N<(}&76k^M-pR4<=
z8!9#+VwV6>Cj~h_mEvIwFX_~)rvP$#n_wwsGabv&4uvq$iWM+KQr+vl-lgBBUwB@A
zlXyICVsp|wLHysH1oNt$TFFS7oI;RV-?hh{@5l7L?n&6}rvI5!_1;Gu#_iQUx5iFT
zV=B#H9wO56Z=WFrG0I8DiQBB+b(hP^-$p0rD4Y4lRm_+t{cKUdNzhb?ypQ<mXx7M_
z_IV_)Y%^QiBLmFBh4iUGHXf-$WFX7pv9zNm=CY4Qs5y3?3)`zlq!m)?{28x1?_1}?
zT|Cv`ZndwEOE~+o5<2wf{OpeBuaoAF%&$=9>tp6PKy`8{qG{oiCg0xK>TjfKMWQX1
zFq52fn>DaJUbDI;4Bff3&;IhE17ud~<KQ7ij!`!8rCFfwP%W`74rBsV&;ryfmOavO
z_J>jJnD;*0ZfW9DZVZDJXFZF7@5o%&1+I1($Oe~~P|tDAUw_U>1LFZiCj~i(Wjp3K
zMKjL?ycv^?e&t{&D&Xc}Gh|3qJX%cWetV1Aj2LNSBaQHfUom6YFdjNV0-U-Wbh>?i
zZUbF0R@rSr7TS&>N_Mb$G*~)H8)@jvdIDCGxZ$Wg3(q!==V4?LPN^2L&%?XvXc1o~
z#MT%~5^2I?rluzo)K?y1XN~xs9mpA`7rLd$^2KNy+61TpYyQ_-96by_$8G~GWxyyO
zd&agtl+X+x&G1XzV9&@{ZGZP{`NU%tMNT7DO1V-o*orZ2I<bs#@)wm$9j?y_D54t%
zj4rbz-HzGyvRZiD<CVQ#4#<9DO6EO?g-PCSJVEafF~=)!7>z-})nu`Q#Of~hl(_ZF
zD;4)>y*j@-R<tRvAMSU8aym}ar9EqOOIg<r=axU<8ykPqfSIOyho-FHX9e)SEUYpj
zVcW<iorV8TLP0kz<gHrbg;!kX4|A&SY2`GWz?^WRFHul`THzd+mUetrv{UQMg3Q^9
zPLCkTprFPmU577s^4!U=VbvH60+)opc~$~m(lb%eq6E=|S`s}dgMCR3h^ocXK_g)$
zL!pTY<mZ5?-4o$4vRV1#>^S~dtkhGS$+^J|dW)T>v=R$8;eSI--KBFVOZ>WpPk!@H
zy1g;W@SL>W$2Lv75S7jk%j<B)ms&R`w^IayZUyL_yA+P?r{}A}$Fn-iUo(I;Wq8~i
zpfP5RR(H(3*kj3k9C1XV@ZNVH>TkCV1b2=z8d*b7Zuy44ug)Q(@iq^`<YsD2CeNds
z3^z2&6U>*LkyB~u$(84AY=;`?rqVhKkSZRY2)IBh-4@-t-h?O4XTtR()KISAH$<eF
z$<ZOS4MzHZJZObYQMos5C<RlCAcgm<VgU?wRXd0=-V1Ld1IOQpc`)U%9S;kmM*;8%
zz7SjT+LO<^B9Um8JQvn@mL)(E{5p9gA8eOSMryp9Jy#XPXl(lar(KDuC-}4C9r>D$
ze_3@UdI{d~lP2j}0d&a8w`}n}^aX`x-H>BPio~1{{>knIbv_Kqr(6YHJwBAXRL%=w
z-7!?sF8p&|t?Nq4c5r_J8NQj+I$hpmiladxbCEvdGK<EuO#FMW@yM8I$hY58w)6Xw
z{zHdnK3YEZbUfC`&#b~GCU<Y-7Szrr$)T4lZx6wmtq$Tou1X_~cwOh_-VN-WwZh3m
z(*)Mcj8@;xZW_kGRmqVACRrSS<`w0vO<>7LD*oc1OE&JESrYAYc+i6Zvve0JM^daw
jUGG+6WA=+2y1+e=WD<CiPdVu45KyN^i;Z{UF~)Q@E78jd

diff --git a/secrets/mailserver-users-family-passfile.age b/secrets/mailserver-users-family-passfile.age
index 531691068d80cc26902b2094bc3622f60c67a8b1..192e765f64b98ed26d3b0f0c5da4188c0dfe348a 100644
GIT binary patch
literal 1417
zcmV;41$O!XM@dveQdv+`0J98F=(XO!sZ*)u!kxg~9jNqZJ0)r8))sVY)k&<;YEvyI
zJ+sw(#ged=0uP@YOerM_Q^IlGjHs=-=T~gfWy4NurhIUS3N72BJSz${)oh$U=<H$5
zBsXNiFaP9W!LC<fhTWgb;E?52N??MwopGy`3K|EEj0!3se-BkBrBPt1o)Stx*q5=N
z`*t8WQ|qqj&hgxpXB|Pycj=nk7+1A7Q}-v8s2@D<+W~fKr*<govKU%Qu6ymsJLw2B
zwKQu)#HAbcHM=jI(`}!jOT5)k1^A1I(Z>&pEx+@<g#hCmfdX2(b4XL_<g^6G)Mrx+
zzFqC({>bs%hVy&lM*E3>nfg)N;qTL&7kt*yg+BK*3=DA2gRFR^jzYXLb*m|LnkIQJ
zi}3tAeRb`Tp-pWWP|mgmtIL^WtE3JHH&UByW6n8+uaqx2Qa!04+hefS@ul0;%Amyz
z`aGG)cj6vXp=DVZAN_uSzHvS@&=%cf9mtogQ}I7IY96AIA$;rr6GqKD8pt2d<g(_Q
zr3r{E0s`V!7ni*nB42}&S)}=I+EBU*1ehsBJvy4D(zwYoxDLERSRvSThFp7V#&>je
z=I3_j$&?M<l<7}5QO}Y4OlyZo*BOr!=A>hMe_~l3eVH6Z#hnc*Pknr{clpFk@2Qnm
zZ;i9LaGRF8f@jHICEZKB#nQxM6W?39+Jemr(xotDD>sqK0!bs7`NwpPk6}KyR=AWr
zx%g=TQXNGPNjC~z813Ou$D{9~m733vgh*rwa{Ac;CN9Z}b^hj<sg}DSogP@~Un|>R
zwsrS?X^VHVT9{z*xO^G>myVCVv7P4#PFTE15R==UU&<+cwXHmw7mj`dwm}epn^|;I
zaD&8ET%Yw-B^L0MuNKAOP(HNzx?#!JaR2tT%G%8*&Q4|SW2veh`C1z0)l~j`=AL!Z
z?*uFC+OPEeBg}>Cc%9*EnM7CBP*Z6$&F(;qU_HENFaDaCGS6I*jD;f1{dD|Oc3K(O
z46)F^b|(O0<_cXV*yjO1m0(ly^$cYe7V13(6d8w@9DZaN`rB3UThm<|c+ev^3t?~3
z#gs8TXp3m_vk%_e5)R!<iyM<$fJJ$;`RoKV|92)!by=J4*HKx?bMB2@4!9xIvENlD
znX7&!ewebj{quk(5jMhtQ!<pvnucO`lsK6C$?uC3OUp4Ni*5+oTNcB1xY2Q^SY8z?
z!I&EY7l}&lSmPouvDkY4=UDIWh<8G|bLXSu`7byL6T#hs1357nk(!cmK)_fhIC>5s
zZp^EhLcstDMjE0|wPqcCg_@6=#~8n@(pf0QdMHz8E}$@bhndT)1--pJVGAFszKz?S
zB?Wx)NRSPb+Dbv2AfIIk4)MIW%LC95Q+GmRAH)5H(BwaN*H(ggcq=lrJ^MIsP5_tE
zv}>z-LVIQ#Un$5s635PY<Z%Ql>MFPkalHXiDL)a(Ib*K)JbXM8Dt?*%UaoUcU$n!A
z9kIiGwR-d~NEBDiZ@vA55p>bi4B4dSB4!QA9;XvX@gq!m#1PpJ<pul8=_n%&`4(CK
zcN5+nda&jK6y(qZoT!Sc6a`9<wE-k6>YbPFR2F8?wWlvoNIrxeQw>3*+>9g*B_4w-
zEcXeD9Fg!5xW=rq6IKQ808f3W!a{>0M-Axby*8&*yeoaLy@qvpotN)I7tlkogiJxQ
zT>iWEP%T&&r<)&_4yFe67yfj$S{&{x;3n@;J|-TPjH*2rTq$(P!0MIwED%Kiu|4JA
zXp&T-Y_HANhAPeh!&FJrW6+AKJR3ec&i_xRe1yJ$CXU$)f6_1Ai(X`I(rHXMs$}Hm
X>Qi`ceswaniHKqTU9ckJ)rFm#Aji9#

literal 1451
zcmV;c1yuR~M@dveQdv+`0Pbyo03UwuhY2%My{v;QUu>9!`&939phMk8?unHwT3x7a
zD*=tn*PYHqaaP)G0|3k(q=~F>z6AGKZ5(^%L>CQszFY988Vwi)Mes>OWdU!10~#kM
zNX=i^X#Fy1Pu3K3`P5EF)&T222?5$HqpZc9?T%IT0tp=lFm`xsDbv1;*2m2eM3LdY
zSOA9RO5w#@Y+~s$lxb;;s_?vW(z?LhdZ?B6$va|r(Js6nF8xRzN549>-<c<|w30^0
zn{>Y;g^O^)&tn+?F?GPaB}X>CVgG$VX6*VQMpRqJ@6`L95?)lBw-?Kel1lWLW3Ko!
zm-ZvXob<G$RKU)eTsRYjO9CaC%Kk)ScAHfJ1aXu5PZVYId?nQqY0e!}M*S{pUdpu{
z82@-!ySFB%X4<)b{evVFPI7tVIDh|qd&jGow-K`a2TZq)A$aGeBQ@n)LPOScl<aX#
zJDq=!;9D|FU9JT{kdNkVRp&wf92>kq_F%KcqSu>RBA565lGC#U$Z+v?2;}Cz8bLZ+
zSP`T8oKIPp)XZ6@3lIx?9q?%~B%e`W2UHbMxkI?q0VB3*(Cr=jLs0(hmg2L{!;!6-
zdK#kG6ZStp+!6&--B^kl<m#mu1a(kX{6>O;3yjYT-bB&#@mc*TX(wJ4;l@c@a}C;&
z)J5~$LqFm}3)<K+D&E@)xt>AS#JY9?26>YXB#hzHgMJrX^w;(d^T&UkTt!l8D=fA?
z^lMgd(8IM)!psLum`sLe)55M*35H?eXYhMHX(r>H6d3fvhpV<_epo4z9D@&jl4Y>k
za1@eUeO-_RhLHEk;%2;?$1P(60|rr8E#-A4<EKgInQ|ZY&!>%)DQ`4wQp>W@>=#kF
zG?2PsnjZGv<yy+;pew~#-$+709b-t21yw@&pWqt<9ib7i>V*_*J2jG9L>{VQf^SW;
zONMG=diP&f4s3<KflHq#{@gz@2yQBwu+3c^ct(|7><!EMy_7@$QRk(Vri$QeS1)vw
zVL^HBfU9VTnP1BDe*JR-TOdLR^=y5#I38}}VRU}1#azzeA0j<@UEwn*b^qFJPrNQ9
zZ*0|e7V8AY^3WS^@kwtH8u_7~saIqLI(dpSOV=pfRAA^Kw0v>WH+zPmf7-h&`mGDu
z%$IQ=539xel^X4qeS({D-`6Zmb?y;@ckyCsg1#?>#WX|5Pv?3>LC_Vap;=5x^2-OD
zBRb}OV2+WxR#|eB)y9Leyp2_v^5MA4J{KAYk197(nHQNzyg8BEz}}3M)U;H{wyykQ
zs^gbV5I(0^Sv>`sG_D}-@VO#09%0FJl$fSFcve=T#Xpz>qwiQC3y&>h0~{!VEfWp#
zC}jf-R|K+(qK}4<c5-W-Ldy(7=qRhtMWU&zbt4cr!VUV`hOoMg$jVxZf`&hUR-Em&
z57Y;Y0!<1)+wbTcb@3WbmJ8g;9~6{voq|u-v8=F*J4mE`{$=KHp>v$_=4xLw0EgPz
zFpty76{^p}!c9})>gSWjUeq|S1fihYfMekT9xkW{l-CoxEhut8SkiKW$){tUzoJVz
zdRXOEdu?(u!jffk?FX?6cE2Kpb(Y3vP>nuUP5>A6Gdzij1}AI6Mzk(eqdB<Z0Mxkj
z>b`J6$v$Ic41|rwp<Eu*6ceY0YrEmnL0F(&f-Wy&kP5g6k*jsoONV^!KN`&tug9k*
zB!m8xJgieFGU5{`IhOZ0Q^JTVGd%O8cizAVfkTe?t<+UfiU$6fRid7r3^)ish-nnf
zdKVvKWYfLC$&g^8wiBDX+S1~%w1PcSr@Le)S6~kUMK_Zo%|$kgxf;q<pxj(JNW6#8
zD>sj+Wy+OcZ#VlYR#^D({V%9|y1k;FhzW&CiXhJF=6wv-2uILPC6rj1dgmRLn7-%N
FAFDZM#ZdqN

diff --git a/secrets/mailserver-users-gitea-passfile.age b/secrets/mailserver-users-gitea-passfile.age
index e66130ae0007038d75883d8ad3bef28c34b2a915..a8304344c3cb22a902926920a1a36346503a46f4 100644
GIT binary patch
literal 1384
zcmV-u1(*5&M@dveQdv+`0F?=WwU-0ROhlu_9a*1D5?nTUe!V*3+x5L5A*RHSaQp~h
zrdn0~K+i&M!(QMos<11W8%vUfM`jkv4l;x8eI{SkUsGX>oZueJ+Ry>PD|%l_!ks;J
zE_QdJ@9C`K2&d>Qw!`D=W?cy=4d{>7CJgxIFz0&pbU9TU5ChuL>o*o_vHy;JFL5oG
z;P=AD%*U8U9#-3j8O3P|m|&fm<Jg~ZXJ})bTEOB+luP^OM{q!Rm!(jAlsmjAdUI;t
z#QpuF2Af|g?VDV-%z+ELE_I+@4WkT4M73(CLSU{5gIT6fpBUn*=5Av}_<etdkaR;6
zKMTfV$S}YdOya!&^a)y;o{K^IM4Fj|FO)k)tWRB0f>HL)A>}KuKg$o6Nx>4_IGtYo
z7NRZDne0O2vMyjW4_+s#AKknuA)3u?MA90fsvaQ!>w<0^RVx4YLYyj?rx^o4{7gNy
zj)>>w&0GA~erkp_Vrr~oWwCPCL`>%mLw*wL@jH%CP`F4CvV$UDkv<{4cs3H6&O1!f
z+E1gjZWFPLPWv%Kg?gUtr{{L_1;(o{t)u}5zAowrA;+yRO8)@hrNlKVW}-L+Ue<t<
ze~Uz_G~oWOyOfG+TzMY^A!JfC^hl&|BIcXM&O*%!O^UB*&sv1ttno4`!&VAKh(GSo
zKVC8D7`)*zuO1)-&CcmH4x>~W6^m$3>00bb?~r}^q5W>2H)P1gg3>fzi?Aw(#RugF
z)!`Dm;eY6lGncYb#_=&rN79)c!~xLZuP**peHOpy$L7mPA8$*q8*ujyMP$!TpbON&
z{{8~H^xN_u7@^pk<wjM9?(!3PkT{gXMq^s8c$%L>2|wygDUT(o#u%p-T}){CA3G;6
z%;?qhVN7v1rzlbK3bR%I9BKFpj9sk$%FXI@RudL)Q<jaKM+7gyeq%a!uL4iihdbX3
z_fL6zE1#Dv&A){?W5`u+IlR+ssRH~e@N=4-z`ifup5J-i15Y-Z(W-&+_aUV5a&yB(
zT#J8YutDO76V0qQgrk{zIm8isofwxM+^j8Uy;i|+Z)+C^#pl@}cV7j4OvH${O0JYU
ze2}EJWk(j6cQ$Zmm=GZ)OA)4jY<T-uzc+X}EA3vytll*ROpEHMHZ%+A$1$A{gT>82
zlol{v0q19Qe+3c;x|zKpd*IDbbN_TWjKerOBggs494;E1h+;66T#968{-F1EmVVyu
z@p*8H@S&2yt1%9>ecNEkTT+)%(6J{6<`aDj7%l))94KO1!nz(~Kc#lM6{LAGaK*I5
z_Or4TcpsYM3A`(t#YkofkJhU?RRoMay_s@c*B({vU!724ntZl?;4FVapN<DUJ6c;s
zZ79`4L)Pss-~)zJj^16JH`i}3t?VP;>I+U8z+F?nALyvX%kwLiIoAX9ctNvp_u-`m
z@vlb1kL{9g!I@kDu4oeOzlg6y82|GQQ(6C)7h4W!48V`s#RAJ>*)40)@sZ08>m)hN
z5nE~J&BHG`u&_OurP2ymJiCMkU%CRM!w!NIVf(nqntAR2IL=gQ(dA+9wR*LPTS=wT
z({;Lx@ph~#2?%G8oeAzg{mSv)XM4e<CK>~8GDOth4twRdcON`jpwTEkKkuEs2Lu}x
z`j6tQc=ydvk&RQ^msP8v>Pw3$iG(sysgK*foIDj;DQ#1faqjJA-#4jQ?HxXf2oRcJ
zhC$&Tprr_seiIFV5H>HrQ%&6EST(T8#0%?E?d=c0TCL<q5Pf70lr2;xOs}5<vbrUU
q3`!yn-9tXB7_K07q)8{&=G1E{!i2e5^Cv^wAp*m!Jt^6GiD_FfsiblM

literal 1443
zcmV;U1zh?7M@dveQdv+`0G2tHb_j#KZ$G*gyR<x6^A$`J`=P45&gBS|AV{1x{bb&^
z;My<GTe+yV7#|wuHHicHU=9y_4dKh@5?5L27sE;#*J{6vCs4#r>@a`)m_an1^wNa6
z4w0)|&~fW9=L&m!k?sAQx$R$>za5m=zXP1zqXb7jG+$R$nR83M^);o@gZj?lJAfkv
zYE)j$ieNI*j-@~eAbia9lmD7(Z7k*%B|gQw?7)r$bSQAjt8uHk7Ww2_8XaX?^zzUE
zuR#s)Wx}D}I9eHWjJvQ-jAaMWlJ3*ty)wLWuq)5CvRFUOJMay0Qy0t~cOH^4V@W1c
zozgT?9@D;FPEg4_QK=eX5~Z>YdfW4yw|S@q)^Ty_(K4wHRh7o1msmMZw>#f5e*7b%
zBS0{8BSy_{<~!b{uCb$oe%Jwl2V!ujg*q3gwn1K8Bgbl-DS;sv`PEho!E@JY2iXYd
z8;Y7-e3JRGJX;XaKn07Ygau2Jk}bxVOLL5>bMZA-(w1tD$@gnD{)$Jd<<hU4L(+HC
zc!eu+txq?5uA2E4aC?Cl#>n2`wp|?%ZlX$$yq-cxC?pjHen<{RQ2R0HRRGx)Tx@v-
zqe5VL8*d93yo~(Y$L&6<l5=q-j;bqa$Q?#0dmtWJvbn~Kde_s5@SBaT2F8LQHT`yK
z3~!2Q!-7e-u=zu-;_o^5vf4j6&gg)jrhGJU8hSsL@7@WkFha^88QRj6cm}`eb5$bb
zSlwP-;G01D9XdB=$OK+|Z_!;1VC>6vX&GpuJA4xsC`A|Tx=FX+Mb(ndKnb-jEdkh*
zH~v>raSqwuoeGqTbc3O_MCk}@o*BYugWDboYfr)iZ3{I^PXX^va<&WhefB^N-GXNc
zz>7V4ri52-p<@NS9PLp(L<vClzVX+z!~1)=Z_bW=iTF#BU^5zm&W<A2D<4lqz63=z
zvcrIj0hgHZoWdN$^N<O0-;>2-!)T)&w5H&=g25yC0++-aFfM%)SfG`@Y$l(!^412z
zQ9nEVL6yZktY994mR3a0v(NjkacqwmJiQmspQVnIB#$d2d9d3wPTCCo8dNB<D>1Ma
z99t*~yQ+yv!-!W2ABT&NtT}BmEY?Z!(H){sm}UosL^-k)!(;BOTWS_;lbAdaS3L+S
zx6*BW_Biy}8HE7@2(|4=<mVuqarI~2H+i>>&v2HGz}fQy=_V(j;#qC)(D)T%V^4fN
z4U%a%QJxq3)nXRdVF<#vlP2VKgaTKcBEIK8xL+kpg)CA|t;{!}OcVo-gT%=#<e)td
zNRt=DgLX?S`6Y6;`wn}kt>xWv&J6!=sBM3T20meR36YTrnjdlxqFSSH>DQHBJRsV;
z2$tNj51s3;_Qu_dZGg~d^pK!(@T$P^Lw8LHE)u@Z!Vn@m{9&+Q{@f1;MK=}!Wn47)
z*;xQfQ#5M#cbn~Isn63_!kM;`)NwUVmr?m*ZGs$kWZ3kuCKs_qL-YB>!4TT|brxvu
zBUY$U8HN3-b0yaW^ruLjYgEmJ!d(W}l<GWhu1gJXbiT<j*(u3e))KQ%F6B8^$fHV_
z$rje)JJ4Lb^0ovY&3x~{Vu8keh$tYtxeWxgFX6!Ub6w@^F=KyWa*#@E-b7}2B+tf1
z5tgsY%`Z`rf9U0k2kub<#Pk*A2|7+Wh~~|iIx3O_+ArAEj{Z8*fK6;<qn}ln?xWfn
zwC-GBWU;^Imdl=5bMzDXxa3mrl*gNr`t8@;%~7SLlip;6viv31k;^0_^y$_fpxx=1
zsJSM|>cw$B=Pl$wv=4Y<r6yiElTQMT<RTOWAW;LhsIJrhvl7zETgkz~AXy#47r~v|
xac**WX20nDv7GE!iK2>GwvEfB)BgFP31=klq&94&cP~LRWt~%Gv|D7rf_qUg%Z&g4

diff --git a/secrets/mailserver-users-jan-passfile.age b/secrets/mailserver-users-jan-passfile.age
index dc544a2312ec267bbc09140c9e392899acfea4d7..3f42f7fc4c75e3be64f8ecf967b2c2e0102d43c3 100644
GIT binary patch
literal 1471
zcmV;w1wi@$M@dveQdv+`08SL<RNFlkfw(__&z%KESQCRvCKmipfkr8Jo_ZrBcS$v)
z>-c&jm0-1n!p~4I?ov`+x}nWt*XQ}T)f^Za-F9&9-CNi!7dgP}HDZ}OtR}>Cj3YU&
zXUV!_cVUIZeAqhgz)n5%0x8ALY$euSEI~v^2M<#m*5Ub|lw}0rfr+f-h2=Obquye8
zeFjUMAVIpT2>Hn#7s`0{^)YJrQ^sM2HxP@1uitiB-@v0Xvgz>>0uCN6?UX-|&aTq{
zbt)Oi3HWf^w8WTmEEl%~(;IAg`APeG#n(Y{o2KmwDx~54DQ+4GMkmxrKFawCD4237
zu1nI`%PlOP>w?YH-N5(dgKN2?K{Q><=xF>9vLD+%mN?)BBI%MGO<_XL^<y-+zi_ts
zl-}S<EOfuV?gs)7+^iEG5%IE2lFAj|iQK6PBNy={(|ieWCX&oAH+q+#LS(hH>g0%g
zbta{PPoYzN*&sM6LY(%FO=+Q<IKxeuRoA|}H~0rdk~{ueuLI(3*|H0Rw$d_fC;mY-
zDynHEAsnwC5`FzU;UQ|eC#jb2EvsL))=zO1>qR3u5_Iu%EWU*ge1(hWULeH|rkY>Q
zmlHs=l!EZ&TyW)7cy(<MoEhn~Yaj{T?zDX~l?ex3D)6@6#WMbTf=C2z7ZN;#Wy==R
zU+E)?6ps)!jZ>x+;6LD>IWM>$5x<A@^8^fnZ+=B0sll7_9V4m3bBH61vI~znFzSz=
zW@z(3w#=jpH^1ex_JT(Dq-T!vOQ7d6b?H3uucK}>ko~ZdtR?6Hk(*6w@>6tImP)(D
z*Ds)*@H0*jZT!glcc@rKHoJ4FXU$VG#;zBjizQ)T$e(|STq2=V&Q15&q~OrXN>6zF
zmK%lwbjCgzS&oHRt#iI~{+J`J9N_>AzL1t#XKM?2&_@nLSzmCKS1cY5*jTebJ7?cs
zyr=-B9FB+1&=xGbPPVDu+;(Rl#JyjLM;NV{c<LPiJrR9N*<)6oKs-HQgbS=~h884h
z3wmtVx?*%KD@ceNZCgR+J|nwDTwIJz%k(AXha)qjr+kk%&Uc2@9s;VkNqYH`2k@ja
z<bP4hmLh9?WmyCO#k6AQbZ)~|Uh32pEF~#xOCka2D7IwHwh2DQJ@!pv7{~eYTZ$L{
z;0S&=fmi5~$ue0mGgNNe^pKYZ*jKyn0N?MCk-sT?!=Zgg4&5ai(aLnt%$xx}FU`Qu
zzn7uYV{1963cl7&R)U}ni(Uh~`2I#jwbk}=W>qDe*bO)|DrV*hV#F7BeqGe0#@Mob
z_)*QAEUYE@-HP!x+42lX3=cHc=@2u1J}UyKaC2kRfcjcVCcl|$PE!mnlkS$kBEx)}
zI_jvKv2a{@kX!ZuW}8BqtcUtb`v}IH{V`CrskCYzR2bQ?gnkQ~+IhTj16%*uG92pa
zl6|9-f>?UzPJy)#cLOKh20a{XTVSaG{Yb@8&neH~j+C#dK$?>(1b<=$*KuI4-lHVw
z0f39ZqPlYj{xICW-a$Dl$o2xscvm_p<#GIaQ00&al?O%1Il(tj>rTaXW<AJv=+^5%
z^x9-~^&B=hDE9oIbydCHUT89ueO4vgVoRjh=(U~@vWd*I16UM#CZr6X9BeIyf2fXL
z3>dttxaAnK3?5wYMa|F&r;ilU&STPP;#67$-pqIKG_YRXwW+b<z=}>=Tl*G7fl{F?
z0z!Nt^K>(Q`{i|`p8>G}@uxT=TYY|>Y(W*i<*)Gbv*}piZtsp5{`_8@aWqB7JQh##
zm@>kfo^4x}=fP6T60aGcD8K?iXt3p#VxwN}gVms87HiBvSZ?2{F^{af$u;58+z|JZ
zsVlL-TwqztftqY&S3rG$A_3pZsbn-j-8_g+j41VFx1#FcL5!{*bdyiy5(FHT^r+;1
ZU5lZJ`D`BaX@N<vwL3kSiHws_Q28oM)7bz3

literal 1473
zcmV;y1wQ%!M@dveQdv+`03zY;sktX2rXC7urEnEGP<($&BeS-ZO-@&5z#ume1AYP|
z?-Ge^L?MWT{`&2yy{bL~vu2Sl@13pirWo|quI)xOZSGFXXHrH7k23^OJs>l&sV~M-
zOqC+(FcmR8Vq^sX+-A?shFr<|wVIThr-(DsGTadIUzL~~wMwyjtxv;D4;Nputn1&W
zt{vo!`Uwtg)atc<#W3*9haFUe1r;?vbIw_!3QL{9)@%-$AV8D5Th0V$k;3Vr2;aC3
z;(m_mSSK-VQ;PCFE)+0Pfwy62UNf42qig2mh}}bF$!x9Ms)o=B!JI#(4P^$qX4v}R
zdEbLmX`#vmT)*o6f6_rbbVR@;y%sEdbzjBOpXnHq&pl4KHvfxvoTGlbXB#($Ri`N3
z<cxD#^V@JI?MKje?|-}IB!xgMJ{$bzRhTIR=h<X~H3Y2`)e3_4V7r0d92Kcre+|N3
z4x)up54MC#PCjO7f0n{<Z;x$V{zw~Ug$>0~i$~69u$=OF8t`V+Ak=Ksdx@evD2sb7
z^K$0hil|@@vK~eSki>;l4c2d8z<H}r3gIjf$-a}I4?s5ZO+Zj)&FMJZ5ES+bw3;?Z
z)ZxOYXmA_A@XEf;+yt*{t-auuqz`5$($#rHMrNy*7a!Tlya(_5fpMXFS-R};8qg|W
zpkhW!mkqw2#@SKtZ@6}GDe6z$LeJXhaEnXJcviP6Vkz*%tke|4Hkuj)-Og9+$Zfw6
z9BA{BJg4^pfhPS62&uZD5JY*gNap4H=%tV+bxuL@QtvX)Y^sY%d_*tIfc#RaZPOr+
zVeqvE_%Q-=Y#ETVz7wEBjLMx)XXhaiMzDHM2PtWKoBeqGN~fSCEb2M%UkEff)m$C}
z>+O1hGWC1porctT8<lMlLz+j8hn23hQaGx>9`@1(omSB%Rv*xLw6bkkhUl3epQUov
zfN614$cK?n@v-^~{vvgF4=~xtj!RN#;|p|&83)Un=jo$1ue8!tpJQ`mv1?ZxdgK0A
z8F--6@{p8|o7|<6h;_OsW=%A@4`m=etm!>MekN%YyhYspXVgpSozXH#PQ{cQr3&*=
zXIn$pp?w8;CGiQq)t{{;0@ob~l?0-Sam`e$e<MF;<8{HZHby!+Ox>n~D_G8ALgYg0
zmt+i#?U`voyY>qR?5NEXbVy7n8r1a!Yvva1NefClw9N}6c-s4KO-0QEv$py7jmLDA
zt`VmUc1alCCqHEaHRk~+Dwaa(raM_>uM?;Q0sX;ikh~HH>SuP|kn$Aa%1*Jya#GhU
zN+kGvYsZf+z4RB>3`)Md%n+6u*n^cp|Fm%1OkZnnHO&m)E_A0+?~E+YZrEyct}d@z
zkVRY$4UFOvhJKjt-x<!iP7tR0a;CRX-%<V4y9kQgesJg}{&E=;O`H23xbac8#v@Vf
zn7U7aq;aR_w7UKXL2oI)X+Xhe&d`Q%z$v;h#bwcwW?mdtL-D=iYY9a4(FO_0C(6!w
z4>YOjr#Z0%_Z_lh@;Dcfql?xAm-s!v4L|AeZ~1^xf*V&%pzApa#i(%-omJ)W&WYi#
z`Asobr(A_oYjF(+cBUHOyYq73#?7*kN|<c)LUXwTXY5#xeS7Gw_K>yjaOs51XKs)f
z_l5!}k_-bpf4Yh?d&P0D>I7Sofw|Wma6>-uF$t;6njTjQL3#gBcCV<y{n|5)>%2~8
zG36js0Bc?W^*+{*d){GBjyNA+e9;T^*a=avi`LuiAZLKwFumUt8avt3;U6Y2z|_=7
zB<g~%Iulm;!0-+ppHR>|m`O)9(6&?ziiCk^u~Ra~p|P`99Vv2TWGXbQZCp57{926^
zt*wl94p-_ZZuguXjP#;*vG?JwC;agFdE4O|38m?;-a`T<W(?%%sMt2dy1k65+nHv6
b?>SKZ$Ig!BpxK)I4WPwQ)tZ_q)&tyrcH-Y|

diff --git a/secrets/traefik-dashboard-basicauth-users.age b/secrets/traefik-dashboard-basicauth-users.age
index 09a42f657d4ebb6adf4f4651b3ae820e2af1f25e..12d7dca41e3a933d775bddf059bd1e398a3609a7 100644
GIT binary patch
literal 1423
zcmV;A1#tQRM@dveQdv+`02Iq(DW`5}_rqxH^-1N)Fl;_bcfFbnan|q4RL}fAf#0y*
z06UCsC%oytV*r9m{1Tah!mDcxCp|-E$Gb~*4B%Q5A@bK}v6ve05R&E;bc4^SmN;#w
z{Hq7&dh%**#{$*vt`q=$zZ4S>x3<c#?-a^;GHdiSgphO`QGP0T_4-$%5?^Ydc08Nu
zu?VH!1FRzl1MGs<Y6laZD<}qqS_Z>5@0<qb@NPq;_o~@>O6gBs`%c^7;eqC}#~F(n
zu+y2evPT|fM>M8hNl671F$(Oy5L?n$;$v%WFRv}3T47}!Os&Qtq-d9u#_B7Z|9|EY
z6!G0a>?h7>53Qoa){RL3N2=f6<(wJoi|K80@@0%~1v=rnunboE|8ql3wFnneW|6eZ
z9`#Y@G5^f?nE#F6$}a2*UoYaqMZSaq$52mxMm+q#@sUVPfiL0(YFVM?nW<&oyFe7Q
z^rb+C5)7{un(tg+OmE@Q5U0`}WPq`xk@9pT9}{NOR2?zAkQj~{K`jfWgQLjgcAHqW
zpSS673Sw`_>|sG!Fpk~db;Na(Vvv<7>G(=NDS4~YBlj(ml}=fpM1^kom|G>QZiYKc
z;Ypi_$1I-41=2iGA>LB)hW^e_?x&D{40FA>J5<LtKU2{6^#&+oJj=qKflLG8xg2uK
z*JZdUf3HHx?WtSo451iW-32x>rRAVLH~&<BDunvptAGE4Sjv06(7Sw4-mj5f8a5q7
zQ-BXP!tS|Zj`SFiPoCLK#mQ5(npyFkLHHY(e%!8)EXM@bP*|!*vLXsfc0s{c;&xc*
zp;G`(`qSEw{iA4ji@7>V1`#V(P_}i`c;6-VI!CUr*j>T@2JhzPVLT^v>(RTrn*tHP
zt-8+K57_vs1j1qcZBZE)6!TL2mf=CWDyM2(6qT%urcWg>DDGAaPpzhDF=(eO`-lbK
z>2hlxp6uSxkbC%Z;M4{>ZKe~lh-{!j%>m3zTJAtJJKF0Sbx`5UU`%{#QJlxj{=M3y
zK#(L4K-Kg)egzie2Mqn)1_i>jV(+UL#YdtUh<e%hsf7KxMupp^Qg|@T1M56d)fVoO
z>@l{ePv5U};pS=}FO5l`xDASamG?|}Mh1T`Gn7t&SWWz>vJa+L9^#;r#`~_fW|3E>
zVj?)tQ3k%)qRXa;iO8+yXuODs<E?n-rxcihP48k(k!<#?HaM7qcwjs!%~K{;B2jCp
zT)=3Fb1Ji(^p)N9tGW;pL7K;h<0U{LSEb%%%B8QuO~klQRANxFXalFWK9TpLf@~)B
z<1O}R^b{QRDSF+AyVvE>bk4#5L)TghT;Hb;oyxm*3z`jtIsyFxaq{MF%^z_^?EO7v
z58+w01v{(}|4~qCYY6olfHf(a5w!(i7S^Nkk$x@Pd5NfX066D)p<_c(GI%BkK~9oq
z7~$dd!FgApSWzzh00o<sS2bB&w{CN^QopBxo=@E!YT_m(osL;ck;4i3lqOmbs-$Na
z23M@$Y(Qn(ATJf9nK#549i#6Z<>yY4{X(-#`^3>GcwtkDWnEwrTCbt!B(q|8!xh0d
zmrjG|`>7jA9QY%eKTPoiHW=ST(>+@|Zec06-&7aEq$be25|0fybO6E5wQsQBO9d6c
z%c=wP%bB<9OV@=>@#v6Em}94FqF9Y=!lmWTio?;VeiFiyMEbw_&`lz2F0GcB({<F#
zbfd@>i@UgFAc9D1E>h7mT4gU_U-7kznw}c<sBSFe>)9N0PrlPUh-jw)%>LNq&bS+S
z{&2Pk0;^!LAD5hzA^seP#*$)G^^X(-86052^^ul;7%!CXqhOT>o*2I~T7jwgd~3io
dn_hgVQ-=wUTFJ522vZ-lHldss?9QF5SO*Sq%uWCR

literal 1366
zcmV-c1*!S~M@dveQdv+`08qSymChUHczwf-3lrrJHV>Dm{R!(4&|3;w67=0#j!nYR
zrRDpwWCm=LovVY*enuWsSaI&gm#r>-3{aKyj9|e~#!t?%9C0;0<{_Lmym%<aiXwt1
zZY=G9!Gmi{rfMg9jFS+%vN<i9Up5n@a&zw1T+qzdFnuz>(us&Tv|L-k4or(Wrxn}m
zGyurEF~)=r>EgYIl0-J7NtVHFYm66}U?i9N**4!q`e3AtkSH-GcQ9UDO0>k1=jBlI
zc<x>su8H|xFNk%6Q_7<=3zh-I*OCIiF^1*G?*kSXWdzpQf`K#RAk=tEQFE^<{@dj8
z8`%(l$LdIX`7E4UYDIw;tFYo(fOq(!=}$)y=p1!r?KVE;_StyNF%B!b`rFjjPes<x
z5h*c+nD1(`rYPf;I|vpKt{RHQ({er*8=+df8yW})VwO-uz7Wuo`H4;Jf2(4`O2*&Q
zd?;$5EPF=#_yq=+M=-(09f4!qeIRRE?`WEaW*J6Q{JSkBS;Q6s42_%M0rQ);$FWY*
zQ9o6vessp<Uck`r%HgL+r7fqgY5;Y~+1zs>@tn|WoGDm?#is?kdEH#Yh95Hl6wBPa
zXEKehV35OR)@sLY!2}Ye>;S#jMpu6%H#r%kQJgA*Iz!B9;%4!1#2tK34X5mEnDYgq
zm9}^oGFqGoM7awyiy+%Uv|Qi?aRqApKBd$iT<jAbYi>??u^l$fO4tpHTgs*znIzQG
zY%eKjj`sPY%*_~CPPYKn&TGR2Vn3Mo6!_jG0{N8%#cC8)7vrPfH`p}hscAZ}u5Oyn
zx?<C<1Ycs0^g%+?4FqrYX&myj=L7-3ee(#_Q)ZlFy6_^(l4qyL{?7gyg<nF80E_H?
z=-P16a@+!<crlWik|@y*Q<QhysVUg0<u*K9I>^f~DK9qiX;qJfLtAfS*M=ZcwlGxo
z-al#bNoz2kCxMyY!%<K%zW8#yFNI+!m|VdwicaBxwkXutCyeOi;lhH8RL0*dqPwLg
zUg*UaXUZyQzY9&xah<APee&bT{rM07<h~Hvp>+cqYxG1&5c^j)-)I}YI7Uvz!GI65
zeIj6hU59Y^D1>7lP&?tbCtS($R42P+?fEzMz2u4+psWCuE5SH{YA2bwQ0Q6U%4(Qy
z>*Q{gesVt^WyzrM-y;b=<^i$8ya*c`w);c*ETVt9#HyWCyQ~2w2rtxB!q+6Dflm&>
zkHXU7h*L0$t&n!eB!{-Eqo^FskC7kh)J+Rwxp**{@Web3bH`UbvF|u9h^0>y)=~_6
zVS}Dph4BO22yC+-P4E@)gR=p|$sQ!+j}TNZoCzItWZHqhgVyGS&gpNd;SGvAXH0cw
z_V7VAb;>99tow9!SprKF$;k%dJ8!HA;9Df*Qa|zqRd<*laLEB6sC+a|gsY}d;rbSh
z><|Cad~iO~#^ZC6H0)S4f%0XZL&7q2>Kbb5mDK4*R(EQwQ<%vyh|!ECVpy!YIT8?)
zyPwUDuuzB%V0$C(K!*+-$BO<pIDBu|>Tz|{#N8p<=tj`T+w$|undjjK4g<-=;^;YK
zJ`(ZEV3Qm`9JzH$4cHqZjOC6U1I7*IVxZ1tp8@hVl+Sc5_=oa#Jz^bod*ly#lB5<Y
z$ro51=G7!GH&MjkC4U*G7Pc6$hDwOBVO1NSVw<qexCHMvb!2_?`6cDowz?I80aFG8
z1-2Lu*_R;2E1N)kDLwszA)ms*T?aPh-Q*URR%TCeA&i<!60StoO?qnujegfUBBJK>
Y0=gKAt%DjjBNEwzf~ISO+1aWl)uEcAr~m)}

diff --git a/secrets/users-jan-passfile.age b/secrets/users-jan-passfile.age
index 231826d2c3a5baf958801d8299129ecdfcb6d2cf..9b432fd703a08d183653085505608427f24035fe 100644
GIT binary patch
literal 2426
zcmV-=35E6mM@dveQdv+`08~=K@(VvHl{v1qn#ogA9@YT@MvELwikSs}ZY)kU1|J{<
z*$9m$`N^$Vu<`0SJrlQ%+}~AoTh*MtmPyNlntDToJdD2*ml)CN={Bzdw;YW@UwuV1
z{Nrc=9|unAJL2>k>MKB*yTC)a9LQqC@By|jONZV2I5qle--I4GU{XplK>2{`2$K2E
zwOwjo34yY>(S1s}m6H|3DvJ&e<OC#=Ff4$2irU!bV-i{tI?#_=vhCB-C1yo!U8ibE
z$~<}C%XGz1@*GYSU`1chM2agMsotm4xV$@DvrZC)@oJEF*d>|{2b+jqPD^-QMv)M`
zr@j;!2N6?@73_zI`h73UFaY3_1SKS2T(A~worL#;Za%_aI3Rt|_CZ8+7rKPF_uLxn
zL3n&Zm+cb=+<JPnUkgfSjfA4#kLvE0S${7W0lNhPsA5FOk)Biba@De*M$;OoZs5h?
z!lO5v*+hUps`DFBPL;G1dP0(-8|F&&uKq$s(-mmr1J<^f+ao;DrA%;j9=&oRY-wX{
zHI6k%Utzh8j513vZO04RW#zl#L3(H%1P|`siK+;VJs~MxpILps65r{Gg?Udi{E=px
zl9XU$BOJDV`QcvQ3Bi~|V%Jg;&>Jy;;VbwoNG*Gg{5U@@0!S%U>cPiFtr`3bO5*$t
z`gdlAHO2L?+|8!}?!(QHHRhP#%oI4W3R-~reQGU0iNs04BL`3|8ef2^!G!#S3WCaj
z&x#1BY!@V;>HWgD<Kj?{ooEIaWOoW5kuk1^>to;2UrQ07P+K$nTwKC?Vcu*dcgw&p
zO9AkyS<5P#nz<MiAT1N5W*+eCIQ+#s5%&m;4TzIg7fr|Mc@{)nIV<5Uz0Ra^XJTC5
zB33cu3kNX~WpxgVUrE%TtUgy#cn^d`c<#3ekwMaS&Zb1yb?Rw8&n43RuwQ`#SM?O8
zK+w%ZkPP9j4#y2aJ^p_5DWfxg{&c&s_S_{c2S9ZWDF$6>nFzt#@xQKN1kEs&Q(Idt
zhTofIF(z@S6eg^b=#Z`wDv%5kFo6g1k62|&p0nsC*4!be&dG3y&iI0EX!%3wBWfl_
zN2FH)!t&X)fBqP5@Yqb$gaC^|<tq+8G|s*bA32h{@Vt82X!Eh2T-^Jdo?R*Z_z(gN
zyD!^MQYRXO_U-$A2UFQy{d8g$e3+v=R5tB!<Iw%s0gRDBBvbL{Pf&7mYDA?)zZ<~+
z5<EkbGIbcmc3wpMAMn8?7P$t#L9VG0akV*I%@_PRfZ7f&S$_JMiH>PZ==;GZeLFeU
z_>c=y1$gzjH>YEaj?AOBOk58spP9S5Aa+uXgBdh};u6khOxY8>ndBda$&H{4GY^Z6
zJz&E*)QzTc6zKh(9@yZUOhxeLlNBVRdUv52&d{^S+Zdh_@<O5kC<2fwIQOXH(Vm;&
zrY17JUcLA2mXi-5Xg;sl(a_6yLDPLU;3^cH$9_d`wGh>?hnCrGc7O2p>@A_@Nu3c~
zb3r{9`wsr%QDNFuO#$=aE}PoPyO_Jy3u8W$;h}q&mnf9lwA(mMy`J-wQN3u%luVHd
zi6f0<m{9N#udG@DPRj`bYm!5~v`~E3rz+%3jaYO6z-cQ7C=z+a)3MpA)zJ)>IO(8i
zBJqD6$1S4+%bAPaP791DD<P!MfFK9u;pde0<!INlHQFLn)#B{0fInSbQDAO)!a9rz
zweP<LlBK0p8R;#l9VF>Ujb2OiJ`IV@zTGNR>Tyz}qsmf(DUw-9!gm>1xAEKaq;iBD
ztV5Y5I^G31>3ZS5{5#T`#3BDpF<@zr5aK}XQ;jZ{sGvssA<TXTWRzEhAuCx-kqWsI
z0SCblC=<!6bl9_o)dE1^TVZX5;P{O$dImg>r0tF@!|}K*3o=lYgx0WYwkLfbeUB$B
zL!j!U8ib~GOkvk4etjruatzBWt9Y3H=mS!Re=rsQ-FdskJHH5SE;zE6?<pX$-&G_p
z=OR-E0sQwdH!*rS@&E~g(VDCVj-f(OlcpYOep5ss8_k8`#L;W1GNZoQI$u=ThbUww
zvTeb6j($J?skf07j3v_IUIo}$f9=o0dl0%paMt$=Ic2|LSDVQR1-$n-abL`umos&@
zM0i050zPHUMeAvgp}w&{@b$6GsXr434-sdB_e3{!3k1VvXO}#M9c?6DEJ?=!qE6XO
z0US93PT7&ftNx*5W!PscoS+U&?L%oQ1f|O5%sha1B#lF-bb%mCn(RU5T+g}fXM)y<
z16T!3ENJf{ae@Bs7-nnpUS`LfdCi=se8AgzD+puX{PJRG@6@5ii}RICtrR?8g8c4-
znN3U_d|}HZ&v@cnvD00dTVxow>GL0oQONwD{2~x-kBwa1opPB*wY1ox>N>nnKHoPO
z%G~mNgi8tmtAf~%&4<xmzS4u<7Rrz7D)r<-i}^nR-<Ec&N$#&caSw_FX7k1BrdvgN
z*#GG`!HNI2;!k9_*wO_eC_0(eso{Gi1|nh=sOJ2c>{WN^EE%3U@h(!*)daD3A3nUB
zZc0p!9W{Z6zS?2(<R<<X)D#)IvNiH4f2Fk~6owUrjHpIuscOv)mm|rIv?CrW^w#2o
z#fzYAkukWb{jB@w>V{uDDaT~{S&#U4-Akvd;itE!TGBql_Q^@2<2@vYc9;rxpHb-3
zaz?%=mymww44U@Y!ejNnF_RUl5b27MSyd#cHMfpE(=)`8hr$P9767ZxRn?713QkZZ
zUMB@1Z<>BQbLq8Iu=pdq?L^zUztLcVJNjAcH3eor!TqZlV=3LJ4w~NRdjAO1&(+w$
zX<7~qaL%w!HWEUCQ*nEOZh(QLb;w77s9lyPT-B*r>hE9)Wl>8jft{+rJjZVN=EiEk
z_-@&KAS_q?iF0l8M7eGZ5%3EeejyTfswC*M@bWOocDlcvw#@!VB6rEn(Ag|q(NP=f
zC-!F@Pa*y_x!d&MC!mn=QHkQM&AB#NxIeuxr`i0;U!#M2Cu=;G&ILX3Gq}NPy5|4h
zmvqJbYFbtXc>E;+Sq6Mxk!1MI^>$nB8(WE~Wu$+ed)`&A`)D)jqDR2GmKE@ZD69u0
zrYV;l89>Z8g#yi9Af?UZ0^MIlX5&5{p<0)s!^$Z77*_CniRx1HTg#Chm)TRuS6N$=
sK3_iO^cp1(#O2f+eQ9fWHBQx76Q(B5j}+6jskI+8gc@aMiNcNZY=?iXOaK4?

literal 2428
zcmV-?34`_kM@dveQdv+`01ytCHswEB&Y#g(bsm_PHii6QpF&w1>|cCb6~49pIgb)T
z9=Wr(hsWdlf{L^eIlPq*{ucp6T+=j~Lc`YR#q(wshEOsHnk?x4y0R;5uY2qSkFV@d
zjkl{c(%NMOm=!>GC&n;Yf?pnwp(+A!tI+d|dHKn0ZMDD<^2fpsG6qHlICwhZ&9%mR
zSk3;UEon+^>i7kR+T&rx6rQ75gWq0pSI{kDZHVu_TAcK3iA28${nAa@tI5y4228yP
z_(vQR8_i0fHe=<qr(&42FVSZ)V2s^|r`BgcmH1ylQ;_&a{H0=sV(c|hUI&XvBV1u`
z^86W2hQpl}Pgi5*bSEh5>IjYiI5)2O1^VE|bU(Kn;N<*Y6t}TvP7uhkG{W+vEDRg(
z)=DG&`j&<8rF;ypNGmM!7rJpi(Oa}Jq^7Xb=$ehJ#3}@d>s+ba^A;yK^C4n<%Eyd~
z^D2GDMt68IF_|O?Kq#s`F~T13d1^3aZ{~Sx&^yR!g~M9euE`zxpVj~yg12Avs$F7<
zk0`g1E=U7#UnA$|(*JCS1JZ`ON(}9*XfbV&e5D~a{)mc0?iLqU2dDC`b#&y{_tzdw
zDcD0UayUx~1$-BUiAe)gJjQq<Eb)-2Vc+vpEmwh$jbiiWM8;KIgQVc$zjwaW<|biI
z`9U*LAe@kFc$ThXQ3T5K|8;XI2CVqZ=DcC(LxatZcD1Ag$DYH8?^(z(J7{Lt6c_wx
zwe>S$K0iG=Zma{wT_t6+2@haom`C+jsvS%M3A$Sal$-XI5qH@khHUisB~}rGG2;Uw
z{2JxM>xih#TibN*m=Vei-KAf0idiuLYoF4d>5SM+@}0hHs28ku2^iOdrLsa&$^>r<
zx1f9(RWH<$3}*ce`$A&npF$uGkpVN9>UV0|3h4{}ZR^VlKoXqp`dFao<RL@rl03L;
zytuiZ?-A@>22e*0^QL0d&;vKs6rY1?saOz-ZT~oEO(RNm2&&s$gvj3=z`q)IMnSrg
z6h3imRbiJKpTTZSS;g1QR-8!B>&=jf#*<e#>FDU-`-7K%3H#MQ-ugu?O7!Zy!Y?sI
zcQoKAbg+8XD3gyJ9ND6G9o{tzOYPZ$Eunpq{(vE8s*h<XdH%pPM(t_>-Dc>QJN7Z`
zW7gRx2fdq<qJ*#M6MwXN?u`RzYa<^Nox1Y*<2C`H*tNR))m1+;KS-Zf_p@_&m~)&I
z^R7tQV0L^D<V?WUMXWn8aN~y2mKBDz4)ig&pF;(2pBA4d)xNgb{8~iL@$NlBE4Y>f
z{`@5+)|ERCs_Ws~G=*&mfxZ*3sdtQ6N$|q+Mtv+s)MaHNVs7Tq&RwBk2S{f2@nPpU
zbd*p26H3m|J#XG$ZVHyac@%Rfx0Wn#okuX&BdaXC4Y@M1T=MaKM!gNA=AV_`cM9es
zxZ<^nNJd2L&SXT?InvDY(RET;iAxz#zjE&Hw$Cj$*NoN+Bs}WxZ9Ew5EYJm01JLM2
zF?H3Ei;zHyCR8{I!Rh(>kF_&D@<fETreL?~dDOM9I3d!?g=VQAu?iAnGGxR%F}AK9
z%z>k}pY6M{?C2H|m?T$PKOJ)#aVsy-5w6hzY}!!RUe^t}`Z2@i<8kJ;)sAsZg;l{`
z23g=3%Y(5rB+(kXv53V{iqCwx?n%qQ#7HoJn}Ms64}ahZ+@_|X8uHD~I0Hu~dHa_g
zESqGr+VmmeB#P2L(R&mF=jYPT1sbPLvck<@6g__wP`PIXJ`mFNdgsXTDVRgLp!z4x
zsx8Xjln~*s;rdGV3YxD|eqY<5%;FE_5FIa=Am=y8t)ExyhtY56ZibR8s9vv)sgx+M
zg0VH|o5)vBqEpY~#+P3jIJ!jdXSEGn60IwVc55mb^I7f^^(z&?R}MCpYgG)2&MH|>
zoG8?8$uMJ`CMR*j`Lt-#d%f<`F~UaeAUjL3uZBT+FJV;!*x7gW=y<qyo6z(g+AnEf
zcp0X?GK(s_Px*e?puKHGX*&C6%x`H+WTt>lch+Hmcq})4{#GY}G!ch#^3T$uQhH^p
z>FG0bD_YvJ=&vJunC3{q_{bsMc5tAyS8>zelO}xT!Eq8>Nd<jAV8EqUeQlOZoC*|8
z4di6Yf}zKFL;N11;|?tkrrl37^sNXnGUZnN%QmIWrB-4O>aNeP^q?)y-+Nb_WzND3
zeMzgv9)27^X+oe*yo*lGpd5MGUT;8Gt!|f^5^EDxAok36^#Fxt;RV$!ApP}rT`k6q
zYTuSF24o>%h)d+IgLMV%yOhWB$xd5LT+PZgz&v(3Z|E?J`+u&Fn$2a%yw|6^gd)$$
zBCOMDI=|~#o@|ClWEz;`5RBE8n2Uw(<D4Km)-<aF#+F39O;XC8u^Q~k`_#&RdQ2)|
zpH#X!xCUz5i^_Fmn^iZvLUARfWZU@}Y8O7~+HnHHp0rP2`E?_(T<Ds-b)<}G_niv3
zFzcgjqp7S=ig~GJWiQ~`6$HoO0qd(uyNt#1$a=;+spAkJ#gdfMLzKWt+Z3`it_6_e
zP`+;&w?LjmdEzMCeuDVQ4*3td()PBw3SF^<!!|+q;%PVqos4(4UarY?P3UK>A<~cO
z0=DrWF`DGey94P(K(*FBWU|6uEnmzlgNlQT3fDwWYRaVY90^OEu~l%6LmaCj_L#w4
zoUb?jf!6%Fz9Jj1y`MaD_2k~L$mq3}o_%mGE^Cp72K3<78Yo}VX4}V_aizjakaU(F
z$)5uBYI&&n+mWDK`dO9tGPNNcI0HS@rhAV)i6;PWJrOv8p5Cj6n3A)m5yxg>X=UZ0
zTi>X{Jq=Yt!D%PSRy=Mz91U<@f*W_sS!4_>nInwa(V~vSR-0c=l&q6L+b-%uEI&az
zN}2jH!|o)JaCj;G94e7f;S9(4Htw^pCjno!-ROc~ZF}9+S#R_6MJDB|gDd2U%Q(5%
zO!jpCJA}fwq9^Qg7CCdB_)^M=c6L^1`!2ruoOi$|NaBoNG+2aRQ@SbY)aqmj`28nf
zu^WtXt@Z-_h&;;_HiPs7WqF+p!`C6L#j?e4O*dK;;JjS}G6={2S;!~L4<ug}Ts2dm
z?%@jGtw@XJ-c~gUk2;lE))}c=w`XzyUZi&jYKXqKDX~*x!I1t!6QnvB_&d-d#O&b>
ujyzSm^?Mw-9yxBvL(ClnrxrW=?_pb8OT}C!KW0lfbm<h*?uL)L11<Oo`pumH

diff --git a/secrets/users-nas-passfile.age b/secrets/users-nas-passfile.age
index c5303ab12863d77a4bfa10462285694046cab8fa..10ba7e2ce1340f780b9717eac79696705468d2db 100644
GIT binary patch
literal 2481
zcmV;i2~PF^M@dveQdv+`04))q=%_L<-)>R{(`yxruu8wxx*)kKVsyxA-QDW7Z$XDu
z?Jm^)09HkwmC*YmOjUvN9q*zx;lXZ5sxz}th#^))mNSJY3L(8x`Y<CHL2Xc5z2026
z$~i>NcTnGA^S6(3fI3$v>xIOCw4K@slNNGt>IO6`G^?vxBukJWZGOb$)KbwwqDjKS
z3Yw}m%5ZXWO2;$E=boWnBUP9`hvT*#3&TMsMQI=gJ<cKDn_a^pM#5PR289Azpj*#v
zD*Z(mX<|@JPNj5kUGDP$v2G&;qtnlTqS*N9=7Hq1vPEF@FnbaPe%zcJ7k)*8K0roh
z>ZgdWup%1z(M%{FvKEk`C@2!#dys6tzK7-s><9FN>K|c7+h{HA=Ih2MBqlsbkz_md
zV&{2n=d$!S796ajPbXd&Hp>oKtWpAVwT`*gNrtE3bZ%2>Gc|qCOknkK#N5@ARxc8J
zD7B(Dup7amjf%Ymw_R58$m19wrG&NeHPgI3vl-fH>KF%H?l#w4FRydQCdn96J7Z0M
zcpR_saVYJW{G*u(E4jglfS&#DEz^0JcJ3f?p#xzdMNe#WLA56523y=<Fw*nHnQ#7`
zx$G*sC}MRH;5Lnnmp5fQoRuxjYp7}A^B?m*4~=}Aqy2?c687l3aG&X8tOGGJJSsT4
z*L<+Lo$UI_qxK@26M@m5A7LE8ZO+gih!PdGWRk4be%I^7ih!&$B|p^ryqC;cuMi0#
z%W%=}+9%F%D>;0%MSL*3BKYi+zx(C-xm1L!UXfUh37EprTw=|cCmb{-3`Wt?>Y7n=
z0o2`UoJrHNsy^+Evf$wF$A7~3n}aaHCQ?5Lh=B?aWxRfwiGo*#c&$LAG}$5od<^{h
zw6HR=BN!$WYQ-U$y~^luf!@!|oSyo*&A9p!Jit%ij7hejCY+Rou`Z>*<AWY&z0q#z
zjYcXL(<LdG{kJeJ9g%rDZl5XS-I$m9B(}1WD}lu(9UHX6h{hQbeFCqsUR0OO=Zk${
zyRC}34HB2Pe=JPtQBqZ<8FxH0u@gFo{%DaI`qA1;wQBNP0r?YcdZL|_^*J8L$N%03
zy31l@{BfDTH#(sEWJP1NB1&nVPJ=(BEJ}r$M5<^4I1VxqlZXF8|7Oun-|Uk)w@Un`
z4vZIv3nhz%>`q|igkZ)U08uC<`9_}IA2*;Vf*&K=kbtL9XwfWSfcea=Ow9GRN}SLY
zn)!>p5BT29Vo2ll1KT*C?y$4{_<T=Td6MdY35$Db|AkpJr9;$Cs)g<k4quW9l{A^)
z81ZN%r{*Y!zmPaw^L$$mU6T;}Pg`qcZQ%%Fg%~uW(J?Q!{%!ON%k&JU;<_ml(p#Rf
z+4?OgDm-PD+|!FYn|33|cCwPJywC=ZuIX61u`dB=1!}ox?ghARROzLM6XYQ{38!E?
zATz2EO(4fHjQ5Pc;4u}5%a1<%J!1ps8mrvc3}6>c9!&Mq{{pAwDkHK+yzJs)s4ZF5
z*UJAJg3-x%98R@#gS?WDUv!<(jbZPC>LucZ(H}ODnZvf50@xiCm@eAAlJ17ZA(rE;
zpQ<v-$BDdaPB+}}Yp2Y!XIq`H`Xb+TH?67>EI)yz8h%S}uix02s-*o=c<+0ay94!}
z3vMtII^?b$uv6DeVL_AFknjN}7c&(tkd%nb!^dz$#CtdXpaT{*h$ypy1QAPrUeG}c
zRBwPToQ7Y@Ohc!PxTXPLEIxF<8A;izS2~^IqT&;Z=Pw9&(fOV1K^;>#-wMVoRAheD
zIANPOwZZccE-X1(_;07Woi=NqJnZfg%?Q{ogxwD<(o<2;NHl*1Kp8R<ma(M#vq-9a
zaxEQRQ_>WFxwXtigPpV)S3RX^>gN8Ji?69f!n(~B!_U<Pv))Lgkris~VKZS~ZGz{2
zml+>Hj$$bbTY8n>qSim34%e9uWxw<0lDV^O>s8t(eY97C@GHxKbEgco-9F*{Tb5U)
z%sbqTf^#{j0|TohLLk3?n>GogFjP~Z_d40AWSA;x=fs=oGHJ3KzUnG4AY*|#E))=)
z7IPfrbj>m0`JR^#d(*sf6pIF9x^P*t!&L2lOg$@nGbWTM3E*3ct&9+|uO3w#TqVUS
z?d$-GEHB2HBVpBBhcSiptM1jTvy7Xl=C$ff(OvHhHSRgh(TvyPPH~vv^NjxM0z?Rw
zKX%aH6{j>B`a>W81mw=J%VHj`<eV9CJ|1xgh<4pA`yx5volbE+FnQ}9pJ;u&(l<3$
zlRNw^i-q`=WZS*M{^7t%PH*ydTh(+mtu0TQB`$qY_S!nJraLE8?_Uv!CYRdC2Spd3
z7&s3x7OArdlhf4I1FJF^AQ-vmhv(fa(}I4Z!snhC8EJ?_kJo`mD{EH#L&D%wEzEIz
z^6p6S#lzcQ#QXh$f5{85#yM0T0O&1wY$NfN2{Vi!v2i4cCRzej|4>#kH5l!|7sbtY
zyp*IeIHZqgYIK!`*PfE=yAELbS~?0R=%q5I${9-{9a&D{Tc*I(z>#Q_*>Q&3j#s9`
z66Hyj9!HQ=(^>&^>5y;^zbUxBK3+l7%|>Nwv7*#Piy{U}IpV>KRi#Owc0QszUBCA-
zaiE8A(xlJ`%eEoL)zp8rlFZG;3L{i=(JDqOm9J{S6loDyPZn5-t$8<bd43A}K4O^O
zN#_*F?6yyg4&;hLrKHjAiERZ+wL<Kw0N{q!PD;2}CXqw-ABc)UAWI#aWx49Q$aV)0
z>}P%oHujBvF}Y!bO`nTMAb~{uROEv;d9Xr9EsfPms_v5!d;8iJuL5{G&BF0jW-1U$
zR&Ocq(!r5{ZEr|PUe9sWO-#PTeWqR6g1nL#zFuV}lwI~_VQ%Um(;!ss5zw|+TZbcU
zA-Qbv|M|1+*%AUNq*su%%GXc2LrO)Y->aAL8CSy-3LNukgw6CaIuCGY**A24+w=bx
zw)dkuq*-XTKPjR%AE8x(#3B8?QjeppHg@%26qH6B6tP9)4CYs6WysX2N4n$V8WEYc
zn~vEH5#&`o@S`vH@;&LrVgX@RgO(cPJ1p76Dq(iDbm*h}*Ojw_p5OWMw*<ANS}CF=
zj-IXhSXPlMw|6l~FWr^&?d^-JcA2ZxdjbK=w_TotnU=X`g7#9z%=c2%5}BZP8OjXE
zJ6>eq{G&~dnF$f=Xm0K!21Bi-8JFUIA>gv@E_EOJUDoj^!VFVTv%vM+fGuQJHAf#!
vu?v}K3C(g&gKQUY6x>A7wM8A-N*aVx5ej^{DAXc#N#~@dbZ*-EF;t-?f_%`a

literal 2417
zcmV-%36AyvM@dveQdv+`0EBnfYTy$`H8~EIVlBN@1EB1t)KYdDLX8J=OM$o<%Mk;%
z`jqB)ex<QWum$xJ;7xGWGl~IS0`%eNf;S<=kzIAFOt|z@qs0bP=7Y#75vdqcs_oU3
zPRwHPMs!-G!z*$jk<>N>aiZsedvGD88z~C|?4%>BpLFjAKjS2|0GR|!s@|rjEUvf1
z@v)iTs2lND0&@X>k0TL$K;>lH``=U>;)u7~BT8JYN$l04W7Bi`(NLY?A1qvCnHTWi
zg#>HIn7kH^uO&(1HjU)yFSqo6Q^aS*1_L$k3=Nq2bm2^0xGq*KE(no-`1fCZuWoNH
z?P#WhH`Y{m5<#wQPqv;h0CO(lm0v;ZxOGtn^_6q2I0nI@*o2L#gC!ZnFw;efb5G`g
znW73>B)q-0;H-I!v2GUKE8Odr*D{VMff?9~V3z7wjr<*GQwhOeW|HVu>pc0PHs(ld
zk2x>O=4RRg5tUv;^$3@2j@J*+3Z}N$fn2=vFk;!w%=@ZH-7-NLT5vD=lf_A!2UU5<
zQSV>UF(iOJaj0f)cFAqD#_DO_lM-7rX`i>{od3i43khPbI#A+3^Z}}NY19Tg_dlFy
zacn=H8^ZGU_KfIFFJpxBuzJ_x`j37W``e{u|Bh9rJ)(nE7C8ViJzhgDJ&W{DMlU}h
zs@<aT@qLuB+X4IQMWX$+6x<C`$_Nv5MkhchwmGqb%E9HOpLEmO{KC6`DMtK&%gF9W
zrr{IyUW`o_wkitYY#_&vMtLmYLVf!s%5sX7&f9wLQJ2D^PF_=d;LK)FY*>X*DQ3G)
z_T6|ARf8EmkZvzl(K)DiZ_G;q3P9EU>LX^Q639vbRh<?n{5pVFVP+{kHeYhG&CH$<
z1APJfZD7kJ1md*5Psh|!$y+InG7wC`wf-SO--kT$DW9De-=W4hB7KG2$!fyMaoBRe
zS1DA$_w+XaJCPvrP(appU7`rQ&!vzkSdy7&9ETij6Xu!miaSz&6#CQ5RQ=tqHLTN&
zNgS_~ApRI`rhYlgp$Z`eJ8kUdxBNtZcn>ahbu(MNkz*!q6E9!55~U)c@D9KbqfBr<
z2q4=k8&`j4Q+v;{%Xds+Jz9+CXR}T6kA0%y7W(?}5}G_tE=w<;G)<fsK&DkpmAq9n
z`w3<Hzl+x4Rj^6UQq2swROk9Jdy++0$aK=!e+TsDYxZEBzsH)5DLxR#_GY*vwRENr
z-$rQf;IEfX_*b&m1Dbi<154m!EIHF&+`G-H+rB=_5TN4}w8#r2-{hJqq8Y(Vjgnj$
zB(nRUJnE+@F(S%hESbmyD~~i#0_46_RjmYu22Y-UMN2$^Y#kQ!HjBx5xwyyw3IH>E
zPpZa)(Qc50+S#<xKXLH4i=s7%WC!=G)`8N=#~{FnK?uK0W1Qb#Vtk%hiC*s`UxI=m
z#>B6%%XE)R_{fT(?DVkClBe}cbEp%6Qtk3Ne<EL1G@j0)HMEx%L)yzDtW%hh==ETY
zL!Csl=KxDVDy$=?nQFq~SL-UGKTBr$raKWTX9;1T6g>9oZxW$rBw<5DeP}6b<_PZP
zxGR7?kzzSn-X;j_-y(=SD{{)t4g|bL?Bx?g$zf*=#Vd8i!(xYMipvzAtAJrcxgC_W
zwIab<!^0fk^bUO70Zz_$_}q>R6y*F9f>9sxqr*YeKwD$xARDXYGkE%qs~Z6L0jl+E
zAOSKbC3UQ-!tUz=B_mv?)X<_C)sZ9jMAZ{;D&kJ+Sdqj4SHkrQ!AWGMabjPYBkY|o
z0mp=bV8s#lPa(eVa9Gt1!DvA?b?+?*xMCM)EnJPFHR98;!KYhdVf?ebZR#i}Og>UT
z9-><uIuZt(ymO6FC|rT%5ux4SDxM=Az2*NB8Y71zI(N=w-aeoHuZJ0xs>;lEV>NQi
zGO1vki7LEyL2Vu*R3Dz$i#3r=a0{fCZVrPh9dR)`g}VcOGr{ypsaB0%gq?ar4`ls6
zvkeBP;>U`)-o0XDO2C+gq9);zOkdobNrtMSh4e-$l=bFIGtZUkxF%Z1aX9*LyL9MU
zfjaX>#*)qMB>M>VZfUcQn^Pu=p3E*KY_umQ`pP-V6c~Qv+XXKjt#PJ8J1FOsjB2Li
z*<f($H#?Wrvgp<gX8Q4kj07o>SLEl(V?E|(bkCwRZe9YgC{fvpPdo?bk&Nw3j>Aw3
z+N6Ut{kHj&_>(Mw8hUVvO(B(fL_<PmarPhExI13`x@uO;nRB@Tyo4s($beixWs!y*
z0V7}LyH!aKpIaTY-3Kb;@d*E~3F$ZYut+7!TX<^dOho;gImp0c5!b0X#!cJaoWnnt
z8-nX~5ibxS8R?ZQedsEV09)HmklRO+NN)BU8__-@DyJ2UgB=$YQvp3fuhd2|f&@p*
z9BO=%Q-L}>?nD$*Vh;Q?a7OmaYDqeId^Q}dU6;I`>(u1*`)MjQpyvKe>g&)jVlgYB
zl~5?&UQ+^O|HD%PP>=z;B43Ra%a^LoD<6XGZd)|Ae1%^E0h<#X+}c%xoTH&U$^**#
zl_+1B?9sfKS0`{z@S}bOmx_Y<;VN>BQ{|&Z)y5bU`?PzOWxxi&pPXu99@SuaNjeg7
zda2=7!2dvtO-?nK&5GU4*UyHm(d&bIHltuIQ@}!jAK>@I?BQJRkx~T-pw9E~mQi3H
z_z|sc)YGEW-60`UY8r>8nbuBKpv#TM2BiQxE17b!PR@Jz<BSn1pJCF3_af#&Dd(ZN
zi4+zop_#&5#1N80AYp{NZl0N}7t1e`cq-mwewq}DA%XAJYvU(yxr0P3CGr4{aioZg
zm#~XT8-zzx>v>zkU+&7xhIC~hu~7%I1*7h>T`vRZ@N`rOP#~(>*^uD_s59Mqn7;v1
zkCGw>`UoYbi%ccRWOh$=Z{Pt)9F3DnI}SzG{#vp?=f*WMCJ41mfATU2RMd^Dnq|+2
zKRHn9OJ{4;<X0<4a3ufEvo~fec1!8oPWICmlKfHHA4y$%8IC|VSqEDX?`wjqY?C>L
zW!<$wTazn1NbLgoHA4$=>eAeTBi?Zju_`<xpTEQ9^^WJ(^cMBT{<@nw6f9bVqRvZ0
zyFJ=GBI<GEDW`m?#P0ca4$I)15uZ7Ut_fDEx|#z5{8enS!4zQX2^dAkRuE!VZm4Pu
j2nuowtILIlzSv{)k+CVeqL5h*4UD`<&*gq~6lNRYYR{v$

diff --git a/secrets/wireguard-asus-gl553vd-private.age b/secrets/wireguard-asus-gl553vd-private.age
index dcb8766edb83d67be44c9017fa5a2b6ef3fa6931..cfc6bc2e4e808bc6067d2712c014c347b1a3a110 100644
GIT binary patch
literal 1624
zcmV-e2B-M|M@dveQdv+`01zW%iv9dZnb>z>S<U?O8z-J_dTM-7*~XGMiQwN0(r&%v
z*KjfXfm}WmYcMODkz&+zDbaOBxc_1q%6d4&<WJr!qV0^Ia7j?Y>N*zS{VOFEkjpOZ
z`7_GmcPt6Or-G}6sr6qxK2tfN);S^f0=RTpVvUQ`>Wk$JkwF?0oi;HqAoY%Xwp$5>
zFn{*MLP%%QOIYa(h)Ek0pjT$qa~@&ediKPLv7~vs_#5vE(=J52ccMQgjMfKKf`4dd
z3W<s9h_X%q_tW?!L00HlNQ$C<=G`SU#B-`;s8ax6aIruR17SRQxQ_m9IaOnc7n@cG
zX$y3uc0|&q3U8l+BLYj*fRrm~k;5IQ(FLTrKSL`;mgJM8QU326=2q?kX9jGYL)^yy
z+B2S)s}7tZBV?LRqR@>`rR1Q03ZvaRyamHn4-n_7rZKT3<X*SM6qCXX+Yc4agy8o1
zAA&=rk2|h2p73mPWnGddPQ|j>ka)A8Z}uR-@z}Dx7%Npf!s?T1X8%)svyp1GAq+tY
zeM)dY2D>jaWMH^CjEbaN2sB?go~5c>^!$BnXR{#1F_At7jKOy5K|}T4`~YuyFu`*O
z=@Soft)K?b)QHq~5XT1TGV&n>*ye?`B_E$Ut+Jm=2kkN9MNByKi9kt2##@BMUnA^?
z-oytXquP32a?U<fKK!2mZ0aVkLSks_6cto257HaHHBQmi7eTZFyj5$IWr58ILLvF@
z1ANy{;+CY$T62F4j}Dr7xU25Q_G{;_6#pFy$vWrOnLf3+csW4?h%dSoQKFj~tvbAV
z<Bb+X68<@%jUIy*1cm=h2P3Xow^P|3-}48u!by!{+oxlU*Ad0qW_G0z!kFrDv(0uY
zV0x98*4-^GNlj?p#JfvELHWMwKby{AlYdwE^!V&6WMx<0mB#@(ru!dJrR|w24=#U4
zKQ0@Jjmz=MN?#yS*Rp+~)LjI_XM>lY6#gi>=5~CT3zWI@Hl|mN$j?M=bF1+_!Gafw
zV}^Ja;I1FfI<$Ji5or}K#kjKFSBc}YP4hqM|FpQh9xKz?W)@Ll-<$1YbC2Kw<H3Bo
z?_DTAM)N7ql+;K;EjK2z4p%52z2|p9%uZ12=KtjG!|jDu2_!TU@DEt%5mLOG8v!u^
z{Giw)#`HuJf8<5S;W)MC+CqIE#R*8FqXxg_Ed?TUhVk-ED}X^z#sM%pNM1rDe$ONJ
zdctaQyJ0e!F^Yin@^dv2Kk~ZI!*VCmv3)VFv*7`47PY0jhT}n^%s9KTdeX?6Bt!^S
zE3+JGKTMf~A`ahP&n5c_00wSgHQU0ofNc}OETsWGoU_+{ksMrCUuOX+Eb-Rd#L^td
zhN@Q79BtNq?(PlH?{XL~MNzg)*CA1K2Ee%h$9Bf}0{?#QGB^b?#42_n418m(PXh{J
zu}2WrE0u)lt=;RU!hU{@a(R9qA^Dlz>isecbgr12A#=Jgiy8J;>Z$KuW&LrHC>87R
zY6;oCX*>wAh1F<6s4~Ki$jw}9mE6-0&1dPhsb3;pk+u7NUjT(N(=!RXg6Y-RLL9+y
zPYsWvaI4S#DQ42d?xNw)WE-7q1~L(<>*N1BV#iWGhZ%<d^?7Vw3?FffXWHZZt95#=
z9?VpkEw9zC$-4TAMR2p#q<ahLp|oPeA_7<JWAN7^rwm}O1*`qteaEpSFWFA-NSo%P
z)HIG?QKAB+U~A^Je=^SKbQHMFKma91y)45m0I1}RbJc;;ui3p1WtSPZnk{YY$%Y_h
zeUJ^RCSaFvWtVYb8@Esz#wkCnT{ouaGpNv{xNz{i7=>jgDq3xsKh(EJf&ueWjRXxb
z^PVM$Utw&vX#qWk`?)g^ZS!6xT2~?lr&6!&u=bHW9bd>6w}7+rr*hu**bqJ&*{fh>
zTe~!YyKIFRJyyS$4F7G9(ywWFrT1*_!lZ`X{@0b&IrHFeCH$TSyycvk@T#V-#qif{
zOIKPIqWGkY#3NHq&Fu2*OeFGee8{MGXX5IRvDhpQexJUxhsSi+cyc%I7O#RJPu`|K
z;R6-9*jRfK)9b5kWPfqCDSE;6ZEF=BS71ZHm1jmO;AJ;P+$8Qcvd_ru8AD`I0)s52
W75O~J@aNFswY7SG#q4-<sS$4P>MJe)

literal 1607
zcmV-N2DteEM@dveQdv+`0O&jCkdDL3OgrB=-%E!5PSmrKJf4b#n{$VR7c<bhCSEh9
zh+LVDMqi}!&&hnH(AzG7Djr_w*bzH(`rMH`5+*VEpeHI2#;IW*wHDT?6x_s8-$yso
z(qLT$hHNVW@;}O7@Kh&Kj}HhXf+`JEI&c@{jk%KsgqQZ5fB~7y+X_btZ0?mH;X1NF
z_#=6Scvk#>B^$r^3SOqQVE#(E$4IZt#+O|j{6~)x7PTvEiJxXFlDZwOEJtGYNSt^7
z%660upSn4^+a;Way#bNY5kMn}CGC9Jd75J|lRFtEZ0~XgZaocA(xVMhNlXFS@yF-c
zvGH>`!CB3M3Tz0C=TN!~@*qo`=7?5%?*p5zg1zHl^=<iz#f&m(mbAVy%HHAs*Y-%X
z;ze}1s2p>vT?4FEK9-WOdoH8$X7bjE_p>Q7hTl#p7ms#{#@Qmr<x_g_Q;=hwa%;<u
zP8-H%?!Kyb|Gs}bvi-_h7l~T9K?rTu#}w1xn=rM!sj<~p(Y+Ia;mMSFnk;3*U2z#`
zE-%u!a?k-4K#_Y=mYFP?{tJ7%ksoRwf|}zN7?A~3NLj7_Y0g>eaYFWWlS>5UBHC^4
zT_=NYH;pYwr^r~)MHh)1SMX4CQOm||(H*p|;o|c6v{n9Vcn7W?m^;$Bf*9CSCcMX&
z6SR#~mG0Wr9A1DBI9)iA#Rc#H!<F=XlUB{FHhCs5K|HhSDZQ86(Lc*UkiI)~hk@Uq
zCog&ZSKSkN1ODt}RAYs#mi78OL~6zf0oD||GRD0AgsgS}zalqy#%J}n*Flql=4Z`c
ztM_BB4RxigFj<QXgO^qTKz{ajke*XvEQERcosIT3Lle#9=(s30%t0|;agt}`t|F~@
zzWdSl3(5ko>rvf{!@h<bThFL^F~q~zk&IzZ%Ggq}`qJF{!nXH9?XoETpaZBZ`^adL
zF~I}IF{s!DyQYm9sK2|=;8x?g)}5);K<;^+%l0t9TAlV>raV|`2d*apaBl2gM=n|H
z6iUbz<CB!_@VkDWKD2~cQU-ZE`qB`wGK%g#zv#4J)W1x}X_DP8!S!S51^!xxlsar<
zGAx`djGJ`r5G@;>=(FK{5|rZOFzXcp?Rx$6B=XiSuw=5IkJ*N;x5x_X2+IQ;wytWv
zL!Lv=DT9@KDS>`<cnMZQh#@lscS3-T3=>F|R4)-nip%E;$h@61UA*<t(yV#aDNQLW
znanD<Zw8etUlX3_{*xa%Rq$Vj$QG8lCIj8yFU%R$IQQ%0*)%o<;cd6JtM*Kn5AEhq
z@cSez2(({DGy|(ykeV~H-qPE+SqaK$Ui-&kB4h}2a|Ykn%+hncMqm-iB4OB@9*X0R
zW}Wc^)y;)#EhOrgsyhrMMu~!!?B-?tizA4t-KotWd1chxw(<L9H$B_Rs2v_3-{sSK
z3|U4c)QQ*=CW>f5piQOMx0cdUk<Uz_Xzb)j(Rm&dhZ^qg=Q&wAu&BvH1kSlkN!Aq-
z5?_$I7vuOu-T5SJk3wWCIh_p#y#Ap{FPZAzM_5>50_h(VZ$`#yWf0Hj?>}hZzm69B
zSjP>YgFh39j$K%5DDI0^PWRB<&5{YPMWSI%F3q8mJoj)JhKeeytme^Fd?J@8mN5eC
zqe*^mQtFC$G^lcgcRi9y9E=Nkco|h&d#g;i`Db^0#P7I;b6@g6X4vJuw_%gf9b5u7
z$czauaXu=78qm2*=G+xY;CDI?TUm=|N+tiaOPSY*mU+Ml#-7m<jT-mUDw12PA7{Y%
zfSh3ux~jg%f7fk)?t~4bK8-{&wjxtoXO6rNKC<Y4$(Ov@kB85ErIH&*+(r{HUO7bZ
zPF-;~vlwEcQPuzzG*~<y^;eJ@6gdXWXwEbICF%^HNget;dzo@UhztP{iMRe;1f}gw
zEet3fvV&`?bn*-b2mud_yp@^9r_Ye4@Jx{gjk=(F(h)ndAZUc&L{z#yWo<rN?l)mV
z$0t&iX_09ef_xYasPGA|^oZ}R<&BG|G$^i2RGCA`atJa;mLe4nlFm$tatA!a{`Ot@
zfDoA7aWeh)eGdnuIbq>B_mrT0Xwk#=*lF?V2+%=wep|ea)~`F*{{WyWHG}hP1V>J6
FpzI>^BrX5|

diff --git a/secrets/wireguard-canigou-private.age b/secrets/wireguard-canigou-private.age
index d8baa18e97cd90183de8ee4dba89cb2cff4f4a82..4f4fa7ed3d969b4732bc58fb53eacc0a713f3ead 100644
GIT binary patch
literal 1361
zcmV-X1+Mx4M@dveQdv+`01=MMTwf%K>1+pf=1KTvvB9%f#VbVn8U8%|)0(pcL1JYT
zW~nnJj#<%(+_i%a4T@1PJ!v$~W3nvhrI_b5l@SSAs$`dSCf4sArB0{~#s?*%kX~2&
znI7<#d3#J6TJ5bb<m>*2c9Xz&D}4g*m@M%*RomaZ7?jZU!H9NA1syl)$qk5k<-UlS
zW^rh+p5QzzYO9y2F_8ZF!w9XrThyv0NcvCO`YaL(t!9|RHD(9JA<qcfqYu)wLF}Q7
z)vZy3Dr(m=#IXw$rSCG|a^sLkG|ENHY5fF>0mH_Bc-+8mP*KWdDJTdeU~1_Z7x^el
zPy8M0YQjY8w;5Utd1L*7%S7_EYA8*4YCniXhx2=rd>$Mk&JT7)2`(z|Wr;m?b?R_d
z@_h4LSE(moyMEX!Wh!R;8wJxISk8|MtUnV5jC4wSN*|Yld;nohsu&lb*E<nhc_bjH
zw#jhfF#iTY_So*+sPMgJy(%3PzL;{=TFywFNm`-B0gfG9^Evc4t~dPWvJ%Md3M!Dt
z>%nM+EzeJhQbEiV@fAL?UZIj%b374^;`R%6cAPyK?HEiO$O|DDX(HP5ewj-JTnn12
zcq%+ThH0WzweNBJ6s70vzWpZN57iCQ<fe!<??i6rf1wJhW%f{QGuoAePoe*ujX}G}
z!_G|>nKAy}${?{G@$ib)CLSN=C~U4`ti+xE41GQ~+#c2d=}DHAvk(xjBE?t3S;GzI
zU@~dt--Uq$Q4SYB^x0u1TZHH6tol-T6%=xL3COu8-bFj(?6*T*^cxj7^>>(@1;C7-
zy8{vB-Kih~>@d@XTK@uDIo(#Ps}77f4y1pPpG?ImoUG=9SroI@>ur;ao{@@A1#5S?
z*~+SEfD%x|829~qmE*1b<(lgnb;%33P>pjrZm}ulK1%@?V<iapiu+xMoV13SxqJ`l
z4Yps$De#D?ct&Ph1woR|EdR4JLA{hOj-lEu@D<nPh3la*OdOB<uI{P)o(kL>oJRf8
z&^OGZQAn6KkGM4hfxj5tv8XaA*F+`U;(3=dU>lUBMuHB2dWSM=wY{4OM=%?V^J@{y
zq(lHgCZrs`q(XBwn8f=*n#3Reux34=FJm~MnHai@5YZw6!Nlp1A*>q?{uTU)UIS)5
zjs_A8OxLQh1UU~kcZyI&*W+ol@C!tR2y+P`Bw^j`E2*UlH`2`FfP)2jTatgDFH6?i
z?Og=uK6P%^h?Y~6<*4#r>&_j)ji0Bcu*XFU)zS{+r3R!_5WZ%L)$#50f(jw+yJ5wl
z><NR#oVGexMBM^e9<DbwadCG3YvYKkVUQH8j-I3Qw-8UQX&ZOX{@yw@;-d~&z{ZI2
zp-nq!j|~x99-tB?7v>gx*uHb*IUtn+RF0~rhi6^|bSac!QYM>#NZbDi)^6v<#90r|
zASyy_PXLEptPi$Lz`>-|_`?XPH3&orE?-;l&9*s`^1MHo1>fXI0fd&D-h#S<ICuNk
z-Taz@o@oWa(jRN>(1ru$DwGz4LTwHi@QyuDIE^Ak1?#j1Bh1z{q5@GK-*jERagYIj
zcyut2>$7*{*8FPRAv_<qhv-1r5}p?;=;V8@HAy?RnIvv?9cn*4qu+gF$h!AQEyKgp
zM;IKuL)iCR=EWW5=|!-J$@V|qG$I+v8I#ke$x!${j#(y~(1vMH(zm(3F;-M|b^mU<
z(^UqSu`?7SP7p=c+JZ20RYNdVce~PEyh96fI_|}g?NZQxe(2EYy2!J%JpqFIWHZu7
TR@Wc$N-lE?*KMY>3WU+OYxkPW

literal 1379
zcmV-p1)TZ-M@dveQdv+`0HQ*z;y;g*{WH}1)$=i>(AH`Y1|7phnQhl6y)>-wH}*MT
zqlV_EH=06Z6T#Ia+HLe^!D`Th`5kkOD`B36O1O~{7qHndg(H5AgYV^b0Q}D+fHYX{
z<S<^LVcb;IA6JO=I@%8nD2y&9k7d1^a#Qbh2Z*HQIRPik`iD(MS$jymt7xRuwy5ix
z$PR}pk`|D{X<>}&9E|-hc#r!%Fn#09k47%F?H7=ENus6<WB#Pu97XAJ<kca|%QxoI
zjPv{r3d?mmMYxLY@2=pf$N+v*KF6I^ZT{hnyf@B3_FbHsuR^kmHr*)ViO|mjL=B8s
z<0MO{1P=!iH%ampa66*o>UFT!yBk68+iILaZhe*^$B~ZFd$t`8xpoB6`q{?@en&Nn
zE?otB6TUT>@o4YxsV(u^l_!TlQu)S)Qg?etnuFhsJR)t=<%)R%HS2P@<!l`$c|k_c
zFN(<gpP}FY<h{iQwCG-<PJ*f24MB3Awkqk{t}uOEqG40X)Pjrn$u8|pwqC!vTE$_0
z0JH2^P5}Modh~cU@Y#ad3$hed1#53G?icE8B`${@xz_r{S~~(OOciZr2hyhHat)9v
z39G+FzBo4MnDI~EPfz?E{~OlQT>~d5Nd=tih)0wq0}M<86&xqRS<;YhZhd+u-8%A<
zz7{Y0U>YSga0De2ha||89}kblVhBRHr7*hL(a<M1Afg)QLt;2A9?JQUNEJ;ick<Je
zVjDZyiM@~QzFG1m#?uP|^|)KJ{576&1yU2?bG4h4jrToXjS8xLql<bbAIV-Ai`Pj6
z7yrf2R>x5+5s3+%X{UEuwmmGl%NXLhGQAB$mjz<k`v9WtR3g-EWr13E{)eA7e-Xne
z$Y!1w4S5g61cCUjNFrG_NWk}~C_uQj@Afq7ocRveGeYvJN!=qBKy_=e=#NLjvIyZz
zzg(`+@ccmO-sAmWwSR}ZWD32?>a{o3az{;_#3q+zQQI0?4HATE-v4RnVlA#YMjG7O
zI1oQO=Ohul%4jTBg-m<U9IxPE36umMRBZMqBVA)r85Km6r%i`RSHB+EHjMSdBv2GM
zk182*`)&+%d(Pc;1$+y3a~ey`_fDekP~t}6zgs07hA)M@c2UalT&O{BYHT*_K<-41
zYD3N4Yjfh%Dm=RYogKD>>Bm5_8%>-)FN!LL!#iQ{R@dI}q3yeWC0^+nCGs&_=~UA9
zC5cNKegG!+L`Qy>v3D?tS|v_RX%^l?yF~WxyQQ*M7c^MT<2mW|b@dCb?zKudk~Bqg
zu%uEUWZZR>qSgstBqYW*(f3~w0bho}Sr`B8URqd%gHA~CrbamWSLwZMzow;m!wIk}
zetFL#dfdYK1;3u%hk4d~E3!c@TS$6Zbo)+u%D5=$`)|8LpY-|@Mm{=p%QE#Uy*UT$
z{`6xx9*^E8q8x3u=)o;!=SGE4u=u(~+?2v}l9sHrek$qn4ee|>5xC0ceVa+}D`=EQ
z38VQg%MmduB|_cX=T`Pu<><MSerz?Hlf+nXc(r;yyXzwcfiF3YS|rQCT>kxh(w+gf
zIUWETxOtB~;Cd|Jhb;jfq||+=)QiRxynP)IA+@ZQ(pVM$EeJO=B>7Q##-4sUC?eq;
zuE6CCpr<TKV+PUXfvAdk6a#DJwd6H`$&}zQDRC8!@sp8aB1-g`=lWej^{ocpw?aD6
zDiBNa3vn1G+0fHT&1A}8#=BaAqZJ-%AZ4;h`p*NCsjqQc#=A5@Kjtqa6CRkFrGoH1
lt*iOg)HO<+@n6)5_S8pmP$LM5^{Pquk*irJsgOa9rpeSYsqp{+

diff --git a/secrets/wireguard-home-private.age b/secrets/wireguard-home-private.age
index f78a9d3f1664734b5087b56348c017d29f67e170..f01c0983a86b3799ef89dd8884dc4c0dc56cb9be 100644
GIT binary patch
literal 1552
zcmV+r2JiU*M@dveQdv+`02h^_xE{otWHe2kqWbk;cFv;;S#0260XFPL1Z{(MMnsVT
z&y#WJ%kHNEKIPM|7Uv$HX=Xr|O)e9u0~q1X-R^$Loqv8b`n>L^{_1fGD}FG|Fj%M+
zaF(T4>901;B|qU&G;fx{cb#Tr7j9{N4-V>z%Vx7#8KKDR6aNvWxjFcyz-{Ak_6TA3
zw`tKR@!)L?cIo<OhTnBBci-CPE9qP<e6C)TmY@Wr<!hqeylrf1#-hAd_zvGT$A=b0
z6(UQ{jk5i&zHj_%gS>HZ2+5dIJF;`Iu*x}24KwxU>5cDF<40>CkOs<9q<>*N`I%nT
z7U4UzM3s@H?9ey{299W;n(|0^!Iw;D`macYv<mWqNHOrz*M>VF9ikJ9$xqr#3=`%R
z-i6e8%8a)<CoKowyp<c`QY)pQn_T$PO!Wd+xUJjx2F7^c2tF7g(&?Wk<psIJnKq8g
zaE^>~l|@n9HXlZ5bmKDgyJga5?_mqBlX|Y%uw43O+={kGwqKY%637F?E<ubch~(#{
z#k2L_x|ydBM`)m<ul-7H;O2EYf)d(J$@P?yg3x3kz{>fBuc`<t`=@*CdcFv3^Wmy>
zkn?Sd@EU_?8TovE9InVx?S6)pDMHRSsbuVf=fWweO+M?d1;^&nr_D&w9E)?@ngSvw
zDbBDnD3Hw9hq8C(7P38>Eon5(a+jt;;2Dyw^>ol*AZ~`MgRY;zzL4py{ZS+a|IgQB
z09FJySP+ONmr%<|Z~=166ZwLrAbkj$pt=-o_1ZtcsaU|_Ieq_Qt;oeZ=!cj8D!s2p
zq19SS%hr&?19@?{1KFv(JvCF$H?fI7R@Gx^-048epd|S(`sH|>=m#54)YyARtWe9f
zD?dh1>b|t_jX=Zl=kH`Flt3de-L0j&xEA@-zf_#F^JAGP-@8C*g4+qRskQ~)PvZ^P
zoZe?|{pYy+<o{tH_27BZEE>$=h%%*%zRd|RK_<i@)dx4<51ASixzHWEb+_&tC`97d
ztP<MDN^z7Ht(-%-CygLJ^f+h1f1~+l)j%%2VU$Gewbe2se-AhFHtKN@4W?`BASxy#
z_tb;2R@b*(#lXBtf!j{Rq4`pEXN0-w)R;_BU4N|^M~09tqspUTrpiK(;{{eO<W~7>
zQ7JeJex=(5`<tbW$SnO|#&~zju_DIo7#b8eiOf>`AYseOvvXE0F2Qqj1P_3in>I!f
zq1_=|QaU~6YpVr^DA$g=w<E8(B~JzajSn02yDkqvLgsRt^aA1m+a;tw)%+PDe3*^n
zgOKD?(B#=gsKkbuB_Qv8cS!}3UXIY_0IM0|>PZCODh+u%jgI;uiJ(hK#+C{Mla~bK
zSiuEnj7jfGe<(G-A(*OVS4$<SJ39Z`IeavuWcu#G%WgnQB^vBcc=Y~`gW)Ap21wbL
z*4puT?zcq5(B{ZbrS<ctoga{q@h1{0UKxvzJH}n@AHJVXMz^I&S(>w+ND~vqy3iHd
z48OzyjMl$c$gSqBg!rwr!smM%QmANj*J2l~2iTW-waJs4A@vQC<-yK1v&!SV{dHYS
z@P7`UT^X7t7zZ-Y(^td=@Vc<}^8v6PKVA)=1Iw=p9K*txmf+85Odn47=-mrIiw2oS
zim@uxAmizC>QyN1x!t!Ezw@smC4b!3fwbN;k<5jU(ebmn-oTn)@!>hXN7P^pDGrxn
z%s{fYXVYeTiL`797SE`s%vjdy{9Mq+r$f30+VU)9i~_6EUP9UY*e|Ek`6fDl*1su9
z9eEhgBl#wNEI&2KMA^e^nK?=?rvFmZDm7WTi4Wh3(%v7gg5Ji4oMO*w<4o?o$_xR~
zfB3?I&YLchQriremxhc}!v54i?{81jNVXBKxKA6vb6$UCJJm6ReI>~OU<{f6E%7;^
zBy)9BxlU8nk%H`Ku5$qk`~6rwuZXJ@1+vD(#dUsj?qxH2l*P2&a9>3PszAiA9oZhb
z$76=t9)#0*e)STKrwq;R7$rx-lS7=wa9m+7OgmK4lCH!j<aJq{V$}-QBc+Zww5Y<1
C>?Lvl

literal 1524
zcmV<Q1q=EBM@dveQdv+`09Cr}j=X5v6&P|6E6sQd0$V%RaevR$XzT-F_aUHcZ5rp)
zI?k~Ucivy3In=XBDr4BMiQ%p9rFgiN?w|bE!?WOHq$AXFeStGVd>C9U{QO$COY3k}
z;15!WC<~zmVg*d&c|ENaj;0-vz0yceF8l>{Zz=de!@^-f#5f9ftWXe|K;)6rNTsj%
zie3=UmhnZQ!^a!3%!>)5Nl~rTRu@?5*^6(F9?FQ1yIg_l>-JvMj1FDTvT&oJDZ?}E
zQsZ-|kfJk|E0HoG_xQw>y%AP}Rh&xHB@&)ZxYv=veSEf`PkM=y_(Hm^L7pj%M>_+%
z);x>8CQP}>{(bC-1nNb(Q=5Eo=PjRL-T6BF>YPC5U#89(W*83BT+39>rL9?Z0Yt*z
zT54wGvH<T6I)fuG_MBf^fMH7vh0LZwM!P|3zx48&r||EHk8!s>(N3=2-|C})|E&^>
zY>%q<l8i&hI9eX<Xy0Rg?@NpbZK1_N?7{i+ZowL1rRl!*;Gliy+p}qQsiEqc*gSc<
z{F_ip@g(0Ma~`sjN4xoFG^3`Ds2XFV6U!7hR~cIK%g;(g_+B<+FveE_%ACff2J6Gf
zSK>$Ijmd;#6+m!cS+oM()RISH0Kg}|0K>`u7zcWZVD#kPH}YDKcy`6r7^E&eWwl-;
zAGVk|vr`*I09}a`taft(xDU?#OF7`ggz<}e#X??@HhWjT(sm7txW)Jfs(oTHCz05f
za@@rkv5t!=UV`g9s0gMeJ~J7Wfd5C!Z(z7fdF1_=?V}NB74^=-ruLa0SnHUmD*dIO
zPk`12YIkg*mQ$mX2n7(bCf_3k>gZ<6uMj{h4E2h;YqItUQ#{RBja3f@th|)Z4;cjB
z^<-*O>FMvCYvt9>-szZ(!(E+ENxLh?-Z>|=4LDa;d!<F3uX_d_#)Dx!JUp}O0J``d
zQ-B7wh}#<n;i0MCXd#~Sy`5NGVoS)2ko1(;{Vuj?Zs$oahVdStO5N<=upq+-O)909
zxns(GxM)oRJ;KHJW0R<QO$`v%9itG5&~@`VS?l`7HmQ-BEOMr`!i#g^p%ejU5=NZ2
zW)UeU4EZ)rM)-qv7Zn}aq%l<%RJWY)2QII96+TNS#7~g&WXF=kq&>qP7wrc81D^Oz
zt_imhLunjtRUDYd3`MHV{AIM`+Mg_QWandJ3C`534hc06FihfiDO-AtSd;e2Upa@V
zd*K}G>sTD3MY4&GJS)RqtIq}R7Vh^vxSZ<0eO{QC;^abn<}6;wWj}yL`TJgSW{myp
zNO6z4-KkJZO6?2_;;^V)09tD5&o=M>kK4AmDy&p-5CaI_jY(WJjS^Fv1Jbngi7Fb*
zW5#5l<()kKaeskM`g4}WYd5@EsDyFvK0y2K28CflvIiOb;Vt%u1TQ)5wGX-PB;JkL
zf$Zj5P589bV=@g|V#t(gT8Yw7UD^l47=R4^1pA|3P6EMC9@xKYWSS-$e>U7YK%LNW
zCC`=L$6eM%^SDJZGgqJ?CCqX;q3pzO>##F$u(;Mt`XWZ+6BorQf*cnOJ$A3F;HObc
zH!ndnlw9JraNUdg8%QIfR(0JAAN6X`Nv~+QC_X{FQ3^t$RdZ@4)|a_1)7<G@Y2^D^
zR7dv7kME;>j{@}TAG=MG@~$c5)CEW;!SDEZf}W)tfdBX|x6V{+qwTddu=kPKd_7M#
zJk~4a)?pNrw4eTb+1SF8lTpfk8d^^wQKIuVCE$n|oS3<~y{axVtpRRnM7w-SAm#9T
z%H$1WtfV)8z$$WfUe+sJ3mc5JxF0X(5mcH#Zj!S@;JNV9OF6bfz<g8`o@FTB<9ywU
zBu@=t+-X^u0mCENVuik^QN=(prcg^+;H?D={4^YPO<(K@UxfErju52zTkk1ynKjNl
z*^fTEPBg`Z2_@|z8`&fE-6iLhw7-&j^4~uhDWW1Jwt_ntZ<H#WRWPBxLuf+;%yg&k
a+|#{h!O&=6{maO_AQ7QjqSvAgAUk2=b^?3=

diff --git a/secrets/woodpecker-common-env.age b/secrets/woodpecker-common-env.age
new file mode 100644
index 0000000000000000000000000000000000000000..4d6dac5a425a917dcca1adacf2214d0bb1209617
GIT binary patch
literal 1433
zcmV;K1!npHM@dveQdv+`00E7~=usp<L$7EGTBM-+O!vHnIZ$jHpxUuTC)2??hvwR@
z)Vtvo<fL0JG<W<Eb4LcKo!<k5%mfclmn6vI_9^YSc9vieIj)2cs)BJ<P9B&)yRymd
zSMlOVPG<pc%9L7Wv8Fm&Fms3Tk2)BVO+lp$g4YFp4aly3REcJ?gKDbj7J1YvH@a-&
zV$N5Tir#c@P;^HLCeL!4p@HCw?U}wVryu*Y#Z|fPAYmov#CBZk9#yKY50qx%4;&fk
zq%4Z{L!o^I+}xUxcwQ9;&HsdDWE~ja_)zCqO@ZfqlolfruPz89XFE^DksKNfuJn63
z(d_N5jeU}GgpFI=gCLE@?TgsVl3F0>?j6C})1ah{HGJ|jnphIcVUi(vo$PG!=flcc
z7OHrfg~K}eh%A8uK!mrA{eirKMhP4EV}r;?eor(3dhTdlnsgN>UbG)_9yI2gKZ?}a
z%A0VX*G+pJQZ(F)k44(B(D->eJ8%+%Z(@iysTFJ&4G(5P3!~mFrMg#`&2_LiBq4L=
zZZWa1^+Cjw#6R6A3(N-t_bHjIturRir{Tr0Bo&8k^^EuPbyd?UEYuXg`uc+scddAy
z?lELp<E3gkRv~+st@*Wzj)>tN|Ip$Ozq;>(R@JD5bt(xm-Lu(1YV7>n>{aJzDvjlF
z{FIfIa5mYxAQs5;hV^@TBEXwVd>RmEF-dUkN~3$~Fe=oYMM6g;?&k=@R!zhjdz+>b
zF65;j!W050EH6HsoF*t>CdA|-IFD|y)o%TEtZbuGAw+j1na;<$!Zd8fR?{qN=9Zl7
zUIuW;{yc@p1v;0~lT9Zn9@I%2NOcIl;HI0ys2=sJ4aVWo*uZftx=f)JPoZFpqhj<g
zsbXaT^OcO>$@sOPe$LdzPk4v&4eQP*zVCy}Vccj7c3;$e?1UwYhZ>LA!oNaaN6#tL
zaP)gg1|*eL3Y}X^Yj@0yb-dG}-UW-3fgSZFTiFR<gn(fZl4Be4Rux_LJ72cI{PBZ9
zSI?;ymlUaJlx=|4Ny@h-UQQ#LT=A7P>vG+zoU9j+Zl(|ypU=fqqDk%Nl;GPiknAGl
zz#~m&p~v;}Myd#QFA+)#t@pyyjrA(u1o{IcW-y`}JRTaYk1v(ZC@<P?D-jy}44h<)
zLT;HPfvSQpg!xesmIE>@4w~Z&GlV^HM{u(WBY-WTQ*cEX`JeokU_mGH%ucpW)4Rv>
znv&24zy`1TDZVGUlu?yfJ>VT7#~{i|>wS4=rSzI`^M`gJTwxC8q(4N_hrB`^@XrmK
z-voXc$HMj+9$!o%?ZP|VgQ6R(A>0I~{3q%iw{zMO8s#-a&x`oN^C43>X^J>ZsCoyN
zZ^Kbfu0vx_@+PV?C%f)|b&s{(FB20^%c_<<vtp;`_VK5n0*7a~4!S+<c=gH_Ug|se
z<8sb-veUUy2t~8Y6zWp)(TA)h<@}%BtE5PsY^#;$7rupu1lrdg(2x}JueMF|3Apk2
z3#=Gw<FE|w=z-B3RO!sTRUWF?>fMS=cYTHeXS8Bu^aXVT;(^vTGYLQE($QCu+YqPx
zjfppaF>{EU_2R23la8`w3?G6aM#l5*SC3RVO8Z6FlDWeOrW?%(ubmRCdtrWAgGJX{
z8^HtA!18EiR?~o*ob3_9s{*z8$u^32g|5?#6?V>RzKI4T;1m!4VwQZYuAiJ(vE_8D
zuqc~>FMXI2f_x0L0vo&%Ixw>%Kc9mc_;~X8W_U0Hm3_%J6XK>YkO5NLk50*s{}D2K
zl0429y~OsoeKO68FrW`&gYNK^9QyNFL)J}vT!En0jihyI?H_ouGZq7pZ<_xw55g=4
n+<XY4#$?Ox0H6zc*jHyJk*ebG{<3FY<R>P?V2gz!^`U9i%7M;m

literal 0
HcmV?d00001

diff --git a/secrets/woodpecker-server-env.age b/secrets/woodpecker-server-env.age
new file mode 100644
index 0000000000000000000000000000000000000000..944285b8c093823211f5a00640728bc8e857c819
GIT binary patch
literal 1544
zcmV+j2KV^@M@dveQdv+`03uJr0G>qR`z?iYVxX{-bpe_gyv^@akn*zi(vB|F2uVdV
z8L|H0l@(RiLlABI2IV$cHcW8d6_nM@uAobeN=SwIQzBsCoXbqmB7=}(L|c$KaQcGR
z7RPC0a@jykb4s++XTyhYdTnhRaK-VC=y-Ep0phHc<CpcB%6S|2A|mMYM87aoF*GK3
zEy7pYGiVeeNLIX8k8bFyNJT_e`}5AGh!2GONv{M_%&Ipr?s_a<kE~W8<&IXc3^KmL
z&M?lvQ7oUG=~1N>`|>78I3Z$&f=nAyipHTT?>7YXRx6XuO8D;kQD@AAw{u7j4Hj{J
zwb&p20bohk47EQNnX8DI`L(y`!wb+<SZi#dDl`<jcc__t_G<>{-i|+UrCDeCznosr
z-1xF{6%RhQ3^B5i6!8#x($2JPA;RQ2xe({V>j)Tyr%{Y)G`*_bgrYZ~^S%0<3*5@s
zpPc=3JKX#n(<7vBYrrj~ABAxk{7dLT{>evG#D>1@jo3`7Xp64PAnu3$#ueMrUPEpL
zuu(Xs;CPF)*G0|G`?_8K_!cWAMh%E{8kw1Dz7dhPzJ5<7d>XU-p*&lp#Y8)^zz6==
z%|9be@k-84>aWhQg1Ro9+(;tIy{U$4X}!;{JYxVu{$gK4;Sz8uR=5(fZBUU!E1}Nb
ze8{Sp+%(@haf8=NoDqmj!rbK=F!5j~r@A6NA)T!>$S{@_1MPG27OA-g0r|1FK@Cu4
zONwEu&{TkXj~irq2(I9Y@XW5Y4*xymjLch@3)UDT3X+FYo(p1>g^7d8r?~=CdX#9#
zxXcG}CUwKLazsF8;qP%E_5`rBRKpUqFL8d1+(P#_wBC<dGJfHbhu`>-G;jW5p~~jv
zOgp>FAGrs>1RU%C!;ohGxrJ4?#(3@LAmI$^-fb)jJR;E(#QJ)uwc(=&0Oy&GK)gF0
zb@*O)@<llw3J_;^&pPx1stk14K*_r0*KlR~A&-C|w~O!N(I{e<)I`+bOAm@=Jd2A!
z@5cc-=)n2D0hW7I(KQ*|v`L2Q^#m?haNzmvi>Eai*WP5Eu%P85tqRn=^Fq$rR}NnJ
zA6m)>`qgLd7oEwnXm%1F8#=&m@q6!O4n{tV$+CQ_LiWG#GYG2qk34I*h^v#^Heu*L
zHf))pyqG)dP|_VAX|tl`ZhxI$gDb0Q5%n4BY(&i6lQkVte$Ru+&(eaqJ>sD1U!t6|
zim`YYOb&vLpm?V#uIWALn>G26hhMQa)9=P%Pa{|+f*z+Nt&GdyXi}ZfTm3X`ppv}t
zOqCc>_h^Z7+<VWzM@;j^%XyeyJda(d4!@}B*Yc9R!1atq3E7I%=w<}@tcRMaF-6&q
zWY#uxds+8i+UMcDyex~wWkW|jCo6}DoR=o({~oR0mM|U$s=dcawo|<R=u7l`sK>A@
z&zDdfEd@;HUp1B-Fnm!VL?T*du)Y-6nE`nAMV}|$>P}37UyU$Sk9#dXUye7^EZmq8
z_cp)`1Iy4Ud~lj@&>{V~SoDLF)&oruCZ)uPBf>d`YdN7shDU}L`5lve2bt9rR2Vv5
z9%b*Nf|5E!Y5=cB>K5mA$VF(<-+x{anyx)Z1VPiFkEfoY7xYfPiKOSe$@DK!ilkj6
z@^^d+*YX?Yt&oI<I}cnww{Z#WSP@E3TA?k9d?Mc>mA~TJ?b6bqxLv;JogS?BG{4&?
zVjEfomBX`NklliyhNS$dY>{)w?F=uJS1U7rh$_Y|MnTG!V(2X^>y+ny)cF`>72A7>
z-lO%`x>umz@SB$j!AuTLisv09*oFo;9KL3$g}YC?yQ5@#l&fV#zrz~IAl*C)ql1v)
zT1Pf36Zx|^OI3khDzp&rqT(g5``h>T1Ck840>2+Vk+@~04wbbYMN1=Esj`W0*?7BQ
zb;@|D)>kuGAKsVbv5%|&9zF8PV=Z$hoCQaa7iC&@z0Z1z-dZoeiP`O9d#m*%x4Atm
uqMA`3{_;71sRiZ(I?<BE^7QdX5hvnW#d*YLvHV_PGZpMU(?@WYHiN1z^%MyJ

literal 0
HcmV?d00001