WIP: Adding a script for xray users

2024-10-11 14:05:12 +02:00
177 changed files with 3263 additions and 4153 deletions
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@ -7,25 +7,10 @@ repos:
    rev: v0.13.0
    hooks:
      - id: yamlfmt
-        exclude: |
-          (?x)^(
-            .*secrets.*yaml
-          )$
-          #  - repo: https://github.com/codespell-project/codespell
-          #    rev: v2.2.4
-          #    hooks:
-          #      - id: codespell
+        exclude: '^charts/|^secrets.*'
  - repo: local
    hooks:
      - id: check-sops-secrets
-        name: check sops secrets
+        name: check-sops-secrets
        entry: ./scripts/sops_check.sh
        language: script
-        #      - name: check unused values (disable by setting DISABLE_ADDITIONAL_CHECKS=1)
-        #        id: check-unused-values
-        #        entry: ./scripts/find_unused_values.sh
-        #        language: script
-        #      - name: lint helmfiles (it might take a while, disable by setting DISABLE_ADDITIONAL_CHECKS=1)
-        #        id: lint-all-envs
-        #        entry: ./scripts/lint_all_envs.sh
-        #        language: script
--- a/.sops.yaml
+++ b/.sops.yaml
@ -1,9 +1,14 @@
 creation_rules:
-  - path_regex: values/.*/secrets.server-xray-public./*
+  - path_regex: values/.*/secrets.server-xray-public.yaml*
    key_groups:
      - age:
          - age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
          - age17fyzv5mezck364lvyepp9pa3tnjn7jvsgcpykhhz2smnxyq6fdusvl7waf
+  - path_regex: values/.*/secrets.minecraft.yaml
+    key_groups:
+      - age:
+          - age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          - age1fwhu5m8df98kk2ldf36z24t9vfcz3875fd3uzecke0yv2qqts9dse0jqrn
  - path_regex: values/.*/secrets.*
    key_groups:
      - age:
--- a/.yamlfmt
+++ b/.yamlfmt
@ -1,2 +0,0 @@
-formatter:
-  retain_line_breaks_single: true
--- a/README.md
+++ b/README.md
@ -1,9 +0,0 @@
-<<<<<<< Updated upstream
-k8s-deployemnt
-=======
-# Helmfile deployments for Bad Houseplants
-
-## Project structure
-
-
->>>>>>> Stashed changes
--- a/charts/roles/templates/sa.yaml
+++ b/charts/roles/templates/sa.yaml
@ -1,5 +1,5 @@
 {{- if .Values.sa }}
-{{- range $sa := .Values.sa }}
+{{- range $sa := .Values.roles }}
 ---
 apiVersion: v1
 kind: ServiceAccount
--- a/charts/tf-ocloud/.helmignore
+++ b/charts/tf-ocloud/.helmignore
@ -1,23 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*.orig
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/
--- a/charts/tf-ocloud/Chart.lock
+++ b/charts/tf-ocloud/Chart.lock
@ -1,6 +0,0 @@
-dependencies:
- name: helm-library
-  repository: oci://ghcr.io/allanger/allangers-helm-library
-  version: 0.1.4
-digest: sha256:6306a6a8d3c51b2b5f37cffa88c3731550da789d1ce2317a83a3f9a657310f8e
-generated: "2024-10-16T20:01:59.337767+02:00"
--- a/charts/tf-ocloud/Chart.yaml
+++ b/charts/tf-ocloud/Chart.yaml
@ -1,15 +0,0 @@
-apiVersion: v2
-name: tf-ocloud
-type: application
-version: 0.1.0
-appVersion: 0.1.5
-maintainers:
-  - name: allanger
-    email: allanger@zohomail.com
-    url: https://badhouseplants.net
-dependencies:
-  - name: helm-library
-    version: 0.1.5
-    repository: oci://ghcr.io/allanger/allangers-helm-library
-annotations:
-  allowed_workload_kinds: "Deployment"
--- a/charts/tf-ocloud/charts/helm-library-0.1.4.tgz
+++ b/charts/tf-ocloud/charts/helm-library-0.1.4.tgz
--- a/charts/tf-ocloud/templates/install.yaml
+++ b/charts/tf-ocloud/templates/install.yaml
@ -1,3 +0,0 @@
-{{ include "lib.component.workload" . }}
-{{ include "lib.component.files" . }}
-{{ include "lib.component.env" . }}
--- a/charts/tf-ocloud/values.yaml
+++ b/charts/tf-ocloud/values.yaml
@ -1,67 +0,0 @@
---
-workload:
-  kind: Deployment
-  strategy:
-    type: RollingUpdate
-  securityContext: {}
-  containers:
-    tf:
-      securityContext: {}
-      image:
-        registry: zot.badhouseplants.net
-        repository: badhouseplants/terraform-ocloud
-        tag: 7eae6ec805bc99618a196abf9d4d2e0fd19f75e6
-        pullPolicy: Always
-      envFrom:
-        - main
-      mounts:
-        files:
-          ocloudkey:
-            path: /src/key.pem
-            subPath: key.pem
-          publickey:
-            path: /src/public_key
-            subPath: public-key
-          privatekey:
-            path: /src/ssh_key
-            subPath: ssh-key
-          tfvars:
-            path: /src/terraform.tfvars
-            subPath: terraform.tfvars
-        extraVolumes:
-          dottf:
-            path: /src/.terraform
-
-extraVolumes:
-  dottf:
-    emptyDir: {}
-
-files:
-  ocloudkey:
-    enabled: true
-    sensitive: false
-    remove: []
-    entries:
-      key.pem:
-        data: dummy
-  publickey:
-    enabled: true
-    sensitive: false
-    remove: []
-    entries:
-      public-key:
-        data: dummy
-  privatekey:
-    enabled: true
-    sensitive: false
-    remove: []
-    entries:
-      ssh-key:
-        data: dummy
-  tfvars:
-    enabled: true
-    sensitive: false
-    remove: []
-    entries:
-      terraform.tfvars:
-        data: dummy
--- a/common/environments.yaml
+++ b/common/environments.yaml
@ -2,31 +2,15 @@ environments:
  badhouseplants:
    kubeContext: badhouseplants
    values:
-      - base:
-          enabled: true
      - velero:
          enabled: true
      - workload:
          enabled: true
      - backups:
          enabled: false
-      - localpath:
-          enabled: false
-      - openebs:
-          enabled: true
-      - postgres17:
-          enabled: true
-      - postgres16:
-          enabled: true
-      - redis:
-          enabled: true
-      - istio:
-          enabled: true
  etersoft:
    kubeContext: etersoft
    values:
-      - base:
-          enabled: true
      - velero:
          enabled: false
      - workload:
@ -35,59 +19,3 @@ environments:
          enabled: true
      - openebs:
          enabled: false
-      - localpath:
-          enabled: true
-      - postgres17:
-          enabled: false
-      - redis:
-          enabled: false
-      - postgres16:
-          enabled: true
-      - istio:
-          enabled: false
-  xray-1:
-    kubeContext: xray-1
-    values:
-      - base:
-          enabled: false
-      - velero:
-          enabled: false
-      - workload:
-          enabled: false
-      - backups:
-          enabled: false
-      - openebs:
-          enabled: false
-      - localpath:
-          enabled: false
-      - postgres17:
-          enabled: false
-      - redis:
-          enabled: false
-      - postgres16:
-          enabled: false
-      - istio:
-          enabled: false
-  xray-2:
-    kubeContext: xray-2
-    values:
-      - base:
-          enabled: false
-      - velero:
-          enabled: false
-      - workload:
-          enabled: false
-      - backups:
-          enabled: false
-      - openebs:
-          enabled: false
-      - localpath:
-          enabled: false
-      - postgres17:
-          enabled: false
-      - redis:
-          enabled: false
-      - postgres16:
-          enabled: false
-      - istio:
-          enabled: false
--- a/common/extensions/metallb.yaml
+++ b/common/extensions/metallb.yaml
@ -1,14 +0,0 @@
-metallb:
-  templates:
-    - |
-      {{ range .Values.ippools }}
-      ---
-      apiVersion: metallb.io/v1beta1
-      kind: IPAddressPool
-      metadata:
-        name: {{ .name }}
-      spec:
-        addresses:
-        - {{ .addresses }}
-      {{ end }}
-
--- a/common/extensions/self-signed-cert.yaml
+++ b/common/extensions/self-signed-cert.yaml
@ -1,13 +0,0 @@
-ext-self-signed-cert:
-  templates:
-    - |
-      ---
-      apiVersion: v1
-      kind: Secret
-      metadata:
-        name: {{ .Values.name }}
-      data:
-        {{- $ca := genCA .Values.domain 365 -}}
-        {{- $cert := genSignedCert .Values.domain nil (list .Values.domain ) 365 $ca }}
-        tls.crt: {{ $cert.Cert | b64enc }}
-        tls.key: {{ $cert.Key | b64enc }}
--- a/common/extensions/values.certificate.yaml
+++ b/common/extensions/values.certificate.yaml
@ -1,19 +0,0 @@
-certificate:
-  templates:
-    - |
-      {{ range .Values.certificate }}
-      ---
-      apiVersion: cert-manager.io/v1
-      kind: Certificate
-      metadata:
-        name: {{ .name }}
-      spec:
-        dnsNames:
-          {{- range .dnsNames }}
-          - {{ . | quote }}
-          {{- end }}
-        issuerRef:
-          kind: {{ .issuer.kind }}
-          name: {{ .issuer.name }}
-        secretName: {{ .secretName }}
-        {{ end }}
--- a/common/extensions/values.istio-gateway.yaml
+++ b/common/extensions/values.istio-gateway.yaml
@ -1,15 +0,0 @@
-istio-gateway:
-  templates:
-    - |
-      {{ range .Values.gateways }}
-      ---
-      apiVersion: networking.istio.io/v1beta1
-      kind: Gateway
-      metadata:
-        name: {{ .name }}
-      spec:
-        selector:
-          istio: ingressgateway
-        servers:
-      {{ toYaml .servers | indent 4 }}
-      {{ end }}
--- a/common/templates.yaml
+++ b/common/templates.yaml
@ -37,12 +37,6 @@ templates:
  default-env-secrets:
    secrets:
      - '{{ requiredEnv "PWD" }}/values/{{ .Environment.Name }}/secrets.{{ `{{ .Release.Name }}` }}.yaml'
-  env-values:
-    values:
-      - '{{ requiredEnv "PWD" }}/values/{{ .Environment.Name }}/{{ `{{ .Release.Namespace }}` }}/{{ `{{ .Release.Name }}` }}/values.yaml'
-  env-secrets:
-    secrets:
-      - '{{ requiredEnv "PWD" }}/values/{{ .Environment.Name }}/{{ `{{ .Release.Namespace }}` }}/{{ `{{ .Release.Name }}` }}/secrets.yaml'
  # ----------------------------
  # -- Extensions
  # ----------------------------
@ -94,7 +88,7 @@ templates:
        version: 2.0.0
        alias: metallb
    values:
-      - '{{ requiredEnv "PWD" }}/common/extensions/metallb.yaml'
+      - '{{ requiredEnv "PWD" }}/values/common/values.metallb.yaml'
  service-monitor:
    dependencies:
      - chart: bedag/raw
@ -124,17 +118,3 @@ templates:
        alias: ext-secret
    values:
      - '{{ requiredEnv "PWD" }}/values/common/values.secret.yaml'
-  ext-cilium:
-    dependencies:
-      - chart: bedag/raw
-        version: 2.0.0
-        alias: ext-cilium
-    values:
-      - '{{ requiredEnv "PWD" }}/values/common/values.ext-cilium.yaml'
-  ext-self-signed-cert:
-    dependencies:
-      - chart: bedag/raw
-        version: 2.0.0
-        alias: ext-self-signed-cert
-    values:
-      - '{{ requiredEnv "PWD" }}/common/extensions/self-signed-cert.yaml'
--- a/common/values/values.badhouseplants.yaml
+++ b/common/values/values.badhouseplants.yaml
@ -1,4 +0,0 @@
-namespaces:
-  kubeSystem: kube-system
-  kubePublic: kube-public
-  
--- a/common/values/values.general.yaml
+++ b/common/values/values.general.yaml
@ -1,5 +0,0 @@
-namespaces:
-  kubePublic: kube-public
-  kubeSystem: kube-system
-  traefikSystem: traefik-system
-
--- a/helmfile.yaml
+++ b/helmfile.yaml
@ -7,5 +7,5 @@ helmfiles:
  - ./installations/platform/
  - ./installations/pipelines/
  - ./installations/monitoring/
-  - ./installations/applications/helmfile-{{ .Environment.Name }}.yaml
+  - ./installations/applications/
  - ./installations/games/
--- a/installations/applications/helmfile-badhouseplants.yaml
+++ b/installations/applications/helmfile-badhouseplants.yaml
@ -1,99 +0,0 @@
-bases:
-  - ../../common/environments.yaml
-  - ../../common/templates.yaml
-
-repositories:
-  - name: gitea
-    url: https://dl.gitea.io/charts/
-  - name: allangers-charts
-    url: ghcr.io/allanger/allangers-charts
-    oci: true
-  - name: badhouseplants-helm
-    url: git+https://gitea.badhouseplants.net/badhouseplants/badhouseplants-helm@charts?ref=main
-  - name: bedag
-    url: https://bedag.github.io/helm-charts/
-  - name: open-strike
-    url: git+https://gitea.badhouseplants.net/badhouseplants/open-strike-2.git@helm?ref=main
-
-releases:
-  - name: gitea
-    chart: gitea/gitea
-    version: 10.6.0
-    namespace: applications
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
-      - template: ext-database
-      - template: ext-tcp-routes
-
-  - name: app-vaultwarden
-    chart: allangers-charts/vaultwarden
-    version: 3.0.0
-    namespace: org-badhouseplants
-    inherit:
-      - template: env-values
-      - template: env-secrets
-
-  - name: app-stalwart
-    chart: allangers-charts/stalwart
-    version: 1.0.1
-    namespace: org-badhouseplants
-    inherit:
-      - template: env-values
-      - template: env-secrets
-
-  - name: navidrome
-    chart: allangers-charts/navidrome
-    namespace: applications
-    version: 0.2.0
-    inherit:
-      - template: default-env-values
-      - template: ext-traefik-middleware
-
-  - name: navidrome-private
-    chart: allangers-charts/navidrome
-    namespace: applications
-    version: 0.2.0
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
-
-  - name: server-xray-public
-    chart: allangers-charts/server-xray
-    namespace: public-xray
-    version: 0.5.0
-    inherit:
-      - template: default-env-secrets
-      - template: default-env-values
-      - template: ext-tcp-routes
-      - template: ext-cilium
-      - template: ext-certificate
-
-  - name: server-xray-public-edge
-    chart: allangers-charts/server-xray
-    installed: true
-    namespace: public-xray
-    version: 0.5.0
-    inherit:
-      - template: default-env-secrets
-      - template: default-env-values
-      - template: ext-tcp-routes
-      - template: ext-cilium
-      - template: ext-certificate
-
-  - name: memos
-    chart: allangers-charts/memos
-    version: 0.1.0
-    namespace: applications
-    inherit:
-      - template: default-env-values
-      - template: ext-database
-
-  - name: badhouseplants-net
-    chart: badhouseplants-helm/badhouseplants-net
-    namespace: production
-    values:
-      - deployAnnotations:
-          keel.sh/policy: force
-          keel.sh/trigger: poll
-          keel.sh/initContainers: 'true'
--- a/installations/applications/helmfile-etersoft.yaml
+++ b/installations/applications/helmfile-etersoft.yaml
@ -1,68 +0,0 @@
-bases:
-  - ../../common/environments.yaml
-  - ../../common/templates.yaml
-repositories:
-  - name: allangers-charts
-    url: ghcr.io/allanger/allangers-charts
-    oci: true
-  - name: gabe565
-    url: ghcr.io/gabe565/charts
-    oci: true
-  - name: xray-docs
-    url: git+https://gitea.badhouseplants.net/badhouseplants/xray-docs.git@helm?ref=main
-releases:
-  - name: openvpn
-    chart: allangers-charts/openvpn
-    version: 0.0.2
-    namespace: applications
-    inherit:
-      - template: default-env-values
-      - template: ext-tcp-routes
-  - name: qbittorrent
-    chart: gabe565/qbittorrent
-    version: 0.4.0
-    namespace: applications
-    inherit:
-      - template: default-env-values
-      - template: ext-secret
-      - template: ext-traefik-middleware
-  - name: vaultwardentest
-    chart: allangers-charts/vaultwarden
-    version: 2.4.0
-    namespace: applications
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
-      - template: ext-database
-
-  - name: nrodionov
-    chart: bitnami/wordpress
-    version: 23.1.28
-    namespace: applications
-    installed: true
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
-
-  - name: external-service-xray
-    chart: ../../kustomizations/external-service-xray
-    installed: true
-    namespace: public-xray
-
-  - name: server-xray-public
-    chart: allangers-charts/server-xray
-    namespace: public-xray
-    version: 0.5.0
-    inherit:
-      - template: default-env-secrets
-      - template: default-env-values
-      - template: ext-tcp-routes
-      - template: ext-cilium
-      - template: ext-certificate
-
-  - name: xray-docs
-    chart: xray-docs/xray-docs
-    installed: true
-    namespace: public-xray
-    inherit:
-      - template: default-env-values
--- a/installations/applications/helmfile-xray-1.yaml
+++ b/installations/applications/helmfile-xray-1.yaml
@ -1,23 +0,0 @@
-bases:
-  - ../../common/environments.yaml
-  - ../../common/templates.yaml
-repositories:
-  - name: allangers-charts
-    url: ghcr.io/allanger/allangers-charts
-    oci: true
-releases:
-  - name: server-xray-public
-    chart: allangers-charts/server-xray
-    namespace: public-xray
-    version: 0.5.0
-    inherit:
-      - template: default-env-secrets
-      - template: default-env-values
-      - template: ext-self-signed-cert
-  - name: promtail
-    chart: grafana/promtail
-    namespace: promtail
-    version: 6.16.6
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
--- a/installations/applications/helmfile-xray-2.yaml
+++ b/installations/applications/helmfile-xray-2.yaml
@ -1,16 +0,0 @@
-bases:
-  - ../../common/environments.yaml
-  - ../../common/templates.yaml
-repositories:
-  - name: allangers-charts
-    url: ghcr.io/allanger/allangers-charts
-    oci: true
-releases:
-  - name: server-xray-public
-    chart: allangers-charts/server-xray
-    namespace: public-xray
-    version: 0.5.0
-    inherit:
-      - template: default-env-secrets
-      - template: default-env-values
-      - template: ext-self-signed-cert
--- a/installations/applications/helmfile.yaml
+++ b/installations/applications/helmfile.yaml
@ -1,6 +1,126 @@
 bases:
  - ../../common/environments.yaml
  - ../../common/templates.yaml
-
-helmfiles:
-  - ./helmfile-{{ `{{ .Environment.Name }}` }}.yaml
+repositories:
+  - name: softplayer-oci
+    url: zot.badhouseplants.net/softplayer/helm
+    oci: true
+  - name: allanger-oci
+    url: zot.badhouseplants.net/allanger/helm
+    oci: true
+  - name: requarks
+    url: https://charts.js.wiki
+  - name: ananace-charts
+    url: https://ananace.gitlab.io/charts
+  - name: gitea
+    url: https://dl.gitea.io/charts/
+  - name: mailu
+    url: https://mailu.github.io/helm-charts/
+  - name: bedag
+    url: https://bedag.github.io/helm-charts/
+  - name: grafana
+    url: https://grafana.github.io/helm-charts
+  - name: bitnami
+    url: https://charts.bitnami.com/bitnami
+  - name: allangers-charts
+    url: ghcr.io/allanger/allangers-charts
+    oci: true
+  - name: robjuz
+    url: https://robjuz.github.io/helm-charts/
+releases:
+  - name: funkwhale
+    chart: ananace-charts/funkwhale
+    namespace: applications
+    version: 2.0.5
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-database
+  - name: gitea
+    chart: gitea/gitea
+    version: 10.4.1
+    namespace: applications
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-database
+      - template: ext-tcp-routes
+  - name: nrodionov
+    chart: bitnami/wordpress
+    version: 23.1.21
+    namespace: applications
+    installed: false
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-database
+  - name: openvpn
+    chart: allangers-charts/openvpn
+    version: 0.0.1
+    namespace: applications
+    inherit:
+      - template: default-env-values
+      - template: ext-tcp-routes
+  - name: vaultwarden
+    chart: allangers-charts/vaultwarden
+    version: 2.2.0
+    namespace: applications
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-database
+  - name: stalwart
+    chart: allangers-charts/stalwart
+    version: 0.2.0
+    namespace: applications
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-tcp-routes
+        #- name: vaultwardentest
+        #  chart: allangers-charts/vaultwarden
+        #  version: 2.1.0
+        #  namespace: applications
+        #  inherit:
+        #    - template: default-env-values
+        #    - template: default-env-secrets
+  #- name: shadowsocks-libev
+  #  chart: allangers-charts/shadowsocks-libev
+  #  namespace: applications
+  #  version: 3.3.5
+  #  inherit:
+  #    - template: default-env-secrets
+  #    - template: default-env-values
+  #    - template: ext-tcp-routes
+  #    - template: ext-udp-routes
+  - name: navidrome
+    chart: allangers-charts/navidrome
+    namespace: applications
+    version: 0.1.0
+    inherit:
+      - template: default-env-values
+      - template: ext-traefik-middleware
+  - name: grafana
+    chart: grafana/grafana
+    namespace: applications
+    version: 8.5.2
+    installed: true
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+  - name: server-xray
+    chart: allangers-charts/server-xray
+    namespace: applications
+    version: 0.1.0
+    inherit:
+      - template: default-env-secrets
+      - template: default-env-values
+      - template: ext-tcp-routes
+  - name: server-xray-public
+    chart: allangers-charts/server-xray
+    namespace: public-xray
+    version: 0.1.0
+    inherit:
+      - template: default-env-secrets
+      - template: default-env-values
+      - template: ext-tcp-routes
--- a/installations/databases/helmfile.yaml
+++ b/installations/databases/helmfile.yaml
@ -3,16 +3,22 @@ bases:
  - ../../common/templates.yaml
 repositories:
  - name: bitnami
-    url: registry-1.docker.io/bitnamicharts
-    oci: true
+    url: https://charts.bitnami.com/bitnami
  - name: bedag
    url: https://bedag.github.io/helm-charts/
 releases:
+  - name: mariadb
+    chart: bitnami/mariadb
+    namespace: databases
+    installed: false
+    version: 19.0.7
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
  - name: redis
    chart: bitnami/redis
    namespace: databases
-    condition: redis.enabled
-    version: 20.7.1
+    version: 20.1.7
    inherit:
      - template: default-env-values
      - template: default-env-secrets
@ -21,18 +27,17 @@ releases:
      bundle: postgres
    namespace: databases
    chart: bitnami/postgresql
-    condition: postgres16.enabled
    version: 15.5.38
    inherit:
      - template: default-env-values
      - template: default-env-secrets
-  - name: postgres17
+  - name: postgres16-gitea
    labels:
      bundle: postgres
+    installed: false
    namespace: databases
    chart: bitnami/postgresql
-    condition: postgres17.enabled
-    version: 16.3.4
+    version: 15.5.38
    inherit:
      - template: default-env-values
      - template: default-env-secrets
--- a/installations/games/helmfile.yaml
+++ b/installations/games/helmfile.yaml
@ -6,23 +6,11 @@ repositories:
    url: https://bedag.github.io/helm-charts/
  - name: minecraft
    url: https://itzg.github.io/minecraft-server-charts/
-  - name: allangers-charts
-    url: ghcr.io/allanger/allangers-charts
-    oci: true
 releases:
  - name: minecraft
    chart: minecraft/minecraft
    namespace: games
-    version: 4.23.7
-    inherit:
-      - template: ext-tcp-routes
-      - template: default-env-values
-      - template: default-env-secrets
-
-  - name: team-fortress-2
-    chart: allangers-charts/team-fortress-2
-    namespace: team-fortress-2
-    version: 0.1.2
+    version: 4.23.2
    inherit:
      - template: ext-tcp-routes
      - template: default-env-values
--- a/installations/monitoring/helmfile.yaml
+++ b/installations/monitoring/helmfile.yaml
@ -12,7 +12,7 @@ releases:
  - name: prometheus
    chart: prometheus-community/kube-prometheus-stack
    namespace: observability
-    version: 68.5.0
+    version: 65.1.1
    inherit:
      - template: default-env-values
      - template: default-env-secrets
@ -20,7 +20,7 @@ releases:
  - name: grafana
    chart: grafana/grafana
    namespace: observability
-    version: 8.9.0
+    version: 8.5.2
    installed: true
    inherit:
      - template: default-env-values
@ -28,11 +28,9 @@ releases:
  - name: loki
    chart: grafana/loki
    namespace: observability
-    version: 6.25.1
+    version: 6.16.0
    inherit:
      - template: default-env-values
-      - template: ext-secret
-      - template: ext-traefik-middleware
  - name: promtail
    chart: grafana/promtail
    namespace: observability
--- a/installations/pipelines/helmfile.yaml
+++ b/installations/pipelines/helmfile.yaml
@ -12,23 +12,29 @@ releases:
  - name: woodpecker-ci
    chart: woodpecker/woodpecker
    namespace: pipelines
-    version: 3.0.1
+    version: 1.6.0
    inherit:
      - template: ext-database
      - template: default-env-values
      - template: default-env-secrets
+  - name: woodpecker-ci-kube
+    chart: woodpecker/woodpecker
+    namespace: pipelines
+    version: 1.6.0
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
  - name: renovate-gitea
    chart: renovate/renovate
    namespace: pipelines
-    version: 39.171.0
+    version: 38.110.4
    inherit:
      - template: default-env-values
      - template: default-env-secrets
  - name: renovate-github
    chart: renovate/renovate
-    installed: false
    namespace: pipelines
-    version: 39.171.0
+    version: 38.110.4
    inherit:
      - template: default-env-values
      - template: default-env-secrets
--- a/installations/platform/helmfile.yaml
+++ b/installations/platform/helmfile.yaml
@ -1,7 +1,6 @@
 bases:
  - ../../common/environments.yaml
  - ../../common/templates.yaml
-
 repositories:
  - name: argo
    url: https://argoproj.github.io/argo-helm
@ -19,32 +18,34 @@ repositories:
    url: https://charts.min.io/
  - name: kyverno
    url: https://kyverno.github.io/kyverno/
-  - name: external-dns
-    url: https://kubernetes-sigs.github.io/external-dns/
-  - name: keel
-    url: https://keel-hq.github.io/keel/
-  - name: uptime-kuma
-    url: https://helm.irsigler.cloud
-
 releases:
-  - name: db-operator
+  - name: argocd
+    chart: argo/argo-cd
    namespace: platform
-    chart: db-operator/db-operator
-    version: 1.32.0
-
-  - name: db-instances
-    chart: db-operator/db-instances
-    namespace: platform
-    needs:
-      - platform/db-operator
-    version: 2.4.0
+    condition: workload.enabled
+    installed: false
+    version: 7.6.8
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+  - name: db-operator
+    namespace: platform
+    chart: db-operator/db-operator
+    condition: workload.enabled
+    version: 1.29.0
+  - name: db-instances
+    chart: db-operator/db-instances
+    namespace: platform
+    condition: workload.enabled
+    needs:
+      - platform/db-operator
+    version: 2.3.4
    inherit:
      - template: default-env-values
      - template: default-env-secrets
-
  - name: zot
    chart: zot/zot
-    version: 0.1.66
+    version: 0.1.62
    createNamespace: false
    installed: true
    namespace: platform
@ -52,68 +53,50 @@ releases:
    inherit:
      - template: default-env-values
      - template: default-env-secrets
-
+  - name: crossplane
+    chart: crossplane-stable/crossplane
+    installed: false
+    version: 1.17.1
+    namespace: platform
+    condition: workload.enabled
+    inherit:
+      - template: default-env-values
  - name: authentik
    chart: goauthentik/authentik
-    version: 2024.12.3
+    version: 2024.8.3
    namespace: platform
    createNamespace: false
-    condition: workload.enabled
    needs:
      - platform/db-operator
    inherit:
      - template: default-env-values
      - template: default-env-secrets
      - template: ext-database
-
  - name: minio
    chart: minio-standalone/minio
-    version: 5.4.0
+    version: 5.2.0
    namespace: platform
    inherit:
      - template: default-env-values
      - template: default-env-secrets
-
  - name: kyverno
    chart: kyverno/kyverno
    namespace: kyverno
    labels:
      bootstrap: true
-    version: 3.3.6
-
+    version: 3.2.7
  - name: kyverno-policies
    chart: kyverno/kyverno-policies
    namespace: kyverno
    labels:
      bootstrap: true
-    version: 3.3.4
+    version: 3.2.6
    needs:
      - kyverno/kyverno
-
  - name: custom-kyverno-policies
-    chart: "../../kustomizations/kyverno/{{ .Environment.Name }}"
+    chart: ../../kustomizations/kyverno/
    namespace: kyverno
    labels:
      bootstrap: true
    needs:
      - kyverno/kyverno
-
-  - name: external-dns
-    chart: external-dns/external-dns
-    version: 1.15.2
-    namespace: platform
-    inherit:
-      - template: default-env-values
-      - template: default-env-secrets
-
-  - name: keel
-    chart: keel/keel
-    version: v1.0.5
-    namespace: platform
-
-  - name: uptime-kuma
-    chart: uptime-kuma/uptime-kuma
-    version: 2.21.2
-    namespace: platform
-    inherit:
-      - template: default-env-values
--- a/installations/storage/helmfile.yaml
+++ b/installations/storage/helmfile.yaml
@ -0,0 +1,34 @@
+bases:
+  - ../../common/environments.yaml
+  - ../../common/templates.yaml
+repositories:
+  - name: longhorn
+    url: https://charts.longhorn.io
+  - name: rook-release
+    url: https://charts.rook.io/release
+releases:
+  - name: rook-ceph
+    chart: rook-release/rook-ceph
+    installed: true
+    namespace: rook-ceph
+    version: v1.14.6
+    inherit:
+      - template: default-env-values
+  - name: rook-ceph-cluster
+    chart: rook-release/rook-ceph-cluster
+    installed: false
+    namespace: rook-ceph
+    version: v1.14.6
+    needs:
+      - rook-ceph/rook-ceph
+    inherit:
+      - template: default-env-values
+  - name: longhorn
+    chart: longhorn/longhorn
+    namespace: longhorn-system
+    installed: true
+    version: 1.7.1
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-secret
--- a/installations/system/helmfile.yaml
+++ b/installations/system/helmfile.yaml
@ -1,14 +1,13 @@
 bases:
  - ../../common/environments.yaml
  - ../../common/templates.yaml
-
 repositories:
-  - name: bedag
-    url: https://bedag.github.io/helm-charts/
  - name: metrics-server
    url: https://kubernetes-sigs.github.io/metrics-server/
  - name: jetstack
    url: https://charts.jetstack.io
+  - name: bedag
+    url: https://bedag.github.io/helm-charts/
  - name: metallb
    url: https://metallb.github.io/metallb
  - name: traefik
@ -17,15 +16,14 @@ repositories:
    url: https://coredns.github.io/helm
  - name: cilium
    url: https://helm.cilium.io/
+  - name: bedag
+    url: https://bedag.github.io/helm-charts/
+  - name: piraeus-charts
+    url: https://piraeus.io/helm-charts/
  - name: vmware-tanzu
    url: https://vmware-tanzu.github.io/helm-charts/
  - name: openebs
    url: https://openebs.github.io/openebs
-  - name: local-path-provisioner
-    url: git+https://github.com/rancher/local-path-provisioner@deploy/chart?ref=master
-  - name: istio
-    url: https://istio-release.storage.googleapis.com/charts
-
 releases:
  - name: namespaces
    chart: '{{ requiredEnv "PWD" }}/charts/namespaces/chart'
@ -33,7 +31,6 @@ releases:
    createNamespace: false
    inherit:
      - template: default-env-values
-
  - name: roles
    chart: '{{ requiredEnv "PWD" }}/charts/roles'
    namespace: kube-public
@ -42,47 +39,45 @@ releases:
      - kube-public/namespaces
    inherit:
      - template: default-env-values
-
  - name: coredns
    chart: coredns/coredns
-    version: 1.39.0
+    version: 1.36.0
    namespace: kube-system
    inherit:
-      - template: default-common-values
-
+      - template: default-env-values
+  - name: snapshot-controller
+    chart: piraeus-charts/snapshot-controller
+    installed: true
+    version: 3.0.6
+    namespace: kube-system
+    condition: velero.enabled
+    needs:
+      - kube-system/cilium
+    inherit:
+      - template: crd-management-hook
  - name: cilium
    chart: cilium/cilium
-    version: 1.17.0
-    condition: base.enabled
+    version: 1.16.2
    namespace: kube-system
    needs:
      - kube-system/coredns
    inherit:
      - template: default-env-values
-
  - name: cert-manager
    chart: jetstack/cert-manager
-    version: v1.17.0
+    version: v1.16.1
    namespace: kube-system
-    condition: base.enabled
-    missingFileHandler: Warn
    needs:
      - kube-system/cilium
    inherit:
-      - template: default-common-values
      - template: default-env-values
-
  - name: issuer
    chart: '{{ requiredEnv "PWD" }}/charts/issuer'
    namespace: kube-public
-    missingFileHandler: Warn
-    condition: base.enabled
    needs:
      - kube-system/cert-manager
    inherit:
-      - template: default-common-values
      - template: default-env-values
-
  - name: metrics-server
    chart: metrics-server/metrics-server
    version: 3.12.2
@ -91,43 +86,35 @@ releases:
      - kube-system/cilium
    inherit:
      - template: default-common-values
-
  - name: metallb
    chart: metallb/metallb
    namespace: kube-system
-    condition: base.enabled
-    version: 0.14.9
+    version: 0.14.8
    needs:
      - kube-system/cilium
    inherit:
-      - template: default-common-values
-
+      - template: default-env-values
  - name: metallb-resources
    chart: bedag/raw
    version: 2.0.0
-    condition: base.enabled
    namespace: kube-system
    needs:
      - kube-system/metallb
    inherit:
      - template: ext-metallb
      - template: default-env-values
-
  - name: traefik
    chart: traefik/traefik
-    version: 34.3.0
-    condition: base.enabled
+    version: 32.1.0
    namespace: kube-system
    needs:
      - kube-system/cilium
    inherit:
-      - template: default-common-values
      - template: default-env-values
-
  - name: velero
    chart: vmware-tanzu/velero
-    namespace: velero
-    version: 8.3.0
+    namespace: kube-system
+    version: 7.2.1
    condition: velero.enabled
    needs:
      - kube-system/cilium
@ -135,49 +122,12 @@ releases:
      - template: default-env-values
      - template: default-env-secrets
      - template: crd-management-hook
-
  - name: openebs
    chart: openebs/openebs
    condition: openebs.enabled
    namespace: kube-system
-    version: 4.1.3
+    version: 4.1.1
    needs:
      - kube-system/cilium
    inherit:
      - template: default-env-values
-
-  # -- Not versions since it's idnstalled from git
-  - name: local-path-provisioner
-    chart: local-path-provisioner/local-path-provisioner
-    condition: localpath.enabled
-    namespace: kube-system
-    needs:
-      - kube-system/cilium
-    inherit:
-      - template: default-env-values
-
-  - name: istio-base
-    chart: istio/base
-    condition: istio.enabled
-    namespace: istio-system
-    inherit:
-      - template: crd-management-hook
-
-  - name: istio-ingressgateway
-    chart: istio/gateway
-    condition: istio.enabled
-    installed: false
-    namespace: istio-system
-    needs:
-      - istio-system/istio-base
-    inherit:
-      - template: default-env-values
-
-  - name: istiod
-    chart: istio/istiod
-    condition: istio.enabled
-    namespace: istio-system
-    inherit:
-      - template: default-env-values
-    needs:
-      - istio-system/istio-base
--- a/key.txt
+++ b/key.txt
@ -0,0 +1,3 @@
+# created: 2024-09-26T22:52:39+02:00
+# public key: age1fwhu5m8df98kk2ldf36z24t9vfcz3875fd3uzecke0yv2qqts9dse0jqrn
+AGE-SECRET-KEY-1GHMQKZHLVGV5CGZQD4HNMP3UCA8D75557KVKJ82JGZX3LTFHCEVQZ9FSVR
--- a/kustomizations/external-service-xray/service.yaml
+++ b/kustomizations/external-service-xray/service.yaml
@ -1,23 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: xray-external-proxy
-spec:
-  externalName: xray-public.badhouseplants.net
-  sessionAffinity: None
-  type: ExternalName
---
-apiVersion: traefik.io/v1alpha1
-kind: IngressRouteTCP
-metadata:
-  name: xray-external-proxy
-spec:
-  entryPoints:
-    - xray-public
-  routes:
-    - match: HostSNI(`*`)
-      services:
-        - name: xray-external-proxy
-          nativeLB: true
-          port: 27015
-
--- a/kustomizations/kyverno/etersoft/pvc-patch.yaml
+++ b/kustomizations/kyverno/etersoft/pvc-patch.yaml
@ -1,20 +0,0 @@
-apiVersion: kyverno.io/v1
-kind: ClusterPolicy
-metadata:
-  name: replace-storage-class-by-openebs
-spec:
-  rules:
-    - name: replace-storage-class
-      match:
-        any:
-          - resources:
-              kinds:
-                - PersistentVolumeClaim
-              namespaces:
-                - application
-                - platform
-      mutate:
-        patchStrategicMerge:
-          metadata:
-            annotations:
-              volume.kubernetes.io/selected-node: yekaterinburg
--- a/kustomizations/kyverno/badhouseplants/pvc-patch.yaml
+++ b/kustomizations/kyverno/badhouseplants/pvc-patch.yaml
@ -10,11 +10,6 @@ spec:
          - resources:
              kinds:
                - PersistentVolumeClaim
-              namespaces:
-                - games
-                - application
-                - platform
-                - pipelines
      mutate:
        patchStrategicMerge:
          metadata:
--- a/manifests/cilium/cilium-allow-google.yaml
+++ b/manifests/cilium/cilium-allow-google.yaml
@ -26,16 +26,6 @@ spec:
            - port: "45000"
              endPort: 60000
              protocol: UDP
-            - port: "6672"
-              protocol: UDP
-            - port: "61455"
-              protocol: UDP
-            - port: "61457"
-              protocol: UDP
-            - port: "61456"
-              protocol: UDP
-            - port: "61458"
-              protocol: UDP
      toEntities:
        - world
        #- host
--- a/manifests/debug.yaml
+++ b/manifests/debug.yaml
@ -1,7 +1,11 @@
 apiVersion: v1
 kind: Pod
 metadata:
+  labels:
+    app.kubernetes.io/instance: server-xray-public
+    app.kubernetes.io/name: server-xray
  name: debug
+  namespace: public-xray
 spec:
  containers:
    - args:
--- a/manifests/peerauth.yaml
+++ b/manifests/peerauth.yaml
@ -1,8 +0,0 @@
-apiVersion: security.istio.io/v1
-kind: PeerAuthentication
-metadata:
-  name: default
-  namespace: public-xray
-spec:
-  mtls:
-    mode: STRICT
--- a/renovate.json
+++ b/renovate.json
@ -2,10 +2,5 @@
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
-  ],
-  "helmfile": {
-    "fileMatch": [
-      "(^|/)helmfile.*\\.ya?ml(?:\\.gotmpl)?$"
-    ]
-  }
+  ]
 }
--- a/scripts/add_xray_user.sh
+++ b/scripts/add_xray_user.sh
@ -7,6 +7,9 @@ CONFIG=$(sops -d ./values/badhouseplants/secrets.server-xray-public.yaml | yq '.
 read -p "Enter fullname (Ivan Ivanov): " FULLNAME
 read -p "Enter email (ivan@fakemail.net): " EMAIL
 PASS=$(openssl rand -base64 10)
+export DOCKER="${CONTAINER_TOOL:-docker}"
+echo "Generating UUID, please wait"
+UUID=$(${DOCKER} run ghcr.io/xtls/xray-core:main uuid -i "${FULLNAME}")

 CONFIG_ENTRY=$(cat <<-EndOfMessage
 [
@ -27,15 +30,22 @@ read -p "Type 'YES' to continue " AGREE
 if [ "${AGREE}" != "YES" ]; then echo "Alright, goodbye" && exit 1; fi

 NEW_CONFIG=$(jq '.inbounds[].settings.clients += '"${CONFIG_ENTRY}"'' <<< "${CONFIG}" | jq)
-echo $NEW_CONFIG
+
+export NEW_CONFIG
+sops -d ./values/badhouseplants/secrets.server-xray-public.yaml | yq '.files.config.entries."config.json".data = strenv(NEW_CONFIG)' > ./values/badhouseplants/secrets.server-xray-public.yaml
+sops  encrypt -i ./values/badhouseplants/secrets.server-xray-public.yaml
+
 echo "Does the diff looks correct?"
-diff <(echo $CONFIG) <(echo $NEW_CONFIG) || true
+helmfile -e badhouseplants -f ./installations/applications -l name=server-xray-public diff
 read -p "Type 'YES' to continue " AGREE
 if [ "${AGREE}" != "YES" ]; then echo "Alright, goodbye" && exit 1; fi

-WORKDIR=$(mktemp -d)
-export NEW_CONFIG
-sops -d ./values/badhouseplants/secrets.server-xray-public.yaml | yq '.files.config.entries."config.json".data = strenv(NEW_CONFIG)' > ./values/badhouseplants/secrets.server-xray-public.yaml && sops -e ./values/badhouseplants/secrets.server-xray-public.yaml
+export FULLNAME
+export BRANCH="add-$(echo $FULLNAME | sed -e 's/ /_/g')-to-xray"

-helmfile -e badhouseplants -f ./installations/applications -l name=server-xray-public diff
+git checkout -b $BRANCH
+git add ./values/badhouseplants/secrets.server-xray-public.yaml
+git commit -m "xray maintenance: adding ${FULLNAME}"
+git push

+echo $UUID
--- a/scripts/find_unused_values.sh
+++ b/scripts/find_unused_values.sh
@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-
-if ! [ -z $DISABLE_ADDITIONAL_CHECKS ]; then
-    echo "Check is disabled"
-    exit 0
-fi
-# -- Get all the envs from the current helmfile installation
-ENVS=$(yq '.environments | keys | .[]' ./common/environments.yaml)
-
-ALL_VALUES=$(find ./values -type f)
-
-USED_VALUES=""
-for ENV in $ENVS; do
-    USED_VALUES="$(helmfile --log-level error -e  $ENV build | yq '.releases[].values[]'):$USED_VALUES"
-    USED_VALUES="$(helmfile --log-level error -e $ENV build| yq '.releases[].secrets[]'):$USED_VALUES"
-done
-
-UNUSED_VALUES=""
-for FILE in $ALL_VALUES; do
-    if [[ ${USED_VALUES} != *"$FILE"* ]]; then
-        UNUSED_VALUES="${FILE}\n${UNUSED_VALUES}"
-    fi
-done
-
-if [ -z "${UNUSED_VALUES}" ]; then
-    exit 0;
-fi
-
-printf "\n ** There are unused values in the repo ** \n"
-printf "${UNUSED_VALUES}\n"
-printf "Please remove them from the repo to keep it clean"
-exit 1
--- a/scripts/lint_all_envs.sh
+++ b/scripts/lint_all_envs.sh
@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-
-if ! [ -z $DISABLE_ADDITIONAL_CHECKS ]; then
-    echo "Check is disabled"
-    exit 0
-fi
-# -- Get all the envs from the current helmfile installation
-ENVS=$(yq '.environments | keys | .[]' ./common/environments.yaml)
-
-
-FAILED_LINTERS=""
-for ENV in $ENVS; do
-    if ! helmfile -e $ENV lint; then FAILED_LINTERS="$ENV\n$FAILED_LINTERS"; fi
-done
-if ! [ -z $FAILED_LINTERS ]; then
-    printf "\n\nSome env can't pass the linter:\n $FAILED_LINTERS"
-    exit 1
-fi
-
-echo "The linter is happy"
--- a/scripts/sops_check.sh
+++ b/scripts/sops_check.sh
@ -1,18 +1,8 @@
 #!/usr/bin/env bash
 set -e

-# -- Default exit status, that should be thrown
-# -- when all the secrets are encrypted
-EXIT_STATUS=0
-
-for secrets in $(find . -type 'f' -name 'secrets.*'); do
-    echo "Checking ${secrets}"
-    STATUS=$(sops filestatus $secrets)
-    if [[ "${STATUS}" == *"false"* ]]; then
-        echo "ERROR: Found an unencrypted secret: $secrets"
-        EXIT_STATUS=1
-        sops encrypt -i $secrets;
-    fi;
-done
-
-exit "${EXIT_STATUS}"
+for secrets in $(find . -type 'f' -name 'secrets.*');
+    do sops filestatus $secrets;
+done | grep false && \
+echo "There are unencrypted secrets in the repo" && exit 1 || \
+exit 0
--- a/scripts/sops_dec_enc.sh
+++ b/scripts/sops_dec_enc.sh
@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-for file in $(find values -type f -depth 2 -name "secrets.*"); do
-  echo $file
-  sops decrypt -i $file
-  sops encrypt -i $file
-done
--- a/scripts/sops_rotate.sh
+++ b/scripts/sops_rotate.sh
@ -1,4 +0,0 @@
-#!/usr/bin/env bash
-
-for file in $(find values -type f -depth 2 -name "secrets.*"); do sops updatekeys $file; done
-for file in $(find values -type f -depth 2 -name "secrets.*"); do sops rotate -i $file; done
--- a/values/badhouseplants/org-badhouseplants/app-open-strike-2/values.yaml
+++ b/values/badhouseplants/org-badhouseplants/app-open-strike-2/values.yaml
@ -1,20 +0,0 @@
-deployAnnotations:
-  keel.sh/policy: force
-  keel.sh/trigger: poll
-  keel.sh/initContainers: 'true'
-
-extra:
-  templates:
-    - |-
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteUDP
-      metadata:
-        name: "{{ .Release.Name }}-game"
-      spec:
-        entryPoints:
-        - game-udp
-        routes:
-        - services:
-          - name: app-open-strike-2-main
-            nativeLB: true
-            port: 27015
--- a/values/badhouseplants/org-badhouseplants/app-stalwart/secrets.yaml
+++ b/values/badhouseplants/org-badhouseplants/app-stalwart/secrets.yaml
@ -1,27 +0,0 @@
-config:
-    env:
-        secrets:
-            data:
-                SW_ADMIN_SECRET: ENC[AES256_GCM,data:dG2zVmvycL7TZM922XADQ/SwWMBrUvXd+BPwpxIvmaDnjejpEaHUfB0xhpkhZqhAB8M=,iv:5hDpUFLLGLf4VLj8h3weOZhiwJKYORg5uKVgXVXKbgM=,tag:9FQru61B5hDPcIoIUDvUtg==,type:str]
-                MINIO_ACCESS_ID: ENC[AES256_GCM,data:HvZa/kOy8ZI=,iv:T2433k3OmZTmPTx2QWEAELlN7zY37LUynapVWpASrJ0=,tag:Kvr4wIgq5dMmXRJDoxqGxA==,type:str]
-                MINIO_SECRET_KEY: ENC[AES256_GCM,data:Tv5VWQprCKtJCghzhZ8YD8/9,iv:hioZ+d0ns+Hr3pBVyfFWgcuRKDrPQmskSnU0XOMwhzA=,tag:nuFn0qV9UMy2ywiFfx5gHg==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGMTZGN2NSYXUzcXNJVUx2
-            YXE3Nk5MbnV1dyttUEtmUExabFYvOGdHcTBRCkM1WE9uNlF1OGh4NnNDL3NabXhi
-            OW1NcDlydUMraTVQV2tjLzVla2tpSnMKLS0tIHN6RXVJTzNvZlkyTmdDb09UTUNy
-            TVJyRVI5U2NmV1VIQTk4cjlYM1htMFkKkxsXzn+7nFiTs3mANqO0+f7/TTGKogFk
-            8ix4OpiA9b33kuqi4Z7bXx4ucyCmlDwtxuHvmOEOyW4yJ9F1cgm+Uw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-15T23:05:04Z"
-    mac: ENC[AES256_GCM,data:Kix/IdONJ79Lj1dc/gigpM7BUPyg7EIsPQzkhtu8+nbIQZQsm0CYqlqPx1V7w0r9vef+rCd/8GX8RdKw0o5ZaDZY5l0nXEi9E7dEtcHTYlrr8fqljcsGRAKmOiBRMkPh0jGTEPlFRtb0Inrn85rWUiMJP12hwIIS0t7GpAydKdI=,iv:1pMdzj1x0Hf65nmZ28Lv7yu6Y+suQKxv274nYl8J3HI=,tag:GQL8HOSswz2N56iNAS9l9w==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.4
--- a/values/badhouseplants/org-badhouseplants/app-stalwart/values.yaml
+++ b/values/badhouseplants/org-badhouseplants/app-stalwart/values.yaml
@ -1,317 +0,0 @@
-shortcuts:
-  hostname: stalwart.badhouseplants.net
-
-base:
-  workload:
-    initContainers:
-      prepare-config:
-        image:
-          registry: registry.hub.docker.com
-          repository: library/alpine
-          tag: latest
-          pullPolicy: Always
-        volumeMounts:
-          files:
-            config:
-              path: /app/config/config.toml
-              subPath: config.toml
-          extraVolumes:
-            config:
-              path: /app/etc
-        command:
-          - sh
-        args:
-          - -c
-          - cp /app/config/config.toml /app/etc/config.toml && echo "" >> /app/etc/config.toml
-    containers:
-      stalwart:
-        volumeMounts:
-          extraVolumes:
-            certs:
-              path: /app/certs
-            stalwart:
-              path: /opt/stalwart-mail
-            config:
-              path: /opt/stalwart-mail/etc
-
-        envFrom:
-          secrets: {}
-          raw:
-            - secretRef:
-                name: app-stalwart-db-creds-17
-
-extraVolumes:
-  certs:
-    secret:
-      secretName: stalwart.badhouseplants.net
-  stalwart:
-    emptyDir: {}
-  config:
-    emptyDir: {}
-ingress:
-  main:
-    annotations:
-      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
-      kubernetes.io/ingress.allow-http: "false"
-      kubernetes.io/ingress.class: traefik
-      kubernetes.io/ingress.global-static-ip-name: ""
-      kubernetes.io/tls-acme: "true"
-      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-config:
-  files:
-    config:
-      enabled: true
-      sensitive: false
-      remove: []
-      entries:
-        # Ref: https://github.com/stalwartlabs/mail-server/blob/main/resources/config/config.toml
-        config.toml:
-          data: |-
-            [lookup.default]
-            hostname = "{{ .Values.shortcuts.hostname }}"
-
-            [server.listener."smtp"]
-            bind = ["[::]:25"]
-            protocol = "smtp"
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."smtp-startls"]
-            bind = ["[::]:587"]
-            protocol = "smtp"
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."smtps"]
-            bind = ["[::]:465"]
-            protocol = "smtp"
-            tls.implicit = true
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."imap"]
-            bind = ["[::]:143"]
-            protocol = "imap"
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."imaptls"]
-            bind = ["[::]:993"]
-            protocol = "imap"
-            tls.implicit = true
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener.pop3]
-            bind = "[::]:110"
-            protocol = "pop3"
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener.pop3s]
-            bind = "[::]:995"
-            protocol = "pop3"
-            tls.implicit = true
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."sieve"]
-            bind = ["[::]:4190"]
-            protocol = "managesieve"
-            proxy.override = true
-            proxy.trusted-networks.0 = "192.168.0.0/16"
-
-            [server.listener."https"]
-            protocol = "https"
-            bind = ["[::]:443"]
-            tls.implicit = false
-
-            [server.listener."http"]
-            bind = "[::]:8080"
-            protocol = "http"
-            hsts = true
-
-            [store."minio"]
-            type = "s3"
-            bucket = "stalwart"
-            region = "eu-central-1"
-            access-key = "%{env:MINIO_ACCESS_ID}%"
-            secret-key = "%{env:MINIO_SECRET_KEY}%"
-            endpoint = "https://s3.badhouseplants.net:443"
-            timeout = "30s"
-            key-prefix = "/"
-
-            [store."postgresql"]
-            type = "postgresql"
-            host = "postgres17-postgresql.databases.svc.cluster.local"
-            port = 5432
-            database = "%{env:POSTGRES_DB}%"
-            user = "%{env:POSTGRES_USER}%"
-            password = "%{env:POSTGRES_PASSWORD}%"
-            timeout = "15s"
-
-            [storage]
-            data = "postgresql"
-            fts = "postgresql"
-            blob = "minio"
-            lookup = "postgresql"
-            directory = "internal"
-
-            [directory."internal"]
-            type = "internal"
-            store = "postgresql"
-
-            [authentication.fallback-admin]
-            user = "overlord"
-            secret = "%{env:SW_ADMIN_SECRET}%"
-
-            [tracer.console]
-            type = "console"
-            level = "info"
-            ansi = true
-            enable = true
-
-            [certificate."default"]
-            cert = "%{file:/app/certs/tls.crt}%"
-            private-key = "%{file:/app/certs/tls.key}%"
-
-  env:
-    secrets:
-      enabled: true
-      sensitive: true
-
-extra:
-  templates:
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-smtp"
-      spec:
-        entryPoints:
-        - smtp
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 25
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-smtps"
-      spec:
-        entryPoints:
-        - smtps
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 465
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-smtp-startls"
-      spec:
-        entryPoints:
-        - smtp-startls
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 587
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-imap"
-      spec:
-        entryPoints:
-        - imap
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 143
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-imaps"
-      spec:
-        entryPoints:
-        - imaps
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 993
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-pop3"
-      spec:
-        entryPoints:
-        - pop3
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 110
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: traefik.io/v1alpha1
-      kind: IngressRouteTCP
-      metadata:
-        name: "{{ .Release.Name }}-pop3s"
-      spec:
-        entryPoints:
-        - pop3s
-        routes:
-        - match: HostSNI(`*`)
-          services:
-          - name: app-stalwart-mail
-            nativeLB: true
-            port: 995
-            proxyProtocol:
-              version: 2
-    - |
-      apiVersion: kinda.rocks/v1beta1
-      kind: Database
-      metadata:
-        name: "{{ .Release.Name }}-postgres17"
-      spec:
-        secretName: {{ .Release.Name  }}-db-creds-17
-        backup:
-          cron: 0 0 * * *
-          enable: false
-        credentials:
-          templates:
-            - name: POSTGRES_HOST
-              secret: true
-              template: "{{` {{ .Hostname }} `}}"
-            - name: POSTGRES_PORT
-              secret: true
-              template: "{{` {{ .Port }} `}}"
-        deletionProtected: true
-        instance: postgres17
-        postgres: {}
--- a/values/badhouseplants/org-badhouseplants/app-vaultwarden/secrets.yaml
+++ b/values/badhouseplants/org-badhouseplants/app-vaultwarden/secrets.yaml
@ -1,31 +0,0 @@
-config:
-    env:
-        secrets:
-            enabled: ENC[AES256_GCM,data:hwTU7Q==,iv:1/GEM3RSfu11iQVA5uEm/PoZm3Vr6CZ1w7Qc4edUqgc=,tag:gAUwZ4IekLiyyPZoM8FlLQ==,type:bool]
-            sensitive: ENC[AES256_GCM,data:tbFk/g==,iv:FaKXMZxlcdGB3YI5+RC9LZR7S9FNZ87yPrJZsDJlhqw=,tag:+V77+cV4fRLTzi75o5OYQg==,type:bool]
-            data:
-                SMTP_USERNAME: ENC[AES256_GCM,data:Bq10,iv:h17Bam1uR/dhz9um0ixzVPKHlqY5GtU6V2+CjTPvuaw=,tag:x+WCQVTySTyHAkoooZg2NA==,type:str]
-                ADMIN_PASSWORD: ENC[AES256_GCM,data:eeJY2z6+Is3+PtZsRC6oyrJ9ArPMBpa2VQ==,iv:hHf/6AYUT3wHbKHPd3dfiTbmoaWr5OSnnRC68/15A90=,tag:qEQyvC+MiAdy3GcpYBIWFQ==,type:str]
-                ADMIN_TOKEN: ENC[AES256_GCM,data:pMh4vnJ6t80okBE5ywe+8LBSb5U9owebWuavCYPwqQ7bpB7qNfYijTbWS0afZGag4wEeTe4t49dNeFTEZ0ztrfm4yXyKcLFCV1E=,iv:RmV55yv8ytW/LvuuK9IPTsKPPdgiIdKX5PnkF5YCKBc=,tag:uRsiwnhYm/1lRfhDjDKqJA==,type:str]
-                DATABASE_URL: null
-                SMTP_PASSWORD: ENC[AES256_GCM,data:xx56/9ha07j5fcwDBuzOuFiS6PG1JHE7rQ==,iv:bT47zy9xk5eNz/CCRV5WEy0PAiFsBBxUxkZTCRASfE0=,tag:h3V9peXifp9lT/84TzWKLw==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoaG8vRkM1cll5VDlUVW5v
-            WVA0SjdaOWkrTVoydERvcmFjN3ppTjFQdEZvClZENVpYWXMwTVoyOXFYL0xSRGFw
-            NnZDWUM1MGNla3daMU42dEptZzkrWUEKLS0tIG0reXRYMmpuOVZWbXJTbXYyaWJK
-            TE1rZDJ0QmY4VXJSZXoxMTRkNFgrZncK2AL7+jWWeEiV4ERoaCN9M4H1qlzz9i+F
-            23w3rtioCm2hJcBCnswU8Bs7OsBZqC8++35V1U54WktynWnPUcjcrw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-29T11:38:09Z"
-    mac: ENC[AES256_GCM,data:d9902N6sfF3aMokh9rZemL97i2hkwoPdAaJOoy/xFvFyDa2pxKuhwGJH4QU6JRnoqtay1HtnHsDXLggdxHgmUbUtNReVQdPbJhSHRhlDsuAM2ed+GCnecFQE9ggpRnwDn1wjemBqpn40uo9ka4XyMtuLJ9uaHqXRuFR+8y8oW18=,iv:EspFcGUXPgtgXzEWB1fE5O3ig0JJBIca+b6LLb9wJ0s=,tag:6UexlW0uVZUUG/zleiXnZQ==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.2
--- a/values/badhouseplants/org-badhouseplants/app-vaultwarden/values.yaml
+++ b/values/badhouseplants/org-badhouseplants/app-vaultwarden/values.yaml
@ -1,63 +0,0 @@
-shortcuts:
-  hostname: vaultwarden.badhouseplants.net
-
-base:
-  workload:
-    kind: Deployment
-    strategy:
-      type: RollingUpdate
-    containers:
-      vaultwarden:
-        envFrom:
-          raw:
-            - secretRef:
-                name: app-vaultwarden-db-creds-17
-ingress:
-  main:
-    class: traefik
-    metadata:
-      annotations:
-        kubernetes.io/ingress.class: traefik
-        traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-        kubernetes.io/tls-acme: "true"
-        kubernetes.io/ingress.allow-http: "false"
-        kubernetes.io/ingress.global-static-ip-name: ""
-        cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
-
-config:
-  env:
-    main:
-      enabled: true
-      sensitive: false
-      data:
-        SMTP_HOST: stalwart.badhouseplants.net
-        SMTP_SECURITY: "starttls"
-        SMTP_PORT: 587
-        SMTP_FROM: bot@badhouseplants.net
-        SMTP_FROM_NAME: Vault Warden
-        SMTP_AUTH_MECHANISM: "Plain"
-        SMTP_ACCEPT_INVALID_HOSTNAMES: "false"
-        SMTP_ACCEPT_INVALID_CERTS: "false"
-        SMTP_DEBUG: false
-        DOMAIN: "{{ .Values.shortcuts.hostname }}"
-        LOG_FILE: /app/logs/log.txt
-
-extra:
-  templates:
-    - |-
-      apiVersion: kinda.rocks/v1beta1
-      kind: Database
-      metadata:
-        name: "{{ .Release.Name }}-postgres17"
-      spec:
-        secretName: "{{ .Release.Name  }}-db-creds-17"
-        instance: postgres17
-        deletionProtected: true
-        backup:
-          enable: false
-          cron: 0 0 * * *
-        credentials:
-          templates:
-            - name: DATABASE_URL
-              template: "{{ `{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}` }}"
-              secret: true
--- a/values/badhouseplants/secrets.argocd.yaml
+++ b/values/badhouseplants/secrets.argocd.yaml
@ -1,26 +1,26 @@
 configs:
-  cm:
-    dex.config: ENC[AES256_GCM,data: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,iv:/xI16L5fvHC2IPAsEpg5QR4vz7Tnjlnl0C7cEDSSnek=,tag:5XLlpaauuQQuy3SrPdYZNw==,type:str]
-  credentialTemplates:
-    ssh-creds:
-      sshPrivateKey: ENC[AES256_GCM,data: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,iv:cswd5iTvERSH5JQUz6IT7U9+agzsS3PheG4Md71hSrY=,tag:QeBr865/eWBrZtcrE3QRYQ==,type:str]
+    cm:
+        dex.config: ENC[AES256_GCM,data:Gno9D77U/9pr9rVmiium0rOOfAvNOzWI58aY64YlKrZbTZw6901WPuUbc7Q1hhBD+M7/lFSxFHbHsczuIAcxYBLpiFu4XmT/NiWMjW/H39nRZlSbULOG4uR5oPuZMe0PK6sG1BRkVcgCQwIv9CqdGjobxFm0edyDKO/+nPHehIxIXe516YFLxEX0fktnVRjyQdnStyhIkx+HYu038pTTlzmRnwJR/zPeBMlBL8oLaN/uZAkxUXId2SEgG6LekVIHlq6THkv4BLskAIOYfMHCiKJbIECie6c41yGtp/UlrF58UAhw2T3SpK3LttRDhsfUSgV3wSRMgZe8cBWo/2hZmZM3G3XXCRdQ0nvkuaA7rECrIfJq3GQSsp60yShkyftbQ3oWNq+xkkFRaMHh5r7y/SVgOaX6XQ+AeGJ2klRQDlNap8PigmYAkl0njEOQT1C/G1y6cO2M569Cu4QEz0VdfAvKq0BfIdizf08MpZkfkvKDWOjHmcDPOaG219HOQN4YqMYuiYiNUqVv1TMJAOmaeqn3LFsVHdXJbDVgLkmRdSc5lGmYfzAfX004XIgcHkvatjxHma5H8MeLrpYhuyUFcURraXm0JPWF7devc9e4DxYIod4HtArUrtq41SCT4fIy2IDiwZeWlMGHdN5d1Pg9DjOJwAURd7eKhbFDs5t5tWKEnCt6GeWlBLLev+SGXgcmb1aCqbl0B6tqwevp9Uk++mRnPJRfcEavNZ2HHLe2g5a5bVfQ8OmMUiw6mPHtMjPR+ME8sDe05DwD0tdk8+o0p9CA2SYklkmUhRiSckzk3+XkRPq4bPxuetzUZd4EViXfVdAy8TteIju4Ke5jlWJmYuZheOm8qq0=,iv:+oFJiDrtgPF0MQ9zfgy6vL4xHmw3c5ZidBb90zFL2b4=,tag:UZBFNN7WVw4GRPGGCzaGgw==,type:str]
+    credentialTemplates:
+        ssh-creds:
+            sshPrivateKey: ENC[AES256_GCM,data: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,iv:Ep1EEN62y9yNXeDJVcup1snyv1W+6/71MulNNtWrnMY=,tag:9QxpLc3SoxuRJ7k4ndrPFA==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlOVJweE5UeUlhUkNId0w2
-        a1kwM1dsWjJtZUt1QmNTZmlJNHkxRHdwaFhjCnoySGZDYUVJdzNGYUNyRnRKOXIr
-        SktxNlNBbmRDRXdZTDFFRnRnSVpwNXcKLS0tIHJaOUwya0pqRlBRVFZvaERjQk5N
-        aWVQUFo3bDJpK1R6SEJpMVdmWks1dkkK50KPI/hji2aJ1CLYqtxU87oE2tsBcl+I
-        d+Vs4aKRjY/mpdO7NWhmeguH1boGhMaKpZlSV+TZGBtEsl7RQ6mbtQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:21Z"
-  mac: ENC[AES256_GCM,data:pRtlf2AnmG9ztZyXwbxR2foagCMBX8BwfhLrsoLeEpSyFLbNMKIGKMSZKaJ3r9IU7gErXh4KoUGXcg31LB80B1G+YFlICvxmlXX0MB3MmedzTi6I6N7ydFse11n3WF/XaRUhpZVE9sCyZgNxgyuhf0LTnS0FU7tauVgAERAazYE=,iv:zwojdj+/HIglNNdS/lYokVqiAvH0pTZIk5jK20oiA7c=,tag:rRi0uEIP8ag/45cv8/4FYg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxbDBUVUpjTHpVdDZpYVFy
+            bmpCbkkzZUpBOG1TcDVSb2N5MmNFUWZqUzFRCjg0QlFWTUp3QSs1TWlqK3k2bFcz
+            dU0wRzZHdkFrQjdiSXJaU2w2b210YW8KLS0tIGgvUTRmdlNHVGFHcFhocHpMcy85
+            QnNlUzBwZnVYRUVpbGM2cEhTRXVUWUEKFOrBmRYTAAjEAvWpOP5f+KiuCEzK0sko
+            IwlBO0efKXOELMblI8qhnZT2SCG4Smis3XvnnpMbrutgK8gwFw105w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-11T13:17:07Z"
+    mac: ENC[AES256_GCM,data:cgKvMKIzbYU77A6BBJjYuf+oYt48riNzeRV4uhRMChnUsBUKacNKCBBSFc1PzuUFonFONKDesv8bFzluqcY5ZPf59WBMA2/hbTt+eGTrHCdb1i+QgyYnfVUhXKz4ckEjKkAJBKwcb4WNRsA2ULyuGc18D3e5RsAsD4oqGdS6lqI=,iv:OLYyE35E8apfQEKYcVm09O09iE4nnEXpSxFQyLUy724=,tag:hbS2uhN25Lk1ZvOBlRonrw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.authentik.yaml
+++ b/values/badhouseplants/secrets.authentik.yaml
@ -1,24 +1,24 @@
 authentik:
-  email:
-    password: ENC[AES256_GCM,data:OtaK90UmvOkSjHYe/37W5aSlZo0=,iv:WQR0YIz4U5QIxc7YSQ2JZRLnA3ZF0JouZtnggTW674g=,tag:Us163wc95RbiN8XdXogt3g==,type:str]
-  secret_key: ENC[AES256_GCM,data:/6gM3ZUb6mIYaJO2CyCuVxLFOxdogTMbKb4c3HYXpvxZIqoFt0t9fHY+XU/mC0OGue4=,iv:TfGI7jXixrI/YBp++AFHz+rCliuo6zhbgXeMviw7rHY=,tag:G52eT7OlxDub1pL27LWHKw==,type:str]
+    email:
+        password: ENC[AES256_GCM,data:j5JFI7KqO2dOjl0xi4KhvnF04tc=,iv:/YH+XId24X69lRXrp73ZhKGOcuEtXn/ZvqlJwMTgdRk=,tag:YBh/slhCstFpXxE4y05Viw==,type:str]
+    secret_key: ENC[AES256_GCM,data:zbs2HX75h3rITd/JRPVa60AhrWgDp/syWFttnadRyDJFFM4/6YFOUhJNcGGQis6Tz5Q=,iv:1iYOTqBU3WHNPBa5TpSwi6+h6IT8Joc6Z4c2UKY7xQ8=,tag:DcRfBP69i17zKFobMA3WFQ==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwNG9RVzltVnZraWNnTW1q
-        aUIvWDNWcEovWC9yWU5OdmxjamFyREgwSFhvCjNwM3FLNmZUV0tHK25tNDRsNGpn
-        UTZDUFIrVmQyRUNZa3d4R2NpbFZqM2cKLS0tIFVoMnBtSUNRd1VHVmx2RXVvdDN2
-        UzFDZDRJRzV6cUVpY0NNWmR5aU9qRlkK6dudxILhTOjvNi2Pwo5jg13GqRG52igd
-        3yXhaIzRp+fcgAXMlTTTwe2jBNRYCv84+wLvV2NkfHyPeE0t9Wh/ow==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:qHD7CYM7sFBiJtGADcFeBHSFlmvEZaEVRGXTr02Tk+uLGWn9lP5CuOX1sU4x3Gd8nilwZy0fRAL523HDLvYQBPwsi26Vbp6OgZ9shjp5CvrQMUTg1qRCfjWAw66Y5NHHUJrrYc0sOPlTWXxRyU1Xk9aMvtRQi1ooum9wF3vhuoA=,iv:ADzHjgi72Ureve1CxQhkySvLZ07//Q1oBMKpvgXfNy4=,tag:RAIEupIsOviKYlQJO/rgsg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGK0hPSEY4d3N4QS9aM0h3
+            NXRYZ1BMdXozVzdJWmlzWnIySXBwcHVrVUhrClgvRENGTHdJMnVsTjdSN2NseUtT
+            cjJ0emRObHdXTUhDejhhVEI1U0xvNlkKLS0tIHh2NGhzbGZDMm9ObDVxN1NYYS9u
+            WlhXbFVQbFZUNFlGWEhoVktxUXRuZUUKJNSS+vhG5McKrxvqCIT9dGivcReZOud7
+            HEReDoZcf0+7c4JgnrcT0AvvTR5fHPnfveTkwHym3LHMYbZnIPueig==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-30T18:36:34Z"
+    mac: ENC[AES256_GCM,data:djXTiatawc1OuJ5VqfbR8wS2xKrvVZigGLyQa7tx6/zbgcP2yLQJvcYeZj6zHhQasFzaiNbD05Qz+9Td0ysxZuAnajQ+CaulnIOhy/FhaiiQFtqFTR7xEsFIiUBxTPEJkhVNlKTxzjJ1AX2dagiov75otC6jbueQqYTXaGGcdko=,iv:oWbWTUqlM1zQ7zfC5FZkNJJ8RxvM9+fvTWobgJCmLQE=,tag:7Jb9XBBq1OI0ghqOqxiJJA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.bitwarden.yaml
+++ b/values/badhouseplants/secrets.bitwarden.yaml
@ -0,0 +1,24 @@
+env:
+    ADMIN_TOKEN: ENC[AES256_GCM,data:ea2lgOEYMi8Dsvun00YZR3PCE3ycNC4Mpe+xye9YL5CTtnyrDwV9Tw==,iv:28Tcn1/qIquS4jCNBTtspB9c+5U3Ut1zoY6gIez8fcs=,tag:POmhoUY3t4w+iTJKK2eHVQ==,type:str]
+smtp:
+    password: ENC[AES256_GCM,data:cs+2Ml3YfZCk8z/KmexGMqzFQRM=,iv:mg8e3oHbLT07pZEdDGwlBchPyT83xOdwKJg9CCaicnc=,tag:NPD+8gKERO8uCuwrFnn3bQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKL3M4VWJBQzZQdHRDcXVw
+            VWIwcjd0Zm44V01DTW1aV2FhV1QvT2hpcUVZClJ2dHdvcDYxalEvMXB2a1F1WlRy
+            K1VOYmg4cWprSHpLSVJVK1lYVXR5cWMKLS0tIGJ3bHNIZE9zR3RuZmpmMlZBQ1Qr
+            dzNYMlRnUDIxK2padTRCSzR4UUpWQjQKxex3RqZGU7ekdNC3qIiqdFs7d7a0Pxa1
+            amLsaNnBfJ3OqjuD8atF2iCAXy1Q2BcXunkWi3wbzHb/DgYly3n9OQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-10-15T12:20:48Z"
+    mac: ENC[AES256_GCM,data:2yRwdYM32eESPuUz+d7m7pTcluDUeOrLgv7iJmhPEnowcU9WvypAZr73w4y4ewc3yvLmmu5uuFjJJhN1+yjwULGUtU1NPdcvXHsGwtlA7KDyYUqwIc4NrD6BAeR7tRQChNVD++2wB43kiGAWAMmieOMt+xHcaWlM2btuLoiwE34=,iv:ZMxA5eu0IJKTRBtoKhyIJiDe/W3zVjzlz3TbO7gpRnU=,tag:ErYqzleh87+wj0uBRah20g==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.chartmuseum.yaml
+++ b/values/badhouseplants/secrets.chartmuseum.yaml
@ -0,0 +1,24 @@
+env:
+    secret:
+        BASIC_AUTH_USER: ENC[AES256_GCM,data:i+3uBSJ1yrA=,iv:bhB9fIPxR2y9sS4jfbuhAIyzMHgoIRLFGXzQJ4763Cg=,tag:7pv9IOcBXhaeRu3qChQP8A==,type:str]
+        BASIC_AUTH_PASS: ENC[AES256_GCM,data:zSb7cw==,iv:CL6ywqsc2hpTnBl7ndD0s49JNEmMNnu3X0gke4KT3qw=,tag:tSVaRdIZpkzsqp6n1RUB9A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBc2RwQk9OTS9GV0NOb2x2
+            OE1YVEsveU1VMTArZEJ3a2tETis1N1FTTndJCm96bWtYMDdRNnVTZEk2b0JPQWFl
+            a1BTcWVyUWZKOEJSWDZEcWZydEc2b00KLS0tIEpWdTZGWUdCUHczWEZoR0dSTlRY
+            TlNpbDVHa1VDUk9wODJLaHZJT2JoWmsKUD7yk2jpDVHvP5B4soK7k834RI+ydHxg
+            H9/8nzPNwNbpq5ysHmYFChpfiOHrSKirVINUP7MmLGdPZ24FSHI4+g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-03-27T08:47:35Z"
+    mac: ENC[AES256_GCM,data:w72acY/GygiBVO/3/OQU1WJ90R+mbuCcGid9KzCAPOtdhBBbY5zZUtkZvkZkaugoiI+bpywoXQI/5JbY4+23D4MN2XHHG69DIkpR0eygeTHWc/id+LhfxIGHqvYzULshQuyVtPezoExWVwC3c3ZJYpkzRJhgOjA9TNg5ib4jnIw=,iv:srnydYWdQ352zeNzk/HJi5CyoQEqsDxbCV+1aT1qE8Y=,tag:zCRILWPmLcW0mN/IRpzazA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.db-instances.yaml
+++ b/values/badhouseplants/secrets.db-instances.yaml
@ -1,12 +1,16 @@
 dbinstances:
+    postgres16-gitea:
+        secrets:
+            adminUser: ENC[AES256_GCM,data:vMINVc9s2Es=,iv:Ry5so0+WPntFh6c3nMojw5b4vONdq+Ys5F7256psGaw=,tag:YbWaWwZ5SiYMOSXQ9n9t8A==,type:str]
+            adminPassword: ENC[AES256_GCM,data:xqlIJgMylef69LEC1M8s16UPCnaPlZuokO+rBPWC11ruBEkBD2FHOEvkCMsGcnPldmQ=,iv:WBO4LFIFGU8q9rWxFYdUac650QxOfmOT0b0PmOsdVZU=,tag:QpFfVINvBkrWW0+pPyj6Og==,type:str]
    postgres16:
        secrets:
-            adminUser: ENC[AES256_GCM,data:uuu/xvwJkHk=,iv:Pk+i8bf7AeeG9wKVh1RDJy7Dt3r5b1UKy4SJijlZfq0=,tag:QO3gwYXAG0sBBuHcKfTNQg==,type:str]
-            adminPassword: ENC[AES256_GCM,data:tjWATjuJT+C97D4TLQgk55BZOwVv,iv:1MWYtksmrEBQtOdGvtc6MZyLP4yBKA88eIpQ4mZCULM=,tag:3hOlT5n2Wd81ebxeEgW5tw==,type:str]
-    postgres17:
+            adminUser: ENC[AES256_GCM,data:NsrkusJt+1c=,iv:MA8vXZRhOeO8XilEgpwiqvoJbNjghTcl4CJmHE5mjR0=,tag:awYDx0rT2HCIm6zDvG5L4w==,type:str]
+            adminPassword: ENC[AES256_GCM,data:cgEW0YTi5MRgGEVAfCvRjPmzLtzy,iv:I7+VS6pZGUrd9To8+eX7EoIoQg099kaYeWXMXKfkS50=,tag:n9LgvnvSa3JjyB+gwT3lQw==,type:str]
+    mariadb:
        secrets:
-            adminUser: ENC[AES256_GCM,data:4w2EItIM++Q=,iv:cQLryeBskm2Y9OlbMFgQEWEBi7z/VxucLWbwZXsRtto=,tag:Ir2Q7KZv/sSDdA1MX/Niqw==,type:str]
-            adminPassword: ENC[AES256_GCM,data:wHUL2p8CXYwoEFu3ffCCsQO9xn/GqOZ6JPrcHKzy,iv:khoogPPFHSd+4xyp+jf1w0RfOUgrKzAmFjLnisQ8HXU=,tag:GRnkCQ0uOlUt2AiEAceFRQ==,type:str]
+            adminUser: ENC[AES256_GCM,data:tZm9aQ==,iv:XmeasI4tGcws2SRoqKIyiDLoAx0UMBdtm8pXxivb0lI=,tag:vOwy193J2+FuzBgM0Y40Dg==,type:str]
+            adminPassword: ENC[AES256_GCM,data:tIozTmj3CYTGZUevJMo8R13D21c=,iv:VVD6VaYUrpV+WUaiRl7wD1mR0Nh35CscSdY1+Y8Skbw=,tag:KZUDpRSqUbkHX8UKHKYoEA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -16,14 +20,14 @@ sops:
        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuL1lwdVNHMm9nZHRld2lO
-            Rm4xVnVHWG9hNDc1cUVyakxzUU1PcFJhalM4CkNicEdUV2lEYWMwaWNqeGcrQ2p1
-            Qmw1b1FzRllqYW85bjF0cmRGcW1MbjQKLS0tIENUcG1oOXFNV3REaFU0aUEyd2k4
-            RDgzRmlKT1ArblpOV1plcFpyMnJXZTQKgm8Eaw591+EHZWofXAADTXRHPOdOvdOM
-            jYne1szB/V9UJz+pmLa10tNgruga+P5yP/j+DGcYrTj0pVh5IJLjTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxSG10ditaUG8rTlhaVUhs
+            cXJHQ2JXaW9IalZHN21ZZGQrZzZ1T1FOWlRRCkZOc2JmNDh5M3YzSXNTa3R2U2hj
+            ckVRVklsRlh1RlFES3JDdjBPSkxVN2sKLS0tIHVzL2VQbnFnUklyamNvN1VmUW5W
+            d0xSNVM5OWxzbW9YRUE1ZEhZZ3dtR1EKI01GcMKUlu6mU237nGipXghGB/sduRjn
+            AKpwYgh9IN55ZrDRUsZOHBkded5IlQAwcmbJIjxJi1Ce5XMSQnKF4Q==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-30T19:59:46Z"
-    mac: ENC[AES256_GCM,data:3KrwiArDx/bPAHbFGgb9BdDVHC+uC1IHp4LZXlYRZzWSKtX1t+ODQVzUW97kigGFG1sx6WXddl/w3XeNOoT9JbS5iPXJQe6KAPleNV50S/oab+U53WeloO8uL68Wrk9v/NwMhCKwE9cCqBBhqk7wCb6N9ivt45mLrUf06L8fok0=,iv:bOWhyIm8FhKtZAZH/78bukkeDp5P4XShSD20mgr4Neo=,tag:RZMx9bi+ZEcLwTzk+Gm8RQ==,type:str]
+    lastmodified: "2024-07-11T15:30:32Z"
+    mac: ENC[AES256_GCM,data:bhwI1bycchie+CwNBVtSc2LKhfyGBJ6k0H5qupzo9pfQQ1MYpLKs/0oR/vvJf09LNAp1rS229si2BMhpiF7v002bfFNvz6C09l2q4q5SqySgV4O30mu9mXjmyWOiqgBgH0gBEEZRBmJfwlKQXuOpkd/uPi+M64WYpOHkjDrnKnw=,iv:GgC8woC4UT8B1fMJvS+MFm0mxg/42huOzaRzV2RVyjM=,tag:6+oTQDiH5KIp5iSBkG2i7g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
-    version: 3.9.1
+    version: 3.8.1
--- a/values/badhouseplants/secrets.drone-runner-docker.yaml
+++ b/values/badhouseplants/secrets.drone-runner-docker.yaml
@ -0,0 +1,22 @@
+env:
+    DRONE_RPC_SECRET: ENC[AES256_GCM,data:RAZbnTrv9PxiCLLqjKWBtFWd+Nzqma8Zw+NuKRLO,iv:IiFcTQGUmYa6UCBzx1yTDd0zwB6D1Cv0raXZxLXm1qA=,tag:83bnBW+MhkKehZfso3g+/g==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVk0yaTlySHpuOWFFT3J5
+            Z210NzJPTmV0akdFQ1REM1JzK0pwTC9XWjJJCm54QmQ3ODJwakZuamMzYTBIeEJi
+            aUxKNmQ3dU52V2N2cjl5VTJpTTAwWGsKLS0tIDFyR2o2VnQ4QWFCWWRzZGNMZnNQ
+            em1VMlhBNGRrVFhXVUVRdU16Q1Q4bUEKvZ6UbZsfdvfCk37FlEN4vg0RTnPO2nwh
+            DY4klzcan+9DBRT2qdIIy6pj94GuSoXKXEYc9X0AvYab/HoLithMWA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-05-21T09:27:21Z"
+    mac: ENC[AES256_GCM,data:U2JETtW0lbb2znJBupGMPsab13y5M1v1N0wkFxEBs+YVNFhnkvIqSZiY5mq9KTYiY4tRzw1kV+jqP0jNsODekCI1++4NBuQsGSZFUoTERHgTRlnz1aAS+nf39lvYnWyQxsQmw9vY/GQ/yluBJkOEV/EoIF3wHjxZe1HCBIViPyk=,iv:WMj7aSgW8LdNQbOgC4FcyOtR/3gjckiHO8vlZGdiTeY=,tag:Xty2QVLJ/D2dlzQY13od5w==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.drone.yaml
+++ b/values/badhouseplants/secrets.drone.yaml
@ -0,0 +1,24 @@
+env:
+    DRONE_RPC_SECRET: ENC[AES256_GCM,data:W1OAxQIUbVU8uYHtxujhPyww4jscNH4LwMAGOU5v,iv:ouToTniIMiy757x40MKMtmLFBVzpuGxSYOTMZmmN8ck=,tag:RZ/cb7cRXDQSAQwGqdX+zw==,type:str]
+    DRONE_GITEA_CLIENT_ID: ENC[AES256_GCM,data:7Ohn3nGR9VeIhAr9EdW1/juRFo3TXpKIwU07hD8mGoyBrbyn,iv:9/y3Ou8H/PL2hMsirJaqviKGQuzVlzL43iGAKQb9NII=,tag:EZoo2F4/HoOcacWOVU9yjA==,type:str]
+    DRONE_GITEA_CLIENT_SECRET: ENC[AES256_GCM,data:2wAbiSJdDb5lGUOocK14pZtwQI0EFmXGStAigKsPGAZUKyn7M0B6xBO1+B3wZYVnIKEohiNIZF7k,iv:Y9aCzdSH5cAIZfk84Clto/IrQMRaoH+bOkvbP+9CcLM=,tag:FVfLsEA56WGNCl/8ut4F/Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaREllV3RqUVg0anpIU1Rj
+            RFh3WkdGdEU5bWg0bWk3bWU5OHFkeFF6SGh3CmlOek9zL2w4a0ZHc0p0WTNucE1Q
+            dVpDeW93QlNHZGY1dWhOc0FneUFjQUUKLS0tIEhuZE1CMmZLZFIxbXJTZmIzcEE4
+            QStxOG1iMWlxQ2dmOXRabXp4cm9NSU0K/+CRAc7DH4PgbQscXvDb7yLe8VoEpixr
+            icD3GL37kYE2D4h1cm+p+/b7BF4/yjNlCUvo5cITXRjZAuiWGwUixQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-05-18T17:11:19Z"
+    mac: ENC[AES256_GCM,data:d9G44MW63rUa/MQaW/rLQQ4dlgOOje6qaS1V7yWT3HrkRLOXRCfuK5E+XeWC1PuQwMk0ghaNYJDT0FTnBsoJbxlu+7Vb91qlItn+azvldOFDvtGTRpAK7bPjM+p+G4/gZsgarFxaTh7py6Z/HsoqP1RvaK8GWNhRl7VfTiFuUrA=,iv:e4IXbSSiHMTPc3WijuwgF8L5aG5iMMfu6P/IYD2cp5A=,tag:aGqcqjjrO+PfYxfIAgSmeQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.external-dns.yaml
+++ b/values/badhouseplants/secrets.external-dns.yaml
@ -1,23 +0,0 @@
-env:
-    - name: ENC[AES256_GCM,data:iUkU/BNlitD6f6RQ,iv:x5aENGi0aw9gDh2a7h92DfxwQgdbacM3hHtnPVdIKWA=,tag:4vyOlP7XcC1F6pjnUieAuA==,type:str]
-      value: ENC[AES256_GCM,data:cFypu5mF+ktwjNFCBcy0U/1UIt4Fc/CAtH/SngvaaBXY0yinYzaiOQ==,iv:2VQ1Cpmppkz2ylt5NMP84o+0EQkI43jz267HNRjMugg=,tag:co3LJzwxbmxT09km65MVuw==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwMXNsQjEwYXdaR0Y3bktt
-            UGFYS09Nc29IR0w0YmpweUtyV2pPbXFPeFJnCjZkclRSVjREanorbk5MKzJybWJI
-            UDlwdlVqWGZockVVeFVrNnZlZGp1NUkKLS0tIDhnUzgxdlFWa1NicVJEUk81cXp5
-            M2xvSjRrNUx5OFRqbUFpSXdyZ04xVzgKMsBwKA8dVSW9BR2jSTBxMPKevual5P8I
-            V+YUcIIUAP1sFjs4jVhTduBSMI/ZSArWYIEX+dQ46oGDLcRzODm9xQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-16T14:21:33Z"
-    mac: ENC[AES256_GCM,data:5nE5vx69ESp0HW0/uxYGp8Lq35Cjb5UpSmNkx1H4ux67K3xs3zEBSrupDuUqzrrj/WFFgTf8fIAnfu//bEUvRqtqkIOb7eTqBlQTCzdKWLMvfwhv3WnfXLljJvZZH+e430z7ayw6psfNbwm5sPr+/sPSijg31xv8x9wN8LfZqno=,iv:BKyKMqQ/eLiDspSlvMh0/I7hKb3xn2BUQhuHwrl+Pfc=,tag:is4SHDuAT2c3Ip2O5ifgWw==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.4
--- a/values/badhouseplants/secrets.funkwhale.yaml
+++ b/values/badhouseplants/secrets.funkwhale.yaml
@ -1,27 +1,27 @@
-djangoSecret: ENC[AES256_GCM,data:RSajXXpFcUmxBOpT48A=,iv:lIzUF8cgbKVMCOY5G/A4mpaviYwwLRvePj3lrhycLZ8=,tag:OSfyKAXCTHOssx+KkL4+ZA==,type:str]
+djangoSecret: ENC[AES256_GCM,data:fMSeOds/Jg/wwl1+yis=,iv:tUHZgRSBinNksTDZ8PKDwg2RKJzqi8QwxX42wySODeY=,tag:GEQzFKw+2M2lQql8c8FY/A==,type:str]
 postgresql:
-  auth:
-    password: ENC[AES256_GCM,data:dFSSGPS1shNnJlxGIh9o9zfNVZsKp9Wv8A==,iv:lYxEpS+w+oTW07DPohyZ59UbcFKKtD6r2oSRSS3mw+s=,tag:uqLqzIoE43uS5y9UYVGDJg==,type:str]
+    auth:
+        password: ENC[AES256_GCM,data:vJdVBHb5uYkxk/rp4Sbf7wVLGpR66OsVyA==,iv:L8YwhPyYpvMkGUoqtkctrNslW7LF2s4apZ26WbDBJtk=,tag:LG/39niDzaqQXQ2+NvU1GA==,type:str]
 redis:
-  auth:
-    password: ENC[AES256_GCM,data:hR3tXeU05nfd7IeLvjOR2N1dieai0IFQ9kheuCOJ,iv:2j2oAemd8k5zP3zHTAmIQEQHlU+8VKQ0DqpEXoBBJX0=,tag:gjMJ4z0MCxgYpeEeA9NFPw==,type:str]
+    auth:
+        password: ENC[AES256_GCM,data:eN9uZXp9AoLe1QPtbHR5rXGKgSZFzyFMm5G+GrUq,iv:cD7XzjKcbrjjMSY2lCyL+CGYOnbduTiiGqAwKgDRV/s=,tag:05UomOmZ3oOzvmE4PLuFYQ==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMc2xxZ1o2Q1RsT2ExNklq
-        ajZZT0lxczBHTnRNcmNBc2RONk96ZkVZOTJBCm1YbUJ1bG1WTnJJVGJSbXI1cEc2
-        bCtSM3lwd3lvNFhlZi9wZ1JyUklFK2sKLS0tIDB5RTBNTjhSeFYrUVZjS0xzZXlS
-        VmNCRVhmMHZ0aVZXbURWVjZUVnlFck0KA/pMAwMDx3QsT0iF6u9AOoXnGyEIqtc1
-        5iUW96UPhXIK+OyPqCt+07HaAZzavUT/zFSqPdJ3avvY1k3EHMfzBQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:21Z"
-  mac: ENC[AES256_GCM,data:kAj/KI4QQnDM4Ya/JQQ1QvjbEpHDkp3gAgtgBjjhyY6khSIlcZpG74YNfpD01dHQqk5/KTF9mKi6P68CKubTKQTF7a7qriwNmHcjg7IShJtSYWmzPCu1PIR2jAQTxCa0ETFbsQ14rhKbxpUeXvTvkx5wuRazXKFIwSjBddpO0b0=,iv:H1GmBgpEoHuMa1XdnmEW5jYP/FZyDty/ul3XSbZ2oEQ=,tag:NSaxPq5/dNizE6o7odoUMg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyU082aUE4enJ2UllHQ3Z2
+            OU5ZZnNIb3JJT1ExSzBxSmpSejdnOW1LSnpnCk9XUTZMM3Y4Qkl3aGdPTTVUOEVW
+            dDV3QzdScWNMdFc1cHhKbVNoOHdDYU0KLS0tIFBZc1MrYkh2WVpPQWNaMWYrZVQ4
+            b2lvOS80WjVZQWRMREhrMVpWRjA5UkUK/iY1SvS1ubVj9WtWPfF2DOmOweFRoKgZ
+            WtN3jGFsHrgQiiuMlW4huYGqWKCASPoEW09vNJ/mrDBmp38YdQfczw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-21T17:33:39Z"
+    mac: ENC[AES256_GCM,data:LTuNptcXyW7dNFVpIFwaD7D95lcoQWZIIQOvPFTpXh1xjdX66E7XXEWFNMn5p/PnDvvZdQ9IKSyR07ekzCLrSnoC0TYI6Sq1xY5tsR9WYAqK7CmqPbLYNxlBlViJW7UA4X9QjD9KdGMtsoKFgeU7t06QYFp7ooYjOn81Ny3jmyE=,iv:qR8AZ8uaD9Vu1ekXB2Rp5jjUv1xcNqS838f+/Unc3z4=,tag:+bimX/eyeSY4EM1fhOFUUA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.gitea-archived.yaml
+++ b/values/badhouseplants/secrets.gitea-archived.yaml
@ -0,0 +1,48 @@
+gitea:
+    admin:
+        username: ENC[AES256_GCM,data:jWOKYLR8wEY=,iv:obfaa7iVArqZsfXI9glfNVhnEzNPnoPvA9WZrqzURd8=,tag:ZQykUfckAD6CcRsAxYLfww==,type:str]
+        password: ENC[AES256_GCM,data:ckwTYUA05SSl+3KD9G/XtQW+nnM=,iv:reeJTq7vWcfjggl9X+/t0yYzaz7xuiZLZM0xW7zlfcI=,tag:x0Dtf3ea53+1c0jhn2C5zw==,type:str]
+    config:
+        mailer:
+            PASSWD: ENC[AES256_GCM,data:ZXMbptf1Tn8QVf9H6gLuLIpI+gs=,iv:QsHjgoEWy4mEf/NNBnuPFpXBFHoACn8pfQmbF1wI2ZM=,tag:/T6PGia+mkzmcUkWANO25w==,type:str]
+        database:
+            PASSWD: ENC[AES256_GCM,data:mfMbZf7Kbn+5gwLi2JGMt6otMlQ=,iv:r2H7aSJKraBoDydV6N29hsRiH6bLUM0aJHPmo3dbSP4=,tag:WwBHKRYdJIv6IGQehO2yEg==,type:str]
+        session:
+            PROVIDER_CONFIG: ENC[AES256_GCM,data:YexjXlIj5mtwhv5HD2rmpzo3hqIXpZkyPk0njFYe3tceDV2uclpLCmIrZOumwo4TdWtIZ5Axs336vXtFvi4LFSyyrzSnqSPNxC1aNHwmj4keMY1qvPG0qRCoS7Q7JcCak41gRopbx+RLn7BENZ6s0e19u5PXLDSB,iv:pkY0LBpXhnSr40YoZpklytGWmKe7CdsgPpQySXfON5g=,tag:96UXoPksLxE+mJzyjzjqEA==,type:str]
+        cache:
+            HOST: ENC[AES256_GCM,data:C4GD2Nbb9Yi7TTKvipoPW3wM7e9BvQziBqweB/AUTq78pk20c2QoirNDETqcGaA002Phr8SwttdljnjVhCMr/w+Np/XkNy2rSB00A6R8t5/gDDoxUE92R2RLFIRB3Ao4UwKdL2X/YvzX1xDq/WC/i7VmvPTnLbas,iv:NMTgSxxvrut/Pxi5lZa6mbP/eOMt6rk2leFJESl5SJQ=,tag:bKJ1P6KXdjHC3bFmreD7OA==,type:str]
+        queue:
+            CONN_STR: ENC[AES256_GCM,data:28O5cVRnezFBWnyILjGxLf39SrS7nYNuI0km29qz5Q2qPGwojiLziyTsBb9AUlLZc5nLcGEUIJ5vnXONtw96aOobDwwyLmPE8X/QnpRvjRN4DmAF7LO98AuyTrTXEOSNMp3Dee88F9T9wdwr5ekh1Fb/gBSJpkkt,iv:PP0ZPxBulXce/bIUTuuQgiaOBWNcjMe2V/BgFGJm77Q=,tag:BDteA6nftpa6q6djyhivGg==,type:str]
+    oauth:
+        - name: ENC[AES256_GCM,data:DWCdEzwP,iv:fJrSGxRPSljBLSnRRRCjsa3QCa730NGRyKJCVJe8YNE=,tag:vQFTYVUQXPcB3Mx9/qGfVw==,type:str]
+          provider: ENC[AES256_GCM,data:mSnq2rOw,iv:XC1JS1oqZxbBZoraWemzXWGSnpvn9NTx8OA57HV1B8w=,tag:kPxdj8h8Qk9oGayi3Di7yQ==,type:str]
+          key: ENC[AES256_GCM,data:ft+Zqnu7oXHxMnMcRFpT934TGL0=,iv:qFj+BT37ZKIH69ikEf1YMwE1LC+dyAW7tBXhY5X6mYY=,tag:+p+3+GX5zakkXyi41H7Iog==,type:str]
+          secret: ENC[AES256_GCM,data:CSGrxpxfGoKs4wHKl25s37Nenw/0nuagCa6Ed++nE9lnQlZ8G193CQ==,iv:oTOGJmZi/26OvKG5gkrUoFVaJ8erkHfVi44FTy9kb1M=,tag:upHqogYqdVZlUyJT3BG0/g==,type:str]
+        - name: ENC[AES256_GCM,data:iZ2gRgmkZGcG,iv:N16HI6nVh8euitBKEq4yr3kr2cpLRb12XWKupXGR98A=,tag:L+rWF5wbrwWHhSus1JGP2Q==,type:str]
+          provider: ENC[AES256_GCM,data:2HlYsjvxnOx1sHuKlw==,iv:aXOjLsl1ZF3NCPpqyGrSM25lX3OLKoRpGzrRW47lGVg=,tag:LzGsYa36wqgch/nw+en6oA==,type:str]
+          skip_local_2fa: ENC[AES256_GCM,data:QYsYyg==,iv:tZt+yIvuDbFa9BWsoeUvcOpIonlufb9FO7YU59mGkVs=,tag:+2rr0Q7c9XfwjFR7C+ikuA==,type:str]
+          key: ENC[AES256_GCM,data:4/jJ0cc=,iv:iu8l1dGDIou4ytXhub7YKlIGs8WDEAAjKVbwd81m0Uc=,tag:D2BiWDfubzbK0cJl1Bk/0Q==,type:str]
+          secret: ENC[AES256_GCM,data:iRRUJl5r7wJQY4SWaSMF2ut2+I37CGPhXOpCkMENNRm6dvFp7YNyiHVQT61PsWnoyWz9lFJMkjCnY98JDjvjWuYCW8O30IEklq/N4KYSgD5TLEWu1OCcPC8A7yMZJSI8rxTLKcevuGJD7ZT8hWl3nZDTkUwTEJy0qREqyhc8caQ=,iv:KOLmK6UddEq9hv938m409ldxVpR8pQLiJwk7Sr0W4mA=,tag:ZDBZwa6ZAQw4qGU9C+Z/xQ==,type:str]
+          autoDiscoverUrl: ENC[AES256_GCM,data:YxqoKonuM10Fawz8qJiOVILsoJDKuRotf4SHw/Vvw0srWvc26rpwzKoP+kj1u/UFv6pDmnBvrAgYVPGyJt/e4TgmsPDYfH6D0IVngaFLI5KDRll5aIUaAeQ=,iv:4U9CIgObfPwuqi/vxky4pNkL9R4BbStJ3YQ3MBH8LYo=,tag:Ouwcj0tjKu7eykoT3Rnkwg==,type:str]
+          iconUrl: ENC[AES256_GCM,data:OmHXFvlKnclwjbTc9AXbcMZOb7qW7om7Tgf7b3uHLgOmakuyTq7QhXM3oFQN+T/+J+Cna8MP27coLBDW8TL7RefT1TapSA==,iv:py3p4kh90W6BgAHmI2MIBu92y90M8QhQDmic0pX3m5c=,tag:yqci0Lu7K16/JBlJGkoXng==,type:str]
+          scopes: ENC[AES256_GCM,data:IvNV7Q+7vPJn7EJZ7Q==,iv:S/aUhW0ASL4yAwe9IaeYdjokHrE+4MViEAGa+5wQlyY=,tag:OxkVQCSfjCQePnJqt+EcNg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeU9sbjV2b0JjcVZsbFUv
+            OWpSYVhBSlBrR2FOVWlDZnhTRk84YmlpK3hRClBZeTQvclE1VkhkMkltbjMrN3Vk
+            cko2M2VsNkpNSjhPZExUUTB4enV6WTQKLS0tIHdOV0FidU5wN0ltNTVlNVF6MVJB
+            ajlnQzNTK3NzcnJZN0FGVmx1VjhQVk0K2m9pzSB9gqIkOLBr/WwnrZfcj5633tFJ
+            PI+H+aXZwJtKuN4YOw0rlp5Jp4iQ9aD/9TLqYT6xQJbU1nibqCca1w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-21T12:10:40Z"
+    mac: ENC[AES256_GCM,data:JlINn9gcMkhLNbCuOmfrnhB5f2K94KO+8qSOeKf5KjeJFv5AmGP/ssCPVRxko8Mi68l7JueggjTLJUgRRuLr2JdH9lI3URK8Oh63d5iYbn/y0LIPJC//mw/WWrNO15H5tR4dt1vPOzi0KwozvpLt0R8SYYwU+IIF3Ej/kG2KMyk=,iv:ZKsYYVkeCjvPptzH00V2SFKFQ0St/TOnxSAbqWpWWZI=,tag:NSG4lsk+Adglo3R/e8ZceA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.gitea.yaml
+++ b/values/badhouseplants/secrets.gitea.yaml
@ -1,33 +1,33 @@
 gitea:
  admin:
-    username: ENC[AES256_GCM,data:1yKnMnzbHno=,iv:AWqprQPRloJhZEtyhF8+5dgxyHXtK+2HLxHa+gU+Aw0=,tag:Irk65xjOWgFBfPUJGVcQcg==,type:str]
-    password: ENC[AES256_GCM,data:8hbWwHlNyxzNe6PCYJ2w5b8oUi0=,iv:GtkHDZFUzk9rVh7ASmk+Qb/litPD5QX38hWLR24pgSU=,tag:bmdNTBDt2Mrxp1cVXmJwcQ==,type:str]
+    username: ENC[AES256_GCM,data:hsx6HtKYxuE=,iv:M3tusJFSNFUhuJz1+MIXXIPRVsQnnHbP6JXR6r/HAUM=,tag:qbPfuZep4O3z/LPqmdlXYA==,type:str]
+    password: ENC[AES256_GCM,data:3f0ZsEUpNIvrMEunrFmKrkn1zis=,iv:BMjEA3BRvH1N09BJ9n3YCCrlhpSkB82ccZ4qsACmkZQ=,tag:hC3arqzL/Ls4dGr2aVTQMw==,type:str]
  config:
    storage:
-      MINIO_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:tLHwP5ZsoxKnaG38hNNXvXoy4PTuxlUT3w==,iv:bR0eL0MHOdT3CnsQrjdlEfwCEye41/ts/vsQf3ju1cU=,tag:XxpkrS88muDolMcB0r9rWg==,type:str]
+      MINIO_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:2VsiUFXZ6v/Tj14L5GiaSRW6ow05RAh1HQ==,iv:tzOYH/FL+LtVO9OmV6rzIO0bYbfkwB7oIyIyAuTQk/c=,tag:wBiPWIjDT6Qi52l0YVykBA==,type:str]
    mailer:
-      PASSWD: ENC[AES256_GCM,data:tw+vJSoedon/a3VhXkcpupumdbBnyMbSzQ==,iv:xoxIm855BhNsNfq+5L33yIDFKx8igNuEV71IDt0WNzQ=,tag:i9FJe0x4PqaMb/SBN0yXCg==,type:str]
+      PASSWD: ENC[AES256_GCM,data:kVDMfKmxbIMJF17ES5zoYdS6lysBJyj5cg==,iv:YvfeHQhfsDup8KRVz0Bry8cDUTUC/LhJUCY9OL96mm8=,tag:4OY6gKTP5PHYiUGgOl6BUg==,type:str]
    database:
-      PASSWD: ENC[AES256_GCM,data:pB7YPucwcXwD9fzJsckZshz7ZLM=,iv:23k90tX465WltrQwSyx8Hixe2hnya/dx6aIvr3ti1wA=,tag:NvgN1g181yCBu5Mf7uYmGQ==,type:str]
+      PASSWD: ENC[AES256_GCM,data:Lbq1JtvK/svEo76GcWKXdxzpqZU=,iv:tYQYJUr2X/ZBXWz+J9IVhokzgDaZSCZUMnAU4kcndOo=,tag:UY0Lxupij6yz6BWPoKWJTg==,type:str]
    session:
-      PROVIDER_CONFIG: ENC[AES256_GCM,data:Ipcta9fyfGCygYqpisgiy0rCckP5Ma5bNs2ClFNn0lnm1LQOJDdDLiQDr5u9L/WG6Bs2WhHbeSrdjxyZdCKv9pd1CfmB7S9eNcp2w+4hhofwUVcKW89rj9HYEHSLuY8C4Y5KbJKKl6PkY/JmTzyVSpSMDHYadf3j,iv:YsMR3zwZODENuy+WvKy8AdByKTuI7ng0hf1AJT+CMQk=,tag:9hOo08OLybdNgr7wvRPvyw==,type:str]
+      PROVIDER_CONFIG: ENC[AES256_GCM,data:POHvdayjqUJ/PQ0KOP4K2dkmmiVdfOGng30KI71HMW2G6M2JONr180oONfmCnN3k3MzNYUpPAIzLxUL+a+COMcaR8IchJn8R8F1JFYsk6u0NaG67k1NbTATbgtDtssC8LqkE6xwAhI8iR43FTEvdHIRCQIXXSPxy,iv:H0OGUJNh1L9L6B5avpjnKVeu8UaFWeURZ6AyFvue3Vk=,tag:s7PUGjhn68cUMQ3/O5XWxg==,type:str]
    cache:
-      HOST: ENC[AES256_GCM,data:K0FpmrMo1TlUnHHHRKcKVQ8NYeOr+YEeQjajEIM1x5XPjkxYUmywyVL8f5qNLkvotAtD941Rw9CQ7NRof0NketkYyC8gJsndfznGPjhfqH5a0MUWDu9tAfGUzWGzXxC0uq4Ne1eRhu4SjZljZybqk5qQR00Zc/qX,iv:izMvr/kdes3+Gl1a6URnWyQ5TwYqTDMOBskHxPZZpgo=,tag:MWdLA5PV/+bEPWgXHw9OQA==,type:str]
+      HOST: ENC[AES256_GCM,data:tJf0l2A896hmOzRojnFDe8d0bJuRJOGp6EwLLPkXnduS5DyAMW5dTK6WimWNIigKZjrF14c8NJBYXTDjMWyTB9HigHuQPomZqSZIViaFY0W6Kr0LBdpuUxW1wjFX74N90S0hEtajiBbG95YRzR9XCbjbKfI/i2be,iv:YXLZdpfYwwkd32bTOSLtEWA4skmYwYYm6N9WwyCjPcU=,tag:FNmXZFFeaCwYoKGFntNcOg==,type:str]
    queue:
-      CONN_STR: ENC[AES256_GCM,data:MsKkRcKpCGmvcL2lP5N+WuCNGp68gPw5HCpvCjEbYPoJcl5j6mAV5bBGqmiaIpvRbBu1EL1riHMmFD55efSJ6XueOXPG997iwE7KISdPjAWA92ZFe/zFzSW5EfBz3BvgsxzkMk3gR2usid0BvKXLPztLSvAYOR1l,iv:S4BunQMCS33JZUL8x4dRSbMtKQoI0f3Iw9IQ663hqfw=,tag:G7Xpp4d0VKzHRb0ju+F+WA==,type:str]
+      CONN_STR: ENC[AES256_GCM,data:0Sa3+2/uI1HPKh4rgR9wRUXI6SPc3tpn+VaRC7Nz8Crup1jzB0WfH8i1ZjvimlJuiZyFD3JASjdrMY9tIoVjDFW/JKlqGSpz6mF/Z9mVcIbgVr0GBGFRiMmI9lh57pviJXL8iAnPrbsBmePVwFMDQL9kjmWXZtPA,iv:yvwa9G1kUB29fnHMDljY3MOKFYAyw+P7iEVgxQ2r5CM=,tag:5LM1i2vvm3l3i2iJMrY9gg==,type:str]
  oauth:
-    - name: ENC[AES256_GCM,data:ruqXMi7A,iv:hzOf08m5WO/0ZLrsDdco2RuWquiR9n5hwZqcug7Gx1E=,tag:hwumITH28nq0z5i4Z4FvcQ==,type:str]
-      provider: ENC[AES256_GCM,data:Sx2HqTQ/,iv:DDhq7jVZdgD5MAFFeSt6KdsC0FSrpQWA+gu9gOg6Iwo=,tag:kOnrbDlwGLMrgKsF8hTGdA==,type:str]
-      key: ENC[AES256_GCM,data:itycutnIMsO2lb8M5UysL72Iq9k=,iv:E1b1zBGfew3bf72OxLoKQoosgPDqy8my1JMWvwBGpcE=,tag:iJGrMKbrqTD5NHYWvFxqxQ==,type:str]
-      secret: ENC[AES256_GCM,data:mOpFm2yKl1aBu3TcJkO/Gm69XQh36le4ohsueq9t58cIHDucrksBmA==,iv:zW3zde+XcD3wmJcOKZ0lrPCBA2OPHoF+8/T+6PJpP5w=,tag:27ssfjvp2oX9yglNJLalFQ==,type:str]
-    - name: ENC[AES256_GCM,data:8LPw6LKoUcMf,iv:/jNSUD9jcGxghxexh5063Le+t+xAbirHlc/1oG3JCq0=,tag:OA1LpeMNRi+Pkhr4cdseAw==,type:str]
-      provider: ENC[AES256_GCM,data:aqLm3vOS5b+cDBjnaA==,iv:/3teGaszsJEo9ya1Uy51xAxPC4zyMO08qm1Ag6sFb2A=,tag:iByKJjRGQcEiT8Zoe4cRnA==,type:str]
-      skip_local_2fa: ENC[AES256_GCM,data:YZMe+A==,iv:VE8i+fA/xbv4Ii6vDjsclbuzHp9lva+jOBIYE0vsKNA=,tag:OXAZnoa/zISVBmhaojVB+w==,type:str]
-      key: ENC[AES256_GCM,data:6mbjR2k=,iv:8zRBVFyF7XyTA96yfaWX8NtOC2f2abbyv7qUzizB+dc=,tag:BeBR+bijZFHepscsXJkoNw==,type:str]
-      secret: ENC[AES256_GCM,data:vM4LI6MFwF9co+qCzZwl+q7pKDtIiMj7jMwckleijtVOgnfafrMTKZsA4LbeKICm1p3kuj1qmdRzDgyCzGyCejwMwsd8Yze4gMKZb6wfnhOhaj11Yby40+xHHb8ogCzPfAH7TkOi+99Y2yMpfiw2i5UZvQK1oTjZLzMfJ0fK15k=,iv:F01nIJjOiZCueOaIa1p//ND4XA1wvNow9Crq73nHUVQ=,tag:KifiHsOa49Iah4SW28YMVA==,type:str]
-      autoDiscoverUrl: ENC[AES256_GCM,data:k1O5weiok0ybMfEwDfEaXu76AvUmgRHz3vGy5bShvdGxf/SQZVJJv0XntF9ifbfhYRKzJCt1BpVGkXQnHhMWntkolLUsv/r6OKZPjpwOtEozhI95fcjax1Y=,iv:2LFUB07dWs2tcCSibhoiJ8w3NoPMrpfEhAqb28TbdxY=,tag:iJtqPNf8nsjMVzF2Du+DVw==,type:str]
-      iconUrl: ENC[AES256_GCM,data:Jr8Ej4zfe319HX4ruXrDSB5ZuuEfbuvEeIVHt13E7xx3NvPF9qrOZip40hmAR7dc1nW5m6aX6GxP5gbonr90wZRCf8HA9A==,iv:ykfp9vlCZnjR+7H9NTokW8AOr0EHEq6vkwWDSMYiU5Q=,tag:MbX/8yRj6XwBgU+MbylAKg==,type:str]
-      scopes: ENC[AES256_GCM,data:Lr+kdYTfCVQE25ZGeA==,iv:O6OYdDg/PGj0p2A9vjxPaDBRtUctS1j4TO/5V1gSQ88=,tag:tlDUKeGRIL3Rqep/mpdRZQ==,type:str]
+    - name: ENC[AES256_GCM,data:AAWkVRB8,iv:hNgMigBd3+AD3LbGo63++zz3GSLloOsx76NhQaDMgQ4=,tag:xi1A6dr9wnjOfUOphUZjYA==,type:str]
+      provider: ENC[AES256_GCM,data:j0X9Tr8S,iv:KHya7MLljN21SG1T1I4ex3HhyX5kPWS1x+PzVKuMX08=,tag:qq0h8WM03zBQTF0LPxVttQ==,type:str]
+      key: ENC[AES256_GCM,data:BD5N6jL6hEtTf1rB3APLSdSC24k=,iv:wx6WL3+Cyl6PxE5ghJJ+CqNsu/NZM31LzGtrvlXae7o=,tag:kyIRqv5vohtMMikO6WF0nw==,type:str]
+      secret: ENC[AES256_GCM,data:Sb0OTFlymqePyRXxt6GG0xYZbjriOtQj6R2wwzBzRZwlRrteMyvwqw==,iv:F0N4uFol3ZJMlFBos+kIXN+oNj5d6ISslFbpBlV748M=,tag:tz+hMQiWCUpnp/ea7j2kjg==,type:str]
+    - name: ENC[AES256_GCM,data:xxpPPX6REGw+,iv:xHmvOds6K1sLLO9iNTRhNe7m0OfMM9+dLUJhF4IN6kw=,tag:IwGcBFf4d45jPoJmncl5Pg==,type:str]
+      provider: ENC[AES256_GCM,data:29yi48wJpIeNP0cAUw==,iv:ZGL8MXlVdo5/w8i45c4hc2S/a3bCEW6a8R5S8VwlKRs=,tag:K34SZqj2jqlNHg5Jq8Mj6g==,type:str]
+      skip_local_2fa: ENC[AES256_GCM,data:p4mmhw==,iv:BV3bKT5KYLRR5DRLhSDIaiWJwgHWhrrMT1gYlE5A86s=,tag:xrypSlW7WoxCgQhYaZQ30Q==,type:str]
+      key: ENC[AES256_GCM,data:pSLyUtg=,iv:8MaOGxDrR/oVw6HJt4Boz9UHzG2WGIkgWA640O5kVnI=,tag:5uCvJvLg2O3vcvEpNBIlYA==,type:str]
+      secret: ENC[AES256_GCM,data:J5FhHgYfXwT5nOVCGKIvmvUt2NyQt7iVZw1IyjWX+pRYnenlpTNHEvtSzYdhqfsHtBS+/BF6Yc6myZDzV9jxkv4+wc5hGJ+1YuVWlRALvteqo9KK6tKAbWmCvofP73P4jjp2G/C1S+RP+UGWaQaQF8PXtlKO/ddxOWb2y/5PU60=,iv:7ltciEByDokTLvWsuvgqovquv6tiYwRjZwrI/DpWIuw=,tag:/SO2wYIbCAkUMgqw9VK+Hg==,type:str]
+      autoDiscoverUrl: ENC[AES256_GCM,data:dr3O8S/CRiH9FJjJpiLK48BV2aAT1jkBk6d0A533Kk2hgplxhrS93Rprml+RTYQhTFjmPU99NyS20bvNSMeLn69XwO/bPj1yiR8zj6eTsZcRtUktJquvwEM=,iv:6DpmICutXnG38brPhzfUO9h5Vnbf0P4B0JLPvliMbjk=,tag:sFIun5XlMsgc0yAGjg8zbQ==,type:str]
+      iconUrl: ENC[AES256_GCM,data:Obmyv6YQATSkuty2EdYeWEccn2hXojK0NAmaqCwPgEbCp/PSD/7jucHt2/O0PjwwfjOPbyx4360KZNja0jAbJqRA/ErHYA==,iv:k5/ZszN2rW49PdyiqxJK1vtBo++w9M0aQyqDf+N4sq0=,tag:Nt99LOcTgLGKwOeqmGMExg==,type:str]
+      scopes: ENC[AES256_GCM,data:G3puTpfgMR1LV5GBxg==,iv:yxp8pLm5bsTIojJkf/QHtVGGYMBXtJylfMTNB5rO0i4=,tag:gh1qpCbaUdmsRiim0vZ7Bg==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -37,14 +37,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2V1RNMmlZaDJDMzBXekF1
-        YmdlYjNBTEhaYU5YYTZ6U1pHckl5YVZ4WVV3Cml5RzkyeHVCV3FlbEpoanlZOWk4
-        RlVoL1VISDEzODRaYUs0N3JldXE4Q28KLS0tIDdqK3IxcHpQdWJoNHR4VCt4MVNm
-        M25EVzZsS21OajdEKytoc2VBYm5SMU0K1wvfQOqBbAPyh1SxiONFSFO+a591HG/2
-        DJvP643yXIWBOiNTxjbQDygYmxwk9GbFmGlVf0pQoUEuH9D4SgCwJA==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUeFlhQXM2bktYcjZTTjlO
+        OFJ4cXFCS011NE9uU1RQdGtINVoyMWxiZWdrCk5EeGZMZitQZ1lMT01mdCtCL2t1
+        aVFPdDl3RVRTL0lSak9uVzZacDJyZXcKLS0tIE1GVEFycmxxRVJ4RXV6RVQ3bzVI
+        clY5Q3ZlZkYxVDRMZHFLUWorQzU1MXMKoC2KOVv1i+s3cR6F//S3/FgLj8m3F+GG
+        4ne7Ch3X3Csl9P9x8Go+zf2Or8hDIwQSiWBNdC0U3qKMY5s/daxznw==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:Mel9AWdHERKt5xsDI7KmgINBCMAsfYrs/jgwQol+UVuiFXU73tAFeUqOZRDFwuzKBfxQExv8etBlgV8Q6Pdg0VojBLLz75BYZdqz5RD1VnllJ7y5/jCwCTyTbWxYQZpgj8dle0KA2NxoMraLIQY+gnvunqlAcIJgPZG9KY1UB3w=,iv:Nozpe5X8kwSrb2sturuCQBA8XhEQSI5nLRzBuCDFfz0=,tag:8kVcjwLDNTBmvDRPj2ELyQ==,type:str]
+  lastmodified: "2024-10-01T10:24:08Z"
+  mac: ENC[AES256_GCM,data:XHLCW04cKbqolXnUN3GhqfZNXjKtMp38OarMCJ9k0HQfjt7w7wq44JpzaTNkMN0oa8oLe+EMQyjTaJSwECXgTnkTuB70IWtPPPcdkF/V0iKZIC4e/rFrGPyh1cgHcsocl2gK0ATcdv5+yjo6vCVssba7O8em+H0gZ9Ty+/InhQc=,iv:Smo/UHXw9+EmgsdwBhDWGDIrVdASg8YihfIp+h/POvw=,tag:O4SMZkGUX1wt1ZEokQEbMw==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+  version: 3.9.0
--- a/values/badhouseplants/secrets.grafana.yaml
+++ b/values/badhouseplants/secrets.grafana.yaml
@ -1,23 +1,23 @@
 grafana.ini:
-  auth.generic_oauth:
-    client_secret: ENC[AES256_GCM,data:EPEO9WcCA6zIclGNDzQ//oezgRtd8d1o6qC815rDrjViDzSEJziyEw2i1glwyPIilhuLLqy/Ad9ZaBjqKqjw0fHTnr/tPxZ1pAliAxWmXXlkvFi+leztRNwz4rS18Rl+eLRUFGBpl7Qp1M9+lOydko0Kz0gxTSwo5PKH82l3DQw=,iv:lb5vc01pB5jm5kz4XMqpiQSnctFnbQzCoKa3CgOS1fg=,tag:p2YV+WzlfI0LCk4jRIUuPw==,type:str]
+    auth.generic_oauth:
+        client_secret: ENC[AES256_GCM,data:HZ7FEe5zCU8wBVqCNtWZbJmJOp9QY4/z0B/FRPm76cSb1zsmbDkPS8dKxF8SYYtR+v1UWdCfe8NZp0RtqV6MQx9HQRMIHwwbHQ/b2BvEs9Q/Q+V+6/uwdIMWYu7+uFwVs9c5OUdRmA3jJgGy6mV5ZBxdiBI6NGHJk4WpT6AXn+E=,iv:o8DHlwqywfyr+FHTh8J0N67xixX2dIgxgsOYYKiLAFo=,tag:unKLJUZbI11pfOJjXgbu7w==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsRDJMTUJreitIWFY1QUl2
-        VVNaVTR2M3UzWnZKUzkyY0NQYXFvQnlHOFNFCkwweGF4OStJSW5iSEh1K2tjd1JI
-        NFh3dlp2TURtaUxQSjlUVVJhWGdRSzQKLS0tIGtHN04rYXNwc3dwU1kra0dVeVR1
-        WmExMjZ2cTFYZXUrRUIwbjlRU1BzREkKjlIgwXsho40hSqAjtBKjz4MihEbXzXjA
-        H2IqLAlQpReQ8WAI9/Pd4VB3qLXbszVfdP8bGLyEUFNl97wbOnjdZQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:jXBIOhff4579D8Blvrf/673wpICMehRAqm7tIpFPsNu/3ONdJlrh1+bVfxhb0K1ncb4GNctPURuLUuaJ1OcA27KCy7M5qw9j18Pa4EPIqjeZW3UgfELmD0ie4Wx0XGEak7LEc8HmhX2KcFV4QzG39s89QhHIqy4ZlzAVJ6EzLsU=,iv:AXz1YPUdm0WYFP34XgreyMgo2YhIJj4PKLAE9Q3Xgl0=,tag:3QXtZsj+PCBvuhnoB4etig==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2eFpXVi9PeWVvdlQ5cEJS
+            Yyt0L1F6UTQveVVpbXBnZE0xQ3hsb1Y3NG53ClRncVFtRVo1UHZjaDJyWkNoK1hZ
+            OStkM3ZmOU5SY3hFZ3lPOGtyakZBdlEKLS0tIFpuZVdMS1VVRmg5MDRIVzhISTJs
+            MUZJeDdqeUJrTVkvZ0NKZ0tvd0doaXcKZ2b/Gatfw4GlX3N1FDwziBvTrM3g+asd
+            92IVTZ5BGht2MbfcKAPJFcMr0KQKo8rVejDvYunkAZB94ICNr36MVQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-25T11:05:53Z"
+    mac: ENC[AES256_GCM,data:m0JDoCSmvktNHIHb6DrDiB7Zecv8wwn4y4UN51IHnYQRuL5qdqHq9ntWiozDy2KQO5Xw7bSHB2Yb3XN5Byt5cUy7I3BIYYn7MiQjIzOWcjIJJvN2YzDzLeA+wieizM5anEgwCuhRsvGUkWs/OUylHOaSbX6ma2fBPtvMqieCa1s=,iv:lpKiI9y8AQfhfWc3KmSdyDEFks+i8FeZ/QedC7Ai35w=,tag:VhRsg1FIct4V1+jSxBKmKg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.iredmail.yaml
+++ b/values/badhouseplants/secrets.iredmail.yaml
@ -0,0 +1,25 @@
+config:
+    env:
+        FIRST_MAIL_DOMAIN_ADMIN_PASSWORD: ENC[AES256_GCM,data:dcrMgiX2egbSllo4esVRcJ340oQBRpVkRA==,iv:NQpe96WmGRAnLmeAK0VT/zdJ8MS/8RfAJIwNsL8alHY=,tag:CjppOC4SEW7a9u4Q2xlm8g==,type:str]
+        MLMMJADMIN_API_TOKEN: ENC[AES256_GCM,data:OxsD/v9ACQuoyHrxZmIdq8TUqmbWCh8GhGaSQTBGfS+vp+v2rdfKIm4WTnI=,iv:68Vli4aaCOiFixooz5cHABuRLuOrw9/HNpBNQzVwAkg=,tag:RXBXFzGCOO6MhoeNhES/+w==,type:str]
+        ROUNDCUBE_DES_KEY: ENC[AES256_GCM,data:RZni9nCThb9xzzNrN6JTQsLetnMB9cSo1L7hwLERnbA=,iv:L3r0I8sQkoicwy6odvuF3HfIEDQVgnOtn/OMpF16Dis=,tag:ZFaoIywA+FJ/GHAZAGjU2g==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZlAvUXJBdzM3RjJMdHNG
+            SjRpSTBYNUs5NEoxRFdLZDN0a2IyQlp1ODB3CnQycFk3SkM2Ny82U1RZZmE1cWxG
+            TTQxUzhWRWlPQmxYUnN5dVJpb0FWa1EKLS0tIDZSK1NvSmNUQkZucFJCM3FiRHlI
+            L0VKb2JCc29XWjVkODJxTmxPZXZJc3MKyDy9BH0W1OgEONm3PLCskOWtIr2YW2V8
+            3Lc0Au6lLYetVCvSB82/uylZBHc9yQ2rNdLBUrm1zyDZJW/BmNpVLQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-07-17T05:06:27Z"
+    mac: ENC[AES256_GCM,data:WP9F1N5ZTYwJk3UfiSwf/QJHp06pawdbu6kUBOMTq1tWOZ/zhCRe0vJzU7alUxhw1RZu8f6tUNeh6qXxt/4mrSuy5dRjOKOJyRioIcRCdg4Z+2jVycDAA2VlPB1oDQj0CIdrW4hvM02KZKxcOy9KP8iRQaYqLlhvWrTAQZ9HAIA=,iv:d/wZUbaU9EkBPRIxqCDDXpp8AMjjHnXxej726q37Ni4=,tag:AC4FvAFBTYOcI02bFD+MHw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.longhorn.yaml
+++ b/values/badhouseplants/secrets.longhorn.yaml
@ -0,0 +1,26 @@
+ext-secret:
+    name: ENC[AES256_GCM,data:Dd4Qr9Yg3JMYCJgbeUoHHw==,iv:COAFXS+dSFJ9JdQUPJr6sr7vzjdvjWU42Ml1aR980hg=,tag:u3ByF0nt+rRAtx5PDpwACQ==,type:str]
+    data:
+        AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:9FvxD2dF,iv:1XwnZV8k0UUvH1ooSb3o5WZbQia5qaGiamJKG99r9n4=,tag:dRtnXUqbFdqkrcJKfs1WuA==,type:str]
+        AWS_ENDPOINTS: ENC[AES256_GCM,data:RSKfl2WGh6pJaQcmfg92QMEjtH9NeTk=,iv:yxAr7M7WPW4Ry5+VevPmyRGFPIzEwtcdEOlbSkHDiTg=,tag:Qjgpm8vsXLpF6feYP36sDg==,type:str]
+        AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:1ryLQn2uG82w06ANVWY=,iv:ab+wENEkReJbWv7yluqs5f2pMXJi3njvyWgM3IKLIgY=,tag:p5CsKKI450H0voJdvQiFsw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVnNUNUpBUWFrVmFyV2VO
+            V3NSMlZ2ZS84Mk1pWkwvQ1NOeFNodHVRMkNVCldIV3V5MEpqZ2J3VVhubFNKTVhp
+            UHgxa1pjWHA0a3drMnVNNnN5SVVnNTQKLS0tIHhNWXJ2YWFQRnh0TXlPZ1hYTllp
+            ZDBaTTZIWU1ZQmd1TVBKMlZYbEV2TUkKjp0AgpvKscNpouIhwYb01x+T3YNQfMK2
+            EOEZNdcNGQY33BMwSCwEgrBfWWpLECbsRswOXNTVC1D3xB1rfwX9FA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-08-05T07:45:16Z"
+    mac: ENC[AES256_GCM,data:MNSprThcVhc6FtfQKkG9qsh0zr6G2Xwv89GqIAFjD2/U5DY3ESn43vm6sWOyvFRcZ8KJNCAbFlFBNTKE8WMlJno/n7+kcuvL+RNDy8ZX1o14bmdWunQhc0/JTtoVvGkLIWeG7v5umXbF4hsag8gGWk/75joaxe0yExUgAH5USoU=,iv:4iOVJJZcgds76SryTlsR1r1CKDHmeofRTTGT3mFE10Y=,tag:mGtlKfWyB0MSQFoue6KCvg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.mailu.yaml
+++ b/values/badhouseplants/secrets.mailu.yaml
@ -0,0 +1,38 @@
+secretKey: ENC[AES256_GCM,data:2C/EqqjWummBL0sY/ae+BA==,iv:wjm4+scr3wFUgXpol+EYghbW6QNNPjG/Ly4MebVqWu8=,tag:YndPQnLhZ14gRqonk4xoeg==,type:str]
+initialAccount:
+    enabled: ENC[AES256_GCM,data:gmF9JQ==,iv:FE39Ygp4f+42llF5nGcQhXmO0FwPCjLQYlN16fGS2c8=,tag:C2BfQ+gu9OEEUeIRWYgNcw==,type:bool]
+    username: ENC[AES256_GCM,data:0gRIKqZDUNM=,iv:+3HmKBgR8JdSKQl79x+FLVeWZoP9CZWAxAeEUoYaIAE=,tag:afGcj8YwcpIEfHgz4nmvBg==,type:str]
+    domain: ENC[AES256_GCM,data:0SA71hSApv98uXP/fYFNGkJA,iv:LzQf1xoyHBIzz3Dlv2HYwJlPxU3xyy0m/Jp9RzeJ8TQ=,tag:gweJ4PV0eooqKKbb9aG7fA==,type:str]
+    password: ENC[AES256_GCM,data:+qLfSVDzhWYB19lt6RzPnXN2qFJAAUGeljwZQoCl,iv:GG/vcep80OGQhL4TL/33RYdsZ91Senxoeomt12cNvjM=,tag:fDu7NMjotkiIYKiVA3hUtg==,type:str]
+postgresql:
+    auth:
+        password: ENC[AES256_GCM,data:8miAR6Z7PB01YtzlXJ+lmMNhVMD9GAwp2C8yUh1K,iv:7EQUwcDYNDHWmxWgZx3D4XOcfHfDmljl/TUaqQw022M=,tag:y+Z7sP5MHmjustVgcFhDow==,type:str]
+        postgresPassword: ENC[AES256_GCM,data:FBsPXyaLACvCcPiKYSidzanPmDSuQm00Y0VVGgFk,iv:IzCwXuFHq1dNO1v43X9LeaLL6WHyX0VbHKMkHarzDLc=,tag:dI7K0RpiTS6CT1IAP+rinQ==,type:str]
+    secretKeys:
+        adminPasswordKey: ENC[AES256_GCM,data:bg+ZALMVfw1KCMoHM2dJMl4nrXHCWffOfrEGoacX,iv:pR4ybyQdsHa+4l//fGlOSbC32W8D5N3dpbV5zAslCO8=,tag:Ws/qcvr9nRoelgY0j+LWtQ==,type:str]
+        replicationPasswordKey: ENC[AES256_GCM,data:hISKDJ7aX/purQqNitCirYLEWMWjsI+UXHiNZBK/,iv:+EcGrXZIFvXN+vHDZyQLbD25XHf9xRDmkMur/5cOQcQ=,tag:Z/HCw6NblVy+17i5UiZjAw==,type:str]
+        userPasswordKey: ENC[AES256_GCM,data:Eo3jeY1rnrqe/Onk1Lsp/oQN72yS93tl21srZ/0b,iv:JdvAIpfIhaqPNO1ffc8rN0N6QTWfaFfCTpbuoXVgrR0=,tag:mjwsTPUh/Gw9UL9fOyAKsg==,type:str]
+global:
+    database:
+        roundcube:
+            password: ENC[AES256_GCM,data:Gj+fV//U0QG1SLZfGu3Ya/UVEaXAhJ730A==,iv:8qwI9R+NkvHGhGr2WBMiZOVzIMWnUMu6stIVvrPzQqw=,tag:eLx/hj++cVk7lyfKRZM7PA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzUDlSNEcybzhtQk5JY256
+            bzlsU1B0aTNOaFV1NE1va0tnOWE2cHpTQzIwCksrRnQ1NjlvUERJN0gveG1YVDhP
+            aGZrSVlZTG1BMDMzQ1d5MncySnlGRXcKLS0tIFNOQmJpeUNUQWVJYWM4SWc0UlNi
+            OWErZ1dRazBaZE5sdjA5SzVYZ2R4d3cKRPu6CwvAJxsmhPYJEbfuOmBVJ8I2NGFC
+            6njQe1PrSbvymUkdn9CCJr43iLjDw1TWKbR6CLSrt9HbE0UGqEP4og==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-21T14:32:03Z"
+    mac: ENC[AES256_GCM,data:qsF4gGUbmyNU+dBRMj0FO1njv/pNA74noT8qT6pmq8qniuAxuyn6FGr6HOBVtJmitCH+fZIClw9nk+Gh3hUAX8YM1m7Ymx0nBI9cfP0RyDVHiooHyWrraEryXIOtSK8vXlCO22qJCwPRrU7nNd6u1vfQTq3l8L9EV4ImqLYbZZk=,iv:G3k8upjBuFhmVfwWtcebu1IhzLMRM/yOy33CzMM8MPM=,tag:AhMUuVZmIXAIYb+6qAcwdg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.mariadb.yaml
+++ b/values/badhouseplants/secrets.mariadb.yaml
@ -0,0 +1,24 @@
+auth:
+    rootPassword: ENC[AES256_GCM,data:nE9nrku/RxOBPrYiqMVcpKEbE8s=,iv:nUZGeUM7Ck0h72q5bPjH9UB3zAictnmOtsLQtNTVrYY=,tag:vm1DXjcDLgCnN5NzLRlKHw==,type:str]
+    password: ENC[AES256_GCM,data:4+moX6z5/JZNEM1FFwIudI3GKQ5b3+XoMw==,iv:Vn39GFekmWjbloTjkwuQVC0SmO37yBqNhUM9wHZS+H4=,tag:MTUv5GBnYprL2iEOhppXqA==,type:str]
+    replicationPassword: ENC[AES256_GCM,data:zP5+btuW+rgmhQoeOoaUBJ9rl2GpOhWmTw==,iv:GZW5ktMxg/zb+4ic8T6n36RQPkQxr4K+PM4DF+8gGF0=,tag:/GOK9ERmVHIE+Fv7UsXFLg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFYjhDNXp4bEZHL0xJVWdq
+            ZjJucFN1L2Z1K0xkOFRYWjhLYmVLUXdMV25VCnJOY1k3WXVxa1dFd1Btd2tJaTVK
+            NXZSaXpwSk1VaW44MFhlNzl0TzVKK3cKLS0tIE5oUlVqTlJoZUxZL0RkdDNmeHlw
+            OHcxamZOQnFlZlhOcVVNNDMzc2RlN00KSCeXWZUeGCPZ1MIJITojkpJSBDF228ll
+            Mq8DX7QS7BOsw7RcEq3omPV9hSvy900cWDNSeAk7y7hHvWFZbGfVcA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-11T15:30:38Z"
+    mac: ENC[AES256_GCM,data:wSANpRClDCeyHsFOdqrT3hyG8msqi5fl9DfCTxHSmMx9oOZ4x5Q3VX3nU3qg+M5cRKuJ9DAjpvYgmyTPWlX0RNAiJr9ygNW42H2lnU+yvdF+ZNHL6WQGQJPC2KTEPXGk5aUav+FA0E72D1yR6BrKpnR3OyUeltVOAnfAl60AZFI=,iv:0kHZs7ZiHzWIgCpHTEeWhP6B1uBrhOjw2/pm80LIlgA=,tag:B/sKy2TZEKfI9yNI/Tzwig==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.mealie.yaml
+++ b/values/badhouseplants/secrets.mealie.yaml
@ -0,0 +1,21 @@
+test: ENC[AES256_GCM,data:Z9uAiA==,iv:yRpujiEbPbMSKwwP0MWqUMCNPbi0/XMc/XBVxcxPj7g=,tag:o3mM00BrPHw/CrkudMEJiA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBadlhiWmx1NDdrSWNNOU5J
+            TTVja25kUXdoY1ozdkVha1dkSFBUL2pTM3dRClYwNU1xVWhnMi9xRDVkcytzVHJ0
+            bzNRSUNXSEtTTGdzVXBRcnNHcE56cWsKLS0tIENNbDZpOGZTOStDUnczMUhNUzFT
+            VUFuS21YL0ZRTlJXc3hiaG1BMlJ5VUUK5A5blBgzkWLMGA84SGufQ+dlWn3dQme+
+            wNnHg8bFT8BStoz8hiJQDS8yAJNed1OToma1sKMxsPZgytn7p2y0rg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-15T04:30:53Z"
+    mac: ENC[AES256_GCM,data:tKEz7m+YIfBLD2VQXbEPm7JjBi5Oxf9lx+ECiFZiJmWwD0Sh9edSx7sT+sxgGCaPnAB8tKCGnRmgBYL8kxtptiNW9X8Go6L4RnR5WrqKB86D7hdoGJj3clu3NpbicGNvaTKTv46dKgANEL1L/ykNrEkyeAxaXTrZwpScGFSzb3o=,iv:ic33IlLS2fCcMvT7031ndoZ1knYYM/OVEcyrEa2i4Ok=,tag:9KUyUGFl2PzNkHeZJ6Z6Nw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.minecraft.yaml
+++ b/values/badhouseplants/secrets.minecraft.yaml
@ -1,11 +1,11 @@
 minecraftServer:
  rcon:
-    password: ENC[AES256_GCM,data:WEDxz61E0FT6qsk+4n/J1U6StnISu6qCCg==,iv:MGD1ONaSkbBoTgR1G7w/prefPHpNeoU1XkyTZCr3dQM=,tag:9kif0moX90lglV8zLNOr3Q==,type:str]
+    password: ENC[AES256_GCM,data:lZ2/ZXHCjXEe3VlqzyziGWRi7CWn8jhaLg==,iv:hWQy35yoxZOfTqr3Y2x7yUTd0nzLBpjHtQWrdvHYD4g=,tag:QGMkDh2q8JrBwq1wRJ/2nQ==,type:str]
 mcbackup:
  resticEnvs:
-    RESTIC_PASSWORD: ENC[AES256_GCM,data:f3A8EsUfA8BkM/VtW4HXsmu/vkRhOuvEVls4JUFg,iv:+svddzq+ILiMoijIGdnNVJpBD33fw2PkfzSeoQC+Kkg=,tag:rUyat/2l3y2fB+UajG6j6A==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:0flAJJMncGcpq2A2wds=,iv:4q/3301l3wR9m1dgJNN6Yqkrlf9gfENivLtQ4s4/BLg=,tag:LLgqNyHqdVI5uBOEKlK5PQ==,type:str]
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:H6SS4ogc,iv:nYYIyJWjnhU487PzVDD+1xbKd6NatL990gWgrZFNw88=,tag:/yiY2bcmOVW+PjALlUXS3Q==,type:str]
+    RESTIC_PASSWORD: ENC[AES256_GCM,data:NVwBLhDqZD0+1Yk5mr48Z491CMsfQGzRR4zQmRgP,iv:N60ZtRRxRDH8WdzQUTt6v3TP/UAiibyqCA/Y97g770o=,tag:Lz/lEG23hdva8TWgYxBA7g==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:i0MErquBzs4YgePKfSI=,iv:VwnGxA3PLkILQSbyzJ9XtSzWepF7RYtxnvyhZumWBLQ=,tag:AvXdooV5Cn7d3kNzt2ptSg==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:vrpIZIrU,iv:9draRN4qSnhGLKbndWPW5YR5Tr93f/37/x+2G3rIfsw=,tag:fks0UI/j04MILBFRQGcfaQ==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -15,14 +15,23 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2MFByOEpYVkI3TlJEbVRi
-        Vmp1QkRxY3V5aDdvelpHbndxS25QTTk0NVhrCnJQbEVCMFN3WmhpSWY3RXVMaEtz
-        K2lZMFlUSzZ5NHRSeHNXbWxVQ2RNTXcKLS0tIG95Qnc4VHFpL3o3L3FieUVIWk1W
-        U0FTYkVLVHAvcWcrdEt4dHo3bEM3Z2cK3OOXl4aGPF43umfNFPIQOgwxktoK9Ppz
-        Xj/EQlAqUAvEcs2Mfe1lWymHyK6HpZSN66jTf0a/0kh21cebVzwtnA==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhemlNcEZLNXBDZ3RVcHdV
+        a085NzY4dXFUNFUrTDZkTTFJa21tWkVzMzFZCnRlT1hzWEJhZ0p1ajU2U25WTTdQ
+        UmdDei9pYU1wcGlLcXU5ZHNhSnluR00KLS0tIG9tWWhjLzFFbGJndXJIbDR3OHNn
+        b1BwS1pSTUFLS2h6MlR6Q1N3dHJIZ2MKEpZIcVnlrD3FrzSlLpIxMOGetS0JR0YX
+        pKSkwSOQf6HAYkYzXhcZShQZxlvKkrT9+OmEMAl0kNtGk19mYxuHdQ==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:21Z"
-  mac: ENC[AES256_GCM,data:7NgnMjs9R/tk+KzpY4A8d10V/ZERkdSZE/U+xq5k1OLeQ8P/Di+TI2LNSPZp4+qtG0UNFflVtBniZNJwjcg8tqLiSOuWmHJgc4C5CmEyESwL7igv5DZ+qfImuepDUJyJEvQFkyBISqkyKvJjBBoFPse1TU6EF0lOSNdBYOJ4up8=,iv:ss1VF5vKnaIt2r9PaT2vsy3zgLAH18/e+gX6YU5E/7I=,tag:mkvZGTd1ZRpaBQwoWfVmfQ==,type:str]
+    - recipient: age1fwhu5m8df98kk2ldf36z24t9vfcz3875fd3uzecke0yv2qqts9dse0jqrn
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRkZoS3h0UFRRRUJ6bk5z
+        cWpQcVltelJIVWJZMkw2ZUtwYTdXNXk5eUdJCkpqSTQxVGJnVlpyc3Z1eDFROGtv
+        emJBcklCZVJ4SDhqalBGcUZYUUR2Ym8KLS0tIEQybkZaTmVtb2ZaY2Z2NHpmbDl5
+        WXFsdGYyMHY2eFdpWm5TTlBHL0p0V0EKuzwRGDIGpbqwBa/95/dY4AqoZDDwRBxZ
+        I34X4o4DLMwvQYuYDB8NmH2QwAz4pOsmFKfNRZF4QAqyeD5diac89g==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-08-03T19:16:36Z"
+  mac: ENC[AES256_GCM,data:/qsVEOLbarzykIPsX0eqQWZcyyWIEZQILE+Qpt2d6XFHBsJ52KUD1KWL5USFOA0qvTP9c4EV9dDfAsXM+VO1jpm61/SZiTAtsTzI+JlY7x+6hqTc1cq0WXZgn4xQXJ9FKwrkCVL8HBGtujg3qb8EoeYaWpuHf3OCyJaAsKTajgw=,iv:8qCXGDQtf+uPUq/qe/koodf3CuJaYf2tFyjQeYTWJ6g=,tag:D5A7noPWEnvtoVTNETqJGg==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+  version: 3.9.0
--- a/values/badhouseplants/secrets.minio.yaml
+++ b/values/badhouseplants/secrets.minio.yaml
@ -1,50 +1,44 @@
-rootPassword: ENC[AES256_GCM,data:CtIVMGYDrJ55wS6ZfLipEur8VeM=,iv:Vz4o+1JInlowgKwYN1bI9oxhTm/Yq8B5uhxIBh3SZ10=,tag:xyH66UMou4nalSzGps60Kw==,type:str]
+rootPassword: ENC[AES256_GCM,data:gvRRtUdNK95j5Q0fmeLWAzYB/zs=,iv:ywFhwBx4jRl0pBnafbqrd0JP4vAIUm277H0YdCaDobY=,tag:9f2O1+gCsF7E/pAFCiuQiQ==,type:str]
 users:
-    - accessKey: ENC[AES256_GCM,data:wqwCa8NXAns=,iv:3oVMHIJ06q8OdpdufDH2R1CnV83ltweluMIFEplnoGw=,tag:1uLJAU0u+gMXHxBRbJ7mrg==,type:str]
-      secretKey: ENC[AES256_GCM,data:JnqlayhzqKro+tdDY70//ty9pg==,iv:2Vu8ZxKR3gMHQ99AbP5HAjAJJY4hnnXLtlBzShzgdjg=,tag:zk+tFw7sURDE+T4dDF3Bqg==,type:str]
-      policy: ENC[AES256_GCM,data:KOonZYe6MYk=,iv:o62YxxnBcpDhcnp6qrbJxDpm8GMzFl85QOw4Fd9Ask0=,tag:UBsKKdw5JLmOA5N9HHaVCA==,type:str]
-    - accessKey: ENC[AES256_GCM,data:hQkz,iv:eJrFbiYcuRrZYRtk1UN3fL4+48nNUEdIKcCqH5RUShQ=,tag:HxnFCMdIB8HfixkUvE+LGw==,type:str]
-      secretKey: ENC[AES256_GCM,data:R5uGEV5xGu2nCk4H18B7rXWyD+S3huHgig==,iv:WFjo+mHK5z6wXZZicezTlPwnlyU2mu7WljKz8lft9dg=,tag:P91sHa0yG88ka6fTIGrXEA==,type:str]
-      policy: ENC[AES256_GCM,data:qeqH,iv:VrawQSqW+rhiS7NXdI7l81fy+c6GJkxYyfLEHYfrayc=,tag:JGQ7uxkPPzH4uUA0ZicKPg==,type:str]
-    - accessKey: ENC[AES256_GCM,data:CSzeTJP1kUMA,iv:VoD9gDtPUTQzWCxXMVfMH55M+OCrOtTzI5SgQUpUCpY=,tag:B4pjW91ENd66sPbh3JOxuA==,type:str]
-      secretKey: ENC[AES256_GCM,data:rJu+Fo+SgZrGQ9nwEXih9gSZJqo=,iv:4RRUgquy8J3OODzktlGfIPwkVtCZa6SCsegYuTCsPyk=,tag:DjTKVpvzL0WlWKEVzAiiyw==,type:str]
-      policy: ENC[AES256_GCM,data:ZLRECDxDQcRQ,iv:x6qIPiRmIEdugU5WtFoErBbvpvS5QklaM6VzQlfSwcM=,tag:ZLbqfthesZmmfh4GVL+JTQ==,type:str]
-    - accessKey: ENC[AES256_GCM,data:JnhlVBg=,iv:TBkM5z4ZeVxHyOnsAoMmWg6I/V7f962NbzqcvKtTkBE=,tag:di+TL5BRI1hLxnBLoB3P/g==,type:str]
-      secretKey: ENC[AES256_GCM,data:v00te7PKaNYXJ9C7eaN+w0Etl90qCShjsw==,iv:zIYh3qoDXp9ZOMPMGEzye3eu4bFHie5W58WrXRZdxME=,tag:C9Pq60Z4hQeIPJ2iIb5YMw==,type:str]
-      policy: ENC[AES256_GCM,data:H4WdjEk=,iv:WY52cXnGTug6I/F+ybQOtHED2fkoSULpJa/rP9smacw=,tag:GfoAGESDyb/oKmPU2N+IsQ==,type:str]
-    - accessKey: ENC[AES256_GCM,data:F3Y/yMIvFPWX,iv:6qj9h1amuusGuOon9h/DKPjT7dk/akMVKMSLuKR80Bs=,tag:f2pEP3pYju2EbMYPZg+ijA==,type:str]
-      secretKey: ENC[AES256_GCM,data:krN8EIKt9cjd3EsKIAmdoSQ9y+IHy1LIeg==,iv:dk3wH2yY/IDBTEahYACAYsImNfiq9Zd697BcLvD0QzU=,tag:LYhBXJ1rml4ts7kEtfnJ7A==,type:str]
-      policy: ENC[AES256_GCM,data:sdydid+WXGxv,iv:P7plZmbxi3egYqYqzxc01T9/1edpZf1+RFTDCcezNn8=,tag:dLtii9vqw6s3lVXGO4KAMg==,type:str]
-    - accessKey: ENC[AES256_GCM,data:hHjmZVAqUlY=,iv:liIg6UHUUl6B6eyFuWog2yu9UwrCP7hRHj4RRCnFdi4=,tag:UeEmUEm9ky6QvCc2KE5GEQ==,type:str]
-      secretKey: ENC[AES256_GCM,data:Gw3TRUHOkxYKCLh8giPOsC7n,iv:Kr9qbns7RI2kTFIphwIwJT9M6H2pCFKs+dRbnFdz8Jo=,tag:rKEQ7+5wt2mqK7QjVLJR7g==,type:str]
-      policy: ENC[AES256_GCM,data:c8J+dTNf+TU=,iv:yWxrOJvuSFPByV0vDcAVZSAhsiE/1m/PdjsqdJQv+zE=,tag:aQwQThS+FeeoxJWdDGG4JQ==,type:str]
+  - accessKey: ENC[AES256_GCM,data:34UOVAjuQZk=,iv:hJfgCO3v8JJDZYbBnOU/jENrnKKVybrftqh2BDLLsCI=,tag:/pLuwmnA09fWBz0QKH/YGQ==,type:str]
+    secretKey: ENC[AES256_GCM,data:TMC5oaxXscBa+8zstIc8Pgwg5Q==,iv:dUNyYvOyFmwuoElo+CyZ2p3Fhv3119HSl/krzFUeHDE=,tag:F2mLLc/c+QJ+f9S5rxzb8w==,type:str]
+    policy: ENC[AES256_GCM,data:u66022KoFFM=,iv:IJNFj5PClOyKJawN9mXxcGqXHqU1XqcbwvLJo4P05d0=,tag:BNNmuSPb407nurtgXzy7XQ==,type:str]
+  - accessKey: ENC[AES256_GCM,data:g2My,iv:PiI0qN3U48u3Eel8ivY1sNNiEHGX2UgXitTCg58rGrc=,tag:kaJKPm0XIsHseg1AuUhWNw==,type:str]
+    secretKey: ENC[AES256_GCM,data:ZXyyrbgm7ys72jbjy/sYH1IY8Fkx5eKwEw==,iv:YJlxXejRn5L6vrdb88FmyQZyRmXuNco5I5ssxJ+3HyA=,tag:yG2c1ibTQGQNbF0/do2vbQ==,type:str]
+    policy: ENC[AES256_GCM,data:rI8C,iv:hBTRPM6I+bIByKVJ1NGZUtDiFf7v1LG4aD/Z+fjQrpQ=,tag:ULD0b4kBpr4KrGbIx7Lqtg==,type:str]
+  - accessKey: ENC[AES256_GCM,data:WUryEG3UsKcL,iv:3mPdzR52NnQrmz/cSk0NvzIOCL9dBvENnDgoOqSzIXk=,tag:YRHLkTwhbXEcN+Z8LAN9bA==,type:str]
+    secretKey: ENC[AES256_GCM,data:PG3EC4noUzclRu1wp2L60QipWbM=,iv:HS4Qt/1hsDabs29EFLd8CtPNCSyyr29HaO6UQJcVqWs=,tag:wCsCfUb6ZE4kDoI7ZcnlSg==,type:str]
+    policy: ENC[AES256_GCM,data:XbA1JS1VxqEg,iv:NzcMS3KlDxnMnb4LvtL/Y2BtHPgYdcRPfvfpNei6qfA=,tag:0AjhrbZK/wbISfv9CNPLUQ==,type:str]
+  - accessKey: ENC[AES256_GCM,data:av5X5Jc=,iv:0DjnV21W8kVnp8LXAqy2rcA6iK1g1ZogK66VfcQbfNc=,tag:2RkaEH9WRfPzlME9kmQFnw==,type:str]
+    secretKey: ENC[AES256_GCM,data:mv9dRUN/a93HyqojgG0Ct0kDbXTBNcWfwQ==,iv:S0i/JxnOaFS/MQl5qP2WNRGtmaif+reHu3onj0Z238k=,tag:NvnR/8RaiukX0xV+8Gpibg==,type:str]
+    policy: ENC[AES256_GCM,data:YPoC00g=,iv:Ezfch2+T5MRgvRHhnl29OGq4nuepIv7AS8EqQCz6xo8=,tag:1QGJiHUxUnqFDBkpHw8Nfg==,type:str]
 oidc:
-    enabled: ENC[AES256_GCM,data:iZ4KHw==,iv:tqyJs/qDfsn8hzGlBf7QZlfBpqImkSHgcDAjlGpleWw=,tag:v9qEwW0eOInDMGf1RMf6LQ==,type:bool]
-    configUrl: ENC[AES256_GCM,data:meUwpcosuZ30Q+T9XhdhDV5u8UNY6QeEjHvvjc+4+bw5prPz7UpvanwvY2kz87kxjh/Jbr8vBe5BqCF1av1QlkLcpIRzVI/L3Fh3YInsuvNSdR1NITNZCM0=,iv:Is0pXDLvGInFiwbYgAi8vWvMRnoGcWsYqa1PWr7ks3w=,tag:qwAP3iBq8oj7DCDhH3V5AQ==,type:str]
-    clientId: ENC[AES256_GCM,data:tXLjOTg=,iv:bZqJa1VIcW3ohIACqruhDz+W49AX03qwCS5JniX7FWY=,tag:kcd6p07kflnOs/0huSUe3Q==,type:str]
-    clientSecret: ENC[AES256_GCM,data:iR8vf8S4WYxRw5d26ROva1dWRa8VjbXEG6CT3TYiVTe0GJxzeihmD3kes7D2Ps94TsWChUho73GVlNrwMFyDLmC63xiwIRTYLsmxEjH2hxpRa0ickzzJ7yYiSm63TV7nMh87hq+ZZvBWA8W4NCA036uNSVNYUg5p/traBo7250M=,iv:28LxFf7QUtW3t2hVH+bFVSqemLozy43Ii2AJJ715TGc=,tag:GATqHiD3f+3sYtpGHlpMcQ==,type:str]
-    claimName: ENC[AES256_GCM,data:JPQZn+sE,iv:R7POgpEIk0l/5LD7viJ2CYpNNdGuUEUa35190UEzcgo=,tag:7fNRwiTx2s8ep8Ij2J0ekw==,type:str]
-    redirectUri: ENC[AES256_GCM,data:M4PIfUybd3oEsRl8NOnDaWqWKfJPady/n76RD/jYTwpQs2f7Yk4hKbAJo6HAghw=,iv:wGM0+MldvRrf5kJjepEIJcQwzr0B/NhHJaranZI3/4s=,tag:PPOiO85oYW2Y0wuZgEtkNA==,type:str]
-    comment: ENC[AES256_GCM,data:L1MieehjgkbmkzoZPfKcZneiDAc=,iv:/yHluidYeCmGZu2XiEH0XyC3/GIThFHQbTblmKWShe8=,tag:oAd34cZnaULR2wnLGyzMEA==,type:str]
-    claimPrefix: ""
-    scopes: ENC[AES256_GCM,data:JDHNBeFHOnU6atZ2bChXlcOKQdsvCWBNNpCQ,iv:jSUNd0I32fvDbaIE5OYvyXRu/cvYnPn8H0j5bbfYzh8=,tag:DmzMYBN5VFCejbLYh8En9w==,type:str]
+  enabled: ENC[AES256_GCM,data:OvHIQA==,iv:/Ekf/hcOQiMX6vUKMWDzqS1GvTXdE8LAOW6MdYnz8Sk=,tag:Z+2roA12aAYfETRlt0v6Lw==,type:bool]
+  configUrl: ENC[AES256_GCM,data:ZI01kc1RO2Q2cPbQIgoN62lZrgjH5jM2mTHF2WLtLO+7k5/k18LTlBesVLCW4ocaInqK9dgQCAtfcesMP6IEFcJhL0YmOdvyiQPM528hC0rbCValPK4SsO0=,iv:HKEz0hIS34tNnsEBXtdEWMHpTqRc9vdM3/ERPxY0hAM=,tag:dAsPFQkqMwxd8E5fCOHjsg==,type:str]
+  clientId: ENC[AES256_GCM,data:ifdcXPs=,iv:eq83QALMzSZsz6XZzzeQOTrYikjEr4e4jMOq/iyS2eY=,tag:3i6hTRlCaeMcRuImV87RGA==,type:str]
+  clientSecret: ENC[AES256_GCM,data:B2XczA/Ja1ic/6DbuihYeBPfyi9Pp4HAAAcSzTASyH3NTJjWstfhl0drTQ3LRYH2SAJmkwgA+OJaj7a8Xjuac5C7OTtMVq9m0BdYZiFe9G4Unwpb4Aj2M45bbgR7PjM9Q/nF7M5H4g72MaIz50Zity81nqnJhUanAdqOCqacZPU=,iv:SXXKkxABtvuUjETU3bcO1JdcXXNxUKs5xkdR6nl5Kgc=,tag:n4xxOPfcDMsrUM/TiQyM6Q==,type:str]
+  claimName: ENC[AES256_GCM,data:gGig+aKf,iv:lpuzl/Jph6wEY6qSFFs7DhMEzf4zDb2QQNGf84Mcdyw=,tag:RdE0fHO9S1XHPEEvL5zY6A==,type:str]
+  redirectUri: ENC[AES256_GCM,data:VSrfQsvV9QZnkAeknnGq6R0ZvQbJcCT3IZcoxXgV0+DctKKDigSpz5rjtpnU/mQ=,iv:IvLb95SFh6e+dvIbdaEmwjD6bQ1HyVDyMM773RYO3bE=,tag:g1AW/2hclPyjVD1UL5g1Ag==,type:str]
+  comment: ENC[AES256_GCM,data:jZrlWictBAa+5p+FKbNNBcf6tzA=,iv:Z06T+TnlD3Y8e1HxtkYaqhpxuBPqTJEgPM559MnIg/o=,tag:B1G1W3za7IVI6e+P15FShw==,type:str]
+  claimPrefix: ""
+  scopes: ENC[AES256_GCM,data:O5fv8qY45snUKYKBVePHzVeozzjoOEYKdIl4,iv:B2igPkg/Rs686KushjILiMgfr91KxE/TkN+YD3YYUUo=,tag:cQP48UEa/EYciijpMZIasg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMGwvaUl5T2swV2I0ODMv
-            VmZtUFJYQVNUc3hUTHZjOGxHUjhqMEdKNUFFCjgwUjhaT2hGQTRSd3NNMnhkUHFO
-            bS9QZDZtVE5oV3dmR1RkcVpPTVAvQ1kKLS0tIFdaNnRqVGJCMk5zVkNBRWN6TWNv
-            TlBsSmVENGw0TFhmemxmOXp1MHhseVkKwwpMCzto0h5CgE/xBX1rLlqhCzGRfOTu
-            JHvvn7OffKO0XDHBw/BRVJFtd9nbZPvlj/PNi5I7voFY8aJmxh5rfQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-15T23:35:02Z"
-    mac: ENC[AES256_GCM,data:C0/AtGBnOsnky+yGVLuUquN7mdyewemGcaXu39H81CCjYgPx2sgheIMW14FjzCbAsVazoWaK0/cReTl0Pzlgjev1C7C+BE3RgVLMP7VtlLhPjJO8Qu7YKCxS3QCUh0UqDq/apoZoxtL1sKRBvfbpTOHa9xYfVzPrXcIcxuM/FC0=,iv:t12yHlPHy3CW6btSaI4d1yeIb+Giwh2WzBaxhavf6U8=,tag:oMG2zgRps18oPUtR642CJg==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.4
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSm5Pamo5NmJJYW5qVlZJ
+        RzA5R0V3U0ZmUVlXa1ZUd0V6Y21hK1g0aHpNClRUeDZOaEw3eG1SeUQ5OFdUbVVF
+        K2ZUaGhxUlpOSkMrbHlwTXNpSjJtUXcKLS0tIHJnTi8xWVE2clJSSEhCblpMWXRl
+        WEttYkkwZmdRTzNYY1RLbzl5VUx2ZzQKQqIbYt23ASWjCCvBH/ktF9LJt0qPHIaR
+        Trh3IP67jfwe86brNn5ZoZE776OOr6q7I87eYImwEwFQezbrAJ6c5g==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-10-10T04:12:28Z"
+  mac: ENC[AES256_GCM,data:r/bukTjjTxEmg5YHNE9eM+Ur97bcBTSEfTHYPsMsysN0Y8cnUy/QykaeQFiaO4aKnRatMK2aNBqoit4uuqLLAAsU8fU/4hIyH15LgEk1kx2cGQCFl/nwWlm6cs+EpDhDjFA9rJIggjguLbZxcUr+jJK+d75dbWDcE9/yBPMH438=,iv:Nj+6Ch5srcyH7xcybvc6MOfaS3IkLXqwZAU7WbrTcsk=,tag:akyFyT16cr0HoZLTJUqMZQ==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1
--- a/values/badhouseplants/secrets.mysql.yaml
+++ b/values/badhouseplants/secrets.mysql.yaml
@ -0,0 +1,23 @@
+auth:
+    rootPassword: ENC[AES256_GCM,data:X7htluDDokepRf8GVV4eu+pGM2o=,iv:DJ893dKr/4SFBEl8HnYv2PMb3Nb2AfL1RVgN2QmDRmA=,tag:W6QX7k92P7bgi3Ji/64xHg==,type:str]
+    password: ENC[AES256_GCM,data:hlXWCWbFnmbuUg==,iv:d9ZmklpwJa13wyNjrqNfFMEbJDSQ+NeyB4gj+59g09Q=,tag:Ps4oq5XWDIx7HnvCCnB/FQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbENvMm1YQzlSV3UrSEJ4
+            VTZ1RWVKTlpsUDFzQlVjMlJEZmIvaldHVXlFCm9SVzN3Z0dwTGo1Y3dnaHhvSmpi
+            bDIrMlJhbHhKUmRZejdkTmJiSDYvY2MKLS0tIFpRbkwySVh2MDlNWEFNZHVtY2Ns
+            Wmh3Z29ZSlBhbmFJNkFQZlE3aXpMMk0K14rSXjSF08xkil+fFJpeMV+6XChTJ2/3
+            OQecJtg+0NQPyvC+kR5qKq8roiSzNNJgTVg2wwKMdukKVVTbEGi0gA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-07-30T15:06:09Z"
+    mac: ENC[AES256_GCM,data:oiigjlyNoSm5hcdB58MWUxhqcYzE5XtA5LEDUCUX4r0inNd8UuLP029jz6bvQ7E/wFpiGNVTFAlFB1HA/YVwai/siovy5H2DL6g4LS3k+fxLKc3lwo3BvkaBi9X2aYu7vGBJpNe3KxBdWFyjkEQVoux1RD8JJBYNquMu9tW3K/g=,iv:1H7pF0Tr6GcgDt9ItXiTBOTFa55wb9pOdTF3jNJlPiY=,tag:dQ9nrAKr+qo4JpqD2wJXjg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.navidrome-private.yaml
+++ b/values/badhouseplants/secrets.navidrome-private.yaml
@ -1,28 +0,0 @@
-files:
-    rclone-config:
-        enabled: ENC[AES256_GCM,data:3y4DCg==,iv:n+Pfj4j405WR17aY7RbF6lpOQ58ZQmWrH6dgUTQ0jX4=,tag:xbKEnPnASJTl27ch1Hi00g==,type:bool]
-        sensitive: ENC[AES256_GCM,data:DGby8Q==,iv:nibU4CkdcYlT1F7OkgqE1apUuyJA5M9Vj5x40F9zt3w=,tag:oW+jPP7F1vWY5gf0JyrPdw==,type:bool]
-        remove: []
-        entries:
-            rclone.conf:
-                data: ENC[AES256_GCM,data:m4K3yt7no9mnUOzn/iGtaKqBrDXoLCgxEWV8NacXlOvh7c5ngmTmwoxzTaNxbsCQA7dECYb0dFtPvhF33AqgpcbRnqGrK54v8V+NaldQrgT2up4iQfdYA+sh+yNG3QAXU7eOEBvyFctJ+9dEaBII1sF/xFSkcTwrWkQFTQKLDdNIYU9a8ttEysz0cBWWXL3h9Y7C/mBjPdWIhpaf6Z63hy5P0hnYFftZsVM=,iv:qBBk9xMlZl3FriY2oYk4DQB1EKTsl7/qUj4s8naVvts=,tag:tDUKvK8ZuIxVeJjyUUqeXQ==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxalE3bUtCWmFVejBJMlZq
-            dUg0U0R2VytsZHZ5QlQ4UGdrRmdsWGhWbEI4Clk1WEZ4U1lEdTJoRVBTbEFXaE1O
-            TW1wb0dycS9HeWdQcUx3KzJKb2kwTVUKLS0tIDU1bE9JWnp3Q3U4V0pVOGs4Z3Rq
-            Q1VsM3orOUZmS3lDaFpNN2g0cnllVWMKqZlPfiIFKn8h56gspbbUhpv9RkL5gF73
-            NzqtFJJwQOGaD3lk2ocaLLkvywJ/DKNf7JupTWlmggHijId4hmpytw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-20T15:04:15Z"
-    mac: ENC[AES256_GCM,data:XRmw86oJLHXMAY/SPv6ptQLV1Eocbig6CQSG1SdOO9scMpfgD3tMY43z5aB16DkW+6AG1ti+TS4JRgXKLaSsAmORqRN0yTwGEktiLs0GxhtDvMYwnclj/Cx76WbZyMkgVzCHe7ZsAI+9DrejSFYbB/CzA+8yq1KmMf/L5NWcv7o=,iv:AcYK48ywr2pzNw/HEY5hWOcjdnmnG2/eWp+r/o15Lbk=,tag:HLKLFYFV+7SWUaFYiNUS3g==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.1
--- a/values/badhouseplants/secrets.nrodionov.yaml
+++ b/values/badhouseplants/secrets.nrodionov.yaml
@ -0,0 +1,22 @@
+wordpressPassword: ENC[AES256_GCM,data:S/RmNSAaSZSrsw==,iv:Q5n+72jgUJKIpwblr8/VfBqPDfJZclipDKVTjt4BWWw=,tag:4hP0lUvKcphciEFxBQJCYw==,type:str]
+wordpressEmail: ENC[AES256_GCM,data:Ln2ISr/c7vESVumK7LGH12w2x7fF,iv:AZX5Gzd4vde+sM5XBuiKjAc72GWHfL46OoG6XMaKrq0=,tag:4ogLagGYSx0xYRWJU66//Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcUFLdEw4S3pHZmFiRlFB
+            M2JsSGRaS21SWG9CYU9uaVcyMjRJaVRNeEE0Cmh4Mks2c2pZVkZoeXAvZEJLazdR
+            aDdKdXVSWllzdGw4am9POURGZWhxTmMKLS0tIGVqTzFia3cvdEVFaXI5REN5U2ZP
+            VjJBSnFrNm5lNldJK1RMZEtaZDAweDgKME1XCeE6hBP8T+tpocfisLA1RMVF0aDm
+            PJnJ+YzdmX28CgEkcZgJ97+Gvgpz2M/e99YTcwTa6rETRkWhlsCF4Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-08-22T22:11:45Z"
+    mac: ENC[AES256_GCM,data:pj9YTjQkn9PmQrlTvwpHHEaExjO1v4JYEihBHxObwhboM9qrwaIzweS0fREXRFcTh3EdShF/uvj7fRbQ20mP8kTDbzby55qlRVZPL3nb3fU748t8neL7kQuLTtj7JPYdk8ZgEBouatSOEjtCNCo7OIL2nKX4xJ8jNdWW/w5K8ik=,iv:x/IXD482UsXYvOMELHMMkacQSWxeKXGjYw4sY1yrYck=,tag:RKyQ1PpR9khmz/LkOlVdtA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.postgres.yaml
+++ b/values/badhouseplants/secrets.postgres.yaml
@ -1,24 +1,24 @@
 global:
-  postgresql:
-    auth:
-      postgresPassword: ENC[AES256_GCM,data:Pb5fkgK3VsPaBD35ng94FHAZuTs=,iv:qYBmZf29+ELL4d+E2QoF2EfxJHBsLfX4OtYdh986iHs=,tag:GfeKbe2JHi50LEwJ1do1qA==,type:str]
+    postgresql:
+        auth:
+            postgresPassword: ENC[AES256_GCM,data:5u1PvGD7qiNp+fKRKd0k1NZ9Cmg=,iv:QD1xBqO1v4pKoQn+PpVVn/9gfgiQcVIOC+iwykS1fU8=,tag:/sZyLhKlSXQgq9NaE9SeAA==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhZVdxMVVMeU13ZndLMVll
-        dFFwQzBkaEZSR2p1MElJOHRVVkVVU3NCM2hFClQ1cXJlRGpoa1U0djc2N3NFN1Nz
-        VHFIODBHd21kMmFBMmlDaDBwN0ViL0kKLS0tIHErVnpLTVJhc2U3S1U3S1huanc5
-        bDFRaDB2M1Mxejc5Z1ZNL2xqU0tVWHMKNbZpG4iYQ8BI76Zbv8lbZqpuPX0qFHng
-        6iEHF+e5FXk8KoFmELQ0masS/ewO2wRcHH5giISrxigHNutjkWh3Qg==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:A3QpJ+8BIN+6MdtaYkhxqoVrW/v34KZXXjWlPCjwTSKdu0Vf5BTKClyuSm+4Be1sj6kcp6zhEL5mG0DsXRZvhH+/LZqP0kw1BHRxyZ1McFFEQdvfdWz4m9F7SGyebxth6RAK5/RMp901Q1YqWJKxPjwajIGmy5stgBgDetQIOBk=,iv:uyE8wmYCvJzjz7zDas3weWoZj9BpZlpKgzMIAV0eQ4I=,tag:hRDa+xkI0GSZIWIoDg/YIA==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibDUrRXlidmtidDBqQlFF
+            eU5ibmpFR003bmtOQTZ1R1VoSi90b3hVQUZnCjEwS0pkYWtWVzBjZjVBY3h6R2xx
+            d1cxbldsay9UVG1zODF5VUp2NExzcVUKLS0tIC8vdDB2M0YxTWpqQnl2RjJmZUxv
+            U1hxODZZdzRQZFZrVElSNW1oU21GMkEKGorPMRXGZp3RD95/CPUiNqjEArUH4ZYj
+            5UTYtScymvZ5zCPGsMYqmjGFPTg/HiEBAhVed03Smd7z/FmwdCchlA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-25T15:16:56Z"
+    mac: ENC[AES256_GCM,data:uYaO2/51oCs1/ZZfWMwID+gv9XZetDZWyfG94KvCjn+2uMRNc9GgZok30CKFaDmi2D6oipoXyV3uz7BXgqHSk9rA/GTKoNzq8AEiSADXwnBneoQ8ftGZcGdr0V1R1gcsCtlu65kXsROksEK1pS0XQEMq5/zIftcL8wcOe7brnvA=,iv:UlCPOm4tEPqLW2Z5r6lcSZzF5nrRWmOdfz4z0J2mtww=,tag:o/bhbNe1/Gi+KWx1/xEg7Q==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.postgres16-gitea.yaml
+++ b/values/badhouseplants/secrets.postgres16-gitea.yaml
@ -0,0 +1,24 @@
+global:
+    postgresql:
+        auth:
+            postgresPassword: ENC[AES256_GCM,data:8Tz+Ux23hup7fY13o36ISM0/7J7QBOnEKGp6HC4DCti2ZvvzLtMChgkjvD806Lp0ql4=,iv:O6zXIoWS71n+ZZ4d0JyfL1PEyLBPvt/JdWARc4yqc8Y=,tag:M63BInZTKXIFpIo3xbbOiQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRVE2L3h2QzBLbTJ2T3Ax
+            N1ZwYWlnOUQ4b1h5YWZ2a0ZiYXd3ZVNvQkhRClpVbnJVM3NaSi9MUVBUeVI2ZDkw
+            b3hrZlFvMjJTSlpLa0NhVDZvd2hHNDAKLS0tIEtCUDRWYUh6M1ZmMWFXUmpMZXlN
+            VmdDd0Vvb0R5VGlaL0VLWGwwdldrNHMKWzFjQo/VI0xTMBCKls+F8vyNsqPTINJQ
+            8eBaaXQKtIXTLyqeFD9LogvKYAijIMlsky6hX3WG5ymx+0nqCPJFbw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-08T11:20:20Z"
+    mac: ENC[AES256_GCM,data:aTQ4h+VHLM4Qm+2ZMigCMr1mj06tfeOJQMDxe8dIDlPO6T3G9Tkj+iPTwXBprvEHjwVZPdMW+5TRsCwGBrg8gx/aIAlBpZyTQbR/wI2PW2HDjeKut/qDgHKJytRCUNHlQB3t426snI16ydRGCdqBO/5m4TG46QXuPRwIWej6SDA=,iv:bJ+708Tn1JkiED8sTfkqIat0XkxdM+3m5mzgf5gg3A8=,tag:EjOXTgcC1Kmc8PmHD3BWFA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.postgres16.yaml
+++ b/values/badhouseplants/secrets.postgres16.yaml
@ -1,24 +1,24 @@
 global:
-  postgresql:
-    auth:
-      postgresPassword: ENC[AES256_GCM,data:+YRWapVv08cZonBsTLtsMHxT7JJp,iv:LJBUmSX1vvmLDBuIdqmi+4UbuLL+yD6PO18kmwlyzpE=,tag:TmG2GQ5/87mIZPLY4uzkBA==,type:str]
+    postgresql:
+        auth:
+            postgresPassword: ENC[AES256_GCM,data:O5Fvmjipcx7CZ4DKQjRW0isfzoUt,iv:sVl6TFRCKAL5ci+lC4DfX/vZkWwRVg559kq4GU67udY=,tag:dEsoEe1UfvD5rUrI+EYOsg==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJR1hzTUV3TzRFaHNTN3Fj
-        Tkh0TW1VNng0WkZNdXdsOVozMDZ5T25uQmgwCkhSWXViUkNsZnExV0c5UXFsd2R4
-        ZjNYYUFDbnpYYkRQbHdQUDA3cHBxa28KLS0tIFR4MGVWK2o1TFZlQ1FRbkIza3F6
-        UWc5NzVMVkQ4UDNlSzRidWNzSnFWWkkKfnTaKxZoBFCj2l4QfI/BvG0eGOFX/seF
-        DcpofYlg0hQFRSavqRjidLri1rzpOCdKlWh/h0nIRDFA7O55Q8QAnQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:fi4ewchdGDHm1YyVFD57IxSepsnP8K5kCY5klszKUA+swAkGS5BJb4/tsDQ2kefRgJ+RnbqeYfyaBrzrXQQBdYHsHIg4iR+NGl3ql8TzIze2Kc124BCjBs/eq+xyGRxjXjKr31c9dGGaWriO/jIO0ZBSDn5Uz7JcY6iv5Nu+cGI=,iv:SbZr06PcwTJduuxan4a9koKI7B8ZEZ1dQzwBbGQjO+w=,tag:RpTSWKBhUU4oH2m2g906Dw==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbENvMm1YQzlSV3UrSEJ4
+            VTZ1RWVKTlpsUDFzQlVjMlJEZmIvaldHVXlFCm9SVzN3Z0dwTGo1Y3dnaHhvSmpi
+            bDIrMlJhbHhKUmRZejdkTmJiSDYvY2MKLS0tIFpRbkwySVh2MDlNWEFNZHVtY2Ns
+            Wmh3Z29ZSlBhbmFJNkFQZlE3aXpMMk0K14rSXjSF08xkil+fFJpeMV+6XChTJ2/3
+            OQecJtg+0NQPyvC+kR5qKq8roiSzNNJgTVg2wwKMdukKVVTbEGi0gA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-10-04T02:27:48Z"
+    mac: ENC[AES256_GCM,data:yyvzDlqm3ZOGAMAWCbA4JBC2xs14dKJ4oGifHCvD6K3cBcLgQLS8MOoQJBVfAfL/lVqYDtQ8qwQl/NbCEAKdqw5mtGRwSGaCExSTfO8PIUZCT69q5lwhAxfSGkhjjup+88MhwdZbe2iqqr0nF/GBYT7exqu6Pj85ZKbeDVBTMUE=,iv:KVuyYWYvtVjFinkY82nPwKI/XX18t4purLInfjSxYlg=,tag:kD0G+keg4veTy+CN7KOo6Q==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.0
--- a/values/badhouseplants/secrets.postgres17.yaml
+++ b/values/badhouseplants/secrets.postgres17.yaml
@ -1,24 +0,0 @@
-global:
-    postgresql:
-        auth:
-            postgresPassword: ENC[AES256_GCM,data:WIgce24XYrwtjxj95M8Jsfe+PJRmdDsd4H8cupbR,iv:VY4NZfY8Y7xM7zcRwX8WMshtnGVl8ad88PpMnRBuaHo=,tag:O2VonlpkE5Xg0dQJR28GyQ==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUEd0REtSS0xZdUNZOC9s
-            NUVTNlRxR0ZVandaWmRsSEVINTNuUllBK1ZNCm5ObSsrVzl5SnNycXpjRjNWb3pu
-            U0R5ckM4bUlvVENiZ2gxeGJKZTNIR0UKLS0tIExsdTkyWDl2dzNVbmk5ZHNXSUJV
-            K1FqbjBWUkVRcFcxbmtCNWtOaDduYUEKDy2DQVcFCwHGEj+k2fkYAeHU7JWgoeet
-            ZeqW6H1tafj8dCiBYrbv+RufC3nSWgglVx7VVRtwHh/5MyikpSQGmw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-30T19:59:35Z"
-    mac: ENC[AES256_GCM,data:RSJqYBKwE0d1cWmb9yXrroRJ5SgQpfEbkCVDUHF/3+XsBDb4yFmbhdkJcWytSj5GK4th0lnuLoxGc/79dqSjlTy2vn1fJSCIrqso3hic6GEp4ZeVuN63D6tkRw2vCpXwHL7LM+VoE2pDW/c3bkkyYoP7486GHA/+jha/ZMxYHsA=,iv:qs6Eq1KVMzAWvecuSSf2LBHYeY1wbD1VgFCDCDurz+o=,tag:h/mprk9v9eNurJl++SCphQ==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.1
--- a/values/badhouseplants/secrets.prometheus.yaml
+++ b/values/badhouseplants/secrets.prometheus.yaml
@ -1,26 +1,26 @@
 grafana:
-  adminPassword: ENC[AES256_GCM,data:OjUlnKgoGvw1YfljcFkz7kS8QrE8qrD3RtrQCILU,iv:eD1PD9+ne/8K2VL0T9z6SSbUr6Vq78+887RmpbVsa9g=,tag:OvWQgZS/OQMpeUvxQloeQw==,type:str]
-  adminUser: ENC[AES256_GCM,data:jZZdrE3j2iY=,iv:DxjzMhmzVxw+GjglRX075T6MpBu5Hh643kMGV6FLU6g=,tag:ZsfQFRZjnPyya3IiZxyTrA==,type:str]
-  grafana.ini:
-    auth.generic_oauth:
-      client_secret: ENC[AES256_GCM,data:ut38uW2tfR/YhParSGavhV/t7zIlQ2jETyTQfhIy/vCg/DCv13j9r/z+yNTG3c8VM6VkAeQ8XQM=,iv:V8s6DuLWQamj1hnlHF9bQMgO6jfcrVA5+2MaJzlWC/g=,tag:lnw3/RYW+xtNUEtCz2KoaA==,type:str]
+    adminPassword: ENC[AES256_GCM,data:AuPGLXN861DvndWdecukXKzt91sGGIMBToj7tO3J,iv:gKmj0gurV77e/jbxdyxhaxkmmsp738vB6ZAfzRFf45M=,tag:rKOkedx87g4MlRk6npgXiA==,type:str]
+    adminUser: ENC[AES256_GCM,data:Esh/6bXMez8=,iv:cRdvkpnO8gNOaKy+4kPcq69ksdXxuZClnjSvBp4yto8=,tag:ZgycOsDXJIT1mrN6nJHw3g==,type:str]
+    grafana.ini:
+        auth.generic_oauth:
+            client_secret: ENC[AES256_GCM,data:+4Qfo4aR9TMZprWL9U6lFx4B86d3ywH2O5K6rM5hmv2gROeFinp7k5p9C2pgNubIK9W3TlWSZAw=,iv:uFX2Lz3s2/aR5rcwsDvfuUGbKHNxh43ZiuCNaT5b1dw=,tag:8YdsVMaHbP6wqjubb9Ab2w==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTENvMlVOazBWSjE0cWxL
-        SStQZFRXSWdkKzc4UUdLNHFaUjhMdEFGR0FnCmI4eVN2QVRxNEJCQXdpUytaZWpD
-        bEw4S0xuNjg1RE1YZnBoZ3NIVnJpekkKLS0tIDh1SkFtdUZ6YmtyY09YU3NOZCtr
-        ekMybFpzUDgwUFMxdW1BTDEwNFFsak0KQWwwNbo75QfVy+kQPo/1KPw7ceAd6KCz
-        UxXdGA9jAeVxA9EFS+d4fkrTOe2x7SdJulnmr13lVz+QJs6AuFSAog==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:21Z"
-  mac: ENC[AES256_GCM,data:kcCG50GrAbW/scwYQn6s6KuoiNGvTSOhu+VKGTUEg8B+wDCl/g8BHMOuRdM1p8bMPbsgO8CID18sLPEvTgUXfVD7uyeEMWctTgPtPeurZmDyaVEcvtMD9NFxVIzBGN29tSCskB6eErJtm+j6ea8n+6/0uKMMpUAsW4McV4RV8+c=,iv:d1r3altHBAeQq9sLG8xfc+nFRKTxzw10QzjEqgvDMP8=,tag:TDoCR7ikaKkazm7mKmNY5A==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXeTlhQ2xpK0dvMU00ejh4
+            bjZxZVMvMEFobGFqYU55a3dxcTlnRitkS2wwCmJVNHhQNHJHTVBxbk4xQ1RWbkFv
+            TUNGY3YvQUIyTUJYNEZmOWRYd3JaUHcKLS0tIHJ5STVXV0hxRUdYQmNXSFR2U0Vv
+            NXQ5SjNQUW9JOStDclZuYUlqV3FaWWsKvu2T2LmDjuJgnB0djjhJczsvDjFsH/D/
+            QDPkkl2G1luDoIjBj21uoy0daqfyskd4Yw2ZsPsZU6zuEGdFj52Qbw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-05-29T11:41:00Z"
+    mac: ENC[AES256_GCM,data:7Xs7W6smDPr8fp4AapKcUvHUsYRKkTQ3wb4CuDmL0ziQs2d73ueezEembp7RRaBQ/Q5jACY1dHQg42+4YymcTt8NqJ6SE4G7f9iqJu3rr5g5lh8mYP8ft8J1/l2jrQtCSfxyzuG2CPZRycQIo+0Tq++w6iK0iy6ExPt8cDNR2Ao=,iv:v8m4CEW6FG5rWV8fKsqACh37X9yzsB/Bl1wh+4348rI=,tag:Up71zDf12JMDjK8uIxnsLA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.redis.yaml
+++ b/values/badhouseplants/secrets.redis.yaml
@ -1,26 +1,26 @@
 global:
-  redis:
-    #ENC[AES256_GCM,data:d/vtscwAkAPFyRz6Ap29M/oZGEcX3POnzAd6GCkHIiTLFinXzOAn/ruMSiMsnL9lJxj50foVeLIXnmtFDGxUPsxNU9jePD037t6vbtja,iv:ALXE7IPi2d79rOpBMwlfi9IPtcvfoSAxsDHwiVItk8U=,tag:cMoKK0zkagLc3uC8Ry5hBw==,type:comment]
-    #ENC[AES256_GCM,data:XQ6nK+hlKfFOBDye9a2a,iv:ptA0TWsjVjOQGOCe8leC7ZjRX8gSnbjb94NWZMccxSs=,tag:9vw4k4N1wI/C7jf7ZPxi7w==,type:comment]
-    #ENC[AES256_GCM,data:eTsTA07O2Y/468A=,iv:ZWOZO3GAYbU/Bq5ejdzDUsrYpkfwNtK23zH+XS5PUsk=,tag:KL1Z0a+BxBW4Y+aeJb78lA==,type:comment]
-    password: ENC[AES256_GCM,data:kFbVUyKL0B9GhOapmqOS/FyTaXZEGUmSFFLxYIzX,iv:sLue4AmkT12DoPrWH3VxpvXFBHYhYRUTWcNoC+ojhGY=,tag:ikQsyximPvONoANv/61GXA==,type:str]
+    redis:
+        #ENC[AES256_GCM,data:QRLnzdJ/lmaItppUMOZO33kySISWDfMdjr2nrEjBuhucnoglEVNF9Wy5IVbt5CNERajCADTVWNy/N40uCv+9n3PQVKl+Ki6YV+Q24Bzy,iv:8PvJ2yU7AW+/XkP+/9OQcrdCVAomnRexkNNw+2rjoho=,tag:U4gbrqqBwvXC63qn7jFmPQ==,type:comment]
+        #ENC[AES256_GCM,data:69gagNeejZaafGWo/Rll,iv:kW13FOrc/j//BxVj4JgEC0G/DQIOPHil0uNXpOM2/W0=,tag:sqviMlgQHiN397ukswoNsg==,type:comment]
+        #ENC[AES256_GCM,data:C8ta7Vtb3LpOotE=,iv:Kdat2trhQIQHxIpD7xhUoLRYo+a4PgzpB+S0w32somA=,tag:jgH656M8a14QhA//sN6MGg==,type:comment]
+        password: ENC[AES256_GCM,data:qdV5FH2K4w9gj4SFznfflY8Uw3ohSCO4lOE4Hea4,iv:/XYT2xiHlfRB1NLkw+Qm/QaWehvs9v8PUp2ZfMxeyRA=,tag:06XSi3K7y+9a50nZK1LAfQ==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORUEvSlFCTzh4N2NGVkhO
-        SlJXQlNvYjdCQmVjQWVpZ2YyUjlmWkZrWVdVCk1FK1VjVmpCWEVScVo0YldZQWxE
-        L2I1RnNsVWJGRll5MXNjam1zMzU5OWcKLS0tIFI0eUFEYTdyWkFEb0xQeTBaZi9J
-        aUJ0Umg5T1BFN1lEbThJTXErUkxKaGsK1Vvk45dshvEGF3OZfrLJPabHgvWFT8ps
-        f7Ygd+3XhZUBUBi50Em/xzmKQXL0I0Ps9JetSbQ/Amlmp9gU8VqRGw==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:9dykGJs5NFjahNZ+4orzMh2u7UBRHMVCv5J9QxRqAzE2aT556W6bZoV9n0V5b7Z6jhVGHFxA4do9RoFT2lq7aMVpQ4nl4iSXuavPiuoBeq8aIwykpCF0cs5dHxQP7R5US2A8rzsSScIBbB2i1LhRtpiVVGmekVp1YSZJWcNhMNk=,iv:tWf4DjEcAff4LupkpFiR/Ss3iYBqtvcQGW/xAeCDIvw=,tag:nbWpyxzNKKrbo8HjMBbeMg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTWUxY2hYT0dId2hsR0x1
+            MXFtRjlSelgwdUcyVnBUdlJ6Nng1UkNJaHg4Ckc5NXBORjBCZHQyc0lDTiswazNF
+            cGhKVFFNdlZnRWlxS05OTklOUDJDQjQKLS0tIDNWNDVVWXcxUW8yUHgrOTNkRkQ1
+            MGNDV2cvUUF3dWZHSlZNeVFDNXhzalkKubKuiiZuqoZTvRMr2FiUxnFUu+Pvj3Wf
+            pZTfZg9rnUukmV+kmwqQKcfoPNfeShhoAsszWwPM628cV9pq87I2/A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-07-29T20:22:15Z"
+    mac: ENC[AES256_GCM,data:DIdcvQXu7rivXdPFPjfzs1AeJ5bRvUBD+Hq9mH7Hp/+iqrG03fWSF2NF1ra8KfEIg6TDsyMnQLWvipxBlA654BLBNrABFoGwLsdVsATBORz0kNNY862qfyhSOaaTBHTWhPVpbjGnYav+bi5pfvbLC9yJm3SjIRtUbnaNVWvqMq0=,iv:d7SaPZLb/px7fy+bGJnH3bfNBmqbhwMijyNB0jfYgLE=,tag:LT5hJoDcSiP5FVgj0M2sCA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/values/badhouseplants/secrets.renovate-gitea.yaml
+++ b/values/badhouseplants/secrets.renovate-gitea.yaml
@ -1,6 +1,6 @@
 secrets:
-  RENOVATE_TOKEN: ENC[AES256_GCM,data:4PcZwgDWomLwizlaYd/nGVn1wsh2N5EciGov3OpvV5k9v4szSsQZug==,iv:fJQ03dY+c4MLcsRzJK/UXVqbqZOs+dzrT1sQLgY/RzI=,tag:VZ5Yda26+j+un998Y4YYsg==,type:str]
-  BACKUP_RENOVATE_GIT_PRIVATE_KEY: ENC[AES256_GCM,data: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,iv:8TpX+aV9t+6ECQ2RMUy99RNBuawVEjPZ6Jp4TydgR8g=,tag:pxe7B3j+ATBdUuxzoJau2A==,type:str]
+  RENOVATE_TOKEN: ENC[AES256_GCM,data:1tGgZaqFQfUGQpJlzt6QaIowK+8i0sFyDRDChmXveCcqhgltMOZnIA==,iv:D7gyZQuV+xw4sEu/XAjiVJ96bbBoZQnc5yCW3DM23WM=,tag:U6qsp79516/4x9u6lLT9TA==,type:str]
+  BACKUP_RENOVATE_GIT_PRIVATE_KEY: ENC[AES256_GCM,data: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,iv:Q9uQRv7cVTQcKIDpsxq1s3tBh1J9wKoLN7uSDqxXsIk=,tag:AZgOoS0psNa6Zr22KWCsow==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -10,14 +10,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2bGFycUpabXdiYjVCOUQr
-        d2kySjFlSVpWOFVNWERZbXg5OVNnMnd2ZTI0ClJDTEp0L1VMVXFUT3lhUEU1QTVO
-        NlZJNzJUQWZiSmlVbjFnYzBiNDNkNnMKLS0tIGlyeUpwZkk4c0hFUm5VTmR2TTVa
-        NERwdU5hQlNoc3BQSDhWN1RPeHZ6cGcKLKS+HekCWvwknxqSro/afXZsox6BZa/X
-        VscdD+rGjWoa+pch7A+DjJ5oLgBi/UHmMpg6UA1/COq+ULPlRDwTtw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NWVDclBDQmNMUW9IWmdK
+        bTJUYTA5Rlo0QXUvaU0yYWRwRStJbTZDMTNJCndzTUNXbXgvdWh5N1pZNHZFSE8v
+        M1BvYmUvS1liditTbVpHaU5VMGRqUFEKLS0tIEFjSW52Y1VxdC9GbmEyYk5PSm0z
+        SmhtVXV3SVBPaGdPRjVyRm9paE5oaHcKID8btGzCggUt+ifH2RrwglCxIfyrsn0m
+        1Tor0RBh3bwnl7VZW3ch/uOM93US7/A7ghQ7eKnwUd1vSx6DUXuMGA==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:21Z"
-  mac: ENC[AES256_GCM,data:fhbazXAMAblZes2sweqlJMHJNL9Kamycnmxsdpmy1I0zAbgtZb/p6csqk8kvw5Tyv+/6MFocElLwvVQvkt31+uTdmDwg33vKyY68v3qTh/7nCoHAyVI6C2AyqB6igvo8EJmxFFqyZdlt8Af9uuN9j7Pqwb7qOylFii40bH2CUTs=,iv:UBi9ZqYYkhzaw3vcJsv9afol0l+/nidtd8Jqk5bGJ7A=,tag:bI8OWWk2mctYBj69HCfp5g==,type:str]
+  lastmodified: "2024-10-07T19:51:10Z"
+  mac: ENC[AES256_GCM,data:R24BsAoZ4I6UFVI2olTB6ROObyoVh/ooW246/5LInyFOUjubKdgQzPP+oy8DZufVSw3uj75bkhPt3BhLldBPimDWrv8uUiplxsWAK/hNi4pJvKMy4y+ApAcAZHSFE0Vw7NDNcbKOI1sQJR6N0J1ZzM8rk9Ze3XbWxv+u37pthvA=,iv:tnkGHbylgtswKGSaFpPjTiul7U+3hWY234h+TIUCP+U=,tag:R+lL1YrSWTVhOpycL8gvHA==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
  version: 3.9.1
--- a/values/badhouseplants/secrets.renovate-github.yaml
+++ b/values/badhouseplants/secrets.renovate-github.yaml
@ -1,5 +1,5 @@
 secrets:
-  RENOVATE_TOKEN: ENC[AES256_GCM,data:NwkAP50vrUc7dVB0wyWTgFDd+axltTqdyXuXFHHkmO2VF4QyV/svsw==,iv:kr53r5w7lVo9luC36mHghZ8fabo6/da8vLFEzhEOgDE=,tag:UnGnSXuvwlSzVuL6pEUXsw==,type:str]
+  RENOVATE_TOKEN: ENC[AES256_GCM,data:e8csQ/NIwMgnMSECBAupPn0pvmokOEYAh5lSnNaw+F0iG5E1HinVrg==,iv:PzJ/K6hmbpHbXE/5f/ABkjGG8gV+ox00tonF7rCxNAs=,tag:yh9updOxfnJEUS+aKxtYOg==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -9,14 +9,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtZDVVZm1UallMRzJpRVF0
-        b2dHaUJlQldOeHN5RVhydm5oaG52ZG95SVVzCkZ0enk4Mit4KzV6Z0ErTmxhU29W
-        R0p6NVBiRjFSU0NWUjNKdGU2WXdrcFUKLS0tIHFURlFVLzJ5NkJVRVpCV2I5U2E4
-        dE1VWExmY0xEdVlrZW8wRzlPRkVrRzAKVZHyy3AGktGuv7KEQX/M0xjyU/7FpgSB
-        OrWzXXds9h8PWC/19FU2puvdIER1G/2CajEq0PQmaC9YMvb8nLMv0w==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVFNJUGNXNjg1SzVPTlJo
+        VzE1cVQxTTFRbUpxUkU4Z1RGWndaM2pNcDFBCi9tMWxKd3JFUjRQSVNzallNNFc2
+        emNnL2FZSS9LeGlIb0JXbzg3UUpvd1EKLS0tIDJ2VnhaZEJnYVRBN1hDZ0tiV3F4
+        VVJRWS9wTWx5TW05Umg1ZnFNQW45Z0kKSMxf4XLPLf2dbpnTgWAtl2GfDkkE0Y+/
+        xoTxFGkaZ0MAZs16iH6e7zD5eJ8TIeUfhl60aNXTCBJhPaWS5Xiw3w==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:5FV7wwVyhB1UQOLW+iYyeImXAPv3dtTlw3Qjg2rBVBmbC8vHNpXFWloBhFeTSN4VAEjxm5tqACdP3IfNkrVT1SnYeySh6Xl/sdcAuAIao7uMjLDT/MK02AcS55T9pt7h+H4nkdNatMAX7jLKbHJwNoAnL5a/FgX+gKizAg4PRHc=,iv:7HRq2xMClJXYF2S9SQeYLZwCn2EOEc4JkEFzgze2e20=,tag:Fb3fm+wlnywr0hBfw5xyQQ==,type:str]
+  lastmodified: "2024-10-07T21:50:57Z"
+  mac: ENC[AES256_GCM,data:bO2nDOYXRa9kve1zALKw3KY0mbBgzXJKYaB0o8aqPsP5jGnjo/0nc39y5EJPUq1d9upTn2fPwcFs+8E4NNTYdtUdr/n1paIO1hlKWM4dnMTcbXOGQtnqBL1x2sQgH4WSOgAFiGSWRYG7otCwRtUhWgZcp73iEozoldKv3W76mnM=,iv:UJGqyczxaobNqTo09BF0Vp/+swxsry4hUVh2Rrig/t0=,tag:N3VbvAc3KJX8W8o5AGaqMg==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
  version: 3.9.1
--- a/values/badhouseplants/secrets.server-xray-public-edge.yaml
+++ b/values/badhouseplants/secrets.server-xray-public-edge.yaml
--- a/values/badhouseplants/secrets.server-xray-public.yaml
+++ b/values/badhouseplants/secrets.server-xray-public.yaml
--- a/values/badhouseplants/secrets.server-xray.yaml
+++ b/values/badhouseplants/secrets.server-xray.yaml
@ -1,28 +1,28 @@
 files:
-    config:
-        enabled: ENC[AES256_GCM,data:/u3nZg==,iv:7b3I/wQEw6HWJNQfD98ROcdesLDDpgGOD9vKF0bGPE8=,tag:E58JVYZvX6N4LEp265wTIQ==,type:bool]
-        sensitive: ENC[AES256_GCM,data:T12sfgI=,iv:aPIfcJ2mOQPjpuFx8yEU3LQ03OJ20Xo+6bnVbinEJAw=,tag:fGoWBpLf2Mi2BubYFm6YsQ==,type:bool]
-        remove: []
-        entries:
-            config.json:
-                data: ENC[AES256_GCM,data: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,iv:CQK+hwz5vr7TtKzB45FMiBp62aoWIA46nSaCtKxqSjM=,tag:U+P+8vrqzV4kV2eBrCtVGw==,type:str]
+  config:
+    enabled: ENC[AES256_GCM,data:9UYdAQ==,iv:MtzOcl0tGhyhgAQX789Zpn0ycW39V2RYrUwtATSqgrw=,tag:ShoQhivhkJ5xA8hSJqErhw==,type:bool]
+    sensitive: ENC[AES256_GCM,data:w3moC0M=,iv:D9Kx20xeANYr66tqtBC3rg2qtfheUAColhamByHGoIk=,tag:VQrlkkV0Pv8vidqmhToxMg==,type:bool]
+    remove: []
+    entries:
+      config.json:
+        data: ENC[AES256_GCM,data:olSKjEbZtlxAZYwcqkS3w5v+sWGMqjVvgOdZZUsqFtSczHQDYJIeRO5Z8MzmO8gyQUj5P80wYatUowTUI7i/sR4IMXYTlRk6/AtDLvk9bhYwnYwYEEgz89nmWWlue0BZ2/hJmQiBp93D0L/zCIcZAa+xPICjxXRWF7qhKL2VgtCtB09TwohizsxKi6Ge1clheevJyTFvu8jJYzdCbcfj8LPRyYCB8I+8Hn11LoF/DBcc8W+krIton9VprDYHvzT8zT+XSF765hnNEivWVbDDqeXG+NA1Wz9uRoxbV/ITmELqviqnVa0YXHBY/PNUluRScpALG4LbLNNJCFZn8HYlyIQ4MjKc0QjDNgJQXSjMS30xRwlZxOd9Ilnq6VyFzCvImKALP6gaW+dSHc2YjCTgVdrs89tt2R8oioxPbFPmcDwahNVv8vQOh0fgrfNres3RGNxGZ3ZLbU1QUfaoIkhYbP3CMqqnGIt46qi3t0Z7fxHx7DHe0gO/Wb1SnW+20/OWqtYEX4f/ScMikIsKy2wLCFEeuvxwiOYXsoAQGrMQ4ScKbQdeHkYarqM+mCmEyGI2UMuxtL4s4yOVyxD80NdkS9XvI4sAXxIpy0XH9JRNSXctgFw/F9jRzDSfb9M/CcN9t6zKlUNUEO0ltqWP6S6oKe30a5aFnDyfU1hpcp6DcOuaDtYPo7D6quyfq+o3TAVmCDdCKBlbfk8iw2O3DP7u0lYw1jyZ1vHdQvBDyjZgj6BU0QAL7c3yuFnC3ntVsZqtdLlBC2PiUATAiI1V6LHkOjfFyziaEmA+vlpUZcOao6+kT5l9xtAiJKeLpTk56pnnj/r8zdkiTOoJ9Tz+IbtpJTmRUP1CBZeVjlIi1FVQ2sACQZ7os/joxdjJSE01+7wy8bi13lnkud+J0MgTTu3bt5LbTVUg23tg3QUD/QWdUJh7qYUmluVPXE6S0R6DwgEYJyENF5Q6DGfwHImpkDwP0o07oQMZtvWvQQAKsZeYcNWEp7p5nww5Zg1OkElrDwjN96hDsCOSNK8t/CI454dW57BUW5EIeDn3bjKi5MKEsWM7PHZ7KPCVhsro/0KGVQGu2tew1VAwoTbF3ttWHv+fu15pxriDvdeJHFum8Z+Cg+jKGhjmso/0nG69uE4AbBdlW1qZQsbv83r0n9sAn0ISWbpueC1tHuq46bJTXNfSZZyOvQ704gqD29zrzG5d+PpcEm0Cft4QNRnij8MQJe0gx3LkB4NUyvqMylujPotC/Bi7RE9QZkJLkEfJPDD47C1CNei5EYt92g/mywiVP2jDVM5e9L/XQoNWwFGcFo/+fApFiVJl5WlFC3pRYBsb4ZKQDBqm9s9eKBSaMCD+76nl5s9F9SPA2o26gBJkA68L/FTa7hzxmM34uh3cZgY0COWIYrKlPtlooEqQFCA2wWAfba+pcukd8Ou/Nx/CEpaJa8Ucv9uZUFthDmisYBtIRUw3s86Tlw3ZqCdIyp0qnOKn0BrGhW9GH2/sBUzYZfq0jquRqKi8fI2yNnB+Wi6h7B9HWUuIlNb/7REvcejL3GQKV2LweVH1z8UyIVzpyotbM5yl+HwRyhEPczUsVRDE8XasGwdOEQqfnk/HgedqohoszqP8rPt3RvYH3oZ9/J+g6AynBDemT3R+p33x4uZB4R9C0ybyo6PZ1r+IjRogScq5uT3DNNSgHdoXzg+r2pMtsrqQrMI2pmq8DaYd30pN9BmpL7+WRZwWt3Yv5wjX6QYn1crxj+nh+1KqKpMi8uMDxKK9BxZhM+aORlj1A2sTgcIWVvvHGRIbCnmnWnc82T66wg+MXZEH88WmbCzaV1EEvjOCqGmm9D5QdebpCSdeDN28/E540F+2okMHYTyJftgS0SLY6JMposwlI5n7RTuRXQKZOGygx/E2dZp5GKm3MLCKJOES3sO56ABc/FFaue52OJ3Mr83Rv3Bhh3CFgl7j2LEZzjREvVKk76sKdR9O+Xx+RbELXC9WCbF02kYPOEvljJG/rLUxpGBYr1im6QaSzoxMr6Kok/u+zToUdDYYFeidd/HP0jiul7w0bSDuN5bAh+cgtaws2R8HwJoBGKsTvLTqD7U7lj2vp15mUldL2mZ70WOaiswPadPxhdNdZLyctc2bq6Dcbd4vFFXr18/uGuclmAnFMKqZznwZkkyCfNHnqerwwUiTKjaNZttS7cqYgZJbHauYCzjtz20mg2/RRF3ZmAGR60Ne7rb+hgYp947vmZ2KL/4+JP1AId+he1Xlrhw+7J8pUWb7sJ5HbSTKVSUqEPwoiYJsn5QErwVlavTxQhhp3yfg9xanwxXP6TVuF9XhGlLk55q3If7m/bhVYRaMBqzvSJ2BhN41uUwKsNsgZQCcsYUS3x6SjgtPuPnfYWzc+/FlMm78LCKwA+zSg4X3F/0vnL+vNQbe+CwuWitOnsNzp4hVXNaN69IKpDEW2IuCTxyjUBJM/I2y1+ZXRVAzWjRzFzlqMQWnoBk4olBSx+XW/Ky/gjlHccKsl3cNvLqWztkLhDdazD0YHsY3Y8GaN1zD/0x3Vnf4H/4YMjDjmS66WuBkGJX3QaNoPZPC/UpNyIBoRQqoPtwdFudUiDeFlzhdehV9Qctg5AWD+QZcxh+n7zBgAQ80ATTbKq9sNBCmyg+8QQZ/C3Mf/SlR+2m4dhVuNv6paW1+DvLhrvxlfSb7FiGJNz4MG7LjWQxVLF1j+ql4poP8TTWdeapRIbonavflr66uclPtgvJreVXOmBnna6cVgZvYuKJRHkYL9lDSDkl+2nCY3yoPVG1WjDTun75lN0VXnwlJNYUnLJeH4tAoPc6jIYKpgbc+R85+oqURiz014+LkMCUVKyEJ+2UGSSVWHlHFr465zNyojY0RjAWpt4ewWPB/H2ABNMuWu7ZmWYptuFm5IWFzNHrs/alRjTFsB9874YWoJY3Ibw1cGtNC56SuVyrDG2sLwXx5+EwqdDtrNBdvtCOXU+cQ/vnjcU6e3coq3X4/9NMUCMJ/OVbGJR83mYiaNOpXA+JlHezBHQZB3Ul31lTkmHGYKFqu7fOWfL9x2SciKrmTSXqjPRHcQ/3zNtkZ/LOPeYq0+voKFSLqWBJRB+qcJxT+w1qobH9T2KMjdGFkNlWU14e6zAC4bcUw4BmtZ564vIWPWsKkHM5H4nl1J5+bBMsTkmLKa98qC4K3gvKNfWZR9DwgJHIIRir8QPQXIv7G5GzNcPssTtu17L9CAUMueyQV0lnkYA64XY8nLDuV/QFi09eHs8CDcT9PZn/1J94OFR0srb7A6DL3/SP+AQasbfUV+eyi5wQg1xoSp6ta3fl3RhhuVCcinucfVVVfnmrf27Bk+9g7eA/cmWTY2vo7xSOTSF1WE3fcyZklMVlMF/8UhbNKcEmR0baCu+tITk//bsqTaIJlWYyUwnmCBrzdMJe2SSZ08iSu5wX1NqbM5YuRkXb7LX+LBcpR2lG78oKVdXq/tl9aI7ILBNhklCq7kuXE2a+HHXl3k12PLZRV48Mxy9TAH/DB/EpQY2OprwT8IpQLFMOS1FJdWlrFAo6aAQRGfvVOFo1/Oy7ATH6tN16VxCV7WuHceGcSAPXmAkUZfCtS8AB/rAPf2v04CaDtq4LIp2yKuyJzIUkeB94XEU8peBRUI+Q4GwCxk1c5fqaOajLHjqKw3pEELT2SdhOtTWZV2dfv4wBUz0hOuDqIav0ob0fF8DPjK2Zbypb4jFbcuSj4O2OQ/814dVU7BJtah7KSdAb1oFerV1b1NNfMRSn2dN1jjwjT3HCoPnmZsUkhF336lapwRaXUfs8Sj4gAPxjkcbBbvSZOVX61jsR2rNmvCwA9Lwykv/7uFJnaCPWF6wKgxz5rsZO1Ilch2MC3Np4qNIdMSZ30oaBIJOTdKMYNHhVirjFPd6/CSLaQF71FtNb4EHuh/qRR5O729A9udFJeV0b3SuJublcels8=,iv:WOex/9wDsaASnouJ1u7wXK7nMTnPP0Gofv+K2KSlCU0=,tag:It4orTwQcxhlhPnshP8Ptg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMFkyNXFSbElXS2lqalox
-            cVRqUUorWlN6ZFlkRE95NmNBY3U2ZU5UQ3pRCkZTYkx3aXFobXRkZ0hkMmxSdnhy
-            K0ZuYzdTcjZhRVl0WEpmVW5sc1lkb2sKLS0tIGdnNlMzSmdqaURDSlJhQ0NFcUlQ
-            YzREc3V1OFYxL1hwYlduRVhaZi9NUGMKHDArn+yrYuWg/iFZntwid7GLcwiGBqo7
-            6jkb7alHWw3J0mw5M5q+oOCnFWYw+Lega2OlNxRF2wv9UDtkGguB1g==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-30T12:35:21Z"
-    mac: ENC[AES256_GCM,data:yzKtA1sW6R3TLnXVTPp3v3Agzwil6qxA76dSSP4boyFSgZB5bNe7aJcE7F4kzdXxZuKgAjZBY0zCYZS3br1hyd1dKrjViWJgpnVngWhKiDPG9ecvfX2JbY2id3mb9QZtmZJ/ZB3MzfntN/Vab+ruJGdkN6G7Iv5FLW5boLeRpJc=,iv:rsRSP5dB2Odf9+pjrlthvSKQHIFg6OfvIj/TK6zSyk4=,tag:Bfn2bBG44GH25a/HTdw5Dw==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.1
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaHFSVUJoNG1UT1N3VElx
+        bUhOZnlZalF0c0FrVlFEdUpNU2Zsa0RSOFJJCmFtWXRyMkZIMU54QW9sV09vZ2Rx
+        TDR1M3Fmb1JXL1pBN0dWNkQ5d0FnUnMKLS0tIFhqeU1LV2U1R2d2eEQrNDZYa3hE
+        VzhNMmlvR3Bob0dCK1BhRklESnBlTk0Kac3TXF5jm8UmCAtcZE3l/t5WMswISfCp
+        3i0cyfxf8V5L5/vnv5TPCs8JROo3hL6elVA+tl7rYH29AnI+B2ZA/Q==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-10-08T22:55:16Z"
+  mac: ENC[AES256_GCM,data:CFONXeSm7/3Obh7pMagJmbYjAbPBx814pDO09ZZ1btORmEnl90wqu6sfVwjaRgzTASNRgVMOdJIJ0xoJztUXFwVTaJi1SRV6FMd+oVTST7yqAuOLxsQ6BnOWHlDmhd2u6/JDLh/ir0Pnx/hQe0q6aRWzW56Q4K51ZCMzM6irHgk=,iv:pHENtD9hx2MyMGKC/KYhQ7TQ/OX6dzRXMeL4dyiUHzw=,tag:8wcGiJDujxZ0pvnf1PLbJg==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1
--- a/values/badhouseplants/secrets.shadowsocks-libev.yaml
+++ b/values/badhouseplants/secrets.shadowsocks-libev.yaml
@ -0,0 +1,26 @@
+env:
+    secrets:
+        sensitive: ENC[AES256_GCM,data:ICQFLQ==,iv:7ohWwGwj/b+N3szJtcz/Ye6tJb+QptwhHwsyCBIp4NQ=,tag:U6+qYO6PFMU/UBkEzGTM6Q==,type:bool]
+        data:
+            PASSWORD: ENC[AES256_GCM,data:sgD/f785ojMPeXQEOfHQ8a8YIfty2kZ863xlhbWR5RI6BBAlqUcxzoEPuf1ywhhEDo4=,iv:tEpD8oPSWEfRto31eMXzGB8n0VqPYuqEO0RODyeZPV8=,tag:jWMyVDhOrP+e+lonf4PkWQ==,type:str]
+            DNS_ADDRS: ENC[AES256_GCM,data:FizWUQGwUB6a9g==,iv:pRo9XdiFFU7eIX8cuYEpt2+uGKpfw8Xw+qtvW3msWMg=,tag:/syUOyvBsNdDxwWkvqSxLQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0YXlKeWtrQ3k1RXJrWUF1
+            TmFYRVlxdVhRckpnZ044VU42R01YK0g1ejFzCk0waHM3NlpYRmRERWV2TzJ2cDZu
+            YXRheDNNNkFFUHpGOFVUdjlwZkI2TTQKLS0tIENtK0QzOE9XWGF6SXlOem1BTnps
+            YWhWUnhFb25xWUcwV0pjK0FYKzM5eEkK4u3dZXpMw4VRON+SCvFgGsI4pn3jGxpM
+            1Hy591bCkC+W5n6okuQauJUIEu28KE3EomZh9h7hg7gY5pUUMZhz8Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-21T18:28:16Z"
+    mac: ENC[AES256_GCM,data:ZNv1Pf1d48G5/EyKlEmD5rd3PenkGk3mVcrjhpiYWO47XiOO94oh/T6oibq9aNEcsl3KE9K9HH9fqJY+TboxJTHRAwr1f2ayzFxSn++axxxM0bxLpvd4CnDprjWaBaTNQPlGxLBtVeVqMmDiolWi5ow9cHS0FumpyvMHEnwm0Uo=,iv:1KPnOCF4AK1l5AEujspxq72cBa94mmeuZl8KSZ9OWPE=,tag:I5nRlK0veei0++nxh0wFWA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.stalwart.yaml
+++ b/values/badhouseplants/secrets.stalwart.yaml
@ -0,0 +1,24 @@
+env:
+  secrets:
+    data:
+      SW_ADMIN_SECRET: ENC[AES256_GCM,data:Cbeqg1J5J4oSmXhiWRX0jiEgflrI7MVRiLmFlM5dQAqAfO/IoruZsqfYtKZjxsPGhKA=,iv:+IKV2jW69cnZo1gCGWyf8hZDh2wvBAkcOJ1xEm6pBM4=,tag:So7bqtKscDOnKhCz+AOsCw==,type:str]
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXUHVRdFA0UTZCVitsYzFq
+        a2JhaUR2ODkydmN3ck1wc1h0UTRXMmI2eVUwCkd2bk9TWVFlUEdhcGk4RUFmVHZp
+        djJsOU1vanEySkpVMVN6SWF4OWd6MzQKLS0tIDJZcWxVeWJtOE1LNFZDZk5ZSEl5
+        eUhLTUwvUysyYnhSMzRhanMyT3BPam8KkK4cWHKEGGSnva0t6XjmVY9uoc8gHX+Y
+        CdixG+aPhhimSx64DsZiE01ZGnT7iL1OC/W3umGWZv3OO0IAEXo3NQ==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-13T03:42:42Z"
+  mac: ENC[AES256_GCM,data:R8Uq4puFFIG5/snx/pgFLbYX+uqFZoVQOyn3Iw1Vh7vRX1QkG0njFMp3sbHTMfXqvoRPuXNJNK88jA+e0P04BzfbKqj9O+biP+AksRsS+5uGIeNtZXWzFOwFl5+Fv/RLvPY08+stE09ChUVZzJSe+l2ed7OSs8FXtJrJAXrSSh8=,iv:elp8yKU2AUjIIa4b2sZm0VJbO+qg//+SjGMvm9dMNbc=,tag:k79lBuL4Pa6+P35kLeeoQA==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.0
--- a/values/badhouseplants/secrets.tandoor-recipes.yaml
+++ b/values/badhouseplants/secrets.tandoor-recipes.yaml
@ -1,25 +0,0 @@
-env:
-    secrets:
-        data:
-            SECRET_KEY: ENC[AES256_GCM,data:EUJXsWqV8l2YN5NkXvKqQRT86P3TS9d5fca8/vhN,iv:lFIhGFtCW9vAYwc5dSmkBYOqo6B5YcZygu6zAZ1qsrc=,tag:tIVk7YyN+bciP2wl/zMZOQ==,type:str]
-            SOCIALACCOUNT_PROVIDERS: ENC[AES256_GCM,data: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,iv:nfSnL0kLCvM6d5UtMqp//7FCoWBVdftRPJAWRTtu8Fc=,tag:o7S4B6rMP6bZnHguw/w2Cw==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3NnFEV3ZJQ1Z4Z1FGb3Fj
-            bzRkVjUrTUFIYjVmRXVYMFVsaWtKc1lWU3lZCnp5QzAvR0FXalR2QlhNOWcxZ0Rh
-            OHJzak9vdWU0WlZYSVE2ZW5hUVcwdDAKLS0tIFZsNURiSjU4ZjZtNmh0K0xRaUpv
-            UjA3U3FDL200V3JPQ2Zmb1c0V0hYcDAKbq2ywx3x9aiG+pCA/e87ja/1HfuA1o+n
-            BNeRIrOo6y4DBoCfaYVZc8U8m46Ul18RyGePsGUTVp1SSX54XfPb0w==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-25T12:38:20Z"
-    mac: ENC[AES256_GCM,data:yGvodMxMZWnExrWayPH0tRdDHvzeVf4dLi/AlEU/Smfh16K1rM2vnVLuo2EhBbaGj4nPl+VHGFdMgz+AhnnUhTtV0ez2uIPyGDLBJL5JhDG2937FjvJ7qduT9b/h7u+y9V4jxquaFruCAOX+uRLmsKuEucEuAAkMydRmRAM3HBk=,iv:KJpcAWasTALTBDgTYV4dh9QR8NIUmu5O5vhbZiknLyw=,tag:esfjk8CBlNByqU21l6zW4g==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.2
--- a/values/badhouseplants/secrets.tandoor.yaml
+++ b/values/badhouseplants/secrets.tandoor.yaml
@ -0,0 +1,22 @@
+env:
+    SECRET_KEY: ENC[AES256_GCM,data:vIzxdLGoKHEIGt451pZKwyFFQ7+g3ViryUHkhmzU,iv:JuSUmrUUgVL07y4mQ+z3lNRLpe0io4uDKndWpEgIVDU=,tag:6nsOuHbtgyGFJebOHChKxQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYmNkcjVyR2o5R0dJTXZB
+            d2NBczgrTllrM3hWdHVIcmhmb1dlY1FzN2pjCndTSS83Wi9WcytrT04xY1dyNXVV
+            YzlxWmwxNkpnMk1oK25wcDJTUFQyYk0KLS0tIHR3R3did2hlMThOUEV1QjNma2pM
+            NnNxMC9vNStLQ1dadE13RmhLWExqeG8KpSUTbfxuZX+7L6SK55BJvY8KIfqt2ykz
+            qNmUpeC7YHzDfoXGF6+jklMCVcUJDRI5UeZejZ7KXnI9OR8VncIiqw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-06T15:16:21Z"
+    mac: ENC[AES256_GCM,data:qVocy+iBsjj45hLObpoxxo0ZyzxCITXR52NLfo5NZvJutRLs5SfKjmecYVth4j1t15qUJ3GIYG2t2lGxqptMyPK7SG4ln0G8p02LP4XdboKYeZNdWlHYf3cMZtnST4WdrpTCNWhLs3+8ittBb3AsR3QBtwoqzalC+VatAOJ2IDc=,iv:y3TspYIFS/eVJE8x+fAlPhFrWcH9PM0Rajgt8yUJLSc=,tag:nUt0xWqdjfoeemTk4xhr8w==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/values/badhouseplants/secrets.team-fortress-2.yaml
+++ b/values/badhouseplants/secrets.team-fortress-2.yaml
@ -1,47 +0,0 @@
-env:
-    secrets:
-        sensitive: ENC[AES256_GCM,data:QKu+Xg==,iv:eAP8PIvxGq7UOwNJQnyHOYE+mKLnbjEUrZSFk8uPqyA=,tag:htZqjETH91yEhAX/6Xgl/w==,type:bool]
-        enabled: ENC[AES256_GCM,data:hGszyg==,iv:xqmXykt3WPrVDwxMNxm6BZhJTbIpD+G8/eQv8MG7HI4=,tag:IJn6m6+hPD4eM1WwTLxLYA==,type:bool]
-        data:
-            SRCDS_TOKEN: ENC[AES256_GCM,data:2ilNJSRy8F1kl1GMr2Ad8bnK2ZHbgpDZqPEUfb/0J/0=,iv:0IJeLqOT9m3q2Lief6TLxHqRFJeMr5m6MEClziQfOZ4=,tag:i3czXPc5EhARHYt1HbhHnw==,type:str]
-            SRCDS_WORKSHOP_AUTHKEY: ENC[AES256_GCM,data:hOUKQ5+qulrM4iqbZhzYM/bU09eB5B4pyLZ0EhbtT+c=,iv:zL82fYER9gA7zVRxoagMad2UNjusSuLVlbGaUrirvbg=,tag:2VDaRFeWo1dci/hQIhS/+w==,type:str]
-            SRCDS_RCONPW: ENC[AES256_GCM,data:cwvHxhCZ6Wk=,iv:LVklzE2DY5JZH5QTd73f6HERrUVH6+Ee/r+Mo2lVe+8=,tag:yUYF8a25KjUabvOO1nWp8g==,type:str]
-            SRCDS_PW: ENC[AES256_GCM,data:IxgvQ+tj5Ss=,iv:jYA07esoyKfUfc5fCllehoM+wkjVZOOaEu3g+xNp8tI=,tag:dsgr+UGU/dXuqliiBn8erw==,type:str]
-files:
-    servercfg:
-        sensitive: ENC[AES256_GCM,data:/2rGjA==,iv:0+CWB1FdaI7e95NlyjZ5sZs9U/7J5JYZx+WcFfj4CQM=,tag:lzO9Gmeoz38gsiYu9eLMsQ==,type:bool]
-        entries:
-            server.cfg:
-                data: ENC[AES256_GCM,data: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,iv:yakHdGa4RzyPeDfbiCZoGTFhnFgxCNcdwUtP1dsGhms=,tag:MyOtEHAfPDmlinQwS8JNQw==,type:str]
-    motd:
-        sensitive: ENC[AES256_GCM,data:t5cbqiE=,iv:WwHSfvG5eQURQTVP2KQ9OFvCKw9vqtlzZbEmn/lv+cg=,tag:OuPlOUptQOChYcC1Ept3PA==,type:bool]
-        enabled: ENC[AES256_GCM,data:4EEw/Q==,iv:cv3ixxGCCn3bLd5RR36ZhdDp1F3s03YIAjmyuDZenkE=,tag:wQi2l6GUI9OklirAlY1gaw==,type:bool]
-        entries:
-            motd.txt:
-                data: ENC[AES256_GCM,data:4zcQEGgc/wIkrJnYBw+ZxkNb7Prnch1zFiMOR0lDDR6/raeY4/e1lEeKGot1ZB98RXzohvZirHCPeQ==,iv:uvIW4dLDP3zWyOTSCIN/hb0GIHtIAEYy97dhCp6Y+b8=,tag:vS7/CXWK5SQu4IjLOXDuGQ==,type:str]
-    maps:
-        sensitive: ENC[AES256_GCM,data:7WsG5R0=,iv:HdTgsE4DhX0knJYdXbQ2T9Q21YucYwVM4DrcAhiFyK0=,tag:LqVuR20023UEa1V4AE0LWA==,type:bool]
-        enabled: ENC[AES256_GCM,data:JPpi+A==,iv:chn+v7RCtEJ+MfEAu66OHc1Nbl6nU3GS+ieTmT7G7dA=,tag:/7tBL/TIPDGvxObE2rAvvQ==,type:bool]
-        entries:
-            pl_maps.txt:
-                data: ENC[AES256_GCM,data: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,iv:+PG9OEQKYZE8dcWtdtXZ6qhsr1P3iTB8XqLVtqHqDgY=,tag:cU1TNcFmarl0e/JtLYPNpg==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcXNQRjZCQUpka0RFYXNm
-            RVRsQU0wWFBKQXpMcGIwZnEwUFJoUkdWL1RJCjhoWTBjSEdwUktINm5XcFQ0TFZ6
-            QmxIN0Z1c3hiVGFhNWRwVHRmWUlNR00KLS0tIERJemJTNENXM29xb2d3cVRkRzRZ
-            Zkg5QUhtM3lLeWZGbCt5WldXRVljemsKT4DIMJfAVRpedIcjUoA1QWz0AoWcwM3T
-            GEoeTRyzxM/913pQ2TzVfl99ilg+AXJddr/P5Av9NebU5SBRRL0/AA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-07T15:50:40Z"
-    mac: ENC[AES256_GCM,data:aaQG5T1nOmp8uaC0UDfXRNOsxRc+5D3ctQ1rU3GL3Tzm+xdRNgGI0JNPoihZv3/lkZACGWJe68/y6aEGw14AMMzEjVVw0tvuHdvkVblSBkE9guvkrCzv7uDvbei5Miy0vBpdmTN0AeiQ52l/OYa5Dkb6MhDDDyd6X89dxtAq+P8=,iv:KnDue0Qv/tjNapFeZ91drHi+shXvWjTQJd45mpHPxUI=,tag:ntmZ8u3qCwbjPygLv3PAZw==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.2
--- a/values/badhouseplants/secrets.vaultwarden.yaml
+++ b/values/badhouseplants/secrets.vaultwarden.yaml
@ -1,30 +1,30 @@
 env:
-    secrets:
-        enabled: ENC[AES256_GCM,data:Gv3Unw==,iv:pIls2F+alt1LfJIzfto+6YA4ih9KLBAzutd6Nz4uvlI=,tag:HUXRQI+vvN70eMsgNgeltw==,type:bool]
-        sensitive: ENC[AES256_GCM,data:/trLBA==,iv:w5IV1c7+d971WHLkhbi2jAT4smGUFNQjWXfAHjqMJtQ=,tag:GErKO9Mev/vNI8hVO0OCOg==,type:bool]
-        data:
-            SMTP_USERNAME: ENC[AES256_GCM,data:mxHg,iv:fnC9XmPBSoYg/SaezA9I7hUNcK16z0UyB0ujp8dOV/Q=,tag:Ude8TQ+m358upwTHW4g2vA==,type:str]
-            ADMIN_PASSWORD: ENC[AES256_GCM,data:arONfkxTVCKOrw4ehk1HGG2MOisfo1oZyw==,iv:T/MAUaHaIVL/oAuAMGwB4x4aNWrnjnvNvM7h4cgL0q0=,tag:F/GYyB1ZxFLxC32hKtsnSg==,type:str]
-            ADMIN_TOKEN: ENC[AES256_GCM,data:eiXun0SKGMichylKuyJPxRkO0nUbCb+ex1ABr4z/IM5CYgbptCW+b+Lw5BQB+Bf0OzcmX3d/GcwrJKXvbjBBelgMUZGXLfShB3M=,iv:git8/iNUeWPxwt/+1NT+rEoYz12hNUGPD6dg+gCyKTs=,tag:M2BqdsoitGIm3GeFBnG9/w==,type:str]
-            DATABASE_URL: null
-            SMTP_PASSWORD: ENC[AES256_GCM,data:KdFR+MmZyGsuHsItX8WNy6r5LXWMgUzJjg==,iv:89e34akVX23Nblm2FNd6u7lX2Z/Zigek8gdjdHD1PTE=,tag:BdpfhbsPHB08gfey80w6gw==,type:str]
+  secrets:
+    enabled: ENC[AES256_GCM,data:oq3kEg==,iv:aFDSRPNlvfd4DTrBjpCw/mMclGfLWjI04rbqfNERikQ=,tag:wJ+q5TbvUhvEpwMnFmEx3A==,type:bool]
+    sensitive: ENC[AES256_GCM,data:r7Ut0g==,iv:qaXqeP5m/X8Ug/XBsKZKWazI86auZ6JTEABRTH+DDLU=,tag:wARsiZJ2dmlZXMCFQ0Yw8A==,type:bool]
+    data:
+      SMTP_USERNAME: ENC[AES256_GCM,data:n+FH,iv:p27of9O0qoV5XJw6IGp8XTffrljVHTPZ4wNIN/B5/8Y=,tag:eX4AE19yEj42i+nPfs5uNg==,type:str]
+      ADMIN_PASSWORD: ENC[AES256_GCM,data:alHdDXuw1nJSOYM/2gamUCVr583htSXP/g==,iv:Tn9YlS+CMsQO96jyFs7as5CG8pC8zttxLXG+JwR95ME=,tag:9KnvViAmVA5rrgjD6hVmAg==,type:str]
+      ADMIN_TOKEN: ENC[AES256_GCM,data:bxZDnWP0ySaxJtBtPkXcPlIiDFuNO+OWe5m5ULJD7U+I0RFuZGvvpYZZ08VUOh9L4lT2827dbze5CRtDFYhRGgw+g/JtGuu4pXY=,iv:4Z1XIBERQ9LNzitwaPu+mO4RojirjtGP7/xVQm+yeZs=,tag:RksjFFzasXLdifmCBOJ0yA==,type:str]
+      DATABASE_URL: null
+      SMTP_PASSWORD: ENC[AES256_GCM,data:M+lP5lBGJMUoD8ci5MMXnkTeluRtZWzIdg==,iv:yJcfSZWGLdiyskRujU030Fp3cxT6RCTYekSQ2sw7iB8=,tag:DZsxhnFF8XNPiBTP+7INFg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0OElmeTA4K1NZUncvRjI2
-            YldLMHVhQVpKSWdwNHh6RnRZZmhSdC9wUlNzCnk5R2xrQzM4MlNxWFZuV0J5aHkv
-            VlNlSm02d1JQWlFuTG5USmlwQzdXancKLS0tIEFGSDRtc1pmMnVPWGhJR2NBU2xP
-            a2h1RE5XWmxxb05IZEU3c3VGaXRmeUUKmIgm5Apj8ipz/h8YYiz+ryVFSsjTCXMv
-            WWDuNLIhxO3inp6QgwWW1PhDjNWAn1uEULckyFAgDOdwp4Tof4A/ZQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-05T11:05:01Z"
-    mac: ENC[AES256_GCM,data:Sxc3HM0kCuNNRTn6R9kDWmzx+uJHjXi2245n4EwJBx3faX0WsH5I3ZZfjJl0fKLQJApEaN4i+vu/6fEWIfUrbbHfSLCQQDrj1OpXz0Yz+ett83JY+G41bjgWb316MYvuXp0zFlLsms54jCFMY3aV+ROIDXEGaEYncVwrbIXiJpk=,iv:wHi9wf1iiptgCiDD1yAtBw/xaOfymliihp7RyHg9J0M=,tag:uygWGbkgZyb/KZNCzxyPUg==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.1
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQmVwTDE3WVFrVmdvMWFX
+        R2lVS1NTRjZiWXJCUTBja2M5SkJJNDVyV2hjClpISEtmSDRkK0FnV3d4YmtQY3Q0
+        djJZc1RXTXp6RFBMNXF2UUJnTEROa1UKLS0tIG96STlndXZsZ01TMXFZaVE0Tmto
+        cjBhMmlJM0taZGwzZlhBZnllOWt5OXcKydH6vX+P6YoHYEhlQuN3B5s/ydFQg/bp
+        +sufia1rWgVkOrZ7WxEWahVHa0TAJL0gQq5mlNsZJP+++GgtZdpfeQ==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-27T20:21:51Z"
+  mac: ENC[AES256_GCM,data:qQZGHRZ7quFHLXlkNaZyTL+diw6AzZTXPcJbo1OOE6cWR5+slLyK4qHnCN4ioJXBbex+S23dKY1OJgk93mW8jDwIvfEW80SFYlgITXjxLWJRJJLnNcjCvKi5U7mtUzW1nFxZhKJpzv+uBEse0TFXMfCalZn5FXfT8xjiKeqGPu8=,iv:uEgpubv6bF8ciseSdwJcziC4e15ZDA338BzDjzmSZO8=,tag:Rgq9wKSTYQrdJfd4C08CCQ==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.0
--- a/values/badhouseplants/secrets.vaultwardentest.yaml
+++ b/values/badhouseplants/secrets.vaultwardentest.yaml
@ -0,0 +1,30 @@
+env:
+    secrets:
+        enabled: ENC[AES256_GCM,data:vAWPyA==,iv:nEzYTUi6VLTOIoPuKljxwNLoo1jD2twVXG8rbJt++5E=,tag:fQ6mHwjdsaaLXjPgy691RQ==,type:bool]
+        sensitive: ENC[AES256_GCM,data:vM91LA==,iv:/mNXXR6oI4/eMiyym+kK9N6q8RtchsGGZghgdrw9iMM=,tag:TCULlwJIKVSXF6IMuEV0aw==,type:bool]
+        data:
+            SMTP_USERNAME: ENC[AES256_GCM,data:2vIkJbVsF88SqkOCLspDd1qADWvlvDxZTPED,iv:9w05Hm9MDcrUDar2yo35jy/fDrF5aluf9T9gmuOCQjw=,tag:CIJKd8lyUZUuwsCBbdaBsA==,type:str]
+            ADMIN_PASSWORD: ENC[AES256_GCM,data:2i85zdr26/Id0zhtsAe0zJGavxYOxZ/zd7/bK+uEhPzQTduz7j3oXb9mvqpZD8PJxiw=,iv:hZDJMVhowwfpfxVobPztO4Dx5jEp6Vf57uWWppAC+Ak=,tag:MBKd6JS8nw4NscKfHIb22A==,type:str]
+            ADMIN_TOKEN: ENC[AES256_GCM,data:VyDuMYCnyC1NRkqMAnnejfPe2UpEDRiAHMt8CO2WWpbGWI2mUb3ApmnBmYclo2xpYduAwHzYfCtR3xZbXCsU5Tx7pNeGXkDaNL68Hzy90p3C9wVhjA==,iv:55Fl+NLBKUsgjugCHp7tmhM4fCCtzPrZdCyJfgFomWU=,tag:oSrfwc1gLy/VmQfeEBcElA==,type:str]
+            DATABASE_URL: null
+            SMTP_PASSWORD: ENC[AES256_GCM,data:iztp5mMTHIm4OROpLRZf/VC5ZO8=,iv:jOnAkVsEfSdGrwIIuc7PKPvACTGe3racjcjqqcfLjgE=,tag:BWBWJnWvaaSZM5u6Z1ywSA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhLzVRdW5ITFJmWHE5dkRr
+            R3pGbTh3UmFTTXR4VVVGRjlSUURudmxwM1hjCk16U3BKYkZTcmdwaFZtcTZNYk9C
+            M0ZBZk52bDBuNWZwa21SMU1mSnhmWEUKLS0tIGZVV01KQ3Z6OGltN1RFSks5MVJI
+            a2xWUGZpMmovY1Qya05nVXRZVUFDTFEKhF34OSdGZizs1/Rs9qvUOVtomQBvOFbS
+            hRsK3Orwig4HJdzj1UOZd8UMGwj6Mzhw+aKUJKL67igMwxbxVcaU1Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-15T18:51:59Z"
+    mac: ENC[AES256_GCM,data:FWplZ9jLQM4WkYU+FH3Unmq7o0Ma4vqXB6dX6ZAp87URaP3NHLfK8kFGlvUJKWDBKPOVlvdAMo9Mc+3yLwJgmhMEYOt7OX/tu1tRVKRD1LsyvCMJEMFDyBCwvdXw0p5dvap5/strpZU65keBKjfqhJvnAsDtAPQBrhV1kfiotRY=,iv:1J1DCgmJPAPQm0zsjCiyunNFqddhJfNBhBLJnESt17s=,tag:GSbogrUfTkIhGqYAFJQSpg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.vaultwardentesttest.yaml
+++ b/values/badhouseplants/secrets.vaultwardentesttest.yaml
@ -0,0 +1,30 @@
+env:
+    secrets:
+        enabled: ENC[AES256_GCM,data:vAWPyA==,iv:nEzYTUi6VLTOIoPuKljxwNLoo1jD2twVXG8rbJt++5E=,tag:fQ6mHwjdsaaLXjPgy691RQ==,type:bool]
+        sensitive: ENC[AES256_GCM,data:vM91LA==,iv:/mNXXR6oI4/eMiyym+kK9N6q8RtchsGGZghgdrw9iMM=,tag:TCULlwJIKVSXF6IMuEV0aw==,type:bool]
+        data:
+            SMTP_USERNAME: ENC[AES256_GCM,data:2vIkJbVsF88SqkOCLspDd1qADWvlvDxZTPED,iv:9w05Hm9MDcrUDar2yo35jy/fDrF5aluf9T9gmuOCQjw=,tag:CIJKd8lyUZUuwsCBbdaBsA==,type:str]
+            ADMIN_PASSWORD: ENC[AES256_GCM,data:2i85zdr26/Id0zhtsAe0zJGavxYOxZ/zd7/bK+uEhPzQTduz7j3oXb9mvqpZD8PJxiw=,iv:hZDJMVhowwfpfxVobPztO4Dx5jEp6Vf57uWWppAC+Ak=,tag:MBKd6JS8nw4NscKfHIb22A==,type:str]
+            ADMIN_TOKEN: ENC[AES256_GCM,data:VyDuMYCnyC1NRkqMAnnejfPe2UpEDRiAHMt8CO2WWpbGWI2mUb3ApmnBmYclo2xpYduAwHzYfCtR3xZbXCsU5Tx7pNeGXkDaNL68Hzy90p3C9wVhjA==,iv:55Fl+NLBKUsgjugCHp7tmhM4fCCtzPrZdCyJfgFomWU=,tag:oSrfwc1gLy/VmQfeEBcElA==,type:str]
+            DATABASE_URL: null
+            SMTP_PASSWORD: ENC[AES256_GCM,data:iztp5mMTHIm4OROpLRZf/VC5ZO8=,iv:jOnAkVsEfSdGrwIIuc7PKPvACTGe3racjcjqqcfLjgE=,tag:BWBWJnWvaaSZM5u6Z1ywSA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhLzVRdW5ITFJmWHE5dkRr
+            R3pGbTh3UmFTTXR4VVVGRjlSUURudmxwM1hjCk16U3BKYkZTcmdwaFZtcTZNYk9C
+            M0ZBZk52bDBuNWZwa21SMU1mSnhmWEUKLS0tIGZVV01KQ3Z6OGltN1RFSks5MVJI
+            a2xWUGZpMmovY1Qya05nVXRZVUFDTFEKhF34OSdGZizs1/Rs9qvUOVtomQBvOFbS
+            hRsK3Orwig4HJdzj1UOZd8UMGwj6Mzhw+aKUJKL67igMwxbxVcaU1Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-15T18:51:59Z"
+    mac: ENC[AES256_GCM,data:FWplZ9jLQM4WkYU+FH3Unmq7o0Ma4vqXB6dX6ZAp87URaP3NHLfK8kFGlvUJKWDBKPOVlvdAMo9Mc+3yLwJgmhMEYOt7OX/tu1tRVKRD1LsyvCMJEMFDyBCwvdXw0p5dvap5/strpZU65keBKjfqhJvnAsDtAPQBrhV1kfiotRY=,iv:1J1DCgmJPAPQm0zsjCiyunNFqddhJfNBhBLJnESt17s=,tag:GSbogrUfTkIhGqYAFJQSpg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0
--- a/values/badhouseplants/secrets.velero.yaml
+++ b/values/badhouseplants/secrets.velero.yaml
@ -1,26 +1,25 @@
 credentials:
-    useSecret: ENC[AES256_GCM,data:7gOgTQ==,iv:Wiutik5u1CZ3jkI5lL4JLwvKDQrjNPSfmnyet7SBVzo=,tag:SYm+fm393zhqNMKejQfYKw==,type:bool]
-    name: ENC[AES256_GCM,data:NKs3qbFPKGIhXI7lzGTq,iv:MWumBc7eHro/P1oLZxQArvfoWmdJN+S0d/Qxb+ohI9E=,tag:pxJQzB82Us+UflGc271wGg==,type:str]
-    secretContents:
-        hetzner: ENC[AES256_GCM,data:tlumlKIfwugQj5Dj8Lu9HuEcKRv8v/JhTTz4oOvRavxmeBIGElfn/MyWbK68pagfDatyKsrYjqPTutYykJWVOWdHFOCIXunnI8vkDbzpxAH0BqyZQrek3s4mkTOPJkjfW6V1MNr5AvWMYLwptcIp2Q==,iv:E3jBlMgIXzuLCNVxEBlTiiVpLCdEolJuv96bSYamwLI=,tag:4zkhZUu+on0K1zF4/8tiWQ==,type:str]
-        etersoft: ENC[AES256_GCM,data:/kQ9eCnHIfDSzHxy2tbVgwe7C0cF+l5LaKCgksodxUJgxTQs2pJHyx4cluoW62RwOQKHxMCy3IaqphD2zZOIVKbR0q3xVmBoxcBxrKE5UIlSxbQ=,iv:YcJF8OMiFMz147c8lXVU+ccjq1okYnHiwUvJLmJHi20=,tag:hnwtfAkBCpZUy4TEGtMOOw==,type:str]
+  useSecret: ENC[AES256_GCM,data:jNo9Hw==,iv:tFJ1xXlSvzdmGk32IxNoygKkOTYg1uhWiTQ+Fb4vxho=,tag:F+aoapAoe8EIwl97pcklIA==,type:bool]
+  name: ENC[AES256_GCM,data:T6hiTDHyG7iqx0aQg4g6,iv:6ykrI3VcYPKInFAPsYl0TzynEdl/PQvCKQp0UCtytXM=,tag:IH64olXo7zJ2zOWDsqCUxQ==,type:str]
+  secretContents:
+    data: ENC[AES256_GCM,data:rdQwbeRiROTz0JHarw4Xc7FMJ0ynSaFniR+8zi82bg1sdaTUrKZrveFktsvR05CsEuskIs0nVsJh99XmR5ro4NGvzc0V6hpR,iv:+poyt47TO3+lVzkK8L32OJreylYPJlZslBGpnNlO+aE=,tag:pMIQ6aEGC8ifEdfkA+RUQw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiaW9NQVR6OGtLV3ZqMThn
-            bWsrcGZKNVk1cXB2aDc5RnRNbTMwZVoyRERVCnEyQ2tFSlZmTnhRdGQxNW1BVGNs
-            QzBjM2tXWnhQYTBaR1pUZnUzMWpYTmMKLS0tIGQ1emdDNlVGdzNWRlRQcU5xSWxB
-            bWdPdVF3RjU0Z0RQWXZWVUVocVBTeWsKogQ3kmwrShfBOwMC+JHNiavRHryv+WNY
-            dkUkONkUH5HEWN/6M7bsMMqjkH0D/upD5UXOXr4fiibcM/w+XI/BpA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-16T14:51:45Z"
-    mac: ENC[AES256_GCM,data:65vGxoFLwH9WpxvqKYi1FEb8DhRWpq4K5cTjfqQEXDxbzKDk/RjTtHpFZ2iLnAOcL2ECvL+JU9yPeM7fS06nTW/TC/oP3yNGfyJp84IWNzrBVBE8HCTaXthxcRSIbGwvdCihViT4gZU7VkMaDt1WnEesjq/KQqcK/TSpCxhSyjI=,iv:HPfV3MRyeilrAFprdsLT6H//V74YzRiGM8O7TmU/g5c=,tag:tQHA6JW5ELAUXzIlJdLYFA==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.2
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYldnZHQ0NCs3MDg2VGgy
+        MWdxS3dzbk9KMllXcWF6eENxZGhValJYR1VzCmJKS09RZXcrckJGU1o5akFidnZa
+        dXo0QUxOMThyR1Vqajg0T0RSZ0dtaEUKLS0tIGZ5WjBZYlVYS3pmamF0dUszU1dM
+        WDhwZkNTTzR5UGRpYkFUTWdldlVEd0UKr/6w/J2wHcE+N8Ej9+X596ENLtl/Ux23
+        aTHu7gPHMEWZx4/r3HQWkY4IfQBM3Hl2069DhiXSyFPZJPYB6KECXA==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-27T21:21:45Z"
+  mac: ENC[AES256_GCM,data:GdEoqBoX4sjt0Q/89H5vl0n0B8tRLQP+LUwKu3joos1l9w3tVvzDV+a51DDLRtMHKHQlsUMl8aJ/xzBoE61qjlDSZ/AbQ+P5gv1LRMwsDSDhpv8NJH1wfT920MMCYdB2z/xuqwnhymiYFIM+c2dEcBU0bx342f58jn5WMn6n9Ac=,iv:BnOEGSyPyLgPc5iGLhDXH+Roiy3Gt7o79hUK2P8z1dc=,tag:N/vks8VJEDnEs/r6eDR45A==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.0
--- a/values/badhouseplants/secrets.woodpecker-agent.yaml
+++ b/values/badhouseplants/secrets.woodpecker-agent.yaml
@ -1,23 +1,23 @@
 env:
-  WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:3z3rdQQVxbTx5muyaLmBamvRJ4TvKV+EVsaFyy3+Ccnn5IQlLFBr3MNWBUg=,iv:EGS92qU3Uy/zIICS7snkYjHQli49izhkYS6LAAGO2U8=,tag:8zMCNnIu+0dh5fYGLQgUtw==,type:str]
-  WOODPECKER_GITEA_SECRET: ENC[AES256_GCM,data:nuSOHH/+ALl84d5L9kalNwZ3GCstKGn3lHdIu7fiU9Uhw0SHRZk/kOKmzCk=,iv:Ya4UI9T0i+ojzY8VsTiCIq46TfJ+3xqluheWXGkcIJU=,tag:Y4kxqsH/PLTZn9tujrdOGg==,type:str]
+    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:cJoxJw6c6FYZ337i5P6dGUzLmgUn9Z+/Ed9aUK76WYnB8m0D9h5IlAlOfCQ=,iv:1BgxKsaI3dhhPNkZbpHKBn6GXadn1RD+3Q4RwKLfmcU=,tag:y8qLWwpVAwKrOWN1cC2ulw==,type:str]
+    WOODPECKER_GITEA_SECRET: ENC[AES256_GCM,data:VdWASwxPurzmfSjb2h8wBw3XbZSfG9UG0jmXSbTBPreZ+l7UQblI/wqr8Tw=,iv:APNuiqimA/ofCWsvywj+SJedQBMgRoCd65Gd3Ps2/fw=,tag:ATLGT4ACZ2GR46qD9ABUng==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6L1BQbTJzem5rNnRHRDEv
-        YVRnZEJEaDlXUnprME1NeW5qZFNNU1hrSERBCkkrdnR1UFhNSXFYZ3pwLzZyOVJ3
-        bDNpbWZobUJKTkFPVFc1S3JVa1YwMlUKLS0tIE1lK3RSNXNySnZwRHFaTjczbjZH
-        dlFMR2xEai9Pc3NZR3h6d29XZ0R4aGMKuXgaEmSVdla8JquLkMKvSYAdE+HFd2P4
-        jT3nfL4oFdC5t1vlz7uAX3DtgoDlUF3+x4qxADi6F3N0QILV0DEezA==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:xi2QnnRQFhxs3R0v63g2f40+2t9eaWbOU85ue4s6Wkr7Fdo6jGG5ThUyBlFyqSO+aKGBHBYHHmNVG+gloFw2vhmG2tFloUtj+6vttAV4sxJrK4ixEsb8JHlAdLPTG8h0ILhPaTj5PQLrVF6q9QkJaRMUCa9alAWf8kQI3GLUJeo=,iv:426Eo1NbcjarA2fT7H8Q2DQW3PEBUWKSjgl6lUI2Y0o=,tag:6pU0kjAKskcCvha71mKLSw==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRFNvdnBsSHFBcjlGcGl1
+            RnU1NEpZekpucTNCZHBGcXdBakhkU1drb2dZClVYZ2xMVUJiOXV2enlBbm1TS2Mz
+            ZnZ0UHpsVHVUU2ZkSGtwUXNMM0R6VjQKLS0tIFR4NEdTTGRIY3QycTFhRzJNSEY0
+            SEs0Z3VjaTN2Y3Z0QmtEUEdQdmtwYnMKxQ3z1p2GulSOklUEolWeH20JeFwNpZqY
+            870x5UtCJNVTMrIDgwMQK3hn+yywxPdgSRhkW3bqH4PJDxi78UUpXw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-10-05T08:06:51Z"
+    mac: ENC[AES256_GCM,data:pc4n/3MEP0GhmZ+wdbOiK2gj7ah/9IJ2hoXRtM1sAGy3UPNBrF5VE7hxnAi393YpWBank7crDTvg2aJjhVt7XqB8zcjiHtNMlcpxL6fJ+uWxeH4uVj/NBfSvoO410oYbtPuKMjZpPU7KACmTJ9tzVIZdZOScXx7fLQxNUq01Hu8=,iv:18MqueG9MHrTcXmu14Q8LPnMFT9lolDkCbXjjA2P1qg=,tag:6ETPd8vZ0CCGEUP5u8ZxNA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.0
--- a/values/badhouseplants/secrets.woodpecker-ci-kube.yaml
+++ b/values/badhouseplants/secrets.woodpecker-ci-kube.yaml
@ -1,6 +1,6 @@
 agent:
  env:
-    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:anLCJ+6tbLehtjm5B+MkQ91FLbYIYWVU7VCQN7pPSBEgo4N6bsaWxVG7kca8aIuRkwItmRSj/ZZqvbsRZa8Deg==,iv:5Trc3lT3zwegVm0NYamIv41TKsOziNga5VuD5t7TV9Q=,tag:3xz6oqWwsW44z15aepWOWA==,type:str]
+    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:w9ey2dRr2J5Wp0NzrhO4nxLcQ46RkZzXJaodUdCkwmX0cRQ5U26E7SVHiCIBbQw4b4PGVUz0sqkmQKfSilbG7A==,iv:UFW80TdFuASBwVwk91WehKSwga6UCvcC5F2jjgk6Gi8=,tag:QIVzA5kJAENCkMT9jsEgLA==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -10,14 +10,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSnpmYTJBWlVGMlFIV1dG
-        SjNnZEtUVUx4dWc4N2puUWhPWVZlWHZkQTJFCjA5MCs1Q2R1K0lLS0dJaG1MWTRz
-        dGZtZW82M2VsZ2RlZHZndUZGdDl3RjAKLS0tIFdqclNXaU9rOU1XbkVieXoyYXIr
-        SjFSRDhtNDdwZGdFN2FSYjRML2MwTlEKf3SUMrlZN6uuF52MumFx6pn1xU7Dsy1I
-        VEUs4Io1W4OGRAG0IKme+nMAAQIwWHQFHgKnkhuN8IwpUB/sC4NjOQ==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvU1kySE5oTkVTKzRkSXNO
+        cG83UFBoMVh2S2tjcG1KTUNYSVVEaWxDZ3pvCjluY0IrWWFmYkxzWXFITmFUZm00
+        a2ZEUTU3T25QNDkySXJzOXpmVTV5dmMKLS0tIFZaeGVlM2tUeEUzdlVzR3c2cGNv
+        YWUyaS90YVhwUHZwOFVXOEg5M3cwOWcKTZXRuLS3Ywd0BTN6emE7ngm5RWTWI1Ka
+        IKJVfvBa9DtpD0diWbaQJq5Mabh6K+VXlnM8T9p6qtWimR/Jy0N+6g==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:2d4yOBSWyQI6Dr0oDsv3Z+Sxuj3/8jlCdArKOpcLWSTKNaRCwXzzBxtv73v7uMjVNsuSkLujgeT3WCeW/oPGrKMVAGYqPAAeb1Gn6dlFeX5hJny9m+jyCByecrbqqy/ADWWy2Hp8yK/WZ+5LDrie6D976MGvdoKD3uIrbJt5za4=,iv:Q4I+Uh8PIy/gKUd8JgtXwHdwzTGd0irUdUQklRcLPDI=,tag:WADvJgqLxXMvBlgKzNWbkQ==,type:str]
+  lastmodified: "2024-10-10T05:07:15Z"
+  mac: ENC[AES256_GCM,data:8clnBEEKrGK2G/PWdjXNhiufmR4C52rVAeNR8mKz5R1bvxN3wyj/kz7I+pdS1EI+fE7ZVuB24e4cmYHTrY4vJJOc8yT8wHT7WfLqKsia8A9AZc+wKhlyRr5w0iyBs834bIe9IKJymvqxEm58vjujybdRcWkqBY7pySQGYQ4MTDw=,iv:vT59gP4SegYITLdIrcgVv/ocSCmv8lr+jyRZX7Io4Ro=,tag:SbMp5hljVbKbaevo8KRKig==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
  version: 3.9.1
--- a/values/badhouseplants/secrets.woodpecker-ci.yaml
+++ b/values/badhouseplants/secrets.woodpecker-ci.yaml
@ -1,10 +1,10 @@
 server:
  env:
-    WOODPECKER_GITEA_SECRET: ENC[AES256_GCM,data:kf+JUqlc2hXNXYhuRaPnvf84oPPV0Du/cfZBOTibew4C9Jrn9oJ7ZaHNLLpq268cSPU4yH7Rh+w=,iv:I3tjqOT66Bjf9TYwVZOspxY1+9k+vX/D8eMYEaOkV5U=,tag:RbQ+/zJz8XryYox/sW63LA==,type:str]
-    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:ndIljGRejtzZG0JksJuHNVDceVWP5jY6YwIJpaJHESD2MKrKU3pPm6OrkL/MAnUv1Pb68iJzPuld1nXTI5RQkQ==,iv:K/9rHNwUSk8UYDDW/Bjg/P48bdR+hUo800yclhu87lQ=,tag:kzPdAQS8DLNufdTpHtCFQA==,type:str]
+    WOODPECKER_GITEA_SECRET: ENC[AES256_GCM,data:EWJ97zJee7yMCNBPmX3FnyH0vbtztVtMppGDQv2mfF/o+t2D8EquFtux5HUiutr8IrIM1BYXWeU=,iv:vcavAGo5YJ4jFFHgjI/iSOUkG9ujdPNXPx9We+RLXPk=,tag:nFpRLHMq65cFwdyavMD8VA==,type:str]
+    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:jLhHB3z2CnTgikMqtlZKBeP2VWqAf6fpMTdPDisr1cymb9SPWjMjvojNRhpUp0dBpkgVlb6i6hbg3FK+l8g23g==,iv:AldKY5wZqN3hCImoLc0ox5f4dx7htSFLXQK4PXvQH4c=,tag:sten4kMl+2Q6P9C1dxP46g==,type:str]
 agent:
  env:
-    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:eCw1v1MwJZ4qPQLHHO9cXVFgdtBUSR4Y3SncgakT8NVH3C+wfx8NAdEbcgPU2pDOrCLuyAxZ/MhVyRqmntpfqw==,iv:SBx4orFPfKeg/cuLmSTCHYwYWrGRIbN+DK845Pqzydo=,tag:921xn4QnZKXdiKOnEb5UAw==,type:str]
+    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:FDxYdYR6DDRA4vdlxzB8oNGM2GsDlKVjZGLz8E0eL5JxzMiSfZvpAixKRN95L+pdpJhZJKAxWUIg/21/3ZJgjg==,iv:yova3Ane8wHOKP1uPWF/j2vwfoUQ67siv62Z4iubMT0=,tag:WIvNbUGwm2NpYtHO+ZZcOQ==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -14,14 +14,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSmFXSXBVeklpVW5JUWth
-        aDczSVp6ZXBGYnlHazRtaGlWSCtMY3ltWUFNCnk2bnZpdG9RM1NjallQbTZZOUQz
-        dUxqdmRiUnFZL0pFOHVvMjdMZ0VkZ0EKLS0tIHEvLy8vWk81dklkVFZrY0FiOHUv
-        UTJrVGVFTGx4OUVsMFdwY3hEbktwbGsKniv5h/9TCyAWaw5Dq8jg43ttgdJDaDw4
-        t2M8sa7rLZlRK/4Udm7Chv3jgscni3J+OpJa1j2LZ8NF8vn8CZ8ntw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNGN1V0hyS0owU3ZTMzhl
+        cEVXd0NrYm1TajVtZHJRYXdQU3JCRm12UkJvCjA5UFZWZGJlcDNoUFJabDZEc1BE
+        eHdrbWowdkdGdDJvKzZjOVVzcjlhQ28KLS0tIFE3UHhUdHVtUkgzSldHMENsK25Y
+        N0NxK0Q3MVlIUGxRZ2JTMnZnVjRPcUEKIBWPco85fPWl0cv7G7Sl2NlHGFe4gQw4
+        2CU1PhmQYmbkSL5mnz3f8vQ/72JA6p2PGGL+kDlpgL+37mYocNDHyA==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:W8K98mnf13boTClSRodw0LLz717rgE2qusnmVXxAYykYKggDycI+/8PL49wlg+RUNZzUsHBCJLqTVUpBkq1LD5pJ4ragY/PVGkDFRJMfCKoEFM6lwRHwntHI345O8t0tF66rV25McmJIFSls5TVUrMhcxpybbLOAbcaiUKowg/o=,iv:jQsxV+4gT16+upjrQi2s0qS8PD2As078RiSrd78l0Ec=,tag:ejZIt4r/UiD8Z2jPYEkgZw==,type:str]
+  lastmodified: "2024-10-10T05:05:36Z"
+  mac: ENC[AES256_GCM,data:k8T0g9VAVgeaaguE9+QIgSSgCoGAOkadwJn24XAVm8f2snlwb0qargepxLDmG5Lzs8XdoOr8xWHpEzNKibP8UPTVkf3xw8KnAiRI1SDK2biTzthzOqTB0A/FrGatakfPNDqeP87gteBe25HiMcrJnqXeYOWrGyHIZjCZVObM+p0=,iv:cKbVkzyVPkPlQXswtUf5wXyrg4duG5V3IokkhULc9o8=,tag:XTI1eQyZsbHjm7z/b9W+Lw==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
  version: 3.9.1
--- a/values/badhouseplants/secrets.zot.yaml
+++ b/values/badhouseplants/secrets.zot.yaml
@ -1,25 +1,25 @@
 configFiles:
-    config.json: ENC[AES256_GCM,data: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,iv:O08z9Dz3ywRjsFu3Uu22+87/ZoElw0hmvsYPKYaBFuY=,tag:ph4Zi+Br9cdGIlldKw4TGg==,type:str]
+  config.json: ENC[AES256_GCM,data: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,iv:GzIhDRZ8w1mcF6lmvWBd3s8vWakJTsXOLKZyc0t1qM8=,tag:ibOApcXGhVQtHs60yL6vXA==,type:str]
 secretFiles:
-    htpasswd: ENC[AES256_GCM,data:qdx8p+CfYhStN+gKUI5Zt5KD5R0AfZQUiERw+SVXgp7+zxYbcj/ZcdKgxLi06U2HJs1QTNdoTx5eDW5QY0CNUMxKdoGM7JSZwr0dckRAT3xGKyMUbzz4CTdi5UOSRX3EtI8F65tCDLWlneFWrWRzGgIOq6gNQV0TqGyzNfQClZ470AanPcpWFg==,iv:vZJF925Zq7xPsV9OLOF5eSMqNwtCc7FNfWNV/AQFdjQ=,tag:P/IezO7b4vYKA82OJUusVw==,type:str]
-authHeader: ENC[AES256_GCM,data:pa9BRXRwPJHQyD0vzQjkgKu8YCbQwFAFgz3swq+Ofl12r5t5JFfKkU35zEKb7wJq,iv:xL2e/6sFxO4/FZRDsBxgzNujsLnIXO4LeEHsscjMIXk=,tag:oeb368hj+PWh9y4pLN2mNg==,type:str]
+  htpasswd: ENC[AES256_GCM,data:MpLy/v1WNM26m2fIA3UGCWygS9Z80P1P7DayXVPOX3LBXBsOemasaBX9UKxyY+AmIv4i1t8ytP1b/8sC7ySxkm/WRVo9YUSAZM6+yyI0SITv1opSFlsgtXoVevsOFJFcBvl4BQyDeCanqEvV94fErFmRMLO/an9Cd2WcU7CFbufjx6/sTJ1Vkg==,iv:gKgR+o/oljsVJh5m5NwjXtA76BqkYV7kMPnuevFUx8w=,tag:S8pD6rcg10SE0DJaQPgm2g==,type:str]
+authHeader: ENC[AES256_GCM,data:M9vETrcSu0qJBRC2iydrZFDCLiUYpWrmLcH9U0kGzJ+k578iwqds6Sc9K6ZM93eR,iv:IMpRpA9esXD1hVQDM3H8XS3A0bQCqqkgo0nj75g3+Rg=,tag:1OQxun7VcUEtylIjDt9WFQ==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5QkNnYjFxN0xVVUFHOEJB
-            NnZicWVWOTg1Z1hGSmNjQU43RG9PNTR5Y2lnCmJLOTQvQndxN1dKV3pyZWdKOFpo
-            V0ZZbjRhK0tIaXVERnBFSFpybUEvNWsKLS0tIEY3d25aTlNCaVpxUCtkdGduN056
-            VFRWdXhMYmd6am9aTXNUYXRaWllpYncKxYAq1sg0mAvAjX7mfekZOcR9y9e5gSF1
-            L74UaXFN/OeQwzqlA0W+EuBeMvj5Xrp7ENconJ0P3ecAFa/t8VujPg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-12T16:13:40Z"
-    mac: ENC[AES256_GCM,data:N6uiTszn+I+L2HmWDLG9/h1sttQQltvfM/7Lq3tdRei6fn6Erog6u8IKbr0guRe/sJdt0SMB0xE9gB46Ldwyv7U+Ut5gMSxrxz7FEZSBeH5ZKegGvmkPIqafwL8frZqwlR/3Kmbegs9yAM9VEZ/qcprx2M4gpffiKTATxbm0rI4=,iv:8OMSYrUxcOeuVnbOXoPgs42QPTXLOICnLvXuSbQBz6k=,tag:QPqwsHn1ktM9O2rsohMIIA==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.4
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdWZPeXFtVlFPTXFaNG1n
+        TVI0eUN5dlA1bjhiaGhGVTlHUUMrUDRYN2trCkNqSzlRdDNhSmhsYmowNGFIODg0
+        YnlqZXdNRHJkbWdRUFRjaXpIaWU4QmMKLS0tIDBvbHEvQ1NWR1hQT1VRVkdzYUw4
+        LzNrVHNlVndsZURUeEVWckY4WDZCSHcK7SNg2ZgXTjwt6clTiIVv1J2N/NUIpNxo
+        6TGl0e/iXAxfdD92ql3XGOoqWdawLuh/8XIfhTOCm119gvirQg0VgA==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-10-08T15:36:19Z"
+  mac: ENC[AES256_GCM,data:wJUlji1rYL4TQNJhTlnM8UyrvR1+TtJyMZQZMUgPhpE7Eq3buvmr3KR9JTscKkS0iT8pU69WMJLZLrSLGCkBAewjO7pUmz9JwwPbKhajj9Y3TSqgpo1eWafwjk+bUy+g79lV4De0cHT7rKT8ytjl3xe3sqEZugHpIX4HKJ7SUZU=,iv:1QSEoA2F1pt8NesmMNsfdrBCQYo1bksmcYZxCYpYlGo=,tag:oXfnL74WQ6GtfrKi+HmxmA==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1
--- a/values/badhouseplants/values.cert-manager.yaml
+++ b/values/badhouseplants/values.cert-manager.yaml
--- a/values/badhouseplants/values.chartmuseum.yaml
+++ b/values/badhouseplants/values.chartmuseum.yaml
@ -1,5 +1,16 @@
+env:
+  open:
+    AUTH_ANONYMOUS_GET: true
+    DISABLE_API: false
+    CORS_ALLOWORIGIN: "*"
+persistence:
+  enabled: true
+  accessMode: ReadWriteOnce
+  size: 2Gi
+  path: /storage
 ingress:
  enabled: true
+  pathType: "ImplementationSpecific"
  annotations:
    kubernetes.io/ingress.class: traefik
    kubernetes.io/tls-acme: "true"
@ -7,14 +18,8 @@ ingress:
    kubernetes.io/ingress.global-static-ip-name: ""
    cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-    external-dns.alpha.kubernetes.io/ingress-hostname-source: defined-hosts-only
  hosts:
-    - host: uptime.badhouseplants.net
-      paths:
-        - path: /
-          pathType: ImplementationSpecific
-
-  tls:
-    - secretName: uptime.badhouseplants.net
-      hosts:
-        - uptime.badhouseplants.net
+    - name: chartmuseum.badhouseplants.net
+      path: /
+      tls: true
+      tlsSecret: chartmuseum.badhouseplants.net
--- a/values/badhouseplants/values.coredns.yaml
+++ b/values/badhouseplants/values.coredns.yaml
@ -0,0 +1,32 @@
+service:
+  clusterIP: 10.43.0.10
+
+servers:
+  - zones:
+      - zone: .
+    port: 53
+    plugins:
+    - name: errors
+    # Serves a /health endpoint on :8080, required for livenessProbe
+    - name: health
+      configBlock: |-
+        lameduck 5s
+    # Serves a /ready endpoint on :8181, required for readinessProbe
+    - name: ready
+    # Required to query kubernetes API for data
+    - name: kubernetes
+      parameters: cluster.local in-addr.arpa ip6.arpa
+      configBlock: |-
+        pods insecure
+        fallthrough in-addr.arpa ip6.arpa
+        ttl 30
+    # Serves a /metrics endpoint on :9153, required for serviceMonitor
+    - name: prometheus
+      parameters: 0.0.0.0:9153
+    - name: forward
+      parameters: . 1.1.1.1 1.0.0.1
+    - name: cache
+      parameters: 30
+    - name: loop
+    - name: reload
+    - name: loadbalance
--- a/Show More
+++ b/Show More