zaphyra's git: nixfiles

secrets: add `pratorum`

diff --git a/.sops.yaml b/.sops.yaml
@@ -3,6 +3,7 @@ keys:
     - &huntii age1laajqafnm4ft2m73wq7yqug4ts04ddn59wlqs4t30upeqa35dpdqu8fu3n
     - &morio age1wpffcr5p88a2x9dzx5v3sq4jqurvygu94fx773n229fqk4p95qzs840cmn
     - &novus age1tud4lvpmpx5nqceyp09ls9ej8l80zlh29d8cpjxcajfnnyy85fvqs63snm
+    - &pratorum age13f7t27x326hamq39qps2ygrftq3ylyn2nx8xga2kqaxgra2p748sphmetv
     - &polaris age1qyqy5we7zua06ppj654rgd6t7kyw3gem6hnexna98j60klyus4zq68cjlz
 
 creation_rules:

@@ -13,6 +14,7 @@ creation_rules:
                 - *morio
                 - *novus
                 - *polaris
+                - *pratorum
             pgp:
                 - *zaphyra
     - path_regex: secrets/huntii\.yaml$

@@ -33,6 +35,12 @@ creation_rules:
                 - *novus
             pgp:
                 - *zaphyra
+    - path_regex: secrets/pratorum\.yaml$
+      key_groups:
+          - age:
+                - *pratorum
+            pgp:
+                - *zaphyra
     - path_regex: secrets/polaris\.yaml$
       key_groups:
           - age:

diff --git a/secrets/common.yaml b/secrets/common.yaml
@@ -14,63 +14,61 @@ sops:
         - recipient: age1laajqafnm4ft2m73wq7yqug4ts04ddn59wlqs4t30upeqa35dpdqu8fu3n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3QTkzdndWaFhLZy9pa3FQ
-            aURYemVnN2pTeFoxQmdaMUJnOW5UK2tSZ3lZCmwzNldDaU9CU3M0b2F5bEttRHZ4
-            bVJyQ3dPV04vZ0JTMWVZMFVsWkRuVjgKLS0tIFMwc3hmRUgwTTFMVkc1TVVWOFF2
-            VTluTTNXN1lwMUNNbGIvUXdTT1ZINncK1vSZvkMtI0Cal3JJ7stQ6r1ifiZN57wS
-            Gwq5BN8e6/sPihezsVN6CudDXP8FWgxc2/HFbtey17ZNWCtrH2FMuQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFays2OE9mVVA0aytkUko0
+            M0pYbjlSSUJHaDFFdEN2TzFHZjhMa0FWeG5nClE0MHBWenYyNWNtWVdKRllUb1JB
+            TTU0ZEhGVkh6ODVCUDVEOG9aTHpWSkkKLS0tIGx4UWFDZmJTbkZyaTUyNjkxcTNV
+            TkVxZVFCK0g1djVuU25lY1lzdkhwalkKxtyC6ayV7qCXniEYWdjO2p3b/Zgw/NM+
+            /SfUrMhH9NR5Q6g2hzVxcWMA5WfJVR19ZCQSafchhRQxceMNGVXADw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wpffcr5p88a2x9dzx5v3sq4jqurvygu94fx773n229fqk4p95qzs840cmn
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkL1QxcmZBcFBtYlJSSmxH
-            RnVoRlZkeElweEwyMlFFQ2g1YW9kckFvZ0RnCk02VWc4M3NqMlNFakM0V3MyREtL
-            NUtYZ0xrc3ViSWRmS0docysyaGFxcjAKLS0tIG9tOFY5bUNuTFBydEdSM3lNb3Jo
-            V0Z3Nm1DSTJva3ZIdUx3WC9uNzFxcU0KK1MD39JlHr2VJ1CkO3vPGwaSJ6LvHB6F
-            AKkvWtDtXCFsxicbMf1po5u8Am3No2LuTkF4njIke394zpbH5/KGtQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtWkZlQkhKU0IzeW51RllP
+            T29YMnF5VE1YSnFDMEI1V042S2E4MkJNYmd3CjlEVVphS2FaNDRqWnhWZFdvY0Qy
+            cXdMTitobHNFeWJjd2tVc21LVTFNT1EKLS0tIEZrcGFuL1JoRWZPcnVGbFMvUWlv
+            VFFYSFk4alVMUUJvQURUYXViUE4wbTgKCPOwUHEZE/hs/eRV9LC8ixnySNZT0Q3S
+            Ia4YrZH47lcvMX0pGYxJoHv5lpBA6VdVDbGxpesLu3K6R1VpHFcfWQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1tud4lvpmpx5nqceyp09ls9ej8l80zlh29d8cpjxcajfnnyy85fvqs63snm
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIaDJWc1YyU2YrQUZ2aS9H
-            cTgzZGFSb3pHL2FGMmR6YlUxTG1KRFJrWmtZCkQyRGJQV3cySk5PNENRQXQwRlcr
-            L3ZJVUpncFFtaVJ6UDVBT0tVRnFFNUEKLS0tIG8zaVBGWEQ4L3hYdVE5NDJUTFQ5
-            anhNZGxHWXJCT2ZJY1g4YTRkR0JPOWcKv1PHYJYbUod++c1dkW8mB6WoifFrQ6Ze
-            hMUxXOn4GiJRmO/B3HwKnrxaZpA67yPP/JUsah5VApbWE7ZIGhC/hQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZb0REUk1ucGM3RzVCSFpL
+            aFpzQVA5UENnZk9kT00yV2pLTkczd01TQkhVCkRDY1NrWXJPcmdzb0xucTFKU2s3
+            SHpTWVA5dFBPUVF2czdYOWxXTjlESWcKLS0tIHpydTNXNk9jd2xENXlVSi9IWnpt
+            RUFTN3NCblZXRmZ5a3F6Vk50N2Fkd28KpHRRj39B0pa9ox6epEfhmVYgeHXZEkTF
+            d8IJU4hqRQpN7D6lxSXQm5ky+0afUIaHvkSgBE8ilJKjvM0ZFFnpOA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1qyqy5we7zua06ppj654rgd6t7kyw3gem6hnexna98j60klyus4zq68cjlz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2STdUd3d1ZU9PdWlBTUFx
-            ZUp6YWNTQVZHUWtmQ0JOVU5FU0xrNWhWQUdRCjZhWkFHNkM2MjNUZXhMeXBNWG11
-            SVl6M21vcjFaODhyVkNGNzljR3Q0OW8KLS0tIFVsWndDVTFEN2M1clArV0E2L292
-            TmN5THYvMjdWUUYvaDV6RFdlcjVIQ0EKu35B5iKErPdDFvnHmAuCpkBlAsP3J0Ml
-            /6/AZlBG3r02iCBzdjZW8peBAg2LjR/LbNcY4uy35JLbT4wL0jV9yA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBINkNROExHY3hkd0xHSk9V
+            NXRYSHZRcGg0S29Xb082MzJabDBmZW5kbVVzClo5Q2ptbDlmNEZTbGFDUWFLL0tJ
+            VHRlV2tLaktmak8yaFcwMEhKQkxab1kKLS0tIGtCeTFqUGpRUy8yd3BLUWQwbmUr
+            c3NmU2pWdkgydFQ5Yy96YWIzaldydlUKwf0NNkiFDweXedjs4QHGnNTQw0X2EtH1
+            LvvbKVggRkd7MLXGsL3j2Ovaip9F3gfZ4xfEdAUXJgxnhW77qVEdOQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13f7t27x326hamq39qps2ygrftq3ylyn2nx8xga2kqaxgra2p748sphmetv
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5WDFZaWs0Rkd4QnF1Uytj
+            K0UzM0k0bnlBV05kQmIzWkRYY1pObVl3bXlNCm1RMHUvb1ZISTI4bjZUcncybzg3
+            K1dFWE56emlTQ2FHbUJ0MitGdmxGS0UKLS0tIDd4UnFJaDNXY3ptUUQ0TTlGSnlE
+            U3c3WEJOdDQ4dFlIU1VVN0h5akZvVW8KcRX3hw529g7RL8pMeb0IEoDXMsfatUpR
+            qcU0GedBYmbIUWyU3zXEXK2U05s6cn+03dHlE+0j50sPGCkVFewDhQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-07-08T11:24:38Z"
     mac: ENC[AES256_GCM,data:ZDjPpLKJlu/EtuL+SSAInl+4aKkGKH1QZRvRYuhQLWuL3/Vcydjv5aG2Fy6F73o7NlMUubixufdgsoITpH+SNndtH6rEQkl12Oo0H7MNGTdecJVjXtpLmHdmlVZvV1binbzOSfD+SRzXILQlzKq/jBqXC0TW0YUgPvIky12dSCs=,iv:KQw+K0px71dkdVpKom0+tV9CI8jczkLrd4HUuTkdkKM=,tag:kH2DYck3tVZtP1o6W13wDQ==,type:str]
     pgp:
-        - created_at: "2025-06-28T08:59:04Z"
+        - created_at: "2025-09-21T19:21:11Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hF4DfdBfTP3jZzQSAQdA2QboSjnkI6dJiVwB1dvEht3YATzKibs4Pmk/r34zmScw
-            H3q5BRMqYsC1HAUrX02tpBYaK9lJMiYER0jZQkdQwKgO3sdktlIC3Fo5bQ+//u6W
-            0l4BItuNHClcqEa8bN+XxUw6dY+96HxfUtsXtkZI9Oy8mmagN27bKgz1lGw/9GB8
-            s3NjQVOpdo+/5WISaC31QL3CCM6V3fFEDoflPgiiEv5NC2H9Sxx/prNzHb8hJRWi
-            =1foN
+            hF4DfdBfTP3jZzQSAQdAcc6eEZcZ+UtBmv/HleKF298Spdc1oVdejZQvRcHNnTUw
+            w5Azf812NC+R1Qd1TYZ0gpwqlOLM7SKbm/c6K+ys8jYuXkRE9jxKHFXDJKZJfJtE
+            0l4BLbLtsjhs5uIZSomtgabr/DChsJ3eMTCFTNFt8kArpXCNjlB371i0Dk3WJit2
+            0ZGtM4zljVeCPKd6y0SA9V8DrponoFS+6m6uxIpHMaeDNLMa0JL+N08uJ+bjTBV/
+            =T5Oq
             -----END PGP MESSAGE-----
           fp: BFE6386C8D66BCD4DAE14FC895F0FE7CD7E6A022
-        - created_at: "2025-06-28T08:59:04Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hF4D3Q9NEB9zpDESAQdAcNbbGzDvhVnvCYnPBGfY9hladAD0+aEm8WMjerbhxzYw
-            hWRtkWYpFp5V9XEWZnXVjioKkfGZpvLGD05zYWdnP97JbNDpSzZHWO8Rm9X8mAup
-            0l4B2JGXj9a92CcbjW/NRUDUp41lWHbG/p7BfeyaZwVHMOw7ioGcJsSAgKze3h+z
-            9UvRZVXM9PxMGm4teeeF6XW5gtXPOxAypvBucsJZaGoPneYXGRokzRrwrphrKRGG
-            =vBAB
-            -----END PGP MESSAGE-----
-          fp: AB27F5D1136B20D3149FBCC00389451731A3ADDD
     unencrypted_suffix: _unencrypted
     version: 3.10.2

diff --git a/secrets/morio.yaml b/secrets/morio.yaml
@@ -14,7 +14,7 @@ resticPasswords:
     grapevine: ENC[AES256_GCM,data:ElNtJC2elPstqJ1vTJRJpNr0OyhTuTxCulh22qq459c=,iv:sgQCekPMcnyFzir/fISJAQZvV91e+43z9D9xShAz4Pg=,tag:LVjr6ZxFO9VmPXZWtz20Uw==,type:str]
     vaultwarden: ENC[AES256_GCM,data:MmXXWit37MC4dpJG1654IpxfRdw0b+2mpfu7K80ZTRQ=,iv:4wRi3ovrLrzCkUjiGpEpWWPSDkHUdpI82joofhoIP8U=,tag:zgTTK+h/vqLmxCNNtfrxwg==,type:str]
     things: ENC[AES256_GCM,data:9jjtqiUHwtCJKF1Mfg5bNZQhGHDFNZlAm04umn0SqnM=,iv:5sx+9tOTX/GHk7KwEZo1r4vJVX8LTe7clNsjxIhRAYw=,tag:D5b7/H4CWCCnAmTPPyCMyg==,type:str]
-knotKeys: ENC[AES256_GCM,data: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,iv:J9HssMnxmDQEURlOzQXBv2z3fXaJtT9uNaYcFqWO3vs=,tag:1Sk3TPOYSs7MfQZ2SZ0nKw==,type:str]
+knotKeys: ENC[AES256_GCM,data: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,iv:G+Xxn2Z7ll/K1rn0rJDowrhTNV1SOTbnFcw3TCB/xnM=,tag:2iY0+oIHvczvr6YOKGdRKw==,type:str]
 radicaleUsers: ENC[AES256_GCM,data:lsVr2x3jZJY8nqJnIEXcd9qNyQsVF4OvcFUwUa+hdlXyACafN7wtDYuc6lvNp7eD6eMz3AD7BO9A6X5SVLQ6bMxUQ8hJYpm0+VeBQSTFFMDdXcVRbad5ymtS3D5sG3v20rlzrLC6tQCkrY7uyKdSKSBCEVcY1BDQMea9uRDi3bRRpiQC8Vz/frxhDnAiVGWtWTOb12KBJPs83STF+IOdZoEZuoKFzuzuhIUekuyEl/l+k/SbXAYA15q+4xK59lbMrJE=,iv:exwd7GdQrYCOFBIi6urDBC3xERo7I1YATN1e/38BIa0=,tag:CtkpxDz5kuU/6/nWEYB23A==,type:str]
 gotosocialEnv: ENC[AES256_GCM,data:5hvURqX+EqN8zpjirBmh5TIWWgaCga9QxnAfyW1rwOXELnM9ZBJAmqwLdxUa2j2DGrXsqw==,iv:nhVyiAoOJY0HtjB13FnmnQyLB+BWSRwDVrwUiFHBrE4=,tag:P207zPou7yXJKJBf+pxlHg==,type:str]
 environments:

@@ -36,8 +36,8 @@ sops:
             Ym5kdER1cTdYM09ydEgwUUlhQ3lXUEEKVjdcjjDXUhmpszI5i3NsjrsF6XRHf1a6
             qzqyN7FQTuwy23N9PBdJMTe7aAcw12vbvuY2v7UfmNzxkvggaDXJ0Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-07-03T06:03:22Z"
-    mac: ENC[AES256_GCM,data:QjoDbXgGlEah/0ty6XX2jmatnNFd+tyWbaB5wiobDbVMnmSiflU+wTzHzSUQTpdDfqtSt5aKAIoGElNb+8xXzYsBf/aWoc2ea1lLTnSCap0ksbKEFTR/nTb9ttYP4chxu53pzo7E2VFGCtvczCZiTqxBQOkIZS5fqJ5EciYeftc=,iv:+MqeTrf8vBSc3oTjxZKTevrqL8hEg1o9b/eD6mTqZqw=,tag:BdXVqLFpQWAsJTZm+iLeog==,type:str]
+    lastmodified: "2025-09-21T18:06:07Z"
+    mac: ENC[AES256_GCM,data:zweRo8cjvz3d9af3Wwfkgn79aLxSeyfangKteVCbALjQHlyjtriST0QwlzXz8zQWEBKQzZ2XITR8jyp8Owm2gX/DlRPoY85HpdGMStTkLFXpGgn2xZDxQzccdSRUwue97SfzC1wjwPUcrsg2pnB6aYQgYLkRHDHjqB7xWDG9ixw=,iv:xDgcAWdZNg27cvCTLrBycwD7KjwpvbWni373IGva1Ls=,tag:xPhTNCAj2xcAW3kHx1KXiQ==,type:str]
     pgp:
         - created_at: "2025-06-16T13:06:52Z"
           enc: |-

diff --git a/secrets/pratorum.yaml b/secrets/pratorum.yaml
@@ -0,0 +1,34 @@
+acmeTSIGKey: ENC[AES256_GCM,data:qfY0SbY0rusU+vCr7oiHTLHjICZBU1lYlBn7D2BLY5IWJbgrEO7OL0UvJAsUBtjMYsOrcFQB443K/3qThqtKDA==,iv:1TaM1oTvGzKlawxo/pv7cdBgqd7SxDMoy8fsDIk+VJg=,tag:DJ8sjxoSdjcGpbh70TjIjw==,type:str]
+syncthing:
+    cert: ENC[AES256_GCM,data:fOMcvmhu9QkF99SD95kzZEveMiwAR/R8GDffsqW0Nmp2gW2ThYG7pVi9TVnFwkPoncxEor5+vPDtDlTHuMHt3wAHvCZ7gftorvABrzkyhVEqNRLDln3JlgZ/YpAzjutXRCiuliE85AgOMB8WsniBSPQihCDIe2MolbYo8JlLJXL/5D6p9CGQqmRzlbmw2Unxzk7Xjw9Cm7RjaszK4SuB+loPdI3suVrCtfKQxQkCzDwQUdBnfeCyesYoPXJBBMDAtForu9i65LOXibDmvKj2rH5/zoUvvV5NO5wncMLED3X5Xyasz5ALJwxmOC+SR9u80emqoW6oN++V/IK8vG5/iiOSdTc7VYHjOgwzgfk47RMS9180cfP3c75Dap4uztdI3bMVYCt5UUkd4bqKI1IEOXG+TL2Ouorcti14G1JlIS17L+KLwnKsc4Ggend0fC7TQz/zAMkG95FmR30YK9G4dzsj7IKdQQeXBpMl7n/WY5byG3qAWqJbOK3EX8glZUHQjUlGCQSokk8CRGB9AhS66wisRNR7BQoYR2c9KjUD/xwVUCIeRDt+6ysUiFOhnhoGAgsnFTZtiuk+JOGhLx5LFWCV/l1kDzwtPa0lSUGeuoMb6rrnEc5HmFzmgKNAD+safXkuEt5ZoqjlCcI2XlnwLsLqQucroky6XhUomFqjesZj4cu2Y3OlkXB7sYQUGIOMBi/lvBKja0Bj0/MzSZp4Mj+8aiMXDdBgoTnIAhLVI3Y7E2x9E31z8I9SbxzxsN+aTyY/XRpF94m5bH3Z2P4MF4Ffk8k3UBPu0iFR89xgTq1gvrG/QMTDRWUtGBgWmf0g/u8St5Tb+Rb4xSew7pGGX6QAmcpsbcyAbEtDxgefnK6RXiPT6YjPJbtSmAxy3GMvOT0STy4Jh1mnqvZhCoxEsx2p8JglrdIe6JA2ShWaVxXkaLJpYZOxgVFJkjHi1xQxKPeC26Iqj3UlKNbmvcstYslhdLAEgmPTqurJoTUMQTvQI4zCe7/3IkVNfA+su269WpdK22Jk7QkHOyk0+BNJ9RF7kLDma54Rj7o=,iv:tO+qA9EMtzD4fCQjSlu0X5WqKZnsWmVBU0mKg6Cp1X0=,tag:N193+z2RwjSwruEsvwIBdA==,type:str]
+    key: ENC[AES256_GCM,data:VvshG8n3LT/eWm18iCIQkHc9GRZQsBWdq066ttqI4JoTohEB9IXR7dQDOC6QwTg8LObLL6zSUFTk2NAS8LyVZfQ4VMmqa24Pf+amwQmkXEv7w4h9ZEaBiU5b8i2JYaV1KDJvr5d+Svt2ZIVnLrIuu+l7C684xHRkX2yFkMh/XBtKRYT/CdhJeM0F4wfVZheBxdokJUlJdDueABaPOoo6PBWyNy3hwFkqInSHC/3aSk7HvB2d6eVDTZN0r27hlozD+JxWMtGhteJbmDZX4fL8oeRyKnJLW74jfxdipVWGw2bp/mQMVzU0JsbdAACDy4Gw5HsEW3+3F0G8xzW+vPm1r60M4+frPO2FbkT9nD7RpSPRKaRy4mYQtHujSougQhn4,iv:MGOWNw1aGAoYCWWgliInm6u2Nu4178OHIgrlD1TeO7s=,tag:p81V6XQJ9K1ux/W2NpAIFA==,type:str]
+zigbee2mqttSecrets: ENC[AES256_GCM,data:XuRVNV4gVr5FLgqGRXxgyaMAVJIt38adDOzJnY0GWaN52Lb9/E7Sx/TWB41cEO9D4/+LRlf0VbE2B0zehYjQGw1dHlf4rvS5OH8PefKdqBv6w+G0BKRXGh8daERsU8v2r+Vjw7kWtyiADzKP2NRJrVLnJiITwq8kmHHsrYNcs+/492Z1/ElDTe3B32Hq7ATHaP+G7xbfgxMuxIcf9z1EFl39krpgQaw/5eWq7WT7QZIHKD7tZqSpgAUxSDBSNjE+M3wq8PmaqecvO1h/+UtEq5MzxnzfpF0yopJa9cch5SwQqT6XHrxzbM2DldZctuGGmcTJrWpcqHkT4mcO4MfwlanJ/YaT70H25ukJEAHKG/rU86QCk5pIUwGSH15GSxi8ze83QFmJhskzMAoJuDJ6h1AoS9bRn5wY,iv:kZqhnTlwMhIvXg4deiC1D73Y+gspZwdu08yoyeAEngk=,tag:GuzryBSDNke+5jXOuDtwDw==,type:str]
+dn42:
+    wgPrivateKey: ENC[AES256_GCM,data:CjFgiBZieQdWPyDPl6gcz3xarWR5GTYJ9Ruee7/9pQLlypm+RWRys/3WOFo=,iv:uC7A58MS0zvwKMc74x0xSTIAJS7GbvoJN5N9KfXFVyw=,tag:y9sNo65Qk1TxqN0ReKDCAQ==,type:str]
+sops:
+    age:
+        - recipient: age13f7t27x326hamq39qps2ygrftq3ylyn2nx8xga2kqaxgra2p748sphmetv
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRkU3ZHdNOFZKMmhnMDlT
+            cnBCbEFUbS9mUGxQdk14T1EzT3JMdTFMUXlrClpKVnMxWEpFcDdQaXpjQWR3RzEv
+            VlNGQWcxa0RWTEpoa3ViVm10NDZJYlEKLS0tIEZHT3huQ3ZCa3FVMzNnSzVmV2N5
+            TndyejhxbVZDTVdaYWRXT1htMVVsOTgKWAOJekArzYzoJF/JcPTSWrhQnvQrl9bU
+            A7H0mCdklZZ66jiUo4iKLwocBn7h9VJ4p3lBdRxyqXuN6dicdQfafg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-09-22T17:42:12Z"
+    mac: ENC[AES256_GCM,data:oN5xWdhk4JTJ9x6YjnIfuPlc/h59XKacSHZqPJPd6Q4b7M4zZqZ+SlZ+4E2UAI5w8eoqXHCJAGCSEOzYZ9MBW+zVu9oiWTWWDWBn0D6KRct+NAN+hDisGWBS1dL2uTNchdQfBsFp81Yc9HvLjQ8R40vqp2i/y03JjZChYexpl0I=,iv:Zj2Uj6cra7GXZzeJYj2z7Nc2KArPuf2/dUvYwCAZuO8=,tag:tb2a+0JqDz4u+i2/bAVXAA==,type:str]
+    pgp:
+        - created_at: "2025-09-21T19:21:14Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DfdBfTP3jZzQSAQdAiw5PHq1LVzAedKgptTmvtM/ceMb3XRBI9ETefYggjCAw
+            0VKqi/lqc7b2HukVAIyfT+dsyC5+gvoTpSTUQjsSVeQA7cCS/M6n0gH8B2KeoHWY
+            0l4BqbX0jNreduP38y3+feILHV94ZQe3Lo9KPYNWjNC0G4nbYw3X/XAl22weEcZy
+            90pmUIfmPSGmgl1n73ePBKyX3eSo2TNc2OsJ9YQzTJNdhSoLUMq4oirMaxZIivbY
+            =cOXC
+            -----END PGP MESSAGE-----
+          fp: BFE6386C8D66BCD4DAE14FC895F0FE7CD7E6A022
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2