reinstall thinkrac

2023-11-29 15:46:46 +01:00 · 2023-11-29 15:46:46 +01:00 · 682d7b06a1
commit 682d7b06a1
parent 18ee1fae9c
5 changed files with 103 additions and 161 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -1,8 +1,8 @@
 keys:
  - &lotte 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
  - &nixos-8gb-fsn1-1 age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
-  - &nutty-noon age1zyey9d6j3lps205whlx57wxpu4j9xxytjsztgt5keamfjrxlgc0s0h6qf3
-  - &thinkrac age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
+  - &nutty-noon age1c96dd2hj7qg7sl8wq277q7a4na36krd4dmu50jz5mvw4ls9grcps28zhdl
+  - &thinkrac age1p400545a482fma40yfgytu40p6wr5a75v4f8yeudvgf7eh5erufqxhgynr
  - &nas age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc
  - &instance-20221213-1915 age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
  - &vf2 age1gtezxkkfhpkv788x9dek6s6s342n9tkl40zvsa48m9a7yqn25fnsmd3wy0
--- a/config/thinkrac.nix
+++ b/config/thinkrac.nix
@ -2,6 +2,8 @@
  modulesPath,
  nixos-hardware,
  config,
+  lib,
+  pkgs,
  ...
 }: {
  networking.hostName = "thinkrac";
@ -23,111 +25,51 @@
  boot.initrd.kernelModules = [];
  boot.kernelModules = ["kvm-intel"];
  boot.extraModulePackages = [];
-  boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
-
-  boot.supportedFilesystems = ["zfs"];
-  boot.zfs.devNodes = "/dev/";
-
-  services.zfs.trim.enable = true;
-  services.zfs.autoScrub.enable = true;
-  services.zfs.autoScrub.pools = ["tank"];
-  boot.zfs.enableUnstable = true;
-
-  virtualisation.docker.storageDriver = "zfs";
-
-  boot.initrd.luks.devices = {
-    disk = {
-      device = "/dev/disk/by-uuid/2100a2e1-d874-4aaa-a89f-0b01665445b4";
-      allowDiscards = true;
-    };
-  };
-
+  
+  boot.kernelPackages = lib.mkForce (pkgs.linuxPackagesFor pkgs.linux_xanmod_latest);
+  
  fileSystems."/" = {
-    device = "tank/nixos";
-    fsType = "zfs";
-    options = ["zfsutil"];
+    device = "/dev/nvme0n1p2";
+    fsType = "btrfs";
+    options = ["compress=zstd"];
  };
-
-  fileSystems."/nix" = {
-    device = "tank/nixos/nix";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/etc" = {
-    device = "tank/nixos/etc";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/var" = {
-    device = "tank/nixos/var";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/var/lib" = {
-    device = "tank/nixos/var/lib";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/var/log" = {
-    device = "tank/nixos/var/log";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/var/spool" = {
-    device = "tank/nixos/var/spool";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/home" = {
-    device = "tank/userdata/home";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/root" = {
-    device = "tank/userdata/home/root";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/home/darkkirb" = {
-    device = "tank/userdata/home/darkkirb";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
-  fileSystems."/build" = {
-    device = "tank/build";
-    fsType = "zfs";
-    options = ["zfsutil"];
-  };
-
+  
  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/EE61-E55F";
+    device = "/dev/nvme0n1p1";
    fsType = "vfat";
  };

+  services.btrfs.autoScrub = {
+    enable = true;
+    fileSystems = ["/"];
+  };
+  services.snapper.configs.main = {
+    SUBVOLUME = "/";
+    TIMELINE_LIMIT_HOURLY = "5";
+    TIMELINE_LIMIT_DAILY = "7";
+    TIMELINE_LIMIT_WEEKLY = "4";
+    TIMELINE_LIMIT_MONTHLY = "12";
+    TIMELINE_LIMIT_YEARLY = "0";
+  };
+  services.beesd.filesystems.root = {
+    spec = "/";
+    hashTableSizeMB = 2048;
+    verbosity = "crit";
+    extraOptions = ["--loadavg-target" "5.0"];
+  };
+
+  swapDevices = [{
+    device = "/dev/nvme0n1p3";
+  }];
+
  networking.interfaces.enp0s31f6.useDHCP = true;
-  system.stateVersion = "22.05";
+  system.stateVersion = "23.11";
  networking.wireguard.interfaces."wg0".ips = [
    "fd0d:a262:1fa6:e621:f45a:db9f:eb7c:1a3f/64"
  ];
  services.xserver.videoDrivers = ["modesetting"];
  nix.settings.cores = 4;

-  # Disable kernel mitigations
-  #
-  # Rationale:
-  # - device has a limited workload, consisting mostly of running trusted code and visiting trusted websites with an advertisement blocker
-  # - device is battery powered (we want to spend more time in an idle state, as opposed to running user code or mitigating cpu bugs)
-  # - device is also not involved in any sort of virtualization
-  boot.kernelParams = ["mitigations=off"];
  # use the lowest frequency possible, to save power
  powerManagement.cpuFreqGovernor = "powersave";
  # lm_sensors who cares
--- a/secrets/desktop.yaml
+++ b/secrets/desktop.yaml
@ -12,33 +12,33 @@ sops:
        - recipient: age1c96dd2hj7qg7sl8wq277q7a4na36krd4dmu50jz5mvw4ls9grcps28zhdl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnOXRKTTVlWVluQXdlcXI2
-            K3A5NnNXVFFXYmVNMGx0RkZ2aWFVdVdCYUVvClo2SXk1c3RNakdjc00yb0tvazdk
-            Sk91ZGZZcjYvcFJpTFJHaFJVQ1M0UjQKLS0tIG5LVWliTzZUcUsxSEtXb3NKQ1dT
-            QUR4YmJFY0Zjc3hqZDg5eWVpUnNCeXcK9z2vMsjN8ExMFF6mHfaFxC5v6WnkErD2
-            1y9UZ3zdgQJG5LYaBHi2lvnpnE9baZevpR/3ImZ4LWBK57R8NtJrRQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqS3o2NHF2Y21Tb1N2YTQ0
+            UzEwa0FGSXdtbjVBcWppcHZhd2VJRkJrUHlBCmR0bm9xSmVDa1NOQWpaR0JBR3Ev
+            ZjV2L3RSamYrbGxQejdUREpkYllqR3cKLS0tIGxtMGx6ZVh1N1hUa2thTVZPUyt5
+            Q3pwaklpQVlFcHpkM3lVK3V3RUhPYU0KLC4ORcsWbnxYNvkYU8WgAmobQpvli/yE
+            MaMpi/+NCMUSl+XmMZtZaymd/Q0PjUpgk1yYU+8xsF4QUIoAMqW+xQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
+        - recipient: age1p400545a482fma40yfgytu40p6wr5a75v4f8yeudvgf7eh5erufqxhgynr
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpOFo4T2xabm9TbytZWUxZ
-            WnR5cldiZVBlbG1POGhUZFp0RFVwdkpubEdFCkZZZWM1alpja2J2dXl1MjVpNUox
-            dzIrTCtkc2Q2QW81b1FCalBUcVVrTm8KLS0tIGpnOFFFbVZsbmFkWTV4QUlrN1d5
-            T3R4am5JQ25UVjMyTHhNcndWY1RJb3cKO7x9zpzrSKQqbAxqG1UFtr2vaa8nUvtv
-            SKb0/MjixdgQWutjcycHwnVaTiOquI3Y1Q4kDVF1kffY1SLDj8H8QQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0c1ZYR3ZGSlR2NzZPSmhS
+            YTI1RzZyOTdpK1NBU1JnbUFiMTBaM0kvaWtJCmV5TTFRQ1Jiay9RWDBDU2x1SFVt
+            ZmJCVy9aQS9PZnd5Wi96b29LdVhjL0EKLS0tIFRibjFJb0IwbUtJdGVKdkhieUhm
+            MUUrUGxLT3R6SXAzam5xU1o0OXl2b0kKa2ehWbXLaQFTSDrtR7WXhLccInrwfLLn
+            SLgCulAbTe9NKnbyhIQ+WRr8v1jC+XOTi+1k/6I+H7v6s4W8ZA7dOg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-07-01T11:21:31Z"
    mac: ENC[AES256_GCM,data:yanyvQWXf3Yj78uyhiEjdsAJdWx56/6YwnSR9knSIcQAWZ4guKEtl86wTcJZHyt7P7lsMI+z2rsGdQ/pGRIJeUoPzW0ImrGGm3rlXn75aH0jDeSk1qlxLc4dDDxwPDeSI0/QsTsENRW/Vf3/z8xiSHPUwBfDmRqTqwZ0b2vOwZc=,iv:idWdv2m7nUUZDmrNhL97BJn9Tm+fX7y2hG4RJBXffGU=,tag:ns1OrwzupAd6608pGovkrg==,type:str]
    pgp:
-        - created_at: "2023-11-04T17:29:46Z"
+        - created_at: "2023-11-29T14:41:45Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DAAAAAAAAAAASAQdA/EbhY6oT/8MW4oPlYrcETJPEuGM5gjBLGdMc1a+xuV4w
-            8wKFTq58+OQe7MAUlQqr+eP0wuug4VqaJ8o0u+97vdfxH+KMHa7k2r8oo93otk+H
-            0lwBOrbSyu+rdBQGAAo+JcpGCzqE0b39wIGZN984ePNWNGUia+RYh57WfnvCj8y2
-            UyHpRq6simkmUlSj6iaDbSTtARNLlKfOaMCVPxLkGiDlRq+oqipfT/FgDhvrwQ==
-            =tZbB
+            hF4DAAAAAAAAAAASAQdAb/lR5TvzggwycCA16xc7tLycuOwCKmlInHp9MHfHTmkw
+            GiwTHbOOCqP4pV2Qo76hWNMzO961XZT5PxuFhM0U7cC6z3WaejQAAep39JUzds1P
+            0lwBQhceDlbVdA3XJ+6RuzovhhiIPG9U/h1NcEbSgNRV4t0IAaOJY/98GI1unZf4
+            vVUzes9Q08dbkT40RSGxi4m3EdSOXTRadffvRBRo2bq3AJIdFMVsQUZ3sE5h0w==
+            =eY/P
            -----END PGP MESSAGE-----
          fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
    unencrypted_suffix: _unencrypted
--- a/secrets/shared.yaml
+++ b/secrets/shared.yaml
@ -12,69 +12,69 @@ sops:
        - recipient: age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhZ2FNeFl6MGkwWmw5dGp6
-            dHpQMUpYRzdDazIvNnRrU2R5ODl6YVVMM0JnCnRXc09xYVVHWkZjMzlYVFFjcTA2
-            eEN0RisrcU5ySk1IMUxpN2lKb1A5V1kKLS0tICttR3daR2RKd1pCelhsTXNVcGY3
-            VytCZmRKK0o2YUc3Zm9PdXlVZFhCbDgKG6Z7ehgnWV13J+Az+TA9kIWUhNiDcir1
-            0gL3R6Mi9bfZh+ML43R4GjesJrU0pDVhx303P/7KQnRO3bRZXsZ9hA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZVVOV1BhR3pFL1FPVHVq
+            K3JGUXlBTVpoa2VwVWhDdGpMWDVsTmI4OXc4ClN0L2J2Q2xDZW1EYWhxM29JSHpD
+            YkRpR0NqdmtyY2JqbmdJODBiZlludHMKLS0tIEFxd0Q3K0t3eHVFVnllWlRVRG8w
+            Y3hhZFIvZndpdVNzU2R4aDZ0Y1hnWm8Klzq4jsXemJ3jsKJ5n2wNOaq1a3n0D50/
+            C8ExEjn7Z3Hf57pRXxU+hJMTR3bLX8L02xXQ2eBt7vwtPKFg5gzvZQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1c96dd2hj7qg7sl8wq277q7a4na36krd4dmu50jz5mvw4ls9grcps28zhdl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVK0plR0R0a3ppNmF1K3J2
-            VDdaU0hHWjYrNjBjNGF6OEh0cGhkK1Q4MEFBCjJGbW1zU0pmQXFQMDZZNCtlV1pO
-            Vkp6bGgwUExJV0FEcEtkVWhFY2JRSmcKLS0tIG4vM3R1ZUd4ZTgrdlRDbjhsdFNm
-            cEtoYUNkcmMzbDlHSGJOTStrVVZHZ3cKJnikzekY0ZofNvmtjovJNYcSA0Ls42ix
-            ookafJyhRjtAPNrNbeZwjO2SxaDbG8eJi9FZO9BjpZ8B726DUfuAng==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzV0thMVQyb0lJSnZydml0
+            UlVLSVVLbTZXbXFMVS9ScDRRVkg5bDBJUUJvCmxEcEJITGVHbUF4NkZJVUxNMWhL
+            U2tISC82a1NtZ2pjZUtrbi8zaE5Mc2sKLS0tIE9rRUwyS3ROaE9JSnFJaTd1NWR5
+            TVhLT1lOM0didUxoNlo0SHZid3VGUDgKWIXEadsYqKqW18I9RErey/hfBypwB8yf
+            DLt9T4jdBb2rykwocJmA+L2DVwPE+KQkaov4wR5gwN07f7NSRCyu9g==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
+        - recipient: age1p400545a482fma40yfgytu40p6wr5a75v4f8yeudvgf7eh5erufqxhgynr
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5RmR2dTVQcHJuOTNWUWlI
-            QXdvQ3pzNUNIUVI4M3dWbThVSElzbE96L3cwCktPWXdiamlOUW9Tam5KZ3FEenFT
-            RjY4TTJ0UEV4MUEzK2svYTZvZHRIdDgKLS0tIDdkVVlFSTM0c1c2Y1kyN2p0ZlA4
-            TmFuQXZSMkYzQmI1WTNNTGh1RWJNV2MKJi6y4IFzy3q+fb/sNzd5cdATLq1mSi6d
-            bKk8nMsa5YKbZhGb0YAEn9ISd7c494CilK2AiZNQLXjVH2ZrHtv6gw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuUEZtL1lkRkg3VGFnbnQ0
+            ZmxJV3gzZkI3YStYWmxjUW9lZ3NRakZyRkhFCmhJZUE4K2FaaUNWQzhKczRHZGww
+            S2ZZYU5oVThpeXlzRS9tbW9YSm9XUFUKLS0tICtUL3RTeHh4V0d0ZS9hK3FESnNk
+            MWY3N1ZySTlCUS9nTnlOS2hYTVNlSTQKIlaTOyVKR9QTQRfVWRrp3Zkqhm1JAwCx
+            tGHt1RGJDHeSxXwwsasm4xQWgSSQ9XJXLh+7582WYEssLB1FgcURxg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWtnUnAyM0p1R1E1emNx
-            dVM1Q0JzSlFmTWdDRXl6b1o0bTF3WmRycEY0CklsSWgvSVIrNzdmWW1ncmhYMjlt
-            RkpGMHdzZ3k1MVNJVDFESWdtR016QUUKLS0tIG1PQjZZOFVJMWV5ak92aWQyUEt4
-            UjJxRUFlMGZqU3BzMWltUHphSXROWFUKvTSamTj0csCK7AL6zuI8TVzMw2jRlEUR
-            MpSRVPUB+YVTyX0nu5+WiPtSWnBRSo3X1GewFED4qUEwViMrrYuvJw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUHhSWGpvUk8wQXlrRVB0
+            VTVIV2NGa1d3bURZYko0N1BlQUpPeXloSHlNCnpHd2dPOWZqRkZrUW1Ed2NBZ09p
+            eHNVQUVrUUQwTjcvMU5ocTN5N2VWZjQKLS0tIGVEbDBIQjR2Z2cwaXkvU2ZRbDZI
+            YkFzL0pXcGxVcE5zcjF4TEpxQzBwYTQKbe5IUV1JXdjzAfrUrx4+gGtCdCXSlcAm
+            Qb/UL7asdHAjuPVttM7e3UiW/d49LwsWKb8WHJRX0rmt26lvB+Y0Kg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGYlJlZlVRMHNXV1pRenE2
-            Wm1MdmxLQmlsUktoTmhXNnRGQ3NIYkEvY2s0CnFmR1ZIZEJCaUVUK3kxdk9OaXhI
-            eEo0NFpxdnhaMUVuc2xJZE41MHNnZE0KLS0tIEt4Q2dXdDhRaThLaWNST1FhQkpx
-            TUNUdllQYnVVdzBHNTh5VkN3UzlFRk0KKllIK8ODUd3GcnfsGgmsEqYDuyT3WBnj
-            FFyPi8GmJRPIHQkebXwXygPdcmbs0hDYF1QjkJdxcEfiAdSOdEjPaA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydjZQNlFtQnY4RHhRZVVh
+            VFBKd2YyaWxIb3crL0xpZ1pqZlhPVkFUV3d3CjdsaFJDaUlxTWE4OG5mUzBOdzI2
+            RFd1cTRjeTZKMEp4bk1UUHE0VjgzdGcKLS0tIHk4Vmw3V2RDU2F2OTlON3NLS3gr
+            OFpBME8vY0hQV0Z5S3NpR0pySkx4K3cKxGI/3Qrw1OTQNdphEqGNLwd1U8oFlltp
+            U/hxnt51hQbc0EgemxZYU4Feh6sbjD3RXUeiS2sN2NRHgnNoyVfRiw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1gtezxkkfhpkv788x9dek6s6s342n9tkl40zvsa48m9a7yqn25fnsmd3wy0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVGhsMUVNb2JQTDkxcGk0
-            c0tzNTdlMVhVYnozT0xjTTJmYkFJUjZQMGswCkFxK05WMnVUaXNjYjlJOGxEcTZ5
-            ZklDSVdhT0lYMjVLS1cxSGk0KzVJL0EKLS0tIGJ5QUhiWCtxNTBJYVBGTFdvaHlF
-            ZlN0enc3ZGZUa1pNb0ZkTFpzR3dycTgK1ePIBps++Q9dNG3R0ha6bQGXxnh6n2cV
-            GFZi6b8IWPdsI0VtSmjKC1SvtZmJTSuW1kv3PjSr/sDX5G7IxribCQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaVNMTkkvWTBqWnlReTkv
+            dFJpMWh1UnZWZ0dHUVJERFZPSGIwRUMxbkZFCi8zWDFVM3hnV0JUVTZtYlkvaFNh
+            UU91SlU0M0FTeEJBTXJOSU1Va3Z6QUUKLS0tIDhjSkRNM24yTmk5Wllrem50cFZZ
+            clhPNmVLVGtFWCtiRWZUMU4xVUV0emcKBHSrJLwboPrDBGU3jmQ0VSgkerVkqdbn
+            RdyW44G7nH1GenJ7vZePeSigppsGkUkw5yzFDz0UXfH2gaP7nzoYnw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-07-06T09:11:09Z"
    mac: ENC[AES256_GCM,data:XujFjvx73/z+hmk4f4tRRvwl/ML25YOZw6etr0P9lhcXlYPelIrqvVLO1vmobt8TYDzngAHdHSNNlhInw00KO73luOLcQhL/1DVMqTgeMSC11ReUhd5KOZLVXOSP0+8ADLXgbGGGY8DyPnZtr1ZWa3dDIBFPt5ZD7RzWz1qKnJ4=,iv:kYPLpSrLEu9pkWw0iwqKmH6Mm8sFjAstr06mcAWnUEU=,tag:NQjXV8sHUrjU//AQJ+4E+Q==,type:str]
    pgp:
-        - created_at: "2023-11-04T17:30:09Z"
+        - created_at: "2023-11-29T14:42:03Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DAAAAAAAAAAASAQdAlw5IKz06Na6mmf6ivUGYRIzbYvD2SbVv7XbEGvJSNy0w
-            DdJs/esgOtDuWdyrBdxiXai5VFlJKRkBalwgn/UKN80nsF+Wwzoky6ExbLpl2Ub8
-            0l4Bm3qLul6pGXSERtdI/YsKHOEA4/6UBJs3V8GvpiE5nVB6NbRuiDCPky03NqpV
-            rDFYjB1sWqpv3n6Dvi/mryU7NA8WGhRr2Ej7HIKCQoLgTFTXqgzDLNOPYPE+t/Lz
-            =LLpY
+            hF4DAAAAAAAAAAASAQdAbeKleeLCw1QqnCuhwl1mOoFFTDNQYb6iGueYoOEwwlcw
+            BRZDEqKWSfgak1TGE32w7SMZUOhGb4RqskgeQozK7E8eyGEmT3YV06B9uiN9GV4B
+            0l4BDWVHexK6hoAjQZgOH60Ao/DK/I90TBPnJmfPwfwqRVfSfqt0rAah+W31N9x2
+            2F/t6cwXafzglhAo7r+Esp1CzRgPDWfcIxJ+eE5fvEpinsZ0E8+D18NeGaJeWCkf
+            =4O3x
            -----END PGP MESSAGE-----
          fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
    unencrypted_suffix: _unencrypted
--- a/secrets/thinkrac.yaml
+++ b/secrets/thinkrac.yaml
@ -16,27 +16,27 @@ sops:
    azure_kv: []
    hc_vault: []
    age:
-        - recipient: age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
+        - recipient: age1p400545a482fma40yfgytu40p6wr5a75v4f8yeudvgf7eh5erufqxhgynr
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRzNyWFc5dmVuTGxmWEJL
-            RUJsKy91bmliZDV2M1V3U05ZU29lcks0VlNvCmI3R1lxZTRFdDZiNXNna0I3OXRt
-            R3VWWktKaUs4K2o1RE9FbFlablpNcW8KLS0tIEJGMml4VGl5WFJoa1VnbVBDeWVr
-            aHAxNitXREU0ZkZNUmorSFY2c3JPU0UK2rnyV/tDnn8nWYodDe7sgVdjfg14slBO
-            DV5oMPB91c5IZ0S1/Sv1oAUcri/dKHKDljxP7HU5yG5kxVeEzqx4Jw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByckNORWFDQlNrSmV5YWk2
+            Y0N4Y1BYV1czSElUV2l0cjZEcmdWeGpwa1d3CmVSREJNdXdlM1ltRC9VRU0yajdk
+            ZEdMZzEyRjdHOGcvR2FPTk9GT0ZWaXcKLS0tIC9EZ0doUkVQTkI1TmlDQkg5N0Ji
+            NTI0YlNFUnczajRidW1BbXlxaXJsbkEKRoG5aHx0ZPURQE+o1uzCa7e0x6fZw+Lg
+            dx09pb4z+Qrk/4TdYlnmPmEUZa1w0Ic1ndfgsRvoVvFdaLBy51Z0Dg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-01-17T09:38:58Z"
    mac: ENC[AES256_GCM,data:D/aKnDfYOaPoWfH6N8hcIhYxoJB0A6r3tK6KhS3Jy3hI6HkTxvF5k+zPDw2sxm2I+QtHpOUFkEoiUDqQzAnQXkuMf9ZuTgsDB8rsQ4yLXPcqYL+DwnlYVfb9uA6tmAprd3GSCtUJ9h5gQF7ddzyLiu8BAvabqF471pdS14bJRMY=,iv:F1n+AYu1p3SsAomfrNtITsqpdAf+kptFFdWrI9GU3Jc=,tag:t2yxYBw7d+c59NNF68HvIg==,type:str]
    pgp:
-        - created_at: "2022-04-13T06:20:10Z"
-          enc: |
+        - created_at: "2023-11-29T14:42:09Z"
+          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hF4DAAAAAAAAAAASAQdAVWYdBZxIscpX4L82Pomx0cTZWbLwBQhaFGxIlaBaB30w
-            Zq7L8lWuuZfn3hjWKhpyRTLL9UgFafzTdbLfhQS5+s/QqS7WnOlNmIJnAIOYzQTq
-            0lwBWwAtSgPlTvJOZetgRyBQja1ru6YNB9c5eEHb5xxWZCYSh1vss5OU4LsX7Mlr
-            KGyF4E3xPYrRb34VAgPeL/6FziKRm19MmVq8HCod1ombUYDMI6Gvw2HJXIPwTQ==
-            =jdZc
+            hF4DAAAAAAAAAAASAQdAen7D9xSMUquuUTkq9GF/1xn07Vv2TyL2mGaqKLtDsRgw
+            rxwPajDNyHyo6QYosAgPqm4yeXMgQSlne3bPBzzBaPQ7uSQsovHCTY+cPQDybrYl
+            0lwBt9AOrWBUpf/Xof+QoVF6OxbMZk9RbmvagyebmCxvowOmhoLsE2KyEBEADA1W
+            nRhWBKHowLWrMoAjBNi33Ekqt0lAEOvfpgOcONUyyCY5WgN/uxQw+ECLs9LExQ==
+            =KL58
            -----END PGP MESSAGE-----
          fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
    unencrypted_suffix: _unencrypted