diff --git a/.gitignore b/.gitignore
index e69de29..424bd26 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+.ansible/
diff --git a/.sops.yaml b/.sops.yaml
index 49bd543..858a2b2 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -12,7 +12,7 @@ keys:
- &admin_gpg_lilly D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- &admin_gpg_langoor 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
creation_rules:
- - path_regex: resources/chaosknoten/cloud/.*
+ - path_regex: inventories/chaosknoten/host_vars/cloud.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -27,7 +27,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/keycloak/.*
+ - path_regex: inventories/chaosknoten/host_vars/keycloak.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -42,7 +42,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/grafana/.*
+ - path_regex: inventories/chaosknoten/host_vars/grafana.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -57,7 +57,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/pad/.*
+ - path_regex: inventories/chaosknoten/host_vars/pad.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -72,7 +72,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/ccchoir/.*
+ - path_regex: inventories/chaosknoten/host_vars/ccchoir.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -87,7 +87,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/pretalx/.*
+ - path_regex: inventories/chaosknoten/host_vars/pretalx.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -102,7 +102,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/netbox/.*
+ - path_regex: inventories/chaosknoten/host_vars/netbox.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -117,7 +117,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/tickets/.*
+ - path_regex: inventories/chaosknoten/host_vars/tickets.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -132,7 +132,7 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/onlyoffice/.*
+ - path_regex: inventories/chaosknoten/host_vars/onlyoffice.*
key_groups:
- pgp:
- *admin_gpg_djerun
@@ -147,7 +147,52 @@ creation_rules:
- *admin_gpg_c6ristian
- *admin_gpg_lilly
- *admin_gpg_langoor
- - path_regex: resources/chaosknoten/zammad/.*
+ - path_regex: inventories/chaosknoten/host_vars/zammad.*
+ key_groups:
+ - pgp:
+ - *admin_gpg_djerun
+ - *admin_gpg_stb
+ - *admin_gpg_jtbx
+ - *admin_gpg_yuri
+ - *admin_gpg_june
+ - *admin_gpg_haegar
+ - *admin_gpg_dario
+ - *admin_gpg_echtnurich
+ - *admin_gpg_max
+ - *admin_gpg_c6ristian
+ - *admin_gpg_lilly
+ - *admin_gpg_langoor
+ - path_regex: inventories/chaosknoten/host_vars/ntfy.*
+ key_groups:
+ - pgp:
+ - *admin_gpg_djerun
+ - *admin_gpg_stb
+ - *admin_gpg_jtbx
+ - *admin_gpg_yuri
+ - *admin_gpg_june
+ - *admin_gpg_haegar
+ - *admin_gpg_dario
+ - *admin_gpg_echtnurich
+ - *admin_gpg_max
+ - *admin_gpg_c6ristian
+ - *admin_gpg_lilly
+ - *admin_gpg_langoor
+ - path_regex: inventories/z9/host_vars/dooris.*
+ key_groups:
+ - pgp:
+ - *admin_gpg_djerun
+ - *admin_gpg_stb
+ - *admin_gpg_jtbx
+ - *admin_gpg_yuri
+ - *admin_gpg_june
+ - *admin_gpg_haegar
+ - *admin_gpg_dario
+ - *admin_gpg_echtnurich
+ - *admin_gpg_max
+ - *admin_gpg_c6ristian
+ - *admin_gpg_lilly
+ - *admin_gpg_langoor
+ - path_regex: inventories/z9/host_vars/yate.*
key_groups:
- pgp:
- *admin_gpg_djerun
diff --git a/README.md b/README.md
index 2ffd636..5a3d90c 100644
--- a/README.md
+++ b/README.md
@@ -17,12 +17,13 @@ ansible-galaxy install -r requirements.yml
## Secrets
-Grundsätzlich sollten Secrets vermieden werden. (Also z.B.: Nutze SSH Keys statt Passwort.)
+Generally try to avoid secrets (e.g. use SSH keys instead of passwords).
-Da Secrets aber durchaus doch gebraucht werden, verwenden wir [SOPS](https://github.com/getsops/sops), um Secrets verschlüsselt in diesem Repo zu speichern.
-SOPS verschlüsselt hier die Secrets nach den "creation rules", welche in der `sops.yaml` festgelegt sind.
-Grundsätzlich werden hier alle Secrets für alle GPG-Keys aller Mitglieder des Infra-Teams verschlüsselt.
-Das eigentliche Laden der Secrets durch Ansible geschieht mit Hilfe des `community.sops.sops` lookup Plugins, welches entsprechend den lokalen GPG-Key benutzt, um die Secrets zu entschlüsseln.
+Because secrets are nonetheless needed sometimes, we use [SOPS](https://github.com/getsops/sops) to securely store secrets in this repository.
+SOPS encrypts secrets according to "creation rules" which are defined in the `.sops.yaml`.
+Generally all secrets get encrypted for all GPG-keys of all members of the infrastructure team.
+Ansible then has access to the secrets with the help of the [`community.sops.sops` vars plugin](https://docs.ansible.com/ansible/latest/collections/community/sops/docsite/guide.html#working-with-encrypted-variables), which is configured in this repository.
+A local Ansible run then uses the locally available GPG-key to decrypt the secrets.
For a tutorial on how to set up secrets using SOPS for a new host, see [Setting Up Secrets Using SOPS for a New Host](./docs/setting_up_secrets_using_sops_for_a_new_host.md).
diff --git a/ansible.cfg b/ansible.cfg
index fed728f..654da28 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -1,3 +1,4 @@
[defaults]
inventory = ./inventories/z9/hosts.yaml
pipelining = True
+vars_plugins_enabled = host_group_vars,community.sops.sops
diff --git a/docs/setting_up_secrets_using_sops_for_a_new_host.md b/docs/setting_up_secrets_using_sops_for_a_new_host.md
index e612d09..c88315f 100644
--- a/docs/setting_up_secrets_using_sops_for_a_new_host.md
+++ b/docs/setting_up_secrets_using_sops_for_a_new_host.md
@@ -1,15 +1,20 @@
# Setting Up Secrets Using SOPS for a New Host
-1. Add a new creation rule for the hosts resources directory.
+Because we're using the `community.sops.sops` vars plugin, the SOPS-encrypted secrets get stored in the inventory.
+
+1. Add a new creation rule for the hosts `host_vars` file in the sops config at `.sops.yaml`.
It should probably hold all admin keys.
You can use existing creation rules as a reference.
-2. Create a file containing the relevant secrets in the hosts resources directory.
+2. Create a SOPS secrets file in the `host_vars` subdirectory of the relevant inventory.
+ The name of the file should be in the format `[HOSTNAME].sops.yaml` to get picked up by the vars plugin and to match the previously created creation rule.
This can be accomplished with a command similar to this:
```
- sops resources/[chaosknoten|z9]/HOSTNAME/secrets.yaml
- ```
-3. In the following an example on how to then use the `community.sops.sops` lookup plugin to use a secret for a host.
- In this particular instance the lookup plugin gets used to set the `nextcloud__postgres_password` variable in an inventories `host_vars` file to the secret value of the `DB_PASSWORD` YAML key:
- ```yaml
- nextcloud__postgres_password: "{{ lookup('community.sops.sops', 'resources/chaosknoten/cloud/secrets.yaml', extract='[\"DB_PASSWORD\"]') }}"
+ sops inventories/[chaosknoten|z9]/host_vars/[HOSTNAME].secrets.yaml
```
+3. With the editor now open, add the secrets you want to store.
+ Because we're using the `community.sops.sops` vars plugin, the stored secrets will be exposed as Ansible variables.
+ Also note that SOPS only encrypts the values, not the keys.
+ When now creating entries, try to adhere to the following variable naming convention:
+ - Prefix variable names with `secret__`, if they are intended to be used in a template file or similar. (e.g. `secret__netbox_secret_key: secret_value`)
+ - Otherwise, if the variable is directly consumed by a role or similar, directly set the variable. (e.g. `netbox__db_password: secret_value`)
+4. Now that the secrets are stored, they are exposed as variables and can simply be used like any other variable.
diff --git a/inventories/chaosknoten/host_vars/ccchoir.sops.yaml b/inventories/chaosknoten/host_vars/ccchoir.sops.yaml
new file mode 100644
index 0000000..d067a48
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/ccchoir.sops.yaml
@@ -0,0 +1,237 @@
+secret__mariadb_root_password: ENC[AES256_GCM,data:bevk9PiMUAP0YBYqpVw9PLEz9ITKVRQ44Q==,iv:Qjr3pOWzcDWUpJAakrn31OCcvcaciJLgS1Zp+YZPWPA=,tag:DB1l6lsy+aHa+U+QLAM3tg==,type:str]
+secret__wordpress_db_password: ENC[AES256_GCM,data:QsvJ6NH4ySsfSsP3pWEx04vxjIph1Wk/jA==,iv:AnocV/jXawXPxQ0dLSw05b38ULQuU/RN2G21/1GpTmo=,tag:QlSCnuaQxCmJ3XO5jjX0zA==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:15:03Z"
+ mac: ENC[AES256_GCM,data:Za+XnpDu+WTMEUgZ3jnG9/4FOd/emfdiaLSGX+hfkuBSurlqFzVHpXqs4kyl96goOASevkiqCSXwk+DGGNTvSRDCoAH2jMfwUHh5mGHFwXKZFjraVnLidxyOkEg+YJ+tzJ9EHJ7MpQLYlHgGi8Xrc27n3+gpjni6+VhVYiLj4eQ=,iv:fQuTnJbsyNyphHZF6T9UF62jtA2wDrOxlPzW6XwsdNk=,tag:T8P100qKnYhNqr7oJaY6yQ==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/5Aaori1KxKbVlhZ2A/9Uax3yriNKXpow49zVeXmiK61YS
+ lUXQyNpH7qEhIJJyWmbg0LPBo8mjcxEhS/ynoHnrNdUgQuDrpNQU9cB40j9OpFsl
+ C3/CJjL5UkLapQCf1LK4QWpG1cfdtUiIptLq0f29KPY3J2hZsicDfteSLYPWd+BD
+ zQEPhUKy9BcJA2BfOZtLgFyyuj/OeTuaz6Z366203VhBGT9AHpwgoD0QF9Cp8le6
+ QiAxaJvVgpcRf3mDBIu6gStslAk/V1dvRsHvAm180/whz9mW/yeMG2qKqOl6DLoA
+ RbJ9Mc9R0/IXoRJK6cOeyAURqbK/RKmxlzv105Rl8xCRboIMxOeOr5qGyooAFk5j
+ cy9aKy9wlMLelvpvQYU/VZ1V2D2XaZfzVyi3Tvb0Db19Jt/kYT3JA8axEb5S/Bvm
+ TWakcj3tgZPdbLIpDnV4PMsajn4fTP6K/6asduusaEUXEOZFWsxa0U2IfXBFQSVk
+ 7zKydnmvcE/T+FjENAPX+VimLUvPvZR6E+Xk4Qv4cmalR+BH7LKden0nXokB3mZ5
+ S1U7hSaF9remkbkowQ9KbxpdVFJ0Olk/T2Ju6X8WyABjvaFIJSrYYE/OJHkfxPsi
+ ciceM7bUs/GXEej5Qn06phaGEdHN7OW5tMwQTu/pcJxeUqCRiKWDXhO3uo/xpG7U
+ aAEJAhB0zoXJlHRv8+4XGhpfPpJkTrUwN1+FGiImIwG3gkh+shA7+eHzXtUBA1I0
+ xDaWG6BVIYPjCQLK0BZv6gqzQEd3JFfqBDfHKZKkbNZ1W31xYyCNzEaF0qOdemmA
+ PXaI0bcCoUwT
+ =8ZOo
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ/8DxdD3bD+xI2MPADQanewfxkUmYN5ha9AAyoX6z2ByNWG
+ KQ0DWn883q7oltHB01cxKUo+DXKwOHoJfbpdJMxcvRZeyBfGynnU8SGO3FzM224a
+ GttD5cai4sYFMZV+wx296lPw5z4mvSlQnibijzR4ed+D+bZ1gPPEJh8WRdpBa8+J
+ Az4JKOnrmJzE4UWnxj3cd+sY2AzvBnqX5p8x15enLKemPS1ZFUsLi9+S1LVCTBrh
+ DPijfwvPFbiicP2KlngbdLj9Ge+IalawqJ+dw7xe0Lvjg0sayjfuEyDj42eXLKBx
+ 40aNyhvLzw13NJgihS84BddmTE07Jzq2N27TOr0lvclqNK4onk/Vr0qY97IWW1Gm
+ IB2gEagMzwgWrCx49nyZbZBR3AweJmfEg/QkyEpSY1l6SSOwLnN4jSOycF7vrJ+y
+ sOrx55XsFLvmY7VoOxv+ya4h/zXdDWoxJRADPWgnTcPp89fAkFX7K4XFeAc+9xHc
+ 28rg+SFwUaaReA/C9VfZ4Df7uBkctyshCHaE7qDdI+W2drCVvAX8ksncACUJKYY0
+ ZS8iXLrO7s6wCqMOepR7UBkH0rXw7lFlQ/jyKkut0dH8QtivDZ2irj9n8fhXrN1h
+ toWQ09jRcnuTpx1f4sGMtj/F1ccYidTnOYzL9iC7G4mcHxwzgeSdAe89BHh76JHS
+ XgGjnKmikbutrGezHDODQnLvBae5vrAnBAoPXQLSutaDf6ud7MTEp7/0rSRYuznf
+ pCGnM3G/kWLvRxZMl35Tp+D+Ld19vmKVllW+xBLp9DlGc+aamEmtlNHAkM72i7w=
+ =vmeW
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//c4goAyFLjvE1bnCaM38c45zOOnZ2UM361HXNptVz5kfg
+ jLaxmoEDownD4k5SVdmffDsQvXa94ggT/AuDfa1IkXq5yP+tZFJx/oKLZamTxIh+
+ UjKs+/eRIuDElcIScwecf0quBzgoZYR7rikaEAJQX/sr6rARofp0NBBRiVIRr+Hw
+ bw7L7g136kZNeKqfhkYdZnWWyXUCE1f/p7OAb5GA48eTbvwFI6441iVQA1hV5zQy
+ UEVozf7QGniFQQ5BY6LtUIORT1jODhILDK6mJrezWXaQPH/EBGOuDYv0V6gSyzKV
+ +bqTQdET7QWDiG1Ga89nv6k1iHNtmILpWTTi0QGCySFD6Qe1nDYQZhOb9lgeGhl4
+ Tkvk/LRI/G9BvCO+Yr+n1Xz8vFKnv1agKazLv6iteeW6PVGRXyp4530Vhfr71vch
+ a5/BBCG4Ow+uZGzHlzcyQ2g9x8puOS+QgqNQ3p9vv6cY8jb6Sfore9WzJttdNSO3
+ cmTrVs1CxjRkQoW9DTU1qYH3hrQxqYz2DwcOrgVno4UAXnL/IDH+nFQ2MuxS8TBj
+ DNOx3X0GsEFHT3cG37Ic8V9l4C6fFs9uxTWYSEP5EsCjcbbTReIVhRcQpt4TrvPY
+ J+b2leQQ6TLNxVi2OUK2kQCKj02Hr77cYvjbJ6GdAgT+YzYG9bykExFLGmiWuPrS
+ XgG4t+84O9fYHEEC20/AY5C0Hol1fAaox4F+96A0P/SR1XJ2XJlwSqyjgQ239cC9
+ REtITowqDS7KajEIy6t7a2zE+cUCyYSfdr3mqlKGppT/35p9qBOUOXN3laJAgHc=
+ =GtcC
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ/9GKykvIKDS0njJAuw61kHjgV4HsNWDwrQNkWVDblyJ4MQ
+ HGSbRXlyZSj+v69UZd8Ub8SEEnG5KjOKKt84NI0Sdnuzzl893aUmqNsqaWxk9bkr
+ rzBD1BRnuB2tt39F22/hcbe6uyfdsxD7CeinqMdqwJYlh2H6TbuGMEdKb4PwIDj9
+ hKaabDalE/RXu4bHI0qU72yPON9PriTYEAgosn+uce9uiq4EUzydjETLiJy7Wx98
+ xH34hNyBHQGJpqdJtPjFeC9NEdXDnwYygoFcFjXsMMO2DmfFxRmulTT4Oad1hTre
+ egPvWhgCg6ktfrtJahJrvcm1ccbqJNSC2YOQmwRo067sy3nB1r7D6dHs1OvGKQdK
+ tEwmIgreygbYnW9zXtsdr31Jkxw55GJa2eKOq4DjVhwlQ7OPxUiFxA43l7cHS2cH
+ aRf6gqrR2PSHcalcc5e8fp3RcalVZiOhg9p5j0hTtiObAWY4gSbv5hGrOEbjd1Gk
+ 8df0HqHa+aeE6KpdJP7YVoip86irk3//wJNkUhlkllml27lJ5oYSZ8yD1UH5p3sl
+ QfeqSX3sgTifcnjHWKMlhoZQXunBTWNV5Yiq2zQqe/1/qpjS7pXgmIwolYjAFzzM
+ eel0G/7uofMP1qYCch6LK9OWXh3a14HBIWH3XdPCnWRjQFxWTZzXtf02Ivb9HJbS
+ XgF/7Pr4HzYpwlAJCfnvWQ+aIPbDOQssWwkk8N3BwAtuIAk2sF7Uz7p1PJghVmPr
+ 6Dnvxy/ArHPDdPEQ9181MfIZSj5ywg/GnaVcz8E31GhzF4FdwEY+UhGZTrhdGuI=
+ =1rbG
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQILA4HMJd/cQYrVAQ/4p0ZRXMmshv0Jl27ArY4jr6i31pqZ345yKzITTYaNs/KO
+ qbtY71CXqXon1DxBUDNjsThYg25Sql2sOKJtot8iTaACj4Smr15xFyxtu024DVwR
+ NzsRSPwBXMRkeVeiCPSC63Ve1t5H97eaauSTk3FiEm4nNAjqbwbq9G23sUSnVgd7
+ iSbzE9IxI1ZUPewyQPAZkeYqHwLOaCgun9s0reM2ZNtYs58pP4DmjLCL5sQ5wVgu
+ A+M8Jpg4VwPDh1S+qGsymxDfeOaJvCN2ln3cChxaIHVxIXMy+9AzEoXc0MjcHGYy
+ WJfy5LjwHr5mPRukXlsKPFDsSB8qCSkGKGqg0fvqCm2NI3zR9a1uKNpHXbieb3Rs
+ gFvNOO13tgP8UN3d9sJFGd3V8XJMYyO5rDgXbxsxfAnQZ6A3MMdc0iXKkgQp4UKf
+ BGt7DiMHiW44rbBe9nbvtklurFhS0MQG89puCOa4SUCO8bLN2ljKL5yYERHFsjxX
+ OgxVOF29Q3XZwNOj8SogcTq2AA9q9SFQ55WIchV2Tf64ozgDvWdYi3z8R6xruwul
+ iFeOGR2iSdeX2QU02GYjy4nYLZrviy/ZGbuN3ZOtpAvMIr4wQb21M/CRbIY9mmEY
+ QbXM3fgGFjWUKyqmbNmSPKOu3dgUW81rzjepfXhruWKjFdnXtbASoseCoUjoRNJe
+ AaR76Z2dVvHxLmAS01SGmDBOiDhJH6qspW6lj2H0POvQS2tsQuY2lMSiHk2pQRPm
+ 8qw8ldy3Y/AqYOs8/8hU20C7JbPn74jjwnaGNEbOz0FPWnkUcXh4qp5pE+SG6A==
+ =wOyB
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ//WI1vPLWFh8Ci++4zalf53Xj1PPfwfLvfEhlAh1zDeamW
+ L6GGpcDUFT1t6N/XBw1ClCS6G9jkUX0X7OsDEpy9mdZgQTRRb8tAFtyL7n3VV3Ko
+ 9RQhl8scm66Wze+WyK4iCLG9pjbFMLEdWNTPpCCG5NcUCFak9UF6VYv4nWuiXCnD
+ ExbNHixNgZXjyFUfL5MHbJr1wC/qOJaXcfh90b/tnAsoN6tH+/HUMixdnh0SKKWb
+ rXuxf8R8Dk7DZPWybNuKYYoT4tYg5ZVSNai7ae3ZJKASQsRM6sV4ZihYfADXcbzH
+ HZIT7fsWsleYzlt3BTDmRbkYZqdDUAKmPRC4gQ2SBDcya/oMpmkd1iAo7OxOLnyR
+ sVBInu1M7QDsoS/cxhT8oWBskHgNtCM8X7ogbllU9bCPDvsQMzGfr0/lhQ/cHDqj
+ DUz4pxzh7fnm5gfXlRqWrRbQGQKCBpNdqG6iVu2amScrughnybWoNaRBclCnCrwk
+ 9KSw4US9wMpXptY63mUoKjwP9EAD0ue7bkN8qe8qJ9zYveV7eVHz3fLM1vwMgwr5
+ 1CcMIZmExMDErjGHSuG/lTuwB3x/DIWze5uPLUCdqeMA5vKSLt3hQTBD2vUaI8VT
+ Vya4T9Ufo5t7SU+IwYXNpd6TfIHB3njTQ0WOdFhq5tfMspp3NC7bOqkK0280t+HS
+ XgFMzGnrgZEb3ULn8v63J0J0eygbEJ8sb4uzCc5hF/H2WxhH+aO6KhrARTYrLYPc
+ 2AOskIonel0nbOCfz3t4X3SCuHVMXIbx04VsAVz0ZP6W6o6DHcelvhBfqEoAoRE=
+ =+sMX
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoARAAvAKq9W0WroaPHgt5b850OEa/rNOC1UNHrxvPGp7vG9EC
+ 1uPFHSN4Gswxy22pJaotn0hbIiY/9RqXW98kQYm1FYo15IPIp8LQdY9XrhBoDBtL
+ WnDVys56FieJ/T//6NsT42jdjy9QZGEMRBc3rW2RANDzMuEcD/xkbBNjO9j6KBjx
+ TrMlA2CLQTvX9rY9LNzPCy62xAiiH5wDcqIGjS6Z8SmvIO0Sx1Jl8Z+gW1tqgqGk
+ VeUJULgUixEEo2wZT1VDPdz9uL2IywTKYAaRhi3C2KgqeD3xkdqN+rN8vv8VzP5k
+ weZDIqhq9bU7uWprlds31wbVWS5IpuhfCnkH0DNXw4C9X1M23ixlc/e6Uy35jgRn
+ b65G/HTuHmY7IiYWmmWbe3us5LdCjx8PuL2sPPDC+ak6Ud2ZeXbnVR6ebGmFs/C2
+ rJm3cfxugz+Uwh3dNwQpNq4INu1c+A+pDelDAI80fTQeI5WTAJyfyY6jA2AtfEeq
+ m/zs4Ijys4L8yaiFzeiQRDQ/pqwI27KxXm/xsbq/syYu6MFtC5q/x7kvcA0hAS0N
+ /UvAZMHWn+0b6T66H4hm4zBGRPzJrC7NKvXKETkm6I6SDU+rHP+2SpaiNp0pOpWZ
+ VDTKWkcUpkrL02YDiCBpcGaiL3W90j/nP+iLPnQDmIv817Nv6PI2lkyUl23PINfS
+ XgFm7UHCCDF9alu2wV08j50WtDRV41Re+uHGyu/0f9GOUtZy0zvf2QOWK/hZdfjq
+ Y+8gqO0o9DFYC6XecS7Iu1BjpZE18PgPPgtPkBwM4VOC+/ikMFfSXnWftel6wxs=
+ =QIAh
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ//SUcjkJnArDKa2P39vr2p4G+aFqoPmIHA2TqUUeGZ4yXN
+ 5AfpbC60Mi6h3YX5Wt6+kPgdhj8N/n38nCLs1UVIw+HMponjBXkAh05NmbIMvd8p
+ wo4GVdl3T9r2Gni36VM+4duWJRnDuNVQwM9m4dhPVAZyF4agSLG5+NbEyaV8lgxI
+ D2GiGHs8NN1/InCW/l4mCcbA9YV4sX5AuoqYppBdlIF24isYy98NJovYRR2mgUAX
+ 781DjpjjM8NIWGdySQu3EvGcLCnSocaB5XNMMjK+1Bo1bJWXcATcpaX0wAXQ+Yry
+ XC6NcZu5K0JPwp++VbAzqlbSOs5zPkO72AXtEYZmIAH7lA5V4QRv3P40+pjRig2V
+ bQdzUrbBJEMiCAit472NjX9SpoS139qE4NITU2NByWuMC4/MLd3TmdS+r0a2eGtX
+ alE/XD5mCPx+aXgb2WXDCuvSI0C8wr+i6l0ls/YdjPxsDRKKuD/afiUvnvE4Lfw4
+ obnteOsweyG+95Cisewtnd7RsjNysyR7KknBP44gtXMnhKCKFp4eizFzCMa2y+VF
+ l1kQdlS7/DZucv2Q4Z2jSMC7bEYeG39Lrey7a43tgDuYe00lX2qX3SiYpUZNAbhh
+ oUF59KlBY1rdkuD1heO25R85Vt/RGWtuyYHMMNbS1LFVEOjJlsZoftNH5KCtepHS
+ XgEoIuh1TKQpyZeRGkemWa6JkBn+ag4+Q0jfezjA6QnzIcEE035qumhSsJOhqN1o
+ VdbgW6zAa/5ywZ8E6Iv+zLIKHasvIvRNoXpP+AfeFx5Lb724bn2HT+mv2kT1d1k=
+ =kVZE
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAuoKQmzBlrBGEy1rCYr88KSpKVHhCnbO40Y9W77dik8L5
+ Oj7lSE4MXb+Z8dtIi3XdHPP+R+FKFZtY/l+1VaHnOQzEow1l+1lenfPttLl08Uy5
+ N+RaNyX/XGOBexHboHR92Zq9lNgOeyvbwlcxIr1mx5R5XlihGrARpv5GWeW7U4UO
+ BWba7Hcn97Lv91/i7tkpEc380rANChX/Jxfn9h8cv99dK3dnWsapVOIVgD2DHwEq
+ SD0PlhNjnv9jF9FhNSkIs6pg19gs5o8k9uIA+qmHssKeB7tGrWH7o3/HeQD/ab9Y
+ bo9Qk6iq/J2s0NSTTLwkNb6IY+cnXhPl+fw+SJkiEAd10K36PdwbCj7UIZ3nTeyl
+ 35jTZi8b0nx6V7/TsBHGULds4fDcYoGI7RijlwiY8/p+7oszrRfhtqgoetMaWA7I
+ PdhHv5RH+flpyszW8ZVA6dv1l4PMPVexHkBY9Ro9W36l0wJmCzuK/p5u6LYLJ48c
+ F+uBVPlfj93RyAjv7oFFDgZ5o5BKfw+uKqquXeipmsdJk/trk0Vq2rqwyIys5dkZ
+ Qx+bvGr2gOli0FnpcqWVZK8yALpyJzUbJ4O2mhehC7HkoDzWtGSQPiK+KJ28daP7
+ bsOMeWh0GzZhwr6LjBv/6U+TVXD0Ktnd/vQ68UuN1CG+j+N8ZoUA03TvGEsBN0TS
+ XgF3YhNZdaqNqWXeJdNUTrLRCWmvQ8IopHKiNOIQfMcoCtmiCpUPRRa1x4fcqHMU
+ YUUGHA7zuFAUJ/84qSCY+hzHuhE2/Ekdzm96pP//ADMw2PEjcJcU77eccOg7w9g=
+ =MxWf
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdACln696wKIVm+glEf83eKr38r+3J5kq0scRIP7sXkyBIw
+ 6Nj/chsQQ58yY7uVH3061ha9EOtTA/WTxsOZ4g6y6hmVP3BpmxgO1wth9vSRNEfO
+ 0l4B2coHsjxJq+wWIHwmyZZuuIbO4FWiQO3PO+w6GScSzwcwcPK0kPDTqGvrGZ1M
+ U8WRBoJvhXXISu5eXT1nv/7c+RKBoJlw9C/6xfwVcTSdDIV3/ePnGw0FPKBg6iIZ
+ =idet
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdADTJkbTDs2aB8HDkOJMHnyYLnmitcXWcywOjimKu5RXEw
+ Od66qCjNKDIVisfaNJoMG75H1AjXOU81T3CfSIF9SizkqH1WlNpRyUJ/YsZpxCf0
+ 0lgBJLhngdZvQMZ6vsImoJJ5zWY0y6nuIHW5nrsK3pJ1QYQZYoSPFvbyeYLhlp6v
+ Nbn8FYo8t2BV+G3pAuTOyGl+6tzqhXiaodpvQ/3Hrs99Gtgi76DTOaT3
+ =XCpO
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:06:01Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//ZwxToDDE1zimAE33Q28+EFqh/JOCKZsIPoktloIa9umN
+ nrl5i8JOx803a66yMEdPAm+8aS3gYQPTEydTrQWU1fcvpCLOkPwzlePqZuzb2veH
+ DO/rNq/kf1WV5B+fsvFtyUfNHRzIOwtrc9ivSis+JBH7enxuIAKKOD9RSHBa9E9/
+ SXIfevM5uHcrp7Mz58nXZ6jRPBzxRbMmGJuk4uvbhxwMAfFAGbRGayTU2gEEd5XJ
+ FJdFa7O4g4VrZKO32aLtyFhP5W7/YiHyUSv4CADf+FFqtqc9G+wZN4MmJvph0tHS
+ clYf+yxPM6FrB8AzELAXN3FOCXjn4pUVfne/lA4J//EmFaelMOtvTtTsUJ6rLzt+
+ 87zIkV3sw+6ifknpgGoh16jan6C4sbZlwYYX1HSg4RrUtZifNBHRXERCEXsRz3XH
+ uRcsZQNgPxzBT1TKQFl0v+Qf18OTzsQ8Yr9N18cNk7m5qPFsA0RD6l2hAXpqASgx
+ peUQlWwF41tZgwKnaN6P6n4uDdEqj9fvtvWViGVnZflShzdBmzZvpTtr0dAauei8
+ xZeLN/3MLnAs9JlG9w+zL6pJJd1E9yxZ2fuvkNeCa7tHItcnv1qmktqZ6Qsft/je
+ y2VwZELt3dwfAn1V/tHGzHqClxrlaaYQ/F6L7KTo3qAu/ThRt7CcpPnhszS3z0XU
+ aAEJAhDL4WY2nqfMtbexKlb6hA5dWhNzeoe7qA4lcOHqHdnD23GWZKcm8ou525rj
+ WVVwEvedjTqoZ0H156TcKDkNCo0HmopNix9VjANhX3iNlD9pGIaziiz3njxwy0Te
+ FLl9WGpgaZyl
+ =In6R
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/cloud.sops.yaml b/inventories/chaosknoten/host_vars/cloud.sops.yaml
new file mode 100644
index 0000000..ea6e297
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/cloud.sops.yaml
@@ -0,0 +1,238 @@
+nextcloud__admin_password: ENC[AES256_GCM,data:R+6uuaDeQWSgtV1Cp7YWZvF8LYOIhoz1K7WVKerm67NLbLRpD9191DyQH13v7ZQPvIce3JzyrWqoyQigJQIQqA==,iv:chVGvTY1Ge4OwrVbFkU5IMd0aac5HqslddQEdY8F4Es=,tag:slmFXStGVf6eJdPFplqKjg==,type:str]
+nextcloud__postgres_password: ENC[AES256_GCM,data:GIWhmhiDkOC6mQAqNe8aKQ2TpTTYQJ44jn+P1hnpAxstAWLUTJZdxE2DHdjhZ9tV6kyTb/GXANn1UtgFzxczbw==,iv:lhJAZF4mJ09jVa5DxtVTfMe5FqfjpQojrI15kYuXI6o=,tag:LvzpBXbBQtNvEnCDNphUqA==,type:str]
+secret__nextcloud_smtp_password: ENC[AES256_GCM,data:9UI+hMDQqM6Ui02fpdscXj5Q+XfN3t/g1MUX4blqd/egoLBtq8R6YpdK8wf6heqXUck6VVDgDLFnpfQzy0cqzg==,iv:dkTN/pj0YhLqEw6Sp252bKmnA1RaF9wfoDE7naGN8Ao=,tag:1Bg/ZoCITh7S9Ps617DKTg==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:15:59Z"
+ mac: ENC[AES256_GCM,data:iJcBQZ2Mpa83/bR1BcTPh5PGrsjtyQjtAwr0y/bjOXrpMjoCiE8nHl2vdfZIxGYU+v40nkgYhXS6wCIlBZgO/QgvXwVT3Qm42i4GSx93N+jV8j+iB0a1kPJ/yHAPHD0zvWF6qlNSAeFWPbifLMXHLjijZDud5LxdW2KfJ00JCuA=,iv:BTUVSDYfKJI18GZhiUC/pJ+Gbuzfk3GrJadlOapw5qk=,tag:f15zFqye7O+L1lTp0Z/8jg==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ//b+C8LX+HQHaSvOdifbc9/7yljt2R9vKMqdSjiYoydHKW
+ hDSnsTJNROAIircedeh/WPMDwYtsL19BmxG6+l876cNb8YXAuWBZjZxz2mweWsc1
+ lDUCzaY1ir+4357fbp0CPKJLXZenOuSDtryoR0N4FJgO/BvdjpIjdxmmMl1D+zKl
+ Yg3fKA0rYWvzezYgy8ZkL4cY4c2oVF6qIX2J+SHoWpuG4avBKXZgt5unt1VkCsjd
+ 5KnfOLrqMT5IXVkqXy4Ev/JUW4iT/bd6A8dk2W2UYkdpwyscly9G/LQZYUilkBes
+ RHgf4rSGtsE0PdrY7LV3ZMSbMoUJAGVJr2jAF40skUNqxUhA5YCaJrQZ3+0+//2l
+ x/Moasoy9FbdIjnLbmQbyU/vZpNwaxLyIbCKC98NHkRszT0/5vKzmjrmEHv8LTmV
+ S5tbbJRM+jjuEyjqXITGOkT6EVELouhJQV31MoSditZHdfDBjuKJuAAop/YsPauk
+ 9TYOga6iJx5ITjety/4GR/qhF/AvtGkKJ0A4LM/rv/nC3DYt8lQAERmJ31+0MOLi
+ N0b1wHvbCZmP9qWIcMWtPy9mIrnFcY27W/jlcW5sKzkUSWDhR+9AcuHrJIEH34GA
+ 7WIn4Bh+iUYcF1k3m1Xy5dUFHMv2SUpnrECJ6qGDZdqbHDcokxZ4A3fIIKZPpHDU
+ aAEJAhBL+MA9Q1NaupjHT1Yw94p5OXqtWKx7BY6LzrVxXEIHjUIKKIyVbj5uRyGJ
+ 58O9CGbT7BvOEqLUsrLLpV35qdeu8VXiWr1Gf02hr9FDD2hPcpHAFiQNef2oKBMs
+ ml0dKEQSJtbD
+ =6PeK
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//S1vuhiPa5p/cWHWlJp/HCh3w7Ero8yfg295vow+wUVrr
+ 6B2jTFDA4mo1+XlC0hMX1DgdW4w/ePCPyMfRKYQRq9y7YZN+N6Rz471g0Ci3DMEX
+ Tpz2cyXlLmvg1Hp9Khg4FGEbrVsB+8VNpecRjYQN3+oGDf/Y+6jlj8/zHp14MIdY
+ jElGPE5BtNqQaBQd/qgM142gh0FQEkLl4kVTdRNbKzGFe4soxkem/fKDGBW2ycTM
+ 4L+XKzXhQKaboSAf7miMuB+v8Bj3ryze5w/4m+Eqvp8AXGmlAG5aME7QXl7J3dFI
+ SBzXCZYLH/ratyiERF9vkgqShUfeud8hguqWARlBnamA62biEnaxIoQxoOzRCQUY
+ RFm3nRLy92Iha9l48v+5vwT72mAWPnSjKZDcp+pPyzFoIfpWNuisix1zSCTggJHV
+ WISXCGy2PDnGFoE+WKdX57rkYe7qGYR+R9F336uH8NM4pquPoOrnj4bkDZQQD6JB
+ sWWSTmfkAriUQcOFrWJ01lV9lyVJvFkQNtvkFGkOxovCouXqLmDlhUTLeZiIRcZI
+ ybkwyBGKNLgiGexDGJWSUSGwFGYbYrH/tCDGw7GyROnNS8Z+OuXNuPpc3cmq2vgG
+ dh6ni+6PrGCm4HrmBfLPy3dxXivm3+iRq10AA944hMiZuKUFq4qxJbekvkX+H2PS
+ XgEQoSqfwtgHMCx7Ig+GUG2rOGnPKFLaiJEm9rlWnCILY8N0ZraUG4H8ioGh0pQa
+ BEFU1bxo0kW1HLBGdMXBKCJ3uzBQmJfvI3o8PcBv7LNX4v2Fcs79Q/Ge8EQE2tc=
+ =M5WX
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//W6glp1qrIrQrpa+12tH9sjYBVLQtOQsynnStoPVKDvYZ
+ OQP+7RRNMVpLih4A6b0WCXi+jtNWO/Nm6FCLgpTPd8wAMlgIkpSWTqwiENRlj/6f
+ PxKsxn9DbZxYARef2Xw4ur608RW9U4WHsfQSIcnxAcQ0vcj5+iTjQI70vklubIcD
+ 0X+ECiZl3oclRMRtlhKO4MPJJYBEfFAmjOHeOMptjIiS6Yc2KiQRxwDZQJLd6pdO
+ oC1QithnjFDXqHaj1q9HU2vUZOrtA1JlY8ERDJK962EibvkPVuymX3r5km3cpKlo
+ 3HdOejM3hH40KrIzeAG2VtgYf7bTuykbP+2Y1lIvb5SuAwK1K/TJSFBGUo1inrk3
+ ljbWUxVhWdi0r8PHK502pjQzM0kNog0Msd3hN/L9wdy4UYA4Xzv564ktw1XggAgn
+ pkEHb3VCAJjcEwoo+RfMYTILq4imWFAARjCaJn7X1B93wnyD2luEvnWTi0BL5Boq
+ zMDFbidOaAy1htpEnBt3Wt4lMpOP+9ZuoMEfuT9/FFOtLR0/Z1WuOC1wDd/NTTxF
+ wcyqiESepSh1evhy2jg0YCI+fT7NpMdbn5wA9ENxO/XxK/czgnP4bNsp7xxLDUrP
+ lML712wCDGYKFnc8GLkfjeggTLOGHUpIyrbe+I0TMtwXx5obAIW8UsoePab5dWDS
+ XgFTEpiI1/xdu19slPs8mdJBkTSDYTYdNv0Y+yiw+HRZsaz4fs7+momif6JxGYh1
+ o/T+I3CSkW69pRhHO2YwINB9hfQJDJd9DXAa/Ym1poh8tVW0vVushcOibui5GIA=
+ =LuKM
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ//S1o8JJrXeU4OoO/Ui1S8RoqOcPDV0+M577n7nsFK4BYa
+ TqyxY1cgpRlnqm7ekoXqEgcoHdkaEkbt1MgIVm4k2boq91vRyKXMrQTILVifoH36
+ YiN7oaynaBGRJaHHrf6FyZQ6Qx6C2IsTelgKL0mQ9A3+4cZaquVEtcJy0Jrn3WJi
+ 3R0G0J7xbTITgUJfN+o+0bNTjJzQnfDP7bMacsaxp4l1W7ewVCBKFkGToxpRHrnV
+ vl2LbE2bZifL1xHz1VRpfemgt5lPBUou3/NCIcaBhlFsXbZ8NFtaQUqQsjIyQ0Xo
+ WDzk94ZLzoUwpfm+aMOdTHxAqEKNdb5MlttHLOVniD39MoaIIAIqMBz33XQMD9Rx
+ DqwKfBxsEJCgN6uuhtuxFTRmbBhm2f22mXczNFZwJ2NdV3vFP61qSEDkXnsejeS5
+ gj+kWxoB0xzbmmCJJMq3ErGU3YEZXsemCBfscy1f5gGB/1Xc0Rddik/qIt1XMjj0
+ MYqO30jAKEEEm5G6FiY60J+lR+EGek3dCQzhUidNpGzxaBxLaWK1tC2fDRDTFJmR
+ g4vQ/afcxoWKXZiS1aaU36/6IS6t6asiv45B2i+5tQi3M5hQ6v8yo4a2zTH9Ci1h
+ DbPnNbcepaFAoxZp0G7k9Tmq0BOpr/IGqMxYaNlTnvehLIcs01wmPZmbcz62/frS
+ XgGKHAJMj1FDYFh2z1LdJwo7YhrZrIwRhPhnChnoDx5htSZncDI320R+8yMfNM9F
+ iLHhowwiPSTypsTpVkfU3GwGzCCBRSY5zNBL2EPTL5/OkYDIpI6WHiUNte7fbro=
+ =fA90
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVAQ/+MIdCVSviTxE9UFVPtc4nyPrPmeLtUwJ2W3xBywa6BXOX
+ 7TlGFQqR+t9K/olk9DAX9fDg7uajXgA8cEhehnBlw74z2fGMKZ6iGeQE7FEOqfbI
+ 8r6Zsaz0NQrH/cv/GVvWZyrGDJeuFxjZjTr+mgh60DA7JWRu3AS5xIQzjG+tlxZU
+ Z/cy04DJjtjlxcSx6/uSxXrLSNpPclWFhdyIph+coHa5c0d5Smuwa62dHKSiGHQ2
+ q63wedR1aG7YwBbZMgR0EBrZl1uHu4OZCvtmSiGrFESnt0QCOIqLzhj+rXK1cxEY
+ ineFb2eKwETKvcgy/SYCEhK4TuZBDXWMbAULF4ymgIiJCzC256qWrj3nEVhXItt+
+ qNmG0v+1/ahezT4J7gLLIQm7YBILAqqoOFkejZDDdNHYZxESsnBtYCA1gn7Qve0G
+ yStlmTKWYdm4w2mpHlo++I3gIZabRT8d+VF3pSG93nNPgiy6tsr2V2J3g+EBG6y9
+ XxN5AbKrSdZHGie+nu1iWnx2cx6ciaTlHmm9HZ3/mxSTEns8eIt10ZCtFPG01PK1
+ dbdsDFc/8aYBMsi0FObsAfa5cGPpmwGA9CWRt6lZrHb/IEj2Dzf1Enj2GSV3tnJm
+ Ct22KTJSxVSKMypVTIfyG8qSf7dSG8HM7ikB6++HOGDoaVK0++iiqAxFaIIEahfS
+ XgHymR+mi/+W5ynoGFUkY7LO8gqMnEaMqSDAWwRIXTweyaJD5YnU0C5OGTuVmn8/
+ PvLK6pmwq9EcxFNBODDus1WLdEXQpjafx63m/OklCJdLyEw62Ie48OBf0tZ0Teo=
+ =dbh7
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ//ap0snjOJ8l+7Pz4ptrzXRl70tHvWB7CgebIDuaCWs24U
+ PqRyOKwVtUuWtCmvxFcQ4czAbH5V7KbVPo1JWkSQ4AbRKSy+9wXuKebmdl8KeuaR
+ 3lQUEpa1/yNptehh4WfeGDzz3Ixp20s7dfGi5OHJyjwhAMVCFMhtnw+a0iyP9Qpu
+ 7teOJdag8/8yusoDqV8ZaYHfLJxmVpGfuNIQu79SBnxrH3fXJE9LdtwD4DHMOafW
+ blpk4S0tMyYOZNveD9wKKCcxUlzg2KiAdvW5l0AAmXShaYYZpTsJGgb8xgiAxl2S
+ ZxGK46rramrYzVyIP3oD3Q2UDsa+HHeKmdHvtmNMYTMiO4pB4CCcsfOZVZjEiNur
+ saxt8kd3Ezdr7QQLqac8K7BRokjyMc7CYm6G9bhUDBSk6gZ3f5BXTWsjnd43/p32
+ 4+ndSyd3IBRqdeDMSfaQsw/msXOhrvv8bnpCQjugcSTyV93gfv7qhP/o7aO7ielt
+ 65aQT/RbEMr/hCHR2vreee8acU7rwMy6iJ0t5GBZ82yk6J4Q+KFGeXxLrnHzNGCr
+ UVmrCxqXnhZJ2SB1VYC2gOtxY674srHN1Ubsz7fNJ30cGpJJnMYcXfH6JpxspWNV
+ /HLc0h5um+k4shZPuD33KWu3Sj5O4xKlIh7FJakN0BKovAm0MfLiVnoDE32DxLzS
+ XgFZ90rZAyG6LUevOAPwq/paKBhDHAjvirrofk8StffflPenvzzR+nq86JrKeJeD
+ 42AzktGHXXYYKeDHUGhErtd2mpbHXit8A0WT6OCkUfFG7qITgK6qibB+UkgBzPI=
+ =WxCK
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoARAAqiO+a4teAodwFWrfU4SnTDvt1Diqx4ngjbM9Hhc61voE
+ RqlVHbvz0k3KCr01j9bDef5skYDZl2CbDJmQuXbkk4B+z9Yyk2/zZZSoiWm4YSVp
+ 0VdQW3PseYSaD6bLTNmGzuB6JEJtLNKdBe2O/sQSzXo4U4j9VeOM2nZ5/+BFiZ4B
+ WtGJ0N/2Clym6MN6srVvspN8riXoQdput2XHa5OiABfbi+eSAPTGz8UjQPQsrwbz
+ MdFfaslubZXQNO6GOXKV3o4A6PyiutBY0Fv+xd0zyBm+dllCUW+dR7kY3BviSYsA
+ BTDi64shXAs+ANBeqisn8xfU+XATIB3LWZEF2VTptUnIY70kI6hut2Bwt4BBiiBo
+ NfyHIgK8vUNaGIJ0ybJyywLqaAFgMnM1wzI4jpX4eD5/lEWZiM90YiEcW4/MBIiN
+ vq2GONxBV4vmgF9V4SoOTSKGhZoPY0Djy2HFpRf2WFH5k7XJJL+Q5yiKqtc//aRv
+ Ltmuc6Mh3SxkPq1YptBNpvuRsBcZUPY/ELj5basMFXt8HgdajNFfyKbx8hAEhKR4
+ rTBazbWLFHNZBx4eD8FKdIK+prPD5AjejPxanpG+kmAuV+IhGP0x0LJGSomEuE2V
+ 6Lz0vBm+Yx5ND1FplOosy3EJs/c7ofR5GmEWFDc65g13VXFViaz6neVUsCSBw7HS
+ XgHBcdfQtc72643G4nO83X/M58G2KmM/GNQXgy7P2u9+V4iS91BDe3WLMyuOOKtr
+ BbC5eRhp4NpShEfLXiuABYeBcrWzXOwMAsatGyvHZx8QmzzqAdzV8J4iikNPPK4=
+ =7+jt
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ/9HAG1CzCMY0MyEG6OYv/jIYqRzVv0LwQYUQWlwzykCD0M
+ Z6+Vf8GfSLWkU++V2Q8lbhsMsr9m5RMJ2GjpnBhKsUjVzAD0XmRXTE9mEHFwRtQ1
+ UWyedUxnj0jDiTswRMehwMl55aL9peRWUpALYSALq/S1JWmANpMVs9MdKIuN+l9U
+ gaTyfcNW2OjlA1r6mRKCiYhoxDDxGPN2Xii4P/D5bsEbpzybytT631qnmDVrVc/D
+ 88Co6W4l3Zh4aNFXL0ItamLrAu/+4G7Pid1qo2dGYGV3rXFDz/Nud5YTsPblqXxr
+ T2H1OxYWBTzsLQNBt/jCyRbJ7MgCHkDVcRO6lpceElM4zv+IionmNIUQso7Mpw1m
+ rss+2WOSHLYJjR5UwVsO4Ew91+tYIXDtVnsiOlnJNtb7qs46GsfNw4qM57VUwAuR
+ 28fO/9HjlKdZ3QGxHd5g7ay34SFF9Mke3lmRKZFDpr3519c9xoQJ6bvXsZnda7l4
+ ff4i1YF4HAIkymEaS0HMeTngKkCqnb8Zh+mROmxjK/rITXY9gt+Z9dj5enmWXEvP
+ 0C48sy48uMV1O60qsji7uIuKzSeqTMaIh2nad9NGUM2ZdCfbOtAolEoMtwdjGrpc
+ qB7XtwSmLI/njiC6/TP4HAf7mZ11CKEREaFSIj1eyViamXBFlMx4dMMkMsnZJdrS
+ XgGulfRkCcDqjz2czPFNOxJNpz5n6GO3QrZ79RWDEmXPfzE9rjQba/RXKqsyE4KQ
+ M78dyy3RIlaYvwBxFokuOk4MSjzqqknP8ehWLj8KSW0xre/hsLLec5ti8JxJD10=
+ =xnAl
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQILA4EEKdYEzV0pAQ/0CiwmulfqRKeWah9ns4kQp7kFHhD2fqdKEfPujQ7Ddq8S
+ pcb0D0m+/jZ/kogVCjknWwodi8BrPKKepX3QRVHKJABHt6zFIoSJIwo0+TAoDdDo
+ GD0GMgte4BTTATY88uup9DGwH2BaSF5EvUkUdSNcnt+FBZiDgg0R/pdD6lCqnIJF
+ 39rV6vbRSaT/TFxlac0PQE4IkYDX6SS/jXznKmw63Q12ajcvH5DK/4f4WJk+/vVx
+ yfwCI/yGABjpmpPvddhqatiUIsM4kDynmmhYV1oJIVJutKSNYuBAuxbU7AcFUMVu
+ 5Ib8y4HTVT7z0wZV2kMU5gol0QdsD9Nbp4ZzB2mt1OJduPCUFqdX+YGbUeojCmJc
+ Bj5oclCW5OmjTVRqnO27bUKKuj5LjCy8Q5fpGkfhnyluMwZJVy2jWqfI6Q4ht4hk
+ uei3CKSyzJbyvzwlEM4ov5OFNSkDZoRxq2+D3iS8tADOxU5Ihun3i8I2x4o/8VhE
+ t7JUxwzg0ZrsTfd/Kuhb3opSH6ot4deYshFPY6t5syxHh2kF9gUmCqQsE0lOdZl/
+ V9WPbAx5GTHoWdk7qAtjtAi/juSqzzNPC7tIf5SvNFwnbyJ1/GxKflPTtpxEGpL3
+ I5zkYgn65bspcITFbBAleumIg4GAiSnXX1IJekjcavDdmP3bce+pIzabXXHuatJe
+ AbvWXTZk1FFPHISA9S7ZMBqtGEpj13G+Jwb5VNyO5gRAQHtEVBE7kbxPOwvLDAWS
+ oAXWmaR/A/HRRGjWYxoOQjqJeDEUUWCC9YMZlQ7OioECVw2G3HEm+ORGUPCj9Q==
+ =GGHf
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAeZWBl7FZBdQGRChcSGOLjF84Y6t3UvXfOHbVCzO0ESww
+ /DHDJMKkiU5OwERzYlnJeMX10nOs+VGyIwWfPxRZ8Ci8qNRhqFFpGDpmTf9JLcjK
+ 0l4Bme1gmaBRDsK4LCLlIGiUaNJmGl26CPhAOM24ow1YMOEEq4xlEv9rtsQLIydC
+ A4eSPG7vsDlolrAM962YBSLo634OMOKfPNYv2fBzXT6gckJMZpZoLx9ooWt7Gula
+ =rxNC
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAUTHF1a2GHFEaQE6LfblINct3eE6WFAUnirqd/XsT0xQw
+ NVRFQZF+AZsmWoi+prM5GRhKwOd0ojQBiQu4SaZ7WVwZj4M2mEjGhzUp6jEdIVXV
+ 0lgBhJDo7QiKDHCmRl70NvwwPuLWHvnHgcprbe6+dc8N5Fn7GqLWpxyBgnZ9+WRO
+ yi1LHVnwRZutO4jr7MGDlzTt/AmemDRM1Qu42FqX28hfxT5UgqiUEUVx
+ =En6H
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:12:56Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAAkYaVFh58glA4RjaxiV+AAkQF7V0xADnA5/242Wua269T
+ 0FAvSVAtk5e8O0mHVMmfSFISAxV5rO3MXxRE3AkZbQvx9t4HY/VjpTR3MzrIFwct
+ KHyCBT1ehXLwdTN2Z7pahqSPNEM1+z5yCn1bWLvP1QgpJZKIPMc8dvuGzpPOsjHm
+ 0nTJEdJi7V6ccMWh+qZ47xJqgqrpKQgy73YbYxo19RCTDBtChjmZkPrxf4HjhxSC
+ e1JhDH7aKMDackeIHjKUmzyA4LG6726OYOGvSbM/KTrkh/LJq7bmmmBARo08Oh5/
+ G3GmTfZHPGGqpDuKreb9NJCkMci2q1rNdSfumdjLLsQ+2G5jmZEwhDatPOo8aPH+
+ glBKx9DoNMh9v8SUPmZJou3BOKWEpGrHx4I/H4hQQ0OhZlm6wxW4BsT8W9upjm4j
+ x8gU27rtBu1t+q0TJhM/g+rMpPpC2wl4gJE+YZzJJXbwue9q/stro3nn4cM9nJ3u
+ LUjI22WhGgT38xirKPisUQrxqdIAygSzVYrbgPtQXhe1YTuBaCOpt07yS8VKkwul
+ 4CBXCxNsGthgR6hAUU/fmvunh468Oc75+kiVdD5+6fG9RcuYQ0ouDjWaSK897I4a
+ OSc/b+HQgdBboJNwRQphHlU+Bf/I6t0FW4ufedkrNLFzLBWiwKE5A4sfsvPigY7U
+ aAEJAhD3W40xaXsGhhOlT++CHihg87tNj92jPDuZ2c6KmLmcKs+LpxR/etWMzYL/
+ YJ3v/NM9TzIzm1zhKgfhKkzAmWxeWJae0AYAbAvIUqACzZp50S2P3OAgXZhWYcCv
+ Q62yJ3M0z2BC
+ =DfVF
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/cloud.yaml b/inventories/chaosknoten/host_vars/cloud.yaml
index 8dd46a2..0aaf92e 100644
--- a/inventories/chaosknoten/host_vars/cloud.yaml
+++ b/inventories/chaosknoten/host_vars/cloud.yaml
@@ -1,11 +1,9 @@
-nextcloud__version: 30
-nextcloud__postgres_version: 15.9
+nextcloud__version: 31
+nextcloud__postgres_version: 15.13
nextcloud__fqdn: cloud.hamburg.ccc.de
nextcloud__data_dir: /data/nextcloud
-nextcloud__admin_password: "{{ lookup('community.sops.sops', 'resources/chaosknoten/cloud/secrets.yaml', extract='[\"admin\"]') }}"
nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}"
nextcloud__use_custom_new_user_skeleton: true
nextcloud__custom_new_user_skeleton_directory: "resources/chaosknoten/cloud/nextcloud/new_user_skeleton_directory/"
-nextcloud__postgres_password: "{{ lookup('community.sops.sops', 'resources/chaosknoten/cloud/secrets.yaml', extract='[\"DB_PASSWORD\"]') }}"
nextcloud__proxy_protocol_reverse_proxy_ip: 172.31.17.140
nextcloud__certbot_acme_account_email_address: le-admin@hamburg.ccc.de
diff --git a/inventories/chaosknoten/host_vars/grafana.sops.yaml b/inventories/chaosknoten/host_vars/grafana.sops.yaml
new file mode 100644
index 0000000..aa5ccbf
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/grafana.sops.yaml
@@ -0,0 +1,242 @@
+secret__grafana_keycloak_secret: ENC[AES256_GCM,data:85OEAwuWnYW4NgObAmYey+2kGRML2iH8FuDlIZsHyOQ=,iv:Akdk7Iopx6nIOAFXqa7ROnH25vhoe4uopzEcHjWKWo8=,tag:Lgm8H9fWA+/PCjp+SHoO7g==,type:str]
+secret__grafana_gf_security_admin_password: ENC[AES256_GCM,data:Ct3YH/5FqUA+a7Z7YlpZ8aMvUM43blRG,iv:ePwTeX+7H9p0isvi6Bu0VG5egIOqTopmIiUhYoGCmR4=,tag:SLy3totIMtbED7XxmblasQ==,type:str]
+secret__prometheus_pve_exporter_pve_password: ENC[AES256_GCM,data:dJanRGfkNwZw7oaxxwpjpbV7m3Zl/MzA91Y54WrLXxHWDRHBX5Fe1soWgysN3uI5s+rtIWWfpCux/rSggFh0gQ==,iv:6gFk3IHxGkWcoeZTpS+iReBR5uMModHp2qLZp7aG4Tk=,tag:V55iwRKmS50E2lNS7lmCoA==,type:str]
+secret__alertmanager_telegram_bot_token: ENC[AES256_GCM,data:DhMeo4UHoYu17aVx2sRtQ2v2MFuwD/vHB0xsOf7QWio35ZAcwzGHab+VOzREbg==,iv:DhrCAfMoUt2Zk8imaVA8xC0UAJhXpyqNNwqP5th5ldA=,tag:BbCDqenw+yT4ADpIgZ5row==,type:str]
+secret__loki_chaos: ENC[AES256_GCM,data:km9l2LYuyvitMQOSinAyUnnF2AePE3fcW1E1k5fF,iv:gu2FB+R3/UIsa8qivpQE6AVaOug7/Q4JO3S7nhubsww=,tag:4JaG9ZHPbyzFIdzCnYN+qQ==,type:str]
+secret__loki_chaos_basic_auth: ENC[AES256_GCM,data:9HS1Jq1LqTmshFKdUDk96Y0apSC3xhSqOAWv3G1E3djDvl3QPA==,iv:oYgoIDqV3lGsHDfivgMRh7HQ0tFZhRO9OZSOuD8Yoxo=,tag:wkFgxC9EFbm/wHIHqELv0w==,type:str]
+secret__metrics_chaos: ENC[AES256_GCM,data:GDLtKMuExpedDFWLew68JMbdaxy1aEep2j4/XkOD,iv:2sbdjEp1GY6rMq0BMw3Sfjyci3Zfm7fFkU8wUFy3IDQ=,tag:yEarnC4wJvFnB8i7tJ30kQ==,type:str]
+secret__metrics_chaos_basic_auth: ENC[AES256_GCM,data:eT39ijCsheJZP3D335EIRdeVR4nSX7APw9e4iQ40NtXz8EEfGg==,iv:+OxDeTOF8PLxSFT5ZKkUwWYZfuBgv5YUJSGWsURL2kk=,tag:0nIroxvAjTG0vB/lwq09LA==,type:str]
+secret__metrics_fux: ENC[AES256_GCM,data:aV6zeZ/XsVlA3QepSfVd/cOr+tqFVhlAxRO9SHx7,iv:fxo0o9amrh5ivPTxRVkvymB3fr5dLFVE7EqIpBlNZBk=,tag:41dm29mrV/jmqj5IkuNAaw==,type:str]
+secret__metrics_fux_basic_auth: ENC[AES256_GCM,data:YL+QLzZyyObzDcz+FcefViMrvdkVSwRhDsBx/AwoDX3RLHCDjg==,iv:GADdMa7FHMM1FnyPp8DUHElpXsJeqD+gN5Slw0R9bgs=,tag:KGCoEud2JLU5s1gurrbywg==,type:str]
+secret__ntfy_token: ENC[AES256_GCM,data:0tuPJVmxHcdDWOMIo0QQXgIEkJo+p9A5emH+kc+U5tw=,iv:NZcfiz3UFw2fMcMf+q1GRp4Fsxpxbptsx9n8wPR54z0=,tag:SJYFtXccCbPrXjECiKUOUA==,type:str]
+secret__alert_manager_email_password: ENC[AES256_GCM,data:AsBzn9KJEoMjcrUWiIhR7I/1jaaFEa+cl3gImOQVKrg=,iv:mtQnZqT0taap3+z/L/nMfUvQF3JlTKIdoljmzVr1R3c=,tag:mZrCB597p8LyB61I7ZvHNA==,type:str]
+sops:
+ lastmodified: "2025-06-10T19:17:41Z"
+ mac: ENC[AES256_GCM,data:8GGZFGSRXAaLoWUowbxd3RVv7NPMVsbkDttDxC1Aeuwjy6678ddioHTiOWn04noWSPXhVnnpaTHWNW9dT5EcbLHvTl9Vb/ydKq5EnjDi3vAI2hQZ5bJ29rwSIW2YBMwpceqh+2GqDuzebhOKxJ0ZFYsPzbfTGPt8blqOQ1abVR0=,iv:aDbIiH7H72jsBRe0rSDXHMQy6zc1QFrI6ZakJj8zxZ4=,tag:+ARO2ST+1I9gOB/f9V/OjQ==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtARAAlt7WrUDnhXPecDPypDiGdIgXP8yHFq2tJmvRE75QPdBY
+ pnevwWCAaGNUVF0x6MxCGvUxvL8vVXPljBlGwYaMc4uBvEj7Gy47bRLwE9eo4goF
+ zHN9CNyOaTT3+LNC3fGNzsKBYWKk64V0KjO88On9Ax39lZVxky5U8OrAHlEYf+Vf
+ amc7onys+/V2JSCfTcYenykZ83Hd42wQ/8uUSDSqr0kUVvaAgM+hyxr3i1mUCIQN
+ mdudv7rgERfbm9Nb5skNY8x8vHSXgMB3wnWzUaPIz7SqtZdMt0WlfHFrRp4guqLj
+ 5UtjlWZZXnGvhFIuJBPMYMmcK9xioa/2h9YSgK8mlvMSVJAWW+M21E+mxkwc9c/C
+ H5v7q+VI68SovWeIJcdgU64vBIawVF2kMtVkSag7CFj7HbsgfnmiVDy42pwuC6in
+ DXu53SM1zKV7W/y4lR+VUTMTt9TzH97XBD81hgpBviZyhXCJVBKvq6sokOcspC1k
+ SrmxORl2yMuIDPc5ECTiPJMsdtzLVLJjQ58GVoXRcOsUmOvMySfwZ048suR+ndpD
+ HTGA+1jdL46YsgbydMtsMEKj/DvoXJdUKOgftRGoaHP1kc0ht8ER1SJOEHQNt5WK
+ jjw3E0ekJ8oGC/EqHanNBG5PnZJDQa4YkTf3KSuYy7fjI+Wub40U0ERR9jWG1TXU
+ aAEJAhCI2uFFR0K/Z9POfYzXAyeNjOFmpnI0NYdKljqsW0gFozfwiDB+barDw0u0
+ wEYhHD3B2tFGqziyIbsmSUUmJ7eBD3hmpwgf2Wws++UkjvXeRKMv/Ko+aw+sEhSl
+ 6Ki4i5vDajSE
+ =Qpn9
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ/9G1WJIIqCe7E/sV2hLJiuHQGL8NOJKUyS/u01rT20KZTn
+ bZEbv/e3OAR5EtYQKajOqznS45fkLDJzvBh7g7zCmYgr3Ls1RGD4HSAGTrtKMKbg
+ B9IgIxy/KlSizfjADb8eyLue7VOpf75VJ4kobvf9JFYBDQPb6nLe0V4rSnJ1FVhA
+ newwGBbY/sk7xTgMSNZlTSd3xHN5yH1GV1QTnfU5ZvfAhLdjVxINwfB+r8FiZfYQ
+ 1D8bgBh3+9a1PH9nUAq7p5fjmeA/8X962M9esuGxtyA88bHTsromxROlKACDvAYx
+ WFXXKAoG3yUJQqSgPKiZk9iZ/ofNmFdz0L0R3rxWR3BT3K23burzXCrHfSW+3Xgx
+ 1BZkWHXg2pBjMLwpTppddMe5GkLZCQLDSX8aOUmMro+fiMz90XcdLe7mQ/uYgpjU
+ AJ1LLxghf76Y2o6ht3lhHm0ooAJKatbjmcPfKQjkWyiX2pK9gCfzKV4URiiAcRyW
+ oCv5tToFMD3rfeYKZVpIvCHzJ5mA6UeSLHAblavRIKqovndrMjSrwKmUrzCDiUlL
+ +Komhw1DY8/zK1hEBi2tLdkVTdTNWtcLocw1M10zeQa6t3MmvkjGy5s08OH7X52O
+ 5NSqQjgUjNmzuZa5T19i6RD8YjWAvFJ6FJ/R/k8tOr7zZnCAmPJ4dX350a7IMw7S
+ XgFNP2H1mU3k9uiqaj6aVRyW6NQe+c626wTpYsJlFzyhRwysN38AfnvHKaO3L74z
+ i7thGm60mN4uu1TYIqSJ3vhUeJPw9/Di4edwv+CST0d+kEuowZLOFS3VP0lUAZ8=
+ =JMre
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//dS5c2vnexle6PqWn/cyHlNNmxqABijrCSZ1nVle99xf3
+ 7AILENFil3I9sV50/B2gE/E8A89vzThyIiXi+KOHG70PQ1bpN834urt1Btgp7IpE
+ PfngBNznJcNAEUwji+hmMOSGQ2f6zJ8v0OOn6L3bCFacK1SkS3LWbbJydEYeDpmd
+ s5wMJqtRGAfEdOKW8DMfpE2oK5Pxwv5FrShNu2S0ZZTzVOALkIYA7MWweKDEqFFN
+ bwTZ3xcwH9kdwOy2ps2fTjqsrzkSPlICnMKh5kk2uOZgOpWXB7bRQoVukpl5I7P7
+ HtoVwJS/YzuISBBV/+cvcIaqmksyLqbsbt6byZvWC+K/XIJKml4Lzcunw6WpaMvO
+ 6dAPDLoEyIVtWfIB48r35pEC3RMhDZk5lROgy27l9g91h5PUEoLn1UfNlEOvSsFQ
+ npTIOgLtjFwxg/sl+X7PzUbWDp1LBObJ/NIc/Fu7MEpVrpGfWC4OPuWNhIPlk7fX
+ S6CpgFloeos8UPCCXcGUcKTIbEqsHojVaAK5OrTH2Au2gWen5aGk3RYSUMcI0lYH
+ PA26hp8eXbVQphRync1rzFGZ110+xSlPVb4CxeKwo7saIT/DPQu7oLVCKo0xiWgB
+ SFP/b0wRoHRHRSbqrTkFsQAaU84yAkOl6tnL+LubhPxQ8kKZDosqEvUMMruV6kHS
+ XgF1eG0ay1gQ8u5TTKZDi4feDq7og5NwITlN86ZzfQQbVn0i04mdbHwBv2liXWxG
+ kcqTiwZwP6dTSo5MpX4ASJWvLG1AvEZIZo4yuyKDx9P1QZHVWEW4Nbva77UhuDY=
+ =KlOw
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ//f4Ud6OS0LhcHVTHfDsDxLBrSRXRceBnFSSB5G758RYy9
+ EFow1IMUnw1mcZ91vfIoL+uOI5wTGZK21ynImFKgifdAH7QppO6b+xbjVbugKL/A
+ EzSwI6lQSqrySkmGXnSQ48C6Wv159iaur1I2NTrPJ/QIjXww9E2blEQ9vFc5Xzoc
+ LuzmIodHrK6K0OOmy709s/8l9XMiG4Xx4Ova59fFFwLZn2Y8wsk+pg2xNvw80l6v
+ xRKD06eLx/L+EfMDxrf9IeLBrq3whxx2FstJbuQNPENtuid9GjwxCNNwy5uhsiLa
+ neg7JkCNZejCE5/Ck4fx//tUPC4ywlEoVNFJ2Avs1bud1bqsSxx4Wrrhnw7AViXH
+ ROhmdELmI5Z5pZ6mMjYIniAyzRLNbjlvwZMTivBD/f0nNTEw2cGquz49zOm1FCez
+ P2cfTCRAevkKHs54CTPA1O4VxJlBiiLM3Spx2tY/xuBKFFp/cSqMBYqJSGC1u9SW
+ LNb1yidciTJ4PUEmQoXbxPtnKXxPRNpUOcPHC6I+XWLZ09qfuMTKe/rPQJtSOO6R
+ YEcjEk9XYBUu1hXNfAIjMa7BSnYgGqzocV6vBRyFlY9AOmrjhaJbDwrJVdYTKsNW
+ EOcIVAjSFcLuRq/anh5hrwntT2PADNLtOZyriblgFoxQp56rb8H7HYXuehfdT6DS
+ XgHlatZVz0+G5kvo/h7wSe0t2la1ScSoyHeM94WQVenQu78L30IKavKI/athiCU4
+ UcqQwhst9WiIPEFVAaTy/Fe6JMlu3mu72jlyOOVJYKqJmPdfCIbg2bJgp6a1Voo=
+ =wFGr
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAn6zBIrBsZt7P9wpK/KZonmNrluuWN0ThJMwfv6mB1WGN
+ U+z0yPLbbwtUkiRtld4hO++e+12aqTln4C5Vv06X8ozEuoldQrRlmG2m2eWoGBNv
+ Q+PMFKzvMdDcxveKkG3PKdfdq01TgrgSf4UcHfGSKw/99pwfWv4NHl5IiyYxpIgw
+ D6ArC4K6dLCAOP02TMKKlezh9b+O+jOP1UdJXTPNHcygmUM8k16fOM5wfnqSG28X
+ hZ9hGG9lQkOAPWDaMx2nKSZMX58D9hguZ+wU4vcVHK+gpWGyWx8HFexVLGFEQoNw
+ yx0DCWIvhseiOMz11Qx1sxTpj0QIYVVlEuZmeS+dgRrMzB2wg/LbLkjBP9oC91Qt
+ w8cRAZkDz4Q6rWM78Z63F0Giie5NB1ZZmX5K7Ai7hqgV0r0shzuOs4NyJN5EG3FV
+ firBWq8iH9wdt3Tp+fwruK3TTTpj6sHGIa3XsI0WfYmdtp/pedx3ud15D+lZdKTY
+ 8GiDbWFar4r411vAaEdYc+oJaxANFLmWyg71Eyfna4O7yVeLwtt/Q3mNz1RE1ATq
+ 5cBud+Pb8eUpJegjGyIt3a2JVjlZA+7eM2V9oO1sP9tnQG3LyWDAawYhLeZY8/K5
+ u5Rgj4Hvwg0Yj3DBn3gpDcdEPZB6tacc5qAYN/nTzKo4SNbtS4H9rG205+aLrnXS
+ XgGBU91ILvCJ+RD96L6WGhfGOGG9i9g5rTgvbZ+nq0FrNnBn1PunnDWlXK23vc1V
+ UJct8WFaKX3+v6ABQVkdg4ii1deu9p7SsXEaFhyYpSg3REdjeT4KGE4VEfJlCb0=
+ =sTfm
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ/+ModidNUCVTOW4t5toGFvsgPu6Zc0MixseN4QYgzlHetN
+ j6ND8Yzy/k8hKvQC3uMVKJDywgybtF+eNXYvY4zpQ/B9/MwKBfESy+/FQEUHws7l
+ ZDLs/ZlKtIuu7O+lhvLVxy14X2rrP812FUEaJMEWh6n13mdIZvVztRYmSntUZ3uD
+ E006jpeIrx9eQSu7+LCRY2YI9oZnC6C35KMsNbzTMPOBd4NZsWoGAfj+do2pmwSJ
+ SyzH/uCdQmTPazxZJ/iZ6lXEQdwWkrpWEEdBhEUJ5zy4VeLJK3slS730CV1OBZNL
+ xmimLSS56tOyTgVzFOhT8GV6QAOyukuq36aYlGoXaF9g7CRI+SPseqPwBqN2LyRl
+ VXeNajxs6SxW6icBW148+qLNV9XiQ5BPrMLrv0xaPGWkIHhc+vz/gqj2qkiw7lJF
+ Viy/D6tRGeuyGVz7qc6d0dSVpgJHNqWE6KFPeSKL0WJ7F6LNPIGhbw0yW95QQFFQ
+ y6Uh6DzIQRZTkksSjmI0/2P8ubBP32gd9ETSxHLwFYiFPzXi8tlZ+EQaIomvpTR4
+ p+LflO1n3HHEQKxjq6DSpW/jOzOWGY4OLde4CJzrpIn+zaMvX1Fav6FyTl5/73VE
+ dw85fz0H4ClWMzS/9vFh/uKcZVMqgSCq0kpqFEru8haSfFWfmcKsrVHfS9Vn6IjS
+ XgEWSVIZnbUUwbPeOX9kvzyP7RxOZcLbc/ARqicT3ytF5UR4xDSbdDIBjnmn3+zF
+ xRArbjTc7Kj6k0CcsBooE9Orpc+89vKafepMS0Bsz3vog0bp/Gmv3yf69ySTKzQ=
+ =OiFl
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ/+PwA2BAuPrN2h1teQOqSiH1W/eosQJQv30FVsay6LRW8n
+ SNnbxUilgi9DTdbEbSzTmxJuObpFoyMZx7WG/+XRnu08EyvcNE/yUHGgMkZNzqoF
+ Ij4BwihrZc1W2xyyL5J+Va+Zla05zIiKhFC2PLwECLtxisc6mmV5vSRERt0B4Uq6
+ B9FJHcewIZSpAk9aT5aKEUeBmFsGA2ZfOLCqAxSo1Zj3iKFrPYBNgw/b6gg0wHSF
+ 07xumBvD+tWcwRHYYGih8EjxSlWxHxHV7weE7+FtIVKzXxS+zhvxx2HMDqsohNB9
+ jP8565Wi+RdDfDeoJk1sz/IP3pxNB+2EOKWOSHoZ8vnZ3eXr0p6WpUDqFNLJ7r4d
+ XMlKykESEP6JU5lYnVtsD0KfL9RhudOUQIPGhF8xSLEGWcyhNQ5ilR291fonrftV
+ kZyW5rOiFW2QEjWQLUWxGOaFLy/SzFL0msC7nK2Ot6kZ5SMFdhmjRibFMb3OH5YG
+ wpdnfXVlxJnQhiNKdUgpQ8v+xNMyNEfa5+HlG7K7jgj82gpnPfIgak52j6JJHlZV
+ BcdgFewBqZqamThCrIe1ZzRhn8z/FURnXULhhCaB4aBmoVmAZXm0x+uAESG8p58v
+ beFxcUNASBv89Veyi3mSkfMCfpPT5VipHbySYkUQJeHQdGH2CeO97p/DIhwLvjTS
+ XgGqeLOMJJObQF1SaVVv8y4dDtvqEbVx2r7LPItoG0m/FkoZUT7s87wnkKIILOgx
+ lgUE0Fc2vnsBsLzdx3ssxt2aYrDHafhsIU8DDFXLObd2ZtVR9Iq9RSl2KFSCreA=
+ =O4WF
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAhVUe0yE43V9QEQkvwinBc7eewDs2sQwkfT9hFLjda21T
+ UN1FmFTbvDiX0qiTLHyFZYTSJmduzizmBdjB1MHgsooNuCf9TeJEKkPKJNFomSEe
+ fjyDShNXuBG+4gwUwQKdbCZlkgBsbwFGRrMtM4CQ2NU37yHVrAKnvMkYJ+AILY+x
+ C6oiBbRjf3xxdefPRZxq5zAKI2jcHVw/6jgRm9+9VvfHRMfPQhpefkji1MBCQ/Gm
+ I/rssIUJO5iSQNfTE7YUJAhb9wB8iSWK5G3pchjqlCOlwPXsxM4C3gUEgNQda5tY
+ 6y42lGtPlpdUI/5jHh5jwBVYYtoWAoFlwpNMq/23ih7Q77Xi4zwdAEDMxTu67Ojv
+ pYTPeMcVtF6dMMgH7KQ9ZbQ3iufROmU+iG/l1EKhvmu09ilAcPhspQ25pSiECyFg
+ iUzVwLrD3Dqk0FhymyBCkYaUgaHlfMhwg15GrKDdtdAAyoroOZz/IRpA5yc6HBBC
+ 6tRxZ0JZDZUQQc2TPSYWHaU0Z/FNYVQ00/57MOCQ9EAPVgVp3rfJzFZVjLA7UpHj
+ XHuH9gZli6LMO6nQpWUwqWx3WWQFgJT6azzUU4UEB2ICWBqyqqFs4ybr/nE18xkE
+ WFHaI5+SPkkv5qIESENx86QngZiFwupv/FSVr9cVYCW2JnZ7bQXbELXdQqfPenXS
+ XgF0v2HC+3T5IH2k6ml+6+a6FJWpZjL52u3epr9rBxObGuwKA8mrvx/QvbHYSvie
+ Znio7gSVInFFh++x2FlZ/xxsRLxPd7kNtPd825n/+INW72S+lUOVBTgcZi7XaeY=
+ =UwJL
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ//UYudkqiiAv23EIrXiD2IQW4LqySD1rSHmhfP6rNYc1yl
+ +m5VP4VZfBvW7z9lKFPXvC6KTelCan0xDfoFWHXgcelDrC3UPN4qXA5yX/SSuI1R
+ 4VDplsaz/xUSnBV2uQJ76JhM3NbIP5kC68P0VciADgv4Bz8nYxYcuRkG7tzbsu0f
+ eiKoNZrOKI+6fs4xZK4GnpvFCri7hvishTwfByU8CGMCnWQCkAeoycdJvtz9tMoT
+ q38qKxwGqayRe3gOp+U7q0QBIJu7Br634Yd5d0P9DbJrPDpj4XvStVx5iGml/BIO
+ 4LAa6mSYBR9bbQESXmvguZV79J1b4vxM0y8+2YHkMzD0D+C+FE2UChVxUJfriKgg
+ fs1SjrXzAIUEHccEsEmq9evIk1rh1NqTpSrtnlx7daIJbjFoVDZ3+qzeJLEX/CB7
+ ESeUW5IhhkrOl05+woz2pDQL4+UeAGDHhdKGfhuAAtVXpJ9a7OYARS1GS2SppAtK
+ v37mO9e72hZVOfPYkrzxbgQRB/86ZoAxK7gR/ic0Wj6DKPsHYXiVnOv1YhOaqMel
+ 0wo7IKeWR3UespUQ0wQRBbbOcbeVC9wiFZ5aSyA//BcpESSYuIWIgKsAJsIw4fDc
+ F1aTQcrXU8aWtj4FfFKcEup4mTGUdaK9JlcCeeXoepeqG+TzxQjubzTXqjWWZ2PS
+ XgEcBlqh3iSNlSVt5SRTdNVIYTDO7Vo3Ufa1uO71edD7ZqQWpL5QkqOoOSrWJQrn
+ KKfk182jEdDEJaQiVJo280L9dYMx7Gjh5JJjB0XXzrMBcypPNqBfqX/etF94J4g=
+ =rBZg
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdA+WKLKwCjvDh8zENX+exbVY/fuOS9dp1MslD2vAgCh3ow
+ 81ri+csvT1op2zJerI6Z4GSLALCJlRX5CTYm1VSX2g/P28anMtHoO1irvSuHbAxR
+ 0l4Bk5mG70t7+z3CTWA01m9aJBRd+ipqld/H6RyXd1PENjO5Zop2VPwqmNk64dM/
+ DGYnM2nJr5j19XE3RBfd/MJ1kEL1QyEUQ5ydpUbCqKApOGmWFG0kvB26TvLLwZvV
+ =srkY
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdA4S41X4CuDYEmuQr+7YGOvGDtCGIKFyzXZvhatV4k+yQw
+ X0mrtyY4cHpxcLpkKfB3TlBNl6MeBo4sASvdKbJEneMhHr6uxWxud5RkUUK4/Jx7
+ 0lgBA/pC+apLHap5jEvwS3JMYbgt80Z0PpzABRi4vkFnIJjED2H3Koc8hAoKis1/
+ 9zBj4K6hXb3qIduxRzSWB15X/1K41PVp7brQ+WwY45I284fJiYhZ/FxD
+ =LPYd
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:15:49Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAA3GvNGrQEMdqTFkWd5aG26ScbeXv8EFAYKX2li0F3W7Ph
+ iM7kXK09JLnYprKoSSA1gIUUyQMOD2r4MAcsAYCpvp0YMM0SYSVPiXdcBQVWjukM
+ hMzRRLs2Q4lRBqYINVf6KW0q+ZvBuqXLFpiwcFq/im0ETTySCOKJaiY7qs5v+A6y
+ fHP1ZaYPBuY7cgmXL4cdJnmhT8f7T0ZeO1JbZTGNaUX/VBzJrenGXwiLYtn+Sfer
+ sS19229E19JZV24MNsILoeFSBuETEiKEAjgHSzAhKBBAygBH6n08bbUgvUytDGgq
+ 6AsndbK1NeV0COKBH9f9kS1jcMYGif09EFUqwrU4YsxRFFYoEq5QuB0TXR97xoir
+ cIpvpi7ExkwVivFS1CM8bzgWMChUzmaDR0KpQpYIUNojyfwhe5Ek0K9z8y+Sd2A7
+ KTcBeO0zeiKSHEoD6c52ZotOlJ9uqrDI1JpgENfzjRML97Hoij6XPfBAsUW0MP8I
+ nYomRWSG8/wP5dlRJwkJBJaqgXotM7oLYlvtoKR1H31c8/FAWtrbvV+qk7CHp+16
+ ckRvGYCYU7fjihj0eMsz6QWv+Klqqik0jk+EdIoUyMzsAjN89vh9VT7gj3rG4Nfw
+ kpVhRLaoStBLS2gT+bevHec61vOOQoDv8ZkstvDb7G7fqC/qhWWIChPmmpiJ/7HU
+ aAEJAhDqBnbVBbVBg/MGJb4hx+Io8NT8cQuRgZoHQQ8Ckvq5SJtpgRVQK8icAl5d
+ GOavtORsxpXjlibUfFVJWdlZ+c4L5OVe6KcO5josGsyoCg+sA8sfbiIvTCENZ9h8
+ ysiODTdEII8m
+ =+kED
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2
diff --git a/inventories/chaosknoten/host_vars/grafana.yaml b/inventories/chaosknoten/host_vars/grafana.yaml
index 00b877f..1ca6b1b 100644
--- a/inventories/chaosknoten/host_vars/grafana.yaml
+++ b/inventories/chaosknoten/host_vars/grafana.yaml
@@ -14,6 +14,14 @@ docker_compose__configuration_files:
content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/grafana/docker_compose/alertmanager_alert_templates.tmpl') }}"
- name: loki.yaml
content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/grafana/docker_compose/loki.yaml') }}"
+ - name: ntfy-alertmanager-ccchh-critical
+ content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh-critical.j2') }}"
+ - name: ntfy-alertmanager-ccchh
+ content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh.j2') }}"
+ - name: ntfy-alertmanager-fux-critical
+ content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux-critical.j2') }}"
+ - name: ntfy-alertmanager-fux
+ content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux.j2') }}"
certbot__version_spec: ""
certbot__acme_account_email_address: le-admin@hamburg.ccc.de
@@ -50,7 +58,7 @@ alloy_config: |
url = "https://metrics.hamburg.ccc.de/api/v1/write"
basic_auth {
username = "chaos"
- password = "{{ lookup('community.sops.sops', 'resources/chaosknoten/grafana/secrets.yaml', extract='['metrics_chaos"]') }}"
+ password = "{{ secret__metrics_chaos }}"
}
}
}
@@ -59,7 +67,7 @@ alloy_config: |
url = "https://loki.hamburg.ccc.de/loki/api/v1/push"
basic_auth {
username = "chaos"
- password = "{{ lookup('community.sops.sops', 'resources/chaosknoten/grafana/secrets.yaml', extract='["loki_chaos"]') }}"
+ password = "{{ secret__loki_chaos }}"
}
}
}
@@ -87,19 +95,28 @@ alloy_config: |
source_labels = ["__journal_priority_keyword"]
target_label = "level"
}
+ rule {
+ source_labels = ["__journal__hostname"]
+ target_label = "host"
+ regex = "([^:]+)"
+ replacement = "${1}.hamburg.ccc.de"
+ action = "replace"
+ }
}
loki.source.journal "read_journal" {
forward_to = [loki.write.default.receiver]
relabel_rules = loki.relabel.journal.rules
format_as_json = true
- labels = {component = "loki.source.journal", host = "grafana", org = "ccchh"}
+ labels = {component = "loki.source.journal", org = "ccchh"}
}
logging {
level = "info"
}
- prometheus.exporter.unix "local_system" { }
+ prometheus.exporter.unix "local_system" {
+ enable_collectors = ["systemd"]
+ }
prometheus.relabel "default" {
forward_to = [prometheus.remote_write.default.receiver]
@@ -108,12 +125,15 @@ alloy_config: |
replacement = "ccchh"
}
rule {
+ source_labels = ["instance"]
target_label = "host"
- replacement = "grafana"
+ regex = "([^:]+)"
+ replacement = "${1}.hamburg.ccc.de"
+ action = "replace"
}
}
prometheus.scrape "scrape_metrics" {
- targets = prometheus.exporter.unix.local_system.targets
- forward_to = [prometheus.relabel.default.receiver]
+ targets = prometheus.exporter.unix.local_system.targets
+ forward_to = [prometheus.relabel.default.receiver]
}
diff --git a/inventories/chaosknoten/host_vars/keycloak.sops.yaml b/inventories/chaosknoten/host_vars/keycloak.sops.yaml
new file mode 100644
index 0000000..ceaf610
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/keycloak.sops.yaml
@@ -0,0 +1,241 @@
+secret__keycloak_admin_password: ENC[AES256_GCM,data:U6vt0UHHgz85sO+X1YucL9CIr00LtTaeyGUFZ4bVFarsg7y6gTtb+fCuYKCgsJmNDP9jek8Ny+A5WPkMkWR/pA==,iv:qq2H9nF6/1pUBhJG8dFmfRdxk9HSaIOoTdu3uu5xJDw=,tag:rpEuf7JSQ0092R1aPOojKw==,type:str]
+secret__keycloak_db_password: ENC[AES256_GCM,data:IDmQUjQh/QB1xdkwPKqv3ZAwdfy/lkSEdAJuF5MSPCNKfuANRmN+4rH570E3/ZApAJpLAkefh3pufiVbNF8Ssw==,iv:W3roegZU2KfeBDBBImQCCa6VqX+nUk2oh6jMhzbGcVM=,tag:0Qzu8gv5ThtAss4xJ4vf4A==,type:str]
+secret__idinvite_token_secret: ENC[AES256_GCM,data:FC9LqUf6wDijaH6JIde9u1Lc4qcqi/XZwQ==,iv:fSgbI4CXMeCKWSyVYyYT+3Af+OdhZ0wsFwNpZf3CA6s=,tag:tGe+xWyBH2VJr3yc3Vh0qw==,type:str]
+secret__idinvite_client_secret: ENC[AES256_GCM,data:ImweU1aPI0G9Lf5+TXvVmZwGhoigSJoHMLCuq6MxxP0=,iv:GSGqpMVHq31U+IYtnHnu9RuMt985y2N1PRvrlWFicg4=,tag:NKuqLcb3xPzna6t2VVuIog==,type:str]
+secret__idinvite_admin_password: ENC[AES256_GCM,data:fVb+vCHzPLvsQ44wWxfAwx5vRpoycJxBLA==,iv:Co53uRh5fG4pEVxnC6uWaXRrCLGH2Celg/XC+idiWSY=,tag:AWUn99jtuJCqXww/2dSS8g==,type:str]
+secret__id_no_reply_smtp: ENC[AES256_GCM,data:Sqc/UkQq/2F78G8LP92YrA==,iv:ObEdXhzHp5aDCWq3r7aUBhOEJ1sJ6lYiYC0pmWmwML8=,tag:1rtneYPlKS+uDzFWev6A4g==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:21:10Z"
+ mac: ENC[AES256_GCM,data:EgeLza2JhJZmuNase/63KyoVwR33eFRqxHqSSaJDlr8YHQ0Vx6OTGQJTUGzgdQiC5y/AE24Mesbg1iT1+qufeOwv4V9spW3F0Ci3GOBcKrqBZxnnuHNn6tiRe3R0eeu6PLRcat/HSWY4NFz3RvUposC5YaATP78JXgDuJg/wRoM=,iv:FnxDapA+BUfSMVBrTYb9mcSYz5cZ5Qof/PZo44UTXrA=,tag:2FH63YT8Z54G/o/n8s57yA==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ//ZExC1DnzxgXCNTSGsQifh9UVf1dxM19GJAwU/EUBYGAI
+ xxJo2A/j2AJgj3vHpgtSFgtrsfuVMhDSeZadXUb3k5upwpOQfGLWhtyVT9fGejmS
+ mvlcH9EtHmourS65C+jJNRRcKX+q7tPTxZiqCNxXhkP94XPWyfKXwwxb8H3Uaq8p
+ p7xczBwWVxOqaeOZWbZPhI0ciMRXgjhc0IFxqtHN2Z/baiwsI7o4yMZKGeGH5P/M
+ l8wP7xUo0TlBVVbn9rcD0KN4IXajbHw32kSV4o89wcW6H3OvgwthZYZZuAUCGmTg
+ qL5nAxwltLfp3jo+h8J3Q6fiq+N0Ywei4/lriFUl6js6GJL+0v7VjlqFKyJgPvKj
+ bBJXqKwMQEy2kxD7J60D6V5mfC3tNaVe3HQG3tuXzOkScwoy81NOt+Pe+oi2z2Rl
+ uPYUzCdyM8to2y3vVNUltL3V4Nck4EZ0gGdRtTpxzJFW+DkyGsBp57SmmQM2WjI9
+ zqYvhOW4nSfTZm2Ys369qNOsh6Rg4kEaVgNX0RchGFKv3+53RZo1Ng+ukx+P0PgZ
+ punVqPj6/wXMPVB3xCj8vBL8Oq5Tm1QWc6EB8Lr6FyfySBmzGVL5SRoUCuQWRwbb
+ KzuKlgqG1Wn5O4SVKlT8pgONDzcLmlPnhACckQcurNCOw8rgBDQ20V4d2Lm3k7rU
+ aAEJAhAgoziTL+oP7ie7066uz/knB2gda4cHFXWKfhKJkyi+xgAdi540JHyj0BYk
+ +bKKGl/afDfHfpqZiz0/BIYwNYFqghPD+CN5dq7HeozuVBA1rxN+ozpp4lJ2WXEQ
+ gZLlyoljhzn3
+ =JCEw
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2ARAAnBMFqT23a1S3I5+Dgi7ae6iwjxlU2uNAY6BA3dLPrZp4
+ l87+4HD4ripdNcXxHiaprs7PcDb53Ew88kGSVx3KPxmbeknQvCHkzP1UUSkhOX02
+ 50fSmP+mpxIxUnKkj9iQMXV2zS4khqPKJ9H4RyzfsGhJCtyuKLqsC5of/gf4/vRP
+ ttBSui1eQshmzOVwt7jVI2k4IsEj/FKUKNkb0dpBx9RLQdtO3wUh/p4bOMEEs0SD
+ rn0RYvdf6S+VLeOisB1cBM6wq5s9WfgCV0/H9U44VthAfYPuqv8VMPLJBZtMmm5t
+ v8GWDs9NOaTzIdjEJwxSJoAWti48c/CKMglD+zsELPGaaEtN3pZ70vCQn4+RmiwF
+ u7SfZKMtiG8rlkc0tNf2Knzk8hlRi5Dd0kfETEzFD7KZMuh56Mt5P7VrO3hcw10j
+ gOjPgBePJafHk23sFAjYnmnVBfTquup0dOXs1AU9Mey7emIV0gmXDw9UuNSPiYbs
+ Vzt9LjMnstg/Ky+IugrU4xQ2ywRQZlW7pe8n/A71QTWDv01jlFnkcm/xDQaD/rmw
+ vxPbxaTiSh4hRcquxT7HjfpIBJ2gRxK7LWyaevFWuD5O3TnMyjU5hR2vWpTRkXQp
+ dV1FqLlWISu2CsnWY6iVF6x5t11ueE5QBimfj8vGFUI6xCCcIrKh3wr0hljpDYrS
+ XgEyI6k4fTqmo6JswGbdZiHsYJUooWkX2NcsiuojK/Lc6NJCkdzHGDB4szO5rYmE
+ 111jVE6kR52TYzpneE22Q/uuVOGQVTK7eVJMuG8C03gNxdSc4npc+J/yPuPF4Iw=
+ =7hZp
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJARAA01Q3T9q8MAxRt99LTHykCF67B4iZLR1b4p1Y8JPOSgV9
+ 2ScS+7jyV0MlifSITZSDptT40EQ+dCRt7/ikIRVHM4Xag+6F61DSLGJSOVYCTXxu
+ e62Xbzqpa9NkhSKu1q10NJODyB8VEJOf9ElelWIOedS7FA3iMeDOJY+GVoyhOiXK
+ TkJd2Grpbgxnp7in+Bopt8aFyMPQj6+avsNWzIHPv9CQRS7HUsE3uhF4jsdZ7Dge
+ FYI9yhWw3sCaYo4Z1mJ/ygMQ3Y3rrXAK63pHUoMFpFvge7j4hcxrIREWP3TvhwQh
+ QN/3B5/f757uTeEmTwSvOLV/+JRE+Ih0MR+TiAD/5lOL017rhPg4d5hoGkiPmYQ2
+ 98635BwRcjziCTI+Twh+4eMaOEaYOsgX2LEM1l/4a4QShSEaVhO8NmyMlBHv35iu
+ Frxux/fA9EzmFgDCTQGz8RlXe6KYTCg44lTme4pXyYaEN0LVe9BABqKtrW6YPLPa
+ KdYUcmZfaR6eQkjHnutGz8IJ0ArshnFKffK+rZ/n3Gy2JTbBTf5JVLWAnpAGoFR4
+ 6BjO+JjXTroLczReuHyBLXFRGWYoa84wghJWyE/an7k2PbSwLyxBvUdPd4xjAwHo
+ Kh5X+U0fuKdDjyhqLcLgDpKsylGKQuIAYZtqmr+kReUTERBTcbrTcxABlG54JoPS
+ XgE8LARf1GE/HeREedaNPJqmWI/3e2f6BUO9/1OdUypbFcuayWH4nM1eUefLuPu/
+ Ck2vOmqlUyJWRzn2RVVwjB/01iAcnVOTKPel7Mgv0ORiGX1cLJOaSzyoFI6v68c=
+ =tQCa
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ/9HeS1pdRPkAEXsc7fCCGBOCpYXet6k9qZcOPeRUZ1djVk
+ xfWm55U4ouX1YrDgCflBHmbTA3uDuodQa7w+uXUQC4eDfK9nh7+KYVBGy9Zt2+OB
+ nuH53IC7OrSXvCXy6dJZOGZ84NoMhOWlenzEAl29xZzmk8yp/uQDHJ3iqvhO8un4
+ hAJXfR1k8MUk+3eTlzQBr/qh5wdBEQTfhMTYKJgqdf64IHpStlipRNgeMG57fKG2
+ 2Y8P4p0nq8/O6NyUTx1MPKveHJGcL5LmQtR7v6P2jpdEjUe1Q5bgRq3CrN6Usa4Q
+ HNsCVfW+W1YOq4/Cj8XulbD/OwVqUWJx9YOJ3hCoTr7UxaPKOsBDe30i4L8iCRIk
+ iu/jHGP8A3Fk4sY+kJ0oV446u+VY/pKCseacXfymOcGmAA59IZW5WFO5pofiiq/y
+ cQdosLH4HpnTkoPt4FTCqFYDUq8yKxjM+cle9IxzaQcfscqe5LoGXxfwUwDqoaCi
+ 5IzIaRr7smRFQQUA0NWt9bQXZEW1XS6TfUuNg6yb2C5H/HqmMZfiCu5BrX17/yXH
+ 5Pf8PEiaDUbvwYqsFQx0UrcE+V8kO7fAg74H7yuF7XBBPpMn/kxaqlHiIhn36tqy
+ EDIyuEc3my1UEnisJBKUQYufZqmLqalffVbnqqYKemhS65slZo84Z+2oY+t0TRrS
+ XgHNBYaBHLRcXMqH9kWMxixPsXCvwvLUIVbD7AKkY6RcWv6niI9fRm6xz90pJVEI
+ lQSpfRtlnF6z7x2873/ARxBIRzqK6J1fwWpb1yyyj9AGg6vttvpAKwRGXjD12C4=
+ =tsnC
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAgvYSrWmPkcSj44PbP8BYUf9NNKCfVBn9NweceLvgfIzz
+ /8dVZZZ+S7k2IYEdUxx2oeBnUQ+JC7QsDuiJQ585XEBMoPkV2WTZE5TGgWUgc7r1
+ qObMzeHGjWkHtUuChkHf4gb6IbYbXNsEY9RYu6syBTrAwamnSv7Wy2/vY8GKYq/7
+ 8QujUuKiBcR3LUa8BvqTXhgTkC1S82io0IQ1+5HiFgBj5ixTMGwJJJcD/gmyYqzx
+ F5GmFl+WQzPFxCtX/Mj3+eDCpHMeNCBq8itBh/hn4olih4lqC+Ib9F1RMxZRRnMu
+ llCvPH8xOznXEZfjR5DPPGO5+Eu02B5QWPsBDca/U5WrbNlAqJWvxrRPgW94pjob
+ c7r7aY7tax3xeO6UFdJa9si5S235r2ELF/9F76TzqCcT8C74lQc4faAIJFhzkMa1
+ uwCG2Dicgl5uwMuqT1Q/7259ECx12a7SExt/Pkb8OrO71s3D7tefOAszWdQdveDN
+ 9k/X+8i9UOwt8gGTemCnDftDlaLZXvhI0jSY7bbFOnoZhur6+OlA1UdU3t2sa8Pf
+ bkjo1CO5eBtZcXnP9ryfCXiRZBbVA7TdE1kRuAfs76ESBMbi1RffysvHbVzly5uL
+ s+8LcYMUO8gVapReJpJwswS6Ge7upbsNpwzwvu/VBuzh2/m+xyt2mtT75OC8Xx3S
+ XgHCYjxruOoCEEkJ5tTTsMLx2GtEc+Exv09E0HkNM3zkEbO1uDxaEVcYq7ruPTJf
+ RXUkw/Beiwbx0Mq+n7T+i7STkaaQLC7OCv9L8CzBYcFyeFpMNZtdnfa6oIaSNA0=
+ =dYJW
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ//YLgcJ0sVMF1QLBXdi+wIqsNDMg1ua5FlOOSxCR2eKVcx
+ pNNi/gizQSWk9Dni4hhvNiAl+umQDdG4WQE+iGN97bmpnxGDCG+H2QtCkuDZ4Oy9
+ 4rZs3yzvIWr5F7TYE7kGGAQo+Yv7b14WJvSfg68Itl0ozvpdhWOMQ++9G/4C2xnL
+ VA9paqOD/u44js+XEvM7g7E+DE7qE05NY1gOPpd++VTh7dHcS8mhK//0eP/fGFMh
+ gYTBE8EeJF1YjGtMIQ2783xW3IDKTdjEIhexIn6SfLFmP/0YVoW6KXRBUWGX/BbE
+ FhkxhD1FW4l51I/bz4CrLvsASBrbvZYOvKJbFCIqbb3xYcLqP+Tnp+A82vl/W7L3
+ yRwdznphJ7iGjBygvPzQGNwX3clp8RnUbw/I/T+mWtn/GfIN6qGO6ySdgPvod3A1
+ EO5kcW5L+cfxSt/LFoNQHer9catfH6xnXwFCsVpszJz7RHa9YdbAVjBwTk9HgzF4
+ O7+PSGOzzRIoKeEV7JKmjV7xdPhjyQO67FXb8syROXQ/jxqkbmP4w5OWmQuYiXnj
+ 45YBsJGwVVKTVh6OQcCrCIBf7ZyHLn2lzFMxD03tFjpcMsB+HcwCVuwkZLJ4sDun
+ Ic/cNMEQUs1QCHSOmNG48DahIOyS3/VIvhM3US9Iug8PlquRJARw01tO332nUnXS
+ XgFtypXSBQriUxTj7+EyitQgDRyXWmZb+IpOzBAdbGS1A0IN5YlvrePKQQkqruZA
+ mJUpLCxOtGPkPI3riTXMJTPqSs3FkYkWZwrbvZxymjROA9nmr6vx3lA5mVSy/Dk=
+ =XTam
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQILA1Hthzn+T1OoAQ/4gatpLoIZ6/K8CL86U32h2BZhrmfeeeT6yvRO7rAQzcBl
+ Z/I6JQvpmDj+UignkEgZJwV7JWwW58Bq9rgBlNgUI9xjqk0/MeN8pZUR/IL5ddf/
+ LvszxNA35kA3BRdJEo5CeXXL+TWy+8PJ+KrN3f1HNJu8+UvzGp4jWuytL+PdnO7H
+ Z2aznsUWKYwNAyEPrMrwypP65EbBLGXdpJBfe088KEmj/iz+ziVFtdej6SVAJYYs
+ Z9t3r0Kw3mqH9b/zwN6AkwLJl+8fZ+2QkHBJ568IPFcWD/eEs1Z89W1b9ULxjcDK
+ siuUvLOl4CLDS3xPEotcIMLFOcPjaOtWOchKb+Oh/8S8zEoRxS3yXKDEMWE75/X2
+ b7S1z2zzxaWIJv/56aVFhvishbDrxDzPEvyupzSGuiqgOOJ4tPxYwu3bfdNmKhEx
+ SuAPRJKkd4VXtsJvUZdcSX8QRi4cRjFWs+orvOu7AMX1U+lgNK6NFuTPZjPoKQwg
+ foeTntu6mUkTHUYAv+lzrEjfP/QMYf/Eb2Wn/z1ApSBD5ZUaPwRoeHkws2uM9HcB
+ G3z3dQM2bHwg4qGbAU0AwsybKLQRh+cOPxqnUnYY9C7bTZWGGs3rgFxqCbPc5mBZ
+ r/+sjgv+CGjDydY1STULxIBiRRyVNaTwhTUCK+3uX4UTj9S5rlOCLVhfk72LJdJe
+ AV1p4O7aGGJ9emIPi1Y7yJSJnJy7ojtYcUp5zlVZMm+igElVPxPmQ7zoLTI3kWna
+ 3qhJQMJB14/mLjX9gtgvKgBieSve/SRlAb7SNHTSXrzo+MjB3R031d0w5O1PXw==
+ =Qvik
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAuyV4KPCO2QIPa3+jfEYiT5T0I0aCnSq2WALSe+AFZQbX
+ zOL2HDtYkQA6lRFycGSu8wFnMMm8yyxOQ8v5YJEd9Tf5JQosACxlEG7ksBGxUqz7
+ DEnybCQwR/YXT8ui5MR69a8sA/9eC9Ik7pFB9h2+wRMauAOrgU0bYjPMuRHF/1Je
+ cPqa35CdapUS3aFFe6qbgJlpVFTu+NygeL7Fo+y/1V2ChCUNsG0g6QqinQT2gO3b
+ +JhRy1KNpcrkv3g69DQBwOuSCPmNnhpWxEZSSJTazB8vOF8o13eCEcNYEYHMPrnC
+ iZwryhIpoBVqLirNRT8MoksWv3WzJWsqhvk/7U3f52qzFkWWhdZr4V5udRHBB+j8
+ 7eVoI1+D9Q5ATbMqzli/PCCcUjXFaQB+RV+N7p3SJQmIVWqK7NLW5NTOTnYpRXvz
+ pFNLinoSJhTRMBbkjELgWX4NRm2b81eQ6HJSxQuMvG7qlJR72t9JP2Ttabv/oSMX
+ Yz+fuVr6otKWapN6y9+arLu4YT1i8QiapFwig6ch1Y2ISvf4Iz6uilyOZL8YTsEN
+ CpAOqDIpp0lwiKth0fje6OigNWHtfdCndOOv1x35oiEA8u063KzK7bBE28PbehMV
+ gSAMMx5gY7C97wTIqaU4hUYgQm5+saljsFp73JzTJfU9FWTuAqh+VVdfjkHXaALS
+ XgGLbMfCFyuEqOfATuIiXfXc1bIVGRvRHdN+cfMwIhyrjaUijUZvBO/XUas4/DhT
+ bNOlvMNCM4TvZHFk3QEnIuGPOYX6Ms/W+jTIXv4lLlQnWckc45mcwac15k7AFWI=
+ =R2kq
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAsxrgeRxzX51ZvPYVjoTw1Ip6LrPENP44Xb4wax8b/c8c
+ DTSJYOr7Yj8Qvwut2R7z4xbyTrdWFCQ97dWAPxVjQiKxwtzoOVxT4uJwHI89uSQZ
+ mmpOdtq5PVo6LvjYyhlszsQ7XQl8zP7YefkJ7GfXV36CmD2CbyffnLPqx500Gksu
+ +YmLcVnJ/0vbfsLrfqa4ETmOlpU8dlKSG5fz9pOmC464WhDltW8sQB6duBw6etf3
+ bEIufCFzP/p1e5eZv5nTmwep47xXZk/8h5U+YZIMKKJ/3NJcEtyIMfa5iHnzHMQU
+ cY/wAvFT1VJu0f3xgnAlgvMLe8xMIYHm7PW713L2GTLru3YD2nJ8q98EK78B5PM2
+ dByFLARvZL6vizEWPm2k8J6x+UJx3Gs4FmdVZWtYmtqMwsVhwAvYEQllYnwwFVLS
+ eJlXyP72SoZoIFFZjD/V/PIWETvOoUHpWCzCBfT66ufPoNEkI4lpGu7v0yi2UFPl
+ +5qu6TwieIluLdnkeM1YGqjZFPoUTU/P9guPCqasXVLeDdoNB0E+tJXiqyChWQ/l
+ PW09CqTJxxS1jXF4pOcjJaoiJitFKoPneLnyjQs9p54FoS9NGOjyJu057R/QQowr
+ Nr2pGdiqgTl3vg1hq8ko1pdHqKtpxNtIGzP+5M1cPKqiRLkhQhJdLDjB15OS9DbS
+ XgEtDU/Y3qN0soyLqJnF5MVtmCr/NXRxWCzZuyFNgIFW4XDiciKgU6g1mYyTH/kO
+ cs1dtGL2z1NxrgZnRRB1YoEaMXKyCZczSZY8VkV69vmbiCuip7r4nUl91np0jsY=
+ =P0EX
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAkOu1KqM01C7vYBTKCFcwmEyIX0I7lhQOuCwocNfP3wow
+ qPNi+bKsixnK1uuV/zGHK0Oe/bGV3W/WsSZwuZNpdAUThGic/njUVHDayRyjFD21
+ 0l4BvZ+LQxSoKd9BqpSKdrpQfFTfL1l7lHqNZWsrU5x36hVe/4xmIFQYggyH/CCj
+ qzOi/ucaM4xs0S8thBkSgPaLHEGjWtobaa26m8llj+7uvlPGJPeKI9J6T/WI8EZr
+ =2qfo
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAzrnhbcy9q3FjpOLCZFSiSYwH5yKBWkV8ZUFioDxh5igw
+ usD996wOgGD4LFFE7oGauUlj6QQddZ9zdwHxXDjuwPiC/xcWLUhcysA/qu0GyyQY
+ 0lgB/B2nTKzcOzUAEXzeE43KkGqUIJzo+f+KlRtsKCmkZSL9DNVDZV2GmexjoZkb
+ Txlbdp3j8o+Q2DJVM/PdOiC41yORb2s7XxbBu/fpVCW43GqNEKW0e1i5
+ =X08m
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:44:35Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//dfP/4N4wP/wzuQ3kUuutDBb2pJNNXPe42ujNYGGoW11e
+ ISQN1Ba+tv8HGC0eVXjm3M3WimgfmawCZ/SzgasYWUS/nzmMoNfPdeNgk+WBwRUo
+ O0dRq1iB2wCCe/KD5dP7IkrhiwYCbF9qEbzNOu7RndgR+2p8XjZ+DOiM2ICa/emq
+ ValOkZ5kZw5VB7vrEGmsmmUrvlL1KPX/YyWuA8U+dbkh9fxkLOOq9+Xofv5VQMuY
+ qEZAjRSVZUoy2ak53d3vwuzFLMc0/xbCaedQOCKNawGc9EwAfH8RceO4LcOH3vma
+ 4loNEcEYprQdKLLVWG2eR1+svD/lfF/oQEAGNmh8A6DnyWWIdyWJzUaFEo5dfNLT
+ p/TGXrSTd1Ei7nzbdznMM3MIz3FLgOQBFecSqf42tJtcsvXkasU6lKN5HfH3eI4Z
+ w4FQRMREeycHWCWptwYBC9k87NGzEC25fQ/FpX3DLE/nMjneHLlOGA/mf656/bf0
+ 0CxwKep464GqVpf9ovLqQOb+bvlOCru/nzw67RziQWHKP1kVetpEL9cqOsp5pt9a
+ awr7XYutH4e6JhYJsi1Mgajfh+UC/jr4Fq1+FMqL+FN0Hb28ihuqrX304F8IYHiR
+ d8mkxZXm0vR1vOqV7zOexRsdrXfPcJAACwM+kIW9xalYO+Z6pXmG7Rep76z1b7fU
+ aAEJAhCjWC0yfmszNhd/uQPrqCaYpibv0wyxJkirV/Y7l3HgbBgrpl7y91Z5ipTa
+ 0pLUmF+1fHhlOAA6vC4HfH5x85nvCsOqDsJiGUdxCT9dERuXKMoCGNKRYixkxGI6
+ QoV3vti+SGZC
+ =4xP1
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/netbox.sops.yaml b/inventories/chaosknoten/host_vars/netbox.sops.yaml
new file mode 100644
index 0000000..05e5395
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/netbox.sops.yaml
@@ -0,0 +1,238 @@
+netbox__db_password: ENC[AES256_GCM,data:4k0wmOe1c5AE298Juw5HMm5dttTKB1WsVxha4MwaIILpyIbJO0CfmzjYflfBTFPPGgVeuYdCobzchzqkP+8eAQ==,iv:25Cj2BLGJK9tMDr42AqV1IzJc5zG2dk1YH5vC0b1T3M=,tag:knyB+nALZwME8y7CAQ4BCg==,type:str]
+secret__netbox_secret_key: ENC[AES256_GCM,data:zPzoFK5Sx7gJ31/Apwex9ffFU/GY+HxIfwrItCW68MM4kVvS33e+LY4cI0vbPYEUF10=,iv:SjpKxyxSAVo+p9vvE/YAQFCzAEudcZ1lwnJ6scxeQD4=,tag:oA+lBep610IfelGwdTohvw==,type:str]
+secret__netbox_social_auth_keycloak_secret: ENC[AES256_GCM,data:HP753hmQ7ssbYSQRH0zcRC0vRN5bKptvMXo9jjzcuk4=,iv:GQUoojXLAJxqdB92kKLhavDaka0Rkkg2uocBLshdvTk=,tag:LVnL/JHMsAd5UmmpnUv7og==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T13:54:30Z"
+ mac: ENC[AES256_GCM,data:/+JlBnsQuJrx3+CXlH/0dtst8PdBw7cTnUpBavcQRXFjd5PsZ54kUCosFu7Y2ngL9xh6WOWKSJCKpHFb8TCrBhslJz+8SQiH97py9m59diMwG5m/RF3I3YHBIoonSZvl8ocDTbz5myycS41fad3CMs5XtGt/vEcceSFhgqjZs9A=,iv:yL8aRIn22zmTIQ53/e71t6o2z7q1fyvmgqvpz4va39M=,tag:DH1oCBbdOgK2NdanzMSn9w==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ//bpe59yKZIbuu3vrmQQb8fE1KMD4sGbPL9SVZbZY9VXMg
+ ANWwUHDmf1m6IWiC03czF4oecnc2qGjaQSQqGER3m/zYk14KqofrYIVxS+uJvxGS
+ tMMCwSCtOdbOzKGCY9gxS/QwBoSYc1OO6iF7i/n9A0Ql2mXG7naGu68kw20WnKke
+ RMWSRzgF4TIveGYmQizKnAENLV8P2vOQsXvdwqpfWVTRBT/K48t3SuAVfsQYIc2g
+ TvUhlA124o+0t6lBjEfDQihWiN7YiGumDtZZX8XUili1xcdsl4OWrOqDRRzxzirC
+ ESJeCw9B3CRM2JfqCrDEYuLSJPpHJSzzyqor9T6BfeisC+xm0dhFIO90gGDUm8U3
+ 415350GAUy34Qk9WNPpelxZXx/fh2JB9iW+rYLOy1iQgE1i9EsYdEZXbhpbGjZ+l
+ 7W0qTm9kNFboy27NmT9EKPntWkJTQRRbeAqi5oHABUy5dZlUmW71vL2P1ent6XzA
+ 8tOI6VhfMtZ1TwAb0Xg/14qlBtOdWTdvH4lVw+YihTMtPfnoLa1zQ5apgW6oKUxo
+ QAhkcQHpu5HZsjiglQP9F6MylS9ggw7Na2GfR+3FIe5dUjHQvGHqkaBA4nrPkx3i
+ okWBFWLR4RVSSpwtIAvURxi6fcgRuonyoVKZzZ6m9WHTioHIB4Vvl0R/fU78hZnU
+ ZgEJAhBo1PHJr9dSYqgCI8qeq4sITZmFLieBhZaKoM5lPqb2AvLcC8M1AlFiK69d
+ Vr0AeQiWaYwxtMEBuQnJtO0OHv0XlgtA30EYP2cJVpzxFppxn+6LWq4uMGJNrk/Q
+ /31kOXsdng==
+ =899N
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2ARAAs55/kGd5sN9inu1n61yHG+ivPn5rsDhRV+chHlAjBnQM
+ EWdql7OlhDxMs2+wRLpQYR/d3LlGxpyocBYGptAmIXD7mas8T9BI6KynZ3cMCMWN
+ 9YNg1gkPNnmpbFUWHkv2l3xowXWfeKp83Nsod3F7FChwv4P3dIagbbW15OK6mCe/
+ XJb2n8AZF7REZeGYr0j6ZNMYdfxhvJ3WJAiLn40lfuLbQAOQ6tgB/MZyQdae+OJz
+ rE2eJhWb2G37h+H/N0vMuXLMpbqi4cw2WQz6078+eV7Z1CX1qZuRlcryKenJeoFQ
+ LZ5J+r7uy8RtHOre7kzDtRF21hey2VMQCjOngamgUl7hZCb1MDiazaW3OItVBPp7
+ wAiSBpoliyRNdnaAXjZa/Pt+wdy8ytJv2RouGQm0NoC3a7HcN1pYhxJJZH6hrNhJ
+ PIijyBEoREYO/9DUhKpHNxcD7FNw9eRB8HB/F/d3xTQw2vtgcG6sj6AxWaVyyZJo
+ 6OerhlKk6T4QFEPdjhpHXhYHH6gw5wKtoCmlX4E4zm5xx4Uerdn3VG65nSDOWlSQ
+ PPziZHn4zTG1jbx5FXwDGKtGskk82mMKF3+rJxWfmnnHA+O6wg327g8rWl5+F4sk
+ o+uEaMp/ix7Aw1lDzrx2io6MsMHpE9pCc05MZht4UGNHlhMW8G8UgRtCF9yurLTS
+ XAFwOkdtDAxpFCh5WRraCc/loHYXFzbOBdZgZYMfbpHyOYnVFiOkMcoBUTIdrVdz
+ duZFgkk/tq7iws3FzCHppSL97LhdQQYfqr8J9lMUhIm2TKilful/O1yqJ60r
+ =Zzwx
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ/+KRJ2tL+RTjzTThefMzFUwD2hPyEO5Z5QmaUqrO3cd0Pb
+ mnVs+Rf7RMX86kgXKQSTU/Wz/BXPgrDQhQvcVfVmaKU6veeMTLd+jZBTa/XMLiVm
+ azxjW3ZlKqGrRGAd9NxJfvgYIkNuBaXcAwkVNZ8P3byjAYM7VOfela8IBfnO4mH/
+ 0rIo+1kG+nzAYqWH4yh03TCwntzkt+lVQj+JEXa/yygfczG4+HWpKmpjS1pnGY8r
+ zVa0tyrJ5w6KxuOW7bc73AOze7g9KPS8HmRrhFya1pb1BuQnsxUcXZXD8+9jK+7s
+ R9NIELFzZj0PY+T5cfLX3EJrIYfMOzug5XF11MfmpzCafXd5OgBmfm/xAPbYTK/W
+ YPOEdgVu3Z8f2APtRwJrmqg4f0HLnHypaIodOkMquDLhMaP1WxhGcHmXZ4r5/CYt
+ qU2IcKcw09txzdeCqazj2npEvR5BX5B2xS+MEuicR/R0zzPCX+Brf4fuwMoBPkQG
+ lRoaj9nhY88UuFb352TxXKck31eI8kPeX6HNZnfRwSIn1JwdmKihWR+IEcsJg4EX
+ fNlggDjPP9M8u/UIUyOWtQhfuCBqnM45M4n+4yVY+1RmhlfyaXtK3wvWtRLAR2/6
+ PvaHtV4a6gybjHjwVkhoRZfUFVzHgGeEYq58uLCzgTG5QHqiETrfWtlbC7qYgsDS
+ XAHpOOMNxbpxoO6EjPwHEhZvQ1lQa/Tjse00pOpnosP8isgeHz9ut6ljmDPyUpIK
+ 415qhkIxX1wUIBXfmtOl27Y6GQg/1tIKzE0x1UhTG7X9l/nPnjSPIwFDLC9r
+ =c/cC
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ/+ObNalgUdCT3UOdYADVxNPjI7H7pCBk4QfP/Ui4/uocxi
+ FbTleBj0wOJRhiTKUD73kdkD52WgpurVh5L/Zx6esnt3RMK7KO8BJ2fqPhC49QLD
+ iohIPybxF8+aX6ZMCmmCbImqH6vNU+Q1eQzd95UM+1w5hepieJhAgO6IHqIAWU9w
+ BdVQv0K5DrEuk4HApwaegxPr4NTu2UEI+2hBORHsOfmdIQap6ls57O1Ia1invUTp
+ Qm+19HfkTafccbso688b11zFZ9NAsOcm19B5a4m9bySLdvgnVC0CTCNOAwVG0Y6q
+ O8SxdxZt6KHaIFHK/5g/tlWxuQ4zDm/5TFE0+T3Ith3Pf2ITkqKLZFcTjM97yCNP
+ 3vdlVzmQjChx3QoA8nxZVCFoL+7kgSPvGxTIUmNlwrFgUD6+yZXfkzBiQ2ME4Qar
+ 0Fy+LIOfWblTWjHmYPmar9QWn1T9LTL66LZt9/z8R03qjebTqrf8/ScyhQXBb3gZ
+ hSLAZHOtvSYyMZwyfib0rDUFiSnRtQVZZ9eSq2UY9Pi/sXwSfbmbNA0AjchR8kmx
+ 2Q8WAjyGTDk7ESyawEgmxc0HxIeL0u2KguPmTp8wLO8dNEvi1EDwoup3fqCuA11J
+ p0wWTgL4chjFzJ49FpQ7Q2a7MHK/NaMI0U8nWuI44Rlc45iJhp13wMM1i5uj/dHS
+ XAF1Xqyf7KQYvni6eUm7kUUC4XnG1peMhBe3TiHRw4TqqOxnGIiT7/yx0eaJTMQv
+ CyR8H04cWr5rf0QApm3u/k/QxxiZ0I4uydgLAtDw8pgUMzVjZS98axdxM9Zh
+ =p2PY
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVAQ//S4UuEzAJ1f4c/qGGNph73wRpXk/j8Az2tqIDhE85MFho
+ 5GZB8IYaF1Hvt1N23WzEysvZjsrF1pWG0Y8aX5YFP1TxNx/JVaBndleYE4CzQV/W
+ 577HIaGL6Z8VePGQ7TQQ0b2wvH9E6ZepSyynLWLYtXeUSbmpzhOf31eRgGKL+1gz
+ oQPHpj4INOTKOvXjwxZswkP6mpFTaZ+TkvXNjKQQnhbrXHr3q/QN0guQ/wGb1nqD
+ 29zVBbKHviY/WosLLr72bhymNMJVy2/+l0SnBN1UJbUm/hEIfct6GBvGcgu7waD5
+ uF5fRQOjmRXAlM9/uFk/D7hgl+0cSapKqugyVkMRJVdjGRxYDq5O42AlI9260jTB
+ yd++YbiPV8xNwXhrqfEntKNXsQvINLbgOLiKAC7aSjD3lyNLxbt765wP/xdArsKH
+ nYsBiPvdiKLS814thY6MZlsI3TIwZzeVNouXsK5BXWhcE79be3lhlTesu36/uH6X
+ CAy3Gjy2ARX98WDp5AHsaDk4Fx9+b3DETpBLmYsmiPy0jiccMR2Wr0lrsYSQVamh
+ cpfyS+iKiHvbmXAzTTNg1IGrEtMyAH0lS99TJrvvB6qw/N4snr8v+avhGU+RJlTX
+ PhA6dC9HGdnfv/EbiIU/Nk0kmPIXiwl76v3MaqbxG82Tz8kVAV9+bBWUoRVJFc7S
+ XAHOetFJslv5kJzbmkUyjzGMyPMhXKjzEFVUmIEe5eJzsC+olavMYmGbXhZO+XJG
+ vRBn6oN+VZdcynLTTfiJjaT/zu12D3CqkIrtioMnF1rxLY/ngoDyC4C+K2hy
+ =RIa3
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fARAAmz/ImAmuv9pkG7/KGKQ9rlults7nf1g2a2+96p5D03i6
+ DKN+Bqc4CqxCkK9RQOXLEcUAw+CfZZZQBk6YTpIIkMeR1+Sb4dLQZIdo76is6CHc
+ HSYYMeTq2nPJJrO7v8LWS0udqERi1gIQr99FtjS9V6XiDH2sqnB38t+TlXpI6m3+
+ X2epCI2OrGHOtnP1yGRHs1nOd5whHPZ6Y8JXm2WVokjudDx9dC8pgP2qd8ZS/K7F
+ 3GnEo0MZZYo9VpdrGiElnpQvLS32hk1Z13hF/XdbOohTM7Gz1d4VtrUMuzjC+hHI
+ QSmjh4IKKhLnN0gOnAvmDOmzHoWfUbgTyNsvJyTmedXXPqR3vsDhHChMaO1BjBsE
+ Q64b/Tx/W4CzUDEOKJkHG5bH3HAVo3P7150JE8YToD2toua2Pj+j5o76EHCOmWMV
+ KbtG7bUef0r45yHgUzOiVUyAI+oBIdG6RvgVqfDPDUkEZxFgBFeRdCG+4HqHyTxP
+ +mI9zwabdXjx+4MwcOF+frJoP7TmxK6mBzW2ron9Mz9HwgTHUepS5ei+fgWIkYzW
+ wCMpGIXfrX35P17OkfqhkuiEib1t+Ec/xPHR9n+Rpr1p9c3EewIdqBr516EVYENs
+ M0ryuQ+MaT2q563y+sb2ocGNruY9GbsZigTJtqdovnZtoMs50xTifvGp7Dkjw0zS
+ XAGafKX8TtXlxOqcP9sI5bMpLQjfhbTFS72fgTxfQEErO3LKxV8Z/InGxRXl9HmA
+ T9bHsArbS4EpYByG0u0ZI9iZbK1Yp1njhUYoFTfB95FXL05bY5HTArELxqqq
+ =fGbe
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ//bE4PcCxl8ZxiaJv6YcFNyq+3QDtCF4fkexVznowNDu97
+ SfLAEoNVjztvjdk199N1zbBWxNZVecV+2im4LHP46Z338m80eXLkSbp6Ig3QPXCA
+ IsfQ5hp/mXrDVSKa5j39zSk1TXM+nH1eUadSPNSvau74XMbXDW2SHhSdeoOxfo8q
+ Bts3fZ//QqSvEEhY90tcnI9ptvh5FtHh7F1m/0DQOnL2A0WIp7HxoXb2AvCIOyM5
+ 3iJwAWqlHI8Z1SsSB9+s3T6XwkLMFh457+w5mSWoGkeTo9mYEMPQpQmtZ5z08tnf
+ Xouyvg/TzCWfnI/4h8EJqYxm3qZdDtSd+cdYChnkv1xzhL0goEBWjzrqtSXOUoJ/
+ 6lvEjwaArrIDEJ5NcfDFTm1+9SwzDtn7OfL7ee3hctA3cUVWKj1jASB/ouGg6Uvb
+ 7dUkKu0rVuC4m9AhlDGSiaN1WaE2XHyxjtbVRbMg4Umrh2CYRX7ndeErnXuhFzfE
+ fLZyb/n8Pad4OF1KLnORZliRp79gXdyrBt8tWF+Xc9OD5Ca269Hgk7llh1DQCYPt
+ GlmkM75AOvYAumoRXi3eMCyT0HRHWtvOy1ljNB7H+DkWsR1dZbG+0H1q/xVVxvZf
+ uVc6R1oZMrMInrEeyf5+2gbILkU0Ms+TtXQgCv73qdioNuhTafi8acbyiyJJfXLS
+ XAHyl8IJ8fagy8iccVQUg6tPderxLaoA/NeH+lsxgbbZIxAPom8e79XRm7I40E7q
+ pCXFUuskc5kK3JaWzMc4PAPzlLs2895qBdLXyYJ/FRAzulhkKLypStFrZOp7
+ =SwE9
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAsXgEGDcmiICJUisG40O4A6ePGtxFjIRmZtdYcl0ku093
+ 8bF6zJvPOwRyQqDMeD7Qlt3/HZXjMQZC6qnpWG6KY7KUkjLoUOHIQdG/+ofz7WJe
+ Pn/M9pp9v0/Ra2sLbtpxOIObbK+tdLSR3L3hWjBs+KMoSX2IPeW5LOtBID7CEQEZ
+ ay4Y/WnbY3jUSxQ3dqDGl1TTylyvAnmIup3vkVHmU7ZgbS4x9NLGVhbus0EYZl2w
+ C40S/mFLqixu9lt8GNcu/EdsNgihrAuUkFQATz6vPZs/lSiVGdl9EM75DrWuOFcc
+ kXBvvKvi0e9IAGKb3IT6h05wLTMj2pu0489HybYyoaj6Jg/4L/3i3HZRpdALOqzA
+ h73Akzzaqm7pRMgCyxxCo8RBuxQ84wSnkK2Oi4S5MpFoUnLLqm4CpEI2FDkpNGKQ
+ zQNEQIzAHWxz7rbhjYCXtv9x5KWACflBw5/ILuFIu4wxdyDlDGMnI0raNIhtyyfV
+ rROHwgWZtKS/WJXpTer1V6O86eHgY2AsSsSaadrWC0e0PXNZEP+VbhxtR3eftK10
+ 7a/2xVwA4lF+vYZeD6v9rVqn97hZd8DBKL7mj4N6EYEE8KtFCdt5/2FWZ3USXbQQ
+ JG+eaCtVW2IZn1ZEl3HxEV5crlGFq07RVfbDU+nH+98Hfn2qP8iuPDNFLdSQa6jS
+ XAFFDdFRXehEYgT6itTnkppNQKpPApFNbN62kiIHOvlc+gemUCLsR+XeL6f3P5QP
+ qzR9B4/dwH0IyquEkwqHOeGaZQgGnyqqzaBQuAEoDGlapYa3ThBdFgvOjl3A
+ =xw+2
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAn7PuDmwZ6ii0LyFxAcsoN10eL2XoMrRr+zYsmhRfFOEO
+ vFGigdkMNg83r05MbPYOVdbIWZmWec0LVtXspHvKlXFB9XxErBYK5Mu4NMZTxIEg
+ Zf3vlXtR+A7fPg1SxrgXOjA2deAkGIUHVv/aQLAtTfJVgYtsAY4IvklEFNPLgFp+
+ DhjgkVVWsE/V/KHLMP3dUc35+ikrQD73kkIXMKvi4Ez3cGtXQQ3tONkdvCmfV/Y4
+ eXVSZPyf32XYjAl1isjx4YRgUK1C7S/MTxhhS3AFlaXtDcisRWbQzRnZZzkEo4t5
+ +/xUIl42hGdi2qRTrvnyhM0u4XXNm+lqk65CTLY7UcfYJLzAdaQbnSQcG4krDCi0
+ 8hnLmh7iflkrV0/MS44nOZDiU3I/9L6F9gy9fx+MfNZv0bDNHU0BL5NfWhTwiVIl
+ dE4Z2akYheoFvoAWpJNA3TKa5OV5Z7Zr7/N3o8KZL6QUXKv9tgDuzL+dqZE/fo+V
+ agi087xYmK51+enWcsmYW7t8UoKe2/5VsMJyGJDmuOBn/iRiHq7gVhLuyvnQtjKo
+ MeCv6bntSarPX9FfPrGnPNqgWd0ONFpFSHau69LEAmVSxhrJPEqNzVvelS2mQKx2
+ jJVqNSGc2rg5DCV4zzwf09Dlw2XAwnBFk5uRIfvYEv5XHmm7VQSfbIlyJRmeBKvS
+ XAEtrHwm24dfrh6m7DJkRPjjeNCS1FPSO3d9/rVgm/+f+7l8r9ntATNiQiHOg3Dp
+ Pq0XKumNIAvA1tfPTSqnP8ELcnGHbmnQ9r3oa1pA7t79kZbifV3TjINdIRc6
+ =q772
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAjb0VgOjbJnMpyOvRyy7ne6A22RmC73MY8VtNodSZxGgw
+ rZt89++1gokfH9gCT+0vHRT5nLa3VyEmNY6KDH68wrGF7Lo9vfFjSCziLJoRypLR
+ 0lwBoDbGqpDquVgZ49CoWEzms716kVf636RuDCm/mclqBVYqT9ueBc/1FfPgednM
+ tu08vimske+zsgxf1EWIisc36CBB5shd/W3vvcjG9+KcgNb6aA9P/vybcWxzGQ==
+ =wdPS
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAmlJByvoMsSxY6qHJKC7NfMUdf8I1zPFZ0eX4kAC812Mw
+ b2+S+R58j/XPFInJP9UHdSJsOhDVAhqQ/R7QBzf2iFRhL4M507pTJfK8FUbvhJQ9
+ 0lYB8ixT4IVILQR8FG3pCy7lMFhslLmHy6cBFcp1UomVJFmtlM1mJU9Og6jUBLhE
+ xmxtytF6/716ofjH8gOUvh/3TUe8mDOegy6SEcEm4fyqzJbH4QQJ2g==
+ =ZOn5
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:51:50Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAA3WKKOl7qNGQemym8vuu+ZqanNRcreICN+OxTVGU/j3rj
+ K0gtoqUlzy+QQ/KRmPYhfL2Oome5ld6LdN//OJ2MjuRwLhtLBXhJlrle2OvHbAm4
+ q5Io2Cc23X3x0nmuM9iT4e7oWjTbfwRDLseXG4vQuUZCJUCLLpJ3naOO4q9qz31u
+ tuG+llD6NcYwyFnE0d7vqy252TPOuK+C7DQ069VQnKF6ZBLciSRMeSZeAX8LFPKC
+ spkZGkIBEziZE+HxOI/XZy2K+nRGvkEpHNLcpHYo3cSKpuVBwRs5njJx1sJrkODq
+ OYhRFbcluRp4ugDVw/MLY/mDVCfvFQ01jTsJbOW2FweAPFvDuxATfgO7c9UgSL/U
+ fp3ff0rHBMatZb+4zlMyXxwYHeSr2DiLMCax/n9hm5Bsfb72TkkfQcy14viVeK+p
+ 79BjZS3nwGCZvBiKE/J7yxX1/QGe5EUEtMosA+dDa2g3jehiEJGSkDeoaKfyaUwR
+ I8BAl9qgIeHUcQOU+HI6AqoQvxztR5a7WYbf+qFoo+K7oxFAiMQrjTssjWxmVmzN
+ IrxYIQnYTIIjmy9u2nGAk97vn0RGE66g2X3BzFwV8JnNPBlomza9gD6Yg0K5MlXd
+ cvpse5bOA7Es6JV1Iqqayms+u2bDiz9AjcW80bYLun8eVRK3i/YqArUBQ3tQ8B3U
+ ZgEJAhD9cUaAxKVPkLABVS5134/Pa5hb5WyypqHu7Zj8iYWVziLhRdBprjLuP/al
+ Ld/os4MBUB/JLhIQz6SyqYECBPNhXyStBt9OIsP4KeUT52YqKmE/UzWv8TSrcJHS
+ 9Kytv+IMsQ==
+ =HnMS
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/netbox.yaml b/inventories/chaosknoten/host_vars/netbox.yaml
index 7fcadaf..4726885 100644
--- a/inventories/chaosknoten/host_vars/netbox.yaml
+++ b/inventories/chaosknoten/host_vars/netbox.yaml
@@ -1,5 +1,4 @@
netbox__version: "v4.1.7"
-netbox__db_password: "{{ lookup('community.sops.sops', 'resources/chaosknoten/netbox/secrets.yaml', extract='[\"DATABASE_PASSWORD\"]') }}"
netbox__config: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/netbox/netbox/configuration.py.j2') }}"
netbox__custom_pipeline_oidc_group_and_role_mapping: true
diff --git a/inventories/chaosknoten/host_vars/ntfy.sops.yaml b/inventories/chaosknoten/host_vars/ntfy.sops.yaml
new file mode 100644
index 0000000..a92f61c
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/ntfy.sops.yaml
@@ -0,0 +1,236 @@
+secret__loki_chaos: ENC[AES256_GCM,data:LWFTOyER+m021ogmXYBrcr/2fUe3XuZhs5ho0KbM,iv:808LWnSUAPeclhsIgOyR6SutTvJGOu7mrGaVayo7v8M=,tag:f2WCPyUESfMiGDQ4Km5Dyw==,type:str]
+secret__metrics_chaos: ENC[AES256_GCM,data:lAepzCI4pwkF8KiGYzGnC4dPASdHDn+LfbJTFSvt,iv:EUW+CGeYUqhY4G1kb2bbU16j9iLwABHfRCdn2vac5gY=,tag:IcyscB9lZuZgC04XTxDb5w==,type:str]
+secret__ntfy_web_push_private_key: ENC[AES256_GCM,data:YqNEYa1Ln3NFpNoIuBUN1V/WRzod5HAtYueBJYHOwyM59cCaYhQR1S9aQg==,iv:t8bEs5ZAEe6pqbbOb0mpJdfgruX1P9Jd+sbNurGqkng=,tag:Cdy5HKkvb55V6AeRt+MVHg==,type:str]
+ntfy:
+ user:
+ admin: ENC[AES256_GCM,data:kwGLrQXBiqKRoHkStGzYiC0fbcGgQHdZrrk9NyZtcZcI4nrKTGx1sxrHOMI=,iv:ACrBFMOP6rkfshOgB+a32TFWH1OKhQaoHcYgwHx+tao=,tag:2QTWmH/vAzIWAjaOHOkrXg==,type:str]
+ uwrite: ENC[AES256_GCM,data:Jijz+zCPpzSaIEo0xhicKlMhWSewJNJ9GXJGYuohq1E=,iv:gnjEX3N0txcBIkJm5bOs4JfKVsdi5URgoMAmquCMqKQ=,tag:Fip0hA52NeaMODb9XxjInQ==,type:str]
+ uread: ENC[AES256_GCM,data:ZODLyYx15c/rPzKexoLURwA=,iv:WqUrXexY/RBAseUwiLPBVYpA5zqJeYBW8mmcvPvjtyI=,tag:SjB4OaTgIaVKHDe4JjDN3Q==,type:str]
+sops:
+ lastmodified: "2025-06-12T17:19:27Z"
+ mac: ENC[AES256_GCM,data:mlJuYT16bx9nEFw9IRm/Tf1y0HF1aVzx8BXhf0VKWkrBQCyzx/qbjIBXIXl22wzMrz/KCZ/diNRx0Wdq2J2u3n92NQtziiDZKwK+t/zz68+cCZAgktmO0vYc+BJ5GoJPuSmeMwHkaJqt3zYGQNzOJAYK9DPrK2AIbo+O21FgtvM=,iv:c5AmWi89ZLR00LqG+bKnbW3WfmIYsyz0X9A5r91Rar0=,tag:x3vf2WTu7naRdwQbKfrJCA==,type:str]
+ pgp:
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/+Irbhincv0agRseJ3U03cW+YNHa4suynF5eSew3BsnY6h
+ +EevEAN2uz4JIRVSmXjBeNFPv3VtN1h5kxzmWXNHmZwFH4nNR+0w9a7zfUEa2E2W
+ 2THwlZFZIPVgxRZIA1ntr88a97Bxy+M+gJDuazOq77YvNCAWLi46Iim4MxuHGqsT
+ jTJ6uSe039gKiKQapeS8PpXPNTfs0ORq+OHkN1NWtJ/FbePZquqfPYfdG3csLJIB
+ 2O0To8jX5qKYZi9Z8Vx1EUMB2C0rT7tcteBAKs2KqYq5peWAK0JJefAuDbL0Fdb3
+ GOXnRcXKopLlLkCI8P9JZ60oW0HyyjaeuF2dvoErdqGSZEhH/RSkfYnTPoM3x03+
+ XwH6qBVFVlj3y9IRUJt9FAt634CHnFpTKGEZ7gEiNHazrIUiqF0VOEzI8zHELVdq
+ Yrx3daWBJLhMJAkv1Tgk4S0OSeK5BbJDa+UhjVgkbBjOJEvT0J0CXzaR6JVJqKNm
+ 3mGBJtc7CVBMQGX7RQZ4r6J3a1vhElMycNZCy+4hTYZ9+KCtY1wPRjleYDfgoK0E
+ 8WnsZ06phqEmmSThzB7bbCpf/5SQcxoWWUpdV22poHOEc/W0XoCy7zYXsoM2r7hP
+ JW6k/MTznJD3QnI0kOrfS44T51xkdapBUz9lFsh07nRKhi9TJJB8JXxNbCnbMhnS
+ XgF8vGN8Qulz2ljp6IM+LhoMPADm3hrQtEkJrXQxz1dpkZE4XHUk/tvgsDx8Kxco
+ z7/LzohXg/4MrvKtA8q4sl9oOMpv4B0H9pSMzdURk2vmgd96U4egiYpjXwqwBnY=
+ =3Fho
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//Rh8YA6DUIBi6mjhixAd2eNCLPlQ5w/hRj991Q9uVCaBR
+ 55JWyQQBbondn/1MEVb2PlaHH22+HPAbv4p33FD4pbimz5W0taBw3T6CmDdx1V+E
+ UmitZIRNdoirbe4ChFToUjZ31RQbS5pdxW3ATSJKn1pmR1/g5sBq5SThenm1nwvU
+ ahV71QfUrs7oqJAYHqmPIipbR1PP1QSVfyDNGUx6gIYxWS7dQPtcNkVhS1fdCl8b
+ Utg1MW/pCqQuw9nRsI+2rSEtYfYqiap5Mv31Ihznfvu/cH+uyeBeT8Xmr4/9qmvA
+ 5WXJA/0qwd3S2+l6vcxBFgyoj9yFAYorTU200OBa1HBZGjQY+V9h9I4amYrj2SRC
+ 1wgsNgFxuhUQaEDhPlD8kdSts8QY/ApYwJyHnpCW1FuzgMPY2w6CfDjr0Hv4JCtw
+ /Iuy5zbh3cNbgV8jlVn3J4v3yMtEZnsh7rEb+EbPuZmpTuZ8AIG+NqIiW/SBfELW
+ qSHN/Iv1zIl0BmcV2qAKfrsox4QIOESM/77ISrwOLQoPd01qefNsTp8PExtt+yzn
+ 9MXNv0CHmpDA6u1ruIpub969T04tHu3oekZpM327glpCf5SoKVo+fYmEwB8IhIkW
+ NcNaQIeZ1P8jSjHM6XUAUfOHzzRMy0jqQVaz9kD/kHXCMfCJT5KfvKeSaJhCy7/S
+ XgEtCHT6VloJ2X9VxL695k5ugfyTsDYYDgteKuSD68cPbj2MnYS8uKD3VQh9/I/d
+ 5OJN8fsvpkpQIltUh3DeCgRv7AF03Zdou7amrTl5MEaNBZxX5mBJrA/qOw3XAWg=
+ =mRNR
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//RXqm63AC3eWRV1cNDulWgCqZzThW1f/4o4xelGYxLQe0
+ cJuSqJmZoHsAItQ1GBIhyd/a+lcNt6Ym100RLlL6f5nPnHyk2pJNv/dPOpbs1b8b
+ +ulq2QBQEvvrzukmzXcqMGrjvJrzINB7U2L1uPBe0CTircMUR5J444LgOHC3VGnt
+ twBBgI5NQFcoZLADt8j73KEjfYzPJeaqHudhgU59h+cgPz+6N/v1fkG0vSQuzBuw
+ Tm+fk52t5X5qLWLyqrLtb4W8LdYN9D9TieRRlzjunYL8mISJikCQfpHroJkJWDjH
+ k4gaeVErauCOJWQ6Gp6aiYBtMehsHCh/8stGcnOgtyBpPh7o9FTTGcVR6j+qpijL
+ QYsjYfaH5aOU4JoUO5vq8wsBiVcOsP65CqeVFFLlvAVqZxPNzq3iBkBaWECLBfYy
+ QtIFRnRRznZQvTR0hjC0cw7vOpBGNwAcqnjPv9hQLPzdZyU2ViJjhwq/16alER9V
+ N2xFl6eKt/Mau5ZlX62lbq9eJLmR2Bqb+sL4rdMfRfl259kvGilBkCM7SMfkWnOq
+ z0do1+9FRzo8IC57WvYemzAS/pBfFH8o0Ey+PRSys03WC4YPW9XDnjSpRKEPpO8u
+ DbdhuKoVb19tAERzpZZKN2Rzuv68IpQ1vhEEP1BbsApoS0vlYIxcPSAVmSC1o7vS
+ XgE7yntjkVO+C8ciByubK1DGHZ/G5eXB/zkYQKj1w+bAmTJQ26DtHJa5/o7cXkk+
+ Ja3Qrc5Yp+W5MIV70+FHsDXNarpXSJbSPNf4nPKWsdFZGkauHks0o58T6D74LqQ=
+ =wHLh
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ/+OAK/CpxVtW9HoLP1wJR589/JMdqJZqOxkySgAlm+z6RY
+ 4knRz/0f5wdHSQyuvAYnq/M1K9BsBD34dFiqyvdTa0+G+bJUIkHDLkSTqM8IvGMb
+ 48sCbGwW4Ghmxn5mjK3MwuGbGKxVujJWqwaRmOp6lgtRJdpKReFD68vtwTHa2qhh
+ ixnABbOTyN08Bf9pJ9cgoAQaVOcSja0E+yuPRlHUvM2hjbGNndbaiTtfq1hFn5qJ
+ VoakC+u6tcKEp31Y4plN1NTRf/ywZ8oMmT4TIf3kvFGwx/XKx2miIB9cUSMw/ojU
+ GrGNXjh4vfEaT0iIRtZ+H8FfuGnjFkU6qodLEIKlVmng8MU7ETGLErHjyNEJf2JT
+ OMnaajJxq8jXaY2SDoHsKETMgON1uwDDKW6NOBhaK+fW79W6z27uGnsN055vMTpV
+ kh1YJixyI3wIkr6bbfNHBdr6C8Tb4sY20zghvkQYBA2xCZSLOT0a5lX7GBTUp0uY
+ +hgxdfyQJi0P+4QPam28/b18lOZ25LC69YX8AtczQ4vHhIM+jQ+bzoNSoMpwcSm4
+ vZSSmMB0tX8W5O6yo6A/XLoktzyuzvMfZ2v3/6LbIWK0FKJzy5G9A9/xwnbCRulB
+ BJf+xzfwWt92pW7n3yVgjO+o48J1c2b71qAaMtukhPLNFSozgHlqv4vy5BD72pnS
+ XgGNEavqMxIRuRQtyDeeV0W5gdGCY/XUAjYxh4Ly51XJVCL1yZptYiFaWMuYEB3F
+ G3unTkE+YedYk2g/Wt4pR9lcgRLW4zRlOCtzwiE6JbAkp5NsQ6Tn/Q0UD1sTRsw=
+ =Y1YG
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAxtzsDYAMwB8WAUx0U3RnEkBHEeyMqNvLCgzz0oU73B0v
+ eUWzHUYrTYMyYxRMKO8vqKULBPhYOKbns0hzL8s6YjCnT08XwNXtYiuKm90FVQcz
+ 4ARslyObb+0ayyfx9dd9+6aFCgyftgAZpctWCEWPhBLUIsKcsd/q+Q5hSNfhwp+1
+ IAfruNkBaCFD95A3apfsVd3E/clzXBXcNa9d2k7Te3LCduhD5Su9QUgqDvf5Je8o
+ WS1+Q8gih/+xTNR0avBfAZuSq24cqKyPg49KNRvfWq7drEZYYfUOdIMOJVZiBuRJ
+ y4HjNGgX+NIl/BDu4SpFQVFhDmv+kgIM0JxXF6p3Ap4hZAYicWRnn0StVJ5kaB6O
+ 7l58NTu9aX7eLR4W2NuYLTwmssnA/hJd8i42YSYYD05siQIKICxkaLSTVztqf1vS
+ N4RNNZNle6gkBvceRkb+8FgzPmLL8BFPkUiAFJOr5BDShbXwN/UocBgVKIRsuQah
+ mIJ5uu++9oy5jaR/eeff5QcRxtpCasi/86qW9igCSOqKuHWOMz0RWJCRaJmhWY/m
+ 5gvz0nNCqbnPOXwvbNiuAmFmhmhYs8AvEvqMPJR3DHUSy5U1Bqpx+Oeu4qK16alr
+ HxjnyyEoGLkTSfk22vN7wQZD+loQJlL9U8swQmZD+Y3pyPInCYrZotOwMBo6XazS
+ XgFRaZJlP0gC3tN83H0b1oC0eXBMagmEVkyhxMBwXCrGxl9BrcF7KGxP5GU7uqGm
+ nV0GU1UIJZAS2qrdf456Ou01E/5QbpTHac25/W7ZlPOhibqWbT9wV+ICYZfSMU0=
+ =07bf
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ/5AcTObI2/IVj3lxv7G+p65eqtuexRmMCn/dsLOR3MBLkB
+ Pw6JFRUIsRAgDlpD0YI7CrqB3pisej5LemUmvB9vK9H+6IALSB5eKEMd/6MXiqlV
+ HDUw/pmZUP+X16GAsXDwvMNT1RQQuEnigTzaIo8ydDWdsgAMOs7JZ7KcF/k62x1k
+ UCqCnEZhxyKopNOtbLuVhpW8R1DnRIenm8v3tB85neVTXPBRcG8fJ5y3zqRwpIPX
+ pXUT2QI1fD6P+djMNJPFPcQdf1zz1xj02OuQQnKX68qh/VW4QJSF5e0firXSZ37n
+ dpsfQ7ROU6PfnvcXFZTPoR6b8oUgo7TxwOy4ERPqXbuM1UZm5zr0hj42IYQz1AZm
+ LlcB/AIs2MJDXgv7B2aLryZQGipBMmsASNbqyTVU+cA7f0km3hyta83RZsOw6MsX
+ wQjTQhx/lnCx3/dOJevEwBE6YgybKJAVIqscNAagAFuCtlbq5RjVYKRA3nRBGgjK
+ hDFQ0yWWl2UHYC4aIl05SIsoL2KVXEzIT1qayy4sGR/L3YmUx1OcZLiBZOvCRBYw
+ v/DX/Poz7C9g2jEPC9SV7IHXF7J1SI6aTOWcxrqpXVY45vbIW2qLQC/uJz3GTOaR
+ Om361FwXnJAYeCjOxIZXSlBy6JLEgBSjA+F9dDtwuTz3Bay1IhdNJ3Z55zzVI5rS
+ XgGJHreDweUIhIhoGBMiEuKb+d6UCQ9F6oiBulvO3zYTpqJNM2U10xllF5MEztWe
+ 96Bai8OAPTkIR5UT2cpjodlye7+SvAabxvnUDdUqoL6+2jMtECUD5/VRzLEkrfU=
+ =w6pZ
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ/+Mj7CiCY2fpytnZIrwXUaSSTvEl4TkuJrgN10NXdhEiuB
+ MsIubs9q/dGvG+GLBTNIuRJzzQespRC0z7t38ylGNMvaLODUGpy7XvfDF6aiSzCG
+ hrGcWGPwWue2HnoyPBy4ObaZq+aB7FrGrNgxVS5p5sd7ovj/UKDu75G3DNXuQ9C6
+ AYgzETIGU6wtnJvp0EhqHQTaJ88dus+kiGpLVhMxDfGPhCAwOQ/2SYwI8R/uJTEh
+ qTCkNOYms5vV+DVGXCO1kfgqeQjgRj5vnMq0+2m3Twvfrj+EVNnRh2jrJbYypqRA
+ 6rtRGUFQFrr7b0rugaB+H3FIRffjrFy56rnW6iMwwcvbsEpAx3K56hm347d+vH+8
+ AcuaD955skQ8WnopbBYzLHmajRZZgK74JwY4bmEILeg1s0+gZy7xTRWsYQQZfvTR
+ 45Cq4wVR88QDNG23vVscABZIeV9WocSiCGlayo+LN+dOZdGpkhjnq76Qw/jfzd9A
+ h5UvMVsnHcvJMw1zo73cbdHlI6IS5oCuTLsVy/w62Ts6oTD2KsQSMyZ1E8QYQts5
+ ugZ7T1mRcHaB5LE8+hSIRi4Ck01gZUtApAdIXGwu76bSgspGfvINqOmuWpOd8+K4
+ uqXW0Wu5yEfYE+ypAmUY6sxfilXOV89PmJcIv56imZNEEnr9aK+u7rjqfX+41izS
+ XgHJhO78PVLoawWZ5x4tSw/Tjd3qabdr5dx4bQriUW1ghRJEt+X/2uDvYyMEQaxH
+ mM2c4FHpM/IyG3Td89JpHcbwVxktAm0fwjVswdILyyIz4bzht8+QsJHN+msL9OQ=
+ =xDlD
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ//XakvJ2IaEP1Ynaw0qYQYOEyIiQp8SJk9KReYHDpDNuqP
+ emdLwZDZSVP/QqpnPC0diJkZaTM7yaSYxRmiXTnFd0r8bEYLCL1A6GBFXIFlh+8M
+ PgOff8TRbUrLmgEtyrkv1PMjf8rX0A4iSPiuNFFL3ew7m/MBkITiPYq+8YcE8yTz
+ vgtNyuYfi59TbKai2fcas4IX3bF0HeGrhAkys0aa2iFlH/lJj4yd7NqTAsOsDbO4
+ 1eplhf+IM8Rv0WND3UZCBNk29Em7S4yllFJpH4E9xS9noWqTEyMQ1qXeoq04BSry
+ dQ0evD1d7+gLacmV5+HQo5p80OhMSgYqrClGUJBO6eNsfE/hSc24MDjAB3rs6xFb
+ wGvzMWekWqosN0eXmU8Iy38bFeT8CWbAvCA9BJomwfDMbgE6MOjNo4PURZYQ0EMf
+ oMSRcTku3vTVidOumQS2a9qanNQW1dLTVigQvHnByNTRjPxneo3IZFIvqBqYdt1e
+ UbEDbjlDBQzqLt1vPEHSoX7FlMT49HZUY49yLwp/VMUGrDscApdLYqLRp9gbgf1Q
+ gHkh60sGLUQgUQZ65L1BRJgIm3NFhkJAtONQnJq2iY5f/1ZPHlAQVqrBN9a7Hp01
+ efrdHCvNMDvoIZXTpC+y7cnvnmN4fGXaXA3Z1dJsmai36Ak83hgtMhC7s75FMtXS
+ XgGlZQUDAnkpily0mS/ZQ4IMLW2yzcBH1BkHsuHEmFWij344+6f1TlrhObMuFD+V
+ 2E+A3Uux4SSl2RbpIfEcvZptVeVB17wutOuHrVXrn1sOm2+cT/k+Ousrrfrm4v0=
+ =j38o
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ/9EYMqHVt60BlFDSZXR+J0/hfnxutbvta0CPkAUslJIQS5
+ XiPcUeptVEmyLUz66bw17m1R4j4miDW8o+3JVQH3oU4YYQPUFHcY/kkSVU8yuWp5
+ e8KkSkVTOcUaAyiPNTY7YswOjWcHKs3B81eSJBAKGiS2y2SakK78fZMan5x6vUJd
+ s4O57hxZPrRXrps08zEiTC+uI8/Wl+5VvoSfllOAqwaohJpEOzt2A74aBz3cit9T
+ yBwHb8nhaZ17RYZ8DJtGyeekMlgM7vj6IGWUbxb38C+kJlY/15MDIKKWEApZ2/m2
+ VXwUR0aJcqD/oLFOnQO/fKTQM6QGnrgAQFF8Z6X2pZqIU9W6vxNHTGEzt6cn3igS
+ 0Wvp0hRQEkfyYx94xPGm36/GM4Zqhz+W2YRo+z121/OO5PWBtMxLUT39/PKBDROw
+ BU/QLPl+l2nnLg80KQqcUw60HUXZIpR1p6KEQrmK7+jrDPIx45S1NI1RmNiMEv6y
+ h35boU1/0YymYKkt6nFyz/GvqD4qviCLimz6/21a606TaIx8LqZaLmZ3YdXk7yqD
+ XcHweJ1EBbhHkLYYCZsG4tNfJj9hBgVimOjjiCnr0lkzxKAPGdVghmPdwFLlYXIO
+ V+tAi9KKPK6SRdVBuCpzHZyg6JLiFGmUsmL/piSY5hXrvv8p4oQp/TI4S4Yblv7S
+ XgHt0Xy2jfYFUPedR0BMta5TqvaNjDh1qxAZepzbWRwiDjHiQ4gsAvjytUmiceIf
+ KJDhKQqUuaNYt7cBsNF9PgtSkD/ZuF4oTRFVqM6tr/JroxjSrGjg39T6lNtGo8o=
+ =v83W
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdASHcTIysPla95JELBmv3+guJ1Ehx4VGq/zp8NFcU/nG8w
+ +o04dzI96ZV58cNGG0GZOpoq83q0XbspKpnzMnJyNtlbsMpVXhVZgrneUYY4EwnB
+ 0l4BNnrT5pIFX8+6dP7EytxWU2s1UTppVYgwELpWnWItZk+W0EgiK5f3V+x28nh6
+ psaXJSFsGOJaBJsitMv/GDyyOu7y+PKSKooY12GujdK4cgu5SZbzeq3iYcKAyQ8a
+ =TEyd
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdA/Y9Zxvac8WQmVo0KgX7LTs9c8GgtxOEMMUJ8QxP7RREw
+ NHIIMCpoidBtkB0RrLvObu23W4HO8/j4zrKV3dBmi3Z/6cdxbLMp3Kl6OK68UcCS
+ 0lgBLF455STDbzpSuZA7fMgeexxpB6rctYJt1EbVZ4Gq5CMdXEilccr+wsAqA19N
+ NFrV1QL5nlk9/qxU6X4DUaLcJP3/MAUga3ODsBq/5goVMjyQddDpprQZ
+ =p6Oh
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-06-01T21:41:02Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//YkQT0gnE4CS9iPm7kB9H6zQ6655S3vspQ/ftbVkjDgbG
+ XUlCIZOqBWcY2M+JDCSHknUsj44F8Y3COlC8c2nSKO9sFDheaDPiSMqtJxXjbuee
+ gdpbvc9pjsnIdWP2HDgOTsAtX+/qjh4OACWVjqaJI6H+mDA2EaOpt/cp00G41v7e
+ XwTbvGgeW0nwxwPSS1UzHr5oVjwBlKdZXVqjuZT3tzi+YzqbSfQ1uWwWpS8flVDL
+ yCPTaD9OpYPq16ztNJoviF6+6eyTwQVfmJHq/3DlZrmhIIcd0wsx6HOt2g4RjW4d
+ T1mAuHkGkAbxcEU5TiHzIBMCAEHEH2s4TCs7VtdG2pdjm/Fq7oz2aIsVdwI7dg/k
+ wbOGoWDvbY8YqiWD1o6RDyhDySCkuewwsi58UTDFTC7V7CJWnTapMLcqenoNOzUJ
+ E+aM/kH8zHdTXpqpOeYwtKWX4FqE6UHYJkWhI7F4KzhyQ57N+98PRoPEfXoukjjb
+ JsBWBuJg0pwNrz7aRurCMvYpW29AXuL8WbceUxwZgB0P6ztGKdnU8NLhOZj2DkE/
+ OLz28t9HtpbAfOZ1cxMrNp0log0hJFXD7g4cRX2F/zWuVKuWn0vUvhQot2GuAuw8
+ DRG0DJGSQEHhyNjtNuLufGR6FETeC2CNnpeXxXZhqik1kXwSB/AompaKZbjJGb3S
+ XgHkuxjOS/a9iREdy+vW/evtGnh1uMUa5/phMU3VGKiCp5ozfuwaQ5gvVMrE80b9
+ loGh0l/S66CyIOO1eXBlqkH5FxsMcvVAHB1u8uEZ3T9Y9yh0ontnc3LDWUpPxls=
+ =2DaK
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2
diff --git a/inventories/chaosknoten/host_vars/ntfy.yaml b/inventories/chaosknoten/host_vars/ntfy.yaml
new file mode 100644
index 0000000..cab4e76
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/ntfy.yaml
@@ -0,0 +1,104 @@
+docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2') }}"
+docker_compose__configuration_files:
+ - name: server.yml
+ content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/ntfy/docker_compose/server.yaml.j2') }}"
+
+certbot__version_spec: ""
+certbot__acme_account_email_address: le-admin@hamburg.ccc.de
+certbot__certificate_domains:
+ - "ntfy.hamburg.ccc.de"
+certbot__new_cert_commands:
+ - "systemctl reload nginx.service"
+
+nginx__version_spec: ""
+nginx__configurations:
+ - name: ntfy.hamburg.ccc.de
+ content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/ntfy/nginx/ntfy.hamburg.ccc.de.conf') }}"
+
+alloy_config: |
+ prometheus.remote_write "default" {
+ endpoint {
+ url = "https://metrics.hamburg.ccc.de/api/v1/write"
+ basic_auth {
+ username = "chaos"
+ password = "{{ secret__metrics_chaos }}"
+ }
+ }
+ }
+ loki.write "default" {
+ endpoint {
+ url = "https://loki.hamburg.ccc.de/loki/api/v1/push"
+ basic_auth {
+ username = "chaos"
+ password = "{{ secret__loki_chaos }}"
+ }
+ }
+ }
+
+ loki.relabel "journal" {
+ forward_to = []
+
+ rule {
+ source_labels = ["__journal__systemd_unit"]
+ target_label = "systemd_unit"
+ }
+ rule {
+ source_labels = ["__journal__hostname"]
+ target_label = "instance"
+ }
+ rule {
+ source_labels = ["__journal__transport"]
+ target_label = "systemd_transport"
+ }
+ rule {
+ source_labels = ["__journal_syslog_identifier"]
+ target_label = "syslog_identifier"
+ }
+ rule {
+ source_labels = ["__journal_priority_keyword"]
+ target_label = "level"
+ }
+ rule {
+ source_labels = ["__journal__hostname"]
+ target_label = "host"
+ regex = "([^:]+)"
+ replacement = "${1}.hamburg.ccc.de"
+ action = "replace"
+ }
+ }
+
+ loki.source.journal "read_journal" {
+ forward_to = [loki.write.default.receiver]
+ relabel_rules = loki.relabel.journal.rules
+ format_as_json = true
+ labels = {component = "loki.source.journal", org = "ccchh"}
+ }
+
+ prometheus.exporter.unix "local_system" {
+ enable_collectors = ["systemd"]
+ }
+
+ prometheus.relabel "default" {
+ forward_to = [prometheus.remote_write.default.receiver]
+ rule {
+ target_label = "org"
+ replacement = "ccchh"
+ }
+ rule {
+ source_labels = ["instance"]
+ target_label = "host"
+ regex = "([^:]+)"
+ replacement = "${1}.hamburg.ccc.de"
+ action = "replace"
+ }
+ }
+
+ prometheus.scrape "unix_metrics" {
+ targets = prometheus.exporter.unix.local_system.targets
+ forward_to = [prometheus.relabel.default.receiver]
+ }
+
+ prometheus.scrape "ntfy_metrics" {
+ targets = [{"__address__" = "localhost:9586", job = "ntfy", instance = "ntfy", __scrape_interval__ = "120s"}]
+ forward_to = [prometheus.relabel.default.receiver]
+ }
diff --git a/inventories/chaosknoten/host_vars/onlyoffice.sops.yaml b/inventories/chaosknoten/host_vars/onlyoffice.sops.yaml
new file mode 100644
index 0000000..15d5c9b
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/onlyoffice.sops.yaml
@@ -0,0 +1,236 @@
+secret__onlyoffice_jwt_secret: ENC[AES256_GCM,data:x9eRTm9WrEFGdxDb8JfqLYu97NSBRvhknkEBx/zSEQlSfcah+CVNNM6JcS0Y6d9PARcGv2jGUyakuNN1wYmzYw==,iv:33lWNSnQkljr8S9uj+Eab/fItyKAH4/xAeckdpvzl1k=,tag:Ejxzaz9nkGLT/mqKF35M1w==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T13:57:24Z"
+ mac: ENC[AES256_GCM,data:Av9x7PAOBhUoCOCF4al8/4BnpPHmUb1JvCv+PKrBmjPBVxW/sU0w6oYmUNjB4OKxI4615pWpfCsG+kVSEysbXtrRGp2RGqhnSKxS5l21W6Qy+IEkNA/jcA/teUGEOy5Qj1SvgNtWvXEBJgfm9eCQxC+w34JbzoTs2q+6nSxtwmM=,iv:HD3nBwmnOGP6MZdLiYv0hlNcvK5lSxJNaoIkr3Xadkg=,tag:uL01xCeeIbWhsdpyqmUyFg==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtARAAi4ev6LCZmy3XTiub9f40XANKkX1SsM+b+GA7CFRRCzR3
+ eCQ0H/nbgInO3Zk/K2DQcLAF3xfpdZZGp5vPpIj4B+R1m4B1bMRlen7By+ebCBUe
+ 1iM0hBnIK8rFejGCUZsJOSjF3tknQpFyneYj4dyebyItceqENWekZs1ZB9xHuNtr
+ omH1BwjFVEVDo0bU4y1Wqa0M7ol7qCV2qLHcy8ByDkYwnRs3rbhH5dfc6Dpz0F9X
+ SxbuwPmTVR1iHh3YDJbHwWWdLdjZmnokb/q6hBLWLn4QB2p50GxlcIv1Qa3zKJk3
+ gE3y0PLQQIDqnrcBmpPm0RC8LCcZjpUO83O1eGpHyvLyUYtlKOCE46OFYt3Cf6D3
+ ewTc1Ot3jL65XZnsqXEI/HU6ld4SYGX4eREXu7CCFmCa8D717H9cAsYsnEvKXmXE
+ 6Y39ujJaQNrSm2iA6xstXTxG+RxS37u3grSFOdnr9u2iQ/gfYuTVnuongQqHmquQ
+ ITvGaJsmZSfzSnqxl8PMdfcrrsfJQkRWz2wSW7Al587FJibMUvj6tUHFTnBxYiyU
+ 6qlcedYsplemTt/eaKaEr17ILRhFCeNjuNy8iyc/pt4R9Ydvmt0f/xvLlgZ2Cfkj
+ elqoX5TggQIVC/g3LXg4P67g1fIfO++RKIwchH5T/nmes301SFpRUGcln1LgMwXU
+ aAEJAhBsH/RcBipGLrtr4sa6yDgFn2a4LvMVyHyy2is0pLGCbj9wnH9G6lbVGY1p
+ FYk5CC8xyuhjqvOnWoR4Z53iGfOdSItj1MCF+xHJbPt6MYGv07EpXQ9UCcTDgJ6l
+ +ZWXseBs2gSW
+ =TVj8
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ/+KdQllhSGq9hkUnPisBVCoFuKALbN1GsGGWq4S1Ru5BYZ
+ tRCRPgkdWkmV/whrixcG+8vCAeITXXFdoE+Wb7T0CgIIvb6OmTgroOuCOWVfoA2A
+ VkjME8bVu0HINOnJrP1uF442u23DfEoc5wHSeVpyyoOg4hU+xaLH6ZtBRDOj2dgE
+ 8VnHQsuJEoT2bHgUctTlRds1MhzYS5Qfc/avYqVS7gDG4kQ7Ru9eF/Gm1KTopfAw
+ S+Mc3xgH5TmUP+iRY3mEAHiNKNrVgS9+67S1x5XkTl4XeHJ2vjFQthZpGivHy7NU
+ +FZje2jq8IKLLZ8+Dk7xgDGFmXCrZV/o6HTZdyeSA+OzHLRo3eGz+YWaxmoLzQ9W
+ QXXhCYFhTw45SM6r+OfNSpt3LD9ttLU0LYex2BwpAugYHCJy3nGtEv0na311wQN7
+ 82yxLQMFWwhT/oo3X6VO/rkG/ssy4UAo1RLoz9MHvuRS+r9vwOPXKSEi/yiCdZEm
+ tsZZqMNIuLu2X1DsfOpoDYqJC7Ig19Kv86j4kzINQkiVSrm7nA1+KEtcVLTW75//
+ IdPpxCKxE89lgZ7U+cpqmyH/zLqxD+27e7Etr1R9AxeSjfhnHeLIl/iL/i1rE9e/
+ BJfRVWDJYWtX4rTsACFja8FVo30F65o3gAXGk70eFOSsem2l5LQSE7N9/Z/MgMXS
+ XgHX9Pjh6kqXhdE0vpJHZtM1HlZaoeiuk07BaavRQrIMlT/FktYd/pUzFciLeE6V
+ G4hurfbPVAs/swBqlvfB6fyos6patbdMcgqlUv8b+eR5waUda5xOd8f5bjAPk3M=
+ =tdfb
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ/7BadsqdHPiQ+uk8uZoFro9dkwAUX39SPbBR7scJYI+gaR
+ 9xu6tZxG42+xDD90KePGMVhpeCI3J/1wjU/8pndCdcu9ak9c2yQkIlARx1UeeRkR
+ WQhhGTbbDojbsFQXkkbPrQpoZgv9hMFwsApu1EduTVqs1+IY5q4aYwM1BkMCtkAA
+ 0c6iUoqB7XAJPUy1hUmlzf5l3w/UOceRaskyQKtMujzfiRJ7uzPyrvUGU+ee13WV
+ 0bueMMYSXvq59OG5UtnN+weFM+U7kiLhfEJGvtKZv5jNgJRF50HYoFKZvMVplAQK
+ 0DFaAMxOZ3tHObNOHrqW+kCrB4MJzbfVTguYE7y774D6KiuAsv9M7iZMBmrbfh1e
+ OA5AyU5gmTLmv9Oh3MdGlQeRZnUHAP7Zq94xKdpz2+8tP01xpzS3ZeEd9hsVFe2A
+ Xy6vvrBLececfl3Rv8aXyTp8uwcF/GwjwUgKOeaA2Cm/yOPJwTHuh3veZS8LRp0E
+ l7Pl5Pa2LsmUWRzpijr0HZfkKKLRb3Ls1BZaY3bKVpPTEFSLes5ntpFgodkwfpbw
+ eGpgb1+7pl29JG8zUv0YOSFXegEcxFfc3W8p5vU8/Ye3cVioh6LDVLwDxN5+0Fx8
+ lO4eIgenfFLkZkuvhMZIze4B2dpTuYa8mD5BK6VZW2HySHz1T1bYQt+IsEIwuyrS
+ XgESEz3S8yji3+xXEnIGxcDCp6YwC0oFOEKQ4QbLAwj7FdY/u30S8EvXWuifL3R1
+ 0tULYwYtfFcHYQ8ZyWvM7pWaGoCmOiMcsFRVMntpV3KC3DBuzjgH46/Fv6j7fF4=
+ =7p5H
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ//eDzl6gHIvhFIr2hUz9q79t9Gl0pyWPlE5FnQ6devf8Rm
+ HierL2+FAJDmNLbGz0lleQaBTsbnP5tadmZXIdSBpfq2Sb/25ojOudyQK0WIYzkP
+ ZnGy4cmDWQoht8yU67uYyzTZBMhkknvZt/OyBUoQ0vEwpmXMdrPNYJ2LirQ9PduO
+ xkP3DeorxWdp7ZX2Bq2zbgnZmNqpVfF57K9XeegthkmXCk0al0KojzOdQ1BmwsNy
+ D028Bir0DsgxoRnibgBguxKBVDgsDSrF811Nzq+2qpi4A6rMKCaPBs9KWwud8oCK
+ vr1Pa6BjRdNbzd68AmEWx6jIYdcXBc7UBk4TWqg+stBBEHsaiqpUBEkfO/sC/Zyi
+ wicgBy2K0y/OLGm5AfwSz6ZPHs4bp7S81l8Qcc7I1h3uAKHNPMsE+2EQFr+I17Yx
+ 4UKpY4Ukh5GKrACcbo3oPPNZ+Cj5ezK4vwuvMiMnC4kUXXYGv152FMXjAZKqkKaM
+ aCDW8kFHQT9w8SJvVHPkQlB9BcNUACm3uxMOiRylyx9mnRS3ArKb7VNtYUs8iSRG
+ /f1Pm8+GqFxeL0RVEBxJ0HN5ttpmFhVupsW0yZou1ZFRCi6smQkDEEIqOGF1ezOD
+ Qeit0CEXA7zWa6oq0qGZQ614EleuUCu4ZfMu3N5Pe3RBsvfCAGIMMrOvPdqpvg/S
+ XgHIP3i9X1RJrZof2fAXREOMpS3dl6ZgjE7mjDg+yGcj5kP97I7ZaIf70l9gdvds
+ ND1LI64M84cEzedw1NSXo99PwECql3J8A9V7zhkEUg/cH5RL+FAbIWxNTCWpKO0=
+ =tAke
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAmE44WT8+FIbF6fZxo/2GFw1S7j2SqMzFe25qz/Ad68Ow
+ XDEr4P3rsYlQkHNP8UDjX3vKuN04NiYoQ2HkNHtpsXNwIpdji04SAQOTluiC10pk
+ gaIZ9I0SYYP2nbhLNdIfBQ1lJ8bfhPvBpZpx6ZSreBUT6Gwwr+jDi+uYDdKTwajK
+ XbZvATXu7IY63GbVScgFcyzA5fPUFcmk9g3DTxzzAsWsCG+rnaU5ZM1BTg2xk5CF
+ txd48+GRNV2ATGYm7ZQaTXJCSGy+PFZY+RWqwSdEQ2z8Y5dlh2Q1CYctc9l/MPhE
+ NlTfaIve2Is59oLFI1yX+6qwOAKY94IARTMqLVtt6pyd5Aj8NOKY+OiOMhdOHvMZ
+ bQEIzn2yU8k5m4l6hO5xnuGS1aoCVAhznKvEnd0NVQEHS+Jh3EttyhjBbJ+4xwFz
+ IVxPu6H0x6k6v4gUJsw6F+wGO/7ArrcFE/2l7yZZCQCk1NJJSWWVyb+AnGNY1oFv
+ rXB2OGEW5kNtnfywKPzuPKWZR54mMWjBvELTpNmXSfCwnQQqrw2sVfPvcSPHugyu
+ L7D0xDHqPcMsta/zTvJ9jDQdR2hwSjOonhiXg8SDdmBdhJh3Lh2Bk48lCw6nAe6R
+ cDoWIFPehWa+6U9OfdlWyfq5xIwrR04gO057Rac5MQ0vYaew5vRYTSEJTQKT4unS
+ XgFi+IOrYnD0TctC8R4vtvwbPdpnCpcLc6GZJLl0Y69zjF0QZ+I0sjEV+MXUjOgl
+ v9BBqcMN/++AHK4i3EdXYI0xoDsBHk7sNOixuDZ6IC9OdOcrCfM2SsercleSvBo=
+ =G626
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fARAAg5dlGGfsMlpwFoh59zd0QnP7XxwSWEBcjHbNK3p8/Oev
+ ttg2XEzB7UDRs+wF/fx3yhUj+arseXIDGPgj4zcE3ci2RQHe8iZdAIWc8ysmIZPM
+ AaqyN9OWkro5dU5WFjGj9zDg9QdkxVO5TmYlnFjzNV3BQXbghiLZctaWl7f7g1VG
+ TKOpYrlkU+yacWNc4hZ6fMM7kNFvdZPtJhU3JQo4WiwUJTDGVFJIPSAzDzpP13C5
+ uCgLwpYmJUqFdILKtJ4KUDy0J0xCh3cTYpBTFQkTB6gErNTF7KRUJTT97o3FvgBx
+ aNn3NItkzH8bLU+k+7moL/Fmqf1Pe8td7G821UHr0RSNNkjIK+J2A3W/TA6BqVSj
+ zVrXxcL2G3o2TynXBj0j4apEYVSaiI0RYqTNRBrFAchdpvngApVlsV/3W636A6r6
+ Knv/2ZDIBPcB9gXpQ8yXdwkuqi8oX6855+yBTkvD6uhznDRBbHIWuUacH6oXDBUh
+ ch+zyUPWNIZdFipGYZMRK1hH2irSO4B3ku/AVvhqN9QraQCIx/T5edV+GN5Pu5s1
+ 2WN0VMZSqs1G/uovdpBoeanG1ORa1BDhpaYUKbg8wrBuUjqCYGBvwK/T8sdFWn32
+ OElv2B6elBOP89e0MKnofPEbO4tEISTHhx9jsIkQoGYxXigI20LvGe/6NHB0sZbS
+ XgHqxM14i8c8tq13RChkiefbJcZFYAA3MJ73XgPGyWZENZeWMyEBpqPcUMf2NS6/
+ cY3X8JJ19bl1zxIRj1vQ0d8gymVUVSTl43LmwGQR5laGy/RazpSsuyPA3jttFfQ=
+ =qvpP
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoARAAqG8RlMqDeEcKRnQurPI289m2uclG6zwhqpInu7+9oRlr
+ J2A+NTsMG87J3ZPs7O2LPR46mcVS2RgcVWASYtPuSB+TjKaqcg2hL+Ldl5JcTvKY
+ JwRJ4CJ4JLaZjA3qnR0aznhOnP75rTCbqRBw3/Z0Yn74Qeb8GBMRZga1WLVjZ5O5
+ oPi/omoRE1oEwYotLCtmuNXroyzWFVKcDjvU3nfKth5ik0UDtvqKGD+PedsHq021
+ b5rLaOf6c6Nto2TtjUq/oS8y0GTDOl7kcAsSPFSqWoMg5nvFrDf//W4hCOIJcyuh
+ HYz782UXvNmijS8HD/XzbFspjKuGYw3pv3/lGaZlJo2gq0pv5sqDLSimFihBE3/H
+ P392CO8yXDQO+T5z9muKXjSi6UIzcrTtV7uE0Z62iqPDgMsGIE1JdLbfh+nRA8O/
+ SS4QBma+40TpEXxB6i7eED57ZENP3jAky27B/yf6DcwOk4rTEEwxekb90lUaYgtz
+ zzzly71WDxjuZHfq0SqBBLHoFpCCiusHLQMn6es8ktm1pk0MvmeuJjbaMQQoA/YJ
+ 9vMEye6NFwwGEmweQv1jArZSYIQ9fZqEN5exSB2H+vWXWbhFGXUUiHsYTdRAvcrx
+ CtVQAD1oqJKHyNqEgXy+cHCtnOe13kkrpC3QK1I3BKOZiFklK1AtDY0o/x4zRE7S
+ XgGTFjbmTpKdC+c0DBXy4YEtuVTVJJBtFp1lqRDuOtaz3H5I+ObMRoj8eSScA89z
+ 1kiF4Sxi1vwUN2Tt25PTq+h3yevLTCkQjmCu5ZlX1VmJkhQLfAkW2fx1s1FWUDk=
+ =C+q1
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ//R07J/SHXxPpoYuJgKksCn8F07DhTEmRfaYjfCMq5jnrq
+ 2/fUWjcKIaktji9311WTni5XIwmInLBHQI35rfQPdhcwK4CUm2SlejuN2WJ6foiy
+ vcz4NNqqV2JebGM0XQZ7nGSPZBRSQS1cDkm0rg5NYKqIaNsMfC4qXZS0RL3ZzGG6
+ 1O/RMPqulAqE/yvWNELxQ8tHdK2fpAaxA6OXLdaIoXW8547OEpgC6Q/pmOH5sX8K
+ a/5ggWEERkO8nyIy6cu3TCUOpG3JnNzYLSNRbEiT4ISizYZpkY7JV9Dk09BFPKUq
+ QzCahGd7eRNDkdn4cGBVifDV6ZKJQOPt0k2evMmogfitvEBKsQWXga5okN2h6FGl
+ Y6Dk+UMSQumiIi0JSDMgghggG+znb/SjDLzSpVByj7hB9n3MsH/zwx0BCBlOaY9U
+ o9SWTLwDBwGSepPY5gGE10TT1FjsDUplzfYaYm9DEmStZOjcGwRLZdgYR2wTDXRb
+ zLmt7HBVFBWXOZekChdXZgbfSMSmyWuv+3EqRy4ka/7f5a9S+/PcLds9BYmIEog9
+ cYNJ9UIYAPLQxV8RusvinVdmESQq9qGkU+warULpiojiqtBi/1DQf17WyaMkJsf1
+ C815HyZ5/f+wmpfoIfzOOahqzFNrZYSeRry7CDC1tKIbvGyF0UXbC3uEMIHV2ITS
+ XgGM499+EOoypvg4HYtkqgaR6ZfQY6OnNjPe/5EWMMCRBptbVwdftI3ErdHmB1At
+ FnSwOIylhb61OP8V4Xt9VEpt7Eefo0lKBw49/ZMNeu5ExLlsE4kSjsF8+peVnlM=
+ =rVBX
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAi6wp1TEflhL7zxt4R6zMTTBSLxSLGCalwu2IwxSgQtk3
+ TiAq2dITnEIUAhOoLj5k7n+UcPESbo+CWbVighzFvKLFZ8liEZU4dCzdZ1bGjrON
+ ZU9dWa1g/4q6McR21c/Ue26A6+44i8l1gX7zEbpDhALXNv/E9adXvZGkvVdtBjNT
+ i3WEGQ/j3Gkc6SZKWujAfLjVH1TbH5eseACOdPs5p9Rjj4bK0NhJOC0UJuzUuXov
+ Uadic4erEZo4FXIjTcc7sobIbvmuswu5RmGHqjJ2mga3vY+aUodBcvbKUYdK2bjg
+ IDuDfBpOUi0A6dcEXVPsmdBTb5RGERaGmizPCZ1vvfm5LwLiWEl/MVNUCHYPQ9oa
+ Hh9ro20srtMmOlJ3qPexe9NXApZWxMjX+NMBqFtwTINbawzkFAYH0Z/rkunlO9GP
+ m+H+CjHfB+7FAG+PnA3HDLX4wHoBUyn4XwSRQ3wPq5hWeyZwO1SUqw7LjofvbVLS
+ XpuefRFE2afiyV7qSn6mzaRjopiOhkG+aoms+i1CVMuB4+2cTErzi06lUEZXqGVK
+ iiFSw2GuLGuHYi864h/XpsjH8hvNNO+025xOAV538q3NoRl7OEkpqCWM/uca+9Ua
+ 9V1Vrvkjuu0S/rZA7xyhKRLUQhx1ZCW4jEqqKg21W//3kXZ8GHCT21kjgFFzcRjS
+ XgH30y7ByITFXq1aqnnU26/JbARgEHJaytA9O9xQ0oj/3DbwWUri/GJXMp8z2oID
+ kjzJnxDTiurtnx5+SVX4wLhsZSBKRxlEvcvHbc6VG3sxW5LKHUkHWYUNAewn0Rc=
+ =RR6w
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAU8j7iJ7e3pmiQqZRkjkzCHMx6lThEywEWihHRSzzOB8w
+ yJmbM9ayH8BeoFcBsAUN3w/x8R3XUhXcZyEJxCJ4LUDw7ocHsNb/vgDdIy3iTrbQ
+ 0l4BiXZaTGefImxB5J3DQC8C4mV/9TffMGmwwI4sWdPG4qIMZF3tyClEODV0fdMQ
+ EUaBJMipV+9gsSwrh133/0guHhmqrBHJsMK5VfWyRkJS3B4uoDBDNhsowgVqJVaS
+ =qwUD
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdA+yF+aDJr6/B33edmCwQI99FN2LQRCHI3T201VvwGu3cw
+ Tu7Gk9xvXUV2x6w1JmLy7GJRCyld9sUIaHJQxKXjHbJ162QbGq3Do5rbW1vF6/LM
+ 0lgBfysY8Q3tJ/e5V528HVO4HXkoFOqsTWr1TCwCK4SbvE50wVVJAS8HakirUITE
+ GUgQGmUUld2gYlWV5RONxYgnKzmmXqlrNf6Ociom994VL2J6AxxBpjOy
+ =ocy9
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:56:48Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//Vwpp7S22Xic+U5of2H2rcJwef3U1LXSMNHRGqewis2N/
+ 4qboHkz3GGhJM5eXdhF3G/5GiR81uK5qhqVkJk/for64NrobBKXtLwCkv5MurTBr
+ IDktHeXep2Odq6sYnKYtKkaHjxUpX3AZrjHeNdCMdveJFWHNuM6FaI6VdRUhF8jN
+ 2B+8SICIapNhbiLi+s4aiWczwls2CB31eJtAYKOcE+aIqDhY5c56xrfb+w/oIsLR
+ eKVzMSY4VwXMppV1BnYoJ+E4E+MDGPt9ZRs6cluE1xY+mXP1LDH3SL0fpTlxjJyb
+ nsHqJdczlOfJCciGLwhIUmidt2KPAXBfC/8m6eDfXyoNpqacZlVcwwos5bDHRFjV
+ 5R15x7tq9d9lP3WGNv2GHR53XBegp2kLf6Z39EA9hIDMMpkaI2yR1JnMD60MKjA3
+ iFTUN29VHcehbuTvfurWub88ZiD06C5SkiTU5O1ATfHO9V18TQ6qaBVNj/oGk+u0
+ BDF2v5BhpnyMk1GJFvzFz4ryDr8lNwwTb13DSw+LJgOTkiwv9La2gxlEq0cimIGG
+ 9fQzJF6vB5JjMBjJNCgevMUebpQzqeMVsgP7+g0bBuAqltXDyDyFz8XgFbGjB/ku
+ Fh8+0zz4c5Iro2adZlvTLlTCKLHlwpxmh0L6l9HGCmbAz9K7dRpX8ALXX3xuM2DU
+ aAEJAhB+VAH3wo2IlX+koZ4onE2uEO86YMZ6deezyuBPXN2/03TmciIwx81i8xog
+ kF+6h+JJbdSc+TJnfOinTPM+RYk6hwSXQ5rc3Zn277937KOwjX+mf6+lbLUETcYY
+ n4XrGcJZZyAs
+ =paIJ
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/pad.sops.yaml b/inventories/chaosknoten/host_vars/pad.sops.yaml
new file mode 100644
index 0000000..3a5b95e
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/pad.sops.yaml
@@ -0,0 +1,238 @@
+secret__hedgedoc_db_password: ENC[AES256_GCM,data:5Pw0orOTzb1xCefwx/n9h9m8gmEY6irE,iv:nZvnPSb6sXjS6k4wNUoo2PCJyOcwjm36gs9l0mxwAeo=,tag:0seJlVi9qTfBiol7mP6DQA==,type:str]
+secret__hedgedoc_kc_secret: ENC[AES256_GCM,data:7RyM9jfKnaaP7kJ1JwucPa/IAwaRc7Hhe9VYIKGEmlc=,iv:RvtaWLsf/X/y8s+DLANcyVgagJqGB7EkvQ2nYm2Xo24=,tag:amdgqknDGeZxUBmXsd1ksw==,type:str]
+secret__pad_smtp_password: ENC[AES256_GCM,data:msnYZYl8vP+OeISI5OOglQsCQ8vxMZ0gig==,iv:oqov/myWJNzUoAn4BSX6hN1fWyab5vud8NmT+z4ECqs=,tag:0T3Xm2zw5k5WmC9Ks03XhA==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:02:14Z"
+ mac: ENC[AES256_GCM,data:h9E+eIum7jyIx78zJh65c/4QMZRq+stNklGuBGo8afYpicLPG/A9LZz1UeBSxyEoMOV/jHAIuoU5u1wmijcsZSBBjI0LZsBTnGLORWEZCoVTEVCUp9CJHZ8zQEVj4Gt+V/moR+pD4s3YLuywamjquvghwtOMYt1JzsePGcCkHUI=,iv:wxhwDM9hmALuX9Ko4izSQ270X1aaLH5Z1iu93/D/Kls=,tag:j0+XqgV43A6ry6hbHhGj2Q==,type:str]
+ pgp:
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/9H4s6rTjK0cS8+PQooMV8vBQdRcwLQ0MWvRY/Vh+eYnnn
+ +BjYir1lILaFllWmdN5+AoVV/qfSI5CeyPTtjLNiU8wMYXZfop2FFxmLRklo/vkl
+ Sq4Rekk7L2eqMMBNavsZr72jQ4DUKi8y5zUcU3HaQR0fg3gQrtN51z9tsK1Dh9NH
+ 0z9iz75+pK15utX4PVodNEOJ2AVUBGYD6gm55lyPG3OBFTHASuCtgtB0+Bn7i8H1
+ X2c3kmnjsxrPjnuCzUoefDRJZ+x5cXuou7n1dlA1FEveCrMGmGCOYComadRb5cTX
+ v6/ZREBqZDFZ2TTwwVPHMgGzWuSKYwUXf05aAqdLRuZjl8XWb6zIMECd7LrGgMUR
+ 9EHoZsXYT14r1LExHS+UH8TFQGH6VqbqIRtvAo65xqPBkoC+xWZkhg52X+5RGf/B
+ DtWHy4/PkINd/B2k39xzSOSfDMySz7X7+sPYY/iUUNa9IIw/fqF0zj2SYATwmATa
+ 5eTyrg5mI9MrkK3bIcqTR/4i63VKIhakTTIUmp1RvxXiq4z+tbXk+K/Add4j7jMi
+ bQrbAJ0EZVUKJPK1yi3Z2qrRcupCVG728tlLIJCikXHnob3TErY/zcOGk4xpJYNM
+ lO4GnOEhVpWBFl2FbgZ9GR5esk3pleTPaLoFOZrnmaFtBXD9KOwnjLuUyA9r2WzU
+ aAEJAhAyMWX2d8r470tzUP+G/I/J4HaQHloXrWiD33g2lJvEW1YdZHaU4y3nhoJl
+ GR2nbgYzpyq82rArHs4I5GVcrH9D4oS7Bw+KZKzqps7A1Df4ftnzACAZLht8IHfJ
+ rZqIR0O+XdA1
+ =A4Tp
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//WdfoqXrCC6ATf/1IfCrAyayEFKmxAmA28Z3x4TIo0aO1
+ CCfSIIS/d7UaiyPd0RESklbaTjP9gNgIeH4YmuTvjZ5IcLyQRDyMZ09SsnUexMek
+ eDegXAZ8xusWq13KJhE/Z3K1Mq5zJIccqW6CMBk11Ih2jTEJum8hkuxZ1tZ7E2zb
+ l5kXwbaZyMZxOQ2dxtjFo5NNaBb4u4b+DLoGtREJloXuzcSjjyFvqw1iPshozFnC
+ Q2Vy7GYoqlJJTtx1A61fTCalNB3wsKmB09CBF1KjCakE9m/sds+K/Ufy2rTpZYrn
+ L8U1Oh1KBd4xmddOFKv0d4gPJpadBwT+j352fYZdcs/b3OqsLV+xw/d6jqSpZQA/
+ VhcCRkr/mAbRMSgL4y8HJMJ1kcjcRlTbHPBbK3QLNvKMoUQItZskPzcMStisjMQ6
+ mogTpNVVv7SuFYQnbGxBMpz3p7VD81b+zBvJhIBqldLs+fhNcmdF25f1UUKDuHna
+ Fq+eSOwCP0t/I8cvzq0xJkjfmK67exI4pbBZdIHNcHM98Y7cX/6gm5rqENNFzndF
+ vIFFVKQNI6+L4Rc8VGNO94K06yL9JQEamFzZhZLx1lYq2eszORLuKvcxWaawb1ut
+ l3LiZ6h9wALZnCKq7F4MjwOW9/ohyTvxdfRlQk2ByAu9/QwDcpfd/joxAuyBlM/S
+ XgEAlGggVJkwcPaqjCv+iHO4gKSz5p7oCtkSjFemU2DkG8CQ0T6pnEG8K7tIqVqB
+ cs2Oer3GDLueMfqJKWorf+T50iX3eiVxfu7QMaMBCfnet/TWGVLp0TygaixocIg=
+ =G1BX
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//bBvBIMaPKjuU7Ig7OjUYcbWZKfQsYo/mQs7iuXX+c+FT
+ l/c2RV5gAfvJTyiDll3uWqeCr5IMFLTJAx49Z2zDHWrASYytqb/TP3SFWvpRPaT6
+ 3/xNBIL93tnvQ0E19acPcxja+1OzV5TYIHpr8K/lLQewHeUX5aiR8hKgrTzx94bX
+ 5w20bChCNsSzr7mWJE9FUsA4XyEp9Z/eUavaygURJXlEzjWXOw602w6nZ02qNuG/
+ lQKK6sHho1bHEkn+a8GkrInf4DBDro1B7XWevfBOc8MqnVdJi9nLNAMCUidbdpJN
+ kUQNg9Y5YxRqjZRQmudlndzpZGgkoGKMXsQhOJrBa6R53myqYbp5eX241L3JnWJ0
+ e24NYsGWqPrVJaOHz3Z4vGD7rNCVds9X2NT7NVLf1Nqhhzbj+XSx9YZsGE0LubIP
+ Elkp0/PJS3sKSbRycK92V4B/6KQB1jsn8wvBsBF9j6CF+5sxsxx0Ax5v6nTbdf7j
+ +CXlXFySNRJC3JG4R4rDeJsUI0nacu3ytSbgKjAlZu2BsdekADbJvkkQFl85AQy4
+ V0mQ6Ua0OMludE+7DRzqz/uqk1J0D+ayEClaiyfMTQ8feqnsm09UtuD63bq0RAyq
+ oVFFMV/ETHyqwIFArYDC4kH8xcvqej5rPxpYT+oBYGJVi992Ygo6AlFMZT3M3svS
+ XgFxaFBeZQreUWFDjHf+lC7WAiM6wIOZzJaAPSUvw0ZX+9MXviJGPA6QsK+zwMkm
+ FdOWyvxJscfyN4Jz+BxBPMKb0zIRBVkD5/hOnI1zuGrbOLZ1VX4VzKELYJOsLec=
+ =Yt/6
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ/+LcBQwEKAeiu49BpBgShVK+fo1++dPXLsmr0H6+e54FRc
+ ek7eFEQUjxalA9PryFHLpe5i5YTf+vvo46MKKvaoKgT1XuDIGWGekTNc1JW9PaEw
+ hSywvYuvbJ745X7wCoyA1I3o1UHEcyKcn0Enlf05qjXHDFRXuLp/QDMwalD5pPlF
+ 5bwLHJwfePVTcrm4oxunh3Z/RxtU5P/8kgWhUR1fs+/XAmpEXMu+Th58S65oL+qM
+ +mWZGaP5GPw8C1SgpscrHTp1PNt/+phROKNMtF5XRaWCaNy9pN/sAQxRmy10QgqT
+ Yo7y88xa382RnLNNbOc1FguXvF9aGtiS5tk1n0y7xD3qmyuOENWOneJw3pEwG39d
+ t/1f+lc5vVmhCtySCZLwvC/NnbfOWlQg3uvUyVkZjkhUfNQxdtWNuf64irOeB8vK
+ JuZi3rHC6Lfq+YWHE7LOr9q+Kh0vwozFgh+e+N1h8oc6RQGlfF4O7bZ0dX1+b6Mw
+ l4G2y5cN65c1av6NbdK0yMRf5WkOFcQyBi3PxpIgIh6B4tLlc0zIJIrO+T/57Ogr
+ KP1rYNRL3tl3JErTh59nQaLq46MD6JL0VcOx8MLV7UOykBQpQDsK/QjiLvivv/Ft
+ qUn8ITJpgKV6svXl6rwRA1TqJ4Jf7Du1FGq3JwM/FFMIvZYs/Dfy7VXoTZ4yPobS
+ XgFuFt2xJLgYJ8UF5JM6TA6f8E954U8bnPunTK4ivOKOpjuHV9/LAtUoKaOcFPzF
+ KZMzARKjuKjMo0A8Zx68GmD+nzRjdaG/oqFn5pwDQ/RShBGb/xhxYGY2evqFUfE=
+ =1XH/
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAgsYgw0YLTZ3HQuquRxzx69lbnfnBsEuIIB3dIo9fSmVg
+ Hco/UmtpBiG+G8hePVr5G6o0I9n5mGsue7aOsCBfn6KwqruYF33jhVeuwKrd8stR
+ u5L8vQ1sentyOzDC8QGqUhtjfhgdE33vIfeRNcf5re8HLIafOguD/Z+Z/biQ8fu+
+ E7TIAbDEfiRKAy0uUhMSmnYpjbKB3T/GmK5dTLhIR3uGDx1rkkdUNZtDUDZpi0BV
+ OiLw5mchAeG8opo5p+phcBHuODeHkPnVr7msYFfbhXf7Vq20bRvnZVGx5mRLT2wJ
+ E9JGLWqicuXGeT4UYa1o8tWHIpGDZXw2yldiJOLNqeAxrPjk7F3FybB2JDKhQV1a
+ G56zwO4isatYejq9dBzGh/LnUZI3cARsdtri1FhF806yMo0t+B69XUi93U8PCwDA
+ shDGSjSyNZ5IlLL61RPEGGH7QdQIbkwoJevmtlxZdqn5PmLoVO0JXx4oqP/c45UG
+ CbCbNyp+2l4MRLbwe+7ISVMxzSrYAx+LMvYnbD0B1dyLQOYQ5u0kHS06n3l/8x7X
+ Zhop676NKdKZ7/zL5f3awUQOAht+zkE6ZmkYx3BqC4HIoqV8DZ0VquYmbozSUqMT
+ axnch0h5R/lY/N18vwjLylYXaIyfqPCkbf6sTkxR5tLCgln/ccgBmi8x33H2txzS
+ XgEV9G9Cnu1PM5LX/KPDVs9kOiBDIVC6EeXn0RQDE4W/wqxZ0+YhEtK/f2z6LC3R
+ PVos1EjnQIQ704IBpU0QZhulF+w/LgNB7J4KZK7ssDgoc+pbZoCqck4bZR9M/Eg=
+ =b59n
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ/+Meod+NLyuAviYT4OIW2zNFzDTECd4f7Q5rBI2YX40a0O
+ wLJngbUizhw3bXN6nhHB2+LZAe55djpruxs3YgIC8HzgsLd1pBsJ70hktNkIFohJ
+ 5xbQGmJ1pBmPAkxW42qqm6D+7AnSeuisfQjK16/Ilko6DVEDq9WnHq/qJijU4Pwg
+ hfcJdvx4YOW899kxIzhuRFBhjCp34iR6bSE5ckouJIIprTKWTaPNJ/fd3y8dq6Z9
+ v6zHHEi/+hu58Eg1sRZ4yEuPM4zMbk8zZcUx2dtwbtYXkUkmE16lm0seUI34aB0a
+ IoYEAsz/6km5AjVRnAemcvAvs3wMQYwNI7khpHU/WPAswmJ2s+oWh+4E6mwZzBOe
+ QuYQ8WvBURDmvAsqHgLc5RMlCndQt/cXBoCl5lBhqSxM2LfX6EpKJITchSNoL3iD
+ oTmwJg+lLHSGBoJYR6d8eCEU1CLyqTy8ndfwsyQS6WwvLMFZiwQCDuadNhKc8aH/
+ 4opZRzFnvHTFoiYgRFXIphyF7ZA3UOXFSUevV/2py8yzJBJHNrrfnAZ9eA5Os3Dr
+ ntprOS1K0Gg7bTeFeqf9k7yArj9is8tBQggoiBmDqU7dxeT1+R3LswNf7kJc8sF+
+ PWzkmTld1nBJvxAHrdO36iGF+BEGGIT9RYpNvrKcaVfbu6nTh8JKLouprhNUuaTS
+ XgHVnwzbkqmPmxasJ2dou+ZXPLVD/E/Qrb6YM45+xQxSX7/IAOM3M6z+eKehtdhU
+ 4EaW/RdYsu+FcHETQ3ZMuDilC03n3AScGoCSQvAfxUzIRn6zSE1XhZscM02FTYs=
+ =eraN
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ/+JyPJOwIdP77mIF+anBSxh+39EClVLiN7woFC5iI+Ybd/
+ bz1DYEwumlBpos0aa1/ORvmSwwBIEgS/nPh8wBO9k87dqPSMr8JNR4wkIF1yNK/r
+ NpgXzcEy8IFgFpNBqSBKMPbSqSfYVFBT5p8iE3GJ9Uhr5Vj7KmrLRFY/tiK2Im7i
+ JumdscH5FJI6oOGyN3S1POgAQCuenkJQACejBkhRix4XUJkFh+exeZmiRnBmcDkx
+ mwkvnpuYtKp2ky7IaXVZlTe0VZjZizCL9+kANZ5saFl7381+cL1laDTf+Gukb28A
+ 1S/c/7qRYEFFF4XU4HyeOUKjvzykr7NwLJpL0Ct442HzLSWzt/rJ/W9wdlBDmSif
+ lwtEM9SGHRMSKyzrwKWnz2pND/HPZWp1NW+sbtZ3UYIK2OtgXUVFHenfVPwMpvDv
+ j+G0CBkcnxB+4slB3oz5HaTUZNPN4fNCAMuo3IGwmQdu4kA3UyMJFJnCGClwu25x
+ 2DYwC9ZQSpT+z5erbjgvr1q79IjBGjHcH8jcbzmJj+zpbxkuyP1R4GU+rvBQBr0I
+ uepMaF1CfdlE1rfe78//bqjw05W1kHfdwZxo8K9oVoqpq48eFI+uljvzWKZCZxMq
+ cSjzk6DHaKM3Ye7F5WLTbnz80WefeQPHzEskzv/7It+YV5NAh1uQQzZYPyzonO/S
+ XgF4p21DiHJQOYAF4KFO61OQwkhqn+HPcYS9O07P6uxztKpjbbBavCn2sBGug1S4
+ Cenu/9A7caqKG3CwhpjhfjMzbzxzLcHP0x9UJRZZM2/QwVykq+74F5niPZmh8pQ=
+ =HLRs
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAoCGJHaddfsyhkNSlWZZZnNw9oprWjCig9SbXGtTOH9HU
+ qOOVn8un7rGHC3WKhR43ISz2wRRF/amYtwsvx4R8Q+tXHInpnY5wiCqoB7lZESN3
+ ykWr9uRdB2tE85ADPGg4nA1zzD9d3FRneIJNx07OgPilpbWejNqnOkCzj47CW0Ts
+ ZO5sOJpNwCCsbwrpQG0ZrkowpvYzHtfhr7Hgunf6qHCcWf5iMBGgG7Me+DYGf3yd
+ te6DzQI+1MEE9/lQ9ALWDb42MDFkoiZjUdzQ427DbpFyxXZFtkTTYIFkoF0pp61w
+ JNF7gFLmEGdRu3E2OPd4MBp/Uzp8HTLG7OiXIgGY03gsBM4TtsQaVz8QxiRJJVoa
+ 1gJhQORpf+5Ng/RrTrdRBVjV1I4GL88JjgS21mfSGE0Fsd01Ku/R84s1agLluHAq
+ MYjIKQwiXiPkyyjSV4DdOzZcAuWsspE3mnRSzs5TIUrTySgKF2zxjdPzgNrIQm8t
+ AHkCmbUPKoRlWRNkEOtr7H/xVRAN6oTaEaWhERK55lHSUR9JQVbuqkKKtxPHoHAP
+ XapyE3w5Rl8GaNjXQFq/ohekJIJCGwfmjAi6oHEL8f5uKaDKbhm4lCEab0TyvvzO
+ tkmrOkkshoPHizPbpLRgFi2B0hQuIcVIZJcqPKiJPxQExN2bpSxujujJca/NbSXS
+ XgGfyrSIXKZ4sJQPLpXiuadcW5E70RbHvie9/Z+cn9zQ85C9JR1rcYh2Z90FUrub
+ 1neXA2vnsrKVdj3vF749+nmAvKN4OJM2/qpP2JxV9kJbXPZ/SGuK8LrcGWrt42Q=
+ =H6Mr
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAwOGA/3wvf8L1Pdmd2M96Z2WYDUqHI1AmeSVIIUW5hvDs
+ dljpGpCVj58aTj7c9ag0xViLkrkOt/Jy7zncd1uXPC/sFlVptr649rv5pa2vDH1u
+ ndzKe1P2Wfxt0yQ7U+e+XCgSnu86Nbrf9n7+BPEE8wfjOBJjeaEEVaxq5Z0u+UOm
+ Fsu45I5iWriC0SNdOHKJhbCdYCriwq+hTe/gt4aCaiCDcbHOzZZl27Wtt3C6uRAX
+ wtPjVoDtVET74UV6zpiSD3c6UebCaGefD1dYDTX9u/zHVcEAeirT0cxYaZH6GuBp
+ lBgWTQFWTKN9mi+/sSRhv2zs8hf8B4SX6XrddN1P0O95Ts5lZJ6oPNHEYpNeQHLO
+ o0OMP5Ttm5zixsBydmyt4g/tiD1dgzToqzk93Dh/Sj1XBGxM8s4JCsRWqQywwm0q
+ XLEUcN7b1zikilhontgun5ub2KEgnCwRm650ZDySpYwNLK3y4XN+xY0uHZaUl9El
+ P8vX6MHV9Yx8zZCre7cw8JgRlYtz5ocIFIWktWJTVTL9F9jCWekmNt9+FKlo451u
+ cOy6gt8KZngaIfHKqO9FS2FsievORpcWCrtbccZ6aGywrtKF1NyCk1kgv8H/WU0q
+ q7B8gg5Nd9VYUpCXu7OIhmdyQko9S4Ns2MPSaAQtB7lrUWroCl77lj6lYZvMe2bS
+ XgHcaZ5lvd7dhcbL7pO0WimyLLIrAhIijc20fLnJCjJY1HymrjL7f+5fp2xh7WAP
+ BTb0Sb762QJmvqu2rMSqfHe7a95/wHQuKOBNHs/A2S4S9YW6nsY9nGVz4ramS10=
+ =O4jt
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdARgDqFMNjujD9L9YTUTCEUlp/ihjCvO++SUYAosEpbSQw
+ EuBZnHr45gd2HNHEEWoy97TgSnSfGkj/p3LSSHNyxdaDtwydDG3xrshZWfGEj/7O
+ 0l4B73TYPgvm3QuBqZCB2Xya3O/4Gio1W7/p85u3lwTDLDXNDTrAbByEK7rREgba
+ XvTwyWBSEDmkwc65V2wE9+W6GMJUtP3Mc3mHQxVEQeoFPrE5CrlSjdD3v313GB6Q
+ =Cjb/
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdATTrR8/mJ7kVNw7oz1ao5P9q7vCfj2lJed8pbbwMZoykw
+ OsyqUaYWqofO4c3ATff0YPIAQPQr2r0cQJVws72vRRL4CCNq5cjyHqOKEpCqPxXX
+ 0lgB+pBH8dfL91ixxtb8OfG9cv8UK003ey8eoNlnwuhsdcS6HN/hzvP5u6upq6i6
+ haFibiCnP1zcUVKwCJxzW41SzVztBptSsZ27hpKUSMVIFqe3DksmEnUv
+ =F9pq
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T13:59:12Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//Sn4XmOHIzx8AoJ58vCdwbvElFwISg24Fh/9MLuW8lZFG
+ tUWsWK4Ar1VuobXkb1+81NtVXZ1J1iQGtM+/ez8xTm7DXYBs2kbuWpktUqY7aOP/
+ wOgzP8ux2IChJVyTXlHmHr0R6FtB+nmLTRuSzAoMaRnimZW6LbbFs9CbaoG3KVk5
+ eay1HzNA1Yhzl6XN1QkpYEhay9Q025WCdVwevxfoaME3jLAQUZoJ8FSHRLP8Jmyw
+ 7w5vLswLJbIqzqzlc63URPVdyPE763MKvKqiDTjXxpqzMhJ7Px0fOPMBkvuIkA9M
+ ZWiGhRvpE/bjb7Y5Sj7aVpmaBh1ixZBkQxx6gzWarPWetajMSc5csQezYhK9F/UV
+ yLNmpony2DQiKr7L2HPzAtC+GJQUt9lL5eJasFQJiyJJxNXBEttfeWwMLspD69YE
+ RtIrQCvXxZkoeMZCM+a1k6EKfkJ8ow5EwvuLvQW7CaFBB4OmIQ56lw9qhMjyYA3p
+ RCXQ1ixVNdDFyNseXxACBYWJI7BieCIsUTreMzphqYlaQkYpWf1RUehG8PP61Tx0
+ USJVbFeCu2B/fkS25F2iIbcsCvlhQ3gSZOLNBMAab6tC5GQAVpe5MsUMrifexTwy
+ kfcPCd2UxZsnD00NFwjhf25u5J7Hcqssa0L1V/kOYtMKg6p3gl3e7t6eMqYN5qzU
+ aAEJAhBXh7OMyt57H94F+XrJPFuxbU1cWdoUOBP3MXVZL6TMrT3KmAJ+apr4rgvk
+ Zigop7UWsAAvxsO6sq0dfZ+Hea7rTcpXiFjlp+4yOWjqZPPsPcKOJUcD6UJ6Wwq5
+ DQiw6hZuyEii
+ =dTum
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/pretalx.sops.yaml b/inventories/chaosknoten/host_vars/pretalx.sops.yaml
new file mode 100644
index 0000000..ae4bc73
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/pretalx.sops.yaml
@@ -0,0 +1,237 @@
+secret__pretalx_db_password: ENC[AES256_GCM,data:T9qw46sR88tcj4NG1oK3AfjreU4N1cIN0w==,iv:g2rr7PbFN9bFDg/w7vZBiuMB4p2j2uu0eQAyiweuQ6Q=,tag:0coJNAbT5W9gxy2fVOhuoA==,type:str]
+secret__pretalx_mail_password: ENC[AES256_GCM,data:HJrrmdDKzity4Fzz+JEj/kvddzHpRbw1Yw==,iv:dW15nSyYjzlFdPkQoZmJ5k+poWyJZ7dW5Lo8IFjtfMc=,tag:AZZObQRDMMoQgnPmqo/+Tw==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:05:04Z"
+ mac: ENC[AES256_GCM,data:sO7OHejtPDQNt3bfXl+W488vCqaIicE/iZgIw6dClwoHZUHDNlv/V4aubJk89vELCs7JeOYocqZhARrrHERUxLtQMf+YguA2fBYZOVZ37chtfIqYoceq9ygzzzI6/PQlO5oRoe6HkASJK5t9oVWdfWUmBfWWWjBGrsKbUGnlPOg=,iv:p9NZw6HA0oj0PWJYDIjUKzj3DAI4ymI2V7o9knsvjnE=,tag:AbMiE6WQSPkuY2AEIcHAYw==,type:str]
+ pgp:
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/9E0ry1ZvLJ8ZIWM0ZJ1g66CB6SDwECgyMmTznUKMZNhTk
+ F4k+DGuq8ZXLyqMAxJ4i2niVjsFM+VuKlZll9zlZJuwqdv/nACHNq5cJlymz7r9Y
+ g+iJw/vCQQJHCHX11FB1lfc9DodCUYG0p9kqiryEosAYAtA9Na8hrrlwn8Vtl2tw
+ ceDX0cdRlf5MIy2lOP4/3wz/PUOM2703/Ks5Ux999OXtjnyJ8ZKhtNu9vQjfKpr5
+ CyA7yQyFR3EahAOKt08D6kRvzMs4bnTeiK0qQbGxaf66pZZ3qFrfvsgqn6cZd0nf
+ 9UExvavAMeQ5FQ6OnYCX3Kdmz0yH5AedqZDxUeG2DNzjY9CTjl5s3zEmWQiR58i2
+ xmnifspiGnSguzX51aMUvHuOba0dIUFlnAQJVeW/ZeeEaHzqX4Mo2057ggYpQvX7
+ RmhRFuJqEGKYO+yNwkLudy4hxyT3TusV+VpNkp0Lrk9JryQ4XcOW1yP+K94WyQ9/
+ U1ZtWXz7ChetrnAZN0gH3D3+n++p+aXqILom4UOdg9u31NxrJds6SV8o/4QGoZOE
+ +JuYzILGNy2KwMea+us+JURT4Mnsu0FWZdTy2+5bi+ZON0STowhe0wYQmsHKAoqp
+ O+6np1AHRifiDDm90au7dSsvbpF0I1jwh30e4YimETQzNNxPma3V8vS9o3UHeW7U
+ aAEJAhClVMKjtMKzJhbsnrH+v6s4Y14JhgGHT0Io25NdwVxZVqBSffTkOdTnAOlE
+ AGU28haY6YNKMd3qhM7Q6/KQwDUaj076gmpqVnSXRMYzYoWSZFVPkPKQxrgPz3ts
+ IdcBWmL9KzRV
+ =OXzK
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//REsp/BVDxvafAJ+1TRt6F5sUod1y94YEMnKUyFUD4gR0
+ YOROfFeyuLWQfp/aL/EhE1k5SqrCT10ryYkqRaJM+zh+WtGPpElbcp8v2yzS+CV0
+ rzudA2YWp7glyo4fvntsDlEgL1WSSNJG4MCXp7H24jRly3qqqqwhYfz+3HK6anK9
+ 8LpF4IzVtaeR7YsMSRLrEZLSrh59BG6Dqdu8xkMrQQcKvsrOrMCl6eNERepo91sy
+ VnAQyakzoB6Iam6f6KtO1blQzigi0wngj9fe5nfNMTLxhUQf2lKc2cJcj601Lfuk
+ 8B1Fi9OmbW3yeLHfFWJaMnoj+wOzMptY1kIIUX9p5p4JPV1JpdZPb5MqoB71WLo9
+ ecqQlPMs1smAOlP4NNAOPwY9cC0yWNirUy8Tqxp+82g+zdlRkPgRd7vNV5oPepIm
+ C+rpkIFOyTIL5tugnHhdp/jV+nWiTPybdzzzxpuHpHrBljyqz2AbLd5ECqQm6I4h
+ KGkjEzF65Mjx6JuK0+dJj8CRH8HvlhrUlg6/REGx91LAB/Px5MJ2djNncPkdb/NX
+ Pe7caCLtNdvIp2xNags5c8GgUTtFMLvz1CbyBca1/Dq2D0f8fkCMF8WR2H8GHJ48
+ OlYSisEn1BwfHRsgeC7LmhzU9E8bvZYx/9H4kwj2Sq3Hdcbwa/1EOi43SxMgoCLS
+ XgHKHa2wvsrN1Ub5sZOvHAZucAZfg7if/0gJu1PZf8FHI119Eer1XkK0F/GDsGV7
+ pAnk1P52V7JQikxqH4ZaINUENEZpRPsbiW5t4l1zAdlL++SqfRPylV7z3J7hXkQ=
+ =1TlA
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ/8C0WsxAkPV5Om7qIlukgulG8ekTeVHzjVHKaQhp2Wd8f8
+ Vbc80OzdWlCgu1iGk1R+dJAyJRioCfVA2gl/mf+Syt5Jm7PfubpNoxTWD2kNn1Ve
+ Kb/I1iUISibEM4bV+1g81yWKtzuvjrDZta6N5PioPqvjCExKHmYKFTXPbFZBFhYO
+ o3sNcjuOZ5PjBr060phHNDuw8CHWpwOc8NrzD1x0PBQRNuxtLXOJajpSr5bivOtR
+ AZuOvKBAJUYuttd9G04Qk9yR2rkyU7cu5Y/CNgoGIFvBqf+ezCf2R05/XNqjiGzM
+ wrU+p4MqPRrNxr6EnO4WvLWbHzKbinuKzzOW53WL4jRWXZ6D7kW3cuWKrI4Jxz1c
+ lFrUJQiUMp5Feu0+vKwm7xRRNbH/dUU3WLZ7GPaIXrbAt/8j24hJmE76xQ9IuDAV
+ HnNuGfUxzRBy1JfViA1EU69ihmTR+oYHbtR0nxK7AmUzdo33GaUQiz38evCOZGds
+ QzB+OedxV9guFOZNbgXZM+8rQGYGbTWPOFO0O6/HaQ5nPPsBPYbfp3PhFMpsD0Bw
+ LEGJyUUbvCZYlfGDQlzLhvkVkBWyglfu7vgh88ewW6FpMQ1QG8tT6apaHntQxySl
+ /Ba12VA8eDASiVG7yAnO+YX3FRgKfAnYErx6GDdG3iaJ+MFk7Yt748ls3v60nnHS
+ XgHcc5ZSDTCaJxCjIZ9158tj3j+66p6V503ybybVMJXBlXOzfqWeDUHdWAaM02tu
+ 9xA+VMmB9S+DQycnHqUZjI+WDwDUb0zgDQ4xDsojWBu9ZBl6MG1ZBPAwCUHvkxs=
+ =nvLO
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1ARAAqo1KNGrd/1PBCZaB3uDWOD/0SUIQaI+E+kIHnXukLoRQ
+ 72PLSErlMcHhVBU+Vhz60+JUjGMm69eDOrH05Bq3fcpCX2N1+TbUBftc7A34Po7r
+ diOb8YE/AE97uc5CDdfRaXii5aDRP6ehOg2RnAtu53dGyN4gfol1oMeSgkALSZmO
+ WJnDBYjLjpEsUPcV6YNlSy+iEqt+DfS23JTOW9MiZ7GMH4fh5seBUUVa1ha/IiF0
+ inZjanfkj3R/lWXbEJ0hzHz5AaiAn4BIT4ubfJf0oVEMFZYhjRJf3QkKt+OZ8EkS
+ ZduvHFNiLlOmja9lKucDogWpK5WULfiwiRxFXFu0oZGZ40GORzXtMASc0f1BosSp
+ zGtj2nJFqWYDn2D6pzaD7qgJVeHeWkVl2GhzEQr1ryyDu85n4pka4gGpmBykR5iU
+ GPiEVH3FXMfhH0yH1R4otmJGU1CbGpugPKlClSVhNy2em1ntXxvENtwq3l3x64HY
+ vxK48ryJIooduDrloJXz2+FU0+iMV+EgjnR/uZONN5HB1AXZrruZUMUDKPqoSRnE
+ +oCvvpgNa0WK2yG/DZ1A+lGGSw50fXf0C6Q2CNm/IB0cD/PLf/ocnWlaysBhR1uC
+ WIs/UdhPWYcgj0F/iGZA6u1fm+cVRhPi2dWcfIQhvRA1LUwxQes9iaE29OjvqVvS
+ XgFNLi2R8FIJqOCPuCl80hX1TsMOXcL6253ZkG+8jZkMoCJ5csIpJdO9VsQdsH8y
+ wPJ84EDRYYU1VinBb9cHDoOuMvJczGRR+RbP5DGCGsCLnZSuvZuOTQ2XMjfKRdw=
+ =DFRl
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAkXjxngQK5sC5nqEUs05ziujLsMhgvu+lbnttSolYjE7m
+ akvxeAZ2I1BjMRTPrKzdCiJB5A8BMv+N3LIWplV1EcIhVDiygvw7j0iGbKmkV+LM
+ uoeZH9qZEcpLRhodysdpN0/1Rdo3Z+j5hp2TFr2xNudociYNrdl3Z5uIko9t9FEV
+ vn4/826xqTJlYQobsOS/kFmkxsbFKbggQ8U3nH8rmeThlglcFfrpsqIOIRnpwCSb
+ FKuuJzQcePGiFK6deO6ZFDRbVn3dFHOmcVJbuMaPXqPQPwFCYIEJOMrqNqAT5DPK
+ 7XOYxfsSYM7N3XQRNARva6GHuI/5JDm3f9/vfYbJJ9KNYa/q1Vslkia5rLa+3QHy
+ +4nkHX7d7yHuTVKqMdWzUySgMeLtoAQQWnXq34gzHp9aiztQZFryaOzAcy0YsWKG
+ X/DOkmM0kYQR0Upma2oRO14VAtXBfpe3ciULxtAtQKZZEeSYe4u+jpYH1vvl97XR
+ jPvYJM0Mwh+zHdgG8ljKAa6cY+cN9ruRaNQLMPiMeE6KcH4n3rAuA5MWMYR9wgSJ
+ BpFx/jZHZGl5GQ/Z+/GMl93Yq0tjd960F3VuS1WzFgZgL0afdWz9bI3s2CQL7Yvx
+ N2Y4e8KnrkncPCmEfmdjA2PncERBqzmVxEDhEQI+rDeOP0oY4QsrDKu/n9CNdb/S
+ XgHGt/VOYWTY//akl0rkMkMILrk7p85DICzuzRdDKdONg/9apSCuJmGgHKQaaCbw
+ 2uyOPXMth+NnRZqqgM1bXlZeDFfUup1kq02ssWwR9OXW91uHULm/JwwPUr1dM8s=
+ =Iym8
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fARAAgWV/FANu4i2YvmRLsUNKvPqi0+kbtd3TX2T9bHW6mURe
+ CJo5RMH5KXcpTydmeEphQZjand+2LU60yFjLDJs6DXr1GNIUm2Ro50RciYaszf2S
+ 4AIvQt2r6nXtN0wMnhrdezE/xvfspdqEPg5KneCQZnsfaU/n6/ZtjMdtawpDAqkt
+ tiZaKXcwT4iWFCWyXLeM2IxSPrvGFDgDMrSQ//CMF3X/uAmnZrm+sNRC4DXeyVbC
+ UJvp9rLQ4PjkKgnYVY1cT5aEUxpsHEw11iqSed4RMiG4Uz5Gwc7s1kj/BzhwcZxN
+ fo0hFTa2RSCyzrP+AsdaXtzgOOgsWFITD5eGUHIa6l+tAM+QvFWidWyvKEuvM/PW
+ AUSukYsA9DqrxSkzSV6PszVQRzalfmd9/uIlSNpEuqF3P5ZWCTKkaPQdxu3o2ZRA
+ 4Z5aGJy7SV3G2894RxldDEORk1KnGTr9UMb0WyGTU6yrGi217uOOorXrkoyh8NYF
+ gHrPyiazmONC3EicUuDzHZc7m9z8H2cMiFBDo06I/ZKvpYxN3MzwAwNp+IcQRLwr
+ sa1iJQ0ULoMyN608zqIecW39mXX0bQ1AiPhO1+TPEBOhgtCYweeCbuagsz4VdC9c
+ vkE4StGmE9IaQxRFFU4xNw84gtjUNr1zhaBp3BryW/o75TEViLsu1GNQOcsNjrfS
+ XgFUCxRxdK3mwYz4G0+fHCm3XWCCjiGJjEJpbb8uNQs6PbdUc/CvIUBUKgmLT/2i
+ hssKrKLQJXUBbeX4iMNoHigiIMtWHFwGNWQHZs/equBaYHGreDvwjW30ehshsIU=
+ =lGob
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ//Szh96AcyAWvkP9oWGy9WujUFZ/LFMXSLQs7VauTPAXQD
+ PX4L2S//cKP623B/ZLMW8wbzqtPgoZsoIsbw1/VZuvKHzuTLMrQtGXquI0W9lgWu
+ yngS7UMkjnbHTtvnqcqlPNarwVyom7TNeHOQfNDpDZ2kjaZ0sQlfcl1J1qoatA+3
+ 8F69FdmfBvDsixuAS+6RvTljQPox1jRGr4XsWyXd1iF09bNcW5j5g1+xJmxWvNKB
+ 06oHjB8Dm1NeWlgUWIcG1WqwcHwisAABLcNe6AH3YrjM4pLDuc8QlzI1sSCIl/H/
+ DBZ90h8CboHv2wyISnDKvyKneax6/Ms0g0WL1xn1Yuar531V4OcTBfUYIUg6zhnC
+ qG+mSU9BPQQCyu+SlbafBo+Lq+jBoaXHQGy8RUgAFNePLdy7lkEzFl+7i8brdd9Z
+ q0hwdPhBeizKoX8OmxirkwkTlwYgO6tTw+nMxu0aw5zx7Xs8iVwnanzRz5qgv4SU
+ 0/+d+bu3QoNZBU7gN8NQkSSeRjo49cRrhgVQZ6B7GsViSfE3/DTWtOs9fQEC1c/x
+ kQl48QvAbvxfXk4rrXpLSvw3BJ61/xf841wvSQmBk0+ETGmq409GO4flaHv931/S
+ Sec+ulkgJQowmRZShUXFilXswCVUiGjICxn3zynDj1FW5JHiXFVBlcgouXe6J9XS
+ XgF7ts0x1XWYr6BfTpx+tp1DAzBNvrPiRX8Zt3R4p5e/+oDKOPMMKSes1kq1AztX
+ IH0e0HBXkwI0bDFwQ8AlDidwU0H9j2NvvlURs4UO7S8MVwU7NnW87e6n29U9fBs=
+ =JmXk
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ/+OR343oPuf8rcRG04hMz/RVmh3esYzuf9nXhXaX2dHM7l
+ x3XAar8QTBCCGbX/GWyYI3fYuCh4d60AUaF9mF5WljoCsqLzjfhOO7c7oyZnXM1o
+ p27ubDV41/N5dV6AGM7CPggLwG1J8kCxoXdmzz0OiqW5kTwuaBj54KrA72MRiqpW
+ ciHGA4iazWbYNtw7mNRs1TZSj4t1JGHQilGAjyJotTrzHl0Nx/7Vp8EzKQDSenXZ
+ LsvpB/47eMiQgxkoi/KqUC9jjBcWJHgiFc16TaSsf4p03s3Ykf+vkufTk0HZ2T89
+ VZ7gpnl2etdJ8B6hgAOE57NHPAM+NWwayLWkf1EYIMIfpVCbD4ht/itmdmdu0wJn
+ /jhmu2HOliJqIOgxu3seY5suoxtD8exOF3Lx0ir76yox/BOWCDgQPQD1k+OF0kRi
+ QpZmj94JAElcw2oRgwfHmmgzDP7Su1KciWhHY/FiDrh6Jjcpfri3BK7UOp/Y2hhH
+ jn4LY11KZFFuX+BTl0cpUnrC0bSa+t2ozur/OAlz41b3DyYXPUwzTamLBnxpvFXe
+ fUcTM+vaBHxNCj3rD56PAdboE1S48Gg+SaGfX6UuEtiKOKX9/Z03CKyxulFB0+1P
+ YE8Oecs3Z0GIOjndN8GzZrd4WawO8xNeSzlvoCPoHGNeDugNWSj2nNR8Y3Rrmz3S
+ XgF9IKzQT61HTVr0UTQU4P027AJybW5fN+5Ss5aQyu8VmZQ+IGcyXPON/pnTNHnA
+ /8av/X1oF9WT+8nH58D+/SuvJqPjRqIzgsH4snSdZ0taOQcAsgy2nxrmobgw10U=
+ =j+5I
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ//YWqadDznsC+xH3Ar9YW4K6vnWH7rs7AV3Wter7Fe8iHa
+ QIDddf8cWftX/mZIGGYjhzEbyau509Z2Dc+rB59FvpOMVV2NKFWkCBYAxVKTjk+p
+ maq/C3rNlatDWsGgZuzVhKm40FnOW23NquAUxcHYiSXXRZl6tvokdl9cS9jF6QaD
+ 087vj9pCnCsQT1BtXP6qGSSyQO+tJsIwR2Jl8eghbdPwcnm2FLL7mfzn7qLKxOpy
+ JO38tjJstRlXsgIOpcQ/7Du36kQMxjeWicvVidYuP+KnsP+cRyxeWMsYjd0VX4XP
+ qaAviYq0zSzd+WV8nbdEKTflxtF46Vkjzn+/HheQUS92dIOEngEPRtxVbrMEoiOk
+ gtSdXnrAfiFX/djj/74cv1YO9k8pZHE3qkkVZHpXpv0m2OQYUQ2EMyStqxRKNqw0
+ I1ra+NykmEB4H+TmGIOF2d5gRgzvZYQ2aWSho3MYb0HBLL0FgPVsHb0jzjfWGHz4
+ Phify1XbwKdTcK9xvCIa6iio7SLru2KKeT2MhJPi/cfwnHAENrt1uiCmk3HceE7B
+ sbEDPlm5QiAQ2KI3RGYbD+kEm4x9uggYO7tqOBBLywKoYRJC8f8GnfkmkftesT5U
+ wlZo5w4QkUOeOHei6qgUNs/mHhCm9bNjvlWL+hHm0uUc6FSjREpcHdLFGyJ3swLS
+ XgEEvvqF98ewdnAauGF1Vi3OwJU8js68KUm9g+YhWixuER/LbT3BoUBMusK7nPPi
+ T7+3R8UU4FIw6UmP+87WwYsJf5TeB2jI71hPSWDYUGAmmlCywPGL4Oap2wqnkjU=
+ =LpFV
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdATZFk1LUFgh5SiDHfI7lgEm50HhWiFJHQ2Pt0RV49uDAw
+ D6hLyiqGzpF6SfL0NNd6skIoPNrD9InRU6yMRnFrbtfR+1xUADHhHGLaCxlo37sa
+ 0l4B1Jwr7D+O9XT3uqEfkkFnez1QXKTp+MvOZUu2dpeQ1aTzmMdmYG6qkfgnymrV
+ oCtI+0RXJf+WQ1uSKcw835ZYkoznGTXNiHFxI6RWI8LzAtwbaj0xeZI1q5DLlTO9
+ =1CKQ
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAvBaS2J64rZtQxs/JCwn9LekcVUPrHMU3y6VM/hg5vDsw
+ 3qSHMHGrdtU569joPGSeD+sf5gsNz/3IC32ujbaYrgxZJigWW2ENl9MTtP1jr3/U
+ 0lgBccWGfw3xWoFpKjWTJOaxvPgoyKK3VFHselTAFQxBPoO3gS0d7lsbyZSdgWwp
+ B7w2p/KfYKktVpHnV4OuwhuaWID3ArecA8YXmS9TgxKd4QjeSNw+x63O
+ =LNgx
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T14:03:45Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAApKPfxL6WTZ2skSB7qDCzGts2anYTJvLHjj3T8I6ly6qn
+ LJVvLidyrrFa4VaWEqIsy6T27w+oguSCq4DKd5qv2rMvMRy4WuUC672htw+MGsd/
+ /DiiKrWtxF9ZGKYCzqjlirt5BEdfEhLHhzo2Qn2UKP299lcgTkyr0trbBVR/Q0Ha
+ nFHSSGSInWtuFmuVpkDYMkAODpl2h1yaIZ+D97eLtZblmauoYW22Tws1Y3PmvC6c
+ GewD/U/HqMUR94avlmjsbt8pMY7pm5+TeB5Lj4oN8Zezp1zoKwwOeuYXr/8q6117
+ xQSaSd8NNGxTOmAW3BKOxSBcl/6PoENIQ/RERJbX1Chg0KRY/Asj9U9cTgGuKb8W
+ ohEgYX5ayjPGYf8NdbaFtDu3nXHPg9h5OBQCa8fXX8lMZap3Kr/DoLCuXmTikbA+
+ 42XQSNYK/ZyinLjk75UWR78xhWUUAV2TJfVCzGp2L5l6naeyitwF/Gub8MldaGT/
+ +/L8zwbkysEi/N7d60G1hcxa2oC0VyUA285Guu6J/pL0fdLe2s5DzQMlIDKVuH3l
+ 5PdqmAQIAlazj8JXLt+gtKnrUCeQD3RDdn4jlOHr+yEmPxuvQViuyr2MBKaFErF8
+ JHzuGIps5xM1thoqS0or0Blwnag2/BiVYIuCSdS24p1OJD/Iboz29G5VtPJVNmDU
+ aAEJAhCAdlt6l6f3mrEis35yDCnMvveg69x7r6vsIX2hVTrqPLlp53CKx5Jwu340
+ TmWdjEe6+mUwv6/hlE3gYiwZUsRWNUEMk4yB4DS4hdVYwMIQrBe2Pq1KBT9XfPM0
+ bun9l0iEVCK4
+ =yc3e
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/tickets.sops.yaml b/inventories/chaosknoten/host_vars/tickets.sops.yaml
new file mode 100644
index 0000000..ea93ec0
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/tickets.sops.yaml
@@ -0,0 +1,236 @@
+secret__pretix_db_password: ENC[AES256_GCM,data:kAOUjT7gw0FDqO+xt8m3wAhOGuZTS6zEIQ==,iv:oPAxDzz4ellT5MxUqw8/iBYyiTMf1b/Lddj5E0iIhWE=,tag:r3OTmcSjNUETEmOzxsMhxQ==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:08:33Z"
+ mac: ENC[AES256_GCM,data:gyf0gBed5K3sEk0bTBPbNa83QtWtoLx+NVp78KrxxfyiUuPu/5ziWPKHDd7o9TQvXZnQ8isVy2BaTTwR6tK4AG5+SO2ffV0a0/uNx3/jUvh56zQFwA6LTviEnR3vKvKPa1GH1khojaCkyMpYkb2KbMnbrGIt8qqqDcwc1dMVv4s=,iv:7oPpmfeAcWttEaCOiL2WocbhoBaIh0Y33OlCAYjq98w=,tag:KTN+7sxOYEfxGwB3OXvUIQ==,type:str]
+ pgp:
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ//QgcmpPHpwpOIlPBqZ3NqqVXchSGkz63htequ6/0AT8gM
+ zCKpuozwIIUy1yTadwOWujH+zdIATE0+r1f8YOyeedqYayWjRzuNM0duL9Htt+Ak
+ e6Tzay2G3qDwPO7e5nPMLz8Y2Qi8SqFEikD+n0v3voXktG9tZNMmqgN4r0aJqNYS
+ UegGHbv0QEj18ku5WR4OCnLmPMrhhcy0bUDnAbco2vBpht4WZWEZwdmjAPS3WamS
+ y3P0/fLWLj27hPk5XiC0T+/uIdJ8HvdCZXJkNc/RCKCrbMCc2cPTim4mxD22EjGk
+ AzX3p7YN+r8RIKoQkEOlXtXP4pzc2w6kP652nS/ZZrEccut64wogklL2u/csPVvi
+ 4sX1XyUDrP5K9yBl/N1wdYhJdmwD2v3Ofw9uOu0slA4id8kHF4cWNAoIENCfp+nc
+ xR/IgJoU/akVIML/dYsXAV1SfnEeDJ2jC3P8u9sr8XEj3q7ZLlxvZpYiR1N17lur
+ UkusSJt5YzGyT/GDM2OAH6QdHmME+xaojJtkRcSkhVWhfRfZiXBZzXq81N/5mzNq
+ 0yFreVdB3IhO3LoDCdyB0Qd5ddnKAhngl9krPhAqgVc+z+Angr9UNCt//YlCmgZZ
+ jW38vYVosy8yTRUjH6SfxUZiNm/of0oenMzmazRZ1UrPyg4Cmcdu2lCyTK+tDvjU
+ aAEJAhDetX8A2Kl/EsH4t07ivQF9Vgvkx/m6/ABfZQ7oWGnVBXs2iAvnbJW4OF+m
+ Pz/kJ8pU9zfrAi58+RAQVR5PS1WQr9Jw7MBQMOME5O7PPdalwwnCYBhjlR16ZhMZ
+ Ear1t9yUc/Ng
+ =bT1O
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ/+NIQcpj9/g8YirZJXsiyh7h2SHdfgCW6B81Zlc3WmnhgH
+ hqI7MVA3xrNXwdNLr1vIFBsrCE6vDtHyT6yX1lr56aXMTc89RSFQ9yVbc2wJNf9w
+ JJkOkPpjBOksKGyMkG/gP4kzPiJzSEP/Lfs0n9bx3nPEedVHH2vgEXresSn/Q1Rj
+ cXh43oSdGo2/VzxRHe5NbS3VcXiyMJVxtIocOhdObnHN+NzEgRxPsIA5OBPj1hs9
+ zcN8p2EqP+DHFpV5iaPjtaTMpOlPxOtpCo740DU3mFD3aS0veqWyLEg2WjTrniTY
+ rIPpgdEwZ1rBLQy5Mwuna7n9BAkI0+nMEYt99eWwtObqCBZQApxd8R7tJpIsSbEE
+ 4OgkEGKZpXxlBM0BEXcB5QORx861eUStr91il8SFLwksisXeH85yAzASAridMgh4
+ uE+HeJwiBBWHGUXz0sLcGobNqC08D9WX6sFIwEDtICUsioj3TuDdwOl/fvxrJOHf
+ UMXbaliRTbwpco899kWawGEoqw2gPK4RUu35r3RPbRQnUys7qlg/nsL7I+6rQ6Kj
+ vPrOCzq/lYzuyPp39NN7SSZChvnbenLnahbNWdeR6DWhY7JKJcigSNhQJ/e9NkFa
+ gjXJuqNKdiXzsQ2h1IQMulSw5LTeAjDdCeMcdYLg/1SPrCJb3N/wQ3E1qlHsX8zS
+ XgHULxVaMdkN9qRS/lraZnQct5RUwOhmhfLX0zTdZZsdodYFtW8ZKx28nbm5CVrG
+ kpfLo1Hrm6m7WrY3h41PRFaX1Aj7UPFQNPGa6pAsoVlZo9iUqGYo99et6VxyOFw=
+ =2Apj
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ/+Kp7Tcpo50301mFDCcOo+pE7KafirFEL1496eXB8INaJt
+ 8/+iBjIZbY3vuu19MIA9zVl3+57v+0TeL86RLA3yuKzd+gfhwvRjgJHiN9e5pSlB
+ vN20gqnEJJSGHRYdp/GLx3sUizvMca4qBwYD3QfGKLp8bvWanvIsECiqfStToR3e
+ nw6hYGBWMxlPmLBxZCDkUuqNQ85kwSjVx8X9vegEa8cK94On9kfZzeRrfkvlAhnV
+ p+rQFDdI7v9U73zsickCz+zB5Gf0mpa4wIR1PBIuuapq3m+g5wt8N/Guo6dk+YWa
+ TpMeFq4ue6QnUv7hSgGCyyLTnb4WNUnZWpKRn1HqNaNlmtR+wfgI5ef3giOm87Ho
+ HhwBFP+VeFG4pesp5ealKRaGvb/31Er0IRbqTVDgG1p+zMZuLJjPSAiZ4RCYhs6u
+ RWk3HtWGjwawa9dLXN2woxjPZv7sUMKgV034Vy4d0DE2XBcVXVoKFAyk5FBzAxKz
+ 6WmYUWaSM0X3z+EmgorqYp3uV8+ZpFEtZhjvmQCPsp7hO0U6S6I4j26tYjX2luvY
+ EmMi6g+u7rxUmmdLRRZ0QcfMAc7fXTRQNTY6h5JCfyvcdvGOcN/MByk4rH8beUV0
+ RkYSx8H9zAFMXPQtLL3iMV6EsqFBHDpQoYus/LqyNYbMoHUA6gzJT7KqmfXPT8nS
+ XgFRwH5z29+AXyBTlv5eb0oCmtMvtjl3qctX25P9CZzHOdRpe259Z1Pwx7K6fxu/
+ ti90GNTNGCftKNZdNOmbGr75SphsHTjY7En9j0tNoGFj/T2HZHqGssZegE+WWAY=
+ =5ojj
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1ARAAuRY+6/pUPM8E1NUJN7YI9KR9Pomtwumtjya6X8f8gV1U
+ QQuju5/ZP217UrFMf2oVICm0txGtoewkHQ0VYYRcp28GkUJuyoXIbjFCgAoMreqU
+ HM3wG++zMOMp61InyqM5NjGTcu3i1rm6FwYKEJ/3hX16P2fjP02AWcne9pZH12n7
+ ZxjELQ7EJ2BbXK9Gm/s8t5tMV8/W+DV+b4IbzJehQ34bri7pAQE4xw/igzoc9pW8
+ n8nRxUaeJTJ0ec27m4g1M+RY/KfBz/EU3sPJH0KGj80p5AlMMYwFM72qatKtPwrG
+ 06OC4M+3/87teWnTho/KbXZ/q68cI0YSjjaFNdvWGEzjU0eFoD4YP25CTUHjlrUg
+ 4UkUGwMms60F3g7jdPMTb2aJago/3pD9aMrynDiexC4YwO2rTbVLwLSbBXdrxSdR
+ nrxKUPPoPWUFaeylpOLV+SXwVXjiP0F1WVtViRHFZa89zpvKrLjnFZuTiSGHTkb0
+ q5s+3AnWElGsm6tjY+03Wp9FHznvazULVWGbVmStERBAVC04n2v3sNSFCXkv7g08
+ ttnAPmg0hDyVe8MsseP/ihlK594QKBz9KVFLimYY++XUYxFrIo4VyxxztLqC1DJN
+ Z5uHnS2iZkRLorpCNbfR37gEo1GjYdzJ6WllwqhzvrkripEznMJtFCzh6yb3yaPS
+ XgEtooPu7XfRmsumoHjZl9tqHR3g/iGU3/jefka3koEGHWEoYaWYfcYcYVgcmebt
+ rVD3mVeqqkDu5GFiRDNC7VyOrf0lUDYMXiZBEPgvZqqJSx2v63PWkZbwTsd7RGQ=
+ =wnbO
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVAQ/+OGf+qcGi/iJM0D7cGWh7GkczndjaR+B8KHiv8VDSZ7R7
+ BU926yUBwZKfEndiiyFXo7SFItI8bIQZurszLVyajgiocts354mBUm0Ilx9KetWG
+ 6yFaQAq9hqSeJ2wIdLHL65ex6gbeR2SMvvxbFCMzImWcmuPmJuAWFs2zONq3iear
+ Zf7o+beuq9iB1udiXr9vLfONaLUJSCA1DIbqiDxyv7pW6ZaEQqNCZCnzvBLM17fb
+ sG5iShEoJ8vfdnqg5MLXlkIZ4Z4FnIu20o+BgKVJBC2W2df6MEsNWx/vFNyJ5E/O
+ d9aM1mJ43x709CpB6MfqR+ARFNH5drgwzZYf7D6xvgRGpmKEETmQTrF0cGf4c+ou
+ wIlDCduZ7vvhsujGZHKR/YlS6SmpKiUE2nwWH5Jj5SeWXIyfFe4K0Fwm6Jh7PZ+U
+ maFO19kPpgZfR1L5yWWh3ppNs9GtkCHTckHdvYkWtc80giqZNn9AEJLf1Kk3wwCN
+ ncyEZiqmWvwBYSMWV3rD5aEGKn3qq1o8J9ZkKiwfgBXRkQakh2rDXZG8wl4QCZk9
+ NN1cilB95lTLWgl/JY2YuCh0BDAoiBYmDZoP3uMrwmuVbgwPIclkU+4BYMM0WxIZ
+ DqDEcIDfwC807L5L4PSj+SuyAeo5dHbe/bC4DMdnxmiWVd7QBTdKsjBL/7HmsD/S
+ XgFrfQkKnwrK4YEdCjbto7qbi33QKA1MHbkv2rCRQlqadFUJxDWC+EsnLqWMtfqv
+ 2Ou+99RPBgIzHyzaAFnvNak51fX/g0NlHVX8MdKrBNvmbFCX4ToCNAswRqvcz/4=
+ =ocb9
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fARAAkAdGVS/2zcY9893Sxc1OmTu+q4z3iggKIUTtMZ3hHeXG
+ EYnICC2grs12ywwq/wqLqxsIhPM0M2TqzxleDq78yVFlBZ6OZOJokZxXNp9bm6lA
+ e/k27OmuF0BQif4egqIzYTenZ4X4L2SzUZgTM6Z9cdn87P54puFNTjyyf+VFJn17
+ afgu258gvxxCeNoyhynfZlUiUOWdatScyj1HEwlg4ms1saHoNlwTuxbjgouK0i0m
+ XonSZzbJBm8MLDLDIDdEOJA10/dQSDr8sQ3uuJIWgRtAiZxTiKqy0h2aR1/qswjE
+ yqxvFooRFh1q3vUQhTTV0YL4tIs1qHpSaypcdHGGJtziT45JjsCbSdJKQyIclaBW
+ LxV4jSZwxwshmVt+eNSKeZfM3TXT3IFs2WC8tKZ8e4DoZL76wAS014HO8pdU0HcT
+ zeI3ffByydp7gTteKqWXJGx9IE9rme1h1iBH2+bdkO7fx26ApSz8amPSbS/meaiY
+ VmfWROjv5qGAmmHQSxlm7ZRkjOlxAO0DTvPC/LqYMByyBDWxtpvsqOwTxv2Qe5Bj
+ J+e3qfhJEeLTm//tz4oLmcnEPcHjhaD2hAAtxebUgkpKLHBTW1E4iJMsy0HfnzLd
+ LmhnC019vWDbOMXl3IHo6EPV6aSi0aZZF0xxDBo+WlEtkhqxq8I4McGtusuweyLS
+ XgFBDGCNbgmKB6pqWyooFj0FkaCHLK3K3xwq7unmti3AHQezu1Y1kXorZMX6RTOP
+ lJBe0n6mpzUDVEBylyr8aAEk7AyxnBJdjmWOytIh4b5Gfff1t6xVyE2h7L7he/E=
+ =ryW4
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ/6A3W3BMhy+Op5IfHSR1i5oM0SnIr0yCDHHRKLGYxK4tco
+ +uw1O1Fk/c6A+WGey8dF3jEu6Gc3N+r0k8XSBrGx4aHIKRqFqbBJ8gvkNJPAVpXd
+ Tdtnu83t6wm8oKrX63UIaHR7DRZ1JL9okSYBPWWveRnFHZLUiFIMzKFl6+nL2le2
+ hxT/L/hzzu+WcMRZTFjjmKd/Z5mGT6BokBTKZGfCaFDJVpyZmJO5S6STAYNDZOfj
+ G4oa/evm7lJSPLgF/92TB9WjDshKh7BmZqbCX08KJykcXqarZj9aHAPpB1atRss6
+ pfJQQp7UpodUF5+/71BwIQ22p695N2GPKO3WnOGTX5WwHfqLedAc0fnxaeFN/khN
+ +owZaO4r8SXcTP7xJVpW0OJC3Yx/Cp32TF0J74n/i9+pQlxOBg6Wt05afXBdIOs/
+ bpCBVyvTFRcU9ldmfdaPduuUEhyaMB/15Mus/3QqxHfDRPNtMkMKWcZmjzOC3wLf
+ 2SUVgf1/JO7sQXqkwROoAy9BTD943/iVw3dBWHiVQ3MhmcPPmwkn5Yjwy4y9GGTX
+ FGFC/QxzCu6gQlH61v1fHSAEOi0QMHpZpuX9kDAzxzWor9eCC3MXMzCRgbqvFeFg
+ N6ChnU3Xq971QmrhByaIYa19654qEhYhlld0WmuyvIpXP45ok59IWaRQ1ASVPcjS
+ XgGp7LQZ0NReeoQpMVgA3c27T6a6KO/1iP7ZUAqTyg/b8ZziD0MEUmsm1G7TzjmN
+ NpJNw2wYM5fSCzQle0S8jx8GKY1LDp/J/V/dnrT4qk8eyqpfJy9KRF8Yo2vzYa4=
+ =PS6b
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAu5bB749JrrKEzoAgFu+TD5klsOSu1Ba1dsV26oNsdmOY
+ XY8xvMe4A/uJOtrcfuFIev5Q4KVNAoMECOiCD43emHenY80DGTNvJ44/gsOALP6i
+ 5bMm0KUJW0U8ZSyjOgkYjPvLleIu/WQ4DfwMlOYVtjHp+2k3OkqCx8CvtrGNsmVc
+ Ax2zucT3LwhxOhdnDjczSKXd9EMOU0GsKgkbrIzXlzatzxq957tQ9smQ5zu38N80
+ ULRanZzH2yIQm3UpeJtcEN3xMKUGyQwuHqMwqNhyNnO1b2Qo8InWngMGEmCqzhKv
+ oTYHusKutyYWgnIxcaVAMO1DWq2i0As6cVAqEzpEAFLodi7RiqofIMfSbMu1W7wn
+ W4Voc3mQ2iSCDDUJ2DZHPLhhmusCQcpWK4PIPr8sYKj25tnx2/LTg/sfyW6HOxhN
+ /uGm5OC+YNCKyv+TykYOp9Lkn0gV/wlJyfLpDOlgXRkVOsMMV6vAsrrnbT644edM
+ ptnAxxbOQYVdHBIKU0se0MSVwrO7FaPuYBFa/DY8y7Ix6Ebpsjg+dTBbA7IBgbWT
+ wJvKqxkNDd+LPEk4kBU0LuskKxgFS/N1seM3ayjSvVZ2gD8c5g53Ys4D3dOeRFl/
+ sJJ4QZ2/vWQjZklcJEZwT4Az/rh2kzIFkYlC8Uzl0WnmsMOZl5EX4gyCwxc/sjHS
+ XgHRlbcfIb487Ls0Wv5i7VXgcjkC85j9pgXxa/kdCL25bw2QFFaB5oSFNbWVp3L/
+ FajZdxADrSui4vtBTP4EIHURnhZhgBkixk8URcbxvadgqycZljNUsicc7dLprtk=
+ =uDEz
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ/+I/2oJSBffD+Fjz+z/7vbb5f2WwiNtvq+xWW+KsmYgiHt
+ csrM556L6YmJYbuZ1Vlp4/M1Ld/rTtCZeVtKrLLgxgRq7yFBp8u4APjYiHqDrcD+
+ TJLiiARG3FRmVVNfailTUbyglOE5N5jD7hkgljcU7KFNVXRS8fpQnn4VJzobnlJ6
+ KFlLdeNjBO2D7AZZeckTPHPnzu1WHUR4fu7Jd8Kv2G/8GBwy8nKP0z292Bl6AG5c
+ i/OdhhyAUCcCHNSNJrcx0BZOWKHBn9KRgYWKp28Bl1GsPuFFBmrO1MyyA2VmIpTH
+ RHwu7OMThNR6uTaTxLAy+dtnRXWBiwyucLvKfXe81NxgRbtS1HMGg0Y27IXrgQLd
+ MMCX5iLMXnDf//8sdL0LHs/Y1LveqAuYLUxdyCG2D2T+8O9/rFSx9+w/UXLmwWV9
+ KPLdv3Ovs6AOgYopmHd/IQIh8WqmOqZdeInthObhk/RXL862AThZmusCd/yGUe6N
+ hevxfeowkBMoU6/aj1QWquzggwJCox23GhUTocIEs0Ay/8PxMmC4OFSA8hjs1AQq
+ tiT2iocaKQt/pvQ24Pe3RiGUASSmNvN3HrFGeB6YyAhz5Y6Uknz8Lo0JbiLO7UED
+ VacGkMsWvlEyhRdtjm7kDuMP7EJUoI0od0K9cuXehaQBhsi4BBEORlhivHT6p2LS
+ XgFXb+IW4nFRfkcBha734mZVc/FbH/31nCU5dbn/NfIDXF7NftWktbwP06L8Hag3
+ R0bPQ7uv3D2m4oE9Ak2CkX9yvhfF1I7yQbBMgG9jWHhEHb9FFiKgqZEHjVvNGek=
+ =qePr
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAtInx3ggOfOtrNqXnRhHlzf0HTDmMhdnk7l7n6s1NLBQw
+ kvQ3P4seyuLl5O+g2qrvcsDybKGA+TkPkcIQuIbkMW5MaqmjH4R366A8HYtGpBaT
+ 0l4BWj8Phod1gJ2dSHbs9oiDcmJF1yYW/jlv9kIS+fBlMcrRMNdmPX1R3zLHzIN1
+ 8HJLNWFaWXNF1UGxsMM69hpmAGs42eL9NTWByquQEmy+lbaMcm9adAEOwFXKZCYV
+ =oI7d
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAA091HoZd24FrQJyK5sH30hklq4umbuozfDfR7axZ+How
+ NTGfEDYGsMtxiZ4YK8sj2OSka8Pi2hdawKR/RfPcUxtfc+tseX2DehjSt/GrJ5B4
+ 0lgB0CpOmj54WwTQ+PxkTmavjHozZWYGuvAD8OQ3dSKgFDdxKgILgIjUAgwKGXms
+ H6eIR8VhYvtyiPJH1yEm4GPFWk1gHHzpE1u/HuUObuJG8KOl10WW97E7
+ =5I37
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T14:07:23Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAA6jyK4gSGMO/9rdDUfrFTO2DB6qpMh6ghy+koTnu0bP/C
+ 8+K0O5kz3fsEXjd26W++VE3TrGpTdhXLgSkxjtHEUs289yi23Dt0Sv8ptDq3+sSD
+ o9tbkL7VJ6tM8B4Xi+d0bHapIS9xJt2GgAT8N1ibI15uSRs0vBN0/lpCwK+Jstge
+ CH4eA/651Qp6v087/51rh6qOwqPoesT9FpReSdLIcxN8JL7w3MYDEO4gZuoE5qmQ
+ 29f0LM8+9iqDkUlPY+hKk3kHBrw2DTkl292KslMHIoyJm7f7j+XmUlQ2TgoqN7T2
+ sBL95kGHYFVRr4y/m7tRWzhFv9z+HFggfPaeVwpF2bbp+BObuLJZYnyWsDcY8Dza
+ Y8TBWKp2Hiii/7j9Ps4Cs+tqCVsQt5FCHiIhX54/2AJ2qKRYol1Gr+Z/CYqEQvYi
+ DGkd8p9uc1sWUccMaSZBEkxqQPPrELwPjY1kcD4E70aremZyPuH04r5smk0bIhtU
+ 6UvAxy/3OdQQU66PpqomeZq6LpE6BNinJMBxArknVTLibEm6qCi4ddiA/na9aFvB
+ 6P2kbtpkz7I3fS2ZAnQTM418k+ANllA2UBbZJpv5oQkw9NHZUDJOMJQUpMYZGyay
+ IQIyZWOwnxFP3Hh3kDjJvbVTL+knhI2xXRbKb/sSYq7lipV5Eu4tNIYQIL1CsZXU
+ aAEJAhDDXIMCArDvTS4SEijHZPxEnAUyGJ7U7vLrHHHbsba1A6CsHBmCUxX/YLvx
+ AzjezwcHhbn8goITobK1bcZZLI64rxANAMF+H/r+18OSDAeytrvd9JSsiSPqo5xc
+ 2Dscy08hMok/
+ =nM3N
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/host_vars/zammad.sops.yaml b/inventories/chaosknoten/host_vars/zammad.sops.yaml
new file mode 100644
index 0000000..e47831a
--- /dev/null
+++ b/inventories/chaosknoten/host_vars/zammad.sops.yaml
@@ -0,0 +1,236 @@
+secret__zammad_db_password: ENC[AES256_GCM,data:ThtJngNvMc817rvbjMjjbnp1tBlXPdAg,iv:GcQHc7p5jFcyxpTcYsUOA8PvD1Qy5HxVZXHcAuL19Uk=,tag:UjVxYkU26/zkBL1eKDfreQ==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2025-05-04T14:11:05Z"
+ mac: ENC[AES256_GCM,data:GNOhRrJkLTjovRO2cZgeiRcqB3TE2sWxD220Z8GynoUV4pWS20vOKvaqwxU9seuD5Msxd05JzLRVTCtP4La6HVSgDekoVYKz3SLmdT2Hev+fscmfr0uojRi/5f+eCqGMBEy8Xs2Y7AzIC60iHqX4VBBn6FgkJuTyS50qn1akoGI=,iv:EIjJbb0adELCNBoRsdjsVvN19v4rKCiVmxcCAcnY7QY=,tag:GzqchqorbDN33+SfspGT4g==,type:str]
+ pgp:
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/8DpUNC0LPBL+3I44FbZzzdo0uvCWBYMySESqv+Gmzds6X
+ LJ9hwPPw7Uba8WKMO1SNXbTnO/omQEN6ZtDzGZu2datCdog5iaQY14+y06NTd6Fp
+ JK+FI7fjEOzTj7THt8Zzl3Ymnl2hwkyDM+7fWViCTwa1/kQ11Nko5IGZOrZ7GUjT
+ RIiGWhfczmj5asLvgKbQXJyg181LIbZ0Sd943DVTU2q2pfcl2sxopy5DfNdMPoUp
+ onx6S4ChxtbnqZAOM9jtI9qDn4kwTo3usR/pATUG1cECj7syCA1qEQBQQrtCZsG0
+ tXDKLoaFFRydVcHZ1hVYoeW3aVg/x4hum0EN2cKVdWf1eaHn68Xp1OJ5ZwsYsRBK
+ /DYyUnH0i2RTwTAHUC0IQzAPWx4yF5PTxE1KwPVTun/OIrajH9/eX7quRPdzJIza
+ JrAZkmwDshGjNGf6UyE301aKvW5Gd5rrpIT8r4thaOQmrTZZFaUri0wWazRUZmAc
+ YCgqPf4eAm+Z7cwA4CNOqoB8BLLIXLd/VxaLk8jovNr6eK5boi8orfuqGo+r9fdG
+ 1TlyWBDty0ksayXM7n3Z5SPuMkmx2BkgKbN4oACBVJBanNJVe5HLKU4vnH7eu1h3
+ yUOJFMJY1VmpR4RxAKo0ll/dpfr9K9ClaE+OxYBwX+qHFVANqi3cwPs/FLB86g/U
+ ZgEJAhDW4HQ/W+riGu26FXk7u2r/PziPQ4Xl+MUHkW6yzT3n40RTh8jOvTx9Deo5
+ Vide+3FRIzb/jJGWnsECSE2QlJrvWmB0pOBqDmS0sY3igMyAW3bpDg6yJB/FNh21
+ dl1+Tsoybg==
+ =3KpT
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2ARAAtHEhXYqci78zS60h4qI2+dJPQGWbEHETf7qDljSONSX3
+ pRZTmst9W5CVp4MEHuzZNl+dhL8kxQlT77u07zE56RMHoJaAjmxhWz4XA2JqPWAt
+ t4BKu3fMJLy3DctK3rJPUZplXnDYLFjwXxZILPr8yycz94ZSCHWCN+CRNHnzmEAY
+ HgjC3ttOBv8nOUHF+z4EV01pXpsWSGraXl/KJ+zXsjmU2auIEdzy9MZeA7Reahq3
+ KhubDNR7c+OMDK1QcQv1u23TlvgXN3zbwFrPCMInrx5FaEBacs8Sf0iHO2MtO4q5
+ TDP7/NOOfdar5qzNivudgOSbUCC/nU0BZ4rz/ATHTWwObbOgTSr93U5hDFwJS6YP
+ BT5q5uuPH0C+sB9yL9JT32jLzpHqNHkgNpavYjs2xB2ATULnXycglwm/FN7Uqgg2
+ 6mDXuRh/ixPe6WbOR1+o3uKgS7UlQU9mZKDjB9lirAkC5VAnsnEW8xD/XGYKosUt
+ uXqb/eq2iwOcZ/tS8xPHnzhY0jEQc3zSebGwgIhwJIsKOZSol4O8g8XKEnZb5kAW
+ WSVTrIcJIejaeiMlJsGLD+03LEWW5lOvICeX6NKQH5sR1tbxW4OT2ni+4l0p6qV1
+ 31xk4VRQ9/RgUGAzn4gYy/VehR1IO79j73+WedpyBL0mY6IhohVLcHgjBzc32oPS
+ XAHSTxVs6yvefZ6RPXWjbzHYNXizEBUuxS/2GttWmP+UIzlng2FQt2T+eipn+HDm
+ WjP82sptURzQkqml2DF5Y1omwq9O2SaBlFGWqmQLuwUn/UAOlyCb13uqgbzc
+ =TPj5
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJAQ//eU/kEWfPMN9oX4oDzzitvn2kvP6b0HrXpFu4ujY7JtPr
+ 5dOpezdNz5MnbH8JZr+GG2xdllxF2DYSdZIE3MGZpvGbmmAthCH62ms+YAVX7+NO
+ q1lZ5OO7FE6ePin50QwHMRftluTeNt+7y/GiwTKZhrhSZQtBlHXFjnJyz9x0bvV6
+ F75l3PJstUIUjDr/6FaY9Gaaqb1c856ot3AiQY5PtzTKV7IWRu4tu7+wxaYmjZco
+ uGSyHmgZmUR1iUACUIl/vplA5Qdb7sZWhMJi7THS8nnRbCsOsmIsD+Jj2kjWJzvp
+ BW2GP3i0xa/AZdjwMVNcO8Kk6UQxnjIqSib1oYeqYiNBArDrRkHdN9L538WD5AWw
+ zrTZB8IoWSA3PdHBoZRBLU0JATTYJIXEwlvSm/1agX9QEPHmTFMZts9TtVJQ9825
+ +qlOxY7huTXfa6dB7hufduOuRz8p/sBv8ZhkivCtrH6iOjGL8g5wjIMpu+GCx7b6
+ /+xVHDL/FpqY9uXVxx3e3anktEJUTRc1dVLdUsPLnBMOFD5gC49zgmhs4d0ZHDzD
+ ako0RTm7wxWui4XqS0663/l3Zoh4GZ7ONU9E4BFmAWotQMZllKBHHnnpqSWEsgU8
+ ln6hzbNt7ZoILTQ2+X1vsFtjcA/wmBRjCUA/vxs+/fSrqcFTN0dc/17tz0cL9+nS
+ XAEtOz4YRIbkzZ7DXJcAP1y4xiuh/MCEVtD6EF56Unkdoj14Cyo6KRgWzwO44g2z
+ oq+xzqjwPHn1sJi58ZaKk3aKj0PjRhFwQQPonwvhEX5anB77kvFu6DYdHg/k
+ =wFB4
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1AQ//UKcywSlvWSmCVrmlNhC9/fgJ0wVvHOzeFW3tt58KnUph
+ jv9DW4J8r3pPOMuSQa1ITu58dcgbxp/yqKSzawqIu86fmRqruuMJaH6UqsD8EPEJ
+ QBdV3KLfMNM5U9Nu2ujZJDMTTMJZGRO9u7BikLrDlq9kjhikAjHHcnNVwR2eIqPF
+ f8h6OZ3WuipMn0q5UcKm599N5VuMmws32SwL69yrDPwDXOBZ4wJMUPNLO+FoYZGS
+ k0GNRuvNRCa5a2jEitB1kWxrpxh32Vc8hoAaXFidcEfMnmlshT6OugJn3FzMWYL9
+ NN28jj06rLQA7PumU2/cWiZkF5GSydrbaUGMVFJQ/eI/ObJicXQVcG+nWr8BIepa
+ cumx37zL/NvOnJXbd45M1mGbizCVnhljGARY+7hvVSn9o56l9G6HDBP0qE5lB4K3
+ C7uJW//kFZtZ6FT+vu0p76eUPP1fBAyMz9pmKLvKkdVC6h+YWllROpXvR7641u2Z
+ Bq0qdr3TwU6KGFw17q3WrTTVmVKSoUXdn1WI0O65cXLqMT5I8cNxSA75pyLA9l1t
+ qByUvrZkYyOlhcr72E2f1FS7V5Glxk2Pt9GPdtoO78OM8smKfMqckJLnVxAqdW0M
+ LrOSvxPY1DNlM/+MTI4q2mXm85e8UKMp2qnYkNXaiOep3OjZts4Rwez6Fu21QLPS
+ XAHaUGeAFKxdR8P5p6hkA08xIVbkk8DN15V1wmv6EsjAWkOISq8d+ZZR7Ri2YuoV
+ XhsZ+Pk+40oTNvO7ZiPXplk2d6dmoIQuFcd1wmfZ8KpSvslWSOUd7TP1sUTP
+ =EZX5
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAtBXdUbllfV9ea0OQQ1OAltYwKWiIaTomyiGhfnisR2WX
+ PFTt/iOBMw6XQrSrO37MzHL/HW12o7lEfAlyE7PCdHo16utmxkx2N5n6JJW+Iido
+ 9XuD2/33KeZyxVGDG0L8/FavdNvTmH2gP0f7Y+1p9mv7KZP7ypPpGdrAC2kXG09A
+ lZ+y2Sz5y8NF9wKxkDHdubuKmDrbDbz7x62yF4anFqU+vYNCM+v6HsFq442xFTLn
+ CLKVB6svlsrl4MbBnSaK8QA3dk0u+0fB0HUzM+sgqP7DJNJNz+crBeGRGqE6UFMv
+ bs6UzpnveEhjQDB7DnaLSnq+dcnkO9NHEY/sT55HWi6UQfbP2byEOWdTBxTDrSrN
+ G0e/oigUwBMovkOSCQ80c3WtrZNCLwOp/zFBN7mqb2humbOETYChjdaSsb66+Qem
+ 9hnLzRiWj4JoU1atsyFLxzRT18o8th5qSYsfKGQTgKRxL8VGDcibMnkChwHPvji6
+ yuMOfidzaZvGgR4n38SpmJmQE3chvKCvxfYcFuiex+PJbxBQe5sjk+z0ja7mv0wB
+ 24S+F/KRZ0I2M8d7Cl/p2Ky33in/O00fQzUd8hyo4UOo1LpKrspurcRjSo3qG/+t
+ smR4y2LH24gg1LKFxBXokaWI8lgCFHhSWELzFcW8uKeAQlSbrEy3uuSPcBsXJaPS
+ XAEyecYBkwn508UgG0YV1fZtSjTuXlnJkIIM2/8Vm6vjIYJglbtZahh0Gg5ETWw3
+ 0VHQOx2JauGWJy56ux/OpMsQlk4iZ23zovN5LFz+wOuXWHFU2olzfl5sAocQ
+ =9zs+
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ//SRQxhYLiuKBCn82GWeEJRP7EjyikzsjYfZ3DjyI5EhDv
+ oXPcBIl5wrYxncwBXCmXsgZgzESR8pvJ6nJztbWljvt/fIgkJo5s1LVyAzgTRJEm
+ Am7nju5QL07yvSORooENYCLI/jomjd3uo4tutTzl0ty2Q7VJ6r08K49mQ2coABSu
+ 082Umi0LJHvYHohLBl7XcjFH9H1a8f7hoV33PdAT8FGI4EYWEBy0AY2d08e7QFW1
+ P++Ye3kueuDxpglLJMqaQAz7AM5X9m57A8sg+9EzT5ZEYcvYUB2cy7S93xeHZxq8
+ X3XrChCCZ0Qv166lIHa355z/0KrAZu8R1rjjQehkKJ2eSSBYtX4+WAWyzidWfRHf
+ Uyh9Ap5ca8nenhNunTFkftpYm7LqyTv1jjH1XSraPEVHDkzMo58AisU8tdHPE3xR
+ cfsKL82dbyWvJjvFrjwXq0YqmBYXkOEsqzMj8a3n+EpF9tLuQQEVIifUO9DhKDQt
+ AIQfIJKk1gO/uMh8xni8M8EotxOx6QCdOWYgUBzM8zMASa5/4WPg0kbyrtCQty4K
+ H4RiClQbyd9UreP76cTDMnNr9QZugZs0XQ6FG0WNwC0jd1X8/P8PefisNDamqyL8
+ 9yKW74drVC0JhtMtV6V329n3AoTH5R6b45xAaLXitk+gw8Q8J0IRexoQ9lpDN9fS
+ XAHUEgwq2KUuqal3RvVs8FTCOAgoQBoeBiv44nD57sgP42Bw54BxwdbKEGjaWnY1
+ DruDcJWiF/naXIUcdEhj/JmiGAVf+U6zQFTEFhTH4jlbrWCfgMlvtIBi4ygg
+ =icN/
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ/+MvW8gX8fZA/o60+ZoREvvGBKYTpuOK45MS99LrX7nD6v
+ nut+hn7WSpBl8EusHk1onDr8nsfpNAFVtY4GDUudVHeF7/zNHO55cj83Kwva1OjJ
+ xTTHHiVqOp1W8t7lIy9Yydvq8ll7WLwi+CP8l2eY9z+727AtLAp1F72uefp3bp0n
+ MBMA/G6WEXEOpvwvo/vkBE9pULOlHb2+lds6eobkkIC/+277DpC6btjX9nrSkmPd
+ GU7Qa/oJJiJsaCr6RVFbcsv6QD18zQwMvD5RiBCEjT6yzBQkLfhSFQW3GGNAWXAd
+ zdaPuCc0NMMVq5KiIxIDfTQfLDe640dSFShq+eLtS10r/G4ejujvoSRKqQgA9pXV
+ phDNMvQ0c4sT2mHtcw7OuEF5b593GfBfH5PtADEi7UAWQlMiE2uDhHEHfBNe0zgM
+ 5PVeKum0HVe6JM9hOZMT4riyFjW4zKZy7yMAsYnHpvmUe3HNPQPShHktXgA0UAsI
+ rxe5xdorfirk8e8I1zNnf6L17T0elNM2X/v+bkV3hUehS12IpSexA8PEiRbEGEUl
+ H6Yjcml80OZyJpHJD6cbqkjORU4oeZNVdlpLlkoJWRgx9qT5ane1DOtZBSTQjo0s
+ 8J7CU9Tee7vezrLs4G6xp1AWXvrE52cjkOMkG+oPknQHoMMXtTXHv24SG0VYw27S
+ XAFT6x/xZ+H+EILKXAwX/y172IPzxU7o6naQfB+ozR1JEBl98pKZjp/DfosX5CR9
+ cLI3eZrNJtqNqj45LcLBqYQH7122yMbgmcyW0w/uBVXDEGkchqfBi0qrDKyH
+ =Gtac
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqARAAkwQ5W/weumEoda7pv8H81AnAFKsmI5DxKSjTwFd0022f
+ OmnmH3rMyFIC2jIUfyHDpq4mhipT/M0DWTRcMVlefG8/AEJdz5+fa67MC+2aPOkG
+ rQGHOSJ5wi8g8W0CdEkpGqrPW4bHI/BFpAyDTQQm606O419Mm3g9F7e760uCxU9Q
+ jBPMcg9QWjhZwRyanMPUvX/IumhLCi0bx129+c6ZIxGXCl8cBruqx35+1uhYTBm2
+ MRsM2AEsNKfBP2l+WZWJUG47Jc94L+paF+7Em906ajREhr3jlzT9y1S5MCQVzTNu
+ z7PXCkdB4d+gmAs7MzgLT72++ago7cuc3kQQztDaken62lQ+fJbc/GaS1SFB/EV6
+ x1hVmaJSkS1ewbX7KuDRvP13Msj3NXuzeneoxq1LblPJpnNlDulmbicpm7gi1FVM
+ 6FtkoQV3BiBzNGE7DkKMTzo++vxNiseFMMAl6rZj3MxItcKYp5oh3AkGymxYfTFk
+ miinj8z025yDLcW9aU3WwzwG5C4BzMFZ/n84fVoV+d8fSuEdOAeiaa8l+cdwwC9D
+ NyMu3uUC/iXpVBaybQIFPtXAGGedaZDpySo8LlhK6h776XA5iIj8fw4Tlt9kpKct
+ lvAbClWQhaChIKu5q13R2Z76MTqdjfSepe7St+pYAszAUCNNX4MJsODeFPTVZpTS
+ XAEZpjYxiNJSQf9q8UlBsSWTQTlHpoUhKhj1tNrsfpWL3Dd76pkflje3NFpxi6qw
+ 0yCzw/FX0lGhRsSaOGwQVASmzC3FeFHOR/djYeIlDDK8zukF9wr0SmMQxpNt
+ =vHDm
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pARAAlhNz81r7JHtCKbt3jiQjeDUwrkNBGHNRaNb6LLXgnCcX
+ +ybr+cuASrGTvcufAGtbgTORfb8On37MHhsFv1STmIzAq+Nz9t98F7vFk9P3R4yd
+ jSbWhho48/1g5iPb9XdUNmD4WqUrsz0bslgxyGn30LOnrP9JXceU+B5b5x+OuKjf
+ /l6JA/7J+uJ5v2+EpFcZg+5+/WkqViZCZc2Z9jLgSnXjR554QgIW9rXfbH2drhLB
+ prvQO1NShASCup390K5w3UTDd+mV8qZfm4Ey7PIH82kkUu0QYJKNNFJUC3a6e+kd
+ EGi70YvkjDIeSRIIUNW4Meu30yeC9VPuCI71JjLo23KP3uFYpd6Vt53L6uT3AOqi
+ X7dIDeJ+Vlr2zqF0iMR7rCzwiHU3KGIFYhpmiyI6DIdInamwoYM3RcjX9icOBeMW
+ +PKbYP9+8zs+h8zoPzZEUYvQPweYjv97Y/vnN10I9/ChQXh9Z5jM8XZxlh0AFQIF
+ ph6LSCa+/+YmNmLJh1jTVDjp44UUevNP1duh8VFqmPeP81rfxmfoBlwOoeqjv7qv
+ zHvPa4lvgEN6Q40ezkCj6jMrWwYq5IC7Ip2seKq83P8w4AZCFVNmuDKyaHEci03S
+ TjAxffgkg47AbXXCFYoxI09TtVXIogFO8xc3zOF95Kgio+q1CPK1WuNRSOQMCPzS
+ XAEsYteowgEdM9K+3JQSNKVa+nfSuEhNc5OBfVi20RlxaIBItLcIIjlu713tHp9Q
+ WjsD4T9hawDCjTtNb9w9NKVNsoquyX24qkNENp241S5pbqteW47w86RhnnR2
+ =tVB8
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAe03furGv4V+EcQV8ttYjbun57r3TAgdZnYPq0mM8vlww
+ O9zU4w1p37OeBRvWoOHVEw39AqHzOIfFKA2KIDoKOYrFzIWW6pqEKy/2LWrUqf4U
+ 0lwBeHRyQiFZ0ur5oOGqYMUzcg84eEM7i+ozX+M6Z1Djve+Sn8xT7WsdTwaG5Hfq
+ PntqfU+pbjMCz4vCDb2SLZL9z7Qe1fTCplLpz90Rw5JcjNZja2C+gExmp6eucw==
+ =TVr3
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAKuQFebQ8mRDbMfpM1HNzJAhdV94IH+dK2EGa7rgcSAAw
+ ht7QD24IeGhT5J3RudV5Bfy0Y1ysW2PjKFTN2FBVZKDG8bFWwtu0tPxoXw5hZTKd
+ 0lYBZJudihBuULdV4BcMUzCaNSariUNO51eMZM9xlEUdZWyuMgIg2VETEyZa7xaW
+ Tt5JqYBx9LpIzCwDXpT8P7CRiE/MkO5R7itIwl6LiQXc9OSwbD/Pkw==
+ =lAyj
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-04T14:10:20Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//bdII+7rJQgXCCjuto72G82sOZ37y2AuqtPWZc3yY9Pzo
+ mQdZ7qqAGdKbY9qjPTs/guu8jkBG+vCG+LZBu/vorxmIJWrgRAzdA1Q18q7r22Hj
+ rzzielzrRbYv5So0LQ4PjaBh6Us1hDuJYt+w5NPAKum6t8omF8H5SWsjC7sYdfsM
+ Q5oFxbqsSsnpY3GwYWCgqhRGI0pc71KyXAAmFkjT8bJQcO/GqKgm8nG8Jna9iUu+
+ hdhp/9VVmyYwwWW+5+YnbODQxyo9RRYL4NyKPe/52lDvM1THyMdbZ1dZqgDw0dgw
+ yAl7KxiKnZjeqnluicsBJCGFQjY7JTJ/jmo1P8kusKTpVa599mJ5Gw7KqsQlo0tI
+ y4h6O3RGEqVMhSg4Ul5qjMcMiCv/o1RS506kcmMSDVaCs1aLnN6QOuoijtA7xDSS
+ KtvWSrnV0yBQSEIMgZN+ehXdhDU2vLBBAvDmSKVYAaOAB7mD50y1vIEVuz8WazYF
+ oD/r2PvyOpfLGD30qGN8az2ksACB4ggxKTQnjQzk/hekBKIx6CeczZGN5L0CfICL
+ iGlSQncuw1U6FEgd9OaioA7OKhTgAiacR6s2z5oHZOG08OwO26H4UgdeWgmGNTt1
+ TNOprQ2oYvFtvYU3YKO08lXjk813yX9G67s2r8m+w+u85msmXiBVmejOsnnbEKDU
+ ZgEJAhCkbuFfbKDL2sbVYGiK7FGrMEy0XwBd1zS+MfHGbiYoTxO2SVLlIqHtY9LR
+ RULtQPNb/ZVynJluztUzMMIGM6oHxxOzZSnCu7rikNoPJdt0wWyWEl8Ezg3lqmOa
+ Fwy/yEEkHA==
+ =IOur
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.9.4
diff --git a/inventories/chaosknoten/hosts.yaml b/inventories/chaosknoten/hosts.yaml
index 2450ca8..93ea984 100644
--- a/inventories/chaosknoten/hosts.yaml
+++ b/inventories/chaosknoten/hosts.yaml
@@ -59,6 +59,10 @@ all:
ansible_host: zammad-intern.hamburg.ccc.de
ansible_user: chaos
ansible_ssh_common_args: -J ssh://chaos@public-reverse-proxy.hamburg.ccc.de
+ ntfy:
+ ansible_host: ntfy-intern.hamburg.ccc.de
+ ansible_user: chaos
+ ansible_ssh_common_args: -J ssh://chaos@public-reverse-proxy.hamburg.ccc.de
hypervisors:
hosts:
chaosknoten:
@@ -79,6 +83,7 @@ base_config_hosts:
tickets:
wiki:
zammad:
+ ntfy:
docker_compose_hosts:
hosts:
ccchoir:
@@ -90,6 +95,7 @@ docker_compose_hosts:
pad:
pretalx:
zammad:
+ ntfy:
nextcloud_hosts:
hosts:
cloud:
@@ -109,6 +115,7 @@ nginx_hosts:
public-reverse-proxy:
wiki:
zammad:
+ ntfy:
public_reverse_proxy_hosts:
hosts:
public-reverse-proxy:
@@ -127,6 +134,7 @@ certbot_hosts:
pretalx:
wiki:
zammad:
+ ntfy:
prometheus_node_exporter_hosts:
hosts:
ccchoir:
@@ -154,6 +162,7 @@ infrastructure_authorized_keys_hosts:
public-reverse-proxy:
wiki:
zammad:
+ ntfy:
wiki_hosts:
hosts:
eh22-wiki:
@@ -170,3 +179,4 @@ ansible_pull_hosts:
alloy_hosts:
hosts:
grafana:
+ ntfy:
diff --git a/inventories/z9/host_vars/dooris.sops.yaml b/inventories/z9/host_vars/dooris.sops.yaml
new file mode 100644
index 0000000..b2ec161
--- /dev/null
+++ b/inventories/z9/host_vars/dooris.sops.yaml
@@ -0,0 +1,232 @@
+secret__dooris_client_secret: ENC[AES256_GCM,data:v85gIBNH4s4j36crJ+Pb2lu2cdZpwz0xndHzBKZNGKg=,iv:Rlt6R7JMcHTAAVPiTtFaxqsWD8G5B9Ab3yqItYdFR+E=,tag:dlMHaxTMx3LgOzCsTLUdzw==,type:str]
+secret__dooris_ccujack_password: ENC[AES256_GCM,data:bHeftSA7eC1cSydBRumksRgw2v0=,iv:X/pfsvQPZREifGjHDGx8mVk2TDrlrRVb6MiAr01wI9o=,tag:ti//x7eDbheMG6Hsn2KBlg==,type:str]
+sops:
+ lastmodified: "2025-05-29T13:28:08Z"
+ mac: ENC[AES256_GCM,data:SkqMlgJBdM+CMLE/um7m8V0ni04Xi3S9GovNsADrws6VbSWTX+50oc6HtWl+Kj2XugLfp2XpVnlzggCiq3fePsdt1af2+ZfSCue1d+dexjo5Q/gvE/olKlmn6aj5qiosUsLgu7v2bCOIb9m9WiEhlQLKx1wGiqVNQDabiLOJV6E=,iv:NUUOcXtbg+xMHqthipKpRAWLTXda8rup4aCbbP8sVEg=,tag:wyh+hrZreOyT7uQQrghb7w==,type:str]
+ pgp:
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtARAAjrmnSy9HYxao+iAaOWEmTX/irINxrrA3Un+Nhna8W5ri
+ zokFzeCpto1iraFy2UMh6xQE1b2SEmFvGv+mCdwnPcYRR0PJ6vIulGr+sNURUe+O
+ fEgPJgXWxR+1FT8/Ko+9P28TlcSHSdy6bemLtQmi2wNJjkexLoiX9QB0B287I9GQ
+ 5wx/xW3uzA/wTheAtP1OhuLqQn5ADvzYovKFy71JIBWyxu0zVozUYi5AYKq9t3qP
+ eyeh4ZYbUgfD6pVF1rXuf3sr6y4TjW9XN9EmYzN1+/qcL287S0LWTAGzS0xgkvKR
+ QM2xIPU+MfX278G5ISxcqirbXGWpm8+WXn7wDUcpPeenffbvyL1FIqOb8QkJBYVM
+ Q4XxjrvTT7rTdz6u2Z8y6BuK03R6dXtqwMQ+Jn8ovrTEAr2nk57vLkOlLSoPH5qp
+ O//1fHSD7Rm4VPwSRahwJQ5gQ1orvpZ7wj27DrUCvG16zqtdYLvXIa8CG7Kr28dh
+ EpuKHD4vQJTrY6SXUfLYEYeTBjGnT0tl8kgQnffbnB46pS5ekDdE7w+S9QSzPgXt
+ e058viX1qAVCy1xPeyj38kRJBtHX0sgE8T50AbkKBG3+H9RY4NOIRKsPkfL3D/9K
+ luPXcAM8Qbmu0T99ZpyQuLFg0RosJaMNlcL+MLpqOGAU3Jj0TfYQzy+s1Vm0+lLU
+ ZgEJAhCUkAKxLkbSVKdt8bK8fb6Wxs245XPUZZpnnwtF2psGOgCU4JbQu2e6Uu+H
+ W/cLSXth85OKfrsypO5AAyDhcNw5K/63jHsOq1MUlv7qKxqS28LgmLxvH+fkTlX2
+ yy2c6b4rgQ==
+ =i7G7
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//UxDv3k98prigd9KUtFZsiDGlY9Vw7YDlYdUQx6kjxHnF
+ JfO6LvXrnpkVwYQ6Nbda5ugKm+1b+wvMO0w0xcLFJ1BTKW3prvm51ect8UiOgetx
+ go/tnUl2R42gu8D9Czge4/bQJO1pdzeDF71gSQju2k/sYGcTP2QCsxdbQziziKy2
+ vMcnBCMSJFTkDjDYlCsAzDJ3Axb/1NFYdOiAeAr0V9P5SHZAxoAw6w8NgbgyUggB
+ Nrh9pwvUMHa7mT6TWR0wTYlseoGAGWBhDaIZOn3SW/yupJMFqOOMy7iEchnRdIPb
+ 4d5RKlaZxWHDeD8yMQBHmNE9hzi+lbVyCtP2ozFGhYvyrHvOQ/H/NsPT6aW6XCEj
+ PCVTmmWUX3ZUjOoyFtJvWI8QJWicnqYm3hZg+Q1N19MTfmSBjvP5unqu3yLJIBuR
+ S5olb3F9dAdMaHHtfEaXdX1jftqlupS6KenCDss+aTSIrAllM970CILNduvvEvrG
+ u9cIofQs0G8B4qy1SYAdMT0psh/e/lzUb2qFKy6OWnWU9Q+DEclCsjYQQYdOaFEg
+ Mf2diWFTsD2tVlZk3inQ5LYLb0HgOEPgOBcpz0VGqdTerCx7bN6va1cZN+TOEwzw
+ w28WTYEabeH13x8L2QB1hBxuyZjKb5nBBNncV5lR77o4VGeacxxxzriMD27HCavS
+ XAGX+omwzhH9M70XmTHANNTxuB3GM6zz0y9tHWtr6HZ9yZwHKTfRGOOmSL8+m6k2
+ k3gHVlcdzac7L1VExaWTdGATzvL1CxRo6F+DPPpz5Tg7872IfGR2PZ4gB7ko
+ =AJfS
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJARAAvQPy/OBTDUzdnp3SEaAva0GcJLol10vbsCKyT4KLlW3d
+ ByrqmPzRov/CZ8SOs8lTvqgp7qWOH60c1wwCrJTZ9WNQNfQ0C0fjl/KKhsFKelHE
+ JZVGfwz7cKV90ZrGFhUZF5koiT9Wetzc+kQ4SQo6xrMOjWVtwbFjJ8NjH7Se+URK
+ 8VbEp+dMU5ilql9rmOzx/74vmr+z4p8/LCFJmOjPbwuEFUFIO53+ytrD9JV2LbOh
+ W3T0kBn3kqWDnVbI+sclwc09d6C6d3cb/MppHDDggH4TMnS6coEU8On8xEsAvHco
+ +XH1Cdu6nYlfqF+k5G+fEfP7Rk8NE/wWJ1bX7J+gcCABvl+Y2/5TYJQvvDrEngPa
+ VfFujgqq+b9EvIznfYVgPqiJq222hZzesZXZGc8T4TpP3szo7GRL9d8Ivg63Y3Nz
+ ty7eRb/WmBnkfVa8CamjmR7Gqt5LOVSXfZksK3kXXVAtLrZ0fQIll9ug3EELCo9D
+ cbhhud2JLXoJZNlYh6fBlKMRWJWjIbxEETx9S8FgFIUegOyLu6ydlqAYAQTnYa/1
+ kWmuwQB3xjgiY3+9Ji7BO5e7ZlRIhs837brJfZ0bbJneTGO5IRI8gpdjt+D79XlK
+ 72yG/7zlrNi/xbWdUtT1D6PIwq5KTltMt9D3Kp0iZF9WvzQ1hVl/lXWaI7LtaU/S
+ XAHVfQzc4HoskbWHsOdlQNAOks4J4eBRFkVxmWbVXgeiWJ+ATPf29PQR9Jbqlzum
+ AZuIGvoXqS41oy5+mOgmtKY1pKMH/cGjfXYzi9HJmQnjEt9IR+hgUx16A+tG
+ =PedT
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1ARAAnxFIPa1QdjcBu4yUulTP5ptMhXObVnLMLK6SmKiq/rmG
+ SD/M9fWNuROi8NodJd0TJN1L/osSSMuD9aqV0SkZPnt7NM4yood5k0N9sTDZAr0u
+ KRYccvv+gJACRyalZL9v4t5/YZU5uexJ0ciBSnuNk3ds0nm3Ln1Iz4BMBMR2KTiT
+ f2PvZMIE2PP0v0oGDYPIOSPqfoXjjUFyqp/3HI+l+bzORNT2yzl/062e3h1m7zVA
+ TA7zWLDVcZFA/Aa3+LACKaz45V5Lj7gUXkgJ7R+d/qg963OYTUbLSiNTgtgqnLLa
+ DJmc3RDcuOeHaG2AY8l/r+cf3s2TH0J6bLIAZVEBSvBvXD1wMY4nCjubUEd3nUp8
+ 5GT8WyQ6f8aB8Ay4rytdtOWu8NuMIwDpT3ksT0W4XI22EeHJv66vTSvV4pfcoiSe
+ cdrCChfRGCpiWW52tJZ4HjkhXW61a86Vt/khhok/h8T6SWADRn3aHj52s+qNtigf
+ scYEmBFUA2GSmTB3gHCjwWckVGgpFmXPYaI4LE50vU2nndxkxHx17GQjSLS+9Pt2
+ iTVVOqJu+mlfiXqfO7LS/NzaIDlMcYr8/JVA+hTRM0cUN6HgzC5s/486JoPbU9BX
+ o5i+NhNyhY5E8H4VXK48fvNUGHjpJLqC/InVM1wguxYxeHbI4YYqZkFtO/oIxwnS
+ XAGsRHOkwxoDL2QNQpFeJ5oeXG5WccCLbIBiuQJYh8GGE0fnIOakx5SyU0A1+TVN
+ Kr/n3tJosVGNCtfFvjKxYtUSxqf7yu1VeoPyD9o52XevAfE0OtEIcQ+Nyy2Z
+ =R48r
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4HMJd/cQYrVARAAxMZNf/eTAZvHArZJDJ67u7conjEEL0BHNmY0Tq2v2vFH
+ SDbPrecIRGVK6eY4eQDm3OKt14pa93qPZxaGZAZCKCVDNb2lpXSvoT05sUi29X3k
+ 9yDDKnXsWM0zK7U9/WPeLlVVT9zKzRixlRKHJWD0567lVXmAIq3xI4/QxkVIaH/r
+ 9+2oISxoXnz1c3JTNwdNEoA85m+nTi1Rd44T1QuTH0fj7i1VwWgK92TMQ2V92NnY
+ k8JdQQmCNXoC4BeEdo4v2nCUPWxBHC3ti2Yh4BFsik9iv3WeDe5RGLwdQwrI65pd
+ L6C1Sp+Q0CDZuaavheC/p6pplUDAml57EFEovQSgpm+ye5j9LO0dUxdeBG2krVoi
+ 3Rzz+DAI2C/zAXm3FHak+UnlVsQ0D6fF8qaiozwc8FDxSJZGbUE2hywuMuosNSUE
+ iPxT4XW+cWCqQOTLAAbyHSS4bAcc8Q26vw9OpQ5J65JanRUgxSfKOHGJr1bNJTVx
+ RPs6y/KPdxArzlxmXcJ+U4OBDMQQTMZ8ntsdQgMqqYZy1IUQKQQg4+X+Wj3C9AWY
+ sAdgY9bLdQTo5+zP+vkY22+QGIqs6piY4e4qj772Rue65LyF5qUpe0jkNyA7NzhK
+ uaCingCMAyt8IMMRjGJcI6uru43QgUBYpaAWc9hBbNQ5ASHp4bbj3WemJt1k7XPS
+ XAEO2UMCisCNfCsKsqE/uKi/zQ0xtugh2XrTUG42xnFS4t24DVJJEC0+aXAtyvNk
+ B2FYqlaHnqCNyifLR2r6CGO/PysTGIBvfDwNHcfD9TylONdKOLr91s4UV2W6
+ =rUnM
+ -----END PGP MESSAGE-----
+ fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fAQ//VPjP2gKLowb22MawLvWyvEBvPqY5snNBNHMUaNxd/e4J
+ XaX8Z98AYn9rSL8uzGOk4e62uNZsOCRoK+v5gwM3p4Y4qzVjFYAD4pRBYsdHEEEk
+ 5hu8nrB2KdHCFocWWgW5IdTXalITX5nb4MpwZkd2pg8Nnm2VRGmGmPUVcY4cA+m4
+ vhwe1ExWiUmfEditK347VJib+T2nNdsrCPDzFpo9MzUhOh0k7xLlIhgCHNkF91xX
+ Fmlkw/lUqIOvZlfQ4YyH/e/am6803w9bP1iAtSc1KVFK8M0+ETnYgLniWlQ22UKX
+ bp9bRovhhoTIwz24DZYEKFyAJ1X/ovD1hl1RhAjGniGHNnGOUQrLyFVNdJS//3as
+ 4Ag0WbQDiOg6AdUFPq1LIPnSxHquwFc4zQNE/9FjbFL+H+bena8fXyeQYy303/j/
+ ZXyTjkui1jVdEb5XEF24kIe6E7eBnyYD4h4gNVf1FF4r0vbRxdoKSxHG4ebiwPWd
+ o9eSkCXl8hJj0b9fC9EC+G9xtxVyc+Oyimft8UueMDnneenzGrFo0uDgJryRECKn
+ uAs/RpHz7af8JAkm5Bb0s5oCRpG0NZoEX71jSjcS602gT9tA1ySA/iNKbCXzmmKw
+ brWfOwvjotEgZJAhnUfQ4dPcu0lNoGVWbcgwBOrIj556CtdWH82Qm8igi30DhuXS
+ XAFstOs9MB0KTkS5SoqnRKGQYL7nB+JAN5cUCYgxyIsKdOA2a+i/Hez56Nqlaat4
+ RauajOum1aFl68PgCFDHMJOYIaC8dOTo5n4xnNhMNtcrdApKifsAuqDP+sh5
+ =V9/6
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ//XU4i+oehBWqZYgbJufjf9hg6pkPegnYoOMO439OA79Uu
+ axlWSHcTB6+vRC/o3e5LW3p5R5ANb64OOGyDeW5PeH6C2+b6/xlqyPAU233tNbmv
+ sQX1H/4BJjuWmM+tmpjP9H1K8rWmw+6+xvVVbOFudkYyyJtNupOrUtkQIep92Kve
+ rrgAlOXE02+3rqIl678s1R53wjIeovFd4XNxbO8LGWVELGgvREjJrUooYuqT1DYo
+ unVtK/W9WFzXv2hCzXiiFLfg5HJCpUq61jiKexEDYRdMqRAHBNQim556vN2RghCD
+ TH2B85GH57UKMIMCQB0XXekCEM1f/P9FBjulnhwZPOU5J41pmeHL3NB6Jo3GDXSO
+ U1pK8NOE44dyVCIw6GB5ZPSmB+pKITu7Rhet5pFUQvEkbzbvh2ckiclL8viK/Rq9
+ ntPJ/NNb4IjVs/tBtmnAM1gXvoTSc3FGH8TTDow1RTpyqixx8xao+5PE9+zKL4Wu
+ aRe6NMa5xVWexCM2kQ3dLPPypO1yAodlB+a611ocQc2JHsKyxhIuS4VIJeJ1TWc/
+ pdPW0JbgiPR1D3xvbLy89SOANFFug3WZzqjsl/BKxs8g2NA+dWYgbzUq5axrcIWd
+ j8F4gNa36BmvnTwA/UEkq30wNfaEucYrSoT4vdeT9rlhXuna1/iBHg8mCxQotxPS
+ XAGSQDissUfuC6QmJoUY7o1eGlr/yC11zghiJQRwi8/czQnnnukv2BMQL3UMBcvq
+ 9by5gFOjpytXGsk94VLzsD/jg5AeQqpFU8UJwr/XAPaPaaBo1RemYQf68O8E
+ =3RuY
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ//ZOAZkk8v70befbmw0wVTgb7VQam9XpcvJ8y19A+bMIDV
+ R464pWEoBxSh+pvj0QoG2U40YX9Loc/VbAydlWrPFCGajxxkqkOxn1sbI5QfvYnw
+ efGIxWaTUQYH5miWWh2ZeES49wVqosplCP4VAq1F7B//9e5i5YiKcF2s1agMIgp7
+ nSnQrekNgP409CQPsYYuUGq18eiH5lz1waXBkqK9aQnTMB6dh8tf/xnLzQsdwliK
+ dgITB93MMYZ64CYQmhTspBsqB/eFEjZCvnn43Y2+vwwzRz8p4NlpM/U+N3xdBy97
+ tmhKdNWl1zzmoqp7k8gTnJlSJibXuOJOMK7lXT3/eKfOp5tFauvHCwqq6TroE4Q/
+ yqBonz7RWmBtLlqIUs0C8sqq8sCmtOFI4o04zcV/IGA98KeNa3ZkfkO/fPhnO9D9
+ bwzWMrdgpQwb3lzNM0/WbNBfIjdloviDa7I2Pgrc1LM8UcFVMsCmk2eqImD74YIn
+ eyNkIY6FMJhrVapuYShTf0sKn8bDWxi+VYZxPGbObTe2t52/z/6XP2tnSSZ5rn2H
+ zn68Its9dGhZ9ILkEDBuBh3/4cJwKs94MwhOIlPwgWIl98Sr6NUricSmNMV4B/Ku
+ DXlPfVxbxqJhzvIFG7pADm5HbFyWgFl9QpVfomJoacsQSTE3KPPe/2SKzG2l5aPS
+ XAFFzACeI/226BzPJGQ12BBFPfMKcQB3Rfg20Y60s4E28AFWGhQUI5BNNLkhEELu
+ JiKiSt/baYpehzEDCbKAnk1xCVldeV5WfyaOako1PaApXxjKb68cdyKJtZ8+
+ =D3tP
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ/9HbqjtdZC+8Al972EhHn0985LiD8o398dKO4lgufq5gKd
+ E4EhSEr1OmeEdSvTFDo2C3UFKrhoX6mU+GG9yZfRX0R6FJUJJP2xr7F1gkL4icXb
+ BBbHu7MDTLzVM8oP2/y6dwzZL507t1AhcTXAzSoY7jkvjSYzLukocZfFhJ94QPQS
+ T+k6pjVEgDJDJ5sHWw9zfW79Wo0Sl8hpSPVOkV02VV9EmDH+9kXj8u5ZT92/3zWN
+ HVUGWKDDIerpGHurwDEr1B8Ql1Tk+UgPjcErt3TlKOkUaIIwcN3STP4B1XaFxhjt
+ u1XrFVrqI9jFYCtgt/Mf1mfEfhf18bclQjTqswxY3HUqG23T1EClu57mJsofcS3H
+ bqF+1Mv798C2jFz6ht31LDJllI95pCnwuxbL3Z0tm2u0oj2us9WodERIWVEwcisD
+ hK5Shhv03T2X1OJmAPPAoSQhYIVKBdwkautTF+J2jPRUXulzgLVG7MLowTzbX/c+
+ dT4uZ/ZKM3SWVmrwN5AOcGG8PVNtkt7/Dd8uDLeNNlK9QXJK5nfxDnhlRRpOmbDA
+ fRnS9tLPmY+T1knwKbMO8k918FqEhjdAHdEr+C5YbEiupUY+0KpoCqaf04cWlI8W
+ Ei0dhZ4OrBKiIZIY5i12BXcskgjsXPRNLqkN/fYqVyR+5VjM07kSOsnpgfinF+DS
+ XAHL+cPJCA+k7jnyrDDxjqETeEwf0gTgWMCSWQecULBV1UPh6AjNARsKAAOrr8BJ
+ nynWrpIAHfsb4CP5FfYl/CnydhJB3GHfBtElrUS17v4hhl656IXMyXMeGgKz
+ =l5zk
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAR8zTJ9Cb4meMl7X9r47AeKuyWkK3ck+s3WfwPSv6qzQw
+ RCWHumJZKT8+ZhZkyfHbcvNvx5q23cPngLdJ2GDpXfkl5imFJUdrfpxJvCvBJl/n
+ 0lwBsBFzr+gLGVuPodabHjiAx22Fc3tjEigHTBpV2fclmM97oJDBk6vx10vWIgv6
+ yWWlGWo25LvlrGc9hNX5UzCTBUwkDs3cmV2r7O/wzDEgyqs82/lzm+hnDtHcsg==
+ =zBp8
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAQpzleW1vX2SXQXVn6NgWQTmlMfWm3RW4OUpdxByKlkEw
+ lADSS3szOdQWtQ8TWUAFhDbakJ6vLgUgvNV163Onxrn9GFJXylfdSSspE+8Z6Vws
+ 0lYBY2g09YqA1WBhBorJAF0GZk8j+SDhLXs4YVcGbxDYr4pFbSqsJQ6M5k0Kv5W3
+ MjxvKJVl0qxhhv+FF8kLicwX9avCarpSrgH8dSNH8926ZEyAm6g9JQ==
+ =7bUV
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-05-29T13:09:43Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+ARAA2McI7djN679I+L/8DY9L5j+hYHdu78KkfB/HTAWtI88L
+ rHathJG/yW4Vao+x/SYyhcRLY9oWblqIgausLAPLQpTN8M+2ZsVS2Q0J+OWhIsfy
+ 889cGno22s561YU4mrutREn+XC/QL3T01bHJw7QWCQcGQ9rD6ACTkipxmDr9aLEB
+ AQRFCPGxKPdj5R4ZwABR/5kXAwtYtkdDIxE9Ckx9Ex8AGb0mX+4EL14Mi/uCmmZT
+ +h0geY7DDu6O5EP5zn2y/jT4T1vWc5N1xsHZlL6qgFA2Bdx58UQaVVBtrGos6S82
+ eIbgz1F/LtteYnAdjfeWUK6FdRh4FA5oyyVb82MzrwWk77vj2eLOhY3X6UywB4EP
+ HoVkgUxeKaKV620RO+nCV80ZTy+rqJrq2a/MpZGD9Ra+hKOkCt0mElayCG091mlz
+ tygLXwgt5ID9m3V1mJQ0f4GK6w5s+t8pK/TByXM1eToqlDsyFM/iAwbmDoehSe/r
+ 2Dq3fuB7f3Mqxnit8xfMRK/HGV1yDFwco2y6CggU1rhwl8gm56Pd90AEx3J+gkzP
+ Y6hQ5lldcHlpb2oSdI+C7UjJKySuEui2FvAYRgf2u/edcCUvrYR9zHqmanS9NCR2
+ +ZCgfBHoQRPWOWzuDKo5RFmheghhYDtqpp1BUHjpR+0B27h1sWeqECMzAvnLOfLU
+ ZgEJAhCr45YwxmaISlsPR5Z8Dr5G4sXuuciiIX7qJnDiQZBZcaPDMIUjheb69GbX
+ aMW5suQMmVlCPfaqJtKrBmtpSuF0DvDALuBIQIOUD60AUewlZq4OnOabdDo4nsIZ
+ Oo1AY3Jhcg==
+ =SuqK
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2
diff --git a/inventories/z9/host_vars/dooris.yaml b/inventories/z9/host_vars/dooris.yaml
new file mode 100644
index 0000000..5813e3a
--- /dev/null
+++ b/inventories/z9/host_vars/dooris.yaml
@@ -0,0 +1,15 @@
+docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'resources/z9/dooris/docker_compose/compose.yaml.j2') }}"
+docker_compose__configuration_files: [ ]
+
+certbot__version_spec: ""
+certbot__acme_account_email_address: le-admin@hamburg.ccc.de
+certbot__certificate_domains:
+ - "dooris.ccchh.net"
+certbot__new_cert_commands:
+ - "systemctl reload nginx.service"
+certbot__http_01_port: 80
+
+nginx__version_spec: ""
+nginx__configurations:
+ - name: dooris.ccchh.net
+ content: "{{ lookup('ansible.builtin.file', 'resources/z9/dooris/nginx/dooris.ccchh.net.conf') }}"
diff --git a/inventories/z9/host_vars/yate.sops.yaml b/inventories/z9/host_vars/yate.sops.yaml
new file mode 100644
index 0000000..f9e9057
--- /dev/null
+++ b/inventories/z9/host_vars/yate.sops.yaml
@@ -0,0 +1,218 @@
+#ENC[AES256_GCM,data:Oc2DdKVMymwkIHbS84TeTQY=,iv:UMhNafqQrHaF5iqFSev6D1uqHPFpKQTkOpYV6JncjsU=,tag:mAmBMyGdzER3hkSkV2Fjtw==,type:comment]
+secret__yate__sip_trunk_epvpn: ENC[AES256_GCM,data:BkdNaCooUjsDlCXJ,iv:saO4IGsz1HAinvW5ZGAMA4WEtBbo+UNdfBkr0g29uag=,tag:t8RM0GNYhl1w/RMNO8wKbQ==,type:str]
+secret__yate__sip_trunk_fonial: ENC[AES256_GCM,data:N18C3XZHIi1/IA==,iv:vs9dCYNRp+1ptxRajdUO5ODTOmNREJslF99xnFL92XM=,tag:IUmnlPeRI1WTRYELzZRk/w==,type:str]
+secret__yate__sip_trunk_fux: ENC[AES256_GCM,data:zcVxNjyS3BE2dw==,iv:Prmy8nP1yeFrVI5mQaPJPKHGFCzuZp84f6fH04I9zJM=,tag:X15wqvaaifMU2/kcqLqUZQ==,type:str]
+secret__yate__sip_extension_fritzbox_analog1: ENC[AES256_GCM,data:+ayQ6P4P34D5hTNOFv3HVA==,iv:UD71G07Z633mDmvnJVei9SKgHyM+JFXJdtOhyBhvKGY=,tag:0ISsYGQCIMMgToLWA09JwQ==,type:str]
+secret__yate__sip_extension_fritzbox_analog2: ENC[AES256_GCM,data:DbFmTcZ8wW2fqstm09yUWw==,iv:jKUqtSXaGF/QpIwPJ6hKQWZvv9xtZeIQBiPHt2xm+3I=,tag:MkWzODFnWZc8o+pVLR3KJw==,type:str]
+secret__yate__sip_extension_fritzbox_dect1: ENC[AES256_GCM,data:87MFTNA0DXmfhesT/M++ug==,iv:qDM8HWZhG9FADLFNPRJXkadN2jXD6/CfroDShNPzA+o=,tag:Ylf56nCczEdDaOGko5GrBw==,type:str]
+secret__yate__sip_extension_legacy: ENC[AES256_GCM,data:gC43eKUOAYU9dgNV1JQ+nw==,iv:xN7aad2NPaihlMT4Ym2xanpKU4eX04V0FS4m6XRgZFo=,tag:Oq0yBCSf+CB8Xkx4D4TH5w==,type:str]
+sops:
+ lastmodified: "2025-07-11T17:10:24Z"
+ mac: ENC[AES256_GCM,data:aO2kEoKvWccDkF9lnaNeoBWfgUetZ3W4ImappoPU4emLpWMtRGWFiKUbTwQCbLGBdQ/C+Dk0bZYV1wJjotmSIiEyPzijINX+d5obH7Gm2XSkqFHGlz+XnVg11PY91enBbHSQTiOyCzS1Ez/xWAVdztTHWA5r8lhaojmAHSe3UHo=,iv:VAEnZscqlPmVuEypiNRdhfGoooGa1qet9FBht/NNUK0=,tag:o2Q5GsHRS5GaZuQm3chZDA==,type:str]
+ pgp:
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxK/JaB2/SdtAQ/8DLWOcWS/najtd0CoVuniQtinUD0Ek6Cy3yOYUUYwm26i
+ JDEQsMza3UbphCDA94Ok87wKsvuZ7aAiEhlifPEWWwKpfgNNe7mf411YThFrs6+x
+ lVNz3LNkQLU417iQZswWSgeULLZTD9Scl0r7JGFkJHsOBKB1nTiYQj8KhFYJp2Qe
+ 3xXfasJlM1brxSkHEQc5LaH/QJ+GPx1qEcBfyg/i2wwQuALptk2O6FRWCFhek4lm
+ tHVGwnTUmmZ+lQup4eTGYCqz1XsxUG2PyHD9rAAuF5xMy4rxS6KiWVVHxVFiixWW
+ fap+Krzpq5hAB2dWt9Ya+/QKQTc3JSzvNiGm6fTidw3OhPU0PUJY289+37yj+Jce
+ YkeC9qQYzP6VPngOo3bP1e2qNKy0P3OyDILe6NVXPYWxHicEYvkTX31W4rkXnEig
+ QiSejv3Q6Q2tTnARUOCAqESQ1NVZdezVssQSgFiFUezHI8O9NZ4+ULA5M18kFVKH
+ Sk0YQ6Z2vvH2IAmpZet37jtlPOGACqi0mYopgW+nHF9zfaewVk/ku32iqgV3Wsdv
+ GYYKoWaYj82frVTMkXtGTQjRVZdCIfR6NXF5OHbOWx4O0s78FI+AQriuUoViOdSN
+ NSwCSkueqHQducgo6/PD9/+w0ktwZ8putCASnM3EmOoDWLaOe6E7ZqV8HmOUop7U
+ ZgEJAhBdiQGI2MXw3e/vMgc1dI0KDMLwsf5kAck9egugDH9EDyh9y97y6OqG5I5h
+ ytmmYooFi0BaGzCZ4fZCEHwwknxBsMzVo/JN+VBa5ucH6v1iRndnaglbuXiY8aMt
+ /f1YxIy5uw==
+ =K2QH
+ -----END PGP MESSAGE-----
+ fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA6EyPtWBEI+2AQ//dLxTLQOv0wcogM5ekciQSmABmjQJU+IqZO+mIL0oYNzP
+ JGfWAe1R1c+wAvE21QIQXbfo5OaI+fGFku5tQM25L2vKn4kad+yug/mc2WiQx6eV
+ nlKffZWuqhtexFaidsbMeUfpBBM4aM0TG24fHMgU62X/snnuZTxvhmey21uL/fUX
+ YcHOhYD1LUHMBLWe84I9NTbfmFnR1NqmPXTqebmh7kfYW9Qf3Pb/EqJOq/1zUr9R
+ 6TZUh7yIZCQSDyfUp59elV85iXRbPNQkxCTlabARyphA0mEyDNRKWKYM/vQa3sBL
+ 5wys37FssHQeKOB3kRnBChxvf34cFP4CTePhz74keIWfSi9VZguENeVJ5XsgVjAl
+ vTc9S403Bv5HMhpXOYZKAS7OH+VbCIhFK7S5su3WnunJZWVU/OUfNg6phye72OlA
+ qtgjAj0zgRtBb8SP2QB8YmHPB2r6udOAUBEA6KnMb4hZdtCPQb/GiZwJR4XVdJ6X
+ ZCA3Q7Us5AEAtHI2N9Nfa9XtrIYQyZ+m2EyE4ZPIQRE7d9Vb+OdFq4pUmv6LYd+0
+ 5ZaAX1+G9kTbe0+ji7g/cboJDdf1aJpMwvvdwZ0oGgc5/a7IFLKenEv9nL+aHO4I
+ xaD+W+nYbnYbZBWdicFC7gUqwqZlDF2wEb5IoWIsp2q0hM6znSysKoFJKK7HbDfS
+ XAFN/qg9iIcW2PiAj6rtrrS6pV6CwJxslU/NBRnhkWDJu6LhSXm+5d87vwCnChku
+ 9t+Mt43+DUBFXz8+TVsoeqpPM4N8iHovyd+BxIZRXj+LNzOha8KpGiOYsQQJ
+ =hESU
+ -----END PGP MESSAGE-----
+ fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAz5uSgHG2iMJARAAsO1ZVTu1Oim7pQbBvJYIf2JjuTORXEzohwVguQl1ULK4
+ oB14MgUF6nPfcq4RyhbKF0rJ1HJznFikvo1+VpiztvxBuxEi0NnZh0DnrrJN/m8B
+ ArqyM3EdLSy9HvRsw2/1Lml3RMPaz2slKqZ/qL++uSrFvwLT+7YlExJfVCzrlLht
+ 5L83WL6b6CDrJjS+M1RSvZfhx4Tpl0+1oneMgGQOL+xqfZlvR2ZZklsSL/GZu5lg
+ f164SLbSrY4m3Tv8kGzvvErpNB7o/zbm/ilUHQOrxNq/yWCXWbSZ86WkvoUed9B9
+ acBQsZE2BcBNIPu9odkb0sgtwwrgAgL2A1frM+JfHOSj6mj2klMspRDp80aCXnvF
+ QjmBMf1+EgETzxKWy18hGLChxyF2ju5500W5jhz20R8ZgtJijqrxgFz1MODfNFzy
+ G/OwHoCn3o18paAsH7tvisaEzkFghikhSUtAHfdV/5d8OZATtYH++yRXnMUAxAZL
+ E7J643oR80G+r0vlTQ5/BGp0HsohGSAZE97fGOqF9Ixpvai7T+cOpkQ9k2NEYrhR
+ t5s2aTVot9RpC0Dvl4UjEnzidd7n2bRHd4+tavf5fNJDXlmokdsjkZW1fBwfxDfo
+ usNLBOq/mEd/ppL2nzDKNFrD9gEM72O5Zm33nkGkvIb+g8ozn+k+S9v5/ny/HKHS
+ XAFp5B5Izcx1y4xnkGL5PYHMPqskSFSGvb1c+lJrxIOPdnLdC/V3cY8l+SlEys2I
+ tNCKxYN1QSiGoHUp+8S0c1aUZ1sLmfN2Igq5a+5Nugoy2bTNlYsyDNwSexZi
+ =uTf6
+ -----END PGP MESSAGE-----
+ fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAw5vwmoEJHQ1ARAAgegeCvVNL60imW3cGvjuIRW8gX3ibEgtIRY3sBfQVhrI
+ D1+9KCjrtW09exCEA4eUVNSfVA2n5P3HruwNVt/TOoLDwWzVb9DcUVTdqwGXbkOQ
+ LDo60ZYAkZZm6QGwPq0EpRGkEEVNDL9xKH1/AR4+g+qGRNyJeEN4iFekeeqHR1w8
+ zel9CkqQGrD7p2GY2lqXIAyUEWb6luFEHOgdoeWs67tqWyGX/he2hlS4dninNpGF
+ dtD2derCPrJarGYK0deZuuIfMpVWHpmIEn6qi9wvdZVPjtMuaNdF1en7QLPq2Yup
+ sLe43wLeaqQWREPGclqVye/+H7BgO4vQzdMQeVNTk+aWPVGEWcnIaNlalP/kPkAI
+ Jqs9ch4Et3VMa+AsYXmti3tcgUhMh+H8GSy9MEVBayAwOMUxWB4G+CrKZdEaKKp/
+ KY+8hkmnRZq2vfdIs1pdwd5ZYg+ea2mchmM50cIVnNO41rjtJDmrKZXjUps74ZOC
+ PffZmpVH7TntWB0BKRSE38LFRw8appBOizQQfCuk4X+Ug+IHbBfdIG8GdzoEb10b
+ aBt8un4VAb5TiLIQAtfFnn4E6cTmF+L9yp6w2Pt2QXFHmRwLGAevX9C4bGrdDoQu
+ OAxB5MZVZ/cafBeOO04EhF3xv4Ok1XO5k3h7aOVA9uviJaYw1WWpVON19jt18WTS
+ XAEjk3TwvnlZSA7Gs74XciRaFxzDYf07y18o5nRq1OHU5pP7QXUGYMLM0L3o4xdJ
+ Yhp7/88UOJ3eUgXpsb0jBP49uMCUZ9N2RPqh0S5m3X+eYg0rlq+wDKMIlu3q
+ =PuWm
+ -----END PGP MESSAGE-----
+ fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMAxjNhCKPP69fARAAlS1idHNZlbdSk59UjKFPFI1yQgCxxFaZLuz6p3eEgWu7
+ TMsiu38C+xHkuFh49VC6A+1cvyF+zmhJUz2js10L/kZemPmDbdpirGa8z5zzRapA
+ EzCGtY/fRbeqK2WFJkQyPpibTZkS2YrTypqdzz2UgfWDq1TUPEmODP/A0jjL/QeO
+ N18uHLmXvu3dYJL4saUf8o0gfU1QnbjXa4CUXxRpAzxXnjlzqtuCtsIdSdd0sXPz
+ 8BLMWP30rv+FOwxa4QxOEYE0w2b8ZtdNPde6fqXK8+SGqXOlwvaw5Zf/aSLJD3hS
+ puWnh/RPJEEQAFdyRII1L1bxNr3PzLZZc57HmMBtIhETeK+gHH7qI6WlH6SpKDHh
+ udPDS6l3EvtnoPMc5yLJpGufyF1gIyCAdYC7+ARVxwSjU9FGL1x5cifAHLseebOj
+ t8IEDi6yxv0TzTv9zmWnV5405q6AtmKzMks9FVtrif9ExXnw/lbdMjUKSDOBwVWm
+ InyVidkhYMQiYcZzsWqrv8FNnmniF68zxlGuq2ny7OGqJAR/oWxoN/B/ZxRgXbyV
+ d6pGTTGam4TLkkGRfDtLPTPe8icWCcUSXtK1djIHXDkuqmhnEEY+hsJI4MrIOBMs
+ C/+SNL48xsHtDcmVZZJRxrggyV8lcZhgSV7DwpmVtOcLPwn47/40V51CZOVlUNfS
+ XAHAWfb4T48MeRVL1DKpP1HOHBIV6AVndQAPS1R+uBuI7k2+kR88mmZ9+n8i+N4+
+ pcdMMUGOu0pXP+fSPxJvF9pGy1DtxANb/qGQSQcjbUzfSDEdOX21IdUZo7ts
+ =YMQQ
+ -----END PGP MESSAGE-----
+ fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA1Hthzn+T1OoAQ//ToBZhsgFWCk+LsW3ScRy5Y64f+Z82gQp8zKlUGhxB4re
+ JZYWX2HtWk6FVM9NYUKh6mFAUBsvWpod4zR03Om7e9I16cH+4RFi/M7p8vBpG5ck
+ pKRoMy2wolgTDKK6FUKNEX/DO2mz6JUTLeSgcblI27DlK+jWY1YNP20ODShHHlsA
+ 6vm4sNllo8Ej3WBI347lRHMO+14l42tyJ3CTkBowYt4MHBDv5AHV7uDB4sV3I0O6
+ 6pjBGXQyAix8/4ljEyTOLzLBVb4KjBbBTFpEqF4nxxGOJ0DMssK71zf6OQXqDd+t
+ dAfdbeKJQv9IudqVYS1r0eU4jnTblJ3Wg9flTyL7e7SK4zaxTOxgd2Boft2LGVG8
+ fJB/n3LUegYrm+K1+sBhnKpYbjYHNSOyPDczLCZSw7/r0XuhMdeR/mRDhTbj1BIK
+ Iku8OHOJDiiW4map3FC3gs+cZVPmIvpB+hXZdt6CzhFWNM05eMMNVkEYq10v+WFg
+ zAlTRw3OjeeiOHfa5HSwvm3odMDLWpIoGnHqgjah0aHuG/Yxk8q4v8N9UmGoDdzi
+ JWtAJAe9rzDrfXyHFmpmGfdJJZLUl040H4Td1Cqjof29LWNqdyKycKTurCUEGkIb
+ 1NoknZcqcYBb6QRgfKrvpJYaKPEeLJzUkXtmlxBVTL31AKxN/JI8zb8sx6WTBqbS
+ XAEZrcDaakMtBR6mbOBOLWMoaUcGr+6938jKu8Yy4zq2tCqsl6C1mdsUpo6XAz53
+ 4re9bIIQTKyB5RpcdBk0pS40sUH/3KgzuElnf6pYbfh+rGi4xP0/07Syzayq
+ =wXrp
+ -----END PGP MESSAGE-----
+ fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA46L6MuPqfJqAQ//ctAmGn32Qh/uQn4AiQKXtvrS+4TP4BCf3GAg83+IrV+M
+ dNcIYqynZeMbrxbrf27k7RlF64DxZ+N6hGfUYMKguJRWTcQfO+cmCntPSHVpfzQJ
+ n5L/MLs5b0sUPo9J691mA0rN4GHto+2xR+BnhWJkDMuz7rBKdShtDjtNhKiuNDvG
+ 0XRBsCkwm9u5PlQGc7q9bNVliJE0w0znw5sjNoLDgPnmKLP44RQ9y8Dc+zBidWKZ
+ 2VxI2jRY44dOQNfNsbBPH1SeDpy2v/AF4SsKmL937axm2Q7Hg+zgX+PktOGJ/Jo4
+ nSAP1FcGTRuTIBiRPpS9WwuGqZCc1ez+P6c6fb31CCNIWa8VnWzHzcqkEY+9NrqN
+ hfvZRK47Am5cVlVENfLneH869HKzF1kqZr2tvD7UvQNwvFZPTJ+8gv+FID4F03xn
+ 4Xsy6qDIqxy4F5YjBAs1Mi/33jFPnUUQ+w3dnzRi1FwLR4q/yJGlTWUfl7Bxw1zE
+ VuzMvUIBk7r6fZZDKvXJjZSjtobwxogRdnr2lT/ruCd+eDvt4D/ti6bBbz+JlEEe
+ YltGv8KpIhV4y7AFjEhqRtMBFvKzGcC/JOp+Gsj7O5mA3Ogy1GgfjPVmB2Q187Sw
+ 62ykvf/fDhv1OGFAYKwfFK2YGCpHqnDS48LuXNcZj7u4JI8oAM4FRjGIGnuO4pfS
+ XAEhI0TL1d3/aKy9SLA/FoFgMBlzxCNpT5DZ9aHxSKYRIegagwauPceEA95v/unY
+ jN51RpUC/gyIVw/+UuC5t2jHQkDS+hydYELbFsdYuTRbrPjSz3Ge/vSwWooR
+ =ymhT
+ -----END PGP MESSAGE-----
+ fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4EEKdYEzV0pAQ/8CPtwC6jPxdUyHsk+RMK/xIy0yL8r2NTpmBew/1zY+pih
+ EvnZGDZexJykZg8B03TdGL0s6aSxgjwi0LAZ7qRubBF/TXi1JSJhlROIW+k5GDM/
+ +CkkjWOTfGLHSafDQ6OKbbQgRbf4GP4AsT2ZCRd+Dk0PJzO8ICnhR/ZOMMMlTi+A
+ of4mqd8H6gaLLuf1bjb4HHM7GJIUTkbK56u30GiXFIUjSJ+kKboc0LlbMEDqUB98
+ QCQ9DElG5Q4fH+wZJmjrUpaQ4txM7ABTutMARiYcDUsC2Z640DnVCpyD4vUu7ZCf
+ zrzl0vMl7/+NUWT6vx6IotZJj5bK/F+LVNjqN2LI+bjzTTbh9jbH0w4s4LnyeO4Y
+ 3oDD8K0xBpTuek1EGGGmtJmnoQT8wXUs+XACMObzshvdfro2KDMekzjP3cHR3N3m
+ yILon0B7I5E8qceXn0ZPQXsP1cBgOR2Eu33XGQLyXUh8vdncMpDFx6Qf42GMn/lc
+ JBQAtgTXvL4CyGoSWlbx14gYOJa7Jez72tm6vjfE5fuC73dOcfY+h59XU3xMK4bi
+ R7Ba3tZF65uVmiuSFivlf2C0fC39Egw6a8GuWLtvUMqCpi7joYAEGfd3bVK/TeMH
+ E8zIIhGbUMYGv8oS1HyVHmqRdpmPOa+YiRlFzzJqB0IbdhagLrL7uTgJIUm+OLHS
+ XAFGC/FlltpkMQ7sEfdZiRgB1yOrPdaSbwp9bOccFuBkGH+58X4q5Kke7JyjpsOO
+ aVA4HUvsqALPdGnE1z6TpirBPhwYcVyC1LtcpMViqNN5JprWGzHkMSrXcJFl
+ =dntG
+ -----END PGP MESSAGE-----
+ fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DQrf1tCqiJxoSAQdAfJcoaQ1WypPricR9/hjAcnxLFinJos5ajTgbbxB0KnAw
+ EAxMuZgLmknirCpXxGDpDaeWatqsPGqcuONcYdFKoy3xMMatWIk0neJzsIVItZCG
+ 0lwBfA1rL1XNOmvmnsbFrWABw0Y/TTz2HpTUPfa/eJAUrShRmiyvDqBBaPN6DeM2
+ Q00XFPHInz3riSEeHPO63f27aAdBKW3zyDu80bDzSOh0pGIvh9m7vyB8iVSRGA==
+ =8xeW
+ -----END PGP MESSAGE-----
+ fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hF4DzAGzViGx4qcSAQdAIIDwiis6tJimnExN97YF75eZOZ9kK1uHbYY0v/gFKnEw
+ j/ZR85JomV0aSYrGCOWMTkjbZg2XvncuTf+zIQjaHgxTTh+wOF7u3RvZcM3e/LGW
+ 0lYBLF40LkNwK/qPQWJIyxOPTICyjbJcBZt11s7evwDvVdh7Hi1vgdIM1iZLsXnD
+ PZZnUirNmHS1RnyhoXYtQGMVVCupzfB5R7aPMDTbQrHxV3tOby3b7Q==
+ =81lR
+ -----END PGP MESSAGE-----
+ fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+ - created_at: "2025-07-04T17:33:05Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA2pVdGTIrZI+AQ//fZDjW0Rj8QCyTTLXJHP4Pkdytkhl4QEVimDb5Kjk8f1x
+ 9O/1yHwN6cdBgH2GuWUrc9GuUcy8c30qJ+IZ2/8u0tM050fDvfcbHsw7iLc79TXN
+ WX43uC3kYslMLJv4bZyavLNYrsnh7yNST/K51xaiFj4Iq0iAB3ieY7X43zSuK4x/
+ oV5cbNvXgwHrjhsSI2EoqeF9sVw1ONmEVlFXfVmLGwmHkpaaD2UJZabA8iw2kf8m
+ /WLTbBMAeKoDG525jFFYd3XVRbPQT7BMQ6S37X1Wu4QAG8u/30CEYSrmX0BkNrnJ
+ ssnDND/JMG7VPtR2Ui8a7pmUIWB+NNNLCCj29c7HuOTX+m8D7HyFZ1gHb74MH+pl
+ qjuQ1htFBzOEDSQgP1lE0au34WfKtaTR550S2I2Wc1kj7oe+rFkL2T7msASlkxdE
+ dk29Gtz0DAmodkxePKy5CeTKO2W/7gfTCqi66UqCmCMqaCZ2xdZxTuv3n1crG7Cc
+ dEYzhQJ7zmL8husR+SAf8V9DKhsg8GEAmqBcZanH7jeAU26jjsqjfiPPg8Ge0FlK
+ KCd60AgSPs8rCXCEh4RDrK48xVJm/SXa9viZAQZFyVH94Uk8+djg51Lilk22Wgul
+ DLruXoPxyFeBCHZ3t/6pc8M/ikWUvGxwmDgaFVpGGmFNx2ip+YLBCSxLa+tKQWHU
+ ZgEJAhBM6vDQw2PauDzejUXvDrRbpq5XECW3SI8Tm9tdr8cp2L6r9Aegs6zo+HP3
+ qYkgUPoTPgXyh6O5zDuC0TDt29xVEHRPBTH309rcYYXOGOVctHyaQsuj7iZo9QWV
+ Qax2fAfcZw==
+ =lF2h
+ -----END PGP MESSAGE-----
+ fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2
diff --git a/inventories/z9/host_vars/yate.yaml b/inventories/z9/host_vars/yate.yaml
new file mode 100644
index 0000000..b73cfa6
--- /dev/null
+++ b/inventories/z9/host_vars/yate.yaml
@@ -0,0 +1,9 @@
+docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/compose.yaml.j2') }}"
+docker_compose__configuration_files:
+ - name: accfile.conf
+ content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/accfile.conf.j2') }}"
+ - name: regexroute.conf
+ content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regexroute.conf.j2') }}"
+ - name: regfile.conf
+ content: "{{ lookup('ansible.builtin.template', 'resources/z9/yate/docker_compose/regfile.conf.j2') }}"
+docker_compose__restart_cmd: "exec yate sh -c 'kill -1 1'"
\ No newline at end of file
diff --git a/inventories/z9/hosts.yaml b/inventories/z9/hosts.yaml
index 13e2cc9..4d847bf 100644
--- a/inventories/z9/hosts.yaml
+++ b/inventories/z9/hosts.yaml
@@ -1,29 +1,45 @@
all:
hosts:
- light:
- ansible_host: light.z9.ccchh.net
- ansible_user: chaos
authoritative-dns:
ansible_host: authoritative-dns.z9.ccchh.net
ansible_user: chaos
+ dooris:
+ ansible_host: 10.31.208.201
+ ansible_user: chaos
+ light:
+ ansible_host: light.z9.ccchh.net
+ ansible_user: chaos
thinkcccore0:
ansible_host: thinkcccore0.z9.ccchh.net
+ yate:
+ ansible_host: yate.ccchh.net
+ ansible_user: chaos
+certbot_hosts:
+ hosts:
+ dooris:
+docker_compose_hosts:
+ hosts:
+ dooris:
+ yate:
+foobazdmx_hosts:
+ hosts:
+ light:
hypervisors:
hosts:
thinkcccore0:
+infrastructure_authorized_keys_hosts:
+ hosts:
+ dooris:
+ light:
+ authoritative-dns:
+ yate:
nginx_hosts:
hosts:
+ dooris:
light:
ola_hosts:
hosts:
light:
-foobazdmx_hosts:
- hosts:
- light:
-infrastructure_authorized_keys_hosts:
- hosts:
- light:
- authoritative-dns:
proxmox_vm_template_hosts:
hosts:
thinkcccore0:
diff --git a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2 b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
index 01226e6..c2108d8 100644
--- a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
@@ -6,8 +6,8 @@ services:
image: docker.io/library/mariadb:11
environment:
- "MARIADB_DATABASE=wordpress"
- - "MARIADB_ROOT_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/ccchoir/secrets.yaml", extract="['DB_ROOT_PASSWORD']") }}"
- - "MARIADB_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/ccchoir/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"
+ - "MARIADB_PASSWORD={{ secret__wordpress_db_password }}"
- "MARIADB_USER=wordpress"
- "MARIADB_AUTO_UPGRADE=yes"
volumes:
@@ -23,7 +23,7 @@ services:
- "WORDPRESS_DB_NAME=wordpress"
- "WORDPRESS_DB_USER=wordpress"
- "WORDPRESS_TABLE_PREFIX=wp_"
- - "WORDPRESS_DB_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/ccchoir/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "WORDPRESS_DB_PASSWORD={{ secret__wordpress_db_password }}"
volumes:
- wordpress:/var/www/html/wp-content
ports:
diff --git a/resources/chaosknoten/ccchoir/secrets.yaml b/resources/chaosknoten/ccchoir/secrets.yaml
deleted file mode 100644
index 854f831..0000000
--- a/resources/chaosknoten/ccchoir/secrets.yaml
+++ /dev/null
@@ -1,237 +0,0 @@
-DB_ROOT_PASSWORD: ENC[AES256_GCM,data:zfK7WXggayIeROoPhCWiU9V0dNpKDei3vg==,iv:XChG6XtDfdHDycZZmIgUtUrqr0YtiVIt2BRZdo5E50M=,tag:x7UeKZDQVQu9ybJx8Xz4ZA==,type:str]
-DB_PASSWORD: ENC[AES256_GCM,data:7ld13nerRTQXJsI8/0n/3IMmbT2FVhAhRg==,iv:Fs+Vv9fDBYMHaWBvcLAh6dtLt1lTNkR//Xr8E4KFylo=,tag:RyDrZcexek3eO6Justga2w==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T20:48:33Z"
- mac: ENC[AES256_GCM,data:1R4V8XkoIz+ySSdwj9kBKbi0LhOqZtjuEIgV6heuDDXXJ5gKTQKcgkvtTQCAvSoC4VGdYSwedfm94tOJa6blILJ+WA5i/mIxYkuypnqXct1qeqwl0CIOxRs/7qRqQaQjmBmlp4JBRDW5usy/DSZB6383azgNF/5o+eqbErMm0sM=,iv:bYipcv9OSnFakbfKFzc78x2icJ4ByN4lMRnSwqA73yM=,tag:0TfCZmr482EEey/tkcxg9A==,type:str]
- pgp:
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ/+JPuBs9V5yTmx11uwmqRVvtUH1Qxap+cx4X/KTNjUxHtd
- BPA9PKUeIu7Cj0bjIHizlJT/R7xaVHar6sPCYvviiQ6koHPrI6NlKtgLXvqkjRFb
- kdCgMeJYDUtdKJ4QYnLWdrSb5MoZ/Q3eb4DtZDV+N88i65cEg1fLHduAr+5y+YWG
- oxlhPFgFA0YlMntLM55Ug4Hs6zBWYzLcFeUjGH2xJ5KDUyIbo/V00X+DPVSLVoRI
- TT/ikxTqXsA5DIBtuKZvmbHjqcxMBvgCyO78WCTWMfE0FUz+/iqZSvORWiGHFJOB
- t4Bw3s1TXGM9aruj6iiOy+SQQHAf84SyYUAQ/MziPRYrKQrMrGaJZ0NtyrdnfmVk
- rWWVKHgmlGhEYnWYaxEODxLCm3Qo7jS4KWZ+jDNyEMAGDkXSCYzcuJ2Fjs3r1Z2z
- 11dqXMb+S+wicBUrVkockagGOm2LpS6QS4jxl0ReDlka07V65I8+X2QnV5j/JeLq
- C+q0wchfACJX/t8z2ckUElBXld126k7RiNCY2vMG5EHLMZAeVchJAB2M6+eYNWlo
- j0VuBBjJ7ALTog2FRWeLNhhDKowHImEgO5IJYcHrGYXnqrRFDcJ3z8eAUTrWistt
- UcVS+2qfWCmuv2A02zOAunt7352/CuZTwWz3OxrrGDgxnnYTbsDQNjN6gk/1HdDU
- aAEJAhAkex9LqxYMmNmfJEFtR1pqPeMwTnUb4HEWD1wW3GnLXGLyRZAs5oLzN8i+
- GwcPJnSXBchoTSSqbuSXmxEz7OOA7YqXa1ZlnRku4LZx/4unVYd2SX1QhI7eVh0T
- 02j5wqhnf8Nh
- =esBT
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ//fQv9HgUvIg/GX9SXAzPsap+rEg4hVQstjVh0bX1RK6lQ
- +IDB9KjaeiXdx/MQUwVlql+35WtH4AaMQ223fRSuZ59TGz3b88nk87o0xZ5KxGvw
- /MRrWEt8032Hay6Gg39tF/kyNZtJiUHZRw2cjt9Ny0u6d2z/HYDdRewst8Fc4wRz
- NKWFLHf+im4AYoa9V42TbR0VJbxwMKJ579zB96aipQsuRf+v3gg/cZuJ3s68KQXv
- hhudNRIFh+vlBcwOyZNRRsVxquGn+x0KJlqjsNH6TPXgiiixwspY76n0zI7fzTU3
- ukV0nS3FqpwM4V/ioZTXJr9NJ5hxMXa5ogNeD0WF3kp+ukPsfy0wbC5DbRcdg8E8
- /o+aND1HjXg0SI2jjEJdCyhpR008kzM8J1vYukBMpPaOX+twyfJJrugcyJCU5q5s
- KlnMHssl7cVrtRXy2exdK1g0J5xIwRAcfQ9fF7UItOtFaqbuoCrmVTT7X3wiZxYN
- ogVHxA2eOdTzo1APCwdlJMKTRc3RdzYxmfyBVcNj7EGq1ekWataIU2w4t+h1AV+K
- ikCWl+T60U462I2wGN9W8DnBV3XRvIOxAoU56wiPEP13ejOPLT2jVxcDCz4YbqMB
- tbZCTMjvUGm0gWINniobhBSSqql685Yl/4ZIkUnpS24BShshz3LcxSqmO7SGR17S
- XgGQMLUfg9lupxR1LdlqLdw3IBIPtapKcF2VSYYuwL+yRMzRKelisQpIFeocr4Yt
- 6ep2mu9JoLhWmGsowIhsd1JyKBq2o+V9rO68TD+xWtltpyPA81sbhccowE16EUk=
- =5jJA
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ//TlEKkG6EDgsc2ZI1BVETcVX+Z7fsGanpRu3U46XvAHF1
- Xazjl+KQbZDwnC5Xnppd2gn7WgJV8Bs7aHI6219iXZdOJ4GdO4xkYFz1LKVdnF6W
- QAZWrAWJSrTv6dpN8L5Pm/fikxIxO21Hjy/EumKt5jQqxevu8pwaa+vHN2BdDRKf
- glOsz+d6pyVvlAgyuewhRXrXwB7A9abMaaNLmWVedV5A9j96oQ2A3nQ2RNsZUIwP
- kpNhjOQgsjO4qnb/81EeIMPgnKM4SZCmXlGsj6M4pLp7VdaJbrfJ8+XW/Mxi+8mq
- VLcanBfA0fcPpHF9uXZty74Rg0Gc+zzqSo4VV7yqKJ5DBmlJTojYGfBY28DQe9FE
- sJxi05paeF+WuSDqxM5uSoVHNya1MyFXk5MgxrUHicny7sjTeUeFQlbonNW1I5PZ
- rzgVlon++e7CIvlRJyzw2Zt9HX9OYJh0GkqhEowQ2z3GG69ytQtTBv5W5xsn6iRw
- a9PghfQWnHisIXTnEFRfyTQtUQytEvwU7YOy8bUpQ2VojnEe+MYFavUu6OQPJTuE
- TMUYl/Q5/8fa1H4m4jObH4SuP2iqb8vzr2cycbytxbfDRzzgDLm9J+cvihSnuKEv
- e5FpYJ6qGBuUgAf4eXeBhAf7m7lxOvLvpG7F+UlhBHry1D+ZJQqo7lWDsDIsg2/S
- XgElbZ3RWUpulpfETZXBNjDXl6OBEcFFhwv8NQXAj9M97ord9+nO3zNJbv2OUAP2
- AZJh5Siuxoz1tYJfoxN04lNjEKvDNKJOmu8No/Nl3pItl2LsbGv/tzdOaBqz7KA=
- =2tvG
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ/+LEFVA/4g2+AH67eMQ35Kbv4N+vwxKn3d7b7wWglSYqG/
- yk8TaoX4axXNojlAKR7u3TPIr5PnNRA/DzzNVZToZ5E3RSFrDyS0ql6LMLOF2kRa
- IMZnY6l7zMfIjX5SobiBlwHn1b8B+9drHOiQY08OvnB+RePrbT1sGTC7iGjYFcgR
- RSOHCppZMmywfk7OpmyN1pUiOa75hFeyhUdfl2e0dhW9WeEK8SuQdP0qFgTK9WuI
- +/udqqAsJtei/gJ1N5QbQtY/bG48AmeS9DdDxQMqNH1p01JLQgdqHNFl4ysADdMb
- s+sj2JNT9pwZyCi0+8zCdrUeddyr4c78J7nga/O6I/+3R+E+Pu1zg57YJNa2aWsn
- z0AE4Z/qtjJMViHStD9Ddc/1+CHrnBCLwxEN6MflpRpiFSSJtdxnMZ2zd5Ay/YLO
- W52nRGlG+szOzPqI8V3M3enXrhsU+zRZKdMuoyI9/uRaJIxyN0HCrQZxJo7P2Rjr
- savyiQrLVNeufl4x7cALadqwxSKn85JLnWQcPrlzqtmBPTuWt+LUkUiYJEG1Yguk
- WisoYKfP/vM213afonBUfhAwqwAcf7svytBXGmxFv/W1YZ2eqNgUhM5qvftEb7/k
- xG51fToNtgBDMJ0s+5AQqBq44wOJmR/WkMcePyzC2wHRgqEw9EMd/gbpjVOkwDTS
- XgGNIE2nglqnYrCX7dc5shy4rQM0xsDGaY/91dHlp+WAm48O9Q28+i7rLLHa7wkM
- uM1e0p0DLNRFZkVyJfY4HbVSTozphNw4fIlI/jKgHb6g+o8VTYAW8WMqln6Z0Rw=
- =wOsy
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ//afGJ8tZq7sTHTusi1Effj47UFgMqfE4beFPy955qzHYI
- 7Be2xMXMIq77ajGxakQAhV7AD6VKLzFlJWkSWcCZZ4hhLT1J/EMSgQlNdplQTunH
- mGaj9qAJnUh3JXRMaSSfme9ZYEMBX3Tzm8snywnmbNiMHvyyAe21ZU+sntoIcshB
- Wy1ZVSc1Vgagb9Q3MCoURHpaNfYO/sFLSSGs/Hbftd9Pu+/6mZRunqtl4U8YwQjn
- TWsceeVLvb3+RcTZA2tsQfMe2TbYm+Tor2lPUvMDEkyApacgOjhTFHCZsRNfdDmE
- i4HOMETa9J2s4VSUVj88asiEHyZRruisYj5U+gpNPX6xc3M9Bjk20basXmLTmgS7
- J151/fY5a51vgGvNYlzkKo9J1yn0iGsGNYUBtxidfndjzKbLB+Kqhte51W9TOlhE
- 5hg9pyvnT6c83RvnEeiyrb86GXXQXiSermrmjid2zbocSm2N/nl22Z0TVIiW7Kx2
- y6JUdY6r06xawZV84FEi4ZXTQyvPUWCm3J/uQSBi7Q9zkxvEycm9/qLiyyWRH4UJ
- 0XBfi3uCzSZ3wRgZvXmhNJL4VFzFZDTAseuGH8bLzhvgzVUIFGRXQnD9Le2lfgGY
- mK2dOeqCW1gJ+lrtuc/UwoeVipxSlDgseT92861JM1g2rTgnElWCrEouqrLXParS
- XgEUeq2hn25vwGt5tot7P47gXjcUU8w9opLp+pPJHP+L4Q2CTfPq/kMKgVlXAZVw
- OzWTuP16fX6akp3jmfk/hYXLcH6otG+Wfffh0dnWdECxOZxNsGhoKpeLQ6/zdWY=
- =20lV
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fARAApaL3AwoqzKVDuP05nEFbz9HtOIflOCWWAxY4PqevkVgf
- RyhBjohxF0eun2rWVqMoLFKB+iKiQA/y3ttN5t+VzbZEu716GLR6aQbMkBwcTZ2k
- iMztZzsP/7ssjn6zOVaLMamfChAVUkprXruVUf2zDKJXVsS6EemMmZyzdBlgLGfN
- 5tcJWShEd2xOorLYCOpcFdtuyzuHj/igh934bmGkRq/5Q9+SX1A/pr60G3Bye4nN
- ZptAtLDwvA60Jm6XWqZsWw9X5/QTws3q5wlMZZgI+CNlAfoFMZzQ01kLOVBBZ4D3
- sS2Yicxbc9o4HU4UY7mNqQfxKhKJ+7MWPvSC4ZgsEHPg1HKwJ3zFBpJI9d+Kc4kc
- N2E7xLfeAYz9coDA+LBSGJy70kYwM87ywfnBvBlHeLyQwW+X03ZQkGRCut2FWERQ
- Yt/ciSugCPtYvsoZdnrzlV3MoLJH/xUkXmAk8SEXgcosBMwKIyX4AqVXrytIWFy5
- a6VKAg482xWcQg5QKtqKXTS3qfWEyI78TG4TZo6O3FyCZn+/L5oU5UNSxJcLYyh8
- xFUVD+9tf8dfprba+HZBB2g9KGBLvoMpEDTpsb6tvrPhV416dyAP0qmAIVLXZ08t
- n0VHo7mdpfRkMzzeb6ARnBm0jIUkvjHMUhAOjjb77FG6NnRlgk445FmkvGxkLUjS
- XgEhPKCni8oHCY2ZtvLeKvl/XdlGH0OfDEraSyRDRJ17mg2XYy1muKVfVh4wA09x
- O67A23mAIXPhQgXWFaml9wv7iEDHPTThJH5mvufd0+AIqfOEa91qboVMZ6ilnUY=
- =hRXB
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ//Vx3UeZhZhEXV0fyGN4gIguntRwqmqP7sDHwR7Qjd993/
- iwh9ZoFv1I+/q45oKXyM+kv3DZqcDLchYHDj5N7gvL4/M7uOPpmOTo31aYHqfZLk
- FPx4ZmwcN+20U18kPUDcBERsn+1NqGdBEW8FqxVMDVbdTYAajsrsfPm3FEU8gNSH
- CUgUxVYymU8IPOzZKwd+TDwmIcUkPZmw6srM6tpxwz//s+1l21NAOrSwR0fYrE5z
- iyd8GUu2GYjJIdscCybXxMUV/IJHaa422OGmhWvtKoJLX6e7sK/ev8o0ZDWvhPUd
- HBtzyCEaygUfax1+QLZAraeJAYbjpAHeuy37UB0jgaUQXFrFkZKOjRMcPcIc9G3z
- be6zcrEAdF8gQzeoTpzGAboCo5lLBLgQXPG+XMOjcfmpgJnjvHjaTK6wOZgZwJis
- KxkXq0cX95Il+vBrt/k3rI2dsS2Jtb7k0pd33VApluJrS9BSeQCXdonoD1SrY+Wo
- eXziX/di18RY0JShc2hjY24e4yXNUs8TsFXuw2c/v+Qk0qNBgF4/qahNZWjMGRZ+
- D0P5B1sv0Uebq+xzkDv0OqCQqJ4NnozJ70wgQTt42xya8ZkjO2DuQDUkSQ1rTnu1
- dqS6q5VAG8vfoITaRfvV19YkUCWEg8iWkdEZ7F8iinE9IkoA/Fa2x5LnW48Z3nfS
- XgHxSgKKGO9N1kg8Fjo8fgc7bE4TrNEr7DzdinfTy0LkM7v5EEydxLOMzUyysWqp
- gOXUFPXXaFgxfNXRu/0cdHKpDB4Y3vqSPUSTzhnfco9IFt4LAyHTohoRlx7V/1I=
- =nL5O
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//Qa2Mq5vcOMfLgF3lV6f0RK+IQdFoGIetj0dbIESkl9Q3
- 2mYnXqn+OIwRg1V0nz4Wpwj3vahpWhSAWIlmBLTxjEM7pP1MinM/ohuiT8/d6PEy
- NEeut07slQuSeaD2WR9CBI17VNOQgvNKx6eB6zLH5+RlvXcSAR+5+0A2YxvMg2Qq
- rOMi9eWZPqiRw8j3pFMxl8bBCgQybP355SLIQoL1PTMRBCIeKovaXHICjAvEDfm8
- xzy2hvzrQDYlSV81wdb6nBh9CGGmhOrRleE7icKqAzcwEHxo/FsHAyJsis6AhgO+
- aMF+PaHk3WLYg8T6+M40YMe7lML93mXT7Xmbax+igaf7ZASgyj8ZZnao3hr9ZZq2
- ST3cy+neZkr9vJbp/ZLPunKSxOTa7MzoMvIZFAKWy4nx3d7xagoNd+2BITBJNNlk
- BYOP39v6LPh1tsMVrUQcC7Mrawq1xpn5C938rfcCHOsYxn9bU7b+aScFVqITh9uF
- 5qHlfBn4/5vCc0bTc4Y3QyavxaWiP+SE8O8cO6QlqL+AYtZCfqdup2WH1wTOWrnd
- G6UldxQpcpxyPK/4LGu5DcWWGAbbHa76k9LJZN3YrdSft5J26YLsyRUseGSmZ4/Z
- fYG9AoqLOH2kKnCoj7kESmiz3lt7DCtvE1nrKUNJZTrcku+nLWjebHDGWjOH5HXS
- XgH3vcgt2kbkogmgxt24pSLQeNK6SjI4fBiJutlw8VCyrqxDATR8yQlhAIGPLGbw
- X5h4RgJGvSFMrrr8BPW7L/294eqPm2bbq/MRC2O/9ezO3O4453N01fePapEqqGQ=
- =FkUA
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/+Og4gwY9vzUgLOPWYGVrcSIRSSgK3LngQLTD+aKDBybLQ
- 0Q0ln9kpfz09Gq1fkwI8LuoeQ701qlVa+0WMv864tHJR2YmO4S8+IMu7qvX5W3pN
- CEzgDfZL+ovOMSB71ZK9YHlliqauy8cnrYk/ucwQO1yukDqzutlPeK1CpE/f0wBm
- A8patwmFGCSPYvmIBe48qsvYKP0JNVIFmhG48TaHQqc95YbhTYXHs9qz4WcFbMEr
- T31+fv/jBgmIU+nzQcIhNfHJ2sdmMXF6rRt8v3mGQrOUcU5es6E9a3i0dVZFZMc5
- 9akn2ELqbZgu+wIH+sgpuB/Hw3AA9SBhaeRHKjEK6e2l06OCRF14EdB3WJLC9fFI
- 0IqEuEK6dM2lkSCsEVTZsz/zj5Gf6kmXLu3mT/PKcui2Op4SIpjtv/CtlxS5kxxx
- dDJd5aEKYnTjVIXrgUer7KD2Ld7oxWr0TMxGd9dlWHViiBWCIh2jrbwh/MYcXA3n
- nMj3dUjdpTO7AZe3rBAzkfoMtx5a67HX4lo8WUJKzFgQ2jxvhyw+2mPdjfy1KErT
- Fa/T/nnfIBAN+i2zLBTQEdCDEdrbSKTZD2/ulKSlEii1wK2ATQHISRzAORUNo60n
- Dp9cFjITOoKeGdtrgfs+rptQ5mSuNNjJC5kUo86b/0IjJX8wjHKl7dtlkebhej7S
- XgFcJ5WY/8eeXZpXT1ooY6OggJf7Kso2YYR8oZW7Z55zjyVfXKsJS3ytPNB/KAbd
- u1G4BybrslSPyXQU9vuX4OSstiqNcqVOhNvMBa4gLnE5k7sumHI8dMbHcW+nBY8=
- =AwqY
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAlB/i5V7bWDewYv3RqyZMsZoxmskBKPe9cmvdoKc85zIw
- 7NnX/YFhUHerQkrdEkilB6i0Hd7aiUQ8R276cLXh9v5EtzeBZiRrfe+2wPc47Q52
- 0l4ByI0bDgXa+Fw0AgTp/OEGDOXEUaSEafGEBv0YrysD6f/9WnKYTt5QjBF2Spij
- f0pqADF8QdDW20fPZDOtt/gUezsA0AiV5HiShS7XsheBIDjL7cY15ST25GhXmmnR
- =qZnD
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdAPbYdliNriasz0tjbTIqqg51QWyNtsXN2PvIlxeMiCiIw
- GbN1PKHxkcCwJX5K1zn84qRyL4t2ZNYHZo1Eq1XarRN4o9Ss5koJNH6KjnDePlPX
- 0lgBBqapYcOipdOqSiXdRSvHe3muvvYPV2kH/OEsTySkPcaNPhg6e2lLkshHhVKQ
- 4PleX0qXAwnZnXlY6QtALs1LZODye517DZKLZ+T/jT+u34kB92pcqtAH
- =ZsVt
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T20:45:39Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAsW0YJG6AeX1hGHUJ/Nx8XgJ+tmdoyrSeSV2x+hoqsNJH
- UNpByaOak57WuGor60zKTILJc2rDfaPF2ZzCEJJVmtfbAvbdAYfyA6RyHZJkOFsu
- hacNVLIwYzbaRQhS/7IcmAifJIDJhEcjzkwD6LK7TnEhM13Y4DECk2vykZ1ex7hm
- TNy8YKoLH614SthQgv+Zbnuqd3CP0Gj4N69+rGVMbJYIBwm5+kgucva3fYfEM3Sj
- 9nDh+0XAWJ+Cid+ID2/IpDTpj262hlo+yISTsQIHfqdZ2y+HHb5NQexKV9G9eQJ5
- tdcw6//ttwLO6Aq+N5+DyaIZyge1xUGy64JBsn7ErWqKwbPYrVApFPXgzR3azzDB
- v93BNLkt7O15xgMQryS+ADjgE/XJxrl+4yevMKn7RJp33zfFmoNQVn2OuDzNiw4X
- +pxqC8f77sdlsz0sghvdhQVDGEVFx5QOoHihfeGEQ4is47oq2wmZM9uWEH3jFolp
- cfZS5wTbAOjJjAn4ZcnSuNccKQfdPGKeitNYcCORBpgU8t5JfWIIVHNDTVM581CY
- jPX+3Azr/K8hUWHxvNZIObObsW1l8VOiBsQExWVZ7jgwgayieDpQcm2JSAfnTcE8
- 18uhcR04g4i3BBlD98cyM7hBye+KzRpJ5PRCGvlp4V49PQKlGixCHA/1AVEHTbfU
- aAEJAhApJpmpjyUSzNCpOfterz6jbX+WdFpvWiQwvyQ37R7xRb5JZgNlDQ5T/lFf
- Pb2b5i0R3ZpGUB7si0PyiTMCqM3Cas734Sy/0Nw0nW7TqjprsTSOhSyTFfKJoFq9
- tuTBFmrwoASt
- =MLHr
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2 b/resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2
index 6ed0beb..8832381 100644
--- a/resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2
+++ b/resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2
@@ -11,7 +11,7 @@ $CONFIG = array (
'mail_smtpname' => 'no-reply@cloud.hamburg.ccc.de',
'mail_from_address' => 'no-reply',
'mail_domain' => 'cloud.hamburg.ccc.de',
- 'mail_smtppassword' => '{{ lookup("community.sops.sops", "resources/chaosknoten/cloud/secrets.yaml", extract="[\'smtp_password\']") }}',
+ 'mail_smtppassword' => '{{ secret__nextcloud_smtp_password }}',
'mail_smtpdebug' => true,
'maintenance_window_start' => 1,
);
diff --git a/resources/chaosknoten/cloud/secrets.yaml b/resources/chaosknoten/cloud/secrets.yaml
deleted file mode 100644
index 53b7522..0000000
--- a/resources/chaosknoten/cloud/secrets.yaml
+++ /dev/null
@@ -1,238 +0,0 @@
-admin: ENC[AES256_GCM,data:zIcGTqSicvQXJE6FAk/HLQbIMzAHWdTfLDb0AGEu9bN2+V3Rb8ujjGpiDhIbPtsc/z1Z9i6Mk7I4tQUl7ErF+w==,iv:tRKbXdpLKfT6N+8QNY4N3nennRBtVjUTtC+BCoPOXxE=,tag:vCZZaISD7hFmQnn9FJ8LXQ==,type:str]
-DB_PASSWORD: ENC[AES256_GCM,data:j07CqdB9vEPY/7mSIIxfRLKA1YOSoqgbt3pw2EgwyO1oua3r40NvRLY6VI0CXmcOXOedm7/lX5mwA3cZ15pBhw==,iv:+llV+OR4leYx6KyIRIadhbcypibfYKFFEmlftAl4MlM=,tag:6cd+8/IR16ypE09UDvI9/w==,type:str]
-smtp_password: ENC[AES256_GCM,data:VFhGRV5Jg19UTgm5mzzF1gcw2yyeS28BPuIQZaH2nYbyQGbxcOJ/YIaYbCXufoLOFLgUGJP+lHjZEs4fWuj2SA==,iv:SiUpLXthEF0UlJGCK+Q9cVH1BXnDtN9l8ZY7SeGU9KE=,tag:OmO7BcMH/eGrCOx0z4lQzA==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T19:16:51Z"
- mac: ENC[AES256_GCM,data:j1QfgIDBR4seyC988SkCODR21AhqtBQaLLD9RV10hnqclgaByeoVJ7zdDUR4G41lhL9tbOKUy4FpOIQQp+kYBztu158cO1DtEU5WNUSV5GlRjuFRgVTCYZwJLq2uDpINMhfiC62MqxEjk4i8MI4szNK1P5rCqBvnz8f5gaUrTtY=,iv:EDtJbXOsXE/Z6DYi6dQXzZSflQUJN+TaqKiAXFXz6Qo=,tag:2Uu57dsB6+vVSZBZwB2lIA==,type:str]
- pgp:
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//TYjfG4qAhFwZwvWrQiIiNc+Qk7WqZ6I9fsvzhnRPMsqd
- CO2y99ht1mXF0fGs5MuBtcml0OHr9kbfKWmf+1JwNEkzFdYeK6YvppI5fpIVgah6
- DxUAGQ+cquTtUM3E8XKIsXIVRMkrkJdzVYB5hxwV8qjBUAh5tuXg6Fwizpj4UGuX
- hF9TMYobvt4EanLDiAvMpo3oe2vjGBpkns3BpXX9oSq5hExlqLivifRHpJvp1j5U
- fTwrYqYPXY6mM1RBP0nBSyJb8sQlg/7qrOPQb8Y5/ryWs75JA6zVTpd3fe+t8pmV
- Uncwewh8fujrhPkLdvjSRc0/9uWf8YcohL6Oy4lgGffwPIMyhlAaXi4ym/dtM9td
- 8Z/sI7LQ3iIIPOAY++MOQvhmtD4AQkNJM9WUcA0n3fHvVVnNhVWHFO6J8FzH6q/u
- pDWhCK/WH5pTyreI0ngyeSXC3Mwq8yAMbjlhvZktZwmYCKrp3CWgqanZVPKHx4aK
- wO+JPMkcr86mj6/sWbRq3pqJCMZw5NBPxrdym3n1suthmMUOvnZulQt4RgWLoOrx
- 6wDVdH3Wv0j1yjuY3QdMZqOKECFhHDRuI162PV+kzGYwrcbzQlmNQgqK2ZhR1B7k
- wJziWgwynZ36AoPi6Fi+rA5CIPtVSlK6yr/1We4yciFic/RfmAVwWpMkORwOCBPU
- ZgEJAhBpgdpYmO2MdE3vLc7S1Ft9YhAOCzgGHYcjULa0lrA7K1xpDNkxEzotkiu1
- +/uFrHU7bS22bcOFD/l6dO1TzA1ViPLo1BZ2xmKToTq8cIzLjDrqo2sYHOqYtaSC
- Gees+Y4xng==
- =VeG9
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ//e05aLr6OZAOyi1MM/lGZ19QCBztJiaMWVL/BY7r3/d9f
- m1BTAgUZNgSROHDgkH8uuXqWHIadfIao6gUFKIzLsrwPfuUC+DyNxyE/NQYvv0R2
- k/IgXAuop1P2+thm13rVmI7G3yjGD2NOkQzp6LlMECfImts0QZqrfEUXd/P+WyCE
- 2ooCyeDstd+SgjBTHd+o0sGtc084XtpnfX4Qw7KGwuaT+cUkKXbdPqzxug+JpJcc
- BFK5F0MbrEa/wA1vAfyIDuZw0Zy3fGGO9wASJoc2ChFb/BphOIVsqbM2zNB63XDS
- ImnwyCpDmyxcBon8lDTlkd941V+YXzSf2cnyV//o7oLjFVQltrvu7pGhUrQ99lAU
- 0Ayn8jiAtyUenHOH2gsXdfGgg45lGf4Eusn4XaCxwSKoG1BCQZwR/tVnFBeSKkbJ
- 75tOl7UIs+bkLx5LWB1ozbTrhuOymR4h1BUbx3VL7Th5K+ChHs1w90xJWDP1dmEr
- +euiIaNY7OPfzNFZpNHJb4SQdtXzeK9fSV8N1c5G+BxBIpAqsVUWkXqVXiVwKjS2
- BJ99QhpmDFoCy2d3O57mYM09HgWXbekFR0VckL/8RVVpHfdnQcauXEMrpl3AHCfe
- DK3fDucO/+MUQ+lnyDaoRjJfjsM7PQc16JnzolEeOLMbKit+KAjMC9EfvM8GobHS
- XAGQHdTiHz1ppYhBZM/RlFG25W09yKA3m2pcYkbjcB4d1fu4lR8s/PhFT+5HVZa+
- UcnKDr3Kx517Pgg6Snq/7zdMqnIe3q0l/0Fs0oLjL57JoxSTELp6jqORXs7M
- =vOAi
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ/9GWEYkbX/xjrCqZfmxA+V0LjdDevDXKaII0j9vga28WIU
- Qg9AeLpvvgQRwJvZXZuCFI9ujmvpFePP4OgLkmh+6hx3dHY3COzT4i4iEH1GbxEy
- grGXSJaynPB2ONvaZbIt+FwNig0alCiMPQhzLnIS+hmnSYbHFPqKGdqfqryj1xjI
- JhirzLV/SYIAo4Tqgr/uyq7Ef4JAtydh7TWrqbdNQKeoB5Zu1uU+gVHagsF9mGCV
- 49x8K8EiyMcgXtYk0UTN4Q0iWArDtnM2x2/b2PJ6H3yw7pmdE+MPzGdtRr4t2zAI
- dF+h6PdprcHKrQa8moy0KSCm+zcSkL0vxUP8+X3WUTS1VUCsn6l/kk+4rM49izqP
- dvmQldGSHOdPG+P2dAS68p/Sq9PhsYZEGKub+nREyQI0AW3yVpWVCbWIiwEWnQOP
- NGKIRGBdY192oNvb/3ul3uNi/qcKFgrP4+ue5KAmJgkObFTss8OGYfEMQ0dncGV4
- UW9Iw7Xo8e10NPm8PpLySY68pGMpgFrWM/Ns+ifCfEaTVSezXYRLHy5XfBBoQFN8
- RJ/S0+8P3/HRyH6q/vbFkWrHhb95KwxRLXz5qb2yoy2/5z6+dgSKY51972Zujxjb
- GklVDqPrcgCLqlApfw2yJwSe60pMbE2CxEFzAmWLfGpuvyOhpWOT5jcG8F2HipnS
- XAFUK/+WAcOdJhmSRZt5aX33jJ1uJXQoxcbAvxdR+4TZxmbPjSLMnZGs9qfMhtvF
- EU9WjE3elMQ60mKBEoBFPudSNsfGblS3YT6K8b4Wij/CTb0ROGXH51ZCTa4k
- =PW2U
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ//e6SuBK20zjqoSGLhf5JzocXFYD2TxIDyCAOmoK8kM/SR
- MPaDWdITHXWZS6o32KExCBYUeOIzUZDcgW/BqNZLsyDfFzgtdYY7j5Yy2+/ezakW
- 1PCY5MoqjZq0x4MMKD3TqQqHHsLLS3lPYeRWgFbFTZVMriixO9GqlM7D0MAmSEL5
- WbDdR4wzQNhsVuMZlF/1Rq/fQH0UCjJZ43VnlOi/2MSA+RE5pqSA4BE5IPUBgVx8
- n9b5asY5bG9N9RmpaOveF9AXh6x8QiPC2br14b642Ccj6GVGBgBtIyx60KdSALfH
- 8twZlau8Z+vAFnGQ09K3fL9AapE1RVRSzu2ndZ8fskAWxzP+N3+oj97JYbaXYvb3
- IAHfQkB/N2EV1b2bGv3j8O6gMKjJG24QCJgmd8/AIVbWzBOzfF6SK3KC0hI31VmS
- RrmZBZlYX/cnLGYK40myYAMU93/9R0DyhWSC2N9SVS7Jy6GW1u/aHyd4OdRXtaqi
- ORhgiQ05gTS1oF3zLB8/7Y/bo1mpTOUPpGQ7mQPaToV/aAI6UYJGhR4EFZBHqz4v
- dHO6Sq/yDvYSYasmP3a/TysEohkwnKe3/TSnGrMYVdWNX/tAGWqZSUrsWaTDtTT9
- 2QiTZftGTkRFH7SF5DkrbRMmSz8rQHrR8mtoEMtUbMAX9yRDSCHw9CRcfh49dL/S
- XAFK9g7uSY/HllvPHu9V6uvQfbKNqoYmpbdw4egKsYXKVsSecL5V2mvvgNABbbA+
- 7Ma79aZ5KRPtmUONfpkeIjyzhnZXNpSn+nnpZBIMXGbwiaiq5Z8WFBBaaF4i
- =ZmSP
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVARAAr/V8Ox5vGayrWZmtSIpz0yzv8BudAQDZscQGUr/PD6d+
- TFA5aNPyPgCbVepLLWNkE+4YmmkBlxfAKS1b9wIhI3MvtFIKysTHxjqJde2QAntZ
- LdC2Nv2O1xVqQ1x22iQkNVoipLwc6OSbwLs1EC7Od6yCX4Mxk9wDjhixXnjeFkb2
- BTqUsT0toRu6ZtIpjELHMtPCj73pHa2ILIRuWM3H3V3KkUr/InYx3ewCihv4AqC4
- CmkH9CO1abdskPF298f6dlTG6DCnV9jVO+AuuiiT1yXE9zCrVlX+ACTugL+vpG/k
- utFq2gSbgIj/vnw1T5yE8RDRrDJGwWGr5lfoXJfhr1owEt7ddRV1mS9EQBzCpvcs
- YTM9an9nxIv5ffktu7qW8st+qVoqWKANxJZeXkidZxhLGchSgeMtRmnz5tFfVwws
- Og47L48Z+26aBVOLWy2AIzZHakdbyBY4JoXNAtUQrtRPicx0uUJbSGEXCqjcOFUr
- kW4f1iYQAuJwazxrEhKhviO2vV8uGDxzyBzFrij0nd+WAJTjQrpvjWaxzs/IToeA
- nQvMerKx3L9QyQ0FQQFqJuWgcYpjeCFsqija5WxVUlgDk1iDDZudZUbJ0PbeemsV
- TJ4adxzdhQb6YVRRWVdTDld7ZPyPMULYmjyR8oeaswE1X8JtyuNssO1WlYvz2r3S
- XAGhFT8CeuR5FJHYmHwptfKFmRahkLQRKzl8HCly0onUIO5dSXtO1sqUy/KCq629
- b58PjTcdwv9Nc/VyoTbH17NEicwkH+r6j+lztBDPvbJsKnxG2G+en57xZPWQ
- =iLLW
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ//TiP3FUYVgg4Z2gQ90Oq+lXTvfAytKlPioLCqTJNmj0FS
- SxQ4WIl1xgOTy5DdorbwnFYlZRwFedcfeQGIJ6c/lz8Od7ab5goH4NP18OZi1tkP
- 9VdqlZL/7rnAT/OBeygiO95WlrWs7KCvmdIMrB3eQQY9EJP3ZXTbkJyM2vQSuJFC
- y7noAb7BxApAjcmWW98ua8l5oyKh1O/DBnbsQ2lQwWtvxVW507gp8oqJgnD9xrCR
- jV5Uc7ZYxaXKNk4WEDvESVb9n5FTwL+yhW4yGLeEracONI0SSI2lcsdSbWkM7GGr
- 6S51YkObJX7GH4BTPGpy9+A7VOeeKi83XZFgaaiiUA4NcDOg4270znHaF40C8cP4
- GIMu+WbNjl2ABbudGw7BlYb9dposlEkVY0Ce2ZDAQd3w5toGnkVGi5jIG2xNoFf+
- yNG4fNo2H6giDLuw3ucauB+qNgS2CWbUeTXIbt6g9PmILY2s6OuBq9m2o6GmAPPQ
- PRLtiMnFCdivzQCkqRdNDSRAsNR5QI95NFC+258hTEmk2sUk89TqXgFccobX9IYp
- BMaIVnVtI+iCa3RQgKM0OUUDwnA1W9XVEaQ5zFjjfg0RY8JT1xSgTnTc4OiFODC5
- rz3C6CKyh6B4SxNjVod6Nb3jNPDT68lfkf9ua+mB+TknuK3Ov16FWmCCsTGNiXHS
- XAFAZjJvHeHoZ5yjhBVpQJ5bdOOj1kuqtZzKzVWMnLQiXB+XKfxVG+d2kmmCCyeT
- clK0T7IL5NgJ0b/d0+1w7G++k4xSyy9Cg8jev60HJtny1LDB7AqU78+6mWAo
- =1sdi
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ//XkFf/JdcWreU54lrAcgJIpA/DPuflYX0bzPTgGish6aE
- cOdKTppl1o0yOgsxZ/0C7tjWMevM8F8gHqqfDD1YrLerrkDtvCKw+s/UgpqGIS7D
- SzalYJ3l2Sppmbum2VDqIZvhxF2U6DKB475ZMsNqangCjzcjOf4PBrxSIw51s4uE
- nFDYWfaAh1VYyRB681+VUHSdCITCIfXXq+8jdJAagrA707Eix+9WM60oqv6jI+d/
- TCCHufafonXnR728LxdSwBELZF9jb9NGgeG/7DlWxmV1gcqy9o1Rzv9cICtcDxKv
- t1fORQ6tztNVrSUGRXAiGa3AexJYeNnIaK8q3kzUaNqY68TOu6wyNdOEEpeyynJU
- dNytPUzZ4e5vhP4SxBsenMhekLcLt98eDGQP/iLRbfDhiBjF4PawqOIeCQbJ6OgF
- KXJle5gVuhakTaIuTp9QZb8rlWiffv/cOKlqGydUjeM6fq8Zgm6e1vjcbwQNj1mX
- 8T+KhgyUtaUUQPC1qm3LRom4SIM4mjgzH4SQCI9M0At7X12OjId/o6GsE62DU7C3
- ZWywYXH3JIGDCmgG0CQEZrh2Mv+1M8Mp1rZkDahj39ls9gp3reXI2W1+bxdgBTqy
- 4qxZGZNW0XgyaSwTbPR+z85ac/RE+oYKSmbpi8jstdLndIXtL2ipr4G8w9kzGjvS
- XAEE5Ml/lMJDHAJhMTtZgGoh10j/gS8EexwQobzZqiMeboNpt0r+B4OJSbs0WXJV
- oq5c/B2PMghcN4cnFIlesJl2AGry7mI8lq6bnhzRZjIN5KH54e2xBCVdhAs4
- =2EQ3
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//RTa3TiqaH6qkdZDuplbP8l7OsNSmvuk3R/vgiGq0Jp2y
- V3GT+1DuwpauG2IXDL9b36DiZLKX7+ugHnQ1DuSYsq78m4XCVBeIJkaN+2A9K+gi
- LwjRAxidQ5wONKqG6L4ZLConW8fnvuyAi2KDK76B7TcH/Ir+QTX9xg2Tm+vJT9Vv
- o0ZDrNnaY5LMvFFIzN+9wqiBnekw2EHFOYBJTpeqT8zkkvLb3Daoplpr4Uz/fdbR
- hlPP9JyI8TFB3PpMEF84+2lys2ob4halzGW41A9+9zFiPcz1mzL+ftRKFqU8Sd3x
- EBbiu/6xVycWnySAMiX0p/A+p+3pzMJ40/OJHC9P/HxdbFFTvpGzL95qHHu1aDTW
- vlQza3qQTk7konQiPAqZpv2fAteXCZeqhKgm8aowevbzCeGZwNYaN0yQqyROEE7V
- z702pOsize5aRsGWlxhtzrfpHVlJ/yxbg3J4vv2WAycGYmvH3Z0AJxClML/KmuO3
- W4umyrMQrmMMOhSByp3EkrPH2SXs6EObRoUwCaA82oJCcvNnEayRBf5KkX+FWqMY
- ssVECN1VX6sZFYH05ZGZ+RSpzNJrIFZPx+DrbmcUQBgvOBqIsWiaM4dNpCwRVuKo
- GhwuxdEKipcyPlsp274qwXCoKPGyjZxfcTg37naq0LlU+4VCYNGzuEijegH0e+HS
- XAFxXl4qoEaPAHYqMADJXOOkYGcnNUET8CwmIzuqLWrE5uHgKoX9cBrCN91jEFxb
- KH5dT4ysfagFkEWf5sNjBYcuxiYIP3e8BbKk2lG8DvZJgWox7qyvKIo5oKcD
- =gXdn
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/+LiEI5eSEGrABofjDaIKiROJrC7XKLzVWPJ33mxxVwGsC
- 5mtjnZNQDHa2RiN775zLKOZmLvrKGCNHnfCHtcax0uaYTNeUVn0Mnq+UxYwTPXUb
- 1VIX6ivCI5HNd2voqM965riflOBOZbRsDK2dGodl4tMdO4zKwxJ3wDMhVJ3Po0rg
- UseEnsgXKP1CA+lGoYfNqoL2rstr6CNLcb6dZ9kekX1jm5ZegH7Xsevf3ZbVDDMS
- C+l4UijpngfsgyZ04cj8DEQuCZy90GQxkJAl5NWqcJ+recZkYlL+B5eLA4eIPt6u
- cPSdjPnzylT81b/cUsV1NUX8vNU5W/i2Nk4eTy1U5ErsDEmp1q1c3XioHO5h0fbZ
- k1F10gRjtljnlDyUv4U/5JdLz4h9/B2SvbWZT977RUpNDcLtuL1ePTs0jrOcTJsq
- tVlbAYJ4iUtMdUhVyftCQUo70Lx5VNufg/TbKTC/TWSSRl0DIdDa9adfedlv7+7o
- r5nXitAIMcT+2nkPeW9060G9Vr0ht/7tHcMNBrLuXLNzIaQSwl3+cmC9CsTtthdB
- 0+tcuZJ/w2WZJWX9U6ubJ1vWYdlS8PAEGt0XuiBnYO/CnyT8PrGMtJfDqzt7A1yt
- jADGGXq9QF96xki2jPo35TommATNAJsFi7d6NjGOKcFhwPiDxiZ7G0V0BiD0WILS
- XAF0B0GQDPebknXCpeqs3aDSBtg2bvCLiK7l28xs1hWZddt5hCTpzEP3zL4lDrGE
- 9+SSHG8sJ03iG/zGuo1OsDOPeLwHbdKoY7PJKgVOg+R3+OaWhIzx2cbW2qeV
- =v5rS
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAAAWAZzuozJo/9XnH+sEbE8ebyKgBi5ohKDVZOlMtCTQw
- oeNOyUBour0BEfJTd1MdrUOBOP8aEL/RpNxNXLJnuo/ZW9Cm/sYr5EtxH1OEuZeA
- 0lwBeaaV1bGtTACOlttrysmmNGWu05AEigvWSjW4X0oerU/3C8B1f/6HNcCeE4FV
- Xn4MKaTZfqGrS+r3PrtyY5i0odIpMQ9BrlUhld4zZQteiCb0FYIU9p9T3trrtw==
- =37ry
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdAwqo3P8q8n8cVeO8pN3QiqJCHK0R2cR7F6g4CBoXL+HIw
- pat6LL4iuoKRlKzGNFhhfcJ8ZGu7b2kXLNzMcN8YU/8Bbw3uym14x6o4M3MOUnpz
- 0lYBGEn/qi8JfNT9anDVH2NoJGD4sVgThagLjOM/lgXAGupXQeL8N2VH7q7aXBVB
- amtNYqrr4FKYSTOTOF46BXVwNVQkNxeL6I7FuaRu5/B3MG3xZmHb3Q==
- =KxpX
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T19:03:55Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+AQ/+OW6ZL2OKIFgYinYC8LFwR1S01FTlssJSNAmbA1AWS97a
- eZnf6H7JQMvz1YfLeX4bS57Gip21OCdX+sTVsj9+8bKyBEXI8lqDS+W0QtWhZy7F
- xHLiEcMuv17w0Yg30UszMNaO3MCtfYrJpOiPQ5jYnfraigr7TmCja7i3ySUak8jh
- 16RVF4mcDJKaDb4elCqQgAU3BLaQbIBAV9l0NcdkIN5HgwZCCfAVFXI6KfkIQ2/4
- kow5wg8TO+5OMb3gVE6YO1ntFoV13qkAUvldH2pR8yjnOgZUgMkOpX3JdG95S5y/
- +ItZQ4B2skUPu8dp4xLHoy5eiFgOiI4lKoFNknB0Mh4f1Wuhn+KHnWnnWuEdYBWe
- OQxyvGbZTz2axeuN7zonS6GADzd+/jNFiaWYdaQ7htMiaD2cE1zH8MJMJRHTzZmU
- 0ifH0Y+9+lKsqVwvoRDrd2pQnsjnA+saRAfXqluos2fGCMOVwIXju6rsu4lkUlsD
- RuFQ6fEq1SyuyeoKMeMtahAJO0NW0DSpxMm2DCrX/HaO4adIegosVznvpqFKUbBX
- e9jAp9B8xeWbTt8c6TT9U5XW+GXcPx0RG/lxRKjXQRhwd2UrvUW731scODnFLSqu
- BFgqUByk2iSEoonZAoAS6gjvC9NAMEuLwWvdUejFbAx1ddknNI2YuoRcHrHnWjvU
- ZgEJAhCkTMPYO7Q0V9nRMne6vajbSvXDfR/GwRLez3qRPoTnMpgZO0hpclqerJ5T
- Qel10f8aMLupwPp4n+0khXyIZ+XYxTRdeR/zhvklYe0f2XljXndMFlEFA05vJ8ce
- 2theaH7hmA==
- =IwH6
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/grafana/docker_compose/alertmanager.yaml.j2 b/resources/chaosknoten/grafana/docker_compose/alertmanager.yaml.j2
index ad10a96..3e51e55 100644
--- a/resources/chaosknoten/grafana/docker_compose/alertmanager.yaml.j2
+++ b/resources/chaosknoten/grafana/docker_compose/alertmanager.yaml.j2
@@ -3,38 +3,84 @@
# - https://github.com/prometheus/alertmanager/blob/48a99764a1fc9279fc828de83e7a03ae2219abc7/doc/examples/simple.yml
route:
- group_by: ["alertname", "site", "type", "hypervisor"]
-
+ receiver: 'ccchh-infrastructure-alerts'
+ group_by: [ "alertname", "site", "type", "hypervisor" ]
group_wait: 30s
group_interval: 5m
- repeat_interval: 3h
-
- receiver: ccchh-infrastructure-alerts
-
-
-{# Disable these for now, but might be interesting in the future.
-# Inhibition rules allow to mute a set of alerts given that another alert is
-# firing.
-# We use this to mute any warning-level notifications if the same alert is
-# already critical.
-inhibit_rules:
- - source_matchers: [severity="critical"]
- target_matchers: [severity="warning"]
- # Apply inhibition if the alertname is the same.
- # CAUTION:
- # If all label names listed in `equal` are missing
- # from both the source and target alerts,
- # the inhibition rule will apply!
- equal: [alertname, cluster, service] #}
+ repeat_interval: 6h
+ routes:
+ - receiver: "null"
+ matchers:
+ - sendAlert = "false"
+ - receiver: ntfy-ccchh-critical
+ matchers:
+ - org = "ccchh"
+ - severity = "critical",
+ repeat_interval: 18h
+ continue: true
+ - receiver: ntfy-ccchh
+ matchers:
+ - org = "ccchh"
+ - severity =~ "info|warning",
+ repeat_interval: 36h
+ continue: true
+ - receiver: ntfy-fux-critical
+ matchers:
+ - org = "fux"
+ - severity = "critical",
+ repeat_interval: 18h
+ continue: true
+ - receiver: email-fux-critical
+ matchers:
+ - org = "fux"
+ - severity = "critical",
+ repeat_interval: 36h
+ continue: true
+ - receiver: ntfy-fux
+ matchers:
+ - org = "fux"
+ - severity =~ "info|warning",
+ repeat_interval: 36h
+ continue: true
+ - receiver: ccchh-infrastructure-alerts
+ matchers:
+ - org = "ccchh"
+ - severity =~ "info|warning|critical"
templates:
- "/etc/alertmanager/templates/*.tmpl"
receivers:
+ - name: "null"
- name: "ccchh-infrastructure-alerts"
telegram_configs:
- send_resolved: true
- bot_token: {{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['alertmanager_telegram_bot_token']") }}
+ bot_token: {{ secret__alertmanager_telegram_bot_token }}
chat_id: -1002434372415
parse_mode: HTML
message: {{ "'{{ template \"alert-message.telegram.ccchh\" . }}'" }}
+
+ - name: "ntfy-ccchh-critical"
+ webhook_configs:
+ - url: "http://ntfy-alertmanager-ccchh-critical:8000"
+
+ - name: "ntfy-fux-critical"
+ webhook_configs:
+ - url: "http://ntfy-alertmanager-fux-critical:8001"
+
+ - name: "ntfy-ccchh"
+ webhook_configs:
+ - url: "http://ntfy-alertmanager-ccchh:8010"
+
+ - name: "ntfy-fux"
+ webhook_configs:
+ - url: "http://ntfy-alertmanager-fux:8011"
+
+ - name: "email-fux-critical"
+ email_configs:
+ - send_resolved: true
+ to: "stb@lassitu.de"
+ from: "alert-manager@hamburg.ccc.de"
+ smarthost: "cow.hamburg.ccc.de:587"
+ auth_username: "alert-manager@hamburg.ccc.de"
+ auth_password: {{ secret__alert_manager_email_password }}
diff --git a/resources/chaosknoten/grafana/docker_compose/alertmanager_alert_templates.tmpl b/resources/chaosknoten/grafana/docker_compose/alertmanager_alert_templates.tmpl
index 4651496..3e97e6e 100644
--- a/resources/chaosknoten/grafana/docker_compose/alertmanager_alert_templates.tmpl
+++ b/resources/chaosknoten/grafana/docker_compose/alertmanager_alert_templates.tmpl
@@ -22,7 +22,7 @@ Links & Resources
{{ define "alert-message.telegram.ccchh" }}
{{- if .Alerts.Firing }}
🔥{{ len .Alerts.Firing }} Alert(/s) Firing 🔥
- {{- if le (len .Alerts.Firing) 6 }}
+ {{- if le (len .Alerts.Firing) 5 }}
{{- range .Alerts.Firing }}
{{ template "alert-item.telegram.ccchh.internal" . }}
{{- end }}
@@ -33,7 +33,7 @@ Links & Resources
{{- if .Alerts.Resolved }}
✅{{ len .Alerts.Resolved }} Alert(/s) Resolved ✅
- {{- if le (len .Alerts.Resolved) 6 }}
+ {{- if le (len .Alerts.Resolved) 5 }}
{{- range .Alerts.Resolved }}
{{ template "alert-item.telegram.ccchh.internal" . }}
{{- end }}
diff --git a/resources/chaosknoten/grafana/docker_compose/compose.yaml.j2 b/resources/chaosknoten/grafana/docker_compose/compose.yaml.j2
index f5af854..8e22dc1 100644
--- a/resources/chaosknoten/grafana/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/grafana/docker_compose/compose.yaml.j2
@@ -14,7 +14,7 @@ services:
- ./configs/prometheus.yml:/etc/prometheus/prometheus.yml
- ./configs/prometheus_alerts.rules.yaml:/etc/prometheus/rules/alerts.rules.yaml
- prom_data:/prometheus
-
+
alertmanager:
image: prom/alertmanager
container_name: alertmanager
@@ -36,7 +36,7 @@ services:
restart: unless-stopped
environment:
- GF_SECURITY_ADMIN_USER=admin
- - "GF_SECURITY_ADMIN_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['GF_SECURITY_ADMIN_PASSWORD']") }}"
+ - "GF_SECURITY_ADMIN_PASSWORD={{ secret__grafana_gf_security_admin_password }}"
volumes:
- ./configs/grafana.ini:/etc/grafana/grafana.ini
- ./configs/grafana-datasource.yml:/etc/grafana/provisioning/datasources/datasource.yml
@@ -50,7 +50,7 @@ services:
restart: unless-stopped
environment:
- PVE_USER=grafana@pve
- - "PVE_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['prometheus-exporter']") }}"
+ - "PVE_PASSWORD={{ secret__prometheus_pve_exporter_pve_password }}"
- PVE_VERIFY_SSL=false
volumes:
- /dev/null:/etc/prometheus/pve.yml
@@ -66,6 +66,42 @@ services:
- ./configs/loki.yaml:/etc/loki/local-config.yaml
- loki_data:/var/loki
+ ntfy-alertmanager-ccchh-critical:
+ image: xenrox/ntfy-alertmanager:latest
+ container_name: ntfy-alertmanager-ccchh-critical
+ volumes:
+ - ./configs/ntfy-alertmanager-ccchh-critical:/etc/ntfy-alertmanager/config
+ ports:
+ - 8000:8000
+ restart: unless-stopped
+
+ ntfy-alertmanager-fux-critical:
+ image: xenrox/ntfy-alertmanager:latest
+ container_name: ntfy-alertmanager-fux-critical
+ volumes:
+ - ./configs/ntfy-alertmanager-fux-critical:/etc/ntfy-alertmanager/config
+ ports:
+ - 8001:8001
+ restart: unless-stopped
+
+ ntfy-alertmanager-ccchh:
+ image: xenrox/ntfy-alertmanager:latest
+ container_name: ntfy-alertmanager-ccchh
+ volumes:
+ - ./configs/ntfy-alertmanager-ccchh:/etc/ntfy-alertmanager/config
+ ports:
+ - 8010:8010
+ restart: unless-stopped
+
+ ntfy-alertmanager-fux:
+ image: xenrox/ntfy-alertmanager:latest
+ container_name: ntfy-alertmanager-fux
+ volumes:
+ - ./configs/ntfy-alertmanager-fux:/etc/ntfy-alertmanager/config
+ ports:
+ - 8011:8011
+ restart: unless-stopped
+
volumes:
graf_data: {}
prom_data: {}
diff --git a/resources/chaosknoten/grafana/docker_compose/grafana.ini.j2 b/resources/chaosknoten/grafana/docker_compose/grafana.ini.j2
index 96c445d..af5b848 100644
--- a/resources/chaosknoten/grafana/docker_compose/grafana.ini.j2
+++ b/resources/chaosknoten/grafana/docker_compose/grafana.ini.j2
@@ -11,7 +11,7 @@ auto_login = true
name = id.hamburg.ccc.de
allow_sign_up = true
client_id = grafana
-client_secret = {{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['KEYCLOAK_SECRET']") }}
+client_secret = {{ secret__grafana_keycloak_secret }}
scopes = openid email profile offline_access roles
email_attribute_path = email
login_attribute_path = username
diff --git a/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh-critical.j2 b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh-critical.j2
new file mode 100644
index 0000000..b4afc90
--- /dev/null
+++ b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh-critical.j2
@@ -0,0 +1,48 @@
+base-url https://grafana.hamburg.ccc.de/ntfy-alertmanager-ccchh-critical
+http-address :8000
+log-level info
+log-format text
+# When multiple alerts are grouped together by Alertmanager, they can either be sent
+# each on their own (single mode) or be kept together (multi mode)
+# Options: single, multi
+# Default: multi
+alert-mode single
+
+labels {
+ order "severity"
+
+ severity "critical" {
+ priority 4
+ tags "rotating_light"
+ }
+
+ severity "warning" {
+ priority 3
+ tags "warning"
+ }
+
+ severity "info" {
+ priority 1
+ }
+}
+
+resolved {
+ tags "white_check_mark,resolved"
+ priority 2
+}
+
+ntfy {
+ server https://ntfy.hamburg.ccc.de
+ topic ccchh-alertmanager-critical
+ access-token {{ secret__ntfy_token }}
+}
+
+alertmanager {
+ silence-duration 3h
+}
+
+cache {
+ type memory
+ duration 12h
+ cleanup-interval 1h
+}
diff --git a/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh.j2 b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh.j2
new file mode 100644
index 0000000..66fd9ab
--- /dev/null
+++ b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-ccchh.j2
@@ -0,0 +1,48 @@
+base-url https://grafana.hamburg.ccc.de/ntfy-alertmanager-ccchh
+http-address :8010
+log-level info
+log-format text
+# When multiple alerts are grouped together by Alertmanager, they can either be sent
+# each on their own (single mode) or be kept together (multi mode)
+# Options: single, multi
+# Default: multi
+alert-mode single
+
+labels {
+ order "severity"
+
+ severity "critical" {
+ priority 4
+ tags "rotating_light"
+ }
+
+ severity "warning" {
+ priority 3
+ tags "warning"
+ }
+
+ severity "info" {
+ priority 1
+ }
+}
+
+resolved {
+ tags "white_check_mark,resolved"
+ priority 2
+}
+
+ntfy {
+ server https://ntfy.hamburg.ccc.de
+ topic ccchh-alertmanager
+ access-token {{ secret__ntfy_token }}
+}
+
+alertmanager {
+ silence-duration 3h
+}
+
+cache {
+ type memory
+ duration 12h
+ cleanup-interval 1h
+}
diff --git a/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux-critical.j2 b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux-critical.j2
new file mode 100644
index 0000000..afb6cc8
--- /dev/null
+++ b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux-critical.j2
@@ -0,0 +1,48 @@
+base-url https://grafana.hamburg.ccc.de/ntfy-alertmanager-fux-critical
+http-address :8001
+log-level info
+log-format text
+# When multiple alerts are grouped together by Alertmanager, they can either be sent
+# each on their own (single mode) or be kept together (multi mode)
+# Options: single, multi
+# Default: multi
+alert-mode single
+
+labels {
+ order "severity"
+
+ severity "critical" {
+ priority 4
+ tags "rotating_light"
+ }
+
+ severity "warning" {
+ priority 3
+ tags "warning"
+ }
+
+ severity "info" {
+ priority 1
+ }
+}
+
+resolved {
+ tags "white_check_mark,resolved"
+ priority 2
+}
+
+ntfy {
+ server https://ntfy.hamburg.ccc.de
+ topic fux-alertmanager-critical
+ access-token {{ secret__ntfy_token }}
+}
+
+alertmanager {
+ silence-duration 3h
+}
+
+cache {
+ type memory
+ duration 12h
+ cleanup-interval 1h
+}
diff --git a/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux.j2 b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux.j2
new file mode 100644
index 0000000..1e506a3
--- /dev/null
+++ b/resources/chaosknoten/grafana/docker_compose/ntfy-alertmanager-fux.j2
@@ -0,0 +1,48 @@
+base-url https://grafana.hamburg.ccc.de/ntfy-alertmanager-fux
+http-address :8011
+log-level info
+log-format text
+# When multiple alerts are grouped together by Alertmanager, they can either be sent
+# each on their own (single mode) or be kept together (multi mode)
+# Options: single, multi
+# Default: multi
+alert-mode single
+
+labels {
+ order "severity"
+
+ severity "critical" {
+ priority 4
+ tags "rotating_light"
+ }
+
+ severity "warning" {
+ priority 3
+ tags "warning"
+ }
+
+ severity "info" {
+ priority 1
+ }
+}
+
+resolved {
+ tags "white_check_mark,resolved"
+ priority 2
+}
+
+ntfy {
+ server https://ntfy.hamburg.ccc.de
+ topic fux-alertmanager
+ access-token {{ secret__ntfy_token }}
+}
+
+alertmanager {
+ silence-duration 3h
+}
+
+cache {
+ type memory
+ duration 12h
+ cleanup-interval 1h
+}
diff --git a/resources/chaosknoten/grafana/docker_compose/prometheus.yml b/resources/chaosknoten/grafana/docker_compose/prometheus.yml
index cf7f594..5237780 100644
--- a/resources/chaosknoten/grafana/docker_compose/prometheus.yml
+++ b/resources/chaosknoten/grafana/docker_compose/prometheus.yml
@@ -1,5 +1,5 @@
global:
- scrape_interval: 15s
+ scrape_interval: 60s
scrape_timeout: 10s
evaluation_interval: 15s
@@ -22,6 +22,8 @@ scrape_configs:
static_configs:
- targets:
- localhost:9090
+ labels:
+ org: ccchh
- job_name: alertmanager
honor_timestamps: true
metrics_path: /metrics
@@ -29,6 +31,8 @@ scrape_configs:
static_configs:
- targets:
- alertmanager:9093
+ labels:
+ org: ccchh
- job_name: mumble
honor_timestamps: true
scrape_interval: 5s
@@ -38,6 +42,8 @@ scrape_configs:
static_configs:
- targets:
- mumble.hamburg.ccc.de:443
+ labels:
+ org: ccchh
- job_name: opnsense-ccchh
honor_timestamps: true
metrics_path: /metrics
@@ -45,6 +51,8 @@ scrape_configs:
static_configs:
- targets:
- 185.161.129.132:9100
+ labels:
+ org: ccchh
- job_name: jitsi
honor_timestamps: true
scrape_interval: 5s
@@ -54,10 +62,14 @@ scrape_configs:
static_configs:
- targets:
- jitsi.hamburg.ccc.de:9888 # Jitsi Video Bridge
+ labels:
+ org: ccchh
- job_name: 'pve'
static_configs:
- targets:
- 212.12.48.126 # chaosknoten
+ labels:
+ org: ccchh
metrics_path: /pve
params:
module: [ default ]
@@ -74,6 +86,7 @@ scrape_configs:
static_configs:
# Wieske Chaosknoten VMs
- labels:
+ org: ccchh
site: wieske
type: virtual_machine
hypervisor: chaosknoten
@@ -98,7 +111,13 @@ scrape_configs:
- zammad-intern.hamburg.ccc.de:9100
- pretalx-intern.hamburg.ccc.de:9100
- labels:
+ org: ccchh
site: wieske
type: physical_machine
targets:
- chaosknoten.hamburg.ccc.de:9100
+
+
+storage:
+ tsdb:
+ out_of_order_time_window: 45s
diff --git a/resources/chaosknoten/grafana/docker_compose/prometheus_alerts.rules.yaml b/resources/chaosknoten/grafana/docker_compose/prometheus_alerts.rules.yaml
index 5ec53b8..a9d3e48 100644
--- a/resources/chaosknoten/grafana/docker_compose/prometheus_alerts.rules.yaml
+++ b/resources/chaosknoten/grafana/docker_compose/prometheus_alerts.rules.yaml
@@ -196,9 +196,9 @@ groups:
# Same rule using "node_filesystem_free_bytes" will fire when disk fills for non-root users.
- alert: HostDiskWillFillIn24Hours
expr: ((node_filesystem_avail_bytes * 100) / node_filesystem_size_bytes < 10 and ON (instance, device, mountpoint) predict_linear(node_filesystem_avail_bytes{fstype!~"tmpfs"}[1h], 24 * 3600) < 0 and ON (instance, device, mountpoint) node_filesystem_readonly == 0) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}
- for: 2m
+ for: 5m
labels:
- severity: warning
+ severity: critical
annotations:
summary: Host disk will fill in 24 hours (instance {{ $labels.instance }})
description: "Filesystem is predicted to run out of space within the next 24 hours at current write rate\n VALUE = {{ $value }}"
@@ -212,9 +212,9 @@ groups:
description: "Disk is almost running out of available inodes (< 10% left)\n VALUE = {{ $value }}"
- alert: HostInodesWillFillIn24Hours
expr: (node_filesystem_files_free{fstype!="msdosfs"} / node_filesystem_files{fstype!="msdosfs"} * 100 < 10 and predict_linear(node_filesystem_files_free{fstype!="msdosfs"}[1h], 24 * 3600) < 0 and ON (instance, device, mountpoint) node_filesystem_readonly{fstype!="msdosfs"} == 0) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}
- for: 2m
+ for: 5m
labels:
- severity: warning
+ severity: critical
annotations:
summary: Host inodes will fill in 24 hours (instance {{ $labels.instance }})
description: "Filesystem is predicted to run out of inodes within the next 24 hours at current write rate\n VALUE = {{ $value }}"
@@ -362,7 +362,7 @@ groups:
expr: (node_systemd_unit_state{state="failed"} == 1) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}
for: 0m
labels:
- severity: warning
+ severity: critical
annotations:
summary: Host systemd service crashed (instance {{ $labels.instance }})
description: "systemd service crashed\n VALUE = {{ $value }}"
@@ -438,6 +438,7 @@ groups:
for: 0m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus too many restarts (instance {{ $labels.instance }})
description: "Prometheus has restarted more than twice in the last 15 minutes. It might be crashlooping.\n VALUE = {{ $value }}"
@@ -446,6 +447,7 @@ groups:
for: 0m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus AlertManager job missing (instance {{ $labels.instance }})
description: "A Prometheus AlertManager job has disappeared\n VALUE = {{ $value }}"
@@ -454,6 +456,7 @@ groups:
for: 0m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus AlertManager configuration reload failure (instance {{ $labels.instance }})
description: "AlertManager configuration reload error\n VALUE = {{ $value }}"
@@ -462,6 +465,7 @@ groups:
for: 0m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus AlertManager config not synced (instance {{ $labels.instance }})
description: "Configurations of AlertManager cluster instances are out of sync\n VALUE = {{ $value }}"
@@ -479,6 +483,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus not connected to alertmanager (instance {{ $labels.instance }})
description: "Prometheus cannot connect the alertmanager\n VALUE = {{ $value }}"
@@ -487,6 +492,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus rule evaluation failures (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} rule evaluation failures, leading to potentially ignored alerts.\n VALUE = {{ $value }}"
@@ -495,6 +501,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus template text expansion failures (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} template text expansion failures\n VALUE = {{ $value }}"
@@ -503,6 +510,7 @@ groups:
for: 5m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus rule evaluation slow (instance {{ $labels.instance }})
description: "Prometheus rule evaluation took more time than the scheduled interval. It indicates a slower storage backend access or too complex query.\n VALUE = {{ $value }}"
@@ -519,6 +527,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus AlertManager notification failing (instance {{ $labels.instance }})
description: "Alertmanager is failing sending notifications\n VALUE = {{ $value }}"
@@ -527,6 +536,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus target empty (instance {{ $labels.instance }})
description: "Prometheus has no target in service discovery\n VALUE = {{ $value }}"
@@ -535,6 +545,7 @@ groups:
for: 5m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus target scraping slow (instance {{ $labels.instance }})
description: "Prometheus is scraping exporters slowly since it exceeded the requested interval time. Your Prometheus server is under-provisioned.\n VALUE = {{ $value }}"
@@ -575,6 +586,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus TSDB compactions failed (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} TSDB compactions failures\n VALUE = {{ $value }}"
@@ -583,6 +595,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus TSDB head truncations failed (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} TSDB head truncation failures\n VALUE = {{ $value }}"
@@ -591,6 +604,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus TSDB reload failures (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} TSDB reload failures\n VALUE = {{ $value }}"
@@ -599,6 +613,7 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus TSDB WAL corruptions (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} TSDB WAL corruptions\n VALUE = {{ $value }}"
@@ -607,14 +622,16 @@ groups:
for: 0m
labels:
severity: critical
+ org: ccchh
annotations:
summary: Prometheus TSDB WAL truncations failed (instance {{ $labels.instance }})
description: "Prometheus encountered {{ $value }} TSDB WAL truncation failures\n VALUE = {{ $value }}"
- alert: PrometheusTimeseriesCardinality
- expr: label_replace(count by(__name__) ({__name__=~".+"}), "name", "$1", "__name__", "(.+)") > 10000
+ expr: label_replace(count by(__name__) ({__name__=~".+"}), "name", "$1", "__name__", "(.+)") > 15000
for: 0m
labels:
severity: warning
+ org: ccchh
annotations:
summary: Prometheus timeseries cardinality (instance {{ $labels.instance }})
description: "The \"{{ $labels.name }}\" timeseries cardinality is getting very high: {{ $value }}\n VALUE = {{ $value }}"
diff --git a/resources/chaosknoten/grafana/nginx/grafana.hamburg.ccc.de.conf b/resources/chaosknoten/grafana/nginx/grafana.hamburg.ccc.de.conf
index a3218d1..c5b68e1 100644
--- a/resources/chaosknoten/grafana/nginx/grafana.hamburg.ccc.de.conf
+++ b/resources/chaosknoten/grafana/nginx/grafana.hamburg.ccc.de.conf
@@ -2,7 +2,8 @@
# https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&guideline=5.6
server {
# Listen on a custom port for the proxy protocol.
- listen 8443 ssl http2 proxy_protocol;
+ listen 8443 ssl proxy_protocol;
+ http2 on;
# Make use of the ngx_http_realip_module to set the $remote_addr and
# $remote_port to the client address and client port, when using proxy
# protocol.
@@ -40,4 +41,71 @@ server {
proxy_pass http://127.0.0.1:3000/;
}
+ location /ntfy-alertmanager-ccchh-critical/ {
+ deny all;
+ allow ::1/128;
+ allow 127.0.0.1/32;
+ # Wieske
+ allow 172.31.17.128/25;
+ allow 212.12.51.128/28;
+ allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
+ allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
+ allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
+ # Z9
+ allow 2a07:c480:0:100::/56;
+ allow 2a07:c481:1::/48;
+ proxy_pass http://127.0.0.1:8000/;
+ }
+
+ location /ntfy-alertmanager-ccchh/ {
+ deny all;
+ allow ::1/128;
+ allow 127.0.0.1/32;
+ # Wieske
+ allow 172.31.17.128/25;
+ allow 212.12.51.128/28;
+ allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
+ allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
+ allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
+ # Z9
+ allow 2a07:c480:0:100::/56;
+ allow 2a07:c481:1::/48;
+ proxy_pass http://127.0.0.1:8010/;
+ }
+
+ location /ntfy-alertmanager-fux-critical/ {
+ deny all;
+ allow ::1/128;
+ allow 127.0.0.1/32;
+ # Wieske
+ allow 172.31.17.128/25;
+ allow 212.12.51.128/28;
+ allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
+ allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
+ allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
+ # Z9
+ allow 2a07:c480:0:100::/56;
+ allow 2a07:c481:1::/48;
+ proxy_pass http://127.0.0.1:8001/;
+ }
+
+ location /ntfy-alertmanager-fux/ {
+ deny all;
+ allow ::1/128;
+ allow 127.0.0.1/32;
+ # Wieske
+ allow 172.31.17.128/25;
+ allow 212.12.51.128/28;
+ allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
+ allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
+ allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
+ # Z9
+ allow 2a07:c480:0:100::/56;
+ allow 2a07:c481:1::/48;
+ proxy_pass http://127.0.0.1:8011/;
+ }
}
diff --git a/resources/chaosknoten/grafana/nginx/loki.hamburg.ccc.de.conf b/resources/chaosknoten/grafana/nginx/loki.hamburg.ccc.de.conf
index 31fb2a8..e2bf4a7 100644
--- a/resources/chaosknoten/grafana/nginx/loki.hamburg.ccc.de.conf
+++ b/resources/chaosknoten/grafana/nginx/loki.hamburg.ccc.de.conf
@@ -6,18 +6,22 @@ server {
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
allow 2a07:c481:1::/48;
-
+
deny all;
+ server_name loki.hamburg.ccc.de;
+
listen [::]:50051 ssl;
listen 172.31.17.145:50051 ssl;
+
http2 on;
- server_name loki.hamburg.ccc.de;
+ client_body_buffer_size 512k;
ssl_certificate /etc/letsencrypt/live/loki.hamburg.ccc.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/loki.hamburg.ccc.de/privkey.pem;
@@ -45,17 +49,21 @@ server {
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
allow 2a07:c481:1::/48;
deny all;
+ server_name loki.hamburg.ccc.de;
+
listen [::]:443 ssl;
listen 172.31.17.145:443 ssl;
+
http2 on;
- server_name loki.hamburg.ccc.de;
+ client_body_buffer_size 512k;
ssl_certificate /etc/letsencrypt/live/loki.hamburg.ccc.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/loki.hamburg.ccc.de/privkey.pem;
diff --git a/resources/chaosknoten/grafana/nginx/loki.htpasswd.j2 b/resources/chaosknoten/grafana/nginx/loki.htpasswd.j2
index 0b887fa..ed270c2 100644
--- a/resources/chaosknoten/grafana/nginx/loki.htpasswd.j2
+++ b/resources/chaosknoten/grafana/nginx/loki.htpasswd.j2
@@ -1 +1 @@
-chaos:{{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['loki_chaos_basic_auth']") }}
+chaos:{{ secret__loki_chaos_basic_auth }}
diff --git a/resources/chaosknoten/grafana/nginx/metrics.hamburg.ccc.de.conf b/resources/chaosknoten/grafana/nginx/metrics.hamburg.ccc.de.conf
index 17843c4..2c52523 100644
--- a/resources/chaosknoten/grafana/nginx/metrics.hamburg.ccc.de.conf
+++ b/resources/chaosknoten/grafana/nginx/metrics.hamburg.ccc.de.conf
@@ -6,6 +6,7 @@ server {
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
+ allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
@@ -14,13 +15,13 @@ server {
allow 2a07:c481:0:1::/64;
deny all;
+ server_name metrics.hamburg.ccc.de;
+
listen [::]:443 ssl;
listen 172.31.17.145:443 ssl;
http2 on;
- server_name metrics.hamburg.ccc.de;
-
- client_body_buffer_size 32k;
+ client_body_buffer_size 512k;
ssl_certificate /etc/letsencrypt/live/metrics.hamburg.ccc.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/metrics.hamburg.ccc.de/privkey.pem;
diff --git a/resources/chaosknoten/grafana/nginx/metrics.htpasswd.j2 b/resources/chaosknoten/grafana/nginx/metrics.htpasswd.j2
index 4a1f150..f680572 100644
--- a/resources/chaosknoten/grafana/nginx/metrics.htpasswd.j2
+++ b/resources/chaosknoten/grafana/nginx/metrics.htpasswd.j2
@@ -1,2 +1,2 @@
-chaos:{{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['metrics_chaos_basic_auth']") }}
-fux:{{ lookup("community.sops.sops", "resources/chaosknoten/grafana/secrets.yaml", extract="['metrics_fux_basic_auth']") }}
+chaos:{{ secret__metrics_chaos_basic_auth }}
+fux:{{ secret__metrics_fux_basic_auth }}
diff --git a/resources/chaosknoten/grafana/secrets.yaml b/resources/chaosknoten/grafana/secrets.yaml
deleted file mode 100644
index 4c8b251..0000000
--- a/resources/chaosknoten/grafana/secrets.yaml
+++ /dev/null
@@ -1,245 +0,0 @@
-KEYCLOAK_SECRET: ENC[AES256_GCM,data:NIj8QlKUAQRR2/d261B/Dw0kUBRhK02Yu+exEK6Wa2Q=,iv:yku1vV7OMZM+Nu+p0ARLhBJaONmar/bMLPJ4B5M0ZyE=,tag:J86R36s3oNjPJmDSAU5i0A==,type:str]
-GF_SECURITY_ADMIN_PASSWORD: ENC[AES256_GCM,data:xua/P7Bf/KWaZA8WPz/nZra+L5nGdlnS,iv:QLvhdFqCirvilYk3MLJWThZ1R29HBoMirjxJGQj2UU8=,tag:vOFCPn25/4cAT2p1GLnJ+A==,type:str]
-prometheus-exporter: ENC[AES256_GCM,data:zQfc9NwHSLnJCDjnS+gGTjxXkEUaim2Pusv48QydYe6sErjRrw35bEfZyNlP+SyffPNY1gD90riuuM/QjIUIsw==,iv:TG41lDK0evzMU66A/rhXLCjSysbTpP4NrzEvKGznQzE=,tag:pIGNSG/ZbTFgdgb5YATwqw==,type:str]
-alertmanager_telegram_bot_token: ENC[AES256_GCM,data:MzTEoeTyd6lCw9oFgje6CWnSk9G9LNJ5CE81VxvflAVQgqsDAGT6VFJxDKa2Ew==,iv:VbP3xie4MF80Hq1C3RadRAmmamtHewhKUwT7uHTPtKk=,tag:usAfPWVU/OCz+eEUOezWyg==,type:str]
-loki_chaos: ENC[AES256_GCM,data:kZP2qoY6u1VpVgXejCOksxJwbcCl71Ou7LzRR//n,iv:TPHrRnUemVWkuijsKzI68hnV9j9YuoalBZ0s+2g4LW8=,tag:7XvjRfpWiBptx5ZIOEblEg==,type:str]
-loki_chaos_basic_auth: ENC[AES256_GCM,data:O81XiVhZUFw5MelQYeU2DGmYW5h4kK05ZzqM1l8OVQhMSuX3Xw==,iv:blfCQcFNl70SxdgR7QWKp2kGls2tZlrq1BPmwu81cXM=,tag:ytQVh3yicsPlEHgmCKwqvA==,type:str]
-metrics_chaos: ENC[AES256_GCM,data:B+T5cql7i4vrXzn0pWzExTZcXTGewGDGap17c6so,iv:0QVxT82KKBZ6rV7PbiH+umAA7fWSHfWlN7aMCGbljOg=,tag:joJagfmPa4rePrtm7DWwTw==,type:str]
-metrics_chaos_basic_auth: ENC[AES256_GCM,data:p7B1UsHexLQwI3QDNOHXthhkioahtbtHbhb22yz9zo4aCTp1BQ==,iv:uwvHdzZGifVj/WHFNAvR2uEvYpX1T6joIMVMqzW0Vzk=,tag:6PB0n/Lu529hkOuJtfms4g==,type:str]
-metrics_fux: ENC[AES256_GCM,data:/bpIyeW1zCMOXHSbS7cFllrZbHh+3+QSp/oU79kn,iv:ylcXL3Rq+oATWlspfj25qhRA1HHmjXGYwBaQAcBMeR4=,tag:og8Yqp5ylgvoEpvACLOF7w==,type:str]
-metrics_fux_basic_auth: ENC[AES256_GCM,data:YqIxyr1TPWiwV7R5q/9o4hJliePmU/+OZpKD47SzjpOltdTC7Q==,iv:BVjXxEAfkJHM1JvP78rN/PUeLRUyDMR6zVmsqDhmi2A=,tag:4+LGGeJ3oDuUhA9lNFZ3yQ==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T20:17:48Z"
- mac: ENC[AES256_GCM,data:h2+Y5NjBoscFdp4rcSSkm0s2UMsDnjr5P9kPXcLgaGa8BG+7uEILZuCl3Tb60CnqmWeXXT6OxJsouMIN6JkoOUieZRkqXe5+6PHZ0HthO99JZtz1cyb5ERhB2Sco5gv7ik+Q8i9qRX+YWh2zIpMq68lmKxJUuc0p++n6DAAHRps=,iv:SQS8szYbDwMTxltfhS9zkHnA0rXOtgcsst1sPEMFxGA=,tag:fLRLTOvkBFbmTlR7o0wBAw==,type:str]
- pgp:
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ/+NUs4UDPZQjMo1H936WFcQnvwwvzL6+DHzkh/K2p880VT
- 7Crk0krfa6raPhWqLAwLxzscnTOd5U5TR50aCK9weRdHwkr8eNcfnFx5GvnRXzun
- i/IL+/7QErhSRDJTIuZ/dR2/vRqvaxysybDOI7TQkQCuJjOtti6X0oY7wyT2k67z
- opmt5CKkL7f0GRDWrv6Ej8LOB66EG2L4IvzwCegg2ASHSYVkZUSDKa81DXptdOGT
- 9c5ekOMBRYK/YSq3N1XLW8bqMg6/4de0es75oqtlTItVzd1muni6DmGnBxL94kM4
- KnCLrlWE5/zA3MAG6Lgrcypf/7/5VB3fcs+0cEj9/0Is+hlr7gUIoNM7BHy42D8Q
- Z+Cg4LJIyD5p+no+wPI0EO5ROEJh7FkhxrDrwqvyJy2R6MB9qy7DtR1zze9fuy2N
- FvWL/nk2gjyLYNc0Q9qt/FBPOJY53e2CwsL6zS42TZScBPC6klQlaQ0BbcrID/Ng
- YxG+LquoWdOerMTZdm6Npkhw9hh8HMhIb8MRq0k5TrRlm6MXexfZaaMA3WAvbJJP
- E5T6N+1cvEqaGOpjDG0+OXqaZbGXqLFYTHQnyl7Roq1CITr1yuZzU6vo35cTepeI
- saBIkHb64QhzBjYNYV8+aUZMEjc4HD2ey4xQRFoJoW7diT4ZamlgbV145CYTBJHU
- ZgEJAhCWWrfjM8xeLQQu+6h3UYAlDmMwMky7Ri1twkhenm/Ck/M9Jpcp79Jjb1MW
- TYnVVV9yoN7C/WFuXfYHMd6QwOvH1xX/98vRn+77XxlGfson4dzLC8ydqzKqoqzZ
- PvIYE0B48g==
- =s8Mq
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ/8ChGGTFU4krb99SLaEVmQ5cFb0GA+YzDuN/+c0vsobq+g
- LfyU/XiUHpJFdc/bBVzipjLQPPlEw42kd0kswOMb9zTbG6ytJzPGMMqEzIy1ID6y
- lC/q3DHgjWQtYFndjs13rQxRkbN3xKPP+07VzZGXt2896j/xL3XSm5TXujpqIIJy
- erS0BsbYFlAT/qdJdFkoqJa7c6j4/kGMMgl6rUpHovIOzBLWE+exnef+eOdzJdS1
- Kk/3wdzx7mItjQ/eGgs7HnyD/hfPCRzyRnoOEvKLS2MTLL5hhtVEWI6E47HxsdKF
- z/IHE9JAYtfXB9WlAU1+v6qVRTY2YbKqhJvoMEWUQyjWlPV5zQC4H4fyeYCpEL7/
- 98UEY2lkCXfkxQNFRy6gTnuVZXfiu9V3ba4rdN13F2RZ2f/051jzo4HASWIHGQGU
- zxp0T2x/7g9bradsnAiZSAa2iS7T9F5qtKHwxgfQLnhZ7/w33tZxmnGhG3M4O21A
- wQgm1DZprEK92jMxMkjmY+cPad8Kp9ptuFp9sX5sGwwTaYcCWAkycphKwHuT7HYY
- K2HvzAKEc1Ga/vLpb5HGVNuB7yntVFWAoN41A+zIhn9z6/qiPZms8oXw948CD8xT
- RIb8Mkwtx3tQdNozkmT5NMM1NwsnndF5GmbKWgcc0pchQ/CGHqPLaiigWf+4qnTS
- XAF9EMkanZWyLb3+NyQAZed04fi8GOqpaPRdPCHwxNG+LGdLqtfMYpk9rdkqMtVP
- Z9oSJ5txuFXFRPhqpQBgQLC/DPOXT3Lz87FWoGjqL4OZEPqsHsFGfBt01PCy
- =FnWf
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ/+PPlENzEAwKPC+u7UaUgRDnPRoOK21hcS/LVEsO7MqWus
- b0d7qVT1hoCmsHRI3kQu9B5p9obZ3Ci/gsaocZXNIoXNadTmKlTlEWjXdK84e2SE
- /kLTfpJMdb7H+h0TjsE/trnzZhUCyBt5mRYNCYmhxRfoLtjyw58YA5aRXsGkaJJ/
- FbZPiSxIYlCdC/Ptih50ONYtmt5YXkILGF2Zc1bAPVkToB3XvLP110eeTYqDahLk
- 1iAGCYJ938O53PACbU8wkocxHvYgkPkY7wN5WM6LgUTqHTgmCTrnTm6tnfLi7dMB
- UxZPrVW84t8afdipC1xsHlZXr+XeUG2ogHs5OLDscZCNE2YLTtacuW7Xain54A5r
- E8F5FVqmv8o5huyqiff6SFxqqXCPdQSI3aDwBtRJh8MwGzNBKTd/KQQVThNT3PDX
- km2V9Fq2MoIoKYqJkX/Qy3e8weqY+mBNXFEDlDr3lyRSFT+R5WSXH5WPr3hYcGHW
- OtRgJTTrlrFfRA8RVlkk5oPg7ZjtQg+Xw4zGC9kxTXk2uEvMxEZke+wtHWUYIHlT
- mxtWLGjQIh4OPOwqlz9eM+4DiSrru26OUiXZu/KzMXpGyfYqhqPqRKrpfQyVzc2N
- AYv0deluEZY5FiqaCd+Xn5ywC16SNxDG0uIjsWJlUNzuYVMlVW2F+bQJR2I7tZ/S
- XAG9XxQXz5+sy089kn9m15woYfvSCvf+GAJl5df5FTnenjZyS/cuC9L71eTtPRpQ
- EWdwJWVk24uZ7ZXhimnexkTQ+p1HNLCNJ45orLd0kHYYi3aCmQKOINOIFqga
- =mRPc
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ/+KFwDbiXnhzYszP8By69MKyfWqmLbLW5V2yNxY1Lb7wVp
- kzRXZmrRmQ5cTmo8UcPn7+V0EWTv10RvrBc1wEsSNDRhszAvPBdhiGH9QeqI+R1M
- t7ohFuTKtNEgg1fEJv0mHF2Dl7pg/nDEs2xYhGFLa6gHQH+rNKDEAX2Wr/JlFPIf
- Zn+uOx2GtkfZHQs3vQ088mhfvMaIrSMozEDnFHKSuc4ZDh7Uo8+tfeSyG6HFa/oT
- t4k6xt/0MpHEvyEStdlR8lcF69o82DHEBI1IFSR1tu+80X10LT6cptI37H7Jo3vp
- eLU7I+BDHKX1T/LEF702wabm0H7A3eaE3RLn8LIM3TF7KAW/286TQ6aSA4KHRMpO
- Y4cGLkLuQsg/HQaeAYLepJS9qOS68xLyHFSUxKK9oLgr77WvTWt8kJC2TwRKTSeA
- hrBDuPeymU/0ljub96YXBvA27QgeGQxyAII2rBDxlrlvoiLgbEdF9LzzN3/l2oXS
- +GTOv/odiMshSXZtjZLC1bSjRlhepmXOX/rc6sIBfbFU+4s+sQvQiIrugqo/bZZS
- cmHT5SbRLlknTLTMibu3iJYVLgyK1148PeFimheS/xYIiMJ8a0zXMAVVJa7Iw7je
- sj8Jglvj4Jyerx0EHXIBbXaZ0tmIM0colGDt3WyMhZ786Wsaf8Tm2vg4+vXofdzS
- XAHAUO60LHQdnyFNMMICfhSZBCewnzGsaf4XDtbhoC4MH4KMboRfr3Lj6yPHSxAL
- htSlOKwHJ1mtKV/j3aXFr2ckSIjBk0O7qe+NhjgWyn/ei2auMzUAYh/gpMKg
- =cR1r
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ/8DJhCD5zkRdM4yyl5uIZV2k7WdA+aTCtGR4+lR6aKKib1
- jNnzIT4C1tBevolfv1Qm9h0/dTvre9DmhuQzKv0/T83h4NzWVQj+U/0xDuGuydJ2
- NGKwWP2svKf0pF6LcCfsmCIjfENgjpMvp65wDfQlHYCP1VcyRcKINRTVYHSX8bGH
- LUkMiW7zy5gnV1PWl9oRsIG/lVGvVB5uKxv6LAPj4wFAEN+fIr2x8uBH1DY2UFyI
- A3gfuSvKFmcV3c6nfmhQh5ywxIU0oguuwZOs8zK9nx81RmmiJvf8VXusGtZH4Hfq
- Gx0GbpzoMZBmKxgiOQ+0HwV0UT2upEIYPnKb5sZyaLwmxnKW7FPxTwo6vN8QzJjy
- Ep61YFv3Sy09RccmGHJsr/FcDdfP4W7S1gIJqO9RgFcC3pJh1CZvoc3+NigsoyeB
- MjRBQLA8eoO9AEvH5RMtiGyJPl/vPrc2WlVBy3TaRznJIdUo+WuoUvaW+QvWdulW
- F4XXosgoaeyw+AYSA0nEV0qR3YZXNkJY/+r/mZGfi0SIEccztlq/BPtpMDgzxYjG
- mj5GvT6Xg4q0F8RRfZLCqQ7yRhFBIsR6+BIJulZj35FELF5oFAvB7fxdZ2gHChWs
- fg6kTRI4QcTBLLkoWHUCgrpEw2+O2UXQRSZZaiYmhCb3eynShBPGbWPpbXAPKmXS
- XAGFafpworKosNggfs3piWGs2b7MV83tz5uf7e9QPGs+c43JXICuQS00I8Hgnwzj
- ybdbM1m9bHvKucH2eWU9Ks9yPreeIbCsQ8MlSX4RyIDcECW9eFl8rtfqC6LF
- =h99J
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ/9EkRT4O3pmCq11RH/doz7eqabPGWwSY9mpwNZJVjdP4Op
- +3zzTeNAu7+Yr62g5LhkC/uTu5y4BCFHHuuRdevLtwFJ7H7avACQF3hK/bM5rjN1
- MsdnkhtNpyvBKV+RaE78Ji3/AuguEBenwLhwadwFWuUItSfmAuaLKTQsotDZFzh/
- VroiTqtoLV5AxYTluNoWK3+N0TG/z5nMg1Ui5DiWlwJ3Tgg36SxqogF3LKXAqZVJ
- 5X7TLSivxptgmugZjua93iqyBCyNlktj/dNrqd0/YIg6xsznNcKsN23jQgQw2Ku0
- BcdO/WgV42hntzEo99iPn67B3S0O82H2MKno7AsQ9fZ9UjznQ712S547656PHYAq
- gSCSolaI5piDDPLPrp78jm4MTIsnfngaslyPK4WzOIkq0d0kPA8LGwhtuIM4mEgs
- Wu33Ir9N2yeDAE2MnJ7ySv9fSs1SJenw9jijRywCgy/vDvQaMa2czp/kqflhW43u
- HcVrW0Tc3FHz8nIkDya0QXrSt1fj3eLREhNinbr+G63uBl5UCLcvh9e3sxtAgSZu
- XtHi/krLkAS0r0rv29y6ap6adtY0VloBgOxZhTYPu66Pha5werFAeOGdXX/ONdTC
- ql5KDMMEa218/ORRDLeexmR2PrrLgsDp4NTtiUw3GnYDN2iDO5e9xEBtRiWAgiHS
- XAFuGmfCQyTR5qXCFT+ZCa6eKL9XoOlSa4cbef4HrHCyLV86BSS2eLQ3/kr09RGw
- 6AwV0PJAKhtCSk1F4OywOnJJXyrk3uM3hcFKs/+ciwuK4qVi1YdKocuzwbXN
- =cvH2
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ/+KXpJutmLY2Kkf2DhxAaq+/vuIhlT/pNAb4xbzzhcOvqF
- Kv6r/y4qj/I7Q3QTbSX9cnvYoRDnnBA6WTAKCs0Q2SWOK//zT3IZ7cl+hHaVcIK1
- SFcog5hwPOyOe1RJaP4tQzj3Ja8G/UxA0DbtSIAkZ0srDcv1nm8+JXMiw5iJkQ+0
- AZvmTIwDsGqmWWAN5Q3sl5eJE5qwFqRUrRVc4xCNwYLUYG+8iinFvBI+0Bn2+yNs
- JnMeFDJaatmSZUv5qVUpYZ8dX3OhPhSYzRbmiDKr3vGsKtl3l2BGE1CUoXQvctDr
- YKWvl2aI9gP1u6T04yAuZBnaX2UwWq/pMvlVghQOfBvJv2R7ScN8fAn8RM6PYaGz
- HSAP5Iit+45/i7GtPpBAB0Oqd+6gtfF67ujMWDB73AFRt0uKpLnwQnYbs5m9YJQT
- Pgq1YWeH3hA0amlseuf8AZjkZJr/IqBhGvYD6zm90nWTbZHMrcKDSlL2D0QwOuas
- u4SEwpDPzanXyGF2wRAm134ClYljFwLAjoVuk2v8BEtlXNCz7bcRuFVkHLHsFGGF
- kczStk9y5BUn3Gwl9IvypO0dfsRYBYWdiu/GnZptiFyJ+m64mFb2cUdu+FoiQcyj
- fgz4eWg6FxPWdwc737IisbFCfo5qdR1tfiusPuiMMFgpuV0rlAkIme9QqtYhZSfS
- XAGLUKC0wQ3nwlXoV5P4ixjH5wFwkUnUJjnYMA3y+CxWks83LkXW0SqDPTTIuUcs
- GYaC2uxr60JFJqeGz0PG6Ul4AJX0iXCrzRaA5tLRFH++esQr1SUYuExSOuvl
- =jQg1
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//fVJ+MdZXrxj9XTS0zIjnms1IjdrvQSe1KDQPAM+4v8Ef
- d+8oE9uKBOiPvkfLK9X/soM2LVi5knOcjFIVe60/Gy+/RBLGeemga9lJ8YP3O2h5
- bKlErkYTufXW4V8ieXciAcbK9D4Eh1UOt/MnAMy3YgQwh5x6uNTvHjhNPk5JJt+R
- gsL8pZ86bbSfyXLnR/j3eO5m/vUfE9j21rHrsB0Krj1McWjCzuvNg5zsmyzs807j
- ysqyj2XLBiK2T3+86OV0fCjcZ/padeNE8y4nVgpIqTu+nPk+qwsUYRwBdPtNgxmx
- ApRPiw+6VdOIWasd/OVG8aPnQPgFfOyqfzof1RsTiYmixR6hnGZj0skCCkrcl85k
- vPZECREW/X70Q4jCJd65Ca2vfHwukVgsqRjkwfIatvE+qOv408NJFIFArwwdWPa8
- SQmia0U+/ESbQOGY5jvGOLWrYaGwPm/t/LPDaJbEp23DmYtAiK9hGG7IQIpG9+cO
- l3Edtxki1mE/wAnhQcZC6aSYHPrT2v52kACiV5V4CB3kZR/anqho1Diaj874N/IT
- g5w/CiFysOAb9RKydWTSPCSPjDJRGtvhjeZAyee7ejl7ArJbsoZ1t4+gDaijIOGF
- v59+SJ96DccwjWjAHL1M6jxwn69+clcfRNnBTdTJIHqllppa63YYiVxjCp8yflPS
- XAEbxPZ7/dxDXMmq0StTPn1hxeZgLcipx1NoPLzRSniZp8/WzeG13lOb7RzRZOyo
- sWU4rT7OZuhvT4dxDsOcnMdfZLp552ipWUXjXfBYQrW/0ct3fGoQfixuepiR
- =kUQT
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ//Rods7PGeRCDf4YLwRBNPQFfz67K8es53RmWZ9oCKiLyA
- gt9cHF4JeMgKMX20LtF6VUFtJjT1SjkVpw9z6ZDkVMj0BjZ3OPH43mQDkeWxHuwD
- /CIkvStntx3Yn7vruz/PT8H7Jhfj9oOnaS5pgHCbqmadq/k6qE886DXOXAeq3R7e
- MO7/3VjsSbdldfJHXVvmsfeJUdwGkXjJUCiKjnpY7ZmQeSqmDjKHOKYlhseowCNl
- AOK7Nfq6MhyQBlN9FQh0JAkG0cBYW4sR3zvoZCbxMY7siHH8UkLPzltSTFYUW90P
- YWdyjr1hPJkxUTWvq62EwM8vDuUFKwaJaGAEk91IgqIu0d1d30cR5UxJB0DOoQVb
- sHUD84+zTrQuEwDixgK3XZYBW78WFM1vUCHNcA942E/hEQkjTz4zaLB8sPh5wAV9
- RME8CNcqXAecjCtQu1SHWUY0V2jYfeDkxvvfjuscvFpyobwiKb6cFKDshygHYa83
- 5lwJNmwaLfkZbyN0yOh+sHl/RotpVgP9UcP2/+zLW1wGb+EP91VUe+cxo+nrtNaA
- xjS8u7yjx5jTdxb5k1vPfaWLAGQwjowhN2z2ht741pYJHp8yGGaQNblyTOm0YAi3
- 6Qznaog128dupKKfl33aPttfCATcS6EZGSwFogS70GFWXTPKu+I2EleUjgi9AQfS
- XAF+kDjRMiR1IiKQkcVichkKo09P+2rBD0puo17nE4v1DPeu67f0UgElY/dcmHuD
- anxTlCt1Lspqf0G1EjypDIlHtVgUjPpsudFOSSd8QqUjHGUMwEW4CXaD2d2B
- =EZSN
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAzl/SXf4vnc/vpZMYZVjV9EkRUIs4G+11iAUGFgTMoG8w
- Xnq/dLi59VpKcXwBp6+NQy+OchDRNfVwxcRDUBpetOwidt1D4K9CDrEt9vFDyCJx
- 0lwB/fJHu88keeS7s9jD2nNwGeCuZvdlnIvgag82BnGkd5zYPYnjA0lbeUXywuaa
- R17Y5caW+N4lslwxnp6UDLzQWJGl9HcRwK5kbxRH6HaYkU6CyFL5EOKs7w88dw==
- =HvK0
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdA4zyupzL6dLotZwQQC/AZ2vklAGwbpaVu9XgH9H4WH3gw
- SG74mn/Ze5YJYR1dOfEKmk2/mFZD354v38nf1N9NdeTpRT+3NVXy8EYHu7pGNHy+
- 0lYBT0Bm2ZFxURsAbGtduD7SUR/Z7cbq4ZouG3Q3ZOvOLoIHDcsAohfr45vvqa+l
- Yf2JvBgpgietM7OP6KBJIrAmfZnMlHKKcMDvvGO87BcOQl6qgjiqkQ==
- =tZvL
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T20:00:01Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+AQ//eNA2kWh8DCMa4Eed7zagOMM1MSmCbX11NYtqOWEaN1mL
- dDSNwONujGgLDJWJIWOvD38iJ13ZOr/R469n+Q0yFlSj5M9ARfXtaXgSB4vNkOWK
- OpPZZJUo0rC0LA6qLke9ZV9McbaGGgfUrAtDd9CwO95h9LGD/i4GoHiwSbOz9PZr
- V6jZU0AWr0vVL8jjdRWoZ4U/C0NqngxBPqaZPcmwdRQoP2P2gP+yt5cbULYrk64+
- R9WL+m0zZaIp+fhZjZBDzgBb0//FxdMA5KyhX5sMn8gkxwjV5+at2roqwFkawnjV
- lRgVrKWr/wo6L2rnqp2X2VuuU84EnxSw+jOWpc8Q1HNIlwKte1dfp7QigtEjqEI6
- z120khHBydlyqel5kOwFqr/Mrem87IUjzqAJdxn/UHolEMoLpVXQofqNYIwXUAWd
- iEuAcGIXXVwtK9GMBhDbM1RbGc1ELvwjllg3Cs2cFzKHhAcFV8wuNufwZqBd8eo7
- B5kY0DkdJseV81BauaqecRnTPQok8ELXZLQ0+YkDfrTWUu26oPz7kSNXOeYby6m9
- qkczZg/qiyxi0BnO/QLasUPfG9N83zessGfwPw+t5AsIhHbHSM4JdfzQObHDgSBf
- QGiso8QjBmcLVnToBIIZriYqM7svtoykY3Zrh58MAl4/Yb/fNNHvB8TyBmP5PCbU
- ZgEJAhD0xdSQDsPzXxaIeFEiHOey3p9eP78OwwgQxo/RzAHw+4FsT0w8ncQc34M0
- xaJTV3Fl6rfqCjEghRPT93AhLR8EU8gsPGf24qFImOBtYJoDmixMkjaR+jC+pE1C
- Icw7BRUf2g==
- =v352
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2 b/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
index 366e94e..227db64 100644
--- a/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
@@ -22,7 +22,7 @@
services:
keycloak:
- image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.1
+ image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.2
pull_policy: always
restart: unless-stopped
command: start --optimized
@@ -32,11 +32,11 @@ services:
- keycloak
environment:
KEYCLOAK_ADMIN: admin
- KEYCLOAK_ADMIN_PASSWORD: {{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['KEYCLOAK_ADMIN_PASSWORD']") }}
+ KEYCLOAK_ADMIN_PASSWORD: {{ secret__keycloak_admin_password }}
KC_DB: postgres
KC_DB_URL_HOST: db
KC_DB_USERNAME: keycloak
- KC_DB_PASSWORD: {{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['KC_DB_PASSWORD']") }}
+ KC_DB_PASSWORD: {{ secret__keycloak_db_password }}
KC_HOSTNAME: https://id.hamburg.ccc.de
KC_HOSTNAME_BACKCHANNEL_DYNAMIC: false
KC_HOSTNAME_ADMIN: https://keycloak-admin.hamburg.ccc.de
@@ -46,7 +46,7 @@ services:
- "8080:8080"
db:
- image: postgres:15.12
+ image: postgres:15.13
restart: unless-stopped
networks:
- keycloak
@@ -54,7 +54,7 @@ services:
- "./database:/var/lib/postgresql/data"
environment:
POSTGRES_USER: keycloak
- POSTGRES_PASSWORD: {{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['POSTGRES_PASSWORD']") }}
+ POSTGRES_PASSWORD: {{ secret__keycloak_db_password }}
POSTGRES_DB: keycloak
id-invite-web:
@@ -76,10 +76,10 @@ services:
- "IDINVITE_URL=https://invite.hamburg.ccc.de"
- "IDINVITE_KEYCLOAK_NAME=CCCHH ID"
- "IDINVITE_VALID_HOURS=50"
- - "IDINVITE_SECRET={{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['IDINVITE_TOKEN_SECRET']") }}"
+ - "IDINVITE_SECRET={{ secret__idinvite_token_secret }}"
- "IDINVITE_DISCOVERY_URL=https://id.hamburg.ccc.de/realms/ccchh/.well-known/openid-configuration"
- "IDINVITE_CLIENT_ID=id-invite"
- - "IDINVITE_CLIENT_SECRET={{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['IDINVITE_CLIENT_SECRET']") }}"
+ - "IDINVITE_CLIENT_SECRET={{ secret__idinvite_client_secret }}"
- "MAIL_FROM=no-reply@hamburg.ccc.de"
- "BOTTLE_HOST=0.0.0.0"
@@ -96,7 +96,7 @@ services:
- "MAIL_FROM=no-reply@id.hamburg.ccc.de"
- "SMTP_HOSTNAME=cow.hamburg.ccc.de"
- "SMTP_USERNAME=no-reply@id.hamburg.ccc.de"
- - "SMTP_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['NO_REPLY_SMTP']") }}"
+ - "SMTP_PASSWORD={{ secret__id_no_reply_smtp }}"
id-invite-keycloak:
image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest
@@ -107,10 +107,10 @@ services:
environment:
- "BOTTLE_HOST=0.0.0.0"
- "IDINVITE_CLIENT_ID=id-invite"
- - "IDINVITE_CLIENT_SECRET={{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['IDINVITE_CLIENT_SECRET']") }}"
+ - "IDINVITE_CLIENT_SECRET={{ secret__idinvite_client_secret }}"
- "KEYCLOAK_API_URL=http://keycloak:8080"
- "KEYCLOAK_API_USERNAME=id-invite"
- - "KEYCLOAK_API_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/keycloak/secrets.yaml", extract="['IDINVITE_ADMIN_PASSWORD']") }}"
+ - "KEYCLOAK_API_PASSWORD={{ secret__idinvite_admin_password }}"
- "KEYCLOAK_API_REALM=ccchh"
- 'KEYCLOAK_GROUPS=["user"]'
diff --git a/resources/chaosknoten/keycloak/secrets.yaml b/resources/chaosknoten/keycloak/secrets.yaml
deleted file mode 100644
index 8125ef1..0000000
--- a/resources/chaosknoten/keycloak/secrets.yaml
+++ /dev/null
@@ -1,242 +0,0 @@
-KEYCLOAK_ADMIN_PASSWORD: ENC[AES256_GCM,data:ifiyV0ywHLiYIZfgo3LBsDu//d5B2ZKyysnUtXCXR6hGWJxQwM4ly/XglERsRNRwZtzWkndpLfXWxlMheZJoMA==,iv:YEjrBPoeqQayEd4rNSNpD6Yw0jgQsOQyRpDkv8RKiEk=,tag:KHf6eaeGZSuBipAPKBkB8Q==,type:str]
-KC_DB_PASSWORD: ENC[AES256_GCM,data:h4v+6xLolQN2xWEKTZvrucvqFCUtqnDoSaoNfsXnktyXR5/vjjvqshpsyu6xGA9V2V3RX7BGk1nX9eooo4362A==,iv:Gvvz+r/gNEMAD0xJdXzNQpkhmwOY/70NQXYtJX8CkJA=,tag:0cj4qsTlYsZn7bz4NZDp4w==,type:str]
-POSTGRES_PASSWORD: ENC[AES256_GCM,data:ihYTt9hd6RJNtWEtav5Cbzz8m/qUIw8WGTwMcU98f5wkYrMTd5HUjRjiWqcx8OaamiCnL6p8u9BBEerCeqeq2g==,iv:4F/sKKzaRiIN47M1a+gGhGMiexNp5x5l7UtPasbWmCg=,tag:3QsaYllKdkPyjiX37yICUQ==,type:str]
-IDINVITE_TOKEN_SECRET: ENC[AES256_GCM,data:ZtUiwOAUST+QmR6I6ZSJ4GoV5qWvcIwZ7w==,iv:1XMYhMInEA5pn6PajQ1GToS4kCUAH6PGZOAA0AZAQEo=,tag:xBbGgvJZzSaNjJI/QKhUig==,type:str]
-IDINVITE_CLIENT_SECRET: ENC[AES256_GCM,data:/3U7brcOL162xh9vXPW45Me7+yun9oHVCI3LLbbq8cw=,iv:+SyhYlGiFro75N9LuoGff5QLDG84GeczeYWQYJ07Li8=,tag:9QlbjBJgyt/+VbzLLWWJWg==,type:str]
-IDINVITE_ADMIN_PASSWORD: ENC[AES256_GCM,data:xIxVMTN5rNZ9LuxqLMF9veLbpjqdSAHDRg==,iv:FctE+EIvL0c0RjANRDYk+6gZ/igxkEmLJ+Y371gMXOU=,tag:txlgkIVVFeJ6pXFG/+Z2TQ==,type:str]
-NO_REPLY_SMTP: ENC[AES256_GCM,data:2XVjIt0tYZnjMSKP7rj+Gg==,iv:d/OFKnCwElUD05cv1XeQyrCQuhtf1JD2rRe5QI7T1P4=,tag:LQAhTYwIdoR+sCNfVh+08w==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T19:52:12Z"
- mac: ENC[AES256_GCM,data:t7Tp8G+2lEIyqy9SYo1cWFpXNJO0ekNsYRtlhizHAJ8VUTjJgQbVoArQygc2XQJWgbploJCTDxOOFh9aphV333OUj376ZQZjwg2msIhNSF/wp8gKw6GFIrqNZWLYR3zcvFdiARKJo3T5vIYmPRLVl0GwqVlIvBRuHOSjHmOeFDM=,iv:IXoOVkjWiHTzWTrWy8QH6WfO9bT6aIIrd5KU8pIeZW8=,tag:me7pC6Zu1TNqVlgyEwrhwg==,type:str]
- pgp:
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtARAAlsCecsUz8CnpckiAsOZUe9MAFRZiSLeErMmZ6Bh4OzYa
- PGeYuz4lSVq3RBkd3n7s8At0c96KE5Q9hgqXlBhaZVO5OXZm/pdSo/jykxDOqGgp
- IGyEwJ9cvH5M7XfZidLMbj54+1BzA9/AW3iFSeQK5bbAi9KYmIzBE5VoVWXXixpG
- czWV35x/6/rOhCWYZfr5JUM8PSSW8lhwlcA5ytoHAo0sKnbmOracK2apSJ/w4SBu
- VtkpwzJ33TUdMqgFXkXIoGqHYE2ovH6GUktQzTY2AchVcwkOqoksD+mHnvy3GlY6
- 7Kw5ymKnOuOSiJXWt7dG9fVLKT+32m5NeiVf8FEx9vvz3hfTsTwXD2uet1BFYHC2
- rXVDf2reKojL4EulBN/2r/sL54tPn/YfkdQPaQVIo4giq6NZ7wR52I4bLys5jOc1
- l5wmKQqZcTVcIML0V6qTJcP6DyhspSpysoGOdr4j4rlzSctJPs5HGu5WGywL+fDj
- 9+KKSYEotGMrOzknwFXCbAER1GFKOVmxyLEgPYxWJa0z0sgsyBU0FtU2j6l057S0
- VdVYEtzsamVUztxaJmKu4ei2hUBXO+PGYCdQH7ZX+uuBkHWWAVzUSspoe/3ncvt3
- 2HAX/+dZzGw4HE6pGChPABSI+txjwbeuyi3iPsBrby3GKv4yafSWxKg1RskDxRHU
- aAEJAhDOhd391/ZDtMkT1Cwhf8H+U/aJDoeezvmHL8BMSIKDKOLhngr79bt0iY1p
- 5uCIIMKO28SZUAgRPkGZVwTlLEuEgXPOeG+AFzkGUOuBMkPAIAJucXTS1Q1VyUaO
- YP2rUyEAMxCo
- =G/5o
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ//bMTtv14q8MsLrIkyOW9XQroCFQUAnokoi6sv3d/rgWzF
- ViQ4WHIsFYZ2HrFd2yPLweE4I4gbuyEEJAw7DvQiNSkME7zO2V2tovX1IXbzu7ua
- 9sfykiT3vImd4LozPWDHR8FRdF/3HfuTQgYd5Qi7LrAj4UX0zUaMOE0tW4WJw6+J
- kvgqErRgU5LYHD+l3b+CkR5tGJqsNESRGxbcRfMg/AFdeR3J2dwUV8wNI83WSGRI
- xRU2SL46HLtx/RZ1Zq1/Q9Aufc+4UqtE+6PK4N2BuerzzXumqjO2vEda5Dc9yfww
- 7e8l680TQLXtWwZozbIn37XOvDlYaQBO9GeDyZknNNPiIy3jqqZHvfomSRka2QOq
- 7xitPGCgW54XxZRO39aKFCOryqzHfTPbHRTQvPfM8OYo4JaAmOn4hIWqIKy0pD9d
- gsZLJ/YyPx4ZONgwcz2Cz2dLB6wC3pEagNKBrvgREmjaxTDEB8IStbL1AasEdJ7j
- nSxJamZU0MK55IjdU+loPsHIK4U9dGr3MFHxpiLV73APcYprgwRwjmBU7MJ467Zf
- kZFwmHDCFpZ7u2mWzxL4eE568a9hb1yiI2nNrsy7aGC50TTPPa9ErXOFd6Kbutlu
- kUzFCZb6xd+SakuL6joTo4Et7DJNZ4nrJZwN/OSuE8ZTiGdH7onUM0UOlMNoBgLS
- XgEytV1eo08+agpBece03q82iGIZ4fN5t3eYEVqbnr9+i5I45txR5B6lHyz3frfN
- IpImr3kIDC0NQslUO0P1aBYeTeRc/9TWhPhtZS1wtIlURdFyLjUQIbnqNkRzDME=
- =RY3P
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJARAAsfjYIn5vhU5mjI/IkfYl5sdVquNI/f3boIA3hMKZdwqu
- UrzVysIfqZLBACms27s9LPQNpeccQHNWQFdWzmNWtx8bwGQRFWjPgERJ0Uin/M5/
- 6ICE+a149oe61pE/5ixQ9AvZcMIUF7iXYqUT6yODxgKKnvprbSNNr5kC8RwACHq/
- KRqpZ3eZR9Trz8teOBCxwh7tJx5PzTPT5QbGeuLKlSd38RHgo8fe21ffVTYtDL7o
- t+uglJV33H4diQRvciH5hO/mpVRw2EBnmITn5dWSunSx1mfMVrOr/lHsfiyoEEBs
- 8xmmNd0oaN0M4XYx7PNh7YMGaR0SgDcEVI5KmU9hNwDG70o2RIT7OrI5W2ccJLGS
- TyYiPWAWgfVfniXA1Ydjkwkd8x6AspBZQMJTsNiaBs5dk47e4txKQshSOpReZHNz
- Xv7fHBocsSlFZRl0ydB279L3Z4q8aOFKYMIw1N6T+jwhns0zBnMRj705A/z/lXqI
- 22x5gOY4uFcFUm8/GtWrh7bmN1X5R3fIehP3qposIpeBvrCi4MFoIpcltbiiPkHF
- ToYUFtO5/QAdhn/RosJRljTA/DFzOnlzuGuvov9XbeuJewtR+ZJmpEeBe+Z6tN5C
- dCIMrjFYNndHbYHF4ztAu6PT8Hzq1nw4sTFM0Fyur3LIQHd7F9aXI7+oQugczfLS
- XgE0L0AnLJRABd2Pz1IibBO9Y+la2xaCpqhxw4C2ohdusIGSfcz8aqvC6PYviovA
- jZ185Bxs2TyPwqPxXve2h0zvqbpaOTmc/0PVoRQEVXkrkL8FfxLxPsJss18hdos=
- =mqr8
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ//erl8qaY9wijgSKKu2xGikhQQz7DkYq0lCZ8KrKyakgLA
- 2vyuFg0+b73/jUd81Xy7j168SRW6GS6Ms/9v6lgGjSt+e51b1nv6G4ob1+KEqu19
- EbTRNeMmTcFoXVMuXL3C2PWVUAE5Gs4POZai18eegQtm3dgOax5/25FvNZXmsoYh
- NYr6+vdZw3Au8KZdFov7iMK0/GX/6GR6XJj5Vlv3SMF8GTCxOyeZwmkk0ud6/5Gp
- amnz327woNAs0oPnoJ6cWO/zlAYb7EkmMfbKG0/9EFErXYkC6Y8N8LrGtOpZXHJG
- doFot4TOPIJGiDbTL6D4+QnIqVchym7JiGmYUGxdzmEXiwe8AO6sKJOR8kZKU+1G
- aSHjpq96IvPewBOJA9NghAI9JoCsWXtqYlpTjeiTXciHqB5NZSgU133R/dqZ01r0
- k4iP1I84hbx6XSdxejySFX9Vscf38WhEfV+KgM7xOJhDTJ8HozQQGj4OpD1WOL0Y
- rP3y58uLF1I3qy9V1csoJtq/+no+cXx3mohc+iiwXQyhYAJML9pLBbnmWJo+O1Gx
- hHYbRDmBM2Qn5TYq3fPOPKNFuKr4pLqz4jy4JC338hTamGQNjbNP/BCCQQJOGdRr
- P2klOkSiZepkLSUSbLVlpZWT/wAqgz2JSxsCENoMUuwPvbK6m2cMs/9A/7JMWZbS
- XgHCqYLJ30G9mtGc/+dpFk6xzpKg9SHHaos2JV/TuqU3O1KetAB4TUEAwLOj1c0Z
- Kf0HlK6l1J4ya2RQqiK6Inek9/D2+KKcvmcMD7ZYQlyeNkLIzKkQIztHS73AuUs=
- =14aT
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVARAAnMF45HC4rYs6NFlsOestm2UrYTMRTkaQh3Sg55c3E1wL
- gaBBuzfgZt8Kwv27d3Prbu8joawbHuFVEtT8n9qW7EYRlkmwX+HptrvBLWHvCGfR
- L/rqCN+6HUJlA+L2RVpcl3dWcI7g1n2/P0+h+3V8z0AlDIWXO71vzX40EsNt5oKW
- FHxEw+0bPEHhrFPJzf0HQgp6XBh60T98JZKi5zq/MgbLreLkEswL23XdiR1diFN4
- 0TCPivcJ78bBpONRvd6mlD2gFc0YDACHCsFPZRL1pq0gxvE1ZNydGkTkjgiKY6B3
- 3VMjWz2wTgiXqArJR84O6qfjZYX1eP8Qd/+jjvxuUGhax8LRu4J/Ccfqp3uZD3oR
- N5ITo7kjWGmdrXCATGLhAD9aneWuBlyHNJfwHZxsf7NeL98d2tuYGF/kpBTy/5zu
- F9MlJyTS3OWkSInWrB7XaRB5slSOCi1JM5GvlEooklVl64t6+yIxQf1UA8LBaMOV
- vZ4Zngcr1FF3CJ4m3yU/WhL8GSuySSlGlWvgfZNYsmJ20Q2AqGyVID9IKXlFNvWf
- 04nnxuQUOmdwQ4OifgCMfvzcyt1eo7yXJ7pgMVT2Xmy6bTLZIrPHw33fP/C8cKCd
- oiUjn962vNI2E96MDlTZxOrQhOOmSQbu4xbqiSSqEZ70xEckmjE0xxR1JwI3rSDS
- XgGuitcNHdV1u00dPzY49PIQWk8wNjqKdHeZ8a5tAjdmps8ACHhL2dTd4j2pTgff
- XfvVU4iwMajbU3p3HjiB7chmYQ+U7iC+CiFuAQbjklPwNorqAIcN5zP0pOJ6O+0=
- =xD2W
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fARAAgaSoB6hSUrpjgo/QOMIQmgjPtF/KtHASST7+/liqcIem
- iQeT5xwACl898ez2a1elKtgFYUVTOopuc108HyCGmFut2/T9u6uGipOfE8WGROu9
- 72mx4hq5IGB6mVz3YIucH6NGCpH8lGnQvkeGydpYUUJPzbv9AWewn0IySJVnC1uw
- UZy4h+mTSFH5Z4XW4JDnPXamfEwKTSHsbM6KHPvql+CLnJgwTOqln3vZeF0YumSk
- iH1xO7OslluJ77jiZlcCfk1uJ2vMCDJGmp7DziMeyf+wTFckvjDnXG79AtQzQ+HB
- 3fcymp+DMIJbMocGiwtXgpEv/4TGTrbhpZWE260ddmOlrzCakahjA6AjGubu6oeO
- m6G8ZTnm0RCNvjmldykW4MZCIbsChZwKAQEOUymiX5JFa0ayZQq1CR1GCGwsU20a
- odNI3z3hpJCwI2Vo21nlNc9hiUp+zA1fJteBDnCS8j8QuinFi9G6x0dT9P6i2+ED
- yV7ULKsAemCzwQhhudYondo78E5lABgGxVKI/+2gkwZTIc4VU9/aRNftZLszlc+8
- nRIs77btYflj9NiK2JCoxr57UpNq19JLs6Otc0vTOjtieG5uDl6RmYOvD9+A731i
- rAAMbgtGzM/1dNnls4VpVko7b8elm+kywijXwSXUzGYXfFojIYcfrCOxmLgGBKrS
- XgEyMad9QOGTFJZDtcBghfodvs6xfLSYwwT2tDWgSzW4GRmJfvb6b+AR3+4JZ+OL
- QQhUFVWM+rVHmAfbnLSfPbLVJFrOPjsTiCOk2onJjiRv8MHWL0QoobZvG/1/zhQ=
- =87lW
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ/7BqkS+RsQa7o8pEN3v1OHEMgSJvwmoP/yoOuXycv8tAQz
- VWxrmh4oYlrOc0xHKTotGT5IY9uJi062sVLbnqVwa9EQ96bNM/r0LleBOkO2LsqF
- t4aXYKV2njzCb63QpjkeguHQtGi0szKWX+cny+AK2CuY3fpG4i/Pbn14fTE1kDlj
- EZD5eXgPSeAG8lQkQazG9yzXOOGJ72mWn3819T3VAFYs7/cXBPYIwB5BD7EYAbg+
- dG7ihiMbcz5b94EdkOTqauJKCTjGE3hsjjE7cKRt+BR2fHXkflrRW/ALBJSA2m4u
- aDvjAPyvg5MIuJljQ0imXsUUY+aga9oWqfRFR9RsBZqXJD193HXzzZg+WrfCvI8L
- fmnRDzEjJ7LYiFJ0Qs7SEuFmlTAa0bk5FWMtVmCjcTrc2Si8o7+yuhysPTIUKogE
- QG65iUk7UozuGJapZYI4J46E1586R+LNi3MmKiYwvD06wprRKdJ3vUqTHzaqwqTp
- S+RbUi55WciSaWs7EQrO042U1mgsyphG5cGpmXT6AvDwNYDrTBbBM1E8QKkZVp9Y
- lKF5ywatwrpWyaxb7OMB8cWaK1RXjB3eDOSYNTUggCx0l/IMAKSoKuK5Qr3Tlcyb
- zBENWNuO6WawhJMac7ZlB6s4SpiZxFMKVVBx1BdsNb/OY3L0BZmnZgWDwvggqTnS
- XgFcVQFmgq+K2CcXsyiMD303sQmW5MHLrLzjUfvH4QRQ7mhDxLqeKQ3HTTB1IeKY
- u0RE/XKAN68fVSeIBcgaXTNITI8TIyGCpXO+BWv9x3k/f8jwMuZjUUD7ikJbzi4=
- =EwRO
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//eJiqttBEkbKmuK4eov9Lo5ZyO2gOfnwJMXm/uFjaMzrq
- VNsjy2PuYZ8TncBTqwDYhTJ4PsMpu7xm9fTBx+JjIhnZHTznQ6lkE/hEfFdeVPtj
- Pg3cTO9SuK+DDYqxPcDux3ZBAt/VheApCLFQbj9wXQZTRo3rWUzgdeElTRzJUSKr
- Z7yDahdie3roxRTn/yM20d5DuPmAP/ae9XxY9KnBC+utaBsWX0lv7kZDPaJQ5XBc
- lZxk/cGn2AAXaWWzDbx5hYvoDQRq1ifaoCE2TMitXwnVtiTvZAxZS7LHtm5rx+gF
- zVP/ZcoRMEFBS2CPunE3uEnYF0vux9PkvsOmE9Z3BbjpY5juOOlf+R0pcn1Yw6oH
- Sge6DzcJScZ4p1LCr5/pv8WlE6roIpA/YswYKY96+GSmfHbLi4YvlBxrVYJv7hNP
- Y2Ce8hcmbiPkiJ83h2RAW9kyX406NipiWy2WJA6hEKNAkS67lhw8gn30/UpkyHNB
- QBPQSiO+EvHlOE02UhYiRSyYa7sGypkNicEvX18U1VXLei7CN7Wq/Y0sm33Ebnx6
- jh48vOdwKjc5dVTwBAmX6GtNkpXY/xuNipwtcwJKerP2Neh4nk25tKTjmTXP1e7c
- 3Ka1Uur8st7UYHspeHSHJjnGgaSMqY7V2WsRzjOV8d32WxzH9NTCm0XgaxXkj5rS
- XgFzvL4Oi6AwE7pU0OwHCYHCYhgI55jX/gBCp8eOWl/vzbAllXFZkTE+1K7zCghu
- bmvxhcdGIHO1Hhossy3KD92njLvhGjcjtcCdaZJnDTKmYBzVZZ2ZiHX6vXYl7gs=
- =inE/
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/+MF6PrPLjAS+QnXkKQMVTSxo95MCPkQmXCPfGpxiEUFP7
- cFCsynGmqpYvhPLJqxlF2FwC34T/1MGv9ejYECfsFHhTiUqr4u+OGEG+Y3HnOG6E
- OUHa533f8uUFqhoinC2l6v7Ka0XZUN8U91NRqDlclzAa8bCVSYBr2xtqkpe/idIz
- lVsnhnTtG0O05voztB2qd2Nhq/Kyavb8w4dunweXVpp5wTuVsvdppPfdK0/2kLp6
- CO+2MeBgLHeb3cRcqgsVFs1j/iJyCSPDgvZK5hPm7K+gxL/KoBV3SQUM6JibFWt/
- CxGVHCAdavBmvQUQpcJ/GcXO2z4LfRcsZlGbZY5hfQ8omb7QF5EYCtwtfEOGpPVc
- ne187Mlq5PgqK7D6rG2EHke5TraIGtkzJxyM50v2EGNrANh787YOfPDWgwgw/OWM
- 6SpfIS/wIGwvHMAZKPP0Bky5tmSePvk7xVVEq4TY7UBB/ndOCzz/GEyWjs2oifE1
- o56dqsUgBiX++SrXxHldU8WqN7LHwBi+8HSFa5hi27gIMcGsXp8FSdnZb0u5CA3W
- hvCswjwv8SHt6g/tpAkEUYair4ZELhJooPy6SemV1DLLyJmJmdObHeiE7pvqkh83
- GMH7G5iwcHWcOWn08iFsubz6nf8XsJ43M5X0NO4XRF8W3HhIAqDGNmZU3C8RbMLS
- XgG1DJ71CT8bACyUGxuDBsW9P0JJn3wPlcVzi4i3aSxY9mcPc6io8TzedOf/bElm
- g9iFKEXxWGk5GgUmVWNGaQIwqNwG/OM3t19Tba+VOdWbVdBN84r7DcXGY52K5Kc=
- =xcRA
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAcZM9nigmcaFdRVOWjgBMqN3VF0atnfy5Zw9cowdtnUUw
- dROW3r6ukUzpSu6AU9H0jYVB0i2p0DSlToK3fR6JcESjoq4AnPFSZ9UwaSTzfnkq
- 0l4BFK57V9AgtPnYWw2GdwyDCwkWGrraqV9LHFCgvkaY1qkioY12KgpnMjmvBOxn
- HBWYuiOzE/P5iGgyZA10TKN5NVFY8V/99djYSMA2PgqdJ1VFS/CXVbeuUGWqt0pe
- =Fdf0
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdA9NXYBmSAcUPEkOo9bl3uya15K/V1euv2kb7hI0nAt3Yw
- pJ2VN3shYfG6InaiGuE0fSZJ3kgxrjC6lRmoRzmw/Y6T4ijBpUT0YGnBw4Avbxdf
- 0lgBEeBV6SFy6kQPJAfZ+6jJTc69bMku1RtJcBbM67tubn4IcFlgWd4heijxIW2Z
- dWwIxaNxUlQ2I4EU3ElZ2Y8j7wUgl6DEdhHcD8Ts20w0VMmjrEgQviLH
- =M4OW
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T19:48:44Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAxyj8/2Ogapa8QAUjDkdnexURS9wnP3JGa4JKvdi07BaF
- uJOzOdboBhrMwZug4uZsbgBou02jbNIyP2QpxarVcmhtC1eij4JqVsa81OE+hKES
- fwl752MiQD0QblKwEng+816iazBA1oUdYyqW0OsZXK3xydjfyRSiY1skbmz9iZfM
- d3pp19xlf/fisDeCCZX/ylLOUn9Rbn7QCdIvVuv6yjwC0tutjDaU8BwFYqgaRXds
- 6Q4TEQCPBJBEycmXZrXtBQ2mKtLnxUlcXd+G1x7J9UBPrBPe8cn8vi2U4hzBaPf5
- N/mz/3r1S5WDG48eDShgMkrtyn1nG+mCLvPxgIHbCVNiufmEKeQKAFQkqZEmeFre
- jb6Rh0F72lABJ0pnpWo+1rRuDJPgTe6IfpWtCmar/YAPHKrjGw5JcXuobYRadQXS
- FHyTuXXW/20bWoDrGEnFX4nA0eHVTwoBpxiFrRUnjwlTOnJ6ntYKPDVzU59MPY5d
- i388xEwdtOzv//e6kRhI517RVMoavRQ0ldBlxwRbTM17zetilb0c4CITyyTJ3pBr
- sUv+XwtLhy7xiq7LlliCUc9QUcXRRFttAJfNyKMDqZ9JbwB5f37GmZIMqiJnd9Tv
- ur8zPGp3gGLJ20S4/Bj69te95pBP4myweugr7mj+A1lgrrtsReHcJ2D04hwT+aXU
- aAEJAhDXuvIXoDHr6c1CwUBiRNQfISQmOohiEWG/Arq/ISt6a8NI3pQbKN3f0k3q
- xygtB3ZTfvS821h8VrqvCcI/tGTWJ3TymaXAR+mGLeW5QPtQP7M13buYh9aoLsa0
- DK5E8OARtCaR
- =FH+h
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/netbox/netbox/configuration.py.j2 b/resources/chaosknoten/netbox/netbox/configuration.py.j2
index 287786c..7648e7e 100644
--- a/resources/chaosknoten/netbox/netbox/configuration.py.j2
+++ b/resources/chaosknoten/netbox/netbox/configuration.py.j2
@@ -3,7 +3,7 @@ DATABASE = {
"HOST": "localhost",
"NAME": "netbox",
"USER": "netbox",
- "PASSWORD": "{{ lookup('community.sops.sops', 'resources/chaosknoten/netbox/secrets.yaml', extract='[\"DATABASE_PASSWORD\"]') }}",
+ "PASSWORD": "{{ netbox__db_password }}",
}
REDIS = {
"tasks": {
@@ -23,7 +23,7 @@ REDIS = {
"SSL": False,
},
}
-SECRET_KEY = "{{ lookup('community.sops.sops', 'resources/chaosknoten/netbox/secrets.yaml', extract='[\"SECRET_KEY\"]') }}"
+SECRET_KEY = "{{ secret__netbox_secret_key }}"
SESSION_COOKIE_SECURE = True
# CCCHH ID (Keycloak) integration.
@@ -38,7 +38,7 @@ SOCIAL_AUTH_KEYCLOAK_AUTHORIZATION_URL = (
)
SOCIAL_AUTH_KEYCLOAK_KEY = "netbox"
SOCIAL_AUTH_KEYCLOAK_PUBLIC_KEY = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Shi+b2OyYNGVFPsa6qf9SesEpRl5U5rpwgmt8H7NawMvwpPUYVW9o46QW0ulYcDmysT3BzpP3tagO/SFNoOjZdYe0D9nJ7vEp8KHbzR09KCfkyQIi0wLssKnDotVHL5JeUY+iKk+gjiwF9FSFSHPBqsST7hXVAut9LkOvs2aDod9AzbTH/uYbt4wfUm5l/1Ii8D+K7YcsFGUIqxv4XS/ylKqObqN4M2dac69iIwapoh6reaBQEm66vrOzJ+3yi4DZuPrkShJqi2hddtoyZihyCkF+eJJKEI5LrBf1KZB3Ec2YUrqk93ZGUGs/XY6R87QSfR3hJ82B1wnF+c2pw+QIDAQAB"
-SOCIAL_AUTH_KEYCLOAK_SECRET = "{{ lookup('community.sops.sops', 'resources/chaosknoten/netbox/secrets.yaml', extract='[\"SOCIAL_AUTH_KEYCLOAK_SECRET\"]') }}"
+SOCIAL_AUTH_KEYCLOAK_SECRET = "{{ secret__netbox_social_auth_keycloak_secret }}"
# Use custom OIDC group and role mapping pipeline functions added in via
# netbox__custom_pipeline_oidc_group_and_role_mapping.
# The default pipeline this is based on can be found here:
diff --git a/resources/chaosknoten/netbox/secrets.yaml b/resources/chaosknoten/netbox/secrets.yaml
deleted file mode 100644
index 7673b44..0000000
--- a/resources/chaosknoten/netbox/secrets.yaml
+++ /dev/null
@@ -1,238 +0,0 @@
-DATABASE_PASSWORD: ENC[AES256_GCM,data:PL+VW8UlAdZbL5CxneydeW7FiDWv0s76rRkdjRT6RfSjN6bHyL7wJfv20cc8QtE/7ACdVFoYe6uXnfygRRUCgQ==,iv:wQP9VzAH0eTDyDPQpYmsKeVThQCzdaHDvcX6eFgjUho=,tag:4jc7Wx4gY5r2XpEHhHSZ6Q==,type:str]
-SECRET_KEY: ENC[AES256_GCM,data:5jtW/ymn/k20bTvdx+fUMJZZBwxclqyZwpRF3+DRJiABZehUYByjwuLe+GXiCaKNjI8=,iv:fz85tWdSaEnmx67NUqoekcVB8meZnMahmeqw5bNRp/4=,tag:veo3Qc3dwGeSj4YTDDL/vg==,type:str]
-SOCIAL_AUTH_KEYCLOAK_SECRET: ENC[AES256_GCM,data:sUEvuYWlx4B/vjYdm8hZym/R3D4BIKVMTZuLZTsnL88=,iv:bbXbHY010ASasJE7oz1q585yg8KRTDcE1rFVk1lzfRs=,tag:7e7PWvwVtng1Azy5C9C3Gg==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T21:07:10Z"
- mac: ENC[AES256_GCM,data:PKLClihEdwtcTb20/b6ChsiqKDUesOevL5+5IEKi7D+KfCOVP7tNnjwxtsMrAUO8+ng2Vh560640pZLVMeLsO5CS2+5b6NkIJeFYyBQeOxCJ0ykuTI9d+pJ+X2EXVUAXLCpiEAywiJeWHunh3JsLAryObxn/eljDqvE5tPX0Yd4=,iv:X4FMyelmNAf37eozHjx1sO/hi6aqrcWjqGpM7kIoKL8=,tag:pMkCNAsMq0F3RPdOaZDjJw==,type:str]
- pgp:
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//e1l1vASGqewH6svL6zyKdVbar9z/r8lpSSVyWifmYD8P
- zNTBR/sYUt3OyaoUry9oFl9XyfCKTlypLi+zTWlurMDgjres0gcCmHCTKermU1sU
- U+dRFyZcRH5+4+GCKEM1Yr5SY5OZEwRwgJBI4vd8m4b3POa9ivsykCiIJVtPvNFf
- Nd4ngfgIAkL6j4QXypFfDqbsKSrE4luPL7MVuw/FEdvO20PubKTLGyAo2TxLcq0e
- A9n9S4rY0Ke4meLUrZsb3lq3SnBN9rOvIN3XbcmtmvO6jCmenLArzQaL8cjx2EKy
- DmqhPqTrkbJgy0utMGvosyaRTGsjvvxk0fU1Olpl7MzhagX2U6nKP5s+Qk7PaBsK
- TEH5CSrr8YbptDUIbJqao1A0z1hkv6kODITdlxxdK+iXsi6VKcvEzFs2PTDTqPIT
- lnhlzlZLypdQhx/0/DMKsIOHrvT3BgQgMDj9Vt8cA/UXjnGK6rmX1VyXRC5MyBqE
- NsytdKl2JUAFUJ1+PVcDefQYgo2ceQK86ZQ0Ol1yf9sOY/GW8fCIRw1TPy30U5sr
- SOVGtBIj8Hj/Xwx2Sw0DzeBwyPNa2bth26+Sc5nWWXbMnBLaa79dOOVWs9A4kSEw
- qT84xg5fLH+lgQkuKHZ6YJcXA5V0a8A9fI+9xnLK2totJxtMI34VdHEozTYmrL/U
- aAEJAhDnZD6rDx2Wm3S2agGmCYVQBRYluLZCGVGPFIWRgooUZh8T+PJmDWKGfVN1
- nSwyhGJptFrGP0d3nbnJ/ayK1f3HcqGuqG2WbQZAg0dR8oEFUwgHX/72sKK3mGq1
- Gzq1z7TMgU90
- =ZDXX
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ/+Lv5wak+JKDhr5XCCnc04KBPNFw0sb0NFfdLzwHXayHGY
- chMo56UeX5UsmOCtlFqcEC+2QpXnvqNKhI+kjMa7ARcvs3ecDL0Z1cvhSn9nMKJK
- Xi/IxJaGAEEDii/AL00G8M9LBXEg2eRXeuWvoxU1Lt8Id6oSmSgL1BbBPLWPLlQf
- ddCCAzBajvnZ8tYDIHV3eY1iWKH2MbCqV9eH3hP48l+maR27DaT+z10s2AvtOucE
- P1n3Q0QsfUrfM9XLldak4fhWq1ykmj1NyHrcLmV3ySdufkJ7amThlPiYl/2g2QNY
- 0TSs2/R/VvzpveTFGXxcVveS/1KuLNzOTEwSoRnkoAqxbXb2aFV/7H5SWUDQADvB
- qAHTLlN9lH0fd4adN8Liq7SgWd29pGnHaGCmZBEPExrRnKLv3mjsb4Me9B6xzHiA
- f6/4cI97mCHiin2T9gxcDBvOnO3rcjWalTlsA24aO+Z0nXorBcJzoWITH4ZsluNj
- Zau73K3qe2GBPtYsRyHR7nUgxpTAOXeXeO64+DepYCC4czZ2iEmtlf+xWJ3Gy8FU
- nlU5ysoVVvkAtX6LZCbelecyX853f8F1B5kjkycqERgIKEFAxSo3OJTCzDe/PbCc
- Pk/Zs+5enAtN8+dD+jTrHLHX9gSOZPdT32/WlOua38ELsfoSCNqsj0HTLuM/ORjS
- XgEEitd3eb9U1YcGYJ258/x2v+ELhTiEVY1hYqD0j1dabZiNEpd2+BJ8tJY44A1a
- 0ZOrevMWFLiu6aE5Th+xw1DgXpmrMuxtxSHBJPzs3kZaxWQ0hiTJEGs/RKjzZ8A=
- =vc52
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ//TPfUT/jQX6rf3QiAyQPq4tHghd4QUx6o3giRAANW4/Qw
- EKB7/kTwPjfwXbsoLLcFf38kf6Nr7a+NkkgU6BUbRouTW+SFFKTQSVfslQfF2hyu
- YlN7sQHL51e6s/geuKU9/4X9+wGECLXJ+bEBD8z2O57vvI3nHHx607EnTW7ZU6G4
- H9QR8CfQvXdOreuxJHuSxReWgivbH+4JIZSQROUqeHbAsbdrtQkpFM2njPvknO8g
- a8uklHLVyFlbJuCHVeGDSgqKIRg/wGHOBsPUR8BCow16TwfgEzFDE2EkqPkb9h03
- DfpbMgYycgAp8MVCQfC1vvxG5ysQTbQ5fGTCJ48bMB78j8VxtvkfyczBmG7gw22t
- gwg+t7eBhOuuVHkBBjuAd2Vzt7x3n+FrPIst3NO7UiGG3Ctf2tnSa69ZqTy3dVhh
- j4USGTNetXzIdAb5ExiqLir1M1hFq/vSE+yg7q+ktt9afXrFLVgZ98zemDsVqhsj
- vwsPTGBk+8gavChulmxnUCQgunpaQ8nokHVC/dbhtLM7ZIyV1QLMj40Fsg6J6X93
- q5DWPX2DPi4zqCWvZCJF18YSWR45XcsOtqkzCJbAdJKs029Y6oP92Nq8k/gRf18g
- j1EeYHm5nJLySsdTB+aQ2cKmA7eIQ6gadfGs4o/Ge4Sd2RwcX0ch+dzHvB6YK2HS
- XgFpVWTm/z/XCK0nxo9eMPltPL0jEM0qMpk8flVcqQMVzba0hVq5MCzkQycFsfg/
- xCzi40J2e/Feh02TPA2picple/C20CcB81Ib3m7CyKCnUf+evEmKr5scwdsdB0s=
- =laDO
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ/+N9agBO50stdifyK81Gs/u9haLtSJvt+qVv6uMaP7i/yT
- /p2KmJ40SdpmN890Wvqgz5SigWeyEnhzoJuymuTwRLzYcZiEl4pQpKF/FFBokO8i
- 6gDxMgXM75UkDQ0C1xv3US7zw4ePSshSaKC6t0q8gF16WIbVLGM8a9zWutTbbuYD
- fMVfCLx/n+z1xGw40qGLI0NKvV/jMNRhcXc8bOmyi2A4CkTnBLwyrfOzkMQSC7Fn
- yS3n4XCe/S1LAHNkN8us9iPlFzwjG3nwBeyS/vnPnF7Cy/1DvysZCmoCMAm+DN9g
- jYdjO2kd8MxnYpueYzJ8+Hwka5q3yZjBAYXeaY1VIiI4AaQSo9W3qc9BPda/lunW
- bW5hvVAGZ3NmjkrMSDoyUVjBJFan042jQhZjB0vU52TMv+MWpUbwqEHu+caO7N6e
- 5M9nyZ39Sauvk3mD/f3OtSgRZRWwQ1dgER34kMmvVCDBDECfwNBfk44jLzzUvkpp
- oFjz5PaBzdmUW9qKhCGu+2v90C+EHje5yf9N71kgVj3x/MHPooeNzhfy8X9cZ0hf
- TB/wa6AGwHGGQYZcO4qLWtFJV0XkSJ2tim6qR3q21mBkqtJqnjATiOEcYgDXXN8u
- pv2B+DxK5fZIZH8X457HFmVzjLqsrLJtuLvVh07Qum2fLhqWbUb3oZM0I/S5333S
- XgF+YaV/cViGp3a2lGd9Khh0yJmKaDgPX83sEpBmS32kXegvBaHeLSm4CcTwmrFZ
- q82qJdZzGh9w+/Ah1C7dUp8tv4oiQmtnHQ4a86Ir30BFQdgVmcvDXTWN28k28Ss=
- =D/lR
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ/+JMHWk7uwJBuVpOTjD4YtwRAV/tKYBzBGJ+UqCcG/r9XK
- VprIs0mXljcjdvbc9udV9tXSXI4JsrBEDpUs2yW3OVVpH6d1lPo05Rj4c8b/PIlU
- 8KoSvZldR679g9qocUHpCBRRNQEZJ2iZm5ISVJVCti2G8C2zrE1jin+GWlmJ2vjK
- Nk0CHKb/c0GSBraAyh2JzInd6C4UJFW/ZaAhrbwYUhTo6wpJiEGTIIiV3hwEQ7Ao
- Y1JVxlqIGdL9kJ0l7haLKqHLFgXQ4iItCsw5hRqeBLLzAN/NwAMQu0lqFe44v13G
- RfcoO89XMn08QVAHkTT25TzT8viiKtaOS7fZhO3eAJkxWligHhpTosy0dBofqUqY
- HGJh5dG7Hlm+MWUAWVQBJz8/UhkJ+CQcYWShVXFx8RqCTtxiFpLw/kTt45s7DPv6
- kzkIFsRHXK302HlaEv8f/UvRuYNFRmrGrFpXOdF9ODCaeaxm5E6A/FeJXW4KonOn
- /butppRe94MaFf/aYfZL+g3VeHo9eT9HXLcRcekm+oIeWEv5t15oZ+w54aqjYOno
- 8rIxC4a8eWjWdU9c6LjaHWRa5tEvGP+vlfsV4yH6wGiOK6xPlME+ikYrka5PDSOG
- xEvcCIG+KrugQZYgfvH/6fUKsPRitDQHQjG6HNTSVfIHnHoqntlbtuvA3ptSnKzS
- XgH5E6gSyOaJH4asmXKT98HX87iBTa4SmEYuwZqjRKipUPHu7ZBO8rHrCv3VEaM6
- btDgJG9rePCSwg+WP5TaAhFvw/5QAekmydSz9SKgS3PenzeFa0tei9ylwGAaib4=
- =Mbmt
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ/8DCABJ4gv/PzVBW51rq41776U4UxAkt0u+VEZNlRsuQRk
- Zl3osLjxVagOiTL0hjpsqUq+2DPwLmpSGK4Xm+u0lvXViZR5TNe9u7YHZ8oPCmUJ
- 6hCvMyeX9UwprQBAHh9TqeNu/ZxWaVJjYhDOWQOeRCNbQpav6JmUAw30BsFDpg5z
- /HhSEPxOxfPsjwFmNJ0/eHFj5PtKuRP4Fq5459EaeqUokHiTNR6+1sWjOYjXydEq
- /m9XKugXxrjDJ6LrockjFXldZqfgzIUfN5Y+mEo7z0aqg6IupDg4y23p1BSxF4zN
- 1wb7y2vAhAu3QZXRjF/QIjJXSgTwAsZ0d446sHGdXY+/RppQDU5eH+fmVlh4LZAf
- BZnV/oFpaXuU7bxyUpyjvZuZpkq8pjtAj4sWfMGSte81KdJ2fIQwjUXJL0/2B+z9
- phl8ZZ5ceVDgfzSf8RdJC0HFf/2oy6fEMRWG0B/8BONKBZIGtSoEJFrXChadZNlq
- u9yTNm+HjXPjrq6jKTgxkYd0XLv3KWuzk0RIPKsnHaX2bVpJ7zu6KMna8tAJ5UZ+
- Y04AJyCrILpGFWUrNYLNDqTxgY0wo3iPq3UJIiL3x2chKVr1kE//HtsqGq2Ebi8h
- 4O5GyaH+/CO+KI1PX11HrJYBDWcKblbu50/DgJ0ADNtJYvIpv/66MKRfvAhUf43S
- XgGewkjx2jTiy9u77ywc9mzZNGgvvbAlHH+HjePNm1pNklHqY6AEeufadwuc9A4Q
- lfj15OcLdrsno1Kx+JXY12X2UHeyY6fpLFaJDqmOCkDULhN5EmQT66eKw+Xuqh0=
- =YHP1
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoARAAjQyI/TkO4z3Jrbcwl2YBm4OqeM8dVaBrhIwfkkKBodiz
- uN98KGinIMs78a7SL1/7G5G2/xs9zG6kRJnhEdnsjbtQrg4Z3aifojiOvXItgf7L
- JeBSh9D63UPiY7PcM1nL/7KDeq0CsA/DDQQKckpG9f55SsXhrwWjyprPlQDE8oqS
- 4QOJ4I5obLDfN/3MZtjde8t4ReLQ70QQDaHG7jPTiAwJJMkFosulFMrGCnW6sF7p
- uj+505uFLmsW28lK+qqf8D1qh2RlbO0tTyjNdEl63eUqQ9a6MymVeEY+SpvgEXkg
- bJyqqCC4iZfO8nATxWlx8lXhcPHFL/B3uuENM7+79z2draaCgvzGE/zIY4ebp+2S
- fHt9g6t+kxY+W32+tj00nTE+L3k2OOp/lEEXiJXfdf7rrJb7Mc3u80Evlw1d49aX
- MXWw0nk/yUpwnAD0Tq6zXBO+lst+CIqLGlrxPbWXb+iAovSHrSj2WbmCTH2P4KsA
- lC1V0rwUddP9rmdIJjbjEChCQcYOAAIGJcPGVuMeTGm5B8fXl0SwnCeSZ36RWl58
- QybH9ZUobIl0n1OnuiUncB0/bQG5wGLFj7Ett5dWBNW0er5x2eBTlQ+lEEPNVzxc
- 491jO+YNqWHwL8/wqZzoid5PVRfR9f+bEjIbcFfdd5Oq8Ocq4o/heemMNu9oNzTS
- XgFicp6aTdkEbaHhi+Jw01DWEIltO2o5mlZcvXRTaZjwKRL4BMmwKxfGJAYUkF4K
- /OlYm+rWtv/q4qHXsejLx4Wn+pzcZJxQcIlo1c/iup+m/tOmvWhWdWuI1G9+oa0=
- =J/ki
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//WVexFLcpNsUwSQAq7lN0M3aBVi2+V7kUcPF565ltzjNL
- Q9QnEM9a8HtUkkxca6IlTFPsigCxeBxEFAvXcUydubo9xplbmDoKXas+6rjF8shF
- rlvMfqsvrmb2slPdnf+/PsehWld7rHq9YjeHb9Boz1pBK+MrsIUblzEd3dDvXRWZ
- 7Qn658/pd1s7G8z4o13HhzhEHQlNSRhU7RJqjVLkJvnzLt/l1I135lw40upVQV/+
- h8UUbkLr8pkhRoEeyGfWuI3Ut0d3/xFgYV//3NyYWewvp7CvKl7ITnKJI0dO0RsQ
- Ci+Dp540CD292hxHTmeEE6oscOF2/RspDnu8xvQl8JXCrBIYXSJXYAjIpmFTnOXd
- FddG2PuecH6lQD/U2QZjQwkfhGD86rBw6G9vtVxQY2vKs5/+0liSwMOpueCRwlxE
- 0uODApzFOHiK25jK0K7in2fYGDWjWK1YgPJX6zgXeIHIgbqjIju5d9XwPcjqOCqO
- Yqr9JunLWRKjal2FJy0pOkQoJ/uu5czBic7k/fB1De3Rp84Lcf9iR3KNlTnXsHqP
- XoPbGmtZycvXeovh4Gh8YVPMZir9vRwuAGmZJ6Ot85dqdgHxNhW3n2enrkrlX3c4
- m+Z2xQn8fFVNWHepuFuZ5w1BoVa3I6G6p7K0AyaaBDXcxGnOrif4WYz0MQ5f8onS
- XgG1DJaoidGPwCNhPsctxazcjulTONAGoLCquEidMtDSrRxLqxXL/cWjhnYphaXL
- Khnio5A5Cpm+Jq+Hp4pBdMmRmy5upD3I+Gav13uT5lBf/9P+FHoWT4lzRvSIDZM=
- =u9KE
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/+NP27FFnjzBNDhobG9wRZ/LxqhtNicRuamag/+Vq50l/X
- KqRHJgf6B4mpgK26m3OmehBat/HNYi/A0ZReV1GlB2eTen7Fm8YmA0QeNuwSW5TC
- fjlccV5uAwlwcCrjXFm3fngYA2gR6B1s4qesMmIycXto3KAGytWSSv2Fosj1ciEW
- xPV/iY0X1A3dBmocBig+WMiLKl/3/J2+0DoibbnJd2BsxgWSVynHwHvVeud9zb7s
- NpImqGOjIPEbCb/g0JqHoLcY5Wud9GkpBnMPzKDT0hGyAD/uLzsPQYKnxocLV3GS
- 8gIl2Mczz3DJ7/QpupEm/auP788q9802tvaeZL3J/zVYeUCI9AVjcirmO62lsWMa
- dPCurVdSrGQtDjiMb0LEEXUJStMR4jg54iNjX3ZibiWwZCmcWSVb3rTdNQ3/ulf8
- /tl3zcmz231BpuSFEL/FMqmQRyTWnhcxKdjbFQkhn1wj/zDpoWWQrJOEZPznfDaw
- qmGUJtqH79aW9B/UjBT3o2F+hYTJT0C4M3o/FzWoL5c9N+BV3pkChwcu5Hpzp7w4
- af6TA32+wOGN+clDCw1GdoY7nwnIuOXdr/RsJwaCEClfxxmv4jtaoeN/jw80ZkhG
- EbEt6tmK52E5acaJ5+DkdQaCJgEqfuXEbDD3Ff18ogoCRPme97fA9bT6w4EsJL7S
- XgGoza9GZ/6cY1qxbsDGLfSAsO1MZtF2Tdi6VYCQrmbPpu7xIoLkSpstUErefLPS
- rlhIzHBJMuevAYE3nj64ZRZn0LJntYqUA6J9wqxjFKcRooeNG/ZzHWdrKoCdqfo=
- =evpb
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAEnokPN5Twc4NuFqnxUUsz41bFJAvb6Yo35z0QSONZmUw
- LrdW9IYb/VzENu2kyBZjus2WzVIPkZuPNTogekkvZEEbYEtgX8zhOzw8KJREWcru
- 0l4BVwK2WHhmfeLSuFg3C6bB+b25bPzagvpW2sQjkrJUStDneKwOEywgz4J6SGLj
- F6Lyi085evOtfmt/Bwb4HT4geUKN2iRevWHSXTmnXYbI9eKR3peWzDmt3v1pFccD
- =1hh1
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdATvO0hpZrB9DlwhBc9i7ewDgHxO7UZnerrmIMAtTcVwIw
- VNtd22roiR/VPliu2owkEAirTkZ2SQdsWDm0+wfASiY7D9+ZT5D5etBOwqKriIHu
- 0lgBsoDwILXs93TKTIqjd0klQCoKm3XYSZpSkfg80p0gJqIT02gH+ME1bcXaOdEv
- wnZyOI8apbwiRj5tx+OfrPenTwn9zBcrN7wm43RHnZNwVRIeeXvJUlj2
- =eGBC
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T21:06:24Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+AQ/7BS2IddYDV/BRy+uMqpKDYNVfygxrjNmbQkmhcmXa5s4I
- b04niRWP4JD0J+bu/B2gxQqPQYJym/fTKnw3PYiPsk6RmCbs0vp4KOL9aMFrtP3V
- lAWxSOkt63e1MgDtyqmmmbkb9ZJBBsiCbkrSCDn4UQsjhwiTIEqqJyk9maY19+cl
- XgMfY4IrLHy4LpmvGnYBrhNqEL5btCxYyBXhihf1DVePYEnCJoAxY+U4ToshUzUu
- 2HttOhoE8GrgN1wqsO0CEZwtS+PeBsI4Byk7TxFDRyNj9R2uUs/2312fVe2PD27Y
- OrxpuvwbxkBH+RGYPpEHt9LvZOicaVOD9NJ/31kQO/I2MkRXrDan6mWMyl9vpdNF
- zoVgm4kuqqe818GYKpQoU07fduOKmPK3LsKCPKvfUwHXDPyDJoTtiMhIna5ekTju
- ceFi744cfQ1v7KJdXqUVEaNX5xfwFkFWonoyQ6Q/7qZjT5LAIIvAtEtDopdTVNdA
- PIEh+XMxwLeXrBU0b/9dZL/s1Jz6RhAtjM2EsJX5ufpZ00SGwixv4sbVJgXvx2SU
- oosDHcfVQ0gXwpPIekxQakAqfDJrrASasxA7DrHeU7ORGMBhTCDdVTmDXBOCGok9
- pWABWZLtn3P2ituPXagrvOJ2LT+BP8t1W7yI3ifoXintcnWJxrAmH4g0DnYsoJbU
- aAEJAhAw121YavqAps9R2CMrWi6DxP6kFuWfdioUS/wEyEg7oXR5OeF4FcTFqPge
- 4fT4um0hM4sXT24aNmRpjOmG4PFuXMegTC5YThjM6Qgd2MDzhqe3tXgaChKvMZQg
- zOWvdN3wjYPb
- =re5L
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2 b/resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2
new file mode 100644
index 0000000..625e02f
--- /dev/null
+++ b/resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2
@@ -0,0 +1,24 @@
+---
+services:
+ ntfy:
+ image: binwiederhier/ntfy
+ container_name: ntfy
+ command:
+ - serve
+ volumes:
+ - ntfy_cache:/var/cache/ntfy
+ - ntfy_var:/var/lib/ntfy
+ - ./configs/server.yml:/etc/ntfy/server.yml
+ ports:
+ - 2586:2586
+ - 9586:9586
+ healthcheck: # optional: remember to adapt the host:port to your environment
+ test: ["CMD-SHELL", "wget -q --tries=1 http://localhost:2586/v1/health -O - | grep -Eo '\"healthy\"\\s*:\\s*true' || exit 1"]
+ interval: 60s
+ timeout: 10s
+ retries: 3
+ start_period: 40s
+ restart: unless-stopped
+volumes:
+ ntfy_cache: {}
+ ntfy_var: {}
diff --git a/resources/chaosknoten/ntfy/docker_compose/server.yaml.j2 b/resources/chaosknoten/ntfy/docker_compose/server.yaml.j2
new file mode 100644
index 0000000..0a28f4f
--- /dev/null
+++ b/resources/chaosknoten/ntfy/docker_compose/server.yaml.j2
@@ -0,0 +1,21 @@
+base-url: "https://ntfy.hamburg.ccc.de"
+default-host: "https://ntfy.hamburg.ccc.de"
+listen-http: ":2586"
+behind-proxy: true
+cache-file: "/var/cache/ntfy/cache.db"
+log-format: json
+
+enable-metrics: true
+metrics-listen-http: ":9586"
+
+auth-default-access: "deny-all"
+auth-file: "/var/lib/ntfy/user.db"
+
+attachment-cache-dir: "/var/cache/ntfy/attachments"
+
+web-push-public-key: "BCx7PqDiVNlOiAHHfSxjbTle_LN4hetwHYi58GJhQxiY33AQ663IaJVro7B28j-1KOqwdzKco3dMMwzBJl9OQ90"
+web-push-private-key: {{ secret__ntfy_web_push_private_key }}
+web-push-file: "/var/cache/ntfy/webpush.db"
+web-push-email-address: "mailto:noc@lists.hamburg.ccc.de"
+
+upstream-base-url: "https://ntfy.sh"
diff --git a/resources/chaosknoten/ntfy/nginx/ntfy.hamburg.ccc.de.conf b/resources/chaosknoten/ntfy/nginx/ntfy.hamburg.ccc.de.conf
new file mode 100644
index 0000000..e7d404d
--- /dev/null
+++ b/resources/chaosknoten/ntfy/nginx/ntfy.hamburg.ccc.de.conf
@@ -0,0 +1,47 @@
+# partly generated 2022-01-08, Mozilla Guideline v5.6, nginx 1.17.7, OpenSSL 1.1.1k, intermediate configuration
+# https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&guideline=5.6
+server {
+ # Listen on a custom port for the proxy protocol.
+ listen 8443 ssl proxy_protocol;
+ http2 on;
+ # Make use of the ngx_http_realip_module to set the $remote_addr and
+ # $remote_port to the client address and client port, when using proxy
+ # protocol.
+ # First set our proxy protocol proxy as trusted.
+ set_real_ip_from 172.31.17.140;
+ # Then tell the realip_module to get the addreses from the proxy protocol
+ # header.
+ real_ip_header proxy_protocol;
+
+ server_name ntfy.hamburg.ccc.de;
+
+ ssl_certificate /etc/letsencrypt/live/ntfy.hamburg.ccc.de/fullchain.pem;
+ ssl_certificate_key /etc/letsencrypt/live/ntfy.hamburg.ccc.de/privkey.pem;
+ # verify chain of trust of OCSP response using Root CA and Intermediate certs
+ ssl_trusted_certificate /etc/letsencrypt/live/ntfy.hamburg.ccc.de/chain.pem;
+
+ # HSTS (ngx_http_headers_module is required) (63072000 seconds)
+ add_header Strict-Transport-Security "max-age=63072000" always;
+
+ proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Port 443;
+ # This is https in any case.
+ proxy_set_header X-Forwarded-Proto https;
+
+ location / {
+ proxy_pass http://127.0.0.1:2586;
+ proxy_http_version 1.1;
+
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+
+ proxy_connect_timeout 3m;
+ proxy_send_timeout 3m;
+ proxy_read_timeout 3m;
+
+ client_max_body_size 0; # Stream request body to backend
+ }
+}
diff --git a/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2 b/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
index 1228cf9..85ce7d2 100644
--- a/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
@@ -14,4 +14,4 @@ services:
ports:
- "8080:80"
environment:
- JWT_SECRET: {{ lookup("community.sops.sops", "resources/chaosknoten/onlyoffice/secrets.yaml", extract="['JWT_SECRET']") }}
+ JWT_SECRET: {{ secret__onlyoffice_jwt_secret }}
diff --git a/resources/chaosknoten/onlyoffice/secrets.yaml b/resources/chaosknoten/onlyoffice/secrets.yaml
deleted file mode 100644
index 62ac647..0000000
--- a/resources/chaosknoten/onlyoffice/secrets.yaml
+++ /dev/null
@@ -1,236 +0,0 @@
-JWT_SECRET: ENC[AES256_GCM,data:lRoljPoqlfIBbOTn5cBBvQ+g+w9xdwS2lEglfhZxhw/xwNaIBmAvXky3crhAhuLawv4HIC04qQZzMvCRhNzGSQ==,iv:FfcLBPp60u4Wc186EM1mbLMqErVB2ZGjXzBl+mcYQAc=,tag:Mgnt8DdG6sH+aaoBEzwbvg==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T21:20:20Z"
- mac: ENC[AES256_GCM,data:Pka+RO+h27XQfnSw97nBrKc7qQp4p7oCZuBqtfNxpWqBh2XHIWVSWBgVpBt0bz/7mlKlu6+tGKifIgEoCFf8AQbCrYgYYaDjHTXIkfRf8zB3M+IREYkRBCxDm6cChf3tsPMFhiQMIZJnq9LAudBWSwlZgQrn0Y50DYM7wsph9/c=,iv:jauLcEDlD6hcSfO6jeiXmtbeH5eIyGhlstshyEFZeZs=,tag:8lRYKjJ6F5vtBjjleRCOyA==,type:str]
- pgp:
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//aSuvMP1nG0fReLpbB+LQbzw3vtIaLazb7CQDsx9W0Ko3
- yltmiGhUM0GvIMNG1NJypvKFP5prl0/HyZvv+pQq3JuVozoe7KTSKWrCJhUnKkw5
- GSljS+kBEbq2q945FgXPVAv8QTti1CSjRwtTYjGZn269OHKKsEzNoMpoBFvXCbaz
- IjXy19L/CmhwIHtcmp1WPKhWseWhK5tHKDP/jRqPyFGctcM9lCt6hjRCSzKuCYAV
- qo1N5TqO3S4CEj1ZM7/ZUgHvg7/nikQrvJKN+/Em6M1cIy7JdNVx/jU7C8A/mFC5
- 3rFAVqrxRW7YmTizzj3NW5lsxB1DBrth/ajuSuQ9BuCA4XCDEV1b2UnCVPwZxP7y
- +qMx5Gf26zKkOw4MQdgdhthSoXxbV3r5vA7zmS7N2HjBRsyt4khLy5pj0RXOJQ0d
- TxEKUB11B6BskHXTy8+Z4q59PQamjsRZwYcxDNo2SoPvgE6nkY/1suT6FH+knYPG
- QBPHRY34tKT+19w6nD1HSxTZt1Q/HCzugNT10Al5jrhy1VWX3/0tPMHeaW3Ov25S
- h4/nH2QNEAB/vrAN3rVJjch1UdYrOhJ5dQqWdPqd/+2neDE+NJDvJ1yTciwFcEei
- VBg0ra3wpVBc4n1vVo+kpKUvqUlbqPLMGMBURjyaOSVQL1GCub3bhMiAH7fjA8rU
- ZgEJAhB2IaX8XJ5sOcX+KTqux6PK2ZnDezv7BbslDNVVrXjk+dNng7HC4tLf9cdX
- ykA8nrjQgeDhiWhEGkcqz+3xGq/Y2ys+nqlxGWqG3q8ADD+07qzIztWQbcGxk8Ln
- 17+XF9a69Q==
- =GZUf
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2ARAAm8ohSKiHBbmHDzMys+E55+q9Jc8+zLmfXQw9QXG4xdFj
- xKlQQVfW/O+UMNtzx8YNvRzDTiLa5P7e6c9yuJs739Ayt3RDwgs1dekPp3aEeg1j
- jFF6klWl8wx+Nit3a3t+DkszyDqQP0utmGXPOAtYaePh393Iw/5QSQDFslACUaxk
- Y7ALtL+0OZPohYAJPUp2NAvB1JWavW9Pik62eSVDIeVClerSp6RVhEtnnxbuQ4qi
- +lPCwQEeI9Tg//d1gkydenmGn4Eya2C4/GL5vGC5Mp+d6TwVLFMIF+6NV3TbK/Fn
- B+kxIG9VCkg3VUdL3J7UjDaw4VTLQh1vBxVosuxT5fBFImOOYm9RThd9ontB0gIt
- djem8l4paubD1Kpk5yJ3wmur9Ze9mbEM89DpIuweHROcFDzEwyeV9cxJqtWQTsfz
- VCgtbAuRRotXZrOi+N0Hlu5gevrGsXCyahj1gsMeWu4ur3D7L9uDAOyyNfAb+VYM
- h+yxUjxz5N5CWAAGKWMWWt0fAYlzwZF8EaI0bC5j10m8yHL2U2kN1f53O+OlC4pO
- ZUIceB+F/mQS+rmynL5KWtwnzo3dVEvxPL182TJoRccZNU3MaZ0H8U9qxKAG65MZ
- SVusj/b8yqGZD0dWQ/8+kcp3MLIZj+CD3UKG92iGse9GbeC2bOUMiNYUtVby0APS
- XAErckFw5+VHiVvQIareeIboHFC0Kc7UfsCSvRSYgakSyNGwoHKtKN3I1qjHw0yB
- e+VaS27d15fnAKg8P2d5PoRsi/+iTlCkQP8CXbKXKhBCBNLpHi7EwWZ48hQ+
- =kxBp
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ/+IfB2GS0U1XbH7yWFeMWV+wqBmAfT+8qbg7sacLGfoktm
- co3tQ1Se8djV7QeIRjjtLGMkxmdleiNB2x4fkphcr8gbEPewxuop7sWhf6WbFJPY
- tbAXucBpIC7nw2jX98XRMzJN5Gz+GsQBvv++EkBmUMCbu8UIRfvmLOGBHOplgGj3
- sEfujPsbeY1I7sgVmdaeRBCFnqLxPy/FsZ5X7cntTkQKfT5FpXX+GebGiH99Jf4Q
- z91A0Iy/jHAROeBMm5U/pGdJS6HV4aLEf+TQkXuNmTvCoMJYZcAmE53dP6XohPl/
- KDN60EUolwHycUtzVzt56yz/fJLXJEJSUQxuP1HyabNb60f+2zT5wWz6duYwig/2
- Wx/kdSSBajcc4vLrAl6CTiKv/UYJ1/Fs0E/gNck5Cu779m26MVdoDT4DWaAHGdA1
- riYE6xvlCJc71YAFo0cztn6XHkKiSYCfJVWWVIIrXugBG+LhQivgvTK8muNrQEtv
- bFpBLQH98iUDm10GMMHcLFh+shwAocpn//u0eFZJ3AMj7UysfYnkgCs1M5lqmJAc
- GEPRzVZOX7JXw0/CHy13RkkIsShhD/gdhpLnZz9zSzkra65dfzTRPyjCJ3haKsiz
- ja539RTkULk8LG43V6KT2tgnTJABTcE9mazW4BACrMm1+K+R4rtXNi8HhK4GUTzS
- XAF3/Q+8a42TE6UV0p9MZzZ6e/zx1XwK7PrQjupcVA1enCvtRPpynYOtf9sd0ybM
- kLBSKDz1Mlvc+03ICD5fi5BwvvUNS5uJFK9tixJtj4Pbe2OWTqBCW8F7MZt2
- =4m5L
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1ARAAlhO6HicbMqEht30n7UZTlwlhV1pGE7M74C9oLCSU+Sph
- YsJXMqkMPVzbBvZU3txCh8XJqqrkp+Ub3V9Wjz4fvAYhGU9IRck55fsRBpcVFsOs
- 8vZuS0fzbQREZbGCIJd7CRzmFs4G0/VtTL2b/7lOOxI+sLAReQhHRhzKtzeOwDK1
- rjxPnhwyKeZxZBRdG6PYagXa6vfrIqw9RfJadVtjaF03z/aIv9d91XcjftjnU36e
- 0ByzDx9yPNcy5efLCKucgj3QTPmPS/xIEHopJ1OR+wPueBaJvzbcAJEEn3N0yF8y
- foJkX+ipaZgwIOhj6WTLtYuJiwXUxcLFevBXcdVOCN0YTFwg8CXsuXiC6Si8ngDU
- WGLzONnsH71V7ecPntRblxIOdHIuAjHXwGNFWXKLSo2TNPssNlcL/T7/oiauXCzk
- SrsdhO15G4EZF6oXyN3FmyqgoObuZwwVK8O5UgDoeE4Z8YIU/7lTQNAd2V7nPI8L
- WHuop4gjfZvvql2N8mtVv08chu/dNg0kpzA7iQiV02EG44IuyfGJ1/wR6AXEglnx
- earG+KWFnXcuuVDhIrFxMvEIK9QieVOUc2tmwx4r+wK/FI7/7oYDOFAs/ijgCKyd
- IkC89eewIrv70jrrd1cCcHdR//x3f5nLqX5+Mql8rB0WLGhICE4E4AbkJzjlcbXS
- XAGVOaiXynxCDzk9Tx7dC8FwIayLy9mrmSIP9KK6vKsYjvKGMuxZJUQ/uW3LaTpx
- 1BE3QLU1HY24Jdztto6e2ff93stjFIVU9ONDHwXW4YJ+Uw4oGCn7w1NDJQgV
- =2cC7
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ/+IQ1yvts/ZJnw4GAn0AkDBNc9YfoJ2hBW9/iyKl+uJTJ8
- BOgu4tbbITKB1yLff/xeGRR66uMyU6XJ/KlyGXzQIJll8tlonUEjmX6i0Krtk4XS
- HOKupWmRzdh1PTscB07ARuW+6B29dOdUVgo86uauOz50mnWHCCdC+YRPw1Sygxtk
- 9jqgx3Go7z8Y+zkgGgOb8MFdh3gnXw2aEaiPgeCcb/c2VTY4SeJf/tBwk98pKtFG
- 2TU7o5QJCbWp78VRJbKGlc2eKFsWd7HNJcRuW+YvPIwTwnHvcM0mdb5wWVd8g3vk
- cN3yyFOnOXe7iMS0S/Ab0TVYtB2MsSWewMUfcEavMLG/+mAx18J2GnVq4PQKA2hW
- ORLMHGqPlsZZfxiwhBXBrWvOvUgHYFxhDmfC0UOQXIybd9AJuNMHFNI6qNnjvf+b
- zXVrqwrOI+A0y0MbRnIyD/rIC+ADiJfU4HfdOp7CC1+mxo/4Kyr5N6mEBFr+6yUE
- dZr9J8EV6vzFQ01rg0GTloPF28RCjglEISvaO0kZ1R8bCQ8xfeA9I4LHwr0MOBhH
- rCpmmpkfNZelC1ecyrI20D1E0fm0+JswfTFETaQCphFeap/ySBy1Yqe0ofMSrmOr
- 3h8ldEFqQeC5UJWapwo+Gf5WYK3e5EGnL7IiEdObKH+pu3nRAO/8sP88Ic2pSGTS
- XAFsn3ckkvwaUpY38KOqglKB8ex4Y7MOplkiqIPnN1IpmHfWoQAMUl2kVqZftzAc
- GrUy0d82MP0b/xAOStVkrh1NClb3ghfWsjL2ZjTLGB7O2floAfpJaNSQzFh9
- =hVtc
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ//YiQTFaNjAtC4+49X4xx5wTmhasIL1who6Da82i1Y17Hy
- MhKj8h9ND9fLp2tFM5UscPZCSMfQj6Vl+7Zz02kbcu+CAOcl7BowHBKrTrfahtu5
- O2lUJiURZZXmjeQNm51yCUNl9Ohh5LkiEto50kAz4P7/TWEY102z2+SaScBYJHb6
- m8EnmWWCnmwomEFd/Te3F9uLCqcwyWMspDQyZ3jZh8bcI57K7P/QBv9kjKVU9ZbK
- rHMfKxcbMmDhauxQnrxe+CAY0E+iN7+smRAqa8aDk6Qe8e00agE/PGHyTm25jAWE
- Mdm50Ybbj8jC6r7udoTk2K+0Jv1N/xcSnwnJ36MWwJztZD8tjEjn/bugsgG8zuj8
- R8o33AadfYh7yYRAII5m+24pCWU5EVl77vYaD8OvXAxUBjx1tNZSRuOtCH6x0ssL
- 1TDtscxOX4WPBnyVQ4p7tAkV3AIyj02gA7Ya5MKjJu73KQjn4qI0G0LD149m+9tB
- kakRXMnqwM9cCQ8VVg3LSk5VYCD0LuZKlBd0OdwuhuSvnd2OMSGTPlSClaCEAQha
- qPrfHYwOPh0p+HwZLq7gLGNH8X4IrMtv3vthO0ff2OR3ditChama4NWHSYZ30QSf
- /3jRSzmH8fvtx/EzvK54Bl+7AChlsaPqTiNyAaC6LZ87gGtHqZan74DxJuHb19PS
- XAHjYPTSestwXzNi+gFBajJEjT/vHekm8RrFrm+hJ/T1XRHZ64Qi1ZNOGs6wPe5U
- GifWHk/sBFD14C2YDsIOGUtbZzhQgYes7pvTN4ONmCgwutjUC9xKNJo6wI44
- =/xJ8
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ//Sb401ad18muH2qvpoa8HFMv0hm7YPPISmgiNs7ESb6KD
- qjLTtKxTa5SwtCbFh4kNVinqP0MCUgWh5spCzf2QO0+GUpjw0kbsUgMqcXrTBS5l
- 9cj93bGDEOS1unzNtGNSv6RwukLtlTM+W3Q3azi7UAzs147ThVhkKL8b/NdzF0FB
- GgV7p/8qCqRrBNrPocA7/YS4DVuVxNWZfSgR5kvbDPEJKCraY4gqTb2Fj3D+vvEb
- aIOJ9uGvtaqWcSt15INamkrQJx1TAarVUV6/2FO5qmgz1StZoTecOXmS5bfTTJce
- LCwqCw9aKjlHK0hIdLvIWG5JoqGTH2uhLZsznn3L5ywnLB9i/1IVYYKMzk+ENnRJ
- jlfRNjqDdXKLmoe1Ob3q1fVpxwqrlbvHkhc2nrQ+4Or9lcFOoschZPQ+UiEA3GUD
- mw5FZQPvmLWhe928MgNJN9PW+upYGILVlryg4Oatzi8bYeji70UpQRJm4kch66dE
- IvXBoZ7fQSdAlEkcWcqPq/QHZ6BSbpYONaRjVYWtgpRMwh1JH9JdoO6joXqXW5gd
- BroeA1h/oIP5RX1zQpWieRP1wGR899WCydhYOIq9HyuGFKbz+fwcVJ92om4kBqll
- kq8aSt0oSzXmZxt+tiA90GREzc9dcrtwTzkqRHpjck+4GMNyl3cHt3Ce8ofu4JvS
- XAHtcZ0B4SA0QHch0Fyo7vC7MGjZ7aQ+s0hMwL1LhSlChBrISLRkQrqlh8foZyNk
- tZAcIqnpJbpR4qQGKdGIE4eDmk+AOxgRFiUO/nFS6ZfTEZqDmw3Q+a8TxihW
- =wRRY
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ/8DyYywkYZgeDm8C7Q4Ee3bmYSOd0c/xx95um3o0yndQCs
- 6KuQsWnx/sX0AeYeMBhed5P7X0IKigF7vxgHhLd+2o/jmG2gBw9qV8LKqWgTahJY
- +jPsYqQHOLV5o5NBfhv8MyOeBEhOHRRWzZ2VaqO9C8+G8+SqkOogIyKzHYou5KV6
- sI2cZs+JIFFgwiPZ1S4zgbYSley+XfjgmwV1z85KYuuIw2GrxQWaPIp3ptalAQch
- N/BrD1MPk2a1QfJnJpAAEXUVhNfDQoMWSxlAT0HliV5idYlQ32uQMYMyJCotNGHA
- egB+bUp3qEQI+Y+jLB26uszMpKddL598gImTp6UT77Hrt5MxL/8jbhR15XsnMChE
- CbVovpOHiujAkHEPQt94q6ch8tGvfrCdaGPuAamIQPRVEkorxolXJXv1MYpI+ycp
- szK/W3Rt91iJS1fSez6j/MhAKCAExhgBcILT7fypog4IbstACLArhYzlB5mry2R4
- 9JNeCSFExAMW5IVkV3fUdWWKBdqZjZFW/MdfOhYs//AfnVDweJ1V4ZAUcIfkVewd
- ORmUOfbH6UwvWpywx1fT7s7BZGcJHX4R/5ARZQj6GIadIevBKljlQhR6+WDlIDQH
- i0W/dFOy2f2mRvamrUBdcbRY/HGqJRbZGEml2AAlZ1IgDIhVWxUy9w+A6c+EHbzS
- XAFVoUrdKIhmHC7NEQFyD2A+iFDx1EXkpDNL6mpXUaxNDrwCNO47un5pUvnVVK/z
- W7wBQtDD54iOJIMlgnNl7st+Jp00y88/IWD+KzSVpArU1Cp5ja7nU2MY1wji
- =/Oy4
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pARAAjzsQ0wk8ja7zsgYYZLhidtGRjxkiXTo+Wlb9ZDytFuAZ
- 3VxBNRZn0IHLFTmY647p3MHcnu8XSbRAWI0n0cuJ0jAkp5k7Fjw+0ZfBy/Kia5wj
- TbdHA8gdmTL6kIGVmTVZW8TiZJW+5/aPSadrBatZ6Kff4DZSncskqufVZIo4jjCl
- 3BkgVthj1gmXyJS0EguCnBoGWGJ4xuY8cksq1qugjbmTOxxLbtNUcc1xVUluvwgI
- AjSIYDO6/CBnkjk9Y74hrCyO4VtmCVpcDHhqf0GFFGzhUIJN6v1iM3f1PmmXbU1q
- mpw/M4Nidog+aQ9jWCYsonjc4UMMUDf1gOIWyZ5tMdJFo/92KSyY0iUlzyOcE0sx
- HloKyWss+Fw1A/7YcHFBCkR8VOWbshir46P9Rb+0fKFzsuIRiENmzQ80Nr5NCVFq
- YeoVxqXmggd0XPZOvqIsD3Y7u3tp+tYgxjhwbYVWX9i3x/dviHsPmc1ZFFHaeXlC
- 1R+Y3454akuAEucj/Ju+fZgWCipzPN0/5OY0GueJGOmozZEOKgcjx3bJZwipltm1
- caUyLuruFV8RXXrqY4AJ9Ovx4Qb5irsud+gN5tsDi6F0Anj0N9GaC4q8SwX/xl6c
- w0DWOyLAn+5gRVKVVg2jX/Z/wUkBjJ5YHTyeVEqPvwtIUzc4vaXYHmgyrejHe2XS
- XAEoKuA08Zmu592SqUEpcwfn4UkUC+HU+DWtcDwBhMraNFn2bQQmwzMT3GE/dkiT
- 4FP5Xhm0UTbUbALPPqMEu41uGeUF79LG9EIJssU3r1oSzLRH86PdMYBE4MEl
- =7gGA
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAhWNV26+MQYLWmFFUi8AZtNk8bw2CXuNoaRARTjekGB4w
- FbNvRb4cxWgVTWvhb8A2O5WJdFiOyumxwY7hGgxwiKyU02D8xR93jbQPHKl1hPWz
- 0lwBRjANXKsKrh0uIeynm8hKEtlfn1sfCgucb2qd+oTab1mgoUd9N1o9Q9T/vHJF
- iMhkCXnn+uugN8aaiM6jW86qY2Y5elDPICwuF/pvm6bcByfmI6pF3yoY0MRtGw==
- =bZKM
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdA9aXqXY3Szsy1SRsll8c1df4hXRugtfdvmNwr/j89W0Qw
- WcvP13rPtg8mFCePBp9yuUo8tT4K9dSplJKOl5l1xZpT1KyhxNO/1OtHhWdK6UsY
- 0lYB+Njc2aP4nRm0WVAjDkAI2C/fb2vIoC4IHC0SHcvrIKJhkUMaYH4j8fzr77Oi
- deA9DLhIAAJcSOEdj+duuPeq4j/lPf2amOvjeePnwzM+ZsByWsf5vw==
- =KKcE
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T21:19:31Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAzEzZZIM22D++beNd+noXbsm0dVWPUPZsolGraxxVZK8+
- 8qXCNMfxsids1yra5iFeHm07U+6SmtL9H/v+qkv2dcKOmjZSB+Af1iskoUv9mT9o
- ln1lgdzhSyGhGl7yl/jsT0KWS6sIVqREfcZecYz6k8id4YhR8rttKnSX9Ltn1RTT
- 0ujoATzD60JTtgV5jpVJvQxZG6tm1p+OY9lv/d5PjYD99iQXDMzp/tmaGkZhAQuS
- sArD7IrHdf8cj5M52IFG+f7cIyYWUFp1xKGQKjPDKqlL2s1B6foT0UQWFFKHAqP0
- Yliuy2Pedb6JsIWwhoElY/nv7JUjyNgNUZtO80brOxTEhyRjUQJ+7ub/R4vO6Pml
- mKSivjfAe7mU8jg5y3v3B6AoTu4mPkEYTKqKfR6ruwmA4rSRkuOkJsiOPFojTeEL
- 856ZljSkq5PigeALCREu6LOtq2+IYNCeDi231nHe+YafseP7GaJkc0XMe96Q3Ndk
- dB/kJWyuQbZoc/vjjlWPrGifemwwLGHwX57nsfiYVZmeGRtggKioSHYrqjTY55zF
- c0wjeOy3cgf/lX9IRQx9Ev3nRZD/Dvb0fp43t2PXCZgukVgmsNMe+lF+G0Yxa+uv
- dS/4CghcDQ7BolVOt6Fh8m4mgNU/ghM6L85An3Qo4FmXwMw0KMxw4BfhiYPgO4jU
- ZgEJAhCPSY3mTIkX5b/Z9gMAx0pNO4UKkX7GUGq3xOnMWxjoxRDA0hhEddDLdHkY
- SBAf/3XqrRF9o0gCU2MQon21v/LvHfn+r+3GZJY6vYOcJDnZxNxKytJXY3O6A8ac
- wgVobOtSYQ==
- =Q5Ft
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/pad/docker_compose/compose.yaml.j2 b/resources/chaosknoten/pad/docker_compose/compose.yaml.j2
index 9484c29..ca29f1b 100644
--- a/resources/chaosknoten/pad/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/pad/docker_compose/compose.yaml.j2
@@ -6,7 +6,7 @@ services:
image: docker.io/library/postgres:15-alpine
environment:
- "POSTGRES_USER=hedgedoc"
- - "POSTGRES_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/pad/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "POSTGRES_PASSWORD={{ secret__hedgedoc_db_password }}"
- "POSTGRES_DB=hedgedoc"
volumes:
- database:/var/lib/postgresql/data
@@ -16,7 +16,7 @@ services:
#image: quay.io/hedgedoc/hedgedoc:1.9.9
image: quay.io/hedgedoc/hedgedoc:latest
environment:
- - "CMD_DB_URL=postgres://hedgedoc:{{ lookup("community.sops.sops", "resources/chaosknoten/pad/secrets.yaml", extract="['DB_PASSWORD']") }}@database:5432/hedgedoc"
+ - "CMD_DB_URL=postgres://hedgedoc:{{ secret__hedgedoc_db_password }}@database:5432/hedgedoc"
- "CMD_DOMAIN=pad.hamburg.ccc.de"
- "CMD_PROTOCOL_USESSL=true"
- "CMD_HSTS_ENABLE=false"
@@ -35,7 +35,7 @@ services:
- "CMD_OAUTH2_TOKEN_URL=https://id.hamburg.ccc.de/realms/ccchh/protocol/openid-connect/token"
- "CMD_OAUTH2_AUTHORIZATION_URL=https://id.hamburg.ccc.de/realms/ccchh/protocol/openid-connect/auth"
- "CMD_OAUTH2_CLIENT_ID=pad"
- - "CMD_OAUTH2_CLIENT_SECRET={{ lookup("community.sops.sops", "resources/chaosknoten/pad/secrets.yaml", extract="['KC_SECRET']") }}"
+ - "CMD_OAUTH2_CLIENT_SECRET={{ secret__hedgedoc_kc_secret }}"
- "CMD_OAUTH2_PROVIDERNAME=Keycloak"
- "CMD_OAUTH2_SCOPE=openid email profile"
volumes:
@@ -53,11 +53,11 @@ services:
environment:
- "POSTGRES_HOSTNAME=database"
- "POSTGRES_USERNAME=hedgedoc"
- - "POSTGRES_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/pad/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "POSTGRES_PASSWORD={{ secret__hedgedoc_db_password }}"
- "SMTP_FROM=pad@hamburg.ccc.de"
- "SMTP_HOSTNAME=cow.hamburg.ccc.de"
- "SMTP_USERNAME=pad@hamburg.ccc.de"
- - "SMTP_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/pad/secrets.yaml", extract="['smtp_password']") }}"
+ - "SMTP_PASSWORD={{ secret__pad_smtp_password }}"
- "URL=https://pad.hamburg.ccc.de"
depends_on:
- database
diff --git a/resources/chaosknoten/pad/secrets.yaml b/resources/chaosknoten/pad/secrets.yaml
deleted file mode 100644
index c04f9b4..0000000
--- a/resources/chaosknoten/pad/secrets.yaml
+++ /dev/null
@@ -1,238 +0,0 @@
-DB_PASSWORD: ENC[AES256_GCM,data:jV84d/y0sBF1SeaNB6zj4EvRHiKLks1T,iv:mPv5cuy/D1961ZAoAkp9445x5nov7mMfNJiikiwsNcg=,tag:vxW9JYm6FdCgKc4lTqTZXA==,type:str]
-KC_SECRET: ENC[AES256_GCM,data:S0/V0RYvg0BsnZCZ0itZYirG9dHJTpTzYLzmw03bZzI=,iv:3bDIUZZy65hOnScIVO3opXz/V/0p0UFavu8XfFtNqjM=,tag:0aYfiIOBzUu2eQOb4tjA2A==,type:str]
-smtp_password: ENC[AES256_GCM,data:IfDrD9C/64fya4iOZfzW4V1WFxgtNvW2Ww==,iv:hegTsoGewWm693G7Nt6dVsTEDEUwEWAd9zpiDa8mZJQ=,tag:3Jurd4DmpvIGL3g1VjXZTw==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T20:39:05Z"
- mac: ENC[AES256_GCM,data:JYRoxtmv+WidExD2CvR/6NGHcjTHHUMMslzZo3dB2tNiM9RiWJt+SW28erGt7rbqNYGfKc4jgQTVBtpqWksS0oF9hARAoBm3P1ggufTo6YhTGOi9j2bzcNlE66R3ak43Z9m9HkUzDsBdBU8cb6n5PTGTge4FUDAmJ4Ab6729JGk=,iv:uNuSWbXHBHYPdDsc4uSP46HS+hgUZReK7f1pLx/bBrM=,tag:IiYUq86/eShw+/E799gBcw==,type:str]
- pgp:
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//eXkOeME8b6j88gPFg9TKzqBlmf94xy5iArfAoul5ytNY
- nqX81BIbYAvpI+WrHdDVswNivx1zl6tLmowUAzGbO7p3ANveGbF8TKVwTzTrol/8
- rXuzwzGnBV70UldTgXQIyHpEakonhun5RUenM9siU+W0SVSqUMZ1IIvEcK1aZoxy
- rmHxRP/5iC1nW/yy6WLUBFvziDE0zpYSJgyZGcIUsUireLmHTOu7xyNm+aIXEJwE
- 5+RxRDGuBAaKNjJ+hO0BCitGvlbgyGfjjaWOAc8PxrI5/qG51TwghJpzNixb6V/J
- GWW9jR8K2yAWktVYQ/IDkZcTJST2/n/X6JRRvgGZinYFdIEuutoRtrugPeM6JHF4
- aFa2uPkL4YCTiteWWn5HeliqWZQEOgKi93AvKrihtcOjIKtpgGlugyhDZnWW5nP6
- KVkPJRHEdalpvGP4ULX9qeTl/u4D4LBTnkEkAaj6xfqo9KP6cqztaunCDeDW7Czf
- cWquEFxuMAoZIWLKwvpC/n1VbPUgIuPt5qibdUoTvQONay4aXJJbXdndX5HzvDhP
- TcJ02DgLdvD9JYQ2NPQyFZNib+MJzrZKoyqvnkPzrFAzBbVy0nDesfanUYjW8Ixj
- yLHQgoanASwqUmEvY3x0QWSc4KpcV+6AuQCz7eoNbYvVA2oaKS6l+5dQ1pT/WAbU
- ZgEJAhCX1ElhAmESO6+2UNYB0LXhrxH0W+xOikEuz1/yuDVImtAGN/gOnkTjtm4k
- LoXvPoCYoRzqAzYoefzHpAuto+pSt1vD3mYJvCEW7hlHblJEYLzVp9UhyNHbYiz3
- SMnUcl9tRg==
- =y51+
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ/+MkzGc0xUFV4nVEQLCY+/lsW/UOJE2i7gHPVbq00XUBgJ
- l9kgE56aGuCvz98HiG3E8R5J3BP3cbdXbr1PrWF5wjKsek1pzmTwTWpa5wZ89osN
- CDn2dhZRW4ksqYvgUrKdx/tVfDR63aYdbvTU0w5pjjCRev5DG5FvfzvrkEZV7TYQ
- 7nVO3nk2p6x7cCWhimKEDc77YNg6xs41APQQANzPdGByJYY971lGYCgbi13ZZhXe
- o5NLBHCIWZb1n33wdX8UsafGlht35n8CJeedYa0fQtH7+extw8kPDq4LXB2LGT23
- x39u8+ZLqaGmQD9c5AhGmZvRxHCkm1SmgrP1jNKpp4qB2wOw0CMJ6fswz5uZYOBd
- EwptUW7z+RMcwicNnZN7LCI1rMvqRfzoABfg6tCQBr6mcPTKjnhsGh4rKeMXXpz1
- e05v0VPuk1Y/+T9reZy2ydEmxWU4T6OGYFYCvTCpM1SV4ovicW8Tdn/qrLU9ZEGD
- jaU1XouAIuzI4v+MFvu6qHCoE4Jg8uiSItoDPpNXaY7MehM+bJmItpViujQIvPRh
- 4thDnYI+o39NNAzI/RpPGhBvsp4n87GPNbzBu3uk9iZiC++xq5w5ed/bId2+yCEq
- 5snMq6gwZxnBBFC15enKy7Y74Wy84nywrsCWBwZuFiLNscubBetMggftwJ1Y3+3S
- XAHq/rWA9IUNaFhOabMUezljD0f0eVuirA0kyIUdg6WBYzQXuN6Zexevi+CwtsCW
- KQbAlcFilZnXBj+PNpUfkRKlpKeUmfs3qpaiPtPBBHvFfkOXk10QqnrbMmjG
- =bKDT
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJARAAnZyTwARrT1U4Bi+EmQ9ILbL0auboxjkYTr5btaueFJEv
- jBK4URpaUHlcnhT83Q6+ap04lqL+8oEJWWis83sQ0vu9PgdyNdLkFHKHnbTweSbK
- V4rqqXld1xfj8vovluJZYdflADa981Bzenf6BNUUWv25p5Pek6M68j8UN3XVXIHx
- 2GO6dCj7jRMh7+VMpsyXaXnwtt0JnPy29sKWDRQGjZTRG83DXXJNPWLLD70KS8Ib
- uBTCbjOEhF5tkXxLo+3YR5LWit8NNqXtCQl7L6AgmQUz6zNzNnoTDph0T+F5FGDe
- ek6qamKeK5f+GnZoXZqdnfFKEsleToo4r7RcYSif91ohdoQF6Wbal+mrxb6Xh5OQ
- qsLgXcFiT4l6Y9AYtkjYj7jrl1W9FABpSBxzimkhuMOqR36Ah5SN8tgSUQF3cXoT
- 9zi5F5kkvjotaGNEDfMiX4pZhM2jgT838JXJKvIyFuyGsPBNLt/ULX2r8zWD+Z0f
- OL06XRKi6aH8zOKRNXGZPIFO5xbxDuShwWWxiymb0jDLPhH6GWLFvw6VYx00/pT+
- JDVbeiQR+sn8h4j8TChqlimheqgezcLp/DSEr05nnfmqwlKrPkSwPy8nffMnq456
- YtQQOyCnnCXRh3syI/kTVrRWlPIspHc2cJSfA2gOtsDFWRLhH40S0ut/3Y++YeDS
- XAHEDLQk0U5pRJM7SEpcTNOzzgfFaDL9WwE042BGDgxCqwuwTeqRxhs1BmcP+SEI
- QOT87j9bKOQEFt4cIUnQPjVVJnuJRBqx6g4Q3D2Vcs3SZ2vdCrj3mirIqGeZ
- =p15o
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ//Z3mdByBfD+vcDC5F5a4IaxbwQwgBEez8OOMg09SgU/Da
- yWKdhdFGwxYP3seW2wRTa2Z0f+isbEeK3KQby2uOOcaMUWVJuxteEXqC3BAz8WPx
- ygrcdgGrgQLxWeR9gOsxmal+TCzMAgMxwBS1G3wN22KQZ8nZ3qHKwVe2W8bNjSgk
- kw4tHRoeJ3PNArqQZcdyP8QIjfzmLK5Q3KQr1Qdh6lu+Ild7GlX2444BmZL/Ccz5
- WG0eS9TwqoOX4YrUgrY6ZNHhWe7lWW+0CZlNhiOG4UdjstFkmHOrb+kbsjMPKXac
- qHOmIN+YnGQ2RYP80n4t27SOot+BuOUmfM3w3raqokqftwZri31RLEWm0aflX5DC
- X76f6QIgcjk/0PmaevqO2rv5BdsLcoQzqcsGxglIO2owkypdQkzbM4kHZs5mHP3U
- dzGpzX+nJGswgT4mDB01E0UPretR7ERRBLr+mJxJ4v/tjbNj8pcogTKKGQ90lxd5
- zDIAYMZtFPcsV4QkSqiodrE3nO4efnWCL9PVfmES+DmHbNalNHaN5Ir/cpC1t8qz
- XpWMLoObralSAN4lgpT/vR2c0Rkl3LTNqZY3OHuOsMs8R7Lii6GkuiXAGX8jM29D
- T7ANrajh5wMTYW+fkqgKUPO8m4PuJDoBxQfPLiBsnwYzw9GFeZepzcOX/5i423nS
- XAEf6cMx5rkkwnkJXzD3KsbbCxFlyNzAiCbv85xrgwHk0qI6bHEq/zBmUKsUMYUZ
- QnCgIuBHPQWG2HfdTJZU2Npm6R6DQYsDc8S7f7CgFgUOCk6Du8iG10kqiLin
- =bbHQ
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ//Ugz7BgmKUpXYDIgOdebqgR/UIuWY7k1ZtizYh6mZwPxX
- BhSKDuriMftJ+P1+nKdyD4GryzA8jbHuRl321JHjo0R1VztybJmso5Hd9/TRJilo
- TPENeH8q2NYH7ULpLNuLDXBDAsiCJ/b53fKnngen2rYJxnMaSxHHYuZ12L2vkZvx
- W6aH7s9HxGFxo3k3iO13ve/oymoI4oMkheQ41bmmQTv1zZXcuxbFHzSIeaEeZWG8
- cCEeq0asvoLWdXdXLI9ISfGpuI6a0aBd6zLxfmS0tkQm6ziNC2ZCW96RdMGWgqLD
- M6mnLp3C+bq1RL1q3RYJRGfTMZ6KvxSAhtegoe7Kd+ZfAvqkRejqV0RwpcLkm3oP
- eLT0rFToDdlipoyND4pLzzjTgpBKfVdTjSStNqVjx4M0jq/X5bPAvjp8qpBqhPTo
- DJbKjVJ6QnSMDQiwt+uKuG1nn/4ltYz8aTbDMYedFblzjmxldY5YqqqIVag0iWR+
- sRLpcWJRh9HRcSyF7hC4XiSWEo5ykjnHsiae7PIzfs7JlGqYzx1+mMjaFIrto333
- llS1u8rBktBuMpnj89cBKxr+GeHbdm6RCgZ1QFO8ldqDTNA3JfvqaJL1hZhU0Fkr
- wDqhhzxR0DyrLxMu8CI+pnZkor+xoMi4aS0AsD3RVpvK6Xh/ontefmwDTGqTyevS
- XAF/Lx9HuXWD4sWWmn0xdR/my8pD26qJZF/Q9Tn6cMTJGT4SzMeUMhV/hFxTMaOD
- M6qUI+VZRntmO6COwUDzaIIe9Om/c0Zi7ciEiqLRtVYk8P2AVR0RQvMLl1pP
- =VH8H
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ//UxOCThA92qCY/zZUmiRlPIyKSWb5EgNzil30oaXFtVs0
- 15ALJPrB0vZj896/pHGF8m92ubmdbikaFYVeZRewLjR3PXzwYfuErbirWJt5v9c5
- tbedfTCQYv/nYUxCLuU1Cqd+7TzYsNm6ekBHeAsE5p3cVQtVWtJCp0OMIj5KBDx/
- MuP9+SdjQi0r3rtklqY1gV744uLBMWCHlqlCy/aKlF3+HhEDCrx0Ir8GMh/KxZIU
- iwsD/gxKBQ9K9H2QVf7XltbBVuaYIv5af0VwFnnmmfE290ba3EKsMcrY5cPQvfWX
- /oMF0Ox/34EGcAORJ54+IHer7nc4nXKt8IP+jvgrM7aTxxsh/KSCWPqWdE6KAbty
- 97/L4ziVJoq8lKGW1pl/S1M6/GGfyC1T732kEF0Q3ewcTIpvAZGII4+2ae8cwrG4
- H9bHbfsMn+gOuXDfNmsaLYNnupLC3h1LGzmvQCDcWMmTvX6uJo0UsPD2TzPkGTVm
- T+ipF5OTXn9lcRkfBID+psKynLOFAU5aZFnWeD+xMt4KF2uJzO9wREzkIjj0/H/M
- GljnjX2ZrzyYu/W/xO/p9clefAFPlvxx2JM9FkbqcvlZQus6Av59h7lYCz7B9eeY
- myDLlajpxcfzYW0Fc7PPION9LAwN7uQqgTOt/z+2CirMVNpH1DKu2EfdPbH3dQHS
- XAFuIZ3myamt+tfhN8hqzf+ICQGQvMxRuCNH0Hxg16104VnJMX3DvaGo/3m+X2yj
- T3h/6BlLkxtQ7qOYULHTYh0p7ZOvNu/H+I6lGsthWsHr2AnjP0ZiYrpK0gLi
- =Zujj
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ//aa4FwDb6leO7mNh9sOLIxtCrhaveW8LFu5deG8vD/2jl
- iVaGjT7g81UlkMQoTNDUoIWrRYK62h3BTocmhCoVwRqQtG1gM+iL8x9PeAwXMwwg
- YQcJrudy466elBqo8+iBAqhoVUu+40aW/f7sp9ZtNJciH5NFDZsMrViXtfIMSAeq
- VC5+WgyfKLRho0kJQ27qtsohUb7DmxosmtDQz/Tl/TjSD7nOGsuFqti7Qu0f7ZVQ
- KATNif4B5cDyNJEb3DCDlgBgZb7aPsFIeE63vZVywdaRum1+Uva+PvvNS9YhHxb+
- lIFmCbMm0V5cJ7Ug11J3ObbtkoNf937LViJkF+KeqMuoap7jB9UBMSdc+8GUlHUR
- hdipoKVpjwDmeMpTOA7xTUsdO+9XCgkY4La9F4ToJE/n5X4xSSpdIZxSsH23VxW0
- BKuwWqDrTNGFzSWiAM5NLWco7fsCO8nHWTJG6jJIO/A9ZcUCjHaPadvaT0DwhPZT
- Yj7dd8OBs6zBHO8b8x8a8nfplqcG55tVwHOeGrZe2PUlxruIOwIbT3cJOUE7ZUqT
- A6InmeYRiL/ZPCpTwld4/8Dc+l+rHxgQI0L6X+uY7K0ioN2TaZkt5VsVhEHoNT5e
- uEj6I6b3zEvpQ2JiNZI83nUaQXeZZB+RQ4Nu2hmomHzcxEziHxg6Rw5LNMw8x+fS
- XAE8OHA5iDOYlIKO1aCuO9me1yQjZGK9HoVXbYX6rVcFqavePgczxDNHAtTJmK6e
- cJGf9OX1sZ1xvJlRxYGsNdTfkQQk/agzSpy6DJn6rhD74beG/QMTB1yfiMYI
- =dHLm
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//eqfwau6y/7BUV8jJWBc7a+2qqXFRD2EFTYEi6Aaxo0Yg
- XLV9NLQKOK0jakV0dGnnkM25aSdsuvQcM3Mbj3hHA+9vqJipYVbWTxtn3JR2sOcl
- FiTtbie6Q0axkcT4aVXdUvsNA03Mm5SSDE176ZXYdoB/EdbTAL5AlhCohkKRArW0
- V5CNzYj9c7WyNfpMgoyiKSGRcKqdKfYXRjN8a+6VX5tsclnE99NO2YTG9HQ7+9jY
- 7OJ9+zCnPX0viR6F7bb0M1+wsP0S+5zwIsz8OGw3hfXvxvwoRNNR+Sf47Oy68Uq2
- aePW5H0eNBlEQ59ec2Z8PEEGHOD6L2qGlmZGQPNlHPgcsPLz0/f1W7+t4xrX7LbL
- twsXulcdkGQKmi3Vayhsz5xLOAU/kZ1lVOBlHSq/XCbLFcrz8BjSTt/1uNF4Ltu4
- kXGkxme9Gig7Xp2VeaLcZxnHlfZAVQMOb+orI5obptVZKzMBAMDkh0v0YOt7GHdz
- pqr6TB458Y598ES5PKrvhLvsrk6hy4ZbJE1txu3Dd5aEwa3ROoWBvdkhtUghfibS
- byXZ2YeGeeH4OGzt9g/CS7zbrcIQhi2j44Sq5LB2jpgLqf4wvpBnCJjyM9kB2OyW
- qIxK1J1wNdBkTjAl4okZxByyK4k6KfnVGnsK5OuhxRilm3/8mBolenzmvWxZGujS
- XAFRolCuiN8U/UToZEgyMGyrSyEDuNwoVAp5G3slBe4SJhC23A6o8wZpziBGs+ot
- mwoCgUgMeabC8DNMRGFpaUA/5k4zBIjHG61yj8rM57zRKa/F72Ma0UQquH/l
- =ENwY
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ//UVt7q8e23s3x1Sv+84yZtHPgWIupImeKABHkxI51ry9O
- 80tL7+aC83MEr54BIou5ktHyBqqtoH7lRGD+z7eWX5F/YtECyAn8VFpZR6cVntrx
- x1BYdRhggCOFD8otG8kWvAiL3Kd/sEISoF+rGIojUGO/qEk4RPfFQdAeSYR5xMBX
- ne5zq6/SzqRM0KMWKm4fgj+0MiFBs0v5jLGNYflCTOhB4c+Cxeil9IjAiPFv0vhk
- xZnTdQwc/jkDZgwduM8M8tGglA7iXUGQa/vee6YELRJzpOIHqcIHhg+0lZkrcDPR
- tmPa+obM+FwTqEXs8TB3VXVzMobgmKHKQ8E/rebzfQXnBZH+I2DX6X7m0aRMJ6SF
- fclMVbBx5+80dA5PDNSr3ADmo/i0qjrqwftIdf4YjWLrPDt4/sww896j2dOxnDaJ
- aX0Y/xOR7s56+eWiy2EpPZSLm/GICQa9IS3AA7xEKc0bJXEVopY/7JTmeqXSyavH
- WetWwyrpIeDLriaCJY87YzVYxv2T4K1kpNb12Cz7GZ0lA89nEU/TIVgoWeiTiefF
- dReBGhVIG0nJ4EvzsH2MbANJx1ddwn4vU2jpyha/4UmysjA374RFkUtYzFE+E5IV
- P8g0HAUNOgjmmB2u75buDMJ5A3LXzQHwnQKhSI6b81Pdf0zIbeSvQUZ/Qljwg/rS
- XAGWI7LoPEKgXze5em41kkGxzZye/pOCpweTShWEUhARq5KOhNJmk58qzAyq3iXz
- PyUhW3C0aBgheZcgTrSX0i7JdcKp+ucDb2iCXI6HD/4GvUr928FYaGVhl29O
- =1k09
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAZw0B9Iy2Rq5eCe0WJsOkTdH0tuHMoAs71F5ChQm/KQMw
- YIEEXAmMI5Ma+m41DL7glPJ2wPn+jmhSf2B27ZT8tW/EJjeOsrx1wjKre9lSZxRK
- 0lwBeOY1Btxg51qGU4ZBJFd5yxb6ql2THEmn6fzxk5zah6KI/0Z1bixhTzw5wp7e
- uHu4gU46OlX6cC9RPXZ1QxwqS5tLHhdWhM0gySP6DI6m3us1mWXxDnUCBBEAdA==
- =eyF4
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdA1rqOtvRBSNHEq6Rp0hMGnsI00gFg6ybh/Ub2q+XpjF0w
- zSCooBTjoJnYzeFia8iHGfRcMmJ82GoqKkwCwb9SBQkF1Kh4M6cWjboWhLQMJIEg
- 0lYB8kp3sNzHdrbV4XVb8payG7mPljnRs6O8LKlOM11ibXSyy4upOY6/p9/Aqkmi
- u70kq8RHtuBe6HKJTYMtWB4yNkm11+f9jq4qNYBi3vESvyKHKvI3ow==
- =wIVr
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T20:36:54Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAtYkYbe3GejwxxFd/YxX/ioiQyBwNN1IMB998iEponrlY
- AbX/gYiKl+7NHYfnmU19tUStxa9di2CIjBIhr7adU66Fi6pfcrab1lIUtvqnhZ+m
- jqz6xxMmlMoot5ml+jJXyNL2IvlHrumgWg/FL08It5mGePuMJ3RcO1W9J7zPqgMi
- w3YGTbtCBSM2xF3Tmvb8BxqCHsZW5RPZGhB1iwx5UHl8oGsJQII54qsPAqIjFkhJ
- 8IoAGecePDtihHKZdtqGWspvvM4OkcVTtrfaWp2cQX3SvDY9Szsr8AjSpQxOFWmX
- T7t+GKFf0Pr/IY4oF/9pXOqxvU97G9xhCpNVj9nGYFSGFmqsfpysnzlnVH8Kaf8Q
- lhhMcX75VvHgDjqeWtBtZMKSIBf3upw8EnBnOKAh/YCqrcBfU3rQlzWVrl68iOof
- BhEwER7vYt9WlHjAelAJ5F62jkUiEL7Vs7G2B83djujxQvfaBNN/LU9Ei4hmMY9O
- iusAcLlt89ieM9l5kRIhqi06eB0+FH4mH9sbZAJH7nxBX4KUk9yQbBZlYPMINJRh
- C0R2kcTUJf78YxrIg8SvfCVmCu+VWpswWixy9502QnJ5tQfriB9PnTjSlIgQS8Ap
- Ewtx+tX9/bme0uGsNhxebdtD7YwW/8T4JtpAbNa+DfNpueHZ5zEKIzuPr9YG2r/U
- ZgEJAhBtkp4BuFmu90jI1XlpWdnDzSjSqi324g9b+WCHQQ3iMSm4ExdpEePJO+zH
- KGDm2seQqMLfNNgPbkPxZiqKg9CbAOeU5tc7nBoQPyy32gFXFYncR5TVlG/1/mcz
- GFhe/lc3mA==
- =SLez
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
index 3707225..1eca33b 100644
--- a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
@@ -6,7 +6,7 @@ services:
image: docker.io/library/postgres:15-alpine
environment:
- "POSTGRES_USER=pretalx"
- - "POSTGRES_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/pretalx/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "POSTGRES_PASSWORD={{ secret__pretalx_db_password }}"
- "POSTGRES_DB=pretalx"
volumes:
- database:/var/lib/postgresql/data
@@ -60,7 +60,7 @@ services:
PRETALX_DB_TYPE: postgresql
PRETALX_DB_NAME: pretalx
PRETALX_DB_USER: pretalx
- PRETALX_DB_PASS: "{{ lookup("community.sops.sops", "resources/chaosknoten/pretalx/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ PRETALX_DB_PASS: "{{ secret__pretalx_db_password }}"
PRETALX_DB_HOST: database
PRETALX_MAIL_FROM: "pretalx@hamburg.ccc.de"
PRETALX_MAIL_HOST: "cow-intern.hamburg.ccc.de"
@@ -90,13 +90,13 @@ services:
PRETALX_DB_TYPE: postgresql
PRETALX_DB_NAME: pretalx
PRETALX_DB_USER: pretalx
- PRETALX_DB_PASS: "{{ lookup("community.sops.sops", "resources/chaosknoten/pretalx/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ PRETALX_DB_PASS: "{{ secret__pretalx_db_password }}"
PRETALX_DB_HOST: database
PRETALX_MAIL_FROM: "pretalx@hamburg.ccc.de"
PRETALX_MAIL_HOST: "cow.hamburg.ccc.de"
PRETALX_MAIL_PORT: 587
PRETALX_MAIL_USER: pretalx@hamburg.ccc.de
- PRETALX_MAIL_PASSWORD: "{{ lookup("community.sops.sops", "resources/chaosknoten/pretalx/secrets.yaml", extract="['PRETALX_MAIL_PASSWORD']") }}"
+ PRETALX_MAIL_PASSWORD: "{{ secret__pretalx_mail_password }}"
PRETALX_MAIL_TLS: "true"
PRETALX_CELERY_BACKEND: redis://redis/1
PRETALX_CELERY_BROKER: redis://redis/2
diff --git a/resources/chaosknoten/pretalx/secrets.yaml b/resources/chaosknoten/pretalx/secrets.yaml
deleted file mode 100644
index 8a9996b..0000000
--- a/resources/chaosknoten/pretalx/secrets.yaml
+++ /dev/null
@@ -1,237 +0,0 @@
-DB_PASSWORD: ENC[AES256_GCM,data:JsoMNWdNAMTbiJWuaD3Voz7gJEUK4f7hrA==,iv:HRDsw/mIcCAMzpr02GUAFKby5w4r6zOPYqUYD8wDi2c=,tag:c6f4YjZxTORcDCkvztahRg==,type:str]
-PRETALX_MAIL_PASSWORD: ENC[AES256_GCM,data:DTwMQu4VRWkr0o+7Tw9PFwpDXTnOj2k7Mg==,iv:c2iwnymiSKm079edPJw/TvUHV2mDWQFbRGBmibBBQtw=,tag:7VpRWhU1E3+m32KG+EDR7A==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T20:58:14Z"
- mac: ENC[AES256_GCM,data:67W/Ho+P2g04EmcVF78thDkibgeelSRI3WTyJu3mhhpl5EwXFiPcNjLe0ND3XQxWjn4F5+TLP2px8aY36upmXHIPys1ZLYL0jipF6FQI+0C2bFupOKll3/sFWWCp+51f59LDI1fiI4Q8nIMTASkieeL1yZmMHgrAV4JQyXjlCgU=,iv:cA30UqfF6rX1fxXiAx++kZwh8+EEPjB9+BGerCPdTx4=,tag:r5Yw3OFq3Z6KZJb76PwVcw==,type:str]
- pgp:
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//dOAMC1Doyk+FD0WTNYwmViJO53QQy69n6oYJ51+qE+zc
- 6IHGmh8wAWKnmy5s0v5LJoewMf3XhGg5sIoXuBj5OBICKSRRGozzYNJ1No3py3PE
- 2ml6FI5SAja8QBQzNoD+D1zP9ba6xYbwfkx2DA1lpBmXpVQsUot4A6P5WQHbH3uy
- 6wpwTlvYNNm4SWuH7yH5f2NfYVhJqaKaI08N34mYQ/f1OuwjWZGpz8jjt0AH+aGV
- AcMPEXQjHgq+Kd4EHXSj7YAR41tiPJhYzdpYOQ1XX04JaEVMCG0iYfrfbcFtbiWn
- YZ3Ro0hpGpND2HJEB+M8NaOf41k9z75KTtGsoJJUIIWoCkdFxeMh7/UbxauVEV7M
- ussl7Jq3jbwC4zvKzj8T/es5w4nPZ0AGzz6Wd2pmYuy0sdaOczEbVGlLtACTaHB6
- B/LXVdlRxCQxZ13ZQwMTDvdvz30sl1wFCh1MtVXQGNS4xEn8gufGgcgiN2H/OHRe
- i5jK7ibeRU2aMPD75RXhSGNtN53FINAxkSa715inHFQVt6fXH39eJNLoyX7dZb+W
- XsiBwjIhW5qd9rXEqy1W7QIZKA6GYuyPaBgpCaaqsTK+6kXinV4xYqkSghrodSkE
- oMc394wMmL6CYiPDRr4IhjSjFTxj+5AKkJwnYY+rKFcPD8qyWYI18E9zvgYNsK7U
- ZgEJAhCf1ciUAngZMQtVrIk2NqkzJlwPdw3OyisZxsWsZcSf9zmIHA6uETAkwHWB
- IGh6dAB4TcQUjj7eTDVI8kYd3oaKwrQMGhQeBDfOA8Kl5d03+WwjMTozwMnk43oP
- 915KaE3I7w==
- =lM8/
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ/9E/r31WwmWMkqOIvNHsCPZKYn9WaL0L7a4fbXQ4CdxKj9
- 0/0aIHz8B0G1BLXavdQnkFSu5BvLeaP858BXtP7R+IghzMuXz77i3tyszXU1MZYT
- qQ1JQxj0e8LUw0E0FhrsopWWALZ51TruW63JQVyJNVhyRUFrJ3ejGuP3jCJUmNRS
- NfdWoyHHOGtdXHk9j7Afwg2xn0ZABObCD5Epwlns71xPe/sTDzELRbY2S66yhd1N
- fmOgw7FrwjrRrtiFarhFY0gUYEaMIZDndOQrjhBbR+G3OFMg4ia+t2xH7A2y7Pj0
- E1TcWoeZH2Pz3A6C596lmfXO19AsKy1flfMvugl1o33UsOYqSxu45JaFX7BEJBDW
- wUh9lCkGwB7JM6XjWPcgrtLutOELZFxVrnzrNtJVSq2j6uhEB+Eh3C7c/iaJRn96
- 0x7yl0Va6X6/5NAtGpXpsJaQtz+TFe7X4hVcOEJX2l1qpPkjRcE1IczJFjyYV8TL
- beq4qV81AL/RdR+HDQ1nGsmunBV/94UMG07GhTYjNm0QFWM2IhQkgs4oHeBeSqm+
- uXVpY+SFFoQto9+YHX7NnBkg4kiFy6A9tsYQrqffMPQZBn8V81KQkRnduNTspF/1
- 6E0ne/E8PXqmSGedCEyPLzLXIxrWC389cjcmF350wF7l9F620IBINIMtqgQMQz/S
- XAHXATKrETDrw2YDgwLbB9oIptUKob6B/BB5P1uFhdaCarbq43RqYnWcLZxdO5WJ
- 5d0lbZ82ykBAo9BUswnaY3XvwYPRk+bF79pQ15xljjksiFF0Gg+NzbilNkbS
- =QV7i
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ/9EF9rxFPcZShqJZn5hyUQ/Y7RO/htHo6jdqFu/DfpBcCZ
- +pFuyR5Lq2etOvxbB9/HEqAKxbpeRzReu7c7D+WZz6CaS/PWj5TDxt03x6jNQQE2
- kCiZzTEB+VchmDnC4ifgX6rphvqd7GLjwXjXCUcGjMne9ANJJrEQstdZ7Q/GR6ra
- Fp8I8hfrB0IpghL0gfVFw1HvKAaprKUOMBXfLqzPbZbYxdKMPC59ShrzgstHgF+x
- q4uZgu+EOcpncTGvnReFbQjA0DgKyRGhATvAzASvqU3sBRAwm2hugVrcmWEpQRZP
- QoLUchCLelcIf0eeolq5E2kxWxLTiyiGN7F8CoVfkwWmqyNlGweqUI0+eTPW9XsI
- hEnpeNmFtZPTiTPxTYAb346m9lcslsJYccbFMZEIBwk3xB0ijDF//4Q+5CIgGHNq
- Pxw+z/NTvH5zWhotA8/yiP8iAfa2MikUmhDr+stCmUSjnyWsgS6ncWwIP/H4MCEI
- Lk4rA8mQ/gkS9UDh6g3ftuAYJIgPz7jVpQn5oA21VdwdeFO7YyJCXlhTL/oMeW7r
- xuV+BTEobFv1wrGVtVEt2cjjbodoINFXhXiwonnXquhoxk/ONrQoB9I43j0+C65U
- w5LRhMMR0ao3FKHxwI4ih9JZa+3yocbd/7E741WBqvB/DPzd1XRQzP+x+HIEccfS
- XAF0UX8YPVCbuJs1nVVfyJSHuRQSplhuBvVfsIwJCDFroXYaB1JtkDhVVHCofnJ1
- MVhWIptfVbmY/C957CLNGHXZgE64cGvAXn1whzzGch/KlB7//DEW1iS1fbUO
- =fypM
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1ARAApFA1MoRir94aqTlZF1cZOOdu8za6fOPxvcSICMV5RxFw
- Mq/9xFVtfGJ9VfYxW/im7HG1r7EjIpmOwXlm4fLGEIpafBrcJrQi0bxlbCB3p6z9
- xuzCcmF5Tphuuh/LEBBhHnt3crJyGrWTZ2Dy7+wPSPEnN91bl3dGsHr2Kbis8rBa
- QGiv5l0sqMJUWcZUmHTnvhb+KZU4dQUl+qTLM36X3ChSMFpuAO4w3YwWJ74F1Akz
- b/6eIt3u87WD2r+ny6DXTNsDVIymGnsxIQLA+YSGhf4mwtl6HOZlBBxFKkxFp4HU
- 3QA7zPwXY7g50pvlc3KJMNuZRTy0W9mpCnYKjHQzYkaD2JfVIrGmmQ47DEMnz0bs
- 1pgLCbFE9TO1ur82QNntggSWQtOHr2ZFbF3BuFjIQ+V9rPHdCtGFFarZhwC2t9fu
- KSE7vyYKO3o7g3BtOmqb6mqJswX1qTSyVOj4aqGSjG88lZq9WJPULe0w9rqhKwjP
- OTrXm0xLSUk8QWx6V7d6kKiBH+QRJkr6gEdqovzFH1XNwtUnMIkCBudQgJAw432W
- nOPfgXSifTT2hs/cWHo5ttoRiWOsvuqrCBmCETeE6L7uQoi6bhVVz2TBRVcc0rIR
- 9AkuLc4mcQ3aby01+cK1ZVRybzTTVSmwGmssr2UwwxlhQUA+r5OjPugg1ynoIk7S
- XAENR9L83Exjk8DsMKufYwRMMcZSyHzsH5p3ucewe+euYwCf3tB0iZPkHCdSKTST
- o8lGtavDKNn564tKDeH1miuvas+e6FVLcdljTqZZoS9I1IX0LRnLLQbpFVzS
- =kJu+
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ/+PKl8d6yCqlY2t4TS3MHHvxcPWrXM1+O2MKf78tH2OeiT
- fBwxUChpNIvVX3aWSPheyFb/1PMJ/U828wPDMbBZrII2J0UXvCqnmuL08m5fT8VC
- JjlkfnULNrDai/mPyxtpGJXnOm9JEmnUETl4xme8DbaWWg0QF73N4h+dB45olL2D
- xYyeEZlnk9OX7fy68ADKxc9n7E17MjL6X4PV0BGx/15QhuPnwTFxCpe4F2dZqgAn
- HtFunsjHwy9vptoGlh0KatCJLdaZaDEhmo5bQtxlpph2QJpstk4pGdLn5SJAUCYQ
- bvfEeRFJl1yx0fLzYr6vQnqr79aFXVdV51ZDtAv0m2I83b34y4FDBvdoLrSUMGbv
- ksmk7qxpknGoJqhMdORy+lBMGffG6EdcUaIdHqmLe7GmKrPh6CdNHzaKSPBIlZiA
- 3YEVSEcDiVNuoQBAgJXUh29MqXIOPJoFw2hO2kwfYebYA/Z7ESisD6oCOiOIUspY
- Gyn2T7TFHVqFfa30xA9eWYe4GkSVTGsg5/dCVpJxJI1L6dx0kQAIZVZ5vZzwticX
- 2I+/2hVl2koCMqZJ8Ggx2VDLDUV1UMuolBeHXD4ci+3PcBtjHCVyXGGBls52jjO8
- ooUEkVWwg9PhQUy0royZ7E6GEfmQHtdvI3tONlcXa9J8OUY8sBT2G1uek5jQFN3S
- XAEfIAmGnoJPreDGSqVu44YCjImBEwVrDYI+R+WvDbfr9OCaokQAtxTYg4C21OV/
- xaa6RmNG7Gjp8v60hj14k8Q8whvfBRvYLss5P4VhQAKquuEucblMwf9QYghk
- =MMok
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fARAAiGtaAJAK6xOYlOoTMt0G9IrTGN7syKHld9x5sfFJxkdE
- vDMWTmAbUEfteFfyB4YiZVvC+2PPEaXKAy73t5mZDzq53PKIdBUmiGseNZYlKm4P
- 3KKIX+WdYBXjdqzG4TiQu/TibXoDNEJRxDw7LE0dzfPWtasbLREVRrrW1vaAq6Tx
- hcs0eAmxpJ0Hmyz9R+sWTAAYaTxHTkbkCyCyqmAZF25lOlsbPFLsXXD/BT00CRB5
- RM5XwjrG+3AjbY5x3vVrxI6Ni2395C1cFnSew7ZITscC9//d7nTi4Tim3ll/de4j
- 5IIKykMdzsAchQuYyr+fljoOs0qOAUW18eyOE6Quvh+Hg3gnvEma4HPo5LkM7RBA
- Uf2ki4FY3OHWJb6KcQL5VKKMzlfp66zEAJoQTWkvMfas5c9injn4ZrEj//BljXmf
- Es1DtC46ZMpflZ10qj03ND1zYMdJvATk+lRGD8KdRr5aO50orLsyO3irtfc/zMok
- mhg++vw4cj/5AtlwqntXGpw4gE0/2QKdHS5LPC1ijx0aK6SFXv6jC8B1qNT0fF/m
- wL6gz2Ty7aqSQzKrxVDFXzhfgYVRz48LzptHpFjTJjQGYxWxoCFMlYoejMTuA7ja
- FNjvBayX2ZSMgVaqgk+wOeh8uSYfszu6VkH3kFCMqN7WvRbaxkIZUAbEF76Kj6zS
- XAF2aE/v/i2VD21EhGX9koMJXv4tmCwcvUlbdukF/yJBstunXzTGO+X2ePJ8AkS2
- x0ZAlzof3Xdm2SbRGlCkFOMWr8u/K1je+MRN2igmZO2NglAwp9bGbSf+sHjA
- =aXJg
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoARAAjz4TsJjNIvhb0+Jket7pqZTp68OGNaFuN8dc67HoqGLV
- LBstxz0qkj8kr+UTi+QIagbKVTu/P5qFEJ0V4d12+QMbwR4yRBH4KYJNYzVgjXsb
- oxkeHxo25/FmHDNz8z0D+CdCAOS4P24qSOKcYnk4vhZ9xI/3BmEH2pZKE6HUgulr
- ZzqKkJuQyVwpzYgsA12ps7SycPLkAfF4TEBcE8luZlNDq/V8yxwEctpsmNlvvBoX
- My9SycdGBTOTwbW33hx9lMyZL1b5Z/hlxduBKBmSHtf+o9KAWZpo8Hn7FtC6eFoW
- j72T6OhkHIwme9p8CMUbg07w4jqtAU4qk0YHBZMJv4LmERnrOmG+24OYEFWX3bfU
- n08HRy5sp64jH5FYUtcuEkex+jeA2yLxskXVhzhQk9Qrnw3MJtd7wnXK+fz2Dpki
- 93KINel3Uw8DJJGui/lx1lerCyEU/fqVYtC5xYy0rzl0ZlBK7f9oSl9bxOo5vuHl
- NT2Wb4r4v1xSewvPIxNeF4cLIC1wa9GkshmA50uOgVPptF/L1xMIwz/e86mBsLlG
- byQNqbbezfK72cBERgw2tVlLrGXlPAQiGGocKNzIrythRrdzjOgw2Bmb2sfXw4J1
- vCF5nwN/joRngd0iepxYYKlx+zq8G0wRwd2RXFscDXxkH+ouRxVWFdX89GqcjOPS
- XAFimzl4DsVpB+abVl/pGaNrQDrYnwbPvbh+qNwKeMO4B+3VDzP0GN6LdNxje5/1
- kJrmR2KqT6eDWq4R8El90RkZmr3Z6fc/SffCQoUGxGkEapWitJdkK0jV0Df0
- =nluu
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ/9EGmj5h30qhRClaFwStf3b63Couzf8h+7Dk2GUuCJoBq1
- +WDHDJW8zBSCBHhHlOmB2j4gUfrVHOHgbdEBQoMFatCpBWWVNOO/NwBCZwwL6Dp5
- dmBA94bW+jOk4is4ecQ10zPBg06GVzpDuefYKH4BS/JJ8ecQ0q8cWO/smzUcpsNd
- dnN3J1Py5VZOz8CO0SO/WMOoV5NA/yPmc7LL/BiSRtDEfi05r4r4aDLK4mJ/s7Fe
- /7vllPhC1ZxntQ//1z0cfX33nKEtyTkOh4L+BPnrqGCM83zruAfSV870Ws+iPbHK
- +S1uCll2ArflkzF0YiaqZd93IH0KTDHUxOPwHjL4J+apBOCmKoyd1nYEl3mVNQhp
- NArOEwK2ws6xA3eLGjI3pKtsyWKXfgblyyQcSJAZ1YHK3I3YPVcPBFE+zp5puEMS
- L0g/d/uzUvAG8GyYItAj/xEgaCaslWZrLAroZ4X5XRrZNcNCsO54m0t3xxPKikZm
- ZUFV79+iG+Wb/Ib2DkPOKmOV6WLa5PGtK4PUUGKcTp0FbWhtVeOZUOmP/LkmrxBr
- mSfnmKdiOYlyVNpaagI+XlGNSWU+9Im7r3FO/IEv5wmt+k3dpM6dGzaty1Q6ffVB
- 6OqTZ3KrKgOMj6WIC9K7INvfbGijBeONjvapvg7SjzoXeyGqwS99IJrvdxnnc+DS
- XAEUUYcXKmS0saM0DumdcOlfTZnzcB+JOiBI6+wbh2xiRy77DCDy+xW4m3tKCCvg
- vJdEJNsSA4fpzZbjd1a2NhEthJxDuuiKfMmnGOCX9DX+SprzWzjJJiew47s7
- =Zu7P
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/9GIgxeDdrdDRTroHNgkVYoHLS+jkPXIygUcO5OGsmz/JO
- kYxdW11QH2xnOz45e6wM2W/6Vf1VPZCeqSKxEUXHQkXnqPnqD3zw+ukO4285gDb8
- 3reybhsXXR9L161H+7+sUyu0y3n5+wPTK0K5Y1UDxZ9r67cUfwvQu7EY4Fs2s4yG
- g9d/thE6rR3lUIc7w2XC6veeVAjJrdvx6v04KaT+YQONfEu6GVNnA2vircH7JK6C
- cqx4J4TGFS+XuSPm/07rtJLT/qD6Qao7JeOJFXhEwdTNu1p2ynmqUA0Pbh/Hdtgk
- dv4kW6Zx1yoUuqPf5ehQIcFD3IHxlFAC/ZYOyxwfTgYbdfZC5iQSytapFDwjMgYG
- Z3Mto5fwlhblagGQKZJ0TZZOZDOcJA5vS0IBQPYslZEVhRkAffJ7YHiNdnylCt0S
- kLNIkq/wGZ6NTffonJRz60ADUw94jtS6pAjceIv3hlnn6MrkdoYAkilv+dS7qSj6
- fGlIQl0BnHUe5zaDAkQrXeasbTzOhOZTTb1LuKw/8c6CKt8qA/I+1ragD5VtOW90
- fc+o3Nu33MRirTyvtlltBnlu8u47wYU2dRPZz7rmpX2uBwKBi+qoNcWt806HgynB
- HWqwrSNYv1y5pCaDQEsVX7vFQY17MN/4h2B9k0/KSlLWntpjo8wJ2yAVLUbOwgbS
- XAHW8GLQha0t/NaDykltIdEWJijiX6faokYrd/hMf7MYKAU9M1t8C6LVJzM2k9D9
- eMdKf2b12CPZZfvbA4cVEvU6XoDWTo2RoDhzMQU7QugZ1vUt+lYTx6t7F0Us
- =Y9rf
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdApm/pMPZEGvqpq62PDegCOFtAHb9gu2NbHanCGEaf7DIw
- 0u75A6818/eKyi8ALEuydUDBNi2vwGSncUuZEacTlLZkLAW/XDi/wlXSkBv3OGbF
- 0lwBWvKAZmPmQmU+aHQPH9RLNk0SAl0WdQtCveFzy/UfSkNX/QS93dbhczo6dyQX
- ZK3lEsekBVR2FQhe7+bC8Ry+Dh04bsjnD4hCPI0lDM4loQoBg3xsw+41GIwOSw==
- =yugu
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdAaiybhXQcYfg5/0e5Zd5ctB1ncs4PIIdzDVzm3wJceF8w
- 3rliNGXbcZB8THk5g49nvCHdkDNX98TF05DkaKTYjZmC4er8AqbRwamt/xkInuCR
- 0lYBQsS9bNcZBar8dVL1OC2cu7F8KyT6rmz67Oxg/ACjo3o6Trq1/KVF38Zmqhov
- YlaYXB476wDXA6aysvxcae2TKO4GhwNHQokyUJYsjT/0mOXG2hd2RQ==
- =KJs0
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T20:57:32Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAj+B42CzfPhIqhSKoLePF+uJBPZl9HCmETvznhutyfDPs
- +jZT9QNTCMub3FdWU1joP9T/V0A+o0Q7BYa2O+q5/19F/w/+Yk2XSJNu3RfYSpq/
- KgLWGSj5Q6zVp0FfVCxoyEtCNy+458mNxn4HvHlPsJwnP+u8MZDd4Weswqx1L9qq
- KWIiQ/V33P/miFD6pMHyoi5P0ue7mmuIDtH8D0pLhAVHAhM4s+YBF6OTpobYRTjr
- rm1rNp5Rxu8hjOTpmylCtQJZeud/zLb61fUsAO9svq/Rf1RTGiGwOUv1l0v4mVto
- Ib60J1dSdr6TBCmUthPlE7NskIS3B2wRL/GfsqZXazlLBsJf6GEWEFcMGi6bS/Sn
- XSX5PvSp6SI/9UXPBVXlpDfwyvBulilSqRR3HC45XYj7Zqb2HWkEZF1w6+jYCuLw
- z9uNFR7BX4AzrhEPZ2xYfzMIT4Cd0kQ6oFLfpvFKbLXBNLisqvGhzVBjHQHmK4ou
- 5NgoTAVvhpuO/LZf88YZ7/u6jwo0r/pPCyyW6I+raJinUGfBmm0KP2Q6xTXRAMkv
- OMCLEP+Hjm7xG8g+oJ/RsvQkvpQ4MHhx7cDQpqQFSV/5DhEMtANth1Lb4mSYlmPE
- 2TseTrARXbq256F2clDnldlWnnkakzwyGlAPvJfweJ4o67Sr+e6vX0I7HxKjQ+HU
- ZgEJAhDJfWWDsTZ2nsH+w4vS+JHZmdoelzKOE1wTioAEb3RZm2wEvw3gI6N/eOfG
- u6n7GTEbjHZRcvysbtnXS2PRiW8iNMK8pxW7t/Pc0MfOnzaF2bQRoOels2ITqo7I
- gQS/Rpv9Ag==
- =6U7r
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
index 319347b..1b998fc 100644
--- a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
+++ b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
@@ -70,8 +70,7 @@ map $host $upstream_acme_challenge_host {
design.hamburg.ccc.de 172.31.17.162:31820;
hydra.hamburg.ccc.de 172.31.17.163:31820;
cfp.eh22.easterhegg.eu 172.31.17.157:31820;
- hub.eh22.easterhegg.eu eh22hub-intern.hamburg.ccc.de:31820;
- hub-usercontent.eh22.easterhegg.eu eh22hub-intern.hamburg.ccc.de:31820;
+ ntfy.hamburg.ccc.de 172.31.17.149:31820;
default "";
}
diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
index e732052..37f62a1 100644
--- a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
+++ b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
@@ -88,8 +88,7 @@ stream {
design.hamburg.ccc.de 172.31.17.162:8443;
hydra.hamburg.ccc.de 172.31.17.163:8443;
cfp.eh22.easterhegg.eu pretalx-intern.hamburg.ccc.de:8443;
- hub.eh22.easterhegg.eu eh22hub-intern.hamburg.ccc.de:8443;
- hub-usercontent.eh22.easterhegg.eu eh22hub-intern.hamburg.ccc.de:8443;
+ ntfy.hamburg.ccc.de 172.31.17.149:8443;
}
server {
diff --git a/resources/chaosknoten/tickets/docker_compose/compose.yaml.j2 b/resources/chaosknoten/tickets/docker_compose/compose.yaml.j2
index 690526f..d00a454 100644
--- a/resources/chaosknoten/tickets/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/tickets/docker_compose/compose.yaml.j2
@@ -4,7 +4,7 @@ services:
image: docker.io/library/postgres:15-alpine
environment:
- "POSTGRES_USER=pretix"
- - "POSTGRES_PASSWORD={{ lookup("community.sops.sops", "resources/chaosknoten/tickets/secrets.yaml", extract="['DB_PASSWORD']") }}"
+ - "POSTGRES_PASSWORD={{ secret__pretix_db_password }}"
- "POSTGRES_DB=pretix"
volumes:
- database:/var/lib/postgresql/data
diff --git a/resources/chaosknoten/tickets/docker_compose/pretix.cfg.j2 b/resources/chaosknoten/tickets/docker_compose/pretix.cfg.j2
index 83cf327..f1c119f 100644
--- a/resources/chaosknoten/tickets/docker_compose/pretix.cfg.j2
+++ b/resources/chaosknoten/tickets/docker_compose/pretix.cfg.j2
@@ -10,7 +10,7 @@ trust_x_forwarded_proto=on
backend=postgresql
name=pretix
user=pretix
-password={{ lookup("community.sops.sops", "resources/chaosknoten/tickets/secrets.yaml", extract="['DB_PASSWORD']") }}
+password={{ secret__pretix_db_password }}
host=database
[mail]
diff --git a/resources/chaosknoten/tickets/secrets.yaml b/resources/chaosknoten/tickets/secrets.yaml
deleted file mode 100644
index cf2c4ce..0000000
--- a/resources/chaosknoten/tickets/secrets.yaml
+++ /dev/null
@@ -1,236 +0,0 @@
-DB_PASSWORD: ENC[AES256_GCM,data:2z91TJt2qWl+mZV2fGXgXT5YHwYbhwGH7g==,iv:6SHNeCtGqvsCWRJwA3lzrEbQYLk3W9IYBLfx4l/jkNA=,tag:z+xWip4xGFt6vMSoE9GPug==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T21:13:16Z"
- mac: ENC[AES256_GCM,data:yIOTN939JOjV0aM+BUHRCnnGAuZIUGFvei5SknC/u8Kgoil+Z+5Mdb5R/VMgtriBSeD9z774W1ioH4D9ZaOgKwkLOFvDx5+Q1+bxj1mMMKV0mWZKttNOd+8GJ8t/Zmiu0hu0BvDMz9maNZVMsDlOPUuOMQ4RbSrkrJByHxyL9FA=,iv:/4hePEMzzTxwRyKVlUOYDgIHb2lDyg6Y0j9StR9qtZU=,tag:Ou7Q/dOmkzA2uuZ+tLsCbQ==,type:str]
- pgp:
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtARAAloGIx3GHxBD0iSxnM8/v3kl8HvW1r5WVL9Z5Xtu05m2M
- 10oGBnZoRMhin+I6FoLPXlC/NoEgqL46lrX/D69H4tDiHE2xtN9vSOrpVE4SB8tc
- MIPl9q1XjypCfMW7+HZpZg+hA8FEG8potL/3i/gESvIFvXz8MmAw9xZjscuXqZuC
- oFHqCEIEPqUIt/cU5aIRRSmBgjA3Sw64Xi/PVpJ68HiWdzFHb4PkEL6ji11Ju8rw
- RUyxlcJZZ1/R+RY9Z3chzC2g+ya3QZNFXuLP/FkORKIErt+R7s2IEl5vmvYsBmbD
- LAv9RuP21KXzkp34ddZD7qN6+hS7oeC/H37+XYte6UWYs5oP3SyW6aP8EgRukyGj
- Wj2cnoWfftSGVV6rJWJkM3Z+2EnLJcVeQp7w//eHrzVjpOFQuZjgdz3JLR7hHH/P
- JQVmqBNHebpBwPrcsUXOdAOQ9jhaaUIDbThzD+WpCUNxX1R0H+6X/y8C+QH4+7NE
- I3EtdCnXXm1i7S/YsvkJ79o0TcyPWln0zZiVH/9KSu4IDhtqFfzHH33eJY1hQV64
- SXMtSlOaGvqZjEpHApNlbLzO9gX+yynd8m/fACYUZw1H7WpQjBPX8ZK1MJGupC0V
- QPz3ZjQv0Za25QCIV1JhnG8sw22NlA31T44qvpTgHQYYrLyiWPSc6GaaP4zRyDPU
- aAEJAhDjdZQvLBUmStXYPv+iiBsbpBYJ1gSugO30hG29iAsT7ybx6Gz/Kuh3M3f8
- GqsVD32plCiMv6CYuohykIkIedGrniRj+xoJ6vR9zRU2MJrIaYwLcsk6Pr0sPrff
- SDsJqxfz54ft
- =gzr3
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ//ZQ0YAZGm2B3rWCtGUjuwpiaJ9oIXJLq8piH67b1Fyzm4
- pNw6g4F4RWKgI5Alwat2d1XKJA2zuCww3L76oBYtY2qXSdJoz0cYQzuM3KL2goyb
- cnt2XtRoOfS+akYOxabz3CyigVQM+OfOT8SFN5XK4A/xavgKc6pso2WS/10CvfLs
- cRH4cOzbOoaB0ZwJ+HKkayK0Y9XtMaDBdbmO8SHa8vzwsI2dTSV1SmR1+vRAUTag
- xBhp5xoOfP8FP8M/bHre/ArwXku0EqwENEfNyS661iVrD0WQZDc7/Dg2NvwA1erq
- Jnje1/5DCYhPO7Y8W+jP5OzxK0pZLaDxThEK0zIrCr3QbUJSoA8RkDEe35paWNC5
- 8F1eTDTunqrEqT02I4GEFN7XhwExWUIMTT6hQ1Gp3uXfwCAlXMCC5uoPE+tucTiH
- LcKn185KIrH+Q7wssEUu1T/QTWh+Ff2cF5vPP+BLIkn707J/+UVIeipRreBISzLn
- pGOpuhM+pxFokX5b4oMUHBJ4dOhQ1MclrxL9YZzbQtpEnCmOo6OIrCab3wHBO2Sr
- Odo1qX137xV8gnPdGkrCTsV5XM/oErj9Dz0yA9pjEXxLlAhHdb4EO+XnnhZgpkbJ
- tH0VwlD+bczMX9L0pq+wN/aLi1kEBDDl9lAHq1QHddjHc2jNWMAQGrcVgJQRw57S
- XgHrTCfRh/WhKXpxqiluJLz+ukF5BvJnGTpQXGbJm5SsJgR8jEY5UBmIBuJxRcpc
- 0j+UsSbKgPwhmEqbGkmOb25PX6nvdO1SCmGp7KUrLgD7kJafjApvUn8exdKzquY=
- =ygn9
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJARAAiFrzmBlFJ4gNJxIwCAbOY6lg+UccVJT2T7DkeVnA/7KV
- NRqQTxtiYgMj0HY/5kPq6I8yC0FKUxGx5QsoP4lvUvmiv/kCXl3M3hYq2QrIN0Xz
- xqxzLTyOENAwwfgvRS3RDNKWX37CM/eoVaozs1+f4+I4dGUhvWfoPIJcgCkORFc7
- BG0OwEKvyE82vBxer8Z7d5pm34BXL8Ptc89evI75iLw0wDq/JoGOQKYG2G8ko2Oh
- p7c6VnoDFQ1PJFLm6wvVBjJwDznn8DvSYR1PepDkyOu+eT1oGmzGnQB5Gbnnajxa
- +2Uw5S33kYDeSfHmgFfg0BA6dUVujVTHn9ZZIGXzIJDWg5wIMgOpHK3XGRgW3cKF
- pC4qBndlaWYK36AZmOFsok7840N7LYR6jz0Az1wp4F1bxKHBjy4ou3cJjhNVU8yu
- 13/YoKn0SZ0iYAQrlceybaVwdIUxnH85/qzQ8tnD6DG+9HiC98XjbEgs0pR7HJRP
- Fp/zuYpNbMnYRbB9EQqfbzIU0msTyaUTWcQwX6fswGRYYq0tRd17n9LcfNREmpAi
- ydb5x92STgSLE7sGAbsmPSMmOdl3BpUi9dPlx3ka3Y27uWI3VIWTTns5zmIBz+Ht
- 79a7nYb544eDNax62Gf7nLPnLmZOOfELFcuuuB3QaQIge7NptFmJJE4eXhr6V8vS
- XgGzxdvXBgu7kaZOgqTFoZndVLzuXaPoy43unU4aEY/ewW5U49ugodZLoW/GSfHQ
- 14BNCVO3Z8A6XqWfjUsKruROLdx4b5XaJy2PRNz3vLfgTmVo2pZQszMuKjaWzXk=
- =dvgO
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1ARAAvAE4F6dTkXICJ3AEgvjbwm9WY4zBH46CxTlxRw/ASC5u
- SOEWZoVaWQTAVMmdiI34+bzs0m8dtK8zv2OseIVTepVJBN8EfPkd6V+fDZPX37MN
- gMGjr2AkXAGby9oHL1s5Wo2YtzMi0sna0qqQstZkNTrq+LtEpGKOupEAmKdV6M5u
- VtPv82YZqAxLk1h1/kpRUMQyd0Hf5YQunOnUXAvCQHue4GLBSPiz+JIplNXFn3Lo
- g87T06pJDZDtxIKSruSbb9wuJJbz/L4qT8QGJj6CNDoWAKnZhYlVKnKQkRZevBxb
- EsD6tupcvUokWW21iywlIxTgOWGklNpCnu/4IVa4jnQsvlV2saGM1EaTgsELPy4M
- atQ6E11V2ZTs1Xqiww1fnXe6KIWKn/xQ3i0VPgif941DsBFtirnutqedU/S7iJWi
- XsSZrDDsoqG0oX27WphK3MrXoVAkEOWG848mutPaLW4Us+BMnuRUbAi+sVPETvbN
- hsvywnasgR68bCWispRomGXjUnphNQ8Ry2FXvFhYKXde8xdBroh7iBrn8mZXDn0r
- DIuJh3yEgItGachvp0t+bElihTihUiNdCyuAv2de7nQn5F0wqG18hfxyy6yYlzUS
- gMJZ7qzmTpUWGv8cPoSAIOp/ltDVS1g/muFwd6djEetFRQKm8IuhyGFYJB3f7XLS
- XgGk51EjM2OGUX62galbP3Nrs2s7hPQBlo1cVZbQlB/eBLACQTtrKDyIC7+N9yNd
- Erw51W1OG1nISvj4azF87U27M2HCOUoH5ecVxtxNo2Mg8dOysZn0HBis58hAViw=
- =BgbL
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ//Tha3qHvAchEyctVDmTc3WPLXy35hi/VBQIw4Ell10q5y
- Jii6h5fTGBdk/u8uXJmkLqAYfZ8ytCMMWPXvP9tMxX1K8Xm97SFVcZJgdL6+lKKA
- GPttR0kGo60OowCIWy1s8xl9qW6625L8W+NhIB4JSOHG5h2cpSx0WbrAEPCNTiOe
- MGSU5l8jIzgFj5cAcSdwojuKQbtiO0TKSoVFqjLQq0l8U6qD3hTcFcT3ktOv4DoA
- bqKyu17kzonS6tpCnIuuN9AEbOl3k9RPxpbO4c10l1zaNHEEDbXRYRp+MwcgwOK7
- qlmqf/QLVXWt9WeWvBSPRAbDDrfCaBaPAy7VIkgWdp/CAsdygQkvgh4uSzzZrjnU
- xZiYVVInwJWSrDmrLXtFRhlxPeVXo/QDBOeb5egsjNQIs9Wys7Y+L5Rgz9g/W/Xh
- D10LAAQqYcu3DlOhzsT6uuzb+sGVrwfQAQtg/ujaQOlIUC2/V3cmOMACWmoGigb8
- qlIXx4Ytd1GI2EX2LVEvMTKmIQHeEijmXSu/iu0D+S2mRp/hgSzwH6GbGb8MaRzJ
- MKAzt3yGh1hck01HSmif3t6rhUS12mW+M4Xdck9d3MjiXrZVznOkMT9bhrvLiej1
- 85KRMC6x6qiMpp4BfqQ4WXSDUjhynzcoobZf6VWGeSHnaAeZYlnedOlb1fMoSRHS
- XgGZ5a9J4ZQonAkIRcDn0xr3EYT8F61vVeVwqTQ3PDd/IoRztq32RkHng6dMBZKn
- lRpC6PKHo08yUGH4R/ppfCpG9ApdvyoiDgGcSotXSk/AQfuOHlTVCA0fQrq1j5Q=
- =8tP8
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ//YdAXWGS1//BK3tQne5qmvdI1uOY2HPYSd8vEc7+UBi0V
- bBHsxlVMVdZSJQVX7WLxAqBvCyFbJP8lsoXlVPK6pq8tqBzagBXSemha7Z9SdeZ5
- 3QamddaiwoeBrli7hV+AXnLwmOn6f+5/KmAdzU2J7QET87Kd/rcNbGP1qtIaIet4
- dkxdDu1xDI5mrX286gg29lRfjuxsiQfzmU4+PlM4RnXVpl9QpBtvzuWQYDmMdoCG
- xqmYVv5xZip9MLPv0iT/T4IMAdhI5TvTT1zBrRQW7tNRgRLyoSRQC6qb1C24sHcS
- VBkALQI5vF6ghPQIC254LUquiTEazzr1TtvLKkdyK877E2E6o7k9dsdSPT+TemgJ
- nO/lBhk2ZAHZRLb5jfguhzQ1G0WjfbYX1QAwCW3Li8EBmhHTIkStVp4TlDvPhgb3
- uLfGaasoYHO+oirpmORXd3Y6pJ1FvAk2uFLcqQa4A0lkblxzVAI+ZwVmw/RT+yb0
- DZlBKshUUYT4gHJOD/UrLlviX+qtVT57OFqhrLEZkt8L2realtpQd0efotK3q+cc
- M9auKQ0dAy0ZYmBQD1DpDz8pg7pSXN3DpNbXKaWuz6B/84WU2aw64RV/ZaXEfBiw
- TyrlsFMTAd7haoRYtYW4RxctrnLoBldGezxVIn01m51G7dRHL8/aDiZW2ffKOqPS
- XgFV+BnacumDlBtMqS5yrLv44tDRXXuusVku3X0XQZquMc/zb1XwyK/DReDi5756
- 9pDVQQn0SxkZNo/z8ln4C8Q7IZUQWhJtWNwyl49HYlSZWEnJ5KK5uEs09GEhnbk=
- =nz/W
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ/9EhTITrYK72Zpzr2/obOsRJkJcCxwEtHmUxme8oIw3mJA
- 0CqrVxibxhQsDVY7Nl3K5MkNe25wQb+5s4UVO0ji2thXZaRDc9ut23qUIiILMv+c
- KMu+KIvZaOBUIFaTnrbyE3XMoopk9cJsMC5MP9u8ilLMgc3Vu3R992O8lgwqQLG5
- xwSKMYy/9PjATR28fpz0iPfunvaJsnaeoJl+okSfVny0tvf40ECZF+ui76XJLL3D
- M0p3LehaFc7+Laqb9nNwzbl8q6RL5PjzjTYk9VvPTJoqORUA9mYbbEcxrEPdBV8U
- MVUTfTsvlcOPgB7nqxJXR8Xt5m4p/xS7pZX8ix6XkOLIzSCz3O0z9YRh9MXacE7B
- Fn42DHjfi45qsIRpgUHmxI2kiT5xYJVmE3MYCxrlBdNwPPkWlvN/b8fgU5DnSPXd
- SJdqMCL/M0lQhQbfWYWE9HWKuXqrHX+lkw+oEnSzj1fqcgKU6f1BapFY71N5zkFM
- sgtD8Ff/obT2FhVeYdMIbGg2Jq7oSzfZiy9IqDTd28Nb1soX1sH0lFfFMfZQ10lD
- d03YJtBJzJ4LFlWtSZoMgaw87K089tmOZ99q30TW/oR38GehZ66H9mdLWS0XqCyo
- NPvyA2lesuO3IaKuqB+XdaLSwFq9TpmvhM0iJD1qLyHHZR69bdD9NhBF5jfaLCXS
- XgHRsY8JboPGLAKH/fzo/o+gq8yTlCkjjXI5PEEy8MjBQKg9uDxxmcTtjhJcuy4E
- JBcwtwi7h2CqaoXw8nYGc96YMvVrItARTJeXoQc9EWb9bktzLFH1mMYn6dWN9HI=
- =LgrR
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqAQ//cRs0tUZD57N+1PeLV0IcvJVp2k1MZwTvuBLoUru+kbvT
- dKG/9z/1OBI/q38s1zLVobXNM87JOX5d2kKU6SusjgZIfQfyBRf+ZUyLWY/7l7+x
- T8+WCuB6jaRBhtp4TUG6AVWDC6kPmVZBcck2XWXx9J6PNR4rGSO2zeR9dPAUYH/o
- Lfu8AvCWBGcsgPG2OOgWRYog9B3RLuFaSVEpmHZoponxhCuWnjqdimRZKQPkPEkx
- 6ZI6q2jp5XzK3erEDtqdxzCwoaU125J7pmizsR6p4Q2Bp7Vew6M6SeOqTH386+8p
- oS6oBsturH166CVGjSz2ksUsOPaIPRP6ZbdGf6W9Ht1wAV9+VG9AzvO9Oboi4A8+
- SAGoaO3MGCPNWHRzVpCMsXjJTmqNIl25LFVchGiUtxD/EsVXET/4Z0CHcV2Ulljd
- lrvhEDvCkozUI9opndZ1qeTJG+JcGnXMCcKEF2iL2tqf6o1YdbYKaHH2SWt7f+t/
- FmZpwLFLcvO/yr7t9Nc8xOjRvuu0Klq+XHa89usD9D5ODeOuzQHgrLPbV1VFiiKy
- 8+kvJHabnBpwyIcvziNDtgWwLI4dYQWmpmSWvJrhFJewI4yjTQvl/Hcq9Fcnxf4c
- TRJvwa6rQWKrjyrhhslUM3Sh9jH30p0dc0nr6UEAeTiRRHIq51JaNZMMM8bu/uPS
- XgGjA8XM8EMp0c6/YYVwwc5YOR8QZfH8+lW6pfXkWXReGG4dzdeGvR0W46facY1j
- yQ4nFOCnSB0eEYnucAVxaOHUmEceVg83EECwbBZ/NgMhgojf+xjSpoNcidj0m4g=
- =LQ1A
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pARAAjfwkWbKL9yD3Pc0nIw2PUbI7yZ+rHlYgbQf0fl5EuVcv
- KNLnRk7Zvl3bLt9+Afq6iTXD3g+0YWDFS1Tqj/SLi3Vu37GxgbgemAuQ7ZS+wsNI
- KXfPgBS1o/4XVFlZQ1mvZFpwVdnre34xwNbCLbm4u8xBjx13w4vq0TKWTsNP4+ug
- XB+l9UA46xCJr7LPxUafKqWKEMkRjh033UXSB3e7Y02O6FOrj6p7kGnUdh+Ia4Bj
- RjZbrVac9W98CkNyDGlH+Hyq0SHtPYvjvriqyOLnY29xm+rISa2UAc2tlb7UPXDo
- g6vJYNEEOIAzJyYytOoxnq0dqtN3aB+BvxNRKorNHqpUo+AaDT7LuzGJ8LYacSkj
- Sq3Q27dGrVnBDjTTansQK3vgIcS2Zfrj5apY0q9CgomJMN6b696FMVQOlWuiRMv+
- UfCS5zQGtB2a+10PasiHmGnGT+TJEZWhD3WVj59cUhlQvY1KDODv6FmsP8t+eU62
- 7R4Mo656+hB0IooE+kmJU//dijeXF/tczIgCNASwylofzi4qXbmk1zUII5zYgnUL
- LFEyIENZ8WBIxUWwwDXtcpbxjbgqOws2aXhOtEXFvjd/L3qDx61AGBnquWPFcekU
- uAx9yNkw7qbyp5gTbP0sRi5bqqOIYbL3RXM/pkArM6uQQxgfApCWjYLU2LBHwojS
- XgFM9twt0Gi0tDL3W39LzXNPisBDkvp/E4HZIAeSZPMPo6iTJ2tOiVDB4GlTRNaF
- oLVK1NWwCI46YnC++a5FpPvh3RHntXDpdaBcbj2dko9OZtRum6WbkrX0zZgZ0zc=
- =zSCl
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAiMBI38DVqKUchVg9KNRFQ7i5y8PZB/tm7I9JT1gzExYw
- PhV7QT1EqPuEkAI1OseqboFj0bCo1T72M8TqwMdHz9hYiOAh89Hqhc5nluetbCTK
- 0l4ButC0VXzo+UjnmjDS2EhEqnIfzK+y/9pv8r+3FuhIpiWdSfEFCrbp3B3WX9+2
- hv8iJpCdAnInpBDB0uRTt635MBlf96LBowvMWxI43uIjPXXDCg50DQOrHw4Yruub
- =Fc/i
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdAfvbuQYZWYQVY0ut1Q7nIwx3eYajDZxkITih3R4Lhx3Mw
- 5LToASYRMdv5fTxxDibNvEyEWFZHPB2ppB1ZOOFKRUA7+cam0YFV1+QtBQDDQnNu
- 0lgBUR3uvS5IaOeEpg0E04byWimwsQP5roGCZDW4Sx9818HQSr/4HUx8GfQplT+/
- /DWZK77QB2rTtStWhOPrFkMzRWP+sqwtewnqyPRkl5lcO8+c1jyEhy4Z
- =8Ilp
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T21:12:57Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+AQ/+Mt3jDYdw9mWU6Wrsb5B7pf4IcsFCMilrobnDctSaGru0
- sem2dCrqwjHr/c9FEcfV1aTMx48XekDze/YMH2vXMaPK84hm12KxR+eZvsQWMx+i
- MlN+4ANt/ZqItqtdJPgB2LtRgoVYI8/yB8q4wtwpt7o9uSSgF6w1hF1KMwL2dwyl
- bacuXrEHpGh/z9XClnJ4nVGgzaeBvmPLKLcCQAmxu7f4lgjNM+cxQM5e6sYblM6Y
- IVFMa4p7KmhWaGI4ppLXyFuvY9qzRQwXPk4vOqgCiIjrkr2LcTyDDt0FaL49pEsV
- WMKTED85cOxL0R1jJ9a9HOzOYDu2AbDCGoKK6rFD/ZX1elJ4dB4rXLKqdkb+d3gP
- ii15T3I4nrS5BWLrCVDhYh7KYhNAzgib3yRb9gRcuAODWj0JfNpmZJxNEO7enWaH
- VCNxhp9IeW6AuQdid48m1QeFeIjVseGZKWLih14XJTJJK1oZ7uT827NpForHIMxF
- ydwyswILsA5RLRpZ01MBf5LL2TjJRoZasIgEWEAKYJe/1/HSD8oZeFzK9THJLVUt
- TrIRdZ+yaqcSbPBRrFWI6PknWzm3CxdqDeiVdZMOPaknXiQ2EoKeJ6zP54x6XTde
- TD0g8XuRuIDe/TeSUPfuPT1n9oWXjsyxXSz5JYcsyaRSjkxqpG0uhL3pPyN/pY7U
- aAEJAhC5mrp1jDSywgh9aTZTzwac/AV3IUE5LDhB9525b5OvSOJdoLNnJ0afch+2
- +SKfLGahelWSjO44hyDhvYA0dMKZZf1SIlGivNx8nTbK9OpVhadyMCZ96qwzWXTT
- HrekrFf1PR4v
- =zm8X
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/chaosknoten/zammad/docker_compose/compose.yaml.j2 b/resources/chaosknoten/zammad/docker_compose/compose.yaml.j2
index 8ea5265..b2e8f4d 100644
--- a/resources/chaosknoten/zammad/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/zammad/docker_compose/compose.yaml.j2
@@ -11,7 +11,7 @@ see https://github.com/zammad/zammad-docker-compose/blob/master/.env
{%- set POSTGRES_DB = "zammad_production" | quote -%}
{%- set POSTGRES_HOST = "zammad-postgresql" | quote -%}
{%- set POSTGRES_USER = "zammad" | quote -%}
-{%- set POSTGRES_PASS = lookup("community.sops.sops", "resources/chaosknoten/zammad/secrets.yaml", extract="['DB_PASSWORD']") | quote -%}
+{%- set POSTGRES_PASS = secret__zammad_db_password | quote -%}
{%- set POSTGRES_PORT = "5432" | quote -%}
{%- set POSTGRES_VERSION = "15-alpine" | quote -%}
{%- set REDIS_URL = "redis://zammad-redis:6379" | quote -%}
diff --git a/resources/chaosknoten/zammad/secrets.yaml b/resources/chaosknoten/zammad/secrets.yaml
deleted file mode 100644
index 79b9dc7..0000000
--- a/resources/chaosknoten/zammad/secrets.yaml
+++ /dev/null
@@ -1,236 +0,0 @@
-DB_PASSWORD: ENC[AES256_GCM,data:ytb/AQ8UP47KTdUHI5RVZejZBW1vVI7v,iv:AIYEngDj4BHgXnz+pF45Z40EwJSsibVdCeF2IdVvmZE=,tag:dlBva94ytOeuzW71flhTaA==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age: []
- lastmodified: "2025-05-03T21:25:46Z"
- mac: ENC[AES256_GCM,data:SO6TcvQJNQ3cAAy3yr2S4/PkQm33jLie/MEiLVhWRajfVD0BTyEMG5RJT6eMN/2AW8HxMBs9Dgz2aOWosL3tXWsxp5PY9ZaCg1rlz7UPPp1lsoQLB03LYAl6Ez674WqTmUrb+SjNvbxi66diYBXZj0b1zawMD0J0EMifKqOzJiE=,iv:WTr2qtfazMonEG4hxcE1KNCdq/GtQinMVHXwT5A7yxQ=,tag:c1wBDOXeHwmHF+J5GXIlmA==,type:str]
- pgp:
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxK/JaB2/SdtAQ//SahMO2M35vCWkHxIHLDO0hiap+RBvab+H35B+6rHsBBA
- q3hyXieM1uW1OFKNegRPifazytyUVYi7DP+t0vUqXo/CY8BqmjM19ChOvaAPlif2
- DApPJvV3sYLbUdkYBx0sdpTiWHXmRP0JXtcvQxRMgOuRt+EhWoEnSsf1joMVhR4x
- aGRmOiZhw4ZMI0GhxlVmonb/B0Bo6/3GIScVY9AzJIcmDqDd8DP7SEsYUxFzBfST
- KAW2cJBn6rT1OtB97odr5Ir2TkS4H36euSNew/8caHGlKgcnewgF+zpIvjeWUimk
- cUybZ2UssmBtfWHsypAMg7pKFO/OmV57OWqi8zKYNeLwXeFQvHB1265oJN4szyFJ
- raCAB02Y1r4E5S3wSeqhjE7lvj37/JTjr5VXmz0tASPpgdcLKyik/qTSMQVLs2gY
- nUjVnPbpakQ/9cFCElWEhFDwALZjsAef/+mqmA8h9Z84X9gi+EAwee/9uT4Mu/0H
- 1xKdlAjo0ubkhTbxDf/Zp4RGEQ3ERffj5mtL/DxuBp2jvQ/feljJtO3Lo93Skbti
- 7s+kOblHH0bBS+/YNP8yQUFZ0V0Jpvn52RMOKiMlrnlbmI2u9x478uF7cT6iQ8xf
- HlIIGZHJ+dGU10sxmflp3TiSRAOyy5YJOFiBYl08QHREqPoEfn20hWIaf8avJHLU
- aAEJAhA3M6o9TmOuAV9+n8lrZr+WcRQDovlZmyGb8/mjqupcW7QTsmdjIGFi8ttT
- VgwJVseKZsTC0dyYNRroBUMyxEhtvsMkoAf6i5t9hr0XcaWQkacd4oYpkFIS+cDk
- GGZyXPivuky7
- =Tw63
- -----END PGP MESSAGE-----
- fp: EF643F59E008414882232C78FFA8331EEB7D6B70
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA6EyPtWBEI+2AQ//QEj1kGg89Sim6kcAyZR6qi7yU9NIsQUUgNxTD4Dn+AS7
- w5rKd3ympVFVO3oQTJNLmxssJGyC1mgB9dqBulAPjKepnyHa/EolpGq69mPlO8pH
- CFxSSz/rxj5h5vojyWE8VhDQtMeKKGMYwwqREkHkOMIvgoXPvcwwiLVDkRMkf7ss
- xewqL5dlBkmHCHYE3gIE6BrGNoQEZ6vO19P+13KDgHxZN7RfXrQDLYEb8Rse/X24
- lsQxlaJr1fNsHzEPHkfZzWx0IFLJIPCwLJa7iY96Ku2qZOo+WkGhUiDHo/m9Ru04
- iwEVzucWHCYt3kKKq3kEyR57jOwzONUAuWl4otO0U3a3+dbHAkEqzU7WcnS2UOy2
- ajYmAq/j6kn74zCw+FV9tT1S+6WDHW95jXIPr3zKqRSL8V4UK0jc87Nb06w3yRCz
- f8C2lrzH7iQFajDDuJ/vUI5g2NR10FafOdI83XlWkpd8i33nF7eoMZTagAFLw0C8
- OPr32i0Ppdz/fAedkYqqRys1tryQGiq3PeumxQTQQj9OKlkYlPIWLsQkSgRNQrc7
- EuIkm0YT4zpGzcoiQT586GDVsOiEb5yMmOjLqB8BHrSEUQwHL1cZvbGUooFqWX7K
- iljdQ9RneaZH7REdJcN9+y15vd17pz8y1e8rd3mh2PGGkoVHyspklYvykzCDoNrS
- XgHjMWrj/QCDI+GB02fql1ZFHodIbFPseWNlf3XVW8/lu2m3FDNYEsJCsBeK5OLW
- Oti/DyVz2cNdescNEfH0W8OJ2f3C+R07l9FU1x8hjifjd+xURu9z+xrGdHwCYVQ=
- =v+tQ
- -----END PGP MESSAGE-----
- fp: F155144FC925A1BEA1F8A2C59A2A4CD59BFDC5EC
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAz5uSgHG2iMJAQ//SwMT8P0+0S2zrf3/ActFB3m3BRUn93t2MdnAYQZRjil4
- nhcw7JpMjxD7Qe3klNHdeBK8DxXlr9ou9KvdnVWr4vdnzTdAiSiM9n5AHOCoRnT0
- rz4A4tTide2kGjmU4nWICAivr1YQqt9c/2D3BL4NAHTy0d4DK88jUe9wcoo8MnPW
- nKk2LUr6DCR3+/3d9OJrWNlWrCmmSRfgpbmsGOV+TlKO7EaDTjc3Iz+T9zOaFXVj
- /8VLyksQ6OtYnpOsniOsAb0GxiAGoeXayDvIijqesQ6AUf5HDGMcWCQcqMzITYWe
- RNKceYd1MU5iSmqbCQ23WVCHMvgwqQJ1hRj9Rj3E4j5QVFzwniwmEK5XIOhvkL8Z
- McrJ47zYi+QRx9xyhqczv0W2oX4aLZFW3dJtbpNzUMUmgDYZ+d16Iu3AxsMuOx4D
- HovgP8+fy41+VgQvlGJE1pez/xo6muP6TMR8zD/s/eFnZop18bBK2OYW8yd/kp/B
- AY9mpq6dDs4IuUBlo5c0YPIfWMWhh4GlaEsbggB/AUsrbJfYMX1MlLiHALAN0+xo
- swRp0pPm+7mZmv7LnQCzNUM4rjGhJfzljjFmi+RwSS2h6bXbNqiedRbJbfrYWsCh
- P9Ww4PhI9+kKb2PcNa7Ibzd5Ac3RpN1tMVsVzHOa0WhDCR+TkI9wnsGtHPi3CJbS
- XgENsQcISscNzddDkTkI5fGogQohsQAQY4UfZDA5QuyFaNLihaWCr9OpUqFMXu+A
- tSkVmHBVdYT8jIxO5YHYRieSxE0SEmYJf6+Ckxf2TWMJxWxsvwHgekI+kPR1Byc=
- =VkXh
- -----END PGP MESSAGE-----
- fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAw5vwmoEJHQ1AQ//Uxtqgh64BFkNnCxUvaU0dvhrwuhAfrI2QAgX7Gghky7M
- QwY5/HGBs34wCHlIJqV6E8AdXN0VyzhBiKiryaqTSECDXZbFsb+q0VhxWTs4T/G5
- oCvlvOC6rM7XT6puTsIiqjb4YO/8aVbkQCcE3QlwWxQP9DAk6I/Xxc+hTKStiYeC
- uqON51LEtE1/pqfmf/K4j5kPLBuRYf5IUaBp5WVs9MMbf/vyN235odT8Z29Nz5kq
- DidBkSq7A9Y64rncvvZ4+U3L0HTFcfyiTNOYPL1W45OgPFN4hRU047u/JjP1/vU+
- dLwWNwyYqq7KmEsRu8vi1p636KDios6MDo4n0Ma74APpM/3c8GEVeuz+rY6RoHbK
- FzZ9Eswe5otqmfhfLqBGNYW9+RNu3nUD6U45ES5YqNOH9yk4OqrObVMrUh97IpF8
- 876cL+RDqI+KhnW1sgpJ5x+v7XrS12/LnjArBUJtHEsTxDWoAFHuVKJdr895M8+U
- 1rMKOzhREbklNNgF33T4ysk6IE7PhGAJn8Wta2B7GfpBGBnzGdi6fvbuf+RtlZi4
- 86LkFNI7iOvVV4uiG02yqxlLsCYt6ww6MZuGLREsNeHLuQkrVfF9aVw/+++3PJan
- tIYl/WSLQ2sAjj6uxoXkBciidqFhtlD+4hvRky3enrYW09EeBOZY+4sE16ALCnHS
- XgEz/69zcjJK5d3yEdcYeoHRMFVH6haEc48kg3WKlOKQ2HrPS9rKRGSwG8CC4a75
- iw1OBZGFeaacydhq5XzU7QFlRXx7n8oi9zBHKPb0ND8zm13LQF4oTHogkZInmm0=
- =Ks/U
- -----END PGP MESSAGE-----
- fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4HMJd/cQYrVAQ/+MJYZ6RlUXXfn3JFBUMOFMOCR3QYKYyYxFi++34qdw6FP
- 56KibbYsAs2yLksHy3XdgFgw9ki3AOFK7zb2Urs36/S/lofK592u+bKK+EYqVwIK
- YdDynzaxA46WlRx8zMufEjyUBimAppOwePeaNPeI5+ElsYT+IBYB59xNEDHx0Gql
- SzQVj326qkp3J3vYnoV8Srt7MvU+21ysT7eXSFrYP6d7imG4Mc9CuO9Rf4ZzovY3
- ZcIHGGg5B5/34eeVGfAFw+LfSTAcicidXDjSs9baG9jmoZYiJjF/qw4+mYRJ7Cox
- CFQmeitar/tAAS8Q/wU9//a4dSupreAIRkA6V6/OsoWli2wY+1fL3TnHeTjskeh+
- BYCTuWqjAXqk/VEHkzgxqEbmJr9wHrUl5BWnaF+Ic1i3Udmm9UdFx6jgja3IbJpy
- TlofZx7EhEd2VR29AF4HQV7vjeno+wp8mKJMtaG1gCpxAlaBvpJX8lsH/oDpuYMK
- HhFNiI/ytFd5rGsthIImzUqe5eqAnl2+JNS5vxY26JU06uN1kPcPifeV9DqJ86OC
- EfwFs3mHAIdiyn2LfA9ESCiqMEBv7NsyIFEve02y+hJZ+G/6x0Ob//AfrhgTOmSt
- 2QRA0WMhavJpn3gcnO3OHoHqYzckI315ZLglgPYqP+8Uc8fx6RpA6vXaj7l9aaLS
- XgGrtCK2C5MJQX8pMYhOhNWCDcXspLlAJMNFLnBh7ngujttyLCbufx3h37evh8DY
- 4PZ70A4TjPbyiHvQWYhVGmYTdS3TmoE5eY0vlmIHABYvKflkdYp9JPLeqqPLxQE=
- =Aw8A
- -----END PGP MESSAGE-----
- fp: 91213ABAA73B0B73D3C02B5B4E5F372D17BBE67C
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMAxjNhCKPP69fAQ/8DmSZ5hZ04QC8G4G2P2xsTg+hb6Cu+v2leOwhRNhYQtPa
- 9fa8e5Hd7lhLfdDSfABmWZTW34lyzj2MEi4ZFMaNU7zk/iBTfFFWZkOuaSTLHD0J
- D28PROIEOVZIjUSqQ1iGT/jRP2fCEsSWexkGJyOrXKUsVi5kSdK8XygG/Hx9uiS5
- JoyjKMgPRNCqjvZdF12Qr+0QrM57CPE8fTy9MauN6M7CTiktQw9bdVc5hjNf4AZt
- 8OCwNJLrAiB85iPVrUYO3nxmRETH092N1aw2HPv7/cOCst9jyUAQq3AEFpiaK+PD
- 4uM+A+bkX3fOaCpNe1ePAnG/hV/456ZkNW3cR1tkRXXcXROFg4hOdZ2b3Rn4X35Z
- xAHahfyOor15vAbmeAUo0ebdaAICmSoYT+JuLEdaE9hRBOfQkehRMvp2qHhYSe7X
- 8j/cQP6M9lSPKYy1wATj3ALmLMvab3CCv9Amu3F4JtJLH3bgyWtMhiPWwxgnFRTm
- OQgf6mXzRgJnnBJwtwdauSIxD758NyvqJgRq87dsrnUi8rp3fRq34jMVAWnrKVBz
- kL4DMfr06mCMFLEG8B4Im4jfy0W3oVCrRrFgfB3HoiTbrnKOdYJ5e+XvlFxgXQ52
- h0WaRnPDQK1kx75nJlF72vr0ZgTWogm0OQUadxU+LiaQkQrcBkTmpjyz16l46O/S
- XgGXzsbwjXq3hMptCN2tD65Ryzra1BGLBPyF39UOj6xNaUcfB0Aht/huvTaWUE1x
- up3gAnVub2M7PpamJMqAe4vucIuS11+VflWV/zlUFkaqhhlghTEeR7mEt3/1cCU=
- =6lrH
- -----END PGP MESSAGE-----
- fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA1Hthzn+T1OoAQ/+PbfW/BhAzQ88YgicYVYeqw784T1C2EPbUeBRLJWbKyCL
- LXm/coGFBpzebUk26spFK151jWOgUfyFeMqYTAKPntV2w+L/sBsuN+hJ12egIKGi
- 5vdwosq+dgo4jPg86kohepmfh4obv3QQ1P9ESmu3UswTCsn7WnRKLscVcPAFd2Wl
- m0EaonTQbpW6zPLUJXd+/UnTsj1PrYijazDjUEcfoj5UwQ7vXfzoeNqvkpMzQxFT
- mCm4hL4iV0E5av/8eP3jYFxz7S13MPvyN9M5I0lCDAYENrQDvDbaKWCYGNRsG07E
- TULw0TXwvP5KtEORR7OAPGlon+1JQ7AM4RpTvsql+dEYq8t6pFrMw12TAKsCR3e/
- vmx12aX6eiBxZfcV/l9ykl+ypNE/YcKMjJxrDo/jeypXrHhEieuT+Otxe5OMh6+o
- D1tydz4GKNJVsL97hlAKizs+h7Kg1KLucXVpWWUyowldzHOWA8ffh7uoM5pDk4wO
- cYY4ROhy92n9njAzuAJfotTT2Jo/3J9vizlwFEr7F/sHEACIMgU8yJ+yqBiZK+G+
- Dx735M17sWTbPaV7s+fKwGD213c9lNCqLCqMd0udB2cpItKH6leIQ3wkMOCs384a
- qs5/zxVorCvMul2iB74mEw3KcbwEuQDS9sJ3G6zXTV05hgx19/qM4IJX0WxkhjPS
- XgHiuGDuve1w8W3sfT51/I4YsGonYwQe4lfRgQie7efzySidP85lwcfYcjhhaeqy
- /Ly0kISbmO/AkJ/94TRIw39TePjP34tcYJ7B51ZyIyyJqE9LD7U5Cg/zK5KVqSw=
- =Pqms
- -----END PGP MESSAGE-----
- fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA46L6MuPqfJqARAAmHTz9QCo5nl2Mv5vK+yDYrbVgfgWXqD8s0sinylq4f4K
- r4U1b8cxGfmsbm+Y3MgvOLja4mHrzAaHdGo4rZWrnGKuhgQ0DNzi3ScDZ3mkTSyS
- Nn62K65zjG/JaqS9M2tXyjuSq648jy3o/PnZnMY24H4hpw73EvxLudYyz1DaXQoJ
- lhi/k4Nv+cGyVxCXzBklMJ0KW+VPIKQqf6TxqBRrQzPG1BNIWul9S0YJ5hZKvxqj
- eEHPetDiQNjAJ9tPsVqXMe+TH3otz0shks5j9PzRGklwcHQjIwZrSwd6Ajs4Y24N
- DTqAWH6ZosGERCe7Qp9YInTQ67J3VubYqtzpqDPKsu59+c5CYrhZooPHFOSt4WmD
- bfGVdyogsXAfRVq8eAa3ShRVTYN21eUH+qQfwmo8Vw6GKSeeXiBclP20gJvmasKS
- ifCLzEV9rhnE4YB2z7wUwOfJL3CFcnd96UqpGvQH6cAJmrKPN9U9pEWRVueMYhnp
- ZE2NGu3spAFdEcCtd2Yh+nrAMklLMClvqtyp/HA6jg5pVDNcckBUXs2a/9uc0MNJ
- 3RfrWaTuBRa9iEFJ6LHrjdWkRCMg6b2VrjVdrC6OwaV4vUQhc+VFNJGvkZ684K8l
- olNX1efLZuVLVCEt9s8CQWktZDkm8hXEc+JLgZa+y7/o+Q2L+ILz2uuFp8nET9LS
- XgFJ6Ktg3HSq8d8OYDmmKViYvqc8sazpt9RZybbQWxofCPP9Jum2AtxXsV8EvpIJ
- uGMaJTCrwcIzlGXi+kic5EJJ9mR0woJNTMFLJgmm7CnfCQP9OsPb8IYNzvWK9zg=
- =jmjo
- -----END PGP MESSAGE-----
- fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA4EEKdYEzV0pAQ/8D9QO1hysKECDBPWs+vuWeaYp6nJL3WyoehsD+5NcUgu5
- n7k6gWdb6qdnX22pG2Y1sXVUbLHpBwGPFmV8yYEz/Wvilu6XbagWOaidIJg4n//t
- nIEUXun7592rod636coaLdHF2xrFsh3e1RaTmFI4loOhDKZiiQtnGkFKcaukBJrM
- cZwmuJNCT34RAodzWQI1zYbMKz0RSgALVBTcr1uVcdNfU/QCaqt7zYw75NnaTV/i
- n5EsKAFcva5H//9lYHSzh38zOpz7eika4q9pBR6AwQ+4qmQEJE2x6cqqKVBAxpJO
- aKBvWxxD6xZ5euoKYVdNnESaSrDXbBwJjcaWELhf9zGjJ9lh02rrdNyeRYkoBIGm
- Fgc35S7TG0jK0KnNO/Cx0lOSwKZVdS/wAn4G7UFBAi9wvN5dgW/4+5YJ3FvIP+JQ
- +WtlhbVuRnytjBoMPXdmhtlMifPqcCCe9tfWzeDshRFkYZYj7fCYahb1RMayckSE
- mzL09qD/1NWpvCxahd8klOom3i8UZUsF7/f+MvL/qDDrOQNYUkZZlyXMxK6PtHxD
- 8EllsS7LSKEjyOVKUZARaAVa+4xNRPoekgPGb87c33KcaDTHpAdnR4+OAsdrZqdH
- m7uDUmFwBl9oUuOSDH5/SzYDwCmzji4fF+RB3y2rN++iMHaoW0cdfrMFJLNh0p/S
- XgHytHnTUNQHpcO9DvDOJ/k6CMKEy8pqHsJtA6w4qjDBvxp2+MZvLtaiu0+cdIdn
- Pv4/vMcPQ487w1Bai/RSPpFT/mvul2cx+rvGAvSBOJdJ36IqS77XS7q98oqsLXg=
- =iE5q
- -----END PGP MESSAGE-----
- fp: 9DFA033E3DAEBAD7FDD71B056C7AAA54BE05F7BA
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DQrf1tCqiJxoSAQdAplgn1U9MWtBhmrJn4nWktxeHY59U0ksE1XliNX8mr0Mw
- 3xD0QuwfaohrhdgX3La+4/OY582zxkSwEP8Jw/JoBOSuEx+HBUreKKPuxO9uHzig
- 0l4BPz6xZxRAI202Qajo1H9z32HbS95b05bBUapW50sUAAmNUhXW79guW7PjPeE4
- 1baTqk/BaJEreZshjwlJ92GXqrdbWmsYPRKKMSa1NoZu/uVQYvGXPvtmtE387OAs
- =gwSv
- -----END PGP MESSAGE-----
- fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hF4DzAGzViGx4qcSAQdApLDqh0CvSd674B/iVxpxBih7clT+mIDyINRGECvxBBgw
- Afw8LvDzNDt1SX/xWNqZTYiJOQMq4V5HfSkSMt9mPPbSP9sT0OAHNN2dW/wZh2ZQ
- 0lgBl47uynaVtrGVFU6ztl1YspN5OirXNIV/QqQIui/iaeeEdY8M/O7Blw2riktx
- swLDw0o3UQTa76cCcBY0bLv0Vv8zdjKTSP5nBhMDS0pNxkKCuTqXCYkr
- =VCUK
- -----END PGP MESSAGE-----
- fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- - created_at: "2025-05-03T21:25:04Z"
- enc: |-
- -----BEGIN PGP MESSAGE-----
-
- hQIMA2pVdGTIrZI+ARAAiYsQ5CFabAY1WYopL7Q14NoAdQmo41mCMK7VwObHTwRP
- 7fIc2ug1UvunZsHSnC+IX6L9FXR8SUqFg4P9sWRPnnId/lI23zkBDCYuwCy2F/qa
- e/GEh4Eha3OSd/ljZADddAIn+mjb6nc2YU/DvLg60h3A317RZassGavSFxYdPmKi
- mfGVdnM8d4fnBIVaaUBjMVgiiTZnp1JGsaSewGkAie5qbhsqM4DT/se2RoNHmRjk
- hZw8UNi2gPm27er9q3iBvEe/TKr6diA/ELWzNBXZS9uhOqKAlUKsHMNx9t/aLGXV
- zSuyM0KuIMX61isHPXvKv1majyjGJ52UIfoUJ29FL9XmRbW2AUjmJnJ0AF8tpUrC
- 6mqrzKTouOdmAdLmlPnZKlzt32AzkAlg97u1tllWUJstYndl2IwJ69BMaDhQVVgp
- 6LkxUw5gmgCyj6hjDNjX98IhacGMYBhjjJ39Z+3AGlhuAegN91MGaE3TIrPjmx/H
- KAXEC5Wv/yp5ezz2FtY41e5selMKcMgn8OuOvdyQZ0wWfqebLd3LMRis3hV04a8u
- FzfkGo1jG5FWJQj0Nlc9mdgh6mLO43LKdq3Y6P/2pJ/Xdh3/tm1vzY3VOxtuelBO
- NcB3lYB8ukouKH8yx3LvnB0oD3EsQC0/Uq8HUx4B75Mi7xnG2uo0sR05ALTLMePU
- aAEJAhCqABkvXA7TWGsj9ohR+1d+6A47/6drox/KI/axPWoSFb/9SfPoSQR8U1Rp
- NNrUA9GRUEFAsAzU7PaUYL5ZjF7uHN0MbZL7XI1X7qWz8I6qVYtuJAjBTdaKen3N
- pRg6v53Ytj/L
- =yFV4
- -----END PGP MESSAGE-----
- fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- unencrypted_suffix: _unencrypted
- version: 3.9.4
diff --git a/resources/z9/dooris/docker_compose/compose.yaml.j2 b/resources/z9/dooris/docker_compose/compose.yaml.j2
new file mode 100644
index 0000000..38db85a
--- /dev/null
+++ b/resources/z9/dooris/docker_compose/compose.yaml.j2
@@ -0,0 +1,22 @@
+---
+
+services:
+ dooris:
+ image: git.hamburg.ccc.de/ccchh/hmdooris/hmdooris:latest
+ environment:
+ HMDOORIS_ALLOWED_IPS: "2a07:c481:1:c8::/64 2a01:170:118b::/56 172.31.200.0/23 172.31.202.0/27"
+ HMDOORIS_CCUJACK_CERTIFICATE_PATH: false
+ HMDOORIS_CCUJACK_PASSWORD: "{{ secret__dooris_ccujack_password }}"
+ HMDOORIS_CCUJACK_URL: https://hmdooris-ccu.ccchh.net:2122
+ HMDOORIS_CCUJACK_USERNAME: dooris
+ HMDOORIS_CLIENT_ID: dooris
+ HMDOORIS_CLIENT_SECRET: "{{ secret__dooris_client_secret }}"
+ HMDOORIS_DISCOVERY_URL: https://id.hamburg.ccc.de/realms/ccchh/.well-known/openid-configuration
+ HMDOORIS_LISTEN: '0.0.0.0:3000'
+ HMDOORIS_REQUIRES_GROUP: /intern
+ HMDOORIS_URL: https://dooris.ccchh.net
+ PYTHONWARNINGS: "ignore:Unverified HTTPS request"
+ #DEBUG: true
+ ports:
+ - "127.0.0.1:3000:3000"
+ restart: unless-stopped
diff --git a/resources/z9/dooris/nginx/dooris.ccchh.net.conf b/resources/z9/dooris/nginx/dooris.ccchh.net.conf
new file mode 100644
index 0000000..c1ca082
--- /dev/null
+++ b/resources/z9/dooris/nginx/dooris.ccchh.net.conf
@@ -0,0 +1,37 @@
+# partly generated 2022-01-08, Mozilla Guideline v5.6, nginx 1.17.7, OpenSSL 1.1.1k, intermediate configuration
+# https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&guideline=5.6
+server {
+ listen [::]:443 ssl http2;
+ listen 443 ssl http2;
+
+ server_name dooris.ccchh.net;
+
+ ssl_certificate /etc/letsencrypt/live/dooris.ccchh.net/fullchain.pem;
+ ssl_certificate_key /etc/letsencrypt/live/dooris.ccchh.net/privkey.pem;
+ # verify chain of trust of OCSP response using Root CA and Intermediate certs
+ ssl_trusted_certificate /etc/letsencrypt/live/dooris.ccchh.net/chain.pem;
+
+ # HSTS (ngx_http_headers_module is required) (63072000 seconds)
+ add_header Strict-Transport-Security "max-age=63072000" always;
+
+ proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Port 443;
+ # This is https in any case.
+ proxy_set_header X-Forwarded-Proto https;
+ # Hide the X-Forwarded header.
+ proxy_hide_header X-Forwarded;
+ # Assume we are the only Reverse Proxy (well using Proxy Protocol, but that
+ # is transparent).
+ # Also provide "_hidden" for by, since it's not relevant.
+ proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden";
+ proxy_http_version 1.1;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+
+ location / {
+ proxy_pass http://127.0.0.1:3000/;
+ }
+}
diff --git a/resources/z9/yate/docker_compose/README.md b/resources/z9/yate/docker_compose/README.md
new file mode 100644
index 0000000..1977f4f
--- /dev/null
+++ b/resources/z9/yate/docker_compose/README.md
@@ -0,0 +1,12 @@
+# Yate Configuration
+
+Yate has a [beginners guide](https://docs.yate.ro/wiki/Beginners_in_Yate). Otherwise, you need to refer to the [sample config files](https://github.com/eventphone/yate/tree/master/conf.d).
+
+For our limited setup, we only need three files:
+* accfile.conf for defining SIP registrars that we want to register with (EPVPN, Fonial, and the Fux door intercom system)
+* regexroute.conf for the call routing rules
+* regfile.conf for the phones that connect to yate.ccchh.net
+
+## Docker Compose Setup
+
+yate runs as a container wiht host networking. The image is build through https://git.hamburg.ccc.de/CCCHH/yate-image, it is using the Eventphone fork of yate.
\ No newline at end of file
diff --git a/resources/z9/yate/docker_compose/accfile.conf.j2 b/resources/z9/yate/docker_compose/accfile.conf.j2
new file mode 100644
index 0000000..4ce65e3
--- /dev/null
+++ b/resources/z9/yate/docker_compose/accfile.conf.j2
@@ -0,0 +1,35 @@
+; Yate will register to these SIP services
+; see https://github.com/eventphone/yate/blob/master/conf.d/accfile.conf.sample
+
+[epvpn_ccchh]
+enabled=yes
+protocol=sip
+description=Eventphone EPVPN CCCHH
+username=1008
+authname=1008
+password={{ secret__yate__sip_trunk_epvpn }}
+interval=120
+registrar=hg.eventphone.de
+keepalive=1
+
+[fonial_ccchh]
+enabled=yes
+protocol=sip
+description=Fonial CCCHH
+username=fo370381tr317349_00
+authname=fo370381tr317349_00
+password={{ secret__yate__sip_trunk_fonial }}
+interval=120
+registrar=sip.plusnet.de
+keepalive=1
+
+[fux_intercom]
+enabled=yes
+protocol=sip
+description=Fux Intercom CCCHH doorbell
+username=1337
+authname=1337
+password={{ secret__yate__sip_trunk_fux }}
+interval=120
+registrar=172.16.210.2
+keepalive=1
diff --git a/resources/z9/yate/docker_compose/compose.yaml.j2 b/resources/z9/yate/docker_compose/compose.yaml.j2
new file mode 100644
index 0000000..e3d6614
--- /dev/null
+++ b/resources/z9/yate/docker_compose/compose.yaml.j2
@@ -0,0 +1,20 @@
+---
+
+services:
+ yate:
+ image: git.hamburg.ccc.de/ccchh/yate-image/yate-image:latest
+ # command:
+ # - sh
+ # - "-c"
+ # - "while :; do sleep 10; done"
+ environment:
+ DEBUG: true
+ network_mode: host
+ # ports:
+ # - "127.0.0.1:3000:3000"
+ restart: unless-stopped
+ volumes:
+ - ./configs/accfile.conf:/opt/yate/etc/yate/accfile.conf
+ - ./configs/regexroute.conf:/opt/yate/etc/yate/regexroute.conf
+ - ./configs/regfile.conf:/opt/yate/etc/yate/regfile.conf
+ - ./lib-yate:/var/lib/yate
\ No newline at end of file
diff --git a/resources/z9/yate/docker_compose/regexroute.conf.j2 b/resources/z9/yate/docker_compose/regexroute.conf.j2
new file mode 100644
index 0000000..aeecf6b
--- /dev/null
+++ b/resources/z9/yate/docker_compose/regexroute.conf.j2
@@ -0,0 +1,100 @@
+; Call routing
+; see https://github.com/eventphone/yate/blob/master/conf.d/regexroute.conf.sample
+
+[priorities]
+; route: int: Priority of the routing message handler
+route=90
+
+[contexts]
+ ; INBOUND CALLS:
+${called}^1337$=inbound_fux
+${called}^1008$=inbound_epvpn
+${called}^04023830150$=inbound_fonial
+${called}^fo370381tr317349_00$=inbound_fonial
+;${called}.*=inbound
+
+;^[0-9]\{4\}$=inbound ; Calls from 4 digit numbers: EPVPN
+;^+\?[0-9]\{5,\}$=inbound ; Calls from longer numbers, optionally starting with +
+;^*\{1,2\}[0-9]\{1,3\}$=inbound ; Internal fritzbox calls
+
+ ; OUTBOUND CALLS:
+^[0-9]\{3\}=outbound
+^[a-z0-9]\{4,\}=outbound ; calls from internal users
+
+^.*$=fallback ; Whatever calls managed to not be handled yet
+
+[default] ; unused
+^.*$=echo [default]"\0"
+
+[test] ; unused
+^.*$=echo [test] "\0"
+^99991001$=tone/dial
+^99991002$=tone/busy
+^99991003$=tone/ring
+^99991004$=tone/specdial
+^99991005$=tone/congestion
+^99991006$=tone/outoforder
+^99991007$=tone/milliwatt
+^99991008$=tone/info
+
+; DEBUG HELPER
+; ^.*$=echo match \0 adr ${address} src ${callsource} form ${formats} id ${id} peer ${peerid} type ${type} user ${username} caller ${caller} called ${called}
+
+^[0-9]\{1,2\}$=return;called=\0
+
+
+[outbound] ; Calls from internal users
+^.*$=echo [outbound] "\0" ${caller}->${called} ; log for debug
+^[0-9]\{3\}$=jump internal
+^[0-9]\{1,2\}$=jump z9 ; To internal -> z9
+^.*$=echo [outbound] "\0" ${caller}->${called} ; log for debug
+^.*$=line/\0;line=epvpn_ccchh ; Route everything (.*) to the specified accfile line
+
+[inbound_epvpn]
+^.*$=echo [inbound_epvpn] ${caller}->${called}
+^.*$=return;callername=EPVPN ${caller};called=0 ; TODO which extension do we want to route to?
+
+[inbound_fux]
+^.*$=echo [inbound_fux] ${caller}->${called}
+^.*$=return;callername=Door ${caller};called=0 ; TODO which extension do we want to route to?
+
+[inbound_fonial]
+^.*$=echo [inbound_fonial] ${caller}->${called}
+^.*$=return;callername=Fonial ${caller};called=0 ; TODO which extension do we want to route to?
+
+[inbound] ; Calls from EPVPN or outside world
+^.*$=echo [inbound] "\0" ${caller}->${called} user:${user} callername:${callername} callsource:${callsource} ; log
+^.*$=return;callername=EXTERN ${caller};called=0 ; set call recipient to 0 (shared alias between
+ ; all clients in regfile.conf
+
+[internal]
+^.*$=echo [internal] "\0" ${caller}->${called}
+^110$=line/110;line=fonial_ccchh
+^112$=line/112;line=fonial_ccchh
+^115$=line/040115;line=fonial_ccchh
+^911$=line/112;line=fonial_ccchh
+^999$=line/112;line=fonial_ccchh
+; ^119$=line/01753288861;line=fonial_ccchh ; testing only stb cell number
+^.*$=return;called=\0
+
+[z9] ; Internal calls
+^.*$=echo [z9] "\0" ${caller}->${called} ; log
+
+ ; test service numbers
+^91$=sip/sip:ha@10.31.208.10:5060; called=ha;format=opus ; Homeassistant
+^98$=external/playrec/echo.sh ; Echotest
+^99$=external/play/tts.sh;mode=text;text=Hallo Hallo Hallo ; TTS test
+
+^.*$=return;called=\0 ; Any remaining internal calls to all
+ ; Context: Calls to regfile.conf aliases are always
+ ; handled directly and should never get here
+
+
+[special]
+^.*$=echo [special] "\0"
+^.*$=tone/info
+
+[fallback]
+^.*$=echo [fallback] \0 adr ${address} src ${callsource} form ${formats} id ${id} peer ${peerid} type ${type} user ${username} caller ${caller} called ${called}
+^*\{1,2\}[0-9]\{1,3\}$=jump outbound
+^.*$=tone/busy
diff --git a/resources/z9/yate/docker_compose/regfile.conf.j2 b/resources/z9/yate/docker_compose/regfile.conf.j2
new file mode 100644
index 0000000..5501839
--- /dev/null
+++ b/resources/z9/yate/docker_compose/regfile.conf.j2
@@ -0,0 +1,84 @@
+; YATE offers registration to these SIP devices (ie. phones)
+; see https://github.com/eventphone/yate/blob/master/conf.d/regfile.conf.sample
+
+route=100
+file=/var/lib/yate/regfile.swap
+
+[501]
+password={{ secret__yate__sip_extension_legacy }}
+alternatives=0,1008,1337
+callername=Legacy
+# Yealink im großen Raum am Fenster
+
+[610]
+password={{ secret__yate__sip_extension_fritzbox_dect1 }}
+alternatives=0,1008,1337
+callername=DECT-1
+
+[100]
+password=test100
+callername=stb 100
+
+
+;;;;; old stuff, please clean up stb 2025-07-11
+
+[echt]
+password=test
+alternatives=0,9,91,3248,1337
+
+[test]
+password=test
+alternatives=0,9,92,3248,1337
+
+[unittest1]
+password=test
+alternatives=93,3248,1337
+
+[unittest2]
+password=test
+alternatives=94,3248,1337
+
+[door]
+password=test
+alternatives=0,1,11,3248,1337
+callername=Main Door
+
+[kitchen]
+password=test
+alternatives=0,1,12,3248,1337
+callername=Kitchen
+
+[desk]
+password=test
+alternatives=0,1,13,3248,1337
+callername=Desk
+
+[workshop]
+password=test
+alternatives=0,2,21,3248,1337
+callername=Workshop Lobby
+
+[clean]
+password=test
+alternatives=0,2,22,3248,1337
+callername=Clean Workshop
+
+[dirty]
+password=test
+alternatives=0,2,23,3248,1337
+callername=Dirty Workshop
+
+[dect1]
+password=test
+alternatives=0,3,31,3248,1337
+callername=DECT-1
+
+[analog1]
+password=test
+alternatives=0,4,41,3248,1337
+callername=Analog-1
+
+[analog2]
+password=test
+alternatives=0,4,42,3248,1337
+callername=Analog-2
diff --git a/roles/docker_compose/defaults/main.yaml b/roles/docker_compose/defaults/main.yaml
index 76831d6..7c083ba 100644
--- a/roles/docker_compose/defaults/main.yaml
+++ b/roles/docker_compose/defaults/main.yaml
@@ -1 +1,2 @@
docker_compose__configuration_files: [ ]
+docker_compose__restart_cmd: ""
\ No newline at end of file
diff --git a/roles/docker_compose/handlers/main.yaml b/roles/docker_compose/handlers/main.yaml
index 96c5ab3..f974335 100644
--- a/roles/docker_compose/handlers/main.yaml
+++ b/roles/docker_compose/handlers/main.yaml
@@ -4,3 +4,9 @@
chdir: /ansible_docker_compose
become: true
changed_when: true # This is always changed.
+- name: docker compose reload script
+ ansible.builtin.command:
+ cmd: /usr/bin/docker compose {{ docker_compose__restart_cmd }}
+ chdir: /ansible_docker_compose
+ become: true
+ when: docker_compose__restart_cmd != ""
diff --git a/roles/docker_compose/tasks/main.yaml b/roles/docker_compose/tasks/main.yaml
index d11d826..af7f717 100644
--- a/roles/docker_compose/tasks/main.yaml
+++ b/roles/docker_compose/tasks/main.yaml
@@ -60,6 +60,7 @@
become: true
loop: "{{ docker_compose__configuration_files }}"
# notify: docker compose down
+ notify: docker compose reload script
- name: Flush handlers to make "docker compose down" handler run now
ansible.builtin.meta: flush_handlers