diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5f0d7c3..4fc6c40 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,7 @@ updates:
     schedule:
       interval: weekly
     directories:
+      - "/docker/home/ha-linky"
       - "/docker/home/home-assistant"
       - "/docker/home/matter-server"
       - "/docker/home/mosquitto-mqtt"
@@ -43,6 +44,7 @@ updates:
       - "/kubernetes/code/gitea"
       - "/kubernetes/code/harbor"
       - "/kubernetes/infrastructure/authentik"
+      - "/kubernetes/personal/linkwarden"
       - "/kubernetes/personal/photoprism"
       - "/kubernetes/system/csi-driver-nfs"
       - "/kubernetes/system/external-dns"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index b0044d2..fe9f335 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -6,3 +6,9 @@ repos:
         entry: .pre-commit-sops.sh
         language: script
         pass_filenames: true
+      - id: generate-dependabot
+        name: generate dependabot
+        entry: generate-dependabot.sh
+        language: script
+        pass_filenames: false
+
diff --git a/docker/home/ha-linky/docker-compose.yml b/docker/home/ha-linky/docker-compose.yml
new file mode 100644
index 0000000..19cd249
--- /dev/null
+++ b/docker/home/ha-linky/docker-compose.yml
@@ -0,0 +1,9 @@
+services:
+  ha-linky:
+    image: ha-linky
+    env_file: ".env"
+    environment:
+      - WS_URL=ws://homeassistant.lan/api/websocket
+      - TZ=Europe/Paris
+    volumes:
+      - /root/ha-linky:/data
diff --git a/docker/home/home-assistant/docker-compose.yml b/docker/home/home-assistant/docker-compose.yml
index 4bcc5e1..6cf149a 100644
--- a/docker/home/home-assistant/docker-compose.yml
+++ b/docker/home/home-assistant/docker-compose.yml
@@ -16,7 +16,7 @@ services:
     restart: unless-stopped
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.homeassistant.rule=Host(`homeassistant.local`)"
+      - "traefik.http.routers.homeassistant.rule=Host(`homeassistant.lan`)"
 
 volumes:
   ha_config:
diff --git a/docker/home/node-red/docker-compose.yml b/docker/home/node-red/docker-compose.yml
index d1cbd20..2a68e60 100644
--- a/docker/home/node-red/docker-compose.yml
+++ b/docker/home/node-red/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - data:/data
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.node-red.rule=Host(`nodered.local`)"
+      - "traefik.http.routers.node-red.rule=Host(`nodered.lan`)"
 
 volumes:
   data:
diff --git a/docker/home/zigbee2mqtt/docker-compose.yml b/docker/home/zigbee2mqtt/docker-compose.yml
index 77d7eb5..174da8b 100644
--- a/docker/home/zigbee2mqtt/docker-compose.yml
+++ b/docker/home/zigbee2mqtt/docker-compose.yml
@@ -17,7 +17,7 @@ services:
       - /dev/ttyUSB0:/dev/ttyUSB0
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.zigbee2mqtt.rule=Host(`zigbee2mqtt.local`)"
+      - "traefik.http.routers.zigbee2mqtt.rule=Host(`zigbee2mqtt.lan`)"
 
 volumes:
   data:
diff --git a/docker/infrastructure/mail/roundcube/docker-compose.yml b/docker/infrastructure/mail/roundcube/docker-compose.yml
index 78209c3..53d405a 100644
--- a/docker/infrastructure/mail/roundcube/docker-compose.yml
+++ b/docker/infrastructure/mail/roundcube/docker-compose.yml
@@ -14,7 +14,7 @@ services:
       - "80"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.roundcube.rule=Host(`webmail.local`)"
+      - "traefik.http.routers.roundcube.rule=Host(`webmail.lan`)"
       - "traefik.http.routers.roundcube.entrypoints=http"
 
 networks:
diff --git a/docker/infrastructure/network/traefik/docker-compose.yml b/docker/infrastructure/network/traefik/docker-compose.yml
index 983ae15..aa42d89 100644
--- a/docker/infrastructure/network/traefik/docker-compose.yml
+++ b/docker/infrastructure/network/traefik/docker-compose.yml
@@ -16,7 +16,7 @@ services:
         target: /etc/traefik/traefik.yml
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.traefik.rule=Host(`traefik.local`)"
+      - "traefik.http.routers.traefik.rule=Host(`traefik.lan`)"
       - "traefik.http.services.traefik.loadbalancer.server.port=8080"
 
 networks:
diff --git a/docker/personal/gramps/docker-compose.yml b/docker/personal/gramps/docker-compose.yml
index 2b7dadc..67a74bc 100644
--- a/docker/personal/gramps/docker-compose.yml
+++ b/docker/personal/gramps/docker-compose.yml
@@ -26,7 +26,7 @@ services:
       - gramps_tmp:/tmp
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.grampsweb.rule=Host(`gramps.local`)"
+      - "traefik.http.routers.grampsweb.rule=Host(`gramps.lan`)"
 
   grampsweb_celery:
     container_name: grampsweb_celery
diff --git a/docker/personal/media/films-series/jackett/docker-compose.yml b/docker/personal/media/films-series/jackett/docker-compose.yml
index 0ac7969..ff1d063 100644
--- a/docker/personal/media/films-series/jackett/docker-compose.yml
+++ b/docker/personal/media/films-series/jackett/docker-compose.yml
@@ -17,7 +17,7 @@ services:
       - definitions:/app/Definitions
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.jackett.rule=Host(`jackett.local`)"
+      - "traefik.http.routers.jackett.rule=Host(`jackett.lan`)"
 
 volumes:
   config:
diff --git a/docker/personal/media/films-series/jellyseerr/docker-compose.yml b/docker/personal/media/films-series/jellyseerr/docker-compose.yml
index fdb3163..14ba52c 100644
--- a/docker/personal/media/films-series/jellyseerr/docker-compose.yml
+++ b/docker/personal/media/films-series/jellyseerr/docker-compose.yml
@@ -16,7 +16,7 @@ services:
     restart: unless-stopped
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.jellyseerr.rule=Host(`jellyseerr.local`)"
+      - "traefik.http.routers.jellyseerr.rule=Host(`jellyseerr.lan`)"
 
 volumes:
   config:
diff --git a/docker/personal/media/films-series/radarr/docker-compose.yml b/docker/personal/media/films-series/radarr/docker-compose.yml
index 3b15d54..2bb8cf3 100644
--- a/docker/personal/media/films-series/radarr/docker-compose.yml
+++ b/docker/personal/media/films-series/radarr/docker-compose.yml
@@ -18,7 +18,7 @@ services:
       - data_downloads:/mediadl
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.radarr.rule=Host(`radarr.local`)"
+      - "traefik.http.routers.radarr.rule=Host(`radarr.lan`)"
 
 volumes:
   config:
diff --git a/docker/personal/media/films-series/sonarr/docker-compose.yml b/docker/personal/media/films-series/sonarr/docker-compose.yml
index 155766f..08cd01a 100644
--- a/docker/personal/media/films-series/sonarr/docker-compose.yml
+++ b/docker/personal/media/films-series/sonarr/docker-compose.yml
@@ -20,7 +20,7 @@ services:
       - log:/log
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.sonarr.rule=Host(`sonarr.local`)"
+      - "traefik.http.routers.sonarr.rule=Host(`sonarr.lan`)"
 
 volumes:
   cache:
diff --git a/docker/personal/media/films-series/transmission/docker-compose.yml b/docker/personal/media/films-series/transmission/docker-compose.yml
index e77a92d..d731882 100644
--- a/docker/personal/media/films-series/transmission/docker-compose.yml
+++ b/docker/personal/media/films-series/transmission/docker-compose.yml
@@ -11,7 +11,7 @@ services:
       - TZ=Europe/Paris
       - USER=transmission
       - PASS=transmission
-      - HOST_WHITELIST=transmission.local
+      - HOST_WHITELIST=transmission.lan
     volumes:
       - config:/config
       - downloads:/mediadl
@@ -22,7 +22,7 @@ services:
     restart: unless-stopped
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.transmission.rule=Host(`transmission.local`)"
+      - "traefik.http.routers.transmission.rule=Host(`transmission.lan`)"
 
 volumes:
   config:
diff --git a/docker/personal/media/films-series/wizarr/docker-compose.yml b/docker/personal/media/films-series/wizarr/docker-compose.yml
index 83aec8a..c0344aa 100644
--- a/docker/personal/media/films-series/wizarr/docker-compose.yml
+++ b/docker/personal/media/films-series/wizarr/docker-compose.yml
@@ -11,7 +11,7 @@ services:
       - wizarr_data:/data/database
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.wizarr.rule=Host(`wizarr.local`)"
+      - "traefik.http.routers.wizarr.rule=Host(`wizarr.lan`)"
 
 volumes:
   wizarr_data:
diff --git a/docker/personal/media/music/navidrome/docker-compose.yml b/docker/personal/media/music/navidrome/docker-compose.yml
index 9db6766..6dfae13 100644
--- a/docker/personal/media/music/navidrome/docker-compose.yml
+++ b/docker/personal/media/music/navidrome/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       ND_SCANSCHEDULE: 1h
       ND_LOGLEVEL: info
       ND_SESSIONTIMEOUT: 24h
-      ND_BASEURL: "http://navidrome.local"
+      ND_BASEURL: "http://navidrome.lan"
       ND_PORT: 4533
       ND_REVERSEPROXYWHITELIST: "172.20.0.0/16,10.1.2.11/32"
     volumes:
@@ -20,7 +20,7 @@ services:
       - "music:/music:ro"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.navidrome.rule=Host(`navidrome.local`)"
+      - "traefik.http.routers.navidrome.rule=Host(`navidrome.lan`)"
 
 volumes:
   music:
diff --git a/docker/personal/media/youtube/tubearchivist/docker-compose.yml b/docker/personal/media/youtube/tubearchivist/docker-compose.yml
index 8e6b960..1a4bfd6 100644
--- a/docker/personal/media/youtube/tubearchivist/docker-compose.yml
+++ b/docker/personal/media/youtube/tubearchivist/docker-compose.yml
@@ -18,7 +18,7 @@ services:
       - REDIS_CON=redis://archivist-redis:6379
       - HOST_UID=1000
       - HOST_GID=1000
-      - TA_HOST=http://tubearchivist.local
+      - TA_HOST=http://tubearchivist.lan
       - TZ=Europe/Paris
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
diff --git a/docker/personal/paperless/docker-compose.yml b/docker/personal/paperless/docker-compose.yml
index 97678e5..2971fe2 100644
--- a/docker/personal/paperless/docker-compose.yml
+++ b/docker/personal/paperless/docker-compose.yml
@@ -33,7 +33,7 @@ services:
       - consume:/usr/src/paperless/consume
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.paperless-webserver.rule=Host(`paperless.local`)"
+      - "traefik.http.routers.paperless-webserver.rule=Host(`paperless.lan`)"
     env_file: .env
     environment:
       PAPERLESS_REDIS: redis://pplessbroker:6379
diff --git a/docker/personal/radicale/docker-compose.yml b/docker/personal/radicale/docker-compose.yml
index 0630e1a..9c869bf 100644
--- a/docker/personal/radicale/docker-compose.yml
+++ b/docker/personal/radicale/docker-compose.yml
@@ -29,7 +29,7 @@ services:
       - data:/data
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.radicale.rule=Host(`radicale.local`)"
+      - "traefik.http.routers.radicale.rule=Host(`radicale.lan`)"
     networks:
       - default
       - proxy
diff --git a/docker/personal/tandoor/docker-compose.yml b/docker/personal/tandoor/docker-compose.yml
index fed25de..b234d99 100644
--- a/docker/personal/tandoor/docker-compose.yml
+++ b/docker/personal/tandoor/docker-compose.yml
@@ -37,7 +37,7 @@ services:
       - mediafiles:/media:ro
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.nginx_recipes.rule=Host(`tandoor.local`)"
+      - "traefik.http.routers.nginx_recipes.rule=Host(`tandoor.lan`)"
 
 volumes:
   nginx_config:
diff --git a/docker/tools/excalidraw/docker-compose.yml b/docker/tools/excalidraw/docker-compose.yml
index 7debed2..4fb7f1d 100644
--- a/docker/tools/excalidraw/docker-compose.yml
+++ b/docker/tools/excalidraw/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       - "80"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.excalidraw.rule=Host(`excalidraw.local`)"
+      - "traefik.http.routers.excalidraw.rule=Host(`excalidraw.lan`)"
 
 networks:
   proxy:
diff --git a/docker/tools/stirling-pdf/docker-compose.yml b/docker/tools/stirling-pdf/docker-compose.yml
index 90658a8..2d72f66 100644
--- a/docker/tools/stirling-pdf/docker-compose.yml
+++ b/docker/tools/stirling-pdf/docker-compose.yml
@@ -18,7 +18,7 @@ services:
       - LANGS=en_GB,fr_FR
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.stirling-pdf.rule=Host(`stirling-pdf.local`)"
+      - "traefik.http.routers.stirling-pdf.rule=Host(`stirling-pdf.lan`)"
 
 volumes:
   trainingData:
diff --git a/kubernetes/code/harbor/values.yaml b/kubernetes/code/harbor/values.yaml
index 94b6bc3..ad5f48f 100644
--- a/kubernetes/code/harbor/values.yaml
+++ b/kubernetes/code/harbor/values.yaml
@@ -1,42 +1,37 @@
-externalURL: http://harbor.local
+externalURL: http://harbor.lan
 expose:
     type: ingress
     ingress:
         hosts:
-            core: harbor.local
+            core: harbor.lan
 core:
     extraEnvVars:
-        - name: ENC[AES256_GCM,data:eMpF9wMbBxkYceKeTXU4CPc/zDME,iv:zOZrXlAv45gNv2FffG2kqXq2670HwXCKSZjQaegEz+Y=,tag:dTNolgpFxKuXCg5/5/s0gQ==,type:str]
-          value: ENC[AES256_GCM,data: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,iv:X8JmR3oy1G94f/K5vYeARyGB0usmMlZl3VrAiDQurH8=,tag:tSlixKKBI2dB4FSx03erZg==,type:str]
+        - name: ENC[AES256_GCM,data:Y1D+lAT57F4HpiwnKJuhN3cqr/17,iv:ZARBNcGuiD5U7TnlBuQJLaWCMkQIELpj195aeKaBGZU=,tag:exBNWO/o2CXyNMLr2Y6bTw==,type:str]
+          value: ENC[AES256_GCM,data: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,iv:PEenzkk4lUyFBPx6e8Ah9LW7M5N7o93aueSE+pQozuU=,tag:rUeeXqEtHUQ3RYn1Pt4rBA==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2025-03-22T13:26:30Z"
-    mac: ENC[AES256_GCM,data:LIYTSXxmp7xpnrucygefTyHhI0Wi6EbGD0sA1NNLR9x/h+yG/5nlmdr02+dWFiEaeyvpA+6aSeoUWCHOMGMXV0EM5nmcZk14lQBQUWOVeYPbo5KSYzEdCy4ywVIa8HLG5yGJIhGuMPN7EDidkAiHcWNfaVRwRbG0PuczohYlwLg=,iv:fLqIPUlk8XkluxHA/WZd44JiM4FIZEvla33lCcvod2k=,tag:Xtg+QcTYy33WLJDWTECPeA==,type:str]
+    lastmodified: "2025-08-27T10:07:49Z"
+    mac: ENC[AES256_GCM,data:tp6aHDIfLuBDRBYPmNDn1ZWEq0ZT/WH7GYCJNp52tO1tNldi+kK2avluY0QBbC6/5V8LfxpokN3Je6uBveRVzleituxlK7dvsZ4piITTmR0T79PtUqxa4Jh+7PYp0uTofjme1M2L2MU1sOWrCdRdiKWEpDVIJCCCsZ2oDCCoMTs=,iv:O65a/alrwX4cNJH1tYh4kQPaprmulyAitg9jFhOJqnE=,tag:ewAqx7h1e12bMYGrFC9PTQ==,type:str]
     pgp:
-        - created_at: "2025-03-22T13:26:30Z"
+        - created_at: "2025-08-27T10:07:49Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/+IoSA9GM+l1zIjF0mhXxmzMQC5yjcJPXkxBQ1bZTJEvkZ
-            pL7fl/8Jvc/eQ96DKXpC95vE6m0jRSXhv0kz4HgoRV+tZUBl6CYMPcQXmY4/Zh+a
-            olL5xkk0U2fjEqX/cxNDomTZP85TQpZy2k4vxx1A4Nun7lhjLPsYM+49Ql9WP69e
-            f/UZDxyfuZf0ScK0wnCIXJMdB5mgbdMacw7VXrGtbv6vz8tQUk6jqM7S+7VyLeWv
-            G9jDXn2Cs8FFHJcmlifvTqxdRv8AjSPpYyQ7CVpuSMm3xQzsDGH2pKlkFORNcEXH
-            76+z7IaE09xiJA07lOiXVnGrAlkK5Y/eSt7227uQJlewQMYXHIm7LffakQzlrEq0
-            EEmevA1AFtR6Dn1Q9yb7G0QQNFA+Vire7zF/RNkUobqXY2nC9CLgDdyhph+XLfSx
-            aZILDqhrHKSUVe+YrbZvkQK6MNKKZe7icQtp1NjESS4InWQajXAYzNhy5bPz/9vh
-            1JbmF0zF9rviOoK8mKXPw5xR5guvK2jVu+zNPuQClrONW6EvKKXhudcnw2JNtbJl
-            TN1hRXVu6gFJhtpSwt07RCEYNCp15E7foPDKijiG4OZCXZQHSdhLQ3bGo64sbCOq
-            BIB7OYNNSoMBZZxLzdjX/amBQNzpQFbGZx9560ZyLWcTbJWQYSACh0ukjvA76YLU
-            ZgEJAhCinfjS8XV8hdGbk08slYRTcoZT0VFuV4J+1CnilNACwxAF/fjvHR4NtIbs
-            gEhh5W6LjVSol+PxQHyjEPaU6KHV0pryHn5U7AzD0NMbn7o2A5O/DOk12EXQeekk
-            EWSu2T+KJw==
-            =UYvy
+            hQIMA7uy4qQr71wiAQ//VDjjaWIsqY0nUFINvzxnt+dullI/+lHYQTfWvZ7LqH4d
+            TN2p2VZRGRkupYUYxt4iucYl6qViGey4iaQopsYrV19kJ+eEJuI+depXYsKBAccs
+            24rNJuTLHYi7r353u48qUVoQcE6uK0mYB8/4+w5J6uANvwmjXUtDMEHUoiBCh56+
+            F7olPPSPUjXv7BpTNq5EC8YjGRjUjQNf1NOyHHz1eTsyDbPszIs6eT1q98AMo3GZ
+            boh7T6Z2yLI7Bj5guEn5OfwyFtB9DzcpaHajDgF309CsUsxfvhoVH85rx58vce3h
+            QW2zy7KPvNEr84ZsTBQwLqi318JiSD1egx4m+CPvbFvV1s7DFDgQQifLRzlqR9/d
+            PZc3DAZ81QzXhZV9Wh4nxG26SQtsbVxAjdfLrpvpDLV3l0wIU8bzP/UsskjGa8zR
+            VBriJ6qGeeDeXVVuxcLMlAhd8R8ipEvLrId3TzvAPRClk4+fU7wzTfqR8Cl9hu29
+            csLtPW4Fu6iZshf3UJJ8KEhjYo6060TlfEZX9hzypJFf+kwJopSrS7KCPFheNBkN
+            P2cuyBgpG8OANQ0vYx68mgkDqqWVWNXAjUHxcp98IjZxwcSfMR+HwZi6xbK97GKS
+            ltqUSxYixLQUelHJX9YHkheXDwfH+q+CaG76IznvMrFi+bB4laU+DmmVnfPZT1LU
+            aAEJAhDJ8KQkP2yRHCV2qycNpY0qBHN6pk6FXQq7O7dl3Z1oQXkS88KopCwan36k
+            Hf4vvXRGLR4fm0uFYhN9aApnDFQuWm4NjEGiNyg6p6WN0XMBNARWfmTyDNc8xceA
+            Q5I2AHdBk7Nu
+            =+11i
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.9.4
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    version: 3.10.2
diff --git a/kubernetes/personal/linkwarden/values.yaml b/kubernetes/personal/linkwarden/values.yaml
index 99a3532..e9b0a08 100644
--- a/kubernetes/personal/linkwarden/values.yaml
+++ b/kubernetes/personal/linkwarden/values.yaml
@@ -5,7 +5,7 @@ image:
 ingress:
     enabled: true
     hosts:
-        - host: linkwarden.local
+        - host: linkwarden.lan
           paths:
             - path: /
               pathType: ImplementationSpecific
@@ -17,14 +17,14 @@ configuration:
         disableRegistration: true
         disableNewSSOUsers: false
         PublicCredentialsEnabled: false
-        authURL: http://linkwarden.local/api/v1/auth
-        authSecret: ENC[AES256_GCM,data:AZwMDGQUd5AMuQX4kOQvlX29mcF5GI+JJmIGwnVdlBPeFyH4uidk/xhbxyJt4DlfAFAwz/Hc67/gHa0lYxaH+g==,iv:7CFt5eorMfraP99Z56zCiMCBLss5RH7m7abeqT4NfNI=,tag:9KeXnbhBsvOctYykX2clhg==,type:str]
+        authURL: http://linkwarden.lan/api/v1/auth
+        authSecret: ENC[AES256_GCM,data:EiVFUCrQDIAPZV6E/e6nrSoelTxGzS0Z7RbdaQ2OvJssoAC9hRJMbpvDNvfUrwTyX8EDB9ve3f/WrMhysdhFVQ==,iv:3/rTezM96Dx2FK4ycNQFWAgR5nzdYrBPhLukYGOOMDE=,tag:OSHaqUoFT7LBSECNlvvwlw==,type:str]
     sso:
         enabled: true
         authentik:
             enabled: true
-            clientId: ENC[AES256_GCM,data:ubRlNimwTjeOTm0NUMWWc7og/lDx2ETM+t63Bv1OsUHQ29YRu6ytpg==,iv:l6xVHYCd4C3D+ENXUBCt5NmrzbZc+ycD7o8S4d/HuJo=,tag:G8wlVCh4lBvADmHzatV4Vg==,type:str]
-            clientSecret: ENC[AES256_GCM,data:8SygYghx1DwMPtpYluAAgFsbYR8Ot2OHSIa5hDDYeVeRLc8XkPmErP94ODLLUtCCV4rv/JHcqgVzaLpI3kxagLdFX1pQZk4MOSHzyhPIdAjOeoN1XsVRWmghxZSyHE9GdrvX08DjcPSsH+8g+5hjGwFO03XQFwj00xwEkfVjCVA=,iv:MUm9VrquMxcF4fJXrkARongeh7Ij5cYrQVIxXojB3QI=,tag:I3mbF5+nIxH36NcDleyj2w==,type:str]
+            clientId: ENC[AES256_GCM,data:jhyc4YGI8D+AV8FiWpecHqQd3Ofn6q+oazPGsHrzrXfCzifyJJ/ucA==,iv:/piiI86v4qiKHa+eGjCTCG6Ge6sDWn6hH8Fdt+lSN/k=,tag:CIOTGsUFUndiHuEkFM5adA==,type:str]
+            clientSecret: ENC[AES256_GCM,data:4Kcy07WuvO+raatmL1gl34oF2AM9BXlqzyauMMWNY7wQZqdF5rrNfvMAngv3iPQoxok8VMJSuGFbuoO+bA2SkZ6lqsnELfCAxOLcVkfRmQYgQkqKZnoqGiz9XWlqGN/oDaFzJzi1RdddCFYIA8jvKzk2TKhzNqtKt584oaW3I24=,iv:f/waKwFPclf+mIvbRZyZGkbQUI+IbfrpMOe/hIlIbl0=,tag:TBrp+/wI+KejpabV+qQT7w==,type:str]
             customName: Authentik
             issuer: https://authentik.vhaudiquet.fr/application/o/linkwarden
 persistence:
@@ -33,31 +33,32 @@ persistence:
 postgres:
     enabled: true
     host: linkwarden-postgresql.linkwarden.svc.kube-talos.local
-    username: ENC[AES256_GCM,data:anBo0cBOrmMtjA==,iv:ukNvmSfnBO2koO+fCYTI/+NIO5XujIYTR3VQZr53X54=,tag:MNSfM48axY1PZBC+8pXlkA==,type:str]
-    password: ENC[AES256_GCM,data:tlbekQk4CFwVZA==,iv:al04qR7wPBDlfnVCMjnB5sABt8TrTblQFnW5Jpi2/kw=,tag:KK0uTnYpOhQY+GP140Vmaw==,type:str]
+    username: ENC[AES256_GCM,data:LbnLYvnjWTUDQg==,iv:Q8lWuAHQ8/oWgid2x3y59Kkmb0J6Qoq116I8irrXfqA=,tag:X8nUn7ANT3jLhWC08Nikjw==,type:str]
+    password: ENC[AES256_GCM,data:waU5WStYJrFWIQ==,iv:46Duu3hG0sxiOWQCs9t2ZYSvkq1Z5Hh5neCKCuyefF4=,tag:GYVkYSL4PtRW3J9BeWhE0g==,type:str]
     database: linkwarden
 sops:
-    lastmodified: "2025-08-01T12:59:49Z"
-    mac: ENC[AES256_GCM,data:GJzt2YsgFCkhtfnEwhFTM9RioprXPy52YqH8UQ/R6Zyzi8mJCujxZSH6d+SNNMZYp/YffraAqnvgn3uDgn6muBnxFrs4yLivpozc1oADvJku3WfNE9YSath3JgqPZ12szGg1qbWRUawTLkbL/OKNQ9NpWwWEJJdjCVb9cVw9qKo=,iv:dSMQOP71Vw4QS2UKJqHfrxl8vH8wts5ArWuRoSTCZFs=,tag:R1kKgc2UEw46Bor7sJe7Yw==,type:str]
+    lastmodified: "2025-08-27T10:07:51Z"
+    mac: ENC[AES256_GCM,data:LeVxOQHa95hSM3yFlWxiJBIYIKXQWagN3TPrOzyBfU4g3I1qe0TzLyOiV/y8oKcqd7hqPRPGtZfRzsPRhhfwMR+EnRnlCwGbb28vEyePyxX18sOPEhMHTvraq3iBSZfjtUVcBSgUEz1MBKvVQWFmXngeiCMP4aBGIJ4nXcuME+c=,iv:n9X9gmuV4E3fSaUyMF7HeeVefUeRYMTZ9SxLKIeXKmQ=,tag:++yTmGsIESRCIpM/4HqrFg==,type:str]
     pgp:
-        - created_at: "2025-08-01T12:59:49Z"
+        - created_at: "2025-08-27T10:07:49Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/9F5diVyfs1ElbDy5/nag50PSuENalUbsdaCNMEdPfRZLN
-            xXcPuA63IUDzlTToyliM1/AXYxkEw2+UaFVxofpWIq55IrkqClFIvdlWJOr9haDj
-            nQO9a8SugCP3k9sxoHoKye/mUu//wKKXB2USKYRNC0LwOsB1tQ6oJWjrPe0NuRpg
-            JJT5xzLRrrKur0xqU4waXYztFndmP9cH1MGVyoJy34PnF0UcDpGunoBBYRz4njMh
-            +ewZLwhEwpjK1rJoa6Emd5xLNd9caIGOh+LCXr0LCeSbmQugifHr5FT0nFWkaXAL
-            d1MOUSkZujWj+2m22RVWd7k0JYA11I8tAlDrkE4zbjN4NqjumDp6ow/P9se/hYBA
-            UbQpnySLMjnz1xbG6RLDI2nTF+7DpsCx+crHm/lFOglKseu6HbJ1C0ZbhrujVuFk
-            zyiNx1PYSQQTc91r8Wc/OLycDXpTDznTYhvyv6sAWziOcpIVwur23y0lTQ2uwiUk
-            N4ZcKXtFcplglJkeAVv/gM05sCqhd61bXUYgetlxxKPVO53271ZuhMxicqjK02h9
-            KEuZhClewAQkwHhaHM+QBZ+Ex5j+AYBzGS0IBxJ7vPQ4nB/iqZ0BdgGDwCkGVdNk
-            DIiOF9QdMuFYI3kBXNIw06UP1SCztZOSbR+7yUyc8JlhG4c7cqa1G0WvkSDQuqPS
-            XgEbyD+e7TSdsB/u/XO5M7RRsagcIJKUaMLWeMdeVe/OEjJY6DCIjd/k2c8fhscG
-            q5okHfObjDQ3oX6yDwcWDfVdNfvUm8ZUrDm1+bqOLq8/cWDKmWYca8ovD7d4K+c=
-            =Cq6h
+            hQIMA7uy4qQr71wiARAAjt0w0gAnu2x6nyM5Y+qvO5k8DVy+PHUPV3FLwyJ3NmSg
+            WvyIgnaOC2n/agjRUZS9z2uVmRge/f4/lHbMdXQg06UKmz5fK51V8ArB15HZtZnQ
+            TKT+FWZDOSMu7/mHluHdSYLdatXv5tsuqq2Y2I1vI08JelPfANvEr/jHKsUXjmQO
+            Ugffrf8BJ3bnVdSXQDkRYO5ipkcTbblZkad+KayPtOJWlV+TJd58u1fWvoMeYNzy
+            2MCOUiJwmw42BsOBuXj7FPso4z7rP1QnG3r4Sh3NjAJkxmz+rxFn2Ty7N2bseG2Q
+            cImuvgr65A5xpvGolsLO9BBLIb/RG4ikwy8cpldhIEZHbbzzJYlPeXji5GVeHN7G
+            bKuMod5TlDFqiTBi+2TNXMehziXBDEEbTMesxdB6vXykuVxYiyY9U1Hpjo60nAJc
+            mcWPmEbO6379ELeJLZTtoZzk2pfIwW+KNrtHx7kaurvMf8AaDt5s5fbR7DM9lCho
+            kh+ukOoUdE9Qp2CEd9/xGieuvS1QUvgnwiQVGCmoZUwqtpdnIQOz6Hu4o4or19eT
+            WVyeIDHLIy8Q7tQa7WY+2SXnWxiZIgK7V6vF/uqHONtpJS161Ne5Qr2cZhIm3EXB
+            hGxjbn5fj0BRR8km0mKQN7IQNd7vS0CdUbGpGs7gejaYLchXcUp/qETsjSNdRrvU
+            aAEJAhAR5GVQA8k6Cs5kVZnrlRjRJgkRVP1QVZodeh+QwBRQvLax77rZmQs9Ll+4
+            wu12edEEIcPTWiIigaNFjjUSC70kqNRk3SihKulMw45CVyi19WtmfsC3ap4wgAB2
+            NsD+WI15xFmp
+            =8Rs1
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
diff --git a/kubernetes/personal/photoprism/values.yaml b/kubernetes/personal/photoprism/values.yaml
index 225a73c..026ede3 100644
--- a/kubernetes/personal/photoprism/values.yaml
+++ b/kubernetes/personal/photoprism/values.yaml
@@ -6,7 +6,7 @@ ingress:
     main:
         enabled: true
         hosts:
-            - host: photoprism.local
+            - host: photoprism.lan
               paths:
                 - path: /
 env:
@@ -32,28 +32,29 @@ mariadb:
         persistence:
             enabled: true
 sops:
-    lastmodified: "2025-07-14T12:24:33Z"
-    mac: ENC[AES256_GCM,data:0NpGRkI1sDR6TZUEZdwOgGy0gchuplNT/n7DnqlAoQLCgFM1vmArT6K47Yayt96i7TzpNiAd6MDc7m96U3OofrUujcohwszQeIBXEsFVw9dcsRF/seqk5Ee7n05syndUIKv5lz9pOB5CZJ8wjstFo8FCgzDseLY+m8RogJlJl2c=,iv:s5qjyAbZOMP6a1BvQRo/+7pFk1e7PfOG7L3Ctmm5st0=,tag:QjMUsELrF2aAbcsvVqBApg==,type:str]
+    lastmodified: "2025-08-27T10:07:51Z"
+    mac: ENC[AES256_GCM,data:adWzoJckZb8ZeODL9xBK/fx9Xv0xDerkK9NBnw9k2wjtKOjd9DSedlnfoxc7GPQOLT5Sx5hE81pirvEIBU6zvs+CzyXI78Y7cOXSM5NwzUJmNdXxp9/7qOW/+0fKa3eSAZjXz4T+/eEws7LCgE8suZcEJS9QyxJzDgG7my1UmOM=,iv:ZNMBsWVN2AHlxhP9eca1i93qlUf2S0d+cz/HpMS+rgc=,tag:BWt6Or4k04VFVJNilXuEgg==,type:str]
     pgp:
-        - created_at: "2025-07-14T12:24:33Z"
+        - created_at: "2025-08-27T10:07:49Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiARAAmrZV/nZH6Uq4Jp3S7zQwINucsYUrFMxqNjNeGEy2RZKj
-            BAUp1CkWPPK3SmOIWPUQsfNPaJNjtHwvXZ44PbFlarmeiR566YvggmP4SMJpmllL
-            5H7j/ug7bPgmykEuE62ifgdShD1dTtE23O6yze01QGE/8RkGxFhF/CC/kVoODQ8a
-            mdIpWekPKrkNv8mF4LGrDVBo9aVQ7RHZppXhS35jBrSI5+JLHeHAfOOBZJKYDJS0
-            fViTSbpxzl7HDgFxKkmoBjnYNQam6aaTreCFIEYfwWAXGd0AeBLOwVuPLaBUhi4H
-            gNArmAEOnBe0gH77e/UEF92ttNXygmL8ro3wDkEV0DcA1Rfex0hxdu1zHzT4UfyT
-            132UJ0eqaa85MpSwHQZv6y53TamoBvdTPaZPsqv1+/GVwv0Z2dyzgT59+QoGVQt4
-            7kHsHK8C1dKAQeH3qYTo2Y4xgaHc5DtFTJ1v1u/DkEnurlzPvxeiRiWQRAE/ClMl
-            K2TVHtDQuS+ZRPjEntAqxBckVn7ArZFanoYcBkly1RNDkT3iAPUp/hKzCSm8+z8O
-            +MZ6yNa5lyHMYgypqvVcJGBsdeq90O6eHkvLvDmTK5MmGN5W7D6EYHpQpw01pZid
-            dMndS6He4Jt435/xZBWAvjf9kKgnXvL7D2KnSm4dGBnPomvlNMfT+ZuzZp2MgDnS
-            XAGWdGBrZm0wunNWMkqXsAi010a7XrEErfLxR+kAoHoISB5+vC5loXmSX+Lo1zyb
-            e/0JeH2jL4mDeXsVot3lhFnhuKEXa5RLTHwp0HMsKXKQnSkYrEvTHUBsyRk3
-            =fwhF
+            hQIMA7uy4qQr71wiARAAsWsaP2fKfz/jI/zR/rFpwKEGju67sG5IlAtIDQVbl7Nb
+            nbLW5PwlfGDf5ZBhQmR37MLogO6YI1EjF3kw1fxgJ5RQagaVSlW4xW/Dzid6nKax
+            b49MaHmWQc5tdxF/o8fIXMbXIu/P7MkOFLbEsN0/K78wIvkJNvU/KhOygdjKsdn6
+            qlSEmdlNbabZBLRyKTsrgQeeVGDGhJu5o1RLCq6uZ7pKMVNxeXQeFth9V34BI05Q
+            mxw3Mbp8bF4tDjBVgbzk2HKUYwzkDMig/i0EP1xmPjwepz0cO5iU0pbwjiROPoyi
+            ztloaYrXvO7mZGaew9zZb8UTw/LrHNYFOFQ9x9VeOSvQFK3mXtYvowk9rQUMsMh5
+            dvMal/UtX43Z+ckTbOr+PDWMC10RmLeZn//an/x/xdK3vW3UGcEvczqjkBOdSrlt
+            G94SamWqdVPAqm4C7fFiNb14mafk7/GoKKmFkGOlKL6Bd30tkLUlXDpLbfIlMTFD
+            YrBQxu4zQD/UL86Av5jov43WSc78uNDMGCo/WI1PdTk/fCZhH0wlyrWbolkHGOrV
+            Ui0M974JfB3hX8ZEVINDW4bw2ylQE34ZYB9cw522EpxfHmdLxEy30iU7/55LQecm
+            2x7gwgUONDIwt5a1Ey4JdcgB39ZB4mkgH5Fj8ArTBzy0PghCK4ddGFhICr8Sv/bU
+            aAEJAhB7/d3fDtj2jWs9X2TEwv2MaFnthC5bVRuMqsrtNq4QmCXEatRU9+ipNyCU
+            kjbRLfFLrAu4pZ/allJqE0AstPeJA3nMXBxCVWkSvX6tNZA6Y2hcpgG1hXnUgnxp
+            cMtSdengvVOT
+            =044i
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
     version: 3.10.2
diff --git a/kubernetes/system/external-dns/values.yaml b/kubernetes/system/external-dns/values.yaml
index 8f2f313..a082538 100644
--- a/kubernetes/system/external-dns/values.yaml
+++ b/kubernetes/system/external-dns/values.yaml
@@ -5,40 +5,35 @@ policy: upsert-only
 sources:
     - ingress
 domainFilters:
-    - .local
+    - .lan
 extraArgs:
-    - ENC[AES256_GCM,data:OjceEFEsSdsu8L0cXiJpzXK99e/3qWOTGonYGJ0nCYOWkvQ=,iv:p4NBmSQEcbZ9KlPX6SRE9BszmbamJoDvfHRop3muG+U=,tag:ygCzPPLfpwRX6dYQOQ+z8w==,type:str]
-    - ENC[AES256_GCM,data:HwTgdSrgGbW6Rfq8IdiCPmQNcmeoeb9/HS4=,iv:96u90ODzbS9xcxR9ZM75GYTcklE93mW9zXtStj6vZU4=,tag:Ye+KzC5M5eiy6+qzvKtP9g==,type:str]
-    - ENC[AES256_GCM,data:8+M1yWuV6w2yom3Jiz9WZ2h5g7wO/O3z,iv:bFoZpe+rdZpFBs0ZtzPCQw+CW2Zhvc77dNGfk47SmnU=,tag:L3XWx/eMlkvAo2wK0MyYcA==,type:str]
+    - ENC[AES256_GCM,data:ym7grahK+0f0ydcdbWjamJdu/fOBUdH186xaQVaXZWEb,iv:PYGTuE/0z23pXVmitjDRcESs6dwuZA89VUhC1Dw/YlI=,tag:eIFd/J0gk8AWkaBmkHXoxg==,type:str]
+    - ENC[AES256_GCM,data:ah50AImpMpFgRmu7IFsOKUO8WK+dcFSQakw=,iv:WyrXKk0WxD86A3nDu2kvjZD185LZhDwTx28g9tPvgFA=,tag:B/7Kv4FT9l3SjIuGboIkaQ==,type:str]
+    - ENC[AES256_GCM,data:5eFuaAUaRwrscxSSEOKpLxUrfgo+jfim,iv:6MQ10olVkkRzOaOf02vWKOrvmwgmEr1HedHpraprEaY=,tag:Kc2F03NjLMWmzHaByYHR9A==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2025-03-22T13:26:30Z"
-    mac: ENC[AES256_GCM,data:MpvLwjJaIiWXACFarrL/rdAXGqUjEYtrN5X6RnlBL5tmrOJQDnlGo54A4GDTaPjyc1/Wy6gz0sL07Neb8UpzRCqp58l6DQJOEvB7YiYVXpakwQXcHqvVUjBAGyiFdMe31QT577zsA9GB/wOmUDfdWlyTRnKVJUj5PGsZlQIPGgk=,iv:t42wJNK6YAfTTvWbdEGfy75+qY2IneId6/qiOCkYZx8=,tag:xl/R6CukyGJMkKAkWLQp3Q==,type:str]
+    lastmodified: "2025-08-27T10:07:50Z"
+    mac: ENC[AES256_GCM,data:wb+0NBxUIqQUbCVsEZUTE7fAvFy+pxaxaD+zb76BploLk0qzB66Ui+xvArNW1RV8qOVTr/fLLxAcIfDlmN+HvJRFeUZLUhZroZXWIIElDN6O8IgzFRy3B+ps5bhVtkgUGACdmML9NJ7wCKEX67AqbuqquR/JagN55cDSTzhUvwk=,iv:qIu3X8SD5H/iKkJvwfK1aI0Rd4/fpt9ApIT5cpEDwVs=,tag:9nvr+LnN1RA8WQgtUg+GTA==,type:str]
     pgp:
-        - created_at: "2025-03-22T13:26:30Z"
+        - created_at: "2025-08-27T10:07:49Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiARAAiylUaDcKIUVjfap79CyDI5TZpMi6xy9wDuvBb5xQj2pH
-            m81D0FKnvo+jyZBKhQe4j0tlH3mdbWWDJHmWkqygMSh9qRijYgyaUGCsSBFJ1A1f
-            3kbO5nDcB2hkGkp7WeghqDNLWoEQCZRx0ofsmId54YiQ9hAWG5yugoftJRSic0r1
-            my+qlENrV5ylt6ejLW62DrdcuYdahdtwzdUYWsKSLNO+7I67+8sx3aOTrzTMlFxv
-            eGnJDX2lcStDrk10KcvyHXOSTemo5Qyd4WCnEd6ushzSdBjxge3vJMowVMNOHyqf
-            gqMCvXflsgrQCd4YiNTkzRhsUHxGi0SaTUEXWpZxRva5dw53fnQGm0/2oTBmbXyo
-            3iorrU770jt3C09+/Wodae4DqZ6mnE/0UnkfuBn8gdaSN9HEVRtqx4gHqghZaQtB
-            V2/7ApyVqhmPPKHaqDN9+XzM1t41rmkdwqOJqC8jhtQo6UynhWGR4TPlzhkg9U1n
-            dhLB4InBy9llX+XyHm94S9T//MtFyX+x5UxU9SwobL2NnONTi55Jct2B9eB7Evpo
-            PHCd8gNpZsUnXPFdh0VWR/mrnivm+ZXGLeWyDAbUgio2pQS+EgcwdbN3jKIPJsny
-            iZiak87ZUrPXcqRCESlyfRUwMDx8Y6MeEnqGWMrHM2OqQzbGjM/DyyOMCTelovjU
-            aAEJAhAFOZyeSq7uAxcdCyYc0iPIUNSQyWc/F6T9C9XOxusvCMcovFaJd1n7dYfD
-            2iI+We5xiT3Ns9S8QZl92SarYnQ3+YFZO+9fao2bVTaW59OxClKPHKH3nctGvSli
-            CQQl/7bFyATK
-            =ZZjJ
+            hQIMA7uy4qQr71wiAQ/+IMnGLNPR17dXFL/tT/Jzm2SbZnRQJVk8pEikESBazMHy
+            qcXjwI4ZXOVKC9Azc1jwigWx1wsRzksqHWI7YihkJKSTWgDkr/WbRZUkkndMyC6o
+            1rUghPTMnw3ykrLOHw0dP5KrQyeTqj3EakJKzPLl1M5AqOlRIEQzJhpcGACy9teR
+            RZ4Z0WQL4lxl1bVQ/Yq+o7iEWDqAwlLxllBnvAz/nIfMQgaTfa9UyEz5Up71nXtz
+            f98txsSmB0kEYqEJNeNSQa6+MFT1OXJX8XijlfcEYVIyX7XO8+vKu99Neae026Ki
+            o+yXgVB8UIV/8tfhhRYofYFEUP9SPNeIrlJlXPopv1axnhhxCJeUUMDfQtrQFR1Q
+            8AUNbWluEU5q3/YLtk1HsLIDHGLG4o2WIS67Do3Feik3oZc5jP4b2sLrsSYc/2Rn
+            DkjDrnYKqXojr2jD4B9fMiKen1/MxqZwP78CFNNIjqDf44fvmHPK1BlCUbMmBmyV
+            yti3wTZEWUa3P9a1EApt3/ez+51o4R1q5En6bkZWqrzDtjd1qhs8ygP1pyU5eRJZ
+            dn0FzzDn4UuecCjXx6rZLw8ugSPIw+z3BMvB/JRx6OY3Dm6NKHBwfdIELoWwpWoY
+            28cH5X8hfVhr3uDIXmXVkJhrri3q35mRQnBIw+Gw7hgeMfWdLLmMSgwhCVvWNwDU
+            aAEJAhBlX9Uiqb+tS5fNYsnGVwS4XNIUozxtkdy3t+ZHK/rqCJ0qVr6m2rTO8QCg
+            jfNwgjOfpFC5YSsHjEuPaISBTfEMJea/1fqeUoPSXIMtgnceOT5xeqR5d7K1cOKR
+            sRirvHEkhbG3
+            =uej8
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.9.4
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    version: 3.10.2
diff --git a/kubernetes/tools/glance/values.yaml b/kubernetes/tools/glance/values.yaml
index 77ddc57..1195dd1 100644
--- a/kubernetes/tools/glance/values.yaml
+++ b/kubernetes/tools/glance/values.yaml
@@ -1,7 +1,7 @@
 common:
     ingress:
         enabled: true
-        hostName: glance.local
+        hostName: glance.lan
         tls:
             enabled: false
     persistence:
@@ -13,36 +13,31 @@ common:
               mountPath: /mnt
               data:
                 - content:
-                    glance.yml: ENC[AES256_GCM,data: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,iv:K5q8LTDsKVK6DKZPDGMbRiRK+tatjY48LMHNUcuxMfQ=,tag:dESi4+zGANHHLh+zHLoWuQ==,type:str]
+                    glance.yml: ENC[AES256_GCM,data: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,iv:N80F1dRs1pxv1sahXH2x/thaXU0CKxYxn5jC65Ao/M4=,tag:A4jlYLZU27G/MIzH5XlxRg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2025-03-22T13:26:30Z"
-    mac: ENC[AES256_GCM,data:9pjOdnlatlraKYdXJ1p05e5GmzGZ9+MR6sXYBFWoeBC/XJO3/R4BJXaE1ox6Wcz3W11535RRBYykGNLGMM5Y8FmLCl4OBqHoxwbxA6Mvz/7VTyb9IIKvw7+KU09i1AZ2P+E7wzQfhGKGMuFuB7mMYGWDDFZpNSSlFj0sLMGKGcM=,iv:WvbSDjthkMF62xrKgy3oDZZsXqB7YXU591XVAF7LQ2o=,tag:z/g323lfi+P8aty0bDtrnA==,type:str]
+    lastmodified: "2025-08-27T10:07:49Z"
+    mac: ENC[AES256_GCM,data:6UAgykg/hSlAraVHpGwAG4Zmj3iru8d9CzdZ89XLAa8ioXsVcPGKhdNIz19G0i8aio0PG3/cyogxy1eWyukI5Z3EloXDjbbHvl78s/5BftRW0MMwMKVHH8Mo956E/I2CAIanJaW4SEx2jI6WZzV6xtpYM3f4FFmagXK5a1hXaNE=,iv:3tlMm0QI46CE+C/7n+8PuX+SUjJ7THzAGCEN9naObFQ=,tag:drJly4BlBgSRvMfSHgzuXA==,type:str]
     pgp:
-        - created_at: "2025-03-22T13:26:30Z"
+        - created_at: "2025-08-27T10:07:49Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//cuVt31J6vMCVjO+/G1ZmL8UsjpPceHqSmR1Wox0JVLFD
-            cmUrK4RJ/2Zf8zY9UUpZVhOSwJj9WuW/Jq0EpVH7Ba3ihzUog21/bAPjHFncLmhM
-            fvNyjujWmWtwYYoB5aV2J9kbgZ8A7jewXT7vtoGtkAvAsRzupr2ZpSx2BgHCduVT
-            Yp74ANuZFPqIb+/20rDNWdqY7XwQxLzCaZ267mHn3d/jPCv7mNnEWRgydwMCWkYI
-            XN3cHjgHvM05nydpHZYsDrwGOHs/DoCNM+P4vYbujSIKoGOHP+uG2j57Mv9WXtIU
-            /ARFc0IM1/dthc5MDqWQVY6HgnrXA9zyZmhoE+mdUHRxZQmjo6q0h1qY4bJwI42S
-            MEM79CcbdlqQczx1+GzHcbT0KQvA+khsWsO63j56eNnt5SLw9pCzrNylgW2JiAzC
-            0arjLYG3Mq4LaV32i1W2dx06EG091+7/+wlvdMhj7z0152+EX4O4udo0fRNE4Gcz
-            0h9/urIJokfAjF3CWAa+bGUm/LmZqu2uRAmgWMmCeoYRCzgIVD5oukYKeb3UykU7
-            foNw4QKH2wHnrjgmq4UCa11rvNkjdGnu+PCK6ZC2ePw1EjcA0SxwNeUm885KM2h/
-            D8nJHygpMn4qWiMvjqbPwXwGD0RmfP9DKBVFOVbnvJndJ6MJHd34C8xrUwbuoxbU
-            aAEJAhCpBrpztZL8OAbDHDcTNDM25RJ7ZqX8NpmQEmvXBSy3Yu0bXFIsNmd/qbg3
-            AB76XAOtbGMoq7VGenwuZqxLF6xH/G4eT1Uew3QsT6VFec1CD2RVtKsJ95+1aR9i
-            DxqXP46SGZIW
-            =AHr7
+            hQIMA7uy4qQr71wiAQ//exDQRsuuBPlA3EiB2VzoWdtKXcp0Kqief7eM+39uWj7K
+            qf8cU2978vlS1dXyJfBFejFMMWut53xE6Jgcff1qICRjhYjF+BVNNHdyeR0yyyJh
+            wHurlx61XxT2CM/OH911JCxA1e2aXz81zRpuj/F7p4/9G6m5cFEoPxy8KTkfLa6d
+            nxXpNvDHQwfpC0arDUQZf5gzQRSmmOUOQdJ/0BdOWqH8SoF3TF2rnBSE9bhFfYYI
+            BToxu3WIYX5AlI/izHc9JBbb/CZx18yNP6EghTEJLuumd77bP15A/S+edfzhWhRq
+            2lDXnE+hRzWdR/8wDdW7MOKK41vnoNjKKqGbAbRuqnRNBOPLCXcscAI4UtpKCkGL
+            BZF7q5kCUsSwjcyCDrvJa+4ctM1oHmBURGGoANJi31bOJK41xk4A9LanHEu0JHTs
+            RNOxb7aKoBamt0sK1/5MDn5AHzUEbGRyUmEi3Ec8ZDY13XVCPWW4JE2SnOfWe//N
+            ZdseGKoEBkw/xGoef+X7oHpN4Qd9q7mEH7R6qkL/inpFypGF6BOYq/PmdPbcqqMk
+            /Xhm6SqsNQ7fWv7pD0C2xyw1RVp1erwaAjL9LYQL7aI75HO0KyowYCmffOW1sWns
+            y+Bx4JLzwFXnb02EWkcbBNWyLJU4DXokD7SkU9y8upXcsH856KCnOsz4jOg3OlLU
+            aAEJAhA/1qrWt0kUlADE4uueHl6OwOyn4wJ7jJnl5DU0Q4ge3TbEMzN7g52bhN9r
+            p4CZUXaEyj9ZeW6XLj015FaYDKJmqbiELa+QEJXCP3LNl+Wv3WvX1D9TV1sPN9CS
+            E5IHS2V3b0eO
+            =Mdbm
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.9.4
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    version: 3.10.2