renovate: deploy renovate on kube

kubernetes/personal/media/photoprism/values.yaml

@@ -46,28 +46,29 @@ mariadb:
         repository: bitnamilegacy/mariadb
         tag: 12.0.2-debian-12-r0
 sops:
-    lastmodified: "2026-08-11T09:25:09Z"
-    mac: ENC[AES256_GCM,data:Gjvc44UTfro130jSfI5Ceryzl1KHMmMOawmuosAqacSa4y9FfnXgmirDJkqXXYcLYeUplP12TP1v05euwcGPB12L81l2EZN2mxPbDYgoOAuoGtYqTlN3IZ1cVW5ASFWrCPEdClr0DNvtnIWctzhdue/NKV2ebZpw1wrgTwOWF7k=,iv:Hdu2l60/2VEhlNQPrWKMXV96rwkRgn8E1sHM8W7BL5Q=,tag:pwG9n9n69sIe+6fPxKgiyg==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:adk4q933eJVfmG5NA0j6jrpC4n96mtrE0d21HQ3UpVwiGAyTyzZd7Mk2MGS6oESih6Z5a3CpNeZoiFaiU+QERdLA09Blye6379eNLukW8B4FJSaPhVngXHTHsuzM4AKabuB1uZaSbyS9D0HDo85E+PTP5nlouEsqKzqksst6AHE=,iv:Bl+Leocrbx2xwYlfDRoenV1u2GCJrKaApL4N3iOo5lw=,tag:v4lookjjCJiF8wSs3oXQMQ==,type:str]
     pgp:
-        - created_at: "2026-08-11T09:25:09Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//S/qbQ9OuFPkoxYkoh1r6q16kDt0A/W2DsK+mz0uPsupF
-            ybzXWRkWKt0rXoKADx3jOnWicJNjVgcX4+3OISeNc29f2uOglXeXBFrp7/Kxsl34
-            KKK4YeKnFLXsCcb0HIAZ9QNuk5m3qFqPDvgYlbszF9D0CgzitdAltpiNT7ckwaPq
-            0/78byG3kMttTLW1Uj3Rlwm9SAdLcsUjeHSLVpFWaRXndV4TVL7QnqL1OPdIxJkc
-            2/ecyPgkx4Iaonnwz+8iRAv19rQOw33cZtNjF3kTjk4xGahSc4sUf+kX69JJqrXC
-            KNflyyV0K5nVye6EbfftpUSqAUfpAFNdmUK6PEVSGCi1AK9oJjb8TDuYGJDZlNDG
-            +P5/WFcZ3uwcwM8syXm6M/ZoWJRvtjwV+IVV+pbeAAGzpsMzUwqikKnrjotEfPOg
-            teCyTDHCyDHwr6eNclP1YptwrPPdwRbhQ1UTOPZ0spVjqWOO/V/UFYjwx4M8ENYV
-            uwtRsI9fJN3K2eKZXOhtSLpkBNPkKNBKqgLn2Kx+TWA79HEWUTPaO2bpY88A7ep5
-            CnDJ7PqjDYCijcNcILwmQPCYCjaQl3yIw/K2ESGDWJOOs/TZFksoDptjZ4/4Hg7l
-            Hz5SMbY0/6hIVwLCpT8nIAe9fWGsu61ALJjz/pdNjRbcXJlrCtfv8lawGTJeC3/S
-            XgE3i1O4BZ6syvZh4x7ROcEXuxnynZ4wbJpGOLr0fjKm/Sxp39BgkT2BxmqPGXvk
-            n4pSoqI5fCVlRTkVO5Mr6SdiC4A4S31hREQycIWN1spQcJSe2s3gz3ZRDq/1izM=
-            =67H6
+            hQIMA7uy4qQr71wiAQ//WzVHXsFFjzPmzCb9i6k6nG1kG1EtWqMdr+U9axyLdeks
+            fZ+CPL/b8vZ5Y+vTmuHZJttGDjk79ii7if3yhzVB1FKbn5wnhwHJ/qfvhAv6G4SE
+            5NKTj4jnhozLXfxV2BbhS1dPaeMJYoFhufBRpYxq7J9APrIgveL8iuAyEbqNcGNw
+            lZxxB6RW9dBaUohgar7A2YPIp5dOGdspKiz8gGwqycDCcvKh11TiqRPGxxdwh1jz
+            MJ9t9Y71c2wgwdVPWlc3Lu+Wpb+nXrZVi8cB4PjWWmswFJfsE1HHjmaLd8cX+FKa
+            Y3ivbUzv6bubVW8ms2jWfNBrUYyLb3a9xGjpYwUOuCqi5uh0xAKL4BH9U8jY9pib
+            /DlWWQc9MDaFq2GDQls6yh6AFOHuGDaUwxYaBdgo1OlzZGa5fLqfFraEMgS/3fYe
+            HT4y25xhOdbgzPWNe4AAwSXDbciXkFQlUsK8I3WbNzuena3AyucZFKBw8gR6JNg1
+            LhepaLVkYtGzKp/iAECF6xgPqi4r6GQnHPnMvLdJGIlWJQ4L/gBzn/Sx7AOwNDtL
+            +14U+jvPlI4OiupKBdFI54tsDUQOA26ww1y0317x1jCrRkQ3cbQYPJhxuUnKpx1x
+            yVbCPlkxZDZMUKBsRV4KGwvVcbVT9DYCuT7BJXDuNdfhqujf/BolK2kRlYNz56HS
+            XAHhRDxgICV+G48GkXDObUOUaxpqDdXomizYmqZfn+tUiLOrqRVJw6g7JjFmi5DQ
+            hIIfV8iKh65e0zwPkRqECh2d6oGhChUYvDLOQFUGu1Bbm9ej3V3hQUMiKPAX
+            =B28Y
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/notes/notesnook/values.yaml

@@ -1,7 +1,7 @@
 instance:
     name: vhaudiquet-notesnook
 api:
-    secret: ENC[AES256_GCM,data:u/CPTHtdxNIZXadpbFfDDoLEoWI4eYG5oBG3R1BiZXoEJqDa1FjBLF9HOE0b9GVc,iv:5WWXVEWPUdvwqYpXSbOqAQ7Tr2ySEVC9E9g17b0BmOI=,tag:C00oGk+cFPm6RH/JjW8KJQ==,type:str]
+    secret: ENC[AES256_GCM,data:dnQM9XEnpWzZlvMxgB2dSvGclfKuZEe3HskH3PbczTOfNJ7GNF4dwg+mKPmpyqHl,iv:ytJPlLR1rsOf25JxKqo8jqnAlsZg7YwYv9JaAEmbh1M=,tag:botHVzQE3XhXbJxHH/FWfg==,type:str]
     disableSignups: true
 publicUrls:
     app: https://app.notesnook.com
@@ -9,8 +9,8 @@ publicUrls:
     monograph: https://n.vhaudiquet.fr
     attachments: http://localhost:9000
 smtp:
-    username: ENC[AES256_GCM,data:Rp4GgRimW3LQ4xeVvZWq6AH2IxQ=,iv:F41IKMt/gYKxzjr97esOpdpUUIfbWgH2ZW2haiVkrhk=,tag:9/GlCfw44/U7QHScSTHWvg==,type:str]
-    password: ENC[AES256_GCM,data:WqJnxPFO4HwmRgB876w=,iv:lN8e1PLzoHVW3kMs4LSyLoE6PnblMRlIpJJeknXOqB4=,tag:3VDHxlMtE4F87bBQkcGodA==,type:str]
+    username: ENC[AES256_GCM,data:i8M3noHu0CJ08RwypBn9h5liAkQ=,iv:znRqbQojmQyoDbyisv9axjjBj4V81Kp57/XovvmRaCc=,tag:iS91+lTTuZ70VXLO6XTEqw==,type:str]
+    password: ENC[AES256_GCM,data:NQ6r2DqoHw5B8523HYw=,iv:cYzXDQExlRtExl1z8wpdJ+i9CDdhceBIOgzu1Ak+flk=,tag:0/2wjdMDlWx8X0kr7TM++w==,type:str]
     host: mail.vhaudiquet.fr
     port: 465
 ingress:
@@ -51,11 +51,11 @@ inboxApi:
 # Failover tolerations + affinity — allow scheduling on p330 during r740 outage
 # Applied to all notesnook components (identity, notesnook, sse, monograph, minio)
 tolerations:
-    - key: ENC[AES256_GCM,data:hgAaI70y97aU,iv:xQuozvywEcCR3Rve3fVurb2z8HwHD015/+hhsgHQy0w=,tag:Y1aCHrMA663i4kZpFLKfWw==,type:str]
+    - key: ENC[AES256_GCM,data:wldwW6mx5HbX,iv:9udc0ZhxCNppTSvzubYTA+Z09lClmeY6OcK6wQ07TeU=,tag:EWTcPAzDXH4DsO8WgQhIzg==,type:str]
       operator: Equal
-      value: ENC[AES256_GCM,data:E2drc2LJZWM=,iv:FjN3ZcyH96LF6TMhlxydrVBG9MOam/eYVL+46kVil40=,tag:Rtxr+FnyH8C6w/2wQQ40lQ==,type:str]
+      value: ENC[AES256_GCM,data:Neyp+5Xww/A=,iv:w4jRsuTb1Nw7BqOTuVL+ZbLw8oGSS1l6C6VEmL68PXQ=,tag:Xb7cX15t7sUXUwdIPesR2Q==,type:str]
       effect: NoSchedule
-    - key: ENC[AES256_GCM,data:bSV/pYHT8sjR8v0owQQw4AKNQYl5Wdh3opBpIrjnfEOWslbvLg==,iv:ltHsiSPU8c9BOx/s8zTh+Kxqc8tRqW6HKf9pl5HOIOE=,tag:u/jT88Pbt044aj8uY0A8Jw==,type:str]
+    - key: ENC[AES256_GCM,data:ZX5pg78QqhoRaOv7Q0chYdKVRyGFXjDmdfwvbVpbjZn/a90R8w==,iv:1AzH/Ho0cVorHlV9Qmj5W/r5H9fuW1HtcosjBJDyIxo=,tag:qU4dQtewVr1QuKPMpEe7cg==,type:str]
       operator: Exists
       effect: NoSchedule
 affinity:
@@ -64,18 +64,18 @@ affinity:
             - weight: 100
               preference:
                 matchExpressions:
-                    - key: ENC[AES256_GCM,data:A1YE285YhLTcp4LeudiMc0MUp2w=,iv:Kqyfv95PdUuF7p3nG6PIxs2kuvWv2HeAVPU0AeoneYM=,tag:+adSH6fElXw8vIGB0WMs1w==,type:str]
+                    - key: ENC[AES256_GCM,data:GTjhxF6YvV/x5Lw1OM3TwvpBrm4=,iv:whhLf3Kpa3GbQNfjjW6LCO4cShQZVFJ/FRNRI56hZ+s=,tag:K2I9HPSBUfHFxGOU6UhhNQ==,type:str]
                       operator: NotIn
                       values:
                         - "true"
 # Subchart tolerations — mongodb must also tolerate p330
 mongodb:
     tolerations:
-        - key: ENC[AES256_GCM,data:av7I9aCD4B6y,iv:x6eA3iP82Sp85nVXcRIjNAc6JX3LNziVFlT6B6IrokQ=,tag:2yvVWccKokQscKbAD9w38Q==,type:str]
+        - key: ENC[AES256_GCM,data:mzVAVxpHcnq6,iv:81VOdlIyQIdVB8uNuV1JsQKC2tpTlFVPhLFoFqwJ05s=,tag:bh56/58UQMWwOTGIqin/IQ==,type:str]
           operator: Equal
-          value: ENC[AES256_GCM,data:WN9Bpkvqpkg=,iv:BNQglVdoQjCAE2CObO/19O0GcsfcVAGAv7e6JwSEa7M=,tag:5pu4aosrPlLQ16ZanEFmyw==,type:str]
+          value: ENC[AES256_GCM,data:AU51GRhOXqQ=,iv:XlZrHPkzrn8q+S86VpDggrZITIDWOnX+0pOlgmCH8fE=,tag:eyacewWQOevfU+8bNDQtLA==,type:str]
           effect: NoSchedule
-        - key: ENC[AES256_GCM,data:iI4qIoeJ6iyCVi2+V3OvaU0b0bMDsbVL1RfR29BuoEo1q3un7Q==,iv:oT1YrAcLhPj6YerV0rJvb8v8Jq4dwjSEyFd5TPXySpo=,tag:ILNxnGw5PnOPNMXYmhs+rQ==,type:str]
+        - key: ENC[AES256_GCM,data:jpfWPim/wZarapIpwmhrgVQVKlJjKL4bRHYAKNiv56OGr/szTQ==,iv:h5ddBHAkERT/qRtNEk05lVk4+25c0cg82DHnFTKqA0Q=,tag:XTcbIcdL0koJ7TtQ1lq7TQ==,type:str]
           operator: Exists
           effect: NoSchedule
     affinity:
@@ -84,33 +84,34 @@ mongodb:
                 - weight: 100
                   preference:
                     matchExpressions:
-                        - key: ENC[AES256_GCM,data:0y3r8t8Q+mGlS83GQmoA0x1X77E=,iv:P59+eZuWkbBLVWIg1axsPbRT+dShoEVqVYDBQgwUnFA=,tag:iDPY9K+eh9hdXtcD/BS+eg==,type:str]
+                        - key: ENC[AES256_GCM,data:N6BxudigJCJ4sbwAl1UU4AfqHi0=,iv:cSSRzSvKFg92PfxIHn2KfcJ65r6isXrB1MW00JVaGBI=,tag:rGWzaXJAjhOXHYscAkptYg==,type:str]
                           operator: NotIn
                           values:
                             - "true"
 sops:
-    lastmodified: "2026-08-13T17:31:25Z"
-    mac: ENC[AES256_GCM,data:Jm/lzo3ODn39+fMsmLiOc7Fo4RyzR6C7eqBc/pCDBu5XDlqQehghlwJ99rNm7Ed+x0axmLMwxMiLvPqiZeSJgDlB3h8/pfyU5gnA+mnz2x3e/kv+7HWWjYqFEDNj05Apkn5Fho3eCsLMWWQ495bfL/BWA7c0hB+FKZ30XvwiUII=,iv:XEEFBROIY621NuXUqvJP34w+KB9y38YIRd45D/N9lXw=,tag:R7hr6I6UCWScWx/oFEUbKA==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:E+JIPaHx+C0aJhvnuc/LwzEH84GfQVgaSHSM4GQw4h9tnPRsD4Zlmi8R5UBr9BOqw0PhigI+imVRSWSN9rLhzXtM60GLprCa5TwM9ufaAsX8Ti0u/HBpmKWNZWAVhQwbhn2VhYsz8BStszzxDWOAiY+ogZCy7wWU+lohyk0Myx8=,iv:tQhQn1Gh9icwIfdIgWu6bmrPaVtRcpSKrEL0LHGpbq8=,tag:bZBrS2SqrZtZejWmt2/obg==,type:str]
     pgp:
-        - created_at: "2026-08-13T17:31:25Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiARAAqdxsBrPIXKAsp0aTK7d8Hz1cdL0UIvudo5Bzq+oH9Yl5
-            TM1YWsNCmiUGfIgr/zhZzMoU0c6Zh4AV4VxMU9ZHvW4/W+Hh1pky0XE2rEtkdrb6
-            1c7b9THnknk8BvrHpY5RGZRzl0TuENu0xWsyjFNbZvlWpPkY32gz9vkyjDso2ToP
-            m31ErKKPMaxFCJVi6bJKYQhc2Q2ggwC+XRw2x3tFbSq1sCu35/WnkCc8+MfHSaS7
-            ZJNZEvxcbvg5+s3aI18DrEn34IOBkRRIeoLXO0IgTR8gNrKtJRx3KfFRwbkKoBnr
-            rufTfGt75RDzL8vVbbL6wLabuTfsCU28XvVgjrCVdLUdbWIhf8oPvFKRZHnDvytn
-            pqT/u32fLM/DkUyXmKhB8GE7tlO2Zy6WtzmEYwkgd8A8rw1fyGrPu70APq1i7n9R
-            PPh7ldtSaxJwhoJ6nOINg+4oOosWywrp/SVxbxqbLY8xdOuvPITtlmtaT5mdi3Pi
-            0VRyt6HUMl2PEqLsEbhelc1mcT6rc7Nm3mnkyENjPa1GiGCbm9lkAgn5iCFQpXKc
-            GGWN2XPoXOtXu9iDdkZkQz8z5/dSdbE84Ve/o8pHzsJO2piapntESxHDZl43Q4re
-            08w0uDVMIwXuRm+dTzhJIwu4B1uhDAp6GPKJmLdX8UHRhbXHpKZt6lbg3DTVCSDS
-            XgFEdNzPSQnhTR8bfS9+CX6j3wVCrcNhHwu60KWOQp/qn6Ak74yR2+LLC57+NFua
-            OwSBoEZgflQrMYAkkU3QdTWBTLGiSl31ardx26XvLzSvMnb1U5tSxrZvw8dZA0I=
-            =/8gD
+            hQIMA7uy4qQr71wiARAAqx7RtTLhCdR3P3xNH3/BVBD/i09b8jBNkznlBe31tUjZ
+            Re9sPCD3bkiryTUPgMIMOVBRyDpSEa3TuAk5T5/O8zrhR2bqxk7Nqp8ZI4c2kRdT
+            TxELspBzK7gcYZURarJ94f8YhMX8XXPYu6yA36velm7kVO7tc+GWUPbSgNzDc8eN
+            vOzGqQhn4ZZJ773fsjqzTp8aYmC6YKXboNjmEw6GYPlhD8OwO45/zNG2Yj9BOsaK
+            r9L87gm3ZSYw5C/U58eaknpgLSl4ZAITIgt7cbUaJrv5XsSJk4ogeJknRbB3sZSl
+            L87X2XC9iAhZYpm7Pe9IKPfEjb8oculFIXqoF6eo++0QMahALKT49aNTnWlWO4OZ
+            hGUYqM8qzKNv+20XEo+82YENvNuTBpMXjgTpd8BZOCjyvYdkI8+5kfhaQP9O/kYJ
+            L15nyG2/HZaJ1Hv9myFNqkyAi2fTndCBT58Dk3UqWveM0QAtOgFeRDnELNP/Y7WT
+            FwolNY6YkbZZpxUfMlxpU1HqH2jjHD7Ashr1o+sM1GFiCsF1/FSKd6tgEsC2RZ0w
+            5PCaFygvus1MHMX1g8h298SHgLNGfy+0lMLIuZuvEfbySfvg6JZPKQdp7jo1T79V
+            sj92v24FpGUGgHghXXk0ZzLeoMBS0pqlscdPftzwV3WgybMKkZiTfBfaQ0m7utjS
+            XgHCvGBVOfF8rfYZT2lD8ws6dd8hsDz2hZScO5wFPNfC6NNhTu9MgKkp7CvyXw01
+            pY04UDXm4b86giw4DOiL4fi1aFEaV/cjq+zF7Z+z+otaYV4yO96lsZmrtQzFYfo=
+            =E/8A
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/notes/obsidian-livesync/values.yaml

@@ -2,11 +2,11 @@
 # Single-node deployment with CORS configured for Obsidian plugin compatibility
 clusterSize: 1
 allowAdminParty: false
-createAdminSecret: ENC[AES256_GCM,data:qCS2Aw==,iv:krKXRZ/w5sXAdb6LQqqKm2bABA68QGxV/x0zalpwFgs=,tag:j4apfBIYrPrgZGBp5vIH0g==,type:bool]
+createAdminSecret: ENC[AES256_GCM,data:tq55XA==,iv:jNb8l50LZyGleKH/6gMge4NcVB/QI7DYvfjFzi0hXBk=,tag:UAdyYHVSxx8pVRoq2eB6tg==,type:bool]
 autoSetup:
     enabled: true
 adminUsername: obsidian
-adminPassword: ENC[AES256_GCM,data:jKwtIOt0yvxfoS7JhXs=,iv:j3KMCBjl4mtg+Tkbt4ooZnqvd8tGKkUf2psJlws31Ag=,tag:AjJkxLbOKx1kBlOfPRS68w==,type:str]
+adminPassword: ENC[AES256_GCM,data:HhKrquaOqxB3BkhC3MM=,iv:WADwvJbfNWNfHipSy3prQO6+Xo5haL7XTxANMdb/lbQ=,tag:dInMwg2yBubwFIAtt+rW8Q==,type:str]
 image:
     repository: couchdb
     tag: 3.5.2
@@ -50,28 +50,29 @@ resources:
         cpu: 500m
         memory: 512Mi
 sops:
-    lastmodified: "2026-08-16T21:48:44Z"
-    mac: ENC[AES256_GCM,data:he/K5j1OtA9jwaVkjI7fRMzBjsXpTAwtxlzfKObix9U5FT3eZR/BUFiugACufOLxzltY4HYlGK0mSKID+Jp9bMz1F/QmdGv5+HRRPRIGphNiG7aZWaJJTlJ4/0JjLJtONxLqASeoTap89Q/yuphb3+6ZNCcCsZQLMJbz7gEZ+cE=,iv:Pf0IlT9wdnwO/H2ABiTHsOc7DuBZjBy25y8SW9nC0wU=,tag:6ub3N8LDu6Y2lpsC/iLiaA==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:dVVKNsyOx9q89vnvPvMNuDCW7Ge/7ZB/pEG+ixqJVzIlHoyetmsYywolAO33Gc5iy6f5qhQKjmj9G53+eN7qa0qJMFiJR/cqr08RVp0oo80E1Dm9z4KsTv+oRd7vI9JFygk0Q2mk2vb3wVrqaPywU+2bOtFEZ6j2ZwtuWYTosXc=,iv:SsyFIrX0P10x73fRJaju0/QKlStzLGP9TE9sptIa0MA=,tag:vnqsKfk/Zs4M4O1R9hdmsg==,type:str]
     pgp:
-        - created_at: "2026-08-16T21:48:44Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/8Dc+KANhQYaPDLXEw5hJO0zHVfKjvh7KXH6s20b132DZh
-            7G5xRs1srollgxKPL4VYI0g1TQvIIP5+54wlCGxVow3ly93qV2FCTxxeGampb5VN
-            LiPaPam/6www/JCxuqEcWbib6T8qzdfrGeS0CiXxNEW0GMZsOj/1QGpIfEr2TdTN
-            O5Wf+qVHoUb51dTdO29BAREKCO953DAI+BmsvHsQgMtxmngrq6ufCyh0Els7U4HK
-            E1B03E7tEgsWPkZNJqULUF4Ux9nqK3xFbWFu6BJlSbB45mYjouWbT4XF+9HpL59V
-            55e0X7OWcMJ8YTL4cbAnXopDkFmVAkoDOKdQEcbc528hmcJOvv1acLG5wkeuiEjw
-            G7Cp8M5t76LCvfnetFs9C8GZIPjyP+PHfsxYNlZIK3Qt8QTvOtt95ZWK6ijCJzUN
-            CrLPXHRAvyWglzqT0s32JveNAfEr4CI8EcNSJ84S71FOhvmk5w6Kx9U19FHnMeHw
-            Yt2Rr1h8OXi4NMkzmBU/XUj400mpzU3vmmdAYLGbXO1w8DjM5Qibt5ZK7DkZTtm5
-            B2qVq1TVZEL0hg1nonTGt1LA/RzPvUs8wIfrzqW230qI+1DnKo/AOWZFt3z46aMu
-            FZx40RpVif3ckv+JoVV6SS6pYQNXbjNPl4NupTdC9bwcbRwsX5fU6uEqkdJAqpXS
-            XgE4u1kcJaDjlS+SX70HmjadjpCBgoiHIf9xU+oPBLh3t+fDiauzHl5iszGzayeV
-            B7fSbNDm54Paum0cXPUB+FOWzh8lwkbLkE65Ld+nMeJ9C7PbX2cmMKkPKBO/rzs=
-            =tlZW
+            hQIMA7uy4qQr71wiAQ//eZdPLQ1KBMwbCMIZ76qP9hOZ9/tKnFmtZqkFnoyqpshZ
+            kRCeITaLhJJE9TQNj0VW/Ng+RW5kDA1OvTWOdz6lfjdepiyu87ZkrHBpr7F64prJ
+            /wr2eiXQvz4p927kTw6cmiy9wWpHH+PPoJsoEJVIXzWNBxIBfGtW0DqpkCUhePwX
+            CT1LBdpa/Wz/t3JIoOTIq4MmU9q3SKMJJUsADKI9NuaGfkcyYoLG1/k0bZcbbCpe
+            /Tb+ynOPNIo07WjCQ5whYDFUlxW48zcvcH4tp0NaDcHDBNFgrPwxU9hwkK2p3I3c
+            hPKlMOYqk2cM9zksx9zBvsRSTNCraBJj0tooJk6RxOo3sWUQISVJ8IuRremSEagP
+            drnp9Hz8V08UgGGjlg8tG+yccNS37sFBUzDCKspCCRPkiRW5mYO+5HyMTE8L4lUm
+            tBhVbEvavYK2S1UXB1xg/X9AVtA05N75ggeB4D3yJnGnY4pXH4D8vAhgpTecsqkb
+            5BzCo2R/HTzj07bYw/k4PlGdbAGNJuwzo48GfLqPQy0qEpx5BS3NTzM6QlD8C45q
+            WQ4HxMEg5AcrArprwdPQjATIXqbcfDtQA+rxMtckjySOxYvxnfJeEzBH1crjDq//
+            18wmvQJFGKba6ztvC5Jou+3OaJnFSaDiVqhRBGlzcsre4aOrZusYY9ilRpY/a3PS
+            XgGgfHBTfP5IYruR5jbEi21aqJKxAh5gnnjMtrWnL/ObCabccfpyZer5xrnljV1d
+            nE9PQrCmefxMcUHbAoNYZPqI+JPd9TAvR33rVCfFd8uzCOGwIJq2rct3eXH7Xyg=
+            =fYOk
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/openclaw/openclaw-secrets.yaml

@@ -6,32 +6,32 @@ metadata:
     namespace: openclaw
 type: Opaque
 stringData:
-    CHUTES_API_KEY: ENC[AES256_GCM,data:Q+rolk3ZLF3lIEcGUcQYrJe0G0Eq7o+aafqK3wZfKnNxi4UiB5NM6+KcKbKi7FL4UeoMC2MQ+HuszJWfC+X5i4ADGzW5y3CAqMoOblgmjvN1qDWRc7zog1bKBqeHuDfiJn3KjUXf,iv:KCwxCRZqjO9qz4mI7NvEiY44Evk2mPB2aiDwzhcV+PI=,tag:C4EyScSpzFIpTIYPt7nBgQ==,type:str]
-    #ENC[AES256_GCM,data:dMUyQ2WCohbYG03WYtOu7ifCobP/HacAO3ag+TWFYYTe9j3stuZb54MwfA==,iv:R4nhUGdCaWZOizJY8ggMNhQWi9f8p+KCqqSBUn8+yRY=,tag:hT6jS5kDLyBlat/LunpePQ==,type:comment]
-    EMAIL_ADDRESS: ENC[AES256_GCM,data:bW8Gn7DVlbWlouZWyhAsMsUc0Zk=,iv:PGY3U+wsMuy0yF51c6SpreDEGTismFZnmankuzXqMhM=,tag:9iD1Svx3ls6nw7cThojclg==,type:str]
-    EMAIL_PASSWORD: ENC[AES256_GCM,data:ssLNISDNPEdpHqKsutc=,iv:bETkOG2yKtm9PrSCh7VgUfjPXzeIW/yIdPEsrzT76yE=,tag:AdRW8jnr/+Nh1RoqbBHRAQ==,type:str]
+    CHUTES_API_KEY: ENC[AES256_GCM,data:oTKKBNoJK9y9W6a7j8BYlorsaxiW+6a5ZUXAQvkCo17QV6XSyk6JTSyD+2q3RrdJ6M1oU1EYfz187boW0NxipAV6emyg0W8KTgaoz7g5bczh8i1tkSbtQFR2yXemnYZRanFXAcll,iv:kT/t1rL03b8XpxBuyqULkb8NQS9EHDq1HCFUXsJeyFw=,tag:VUicjcv8UDV4Ar7JZBiZcw==,type:str]
+    #ENC[AES256_GCM,data:zrcd7oMQVkQvN9o5Uuez51+nOY2f/pk2i4tU0Vptl4RLN2m3UiO2gli5pA==,iv:wb8SqVcYbRABqow+vZnzhEXv9m6Fa/mEDYz+dj+COmo=,tag:B8ms+oHlqWxiKwUe2vT+NA==,type:comment]
+    EMAIL_ADDRESS: ENC[AES256_GCM,data:T1S3nBNjvF2wY0S48DaGhStPUC0=,iv:uYFPix9QfYR3mdJO98pdnKRUACe3NP6YjU+7GOxWNV0=,tag:ifimYZeItSWGNthcDlLbAQ==,type:str]
+    EMAIL_PASSWORD: ENC[AES256_GCM,data:ny6xflUytsTgmNEBIFw=,iv:rOyJ+o8Fs9pdyH8pfC8hTw1mdf+pcPgrrOZSGNv7igY=,tag:3xw+p29WwiP7KTg05J9xYQ==,type:str]
 sops:
-    lastmodified: "2026-08-24T12:01:23Z"
-    mac: ENC[AES256_GCM,data:Rl1yVrIdYsBTaMMz0a9jEYQ7uVxvDBrmWCmFvGcyUQKr4Yfq56gaRMHItabgu2Vsch0o2X7ljeeTD75WoWeBhV51ne1TZo/E3x4fRl05Oz54bDF/59VUbP184ZqI9pw/WEVyumUtOyIwvBpsmkutryuE1aTzPMIz45YiwMctDrE=,iv:wwIVKBmxQiEauSeyUQ4F+oQHVKhcDDQDW4Kaxy0eVVA=,tag:Y4EmW0KjtGZsZ7vfDLCoWg==,type:str]
+    lastmodified: "2026-08-26T19:31:53Z"
+    mac: ENC[AES256_GCM,data:cNPNGuGkXRFm6uvie1cXLc+d6KhywAcg44ShjXWXSLlZOjKw6qu3nyin3Soe4/bHOy0SRj1E4p+aCGL/5l80Q9rDC6LSTTRMcJIn4l6fjq5+4y3nxmgiOVTELSD5+xOahpbXHTHugl4vEW0SV3ASqkE5NNmtsMYhJqKI/74oKWc=,iv:6LrsmFoheDMXLEjrsSc2b9Ns/7cU/IUqPHyTl+T5Vys=,tag:eazTmu1t4Xvc9+B9+f/P8g==,type:str]
     pgp:
-        - created_at: "2026-08-24T12:01:23Z"
+        - created_at: "2026-08-26T19:31:53Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//UJlw8rwq1mw4f6ePa3uCpVxTiCFFFjOdgOj0wsn1WXv6
-            k2fpGPV1JwIFj4Wj5AL7EqWH4iII5uxqft6XykjyhmXL2FHqO8ZN4Q/PIDpgakuF
-            le256k8KbhuVjUWjtZ73pGYUkB3X9ZBBIkh6XtHVtMaOpJc2mtekuZ5PWv3YhRGd
-            v/jswjzuVtjFoG4n4yimOXTQgN3HtiL08eznurRf9dz9X9s7pGI8pKqQk7cGiBv9
-            EnczRcXnTvJKVfjKAQeEsr4KGvhhrJMxtH4laSUu0xBabV8UEzuqC0q71gSBtmXr
-            5eHg5iFXjmcn1uXHYkKreEPkNTdh7hz3gW3qFJpRTtwYjTZzDjytoP6XVSq+avpS
-            kd4iqWeS4YFTFyMfPVRLZg9TJTTAXhSlhvx7qXUPOuKtuGaoEJY67F/tnIB2WEE+
-            WCgiWqsPGoXKEFI6Le7NrjsRnhJ3FLCnkd+kal8pypJOjgmJMEn8Jd1mfVxHY5gR
-            jk5wgRu38zUwnOSPiee2N1LsxphQCFazP3iNn3VXUyQ8hqAxilyD6gCUz2TNBEls
-            pZLFNrTdPb4Wz+hHyrXfMXW1zL5+1rUbdj6h1JFxJwg6ZC0togiFwIJrMgTexZE5
-            BLOM5xwqPEaXVe/0EdgHl2borMvhqLQkS1j8gOjMceH8hUPM6FWU/PxjvsfhlMbS
-            XgHJYRd0rrlzvBDh1AbAhzqo2kP01eLXEEnln6u54G70TuBxD752B2EsJRFII+ru
-            b/UgHWJtc+sAESED9bHzFCoTs9QXyMuAuRrMUHtpkSF8T4DyW7j8fFcS+C7FuDs=
-            =2HcA
+            hQIMA7uy4qQr71wiAQ//a+e4JtcGkgG6B5P0OJ01fMbFzJj/PpBhmhUDKOggnjrO
+            aLANNIHjmTnkSRWHAwIQJlsveE4oko/uTkZE4CULeszcAjeGdQHBaGNCxgcoiLJN
+            D38IP8v+4EiWcU7ynXl1tibUkI9JgZmeP6LNErioV0IbRiaWxqYHh5FYZ8D2WAJq
+            kZ4cGtqNjclcsxAhdbjpTLX7IVcJeIDEHoWoffRPW4/v6lIrfapUrA2wlxnm/Hvm
+            LIvYxDiZvRafe4tBu4j9KPzyiwJvAkTnWwBjDTFn8te9OzsigOYQEcMHYWNDMZxv
+            msIYdFyQnaJpsNd92uhRMMR8q7OqXnt6sAM2HURRoau0CIMwincgAHCRD49lPHfS
+            e5qufYjaHHnLMgELu+4G0DUGMhVAisT7R5/QETl2kDSCZEcwFvg5A53cjuzyhJjD
+            4kgddWPIYLrllNW3Jymemnveql+tOYIIMjOP97Vt4LwCFy547tBIsNcRaVI0pBFE
+            FpZIhEUo1IjxJ8nCL7ClaLgm+TeRkHhbZMy4LevTbv1uAauIb7HbhkVJC0+pmLQ8
+            6pQXNeOt2Arzy8cEPRtuZSFhzqeKkkBx5FDi2s1dfAa+yC4ks61hyf3RQ8/kgPzY
+            PcRjP/8CadJKLCm1qylQSUcrYFn3SalOFWzSiNIwmyNH0OyZG9B2UrsxZ0s3+i7S
+            XgENlAQ4vf3sNp+rPLCJIT0QCNjnHXI8A+cJlrjXDL90xUgM+PEu55kayciuHHzb
+            V50YPoy1nczQ6WZwrYu7lRR+cpk54zf2fiQnjQScWF/UFCJ0zKxasovG14lmsds=
+            =884u
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(data|stringData|.*key|.*crt)$

kubernetes/personal/paperless/postgres-values.yaml

@@ -6,8 +6,8 @@ image:
     imagePullPolicy: IfNotPresent
 auth:
     database: paperless
-    username: ENC[AES256_GCM,data:S7uuUdR9Xda5,iv:u70rbg0QT6tIOggzZ8caz3cRCh7DhtxaVj1KGvfgljU=,tag:RvERbQz/9Pr3SJmemm/BlA==,type:str]
-    password: ENC[AES256_GCM,data:n3rP8mKu6wM+WMLCFrQ=,iv:ge9HJkb6Y+WQodFwIC+kLr7MTFJwXwrwEdd4zIffos8=,tag:moiLXtBwnRQyREURuYk/Eg==,type:str]
+    username: ENC[AES256_GCM,data:QJg2amOMjGjl,iv:6voXFyOcS1uX1TgVTDysLpwmZKZGtvQFyEDPpCUpa4c=,tag:vZsCCg/0UnzVFjsQ4XLlHg==,type:str]
+    password: ENC[AES256_GCM,data:bKE4o5FXsaU6J71JCHc=,iv:nxr2YJW6syA2vdkRStbSCh2hUOnzHHh4djYA6YL6h0E=,tag:rT++kewjSd3/p+4c6zRgGA==,type:str]
 persistence:
     enabled: true
     size: 10Gi
@@ -21,28 +21,29 @@ resources:
         cpu: "1"
         memory: 1Gi
 sops:
-    lastmodified: "2026-08-16T09:07:01Z"
-    mac: ENC[AES256_GCM,data:Tv9mLhZqqz8eBYS+IKUV5fgpRf+iGSkHZF4+fcxk7k6AH3XLF5tsN31wx3MLdA8Wnk+zADobJtAHx8onQufyV+pvON5/8IUFGZKOuKv7tB6gQBeaNfrVans+gBSqnufxCsXkIrcAS25QZM9mFEM4ZnbJUNFzNvkoGotRtnwaIkA=,iv:QQVnbx3UL9e1Z7gyBWE8QahtQcC/hQ233sIAv6Zg/W4=,tag:yX/9iCBvJh/GaWIdSydKmA==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:aVqq/OZnLifCx2xO8eqTXlRfZgQ5mZkFnS6qx1yOHfe5UTqWnYKKpSpQaPk0kSh4a56nEDo8Sg8uUGRG8hE4fO5gyux88EWu2S5LQFL51O5g7p21KcsLD2CTf12aKqGIvwYvpRsVTekHpqVEqu0dxAotLaW2f0NSXsuCVwclpc4=,iv:CUjlO3O6z29/DO0JbPrdmu0iw9TwJ5QktN0o0K9eF6A=,tag:+xy9IdL4tJ8N5fux8NGMxg==,type:str]
     pgp:
-        - created_at: "2026-08-16T09:07:01Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//YXRqL71ibLBGFfmNZFEoFYJiPFfl/s7dwmd1hvyCHzY4
-            OA3i3ci7g/XLZYJIh+0xt/aLlgubDNwtgSKULn1T6jPKYec/eErPni4IEQOJYvLX
-            ZhJxrr7cxdm3kQ8sPw3lBzKa/fKfljrt0wsEeEligwHlqpbu8JutgGLW2qmVP7D2
-            58meumXOLZQylZysEbp8oCuRBzfyZ4dMrXMLzBXdv3TFm+PWUAnF+fB9L5UazLnf
-            fLjHXCEfpu73hg7mxuMCIanhvhwUbtBBS8bj+iR0CFrT2gBg4sdJcpEowCAlL1fR
-            kCtqPW44KP3Ho+1T8tSl3e0k0BFTxGCAfYJmv1JCMe2ejw3vr9rPZRZ8Ni/eXdoi
-            0C94eA009E2NCYWOLWnfTxMBjSKuyNpQGtRuLU/PrI3juuGCUY7VhX3EMxuqAdlG
-            zax3aJIBvAwuv1xlIbvvG2SPGnoSyLJ/Fd2mJlp49ZFYGGMtLtBXfgA50w+ng79j
-            hRFVbo2XmxfT6DM7TpfssWeGyNOkOS2khrmnOlej9VzUWMU69S1IxEAyQkZihOKf
-            PjzWzAx7N6r6JH0NUbJwM5wZ9TbqEfN7DqEI99N35Mdc9r51BOUr3BMiRBQQoLwI
-            fnfuauHMsPahsj5ndK5U3m62o7N0ezTzZqm8mDWyLH6NX0P3qnLmTQ6XzSIdsxXS
-            XgG0BHJfl+7I5Bki2b+PILhkIVu/DmJNRmGU+5nI3+2F/NruHEFs8OaQQthOOS7j
-            2QDPFVVAcNjWzHNkvYQOrIIBYGf084WsYlznACAcTyasp0LAamZc/S8sLt0RCas=
-            =qWxv
+            hQIMA7uy4qQr71wiAQ//UKL1JX0nvcucTccreWw1VlpVW5By8mDBr5jKaP7IdJoV
+            J/+gdgPNCQazO3JA+rmFar2rOiEKVL+cHaJvqKbD3XmS6p93FDTpde0KljLNlymj
+            rptGKJpOswPrAcTT1nuWQiDp32n9EOI6s9RmBVttqipWnjisN1/BCL2he4CT0fWr
+            ezqrlr9U2xfqvWSeku5dYUwluYo/x9corTXrsIJO2YVR1VGMLhc6FGvJrGYyJjWh
+            pt5xV7PsX800NVKmQTbcS9/r+jVWzXjQbyGyowk5g/NeS/8Jjv0VKC3wjj7LoTz+
+            5N0jv58seQJWTY8xrRegoWGT/KXTcVPfwZB4ZXKMACDHoJLuSqnpGlMdgY7GY4sV
+            BzDNYCpYgiy/0O6gl+LXHzSHLCPT2+HoR+akJJTvx1hPANg0axe+YcQiO4931ROJ
+            azn9FznfIeWfqIA3qNOi1jGhaAR1j/0M++D8ogW6VB+LDVvc26dN7bCkByYcdes6
+            uvnrulHOknscjwrjAlNfNyXmGm6gY1stoSwmfKR+emOQGaReJjPZl5f02U4yp5AM
+            tYKxB1Zzgzy1xeNNEpdiywKJEKua4D5K1IrRmhz44a0LZaaEKVMjeRnhU/yvt9RX
+            ++r0RbUuKhenL39QUgfatcSUK1YtP88TdYwTV0HX7wtvsPYe5nch5HDbrb0NipTS
+            XgHS2f4xvRYSbTGcxMfTJMXnkewf6O7dOn1sErYUUr4GSxKVBXycw4zFHsYIvvSO
+            g76KJ6Yd2z3xJN/jIPSGnfeWL20sN1VoZPRsDSb6RrAq7YisUSzdPk5j8OEzeJc=
+            =MZEy
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/paperless/redis-values.yaml

@@ -15,28 +15,29 @@ resources:
         cpu: 500m
         memory: 256Mi
 sops:
-    lastmodified: "2026-08-16T09:07:01Z"
-    mac: ENC[AES256_GCM,data:BQ9z3o4+aCrAdQvWJEXRWWcQLggmyoVi3YfqwdZUkYNNcECTZtlQsgK4/g2+ktuzlvUmuBuV0m5gZJ/HqEflVDXbhQiCtnKSSqJ1V/PNVFFCXans92uxzEl6EY++Qm+X07ookJiYv4leqruCm+uNdYlTWESnLe07TZhiTbN+7Z8=,iv:yzq3+U3fjbU8XQejllBynYmb+kexgOEiSMaYRGxvOTw=,tag:Nwn4kpQQXYpw97VTI9NL9Q==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:e9wC+D0aamMPY51uNvegO9qcFjZqjow7uprHYBQxf+iU4PIsKAwPIeLnsqYKd8CWgeAsHmxGkxgiLmbxB86bbmjl8VfwZyRvqXOSfMZZOCUS5w5Gn/upsQFhRttfmq6YNzkOV3KQbLuBTGQPoMtAAnCLmDKjVZlCxYt+8ViMlHY=,iv:qbDyQ3weywhJx3gmveLY7t/R1+5zLPHcOaU51Jh0XWk=,tag:C7LkgjkT6UrFqihDATyl4w==,type:str]
     pgp:
-        - created_at: "2026-08-16T09:07:01Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/+JywlDn4kNsVcrVM+bNEImlKvu/leYNRbh+eTKVeBqTdo
-            H+vuBr7+a7EK01CWejH4z6vYrf6H7Q3ey+GjW1GYQGPBMFYVFK8eyNkwOlBej+0B
-            xbqZ17MwDi9ODh6rjtvZ7gz3bCPXM+LAXgaxBo1GBM+MJTmIJ+Wzwgq+h1/YBMBY
-            Q1ksGb2jzD9ZqpIo9uLfiTf2y2Go7n9DQyuvK3ddxL94lM7YAZGx+HHxM9xrKNfJ
-            ITUS9CGR8T/bckzDpGLWEJY2biK1p5bKU48kWItZf7kPQKpVp/d1XKY/I2kL+o8W
-            iBi6vq6nRKhdDP0G3Eml0weUattsQ/dELJPSOps0NXioGI8w4hK2SWASGTdChHwN
-            9ni0CWC41jhRIsmMZ5K25C2nAwyieVPN3gP6jWoUgovho2/CKr8lSJ0AWfapT7Sx
-            2jUXcSF8SUdQlDErDLeN1qTxS/6TWOw0E9baaPRJVc0FNpa5LZZ3uUc+kCih75vz
-            CoqrYX8AP5tiO4OELzfMcWhNkizHGPjcEwjus4f8gXu7iIi7pAD+MRoM04Cz1cFz
-            NQz3fFBT3acPLVyLqa0GEn7EdPNYeyMY0uCm7sOhbGGWlZB5oZ0Gfi2FmJR7birA
-            az8LVvwqUsgQtCf6AdzOoqp9oUugo5smHJZgF1MsQzMhZjLG0REkV2OCg0KqiZ/S
-            XgHul345KCekjoxm4egkjKW81F4FesW9ci5GcROWj1UHtgUq5Y6JwE7Qab31uvjt
-            bHmyW0DqH5daOzRzStCIpx89RAc1xQ6EAalD5Kvrxq7IUMGWkG0WGt1btfXudoM=
-            =Y4Aj
+            hQIMA7uy4qQr71wiAQ/8D7I7gMnDoJLyj371WDayeV2SVos6gEscbIVFd9U+hiYA
+            qMHxRheqVpIzAEmBxhR/OnFMcYhUB+rBO18Hlvu2+dG3DxN5cemeJEwvVRC1v4uJ
+            RZfV0kHCLo3VKLGXJ9Wyc1fnKYYbVy/7qjXBY6Kbl/+1/FYRQ4K8Qh2jBhnkFy1o
+            yZlRWKcdz/JP8bPr6t1Axv00dV8L6jYQ1wVE+0HijVnzromOhVxemp/xpQ2Ftp1q
+            CJQDrdYTPI997zGFiy1TdR21f3ruCIS20mjLuc6tKjwAP8KFSDkXrtcmfrBixnU5
+            rmbDfMDuA0CNTvfYQQeFQPRn1X7gMDFl9p/Uv5hiV3LuQslXx60UjQAN63a8z/ry
+            DwjIAjXIEpE6PKTKols7WD96KmDy7Z730YcZfO/28BYcANxOLaPzGLK3ztQSYpLv
+            Cnk1F6w7Vzab6D2SAmUot6Zgg9va3V2/DQmJ9yv7MgdHhvfd2kkWf8PKNntc0QaG
+            hEs8dwOpKmZjCVVgA8C8enHZ3MmIXqfC/KU8boOeRSaEOG2PXwpuyTwoWvkA5+Ge
+            kDhyBWKV5sOBMvXqGqyDHy8F0K22Dz9kDbP6qtSkGjeJJ02LVik6GcW4V58N7Ebp
+            7k9z19CPDnjF1QGc3ymiGklkDMpLJ3Jwpytq/E7RgqRtMkflya1rAO9Os2ruKqbS
+            XgF+lvlfuoJBtHmSVe1llhfqcCIdQHEdibDSUhTcNG3twoCPGJU9p6clHRTohz6M
+            kitS/B0CRR98eNIjt6lSp03FNQRrVpLAgbAHBMZ9Q74QSdNTAvhR17dYWRelXe8=
+            =SjtQ
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/paperless/values.yaml

@@ -1,5 +1,5 @@
 env:
-    PAPERLESS_SECRET_KEY: ENC[AES256_GCM,data:wFTf9ng/oLUgFUIYAsOMZWLUyqz95zopQlX5KgY9LFk+hsR2xEyOtQ==,iv:w7NPvFRRUsxK+MtDZavaYkVGBN5E8KQD5gwl4YXSA8E=,tag:usuV4LJrlSEMpOu0Tv8HXQ==,type:str]
+    PAPERLESS_SECRET_KEY: ENC[AES256_GCM,data:3Bat50+Yj1UcbAVIHT++aANAMkQR5i+c3+qXcpQTiK41sPHTzI0hlg==,iv:aDTPaN8143XphZ/Bejwrs9vuOvBK9CCMJDM4tSJXnwg=,tag:nWNYp3dxKG4xEHtVaL4yPA==,type:str]
     # -- Redis connection (CloudPirates Redis chart service)
     PAPERLESS_REDIS: redis://paperless-redis:6379
     # -- DBENGINE must be explicit
@@ -9,13 +9,13 @@ env:
     PAPERLESS_DBPORT: "5432"
     PAPERLESS_DBNAME: paperless
     PAPERLESS_DBUSER: paperless
-    PAPERLESS_DBPASS: ENC[AES256_GCM,data:vyY2HtGJ/K0U8EkW8GY=,iv:4nIyQrsvD5chBAvnC7mXXoArRyDYfcYi/Bi1I+kutYU=,tag:JnVMFqNoFh6PyzlfZUY6Zw==,type:str]
+    PAPERLESS_DBPASS: ENC[AES256_GCM,data:na/7pUYyaprcTZzPtZg=,iv:K1043P7KqU/7oZYU8rA2wYyKbuyGEvuI5keepR8YWw0=,tag:MOg/JM4PZQPliF3JoHl97g==,type:str]
     # -- OCR
     PAPERLESS_OCR_LANGUAGE: fra
     PAPERLESS_OCR_LANGUAGES: fra eng
     # -- OIDC integration via Authentik
     PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
-    PAPERLESS_SOCIALACCOUNT_PROVIDERS: ENC[AES256_GCM,data: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,iv:CDXZXm1+UP2Ctp1/vJpLwWWPm6c+FD/F9FFRuH1GDwU=,tag:PQTYdaheTTu3gKT1CfjCog==,type:str]
+    PAPERLESS_SOCIALACCOUNT_PROVIDERS: ENC[AES256_GCM,data:haqI1TF+9/qv++u13rwt1H4ulnqeDOIyTfV20LfZzQ3s4/RrmCM/jqTa/AVNBoXjaMi1XYOd/heR4AmBCQK2S7qZuQMIEVF2RuGbWxmlMziyPwGBPsQilCWUi8cWBROXxYfSnCbhaLlTUszfZekHgjdfRXSFtt0W2QouvWzzlAmOB1BNshxgTWVNnxlMDDzDrYOjTa0qY5SjBKIW2e6v44Tqt5hDaZWNUAVinC46nAYJSm2p77+A2sU7/JRKiIoxpA9N3uXSZgVhseiGCqWoRjGlhbP/UtkWg7NM2g2129vk2N7Jj+gH5wm1XZSzYjBJ4Dw3VO+onp4jNHms2CIaS0zEenzY4vwIBWGrBXByI9yS/oPzgCNGuA++HiRdV/DUPhc7Vos4qIepRzVXmdb4sfCXx211fxHQbfc1U/1vWAwysLdFmcc+4UJ5WG+OLv/tHIt4wvnEYyCzzAwnu6B/RRNnPLVZl6mhfyig9Ybaqn+jKPbepiL9al36uPpbnKLCNOjZ82jkbf2/ShGT/u2swydqd6ATUE8J8K8JJ0nYMaKoPOr1XatigfM=,iv:Az1X+MeQcslqgJOpmR/+6rwilJ6UJijppMvJ5WsxsL0=,tag:wi/aezWzbmu9iZsgN23Bpw==,type:str]
     PAPERLESS_ACCOUNT_DEFAULT_HTTP_PROTOCOL: http
     PAPERLESS_TIME_ZONE: Europe/Paris
     # -- Reject duplicates
@@ -53,28 +53,29 @@ resources:
         cpu: "2"
         memory: 2Gi
 sops:
-    lastmodified: "2026-08-16T09:07:01Z"
-    mac: ENC[AES256_GCM,data:RXzsGHok4t1L8bgCrDGBpbjTXx/ZFPIf+MVmYQTznqTptKAmPqtaruhylEmB0r6lXCUi9HWHvBpjXROhtost4zRzg3d+O240VsVDHcbDEodHISVxD54Dhd18lDyHWVWpyhyMxbHY0RDW0H3Zz0+gAPHA0HDHdVPBK4doCBF+pQE=,iv:nvqLFy+lsXHAd58VGXL7r9qdnlKcyfaznhyRY5E2V8w=,tag:3E3zkbsHy5IdIs5HbtO1+A==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:U4bCrsT7XSlFnQMDT3HHW4XUmE1KHXD3EEaygAhI4AYwMxooxBKBKXGOvYtDOqE237MBhgDpPj5qAGF8Li5Oqxz/2IlNANk/ifZMteFna4TTbBLaGaMj3ptjtDH++aP2WwB2/CDsH0oaLIpFXvgB6/wJDS9zj1fQEpfafQUFbY0=,iv:/DF1bQJKI3MFN7Od2/z30S3yfmuednEb8kML9monMcI=,tag:NC7i+Fvms0hKOjgPnRb4DA==,type:str]
     pgp:
-        - created_at: "2026-08-16T09:07:01Z"
+        - created_at: "2026-08-26T19:28:04Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//VNeqlQFXKPGY/K3AvJLFpI38fD6SROdnEd0O4WHbtSMu
-            Cv15zBpF2bx5+P1bxBHpPCJNetNdltcLv6cV370pkew22VI67o+txfCLImVMhriK
-            zrM/SFGVeZvmXIQRhClegwPTPxjMo58RU229rDghjmlQOfNeitqUWOLkOZb6WkWF
-            uFsIKd9ulmA04V2USrD/IcK6Vcl3P5LZS/gTTqTsw87zXx1yUGn43CBlkJ0NQbjD
-            cWCfcvYJzLS58Jr65kSFZthjeb3k7n891OmoO1x/sW9DBa82ckmk1GBfelATCwpy
-            0Gt/3iR4SU7q2R0bpEPhE8W0pCk6nBv7/gsqSKDe5c1aABoBhBVwBecAE/LKVjrS
-            nIuj40ehPTWuaT1GJYzELy0iPQCNNrbCxBHaYcpY9Jkg1Z0Poun5j+QymTVRS/Qj
-            HOZQXgFzeLrXI6fZE1IeKOuBDxxCSRUiMn/watR2+Lwrpqoz3vvuZmLc5OU41Gw/
-            MHTOuFcLZ3gw3Gdt6umMqNKBrqBxxsbYtHDC8cNNPiKDg0ajXqm3x1Tfq9AiEnmm
-            eRbn2/5dLkMEZMA2QWdOx/1KNytvvzb9FxrwJOE4PBjTCsIyjn7I9X1drduy9xS9
-            z71fwdVkKD8yBdB+IiDf5/J3HPDTH+DYl8hYHQUaZwyV7K/taz1pslFprjJJdojS
-            XgF6lMymEyNvLn+LNGPpbAJizrwN/3IM25G712RpV1H8EjCxbh85nFnfegOZWAmM
-            GsD9dUkm3ose357y1ejh1HKh29HQdOyNP9mfZpybNj8L2/q9isVa3lIQepTJ+r0=
-            =Ok29
+            hQIMA7uy4qQr71wiARAAwIXwCILszqO7HqCMKf4RfogrZ+fLJDGSa2r2FnmAl8Ig
+            MOFX+OKnuiofIkO4gSBF82CWuN4YnNSKU2o2Yk9zClxx+vaAwm3BZIg9cqJcIw89
+            85loMaMFhjfSoA5kFzXMGqC78SJYo1CIQSbrOqNSd73RlTQTqYf0ceHVaoKDbfb1
+            kAb8LcbxIzNq1AXXCMt4yaFfwoEZhCGdYmjftcob3mm4g4wbEKm8cGsesQ/gBcIg
+            KRclhCTo9DIvYbmzvqDpoC111rNWMcuM8HNsN73Yi5b5RbodEWplBa33veJvXYbP
+            zwxEOENCDTjwUKvIPy23MWXVePJ+omTXuzKm68eu1ez8ddvcYxHijmBtZ2Kjudix
+            Tt2SARHIsKIRMZn88j1QpNWyoZXWIWK9Zz5CjAUIwb5Gu3LY9tknuG9HMu+r9t1U
+            YJkSLPKIQaqNknUaPzCNkqufa1BG+WObAWpRXAxJblOC5YI1koMO9Z4DkF048Y3D
+            5pYEgSyOl82E/lLogkjGCi69M/iE0/YmqdVcznc1hNHkYCKh0gK82R0U5okDoYIN
+            gb23yT5SYosUnzss4wEvnm0LMe66yA3vffHEhQzY8lSxg1rM9j9ky7fr8H2HgHra
+            1RcFk3cu3OadfppfFkaQbrL7tZ8xrEc9RSyJDdxtXgmBJ1ynVAulbUQfrdoPfsbS
+            XAGKQIopMAoh9q7Bz+WoxOGTx7FTbOqslnRb4FD4HfjTwLicsQSW7x5WPDZ410MB
+            WD0tRys6zGGkwAmXNdjQlQP51BAPo3aFg9J//LazrZIafJ78/cULvkZ7tJ2A
+            =Pg7l
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2

kubernetes/personal/radicale/values.yaml

@@ -4,7 +4,7 @@
 replicaCount: 1
 env:
     - name: TZ
-      value: ENC[AES256_GCM,data:aOeUzoi3PC8rjf8A,iv:xJpXljsxr61EhJvy6YiZU5mFXdWij6LCsQE8FIOgGZw=,tag:QMV8RzHlOilzTG45smv0yg==,type:str]
+      value: ENC[AES256_GCM,data:KEcOJfkU2JYAOQv8,iv:DrPCrrhkXja3gst7OJKJ+aWvZiO2+ITw420JBukOR0Q=,tag:uDvIa1XZJGfyoYlikkxJpQ==,type:str]
 config:
     # No authentication, LAN-only exposure behind Traefik. 
     auth:
@@ -33,28 +33,29 @@ resources:
         cpu: 500m
         memory: 256Mi
 sops:
-    lastmodified: "2026-08-24T19:16:53Z"
-    mac: ENC[AES256_GCM,data:o9/Kj3saNHqymzpAgJH+vpA5YiiHxE/XW4QUbG5mdndGgxqsLqTTp2vRdzwE11tj0hGxe3dHKv/DgMhcHllMcvBnJk30JZcj5UqK3LioCfozXNpveL56vsq61ZvjZf71sfgXqQT0CfzMRxqj9DG5WhEUGcKmwTbI4RZFFNWsOSM=,iv:msO8/hPrfzVm3Pp4CJswmTQX6uiAsOBN2hF5JKMxKTs=,tag:0PlvpRQpkXYx+WP+IZwh2w==,type:str]
+    lastmodified: "2026-08-26T19:31:54Z"
+    mac: ENC[AES256_GCM,data:hbhDZjTboKtyFEjKCghRbcNAD1WTdD+IlayaCWPY40zp0tvb+rvjggF7MvdQNjqjOof0yQpp74eVlH8To0CUqTJQT6g5bCxgttv5jT+T0/Myz/U2T1xz28tMczJapQ/fFg9CoCmElc36ucfLEmbrl9dcdYH01p5zKIQbTxssYFE=,iv:4vt3c1wTcws6BCplDm5bKRtie3xSaVjKpyUhldzg93k=,tag:9EdiEkKVtfcfck2RpnlpVw==,type:str]
     pgp:
-        - created_at: "2026-08-24T19:16:53Z"
+        - created_at: "2026-08-26T19:31:54Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiARAAvad1UZD+8o8EnpkOIAEcYMhJPbS0c8rAZHC7vHJdK1gn
-            Q5UZOSmRuGffXeD1oUOADM4ozDmKqq4wRl6doomky4MCXLb5FojgOoaUwzm/Sx+9
-            YeqWob1DQCSnlF/Dksj5wFnm1amAK8XXIJc5nelwoYSMH8Xby2ZnyzTEmfWcPFul
-            8IVrSEv2/JrJfmSU1ogXrKvVe+hrQ+Qixi5JTpmMYtUD8LiZMGCsK4VRVN3N7ie+
-            CgTx+OTb8G53h9DwVbVh8ct1rTlBB4EJBzN7bRDPrgu/mTtw2h/Rb9YfGfJ/tDDH
-            TFfgpVaeYkhTOxZwGosRztaD/qLBoSoiRZc3ZDU/fyD677PtkX6KHyxpNLSZThH6
-            XbSi2n6LTpDXFQbo6OtHtOMdn7B/wXAE+IErWeRx2RbO0MF3bM7p9x/ahXl+0BTm
-            U6q3+bsDmkdNN2TWUXuCPcIhtu9dwNZLewbxVcus3zrOmiEpR8jZWcOzp42QJeE4
-            kcXptlPNzSlGyjB3Oll/uIhaKiKKonIQq7W3w+LHuJi1bO5qDbQjb1L89Rm/hlW4
-            h4OssMz4pkeqsEcDyo2vCXYJ4cyrnUSeOTgiS6NOeVxHe+deVbTsW+ScLh55CGmh
-            ANiG7cJO7Dp8soIvaw6hpj6RiIA5Ifi6mGp2SCoXtOk06JPuskUKzdHFeZejobzS
-            XgEqYjYCIJY+/R2eiC+n8eGrCrGTZ1kQrbCTQnoZjdEJe0vKbIY89o6I/oMvxqSl
-            X+qzUG+vbdTboV3svUqjNBv2vX/hMr1OSvrfyEnncaqc2Gmika5eaDtl0bPYy7k=
-            =TQys
+            hQIMA7uy4qQr71wiAQ/9G5KO5oSV9/JM8c5nbeKYJ3gEYBkgRyVzWDRYuJnq/pjv
+            ryFaMSG9llmIVKEjSkNwrLcnCN0OXRzeeEFKWwm7V5n9qBvLz+wTGaEeFXklpg2Z
+            EvAiaWzgUYRTvhFxSx9QXojjdy62Ym0mK8lu/TFtCf8POzvm5zqH26091NK608lo
+            mc/XLXVNA5l9iRZbHHeRJC6RxSDheQPop/kx6qn5ZxsCgveHWmolIxkX14ixdMkG
+            SHaRmGqJC0jWMhUBXFYvbd/86mEM126XKkQjAzIf54NJNQDoctKMOGbgKfThE5u+
+            i7K7K1syTJe03eHCU6SC4u+90jaEjN1QIWr433A4Bna2zVfT2/HEKcfGKmY6TAuR
+            PgpsBss+LiMKNHfDTENdmGuiRurXNxVNezk0X2PsYEEdDGJ0JbmxFx2vj0Zhgm1L
+            mv4YbqCODcGDwlArRKH72qfnxj0g8ZCjLbZRziGNo/Rbl83T4wQfaWhybE9hXOP7
+            QxlGCYutWWd3llRYdWry14TqZxGABnDv/6yDHWjg5wZC3NPd4KQbMptjnb6u3V5m
+            rFCJZsRMrCD+84D1EaRu0NLtPCRp0trq0oZ9L2F20UKp1W3n9cTXjBdD2AKYYIG4
+            EvhvMmTKiQYjKnD4GQqeiztdIEj3Wwq6eabfjF6lwM8XmWx9OG2Z9jh65jb3xenS
+            XAHH/pgI4LF27j6OAglSu5c3l35OWHWV+mlM0LZUevc7GkEvErVJHVTU8iZFN07Y
+            JdEi5rzz4wpGEjOaQkcvnSNcCIUUOlg2k1SizCFlYlZMBbmtwafuvQKb7MMC
+            =chFT
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2