chore: update secrets

config/hosts/imxyy-nix-server/default.nix

@@ -22,5 +22,7 @@
     ./minio.nix
     ./build.nix
     ./immich.nix
+
+    ./efl.nix
   ];
 }

config/hosts/imxyy-nix-server/docker.nix

@@ -5,5 +5,10 @@
     enable = true;
     dockerCompat = true;
     dockerSocket.enable = true;
+    defaultNetwork.settings.dns_enabled = true;
+  };
+  # avoid collision with dnsmasq
+  virtualisation.containers = {
+    containersConf.settings.network.dns_bind_port = 5353;
   };
 }

config/hosts/imxyy-nix-server/efl.nix

@@ -0,0 +1,52 @@
+{ config, secrets, ... }:
+{
+  sops.secrets.efl-tuwunel-env = {
+    sopsFile = secrets.efl-tuwunel;
+    format = "dotenv";
+  };
+  virtualisation.oci-containers.containers = {
+    tuwunel = {
+      image = "jevolk/tuwunel:latest";
+      volumes = [
+        "tuwunel_db:/var/lib/tuwunel"
+      ];
+      ports = [ "6167:6167" ];
+      networks = [ "podman" ];
+      environment = {
+        TUWUNEL_SERVER_NAME = "mtx.eflx.top";
+        TUWUNEL_PORT = "6167";
+        TUWUNEL_ADDRESS = "0.0.0.0";
+      };
+      environmentFiles = [
+        config.sops.secrets.efl-tuwunel-env.path
+      ];
+    };
+    mautrix-telegram = {
+      image = "dock.mau.dev/mautrix/telegram:latest";
+      ports = [ "8099:8099" ];
+      networks = [ "podman" ];
+      extraOptions = [ "--ip=10.88.0.254" ];
+      volumes = [ "/var/lib/efl-mautrix-telegram:/data" ];
+    };
+
+    send = {
+      image = "lanol/filecodebox:latest";
+      ports = [ "12345:12345" ];
+      volumes = [ "/var/lib/send:/app/data:rw" ];
+    };
+  };
+  services.caddy.virtualHosts."mtx.eflx.top" = {
+    extraConfig = ''
+      reverse_proxy :6167 {
+        header_up X-Real-IP {remote_host}
+      }
+    '';
+  };
+  services.caddy.virtualHosts."send.eflx.top" = {
+    extraConfig = ''
+      reverse_proxy :12345 {
+        header_up X-Real-IP {remote_host}
+      }
+    '';
+  };
+}

config/hosts/imxyy-nix-server/net.nix

@@ -148,7 +148,10 @@
     enable = true;
     configFile = config.sops.secrets.dae-imxyy-nix-server.path;
   };
-  systemd.services.dae.after = [ "sops-nix.service" ];
+  systemd.services.dae = {
+    after = [ "sops-nix.service" ];
+    serviceConfig.MemoryMax = "1G";
+  };
   sops.secrets.mihomo = {
     sopsFile = secrets.mihomo;
     format = "yaml";
@@ -405,6 +408,35 @@
           localPort = 443;
           customDomains = [ "memo.imxyy.top" ];
         }
+
+        {
+          name = "efl-matrix-http";
+          type = "http";
+          localIP = "127.0.0.1";
+          localPort = 80;
+          customDomains = [ "mtx.eflx.top" ];
+        }
+        {
+          name = "efl-matrix-https";
+          type = "https";
+          localIP = "127.0.0.1";
+          localPort = 443;
+          customDomains = [ "mtx.eflx.top" ];
+        }
+        {
+          name = "efl-send-http";
+          type = "http";
+          localIP = "127.0.0.1";
+          localPort = 80;
+          customDomains = [ "send.eflx.top" ];
+        }
+        {
+          name = "efl-send-https";
+          type = "https";
+          localIP = "127.0.0.1";
+          localPort = 443;
+          customDomains = [ "send.eflx.top" ];
+        }
       ];
     };
   };
@@ -550,7 +582,6 @@
         "music"
         "ai"
         "sy"
-        "minio"
         "immich"
       ];
     in
@@ -558,16 +589,15 @@
       enable = true;
       resolveLocalQueries = false;
       settings = {
-        server = [
+        no-resolv = true;
-          "120.53.53.53"
+        server = [ "192.168.3.1" ];
-          "223.5.5.5"
-        ];
         address = map (sub: "/${sub}.imxyy.top/192.168.3.2") subDomains ++ [
           "/imxyy-nix-server/192.168.3.2"
           "/imxyy-cloudwin/192.168.3.4"
           "/printer.home/192.168.3.53"
         ];
         cache-size = 0;
+        log-queries = "extra";
       };
     };
 }

flake.lock

@@ -5,11 +5,11 @@
         "fromYaml": "fromYaml"
       },
       "locked": {
-        "lastModified": 1746562888,
+        "lastModified": 1755819240,
-        "narHash": "sha256-YgNJQyB5dQiwavdDFBMNKk1wyS77AtdgDk/VtU6wEaI=",
+        "narHash": "sha256-qcMhnL7aGAuFuutH4rq9fvAhCpJWVHLcHVZLtPctPlo=",
         "owner": "SenchoPens",
         "repo": "base16.nix",
-        "rev": "806a1777a5db2a1ef9d5d6f493ef2381047f2b89",
+        "rev": "75ed5e5e3fce37df22e49125181fa37899c3ccd6",
         "type": "github"
       },
       "original": {
@@ -105,11 +105,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756365413,
+        "lastModified": 1757320803,
-        "narHash": "sha256-rWJqnFNh+xAoXLPMOUWvb2jMUUgGs4PKI/p2lgUczBA=",
+        "narHash": "sha256-7PUIQOMQSJLkNtV42SAYUDw0mRdbBNl6q8pLN8GViwM=",
         "owner": "catppuccin",
         "repo": "nix",
-        "rev": "842da43be0d00d7cf4c26faf279bc71a614c259b",
+        "rev": "d75e3fe67f49728cb5035bc791f4b9065ff3a2c9",
         "type": "github"
       },
       "original": {
@@ -127,11 +127,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1756606761,
+        "lastModified": 1757789833,
-        "narHash": "sha256-lcHMwq0LVcS1mP9o0pq00Von8PsXMsFPPo3ZXGWa7DU=",
+        "narHash": "sha256-cpYiHtQ9ROyutuFEkqDNkc3sOVayEeNHAtCVQI5reoc=",
         "owner": "chaotic-cx",
         "repo": "nyx",
-        "rev": "9e9e58125b4ba190658235106858f9733b25a1b4",
+        "rev": "5a088eb3f84aeea80b2d240e25c4f72a0fbdea4e",
         "type": "github"
       },
       "original": {
@@ -191,11 +191,11 @@
         "rust-analyzer-src": "rust-analyzer-src"
       },
       "locked": {
-        "lastModified": 1756709111,
+        "lastModified": 1757745213,
-        "narHash": "sha256-xv2u5dnQpdWkrIy5TBSomr055odWtRSoECSGBzNpp3w=",
+        "narHash": "sha256-P9VX/P2mN96MkFN8hwCYUQ+LV1bfH57UJ/pGwjd0Olc=",
         "owner": "nix-community",
         "repo": "fenix",
-        "rev": "113eba389317407992ea219d5aaced44bf6407f9",
+        "rev": "1458349a1bd55105f917e962dca4b328ac0a55e8",
         "type": "github"
       },
       "original": {
@@ -207,11 +207,11 @@
     "firefox-gnome-theme": {
       "flake": false,
       "locked": {
-        "lastModified": 1748383148,
+        "lastModified": 1756083905,
-        "narHash": "sha256-pGvD/RGuuPf/4oogsfeRaeMm6ipUIznI2QSILKjKzeA=",
+        "narHash": "sha256-UqYGTBgI5ypGh0Kf6zZjom/vABg7HQocB4gmxzl12uo=",
         "owner": "rafaelmardojai",
         "repo": "firefox-gnome-theme",
-        "rev": "4eb2714fbed2b80e234312611a947d6cb7d70caf",
+        "rev": "b655eaf16d4cbec9c3472f62eee285d4b419a808",
         "type": "github"
       },
       "original": {
@@ -300,11 +300,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1751413152,
+        "lastModified": 1756770412,
-        "narHash": "sha256-Tyw1RjYEsp5scoigs1384gIg6e0GoBVjms4aXFfRssQ=",
+        "narHash": "sha256-+uWLQZccFHwqpGqr2Yt5VsW/PbeJVTn9Dk6SHWhNRPw=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "77826244401ea9de6e3bac47c2db46005e1f30b5",
+        "rev": "4524271976b625a4a605beefd893f270620fd751",
         "type": "github"
       },
       "original": {
@@ -499,11 +499,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756261190,
+        "lastModified": 1757698511,
-        "narHash": "sha256-eiy0klFK5EVJLNilutR7grsZN/7Itj9DyD75eyOf83k=",
+        "narHash": "sha256-UqHHGydF/q3jfYXCpvYLA0TWtvByOp1NwOKCUjhYmPs=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "77f348da3176dc68b20a73dab94852a417daf361",
+        "rev": "a3fcc92180c7462082cd849498369591dfb20855",
         "type": "github"
       },
       "original": {
@@ -519,11 +519,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756683562,
+        "lastModified": 1757809953,
-        "narHash": "sha256-3fcIqwm1u+rF3kkgUYYEIcLrs93+Pi+a6AwiEAxdP5g=",
+        "narHash": "sha256-29mlXbfAJhz9cWVrPP4STvVPDVZFCfCOmaIN5lFJa+Y=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "fccb44df77266a3891939f35197f538dace3442f",
+        "rev": "17a10049486f6698fca32097d8f52c0c895542b0",
         "type": "github"
       },
       "original": {
@@ -594,11 +594,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756201372,
+        "lastModified": 1757230583,
-        "narHash": "sha256-bK5j5cwJgO5AZXlDl5AgISzpOv9YV1Fcv2nDr9RW/5o=",
+        "narHash": "sha256-4uqu7sFPOaVTCogsxaGMgbzZ2vK40GVGMfUmrvK3/LY=",
         "owner": "Jovian-Experiments",
         "repo": "Jovian-NixOS",
-        "rev": "9f6745bd704ab7f2617d41c2b02f4fd5f9ed0e89",
+        "rev": "fc3960e6c32c9d4f95fff2ef84444284d24d3bea",
         "type": "github"
       },
       "original": {
@@ -663,11 +663,11 @@
         "xwayland-satellite-unstable": "xwayland-satellite-unstable"
       },
       "locked": {
-        "lastModified": 1756682877,
+        "lastModified": 1757813984,
-        "narHash": "sha256-jirnu4rfVRRsocFOjJBPrOZrW8paXlOX0Q6LqsWTNoA=",
+        "narHash": "sha256-LrCMacdjesK2GW8aA5/eGEkh3jAut6HG0vRkpnGfN3I=",
         "owner": "sodiboo",
         "repo": "niri-flake",
-        "rev": "aa79c2a5bcd69e8bb167e3de782aabd1a1f578cd",
+        "rev": "e1088ad97a72f86afadd1e76086a4e74cc224153",
         "type": "github"
       },
       "original": {
@@ -696,11 +696,11 @@
     "niri-unstable": {
       "flake": false,
       "locked": {
-        "lastModified": 1756628420,
+        "lastModified": 1757656821,
-        "narHash": "sha256-GWuU2XP+/72ybXSMXDugP3/qNbgyQWSFE9ZG5euk8cc=",
+        "narHash": "sha256-MDaLusQZflxngGMU41g6cqabM7KE8I55UazzAZsjNN0=",
         "owner": "YaLTeR",
         "repo": "niri",
-        "rev": "db419b4fc7dbfb32a5c954502839c2331bcb4ecc",
+        "rev": "b7909dbf61c7c1511b9a51ef46e1d503d5ba3d05",
         "type": "github"
       },
       "original": {
@@ -799,11 +799,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755261305,
+        "lastModified": 1757671225,
-        "narHash": "sha256-EOqCupB5X5WoGVHVcfOZcqy0SbKWNuY3kq+lj1wHdu8=",
+        "narHash": "sha256-ZzoQXe7GV7QX3B3Iw59BogmrtHSP5Ig7MAPPD0cOFW4=",
         "owner": "nix-community",
         "repo": "NixOS-WSL",
-        "rev": "203a7b463f307c60026136dd1191d9001c43457f",
+        "rev": "42666441c3ddf34a8583a77f07a2c7cae32513c3",
         "type": "github"
       },
       "original": {
@@ -814,11 +814,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756542300,
+        "lastModified": 1757598577,
-        "narHash": "sha256-tlOn88coG5fzdyqz6R93SQL5Gpq+m/DsWpekNFhqPQk=",
+        "narHash": "sha256-+PccWxBVh1cFy2sDWHlpSBG+OP0b6o/DE2EzCxsB0ns=",
-        "owner": "NixOS",
+        "owner": "PedroHLC",
         "repo": "nixpkgs",
-        "rev": "d7600c775f877cd87b4f5a831c28aa94137377aa",
+        "rev": "7bbfafff0e9f1c9a0d10ca4d4c26aaa49a13d893",
         "type": "github"
       },
       "original": {
@@ -842,11 +842,11 @@
     },
     "nixpkgs-master": {
       "locked": {
-        "lastModified": 1756721345,
+        "lastModified": 1757814425,
-        "narHash": "sha256-KAXJvrvdjxHUIEe+u1U8SEXT2SJZr0Zin6ip30O+VeE=",
+        "narHash": "sha256-MZ8UBVELoZHAG10h8y/yEMw5lv8WPn+1WEvEUSpEs8o=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "95cce9dfd1c54c8b97043ae7f8adca6ed6fcce93",
+        "rev": "c659633bbfeeb25a2e6d70fb086299d989e248f7",
         "type": "github"
       },
       "original": {
@@ -858,11 +858,11 @@
     },
     "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1756617294,
+        "lastModified": 1757545623,
-        "narHash": "sha256-aGnd4AHIYCWQKChAkHPpX+YYCt7pA6y2LFFA/s8q0wQ=",
+        "narHash": "sha256-mCxPABZ6jRjUQx3bPP4vjA68ETbPLNz9V2pk9tO7pRQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b4c2c57c31e68544982226d07e4719a2d86302a8",
+        "rev": "8cd5ce828d5d1d16feff37340171a98fc3bf6526",
         "type": "github"
       },
       "original": {
@@ -874,11 +874,11 @@
     },
     "nixpkgs-stable_2": {
       "locked": {
-        "lastModified": 1756715708,
+        "lastModified": 1757810152,
-        "narHash": "sha256-O7gHNflgsGFC9O0ljoHkn5yk0ah2eFztt6pdfBXsyxY=",
+        "narHash": "sha256-Vp9K5ol6h0J90jG7Rm4RWZsCB3x7v5VPx588TQ1dkfs=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "9d3df7c61524ca09c20bf39051a44652d477cfea",
+        "rev": "9a094440e02a699be5c57453a092a8baf569bdad",
         "type": "github"
       },
       "original": {
@@ -890,11 +890,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1756542300,
+        "lastModified": 1757745802,
-        "narHash": "sha256-tlOn88coG5fzdyqz6R93SQL5Gpq+m/DsWpekNFhqPQk=",
+        "narHash": "sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d7600c775f877cd87b4f5a831c28aa94137377aa",
+        "rev": "c23193b943c6c689d70ee98ce3128239ed9e32d1",
         "type": "github"
       },
       "original": {
@@ -954,11 +954,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1756542300,
+        "lastModified": 1757745802,
-        "narHash": "sha256-tlOn88coG5fzdyqz6R93SQL5Gpq+m/DsWpekNFhqPQk=",
+        "narHash": "sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "d7600c775f877cd87b4f5a831c28aa94137377aa",
+        "rev": "c23193b943c6c689d70ee98ce3128239ed9e32d1",
         "type": "github"
       },
       "original": {
@@ -980,11 +980,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1751906969,
+        "lastModified": 1756961635,
-        "narHash": "sha256-BSQAOdPnzdpOuCdAGSJmefSDlqmStFNScEnrWzSqKPw=",
+        "narHash": "sha256-hETvQcILTg5kChjYNns1fD5ELdsYB/VVgVmBtqKQj9A=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "ddb679f4131e819efe3bbc6457ba19d7ad116f25",
+        "rev": "6ca27b2654ac55e3f6e0ca434c1b4589ae22b370",
         "type": "github"
       },
       "original": {
@@ -1020,11 +1020,11 @@
     "rust-analyzer-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1756597274,
+        "lastModified": 1757362324,
-        "narHash": "sha256-wfaKRKsEVQDB7pQtAt04vRgFphkVscGRpSx3wG1l50E=",
+        "narHash": "sha256-/PAhxheUq4WBrW5i/JHzcCqK5fGWwLKdH6/Lu1tyS18=",
         "owner": "rust-lang",
         "repo": "rust-analyzer",
-        "rev": "21614ed2d3279a9aa1f15c88d293e65a98991b30",
+        "rev": "9edc9cbe5d8e832b5864e09854fa94861697d2fd",
         "type": "github"
       },
       "original": {
@@ -1042,11 +1042,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756434910,
+        "lastModified": 1757730403,
-        "narHash": "sha256-5UJRyxZ8QCm+pgh5pNHXFJMmopMqHVraUhRA1g2AmA0=",
+        "narHash": "sha256-Jxl4OZRVsXs8JxEHUVQn3oPu6zcqFyGGKaFrlNgbzp0=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "86e5140961c91a9ee1dde1c17d18a787d44ceef8",
+        "rev": "3232f7f8bd07849fc6f4ae77fe695e0abb2eba2c",
         "type": "github"
       },
       "original": {
@@ -1062,11 +1062,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755217133,
+        "lastModified": 1757537828,
-        "narHash": "sha256-rnc6cHwCz/o6/pjDiwODNXRxtKfewjho+2ogvDkbiBU=",
+        "narHash": "sha256-6FxXJ/Q58hNrQ3aOdxcOsSCpfYnbtReGApGzfhACVmQ=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "0936ef21bed8aae3cc15a913e1445f0df28e19dd",
+        "rev": "457ed19640a808807e58e19cbd0a5761dbb0ed60",
         "type": "github"
       },
       "original": {
@@ -1097,11 +1097,11 @@
         "tinted-zed": "tinted-zed"
       },
       "locked": {
-        "lastModified": 1755997543,
+        "lastModified": 1757360005,
-        "narHash": "sha256-/fejmCQ7AWa655YxyPxRDbhdU7c5+wYsFSjmEMXoBCM=",
+        "narHash": "sha256-VwzdFEQCpYMU9mc7BSQGQe5wA1MuTYPJnRc9TQCTMcM=",
         "owner": "danth",
         "repo": "stylix",
-        "rev": "f47c0edcf71e802378b1b7725fa57bb44fe85ee8",
+        "rev": "834a743c11d66ea18e8c54872fbcc72ce48bc57f",
         "type": "github"
       },
       "original": {
@@ -1176,11 +1176,11 @@
     "tinted-schemes": {
       "flake": false,
       "locked": {
-        "lastModified": 1750770351,
+        "lastModified": 1754779259,
-        "narHash": "sha256-LI+BnRoFNRa2ffbe3dcuIRYAUcGklBx0+EcFxlHj0SY=",
+        "narHash": "sha256-8KG2lXGaXLUE0F/JVwLQe7kOVm21IDfNEo0gfga5P4M=",
         "owner": "tinted-theming",
         "repo": "schemes",
-        "rev": "5a775c6ffd6e6125947b393872cde95867d85a2a",
+        "rev": "097d751b9e3c8b97ce158e7d141e5a292545b502",
         "type": "github"
       },
       "original": {
@@ -1192,11 +1192,11 @@
     "tinted-tmux": {
       "flake": false,
       "locked": {
-        "lastModified": 1751159871,
+        "lastModified": 1754788770,
-        "narHash": "sha256-UOHBN1fgHIEzvPmdNMHaDvdRMgLmEJh2hNmDrp3d3LE=",
+        "narHash": "sha256-LAu5nBr7pM/jD9jwFc6/kyFY4h7Us4bZz7dvVvehuwo=",
         "owner": "tinted-theming",
         "repo": "tinted-tmux",
-        "rev": "bded5e24407cec9d01bd47a317d15b9223a1546c",
+        "rev": "fb2175accef8935f6955503ec9dd3c973eec385c",
         "type": "github"
       },
       "original": {
@@ -1208,11 +1208,11 @@
     "tinted-zed": {
       "flake": false,
       "locked": {
-        "lastModified": 1751158968,
+        "lastModified": 1755613540,
-        "narHash": "sha256-ksOyv7D3SRRtebpXxgpG4TK8gZSKFc4TIZpR+C98jX8=",
+        "narHash": "sha256-zBFrrTxHLDMDX/OYxkCwGGbAhPXLi8FrnLhYLsSOKeY=",
         "owner": "tinted-theming",
         "repo": "base16-zed",
-        "rev": "86a470d94204f7652b906ab0d378e4231a5b3384",
+        "rev": "937bada16cd3200bdbd3a2f5776fc3b686d5cba0",
         "type": "github"
       },
       "original": {
@@ -1241,11 +1241,11 @@
     "xwayland-satellite-unstable": {
       "flake": false,
       "locked": {
-        "lastModified": 1756679414,
+        "lastModified": 1757179758,
-        "narHash": "sha256-yQGJ/n6mRwoIQnaL5oV2TGOHg4SEHpINTaoHrvkjr1Q=",
+        "narHash": "sha256-TIvyWzRt1miQj6Cf5Wy8Qz43XIZX7c4vTVwRLAT5S4Y=",
         "owner": "Supreeeme",
         "repo": "xwayland-satellite",
-        "rev": "c0497c990d46fcc012d9deff885bbe533e91e044",
+        "rev": "970728d0d9d1eada342bb8860af214b601139e58",
         "type": "github"
       },
       "original": {
@@ -1262,11 +1262,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756704029,
+        "lastModified": 1757813809,
-        "narHash": "sha256-Cn2q2OpSu9aX0j5uRolbPU5Ms6RalVVc6QWibgZb3ak=",
+        "narHash": "sha256-ipvcjWHEEAH/sm0j4u+P9lGLvnU/aX69MWbYkvUilqE=",
         "owner": "0xc000022070",
         "repo": "zen-browser-flake",
-        "rev": "b5052bed0bcda8fad7080057a2faef862c6ca1e0",
+        "rev": "291a0b6d653c46d282822d9063442b7799e1fd1f",
         "type": "github"
       },
       "original": {

secrets/efl-tuwunel.env

@@ -0,0 +1,17 @@
+TUWUNEL_DATABASE_PATH=ENC[AES256_GCM,data:PDrE2yQT59HJvKd97nJumQ==,iv:KkNRd/rblupTE3PyV39nSYmapd/dCTvTW0RmlIAeTTI=,tag:uEx2tENmJrsjVNLUFqtXTg==,type:str]
+TUWUNEL_MAX_REQUEST_SIZE=ENC[AES256_GCM,data:3yJltQjTuRA=,iv:bhHWY7/IeleHYZyqSUluCnQgM8kb0rgBa4m+msu1BvU=,tag:gjY3u9v8yrnmTObtYDwnfg==,type:str]
+TUWUNEL_ALLOW_REGISTRATION=ENC[AES256_GCM,data:m32CHg==,iv:SW+9oZLVmd8Sf24NLkxagy+sOsK5ysTc8JHdomu6Ft4=,tag:ATTLG2dezibrAzyQuQrbYw==,type:str]
+TUWUNEL_REGISTRATION_TOKEN=ENC[AES256_GCM,data:IQgfTI/aLhcS/7/VCVN0KgdMwv43845ueHGREmYqjtpKTybb2qWLDdPAiVrj,iv:huwZXpY7+aDNxOINLlPaCaUiptAN5tOJ068ASItGafA=,tag:UBkDgWV9CdE2LObnyWk5ng==,type:str]
+TUWUNEL_ALLOW_FEDERATION=ENC[AES256_GCM,data:4mKscA==,iv:iJhWpcEvJ0n2wVPLNntOcSYyKO/wvQfXdd8WLuU8ets=,tag:ywbpkpnfQTy+zuSGat8dEQ==,type:str]
+TUWUNEL_TRUSTED_SERVERS=ENC[AES256_GCM,data:xlYagLxkJ4jPNAWEX+W5fq/io/eC7Y3DW1RM,iv:pjApkV2hCpnMr2acEw4P+kWDEjfx0yRQXVn8w9RGa5s=,tag:QnmhL4WK6K+Q5jBACEzuAA==,type:str]
+TUWUNEL_ALLOW_OUTGOING_PRESENCE=ENC[AES256_GCM,data:7iQU4TA=,iv:ljwU5yt2Qj7zWI08JnwT/E4mheRloy3KE0RMtQAF2IE=,tag:Icw5hay9cRfs/SEDMNfmxQ==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDltTWRrUSAwVjFh\naTdScGZia1BGSWZBUWkyellzMzlkbDkxLzhRMW5Pdm5WdXdZMm44CmNrMkRNRERH\nWTVJZUxWcGxSQ2xzMjRVclBaTHdNLzF4WE5LUlpxZW9GTjAKLS0tICtzNitCSUJu\nbzAza0kzNzlaUFdmcDdaeis5ZVlSOXd1SW5GZW5rdXJjSWsK9LuRScqfr/EcHcEI\nykvGH/ATkza41/ilj0tRyPMZN7AhrJcf5eqEFP5ixd/p9oTecCN5jbaekZJ3bGjL\n2MXgJQ==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEFLUkyeaK8ZPPZdVNEmtx8zvoxi7xqS2Z6oxRBuUPO
+sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHJNY1d1ZyBBUThQ\nNVJoY1RyazJDaTlQRVdEdDd1UVpBNlVrclFrU0NjenlubEF1STB3CjhIM01uVFhp\ncWJQdnFqbUtVMENOWVlwVVhyS1pHRmk5b2tJRHZlN3JEdzQKLS0tIERTZWZWcWR5\nUVVJcEdkOWpFaWRDa3FNcGVNRjNyQkJSRWo0VXVtams0OHcK0SEYcPiFfxb55Pua\nt/tl6Y+b+tH3s58Evt1oQs6JkwqtnwF74UHYEDNKRcZxNemVVp5D8/gKm85k6bwT\nlUWRRg==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_1__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB28jpN+h5euh3NtdN+A+EtqgIatC22e4i1TPTioKire
+sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFhGYmtrZyBoaGdD\nWXZTL2puRzFCSjlIZ1J0Q0ZYMXhHYjA2QkI4dmhtT3pTOXdLMEFFCktnaExmY1BY\nYWVZREg1bXNCR0xzaHVrZnJNUVI4V3V0Z1NXSU9VOWhoMTgKLS0tIHduZU95VVBM\nRGhmc0ZBaUF6SWlYZzVBQjgyRkxJbUQ5MU1uVVdlTVZjQ0EKl1Dh0+uNZgG2TUBw\nsKMW2ryk4WtGduPG7OzlaGAGABSeHfe3qy3nGmNPVm5e+7nicB0IFgR0uL29rU9c\nj/PHlQ==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_2__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMb5G/ieEYBOng66YeyttBQLThyM6W//z2POsNyq4Rw/
+sops_lastmodified=2025-09-14T00:38:59Z
+sops_mac=ENC[AES256_GCM,data:oA5ZHVIW00lIawVu1wgwfDr+DLuEpRA65VuVtO+8St+gOmob66tfNCSmlj8zvEW7Z8HpxHxEyq4XVuLn2Ia9Uvj9eXfVeqmsguIlK3KJ334G1E8VTRO+Nxgdz6itMFjwf1bDw3GA+zeQZ+VFwxUhU4HqMggsqFuPtP2BgnK67ME=,iv:+ksYve10uG2JUqDIk5PJjPIxeYLL9Re2+IGPeV1q1Gc=,tag:AUyZB7OUBnE+6cxVDZG6Cg==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.10.2

secrets/et-imxyy-nix-server.toml

@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data: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,iv:zBsQCcPxoRtZ3PTyP8XCz2RgF+4KNb+YO5bD4MTr0lw=,tag:j77MuHDxO2QrhlOko71iIQ==,type:str]",
+	"data": "ENC[AES256_GCM,data:EhKN6pwYzXGI9EWxzXhZc2jwWzRis6uHPpa5irR+A5z5txH9Uq2QYBpeUD0y/1BQlMeUNxe5pb7S8NQ8CwuK1W+upoA4a5rZeCrLsMoXhcq0d9QWNLDs7QQYEXoHHgZ7ewLN1hmyblu4ctw9TlJpImj2tzstzSF5EZA6wUi6RXKn/Crtb6frjB8M3ZF73b6tMaLs3hxJqbei2WwVLFWoeMHbQavqBKpTczrEL01g7H/rvccgQXf2UTUXCtst+YJVGmueZaOZRkFSoxUHuUQYeNb1cDyyPpMd7OfEwrdm2aDXw3zxbqffjlFdYncboRgpv85Ncwrbkepdf8gbwfIGLv+7ChmNH8PPq/3pYe5K4hr8HpBoXd+vHW/yjuUGpyi242zIDTGlwdG5WRvDXAxcaiAXoEK1ppU87Y1GSDuG7cbx2k4Rf/wO+wzzuflX82fGIYJzlJr+x3V5dGrUERm1b7lzpA37NrrowZqBPpetwP9o1raKAaFvmaU+2cDpkHpWKz/QlSHBowjsPuL2QoRsuAZr+VvfLKWbnzU7jMy/bCDmwjQto0K/jF+nY3urvcDrXzZEZdpfjskoaAkBf1WSmj1VkR5cAGU1sO1C1U3ErKdQoJYAWQnYblef0HgWhAylG5nGjaNrHbXOZJMx94+y+Qj1ySiq6wcGbaQNf5AkXWOULYnrZzicexwqF7dBEVhEVS/E55rSi+TZ2mPoUscMhi4PNVkHKUqQKwD1lrIEeq/YtsGqb9RL3KslHTqVMqPIbb7ST1Tb2cflHB0a/+hy,iv:jmTS1BKSu0/vNrTABAcxp81OwfSmvnPLW/ZxGoKuG9Q=,tag:SZ9xLd4o1vJ0QRbz5nmi0w==,type:str]",
 	"sops": {
 		"age": [
 			{
@@ -15,8 +15,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFhGYmtrZyBFZ1J2\nNk9yWUNaemVBOFRiVmdmWGdRWVN0UG5Hc1lZRTBiaHdnS0E2UlN3CitPUmdjdVdu\nS1FXbjVCRkxZUk5KdW0xRzNheWJ1TWVYcUJMK3k0TlRFSWsKLS0tIFJSTlN4a29x\nWG8zUlcvYmlZQkQwT3hlWFlOVUIwSkt3SE5RTzhQWVIxUkUKVSMJtNCEZ1KpcUgQ\nkuTFjaBHvizq980kkbNbD4FgeCAPZ3CwXA8/nKhN03iPeFqwX5AsO0n3+ge/qMnO\nkoRc/Q==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2025-05-28T10:44:26Z",
+		"lastmodified": "2025-09-13T11:55:08Z",
-		"mac": "ENC[AES256_GCM,data:1kxJPbk4Fxh8CXBhukRVed10Nn/YbWjKHrsQhVYA5SjjCEpVO2J8Yb3j9Kc9nhhIHjat/IpLLHlbFscsJ3QP3u4p5cG6P/cfYMyz0LOInwDr8dJl6DJ1tkaeociZp7TFbgeIgyyUH2KNJemD0vTgQuoLI6z3ktrBvH5/LP5CkAA=,iv:7SEBswkWBygTeOOx3LXMTMiH8LpJNhHIdpZBpfiq6Gs=,tag:M8rEJTm8A7aTKJXhOz2t2Q==,type:str]",
+		"mac": "ENC[AES256_GCM,data:kaNd9pyzw3Yo5DK6OZoJ7opvcqjT+V2AsM8klUrQJMcqw3pRnB0/Bx+DolhFOVY9bkr4GGYtSZ9Xd23BfSFnEPDe23Nrp6q7XCFa5YuAyiLrt0j4IZYFHA8ZFDdKMzKZm/b7pxRiae/56jH1RSBb45lIM7cCeJMb2Q66YAwwMAo=,iv:W4Ett/EEybBBBQ6YibEfVtFDjeDxQi8/HGCra1dk6LQ=,tag:ipS3vd/QoqVcu3Cup9bz0A==,type:str]",
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.10.2"
 	}

secrets/et-imxyy-nix.toml

@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data:eB0RdiZUWK5q56R12B9wn/NK8qhA31YUbVsVDO0/xVj6kF+Z6QQySUX5WOwPI2D9dkuKiYniEbhnsXVbjt0h/fsWC5OSHcj4KC7WrpbMuXiwWbTMkOsjPASGNqCUFM/Hl+wTlC6sCF3IGZ/OHEtqu1i+34S3j+FcE7zvRjVe3bs+XkYS8yQeqBwOdDhqpLmsWBCEu71i1/pTMMp3jigoKEewgUyxdDgXVkb1fvVAvNey5gwjZM92fNr0qAKxCzGAjMhMmL2mS+fuRoTJAC0VwJu8ytyp6g6zsYHD/5paZoQ31pzykS9EHvjY7qcRJhOKR9uB6rbdXQa8U8K0Jy4HhJX/nn74Z0CpoTcLImuhSAuc0Cv2+dONn8F43O8JIEDKpih3fi9f8RUNcO1nIlLVojbO8TOT7sGNJgTjCZ0wmZH/Q8keyJx+th0YOTqdN2E26xR+Ry/hoTtoqFBLk/Xsstn15z6cFAcPhEyrZFd7cidgIkl58FcoNiy/2MwY8p0p4cYqZW9ZhWBSzFfugo+e2zIl3EMH/hA3aK9GZTFaot0cvSQOm06S6z4vZZRpP+cJOpZBrkCgLc0vyDHe6biID+lk4SL6G32wctvAZjU/B939JE7B5NQFmmuKb8NyvczCEpTFgjdR2Rb1zHx8oLVlCSREPkj8jHZ7LS/4+wZAS8bPAbcWf8RMFiiq1ZDyubGIwqVWb0lQjviAV0H/mx1yvuPzUird5f8iB9qqyQ6FRBSbTOswIjVyqgtG1wCdGevRc7AecmfCiv4=,iv:K8ZgwiNzUzBFqsWp1YrX0MMLQd9t+mj81jpiZw+3duM=,tag:F3nEoIY1Aj6LFBWNsN1aRg==,type:str]",
+	"data": "ENC[AES256_GCM,data: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,iv:RzlPJelRssQKKzcZGFaXxBGwz59LK6ZLuzp7t8CMn08=,tag:RSr0BdNm6mQMZMqrLixSsw==,type:str]",
 	"sops": {
 		"age": [
 			{
@@ -15,8 +15,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFhGYmtrZyA4RjNs\nWlYvc0tEN2hOUTA5SEV6MUhTeFViRTBqVWJLcGVDZ0JROCtONlQ0CnU0Z2FWQUlw\nakt0dk1nbVFHaVlyMjBqS3hCSDdHZEYwT0pXaXhOclFvSjgKLS0tIG9ZZUQ2dTI5\nWFVJanhac0QxVHM2b04wNE1jcHdHa3JJYzBlTE1iS1ZPTHcKZPvA9MwYT4JfG3/F\nqSI09TWeEv7TAWGeZr6OS++egtpdVoM3hF8s1B1TZb3bf/BMqo49NEkvD56pOKvo\no0jjHw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2025-05-28T10:44:37Z",
+		"lastmodified": "2025-09-13T11:55:15Z",
-		"mac": "ENC[AES256_GCM,data:eLdxjaAPB5w56GXdyqV9fgxdzNvD/rp08T44dV4mTOfbd05GQH+35wcNUXLzfUmcH6NSQ5fhUQmthWGEXEXsZawJ31GJqXtzuBJ9ZJiID7yg+gwJAaUh3JcYWke00ke3M+2PZ7/JMydTU2v7I3zkh58pLSUcOO8yZ1L6/q4X96s=,iv:QyJvIh6PW65i8ZcJTvAJt+MShn/bNRuRsxsD0pcNQ0w=,tag:9RvBU32Sx0+pPcaAu0LXow==,type:str]",
+		"mac": "ENC[AES256_GCM,data:VbO8XkSCvGO3JW6Z+PjH60DBAnKvTPufKLRHRh7eFhPpfu3OOBquiRmY2rr7D4Kk2ptn3+Ns36UODWsgIhd8KqGeg53yw8zzkyftfhsitywCawkSSsEcjJqu4+rav+y4eamSW4hI0J7yt7dkeMDPkWwPRcKtM5I5LNsmjkeMKhw=,iv:uQkmxbF2GC4aZoM7X3fSvTuMTNlKxVrSV2ETiCQg8Ho=,tag:u2Cv7uerz0QxkGt9CdY+nA==,type:str]",
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.10.2"
 	}