update to production certs

kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: cert-manager-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:YhezUrMEaUxcpbX+VaE9x/32HZGHpCajDxjAAnxrduYko/24nuo4NA==,iv:pxt4O+3Xifc4galSt8a56jsn+x01vY+k9xMQ7IZCbOI=,tag:A8hQOHd5pLSInxm4b5Z6nw==,type:str]
+    api-token: ENC[AES256_GCM,data:hxn4WpbqH9oZg4ZyW4ZHoCZFfC7pPgh6NizlDz2UTSjDlZF33vmvWw==,iv:5u1KHt6DGnyQgTIpWLFcU0V0o4xXNLatETs/uELfIbU=,tag:1bb8uJsW2Tdmzsk/vnQ74A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQ0h2MTRDTEprcy9RbjU5
-            VlFQMzBVTlljTlJvQTB5YzNPLzRiL1pqUkNRCk1zMlhuUnZmZG1tcVFyUUVNUzRy
-            T3J1UHN5bUxGOWU1MU9NcFU3dFRJZXMKLS0tIHJpZkJabHZ2RFdQMHk1QmpDZkxn
-            eWZoRlZDcWU0Z0V1SlBiT1Vkdm1pOW8KXIv9umMu41qw6F8e7Tr43uOA1vELJ5dR
-            tvfONCoUikzSetp4O6KdwGVFe6LtVRrtWLLEH3N0meBbfIkLZ45Buw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZFdoWnFuWDZQZzBwWGM5
+            VWpoUzlwMTF0MDJsNzJHUE12T2NwQ0JqUTJBClFySXcvTERTNVVRWW5qZFFES292
+            OUVkZnJGNW1oeVhRTWtzNk1IT0xoYWcKLS0tIHAxR2lqeEJydGdFR2RaY3Fmd212
+            dURIUWdKbnNEK3N4MDZSVTdJcnQwM1EKZuzgUjc0EUhwLNb9Aq/08Kq2SJZpcy5k
+            +QlOf/OzjQ8fZinQ7YStN1FrouBoD6eOvrQ9LKmd49den+9JQw3uAg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-05T23:02:05Z"
-    mac: ENC[AES256_GCM,data:8DUXsgwppf3QTtA+b9FaXdx8EMvFuajzHyzeLcN/uhY17zJMRrvw30rom1N9K9yeR/VsTv/hGj9xi1w2H62+9hSsx1sm298toq2drtwziSqH5YAvFFuBuo5SCGTb0f2TdNZF1vIdp3RgVaWyzrZggsAaWcqxWWbw7MYsAN3KSF0=,iv:ku3NPHIHqOfcJF1mpQA9TgPKjC9927Vl2v0MqpNJWOU=,tag:X0uaBYMc+qQ5B3/eZiH0Xg==,type:str]
+    lastmodified: "2024-11-07T06:29:43Z"
+    mac: ENC[AES256_GCM,data:KGoF46Eh22sDxQlLqaU1cNguMWSx71BpmdClVZX/cPMZWsIZHqh32CsfH7hNFMJIUSZiaI+UarKFbmhWd4P9wSMcqzj/zmSJ3DGtd722oToT6kUE3dJhmIk+f8gJd4STXjeQ1NM1UmxwasEJZ0fnSW4+NLwTURLpi8fvNXOlUic=,iv:jO0aMeYCSWthERI181XyS+2VDXxTUKdq2rV6rlTwjXc=,tag:K0J9mTIBayDiLB5QTPa2ig==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: github-webhook-token-secret
 stringData:
-    token: ENC[AES256_GCM,data:UVEO/z4vJtqHDga4UlTmMvSDai5AydTsSHc4rm0k840=,iv:kQMVSClPg3MbnFutNB/Ae3vvMpoCpIFHZJwV1vjJKus=,tag:1Yd9SrcG4nOv45+X7JQqpg==,type:str]
+    token: ENC[AES256_GCM,data:mq8ZPkayUvV4+EKJaj0EMCweaiC8SPuYz7m4smXlW74=,iv:j6Pr1+1XBvHWeZrrH6eKJ+bPXc2dJlghi6GCJ6lH1rE=,tag:fmo0zJJiaTcDwoVne0CX2A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJaitRYXpRKy82YnhqNyt3
-            RmJtQU40SS9CL1hjRzNhaFlOcUtTZlZXWHlvCitMVzRQTXpPQmZYaXhQckN5RDhI
-            WGFlMTV5STk5Nmx0U1NoT2pWMW5QKzQKLS0tIHZyZ2lORkJmUTVHNFA0a2Z6UTdl
-            Q2tzakNrOUVNZGdBODJxMnRjWGlQNWsKQoJ9lhtJX/gtb540UdVP+Z7tP8Arok+X
-            tIsa/jWxNkGs+TKGRI0BfxS9R5575R12Lj+aCBF0aMCp4fkpcrugFw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMTVGMkV5K1lXY3RvZ1dI
+            OWhJV1BkaTdGTXZVY21SMExBMnQ4SThLQ0dvCk1NLzhXY1AvRHhqTGo2akxiZTA3
+            SHBZRWVja0ZZejNqSVVkMEhjSG1SOUUKLS0tIENXR0l6bGdnSit2RkRucW5HYWNW
+            Rk1scEUvOUZISWpyUlJIanZ3ZWVmY00KSD1tXiEZeFVyOX6zeu97Be4Ak1Tp4vLX
+            gqO9Oa0SpvP+YOCbm9t4A8VICYAR+7bmrSqIqfZ7WaLJvRWkl+TBDA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-05T23:02:05Z"
-    mac: ENC[AES256_GCM,data:+nbOFWowlBlyy5MPShoq/U853iHGJo9Gi53G8lxtBQcu+Gp0t4+Td+EzjNVMpkjcE3YyoVDoOfzWSLE1OKmAnvqfaJHC0Y09x22MUcAL1Kjisc116iNCrFJ36Pc19Fdo0Jpn8gwbF3r9VuIdlbepMRwnB33t823Ij2Aa8kNwcQQ=,iv:6ZzNzGuc3MXQ/vf8nbIl2bUp6uGNYnUEDI6it8oljqo=,tag:sPvM2TCpUAOEWAq5xpMtMA==,type:str]
+    lastmodified: "2024-11-07T06:29:43Z"
+    mac: ENC[AES256_GCM,data:GAORHFhuCMZ5su6KNnh0HC2al1ezHe6hLBiYsSrGDID3fGT16ZRxMYEVXo/0n1xcZLjxgAckBXFA6HL9viepVsnX0STvB9mbdd8C8qYW0oGwcnmhLavrdABV0Kp6oaRW9agIODQF0mQbX49x3lirRWJxbmU2XBPUVjngJt/yUKU=,iv:rfCSCO1CmEU17Be85qRoYjsBzEfLv0J2j/pq0AiBTgE=,tag:z0qDturLxU3HwF1XWw6BmA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/cloudflared/app/secret.sops.yaml

@@ -3,8 +3,8 @@ kind: Secret
 metadata:
     name: cloudflared-secret
 stringData:
-    TUNNEL_ID: ENC[AES256_GCM,data:mVtauze8Ikknlqdz7KXamxgaw+8MYLrqMZdEAXmoXmoMcBNp,iv:uUXTcN8ySbK08dEl9A726+qTDPqgjcqknjJjVNSrwIk=,tag:1pdGSTKxtch403gJfsdmKw==,type:str]
-    credentials.json: ENC[AES256_GCM,data:l+WXBRVamb7G1kmGORM10zf0iShHV8eGMHsNlZufSbb0m77iK1ChHzauXkZygW1Jwnu5rV/6NyjTOSDUAICMQR4AaL2Ogu2gnS0q4r/IM8Rs5iDvLNjTN9PLP4MmrK4sOvCJXNIKW12kq/TpsBRT/B7ZzoS/6zjfbPB8DrE0l+KJUgcDOR3wQLkIkDvx0ppa0mAEG/WuetblUuY28pWurknX1geP6tFLr4lOcPSwiw==,iv:YnYk6vCpHIIt4Tk/p8T/JFs2LhTq5TNjVHl2p81PaeA=,tag:tTm/xTA5cu8tnQETe1d10Q==,type:str]
+    TUNNEL_ID: ENC[AES256_GCM,data:mq3HZ6LMpTXqZ/BhNxPxzrgHjd+ms0iqhIxnFKhbv79LHaLZ,iv:38UDIILcKy4NCFWaCE62kBT1odK6DIFHYfIXpUGOJQs=,tag:5dCdF5FqRL4G+Y1VOuWKNA==,type:str]
+    credentials.json: ENC[AES256_GCM,data:Cnm5pftQzWBk8VFp5LOZ4xv0IfDb1rkGO+aoDd97ZDrl/3IzzccI/svGtGnmpRiMNh0nNnm20lNB3ILr8o/ns8p+1PpMhLS70cJxZGqDsKt0ylTk6JhQEjIVLBvU42Kko65Z+jw60+iwMEI9FwXMlfL9zx0XobI9+QUf7A/EYlmlZUuHIyE4P6ZPelHyPgFX2La/AeYetgKPjH27zo7gpl96/Z2FGvbGe30zSnc6EQ==,iv:lj/7lPlv8tnH7/9VeLOc3JC7FRIU9KEoTvYzJSw0FRg=,tag:T5cFLlDjWRhftC//ifDXUQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGVFBGQmpQY09HWVRreTAz
-            azFuWXlZaW9hZzZvdDhIc3hUR2FLMkgweGlJCnJrMXZ1dnRUcmVEN29VdXVTenZZ
-            anczMmVYZmdZOHk3aTBhZW5rWDlNbEkKLS0tIEZNdjZoOHdLQk11VmlSdklrc3BJ
-            b0k0QzZTZ1NrL1d3dUJXanhHWERqVTAK5g0YmTPv+pvbqvqtdOTMbsHI9O4Tk19J
-            u0aOq/YA/6OpXTOoX+5BrfWsqRn9E8K1g0wPmLs4ETSrqzB9p67ePQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRWNGMWEyOHI4SmYwTmVT
+            bXE1dGpSZHlLVjZNNEVIYnVlam1ZMGF6d1Z3Ck1aRE1hc3RYTUo3aHAwU3gzdUJl
+            dDNCOWF2Tm5wK1h4MytTRVRzTmtaVlEKLS0tIENPVDVONTBxWlJzVkJlRkI4OVhy
+            Nis4WWZsclJHVWpyWnB1K0xZV1pvYlEKNBImgI3lFpy63zZyNOquGOUbaEQpLTaE
+            yVbe90RoDvua716CqzwxgxKkru5g2IF0xUqMeDwq48YRoSYc/f+QTw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-05T23:02:05Z"
-    mac: ENC[AES256_GCM,data:jvtIaoV5IciwQ0NtNejpEwlTQzl4GowsFIGJZ4gXe0za+nPSu/lX2HzmDSFYhFPvpO42peeJ22Sh3du225+cIcyVE2hcbJRZ9TJ95FHPKRRcbCHTc9DyTjPXn/UNukXhRpwDK3XxZhZgFdn9B/Fyxa4h0qsNy9svbbFw9hYM9R0=,iv:RMkiWppGFdyrvX1Fb8L3klUwfdsifXws/TodJWRFgT8=,tag:Q09r7v1W9cPabqeDtLknMA==,type:str]
+    lastmodified: "2024-11-07T06:29:43Z"
+    mac: ENC[AES256_GCM,data:YSDAdNdyduuT9S+FTeMrRIhX1wy5VYd6SeQVt9hUAacS5IxaiPR9aexGoe7XWnGsLbLVd2VjbCyIlGf9CM6y6FGjHbdpkZ6vrpOmU22Qzz+6KHmphvAbimOhffi6LG4LUHgaEsrQKBa81VIiOFCYVhyyNl3E6eRk+tZ7fyMDAy4=,iv:Z6bcBK2e549wL6AhFrMV9ekuCRR3fqbYpX7kXqqgiAY=,tag:C+vauyvc6NjYmaM1dzoVqw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/external-dns/app/unifi/helmrelease.yaml

@@ -59,6 +59,7 @@ spec:
         #   initialDelaySeconds: 10
         #   timeoutSeconds: 5
     extraArgs:
+      - --ingress-class=internal
       - --ignore-ingress-tls-spec
       - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
       - --crd-source-kind=DNSEndpoint

kubernetes/apps/network/ingress-nginx/certificates/kustomization.yaml

@@ -3,3 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./staging.yaml
+  - ./production.yaml

kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml

@@ -67,7 +67,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-staging-tls"
+        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-production-tls"
       resources:
         requests:
           cpu: 100m

kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml

@@ -64,7 +64,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-staging-tls"
+        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-production-tls"
       resources:
         requests:
           cpu: 100m

kubernetes/bootstrap/flux/github-deploy-key.sops.yaml

@@ -4,8 +4,8 @@ metadata:
     name: github-deploy-key
     namespace: flux-system
 stringData:
-    identity: ENC[AES256_GCM,data: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,iv:St9mPqBXAyQBc1g7XmkwFJ25AxJtdMi39IqYuNRxSA4=,tag:d7OjBb5iPqkWMkpU7IooAw==,type:str]
-    known_hosts: ENC[AES256_GCM,data:sdCgI8dTmLrXP7maXWiVoWtpeDPdECpdjatHXsudUU7MKsCUaHcE8B0UhN7UY1QWbrjGuPFAQqSCYYnpHCWM3nAJi2liRjuAm3R9sVMizD0MRV2xbeCogvgYzMVzmHbRu0wmSkSjeqr4p5RbqYXEotrQ6k3vsGDbs9kpwqz+FaZlfzGH+JDfmuHStAzaFMdEtn3Vi09Far5G/aNTWzvRXxUY7e8qDfB0y/thotT3FVICNWpG8bxp1mo2s6WuwV4DVulqJgMaYWff7XwqqavaUjLIjSU+EHXC2e7mAtOkkLGaswC434XL6GuSTXjVH9MmqUHO2SQIyOtioUbxkLnaa1fGG/ybkFJcZEvTItK/HBLMfjPXgF8P8/N97ZeyOBXdeFTcD96f2qqHoDBOzR4Gbft4vR/BqpABfrxQbZdNS03N0okg70WCcWUq78JAfwv2MQBp3Mgt2XDmGfAsWcRgJ01rAo/IyQjiuos/pvkrzPZz8YGjywpzSD4cGglcrYp+UcWe7ppEBppZrusWsJdAX3BxOTAku3tHtWwjnOErHyU1OP1DeA0+kS1v3iGeSar9cK5655uVtyV4TGZS50v2IXCwsyFyH1VP3SDjHR0qEE3Xc6oDggjoav/3Y3LJD72Fn1y1AsDxl6kW+oj/arTO3i1MU/KJGrK/1KWVhULIPtE2q6Z5Lv0Y9VO8zA+mgbohnovVGXtPKOVUL7KW0rDRmvIvyws8yocxOkZuNMBVLa6NSYuwkD2u2/adP6FBWuX4G7xl8Zvu5yYzdu3w/JCuaPwZiys+n0j4PGUzJ1EsrgGqvxqsc20IrAGMEAmwITIhAW+lBQb+xNaSZfgtkH6zJYakdqByjr5ZrTSD+MqEX3MHJ6yJapgROOPwTyRJlw17CFPgntSpK9oSZ1E9wd9QrZSdrgRdDHo9utLN27ypUdguR9x8RWoHQsKCfdcYjUsCsOaxkfQ8jvtuFaboSSWKQso819VnIAKn1b07uK+OTOceXGtZotLq5MB+t9i5tiuApA6d22Ul0+Ka6dDxK+Uepr1A6hOuBJm//6QeIKyBLRNk8w5oytUwjzybOLYvxVHtloDBDTVg7gHhadIAgL2DIeje+qrqphke2iAwmsZDaM0X93UDeTs0Y+EbkAha+zusAC0LpkwOp7wux38brN62YKfVmk+aQdyZOJqcwUYS1zEcOZzpHuLdx9FNq7V8/dbunor41Vr3F5qn01q9BZOLQYX+B6161KhhIJSfizTPlBPZCSVQkkQoX4cVh94F/LRj6zmmjlPwevUJ7mY6TS2K9cUcWAOl6ICJSrkfzvkFJaZ8xZmc/YSWUJQCQZH60apCNSHnrn2G4wGjoFfngqv6OH1LL4a7ww==,iv:K6sutuUnL7ZtB2Sl0uAjx9A+Q/f8xCzV2kEc/WoIO2o=,tag:250QtBAtfxDDzlUt3Wb9zw==,type:str]
+    identity: ENC[AES256_GCM,data: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,iv:2mWSUv4RBoq1MxzL0wghmwGtv78dLpB19jsYEt9SZGs=,tag:sHLXOZEbPk7lw/xw2f90qQ==,type:str]
+    known_hosts: ENC[AES256_GCM,data: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,iv:o4gwRucPCHdzcyMjFpf354b58Ut5oVd+xa3gi9D5oeE=,tag:t8ZRLY7qr8YZXMQFjWKzLw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -15,14 +15,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3eHBCY25yWjBpUjRYcXIr
-            SGZxZlhpc0NlaVIweW9IU1VpTXl3RFRDZ1NzCmFxZFMwaEtOM1UwYUdBRXhIRkdx
-            eEFNOUpjSTN1ZHpNc0doS0R3MVZhem8KLS0tIFhzc29JNkF1YlBSY2xiZXptNnJQ
-            NVFsTWNqL3ZGU21rUGZPU1RMbWZRb2cKO3vdOjzfxmsUhdR1C1dGM+0j26eeI3AJ
-            N8sZmK9LO0qgs7VKtL7MlPrRBq5NFw98YGG0pe1PCFKLaQMwpifi6w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2VWRUWk8yUHNTMjN6Ylc2
+            M1N3TVZyeG5MR2U3ZU1DREl3K0U2UnZiM0EwCkpVME5wUDVOV2prVWJweStTSGlY
+            NEFZTnFKOTBiNWhJSEtYYno1ZlArYWsKLS0tIFl3WlRzRzhNSUxkWlBUVXJWUExB
+            RHFiZFhocXB6N2lIZlVyWHpTMkl4QkkKOSnye7FvmUfn3//I55bgqBDu9PkPYobk
+            eJ2PiWx7SyiRhrN8aPO/VubopxIVt36Bwiko9Eny8y4nt/XUPuxbxA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-05T23:02:05Z"
-    mac: ENC[AES256_GCM,data:eZYOmLTDGSnm8SoZK1zPFcUFjwfxLXA6ZJKebTCuiB03MFt1N4YSHLrL7kJsoO0s6sKm6IwrjONG3VdGysYdxaWjd8jQSCtQgsAVTy3f5cSL13ctqkKwt8UZZRlVfubuhIN6GA9fWjcsPfFbAe0qdrTzavtKVlnarl5/pChF/KM=,iv:VO9x40l3t5hdBk5ExtvuQMDcTEzoYMnCzmzUqES7h2c=,tag:1h4Tv/fbsgz70XKPslpQgQ==,type:str]
+    lastmodified: "2024-11-07T06:29:42Z"
+    mac: ENC[AES256_GCM,data:WGZs9O7XbR9rzUCylRacJLwuAnMWjdwscS4O+ryY309XeAbZEZB6S/22PteX9v434mOZn206qdTSzS86fvn8i/cTsRhqAyQxaSdx2BwtsCDaH8VdMWp5/PU8qxwS7+P0HUjZg6EiiMQJmSCHPR/8MNF4BYDekXmRQiL0f4d03Eg=,iv:kVWMWa5qoevaiy77F0RIdhDzz7HtlMcS5DuhwgC7iFA=,tag:RoC97/n/6TvKfUgOjusQcA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/flux/vars/cluster-secrets.sops.yaml

@@ -4,10 +4,10 @@ metadata:
     name: cluster-secrets
     namespace: flux-system
 stringData:
-    SECRET_DOMAIN: ENC[AES256_GCM,data:WdBJKtPfxOwkn2MlfB8w9A==,iv:g82Nb4P5o+dQL0B5ZWlV9vSqenJ26l/uBTd5Zr12USI=,tag:1MCF4zXrf87zYKmc5pXvWQ==,type:str]
-    SECRET_INTERNAL_DOMAIN: ENC[AES256_GCM,data:a/ffHhhCyEQ8NU+6wg==,iv:5tzOljj1F/90qcZt2QEvNIQzL8/3eY10RcWp2rbhXFU=,tag:uyvBK4T0y/wMNrY0FKRJ9w==,type:str]
-    SECRET_ACME_EMAIL: ENC[AES256_GCM,data:qRVftYNjhhLueQBQIfbZImphqVo=,iv:7N4pt32QgJ+q1MBGjRo47D+AM209aR/cmCf1L4ibnxQ=,tag:UtPOeqDHQSJaYLS3F+fcTQ==,type:str]
-    SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:CU/Ik0NQNaGGFswubINWHfs+Von5nEC9PghQo6QZ5iOS8j8T,iv:hRPhm1ggQ6CdCU1yT9nvjJ9tZnpFXgTqlVJgWbSgAV4=,tag:RvrnxjoqeNqP8FHWnsoZGg==,type:str]
+    SECRET_DOMAIN: ENC[AES256_GCM,data:uqdjPED+mxmdUTx7TJIR9A==,iv:hmVDDwzqBYWA7mSqCp0WEZZjHXY1jPtfj71kcHQuWNk=,tag:s/o0767NO/ERXhOrVogwlw==,type:str]
+    SECRET_INTERNAL_DOMAIN: ENC[AES256_GCM,data:V+a232owGhaq0AbwmA==,iv:Kun8a5FY4hJkYIaQaQabhF68YQmg84WvSf7mN5wXReE=,tag:btvlR9FxIC40pcfjIT1xZQ==,type:str]
+    SECRET_ACME_EMAIL: ENC[AES256_GCM,data:O54SPqcxk9AQPM+/SY3AJf9Q18s=,iv:nz8g9wMv1qvFrcaybD1GaxUMU5/yWKNpfncswCN8MCk=,tag:OzDI/ADGJEmZqzdkBMOV6A==,type:str]
+    SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:v+fc5FKSWZDj1FxKOfFqX8b0IhBUzhWMJv/mnPRzRP6+d5qQ,iv:3Vi4MKuFKnCeqdekTWEJs4az+eKbR7acmAeWdk6aOp4=,tag:FtVoEGs5CgXtKGF28Rrjng==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -17,14 +17,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cTJjeGFKb2dBSzNSQ0la
-            VkU4aDNZZEw2eXJXNkdPUHV4RzVoRzhnUVE0CmtFOTNWa0pFV1pPYUNiZE96VEsv
-            M24zbHFGeWFkZHVpQ2NGOXVVcW81VmMKLS0tIG1iOHBKek1xNnZUYXM3L0JLSVc3
-            bmcrR012bzJaZWhpeXlsLzRGbU0zdkkKPwJAbbGhfHSQc5QJpQs7KT1AXvH48djp
-            j3oNjcDD4Jdlc3UE+D1DD1xDUjSuH9YcH5u0P8ATyvnANK+vfAcyTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRZTZrNUxQeDRHWUhPUk1o
+            UklhUlo0V2ZIOTRmTXd3bWN5bndLT0VUZG1RCnJSd3doWHhrOFdpeUE2Q0JWdWoy
+            OTRnOVZYajdFMVIzQzRKdlF4bTVEb2MKLS0tIHk2OEtTYUlML0YxU2sva2JjUUJQ
+            S1hvdXk5dFdRZE00T2NrNC9GaStIYUUK6NfuJJZDu8O2c+6pacIbah7oI8eKYxqX
+            AWRROo/oWzrHoK7eXZHKeTuTi3lgFIFuRSEMzyipcZfu2HKHyVLShQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-07T05:19:07Z"
-    mac: ENC[AES256_GCM,data:tijfTKEpzxK2M3GDpOp9JpeiPBrfdhj5SCAfzWdGqZqgOmTnwwKBmjpbsU1jSTeYgNuANx+ZRW9JzHe2/rz0lRWBn5zCdq+RNb1oyo7bsNlUDofIVs25G8EFt5wE5tLLc7CfVcNSJ/GoOjxzts6TKBOCroWACpHxBB8hRvsq0+0=,iv:+9qkkimoGNVhhWrfbf0rJOu4iWTBfHRG2hfLuLH3m/I=,tag:3EGRL+vFgkUy48PGPbTmZg==,type:str]
+    lastmodified: "2024-11-07T06:32:06Z"
+    mac: ENC[AES256_GCM,data:VgeNG+ZraWxkjsd2PBTCaeulXifmt5KkMEVJCJOmLWuKAFCyrIZ+C1fV1J8+rGkRkuEDx+ZWHtvElv9TfTCFqHAhLG/crkRe/HQFvsxOJoC8qO4ciFMn80jTzDGj6dD5VVGLUnkAWaiWbInS0oJC6/ZEhPuTCo1JFrPycpnr4YA=,iv:dE0czOEMYM82/a9/2HLezQlrs6ITatuZPKw+NuegIHw=,tag:UZw1WhREn5sitTbgf9MBSA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1