diff --git a/nixos/agares/network.nix b/nixos/agares/network.nix
index b51dfae..c7e250b 100644
--- a/nixos/agares/network.nix
+++ b/nixos/agares/network.nix
@@ -74,163 +74,164 @@ in
         }];
       };
     };
-    networks = let
-      subnet = name: subnetId: {
-        matchConfig.Name = name;
-        addresses = [
-          { addressConfig.Address = "${ipv4Prefix}.${subnetId}.1/24"; }
-          { addressConfig.Address = "${ulaPrefix}:${subnetId}::1/64"; }
-        ];
-        dhcpPrefixDelegationConfig = {
-          SubnetId = "0x${subnetId}";
+    networks =
+      let
+        subnet = name: subnetId: {
+          matchConfig.Name = name;
+          addresses = [
+            { addressConfig.Address = "${ipv4Prefix}.${subnetId}.1/24"; }
+            { addressConfig.Address = "${ulaPrefix}:${subnetId}::1/64"; }
+          ];
+          dhcpPrefixDelegationConfig = {
+            SubnetId = "auto";
+          };
+          ipv6Prefixes = [
+            {
+              ipv6PrefixConfig.Prefix = "${ulaPrefix}:${subnetId}::/64";
+            }
+          ];
+          dhcpServerConfig = {
+            DNS = "${ipv4Prefix}.${subnetId}.1";
+            NTP = "${ipv4Prefix}.${subnetId}.1";
+            EmitDNS = true;
+            EmitNTP = true;
+            EmitRouter = true;
+            PoolOffset = 100;
+            PoolSize = 100;
+            SendOption = "12:string:${domain}";
+          };
+          linkConfig = {
+            RequiredForOnline = "no";
+          };
+          networkConfig = {
+            Domains = domain;
+            EmitLLDP = "yes";
+            IPv6SendRA = true;
+            IPv6AcceptRA = false;
+            DHCPPrefixDelegation = true;
+            DHCPServer = true;
+          };
+          extraConfig = ''
+            [CAKE]
+            OverheadBytes = 38
+            Bandwidth = 1G
+          '';
         };
-        ipv6Prefixes = [
-          {
-            ipv6PrefixConfig.Prefix = "${ulaPrefix}:${subnetId}::/64";
-          }
-        ];
-        dhcpServerConfig = {
-          DNS = "${ipv4Prefix}.${subnetId}.1";
-          NTP = "${ipv4Prefix}.${subnetId}.1";
-          EmitDNS = true;
-          EmitNTP = true;
-          EmitRouter = true;
-          PoolOffset = 100;
-          PoolSize = 100;
-          SendOption = "12:string:${domain}";
+      in
+      {
+        "10-mgmt" = subnet "enp1s0" "100" // {
+          networkConfig.VLAN = [ "lan.10" "ff.11" "srv.13" ];
+          dhcpServerStaticLeases = [
+            {
+              # legion
+              dhcpServerStaticLeaseConfig = {
+                Address = "192.168.100.107";
+                MACAddress = "80:CC:9C:95:4A:60";
+              };
+            }
+          ];
         };
-        linkConfig = {
-          RequiredForOnline = "no";
+        "30-lan" = subnet "lan.10" "101" // {
+          dhcpServerStaticLeases = [
+            {
+              # ninurta
+              dhcpServerStaticLeaseConfig = {
+                Address = "192.168.101.184";
+                MACAddress = "48:21:0B:3E:9C:FE";
+              };
+            }
+            {
+              # crocell
+              dhcpServerStaticLeaseConfig = {
+                Address = "192.168.101.122";
+                MACAddress = "9C:C9:EB:4F:3F:0E";
+              };
+            }
+            {
+              # gorgon
+              dhcpServerStaticLeaseConfig = {
+                Address = "192.168.101.205";
+                MACAddress = "8C:C6:81:6A:39:2F";
+              };
+            }
+          ];
         };
-        networkConfig = {
-          Domains = domain;
-          EmitLLDP = "yes";
-          IPv6SendRA = true;
-          IPv6AcceptRA = false;
-          DHCPPrefixDelegation = true;
-          DHCPServer = true;
-        };
-        extraConfig = ''
-          [CAKE]
-          OverheadBytes = 38
-          Bandwidth = 1G
-        '';
-      };
-    in {
-      "10-mgmt" = subnet "enp1s0" "100" // {
-        networkConfig.VLAN = [ "lan.10" "ff.11" "srv.13" ];
-        dhcpServerStaticLeases = [
-          {
-            # legion
-            dhcpServerStaticLeaseConfig = {
-              Address = "192.168.100.107";
-              MACAddress = "80:CC:9C:95:4A:60";
-            };
-          }
-        ];
-      };
-      "30-lan" = subnet "lan.10" "101" // {
-        dhcpServerStaticLeases = [
-          {
-            # ninurta
-            dhcpServerStaticLeaseConfig = {
-              Address = "192.168.101.184";
-              MACAddress = "48:21:0B:3E:9C:FE";
-            };
-          }
-          {
-            # crocell
-            dhcpServerStaticLeaseConfig = {
-              Address = "192.168.101.122";
-              MACAddress = "9C:C9:EB:4F:3F:0E";
-            };
-          }
-          {
-            # gorgon
-            dhcpServerStaticLeaseConfig = {
-              Address = "192.168.101.205";
-              MACAddress = "8C:C6:81:6A:39:2F";
-            };
-          }
-        ];
-      };
 
-      "30-ff" = subnet "ff.11" "102";
+        "30-ff" = subnet "ff.11" "102";
 
-      "30-srv" = subnet "srv.13" "103";
+        "30-srv" = subnet "srv.13" "103";
 
-      "30-ifb4ppp0" = {
-        name = "ifb4ppp0";
-        extraConfig = ''
-          [CAKE]
-          OverheadBytes = 65
-          Bandwidth = 95M
-          FlowIsolationMode = triple
-        '';
-      };
+        "30-ifb4ppp0" = {
+          name = "ifb4ppp0";
+          extraConfig = ''
+            [CAKE]
+            OverheadBytes = 65
+            Bandwidth = 95M
+            FlowIsolationMode = triple
+          '';
+        };
 
-      # TODO does not work
-      "30-ppp0" = {
-        name = "ppp*";
-        linkConfig = {
-          RequiredForOnline = "routable";
+        "30-ppp0" = {
+          name = "ppp*";
+          linkConfig = {
+            RequiredForOnline = "routable";
+          };
+          networkConfig = {
+            KeepConfiguration = "static";
+            DefaultRouteOnDevice = true;
+            LinkLocalAddressing = "ipv6";
+            DHCP = "ipv6";
+          };
+          extraConfig = ''
+            [CAKE]
+            OverheadBytes = 65
+            Bandwidth = 36M
+            FlowIsolationMode = triple
+            [DHCPv6]
+            PrefixDelegationHint= ::/56
+            UseAddress = false
+            UseDelegatedPrefix = true
+            WithoutRA = solicit
+            [DHCPPrefixDelegation]
+            UplinkInterface=:self
+          '';
+          ipv6SendRAConfig = {
+            # Let networkd know that we would very much like to use DHCPv6
+            # to obtain the "managed" information. Not sure why they can't
+            # just take that from the upstream RAs.
+            Managed = true;
+          };
         };
-        networkConfig = {
-          KeepConfiguration = "static";
-          DefaultRouteOnDevice = true;
-          LinkLocalAddressing = "ipv6";
-          DHCP = "ipv6";
+        # Talk to modem for management
+        "enp2s0" = {
+          name = "enp2s0";
+          linkConfig = {
+            RequiredForOnline = "no";
+          };
+          networkConfig = {
+            Address = "192.168.1.254/24";
+            EmitLLDP = "yes";
+          };
         };
-        extraConfig = ''
-          [CAKE]
-          OverheadBytes = 65
-          Bandwidth = 36M
-          FlowIsolationMode = triple
-          [DHCPv6]
-          PrefixDelegationHint= ::/56
-          UseAddress = false
-          UseDelegatedPrefix = true
-          WithoutRA = solicit
-          [DHCPPrefixDelegation]
-          UplinkInterface=:self
-        '';
-        ipv6SendRAConfig = {
-          # Let networkd know that we would very much like to use DHCPv6
-          # to obtain the "managed" information. Not sure why they can't
-          # just take that from the upstream RAs.
-          Managed = true;
+        "10-roadw" = {
+          matchConfig.Name = "roadw";
+          address = [
+            "${ipv4Prefix}.120.1/32"
+            "${ulaPrefix}:120::1/128"
+          ];
+          DHCP = "no";
+          networkConfig.IPv6AcceptRA = false;
+          linkConfig.RequiredForOnline = "no";
+          routes = [
+            {
+              routeConfig = { Destination = "${ipv4Prefix}.120.1/24"; };
+            }
+            {
+              routeConfig = { Destination = "${ulaPrefix}::120:1/64"; };
+            }
+          ];
         };
       };
-      # Talk to modem for management
-      "enp2s0" = {
-        name = "enp2s0";
-        linkConfig = {
-          RequiredForOnline = "no";
-        };
-        networkConfig = {
-          Address = "192.168.1.254/24";
-          EmitLLDP = "yes";
-        };
-      };
-      "10-roadw" = {
-        matchConfig.Name = "roadw";
-        address = [
-          "${ipv4Prefix}.120.1/32"
-          "${ulaPrefix}:120::1/128"
-        ];
-        DHCP = "no";
-        networkConfig.IPv6AcceptRA = false;
-        linkConfig.RequiredForOnline = "no";
-        routes = [
-          {
-            routeConfig = { Destination = "${ipv4Prefix}.120.1/24"; };
-          }
-          {
-            routeConfig = { Destination = "${ulaPrefix}::120:1/64"; };
-          }
-        ];
-      };
-    };
   };
 
   age.secrets."wg-privkey-vpn-dadada-li" = {
diff --git a/secrets/agares-backup-passphrase.age b/secrets/agares-backup-passphrase.age
index 91b4ca8..d538c5a 100644
--- a/secrets/agares-backup-passphrase.age
+++ b/secrets/agares-backup-passphrase.age
@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 L7f05w d7GeMCNl1yWxfvLlNsZrIDb4OxSADD6D4nvYfYZz7Vo
-Xe0xWD8Q6tKR7uIDFkD+/jgfUzUOX4CrxZB5o9bM2zk
--> ssh-ed25519 Otklkw kek8jZrI0Qz8s7G/uxuV4VUYs67TrUd/+/ZAUD9/k1k
-v0C/+QO8x2ThAlH+/IdVorUFwnNrHwbCU3zWt5TEwqw
--> y'2X-grease t2m2yjI ag|Z
-mhPGDYZmjg1cnxZVTyGYh8H4cnO9mSCcWUSFAHy9JgPwWPi3LyfUkhBsnWpkE7zx
-9AqAUKb5e2Ezqtx1g1l5G1mxmA
---- NJLZT2v75GVUojKNuRKa7YEM5LxiC/Fd48YTbRrLFsU
-t��
��yxɏ��g��3�W���1����j(����x��ܨբTn�J�e�9�R
\ No newline at end of file
+-> ssh-ed25519 L7f05w RayKtknLNvFu88aFp4QL7ZMLAh5VmHmlr1DWVsWBziE
+rckeFrazZJ3TxY/yD2wlzRVLh9L4x1bV2Nk7Q0S/RWM
+-> ssh-ed25519 Otklkw oub7OICQalIkCqAZh4/FfXB9PPBe7j2IpBP7WF/UXGk
+gAwxU97b0Js6UPv59/1389/qdPGQb4koa49R14c3UjA
+-> mU.rG&?F-grease V? d a}mj5 ^&dc?\
+B0k6BjXmH0cm74+rjQrzJwKa1dcFwTdmlgltZ70oHctwA3+E4/CQ1ChH9UHzkHGG
+Fb62klB5XYePywsvxLo2nIGVIvhBgsfIvUpq
+--- ONLpuXfKtuCB+VD5IQ5KeSPyqgEb4a2y26+n5E8Ph3E
+u�D{��r�ژ���R�9�P�
j?hD�<��OӜ���>
��-�u���#�F�2N+Ys�\��
\ No newline at end of file
diff --git a/secrets/agares-backup-ssh-key.age b/secrets/agares-backup-ssh-key.age
index 0cc83ff..15eab18 100644
Binary files a/secrets/agares-backup-ssh-key.age and b/secrets/agares-backup-ssh-key.age differ
diff --git a/secrets/ddns-credentials.age b/secrets/ddns-credentials.age
index bd19e1d..9ae8b77 100644
Binary files a/secrets/ddns-credentials.age and b/secrets/ddns-credentials.age differ
diff --git a/secrets/etc-ppp-chap-secrets.age b/secrets/etc-ppp-chap-secrets.age
index 8e50189..6a4d954 100644
--- a/secrets/etc-ppp-chap-secrets.age
+++ b/secrets/etc-ppp-chap-secrets.age
@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 L7f05w xkw7tPnkvX1TGG2/Urocw8mQe6r2/Fpxkvs1Nr3cVXs
-eJyvIUrFp0mGWXcmHjP1+5YW9cgs9m8bqUnwgm8iMi0
--> ssh-ed25519 Otklkw 1IfE9jxV6gz7yfPmSmXsTWsB36RFHmdpjw5eUlElTCo
-GyTNhYhDbD2olE6DiKkr47Mu9NMBMHsO5/pTkcx8WXk
--> ~6#g&f-grease
-lIbAZllBnOK9YRMIQfPX/veMc111/u5w83pQGuMMWUSyaHT0xwxp8IYn+R9m9iV0
-haQXgTSuQxPhGUJg+1wwncJwnYgzDcCPruprrFTmf0s5HZDr
---- n9uSP8ZmTTZ89mlRiNKtRfAEz7NV7Yn0ZQhzP4uh4fo
-�#����K���~l�Y�_!�1!fz��@
-O�FИ(��Z�!�Ȣʟ8aB�^��!CFP��[h$�Oaf����e�(l:X��*p����
\ No newline at end of file
+-> ssh-ed25519 L7f05w 6Ct4ARdph2N0g7ZFljPbEAg4R2gP5z2qMupI288AF3c
+NaQUNkEt7XsV0A4nNR5uguwK6C2KN26FJjeNB0mtz8U
+-> ssh-ed25519 Otklkw uyRTZRjgzleuEFqGJDiO84c5yXFV0XtQci7PdroNzAE
+vl80LseOwmKyR+d+VXWseuszqao56GjnbyN6XzETKt0
+-> {D^ar+U-grease bvk{ `4v Tc? Fv
+m/JnzLsIbh8nYWSIvbBl7GwnZQPvAyuHSbmNWiN5pzS7O+wFs9xWwl26Vn6Y/lEf
+JL9+Ra5MHsiR7C9XRf7or1rd62SPuIKyaWlq+Z4Vqr4Of4jWyJqQtNo
+--- 5cNGpnlhGc0NNriUIZ5KYGR7Erh/fPqV8/8qnpqEn+8
+sqD&���L��=7��m��i��أ%Sf(�#�re���)ڧ�^�v��c$g��y�y�A��k6��̦�
F�8�J=��J�
+W
\ No newline at end of file
diff --git a/secrets/etc-ppp-telekom-secret.age b/secrets/etc-ppp-telekom-secret.age
index 613016e..a97dc40 100644
Binary files a/secrets/etc-ppp-telekom-secret.age and b/secrets/etc-ppp-telekom-secret.age differ
diff --git a/secrets/gorgon-backup-passphrase-gs.age b/secrets/gorgon-backup-passphrase-gs.age
index ad2fd69..24beb40 100644
Binary files a/secrets/gorgon-backup-passphrase-gs.age and b/secrets/gorgon-backup-passphrase-gs.age differ
diff --git a/secrets/gorgon-backup-passphrase.age b/secrets/gorgon-backup-passphrase.age
index 72e5a50..38b0cbc 100644
--- a/secrets/gorgon-backup-passphrase.age
+++ b/secrets/gorgon-backup-passphrase.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 0aOabg 2rR9gmucthvZ2cNWMKzaVQfAvZgvI4fy7gYi5+AEpVE
-b4neKeY8BadfOdPqasjkR0xmaPTtv97W6UNIfUi+nxY
--> ssh-ed25519 Otklkw wogPCmJIBOBM6c73jWFnF5PmrDo9yELoF/kxLI3ZwVM
-P0V8L8WKZICCkLgxbRk9aTArx0GghZUbG/xLglL4+l8
--> +R-grease
-/mciikQ2
---- UYVFwxGvyG9o196hwTXJkjVSr+hGtAZ+QmZPa4NHiQk
-��\'��x�@��Gן��)m�u�I�or۝f|�6�l��}��gxo.�Iwm3��ｭ\��=Vm��UH���gI��[K=?
\ No newline at end of file
+-> ssh-ed25519 0aOabg rRJrTkyZU+Fmx05c4FvTCW2xrGKVzqqkECywb99OLwg
+AELU54TN2oUxQ9r2Zx2CltVvyKh+7kCJnccnENtAZyE
+-> ssh-ed25519 Otklkw i9UGmqESZAaz3x1B5OjJq/ILEQnDRWsGbgHtnICrBl4
+plEjZljaiRmeOhqFxblzfFcy/VqViE18hSwPrxgHm6Q
+-> Ukp-grease CP.W
+MZp3tfA9p0SwGxc1gaphv1XUPi3jj4dfeiBmiVl/FB7DYubrLzbJZ2Zviz3S2h5l
+upLMFRZsTyhskVQ0lCfXFXb86xLXTc6pXM0klBwGajJrJFbF5Q
+--- JZS2Vh+BBv5memqLMM+onaaldFUFm6keKFQooGSmL04
+.o��T� �2���b�‹k�,������E�������x�|����g����1���h;\}��8�=e)л�'�Jp(�
\ No newline at end of file
diff --git a/secrets/gorgon-backup-ssh-key.age b/secrets/gorgon-backup-ssh-key.age
index 43c53c4..64ae675 100644
Binary files a/secrets/gorgon-backup-ssh-key.age and b/secrets/gorgon-backup-ssh-key.age differ
diff --git a/secrets/hydra-github-authorization.age b/secrets/hydra-github-authorization.age
index f0c396e..a78cf11 100644
Binary files a/secrets/hydra-github-authorization.age and b/secrets/hydra-github-authorization.age differ
diff --git a/secrets/ifrit-backup-passphrase.age b/secrets/ifrit-backup-passphrase.age
index 74ff2bb..640ac05 100644
Binary files a/secrets/ifrit-backup-passphrase.age and b/secrets/ifrit-backup-passphrase.age differ
diff --git a/secrets/ifrit-backup-ssh-key.age b/secrets/ifrit-backup-ssh-key.age
index bc6de42..6611b7a 100644
Binary files a/secrets/ifrit-backup-ssh-key.age and b/secrets/ifrit-backup-ssh-key.age differ
diff --git a/secrets/miniflux-admin-credentials.age b/secrets/miniflux-admin-credentials.age
index a9487bc..06ff0e0 100644
Binary files a/secrets/miniflux-admin-credentials.age and b/secrets/miniflux-admin-credentials.age differ
diff --git a/secrets/ninurta-backup-passphrase.age b/secrets/ninurta-backup-passphrase.age
index a8dc0d4..be260fe 100644
Binary files a/secrets/ninurta-backup-passphrase.age and b/secrets/ninurta-backup-passphrase.age differ
diff --git a/secrets/ninurta-backup-ssh-key.age b/secrets/ninurta-backup-ssh-key.age
index 86ba2ec..30a2b2e 100644
Binary files a/secrets/ninurta-backup-ssh-key.age and b/secrets/ninurta-backup-ssh-key.age differ
diff --git a/secrets/ninurta-initrd-ssh-key.age b/secrets/ninurta-initrd-ssh-key.age
index 534a56c..7d1aae3 100644
Binary files a/secrets/ninurta-initrd-ssh-key.age and b/secrets/ninurta-initrd-ssh-key.age differ
diff --git a/secrets/paperless.age b/secrets/paperless.age
index a61e12c..d2c2d86 100644
--- a/secrets/paperless.age
+++ b/secrets/paperless.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 0aOabg deIgXn8a+arzwGBlDr/jSwh/yoZ4yNUieqiDOEVeqQc
-MTYJWoYqvLCVh2Nw0b0dLyYR++kfUSVVGQuVlcXa3XI
--> ssh-ed25519 Otklkw gVXAVxWtkBp3qi4afl5/8X62iXM0lmj3qU1hzdLpoRI
-0JNv0Gb3MrUODDjO9yO6+IUoP5wTrd9cu3B9r20umsM
--> U^y7-grease +u vsf{`Z$r
-OPfX961ZFMCMEq5kxV2XmOS2ahq5xCrvLkORHK2xzhcYlN/7aVz2jkkzkkKxsLS7
-J1tpba10ZnC7
---- C79gzWZZ5DM+/mEApSfkI6CcsWxEbYY3zq4mFMxsgSY
-�r�<L-]��뜁a�Axx匑���/$����=���e�6�op]n6U_E��'3��A�|(X��h
\ No newline at end of file
+-> ssh-ed25519 0aOabg 6QT8adxrQxGCx9w6JZPkbCsCM/Vos+D41JoEQ19h0AY
+UaXt2lE7VnhaQ4McdCIGo8kdaYrPyg3ne8MIBCt7NXE
+-> ssh-ed25519 Otklkw GJQj739xwoeP9xTLpLrCxANx3/Ebipnr345xKSFLf3w
+xtQBgTYrLzkaWBkx8pi0R+GKa6inKFzFD5tompll3wo
+-> )gWM0O-grease i%" tB
+culBBLA5Bt/POa9w
+--- Vtxd8HsFnjBl6eXE4UYNoR1Ca/JA9UlK/WE+FNkmPtk
+bVv���:��ah&�4�fNJ��2]��{!%1��Ia\}Xe�x1~_�"�r�,�j:O?�����5
\ No newline at end of file
diff --git a/secrets/pruflas-backup-passphrase.age b/secrets/pruflas-backup-passphrase.age
index 51febee..7750b1c 100644
Binary files a/secrets/pruflas-backup-passphrase.age and b/secrets/pruflas-backup-passphrase.age differ
diff --git a/secrets/pruflas-backup-ssh-key.age b/secrets/pruflas-backup-ssh-key.age
index 20028f1..dd41e28 100644
Binary files a/secrets/pruflas-backup-ssh-key.age and b/secrets/pruflas-backup-ssh-key.age differ
diff --git a/secrets/pruflas-wg-hydra-key.age b/secrets/pruflas-wg-hydra-key.age
index 4dea193..be57748 100644
Binary files a/secrets/pruflas-wg-hydra-key.age and b/secrets/pruflas-wg-hydra-key.age differ
diff --git a/secrets/pruflas-wg0-key.age b/secrets/pruflas-wg0-key.age
index f62b9dc..122adcd 100644
--- a/secrets/pruflas-wg0-key.age
+++ b/secrets/pruflas-wg0-key.age
@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 J6ROvw eX4e1/ZgiIHwzU/wdJmAizVoLdWTIdBfXFy/RATM5Ho
-BV9z3gp3LniSjx0425xy7NrVmt7KpOlduj77QkuV+Kw
--> ssh-ed25519 Otklkw YVZRmNQdFB9k/dim3UXMwMW1YJSBbMtk+kJ5urooDxA
-V7tLGiQo88RI5X0ViSmAWxDubLdFzQ7VM8nf2PXcAgs
--> 24-grease
-M4DzbwlJ7iM9dE0Ug/NS2iRU
---- l2RGwwSUcOpt/YRG/l3aYBiMMF28SoVNUc3nl2A++38
-5�����H��}+`g��}	�b��a��)�������j�69�k��_E���yS*�v���JzbwGmp�DP�C
\ No newline at end of file
+-> ssh-ed25519 J6ROvw R+xnmMAoVmaJi9UMYBSX5CKk21LhI9iIionc6Nh8ZWg
+eR+OpFfB6BIOzOUeeY5IzmXerCCiqOYS9ZAGIb0UAS0
+-> ssh-ed25519 Otklkw HYpIGulRkcfpKhSdb1mF/hbBHiXCUzYR6/b0KspgHTU
+1HAtdynQZ10AVgGqh4cw3qDqSh6Suum3zYo6/G7qKw4
+-> +YMQ-grease
+wyHx9k+fMnxTm1LMDhmmMye/
+--- g1F7i8Y0foxjDp6qbBtjhY3A/vyxM2R/zIQJZTG2F5o
+.��]�n��"wjkYd<2�{N�	�N�0����`�X���U�sPx�V)n��fO�g��<Nv
+���B5$��e�g>�
\ No newline at end of file
diff --git a/secrets/pruflas-wg0-preshared-key.age b/secrets/pruflas-wg0-preshared-key.age
index d7389e5..7528977 100644
--- a/secrets/pruflas-wg0-preshared-key.age
+++ b/secrets/pruflas-wg0-preshared-key.age
@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 J6ROvw RSmOQps1P364OmALB8CDN3a3opjVnjRetSrRNwRWwj4
-amGBdoyL0ZKnoNc3+uDYLCJxasM7fe8kMBpc27YDQXI
--> ssh-ed25519 Otklkw COlRXvKrV5S2p4BNiiO8+KTYXa4GueT+HpKLCIjxzgM
-ui82jT1CSKUBhDzUcebhGhTBr6GyirgSkbqWrVrJXx4
--> %KN@wF-grease 9Y'V@{E: :]
-4OY+tb7//oCAEInx2fvw3MKp8yPIjXqLqtU
---- 0I3N//LfWrBi+pssXEPxmmbBfsvQ31MCG9UFAkisTMw
-ʶ��0��J�o5E��\��h�,D�կ��J4WY���NC�8$��6R-��WeT��d�IZ�'R��%����&
\ No newline at end of file
+-> ssh-ed25519 J6ROvw wkW16tPBMBW6C6OPU6Dbq9mfk8w1hdTNB1lEP7r3ym4
+oeGp1/oGD5R208ZutBsJUsA+A94hOASnm0JavDjsHvU
+-> ssh-ed25519 Otklkw AQCgfaxhvd59oOf/nH75WhHtYt6RXuO/U/c+pKemGDQ
+Jx5pffK1rX2Yyal+ZvTTGiMm2PsMZQVIRguHpDU2iig
+-> ^-grease '
+xxEd1+U8pgjgcmgxRJqbLIHNoga8kUdwaSVsypHL1UB+kPAPFIdZF4KMOj7hshzC
+vmaUOinUhDiWXQ
+--- A5Ig3NOr1MW/FXwh7xDkITEd3o/LU8TxBdrIq5xLsZc
+Ce\BN^ġ����&.���+�k���,��x�)T��TS�:h򎪳SN
����m
�gׂٔ���_a�W���
+/��
\ No newline at end of file
diff --git a/secrets/surgat-backup-passphrase.age b/secrets/surgat-backup-passphrase.age
index 7107bfa..2c9bd49 100644
--- a/secrets/surgat-backup-passphrase.age
+++ b/secrets/surgat-backup-passphrase.age
@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jUOjpw JrJZKZsbU+oF9GRmXfw04bppX1YCiv/kiHZFl2XgZm8
-1fJKxMNdM8pBQG447SZMrnNswBVjbDefv30YERMzjyM
--> ssh-ed25519 Otklkw j9I9FVJI1Y/WsO3Z8/NcEhUT6qU36r1O3M7rNWdwgVo
-GQOyogjb68YflICPEJ1ZiEyXjMVf0kFg75Fh5vb1k/U
--> n-grease L 5zCO]bn j1@tCG
-JPGxlhedGFtqxORJCqyabQvObTurBFM5KYpyCnscjw
---- EPR6lMAI7VtKjeYhrk9AG1ZYMQdevgubSVlrCtNsQAQ
-H0xD$-�S�oϟ/,��$�r�{�.C13s�*a_�����<�c����ć�YP2�����8[
\ No newline at end of file
+-> ssh-ed25519 jUOjpw zb9yidyhlOj2LnVSCjNwq0MBj8Ik7zdT+6vs5k2vdTY
+lxFHzj+mUpW8ogGkfpZZWZRPfMp38Sb2GYojBUrxGB0
+-> ssh-ed25519 Otklkw G3tj2S2BM+jmGg5ajD2hTIKAWJMAhuHAT4jpFpu2YmQ
+XDLRUWirSzXQ55HnWdICzICPQDL8pyJC9SnS9ODwhdM
+-> v#M-grease
+rEp5i85i+0HA+Rx31HR27NU
+--- 2Q+j2Vh/Tbv6NYYg614YL1+yP8hff++2zAuWV7dHDe8
+H�Y���\�	����\;�m~q�o�����z8�5�Z����������̯e9I���a䔝�Y�
\ No newline at end of file
diff --git a/secrets/surgat-backup-ssh-key.age b/secrets/surgat-backup-ssh-key.age
index 66f3f49..7523e7a 100644
Binary files a/secrets/surgat-backup-ssh-key.age and b/secrets/surgat-backup-ssh-key.age differ
diff --git a/secrets/surgat-ssh_host_ed25519_key.age b/secrets/surgat-ssh_host_ed25519_key.age
index 168ea1b..c664303 100644
Binary files a/secrets/surgat-ssh_host_ed25519_key.age and b/secrets/surgat-ssh_host_ed25519_key.age differ
diff --git a/secrets/wg-privkey-vpn-dadada-li.age b/secrets/wg-privkey-vpn-dadada-li.age
index 43f6549..b956b5e 100644
--- a/secrets/wg-privkey-vpn-dadada-li.age
+++ b/secrets/wg-privkey-vpn-dadada-li.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 L7f05w 626jkdszE7nFjXsB8InmF9c7z0g6Lx45rXviJJVipgk
-HOo5D8bIXEUWN+OQOrAtsheqEFpoTEljiQN9iLsGYFw
--> ssh-ed25519 Otklkw MoBeg8zEAs7S8yRN4kMWFmh1wpFG9a3sIl7B3933U0I
-KHbNqlQgIfC4oOaXnCHuiXxlmqjwrnR72IdTd18yCVQ
--> ~\AYPd-grease +[i?zA&
-k2qPi9GkmpHdaMnPqWsMPWdqa00MdrneQSDEixtbPmedrzPD1w
---- R5nczLpf0MEbOrJBfTOM2mHkh3zbWxZRAn6Ke4PsHSg
-[V$�����q
-�@�<_���T��YfxM���|��؝)���U�k��]93�R��]����� �!rĬ����K
\ No newline at end of file
+-> ssh-ed25519 L7f05w DHsnBF853MmsymLqLiF0nNe2ont+At8LZYE/yqHfBQ8
+mVJGzwz40Zqd5SkPNRDj+rFhUVwTiuzDXdTy2OJ+3yY
+-> ssh-ed25519 Otklkw TPuqHErGEA3YkU2W235Q5y0JNIBJ+nFEqxt3UETcPWM
+RlJi5xyX6LtBIuhkEhoIS3d2cGqjqMYXegQVyPa0alE
+-> 9-grease
+CGq2mKa9tcpbfwJal5EVowc
+--- +XubXWyX7sV8y+iK+jxCxTIFhJO4s/dkwsznKxKCCfw
+�l��վg{�a�'�I�[�z<�䴩�L'�˜e������:�5���Q:��W��w��c�.j_ܪU8�I0Pf� wT��"qE
\ No newline at end of file