diff --git a/nixos/.sops.yaml b/nixos/.sops.yaml
index 2b3160c..ebdfb32 100755
--- a/nixos/.sops.yaml
+++ b/nixos/.sops.yaml
@@ -1,10 +1,12 @@
 keys:
   hosts:
     - &laptop age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y
+    - &desktop age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj
     - &nixos-homelab-00 age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
       - age:
           - *laptop
+          - *desktop
           - *nixos-homelab-00
diff --git a/nixos/secrets/cloudflare.json b/nixos/secrets/cloudflare.json
index f597013..61e1e3c 100755
--- a/nixos/secrets/cloudflare.json
+++ b/nixos/secrets/cloudflare.json
@@ -5,11 +5,15 @@
 		"age": [
 			{
 				"recipient": "age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueUFnM2lJOUFrbUVhUmJU\naHh0clBEL0tpTmszM0RKVC82MG9EQzdLNHk4ClhCQTZ1QndMMXZjc0JWc2E0SjBE\ncjJtVHhaU1JQaWpvNjJpOVp5U3hCekUKLS0tIElRc1dMN3hUUUtzVDBJRldnYThY\nMW9IVm14cnRSTEdkZjJHeHBlZnZ5dHcKffa53g4DDtAvB8aynEbV5tLFkOScAb0t\nfZCPHb9419FAOLtG9MoDmIc2vTM93XlgAUcOZZvQz04JpTQyCiHOUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWc2NJazRRK0FORUZBZXpq\nbmErQjhhOXNVVWxiSDJocXV5WHI3aHMxeFhjCnhSbitwS3dIdndQck5Jalk2cVoy\nUmY1Q1YxMnJWT0FoY01yN0FkYUkweDQKLS0tIGxuNHVrcmdNaDg2dzYzR1RLMmwx\na1p1RmNZZWFkbVVweVBSUSt2TzVJSU0KxjZD4K47oqZDCSs6r8beNx1q9aiBrbqH\nYUNpiE6BssvaAtITYwtkt7fT++0jlNSKRd8Zsq9PXbvmpN4qAZ8N4Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBncUdYd0FuOFNxZk53TW4w\nMlBId096U3V2YzdzUmd1UmROZmtlcjBLT3kwCjBZMXFGSU90aDkrckxJa1kvUDZk\nSmxSR3FscDdJN0pFZEZWdk1XWWdpdFkKLS0tIEE1ODZkQUFJSDEwdFhUUkIwS3Rt\nREg3amJiYVBFc3hDeUZ4MGJ6RWs5QUUK+yP4DRcha433IgshEVh6UuNcxk+fVpzV\ndx7Iyr+ip18m778Eht7tjJijgIl6TZT0SZyMwiTLspLl7Qjc/uXbGg==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1bXl1TStpM0gwZXBGa3hV\nbkFieUVXRVZGbTZNWGVVYi9NNlpDZktmdWdJCi9XSUdET1cxUkFUY3doVXhWMTFk\nMnBxanM5NU1jWVVibURiQ0tUNCtRKzAKLS0tIG5UVlN0ZUM3TVhVVzFQUm16VGYx\nZG5KcmxQT01hOXcxVHZVMzRQZnU4YXMK0y6rGmPT4ugtZQ5kFJKypVhE5sPw/0fZ\nxHXwF2DWziLa5gtJmGYqr1K95gAnIgJNotIhnbyDCCodB8OIYMLXlg==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTys1WGt4bjRYRHBrTXlR\nZ3JBNUtnSjVtZGkrVUNXemdXc0JPTmIxSzFZCnJ1bXdIOEFYQ0JFZFJwR3JNLzhR\nRkR0MEppbkJXSEhvZDE3M3h1TnVsK28KLS0tIDl0eHR5eFhJRWNubVdHMjJKQkRO\nZ0w0ZWdzVldOaENRSlJjaFNzUXJUYlkKVyrsgiT/id+qQB6QXmceXZANS0Fu7qgV\nnqcp/Q0woTeWL3Y070/xjNH0L7lAQziRxnro3qMU/TrBsm0juEEp4g==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-06-12T21:09:57Z",
diff --git a/nixos/secrets/minio.yaml b/nixos/secrets/minio.yaml
index 926098f..1f75538 100755
--- a/nixos/secrets/minio.yaml
+++ b/nixos/secrets/minio.yaml
@@ -4,20 +4,29 @@ sops:
         - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZb3VMT2tIZ0doblU0aER2
-            U0p4U3dBdXlDVjdoc0s3VzR2YitmZUJkK2hFCmlYazNQcWZNZDRoQU5DN3plU0tY
-            clJHOFFnODVCVHoraUV6dWJmd3RnTlEKLS0tIDcwNUxSaEpZVk5ONlNwL0VLRGxB
-            WE9iTCtRa0F6eVplSytWTHRMVDV2OG8Kcg7HRO+CaDAMredCjIyDs+y+yorMYZJF
-            UnxVDhyDM9chijUshIIS4E84ulEw3I2phz8yNXGWowVyNQoWCNrMHg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0eXU3QnltVHU4ckdMU3Jm
+            R1c3QlZJT08wR3Z3Wm1uMlo4SWsrRnBWRG5nCklqUGFJWTB3VGtGY0F3dlVqVnQr
+            dlZ3czdVR25IM2dyVkg1UXgxTUQxOUkKLS0tIDh5ZGJaK2lGeWxlMEZGUjRvaSsx
+            QkNZdStqWnkyb1VNd3VVYlpsNzhvTDQKV+yjr5HbZcgI71hs9QqWPKZZaWQhG8T0
+            loEDHMRNTPJqshh2jgmRkEa1VdxsXB/3M2UcXd8FB9hFN54YN7WKDw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRSVJOSld3SUIzcFA3Uyt3
+            UFZvb0ZVdEZLWGgvamhab3BPZlpqMnozTDM4CkV4cytVdzNrMHJYZUNwU1Q3b3JQ
+            RXpFV3FXdGpuYWtXZjNKa3J4NktJY3MKLS0tIGpwd3FTcHhkUnJDUGhkUmNVMVVo
+            K3dyWjRrU2lHNE9FNWNzYWg4MlhsUWsKeu8Wchc1WREBd2YQlBwdXW+3UyvtjlrR
+            aTz5Y1Jv/CWDe8Pp9MBDNe+cpS7R1MwomTkc7G3FxlGYdkaeqUuA4A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuUTlHWXRFWGhmdHNTTFkv
-            VlNKVXRFczUvT1dHbXlyQkhLTVVjaXR3R20wClN3RDM5RVpOeHJoT2pLWDBKclpn
-            RGJYVlV3YXp6QzZkUzRSanZ6V3dvamcKLS0tIHJDTkpudHM5WVkxVEYxZ0ZLK1R3
-            dXEyOXpjNjBWc1krYlNmTXNKdjIyZ0EKTCaUZybpk1J2z1O38QCIlOlIbowdtEu3
-            JuzTCW2uCduc4AUyiuQqO62fSbNDkYmpixEHMgUe/Iweon12Su5rKA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTnZNd09wUnRybTRXVElv
+            OFlQdGhZbGQ5a2RRTDdYc1BRWXBsRzBtQTNZCnRSTXRBQmphcGhMSStKTkpzdUFr
+            YmlVTWNPUkhDbGtoelY1MlRGNTVLWVkKLS0tIHVzM2xDb29PNlNjS2VNYTF5Lyt6
+            Rm1sMVVnamt1WDNkUVQvU2VBaEttUkEKJGLm2sOylQvxmum3oGfstsTG6Mdbtbhp
+            3fM/9+o3BDisQm6TXq7Zakc0R7CWB7sfV1G4Y8uMAAyqbFBq4+E24Q==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-08-24T07:09:13Z"
     mac: ENC[AES256_GCM,data:TnVhig4bOGRf4v0XXwa6qaJIsPBBE34zIYDu/HTL3uRrA7vu0HiIhKn1PiI0HyKwhAwXoLbGCXutwVCEz8AcdeQuWyQ+/jmxjJgy73vg5wcHxxuiFTcwZSixBxrzszmZQsM1p7BUAPvhLuFOLDN7yZRg04iQcD5Imqj0dTXOnPc=,iv:WKhDRJypEK1hFnDjU+geqKSRgefZ9h2lgaih62TJjJ8=,tag:y/f4jXEHcPvoO/lV+WY1bw==,type:str]
diff --git a/nixos/secrets/psql.yaml b/nixos/secrets/psql.yaml
index 53435ff..f5fd5cc 100644
--- a/nixos/secrets/psql.yaml
+++ b/nixos/secrets/psql.yaml
@@ -4,20 +4,29 @@ sops:
         - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaQlJvWHhhdENTU0IrMTZu
-            WVFZUUxUa2ZFSms2eUlOVk84VEsxUHBiS0E4CnQrNVFqdEdpUDdseHRoZGpJUFZI
-            Y1dFR3d5UlF2RVpWYnRSbmFYeVFrcGcKLS0tIGlDYUZHcnk3cytSaVdKN3R6Z21Q
-            OEdRaUs4V1ZLZ3lkZ2U3UEQ0OEdXdEEKEQtKhg75sN76Xo+TP13Hk53bm/cfLsjG
-            +sLJrGoEh9JqCEuOjwq6V5pftpWU8qWKVZdTem1f4TBRV4ZzS6NdKw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4TExjL3E3WjlER2dHU2F0
+            T1U0ZHZLQTRwYUxqSjVpNDAzekRZWVVDdnhBCnJEOEtnYU1sRWVrdUduL3Yycnht
+            dURXUnB5VVY5SWkvbGlqWUZ1TzdKMG8KLS0tIDI4RmlzU0ozbU9sRGFUSWhtR0p6
+            MndtYzBwVFk3SVdiMWljcm9jc2JkdFUKZNNUL2CWSB5xJCQEYEi6tcZhkdUKQ2Ma
+            tphqrReY+irceLB614JrT9rL7t0LpCz8+CpX0xeqgtjNMFECkTRdKg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUFNrb3I5WTF2akJzRy8z
+            TStRQXdyeGtYWlpFZTRraDlmWE1JRXpuRVJnCktPOFpvZ3BLYm9aYktteVV0NzdG
+            NVV5dG5wSFVZRFRaRU5GZUtkbE53VU0KLS0tIDFNLy9xNmZOaFA1ZDFVckprbDl3
+            RTBqQVM0T1poT3k0TjR0WnRqTHVybVEKBDOYOi/AKhlUyqkLq0vhRsy3oXoS8GV+
+            yxYcuCJrMBXYEjz6QChGVldsV2HFKC5OsDBxw+z+xVhaZXcvtjzTBw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WDRqaXV1akU4U0tIN0Vj
-            OUhDWFdINEpmTEcvcDAraUVqck9pMDFab0JJCitmS0xaemQ2T0dMd1U4TzdQNldG
-            cGp4QWhkTFc0eW41ZUdDL0FOYmlDNlEKLS0tIFdjK2xLaEc4N2w1ckRYSXBjYjRr
-            VVZnNFk0empvbkNoVm5WWkhWbnk3SUkK+1wEgD9x1bRKp2SrDIgl/UYgKhnW0270
-            A90OzUDepvZNFAwKjORjNmm8n6IQ3aJz1XbKfaHQaP/MplN4vxz/5w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSTFHL0xZSklBZm0zMlJG
+            ZXNYVVN2Y0lCeWJiR1Q0Mk1lZU5pMmF6NlE4Cm1lcU10QTgrNTZxZFp6WDJSMmFS
+            cWgrOTg4bkJ2amNvbmNQd05RZ2V2alkKLS0tIDFZbUFuL3BJNUhpOGlZY2lpdVJZ
+            QzBEb29BSGYwdkxkdHhYSTNWRFBOTTQKXRvyLMCaHjCIxjj4Fh1kki+egCbRrZ65
+            GvIwtANXIQyhz39/V3wfeuUsOaIOevJBuJmZ94x5CLZDP8mEU0TPXA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-11-19T05:03:49Z"
     mac: ENC[AES256_GCM,data:uqhNCdl+we0UBjPFOBngA/2ywwXfIxpgXB9ozb7Vcy/sEZCoSob+VuEAzBQ/cbE5EuBlxoltg3Ve0r0xNNQQ5rZ+q6rfyRaSLrO1Xd3B5ITg6hLHLXIjFOGW6q15E2X1vKipnXGE11LZCsTEHCS1JCntLxMu+cTpIZbnVOx+KcY=,iv:6/H5fPHtyqvkkONF49AxLAjKVQpY+jcGm+4d+a2aa9U=,tag:hdoKyv64RpxnbQfd+S6FLg==,type:str]
diff --git a/nixos/secrets/tests-service.yaml b/nixos/secrets/tests-service.yaml
index 1736f7f..ce04e92 100755
--- a/nixos/secrets/tests-service.yaml
+++ b/nixos/secrets/tests-service.yaml
@@ -4,20 +4,29 @@ sops:
         - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VVJSaG1oZ1dic1NvNHFw
-            L1FreDJZWFBqL292cUNPTnJkdnZ2M1ZXRTNRCkhCaXNNQmlTMDNCOHdZYkhDTkFU
-            Y05Kd0FuSXJ2bVpBYnBMVGJTRkJsN3cKLS0tIHI0elFRWFU2czhaSTNnTGZMTDYz
-            aUpnMWg0cTlpcnJtQytQMWs3cEhDMk0K+8sW4ET5aiSw6sJmPUhBVQZRQSvkTomC
-            U1UJnauengAMNdA5Gdy4jKCeqWh+TlA9WPWW9p9+Z5tm4E8BsfgGtw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2KzZ5RzN0T3gyMm5YR1gz
+            Z1EyblU3cWRHMHpaY0h0bHhuRGRydFE1aFNzCmVRVEFwd2wzcytiL0d5bUVtaUxN
+            bVhtRmpnUEhiaVFIa2VVWWV2Z1Npa0UKLS0tIGt4cXJIK3J0SDkzaStRQ0FPck1V
+            YnkzUHdHRXVZY2N0TTlSUEIzRXJtMEUKuqxhQcIb7eTy0KtjikK/DHFz3YWjHxxn
+            Xy45WwRYN837vIGb4KWEf+rjjAAKFGn7POuzv9RdOC1TfpMX3igd5A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtb1Rrc2p4WWxtSzlZOUtB
+            SmM5aDlDTjExZ2V1N2FmdFczRUplZWNaZGlZCkVYalR5M3RXRWVRTCszWnIvUE83
+            a2ZTRnRxb0FMQTBldUVsWGtWTmNuWHcKLS0tIFVtS1NpdXhWMWt1QWZzbkJ5cisv
+            dlNzZ2U5VXhwUEt4U0F2cS9FRjhGTnMKP7GUh+2ws2VhdPqfydkpkW7CQTvUuZtz
+            PSeas/DAhnB6gbcU+P2xdSVITJ1pQirVoGcbRGE888dFbMPyHPre4w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZEFmMm81UmdhcGRKVjdM
-            Z0RXVG1yMHBYNysrQ0FGSFl2TTRLblIxNWhrCmFRWU1DYlNjNlVvUTBFZlltdC9J
-            TUJGcjBFZDdZVndYRkhWWnNnMnQyUEkKLS0tIFNoMUsrYU8zNGFCTWZ5YllhSEhp
-            MDVoRjNwY1AxL2pEc0FjQzg5b0cyYzAK5oVsyA6KdlxTbInU8kc/jGqQvNmJFV7C
-            iPDEFvEcz/GjejK1kVOOPXVFUEoTRY8Vt8MSoGOOzHgBvfQTWssvVg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLS1JwZW5hMldqU3hVcDdO
+            MU5mc3laTERUTzJHS2YwZ3JjVGJGeWZHNXlnCkJHcElPMWd0Tit3bE15ZnFwUUVr
+            b3dhdXhwTkVQVkZwQ2FBQjV0SzFydjQKLS0tIDdlSW0rUUFsUG5VekF5QTBPMW02
+            Y0RPTDZ6RHcyZnZ5M2cxTUYycGJvRkUKQ79IxTP5PihE380xqKAnTjPwJ1gByo1F
+            6tTVA2OFNutJY/tz6Gyyv6wHRH0WwS+VpfAjnqW5nrPN9UXEWf6/Ag==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-08-24T07:10:02Z"
     mac: ENC[AES256_GCM,data:rOWVeryENj8Vqzmv3dX3bADbfo1SuUrcowe5ODx3mPYKkYcjCaBjy8vBa3pGNFhS7jFUMaN6k5XN6aEX7+MfWxXQo0oFbIwXqUkiyIELI262dY2qq2xwzr1XPEcxGLKV0mpiSJQZg6Covoe/KFjDRh/aTHnVe8tT7TNyXNZCGvI=,iv:pbsb0aoBalFUxzBksTtg3fPKPoC9Z76rMp0wlZSb/uo=,tag:8rEyL+hNQmFfOs+gnk9Tgw==,type:str]