diff --git a/secrets/coturn-secret.age b/secrets/coturn-secret.age
index ed606dd..6540514 100644
--- a/secrets/coturn-secret.age
+++ b/secrets/coturn-secret.age
@@ -1,9 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw CZRV0ZXKX7Fad3x1S0/ITPBJHsoz3Gkv2yQ9dUlCyQU
-vx3WIs3mY1xAg1VrX31gyfcKYiNz1x3DxtHpgmkRRO4
--> ssh-ed25519 IV3DkQ YwbOmX7usJGeVugIwzkufbYrgeD3SB1EFev/X1WN1zQ
-LL9lQPN871Uf0RMcUx6gRydHflu5An28mM4qegAH/to
--> ssh-ed25519 DCzi1A rLn66XWI3MLOtfu3VqlNG6aG7B/hRc+t07L1wQxONjQ
-K6XvGxoTot0S0UxYtORjGKbZItQT96/2aNKpArt2wVE
---- 2h9E+9Hh8WZaBDQNQ6Pg2x1bCWlJSokYBxTH7tg0Z0g
-q���%0k�i�3���Ǣ�3�@��۵\ʐ��R�l�f�Л��Vf�K�"�FA�t`�v��'I�Vd��7Og젠
K��O
�1p�3�_��k��ÌR��
\ No newline at end of file
+-> ssh-ed25519 su0Eyw 31xBB7Fv2BjG+XbthMKVOKlGIhudlcfPgRGLYZRmDSU
+DR8Srm4ceheChwILay7UwNI3RO9gKi93FONdHe6NplM
+-> ssh-ed25519 xfrWcQ 8hUMbF1LIe4DdpvbWb3hFTNAgwAQN+RZGBZiaq/+a0M
+6VnejvMDZadhEkn2EjJeKqWZgytgN9t6j0NWjaVBgj8
+-> ssh-ed25519 IV3DkQ vF4a2ga6VJRFw4YsJ1+ncHwBCy4QNzc7guR62wldmFI
+5189D6j5TxozEYChsw8jOYnMotDmfjITUvqTQK8BkFg
+-> ssh-ed25519 DCzi1A eqYOfpgG0NXtBYh49hItTqFJhk8jzLat5ClCqjTemzE
+cI5DVFiW57BxMxpSEiDZJQnxWqnbIItJDPDjjq9cge0
+--- IToc/JXCfCY1kJAJrOrx63pDzt+kwXXELFJ9Xpnuyzw
+�������Æ��H�-&��!�nq3ε>9Dp��g��UkS��������$�\���1�\[>��ɣ
+�?����%���5O!{1r70�p􃆙$"
\ No newline at end of file
diff --git a/secrets/duckdns.age b/secrets/duckdns.age
index ef73634..a562980 100644
--- a/secrets/duckdns.age
+++ b/secrets/duckdns.age
@@ -1,10 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw o68gGsP73GV1X0O9fxC10Ch+tKkRozMVhbdCjqxAnRE
-UaH+SsHwD7soVZHRxqddtdeYoeN5Hzr09mf3z3qdITk
--> ssh-ed25519 IV3DkQ bzmylmwHbXJrEvKBM9Be+FiLJ+hydiTN/5Gb44pgDEc
-aAXgH117bwJcBybdA3uNhtixGIPoQOi0xQw7YbPl0Lg
--> ssh-ed25519 DCzi1A 9pbmJ3NzrcuZ94eFhDLFegBEm+ET3JZA0/kPKxILmUk
-+ODpabvMmupX9yQEWcfkzdLdPd7LoHgK0Hcs9ZREk1I
---- JIMYZ0nutcLGf9CrevH36atF1McYWmDzP6eqqT7MTk0
-<���O�J�α��-��ƽ@P�}�qE�dR
-�'�@�X��ю�olҹԈ/hd}�O9lYԸ���.
\ No newline at end of file
+-> ssh-ed25519 su0Eyw cZ2LcxtHVTS0C6UtosikfFdj383T+CqORj2OzvWkYCI
+2mEybfmdlP0+MD2F4If/vZ1CEOC62I9wz2PGPIvsk6E
+-> ssh-ed25519 xfrWcQ AigoFpYG/JShNhp/00vRkJAjAfww9yDDDAfi66TrtgI
+0fiThEgz8SibuSkgr06wwuKATYaIsLgaSVlTKyOft6I
+-> ssh-ed25519 IV3DkQ bhsNlU2erEJP/aJsycYslfJUJSHibYPLH7vXKpuobFU
+sLPF6S/FHIQm80dxHSUkY8+/6mhsY4Npii8cXgCyVfU
+-> ssh-ed25519 DCzi1A XN9ZzLYfLJ5g2604Q3zh+GU9WEYWnWFTEj/NKhGx/no
+Qo18RZB/urMS1sI/HaBexiwvIoouGJNHgDoISMWfp5U
+--- ypjgJk/XWMXN49ydjElxn3DRVYXHOdTtjJsFMoVz/L8
+����
+�o����|�;����}ih۸,�DgP_N��t3��#�>=KI�<��rwd���ê�'�n	\��Y�+
\ No newline at end of file
diff --git a/secrets/fileshelter-conf.age b/secrets/fileshelter-conf.age
index f45811a..e0379ff 100644
Binary files a/secrets/fileshelter-conf.age and b/secrets/fileshelter-conf.age differ
diff --git a/secrets/github-runner-pw.age b/secrets/github-runner-pw.age
index 331b35b..1d0f1b1 100644
--- a/secrets/github-runner-pw.age
+++ b/secrets/github-runner-pw.age
@@ -1,10 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw /nQ/jU9ueQInqwpdQc4EaYLdCLjWJFm1LAjlRZNj6Q4
-JyC8g22DUwaDHBCndRJ9/5BSNuYOFLRPeKuC+cP1VfI
--> ssh-ed25519 IV3DkQ NjHfssmnQ/cM8w8fTs8/hXq1LR/u6G4r0V+HVKR87wk
-PtQtOXU00DaF6o3ld8hMnjztfoc2j5WfDBB3Nnt6jVY
--> ssh-ed25519 DCzi1A ay01I5g36OCHZSIOhYAdIwQ4IFMz8I9JSJAgJUpuZjA
-/QS7KBUPw3PYYICfPTHyvn0H3wef6S6zhq34u26uTXM
---- klB+JFVvmBmY/Gr/YdM3v90b4TjwW7EfrnOY6n7Bf+g
-Q[;�P4���ֿ�!ys��%�[��~+%1y�;-Q����H����h�4*ڐ�~�����A0�*�^��'&� ������{�`SE>�3�.q_ev~m

-��
\ No newline at end of file
+-> ssh-ed25519 su0Eyw 9PRT2/t8noGZwepvvah/EqcmrC8nQ2STZB/nLmaZ+Hs
+DMexIWk0bh8WBOsou1MgfFqFruKr6dCCtljWJRRclog
+-> ssh-ed25519 xfrWcQ xBEO+I6I3p8Owsp3ZbvzuZ7qoK3g7VEHmS7xoPyeXWg
+iKQHw7+RWgA9brYHAf4c0P0y1vlfN5CoX9UNLD2jPTw
+-> ssh-ed25519 IV3DkQ rXUJ9A1wb0YFKQ/ruaikfmipZ4i1P3im5ANUc/9kYVY
+IWpIiW1qp3yUZW1G8RgF5MYJmX/TaW1mMrgNfn+lcbY
+-> ssh-ed25519 DCzi1A my3uo/CJaw66ENYfsuH4KHXVMGa2UKviqHA8RmIWzjk
+YnPL8iy6lIlW++xSFfv6B+UUyx8dcQKTuTcxYX5g87Y
+--- s4o3L7JgostUH0GGDqGOpBXfayDmNo2EYodBEEz3Rqo
+D�G�
+�,]l�(\�+�
����ɩW�mf��z�=�|]��:&��_���WU�o4�k�_id���P�5�UM#M@r�y	�h�9H�Ɓ@�̎�<�Jt��
\ No newline at end of file
diff --git a/secrets/github-runner-token.age b/secrets/github-runner-token.age
index bd401a2..be69641 100644
Binary files a/secrets/github-runner-token.age and b/secrets/github-runner-token.age differ
diff --git a/secrets/grafana-contact-points.age b/secrets/grafana-contact-points.age
index f627fe5..3c20424 100644
Binary files a/secrets/grafana-contact-points.age and b/secrets/grafana-contact-points.age differ
diff --git a/secrets/kavita.age b/secrets/kavita.age
index f379408..664de94 100644
Binary files a/secrets/kavita.age and b/secrets/kavita.age differ
diff --git a/secrets/matrix-registration.age b/secrets/matrix-registration.age
index a59d2c4..202a3c2 100644
--- a/secrets/matrix-registration.age
+++ b/secrets/matrix-registration.age
@@ -1,10 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw UwIEf3qnvWdtijj8O9pDxPIwDdFClQFqTxi6FuwFSjM
-jZ5CBq6YpBORiQyX3g+X/06Yu2qki9fX6nK/BWJjpwE
--> ssh-ed25519 IV3DkQ LrTIwJXiL9k+o5ZUBIkOVL7JeYHzOjEdM/f9y9ljcnQ
-chZkXQ9J4prcsa1bpDW77rFdO6vcGr1AZYZJY0bbT08
--> ssh-ed25519 DCzi1A 3YGEQcWMBkql4DeH/4aBlhjJlkk3oYO9y2MZL8y4SEs
-BLXowrS89/RthY7rSPGyR25h20PbGrSt4xrlotLC7Ek
---- E+2akq0q9orArOzlYRKd5150G47fJUYqD8nXRu+5MP8
-��಑��������0$G��y8��W�V���\�=�yB�uk`���N��+�h��
-��芏�,c���R���\�;%����S��ث���D���/m/Y�3�//g�-������ۘ�%B�k�@��"�_O�z�]@�]�H�N'm�X�r��mC- E�I����+�q�?�3�,��`�
\ No newline at end of file
+-> ssh-ed25519 su0Eyw Gf9wjV8Ia7dphLbUh+2wJSUdnaw7UEgpAI8ljwu0p34
+PI4i8zZWSLdIRCA/xzILVPRNiwytspzSc7kn47bbbJA
+-> ssh-ed25519 xfrWcQ 7tZ3IUw5H8HNeNXTcYMtqK+cIE+nwKRgKRbQrrTkBkU
+X7FVfNCVfJuXgn/wZosPzjyewoqiJnbaSovtrCsb7J8
+-> ssh-ed25519 IV3DkQ I296++30URciM679qTv8V4BZwaBIpfYYDfH7FRC2aEk
+VFcfyihR7P/f09S5nhsFD84FSghmfTOEej/CGPRJcr4
+-> ssh-ed25519 DCzi1A CBYMYRyK7FbsZDtKMxdAMvgyR8b5VKEtYDfaf0t5FyQ
+RxP+pgrbIEMxStT8cMd187KiHKllHk1fEwg1J/iAPvo
+--- KkLrs9ybz8LxBiv1l+9xHQ23BvelluPrL3mr9A3AXOo
+�|I`�W<��i��Ӯ�=�jY�`�1��~r�˯S�:4͐�
+�������	,�s��I�>�Y���K�m�Ip6�3u8q1������a��d��u�c�Cs�F��A/����u�L7ݖ�\ۛ]��ER��W���r�me�봒�m��~�$A�*#�.�^6-��:}B�tX"���$���Q�Z��S����V
\ No newline at end of file
diff --git a/secrets/nextcloud-admin.age b/secrets/nextcloud-admin.age
index 7479cd1..ba4564a 100644
Binary files a/secrets/nextcloud-admin.age and b/secrets/nextcloud-admin.age differ
diff --git a/secrets/nextcloud-cert.age b/secrets/nextcloud-cert.age
index 55877a3..16ba405 100644
Binary files a/secrets/nextcloud-cert.age and b/secrets/nextcloud-cert.age differ
diff --git a/secrets/nextcloud-key.age b/secrets/nextcloud-key.age
index bf8f74f..46252fa 100644
Binary files a/secrets/nextcloud-key.age and b/secrets/nextcloud-key.age differ
diff --git a/secrets/paperless.age b/secrets/paperless.age
index a404e5a..d7018a8 100644
--- a/secrets/paperless.age
+++ b/secrets/paperless.age
@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw p70ChNpm3kt/8rv5PuWmdD6rZhn8GvlTp+Zt8smlAUw
-y7lTWfvpzAtSJ9KJtslhZL4E7eAkVtLthECqWiaWDd4
--> ssh-ed25519 IV3DkQ HLAXcTBhn9ZnXeWSNTLjMrVAlqvOBSB7Qlq1vARVaV4
-X951Ke7yCfy9apjaAUSZX0hhX4sFV2IWjbDxixHUYE0
--> ssh-ed25519 DCzi1A XuIY4DLwkgY1ErbT3D7f/XEKTrfmywU26WoAiowcdSU
-rDuYnccPFARdQTIlY1qgyUVMkhaLFBXNQ8WwcwnAP/A
---- FQIhF+LuZ5/+c7T9DkiURH2d5IL9Ijwfgitsa/vUFWE
-�L�J�)�����R�-�3�lV�FL��C�[r�v ��nᵅI�E��@�	;/�8�H��L'��R1�޲�w< ��.�i�{�屼�
\ No newline at end of file
+-> ssh-ed25519 su0Eyw SMreMP94QyAiyvhz+WA/s8ZIiSvr7EXTt7jVOEqn3yc
+3srDjvhsTRLJpKj+mMw41SgNiP1a8o9MIbtpn/llYWc
+-> ssh-ed25519 xfrWcQ DBXUORSHA1ncTGxR1DXniHE30FiJtxM5h6Vm4AR0eSQ
+F+5QgUnFcBOh3ogJfqyYrORigid9qxVsaxpcOeQH1Hw
+-> ssh-ed25519 IV3DkQ KPGXb3+MUvsNE22F787u1diONSWdnxSmmBQAgAE3yRs
+xQPgMee8nKR1pbYXPDCrPamVz7rxsp6T7VGVqHYRPV0
+-> ssh-ed25519 DCzi1A +jUwmDeIX4QCfGtVESMi9BNYBwsH+ntdx7LtXhX5BFE
+fpPZFMomCAoyIniCtKbMfiUnlu3Js6vHv9MgVHR3XJw
+--- VMOK7LJR3QvQ65+Ei6OxDbqHpOwJmCRb7OBSZM9bKLs
+>H���\�B��2DҞ�a"�C����n_�W���_��PH��i�ߩ\%�yoU�s˿Z9"M����X7]�reT��_��$KO�(
\ No newline at end of file
diff --git a/secrets/plausible-admin.age b/secrets/plausible-admin.age
index 2ed2886..8913339 100644
Binary files a/secrets/plausible-admin.age and b/secrets/plausible-admin.age differ
diff --git a/secrets/plausible-keybase.age b/secrets/plausible-keybase.age
index 9234d1e..b93dcc9 100644
Binary files a/secrets/plausible-keybase.age and b/secrets/plausible-keybase.age differ
diff --git a/secrets/radicale.age b/secrets/radicale.age
index d2872f4..4247e74 100644
Binary files a/secrets/radicale.age and b/secrets/radicale.age differ
diff --git a/secrets/restic-gdrive.age b/secrets/restic-gdrive.age
index 8be5fda..25cad6d 100644
Binary files a/secrets/restic-gdrive.age and b/secrets/restic-gdrive.age differ
diff --git a/secrets/restic-pw.age b/secrets/restic-pw.age
index 19fbb29..e384f73 100644
Binary files a/secrets/restic-pw.age and b/secrets/restic-pw.age differ
diff --git a/secrets/restic-s3.age b/secrets/restic-s3.age
index f4a33ad..8410a39 100644
--- a/secrets/restic-s3.age
+++ b/secrets/restic-s3.age
@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw ixfqFQTk8nZJxYR+p3ekBgYpfEzp8lPCOpSFz9xFwhI
-MY8stjHQHG11Hk5zCec6YCWRRG48d6+pgiSJxKJgyXk
--> ssh-ed25519 IV3DkQ uZqemVuJNWOfRfHFwYSym0ENGt8p+e/aPTBNefi4kiM
-zPiGpUerZ5h6WlvLpIKfUCiqeH5HAV7W2AuNBYfbaRo
--> ssh-ed25519 DCzi1A zmB9/BqL9e8Swi4+KdTogyHneLQvLjeYIC73+JkSDTo
-HqtXqVzzTwMM+Dw5XgRgZ0oP12fGIiw7ECM21fh7phs
---- JWAg0bAFaKPKaJf1CEowiqgSCcISuk0mfbiWIIh9jC4
-G��I�
ū�}EO�.�!��)_�J I1� Z�i�Fp�*FH�%��kCRO��hЊ�e��g�rŮ��y�5��P:#T|����{\q��V��Y�3�Xč=͛$�#�r�#h1��)��.�3���Թ
\ No newline at end of file
+-> ssh-ed25519 su0Eyw 45QyzNa/3vMfFnmTQ4hkQ15kJZPD/VHt9aFyn3FckBc
+KYG7zOQ9HdkfmpBEDY8V6SnVnyIeUQRk2Oh6MJWU9xE
+-> ssh-ed25519 xfrWcQ 8Ii8d3QFkbOiWTIM/7eiKw7XurizJgeRIHikx2JMfws
+ek6FAJ8Ds827l3xgq1A8Fs+kK+kXX5HmtFeb/0KWij0
+-> ssh-ed25519 IV3DkQ umesBStqFE+Zc/BguTzizNPCgsI4yAOzn595ZfGTSwg
+nJiHjhisyuM2VfWBA1EGIZyHLm0XEveAv5TEHjGhZoU
+-> ssh-ed25519 DCzi1A zzakd/lZNUc86I7u+QWq6jETxD8e0AQ36sGrT2QnrAs
+WUFSjt/DihtETyxsuaKmBcd/MBS8Bq9XQrxj4G9YfmY
+--- DaXX7M7CQP0Y7iWYasgzZkIhyqf+Agt/3tr0knmPdH4
+J<뇚<3��'�W��g#�Q#��;�-���;D���}L*O~��Ɉ5���K^�]�3JL�t��T%��������Nw�il�)gd���#R
�\;�h��5I��'3��C�M���.�Z���l����X
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 25d8c57..70a3c26 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -3,33 +3,34 @@ let
   server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAUA7uVKXAF2UcwaIDSJP2Te8Fi++2zkKzSPoRx1vQrI root@server";
   laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqcphdDEJhnSBkAZzQXZJDCzsyb/Tqpcf0pUADFpbd1 root@nix-laptop";
   mini-pc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKla9+Gj2i9Ax7cIdnTM6zsmze3g1N/qCPqhga0P+toU root@mini-pc";
+  mini-pc-proxmox = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP0kX32LfIOv8FDVvdp7lWesVvMGh5tj84nv7TkIR1cs root@mini-pc";
   adam-site = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfaIaKoNStnbfjB9cSJ9+PW0BVO3Uhh1uIbZA2CszDE root@nixos";
   users = [ kop ];
-  systems = [ mini-pc server laptop ];
+  systems = [ mini-pc mini-pc-proxmox server laptop ];
 in
 {
-  "github-runner-token.age".publicKeys = [ mini-pc server kop ];
-  "github-runner-pw.age".publicKeys = [ mini-pc server kop ];
-  "duckdns.age".publicKeys = [ mini-pc server kop ];
-  "nextcloud-admin.age".publicKeys = [ mini-pc server kop ];
-  "nextcloud-cert.age".publicKeys = [ mini-pc server kop ];
-  "nextcloud-key.age".publicKeys = [ mini-pc server kop ];
-  "restic-pw.age".publicKeys = [ mini-pc server kop ];
-  "restic-s3.age".publicKeys = [ mini-pc server kop ];
-  "restic-gdrive.age".publicKeys = [ mini-pc server kop ];
-  "wireguard-private.age".publicKeys = [ mini-pc server kop ];
+  "github-runner-token.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "github-runner-pw.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "duckdns.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "nextcloud-admin.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "nextcloud-cert.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "nextcloud-key.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "restic-pw.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "restic-s3.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "restic-gdrive.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "wireguard-private.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
   "wireguard-client.age".publicKeys = [ kop laptop ];
-  "coturn-secret.age".publicKeys = [ mini-pc server kop ];
-  "matrix-registration.age".publicKeys = [ mini-pc server kop ];
-  "paperless.age".publicKeys = [ mini-pc server kop ];
-  "kavita.age".publicKeys = [ mini-pc server kop ];
-  "step-ca-pw.age".publicKeys = [ mini-pc server kop ];
-  "step-ca-key.age".publicKeys = [ mini-pc server kop ];
-  "grafana-contact-points.age".publicKeys = [ mini-pc server kop ];
-  "fileshelter-conf.age".publicKeys = [ mini-pc server kop ];
-  "webhook.age".publicKeys = [ mini-pc server kop ];
-  "stash-auth.age".publicKeys = [ mini-pc server kop ];
+  "coturn-secret.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "matrix-registration.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "paperless.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "kavita.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "step-ca-pw.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "step-ca-key.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "grafana-contact-points.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "fileshelter-conf.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "webhook.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "stash-auth.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
   "plausible-admin.age".publicKeys = [ adam-site kop ];
   "plausible-keybase.age".publicKeys = [ adam-site kop ];
-  "radicale.age".publicKeys = [ mini-pc kop ];
+  "radicale.age".publicKeys = [ mini-pc mini-pc-proxmox kop ];
 }
diff --git a/secrets/stash-auth.age b/secrets/stash-auth.age
index 07c9360..98aee43 100644
--- a/secrets/stash-auth.age
+++ b/secrets/stash-auth.age
@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw +VIlBI3Dz8nY5ifjwFXkKh8WFVEMbNAQtaJZ5i1vxTM
-IqI7A62j4yC/UIQasFW9KtVcB7ILg2o/k3etWOz8jRw
--> ssh-ed25519 IV3DkQ 14R6yP4LHgNFHvBQoxdRcV0T2ETRp/qZeD+HquKNRzQ
-XtcaaDXn/xN6eV42TdyK/vEJ/GcJX69WLCh61UuHdOc
--> ssh-ed25519 DCzi1A Ra23RRc0x2mPCj3CdtzgDUQDmJpyVuAQkup1xenulGY
-w971HT7+UAz7of1FdCmxPTN4Ww1NwN+wnoUptZcBIHg
---- MqLymPsV3XHYyFlM1yRFkLT/9nojHs/Y8xqX2RAtS+g
-�U��AmX��0O��vP`E9׈
-Զ�q���� !�J􋌩x>]�lZ���d����J
-���aW����1
-u���yC^d�3�ߦx�
o�K��c�
\ No newline at end of file
+-> ssh-ed25519 su0Eyw ubrXjjXR/NWzbnYk8/x9A64iQDmxXsHHyxHyHvFouAE
+ot9ZNCyG0OGVALdtrHwg+6jQiNznDicBu74yyFernKU
+-> ssh-ed25519 xfrWcQ kFeLZt8cxhBhe54M1FQTAw5B/zOzaXBM8uDJMrKPwAY
+lzEzl/ZcKSZ3xmxdKE2qSJWSrJl9vS5uFpACOgTITfg
+-> ssh-ed25519 IV3DkQ 2Gobyktl920WUhBp7ukIcDcdyRem3Y359C7BUIX2Q0Q
+n/+a2XRZghCC/Ufaix50eoQJMr2ThM+xz6MimINxZE4
+-> ssh-ed25519 DCzi1A 1WGot8qzyx1OZ4oeOG1rGjhgUcjfyEd9G4GAwWG2MX0
+ky/XJR/qcmISfgwkC+ColVTjQJQWkg48whKo1glg7oQ
+--- ISzwjQcQ3rt/fcVDESFhiv+k6gPvpckjlkFZ7aWyxXA
+�q�
���G�S���g�/���y���T�$ø֩�<d"��}���t�ݪ%�,B�c��0(º�� ��9&o�c������ĆH�R:L;73�
\ No newline at end of file
diff --git a/secrets/step-ca-key.age b/secrets/step-ca-key.age
index f678860..d0a2559 100644
Binary files a/secrets/step-ca-key.age and b/secrets/step-ca-key.age differ
diff --git a/secrets/step-ca-pw.age b/secrets/step-ca-pw.age
index 55fbbf4..5d41695 100644
Binary files a/secrets/step-ca-pw.age and b/secrets/step-ca-pw.age differ
diff --git a/secrets/webhook.age b/secrets/webhook.age
index e90d370..bddfa3a 100644
Binary files a/secrets/webhook.age and b/secrets/webhook.age differ
diff --git a/secrets/wireguard-client.age b/secrets/wireguard-client.age
index afb3d33..b9a4e4f 100644
Binary files a/secrets/wireguard-client.age and b/secrets/wireguard-client.age differ
diff --git a/secrets/wireguard-private.age b/secrets/wireguard-private.age
index 63c7dee..ec0a790 100644
--- a/secrets/wireguard-private.age
+++ b/secrets/wireguard-private.age
@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw /r64m356E4kG8YDaHQaWoA71sTKJHZthRE7+0Cac+HA
-gY6BCSJEQHihmP7KgDCe/EXMpDY5fNEfj5+5VTHE/0o
--> ssh-ed25519 IV3DkQ 4Fykka5lWq0r4W9p9xATS5POGT6y2eNm6bbTtGAPaTg
-9+2mqpgrn8sh4urj441TGRdhYFjRV/q1V+acxeXvoM4
--> ssh-ed25519 DCzi1A nmHtpGA/d3JF5MkY2YY0ik70GPQCY/cNRyq+OW+/73M
-JvUlKZXq7sZ4bnWU0WlZgp+2LC11CVGRQ0ucUHnhnwc
---- 9h3SMFjxRMQhWZ0OAY/EIW9oRLDfHkQtsH2nmiuxLmQ
-��*�_��=9�љ��7�rgek���Q�j���l�3��@��Y	�v�toTzg5���sOJ��P����w%�ܛ�D
\ No newline at end of file
+-> ssh-ed25519 su0Eyw TSYqpni/Ql+lZa+oFPN3hn8fR4HM3mZ6o9UQKF2KI2s
+/IxKWNcfPpsW74ajLj5Nzu8oqLEvGht4mOaJCGKUpHE
+-> ssh-ed25519 xfrWcQ ti3YCRm+xByOvl4kjqqFMA82QNogaQsD52VelAb1IyA
+m4M25xeL2PIzp/BZ23VLb1G+3R6FYAt7wH+816hGSSs
+-> ssh-ed25519 IV3DkQ ZqrkWMup3fqiPtDa57NifZEyRTdNdcp+ZJzB6oKZjAk
+jszSfRmBrN5QLqKdM329uGHQYY+t7m0Ra/RpNkI56AQ
+-> ssh-ed25519 DCzi1A vOXrGSxFvRj7S33RfhNuI1WvOITZ0vcLsLmuutlcqx4
+8ZQQ26trhVFNEG9yFOmjFgDZh1qq0v4lpDzWYlPC5L4
+--- E0g+TAkc6Mj2vicS3ub2CEr2XYu4Q1nkWgnrs8KnFVE
+v����v�,6|WA?�d'!D���Zfu��*}a
[[
}�WA�{�p�@D��v��|��Cr��|[S�@�q�
6�
E
\ No newline at end of file
diff --git a/systems/mini-pc-proxmox/configuration.nix b/systems/mini-pc-proxmox/configuration.nix
index d248f86..c2a9d99 100644
--- a/systems/mini-pc-proxmox/configuration.nix
+++ b/systems/mini-pc-proxmox/configuration.nix
@@ -6,6 +6,7 @@
 
 {
   imports = [ # Include the results of the hardware scan.
+    ./hardware-configuration.nix
     ../../modules/services/ssh.nix
     ../../modules/services/step-ca.nix
     ../../modules/services/syncthing.nix
@@ -27,10 +28,6 @@
       loader.timeout = lib.mkForce 1;
     };
 
-    services.cloud-init = {
-      enable = true;
-      network.enable = true;
-    };
   networking.firewall.allowedTCPPorts = [ 25565 ];
 
   mainUser.layout = "de";
@@ -99,7 +96,7 @@
     };
   };
 
-  networking.hostName = "mini-pc"; # Define your hostname.
+  networking.hostName = "mini-pc-proxmox"; # Define your hostname.
 
   # Set your time zone.
   time.timeZone = "Europe/Vienna";
diff --git a/systems/mini-pc-proxmox/hardware-configuration.nix b/systems/mini-pc-proxmox/hardware-configuration.nix
new file mode 100644
index 0000000..5faef13
--- /dev/null
+++ b/systems/mini-pc-proxmox/hardware-configuration.nix
@@ -0,0 +1,17 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  fileSystems."/data" =
+    { device = "/dev/disk/by-uuid/d117419d-fce9-4d52-85c7-e3481feaa22a";
+      fsType = "btrfs";
+      options = [ "compress=zstd" "noatime" "nofail" ];
+    };
+  fileSystems."/1tbssd" =
+    { device = "/dev/disk/by-uuid/801d9217-9c38-4ca8-914e-e31361603892";
+      fsType = "ext4";
+      options = ["defaults" "nofail" "noatime"];
+    };
+ }