cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README
commit 4fbe71c999975fe427c1e174ab65f9ed82dc750c
parent 85235b97635f3aa358cc6c45defd9759ee009b40
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat, 29 Nov 2025 12:17:50 +0100

prepare bookwyrm

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:

Aapps/talos_cluster/namespaces/bookwyrm.yaml | 5+++++


Mapps/talos_cluster/namespaces/kustomization.yaml | 1+


Minfrastructure_talos/configs/cnpg-cluster.yaml | 62++++++++++++++++++++++++++++++++++++++++----------------------


Minfrastructure_talos/configs/pg-secrets.yaml | 470++++++++++++++++++++++++++++++++++++++++++-------------------------------------


4 files changed, 296 insertions(+), 242 deletions(-)

diff --git a/apps/talos_cluster/namespaces/bookwyrm.yaml b/apps/talos_cluster/namespaces/bookwyrm.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: bookwyrm
+\ No newline at end of file
diff --git a/apps/talos_cluster/namespaces/kustomization.yaml b/apps/talos_cluster/namespaces/kustomization.yaml
@@ -20,3 +20,4 @@ resources:
     - harbor.yaml
     - cgit.yaml
     - blog.yaml
+    - bookwyrm.yaml
diff --git a/infrastructure_talos/configs/cnpg-cluster.yaml b/infrastructure_talos/configs/cnpg-cluster.yaml
@@ -112,7 +112,7 @@ spec:
         - name: barman-cloud.cloudnative-pg.io
           isWALArchiver: true
           parameters:
-            barmanObjectName: hetzner-base-backup
+              barmanObjectName: hetzner-base-backup
     managed:
         roles:
             - name: freshrss
@@ -120,128 +120,134 @@ spec:
               login: true
               superuser: false
               passwordSecret:
-                name: freshrss
+                  name: freshrss
             - name: meowlnir
               ensure: present
               login: true
               comment: Read Only Access for synapse required but RW to meowlnir db
               superuser: false
               passwordSecret:
-                name: meowlnir
+                  name: meowlnir
             - name: connectivity-tester-stage
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: connectivity-tester-stage
+                  name: connectivity-tester-stage
             - name: connectivity-tester
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: connectivity-tester
+                  name: connectivity-tester
             - name: draupnir_synapse
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: draupnir-synapse
+                  name: draupnir-synapse
             - name: authentik
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: authentik
+                  name: authentik
             - name: ejabberd
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: ejabberd
+                  name: ejabberd
             - name: vaultwarden
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: vaultwarden
+                  name: vaultwarden
             - name: mastodon
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: mastodon
+                  name: mastodon
             - name: openproject
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: openproject
+                  name: openproject
             - name: plausible
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plausible
+                  name: plausible
             - name: coder
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: coder
+                  name: coder
             - name: matrix_auth
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: matrix-auth
+                  name: matrix-auth
             - name: cachet
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: cachet
+                  name: cachet
             - name: docuseal
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: docuseal
+                  name: docuseal
             - name: bugzilla
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: bugzilla
+                  name: bugzilla
             - name: rundeck
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: rundeck
+                  name: rundeck
             - name: plane
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: plane
+                  name: plane
             - name: gotosocial
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: gotosocial
+                  name: gotosocial
             - name: grafana-ro
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: grafana-ro
+                  name: grafana-ro
             - name: mailman
               ensure: present
               login: true
               superuser: false
               passwordSecret:
-                name: mailman
+                  name: mailman
+            - name: bookwyrm
+              ensure: present
+              login: true
+              superuser: false
+              passwordSecret:
+                  name: bookwyrm
     storage:
         storageClass: hcloud-volumes
         size: 15Gi
@@ -434,3 +440,15 @@ spec:
     ensure: present
     cluster:
         name: pg-cluster-v2
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+    name: bookwyrm
+    namespace: postgres-cluster
+spec:
+    name: bookwyrm
+    owner: bookwyrm
+    ensure: present
+    cluster:
+        name: pg-cluster-v2
diff --git a/infrastructure_talos/configs/pg-secrets.yaml b/infrastructure_talos/configs/pg-secrets.yaml
@@ -5,8 +5,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:kWrAUEZLhVjt,iv:wuO4QxqOu5zMqu8eQ6V+klLOwUdXUppg8d7zdvzUBa8=,tag:E8brf80dw5CvPG7weFn5Gg==,type:str]
-    password: ENC[AES256_GCM,data:V/wrYcnclwdfHftR6wDwMquUR1LZ8CQrOfpLGAYBM00/BjCJ2aPLQz9H8lioSwwz6sSJxiExxBjsxj1tTm98Jw==,iv:dn9ogln9ULN/vys4VNpRP1urr7aNAxxySFPGzEPdM2E=,tag:ZGCatn+WxLoDlBGZQ4+2Yg==,type:str]
+    username: ENC[AES256_GCM,data:ujLGierGAAMS,iv:LiSRRBUqntYKV3mEDEhlhBuwIFRuZNHW74ilQF9scDE=,tag:p8eaAS4+QackLL9k0vQ1Iw==,type:str]
+    password: ENC[AES256_GCM,data:gpbeg4JUHpheT9P0o1fpSMH29nl/jXJOsD0HJ18iO2+jm5smHIRoWcJoJDU3orDis/CAziZWwhp0keujm7BdjQ==,iv:oqOfi11poVrQH9SAyl4ZdI7GSKUXPFHqUyHme6mrnHQ=,tag:9tjzCyrPcQbXEq/fH3c5Mg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,16 +16,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -35,8 +35,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:4mtm1Wmt,iv:98KIgUgPodkmbIreBzu5c0ehn3RbXDbOaGqVVaWx0tU=,tag:8hyuD4A5ljo1XMtajsRcDQ==,type:str]
-    password: ENC[AES256_GCM,data:GtAEaHx8qaD24fCW5/yY5t3xU9qK/isuKpzmnurRzG1EuckIi5xgRdmyJ/MaoDtVuaJtvBpm4pFi3mM84Hbm1A==,iv:Pu1eM2IP2QnfyM3md/hLfQ40Y9qS4enjy5qbpkt6c+k=,tag:lWmN7xK7nibWfS2vkPenbA==,type:str]
+    username: ENC[AES256_GCM,data:rdIMsDGK,iv:nIl4CwIucbBSr01Wyxe+Om0xAPpK4bDl+T17gdwAmtE=,tag:xLwFHjjBONYGNAG2tTdPAw==,type:str]
+    password: ENC[AES256_GCM,data:4VAOat0ffKGUsG4oQfXY0zy2GqMT9q973y4B+jVtbBVhe3zjuSAbkCR7HDSDU7WKPBuu41i4VgdGzMtuq0Wldg==,iv:pMnaIKLC0LppRWQZ9Yg8s0vcG56iz1kGFTMJiPbVfMw=,tag:Q+WmRcUOb6OmO5gmaQKpKw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -46,16 +46,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -65,8 +65,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:OfPh5rw=,iv:TBXQEX9/31YGzxPKIHO/3zJLIRZ33yxXo0G3ev7O4nU=,tag:dLxRC+q8tHqgfbihlqyThg==,type:str]
-    password: ENC[AES256_GCM,data:eiuOmRL/OsexapxmhfjI3bUbvw1SvKswx7L5PEqmQugAqzjZd/IuEQVVPN33tW2VPzrzQwC7fTqOIxqQYCUiyQ==,iv:iNP2rd0/ooQiI9xaMlcgkJC7cFM1MnsiUhSNFbLMzlA=,tag:vm48Cz1FiCuHTn4+3Jjk9A==,type:str]
+    username: ENC[AES256_GCM,data:1fYahHA=,iv:f9x6TSlEPLs5z1kf+McD03VWzxjSngV4/KafD7/z0oo=,tag:xCFkGJC1zkH1YPOG6EHUoQ==,type:str]
+    password: ENC[AES256_GCM,data:QRJij07DhLOUAcdOPpzrq8XwAXTTDkLOXrQHkt9kokM00d9/+Ekid57xWlQs2GxJXRN59hmDssq+bcIZdAa51A==,iv:/10nW0ell7AniQjOVyZNrfxybw5MBk2ircQVgiap7zM=,tag:XJE9u5z+2/oOpLRXt49rGg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -76,16 +76,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -95,8 +95,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:U2odIEJQ4sEVorJErl2QuA==,iv:80JwsX7K+Z2d5AYIpEQj7/h5yFUmLbYHxihAmvvkIRM=,tag:kIzoSg5vRMvVawoEG7fO1w==,type:str]
-    password: ENC[AES256_GCM,data:EndhLaBzMACzl9UIMINCZehEWbYIDkoB+ofdpnxhVQS+8ILrhRaGyxKlWppUm9k1nrtghHaeC9WRcwYxXhnREA==,iv:8ao4Kd7t/G1FcFUIN3oQ5YEStjUtfoqnJ/6UjT2oNTY=,tag:RgKZm1XTfk87yfIETmSs3A==,type:str]
+    username: ENC[AES256_GCM,data:ADjkTDW6HoZSuRU/f+MdqQ==,iv:a1vbyzRgiGyclfEAV2oRLhbhQUCqnZZMXHPcs3uQvwk=,tag:OyeGFXyDMparhIEILz2h+A==,type:str]
+    password: ENC[AES256_GCM,data:NlkD2XmvFjRWksKpTu5X0nXOvV437Tyt3w3chiBb3CbjiEOs2XYthwsuO1tf8qUFC7sNqc4PdN74syuhBtWlvA==,iv:WjjEasub/x1Zhax8u8T1QWqG4o42B8McXOQxeHp0Xt0=,tag:uIWKAsA0HbD7umn7WLy4Iw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -106,16 +106,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -125,8 +125,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:Nu7Fns/moiM=,iv:5AQ7j7O8y2YsF/ebhIjWLQhb6qE2P4Tyawhi6B5WG9I=,tag:6nhkw/36pPjt1WArBhaW6A==,type:str]
-    password: ENC[AES256_GCM,data:beIGV/N+HU7URk4cpm3Slxn7+W+SIf/WvbGPcqgAMQ7FfCOBZbWCjvwAutl0IhkcQanQQqTeKNEbvRYQ3xE9kQ==,iv:o1HYIKGBwQR9ckv9Aemz3StZcwZfVm7p1pw9VnF3jMs=,tag:sPZoi8yGbZyA5ucL6bmUjQ==,type:str]
+    username: ENC[AES256_GCM,data:50Gbo34YZZ0=,iv:gCq4nsLr8fG0YCAHPlHA0VfCnTVxWeeieAdl1fmuUmE=,tag:8vwFsGgWiTL0HczDdAVjIw==,type:str]
+    password: ENC[AES256_GCM,data:nRIp0hmL+LX/L8kKcUtQ1Ir7znpjIyKjzXZzaGp5SvgpkUuBXAm4E/MSGFEqyTfnf8P98JQie8Bn70foGe/EIA==,iv:oJZCnXBSohlkLt75qCE3sw7OViHTczZX5BEf1wM49K4=,tag:jQGMxdtcVx+71mBo0RAFMw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -136,16 +136,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -155,8 +155,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:cYYLCecvlzE=,iv:14ZDUxLrcqKNXtvYz0tv38RR1BHXyTIzhLNcfha2uhs=,tag:L0fAo+HRNjNJuHDgwUp1bg==,type:str]
-    password: ENC[AES256_GCM,data:pqCi6gG17NcuCmcm/Db0irlezaKMbwKlYko3dpnj74nwOD1ZYwg03I8M3C17q+dVTHfUjeCSLJtwxNjZLJdY9A==,iv:j5g8lCgABmLFt8uWaDMMWPrZm6k/eSaJqEcJKIKyVgM=,tag:YnUt1U4RikCD7sVdgGgGag==,type:str]
+    username: ENC[AES256_GCM,data:4SdrHN4biHY=,iv:Ti6oM2rOt1bZaD6NejBAwVSrn8e7zOGQZoEXobS8Xps=,tag:g1+S460HVaoXIag431qQrw==,type:str]
+    password: ENC[AES256_GCM,data:unAihqnMosKtcqGHGIPzh0Rk7o0tTScrE2W/kZZhZDE0EUcgfBZVC5YMWhT9IYmv448OIq5SqGOOJb0G0K6W+w==,iv:22qmeif5TelyyLpiXaLT57WGoyicWA5FxVfLm7BaibA=,tag:+ohGlxBn4U7w4CMEO9ycQw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -166,16 +166,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -185,8 +185,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:PHaQktZI0aAhGh0=,iv:qCCiVWn3rBtOkV3YVOIgy60azLMiN9nATgd8XcEy/UM=,tag:jRnzKwBzWoMsXTgguiNH0g==,type:str]
-    password: ENC[AES256_GCM,data:WcSijiZdd4qSkbkeTQdRlq0B1kTZxGCwcU/udDYLc1cdjpMVjTXl8DUm3xTb1cZYqX+cMCim0Npd5q5JqhNF8w==,iv:uvg365iWy9AlsDOR+/EGoFUGg8oxC6l3F2XF6JMSv2A=,tag:yNZMi5fOrvRhUJ3jpjnHxw==,type:str]
+    username: ENC[AES256_GCM,data:YvqmodnC5Q4ilrc=,iv:squY2THgs6tumd8hwmAcgM1PF7WKoMoY28IAprP/ElI=,tag:2YRy2oLg27/co7Pm6JYhsg==,type:str]
+    password: ENC[AES256_GCM,data:JvWf2qaUXpA2dLronaA/uPDXBDxEFIgQ1/4jeWohtEQl5VV96o8h1+eRP52HPcLuUpy4+kpYgtGe6ttErWVTjQ==,iv:ABvNv80OlvLtg6xPtp4U5FPbA096KkgyjHnwy2sJI44=,tag:z6kPf3UVH2Kobq0q7o8hmA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -196,16 +196,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -215,8 +215,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:EWPeOt2ec/k2658=,iv:8ohMgZexgB9nDNoivF02B+iZQ5OKPTUCaZlElv9+ly0=,tag:nHRu2a1oE7vB/XMIAxsaGA==,type:str]
-    password: ENC[AES256_GCM,data:ODviWQooFSYFvdX1Q4PkkxdRoSm3gtjsyOrYt3I60r/BRWvS9v0PITBp3Yd94E5qKWCzGEy90MxAp3VqqcTegA==,iv:fexbUhoy+4PHCEy1ccsgQSu0B8H3tKjEsble30Z+Nuk=,tag:D6rWYRTxc5q8Njbnggd10Q==,type:str]
+    username: ENC[AES256_GCM,data:XwTVeFPTOETHIDk=,iv:7tguH/A7Cyar99uaDczBDnMD4dn37Z7zBWjoqp1OUwY=,tag:UQvm1+V+/HqpHfQZNcQLbw==,type:str]
+    password: ENC[AES256_GCM,data:2R6esAx8GNF9mlfdhFCb/AX3sA+HKrbK8mJSDVrXU9p2LXQogzADcHQBuuiwy34XhPfdzf9STYlvvzOJZsNIoQ==,iv:89mhsuYd7zlH1CUUzpJtk6Rf0ZxvNOjfE0k2a0e0pNk=,tag:EWidKqxvIU6++vfzP0Pxwg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -226,16 +226,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -245,8 +245,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:0BcJLCsLI0IU,iv:KMsY/qFhrFCr9sAJZgZXGMi2QTR8HMpDGYk71Ilfj0I=,tag:gg+esFm2ftMZ7GFdodJKbg==,type:str]
-    password: ENC[AES256_GCM,data:AU7UFIJiI+AfptpwFthbjTKKHd9/en96pTNECOBMYgDlnTuBrB2WxNxES0HfCTk/5rB9YnkntyEUE9jp4s5tng==,iv:tJ0hVoKwX1Fy48xFJgzChavQcM2OSSJuFu8Q4OrMd0c=,tag:xFCCsP2uAX+NeITIfcCLig==,type:str]
+    username: ENC[AES256_GCM,data:FvhDgAqJSDZT,iv:CmBDA4nK94pcrmlbbcaaubh0q1d6p4lH6K3S+yH6WPM=,tag:e53fvdAHH+SAu6tnnUZAwg==,type:str]
+    password: ENC[AES256_GCM,data:u7bl+L/Y3pzqzNJIg+VDv+1R2S++gNBi6OsAzxObyx3HQ7jYNmUjzqvl2XwhmNOEAm5lQnvpDC6/Uvhuo4zfAw==,iv:LJPzthgdMyfMFMqZDmY3KyEohBHTAwKNIPsKbJeOJf4=,tag:8BD3qU/4b5HTVT8+FplqYw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -256,16 +256,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -275,8 +275,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:I7z/72nfWg==,iv:N+6QmcvNGv+GXd5aO7gsJrxyoZC3Bl33q1ONGgxmT+0=,tag:ANnolPil00nsaGDZUo3hkQ==,type:str]
-    password: ENC[AES256_GCM,data:2xET6pfnFuSMLRN3HBD5R/YFIGX58qoCIGjJa9UdFGUueO7pLTSTSEqI04jNRuYq3Sucu22x2Fc4/Sp0NvRqqQ==,iv:5liN5QYk1SYJICZSKhKFN0tN156YcPCUUJTeyHQJGPw=,tag:dRidOgOWDdJPrYBDJuOYvg==,type:str]
+    username: ENC[AES256_GCM,data:GuGlKppYOg==,iv:FgBGzpKUsvlu06/zgxPdzEBXQQdcQFVmV5nE1FQt+sE=,tag:WHHcudSqJruBf34XMszquA==,type:str]
+    password: ENC[AES256_GCM,data:4Uc/n6T0ZAiRlPvAPrkuMufczLFvHm2syT7hFcC7LVoQtp090D2u9O+WfsaX6vz9ktWXPMWmTyRC7dXr8neJjA==,iv:HnpSmN2f3F8M/XY+yyo9X1jUql0k8ABVRQt8quOBwac=,tag:isDc+J+uTdjSLACZcV+s1Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -286,16 +286,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -305,8 +305,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:abNw2b1BlVFT2C4=,iv:8ZXdc7iuC1iZOuy70vX6xoJSspQEp4tefYWgqbpnApw=,tag:CKsLMrelgUyuVUAP8386tQ==,type:str]
-    password: ENC[AES256_GCM,data:eXKEViE+3eaL6L6F0zlhYj2kaRflpqXB8mF+aBKmbtzRQzjEFKjvELYE6YNcLCoL29SU5kgkuIzdOYgj0k5E9Q==,iv:oRtHNR2lwWTU9pStzC4GfQJzs59rm5IWoeiPJG7z3IE=,tag:NEEVK9aZwIrpPkJCqtYreg==,type:str]
+    username: ENC[AES256_GCM,data:ZnOaIBwypL39ZtU=,iv:vYSoeKbVTYEXRq/KXaVNqU6n77Q2r5EP6GSrXz4sK6A=,tag:4jcVrFVYIQWqj+NoQQBPaw==,type:str]
+    password: ENC[AES256_GCM,data:5gY+6HDu6Pnaojfkvsy/MUE+XJuuC//Db7NecBZQrb39vInzUrAKDR50bf3g9BaCplXAkUHmp0HCCXuMZijTng==,iv:g0LEv58sI0tjQc2obbuZrllZZuVEenFwUPm3gFMIJ1o=,tag:26j+mlXRs829h1dUkc/79A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -316,16 +316,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -335,8 +335,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:Y4MAOOVbecw=,iv:LzuM/NajKmhZTyyIgUrV61t39+EXV6x3CIYq8a2+cA4=,tag:WwJHxMEQ7BqVMnEaDuO9bw==,type:str]
-    password: ENC[AES256_GCM,data:pBUDlrbAGQ+Vm/vz1wywbgTkrzkCG7ekbZkP69RaENvgs6VuzgBW59fQrQXwlRoZgjQC6WM+JyrlPQKqdBMmDA==,iv:8ROww87xEFj2/HYqc5Z1t91KojIB5/EVHIt3tTcSwdg=,tag:sQw2osDwxQphmJ4t1CmKqw==,type:str]
+    username: ENC[AES256_GCM,data:hwloj/iBrA4=,iv:2MoLtSOLG5izzuEgm84y8pVDQKv9ajbIldbAtxAye1g=,tag:Cy/PZ3Z3PSk+E0N3WgkczA==,type:str]
+    password: ENC[AES256_GCM,data:4E1Wfe/Isfo6K6TUWsoSLltoGlz7odGvV7oFMxkfQiUfY1TL0ZDEvH3wBQF2kIPPc7IIN85TnJLtzAuoRFf2eg==,iv:RjgWc6jsfYtSfAQ2nff8UV6IxTbpm/7PSgXlwx8h400=,tag:9t+71m+ZGQjaoV5epjQO/A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -346,16 +346,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -365,8 +365,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:rJ9qG8A9vKI=,iv:vXNX9u6wnd5tSsx35scKr4uCAbPQm8rW0AKrqMEKbec=,tag:3Y814+BeQmH+EW3t+9nEFA==,type:str]
-    password: ENC[AES256_GCM,data:Ltre7TMfITiAX0hokizpiGhqjQfW+xojztPis6YskWL2q05eNVJ+g3Y/T1AHxh8JJcLCrGdHwChcobT3v8iapw==,iv:hL6CXUYXkucYgQ80HHXtPdwLYgBmW/YxWS+mYMSgGpk=,tag:TqOqQg53Izb5qGkwM9wRUQ==,type:str]
+    username: ENC[AES256_GCM,data:Xoc9aMgRJoE=,iv:zbMs5UKVFT37afn3F7P4LIK86AH2GInw/w5fPuEPv50=,tag:kHONj9VIrilX6YO9YqTrVw==,type:str]
+    password: ENC[AES256_GCM,data:nbyzosgOHJCknDn5zS2TMUjN9mvwYowiyK/2aOCiElrFD7s+26hnFAX9P8+/DyvwZRDbgGLKihRoAFerwirQzA==,iv:VzyW3t0tNzqEwHlUcPzCQw499Vq2zPHb70FD0+knlkY=,tag:+tmxlgx3eihI1lW786s28Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -376,16 +376,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -395,8 +395,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:dmzSCsH4bw==,iv:uHSjUI+sQnIZIGrqJ/9Khz2JktjUZxKuHH0EaloHUDU=,tag:womlolxoFsQWIVlVmPKyCQ==,type:str]
-    password: ENC[AES256_GCM,data:/lZkId8aKgpEQvvwtxYLxMZed7bY65YtMgwNraxmPo1BZjwHibqESRihvdqggWw9we8HKigYgXGvJv0jzR1Qmw==,iv:bYSD7OXCzPPnF8DuInlWSvXWPHxy90miMZ+zvo4QtvA=,tag:0FqtUrEpEmTC0vEJ2y4qDw==,type:str]
+    username: ENC[AES256_GCM,data:IRzC+DWyyg==,iv:FT0ycbm4w1Buhc06+gzGUvPOTBD6zkjcHp0OjwqoE/M=,tag:y8qcHsuqNHG/EOwI74rMmQ==,type:str]
+    password: ENC[AES256_GCM,data:NtuN2pDf4FfLRrJYTE4bRD5kovVZvl524vZ2azVzzoP+raObLmSacqfqYL8ddDZEGEcMNXzXL6cPpDXjRKF3DQ==,iv:wQyJjk+7yzv6q6s8VVyfAfhG4i3BEbJRlP9jJ6xgUNk=,tag:+doDkqjLT3QYB/QouZCEAg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -406,16 +406,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -425,8 +425,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:zNbVRVI=,iv:ijkQ9W5s1AO159antRpdTUjTjEob/mXeptil4v1N3rU=,tag:tFeLP/iP+JGpeRqvOYPAhw==,type:str]
-    password: ENC[AES256_GCM,data:Cn9EEegyPxY7c/2hARI1KNP22FIrlhOLTLwYiFv2brl6s4xDLZphZb0pKU9Bctyv3jNrC4ImsT4XRfVgcUXcGQ==,iv:9WcpowW1Ex5sZs8YT//pV3uZG+qgLXOj/CBNVrUzVR0=,tag:4zj/oKZu3ZDbaZ4PfWl0NQ==,type:str]
+    username: ENC[AES256_GCM,data:tsiVMFc=,iv:7EWdphUoo0UvFMtoHJlZH+N02AkvK66LmlNY0jUXH/g=,tag:XE4xDv42viYJW2TpgqXK7Q==,type:str]
+    password: ENC[AES256_GCM,data:nskQr1RfZks0wDhYsxSQEeRwaq8ZaH3Bev35ghTMXGVGFsV5HMgSDuIaIWFz/LBP19G/EChxEcRbRj9khc00/A==,iv:wOCCE699VdMIV9RRo3ce2kdnZUg1XLMkeHDjxhrEBnU=,tag:GHjQF/EYZcORNB7cYMahpw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -436,16 +436,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -455,8 +455,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:x3KMvD2Y5X0=,iv:94mtMmMFs1crAwp2WAYW+3ERWTxq/OU1AzEmyhqGHqM=,tag:LvbaisDDeBWpldwqlLF32Q==,type:str]
-    password: ENC[AES256_GCM,data:kjJITBx2PAHMeHofRPgDXnfcYiO2p50eRYmCgEJltrnQLi21vQTVGaCNnv++KYTgcnmeqNYhr6TMRYjDVcSXYQ==,iv:dLfxiSRqoXHqhJO1Ybeq6rxKPcp/WzjcXQ3WgX0KKVg=,tag:0gjkAltmFTMgGVqcTgulZg==,type:str]
+    username: ENC[AES256_GCM,data:tfjh4pHq6Q8=,iv:1CV/P2hv0r4K/fIFE1+NUnJZqfYRoTTiqgs5aXkjEms=,tag:RdfgQjd5aXdrSB6TVVPsvw==,type:str]
+    password: ENC[AES256_GCM,data:UFqWCqwc4M+qkFZ42XTwr8Ikj9piDdoEjM3ytm35rMyGfhRxfwASNIs+ylL+H3P3oOXNui2GNWAA6fMoSVFrGQ==,iv:gW5JuzqBZzMxU4nFVb/hEgyrmot5v+T9S5YgB878MuU=,tag:Ty8rd/saCmMySKB6cWuztw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -466,16 +466,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -485,8 +485,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:KkMIjMl2++aEvF76+WwQLGB3Mb2Y84TrZQ==,iv:553awg8h6+Bt9Zf/6LBXIN9uT+L4DCzCGL3hBI+GaIg=,tag:BiVYwxVUgj9UIf/hBDNfyg==,type:str]
-    password: ENC[AES256_GCM,data:qMJPiSNiRJMIiPHBexZqBBoAkckmMFzFB7kT4W013f26D0sP7ndEn9h9KE91KAfhqArzXV8NLbRqAnEc1cARJg==,iv:JJfPWUYYhgKxC4CIlqQ0jsDLOBco/zPElkpqWNOrhPE=,tag:M4vmAWo03Jz4aBU1W5W5CQ==,type:str]
+    username: ENC[AES256_GCM,data:P8tSSi3+OE+9NvHC1fXzuzhChoylqOhEXQ==,iv:to5nk80rOlZr8WXNqVEy9j2Flotnq4YvLAaIZ8XdOuI=,tag:hm4f973HF0QlgzIiUwBadQ==,type:str]
+    password: ENC[AES256_GCM,data:r7aZR9t88/YZ3UULzzMQ+1nLTBD7ipSe2I78oBxqNaE1c0ZzRcncJOmdTubYcEOo2X9uKy6gLnK+8ukiGi3Lgg==,iv:fhH7jafgViceb5m76GTFwJYsasP+XZtdOfnikJoOPWw=,tag:M0UrY9GGY2CTTt73kv35SQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -496,16 +496,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -515,8 +515,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:fQ5WtcoxtO8AFl0SELhDRandUw==,iv:qucEYXo9DfrK/FbNWbAUttFWlBS+kKgEonMBi30FEYs=,tag:Z++y1zKjVZNCF/fEu4YYwQ==,type:str]
-    password: ENC[AES256_GCM,data:frNh9NhEVXt60W1nEqCPJAkcmtqmnsQm04eN0g9ne7MYSYSKPzjA+aTZVELX4zJ4eK9jafPpxp48C41eN0XrbQ==,iv:gJIdThIlyJQc+sd7PPynh+snjFcgvu0WI2cprMuqRYw=,tag:RqvcLQoHleH4BnMZUc5YIA==,type:str]
+    username: ENC[AES256_GCM,data:EZRHwP6JMKi4v9SGxVQ/aC+p6Q==,iv:rRWT6iTuTF0h/X6BNKCthiCHd/yGM+5FDtf7TIgTNs0=,tag:lxU1968kZnESEpEcVsAMeQ==,type:str]
+    password: ENC[AES256_GCM,data:F2kmc+QPa71VdczpdLL3FycsPWx5ncgQgjZ4WtDAFUFHKqu8BTbc1Of2gT1/ki9/EVq5M5nbj8uUmb/3vV09PA==,iv:Nfny8Dgg1kljZjjsP+u02lE39rQaMlevPdZwFJ0zgmM=,tag:RBmqGrg1wNf1tXIpQwmf4w==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -526,16 +526,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -545,8 +545,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:auvzIuUKbgE=,iv:V98ZbQ4ySNziims4iFpbvsbgejvpiDIfmA5Q7UvgCO8=,tag:YWHBaWxYnqWG0dvQKGm/+Q==,type:str]
-    password: ENC[AES256_GCM,data:/NM2yVd30zIw6+WEICIQRAL35GQ6FpGwx1q3ADeDIkUt8u0UsksiUPC0O2HPEczGDEOY1VI5PFTN4INY2nQrTQ==,iv:zND1ZgbuU3cj82HBxj0SsiGrYB1gnsvocqkOfuQK8Ac=,tag:WnewcLX2qgkbmfLYB5dfLg==,type:str]
+    username: ENC[AES256_GCM,data:6WDw6x4Gb5g=,iv:GvPFy2AlFDWpKha5nHFZYVHt5Xtii5lQKjMF1va1roA=,tag:idaS8oWEZYF19S919l7L5Q==,type:str]
+    password: ENC[AES256_GCM,data:QoBpUqXOfkLvJ0EGSIHOUTP/nas41s9yirYcc2arulqUzGHF+4yyVFCmrT3OFacjxNyFE7W8ZOL5ZOQJI42pbw==,iv:HhzceCRK4/hoUUKFiE9Mu5LJDnxfCv4irCeoGt5Hosg=,tag:5UeMFqon9XYVyCssFGqHQA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -556,16 +556,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -575,8 +575,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:iwUuGG/geDqk6Q==,iv:6DsNclgmXPUbLrR04jsVVBr5H6Upz8dCLnhK+CZMXG8=,tag:o9z60HR1fTvpw1u8qPIbGQ==,type:str]
-    password: ENC[AES256_GCM,data:7je8MQOaPh3W/MmXkeTX1Edo0SUK7SAMi1r9CYgDgV5ob92pHovUsA2ufsb+H3iEHKDt6sVReL75gq/rqLsDtQ==,iv:9sbJKo/3WeawAj894q0xwgreHReT1LYujXeCW+ocAzo=,tag:WtySkdiKqifPQk+8x3evTA==,type:str]
+    username: ENC[AES256_GCM,data:/cw7gLdvuNc3vg==,iv:aELKUCBZVAis46nkSOj6fVxHxLOfHi7H6zR/BCpqZPs=,tag:6TMlniZMUU71+T3XlI7yxw==,type:str]
+    password: ENC[AES256_GCM,data:eLy6zDEjwK5e+QtymwS6TsoLYCFu1uKxdiryZE6iIFOLOouYmWbFxbS2pK4efpAXPr+w0gGy0aFLr9hvu3rxYQ==,iv:65rZNCPkawu/wUrKo2/iSPuY1DQRA10zEd3SYkAXXuM=,tag:N0dp3O/lN45MniVEbBjaxw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -586,16 +586,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -605,8 +605,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:MCaKL/tZBUJvYw==,iv:Zmah6gzyAO0sOPUKJSTVvlCFkIXjjj5pdbQO3Wi8ujQ=,tag:NbqNWSb8meGuAmzhDMYhfQ==,type:str]
-    password: ENC[AES256_GCM,data:l08azy/jz6ahpmTxCKAKb906OxNZQJjpPcMiMq5rKsitu2s2+L2zz6ikrSiWs8LK1Mk5h/bzSnTL+uE2JlCK1A==,iv:TDCVkxFGWC6IvMHxXjnwQrREsupdulod5Q0JE7sUUGU=,tag:DEY5Da6wjWXfJM2+SdLdFg==,type:str]
+    username: ENC[AES256_GCM,data:r49ZpSFLRcJuYg==,iv:q/U8Sh82M0gpoWwC9R0EyRWki63RnrcwYDOV3DmMxzk=,tag:IapffclgVXO9MtJw2VA6XQ==,type:str]
+    password: ENC[AES256_GCM,data:7IOF3DqsugsCRDcmWCnZQfrSS6tS/DNp8zbKPqNvuy81CPGStDQlZ7rGYw6VkCx64rqoOIaStQ51242uwjuCfQ==,iv:p8Aq0b0f+YuUzQ3ss2qQgTrPSnIPJAlhfRJ3LPZooXs=,tag:/8PBnJ6YEk7GsUgLQc+BDA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -616,16 +616,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -635,8 +635,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:v+lVCHWY+g==,iv:GdjMfBaG5WeD+UgbuxUGz5vLMJRRLlhVo0hvxY2G/Fw=,tag:RbBWh7s8Fza1ue/GfvPn1Q==,type:str]
-    password: ENC[AES256_GCM,data:cn+i/LNrD/YWS3YiGxceGjzft2En0FYMIBk7KE7hTvEi+W6D7iROgD++mIs6OL+orWvTld2GK1J3wO0dd3TJVg==,iv:eG57Dn3R81ze63dXe3TP1SRkz8KTakCR9AWyWlHJehw=,tag:DrLfSj9Ar8nJE6AxZgSWOQ==,type:str]
+    username: ENC[AES256_GCM,data:R7VDgYZISw==,iv:DgyWCkthiP6lCWOkdw4i16LPm059In0M8a2dcMNBG54=,tag:Ar+GADN+cNIs2cfkSpTQEA==,type:str]
+    password: ENC[AES256_GCM,data:TRkj/3HMlzO4T8w7OMKdD0fgNApwZTr3RmGoKEI3RhCaYSAv9VCOaZxvQR0xyQMAI8jRdqzLVp2gkVwGyOXzAg==,iv:fgZREhyFnZ8yJS1w2hMKOTqprjkxfQbuisAzDHVxdS0=,tag:oQ3+fxrnUhSa1qhTkeUfxQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -646,14 +646,44 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTEc2dzVaMUx6RFhPM2lt
-            bWpMVm1hK1VSNTRNOTUxVm9wRDk5NWNQNHpZCjhwSjFTd2VxOHlscGpIM2E0WVpP
-            cVg2SllFUDIzQ2cvdHI1R0xrY0VEemcKLS0tIDJXMFpHUWJUdHo1a0hsUmhHRmJt
-            U0VvYTZZTENSM1BSSDNTTWZwKy94dWcK+KensHyiOhsejV1AKhLlwyxYjEwBbBLr
-            8tNjZbZsHnKN+VXLwmYyiU4GBxUdKJKATvdlAEqV+8oMOQ3Ma+g2hw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-04T10:43:39Z"
-    mac: ENC[AES256_GCM,data:/JbwJpFxB9F08vAcJuRHVhkAeHoojbrdL0/T8a9HjXEa5N93dCR/jYelFHwWFEfTvNLX1Z6jjuptMKBsS8eQJhM4akS6eYA4ze8EsUeLXKiAcTbG/MpDqqp/OpuU+f0AYr7tYwxshBK0fj5jTTzvMQuD402bEbc914ww1LHkX8I=,iv:IJSwog/MifyOuFx3rjnx6epKeLO4fWtfKkjpiaVPvv0=,tag:3kuzbqpWOKQt06IhglXN0A==,type:str]
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
     pgp: []
-    encrypted_regex: ^(harborAdminPassword|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: bookwyrm
+    namespace: postgres-cluster
+type: Opaque
+stringData:
+    username: ENC[AES256_GCM,data:iiOsgYLBRBw=,iv:dP00TqiVfwWCsRe5ghq4/AOWz++AiLJnA1bamjr3zAE=,tag:JUs8X8OCk4t/K80D/faXnA==,type:str]
+    password: ENC[AES256_GCM,data:duNZMsuAzVaf/MmMJtK+k/zaKTcdWeypS0QQCMkKdP9rV3z/D7hdHycP5g9MREc+nU7MkXdtV4APTiM0oAHU+g==,iv:CqUd5n3WssrWnSf+JGO6FGiAgAliD/EpLoT3NSSVom0=,tag:fqSB3aIxkNmloT+CPZDxog==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSc0pZbG9TaUlYd3pOSkhO
+            TERMdkU4UlZOaEp4SFV3ZVpENjFmWCtwZDFZCnk1UEVyQWd1dTVyNm1WQmUwSUVp
+            aWhXTG9TRVliM041YUFtQ3g1aDltVTgKLS0tIFFURWN6bDdQaGRoRGsvRXhiS3Bx
+            cGxjZmxVOURxRTg2MFZTK3JUdEV2a0EKSP0QMx+kmJVcZY44JiqyCLqTsWbdk5yR
+            tHk5iLgbW7zBNtoggL/C9Pol/S/u2W1OVUI1kLrxDPaZewP6Pwyn7w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-29T11:13:06Z"
+    mac: ENC[AES256_GCM,data:YDb29TKjBeeCB4HrDZNOVBoZWNofWrAhJSXysLx/6eg9xcJmix2Qmm9+j0rOXurHEHU6xfxg6rycuYpbckDr11GdyT0ep2RJvGP1H0o11BNfuF54JdcpzybhA51zDArXufWL7tPkUDwxMZimy7P4VPOFBd1ss6kXo1jY/1R8V3s=,iv:QEO3UzemLXDroZ6TFasegOgsr6Ua9I8qO/oiNMjR8Gc=,tag:kzVBvFfPXlmxREJG7upAKw==,type:str]
+    pgp: []
+    encrypted_regex: ^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1