2026-AUG-27

ansible/inventory/group_vars/all.yaml

@@ -178,6 +178,15 @@ services:
     dependency:
       web: "app-public"
       db: "postgresql"
+  linkwarden:
+    domain:
+      public: "link"
+      internal: "link.app"
+    ports:
+      http: "3005"
+    dependency:
+      web: "app-public"
+      db: "postgresql"
   gitea:
     domain:
       public: "gitea"
@@ -329,7 +338,6 @@ services:
       web: "app-public"
       db: "postgresql"
 
-
 version:
   packages:
     sops: "3.13.2"
@@ -377,3 +385,4 @@ version:
     romm: "5.1.0"
     tandoor: "2.6.13"
     bookstack: "26.5.3"
+    linkwarden: "v2.16.1"

ansible/inventory/group_vars/hypervisor.yaml

@@ -35,8 +35,6 @@ hardware:
         mount_opts: ""
     data:
       serials:
-        - "WMC6N0E617S8"
-        - "PN1134P6HVTL0W"
         - "PN1138P2GH354H"
         - "PN2131P6GJKSMP"
       fs:
@@ -50,12 +48,14 @@ hardware:
           - "degraded"
           - "nofail"
         btrfs:
-          data_profile: "raid10"
+          data_profile: "raid1"
-          metadata_profile: "raid10"
+          metadata_profile: "raid1"
-          min_devices: 4
+          min_devices: 2
     backup:
       serials:
-        - "6261S5G4S75H"
+        - "PN1134P6HVTL0W"
+      # Spare
+      # - "WMC6N0E617S8"
       fs:
         type: "btrfs"
         label: "BACKUP"

ansible/inventory/host_vars/app.yaml

@@ -25,7 +25,7 @@ vm:
   data_storage:
     name: "vdb"
     pool: "data"
-    size: 3.5
+    size: 1.75
   lan_mac: "0a:49:6e:4d:03:00"
   lan_net: "lan-net"
   lan_group: "vlan10-access"

ansible/inventory/host_vars/bk.yaml

@@ -21,7 +21,7 @@ vm:
   data_storage:
     name: "vdb"
     pool: "backup"
-    size: 3.5
+    size: 1.75
   lan_mac: "0a:49:6e:4d:09:00"
   lan_net: "lan-net"
   lan_group: "vlan10-access"

ansible/playbooks/app/site.yaml

@@ -298,6 +298,14 @@
           tags: ["site", "romm"]
       tags: ["site", "romm"]
 
+    - name: Set linkwarden
+      ansible.builtin.include_role:
+        name: "app"
+        tasks_from: "services/set_linkwarden"
+        apply:
+          tags: ["site", "linkwarden"]
+      tags: ["site", "linkwarden"]
+
     - name: Set homepage
       ansible.builtin.include_role:
         name: "app"

ansible/playbooks/vmm/site.yaml

@@ -178,6 +178,7 @@
           - python3-apt
           - python3-libvirt
           - python3-lxml
+          - rsync
         state: "present"
       become: true
       when: "'init' is not in ansible_run_tags"

ansible/roles/app/handlers/main.yaml

@@ -208,3 +208,14 @@
   changed_when: false
   listen: "notification_restart_bookstack"
   ignore_errors: true # noqa: ignore-errors
+
+- name: Restart linkwarden
+  ansible.builtin.systemd:
+    name: "linkwarden.service"
+    state: "restarted"
+    enabled: true
+    scope: "user"
+    daemon_reload: true
+  changed_when: false
+  listen: "notification_restart_linkwarden"
+  ignore_errors: true # noqa: ignore-errors

ansible/roles/app/tasks/services/set_linkwarden.yaml

@@ -0,0 +1,87 @@
+---
+- name: Create linkwarden directory
+  ansible.builtin.file:
+    path: "{{ node['home_path'] }}/{{ item }}"
+    state: "directory"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0770"
+  loop:
+    - "data/containers/linkwarden"
+    - "data/containers/linkwarden/data"
+    - "containers/linkwarden"
+    - "containers/linkwarden/ssl"
+
+- name: Deploy root certificate
+  ansible.builtin.copy:
+    content: |
+      {{ hostvars['console']['ca']['root']['crt'] }}
+    dest: "{{ node['home_path'] }}/containers/linkwarden/ssl/{{ root_cert_filename }}"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0440"
+  become: true
+  notify: "notification_restart_linkwarden"
+  no_log: true
+
+- name: Register secret value to podman secret
+  containers.podman.podman_secret:
+    name: "{{ item.name }}"
+    data: "{{ item.value }}"
+    state: "present"
+    force: true
+  loop:
+    - name: "LINKWARDEN_SECRET_KEY"
+      value: "{{ hostvars['console']['linkwarden']['secret_key'] }}"
+    - name: "LINKWARDEN_OIDC_CLIENT_SECRET"
+      value: "{{ hostvars['console']['linkwarden']['oidc']['secret'] }}"
+    - name: "LINKWARDEN_DATABASE_URL"
+      value: "postgresql://linkwarden:{{ hostvars['console']['postgresql']['password']['linkwarden'] | urlencode | replace('/', '%2F') }}\
+        @{{ services['postgresql']['domain']['internal'] }}.{{ domain['internal'] }}/linkwarden_db?sslmode=require&\
+        sslcert=/etc/ssl/linkwarden/{{ root_cert_filename }}&sslaccept=strict"
+  notify: "notification_restart_linkwarden"
+  no_log: true
+
+- name: Pull image
+  containers.podman.podman_image:
+    name: "ghcr.io/linkwarden/linkwarden"
+    tag: "{{ version['containers']['linkwarden'] }}"
+    state: "present"
+    pull: true
+
+- name: Deploy container file
+  ansible.builtin.template:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/linkwarden/linkwarden.container.j2"
+    dest: "{{ node['home_path'] }}/.config/containers/systemd/linkwarden.container"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  notify: "notification_restart_linkwarden"
+
+- name: Enable linkwarden.service
+  ansible.builtin.systemd:
+    name: "linkwarden.service"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+
+- name: Check container archive images
+  ansible.builtin.stat:
+    path: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
+  register: container_archive_images
+
+- name: Save container archive images
+  containers.podman.podman_save:
+    image:
+      - "ghcr.io/linkwarden/linkwarden:{{ version['containers']['linkwarden'] }}"
+    dest: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
+    format: "oci-archive"
+    force: false
+  when: not container_archive_images.stat.exists
+
+- name: Fetch container archive images
+  ansible.builtin.fetch:
+    src: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
+    dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
+    flat: true

ansible/roles/app/tasks/services/set_nextcloud.yaml

@@ -58,7 +58,7 @@
     - "containers/nextcloud/ini"
   become: true
 
-- name: Check data directory empty
+- name: Check .init file
   ansible.builtin.stat:
     path: "{{ node['home_path'] }}/data/containers/nextcloud/.init"
   register: "is_nextcloud_init"

ansible/roles/vmm/tasks/node/set_disk.yaml

@@ -28,10 +28,10 @@
 
     - name: Check disk number
       ansible.builtin.fail:
-        msg: "Below 4 disks for RAID10, found {{ data_disk_path.stdout_lines | length }}"
+        msg: "Below 2 disks for RAID, found {{ data_disk_path.stdout_lines | length }}"
       when: (data_disk_path.stdout_lines | length) < hardware['disk']['data']['fs']['btrfs']['min_devices']
 
-    - name: Set btrfs raid10 volume
+    - name: Set data btrfs volume
       ansible.builtin.shell: |
         mkfs.btrfs -f \
         -L {{ hardware['disk']['data']['fs']['label'] }} \
@@ -54,7 +54,7 @@
         mode: "0711"
       become: true
 
-    - name: Mount btrfs raid10 volume
+    - name: Mount data btrfs volume
       ansible.posix.mount:
         path: "{{ hardware['disk']['data']['fs']['mount_point'] }}"
         src: "LABEL={{ hardware['disk']['data']['fs']['label'] }}"
@@ -92,7 +92,7 @@
       failed_when: false
       register: "is_backup_disk_fs"
 
-    - name: Set btrfs volume
+    - name: Set backup btrfs volume
       ansible.builtin.shell: |
         mkfs.btrfs -f \
         -L {{ hardware['disk']['backup']['fs']['label'] }} \
@@ -115,7 +115,7 @@
         mode: "0711"
       become: true
 
-    - name: Mount btrfs volume
+    - name: Mount backup btrfs volume
       ansible.posix.mount:
         path: "{{ hardware['disk']['backup']['fs']['mount_point'] }}"
         src: "LABEL={{ hardware['disk']['backup']['fs']['label'] }}"

config/secrets/secrets.yaml

@@ -27,8 +27,8 @@ ca:
         crt: ENC[AES256_GCM,data:t+yAyGjsbGUFfa/3wKqAHVgV15trtFrFHXRgBN5y1iJNXvqsHzdt4OO07o/d8lT2bh/UXZEHQDmx0VW+gKSouVzr+ZF2ENgXAW+d1cWWup7cLW+oC2LOf22gP3js53dGNS4+qRhPTi5M7XZztsAJgaI3+LAiDMoxoZn8jZZ2OKOB2038w8ZHCDGMUmvCMXJkk5u4o9zf8qLggdPk/MoAtQ4g4/5Q/gJsf5v6+ufZbSXnWWfwtBce7FStb3Bg06RIGG3LtDGzBxvMFpDJe3z0bidJtOlYyAJhOZF/knOTUwVlEt/Jhd9KoxRKYCMETj0eKO88bIyxZx9gmli7OuETWRyK+A8Y7xAdAoZxgeDJZjX4kcPsMy3vkGKSGRKDg+FMwX/PGwUDQmG+UyfmGqZUyc5fJWHKI8eY55jZoHR2U47tRvV3DcRlvfq8x1Ror1aMtaHfAYcTtxmhQxaWTBhpEQDMSBfMS85UMtNATQd9FXaIh3L6NB1hXCEa/3Tb03ULjkV9Ij92l041CdVUGhRbgz7iC7gy2aGap8fK4PopuqPeEsz306S1Mc1+FLrBz0Y4+545k+cNcEueKRXkColtdsTGU0JhftF3tXxynmx8W0kGKfG3o12VAN4Q8+yYPvE4XtTNVoJtzPeC+ksCem+w57gIAP+PbSdmnaEjsM/GrfTfGzJzcuCUKVDtSl8jh3B8f7f6dk0GSXftMnofdHlSXcAq3rG8oHoqCzS+k/VMz8o22uqcVHTiE0HKVK9h0jghDkkEYcGyiBsLPMlUxmkBmE8uwA==,iv:FyUTqDvjMajaHljcwnQZ9usEaL46hpvGOjNvIVUTMEA=,tag:K3h0hZfr0yjVhxpaG6bi3Q==,type:str]
         password: ENC[AES256_GCM,data:ElXnqYyR9qAiBjPqR0HVsMcknp/qqCsBbs1zLfRVqYHSX68RkNVDWOWhrIo=,iv:xiBAV2J52aQbaA9VxdUvjiYg7JTnQyeuBukTFfDCjig=,tag:lZXVek8TSTcNtcu5VyUMUQ==,type:str]
     intermediate:
-        key: ENC[AES256_GCM,data:DmzFVd4v7eAMXaTKXCJRJUq5efPOIndVUiuUxHZgS6mqkF3TfC9eaaf1E+cuaLqtjifGjc+j5AuTbNs8S76EV3sB+j9H5e+hiVSsECnrEYMFeOyWTS8Tr2CUjZUWlmvAKFYdqWnR7J9bMyaJwyxJKXSkgAocUQ5Ctd/Fyjacod2H5FTuzaS5XdWTEH1rOFv3lYZSqejjCUXASvbk5v2xEygHi6Y9vBUx8XGHiZs5QGhWAfEN/FJlozmhTOsDrzx37ozZTKnTECYEZZhGuM6oKmPWlSijsZVymFrh2LxSzYGJj5Cr9s6DJsraOuHS4A6K2gxhUNXFF7LSjnUOZxnCq9tleAUUsAwKrFfBaZA+74if2kvNouVo5T9EHnkb2zAbW4K5PFrteqMI+cvzxbsO0iOQkO5sCr+B0XE=,iv:Ip8BUzd/eNeYclMet4MlRhTaQ8Z8i3/nwFmFNp4SjHM=,tag:Ac+cCufRry7vDtKwdeItYQ==,type:str]
+        key: ENC[AES256_GCM,data:a8KTCpX+JqANyXnD7aCAUYa+peHkJ+9NCFs7LUxbywINTQ6/wS/SL5jEWtw/7V6qOXbULXhv7DnBf4nydhTPDrN+Ej9JRGAVwJvrlai/41N5u/VZAHem6dihjQEEXiHMsOxMjEeyEgpw3F+D9ozLyp7KiN0C04bm8DH5GMcfQOPQMMCFT1RcpDtP44Yj/WZ2Xbjfv5NHLueSznmI5oiq6FP9Db5feumEv5bOpxZH4HRcX+wZHl0jVj9UH0KKXVbVYCowOqCwDSbzbXDcnVB3euS2rhgxf9ZpmxrcBNDdxN+y+RL3hdYtRnIjYdPp1VgO+AUHVwrG9+ewaVJQbc3VpC8JUGYPhJmApfd5AxAZV3f28dqCXxOTNG7OykdJWGq/2XUFaTc/qO95LHsPn3CLiJV4Ftd/9cWiU2U=,iv:OlGIpEZCS4glwwP/46HUOo6cYP68eDEhhym6ZPQFW64=,tag:WszdNLVTM7v1S+eQ3LJPlQ==,type:str]
-        crt: ENC[AES256_GCM,data:nVzxH8m9/ShlGpfFZjbmP2ViRmm7b15rjXbG7ODwqiiGZE0peXiNs6LimTUZw2H69iEyI77eakW7hGjQbre9T97R1QKwmaQzSb1UNi+bj37B8KncxXxXxoKzCKa0Ebz//caA5xJTcuC8e9VwYwZUzuUJL24OP2QRUHClqZ7RYchyNjiK0ooig1nKqEg/nTpReg6Hz8aoIBBVkOxpOKjF3nFJXMZ96ID5caWU5mWdeO8s/gmAzcpr3HYAhV2HC4urybiP5/+N/jLc84JbnjQJu+5o5EJjkl/8zNrjaJxDr1WRduM2RlH6Gr6LcKiMfi6BVl5gu/W66c+ZjhGXED/uZ6IqRXcuasKe2hTW/QtBtLt+nEwzzkIj0fr+SY1FPjjlqX6tLyF9L1XI6n7bQWydljli4Bavnn5PX1cCwddfyuot5R4Zow4Y9xrEqT7e0dgnwRu/LEDdX2hpVmehK5ysrPyVFkg0GO7WwrqLbs8dGDGuz/cTXiL+LOygitPguSpmnJcBOQYxR3orPYTIk6uJOiV0X4tc1vt3iz5fg5K6OFLM7s+qV71IRXCJ1zLCY/1o4Vi6ADdkpBUheK1VY2QSH6ZftZk6Ti/Hgr+WcPSVzjrvQSqfUakXaB4o5Gbi5Px1jNzqE7/iTbpUYDMNohA91WqEnFu6Bl2OB5lZIo3uBCzzAa/1h/DogOMEwyUa+RQd88U2sDuPATTxnGJIjVYRbFqqFEf4WN1tYFOGA4dMx8mjpJAOOUxbjIJdeMFmErjVGC+ZNf362xO6kWHWcYPwspCNYEnso9+UAPnAPwUakwc8p4ak9oBVGDmXVHCa0hAiK7Hv7prKjcmzZlnnP2DYEy3lmwuCVADm,iv:tHC5Ss9zbm3Uy5leWj4oOcvCBoFXzCUjy0YnQl8TIN0=,tag:WgCzCTwWzuOTRLQpga5g1Q==,type:str]
+        crt: ENC[AES256_GCM,data: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,iv:Y6bno4J3ltsapy9p7TfNHumlrkEJFA5U8qZN/CRO3yo=,tag:0Q2Su4pLFGC62ifDDSr8lA==,type:str]
         password: ENC[AES256_GCM,data:aijMXt3hTo19xVChh1gplU8sUQjmX4Y+dSjS69Kw2cEqmEJB/pelihLH96c=,iv:zP1yDLGsbL0sxJq2PF+qe3c8rNT7Knz6vKaGwMVB2xs=,tag:Oazypz0OfAYI/eptqgaINw==,type:str]
     acme_key: ENC[AES256_GCM,data:vir3SKMdU8FsZ3fBNoSMrev3vreFG4Vsex7R4hIR7Ty68x9wqsO/YpJSNkw=,iv:e7AqVbmCOkVIaje6xF8QzISU0E3JfyU4GM7/361ybdc=,tag:HC/kMa/jmVqBwCsvR31WHQ==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
@@ -60,8 +60,8 @@ wireguard:
 #
 #ENC[AES256_GCM,data:+kiy17Z7q3EiPgo4Ykk=,iv:vOi54XHHLNIO9U0ybpU9Cn68Ymj5W4vtQ2OhTkGAmRo=,tag:h3wdCo5UfNGlHqMpeeBf/A==,type:comment]
 kopia:
-    key: ENC[AES256_GCM,data:7hdg6CoaIWPmfabk1ANXwn6VfpgGNpHsICeuxYfyiMsTiXF7PYIIl/gVY+bmkwIYUwTJ7Otip9eFKN56bej1qKSw0ukR1ZAB4mVGgazXPMBYoPkFTGE0mPWQbZVtlWlvIW25e6WpLkD7h0D3d+kV4GLK2vSHyNDfGZOQrU2qgd1PM0jgI2/HVcEYOIZ5k8QBDZ4rQjlt6pSkQUs2vO+NJxtqFziH89ONz05EYBpQnhsMC1zUQuiMKC+C0HCtVlRKiHBK0n+35mvxNDfUopX7GwycGenzC4ZZ4ExpfRkqDtZRmKU=,iv:4kI2bbCkq8R+zf8+RYBeC+78+4Rz3bLH5YMnuCFsrUA=,tag:i2YEcZoOhgcNP/LkGeja/g==,type:str]
+    key: ENC[AES256_GCM,data:7JTRJHzTCLOD68iXsPMvbgEapgYVG5iQ2RZnyNe5cgQvNOuCHVHyaEb0EKwPCyI1o8R32ygkKHzLRqojL2bBTXQN/diqNmL9PSOpkh7ZtFg/sioxEs0BjKLsrzi1gZQaB1Iyx4lrKy0L3QHH6KgjSJo/m5CyNVmLkFV545cdrU1TiHkgi90x0qcIH2YDN8VwtXyYwmzrPfx/0eHOdHbPcwI37KWf8auPBkx4UHzdbciz/mvr3AJiqs8g8CirnT5916jGS9HOGEkft2QJr2A+5PGjLJDZVHRukM6f+PSLHUKDzJY=,iv:0YcIIGbUWkcl8s+WSlW+IanQuIo+lCn92CIenid72ok=,tag:EG186gNnYIOnxCJ5EGP3+w==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:d4UcuKoG/ysu0hl8hDPjOD4oDMkboG34Ul2Yh4TM7DY=,tag:tibe0jmza3V/gi2HXqkr9Q==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:IXj2HmxdN0QdhFd7k4KK6IMCYVF+u6KfOmMS13tHP84=,tag:yZ53WiOh6NWuDIaWHiQfyQ==,type:str]
     repository: ENC[AES256_GCM,data:16V50bVVtecbF+TJcXHCx46ZPGNMgAhUOA0YbZHVTsCrOWQvTvcK2k8Iq3E=,iv:/wNbrE5GaFiQPNEp8wZ0JehbXkmah/gPm5ywNE6WVVM=,tag:vW82KTKtJ44++tqXON/SYw==,type:str]
     users:
         console: ENC[AES256_GCM,data:v1QY7h6vMmzYq/PTmnLg3M5Iwc/Ljr/1M3nJGuUJMfPN2ATY+GIMUyhYu+0=,iv:32c4YrZfTiu7sv/c9tDItmAE8G1lvc1sm6JD1GRkYr0=,tag:kj1a32+bMUsRdusadoXDvg==,type:str]
@@ -82,8 +82,8 @@ rclone:
 #
 #ENC[AES256_GCM,data:gfsEXIOqhoTsiCI4uDjDeEY=,iv:SfJwBdIFY8Z4Nt2CxjuSY8PYKebQvKcg9n2xL3w7rsU=,tag:yrTNPBjrvnxydGK2X32Zlg==,type:comment]
 crowdsec:
-    key: ENC[AES256_GCM,data:50i2yh0vkAhAb1tYsU5ijd+QSkCQ/w3Mv4hHubixCmUBx/zR8YwkLCnCdSd+UMTYvm51KvIxN4FsNj0nrbfqBJ6pSoC0UXrxgF4cGRWC+dNtEJyDO+J7yFwp+8lYMO5TqTSqYwxu0RpqEbe5V9p4uYruFwfVY79f3+KGt3nOsktPIw/rpdvD8mlpM48ANi30813miwpAhn/x54QVj21deHxWuzauYI+wmOIPZKgLkLNokX50oq9SCJntuuYLaR8S4B9ji3BPEOS0CX6aanm8Mu4Pl6hnGcmyEXhvlYZWgohp3fI=,iv:0oKtj/PUAznINv3t6K0iJec7/ytqYF218p3XBIZOLZ0=,tag:V4wywnJeEZsf01l2f3LVJQ==,type:str]
+    key: ENC[AES256_GCM,data:XEA7VSw4ZYQYeeUv8dywRDicb5edmIYuMPFMlZBhZxXIcCaM/6lntB/GiQMcj+rAmrWz8RD/BRx+UMxpDlXMHsQLhdqgJf/UdToRsdUWs17IRyoH0+ihbeZjK3CtgYol/lJLvBJMDetUaajHtC3sNKi5vMnmTaSLih8RBwG1h1vX+btp7rie8xZTAzaTlGyQuBUc0A5JJyMQa76x1cKXoc8c+qCz1C5d2Zpc8H86np/mSb2HeMEk6uYbEzXg8a5vldl2+ClYG71POo6lygi/L/POLYHJ3yZKeA+t+yNOHQvfzdw=,iv:z0lZ9TrRymVjS40Q8vJYEGmXUJQVepyG+2wNEb1JDmw=,tag:BCUM6oPpLihYFFpDuus5jw==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:+4LUsHW3T9cdqOQZXq9eEb3gH1VHCXts0jyBV+HMiIU=,tag:+E9sWyUYhzTYwv6f/3KAMA==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:NVGOUpfjT9lfEMpq+3jm1zuCmceP4QhgOEpnXB0wTu0=,tag:0MMkBBfTNjkKLspWEcS9mg==,type:str]
     bouncer:
         fw: ENC[AES256_GCM,data:wplc8z6YNuQi7bN6r27wSOmx7alVDWUBgU+pgvnH0exmRhHCHjbS9zX+4P0=,iv:fbBg0AlqOtbKgYjbiSPopJ0QwEryAEXfcc+YaUWI6xI=,tag:Ul5+MwKZyMevBIyvZH/hAQ==,type:str]
         caddy: ENC[AES256_GCM,data:fRyTH9/7OZ7oaz2n3o7DtXJCnH5l89fGSZtM3FH8sWzw8Iqj14t/qXsX5Vs=,iv:YQbozgWTmU+facWKeC+2ab2fvm47CwLbrprRiWKDRyg=,tag:Ki3hGXPJ4lWMXJYaDF0kaA==,type:str]
@@ -112,15 +112,15 @@ bind:
 #
 #ENC[AES256_GCM,data:FNnIRyidUh2urEgGgM85,iv:w6Z7/VLY9BtH4CNqchc/3GkWb4ez2Nb0TxdZF6RdND4=,tag:14vEc2qpBoOApdnci8ZTug==,type:comment]
 blocky:
-    key: ENC[AES256_GCM,data:6VmmgxShlwwDdfYIr5TOX7uBmnNCambqFVJ8E1FalRUBVr+HFt9cUdVror78UyPwmH6beNI94EC2R06zQmNVxhaSYtt2Ise825jbx2zthm6sP6jVK1PpU33bF9+5VSoDU448ZvQRDyW9bv8Gz1MeKMthzn6LAkg1lE1sZ5lp45QRal3IUw44SXa/pxdc7tn+VcYRMQ3a1oVUTR2kBnqLUw7OdzIZpu9PUcCoVyN28fJmlZnIx23wOfDsCb31VpbDpj9vylVZpqX+clNmwNuh0HcxUdXF6U849XOou/c3bK3WbwE=,iv:V3IiC1Po5+nZmpUsFdcw1aUiPteBXJ9vWJztR4wi+/4=,tag:ucJhuIfnS14bfPixjAB6oQ==,type:str]
+    key: ENC[AES256_GCM,data:hbHEU0PtTH9lcupz7u8NMQRkugvrWMkFcJ81d8NeiY/SA7tm9jVvmOhXEzfxUiOV6s+xzu+F0jzuXmW8CHpkqFJVly3wYNvAUwy5QaLd0khe3VgEA2nCNgJpWQzba1obt5WTwjTJnHNp7T9wR7Bk0NNdDfugwK7+Fm3ox6M2U5Cj3f9OQLPkekSM6ezVWQMlslxc1hMQ1ay+w7J3g/Zb5+99VQlkKhkiA9vlRWAZdvItw4OJhb/SGEkVa41gV6N8Q9JJTs6Hr1YgQ3Qqjl7JpWIUVoWdY4gQMrwfpZGlLlDo6NI=,iv:13AdT/hqc1AH1OJl75KsT25HeZlRdGfu6OL7YE1LT7w=,tag:VndwMppICahMH6QsFKNWyg==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:hjyOmwysUjIyopOeDo6qdD5MrUCnA2byPL5PizqqZCs=,tag:seg+fIrhd5dYrf2jCMloDQ==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:fAqUAiv5WkQacbQWNUnfKC3lLjFj1nBwPPpesQve/3c=,tag:o7qnb/p1ZXgbYkSJlTZ3Cg==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
 #ENC[AES256_GCM,data:xUxguG12uiQAzJGMXaaqdgTfCw==,iv:kh2nqSVtBXaAhEywAdDPbbG0p2ljX4mtjVKYXCNL20c=,tag:XGaBtxPBHSaLRYZa97+kmw==,type:comment]
 postgresql:
-    key: ENC[AES256_GCM,data:Q7B1R5FaFG5sTFE33vKPCxTEE1QaA3uaICSVjWfUKkJPGfqOsvl7JIkwDN2O3UOy6IGXnxlAVUoN3DtH1H55jDDrR0miJHpuEkHn8hSAh2V9iiFjI+DtuliiBdXyQVwlKj3nlAD7stUTBE5oofAYaj43Ijv5BdslcnNOTaFaFo0UvbnehcBAkMnv9YyExto9dCw2ZzOexQs4Lzo2yybCNiTG9t1kJC1LyVcmjxMOSCcay4L+6o02/fJXJ4R/W7EYUYfjWIf8FeC/HVkPsU5TvxA7/uRFUUYro/1hOGkLfPGWDtw=,iv:T84T1dKJD7GPWNz+gPvzWsnebaw7cMjIWimQiIBixmY=,tag:NEvucfSk/ApdGZYB2LbLjA==,type:str]
+    key: ENC[AES256_GCM,data:uULX8NVo7hBS0RMMlTwBtv61brsZfKN+IQeifjCUogqgsDzNbYVFa7lartuM5u9opvJsrwgVJqTTWI71SB2cCAPTK6fVvdCAvtwHD2NwtHYu0gPsFKyxotvyWF2SNLNFF89ntz2wyPIvZhiTY4QwN6BbHpt9a/aYzZU3mQ2CFtquUPWH8caI38c2Kvj8wcRqR3+adXoF5VA5JOf+bZla78/QkGG3ty93luQz9ygXPwjYtqaHy/mpKOymX5hA/jz33ciShOxVBwe9xwxKwyV7KONTd1IudbRoqe0QC1hrMa/HJ7M=,iv:4WiN/fQgCPuve5lXOttcmRos6e04f7fLYSLYte7mfmw=,tag:3ZkhRr1MGeiGu8HZnoVXcg==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:Ho10WtdWiwxMQqkW3LZcmCce/fCxqtK1L41yG0DPdmY=,tag:zf5yOLzGG1CxlJI/S3ppWg==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:kCNYR1LyB8YAwFmZdy7T2wyCIWhH9UKEDhneqH5FuHc=,tag:WMUPajsBA8lNJa7fOfN2FQ==,type:str]
     #ENC[AES256_GCM,data:Zu3CNVkCUlW6BKGh/rhTTqrGv/7H2BG7,iv:vW4cAVvla/Ya0S89DTvo9k3do9517F+AHMLb36Ey19A=,tag:neDpBA97R77p88Im92xn8w==,type:comment]
     password:
         postgres: ENC[AES256_GCM,data:XlpsKT0/3VgNesMdifvHlYZ2dh7mlMEnxi0MJpQZiQ+1tZ0/3zMxQ7+vwec=,iv:akcPRmDZQfFLxelG7V87UnNB8ez28PPLCmY1MYfzStU=,tag:14jvIKP7Htfh+/oMwLYC2Q==,type:str]
@@ -141,13 +141,14 @@ postgresql:
         booklogr: ENC[AES256_GCM,data:K+9Bb/GMbaviYIIesimugQg2RXF590L2T2XNlRI/bjc9BBb9/iivFlhLwa4=,iv:E/MGt0bKlITYKMYZjlmTZ2YonYTvNTaRI23n5xazyeE=,tag:Y3WUSHBHQiF1MVD/zQr5RQ==,type:str]
         romm: ENC[AES256_GCM,data:nizBKAPWPRTxKZRPGOoff6WrbpK9z3s1RDhJmKghO4BhmgguH2C/5DlQ6V0=,iv:uiscRdOoS//Mxs8Lmw6sA+/YtcVhhuJoxP7AxQGJHNA=,tag:UM89ocQFBK3zVDsS8LhAiw==,type:str]
         tandoor: ENC[AES256_GCM,data:+5g/jzRMQoxocZntoE+1BU0MS00yEp0tyVNxriEIJ0pW2V1bsLhUAkwQ748=,iv:feNbpOhkdjmKS7Ovy0KGioOTyjQ4sflfH+50niP7Y8Y=,tag:51/u+EE3Pp5o7jnlj0AWIw==,type:str]
+        linkwarden: ENC[AES256_GCM,data:Prymyz9b8ePaAGY/0/bQYzQ9olb9u6NfQ/urKB9XvWRanJB/4dapM7kE/us=,iv:kQNlbBkJUTq5SGhmmbxjKQ71Pde8UZJlOxm/Wy3IFmw=,tag:Q0iRehhuAgK4owNypEo/BQ==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
 #ENC[AES256_GCM,data:n2lt/VhdDjqfcwYN5OUjTg==,iv:QidjK4AzjisEzaDmXhYZKWyx/BrHOsgGcxxcirQOlQo=,tag:0ViayyRFg5E3kQ5vPgV5fA==,type:comment]
 mariadb:
-    key: ENC[AES256_GCM,data:JsEzdgp0RdLRuZ6vfOugPGjz5+tBlpZpWhFOSkKSbEeUCU9D/IkAFUcZGwCBR4XBl2cOx8uszCryi6Cxm2L1fT+x6N9auMiM07W0A34kT5PMT3w+n+wQx48Ss0fZRH1kfH2tg8G4J5ASvl0dylGnuv1aIGFsmD+6Ygj+F2AFef6Y/+Sje24QKeyISU9+2tsfTNoRAH9ECxdIk2cI14ayQbISaTlBhlzciL/bzvRqqtz6KoB2HYj2YX5EK/zVRpBwkssbMsGR/LMepUWyg2hic78gc+UGK9FAkfCd1ctFQyUgsck=,iv:dSvRa+wdKPXhz+SI+69eT/YDAIoWMTcouZJQHgRIdRU=,tag:pEz/doDqhB+hnDMRMS5CqQ==,type:str]
+    key: ENC[AES256_GCM,data:8KxZ+u5DJo72OFEv4mNSlkgp5Qj6KvABmV1JPw2uvGmkBI9dv6zxjYMjNx9xqf2T2rK+omBtQHIQLoFfLQUvBmws5B51pYdoyPujKYduEMW8kw8x7mb+lgzJthN9A6iTGUQnAkgDxt8g/t2c46lLd5vOecUXygxrS/HLEm3QcOFVBI4qIfZ+NyeNK5CFQPBjB8RoAfXX6dryhcdiCGN0CjzXMMY7rhuYNSaB3xrNvkeW43zOv3GFAGx4WjA1VL6B2M/m+Xrkh0/8rkmp68SQgadA0U8SX8s5kH3DKZ8QJAqnhPU=,iv:5H5hrlDbhsklmKZup+mK0mSlp5e3jhtZWWSiezX+Ztc=,tag:E+pYEiG3qnKmob20+21G1g==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:LuX8l49se20frOc6qIBopqn99DRFzi2o9BfHqfL+CBg=,tag:sq8Wei7DZJPgPMSK1IlJSw==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:lCxYy8LkovdX1dIIoS0NXe5YbUT/ctPK1eS1pSU1z9c=,tag:Pads/Okb8YVZH19ODUThHw==,type:str]
     password:
         bookstack: ENC[AES256_GCM,data:kFQ47qbE+D89Pjr4B6WMAcCHQ8deCyzaPmNspI5TvqwvN5RIaKOWU1uT4jU=,iv:3OiYzBod2xxKMt/5Q9uazalld1NkUNun+DJipC3Ts+w=,tag:orCNWYMAZ/5yi7c6apXVJg==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
@@ -155,8 +156,8 @@ mariadb:
 #
 #ENC[AES256_GCM,data:VuOcF5INAvCNDvXhcAc=,iv:zdTFTKaII606RjjDJbdUyv8jGba8abL7lJNTsPH5C74=,tag:cYSefZHKIuvHmAzoxierQg==,type:comment]
 ldap:
-    key: ENC[AES256_GCM,data:PwQ/AtsQbbM454iM0wpUjGRfxyxNY5lGDARv/XOdk0yMCHRsf9qHKaW37EwcqNe+MVTJH+sx8lHDdxRYF1gO1yj6kasEIbMeo9cIaGQHvey5dYdber/qUkcjuAXyhSZGSUXI3PR1CuAsiqNUEruh/eKyDZAvHTTY0Rc5jk4HLFzPqqBjBOMkA6VQXJ2I+v4s8W0T8/JEQ5l6avwYbaaInIIY+uPV+sY0mBczAuaHLyeA3V7VQNTxQ9lUgdfH/TpgBn9EBH2wWqIGk2zQ6XmVrmOarCo/+JqwLQVEyY5TTrNuBto=,iv:iYzoRXjH8NjPnX5nBhU2gTQXOekXMirjTGhmpGt3YAs=,tag:IxwtGNXx1i54Jnhn1aZx3w==,type:str]
+    key: ENC[AES256_GCM,data:ziQ38fhTghKl29cy7zB2f7uhLgCDwnA2rAw0npf3Xf4DCOPY9gYj7bjbA8mJP7IXHroD19HtoMVZQjGW8PlbBCMRPVtCJzZ7I4tRH+w3eGbj7L6kAcbxyoONFWGTZgjNm3u5qaj03hnYXcDXJmn6kqgug7JUYX67n0BDzNnGZSqIqvqDHXxQgsDQoN2M6lonLsAxJSQgtTzwT+XpP9dIpi8l2owUbpwKG8UAO/Ma/LZO3X2adsef7x9prRXft4VVbUJhY7Liyi84lutjHxXGpF759OFCZUhEVrYngRVN8sqXrbU=,iv:VbOCUz3AAwSpYPpaqKbK/jfNMJ93yu3Oqz0YGeSUlF4=,tag:ltTKZQZ7yZYuV3+xazVL3w==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:Vh9eqEun0E73s57RV53rHbjP5AWXn4NPjlEPwVDQ5VY=,tag:fxpzhMHk8Jmb60GHOHnYvw==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:TBggCu/Z56xUH8kkEcVjawiO/PfpzaXGq+5+OB/Cds8=,tag:K99JW4Ur0qDbLqnmY9xsgg==,type:str]
     seed_key: ENC[AES256_GCM,data:1hv0p1uhHoJQduFLu/mJ3QvnFJUsjkeclnW4TXAszT411ceN4i5V8NIXImI=,iv:vf/lDc+A7wXX4MlXvfKSYzUUYuai4j8qlGQhA5CR85M=,tag:o8MQzkImlDLOPvO+7o440Q==,type:str]
     jwt_secret: ENC[AES256_GCM,data:m3wA70WxYPGWxrcsHpFcbK+M4EkntA2ySWWS/chV/CoSa9fx4jHqgW4kiuA=,iv:VYCga9S19s7SsXt1KoTR2El7aOtADymNNUR57g6+sHA=,tag:eUUF1nPV8STOWGI3WaVB/g==,type:str]
     #ENC[AES256_GCM,data:/5Po+8hjJg74ZBepaNWTzZy7JrTjiwo2DNFT76hZTUFKEdchNd4sfdy3tbVwL5y9QPC/kC3kvBZL2oA0+WzcUmd51Ht4/xS6CnUCpodBrSWNHu4H+ohdmz/jMplREeJVWAFHuTZROqB9v3hw3rYJ5Gb+5XROAuzT4pKfrPoJ1B+ysGUpuvybhrC1O5Tg6IPs5fvIiR3yExGcIFuywZBiiA==,iv:gupWDnXb2TD1N8GhHwpiYuz0sDciLX8V0ww9cFKtFNI=,tag:7eDx5RZOrNXOUshvdijV5w==,type:comment]
@@ -177,22 +178,22 @@ ldap:
 #
 #ENC[AES256_GCM,data:6RVyF1gPUfKEvkV3RQ==,iv:0MTKlm5kE0kZi3E013Kk/Wo642BizBRmcHXR+Zwf/W8=,tag:SaQJ7lvFUuALxXWf41C24A==,type:comment]
 maddy:
-    key: ENC[AES256_GCM,data:NN1w/AQAOac7898/tk2W8qDe0TA1W4rwe2USinUW3CxvQO3Gy2oGgcHT7xKDOxnqz/Ec3rBBFZ3v1rAH7236L6GNQ700pFRuddn0qdMukLHJGbY3mWGRWVQYwV1JX3WVdM2HMrrmLKXe1ArsiTfRVjSvVj0kVNjnMwCSFl/zNe2PgwIMSLi+L5KeJ+G5OOywmR3ctQPJQQefeu+eXXkDFPRwENQlD8i5H1K9vSwRVy09DKzFtc74Xi3srVozWE6U+bCTE/rRdxWN+N0wJNl8tUO9Ndbw98rRaD6WdARRXta6nfU=,iv:MpSJnnrragy8hCOwytSuTfJ3i8+8DnSEYUemDK6rBCM=,tag:pjWVUZSUhVsx2nCMzNpXSQ==,type:str]
+    key: ENC[AES256_GCM,data:GlzNzjI31rpuVYocSQHnExbIQRprqJasX9nXc116o2Xr78h+Qz2djB8CnpCC9posjTKx/h8AlK15GFw8UeI09BQt9Io6j4ROywYPxC6riqlGrBxRhXL7NTwtFASKs64s5oKujTBH8jegRPvDMNf/OAnC4R3AtgPw1SwnhcEgoe6aGp5xeTOXpiblaK955SZTeDyBvLMWYTe5zmCupp0XprLK3yrdfi/aUQ5EpjV782l4yN/G3W7ruF33YmLMd/haAIFUMlFTYo7fQEE0NEvvkKldmv15Dy7TNckHxVHRKoEuh2g=,iv:ac821nuHLBkz/BoSseknWJeHae0d3TYUYLVo7L9RXGs=,tag:CFDLTufZoEjW0Cg9/oCRZQ==,type:str]
-    crt: ENC[AES256_GCM,data:O912cPVNMp7H/pEtrzaqv3QckgoAdf3E36E0G4yvVVUwfhfnxTwlLkQ3uk2FGA6VpCuwOvSBYiSnngL0/55hfulVTWmW32oT5pkW9c8UhyA+769o4YrDiX7yG/4YbFyO4JK44f/J/z1zZc7E6Oni5z9GOTQuo4SjRqM3iT+pDqnTRnB26HVSSAZBgGJpL/6lFM/WKheDGrzh/SVJmgr+/uHEWJTuo/L+CsxZ1Qn3WDj4/s7HtCu8I5qvEUPwII86wo6FNXmhTapjIyNDsbgvr/QgNGEvSvVQtSaMyoKWEOKPRIOhdvcZ36qSegqVLO6pvBtvrZabMsNDnTyraAUo7ePs4t+5NM9xAfwJ8vrkqkqYMS22prdHBy5mYebczFQdxGhr+kDi0itAVWZULIXnc/7fptrwoB7jJjO3i9bHSfrXx3DdpU8ivIi/snwKDsA24g1tqK5/y4dgCNakzp1GhZVrPT3WKnqCUPapn7vjEjucClg3m+5poNmdUZs1SgGRhqpeBz1inUzhsBPrk+qIPXXY5eSZ37DH8hQG0NnxsgFiPpLAn/5yfHUI3eVoS6i2kNbK4KkpD2sJ/amRX7Pxder5+tIIu8GzmN8EgfgucV8/DlrX+Z0u6HvA9lOxDxMR+/Bast5e9jc7dCKY25x8oun3OAiG0kAAsJYVcB0/wvskYJoBoKOICRjF8kf0w27kxMgCuFh4LLaqeBbtBXh7lKXjD3gEcTZgPWnxeb63RCWZqoTBGeyUcBkGByAIclhbOHClDG/X397pM0Rn+QbaR04LSGgRPF5NCKqbwmvh8z24b0n6mvyrBpBqhCxdlBz1f5RqlIaCGuy/oR0E2vEfeMiz5LAFZydALZM1v7GkoiRPPasYgMhoHfeSPfCgCyFugtGfU0SqtyksJQxYQUzKAuchALHAi/PCQ7YtXq/1K6C7aK4/Z8+Fy+0=,iv:+MJeh6rwG6PtAp5o5v2wtlhd1wrXkPCdHmEed70F0eQ=,tag:xH9CxCF8mC7PCV0xeE9UCA==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:gyKP2MJ+DikuFJ4Ocrn6zvS31j6MSLgMZTqoxR2sraM=,tag:NUztgGwtKalzyIyvBdUQiQ==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
 #ENC[AES256_GCM,data:NronfCPkbPQLilb38VmliNn0Yg==,iv:AbC7xk46CJ5dqU55IbyPX+OZVEROz+OGnJfxoZmaKwE=,tag:GEsziOOFhDF16Vjqx59SNw==,type:comment]
 prometheus:
-    key: ENC[AES256_GCM,data:3/x/3FSbr/3uv1ziG79E/eQ7ysV8G6+tyGWC57fJjLSlNpTFsp+oc3lYWJbaTkDdazWz53CmrBrT3r2Lo4gMb6+CsxQjZWBCs7M7eJXB1p+a1ZwWOVndN0IWWnB9HkK2cmFh260s06FmPRNsnaBx3TvscWlr0+qcnmBxHE9tfT/k3ud3euhlMNovrKFnjSaPtMtDmBHFnr23ogcOBoe8/b29wtVC9ILh3B8qU30Rqsnu1kQhAYCPVrZhwYzAoVjX83uou8QV/GjaTgvbaRS3J/mK9kxRzspgb0zKxC/TPjptrxM=,iv:+Ly48Af4d/SCw5/WUKmzrkMzDXFRfc+RaCjiS7BEg5I=,tag:tUdZdfgY8cPz2M1RmtskZQ==,type:str]
+    key: ENC[AES256_GCM,data:MNjb/avV1H8i5SFmpohIX2Z0GL96U5LdAHkN5pOs2wrPcadM/Sw3HCS9t2q72CRjjeSiuWCUTQNZ4nFc6NeLeIX7oN86dhsDOoykuR0MCavC9O4DW5LHTOZPhmgq7YVaa4vE9dxhLKmlhEv65SZ4G3iZzTzOorgbuD8W6qNyHMxDVMo15qtY+O76l797hk3xnCmUqlgKlkx3MjmyrArXnks8u6tXFBjlxXxdlxfx4K/xnHd+EBoDKMUzvlrTgXoXUciE/FNLcXo3yPGjkp8A8SuZtsf6Ea9RINWx22uMHBW/1RE=,iv:bOMy4gvISMvYph3kmtDoQhcs2t1z1uLLXjXo9r2tOzI=,tag:ZorqLjIlthQx+684yNnUMQ==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:J+6oHMZTFZmsDcyizC7vdJ1D1aHRJ9lcgIsCPx1fj9U=,tag:XtyFeB50RPRaW7j1JYu2jA==,type:str]
+    crt: ENC[AES256_GCM,data:ZLtk6fUIhInTm/Kc4LfFLYeOxPBLkJuYc3UpGlejsHwdYwKWKC+YBcUbQ106CUfkNCWYjEJfptUQ+YQ5E6QpNnLPgbXASrNgIVWEWMdo2SH/lFSzg6HczklC52RsVTw+Kc4CSHL8rkdRo1PnHgCwyRlDCD8H4LUBs/TVlr8BnIrjAiGnLflYG7cJcpjpJbIxnfrt/NPevq2f9eGdvkzgC7vqpHO9FYPFqDxvFnT5KVdjKmDUtHSiOizAzoGfLF39+fngCvhjpHVT15CrlHMbsdFdLqEVeAaPACCqewd8eqOtkKmJs2IVnMO5wtLvpYSN8Ug6VSicn1QH/YAajciIReTrSWjvJZ8DhvJyLWEkh5ryEgDoSO7sLs5zYXL9HEqmV2uapV9rp0RjUZtIrf0Lrq5Znfg//exClN4IRIqEJ7c/D/aNeGHSUHb7c79E6Q7TDETVjf+n1aakxc0WiamElqP2bksPVhomq6VinJl4mQp07/bfzo4wxESYehfyZHhzOiHBQqnQbxfNUI9nnv9oP6SESKVZtW2AXGSnyan1iZRMHExaUZdzSoSwnwh4E3NcYJQuIHPVsm/02aQIWGFeb7dCUcOHV22bNIbFCoksLem522mqhIbRzpxQ/DE41eH9QS25uohKopIQp+HO97bBBg/dbuTjCENXDIMlE1KetKR5bsES8AQe8LcC0UAQbmCKfpgnWrWoHAvTviywOfm7/UQaPSIJspFpRAqWjbJwGw66eMfwIh3nerU3fra0AzemF4b5XshlgBwGPtAEO4R+KBHxXLw4+WJbdqcKGoetxkSGm3/qZ21B3GgZv411yJeniKpwahmUQPfZDWBwpq8NEPqQjA8YzqY8Mu0KwCYFPjzRmjz1qHhSxYFhyz1osZ5D+ul/gTH4N1JsGqfGp3v8InpXPsjmv1EJjDUyzwLykSQH95kQgWIiXjxezdt9xkcKVu4DN9QVQUv1,iv:TCO6Dr0MVSzj3JXYpw1/pV7gGTCfAExicosHTe8XSlo=,tag:4b69wqEAcEsvvKfUoimlpg==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
 #ENC[AES256_GCM,data:8Pk3De3AWQPtW+o18w==,iv:O05B1JyftUqN/0/pCi5HReEOltp5jJ6GRER5+NXkoMY=,tag:Tl4duRnv+EoZ4xWVwMfEWA==,type:comment]
 loki:
-    key: ENC[AES256_GCM,data:9D6ZrmJTAMUf6B2k1Kzl64KgTWwe+kDTTSH9d+Ho++hHnCMKr9ORytJUsaglSip7/X6guRXh2v6s9PuTlEvEhrsAcvj1gFU1nilmq8plOzWh52U1xtpNh8Lf0z5qUYUoG4XjR2kG80B431n/iov/N5/1QWx3PauUAdSWK8ljlZ/1rPBtNjdXWCQzI7zD6p7qKUvXifp2j6r4hlkb9tJH8/t5rlD0LRU7vA7xWg06UayUw94dfgCLVDfB5zqtwPKhot4BkELMUVaUPmJoW3p1ifhZ/JOgLbB0wgt1DMmu6iI8cuw=,iv:9iJBus8P+LnhOc0YDIzwiaKRbp2kc52rW7pyayKDPKs=,tag:pDjlecxjJtdI2OY/x8SpcA==,type:str]
+    key: ENC[AES256_GCM,data:MexqK8ZDQEsMMJ5lbNBZJ+ql2dXMArFJ+gSHR/VwqlwF3f1YzXSp5XPRYvejMk6XiHP+xam8BMAbyfD2wGpAbXvQZveCqViJPZLzBi+AsjIU/tjgtD6yNMuKv0Eaw7noC4i7P1avtTm8TNCAXFCAhgbnAQnT0REbb1LjOdjXiJ/Q3lW3Gf7sHsufgl9gfz41NGgxK/a42GCSxx/wk9ZCq3UMdQMoWsZI9wShj5wCZH42YX95VRVdUW3oNsb9M1FUj83HhhDZnj/L5Zhf239NMYB/j4tOJIHTQsr7YLIUfhhd0aM=,iv:oFrOJUet+9ggE/w1vyRVCYaWSoSqm+U3GBXWZDbTc80=,tag:2gErGt32d2PCsZ+cpWz5kg==,type:str]
-    crt: ENC[AES256_GCM,data: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,iv:eTcuF44+5wemJmnTQWKMQnsVH40UlyNtQPLCOklMzdY=,tag:Um5r0IUKw4/VQR7HxKaaZg==,type:str]
+    crt: ENC[AES256_GCM,data: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,iv:j11bZWXHN8J1oKVvs9UYHup4KREQ5AD7kT3jV3zA2Ew=,tag:UG7zbcb9dyGVNwXztOshuw==,type:str]
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
@@ -370,6 +371,12 @@ bookstack:
 #ENC[AES256_GCM,data:ODXFUxxxdQ==,iv:s9zJVx6wo6x517tbNvC+FZ0dFzqbjqeLI6rXBq72hQA=,tag:bXoV2I3LbpmQyddJrtS3Qg==,type:comment]
 #
 #
+#ENC[AES256_GCM,data:VB33s2MIpiqDCWk0mQBaJ1V6bw==,iv:TPOStXHgCzlH+nVnP68TUYz8oqz9QHTeA4pmWBkWm8k=,tag:44hcNctYypx1SAK1J2BgfQ==,type:comment]
+linkwarden:
+    secret_key: ENC[AES256_GCM,data:V39FR9x5vCM/DE6BDY4VpG3pEs5sW/oPrNeO5u1POwMiu8Y4u7Wv4fg+hcw=,iv:PxntxFkVDYZJmuzvNzYYmiYxFLwFI61sHxkH9rTv1r8=,tag:dgNV7sp06hqYFdErK65z5g==,type:str]
+    oidc:
+        secret: ENC[AES256_GCM,data:JEm+Kam2bRXf1YTJIKNurZNcovyGHG1mUqlQC8iYyo65yX1XDFuEv7gWALM=,iv:3c/0RsMtUvawe5Sh0R18uSOi0HhRBEU+0aFoUELV5Ko=,tag:hBlrksgQ5If6WdcZZ+wSjw==,type:str]
+        hash: ENC[AES256_GCM,data:kTtyKn+B44B1Qunxy9xt9lWoXg4y13rxnD99P8F0qdoBl11l99Ry5IcbHUszuhEptR+wkcw4M/C9iBhVvtghdr5XcTP4HcsbZmqSGB1tM6LDpc17bf4QaCO7zQIBvr5Ef3jcsRpGGiVtucft5wajDUqN1dAokOCFPq2NBa2XbzNBph4=,iv:mmT++FErqB80CsiRPlpbuGbWVhTraYcauTu0zKnxags=,tag:1QaqFGCZJcr656EfMLGd6g==,type:str]
 #ENC[AES256_GCM,data:T4Wtn49AAxPd2QUFTR+q,iv:bH5goGWBDqumAat9dUv2OwfCUJUpuVqncTMqMBZUXhI=,tag:G+W6hHA+yftQ+4RJpXrxHg==,type:comment]
 switch:
     admin:
@@ -386,7 +393,7 @@ sops:
             k+uyWPPi+enFkVaceSwMFrA66uaWWrwAj11sXEB7yzvGFPrnAGezjQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age120wuwcmsm845ztsvsz46pswj5je53uc2n35vadklrfqudu6cxuusxetk7y
-    lastmodified: "2026-08-25T11:14:10Z"
+    lastmodified: "2026-08-26T10:50:28Z"
-    mac: ENC[AES256_GCM,data:623+guQizCIqncu+67AyQW+biKIThMlUi3+lypapWc6RjoUXs6iyvWHstjzUSbG4s9VsKsDBKsEy6VGFkP2JjypWzE6Ci/mRjlBe6jBpmlfiZ2tcDR3XCFBgpd+amKfX41zrsqhOt/ZVm7YHDfSsyLePG8n2/fTeGR2tE18ZVbM=,iv:vm0uShgwBOWL1tFVBukFRYEzZ4Ic6dc8OmFymhcrqPE=,tag:8IYrK4ueWySpFoahw09s5A==,type:str]
+    mac: ENC[AES256_GCM,data:NrbfZDqynKH5+NtC2JSf2O4fvrjpuO3UJNS4jiMiJ0GQvmB7aUOBZcM8dP/4CljI/bmOXTkI7YYtLrSp1Njql1ot1OSb/Vu8T9qg0xI/+8QQa2gnTvUFdqNkLtyGXvmNgl2KZPAi1yeI+ROdYLRtpMCW+dn1ZhaxLxYFLBKpAFk=,iv:cLJjHjx8d+qEYaCLGo7/YswgcIp+4acGd0k3vgKOvLM=,tag:/TNmrxg1zWUpiu+jZPkxpw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.2

config/services/containers/app/homepage/config/services.yaml.j2

@@ -6,12 +6,12 @@
 - Services:
 {% for item in (homepage_public_services | reject('in', ['homepage', 'collabora'])) %}
     - {{ item }}:
-        icon: {{ icon_map.get(item, item) }}.svg
+        icon: {{ icon_map.get(item, item) }}
         href: https://{{ services[item]['domain']['public'] }}.{{ domain['public'] }}
 {% endfor %}
 - Admin:
 {% for item in homepage_internal_services %}
     - {{ item }}:
-        icon: {{ icon_map.get(item, item) }}.svg
+        icon: {{ icon_map.get(item, item) }}
         href: https://{{ services[item]['domain']['internal'] }}.{{ domain['internal'] }}
 {% endfor %}

config/services/containers/app/linkwarden/linkwarden.container.j2

@@ -0,0 +1,59 @@
+[Quadlet]
+DefaultDependencies=false
+
+[Unit]
+Description=LinkWarden
+
+[Container]
+Image=ghcr.io/linkwarden/linkwarden:{{ version['containers']['linkwarden'] }}
+ContainerName=linkwarden
+HostName=linkwarden
+PublishPort={{ services['linkwarden']['ports']['http'] }}:3000/tcp
+
+# Volumes
+Volume=%h/data/containers/linkwarden/data:/data/data:rw
+Volume=%h/containers/linkwarden/ssl:/etc/ssl/linkwarden:ro
+
+# General
+Environment="TZ={{ timezone }}"
+Environment="NEXTAUTH_URL=https://{{ services['linkwarden']['domain']['public'] }}.{{ domain['public'] }}/api/v1/auth"
+Environment="ALLOW_PRIVATE_NETWORK_ACCESS=true"
+Environment="ALLOW_INSECURE_TLS=false"
+Secret=LINKWARDEN_SECRET_KEY,type=env,target=NEXTAUTH_SECRET
+
+# Database (PostgreSQL)
+# postgresql://linkwarden:PASSWORD@db.example.com:5432/linkwarden_db?sslmode=require&sslrootcert=/run/secrets/postgres-ca.crt&sslaccept=strict
+Secret=LINKWARDEN_DATABASE_URL,type=env,target=DATABASE_URL
+
+# OIDC
+Environment="NEXT_PUBLIC_OIDC_ENABLED=true"
+Environment="OIDC_CUSTOM_NAME=Authelia"
+Environment="OIDC_WELLKNOWN_URL=https://{{ services['authelia']['domain']['public'] }}.{{ domain['public'] }}/.well-known/openid-configuration"
+Environment="OIDC_CLIENT_ID=linkwarden"
+Environment="OIDC_SCOPES=openid groups email profile"
+Environment="NEXT_PUBLIC_DISABLE_REGISTRATION=true"
+Environment="NEXT_PUBLIC_CREDENTIALS_ENABLED=false"
+Environment="DISABLE_NEW_SSO_USERS=false"
+Secret=LINKWARDEN_OIDC_CLIENT_SECRET,type=env,target=OIDC_CLIENT_SECRET
+
+# Archiving
+Environment="DISABLE_BROWSER=false"
+Environment="BROWSER_LIFECYCLE=on-demand"
+Environment="ARCHIVE_TAKE_COUNT=2"
+Environment="NEXT_PUBLIC_MAX_FILE_BUFFER=250"
+Environment="MONOLITH_MAX_BUFFER=250"
+Environment="PDF_MAX_BUFFER=100"
+Environment="SCREENSHOT_MAX_BUFFER=100"
+
+# Meili search
+# Environment=MEILI_HOST=""
+# Environment=MEILI_MASTER_KEY=""
+
+[Service]
+ExecStartPre=/usr/bin/nc -zv {{ services['postgresql']['domain']['internal'] }}.{{ domain['internal'] }} {{ services['postgresql']['ports']['tcp'] }}
+Restart=always
+RestartSec=10s
+TimeoutStopSec=120
+
+[Install]
+WantedBy=default.target

config/services/containers/auth/authelia/config/authelia.yaml.j2

@@ -135,6 +135,13 @@ identity_providers:
           - 'preferred_username'
           - 'name'
           - 'groups'
+      linkwarden:
+        id_token:
+          - 'preferred_username'
+          - 'name'
+          - 'email'
+          - 'email_verified'
+          - 'groups'
     clients:
       # https://www.authelia.com/integration/openid-connect/clients/gitea/
       - client_id: 'gitea'
@@ -430,3 +437,27 @@ identity_providers:
         access_token_signed_response_alg: 'none'
         userinfo_signed_response_alg: 'none'
         token_endpoint_auth_method: 'client_secret_basic'
+      # https://www.authelia.com/integration/openid-connect/clients/linkwarden/
+      - client_id: 'linkwarden'
+        claims_policy: 'linkwarden'
+        client_name: 'linkwarden'
+        consent_mode: 'implicit'
+        client_secret: '{{ hostvars['console']['linkwarden']['oidc']['hash'] }}'
+        public: false
+        authorization_policy: 'one_factor'
+        require_pkce: false
+        pkce_challenge_method: ''
+        redirect_uris:
+          - 'https://{{ services['linkwarden']['domain']['public'] }}.{{ domain['public'] }}/api/v1/auth/callback/oidc'
+        scopes:
+          - 'openid'
+          - 'groups'
+          - 'email'
+          - 'profile'
+        response_types:
+          - 'code'
+        grant_types:
+          - 'authorization_code'
+        access_token_signed_response_alg: 'none'
+        userinfo_signed_response_alg: 'none'
+        token_endpoint_auth_method: 'client_secret_basic'