diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..45b5ca3
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets/** filter=git-crypt diff=git-crypt
diff --git a/secrets/desktop/disk-password b/secrets/desktop/disk-password
index 3ccd08d..f666550 100644
Binary files a/secrets/desktop/disk-password and b/secrets/desktop/disk-password differ
diff --git a/secrets/desktop/nix-cache-netrc b/secrets/desktop/nix-cache-netrc
index cee0ea5..d5582d9 100644
Binary files a/secrets/desktop/nix-cache-netrc and b/secrets/desktop/nix-cache-netrc differ
diff --git a/secrets/desktop/password-hash b/secrets/desktop/password-hash
index ba58675..c3cd98f 100644
Binary files a/secrets/desktop/password-hash and b/secrets/desktop/password-hash differ
diff --git a/secrets/desktop/secureboot.tar b/secrets/desktop/secureboot.tar
index 023a0a5..d1b60fe 100644
Binary files a/secrets/desktop/secureboot.tar and b/secrets/desktop/secureboot.tar differ
diff --git a/secrets/desktop/wifi-passwords.nix b/secrets/desktop/wifi-passwords.nix
index 98677a3..cb86034 100644
Binary files a/secrets/desktop/wifi-passwords.nix and b/secrets/desktop/wifi-passwords.nix differ
diff --git a/secrets/home/llama_cpp_api_key b/secrets/home/llama_cpp_api_key
index 7aba54f..c912b2d 100644
Binary files a/secrets/home/llama_cpp_api_key and b/secrets/home/llama_cpp_api_key differ
diff --git a/secrets/home/openrouter_api_key b/secrets/home/openrouter_api_key
index e3113ea..76c17e1 100644
Binary files a/secrets/home/openrouter_api_key and b/secrets/home/openrouter_api_key differ
diff --git a/secrets/home/steam-user-id b/secrets/home/steam-user-id
index deeb799..4949b28 100644
Binary files a/secrets/home/steam-user-id and b/secrets/home/steam-user-id differ
diff --git a/secrets/server/caddy_auth.age b/secrets/server/caddy_auth.age
index 53ebabc..6efc276 100644
Binary files a/secrets/server/caddy_auth.age and b/secrets/server/caddy_auth.age differ
diff --git a/secrets/server/ci-deploy-key.age b/secrets/server/ci-deploy-key.age
index 5c52818..452a894 100644
Binary files a/secrets/server/ci-deploy-key.age and b/secrets/server/ci-deploy-key.age differ
diff --git a/secrets/server/coturn-auth-secret.age b/secrets/server/coturn-auth-secret.age
index 6c2046b..64afa92 100644
Binary files a/secrets/server/coturn-auth-secret.age and b/secrets/server/coturn-auth-secret.age differ
diff --git a/secrets/server/ddns-updater-config.age b/secrets/server/ddns-updater-config.age
index 1fe9a46..0f21bcf 100644
Binary files a/secrets/server/ddns-updater-config.age and b/secrets/server/ddns-updater-config.age differ
diff --git a/secrets/server/firefox-syncserver-env.age b/secrets/server/firefox-syncserver-env.age
index aafe811..22fdcf6 100644
Binary files a/secrets/server/firefox-syncserver-env.age and b/secrets/server/firefox-syncserver-env.age differ
diff --git a/secrets/server/git-crypt-key-dotfiles.age b/secrets/server/git-crypt-key-dotfiles.age
index 2547cfe..9d58c61 100644
Binary files a/secrets/server/git-crypt-key-dotfiles.age and b/secrets/server/git-crypt-key-dotfiles.age differ
diff --git a/secrets/server/git-crypt-key-server-config.age b/secrets/server/git-crypt-key-server-config.age
index 19931fe..87fe901 100644
Binary files a/secrets/server/git-crypt-key-server-config.age and b/secrets/server/git-crypt-key-server-config.age differ
diff --git a/secrets/server/gitea-runner-token.age b/secrets/server/gitea-runner-token.age
index 3c9d38e..ce34fea 100644
Binary files a/secrets/server/gitea-runner-token.age and b/secrets/server/gitea-runner-token.age differ
diff --git a/secrets/server/harmonia-sign-key.age b/secrets/server/harmonia-sign-key.age
index 07ea34b..bc97b74 100644
Binary files a/secrets/server/harmonia-sign-key.age and b/secrets/server/harmonia-sign-key.age differ
diff --git a/secrets/server/hashedPass.age b/secrets/server/hashedPass.age
index 69fe4ef..c5952a2 100644
Binary files a/secrets/server/hashedPass.age and b/secrets/server/hashedPass.age differ
diff --git a/secrets/server/jellyfin-api-key.age b/secrets/server/jellyfin-api-key.age
index 81facfc..a007d19 100644
Binary files a/secrets/server/jellyfin-api-key.age and b/secrets/server/jellyfin-api-key.age differ
diff --git a/secrets/server/livekit_keys b/secrets/server/livekit_keys
index f3bc827..0d894e9 100644
Binary files a/secrets/server/livekit_keys and b/secrets/server/livekit_keys differ
diff --git a/secrets/server/llama-cpp-api-key.age b/secrets/server/llama-cpp-api-key.age
index 354f211..f043d56 100644
Binary files a/secrets/server/llama-cpp-api-key.age and b/secrets/server/llama-cpp-api-key.age differ
diff --git a/secrets/server/matrix-reg-token.age b/secrets/server/matrix-reg-token.age
index e2e7405..883ec4a 100644
Binary files a/secrets/server/matrix-reg-token.age and b/secrets/server/matrix-reg-token.age differ
diff --git a/secrets/server/minecraft-whitelist.nix b/secrets/server/minecraft-whitelist.nix
index 93f0e9e..15c99fd 100644
Binary files a/secrets/server/minecraft-whitelist.nix and b/secrets/server/minecraft-whitelist.nix differ
diff --git a/secrets/server/mollysocket-env.age b/secrets/server/mollysocket-env.age
index 15bcdbd..8ab181b 100644
Binary files a/secrets/server/mollysocket-env.age and b/secrets/server/mollysocket-env.age differ
diff --git a/secrets/server/murmur-password-env.age b/secrets/server/murmur-password-env.age
index 825b10e..a60932b 100644
Binary files a/secrets/server/murmur-password-env.age and b/secrets/server/murmur-password-env.age differ
diff --git a/secrets/server/nix-cache-auth.age b/secrets/server/nix-cache-auth.age
index 10b7a7a..78d747c 100644
Binary files a/secrets/server/nix-cache-auth.age and b/secrets/server/nix-cache-auth.age differ
diff --git a/secrets/server/njalla-api-token-env.age b/secrets/server/njalla-api-token-env.age
index d491b1c..c950c58 100644
Binary files a/secrets/server/njalla-api-token-env.age and b/secrets/server/njalla-api-token-env.age differ
diff --git a/secrets/server/ntfy-alerts-token.age b/secrets/server/ntfy-alerts-token.age
index f3f31ae..79f8227 100644
Binary files a/secrets/server/ntfy-alerts-token.age and b/secrets/server/ntfy-alerts-token.age differ
diff --git a/secrets/server/ntfy-alerts-topic.age b/secrets/server/ntfy-alerts-topic.age
index 0e67825..f1da3b2 100644
Binary files a/secrets/server/ntfy-alerts-topic.age and b/secrets/server/ntfy-alerts-topic.age differ
diff --git a/secrets/server/persistent.tar b/secrets/server/persistent.tar
index aa191e5..7b1d088 100644
Binary files a/secrets/server/persistent.tar and b/secrets/server/persistent.tar differ
diff --git a/secrets/server/secureboot.tar.age b/secrets/server/secureboot.tar.age
index 362b256..c5acaa3 100644
Binary files a/secrets/server/secureboot.tar.age and b/secrets/server/secureboot.tar.age differ
diff --git a/secrets/server/slskd_env.age b/secrets/server/slskd_env.age
index 0900a57..bac12bf 100644
Binary files a/secrets/server/slskd_env.age and b/secrets/server/slskd_env.age differ
diff --git a/secrets/server/wg0.conf.age b/secrets/server/wg0.conf.age
index 0e20308..6382369 100644
Binary files a/secrets/server/wg0.conf.age and b/secrets/server/wg0.conf.age differ
diff --git a/secrets/server/zfs-key.age b/secrets/server/zfs-key.age
index 3682980..cf63dc2 100644
Binary files a/secrets/server/zfs-key.age and b/secrets/server/zfs-key.age differ
diff --git a/secrets/usb-secrets/setup-usb.sh b/secrets/usb-secrets/setup-usb.sh
index 67e38ef..51409cb 100755
Binary files a/secrets/usb-secrets/setup-usb.sh and b/secrets/usb-secrets/setup-usb.sh differ
diff --git a/secrets/usb-secrets/usb-secrets-key b/secrets/usb-secrets/usb-secrets-key
index 7f7eed7..6ae1f94 100644
Binary files a/secrets/usb-secrets/usb-secrets-key and b/secrets/usb-secrets/usb-secrets-key differ