From c65fb7a2f1774733a3c8a15935f4c72bf7939cd6 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Wed, 22 Jul 2026 21:12:43 +0200
Subject: [PATCH 1/3] added plenum

---
 secrets/caldav-export-config.age | Bin 1440 -> 1530 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/secrets/caldav-export-config.age b/secrets/caldav-export-config.age
index 0efced19a586cf3c692b3ed2fcd3918cccc9f476..9716329a25d2a872c9f58f99b7b7a4958ccaf779 100644
GIT binary patch
delta 1447
zcmZ3${fm2oPQ9axen@^!Zgxs&c!*C{j$f32xL<)sa*m66WVowSczV8fnVGLyfun0!
zAXiDSi-B2qmT6dVdZw3~zp061c}Qk}MRssOj%k)*m20|JUT{=-Qc`M3AeXM4LUD11
zZfc5=si~o*f@_&iQh2#SijP-lL3vrJvu9eFX{BknzngPWQAJ*fc8<QjcCvPcK|z*&
zX_<dkRaRgzmy=PVyLOask*QN)p_65Hrk|IecD_k&n!ag%Xu4T?ab|i|zIIWTxqFVm
z#E;_PiCLyz#ijw7;XxVsMLvc;Nv6e#Nd?&jZoY>3NmU``sbNV@W#LgiUSTF&=HZUs
z7A4-6URf4ZE-oehc}988x%uY$5gx@=CKUxH?#_-G`hn)bp~aDt;~B-nBZHjMd`dkd
zeTqB_{j;=_w6lx@+`=o8eT^I=D;z^D`~phDO1u)o%Z+`x@+@;4!_thLlfyF2qxAht
zDze-RQ#^eFT#HTeO+tKJN=?E&Bg-=_i+%GapJf!UkBBl&FU>M7NQo*kiu8zbPVx81
zFUv`HF*V38*DlS7%#KWTakli%$jOZ43iArL$P3eU&r3?LG!6{)FUv0tvGnnd$c=Ig
z*Y@>wvdqyB&NNDODbFrOj{!IL0#n0ug)r}YBgfRRK!3B6$}ImB{qTAtlOT)I5a-Ht
zOZ@=tg398g;G%MmLYGWqM=r~#0`n68^5E1wr;NlxH{S~XjNI%<=fZ%XqCk_1z{DI+
z?>zmmiZr)ij0pEkEGSJ*S4hk)Dl{n5&MZjH4UCHLGb)WTDXvUQ3%88Wj!Mo?O}EIa
z&nwb4cTcHuH{lBPsPNC$_lq!33doJh^YS$+aV|3o^{;UA_t7^E&q^wE$+QSd%qR@f
zcjeO6)m6xi$PXxvbkZ(M3UJKy%Be7PsdV>uEX(sLE_AWXa&`+yO*AZuC@4%cGvI3I
z+p<UPz%#Kjg}*g3?($4{@O_iwhgRJiR`ni_7e3g*(ra5Ab$))?>!fQF%;)Q;zIefq
zw!M9?I9q#LFy{k9gS;>Xzx?*MM+2ln5?;x2$bWIH{}%tVR;5zx*RwNLF6xhrnC6+E
z_mAf~r>wTvXVOhqYo)9o+h+@Tc1=F;dCSL^IGb(UHwCX%=~Pas4pia^cM&*qSjqFN
zSf^OM^Y7d}$tiYIz9&9Q6Fr|Yx0GpWrog97^-51Q8;|>XxryDgdG5c%HMI4X?UueN
z%i4@D-JN_XW!c9EyEy0Ab?`p&ofI!qUT@XWTcA-Iw`fWq&ykaJmTY_26g559@{UW6
zQ^^D8o#sNb3ZG8?I&)F&-uXd&0bL&pOJ#q~U;NMI<o)`eyUO%W^(9KBzAu|0eQ4gB
zox6PQzN-JCxoVl^;_F6SiOxDL?<M5={noE~ucdl<r5z*7fekBDGV*^~N6lYodM0-@
z$LB-49vvx`4D-D-rC9yvPpb=)^d_=RQV;EAotwz;c~!t^PL@}STc&<3o6WN9x$SrP
zjGOF#KL+ic!p>IKqFw*;^FGEJ|LV0TVvG|dV<Y>M_NGkZ+1BzrR*LJ*&)4@n0<S2k
zUHrD{PLTW6T5k2WkcOob?bgn?<ZA2s*38|=%(G6ZtMih}7PCdJCs;h|YIkgZzGag6
zozQy|T1DKw%sNvREngR`svf`V>-HyAnJr>04Hm8c+1_06elf%N(NE*F`Z+xhJc=%F
zJM3t^j>9r#=BxTIrMnkt&d_-AdbZ^3&a<*p0(VY$sB0VSyz$_&n6hOlPb?m;<IQin
zUitF5M)AVbhew?Pd26hq#QS__{g({cr)-uxE3C*&L$H#OKQb<O-88OiOIK?>FrLvA
zxObC73fni2$xPqnyF;!QvcBv5^HEdI@|{|lsmIa%OcKQ{|M|`Nm?EFg@p0ah*Jy3|
HDdZvmx1mfw

delta 1356
zcmeyxy?}dyPJMEiZ%A&rQKr6oX^DGjXkdP3WSYNWVPsyOewBrpZ>e`hqK9Rkxps(=
z0he!>MNWQLW^kFamvdF5S5TCtr=xpec4}!>enECsfrV*kx?^}&abSjFHkYoQLUD11
zZfc5=si~o*f@_&iQh2$7b6#d*MR=lVj;CRMsFAsmiCdL(dSzCYSx}I%akf)wN_M1k
zWLc=TrAxUdm$7A5Zh@D(VMc_uMWl0DYEiO}ufL_cW44J&fsuE5MpjgSV|H+EWU!OP
z#E;_Po=M>u0aeca`Ubg?PDa|E0hLLXeqlwSE+zWTxv8EW-d@g`$!?_;B{_jyKEeJ4
zX0E0BmB!AI=3xO&rkR0Rq0ZSp78T~@;TC!2J|4*yNfs66jwZ#E;~B-n)3yDBGc()^
zs!Dye3r(uhOe@{p11pWa@{F@1GmVmxODi3d%!~ruit;?U3|#XgQ_|B*(o)?boIK6T
zgWW<?vqCINoQk|EBFze23R9iR(sF!E4bwa)pJf!UH!>~O)=o>;_BD5}@+vjRO)SbT
zjVv|Q57l<p&q(&n$qw)_w#-U(Pj&O;GRt+T^2;~!cCD;*(l&G}$Pae5G%qeP3GpoT
zD=jR|$})1aFb?+#D+~@rj{!IL0#n0ug?ul=kaFL!BJD!&D8F)#3hjEsoT`B2EYtE(
z3-_W5<ElcJ@RVG`+)5)O3obXKKr=^QZ3~|~N8>V&%2Y2GKR4qd6DPOuz|<szqNv0y
zcki@}V#5s2Vsz^~6AMa{(-qva@}jbG68#H|GmMM!Ez7i>f;_Xr&B9#V!%8fZGAd0y
z>ob$Jjnh)Aass(>N=!|wiY;@^Dl!X_g3K+;%n}WgQk=Xz9Q}%XOD#<t-2$AG{0faT
zlYO~#b#)co{S1xVjVyihJj$ZXDzcNqiY-mF%OdhEOU<0Z)Ah}YoHG0@ynUn01GBki
zY;XCl<#Ow4x&PXat8Q*&^K4SN^r(?XJF%W^VNt=hDOFr;JMOBvB#S$4a{eE&UOH{-
z->(@Hv!zpuy31lq3lz7wf2;Z@v-HZ#meA*I^I!A#e_wa>M}yeB6@^<~+DN1xpVh;7
zxv4v|hW(Y$oaHOu`B<mc6>K-&f0934$n&pg2~Y46qpNi*dKWr$Nf+gbT-2O@`dV%I
zlfFw|>R$<Xoz9(}GJRGmYmT?d?u*y0Cq6p*b^q^mR~HrU_~z2+{qF7Bt;f<Hf3*G`
z-FSA@=LanelbBu3)>hrx_rd*pP{6@2c2SbwE&t^vdDZK_W|P@k{b_~VLYwtp?73Yu
znTyW6N!`!xtQ|YK+#&N~-O}6r@0C{foVb)`_4IM=-3KQ=)NAXf$gX^GuxCoCykE+<
zh7K$4Z0RHWib7(pot?%xcXpgsc5-yGx}8qf%AF4@ohQ_{ztFu?o&A^dvx+@)(FqaH
zHk}`{B0?0aO24LdFy1@nR_qv4|JC?{bxZJ!`s)SEk1j?oui=$ttA3u4rsjICmuJcG
z%S*H5r-?KEv(=WZ+gHz+WUGDhLf2aBf5(eBlQrjv<jbjr7RMfb)Y5P6vV6WgOMiH-
zPw(gCyL!C!H@WkaR^Qt5(dF%lDVopu#5q5=nV+3f<Nf8AYqCYVzn_S?u2!8`=s#<*
z6+0EKHu-+(*nVqLtl0Os`_~FSlt?li%QH4rS8>Z{N_$nId~MIyudhO!Wslmg75+9?
zo3Zoz`N!Xv<{sdQpHQFj;9OIi@x0bs!L`Rvu!~Q6p2DbaH$U)vYIIU@hTzkaYb-0J
PTvw~?^53Soi~R!tbg3Ul


From 3572ea5998c90704fb1a617dd93a91b24f3617f7 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Wed, 22 Jul 2026 21:30:44 +0200
Subject: [PATCH 2/3] fix ownership

---
 flake.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.nix b/flake.nix
index 17ae332..95ab793 100644
--- a/flake.nix
+++ b/flake.nix
@@ -112,9 +112,9 @@
               };
               caldav-export-config = {
                 file = ./secrets/caldav-export-config.age;
-                owner = "nobody";
-                group = "nobody";
-                mode = "0400";
+                owner = "root";
+                group = "root";
+                mode = "0440";
               };
             };
           }

From ffc3267215a461651f17b541134f292242478c68 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Thu, 23 Jul 2026 01:27:47 +0200
Subject: [PATCH 3/3] update flake

---
 flake.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.lock b/flake.lock
index f0bd2b3..c8ada76 100644
--- a/flake.lock
+++ b/flake.lock
@@ -68,11 +68,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1780203844,
-        "narHash": "sha256-K5sT4jTpGs15ADhviMKNBH38REpPf5Q6mM1+N6cArVE=",
+        "lastModified": 1784432872,
+        "narHash": "sha256-n3gKTBIV4ZA5VQpUakffBe3KGu4+mhPoA34rrqS0GkA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b51242d7d43689db2f3be91bd05d5b24fbb469c4",
+        "rev": "fd1462031fdee08f65fd0b4c6b64e22239a77870",
         "type": "github"
       },
       "original": {