diff --git a/.sops.yaml b/.sops.yaml
index 0aefbf7..5682812 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -3,6 +3,7 @@ keys:
   - &host_x1g13 age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
   - &host_ops age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
   - &host_internal-app-01 age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch
+  - &host_galleria age1wh7r9wnvyrgt5efjvg2324khsf4w6e9atpmz2udr4uw7frhnvvwquzcu72
 creation_rules:
   - path_regex: ^secrets/common/[^/]+\.ya?ml$
     key_groups:
@@ -11,6 +12,7 @@ creation_rules:
           - *host_x1g13
           - *host_ops
           - *host_internal-app-01
+          - *host_galleria
   - path_regex: ^secrets/hosts/x1g13/[^/]+\.ya?ml$
     key_groups:
       - age:
diff --git a/secrets/common/system.yaml b/secrets/common/system.yaml
index 4d3315f..7cf264a 100644
--- a/secrets/common/system.yaml
+++ b/secrets/common/system.yaml
@@ -5,41 +5,50 @@ sops:
   age:
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBbEttK0xB
-        ZVVDWk03alZnR3lGZEY4VlJMdTRTMXNDdHR6QW5YekgwZ3B0SQordFdPRUh4YU80
-        MmxMNFdKbTNMVXZPMVVNY3ZKdjczWnhWTzYxbUV6NC9rCi0tLSBDSGlUWC9SVW1T
-        MitabjYrWG1FVG5xUGhqSVZDekgrQmcxSUZGSklFdU5vCu3bLs7yVM7vxFX2q3pt
-        W/4VEsxzYZN2aITrRfbVWCgwVyYBh3WbcImU8oLOhZ2nfgqfcQ5x2LVu1IzuCSdd
-        cjo=
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBL3ZESGhm
+        SFVyNjhpMm9mVjhDalhuTGxobGQ4WTFyRkZtK0UxSDJGZWxvWAprV1ZCUU1tZFVx
+        anh5MlJHWllGVUh2SzNBNkFvUHZXaDYzZlhaN2U2dTlvCi0tLSAvRkJlRGpsalRL
+        WDZ2WGFTUVNFTlpDZlJFamtWTHlzZ0h3L3ZhZkRnaE5vCqPUviMWokTVCsAG+VSH
+        qSvZof+qnIOsQKoXTMoFXMT3T9rdNoOigVgzOi8iELX7CDqOIiji06CYSdt45mFK
+        2W4=
         -----END AGE ENCRYPTED FILE-----
       recipient: age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVaWxxVWFSTUxDNy9KaGlE
-        ZVBWVHF2eEFXZnJLaXdiSW5kMUJpYiswVGhjCmFkcUhTMXhuRFpLTG9Udkd1UXI2
-        MkN5VXJSNUNiQUp2MzFIbzhhbVZ3aGsKLS0tIGE3ZXlsMjdRb2RBM1lVMHRSY0I4
-        SUVnNjFZVFQzZ3Y4UjlaK3ZNOXdGRXcKyrd86CUWYi13i+M7ESKQH3W41M2/pc60
-        04Px/7G7urIlgjfEV/wXaVIyeSU8Eb65uI/AOseJwH3v4IbW6Nd6bw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVa0MrTng2K2VBUnpFaU5F
+        UlFvVVZXMmZSaG1ldXYzaVhoSkdUMzRKTlQwCjluSnkwWjNvMDFSWi9QMEJNMlBU
+        UWdoOGdrSG1YSHNwOElXMjRrL0Nua1UKLS0tIERaY0RGcmZQS0FvTEt2ZFpxR1Ba
+        MXBSbmpzeWFhMjZTdTAyU2d2YTVuNTAKu4lY2kILseKxUjb//ag6FAaZ0jjNbi6y
+        46EW7EiH4NEHZOtFac9Cvo/97ycBasRntqlXVjWYH0vLxnhXTkFO/w==
         -----END AGE ENCRYPTED FILE-----
       recipient: age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UDU4VFJ1d3VDa2lDNURW
-        RDFMQWFzNWRwcUFqT25KR29MU0x2NW9GMkFZCjJwUExKOFRPRW9kZWxVSisreVRo
-        Y2Era2dHZk1QR04xMkNGcnROR2R3eHcKLS0tIGh4alhBamJzVnMyczBMK0l4TEUr
-        WjF2R2N2RHdkMGh3VkdwKy9kb0VZOXMKCC3bEZROBi45aydfI5UL4oPP+ce91/UK
-        tOuHzwituiYZdJ79a/wXRJMFPg9eCiziSR3uLeP8279oLM417Drwxg==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycllFNWFYdTV3Z1JtRG1F
+        NmpUNlJjNFd5MU94S1JDRUlLcEZ2QVhtQ0hBCmc2eFV0QStjM0xBTEdxa0Zld1k4
+        YWp1Yi8raER6RGNoNTI3SW0rNWErVXcKLS0tIGsyTVN6ZzdDeHlSU052ZDFLTjJR
+        RmNyR1FVeXZrY2Y0K0hVbjNubjVYMTgKtOMYynoUHO1nn4IEhLNBJx7N5iVFslTG
+        bZ8moUawUOTYsx91XjlBZhILBXhU6tE1ZTe89OCcH6Id9+VRrkpu7A==
         -----END AGE ENCRYPTED FILE-----
       recipient: age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZlNDTnhFSi9iOXZEcHdQ
-        U1kreStxZ2dJd0g4dE1rdDQrSk5QTUhMbm5JCmRNc0k4K2VrTTFnaFNFSkd1em1J
-        SGczRnFzK2RlSzFPQnVUWHZUdzYyL2MKLS0tICtBbk9Zc0tYaXJ6a3FXcUQ5R0xv
-        MVZxUGZTaHJyeGNjS1B2SVhJLzAyNFkKNGE5sNLodP5TcXqvW//JLRW/5g8I0Hzc
-        cAgBXe+70HqFzEHQF1X7jHSZarTwclaNsjQPVyEaQfxYf+mLh+bTaA==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnT3d0LzB2T0YrWno2bmd5
+        ZStIeUFPa3plVkhCSzd4Q1BVRmdoWmw3SHhFClNHeWhHcW5GY2ZGazN0WTJwMGlH
+        dDJNYzdXMG10S3FSWmNtZWdZdUJneGMKLS0tIC90c0M1OHJGOUNWQlQ2cHl4aHpp
+        VHBSU3Qzb2Vsb01ZVVd0WE5vMi9qMGcKDJpU/Y5sFe5F+2z545m2oeDMzxqDoF5f
+        8PNnNpmla3el/wVeEZGlUnoeVYh8bf69QI0B9d7siujQPjW9zX/ccg==
         -----END AGE ENCRYPTED FILE-----
       recipient: age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch
+    - enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZXcvalpEOWR1aGx3VktS
+        T25OUTg4VTFvcURnZjJwTHR5OVNMcGwwOWlJCk1BNXg1YjNPTnl1WEZ3SFgvUlpw
+        TUpRenJENWJuOCtoR3pvOUx5TnhxYm8KLS0tIE94R1ZheUQyUEdQang2a0NWS0gy
+        SEtnUVJzWjFXYldQUk9UQjI2UnB0R3cKcn/6/1inalw8DWsrDOIvxXeUGKPR8unz
+        /PPRKBlfeTprRAwi4CH5bikM9ppi8krvPi3aZw37hjHQd8JNg73+bA==
+        -----END AGE ENCRYPTED FILE-----
+      recipient: age1wh7r9wnvyrgt5efjvg2324khsf4w6e9atpmz2udr4uw7frhnvvwquzcu72
   lastmodified: "2026-06-15T10:20:19Z"
   mac: ENC[AES256_GCM,data:Tw58FneoksiOuol1aUOFXoAnFiTzddmFfYAA0B0RfPPyj6UKQbBvRYJhOMuOMRE1fVlDhqxxDiqZI5y14vJg8gLusAZt1JKi7ODR7MqcImvxboaee8DIj4uIcN254g0c0cmZWsGrt7yTYoSLDUc3QdAxj9/Az/CMls6XjM+RL8E=,iv:XGgWgbexCUxzuJzRVG3V2GZGwmwjAtowgz+NRPxk1+o=,tag:FwYJXfwS2f70okl0bhS+Sw==,type:str]
   unencrypted_suffix: _unencrypted