diff --git a/clusters/k8s01/nas/s3.yaml b/clusters/k8s01/nas/s3.yaml
index bba3613d7685e59210e719fd30476bd2f4656821..0e106e09b00e6d0f23a08f73bad27ee419722043 100644
--- a/clusters/k8s01/nas/s3.yaml
+++ b/clusters/k8s01/nas/s3.yaml
@@ -16,8 +16,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -82,8 +82,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -175,8 +175,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -254,8 +254,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -333,8 +333,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -390,6 +390,7 @@ metadata:
         nginx.ingress.kubernetes.io/proxy-body-size: 70M
         nginx.ingress.kubernetes.io/proxy-buffering: "off"
         nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+        nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
 spec:
     rules:
         - host: ENC[AES256_GCM,data:35+5/OzJA2XcRJ+2DhPAj3OY4WJNApnw+jom2ynCI98FFfm3ySLjDmKa,iv:9lQIrhwFglT2Ng8MRJmKeJMzdji9wuAAt+Rl4myPgiE=,tag:clArO/U6wPvB2+tX3rjf+Q==,type:str]
@@ -412,8 +413,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:01:00Z"
-    mac: ENC[AES256_GCM,data:AzUp4KFVaAS+0PJ8DwxA2EgS1hw3kOgtPJH/dDllHTsL8dc416Ra5CWnIBMKYOjJ26jjR5ZSFZzolU+Ch/yUmf+2/D0luGvdatIQeBLCticyIO9tgPf2S3/mQHUsZ6DIRBSAjXQ3rxs6ga8go53ViZTMggrOvlSTdknsrOVMmjA=,iv:HoVOdxcD7HXuaUgGsQ9RXORbi9IN/MZcxf8AHsLE7Fc=,tag:GLbj9zjN3kQkK0yx3sGAgA==,type:str]
+    lastmodified: "2022-09-20T10:05:27Z"
+    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-