diff --git a/apps/k8s01/iot/shelly.yaml b/apps/k8s01/iot/shelly.yaml
index 1e3f66914ab8363f6fdd5e15e95a3c5baaa02622..58c44abf67fb20b8eaffc634a3c7cb3b57edd6fb 100644
--- a/apps/k8s01/iot/shelly.yaml
+++ b/apps/k8s01/iot/shelly.yaml
@@ -16,8 +16,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-10-11T13:24:08Z"
-    mac: ENC[AES256_GCM,data:no/gQrdX6toC6fLWLlLxLp08GFwzXALqjk+EHAMoq1xdmRg4c/7NSYJ/SdQxDsAbsmAj9qXg3KPJEYjBTzv6qDQZ65K8yB1aoGSfqBdt2Gb/KHhgcfXsrIXc3DGKGNpbjI0okmKBz8cVyh/HBXl9tgncY8P2simeZoPVsb0P/Hw=,iv:m7hpcYEblRfr2MoHaAMfxByM1sgvwje3rVv146VWaps=,tag:fB7JSIaAV6TyUm3xG0OikQ==,type:str]
+    lastmodified: "2022-10-11T18:57:37Z"
+    mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -105,8 +105,162 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-10-11T13:24:08Z"
-    mac: ENC[AES256_GCM,data:no/gQrdX6toC6fLWLlLxLp08GFwzXALqjk+EHAMoq1xdmRg4c/7NSYJ/SdQxDsAbsmAj9qXg3KPJEYjBTzv6qDQZ65K8yB1aoGSfqBdt2Gb/KHhgcfXsrIXc3DGKGNpbjI0okmKBz8cVyh/HBXl9tgncY8P2simeZoPVsb0P/Hw=,iv:m7hpcYEblRfr2MoHaAMfxByM1sgvwje3rVv146VWaps=,tag:fB7JSIaAV6TyUm3xG0OikQ==,type:str]
+    lastmodified: "2022-10-11T18:57:37Z"
+    mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str]
+    pgp:
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAoueYiNdU74lz+DKGnzIoohlWRe50KGl7LNC1znJvv+s9
+            7fHsooW6HH19EQS7W6+1rJSpgqVxMYcJ6pX9rBsdgCLGk6uplH/vbL1a6WvJxq5F
+            knxvjxVtseQtquXBeVQDd3AnqM9+N5l137Bu8nVJr0CyUG/O3bdjV+rMyX8Rst9E
+            umKqughRRiJEw+vC/4GIDDxB1p7eqVY98j8Ndg8arezY+iWUlRrZjBUvnlwLXh2w
+            1mLLc6A12hBU4fS2bXCajxEttwt8Iu91NZ6hT8suwPVkyt4Jvd+7xBBjVVjEu5ay
+            XOz75JFHv6NSA8dBS/JGf50QWDVN/5plODefNLZ8+hmLJLXxhVYjJtZ/Ui7gDNw5
+            o8FPt0npit+Y6cSu4fwtGRbfAgCucFRa8TRphFlEJc+pyj57IWhrsQ41oE1BDs5Z
+            9nycKz/gAui1gcWK5WyUohHJySjEQ7ylxltqhKNCeoS6IdJwvl8tJPBTm9PXkDOa
+            bLYquP7k8Kcs1HrjrMTDbB31oS+vbD1OEbzoe940844WT7xgMN0XyjgwoURlyDzG
+            0F8WQSgxXflg0iKcmh7LlO9Amon4RtvIzCM6+W+6TTjsSwof0gotBkcIiZ4/33p2
+            QuczC/zAXeNtCJllGtI4rodWQswfSfwr7o2GmkJLpTBLWchFwZKO9jObGF3Msn/S
+            UQEVtwrW0gXMCs8fhEd3nmGXB5egbY0i8IYosLMq13MzpaPMs9HdklG+C6PTzWun
+            A7nKh0USoxOfc/sWGg9C4DGxRbgOKIdp3fpLIEEy4BS5Ig==
+            =cQ+Y
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPARAAlCWi5/GXzpM4EAEY94T9reZ/7J6z1U7WI02dkn0qvWiZ
+            YkjlZ/Cjw45pAworxxnvhDxAiD2LiQH8XpxhgNpmv0lirnwDwnmULxkA03R6iFao
+            /sa+68kXm3/CAA44yHErWg/iqigk8++b0PG29BrJgNmH1SRIKyV2nNT5QNPBPazT
+            iuXzNJEsM8WCPHO2oI0A8ESzBldxI6qPlyPw/HnXUfGB7/k4UvxF5/AsAwb0G+WC
+            c1D3T8xctRHH1/GcZf3TcTS8QVKgmIVJfIFCVvS9Gbmql2Lw7OENwWvCUjnirXpV
+            WtdogWMN29goWPVNGYnCb5nKfmrfSQHUMUqtCPFyNFrrkTbSW0wB5wdGh2/LyKyf
+            qT6gp0zLx2NOocEs7FCvhuEsWaeHbTYpW0klqwDg9CdKiDXGSvrBEa9a8lY0bLf0
+            yzp+UzK+m+rPBA7wMsl7EvWKQdzb48kHYkFBagHcqeyDS6nwKtNtzE5NpMn+7afN
+            ibSDFwEbPY8sgzt5nDKLTSXYqehi6y2ef47nNe3wU6EyLqs7IiZSNEMjfeCuLQwa
+            0VQ3sEWMibI6whwEMn+brLwjBk9ECgNzPZlfTJba3Wx2oX85/QmsGKdazrHBzRxI
+            DITDiW+gNEEStcv2FUPb/sYSNW6G3ZgiftSmsHphJvWdqYeckcVYgzlRK3nEDp7U
+            aAEJAhBuUESqrXlLqY3nubH8Esx+RqWMfJ18JnovuQta2ELLC2tv6Gq8Gv81NAab
+            vo2OImfMvO/PWSriyatax3PgcI49tCEeUQChqQ0j6uvnHKqJ7xySXLem18dlTtXI
+            AnX0OhNKJ0np
+            =I/wJ
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Service
+metadata:
+    name: shelly02
+    namespace: iot
+spec:
+    type: ExternalName
+    externalName: ENC[AES256_GCM,data:d1kZ+DqpXF8Vkewa8nBqt3sHewYlhWhNG/4=,iv:m+MUs6rrirV8EWsB+LA9+Xu1YfSJxFrPBHJujET8Soc=,tag:d0uDityUF2a/dy5HPpXdiQ==,type:str]
+    ports:
+        - port: 80
+          name: http
+          protocol: TCP
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-10-11T18:57:37Z"
+    mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str]
+    pgp:
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAoueYiNdU74lz+DKGnzIoohlWRe50KGl7LNC1znJvv+s9
+            7fHsooW6HH19EQS7W6+1rJSpgqVxMYcJ6pX9rBsdgCLGk6uplH/vbL1a6WvJxq5F
+            knxvjxVtseQtquXBeVQDd3AnqM9+N5l137Bu8nVJr0CyUG/O3bdjV+rMyX8Rst9E
+            umKqughRRiJEw+vC/4GIDDxB1p7eqVY98j8Ndg8arezY+iWUlRrZjBUvnlwLXh2w
+            1mLLc6A12hBU4fS2bXCajxEttwt8Iu91NZ6hT8suwPVkyt4Jvd+7xBBjVVjEu5ay
+            XOz75JFHv6NSA8dBS/JGf50QWDVN/5plODefNLZ8+hmLJLXxhVYjJtZ/Ui7gDNw5
+            o8FPt0npit+Y6cSu4fwtGRbfAgCucFRa8TRphFlEJc+pyj57IWhrsQ41oE1BDs5Z
+            9nycKz/gAui1gcWK5WyUohHJySjEQ7ylxltqhKNCeoS6IdJwvl8tJPBTm9PXkDOa
+            bLYquP7k8Kcs1HrjrMTDbB31oS+vbD1OEbzoe940844WT7xgMN0XyjgwoURlyDzG
+            0F8WQSgxXflg0iKcmh7LlO9Amon4RtvIzCM6+W+6TTjsSwof0gotBkcIiZ4/33p2
+            QuczC/zAXeNtCJllGtI4rodWQswfSfwr7o2GmkJLpTBLWchFwZKO9jObGF3Msn/S
+            UQEVtwrW0gXMCs8fhEd3nmGXB5egbY0i8IYosLMq13MzpaPMs9HdklG+C6PTzWun
+            A7nKh0USoxOfc/sWGg9C4DGxRbgOKIdp3fpLIEEy4BS5Ig==
+            =cQ+Y
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPARAAlCWi5/GXzpM4EAEY94T9reZ/7J6z1U7WI02dkn0qvWiZ
+            YkjlZ/Cjw45pAworxxnvhDxAiD2LiQH8XpxhgNpmv0lirnwDwnmULxkA03R6iFao
+            /sa+68kXm3/CAA44yHErWg/iqigk8++b0PG29BrJgNmH1SRIKyV2nNT5QNPBPazT
+            iuXzNJEsM8WCPHO2oI0A8ESzBldxI6qPlyPw/HnXUfGB7/k4UvxF5/AsAwb0G+WC
+            c1D3T8xctRHH1/GcZf3TcTS8QVKgmIVJfIFCVvS9Gbmql2Lw7OENwWvCUjnirXpV
+            WtdogWMN29goWPVNGYnCb5nKfmrfSQHUMUqtCPFyNFrrkTbSW0wB5wdGh2/LyKyf
+            qT6gp0zLx2NOocEs7FCvhuEsWaeHbTYpW0klqwDg9CdKiDXGSvrBEa9a8lY0bLf0
+            yzp+UzK+m+rPBA7wMsl7EvWKQdzb48kHYkFBagHcqeyDS6nwKtNtzE5NpMn+7afN
+            ibSDFwEbPY8sgzt5nDKLTSXYqehi6y2ef47nNe3wU6EyLqs7IiZSNEMjfeCuLQwa
+            0VQ3sEWMibI6whwEMn+brLwjBk9ECgNzPZlfTJba3Wx2oX85/QmsGKdazrHBzRxI
+            DITDiW+gNEEStcv2FUPb/sYSNW6G3ZgiftSmsHphJvWdqYeckcVYgzlRK3nEDp7U
+            aAEJAhBuUESqrXlLqY3nubH8Esx+RqWMfJ18JnovuQta2ELLC2tv6Gq8Gv81NAab
+            vo2OImfMvO/PWSriyatax3PgcI49tCEeUQChqQ0j6uvnHKqJ7xySXLem18dlTtXI
+            AnX0OhNKJ0np
+            =I/wJ
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: shelly02
+    namespace: iot
+    annotations:
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: Shelly02
+        forecastle.stakater.com/group: IoT
+        nginx.ingress.kubernetes.io/auth-response-headers: Authorization
+        nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
+        nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
+        nginx.ingress.kubernetes.io/configuration-snippet: |
+            auth_request_set $name_upstream_1 $upstream_cookie_name_1;
+
+            access_by_lua_block {
+              if ngx.var.name_upstream_1 ~= "" then
+                ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
+              end
+            }
+spec:
+    rules:
+        - host: ENC[AES256_GCM,data:UsrvSRvxxOh916pFlCvXu+c1vf3+7uWn/neX7koz7cA=,iv:LwYhAqCc/lTnzyuf0eWK6DGDM+VDpGkHQ8KQJtyylms=,tag:A7uXbSok1RY3wSQrRO8Pjg==,type:str]
+          http:
+            paths:
+                - path: /
+                  pathType: Prefix
+                  backend:
+                    service:
+                        name: shelly02
+                        port:
+                            number: 80
+    tls:
+        - hosts:
+            - ENC[AES256_GCM,data:taVcZRTqP1/BEmM54/AHdMCxxDifGsHtlnSQHuUAiyY=,iv:hEPphp5ockKiqkVS4bzfhzPeQ7BpMk/4g/MkROxZn0I=,tag:LwlT5FVJLmkb0zoYA52b4w==,type:str]
+          secretName: ingress-iot-tls
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-10-11T18:57:37Z"
+    mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-