diff --git a/apps/k8s01/nas/s3.yaml b/apps/k8s01/nas/s3.yaml
index 0e106e09b00e6d0f23a08f73bad27ee419722043..bc70e0a792535e255cd75720eb87f0926288193d 100644
--- a/apps/k8s01/nas/s3.yaml
+++ b/apps/k8s01/nas/s3.yaml
@@ -16,8 +16,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -61,7 +61,7 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
@@ -82,8 +82,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -127,7 +127,7 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -175,8 +175,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -220,7 +220,7 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -254,8 +254,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -299,7 +299,7 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -333,8 +333,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -378,7 +378,7 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -413,8 +413,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-09-20T10:05:27Z"
-    mac: ENC[AES256_GCM,data:mNy0HtSdx1pIYCWppdgWJwai41StAbiDYklhqQJ81j/sTImWjnuEv2FSLXIQvYdkUPweC30J1uwfz3XAb5ZUdiEdIxEkaiQjgWAgtYFYyWbiz+9BvQnKSkdc7bJtqaR3tiYPCoWlxL4Xwr7o6go6IdB3ye/Ia7/1at6y2LwZD9w=,iv:i/UxO+fNC77iwSX+rruqQ4qvyMu7F4+U+BP5nkkKUDg=,tag:bWj1V/yWPK4Myo1wJP9T8g==,type:str]
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
     pgp:
         - created_at: "2022-09-13T20:16:18Z"
           enc: |-
@@ -458,4 +458,84 @@ sops:
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
-    version: 3.7.1
+    version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: s3-shelly-firmware
+    namespace: nas
+    annotations:
+        nginx.ingress.kubernetes.io/client-body-buffer-size: 50M
+        nginx.ingress.kubernetes.io/proxy-body-size: 70M
+        nginx.ingress.kubernetes.io/proxy-buffering: "off"
+        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+        nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+spec:
+    rules:
+        - host: ENC[AES256_GCM,data:D+nRwdEpODQtoqp6vPU0oC7l4nX9bawMO9HjuBqbStClIbR0fBo=,iv:P2b0AWkl8tA6flgnrc5lr9sdyNu2dcUMi/cuYrqt+94=,tag:Pl7i+/ShtXMRMqLjW0AEFg==,type:str]
+          http:
+            paths:
+                - path: /shelly-firmware
+                  pathType: Prefix
+                  backend:
+                    service:
+                        name: s3
+                        port:
+                            number: 9000
+    tls:
+        - hosts:
+            - ENC[AES256_GCM,data:5+f63X+YvRZ5n45mu5L2Bt5YizkZPjJypTkAFkiX+QWUuNNvBfs=,iv:1sbMjw3v6e2Yq/CTeF1YjJFHlNOwSkNhaOOgwpE0Flw=,tag:HJPfnN03GwWuqqKYDZ47WA==,type:str]
+          secretName: ingress-s3-tls
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-10-11T20:38:14Z"
+    mac: ENC[AES256_GCM,data:K4nokfTTJl0XqSj5f5qwm6F0UskxMstA6eQ4IaWfC7m9d340PrlXfL80MoVRvqiwvr29fGZEmB8ig15c+lF2CGOvDgXSuJ2rO/ezC5v5aU/+SNvXJCf1JdYrtv9Y/tNAObgz0cOx+EN43f5FV9p9o028Or9ptTFa2qUl0ni+O8Q=,iv:JGt8SIxCYh2KtW81iaXmjz1UfIAvVf5NSibX4uPczUc=,tag:HanSV8P37kdBi8vlfRJRyw==,type:str]
+    pgp:
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAs2wtI2PnfYFdrQMyzW9uwi06Wzi5NPO1PmRp896RrkCr
+            tqILIJoJayon4IFtoXmG99KZUqDfMWAb7wqAzw8+pwI6Qy+xJjzZ88fYnaP2m8yX
+            2ebnaliurX7+VaRwJ0jBW5DJRUkpGqy4dm3kAA3uV8oyOU6QrCfVH5nekS38PKAH
+            QDQcCA+u3ERe6meAOTXyfJw/y8WMocTNrmFTQDImornspXaakDOBnN8WPOhizlvm
+            A8SmEZI1Mp4TlNuhRZaX8vu1zGMJ2Ut3QyzCBUy45cs1BVRtLQjj7LZ6zpyMSr7v
+            wNMxNByOiW4m5Ic6LrUSAoShLmIXqb+uUFno6uG8kyP5cQc3+9fXLhvPpwT2oedY
+            cnSpTkwqx7l1/lQ0xsnKrNhr+/RU3FK27Q5BgTj4NAQF5pCXkUa0QMeSHfKXtNo6
+            +/TE+KIHzbwvPoabWXXWl8odT3Jw6mmOy66otADlxXa6s+g5FhpZfQKQlCr54Lh/
+            EdAlQc3cGxPzDCeTVmDFZu53A9cXaeR/DpzILjJkdcw8muG9aJtGhq/taudZZhAv
+            +rgJHXYKvQu05LTGQLClMrlJidO2+B0qNV3aw40sYGyZ/n73nvnODrXaRzNG1jyR
+            +j5u4KQpWAUKpljlbAw3lKUll+wBhmmnPJ6UJQ87VmDDcadXFORua+yQsplKRtrS
+            5gHPRhnLFveyK1PjYIcasVnKCoS3OiRG187uwx9iPJq95oZETk0VmnpUleiJcml5
+            kPy6qaM/qjIx7lo1ShovIfLk25sEge6NkiUwkx/WXI8b++JHZO27AA==
+            =sOCX
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-09-13T20:16:18Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPAQ/+I/VVicoriCwyJ3X3RRUJ2v/hlV7DmUHNBghR6xl5Hqc6
+            KzDh/3vFYCD14aqFprgv7sBI+WpwVZh5bgqfWUiZ+ydCQZl++r/t71sGlrC0yYhU
+            IKgAoc/nCRyAnNrK+7vpcQ4tjyCrHzerSJSmE8X5x1yVi1VfE3NhtuwWhfjieW88
+            aSwIPsj4twmOMVTCjwOaCvOw/xdehJEsL4J0nOXTNUrjWO6TuNrhEBVL5avk/Vxc
+            zGL3KZBaykVH8lai+ZwpPyf5lZgjbeHb82Gl8VdEy0o0oyDWWriJOkxX5w09/ajv
+            PcpROSGXdjPvt/7jLgSQR50UY6Ekju6DsUYxaXeJ4QryPITDkcf2MbFstEA6e2np
+            HGbNTN3yMnoFBijLQPWxQotk9xufDaKLVxDFfSZXoDdMu+005DJnVykM8Pv5qck7
+            /fC+jy59mGO0eiDfltWGb1q6CRyJeXk0RTnt9X77I4EMLWjeid6zUhjCp4ZDLSK9
+            UuKlnwk5/vb0aH2w87y60M9qgaaIzwB0Be7hpSZ+/OPBhakCS3gU1LxNSMLlSw0o
+            zoNviDkFxEACkqt+YIYJ3phNRn71RUzNUObiz/LWyd2ZasN5IDnezW39t/4uKjYa
+            Y1YyZ5HvdJEGvtBYycftTY7IwqUK2DVicImSc4Dszk1PbqMDzIUUbmGN7MxR/gTU
+            aAEJAhALMJFcOgYratPE/GE+mWKliwdylZQU2pKCuX5DZD5c363wYdmLL5zx32g9
+            3O9uQjmXIvIsKLQecFvk7L9W+F5H0Ya822Be5X1eQiIiYDmRLE3IDgrLypSGW870
+            XwzIGA4wMFDY
+            =5l9E
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3