diff --git a/kube/deploy/apps/grocy/app/authentik.yaml b/.archive/kube/deploy/apps/grocy/app/authentik.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/app/authentik.yaml
rename to .archive/kube/deploy/apps/grocy/app/authentik.yaml
diff --git a/kube/deploy/apps/grocy/app/hr.yaml b/.archive/kube/deploy/apps/grocy/app/hr.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/app/hr.yaml
rename to .archive/kube/deploy/apps/grocy/app/hr.yaml
diff --git a/kube/deploy/apps/grocy/app/volsync.yaml b/.archive/kube/deploy/apps/grocy/app/volsync.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/app/volsync.yaml
rename to .archive/kube/deploy/apps/grocy/app/volsync.yaml
diff --git a/kube/deploy/apps/grocy/ks.yaml b/.archive/kube/deploy/apps/grocy/ks.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/ks.yaml
rename to .archive/kube/deploy/apps/grocy/ks.yaml
diff --git a/kube/deploy/apps/grocy/kustomization.yaml b/.archive/kube/deploy/apps/grocy/kustomization.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/kustomization.yaml
rename to .archive/kube/deploy/apps/grocy/kustomization.yaml
diff --git a/kube/deploy/apps/grocy/ns.yaml b/.archive/kube/deploy/apps/grocy/ns.yaml
similarity index 100%
rename from kube/deploy/apps/grocy/ns.yaml
rename to .archive/kube/deploy/apps/grocy/ns.yaml
diff --git a/.archive/kube/deploy/apps/headscale/app/hr.yaml b/.archive/kube/deploy/apps/headscale/app/hr.yaml
index 18f402e1..85aad5df 100644
--- a/.archive/kube/deploy/apps/headscale/app/hr.yaml
+++ b/.archive/kube/deploy/apps/headscale/app/hr.yaml
@@ -248,14 +248,6 @@ spec:
             dbs:
               - path: /var/run/headscale/headscale.db
                 replicas:
-                  - name: "nas"
-                    type: "file"
-                    path: "/nfs"
-                    retention: 168h
-                    validation-interval: 1h
-                    age:
-                      recipients:
-                        - $${AGE_PUBKEY}
                   - name: "r2"
                     type: "s3"
                     endpoint: "$${R2_ENDPOINT}"
@@ -267,6 +259,8 @@ spec:
                     age:
                       recipients:
                         - $${AGE_PUBKEY}
+                      identities:
+                        - $${AGE_SECRET}
           litestream-restore: |
             dbs:
               - path: /var/run/headscale/headscale.db
@@ -277,8 +271,6 @@ spec:
                     retention: 168h
                     validation-interval: 1h
                     age:
-                      identities:
-                        - $${AGE_SECRET}
                   - name: "r2"
                     type: "s3"
                     endpoint: "$${R2_ENDPOINT}"