diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 2aaeb46..0000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "WebSearch",
-      "WebFetch(domain:forgejo.org)"
-    ]
-  }
-}
diff --git a/.git-crypt/.gitattributes b/.git-crypt/.gitattributes
new file mode 100644
index 0000000..665b10e
--- /dev/null
+++ b/.git-crypt/.gitattributes
@@ -0,0 +1,4 @@
+# Do not edit this file.  To specify the files to encrypt, create your own
+# .gitattributes file in the directory where your files are.
+* !filter !diff
+*.gpg binary
diff --git a/.git-crypt/keys/default/0/AF6A8929FDBAD915B69065400908F4B4DB72C73D.gpg b/.git-crypt/keys/default/0/AF6A8929FDBAD915B69065400908F4B4DB72C73D.gpg
new file mode 100644
index 0000000..52c4ede
Binary files /dev/null and b/.git-crypt/keys/default/0/AF6A8929FDBAD915B69065400908F4B4DB72C73D.gpg differ
diff --git a/.git-crypt/keys/default/0/B4B6203BEFAB54034918F2E0A68297986D710740.gpg b/.git-crypt/keys/default/0/B4B6203BEFAB54034918F2E0A68297986D710740.gpg
new file mode 100644
index 0000000..74a5df9
Binary files /dev/null and b/.git-crypt/keys/default/0/B4B6203BEFAB54034918F2E0A68297986D710740.gpg differ
diff --git a/.git-crypt/keys/default/0/BED465025664C2BF8209F1E5073C16CD71F334CC.gpg b/.git-crypt/keys/default/0/BED465025664C2BF8209F1E5073C16CD71F334CC.gpg
new file mode 100644
index 0000000..5095b2f
Binary files /dev/null and b/.git-crypt/keys/default/0/BED465025664C2BF8209F1E5073C16CD71F334CC.gpg differ
diff --git a/.git-crypt/keys/default/0/F1F3466458452B2DF351F1E864D12BA95ACE1F2D.gpg b/.git-crypt/keys/default/0/F1F3466458452B2DF351F1E864D12BA95ACE1F2D.gpg
new file mode 100644
index 0000000..d35bb40
Binary files /dev/null and b/.git-crypt/keys/default/0/F1F3466458452B2DF351F1E864D12BA95ACE1F2D.gpg differ
diff --git a/.gitattributes b/.gitattributes
index e69de29..a47d6ed 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -0,0 +1 @@
+**/*.key filter=git-crypt diff=git-crypt
diff --git a/system/keys/desktop/ssh.pub.key b/system/keys/desktop/ssh.pub.key
index 4604ca9..ffbc68a 100644
Binary files a/system/keys/desktop/ssh.pub.key and b/system/keys/desktop/ssh.pub.key differ
diff --git a/system/machines/server/modules/forgejo/default.nix b/system/machines/server/modules/forgejo/default.nix
index 95fc9de..a4dcc42 100644
--- a/system/machines/server/modules/forgejo/default.nix
+++ b/system/machines/server/modules/forgejo/default.nix
@@ -62,11 +62,6 @@ in
           SSH_PORT = 22;
           START_SSH_SERVER = false;
           LANDING_PAGE = "explore";
-          LFS_MAX_FILE_SIZE = 0;
-        };
-
-        "repository.upload" = {
-          FILE_MAX_SIZE = 0;
         };
 
         service = {
@@ -97,7 +92,6 @@ in
     services.nginx.virtualHosts."git.${domain}" = mkIf nginx.enable {
       useACMEHost = domain;
       forceSSL = true;
-      extraConfig = "client_max_body_size 0;";
       locations."/" = {
         proxyPass = "http://unix:${socketPath}";
       };
diff --git a/user/keys/age/yubikey.pub.key b/user/keys/age/yubikey.pub.key
index 559bc52..026c9a8 100644
Binary files a/user/keys/age/yubikey.pub.key and b/user/keys/age/yubikey.pub.key differ
diff --git a/user/keys/pgp/company.pub.key b/user/keys/pgp/company.pub.key
index 3ddf45c..6b4030a 100755
Binary files a/user/keys/pgp/company.pub.key and b/user/keys/pgp/company.pub.key differ
diff --git a/user/keys/pgp/work.pub.key b/user/keys/pgp/work.pub.key
index 31e14fb..722f959 100755
Binary files a/user/keys/pgp/work.pub.key and b/user/keys/pgp/work.pub.key differ
diff --git a/user/keys/pgp/yubikey.pub.key b/user/keys/pgp/yubikey.pub.key
index a15a521..56c1b13 100644
Binary files a/user/keys/pgp/yubikey.pub.key and b/user/keys/pgp/yubikey.pub.key differ
diff --git a/user/keys/ssh/graphone.pub.key b/user/keys/ssh/graphone.pub.key
index d07e510..55e8f1b 100644
Binary files a/user/keys/ssh/graphone.pub.key and b/user/keys/ssh/graphone.pub.key differ
diff --git a/user/keys/ssh/work.pub.key b/user/keys/ssh/work.pub.key
index c4b3a55..3d61b38 100644
Binary files a/user/keys/ssh/work.pub.key and b/user/keys/ssh/work.pub.key differ
diff --git a/user/keys/ssh/yubikey.pub.key b/user/keys/ssh/yubikey.pub.key
index a840349..217a8e3 100644
Binary files a/user/keys/ssh/yubikey.pub.key and b/user/keys/ssh/yubikey.pub.key differ