diff --git a/.sops.yaml b/.sops.yaml
index b2a5e4c5..851a9b0e 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -56,4 +56,4 @@ creation_rules:
     - age: [ *chn, *pc, *nas ]
   - path_regex: devices/cross/secrets/xray-server.yaml$
     key_groups:
-    - age: [ *chn, *vps4, *vps6, *vps9 ]
+    - age: [ *chn, *vps4, *vps6, *vps9, *nas ]
diff --git a/devices/cross/secrets/xray-server.yaml b/devices/cross/secrets/xray-server.yaml
index 4c7b1a9c..60790c04 100644
--- a/devices/cross/secrets/xray-server.yaml
+++ b/devices/cross/secrets/xray-server.yaml
@@ -50,38 +50,47 @@ sops:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYmorUGE3OXJ1UFp4YlZJ
-            a3JyZWpBbzJ5UmJ2VnptUU1idXloTUtCTmh3CnlJS0hXNjlLS0tQbDd1NGVjMW9X
-            bWs1QlZTOTdTa0VvNFFmY3B0TXI0VlkKLS0tIHNLbVFXYTJkeitZckFJSEpSUEoy
-            dkJaSy9tRVppT1pYbzdUdXpaTy9DTDgKKWbMC7vzunjlzHz3cVO7mb3H04BHOc+3
-            Fojz6Bs/gH0F6OFdDmgmTvJSGDtKUyIFGH5fwXSahxlufA/iGT/PgQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTXhTN0RXRWRLK3A3RFRJ
+            ZzRkQVg0N043N1VObjFpdE05bnM4OWJQOTBJClhpVVFNN0ZmVVpzaThyREhLeFpI
+            SnErNXZVSWd3RW1DUlJ0eVpibTg2SFkKLS0tIFNVU1VCL0t5dWhRandrUmpITmlS
+            SW1mRzMyeVNpME53ZXhwQllWV1JxbkEKWze5y1HRR/79k7AIvofuc8RdkQVIEsJ2
+            H2djW/x3KmKTtDVB9DTBQZHpNOOHIJ/nX//JP3s93xvPUizD0olQHQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1yvrl4y0r6yzcxzzkgfwshlrtsjt8uuya6rfwks09pnft7esfcyvqmrtm5q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueDZ1UmtoalFRSDBJTmVi
-            LzVTU3EvdkZ1THczdTZyTVJ1TGJlQ2tHYTJjCnllUHZZWkoxL3pUNUZneHJheE9H
-            cExlQzFBK3hwMzlEbTRDTmpQanlVQ2cKLS0tIEV3ejZxVlJXdHFCUHVrNXMvZXc4
-            eU41L3RudEYrTDRDR1ZhYmw1VlR3eHMKbHlxKae8zDUurKp12oEgbpJhQR1F2wfZ
-            E0dWUyvJoP08R1BJOmT+5q7XpaN0ksDOSW6eUdW86fvCgIRBjTBfYA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMK1V2eks1QXUzODJiWXRD
+            Vi9pT1hBNXNDODE0NUNKRXZPbEJobVpEaWhBCjl2WFhiZ1Y2dUx5L3BaVjdVdS94
+            bUlKeGVNeEZJanUyazhsVG1ta2d6aEEKLS0tIFJYaVZCWXhyTDJNTW1EVnczS2ti
+            K1NNbk1uYUdpVnVYZEpiN3ZtbEpOK2MKI9G4JCU47BiW1zpWCgqtHuUaryIF3+Xn
+            hqE4/OIgF8od70eNZ5UWvMneQLsnDEcIOa9i9D/L9A3Hkn5AlRoPQQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0bi92SHcxd1FLVzRQRVJJ
-            eVRBVERsK2VVUlliNzkvUWFCWnNlT1NBSUI0ClhLY0g3Qjh1YXA3dDFzNVFUSjY2
-            NXBQVTNGeVVKZTFwOVNxYXQ5b2lnZlkKLS0tIHNWRjdMOHc2Z0VmV0UwaWdwWDNW
-            NVpvMHFxSGdCK2xWRWoydEJFWnA3eDgK0/SpB1MJ8wpAdivu6F6pB2Za90KroRiw
-            psiK6LheGLK7eYEZo2rKI7thhQBwjJqJQqJA3HmAJ/Clu5T4VsTO7Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MTZIWEQ1MVI0ZlNobHht
+            YjJjYndFaTVrOVNaaTNuVU9nNHJRdWlObkhjCnIwSTJBM3p2bXZOaWRZZ3MxSGV3
+            emJTL3JFQUJPN1d0QVEvVVU3RC9kaWcKLS0tIFNYZmVrWmVQRXd2MXF5NHdmbFhG
+            Q3lSOFNsdDRkWHJlazNCL0VDK1czdEkK+kp9jQrSV1IPTG+r8q0MRD9jbPSj0z0I
+            dVxhPAUNUqf4MPM/YbqA5YOhwZ89Z7gXsbtFezZbPNxIqyTISgcmJA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age19yt2tszdtnwylqh5qdmg25mlfd8cft0z24x4mp20fnyywfs88cxqgwt9m2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYUFMT2ZTaDg0WFRjNjdy
-            YmVUVHhqcnN1VFQ5UjBYd3RTUUVxZFRHaG1RCmc4WDdDYTBxVVJQUW5yR2MwSXZ0
-            cDlWdzhFQnQwdU9oOER0N2pWQThWbnMKLS0tIE1BeE11VittNlIwWllhVERndmpy
-            T0FFMmtobWRqdk5kbWM0RnB1UzZrcFEKG3XBRr3ke50NmGblalZfSmPhhDhmQebh
-            IxMPA+/jfJoFSMTMMapmFYK9JmrCbUgex7V3EnLtkQpFmDJYfO18TQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TGVpNmJ6bU9veTA5a2g5
+            VmFEemxkTUtuMllJcnZsWG5lOExkalFHNGtzCm4xSnZnVHhrWVZFS05MQ0xtNElw
+            dlpOU2JuSHFuYm5KUncxaFAwaUxhUlkKLS0tIGV6a3A2SnJWbEVvTFFNc3dHOU81
+            N1htdGwwNWtHR2R3cGdtNlF6ajF6MkkKSjbyxsPZYeXd/4A60g8E1aSIIwR3ca9g
+            /9p8PV1duXhKkJcGKgDiwL3FxrFZ54rpySZeqMC16nQtnk3Fzt1k9w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaTZIY0dmUkFHWHNKZHN6
+            aEZyRkY3b0tnRGdJREQySHJBSkMxcFFxeUdzCjluYW0yRmM0V0RTQUhhcTFYU3VH
+            V2ZjK0grR0NEYW5kbzlVMHN4STFMdU0KLS0tIGRoNWNZTHdOWUpuaWhRQVZQZlkr
+            b3ovaWVTdHJ6SzBrS0JlVk5Fd2xBcHcK+RI+BsGiVQpd0hdAPZJwbzbTsb4xql6b
+            ozSUmoy7yLD/ubeKzkajXlF46ya5LonALUFkw6e0nbHKF85Rj9OBRA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-11-16T03:47:07Z"
     mac: ENC[AES256_GCM,data:ekU7qBI4r3IEoKKx0DWooK8chmKt52ciKMBAbY3KxsWIN384mP1TLsmjSVB2emVgiJTB7fVHq5Zu0RZOPbrRdqS+FnRnlSwf7GdTxo7VjJV3/eCoMwsV1UEwsqTqr8DUhaYDlT8Wm08THrarlBYaaOKtEJ8Qas2ykOxVyJbyzAI=,iv:y294b1hMUX7GM/AjjEEbbpv4woIrj6OjRmNoZcRB26c=,tag:THsUv0NdNZWtrecpq6xtzA==,type:str]