diff --git a/vars/shared/dns-acme-mx1-secret/secret/groups/admins b/vars/shared/dns-acme-mx1-secret/secret/groups/admins
new file mode 120000
index 0000000..e7f39ba
--- /dev/null
+++ b/vars/shared/dns-acme-mx1-secret/secret/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/shared/dns-acme-mx1-secret/secret/machines/mx1 b/vars/shared/dns-acme-mx1-secret/secret/machines/mx1
new file mode 120000
index 0000000..639027f
--- /dev/null
+++ b/vars/shared/dns-acme-mx1-secret/secret/machines/mx1
@@ -0,0 +1 @@
+../../../../../sops/machines/mx1
\ No newline at end of file
diff --git a/vars/shared/dns-acme-mx1-secret/secret/secret b/vars/shared/dns-acme-mx1-secret/secret/secret
new file mode 100644
index 0000000..0ba39c2
--- /dev/null
+++ b/vars/shared/dns-acme-mx1-secret/secret/secret
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data:77a5VqyU7Q3Gg5ngvFK6bC+0n4pg6ndpFQWMqM3AOdjjlZfoIwHjEXZzSO8=,iv:Kw/AkO3PpHeIprdqea+ZOLrmxwr6/mDSF/5veg97sb4=,tag:brxb6U0D2Dw7Cq/tRGSh2A==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXM0h0cTdxZ1V5dWRhSisy\nQjNiemFtZzNGSFBxZE9BWTFJQ3NCd1I0a1RRCjlHOFNLMWo0L2VlVjVDOE9Sd2FC\nMVYwNjlpZ3Q0NlJVampXVGlCRzFwMlkKLS0tIEFyVGkvb3lqamsrdTk2dHdBZnRR\nNk9pS3k2aERIazF0MFUyTWVaMy9VNlkKA9x+daBjsAV6vRi7PokOWqDXEyA4kdc3\nP+TSJPXHm8AOEGzhlanr11qL09H+k/eyx+YH9vREfxtHyz2ldzYyZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1l5hw95p5h4sthrgn0usms9yfkwwmcvv34tjgrtv9s4e6x39chacshgxavs",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNE43cTcrYmdDNXZkN1Nm\nQVM3RTd1TDA3cXRmWC95N1kvMVBuUDg3M1hNCnY1UE5xSURobFBrczRGQzZrcE5W\neC9ONHhGTGh5MkxuWm1mYW9acmFrNjgKLS0tICt1d0c5dHN2TVBOVUkrYVViaGYr\nVXRySzFxV1R4Z3JqNlVBZVBVTElkSjgKCcpAAuJsR3Jb6GTIggf1YMtqxqyc/nPq\nXDTEAZHhmEyiOxOYYRGF/7tTVweo9vb3jAREyBHWWyEO9z5gdt9nag==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd859y9ehz2ya8j2cftwrtmdeqhuk7r7yc52zp64wpff6068gwrac3q6nsa",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHFWcTVydyBBdEFuZ01h\nUzBmbGpzb1dacTRXZmRuY0h6QlkrdzRKYXdHRkdwOWRhOGxMSQo0eklTZWxlaURI\nVDRVaGI2ZWc1S2R2S2w0d1lFdno2WXpiZDZRam9xWTZzCi0tLSBidkVTTlVVdTds\nY3ZnTndJZ0JzbW9lV2FRQVZiSmhSTGZBcjJFdm01dm1VChB7YHqxIzyg8xeFIW0F\no6Lt6hPupH0d1q7qfwdX8rXqZa2CVLP9rAUMxE4Fs3sqI1gWOB8kuJXRc1U5Jan8\nz2c=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-06-18T07:11:36Z",
+		"mac": "ENC[AES256_GCM,data:K3gMR4fz+/H9SJ3zyOk1lyskn+2eqgy28IltRKH3gSGJHLqgFhkYJZ3lSwvpAv9uDC2PQ8XFQMrM2SHAjhgAbyR5TEN/TZHk2RSWbjsj7m0r7TlCwawyxesU/+ih/pOu6XLG13BPakNEfc+ak+DiG+SfdpMpgdUEHX+ZEPgQC+I=,iv:JHLZEwtzth1nsocyrVw+iGOPbOZEBvryaxD8zW+p72M=,tag:as0o1kT5pweVRXHxP0QRrg==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/shared/dns-acme-mx1-secret/secret/users/berwn b/vars/shared/dns-acme-mx1-secret/secret/users/berwn
new file mode 120000
index 0000000..cbe2a8d
--- /dev/null
+++ b/vars/shared/dns-acme-mx1-secret/secret/users/berwn
@@ -0,0 +1 @@
+../../../../../sops/users/berwn
\ No newline at end of file