diff --git a/vars/per-machine/ns1/root-password/password-hash/machines/ns1 b/vars/per-machine/ns1/root-password/password-hash/machines/ns1
new file mode 120000
index 0000000..ef04008
--- /dev/null
+++ b/vars/per-machine/ns1/root-password/password-hash/machines/ns1
@@ -0,0 +1 @@
+../../../../../../sops/machines/ns1
\ No newline at end of file
diff --git a/vars/per-machine/ns1/root-password/password-hash/secret b/vars/per-machine/ns1/root-password/password-hash/secret
new file mode 100644
index 0000000..fd6a86e
--- /dev/null
+++ b/vars/per-machine/ns1/root-password/password-hash/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:7GVRwEuqDroAJ2KCmzfYYDAUhaD2s2ZUE5yrkd22p1p7mhhuHCuXBUcx314MqcXFZyUuDpQJzyJFGLSIwb37B+lgz93yBGthv3kj9v4TAOfkKjJOpsJdpwNcNBuHCMtQYIiMyE9kpXkhag==,iv:pAOFYAFPYrNnIRrZzWZu/8k0LMxnW5WGWEY+zGhPoxw=,tag:CLp4xV02fqGocGDBBPDbsg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1fanu282vm7njjweqhrpcfcwpttuhce8js4tsyfry98l0neaqpewqs5s7nt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJT1N5MXBuQ1ZPQlRSZC9y\nWW1oKzhOVStKWUlDa0E2OEpqSS9iY21DWFM0CnEyQ05PdDhzelpDVzJ5bFN3TzZX\nQkdmYmFwNGl3eEdjSGJJM0xqaFFUYVkKLS0tIDFxNnVaQUNFK2hOZ2FjQllvNUlm\nRzQvTDVQYXhHNlNONmIxcGhRVytjWm8KnS3ltp3OYhjAJgtgCfnMN+CxjkwUG/Dw\nWq4TI3uXtMX+eLncowK81vmDsLtmHxVryhcHPqd+049ywFPB0alTBA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qtc8v5yqy3g5sh4trwwdp7elmavvkvkvzc4tfdnv2g8wyd8y5lc064mpv34",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEZXQ2lTZyBBdlQwak51\nay9rbE9EWlFBdDBPNzJQY3g3U2RkWmZaeit6a1BqUDFOTFhaNAp0c2Z0WHNiYlVD\nNGxIY1dodUxVWnhQYmxvZi9RWkdEUE5KMFo4MnpUTkFjCi0tLSBLcTNpZ2RkOHRS\nSkwzZGdXZld1T2lURkRJb2xHRy9qNlZndlhBanEwQk9JCrKgp11CEQhbLfoto6gV\nle3X1qLUI4mPLW+M+nJMuUIThYGdWOWN3VG0WFWzNQ+HlyRlW9xWIhTvMlJsTZwj\nTCY=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-06-14T05:20:25Z",
+		"mac": "ENC[AES256_GCM,data:zsKuRk5OMx2l85k++TbaV8CL/lSi0EmNWUEuTClBOfWVSxkzStYBj55HkDCX64FJqy0DcLO5iQXbSLDHweGymmsli8XVRl72xU3erXqaF98VtOC+NQB8Aecio5tasdwUX0IOU4oSmYGJRz9dudGY9A7U4O037wyn/kb6iB5318U=,iv:s/fbXnOvvsFZj7s+cp14FSC8LAbceRVT8phbDYBtgEA=,tag:BgQs6gmJJSTdlv/WGJEC4g==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/per-machine/ns1/root-password/password-hash/users/berwn b/vars/per-machine/ns1/root-password/password-hash/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/ns1/root-password/password-hash/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file
diff --git a/vars/per-machine/ns1/root-password/password/secret b/vars/per-machine/ns1/root-password/password/secret
new file mode 100644
index 0000000..60dcd93
--- /dev/null
+++ b/vars/per-machine/ns1/root-password/password/secret
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:pg2UbfNaTE5m57AnmooorGsvmqvWmjqJdgAqr+FfdifmhyWtTUGTDw==,iv:+MSXPNjhITzSlp0SUSQv55eor9gTFrhy1YSyKw/pReM=,tag:03Tl5Fs6vqAXs0GM8BzTAg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1yubikey1qtc8v5yqy3g5sh4trwwdp7elmavvkvkvzc4tfdnv2g8wyd8y5lc064mpv34",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEZXQ2lTZyBBa0NESENN\nVXJ3RksxTGdiTER6WTBta3RWeHFsL1o1K1NadVhsamRNSVRwOAorMzhkTVF5NGt2\nbTN1U3ZHUDA4L2lBWGgwVGFneVVPZk1NWVlBVzh6NDFnCi0tLSBMZzF1VEIxem9Y\nYzBYVnZlK0NSQzdjVmV6MkZ4c2x1Mmd1QldEM2VTZU5JCmfA28VPud3cJN12XKgU\nnPy+J0SZuAMw9V1EFrn5/pvc7TBttHpIP4EF0yTvfvYoQnvBeIrZMFcJo6EN6FDi\n5/A=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-06-14T05:20:25Z",
+		"mac": "ENC[AES256_GCM,data:EvjyH5ACSFihbxgXL57mSs6N6630eRfXBTqOAD2XjN19AScBnzL4wwo8QGZKEjz8sqyLtcanmtamiKtcf50V4EHfLIUcQ9GKlC7kOvYj4mguF7jvrS0Rf0j4Sg0tC3/1K/4zQdf+orqSjN863VjIrGepvScI4QFNfiovy8f4IN8=,iv:Jh9qrsVfqTEUOoUPdYre6qHG9IPb0IKlUcR4/35wPtI=,tag:fFZc/H/4n321zs+qLNjwZQ==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/per-machine/ns1/root-password/password/users/berwn b/vars/per-machine/ns1/root-password/password/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/ns1/root-password/password/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file