diff --git a/vars/per-machine/gw-cnx-1/root-password/password-hash/machines/gw-cnx-1 b/vars/per-machine/gw-cnx-1/root-password/password-hash/machines/gw-cnx-1
new file mode 120000
index 0000000..bf20d2e
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/root-password/password-hash/machines/gw-cnx-1
@@ -0,0 +1 @@
+../../../../../../sops/machines/gw-cnx-1
\ No newline at end of file
diff --git a/vars/per-machine/gw-cnx-1/root-password/password-hash/secret b/vars/per-machine/gw-cnx-1/root-password/password-hash/secret
new file mode 100644
index 0000000..88df2b2
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/root-password/password-hash/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:HxPAe9vXu18iI/mvwCGgQFgcZjOdzUwNlwel/89e4eFD3RUQX3RaD+Vb3HylYQ/Y/gahdWM9NYBoOf/fOMTzXFN+D/VkQHrKXw==,iv:u6NuNha/Z60x5ig11O/S1mAO+P74u7vFvjhxR17KRE4=,tag:4ae0Si08BiHFMDNKRMLRTg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnUmZpOHloTDRYdlNvN3JB\nL3I0Q1lxK3VVa3Z3T21qRVhIR0htY2ZzaGpJCnRBUUorN3dIaXhMOTljU1hkck9S\ndUNtRWNqSHVvYW5naW5Yclk5WnM0L2sKLS0tIDNITGhJZUJqU254Vk9YcFdja0Ri\neDQ2bWNVSlZpOE85emZhVmFVS0dNc0UKEp9tyMvTInIlh5GcocV6Ui2D5B+bmT2u\nX9Ez9Wi7NV0PJbvuKdqqtDngRwm5Sj9pKnoZLzD+5pi8hNM9Lb9UQQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1g8a6fqhqg8q8qu4jyuhxc7hf00t5qvra55chyfm0qk45wlmvc9qs2cft8t"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHFWcTVydyBBOUVEZTh5\nUEtYMStiTEEyUVl0YlNFQysyU25WYzdJemhxZlJpUnM2YzQ2ZwpqTlI5MldpZ2F5\nVDA0MTNzSzdURVBqREV1V1dmK2JwdGJMWVh5K1l0NkRvCi0tLSAzTnA2OW9Sd0FD\ndmo0bUR1YTJrT2Z6b3V3WGxVOFZ5b3JrZmUxVDVaMFY0Ch0OF4nX3YVvphmTGdjN\nfaXHWjPGVoRv2L7MZQHUExneUOYSG7EhjiHE13Exm5P8/fsW7RS6Y3mfKRJWWJUP\nc/I=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1yubikey1qd859y9ehz2ya8j2cftwrtmdeqhuk7r7yc52zp64wpff6068gwrac3q6nsa"
+			}
+		],
+		"lastmodified": "2026-07-28T09:03:15Z",
+		"mac": "ENC[AES256_GCM,data:qPfMhfrfjpvZGqyrhDuudG6+GmGWThZD3sTAal/9E0x98FPg3GrJbD1UCmr2nWXltkrPDpBRZPfRjUzSKUEtH7Sy2mZ8m4mZgQTeS1wLUe6/oaid/zz9vRNbNXZS+UregW+6Xd1qWwfuZ/rcciNyR/ijRMj4Mm434ZvsuMirzgw=,iv:wT2TJ/ZwgvpmjHEkDOj5hrBO30IgbPcQ/yle06V4/8E=,tag:BkH1Blt9Mg73PjK3zpchRQ==,type:str]",
+		"version": "3.13.1"
+	}
+}
diff --git a/vars/per-machine/gw-cnx-1/root-password/password-hash/users/berwn b/vars/per-machine/gw-cnx-1/root-password/password-hash/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/root-password/password-hash/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file
diff --git a/vars/per-machine/gw-cnx-1/root-password/password/secret b/vars/per-machine/gw-cnx-1/root-password/password/secret
new file mode 100644
index 0000000..cf3e8b3
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/root-password/password/secret
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Yr5kdmNaa42lDVwyTx/C7fKgluBKMBijLTO20y7mH8G+xsn1eQd+/fNl+FJks3QYiiE=,iv:FyZ7lLikZwxBo6V7gbGg0HX6/ljtowNX8M8H7K1/9nI=,tag:6N61vAWpayMPDojAfZvmOg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHFWcTVydyBBdzhMQUkx\nUVhWRjFEblA4d1dQQWxFT0pVa2lJK3dIZFM1ZkhuaXZiRUdYQQpLa3JQc1JmcUQv\nUzFySitLdHN3R3NLOG1oS0pEbDM4L0RxQ1FFeTRsbzFVCi0tLSBIeDh6TFgyZFpD\nOGo0aGpieE01dGhIbGdaVlJ5bkIzNUpocmlYWWdwYnVjCor2ut30BcXxusaeNwuB\nG+ojfW3teY+XAQZptuNMeP8S5HIyOrCwKxh/HutXqOtFLZubTUkO7YjFyNkKjg2L\nfcM=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1yubikey1qd859y9ehz2ya8j2cftwrtmdeqhuk7r7yc52zp64wpff6068gwrac3q6nsa"
+			}
+		],
+		"lastmodified": "2026-07-28T09:03:15Z",
+		"mac": "ENC[AES256_GCM,data:A9lKOiRMDamC3QXSpRhS1x+xefOkk7ONCGG338dQ4J6tFRBKS8sJvMA/DlHxucCAKaWA6y8fcEf6k1Q0z+469OolrIAphG8TKYEKvOd7X5isvz/u6zXpwafV19mrHDcPB2WFGHM1g0A7wfSVzHnvwJ2vlcSfh/PYLiir1MbD+G4=,iv:C84tv9oUZ5uxg1ivfkCXgCamtl16UhPEVJ3OFIrAZQ0=,tag:cRT/RGqpvyzt3GHUYM9kuQ==,type:str]",
+		"version": "3.13.1"
+	}
+}
diff --git a/vars/per-machine/gw-cnx-1/root-password/password/users/berwn b/vars/per-machine/gw-cnx-1/root-password/password/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/root-password/password/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file