diff --git a/vars/shared/dns-tsig/tsig.conf/machines/ns2 b/vars/shared/dns-tsig/tsig.conf/machines/ns2
new file mode 120000
index 0000000..bd93648
--- /dev/null
+++ b/vars/shared/dns-tsig/tsig.conf/machines/ns2
@@ -0,0 +1 @@
+../../../../../sops/machines/ns2
\ No newline at end of file
diff --git a/vars/shared/dns-tsig/tsig.conf/secret b/vars/shared/dns-tsig/tsig.conf/secret
index 8fc643e..feec8cb 100644
--- a/vars/shared/dns-tsig/tsig.conf/secret
+++ b/vars/shared/dns-tsig/tsig.conf/secret
@@ -3,16 +3,21 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fanu282vm7njjweqhrpcfcwpttuhce8js4tsyfry98l0neaqpewqs5s7nt",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdWRKcWk2WVZNQVhsaGJD\nMkZvWVYwWmVqeXZQYXd6SXVXSzJQd1F1R2t3CnNLZlJQT2pGTnVYc2JwSytVV2Z4\nZmp3RmlTS0VjaldJNGdvZnZtV1pLMGsKLS0tIEpMc29sT3BTc2tvVVJNYnhEZDlp\ndGlUTGxlMy9vbHZ6OTlxT091VTh5akkKsKlXtmgX+prOz5oBS28cdrfSMkIQN6hD\n4PxCwSDTAGXKmR+NXF52SYsA7taKJyMrmv/84OUa/X8B8hrKge9Gow==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1yubikey1qtc8v5yqy3g5sh4trwwdp7elmavvkvkvzc4tfdnv2g8wyd8y5lc064mpv34",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEZXQ2lTZyBBbnZ5bHVm\nMzBlWm1zVERsR0k2NCtpK25jRThRR1U4T2VDaG4wcnJOQms4eQpia0FvR1BScTM2\nS0N5Q2VTcE05L0Q2SGZxbEJEcVlyN0lZUnI3Mk5CNWY0Ci0tLSBpaVByL3lOWkU1\nUmNFL2oreWtwV3k3Q25wa1MyL2lVMjhEU29UZUhLekdJCjYYsmB80ZV3T2gXApjv\nLxxXmlWqCypGk0ixGYGEQgp64jhhMVndpa8h6hKTF5WkCigijgKoPa+0Xwz9a1t6\ndTM=\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age1yubikey1qtc8v5yqy3g5sh4trwwdp7elmavvkvkvzc4tfdnv2g8wyd8y5lc064mpv34",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEZXQ2lTZyBBOTB1amdm\nUkRHN29Zc0VpNFZzYnlCK084MS90SUlhdHVyZ2ZPbTh6RlBRaQpEVUhCWkxjelZn\nNXlkbUJjWVRxSERvQTBONzE4YWo4Y2tqSllNSmZCRVlVCi0tLSA5NjhXVG5rRWRj\ndUNON05HeTRxWUdrbGwrbDFhS1ozd2xZYXVzL3k2QmlFClTCXey4trvvH+vQNh6p\nwsxy1vGqsbKfeKuWF1VCenFbpDMwMNxeQ/J5jVLTBZnESAHb7csXjREr0x2paPGi\nLRo=\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1fanu282vm7njjweqhrpcfcwpttuhce8js4tsyfry98l0neaqpewqs5s7nt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZzBzLzlRY2ZQZ2NDdGk4\nYnVBMy8wcjE5MFhaRWJOSTEvbWJXdU5SQ0FVCnZnb3FIOHpKN1ZPQlFhOUdBbWRz\nalFNN1FmS0xSaVZpcjkrNllQdjMwdGsKLS0tIDVPZ0FIL1BTMzlmV1E1NkRKWXdp\nSk5COVBaZCswcEhaUlFsbDQycFNzT3cKDVZtj67Oh4f/EySf4fAHTBmIT/Q4uHRi\nqGMddp66FugCVnhOlu58XhN1E+1fbGsROg0qNUA9XaXKWQWWiXrRQQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1jth55s9n8nsfe5say97cpruadfkka43hwew7auzqqpe4eh6pvfkqnapwlq",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZaUFuTFhTR1RxVWdBeldG\nQmY0UGhTL3BWZjRpd3V4RS9rUm55K3FLSWxvCmZ3TFZCYWVLMEppdjFzaGswdW1r\nYUJUc2ZHWnRnY1VTZGo5c1o4TGFmQlkKLS0tIGt2amJCbjBKa1g1bDlDOHR0eEQ0\nVXBFWDY1NytoSnZ3RlFsaFpHM0FPaDgKRiTtUIlCAguddPqzQDdzhI2t1pTzsS73\nYsplCazoYh0WXDIcf4tJqKcCUbPKMuKsmfobu+AnXlSYUAzKwJezKg==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2026-06-14T06:22:39Z",
 		"mac": "ENC[AES256_GCM,data:7jnXXgdXeq7LE+NVHJ1BBlaAabIWXvpg8rVUtqO9dsftAXlSxZxtqmpHj1hkRLUYO6Td2dfwElQsygqMHjfA1iv7pPpWlB6KBI4kqqhctoL3xqpaWzyrdndDY573GZkgpKTwkIfNOQYkg0OqABQPwovP0owxkVHnmv7i5JqvabI=,iv:zHOJk5p0cl+YQU8bXeBLbtjjOB5AMHvcqMrRQu2VM8A=,tag:o5am8vESTL2BHwxnMDvPWg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
 		"version": "3.12.1"
 	}
 }