diff --git a/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/groups/admins b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/machines/gw-cnx-1 b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/machines/gw-cnx-1
new file mode 120000
index 0000000..bf20d2e
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/machines/gw-cnx-1
@@ -0,0 +1 @@
+../../../../../../sops/machines/gw-cnx-1
\ No newline at end of file
diff --git a/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/secret b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/secret
new file mode 100644
index 0000000..c55a7d3
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/secret
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data:qc7meBV9juyILOGjCL+D9tAmQw+aWrAoniEmBA==,iv:OpcmR7uD88feCBDr/nWTRleCGeCdiDofbHqaCoMWcDs=,tag:xknti6I9ZSi6XenE76/0Jw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMSlRhdnNYaVBGZFZZaUQ4\nY1BYbFJYNDdGR28yckt0MU82QldGU3VMK1ZZCjJYR2Q3Y2dnYjdEMjkxUURtOENk\nSDNRSGJXTU9HRDE5a1YyaWRRa2g0YjAKLS0tIGplZWdNdWMyZDlmd1lJbW54ZlFD\nQ1BTdUUzY2ZjSkYwak1PSmJKVHFUUUUKAuj0pS20fH9wgn1J+/H3ommOfA/jwmcF\n3CjAhl56Fapw0TjgW0PjCGLtTNWxmViSJELdiOHIcwjbC+hr/R0wHQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1g8a6fqhqg8q8qu4jyuhxc7hf00t5qvra55chyfm0qk45wlmvc9qs2cft8t"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoNlhueEt4Uk9td2ZwdVFJ\nZDJmcG5heHVINjdEWkw3bDJ1bmhLVUdQUUVjCm96Z3hSMDNQV3gxYnJwVG5lOVUx\nOWx5WmYxZXYvL3VKSGlYWDJodkEvYWcKLS0tIC9rRVlqU3BGZTBjZ3M1bVBkZGlr\nQ2o4NitaUkVLckFCWnp5QVk3aUlucEUKcPzuzkGGiucLqC41iJmyubz0XnMagTIt\nlODL2zAkU8aYdnQdHoT+m/Y2T1HpvXKYCEjEnGL6zMyLnDRxFjLJnA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHFWcTVydyBBbjRWZVI5\ncHNqaVFnREtYbis1eTZIN2UwMk12U1NHQ2dMeXVoNSt0aFJYcQpPeTZNVXU1dXlB\nQ2N1OHoxeWt5NnZGa0hJQVFRdi94OHQ3Ujc4RnBzdWpBCi0tLSBHNXpZOXdTTHdH\nb0FPNXFZWU42bVFYZm13bG4wNTVsYzJzNmFTY29HYi84Cjcp2yQfMVwquQD7/yGy\nW8y6Jlama/0E6t5+wWUxp1As8G/YyHv0rlVxHNqYMzd/3BjnGBdO2tQrIc4uWk5z\nuI4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1yubikey1qd859y9ehz2ya8j2cftwrtmdeqhuk7r7yc52zp64wpff6068gwrac3q6nsa"
+			}
+		],
+		"lastmodified": "2026-07-28T09:31:09Z",
+		"mac": "ENC[AES256_GCM,data:Hv1i9DeortOov9BTZb7Gz0ensJsY+ol+guE6iZAH90nI7rrLezTJWaskmHyOhAsxAROpwOaJ60LdNqwfGt62klpMT4jzId/lLroS2PvsOMLFVBexoFNIYLy7g9T9qWPdNwWPLEPD9nzrwNUOqpJlUpTt8foEYTEr5XkpK10ViJM=,iv:HD6VRk4aFDrJaBS+Fsabk+cYBzOAbrAABU+YNC5Bf/0=,tag:0eVhUeuwIvdiBbfjmfcwcg==,type:str]",
+		"version": "3.13.1"
+	}
+}
diff --git a/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/users/berwn b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/pppoe-credentials/chap-secrets/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file
diff --git a/vars/per-machine/gw-cnx-1/pppoe-credentials/username/value b/vars/per-machine/gw-cnx-1/pppoe-credentials/username/value
new file mode 100644
index 0000000..bbfbdde
--- /dev/null
+++ b/vars/per-machine/gw-cnx-1/pppoe-credentials/username/value
@@ -0,0 +1 @@
+8804124153
\ No newline at end of file