diff --git a/flake.lock b/flake.lock
index edf3c0f..a7bb3cc 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,58 @@
 {
   "nodes": {
+    "arion": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "haskell-flake": "haskell-flake",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733918465,
+        "narHash": "sha256-hSuGa8Hh67EHr2x812Ay6WFyFT2BGKn+zk+FJWeKXPg=",
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "rev": "f01c95c10f9d4f04bb08d97b3233b530b180f12e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "type": "github"
+      }
+    },
+    "blank": {
+      "locked": {
+        "lastModified": 1625557891,
+        "narHash": "sha256-O8/MWsPBGhhyPoPLHZAuoZiiHo9q6FLlEeIDEXuj6T4=",
+        "owner": "divnix",
+        "repo": "blank",
+        "rev": "5a5d2684073d9f563072ed07c871d577a6c614a8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "blank",
+        "type": "github"
+      }
+    },
+    "call-flake": {
+      "locked": {
+        "lastModified": 1687380775,
+        "narHash": "sha256-bmhE1TmrJG4ba93l9WQTLuYM53kwGQAjYHRvHOeuxWU=",
+        "owner": "divnix",
+        "repo": "call-flake",
+        "rev": "74061f6c241227cd05e79b702db9a300a2e4131a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "call-flake",
+        "type": "github"
+      }
+    },
     "clan-core": {
       "inputs": {
         "data-mesher": "data-mesher",
@@ -100,6 +153,39 @@
         "type": "github"
       }
     },
+    "dmerge": {
+      "inputs": {
+        "haumea": [
+          "frappix",
+          "std",
+          "haumea"
+        ],
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ],
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686862774,
+        "narHash": "sha256-ojGtRQ9pIOUrxsQEuEPerUkqIJEuod9hIflfNkY+9CE=",
+        "owner": "divnix",
+        "repo": "dmerge",
+        "rev": "9f7f7a8349d33d7bd02e0f2b484b1f076e503a96",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "0.2.1",
+        "repo": "dmerge",
+        "type": "github"
+      }
+    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": [
@@ -120,6 +206,146 @@
         "type": "github"
       }
     },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "frappix",
+          "arion",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "locked": {
+        "lastModified": 1653893745,
+        "narHash": "sha256-0jntwV3Z8//YwuOjzhV2sgJJPt+HY6KhU7VZUL0fKZQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "1ed9fb1935d260de5fe1c2f7ee0ebaae17ed2fa1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "frappix": {
+      "inputs": {
+        "arion": "arion",
+        "devshell": [
+          "devshell"
+        ],
+        "microvm": "microvm",
+        "n2c": "n2c",
+        "nixago": "nixago",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "std": "std"
+      },
+      "locked": {
+        "lastModified": 1776861301,
+        "narHash": "sha256-V1j+Yhvnqk6UfK2YKAfV8PuGIQsps6jQzylgja8CYFw=",
+        "owner": "kurogeek",
+        "repo": "frappix",
+        "rev": "2b6fe85b5687df82af55ac9e0249f335c0bc5f7f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kurogeek",
+        "repo": "frappix",
+        "type": "github"
+      }
+    },
+    "haskell-flake": {
+      "locked": {
+        "lastModified": 1675296942,
+        "narHash": "sha256-u1X1sblozi5qYEcLp1hxcyo8FfDHnRUVX3dJ/tW19jY=",
+        "owner": "srid",
+        "repo": "haskell-flake",
+        "rev": "c2cafce9d57bfca41794dc3b99c593155006c71e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "ref": "0.1.0",
+        "repo": "haskell-flake",
+        "type": "github"
+      }
+    },
+    "haumea": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1685133229,
+        "narHash": "sha256-FePm/Gi9PBSNwiDFq3N+DWdfxFq0UKsVVTJS3cQPn94=",
+        "owner": "nix-community",
+        "repo": "haumea",
+        "rev": "34dd58385092a23018748b50f9b23de6266dffc2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.2.2",
+        "repo": "haumea",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -155,6 +381,43 @@
         "type": "github"
       }
     },
+    "incl": {
+      "inputs": {
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1693483555,
+        "narHash": "sha256-Beq4WhSeH3jRTZgC1XopTSU10yLpK1nmMcnGoXO0XYo=",
+        "owner": "divnix",
+        "repo": "incl",
+        "rev": "526751ad3d1e23b07944b14e3f6b7a5948d3007b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "incl",
+        "type": "github"
+      }
+    },
+    "lib": {
+      "locked": {
+        "lastModified": 1722128034,
+        "narHash": "sha256-L8rwzYPsLo/TYtydPJoQyYOfetuiyQYnTWYcyB8UE/s=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "d15f6f6021693898fcd2c6a9bb13707383da9bbc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
     "liminix": {
       "flake": false,
       "locked": {
@@ -171,6 +434,48 @@
         "url": "https://gti.telent.net/dan/liminix"
       }
     },
+    "microvm": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "spectrum": "spectrum"
+      },
+      "locked": {
+        "lastModified": 1737981104,
+        "narHash": "sha256-7AGmPPBgLHHWgzzFYDJcyhv/NiuCrpgzg8IyA7Q/H9o=",
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "rev": "3768f4937f38334898c67e03f40e244a57a74caa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "type": "github"
+      }
+    },
+    "n2c": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1730479402,
+        "narHash": "sha256-79NLeNjpCa4mSasmFsE3QA6obURezF0TUO5Pm+1daog=",
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "rev": "5fb215a1564baa74ce04ad7f903d94ad6617e17a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "type": "github"
+      }
+    },
     "nix-darwin": {
       "inputs": {
         "nixpkgs": [
@@ -205,7 +510,47 @@
         "url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
       }
     },
+    "nixago": {
+      "inputs": {
+        "flake-utils": "flake-utils_3",
+        "nixago-exts": [
+          "frappix"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1714086354,
+        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
+        "owner": "nix-community",
+        "repo": "nixago",
+        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixago",
+        "type": "github"
+      }
+    },
     "nixpkgs": {
+      "locked": {
+        "lastModified": 1712920918,
+        "narHash": "sha256-1yxFvUcJfUphK9V91KufIQom7gCsztza0H4Rz2VCWUU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "92323443a56f4e9fc4e4b712e3119f66d0969297",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
       "locked": {
         "lastModified": 1774794121,
         "narHash": "sha256-gih24b728CK8twDNU7VX9vVYK2tLEXvy9gm/GKq2VeE=",
@@ -221,6 +566,68 @@
         "type": "github"
       }
     },
+    "nosys": {
+      "locked": {
+        "lastModified": 1668010795,
+        "narHash": "sha256-JBDVBnos8g0toU7EhIIqQ1If5m/nyBqtHhL3sicdPwI=",
+        "owner": "divnix",
+        "repo": "nosys",
+        "rev": "feade0141487801c71ff55623b421ed535dbdefa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "nosys",
+        "type": "github"
+      }
+    },
+    "paisano": {
+      "inputs": {
+        "call-flake": "call-flake",
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "nixpkgs"
+        ],
+        "nosys": "nosys",
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1708640854,
+        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
+        "owner": "paisano-nix",
+        "repo": "core",
+        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "0.2.0",
+        "repo": "core",
+        "type": "github"
+      }
+    },
+    "paisano-tui": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1708637035,
+        "narHash": "sha256-R19YURSK+MY/Rw6FZnojQS9zuDh+OoTAyngQAjjoubc=",
+        "owner": "paisano-nix",
+        "repo": "tui",
+        "rev": "231761b260587a64817e4ffae3afc15defaa15db",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "v0.5.0",
+        "repo": "tui",
+        "type": "github"
+      }
+    },
     "plasma-manager": {
       "inputs": {
         "home-manager": [
@@ -249,10 +656,11 @@
         "clan-core": "clan-core",
         "devshell": "devshell",
         "flake-parts": "flake-parts",
+        "frappix": "frappix",
         "home-manager": "home-manager",
         "import-tree": "import-tree",
         "liminix": "liminix",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_2",
         "plasma-manager": "plasma-manager",
         "treefmt-nix": "treefmt-nix"
       }
@@ -278,6 +686,82 @@
         "type": "github"
       }
     },
+    "spectrum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1733308308,
+        "narHash": "sha256-+RcbMAjSxV1wW5UpS9abIG1lFZC8bITPiFIKNnE7RLs=",
+        "ref": "refs/heads/main",
+        "rev": "80c9e9830d460c944c8f730065f18bb733bc7ee2",
+        "revCount": 792,
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      }
+    },
+    "std": {
+      "inputs": {
+        "arion": [
+          "frappix",
+          "arion"
+        ],
+        "blank": "blank",
+        "devshell": [
+          "frappix",
+          "devshell"
+        ],
+        "dmerge": "dmerge",
+        "haumea": "haumea",
+        "incl": "incl",
+        "lib": "lib",
+        "makes": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "microvm": [
+          "frappix",
+          "microvm"
+        ],
+        "n2c": [
+          "frappix",
+          "n2c"
+        ],
+        "nixago": [
+          "frappix",
+          "nixago"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "paisano": "paisano",
+        "paisano-tui": "paisano-tui",
+        "terranix": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "yants": "yants"
+      },
+      "locked": {
+        "lastModified": 1738072995,
+        "narHash": "sha256-jfwWnAVeQzIBS5Pex0xSUbGk88g1GFF2w+ohOtbRtcY=",
+        "owner": "divnix",
+        "repo": "std",
+        "rev": "2874513c4b76be4c4200779814993b546fe4a909",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "v0.33.4",
+        "repo": "std",
+        "type": "github"
+      }
+    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
@@ -293,6 +777,36 @@
         "type": "github"
       }
     },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [
@@ -312,6 +826,28 @@
         "repo": "treefmt-nix",
         "type": "github"
       }
+    },
+    "yants": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686863218,
+        "narHash": "sha256-kooxYm3/3ornWtVBNHM3Zh020gACUyFX2G0VQXnB+mk=",
+        "owner": "divnix",
+        "repo": "yants",
+        "rev": "8f0da0dba57149676aa4817ec0c880fbde7a648d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "yants",
+        "type": "github"
+      }
     }
   },
   "root": "root",
diff --git a/flake.nix b/flake.nix
index 2894a35..a8819f7 100644
--- a/flake.nix
+++ b/flake.nix
@@ -34,6 +34,11 @@
       url = "git+https://gti.telent.net/dan/liminix";
       flake = false;
     };
+    frappix = {
+      url = "github:kurogeek/frappix";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.devshell.follows = "devshell";
+    };
   };
   outputs =
     {
diff --git a/inventory.json b/inventory.json
index 8bc9650..e654613 100644
--- a/inventory.json
+++ b/inventory.json
@@ -29,6 +29,12 @@
     },
     "sirius": {
       "installedAt": 1770974584
+    },
+    "deneb": {
+      "installedAt": 1775718970
+    },
+    "canopus": {
+      "installedAt": 1775793532
     }
   }
 }
\ No newline at end of file
diff --git a/machines/canopus/configuration.nix b/machines/canopus/configuration.nix
new file mode 100644
index 0000000..c680ddf
--- /dev/null
+++ b/machines/canopus/configuration.nix
@@ -0,0 +1,106 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "glomerp.newedge.house";
+in
+{
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "glomerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+      pkgs.frappix.hrms
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+        apps = [
+          "frappe"
+          "erpnext"
+          "hrms"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
diff --git a/machines/canopus/disko.nix b/machines/canopus/disko.nix
new file mode 100644
index 0000000..6bbb54d
--- /dev/null
+++ b/machines/canopus/disko.nix
@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/machines/canopus/facter.json b/machines/canopus/facter.json
new file mode 100644
index 0000000..1d5e936
--- /dev/null
+++ b/machines/canopus/facter.json
@@ -0,0 +1,1769 @@
+{
+  "version": 1,
+  "system": "x86_64-linux",
+  "virtualisation": "kvm",
+  "hardware": {
+    "bios": {
+      "apm_info": {
+        "supported": false,
+        "enabled": false,
+        "version": 0,
+        "sub_version": 0,
+        "bios_flags": 0
+      },
+      "vbe_info": {
+        "version": 0,
+        "video_memory": 0
+      },
+      "pnp": false,
+      "pnp_id": 0,
+      "lba_support": false,
+      "low_memory_size": 0,
+      "smbios_version": 520
+    },
+    "bridge": [
+      {
+        "index": 8,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 31
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:1f.0",
+        "sysfs_bus_id": "0000:00:1f.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 3,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      },
+      {
+        "index": 9,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "ISA bridge",
+          "value": 1
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7000",
+          "value": 28672
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "model": "Intel ISA bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.0",
+        "sysfs_bus_id": "0000:00:01.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00008086d00007000sv00001AF4sd00001100bc06sc01i00"
+      },
+      {
+        "index": 10,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 30
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:1e.0",
+        "sysfs_bus_id": "0000:00:1e.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 2,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      },
+      {
+        "index": 11,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Host bridge",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1237",
+          "value": 4663
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0002",
+          "value": 2
+        },
+        "model": "Intel Host bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:00.0",
+        "sysfs_bus_id": "0000:00:00.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00008086d00001237sv00001AF4sd00001100bc06sc00i00"
+      },
+      {
+        "index": 12,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0080",
+          "name": "Bridge",
+          "value": 128
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7113",
+          "value": 28947
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0003",
+          "value": 3
+        },
+        "model": "Intel Bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.3",
+        "sysfs_bus_id": "0000:00:01.3",
+        "detail": {
+          "function": 3,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "piix4_smbus",
+        "driver_module": "i2c_piix4",
+        "drivers": ["piix4_smbus"],
+        "driver_modules": ["i2c_piix4"],
+        "module_alias": "pci:v00008086d00007113sv00001AF4sd00001100bc06sc80i00"
+      },
+      {
+        "index": 17,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 5
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0",
+        "sysfs_bus_id": "0000:00:05.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 1,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      }
+    ],
+    "cdrom": [
+      {
+        "index": 22,
+        "attached_to": 15,
+        "class_list": ["cdrom", "scsi", "block_device"],
+        "bus_type": {
+          "hex": "0084",
+          "name": "SCSI",
+          "value": 132
+        },
+        "slot": {
+          "bus": 1,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0106",
+          "name": "Mass Storage Device",
+          "value": 262
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "CD-ROM",
+          "value": 2
+        },
+        "pci_interface": {
+          "hex": "0003",
+          "name": "DVD",
+          "value": 3
+        },
+        "vendor": {
+          "hex": "0000",
+          "name": "QEMU",
+          "value": 0
+        },
+        "device": {
+          "hex": "0000",
+          "name": "QEMU DVD-ROM",
+          "value": 0
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "2.5+",
+          "value": 0
+        },
+        "model": "QEMU DVD-ROM",
+        "sysfs_id": "/class/block/sr0",
+        "sysfs_bus_id": "1:0:0:0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0",
+        "unix_device_names": [
+          "/dev/cdrom",
+          "/dev/disk/by-id/ata-QEMU_DVD-ROM_QM00003",
+          "/dev/disk/by-label/nixos-26.05-x86_64",
+          "/dev/disk/by-path/pci-0000:00:01.1-ata-2",
+          "/dev/disk/by-path/pci-0000:00:01.1-ata-2.0",
+          "/dev/disk/by-uuid/1980-01-01-00-00-00-00",
+          "/dev/root",
+          "/dev/sr0"
+        ],
+        "unix_device_name2": "/dev/sg1",
+        "driver": "ata_piix",
+        "driver_module": "ata_piix",
+        "drivers": ["ata_piix", "sr"],
+        "driver_modules": ["ata_piix", "sr_mod"]
+      }
+    ],
+    "cpu": [
+      {
+        "architecture": "x86_64",
+        "vendor_name": "GenuineIntel",
+        "model_name": "QEMU Virtual CPU version 2.5+",
+        "family": 15,
+        "model": 107,
+        "stepping": 1,
+        "features": [
+          "fpu",
+          "de",
+          "pse",
+          "tsc",
+          "msr",
+          "pae",
+          "mce",
+          "cx8",
+          "apic",
+          "sep",
+          "mtrr",
+          "pge",
+          "mca",
+          "cmov",
+          "pat",
+          "pse36",
+          "clflush",
+          "mmx",
+          "fxsr",
+          "sse",
+          "sse2",
+          "syscall",
+          "nx",
+          "lm",
+          "rep_good",
+          "nopl",
+          "xtopology",
+          "cpuid",
+          "tsc_known_freq",
+          "pni",
+          "ssse3",
+          "cx16",
+          "sse4_1",
+          "sse4_2",
+          "x2apic",
+          "popcnt",
+          "aes",
+          "hypervisor",
+          "lahf_lm",
+          "cpuid_fault",
+          "pti"
+        ],
+        "bugs": [
+          "cpu_meltdown",
+          "spectre_v1",
+          "spectre_v2",
+          "spec_store_bypass",
+          "l1tf",
+          "mds",
+          "swapgs",
+          "itlb_multihit",
+          "bhi",
+          "spectre_v2_user",
+          "its"
+        ],
+        "power_management": [""],
+        "bogo": 4224,
+        "cache": 16384,
+        "page_size": 4096,
+        "physical_id": 0,
+        "siblings": 1,
+        "cores": 1,
+        "fpu": false,
+        "fpu_exception": false,
+        "cpuid_level": 13,
+        "write_protect": false,
+        "tlb_size": 32766,
+        "clflush_size": 64,
+        "cache_alignment": 128,
+        "address_sizes": {
+          "physical": "0x28",
+          "virtual": "0x30"
+        }
+      },
+      {
+        "architecture": "x86_64",
+        "vendor_name": "GenuineIntel",
+        "model_name": "QEMU Virtual CPU version 2.5+",
+        "family": 15,
+        "model": 107,
+        "stepping": 1,
+        "features": [
+          "fpu",
+          "de",
+          "pse",
+          "tsc",
+          "msr",
+          "pae",
+          "mce",
+          "cx8",
+          "apic",
+          "sep",
+          "mtrr",
+          "pge",
+          "mca",
+          "cmov",
+          "pat",
+          "pse36",
+          "clflush",
+          "mmx",
+          "fxsr",
+          "sse",
+          "sse2",
+          "syscall",
+          "nx",
+          "lm",
+          "rep_good",
+          "nopl",
+          "xtopology",
+          "cpuid",
+          "tsc_known_freq",
+          "pni",
+          "ssse3",
+          "cx16",
+          "sse4_1",
+          "sse4_2",
+          "x2apic",
+          "popcnt",
+          "aes",
+          "hypervisor",
+          "lahf_lm",
+          "cpuid_fault",
+          "pti"
+        ],
+        "bugs": [
+          "cpu_meltdown",
+          "spectre_v1",
+          "spectre_v2",
+          "spec_store_bypass",
+          "l1tf",
+          "mds",
+          "swapgs",
+          "itlb_multihit",
+          "bhi",
+          "spectre_v2_user",
+          "its"
+        ],
+        "power_management": [""],
+        "bogo": 4224,
+        "cache": 16384,
+        "page_size": 4096,
+        "physical_id": 1,
+        "siblings": 1,
+        "cores": 1,
+        "fpu": false,
+        "fpu_exception": false,
+        "cpuid_level": 13,
+        "write_protect": false,
+        "tlb_size": 32766,
+        "clflush_size": 64,
+        "cache_alignment": 128,
+        "address_sizes": {
+          "physical": "0x28",
+          "virtual": "0x30"
+        }
+      }
+    ],
+    "disk": [
+      {
+        "index": 23,
+        "attached_to": 19,
+        "class_list": ["disk", "scsi", "block_device"],
+        "bus_type": {
+          "hex": "0084",
+          "name": "SCSI",
+          "value": 132
+        },
+        "slot": {
+          "bus": 2,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0106",
+          "name": "Mass Storage Device",
+          "value": 262
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Disk",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "0000",
+          "name": "QEMU",
+          "value": 0
+        },
+        "device": {
+          "hex": "0000",
+          "name": "QEMU HARDDISK",
+          "value": 0
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "2.5+",
+          "value": 0
+        },
+        "model": "QEMU HARDDISK",
+        "sysfs_id": "/class/block/sda",
+        "sysfs_bus_id": "2:0:0:0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0/virtio2/host2/target2:0:0/2:0:0:0",
+        "unix_device_names": [
+          "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0",
+          "/dev/disk/by-path/pci-0000:01:01.0-scsi-0:0:0:0",
+          "/dev/sda"
+        ],
+        "unix_device_name2": "/dev/sg0",
+        "rom_id": "0x80",
+        "resources": [
+          {
+            "type": "disk_geo",
+            "cylinders": 8354,
+            "heads": 255,
+            "sectors": 63,
+            "size": "0x0",
+            "geo_type": "logical"
+          },
+          {
+            "type": "size",
+            "unit": "sectors",
+            "value_1": 134217728,
+            "value_2": 512
+          }
+        ],
+        "driver": "virtio_scsi",
+        "driver_module": "virtio_scsi",
+        "drivers": ["sd", "virtio_scsi"],
+        "driver_modules": ["sd_mod", "virtio_scsi"]
+      }
+    ],
+    "graphics_card": [
+      {
+        "index": 16,
+        "attached_to": 0,
+        "class_list": ["graphics_card", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 2
+        },
+        "base_class": {
+          "hex": "0003",
+          "name": "Display controller",
+          "value": 3
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "VGA compatible controller",
+          "value": 0
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "VGA",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1234",
+          "value": 4660
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1111",
+          "value": 4369
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0002",
+          "value": 2
+        },
+        "model": "VGA compatible controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:02.0",
+        "sysfs_bus_id": "0000:00:02.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "bochs-drm",
+        "driver_module": "bochs",
+        "drivers": ["bochs-drm"],
+        "driver_modules": ["bochs"],
+        "module_alias": "pci:v00001234d00001111sv00001AF4sd00001100bc03sc00i00"
+      }
+    ],
+    "hub": [
+      {
+        "index": 24,
+        "attached_to": 7,
+        "class_list": ["usb", "hub"],
+        "bus_type": {
+          "hex": "0086",
+          "name": "USB",
+          "value": 134
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "010a",
+          "name": "Hub",
+          "value": 266
+        },
+        "vendor": {
+          "hex": "1d6b",
+          "name": "Linux 6.18.2 uhci_hcd",
+          "value": 7531
+        },
+        "device": {
+          "hex": "0001",
+          "name": "UHCI Host Controller",
+          "value": 1
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "6.18",
+          "value": 0
+        },
+        "serial": "0000:00:01.2",
+        "model": "Linux 6.18.2 uhci_hcd UHCI Host Controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-0:1.0",
+        "sysfs_bus_id": "1-0:1.0",
+        "resources": [
+          {
+            "type": "baud",
+            "speed": 12000000,
+            "bits": 0,
+            "stop_bits": 0,
+            "parity": 0,
+            "handshake": 0
+          }
+        ],
+        "detail": {
+          "device_class": {
+            "hex": "0009",
+            "name": "hub",
+            "value": 9
+          },
+          "device_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_protocol": 0,
+          "interface_class": {
+            "hex": "0009",
+            "name": "hub",
+            "value": 9
+          },
+          "interface_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "interface_protocol": 0,
+          "interface_number": 0,
+          "interface_alternate_setting": 0
+        },
+        "hotplug": "usb",
+        "driver": "hub",
+        "driver_module": "usbcore",
+        "drivers": ["hub"],
+        "driver_modules": ["usbcore"],
+        "module_alias": "usb:v1D6Bp0001d0618dc09dsc00dp00ic09isc00ip00in00"
+      }
+    ],
+    "memory": [
+      {
+        "index": 5,
+        "attached_to": 0,
+        "class_list": ["memory"],
+        "base_class": {
+          "hex": "0101",
+          "name": "Internally Used Class",
+          "value": 257
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "Main Memory",
+          "value": 2
+        },
+        "model": "Main Memory",
+        "resources": [
+          {
+            "type": "phys_mem",
+            "range": 2013265920
+          }
+        ]
+      }
+    ],
+    "monitor": [
+      {
+        "index": 21,
+        "attached_to": 16,
+        "class_list": ["monitor"],
+        "base_class": {
+          "hex": "0100",
+          "name": "Monitor",
+          "value": 256
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "LCD Monitor",
+          "value": 2
+        },
+        "vendor": {
+          "hex": "4914",
+          "value": 18708
+        },
+        "device": {
+          "hex": "1234",
+          "name": "QEMU Monitor",
+          "value": 4660
+        },
+        "serial": "0",
+        "model": "QEMU Monitor",
+        "resources": [
+          {
+            "type": "monitor",
+            "width": 1024,
+            "height": 768,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1280,
+            "height": 800,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1600,
+            "height": 1200,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1920,
+            "height": 1080,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 2048,
+            "height": 1152,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 640,
+            "height": 480,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 800,
+            "height": 600,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "size",
+            "unit": "mm",
+            "value_1": 325,
+            "value_2": 203
+          }
+        ],
+        "detail": {
+          "manufacture_year": 2014,
+          "manufacture_week": 42,
+          "vertical_sync": {
+            "min": 50,
+            "max": 125
+          },
+          "horizontal_sync": {
+            "min": 30,
+            "max": 160
+          },
+          "horizontal_sync_timings": {
+            "disp": 1280,
+            "sync_start": 1600,
+            "sync_end": 1638,
+            "total": 1728
+          },
+          "vertical_sync_timings": {
+            "disp": 800,
+            "sync_start": 804,
+            "sync_end": 808,
+            "total": 828
+          },
+          "clock": 107300,
+          "width": 1280,
+          "height": 800,
+          "width_millimetres": 325,
+          "height_millimetres": 203,
+          "horizontal_flag": 45,
+          "vertical_flag": 45,
+          "vendor": "",
+          "name": "QEMU Monitor"
+        },
+        "driver_info": {
+          "type": "display",
+          "width": 2048,
+          "height": 1152,
+          "vertical_sync": {
+            "min": 50,
+            "max": 125
+          },
+          "horizontal_sync": {
+            "min": 30,
+            "max": 160
+          },
+          "bandwidth": 0,
+          "horizontal_sync_timings": {
+            "disp": 1280,
+            "sync_start": 1600,
+            "sync_end": 1638,
+            "total": 1728
+          },
+          "vertical_sync_timings": {
+            "disp": 800,
+            "sync_start": 804,
+            "sync_end": 808,
+            "total": 828
+          },
+          "horizontal_flag": 45,
+          "vertical_flag": 45
+        }
+      }
+    ],
+    "mouse": [
+      {
+        "index": 25,
+        "attached_to": 24,
+        "class_list": ["mouse", "usb"],
+        "bus_type": {
+          "hex": "0086",
+          "name": "USB",
+          "value": 134
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0105",
+          "name": "Mouse",
+          "value": 261
+        },
+        "sub_class": {
+          "hex": "0003",
+          "name": "USB Mouse",
+          "value": 3
+        },
+        "vendor": {
+          "hex": "0627",
+          "name": "QEMU",
+          "value": 1575
+        },
+        "device": {
+          "hex": "0001",
+          "name": "QEMU USB Tablet",
+          "value": 1
+        },
+        "serial": "28754-0000:00:01.2-1",
+        "compat_vendor": "Unknown",
+        "compat_device": "Generic USB Mouse",
+        "model": "QEMU USB Tablet",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0",
+        "sysfs_bus_id": "1-1:1.0",
+        "unix_device_names": ["/dev/input/mice"],
+        "unix_device_name2": "/dev/input/mouse0",
+        "resources": [
+          {
+            "type": "baud",
+            "speed": 12000000,
+            "bits": 0,
+            "stop_bits": 0,
+            "parity": 0,
+            "handshake": 0
+          }
+        ],
+        "detail": {
+          "device_class": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_protocol": 0,
+          "interface_class": {
+            "hex": "0003",
+            "name": "hid",
+            "value": 3
+          },
+          "interface_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "interface_protocol": 0,
+          "interface_number": 0,
+          "interface_alternate_setting": 0
+        },
+        "hotplug": "usb",
+        "driver": "usbhid",
+        "driver_module": "usbhid",
+        "drivers": ["usbhid"],
+        "driver_modules": ["usbhid"],
+        "driver_info": {
+          "type": "mouse",
+          "db_entry_0": ["explorerps/2", "exps2"],
+          "xf86": "explorerps/2",
+          "gpm": "exps2",
+          "buttons": -1,
+          "wheels": -1
+        },
+        "module_alias": "usb:v0627p0001d0000dc00dsc00dp00ic03isc00ip00in00"
+      }
+    ],
+    "network_controller": [
+      {
+        "index": 18,
+        "attached_to": 13,
+        "class_list": ["network_controller"],
+        "bus_type": {
+          "hex": "008f",
+          "name": "Virtio",
+          "value": 143
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0002",
+          "name": "Network controller",
+          "value": 2
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Ethernet controller",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "Ethernet Card 0",
+        "model": "Virtio Ethernet Card 0",
+        "sysfs_id": "/devices/pci0000:00/0000:00:12.0/virtio1",
+        "sysfs_bus_id": "virtio1",
+        "unix_device_names": ["ens18"],
+        "resources": [
+          {
+            "type": "hwaddr",
+            "address": 98
+          },
+          {
+            "type": "phwaddr",
+            "address": 98
+          }
+        ],
+        "driver": "virtio_net",
+        "driver_module": "virtio_net",
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"],
+        "module_alias": "virtio:d00000001v00001AF4"
+      }
+    ],
+    "network_interface": [
+      {
+        "index": 26,
+        "attached_to": 18,
+        "class_list": ["network_interface"],
+        "base_class": {
+          "hex": "0107",
+          "name": "Network Interface",
+          "value": 263
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "Ethernet",
+          "value": 1
+        },
+        "model": "Ethernet network interface",
+        "sysfs_id": "/class/net/ens18",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:12.0/virtio1",
+        "unix_device_names": ["ens18"],
+        "resources": [
+          {
+            "type": "hwaddr",
+            "address": 98
+          },
+          {
+            "type": "phwaddr",
+            "address": 98
+          }
+        ],
+        "driver": "virtio_net",
+        "driver_module": "virtio_net",
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"]
+      },
+      {
+        "index": 27,
+        "attached_to": 0,
+        "class_list": ["network_interface"],
+        "base_class": {
+          "hex": "0107",
+          "name": "Network Interface",
+          "value": 263
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Loopback",
+          "value": 0
+        },
+        "model": "Loopback network interface",
+        "sysfs_id": "/class/net/lo",
+        "unix_device_names": ["lo"]
+      }
+    ],
+    "pci": [
+      {
+        "index": 13,
+        "attached_to": 0,
+        "class_list": ["pci", "unknown"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 18
+        },
+        "base_class": {
+          "hex": "0002",
+          "name": "Network controller",
+          "value": 2
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Ethernet controller",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1000",
+          "value": 4096
+        },
+        "sub_device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "Ethernet controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:12.0",
+        "sysfs_bus_id": "0000:00:12.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53312,
+            "range": 32,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 1031,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001000sv00001AF4sd00000001bc02sc00i00"
+      },
+      {
+        "index": 14,
+        "attached_to": 0,
+        "class_list": ["pci", "unknown"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 3
+        },
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "00ff",
+          "value": 255
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1002",
+          "value": 4098
+        },
+        "sub_device": {
+          "hex": "0005",
+          "value": 5
+        },
+        "model": "Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:03.0",
+        "sysfs_bus_id": "0000:00:03.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53248,
+            "range": 64,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001002sv00001AF4sd00000005bc00scFFi00"
+      }
+    ],
+    "storage_controller": [
+      {
+        "index": 6,
+        "attached_to": 17,
+        "class_list": ["storage_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 1,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0001",
+          "name": "Mass storage controller",
+          "value": 1
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "SCSI storage controller",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1004",
+          "value": 4100
+        },
+        "sub_device": {
+          "hex": "0008",
+          "value": 8
+        },
+        "model": "SCSI storage controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0",
+        "sysfs_bus_id": "0000:01:01.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 49152,
+            "range": 64,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 1031,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001004sv00001AF4sd00000008bc01sc00i00"
+      },
+      {
+        "index": 15,
+        "attached_to": 0,
+        "class_list": ["storage_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0001",
+          "name": "Mass storage controller",
+          "value": 1
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "IDE interface",
+          "value": 1
+        },
+        "pci_interface": {
+          "hex": "0080",
+          "value": 128
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7010",
+          "value": 28688
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "model": "Intel IDE interface",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.1",
+        "sysfs_bus_id": "0000:00:01.1",
+        "resources": [
+          {
+            "type": "io",
+            "base": 1014,
+            "range": 1,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 368,
+            "range": 8,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 496,
+            "range": 8,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 53376,
+            "range": 16,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 886,
+            "range": 1,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 1,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 128
+        },
+        "driver": "ata_piix",
+        "driver_module": "ata_piix",
+        "drivers": ["ata_piix"],
+        "driver_modules": ["ata_piix"],
+        "module_alias": "pci:v00008086d00007010sv00001AF4sd00001100bc01sc01i80"
+      }
+    ],
+    "system": {
+      "form_factor": "desktop"
+    },
+    "unknown": [
+      {
+        "index": 19,
+        "attached_to": 6,
+        "class_list": ["unknown"],
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "",
+        "model": "Virtio Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0/virtio2",
+        "sysfs_bus_id": "virtio2",
+        "driver": "virtio_scsi",
+        "driver_module": "virtio_scsi",
+        "drivers": ["virtio_scsi"],
+        "driver_modules": ["virtio_scsi"],
+        "module_alias": "virtio:d00000008v00001AF4"
+      },
+      {
+        "index": 20,
+        "attached_to": 14,
+        "class_list": ["unknown"],
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "",
+        "model": "Virtio Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:03.0/virtio0",
+        "sysfs_bus_id": "virtio0",
+        "driver": "virtio_balloon",
+        "driver_module": "virtio_balloon",
+        "drivers": ["virtio_balloon"],
+        "driver_modules": ["virtio_balloon"],
+        "module_alias": "virtio:d00000005v00001AF4"
+      }
+    ],
+    "usb_controller": [
+      {
+        "index": 7,
+        "attached_to": 0,
+        "class_list": ["usb_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "000c",
+          "name": "Serial bus controller",
+          "value": 12
+        },
+        "sub_class": {
+          "hex": "0003",
+          "name": "USB Controller",
+          "value": 3
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "UHCI",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7020",
+          "value": 28704
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "Intel USB Controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2",
+        "sysfs_bus_id": "0000:00:01.2",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53344,
+            "range": 32,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 2,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "uhci_hcd",
+        "driver_module": "uhci_hcd",
+        "drivers": ["uhci_hcd"],
+        "driver_modules": ["uhci_hcd"],
+        "driver_info": {
+          "type": "module",
+          "db_entry_0": ["uhci-hcd"],
+          "active": true,
+          "modprobe": true,
+          "names": ["uhci-hcd"],
+          "module_args": [""],
+          "conf": ""
+        },
+        "module_alias": "pci:v00008086d00007020sv00001AF4sd00001100bc0Csc03i00"
+      }
+    ]
+  },
+  "smbios": {
+    "bios": {
+      "handle": 0,
+      "vendor": "Proxmox distribution of EDK II",
+      "version": "4.2025.02-4~bpo12+1",
+      "date": "07/10/2025",
+      "features": null,
+      "start_address": "0xe8000",
+      "rom_size": 65536
+    },
+    "chassis": [
+      {
+        "handle": 768,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "chassis_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "lock_present": false,
+        "bootup_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "power_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "thermal_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "security_state": {
+          "hex": "0002",
+          "name": "Unknown",
+          "value": 2
+        },
+        "oem": "0x0"
+      }
+    ],
+    "memory_array": [
+      {
+        "handle": 4096,
+        "location": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "usage": {
+          "hex": "0003",
+          "name": "System memory",
+          "value": 3
+        },
+        "ecc": {
+          "hex": "0006",
+          "name": "Multi-bit",
+          "value": 6
+        },
+        "max_size": "0x200000",
+        "error_handle": 65534,
+        "slots": 1
+      }
+    ],
+    "memory_array_mapped_address": [
+      {
+        "handle": 4864,
+        "array_handle": 4096,
+        "start_address": "0x0",
+        "end_address": "0x80000000",
+        "part_width": 1
+      }
+    ],
+    "memory_device": [
+      {
+        "handle": 4352,
+        "location": "DIMM 0",
+        "bank_location": "",
+        "manufacturer": "QEMU",
+        "part_number": "",
+        "array_handle": 4096,
+        "error_handle": 65534,
+        "width": 0,
+        "ecc_bits": 0,
+        "size": 2097152,
+        "form_factor": {
+          "hex": "0009",
+          "name": "DIMM",
+          "value": 9
+        },
+        "set": 0,
+        "memory_type": {
+          "hex": "0007",
+          "name": "RAM",
+          "value": 7
+        },
+        "memory_type_details": ["Other"],
+        "speed": 0
+      }
+    ],
+    "processor": [
+      {
+        "handle": 1024,
+        "socket": "CPU 0",
+        "socket_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "socket_populated": true,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "part": "",
+        "processor_type": {
+          "hex": "0003",
+          "name": "CPU",
+          "value": 3
+        },
+        "processor_family": {
+          "hex": "00fe",
+          "name": "Other",
+          "value": 254
+        },
+        "processor_status": {
+          "hex": "0001",
+          "name": "Enabled",
+          "value": 1
+        },
+        "clock_ext": 0,
+        "clock_max": 2000,
+        "cache_handle_l1": 0,
+        "cache_handle_l2": 0,
+        "cache_handle_l3": 0
+      },
+      {
+        "handle": 1025,
+        "socket": "CPU 1",
+        "socket_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "socket_populated": true,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "part": "",
+        "processor_type": {
+          "hex": "0003",
+          "name": "CPU",
+          "value": 3
+        },
+        "processor_family": {
+          "hex": "00fe",
+          "name": "Other",
+          "value": 254
+        },
+        "processor_status": {
+          "hex": "0001",
+          "name": "Enabled",
+          "value": 1
+        },
+        "clock_ext": 0,
+        "clock_max": 2000,
+        "cache_handle_l1": 0,
+        "cache_handle_l2": 0,
+        "cache_handle_l3": 0
+      }
+    ],
+    "system": {
+      "handle": 256,
+      "manufacturer": "QEMU",
+      "product": "Standard PC (i440FX + PIIX, 1996)",
+      "version": "pc-i440fx-9.2",
+      "wake_up": {
+        "hex": "0006",
+        "name": "Power Switch",
+        "value": 6
+      }
+    }
+  }
+}
diff --git a/machines/deneb/configuration.nix b/machines/deneb/configuration.nix
new file mode 100644
index 0000000..99122ae
--- /dev/null
+++ b/machines/deneb/configuration.nix
@@ -0,0 +1,106 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "poyerp.newedge.house";
+in
+{
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "poyerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+      pkgs.frappix.hrms
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+        apps = [
+          "frappe"
+          "erpnext"
+          "hrms"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
diff --git a/machines/deneb/disko.nix b/machines/deneb/disko.nix
new file mode 100644
index 0000000..6bbb54d
--- /dev/null
+++ b/machines/deneb/disko.nix
@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/machines/deneb/facter.json b/machines/deneb/facter.json
new file mode 100644
index 0000000..dba869c
--- /dev/null
+++ b/machines/deneb/facter.json
@@ -0,0 +1,1769 @@
+{
+  "version": 1,
+  "system": "x86_64-linux",
+  "virtualisation": "kvm",
+  "hardware": {
+    "bios": {
+      "apm_info": {
+        "supported": false,
+        "enabled": false,
+        "version": 0,
+        "sub_version": 0,
+        "bios_flags": 0
+      },
+      "vbe_info": {
+        "version": 0,
+        "video_memory": 0
+      },
+      "pnp": false,
+      "pnp_id": 0,
+      "lba_support": false,
+      "low_memory_size": 0,
+      "smbios_version": 520
+    },
+    "bridge": [
+      {
+        "index": 8,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 31
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:1f.0",
+        "sysfs_bus_id": "0000:00:1f.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 3,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      },
+      {
+        "index": 9,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "ISA bridge",
+          "value": 1
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7000",
+          "value": 28672
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "model": "Intel ISA bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.0",
+        "sysfs_bus_id": "0000:00:01.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00008086d00007000sv00001AF4sd00001100bc06sc01i00"
+      },
+      {
+        "index": 10,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 30
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:1e.0",
+        "sysfs_bus_id": "0000:00:1e.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 2,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      },
+      {
+        "index": 11,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Host bridge",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1237",
+          "value": 4663
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0002",
+          "value": 2
+        },
+        "model": "Intel Host bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:00.0",
+        "sysfs_bus_id": "0000:00:00.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00008086d00001237sv00001AF4sd00001100bc06sc00i00"
+      },
+      {
+        "index": 12,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0080",
+          "name": "Bridge",
+          "value": 128
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7113",
+          "value": 28947
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0003",
+          "value": 3
+        },
+        "model": "Intel Bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.3",
+        "sysfs_bus_id": "0000:00:01.3",
+        "detail": {
+          "function": 3,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "piix4_smbus",
+        "driver_module": "i2c_piix4",
+        "drivers": ["piix4_smbus"],
+        "driver_modules": ["i2c_piix4"],
+        "module_alias": "pci:v00008086d00007113sv00001AF4sd00001100bc06sc80i00"
+      },
+      {
+        "index": 17,
+        "attached_to": 0,
+        "class_list": ["pci", "bridge"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 5
+        },
+        "base_class": {
+          "hex": "0006",
+          "name": "Bridge",
+          "value": 6
+        },
+        "sub_class": {
+          "hex": "0004",
+          "name": "PCI bridge",
+          "value": 4
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "Normal decode",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1b36",
+          "value": 6966
+        },
+        "device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "PCI bridge",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0",
+        "sysfs_bus_id": "0000:00:05.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 1,
+          "secondary_bus": 1,
+          "prog_if": 0
+        },
+        "module_alias": "pci:v00001B36d00000001sv00000000sd00000000bc06sc04i00"
+      }
+    ],
+    "cdrom": [
+      {
+        "index": 22,
+        "attached_to": 15,
+        "class_list": ["cdrom", "scsi", "block_device"],
+        "bus_type": {
+          "hex": "0084",
+          "name": "SCSI",
+          "value": 132
+        },
+        "slot": {
+          "bus": 2,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0106",
+          "name": "Mass Storage Device",
+          "value": 262
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "CD-ROM",
+          "value": 2
+        },
+        "pci_interface": {
+          "hex": "0003",
+          "name": "DVD",
+          "value": 3
+        },
+        "vendor": {
+          "hex": "0000",
+          "name": "QEMU",
+          "value": 0
+        },
+        "device": {
+          "hex": "0000",
+          "name": "QEMU DVD-ROM",
+          "value": 0
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "2.5+",
+          "value": 0
+        },
+        "model": "QEMU DVD-ROM",
+        "sysfs_id": "/class/block/sr0",
+        "sysfs_bus_id": "2:0:0:0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:01.1/ata2/host2/target2:0:0/2:0:0:0",
+        "unix_device_names": [
+          "/dev/cdrom",
+          "/dev/disk/by-id/ata-QEMU_DVD-ROM_QM00003",
+          "/dev/disk/by-label/nixos-26.05-x86_64",
+          "/dev/disk/by-path/pci-0000:00:01.1-ata-2",
+          "/dev/disk/by-path/pci-0000:00:01.1-ata-2.0",
+          "/dev/disk/by-uuid/1980-01-01-00-00-00-00",
+          "/dev/root",
+          "/dev/sr0"
+        ],
+        "unix_device_name2": "/dev/sg1",
+        "driver": "ata_piix",
+        "driver_module": "ata_piix",
+        "drivers": ["ata_piix", "sr"],
+        "driver_modules": ["ata_piix", "sr_mod"]
+      }
+    ],
+    "cpu": [
+      {
+        "architecture": "x86_64",
+        "vendor_name": "GenuineIntel",
+        "model_name": "QEMU Virtual CPU version 2.5+",
+        "family": 15,
+        "model": 107,
+        "stepping": 1,
+        "features": [
+          "fpu",
+          "de",
+          "pse",
+          "tsc",
+          "msr",
+          "pae",
+          "mce",
+          "cx8",
+          "apic",
+          "sep",
+          "mtrr",
+          "pge",
+          "mca",
+          "cmov",
+          "pat",
+          "pse36",
+          "clflush",
+          "mmx",
+          "fxsr",
+          "sse",
+          "sse2",
+          "syscall",
+          "nx",
+          "lm",
+          "rep_good",
+          "nopl",
+          "xtopology",
+          "cpuid",
+          "tsc_known_freq",
+          "pni",
+          "ssse3",
+          "cx16",
+          "sse4_1",
+          "sse4_2",
+          "x2apic",
+          "popcnt",
+          "aes",
+          "hypervisor",
+          "lahf_lm",
+          "cpuid_fault",
+          "pti"
+        ],
+        "bugs": [
+          "cpu_meltdown",
+          "spectre_v1",
+          "spectre_v2",
+          "spec_store_bypass",
+          "l1tf",
+          "mds",
+          "swapgs",
+          "itlb_multihit",
+          "bhi",
+          "spectre_v2_user",
+          "its"
+        ],
+        "power_management": [""],
+        "bogo": 4224,
+        "cache": 16384,
+        "page_size": 4096,
+        "physical_id": 0,
+        "siblings": 1,
+        "cores": 1,
+        "fpu": false,
+        "fpu_exception": false,
+        "cpuid_level": 13,
+        "write_protect": false,
+        "tlb_size": 32766,
+        "clflush_size": 64,
+        "cache_alignment": 128,
+        "address_sizes": {
+          "physical": "0x28",
+          "virtual": "0x30"
+        }
+      },
+      {
+        "architecture": "x86_64",
+        "vendor_name": "GenuineIntel",
+        "model_name": "QEMU Virtual CPU version 2.5+",
+        "family": 15,
+        "model": 107,
+        "stepping": 1,
+        "features": [
+          "fpu",
+          "de",
+          "pse",
+          "tsc",
+          "msr",
+          "pae",
+          "mce",
+          "cx8",
+          "apic",
+          "sep",
+          "mtrr",
+          "pge",
+          "mca",
+          "cmov",
+          "pat",
+          "pse36",
+          "clflush",
+          "mmx",
+          "fxsr",
+          "sse",
+          "sse2",
+          "syscall",
+          "nx",
+          "lm",
+          "rep_good",
+          "nopl",
+          "xtopology",
+          "cpuid",
+          "tsc_known_freq",
+          "pni",
+          "ssse3",
+          "cx16",
+          "sse4_1",
+          "sse4_2",
+          "x2apic",
+          "popcnt",
+          "aes",
+          "hypervisor",
+          "lahf_lm",
+          "cpuid_fault",
+          "pti"
+        ],
+        "bugs": [
+          "cpu_meltdown",
+          "spectre_v1",
+          "spectre_v2",
+          "spec_store_bypass",
+          "l1tf",
+          "mds",
+          "swapgs",
+          "itlb_multihit",
+          "bhi",
+          "spectre_v2_user",
+          "its"
+        ],
+        "power_management": [""],
+        "bogo": 4224,
+        "cache": 16384,
+        "page_size": 4096,
+        "physical_id": 1,
+        "siblings": 1,
+        "cores": 1,
+        "fpu": false,
+        "fpu_exception": false,
+        "cpuid_level": 13,
+        "write_protect": false,
+        "tlb_size": 32766,
+        "clflush_size": 64,
+        "cache_alignment": 128,
+        "address_sizes": {
+          "physical": "0x28",
+          "virtual": "0x30"
+        }
+      }
+    ],
+    "disk": [
+      {
+        "index": 23,
+        "attached_to": 19,
+        "class_list": ["disk", "scsi", "block_device"],
+        "bus_type": {
+          "hex": "0084",
+          "name": "SCSI",
+          "value": 132
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0106",
+          "name": "Mass Storage Device",
+          "value": 262
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Disk",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "0000",
+          "name": "QEMU",
+          "value": 0
+        },
+        "device": {
+          "hex": "0000",
+          "name": "QEMU HARDDISK",
+          "value": 0
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "2.5+",
+          "value": 0
+        },
+        "model": "QEMU HARDDISK",
+        "sysfs_id": "/class/block/sda",
+        "sysfs_bus_id": "0:0:0:0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0/virtio2/host0/target0:0:0/0:0:0:0",
+        "unix_device_names": [
+          "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0",
+          "/dev/disk/by-path/pci-0000:01:01.0-scsi-0:0:0:0",
+          "/dev/sda"
+        ],
+        "unix_device_name2": "/dev/sg0",
+        "rom_id": "0x80",
+        "resources": [
+          {
+            "type": "disk_geo",
+            "cylinders": 8354,
+            "heads": 255,
+            "sectors": 63,
+            "size": "0x0",
+            "geo_type": "logical"
+          },
+          {
+            "type": "size",
+            "unit": "sectors",
+            "value_1": 134217728,
+            "value_2": 512
+          }
+        ],
+        "driver": "virtio_scsi",
+        "driver_module": "virtio_scsi",
+        "drivers": ["sd", "virtio_scsi"],
+        "driver_modules": ["sd_mod", "virtio_scsi"]
+      }
+    ],
+    "graphics_card": [
+      {
+        "index": 16,
+        "attached_to": 0,
+        "class_list": ["graphics_card", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 2
+        },
+        "base_class": {
+          "hex": "0003",
+          "name": "Display controller",
+          "value": 3
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "VGA compatible controller",
+          "value": 0
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "VGA",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1234",
+          "value": 4660
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1111",
+          "value": 4369
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0002",
+          "value": 2
+        },
+        "model": "VGA compatible controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:02.0",
+        "sysfs_bus_id": "0000:00:02.0",
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "bochs-drm",
+        "driver_module": "bochs",
+        "drivers": ["bochs-drm"],
+        "driver_modules": ["bochs"],
+        "module_alias": "pci:v00001234d00001111sv00001AF4sd00001100bc03sc00i00"
+      }
+    ],
+    "hub": [
+      {
+        "index": 24,
+        "attached_to": 7,
+        "class_list": ["usb", "hub"],
+        "bus_type": {
+          "hex": "0086",
+          "name": "USB",
+          "value": 134
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "010a",
+          "name": "Hub",
+          "value": 266
+        },
+        "vendor": {
+          "hex": "1d6b",
+          "name": "Linux 6.18.2 uhci_hcd",
+          "value": 7531
+        },
+        "device": {
+          "hex": "0001",
+          "name": "UHCI Host Controller",
+          "value": 1
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "6.18",
+          "value": 0
+        },
+        "serial": "0000:00:01.2",
+        "model": "Linux 6.18.2 uhci_hcd UHCI Host Controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-0:1.0",
+        "sysfs_bus_id": "1-0:1.0",
+        "resources": [
+          {
+            "type": "baud",
+            "speed": 12000000,
+            "bits": 0,
+            "stop_bits": 0,
+            "parity": 0,
+            "handshake": 0
+          }
+        ],
+        "detail": {
+          "device_class": {
+            "hex": "0009",
+            "name": "hub",
+            "value": 9
+          },
+          "device_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_protocol": 0,
+          "interface_class": {
+            "hex": "0009",
+            "name": "hub",
+            "value": 9
+          },
+          "interface_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "interface_protocol": 0,
+          "interface_number": 0,
+          "interface_alternate_setting": 0
+        },
+        "hotplug": "usb",
+        "driver": "hub",
+        "driver_module": "usbcore",
+        "drivers": ["hub"],
+        "driver_modules": ["usbcore"],
+        "module_alias": "usb:v1D6Bp0001d0618dc09dsc00dp00ic09isc00ip00in00"
+      }
+    ],
+    "memory": [
+      {
+        "index": 5,
+        "attached_to": 0,
+        "class_list": ["memory"],
+        "base_class": {
+          "hex": "0101",
+          "name": "Internally Used Class",
+          "value": 257
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "Main Memory",
+          "value": 2
+        },
+        "model": "Main Memory",
+        "resources": [
+          {
+            "type": "phys_mem",
+            "range": 2013265920
+          }
+        ]
+      }
+    ],
+    "monitor": [
+      {
+        "index": 21,
+        "attached_to": 16,
+        "class_list": ["monitor"],
+        "base_class": {
+          "hex": "0100",
+          "name": "Monitor",
+          "value": 256
+        },
+        "sub_class": {
+          "hex": "0002",
+          "name": "LCD Monitor",
+          "value": 2
+        },
+        "vendor": {
+          "hex": "4914",
+          "value": 18708
+        },
+        "device": {
+          "hex": "1234",
+          "name": "QEMU Monitor",
+          "value": 4660
+        },
+        "serial": "0",
+        "model": "QEMU Monitor",
+        "resources": [
+          {
+            "type": "monitor",
+            "width": 1024,
+            "height": 768,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1280,
+            "height": 800,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1600,
+            "height": 1200,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 1920,
+            "height": 1080,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 2048,
+            "height": 1152,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 640,
+            "height": 480,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "monitor",
+            "width": 800,
+            "height": 600,
+            "vertical_frequency": 60,
+            "interlaced": false
+          },
+          {
+            "type": "size",
+            "unit": "mm",
+            "value_1": 325,
+            "value_2": 203
+          }
+        ],
+        "detail": {
+          "manufacture_year": 2014,
+          "manufacture_week": 42,
+          "vertical_sync": {
+            "min": 50,
+            "max": 125
+          },
+          "horizontal_sync": {
+            "min": 30,
+            "max": 160
+          },
+          "horizontal_sync_timings": {
+            "disp": 1280,
+            "sync_start": 1600,
+            "sync_end": 1638,
+            "total": 1728
+          },
+          "vertical_sync_timings": {
+            "disp": 800,
+            "sync_start": 804,
+            "sync_end": 808,
+            "total": 828
+          },
+          "clock": 107300,
+          "width": 1280,
+          "height": 800,
+          "width_millimetres": 325,
+          "height_millimetres": 203,
+          "horizontal_flag": 45,
+          "vertical_flag": 45,
+          "vendor": "",
+          "name": "QEMU Monitor"
+        },
+        "driver_info": {
+          "type": "display",
+          "width": 2048,
+          "height": 1152,
+          "vertical_sync": {
+            "min": 50,
+            "max": 125
+          },
+          "horizontal_sync": {
+            "min": 30,
+            "max": 160
+          },
+          "bandwidth": 0,
+          "horizontal_sync_timings": {
+            "disp": 1280,
+            "sync_start": 1600,
+            "sync_end": 1638,
+            "total": 1728
+          },
+          "vertical_sync_timings": {
+            "disp": 800,
+            "sync_start": 804,
+            "sync_end": 808,
+            "total": 828
+          },
+          "horizontal_flag": 45,
+          "vertical_flag": 45
+        }
+      }
+    ],
+    "mouse": [
+      {
+        "index": 25,
+        "attached_to": 24,
+        "class_list": ["mouse", "usb"],
+        "bus_type": {
+          "hex": "0086",
+          "name": "USB",
+          "value": 134
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0105",
+          "name": "Mouse",
+          "value": 261
+        },
+        "sub_class": {
+          "hex": "0003",
+          "name": "USB Mouse",
+          "value": 3
+        },
+        "vendor": {
+          "hex": "0627",
+          "name": "QEMU",
+          "value": 1575
+        },
+        "device": {
+          "hex": "0001",
+          "name": "QEMU USB Tablet",
+          "value": 1
+        },
+        "serial": "28754-0000:00:01.2-1",
+        "compat_vendor": "Unknown",
+        "compat_device": "Generic USB Mouse",
+        "model": "QEMU USB Tablet",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0",
+        "sysfs_bus_id": "1-1:1.0",
+        "unix_device_names": ["/dev/input/mice"],
+        "unix_device_name2": "/dev/input/mouse0",
+        "resources": [
+          {
+            "type": "baud",
+            "speed": 12000000,
+            "bits": 0,
+            "stop_bits": 0,
+            "parity": 0,
+            "handshake": 0
+          }
+        ],
+        "detail": {
+          "device_class": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "device_protocol": 0,
+          "interface_class": {
+            "hex": "0003",
+            "name": "hid",
+            "value": 3
+          },
+          "interface_subclass": {
+            "hex": "0000",
+            "name": "per_interface",
+            "value": 0
+          },
+          "interface_protocol": 0,
+          "interface_number": 0,
+          "interface_alternate_setting": 0
+        },
+        "hotplug": "usb",
+        "driver": "usbhid",
+        "driver_module": "usbhid",
+        "drivers": ["usbhid"],
+        "driver_modules": ["usbhid"],
+        "driver_info": {
+          "type": "mouse",
+          "db_entry_0": ["explorerps/2", "exps2"],
+          "xf86": "explorerps/2",
+          "gpm": "exps2",
+          "buttons": -1,
+          "wheels": -1
+        },
+        "module_alias": "usb:v0627p0001d0000dc00dsc00dp00ic03isc00ip00in00"
+      }
+    ],
+    "network_controller": [
+      {
+        "index": 18,
+        "attached_to": 13,
+        "class_list": ["network_controller"],
+        "bus_type": {
+          "hex": "008f",
+          "name": "Virtio",
+          "value": 143
+        },
+        "slot": {
+          "bus": 0,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0002",
+          "name": "Network controller",
+          "value": 2
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Ethernet controller",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "Ethernet Card 0",
+        "model": "Virtio Ethernet Card 0",
+        "sysfs_id": "/devices/pci0000:00/0000:00:12.0/virtio1",
+        "sysfs_bus_id": "virtio1",
+        "unix_device_names": ["ens18"],
+        "resources": [
+          {
+            "type": "hwaddr",
+            "address": 98
+          },
+          {
+            "type": "phwaddr",
+            "address": 98
+          }
+        ],
+        "driver": "virtio_net",
+        "driver_module": "virtio_net",
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"],
+        "module_alias": "virtio:d00000001v00001AF4"
+      }
+    ],
+    "network_interface": [
+      {
+        "index": 26,
+        "attached_to": 0,
+        "class_list": ["network_interface"],
+        "base_class": {
+          "hex": "0107",
+          "name": "Network Interface",
+          "value": 263
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Loopback",
+          "value": 0
+        },
+        "model": "Loopback network interface",
+        "sysfs_id": "/class/net/lo",
+        "unix_device_names": ["lo"]
+      },
+      {
+        "index": 27,
+        "attached_to": 18,
+        "class_list": ["network_interface"],
+        "base_class": {
+          "hex": "0107",
+          "name": "Network Interface",
+          "value": 263
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "Ethernet",
+          "value": 1
+        },
+        "model": "Ethernet network interface",
+        "sysfs_id": "/class/net/ens18",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:12.0/virtio1",
+        "unix_device_names": ["ens18"],
+        "resources": [
+          {
+            "type": "hwaddr",
+            "address": 98
+          },
+          {
+            "type": "phwaddr",
+            "address": 98
+          }
+        ],
+        "driver": "virtio_net",
+        "driver_module": "virtio_net",
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"]
+      }
+    ],
+    "pci": [
+      {
+        "index": 13,
+        "attached_to": 0,
+        "class_list": ["pci", "unknown"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 18
+        },
+        "base_class": {
+          "hex": "0002",
+          "name": "Network controller",
+          "value": 2
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Ethernet controller",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1000",
+          "value": 4096
+        },
+        "sub_device": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "Ethernet controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:12.0",
+        "sysfs_bus_id": "0000:00:12.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53312,
+            "range": 32,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 1031,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001000sv00001AF4sd00000001bc02sc00i00"
+      },
+      {
+        "index": 14,
+        "attached_to": 0,
+        "class_list": ["pci", "unknown"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 3
+        },
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "00ff",
+          "value": 255
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1002",
+          "value": 4098
+        },
+        "sub_device": {
+          "hex": "0005",
+          "value": 5
+        },
+        "model": "Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:03.0",
+        "sysfs_bus_id": "0000:00:03.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53248,
+            "range": 64,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001002sv00001AF4sd00000005bc00scFFi00"
+      }
+    ],
+    "storage_controller": [
+      {
+        "index": 6,
+        "attached_to": 17,
+        "class_list": ["storage_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 1,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0001",
+          "name": "Mass storage controller",
+          "value": 1
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "SCSI storage controller",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "1004",
+          "value": 4100
+        },
+        "sub_device": {
+          "hex": "0008",
+          "value": 8
+        },
+        "model": "SCSI storage controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0",
+        "sysfs_bus_id": "0000:01:01.0",
+        "resources": [
+          {
+            "type": "io",
+            "base": 49152,
+            "range": 64,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 0,
+          "command": 1031,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "virtio-pci",
+        "driver_module": "virtio_pci",
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
+        "module_alias": "pci:v00001AF4d00001004sv00001AF4sd00000008bc01sc00i00"
+      },
+      {
+        "index": 15,
+        "attached_to": 0,
+        "class_list": ["storage_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "0001",
+          "name": "Mass storage controller",
+          "value": 1
+        },
+        "sub_class": {
+          "hex": "0001",
+          "name": "IDE interface",
+          "value": 1
+        },
+        "pci_interface": {
+          "hex": "0080",
+          "value": 128
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7010",
+          "value": 28688
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "model": "Intel IDE interface",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.1",
+        "sysfs_bus_id": "0000:00:01.1",
+        "resources": [
+          {
+            "type": "io",
+            "base": 1014,
+            "range": 1,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 368,
+            "range": 8,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 496,
+            "range": 8,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 53376,
+            "range": 16,
+            "enabled": true,
+            "access": "read_write"
+          },
+          {
+            "type": "io",
+            "base": 886,
+            "range": 1,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 1,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 128
+        },
+        "driver": "ata_piix",
+        "driver_module": "ata_piix",
+        "drivers": ["ata_piix"],
+        "driver_modules": ["ata_piix"],
+        "module_alias": "pci:v00008086d00007010sv00001AF4sd00001100bc01sc01i80"
+      }
+    ],
+    "system": {
+      "form_factor": "desktop"
+    },
+    "unknown": [
+      {
+        "index": 19,
+        "attached_to": 6,
+        "class_list": ["unknown"],
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "",
+        "model": "Virtio Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:05.0/0000:01:01.0/virtio2",
+        "sysfs_bus_id": "virtio2",
+        "driver": "virtio_scsi",
+        "driver_module": "virtio_scsi",
+        "drivers": ["virtio_scsi"],
+        "driver_modules": ["virtio_scsi"],
+        "module_alias": "virtio:d00000008v00001AF4"
+      },
+      {
+        "index": 20,
+        "attached_to": 14,
+        "class_list": ["unknown"],
+        "base_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Unclassified device",
+          "value": 0
+        },
+        "vendor": "Virtio",
+        "device": "",
+        "model": "Virtio Unclassified device",
+        "sysfs_id": "/devices/pci0000:00/0000:00:03.0/virtio0",
+        "sysfs_bus_id": "virtio0",
+        "driver": "virtio_balloon",
+        "driver_module": "virtio_balloon",
+        "drivers": ["virtio_balloon"],
+        "driver_modules": ["virtio_balloon"],
+        "module_alias": "virtio:d00000005v00001AF4"
+      }
+    ],
+    "usb_controller": [
+      {
+        "index": 7,
+        "attached_to": 0,
+        "class_list": ["usb_controller", "pci"],
+        "bus_type": {
+          "hex": "0004",
+          "name": "PCI",
+          "value": 4
+        },
+        "slot": {
+          "bus": 0,
+          "number": 1
+        },
+        "base_class": {
+          "hex": "000c",
+          "name": "Serial bus controller",
+          "value": 12
+        },
+        "sub_class": {
+          "hex": "0003",
+          "name": "USB Controller",
+          "value": 3
+        },
+        "pci_interface": {
+          "hex": "0000",
+          "name": "UHCI",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "8086",
+          "name": "Intel Corporation",
+          "value": 32902
+        },
+        "sub_vendor": {
+          "hex": "1af4",
+          "value": 6900
+        },
+        "device": {
+          "hex": "7020",
+          "value": 28704
+        },
+        "sub_device": {
+          "hex": "1100",
+          "value": 4352
+        },
+        "revision": {
+          "hex": "0001",
+          "value": 1
+        },
+        "model": "Intel USB Controller",
+        "sysfs_id": "/devices/pci0000:00/0000:00:01.2",
+        "sysfs_bus_id": "0000:00:01.2",
+        "resources": [
+          {
+            "type": "io",
+            "base": 53344,
+            "range": 32,
+            "enabled": true,
+            "access": "read_write"
+          }
+        ],
+        "detail": {
+          "function": 2,
+          "command": 7,
+          "header_type": 0,
+          "secondary_bus": 0,
+          "prog_if": 0
+        },
+        "driver": "uhci_hcd",
+        "driver_module": "uhci_hcd",
+        "drivers": ["uhci_hcd"],
+        "driver_modules": ["uhci_hcd"],
+        "driver_info": {
+          "type": "module",
+          "db_entry_0": ["uhci-hcd"],
+          "active": true,
+          "modprobe": true,
+          "names": ["uhci-hcd"],
+          "module_args": [""],
+          "conf": ""
+        },
+        "module_alias": "pci:v00008086d00007020sv00001AF4sd00001100bc0Csc03i00"
+      }
+    ]
+  },
+  "smbios": {
+    "bios": {
+      "handle": 0,
+      "vendor": "Proxmox distribution of EDK II",
+      "version": "4.2025.02-4~bpo12+1",
+      "date": "07/10/2025",
+      "features": null,
+      "start_address": "0xe8000",
+      "rom_size": 65536
+    },
+    "chassis": [
+      {
+        "handle": 768,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "chassis_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "lock_present": false,
+        "bootup_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "power_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "thermal_state": {
+          "hex": "0003",
+          "name": "Safe",
+          "value": 3
+        },
+        "security_state": {
+          "hex": "0002",
+          "name": "Unknown",
+          "value": 2
+        },
+        "oem": "0x0"
+      }
+    ],
+    "memory_array": [
+      {
+        "handle": 4096,
+        "location": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "usage": {
+          "hex": "0003",
+          "name": "System memory",
+          "value": 3
+        },
+        "ecc": {
+          "hex": "0006",
+          "name": "Multi-bit",
+          "value": 6
+        },
+        "max_size": "0x200000",
+        "error_handle": 65534,
+        "slots": 1
+      }
+    ],
+    "memory_array_mapped_address": [
+      {
+        "handle": 4864,
+        "array_handle": 4096,
+        "start_address": "0x0",
+        "end_address": "0x80000000",
+        "part_width": 1
+      }
+    ],
+    "memory_device": [
+      {
+        "handle": 4352,
+        "location": "DIMM 0",
+        "bank_location": "",
+        "manufacturer": "QEMU",
+        "part_number": "",
+        "array_handle": 4096,
+        "error_handle": 65534,
+        "width": 0,
+        "ecc_bits": 0,
+        "size": 2097152,
+        "form_factor": {
+          "hex": "0009",
+          "name": "DIMM",
+          "value": 9
+        },
+        "set": 0,
+        "memory_type": {
+          "hex": "0007",
+          "name": "RAM",
+          "value": 7
+        },
+        "memory_type_details": ["Other"],
+        "speed": 0
+      }
+    ],
+    "processor": [
+      {
+        "handle": 1024,
+        "socket": "CPU 0",
+        "socket_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "socket_populated": true,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "part": "",
+        "processor_type": {
+          "hex": "0003",
+          "name": "CPU",
+          "value": 3
+        },
+        "processor_family": {
+          "hex": "00fe",
+          "name": "Other",
+          "value": 254
+        },
+        "processor_status": {
+          "hex": "0001",
+          "name": "Enabled",
+          "value": 1
+        },
+        "clock_ext": 0,
+        "clock_max": 2000,
+        "cache_handle_l1": 0,
+        "cache_handle_l2": 0,
+        "cache_handle_l3": 0
+      },
+      {
+        "handle": 1025,
+        "socket": "CPU 1",
+        "socket_type": {
+          "hex": "0001",
+          "name": "Other",
+          "value": 1
+        },
+        "socket_populated": true,
+        "manufacturer": "QEMU",
+        "version": "pc-i440fx-9.2",
+        "part": "",
+        "processor_type": {
+          "hex": "0003",
+          "name": "CPU",
+          "value": 3
+        },
+        "processor_family": {
+          "hex": "00fe",
+          "name": "Other",
+          "value": 254
+        },
+        "processor_status": {
+          "hex": "0001",
+          "name": "Enabled",
+          "value": 1
+        },
+        "clock_ext": 0,
+        "clock_max": 2000,
+        "cache_handle_l1": 0,
+        "cache_handle_l2": 0,
+        "cache_handle_l3": 0
+      }
+    ],
+    "system": {
+      "handle": 256,
+      "manufacturer": "QEMU",
+      "product": "Standard PC (i440FX + PIIX, 1996)",
+      "version": "pc-i440fx-9.2",
+      "wake_up": {
+        "hex": "0006",
+        "name": "Power Switch",
+        "value": 6
+      }
+    }
+  }
+}
diff --git a/overlays/default.nix b/overlays/default.nix
index 583c8e9..3a00279 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -1,6 +1,11 @@
-{ ... }:
+{ inputs, ... }:
 {
   flake.overlays = {
     packagesOverlay = import ../pkgs/overlay.nix;
+
+    frappixFrappeOverlay = inputs.frappix.frappeOverlay.x86_64-linux;
+    frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
+    frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
+    frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
   };
 }
diff --git a/sops/machines/canopus/key.json b/sops/machines/canopus/key.json
new file mode 100755
index 0000000..dedba5e
--- /dev/null
+++ b/sops/machines/canopus/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+    "type": "age"
+  }
+]
\ No newline at end of file
diff --git a/sops/machines/deneb/key.json b/sops/machines/deneb/key.json
new file mode 100755
index 0000000..343ec68
--- /dev/null
+++ b/sops/machines/deneb/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+    "type": "age"
+  }
+]
\ No newline at end of file
diff --git a/sops/secrets/canopus-age.key/groups/admins b/sops/secrets/canopus-age.key/groups/admins
new file mode 120000
index 0000000..e5092e3
--- /dev/null
+++ b/sops/secrets/canopus-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
\ No newline at end of file
diff --git a/sops/secrets/canopus-age.key/secret b/sops/secrets/canopus-age.key/secret
new file mode 100644
index 0000000..bb1829c
--- /dev/null
+++ b/sops/secrets/canopus-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fgf6Hp2UCM5l0pmL62XQwf2i8npmYKSiSazO89U8u4m6FsVkZfwj+U8yGOQlvaExRnhJyoDQ3okiQFrKueufK7gwvmvVPuN1Uk4=,iv:XZbu2Xi0/Ge6Qfnb9TVuAUqiOfPho34R7PK+eNDpXNk=,tag:OMZzEspt8JCdWkvhWR/PTQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNUU4MTdlQmRQNDUzTDdL\ncHhzazgyQTA1NnZuWGJSbTZLQ291RnVqYUFrCmdwNmQ3em1sREkzRjcvSmN4a0xi\nYkpXWmVyV0hlSG9LMlBXQUg0eGdneGcKLS0tIEtFQytreFB5QTZiQnFGZWhneDlt\nM2Y1TnJ4TWtLQ0VPYUFPb1hDU2FtOWsKTGdTMNjgYkhREx2u5Cd2kHIrHXOmgaXv\nxYx7TTXEsRBKPpELqyh4KrjkU3TulIN+aR2TTV6L8T4GPhz7qJRRcw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdXhYSlRIc3hUYUliRG9Z\nZys5Uy9nRFpXUnYxOXdKcGR1M2tyWngyRjJBCjB2R2Vha21nZ1hGUUErbzR5YTRG\nVGtNdWl5ejJ2bUgrS2tLTTByZzE5OVEKLS0tIHBBdUdrZjA0ZC9waHhvUzZpYS9W\ndkw3ZDkvOWVZUk8yekRJMkxodndhY3cKiM6SOGBJecXw6VaFx7ujyjJcD9gTZXll\nkx6CPjS1P5ur3nAxSRBXlgZ54rqv+gjJlhJzXY5+aCGtmuOPUIUUWg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFlGRGYyZDNL\nZHc2UFRVUDB3NU11RWhVdHFPdDRTSi9VclNQaysyMytsaDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp0RXpObEVJVHNRREEzR1R3bTBqN3Rm\nM3hXSWlrcWcxMlIrS2d5bGE3UGlrCi0tLSBZQ1hCZDFwYlNIV1RQK2s2SzFHU2Ja\nWENHL3FCcnNhckFsZW5jejA5Q3ZrCrov/P24IITo3YqDnxDq866Z2484tyGSBVWj\nRW9vd3DSFrN86pz/eXEinzOlEd0Y6G6g8Xbdb6wYDhb3jYLHkXY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDN4dHFEOHl3\neHYzK2k0cWlLOWlIQ1lsc01CMWw1R0hDZUxDR0k4RE50VncgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphRTZweGt6YjlHWUFWRHFabytZWDdI\neWR6YjFVUk40T0h6dnoxRTZLRVZVCi0tLSBZMU4vUy9iNG1DWTJRTWV3bllOam8w\nSjg4M0N6bnlwMXRDd3FoVWlCRVR3Cih+vMcCAkOkX+uWjKW62Jyj8jv5K79koJcz\n6Yh3eAqTrdJmdscKL75SBoD5BmD0Gtc+KE0gC1zKbHcQBkf6b4Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9lMmFoc2Fa\nb1UwYzlYM0Q1T2c2WGx0T3JXaEhsM3ZFRFRURnNQRWlTekEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5QUl6VzU3Sk9saVR0QmduNEVVczFB\neDdnQXl2bDdNOUlVanE4NVdENWFvCi0tLSByTm01ak1yUmFqczlsM3hGMlVtOS9S\nM0Qycks1aERSNUJpWE5MZ3U4MnEwCqebnYBNh6vYos01PJoTnUW3caGBCHrWs0aQ\niXGBFaiAgg8m27zSGF1E4ctQ+VgvlI7BWypVpyQMRw8SAvGxx08=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWU1hhWktFbWc1c2gvN1BM\nU0VrZUZpUkc3MUVUak90SGZxM1hGb3c5M3k4CnUydmVyaUN6UFcxVXJ4eStzbkt2\nRjM5QytuWENCUHJOeEtRM2I1Z3FnY2cKLS0tIGw4WHh2a2ViOTB0OThHTFBLWFlG\naUVXaGpONmNBVHBxejlxWDNSTWtESTAKc2y63StRLBsUByWJJGDNOnuoEP3SLy8F\nlUzHSazowmPAdVtm9gpIWTlnLVnJylY6k1v7TYalejkKl8YXEEt8GA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByR2M1ZG1XSThWYVN0SGR1\nT05VZmZkK0NNTGdNZjAyMEpmQjNEWGtOU0RRCmZHT1NlSy9Qek8zcUU4SEpndmp6\nYUJJZm5aeTNON2dBVElRMjJadCtsN1UKLS0tIFQ0WTBtY25XWCszOXM1VmVPSTZY\nYWJmcEVRd0YwK3RIUXRLYTVNd0ZkZWcKr5f6dCExSjlmClZiDjJylDWr1ccZkpCn\nhhjOsqA1vtayolowqvWheN2fysIg6NgLMZ4R9cedLahVcMfxk+2HGA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSEYwTVJlVjd1cjRPT2Rk\nQmphdU96OXRvNlRRd3c2alNiMVMvK1BVZ3hBClhsZ0NMVG82TEdibzFTQUVUVXBX\nNG1MbEk1dWFmdGxvVk5YQ0ZDTjJ4OUEKLS0tIEJJQ3o2ZnFqZmpsZGFrSis5NXBF\nZmZrL0RUVXhzMDhPNFBmTTR2VzBOSGcKPANYws4mekz7EN+ZjhfO5feMldFNDRSe\n1m5dGjswL5IyKpiE3wOlQAlkp8y5htYKbGdzwv0CxF8UYLGqVP8Jzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPcStTSGxCYjdLUFJhNnZL\nMkFCQUxVT05rZE1HVWJwdCtOd0xsZGJXckRVCnhWQ2Ywd05TMDVKSUdoeFl3RmNz\nYWRLTGxsYmtzWDFydUVZOU9aTVkvTXcKLS0tIHR1akVGTzQ2dVFDQTF0VlZNT3pM\nRDVmc0w2bjR1QiswcmpkUU9hYzJEUUUKC12h6SCwmtfd72aNwo3eGwvYrwtK3ryI\nlB/xr6ZR02Vcc6y8tqpvTq+86TUw+od6NgqpATU2KOni8rZdWWnBJg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:52Z",
+		"mac": "ENC[AES256_GCM,data:zBTGL5/AH9Yt3fvfTUbuS0OpNQkLVSAo/TyypEUpS4TE2/2jpS3VIH8I9P51Iumqr1ZeCTWkR4ujFklXfS7tnvgFlqaJVJtod60C7WZMddrzhSeypOkcAH0/oj/pD1JEp1draiFJBf8NvRsx22RqY7yFUcC9O2KC9WnHn0avq7I=,iv:qz8nv3l9lgMa8IgDTEl9b3loi7CTrwJYVHnGZLuEcys=,tag:A3qyzRqjgKjEo6oYE9fz5g==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/sops/secrets/canopus-age.key/users/kurogeek b/sops/secrets/canopus-age.key/users/kurogeek
new file mode 120000
index 0000000..54331f5
--- /dev/null
+++ b/sops/secrets/canopus-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
\ No newline at end of file
diff --git a/sops/secrets/deneb-age.key/groups/admins b/sops/secrets/deneb-age.key/groups/admins
new file mode 120000
index 0000000..e5092e3
--- /dev/null
+++ b/sops/secrets/deneb-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
\ No newline at end of file
diff --git a/sops/secrets/deneb-age.key/secret b/sops/secrets/deneb-age.key/secret
new file mode 100644
index 0000000..ace0f3d
--- /dev/null
+++ b/sops/secrets/deneb-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:W3kzpxtZXld4cgeTubrTYbIYzAY3CbQjaGeUEIF0USrKkjxHdqPKRrLGPj3OeLhJKWs9AZnKBgTy/bJaJXi6eOcNnM2gubY/lFI=,iv:n7f2HfODC8YEJKn0ILIgbMP2L2beADjm0olrRULtaTE=,tag:0hHEyg0Fzeyq780FGosJtQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXR4aVNHTEN1NWdTdXgx\nQ0tHWjRCYWFJcVh3WC94Wi9vRlFxTlZOYmlZCnQ4M1FOczJWQ2N0NCtNbnlDM25o\ndGFWZFZOQjFHczQxYS9NL0hFLzdHTFkKLS0tIDBNWnV0UGFxMUxIZ082bHFKMnJ1\nd2NsZ3FCZTh4aytBTUdzV0FKWnlZWjAKXTug9QehoAjumvq6cr2JgnHOB1l4Easx\ntXbpbGNm5a0rsYA9FxiQKhk37I7e5RbkxJpxnrlwvlN2QThIOqWDWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHcysxTFFBK1puT2Q4UnJ0\ndmg0bTd2bmQ4TnRmSGJNeTl5cENSQ1gyanhrClV1cmt4TmlLZzhtSFBnQ0Q5dGMr\nVUkrMjF1M0c1UmJENHlIb1JBUHpuTE0KLS0tIGR5bEM1MEFIbjJxWGtKTFlpVkpG\nWTB5OEF2Z1I3azVsbTVHZ1NUeE1VNHcKm1gCaRCGahNVrYpIigDR1KeDlmFs/bQ7\nclmcsZb+RiCXU2frNqgXqMyhXDQ6eELCf0zpqZ5Tue5LQAkF/6CNKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDVkWjRhVjZB\nQXBlT3YzUWNKemhLc2F0RzRHODZMaGtVRGg2SnV5UTAxaTQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3dGNKcUxEOXo3eUdzbnYrUm9uZUJV\nR3FwVmpSYzd4Z2RsRTdGTC8rYlJrCi0tLSBjcTc5UkE5Wk1vV3VLNTh5Sm5vSU1H\ncEJCdjA5QUlaVXMrQndTaVZneGprCu3I0FlZ+bRmxkkFnOqpOa6v0FStKOBlsTQl\nQMdFClzFjXQP/9i/xBXWIsrQ8fC7jiut/M7zDYtdQhUaIiLG5R0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZadU1TQzIx\ndTFmSGY5amNmeFNZRERaaDBZTmxqb042ZVhVeVhtRU84Z3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRW5wWmlodEJPbjBqdnluUkRMT04z\nclRBUUpYMWJLWkk1TzhHOVJOMDc4Ci0tLSBDYWprM3lYN2w1VFVCdXJleXVpMWFE\nM3NZWEdoRmR2ZlRQVGdVQ0F3QkdnChnVrO957ng+BWe1lMVl7y2+Db3TsXx6se3f\nXXkdV0Zzg6STsdSKG0+2TG9Zw1gsDeFcvrMZdE/i92Zn2lYYHD0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlHdkYwQytj\nc0dkUEw0RlVWQzV2YWJnem9nSFpyZWNEazFUcTVXa1ArblEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6akdKdWxKMk1lNEhNL2RCYTVYT0lq\nZGxHeXRwWVQ4MXgrVjN4VEJoQ3NjCi0tLSBMQmVEejBwaFdVVGhDcEc4OUJMSXEr\nT0J6WGp4UzFxWG5kajlzWkt3Z1JzClGHNfyWCLbMeHr1Q/nWblcwQSYi2j6V6UzT\nanPgXMxfUO7qzGLJ9ybrPFxjyHLzAH1bBjVTLmig/V+jlqB5DO0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4UjZyaE9ySGdiQnYyeE9i\nbldRNzZCWnMvQmNseDl2UlVqeTNVQ3BJbVVrCmxWUmUyVUZ1YXlzc3Rremx6Mmlz\nZ1A0VlVPYS9lQkxicUhOd05mWmd6RmsKLS0tIDZka2N0eG00Ym5iQnR0RmN2NGFX\naUIxUnBleFJVcXNod0V3bUpiMHYzaDgK0l3YaBMqM1Kz1jZ++zus5tBWsynO0TsM\nLmgjxptgc3uFz4j9IrS4MJm5gxdTYEGGl/w67CG0BkiE/+7c/BCtOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNjlEa1ZPUENFcmhXcmpD\neU5obkJ0Z2plc0V4TS9IODdMS3pFYm93MURnCnZxejBtQkxQMHRTY1BoTExhb0pF\nb2g0Mld4MmJDMSt4Q29PNTh3eGoySG8KLS0tIG05Qzl2R3F3MkRQd2hMenhYbmRU\nR05kU1ZBQVI0Y2k4SlNFalJyK1ByZE0KqYpRiC/Ta1mACm/H+fFZ2/p22oVHYheB\nD81C3mPcGfM3z9pH2TAxwh9V4i1E4Bsio2lA//fJ174HiGbWr2SLNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSUxBNHFJVytVbytTNFFQ\nRGFmd05CVWxzZzZFd2cxc1FGZ2dJRnM5aVV3Cnk0MWVRekd4S2dJcmxFUXhpOHE2\naHlxY1g4YVZiekl5aUJjalQ2Slo0MncKLS0tIDhTbWVGOE54Q09HeUJhbXEvb0Fu\nOHNEUkczU2w0L2ZkZHJsWFRpQlVTT2sK8RiKwY/waLn7ktbmh8+flByF9tN0RUD1\n78KVpKXp4SBWCp4Gr3tudZNWKnLsummhzxvNWY0FO3vOYK32SYFJ5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYmRWWVZ6VFF6L2J3OWlK\nUmdPZXNldWtHUHFPZmtEZ0VTTnFEZ2kvMXl3CjAyaUVNR2NmQ1dkTnVnNHY3Nitp\nY0Z4Rk5jK0gzbkl6ZDBHTERWeXg4UzAKLS0tIFFrREk3RnN4YTczTnoxZVZHZFQ3\nczlkd1A0VFNCSzFlT0t5ZG5xdWpoaHMKycCr9bQi7arZrREZWmbal6TYRxRj7Vmo\nBGAmgnS9JpMdojO2wbeXfA9NixznKc1SUgXYefsMIke29kUUM1Ij9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:23Z",
+		"mac": "ENC[AES256_GCM,data:7P6rZqkfnyHBRGJ6y61QMH5+fx/hTtOv0Qv0gBm3PF3vm0UH7oii5ztgx3QeImn1k44ctuA/RYMp0WTMHG6I3Uob/qC+XK5DTWPq+H2wx4qzb8iCR+63g2peqjVq8RV6TaXtJCNgLKf8K8OajMbBeLXZSeUmWtyxyGaDmIpPwTc=,iv:leBWe83Urp3vTMbBBNgihTO8DJ1RZ8+PfcdEsBAyEZY=,tag:Ix9vF10M77AiNF9h1oD8GA==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/sops/secrets/deneb-age.key/users/kurogeek b/sops/secrets/deneb-age.key/users/kurogeek
new file mode 120000
index 0000000..54331f5
--- /dev/null
+++ b/sops/secrets/deneb-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/adminPassword/groups/admins b/vars/per-machine/canopus/frappix/adminPassword/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/adminPassword/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/adminPassword/machines/canopus b/vars/per-machine/canopus/frappix/adminPassword/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/adminPassword/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/adminPassword/secret b/vars/per-machine/canopus/frappix/adminPassword/secret
new file mode 100644
index 0000000..1e41584
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/adminPassword/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:7zMc2/b905f+B2ah60F5NOt4XyGzQjv+3Hz+C6HajwskUQ==,iv:hZ0Hs8oeAtyADhAQp/aXNes1MTUWalOGukec++wiIgE=,tag:+IfzoawVTueM61u4LMo8XA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpL2JJL1lWMDZKN0RIYjda\nNDlwQWg2cHkrVUFCSkFId3NTWTRTeng0bWcwClFPdEZTa3hPQTF5OGI3OTUwdVhF\nd01SNzhqM0pJZFhGbjBSeDFoNlpnYnMKLS0tIHlLMHowYnY0TVBrN3Q3WXp5MU9a\nMjU1dlRuWFBjS1k0YWYxWFA0eU1pdHcKy9TlfX5eUMFb8dp9opEbVW5NmXZVwSz6\nBv5tBz5ajFYoP8SXGuXZfEipwt1WJxy47R1DRcL58MvoDmgrS5Dg8g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEOE5kajlHNUluQlhkVEpV\nZWNCZHR1RVpCZGYyeVlES1pMTUdLSFJ4MmhNCkZXRGtuZldkN3hTWlQwdGMxZExH\nWHRXRkZFOGdiWVdJb3UrU3NWQU1OekEKLS0tIG9jc3V1aHNURkhIT0ZmVHlLTXNR\nRWYzeTFWZlRFQ09TUzRPcWNlTXlDRWsK1B4FbqPrKvsEO6e3rbCXtKZo9C7+IjD9\nm/wKzExg50cByusgJN9Lklbg09cR2XcgdDSQex8okTP1EAnHQQMdew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBlcXdwdnFM\nL0NXeXYxRjFRYXFRc0lTUW9Dclg2RitjdElaUWVIUmcwQ2MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJYTQrMW5kOVk1ZFdrZVVEaERtTlpw\nNG5ITENIMDJmRG1kL05PNHBvUTFvCi0tLSB2Z3VEaFM1Q09iTnVhQzZkOEZETjZS\nNWJKM1RFNFlyVmtjeUc2cGRZRG9zCuiwSQ8VFvQOPBTh4OfSjItwl9dywjXy9kle\ncruTi/4U20O9bibhh+36oHIzx9iz9v9toZ49g8iSHuQVayynvUY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJGdlBiL2c5\nQWJBa1UwTVJZbVEyNm1nRHlmUWlTUXVsMVZVRFpFanRmR1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpEUmVDSEpwV0NwcDIydXgrQWxyS2kx\nejQ2SVhWRXY5cnM3MldRRXQ1VnFFCi0tLSBlRSthdXNKWmJDeEpMQjU2ZHpNNUNp\nRmdRWTlqOUNOOXYzV3M5WEZhM2ljCsi2HRDByb6b4PbV+zX6s0Cjf7IC43lwCnFA\ntc9nlnxwhSNB1/vytk8ny3TSyAxRFXkZiwBUsPtXW0GyEantIyg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZVVzZGUXN4\nWXQzaXY1WG1rQUllbmxZaWxrYWk5Qm1JNHNuWWxLbysxSHMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpId3Zkc2hlOWp1MTl6djRMYkJkZ1hX\nRnN4c2VkSkFwNjgvY0xHZUphSy80Ci0tLSBJakppc0NhQ25tK0JDY3RhMGFNNTh0\nQ2VwSi9lMmp1dVp2dGZQVm9zUUhFCg3D4DfPBxBzmgFPNslUYhbqQyHHRzljmRdH\n03idfAfZQkLZDpUf1IBey8uMbFCQ9Y6mLLkPTVrMtRn9xuECCXk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVENCQzlDWWdRZXdBZ2Yy\ndGxCNWE3aktyNVZBRzZLK3JPaElvTVZ5clZnCnNXaGY5aVBDSUdIclI4ZUNETVdZ\nbHVSeW1MRlhxZGJubkJoL2d3UHRhY1EKLS0tIHlDZ2pnM3N2aUFQeXNod0NkTE9z\nMWs3bE9rTXc0M2o5UHJvbXdnRUJLdVEK/Yjj00od7Sim6l60hV8dvGs5a1130ztH\ndCH+gjGAHwf2vo5yF9GO88hcUBhA12/WGQubTySyhM45FhHfZWxzmA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZU9OY2FHRUMvU3htTG9M\nT0FTbTBFM1J2ZWM2dUdLYkZQdS8yWEdZSlVnCnk0dkhJK0ErVHNiYU5Dand2K1lT\nbnNsREc5c1g1bnlnL1BzWWRuSTg0VUkKLS0tIHIraVpXaUdsR1Z5ODVqaHZMY2hT\nQ3Q4OEc1TDdrR1BHNnlzcXNZWUxlczAKCzQ22PTHEVaw6q+JOdY8FzYNFXBPlZ8f\nA7mqUqC7BPT8ltIENw9QQMC6a0I+uTLq2Goah61JMyO55vYjPVduZw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjV0t6dndrTXU2WTRneUQr\nOGJLVXFaUmpsVjJJY3NHZExpdmVmcGJYOWgwCm1PY2Z4U0hQU2UxS0x4WmVMVjB1\nWkdnaENEbGI0ZXhFRXZnTy9OWFQzQjgKLS0tIGRnUjFBcllJWVI0MmMzMDZQM1I5\nV3F1bjZYaXk0MGt3eHNzc3Q1UVB2QUkKahy7qWFthYhh0vNmUDSvRO4P8PHlVt7l\nuDbiykFIQ+OOno+3AuytSVLuMxanrLpxjjtJjO/rI4CJcN51z9/Rew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ZXFreEEvYnVHUXU3RnBQ\naUIwSkNOUkJmSzU5ekE5djNLejIybUN5SUdrCndlUjFPKzZkK3ZpdWd6RVRyVnhE\ncVgvK092Z3lNbUU0bkNwVnNyNjY3ZlUKLS0tIEZtUHdBdnBVYUZ1Z3RrSm5PVktJ\nZ3hFaVBMVUFiNmZFOWpqcjE4ZHlYRk0K8j2QFagnTPOKuFUOXWLFduMvoHJeYTq4\nUwuxtbfUYjuDAaXZGAyE9cSDpJYGCY7q4N/X8ruL4ciznOrdAooj5Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwa2RmYkFMVUZVa0dGcW1J\neXNZb0RWVHd1ODBEV0ducjJSbkpLS2lYRXpFCnZvSmgwZVNkZTZKOFN4RjVCcTBG\nR2xVZnVFRkxMWXpiTFRqUmtDMDk5NHMKLS0tIGx0S2hoUG1vMW56cVJaUVVmQUxG\na1Z3MHJKc29YRTcxRjB1Nm1oVVRjWDgKIrQ3DoY0M6OsLADxJrbm712a4WrWF7wr\n19HgcjMgJwG/6hVHyhsgZRFLuW88nTkljQ6SrpmdJEthhnm8L1f9bQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:53Z",
+		"mac": "ENC[AES256_GCM,data:aO0wNTM87UPaWOSBnfEDscQMXjHm6vjCIrwGuBtO1JBKeo7WSeQzebowA3dcaJliB2AnAT0O+XlfcO950yfrQvpX2yA95dXkMWDnU1on0DDD8fSEbytzWaomaVTCddMvlX/aa9J5JRYpt/efnbycQWysI8023PsG1Q/XUJi3TOI=,iv:gcKDzNf1az50qTXOhLhTv1JYzBHdxp/uZ81pSNQ4G4Q=,tag:c/o/TQyateX823x86lACwg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/frappix/adminPassword/users/kurogeek b/vars/per-machine/canopus/frappix/adminPassword/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/adminPassword/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/sslCertificate/value b/vars/per-machine/canopus/frappix/sslCertificate/value
new file mode 100644
index 0000000..433e492
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/sslCertificate/value
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vars/per-machine/canopus/frappix/sslCertificateKey/groups/admins b/vars/per-machine/canopus/frappix/sslCertificateKey/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/sslCertificateKey/machines/canopus b/vars/per-machine/canopus/frappix/sslCertificateKey/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/frappix/sslCertificateKey/secret b/vars/per-machine/canopus/frappix/sslCertificateKey/secret
new file mode 100644
index 0000000..53c784d
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Xz7B6iaJk7hcJMVeRquqYaTm2IoB1VwnbtAbJ2mnaqU=,tag:ztWKO40CTOR57ojFdM5KlA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmd0JXQnpUMlpwVEFSVWt5\nQzlHSlNZOGZ0TlJCd1F0L1B5QUFZOUY4MUVFCnF2Wm5BY0RzVGgzWnNIZlRHaWpK\naHBmWXVyNjZ4SmxrWFFLUDcrVmIvM1kKLS0tIFJsWm9SVUZwdytuRHdTWHVrU3Nr\nb1dVM0FBdW1qUVFYZUF3SHpacXlSYWMKp2rwpqnZ3rRRJxO0/z6E/32l3FwMMuJP\nERE+3NKl3IEOFxIWoffmGycLweFFpZ3B6ON2gHuPcvnN7ECCID1MMg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlT3hmd3F4cE1FL1FkTmFR\nQlhraUVJOE5uRVBqbDVDUXV6ZjNvV2RVamwwCktuOWdKM2JEU2RLbGNJV0hQcVdo\ndHBSL1Z5b1E2OW5xdWt3Y212eEJ5QTgKLS0tIE01a25OTTRtSVNPS2J4UTlCRmFK\nU2tEY1IvZ0pxSEIzWE1ZY3I4SEgzQ00KZA0pVv3P2STeZep5fZu5/6R0uujQv1Hg\nJoCQIFJtpKLJbdQoneTXV3WSZNmGnoLmmb9XiT5HVyRRwA7CGMWBIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIERvR21Rb2xy\nU3N5aDlPUkxzcnZGdzh6bC9kUFZvaFFST3grQUtLMFg0M1EgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp4QkZTNlhuT0tlaXhYRDNHM0Z1QnJH\nWWtyOWhlYmgrQjNzWDh0V0kxZFMwCi0tLSBSS0o1akJOZEc1dW1OZWt0UUttY3Uy\nQlBpSHBOclM3aE4yN2V3M2dVU3FnCmO45MQOS88WwiFyPdGgZ2H/GPQIZhKm9rix\nyWLc/LFRhyHWDcVGW0DPzN37AsRWfONAiOeU1DpjHEhnr9k1Cb0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZZSjFUbytL\nQVFHNlZtNzRKaEVnZEdWNitEZVEzVS92UnZXUm1OcVJ3aXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwppL3c3VlJpN3lSR0c2MWdITk5kT0Yr\nK2JRdHN6Yjh0MHJ1dE9NbzRIcmxBCi0tLSBBOUpZUjJyV2VvSExwSFpJdWNjL1N2\nVC9tY1R1K2gzUTdNTWhLWEl6S2xBCl8QKLTp6b9RnAH3scrdOeSF2Rups4LDQRiP\nS5JwA+Y1RObw6rbTwVQ4V1PjvJ4oBUWwmzNDTcVsKWFtOifSf5M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFQzSTVEQmor\ncGgzZGY5b3ZFcXQwNHZkem0vU21nRTJrbUFreUZLS1dZUVUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpOK1ovYzF4aWJ1SjJ1YlRzeHVVNE5r\nS1lERXFWRkxadmwwMGNldDNnbDJJCi0tLSA3UnR5bnZEbmtqZzV2OVFOeDBPNnUr\nWDhENWdTNDQ4ZmIxbWFwbFE5QTBnCiQ/VeCMAB3/u1EyImB5pwKMG8wIK1lyYEKC\nsCy9vdIksTr2LVkrNnPAdfM/3AH/FhOsWu3y7/YFvrBN271QLDk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBveXo0RXV5aEVwdTlZdXp0\na2RyY1lHN2pSMzRTbWZ4QVFmeDVwNnJoWkZnCkllMHdSMWZZT3V1S1FSVkh2anNB\nYXlyUU5lRmxCUDBEalAyN3pZek1uL2MKLS0tIGg2bWFUSTErZDRjeTRTY2xXV0c2\nZHNZZEE4RGM4WWc4Wi91alF5T2lTZ00KloONhTMm/ThrrEGsnDKGcLoin8m5/lxC\nKW98Orn6S5BnMEQt+t/SqNHlwXYXYnTfaPQpW87j3+BvLTh+/7ueiA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByeUJoc2Nvc0pjb2dwOWNE\nZ2xDNHVXQ3YyZ1NEOGZHWUZQLzhkZFFvamdFCnora1oxbzdaWVVPS2g4dGxCN0pa\namRnVzROUHJzZFhTS3dMcFpXSGxORGcKLS0tIEQ1V25LZTVrWDZMM0QwYTVIZGNh\nTnEwRit3ZDhHaXZ5UE1aMU1tcE1SVWMK9cO5+nVWMntuXc4WiWf6vwcwxOifI2gx\n9ZFjnzeUuFnT8rmSXS64SollosxzO+dfvSmb7MDq794IqEPywFXbmQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdkw0ODQ4ZWtDdXhhcTBV\nRS91TGZVN3lVTHJjcCtLYTdQdytadlpLeHc0CkpJbnp3RzgwMHc1WmpyQUFRN2ZY\nWkVJSnE3TjhGelkwL2l3b08zRnowUWsKLS0tIExRbU93VmVpc1JxK2t6cFNpVTFn\nYitzczMzTFhkNUY0c2luam1YWi9xMGcKwuiKcu21b6pPXycWX23IqWiFMsZqsLco\ngLtLNcKQrYpD6xg2X677/ZeigmsgCAtWg7BB8QcJIY3DJg9isK0h0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnQ3E5NzdqVDFlenJyTnl1\nWFNIVzRmVHZBUEZLd0F5R3YzdXZ1dSt1K1VzCkY4Q0lYWWF4Z2Rka3VPUGxpemJi\ndExodEdaVGtVUVBWOUxaMEROcVhPd0EKLS0tIDlaTUJKMCtUOGRJMmJFa1Npd0lB\nUEtOU25GMG5BRDZ1bFJtQ1NXSHBGbWcKeHD2eNFyo0eGdSDeEvdOhRlyaeOxzAie\nZUFzeg/rFdMlr7WvPAImYFa6/cUrIWlGwdqbTQ5Lqq3CHfyI0tNMhQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1c2xXRjBzeDlaTHVwbHFK\nTXBxdlgrT29nQjM3L0hQT3RJaXBtd2V5UUI4CkhWdGVYV1M5aW5nSU9yckpCNUdo\namtuNDV4dGtVM25DY2FlMWFUM1Q0dE0KLS0tIEZOT0N4QkJPTmZZUCtyME9nZVB3\ncHRHSklOWG1TaDBSRWl4dWkvcEhyR3MKDoyxfCqSAQijgR5rMgVwe2M5DROqcIDW\nao8x510TSxRSZO39tx2k28hRk140d5iwEC7WUbSugCSH8BPOxQZGbA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:54Z",
+		"mac": "ENC[AES256_GCM,data:/mQOXUuQFCfCueBMdd6wmjX2y0jdRwtphVNd8UD4Bja4dRuUMVo6ma0LthMcmbJkmCGDGvXEwIRx0I+QD2EwsWxzc14rJawNopqpfjX7pK++kN5wtik+VbKuY5OiFkZCzfT48ciwSx4QgPMYoSZm/1pxJ28Zsj7+GDNWhSu48lc=,iv:2hSkrdqWDQ6NNOA7zJV8+K+jVI5BAKj6bMllXaxjrl0=,tag:7S3iP3QLzY5jxb5ff9+FCg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/frappix/sslCertificateKey/users/kurogeek b/vars/per-machine/canopus/frappix/sslCertificateKey/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslCert/groups/admins b/vars/per-machine/canopus/nginx/sslCert/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslCert/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslCert/machines/canopus b/vars/per-machine/canopus/nginx/sslCert/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslCert/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslCert/secret b/vars/per-machine/canopus/nginx/sslCert/secret
new file mode 100644
index 0000000..5dbd899
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslCert/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:34FKaiZrhQG8osAKEAslEm5uDUCqrmAs+mSXdiESDrnkuRKPG3L0+fEcgtCpOLWn9rQHIMw7wHpe9lZ3noDrbdd3TFIsgoe25q/41NpskNmtOzBAbIZDymjivqSTJtKOmNKgfuB2DRc68Jyr3KreC1UCbLQ0AkHCa+7FoKVAtxZqdrMNUAW7rhDab2NuQRhxhGg6POv3vXUHoPAdHWsp6Qat37KSq6u7Ys0wWnALmMxxZFHay+/6G3W94jmBjXWOqmehG7t/jQNkXx0qJ7azCd2iYAQTo1F4DCWcaHLTEka2zW/GztHV4p6FpZwMEAvo+2EPJwWh5S+sSzmsd6lyEyNgux9eKzo52OdhAiV8NremISInpXr260VPTdeHWqlkz3UfvvsZMUzwPaZjZ9H11JCJdoxp0WO1M5rBdRZSDeXnlQISK6JO1Omht8z0F4OG5tVRN8Zwv7vzyfoU1gBFVi+X5mT7JndsalY+PlhmEDljYnmXAwSG7UFftJ6oVOgYQmAfwT3hsVW0KAQQxKArD9ztrejJxhTgtUxgZItHGlSCUoQVM7yueHbTOIifumkpWM7qh5QXIRYvrhXxGKcJ2SdMDO3MqgJ24fvZxfiOZVwivadtKGYrUQq890MlMAyXqLTVymBYL/eCCh/esSZYCKXwsvOFKY/UneGe5AfZ50HZaMTHzPFRwkt6eJ82PuP4jw8dkrCv68AH0k9BzKOtZLr7HhQGUpzpr73BBkOvhAeQgr8A+TxvPgnmXIjF1e5kgLN88f0b0x2W3JaQTjK/Ud49VSOLKznhooRJS35HdVwCNIPtMoTYua3I4ioEdEjstuim+2+1/WVIcPEGp+dTEoXVZ9FHUeKochM2J7HGvOzGofFz8JAkbU+m1ZK3VGZfUy6b8JDviMqk7TNuN+BBynmwK2Grqr7enrsUXiFEOwmjuhEKhNB4kM9QrUapT55IMDQihHejWXaLVHPH1JuQjkPTEB0hTxbm65whwKnZD7hlEYvtOA9Gi+PaQnCHBUlmMFlBQfqdvL1kpvcW+F5Y+1+B8R6JWK8Wk+APJMI9RkpOfhCozlV+Coy/akr0P7KlIUBfzJFZB6ckLalFGTAl/g34lK3qNhTuUHzquX9Jdjl4gYMnSLSAud/MrT7C388am0FGyWMl28WQmGZQIoW7bC8Y4mbilCy1Dgp9RfYHr7dPKeAQfBuaYuF8i3Eu46whyqeSXlTLP5wkRVhjc2eBW6HVPbX2KezBd+kfZuXp3MMu2BDxkrOc6DXoxz5bpvGigDl8+a/iI1iyJJioePiiveB4f8MMNmxzHSrI88ETDIAbtRxi7tiFlekxWLmp0nqI5V93AC2aXhklySml6ONKJKg3NRatHbl+VIzNn8ZChowhEATbrlA8Dawv6m8vVVt6HwLoqHUKEk0hodb10fjbeu60TQAYAchDTJFCspxXmh2foSO1e/Kv/8Q5RTNKOz2M46jGsTXS27TqG3Y=,iv:0xxq4lSS5/hjZc4ZzStr80+dU/KbhqfALgUFPul/Vxo=,tag:IMDdOFSZP05d459QHjxdBA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPM2hUdEhObkE0WHF6MWkz\nbTg4NDFFUkZPODFtbDVTTGpzSk9ERHlCVFdBCndXKzE2TURyRTZ0SVRvQ01ZWGpI\nUGl6cjRZU1FlaVBtWmJMR0RBc2V6MjAKLS0tIHI2b1BOY29wT21aSEFyUFhMUXBu\nUWx6Q05QZ2RsTmxiMW54bjRtUnVBN28KVbFOvg0PIJRr0K6mxFOZtPheb2nedDjk\nY7YDuQg1ktL1SrsAcsf/WjksVs7pgfIKU9zTJ4KaIUUfQlFvk6rFIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb0NGcGdBQ1JPV1FHSHJV\nYXB5K0lRVFk1UDFHeFhqVGRUN3FXWHAyV3g0ClFyU3RFZHRtVmVyTnd4emRENUxQ\nYlhlTVdVbml5b0pWMUJNQkJkVVYrL3cKLS0tIFpsb0ptRG02RnFBQjI1aGtscURF\nM0p2alYrNWZEMW8rcm5rRUhrMU11Qm8KstkMT/fNgLFIJ2Rsqa2JGuOjAq3cqlpW\n0PEdl4Za3z2XW6wtMzh2EVPl4B9IY2+nI/bMtdl6qqp0Lhr48UtMnQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHM1RUpqSjhs\nQ0tFRW5YWDFXOStCcE1uajZoRVh2cnk5cDhxR1BBOUYzV0UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpaZVNuYUR3ZFN1MzN3Z3h3ajZ5MkQv\nSVUvK3hjaksyWE5EUlg5d1pONFprCi0tLSAwMTdjWlpkZnNGU1Y3Vm11YTBqcnRP\nL3dNMmd1VER2UC9tRTJwb3ZNSVYwCuN/xKRnS87nCrFKUqNL2lraZ7xnr0uWELdE\nHfZQgDP43Pa35uUy2KEACz9ecpep24PVZccYvwtYReH2yztmxtw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdpVkY5aEtu\nYm1oeXJjc0NwSE15REhLYmdwdTFlRldTWHJhemU4aURlSGcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpRZFFvZDR1bWQ3aXJtWkZISEVnM0Fy\nTHN1UE1pRXVyM3c5ZGJpaWZtdE5rCi0tLSBnSEhjZXowMjdlakJ4VnJRVXNwMUl4\nYmhrUDNEaCtVSVozRnNVay9JdGhnCqX8inhonBoHqGxhA45M7NP9R6G90WM2/6cJ\nqYOlZTnJ4tNgXuoA5hBi+rFJxZJd3f+2eTjwtwtZVGaEFD36Px4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNCL3BURnds\nbWpUT1Rpa2VJMER3N1J5bldDYkdKaCtrYW9aK3ovczJsRmcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpUUnJ0ZEdMQ0Y0TGdnN2hlMlR1b05Z\nNXEyamtTdDFkY1V3dDZGTXFqOEh3Ci0tLSA4RkIyeUFYeWFObU5zODI1M01iRHg1\nZk5BK0Jibmg5TlJyamgxTERsQU9BChuXDiOkKZsV+GGaB5L8Ch00IVpwl1dFsphV\ns13ol9oSzVe/lvOF7sbS6xy8EDpSonfKlFrsiZVIyezRSvu/PVA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0M2Y4SFZWRldncG9UTjVN\nb2J6UGkxQldmTDNRVnVIcWNTL0U5bHBzQUE4CmdRdDRsdGFTUktPWFpFWm5nK1Er\nVHRJcENRNjVMOGhjWE1ra3RkaDlDNFEKLS0tIEdZMVk3bUZyamo1THBMdDNPV3lr\nZ1BVOXBGV25UZEpDTGV1OTB1bHN6QXMKD08Mrb+VpsDsXQsj66BWsw706o0tPpmG\nlXwmvSeU6j41OiQSkCGcOwDr2vVF7HhLb4oVSa611uuy9058ewmgtQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycVlycmo0MkJVaEpUMi8v\nSFFTd2RxclYySnI1RFEvSEhFbUhnUHpPdjBzCnVmdUVSK3gwaGVxTjFpVXlUSU1x\ncURxOFNielFYVFZnRTI4UTN5NjRmV1EKLS0tIHZmNGtWcWx3dWVBVThjbUxyR29q\nelRkQVVJNEdMVERJbWgyRGI0eTI1ZDgKATGOi2pDzTUeAOjo8BXF/0eX/gQqavcI\n/q6o9fx03/LEi8mA5/TUDPBF6s2t2k9f4TuajlQreiKO5pK5bqlUFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6eDFvVnRJU3NldStUZVI3\nZVdPS1JZTXU4YWFpZDBOY0RZWndJWDFrS0hZCnFPTWVJQXc4anRHTlBubm5JaWdJ\nVnpqNDJEOFFCdVRmOVlHSExGWGxPZmsKLS0tIHIwWWVWT1hsT1N2dnMyYmwwbnZW\nWkJRU3NEOW5DcDF3V0RVaGxYZVFFMmsKSGEgl6RJ1OkkcsqyRuOI+pIdW6+uW+LL\nk+IpXDLsb4hHLU+cYB4hAhr5Cdypmp1JCZh+AXQYJ1AUKEtaOnPo9Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIVkZseG5sY3loOU1MZ3kx\naDR0UUFPM2RNWWZVbmhLSndwVVc1OG5HU1VZCng5VTZqZGwrVFM2RmZCV0xYckNZ\nc21kYW8yUUF0VURzYzlSTVpBZldSL2sKLS0tIHQ3Wk54RXN6bHZZcDR4TWdDQklC\nSVdDUkgyOHBlZHIxTitKczF2NEJRQXMKoJckdPVVc+sVHYUsw9xzG0nNtcNJLwAj\nggrgEN2wqz7AzT7RVRSSAvVHzZTsOROxI3iqcEpumNv7jBvajadp6w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsS002ZStzYUcvVS9NWVJS\nWnJrNFRENlNkU2ZJZHFST2VoQ1NZKzY2ZjJzClVJampRajZ3MlNFbEwraS81NHUy\nQVRZNUxTaE5oTDEzQ1YxOHJxaElEeHcKLS0tIGVaMThJMVBVZUg1Rk1nN1RycEZE\nRWZyb3k0NHRvVE9US0tCMGhXM0s0clkK2JePeaWCzK83fczXVVT/2WrFBWnIBKrq\nfaemuo6EO8rtqVEFl0ffclsEZr/spwkZl/Ra4BOEQkEfDJ/VFYG4YQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:55Z",
+		"mac": "ENC[AES256_GCM,data:d6HO2RKu1P4yUcxB9hgknrePgmHzytteyn9LcaBP9jOKbEqL1KwBduycEE18jBZm9cExoKy16dP2UwgkWfBXNYw91SUclxYTl6A6vXQaT4cnzFbcoyjMfrckE8WzidRwuhSxsq8VMKy/+5dfLCol5XrbWxhQATHWlC7Smy0WY8E=,iv:VZsT7X+qrOMxvhvygwszqKjJ0MlG74CmU/G7dOch8Rc=,tag:NNTdFpj2iO7va4kYb9xFVQ==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/nginx/sslCert/users/kurogeek b/vars/per-machine/canopus/nginx/sslCert/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslCert/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslKey/groups/admins b/vars/per-machine/canopus/nginx/sslKey/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslKey/machines/canopus b/vars/per-machine/canopus/nginx/sslKey/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslKey/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/nginx/sslKey/secret b/vars/per-machine/canopus/nginx/sslKey/secret
new file mode 100644
index 0000000..1ccb97c
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:hlSybXCHKTjcrjJkfFp4fMgb+foJ91MfQhDA3CWZtUU=,tag:VEPuRHFv7+LpsqGxP4hlyw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WEFiNDg1ZFg3SUtDUFNj\naUVCN3k5U1R4YlZKM0M4MjViZGdaQjFOeng4CmVNZUJnNytpUjU5T2NMZG5qMkJP\nSWNuZ3JwUmpNOE5GSnNuOUZvR0EycDgKLS0tIFIwdy9wMkJvT0drTFRCZlgvaXVo\ndVlCcytsVnQvRThJSGdsSkpWbXlONk0K/ZmZrEHcdlZhFQF/USYZD0zFX6YduC0F\nBpReefb5X7uODjGZYPLnMbRlPCo6eW+b8ivHkOIzg9HMOvE7BvfGWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQc09pR2JobCsvSHhrbkgw\ndVlPZkVLM2UrUmQ5Y1IrZll2Z1ByRlNrekhjCjVwdysraXVoQmVoRWxPNEt3a1ZW\nRURVNGxmbTc0b3RGUjFDYXJ2WGwzRlEKLS0tIHJ2ZmFFMXNMM0U4YlA5NG1WSVFH\ndmp1UDBJMVhSeE5YekFWNi9NY085eGsKm749oQWPu79yJI9w9qyc5BNlWHQaAB3G\nQdO91qNZNyHLfgmWmTQCW/OWUF8oMzDlKtwimH8e5lzZ1Cbjk/EMug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVCT2Jnb2NL\nMjA0WGs4QkcyRVlQNmVuNGZSRW15dHQvVVA2K3k5QW5XbGcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1NzhSUFIxMW9nais3alQ0WVo3R0s4\nZXF1eHBWVjk3ZURpWnkvcTFBNTZRCi0tLSBkOUtjZ2Jnd3MyeXdJbjlUZkw4d3k5\neW5zRXB1MjJnSC80SmUrMkZUOUhVCovaJEhkFVz5yLL1oh5OruWWkdjAOrtX16BK\nSYTcsdjVYF8ci2UJKL6Ej7wqNpZF6B1dShYVGEdMa1eK8Nbujyg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJVdmpEcDVK\nUWJacmZHZUdObUhIYUZRUE5Gekh5RCtjbTNCaXNFdlNzWEUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpOMlZZQ0RTVTlaejhHYk41ZjduV01V\ndmEyK3grYW5helA0ODdqT01ZeGZBCi0tLSB3RHgvOFd5TksvMkkrMHlBRm9iVzJQ\nTno4ai9MaFVPUDFNNkpxT3piMjU0CnqrSaiQ2q0WkUF0QVIvFekkKwELccaEK0v0\nSVU05FyBHnM3HQR5yFzQVdGq6N0MMVOVaV5Fbz2obBOJ4X+UAkM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1LSVdKeFla\nbHR6d0JWN0pyQktNRGN4MTAvUGViN1h4bWtzWXZPV1JVZ2MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwplbUlvUjBJWkdqK3oxWm1qTzQ5eUhV\nNlYyOUVrdElCK3h1UjhoV1EyNE1rCi0tLSBrRS9EdXJPWk85QjFpZEpYN1JtR1RR\nMUd6Sy9JdkozbFBRNENLbEJoYnBVCiAX2QuPTUFVi0kbxhNV4D8yMINWFSK++Bu7\nGtO9T9pZOGYMXSatQcgpfi6F14+xTd5U3mwEdkOIXkTmhlsZZlc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydVpzNnBXZUVMVExod2dz\nckNUcEJVZUxCeHNndzB1SU1KbVE2MGsvNlhNClprNnJYQ0pncEo1UzFNMys3eG5Y\nZE9SakNvR1dyNk0xaXhibkxSeVRjNzgKLS0tIFpYeTNjNEgrMS9LT3krVktKa3Yr\nTzduMCtHR0RxMW5EY0p0UmIyV2tZejgKo984VtpmniRtyBm1+My9fsDOc+e0bi0s\n4i+p8KB4DTYfyvCaJcBI6hkYDMOlDo7TcuxGtRSbTdhT8V3qQJaZ9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUjQzTlUzSDIwaHBxNU9w\nNUFXYk5LVGJRQllWclhRRHUvNUpHVk1NSWc0Cm1tcExuNDFtYjJrdlFDdkFpWHE4\neVhHV050NDVTVlR1VTROcjh6UGpvNUkKLS0tIG1LZmpTYmQ5MytXa0o5VGF4YzBJ\nQVBhOFhSc2NiL1lWd052L1dTUXZMUHMKMCTVNP+E12M2XMH0O9921+NQkwAKuT33\nj5m3tWiPIrtsAzzsskFxUzwnAReBvWFbdNs38AAupOXZ/TGuiBfRug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3KzlxNkRuU1JNL3ZqTjRl\nSk5JVjVmL3ZPRnZaUHMyK1NjOWxrWnB3N1VBCm5uNjh5OXNLOVh1VCttNHFaOHNG\nWHVsVXhmZnBSSDgxSlNRZ3dIdTAxMzAKLS0tIDdvdW1OMjJ5aDVXQ2g0NldoZlFG\ndVFKdTlLQmxzRjZhWS81a2FUeTZCblUKUm+lhCfYawHEgkSf9K7zT/WIkiRG+1Kf\n1F8BHVNdPhQjIDPS+5p1OQIC5k1QpaAAlLtO2vnKsQpmusOcRXgDSw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsS1FBaEFNZGNkRW5oazcr\nUEZQQ2dtYWhDbm9HdHNrSGwwRko3UStLN0FzCkZIRGRpR3Q4L2JlV0JiRWJGSVNi\nTkhkMWNnMGFGSk52ZzBHWmJvZ3drSkUKLS0tIEpXb09MM3NtTG4rOFdBcThGTUV3\nQUpYM2M0a0luOVdTeHdGTU9LQit1ZE0KGFVtSbgA4TQcYLbeZWW7/AW3bjOfoT4X\nxoMz7BltWwW4qKpJQ873/nV81tRhhbLHMaifZ0cJiIidfoEs8DLnuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZWc2dmFuQXFaUFBYSmp4\nNDhSOEVhSVVGWEhLeGtJVlZlZVBpUm1oTFI4Cnh6aTBDcWxhODdUeVFwU21kb3FK\nMDdUenZmaE9JeW51bVZaUEY0L1hqSG8KLS0tIHlFZlRTM1Z2bGRXUXVUdmdURm9T\nUnJpTVh5anZCVkNqeDkvUXllcjRCTGMKM4stPw+aVUl/yvLp26SiKp129ynMzZ2/\nD5a/vJt6vu0Zmag1Vk6JSPOl2mWuD/ZDSJIU4vqRCes4rmwu/jw7cw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:56Z",
+		"mac": "ENC[AES256_GCM,data:CoovmIf4BZMHN1eEYW3DOkjFS50YvZgKPQnm4XZQW37cJOaxcq9N7VQVJSC85DpODUeFZSMznoLdiXd0d4ZKb6mHtkQJ1c88MXbrZ3tOcro9zhCeSvzaRcVVUoMgJgtgp3mT8i6An3yDKVVBHGEy+OspeuKQy8TCl9DK6aKwhmE=,iv:+UOtMFbFZdhehZf0pPWtUoHiWY1jCF1JyNpp3hmhTbQ=,tag:7cwfcrsqZACKTGcis/2r3g==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/nginx/sslKey/users/kurogeek b/vars/per-machine/canopus/nginx/sslKey/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/nginx/sslKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/openssh/ssh.id_ed25519.pub/value b/vars/per-machine/canopus/openssh/ssh.id_ed25519.pub/value
new file mode 100644
index 0000000..2af4b5b
--- /dev/null
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdhHr44poem4w1dRksCHczPxHuxT7WX16i5VV/j1RP8 
diff --git a/vars/per-machine/canopus/openssh/ssh.id_ed25519/groups/admins b/vars/per-machine/canopus/openssh/ssh.id_ed25519/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/openssh/ssh.id_ed25519/machines/canopus b/vars/per-machine/canopus/openssh/ssh.id_ed25519/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/openssh/ssh.id_ed25519/secret b/vars/per-machine/canopus/openssh/ssh.id_ed25519/secret
new file mode 100644
index 0000000..bb422f6
--- /dev/null
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:F/oDah0lM82BB0v37YTlonCZltyOSfSNxaImWzR8COA=,tag:J/01PkTX1VJVCck/rGg5mg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEbUlJckV4MEVYVVg2Y0xB\nYllrcDlmRDcrOWdwWFQ4Mlo4N2QrWU1RaXlzClk2b3E2YVFRS2U5N3N4UHNNc2pL\nWUZyQWVTdENtdzV6byt6ZUpSbk5VVjgKLS0tIGxhcjBjRDFhWFpwM1JLcEZuQUNJ\nMDBoUjZuT0hWZzFsODJQZHlPd3UwbE0K8/ZlMFejwBGbwdP2rrEih+NbuYR4rjIp\nBIQ6VnYS6KKBNFb4Ay5SDeS1zJeC1XG9CWqGHUR6bvc5L5B91Q4VJQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyam5rVzFUVG4vYmJ6Y0N1\nM3ozRU1mb20vS1JCSlptbHpmdmpVZmxyRDBvCnZDR1lyMFRkM2hFQ1QxbTdhZlZ2\nR2IwbVFJZVpETEl2cWFmYTU2TGpRbzAKLS0tIEZtTVQxRHFHVkI0TXFOQmRGaWt5\nYjRVOWE5MVQvTE5xWGVvNEdsc2dESDgKeQfuN+ZAVb7v2KbXY7/nGjRafhIr1m/Q\n9x3/7ZKqthxO18F68LqZ/wmfjmBYLuxdMauJ0s24kMjHL9MiwJGT+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpDeGo3cG5D\nWVdxTDY3WGtXK1NJOEZtcjZ0T2hpbEtobEI1K25oVFdEVzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoMmptb2ZSdGVLYm1WcmM5cnNFcVdk\nMkxBSFVwUmRISmRVUFRwcGRoOWZNCi0tLSB6MEFmUWJPV3ZjZ2JPc1hGRG0xdVZ4\nUG5BV2RMTm9aM1dxTThhUkswU1NRCjp8iHOUG1EQ5lMCmajsAc5iO8DHM9CgyDWh\nLCW8s/QBeEZrIQ8qVcJWbEwS3IYqSYQsGZ77lVtrwdfwUoke3tg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIElYR2NEV2xn\nN0U5TUlOVHdlTGtlV2dTaVcrREEvcmNMaE9QcW5NcllnZ3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo5emlRa3RqVVBqNzJhOUM0cklmTFB0\nZWphRlJUQTFzSWNrUTFmTGZKMXYwCi0tLSB3b3QyM3ZZeU9USGFYdU9XNW1QT2lp\nWEswTlZLdzZqVVBoMHBZV1lTMzVVCtQxp++6hGsRdOnTraZTL839JPO/ng6pwPdF\ndBz3u+pV74NBInMZxrW+YlAtZj2YRFVpD11d47heF7gUGPDY2yw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9QbGY4bWZu\nRGZQbzAvYm5waVh5Y2Z0N013UDlzVHRhb3hqQ2pXMGxQaFUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwptMVhvWEkxa1VpWVNoNHEzTmdFVGM0\nM1dyKytQVTRiT0drUmlIcjM5ZDhNCi0tLSAwSm9URThxcEZDTExiNFZFOW5YQ3Z0\nYWJZNzB3N0F6NkNFamxJUTBLanVBCvsGICy7BvAIWWHjfIGgDXYhIY/DS8fnK6xK\nbZ4OjpOdnMcRlu3fBTcx7Jo0B5+7A+V6A3OAtJy11HoG7jJIg+M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MWVjRVk0c21IMkdEb3Vn\ncWNMSnYrYWFZcmFxNlFpQ2h5bVNpb2gwaW13CmtsV0QveGVNZVBtL25BSUVKZlky\nV1cwcFlaczJ6NTVMaFJJNVZpdnROZzgKLS0tIGRRSGxqYVNoSFU1SFFTL3NEdGpE\nSnJMTEZqcVkyZ0NNYUxOSWR1NllrajAKIllNOtGvkVpkaBtB0tAiMfU26SVix5/V\nSL/5WGcey9eYLi/eXQ9snN29EDwX3Kn66yfCn5IptZvEkPMAiXD0zw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMSWZtbkI2ZE5zUVRzNjFw\nZVFYYkxYOWQ1NzZPTUxLUlZncWl0c1pmOW4wCjdZQi9NVFVLRUxuanRDYllXTWpy\nUWhvTHBzTUZWeTcraXRUUW16V1d2OEkKLS0tIEY4UG9ibTRuSXJaQTJMcHR3Y01a\nTHFPUVhyN1h6QU1pOTZ3cVJBTVlVZWsKs8ZeHu0Gn5r/nh5xU0IX0AYv4osri7zV\nC+DmMYUIlOjDgrRsivMGIQD5dQoSY1Kb9jRMQXokTxrNkkTVAF9OhA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUnVpa3VrWXoxMDFOYjFL\nSWZsSGsvdmNUT0tzbDlEbkFaWjdOTFA2TldnCkM5eENXNWlyNm1icFhVUWk5ZXB6\nVnRDa0V2aVBGQ1NFTEUvTWxGbTB6Y0UKLS0tIFhUdDZxbmd1RDlmeU1wYzB3Ly8z\nSDBPUWdqYjlZZE95SzAvb2ZZSVBFUUkK1Ki3Qlt3UByZjCGqWk8h+fg1Mp6pgSUt\nVTYR1pdz9dEg9tG1JZlhw0SEbTiSpZIkaGFjF9osrDXhpy9LiKejuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WGE4Nys5K2NXZGFRMDZG\nSmJVb2pJc1JUK0YxcWFFcUI1RGMzS3h5NWtzCjVldmh3NVBqRUsxOHZib1lRWFlX\nbkY5Zk02OENQSHM0TnFzM043Y2hOS2sKLS0tIHlia3M4SDU5QjB3Nk5SOFAzWmdi\nQTc2RS8weGlHN3MzZHlINlZJMS9ZZlEKl1VgUuLwRt7VDSdUqRivW3y+w5mxTQMy\nJ3FKGN3/2sfHk0MDFIYcUDQRoKLMRqXRm5Qly1Bx7YMpodTXKAXQtw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRVJESVB2SkxEWVNPWDFL\nbTFIcGFDTXA1RlhPNnF6Ny9Kdlc0SXZzRHc4CkY4c0U1ZkpvRis0ZDdSSHZBMGlP\nNXUwNlltYWhCZDdaNnlwTnoyekZYSm8KLS0tIGVaYmpMK3JRdlNOaXFqNHNPTDRo\naC9JbElaNWtHcEdjZGlCVHpWMTZWS0kKbMeg8ssoK+UvPqbVY5gyzHIiNmx3Zt28\ne7K99Ms2CnSjpA0xmrF6eExcfn8FOdIzShVWVaj+pfdytTdRdUSiyA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:58Z",
+		"mac": "ENC[AES256_GCM,data:hBo+uXZEJnLNaWnMN4fcU/xqFwkaNszcchlHAeS5zSH57gYoaVmu5xKUIic9VaOu2o/P7X/Kkr7DsMjhdfzggfXuzJri88Dhg9iPsvvyFT0VdnqBd+pBnGdqpLktKfwq0cxFbjd0N6s/VpxJ/la14AjwrSUClhbxjQaFNWSh8+I=,iv:oyJxBpLMO/uzFGa4QTlEuPpV4dYMy7rvM1380wRiM0U=,tag:ebQA723VprVxeDo/0cgC+Q==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/openssh/ssh.id_ed25519/users/kurogeek b/vars/per-machine/canopus/openssh/ssh.id_ed25519/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/root-password/password-hash/groups/admins b/vars/per-machine/canopus/root-password/password-hash/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/root-password/password-hash/machines/canopus b/vars/per-machine/canopus/root-password/password-hash/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password-hash/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/root-password/password-hash/secret b/vars/per-machine/canopus/root-password/password-hash/secret
new file mode 100644
index 0000000..ff31059
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:Jsw4HB48SKSEGA57faD0c3uBp8urEuBJUTDeue6hmUg1dENuxPQhDtRbNo/1ylO2mOXRnhl+HBTfMiH4yCmqr0EjZDRj9Q82JRxrQayxQRudL/T4jAljgbpCvkFEV38o+p8DH2rgG3dSzw==,iv:hnIV5eft1VTjR/DarkJGzyPZL2Hg5t0sl1CP2VlUASc=,tag:gmwPdJKB8nsqnChFOH1ujA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJR0NrTkY2ZTJtd1hIYmN4\nNzJ0UGNNSEV3RUhyek16ZWVFWVpWbEFRUENjCkltb3NhZFV4N2NiOWk1WUlvZWpl\nRjloSExPT0RTWlhQUUk0MTJaSEoyeGsKLS0tIFo4MDZEcFZ5aDM5YWdRRFAzZk8v\ndXNGVSsrRVpxNUJCNkVNUzRPRDZld28KS0Xdq6ijAnC6FhrsEx5O1rkyU0aVahxi\n+M0y9jL4a4ZH7kHukBjfiqYcX7/rN2IqmIoGDAx/zCqgD5F2Xucdfg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUmpBMmR5cmdOMnBtbVJI\nVWVPNlhBR0xUTW91c3RsRlhQRDZrZUM2ZEJBCmZNNFFuWmljRWZ3eHhQR0RHdnoy\nb2wvSHVvQ1hHTDRwQnZma2llK0FPWTAKLS0tIFVkTzY1Y3hrTW9zV2RERXJIN3lt\nc2QrVHgvOFhJdXF6NzNTTTBHbVBuSnMK5aZLlIlYmOJ0tk5eclLDRWqIm4V5IfdK\nug82c+23aJkRftvW6j9E3PWxwc14sRXXoAjwrhaDHh6q1wj1OkkBag==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFVTbjJreVN6\nVTVHcER0QlU1a1BxcHJUUEhHUjhvOHZqcldkVExRZ3kzMmcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpwWXdhQXBteE5kSmlxSnN4QWhteTFq\naHVXdXBlbzR6L3BKYjN1a2NwSVpzCi0tLSBOcHZVTVpmbi9xbU1BMSs1V3hWUExK\ndkNZZXgrQkxNTjVQTysya3BBaWZrCv6Jlde/ktPdp+sqEj/c2BLyYUCsm9JLZ8K3\ndpTHFb8jJguir1YatlhnJ3mbi9y7jN7A5HGcdikf09M3RmJDmE0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGhtZXdKTmhq\nbndXRDRFV1FnZXlpTFlrRGFzejhXcjVsMlRMWVRHbGhIMjQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpJUkQ5YWRvcm9FNDYvcm5aNG1HRTNq\nTC9UQUZ6Vm5aM3pkVXRVY1RtRXZBCi0tLSAyQVVCN3VjeFZpeTRZUE0xVlR3eml6\nQlFicnRnMUZGMWtzS1lhTWk1RG9rCgFDtFcJN0qf+r52234OBP2lRtr33/ZyaCgc\nVlSKAYHlicG/qk3UCSmagFI79DWz6WVheZR/HP5QVZQWAOE2xzU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdjYlh5cVNQ\nblJldDZQcU1iSUVUZDBwR083aHo4K1huYzlXRkQ2aXoxaGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpOVFFWaUJMT0hkS1BOWnp6Znh0UVJJ\nSlN2VGxEQ2tNQzBvUnozcWZKbVYwCi0tLSBxS3VJSExBa2RxWGIwQnhScXk1VGpi\nTWFLNVc0dkhaQW5SN1NxcVp0V09FCpu+ygBK44vHiFDeQqaOEHyADO/Bc2kdSSii\nUbg6T4cRguc1Oq/XaS8E9sXDnbJiyLUWr96nOmqQ+Th/i5ZP1K8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVV3F0SDJ6YzZ3Z1VmK2Ns\naWU4NDN5T0UyeGE1aVdUbU4vaFQ0K3c0NHhzCldxeXIrMmtjd2w2RW9DVlVURDNN\nMnB1RXNwQmthUW1EYVlPMFV4N3BSckEKLS0tIHdmd2VMWVZha3BrZTBDYmlGcStH\nSXFLTnRHVzJ0MDJNS1pZMnNqeHRVQkUKg3BSXYzb8HD042+DpHCtWgjGv4B+stFR\n2AmEO9c6mTcRnzgdGasgQkRM6TgeM10IatIdAc0b37yGiltDL637jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzb0xZczhMNzBZN1dOelgz\nY0d2VVZ3Y01pckZBTTJ1UDdGb0svWEtlTnprCnBtY1hKSFdXckZ0ZWNVbmN0ZWZv\nQUNSTFJ0VW5BODhYcE5wTDhBM0FhOUUKLS0tIC9qMS93UGdJK0tyTHhSQkthb1pV\nVUpHQ3NyVVp4L1puSjMzcXZVcHNXa2cKFi0sQjn6tNDOH18x3S0sp49bpbPCopaN\nGRIi79J6AdWa7pPK5TIAc7CaCyKFt6r79EviynCNv28mTflZaGua6A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5akdJYmk5cVZ0UjJxZHl1\nOURkbXdMcDFrU1pTUEZmK1ZZVm9vS29KV2dFCjF4ZkhBcHlBbTVreUNrNFpLTThs\nMEZWaEhJWlhIOE16YktWNi93ek9jRUUKLS0tIGdIZk9aSWdrTHZnTGlQOXVLRkNZ\nSnRESnVsaVBPRVBZUGVqRFpFVVRaWkUKwLM7RVTqTyDQfqrB7Zx2PgLyhHLKvuGV\nvs+8NGTsyjpYy9CvF2MrTPmBMmYKW0skNyTgkze+Mp3Cj/m7F9tf1Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSzZrdUhTdjZ4Q284cVZW\nUm5EWko0SFZUSjBJYWc2bUlCS3lDcnpBZkFNCkRWTjIrK2liaUlJbFVxS0JIMCs4\nMkhXSHM4RnpNWlNoN3lKTlRmeGpvT2MKLS0tIFhKUEEzQmlDOEcvNWZLUDIybm1S\nYXpGa0dJbjdjZXU5Tm1PVTczTmdVZmcK3iy72bzcSJ+zoFUDad/DFrAdnTS6MuNy\nBZZZc3pS/krW5+730U0yR8HppZ/wXW1H/Hl2XrsFCMdu4KNvRsnScw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3NWE3MFdYeGxxOTJCR3Jr\nZFZQZ0sxRnc3eVdUbFhwYU5hYXFEZXlOaTMwCnhYRlV6N0FDTUF4WVdhZ1pubzJz\namFjNTVZS2pnbFdML2ZEeDVySlFGdFEKLS0tIG5FaXlHdk1INTlCeEFVTkQyS1pD\nL1RzTFZySGlvdUovSXJseE9KSFgycXMKFzIvlL3UcUGZEtU+YArgPuGjf14KN29K\n/iZ4Xpx8orivacOJwKV4qPlibWuQe6sSWa+h0NJ1F0rI5OwFGLP63g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:51:00Z",
+		"mac": "ENC[AES256_GCM,data:LcvzS8stfq1AtD0LcYcj10wO5/q/XlfANKtbQxaQlGDzs/zNUQC1xsGXEWA1wYF+NWFU4NxQcRz+uxT4Dk7tVooy8Ghyeo03UV7THujaSJEhK0DSIlYPgFF5Uij1cFJFyPARZTRgJiXiZ+klT5OsBfgBEZGdIwZh3S03TrEtUdc=,iv:z1YT8ZXpMdOGGwHk/s3E+BMRTIxt+bmMPbP+AKjDfVo=,tag:zrIcL1Fxmr1WtgHZmBKeyg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/root-password/password-hash/users/kurogeek b/vars/per-machine/canopus/root-password/password-hash/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/root-password/password/groups/admins b/vars/per-machine/canopus/root-password/password/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/root-password/password/secret b/vars/per-machine/canopus/root-password/password/secret
new file mode 100644
index 0000000..66b21b1
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:Be7LNQDVzVzDeT0DaK0SgbbOxQ7ae5R/jAPV9WsK6P6jeZ8QW9mJFyKa,iv:Z6KIGxrGB2fDUZZt6TijaBejQUaqGHvRGpsRWBZFRxc=,tag:bYJDmNrSCXcY1KScSA3BVQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoWEtEcUt6Wkw1QzFvRHZl\nejR5U25TT2ZINHZsUmloZ3A0amlVejRNVlU0CitnazJZMDNhQkdDQTUyQnorTEJQ\ncTVFM2FGSDNlS2RqU0ZFdWlaOS9iWkkKLS0tIFBEU05LcU1KT1FpMDVXVjhCWTda\ndUFUWkNsQ01XWnlNQlpua0V6cnMzL28KCqHd7usmTAu6H7HWFkKkxVm0N3Sdn5/U\nv6XNOGlsjHXCFnvs2hOhcgrY6xCAUIQHfPQ3Y4OGtMuNsD6mlVpYfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3SUNON1ZQVHRFaUlsdHZS\nRjk5NjNUKyszQmVjUDlEUzdHTkpSWkhIVnowCmJ5UitmTmlFUElNNkdYSnR2V1R2\nV2NQelBYQitHQ0pRUk1HejZuRTBuaEUKLS0tIFgrdGJNMys3ZnZBVjRablRNcDRy\nblI5ekhrWTU3QnN6T3ErNStiNHFhaXMKknuFd/6BXjL6hEE8MQrDiq1NCAs14VTK\nqgtCunoo1CAQoFd6XhJwGHihJFQjuaUbC9ZAEWGYrHIsf1ec4xvIqw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtUTWlzbzl0\nOEQrOVNqaUVUNGNSS0t6WTc0dDZNM0UvL25OdzUrZ1N3VWMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpjNUQ3UHVIc3pxR01KQ0ZaN1E3U1FI\nMjI3ckZqc0dxTmZkNXU0VUpxc0VjCi0tLSBJV2dDSldFUEV2bmxUTmhLY3MvRm9E\ndmdxeXJ3ZGNlek1ueW1ZMHczeGYwCibBlm7/Q0fD9VLddosXNkw7n0JFZu1JvTE7\n7ixQiHVFzZ/XZKPVuYhDfoVkDxX9qbrCHhmdO0XKfXKMmWOadiU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtaMitXMmxV\nWWNwTHZ4WUZTQWY1ekFZNEZPdEFGV0JqalU0UnhuRjk1RWsgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3QjhFT2hvRXNPWDJydVp3YU9VSm0z\nQ3BJS0N3QXJzQjBaMlJ2RkF6VDVBCi0tLSA3QStoZnBraXlhci94cGVoT1NRU1Bz\nUTB6N1lYSWlUTUhEdUV2OXZiWFZZCvfFgENQFIFjJcreUkrw9uPSZXAcpBi+5aB4\nczumlBhjiAqj8qW3nybqgpdMURyRYiu/8ClsWQZrY23D9H4afPM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcxSWVNd205\nWXU0Z29EY0R6MEF1aXBncjdySDI0cVRZTEpweS9yTlJjbFkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpFV1dPbWhvakdPaHhSQ3NjSUJWNVFE\nYVpOTFZzT1lITVg1ZU13TW9XcW9RCi0tLSBTTGZIUXVBVENMV2JaUWVOTjVSWmZi\naFhEY3E0TVFHakpKeCtjdnIxTWZZCvW6Vse1SZOtoWcpvH06meaQgkDQqlqR1i2f\nDeSA3DnxmWnT57aNbzQvSkLfpU0eZbPsx3KgrlP9reoQn0hE3JY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3OEJ4T1prVENPbkxqOFA0\ncFlWZ1lIc1ZncStpbk1tOWdGdktHWnA0OEdRCjlIRHo5KzIySG9Fb2pqTXJRQVdH\nd2FrbzY4ZkxwYmxRWVUwamhvZDlmSW8KLS0tIFZtL2ViejdWTFZaOUNMdjNxOU5a\na2JnNnN4eDluVFpLSVVieXYrclhOc1kKxca4wDdM55yMlkABpzBtM+UCcxa3DqeK\n4QaHqJ+++GImfiHpcdDIpkWuLb/zn+pOWiVTDbMzmweLgKPjKcB2BA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRHdNTHUyMGlFVEZMNis5\nWVVxRDE4bDlSR1Z6YUVsVmlGaUloWVEvVkRnCnhTRU5tUm52aU9yTUNpeGw4STd5\ncitRejRlUU5rbFRGdFVkY3BUMGxOcDAKLS0tIDE3WmF5eVUxeVMvVnRBSkgvS1dz\nSnRSNjNPNThPVmo2SXV5d1I1TkQrOWcK8E7llJvD1Rc27C/ReEvH3P1k9DLim/rU\ne53zw371W9lNrzfssH6c1Y8ZzxsmkSp9FAs95Qf5+7Z+z1F61opQXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQU1INmlKMkVLRklXUGFq\nUklkMVppUk5jb3NhbFQxVGRUNkh4MnB4T1ZnCnYzMFZvODRURjU2VzZOakRGd0NT\ncDNQQnlaU1FIbHVMcG81NFUzUlRxMXcKLS0tIDZQbVkrdWZDbzBJeUhQMVVnS0g5\nQS94T3psOE5lT2s2K1hoSENIRzdPQzQKpDM04ZbrXkRYQzx1KQo9wZeaZKIcx4KH\n0ev8oZ1PYryq94GqnG5n1rCt6JrIpeqKlzpufprhRSF/YWIUWw8Onw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWWEgvZmZJZm52em53VXdO\nRHEzdnZ2QnlmeWJ5OEowMFBydmp0SWtFR2o0CkFKb3dpZVc1ZUk2S1dEb3B5RHYz\naXdMT2pITkJLbDF5WFdJQ3laVXcwZDgKLS0tIEZKNEVJVWtWeldOd3hQT3dZcFQ0\nZThMdGJzcDJ4cUFHK0FBYkxlNWFRakEKgBN7u9t35Yiv4zG4jei//yOVvssUGWbF\n8NEdmltFEwAkf1Is4LGTYZ5GlZb7wqxMH2b9DHeq+VvF8BPuPx2uKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:59Z",
+		"mac": "ENC[AES256_GCM,data:vAEOqrNOEBfXHPah19oCqBUbarQnfbhsp1QiE4idnEuT9DXT5EwVwStFVgN11QyT/irUYPVcFhqtW2D1bbPJdiCXV1AGOYx8NYX+F9ceCLYtyxluNZ9tujh+rVJGkkT4WFf0QmO9naTt1EvXCRwBAtTdinn2QNh+zb8Ww9gKYVE=,iv:OLaRmMo8kVwGneDlGHzUQtC8jO/h3obB6EKbs5hCw+c=,tag:sSzw/suWEjp+l60Lv5xKfA==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/root-password/password/users/kurogeek b/vars/per-machine/canopus/root-password/password/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/state-version/version/value b/vars/per-machine/canopus/state-version/version/value
new file mode 100644
index 0000000..115ab7a
--- /dev/null
+++ b/vars/per-machine/canopus/state-version/version/value
@@ -0,0 +1 @@
+25.11
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hostname/groups/admins b/vars/per-machine/canopus/tor_tor/hostname/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hostname/machines/canopus b/vars/per-machine/canopus/tor_tor/hostname/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hostname/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hostname/secret b/vars/per-machine/canopus/tor_tor/hostname/secret
new file mode 100644
index 0000000..d4b3745
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:uJZ61uC2C5yh0ig+e3I36Nphmn3GkKWPJCrXoVkhp5Ejg/9W5/hoxl50PdSRVXWMYpBaoytBDKnNDjNlBvtZ,iv:78dHgOq2GGK982oiaLPsiSQCNhS3Tw5v6hFMZChneNk=,tag:Wmjlm+oh6mFtNgqgtHVMJA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSDRTN1ZvaWhUMHhuUm8r\nQWtuVmo3Q2p6R3Q5Q0RMamRkMS9WdFllMXlzCm1Ub1lidE1uak5Hc040NVRHOThl\nQVJtZGMySW0xUHB2aVNMUXU3dDQrMzgKLS0tIEFxcGN6amlscXNKNzcwbU5ncWtR\nbWVZU0psckpvTHpXTUhLWHNyMDh5YmsK9NhLpF4G6tthzxFlMFeEEaKB5ntB4vPf\nwn0xc7C5HpxafbOS90qIY2TvdK92X+ULzK7eochKCt39yf3KBn6wBA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwUXdCdlNqamNLQlhpSFJK\nbURBcVUrc2RlbjFmNnNJY2JRcnlsdlhCR0N3CkNGOGZBM0ZLeFVMcXBiek5OTitT\nbGo1STlQU3pFaHo5M00rUC8vUVZNWjgKLS0tIHlZRTVQUGxROFl4Z0d1ZzdKa1E3\nZXJDT2VJckcyYURnUGNDU1lFTFZFYlUKN7DKlCzNvv4kkZELK+7zOoYDeyjwXcxU\nS6IO1xdPG8cnsr0hh7/nwuqMRgNWaPlto/fp1aPnLBE9RQmZNal+ZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGx2ZFdHRDJK\nQUYxdWM3dUFmNkl1RUJCTjdvak1ZZmpJaGxzeUZhU1VhVzggQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpTVDBBQm1nbmtaRVlxbDRxMkVRSStJ\nVElVNnBISWNnejhMdUNMc0diR3VzCi0tLSB4YVhUOWZYcE5kUVZSMWg4cmZ6VDkr\nK2lGOXp3V2tsZStMQUd3QlRkZUE0Ctk3/rEKXEi27AahWwcnsXQoXAThkIgDWpGf\nJxdueAwH+vbVW0zRjX3DVCfdbdCMYUDI/7GN9x6XxjshADntNbI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNkeWlMSzZ5\nNGV4VHhudlhybkk0NEVqeHkzTlpjUjQ2TG1OTzNwOGNBRjQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpNT2cySGE2Z3BjT0U4dmdKNGl5WGpu\nZkdOOW9lRGtRM01DVkpxMXMvUkpjCi0tLSBSbmlyZUh5b09Xd0FUeUx5RnlkMi82\nRTh5dkZBdDJjcTk5LzNIWUNaSTI4CjBw2yBjSYnK41xCj+UVY3A2NBjp/SS52A8g\nzeLSRa5x0JpfmJBA0ytNmrU/v+dIKirQfY6y68Q8ZJ+FKtnP24I=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZkdldHczNG\nRTZYVzNJRUY4SjhSR25IaW5ReDVLbWhuajJ5WHN2WE1kUnMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEYkRLNitUMDF4MFZxOGdkQzRYRHhH\neEhTd3hrSmJUcENxSmpjQ08vQTNFCi0tLSB3OXh4Tkp6TDl0cXZndzV5RlZUdnF2\nNUpMaXBEYUEwclFSR2NLcUxDY3RrCnrfpf4nlNrOVdzxKbyguOHU0UicKBSp6QVQ\nhnMOVW+6MqacOsK/Q+LMHv1Mze6yUSSeFlgokFWMAubCj8zltL0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSE5KVjlwYzRneHJTN0Yx\nT3ZLWTkvOVBxZUo2UG5YVUVUWURBOGgzMWowCmVXOUUydGZVcEthM1luamZ5UWs1\nQ2FXWTU0ZGhndXlZelZiOWxSTjdtZEEKLS0tIHpxZDZxRE5KdmZneVdTT3RxQ1dp\nWkRvOERiWU5ObkoybW0xSzBlZDRhWkkKs1J7N49onosR6quF/ts+H71JBW9EEp0T\nLbtIaAir/o8eNl97+rE2jGgM2Nsq7raYwvmSQCsfff0hFzx5C1GKKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyV0piU1ozWERsaVJ2VVlS\nRExaYlVNWmhLS2E1WlBBeDNGSnBhS05DNFRnCnQ5SnE4NW5FUXJCUEo2RmlIUWRF\nbTF4L29zQTdnNWU2LytDL3NMMzBUSTAKLS0tIE1DWURuaXFjdktzeFgzRk9kMzhq\nTTdLZHVBSkJnNTAzNU4rN2xrT200UWsKq53YSpXQE5uW+xF7MI/e6pqAZt/kBh4E\nnILhM2heg4JTq/YrrppFUTovBV9KHafi4yfp4SrBVlxe/y67cMxb9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBteDZXYmlsWm1xZlNZSUE1\nRjU1bFFUV0hRV0dNZVdrUzhOZWl0T0NmbVc0Cm80VW4rWmJMVDRveG1DRDhRWmRS\nTnlxQjNtZTdXOCtLVHFCRkl6TUJObncKLS0tIEtYRmZUZGJBNU14bmpMRFBZVTEy\nOE5NTzdBdXZ6OUpNb1pIc0lIZEU0MGsK8mZEKmMbPN1vtQJ5XO1FtiNFvKi34I0n\nBq3o5PhqpzrEIHGGB/WFSXoPpBAV6PoM+T3Mcei9Mtq8Mw1WOKiEmg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmaktRNXFOa25aV1p6bmZj\nKytwQ1BiRytUOGpSY2twSmJvMzlYb3hkbTJZCnVDY1ZNSStmWnJFbTVvaUpSYnJj\nM216SmMxbUh0QWpOZ3NPNWVzRkRyVzQKLS0tIHpCNmFFVEMrYWdrUHN2c1ovb1J0\nYVlGN3RYbFFRMy8wTVRuSlB0dDA5VlEKSzukmILLQnMZOPTsKxJ9A80HbEXh+DTA\ntv0lNRdMiyecpuyKQSkQ0S0HN4Rd1PYrllyi3uPE2VNVsvFGLP4V4Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1blZabEppYXQ0NlpZbkVK\nbEUrNGV1SklGYjl2L01tUUQ5UTVJTnRDa0VVClFVcjdVZ2VBK3RJUllMQXFPYzN5\neEM5RVIrc2JxakZrY2VYTHQ0ZnNuOHcKLS0tIGxUS2JwcjVpZVFKcGovU2ZFc3Mx\nUUNOMXhnN3M0aWhaM2FBUUNZWXBiNncKNant3X40AEHNLiamEnAZIv2MuK4qbpv7\n6rbSnyKNOd1K7+DnMoLOaiM2I00A0YxcOx2HrWlEmYZlR5Mt0hEZTA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:51:04Z",
+		"mac": "ENC[AES256_GCM,data:bglhati+/brWU68DKcnvFFvEQmDvECGXSH7GJQ4gapKtSjkRZtz61wx+mxBtI4nwbd5hQyJK7iuz8ll72CgF3mFHQfeR6tlzzw9lC4GC/4JuLLArHawAdvsnKet+jVKgf0UB+ZMss9YrAHjTsCLQg7ofSn8bEO29lH00qSXOazs=,iv:wZbN8BBycbCsi7eboncfF9IAZBJf8UGm3BQalVgEcZ4=,tag:LdaAcvjoqFGqUzn9qJeA3w==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/tor_tor/hostname/users/kurogeek b/vars/per-machine/canopus/tor_tor/hostname/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/groups/admins b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/machines/canopus b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/machines/canopus
new file mode 120000
index 0000000..4f5de1b
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
\ No newline at end of file
diff --git a/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/secret b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/secret
new file mode 100644
index 0000000..58b0d5a
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:MFFVH9XWlTO2l8KPjt/n9BVKicszmQ7wCA6oPJ4Su/8QskQouWZFxqlcA2GRhriZVHQGESZBSNFlkLQoVcTZhgQBrDRnO8GOwp/QxojUczqgAq8nfCaYC0H5/Bp0CKwk,iv:LV8pxyqNz93ifjfnltNm+OzZZbKO+E/z9b0h1keuYAI=,tag:ZpG5Y19koIg+0VtCEjo5bA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEa1RENlhlRC9Gamh6ek10\nUjh1bHpLWXpqVjZOWDEwYWI1Zzc4cThpOTJzCml6RnRWaTY5RjBiQXR5KzgrYnZl\neTcrOWppUHNHdURFK1pUam83RnpzYWcKLS0tIDBGbjJhOHdPb2JrNDdiYnlwZ2F4\nZTQrSmQwTmc4VS9CZUZ2aHZxRUlCZzQKaEZ5m7W2FE4yJOb/Xu0DesuwRPDS1p2x\nok0t9R4XJpOoCXFVv8zEp1WEJzZzF/EvRD1refT2UP3FyT7TRnTybQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbDhacGgrR2JBRkJycDRq\nanNCOXdtUkRUV25qTHN3QlRxSW1VdE9PWmhnCmJscWI0M0QxbERkdnlSUDJac3hE\nd0lKbWhmSks4dVhxNUQ5ZFVHSUtGSkUKLS0tIFRTdnRtUWJaMnBwNlpSS3RRa3BE\nQTZPRkt6Y0lhcTQvRUNKNlU1dXVmQmsKmjhhg0GuXuBV6NVnj10xdCd005aAqKte\npECh44bs2kTBbR2o75jwpJG8YRVbfgrKAP2cV11AeGUL+gLeAdAlSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDYvM0N4bkFq\nL29xVEdlbzFaUkFPT1FuSXR5aEptTWFRTGwzaU8rRDNGVFkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQptTXV4ZWFsMGJCS1ZoT2hCekVUNmtv\nWkx1eFhGamVMWHh0UUNPZzBZTlV3Ci0tLSBHaER0Q2E3Ri9pZ09yL0d1RG5La3Jx\nclJ4OXJabWFhaW5seVpjU3N1VGJrCtG2Qgw77t9QNALzSjBtcTfWymLYUqxA5PtE\nuO64wU5qtU363BgYQJHwcAeciqcAYOAutAmgym54I08XRpw3iEA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHA5YVg1SmV4\nQjFBVll5TDAwQUZGOTVRdUJOSTZjZllvVHVqWGc1Tmc5UncgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpjdk9meVRvMzA5cG9pbUlUZ3JibjVE\nM1NPK0JSVGh3K2d2Nk5qYzZubHMwCi0tLSBKZFFCUVgydVQ3cVg4ZndOMEVtdDgr\nWkdYL2NxWHFMUnhHcnBRKzFLbmNJCgO3qXzaiCWxfvQT5mrDHJFCwRr8TrIVBiac\nfLeen6a6BC6B2LdMWK3q34ylAlnLd4EaN5XIDPDIwB3p0J072sI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFVkMnJjWFp3\ndnRjaHJZTXZCdFZnS3VzTlJQMDhxUWRnM3BUbldpcU1lbFkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo4b1lqaUEvdXA3bDc5MUNtcXkxcnpv\nMTcyU3hVSDE0aGZIanF6SGxTTm1ZCi0tLSAwSmZrQkcyMldnUU82R2lCODMwRmZ3\nRWMrTEtzTVNTbk1vUUtVNU9lVEJzCvJ5p+PZVrmMvzKaGgTaFY3gtSmTX9BD+paY\n/ICeMph6+FETuJSoaty91RShEx44esaSOLqSHNhwmyGaSTSfCME=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzb29HT1hBMkhHUU8vOGNl\nQUN6TEVFM29lQmVYUFpRdlFSN2grbFRDc3pFCmg1Z2lwVTJRN0RkdTkyQ2NDK0hK\ncHF3SXk1WEFiVEVrTFVVSXNiRFFadFUKLS0tIG1ZRHNGQ2x3Rllrekk4NWkzWEVu\nZnVtYTdvemRrWmFEQWtQejJ1UDFjLzgKpyPEk5AEKD0D1xK6h98hvPHYKzygS4EA\nUXV7LiaSRcJ8OaHJwSVTHAPqM/rtHMTAtS5Cs61rM+xF/XiLvvpm7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnY0xtejFjL1RNbzJra29r\nM1RkNUxMaW1RZnlqWU4zSGlrbDNSd2lWZUJvCjVZZUJVRFhjYjhVcUMyUmRrQmox\nZFhiOW0waThxS2pqY3dhZ3UrcFQxYzAKLS0tIHZ6M1MzUTlRc2pWK3FCWUNOYUxK\ndklDSm9RT3c5MjFtanA0K1hRWW5NS1EKFU+oUiygWyrCO2KcfId/CyBdBxOz4nOD\neRvfd4xKaGK01i1JwdFPZQSON0rmUUpz7qaxzXoOJ4g6giM28HXBKQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQm4vL2E5VHRLcTJYK1Zz\nNFM4d05GdVArTnFlQ1JxeVB5OTYxNTQ1WDE0ClYrWnEwejZ4bE9CZExkT3E2dEdp\nNmtCUGhqOUhLOXlGbTg3Q05SWlByRHMKLS0tIDZ1QzFLVENiZ05RUE43SW5mcFU0\neko5cjhxTk5tQ1JQTzFLWDRQbTV2dHcKh3jQu1dcmUX/e/LdyOQME75UAvFoucSG\nDKlbwW1ISd6gCLe2ylDRn6BwMxJbnayLkZSDYAaphCTajqZNWbRYvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY1FKV09UaDFaak84dEZU\nbVRGSnM2VjA4L1JDb0x2Um1pVGVrWDVSSWswCmNQVHNEZm1RZHZoa2J0NWVzT25p\nZ0RMTWk4N0laTFI3dDJzc2lEM2hHTE0KLS0tIDl5VlFjV2NoK2w4bnVxNFhxSE9u\nN0dJSm1HaXd4QkdwcFl1dFdZY0p1elEKQsP+WvDvhnIzI7cmPfqvWH/WXykKAwMr\nTrMyNBLmnG8yI4If0c3L3zAVxC06DopJ3JJM8pFjHlczElvF6LSK5A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4SVBpSnoxTWUrOStETlZQ\nWFpnWjhrRFIvSnZydDdYQ3V1bFdzZkQrZW5BCjh3T09lTEUyM29lelpDbXU4U2x0\nU2tJNFBMbGEvcHVJZXVkQU1tNjVzd1kKLS0tIE85ekd4VFpNYkczRVNUNmJoQmFC\nb2k1ZDlYVGFWOWZVd1pOWGNCSXI5TlkKcPOmYaJfQjAQrZI4s9JlFJOiP/tUG1IS\n59ShqPzmSrN4rbCErgtaD9o4inui23ROtcLeSRzl3mYtUFk9uwFOTw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:51:05Z",
+		"mac": "ENC[AES256_GCM,data:7XXJyh+i3A1oakbrMXUAk9mpJzTXlDrQI2Xhao491Xa0+Sj90Ui00SI/mAIsKtXnWIJEzUXUgzyJtY488jRyrkTZ4wcRgheLwZLGTFh2THflU1muPoyBcc4lmD2GA2Y8UrAvWHESmvZN3xa8Q6A062g62tjMrFaB0mGatPNENtg=,iv:pzaf7FQdvoe3sqIG4miB0H8TvhXsRUFv5tnj16ck4UA=,tag:FhVS4bm9Dy1j2gcG9YQw8Q==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/users/kurogeek b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/canopus/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/adminPassword/groups/admins b/vars/per-machine/deneb/frappix/adminPassword/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/adminPassword/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/adminPassword/machines/deneb b/vars/per-machine/deneb/frappix/adminPassword/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/adminPassword/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/adminPassword/secret b/vars/per-machine/deneb/frappix/adminPassword/secret
new file mode 100644
index 0000000..03fed40
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/adminPassword/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ilt4w7S+23d3aBubmUuEJwGhA9fqd545jpOcDHEGGPnm,iv:ggoiIGZdfQp0zs0eOeLnkgt040ocvawOPZk9pJBokds=,tag:ZDob4QbxmGWF8SAQWICM+g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKZTh4MjB6eGptU0hZaksy\nOVorMEFpTVBDSy84VVA4ZG92YThvKysxdlI4CmROOEUwRVJEdkZiR2Mzd29nRVZP\nUFhydksyY08xZUZESkRHNk1qaHRJZUEKLS0tIFRIMGtDRkpEVEhRQkdWdWZtYUlk\nNjhyY2JoRlA3NjJ1K0pLRVBzYWl0WXcKi3xBLSnMnSfLd0t15cj4DqA5Uwzy4Qs2\nVZbIoEWyPQRvaulnXU9pWHcTpcv/2JeKhUanpC+zSPI6VAEHweMBbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZaW9pRmhsaWx1Z3pYNlFU\nOVpsSmEzSmxESG1VTU5aSnBDYUVsdEx6Z2hNCmE5VDhxNi9abEZLQS9LOE1LUXBi\nYTRrY3dKYlFGOFFuejU0RDd4WlJZNWsKLS0tIEQ3TGU4WEltNXFFdEdJYUVwajRR\nN1JGZHB6NnVxdm9RcUNtOWgyODNwQlkKn2sWOvyBHkrGmVdptddD7oFvrtct+MCd\nsK67Nq6uVOnhYM1kKY9YFjPh4kcE3lFR1jdmtXuH1N5IfZZ040Mgkg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEV3ditQSVlw\nWVlnU3drZDRkWG9qb0FDVUIzSE5iNGx6R1ltak1NMm5jalEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQorUkZyWXFLaHRmQ3Z4TU50bG94N3RO\nYWsvZU9JeWk1N2Q5by9lRlBTei8wCi0tLSAvaWpFWGpWZldDbHJQd0lvZXBXVGxW\nQUMraGRHNlIyWmdYRDRWY1k1QVZ3Cq1mexH/jqliJFudE6vlqSZ1zsJHan68JLI6\ngbIP4+L2wWZA5nsF0fU8EnL6hGnCYn8CLZ6DE9lgqBITqQtWvhY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHNwWnZNamhk\nTnI5QjJRczRLendQWSt4Wm1PUWZZdStlcGEvaGFkQW1YeG8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp1NTg5Um5rY1lsWjZ5YzFFZFFxV09l\nZy9pblBmOHh2bkFDNXdCSWtpeWVVCi0tLSA4dHc2MlRqNG15Y09XVFRNV0ZGcTlQ\nN0ZnOVpzWXdGNXVnTk8rZUZDS09nCg81TdGjvY8TkQEPuFAUmqHGxS04xt15Vt9L\nOYsl1CTiHGHU2hAmxBcr4dA8S4MgyKw+V4YB6nrl9wyoIJ+AS+Q=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHF1ejdiK3Jo\nL2pwak4vQ3JlZEFzdXp3bWcxaCt5S3FFa0dydlF4U29UemMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwovem9IQ2E3dURnT0l5cnlGdGNpN20y\nNzc1R0ZnOEVkeGJ5czhUMEJ2cGJ3Ci0tLSBBSjJaQU1UYWVYOUtyRW1yRDBvOGxo\nL0UzQVEvV1JUeHU0dnRDOWZjRVBzCqszq1cgsyGnKjBXLi60lBQmFJpAhRGZhh0U\nAvuURZbgrZFjSdOzsgNs5OQAVbKTqqdetWmUnwzVX/VgMYiVJyQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvemsvVkI1QnVnSy9HQi9X\neTFZelI2Sk1HaG5kcFJjZ1NIb3Jwb1kwN2lNCitOVEJ0RkpJeHhWajBvMzFUSDU3\ndnR1OVhHWFF4enh6OVh5TUNrdXRNWncKLS0tIGp5NW5EQ2JOUXY1Nk1LdDVrTFpw\nZ2tDeGl6Unp1UDk5Nm1ZMnNKZnYxNWcKv3J0+ljIPCP17aO9+xcowDuXY7F26TgI\nMcYdzesfUAaCHA4QbmOFsQeg28Wh99vaWYBEKU54nvye5qX9vzPgYQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZVJtb1RXQTBCM0pEbFV1\nUVdUSUpSWjlGWDdCVGVvMnBaQmpEdU5zbWc4CndyUWwzK0NEVnZQZ01pWDc1Rlcw\nRVlMcDhOV3pYbDdxek41SmlnZll5aGMKLS0tIG5LaGxIZm0wV3A1Wk9jcFVjeDdi\na0MvckE3N0d5QVNhZkNsdkV5MTFPNFkKdQFy6rCuxxc6qYss+MzbRw2wBQazSJpJ\ncnaDEBannQ7oxhIaTmPZN/Yh8AyXmcN7uz97yoCapT/HHOxuO5cAMQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHRFRGQXVPWitDMEtXdjU4\nY1hYck5tK2Fac1VHQi9sNzBibzdjRklEZEVnCnNyNzROUTlrK2J2Vml0NnBVQ3dQ\ndjJRaG5icFhiMnFRWGdUZGRUN2w4Y1UKLS0tICtQbDUwWDRGWGxPTTRJVTNzeDFh\nRlBQekFkSlhheFc4eDRHNGdCcTEzVU0Klgx7iJA7cQAQenpTc7sCBjBdgbiwoAEY\nCbF6V5l5swIxTBPcE+929nNP5pVXmucn23c5LHAOjtA9UsxJe12UYQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZME1jZnc4Qmp5NDY5UnBJ\najR1R0FvM0tYWjRva3ZDTnJtbnhXZGJvdVhvCmR2c2FiSmU2YXRHaHpYeVpKS3No\nNTNQeDU4aU1BT2JhV2xSdG9FdWQvbGcKLS0tIDQzRTFJR0pjR0x2Q3BJRmloQnpT\nRkJVTi9kUEM5UXVRdkVBRDJKM0l2YzQKUkGZ600CftqBYq18V+lI9iyqV7BbVoqW\nu0rfUq/nBe2dJUnnYs8oaB7p0Ovw0oBc7UGPKHbHYjGcCCbrg1ftPQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkSFVOb1gxVzFjNkdRYkNj\nZGk0dTV1QmVEbkx4eVUvUEFXOEIwY1NPWmdNCmxJQVVrZUJkNDdOcGJna2piSjFT\nRzA2UEZGbVVYUW9aYnZndTJhT2daWkkKLS0tIHV0c3kza0MxdElCTW1JNENxL2pZ\nRVJwSHRLVWk5T2huNCtZb1Q2bkJvZHMK2RPZRSzD/1qfLTexlXmURfNq92btXThn\njKTAVE8onP59JeSiZZC2gM2NSKZlXGYMg5lfuCJ80xToOTG1Ro8avg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T07:20:35Z",
+		"mac": "ENC[AES256_GCM,data:hNA9uEwVNBXwBS8RSlPDdHfm8O3XwRHkG9OXg2vN1dmLj8MC97kZn+OUp44MZU0VlKYIzoxSNr/FewRH2Thv1jFo4SK3dEepFefA/l88EIh3vub9tBwvPesPT0jgCoPaiaaGvvwZc/WdGZPlLBMLwirQ+TQKYGDt+HGbR0EtELI=,iv:O49si4VIa5LajYVkunjsT1S3q19iXbMm/binWTl+f3k=,tag:3EDRDupwBmJaCc43P+79gw==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/frappix/adminPassword/users/kurogeek b/vars/per-machine/deneb/frappix/adminPassword/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/adminPassword/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/sslCertificate/value b/vars/per-machine/deneb/frappix/sslCertificate/value
new file mode 100644
index 0000000..5e0d0cb
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/sslCertificate/value
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vars/per-machine/deneb/frappix/sslCertificateKey/groups/admins b/vars/per-machine/deneb/frappix/sslCertificateKey/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/sslCertificateKey/machines/deneb b/vars/per-machine/deneb/frappix/sslCertificateKey/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/frappix/sslCertificateKey/secret b/vars/per-machine/deneb/frappix/sslCertificateKey/secret
new file mode 100644
index 0000000..f0473e5
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:H1+6smczvvs3ifiYxmcIBXGl2wVmglgXHDPojfHxxNWF3uk/2JKYD9pQj9QgmzlCNBHnR0dsDfQWCCh2IYNVwYsKpi/7PGyc3viR7NyrXkW+Z4zKSw8etwTQ1OJ9Dg5QKPur38P2+a5N+pxhPUcCUthxdOGBW82Zj0K+yDXqkPzuyS6pci/HFcLXeCGvBTAzoM62FdNnmA6qiX9Ql+57LGAC/gWZjK26EJyEVuxpRhCR0B5JfEjCGKqbY3IMSH5t4LSMOBPERsxPsIDe4Ob22hG+V2VX7WzEOtOiGXCrRzCcC95YY5c6Hu44URdWE8Wc4SwDdwLHSBLB+NvVAhMltgunh9PgJwqTi67HneJuJcMZ8jDlHjqJLMB2WBFbIZfDtXtI7QgJ14USUPtbWD1TKIoFl4bIMJexIdFnSqKuLpsnutdd1VE9Ay7JW6rIRzm1cfvBRDDiGuSaBQCE6sRSed5ShQWOw0Uq8B8dQfjhq+9TnYUvMIqPb+3a+B5E010ce5N+44bg5fErDcpPy+ETQkAr6OhxMBynG44JdE9ILgZ9olMldrEtTfLLNCJeAwcBVQ18dIU9JrGxOLa3B20Fnq/Vaud0tx3K2KSSzWIBrpQZ5w/5QshirEtCNB3fcMzlqXCL23WJ5oAjUieqCAiW53+NUV4wzIhCCrHmkb2m4yKW7VazjTLJBwRdS9QRqz/cbHm9O7BHmNwSh4DbV1hDial8Ywp56EadDgyYc7VDy7eYvcA1d3uc1gWae/tVI3Sw6SdSay6tcchDQnH9inmfCUQ68LxzjJE16AKk5l4KQWlkde2cUvs7Ee25a69YxD6Dl7ynYktg0hqUvVeJXqxU4DHQVu2OQehB8cCZ3D3NB1anPSefjANvG+zMLWBmvL/Xw2wyo5yfSikrT1kA6GXcgYBK+nq/2MqSxEF7BBLnRwfEVjbaTY/zGkddsqRUVCBZd8vAWPdAEbaekieOBSeH0vh0RMRaOVluMQMN8KfjO5BJQzHUtbmYQmSDeOik8Z4y9g8m4Or8P4KhQxVOKCkkEW9eNoS30tA/HHG8yoeQmuCGPNZD+GxjOspa2U1EF8TL1RlaTGH7YEe2VRiGHEcz67H4F3Fz3xWltmfJjj/f0feBEcErfk16pFSwTSA2vXc3D2ziojF92RAo718JJ9Z9pp8AqWi9ZPDMHcQ8uBJ1CFCi2MBVhiWMJcXBaDR6sn/QUabEshT9cjGiy3e1xdAZ8ir+G63ulUMXmm+GYNE7aZ0iM0nsHSTw2tm699xFqsQcZFXIn3qtoBv6iEMqa/UTJfQuJkAmFStmikAhsJqmqn4tygjkH+oMYy7zrOlfNMmcrw8VU54O89HE0ok1LjnfCuMy5+fIeuFbz63Tu9R0+SudDmIhRtPVPgdYEsORvHooK8UZ/pDd2tf7lY0R56r2e2b6m23XZ1DrcVMoSD2zKUiPcli0k4nV9L3sGdiJaeIuVyULfJz19VacQUXQMMPAMzU+D+ao3PwZZKx8fs0B6THpK5vB4WEDMQpe346OKkMTbFLF9jq78MdHA1+OGp7xAxc72V0bGSlUArGsakxupc2LE30bktnDSOnCrlQYAz2lEjL7BefluqHvHXBRdgy/JMshYjTVn2JXmST/Y8/bMQv27ZrhvTTD4aUpktbBul17TGr0wxqQg35i/ZF4Mhrd/i2oF077y0y572yPlofSLPKBhe/PTIPlcFNuOYBhosFZ9dGgI20GQTyFLljj/64fT0Zn3cw0JK+sjDOagwp6oON0zESWVZo+a17Ey1PGeYSPle+hL7CMUyBFEtOPsfFNHxPJNBhs1LJwKxwG8OMMRDfsm+U7UseJJqZhkz65DS3a4il9lsrtR45apmV9/nLG7unVU52xiTxeYSAFw09d/NykkkmvzNztaetYbSFzzW7hN/J3fh7kaUGSsvAHI52LUa2Tcb74YerihqHYCqiyaR780nMXgeTBZhMeX9+lflgiyK48IZKf1dbms5rJyW6dRxzEwRlCtv2+5x7+abcta1yLaw6CPnj7CXZDYdsGNUZzQH8H32ttc7j7SY2gkkDw1sI2KtWtzeOIeyku8CUI65LcDrpMV1mIgKWqNaLhiH76ye+HdfOXYs1Nuv0u/73aglesUnYZgA4AyIFewQH209yqcJS85oIrgRH+G4BtTHFHQYo+uMTWiBvOEZgkp/tV1b5ewr385CUNjj8EbcapEs6eYq2DzXkk2ylJEPfjsO7nBMaBRrYp3VNSLefWo6XY9qoCSwvXfUT0FLXBcYn86akqWkxDcVnyRDPmdFeYDu6wMd3xzjqcQR3HkqPm1c4Mqh0cEcgqr2aexLR1LAf5WmK+j9qP7cF+3VRog1dxAtaV7fjcz48aOEWBCEU/10u6elAYcXWxz9AmFeAEE5fUZ2YJqi8wqri6wBLiB+qGRyMvz3r9+wRkNwm18cpc8KiVumhpV8VzSLcAM2Zmrvt6KvkH4rO41UFLY1OAcKMLrdx3ehKSyMhBrMSFOCV1XC439tQHgvLSuNbzm9o8h+8tyTSrovgvDAVZ9kQ6k9pWAK68PEsDyO08IBI1AsR18lQtJT6lpB05wdqudpSmK+2/rbK/5+i0iCn39ntvpv4PefRO4bIgGiblmpy8oF0Rd6XB66m1h2ChsOBo7auJeo9WWL3BC3Ivda7VEwDNSEqT8L9GGeTK05BjLz8gP30TyZqSeUzGVWkUSKb4wDZ57H7zw+esCDWiHCw2G35ezFK+8+gXmzXJYoRGsHZh36kgLNNKhFSzLd9zYWxwIN+BGZCMnmksLtiebrWWJjgYhj/hY5ZiJsH7poV9tf2k/OZTTubVDzoL6RxdpxqLe7JSQvSAm04T6BYoCKZtITWtjZJvtxmn7TxhQEgtEtG6+OlvZFDbpowCUAW9XThA8TKSIvtOI/uZpXUunJqyOywrjuVxRGYnDC/CVyDRwdrxiUQiBa8DvbM450UtV65Tw8xRUk1EQlC2uj0svcQTChiqY/4h7AEkaO3NUBf7lN8S2nddJ15jq55MIDSaR/iOSJf6YXZlJXsWlgvepjCKZRQdw4BruoVCcphxLC70Pfq4KZ5zWzaO00VgpSnaHaoxWkQh6vCSajh8dtHyT7arCTzRO2sO1EhBKWcTN+pu6VdgHFEvVrnrAZ9drip4psz1AZH0JnOiG5VaIrEu7/XTIsEFTFkhvBke0zFmQThJAEyxxUPY5OfD261l8dDPdHXJV5JwrzOzdYCFayQ4QhshAhZCms7o+NuVjNnlyHIn94jO2BkHopbokNpzNmig3mSXWdiLCGg6Dxj7AfET4inpQUU+k6gdOL2j/y9UC4JX9DNrbW1c4Vw4gcY56+OfSFuELlpPTZiYWGOEcr8g3Mmtewn/rDFHTGXbFEJCTRnkGmLgrZKCTEdG+3hVOvDuKNsZb23YrI1OZlg9G/pioBO6ReLoLe6i3UX901SwLjYED2WXFkDB0gSpctR0X8h38vvfj7TaNQdbUhZBkuaQwhu+QgwunPlHHPtO+VxaRLBcPV76SPAmaTsS/SCSzLQq/QH7cdE2peWzuELxHY9ZTgMUVWfJhnHndRjHBVdjahCWSAf3jAKWm8pVvil24rLmaOlPPH2+CNuUGkLFh7Yvqe2sp6Q1kEECqL5nOSfB0tcQXZgoZ9Jxw+B+TkbZzNZqViVC82D147ml6r0K5lSaB/LLixKUNLU7XUIsZ2ooT6s1+NyCoLFbaGogKnPhIm8tzxgdTp0bIsBvkWFGGXRLkhK6fkMVMe0FQcbKg8Otnk5HXAWAvacqaLT7oOukbIKR/eY+PKxDSLWBMSNc0ESRTP0OGx+hZjcLibe6m2XDur4lPNVsiLVFhbi8ki4oBPaNKHfnciW+d/4MXpuCkVAYO5UesTwdUpMp7WYA7iRXoWek2SWnOUWdT0cgDmwtzMqcRIKT8AuJ2SleVxNNRtV+mFF83MKJw2zh+kaHuoR+A7pKeQ/oC9iphmFzi2vvh6DqK3xYOa+5VVIWk06kcG5ep3ZC9OC897zkjPmhAWWOHwLfOBftXgSxKl4br2QQukH9E7wLMrbCsBKP+4lpHKeMC6uQO8JHs6/DAtHgdX375tRGP+EFZ3LKIKq9uuV08Rs0M4t0mk4j/kfXqKBNB+oQSJkN8iQ9FySjDi2yeFnepPZ0vDqzvMtZZ7SpMT7rlVmrtDZBUPdiBM4Xl7oT+D4sD7LC+O8+1o1H99B9tRnwjYJYfjuyoFPnOi1lqpS1Sosg+bP5oRIsNoZ3zP1lgm46a73W8bIR/yq9WtHxpCgA4WuSnKLfFqNROblUFWVvGa+vBtz8QVEPLj8RDZYMVVz4jj4xYJrmHDXVSifnF4pRl+peCYs=,iv:7S1VCF32/1Q7yTtYdsAT1345NmES0Rab4dQjHbVlYaE=,tag:TfMtX7838Ly8WrCCmoAH/w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUU9tVnI3SHd3bFhWQjFk\nUm52SUtkby8rVEpJSTNpL1dUSTI3bjNXeFNzCjQ4Zm9zUXJQZjZ2d1pacEZwT1Mx\nV2N1bWxHVW9pYTNISDY4MkQ4amRzeWsKLS0tIHlQOWM5QUpzQVU4WGFaL1dCUkxJ\nQ0VDWkw1cGdwMFFvYXZvMTRiYWw0NDQKFbAhGUgOBAzRICYAhBRFvHjAwiJf5sMM\nyifjWCty3BLbp/IvsK7Ll1b0E66bRys7N1njum48ZKNzFbMsZTYW9Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4OTluSG5TZHJkbHZVR1o2\ndjE4ZE96UEdJSEE4OTFWY3pIZCtZaDE2Y1Z3CnlkaVMxeUo3eG8xR05UYVFBKzVp\nWmUxSWhWK1YrdGxwejBLalQ5OXo4MXMKLS0tIFRacWV3Q1RrV3ZKRkx6U2JSdE1h\ndkFHUDhPMlB6ZjlDS1c0eC81YUhNM0kK0vx7iqQYAiUxAmJK9xnKzh4PldEJBxXY\nCpJUlc7TVQI1xyO3wXlPLkA9Krc+RIfSquqPIIE9LozlihQMRY0LXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHljSWFISldZ\nRWFLSkRoRVgrQjJBTzU0cnpkSC83eUJkMjFHelNtbnpkbmMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo0eGI2QjJ6akcrQlBqcE01T1NYNmxt\nbWxKUkZqUTRGcW9KMVdiVlUzZmRjCi0tLSBKdG9Pa0ZObGhlZExoSUZ6eUFUQWR1\ncnBvSlo2L1pIZVVSaU05Mk1OeDBvCiUYFkRS84idJE7zuvqWMdKYK0JflLO1lZ0d\nL2rvXlbh7p0zn4uwfpa1On6gPLXPWJEWOFezEHRqTEN5URCcnSQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5hcDRsM1BL\nTldUdnhzSU4yWjhKaU1GaUZaUnZ0Y0QraUR3MGc0R2hMd2MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwovcGpaMnNXSXMyN0I0ZldPUzNaZHJn\nRkl5MTVIenJGaXFTYmdtTDllbmpZCi0tLSBiL3ptVnZ0ZW9GR1FURE5VdmowbFdG\nK3hIQStCRHI2eTRadkZPbDd5czVjCoehESgPt1C1/GUgZRb37TSLmGeO16nlX5tu\nUY9Z1LIMgejw/Jmr6xABcpasxVTGFdApmpGreP1UQTnuEoBfwP0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9kN1IxWnYv\nSHhCVGFPOHV3NEloR2EycnJkLzZYeUFlU3hZMW1NOEdQVlUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppaWMrbEUvdEdaUTFtL0RscTBjc1Jm\nckRUUmlKWWpKMnhWdVFPVXo4YXZjCi0tLSA2dGRkeHUrMlZxMU1lT3U2dnBpMTJN\nYmVrd1NWRldaQkVraWd3aU85UlhBChuxsfeGkuATRbYA410yqQ+DKa8Us7pjqr2P\nsNIsF1ltzghfgSeDct1pIMh0sFDruzelrmjsq4AZWAKstL+73Go=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTnlvb3pUWGdKWUZmTjJX\nTyszWUJhVzlwdVZ2T3N1SjQyUUpXUHVSZW5jCnR3TzJ2OEV6U3d4NVAwcWRUQ2pQ\nK0ZBeklySVNOSUVYOS9BUkozN1B2Um8KLS0tIFpKZWVLZ2RwWWo1NHNQZkpDTlQ4\ncGhGZGNCT2RFemNmVFVHemZva3A4U0kK308hOyXVdhNirB1lsf0eA2QTGRRC7Ym+\nlHAeIjcYrMsd0rbUqpBC0SvCI+xlzMG3q28YX17rHZ2TjxlQ6FpnXQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzbU5rb3FWNXhzSTM0Ymd1\na201dk1CcWdIOEMxYXJJUC9kRFpNamdCcUJ3Ck5ONlVVWStsN1ZsdDVYa2Ftd3Qv\nU3VFdnQ2T1U3OGMyc0gxYW9MbzBJTnMKLS0tIHdEcDJUbWcxYWNLMlZCYlVtUXRK\nZUwxTGhoR2ttOEp4Mi9jTE9GaWJqOUEKcx+jQ2GD/jrtJyYw644udO+/fcjN0DOE\n9M6IPOjwTTTTA6gGL+2HTxTjNa7lHuG+OVbeqmCCwNVQokjIq3n7Zg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvd2NUWExLYWJsTXpYa2t1\nTkhHcEpRV0w2SHZscVFGY2pDNTBIdkYwbGlRCkFlOUJ4Vitlcms2bjJvU0hOR3FS\nSlo3R2ErRkgwZjNpR3BKQ3BVVEFObzAKLS0tIFpUY2RqajNvUitzNlhsNUhtZ1A5\ndW1lbTZXUDVPWVhVdnhyNEVScERadjQKWPJdlgqFiYMY6Q4Q3vwX96AzO6htWrM0\nH4xWpOuvBJaJTJm6YwXHEdA4Y/bWyv7gmO0N+sGhjjtxq+MHZAUu2A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUjJZTDRPMllzZkVLOENJ\nZEZrcU9aMzFVZEcvd2NEKzA3U0x6L3JrdFJNCm1VbXFGSFhwYUExb1A5L1NRWXNF\nWmVLUXRzcUEyOEtBMk54NS9pRlo4QzQKLS0tIHNYcmpBQ3QwQ3IzYU5VQ3Rubldr\nRDVPWXVzK3NaTjg2L2JxTkRuL1FYOWsK6xmNLmuts7m9JBh50PWoh4GqlwdDFbyQ\npB9HyXDYpRxk+WJ9bs1ahEMkJvAbI+B3zo+vTEXDnszjPUFfN4GyBg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmTXlNa2JrOTZoWkFDRSs2\nYnQ3Mk5KdE45bEI5L1pHdkdlMEdSOVpjcGhnCko4OFBIc1h4cGU5QlpSaGUyRWl0\nOXhBZ004c1RheDlOQ2ZLc1M4bDJoSVEKLS0tIEdDdzFZTUtHSFNsTjE0cWhjQjRH\nbnVSc3hWTkh4TTdIKy9lZFdKc2Y4U0EKg84Z74+P0D9u7rQa+Tz9UVH/ZYiZIEQ3\nuS1IWW5cpozSqMVQHIAO7j/Ni9Q8DPJMYq2R/p23UUlOA5M9ESCCyA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T07:20:36Z",
+		"mac": "ENC[AES256_GCM,data:H539QyDIdQHTwdr10RI2IEF7QyrVMQrOqY8/oaeVBnFdN6AP7If1p6kpR7T6KqY4AsSUEtQ3nzp/2b9HBMlQOJxEVcZOIT4PjPaUH4fZQkCl00SljnGKA+0MYx/xqgElrIhc5tEYvluq1K1ROGTJkM6I5N0xaB5RVmR0fJCxdz8=,iv:xHPVerW1v56JxGHrq3LYricThPstUBiYG1Lu7vUYCdY=,tag:g4C0Ay7uKaAA2xlZ5zmtPg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/frappix/sslCertificateKey/users/kurogeek b/vars/per-machine/deneb/frappix/sslCertificateKey/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslCert/groups/admins b/vars/per-machine/deneb/nginx/sslCert/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslCert/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslCert/machines/deneb b/vars/per-machine/deneb/nginx/sslCert/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslCert/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslCert/secret b/vars/per-machine/deneb/nginx/sslCert/secret
new file mode 100644
index 0000000..e04d532
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslCert/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:vwOCR1BDRVKnBV9pzUdgwAzmbjbxKQKVnPmUHBB1ArI=,tag:S7lbbX1Z3gzTxS3wIlP2QQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQ0J1bWxQb3ZQSTZvNnpi\nV2tBU0pQUThSbjk2K1dlUnMvYnpVTC8vcGlnCnNPby9KYlI2b0pEVnVoREZDZ05r\nT0dyUHR2dUozWnhVZEpPcExVRTlMZEUKLS0tIDlUZVN3TWhIWjlHWGtKT3dhU3A2\neE9XcnpvWTBzMGorRmswbUN2RitDSGMKiTdr+kDugRdTNWQ0QMlGyD6jxxmAeEnt\n4qPejOaVAdmHxKqyuPIZKwp4Wp5PTL7lHsOIkOdyeGpGAwXKsB3kZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5TkZ6ZHM0QjVidTV2bXFj\nNTlXcDB6aTAvU1NCWHRCY0RPckZ4eHRtZVFZCm53RnozRmQ2UTFEaVVkbkNjQi9p\nL3BXcjFaL3hzVyt0OGM1dEhuRTVhbmcKLS0tIHNoV2xrVEdjNlVJdDB2TGxOajky\nT3JhMlhzZVoyYnlaY3ZEb0FOeWZ5L28KPj7M+9rw0Zy4O/yVs6te3q7CB/k8EJYV\nzXw2lEG+WB6vkOXL3/zGnL/jqbatkA6+JzQDi54DmJbARgbSHP3n9Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZlamJwb3FI\nVjA0V3BFcFhxcExiWGUrelVtTWJ6eVI0UjhLcFJ6b0lqaTAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpuaGhtQk9PeC90UHQ5K0xYVzQxSVdU\na2ZhMWpDNVZML2dqeStreVN4N0gwCi0tLSBuMnFjK3JtdHc4WlRPNENiUTVuekR4\nOHdRRW1rTmZXNkZuUnJZWkpFd3k4CuMbqDigD/3N9NNCwwyTmmwxnL7rcUnx2l5c\nxv5B3kMdMA7DlWajqAurYoY152Gq+qzvXPHxYw6rhCWFzqipQPo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHArR0EzTDZH\nV3hMdUx3SFhJT28ycmYwUmR2NHRJUlZwUnF4RExld0xZeEUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp5SVByZGJUSXhSNlJaTVZIT3ZCTlBV\nVzZLTm0zWW1KV3BUTVh4SFdPK1RvCi0tLSA1OHVLTWRZZDFsRldtajlXNmxCN0Q5\nR3dPeUo4c0YrMWVObmN0NlRFa1R3CpvbTZQF3ylbRU5mi+AJLmMXheM8sTohOGaN\nYLCGeoYVmB0d3Lqfq1me4fe8RACjw2KOgCZTAzoAr5xxyl4eVwI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFzYmJPczV3\nMnp5WEJqdkxsU2JCOWQySkl2UUlVNU5jd3ZxVDh0YUQ3aTAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppMVk5UEkxVXd3RFREY0wwNzhMMU5L\nRUx5NzBiRnpiQS9WQWNxa2d4bHdZCi0tLSA0REhVSDdpRUNmRHFxOXVxQi9mREZK\nYklxdHhncGdMMWFSeEpzbE1FZXJRCorK2owwbsG5Fbtht3v8l/VbZxbkbW4i3tI6\ni+aQ72woGGJKZaM4zY4RfuKxrvVo65+5bWjVE4dy5E59+s4FpIU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlaGt5L3NSSzJ0azBCS3Zp\nOGtwN1lFOFJnd1lOSHFNUG1MQm00NWhNaDNrCndqRmVzaDdyOXNRSEJuY2N3WUgr\nRmgwMVFjT3I2NURTRnA5R0lYZkE2eTgKLS0tIGEzMVdlOGJSMzJyazhtd3RBeFBm\nQ1dEdjJ1SDVRbkNhamUxVUc0bGFOd3cKcusemf+ybWUIL1GPu7ibcu3OzhXHw8Z+\nLYZApbp42FTNQ6N4bO6W2/He8reuNcpCct+gTujCqBjyKtFmd5u84Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3FJaENzdzhUaFY1QkJN\nVjdTN3VSZlJhRXFQODcxQVBIRFBnR3NFeDNVCjkzeGRmUUE2MlB3VGJXRUloenpo\nYmxTQkdxblhCRlJFVHlNaWZBVDlGdWMKLS0tIHNFMzdtWk5aNUMrMTdic1A1NkZZ\nNTlIdzlmRjZzdEJkZXFmRXVYQStzYmMKZCy36upJmvXniHjWS8OkF4RWBijJuQq2\nuLQHr+aT0jSdveQP5Yr5ebhKwPL9HuGQhhDig46/3vuIzDZf9qdSuA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiTmZZR0JIZWZwSFU3Z1Ev\nTnRDRTNYOHNjVnVVWWkySHFPVFdLa3JSeHdjCldIdkc4WlJrdGQvdVBoVjhMWFM0\nSUZVNitWOFpBZE50d0ljd3RodlhnVWsKLS0tIFkxV0YvcEFvdTJlRHUybU1xcGFw\nTThxUTgycUMrT25RYWR1NzNjQlBKT2sK2s+prK9BsO7gDCG3cPUFB/Q5+ZJvpX4D\nkBj8kl07THkWdsx9lsAJRmn0enrEXvuxlMFC6mX1dT4XvmRx/jF9wg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxQkpPU0pic1RvKzh0VVNa\nRFdIaUlDeEpJSU9hYnkwM2pRNktZSENMa2lvCk1JcEIrby9kT2cwbHR2VVRHWnl2\nOG5pdmpxMmw0SnZvYk4xQkJVVW9JNEkKLS0tIDZjZ0FBV3dhVWdrVXE2RmlKSGVG\ndisrODJnSWg4YitUcjRMTzR6ajA2SGcKrTK937+OVG9WlHTMPM+IIdiauzgj+LxP\ndy61NXsGdtx5p1s1O77djv3QFStz5XlpvBoMpGmiW6Q7UFheaDehIQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRUV5K1AzM2s5eVhFRUQ1\nT1NJd05oS29mcUFwYldDcWhLMHladUptdFJRCmxrUFRVZ1pza2RXYlJSMUd2cytU\neVJGTlFqdUxkd0ZlYnBwcHJIQzR4bTQKLS0tIDhVUWg4cGdJbmhFOTErTGtYckZJ\nTXZSVlZwdlFMWUViYmNmRk1lZGUybmsKZbmg12i9L/0XK1f0Nxz4/MO4ytqxA+lJ\nHuAy+dChjUo9/pdhF/19gPvZ9O5RPkasfck3zk/rgf8x7R2LlI5WvQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:26Z",
+		"mac": "ENC[AES256_GCM,data:0nlSL/vjG51orRfvlm0gk6sQHBhPaMeZ2HNvTZbCnMw3KYd/UzNvw89s9/SvVN3/DaohUul/anhpj2qApKWsebh7/4jYFQbnIwQ9mK+Uua1Gvmx2MzmMEQGv4Ge5o9bauQ3yIdXKW1j6QbfBrxLhem6Dr+hv1NfW0IV1+aF0weM=,iv:p9tuVgZWK2Dc002uVHlUHKb6vNqAZEQUdEZc1hGTq2U=,tag:sL9xq38Mq+D6E1p1l6ir9w==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/nginx/sslCert/users/kurogeek b/vars/per-machine/deneb/nginx/sslCert/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslCert/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslKey/groups/admins b/vars/per-machine/deneb/nginx/sslKey/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslKey/machines/deneb b/vars/per-machine/deneb/nginx/sslKey/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslKey/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/nginx/sslKey/secret b/vars/per-machine/deneb/nginx/sslKey/secret
new file mode 100644
index 0000000..c6e2ee9
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:oBYzvVAeTRehxFlv7ZA5vHYqrso3Mj/2QI4NOFdy3qGFHvBiH8PzQAnsSkZ28OeGOy8Y6Wre2u2uXK254kQHGnvW1XzCOffiAdrvnu+RsIS1jBqA66EWCSTnvsCEkS/GvCQGXd4Sy62Oj58cPIYQk1EpaUgM+tu1wtMbBN4IgP1FtuNuAuXyptYhMA1i/aau3m3H0ZS61pMJCoqcPv8ATif++NVoJoEMAEeioXSiDG38cISeyDIfQrHCwUFa2FwfX5cyuyIzH4F6NpPb101CpZBKssSRRnltqKhfJE6NicH8g4GXSCj13yfXV+sv79ei97mOZ3LicEJRJTtaKjRlZ6QWLyUNw8U5y2KuwuZkr7bF3W4+UZvz/VQkPOfIo8Vf/8A+lXzwmWuC1nw9bGHAexDnXXgX3DAzPD3UO88HGICUoRIQlOaFXrMiwZHBUQ5sDYN80F2X4RCMlap/Y1uPQAOLyxkGWkd1ILTj2lPsaBwlOYI/p5lebRRXRK1TbW2dNLldQ3Pr7GNvGxX9EVsXjstsaHWchfMsHt82JzC5zBuXIv2HlkFeetAQdpvUhC4JcH2youw8aTs+h3DrJi5Oe4NttqbltLPWlxKhibUbUIk69SxK9GsQMUGT1olniLOOTD/QmsJh9gdhKCIs/T8TbY7MtDcIHnJIaUCxlOwW1wY2MMbbcaqxQT0SGbrLp9XCoPdani0Id98UjrkpNAZtbRTBNgva4verWbAAY5M7OfL2Mn5jtP2WuM8u24QjJ8xYX2ZoqyhZicWpRkK3mWGhiTcnsHswcFtKRKhNmBqWA6sEh1yVLZdiDSTPr3S3VAUtuUxS5cVB/PcJNDnpRfWn1vH4+v/X+nTSuvB4RgXePnii2n00Eat7IBGi9OAWfdGPxqeZjXNt6tqttU/zNMUi3t3MMPZmkg3nCCgX/csgmKZoArXUSzV1g1XoFnoqIo3G8r7Sg79yeC6+28o6tbHQIpIeE050HjmAk+/P3vDWaMfYZuJRnR3u1RyzMlRiOPqYdxR9rwLyPKeoEHknXqXtk+/WhEFuoxMNsO2BhuQYPH+UBCSTda/4C4WGpLmtsyoKiXj1EZ+ZDLZG5OmRIrHO21cEiBN5IPVaMrU6PITKGPIclM9ib5qiQlukXh9Y9CTlRrFixwL3Y+WSO9pF0hwXUQ9Ep2oMcloDHcu7Ug1OlGVoDQYCOT/+UgBlR/zqrP2W7un46Yz6YaH0nP5ewdyFFS/m+bBv37d2xIo0rC0rNL8xJ9oeVzLjxADsLQ49HbjZBYWatAQn1xKkbfy3yXqK+NqgTtOcwq/I8ss+UgHf/Z2rbJh26LrDBKpW1HrH44s0XVcQtjx6biWzuJYB4KuVjMK0O96quK5woyLp1nNircp5OfD3lHolDD5t+ZbY6EyZfn7ldqJL3sg8KTy765Ui6j2yqweCHp5PDA1VWRXrnSGQHEXpKSPuX2tcyLzYhD94tqk+P0y0rkzCX1t7p6YZAKYBC0cCriKOJO19OcGgsB2WW2wgBmclih3PUklBSSgHUOjR/0harbXhZZzkhT//PY9bacFxmP3d28aZcki1eayf0NRuHjovfTFFRgc05Wp/khqYgjXE3z3ucllAN8UeIZGYTHpZx3/UhvbBtuW5TyEiu69zB30eurYJHoCBeM2EowL2nL5zh5k/LKsyDPdWabVhLKCOgUYOf0CHlXJtoYPMpmx9t+yrz+ow8FJUAx5G8gttEnk+T1HisMMMxhmp8NGtiyzkG09LjgKYP+ZY3lMGgmadpRvJ8a8TnxJDuP2MhxN2jhfEtRW42UQDm2v8YhSQCyPY3IakyoLJm+mODQP3NkKQP8ISax1I9X/j0ZrnCuM/fbduATBk1PcRaj/8RnjsZMAbsek8JyT6kQ/nVNjftsL+neqKPvtMPNHW3WB34gCUEtY/grZ5kP2ITSqll34oWcufvcuLnOPc4svoG5GvpKZtDh6tcoJ2zw6DNNpSgHK/trfuvkU4NuvWiPbaY3yfPHDUsdeWBRw8/RIeb+bIJudEzi247cA9vvogW+aWCjcc+HMI6dITmVZASVH1L4QfixcEtTQj8zh5Dl/pfxhw0VrwhgkY3cXbezQLqmhaWImY5GusbcmUi18svIviVmMTQ2yoRbRZjIIvBhOUUeHkDTwaui/c68TPJZAQ52x68m5BtTEHwwBb61jvc+5x1VxGzsLW/ZS4XRXDtdS0dIxOxyV3eh3uCGh6IYRVnfdMFe1MIUA/iMg9AFnxXB34ppkRQ0o3kKbC,iv:IVmlGqUXSq8U6qeTRb050xsCznRbT9MUQkV+Hd9TEgU=,tag:gGz4IYYpRMS94ghJi58M5g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZnJtRzNwcnBHOVVXWnF1\nSHQ0K0dYR0cwN3hwZVJ4MWN5Q283SXV6ZUI0CngzSjVFYXBpRm4yWTYvZUVUcE1I\nQUEzVEtvSXhQUitBWmIyclpGeVZ0NUUKLS0tIFFrM29FZ2laUWJNS2YrNTVuQ2JL\nSXlkYTVyMFBIT3dQY2UxcXRnL0tWdTgKW69YXIuuMrWNDzup20yEZmYrKzUVxOmj\naXrmM8ZFEqmBfSzkynBgycnSyLhiJSaxR7pzVxTNPBwfsyo13TYAIg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYWlUTzZLRGx3eVlkMjNR\nZk1vYTZTdEp4VGtFTXl2V1pMYXJQQlM3dldRCnM2SUJSdFdCRmd3dUZPblBVYVlu\nV1dHNS9vbEhSc3FxWXcvT3k2UUpzME0KLS0tIGVUQ3J1NnVIQW5wRWZQU2NjcEF3\nTlJOa1pxTWlZRkc1MUpSSHZlMWpLS1UKjPocvt1FlkwtdDJg0O1hIoVH8wwXrURK\nRpvWsI+5leFQqmJoLWMpyyDcudgwDkkPHKH4vEWcFgD36yikGujuUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDgyQkY3SnQ4\nek44MlQ3c0hsT1IzQTY0UVJ3UFVtSXA1a1QzU3c1bmc3Q28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp5U21GNURQV1NydENuLzZrcUxjaXN1\nM0RPV29MRVMwSWNQWEVZRTNQbStVCi0tLSBnRzMrRCtNWEZzN3RMVVNYMUJockJu\nVlZZQUl1OHpoNXN5YXRYelpmR0pzCjk2dVeJKJEQrF9RTAXQoj+NRzwmh3/SyMTb\ni6epBcPmNY2mul5+cWn+zbeTtJbzrG1N5nCCdelymLroCaQpxig=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFkxcmo1LzdX\nVU5qcVhhdU15QU5iUUpHMkw0QytoaFdVcDlDOFBlUngyV2cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpHRnkvU3d2VVRrYVlWQ2pSRFFOQXVZ\ncDNjVklodTBUTkQ2MVVNd05Od2dNCi0tLSBCSlFuc0h3WGhuYlFFSE83bWlBTUtQ\neWc4VVEyclJiYWY3ODdaNHVTZ2JRCjkz5b+/UU5Tss/6IgRaiBE8iWm6BSiTRM13\ny6cyf/DkpXCR7AOcJ5ohdkPxpockckHm5Zv1vkrkubyK9F+zA7Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhjM3RiZXNj\nVHAwbGVReFdiYVFFSGl5Mm1aOHBQTXFPMjlQb0xzTExBQVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowcmxyUU1DOUU3NUordjRXWmlQUjIw\nQSt4RGY5WnJHV3RKSE9Yc21rTW1FCi0tLSB2WkEwdEsxWklUMkdPR0NCUktlUkVI\nYXlsSWZQRzFFRkpGZHN2OEhoa2FFCs9DBcbqmSEf4U2aMUgr6hwJTjneiclLovNC\nFom16JjYg3ZGD7QGGRrt8eUCmE7RqrQm1hGTt9TpiP9DG4UOzc4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3WVNobU1BcDRiSTh6RmV0\nckkrNis5amE3bHhqZy9HRlJKNG5QNktBS1JrCkdnbC83aE1lVzYva0UyU2t4Z2Nw\nYXA1M2NQaGIrQVlvY1pORzB6QWZ4OW8KLS0tIGFxMm5GYVpyeFBpbVJkemJqcWds\nb2poQkpyRVBLYS9UOVFUcmpRL3U0bk0KOZvRx9ruBT9yTMSFGiLH//du6XjZ6/7t\n297iyfWdHHESGn50KpZ2DpWNz3G8Zm26YMDJ1suhVtMbRImgO1nBcg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeWNRbTdMbHJhaU5makFH\nZTRSLzYxdzFHS3crcDZPT0Ryb29GaHVldUIwCjdYMXpUTzRxVzRGWm9jbTQwM2JO\ncnpMRndnOEFFTElzTXJKalU5TnIwencKLS0tIFh5bnI1S0orUHg2TkdLc0YvL1p1\nSm4xcnVhQVRONit2aWFwc2IxOUxHelUKNAhYAD6d6Ene9wIH1Q7OLWZcSPaMSdYx\nnhXWq46k5Omjs2kKDNGMkvEzUs0NgT6GuCiOepMXWTI+0M3DwDHnOA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPTG5XaC9YZnlPU2xKdUV6\nQm1pY2NqQ21pVHFuaVM3WFgzYXp1UzJzMG5JCkw0MHB5OG9lblJ0dGlzZjNxSDgr\nMUdsYTlPRWsrYzVFZnBTb3Q3UjFJNmcKLS0tIDdjL00wTVJJUjVzbzRQUW0vb0F2\nTVZwUVkwckVkWVVLRU8yR0MxclRWZkkKeD7U5cN274hrdWUQfYnvMyZyhMsyHHJj\nSNaLOqxwweebxTUDrF93aPtVBCUMIwDMRW/Ombc0FX+Ol8dXieMTLA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiWDgvUzEyOXlZNGtSZ0Zm\nMU5POHFzS1JCTXRLdm5nczBXLzBGSWFXdUh3CjdlVU1seEhzNGcrNW42UWY0bk9x\nTUFWSVRQMnNDM0htVjZsZ2FkeW5LZjAKLS0tIDlUWXBpSVhTM0EzbUVlOFhzWWFG\nU01VR2dMQUsvMHRMZnk3eUY5d0xHK0UKo7ALG9Z6EaQ1TvT8DpEERAHEeNy2Ycho\nwT3/Wjr8AdTpinGE39OCSsFuZ9htgBCr/YLFga4KbvQAsjzmPTdy/w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBITTAxdldsSVRwR2tsM1M4\nOVd3Y0tZT3VpcUo3cDZmeVpDdkdtNGYyNGhZCkhPeG9xUHFRcmNxUjdXOExDUEl1\nUENFT2ZtbHRiMi94QVFTMm1qUEJKVkUKLS0tIE9udTJjbkljTFBBOThrOGJPaS83\nTE5jbVdlUTJXVThTczg1WU5BU25CdVEKFpnFIYvkiT0kaKaTNgmWSBSAgP1vXpkp\nNu5IpCLao9p+p607UTLp1mD4fZiJosznSBRXZZMz8RYiuk007ZShDQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:27Z",
+		"mac": "ENC[AES256_GCM,data:cd6YOy7+JXuoy0/59UGn8DmjqL37OZ4FW8nuwPLIcdsmWsrm+sQjeljN/KQSuW5E5rLfFb5oA0dS5Q4+44mpDP1lmlGQcwb0VllPKtNTGX/zWXbgbfPOKbdKGaXiffwWXoHotc3Eldb3MzAbHR+wTEDelcyF2ro98mA8LUIxfTQ=,iv:s3A6prnaerY7oA4GJFRT1qWD0Ir3KIJTYTBCn5dBblc=,tag:ml+ga3K7f1jjrmRl0DEqtw==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/nginx/sslKey/users/kurogeek b/vars/per-machine/deneb/nginx/sslKey/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/nginx/sslKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/openssh/ssh.id_ed25519.pub/value b/vars/per-machine/deneb/openssh/ssh.id_ed25519.pub/value
new file mode 100644
index 0000000..67364fe
--- /dev/null
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIenrGmQ0W3/Ofgae7eHpINba0EwZs+BRP1s6ONAQ42P 
diff --git a/vars/per-machine/deneb/openssh/ssh.id_ed25519/groups/admins b/vars/per-machine/deneb/openssh/ssh.id_ed25519/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/openssh/ssh.id_ed25519/machines/deneb b/vars/per-machine/deneb/openssh/ssh.id_ed25519/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/openssh/ssh.id_ed25519/secret b/vars/per-machine/deneb/openssh/ssh.id_ed25519/secret
new file mode 100644
index 0000000..ecb9a3b
--- /dev/null
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:MXNXifd7bt6VBJ5wWBIHW3Lr35gK95Zzn207A/Bu6xo=,tag:2cAtN3kedis4F5F4g9XSxQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2eUZUNm83MGpZRjd2Z0Q5\nVWx4R25Hbi9UNHJOaFZvTXZvMUxsMEJHZVZFCkF1Q3VpMk1EaXdYK0hZbWNLcVVx\ndThTQnR3dmcvRnZBWUlPSlZEbWFtaGMKLS0tIExuSDgxREg1K2hES0k1Y0hGMU45\nMkpZMDNpMlVpTmtRQkY3Rzl2M0JxTjAKegQrOsArlARirLs57e5a/C5aLsON2pxK\nZzHy+ZPT+77ngtpQ29xe4dW847bZfaL+EAU+fGJhSbYdPfL33Ahh0Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4d1VDTmV3OTIxR0JGQ01X\nQ1pHT01QVzdRYjhYNldVbmNNQzh4MWduSjFJCnQ2YXNocU92bFNXRjZHRC9vbWVv\nVXNaNWdsL0ZWRXpMbE1jZktzVjIzcm8KLS0tIHhSRlgvY0tubjc0d2lNeVlKa1E4\naitxelNIS0w5VmJzM25uMERUYnF1MEkKAVrl+Vmea6qmfoqS/GpdjpuQVRdtcL5x\nQX4nNhxdD18fslgZg2S5lgtTzcKfvVo2QN1xtFVOBWzqr77bdsiX7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdsN0NSbDhJ\nZjhoeklFdkpyM2d3QnF5S2piVVF0d3JXdi83bi9jSDJCMVkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp2OWxlcyt3U2ZzWERlRE9OZXZZUVd0\nUW1TcmUzZklPUnNVdDZGY01wODQ4Ci0tLSBJb2FjSVJZYUxuQkFob0JpZXo4YnN5\nUjk5ZkM2MTZvQzhORXUzWGRVa0ZRCqsYozKAB8uxsAssqSAc8IGTrmPQQW/kGuhO\n/tageuzwi2yme5EyqGXjeRoc5MtNKSOAFyBJZChE4hzyJlo08Ag=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJocTM3ZVNP\nT1pwTHEvRTRNc0ZITWVSYUMreGcwR21ES1Z5L2pNakJka28gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpmQTlOc3grWjhCUys3UzRCUVhMbWxM\neEREc2E5U0ttWGFZYm1BMUdUZUhNCi0tLSBXSU10cm9jaENHVEd4YTVhNXk0Tm5Q\nZk9XUng4V1gzUEhsVDFFcmh0RHM4CnzzBJoFeyFbb9KNBiWCxa7QOXkPGxW1iE53\nAAjbLTAxRCE2vg0UmixxjzK2TqB9ngoJlNEBnBEc+NyKQ0QMKH8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEtzR2gxVHJE\na0dTMFFiMVpXMjdKdUMrNDBhMzdUVkMxUUtLUFJvWld4bUkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppQW10NEhvU3pScFcrdFl2RDRwZWpY\nZXZBQzhIckh3cUt3V3ZwUmZrbWtVCi0tLSAzcDBPakZFWmJCY2EzUERuRVlIS2Yv\nNDNTV0REbTZ2UU5EbnNwMGlSQ1R3CkkpXLpVauGI4IDEKKekwGbPJThe5uJPRu/6\nzmVp1VtUZ+UUs2w77suG+00a163OWoadafV5gbdLylRTlH9LzNs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4WVNrK1NqR2VCVC9PMGNp\nVG52SUlTYzA4c2NteDh1cVZmNmdOQVJldTNNClc4NXdZNlVhMnBQOWxjZmpNanNt\nZTFXVFFQU1VLZE1tNms1b3VzV1lLdWcKLS0tIHVqRnNNWXpxUENDY0dDQkJaRjVU\nUnc4RnYzTCtBSThJZU91WVlUQTRrOGsKnZhdlLVH3+NKEgi8124Og+7gOEr2SEn2\nKbFrUOor+XxKOvkZS+pPX4CoyJ13nkAMJ7weJQYRJpJoWRwJuQk1jA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVVE1SbkFUWW91TXp4VFdN\nazNCd0s3N09NV2lNOHV1QTdnTU5LM3hPNmcwClNkcGxEaUh6dS82bTRBMDZBcDhN\nNUxMVWdmdHRiM0pxbWczay9EcG40NEkKLS0tIFFtQnRkMm80cHcwU1o4dFVieVlV\nYVcrcWtaMHhRbUQrb05XOFgrTit0dnMKl/B6fFeHiTtuXbASgGHaf5I5ZnFyDlTG\nHxDhsCxvG/VSToP4NPkKgOHOHhcxMOiEA/Xsy2nGcAe0ZPtlbJPhDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRc0hTWVRHVGZPMURHV3pL\nODR2eVZYMlZLT1lOQlhPdXpRbmo2NFhXdUJrCmROTG0vWUY4VWlqOXZGNkI2QURC\nQ092cFA0OXdBdTJ3clZ4bldIOS95bm8KLS0tIHZoTWtieGgvZUVtTWp5OGZiTjEr\ndDhkcldmQUlnK25lYnRzemgzWHlXSkEKckXofqQL4rZWUvT5qAtx7tmOV8tJpHHI\n1TE1TxrUVgEM3xxzKR5BBTgNQrsT/jQcXtcRPzuocQFA2tfG+Y7epQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0djBYS0tRMjN6UHVpTzBj\ncDdXSGVyM0dDamVkY09rRVN0RDk1ZmFJVG5FCjV2MWNGSlQ1UVppa2JGQTRlWjZr\nNnBXVzNmbXE1ZGlJYXJtbXJ5VDd1dTQKLS0tIHh6SHd6ZSt1OVBNYXErT2ZDa3Bo\ndXgvTEZPMWFwSU5PNTBZQ0VtSzhidXcKA2VgfVzcMOzvfNNTM5x4E7rNUJAsHnwd\nDxVwlo83W9oGdKRP0Pe/Rv0zA2naNx1rOojO/pQjEfyBqbt5q7ZvEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJaE5zVlNCMUFQQmpweHY1\nZzhGaTIvaysyWHFXMTNPcGtNYjZzdVowa0hNCkllUzNEZ1ZsWDlZeDVlTS84ZEZG\nVXUzSEpoT3UzSDh3L2xldUlOa3BIY1kKLS0tIEM0d0dCR2N5OE1Rd25iZmxFNUgw\nTWZrOWFMajZFUEwxUDRGMlN1OWRpRUUKn/SPrYcTEo2suREXS+xjuumqNtTvM9jT\n926xgIazfwuDqhS2S3nRu57eGnq6RgER5+PMwMBlDeuogwYA0eTZAg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:29Z",
+		"mac": "ENC[AES256_GCM,data:wwS59jrZ6HfvyreIzoLVEVGCxGgKfPpvRJ6oXgJfYrzCUThZ76ZMDXvOQh/ajBIyy3jc8f6U9ADLhl/cgUzTzRqaKwI50hags5SIHI2mKfc//Nmj/kzcXfQv7AmpTOQ9cJclqxr44eiZmtkBSSFRmXqnsZg6y1Sa68rKac5LFlw=,iv:8uwbMD8+5ZRngjQkZsvnDIl14gSA+Ey0+wZSCMLIncE=,tag:Jlh02Zqd4qdtDpht3TqoVg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/openssh/ssh.id_ed25519/users/kurogeek b/vars/per-machine/deneb/openssh/ssh.id_ed25519/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/root-password/password-hash/groups/admins b/vars/per-machine/deneb/root-password/password-hash/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/root-password/password-hash/machines/deneb b/vars/per-machine/deneb/root-password/password-hash/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password-hash/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/root-password/password-hash/secret b/vars/per-machine/deneb/root-password/password-hash/secret
new file mode 100644
index 0000000..87647dc
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ZPqRTz7XK6AXAFqQ2w1F43HoKCkaIWFsJZsZ1rJVoY52rJq0IEnCaJmfc0m4BfJ4UFp06u+hAcUiZc7gNATbL7uY05gbERsiga0qLWYFMJjqjbBE+AMlUHP52bB9NC/04q6XF857mIpcXQ==,iv:fW5XtBggs6Th5Hk3UrQ/TRaHGBK5VkDI/eaph3fmxjg=,tag:HQwTCZLFfIJ/uvzyyzI45Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dGU5cFJaK0F2ZHZuVWhX\nRVN2c3JkWndNRXZadE5MYyt1UTlVQVRYd1I4CjdTVElPWkJvbVZVOElhb3RmL2dT\nSkpaaFF1aEZlTUdwampQWDhPd0gxN2cKLS0tIEc2OEdDZCthRHJLVjA0Qm9jTFUx\nQ3JkSXlqbzlaS2RHZFlnbC9ONVc4blkKYSigsVgARv6a3b1YnR7eb/b5GuENWgQL\nZwmKIZQkSLa9aAYujhgCdVQkB8s2GjP0YxiMo+mVzq7kqdg0QnRTHg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaHRnMTRQdmlIY0JPS0tu\nYzRsV0YyMW43S3BaWFhrbEhRbm9GSDBubHkwCjVkc0tocUZpNldqUUEvc0piRDhB\nQ1ZKeGxERE16QjJpRDhLQUxReGhYMmMKLS0tIE1Sam96Lzg0ZTNXc01saGllZlda\nR05BNTl1Q3duV0NpbzM5Q3VOak5KcnMK9MNvZQy68QEoFT9JIKGTdTBRS5XaoLIB\nJ3jFatMlq/5LucRrVPwdkQARbMv6ZfdCJaSMKnXy5j8fIXoKdzahvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHQrSElyUmgx\neGRiYnVkVG8wZTlGR2FRVVBrY0I0U0hPTm5HWGFZdFZ2eGsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp3clN0Yk1LWFFVQTVkbXlkcUNZejhj\nQk9xRHZ2b24xOFFkNEplY1dTMVdFCi0tLSBuMGIwQXE3UnJ3a1J1SS95ZXNWN0tS\nSjBaQ0RPOGF5aW1ydU1KZ2U5RWtFCsXg7EBgfZjIPxc6lxwUATGQ/Oa1YnrwTZrV\n1tcREU6ZF8oDXcPxJRxrdTQh5gcoz+VLumfnGr7kOEg9A9g4qP4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENsM2VScWxX\ndzk0cnprUHM5Y3V0ajZvSzV0QmpRRWJDSm9Md1VVRWN4V0kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4UWpLcnBQL1NvUDdIRzBKTFE1OFhE\nSkFLY20rb00za2VDNTU5Y0JHNGJRCi0tLSArY01UaVRhYXBxYVdZNnNMUUdEM01O\nbmpsVHZLcXVYTVRDYU5qckdhb1lZCskK8D9mLBNWn9D2M3w+qdIYqClhAhon4U/8\nj0B241nF95EX1NeePYYcAv73UEhBg5DQpeNTlS5b4GcbDkkP53g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRQLy9tQTR1\naVRKc3dWS2N3ZGJEUlpyMWhSNWdlNXBKeFZLOFUwOHh3ancgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQWjUxV1FXUlo1enNlaTYzUCtKQnk5\nYkpuam8wWTZ4V3l0TkpTOVBsSGdzCi0tLSBNZU9TaGpnb0xjdUUwUTh4WFVMeWdq\nZWtReFV6VzRuaUw3M0FWR3d3NnlFCnAt8VmVAl77WLVFyohkzl7HGO2NXReO0vaQ\nuiUJ1BMa62fiNZE/ggosg5Baeo3FnaBVrhOUcRiPapvtG4t56QM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWdnBnWG9xWitOeWpyTHNX\nTUdGVE9jVWQ0ck04c3JheFE5VnBLZVVYWEFrCjhkZ2MvakhFWFo5QS8vNFVoQWRN\nOHJyTFU2UnhKQm5CL01CUkNHTGhiLzAKLS0tIDRnUkFnYVlNTTNLZmVnYk8zUjl4\nanlCZDdvR0NFSmNpbjFRU25HUmlnOGMK/gryOwrcU+3S9tqPO8OWMPHsAz17Zm56\nW/5zOv6LypmwasIsMSeEhcw34xgSirZ2rXASmuChPteqPhyewZwLSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNkQ2QTA3Rm5JOTAvbWsy\nNEp0eGVGcGhxaFdYY0pwMnR2MVZMK0VRVmtjCjlwWGowa3ROWjhVN2ZVTUx2bkNq\nOTJJZnJWc0ZxYlY3VldlUXpUK3F2bTQKLS0tIHk2UFZNNjBMUURMR1pkaS9uMnF5\nblpkTXpKZTUzYk1COVRtWnhlK2pSM2cKC93lKw2l0AZeOHt4ETvxLsNdhqsCpX2A\nULL2pRe/zg/kYX12fKMiBojvx2AbjxjeYeDUMmubIvhCSu6mltl8DA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVUttZzdxQzYxaVRXRGtl\nd2sxVHg1L2w5RVVIMmdCdEhSaEJDeS8wRFZVCjNZMDFCTUoxVEFEUUM4S2pCK2VE\nUFBHYzlaZ3dCVlN0emw0SXRrRVRUYUUKLS0tIGMvV05qVHo2TXo4WVhYNUtLdDJS\nVmhZRndGQzg3K0p5VVBLWWFpaEZtcmsKpPv984PJ0VYaZtTDi0jjZtGSQpHJOIrF\nONBZu+otaYSSYQRHa5+bFdV3j0/f42+1fkgpwsezdZDDq/xqFFPEEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1K2ErYnBFbHkzNGZtd2VI\nb3ZQUDVTWk1RaDNQRWR2ZDVsZ01CVmprVzA0Ckl4cDg1cGErZWl4N2t6UTg1dkdQ\nM2g4b0N3U01aTXR2YU1lL1VjR0loVE0KLS0tIHdKWkxGbmhab053Y0hSRDJtQTkr\nUGpYamRzYXY3SjdyQWNZQjZsOXRYZk0Kk0fRsV6H/RTtPOikNmL8oaGCczyJ5y4M\n38cwdwPE056C4nSQFVfmHY5iZkSyYuxZVewpyQylvTb8kTqJFTGeMQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxK21NYlFIZnVKdlk4UUI5\nQktYd2c1SjNTZEkwWlIvMDNVRDNLQy9Wc3o4CnUzN0tIeEJLUXJZK1NvN3VSMWor\nSVc3SWhUVWl3MEh3R2d3RHBZRUxPeDgKLS0tIHhMd3ltc1BjY2pZOHp2czlzNkkv\nQlpXZ0xDS0VUMTFMTFROWmRuU2tob1UK70vzhOuLHAXvDLooQUOF0ucQby8d1J1z\n7hsSZyTzx1FfEVwS3p2x/0wb/63MNz2cZFsm4u+jmoN5LhHhntLGuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:32Z",
+		"mac": "ENC[AES256_GCM,data:POB4lFZ9Fm02DeZshByCMcn8EVU3Drqm8vpaz5DoZqUXZDTmsl1vXFKmyZNuRLcn4fcYBIsylPU3iqDO7jdQ0RKqyUZHV3wNrsh8UmjEq+3/PDOs/1DIw1kBAzxFYX2idlVRUSulIaZi6EYt3PC5nR/GbMVDqCO0Tm4D5EGEUvM=,iv:ucBM38t49lyqO3nBCSt+vNItWPRPwIqUaJovMDWQ6r4=,tag:GfNd5Xja82MVusN8JklMjw==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/root-password/password-hash/users/kurogeek b/vars/per-machine/deneb/root-password/password-hash/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/root-password/password/groups/admins b/vars/per-machine/deneb/root-password/password/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/root-password/password/secret b/vars/per-machine/deneb/root-password/password/secret
new file mode 100644
index 0000000..cfb6fef
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:f0VLY1Z7FTf8h69i5vQshLKeXCY9EmzwJINwQsJxFU3vNsin9TXURQ==,iv:PzKPY+OKQOh9xlrWiIh2UC+KAzy1I2WEMTiCu+bBrwI=,tag:yTw0VeC3Vm63RWCcHC+cXg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1QXVUSnVSMHg5NURGSWFx\nMW1OVkdDVldrZ2NodXI1K0pxV09FemxhTFhNCi9BWGphWTdVOXdNYVBhT2dBYXBr\nM01WZmJENFM5TXdaQVJJNXNOTnZOeDQKLS0tIHZpQ3ZQUHB0ZjJORXp5N1ZwcGxI\nNHJQdzQ5QzRxWXgxQitJS1BHN1luQkkKkDrzzwHkfvVzA9gXkmIAoOabsLqaXJbM\nx2vm15YdDKMnqgu+FNBXl8HLOl6tqffisz9p89hxaCSgEpm2K4Z5xQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCazhmcUdHQXBISkFsS0pB\nZzFacFVyYzhvK3lxdkdzSk1hY09MVThyQ1c4ClI4dXpPL2U3djhZa3hPUS8xNC8y\nYzdZTkE1RHdMdHczQTlNRGVPamQrcFEKLS0tIEl5dXlSTWlNbkx6c1RtbFdBM3R2\nUUhPajNvZGVuZXpGbHJNUHBTKzIwdE0Kq6MYwtySC5s/sy2YbXepUO7X+KHHZd0A\n4y+bxrI1xsvQ+V56GmljuZVMRuO1JqPlO04mIfdEVWwepcY/lTljdA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9ZRk1tTkVu\nZmQxYkZoL2t0cXVNZ1ZybmlrdDk2YTR3TjJDWUVVdGUxbkUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDWGVqR0s2ekxLOGVaSTliYmFSN1c1\ndnBFMnhiSzJyeHRpbFZldk9RVGlRCi0tLSBscTlkSGFaVy9MOFpaSE1xZlBmTzNE\nN25aN2RwS3dJZ1BrSytIYUxrdWQ4CjtmN1yRl0KOzJi67D0trKe4HtPNFFblCG79\nmhVtu6GAlvloAUUFrN98Ht97LgXha5INvfvgZe62QGoX3vMisvo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGRQa1M2V2pj\nRFA3TVVNR0o5cEhUT0thSlI0RmExanNEa3VpY3NZUExtZ28gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpDTXpabUprVFdEOFJydS93M3lMaHBh\ndUo1TXlkZTJqRTlSRUl2VDBwU3dNCi0tLSBnMmJBUG9NbFFYMmhvRmZDNkhaaEVl\nZVBoNTJnUkhyek9oUnkyTVVHV280CuK8ThcHV+k6mVwYP63NnGBAR05rFNNbcVW0\nBbYjKvQu45nqDebloxFU8y+GmGh62wvC7L/I2ETbTbkYtJ5yYNk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHFIU0VLZHJX\ndTlFSUhaRVpRY0Z1Y0YwVzB2VHBlUTdpcU9BVlE4SnJTaEkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpBTW5RaXI3bm9QZzUyemlMN3dBRzBj\nK1JqbnM1SklTN3g2akplUnBBZ1FRCi0tLSBBYUFXcHFvQ01xbzRFRmhjOUNJRDZZ\nQUdtZEljdVRmL3ZvLzYzT096RXBNCh7Qy687a7EGim7H3304zvFavWoStOChq2P/\nl5lueNCpL+a7AMFN8Ow49zFrtISkdnu4a3Z4cpbapzd+dfO+eAU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCV1E3T0x4dWdKTEF0TFcv\nMkkxQks4V0xuR1duRXh2OVg1eUsyQUpDQm5FClB2MkRjc1lvQVdnUTdmbXdMM1JN\nK05pVWQ3ZWRwQXlFWWVYRUVzY1ptcTQKLS0tIEppTzFUK2NXcWtvemE2bGtvekxV\nblhySDl3SE9vOVh1SGhOVVE0SUl2c1kKuzARyq98ah08oS14HQmU5L2p/cJcWmmA\nuPiuJGjKUXUYF2ssTK5Tfs59szDjGOF78OzJT3UGhVQneUp9rMJ8LA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArRFBDeXFwRGNzREJDVGRq\nclIzeE5PTWprakZIWktUUlVXcU5VdXpEbkNvCkw0TFZoQTZMU0FjTUhETkgwVXpq\nSGxzOUM1SjBtS3JsU2RESGM3Q0FXTzAKLS0tIHZKTmgvSE8xbVQ3V0JSdk5SU3g5\ncjZKaWZ0ZXIrVXdFSGpKNWFjM0ZaWTgKZBo8U8wx+oOJQKOqSLyKtPyZIGDvyMK8\n7MX+XId81jO2kUi/VSGb6rVf8d4gbWfIliJKBufOxnesrxzdoghoFg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YjhwR1p1OGlPMTgrbHJ3\nT0ZVQWhkLzgwSGlQS2NobHNPczg2bnd0eHpBCjRZRzhHOVI5Y24rU3lCWGJyS1Zn\na0tUakl3S1FKZ0RBeVBob0c2VnpXYlUKLS0tIGtDUHpKc2JWT0hpS1Vmdzg4dTRL\nRnQ2MkhmV1ZEcTV6M0hvRS95dElsWFkKRCqG9YkWEtykNDqnbuE+zgyTMtzDewsL\nPHq3q0FoYZDe10h73BWj9CkemQ7nDjmY5pzbT2IMmQ/xEFVl76Mr5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuY09VNEpJUTltLzdaWWRL\nKzU3NE44eVV2MGlzalR4Z010TG5sa2YwQTM4CnczMnRLTXNUWnZLcmVKMjltbzZS\nbkxHQmhlUkVyNkkvdXdJMjdBL0ZpWFkKLS0tIFBmb1FyanRIdWFlLzRla1kydDY5\nVWtCN2lRbHlhYkhQLy94VGpjR0dPQm8KwbFZCMQd4kyLSzUQIJ1ZSORITy3x9iHS\nV7d9eMbZGuDC40ogL25mnZlT/ea1I7VJtjt53BQU7Vw0PqZzKqQsQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:31Z",
+		"mac": "ENC[AES256_GCM,data:swu12oRNpnw3YN1235n9AbWgTvg7kKV1qcy+FB6zBHKipbtMTbWo4+RPOmR++pOswo/96OIC0C+GxrPMQR6+bVKwNIuVD3psk4cc9WRg9EsI8t+u97J0lmN/cnPfq96Q2OIlz13NMUxSFpHGkLOViNDLDu6eGpj6qc+v41d3tCs=,iv:rQkVV9MdKT8MSGaErBqm15CvdYP1rZpeGonx8pr8t4U=,tag:3R9wVQld/Z4ysWmBOUHBfg==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/root-password/password/users/kurogeek b/vars/per-machine/deneb/root-password/password/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/state-version/version/value b/vars/per-machine/deneb/state-version/version/value
new file mode 100644
index 0000000..115ab7a
--- /dev/null
+++ b/vars/per-machine/deneb/state-version/version/value
@@ -0,0 +1 @@
+25.11
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hostname/groups/admins b/vars/per-machine/deneb/tor_tor/hostname/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hostname/machines/deneb b/vars/per-machine/deneb/tor_tor/hostname/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hostname/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hostname/secret b/vars/per-machine/deneb/tor_tor/hostname/secret
new file mode 100644
index 0000000..2ccb6ab
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:dY4sE1y28DKMWG+l1SvmI+1P8SauAZt9DCYUM9LGZROeXwHwUTCf/r2X0K9q76okUtStfrgXWIKVJG4BzvE4,iv:pwxP2B0dh8S1tX3UmmZMjYBCxFmrJAXJFSiH9bkkxW4=,tag:QWxor4WNcrfkfVz/mCeBRQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRlJuQzZrK1k0RzFBa3Qy\nbWJSRlMrSktqNERSYkJUNDBjNEhURUU4d240Ck5NSFRIbGpxODV3TXZwYklucXNF\nckdyUmp2UmVtZUpUTGlueGRTQmFIZlkKLS0tIGxqY0dYSTN5Nkc1NUlOKzNUcW9r\nWFJOWDJVZjJjcmRCSVRkWndGYmZ4U28KGy5/C5iCyn4Pn0dBWAuyqVAj+oQ0rf7x\nwrG4tdkcZX9tkL7fZ0pvSEwdRbharrlVGyA5tYby0UsWxZJfY7sTig==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUzhUS3ZkczM2VWhoNnFZ\nV1ZWSUsvR3h1VHBXUlZTRCszRElFcHZjbXg0CnRUbUNKTUFnRnNRWGFMQ0YrTmJC\nSDlvM3Q2NHhTQ1FzSjlJWURXQUdEbkUKLS0tIC9XN1hwNGNpQlRaQ295VTFONk1C\nL3dGOGJPVmF1RG9LcCttM2Z0M3BOQlUKid45h9SIBv7uGV0UzosjcZIEV2SeIqIs\nASwWUJQSYCptgYn553FCo1V8HJ22y4btUz8NHDUJw5UWMh7KV+O1+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExoUmhUTnEr\nMzFRNjc3VDcwMXFvaFpScnMwWEQ0dkgrNzhBUTBIellSMncgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4QjBsdDAwYUtqdUJzQ1FOcFZ5YlBO\nY2dTNmRSbHkveDhhZzJOQ0xyMnJBCi0tLSBKY0FQaFYyMlJtelJjY3Vkd3ZEbnhj\nZTFaQ3NTQlUvYzE1WXVGa3Mya2I4Clipzf/k1emUX2mob2Xq6Z7NbzXf8z59NNNZ\nCgAKye3T1xbGv3/NgkVMgrkdrfYN++1aA6rslIt3a49K24lpctA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFoM3dNNUV3\nc2NvM1cySWs2Q1E1MC8yUXRwUkdMdXRBL1VrSWVsWlNqWG8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphRXh0UGhydGxyQ2JPOThPd0VjM0pB\nd0ZXUjBhV0RpaEJiN3ZLN3lzcVJvCi0tLSBncEN4Q1BaUzErUXVHVU1XMkw3MGtV\nRmtIMFJnK1VMYVJScVZoeW5iNXVVCq2Bw1Tx9cTM+6XPupnc2S7YygRndozHd2eo\ncX/DPpZibawuIR303cwdGvomchBzJ9w421TmKNen31WI/EgDA+s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG5yOFpGbElI\ncFhveVBuRGZoK0NRTFkvVUQva1hZZFZKcEhzNXNOWndSem8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowdkJDckRsRHBiM1dKeDRJdWZmUzJR\nRXBSNUFOOW45bjVYZ2Q0REUwUTJNCi0tLSBUNFNuUGJoRFJacitiM0FISTBxUTVH\nMzl1TG80TEEvcTNobUFMYVVFQ1U4CtMb8lV9l4PJXaPBIRw5QwRESREpjBo9a6xo\ntv50dyyJ0lDCfPITVIlpFJZfXah7XieE6DudPqWvToVquvBV+qg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBma3RPWWJnRENXQTV5U2ZH\nd01HTTVLb2g0dlZqcS9EYU9WYWlxWi83UDBFCjVyWUtUQVhBazRPVW0vWnVXck9S\ndVV0aHpKZVRyUlhtcUs2dkhmTDV0REkKLS0tIENDNkZBNkthcUc3bkVNZTdKNFFj\neVJYOSswbnhOaW41ZG5QalA5WjNxZmMK08fVlGEQhPP0ihaGBat8FELXO/PRprd7\nH0/4g0hBS99p+Arn/avEtA2uojd4RWNJsvaN4Ytrfk2I/SOQe+/2jw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvK3JpNWZyOUlJR2Fsam9T\ndFJFREt0SElzY1JTRGRzQ0dsTnBMQUhDRWxnCkNUU21kUklXUVcxWU5xdEFMTVg4\nYWhrMEl5bHhlU2ZSZWRuK2UvM2xyTkUKLS0tIGR0dDVmdHlmbys5ZmVUcUVlKzFT\nNnhaUU1rSi9ERFJYY25mdHVVMEtRd28KpyDJ/x2dEpcJR78h5NwQfZa7Brifu178\ngKS+o0/ZOjow7OzXnQmgunmEZG34iZEzBeK9B2jvtdVcF1EFbiyfbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhK05wUWw0Nk1tVFQ5QlV4\nS0lxS2F0cjcrdEpmbmFJbDNaUmpNcUhQZVc4CnFtQk51cUVqazlidVVGM1BlZUJ3\nV21KN3F1WDhMLzNyVmYxTjBXbW8xbG8KLS0tIDFKeXgvUmdMWDFrUG5YNkhhcHZ4\nbW5GZ09OZUY3bWVVVjV4NW1EMm90M0kKgOPOItQZzCKFm/ky3P1mehpX2/jx5uIL\nPqR3w58BpMdQDQqqdk623rJ3CNqau+UuBxfaWW6BchCRzz+YAHkPXA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMR3QxVjRwVnFBeDBOc2xv\ncGprWEI1bHh4VHZjMkYya2RSSGNZR1ZPZzFjCkczWFBENFJ5a2UyQzZvamVOdjV3\nMjA4SDg3MGVSWWpMeU5keXhJNTBZTmsKLS0tIENLd25Ya09NMElKazg5ZG9yMkg1\nZTkzSzZ6aVhzemRvYS93eGZMbk43czgKmW8CQ+qQ1Dl6GhYmt60fBOlkaOLBEYzb\n4XM/JzVybB+x7NIWisCdE57CAqm6prij0SpPbAwfCngDRVHr0IZ78Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLeTBFQVo1V0pIMEljelgx\nSjIwcW50MlBUYVdXT2o1SFNaenYwTElCUlNvCkVYaUt6L3diRStZalZzYnk3VWIv\nNTFnUnJBYk8vNFZJMXE2NHYvRFJlZ00KLS0tIHVYRkpHaWtCbWNuK2lwbDR4eFBk\nNlpUNUdQUTgvb0RUR3Q3N3BuTnY5enMKB0GN9lC9u/BN04z/QCXo33+ME31reSrT\n5YQGcyXZ4Q8mvLDLvEk4na4V6JCDpM36cUWqTa1X5idfuRCESrHF/Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:36Z",
+		"mac": "ENC[AES256_GCM,data:An1uk2D30xGVlkMZdBVqAEIpX4kMXg8PoN9a99VLq+yvZBJ8BcttBiRGnfYiv5MdR/PxhcvuWQrxYN2iyggVuu62JJtK6uA3SazyBcUXfaSQDnCV6D07shAVO9hfgCNwYfjSSmxMzdrBzfDlaBimtPpH1eHiNMqHL5rAVN4baHg=,iv:eZMnsbs/9m5pU5XoyYpKofxytsdAO5KjpFZztiXatdM=,tag:ldXC7GhIieuOhGzEZvGZ0g==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/tor_tor/hostname/users/kurogeek b/vars/per-machine/deneb/tor_tor/hostname/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/groups/admins b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/groups/admins
new file mode 120000
index 0000000..6765aa1
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/machines/deneb b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/machines/deneb
new file mode 120000
index 0000000..b8f3750
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
\ No newline at end of file
diff --git a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/secret b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/secret
new file mode 100644
index 0000000..143205a
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:L1G2GuClWgTofEeOCIKHJ/nndKcY7UGbrnbsJGUrvYCd9/okf3YTQ/fSruhg+2UUYyW0/qllc6iNSOx+2XfTZE3GW6FU25Xwmo2hhaFtBLnpMEQ6z3GXmyfQgFgOTvOk,iv:d4tnvovvAoj6bJadyUqxM+Kd918tUcX7a35z9ei5YlU=,tag:mbiHV88gp06m0lMhSW0GyQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaeCszakVIZ0x4QUl4dVh3\nM09mT0J6VG9wNUVBdVU5WnJHVU0xS084ekJnCkd5SkltbTdoSmd1c3gzQ1E1dFFP\nUldnRFhnaE85SVdGQ05SOHhwZjRPa00KLS0tIGQzdXg4RGluMDhGWEJPSnhvMDZt\nSlc4OTluOGN3WXB2L2tJVWVyVlBtTTgKfmUm9HKsc3S3FT++BzXtFP7pki13NYZN\n0ukG48J/G/Wjycls+VphuMdRWfouXIWmrWoBUHR5VlopCUqbivN86w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRUVJHWFphZUpTc21MRHBE\neWJUdStFcUJvb2xTSDlibFl5VmV1QUtTeFJ3CmRqc1JNcmczZG1YaEZJcll6bnQ1\nNjN3K3o0WG9FSm9Hdk1FM25IQlM3RlEKLS0tIE43emsxSkVhMVcrMHZSYnAvZElD\ncHIvenIzY1F3VXJ4L1pyM1JBQy9kSGcK2z3bzo2JR21CNYqv7HLEgACu3HG7gNrH\nzyo/nd/hPNhg7DL/Ru7gizqaV6SLMYMcFyDaOh/HpdvVyFeI5/iong==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJnaGZYTDhT\ncE9PVDNnRGV5a09mcytiZjN0T09jbzRSWjVYZXBLVWFyejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQoxRkk0dmRIaUlGRCtwdGNKYlh2TnZC\nMkxhZElJUy9uSmd3cTRwLzFOYkJ3Ci0tLSBvZ0hOMG0xSy9DcFNCeHpkV0d6cmxt\nb3N4YjQrdDJ6WXo2MHQwRk1HV000ClsSymO38UyeZt8bSfcQrLF7fVncuFxMjl72\ne4+8MyW+6XT9rZi30MeWZO33WBaM84xldZU7hSoP3/fqQWsKqbw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtnTStMNk9R\nOENKRHNyYlFPZmdadXJVUE4rVXN5OVgzZm1hRi94RE5wbWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpPVmRMbTZXRFN3M0x1UUUxOG9mMUl1\nOHpiQ0FIUWtUbytzOWRhc3BlUkJFCi0tLSAvVTlJRXdXeGlZR1RONi9qclNTZytR\nSnJsamxBZUt2djZmdStPWE1xc1RNCuThugn6FqhC+KvwlHtZ2GzCKi46Mjn/EGqu\nvWUM82j8wyyGlVAShS7ghqCM5f3hYMWpL0oc7BDieFfLAYZGr9g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGp1MGtVSm5v\nYjVTYmlKeTM5QS9GVXltMExpTyt2M2Z0d25UNWQ4NllrR00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpKVFp0NWxKSFlMdkFWTFFIeldsSnU3\nTGtPd0xkQjA5M215WnNBd0Fhd0Q4Ci0tLSBNbXNlU0llcEwxVWh4TTZ6aDY3TkI3\nWEtPL09vbzRDNk4yOU52eGNnc3U4CiCGoptbMvSi2NkOgeSV491bJ5OA6ZVZ986w\nwe9niYG19b9nPpRYysEjXwOJ2nr5tiU/IipK1Vd83/yN0As6mc8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyQk5uNkFnMHAxRUpEaytH\ndml4aDNkZyt3S0s0dXpVdkRSdjZmc1UvZENjCjgvSmdhUVpZeGFneFJvRnlVVGEy\nUWlvRXd6andiUWVVYnlDcHJXcGpmRncKLS0tIGw1anIvVm4xTDR0b1p2V0g5eWZH\nNWxFY0NDK2I0K0p2N1N0SWpVQTMrdjAK42lDG/puBL52LDzjIIumrF5mpxxAWlB3\nqMc+ObeRxFIenII/6qf8q5xM5TyWTpb1fmobK8lxcbokWUP9dua+8A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2OS9pMFpBQUFSSGtQZTJR\nN1U0djJBNzE4S2p6SG16NjRveTlJRTFPa1Y4CktTa2ZHVHhKYXVRMytBT1BkV2Y2\nVlUzbXErZi8xeFYySE5nY3U0TUpVVFkKLS0tIGk3eTVyUm9VSVpqMlQvOUNjTVFl\nNEM2c0ZJZUQ5SUZJZUhidWZmc09oSmcKjzGQUZaUcxWOijiIvUwTS1yQHGsCkxNz\nLs2b7XbzGrvDcLTb4G2hcgMvjvOoL4qmab8AXKlQSkxYKej+ZLZHIg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMay9wSHUwS1hsd1MweEh2\nSFgrc2x0dC9QMUI1ZE9McmFPb3NOK3cwMGlrCk5aNmtUSEw5dlhGM3ozWUR1cmNR\nSm16N0loQ2ZTK3ViNUJOUjdqUlg5b2cKLS0tIEV0akFJZnhndUZBWUJKOE9IVDBy\nZEVTeWUzVC9yU0kzKzE5cEJSaE40ZlUKGKxF5emnJx6SOZkYs0Bzx7efuKLkGHNP\nYzJnJbl3lJFRk8QgyCKSEsf0iGI9bPzgDNsZ+CV12EMS+iPoyegwMA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyU1ZMdFhqb3ovSjczbXVS\neVFGaXpJbXZBQ3FjL25tbllKQmJrNHY0WXdBCkZndnBJdzlyOHBWRmVHZ1dVT2hK\nTy9xUXZmSXIvMGRmTmxkWW13aDNnT2sKLS0tIGZVL0hGVUxXeDJvTlBBYzJwZU80\nWnl0bHFEbkx4dkdjUzRSVVVyZzkvVUUKN8BQtlvTi0+6xDHaKz2AEN+wff3hOylV\nc3c2QMuBZQCDUwd0fv2QDIUcxzHuQFouJi/ndVVXh95kOZMKQqYXXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDRk5JUGxnOTlCcmRlV25V\nMTBIc09TOVp2YWQ1VDNuSVAyVEt3ZFVwSlVjClJwMEsxNHlZdkZLYU1yZVVNcFcr\nYkM1VGREc3lmZmgzOGluaUJFVUJod3cKLS0tIEFVT0lWVHorWXdrUUtMbDdneStO\nOTZNa0JlS21CNkZzd2NnMGFuejZJNU0KII/LX9pYn9TnlawLGPcr24TGuAmKU9nh\nnl7d+WqHfo5UFxPOgElen7CN5mwx+IUESCABYC97cuVcivY43mzgxw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:38Z",
+		"mac": "ENC[AES256_GCM,data:wiqTb4O7ghmYAVqSeTj7TfFCaZfG7fbOMhgzvNrzXKb+XDbP0pMc6rGrgenIcyLgf8qJtEADTbUJ6Tn3SP6XNwx+0jAbfJ3tOiR2oWpzBVAY0gZPMjJNRkeJ8+JhUa7VhrFbKMy4wkCilL8hR9XMSZhGHrG5Uz2xyQFwGWg/GqQ=,iv:RkXn2jobOy80v3E1qwtvrZpIIUDj5BATPtD95gzjXvM=,tag:pya2xtQEi/tU0TIWGw5u8A==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/users/kurogeek b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/users/kurogeek
new file mode 120000
index 0000000..970aefa
--- /dev/null
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
\ No newline at end of file