mob next [ci-skip] [ci skip] [skip ci]

lastFile:vars/shared/noreply-mailer/password/secret
2025-09-26 12:05:30 +07:00
32 changed files with 282 additions and 441 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -2,4 +2,4 @@
 # Ignore build outputs from performing a nix-build or `nix build` command
 result
 result-*
-run-vm-*
+
--- a/flake.lock
+++ b/flake.lock
@@ -136,24 +136,6 @@
        "type": "github"
      }
    },
-    "liminix": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1760426231,
-        "narHash": "sha256-r8c5PKtsxAvtQ/k17GH+WNvP47Lr+AbExLMPdLtvAKE=",
-        "ref": "refs/heads/fix-gl-ar750",
-        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
-        "revCount": 1574,
-        "type": "git",
-        "url": "https://git.b4l.co.th/newedge/liminix"
-      },
-      "original": {
-        "ref": "refs/heads/fix-gl-ar750",
-        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
-        "type": "git",
-        "url": "https://git.b4l.co.th/newedge/liminix"
-      }
-    },
    "nix-darwin": {
      "inputs": {
        "nixpkgs": [
@@ -225,7 +207,6 @@
        "devshell": "devshell",
        "flake-parts": "flake-parts",
        "import-tree": "import-tree",
-        "liminix": "liminix",
        "nixpkgs": "nixpkgs",
        "treefmt-nix": "treefmt-nix"
      }
--- a/flake.nix
+++ b/flake.nix
@@ -21,10 +21,6 @@
      url = "github:numtide/treefmt-nix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
-    liminix = {
-      url = "git+https://git.b4l.co.th/newedge/liminix?ref=refs/heads/fix-gl-ar750&rev=3f1f7c08d440130cce9262a93ce78ed7969d93cd";
-      flake = false;
-    };
  };
  outputs =
    {
@@ -42,7 +38,6 @@
          ./shell.nix

          ./machines
-          ./routers
          ./inventories
          ./modules/clan/flake-module.nix
        ];
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -1,12 +1,22 @@
+{
+  inputs,
+  self,
+  lib,
+  pkgs,
+  ...
+}:
 {
  clan = {
    inventory = {

+      machines = {
+        rigel.deploy.targetHost = "root@rigel.local";
+        vega.deploy.targetHost = "root@vega.local";
+      };
+
      tags = {
        glom = [ "vega" ];
        b4l = [ "rigel" ];
-
-        fax-bridge = [ "b4l" ];
      };

      instances = {
@@ -50,67 +60,69 @@
          roles.peer.tags.b4l = { };
        };

-        yggdrasil = {
-          module = {
-            name = "yggdrasil";
-            input = "self";
-          };
-          roles.default.tags."fax-bridge" = { };
-        };
-
        pocket-id = {
          module = {
            name = "pocket-id";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        nextcloud = {
          module = {
            name = "nextcloud";
            input = "self";
          };
+          roles.default.machines.b4l = { };
+          roles.default.machines.vega = { };
        };
        stirling-pdf = {
          module = {
            name = "stirling-pdf";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        actual-budget = {
          module = {
            name = "actual-budget";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        victoriametrics = {
          module = {
            name = "victoriametrics";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        vikunja = {
          module = {
            name = "vikunja";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        grafana = {
          module = {
            name = "grafana";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        pingvin = {
          module = {
            name = "pingvin";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
        paperless = {
          module = {
            name = "paperless";
            input = "self";
          };
+          roles.default.machines.b4l = { };
        };
      };
    };
--- a/machines/b4l/configuration.nix
+++ b/machines/b4l/configuration.nix
@@ -1,7 +1,7 @@
 { inputs, config, ... }:
 {
  imports = [
-    # (inputs.import-tree ./services)
+    (inputs.import-tree ./services)
  ];
  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -1,16 +1,13 @@
-{ config, ... }:
 {
  imports = [
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "b0e0b84fd3" # Alex
-        "2bd36db8cc" # kurogeek-thinkpad
+        "1b495eede9" # kurogeek-thinkpad
      ];
    })
  ];

  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
 }
--- a/machines/vega/configuration.nix
+++ b/machines/vega/configuration.nix
@@ -1,6 +1,7 @@
 {
  inputs,
  config,
+  pkgs,
  ...
 }:
 {
@@ -10,14 +11,12 @@
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "b0e0b84fd3" # Alex
-        "2bd36db8cc" # kurogeek-thinkpad
+        "1b495eede9" # kurogeek-thinkpad
      ];
    })
  ];

  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
--- a/machines/vega/services/nextcloud.nix
+++ b/machines/vega/services/nextcloud.nix
@@ -0,0 +1,92 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  # ncDomain = "${config.clan.core.vars.generators.vega-nextcloud.files.subdomain.value}.${config.networking.fqdn}";
+  ncDomain = "${config.networking.fqdn}";
+in
+{
+  clan.core.vars.generators.vega-nextcloud = {
+    files.subdomain.secret = false;
+
+    prompts = {
+      subdomain = {
+        persist = true;
+        type = "line";
+        description = "Sub-domain for Nextcloud app. Default:(cloud)";
+      };
+    };
+
+    script = ''cat $prompts/subdomain || echo -n "cloud" > $out/subdomain'';
+  };
+
+  clan.core.vars.generators.noreply-mailer = {
+    share = true;
+
+    files.host.secret = false;
+    files.port.secret = false;
+    files.account.secret = false;
+    files.password.secret = true;
+
+    script = ''
+      echo "mail.b4l.co.th" > $out/host
+      echo "587" > $out/port
+      echo "noreply@newedge.house" > $out/account
+      echo "" > $out/password
+    '';
+  };
+
+  clan.core.vars.generators.nextcloud-secretFile = {
+    dependencies = [ "noreply-mailer" ];
+    files = {
+      secret = {
+        owner = "nextcloud";
+        group = "nextcloud";
+        secret = true;
+      };
+    };
+    script = ''
+      echo { \"mail_smtppassword\": \"$(cat $in/noreply-mailer/password)\" } > $out/secret
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  services.nextcloud = {
+    hostName = ncDomain;
+    package = pkgs.nextcloud31;
+    secretFile = config.clan.core.vars.generators.nextcloud-secretFile.files.secret.path;
+    # settings =
+    #   let
+    #     address = lib.splitString "@" config.clan.core.vars.generators.noreply-mailer.files.account.value;
+    #   in
+    #   {
+    #     mail_smtpmode = "smtp";
+    #     mail_smtpauth = 1;
+    #     # mail_sendmailmode = "smtp";
+    #     mail_smtpsecure = "ssl";
+    #     mail_from_address = builtins.elemAt address 0;
+    #     mail_domain = builtins.elemAt address 1;
+    #     mail_smtphost = config.clan.core.vars.generators.noreply-mailer.files.host.value;
+    #     mail_smtpport = config.clan.core.vars.generators.noreply-mailer.files.port.value;
+    #     mail_smtpname = config.clan.core.vars.generators.noreply-mailer.files.account.value;
+    #     mail_smtpauthtype = "LOGIN";
+    #
+    #     mail_smtpstreamoptions.ssl = {
+    #       allow_self_signed = true;
+    #       verify_peer = false;
+    #       verify_peer_name = false;
+    #     };
+    #   };
+  };
+  # services.nginx.virtualHosts."${ncDomain}" = {
+  #   # useACMEHost = "${config.networking.fqdn}";
+  #   # forceSSL = true;
+  # };
+}
--- a/machines/vega/services/samba.nix
+++ b/machines/vega/services/samba.nix
@@ -1,93 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-let
-  sambaUser = lib.filterAttrs (
-    name: user: user.isNormalUser && builtins.elem "samba" user.extraGroups
-  ) config.users.users;
-
-  sharedFolders = {
-    GLOM.users = [
-      "w"
-      "kurogeek"
-      "berwn"
-    ];
-  };
-in
-{
-
-  services.samba = {
-    enable = true;
-    openFirewall = true;
-    settings = {
-      global = {
-        security = "user";
-        workgroup = "WORKGROUP";
-        "server string" = "Glom Vega";
-        interfaces = "eth* en*";
-        "max log size" = "50";
-        "dns proxy" = false;
-        "syslog only" = true;
-        "map to guest" = "Bad User";
-        "guest account" = "nobody";
-      };
-    }
-    // lib.mapAttrs (share: opts: {
-      path = "/mnt/hdd/samba/${share}";
-      comment = share;
-      "force user" = share;
-      "force group" = share;
-      public = "yes";
-      "guest ok" = "yes";
-      "create mask" = "0640";
-      "directory mask" = "0750";
-      writable = "no";
-      browseable = "yes";
-      printable = "no";
-      # TODO
-      # "valid users" = toString opts.users;
-    }) sharedFolders;
-  };
-
-  users.users = lib.mapAttrs (share: opts: {
-    isSystemUser = true;
-    group = share;
-  }) sharedFolders;
-
-  users.groups = lib.mapAttrs (share: opts: { }) sharedFolders;
-
-  systemd.services.samba-smbd.postStart =
-    lib.concatMapStrings (
-      user:
-      let
-        password = config.clan.core.vars.generators."${user}-smb-password".files.password.path;
-      in
-      ''
-        mkdir -p /mnt/hdd/samba/${user}
-        chown ${user}:users /mnt/hdd/samba/${user}
-        # if a password is unchanged, this will error
-        (echo $(<${password}); echo $(<${password})) | ${config.services.samba.package}/bin/smbpasswd -s -a ${user}
-      ''
-    ) (lib.attrNames sambaUser)
-    + lib.concatMapStrings (share: ''
-      mkdir -p /mnt/hdd/samba/${share}
-      chown ${share}:${share} /mnt/hdd/samba/${share}
-    '') (lib.attrNames sharedFolders);
-
-  services.samba-wsdd = {
-    enable = true;
-    openFirewall = true;
-  };
-
-  services.avahi = {
-    publish.enable = true;
-    publish.userServices = true;
-    # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
-    nssmdns4 = true;
-    # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
-    enable = true;
-    openFirewall = true;
-  };
-}
--- a/modules/clan/yggdrasil/default.nix
+++ b/modules/clan/yggdrasil/default.nix
@@ -1,51 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "yggdrasil";
-  manifest.description = "An in scalable routing as an encrypted IPv6 overlay network";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    perInstance.nixosModule =
-      {
-        lib,
-        config,
-        pkgs,
-        ...
-      }:
-      let
-        user = "yggdrasil";
-      in
-      {
-        clan.core.vars.generators.yggdrasil = {
-          files.yggdrasil-secret = {
-            secret = true;
-            owner = user;
-            group = user;
-          };
-          files.yggdrasil-ip.secret = false;
-          runtimeInputs = with pkgs; [
-            yggdrasil
-            jq
-          ];
-          script = ''
-            yggdrasil -genconf -json | jq {PrivateKey} > $out/yggdrasil-secret
-          '';
-        };
-
-        services.yggdrasil = {
-          enable = lib.mkDefault true;
-          configFile = config.clan.core.vars.generators.yggdrasil.files.yggdrasil-secret.path;
-          settings = {
-            Peers = [
-              # US Peers
-              "tls://ygg.jjolly.dev:3443"
-              "tls://[2602:fc24:18:7a42::1]:993"
-              "tcp://leo.node.3dt.net:9002"
-              "tcp://ygg-kcmo.incognet.io:8883"
-            ];
-          };
-        };
-      };
-  };
-}
--- a/modules/clan/yggdrasil/flake-module.nix
+++ b/modules/clan/yggdrasil/flake-module.nix
@@ -1,18 +0,0 @@
-{ lib, ... }:
-let
-  module = lib.modules.importApply ./default.nix { };
-in
-{
-  clan.modules = {
-    yggdrasil = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.yggdrasil = {
-        imports = [ ./tests/vm/default.nix ];
-
-        clan.modules."@clan/yggdrasil" = module;
-      };
-    };
-}
--- a/modules/clan/yggdrasil/tests/vm/default.nix
+++ b/modules/clan/yggdrasil/tests/vm/default.nix
@@ -1,39 +0,0 @@
-{
-  pkgs,
-  ...
-}:
-{
-  name = "service-yggdrasil";
-
-  clan = {
-    directory = ./.;
-    inventory = {
-      machines.server = { };
-
-      instances = {
-        yggdrasil-test = {
-          module.name = "@clan/yggdrasil";
-          module.input = "self";
-          roles.default.machines."server".settings = { };
-        };
-      };
-    };
-  };
-
-  nodes = {
-    server = {
-      services.yggdrasil = {
-      };
-    };
-  };
-
-  testScript = ''
-    start_all()
-
-    server.wait_for_unit("yggdrasil")
-
-    # Check that garage is running
-    server.succeed("systemctl status yggdrasil")
-
-  '';
-}
--- a/routers/default.nix
+++ b/routers/default.nix
@@ -1,9 +0,0 @@
-{ inputs, ... }:
-{
-  flake.legacyPackages = {
-    whitehouse-router = import "${inputs.liminix}/default.nix" {
-      device = (import "${inputs.liminix}/devices/gl-ar750");
-      liminix-config = import ./white-house/configuration.nix { inherit inputs; };
-    };
-  };
-}
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -1,120 +0,0 @@
-{ inputs }:
-{
-  config,
-  pkgs,
-  modulesPath,
-  lib,
-  ...
-}:
-let
-  secrets = {
-    firewallRules = { };
-  }
-  // (import ./secrets.nix);
-  wirelessConfig = {
-    country_code = "TH";
-    inherit (secrets) wpa_passphrase;
-    wmm_enabled = 1;
-  };
-  svc = config.system.service;
-in
-{
-  imports = [
-    "${inputs.liminix}/modules/wlan.nix"
-    "${inputs.liminix}/modules/network"
-    "${inputs.liminix}/modules/vlan"
-    "${inputs.liminix}/modules/ssh"
-    "${inputs.liminix}/modules/bridge"
-    "${modulesPath}/profiles/gateway.nix"
-  ];
-
-  hostname = "whitehouse";
-  boot = {
-    tftp = {
-      freeSpaceBytes = 3 * 1024 * 1024;
-      serverip = "${secrets.lan.prefix}.148";
-      ipaddr = "${secrets.lan.prefix}.251";
-    };
-  };
-
-  services.sshd = svc.ssh.build {
-    authorizedKeys.root = secrets.root.openssh.authorizedKeys.keys;
-  };
-
-  users.root = secrets.root;
-
-  services.resolvconf = lib.mkForce (
-    pkgs.liminix.services.oneshot rec {
-      name = "resolvconf";
-      up = ''
-        ( in_outputs ${name}
-         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
-         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
-         chmod 0444 resolv.conf
-        )
-      '';
-    }
-  );
-
-  profile.gateway = {
-    lan = {
-      interfaces = with config.hardware.networkInterfaces; [
-        wlan
-        wlan5
-        lan
-      ];
-      inherit (secrets.lan) prefix;
-      address = {
-        family = "inet";
-        address = "${secrets.lan.prefix}.1";
-        prefixLength = 24;
-      };
-      dhcp = {
-        start = 10;
-        end = 240;
-        hosts = { };
-        localDomain = "lan";
-      };
-    };
-    wan = {
-      interface = svc.pppoe.build {
-        interface = config.hardware.networkInterfaces.wan;
-        username = secrets.l2tp.name;
-        password = secrets.l2tp.password;
-      };
-
-      dhcp6.enable = true;
-    };
-    firewall = {
-      enable = true;
-      rules = secrets.firewallRules;
-    };
-    wireless.networks = {
-
-      "${secrets.ssid}" = {
-        interface = config.hardware.networkInterfaces.wlan;
-        hw_mode = "g";
-        channel = "2";
-        ieee80211n = 1;
-      }
-      // wirelessConfig;
-      "${secrets.ssid}-5" = rec {
-        interface = config.hardware.networkInterfaces.wlan5;
-        hw_mode = "a";
-        channel = 36;
-        ht_capab = "[HT40+]";
-        vht_oper_chwidth = 1;
-        vht_oper_centr_freq_seg0_idx = channel + 6;
-        ieee80211n = 1;
-        ieee80211ac = 1;
-      }
-      // wirelessConfig;
-    };
-  };
-  defaultProfile.packages = with pkgs; [
-    busybox
-    iw
-    iptables
-  ];
-
-}
--- a/routers/white-house/secrets.nix
+++ b/routers/white-house/secrets.nix
@@ -1,20 +0,0 @@
-{
-  wpa_passphrase = "";
-  ssid = "WhiteHouse";
-  l2tp = {
-    name = "";
-    password = "";
-  };
-  root = {
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcZ/p1Ofa9liwIzPWzNtONhJ7+FUWd2lCz33r81t8+w kurogeek@kurogeek"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAB/raxJR8gASmquP63weHelbi+da2WBJR1DgzHPNz/f"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuhpzDHBPvn8nv8RH1MRomDOaXyP4GziQm7r3MZ1Syk"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAmgyEGuY/r7SDlJgrzYmQqpcWS5W+fCzRi3OS59ne4W openpgp:0xFF687387"
-    ];
-  };
-
-  lan = {
-    prefix = "192.168.1";
-  };
-}
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
@@ -1 +0,0 @@
-../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
@@ -1,47 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:lNmIq4wetGu/+3tEpICazLpORWOdhZ66Wa2qc9uThGNmlx9xjMH1Rzpeyl8O6y5aNQxFO4Dh3bncXygaHlWWG/Q4q0vmpvOYDmAbxLwYeXOg5CAfwRdfgl1yCedUW688JjYa5NXv9bmJA9t3ve9Y+2KYEZH71Cj6fFnVIE2En3DWpOfXITpCPiklTZsiVlwDfGW/BqZnnw==,iv:2NQ0SlvFXHaVxHYq0+ulhnDrPDJJ3bk64Ur9luwwyT0=,tag:dopEjRq4RaCdIpnnLLV5JQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNU1uZDgvQnR0d2JDMk9r\nNDV4djEzeENaNGt0dDhGNW44R041SVRlWUFFClc2dUxuUytsTjM0ZkV5TVluV1NB\ncGhTVExIemUxc2Y5bDVCY2hsclFLLzQKLS0tIDIyL1NxbFM3T3A2VGk5R2RNR2ZZ\nTk1URnVGMzZ4UDhpbUxKeS9QODJlelUK6HXrJwE3fvhnY4B9ni4a6goHXA9PO56M\n386eA25lOP9ECmiXSGkdkajG1MzJPuiQoMm9wbBn8zStHBuVj33E6Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1d2FmZ1dIUlhGcG9iSS9H\nVDJVNUZXQi93SkFnUkRBYzArTEhuUEtzNHpBCmF2Z0N1M0xoaG5hN3kzK1NFdFBC\nR2lRZjhSeVFsSzd4ZlliNjZzNHV4UlEKLS0tIEpYL21wd1BLeG1NQU0vMWYzNXlJ\nOVlqYUVQYmhqaXdzK3N6eUtOcHNXVlUKW/0GpseQBMG7js6nZ0YKy50nuBvAANIn\nt19TssKDEVIjGGK5hKo9JBUCvugFTZNf4IogMVMQ+9j4kW3LZ0+O6g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEdJSTQ5Y3Uv\nTFRIZmoycHVNT3NIcElWeDByVGNpc1dKTE95RWFoelZEd0kgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpENkdzTk1NRFI2cUlXZDByL2gweVJI\neUdWQVE4eUNFOGJybFFjZlEzUTJNCi0tLSBVMzgwOWU0SC9tUUREMG5nWG1QV1cx\nUS80ekhlVlF6V2piVHJ3aDFSZkZJCqtA9FsZG/HZbxgeJ2pagFjjj3kXOtIxH2oN\nWl8ivKfL1lFxbdT3xHTgKdFSSVOKxmAuMi503Gk6AdIS/sBbhfQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHBCL25JTFJW\nQzR3UE5McDdmSkszL3NNWk9JVVpESjMvOENBTzl4OWllRXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpZQVNvU0l2dVl3TldTV2xBeTNnbTgv\ndWw3NFdOcm1WR0l5aWtUNWVyaWVvCi0tLSAwSGhOSGFtTVg2Rjg1QXF6NGNwRks2\nSDIrUVVkOTNrTGpkTG55L3Y1bnc0CjjUlP8WqX/t4EhzHxLwCTJs9qkso9SrBstI\nb9A4A9M1w5t+eHuIZA0Q5FjRLKswMOlOIl4fPnaprsJmTDut92s=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZycWk5aGVq\neEdMZThBOENGV0l5cHpwYXJrc09HejNvUFBiOWFLY04ra2MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoyY25JcDR2eHZsZFZkSmhEcHVvN1d0\nakRqK3pEQ3NHT0U5RWpvSzcvOU9nCi0tLSBkSWQ4TGdRYTJQTTVpSzZmbERkMUps\nN0ZaM3FuaFZSd05xcHpDZkx3Zkh3Co7ug59h8ucvgspX27IbPQdX1gJXzutFpMGI\niK7Y7s/30iWTvulBRBAJKbzbDJnOq0UTLGAKU0sSEFKtz1pwprs=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bzBCejZTRzVjWUhtQ0hu\nTGduK293SmV4ZXBkbWEyV2V4Sk53ayswakRVCjBQK3BjSGhjWUxvaHlacGhiZ3NK\nVXplLzhoc1h4a1ZxR3hxL3VibVhwRFkKLS0tIERDbVliT0FOTEhoekthaGlDaVBx\nWDZkcVFtSitINHFGdXRsRTlkU29zZ3cKAjl9obQBJcRIeG4P6jsQ7aJNwf6ltun9\nxxYpDAGuBbRm5FmrC+PeCqfZVaFmd+TTbz0Wr3vjDcez7AuBrHNfbA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNTF3RUpKb3dIbzFyaSs2\nMm01UC9YWEVZZTFNckx5djlrR3ZiVHczQnhzCldzR3ljenFId3ZkOEFXcDA2RTdU\nZW1jajJrWUNBcFVvZ29Ka1czYUJKSG8KLS0tIDVTWnUrMUxkYjJrZDdQMmo1Y25i\nMmQ3aWVia2xpdHE4TkdkVzNBUitmSUEKrgE6rls8IwjYT90tADTDqq2w8dIc4kK2\nd+HWPidIVXtdo5vlqNXMf/lKkCcj70QI9gPMkdxT/m+f2ri3lsH5Kw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYU056ZHE3L2c4TytvRmw2\nT2h6cHNyQktKckxEN0lFNmtnVGtjcFJsR0hFClEyd011WExPTnNnN2drZzVicldx\naWsybGx0OXQrWm5pcUZOTS9RSkxpT1EKLS0tIHhkSmJPS3VDbnhaYmtnWjJvcDVZ\nTVMvbE8rcCt2YW83SktZb1V5MzdsQk0KSYbhDQ1VCu1OiwHTkQ+vs1KEe/Pd5mb4\n7w7zwql0baW2qTXSjS4ksFPV3ZXOz8KYnua2+l4LewqKldd4R0Bo6Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQTV1aThTdlVReG1yZ2d5\nMHJFdmo5cjN3SDhRNUM4dXFaVnVIb2FxQmo4CjNEU0UwRWJqM1RseFhjdUxjTUdM\ncTBDNHE2UkFBL1lxUlA0bUg4WDNodVEKLS0tIHB5Z2hxRTZ2OUJ4NmhpMjI3RXFC\nZ2o2Tjc4RCtRRHAyUURZMzdyazBaeVEKekfBZ6h7vlVDyNKEXXWpSdX2xuD+ZY0p\n7vc77AZJFVkNTIZ3vQI34bpuXyt9LZpFpTUJ7Lp7lJmyAiGjmBRotg==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-10-17T04:25:02Z",
-		"mac": "ENC[AES256_GCM,data:KIeqZsHRJDxEFnquBpnjNvoCYCpYvd6gFhk6jyjEdemhhhySHXXXWy9ShcLe3ckUV8/baHfUZgU6ptKqVhgq/76PU/cOdpNBaHMoOzmGut0+EfNCTaAy2PQTzMOdSgjsXY428KrApWaqePpQoYOFEcRPYHnwpAMfTj/sy7xrZno=,iv:nKkDejBrJHv/E9XSnfW99OqBJDi5Q6/hdIdCaYJyXHU=,tag:tcUKsUWNo8/9GOydbbB6Vg==,type:str]",
-		"unencrypted_suffix": "_unencrypted",
-		"version": "3.10.2"
-	}
-}
--- a/vars/per-machine/vega/nextcloud-mailer/password/groups/admins
+++ b/vars/per-machine/vega/nextcloud-mailer/password/groups/admins
--- a/vars/per-machine/vega/nextcloud-mailer/password/machines/vega
+++ b/vars/per-machine/vega/nextcloud-mailer/password/machines/vega
@@ -0,0 +1 @@
+../../../../../../sops/machines/vega
--- a/vars/per-machine/vega/nextcloud-mailer/password/secret
+++ b/vars/per-machine/vega/nextcloud-mailer/password/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:dGRLB+Zrb45vhx6B4ue7zcI+rIxa/5F42OKfilTX7puzstQW1u810nMOYnH+5w==,iv:bux7vqNuSz3Rtc26fiNtI9dkkZNKTOdGEmtZ0tl8KPc=,tag:OAh1utKd/Wbcn62bbQ+zEQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3cUJSalArN3B1WFVUc0gx\nZnZLaDdVczREQWxBU1Nia2crOHBVQWw5TVY0CnJxZWVqL0JieEp5MFlmTU9wMWNa\nOG1YK2drTk1lcW9RR0tSSHBYTW82emcKLS0tIDdMcGVaQm90Y1FmeW1RcHg5VTY5\nYUw1UzJlcXlTRndUaHFrVDZSUU9kNWMKCdYFrkW9oy8xy+1sQSuY1QK5nqaKem61\nJ+yOR5hJrXg60Xs+7raKdejh+nG0q4k5wNMSNpxNXmn7aIPpdy4MgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6Q09oQmJjM3RpRk12RXBP\nd2JnWXVuaHRoaisvZDc3Ull5NU5DMldsRG5VCjNSQlBTMmQwZ25oYng4ZUdVM0Fz\neDNRQnIvL3VyTEVnTmlsUlhsV0d2dG8KLS0tIDlrSWJSbTNPMDhqRG82R2d2RnBu\nblEwQ1NvTXUvMlhtQ2RuRkk1bG5VQlUKHLqwB4xry6XeBbM4UBQir+HMCz9Jyfcc\n670jb3uIDcLFcCxmizbtjvf1yLn7k+OP3JAfwLsLCwLqOnV9DSGtYw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZEUURGVW5w\namZpTUFiZFVlK0RDYVhIVzkvL2E2Y29KVnk3L3RCbDZBQWcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpyT3dBck93V2lvdGVoUGdEWmdpYWFw\nczJ4eFQ0S3F2dHdRQ3AzTnRiakdFCi0tLSBLR2FLL0FGSm8zTXpWVVQwNU9aaVc1\nTXM1MDA2THorRis4YThkZjhpNTBBCqPfb28UE+yKhzFONYYxCYLBNhRiD1SIwX2Y\n/hgjNS1iG8BiHctOOp0DFpYT6l4YtgANuRUz0Ng33rQ9wL23y4Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZqb0dtd0k1\nT3dSSVNrTUViRmJWb0pNKzNacUx6VHd1N0RXa0ZZOVJPVW8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpiRW1JRGJPdDhJM3VzVWluekxNVjV0\nSCs2OFFoc3JkN212eGRIZ2NxeXVZCi0tLSBQdCtvSytCQnhGS2pCVVRDeDExK2ha\nVmpOSk45ZGtGMlB6VVFRZ1hQVzZ3CvATWNKu7aabxet1Qx8En9/GBddKMh38K8hb\nOJ8T0bKCtJE87pKYHuoYMuajOw6IFRRhRcfmrwfoXP0TIVCqO4w=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhqU2YyVTRa\nWlR2TGJqUHJ1dmVZVEY5MmZoRVVDM2QraXZLVTJ3RHdPam8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLb2FlT0FaaU5meG0rOHNSQ1RhdXdN\nQVZMSXJDY1lLU3Q0M3FNR3BVVjU4Ci0tLSBIUHlWMlJpbGh5RFErTWJvSUpvcXRv\ncDVlbng3ZGtWOG11emVwMEhkVjVFCii3K5uqq+x/iGVy8KD/erOp+63g3fbfC/vr\nbM1J1O7qx3Zs5NUOb08metITHxUWSX8frh0tcDBl/gFtGNZn8ho=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvZU1jS0N2aWwvbnZTQzkz\nTGRBS2l4VG9WYUxhcXd0WFc2K2FUWm4rVlhNCjl3Nkl0aUVsOW55NlhOMlMrczBq\nN3AvbWk3TGYvSE1aVmlRYnd2dk4wOWMKLS0tIEh3NGZLQkxjM0wzYXlUQTB3MmZO\nN3pZbmtQYXdYQzd6cTExSmpzRHNxVEkKLZujBdEmlnH411EQwHKEcjpOE1D9F+Qi\n9f5G/4fLipwpO2+sREcOHc5TI/NNOtFOuVZjHjt5ZkfHlg9mM9C9DA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVYmF4TVJQdkNCTWpOZEwz\nN1UvdlBsUUhLajBHWjFlNzZtOXcyek9wV2tBCm9GL0taT2kyZ3QvcWNLb0NFMUZO\nTHRFL3YrdHdSOEQ4dTY3ek5sa2NRS1EKLS0tIGVISFdFUjFObG1LdVozVXd3N2xq\nQTUyTHJBMXpUYzlwRlNicEx1K3ozUVUKs/3CDfEXOmOyllZ3rT/6LZGQKcKP/emF\nbpPBNRN/NflQNKwb4N8sJ+6IEpGFJbiPsVpUbb4DhBKKmjcW8TpzGg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiUldMWm5RbVZ6K1hHRkpY\nQ1pmVFBQQkRHdVJhQ0VpMGk4S3EzMCtGeFM0CmFtYmNNRkVwd1hHK2tJNWdTa01X\ncW1OdVljL2k5UTZkakdHcEdlUWRBUE0KLS0tIDNuTXdCL3J6SWVQOXBCMG1Cd2xr\nQS9acVBSRFNqQXRnNHVZT2F6eHEvblUKtRsVIId25zCF9duxan88n5rBJRQ3ustH\no50BrKvlqrPibcP26+dDcKGiBxBStWLJgi2W0/ww1gTBZZ3dNEXvzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZnNyaHNwRjdEYXVBOGxO\ncHNVaEVhRml0WG1aNXhpUUV5VElHa09Vc0ZVCm42WkppR3VZNlV1QnlmWWtlM2NC\najRRYnFRZUx4Z2lFdVd1VUNtSzNPVWMKLS0tIFdPZ0VrR2FQTE1ZeDFnbjBLajB1\nWkFYVFU0Y0hLdzYxa2lXaTRlZk16dTAKSfSD6vHmf9a5qc6r2qWSKtMvWoKNStGl\naEjbB6JbcAjh2TIy3Ocus2mdp4HFVahLuJMuyPq6ScEu+G31y3XlBg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RDNINy9kK2J2RFhLS2xG\nMGpwV3RLOTNUanNwLzZzZmFUblFpVnhNTkdFCnR5SHdYWDhGWjRZeEZncFJCSXBz\nblZNaERXWFo0QVNKUUx4OXp2SDhIM2MKLS0tIHY2QzFibTcwd1VKYlRFVG1Ha3Ey\ncWNEYitzL2k3dEMxYloyblhqQzhKb2cK7OrMyC8tWLl+otdIhFDMBnvt4uz0oSyh\nUhl5TaN+PO1O0dOJ7eM13k4cafSxp84DPTKelN01LAq6XVLzT+5nCw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-24T15:15:42Z",
+		"mac": "ENC[AES256_GCM,data:HWaqqJ5q5pgGIOcHt+klojYHePFLnuku6WYnrRSAJ6mdwpS9OAa73YKjPXe3T9i7vH0xC9GmexhkSHOkD/A7VxIVCV/0bP7APoz3zDPdyibPS046cxLJsA9yalGHd6UiiKB/9+sjR7wwnS6cE144m7N8q7lhnIaJvAGLiI+E77E=,iv:7jWjsgCdbUQip7x+sky8SgixNlG+p36HuNrAPALRRos=,tag:acvYp6uLalOIqDttUHb4CQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/vega/nextcloud-mailer/password/users/kurogeek
+++ b/vars/per-machine/vega/nextcloud-mailer/password/users/kurogeek
--- a/vars/per-machine/vega/nextcloud-secretFile/secret/groups/admins
+++ b/vars/per-machine/vega/nextcloud-secretFile/secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/vega/nextcloud-secretFile/secret/machines/vega
+++ b/vars/per-machine/vega/nextcloud-secretFile/secret/machines/vega
@@ -0,0 +1 @@
+../../../../../../sops/machines/vega
--- a/vars/per-machine/vega/nextcloud-secretFile/secret/secret
+++ b/vars/per-machine/vega/nextcloud-secretFile/secret/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:YGO7gnJ4Kk9r3nmwHrZVGo3xzWai7hz6mbfINX1PgtNxN2N3uqDouGV+dkRMPuU=,iv:9/GNabnqQQs8gO6UmrW9+7P7sc8rp3bPpgN7N/digrU=,tag:mNvppslsmvxyeWC7DYsEVA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYUQwYzVkWkFsZTNkTWw2\neGovKzFCQWhvWUloMzRyUitqV2JHN0lqeGwwCkw4Z0V1MXI4TFU2Ly8rczgrOENa\nV29IbCtxVlF1OHBMY3lEc1Y3RXhZblUKLS0tIDdDYjRnVDB0NWVFYW50U1pjSWJQ\nNUNUYlF3RkEzUDZTaVpmT1hORXhjVGsKTWJDBVupYDRtpSM0qkFZFEb19jZxd+ro\nYoD2eEx9ZM7wXkS9jA73m027Zkczem05fM/4uqkSfdxTyNQQThm3xA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1RDRISUUvU2FScGpsQmJB\nVmI4SUZxQUZQQlZUaGNHcWNNckNTY1VMajNZCjBZN3ZKRU92RUlDUzBmcU9sTEpx\nQmN6dWxrQ1ExeGpUQ2U0TVY3YXpHcGcKLS0tIGJObGRnZ0w2dkxCRENseGFTUFpy\naVo2b0Q0OUtTRFZlRkJ1SWpjLzRrQmcKkDDpBZb8VnfyBX6EuCxBLE7bX0TwrfOd\nxSNl3AcmYmnXTYiU9cb4DM2uuHAc6aYBgTtGTrZfjIEPdmwNRaMpow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGt4b01mT0FY\nTHRIR0pPNEphSmx5UERNY2dUZXEzTFlaWTM4MVBHc2JFM2MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo1MkM2NHdXWHBPdXFaZjg1MnFmejho\nWFJBVGovWEZmZHB5R1FIaUU3czBNCi0tLSBYTUtwc1NlWVVINTFpRlFoemRUVS8v\nSVMzRFNUYTNQVnJjb0VGaEJwZ1dNCusi9d6xodfIqDAip0DKlSm8an8T0/LIcPRS\nZFHcUa2IxsvclY4/ktdDMlLNZK110BgGwFAew1soCilksYezFSQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9lUjFwS0gw\nZlQvOXh2OEw5Szc1QmhCTFBiMFhBYVZ3UWhpNzNabW5QMDQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo0eDlWNjZBb013RFhzWDZvNWVaR1I2\nWjBhZ2dKTHdseG81ek1jdDZVcDJrCi0tLSA5TWxHWmZrcXFkSjI5WW9KYmQ2SzNC\nMFhJU0VFRXBwUFQ3RFkwejQrV1F3Crw2kCk78Ut3aBEc8zVmonTi7ThXmCiEy7vD\nEoo1qC1/LsqfxSdq7JG9mmeOc5fC4JUG15sZUgL72rPO0jgyJYw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIERTaStPekM3\ncFJ3ekdYcEcwZER2N3R2WkhRRUttQ1BLUzEzakYySENWbmMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpNclh0OVRPSUozTkxtbjVkcE14K1Vn\nR0xXQXdKQU9ZR2JRWkgwV3l6aEtnCi0tLSBjZnpDNGV0Y2hjWG5iNktNMWIzRGFP\nMnZhUnJWcmNUWG5mcXdwQkhrTnRVCmg/9FIkhoEcHwZH9N/c3O1debqohX6g4ipd\nkH4lGCJXpGYGnGFazIVxzgyAscQrhtufL/WFZH6wBy7BohwXWbs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTStXZExXSUR5aU5DZmdp\nYXN3M3pKRWN5aU1RcFBYZXdnbklNVDY2VWhZCjRFVWhRU2ZzaTlYOU5iMGdjZzlK\nRUM3bEtCM0VLZG1KTXZDU21Ia3I5ak0KLS0tIG5UbmlLN0FsN201aXdFU3JzN3VU\nVjNCOHhQbWVlclZ3bzNJWWZXVVpEbmcKGCsRHk/f0j1Nfm4b/t+0NHybSpzgOvEM\nPr/uTgVdmNb00LD6JgTw6cTaPoQ2vCrmoNAKGUhfq7cwNcCw48D+Bg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTTlhNmYvRlZRWGxIQndy\nbFlETDE3UHpLemdCaFBOWUZSbVdzMjFHSlc0Cnp2VnlkY2ppdG0wZGtlU0hMTVpQ\nRUF5ZCtqRkdvTWh4Wk9rcDVvVDh6K1EKLS0tIFE1dkRocWtzRFp4dmZiZE5sV2Q2\nazN2aVJVb1V2VkZtYU1SMGxocktyNE0KSQuAC95rXYcjMgWEp06Be9smkWn76UOE\nkhKfG383zjFjR9/yikmqxU6t7LA2hTZ2/HkFE7qV2rUy1HnYe3+3OA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0VVRLNDM5dmVhb2QxNmNP\ncTVETzBmMHRyREhrWUQzUFdMSSthRitCb2xZCk42N0l0Qk04SGVFNXhBamk2ek9n\nRUp6M0xGalY2aUlKTFFUdnZaNDJTTDAKLS0tIE1Qb0ZZdDdUeEhTRUNGY25DQXJa\ncnZTZDZVTHVjRmFYZzNkNG9SZER3a3cKx9sK/kyC1j+YSEWdCClLOhxMh8kK8EWE\nP/VWCKOQIRFHcust0P9hXV5WkGN7L3zUObZsg3GJ2QPBmKF7BlOgVg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoaHRpRGljZFhOMktjQVVn\nK1hoUFl1dVgrUzhERnNLMHlIamxGY1g2VkdVCnh6OUdlZUNWVExBdjBNVTFkNFRJ\nNDZ5SmRpUmVsQnRYbHRwSzJxOEIwVGsKLS0tIDM3MjRzblZ0SDV2RGVncnpoNmU1\nZkFGcVNkUUx5NlpoMCtyQ201RFdPemcKPtl7SlptzaAXxsN6hvW53iBoLoQr0/DZ\nV/qAD8Kwdcx7BBnU/H7LJOYbg6NF2W8OhsUgSRP7GAf8dC7icfOb9w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhNE83V2x2ZzNVU2xMcTF2\nS1J5TnA2MG5nL0dtTmZKQjVaY2JXZkhDNGxJCmgrM3gxbVBRQVZBK1BERDBJcFNI\naHg0QnkxbnVSU1lZbUNvVkcxNXdLdTgKLS0tIEdCa3lkd3lySVNrTktnVmNuUTZw\neGRjdEIxeFROSmYxbXJZOFQ0VnVEY1kK0AbJIHAloBCDrbqa1TDh/4Gkg7i3F7H+\nnBuMZNxJV/5ncXn7CssjMUgFe3DIxm0qmJOQHX6o8D5PsXFXjcfGFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-25T03:07:49Z",
+		"mac": "ENC[AES256_GCM,data:qZxrDZRawvNVoq2dpkW5XXEZYwB6sh/Pik1Wd+vMYSlPE7t3HxXoBw33wTGq+yt4u5OxJrkjoOKT4/9eyhBJX+sxMYAjud/KlM1d+FEFoz6li1rboaejN4EEhyZuwWgl1gav7qlli3+C37PUMy4qdATH214a3Mwm9xAXic6QnhQ=,iv:5t0TG2cbjpwUvTnNvcXZlo2RIX1WbFvqBo2OGeoRo0Q=,tag:DOZlw26vT0BqbVQrNICkLg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/vega/nextcloud-secretFile/secret/users/kurogeek
+++ b/vars/per-machine/vega/nextcloud-secretFile/secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/shared/noreply-mailer/account/value
+++ b/vars/shared/noreply-mailer/account/value
@@ -0,0 +1 @@
+noreply@newedge.house
--- a/vars/shared/noreply-mailer/host/value
+++ b/vars/shared/noreply-mailer/host/value
@@ -0,0 +1 @@
+mail.b4l.co.th
--- a/vars/shared/noreply-mailer/password/groups/admins
+++ b/vars/shared/noreply-mailer/password/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
--- a/vars/shared/noreply-mailer/password/machines/vega
+++ b/vars/shared/noreply-mailer/password/machines/vega
@@ -0,0 +1 @@
+../../../../../sops/machines/vega
--- a/vars/shared/noreply-mailer/password/secret
+++ b/vars/shared/noreply-mailer/password/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:goH36diqouRwWG8QtsOeuRdznfvP,iv:PAdnJzsevmorPWSgDkOqpilxDFdXi9v9UYwlqRo3efk=,tag:fW6Syk0czolzpixzuK5Vmg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoc1lMVW5aY2pBY3BKaWRL\nRUhWaXNEV0pBdTVSQkVQU0k0c2tFMXBkRUZFCmdjMjZ0aDFhNU01clFWVm45dFFm\nem9IQVNiM3YvbFMvRVh5ME1kSDExcVEKLS0tIGlXRWp3SGVHVEVRODc3ditLMXVt\naVVobis0Ukl0UDg2aStlWHpjSVRZUEkKAMBTH5OwlsYAm7Fr+TmXDzL9fdnMyNSA\nEpOCvhSL5OuiCtfiDfS2mtO9ZofGRVpKyhGAUbRX0XN+etXTF0iAVQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArZGR0eFVoZUk3MUZVMjll\nQTNWMitKdk1Xemo1V1JnQWdsNDRwYnU4VVhJCnZpYlo0dFlxNVF5Z0g5aHRrQms2\nZ1RlY0NQOU9BNmRjU280R0lnc3U5alkKLS0tIGhjNDQ0OU5keERWaEZZcXkvTDdo\nL0pkZjlvRGI4TkUySDZCenNHWkVveDgKcwCSJR2X6wPxTtkCxcEENDCFiH9G6tiO\n37jo7fc6IRZIBmOM+58aFp08tt1FBHPN8uyCL+zS+BQbHCYoVZE7TQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHI2aGpmbDQr\nRXZlMElSSnpQc2gzNFE3dGRPNmZPRGRtdGo2SUZqRlFnbmsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpWQ2lWdHBaK09BU1BGczU5Q3JoamJ5\nNHh5MjhBR08xSTJyRFA2U083T2NRCi0tLSB1U2VQMStSdlZiN1UxQmN5WGtXbVdV\nUWtVSkozYXVTSGFMUHoxZzVKVFlnClO8aAkX9aK4odsYA5BzTK0Rzq3u3M7MPkUv\nTE8LIsetWGdjQ5UJ2KT6BY/cKuD+hyyeLKpuu5SdxOGKjfGsvuo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZjOWFzUzBu\nQXp4ODZrd1RiSmpLYzJ1TldMek5LRGR6Nm1IWFJ6eTlLSHcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpPNFpoK3hUZFByeXlmcS9Wai9jd29L\nN25PemtqaHhaQzBnajdvVHpkREg4Ci0tLSBRQTRUQ2VvQWtvMnA0ZWQ4aE9kcjMz\nbFFGTC92d3ZpWkloYy9BWk5TYU5vCvT4/4+FxMTXGmowMMVZCxlRTuKJL945L0Xf\n9MxWUaufHsL5oiY/9HSVvvklLDRms9L504aIQRTJwtUD6VHmo7U=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGl5TzVlWlJ0\nQmNGK2dwRkVTRWhDTlRxSXRKUlRkMTNWZHl6RW1uL2tZQ0EgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6SHptRWlTOE5jM2h1bzRjNnA2MkpJ\nTjJuRE9WQkhVdisyV2VkVmZsNDFzCi0tLSB2VENqWE5tbG44M2M0ZGo2aTlhSTJh\nM3hSQmd2TWpkdHlBMkJZVGlPc0I0CmDB6BwqQNeMOb8DZsbAtQDRMs8HFZ9/3x4F\njVn79/Wt8PQ1Q+5EtS7UAMfCOMaPUWXSY5AH0QcBwtEb0gUZYhs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZWRCUytYN2hoOEdCQTA4\nUEFVUG5LUVNub3RkbnNNVjhZT0FjY2NlNmpnCmxVcWxEODhTcStxbzM3QTdrYW5H\nUTdBajhIS0VvZXg1NzZlR3VJYXQyVkkKLS0tIHhVZkZlUkl3U2RsRWZyd05ob1lS\nODVLQUdsMjM5NzQ5WVJ2empXZURyQ1EKD/cHD0McDCvedGINXyobsCEpVuPibwUR\nZGKaNCX4o6XjbSAeQQo4dHqfSxu531n5NrV5sYV6y9KPyW7x7aSrGQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRTYyMkRuc2FPa0NxYUN5\nNVpiamJPUWNTdVViTVV2Y2xjbTVHUTljMmtrCkFPWHdod3RUMERNbVp6bThFRzhG\nd0FhZTAzbTRsaGFwdzFlNnNuOHo5ZnMKLS0tIGJpV281ejFlN1NjR1hzeUhVTHZI\nN2QrWkdUakNWbWtDRWF1KzlwSDJPSHMKX+3z1BQBS9qddMCF8ZqY7/OQULijcwIH\nfURwER/yhEXHJ2vz5nYUjLyaL+SL0eIomh2do8bIzgWj9lZxq7+NAw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWDd1M3QwSDh6Vi8zeVE5\nM0Q2RWdwOUUxRTVadm53dlhwZk9LZVJNd0FVCkZCUHZQV2x6Vjh4SDVkZCt5UXVC\naExzczZIV2NkNE5OYnB3bG1jME9lRUUKLS0tIDY2a0p3MEFKbUlPZzZhUWVVbkZx\nOXZOeTYxRW1udHM2bU5MOEx2SE1aMXcK0h+5VjtOuaN/sKvODacWSDpGbFRF1tom\n5zibCEtKU6WGCcDCde6Uvm/oOI3U6sK4qGms8YZA1MjJCPrUF8OTdQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5S25kLzRNd3g1aGV3SW5K\ndTdLWVhQRHVuNVdRcWo1NDFyMHFjMG10NnlJCmdGamtJWDVNSXJuR3UrSzZ5U1hl\naU8rLy8rK1pYc0NaY0hhSldXYnUyQ0EKLS0tIGxqT2ExNW9tVjl6ZDVzRkIybzBo\nWncrcEVuK0JvdjIvNUxnTnVjd3JNeTgK/TguCbwotQfP6rYvOBBlbScSTCZhKZqo\nY++lDjS6rGme5s7yy8oOg9YwBRdJ0aFu19Lf+B2DVW7roJhLwpdl4w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0V3NZLzJodXZFcUxjQ1dl\nZGthZ0hucWxHK09hcDhyOTBONy9oNXBWbWdJCmlvQkxNaTdPSjR6dEhvN0ttdTR2\ncWZLVHVINHQ4eThlY1BQYmpSU1Iva00KLS0tIEVtQUtmNlRoVG5KbDBialRpOG1h\nZHFSSGFHSUI2RlVWMWRvaW5IcG5IQlUK81TgYnGT5azmiG/I515jc3NS4zA/qlRJ\nBFRxjYGOgx+40yR9DZsCICZCDmrE4bg+ejg+cC80BoouVExuU2AIgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-24T09:57:50Z",
+		"mac": "ENC[AES256_GCM,data:TIoqDAhQ+RgQ3lISLJAijbjIst3++r4aFg5wI3IgUuDbMx4OXeK6UGbEGT+SP3BoOJnQi0L85sdkbw6kq2Q7XPpScETAyYJo9jLpwa56oh57gt7QlH14CZ9IATv/1EGiyMLo/8/MtXkn1/jgk1OClxnM9RSAyoICB6uJ6YvJs10=,iv:wLMDB48RpbHsR3q8YAj6erh/ZZOeYOE+nNLsVhEuQ0U=,tag:mhahAzkcnz+EjvK8gT4uEA==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/shared/noreply-mailer/password/users/kurogeek
+++ b/vars/shared/noreply-mailer/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../sops/users/kurogeek
--- a/vars/shared/noreply-mailer/port/value
+++ b/vars/shared/noreply-mailer/port/value
@@ -0,0 +1 @@
+465