mob next [ci-skip] [ci skip] [skip ci]

lastFile:vars/per-machine/rigel/inventree/secret-key/secret
2025-11-10 17:08:06 +07:00
187 changed files with 1728 additions and 16576 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1764792743,
-        "narHash": "sha256-MbbiNG/bhqe+4z7ml8TefIs4swSonmiV0CimCntXuCg=",
+        "lastModified": 1761768376,
+        "narHash": "sha256-AZL8SPJ520NRnLft9Xz4trTECBB510YPRXJnE1OUeXw=",
        "ref": "refs/heads/main",
-        "rev": "ddc0f9fabf33ad000676a33e97be6b5df12a4560",
-        "revCount": 11417,
+        "rev": "bbc9486f0e6306f68e11f8aefa243da9f1c8c56f",
+        "revCount": 10924,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +49,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762942435,
-        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
-        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
+        "lastModified": 1760612273,
+        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
+        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +88,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1764627417,
-        "narHash": "sha256-D6xc3Rl8Ab6wucJWdvjNsGYGSxNjQHzRc2EZ6eeQ6l4=",
+        "lastModified": 1760701190,
+        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "5a88a6eceb8fd732b983e72b732f6f4b8269bef3",
+        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
        "type": "github"
      },
      "original": {
@@ -162,11 +162,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1764161084,
-        "narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=",
+        "lastModified": 1761339987,
+        "narHash": "sha256-IUaawVwItZKi64IA6kF6wQCLCzpXbk2R46dHn8sHkig=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "e95de00a471d07435e0527ff4db092c84998698e",
+        "rev": "7cd9aac79ee2924a85c211d21fafd394b06a38de",
        "type": "github"
      },
      "original": {
@@ -177,11 +177,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1763303120,
-        "narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
-        "rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
+        "lastModified": 1755887746,
+        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
+        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -190,11 +190,11 @@
    },
    "nixos-facter-modules": {
      "locked": {
-        "lastModified": 1764252389,
-        "narHash": "sha256-3bbuneTKZBkYXlm0bE36kUjiDsasoIC1GWBw/UEJ9T4=",
+        "lastModified": 1761137276,
+        "narHash": "sha256-4lDjGnWRBLwqKQ4UWSUq6Mvxu9r8DSqCCydodW/Jsi8=",
        "owner": "nix-community",
        "repo": "nixos-facter-modules",
-        "rev": "5ea68886d95218646d11d3551a476d458df00778",
+        "rev": "70bcd64225d167c7af9b475c4df7b5abba5c7de8",
        "type": "github"
      },
      "original": {
@@ -238,11 +238,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1764483358,
-        "narHash": "sha256-EyyvCzXoHrbL467YSsQBTWWg4sR96MH1sPpKoSOelB4=",
+        "lastModified": 1760998189,
+        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5aca6ff67264321d47856a2ed183729271107c9c",
+        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@@ -41,6 +41,8 @@
          ./fmt.nix
          ./shell.nix

+          ./overlays
+          ./modules/nixos
          ./machines
          ./routers
          ./inventories
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -3,10 +3,7 @@
    inventory = {

      tags = {
-        glom = [
-          "vega"
-          "ramus"
-        ];
+        glom = [ "vega" ];
        b4l = [ "rigel" ];
        w = [ "sirius" ];
        fax-bridge = [ ];
@@ -35,14 +32,6 @@
          };
        };

-        tor = {
-          module = {
-            name = "tor";
-            input = "clan-core";
-          };
-          roles.server.tags."nixos" = { };
-        };
-
        w-network = {
          module = {
            name = "zerotier";
@@ -75,18 +64,19 @@
          roles.peer.tags.b4l = { };
        };

-        yggdrasil-network = {
+        yggdrasil = {
          module = {
            name = "yggdrasil";
-            input = "clan-core";
+            input = "self";
          };
          roles.default.tags."fax-bridge" = { };
-          roles.default.settings.extraPeers = [
-            "tls://ygg.jjolly.dev:3443"
-            "tls://[2602:fc24:18:7a42::1]:993"
-            "tcp://leo.node.3dt.net:9002"
-            "tcp://ygg-kcmo.incognet.io:8883"
-          ];
+        };
+
+        asterisk = {
+          module = {
+            name = "asterisk";
+            input = "self";
+          };
        };

        pocket-id = {
--- a/inventory.json
+++ b/inventory.json
@@ -1,16 +1 @@
-{
-  "machines": {
-    "ramus": {
-      "installedAt": 1764139649
-    },
-    "alpheratz": {
-      "installedAt": 1764741499
-    },
-    "mirach": {
-      "installedAt": 1764744666
-    },
-    "almach": {
-      "installedAt": 1764745787
-    }
-  }
-}
+{}
--- a/machines/almach/configuration.nix
+++ b/machines/almach/configuration.nix
@@ -1,13 +0,0 @@
-{ config, ... }:
-{
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-  system.stateVersion = "25.11";
-  clan.core.sops.defaultGroups = [ "admins" ];
-  # clan.core.networking.targetHost = "root@";
-
-  clan.meta.name = "almach";
-  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
-
-}
--- a/machines/almach/disko.nix
+++ b/machines/almach/disko.nix
@@ -1,90 +0,0 @@
-{ ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-CUTB42_0x95d64f17";
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-            swap = {
-              size = "4G";
-              content = {
-                type = "swap";
-              };
-            };
-          };
-        };
-      };
-    };
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-    };
-  };
-}
--- a/machines/almach/facter.json
+++ b/machines/almach/facter.json
--- a/machines/alpheratz/configuration.nix
+++ b/machines/alpheratz/configuration.nix
@@ -1,13 +0,0 @@
-{ config, ... }:
-{
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-  system.stateVersion = "25.11";
-  clan.core.sops.defaultGroups = [ "admins" ];
-  # clan.core.networking.targetHost = "root@";
-
-  clan.meta.name = "alpheratz";
-  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
-
-}
--- a/machines/alpheratz/disko.nix
+++ b/machines/alpheratz/disko.nix
@@ -1,90 +0,0 @@
-{ ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-CUTB42_0xaedcfa8b";
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-            swap = {
-              size = "4G";
-              content = {
-                type = "swap";
-              };
-            };
-          };
-        };
-      };
-    };
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-    };
-  };
-}
--- a/machines/alpheratz/facter.json
+++ b/machines/alpheratz/facter.json
--- a/machines/default.nix
+++ b/machines/default.nix
@@ -1,4 +1,8 @@
-{ inputs, self, ... }:
+{
+  inputs,
+  self,
+  ...
+}:
 {
  imports = [
    inputs.clan-core.flakeModules.default
--- a/machines/mirach/configuration.nix
+++ b/machines/mirach/configuration.nix
@@ -1,13 +0,0 @@
-{ config, ... }:
-{
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-  system.stateVersion = "25.11";
-  clan.core.sops.defaultGroups = [ "admins" ];
-  # clan.core.networking.targetHost = "root@";
-
-  clan.meta.name = "mirach";
-  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
-
-}
--- a/machines/mirach/disko.nix
+++ b/machines/mirach/disko.nix
@@ -1,90 +0,0 @@
-{ ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-CUTB42_0x95d64f33";
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-            swap = {
-              size = "4G";
-              content = {
-                type = "swap";
-              };
-            };
-          };
-        };
-      };
-    };
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-    };
-  };
-}
--- a/machines/mirach/facter.json
+++ b/machines/mirach/facter.json
--- a/machines/ramus/configuration.nix
+++ b/machines/ramus/configuration.nix
@@ -1,15 +0,0 @@
-{ config, ... }:
-{
-  system.stateVersion = "25.11";
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-
-  clan.meta.name = "ramus";
-  clan.meta.description = ''
-    A Hetzner VPS machine own by Alex.
-  '';
-
-  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
-}
--- a/machines/ramus/disko.nix
+++ b/machines/ramus/disko.nix
@@ -1,84 +0,0 @@
-{ ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_107266387";
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-          };
-        };
-      };
-    };
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-    };
-  };
-}
--- a/machines/ramus/facter.json
+++ b/machines/ramus/facter.json
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -1,4 +1,9 @@
-{ config, ... }:
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
 {
  imports = [
    (import ../../lib/auto-accept-zerotier-members.nix {
@@ -8,8 +13,54 @@
        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })
+
+    inputs.self.nixosModules.inventree
  ];

+  nixpkgs.overlays = [
+    inputs.self.overlays.default
+  ];
+
+  clan.core.vars.generators.inventree = {
+    files = {
+      secret-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      oidc-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      admin-password = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+    };
+    runtimeInputs = [
+      pkgs.pwgen
+      pkgs.xkcdpass
+    ];
+    script = ''
+      pwgen -s 32 1 > $out/secret-key
+      pwgen -s 32 1 > $out/oidc-key
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 ];
+
+  services.inventree = {
+    enable = true;
+    hostName = "rigel.local";
+    config.site_url = "http://${config.services.inventree.hostName}";
+    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+  };
+
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
--- a/modules/clan/asterisk/default.nix
+++ b/modules/clan/asterisk/default.nix
@@ -0,0 +1,69 @@
+{ ... }:
+{
+  _class = "clan.service";
+  manifest.name = "asterisk";
+  manifest.description = "Asterisk PBX server";
+  manifest.categories = [ "System" ];
+
+  roles.default = {
+    perInstance.nixosModule =
+      {
+        lib,
+        ...
+      }:
+      {
+        services.asterisk = {
+          enable = lib.mkDefault true;
+          confFiles = {
+            # Dial plan config
+            "extensions.conf" = ''
+              exten => 1001,1,Dial(PJSIP/user1,20)
+              exten => 1002,1,Dial(PJSIP/user2,20)
+
+              exten => 100,1,Answer()
+              same  =>     n,Wait(1)
+              same  =>     n,Playback(hello-world)
+              same  =>     n,Hangup()
+            '';
+
+            "pjsip.conf" = ''
+              [transport-udp]
+              type=transport
+              protocol=udp
+              bind=0.0.0.0,[::]
+
+              [endpoint_internal](!)
+              type=endpoint
+              context=from-internal
+              disallow=all
+              allow=ulaw
+
+              [auth_userpass](!)
+              type=auth
+              auth_type=userpass
+
+              [aor_dynamic](!)
+              type=aor
+              max_contacts=1
+
+              [user1](endpoint_internal)
+              auth=user1
+              aors=user1
+              [user1](auth_userpass)
+              password=user1
+              username=user1
+              [user1](aor_dynamic)
+
+              [user2](endpoint_internal)
+              auth=user2
+              aors=user2
+              [user2](auth_userpass)
+              password=user2
+              username=user2
+              [user2](aor_dynamic)
+            '';
+          };
+        };
+      };
+  };
+}
--- a/modules/clan/asterisk/flake-module.nix
+++ b/modules/clan/asterisk/flake-module.nix
@@ -0,0 +1,18 @@
+{ lib, ... }:
+let
+  module = lib.modules.importApply ./default.nix { };
+in
+{
+  clan.modules = {
+    asterisk = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.asterisk = {
+        imports = [ ./tests/vm/default.nix ];
+
+        clan.modules."@clan/asterisk" = module;
+      };
+    };
+}
--- a/modules/clan/asterisk/tests/vm/default.nix
+++ b/modules/clan/asterisk/tests/vm/default.nix
@@ -0,0 +1,39 @@
+{
+  pkgs,
+  ...
+}:
+{
+  name = "service-asterisk";
+
+  clan = {
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+
+      instances = {
+        asterisk-test = {
+          module.name = "@clan/asterisk";
+          module.input = "self";
+          roles.default.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = {
+      services.asterisk = {
+      };
+    };
+  };
+
+  testScript = ''
+    start_all()
+
+    server.wait_for_unit("asterisk")
+
+    # Check that garage is running
+    server.succeed("systemctl status asterisk")
+
+  '';
+}
--- a/modules/nixos/default.nix
+++ b/modules/nixos/default.nix
@@ -0,0 +1,5 @@
+{
+  flake.nixosModules = {
+    inventree = import ../nixos/inventree;
+  };
+}
--- a/modules/nixos/inventree/default.nix
+++ b/modules/nixos/inventree/default.nix
@@ -0,0 +1,386 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib)
+    mkEnableOption
+    mkOption
+    types
+    mkIf
+    ;
+
+  configFormat = pkgs.formats.json { };
+  cfg = config.services.inventree;
+  pkg = cfg.package;
+  configFile = "${cfg.dataDir}/config.json";
+
+  inventree-invoke = pkgs.writeShellApplication {
+    name = "inventree-invoke";
+    text = ''
+      export INVENTREE_CONFIG_FILE=${configFile}
+      export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
+      export PYTHONPATH=${pkg.pythonPath}
+
+      exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
+    '';
+  };
+in
+{
+  options.services.inventree = {
+    enable = mkEnableOption "InvenTree parts manager";
+
+    package = lib.mkOption {
+      type = types.package;
+      default = pkgs.inventree;
+      description = ''
+        InvenTree package to use
+      '';
+    };
+
+    hostName = mkOption {
+      type = types.str;
+      description = "FQDN for the InvenTree instance.";
+    };
+
+    dataDir = mkOption {
+      type = types.path;
+      default = "/var/lib/inventree";
+      example = "/var/lib/inventree";
+      description = ''
+        The default path for all inventree data.
+      '';
+    };
+
+    secretKeyFile = mkOption {
+      type = types.path;
+      default = "${cfg.dataDir}/secret_key.txt";
+      description = ''
+        Path to a file containing the secret key
+      '';
+    };
+
+    config = mkOption {
+      type = types.submodule ({
+        freeformType = configFormat.type;
+        options = {
+          adminUser = mkOption {
+            type = types.str;
+            default = "admin";
+          };
+          adminPasswordFile = mkOption {
+            type = types.path;
+            description = "Path to password file for user `admin`";
+          };
+          site_url = mkOption {
+            type = types.str;
+            default = "https://${cfg.hostName}";
+          };
+          static_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/static";
+            description = ''
+              Static file storage
+            '';
+          };
+          media_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/media_root";
+            description = "Media root directory";
+          };
+          backup_dir = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/backups";
+            description = "Backup directory";
+          };
+          oidc_private_key_file = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/oidc.key";
+          };
+        };
+      });
+      default = { };
+      description = ''
+        Config options, see https://docs.inventree.org/en/stable/start/config/
+        for details
+      '';
+    };
+
+    serverStartTimeout = mkOption {
+      type = types.str;
+      default = "10min";
+      description = ''
+        TimeoutStartSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
+        for more details
+      '';
+    };
+
+    serverStopTimeout = mkOption {
+      type = types.str;
+      default = "5min";
+      description = ''
+        TimeoutStopSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
+        for more details
+      '';
+    };
+
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ inventree-invoke ];
+
+    systemd.tmpfiles.rules = (
+      map (dir: "d ${dir} 0755 inventree inventree") [
+        "${cfg.dataDir}"
+        "${cfg.dataDir}/static"
+        "${cfg.dataDir}/media_root"
+        "${cfg.dataDir}/backups"
+      ]
+    );
+
+    services.inventree.config = {
+      plugins_enabled = false;
+      plugin_file = "${cfg.dataDir}/plugins.txt";
+      plugin_dir = "${cfg.dataDir}/plugins";
+      database = {
+        ENGINE = "postgresql";
+        NAME = "inventree";
+        HOST = "/run/postgresql";
+      };
+    };
+
+    services.postgresql = {
+      enable = true;
+      ensureDatabases = [ "inventree" ];
+      ensureUsers = [
+        {
+          name = "inventree";
+          ensureDBOwnership = true;
+        }
+      ];
+    };
+
+    users.users.inventree = {
+      group = "inventree";
+      isSystemUser = true;
+      description = "InvenTree daemon user";
+    };
+
+    users.groups.inventree = { };
+
+    services.nginx.enable = true;
+
+    services.nginx.virtualHosts.${cfg.hostName} = {
+      locations =
+        let
+          unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
+        in
+        {
+          "/" = {
+            extraConfig = ''
+              client_max_body_size 100M;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            '';
+            proxyPass = "http://unix:${unixPath}";
+          };
+          "/static/" = {
+            alias = "${cfg.config.static_root}/";
+            extraConfig = ''
+              expires 30d;
+            '';
+          };
+          "/media/" = {
+            alias = "${cfg.config.media_root}/";
+            extraConfig = ''
+              auth_request /auth;
+            '';
+          };
+          "/auth" = {
+            extraConfig = ''
+              internal;
+            '';
+            proxyPass = "http://unix:${unixPath}:/auth/";
+          };
+        };
+    };
+
+    systemd.targets.inventree = {
+      description = "Target for all InvenTree services";
+      wantedBy = [ "multi-user.target" ];
+      wants = [ "network-online.target" ];
+      after = [ "network-online.target" ];
+    };
+
+    systemd.services.inventree-config = {
+      description = "Inventree config generation";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [
+        "inventree-static.service"
+        "inventree-gunicorn.service"
+        "inventree-qcluster.service"
+      ];
+      serviceConfig = {
+        # User = "root";
+        # Group = "root";
+        User = "inventree";
+        Group = "inventree";
+        Type = "oneshot";
+        RemainAfterExit = true;
+        PrivateTmp = true;
+      };
+      environment = {
+        INVENTREE_CONFIG_FILE = configFile;
+        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+        INVENTREE_AUTO_UPDATE = "1";
+        INVENTREE_PLUGINS_ENABLED = "1";
+        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+
+        INVENTREE_SITE_URL = cfg.config.site_url;
+
+        PYTHONPATH = pkg.pythonPath;
+      };
+      script = ''
+        set -euo pipefail
+
+        umask u=rwx,g=,o=
+
+        # chown inventree:inventree ${configFile}
+
+        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
+      '';
+    };
+
+    systemd.services.inventree-static = {
+      description = "InvenTree static migration";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [ "inventree-gunicorn.service" ];
+      environment = {
+        INVENTREE_CONFIG_FILE = configFile;
+        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+        INVENTREE_AUTO_UPDATE = "1";
+        INVENTREE_PLUGINS_ENABLED = "1";
+        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;
+
+        PYTHONPATH = pkg.pythonPath;
+      };
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic  --no-input
+        '';
+      };
+    };
+
+    systemd.services.inventree-gunicorn = {
+      description = "InvenTree Gunicorn server";
+      requiredBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      #wantedBy = [ "inventree.target" ];
+      environment = {
+        INVENTREE_CONFIG_FILE = configFile;
+        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+        INVENTREE_AUTO_UPDATE = "1";
+        INVENTREE_PLUGINS_ENABLED = "1";
+        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;
+
+        PYTHONPATH = pkg.pythonPath;
+      };
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
+            --pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
+        '';
+      };
+    };
+
+    systemd.sockets.inventree-gunicorn = {
+      wantedBy = [ "sockets.target" ];
+      partOf = [ "inventree.target" ];
+      socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
+    };
+
+    systemd.services.inventree-qcluster = {
+      description = "InvenTree qcluster server";
+      requiredBy = [ "inventree.target" ];
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      environment = {
+        INVENTREE_CONFIG_FILE = configFile;
+        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+        INVENTREE_AUTO_UPDATE = "1";
+        INVENTREE_PLUGINS_ENABLED = "0";
+        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;
+
+        PYTHONPATH = pkg.pythonPath;
+      };
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
+        '';
+      };
+    };
+  };
+}
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -0,0 +1,7 @@
+{ inputs, ... }:
+{
+  flake.overlays = {
+    default = final: prev: import (../pkgs/overlay.nix) inputs final prev;
+  };
+
+}
--- a/pkgs/inventree/default.nix
+++ b/pkgs/inventree/default.nix
@@ -0,0 +1,145 @@
+{
+  stdenvNoCC,
+  python3,
+  fetchFromGitHub,
+  fetchYarnDeps,
+  yarnConfigHook,
+  nodejs,
+}:
+let
+  version = "unstable-2025-05-09";
+
+  src = fetchFromGitHub {
+    owner = "inventree";
+    repo = "InvenTree";
+    rev = "e0acfaa762da0dd7b2822b567202210ca8b7dbd3";
+    hash = "sha256-K+cqErDUmgPO7625P3jp7+7BOYEfyJ1nElae6RlJvvI=";
+  };
+
+  frontend = stdenvNoCC.mkDerivation {
+    name = "inventree-frontend";
+    inherit version src;
+
+    yarnOfflineCache = fetchYarnDeps {
+      yarnLock = "${src}/src/frontend/yarn.lock";
+      hash = "sha256-KpWuYCrkGN+4UnwV1STEbTL0FWcLZ7Wq8a8ST55OpGM=";
+    };
+
+    nativeBuildInputs = [
+      yarnConfigHook
+      nodejs
+    ];
+
+    patchPhase = ''
+      runHook prePatch
+      cd src/frontend
+      runHook postPatch
+    '';
+
+    buildPhase = ''
+      echo "Running lingui"
+      ./node_modules/.bin/lingui compile --typescript
+      echo building lib
+      ./node_modules/.bin/tsc --p ./tsconfig.lib.json
+      ./node_modules/.bin/vite --config vite.lib.config.ts build
+      echo "Running tsc"
+      ./node_modules/.bin/tsc
+      echo "Running vite"
+      ./node_modules/.bin/vite build --emptyOutDir --outDir $out
+    '';
+  };
+
+in
+python3.pkgs.buildPythonApplication rec {
+  pname = "InvenTree";
+  inherit version src;
+
+  format = "other";
+
+  dependencies = with python3.pkgs; [
+    coreapi
+    cryptography
+    distutils
+    dj-rest-auth
+    django_4
+    django-allauth
+    django-allauth.optional-dependencies.openid
+    django-allauth.optional-dependencies.mfa
+    django-allauth.optional-dependencies.socialaccount
+    django-cleanup
+    django-cors-headers
+    django-dbbackup
+    django-error-report-2
+    django-filter
+    django-flags
+    django-formtools
+    django-ical
+    django-js-asset
+    django-maintenance-mode
+    django-markdownify
+    django-money
+    django-mptt
+    django-redis
+    django-oauth-toolkit
+    django-otp
+    django-q-sentry
+    django-q2
+    django-redis
+    django-sesame
+    django-sql-utils
+    django-structlog
+    django-stdimage
+    django-taggit
+    django-user-sessions
+    django-weasyprint
+    djangorestframework
+    djangorestframework-simplejwt
+    djangorestframework-simplejwt.optional-dependencies.crypto
+    django-xforwardedfor-middleware
+    drf-spectacular
+    dulwich
+    feedparser
+    gunicorn
+    pdf2image
+    pillow
+    pint
+    pip-licenses
+    pypdf
+    python-barcode
+    python-barcode.optional-dependencies.images
+    python-dotenv
+    pyyaml
+    qrcode
+    qrcode.optional-dependencies.pil
+    rapidfuzz
+    sentry-sdk
+    tablib
+    tablib.optional-dependencies.xls
+    tablib.optional-dependencies.xlsx
+    tablib.optional-dependencies.yaml
+    weasyprint
+    whitenoise
+
+    psycopg2
+    fido2
+  ];
+
+  nativeCheckInputs = with python3.pkgs; [ django-slowtests ];
+
+  installPhase = ''
+    mkdir -p $out/opt/inventree
+    cp -r . $out/opt/inventree
+
+    echo "Installing frontend"
+
+    mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
+    cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+    cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+  '';
+
+  passthru = {
+    pythonPath = python3.pkgs.makePythonPath dependencies;
+    gunicorn = python3.pkgs.gunicorn;
+    inherit frontend;
+  };
+}
--- a/pkgs/overlay.nix
+++ b/pkgs/overlay.nix
@@ -0,0 +1,27 @@
+inputs: final: prev: {
+
+  pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
+    (py-final: py-prev: {
+      django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
+      django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
+      django-flags = py-final.callPackage ./python/django-flags { };
+      django-ical = py-final.callPackage ./python/django-ical { };
+      django-markdownify = py-final.callPackage ./python/django-markdownify { };
+      django-money = py-final.callPackage ./python/django-money { };
+      django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
+      django-recurrence = py-final.callPackage ./python/django-recurrence { };
+      django-slowtests = py-final.callPackage ./python/django-slowtests { };
+      django-structlog = py-final.callPackage ./python/django-structlog { };
+      django-stdimage = py-final.callPackage ./python/django-stdimage { };
+      django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
+      django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
+      django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
+      pip-licenses = py-final.callPackage ./python/pip-licenses { };
+      py-moneyed = py-final.callPackage ./python/py-moneyed { };
+      pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
+      sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
+    })
+  ];
+
+  inventree = final.callPackage ./inventree { python3 = final.python312; };
+}
--- a/pkgs/python/django-dbbackup/default.nix
+++ b/pkgs/python/django-dbbackup/default.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django_4,
+  pytz,
+}:
+
+buildPythonPackage rec {
+  pname = "django-dbbackup";
+  version = "4.2.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-dbbackup";
+    rev = version;
+    hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django_4
+    pytz
+  ];
+
+  pythonImportsCheck = [ "dbbackup" ];
+
+  meta = {
+    description = "Management commands to help backup and restore your project database and media files";
+    homepage = "https://github.com/jazzband/django-dbbackup";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+    mainProgram = "django-dbbackup";
+  };
+}
--- a/pkgs/python/django-error-report-2/default.nix
+++ b/pkgs/python/django-error-report-2/default.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-error-report-2";
+  version = "0.4.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "matmair";
+    repo = "django-error-report-2";
+    rev = version;
+    hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "error_report" ];
+
+  meta = {
+    description = "Log/View Django server errors";
+    homepage = "https://github.com/matmair/django-error-report-2";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-flags/default.nix
+++ b/pkgs/python/django-flags/default.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-flags";
+  version = "5.0.13";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "cfpb";
+    repo = "django-flags";
+    rev = version;
+    hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "flags" ];
+
+  meta = {
+    description = "Feature flags for Django projects";
+    homepage = "https://github.com/cfpb/django-flags";
+    license = lib.licenses.cc0;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-ical/default.nix
+++ b/pkgs/python/django-ical/default.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  django-recurrence,
+  icalendar,
+}:
+
+buildPythonPackage rec {
+  pname = "django-ical";
+  version = "1.9.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-ical";
+    rev = version;
+    hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    django-recurrence
+    icalendar
+  ];
+
+  pythonImportsCheck = [ "django_ical" ];
+
+  meta = {
+    description = "ICal feeds for Django based on Django's syndication feed framework";
+    homepage = "https://github.com/jazzband/django-ical";
+    changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-markdownify/default.nix
+++ b/pkgs/python/django-markdownify/default.nix
@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  bleach,
+  django,
+  markdown,
+}:
+
+buildPythonPackage rec {
+  pname = "django-markdownify";
+  version = "0.9.5";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "erwinmatijsen";
+    repo = "django-markdownify";
+    rev = version;
+    hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    bleach
+    django
+    markdown
+  ];
+
+  pythonImportsCheck = [ "markdownify" ];
+
+  meta = {
+    description = "Markdown template filter for Django";
+    homepage = "https://github.com/erwinmatijsen/django-markdownify";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-money/default.nix
+++ b/pkgs/python/django-money/default.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+  py-moneyed,
+}:
+
+buildPythonPackage rec {
+  pname = "django-money";
+  version = "3.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "django-money";
+    repo = "django-money";
+    rev = version;
+    hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django
+    py-moneyed
+  ];
+
+  pythonImportsCheck = [ "djmoney" ];
+
+  meta = {
+    description = "Money fields for Django forms and models";
+    homepage = "https://github.com/django-money/django-money";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-q-sentry/default.nix
+++ b/pkgs/python/django-q-sentry/default.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  setuptools,
+  sentry-sdk,
+}:
+
+buildPythonPackage rec {
+  pname = "django-q-sentry";
+  version = "0.1.6";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "danielwelch";
+    repo = "django-q-sentry";
+    rev = "d3a43a90c82734244d5ebf3295652223053f1354";
+    hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
+  };
+
+  build-system = [
+    poetry-core
+    setuptools
+  ];
+
+  dependencies = [ sentry-sdk ];
+
+  pythonImportsCheck = [ "django_q_sentry" ];
+
+  meta = {
+    description = "Bringing Sentry error tracking to Django Q";
+    homepage = "https://github.com/danielwelch/django-q-sentry";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-recurrence/default.nix
+++ b/pkgs/python/django-recurrence/default.nix
@@ -0,0 +1,56 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pdm-backend,
+  django,
+  flake8,
+  pytest,
+  pytest-cov,
+  pytest-django,
+  pytest-sugar,
+  python-dateutil,
+  sphinx,
+  sphinx-rtd-theme,
+  tox,
+}:
+
+buildPythonPackage rec {
+  pname = "django-recurrence";
+  version = "1.12.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-recurrence";
+    rev = version;
+    hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
+  };
+
+  build-system = [ pdm-backend ];
+
+  dependencies = [
+    django
+    flake8
+    pytest
+    pytest-cov
+    pytest-django
+    pytest-sugar
+    python-dateutil
+    sphinx
+    sphinx-rtd-theme
+    tox
+  ];
+
+  pythonRelaxDeps = true;
+
+  pythonImportsCheck = [ "recurrence" ];
+
+  meta = {
+    description = "Utility for working with recurring dates in Django";
+    homepage = "https://github.com/django-recurrence/django-recurrence";
+    changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-slowtests/default.nix
+++ b/pkgs/python/django-slowtests/default.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django_4,
+}:
+
+buildPythonPackage rec {
+  pname = "django-slowtests";
+  version = "1.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "realpython";
+    repo = "django-slow-tests";
+    rev = version;
+    hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django_4 ];
+
+  pythonImportsCheck = [ "django_slowtests" ];
+
+  meta = {
+    description = "Locate your slowest tests";
+    homepage = "https://github.com/realpython/django-slow-tests";
+    changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-stdimage/default.nix
+++ b/pkgs/python/django-stdimage/default.nix
@@ -0,0 +1,51 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  pillow,
+  gettext,
+}:
+
+buildPythonPackage rec {
+  pname = "django-stdimage";
+  version = "6.0.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "codingjoe";
+    repo = "django-stdimage";
+    rev = version;
+    hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    pillow
+  ];
+
+  nativeBuildInputs = [ gettext ];
+
+  preBuild = ''
+    echo "bla bla"
+    echo $PATH
+  '';
+
+  pythonImportsCheck = [ "stdimage" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/codingjoe/django-stdimage";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-structlog/default.nix
+++ b/pkgs/python/django-structlog/default.nix
@@ -0,0 +1,48 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  asgiref,
+  django,
+  django-ipware,
+  structlog,
+  celery,
+  django-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "django-structlog";
+  version = "9.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jrobichaud";
+    repo = "django-structlog";
+    rev = version;
+    hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    asgiref
+    django
+    django-ipware
+    structlog
+  ];
+
+  optional-dependencies = {
+    celery = [ celery ];
+    commands = [ django-extensions ];
+  };
+
+  pythonImportsCheck = [ "django_structlog" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/jrobichaud/django-structlog";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-user-sessions/default.nix
+++ b/pkgs/python/django-user-sessions/default.nix
@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-user-sessions";
+  version = "2.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-user-sessions";
+    rev = version;
+    hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "user_sessions" ];
+
+  meta = {
+    description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
+    homepage = "http://github.com/jazzband/django-user-sessions";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-weasyprint/default.nix
+++ b/pkgs/python/django-weasyprint/default.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  django,
+  weasyprint,
+}:
+
+buildPythonPackage rec {
+  pname = "django-weasyprint";
+  version = "2.4.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "fdemmer";
+    repo = "django-weasyprint";
+    rev = "v${version}";
+    hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    django
+    weasyprint
+  ];
+
+  pythonImportsCheck = [ "django_weasyprint" ];
+
+  meta = {
+    description = "A Django class-based view generating PDF resposes using WeasyPrint";
+    homepage = "https://github.com/fdemmer/django-weasyprint";
+    changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/django-xforwardedfor-middleware/default.nix
+++ b/pkgs/python/django-xforwardedfor-middleware/default.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-xforwardedfor-middleware";
+  version = "2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "allo-";
+    repo = "django-xforwardedfor-middleware";
+    rev = "v${version}";
+    hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "x_forwarded_for" ];
+
+  meta = {
+    description = "Use the X-Forwarded-For header to get the real ip of a request";
+    homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
+    license = lib.licenses.publicDomain;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/pip-licenses/default.nix
+++ b/pkgs/python/pip-licenses/default.nix
@@ -0,0 +1,74 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  prettytable,
+  tomli,
+  autopep8,
+  black,
+  docutils,
+  isort,
+  mypy,
+  pip-tools,
+  pypandoc,
+  pytest-cov,
+  pytest-pycodestyle,
+  pytest-runner,
+  tomli-w,
+  twine,
+}:
+
+buildPythonPackage rec {
+  pname = "pip-licenses";
+  version = "5.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "raimon49";
+    repo = "pip-licenses";
+    rev = "v-${version}";
+    hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    prettytable
+    tomli
+  ];
+
+  optional-dependencies = {
+    dev = [
+      autopep8
+      black
+      docutils
+      isort
+      mypy
+      pip-tools
+      pypandoc
+      pytest-cov
+      pytest-pycodestyle
+      pytest-runner
+      tomli-w
+      twine
+      wheel
+    ];
+  };
+
+  pythonImportsCheck = [ "piplicenses" ];
+
+  meta = {
+    description = "Dump the license list of packages installed with pip";
+    homepage = "https://github.com/raimon49/pip-licenses";
+    changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/py-moneyed/default.nix
+++ b/pkgs/python/py-moneyed/default.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  babel,
+  typing-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "py-moneyed";
+  version = "3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "py-moneyed";
+    repo = "py-moneyed";
+    rev = "v${version}";
+    hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    babel
+    typing-extensions
+  ];
+
+  pythonImportsCheck = [ "moneyed" ];
+
+  meta = {
+    description = "Provides Currency and Money classes for use in your Python code";
+    homepage = "http://github.com/py-moneyed/py-moneyed";
+    changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/pkgs/python/sentry-sdk/default.nix
+++ b/pkgs/python/sentry-sdk/default.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  certifi,
+  urllib3,
+}:
+
+buildPythonPackage rec {
+  pname = "sentry-sdk";
+  version = "2.26.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "getsentry";
+    repo = "sentry-python";
+    rev = version;
+    hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
+    fetchSubmodules = true;
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    certifi
+    urllib3
+  ];
+
+  pythonImportsCheck = [ "sentry_sdk" ];
+
+  meta = {
+    description = "The official Python SDK for Sentry.io";
+    homepage = "https://github.com/getsentry/sentry-python";
+    changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -25,7 +25,6 @@ in
    "${inputs.liminix}/modules/vlan"
    "${inputs.liminix}/modules/ssh"
    "${inputs.liminix}/modules/bridge"
-    "${inputs.liminix}/modules/health-check"
    "${modulesPath}/profiles/gateway.nix"
  ];

@@ -49,46 +48,14 @@ in
      name = "resolvconf";
      up = ''
        ( in_outputs ${name}
-         echo "nameserver 208.67.222.222" >> resolv.conf
-         echo "nameserver 208.67.220.220" >> resolv.conf
-         echo "nameserver 1.1.1.1" >> resolv.conf
-         echo "nameserver 1.0.0.1" >> resolv.conf
-         echo "nameserver 8.8.8.8" >> resolv.conf
+         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
+         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
         chmod 0444 resolv.conf
        )
      '';
    }
  );

-  services.reAddDefaultroute =
-    let
-      threshold = 3;
-      healthCheck = pkgs.writeAshScript "ping-check" { } "ping 1.1.1.1";
-    in
-    pkgs.liminix.services.longrun rec {
-      # dependencies = [ config.services.wan ];
-      name = "hack-default-route";
-      run = ''
-        fails=0
-        while sleep 10 ; do
-          ${healthCheck}
-          if test $? -gt 0; then
-            fails=$(expr $fails + 1)
-          else
-            fails=0
-          fi
-          echo fails $fails/${toString threshold} for ${name}
-          if test "$fails" -gt "${toString threshold}" ; then
-            echo [+] adding default route
-            ${config.services.defaultroute4}/${config.services.defaultroute4.name}/up
-            ${config.services.defaultroute6}/${config.services.defaultroute6.name}/up
-            echo bounced
-            fails=0
-          fi
-        done
-      '';
-    };
-
  profile.gateway = {
    lan = {
      interfaces = with config.hardware.networkInterfaces; [
@@ -156,7 +123,7 @@ in
  defaultProfile.packages = with pkgs; [
    busybox
    iw
-    nftables
+    iptables
  ];

 }
--- a/sops/machines/almach/key.json
+++ b/sops/machines/almach/key.json
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
-    "type": "age"
-  }
-]
--- a/sops/machines/alpheratz/key.json
+++ b/sops/machines/alpheratz/key.json
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
-    "type": "age"
-  }
-]
--- a/sops/machines/mirach/key.json
+++ b/sops/machines/mirach/key.json
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
-    "type": "age"
-  }
-]
--- a/sops/machines/ramus/key.json
+++ b/sops/machines/ramus/key.json
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
-    "type": "age"
-  }
-]
--- a/sops/secrets/almach-age.key/groups/admins
+++ b/sops/secrets/almach-age.key/groups/admins
@@ -1 +0,0 @@
-../../../groups/admins
--- a/sops/secrets/almach-age.key/secret
+++ b/sops/secrets/almach-age.key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:qkIwSe6DxrWpmUgMi6G8srenbwUuMHSKXgzL/nybITl8iXTfoLBucjlPp6JpBmfs2NdOEqWS2+QUcnVRAueH9rbABKeAVdoGdio=,iv:NHplT1IbuYfyq8n2Nqq6TBRFi+nTtOOreyprIlXwWHg=,tag:/BU417a9kYMhgexskyE0Qg==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObGdiWjBtTkR3alBDTEdm\nb25kbWY5WkFUd1dsanZ5M2FjQm11TnBVdWdZCnNOSE45cFMwallGRVZuMTdlVTBO\naTVnS29vQk9QZVJyaGRzTGNNcUdGQ00KLS0tICsxZ3NtVlVoc2FpQUMxSm9uZWF3\ncjZXcDVwZ0pUcDlqOGN2aGxmME43NXcK28S/SKkLgXJWQ5sdDxcGyoO74e0MaxeM\nx1kGfiKJBLqok+wNOPO9SFHbWY/ITH5RdV8iLchPBe2VM9IuC0nZ4g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsb3dPMGhpdHE5SlBQK3hu\ncEJqL0JaZk1rOE5MS0krUHpyMUNMUkhyMFdzCmM3V25vS3U2WENycmZIRC81Y2k0\nSEJTekNaNTFMZy85VHh4MENvbUk3Uk0KLS0tIGExYUFNVlRZeThQRHlKVDZWU1Jn\ncUNRd1cwZU1SL3BKOGZZaFErR3F3NkUKnILS6XWSl2MaQ+FAZvRAZzgJxL4OWl+v\ntDxXBBCapOeoLgRH61Q06JnDjgBCz14QIROgZP9Zji/HsdSeRiKR0A==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhLejJLVEk2\nR0dtY0FJQUYyd3JObitPdEcweWVUang5ZUdEcTg1UlJUMFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpvUS80dk92MjBnN1N6Y284RGE4T0tR\nemN5Wks5dS9vdWRBTU1YYlo3UXBZCi0tLSBEb0pmU2xGMFFjazZ4em5uT0wyZUZW\nT1JqdjZjTDRwUUJLNzAvYTFreXp3Cqfcpn+UlJE63ymHbremaZ8X+wDDQw3gPGmX\nav9dmxfLCPLwwTbd3e8N98Jnc0OwGUiKTavtjpph9ygThvo86jE=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNqaHoxdk83\nSnFNRXg4TzZLY3BSOXNSdWVrby90V1Q2Q2RRUi9xZGZ2Q1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpZM05YUEFYNEVRM0FSYkpKY05pc0hq\nWWRzTzFWSUZRNmI2NENDL3RyNVkwCi0tLSBPMURucGFSdHJER0tqUlRHb2NmNmYw\nVTZsN295QUJZQ1BObERGYjlESGUwCuYMMiu6NyO8Q/lvBHI7muzQOZfaL3Ny3S3E\nE7TlShnbLEsDxApvBV1KJaiYY21Z+1Up9DM0xQskFBYQCya3APo=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEw4eHIya0RX\neE5Nalk3YWs2R1ZFcmp6OEIvSDhPMVlZYk5TcTQwbXBpMlkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYMURZbG5lNlYwMUdVSUtsRlJqWEhj\nbHdvZVdpTGt4ZzhRZERpWWJkbG5ZCi0tLSBJMG93d1ZPa1Z3WWVDSjJ2ZXEwRDJD\nQ0cyQUxlaTdycXhGVVRzSnAvakJvCgoORUSoqTGsS5hvnV3hJNIz1Y9pTR7foSz8\nXMd/f3TObHeokHsejbxx2yMDLPt5fD1MWc5MioLyMNMpwjqq+T8=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvYWZ3a1ljTVhQZFNHTGxP\nQnEzdm9QM1ZqMGZEMVF1UzczeG5LYW8wam44Cm9GKzc2c0M4dEgramE5VlBQK3NQ\nTkdlajFFRzU1aXorV0tuL2M5cENQRkEKLS0tIERWcFd0MXAzYVZOdlgxSDcybk1O\nMkQwM1l5UGRVaHdtNCsyR2Y0VXRSSkkK3Bmoxs/GeybD/cwQf2d8QGdTVa2tfKXp\nTExxPuwsrb+/uaooHbCefv35r8jAmH67fJPM8IjyrcmW9HQpvL9R6w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5SGlpbnpUejhLVVNBVWN0\nMklqalJvT2NTL1VhcVIyUDRMQTJ3cUdHVWtJCmpWV1B6QkRwUHZ6K2pzNDJFSmpi\nZWlpNXo0aXM3Qlk0ejlMWDZ3RXFLN1kKLS0tIFYyYnB4VmhWQUoxNmlBMXZQT3ZX\ndW55WktEOGhua3Y3a091a1ZLbXV6ZzgKqQ9g37DyZNJDyjarEKqnftB4l8JCyCpx\nVJLSsjC4kvQCMhRsgZuLZaoICNRgOQiPIW8+N+bqNQ/WxcoOZM2z1w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Z0x5NUJnK2RqYXNzT2l5\nbkd1UWgzTnFpcFQ1Y2RPQlFKSktRV3kvcFFrCkRyOXRDNHFHY2QrdGhrM2JEbzQ0\nb0xPb21qd2NjRGUzVUhBdW5sVkVld1kKLS0tIEVNQUwza3luSCtEblphYnBlbmJT\ndm5IMVJUc2hBVVRrZEROUzI0YllRVHMKIq8EbkeEXMDDh+MEQqkU7BtdlMTmeGYn\nHgizD8RFh4/0A2MifmMD/9OarqSNQXvQi8z2rTVctLMcLCfuAf53uQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrOFFUdmRIQjVXblRGNjFq\nUmNaYUgzY2hsaXRrUXRZQzFrTWloUG5xbnh3Ck1hYWJXZytEQzJjWWVGblZ3WGhV\nc3FSNXpPMVU2ODdDL3RNT2FTT21iNXMKLS0tIC9xK3NGRnRudVQ5RFFsVGI5MEtF\nSlljWXhUVXVhc2JmZ3k2RE43ak1ScGcKGaUeC/5UFHVLu9NETJTIVsOd+NnXphZ0\nQImkKtlJXxQ4OBJWGP7Ybm5h4mWiqqVWIrkodyH+qo1/EyOwZ7OjgA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:11Z",
-		"mac": "ENC[AES256_GCM,data:rEbXQH/lqWkL6EG+DoRNQtNTY0rIXQDR5aK/VFfZLCQw5RYTOdnnAeK93z5uV/jSJ6PdwCPFLbCKF34+aKwSS1xVrLp2oZb0aK1J85sP5V41+r385rxB/0BZP7dk4IaAkEOnU39qoyo0hCYROJ95V+97JhdvV7Y0l2zXypdLuNM=,iv:MqXHtyaOb4di969TLoAyhl0Kpo/JsfUU6pS9Jwes2oI=,tag:2JSV57+uAEQPNm8ODmCocQ==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/sops/secrets/almach-age.key/users/kurogeek
+++ b/sops/secrets/almach-age.key/users/kurogeek
@@ -1 +0,0 @@
-../../../users/kurogeek
--- a/sops/secrets/alpheratz-age.key/groups/admins
+++ b/sops/secrets/alpheratz-age.key/groups/admins
@@ -1 +0,0 @@
-../../../groups/admins
--- a/sops/secrets/alpheratz-age.key/secret
+++ b/sops/secrets/alpheratz-age.key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:BbWM+ivTGdZbMPymSsKWOuUbcozyBKWuXeO0bGTElE2l67OsPKD+Mdw4a3sRRY9xs1RatQ8vg9CId/wiZJSv5c8oogjo/bv3m9Q=,iv:iwtN0Ko7PZjMrPtzzgNvFz5n6X07Mpy4oF+8AZr0nWw=,tag:oFxc/34dkHNkQ1IfACh87Q==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdFhxQ2hndlFoS1dGd2Ns\nMVFJN09RL2pSekZ1bTNuSjFyeE5QVFQrUVJFCndabkNqdXFESTQ5TUY1TURhZjcx\nb2RrTGUxQUFMOEdadGFFMFMwMUIzUVUKLS0tIEh5Q05SaWRJbHgwVC9aMWsyUUN3\neVpnRVQrUjM3Y05KbTRLR0t0NHFRWTgKbMpXKBQJhHedMYbDB1/N7ASUJ5m8bM7X\nuC3BSGXUmrH81krmnbdaaMontpllUtpdmDd1hYOAbQLVC3UYADfbCQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxejVIbzBWMFYwTEJyWUZC\nK25GeWNtWThUVVRKMXJnQkN1blFFMVJMVEU0CmJGdURFbUVYMWR3d1d4ak1SWFlN\nSHVDYW1yeUJwWUZwT0lMRUgvQmx6c2sKLS0tIDVIb0h4VnJPTkhlcTN0S0dUMmp0\nRXdxSmpXQ0tkZnBUQ1plMVI2RGNxVFEKGnJ5y1umJbn0qP5aCGs/AAuSJMRl+cIB\nfI8wVSGzeRtaoryAIFD/b2STSfBDyjKOkQOQXML+YEsEwqLlCufWKA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9GcTYzaFFz\nLzduT3BpTFhwUGxyMkdSMm9oL3J6UGZCcTJ3azBTdVBnUk0gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpkanEzVWo5b1N0ZU4ySWR6MHBTK0tJ\nL24yV0FLa1lId2JPaWZ0aU01MVRBCi0tLSBVRXJxMlVhTGZSajhBZ21TT3Nib3ph\nSnFSdDlpbmg5dW1oNnlkSTVTTFFNCs2S1wPrTFqeOx1kvMPiRJs99VbXZyU2j5yY\nU027yIrDzqpcfqcWx9FjHNtDJzJM/150dNkwieheGCOCaHpyqnI=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExsR3l0VWc0\nb1h2K0tPNjhFaFhJTFREQXR6Q2gvdjZSa1RKeWtVWE1XZ1kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYblNDNWZkM2lnUXQyVjYweGZWUnJC\nS1p1N3N4RCt4RDZZNnRCSi84c3ZZCi0tLSBEUkQxekp2alExQWpWSkVoWmpia0hJ\nbldabG5LckwwOVlHUDh1cXUvMjZnCn6Q1+kL5JG2org5bxIa6Y6Lgu+LlTyM2fhp\nNmhsoxrah8FGCsBkSNRwsVJE+RxalkUygQ+hf+ss+dDPbDsZ2oA=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDk3M0J0MHFR\nN0E0a0xXN3ovZWVWQmkrQ3RBVklSTUwxQ0hmZWwyVDdlUncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLdUFNYXZ6SStzc21Tc0JoSXYyU0x1\nZW5FbUtGVDh4RmZHUEdGWU1sbnVzCi0tLSBneE90QWp2d01xekVvV2p4RVAxQ3E1\nYjljWk5NTVJWYlI0UXVWQ2J3RkVvCkmNGybBIyBQNh2q5NOoyEg217n6P6a31XnL\nB8a778HPbmT0mhO4QvYn7R/duo07s+vu5mRm8gc5AkCpXiMNkRU=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dkNRTFpJcTJJVGlmMGc1\nOXMwRXVaRVdlN1RxdWx1R1AzQkliZjZkbVR3Ci8ycGxwVElGK0h1N1VKNFI1dGs3\nS00vd0gvRzBpVFN3SGZRaUVONG9ObjAKLS0tIGIrN2RiU3J5Ukw4SE9XU1VYYSs2\nMUw2ZEowbW5LZ0JXVnZOQTAzZm1aRWMKoM5Dj/mNrSERSCgZTobwMR5Bm1V6L3Yt\n104IQPfZaRv+eSNoKFv3mTL1C/sdRWR4wevQ5rvR8E/Y3CpymM4ZRw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ZGtpZm1ZYmlQRzVId1Zk\nTTNCT0N6aTJzR01tSy9LWTdYbXh3Z0tIeEhBCmQ0QlhDRzdlSXFlWkQ4aXRNQk5m\nTUM2L2J6NzZoTDZpaG0rSVJrMTFsdlkKLS0tIFI0Z0w5dzJOV1orcFcrazdWcHpz\ncDR2MDd1UHdIUlgrblQwYnd4aWVvWVEKJ8U56ajnsWdp96ARKFw1zdLY7z5zhgFZ\nMnd+j5VpjIn2AtIS4w27A+2PX7x+ZysEnnE3K4ndX9nSAzk9shSxpw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbXkvSERJZkgrM20xMW43\ndmFFWXFZVytwZm43SlkzUFM2dkZQdU9sZkQwCmh0bStPRDVOYnlITWdFdU5YNElk\nRk1uWjY0QTc3eUdSY1AyTHNTeFdHeUkKLS0tIE5MV21kMlBYbUIxMXJpZ1Y3VktI\nRU1jWVNEN2NCWi91ZHVHWk5CUnpVVzAKlS0amgC+dhZE6TExIGUURr/OhoudnZLf\nfpMXhkGbl5YsTm0Qeqaqu5bNo/XN+77e01WfDwRz+PYp7QXdhMN8XA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaUIrUHpINE85SVcxOE1r\nU3RnQlEwMERnbFIweEZiblhPdEE4YWFZaEJjCm5NVGJYL3pQMlYyS29xLzhtMUlQ\nUlJFTytkNmk1YWVnTFRuQ0licGptQUUKLS0tIGVkRnpWQ0FwUzhVbmRNTWNSS2Rs\nQ0MwMElRV09ROFZ2YjB5cnEybzJ1Z3MKeOo3uU9D9BDJB8m9cZccIj8zztbvGqYV\nSWvR5AxNLvcEkbNKvxcDRjQUSDLWhcjdcozs7JgjO5P7YlOnZNACmw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:36Z",
-		"mac": "ENC[AES256_GCM,data:06949qq+AgyxgVLVx9ARvul77ypg8Kq3cqpFOWU/HARR1jgkf7n66SWTmVixkfHy5GqOJEBFQ0HYHzKkQ0BHr94se0bFlR5W+Md6pmDVH0sbnB4+leqR0I/1ZU7o6p3hj1nXlkUWRN6oM0wp0Hj3ClOPM5jZ6C44+cadswCQvGg=,iv:5TwgpN7waxevK8nnRaO/bunyjGNvFojXPPIPp1OrRuA=,tag:vycrcH1t7ZPsyqekae5Q2A==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/sops/secrets/alpheratz-age.key/users/kurogeek
+++ b/sops/secrets/alpheratz-age.key/users/kurogeek
@@ -1 +0,0 @@
-../../../users/kurogeek
--- a/sops/secrets/mirach-age.key/groups/admins
+++ b/sops/secrets/mirach-age.key/groups/admins
@@ -1 +0,0 @@
-../../../groups/admins
--- a/sops/secrets/mirach-age.key/secret
+++ b/sops/secrets/mirach-age.key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:eJkzZkzzof8qcmbDOirf37W6dw2ypoK5DZ0ONaQkrEeSb3m2qJPEjMPK+oLjayTrajLNj9/e/mbJ8h5odQoue/Wl2iOPw0RA6Z4=,iv:Jx354QB1tReAoeJLHEuEI32yp71vicCwUk61z90WI44=,tag:NotiMJPhArvFNNiXTNK33Q==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZYXJCdSs5Y3VWbE5TOEJp\nVmpuL2ZOYU5pLzgxMHFkMGtpZG1QZGlENVY4CmVKaERaeGVnUndONzIzWmdtTFcw\nNnNzSW5Zam90OE8xR3VEVjM4V3RGVWcKLS0tIEZSYktnS2xoZlF6Yk4wcVZweWly\nUHlOOE9vUmNYTHBTSytwakhaSnZ1VjgKxoUCSVgFXOKsyXUWe7z17WiUa2OpwImm\n5NV2PeQ8uOnMT0c7Iwl/VEsXbYbOtnW8VT5m/JcLIdlXCBqkQ/B8PQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVjVmSXpwK3JOQ3Jvd1VT\nZFN6ZGlib28zSE9MN3dwYkN2dkpON29EV25RCjhyU0hsZmVmZEY1SVZXb09UeXlh\nWnROTGlGUFNLL2lsY3RhSTVjVE4zZUUKLS0tIGs4Zi8vMnZLUUE5TGJ3TmppMk9D\ncDVoYnl0MGpsbmdQeUYyUlRuM3htbTgKHRLMrPGg9FljvwmWOZUODER/hSsmUNaq\nZBVNml61LztfZMgGtp56VZ77XU1bVLREL1VFyeTwzjpbYggLbuRJpA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHUveXJOK2dI\nTVJDamJzUWtmWlB1aVJCcmQrbElBaTRxYU1RQ1dUWG0wV1kgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3cE1ZOWtDNUlqNWJxNjdKbjVNTGk3\ncWZMVEpMM0RHbVpUQ09EZUtRd1drCi0tLSBpaHNkWDUvSkgyODlhZ1V4Si81b1NK\nV2NUVWdVbTNZV3dqalAvMFc0QllVCph57nPcAfs4fu9kKIJZ5q/ejeP5u9W+HzsV\n+dpVasMbA++RB9SDXuifRkNC4b18fKiiOfOcutT8saG8Fth8/PQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdKVFRBazh1\nVzJuQkw3ZWZJNGhPOWZUeUJnS0o3MDlvd0hTRnZyWnRrR1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplb0hlRElvQjBtaXR6cC9Ha1BhcnZU\naTZPakd2Z1JuMEZSWTdET2Y4cGVvCi0tLSBNTEZKNkI4ZGw3aFhvVDNCK2JWd0c2\nRkpENXM4OXpkQUJOWnNVZjJzYzk0Cic2m6ZalXUPRH2KjKUNlH3bV58NG0CMIgA/\njl1h5rGuFDLfuKiQehkOebf0k+Ndy1c2frJQ1wyM6Cs9OzLexqQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGFmWXJhTGRa\nckliN1dQR2hEYzBFWlNFd2hEWktvejluQkNQbWVnWXRZQ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEQm9VK3BhbUpML2crSjdPQnk4aHJM\nV0pDUVZ6YmV1dUJzeXJBNkpDNmpFCi0tLSBWSWZRSWJGb1J0MGtXL1k4T1RVRWgy\ncnF5cCtUTXJKSFpCN1Q5alJxMi80Crgi+HtBO07LNKqN6RbRRzzjcrym+BkomFTT\na8ZLyCGECiAXoZ26GJ/RRjzru8S8VhArmy3uwa3mKpT5STkFYAQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMStWdXpIV254WjNzMERj\nRXdpSG5EMmd2cld1bWYzdXJLQVlVVnVUUG1VCmJSMFk3SGdacitLbWQwT0lvWm9F\nanhIcUYydGJzYXVYZm95dWM3aXdDVE0KLS0tIHM4TDBuT0RjSG1oUHdYT2RVMHBw\nR1pTY2ZnTXNvZ2tObFA1WFdWZGFsTkEKH30K1NjoZatx84XhIqSxAZwrYpZ8xQqF\noFkKzh3NZ5dp3xJEIIlpSX3mydyB1+THBtKlx0x7oyN2AudO3TE6Pw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPU3ptYnZxZVcrU0Y3MEdM\nb0hrTTBPYzNCYjhlZjNKSFdJRllGeDhVYUQ0CitYM1Bjb05lYW9adEh0VjVaU0l3\nWFg3NXVZamlkQ1ZLdGhQQ1ZiNmdhUWMKLS0tIDR4bVhxY3NSZ01yZnR1NzllMEwz\nRytWbi9BYnJFcWE5cW44R0c0WWpSQzQKeEjW8I/5XNhEs+FCJ4xtjxD60OMfB169\nQ6zBQP8E/yfTIva4dsLCdvRTB49ibsinfzZOyBQ+ICQPz3g8C3Lc2Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpa0M3R1R6Q2wwazROZDN6\nUzFMYml4b2dNcWMycVNXNVIvQzhDUGZ3M2hzCmxKR1RhYTJkN2pnZjdwUW5PT1BY\nckpEeW5IcVh0ZklEVk1VOFkyZ0tDRGcKLS0tIDA0Vmx5NHhCWGQxZzAvOTBUWTFm\nYVlEdzlnWmpGM05XcTEvaVV5OFVNcEkKh2qhAWU+Hwz1Z+JAkirnGc6CMbykCOKy\nTyNxqzHX7z7o+8V+Oc3ChiuxSkruZQyajRgLdkrEZq/bnJDNfM0hgg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMTEttZ1dZYkhBRW1CVGdr\ncTNHTTFHUEZIVmEwV1YvSHgwL0NnWC9CaVdnCjRQWHoreldrZktsbFdCTEdLaXhF\ncTdWTlJGV3hZV0pBNUxyM0UrL1FIRUUKLS0tIGlpY1d2WXFSUk9WWUJ0RDdKUk9H\nL2p0cFNzQjhsYlRkd25RK0ZhUjlIKzQKj5vlI+K3D02AAC8j8Nn99EgOnEc2YRWj\nm3XTcyiCFTQDVMPWbUZXPelCIBLSPmksC1zLkWtlaWmOFkT/iLzWZg==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T06:48:44Z",
-		"mac": "ENC[AES256_GCM,data:dMYkl39sOxlSL4Bl0S2FTHdHaiRECJkIrBSfthnmT0/LxcYoFi4RM27pY09QFfS5Ohg1DC0Chs+hSBCLsVidSWJCvwyuF0ir4zKJZM7+KeyJFq51InhiqjLXJAMwh0BL8BnCiLcdlblbCCg1JKrlwfMrPl3dLYhi/a7DVWMXz6g=,iv:9WGXjfhrAoEtecJWG99cTZTs6i34AfmL3IkeefuJmJY=,tag:kKgB63Cj9sFjhPfJjEruXw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/sops/secrets/mirach-age.key/users/kurogeek
+++ b/sops/secrets/mirach-age.key/users/kurogeek
@@ -1 +0,0 @@
-../../../users/kurogeek
--- a/sops/secrets/ramus-age.key/groups/admins
+++ b/sops/secrets/ramus-age.key/groups/admins
@@ -1 +0,0 @@
-../../../groups/admins
--- a/sops/secrets/ramus-age.key/secret
+++ b/sops/secrets/ramus-age.key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:lc5PP4xpLq/JXq2LkG/5zkEY5luxKC7EZHx0s6exiwd+UtuGb5rjIOq0kUBFuJWYFWduqcvNS62kR76oQpRfmjIkq2t02NxZ1lA=,iv:eZsHK9u5Rvt886Elz7Vm+PMD8urm1UyoNbNNwnlJtj8=,tag:inCrDdsNmLb+L+LpF9k4Ag==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0STRlY1h1NTVUdDJRM1NO\nc1hacUg4TUtlK3Y0dVZqaE5LdUlqMkFKNmtVCllTYXFHdXM0NVdUejhHZWM1TnVx\nUURvd1JrQmR2K0N3RlZIS2d0RFhTRUEKLS0tIFp1ZlJSNmd2V3dpN05LYWh1VHNC\nbFNkdkY1aUhTZmM1R1FKUWlGWThSdE0KYxgpuknCD07awfN85PkaJjPohYyqT1wL\nbjUcGo6TmFQKIgEzTzNj+in1dm9wz0AnYl1teiHa9WjK/Udd2BANBQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCd2Z1aTFYenowSnczWk05\nVEZ3d0FUNFNkV3RlWlpFWk5jd3QwazVES0ZVClVjY0Y2eW1hSGEraVVpSjdoaHMr\naS9lWFUvbFl6Nzd4U2l6dUhXRHBlT0kKLS0tIFNCYTlSL1VnNURBQUxoYVozODZw\nVVRkVGVINTV6SXExN3dCT1JmRmNFdlkK+jNS9cUz4TzBBzrtxuYcoiEmxKcRNTlt\nqksdFqnPWzKI+edJSWq3rkBYeuI7c4wmxTtsgVtHbv2jwbD1kJar1g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNxVDh0SWNL\nOUt4TG93eGVjaUxzczhnVjNYRlB1Vy9haWxjYnN6aGI3ejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxSEtwcUxGcVY3RzNjR2REYmdrRWV6\nYWJyTjhXMVNtVFVpczRDc2dDaHRBCi0tLSA3NUVyR3YvMnVsd0l0TXIxQS9odUZO\nZnJWV0MvRlpwU3luNm9FOGtDNkhzCm/yGJJvQf5qvBRyGLrmCeiI31qHr+JoZ2Av\nbqMUeg3Vv82ffTLT6GX+JjiG0wQFcYAX3/k0noVN9JMR/boiWIc=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpMZ3JmMVFy\nU3AzeEFFa3B2TGxSL1NlQjhSa28waGtLQUlFTkp4N0hVeEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYVDJSdCtnVHIzVXhSQ0lXRzE5dlJo\nS1NHa2F1WEpJK2xJQUQwa0RNNCs4Ci0tLSBBdmpiZGVSOWJwanRiUjUxT3JMT0VT\nM2k5bE0zOW5SVWg2ZGw0QUVvcWVrCrc2TjHS6Pp38MTPU9H59q2seVYlESH80V4+\ny1/qjB6fK8lnnyi5TLrSo+M9MAcG5T4EGvCcAPuzjTvF/DO7hxk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9jZllPWWhO\nV3pDa1MxSzF2ejRJMXJBWDlNMzZqcG1JdVB2Y0xjMlJKeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpwSUdWWlFFbW55aXVkZ0pSeUVPRkF2\nTm5tTnkrTGNmcEdoWE1UckwvcXFBCi0tLSBnN1J1VlQvVnRXbkEvOWtLbHhzVzNN\nU01XVkpRNnd4bCtYb3poNjR4bno4CirmDl+6Kebk0jMjgRp00d8kpkzGtQFsZNht\nm5MPBM+FXVzpDcEWQGUlLr50yDKYVzHdIeeuGsWZ3KaI1GM8pdg=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByOEQrR1Z1K3RETGgzVi9H\nNXIzUW04UHFCMk5vQVZEN0taRWJwV040Q3h3CmpaVWV0WDZNemFSTHF1TTF4YXI3\nL1loMnA5OUNCbE55aGUyR2EwbklaczQKLS0tIEpnTkkzNStsNmdNS01HWDhXY2s1\nZ3hMNXA1dXUxVmxucTdtbWN4akQ2MTgKAolaT+61/BN/yzljENx7YZTrFRGA8zwN\nsquQs9vnFS8yduVMoaemXrCLTpiQ1KGCAWVX8pPtY8+GV9YKLZsV7A==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTlNuQXN3VU9TVTlQd01N\nYVBpN1BxcjRLYWN5SUg3TlhUbHl0UzkrOWcwClZ5OHpOcGp6V2craFBkWCtwcktp\nWDZYYWR4ZjVhaVNPdEN4WmZ0UlJqR3cKLS0tIEx2WXdQL0x1Zm5rRnJGMmJQWFVW\nNW1nMFlac2lyY1ZuOW9OZmNWSjJxbTAK72xqJBlpV3UWAFhGlUjudEILQSnGDhQm\nS4U51sUc8rrUZLlmAivWg1nxCUAdrhLo/r9OuITR6QX9DeFsaeR9uA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WmVUUDJ0V2sxS0Q1UFZv\nWldFK0tRSlViUkc5aXFTV0JDdDFVbVVXR1QwClUwLzg0eTAvbUtaTVRFV3ptZkJQ\naDR1REl6MXZ2cDlsZzk1SVI1N3pocGcKLS0tIFlUbGFPUXAxWVBvNXhjZ2QzWGNh\nWTkrMklIQnl2T3ZYL0Q1c3JOTU85bkUKL4h+PDQSnVbls8iuioUHTBVpVh5Yhhx5\nrK9ELFCYGPAVzbx5cFoOapnIJcTQUAPZdBpmlm7kgRmMLXptMdGkGg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFZ3lPeVJyZUF3cVEvWnhH\nbVBwRmxaQUhaaExQSVRyeVJNZVFSRkFrU25NCkZDcklIcU5TQWplQkE1ZkFTUXB5\nLzZ0VFlEdks3OWpGM0JMSi9ZOVNndnMKLS0tIG11UFZkdWRYdHZJNk9TSDYvaHcw\nQUk1dGxIOFhwaXJZaEZNdVppWWlpdUUKQJ/UjgWIaeKa4o2El4cFkwv+O0bi9SOp\n13XExCNLB+BtwOGPREWbrmW/Z15c8koBEyrW7iuIhu0Pgz95oAF2Sw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-26T06:08:15Z",
-		"mac": "ENC[AES256_GCM,data:ovjPl0pJ6DSJGjGz+Zt5GLbwu3ZTMwOKNSsYxIx1NcjWAiGYpPNFcFrD5OBciVQ2K7VxlRoWW5WqbJt7mrvQXDO69LxvQqiK1+qHeFJOHRd6Sp29fRA1aqEz+kOif0SSzaEkHOXAp1kzk31CnEfIG2j5yQ3oMyrSqNnhnVrx6F4=,iv:NdeCrqNo5SV1Npu8aqPJcZDhPMGfUviyBQi2CUjYZOM=,tag:yM6P7P2vLUMs9GdT284Gvg==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/sops/secrets/ramus-age.key/users/kurogeek
+++ b/sops/secrets/ramus-age.key/users/kurogeek
@@ -1 +0,0 @@
-../../../users/kurogeek
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519.pub/value
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdOw6Q9jQ7fqnfkjycFRqJ7OymjqZuszpuNHFhjbqNT 
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519/machines/almach
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519/machines/almach
@@ -1 +0,0 @@
-../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data: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,iv:lZW46IVDrqYM+FrqwJu5rcHOiG2oOBudTtRPQ14Cvdg=,tag:/4LsI2sDgFTUAYB3X6fIZA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYeUQ2QmN5aWVQeHNhZFVr\ncmxKYXphcXE1Zk81clRuelBhL1pkRFhrK1FRClhlZk41bTdSbitub2orUzVRcEph\nZkRyd2RLd3VIcHFHYnM3ektnQ2RVOTAKLS0tIGE1SkJtM3hJNWp5ZWJ6Ui9TbTEz\nTjUxVlB5V1Y3WEFSMlZ3cEZLZXN5ZDQK99N/rmorsxnRDLN5iKg/bFR5XHSmgWtG\nyhGTSbspPX3Fl1N9dTtFrhvqXEL6mplw+ebDzWrSuw/baM7C/LEwKA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2L0Y3UGU1QUkvWm13a3Fr\nTnNwdFlhOThFVzBHaE1obFI3NjRCYnhkRUhFCnJPcWc3ZG9zYzlOOFV4RlY2aWxV\nV2xJWFREMWJRZ3czQWs3L2ZMMVhMQVkKLS0tIENMbU5UQU92c3U0cTlwMS9FMExT\nNVFVOUdDUjZsNTBnWHFCcGNzdTZGVUkKg/BBhYoeL7JQTuv4KlXEp/w7fz80a1px\n54mW+gMyR/knHUyqDVbpzFwsMOlchA8OdgaT4ufKvpGRCJ7ekaaxlQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFV0Vk1PaEJO\naTVhZFRSMzR3azJpOW1jbjBPSXJjTmNEc2wwRWttNk1yemsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmYTlNTnVoV0xaQjFVcUhBaUVnVzFO\neDQ1cjBmdEphd2lCREJjMVVseldrCi0tLSB5OWJ2VjZodVFXdFgrS2kydndvOFp0\nYjFpL2ZKaDB2RGNQekFRd2NwdExzCuDsy/hhZeTdpFaP75lObEv8huDVEq9YIhcp\nVX1YMprmgHRIwlPnjpd03EtD6inefY2TR8kssoTzRvAxPUPrjWc=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJJa0lnVnFF\nR1JaSVdDam8wUzNtcUM4Rm9OUXpFN0hvRmVSVVNoQnRlVXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpCMzVmUFY3Y0dWNktnZ09iNkRYTXND\nQ0NxVS9hcnlOK1hmY3pjNUUrM2FBCi0tLSBXeUZqZlJBYUpHTk02dmRON1l2UFkw\neDZYdnBoM3pvaVVlVHNmMy9KT0Q4CniKVpJkGRfkrKqB7FRl19nZ13uTubVh7eoM\nxw6KWYFkXrXZc/oGgV6YmFuBfh+/VcDfcNTpWs08xbTlcmpvnbs=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBqRWxZR3RR\nYXFnSEUzVllnS2ZLSXV1MWlBTjA2OElWMzdWWGZ6a3U1UVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpueUFIcm5UVFhLR1h6ZTI0cW1nbnZB\nZlhTQ3F1MFhqdkV3YlhmM0VacFRrCi0tLSBYMXFDNmhoS3ZDWTZyTzVZUytHT3Zy\nUjBMS1lVUHVkL1BCUC9ydTBrK3BJCmSB9CzrO5Zwr/uDkNVL910mbCyOGkBXUWWg\nQCZapgV2kUw5ct241a8fNZNdBVb4wxA7fMIIj9SYqO0LWd3dIgI=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqUkd4OVN4K0FlZVpBSFpo\nOVRPTVkvd3ZURGlDNU5NNW42aWpHSmFGbFVJCk85K0pZd2NLSjJ3ZFB2aUVnZWJX\nZ3BpUTF5K21nckh3T3NqSm91QThWdFkKLS0tIENtallaTHJpNjAyV1F5dXlSSW44\nR08rYnVDN25oenZRTEtCMDlRTkVlczgKc/Q1JJ9O0qBWvQiZASAjvAP0l84k9cQf\nsFdOd4bJnVmYeFGx6zIAU/t0dL6sHgkHF5M5byCcVVFtgoF6EX6qSQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUVFhwRmc3TnZlSXdCMC9R\naW5uOWlIUG4wd0ErNEhYZmJMNURmNitLT0NvCnBSWVVCVWxSQ1VIbzNwcXRZcmRr\nY2k0ZHEveEw2Mm54UUJVa1ZVQ3Fxc2cKLS0tIG5EWldvYUtndjBHeGlXcFlLVmdi\nK1ZFdHFvSXpBbDdNdm5HZ0g2Rkw3Z1kKUD4PhfnA2bM4KPkEExQvhARXWACKoJs2\nPu3jTrIt5NWIm6w/iuMGgbaN6FVSKjhutpXnvPw0PEIRtkBss/ygoA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDVm0xWUMxYjhSRC9zOXhD\nTGZ2aVV0ZjhDSFBJL3FXY1p6VGdwU3RXVTBrCnhrQytpaXZYakRaUitydTZKYVlB\nNDVoYzhFU05QL3dBcUhtWnQ1UW9NblkKLS0tIEhlOVpvdzRGNDN2UmZNamNkbHpT\nNENxdUpkcFlsVXpqOU1BNjhlSUJqancKEVQL6rV2VpaIAgFQx700dEVE/8qfruYO\nww+PB7AwFSgQU1NOTvsAQ0yFSegwVe6xouQLzaRiowv43eyIUBTnjQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2U3pjODhRN0VGdVN4dEM1\nY295QWZsN0NycUtPRkVpRU92SThxbmNzRFRzCkpnMzE3SytiR05YZFJ1UkE0SjVH\nVEpNR3B4RFFWSngwa1pLZFRraTQ3dXMKLS0tIExVNmlhaFpPWHF0RTR4ZXBoMXlp\nT2NpekQ4RDVSMTJNc09zaFJIZTVuV3cK7KWdlVUrubRDgE3q/tlsbi456SG/4cvw\nPauejaZnUrpA45fUK0psxXoZkdshU0CiAjoTT+4mYQHdbZJdl/9TBw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhdXMvZFhTOHI5V0VEejFY\nS3BrY2JiaUhvWEdia3hrckJ6VTF4NmVkSENBCmNyd3ovU3ZVcnFTY1JmRUIzVVRs\nd0NrQmFZMTVZNEVYN2pkQ1ZpNGZuTG8KLS0tIGhSS1A5L0ZsbHhXK1lJakNJMzhj\nYjhEekNkL3ExQS8zN0N5Y0M4bkZhZTAKgIECIbfnjKwiwuH12XO/yTxIsdlAFL0o\nDjQQw/IP0iXISebg4edaPJse7ZaOsGIKJcuBrMcDqS3QG/tCNdNUDA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:12Z",
-		"mac": "ENC[AES256_GCM,data:+GN4dlUHZ6OZrcOHeg076Kh2cH/9U7kRZk2qlpoS79BcDdv//ZXLJn9OusiAzwfRELud6SAL2yINeYctZJcVTb6z6+nqS3O5k4Ho6qMDVF/SKS8/C64gV1Ld/bmpFJiYp8Tp0LW53bzCkCyKdGJsMUAItwnu2Lr7mKAGJyw83II=,iv:7Fd+sO2F46F7KvbQG/yryLpgUjUjhTErP3nxWwkmmHI=,tag:Hh7sTl0PwhCV0fn3q9qVXg==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/almach/root-password/password-hash/machines/almach
+++ b/vars/per-machine/almach/root-password/password-hash/machines/almach
@@ -1 +0,0 @@
-../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/root-password/password-hash/secret
+++ b/vars/per-machine/almach/root-password/password-hash/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:qKgdwe+LcrK9nul5PooncV5bimaTSNsKxYJjP0HYr+ZFZSoCDv4GE6t1gN8EG3JMNkn+wy1I2ysZYxCAm23OMhWt7ep/TIudZTmt5tvD6DSQZE+4aTegJjfxfJC/P41zjFgKMK6+JYCF+Q==,iv:iasUB+pIE5i89Y6rGQAHzh2uY9plNeZf1LrmAA746LI=,tag:J7l81DrJ2idNdOjRE32Pew==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbUdVVzh3a25kSURyWDFY\nYWx2NFhGeHFnbTgwYVNYdklmdmJPcklRVlNJCmdDajZjRzdrWXlyS3JBQ3NtbVVB\naXc2dzdoWFA1bXZmd3M3TlN5Tnk1WVkKLS0tIFVzZXhlblUyQW5EbHVzWmdUaHNC\nMW1hY2k3c1oreDdDYm9NcTdkQ3NqN3MKNzAS0Ui+cMC6G37Bbf2eHLMvdHeEwj5k\nj7ev82olKPQHVA3xW4zDvi1wLOqY2MF9dRUqKabIAnJgCIVENAQIUQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTdlRiMm9vK3NETmx6eHV0\nVTVyN2JJc003SWFzdXZQL3g3Q3VMUXZoT1hrCjRqdWk4Y3QxTVdVdFUvYXJNWGFR\nQzBGRXo2MU5SZEI4cmVQU0c2bnNlSlEKLS0tIEwzbkpuZmxWb2pNc3ZkOE5JL2VL\nRnV1V0J0bDMrUEVKR0pnRlJWanlZSUEKNh6e9N2QKtOAKimo9V3m0hFSGDwal64B\neEyxEcF1OAscFGuGkKE7yjr9OXsxIzOIC2FR68wAAGIIox2eo7QzXw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZmSE9ZNWlh\nMFR3eXpjN05PZ1FpN1lXMHBZS2NtcWlZcU9sY05odlNYUzAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoanBGRjlFYVhIZUoweUdQZDhheUtX\nMXdvWm0xcmxPSHhRWXdsWi9aVWpzCi0tLSB0Vm5rZi94cHNyRTFDZHI0Sy8zOUww\nTnFKazJrNzVZR0JxWDBZamtoNkQ0CjDdKrB45JpFxLOSVWrZ0RhKJ+Ms9JUV+xlq\n/MThL4Orh/jMkfMxznMXNouRYtemqAZ1fitulGDSk4HiI3cLxgE=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhyZEwxYjF3\nb1BEQjVlR1NSeUgzbUhNcWZEdkNhb2w3aFdQbzY4RlVzalEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpsTWxIcEZrYXkvNmUzblNldSs1dHpL\nWUswWVhUaStwSmJsSlBQMjNHbTFrCi0tLSB3Vyt3L2g3ek12Y2pFK3lRN3lsY1dv\nZGw2M0pzN2xyTm02OHVYdXBpV09VCkC7pQwanvBkJowCj86oqKPkNwAG2vjVr1Au\nw7xC+przWGPYvWEfSmh3V4tGxxGPJQimEt8YbuySekTAMFFafVo=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZRV0tHZEVH\ndS90NzNOZXJyMTk4VEY5RGdoZHhEL2VhQktmbGUyVzVrUW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp2Vmx2Q3ZLM1pNOStHVVo0VHdDSWFB\nSW9CQjBDMUdqdmRlb1RaV1JMcjUwCi0tLSA5NjlYR21kU21JRVdEbE1BbFh5VGdX\nTWJneHNVU05Pa1oyR1NMQnlJNzJRCsHbmQwnC9a2MSaEbMzAVKuYE3xMHjLlR/KJ\ne6rFuntmuJeLjV0srcWkmRT6UepGkUoo3cT0MJk+FFCveoMOuvE=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzaDV2MWxjeHRIVjRSeFBK\nTzBVeTk2NHFXSkhQbzQ4ZTl3ejlVS1lyNkVFCndPWSs1bDlyeEVCMlM2YVhuOUVh\nRkhpSkNqdEJZcW9zRHliVkxpRTlQbWsKLS0tIDE2ZDdMbUpTMzFSQXVVai9PY0or\nNzNOUWdEK2E2VnFWS2RiOU5VMFkxY0kKIjTMDcnrcax15QE/P5vQpklzIfh0dOjM\nGhWtf26t41MvMqTtXCA1y9uvB/yGh2Fb7Web1L+QsljU67xaaOP59w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWGQzcTZHRUREblAzTlIv\neVV3QUNUQUVMRUUvZUVKZkNHYnA4d0FUZWgwCmJiVit3VjZQUTFJMDRiRks2VE5n\nVHdOY0RZenpYVU93NDBQRE9TbEg2dU0KLS0tIHUzL055ckI1aThoQnhreGtLQ2ZZ\nUHB0dCtLaE9DQXEzM09ZY0NjUFBkWG8KG/T9430gM9BgX3GrbgoU+MCOv1etz6eQ\n5Qxvv92y8qF6ol4bqQP5ZBWUgZBkn04T053oyEYFAODpMmEUdUAivg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBYmYxUkVyT29Qa0xrZlhO\nL3J1cjJBYlBwMmk0MFFjdSttanBqajhCRDJNCnJWWU9FOSt3QnQ5b0lVYVQxVW9j\nRFlMVXFWQ1kyZFVqN3JHNllHdjJyeHMKLS0tICtqWm84eGlFYmpNSlVEQUxUS1JP\nK1MweWhlSWNvR0tsMDFmYUg5OXk0Z0EKfty8Hy4tCWKBoux4WLJCC8Jb6SdJiJCs\nUZQyMxFB+zuzIH9ES1wXbLf4KkEIYkxVvZ23Li+vwRuNl1AE2gd+EQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU1dmMFpKZjlWRzc3UnEy\nZlJWT2I5RmNjQ25TNzZoR3ZJbU1GR2RQZTE0ClUvdEpMaTRxU3dRZDJ4SkFqaDZ4\nTmFxWGhIMU03ekhuTjNBOFFjM3NzNjQKLS0tIE80aHVVdzhpeHBLU0dubllhTG9k\nRGNHaEtLNWE3YVk0OWxsQnBsNm51NlUK7LkRjc7XeFxGeqynVDEfTH0L9JxO5VTn\nJXkJnomtm8b256uN3K6ShuSzhY32Kftot8DREEL2Y3YSpCTCvyZyVw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzL1JXZy9lUG5DY3J0MkVh\nRkx2d2ZTQVp2ZDFiU1k4ZFVncjlpVGRaaUg4CkV1SnJmb05vUm01dUI4QXM0YlM0\nM09NV2JlanpYRmswR0hqbWtXc2o3enMKLS0tIHFEQVp1NUNtRFcrNGQvYnJFTnNC\nWDgwQ2wvYlJYVG9leDVvM0NTOFZ1dUkKhI8HnKBubaFZVY4+R6x0hqCq2mzIogjk\n5zdhgMYZHQMyUF4xdKpyFcwIQsIS+0jXi38clYPKsqRgIF+ixliVAA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:12Z",
-		"mac": "ENC[AES256_GCM,data:7LJ6kgfOH8O/UCSA/PLX7ti3zJPMTM0AjbwD3VP76dwXxQrSyIQNzBq8+lUfQjK+LRdjxhAubqw0LcbHkkl2JteavYssI/NcIX7aXfD3kp2J1I/KPi15iRFYzovUbFKP9xWs0OM93Gww+tFN7n97WU+uv2a6cOBu71iIaJev0vU=,iv:BRkY7ouLdYxScIPK8+79+0hbOPMsEcXmLzjMUNcMEOU=,tag:vKHVhqbClRlsptzdpGb9aQ==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/almach/root-password/password/secret
+++ b/vars/per-machine/almach/root-password/password/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:aM23Nx6KjY0i8MadQmdgSrxeaGR5gneo5U6+iD0FvkirLhMfng==,iv:oHozKL6lUg7kQZwck2W+LNMF/5aTq7qYNnZv6SG/S3Q=,tag:U8sU6icf5eZ1Zw83JkleAw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQS90UERSZzEzTklKWm11\ndDI3WnBJYkNkZ2NCTzRja1JOZkQvOWR0b0RjCko3YlhmM0hOQmpENXlXbmFmZWU1\nUFd0d1ZqMllKRU1hYUV6ZHhTSUlTU3MKLS0tIHF5bjhvampHQVRuRFZZandNQjZp\nUnB6NkpjdDQvb1RWZkFEZkN5RGpTZGMK7abRMAIT34QmAgm2b72TiPcywEKqxoro\nhk8jbo43SIYkUbH4akkvnuSvQJb6Kwvj6lKUckNvUvnNGjdwxTVY5Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkSVpGWVBBZER3NytqbmFz\nOUZQL2d1QVViR1NBakJnN2YzZk9CMm5xTkZRCjl4STNvays0NTVhWkl0ZlBORk4y\nTW56aDRCdjB6YitHUlBaejQyQ2NDeG8KLS0tIGoya3ZWbEJESFBDVUxKcGtNY21M\nN09hV1ZYRHloM2QrR21OcmtWMnJOYzgKnKSuJtpGFPiNSJM64adLevL9dVEx2JAy\nmxjTb+pMZvZnOZoBoYFe9L3UJK0HSQJoxAQmHNUtCiztX2zC3VW5sA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpSUGVKRFY1\ncTk0VERGRlRYbHErbDhLbXFvblRZOUhKaTR5eGhVakJpV3cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQorY1ljckVpNklXYW5rbTFsRjNubHl3\nb0ZXdjVPOXJUNUxZbDErLzBhVFpjCi0tLSBKbUMwQk5MWDBrUE9UdlNWWVIwQTJ6\nQWFKbVcxcHN4VS81NEZERzRpK1c0CieyhuRbAWqBJ2b4ggYyvadpxcNkFAaQmN7n\nfGYjpsJHueGsuoAsDJj7fqyR/GVc6y0PlPhE1c48xqYCqGDkihY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpiaUltOGtt\nYWFrR1hJeG9DTU9QVnpBL1BIQTJOMWJHQkwwOC9RUGJOSEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo2OG85RUxJKyt4cHY4dlhOaWo3cXRT\nbEl6ZHBaVnFYcXhtL21hYW0reVJVCi0tLSBteC92S2pGck9jTDlkMDQrQitNbkt2\nN000dGsrOVVrbk8wUEgvTWtxNUFnCoYEd+lV2mlCKbko30Jsy/vCeyDwpAzuQwr1\n2eq/HiYfDm8um6L9rlTyHh2DsDj4U0qwmoXg425LIOe7zn60MbM=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFY2VGxaTnlY\nNDNOSWtaUUlKWEdyUzdXNXNMN2N0RzNlVHUyamR4QzRiUzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp3NU12UUxNWU9qdlBrUUxOMmUyNDk5\nVGpST25ySmtCeUxwV1pHaGhCaGtFCi0tLSBMRjBjSWE3U2FiRzNNbkp2bGdrNUZr\naEpHVGZQVHFsYk0yRkdzYU80K3pNCiEOIisr2TXtbvFbjSJEVyPEpFS4bRTrO7kX\nxZQxefLM3fOo1JuoOFduknGfvvO5k4FvdvSNrQLt/5GkwugvNKk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Nm55MFQrSDRkZEsyNzc0\nTzdIVy9LWjFrcTBtNUdCemZjT0JJckNKTHhBCkNWd0tGNmxreWVqUTRoemxDZWpI\nU25aamhrdGJrZ242RVRjWjNZRGVkSDgKLS0tIDlxR1gwMUFHTzIwOXAydGlCWFdV\nSGsrdWZIYmU3dkdjUEZ0aGR2TTRJQ00KtxjSwm+rfs2fVz5o9mgWLeFUmn928Yug\nfk9nDIO8t1BgkPcUn6q10LorlTMCE/cwIntd9rvxaLPEawUbx4uRNw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBROE04SG0wSXhCT3hxbmRU\nTGwvVzVkNzUzbC9TRjFWSGs2SXM1VThOdVhzCjJjUVJtSXBTSUdoTjFoRVZPd3VM\nL2J3bzJZZ3NiRlNueXNiTzREQjV1UkkKLS0tIFJZNTNYbDZnZkNhZDRmWUJaSTJn\nWWhTQTMwWGp0SHMwcTlXY0dvK1dvSTgKjBQRgzIQlohKOBoL4pT7so0zzgttcEJC\nJ6wlqO4BvxR9thiFJsawT/3zMjuSc66muuB8VLIbFNrVp+6FTUxGDA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvc1Y4eGQ4YWFDZzYvZlRB\ndlN5ek10MVZsWHVDck80Z0ZGbEppMXpZRkVJCk10M3RCQUZtenZ3SGNwcEY5NmVl\nMnlsRnpSQm5mWmZRSmxpbDRzK000TkUKLS0tIEkyYUFza3N2OVdpSHFMcXZ4ODVu\ndHM4R2t6V3BJbzVPd0hzS2pBem81NXMKePu26+xFyHydHnlggtP4KuRpaoc1QCfm\nW2bwaYm0ib62aEX+jg865HUMPT5T29PGPHx6HVQL5Hm9PBiJLmsYVg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VjVjd2djbElLWnlXcEJW\nVFFPaE4rWjExWG9YeG1PQjFiZmplRk5nS25rCkNmdDBRekhhQ1puZkF1bUtDRVJG\ndXlhRkRsMXVMMlQ5VmlFUEh1RmJQd2cKLS0tIGYyb3hReGNUeEs5a3lDN3dHUCtJ\ndklINXRZajZxb0VyYzIvd1JScEVXcUUKAQpAqCsPe2hZqM1xezw16TnHTmTzdIQZ\nqAIiQS93IXZGm/FKYgtL+xfyeluWuTKFGty21TWmaPzQa582hRW2SA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:12Z",
-		"mac": "ENC[AES256_GCM,data:llwcOSXz1/pMQ+0y2zNocI1AxEhkr527dEjf9YSrtHWjS06KiPdqp94/uxk41Prxp4JhyIuexa+zpCizVrV9K3l5NwVcuo9p4p0L5sbD6zuej7jtyfZlfR1WS1SY4p0ZeXAB2ig6yz2CJFaOWV6BfQ/7uwJbI4sJvw9ep3ZRPHE=,iv:1ONKHCV5sEZblnCPFWlhG8FXYsprkEjkC3+PRt8U0Lw=,tag:0fPnP9oMtqq3PYi4zAG0cw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/almach/state-version/version/value
+++ b/vars/per-machine/almach/state-version/version/value
@@ -1 +0,0 @@
-25.11
--- a/vars/per-machine/almach/tor_tor/hostname/machines/almach
+++ b/vars/per-machine/almach/tor_tor/hostname/machines/almach
@@ -1 +0,0 @@
-../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/tor_tor/hostname/secret
+++ b/vars/per-machine/almach/tor_tor/hostname/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:bBv4RU9xHtZzuQeWLLlqBTzOytAFDWQxNmZyzQoX5+t1BGB/OY3Vd+bMSli38WRk/EptTvHQ567wiWAkno1D,iv:x2F1cLxKjlefuljYgD3givgayroxj/ww9u0o1BwBp+E=,tag:QFWL/LbN37Qv4Ukw/fxeFQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRHdoanVYTlRCcmFLQzA0\nYmsyU1lUcXl2ejI2NUNVTVZVTjhUZ05YSFN3CisvNmpKcVRFeGhnSTZMeG1hR1BC\nQTdHQkJyN0p2Z2Nva01QNUZwaGZpRm8KLS0tICtCams0UGRVeUFkd0ZlODlIR3Qy\naE5aUWpQMnh2TGxlRDlJRXorUGZ3MkUKyWWDo3sEhs6x1GDCSydUExY/U9HSKfSs\nuvD4sf5A/ng2KBchiIAZ41Xi4WNuM9izOP4aYJa8G2LHP2341qexKQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUmxTYTBBdVQ5YWR4MEky\nNFhzdXhmT0NERjdsM05SUjcyeG5BWVkrelM0ClFwNjR4UHRoY3Jua1dZR1JQVlly\nVjlRa0pVVnpwSVNoZEJld0xBZ05nL00KLS0tIENrdXpzZC9lUGVmNWM2WHpXT0NW\nQVZsMXBxa3FDdUdkeVdPQmZoT0VHZUEKe9o4xSo3PFHXPAhAoZ+BApjDW3HskTU2\nkvkiXkhi5Kh+KGXU3wfKuycy23AcxE5yBoD5w7uIZnCpqrP5hXUBEg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJBQUNIV25W\neGwrZ1BaNnZGT2ZqTkw5ZjY1K2xuMmIvMUlYWGxCRDhpeDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpteW1ST3dmaEFhSEF0WTA1T0wvUERN\nL1NYZXJVQTd6QkhLWVVsUDBWREZvCi0tLSBsYW1sNmU5UmVNVE1LamxjU0twZ0Zx\nTXNPV3orSnNsMnRWbS90MnVlbG4wCgZaxUTjqbGQR+RWpf6QdKW01T0REYZAsMxU\niKp4FZM/Fonv2q2BxtBhwDeDddNJZx8xwtFshodBwHHhEdvmI3U=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE41RGx4WnZT\ndWlCNHdWZGtiZDAyN1dFYVJ5YVRla21QWWFlV240QjkwVUUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxT3ZpNmFMZVpoRXpTWEhpWlh0UXpO\nUWJuOHZDTkVXakdXRVRJWXlEL280Ci0tLSBJRnRXbnh5Y1AvbXVkb1prVzFsWXJs\nTnNoMHJCMnZ0cytCdUk2cmlOS1k0Cqd6psvtkONaeCKL2oqInggcpa8MtV5i0mfG\noiPjFlEsfU69y11FmAYzuZIDk1XpBdUWmdo+1M7KukyghH79Jvk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDhLd0FkeVo5\nWGFCT1Y1eTd4VEJIcTkwQmlUZzkwN3NzQ1RRR24wT0xsQWsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpreVhYMU9xMUtBSExvWTZKckdBeS8z\nekNOUlVGcGJXa2JCNkNZR0JRdDBzCi0tLSBoRWtMV29FY1NaSmVyb2JSbFY0M2I1\nOHBQTTBVejJIT1FoM0J3Q0N4emJvChGXxNQcCnRQBQu6pGY4ZpKkv04ifqlGM0GI\nvLDmTLIKhaijmjMpALgb/MPJBNu7tJRPpDJFV2UfWQTiJyBJ7Cw=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZM3l5cDlQN0t5V1RLZkRI\nU0ZobnM4eUR3RlFNUExzWlVxM3Z0OUtuVEhrCkt3Nm83bmtOZXpzK0ZhYWt5R1hn\nWDNnREN2bFJWamhqQ2k5RWE1WGFaYU0KLS0tIEIxeWpHazB1ak1OTGhiaDl1cDE5\nWTR1NkdEeE1ReW9OV3JqQ2NJMElPOTQKZqAaWQZESZm8PMWYzdGihncQURVjJ/hi\nenoGMAjAhQgA+UN3ITQ2kg1gaO4lObDM7TwRY4yWede2kLVNM8HY5g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOVg1MUxRcUNVQkRVU1hv\naUg2ZmlvVk5BaGwxeFFLQUxlNGQva2ZlSzNVCmVmZkJtaGNSV1h4TFc5K0dzRHpN\nT01TeG0vMURpVXFFRkhDNTBNRzBIeWMKLS0tIGlvQW9raysxN01pazJoWTZxZDAz\nSWs0dE8vL1R6aE9yNlJZa21RUENjaXcKFclp8QazHlJ1/NVBgVL4QJMoV8spVbne\nvIsg2kAuXxx3QF23ChuBcKcHWg0r444DNLRs0PLKx4zIPDDvxl4ung==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSYUUvUWUwVzNENUtwY3BD\nSDlHTitsRmxjSWw1SysxSThNTENLd0pKTkJzCi85QklKa3NYRWxpQTNEampDV29F\nQ1IwYWxpdFNHaHA4ZFBiLzJBMExkbzgKLS0tIGNoazc5V1kxOUU4MHdBZ0xINFpy\nM2FVbUpVU3JERWVlNjg5U21ZSUo4dkkKhZOndTQD7VyOKsJ5os7/AGIytqv73YIM\nDoSfvndsYQTyUNfcEHp0uqKp4osj/sgfS/nRTFKy5ZhA5rlwm+N5jg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEeW9IQ1JvcElYSVkrM29y\ndzFTQkM0UGJCbTkySXQyNjdFVDhjM0hSeUVZCmhoNm1pU002b1lKWkpCdGpLeVFK\nWmlwbzFlK1FxOWtDNFNpdGpUdkRpdW8KLS0tIFFhVXA1eWZJdlNERTFsTVpOakMx\nanVPTGRHcVF2ZDVqc29TcWlJeERrbTQKrlfBZBCzW2Dq/z9dcBPkWo2qp1PXL2DD\nOHSgcbbeNkRppIyRHV0ltkUIoPwdSYnPfmAnAI6VZPmqNojQ0olz/g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWY3BEaHovRU1IWUJ2TTJ3\ndWxLVitBUzhLeEFEek80RmNKNURMVVdiQkEwCjh4WTRoWm9Jcm9jT1cyeXpLOUov\nVE96dk94bzVUZEZSblB5S3ZqbzJKaGsKLS0tIEFzUVVGak1naWhJVVZueFRkaDNR\nUmFMbUtuNW11a1dwTnE4UzVQLzljS1UKHfLAGo5oEfymhv1VW3FFsvRwm55KWbPZ\nq+9CUtHsSZb1z9iblKhmiDRisAqXooclurQycI7il2z4AJ35a5Dtxw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:15Z",
-		"mac": "ENC[AES256_GCM,data:oJOgMXVSuqx2nVOssN1cQyW9FsxgWb1h8aCqEYrz51oMdontRFrIOwt5ckoPXi08ItlYX0fSiOO4AwcNRUyvAoZguQJdEK4/0xPfRfWvXkCSK8c/1bsLNyIxjxcwRPRa/EqsHF6umq9Oaw32L0MAbHRo7TB9E7L4xeFevml0p2M=,iv:pIAEoiueCMOym32oU1CrYLBsJiMpQE/LMBO+DY5qWFg=,tag:xOkLxmLzQBxCQgGlqFFVxw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/machines/almach
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/machines/almach
@@ -1 +0,0 @@
-../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:+l6Vi1bKCFTP9nDJr06EDCJp/FSWotbcaSQhOmAQmKteSE/MMbuum0ca6n+9K7KsfgABoQ7Tzi4Y8NUmPvwXN+/j96KJWEFDlYDufUHfiYYO/f4THI8jIVrHXj5Sphu+,iv:QD2a4p+PnCbExwywMTJVTZ7QxMNF35eIe2O/EMnIlNw=,tag:F7wZboCRj2k0kxazLOsGZA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyeW1ORng3cWpFd2NmclFN\nZU5CWVE3RUtFNnowSmdXQWhodEp1MDhKUGgwClFpSFFBdTNaUGlYc3J1RHVFcVU5\ndFdZRTNWN0xtbU1mSHVSemVGQkFUNGMKLS0tIG5GY2hlSS9CVE5jeG16VUgyM3VW\nRDNPT3FIVUY1WFc2VDB1VkFPUE0xMTQK+V9GW8KJqE6Li5DjWnFNhyTR3sT0aeTn\n+WsMfO+hIBYUJdiJnOkJHgnhS/Vvcbm1/GHU11+bEkG3Vhh59JawsQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrTmZJTDNjSE5USHoxUm5V\nUmNVOXVZbWJqWThBOWNkdDRoNThXeVZsSFdNCmI3NkZ4d3VLaEZWWjhzSWp4RWNm\nSkJYTnJ0TElQZG1iTE9mbE4rWWp0Sk0KLS0tIG5ic3N5ZXhtZ1JXU0lDNktvQnJL\nZU5hRVJLR3FkekxtU2Q4VlBycis2eVEKjPXtBx/lyrinCw3ZpQXLj34W+8P6NvoG\nLu3PKbYg52A0eJXg0T7OM7EW1skHGujwvz+ZI+4RVPnbWMdn6Vv9tg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHFqNXVZK3ll\nVmtiSmJJRE5wdzNqdU1HTWdGYjM4RWZNQXZTa2ZDbjAzWG8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpYTkxkTWpKamhxT3RrU3N2RFN6ODVi\nd1QwYzlWNjl5NHU2bFh4UU14WExRCi0tLSBUejM4SFRFa2FyKzlNdFdVdDhpeEJL\nWjhFSlRwR1RyV29Sa3J2NklDazgwCjvP2yX9e71TJgyzHHeg9dUrL32ufzGngtSq\nbtBUtc5eq/E/vfZOzlqUabnbI6SmX2HcuFVkbuLJ6lyoYxj47WQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9qNTNaUVdz\nSURXZEx1eUJrajhUdVI0SFZKdnQxYnpYL0pEZCtXbXJUR1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYK1gzSGRlWWFVZm43TDhrL0I2OVVr\nOHVHU0pYbUtBd0g5SDYrRG04N1pvCi0tLSAzSkpEdkFucmxqNzJlWC8wdmo5VEE0\nUFJGRGxSU0xvUEdWb2RncU5mK2JjCgBYpo+LR4vEfrDKVlCvL8NKEysyD3Xr4mXl\nPbJibvy3iwl9KUQuKVASL0B5/+Lz+lm9iax7YY2do19fn0vcknY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZZdnRUWk9k\nUjNCb0ZBMFJBNHNNUjBlMXc0VFdqSWV5dG9GNFJJdFlrQWcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxRCtGb2RKQmlrODZ2VC9YRllHU1Yz\na0dMMjlZeTNrVWpEaGxzM3I3ZW9JCi0tLSBrL0d6Rm52MkRPK3FaakVGNUg3akg3\nNGRYTHI5VHZDSFQ4d2c4K1JidDc0Cl6vqAuZ295ImPl13ZpzVXP+BJ335EAU81UC\nZbZvxdbvlNtZkNdSwmuWRXYbB/F7qzg0mxl01fQ0wd5m87UCId8=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTQWQ3UERZUC9FR1dUUXpB\nMWZrdTBXa29ITGZaaUV3MCtWVEpVL0d6bVFnClJsd2lWMTRFS240SmZybE9XSVlK\nZTUyRWtDM0l0UFV0UzBxdHc0T3ltVncKLS0tIG4vUitJaHFqN1FNR2J4em5DMWJq\nYU5DS0V3all2cnAvRDE2RzdxVWV6RDQK96bwl6BHKpws1cIh704a4DGGu6XzDRMJ\nlrWdAX+xNnh3Y73gMEqL+Ti4XYkhWOXgiggbK1KkKg0jhhmmYnVHbA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNjhSWHhrTFdNWnBZQ2ZV\nOW5JMUNCQUJxOTd1S3FIczhLL0lVSlZLZzI0CkJsWVIyczZPVml1SmhYSmpTYlZp\nQmkwQUtWUHRrRURsNjFhSG9vRTE3NHMKLS0tIEdXL290c24wVFFjVUhpZlJMVHVq\neG42QkVRUk81Qk5GcTFib2lHZ3lLbVUK9XX4wptmzCFUtfTNZKzDPSwtleg4Kfx0\nDbsX7nAWBWt7I9GhsK420BzMqsuHI3mNFDKkvsFn+KCiO8iSPop8VQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUThJZlQzbVlLWEdzdGsy\nekI3UnZYdWsySXlDeTZERFlSckFTQm56L0JzCkdoRHUrRHhKWHZ3MDk2OGk3Ry8r\nY2l3cmc2V2NiR3EzWWZzbVN6Y1JBVEUKLS0tIFd5U1plTFcwOTdEalJDT0pjMURS\ncU43eGRudDVVcDdqb3dRTk5XQk9xN0EKbSgX+qmEss7GbFiIcG4k6u/llU+0VKey\nkPAbxBfhFbL1mJTB1XR6AhqlaOXVoyOhVzQ0oiOxX3Xf02H4fOh0jg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNkgyMlVyTEFrQ1lKcVlp\nYTRvWHpFRUVCY3c3VUljdkJ3YnJCZnRaQjFZCmpLMDE1WDZ5eVhjSlMxUXhPRlNB\nTG5qSmlJV2IyN29DZ3kwbmc0eE1COE0KLS0tIDE5RjR0UWwrRkIrL3VHVFBuOU1h\nek9jRks3Wk1KOVYxVEx1YmZ6UzVZUWcKJv7SOzjn0Cg5yKKW9dShgJjlld8ZS6nM\nzjjdOs1VdIG3BUQuw94n1aYHq7QmXxzhPjRhErj8qZfMTmBIZuM/ZQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDRW54ZU1FYUhWUkxnOUNS\nZzlGaVp2RU1oa0dNUTB4WVZITzh1dUY5QVhRClZNSVMxTmJZU1NDZWZVaEZTRnh1\nek9wbG0zcGE5aXBCbnplS3ZoWDZ0Q00KLS0tIFhIRWo2TXg1dUJyRjRpRnVIUFVD\nVDMxeUV0ZHQxZk1qUDRYMlJiMG9YN2cKkG7RyznooSxmlFIuh5Y9cSswKCiiumD2\nvTKV66FBhv6ehwkIbR+S0Kvmu4vQO99demJHvESvTDEHeF8UVQLQTA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T07:06:15Z",
-		"mac": "ENC[AES256_GCM,data:2d6MHDN9GK2RDq7stHoD6xmTSuZfX6ADOGi9DPpeqC/p2OFc+Rssy5dJgexVkUb90tQBUCUcSmapeVnJalust5ibUjnJmpfMY48PQQhdnxu67neu7P+6MGW1VIZghP4udwOK1TPPhm4KsgBT+mfWlneYMHPdvqZYeLZ18G2cqj4=,iv:uIsNrwpJLHWec2jtA4tZJAo/vemgDiH7o6nXYekTzYk=,tag:XU4VXymuVCg6oNB+AHZH3w==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw 
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
@@ -1 +0,0 @@
-../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:3Fypl1oDZrZi2uD5C0WLRzJ9YMfM8DLrmvRBsQE3xS7E4W3vTNQmFPMBIU9eXSvn/XNbeZy8ux/+aYFq5tmvB85m/iz4To2Vaih5Ds0yx12eed9hktjpItHJSF+VFD5vZUZPvYipt+iTHprhe4B3mmicIZJrlFmxSyqt7tj2tRp/nmJ0W8L/dhYnpIy+Gnrh2/PemaTiwQkV4V1d3AAJpeQNt+BtsBBQyKm4/oGo3FCvNGnTZCUiI+TtpDb76o9O7VVAx+yWlPtZlJwc6leNspAfjT7t5w+pLSt53+6PQ0+dbjqUY0SlTc+TbFJPogaR1wSaJAm9n2rMMagGFGaQJcx57lDlH/gmq1Dsh7/0uuicMpHYPE32G30YHI9uEGsEtp+ERxOdZGlEX6Oi2gjpHvWmDU9y3SN0JUdAD4riD4cqFcf9mqKiHw7odKVAFdxdwnZio7h0z9VJuHi5F71078xELX2l/6le4FslCeaEPb49GzVt7BI/hYWaV/SbaPspRaX5,iv:i7hpBBWINIJ8VGaUyFYqm+N2EbL0nMxPKL3RCTjKxyM=,tag:GZFTfIwa+WWS2w3Hk/GmKQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQlY1bTNaTlpkbkNEWFlM\nblRGS2t6SDU3YkJJbDFMRzVyY2p4akhlOFRzCmNOc0Q2YTB2a21Qem56L01zNFFT\nc1Y3NmlVNXVLZGpNT0l6eTlZVnVVN1kKLS0tIHlvUzVsWjNzcEErOVZ3TWpWYVhv\nN1VYei90WXcwNVNFL2J5R1Qrb0p4ZmMKQ8PfLqzmX6UqgpBNhiuDpY03Sa2Lg4J3\nLLCkilQKzJSEJCNSDYU/ebgJd43HAjRqAs3lPcyauC9xVNI7MDqhaw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WHVsWWx0NFltc0d0a0FX\nbGRIcGVKdWowS08wbUFiTGpZMm9XZ1VEMEFjCm0veDJTd3RnQndCK0Q1SU5PaE1x\nb1k3R3FSU3l5bG5Jc0UxTVdyZ0l3SVEKLS0tIHVVOFVnZ1VvUHc5MWthQVNKMWxO\nS0IwMWJ3TklYaEZuWDA5M3hBZUtsN2MKE6HT3ldHVcJM2O8eR4jbvJgMERY8gRcf\nRL2Fa4DdQdxVED1WU1arZmN9DnK+sscpK7eNF1+PFaN2Zk4Lk81nQw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLK0hmK0NrV0IvVE5TS3JQ\nc1NVTVp4YjJvSUYvWlN1SHNZSUlTWW1YcFdZClcwZGIwN0ZDTm9QYlg3WHhiUTZ5\nZTJ5QTVxdGFyRGFNdTNSWXVmRkxQVEkKLS0tIGtTMXpmNWRnQ21aNWhiVGRYOUN1\ndXBQSnJCaDJCaDVKemRiN1NTTk9sLzAKnUS6XvHsMFKDOfbM6h4l6Fa/E6Y3oeWV\nioZqov7WYBr6M0GFspJwmUKIMiUSOS1YQZ+m1PZcsSm8ukritJ6Erw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdvWDFGdklB\nUjRPcHJuRWtSR3cwcGZYU09PMFRnVmpXSFc5amd5ZGRjREUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJZHA2aTVVekpYbkFtOFMyenZLUmEx\nU2NYa3FUdFNlbXJDaEZyY0pQeEhNCi0tLSBnWFI4czUvK25OdjVrV0xtWVExaVRH\nZnRHMzNrWkh4cmJlN2tKbFVydGtrCn4kJx3yPDwu7pAMnFhh2uB8Pha2eDCrzNM1\n9WSVFM91FS3dwmU/IoX1gpEirbgxiDefzgHzhEzzNJhU4Vw1/Q0=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFaVUp2OHpT\nN1dHbEk2bDh4WS80emtkOW5MSUF1S2U5dkd4ako5eUxwU0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4QkVObFMvQ0NuNGx1VnVtaW9Ub2c2\nT01QNW9PanhQK3UyanAwMHJJZ0VBCi0tLSB1dVdRTFlFMUFKb2o0Zi9abTJVVHRz\nY1gwR0hVN25VT3JmcUxuT2N4aEtvCrGwosnahN1wtQxiaqU5bz/V6JBoxvX8tQXm\nXmG9tWTcoDx9gjQkV3iu2XsdW73apm54WfY/9qJfHJHwh6LT4qU=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFc4Z0tZY0hr\nc2xpWVRUMytjbVJ6MllBT1pPYlpMeVdqWTZIdDI5SEV3VHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQQXBxczVQZlBITlBEUExCV0ZhZ3RB\nTWJwSm5nOEZKNFV4alFjOFVTUWRFCi0tLSBRN1UydUJpbnRKVTlicmFDbEh1S2lV\nc29Rd3lZRkdGd29DQ0RGdEQwWm9nCt/dy3C4H5lhXCW80e5ypvOnVdklucyra15X\nZBKw0gtr8a0vZRoECXPiRHog2U3uBY+ylqHSggPJfYyEmjqcMX0=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVlQ4d1JjSkcxZVRXTElp\nT1ZDTHhCOGZZMzk0VGt1SWY5N01jRThhV0E4ClRoc29sVEhmRU9aeVJBbEY2RnR6\nMTFBanR2MWJXTHc5TXdsemh4VXdMQmMKLS0tIHozdWNDRzVnZFFUNDZvUGlvMWk5\nVWE3SkR6bmtZRU5PelhqR2Nqd09LWm8KaKCZcmMmGdq2AI6seVe/OCBnK8Efu2Yi\nPpW3Gq3+SX/J4ODGvzgVMBtcVJo/ZKZTq0sHLTCmfPVnGDGtK10gjA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVXZaRXhtRkpMcGpmYnNm\nOGJkOFdmVkd6SUVHMUtOMkFSN1BXVmNibWlBCk9EUTFMVE4vVldmaW5reWt0VXNx\nQU13Y1ZWUnMyN0V6aDJhd2hESTQ2WFUKLS0tIFY5OG9ndmR5blRyaWszdFh3Wngv\ncW43UW5OMUppQ016WGJoNHZnV2dZRk0KrEH5dIiNi3294aMzsTS8jQUKUrbhov2L\n3A679aAm033yVG4UVmdOZFEL3ffOG0cGo7R1X76seWbee1eEkGgfbw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3dKV29TSE54bWNaY0g4\nc3RaQ0xTOFlaZUE3RVB3OHhDU3NJUWhmL0FJCmVad2IwWnBQaWxHSS9QNHRubyt0\nMndYaHZ6QlErZmRRT0NNd3lwdVdhTncKLS0tIDRQc3Q3b2xaSmxtV0p2Y09uSlV4\nNVFqeGVUa1NUNXVhc3QrNDlya1hzZzAKzM1yHUpMAK/J+O8lDCccUx8R4BWQVRdb\ngldElzMF7Disv0yIZFa+S8eyFwrwzyn32z7kKErxc8TFs/d4p11l0g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d0dITytPaHUrMUo2aXhW\nekNzS0doZHpIeDRsQStjd2JMbDFoVjE4R0E0CmVBOC83TTRZVzB3MXJxYnVRbnFV\nTHA3N0NyVVpFcnUyajBTazkzM2ZQd2cKLS0tIHExNlNMMmVDdjNpYXcrSU1KN0Zu\nUEYrdG03YXdTYXl6S0ZoeTJKN0dHcDgKuVpkG8xlSOS+WB8kzk5tGWvKWJC78H6J\nd/znCxcaDfHI3OOJxSwDg/uhMoqTcm6Gwx5Fx9iMK26n34lfWkJFEA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:37Z",
-		"mac": "ENC[AES256_GCM,data:2iWAosxFEYo/KdMC8FDy4ZkNJXRWlvOYwD2j0cGoE8YIQ7PkjKkIhuGE2RYlhBV3wk6z5nRtrBblJp9bU+LKleFXyUnavC4UgQbtrdWA/QSOde3YJtgsyQXjIPH9CkasZqdPhltF6ReFVfCu8P9yHEfXTkAPXSutLKTUCnO7ab8=,iv:9PYgHPiQW5OUyhi5dMYQgzrq434RYLdVbiULq9mfMhg=,tag:sVsVJOGygoBbss8WM0iiHw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
+++ b/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
@@ -1 +0,0 @@
-../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/root-password/password-hash/secret
+++ b/vars/per-machine/alpheratz/root-password/password-hash/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:XHMzHHk74lMX8iQIzmjOm1Kbeyw7ksVK3qVCeWTKgp6uUPVPa0v0hopgKYwF5QdPECsZ2sylf3V7OyYf8qpC6GEWVuoW8JcYugMow8VzXEIOPMjDuuyIdw5Ub3ThGodxUT5nlF/avUQAyQ==,iv:3c7SyA/ob45jdmmn++eTjCisw4BA1efBInCFdcyi5cU=,tag:ryY4N9v/4z6zqleZpXkhxA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBubTE1cDNCUEtuVUIxcDZT\ndmxGblpuWWpXTVgwOXgxNCtudHZzdDU4eGs0CkFuYTd2MXZFTHh4VjZOdkhXaDIx\nMzBYeGsyV0VLWWJyc2JHS3lrQ04wbjQKLS0tIE9uVjZWRXp6anFsakVGWTAwZzQr\nWEluN3pkVUQwV3VDeThnN3dtN0ozbDQKZvsicWXuHocazoUlL5bnu3BSsIiOrJHH\nxbsuv8VU5mE5p440R8gV1qiOq7PVx18lNc8nVSKjlQglfTMiPBgDnQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQStLcXdiK3YwVExYQjZs\nMHJjQi9xaStub21EWk9LdGlWN2pJRStMMkg4CjFoU3lZTDlYNXhXNUZqUVE0b25M\nVGc2bVMxNmtudyswVlpuV1UvUUpwYTAKLS0tIFFBWWhQY3pyNWZQVmF4UXArdEx5\nRGRWTzB5aVluZTBFNVhQT0xiSk02ZTgKBX/0V28yFRJ4jzjv8a/CK+93C7+WbW7e\nmisvXVLsnxoV6yvkjAOG+GfVqJ+oZHtghbYzMv5kOdTB2F0d8gSBnA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRk91U2NncDVvenlmdWps\nZWdlK21Lblptcnc3bE1LSGtZTmNvUGc1cDBRCjJXTm1PNmdhbFd3cUltM0R0NzZC\nVVpyclFaU0J5WHg5cWtRa2NjMEtOdGcKLS0tIHI2TG5nbHZuNTQwZldnd3ljeGdi\nVnRDRnllWXJUZittUFhyb20wSEtmYXMKyzfABTq2/pPu/ma1WynIezVVBdwtShCC\nU0xfhC6SQH4mSWUq1J4tToG/dUFNL8UBkb+Bl5fJfn9e+AzuP/IXkQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1BbmFGdVFu\nUGRoNFcwckNjTDh5UXdZaWFIU0dvcmI0TU9QS1RqYy9wUUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp6U0RxK24xYkI5VG5CQ1dUeGEwNFUw\nS3cxZlhpb0pYOXlqdytNTVozZ1U0Ci0tLSBNWTlkNUxxTjB2N3FJcnF0NDVVZTJD\nU2MzTUZhRmR0RkxDQ3JvWFJsaXI4CiqtLfOaEpw3Yxx90Gm5aZg4/bQXmBREMP8S\n46PGDaKAvfdxl0QGlBOyM8l5QFmh9NWLXIUyPr+sCeDQNYz0k4s=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDlSTnV1NzRP\nb1hucEtQUUNHd2ZJVkVCV2h0U2dWcmRXWVAyY2xHTFM2MXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3cnhib2RHN1VaelRpeTJYdTYvSFlB\nTkRMdVYvUnM1MWpiOSt0bjNkREdBCi0tLSBiOVRkdGIvVENmeFI4ZlEzRm4yUzFs\nRFJzVFAxWEFISTVrTE5qTFE2dHVZCqr7t0eALrjXKez9SAcSy/oxkXpzn+K6HOu5\njXXrrgIbLcHLQfMxK+QTE7+xwNvM4aKlES3dm91jf62ANPgedew=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlBQTZHaG4v\nbjFOS29lbGxYR3FPU25vT2c3Yjg0OUNhK0l0NVRmVjk1aUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpqaGtQSmhGdXY1SFlpbjVSNzNmYkVq\nbGVBK0tJbFhvUFVvazRrdDRTL1RzCi0tLSBnVHc1czBJYjZWamFNT2FCaHFRb29u\nVWU4YW00YlE0Y29HejRtYmt3a2NZCtoKSd6gNA7m5WBwLLixV4T0AcqXwYl8qiHv\nXMcrXhZ70KXTJW6koxu1iGqhTc2NiNgc3GyCS4Y09/aGMsdcPOI=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2andpVWhmVGR4UW5wNmtD\nVTluNzNueGNIcDlVcURqekVBN2RvY0Z6S21VCm83NEl2NFIxUjdlWjRSK1QvM0NC\ndUJOZFhPck5FY2p1TUZTVVlzRmQ5ZDQKLS0tIGY5MnE4QzRiOGRPNHBRSFVtMHoy\nVk5neGVTZ3pqQ05nY1lucXVWdlh2OTQKeOeFUVyvmTxUTtjd7T/H8pS9EeZ5gOsw\nYXVXu9jXRWOzkS+vUXL02Kl510Dyyz3ecRDSzzOUOp1ERw9oF3hK4A==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVUgyMW5wUmFHT2hYaVEx\nRktQYzRoM0YzYU5weUlUelZDZlB6YkJZaW1RCnNGa3FmbU1FR1lZUkVTalhkV0Vz\nMG5BVjZ2eERpK2RVT1pkOGcrOGFmTmMKLS0tIEs2MkVZNmF6OVdkQWRvK1ViVU5S\na0xUNlFxdW5zZWF1K2VobUFRNCtocFUKPhOUjooCCIBCG20C5Oe3qyUcIpyJZcY+\noY8TdgyK1hgmhKtMZN35tifglvmNIxmEyH2y0iXBdb3N2Gi8GG3CFA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBON1NiaGFKVi9LQjNFbWlM\nYTBpeTd3S2xUTkI1QWVQaENpc0hhU2VPVHhnCnZKSXQzQ0ZDR1hsL1dNb3dPVVp6\nak9qRk4ydFNtdklhNHUwdDRvY282S1kKLS0tIGdtbUtEMk0wLzFZVVV5anlyMldN\nMlF3bWdvZzNNL3pLSDBFRWxtaklEc3cKcyvFrH/5B3X39im6FXiZVLDwqzL615G/\nHraaCZ//Qyxi7+onKXDNrYTxc5jUmCE4qs6lhuyFdnDT3IQCxJqMEQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NlprK0I3aS96OFhQYlhk\nQVlsVXl3UHEya1g1MExMeEVZOE5vbm5vb1JVCnJJU01yZC9HNENrRnNtUDZFY1ds\nandjU3JtVTFac0RxRHMrL2I1TEtDb3cKLS0tIFRDZ3dzaXEzRVN5RHpHYTRXTmhJ\neGEyd05rR0JGamY4SUxHcmRzUUlQK28KiW3tu2irWDJFPcnBfJdTbygkJMpFbtNh\nwHHsaAml+dZuPqWQbmVyDY5CKwZGynF9X2RCRHiqXNbX/GGUblJWmA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:37Z",
-		"mac": "ENC[AES256_GCM,data:te5F/QFsrX6o37LIpLmBewPDRoG5uhL2tFpX58xD7mk7KGxVi5o1Unk/n3DJ/+CSyg/0v+mWbaRuYzlRGO1XPJEITXpQBvSkjtBskvioCvCH6XyIvSJ923azqR9KeVjgXQVBNxSd2DDWhwnaGgeFa1a5itk1tA+lnzdghVAt37I=,iv:5yf2rdPorAA8ofn3OmRse34rZqVPfvSotPKk9i7toe8=,tag:zjmUmLBlQ3fGRxNZJFI6fw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password/secret
+++ b/vars/per-machine/alpheratz/root-password/password/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:fb0O3XyZvw5wY+JMPFCpjn0YibE0Z+s1QdaIgimDNEQIsCyQ7jNQJIY=,iv:liF4HBVvLWbPD2QAcQ3YCcjxGdAXDZPu2+jLHAtrBGQ=,tag:yt9Bad+HxQodnbxiOrNYWQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWVZIQWs1b2d3MWs0Vmxr\nM2JzaFN3WlpKKzFwbVNHc1A0dFlGZlRvL1FrCkd1MU9LZXBQeHhQUEE3bW1sQTdu\nOTFreXpQdVpJUytwSU03KzVtUHVsaVUKLS0tIHQrT0NGTlZ1dFQrTklwZ2NIbS9D\nbTUxYzNjaHNMdXZIQ256cEtCaTRmYjQK3+NzdC2I9kmJyyCNGqx2P2rY6D73aekM\nuNZoUfFNqksPLQAOLPvjt6joQldZUZlFKvY0AXw3r+HVUMICP1z9Sw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByYlIvL0F3US9nQW1HeWg4\nUktLRHJhd1AyaWRwTnNUVjN3U3drbFJncjE0Cm1QREo2QTlxbWdMVEVFUCt1Vnpy\nZmk4WHlaUUZkcXAvREcwR01RZWZxaEkKLS0tIGhWc2FCVlA0ZE90SlJtNU12WUEx\nTnpzVzlMdmxmblNocGdHUWJFWU4xMWcKvmJiH7TJrbs/1oMs5Zsjvt0w6LfiIIPt\nle+ivnsRrIhYzofHddHTnVDI7NmvCw6e00MWqD7hU458zqW3fUdeow==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHc0TnZHWFpm\nSHUwUnBtdERNRzJwdWxsMDIzcXQ1ZndFS0hHZkRiYU5PSFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpsWXdKVU1JUW5rYkEycUcrQjVrbHFP\nYmZna0JZZ2paNE5vVzVRTC9VeXNFCi0tLSBUSVZzQktRVlJGMVU4SGYydnBhNTNR\naXpZenBZTjRqVXQ3R2NPalBRUjhjCq3x4ccaNLUhKfLEZRTAJPLInz1edrDYPm0H\nVga5VWkQ0llstDWy8ANDJ+N3ryL0P4WUGWNbWtRpY9bmoXqvs9Y=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDcrTlA0VjJF\nM3ZjS1Z3YWYwOTYwSkJ1Q1dLWGJ3VEhFckpjN2FiRDNTbTAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpTUk9lT0xpaVJFS053TWhET2cyaTZn\nb094T05HcGVYWWljeHgvSG5rNGdnCi0tLSBScXVsMFBweWQrQTFpQXoxVm9TdWFG\nK1lhaEptM2poNkxuMkxUMlBDV1BFCjr+ZEAW85wiP0cEzfBnvhr/hI+r3ypLJT9w\nB/MvVbYma4yV/tIbN1vBEWnLEpFDuLyWBUZfNS1aVbI3U9o2Gg8=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlGNmVSUktj\nTHlsbjd5bUpveUk0WE9BczBvVktzNFBFNGtJYlhoZkgxVGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozN1d2OExhUCs2cnJBMEQ2SEk1UVJE\ndUdBTHNCQjMySmg0dVNFVmxQZFRVCi0tLSBtYWFGbnYwbVlWK2Z5cGdHOERhRWlK\nVjVKdnBuUkV0dFFoeklHMWkyOUdJCnCiH4DZpqOiTFdREZPpFxbeIqYbNfHhh6ic\nPziJWxAH6xJy1m0Q2MHj11CqZFxHti7xeOovN7vrb8LiELASu2g=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYVdCcjBWSmhjdk5yTm4v\nYU43UVNRVzg3S3pLR1RwU3ZQeTd5YXo3ZUJzCnk4dWduVW1zYVUya21VR0JrRlNU\naG1MWGlsTWRkVFAvSW91OGcwayt3NncKLS0tIHdNU3pnTGhocERRbzFWNUtvUTYy\nQVFXOTAzQThsTmowNit5WWFGc3JvTmcKmCL1zZp7qksSB8WiLxh44kvLemT3AF7r\nIY4WLCLTMBYIZ+ZnRyiLtoV9199bu7zdVRpfIEAlz4fH0kVREXMtyw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d3FhUTBEeUNrRnozeVJL\nZVU4QUM2L1RaZGVkMDA4RFNBRWJacmpDOVc4Ck5lTHZGN3pwY2ZRUWdRNTY2MVhi\nM1p3Q2tuM1ZEZXU1L3l0dE9pYWJSdHMKLS0tIG5aYkRER3pBdVJiTHR6Vy9nQ0pS\ndVdTc3NJSG1DcjdqSDVsQXdLcXNScWcKRBH7tIeDU8li35JjSn7k49pv3/Twul23\n57Jlro4c82bkqApW7yCLn4PDIYykH7B0iswZBvS7mngQ1KSwbEBfSQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQmpya05vQzZ2S1NnU09z\nZzYwSzRSWFBmYzJqVVZrRnBNa3B1UDRZWWxVCjY5TERUNUdTS1A5SlhNL0RpZDVR\ndzdzTk1qcGVQdytZMFNqYVcvczB2S28KLS0tIGkzemQyNTYxei9LY01zQzlDT1Ew\nOWRyWUU1R0N2YmQvbzBsZlhKMUxEcWMKPb7WsVVWVNyzyPs+Xq3TLQ62tZ2di3yS\nvsDMH+mQSL2y1jfV2uJASTd11gz6SmzS4FDai3sxTXfrhSO89ha+jg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSG1hd1AzQWt1UWFpaHUx\nOENrVXVlQkFCWEp3U2orcmx1cjV5aG8wbTFvCmFXMElXcVhzTWlpemdGUTFvVS85\nMEJ3czNwSHlnYTkzTmVLOC9YbGkyRE0KLS0tIFBCY3F6TUh4VFcxQkdFRytCRnZ3\nc2VrUllLZ1ZxbDJFb2RITDNpSXhFc1EKqAX7ERco6NC2MT8N8peSIRO8pPTPdhGn\nlso6TZDFlQBO2Qz4UIFGe+/YNWRS+tTM7I/SJ/WOx7QeHGWZ3XW0zg==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:37Z",
-		"mac": "ENC[AES256_GCM,data:cdF53FqlXXkIfly9Wi/+etRl6QmcUukTgCXBT1QKSuF0wUb6HjS1wP0Gxx2rEzOIcsDCPvTZtnokrGQ8Fw000B5ubajhBKovr7bmxab8SvJz03fSQuY2PSLd9bdTln6kgwf4NG0CKfR8P27BtTFPaoXcz2KzJxS9f1cXq3OeNrI=,iv:sar0rHe9clELxClpgEQ5+s7wmcS8XDabQVf2DMdRDEk=,tag:M3AYnXyy2VWXWeqAzGthug==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/alpheratz/root-password/password/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/state-version/version/value
+++ b/vars/per-machine/alpheratz/state-version/version/value
@@ -1 +0,0 @@
-25.11
--- a/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
@@ -1 +0,0 @@
-../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hostname/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:ao5Mri45cCo0ikJPFquPwzCeeIr7YT4hrcMwAErpwJkiBozCoeAnp0NarCEojOKQWMEm38cCcqPAyLB5MMUQ,iv:mXex1YLgV3cSed8Dleuk+xYVHJjH4pRdKHUgT5RNaus=,tag:FeG2VRpNCP3OLByCevkHrw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cXJ2VU5uSUNKelJHdHQ4\nYkZtNDZ6NTFhNjNGakdnUjZxRk1jMHJSQUdZCi9DYUR4MDRhV3c4cVpNSlRnMGZM\nT0hZMUZnNzdKV05DSzgyblpMc3lxeE0KLS0tIFdoSDA4dHNvSEx6NVdxclRwQ2pu\nNEFsZ1FmTlNmME5DcnZFTVhSaFdSRHcKNkHgnCn07yeG0qnXen//Czpm7Jr1mG3R\ndiymrjr+cHJpib7TYv4h5z3bC2DCVa72wl48z0Pj9KsBquR0oLVsNQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtN2M5bHhkODd1T3U4cHNT\nQjYzdDFDemRINW4wY1U3YU0yRlJJd21EMjBNCkpQenUweXhGSGNwbHhhVUZVZXl4\nbXFBaDFPd1NnMWpIVUVTZ1NYb2pDaFEKLS0tIHA0eE1ENjRWTTk2MVJZZjhIVDE4\nS2JzN2Z4VGRFYXNrWEVkNzNMMWxqRWMKOFHKYxSuluxyNRmmFEQ92PEfRfvNhJCl\nRViW8jHYbfZnPhBK4irht1b4XHDJQz/8sn5TKv/5hJeKHtdy3410iw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibFNGcW9JOUUyRmcwbmZ6\nM1NVTkdPamQzRXNHOWZkaWwrZnJjYUJmZmtzCmxnakdodnRCMFRBbUVHVjhET1Fx\nekdtWlFheUo3MmdXb1lnKzZzN3ZKRlkKLS0tIGF1UjQ4TWJtTHlsMGNNWnhJYmtp\nd0V4OXN0OWNZVTVQQ2cvdk5Ma3NTVVUKkx1Njs4ZkOFtRFixqXdFNibj12hy18rX\nh/6cxmhYTpLVzzGBSWy8/ObP8/mk+uon280T2FpQ88m1sTKS7NtnUQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHkxQ0hEaGQ4\nM29rZSt1NnVKWUhGckJ4VkhFMys5dURQc09RSGpuZnMydzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDRFdING5lSFRnc2dsMTZ1aGZGQU92\nV091czZjNmxIZm45RHZLTTNkd0ZnCi0tLSBjVmFWcytwVHNDY29BMTMrYVVCc2hQ\nUVFubWNCbXl0NG1ITlRNaS9GVjhnCjBbMrQb+u3TFceCd1RNeMLpaL7tfiCc3003\njliolM4JyR5L6MCyViMkS/xpXI1k/25a8kl0aeRI0d/jEPZ74iQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHljYTlYRmVn\nZ0Yya1dZN3piYXJvUEJjdCthc1dPak1zbmoyQXRlTkpYbjggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp0a1htSDZhQW1mZ2VtbjkyYm5nditX\nbGd0RzJJN01iNExLdGFueWFZenlnCi0tLSA0UFVYeGkzdGR3WjBNbHZEN1A1dVBZ\nZ3lNdFdOODV6MzZwc1RVZkJQSzJJCkr8KQHc95z8VlrSRot+8aWb7WUUUZ3C0KUa\nXPdZK05yhHeCDDD9zIyrZ77esI9tSLsArVcV25rGv7zCO7/fnpY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvR3p0NG1L\nNXJuODI4RU95dDI1dFFjQXJ1Z1N3ekMrTEZ1c1JPOFhLZzAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpReTNDdUh3ekFXRVZwV05tdDUxMkxQ\nSjRudktDQ2dKeHZOLzI3QjY5TnRzCi0tLSB3eTVVem5GblN0RHlmeEkvOGlkU1pl\nTlBlVlRyeG5ienlNNzludnZkYU0wCjOfwCN4FCfsH9uY6Nt74lhiAOEbjEiRos/U\nrlgaZ0tS0Nc09grtKmZAQd9Dc66jmhaD/nJVnvq/9IHMnrbE2jk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSkVFMFdrb2RuOSszWUZL\nRXY3QThjUjl6bWM4OWJVVU1oVm4wMjR6T1drCmZnNi94dkk4YnE4eUNZTkdyWGI4\ncERYc25uUlhCa1dvTWJRaVhSM2h1T28KLS0tIHVlWnZXS08veGNsRi9wWDh0Yllh\nSHd2bTZ4THRqTUMvN1BrRGlEQjMzbW8KzTsGUcBpMcPhkgJOugm932NAXWG2xMBx\nJW1kIVW2TycopTWZnKQfOp3NtV3yFlxW7vCPljGEmhvAs5EhU8SbgA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYWovODhORUZOMUx4YXdi\nYVd2akpaUHNWMVc2bWF4VHZHN3grRWlkM1FRClk2UVlFRHBCMnRDVnNPbEl4d2Iw\nNWNFNjRNbWFZa0phd3QxRWdZc2wyM2MKLS0tIFVheVlsalZpV0l4UVUwVXZnZm9z\nNEh1QTlxVXVLZ2wwT1MzcGxHbEt5V3MKvkMbOEMLd99YvMuoK4LSdZcmvswC877c\n3D66ZoZ6g3P6wrVBRtPs+4+10wLjFhI5GPPvK9PGpWYvu/5pDKaCOg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVblJNNmFyM0pCQllHdHBR\nT2JPb1JRekhpeVhseWxGTGRCYkloWk9Zc0dzCkoxa1cyZXh4YzhkYXJ5cmNaQVJO\nTFM5VFNKa0s2UmE1V0xRak5tMUh0SEkKLS0tIDRZZkJIR2FVN1hCanhMdXp3YzZi\nNlZiU3doa0J1ZFFYMWRZaW5BUERITTAK0YixYdgGEEn7Y7/F1fnd+fJvyVZwEz2X\n77ufkafOeNEYla9Rng/daDGpGEyA5715kZjbuHvHbck35umlmheAeA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISEZETUtYbjVEa2hWK2ow\ndHV6UjQ4enV6Z0phdUZFQlR4bmk5Mk5FZDFzCiszU0M0cU51RWMyTXpzamdrV0FE\nS2RNa0NXWmUrSW1xWUtxN2p0RjM1UFUKLS0tIGx4TlJ4YkpBTnd1aGpFUXBoQWV3\nTzRCT1RJR0FkQlpJb0ZuT0JvY0FnUkkKc0L2KR5H2mWVlGrUkVt2ffvzaYSHLVgl\n0ojHe9nFRp/sRtCpFFTQxUW+qmxIEWwyf/9rE96gRYQH+i4+0ZoJvg==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:40Z",
-		"mac": "ENC[AES256_GCM,data:7NmTqngcvswZoLgRh26oLI3u9ucqRws7GNztUk28E6YgVU8zr7D5++s9yNaF7IfitDvqqGgr3UjORASQngLqazLgXYMShsVN982OPbDIPgNvjfyPPkSp5bZYLdsDxjSRnE1ATSMAab85J90W0AIdtWahsaxv1sg8HZRy9wzs1WQ=,iv:BkjbE/rkRH7LAP07TyIo4NmAMLPF1xuvMylCWx2LyuE=,tag:02NuCvNQmEa+fkiCB85VAw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
@@ -1 +0,0 @@
-../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:p0ZsT/rqNrfGNGMSnJguZ2V1hN3HLyH0LGze/2dONBeYCVRxfQV4S9gfQEhBVtaFvr8bD+sbKB3VvMZVLo2xmUE1F5HrBw0JWhgKEgd6775SzW/IQav0821QqNYeCa5Z,iv:3AH/4s7M/wbh92q766UqsdP58NVrAI9zgY64pDfl8ls=,tag:98+Z9fUZQgTqbjfEpn3qUw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMjhmbENHSEptZnBWclov\nS3dBMDcxVHFoa0cvOXRqTGZzMmptbkFNWWxjClUzdndmTzZpZlNhbDRHNmc3OGVQ\nSko1MWZtMHd0MFpwWllzb3hTS3V5Mk0KLS0tIEVUcTZyUXNVRzlwZC9wQ0QycXlJ\ncTl2MG9zMHdkcWdhamtLWmQ2Q2IvdTQKudtGoVCJDJOQYog8nRZ7raB+gr1XH6qH\nUKTHsH+UVCndroxEaSThbzKspkbQYrsPHPMOX+281WgKn96VB+RpIA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByQUJ0TjFJR0JiNGl3S2Z0\nOHkzN1lIVTZaMkc1WHY2Y0hvNlNTSFN3aXlFCk43cG0zYUpkMU9FcTYxU1AzY1pU\nRnVDcGhPTFJVMWRBVS9GNGxLVzZjY0UKLS0tIEg3cXdKN1BZOEgvMmlDUmRERWox\nK1VKY0g3QzdUWnFFVS9XS0w4bmVrV2cKbRfsZ+wihnViBg1RUoUtlBL2OndAwose\n4uJxcPqO/JJ+hCcfX+c2XALwxjzS1V/GYPq7XM7GrpXmOBG/Q7zuow==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZyMTE0c1AzNEtxWVJW\nTFJpRGVMNXlSR2xmMGs3bkFUY2lVODh5QkZnCnpFQXpjM3gycVpsWmFiU2MvQ2dX\nL2licm54U0pleGNGWFk3Q2RnT0t0RjgKLS0tIEZPeENmRWdHd24yaFkrRWl2TGtR\nYVgxTXY3YU1XRmhrN0FnREJ1SW16MzQKk66+nCqGgz0itmqfsMUUzfpgtfko02ld\nX17DUcQPO3T8PkGZS640b1IKcA1/xF8Xtg07vZLsL0ZKKYiVTyMSTg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEgxYmF2TC9q\nRFR5K2dybks2RDVuelBPNE5lU1hlZERkK1k1ZWFBV1RNZ1UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpySDAwTld3bTNpaEpzWDRLVmlVSnQw\nZGlydWptc2FVbzEwYzlEN2U4aFo4Ci0tLSBlV0RkdGI4dEZNUU1abFpJcHpPY1JG\nTTAxRExJeTRQSHh4bElSTnlrOXpVCm3MXFpIwiJh03W4Hyyo8A3Vv7OOPcVY9r5s\nVHoWC3hjBcUWcByJAq8DFZLZ/9h+futtLpq4gLzJxCDNQQcSuLE=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHB3Qk5Ndi9n\nc2Z5QVZqejhtMGFqbVIveENBYVo1Qzh2cWdyOVVoem4rSEkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkSjdhRGtuSmVDd1NmN3UzRmZDcjRO\nbXVUbG1ySVlXMmdVS05BVDBBMW40Ci0tLSBIV0lzczZ5NTBlYWtnRDNTZVoxU050\nMks5ZXozZk4xc0tKWm11WGdpb3dVCtNvBcH51672lDjnkt/xVjIemoTDOZ/VVS2i\nQUWwk6UbfD7PPUc1n4edg1M9zT4RoNTWVyMXqT7XqDumch7OtuA=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYeUs3dkZ5\nNUNQNnE5a01WVXpCaFNJRWlMcWhaQXZpMjhWdmxBclZqVUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIZUF1V1JjaXl2SHRVTTNmSGVjTzcv\ncUxhNWdRWXFGRjh1bUFneDZweW9ZCi0tLSArOEMzSmdYNTYrUG9meFZBbEUyTWRY\nMnpwTi9JU2h4cXZUbERkbjhJZFA0CkRxPJ/Yzm57siZW7x8Z7fBrhRgycgrUoO8T\nv/BGUYJWA/z3u2LF1vJkBDj50pE9RpDi4ZSCcMvbw/QmxNnEG1k=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYXFOSFZWWjR1bUUxMlF1\naTJpRHpuZmVuUlk5d2dyUTVsSzFZelYrdkFvCi9KOEYwUzJ3c05GUUFOUWZld3VD\nOXNhVFBzMG9Cejl6NzliaVNTVktDSzgKLS0tIHYwbGFORStvRDJscld5QU1nR1da\nOUc2TEt1M01KSzJFN3RXeXJIS3NCSjQKEMQRTzGkY6T2kuRvfhVtcRQ2jVt5zhiY\nDlp5NrwevxKO3UcNNR4Xi/WCUmWA33p6Kgj5QbZbVhQebR/zd8b9Yw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGaE45TXpBdzdUV0ExQ1Jm\ndGZCV215eWZ4anpmQW56RFhlUWR1M1BwNFVFCjhGZmMwb2RJTVk3TmJuazBuOTlJ\ncUFJQlRMTlB6WFJHL3IyM1ZOcVNGREkKLS0tIHp5RzZaV1lyMnRCMGhFNy9jbWxs\nc1JrK2JVUXVIeXVTOVpmdTVBbk1tRGMKxJslG5hP+EAyFv+twMoHZk3G8AXpAK4w\nQnKEultmweZ7XovxfUBEl4322YZX6CuTm8yHqzFDTGv1nuphPL8Twg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3FCWExKcFFlSnJVYkNs\neWgzaGZlR2YxZUVjYzV6KzJUb0VQRmtwS2t3CjVIME55Rm5GeEovQWJVMFliOXRY\nNUlGVlpFYm1rMFZJcU1pNVl6UVBLaTAKLS0tIEluRGU5WDlMbnA3d2s1WlpvcHdm\nMm55WnYzNFY0M25OcXVqekZDTGRScXcKS3F08d9+rt2xNPFsp+sPP6OWVNsVN0mG\npIr6m0MjxjEejHSUV8Oc7W78l5sRLKhjv+5MGU6Im0NV91lu15zpEA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONjg4djZ3T2NtQWpTTmRP\na0V2a1V0eTZSSkd5MHFsOW1RZXJsVUVnSjNrCnlFUndqRFFKYmM2ZFRoUkJNT3R6\nUi9nTW1uMERwbmQ2elpDNDFtNlNyWmsKLS0tIE9sazlIaXVTK2dPc2NEVVA0WDFi\nbEpjYzZTU3J2VGltOVIrbnV0R0x1SEkKC9FEL5cWB2VN5Gg8xAW816e+yPWf6IbI\nIA0S6Q3MGCwVOf1IA2GL93aCIIdkZ82bINaUG+KQDddSyc34nqnw7w==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-12-03T05:54:40Z",
-		"mac": "ENC[AES256_GCM,data:Li3c59vl4x6tAH9JkZ4vdOH+vs7+x1Ih8YZ7lIjopeqVdtFqxQwEorZudLJ/Jas5Ax0WQjRB1Qr1PrxQP6XtghXvNPKiWK0TAHsT7gmMB4fsA10EI6zJUlT4aVg8TGTgl1SXvGU6u36XpVtCVu5QKUNmqcKKL6JXVuOf1kWIhV8=,iv:fEd5xXCqinDK7wamxIBxX0vHUZly+iiDg7mITBVdioY=,tag:bxwIgz3Yohijar0utcfWlA==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hostname/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hostname/secret
+++ b/vars/per-machine/b4l/tor_tor/hostname/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:kKuKG9d4/M1QbJFDG7lIqsLxv+UuHnjefOLIrwlJevDjZ9WXFF7t9wEdKI97ks0P9QjCYwCWLpl9KvnnWGG5,iv:NfDT4aRKT09OCGCkeqjM7nCpn4uvAmxjM+vrM3LjbzI=,tag:HA941KSFSWou+r83K3GlPg==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1Z6U1JYSDAvRUR0Q2Q3\nS3V0VHcySjJUSk1jUGlSeWp6MVNoSkJsSDBjCnAwMWFrU1hVY2FMQURQWnRyMnFI\ncGFDdjNqUVp4Um9hZzM2aE5OQ3A5YzQKLS0tIEtDUHhuQ3dQSmJ1Sm5qYVdvZlFD\ncDRrck8vOFYxdUJYdmxyZkVjMWNJN1EK5LMgNkrtbtGnB1/WCMnINutQxC4J6H8O\nyW8VXF7Vkoc1UJwWdgLIOILq2wgURgmlcjN6QRxqnZ5+SpEEpfmwSA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYlJObzVFZDNnWFppQjRp\nMmpIdnh2UUk2aFA3RFJnbnNQemRYOXk0V0FJCnBVNytpdlgzNVBCOVBPcXovSjJD\nS3RwNk1Odkd5VUlDOC9mMms1akIxVEkKLS0tIFJjcW1yb1VOdmFzSWdiUkx2MjM5\nL0k1UmQ0NCtBd1dyci8wbFhzZzJhL0EKC3ccLIbdodeHtLuMr0rhlXn9xzv7vV0s\nu5jKgkLcJsQazR/tTOJsFa1YSW214b1xzkQ5UOjGGr3QKdKieoCmfA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtaQzlvMkFW\nRkdzeDhhWGlEVGpYeisyNUx1VWxPY3d0cXhtSjdqZm9hbm8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpWTUlEeTU3WEN3NlRxc3QwaTlpRmVn\nYkVQTVJnbW9IVFJOeXl3V1I3M2UwCi0tLSBJMnlKVlQ1eE91eFBFRDgrdUY5Vkl4\nRGM0bDNFYXMyM2Nya3RJUU9GTXljCj2ud36cyMXx5yg93iXZiESeaAd4kPdcTbgc\nCgv20gxASeuq2U61h/UMHJM8tEeQi/HT3tld+yGghtp/QPYNgZc=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENSNEpjc05V\nclEwTHNzTjBHeS92UnBYYng4Z2p2Zm9mb1M2V1l5VUdqMXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpIWXZ2aXJTNC83anczMU00NCsyUFJG\naWE1TTlxbDZuQnRsbFFQTnZ1eG5VCi0tLSBoc1hqcElEUFkwWVRrd1dIYzlIczBk\nNmM1OWhRLzV5Y1dXTHN5c2pJejJvCmrYj1VSjz+XIHz9sy+U1hIRkmdKt+/ylRRc\nXoCqIK16mArX1S1FMmV0Gk7zcUOJEVECVLjuCUOIVcRvT39ymlQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG16bGlsOXdP\nNHZZd0tweE5JM2lXTmE5TXRZMC83MjBFSmhmKzdHL1g2bkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxc3E0QWFvZHNHOTRWZnZ1TkI2ODgx\nZHdJRFRQYnQ5aHhMdktyLzRoZlM4Ci0tLSB2UWFad2hJNnY0MWs5NU5RREJqQXVs\nbTI5K0poRVIxSW9WOWEyMHI2TnVvCh9RV0ss7qxpVLlR0TKIgt9Cbf1u59Nx/j5m\nb8exNGAsf9Bw/VX9gidU0Ij4Aeu7b0XPtI+cvLsGoNyxmTf5SRY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYjJRUmdaRVIwTXNjNCtS\nbDBRa21lb29rYjcwOHhxME5PQ2duSkxuN0Q4CjRQdFVQVHk0U0tibUp1MEJ4MUdS\nNVc3TnQ2ZkZpZXZVTmRUREpGTGZCNFkKLS0tIEJ3QzJKTlNGWnZqU2EvSWlma0Ja\neUk4dDR0cThISCtTbXZsTGF0VGdlQ0EK0lz1rjM0ygAg6QdusYHmi6Ehetou7GhI\nw/3hjerPobGZj32fy+EJ0LdcpILcx2lvvtOcDSap8/17Hbf6LKMi5g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNjBzeUJNZGRYd24xZkJv\nOGJuL2ZwZ0pibGFtNWMyQzJ5RVYwSXJtTEY0ClZHUFRXT2pwWGIzU0FWM2ozTVdO\nMGRmNU1POXd2cm80TkZPcFYzczZkakkKLS0tIGMzd0dNdjVqWnRQVjlLNzkrd0xE\nb1pxeU9uYm00WHhOSjlDRnRGT3RESHMKHLpP7DNaaidt5Tc/9za+Zq5UCIVMtefF\ncPqKLvOH5iF0qDErVY3zqoXlQxx5rssUhVXn/OXC2n1/ubSuQHx4RQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ2ZlN3VxL3Q0R1ZPdnAw\nV1F3YkwzeEZTYWhyeHVvbnFTUjZqWlBQM0hBCjVENlJ0aEZDRUI4bjBtNG1CNUJo\nOU5FcUlaMWMwcUdxazJ5aXFyUnNNOXcKLS0tIDU1ZzFtSzY4SlZreE5sekZjOFhO\nTk9XNW00MjlCMkw0UUlKU1AzeUY3MTAKGf+jwWUm35Fi2CBrH2r+hHgW1pwGPft5\nNoxxmNn1H28MHSLz6aK1x7J0+TA+Wv5wZPnNVG0vrXSt17NWOi1BXw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWWVoK2hEVHF2NERaL0w2\nMkErTHVUakdxenhTTEY1eWVrTFZUYmJ4RkZVCkZtNU9zWHc5YmVyRFlHRnVQWDkx\nanJHNmMzUUQwR3BUWXk2QkNZUEIvTU0KLS0tIFY1ODVSK1UxYlpSa0YrN2lidjAx\nQ0JBTGhaeUgzMFVKRFVJWWNxWm45MFUK2MQVFWgk7kaisGzxng0oG5CYOU6CX7jC\nfTMTgJ2ewEXdPa7b0Q/EcS6BvNDpz6jRB+Hr7mqqrnEQwt1YItIOFQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-28T07:54:23Z",
-		"mac": "ENC[AES256_GCM,data:wdtnhaoU/NMb1nqzjKX/uapwlbWZhbBrCO9VvYv5lYJrpkWRsFEMAT6XZzmkHoEBh5eZYO5fKth0tMyWkbptjcsPKnvFc8UmtFQ5lQ0u4asM/Fj9itLj6mtCqo34Uu7CzEhmfHKdThooZxNZ71qPGeu/uhiQFGBma6VLOz+AMQ4=,iv:BHju6UE77Wwz64njwQKCfouGXU5TtD+iCbCPDj3ng+g=,tag:MXM7dFiDSfvPUpDyqdWHzw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
@@ -1 +0,0 @@
-../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:lKIk24xi6Ob9mlU/L81PywvKd22juE/lyqv4mFA68MbEq6i/ktZHmnPfinfwmjjZEp0pJPYbqgfwT9rHr+a4msEW7XCSe/BKzllDpYezPmVOwOf2OB5Q0Q2O286EMfXg,iv:KmFaMllFeMvHz7ucNtPP6hd6rAqEsgOGskk1N3vylgg=,tag:DoqcW6UfJi4560GA+ZNBXw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUTdLa2hkVXVWZDVEN3RB\nMUhkb2k0QkdtZDdnYlhIelIrTmpGNG9NOXlNCmgvNEpLQXQzZ0swQnUyRkFOQUd3\nUXN1VGZvR0R5OWRIU2RiUWx4eGxPZ0EKLS0tIE1pejFaNUpLMk5JRFdvQ0FoWkZj\nYmtXMXNwMDZoZ3V4bEVXeXJKQk1NMmcKAiBg6+ZlQYl5gY4RKd3IQxSJc0HoRRoy\nm6SHYvutY4Pv6i9gEuyYXIHiUI5WNmqQjgcK8ZpNVB9kcSiCkDtHPw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEd003N0FhZUtWSStPY3dE\nS1d2U1RkZTFPVitsM2wzblhybXBzUlJlbTBvCitsMGpVNDNYNktEbEN3dkx2a01m\nNU1GMkpicTJ4TkNQenhuYVNOTXdGbncKLS0tIEZYZnlPVlI5RnFMN2hFZHN5LzdW\nK0FCSXBqYkQ4cWN2cVJCdUloT1FoVFEKSDw5Bl8CTjQiyX5iEZP4ageyDWI/VYFJ\nPMFbGrGIo/Yjn1GUXy3U8WCUL0Pf0t51uryYzxlugXGN2xDas1zqPA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHRFaEcvVXU1\nZzVJRFl0ZWx1U3g1MENFem91NFEwaC91bjB2VW1KakdrQXMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpIeE5GSGNaQkM4cGRGMU1IZGZvWkR5\nOWdMSks3VEZXWTJhOElRdkpMNW5jCi0tLSBPcXQrUG1DNlhoZzdUdnRNRTZ6ekVh\nUHlCY2VVOVhXQ1ZFNllmM2I3UUJvCs3ids9ynH69xwiQMy5H8W+gqkE4ro8YugWY\nIx/BHKaceRCrrhBr94ut9J4sssmXc+IW8KR59cfqlQaIzv4bw0g=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG03MkxmSXhS\nWlk3eXlNMTlOT2hqaVRZd2grYTY1WElweVlWUDZmOFcwQVEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3SlBVZzgzdkFsSjdBQ240czRVZStw\nM0taTUM3L0l3dUVwUXh4V3NlMUpRCi0tLSBJU0xzSDF1SW5BMkZGVURjTWptclA2\nTmFIdDFuYVFobTFRcjEybmYwUHpNClHm/GaJ3cJ6CD6qtRZeA+0IaZXQVIIl10gq\nXXky+9m4k9QqzJk0WNlQVTKESXEZmH7ZJpFozkkBl3pvsjcP76w=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJLNWt2VEFl\ndkRHWVU5eHV2Nk16NHVTUWRZVjFKN0gxTzBwUWdnUDdCZ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpxRGRKeGZzbDlhR1R0QjRxQ0Y2aDRU\nOUU4aGppdzZMMW5neXBpd2tKTnpzCi0tLSBpZG8yWnRLQzFUWXpBNGhVUTVEQ3JY\nZTEvYTErTmF3UkNIKy8zaE81MFFBCvNUXKxBem+mYQYPTwUaBfdcgbW2/ox7MHWu\nprO+wkgytG/dowwxYN8ojE0jTL5gEm82IhAcBefUozgUrr99hTw=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcGZZcldCWHhnUktTdVVr\nbytSSFdCblRGOWdFZTNJNFNnSUlUMzFYTkNrCk1ZaDBtb2NwRkpPQ1MvQXYva3dz\nTFI5WHhpaDN5SlR6Y2Y3L1AycUVsaFUKLS0tIGkrM01ndVE2bnB1N0RsbTZqVWpX\nQUV3ZjRScURwRXZxN2p0YURJREloMjQKNXNSDKR2yHHd79VswrACRMAbjP7xhaBG\ns0QecfDGnvzehMTRgtxLZ1boN48ltBgiX2w2kattklKFC/DPZf9arA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNEp5NW5jSXhqUC8xNUdH\nYktoYVh4S1VuME5COWVXK0twdGVBYmxqSVhVCjNDdzNLMlFtTlNCR0JWSjVTMzcw\nUUg0TjZDcjA3eFhVa0luTGtiL0dUdFUKLS0tIDcwVUtSRnN0MUd3M3JDM1BBL1ZN\nQlR3L3FEbUlkcCtneHRIZFYxeUFqNGcKVwSlw/DkUct4N88zmsdkZdmfOZkcyX4t\nTJHTIzUQ8DfEiAImw+4gp7zGgIAniSRMS+gaCo5dNyUedkP8SKf7JQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNXUwOHlMSHdGRWxYM0VQ\nZ0YxR3dvYjJuNVFIRnpNQXptWDl4U2xPb21ZCnRheUZnU3hyeU04aE9wR1dQVVFw\nRVR6KzhaMDVuSHhGdHhUOUs3S3h3b1kKLS0tIGZDNzEyWjFBcjhueDJMKzVCQkNm\nWlpScjB0bWlnbENhcTNiNzMxaXNYdU0KyF3yxe0mepsFVJHW/pSMpHLkyF66M0Sl\nzm+biucmH+6aR4Pc+IvQ2PogEetx09hhCME7O2Okz5IZI43Xh40meg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN0xqdENLL2JCcE5NR25S\nMWtqWmR5b1RSdEdoV2hDMDYyaHk2ait2OTBFCmE3RHZPQ2RBZDB2anFaOWpCcFhB\nVWNLNjhaRzFPTm43VkpabHF4b1B3ZzgKLS0tIHcxV3BJU21vZTdYSldRNlRYaHVv\nVEhPZmE3SEFMTmN6ZTZFdm03ckN6ZGcK3OpuSsmD4EbUNOoQlz7oOfbKws4exwvD\nBDpMRp6XhYG9YXYoLuvuKu3Qq7YKrfv0ULaQD3iE5KpruEBlHpfR1A==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-28T07:54:23Z",
-		"mac": "ENC[AES256_GCM,data:Zd03+YZJUO+kBJv5pbOxaebKeppTU/+iqJn40LyP3N4vWlXQ/1uJGE48oonLMSwZ6LpWlmekl3hVWQIMvysHsFY8mGVb3Xb/UrKFm1IF9Qd8NynRfR1bu1TdIA7Ums1fXn47OT0zUWhFaxz0xHBRmavusrHmFIAlwq5YQUNCUMQ=,iv:aac6D8jlG+Ct15ht0nkPMO7UONXnRFga6542XfMAgiI=,tag:nKvNDfqmQJEco03EZcBz4A==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/Show More
+++ b/Show More
				`@@ -1 +0,0 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdOw6Q9jQ7fqnfkjycFRqJ7OymjqZuszpuNHFhjbqNT`
				`@@ -1 +0,0 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw`