root password for b4l

inventories/default.nix

@@ -3,16 +3,23 @@
   clan = {
     inventory = {
 
-      instances.emergency-access = {
-        module = {
-          name = "emergency-access";
-          input = "clan-core";
+      instances = {
+        emergency-access = {
+          module = {
+            name = "emergency-access";
+            input = "clan-core";
+          };
+          roles.default.tags."all" = { };
         };
-        roles.default.tags."all" = { };
       };
 
-      services.admin = {
-        default.config.allowedKeys = [ ];
+      services = {
+        admin = {
+          default.config.allowedKeys = [ ];
+        };
+        root-password."default" = {
+          roles.default.machines = [ "b4l" ];
+        };
       };
     };
   };

vars/per-machine/b4l/root-password/password-hash/machines/b4l

@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l

vars/per-machine/b4l/root-password/password-hash/secret

@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:yrBL5S3EZfwsGstoEwUxWQ1uR6Vm2WwXSRdKvWKQi3uL213CyQg4SQtzKXY7oXAS3iejFZUJh4hkFdhv1y24QYKbmbIuPjFqYK52D/XpQPrvtrtmJ4USfTkHL9Vd30ubGkFUCxYJL9Cpwg==,iv:9nmEnMO8mqXpzJUfEjx17AMQDe+0deK7jokXpl0UHxQ=,tag:SPXYD3ERXCmfUN35G7KzUw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1RnBEOXYyNzdlYXhVNkJY\nUDRHSEl5enhYNlY1d0tVRW9uWi9YVm5rVFdvCmkrWGdMTVJZRlc2YXY0ckZnMU4w\nNTN5NjB2cTVadWpvWjBmaUdSaXpjc00KLS0tIGVweTh0azhFVXhneC9tdWZ2OE5C\nS3Iyc0hSc2FsVyswczBzM2g1citxTjAKLiMWl5VYLIg6M3cSbR56lxXQMFptCqXS\ns9Jl/l/ew+J2onwBvxZy/mbZvQq2eVSXNlWJynBqDHRVT0pTAUQikg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLTUpFc1lzT3ZkY2RZYmg2\nUmNCbGtFdWVVaFJURjR1aXh2dmhPbklVanlrCkt4aDVRTlBOL3RQUHJHTDJhQjJ1\nbzVYbFh5ZEE3eExjdndYeFFoTXdSbDgKLS0tIG1SeHk4RE1TUjZucVFuaU0zWmM2\nNC9abU9INEdjcDZtcXhhSksxeDBleXcKTMH6P04s/2PxCRRc+Cb7QqtTMG9cIjaF\no6Ip1Uf0X4yJuSYTKkdMysJDaLYWusUu0KNXyTOouH0wjNZwAeytNg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-07-14T04:02:20Z",
+		"mac": "ENC[AES256_GCM,data:z4a2Xk82Ke29IABCiM687I6XF1IVMbnEOWb4Wx8l/USH6+NJWdoUw97oeI52ERTxj5ssDzelEI2mJVEMl7Nt3hEuzeUcy7H0CBPdx+UybMhjPMsfX9lmN1w8VyyBMOMg6PWFptSWOmO7Umria+KMhagR21B4+yMvzl9lOF8I8uU=,iv:NNIcxbuBev9luVtUGT1pAOeP5xCrrSgdOe0Owos5m18=,tag:jDmbeC0WLr+hcIz/M79mDw==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}

vars/per-machine/b4l/root-password/password-hash/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/b4l/root-password/password/secret

@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data:7zPJY5ubDS33FfryNbnEfrWeQDpom6I8QMbISAU=,iv:QqPnPb2yr4Sns1LL04Z0ADngbDSUPbOmaXcASafK7LU=,tag:7nI+ToEzaY26lCJEAr9x2g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NGVBV3pEYXB0dTJMdDAr\nM3p2Mk5FNVp3emNVSG5jeXRwZkhIQXNtY1M4CitpZkpsRVpiU0VlcjZkTDhYaTlL\nVG9MRWl2YW5NMStpL2tvdHFWc2x3bEUKLS0tIHFNMXhkUmRId1RJZTRxU2VUVGJK\nSS9lTWs1bmgxS1dadjlBV1JVNXpXTVEKUqHfVGQJsGCxkACDJdvgghKhGKo9MALv\nZ2IZ3kzDJ4pCFDIbhiYC+6iINdUQQJ5XUTKSLiBcPsBXrSaqnRSqwg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-07-14T04:02:20Z",
+		"mac": "ENC[AES256_GCM,data:smAQ4AVhxXUx3VVQFzEUdHpnwVf6Z2oXDmJzeHLuMnH7hYKKRFi6qoapHFEiH/gJNE2ZRoKWrWsalTh92hR0ozJj1urfWdTqST/omX6OFQDDIYrfWu7Cn1qi9JOwCJiMKzvyi1zZyQDEjHT4io+kCox2LCjJgscbVTMTGGGZuoc=,iv:hDjRputvT1yXiLDXuvr52CHkN+H9sakLghb6vDabwx4=,tag:J/tzCPmaoL2Q08N1Sst0zg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}

vars/per-machine/b4l/root-password/password/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek