mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/rigel/configuration.nix
Update vars via generator inventree for machine rigel
2025-10-10 13:34:56 +07:00 · 2025-10-10 13:29:47 +07:00 · 2025-10-10 13:25:45 +07:00 · 2025-10-10 11:30:04 +07:00 · 2025-10-10 11:29:57 +07:00 · 2025-10-10 10:00:24 +07:00
16 changed files with 276 additions and 17 deletions
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -1,10 +1,15 @@
-{ inputs, config, ... }:
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
 {
  imports = [
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "1b495eede9" # kurogeek-thinkpad
+        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })

@@ -15,9 +20,44 @@
    inputs.self.overlays.default
  ];

+  clan.core.vars.generators.inventree = {
+    files = {
+      secret-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      oidc-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      admin-password = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+    };
+    runtimeInputs = [
+      pkgs.pwgen
+      pkgs.xkcdpass
+    ];
+    script = ''
+      pwgen -s 32 1 > $out/secret-key
+      pwgen -s 32 1 > $out/oidc-key
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 ];
+
  services.inventree = {
    enable = true;
-    hostName = "localhost";
+    hostName = "rigel.local";
+    config.site_url = "http://${config.services.inventree.hostName}";
+    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
  };

  system.stateVersion = "25.11";
--- a/machines/vega/configuration.nix
+++ b/machines/vega/configuration.nix
@@ -10,7 +10,7 @@
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "1b495eede9" # kurogeek-thinkpad
+        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })
  ];
--- a/modules/nixos/inventree/default.nix
+++ b/modules/nixos/inventree/default.nix
@@ -13,9 +13,9 @@ let
    ;

  configFormat = pkgs.formats.json { };
-  configFile = "/run/inventree/config.json";
  cfg = config.services.inventree;
  pkg = cfg.package;
+  configFile = "${cfg.dataDir}/config.json";

  inventree-invoke = pkgs.writeShellApplication {
    name = "inventree-invoke";
@@ -66,6 +66,14 @@ in
      type = types.submodule ({
        freeformType = configFormat.type;
        options = {
+          adminUser = mkOption {
+            type = types.str;
+            default = "admin";
+          };
+          adminPasswordFile = mkOption {
+            type = types.path;
+            description = "Path to password file for user `admin`";
+          };
          site_url = mkOption {
            type = types.str;
            default = "https://${cfg.hostName}";
@@ -125,6 +133,15 @@ in
  config = mkIf cfg.enable {
    environment.systemPackages = [ inventree-invoke ];

+    systemd.tmpfiles.rules = (
+      map (dir: "d ${dir} 0755 inventree inventree") [
+        "${cfg.dataDir}"
+        "${cfg.dataDir}/static"
+        "${cfg.dataDir}/media_root"
+        "${cfg.dataDir}/backups"
+      ]
+    );
+
    services.inventree.config = {
      plugins_enabled = false;
      plugin_file = "${cfg.dataDir}/plugins.txt";
@@ -155,6 +172,8 @@ in

    users.groups.inventree = { };

+    services.nginx.enable = true;
+
    services.nginx.virtualHosts.${cfg.hostName} = {
      locations =
        let
@@ -164,6 +183,7 @@ in
          "/" = {
            extraConfig = ''
              client_max_body_size 100M;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            '';
            proxyPass = "http://unix:${unixPath}";
          };
@@ -205,18 +225,43 @@ in
        "inventree-qcluster.service"
      ];
      serviceConfig = {
-        User = "root";
-        Group = "root";
+        # User = "root";
+        # Group = "root";
+        User = "inventree";
+        Group = "inventree";
        Type = "oneshot";
        RemainAfterExit = true;
        PrivateTmp = true;
      };
+      environment = {
+        INVENTREE_CONFIG_FILE = configFile;
+        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+        INVENTREE_AUTO_UPDATE = "1";
+        INVENTREE_PLUGINS_ENABLED = "1";
+        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+
+        INVENTREE_SITE_URL = cfg.config.site_url;
+
+        PYTHONPATH = pkg.pythonPath;
+      };
      script = ''
        set -euo pipefail

        umask u=rwx,g=,o=

-        chown inventree:inventree ${configFile}
+        # chown inventree:inventree ${configFile}
+
+        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
      '';
    };

@@ -231,6 +276,17 @@ in
        INVENTREE_AUTO_UPDATE = "1";
        INVENTREE_PLUGINS_ENABLED = "1";
        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;

        PYTHONPATH = pkg.pythonPath;
      };
@@ -257,6 +313,17 @@ in
        INVENTREE_AUTO_UPDATE = "1";
        INVENTREE_PLUGINS_ENABLED = "1";
        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;

        PYTHONPATH = pkg.pythonPath;
      };
@@ -290,6 +357,17 @@ in
        INVENTREE_AUTO_UPDATE = "1";
        INVENTREE_PLUGINS_ENABLED = "0";
        INVENTREE_PLUGIN_NOINSTALL = "1";
+        INVENTREE_STATIC_ROOT = cfg.config.static_root;
+        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+        INVENTREE_DB_NAME = cfg.config.database.NAME;
+        INVENTREE_DB_HOST = cfg.config.database.HOST;
+        INVENTREE_DB_USER = "inventree";
+        INVENTREE_ADMIN_USER = cfg.config.adminUser;
+        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+        INVENTREE_SITE_URL = cfg.config.site_url;

        PYTHONPATH = pkg.pythonPath;
      };
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -4,13 +4,4 @@
    default = final: prev: import (../pkgs/overlay.nix) inputs final prev;
  };

-  # perSystem =
-  #   { system, ... }:
-  #   {
-  #     _module.args.pkgs = import inputs.nixpkgs {
-  #       inherit system;
-  #       overlays = [ inputs.self.overlays.default ];
-  #       config = { };
-  #     };
-  #   };
 }
--- a/vars/per-machine/rigel/inventree/admin-password/groups/admins
+++ b/vars/per-machine/rigel/inventree/admin-password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/inventree/admin-password/machines/rigel
+++ b/vars/per-machine/rigel/inventree/admin-password/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/inventree/admin-password/secret
+++ b/vars/per-machine/rigel/inventree/admin-password/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:zvgWIdH7rcqvo2iK2iAKUm/Y86Bw3MIEfR1ORnk=,iv:mZh5NQtqcvo1mqMloplYUyOIqqTevabrD3184d+HCWU=,tag:0Eg89dJfqHVC+AuQpwvcWQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTN0UyR25hYmlQUklFZ0tL\nYkVaSWNXTmY3dlhxNEVHU2JMRWlaVDRWUHdNCnpMU3Z6NWN2M1hZUVJWcnZTSXZn\nNjFmR2o0TURnUlZuYzFRaFAwN2N4eEkKLS0tIGtuR2xtYllzTlFsTGFHZFBlQlU0\nMHRaQm9mM3Z2MjFjY21xR3ozRDU0MEkKGx/4vViXoCSGsTfspDHKDKa/z4+OqSXA\n3O6Lty/Z7fcIzQ620/o78FymLvckry4WcbNv91ygD757xEMPs2w/DQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDaHBHZk9BcU5lQ2lBL1Zl\nZUx0UEpvUGtrME9KM3l4SkNrKzBDeklGOFg0CmIvYUhvVVYzV3VseCtxZXNPUEwz\nUHVBMFJ5RGN5M2hIWFcvVmYreHJUbUkKLS0tIDkvcTRndlBBZEpFeThjdGtzby9J\nWUk2Y0kwV0NHbmIzVDhFRWpuZzlwdkUKeRxby++AnjmG0z5gIoCKl8agSX2DM79E\nuwC28eA4rmq8AkXya5HmBNkC190BKVukNgUrf1WADNhIiqNWbRhwWA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZzZjU4cjM5\nakM3WEt5eDU4bnUvbFZsVnN5ajJtR1dNRS9mVUJmVUgvbHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQptNE1LVWZsd09aNjhLcURCUXU1VC9R\nQ0JiN211ZEJrZThPRW96UUZaVWhzCi0tLSBoUjRFY0tmNzRhUVlrdE8rWXV2UTFQ\nSG90OTNDUWMwc2xjd0NOWXluQU5nCg+k/2HOJLSlO/EljnXeUIKagzrv2wzGSilZ\nFh+NKEf5yzhGfuizhT68GgLTy91LklHz1MXdFN5OWxcaHUQDPWg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpEU21KOHVR\nYWJBeHlLS0ZQeXdnN1BvUWx0TlVkRkwyRmN4QUJPRW5tMnMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpGQU9PbzV5d3VVaFFPMm5WeGNQeERI\nZDMyeDVTdzdabXAxb01GdkpnbnNrCi0tLSBTc0llSmFqLzBSMVZwVnlEZWRXdXBu\nazNDN3dlTUFidklqSVdTME8zbXZZChqfY7W5yfXWDfXtbTq37zLMiCAETwdubf0w\nP6XXbk2PMQnBSpC0DtZrzH2h/6blg67v12MR8WV30az92hBwCgs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDM1cWs3VlBx\nelpBYjE2S05KR1hWK0gvOVZzQWRyamJraHN1TkdSVzZCeTAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpMclRWemRpZzdqdU54WERJZ3kydXdq\nanB1RWxZNVk1WkRXc1NqMHFFSC9RCi0tLSBibDlFVm9pTlhuTFIxN2pZY1UyRVc0\nVlRrZWhRTS8rSllLaklFNFZkSkprCjtoODS+/3/9Az764qn6ICxfMUIj26QBv37U\nqKFKEKWtd3nXR1El2eZGIUNZ2bNr6iZ3uYLztN8QvQvBrDhCMxo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQN3ZqSTIzT0xLdGRJUGJ3\nY0hjV0l6bndYMk9OSVdwQk1WWXpHR0EwNmpRCjM5VHBlOVNzTWVoQzgyL3FjdGJS\nMDcrVmxGZklkeFVMaUhNUmg2bFR4MlUKLS0tIEZ2cnFVejFabVVPbHh0L3B1alkr\nOHJLSTloeTlVV2VhdzQ0MENHRlF5UFUKsN0LowCStW63TUitkdT25o1evdiGXnYq\nXZyjm9d1D9Q3YqA8nTkEUS9j0/VV0v3WMbwwa7Q7BbLa5aStbOgH8A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3VzVnb2VoZG1iTytRY3lC\namNuYk1pTXpuanpBQlhRSUhoWElJVkxrbHlVCkI5OE1oT1RSQlBDWDFiNC9zdWVV\nSmJOU1FPMHpKY1QzZnFwRzNyM3NLZFUKLS0tIGpBcnFqaUM1b3BIanJvVUxXcHZR\nSXIxREtHVzErQjh0ZGprQm5JR0U1Rk0K+SUWUIeq9YzJy+2UK/5jn1XyAxMcA+Be\nStAdKZrT0N2z/XT7oPm4Yd1oyv49dvZMAEPGlBz3/m3pSA0FOzyiDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeTlDMDU0QjRUSXkzbnVU\nN08yYzU4L0ZLYWRvaWt2aHhUTXNqc2pJN2lBCnNFRGRGUFZacjNuaXFuMU5Qd1Ba\nSHVIU2R4NllhZjNXRytML3pBMXRWVTQKLS0tIHJDaHdyemV5OVBIcGhUQUoyZVZV\nRWhhM1RINUFQQTVaczZhS01IVm9oSDgKdRcoZHYIG4vUJ9G+a3M+EEcEZO/zew4n\nLR5/l5TsvVF4CO5FO0Pc01kPXaL6xVE637fXzfaD1J+RAqB6f0VSbA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZjl1ZS9kZ25rMnd5SGRx\nZ3Ruc0pmSTR0SDZicWx4aHJGakQ0ajV3cjBVCmlMVzJlZ2N3N2t6cUdMREtwKzNH\nMVVjdjFGL05KYmxJYlhHZEQ3ZHpvTWMKLS0tIG5DUEprNndBVHBGU09KWEh4K2FD\nV0MvQ2xsNjY4UVdFOWIwRVBrdEw4RzAKhgsSbnhQiJwVS1VvlG/sDxy0RAqvcA0k\nntYQYkMfBM58pB07/nWhkh6jKL9BD9skRo4BjhgNQ6TMHg66QCz/7Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-10T06:29:46Z",
+		"mac": "ENC[AES256_GCM,data:0XzwEMtc++XgiAq3aC2rM/aTXWSFO9ZgZOd8bLbAk5wlcTCx4dgDya5p1Ym4Cn/WqE671Hdx3JJdXdLGhhoqb4uFwxymdh1bTuDJ7PaXBWczXpQAFGhbMoejpRtpWgfA49BPafx2XSKrge68gi+gAw9E8XELWIENFavufFqxgys=,iv:FyYyhpujre4D6zbM2FTjCsdNbusqPtz9JIQs1SCbojg=,tag:SextpN5OAhIntRrHHUJFhg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/rigel/inventree/admin-password/users/kurogeek
+++ b/vars/per-machine/rigel/inventree/admin-password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/rigel/inventree/oidc-key/groups/admins
+++ b/vars/per-machine/rigel/inventree/oidc-key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/inventree/oidc-key/machines/rigel
+++ b/vars/per-machine/rigel/inventree/oidc-key/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/inventree/oidc-key/secret
+++ b/vars/per-machine/rigel/inventree/oidc-key/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:Vir/YqT3y7jFv3wLO7QldbxcNJJlNhtONZdB4uWALNz7,iv:AL+gr53D+K3kz7lgAaXdMd/CQLqbPbbmWFPiqfGbWA8=,tag:jG038lc2qt5txWc4ZYmzcQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1YnNiSDZXM3BMaThiQVFO\nUHFidVFGYS9tcnFkSDNlckU4UnQxdjBIUmlvCndhNnA2Ym9UYWJIaHdVVC9URktP\nYStDVG01WWJBTW9XNTFBRXI2dWR5ck0KLS0tIGYyeW1KWFRYb0w2QVpNeFUzSUlB\nUENodnhFTUxZcWNCOEVFdHFCMkFCaEkKZCanC5/lc55dQ7usVMJGx1WNOa6r/ZpT\nGeyYHV0YK3MnTH4gSJAiluRM248iI+IRFxZSlvfnqHYNk80ptiIuhQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTHlvSHROeDJBNVRySzV1\nM3BRQWloY1NML0V5Tk5UbExmbHdNWFFtMFEwCnpDaWFweXFoREhPU1M0VWlzZVV1\nNnVITFk5TmhINzBWUXpxZzBhYVlBLzQKLS0tIHE4THZQQ0JodWROZ1hSOVJjVWwy\nc2REK253eUh4QTRQSXA3L25QMzhEUDgKjo27VyMAm0OG4gQS3t7xbIwwm2Vxc1We\nHdHID+A6LzIszCnhzYzi1qwecZbUkgfRgQxgTp42ABl5Kr5L+uPWAA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9MU2JwOVBw\nbXMxMzNWM3lNNFU5UTZ0bUpzbkliTW1hQTBhRi9DSjRMVEUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1MlJVcmtVWWNwYSs1NzRzbS8xWk51\nTGZaRURFT2E4OGVnK1FXSUN0Z1dNCi0tLSBHNHFOZm9HQ3MxK3FnT1QzdGFaSDZx\nRTgwV21VYkJCcmZubkRzNVNCVHZFCiuXxJW4Ldxc0ISOIXA4R0JNldoRTQJezJ2x\nEeExlPcoAL3ClF7/WHMxGw1yNftukARaNItY3AGk6+wtcX/I/Wc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDB6R3ZPdGls\ncmx2MVF5K3U1cHI1UnRhWVV5WWRCelM5MmpwUG9UVkxGVGcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp3M1BUMGJtMUdNVk1Va2pQZXBvbGtC\nOVVGYVd4ZHZ5SXY5ZDc3QUJwcE9jCi0tLSBKTDlnWmJUdGViK0hZY0xiZEZKN1JM\nOEY3RGp4MTNNb254WDNkMHJ0RnZNCkBC4IPzDlOeEFB8N3OGZMoCDvvsRNXsj0ge\nDbjrWopTUWUTOxEwl2g7OphTUJym4vetXp5/Y+RczmEZtHvjCmM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHE2V1hlSDNJ\nd2VIRVZCWFVsb0NyZzZGU2c2TFV1by84OEQ1Z2hZN1FpQVEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo2NTdvdm1RRG5DMGRMcUMydEgvNFBw\nTVp1YnZjbEhsMTQ3RWRpL1lxayswCi0tLSB6SXlOdWxIUm9QczdPcnhLZEhTaWxL\nQXcxdEN6dWovRjFuV09IeGZ0cTBFChHb+FlnPfLgxWf1IvjER1sPrK15fmgxNDie\ncfU5HqB0p7KwIrUVJOusZHUC7WLnIiu/f23wFSJe++00Fk8y0GM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwc3NxOU8yYUtLQitLcVNK\nSmxFaEpDNWtYQy9yT1dTQndlR2ExUitobHhvCkFkemc4YktCOE85RVRkeVZIVExI\nVTd3S3VZUGdTdjlQTStXN1lFUFhTRE0KLS0tIDJzWGJOalNUYVhrbVR4V1dSM1A5\nZTNHSWpvajA0T1RnL05lWHRROEVmTGsKvzZCUBXPe4bl/H/tKWBObt0Ti2WgXijW\nFkC54FXoOU9Xs9jsw3XqG6GQbWmizGWl7Ox2XjYD0AHnhzFmSQiSdw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZXVydWJsSDdRc1ljUmxr\ndWplYzNkSWdLOGZVeHJVbll0WTczL0Y3UkRNCm5PQmJyNzkybHBnS0lwcjFWTkwx\nN2FYdHJ5WU1yZDNpajNnaDcxSGRIMjgKLS0tIHFYb2wwaitwMWlWUlhuWnloNWFM\nYS9SNERqeHJ5OURlVy9NNjVnMW1vU1UKVC8J5MjG0gpHqfZb6Q31nNjy94w28+PT\n3LTRDoz6Xfgi12MExKuIKCYZ/BbpxSSSb3YjTv9Kgc14VfodhMRTvA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLZjRydnoxM2VZcytZZ2NL\nSVY5QTJsRlA5NjNrZ2RNMmJkZFl6V2UrVlJzCitzTldQUEtPK2VCRlpxenk5bHdL\nZkRMWGRmQ1hIYUVxN2VIUFFPdmgwa28KLS0tIGtYa1BzajNkOFlIWHJmYjdRazdX\ncm5CTGR1aTduMnZUQk44c0ltNy93bXcKvEzzbP4e1Xb3by0nWIl7UY0ntIHMfgEL\nvhDpk5r2ohlL6+EK5ZxyMpDR2KwyMqa+N4ot/+REgnWCAgYBJLaoYQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMbHFVcVJnVzhlR1RKSEd5\nVXE4KzBLOVFzOXZDNHZ0QS9ISXFScDBQNlhNCjh1dDhPeEhkN1RTWkZiYUtyT3ZI\nUGdxaS9RNzA4dVp4OUZ6bEVjS0NzMVkKLS0tIERja2tIM0J4WWIrRFo1dmE1eHBz\nRGxzK2x5T0Jod2tuZDNadFNNclRidEkKOnE7XbKpDzkSDbHiY0/PSxXVMJ5dBqKr\nvgfLBn1OSOguR2LUNgmJWSDHf6uvWiuOIEHJMU8x/ITiUE07VH9alw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-10T06:29:46Z",
+		"mac": "ENC[AES256_GCM,data:F9YRXRHC7i1EJTEmwyiVT5PR8HTaiyuVM3QuqW3fFSMXqUChRkW7Ysj+gKeUuiFFU2EjVOnl41nzbZbCqvVYHFO53+NUNb7/Kc5/uDj/5G0X2v8maFju2TNQbTC2zMaJl2wP7oZe+q+4hlHFUoiyzXdcUbk6BuHogdC95OvvV7A=,iv:7MkHKnmUWNck6MC9nRCnsdF4+Kfpsi2IKfGIJ/mkP3A=,tag:oKT6nfrrihh3KcLnWDkTyg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/rigel/inventree/oidc-key/users/kurogeek
+++ b/vars/per-machine/rigel/inventree/oidc-key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/rigel/inventree/secret-key/groups/admins
+++ b/vars/per-machine/rigel/inventree/secret-key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/inventree/secret-key/machines/rigel
+++ b/vars/per-machine/rigel/inventree/secret-key/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/inventree/secret-key/secret
+++ b/vars/per-machine/rigel/inventree/secret-key/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:+ZB+i9LXEzwfyQ9+uzKLqruIQ5BSaIy7Q2syBihRJ+Ih,iv:l5RUXyXnl65mE+bp4uix50RB/UlbzD9r8IFq3R81UAI=,tag:nYT3UBB7jYxmoA/GUZu8pg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBINHdUOGJYMWJkSG1hUWNJ\ncUcwRzFXVFNienNoTFJzc0ozeDcza29uSEc4CklsTGx4ZVRHR1M5c3NoUWxGUUFJ\nUno5dW1tZG5tc05IUmpnaG5tZVFRbmMKLS0tIGhkSjVhWGdDb2VRdUQzTUZ3L0Zj\nZUhZeHVjSWsvU0M3cGRCWndJMWxYQ2MKG6Yfa0RzT3jb1Gwc/aEA8J3/GklYRiAh\nm7LJU6Q8dpmCi8UMqnSMP67pmhB35z2AzkHpWkkfB3cHXKYmMlYvLg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4M0JzNjNic2xTcS85NTYv\nYXIxYVphOTBKOGhya0JZRWVDSFp0WXZ5RkR3Cm8rU2xRQVFvalNobVY0YWRHeXM3\nVHU1bGJmVnp3MS9rT0h5bnRjWXpsVmMKLS0tIEpMKzE5a1BQY1BxWmtBeTVYQ0Zz\nb3JQT1VPbTJEYzNYUUJOMW1rc3ZLeUkKLHj/jme6UogkVuzlp/PUIY4I0caFaVvk\nsmsQaec28v1KxzjpSw+aRFq32sP5L/60k2CmOV4gf6YKb2aGa/W89g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9jTndYQlpn\nU3RBZ0kvVDdRRFNOWDFISGZCMlBKQzhNQVlJZHFxdFhUVHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp0aXQ3VEQ3b1h1ZzZlYzNvSlhQa1Q5\nQ1NIUUhhYXVVT1hDcFNhZjRVQVRrCi0tLSB5UkNGZjBGU0VqN3krNlo3U3drMmtq\na3pxUFJ4eUQwNk1kekdMbXR4ZWRnChaEHEA/Hg8p8tgfV20e+llfpyiSUAealEHY\n5Asq75zpldlxHGzjVtjzMlrq3wv/VWDyvjz9JZURTzuZoyS13R4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJwZHVRdS9W\nT2d0YzdFODVocmd6VGRBRVBVM0F5aERLVW9aQzZmeHRNSFUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpRUEkyOGJPc0o3ajRFR25OSmFrNW9o\nUVpKSUNMZzlGOVlkaUh0ZHpWajJVCi0tLSBGeUZKbjkrRS9Gd0dZblZTT1ZFcDk5\nZEFkSkRmTnQxQmFhKzIvNVNDS2dZCh3XxCkZc5PaOqePh6rJIGLT+m+lq1Eu6z0b\nfybCPW7J8AP7ACqQHGb90/NXXk0pwfYD6qjOm9m3+QsUg9OQyTM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcwM1pWWDIw\nQ2ZCVEk2NjNuYXlMcDN2Ulk2SWFudUxaYVIycnI1bkJEV2sgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpTM0pmYUF5S2NNM05FLy94enBwdUpr\nUlIyYUFIaU56dnk2aU9kUFJvUmhRCi0tLSBzamRyM2k2WTV5UExTTGZSNGYyNmxK\nQy9jN0lpREdzSm9uRkxZOUhCT0ZBCjp0GFU4LCI+PIqLyfM/JpKMAJ+Wnl68E68o\nds2bhB7/0lXcwSBmoFHURkgo1Qyc+l1ZXHWecyGQLf2dOUvCm0k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzMCtrcGdPbE1Kcng3VUdv\nUTE3aHZJUW5HQkdkanFBbS83VkxJOEY2NGlnCnc2N29hS2oyeXpvbVZGbHRpTDBV\nSWVwNUhRL01uMUxzbWIrV05OSXRHTTAKLS0tIDhxYmxMMGZ1cTJEcHhtWmJiNzNa\nbW1BNXFsN3BEbGV5WGdUQ2lhaEwybzAKM1GY/6rpIOfzHqtO+g59slHsJwc/XJwL\nLYm31qykqv8bARFwQnT/g1JfiH1k1PLAlk00lKW+NsHtzYiVJUvjmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYcjhLR2NDZCtEWG1qb3FT\nUGVUNDhuOGhwOE5mZzlkQ2MvNEtjQWMzOUd3CmkvYW9nVzdRZlFRTzVGVURzMnZK\nQWwvaXVCeDQ5WHlTL3p1RFRRRWpXTFkKLS0tIFZIdWRYTU5RQ203Q1l0SXNQY2NF\nZTJUOEg0S09sQ0hacVJxLzNWd1FFQmMK/iYDlJXmyX3cGvLixJ5pxoC5hwJoItfB\nMhjFBauPWRWE9lau+ICP8gQnTDSlBISc0TLXjElWMGslcuOPntgppw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVUkUvalU4VTlqR25lN0dE\nY2lrajNYWC9oL0tCQ1lFVDdlYkwyUmRKY2lVCjhHVi8vS1ZwRFQrcHdFSTUzNVY2\nWWtRTDhCVmY2bG9XNTRqYWlmU2VFTDgKLS0tIHhsMVlidkt3K3BoOWZ5OHpQMVVV\nWHB4MTJ1TU40M1RYS0hWVzZDUDBqRlkKpLzd+JisAovhQhYVxbbckGAkTL9ADkD4\nJtqnRVT627h6ImL5E8MX5WUb7Tq1nXwklcrELTWnfAYb1rOQ4/Qtkw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQcTFMa2h5TG5mZWsxRjNQ\nV0lhbXFCRVV5YUZGMW00VmZlNHVoVFhlSEJJClc5ZW1xNHBnNjEvSkNUdGFmNXN6\ndkc3bm5LVkpIMmE3MllxSW5WVzA5OEkKLS0tIE54cU9wVXgrT2J6T1hVcWRqS040\ndFJ2L3JTVStLUnZ2MXQyWEhwcDJFeHcKQgg1wdTnv1wM39XWvNTJqtWFSaGr9odF\nrgraoVdOszDjB38aP3ltxzjLB4XzMsBXIpdvK547mNNe6BEZFOEYWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-10T06:29:47Z",
+		"mac": "ENC[AES256_GCM,data:uN0fTMrrPTbkzyS1tp4SxSIdjKPDFKZ+sAeAqk9X5aXzBgLKdyOu9CynhNQ+1cCMmDudat0Aa4tzfXnMZdEeG4h0OiSIkEI/in9HqbIUJ6KJ1YE+Sg1Cn1bPJvQz/oT/1U8NhB8F9B8paCy81pxPnNPkO4H+HWr9zcDp6G8Ztzg=,iv:IEl3kHo7DFUXO2pTRVgCcuFXEXP+dnSyfa5fAuk1tsw=,tag:3+W/rX/+vOd+X2pyw/3Q/w==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/rigel/inventree/secret-key/users/kurogeek
+++ b/vars/per-machine/rigel/inventree/secret-key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
Author	SHA1	Message	Date
kurogeek	88684b8a6b	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2025-10-10 13:34:56 +07:00
kurogeek	b8295bf82d	Update vars via generator inventree for machine rigel	2025-10-10 13:29:47 +07:00
kurogeek	bc7ad77e15	Update var inventree/admin-password for machine rigel	2025-10-10 13:25:45 +07:00
kurogeek	31858a7d80	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/nixos/inventree/default.nix	2025-10-10 11:30:04 +07:00
kurogeek	8d9b257db7	Update vars via generator inventree for machine rigel	2025-10-10 11:29:57 +07:00
kurogeek	61a875e438	Update var inventree/admin-password for machine rigel	2025-10-10 10:00:24 +07:00
kurogeek	a6707fd610	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2025-10-09 17:23:24 +07:00
kurogeek	1573a18d5c	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/nixos/inventree/default.nix	2025-10-09 17:22:20 +07:00
kurogeek	875c1bdbdb	Update vars via generator inventree for machine rigel	2025-10-09 17:20:13 +07:00
kurogeek	7c98ff800b	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2025-10-09 16:57:33 +07:00
kurogeek	1df60c35d9	mob next [ci-skip] [ci skip] [skip ci] lastFile:vars/per-machine/rigel/inventree/secret-key/secret	2025-10-09 16:42:56 +07:00
kurogeek	04fafa32d3	update kurogeek thinkpad zerotier id	2025-10-09 16:42:23 +07:00