revert: clan-core and zerotier update

flake.lock

@@ -1,5 +1,58 @@
 {
   "nodes": {
+    "arion": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "haskell-flake": "haskell-flake",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733918465,
+        "narHash": "sha256-hSuGa8Hh67EHr2x812Ay6WFyFT2BGKn+zk+FJWeKXPg=",
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "rev": "f01c95c10f9d4f04bb08d97b3233b530b180f12e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "type": "github"
+      }
+    },
+    "blank": {
+      "locked": {
+        "lastModified": 1625557891,
+        "narHash": "sha256-O8/MWsPBGhhyPoPLHZAuoZiiHo9q6FLlEeIDEXuj6T4=",
+        "owner": "divnix",
+        "repo": "blank",
+        "rev": "5a5d2684073d9f563072ed07c871d577a6c614a8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "blank",
+        "type": "github"
+      }
+    },
+    "call-flake": {
+      "locked": {
+        "lastModified": 1687380775,
+        "narHash": "sha256-bmhE1TmrJG4ba93l9WQTLuYM53kwGQAjYHRvHOeuxWU=",
+        "owner": "divnix",
+        "repo": "call-flake",
+        "rev": "74061f6c241227cd05e79b702db9a300a2e4131a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "call-flake",
+        "type": "github"
+      }
+    },
     "clan-core": {
       "inputs": {
         "data-mesher": "data-mesher",
@@ -100,6 +153,39 @@
         "type": "github"
       }
     },
+    "dmerge": {
+      "inputs": {
+        "haumea": [
+          "frappix",
+          "std",
+          "haumea"
+        ],
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ],
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686862774,
+        "narHash": "sha256-ojGtRQ9pIOUrxsQEuEPerUkqIJEuod9hIflfNkY+9CE=",
+        "owner": "divnix",
+        "repo": "dmerge",
+        "rev": "9f7f7a8349d33d7bd02e0f2b484b1f076e503a96",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "0.2.1",
+        "repo": "dmerge",
+        "type": "github"
+      }
+    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": [
@@ -120,6 +206,146 @@
         "type": "github"
       }
     },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "frappix",
+          "arion",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "locked": {
+        "lastModified": 1653893745,
+        "narHash": "sha256-0jntwV3Z8//YwuOjzhV2sgJJPt+HY6KhU7VZUL0fKZQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "1ed9fb1935d260de5fe1c2f7ee0ebaae17ed2fa1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "frappix": {
+      "inputs": {
+        "arion": "arion",
+        "devshell": [
+          "devshell"
+        ],
+        "microvm": "microvm",
+        "n2c": "n2c",
+        "nixago": "nixago",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "std": "std"
+      },
+      "locked": {
+        "lastModified": 1777566120,
+        "narHash": "sha256-/FZmeaTm8ExKatIciQ6AIMj0Qw5ChYu/8vApENJ1QEc=",
+        "owner": "kurogeek",
+        "repo": "frappix",
+        "rev": "799d1fa749c69eec65a6aa1880a3346c24a40b7c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kurogeek",
+        "repo": "frappix",
+        "type": "github"
+      }
+    },
+    "haskell-flake": {
+      "locked": {
+        "lastModified": 1675296942,
+        "narHash": "sha256-u1X1sblozi5qYEcLp1hxcyo8FfDHnRUVX3dJ/tW19jY=",
+        "owner": "srid",
+        "repo": "haskell-flake",
+        "rev": "c2cafce9d57bfca41794dc3b99c593155006c71e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "ref": "0.1.0",
+        "repo": "haskell-flake",
+        "type": "github"
+      }
+    },
+    "haumea": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1685133229,
+        "narHash": "sha256-FePm/Gi9PBSNwiDFq3N+DWdfxFq0UKsVVTJS3cQPn94=",
+        "owner": "nix-community",
+        "repo": "haumea",
+        "rev": "34dd58385092a23018748b50f9b23de6266dffc2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.2.2",
+        "repo": "haumea",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -155,14 +381,51 @@
         "type": "github"
       }
     },
+    "incl": {
+      "inputs": {
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1693483555,
+        "narHash": "sha256-Beq4WhSeH3jRTZgC1XopTSU10yLpK1nmMcnGoXO0XYo=",
+        "owner": "divnix",
+        "repo": "incl",
+        "rev": "526751ad3d1e23b07944b14e3f6b7a5948d3007b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "incl",
+        "type": "github"
+      }
+    },
+    "lib": {
+      "locked": {
+        "lastModified": 1722128034,
+        "narHash": "sha256-L8rwzYPsLo/TYtydPJoQyYOfetuiyQYnTWYcyB8UE/s=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "d15f6f6021693898fcd2c6a9bb13707383da9bbc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
     "liminix": {
       "flake": false,
       "locked": {
-        "lastModified": 1773253359,
+        "lastModified": 1777223456,
-        "narHash": "sha256-LogvYVd2NfZnTlxAkl5K9tqX9c7wEEPdnYJsW9WTSG4=",
+        "narHash": "sha256-yqZ9OFSXoKgdT6nWwt2d0OFwmfQXASl73hhjtvAD11A=",
         "ref": "refs/heads/main",
-        "rev": "7f23c5dc0f442de9fe07c076297c3a74f2a34e72",
+        "rev": "5f2abc0d2b30eb5878d60488a72138958c228976",
-        "revCount": 1656,
+        "revCount": 1672,
         "type": "git",
         "url": "https://gti.telent.net/dan/liminix"
       },
@@ -171,6 +434,48 @@
         "url": "https://gti.telent.net/dan/liminix"
       }
     },
+    "microvm": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "spectrum": "spectrum"
+      },
+      "locked": {
+        "lastModified": 1737981104,
+        "narHash": "sha256-7AGmPPBgLHHWgzzFYDJcyhv/NiuCrpgzg8IyA7Q/H9o=",
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "rev": "3768f4937f38334898c67e03f40e244a57a74caa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "type": "github"
+      }
+    },
+    "n2c": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1730479402,
+        "narHash": "sha256-79NLeNjpCa4mSasmFsE3QA6obURezF0TUO5Pm+1daog=",
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "rev": "5fb215a1564baa74ce04ad7f903d94ad6617e17a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "type": "github"
+      }
+    },
     "nix-darwin": {
       "inputs": {
         "nixpkgs": [
@@ -205,13 +510,53 @@
         "url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
       }
     },
+    "nixago": {
+      "inputs": {
+        "flake-utils": "flake-utils_3",
+        "nixago-exts": [
+          "frappix"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1714086354,
+        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
+        "owner": "nix-community",
+        "repo": "nixago",
+        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixago",
+        "type": "github"
+      }
+    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1772173633,
+        "lastModified": 1712920918,
-        "narHash": "sha256-MOH58F4AIbCkh6qlQcwMycyk5SWvsqnS/TCfnqDlpj4=",
+        "narHash": "sha256-1yxFvUcJfUphK9V91KufIQom7gCsztza0H4Rz2VCWUU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "92323443a56f4e9fc4e4b712e3119f66d0969297",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1774794121,
+        "narHash": "sha256-gih24b728CK8twDNU7VX9vVYK2tLEXvy9gm/GKq2VeE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "c0f3d81a7ddbc2b1332be0d8481a672b4f6004d6",
+        "rev": "c397ef6af68c018462d786e1b65384abc472a907",
         "type": "github"
       },
       "original": {
@@ -221,6 +566,68 @@
         "type": "github"
       }
     },
+    "nosys": {
+      "locked": {
+        "lastModified": 1668010795,
+        "narHash": "sha256-JBDVBnos8g0toU7EhIIqQ1If5m/nyBqtHhL3sicdPwI=",
+        "owner": "divnix",
+        "repo": "nosys",
+        "rev": "feade0141487801c71ff55623b421ed535dbdefa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "nosys",
+        "type": "github"
+      }
+    },
+    "paisano": {
+      "inputs": {
+        "call-flake": "call-flake",
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "nixpkgs"
+        ],
+        "nosys": "nosys",
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1708640854,
+        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
+        "owner": "paisano-nix",
+        "repo": "core",
+        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "0.2.0",
+        "repo": "core",
+        "type": "github"
+      }
+    },
+    "paisano-tui": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1708637035,
+        "narHash": "sha256-R19YURSK+MY/Rw6FZnojQS9zuDh+OoTAyngQAjjoubc=",
+        "owner": "paisano-nix",
+        "repo": "tui",
+        "rev": "231761b260587a64817e4ffae3afc15defaa15db",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "v0.5.0",
+        "repo": "tui",
+        "type": "github"
+      }
+    },
     "plasma-manager": {
       "inputs": {
         "home-manager": [
@@ -249,10 +656,11 @@
         "clan-core": "clan-core",
         "devshell": "devshell",
         "flake-parts": "flake-parts",
+        "frappix": "frappix",
         "home-manager": "home-manager",
         "import-tree": "import-tree",
         "liminix": "liminix",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_2",
         "plasma-manager": "plasma-manager",
         "treefmt-nix": "treefmt-nix"
       }
@@ -278,6 +686,82 @@
         "type": "github"
       }
     },
+    "spectrum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1733308308,
+        "narHash": "sha256-+RcbMAjSxV1wW5UpS9abIG1lFZC8bITPiFIKNnE7RLs=",
+        "ref": "refs/heads/main",
+        "rev": "80c9e9830d460c944c8f730065f18bb733bc7ee2",
+        "revCount": 792,
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      }
+    },
+    "std": {
+      "inputs": {
+        "arion": [
+          "frappix",
+          "arion"
+        ],
+        "blank": "blank",
+        "devshell": [
+          "frappix",
+          "devshell"
+        ],
+        "dmerge": "dmerge",
+        "haumea": "haumea",
+        "incl": "incl",
+        "lib": "lib",
+        "makes": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "microvm": [
+          "frappix",
+          "microvm"
+        ],
+        "n2c": [
+          "frappix",
+          "n2c"
+        ],
+        "nixago": [
+          "frappix",
+          "nixago"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "paisano": "paisano",
+        "paisano-tui": "paisano-tui",
+        "terranix": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "yants": "yants"
+      },
+      "locked": {
+        "lastModified": 1738072995,
+        "narHash": "sha256-jfwWnAVeQzIBS5Pex0xSUbGk88g1GFF2w+ohOtbRtcY=",
+        "owner": "divnix",
+        "repo": "std",
+        "rev": "2874513c4b76be4c4200779814993b546fe4a909",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "v0.33.4",
+        "repo": "std",
+        "type": "github"
+      }
+    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
@@ -293,6 +777,36 @@
         "type": "github"
       }
     },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [
@@ -312,6 +826,28 @@
         "repo": "treefmt-nix",
         "type": "github"
       }
+    },
+    "yants": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686863218,
+        "narHash": "sha256-kooxYm3/3ornWtVBNHM3Zh020gACUyFX2G0VQXnB+mk=",
+        "owner": "divnix",
+        "repo": "yants",
+        "rev": "8f0da0dba57149676aa4817ec0c880fbde7a648d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "yants",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -34,6 +34,11 @@
       url = "git+https://gti.telent.net/dan/liminix";
       flake = false;
     };
+    frappix = {
+      url = "github:kurogeek/frappix";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.devshell.follows = "devshell";
+    };
   };
   outputs =
     {
@@ -50,6 +55,8 @@
           ./fmt.nix
           ./shell.nix
 
+          ./overlays
+          ./modules/nixos
           ./machines
           ./routers
           ./inventories

inventories/default.nix

@@ -10,7 +10,9 @@
         glom = [
           "vega"
           "ramus"
+          "canopus"
         ];
+        poy = [ "deneb" ];
         w = [ "sirius" ];
         b4l = [
           "rigel"
@@ -30,17 +32,17 @@
         global-network = [
           "rana"
           "sirius"
+          "hadar"
+          "procyon"
         ];
       };
 
       instances = {
-        admin = {
+
-          module = {
+        sshd = {
-            name = "admin";
+          roles.server.tags."all" = { };
-            input = "clan-core";
+          roles.server.settings = {
-          };
+            authorizedKeys = {
-          roles.default.tags."all" = { };
-          roles.default.settings.allowedKeys = {
               "berwn" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAB/raxJR8gASmquP63weHelbi+da2WBJR1DgzHPNz/f";
               "davhau" = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuhpzDHBPvn8nv8RH1MRomDOaXyP4GziQm7r3MZ1Syk";
               "vi" =
@@ -55,6 +57,18 @@
                 "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJMi3TAuwDtIeO4MsORlBZ31HzaV5bji1fFBPcC9/tWuAAAABHNzaDo=";
             };
           };
+        };
+
+        root-password = {
+          module = {
+            name = "users";
+            input = "clan-core";
+          };
+          roles.default.tags."all" = { };
+          roles.default.settings = {
+            user = "root";
+          };
+        };
 
         tor = {
           module = {
@@ -96,6 +110,20 @@
           roles.peer.tags.b4l = { };
         };
 
+        poy-network = {
+          module = {
+            name = "zerotier";
+            input = "clan-core";
+          };
+          roles.controller.machines."deneb" = {
+            settings.allowedIps = [
+              #kurogeek
+              "fdfe:7bf:a795:4524:4c99:932b:d36d:b8cc"
+            ];
+          };
+          roles.peer.tags."poy" = { };
+        };
+
         yggdrasil-global-network = {
           module = {
             name = "yggdrasil";

inventories/emmie.nix

@@ -18,9 +18,8 @@ in
         roles.peer.tags.emmie = { };
         roles.peer.settings = {
           folders = {
-            Syncthing = {
+            Syncthing.path = "${userhome}/Share/Syncthing";
-              path = "${userhome}/Share/Syncthing";
+            Desktop.path = "${userhome}/Desktop";
-            };
           };
           extraDevices = {
             pixel7a = {

inventory.json

@@ -29,6 +29,18 @@
     },
     "sirius": {
       "installedAt": 1770974584
+    },
+    "deneb": {
+      "installedAt": 1775718970
+    },
+    "canopus": {
+      "installedAt": 1775793532
+    },
+    "hadar": {
+      "installedAt": 1774427255
+    },
+    "procyon": {
+      "installedAt": 1775458442
     }
   }
 }

machines/adhil/configuration.nix

@@ -8,6 +8,7 @@
   # clan.core.networking.targetHost = "root@";
 
   clan.core.settings.name = "adhil";
-  # clan.meta.description = "Raspberry Pi 4 SBC board for one of w phone network. (With w office)";
+  clan.core.settings.machine.description =
+    "Raspberry Pi 4 SBC board for one of w phone network. (With w office)";
 
 }

machines/almach/configuration.nix

@@ -8,6 +8,6 @@
   # clan.core.networking.targetHost = "root@";
 
   clan.core.settings.name = "almach";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.core.settings.machine.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/alpheratz/configuration.nix

@@ -8,6 +8,6 @@
   # clan.core.networking.targetHost = "root@";
 
   clan.core.settings.name = "alpheratz";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.core.settings.machine.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/b4l/services/nextcloud.nix

@@ -19,7 +19,7 @@ in
 
   services.nextcloud = {
     hostName = ncDomain;
-    package = pkgs.nextcloud32;
+    package = pkgs.nextcloud33;
 
     settings = {
 

machines/buna/configuration.nix

@@ -8,6 +8,7 @@
   # clan.core.networking.targetHost = "root@";
 
   clan.core.settings.name = "buna";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network. (With w whitehouse)";
+  clan.core.settings.machine.description =
+    "Radxa X4 SBC board for one of w phone network. (With w whitehouse)";
 
 }

machines/canopus/configuration.nix

@@ -0,0 +1,109 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "glomerp.newedge.house";
+  nbClientName = "netbird-b4l";
+in
+{
+  clan.core.settings.machine.description = "VM machine that host ERPNext for glomglom";
+
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "glomerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+      pkgs.frappix.hrms
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+        apps = [
+          "frappe"
+          "erpnext"
+          "hrms"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}

machines/canopus/disko.nix

@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}

machines/default.nix

@@ -1,4 +1,8 @@
-{ inputs, self, ... }:
+{
+  inputs,
+  self,
+  ...
+}:
 {
   imports = [
     inputs.clan-core.flakeModules.default

machines/deneb/configuration.nix

@@ -0,0 +1,117 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "poyerp.newedge.house";
+in
+{
+  clan.core.settings.machine.description = "VM machine that host ERPNext for poysound";
+  imports = [
+    inputs.frappix.nixosModules.x86_64-linux.frappix
+
+    (import ../../lib/auto-accept-zerotier-members.nix {
+      memberIds = [
+        # Alex Caddy gateway
+        "dbe44c0287"
+        "e3d6559697"
+      ];
+    })
+  ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "poyerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+      pkgs.frappix.hrms
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ sitename ];
+        apps = [
+          "frappe"
+          "erpnext"
+          "hrms"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}

machines/deneb/disko.nix

@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}

machines/hadar/configuration.nix

@@ -0,0 +1,100 @@
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
+let
+  domain = "poy-inventory.newedge.house";
+in
+{
+  clan.core.settings.machine.description = "VM machine that host Inventree system for Poy";
+  imports = [
+    inputs.self.nixosModules.inventree
+  ];
+
+  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
+  ];
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.inventree = {
+    files = {
+      secret-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      oidc-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      admin-password = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+    };
+    runtimeInputs = [
+      pkgs.pwgen
+      pkgs.xkcdpass
+    ];
+    script = ''
+      pwgen -s 32 1 > $out/secret-key
+      pwgen -s 32 1 > $out/oidc-key
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
+    '';
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  services.inventree = {
+    enable = true;
+    hostName = "${domain}";
+    config.site_url = "https://${config.services.inventree.hostName}";
+    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+  };
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}

machines/hadar/disko.nix

@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}

machines/mirach/configuration.nix

@@ -8,6 +8,6 @@
   # clan.core.networking.targetHost = "root@";
 
   clan.core.settings.name = "mirach";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.core.settings.machine.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/neptune/configuration.nix

@@ -57,6 +57,6 @@
   ];
 
   clan.core.settings.name = "neptune";
-  # clan.meta.description = "Radxa SBC board for testing. (With vi)";
+  clan.core.settings.machine.description = "Radxa SBC board for testing. (With vi)";
 
 }

machines/petra/configuration.nix

@@ -9,4 +9,5 @@
   };
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.settings.machine.description = "A personal computer for Chocolate Shop";
 }

machines/procyon/configuration.nix

@@ -0,0 +1,100 @@
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
+let
+  domain = "glom-inventory.newedge.house";
+in
+{
+  clan.core.settings.machine.description = "VM machine that host Inventree system for Glom";
+  imports = [
+    inputs.self.nixosModules.inventree
+  ];
+
+  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
+  ];
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.inventree = {
+    files = {
+      secret-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      oidc-key = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+      admin-password = {
+        owner = "inventree";
+        group = "inventree";
+        secret = true;
+      };
+    };
+    runtimeInputs = [
+      pkgs.pwgen
+      pkgs.xkcdpass
+    ];
+    script = ''
+      pwgen -s 32 1 > $out/secret-key
+      pwgen -s 32 1 > $out/oidc-key
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
+    '';
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  services.inventree = {
+    enable = true;
+    hostName = "${domain}";
+    config.site_url = "https://${config.services.inventree.hostName}";
+    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+  };
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}

machines/procyon/disko.nix

@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}

machines/ramus/configuration.nix

@@ -6,9 +6,7 @@
   };
 
   clan.core.settings.name = "ramus";
-  # clan.meta.description = ''
+  clan.core.settings.machine.description = "A Hetzner VPS machine own by Alex.";
-  #   A Hetzner VPS machine own by Alex.
-  # '';
 
   clan.core.sops.defaultGroups = [ "admins" ];
   clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

machines/rana/configuration.nix

@@ -1,5 +1,7 @@
-{ self, ... }:
+{ self, pkgs, ... }:
 {
+  clan.core.settings.machine.description = "Emmie personal computer";
+
   imports = [
     self.nixosModules.common
   ];
@@ -9,4 +11,12 @@
   };
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
+
+  boot.kernelParams = [
+    "amdgpu.dcdebugmask=0x10"
+    "amdgpu.cwsr_enable=0"
+    "amdgpu.gpu_recovery=1"
+  ];
+
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_12;
 }

machines/rigel/configuration.nix

@@ -13,4 +13,6 @@
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
   clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
+
+  clan.core.settings.machine.description = "Zima board computer for testing in B4L";
 }

machines/sirius/configuration.nix

@@ -1,5 +1,6 @@
 {
   self,
+  pkgs,
   ...
 }:
 {
@@ -15,6 +16,8 @@
     ];
   };
 
+  clan.core.settings.machine.description = "w NAS";
+
   clan.core.sops.defaultGroups = [ "admins" ];
 
   nixpkgs.hostPlatform = {
@@ -70,4 +73,22 @@
     ];
   };
 
+  systemd.services.heartbeat-push = {
+    description = "Heartbeat push to uptime monitor";
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart = "${pkgs.curl}/bin/curl -s -o /dev/null https://uptime.b4l.co.th/api/push/X0WCHAcY5gPf1U8If7BT1FLjpacZqGZu?status=up&msg=OK&ping=";
+    };
+  };
+
+  systemd.timers.heartbeat-push = {
+    description = "Heartbeat push timer";
+    wantedBy = [ "timers.target" ];
+    timerConfig = {
+      OnBootSec = "60s";
+      OnUnitActiveSec = "60s";
+      Unit = "heartbeat-push.service";
+    };
+  };
+
 }

machines/vega/configuration.nix

@@ -22,6 +22,8 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
 
+  clan.core.settings.machine.description = "Glom NAS";
+
   nixpkgs.hostPlatform = {
     system = "x86_64-linux";
   };

modules/clan/actual-budget/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-actual-budget";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/grafana/tests/vm/default.nix

@@ -20,6 +20,7 @@
     '';
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/nextcloud/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-nextcloud";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/paperless/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-paperless";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/personal-computer/printing.nix

@@ -22,11 +22,27 @@ let
 
 in
 {
+  environment.systemPackages = [ pkgs.simple-scan ];
+  nixpkgs.config.allowUnfreePredicate =
+    pkg:
+    builtins.elem (lib.getName pkg) [
+      "brgenml1lpr"
+      "cups-brother-dcpt310"
+      "cups-brother-dcpt720dw"
+      "cups-brother-dcpt725dw"
+    ];
+  # nixpkgs.config.allowUnfree = true;
+  services.ipp-usb.enable = true;
   services.printing = {
     enable = true;
     drivers = [
       pkgs.brlaser
       pkgs.gutenprint
+      pkgs.brgenml1lpr
+      pkgs.brgenml1cupswrapper
+      pkgs.cups-brother-dcpt310
+      pkgs.cups-brother-dcpt720dw
+      pkgs.cups-brother-dcpt725dw
     ];
 
     extraFilesConf = ''

modules/clan/phonebox/tests/vm/default.nix

@@ -21,6 +21,7 @@
     '';
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/pocket-id/tests/vm/default.nix

@@ -3,6 +3,7 @@
   name = "service-pocket-id";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/samba/tests/vm/default.nix

@@ -23,6 +23,7 @@ in
     '';
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/stirling-pdf/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-stirling-pdf";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/victoriametrics/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-victoriametrics";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/vikunja/tests/vm/default.nix

@@ -6,6 +6,7 @@
   name = "service-vikunja";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/clan/yggdrasil/tests/vm/default.nix

@@ -5,6 +5,7 @@
   name = "service-yggdrasil";
 
   clan = {
+    test.useContainers = false;
     directory = ./.;
     inventory = {
       machines.server = { };

modules/nixos/default.nix

@@ -0,0 +1,5 @@
+{
+  flake.nixosModules = {
+    inventree = import ../nixos/inventree;
+  };
+}

modules/nixos/inventree/default.nix

@@ -0,0 +1,334 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib)
+    mkEnableOption
+    mkOption
+    types
+    mkIf
+    ;
+
+  configFormat = pkgs.formats.json { };
+  cfg = config.services.inventree;
+  pkg = cfg.package;
+  configFile = "${cfg.dataDir}/config.json";
+
+  env = {
+    INVENTREE_CONFIG_FILE = configFile;
+    INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+    INVENTREE_AUTO_UPDATE = "1";
+    INVENTREE_PLUGINS_ENABLED = "1";
+    INVENTREE_PLUGIN_NOINSTALL = "0";
+    INVENTREE_STATIC_ROOT = cfg.config.static_root;
+    INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+    INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+    INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+    INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+    INVENTREE_DB_NAME = cfg.config.database.NAME;
+    INVENTREE_DB_HOST = cfg.config.database.HOST;
+    INVENTREE_DB_USER = "inventree";
+    INVENTREE_ADMIN_USER = cfg.config.adminUser;
+    INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+    INVENTREE_USE_X_FORWARDED_HOST = "1";
+    INVENTREE_CORS_ORIGIN_ALLOW_ALL = "1";
+    INVENTREE_FRONTEND_SETTINGS = ''{"mobile_mode":"allow-always"}'';
+
+    INVENTREE_SITE_URL = cfg.config.site_url;
+
+    PYTHONPATH = pkg.pythonPath;
+  };
+
+  inventree-invoke = pkgs.writeShellApplication {
+    name = "inventree-invoke";
+    text = ''
+      export INVENTREE_CONFIG_FILE=${configFile}
+      export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
+      export PYTHONPATH=${pkg.pythonPath}
+
+      exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
+    '';
+  };
+in
+{
+  options.services.inventree = {
+    enable = mkEnableOption "InvenTree parts manager";
+
+    package = lib.mkOption {
+      type = types.package;
+      default = pkgs.inventree;
+      description = ''
+        InvenTree package to use
+      '';
+    };
+
+    hostName = mkOption {
+      type = types.str;
+      description = "FQDN for the InvenTree instance.";
+    };
+
+    dataDir = mkOption {
+      type = types.path;
+      default = "/var/lib/inventree";
+      example = "/var/lib/inventree";
+      description = ''
+        The default path for all inventree data.
+      '';
+    };
+
+    secretKeyFile = mkOption {
+      type = types.path;
+      default = "${cfg.dataDir}/secret_key.txt";
+      description = ''
+        Path to a file containing the secret key
+      '';
+    };
+
+    config = mkOption {
+      type = types.submodule ({
+        freeformType = configFormat.type;
+        options = {
+          adminUser = mkOption {
+            type = types.str;
+            default = "admin";
+          };
+          adminPasswordFile = mkOption {
+            type = types.path;
+            description = "Path to password file for user `admin`";
+          };
+          site_url = mkOption {
+            type = types.str;
+            default = "https://${cfg.hostName}";
+          };
+          static_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/static";
+            description = ''
+              Static file storage
+            '';
+          };
+          media_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/media_root";
+            description = "Media root directory";
+          };
+          backup_dir = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/backups";
+            description = "Backup directory";
+          };
+          oidc_private_key_file = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/oidc.key";
+          };
+        };
+      });
+      default = { };
+      description = ''
+        Config options, see https://docs.inventree.org/en/stable/start/config/
+        for details
+      '';
+    };
+
+    serverStartTimeout = mkOption {
+      type = types.str;
+      default = "10min";
+      description = ''
+        TimeoutStartSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
+        for more details
+      '';
+    };
+
+    serverStopTimeout = mkOption {
+      type = types.str;
+      default = "5min";
+      description = ''
+        TimeoutStopSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
+        for more details
+      '';
+    };
+
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ inventree-invoke ];
+
+    systemd.tmpfiles.rules = (
+      map (dir: "d ${dir} 0755 inventree inventree") [
+        "${cfg.dataDir}"
+        "${cfg.dataDir}/static"
+        "${cfg.dataDir}/media_root"
+        "${cfg.dataDir}/backups"
+      ]
+    );
+
+    services.inventree.config = {
+      plugins_enabled = false;
+      plugin_file = "${cfg.dataDir}/plugins.txt";
+      plugin_dir = "${cfg.dataDir}/plugins";
+      database = {
+        ENGINE = "postgresql";
+        NAME = "inventree";
+        HOST = "/run/postgresql";
+      };
+    };
+
+    services.postgresql = {
+      enable = true;
+      ensureDatabases = [ "inventree" ];
+      ensureUsers = [
+        {
+          name = "inventree";
+          ensureDBOwnership = true;
+        }
+      ];
+    };
+
+    users.users.inventree = {
+      group = "inventree";
+      isSystemUser = true;
+      description = "InvenTree daemon user";
+    };
+
+    users.groups.inventree = { };
+
+    services.nginx.enable = true;
+
+    services.nginx.virtualHosts.${cfg.hostName} = {
+      locations =
+        let
+          unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
+        in
+        {
+          "/" = {
+            extraConfig = ''
+              client_max_body_size 100M;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            '';
+            proxyPass = "http://unix:${unixPath}";
+          };
+          "/static/" = {
+            alias = "${cfg.config.static_root}/";
+            extraConfig = ''
+              expires 30d;
+            '';
+          };
+          "/media/" = {
+            alias = "${cfg.config.media_root}/";
+            extraConfig = ''
+              auth_request /auth;
+            '';
+          };
+          "/auth" = {
+            extraConfig = ''
+              internal;
+            '';
+            proxyPass = "http://unix:${unixPath}:/auth/";
+          };
+        };
+    };
+
+    systemd.targets.inventree = {
+      description = "Target for all InvenTree services";
+      wantedBy = [ "multi-user.target" ];
+      wants = [ "network-online.target" ];
+      after = [ "network-online.target" ];
+    };
+
+    systemd.services.inventree-config = {
+      description = "Inventree config generation";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [
+        "inventree-static.service"
+        "inventree-gunicorn.service"
+        "inventree-qcluster.service"
+      ];
+      serviceConfig = {
+        # User = "root";
+        # Group = "root";
+        User = "inventree";
+        Group = "inventree";
+        Type = "oneshot";
+        RemainAfterExit = true;
+        PrivateTmp = true;
+      };
+      environment = env;
+      script = ''
+        set -euo pipefail
+
+        umask u=rwx,g=,o=
+
+        # chown inventree:inventree ${configFile}
+
+        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
+      '';
+    };
+
+    systemd.services.inventree-static = {
+      description = "InvenTree static migration";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [ "inventree-gunicorn.service" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic  --no-input
+        '';
+      };
+    };
+
+    systemd.services.inventree-gunicorn = {
+      description = "InvenTree Gunicorn server";
+      requiredBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      #wantedBy = [ "inventree.target" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
+            --pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
+        '';
+      };
+    };
+
+    systemd.sockets.inventree-gunicorn = {
+      wantedBy = [ "sockets.target" ];
+      partOf = [ "inventree.target" ];
+      socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
+    };
+
+    systemd.services.inventree-qcluster = {
+      description = "InvenTree qcluster server";
+      requiredBy = [ "inventree.target" ];
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
+        '';
+      };
+    };
+  };
+}

overlays/default.nix

@@ -1,6 +1,11 @@
-{ ... }:
+{ inputs, ... }:
 {
   flake.overlays = {
     packagesOverlay = import ../pkgs/overlay.nix;
+
+    frappixFrappeOverlay = inputs.frappix.frappeOverlay.x86_64-linux;
+    frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
+    frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
+    frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
   };
 }

pkgs/inventree/default.nix

@@ -0,0 +1,161 @@
+{
+  stdenvNoCC,
+  python3,
+  fetchFromGitHub,
+  fetchYarnDeps,
+  yarnConfigHook,
+  nodejs,
+}:
+let
+  version = "1.1.0";
+
+  src = fetchFromGitHub {
+    owner = "inventree";
+    repo = "InvenTree";
+    tag = "${version}";
+    hash = "sha256-GAATo5zkkNCes9fCQsYUsZ9auhgYEUnevN4obWj3ZRA=";
+  };
+
+  frontend = stdenvNoCC.mkDerivation {
+    name = "inventree-frontend";
+    inherit version src;
+
+    yarnOfflineCache = fetchYarnDeps {
+      yarnLock = "${src}/src/frontend/yarn.lock";
+      hash = "sha256-Ijbkx+INZgsvMhkzo8h/FUY75W3UHnKAdUjQRD8kJZw=";
+    };
+
+    nativeBuildInputs = [
+      yarnConfigHook
+      nodejs
+    ];
+
+    patchPhase = ''
+      runHook prePatch
+      cd src/frontend
+      runHook postPatch
+    '';
+
+    buildPhase = ''
+      echo "Running lingui"
+      ./node_modules/.bin/lingui compile --typescript
+      echo building lib
+      ./node_modules/.bin/tsc --p ./tsconfig.lib.json
+      ./node_modules/.bin/vite --config vite.lib.config.ts build
+      echo "Running tsc"
+      ./node_modules/.bin/tsc
+      echo "Running vite"
+      ./node_modules/.bin/vite build --emptyOutDir --outDir $out
+    '';
+  };
+
+in
+python3.pkgs.buildPythonApplication rec {
+  pname = "InvenTree";
+  inherit version src;
+
+  format = "other";
+
+  dependencies =
+    with python3.pkgs;
+    [
+      coreapi
+      cryptography
+      distutils
+      dj-rest-auth
+      django
+      django-allauth
+      django-allauth.optional-dependencies.openid
+      django-allauth.optional-dependencies.mfa
+      django-allauth.optional-dependencies.socialaccount
+      django-cleanup
+      django-cors-headers
+      django-dbbackup
+      django-error-report-2
+      django-filter
+      django-flags
+      django-formtools
+      django-ical
+      django-js-asset
+      django-maintenance-mode
+      django-markdownify
+      django-money
+      django-mptt
+      django-mailbox
+      django-anymail
+      django-redis
+      django-oauth-toolkit
+      django-otp
+      django-q-sentry
+      django-q2
+      django-redis
+      django-sesame
+      django-sql-utils
+      django-structlog
+      django-stdimage
+      django-taggit
+      django-user-sessions
+      django-weasyprint
+      djangorestframework
+      djangorestframework-simplejwt
+      djangorestframework-simplejwt.optional-dependencies.crypto
+      django-xforwardedfor-middleware
+      django-storages
+      drf-spectacular
+      dulwich
+      feedparser
+      gunicorn
+      pdf2image
+      pillow
+      pint
+      pip-licenses
+      pypdf
+      python-barcode
+      python-barcode.optional-dependencies.images
+      python-dotenv
+      pyyaml
+      qrcode
+      qrcode.optional-dependencies.pil
+      rapidfuzz
+      sentry-sdk
+      tablib
+      tablib.optional-dependencies.xls
+      tablib.optional-dependencies.xlsx
+      tablib.optional-dependencies.yaml
+      weasyprint
+      whitenoise
+
+      psycopg2
+      fido2
+
+      opentelemetry-api
+      opentelemetry-sdk
+      opentelemetry-exporter-otlp
+      opentelemetry-instrumentation-django
+      opentelemetry-instrumentation-requests
+      opentelemetry-instrumentation-redis
+      opentelemetry-instrumentation-sqlite3
+      opentelemetry-instrumentation-system-metrics
+      opentelemetry-instrumentation-wsgi
+    ]
+    ++ django-anymail.optional-dependencies.amazon-ses;
+
+  installPhase = ''
+    substituteInPlace src/backend/InvenTree/InvenTree/settings.py --replace-fail "django_slowtests.testrunner.DiscoverSlowestTestsRunner" "django.test.runner.DiscoverRunner"
+
+    mkdir -p $out/opt/inventree
+    cp -r . $out/opt/inventree
+
+    echo "Installing frontend"
+
+    mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
+    cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+    cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+  '';
+
+  passthru = {
+    pythonPath = python3.pkgs.makePythonPath dependencies;
+    gunicorn = python3.pkgs.gunicorn;
+    inherit frontend;
+  };
+}

pkgs/overlay.nix

@@ -2,4 +2,28 @@ final: prev: {
   think-gtcm = final.callPackage ./think-gtcm.nix { };
   think-backend-gtcm = final.callPackage ./think-backend-gtcm.nix { php = final.php83; };
   gtcm-file-uploader = final.callPackage ./gtcm-file-uploader.nix { };
+
+  pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
+    (py-final: py-prev: {
+      django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
+      django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
+      django-flags = py-final.callPackage ./python/django-flags { };
+      django-ical = py-final.callPackage ./python/django-ical { };
+      django-markdownify = py-final.callPackage ./python/django-markdownify { };
+      django-money = py-final.callPackage ./python/django-money { };
+      django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
+      django-recurrence = py-final.callPackage ./python/django-recurrence { };
+      django-slowtests = py-final.callPackage ./python/django-slowtests { };
+      django-structlog = py-final.callPackage ./python/django-structlog { };
+      django-stdimage = py-final.callPackage ./python/django-stdimage { };
+      django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
+      django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
+      django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
+      pip-licenses = py-final.callPackage ./python/pip-licenses { };
+      py-moneyed = py-final.callPackage ./python/py-moneyed { };
+      pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
+      sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
+    })
+  ];
+  inventree = final.callPackage ./inventree { python3 = final.python312; };
 }

pkgs/python/django-dbbackup/default.nix

@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+  pytz,
+}:
+
+buildPythonPackage rec {
+  pname = "django-dbbackup";
+  version = "4.2.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-dbbackup";
+    rev = version;
+    hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django
+    pytz
+  ];
+
+  pythonImportsCheck = [ "dbbackup" ];
+
+  meta = {
+    description = "Management commands to help backup and restore your project database and media files";
+    homepage = "https://github.com/jazzband/django-dbbackup";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+    mainProgram = "django-dbbackup";
+  };
+}

pkgs/python/django-error-report-2/default.nix

@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-error-report-2";
+  version = "0.4.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "matmair";
+    repo = "django-error-report-2";
+    rev = version;
+    hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "error_report" ];
+
+  meta = {
+    description = "Log/View Django server errors";
+    homepage = "https://github.com/matmair/django-error-report-2";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-flags/default.nix

@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-flags";
+  version = "5.0.13";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "cfpb";
+    repo = "django-flags";
+    rev = version;
+    hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "flags" ];
+
+  meta = {
+    description = "Feature flags for Django projects";
+    homepage = "https://github.com/cfpb/django-flags";
+    license = lib.licenses.cc0;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-ical/default.nix

@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  django-recurrence,
+  icalendar,
+}:
+
+buildPythonPackage rec {
+  pname = "django-ical";
+  version = "1.9.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-ical";
+    rev = version;
+    hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    django-recurrence
+    icalendar
+  ];
+
+  pythonImportsCheck = [ "django_ical" ];
+
+  meta = {
+    description = "ICal feeds for Django based on Django's syndication feed framework";
+    homepage = "https://github.com/jazzband/django-ical";
+    changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-markdownify/default.nix

@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  bleach,
+  django,
+  markdown,
+}:
+
+buildPythonPackage rec {
+  pname = "django-markdownify";
+  version = "0.9.5";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "erwinmatijsen";
+    repo = "django-markdownify";
+    rev = version;
+    hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    bleach
+    django
+    markdown
+  ];
+
+  pythonImportsCheck = [ "markdownify" ];
+
+  meta = {
+    description = "Markdown template filter for Django";
+    homepage = "https://github.com/erwinmatijsen/django-markdownify";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-money/default.nix

@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+  py-moneyed,
+}:
+
+buildPythonPackage rec {
+  pname = "django-money";
+  version = "3.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "django-money";
+    repo = "django-money";
+    rev = version;
+    hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django
+    py-moneyed
+  ];
+
+  pythonImportsCheck = [ "djmoney" ];
+
+  meta = {
+    description = "Money fields for Django forms and models";
+    homepage = "https://github.com/django-money/django-money";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-q-sentry/default.nix

@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  setuptools,
+  sentry-sdk,
+}:
+
+buildPythonPackage rec {
+  pname = "django-q-sentry";
+  version = "0.1.6";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "danielwelch";
+    repo = "django-q-sentry";
+    rev = "d3a43a90c82734244d5ebf3295652223053f1354";
+    hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
+  };
+
+  build-system = [
+    poetry-core
+    setuptools
+  ];
+
+  dependencies = [ sentry-sdk ];
+
+  pythonImportsCheck = [ "django_q_sentry" ];
+
+  meta = {
+    description = "Bringing Sentry error tracking to Django Q";
+    homepage = "https://github.com/danielwelch/django-q-sentry";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-recurrence/default.nix

@@ -0,0 +1,56 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pdm-backend,
+  django,
+  flake8,
+  pytest,
+  pytest-cov,
+  pytest-django,
+  pytest-sugar,
+  python-dateutil,
+  sphinx,
+  sphinx-rtd-theme,
+  tox,
+}:
+
+buildPythonPackage rec {
+  pname = "django-recurrence";
+  version = "1.12.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-recurrence";
+    rev = version;
+    hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
+  };
+
+  build-system = [ pdm-backend ];
+
+  dependencies = [
+    django
+    flake8
+    pytest
+    pytest-cov
+    pytest-django
+    pytest-sugar
+    python-dateutil
+    sphinx
+    sphinx-rtd-theme
+    tox
+  ];
+
+  pythonRelaxDeps = true;
+
+  pythonImportsCheck = [ "recurrence" ];
+
+  meta = {
+    description = "Utility for working with recurring dates in Django";
+    homepage = "https://github.com/django-recurrence/django-recurrence";
+    changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-slowtests/default.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-slowtests";
+  version = "1.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "realpython";
+    repo = "django-slow-tests";
+    rev = version;
+    hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "django_slowtests" ];
+
+  meta = {
+    description = "Locate your slowest tests";
+    homepage = "https://github.com/realpython/django-slow-tests";
+    changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-stdimage/default.nix

@@ -0,0 +1,51 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  pillow,
+  gettext,
+}:
+
+buildPythonPackage rec {
+  pname = "django-stdimage";
+  version = "6.0.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "codingjoe";
+    repo = "django-stdimage";
+    rev = version;
+    hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    pillow
+  ];
+
+  nativeBuildInputs = [ gettext ];
+
+  preBuild = ''
+    echo "bla bla"
+    echo $PATH
+  '';
+
+  pythonImportsCheck = [ "stdimage" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/codingjoe/django-stdimage";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-structlog/default.nix

@@ -0,0 +1,48 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  asgiref,
+  django,
+  django-ipware,
+  structlog,
+  celery,
+  django-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "django-structlog";
+  version = "9.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jrobichaud";
+    repo = "django-structlog";
+    rev = version;
+    hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    asgiref
+    django
+    django-ipware
+    structlog
+  ];
+
+  optional-dependencies = {
+    celery = [ celery ];
+    commands = [ django-extensions ];
+  };
+
+  pythonImportsCheck = [ "django_structlog" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/jrobichaud/django-structlog";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-user-sessions/default.nix

@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-user-sessions";
+  version = "2.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-user-sessions";
+    rev = version;
+    hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "user_sessions" ];
+
+  meta = {
+    description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
+    homepage = "http://github.com/jazzband/django-user-sessions";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-weasyprint/default.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  django,
+  weasyprint,
+}:
+
+buildPythonPackage rec {
+  pname = "django-weasyprint";
+  version = "2.4.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "fdemmer";
+    repo = "django-weasyprint";
+    rev = "v${version}";
+    hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    django
+    weasyprint
+  ];
+
+  pythonImportsCheck = [ "django_weasyprint" ];
+
+  meta = {
+    description = "A Django class-based view generating PDF resposes using WeasyPrint";
+    homepage = "https://github.com/fdemmer/django-weasyprint";
+    changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/django-xforwardedfor-middleware/default.nix

@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-xforwardedfor-middleware";
+  version = "2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "allo-";
+    repo = "django-xforwardedfor-middleware";
+    rev = "v${version}";
+    hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "x_forwarded_for" ];
+
+  meta = {
+    description = "Use the X-Forwarded-For header to get the real ip of a request";
+    homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
+    license = lib.licenses.publicDomain;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/pip-licenses/default.nix

@@ -0,0 +1,74 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  prettytable,
+  tomli,
+  autopep8,
+  black,
+  docutils,
+  isort,
+  mypy,
+  pip-tools,
+  pypandoc,
+  pytest-cov,
+  pytest-pycodestyle,
+  pytestrunner,
+  tomli-w,
+  twine,
+}:
+
+buildPythonPackage rec {
+  pname = "pip-licenses";
+  version = "5.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "raimon49";
+    repo = "pip-licenses";
+    rev = "v-${version}";
+    hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    prettytable
+    tomli
+  ];
+
+  optional-dependencies = {
+    dev = [
+      autopep8
+      black
+      docutils
+      isort
+      mypy
+      pip-tools
+      pypandoc
+      pytest-cov
+      pytest-pycodestyle
+      pytestrunner
+      tomli-w
+      twine
+      wheel
+    ];
+  };
+
+  pythonImportsCheck = [ "piplicenses" ];
+
+  meta = {
+    description = "Dump the license list of packages installed with pip";
+    homepage = "https://github.com/raimon49/pip-licenses";
+    changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/py-moneyed/default.nix

@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  babel,
+  typing-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "py-moneyed";
+  version = "3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "py-moneyed";
+    repo = "py-moneyed";
+    rev = "v${version}";
+    hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    babel
+    typing-extensions
+  ];
+
+  pythonImportsCheck = [ "moneyed" ];
+
+  meta = {
+    description = "Provides Currency and Money classes for use in your Python code";
+    homepage = "http://github.com/py-moneyed/py-moneyed";
+    changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

pkgs/python/sentry-sdk/default.nix

@@ -0,0 +1,43 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  certifi,
+  urllib3,
+}:
+
+buildPythonPackage rec {
+  pname = "sentry-sdk";
+  version = "2.26.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "getsentry";
+    repo = "sentry-python";
+    rev = version;
+    hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
+    fetchSubmodules = true;
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    certifi
+    urllib3
+  ];
+
+  pythonImportsCheck = [ "sentry_sdk" ];
+
+  meta = {
+    description = "The official Python SDK for Sentry.io";
+    homepage = "https://github.com/getsentry/sentry-python";
+    changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}

sops/machines/canopus/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+    "type": "age"
+  }
+]

sops/machines/deneb/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+    "type": "age"
+  }
+]

sops/machines/hadar/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1qdxqyqqs34cksjkzeww2c942w8xgm9x6d4zct4glwqg90ghve9qq6d944c",
+    "type": "age"
+  }
+]

sops/machines/procyon/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age14wy7mauwmchu8u2pqqamxf6n9rw797l2sjwskxyw33gg7k78gvwq7cn0av",
+    "type": "age"
+  }
+]

sops/secrets/canopus-age.key/groups/admins

@@ -0,0 +1 @@
+../../../groups/admins

sops/secrets/canopus-age.key/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fgf6Hp2UCM5l0pmL62XQwf2i8npmYKSiSazO89U8u4m6FsVkZfwj+U8yGOQlvaExRnhJyoDQ3okiQFrKueufK7gwvmvVPuN1Uk4=,iv:XZbu2Xi0/Ge6Qfnb9TVuAUqiOfPho34R7PK+eNDpXNk=,tag:OMZzEspt8JCdWkvhWR/PTQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNUU4MTdlQmRQNDUzTDdL\ncHhzazgyQTA1NnZuWGJSbTZLQ291RnVqYUFrCmdwNmQ3em1sREkzRjcvSmN4a0xi\nYkpXWmVyV0hlSG9LMlBXQUg0eGdneGcKLS0tIEtFQytreFB5QTZiQnFGZWhneDlt\nM2Y1TnJ4TWtLQ0VPYUFPb1hDU2FtOWsKTGdTMNjgYkhREx2u5Cd2kHIrHXOmgaXv\nxYx7TTXEsRBKPpELqyh4KrjkU3TulIN+aR2TTV6L8T4GPhz7qJRRcw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdXhYSlRIc3hUYUliRG9Z\nZys5Uy9nRFpXUnYxOXdKcGR1M2tyWngyRjJBCjB2R2Vha21nZ1hGUUErbzR5YTRG\nVGtNdWl5ejJ2bUgrS2tLTTByZzE5OVEKLS0tIHBBdUdrZjA0ZC9waHhvUzZpYS9W\ndkw3ZDkvOWVZUk8yekRJMkxodndhY3cKiM6SOGBJecXw6VaFx7ujyjJcD9gTZXll\nkx6CPjS1P5ur3nAxSRBXlgZ54rqv+gjJlhJzXY5+aCGtmuOPUIUUWg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFlGRGYyZDNL\nZHc2UFRVUDB3NU11RWhVdHFPdDRTSi9VclNQaysyMytsaDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp0RXpObEVJVHNRREEzR1R3bTBqN3Rm\nM3hXSWlrcWcxMlIrS2d5bGE3UGlrCi0tLSBZQ1hCZDFwYlNIV1RQK2s2SzFHU2Ja\nWENHL3FCcnNhckFsZW5jejA5Q3ZrCrov/P24IITo3YqDnxDq866Z2484tyGSBVWj\nRW9vd3DSFrN86pz/eXEinzOlEd0Y6G6g8Xbdb6wYDhb3jYLHkXY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDN4dHFEOHl3\neHYzK2k0cWlLOWlIQ1lsc01CMWw1R0hDZUxDR0k4RE50VncgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphRTZweGt6YjlHWUFWRHFabytZWDdI\neWR6YjFVUk40T0h6dnoxRTZLRVZVCi0tLSBZMU4vUy9iNG1DWTJRTWV3bllOam8w\nSjg4M0N6bnlwMXRDd3FoVWlCRVR3Cih+vMcCAkOkX+uWjKW62Jyj8jv5K79koJcz\n6Yh3eAqTrdJmdscKL75SBoD5BmD0Gtc+KE0gC1zKbHcQBkf6b4Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9lMmFoc2Fa\nb1UwYzlYM0Q1T2c2WGx0T3JXaEhsM3ZFRFRURnNQRWlTekEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5QUl6VzU3Sk9saVR0QmduNEVVczFB\neDdnQXl2bDdNOUlVanE4NVdENWFvCi0tLSByTm01ak1yUmFqczlsM3hGMlVtOS9S\nM0Qycks1aERSNUJpWE5MZ3U4MnEwCqebnYBNh6vYos01PJoTnUW3caGBCHrWs0aQ\niXGBFaiAgg8m27zSGF1E4ctQ+VgvlI7BWypVpyQMRw8SAvGxx08=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWU1hhWktFbWc1c2gvN1BM\nU0VrZUZpUkc3MUVUak90SGZxM1hGb3c5M3k4CnUydmVyaUN6UFcxVXJ4eStzbkt2\nRjM5QytuWENCUHJOeEtRM2I1Z3FnY2cKLS0tIGw4WHh2a2ViOTB0OThHTFBLWFlG\naUVXaGpONmNBVHBxejlxWDNSTWtESTAKc2y63StRLBsUByWJJGDNOnuoEP3SLy8F\nlUzHSazowmPAdVtm9gpIWTlnLVnJylY6k1v7TYalejkKl8YXEEt8GA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByR2M1ZG1XSThWYVN0SGR1\nT05VZmZkK0NNTGdNZjAyMEpmQjNEWGtOU0RRCmZHT1NlSy9Qek8zcUU4SEpndmp6\nYUJJZm5aeTNON2dBVElRMjJadCtsN1UKLS0tIFQ0WTBtY25XWCszOXM1VmVPSTZY\nYWJmcEVRd0YwK3RIUXRLYTVNd0ZkZWcKr5f6dCExSjlmClZiDjJylDWr1ccZkpCn\nhhjOsqA1vtayolowqvWheN2fysIg6NgLMZ4R9cedLahVcMfxk+2HGA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSEYwTVJlVjd1cjRPT2Rk\nQmphdU96OXRvNlRRd3c2alNiMVMvK1BVZ3hBClhsZ0NMVG82TEdibzFTQUVUVXBX\nNG1MbEk1dWFmdGxvVk5YQ0ZDTjJ4OUEKLS0tIEJJQ3o2ZnFqZmpsZGFrSis5NXBF\nZmZrL0RUVXhzMDhPNFBmTTR2VzBOSGcKPANYws4mekz7EN+ZjhfO5feMldFNDRSe\n1m5dGjswL5IyKpiE3wOlQAlkp8y5htYKbGdzwv0CxF8UYLGqVP8Jzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPcStTSGxCYjdLUFJhNnZL\nMkFCQUxVT05rZE1HVWJwdCtOd0xsZGJXckRVCnhWQ2Ywd05TMDVKSUdoeFl3RmNz\nYWRLTGxsYmtzWDFydUVZOU9aTVkvTXcKLS0tIHR1akVGTzQ2dVFDQTF0VlZNT3pM\nRDVmc0w2bjR1QiswcmpkUU9hYzJEUUUKC12h6SCwmtfd72aNwo3eGwvYrwtK3ryI\nlB/xr6ZR02Vcc6y8tqpvTq+86TUw+od6NgqpATU2KOni8rZdWWnBJg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:52Z",
+		"mac": "ENC[AES256_GCM,data:zBTGL5/AH9Yt3fvfTUbuS0OpNQkLVSAo/TyypEUpS4TE2/2jpS3VIH8I9P51Iumqr1ZeCTWkR4ujFklXfS7tnvgFlqaJVJtod60C7WZMddrzhSeypOkcAH0/oj/pD1JEp1draiFJBf8NvRsx22RqY7yFUcC9O2KC9WnHn0avq7I=,iv:qz8nv3l9lgMa8IgDTEl9b3loi7CTrwJYVHnGZLuEcys=,tag:A3qyzRqjgKjEo6oYE9fz5g==,type:str]",
+		"version": "3.12.2"
+	}
+}

sops/secrets/canopus-age.key/users/kurogeek

@@ -0,0 +1 @@
+../../../users/kurogeek

sops/secrets/deneb-age.key/groups/admins

@@ -0,0 +1 @@
+../../../groups/admins

sops/secrets/deneb-age.key/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:W3kzpxtZXld4cgeTubrTYbIYzAY3CbQjaGeUEIF0USrKkjxHdqPKRrLGPj3OeLhJKWs9AZnKBgTy/bJaJXi6eOcNnM2gubY/lFI=,iv:n7f2HfODC8YEJKn0ILIgbMP2L2beADjm0olrRULtaTE=,tag:0hHEyg0Fzeyq780FGosJtQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXR4aVNHTEN1NWdTdXgx\nQ0tHWjRCYWFJcVh3WC94Wi9vRlFxTlZOYmlZCnQ4M1FOczJWQ2N0NCtNbnlDM25o\ndGFWZFZOQjFHczQxYS9NL0hFLzdHTFkKLS0tIDBNWnV0UGFxMUxIZ082bHFKMnJ1\nd2NsZ3FCZTh4aytBTUdzV0FKWnlZWjAKXTug9QehoAjumvq6cr2JgnHOB1l4Easx\ntXbpbGNm5a0rsYA9FxiQKhk37I7e5RbkxJpxnrlwvlN2QThIOqWDWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHcysxTFFBK1puT2Q4UnJ0\ndmg0bTd2bmQ4TnRmSGJNeTl5cENSQ1gyanhrClV1cmt4TmlLZzhtSFBnQ0Q5dGMr\nVUkrMjF1M0c1UmJENHlIb1JBUHpuTE0KLS0tIGR5bEM1MEFIbjJxWGtKTFlpVkpG\nWTB5OEF2Z1I3azVsbTVHZ1NUeE1VNHcKm1gCaRCGahNVrYpIigDR1KeDlmFs/bQ7\nclmcsZb+RiCXU2frNqgXqMyhXDQ6eELCf0zpqZ5Tue5LQAkF/6CNKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDVkWjRhVjZB\nQXBlT3YzUWNKemhLc2F0RzRHODZMaGtVRGg2SnV5UTAxaTQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3dGNKcUxEOXo3eUdzbnYrUm9uZUJV\nR3FwVmpSYzd4Z2RsRTdGTC8rYlJrCi0tLSBjcTc5UkE5Wk1vV3VLNTh5Sm5vSU1H\ncEJCdjA5QUlaVXMrQndTaVZneGprCu3I0FlZ+bRmxkkFnOqpOa6v0FStKOBlsTQl\nQMdFClzFjXQP/9i/xBXWIsrQ8fC7jiut/M7zDYtdQhUaIiLG5R0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZadU1TQzIx\ndTFmSGY5amNmeFNZRERaaDBZTmxqb042ZVhVeVhtRU84Z3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRW5wWmlodEJPbjBqdnluUkRMT04z\nclRBUUpYMWJLWkk1TzhHOVJOMDc4Ci0tLSBDYWprM3lYN2w1VFVCdXJleXVpMWFE\nM3NZWEdoRmR2ZlRQVGdVQ0F3QkdnChnVrO957ng+BWe1lMVl7y2+Db3TsXx6se3f\nXXkdV0Zzg6STsdSKG0+2TG9Zw1gsDeFcvrMZdE/i92Zn2lYYHD0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlHdkYwQytj\nc0dkUEw0RlVWQzV2YWJnem9nSFpyZWNEazFUcTVXa1ArblEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6akdKdWxKMk1lNEhNL2RCYTVYT0lq\nZGxHeXRwWVQ4MXgrVjN4VEJoQ3NjCi0tLSBMQmVEejBwaFdVVGhDcEc4OUJMSXEr\nT0J6WGp4UzFxWG5kajlzWkt3Z1JzClGHNfyWCLbMeHr1Q/nWblcwQSYi2j6V6UzT\nanPgXMxfUO7qzGLJ9ybrPFxjyHLzAH1bBjVTLmig/V+jlqB5DO0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4UjZyaE9ySGdiQnYyeE9i\nbldRNzZCWnMvQmNseDl2UlVqeTNVQ3BJbVVrCmxWUmUyVUZ1YXlzc3Rremx6Mmlz\nZ1A0VlVPYS9lQkxicUhOd05mWmd6RmsKLS0tIDZka2N0eG00Ym5iQnR0RmN2NGFX\naUIxUnBleFJVcXNod0V3bUpiMHYzaDgK0l3YaBMqM1Kz1jZ++zus5tBWsynO0TsM\nLmgjxptgc3uFz4j9IrS4MJm5gxdTYEGGl/w67CG0BkiE/+7c/BCtOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNjlEa1ZPUENFcmhXcmpD\neU5obkJ0Z2plc0V4TS9IODdMS3pFYm93MURnCnZxejBtQkxQMHRTY1BoTExhb0pF\nb2g0Mld4MmJDMSt4Q29PNTh3eGoySG8KLS0tIG05Qzl2R3F3MkRQd2hMenhYbmRU\nR05kU1ZBQVI0Y2k4SlNFalJyK1ByZE0KqYpRiC/Ta1mACm/H+fFZ2/p22oVHYheB\nD81C3mPcGfM3z9pH2TAxwh9V4i1E4Bsio2lA//fJ174HiGbWr2SLNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSUxBNHFJVytVbytTNFFQ\nRGFmd05CVWxzZzZFd2cxc1FGZ2dJRnM5aVV3Cnk0MWVRekd4S2dJcmxFUXhpOHE2\naHlxY1g4YVZiekl5aUJjalQ2Slo0MncKLS0tIDhTbWVGOE54Q09HeUJhbXEvb0Fu\nOHNEUkczU2w0L2ZkZHJsWFRpQlVTT2sK8RiKwY/waLn7ktbmh8+flByF9tN0RUD1\n78KVpKXp4SBWCp4Gr3tudZNWKnLsummhzxvNWY0FO3vOYK32SYFJ5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYmRWWVZ6VFF6L2J3OWlK\nUmdPZXNldWtHUHFPZmtEZ0VTTnFEZ2kvMXl3CjAyaUVNR2NmQ1dkTnVnNHY3Nitp\nY0Z4Rk5jK0gzbkl6ZDBHTERWeXg4UzAKLS0tIFFrREk3RnN4YTczTnoxZVZHZFQ3\nczlkd1A0VFNCSzFlT0t5ZG5xdWpoaHMKycCr9bQi7arZrREZWmbal6TYRxRj7Vmo\nBGAmgnS9JpMdojO2wbeXfA9NixznKc1SUgXYefsMIke29kUUM1Ij9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:23Z",
+		"mac": "ENC[AES256_GCM,data:7P6rZqkfnyHBRGJ6y61QMH5+fx/hTtOv0Qv0gBm3PF3vm0UH7oii5ztgx3QeImn1k44ctuA/RYMp0WTMHG6I3Uob/qC+XK5DTWPq+H2wx4qzb8iCR+63g2peqjVq8RV6TaXtJCNgLKf8K8OajMbBeLXZSeUmWtyxyGaDmIpPwTc=,iv:leBWe83Urp3vTMbBBNgihTO8DJ1RZ8+PfcdEsBAyEZY=,tag:Ix9vF10M77AiNF9h1oD8GA==,type:str]",
+		"version": "3.12.2"
+	}
+}

sops/secrets/deneb-age.key/users/kurogeek

@@ -0,0 +1 @@
+../../../users/kurogeek

sops/secrets/hadar-age.key/groups/admins

@@ -0,0 +1 @@
+../../../groups/admins

sops/secrets/hadar-age.key/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:MpG9R4x/trF6eJonbG0M9d9grMyV/8GUdS6CUFaF4iExz0tcQ5v3p25NhtgRr94Xn/+erZQb++QdDdns1JY1mi09uSECtxokSJw=,iv:x3ts+0l9QlRCfXFXxj9Px+EcIwD9SCjzIyJ1+kcqIZU=,tag:5oYqg2T86uhrxh9Nd4Euxg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVVEkyZE9kRlpPVVdQcmQy\nV3d0alBkWmhmY3N5bXNSTzNmbjcyY1lHcUVRCnlsVDIwbDdOUmdDYlNaZXQzS0JF\nSm5ZTnZ0ZmE5TVNDa2tYVXd6VC9wUncKLS0tIE9EaUlYbmd4Ni9UVm4vMUV2TmJK\nMFdyOTRiR2tMSzJmcWtwK3VKd2s2RDQKwZFwjnhobvgRYmH726FLLl5n8zGo9+Ws\nJ5Mpy5vaIXAOCHBKim0GtEDik8YeSgURCPnvtXSGA6Wq2c66qKGkVA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2KzBNZGVpRjByN2JlVHBQ\nbDZqUy9SNDRpczkxQkJqUzdvMkZ4TjJIRUdrCkJmSHYzVXlGSHZsSWNuRG9mTUJs\nWmxYSFdxVnpvM29ScDdmNjZpcktScVUKLS0tIERHaFhIYVVEL3FCd1pjQnp2aklE\nSWJFRkpXa1BtWWxKSTB6OUdPblZ5YWMK5arDu2EI8uEXr1DBPAQ+OEtA+CBNxXXH\nWx4OBwTjUuh9YVCR138SDgNhyeuW9A+DUioDFS+DzIIK5XNzOZ+U1g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9LSXdtY2xs\ndGtMMTdZUC8zT0x4SGhUbHB4ZlhpUWdzRCtkQzFaZ2JpVDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpLNEFrMWdSMld6dUZYeTl1WnZvbFpS\nRWoyYkVJMTBzanlDTVdmL0N6K3cwCi0tLSB6U2hpVFBkV1BPK3NGVXpvYS9qNzhS\nOStpa29rWGZZY09Hb3hHT0c0cTVjCnussox2HqzEt1dhN/T50N4teQEJv3hnB9oG\nDCQujYVLgXxT700BO/Mdd6UsfGUotRUspglTmKVRuGXd5m/wCXg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGIwaHgxVmZ6\ncFdtVjRWY2ZUbUZoem1FeDVFeElIb05DVWxMSFowUU1zM00gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpyWmVRMUVLWTA1bnZkamdWRWV4N3Vr\nVkNuQytMSGwvSWtXMFJ3ZVBQUTV3Ci0tLSBEejVhQzhvUEJGNmFCWnBLcEpuWHY0\ndXF6SG9RNEFDczBlaTdHdkJUZlBNCihddNokel0poWKU3Y32lIOrhJayA5f+UbNt\na3ckzRodBCPEDTRXxzGSeG6Oq/WaA1M/1MEoHiLHWfY7XZeZ7FY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEx0aUI5OTB1\nVWozRXhkcUJydUtCdGw1RGx4Z2tBQktkR1lLTks1eC91bkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpmL3U2QXlINGQ1RGdmQjlZZVcrVjd4\nbTJLUUJHQmYwWFlhVG5DQ3c0eWdjCi0tLSBtYTA4RFBjd0YwTG5RUHlBaHRNWGtB\nQVgwTEZoV0VXOHJZUWdjeWZHRlkwCjVIezVWBVGrrS3tu1HMHc33di8NNCoG20tT\nme/TMN/9II/aNmnIa/rixH0nYzqcY3G3Xt3PehbPziB9qzOSXLk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6VDJqcEVzbGltMGNtdmhy\nZEptb0psd2xzRjREOUdVclpKR0M4M2tzRUdNClpmQmhFOWdhL3dpU1RpdnFuSUhy\ncXUxRFgyNUNzMElEQ2lkcTcwMENiTlkKLS0tIElLODF0bktIbFB4MTFxMXBGS1Iv\nT051ZWFkQmN6Zi82MjhRL1J6akNmUG8KV6qe1+f8NgTMezHOTNXf2T7XsC8bycOf\n+jJTRiwNIvw7CiWWLU43PLkeARg0xLZx08354iSEeKWP839kaoTTTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdm1zbjN2YVRPZ2VUVEVF\nVVJ1Z1B6T1IyQ0tOSlVydlgwMjZScTlNVms0CnppcDZHRnlETlVIUUY4d05oNW1z\nTy9yYlRBbXRFMkVQZGhzTHR2eWpOME0KLS0tIGI1YWRKdERTNjUzWDNJQjRJRWZH\nZFQvWFJwTTlVSS9vbndkcGdpSGFPL1EKJ+cbICrnFLqGIV3+NnfDixuFdIixtuOd\niyc9z62MqySpOz1zU0ZRgKOZxFhzgRn+ZESQOLjjmAN0Y3FeaWd/Dg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByYnlldUJPeW4ybkdHYlVS\nUzl2V2FkOVdpUXVLNzVxSkFNZitIWUpuYVV3Ci92OWZ0dzhoUTlkZDhSc2xPUnh0\nYzFzd05Hd1dTd2hHWFZpQ29NSEVBR1kKLS0tIHVsdEVEd0k4RG1LTGppTDVrWERL\nQm9VY1JLNk1hS2RtaGlqUWE2K1FESlkKzmXuABwFDIUfk1D2ajffLXzPZ0f/mdYd\nqy0EFA1fUv0KXo8d9/jQMVF+T4yi3VIxE/FpI90ewKANtrUOzuid6Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYS3BqSzNSa3A2S01DZVRr\nZTlaLzdMSzU5QTljVWV1ZFJ0V1plbXdHVVNRClJuK2h0RW1scVVqK3FrQUpEQ2VC\nVE82azNNOG1VSnlWMmJzK2I1U09RRFkKLS0tIG9obnB4ZURxZHlNQXRTWFhyMzRQ\neDZxeTM2L1BxSFRNWWRMUWRENndOU2cKjklv7uMQrwPsQqqMUmhgWPk5vERa4pGd\nSTx4QfVEYaWhkyDzBPd6tJX5Jt/xIUlI/ruUMqQa/4X+YXiDcjVGxA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-24T10:47:07Z",
+		"mac": "ENC[AES256_GCM,data:mGclnACS2m2tTgSaqKXp8bp9FqHXZjwbB5u4t0h/CgyhltcJQPPQ0KDUW4lkuQFlF/SFYyPFlC07iw3pyjWQQRXZmtxxAhjU14TnOJ1wo6nPElJ1Ytug57TNzJiRh//lMZxMJcaWpwmGj8eUOmrVQhRLdO+7Lw2jRXs8ndIXGEQ=,iv:ezqrUJjS/33c+ix+HxdG4G4lWIxPmynpnMQCKw/hxOU=,tag:3J8gK0jHAIXyX4nOUdWC2Q==,type:str]",
+		"version": "3.12.1"
+	}
+}

sops/secrets/hadar-age.key/users/kurogeek

@@ -0,0 +1 @@
+../../../users/kurogeek

sops/secrets/mimosa-age.key/groups/admins

@@ -0,0 +1 @@
+../../../groups/admins

sops/secrets/mimosa-age.key/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:AuCkA8zyfyvWI4+9KSWUscRiHVmFUjs9wg5McOkKVc4op6aTDq2IIv/rmG1rur2FjYry6xMtpDjMjKFKVfbVpcKgsjD8D1zKKWI=,iv:26LEsj8ccEVI/VuPpl5sAt+NToBkBgJBO/bZFCIxCiY=,tag:AmjPHf6OvirqUHZ+n6+QSA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTFp4eWh2NlZTN05yMkFs\nNE9LaFYwb05xQWY5RmEyVVk2TGhra2JzZ1MwCms2NVJjaGxZSHhERC9KR2dPV2xD\ndXRoNk5GZUxiOE5HTVpDellCbmtKY28KLS0tIEEzdTI3WDFaRHM4dVd5Q2RscnVU\nSTdyUVhrYnIrN2VsZWNYSnM1eTlUMm8KoMcJ2FUh195IHljd2Wm9DNegDvzf+lZW\nL4ywKQ+ug/Xz/2QddHqTzS6sPO8zEsu1L28a1hEhzbYY/yvsLszhVw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeWNIWFFOVC8yWlhMdHp3\nQVZZdS9LNTExV3ZNSVF2MzlLTnVVK0R0SGgwCk8zdjRqaVl5S3Z5TFYxc29McjlV\nVnNNbFlDdE5GR2plM0J6bk54WFpPYTQKLS0tIC9UajJHOWhWNGhlODZFQ04vRmlJ\nSkM5VmdobC9pVEtlZ0xzOFIvV3M1M2cKxcdPGTlSWOPLmMd0NZyvAj8hVGezpPIJ\nBQrzuRcM2GbhQeZzlJ6VXJzHZad3qe/AMPX4V+94Y1pciErus46v7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHFyT2pBMzll\nWlAxN2RDdGxOaVNMVjBFVnJqRG1Tc1VwcXFpVlRXV29welEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQprTFY0WmcycURBbGxTK2NyS2labk1J\nQktTZ2E5NnpUNlZ4THpzc0ovVHlzCi0tLSBFbFdjMG9RTFRNTXYrVTRXMGZhaHFs\nY2wreDRDZEpVb25oQy9QaGlpKzdnChsba779KxP5qPAIvFkEFg/FpOREFmxIziGh\nJ2Ve/KvTQeSEYOBHLsVeuzgYW0XqKhbaslWvcI5b4G9hxfsfjEo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEs3a1BubnZw\na0lvOCtNSEtvbDZLN3A0SUk3SzkrU3hBZmRyc2lBekZzSGMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwoyQVJPK3U1RlZkR0RneVZXbjdoblRo\nc0pvajRrOHlmeVZOdUxPTzY3bkNFCi0tLSBGbGFJV1NjSXphSXdEcFljUXY2VitT\nd2J6cUxvNVljMko0Yjk5WjhjYlNFCsbgrjV0eqyqr4JddP0Z4wEsDr9vsFlqWtIt\nsM0i0QSwWPwH6WqnERRf/P/MAkCnFouwYjiTtiUTduth/xQgJEM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDFhSXhmeWVU\ndVFGYlZoQ01OR1ljdmtPcVYydnZ1eVV5TkZZS1FaMzZHRlUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpmU1JHb21PWG5RUWFOQ2hVU3Yzc2Zu\nS2Z1SkpKaVFlNUVTSGhPTE8wcTlnCi0tLSBsR1JWQURyL1ZXMW9wckkrNXFGUEZ1\nYnJqcGczRmJnYzhLdkhsY1VRbWNnChdr0xmapqKthTVeZz5G6QKQdjPYO6LCHmou\nXUOyNVR3Kkg4tcLY4nKhI40ZWsfyd/zvXQh6EZPde8Uiiw38vW4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSb0x5cHY5UUJjWjJGcUVR\ndGpKZkwrTkVKZ3pjQzd3UDA4ODFSUlFVUmxJCk82VnJNQkV5T1F0dkdXT05oRzBC\nVWdUbkFwdjhxeTY1MWJTTGVtcUM0V0EKLS0tIDB0aFBsUzN2R1dpM0U4NlIzZnZ2\nSnlSOEl1VFB4OVpRQ2J4UVk5dTlFTzAKBp0unrv3YVbOrfupfNFDm+1xxGXF4+ky\nqzais2PFnjNxAQw399P9hXwftftIU4n3XWEKHxmvEgMCOqB0qugw4w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1U05SZ2NCb0pkSDl2aStV\nbUxtc1ZXNGFmcGJQSU11UDBvSzRqWm1NZDN3CnoyTGFnbktTT0ZnOU9YbkJoaWpG\nNUNFbTc2L3ZKTm41ZURUYlk3cWxuVm8KLS0tIGt2bEJJRzYwaGRnWHNWc0l6WWNr\ncDJ1OXAraWxlWExmdU1iUEVINm45S0EKKAfctndTVs2JPSLov/SAOKbwfKyolYqH\nvIBIVbnNXR0Pn+Ma4g1di50XKXd95XwtWfH4LmhFo6xMFNeWPswa2w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUdUlQU2g0TDJQcjIwaHhW\nTUc2YnFYSUdCMzJweis1SUFCSzFaVzhoTEhVCmJQek1ReWhuTFJ5bVVlUS9hQmQx\nanNBWDc1VktMeGRGRVBYWkRkWS9MM1EKLS0tIDRUd2N5RTlqN25tVVBIa3kvN0pq\ndWpJcG9DZkV3eVM1bStnU0ExWjBHY0UKEWkPdR3yYRjb97uSV0DkkZdbbH0W/QRO\n4MGcFqlS9kSn5PU5lgRcbYQjuXQB2nQnPD21VRVYBc0lDXYjJvZRLw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTZTBDd2VoUG8rZlRyMXVt\nNTFCdHk0NVFxUloxbTIvRWVIVzJJd2N1WmhNClhCSjZHQ2Fkd1lZakpKTjBRL3JT\nbDBNYUc5REJXZWoyM3VvVWJFVzFIL0EKLS0tIDYwRG1hQXNnVmxNSU50aUowaU45\nU3U2RnVHWmdjeEg2MVJReGFyM2lTVUEKiRIDsbFWzC57Km5DAojp4PlHuJM2ME+B\nAREFnuU5PN9Shk53yeFdLAynqG8OqBDjGCtsscPf1Mc3caCVKVLtDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-06T06:01:48Z",
+		"mac": "ENC[AES256_GCM,data:zcg2q/LhpU6SCnKBNo1aGnkjkrvw/4nAEiUSVkQlEuP0uMtQqrThb2vxByuLBhcq9oKyb6a+Tq9NkZDEsNWXdTOxeJ59Miqn/LbYC9gnMpg/uhO7zozOOg0hIIBASzvNI1EHE6akjQnhJtWr6sCYJXq1dPJy1fCKgFILeUX3wEg=,iv:f18hvXKQxI2DL/rCiZGzOK0PmWi/6UMc5MjCe1fPZbU=,tag:+SS3ol2D48uAS7Bhkts26g==,type:str]",
+		"version": "3.12.2"
+	}
+}

sops/secrets/mimosa-age.key/users/kurogeek

@@ -0,0 +1 @@
+../../../users/kurogeek

sops/secrets/procyon-age.key/groups/admins

@@ -0,0 +1 @@
+../../../groups/admins

sops/secrets/procyon-age.key/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:Zdj7shkN+V1UDUugyejedqRCqnW4pyP65/m9+0dRxinDnkgq2GV4bAoPC5TZmDL7LbFCYYJqkMN/RNCEyodNBNEYaKlJZFB+JlI=,iv:8AHbuP0EGp3O4CVqFMV8CJZq2mz0yehBFcj9ih0UxwM=,tag:sQGfO6KjRGiqc9IGY45vDg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCeWp4RGJLSlpqaENhb0c0\nSzJWc2RZT0dORlFVT0ZhNzJEbHprVEdocVJ3CnZkaElSYkswTm9ReWYzY3NzVlpO\nMVczem4rY0NTQ3NCajIxR1pJTDVJNU0KLS0tIFlzc1hCSFQzWVdBaHNmOVZSSmRJ\nTGFrcEdzYTJlZ3pMOGtmUTJSOVhiTlUKmph8ckGke8ay3JAhDag5EEgMWH216NNh\nRmJWHUHtBHNBHNu6EvhKexXLOcxtYcSvwB1oc2R7QcYZFE8uAq+gNg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZEFoSUNqN1FGUlNWMmY1\na1hmSFUrRTNTQnFGcldCcVIvQUZ0UzVUVzA0CllkaklmVXVzWFJBeEgwc1c1cDdD\nMG80ZU9kN0Y5VjBVRnFiamtJMzZjZGsKLS0tIElDZXhRaFl1QkR3eCtJSmsrTkhW\ncHoxY1ZUV2VNdFVVNlgrQmNGTGFjL0kKFkoFIjjM7PHVuldu2NYzkVZ00gZoNtVd\ni/LE+V1KZwHNKa16001w73MzjDXKp5wnomLTR4M5yu0MrWGL5IyFmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFJkalc4eE11\nVUh2R28zcm0xZVFkeThYbE1XaS9ycCs0akRoZ1MwS0FPbXMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQppUmFiNzdHMnVhRG9QclJMME1GV2la\nWUoyRGFWbGZORDY4VWVlSUlzYzFzCi0tLSB4Y1QvM0VMMm1BVGlwN0VrYm9vdTE5\nM3hidTJpYittdk5tYVNyMnNSNzVZCoOeHvNxUj36178qcipwgRFDuIyCdlHoZvjy\nHM8NPYE1JfRXwopQY1kWNOwGB2GAIAx0AtdOzrYr8DbC8XG61A4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGYzaG91QitG\nNXpucmIyY2dCczJ4b25ESzJNbXV0ODVCOVJvU1ViNnhBbTQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpTbmpsbFJhNXQwdGVtZ0VEWmJJTGRF\nV0dxc1l1aWlqditXK05DWWlKM29ZCi0tLSBrVTZUSGQ5Q29RZDNCY3IyclhYQ2hi\nQ3JGNmRCbTQzRkMyUno0R2h4eHZzCovOPKfekMWHviyw+VOMUI+4nd76qneT9ib6\nDOnoO0RIVsE493j8nWF9OaqQijp99XZY3caU9SvezIHF4KM0Eo4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdZUFZaL0FR\nL0ZMSHp0LzJCbFprbWVFUFNyZ0h3VU5pam54d3VHWllMSEUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo4c1R1TjBCbHFwWUN2MGhlWUlncmE5\nUWJLYUFZUnRCUmJqVisxaFhjNVZZCi0tLSAvTEF6engvRWZYS3RZQmtmbnJKK1ov\nTUhPTUlYaW5vb0t3WVJ0Mk1aVGE0CjGHYX14uJ4h7bCiXNcg0N+w7wosTxUWngnK\nxIe/DISFZrgCRTqx4BBOcd49pWuKOGJlPqcjTBNtcMws2ehc/TU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0VlFJK1dOamJ2T3AyVlZa\nVUZRQnhscStoUEMxUjU2SnM1czJnbzJVU1g0CllERVU5YVVJMVhPbVRuVVNnbUdL\ncGFrYk5maDI1ajVGeDVCNkdBaVUvcmsKLS0tIFd1YXZQL2JuNGNGdFZTOEoyYUFa\ncHJmUWhXdEFWU3VZVnY3cGRsbXJ1R2MKtY8NS6nHbUbpDB+V8YjrbqIvIMzBtrkd\nvlCrgUo7UJfWC2NGuWPmM0M/tR7tsMzcNlawh6CXRqnk+9aBdj5rrQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQQVkxY2c5UEcxdzBLam9n\nbXRnL2MxK3lobmlqSXZDR0QzajloZDJhY2wwCkVpMFNva2RaaVgzMDZXT1dISm50\nUUV2cnpGbGtucitQNXYxNEVJbGpjMEUKLS0tIHErbE9GNGgvTXM3cHFpY1VsS1p6\na2k2T0ExR3kraGJ5b1VDZHJkZFVDeTAKNFjb5mI8REWBQJzJ5TV9dzHNtbqYaSUs\nJT/qSHpPGfs1lO+C8cP/lU2GyCQxd9SU5GdPKZ579kpKjAE/0o92Uw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOT0lGR29rZ01iZXpuVkQz\nc29VSWFhSlZjbWtKa1NFWFUrVmtCK3NydWk4CjMyYk1HdERPcUdtL0hQZEpBVkN0\nSFkwb0RJSnRXZy9NYmxMMEJoSEEyUUUKLS0tIGNMUDNZT2pBVVBUTXZ3R2VIN1Ix\nVWZVMFYvcGV4MDcwLzFSdkdNcXZRbEkKnLVmgk5w5C3k9be4OkxmeN9hmLY7q0aW\n/7gmxZ6zWJ+PllxtViVqQTqZlt017aNi52O5qsby5wa5utI/wrov4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0NUYzMkllYTBXaEdGemxR\nQkdDbzRiM1ZOdXJncTVtbXlmYkNJTTRIc1ZBCjc5MzlIM25yZHJVQUc5Y2s4bkVD\na0NqdFNIdlZ6NnQxRllpWGdSelNVcGMKLS0tIFNBTWxJd1ZuZm1aUFBBdG5Edk1U\nSVBmbERGdFpNajlsZ2c0R2pHeFdGNDAKScj9e06e3XQTIoK7pPkCtlyG6qEgOj44\nZDOHJFLZkpAWcXGztmMndl2vs4D9OrQyyssBuDYg04lt27FBCYufIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-06T06:02:05Z",
+		"mac": "ENC[AES256_GCM,data:pGdgsaqt3zWxFHxqB1Bbu9PokqwD3E4zQ0l3pAP6OhqwTxQK2R65gbvmXziptv0DBW/0sxL9e8DkLJeKDKAzCnePQIsz9pChCGjt+uvS7Whu6BO5b6jH2pjafsrbViA0o2aQQlvVLFBY+7A5ClCGqp26VwwPiZVwpDsTxxviJpE=,iv:MtgHYyI9jVf7C2GcOjGRR3tNgEx3TrkhP96Sw2JjSf0=,tag:4hiD4T1DcuM5QklAzYK9Og==,type:str]",
+		"version": "3.12.2"
+	}
+}

sops/secrets/procyon-age.key/users/kurogeek

@@ -0,0 +1 @@
+../../../users/kurogeek

vars/per-machine/adhil/openssh-cert/.validation-hash

@@ -0,0 +1 @@
+312dbc4ed6318e92df720ed825eca97293fd07caec663f2c6a93df1e1a8c0415

vars/per-machine/adhil/openssh-cert/ssh.id_ed25519-cert.pub/value

@@ -0,0 +1 @@
+ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIB46k8PKIkP5/+fjBArCYgH2TkHn94GF1t2LWSb8oe2KAAAAIGWyBu9oHfZ1dUbauMofzaJhPNJAFX7BaNHmA1g8Xu1OAAAAAAAAAAAAAAACAAAABWFkaGlsAAAADgAAAAphZGhpbC5jbGFuAAAAAAAAAAD//////////wAAAAAAAAAAAAAAAAAAADMAAAALc3NoLWVkMjU1MTkAAAAgh9IoSV7Q/xX/EvgDWVfHmW4MIyOvx97Hz9zWXc8yerAAAABTAAAAC3NzaC1lZDI1NTE5AAAAQC64VYhvdjw9alvZACX9FUkCh7dUYZQBAtl/H71qcIafSFu+rqMgX1JOw1SV82J0BIpF2asjj7gFYaEgeiN4LAw= /tmp/vars-avbutfzy/in/openssh/ssh.id_ed25519.pub

vars/per-machine/adhil/user-password-root/user-password-hash/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/adhil/user-password-root/user-password-hash/machines/adhil

@@ -0,0 +1 @@
+../../../../../../sops/machines/adhil

vars/per-machine/adhil/user-password-root/user-password-hash/secret

@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:+sw7tdAnChpv4+m0p9yI5NYYqVkR/FXYiVy31BJUGcymgMKvVrRTfqMXBhUqd/Iw5szH/eKu8am0TfrtYzmXSGJ0960bYE5GLWaiY0nmDX8ZVKMOFHOhSDmGVtq7aOsPmo5HdPHWgBXbcQ==,iv:UQ8Dxf8OGNWF093oH2YD6Bu5Gwor6MItNKOjP1eVlQk=,tag:0TB5yuxd6ZCkvS6UzSNHYg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZXFiUzZiUTZLWFFPZ29O\ndGtIZHJvb0trUkFVU1ZDd1BEaWV0L0xHQ0FzClI0MExmbEpvU21OcjRDdjV0R05W\nTzNUWE4xYUhnanFaU3pWazFmK3VKQ0UKLS0tIEdCTzJhZytudkVDZlo4NjE4Zi9w\nM3Qyam1POWUxYlYwdmlPVUJKV29QNTQKPo6+yU5tTLdnIn3E/XXvW1DpJlMvJeLx\nmyYMDaSK6v44Isgmo8KR9Dowbcm16K4cgAFH0156MZwlYJv9S/UnXQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmaFhCKzdhMG53emdEeFd6\nbXRKODdxOGcrN0lQeG9WU2VLV1FJQnlmM25RCkxQZDlCUkhuZnV5a2FrWlprUkJN\ndUQ2OEZDWEFwRmJ3MGFrczB2c3N5aWcKLS0tIFJyYXUvUVIzY0JpRDNPVEhRa1Zn\nQUFBRmJtcEU0ZTVPWkRpK1FJNWszNm8KGCYtzDIAJ7IitsCounbClhpfaA0qYbt8\nYEnjtTs3pNJEA9YeQHqClO70MkGhTiG1Gcoz3acuqpg9ApvB6Q0EXQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1dytdeqtct0jy3vvmqvapgqjf3v9p486jjcpx60gfxwgrptgyyqrs0lj9vc",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIdExiMkM4NXhyK0s2aTdj\nejh4ZWtBWm9xYnBTbWszMTQ5d2o5L29jSVFZCmp1RGF2L04rRUc1dk1MMzZDNmlR\nVlNjQ284cE94S0xLTzFVVWxqNTEvZDgKLS0tIEp1dFlvUFIxbFBzMFMzNW9sYXM1\nZnAwZDVwU3dHMTBaWnEvODhYLzZWbzAKa/tmnyu4T/OpODSW3nmxRAzHk8ogiL6m\nXD6XVnjKT1biG6rYHgGP1uc19Qfqq75mWouCOoBFuhhDsIJ735SZ/A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEszbUZIeWww\nS2h0KzFqeXFRSGs2NkVJYlUyTTkxSlZjQXFyMUZmUm1SVVUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmV1ZGOHczTUxGT293S2dJVUFNbzZk\nc2I2cW1BUmNPQTRHaXhydDQ4VllFCi0tLSBsUjV5VEMrTlRlYlJ1bHJxRUpXRGd0\nNHEyZFpqTnFzVDJlNkxhblR2elpFChQb6CjrZUXMkxGsI/ugLm5V373ycYq7m452\n+9iLMc60+ptbXBmzitMpKSEdi4rNPPzfDllJUB6A2k0qqoawzi8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFdiekcvSWZ2\nRzdhNlMrRk5pLy9IY3A1VGxkeVlEUmt3Mk1kaEx4Mk1GUkUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpnbXA4V21yV2I5Y3dwRFl3WjAwQ3d3\nSVh6eHVOOGFYK1d2ZWtBeSt6NWQ4Ci0tLSBiaTZHMWZtczl2VWlrcVI4UWlEeFcx\nMHdNRHpvUDhxYXdLbVV2YnI1SFljChD37RtQVZG6o+L1FY78jFnaTVHqDxQGDDT4\nlSkULbrZerQYnwCr7jCY3yhNQTsP8rcw/vcjW1PIlubenSEVsPI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEdRZEYxRlVh\nZ3N1REx5MFZFS3VxT05Fc21VQ09XZFVUUGVQbzlwczdDUVEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo0VnppcnRmTGEyUFhDczdzTjdMNHkx\nN2J3cm1pSysyNGh6b3JYNi9zeGJZCi0tLSBXM1B4R2Q1UTlNSjZvS3hGZmZ1Sksv\nalpQZFFCaTdSZDlTdDBYT2lGeUNjCo36rRXKRzR2xBoGgoOaPGY6HkFpbHClCyYW\nisNQ2Xei4sBBCkoQB0niylZnUO9lGm58VbqR+0HWU2sxKCuSPWY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Qkl1RVgrTGhHeWphUUkv\ndFo5S2N4NGNIQlkxRWpITUhieFBEcTVRYjFnCkVtNEhPbnVobFRnK0UvYjRsdDRk\nYW9LUC9PVTdxMWx5YTg4cFN2cVFmSzgKLS0tIDgrbGttZm9CU3V6SkRVckhZZGEz\naTUyWExzV25Sd3lZaGorZjExTU5UYzAKcVwBbprHjxONdQfi9cpSFEIQB7Grr3SW\na0X6bpBvvdIkJ4eKD2Mf7PO7o/vLK0D+FOkVvjVa6SFwbevpIxJHOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlYjR2QlpKT3ZVRWxDSmxN\neTI3V2o5VDRVREFTYXlzZVlUWjRsQ3lwQlNFCmZiWHFGRmVCK1lvYVJWNEFTbWZh\nVEhGMnhVMnh4bWY5S0JFSDhPOXgxa1UKLS0tIHRReFFwVTFXcTlLS2dRN3lXSDRw\nVmFMSml0VDlyeW53LytZRTZFcExLTDAKJrgpS1ta8yUTBgVuIaMMAVv+0mZQI5+k\n5pLHgA+NJkLVsvbDR7NAftg9Mz3pYiEoc+32sFWEXz+sw7xdIrk8xg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZExaT3I5aHB4UnBGeS9j\nWlBwM0gyZEhVeHowTXh0WUIvVktRR3N4OFVJCjd1eEZLNmIxc3VLQ0ZZQnRUOUVX\ncUxHeXFleGFjcGRFd2lscHF2UXk0bEkKLS0tIElDTGM1WUdEMEdTS25xWXZOa1Qz\nSzlvTDlSdTd6NlV6RVo1TlR6VjFmNEUKAtAgVuWbdK5edVbG4crxA/CnXokBKSGh\n4idTaTM7lzIWzuE/X88J2SC25MWLmkJBNbN+VamA1s+Q/hsDVcofbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6bi9rQ1ExNHB0dU1TRzdJ\nUC8xYlVpWFg0S1VpMkZzeFRhcG9TSnpWQlJNCnhUMlYySkJjMHRJN21XMjVOd0Zv\ndm5hVFZOcG13bmpBUXRUalhZSWdlNXMKLS0tIDZCNUY4NHpSS3luc0hocjNzMGY2\nSjh3M2VjNmRxK1p6blR2YW4vQU1TR3cKoIItYjGNjtluplGn3KGfk8hHLXu+ZC15\nhOIUnq/43uA9x/3vNTG2M0ITFZZScrmROi5aPkQkiB4E68DbCgomrQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-28T04:33:28Z",
+		"mac": "ENC[AES256_GCM,data:XXNZzBVGOhnVc23fzMH19gk8aSTU1c9V3h+kOvEXwKsAU/87e9l//KwINJlTGpyHXGjLcg31JjEAXLS/bb0xAi2swoBHGfRZhgWm0mxOMLyPvU3Wh10aWaVXZI3cnaeVTXvBz3pMybFzQ1xXOHyU3NiO3jXXzYoTr1N8drv8CnM=,iv:AW2WHPGKC7NG97H3eOi6zALoi3wm0+zd7oeDnhRnisU=,tag:uyijreNbYxPiL8ekeal/CQ==,type:str]",
+		"version": "3.12.2"
+	}
+}

vars/per-machine/adhil/user-password-root/user-password-hash/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/adhil/user-password-root/user-password/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/adhil/user-password-root/user-password/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:7/uLxqEIohyIz2LRYlsc0lxJd+Zri9ksb9U62uZMgg==,iv:DEGM6cmX15wLerDm6890eqzIii1xyyafF0PeuDnYna8=,tag:3vfyIskBYE8XNSLrtzgxCg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObnVud0F2RnRsMEJZTXFG\nczRxOWtrY1dkaWpCUHMyUzVGbEtheURsTDJFCm1ZUWROR3NuYndGVzd6Y3lMUXY2\naHlHQ3ZkRDRBQnhwa01kMC9MSkJpbWMKLS0tIGM1Y29WeVZ5UllnaDhVMndpeTFX\nbElBMU9Md255eXdvTkE4cTR4Q2w0WUEKXJOSj6CKCZ9AQKnQLocmpV9CZYs8oczE\nU3LONk4sSO9Yq1Z2dCVbmirOZy3dVhoWKlX/8HlB5BiY6XgJ+moZvQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWFl2ZG1UKzBjMjIwUEk3\nYUtYNVNCeTk1ZytQM1g1MnNpdWthbFhrVlJZClJUOGpITyt1dzVlQWd1QW51dmd5\nM1prTnJPUXZZdHVwRUJVREFZTFRTZDgKLS0tIGMrYTJNQmpib0ZtYU9mMXBMelZh\neXNra1dmZ04vaDZHVDZDSnUrOXZ6cncKG7GxJSRnwxByTtQZEXd5YEasTVNmqEYm\n2zvmUtxpBehOuP+QUAMpYTJt1pHz2boNZXnGZG3X6s5BTwPzeBaz5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDl1WkVUaTJB\nSDdvVTltNzF4LzdWRnBaaVRhcVg5WkZYU3lzbkc4emZKQ0kgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpZdHd3eTF3b01UYVZqd0JLVU5vOGo5\nbFZrOEcraGt1ZzhEQnFhS0FmNllVCi0tLSAwL2RoVTFRSmw3c0VHSi9oRDlOUWx6\naEM4bE1XVlNwS3NkWXg4K01KQW1jCiSTCKzDL7J5dm/6LGvbVwFvynRI8xLG39os\nRSEHZaI5yIWNG9TDSUjs5V1mdAdBY8bs4ZX0p7DAEIQliOrPylw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZvUk01OTJR\nMFF2UDF0SERnV05rYWc1MzgwNjlMMHl5cFFyZ2tROFAyREUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpDcUgrR0FCUlRRZUR1L2wzWkVhYTJ0\nWWVIOVNFdVdaZk5uLysvR0g1cjVzCi0tLSBUb1JQTEZ1c01SSkZjOVQzdXBxUTBk\ncFFNQXFldXRtTVN4blk2clFmNDE0CpJCB5AL4crY7IAWhhI9wPI5zPDDfJy8up5p\nr6KAiGiedfqsascymhGk9tTpTp6H8TtSD5nG/d7CiKczkyFtjrI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHVhYWFTZ0xQ\ndEtxaHFVY0hQMVZhNHVPNmxyc0JVL2o2SW9sOWJMWjY0MjggQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpicDJodFJnTVhrM3dNbnNOUWpTTWZ3\nNVBtZHVpOURlMTdrcGNINTRmWCtnCi0tLSBTS0t6R0x2dFpoMW9FSCtiQXdNRHBU\nWjRTaWQveEVRQUFVQlhiRWJEc3BzChXQ52uyAF4gEfl/OM5bBfZABB/wwsnPw0fo\njvZ7b1LrgA297oHtmXg6wx+qMOIJgqUmeWSJ9DNZWZJZfclbfCk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTZzhQYWRJYUJqNHBZRloz\nOE5xUmQ4QVNUYmVIUWhhaWRHZE9vMUY0MnpjCmFIcWJwKzZSMTZRVVhiOElqSTNk\najFYdld5ckFiaEVOVlpSZmkxNng2a00KLS0tIFhJYndUb2NYMDU3am1tU29UWHN3\nR1JGZWh5bzJZbTV0UHFQS01tbkQ5MmMKVqM1FO3X+h9We3hif5ojJFobDUTfozBq\nYxzfIW6ANfnTS1Z5DfQsM+sIvFPMTxLQ71OtkSTC1e9plSgWShEg6A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtMmU2d2dSOEp6c0hFRU85\nU3pUZ3VSa3NSVDRkL0JQaTZvKzhOWDlJaHg0CnYvbE9ldnFyYTRLcFpDQ2ppejEx\nUUN2UjBMR2VaeDRwME0rTFhBdGtBZ0kKLS0tIGhKVjcxMFhUcEZ2a0lDdVBZOHlm\nN05JNmJiRW0wZlExTklNajdFNWJlYncK3K+GSJrC8QksSueGVLUf3T/7E3FFAQPF\nqSvqEr40uaxKx780PnXbU3+3Psp30PQ8Nou1qqDQu2mQ7/B8XtCkiQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1S3l4SCtDUUhTSW1OWURH\nT25oVC9YaEFOUmFOa1BDUmxCVWVweWNFclVjCjdkWW9PcmZTWis2cEZmVVpHdlFr\ndmVoS05yVGlZeDRXUk5QeS9UeExReDAKLS0tIEVxb0twemY1RFJQU2Jjd2Y3MG9Y\nVFJhZm9JaVZZVHJQdHJjRUpYTFE4WUUKtxHGT21uLmDURB6xNclurtKHLykGyHKu\nW4yGhMMvx8MgKlr/QGE72kCywfizz0ZeEVIBVLq0qoBFxmX1nWrmVQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUDBWUTl5SXNyWE5QZnFH\nMHRjUEIrNS9vYUNnMkJtTjgrdHFqbC9YcDFnCit5N2ErWXB3R01peGFJVkNmdEU5\nS3ZvdGNGb0FNRE1HQ1ZoTW9NREc2dXcKLS0tIDRUSU9sQkw4VHNVUWtCNmxPcUxz\nMmh5YVZ0R3kvUG1uU2U0MGZ6OHhEQWsKiNhO4L9VioS0dRztppCk+JbVw6tJNli9\n1M5gT6cXXL6CGnYmExb1Etl90MIQzlbs2ENEaiJCU5hkftyToRoDUg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-28T04:33:27Z",
+		"mac": "ENC[AES256_GCM,data:TmXfLKCSeHy/7+hNP3t363zFryWWeO90WAkcYrta6lDH5OijfICuzmKbd9BOtbXtIzKX1wvNgc2Edx+202661gEmpJY4EzfkIuWOnWzjRVOzvNMSFLHitaFv/CEjuhzj+SIFpOWlF1qiH0VnT9NhD9xP48ZSE6g98p0UdYN+VGk=,iv:LR3r2AkCgjodijaUZXu6CHybjkUoSvgTCoasyGNPDro=,tag:G/Fp53nM6w/YZEKHivnezA==,type:str]",
+		"version": "3.12.2"
+	}
+}

vars/per-machine/adhil/user-password-root/user-password/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/almach/openssh-cert/.validation-hash

@@ -0,0 +1 @@
+33b16888b34a95a17369b08fcae973dc4ace3114b8e639b8fdb697c8c7963005

vars/per-machine/almach/openssh-cert/ssh.id_ed25519-cert.pub/value

@@ -0,0 +1 @@
+ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIEtGjO7EWfPUmYnBHeweieIskAJzytzr2iGZdgE2hpXnAAAAINdOw6Q9jQ7fqnfkjycFRqJ7OymjqZuszpuNHFhjbqNTAAAAAAAAAAAAAAACAAAABmFsbWFjaAAAAA8AAAALYWxtYWNoLmNsYW4AAAAAAAAAAP//////////AAAAAAAAAAAAAAAAAAAAMwAAAAtzc2gtZWQyNTUxOQAAACCH0ihJXtD/Ff8S+ANZV8eZbgwjI6/H3sfP3NZdzzJ6sAAAAFMAAAALc3NoLWVkMjU1MTkAAABAjoQL8XpGoAmBJ0Spe0KpL4ofXp+jtPqk/7Ek2AHfmpR3v6+68jdwsJn2QuElzXr5wT1lw96FEzopdMMWa5gGBg== /tmp/vars-gbpbu_a3/in/openssh/ssh.id_ed25519.pub

vars/per-machine/almach/user-password-root/user-password-hash/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/almach/user-password-root/user-password-hash/machines/almach

@@ -0,0 +1 @@
+../../../../../../sops/machines/almach

vars/per-machine/almach/user-password-root/user-password-hash/secret

@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:/WypDQcBRNzDoSXuOI6NTU7iNoPwHWkQUGzQnqTebGDfg2uhytcDwxubYCYj1kuGocANWAvfZ2AcyCH+FlfjGO67U1gYoLY57EYuXMGyfKleyaH0UCAWjNK/mUj20MKkIpF0UivioyHOzg==,iv:7MsO3+TYEe+LKTkF1WlPiQx6eA5Iqhf1yp/j3iMp9Os=,tag:XPX60Yq1UuFVHYqCt1/CiQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZc1hnOEZHYml5eTJveEg4\ncGtYdkZJMnc3aUV5dzZJczRlOXBRZ0ZZZjNnClo5K2o4Y2lGenhjT2lERFZDZURV\nUlF5a1VJMVFQNFArb2psWktxNUYwRmcKLS0tICtHZ3E2aG84QjNybnRrOHI4VnB3\nYlRRTEFzRWdqVzVkZC9zdHk4NGwzUDQKWYgdoulii99GLsqDGHxWOJMX7UvKWzXq\nqruXyHfthiTIIUV7eb9RQauG9Fqt4i1zfv3J2oNq6nGKlNFgoePt1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRDhERi96VjJsaWRaSnZo\nSTVGWXc1RDBQYjBtL3A5V21uSXpYc1BIa21FCktmS01GaHpsTitiS05XYnc2eGpR\nT2JmNldwSlU4Y3o0SElzT1dLMldpc3cKLS0tIDFtMmVWZ0w5MzNidGVucUxmSThV\nVUhwaWNWTzlZV0lFT3MydTl2NFd5SHcKsM4g3wlSkGSHDzp7Q80JmICBsQlDOPnu\nJrEoNmqxrGqYjSI5Kv81EaO46INgKt/OpMixwZPJMSn2OdJrr4d3Ug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJQN0JTaDNx\nUXYwQm1jSFVCK2RhYWZha0RMY0h4TVgxMjBlcldpWnJQV2cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpuM3o3a2d5ajNKeUNLVXVhWU0xVEtZ\nRFl3Y1pYS044cXk0SldraFFhL0pnCi0tLSBRREV5RUl5QnAwcC9sbEc1akExL2NV\nSEVKNHVKVitNS1JhZFBuYXlDb1FVCqbRKfAyKfvnvkSfwGQ8YSZjrvzl5kGNKod3\nVyS01lblcp5aZSNG/VM3gpS2jYr/1O/t2ShpgBKx6Yqpp498W9A=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJoZHF3b1NW\ncmUyZmdIM3ZpakpjQXNsZzZEU0ZnRUZlMlZGNll4ZVExR0kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpVNUR4ZGlPYjRDd0kyc0NTaFQrekxN\ncmNFSlloYXZBTVh5VFBod1k0UnJnCi0tLSBuenpGc3FsTWZEY2FibXUzeTdHeVNS\ndkFUR3BSMWN1Vzc3R3R5K0pBVFI4Ctrcd7m5WfFAKYpzQ2V46rZgGy8x5cS4XbFw\nhTyZwUyowesWnVrZC2dVr8Ids9a2QdDD+UoAKmk9UJpHUtd5d5g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpRK3pjTzFo\naXpQODhTU0RMekhpaFJXMkxZUE0xL0tKNkx1LzY4ZVRsbHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpValV3cVJzcSt6SGhzZWs1L3lwTWd0\nWjJKYkppbWRvWEYvWjZ6enhXR1M4Ci0tLSBOUE5UbWZzWEJIQitsYldta1NkM1pQ\nVWEyallhWFpoTWZHbTJXTG4xRUgwCi2g8km8bmIo78rKBggvKo4Dy1B3qwilVf1B\nzhU5vTVPts1PCV4vFv+eb0da08upDWBK+SAgamp5YPETUR8KLpw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraU9oSk5MMnVlQTFsaTNi\neXJLT3crY3QzRUZnUzJFQmtDclVzMktLS3lJCmVGNGcraG1scEVpUkRMcUd2SnRo\nTHpiWS9aZyt6eTFTeGpkWGU0RlVPdEEKLS0tIGhZWWUremk0TTZ6Unp4NjVYR0pM\nbmgzQkVRVnJMbGlHcEVENzE3SVVKMjQKiyIp09oF5+/6+pi0F3ALXw8+NP/yQ6/g\n/A4XuBKGA0YZJltRc2mNwW+9E08TTM2Qn6yzIpvrtmPwyigV1WRlcQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3WGJWZGU4NWRBRUlDdDZz\naVFtUHFLL1ExdU1iSmNlYTkvODBsMU9HZVJzCml6UTFUaUJBaW1mRGtkWVc0M0p6\nN00xMjM4V3hXeFdvVTN3SXVmVWc1MVUKLS0tIEh0TTZrWGJkVGoxMXZLbEQ2ZmFk\neGMxclpPckJTU09DaVM1K253V3JldW8KsLKzs3cg92swplS1TkrUsbvi6robV4z4\nNNu0WQMcwoQiU1HiLFqkcxCjNMNkZ+WQkZTYcgQ0uVGY/pldALuB0w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5ZWFxeVhudW5rOWtuMFcv\nLzRLODBpYTNBMWhMZmZseEREYlJnTFZsMWtBCmpYRGZkeUlHdnF0a2hmd2FjQUt2\nQjl1ZHlFRHFaLy9PL2tHYTNjcGtCUW8KLS0tIC9vcXFPelpDRXYzaXRoaHhJd0p6\nbEZTd2NjcW1SSTZhV3ZoaEFIRXZFMW8K0rUVoR2ckfkFux1bX5HMWa1VRggY5sl/\n6MfGqR86K8bx/xvcltZSCO/UcK3aJE4oNIcG2MOUcu0NLqMr3VUvcQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWS0hJVmJmRWYrbDd1dHQx\nT2ErSlpHQkRqbXM2bWFqSkFGU3JqSkFwUzE4CnpDWkVPS2liaUdlYTdXU3pGMzJJ\naHF2Z0FwUkYzWWhwQXIwRmplVTFDZ0UKLS0tIGJiQitDSTk1RzBZRThSMEk5TDVN\nREltTW5KaC9UNWtjSVJIMUZnbGRLM0kK3+GOs5DqjbdRIvDjLrkQmbHtYNefVhjd\nO4slHZZ1hkq7uexzRftvIToXu01ynOR7W/Pb8y6+03TF/hsiuI5LPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRFR2dVB6VGIrdGhLa01Y\nSVc3VE8vc3lXaEdydHhZR1Y1R2ZUbTBudjJNCjk5RXZ3Y2RiZUhrekoybFZWY3Qz\nT0VqVXdkL1ZEYWJ3YWJjQko0SDZETG8KLS0tIFpXcldMSEVUNE50ekgrRitieU01\ndmVPcVAyd3BPazNraHJTbW5nZElZVlkKaCsTjpymI08oe3cVWHF1WMo2koJCdfFw\nvV66/sexVnf19iy4Bdnqa0N0i5W6q0orxzR/UsSq2k8KWqIvKT3Wdw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-28T04:33:31Z",
+		"mac": "ENC[AES256_GCM,data:mcbtycyT0UuczHrtIx6DWdVRztvhMtvihjnAuC+7m1miOcBebajDHii1cyjkSzsagoVXxZF8jYbiAmWPcNkSHTUHaCjz7HTh0XkGZqjF3B1ssWCz3otlL4fJ8hWVbNPLGSNpBN2wqVC50DHAG/tMfcvVIFCcLhW34k5BRef3fs8=,iv:CTrIgsy6VBcQ90Wc00Wy70pH71Mm5Noj4PEIT0xuEjo=,tag:i2YHKA+xi0fp/2SscWSbwA==,type:str]",
+		"version": "3.12.2"
+	}
+}

vars/per-machine/almach/user-password-root/user-password-hash/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek