mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/deneb/configuration.nix
2026-04-09 11:20:51 +07:00 · 2026-04-08 17:26:35 +07:00 · 2026-04-08 14:11:00 +07:00 · 2026-04-08 14:10:13 +07:00 · 2026-04-08 14:10:12 +07:00 · 2026-04-08 13:44:20 +07:00
48 changed files with 3820 additions and 691 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,58 @@
 {
  "nodes": {
+    "arion": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "haskell-flake": "haskell-flake",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733918465,
+        "narHash": "sha256-hSuGa8Hh67EHr2x812Ay6WFyFT2BGKn+zk+FJWeKXPg=",
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "rev": "f01c95c10f9d4f04bb08d97b3233b530b180f12e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "type": "github"
+      }
+    },
+    "blank": {
+      "locked": {
+        "lastModified": 1625557891,
+        "narHash": "sha256-O8/MWsPBGhhyPoPLHZAuoZiiHo9q6FLlEeIDEXuj6T4=",
+        "owner": "divnix",
+        "repo": "blank",
+        "rev": "5a5d2684073d9f563072ed07c871d577a6c614a8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "blank",
+        "type": "github"
+      }
+    },
+    "call-flake": {
+      "locked": {
+        "lastModified": 1687380775,
+        "narHash": "sha256-bmhE1TmrJG4ba93l9WQTLuYM53kwGQAjYHRvHOeuxWU=",
+        "owner": "divnix",
+        "repo": "call-flake",
+        "rev": "74061f6c241227cd05e79b702db9a300a2e4131a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "call-flake",
+        "type": "github"
+      }
+    },
    "clan-core": {
      "inputs": {
        "data-mesher": "data-mesher",
@@ -100,6 +153,39 @@
        "type": "github"
      }
    },
+    "dmerge": {
+      "inputs": {
+        "haumea": [
+          "frappix",
+          "std",
+          "haumea"
+        ],
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ],
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686862774,
+        "narHash": "sha256-ojGtRQ9pIOUrxsQEuEPerUkqIJEuod9hIflfNkY+9CE=",
+        "owner": "divnix",
+        "repo": "dmerge",
+        "rev": "9f7f7a8349d33d7bd02e0f2b484b1f076e503a96",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "0.2.1",
+        "repo": "dmerge",
+        "type": "github"
+      }
+    },
    "flake-parts": {
      "inputs": {
        "nixpkgs-lib": [
@@ -120,6 +206,146 @@
        "type": "github"
      }
    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "frappix",
+          "arion",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "locked": {
+        "lastModified": 1653893745,
+        "narHash": "sha256-0jntwV3Z8//YwuOjzhV2sgJJPt+HY6KhU7VZUL0fKZQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "1ed9fb1935d260de5fe1c2f7ee0ebaae17ed2fa1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "frappix": {
+      "inputs": {
+        "arion": "arion",
+        "devshell": [
+          "devshell"
+        ],
+        "microvm": "microvm",
+        "n2c": "n2c",
+        "nixago": "nixago",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "std": "std"
+      },
+      "locked": {
+        "lastModified": 1775705805,
+        "narHash": "sha256-hiNvXNMkCfWvtRq2nQRwmtKK7TJDrIgpFNF/NIif9sQ=",
+        "ref": "refs/heads/main",
+        "rev": "744e6992353c02fc3175928bd0a7d8ebcad5ac3d",
+        "revCount": 232,
+        "type": "git",
+        "url": "file:///home/kurogeek/Desktop/github/blaggacao/frappix/"
+      },
+      "original": {
+        "type": "git",
+        "url": "file:///home/kurogeek/Desktop/github/blaggacao/frappix/"
+      }
+    },
+    "haskell-flake": {
+      "locked": {
+        "lastModified": 1675296942,
+        "narHash": "sha256-u1X1sblozi5qYEcLp1hxcyo8FfDHnRUVX3dJ/tW19jY=",
+        "owner": "srid",
+        "repo": "haskell-flake",
+        "rev": "c2cafce9d57bfca41794dc3b99c593155006c71e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "ref": "0.1.0",
+        "repo": "haskell-flake",
+        "type": "github"
+      }
+    },
+    "haumea": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1685133229,
+        "narHash": "sha256-FePm/Gi9PBSNwiDFq3N+DWdfxFq0UKsVVTJS3cQPn94=",
+        "owner": "nix-community",
+        "repo": "haumea",
+        "rev": "34dd58385092a23018748b50f9b23de6266dffc2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.2.2",
+        "repo": "haumea",
+        "type": "github"
+      }
+    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -155,14 +381,51 @@
        "type": "github"
      }
    },
+    "incl": {
+      "inputs": {
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1693483555,
+        "narHash": "sha256-Beq4WhSeH3jRTZgC1XopTSU10yLpK1nmMcnGoXO0XYo=",
+        "owner": "divnix",
+        "repo": "incl",
+        "rev": "526751ad3d1e23b07944b14e3f6b7a5948d3007b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "incl",
+        "type": "github"
+      }
+    },
+    "lib": {
+      "locked": {
+        "lastModified": 1722128034,
+        "narHash": "sha256-L8rwzYPsLo/TYtydPJoQyYOfetuiyQYnTWYcyB8UE/s=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "d15f6f6021693898fcd2c6a9bb13707383da9bbc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
    "liminix": {
      "flake": false,
      "locked": {
-        "lastModified": 1773253359,
-        "narHash": "sha256-LogvYVd2NfZnTlxAkl5K9tqX9c7wEEPdnYJsW9WTSG4=",
+        "lastModified": 1774875782,
+        "narHash": "sha256-dCvc9vVUyGAO75lGM+O9LZLfKlOfJ9QwPsklin3k+vk=",
        "ref": "refs/heads/main",
-        "rev": "7f23c5dc0f442de9fe07c076297c3a74f2a34e72",
-        "revCount": 1656,
+        "rev": "dc62a8b75f84b7c9580a34b54745f724b1b0d82b",
+        "revCount": 1667,
        "type": "git",
        "url": "https://gti.telent.net/dan/liminix"
      },
@@ -171,6 +434,48 @@
        "url": "https://gti.telent.net/dan/liminix"
      }
    },
+    "microvm": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "spectrum": "spectrum"
+      },
+      "locked": {
+        "lastModified": 1737981104,
+        "narHash": "sha256-7AGmPPBgLHHWgzzFYDJcyhv/NiuCrpgzg8IyA7Q/H9o=",
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "rev": "3768f4937f38334898c67e03f40e244a57a74caa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "type": "github"
+      }
+    },
+    "n2c": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1730479402,
+        "narHash": "sha256-79NLeNjpCa4mSasmFsE3QA6obURezF0TUO5Pm+1daog=",
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "rev": "5fb215a1564baa74ce04ad7f903d94ad6617e17a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "type": "github"
+      }
+    },
    "nix-darwin": {
      "inputs": {
        "nixpkgs": [
@@ -205,13 +510,53 @@
        "url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
      }
    },
+    "nixago": {
+      "inputs": {
+        "flake-utils": "flake-utils_3",
+        "nixago-exts": [
+          "frappix"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1714086354,
+        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
+        "owner": "nix-community",
+        "repo": "nixago",
+        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixago",
+        "type": "github"
+      }
+    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1772173633,
-        "narHash": "sha256-MOH58F4AIbCkh6qlQcwMycyk5SWvsqnS/TCfnqDlpj4=",
+        "lastModified": 1712920918,
+        "narHash": "sha256-1yxFvUcJfUphK9V91KufIQom7gCsztza0H4Rz2VCWUU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "92323443a56f4e9fc4e4b712e3119f66d0969297",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1774794121,
+        "narHash": "sha256-gih24b728CK8twDNU7VX9vVYK2tLEXvy9gm/GKq2VeE=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "c0f3d81a7ddbc2b1332be0d8481a672b4f6004d6",
+        "rev": "c397ef6af68c018462d786e1b65384abc472a907",
        "type": "github"
      },
      "original": {
@@ -221,6 +566,68 @@
        "type": "github"
      }
    },
+    "nosys": {
+      "locked": {
+        "lastModified": 1668010795,
+        "narHash": "sha256-JBDVBnos8g0toU7EhIIqQ1If5m/nyBqtHhL3sicdPwI=",
+        "owner": "divnix",
+        "repo": "nosys",
+        "rev": "feade0141487801c71ff55623b421ed535dbdefa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "nosys",
+        "type": "github"
+      }
+    },
+    "paisano": {
+      "inputs": {
+        "call-flake": "call-flake",
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "nixpkgs"
+        ],
+        "nosys": "nosys",
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1708640854,
+        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
+        "owner": "paisano-nix",
+        "repo": "core",
+        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "0.2.0",
+        "repo": "core",
+        "type": "github"
+      }
+    },
+    "paisano-tui": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1708637035,
+        "narHash": "sha256-R19YURSK+MY/Rw6FZnojQS9zuDh+OoTAyngQAjjoubc=",
+        "owner": "paisano-nix",
+        "repo": "tui",
+        "rev": "231761b260587a64817e4ffae3afc15defaa15db",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "v0.5.0",
+        "repo": "tui",
+        "type": "github"
+      }
+    },
    "plasma-manager": {
      "inputs": {
        "home-manager": [
@@ -249,10 +656,11 @@
        "clan-core": "clan-core",
        "devshell": "devshell",
        "flake-parts": "flake-parts",
+        "frappix": "frappix",
        "home-manager": "home-manager",
        "import-tree": "import-tree",
        "liminix": "liminix",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_2",
        "plasma-manager": "plasma-manager",
        "treefmt-nix": "treefmt-nix"
      }
@@ -278,6 +686,82 @@
        "type": "github"
      }
    },
+    "spectrum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1733308308,
+        "narHash": "sha256-+RcbMAjSxV1wW5UpS9abIG1lFZC8bITPiFIKNnE7RLs=",
+        "ref": "refs/heads/main",
+        "rev": "80c9e9830d460c944c8f730065f18bb733bc7ee2",
+        "revCount": 792,
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      }
+    },
+    "std": {
+      "inputs": {
+        "arion": [
+          "frappix",
+          "arion"
+        ],
+        "blank": "blank",
+        "devshell": [
+          "frappix",
+          "devshell"
+        ],
+        "dmerge": "dmerge",
+        "haumea": "haumea",
+        "incl": "incl",
+        "lib": "lib",
+        "makes": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "microvm": [
+          "frappix",
+          "microvm"
+        ],
+        "n2c": [
+          "frappix",
+          "n2c"
+        ],
+        "nixago": [
+          "frappix",
+          "nixago"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "paisano": "paisano",
+        "paisano-tui": "paisano-tui",
+        "terranix": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "yants": "yants"
+      },
+      "locked": {
+        "lastModified": 1738072995,
+        "narHash": "sha256-jfwWnAVeQzIBS5Pex0xSUbGk88g1GFF2w+ohOtbRtcY=",
+        "owner": "divnix",
+        "repo": "std",
+        "rev": "2874513c4b76be4c4200779814993b546fe4a909",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "v0.33.4",
+        "repo": "std",
+        "type": "github"
+      }
+    },
    "systems": {
      "locked": {
        "lastModified": 1681028828,
@@ -293,6 +777,36 @@
        "type": "github"
      }
    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
    "treefmt-nix": {
      "inputs": {
        "nixpkgs": [
@@ -312,6 +826,28 @@
        "repo": "treefmt-nix",
        "type": "github"
      }
+    },
+    "yants": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686863218,
+        "narHash": "sha256-kooxYm3/3ornWtVBNHM3Zh020gACUyFX2G0VQXnB+mk=",
+        "owner": "divnix",
+        "repo": "yants",
+        "rev": "8f0da0dba57149676aa4817ec0c880fbde7a648d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "yants",
+        "type": "github"
+      }
    }
  },
  "root": "root",
--- a/flake.nix
+++ b/flake.nix
@@ -34,6 +34,12 @@
      url = "git+https://gti.telent.net/dan/liminix";
      flake = false;
    };
+    frappix = {
+      # url = "github:kurogeek/frappix";
+      url = "git+file:///home/kurogeek/Desktop/github/blaggacao/frappix/";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.devshell.follows = "devshell";
+    };
  };
  outputs =
    {
--- a/inventory.json
+++ b/inventory.json
@@ -29,6 +29,9 @@
    },
    "sirius": {
      "installedAt": 1770974584
+    },
+    "deneb": {
+      "installedAt": 1775632212
    }
  }
 }
--- a/machines/deneb/configuration.nix
+++ b/machines/deneb/configuration.nix
@@ -0,0 +1,97 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "poyerp.newedge.house";
+in
+{
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "poyerp";
+    gunicorn_workers = 2;
+    adminPassword = builtins.toFile "admin-pass" "qwer123" ;
+        apps = [
+          pkgs.frappix.erpnext
+        ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
--- a/machines/deneb/disko.nix
+++ b/machines/deneb/disko.nix
@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/deneb/facter.json
+++ b/machines/deneb/facter.json
--- a/machines/rana/configuration.nix
+++ b/machines/rana/configuration.nix
@@ -1,4 +1,4 @@
-{ self, ... }:
+{ self, pkgs, ... }:
 {
  imports = [
    self.nixosModules.common
@@ -9,4 +9,12 @@
  };
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
+
+  boot.kernelParams = [
+    "amdgpu.dcdebugmask=0x10"
+    "amdgpu.cwsr_enable=0"
+    "amdgpu.gpu_recovery=1"
+  ];
+
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_12;
 }
--- a/machines/rana/facter.json
+++ b/machines/rana/facter.json
--- a/modules/clan/personal-computer/printing.nix
+++ b/modules/clan/personal-computer/printing.nix
@@ -22,11 +22,27 @@ let

 in
 {
+  environment.systemPackages = [ pkgs.simple-scan ];
+  nixpkgs.config.allowUnfreePredicate =
+    pkg:
+    builtins.elem (lib.getName pkg) [
+      "brgenml1lpr"
+      "cups-brother-dcpt310"
+      "cups-brother-dcpt720dw"
+      "cups-brother-dcpt725dw"
+    ];
+  # nixpkgs.config.allowUnfree = true;
+  services.ipp-usb.enable = true;
  services.printing = {
    enable = true;
    drivers = [
      pkgs.brlaser
      pkgs.gutenprint
+      pkgs.brgenml1lpr
+      pkgs.brgenml1cupswrapper
+      pkgs.cups-brother-dcpt310
+      pkgs.cups-brother-dcpt720dw
+      pkgs.cups-brother-dcpt725dw
    ];

    extraFilesConf = ''
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -1,6 +1,11 @@
-{ ... }:
+{ inputs, ... }:
 {
  flake.overlays = {
    packagesOverlay = import ../pkgs/overlay.nix;
+
+    frappixFrappeOverlay = inputs.frappix.frappeOverlay.x86_64-linux;
+    frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
+    frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
+    frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
  };
 }
--- a/sops/machines/deneb/key.json
+++ b/sops/machines/deneb/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+    "type": "age"
+  }
+]
--- a/sops/secrets/deneb-age.key/groups/admins
+++ b/sops/secrets/deneb-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/deneb-age.key/secret
+++ b/sops/secrets/deneb-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:W3kzpxtZXld4cgeTubrTYbIYzAY3CbQjaGeUEIF0USrKkjxHdqPKRrLGPj3OeLhJKWs9AZnKBgTy/bJaJXi6eOcNnM2gubY/lFI=,iv:n7f2HfODC8YEJKn0ILIgbMP2L2beADjm0olrRULtaTE=,tag:0hHEyg0Fzeyq780FGosJtQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXR4aVNHTEN1NWdTdXgx\nQ0tHWjRCYWFJcVh3WC94Wi9vRlFxTlZOYmlZCnQ4M1FOczJWQ2N0NCtNbnlDM25o\ndGFWZFZOQjFHczQxYS9NL0hFLzdHTFkKLS0tIDBNWnV0UGFxMUxIZ082bHFKMnJ1\nd2NsZ3FCZTh4aytBTUdzV0FKWnlZWjAKXTug9QehoAjumvq6cr2JgnHOB1l4Easx\ntXbpbGNm5a0rsYA9FxiQKhk37I7e5RbkxJpxnrlwvlN2QThIOqWDWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHcysxTFFBK1puT2Q4UnJ0\ndmg0bTd2bmQ4TnRmSGJNeTl5cENSQ1gyanhrClV1cmt4TmlLZzhtSFBnQ0Q5dGMr\nVUkrMjF1M0c1UmJENHlIb1JBUHpuTE0KLS0tIGR5bEM1MEFIbjJxWGtKTFlpVkpG\nWTB5OEF2Z1I3azVsbTVHZ1NUeE1VNHcKm1gCaRCGahNVrYpIigDR1KeDlmFs/bQ7\nclmcsZb+RiCXU2frNqgXqMyhXDQ6eELCf0zpqZ5Tue5LQAkF/6CNKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDVkWjRhVjZB\nQXBlT3YzUWNKemhLc2F0RzRHODZMaGtVRGg2SnV5UTAxaTQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3dGNKcUxEOXo3eUdzbnYrUm9uZUJV\nR3FwVmpSYzd4Z2RsRTdGTC8rYlJrCi0tLSBjcTc5UkE5Wk1vV3VLNTh5Sm5vSU1H\ncEJCdjA5QUlaVXMrQndTaVZneGprCu3I0FlZ+bRmxkkFnOqpOa6v0FStKOBlsTQl\nQMdFClzFjXQP/9i/xBXWIsrQ8fC7jiut/M7zDYtdQhUaIiLG5R0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZadU1TQzIx\ndTFmSGY5amNmeFNZRERaaDBZTmxqb042ZVhVeVhtRU84Z3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRW5wWmlodEJPbjBqdnluUkRMT04z\nclRBUUpYMWJLWkk1TzhHOVJOMDc4Ci0tLSBDYWprM3lYN2w1VFVCdXJleXVpMWFE\nM3NZWEdoRmR2ZlRQVGdVQ0F3QkdnChnVrO957ng+BWe1lMVl7y2+Db3TsXx6se3f\nXXkdV0Zzg6STsdSKG0+2TG9Zw1gsDeFcvrMZdE/i92Zn2lYYHD0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlHdkYwQytj\nc0dkUEw0RlVWQzV2YWJnem9nSFpyZWNEazFUcTVXa1ArblEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6akdKdWxKMk1lNEhNL2RCYTVYT0lq\nZGxHeXRwWVQ4MXgrVjN4VEJoQ3NjCi0tLSBMQmVEejBwaFdVVGhDcEc4OUJMSXEr\nT0J6WGp4UzFxWG5kajlzWkt3Z1JzClGHNfyWCLbMeHr1Q/nWblcwQSYi2j6V6UzT\nanPgXMxfUO7qzGLJ9ybrPFxjyHLzAH1bBjVTLmig/V+jlqB5DO0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4UjZyaE9ySGdiQnYyeE9i\nbldRNzZCWnMvQmNseDl2UlVqeTNVQ3BJbVVrCmxWUmUyVUZ1YXlzc3Rremx6Mmlz\nZ1A0VlVPYS9lQkxicUhOd05mWmd6RmsKLS0tIDZka2N0eG00Ym5iQnR0RmN2NGFX\naUIxUnBleFJVcXNod0V3bUpiMHYzaDgK0l3YaBMqM1Kz1jZ++zus5tBWsynO0TsM\nLmgjxptgc3uFz4j9IrS4MJm5gxdTYEGGl/w67CG0BkiE/+7c/BCtOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNjlEa1ZPUENFcmhXcmpD\neU5obkJ0Z2plc0V4TS9IODdMS3pFYm93MURnCnZxejBtQkxQMHRTY1BoTExhb0pF\nb2g0Mld4MmJDMSt4Q29PNTh3eGoySG8KLS0tIG05Qzl2R3F3MkRQd2hMenhYbmRU\nR05kU1ZBQVI0Y2k4SlNFalJyK1ByZE0KqYpRiC/Ta1mACm/H+fFZ2/p22oVHYheB\nD81C3mPcGfM3z9pH2TAxwh9V4i1E4Bsio2lA//fJ174HiGbWr2SLNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSUxBNHFJVytVbytTNFFQ\nRGFmd05CVWxzZzZFd2cxc1FGZ2dJRnM5aVV3Cnk0MWVRekd4S2dJcmxFUXhpOHE2\naHlxY1g4YVZiekl5aUJjalQ2Slo0MncKLS0tIDhTbWVGOE54Q09HeUJhbXEvb0Fu\nOHNEUkczU2w0L2ZkZHJsWFRpQlVTT2sK8RiKwY/waLn7ktbmh8+flByF9tN0RUD1\n78KVpKXp4SBWCp4Gr3tudZNWKnLsummhzxvNWY0FO3vOYK32SYFJ5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYmRWWVZ6VFF6L2J3OWlK\nUmdPZXNldWtHUHFPZmtEZ0VTTnFEZ2kvMXl3CjAyaUVNR2NmQ1dkTnVnNHY3Nitp\nY0Z4Rk5jK0gzbkl6ZDBHTERWeXg4UzAKLS0tIFFrREk3RnN4YTczTnoxZVZHZFQ3\nczlkd1A0VFNCSzFlT0t5ZG5xdWpoaHMKycCr9bQi7arZrREZWmbal6TYRxRj7Vmo\nBGAmgnS9JpMdojO2wbeXfA9NixznKc1SUgXYefsMIke29kUUM1Ij9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:23Z",
+		"mac": "ENC[AES256_GCM,data:7P6rZqkfnyHBRGJ6y61QMH5+fx/hTtOv0Qv0gBm3PF3vm0UH7oii5ztgx3QeImn1k44ctuA/RYMp0WTMHG6I3Uob/qC+XK5DTWPq+H2wx4qzb8iCR+63g2peqjVq8RV6TaXtJCNgLKf8K8OajMbBeLXZSeUmWtyxyGaDmIpPwTc=,iv:leBWe83Urp3vTMbBBNgihTO8DJ1RZ8+PfcdEsBAyEZY=,tag:Ix9vF10M77AiNF9h1oD8GA==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/sops/secrets/deneb-age.key/users/kurogeek
+++ b/sops/secrets/deneb-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/deneb/frappix/sslCertificate/value
+++ b/vars/per-machine/deneb/frappix/sslCertificate/value
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/vars/per-machine/deneb/frappix/sslCertificateKey/groups/admins
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/frappix/sslCertificateKey/machines/deneb
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/frappix/sslCertificateKey/secret
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:VG8f2SofZcyMuITng+DsdB7q+4fWZaqX+MvnzjnV2WM=,tag:xf+g1IRU/rTXUdKU+LrhsA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQ2JTR25wcDZKeUlOcFRU\naGsrZWhBL0tEZEtHY3JYamtERVJjOE9VZUZnCjFFVG9UM0lHL0Z2R3RMc0swK0hI\nYXBweUNlTHBZUUxDb2t1bldMdUVVd3cKLS0tIFByeFBFNkh6THpoUFVRUnZUT2tV\nbVVsSkpNSktGbGE2R2M3Z3hBd3I5ODgKvLBZoRTMz9AzDnowblNeToSpA1Tg5ulz\nBu3iuGsrAY4qEmMF1TBKjQN+W0juDkobyd+sdW2H4dib28ZMSRnQlA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqVXhDMnhzZTZ2OG1EOGhr\nbGxYaWpvaThoaXNPdmtFVGJLOGhjRzgyTWdzCjVIZnJwRlpGRFhlZFhyKzVJcHNM\nS1ZNN0ZpaUtnQzBHRWlySWNPYWpXNHMKLS0tIDkrd21QeFBuZkQxcmhXNDRWM0VE\nVEJqdXgzaDVoZnR2Tzl4aW11VWNPaEUK70iRdQsvKHL/ewhVtvE082Bcapom8uvd\nzr3fj8l0KT19ztMWyQsP7UluXfB/TNLNdUp9C+tUh1qiqqtWkbDAYw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpUdmt0dE96\nQ0o1Y1gvU1JKRFFzNnRVYWJCZEQ1MDlnYnAvRFZVemliWEUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDZUFPWVdMZHE5SWZwenRpVUtCSXdT\ndFpibGpqbFRraW9vZWJlaVh3TTNZCi0tLSBUZlZqR0xTWVFZT1l1S1lSeVEvYUhB\ncXZBWU9uQU9hMDQwcGs0Y2xWZThVCk9wMQoLiigzhjevvPyHVFsv+1D2ATEzoF8n\nskTLxJt/onitX4zUDqOtwis/yKg6umcBfElpT4x/lSYnr+rRStA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1SK1ovUldQ\nVHNsUlF0cmZFYzdVYmg5bmJoQmFuaGRVQlJEUVV3OEhnQ00gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpzZERTdDZpdzdlaVBrb0ZyODRJM0d4\nckpXaGdEYlcrOTFhMjllTUhVazdnCi0tLSBETHNhR2Z4aks3d0NnYnJRTFc1RlZa\naU42WThQYXpUQU9YbkNqUXY3NFZNClR2SWhaMn8mvctM54wAjBUqePjt/o+YIe+/\nzCQXADUyDDSMK8UtzAERfKz2FeE+CPWR3kKW5jOZPmjzy9QCook=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpyS3hjbzVE\neURwcTFsa1ZIZ0tsNXVuWkpxdVBiQ2I0aVozSGNnaVNwQjQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpuUVEvWnI3Wkc3Y1E3Tk9MQWRSL3di\nTW15dFpUY21INnQrK2RTWnIvTzlNCi0tLSBZNXlnQkYrK2RJWHUybytBblJNckQ4\nTDdRWE1WMkFHRERmQnRULytzR05vCn04sBaRg1nrIbYZuCteExNabRsPGgv16EN8\nqbPzBM0dqG5reycayrllrwCgPCaJebedevbBPeLxVpSIbojmv/o=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3YWVPZ3k5d1hORm5EcVli\nMWNuSnhJVVAwV0ZOU0dKdXBkR0NtSWw4UWpRCkJoZzQzcFl3MjlwcjhJb01KVndy\nSlorVVFrd1pJT0tHTmNhZzE1WG9rcGsKLS0tIHNMTWlYdXU3VXRVZFRrNy80RWdl\nTzcybk1SMnVMTTMyQ1RDamhmaUoyc1UKTudpW+MjGmzRezVkniqThG7obPelBoxJ\nbvo1BV4WfRdASI4ViHPPGc/FbkXNgk5io9ZnFs5/Whx1qMtm1kqHcQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSC9aT1hBSXp5ZmE3TU9E\nYlExU21iU25PSDZCM05MSU1Zc3pwZE1hRVVnCjRtOXE2VGFzMDdZWWFSSTVFTkdN\nOGYwbk5pNVU3WFNXbkNLU2hsUWl5MTQKLS0tIE9Kc1RjWmQ3UEpwVDVTRVFWUzhS\nZTlzK0FnT29relhsTHl2Y1RLOGNiWWsKl0IjtZF4Kzg5b5BypyId59oqA7nC19IS\nS4eEiypAWykAbUe264KcS4dQNLi1ogaaezQCX+J7W8cYxDFLZxb6vQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzYnJ0WGpJaFc5N056ekoy\nRWZqQ1hPci9xVHJrM0IyUythUFhSYlR0Y1F3CnpiNHFzTEM2T3o4ZGhGd2x4SnV5\nNUsreDN4NElSQjVRd0JtN0UvbFpvZnMKLS0tIExoMW9Wd1lLd29Dcm5BbmVQRmJX\nQmpnSHdkY0U4OXBNbWtzWGdORHlWT2sKg+s4QATz2lvrw3qhIk292GQ4Aqy3G4b6\nD9GpNy+pmbKDX5JfdVvpLR23JYlD0pjRWW17YyqfAuOec7h9sLtqPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYWnRLQ3dpRy91eWJPN2ll\nanhzZzVoRVBNQUVmUDdUNzN6VnFzRll1WXp3CnZ3WWdmZFdTRjBGQ0JSWENFU0JG\nVzZsa21WUGEvSmxMWi9wZGFhVE51cUEKLS0tIGpKTDA3ejdqVCtKendQVm94TFQ0\nK3lyMjg3OVVJWWFjZVgvRmN0QlFWZG8KfUB1d2WRKpmoGtHwO8XjZietLxuP1eBZ\nkiLJiuFG5uwd7mjeZK+evLlszjZK9LLDqDNz+AF/LeKcjg0bH8Busw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJd2IrbkxiVmFXRDNRYjBn\nQ3o4UkpJKzZpTWkzQ2gvU0ZIRzVWZk5vZjBzCjJER0lrVE5JYjhrbDNPVy9TNDE4\nS3Bzd3E5V3RvZlhweGF3bnF1bnlrT28KLS0tIG5DQmdGQm0rVndMTHlHeFl3a3pW\nNExheVNramlmclVTWDd2MFVtaDRPWEkKMC6X3K1WtObPCHE6BR496oI2OLoJX2is\nwQ19TNY6LzE9662Eil3x9LJInI9M42P2aS5JufraEDSnwVDlfrWaqg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:25Z",
+		"mac": "ENC[AES256_GCM,data:MkKred8LUUblnsjwHlOiNE1+YZAR31iiBC0WkUqfIhaI6TyT1W8Yko++Ojz+Pn4d+EbddIDgfKk0e6Efe67ekwlMIZk104Kdl3AEYv3wHLprAqHLEa5HNv9oUcK06bAsv84pr2cHyo0dMae8dC/S2h8U2qvyGRcHAd55EugBkm4=,iv:+004aRdyEYpkgQ2uux/AnEwFhT7dsq/k1VEdhSv39iU=,tag:bu3IkegDEoonSlqoEX23+w==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/frappix/sslCertificateKey/users/kurogeek
+++ b/vars/per-machine/deneb/frappix/sslCertificateKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/nginx/sslCert/groups/admins
+++ b/vars/per-machine/deneb/nginx/sslCert/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/nginx/sslCert/machines/deneb
+++ b/vars/per-machine/deneb/nginx/sslCert/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/nginx/sslCert/secret
+++ b/vars/per-machine/deneb/nginx/sslCert/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:vwOCR1BDRVKnBV9pzUdgwAzmbjbxKQKVnPmUHBB1ArI=,tag:S7lbbX1Z3gzTxS3wIlP2QQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQ0J1bWxQb3ZQSTZvNnpi\nV2tBU0pQUThSbjk2K1dlUnMvYnpVTC8vcGlnCnNPby9KYlI2b0pEVnVoREZDZ05r\nT0dyUHR2dUozWnhVZEpPcExVRTlMZEUKLS0tIDlUZVN3TWhIWjlHWGtKT3dhU3A2\neE9XcnpvWTBzMGorRmswbUN2RitDSGMKiTdr+kDugRdTNWQ0QMlGyD6jxxmAeEnt\n4qPejOaVAdmHxKqyuPIZKwp4Wp5PTL7lHsOIkOdyeGpGAwXKsB3kZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5TkZ6ZHM0QjVidTV2bXFj\nNTlXcDB6aTAvU1NCWHRCY0RPckZ4eHRtZVFZCm53RnozRmQ2UTFEaVVkbkNjQi9p\nL3BXcjFaL3hzVyt0OGM1dEhuRTVhbmcKLS0tIHNoV2xrVEdjNlVJdDB2TGxOajky\nT3JhMlhzZVoyYnlaY3ZEb0FOeWZ5L28KPj7M+9rw0Zy4O/yVs6te3q7CB/k8EJYV\nzXw2lEG+WB6vkOXL3/zGnL/jqbatkA6+JzQDi54DmJbARgbSHP3n9Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZlamJwb3FI\nVjA0V3BFcFhxcExiWGUrelVtTWJ6eVI0UjhLcFJ6b0lqaTAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpuaGhtQk9PeC90UHQ5K0xYVzQxSVdU\na2ZhMWpDNVZML2dqeStreVN4N0gwCi0tLSBuMnFjK3JtdHc4WlRPNENiUTVuekR4\nOHdRRW1rTmZXNkZuUnJZWkpFd3k4CuMbqDigD/3N9NNCwwyTmmwxnL7rcUnx2l5c\nxv5B3kMdMA7DlWajqAurYoY152Gq+qzvXPHxYw6rhCWFzqipQPo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHArR0EzTDZH\nV3hMdUx3SFhJT28ycmYwUmR2NHRJUlZwUnF4RExld0xZeEUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp5SVByZGJUSXhSNlJaTVZIT3ZCTlBV\nVzZLTm0zWW1KV3BUTVh4SFdPK1RvCi0tLSA1OHVLTWRZZDFsRldtajlXNmxCN0Q5\nR3dPeUo4c0YrMWVObmN0NlRFa1R3CpvbTZQF3ylbRU5mi+AJLmMXheM8sTohOGaN\nYLCGeoYVmB0d3Lqfq1me4fe8RACjw2KOgCZTAzoAr5xxyl4eVwI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFzYmJPczV3\nMnp5WEJqdkxsU2JCOWQySkl2UUlVNU5jd3ZxVDh0YUQ3aTAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppMVk5UEkxVXd3RFREY0wwNzhMMU5L\nRUx5NzBiRnpiQS9WQWNxa2d4bHdZCi0tLSA0REhVSDdpRUNmRHFxOXVxQi9mREZK\nYklxdHhncGdMMWFSeEpzbE1FZXJRCorK2owwbsG5Fbtht3v8l/VbZxbkbW4i3tI6\ni+aQ72woGGJKZaM4zY4RfuKxrvVo65+5bWjVE4dy5E59+s4FpIU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlaGt5L3NSSzJ0azBCS3Zp\nOGtwN1lFOFJnd1lOSHFNUG1MQm00NWhNaDNrCndqRmVzaDdyOXNRSEJuY2N3WUgr\nRmgwMVFjT3I2NURTRnA5R0lYZkE2eTgKLS0tIGEzMVdlOGJSMzJyazhtd3RBeFBm\nQ1dEdjJ1SDVRbkNhamUxVUc0bGFOd3cKcusemf+ybWUIL1GPu7ibcu3OzhXHw8Z+\nLYZApbp42FTNQ6N4bO6W2/He8reuNcpCct+gTujCqBjyKtFmd5u84Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3FJaENzdzhUaFY1QkJN\nVjdTN3VSZlJhRXFQODcxQVBIRFBnR3NFeDNVCjkzeGRmUUE2MlB3VGJXRUloenpo\nYmxTQkdxblhCRlJFVHlNaWZBVDlGdWMKLS0tIHNFMzdtWk5aNUMrMTdic1A1NkZZ\nNTlIdzlmRjZzdEJkZXFmRXVYQStzYmMKZCy36upJmvXniHjWS8OkF4RWBijJuQq2\nuLQHr+aT0jSdveQP5Yr5ebhKwPL9HuGQhhDig46/3vuIzDZf9qdSuA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiTmZZR0JIZWZwSFU3Z1Ev\nTnRDRTNYOHNjVnVVWWkySHFPVFdLa3JSeHdjCldIdkc4WlJrdGQvdVBoVjhMWFM0\nSUZVNitWOFpBZE50d0ljd3RodlhnVWsKLS0tIFkxV0YvcEFvdTJlRHUybU1xcGFw\nTThxUTgycUMrT25RYWR1NzNjQlBKT2sK2s+prK9BsO7gDCG3cPUFB/Q5+ZJvpX4D\nkBj8kl07THkWdsx9lsAJRmn0enrEXvuxlMFC6mX1dT4XvmRx/jF9wg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxQkpPU0pic1RvKzh0VVNa\nRFdIaUlDeEpJSU9hYnkwM2pRNktZSENMa2lvCk1JcEIrby9kT2cwbHR2VVRHWnl2\nOG5pdmpxMmw0SnZvYk4xQkJVVW9JNEkKLS0tIDZjZ0FBV3dhVWdrVXE2RmlKSGVG\ndisrODJnSWg4YitUcjRMTzR6ajA2SGcKrTK937+OVG9WlHTMPM+IIdiauzgj+LxP\ndy61NXsGdtx5p1s1O77djv3QFStz5XlpvBoMpGmiW6Q7UFheaDehIQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRUV5K1AzM2s5eVhFRUQ1\nT1NJd05oS29mcUFwYldDcWhLMHladUptdFJRCmxrUFRVZ1pza2RXYlJSMUd2cytU\neVJGTlFqdUxkd0ZlYnBwcHJIQzR4bTQKLS0tIDhVUWg4cGdJbmhFOTErTGtYckZJ\nTXZSVlZwdlFMWUViYmNmRk1lZGUybmsKZbmg12i9L/0XK1f0Nxz4/MO4ytqxA+lJ\nHuAy+dChjUo9/pdhF/19gPvZ9O5RPkasfck3zk/rgf8x7R2LlI5WvQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:26Z",
+		"mac": "ENC[AES256_GCM,data:0nlSL/vjG51orRfvlm0gk6sQHBhPaMeZ2HNvTZbCnMw3KYd/UzNvw89s9/SvVN3/DaohUul/anhpj2qApKWsebh7/4jYFQbnIwQ9mK+Uua1Gvmx2MzmMEQGv4Ge5o9bauQ3yIdXKW1j6QbfBrxLhem6Dr+hv1NfW0IV1+aF0weM=,iv:p9tuVgZWK2Dc002uVHlUHKb6vNqAZEQUdEZc1hGTq2U=,tag:sL9xq38Mq+D6E1p1l6ir9w==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/nginx/sslCert/users/kurogeek
+++ b/vars/per-machine/deneb/nginx/sslCert/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/nginx/sslKey/groups/admins
+++ b/vars/per-machine/deneb/nginx/sslKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/nginx/sslKey/machines/deneb
+++ b/vars/per-machine/deneb/nginx/sslKey/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/nginx/sslKey/secret
+++ b/vars/per-machine/deneb/nginx/sslKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:IVmlGqUXSq8U6qeTRb050xsCznRbT9MUQkV+Hd9TEgU=,tag:gGz4IYYpRMS94ghJi58M5g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZnJtRzNwcnBHOVVXWnF1\nSHQ0K0dYR0cwN3hwZVJ4MWN5Q283SXV6ZUI0CngzSjVFYXBpRm4yWTYvZUVUcE1I\nQUEzVEtvSXhQUitBWmIyclpGeVZ0NUUKLS0tIFFrM29FZ2laUWJNS2YrNTVuQ2JL\nSXlkYTVyMFBIT3dQY2UxcXRnL0tWdTgKW69YXIuuMrWNDzup20yEZmYrKzUVxOmj\naXrmM8ZFEqmBfSzkynBgycnSyLhiJSaxR7pzVxTNPBwfsyo13TYAIg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYWlUTzZLRGx3eVlkMjNR\nZk1vYTZTdEp4VGtFTXl2V1pMYXJQQlM3dldRCnM2SUJSdFdCRmd3dUZPblBVYVlu\nV1dHNS9vbEhSc3FxWXcvT3k2UUpzME0KLS0tIGVUQ3J1NnVIQW5wRWZQU2NjcEF3\nTlJOa1pxTWlZRkc1MUpSSHZlMWpLS1UKjPocvt1FlkwtdDJg0O1hIoVH8wwXrURK\nRpvWsI+5leFQqmJoLWMpyyDcudgwDkkPHKH4vEWcFgD36yikGujuUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDgyQkY3SnQ4\nek44MlQ3c0hsT1IzQTY0UVJ3UFVtSXA1a1QzU3c1bmc3Q28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp5U21GNURQV1NydENuLzZrcUxjaXN1\nM0RPV29MRVMwSWNQWEVZRTNQbStVCi0tLSBnRzMrRCtNWEZzN3RMVVNYMUJockJu\nVlZZQUl1OHpoNXN5YXRYelpmR0pzCjk2dVeJKJEQrF9RTAXQoj+NRzwmh3/SyMTb\ni6epBcPmNY2mul5+cWn+zbeTtJbzrG1N5nCCdelymLroCaQpxig=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFkxcmo1LzdX\nVU5qcVhhdU15QU5iUUpHMkw0QytoaFdVcDlDOFBlUngyV2cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpHRnkvU3d2VVRrYVlWQ2pSRFFOQXVZ\ncDNjVklodTBUTkQ2MVVNd05Od2dNCi0tLSBCSlFuc0h3WGhuYlFFSE83bWlBTUtQ\neWc4VVEyclJiYWY3ODdaNHVTZ2JRCjkz5b+/UU5Tss/6IgRaiBE8iWm6BSiTRM13\ny6cyf/DkpXCR7AOcJ5ohdkPxpockckHm5Zv1vkrkubyK9F+zA7Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhjM3RiZXNj\nVHAwbGVReFdiYVFFSGl5Mm1aOHBQTXFPMjlQb0xzTExBQVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowcmxyUU1DOUU3NUordjRXWmlQUjIw\nQSt4RGY5WnJHV3RKSE9Yc21rTW1FCi0tLSB2WkEwdEsxWklUMkdPR0NCUktlUkVI\nYXlsSWZQRzFFRkpGZHN2OEhoa2FFCs9DBcbqmSEf4U2aMUgr6hwJTjneiclLovNC\nFom16JjYg3ZGD7QGGRrt8eUCmE7RqrQm1hGTt9TpiP9DG4UOzc4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3WVNobU1BcDRiSTh6RmV0\nckkrNis5amE3bHhqZy9HRlJKNG5QNktBS1JrCkdnbC83aE1lVzYva0UyU2t4Z2Nw\nYXA1M2NQaGIrQVlvY1pORzB6QWZ4OW8KLS0tIGFxMm5GYVpyeFBpbVJkemJqcWds\nb2poQkpyRVBLYS9UOVFUcmpRL3U0bk0KOZvRx9ruBT9yTMSFGiLH//du6XjZ6/7t\n297iyfWdHHESGn50KpZ2DpWNz3G8Zm26YMDJ1suhVtMbRImgO1nBcg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeWNRbTdMbHJhaU5makFH\nZTRSLzYxdzFHS3crcDZPT0Ryb29GaHVldUIwCjdYMXpUTzRxVzRGWm9jbTQwM2JO\ncnpMRndnOEFFTElzTXJKalU5TnIwencKLS0tIFh5bnI1S0orUHg2TkdLc0YvL1p1\nSm4xcnVhQVRONit2aWFwc2IxOUxHelUKNAhYAD6d6Ene9wIH1Q7OLWZcSPaMSdYx\nnhXWq46k5Omjs2kKDNGMkvEzUs0NgT6GuCiOepMXWTI+0M3DwDHnOA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPTG5XaC9YZnlPU2xKdUV6\nQm1pY2NqQ21pVHFuaVM3WFgzYXp1UzJzMG5JCkw0MHB5OG9lblJ0dGlzZjNxSDgr\nMUdsYTlPRWsrYzVFZnBTb3Q3UjFJNmcKLS0tIDdjL00wTVJJUjVzbzRQUW0vb0F2\nTVZwUVkwckVkWVVLRU8yR0MxclRWZkkKeD7U5cN274hrdWUQfYnvMyZyhMsyHHJj\nSNaLOqxwweebxTUDrF93aPtVBCUMIwDMRW/Ombc0FX+Ol8dXieMTLA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiWDgvUzEyOXlZNGtSZ0Zm\nMU5POHFzS1JCTXRLdm5nczBXLzBGSWFXdUh3CjdlVU1seEhzNGcrNW42UWY0bk9x\nTUFWSVRQMnNDM0htVjZsZ2FkeW5LZjAKLS0tIDlUWXBpSVhTM0EzbUVlOFhzWWFG\nU01VR2dMQUsvMHRMZnk3eUY5d0xHK0UKo7ALG9Z6EaQ1TvT8DpEERAHEeNy2Ycho\nwT3/Wjr8AdTpinGE39OCSsFuZ9htgBCr/YLFga4KbvQAsjzmPTdy/w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBITTAxdldsSVRwR2tsM1M4\nOVd3Y0tZT3VpcUo3cDZmeVpDdkdtNGYyNGhZCkhPeG9xUHFRcmNxUjdXOExDUEl1\nUENFT2ZtbHRiMi94QVFTMm1qUEJKVkUKLS0tIE9udTJjbkljTFBBOThrOGJPaS83\nTE5jbVdlUTJXVThTczg1WU5BU25CdVEKFpnFIYvkiT0kaKaTNgmWSBSAgP1vXpkp\nNu5IpCLao9p+p607UTLp1mD4fZiJosznSBRXZZMz8RYiuk007ZShDQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:27Z",
+		"mac": "ENC[AES256_GCM,data:cd6YOy7+JXuoy0/59UGn8DmjqL37OZ4FW8nuwPLIcdsmWsrm+sQjeljN/KQSuW5E5rLfFb5oA0dS5Q4+44mpDP1lmlGQcwb0VllPKtNTGX/zWXbgbfPOKbdKGaXiffwWXoHotc3Eldb3MzAbHR+wTEDelcyF2ro98mA8LUIxfTQ=,iv:s3A6prnaerY7oA4GJFRT1qWD0Ir3KIJTYTBCn5dBblc=,tag:ml+ga3K7f1jjrmRl0DEqtw==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/nginx/sslKey/users/kurogeek
+++ b/vars/per-machine/deneb/nginx/sslKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIenrGmQ0W3/Ofgae7eHpINba0EwZs+BRP1s6ONAQ42P 
--- a/vars/per-machine/deneb/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/openssh/ssh.id_ed25519/machines/deneb
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:MXNXifd7bt6VBJ5wWBIHW3Lr35gK95Zzn207A/Bu6xo=,tag:2cAtN3kedis4F5F4g9XSxQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2eUZUNm83MGpZRjd2Z0Q5\nVWx4R25Hbi9UNHJOaFZvTXZvMUxsMEJHZVZFCkF1Q3VpMk1EaXdYK0hZbWNLcVVx\ndThTQnR3dmcvRnZBWUlPSlZEbWFtaGMKLS0tIExuSDgxREg1K2hES0k1Y0hGMU45\nMkpZMDNpMlVpTmtRQkY3Rzl2M0JxTjAKegQrOsArlARirLs57e5a/C5aLsON2pxK\nZzHy+ZPT+77ngtpQ29xe4dW847bZfaL+EAU+fGJhSbYdPfL33Ahh0Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4d1VDTmV3OTIxR0JGQ01X\nQ1pHT01QVzdRYjhYNldVbmNNQzh4MWduSjFJCnQ2YXNocU92bFNXRjZHRC9vbWVv\nVXNaNWdsL0ZWRXpMbE1jZktzVjIzcm8KLS0tIHhSRlgvY0tubjc0d2lNeVlKa1E4\naitxelNIS0w5VmJzM25uMERUYnF1MEkKAVrl+Vmea6qmfoqS/GpdjpuQVRdtcL5x\nQX4nNhxdD18fslgZg2S5lgtTzcKfvVo2QN1xtFVOBWzqr77bdsiX7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdsN0NSbDhJ\nZjhoeklFdkpyM2d3QnF5S2piVVF0d3JXdi83bi9jSDJCMVkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp2OWxlcyt3U2ZzWERlRE9OZXZZUVd0\nUW1TcmUzZklPUnNVdDZGY01wODQ4Ci0tLSBJb2FjSVJZYUxuQkFob0JpZXo4YnN5\nUjk5ZkM2MTZvQzhORXUzWGRVa0ZRCqsYozKAB8uxsAssqSAc8IGTrmPQQW/kGuhO\n/tageuzwi2yme5EyqGXjeRoc5MtNKSOAFyBJZChE4hzyJlo08Ag=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJocTM3ZVNP\nT1pwTHEvRTRNc0ZITWVSYUMreGcwR21ES1Z5L2pNakJka28gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpmQTlOc3grWjhCUys3UzRCUVhMbWxM\neEREc2E5U0ttWGFZYm1BMUdUZUhNCi0tLSBXSU10cm9jaENHVEd4YTVhNXk0Tm5Q\nZk9XUng4V1gzUEhsVDFFcmh0RHM4CnzzBJoFeyFbb9KNBiWCxa7QOXkPGxW1iE53\nAAjbLTAxRCE2vg0UmixxjzK2TqB9ngoJlNEBnBEc+NyKQ0QMKH8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEtzR2gxVHJE\na0dTMFFiMVpXMjdKdUMrNDBhMzdUVkMxUUtLUFJvWld4bUkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppQW10NEhvU3pScFcrdFl2RDRwZWpY\nZXZBQzhIckh3cUt3V3ZwUmZrbWtVCi0tLSAzcDBPakZFWmJCY2EzUERuRVlIS2Yv\nNDNTV0REbTZ2UU5EbnNwMGlSQ1R3CkkpXLpVauGI4IDEKKekwGbPJThe5uJPRu/6\nzmVp1VtUZ+UUs2w77suG+00a163OWoadafV5gbdLylRTlH9LzNs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4WVNrK1NqR2VCVC9PMGNp\nVG52SUlTYzA4c2NteDh1cVZmNmdOQVJldTNNClc4NXdZNlVhMnBQOWxjZmpNanNt\nZTFXVFFQU1VLZE1tNms1b3VzV1lLdWcKLS0tIHVqRnNNWXpxUENDY0dDQkJaRjVU\nUnc4RnYzTCtBSThJZU91WVlUQTRrOGsKnZhdlLVH3+NKEgi8124Og+7gOEr2SEn2\nKbFrUOor+XxKOvkZS+pPX4CoyJ13nkAMJ7weJQYRJpJoWRwJuQk1jA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVVE1SbkFUWW91TXp4VFdN\nazNCd0s3N09NV2lNOHV1QTdnTU5LM3hPNmcwClNkcGxEaUh6dS82bTRBMDZBcDhN\nNUxMVWdmdHRiM0pxbWczay9EcG40NEkKLS0tIFFtQnRkMm80cHcwU1o4dFVieVlV\nYVcrcWtaMHhRbUQrb05XOFgrTit0dnMKl/B6fFeHiTtuXbASgGHaf5I5ZnFyDlTG\nHxDhsCxvG/VSToP4NPkKgOHOHhcxMOiEA/Xsy2nGcAe0ZPtlbJPhDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRc0hTWVRHVGZPMURHV3pL\nODR2eVZYMlZLT1lOQlhPdXpRbmo2NFhXdUJrCmROTG0vWUY4VWlqOXZGNkI2QURC\nQ092cFA0OXdBdTJ3clZ4bldIOS95bm8KLS0tIHZoTWtieGgvZUVtTWp5OGZiTjEr\ndDhkcldmQUlnK25lYnRzemgzWHlXSkEKckXofqQL4rZWUvT5qAtx7tmOV8tJpHHI\n1TE1TxrUVgEM3xxzKR5BBTgNQrsT/jQcXtcRPzuocQFA2tfG+Y7epQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0djBYS0tRMjN6UHVpTzBj\ncDdXSGVyM0dDamVkY09rRVN0RDk1ZmFJVG5FCjV2MWNGSlQ1UVppa2JGQTRlWjZr\nNnBXVzNmbXE1ZGlJYXJtbXJ5VDd1dTQKLS0tIHh6SHd6ZSt1OVBNYXErT2ZDa3Bo\ndXgvTEZPMWFwSU5PNTBZQ0VtSzhidXcKA2VgfVzcMOzvfNNTM5x4E7rNUJAsHnwd\nDxVwlo83W9oGdKRP0Pe/Rv0zA2naNx1rOojO/pQjEfyBqbt5q7ZvEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJaE5zVlNCMUFQQmpweHY1\nZzhGaTIvaysyWHFXMTNPcGtNYjZzdVowa0hNCkllUzNEZ1ZsWDlZeDVlTS84ZEZG\nVXUzSEpoT3UzSDh3L2xldUlOa3BIY1kKLS0tIEM0d0dCR2N5OE1Rd25iZmxFNUgw\nTWZrOWFMajZFUEwxUDRGMlN1OWRpRUUKn/SPrYcTEo2suREXS+xjuumqNtTvM9jT\n926xgIazfwuDqhS2S3nRu57eGnq6RgER5+PMwMBlDeuogwYA0eTZAg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:29Z",
+		"mac": "ENC[AES256_GCM,data:wwS59jrZ6HfvyreIzoLVEVGCxGgKfPpvRJ6oXgJfYrzCUThZ76ZMDXvOQh/ajBIyy3jc8f6U9ADLhl/cgUzTzRqaKwI50hags5SIHI2mKfc//Nmj/kzcXfQv7AmpTOQ9cJclqxr44eiZmtkBSSFRmXqnsZg6y1Sa68rKac5LFlw=,iv:8uwbMD8+5ZRngjQkZsvnDIl14gSA+Ey0+wZSCMLIncE=,tag:Jlh02Zqd4qdtDpht3TqoVg==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/deneb/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/root-password/password-hash/groups/admins
+++ b/vars/per-machine/deneb/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/root-password/password-hash/machines/deneb
+++ b/vars/per-machine/deneb/root-password/password-hash/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/root-password/password-hash/secret
+++ b/vars/per-machine/deneb/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ZPqRTz7XK6AXAFqQ2w1F43HoKCkaIWFsJZsZ1rJVoY52rJq0IEnCaJmfc0m4BfJ4UFp06u+hAcUiZc7gNATbL7uY05gbERsiga0qLWYFMJjqjbBE+AMlUHP52bB9NC/04q6XF857mIpcXQ==,iv:fW5XtBggs6Th5Hk3UrQ/TRaHGBK5VkDI/eaph3fmxjg=,tag:HQwTCZLFfIJ/uvzyyzI45Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dGU5cFJaK0F2ZHZuVWhX\nRVN2c3JkWndNRXZadE5MYyt1UTlVQVRYd1I4CjdTVElPWkJvbVZVOElhb3RmL2dT\nSkpaaFF1aEZlTUdwampQWDhPd0gxN2cKLS0tIEc2OEdDZCthRHJLVjA0Qm9jTFUx\nQ3JkSXlqbzlaS2RHZFlnbC9ONVc4blkKYSigsVgARv6a3b1YnR7eb/b5GuENWgQL\nZwmKIZQkSLa9aAYujhgCdVQkB8s2GjP0YxiMo+mVzq7kqdg0QnRTHg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaHRnMTRQdmlIY0JPS0tu\nYzRsV0YyMW43S3BaWFhrbEhRbm9GSDBubHkwCjVkc0tocUZpNldqUUEvc0piRDhB\nQ1ZKeGxERE16QjJpRDhLQUxReGhYMmMKLS0tIE1Sam96Lzg0ZTNXc01saGllZlda\nR05BNTl1Q3duV0NpbzM5Q3VOak5KcnMK9MNvZQy68QEoFT9JIKGTdTBRS5XaoLIB\nJ3jFatMlq/5LucRrVPwdkQARbMv6ZfdCJaSMKnXy5j8fIXoKdzahvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHQrSElyUmgx\neGRiYnVkVG8wZTlGR2FRVVBrY0I0U0hPTm5HWGFZdFZ2eGsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp3clN0Yk1LWFFVQTVkbXlkcUNZejhj\nQk9xRHZ2b24xOFFkNEplY1dTMVdFCi0tLSBuMGIwQXE3UnJ3a1J1SS95ZXNWN0tS\nSjBaQ0RPOGF5aW1ydU1KZ2U5RWtFCsXg7EBgfZjIPxc6lxwUATGQ/Oa1YnrwTZrV\n1tcREU6ZF8oDXcPxJRxrdTQh5gcoz+VLumfnGr7kOEg9A9g4qP4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENsM2VScWxX\ndzk0cnprUHM5Y3V0ajZvSzV0QmpRRWJDSm9Md1VVRWN4V0kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4UWpLcnBQL1NvUDdIRzBKTFE1OFhE\nSkFLY20rb00za2VDNTU5Y0JHNGJRCi0tLSArY01UaVRhYXBxYVdZNnNMUUdEM01O\nbmpsVHZLcXVYTVRDYU5qckdhb1lZCskK8D9mLBNWn9D2M3w+qdIYqClhAhon4U/8\nj0B241nF95EX1NeePYYcAv73UEhBg5DQpeNTlS5b4GcbDkkP53g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRQLy9tQTR1\naVRKc3dWS2N3ZGJEUlpyMWhSNWdlNXBKeFZLOFUwOHh3ancgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQWjUxV1FXUlo1enNlaTYzUCtKQnk5\nYkpuam8wWTZ4V3l0TkpTOVBsSGdzCi0tLSBNZU9TaGpnb0xjdUUwUTh4WFVMeWdq\nZWtReFV6VzRuaUw3M0FWR3d3NnlFCnAt8VmVAl77WLVFyohkzl7HGO2NXReO0vaQ\nuiUJ1BMa62fiNZE/ggosg5Baeo3FnaBVrhOUcRiPapvtG4t56QM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWdnBnWG9xWitOeWpyTHNX\nTUdGVE9jVWQ0ck04c3JheFE5VnBLZVVYWEFrCjhkZ2MvakhFWFo5QS8vNFVoQWRN\nOHJyTFU2UnhKQm5CL01CUkNHTGhiLzAKLS0tIDRnUkFnYVlNTTNLZmVnYk8zUjl4\nanlCZDdvR0NFSmNpbjFRU25HUmlnOGMK/gryOwrcU+3S9tqPO8OWMPHsAz17Zm56\nW/5zOv6LypmwasIsMSeEhcw34xgSirZ2rXASmuChPteqPhyewZwLSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNkQ2QTA3Rm5JOTAvbWsy\nNEp0eGVGcGhxaFdYY0pwMnR2MVZMK0VRVmtjCjlwWGowa3ROWjhVN2ZVTUx2bkNq\nOTJJZnJWc0ZxYlY3VldlUXpUK3F2bTQKLS0tIHk2UFZNNjBMUURMR1pkaS9uMnF5\nblpkTXpKZTUzYk1COVRtWnhlK2pSM2cKC93lKw2l0AZeOHt4ETvxLsNdhqsCpX2A\nULL2pRe/zg/kYX12fKMiBojvx2AbjxjeYeDUMmubIvhCSu6mltl8DA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVUttZzdxQzYxaVRXRGtl\nd2sxVHg1L2w5RVVIMmdCdEhSaEJDeS8wRFZVCjNZMDFCTUoxVEFEUUM4S2pCK2VE\nUFBHYzlaZ3dCVlN0emw0SXRrRVRUYUUKLS0tIGMvV05qVHo2TXo4WVhYNUtLdDJS\nVmhZRndGQzg3K0p5VVBLWWFpaEZtcmsKpPv984PJ0VYaZtTDi0jjZtGSQpHJOIrF\nONBZu+otaYSSYQRHa5+bFdV3j0/f42+1fkgpwsezdZDDq/xqFFPEEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1K2ErYnBFbHkzNGZtd2VI\nb3ZQUDVTWk1RaDNQRWR2ZDVsZ01CVmprVzA0Ckl4cDg1cGErZWl4N2t6UTg1dkdQ\nM2g4b0N3U01aTXR2YU1lL1VjR0loVE0KLS0tIHdKWkxGbmhab053Y0hSRDJtQTkr\nUGpYamRzYXY3SjdyQWNZQjZsOXRYZk0Kk0fRsV6H/RTtPOikNmL8oaGCczyJ5y4M\n38cwdwPE056C4nSQFVfmHY5iZkSyYuxZVewpyQylvTb8kTqJFTGeMQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxK21NYlFIZnVKdlk4UUI5\nQktYd2c1SjNTZEkwWlIvMDNVRDNLQy9Wc3o4CnUzN0tIeEJLUXJZK1NvN3VSMWor\nSVc3SWhUVWl3MEh3R2d3RHBZRUxPeDgKLS0tIHhMd3ltc1BjY2pZOHp2czlzNkkv\nQlpXZ0xDS0VUMTFMTFROWmRuU2tob1UK70vzhOuLHAXvDLooQUOF0ucQby8d1J1z\n7hsSZyTzx1FfEVwS3p2x/0wb/63MNz2cZFsm4u+jmoN5LhHhntLGuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:32Z",
+		"mac": "ENC[AES256_GCM,data:POB4lFZ9Fm02DeZshByCMcn8EVU3Drqm8vpaz5DoZqUXZDTmsl1vXFKmyZNuRLcn4fcYBIsylPU3iqDO7jdQ0RKqyUZHV3wNrsh8UmjEq+3/PDOs/1DIw1kBAzxFYX2idlVRUSulIaZi6EYt3PC5nR/GbMVDqCO0Tm4D5EGEUvM=,iv:ucBM38t49lyqO3nBCSt+vNItWPRPwIqUaJovMDWQ6r4=,tag:GfNd5Xja82MVusN8JklMjw==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/deneb/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/root-password/password/groups/admins
+++ b/vars/per-machine/deneb/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/root-password/password/secret
+++ b/vars/per-machine/deneb/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:f0VLY1Z7FTf8h69i5vQshLKeXCY9EmzwJINwQsJxFU3vNsin9TXURQ==,iv:PzKPY+OKQOh9xlrWiIh2UC+KAzy1I2WEMTiCu+bBrwI=,tag:yTw0VeC3Vm63RWCcHC+cXg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1QXVUSnVSMHg5NURGSWFx\nMW1OVkdDVldrZ2NodXI1K0pxV09FemxhTFhNCi9BWGphWTdVOXdNYVBhT2dBYXBr\nM01WZmJENFM5TXdaQVJJNXNOTnZOeDQKLS0tIHZpQ3ZQUHB0ZjJORXp5N1ZwcGxI\nNHJQdzQ5QzRxWXgxQitJS1BHN1luQkkKkDrzzwHkfvVzA9gXkmIAoOabsLqaXJbM\nx2vm15YdDKMnqgu+FNBXl8HLOl6tqffisz9p89hxaCSgEpm2K4Z5xQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCazhmcUdHQXBISkFsS0pB\nZzFacFVyYzhvK3lxdkdzSk1hY09MVThyQ1c4ClI4dXpPL2U3djhZa3hPUS8xNC8y\nYzdZTkE1RHdMdHczQTlNRGVPamQrcFEKLS0tIEl5dXlSTWlNbkx6c1RtbFdBM3R2\nUUhPajNvZGVuZXpGbHJNUHBTKzIwdE0Kq6MYwtySC5s/sy2YbXepUO7X+KHHZd0A\n4y+bxrI1xsvQ+V56GmljuZVMRuO1JqPlO04mIfdEVWwepcY/lTljdA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9ZRk1tTkVu\nZmQxYkZoL2t0cXVNZ1ZybmlrdDk2YTR3TjJDWUVVdGUxbkUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDWGVqR0s2ekxLOGVaSTliYmFSN1c1\ndnBFMnhiSzJyeHRpbFZldk9RVGlRCi0tLSBscTlkSGFaVy9MOFpaSE1xZlBmTzNE\nN25aN2RwS3dJZ1BrSytIYUxrdWQ4CjtmN1yRl0KOzJi67D0trKe4HtPNFFblCG79\nmhVtu6GAlvloAUUFrN98Ht97LgXha5INvfvgZe62QGoX3vMisvo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGRQa1M2V2pj\nRFA3TVVNR0o5cEhUT0thSlI0RmExanNEa3VpY3NZUExtZ28gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpDTXpabUprVFdEOFJydS93M3lMaHBh\ndUo1TXlkZTJqRTlSRUl2VDBwU3dNCi0tLSBnMmJBUG9NbFFYMmhvRmZDNkhaaEVl\nZVBoNTJnUkhyek9oUnkyTVVHV280CuK8ThcHV+k6mVwYP63NnGBAR05rFNNbcVW0\nBbYjKvQu45nqDebloxFU8y+GmGh62wvC7L/I2ETbTbkYtJ5yYNk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHFIU0VLZHJX\ndTlFSUhaRVpRY0Z1Y0YwVzB2VHBlUTdpcU9BVlE4SnJTaEkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpBTW5RaXI3bm9QZzUyemlMN3dBRzBj\nK1JqbnM1SklTN3g2akplUnBBZ1FRCi0tLSBBYUFXcHFvQ01xbzRFRmhjOUNJRDZZ\nQUdtZEljdVRmL3ZvLzYzT096RXBNCh7Qy687a7EGim7H3304zvFavWoStOChq2P/\nl5lueNCpL+a7AMFN8Ow49zFrtISkdnu4a3Z4cpbapzd+dfO+eAU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCV1E3T0x4dWdKTEF0TFcv\nMkkxQks4V0xuR1duRXh2OVg1eUsyQUpDQm5FClB2MkRjc1lvQVdnUTdmbXdMM1JN\nK05pVWQ3ZWRwQXlFWWVYRUVzY1ptcTQKLS0tIEppTzFUK2NXcWtvemE2bGtvekxV\nblhySDl3SE9vOVh1SGhOVVE0SUl2c1kKuzARyq98ah08oS14HQmU5L2p/cJcWmmA\nuPiuJGjKUXUYF2ssTK5Tfs59szDjGOF78OzJT3UGhVQneUp9rMJ8LA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArRFBDeXFwRGNzREJDVGRq\nclIzeE5PTWprakZIWktUUlVXcU5VdXpEbkNvCkw0TFZoQTZMU0FjTUhETkgwVXpq\nSGxzOUM1SjBtS3JsU2RESGM3Q0FXTzAKLS0tIHZKTmgvSE8xbVQ3V0JSdk5SU3g5\ncjZKaWZ0ZXIrVXdFSGpKNWFjM0ZaWTgKZBo8U8wx+oOJQKOqSLyKtPyZIGDvyMK8\n7MX+XId81jO2kUi/VSGb6rVf8d4gbWfIliJKBufOxnesrxzdoghoFg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YjhwR1p1OGlPMTgrbHJ3\nT0ZVQWhkLzgwSGlQS2NobHNPczg2bnd0eHpBCjRZRzhHOVI5Y24rU3lCWGJyS1Zn\na0tUakl3S1FKZ0RBeVBob0c2VnpXYlUKLS0tIGtDUHpKc2JWT0hpS1Vmdzg4dTRL\nRnQ2MkhmV1ZEcTV6M0hvRS95dElsWFkKRCqG9YkWEtykNDqnbuE+zgyTMtzDewsL\nPHq3q0FoYZDe10h73BWj9CkemQ7nDjmY5pzbT2IMmQ/xEFVl76Mr5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuY09VNEpJUTltLzdaWWRL\nKzU3NE44eVV2MGlzalR4Z010TG5sa2YwQTM4CnczMnRLTXNUWnZLcmVKMjltbzZS\nbkxHQmhlUkVyNkkvdXdJMjdBL0ZpWFkKLS0tIFBmb1FyanRIdWFlLzRla1kydDY5\nVWtCN2lRbHlhYkhQLy94VGpjR0dPQm8KwbFZCMQd4kyLSzUQIJ1ZSORITy3x9iHS\nV7d9eMbZGuDC40ogL25mnZlT/ea1I7VJtjt53BQU7Vw0PqZzKqQsQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:31Z",
+		"mac": "ENC[AES256_GCM,data:swu12oRNpnw3YN1235n9AbWgTvg7kKV1qcy+FB6zBHKipbtMTbWo4+RPOmR++pOswo/96OIC0C+GxrPMQR6+bVKwNIuVD3psk4cc9WRg9EsI8t+u97J0lmN/cnPfq96Q2OIlz13NMUxSFpHGkLOViNDLDu6eGpj6qc+v41d3tCs=,iv:rQkVV9MdKT8MSGaErBqm15CvdYP1rZpeGonx8pr8t4U=,tag:3R9wVQld/Z4ysWmBOUHBfg==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/root-password/password/users/kurogeek
+++ b/vars/per-machine/deneb/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/state-version/version/value
+++ b/vars/per-machine/deneb/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/deneb/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/deneb/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/tor_tor/hostname/machines/deneb
+++ b/vars/per-machine/deneb/tor_tor/hostname/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/tor_tor/hostname/secret
+++ b/vars/per-machine/deneb/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:dY4sE1y28DKMWG+l1SvmI+1P8SauAZt9DCYUM9LGZROeXwHwUTCf/r2X0K9q76okUtStfrgXWIKVJG4BzvE4,iv:pwxP2B0dh8S1tX3UmmZMjYBCxFmrJAXJFSiH9bkkxW4=,tag:QWxor4WNcrfkfVz/mCeBRQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRlJuQzZrK1k0RzFBa3Qy\nbWJSRlMrSktqNERSYkJUNDBjNEhURUU4d240Ck5NSFRIbGpxODV3TXZwYklucXNF\nckdyUmp2UmVtZUpUTGlueGRTQmFIZlkKLS0tIGxqY0dYSTN5Nkc1NUlOKzNUcW9r\nWFJOWDJVZjJjcmRCSVRkWndGYmZ4U28KGy5/C5iCyn4Pn0dBWAuyqVAj+oQ0rf7x\nwrG4tdkcZX9tkL7fZ0pvSEwdRbharrlVGyA5tYby0UsWxZJfY7sTig==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUzhUS3ZkczM2VWhoNnFZ\nV1ZWSUsvR3h1VHBXUlZTRCszRElFcHZjbXg0CnRUbUNKTUFnRnNRWGFMQ0YrTmJC\nSDlvM3Q2NHhTQ1FzSjlJWURXQUdEbkUKLS0tIC9XN1hwNGNpQlRaQ295VTFONk1C\nL3dGOGJPVmF1RG9LcCttM2Z0M3BOQlUKid45h9SIBv7uGV0UzosjcZIEV2SeIqIs\nASwWUJQSYCptgYn553FCo1V8HJ22y4btUz8NHDUJw5UWMh7KV+O1+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExoUmhUTnEr\nMzFRNjc3VDcwMXFvaFpScnMwWEQ0dkgrNzhBUTBIellSMncgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4QjBsdDAwYUtqdUJzQ1FOcFZ5YlBO\nY2dTNmRSbHkveDhhZzJOQ0xyMnJBCi0tLSBKY0FQaFYyMlJtelJjY3Vkd3ZEbnhj\nZTFaQ3NTQlUvYzE1WXVGa3Mya2I4Clipzf/k1emUX2mob2Xq6Z7NbzXf8z59NNNZ\nCgAKye3T1xbGv3/NgkVMgrkdrfYN++1aA6rslIt3a49K24lpctA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFoM3dNNUV3\nc2NvM1cySWs2Q1E1MC8yUXRwUkdMdXRBL1VrSWVsWlNqWG8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphRXh0UGhydGxyQ2JPOThPd0VjM0pB\nd0ZXUjBhV0RpaEJiN3ZLN3lzcVJvCi0tLSBncEN4Q1BaUzErUXVHVU1XMkw3MGtV\nRmtIMFJnK1VMYVJScVZoeW5iNXVVCq2Bw1Tx9cTM+6XPupnc2S7YygRndozHd2eo\ncX/DPpZibawuIR303cwdGvomchBzJ9w421TmKNen31WI/EgDA+s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG5yOFpGbElI\ncFhveVBuRGZoK0NRTFkvVUQva1hZZFZKcEhzNXNOWndSem8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowdkJDckRsRHBiM1dKeDRJdWZmUzJR\nRXBSNUFOOW45bjVYZ2Q0REUwUTJNCi0tLSBUNFNuUGJoRFJacitiM0FISTBxUTVH\nMzl1TG80TEEvcTNobUFMYVVFQ1U4CtMb8lV9l4PJXaPBIRw5QwRESREpjBo9a6xo\ntv50dyyJ0lDCfPITVIlpFJZfXah7XieE6DudPqWvToVquvBV+qg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBma3RPWWJnRENXQTV5U2ZH\nd01HTTVLb2g0dlZqcS9EYU9WYWlxWi83UDBFCjVyWUtUQVhBazRPVW0vWnVXck9S\ndVV0aHpKZVRyUlhtcUs2dkhmTDV0REkKLS0tIENDNkZBNkthcUc3bkVNZTdKNFFj\neVJYOSswbnhOaW41ZG5QalA5WjNxZmMK08fVlGEQhPP0ihaGBat8FELXO/PRprd7\nH0/4g0hBS99p+Arn/avEtA2uojd4RWNJsvaN4Ytrfk2I/SOQe+/2jw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvK3JpNWZyOUlJR2Fsam9T\ndFJFREt0SElzY1JTRGRzQ0dsTnBMQUhDRWxnCkNUU21kUklXUVcxWU5xdEFMTVg4\nYWhrMEl5bHhlU2ZSZWRuK2UvM2xyTkUKLS0tIGR0dDVmdHlmbys5ZmVUcUVlKzFT\nNnhaUU1rSi9ERFJYY25mdHVVMEtRd28KpyDJ/x2dEpcJR78h5NwQfZa7Brifu178\ngKS+o0/ZOjow7OzXnQmgunmEZG34iZEzBeK9B2jvtdVcF1EFbiyfbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhK05wUWw0Nk1tVFQ5QlV4\nS0lxS2F0cjcrdEpmbmFJbDNaUmpNcUhQZVc4CnFtQk51cUVqazlidVVGM1BlZUJ3\nV21KN3F1WDhMLzNyVmYxTjBXbW8xbG8KLS0tIDFKeXgvUmdMWDFrUG5YNkhhcHZ4\nbW5GZ09OZUY3bWVVVjV4NW1EMm90M0kKgOPOItQZzCKFm/ky3P1mehpX2/jx5uIL\nPqR3w58BpMdQDQqqdk623rJ3CNqau+UuBxfaWW6BchCRzz+YAHkPXA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMR3QxVjRwVnFBeDBOc2xv\ncGprWEI1bHh4VHZjMkYya2RSSGNZR1ZPZzFjCkczWFBENFJ5a2UyQzZvamVOdjV3\nMjA4SDg3MGVSWWpMeU5keXhJNTBZTmsKLS0tIENLd25Ya09NMElKazg5ZG9yMkg1\nZTkzSzZ6aVhzemRvYS93eGZMbk43czgKmW8CQ+qQ1Dl6GhYmt60fBOlkaOLBEYzb\n4XM/JzVybB+x7NIWisCdE57CAqm6prij0SpPbAwfCngDRVHr0IZ78Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLeTBFQVo1V0pIMEljelgx\nSjIwcW50MlBUYVdXT2o1SFNaenYwTElCUlNvCkVYaUt6L3diRStZalZzYnk3VWIv\nNTFnUnJBYk8vNFZJMXE2NHYvRFJlZ00KLS0tIHVYRkpHaWtCbWNuK2lwbDR4eFBk\nNlpUNUdQUTgvb0RUR3Q3N3BuTnY5enMKB0GN9lC9u/BN04z/QCXo33+ME31reSrT\n5YQGcyXZ4Q8mvLDLvEk4na4V6JCDpM36cUWqTa1X5idfuRCESrHF/Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:36Z",
+		"mac": "ENC[AES256_GCM,data:An1uk2D30xGVlkMZdBVqAEIpX4kMXg8PoN9a99VLq+yvZBJ8BcttBiRGnfYiv5MdR/PxhcvuWQrxYN2iyggVuu62JJtK6uA3SazyBcUXfaSQDnCV6D07shAVO9hfgCNwYfjSSmxMzdrBzfDlaBimtPpH1eHiNMqHL5rAVN4baHg=,iv:eZMnsbs/9m5pU5XoyYpKofxytsdAO5KjpFZztiXatdM=,tag:ldXC7GhIieuOhGzEZvGZ0g==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/deneb/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/machines/deneb
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/machines/deneb
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:L1G2GuClWgTofEeOCIKHJ/nndKcY7UGbrnbsJGUrvYCd9/okf3YTQ/fSruhg+2UUYyW0/qllc6iNSOx+2XfTZE3GW6FU25Xwmo2hhaFtBLnpMEQ6z3GXmyfQgFgOTvOk,iv:d4tnvovvAoj6bJadyUqxM+Kd918tUcX7a35z9ei5YlU=,tag:mbiHV88gp06m0lMhSW0GyQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaeCszakVIZ0x4QUl4dVh3\nM09mT0J6VG9wNUVBdVU5WnJHVU0xS084ekJnCkd5SkltbTdoSmd1c3gzQ1E1dFFP\nUldnRFhnaE85SVdGQ05SOHhwZjRPa00KLS0tIGQzdXg4RGluMDhGWEJPSnhvMDZt\nSlc4OTluOGN3WXB2L2tJVWVyVlBtTTgKfmUm9HKsc3S3FT++BzXtFP7pki13NYZN\n0ukG48J/G/Wjycls+VphuMdRWfouXIWmrWoBUHR5VlopCUqbivN86w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRUVJHWFphZUpTc21MRHBE\neWJUdStFcUJvb2xTSDlibFl5VmV1QUtTeFJ3CmRqc1JNcmczZG1YaEZJcll6bnQ1\nNjN3K3o0WG9FSm9Hdk1FM25IQlM3RlEKLS0tIE43emsxSkVhMVcrMHZSYnAvZElD\ncHIvenIzY1F3VXJ4L1pyM1JBQy9kSGcK2z3bzo2JR21CNYqv7HLEgACu3HG7gNrH\nzyo/nd/hPNhg7DL/Ru7gizqaV6SLMYMcFyDaOh/HpdvVyFeI5/iong==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJnaGZYTDhT\ncE9PVDNnRGV5a09mcytiZjN0T09jbzRSWjVYZXBLVWFyejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQoxRkk0dmRIaUlGRCtwdGNKYlh2TnZC\nMkxhZElJUy9uSmd3cTRwLzFOYkJ3Ci0tLSBvZ0hOMG0xSy9DcFNCeHpkV0d6cmxt\nb3N4YjQrdDJ6WXo2MHQwRk1HV000ClsSymO38UyeZt8bSfcQrLF7fVncuFxMjl72\ne4+8MyW+6XT9rZi30MeWZO33WBaM84xldZU7hSoP3/fqQWsKqbw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtnTStMNk9R\nOENKRHNyYlFPZmdadXJVUE4rVXN5OVgzZm1hRi94RE5wbWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpPVmRMbTZXRFN3M0x1UUUxOG9mMUl1\nOHpiQ0FIUWtUbytzOWRhc3BlUkJFCi0tLSAvVTlJRXdXeGlZR1RONi9qclNTZytR\nSnJsamxBZUt2djZmdStPWE1xc1RNCuThugn6FqhC+KvwlHtZ2GzCKi46Mjn/EGqu\nvWUM82j8wyyGlVAShS7ghqCM5f3hYMWpL0oc7BDieFfLAYZGr9g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGp1MGtVSm5v\nYjVTYmlKeTM5QS9GVXltMExpTyt2M2Z0d25UNWQ4NllrR00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpKVFp0NWxKSFlMdkFWTFFIeldsSnU3\nTGtPd0xkQjA5M215WnNBd0Fhd0Q4Ci0tLSBNbXNlU0llcEwxVWh4TTZ6aDY3TkI3\nWEtPL09vbzRDNk4yOU52eGNnc3U4CiCGoptbMvSi2NkOgeSV491bJ5OA6ZVZ986w\nwe9niYG19b9nPpRYysEjXwOJ2nr5tiU/IipK1Vd83/yN0As6mc8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyQk5uNkFnMHAxRUpEaytH\ndml4aDNkZyt3S0s0dXpVdkRSdjZmc1UvZENjCjgvSmdhUVpZeGFneFJvRnlVVGEy\nUWlvRXd6andiUWVVYnlDcHJXcGpmRncKLS0tIGw1anIvVm4xTDR0b1p2V0g5eWZH\nNWxFY0NDK2I0K0p2N1N0SWpVQTMrdjAK42lDG/puBL52LDzjIIumrF5mpxxAWlB3\nqMc+ObeRxFIenII/6qf8q5xM5TyWTpb1fmobK8lxcbokWUP9dua+8A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2OS9pMFpBQUFSSGtQZTJR\nN1U0djJBNzE4S2p6SG16NjRveTlJRTFPa1Y4CktTa2ZHVHhKYXVRMytBT1BkV2Y2\nVlUzbXErZi8xeFYySE5nY3U0TUpVVFkKLS0tIGk3eTVyUm9VSVpqMlQvOUNjTVFl\nNEM2c0ZJZUQ5SUZJZUhidWZmc09oSmcKjzGQUZaUcxWOijiIvUwTS1yQHGsCkxNz\nLs2b7XbzGrvDcLTb4G2hcgMvjvOoL4qmab8AXKlQSkxYKej+ZLZHIg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMay9wSHUwS1hsd1MweEh2\nSFgrc2x0dC9QMUI1ZE9McmFPb3NOK3cwMGlrCk5aNmtUSEw5dlhGM3ozWUR1cmNR\nSm16N0loQ2ZTK3ViNUJOUjdqUlg5b2cKLS0tIEV0akFJZnhndUZBWUJKOE9IVDBy\nZEVTeWUzVC9yU0kzKzE5cEJSaE40ZlUKGKxF5emnJx6SOZkYs0Bzx7efuKLkGHNP\nYzJnJbl3lJFRk8QgyCKSEsf0iGI9bPzgDNsZ+CV12EMS+iPoyegwMA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyU1ZMdFhqb3ovSjczbXVS\neVFGaXpJbXZBQ3FjL25tbllKQmJrNHY0WXdBCkZndnBJdzlyOHBWRmVHZ1dVT2hK\nTy9xUXZmSXIvMGRmTmxkWW13aDNnT2sKLS0tIGZVL0hGVUxXeDJvTlBBYzJwZU80\nWnl0bHFEbkx4dkdjUzRSVVVyZzkvVUUKN8BQtlvTi0+6xDHaKz2AEN+wff3hOylV\nc3c2QMuBZQCDUwd0fv2QDIUcxzHuQFouJi/ndVVXh95kOZMKQqYXXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDRk5JUGxnOTlCcmRlV25V\nMTBIc09TOVp2YWQ1VDNuSVAyVEt3ZFVwSlVjClJwMEsxNHlZdkZLYU1yZVVNcFcr\nYkM1VGREc3lmZmgzOGluaUJFVUJod3cKLS0tIEFVT0lWVHorWXdrUUtMbDdneStO\nOTZNa0JlS21CNkZzd2NnMGFuejZJNU0KII/LX9pYn9TnlawLGPcr24TGuAmKU9nh\nnl7d+WqHfo5UFxPOgElen7CN5mwx+IUESCABYC97cuVcivY43mzgxw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:38Z",
+		"mac": "ENC[AES256_GCM,data:wiqTb4O7ghmYAVqSeTj7TfFCaZfG7fbOMhgzvNrzXKb+XDbP0pMc6rGrgenIcyLgf8qJtEADTbUJ6Tn3SP6XNwx+0jAbfJ3tOiR2oWpzBVAY0gZPMjJNRkeJ8+JhUa7VhrFbKMy4wkCilL8hR9XMSZhGHrG5Uz2xyQFwGWg/GqQ=,iv:RkXn2jobOy80v3E1qwtvrZpIIUDj5BATPtD95gzjXvM=,tag:pya2xtQEi/tU0TIWGw5u8A==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/deneb/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
Author	SHA1	Message	Date
kurogeek	ea6c07f7e3	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-09 11:20:51 +07:00
kurogeek	ea9899ebd5	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 17:26:35 +07:00
kurogeek	c7a28b3e40	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/facter.json	2026-04-08 14:11:00 +07:00
kurogeek	70eb7b7589	update(inventory.json): Installed deneb	2026-04-08 14:10:13 +07:00
kurogeek	947537f848	machines/deneb/facter.json: update hardware configuration	2026-04-08 14:10:12 +07:00
kurogeek	a723ecc721	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:44:20 +07:00
kurogeek	b4bbb7a52d	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-08 13:43:44 +07:00
kurogeek	99161aa4ab	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:38:59 +07:00
kurogeek	28c4ffa249	Update vars via generator tor_tor (machine: deneb)	2026-04-08 13:38:38 +07:00
kurogeek	fbac28d581	Update vars via generator state-version (machine: deneb)	2026-04-08 13:38:33 +07:00
kurogeek	23995bc5c6	Update vars via generator root-password (machine: deneb)	2026-04-08 13:38:32 +07:00
kurogeek	16cf57f6de	Update vars via generator openssh (machine: deneb)	2026-04-08 13:38:29 +07:00
kurogeek	21414fcbab	Update vars via generator nginx (machine: deneb)	2026-04-08 13:38:28 +07:00
kurogeek	17a96cf5de	Update vars via generator frappix (machine: deneb)	2026-04-08 13:38:25 +07:00
kurogeek	12d9076917	Add machine deneb to secrets	2026-04-08 13:38:23 +07:00
kurogeek	853c303d23	Update secret deneb-age.key	2026-04-08 13:38:23 +07:00
kurogeek	f061934b2b	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:34:01 +07:00
kurogeek	f3d568d5fa	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:25:04 +07:00
kurogeek	6e00955320	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/disko.nix	2026-04-08 12:09:13 +07:00
kurogeek	38aa550f57	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/disko.nix	2026-04-08 12:08:24 +07:00
kurogeek	74cf9ecfa0	mob next [ci-skip] [ci skip] [skip ci] lastFile:overlays/default.nix	2026-04-08 12:00:32 +07:00
kurogeek	f5930ae9e6	flake/inputs: bump liminix	2026-04-06 10:15:20 +07:00
kurogeek	aa3db27c77	machines/rana: hardcode kernel to version 6.12 to fix freezing issue	2026-04-02 17:53:37 +07:00
kurogeek	44210e6bbb	machines/rana: boot.kernelParams adjusted	2026-04-02 17:16:30 +07:00
kurogeek	984d587d00	machines/rana: update facter.json	2026-04-02 11:20:24 +07:00
kurogeek	79be24d581	machines/rana: fixed randomly freeze	2026-04-01 10:49:48 +07:00
kurogeek	1518cd7db6	inputs/nixpkgs: bump version	2026-03-31 13:45:49 +07:00
kurogeek	ac7117c13d	clanService/personal-computer: added more drivers	2026-03-31 13:45:23 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIenrGmQ0W3/Ofgae7eHpINba0EwZs+BRP1s6ONAQ42P`