mob next [ci-skip] [ci skip] [skip ci]

lastFile:modules/clan/prometheus/default.nix
2026-06-19 21:54:51 +07:00 · 2026-06-19 18:56:54 +07:00 · 2026-06-19 18:49:39 +07:00 · 2026-06-19 18:42:02 +07:00 · 2026-06-19 18:36:08 +07:00 · 2026-06-19 17:37:44 +07:00
166 changed files with 938 additions and 1604 deletions
@@ -0,0 +1,3 @@
+
+# 2026-06-05 17:00:31.237121
+start_all()
@@ -72,11 +72,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1772411144,
-        "narHash": "sha256-WhXudztwPNnKXaqGX4DOqNfHzHdBSiGCvKGHM20pscw=",
+        "lastModified": 1781517972,
+        "narHash": "sha256-G8bIXFqifs/y62GNPwg20Ksf71raYwzmyN99gf1tXak=",
        "ref": "refs/heads/main",
-        "rev": "92cc85bc24eb31ce5725e1e72753129810ce3fe9",
-        "revCount": 13201,
+        "rev": "7fc62d0c25c7a97d7027a9c248e21c97c9b3acc1",
+        "revCount": 14604,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -101,11 +101,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1772273147,
-        "narHash": "sha256-Wzhoc6ifjTDZi8aVRH3fuLJPdd4ouNTTwwVhgoMcMek=",
-        "rev": "d5de7a8d9e5726e678c94e62fe8ac3a809fee5da",
+        "lastModified": 1778718524,
+        "narHash": "sha256-pXLoI6Ax0EnUK6r34UM1vibVC7CfTu6j72R2692ZzPs=",
+        "rev": "12c552ad547d87254f33f33bddd1a2cdbeac754d",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/d5de7a8d9e5726e678c94e62fe8ac3a809fee5da.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/12c552ad547d87254f33f33bddd1a2cdbeac754d.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -140,11 +140,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1771881364,
-        "narHash": "sha256-A5uE/hMium5of/QGC6JwF5TGoDAfpNtW00T0s9u/PN8=",
+        "lastModified": 1781152676,
+        "narHash": "sha256-RxWs5ND31KzTG7wvMM+PMfUjyNpmIEr999lqNARaM5o=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "a4cb7bf73f264d40560ba527f9280469f1f081c6",
+        "rev": "ff8702b4de27f72b4c78573dfb89ec74e36abdf1",
        "type": "github"
      },
      "original": {
@@ -294,11 +294,11 @@
        "std": "std"
      },
      "locked": {
-        "lastModified": 1779175997,
-        "narHash": "sha256-Ps/4s3jwaZdLVEpO+1cRs54VbPbgMeXJUqa4CWSPJSY=",
+        "lastModified": 1780907315,
+        "narHash": "sha256-MR859lKVKeItsC5wnd1oniBar2lBTA+FJ7Bx4xN1Wpk=",
        "owner": "kurogeek",
        "repo": "frappix",
-        "rev": "0f1b4bcfb8c3b976e808a57e491d10857a1a45ac",
+        "rev": "9c2bc4152bce6d91305bcf0563a8a715860c405d",
        "type": "github"
      },
      "original": {
@@ -353,11 +353,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1768068402,
-        "narHash": "sha256-bAXnnJZKJiF7Xr6eNW6+PhBf1lg2P1aFUO9+xgWkXfA=",
+        "lastModified": 1781557312,
+        "narHash": "sha256-QOIRYSUFSq7L5mY3dZymaVhcnne3tPgoR9riB0WocjA=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "8bc5473b6bc2b6e1529a9c4040411e1199c43b4c",
+        "rev": "c03e4752899e55705dfa63979abd885c582a5c48",
        "type": "github"
      },
      "original": {
@@ -484,11 +484,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1772379624,
-        "narHash": "sha256-NG9LLTWlz4YiaTAiRGChbrzbVxBfX+Auq4Ab/SWmk4A=",
+        "lastModified": 1781242433,
+        "narHash": "sha256-bchLZZ3sRn740zyvD2icZSnNoTaanN0nw7l6fjVXO+E=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "52d061516108769656a8bd9c6e811c677ec5b462",
+        "rev": "aabb2037edfc0f210723b72cd5f528aab5dd3f0b",
        "type": "github"
      },
      "original": {
@@ -522,11 +522,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1714086354,
-        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
+        "lastModified": 1746801636,
+        "narHash": "sha256-dlcKfIXp/eqFHzFm+DzseXAWWlpVwyk9cTvCKGtVKkw=",
        "owner": "nix-community",
        "repo": "nixago",
-        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
+        "rev": "8cc33f973ab3a891d8a41391e73ef451a783960b",
        "type": "github"
      },
      "original": {
@@ -552,11 +552,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1778458615,
-        "narHash": "sha256-cY07EsdhBJ8tFXPzDYevgqxRev9ZLxFonuq9wmq5kwg=",
+        "lastModified": 1781359544,
+        "narHash": "sha256-iUuzKQcyXvopYDDzFpMK5eQKP3WIJExYny2kJtbgUcE=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "c6e5ca3c836a5f4dd9af9f2c1fc1c38f0fac988a",
+        "rev": "9f11f828c213641c2369a9f1fa31fe31557e3156",
        "type": "github"
      },
      "original": {
@@ -673,11 +673,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1772340640,
-        "narHash": "sha256-1nq7+Kt5IUBD8Hu3nptVPbMf+22rNJoHT0t9L1X+GKA=",
+        "lastModified": 1780547341,
+        "narHash": "sha256-Gq8KNx5A7hBB3uGJaj6eQfLDIz5YdLu92gqBcvHvoUo=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "dec4d8eac700dcd2fe3c020857d3ee220ec147f1",
+        "rev": "9ed65852b6257fbeae4355bc24ecfea307ca759a",
        "type": "github"
      },
      "original": {
@@ -764,15 +764,16 @@
    },
    "systems": {
      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "lastModified": 1774449309,
+        "narHash": "sha256-brhZ8DmuGtzkCYHJg4HEd602amKm89Y9ytsFZ5uWD1w=",
        "owner": "nix-systems",
        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "rev": "c29398b59d2048c4ab79345812849c9bd15e9150",
        "type": "github"
      },
      "original": {
        "owner": "nix-systems",
+        "ref": "future-26.11",
        "repo": "default",
        "type": "github"
      }
@@ -56,7 +56,6 @@
          ./shell.nix

          ./overlays
-          ./modules/nixos
          ./machines
          ./routers
          ./inventories
@@ -39,6 +39,8 @@
          "hadar"
          "procyon"
          "alasia"
+          "rigel"
+          "vega"
        ];
      };

@@ -102,7 +104,13 @@
            name = "zerotier";
            input = "clan-core";
          };
-          roles.controller.machines."vega" = { };
+          roles.controller.machines."vega" = {
+            settings.allowedIds = [
+              "dbe44c0287" # Alex-gateway
+              "b0e0b84fd3" # Alex
+              "2bd36db8cc" # kurogeek-thinkpad
+            ];
+          };
          roles.peer.tags.glom = { };
        };

@@ -111,7 +119,13 @@
            name = "zerotier";
            input = "clan-core";
          };
-          roles.controller.machines."rigel" = { };
+          roles.controller.machines."rigel" = {
+            settings.allowedIds = [
+              "dbe44c0287" # Alex-gateway
+              "b0e0b84fd3" # Alex
+              "2bd36db8cc" # kurogeek-thinkpad
+            ];
+          };
          roles.peer.tags.b4l = { };
        };

@@ -166,6 +180,7 @@
            input = "clan-core";
          };
          roles.default.tags."phonebox" = { };
+          roles.default.settings.extraYggdrasilIPs = [ "200:c806:c13b:b855:723f:473:55:7904" ];
          roles.default.settings.extraPeers = [
            "tls://ygg.jjolly.dev:3443"
            "tls://[2602:fc24:18:7a42::1]:993"
@@ -287,6 +302,105 @@
            tenants = [
              "poyfestival.com"
            ];
+            phpfpmOptions = ''
+              upload_max_filesize=64M
+              post_max_size=128M
+            '';
+            wpExtraConfig = ''
+              define('WP_MEMORY_LIMIT', '256M');
+              define('WP_DEBUG', false);
+              define('WP_DEBUG_DISPLAY', false);
+              define('WP_DEBUG_LOG', false);
+            '';
+          };
+        };
+
+        prometheus-monitoring = {
+          module = {
+            name = "prometheus";
+            input = "self";
+          };
+          roles.server.machines."rigel".settings = { };
+          roles.server.extraModules = [
+            (
+              { config, pkgs, ... }:
+              {
+                clan.core.vars.generators.prometheus = {
+                  files.matrix-alertmanager-token.secret = true;
+                  files.matrix-alertmanager-secret.secret = true;
+                  files.matrix-alertmanager-urlfile = {
+                    secret = true;
+                    owner = "alertmanager";
+                    group = "alertmanager";
+                  };
+                  script = ''
+                    echo "" > $out/matrix-alertmanager-token
+                    openssl rand -hex 32 > "$out"/matrix-alertmanager-secret
+
+                    echo "http://localhost:3000/alerts?secret=$(cat $out/matrix-alertmanager-secret)" > $out/matrix-alertmanager-urlfile
+                  '';
+                  runtimeInputs = [
+                    pkgs.openssl
+                  ];
+                };
+
+                services.matrix-alertmanager = {
+                  enable = true;
+                  tokenFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-token.path;
+                  secretFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-secret.path;
+                  homeserverUrl = "https://matrix-client.matrix.org";
+                  matrixUser = "@kuroiris:matrix.org";
+                  matrixRooms = [
+                    {
+                      receivers = [
+                        "matrix"
+                      ];
+                      roomId = "!rqIrWqPvsXqMgYpcNZ:matrix.org";
+                    }
+                  ];
+                };
+
+                services.prometheus = {
+
+                  alertmanager = {
+                    enable = true;
+                    configuration = {
+                      global = {
+                        resolve_timeout = "5m";
+                      };
+                      route = {
+                        receiver = "default";
+                        routes = [
+                          {
+                            receiver = "matrix";
+                          }
+                        ];
+                      };
+                      receivers = [
+                        { name = "default"; }
+                        {
+                          name = "matrix";
+                          webhook_configs = [
+                            {
+                              url_file = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-urlfile.path;
+                              send_resolved = true;
+                            }
+                          ];
+                        }
+                      ];
+                    };
+                  };
+
+                };
+              }
+            )
+          ];
+
+          roles.nodes.machines = {
+            vega.settings = {
+              exporters.smartctl = { };
+              exporters.zfs = { };
+            };
          };
        };
      };
@@ -25,10 +25,7 @@
      {
        "index": 8,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -76,10 +73,7 @@
      {
        "index": 9,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -131,10 +125,7 @@
      {
        "index": 10,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -182,10 +173,7 @@
      {
        "index": 11,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -241,10 +229,7 @@
      {
        "index": 12,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -297,21 +282,14 @@
        },
        "driver": "piix4_smbus",
        "driver_module": "i2c_piix4",
-        "drivers": [
-          "piix4_smbus"
-        ],
-        "driver_modules": [
-          "i2c_piix4"
-        ],
+        "drivers": ["piix4_smbus"],
+        "driver_modules": ["i2c_piix4"],
        "module_alias": "pci:v00008086d00007113sv00001AF4sd00001100bc06sc80i00"
      },
      {
        "index": 17,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "bridge"
-        ],
+        "class_list": ["pci", "bridge"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -361,11 +339,7 @@
      {
        "index": 22,
        "attached_to": 15,
-        "class_list": [
-          "cdrom",
-          "scsi",
-          "block_device"
-        ],
+        "class_list": ["cdrom", "scsi", "block_device"],
        "bus_type": {
          "hex": "0084",
          "name": "SCSI",
@@ -422,14 +396,8 @@
        "unix_device_name2": "/dev/sg1",
        "driver": "ata_piix",
        "driver_module": "ata_piix",
-        "drivers": [
-          "ata_piix",
-          "sr"
-        ],
-        "driver_modules": [
-          "ata_piix",
-          "sr_mod"
-        ]
+        "drivers": ["ata_piix", "sr"],
+        "driver_modules": ["ata_piix", "sr_mod"]
      }
    ],
    "cpu": [
@@ -496,9 +464,7 @@
          "spectre_v2_user",
          "its"
        ],
-        "power_management": [
-          ""
-        ],
+        "power_management": [""],
        "bogo": 4224,
        "cache": 16384,
        "page_size": 4096,
@@ -580,9 +546,7 @@
          "spectre_v2_user",
          "its"
        ],
-        "power_management": [
-          ""
-        ],
+        "power_management": [""],
        "bogo": 4224,
        "cache": 16384,
        "page_size": 4096,
@@ -606,11 +570,7 @@
      {
        "index": 23,
        "attached_to": 19,
-        "class_list": [
-          "disk",
-          "scsi",
-          "block_device"
-        ],
+        "class_list": ["disk", "scsi", "block_device"],
        "bus_type": {
          "hex": "0084",
          "name": "SCSI",
@@ -674,24 +634,15 @@
        ],
        "driver": "virtio_scsi",
        "driver_module": "virtio_scsi",
-        "drivers": [
-          "sd",
-          "virtio_scsi"
-        ],
-        "driver_modules": [
-          "sd_mod",
-          "virtio_scsi"
-        ]
+        "drivers": ["sd", "virtio_scsi"],
+        "driver_modules": ["sd_mod", "virtio_scsi"]
      }
    ],
    "graphics_card": [
      {
        "index": 16,
        "attached_to": 0,
-        "class_list": [
-          "graphics_card",
-          "pci"
-        ],
+        "class_list": ["graphics_card", "pci"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -748,12 +699,8 @@
        },
        "driver": "bochs-drm",
        "driver_module": "bochs",
-        "drivers": [
-          "bochs-drm"
-        ],
-        "driver_modules": [
-          "bochs"
-        ],
+        "drivers": ["bochs-drm"],
+        "driver_modules": ["bochs"],
        "module_alias": "pci:v00001234d00001111sv00001AF4sd00001100bc03sc00i00"
      }
    ],
@@ -761,10 +708,7 @@
      {
        "index": 24,
        "attached_to": 7,
-        "class_list": [
-          "usb",
-          "hub"
-        ],
+        "class_list": ["usb", "hub"],
        "bus_type": {
          "hex": "0086",
          "name": "USB",
@@ -837,12 +781,8 @@
        "hotplug": "usb",
        "driver": "hub",
        "driver_module": "usbcore",
-        "drivers": [
-          "hub"
-        ],
-        "driver_modules": [
-          "usbcore"
-        ],
+        "drivers": ["hub"],
+        "driver_modules": ["usbcore"],
        "module_alias": "usb:v1D6Bp0001d0618dc09dsc00dp00ic09isc00ip00in00"
      }
    ],
@@ -850,9 +790,7 @@
      {
        "index": 5,
        "attached_to": 0,
-        "class_list": [
-          "memory"
-        ],
+        "class_list": ["memory"],
        "base_class": {
          "hex": "0101",
          "name": "Internally Used Class",
@@ -876,9 +814,7 @@
      {
        "index": 21,
        "attached_to": 16,
-        "class_list": [
-          "monitor"
-        ],
+        "class_list": ["monitor"],
        "base_class": {
          "hex": "0100",
          "name": "Monitor",
@@ -1024,10 +960,7 @@
      {
        "index": 25,
        "attached_to": 24,
-        "class_list": [
-          "mouse",
-          "usb"
-        ],
+        "class_list": ["mouse", "usb"],
        "bus_type": {
          "hex": "0086",
          "name": "USB",
@@ -1063,9 +996,7 @@
        "model": "QEMU USB Tablet",
        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0",
        "sysfs_bus_id": "1-1:1.0",
-        "unix_device_names": [
-          "/dev/input/mice"
-        ],
+        "unix_device_names": ["/dev/input/mice"],
        "unix_device_name2": "/dev/input/mouse0",
        "resources": [
          {
@@ -1106,18 +1037,11 @@
        "hotplug": "usb",
        "driver": "usbhid",
        "driver_module": "usbhid",
-        "drivers": [
-          "usbhid"
-        ],
-        "driver_modules": [
-          "usbhid"
-        ],
+        "drivers": ["usbhid"],
+        "driver_modules": ["usbhid"],
        "driver_info": {
          "type": "mouse",
-          "db_entry_0": [
-            "explorerps/2",
-            "exps2"
-          ],
+          "db_entry_0": ["explorerps/2", "exps2"],
          "xf86": "explorerps/2",
          "gpm": "exps2",
          "buttons": -1,
@@ -1130,9 +1054,7 @@
      {
        "index": 18,
        "attached_to": 13,
-        "class_list": [
-          "network_controller"
-        ],
+        "class_list": ["network_controller"],
        "bus_type": {
          "hex": "008f",
          "name": "Virtio",
@@ -1157,9 +1079,7 @@
        "model": "Virtio Ethernet Card 0",
        "sysfs_id": "/devices/pci0000:00/0000:00:12.0/virtio1",
        "sysfs_bus_id": "virtio1",
-        "unix_device_names": [
-          "ens18"
-        ],
+        "unix_device_names": ["ens18"],
        "resources": [
          {
            "type": "hwaddr",
@@ -1172,12 +1092,8 @@
        ],
        "driver": "virtio_net",
        "driver_module": "virtio_net",
-        "drivers": [
-          "virtio_net"
-        ],
-        "driver_modules": [
-          "virtio_net"
-        ],
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"],
        "module_alias": "virtio:d00000001v00001AF4"
      }
    ],
@@ -1185,9 +1101,7 @@
      {
        "index": 26,
        "attached_to": 18,
-        "class_list": [
-          "network_interface"
-        ],
+        "class_list": ["network_interface"],
        "base_class": {
          "hex": "0107",
          "name": "Network Interface",
@@ -1201,9 +1115,7 @@
        "model": "Ethernet network interface",
        "sysfs_id": "/class/net/ens18",
        "sysfs_device_link": "/devices/pci0000:00/0000:00:12.0/virtio1",
-        "unix_device_names": [
-          "ens18"
-        ],
+        "unix_device_names": ["ens18"],
        "resources": [
          {
            "type": "hwaddr",
@@ -1216,19 +1128,13 @@
        ],
        "driver": "virtio_net",
        "driver_module": "virtio_net",
-        "drivers": [
-          "virtio_net"
-        ],
-        "driver_modules": [
-          "virtio_net"
-        ]
+        "drivers": ["virtio_net"],
+        "driver_modules": ["virtio_net"]
      },
      {
        "index": 27,
        "attached_to": 0,
-        "class_list": [
-          "network_interface"
-        ],
+        "class_list": ["network_interface"],
        "base_class": {
          "hex": "0107",
          "name": "Network Interface",
@@ -1241,19 +1147,14 @@
        },
        "model": "Loopback network interface",
        "sysfs_id": "/class/net/lo",
-        "unix_device_names": [
-          "lo"
-        ]
+        "unix_device_names": ["lo"]
      }
    ],
    "pci": [
      {
        "index": 13,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "unknown"
-        ],
+        "class_list": ["pci", "unknown"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1310,21 +1211,14 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": [
-          "virtio-pci"
-        ],
-        "driver_modules": [
-          "virtio_pci"
-        ],
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
        "module_alias": "pci:v00001AF4d00001000sv00001AF4sd00000001bc02sc00i00"
      },
      {
        "index": 14,
        "attached_to": 0,
-        "class_list": [
-          "pci",
-          "unknown"
-        ],
+        "class_list": ["pci", "unknown"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1380,12 +1274,8 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": [
-          "virtio-pci"
-        ],
-        "driver_modules": [
-          "virtio_pci"
-        ],
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
        "module_alias": "pci:v00001AF4d00001002sv00001AF4sd00000005bc00scFFi00"
      }
    ],
@@ -1393,10 +1283,7 @@
      {
        "index": 6,
        "attached_to": 17,
-        "class_list": [
-          "storage_controller",
-          "pci"
-        ],
+        "class_list": ["storage_controller", "pci"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1453,21 +1340,14 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": [
-          "virtio-pci"
-        ],
-        "driver_modules": [
-          "virtio_pci"
-        ],
+        "drivers": ["virtio-pci"],
+        "driver_modules": ["virtio_pci"],
        "module_alias": "pci:v00001AF4d00001004sv00001AF4sd00000008bc01sc00i00"
      },
      {
        "index": 15,
        "attached_to": 0,
-        "class_list": [
-          "storage_controller",
-          "pci"
-        ],
+        "class_list": ["storage_controller", "pci"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1557,12 +1437,8 @@
        },
        "driver": "ata_piix",
        "driver_module": "ata_piix",
-        "drivers": [
-          "ata_piix"
-        ],
-        "driver_modules": [
-          "ata_piix"
-        ],
+        "drivers": ["ata_piix"],
+        "driver_modules": ["ata_piix"],
        "module_alias": "pci:v00008086d00007010sv00001AF4sd00001100bc01sc01i80"
      }
    ],
@@ -1573,9 +1449,7 @@
      {
        "index": 19,
        "attached_to": 6,
-        "class_list": [
-          "unknown"
-        ],
+        "class_list": ["unknown"],
        "base_class": {
          "hex": "0000",
          "name": "Unclassified device",
@@ -1593,20 +1467,14 @@
        "sysfs_bus_id": "virtio2",
        "driver": "virtio_scsi",
        "driver_module": "virtio_scsi",
-        "drivers": [
-          "virtio_scsi"
-        ],
-        "driver_modules": [
-          "virtio_scsi"
-        ],
+        "drivers": ["virtio_scsi"],
+        "driver_modules": ["virtio_scsi"],
        "module_alias": "virtio:d00000008v00001AF4"
      },
      {
        "index": 20,
        "attached_to": 14,
-        "class_list": [
-          "unknown"
-        ],
+        "class_list": ["unknown"],
        "base_class": {
          "hex": "0000",
          "name": "Unclassified device",
@@ -1624,12 +1492,8 @@
        "sysfs_bus_id": "virtio0",
        "driver": "virtio_balloon",
        "driver_module": "virtio_balloon",
-        "drivers": [
-          "virtio_balloon"
-        ],
-        "driver_modules": [
-          "virtio_balloon"
-        ],
+        "drivers": ["virtio_balloon"],
+        "driver_modules": ["virtio_balloon"],
        "module_alias": "virtio:d00000005v00001AF4"
      }
    ],
@@ -1637,10 +1501,7 @@
      {
        "index": 7,
        "attached_to": 0,
-        "class_list": [
-          "usb_controller",
-          "pci"
-        ],
+        "class_list": ["usb_controller", "pci"],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1707,25 +1568,15 @@
        },
        "driver": "uhci_hcd",
        "driver_module": "uhci_hcd",
-        "drivers": [
-          "uhci_hcd"
-        ],
-        "driver_modules": [
-          "uhci_hcd"
-        ],
+        "drivers": ["uhci_hcd"],
+        "driver_modules": ["uhci_hcd"],
        "driver_info": {
          "type": "module",
-          "db_entry_0": [
-            "uhci-hcd"
-          ],
+          "db_entry_0": ["uhci-hcd"],
          "active": true,
          "modprobe": true,
-          "names": [
-            "uhci-hcd"
-          ],
-          "module_args": [
-            ""
-          ],
+          "names": ["uhci-hcd"],
+          "module_args": [""],
          "conf": ""
        },
        "module_alias": "pci:v00008086d00007020sv00001AF4sd00001100bc0Csc03i00"
@@ -1838,9 +1689,7 @@
          "name": "RAM",
          "value": 7
        },
-        "memory_type_details": [
-          "Other"
-        ],
+        "memory_type_details": ["Other"],
        "speed": 0
      }
    ],
@@ -9,13 +9,6 @@ let
 in
 {
  clan.core.settings.machine.description = "VM machine that host Inventree system for Poy";
-  imports = [
-    inputs.self.nixosModules.inventree
-  ];
-
-  nixpkgs.overlays = [
-    inputs.self.overlays.packagesOverlay
-  ];

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
@@ -82,19 +75,12 @@ in

  services.inventree = {
    enable = true;
-    hostName = "${domain}";
-    config.site_url = "https://${config.services.inventree.hostName}";
+    inherit domain;
    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
-    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
-    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+    adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+    settings.INVENTREE_SITE_URL = "https://${domain}";
  };

-  # services.nginx.virtualHosts."${domain}" = {
-  #   forceSSL = true;
-  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
-  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
-  # };
-
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
 }
@@ -10,7 +10,6 @@
  };
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  networking.interfaces.enx00e04c106368.useDHCP = true; # recovery

@@ -9,13 +9,6 @@ let
 in
 {
  clan.core.settings.machine.description = "VM machine that host Inventree system for Glom";
-  imports = [
-    inputs.self.nixosModules.inventree
-  ];
-
-  nixpkgs.overlays = [
-    inputs.self.overlays.packagesOverlay
-  ];

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
@@ -82,19 +75,12 @@ in

  services.inventree = {
    enable = true;
-    hostName = "${domain}";
-    config.site_url = "https://${config.services.inventree.hostName}";
+    inherit domain;
    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
-    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
-    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+    adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
+    settings.INVENTREE_SITE_URL = "https://${domain}";
  };

-  # services.nginx.virtualHosts."${domain}" = {
-  #   forceSSL = true;
-  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
-  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
-  # };
-
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
 }
@@ -9,7 +9,6 @@
  clan.core.settings.machine.description = "A Hetzner VPS machine own by Alex.";

  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.vars.generators.acme = {
    share = true;
@@ -1,18 +1,8 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 {
-  imports = [
-    (import ../../lib/auto-accept-zerotier-members.nix {
-      memberIds = [
-        "dbe44c0287" # Alex-gateway
-        "b0e0b84fd3" # Alex
-        "2bd36db8cc" # kurogeek-thinkpad
-      ];
-    })
-  ];
-
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.settings.machine.description = "Zima board computer for testing in B4L";
+
 }
@@ -10,17 +10,9 @@

    (inputs.import-tree ./services)

-    (import ../../lib/auto-accept-zerotier-members.nix {
-      memberIds = [
-        "dbe44c0287" # Alex-gateway
-        "b0e0b84fd3" # Alex
-        "2bd36db8cc" # kurogeek-thinkpad
-      ];
-    })
  ];

  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.settings.machine.description = "Glom NAS";

@@ -173,6 +173,7 @@
                base_domain = settings.base_domain;
                override_local_dns = true;
                nameservers.global = settings.nameservers;
+                magic_dns = false;
              };
            };

@@ -66,8 +66,6 @@
                "AutofillAddressEnabled" = false;
                "AutofillCreditCardEnabled" = false;
                "TranslateEnabled" = false;
-                "DnsOverHttpsMode" = "secure";
-                "DnsOverHttpsTemplates" = "https://dns.adguard-dns.com/dns-query";
              };
            };

@@ -81,14 +79,32 @@
                inputs,
                ...
              }:
+              let
+                dictionaries =
+                  with pkgs;
+                  (hunspellWithDicts (
+                    with hunspellDicts;
+                    [
+                      en-us-large
+                      th-th
+                    ]
+                  ));
+              in
              {
                imports = [ inputs.plasma-manager.homeModules.plasma-manager ];

+                systemd.user.sessionVariables = {
+                  DICPATH = "${dictionaries}/share/hunspell";
+                };
+
                home = {
                  homeDirectory = lib.mkForce "/home/${username}";
                  stateVersion = osConfig.system.stateVersion;
+
                  packages = with pkgs; [
-                    libreoffice-fresh
+                    libreoffice-qt6
+                    dictionaries
+
                    element-desktop
                    signal-desktop
                    brave
@@ -5,5 +5,4 @@

  services.displayManager.sddm.enable = lib.mkForce false;
  services.displayManager.gdm.enable = true;
-  services.displayManager.gdm.wayland = true;
 }
@@ -0,0 +1,204 @@
+{ clanLib, ... }:
+{
+  _class = "clan.service";
+  manifest.name = "prometheus";
+  manifest.description = "The Prometheus monitoring system and time series database.";
+  manifest.readme = builtins.readFile ./README.md;
+  manifest.categories = [ "System" ];
+
+  roles.server = {
+    description = "Prometheus server that scraps all data from nodes";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          scrape_interval = lib.mkOption {
+            type = with lib.types; nullOr str;
+            default = "1m";
+            description = "How often to scrape targets. Default is 1 minutes";
+          };
+          extra_rules = lib.mkOption {
+            type = with lib.types; listOf attrs;
+            default = [ ];
+            description = "Additional rules for Prometheus";
+          };
+          default_receiver = lib.mkOption {
+            type = with lib.types; attrs;
+            default = {
+              name = "default";
+            };
+            description = "Definition of a default receiver, default is doing nothing";
+          };
+        };
+      };
+
+    perInstance =
+      {
+        settings,
+        roles,
+        ...
+      }:
+      {
+        nixosModule =
+          {
+            config,
+            lib,
+            ...
+          }:
+          let
+            getYggdrasilIP =
+              machineName:
+              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
+                clanLib.getPublicValue {
+                  flake = config.clan.core.settings.directory;
+                  machine = machineName;
+                  generator = "yggdrasil";
+                  file = "address";
+                  default = null;
+                }
+              else
+                throw "clanService/yggdrasil is required";
+          in
+          {
+            networking.firewall.allowedTCPPorts = [
+              9090
+            ];
+            services.prometheus = {
+              enable = true;
+
+              globalConfig = {
+                scrape_interval = settings.scrape_interval;
+              };
+
+              alertmanagers = [
+                {
+                  scheme = "http";
+                  path_prefix = "/";
+                  static_configs = [ { targets = [ "localhost:9093" ]; } ];
+                }
+              ];
+
+              alertmanager = {
+                enable = true;
+                configuration = {
+                  global = {
+                    resolve_timeout = "5m";
+                  };
+                  route = {
+                    receiver = "default";
+                  };
+                  receivers = [
+                    { name = "default"; }
+                  ];
+                };
+              };
+
+              scrapeConfigs = lib.mapAttrsToList (machineName: machineVal: {
+                tls_config.insecure_skip_verify = true;
+                job_name = "${machineName}";
+                static_configs = lib.mapAttrsToList (
+                  exporterName: exporterVal:
+                  let
+                    targetPort =
+                      if exporterVal ? port then
+                        exporterVal.port
+                      else
+                        config.services.prometheus.exporters."${exporterName}".port;
+                    targetHost = getYggdrasilIP machineName;
+                  in
+                  {
+                    targets = [ "[${targetHost}]:${lib.toString targetPort}" ];
+                  }
+                ) machineVal.settings.exporters;
+              }) roles.nodes.machines;
+
+              rules = [
+                (builtins.toJSON {
+                  groups = [
+                    {
+                      name = "default";
+                      rules = [
+                        {
+                          alert = "NodesDown";
+                          expr = "count by (job) (up == 0) > 0";
+                          for = "1m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = "Node {{ $labels.job }} has been down for more than 1 minutes.";
+                        }
+                        {
+                          alert = "SmartCtlErrors";
+                          expr = "smartctl_device_error_log_count > 0";
+                          for = "5m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = ''
+                            Errors occur on {{ $labels.job }}
+                            Disk {{ $labels.device }} {{ $value }}
+                          '';
+                        }
+                        {
+                          alert = "ZFSPoolsHealth";
+                          expr = "zfs_pool_health > 0";
+                          for = "5m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = ''
+                            Unhealthy Pool at {{ $labels.job }}
+                            Pool {{ $labels.pool }} value {{ $value }}
+                          '';
+                        }
+                      ]
+                      ++ settings.extraRules;
+                    }
+                  ];
+                })
+              ];
+
+            };
+
+          };
+      };
+  };
+
+  roles.nodes = {
+    description = "A node will expose metrics for server to harvest";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          exporters = lib.mkOption {
+            type = lib.types.attrsOf (lib.types.submodule { });
+            default = { };
+            description = "Mirror of services.prometheus.exporters";
+          };
+        };
+      };
+
+    perInstance =
+      { settings, ... }:
+      let
+        enabledExporters = builtins.mapAttrs (
+          name: value:
+          value
+          // {
+            enable = true;
+            openFirewall = true;
+          }
+        ) settings.exporters;
+      in
+      {
+        nixosModule =
+          { ... }:
+          {
+            services.prometheus.exporters = enabledExporters;
+          };
+      };
+  };
+
+}
@@ -0,0 +1,19 @@
+{ self, inputs, ... }:
+let
+  module = ./default.nix;
+in
+{
+  clan.modules = {
+    prometheus = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-prometheus = {
+        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };
+
+        clan.modules."@clan/prometheus" = module;
+      };
+    };
+}
@@ -0,0 +1,74 @@
+{
+  self,
+  hostPkgs,
+  config,
+  lib,
+  ...
+}:
+{
+  name = "service-prometheus";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';
+
+  clan = {
+    test.useContainers = false;
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+      machines.nodeA = { };
+
+      instances = {
+        yggdrasil = {
+          module.name = "yggdrasil";
+          roles.default.machines.server = { };
+          roles.default.machines.nodeA = { };
+        };
+
+        prometheus = {
+          module.name = "@clan/prometheus";
+          module.input = "self";
+          roles.nodes.machines."nodeA".settings = {
+            exporters.smartctl = { };
+          };
+          roles.server.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = { };
+    nodeA = { };
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      start_all()
+
+      server.wait_for_unit("prometheus.service")
+
+      nodeA.wait_for_unit("prometheus-smartctl-exporter.service")
+      nodeA.wait_for_open_port(9633)
+
+      nodeA.succeed("systemctl status prometheus-smartctl-exporter.service")
+      nodeA.succeed("curl http://localhost:9633/metrics")
+
+
+      server_ip = server.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+      nodeA_ip = nodeA.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+
+      server.succeed(f"ping -c 3 {nodeA_ip}")
+      server.succeed(f"curl -v http://{nodeA_ip}:9633/metrics")
+
+    '';
+}
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl",
+    "type": "age"
+  }
+]
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j",
+    "type": "age"
+  }
+]
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Z8I3ecNV2N2jed1sPBU+tI5r5qB2nVTO7aNyMxvp0ztujn8kXjw+thSvLGtRygL2V9rSmPJalHQf1IYUriXgCmYtfg5InPDCAqk=,iv:O4rSyg2G6PJWHURZ/BTBKmn1AVekbNBdg5137sOPL/U=,tag:4/CLfO50laZ8ljWkr6o4qA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWxnekYvREdZMTBMVlRq\nRmtCemFYZDhLYU93azc5czdoTVUydFFUL1JzCmo4ZHlrNi8yeW15N2JxTytWeCtk\nbjRwWUVlazUwTlMwc1RZVU8xYlVlckEKLS0tIFVPeU5KMVFwdExFT0wzeXZka2Jo\nSmxEM2RPTWdoZXJxK0dpemUzVkNzdGcKfXdiSeAcNwEZi7kh9c89ss5K+dYG0lhq\nFsf2I0A1csxqqnYJqXPmwlVGMzuWDrWRU0uc+hQLndP3TbadVux64w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:43:55Z",
+		"mac": "ENC[AES256_GCM,data:OCPR2tkbN72MdaczO47UNCJBb1KjABHQH9q7dtVEwoAhKg4QWFtsDaMwBTVE9qe48nlaWQbxT1mM7uztm6RXLkc5y2c3danPUYFj/FK/ffqpaxv3oReyxWqMoGayT23kFbB0TWEx1K8Jp3gOkwCPg+ZRClvhV1dXrfnwIwZHrBY=,iv:3puPIWFIxRF1KtrmyG54LqCc7Zg4/AOMD65QjYdN970=,tag:RoIVltMKw7WUvgW6sNk6mA==,type:str]",
+		"version": "3.13.0"
+	}
+}
@@ -0,0 +1 @@
+../../../users/admin
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Nuq6ege3HJOxpRgA6fnxdD2Wj+KCw+3PaJCxmZirJl3mkRVLnZgUUhr+gOVEup9Ifjl1ZnP+PqV7b9pPR/WQg0LARYtxIC1QGJ8=,iv:v9p9lsefP5V9McAJCzS7v9sl8XHr9/hAL41XwFbwMOA=,tag:ETK+CFFJAAzGTpowQNAZMQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN0NEWFZoZWlyeUtZc3hi\ndnVNcHl4eVVHckRLeFhPYUt4a3BwMElFMVZZCklkU1NEWVVmSGw1NmJmWWkrVHFH\nVTN5U0x3NXdiQUJCc095TElzMWZCMXMKLS0tIHRXQkJNREFYUFFvMXM1Sk53VW5z\naTRjMXozZXZiNU8zSkF5d2hhdklBY1EKWwsPi6YiHKFfAyqWH2u75hw47gzcQOz/\n95Im0FgadhqGDCeZhTDfEAc4b1VWQULInsjeRapzf5OJOwekbz6guA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:26Z",
+		"mac": "ENC[AES256_GCM,data:mTKFSBFnUzu3rldQCHPZHoyzDdwPzBWPIAhemC1XyG5PiQ/OczStjYaLzZQGCpPvOjBb5Ntqrc+dnaOedZgKlOdaPjZs1U2ZDWadoeWQ2TAKWYA6+kN7PXomsxtHhntiaujMy3502eh06VyiutpVuCdzK2cfEwuno8nyIcHgtXk=,iv:/5DRvFVDQA+yd8m/+Cyxb+aIsfwoaFcV6KRQ/7ISHnU=,tag:z31P6CL0NNRlQThqwapVNA==,type:str]",
+		"version": "3.13.0"
+	}
+}
@@ -0,0 +1 @@
+../../../users/admin
@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}
@@ -0,0 +1 @@
+26.05
@@ -0,0 +1 @@
+204:b10b:6057:4bbe:2b44:fc58:c6fd:90ad
@@ -0,0 +1 @@
+../../../../../../sops/machines/nodeA
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JkuciSmL5nmSjcYn22W7iHKzuRxWMJ5dixYllm0aSM7DsyAp9mQzIYJJmalepp7sEhSJ5As3vQW6ZpOQ3G8ZheG06++1GlM8lvVV2FKmYvKHQpI+V7WyUJl7dpfu+5A6BzWES0GbC1g8l/a8sb/+jjEoqUTAj/4=,iv:tehdHsdm2uSRAAzImHhwBSnSBF6lzjLzF9HIPnoi9s0=,tag:dWnQhAiJeCkcssjko+dUpw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVmRSR2xDNmdPYW5MNUVH\nYWVpaTc0TjdOZFBTSEJDL1Z3VG9vVHkrZUFjCklUMUU1bnVmZFJYbzVPd09oZm1U\nNHY0R1hNQnBBc2V4Y2RWQ1ZZRjdOK0kKLS0tIEJkSWFaTDJzMDNJR3QwQzRVdld4\ndDA5ZmZSeTYyVUE5Y1Z1T1l5QmpHRTQKSaN+MIazA8RXhRSyFSkDTyXEp43COpbf\nXOzAhTXja+ut/akUuKadDS4xycZ+ZXAreVmdsF4SWvwZkmPeew+hKQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNmZkTHlaRWl1V3UvcGxk\nR0hhL1lNekNzb0REaEc4bitBZkcwYmRDb2hjCnloQTZUL3ZneWZQZk9NTEc1bGNB\nY3ljdFRMMUhLeDdyblhVY3lSOFBXc1UKLS0tIEJUc1ZpQmtuNlRUUEVmajY5TGdP\ncSs2RkZXcnJYRlEvcEtYSWxIWmkrVEkKgQnfxuZuxl1OpZDUPVuqseSN89WnBGFw\nx2PI3cqN67R2tV/FEjOZo+GFgxW93SYdMvxzg2aG2q/7xOQxfj9sjg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:44:25Z",
+		"mac": "ENC[AES256_GCM,data:gRk1t7xFxXSTUcZQw0DCH3QtRnQJF4Mc4kZeeckhuQdc/VATj+cq+ugicrcGJWbbXzAscQLG6g72+Qiane5nFfzmjNoO6JMe181wm7pY/5St+2MjXZEzwAaYjn6ZAm+U7aiUVcp8RBjFIL9HCvBF8qFl7rqqTvYHnTOU0V6TIIo=,iv:eUvZFDKl8PX5QaQPmwJXaokawQMNP0TGOklTAMgB/sg=,tag:3cHICox8bKWkPKMUgvLuXA==,type:str]",
+		"version": "3.13.0"
+	}
+}
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
@@ -0,0 +1 @@
+0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de
@@ -0,0 +1 @@
+26.05
@@ -0,0 +1 @@
+202:8a70:e215:f822:c67a:f191:b04a:a8f
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JcxiDqZDX3J3ooSeN0pQ28uvI86mtHUf2BEcOQdFIDhJZODGCc+BhZvBQmu2mabV8Jf4skrTWqD+60c1fkRcsM+MMXfoyNsrRyQ2K39mG4kl8jJKVKDs+BqXa+CvZ96kesOMgi9vdc3YUKo5cCLY4bQ9VwymqH8=,iv:W3z8Pbyo2IMzkxI4k14FlirLa28qgZ3rnTAWuusiw/0=,tag:EQc8mo/UvACbt8hQv3zPEw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRDNOSU81alN2THNQQ3ZW\nbHVjMmxaYWpzak1NZHplNTVzZzQvMHg4azAwCkExb0VLYlZUd2JjVGNlcXUyR0p1\nWHk5cXpOeGZ0VFRFTGllQWpxRlBTRk0KLS0tIDhKeUc4RHQvb0o0ZXFXZUNCanVY\nYm04TVBoWjlLT0tFOHRnLzd3RHV2ZzAKVpLtENDySGC6UDgAwhDb+7KJiHXOZF6n\nIaeIQWQqiB+45h72NE3yh02boPK8pl6IoJFcK3e4zSO7/G8jGUp0MQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSUZXVzJwVHdwZGtxOVRu\nN1hMZkltdVM0cnNRL2tSNENkSGV2VzFIU1VBCmRZWlJTODNPMVRjVWY1V1VZcFln\nTDE3N0xsMXdMWityRUNUYWlQOXBMMTgKLS0tIGViTzBrQk5wQXBYQitIb1ZPUitC\nLysyUER0UjFlZm95c3ZGK3hEMEtrNUEKABpoKBUnvzQKSrgsdnU+uyDyED0Tlr7D\nnSsf12c84cvdt0OeCWwf2WvBANZL26XTcFq1fBYOFTJqNLs1ZfO2kg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:55Z",
+		"mac": "ENC[AES256_GCM,data:jjhkZB9NdpvV2R0k9yS/AcUqeMr1RLv1UZwGCemlKSwhBfs8E5NxTXLhtmJeQ+hltOTYpz51BIporVtlaH6ElVnh7khOrG3Lb5cLBrL41QM59y3Tbfu6TjNOE3NyMiWuxZnwuqUGWQjsjrIIhE0ftKnpSpkGHMie+BC3iNSB1tY=,iv:onOVK9eJxWOaIjChQD54tz8lY+r/jpp6AArsBIuoRUM=,tag:2Oas1C5D2kZOe4iiD5huyw==,type:str]",
+		"version": "3.13.0"
+	}
+}
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
@@ -0,0 +1 @@
+2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8
@@ -18,6 +18,16 @@
            description = "List of tenants website to host on the instance";
            example = [ "example.com" ];
          };
+          phpfpmOptions = lib.mkOption {
+            type = with lib.types; lines;
+            default = "";
+            description = "options appended to the PHP configuration file";
+          };
+          wpExtraConfig = lib.mkOption {
+            type = with lib.types; lines;
+            default = "";
+            description = "Any additional text to be appended to the wp-config.php";
+          };
        };
      };

@@ -44,7 +54,8 @@
              package = wp-pkg domain;
              extraConfig = ''
                define('FS_METHOD', 'direct');
-              '';
+              ''
+              + settings.wpExtraConfig;
              themes = { };
            };

@@ -104,6 +115,16 @@
              443
            ];

+            services.phpfpm.pools = builtins.listToAttrs (
+              map (
+                tenant: lib.nameValuePair "wordpress-${tenant}" { phpOptions = settings.phpfpmOptions; }
+              ) settings.tenants
+            );
+
+            security.acme.acceptTerms = true;
+
+            users.users.nginx.extraGroups = [ "acme" ];
+
            security.acme.certs = lib.listToAttrs (
              map (
                tenant:
@@ -114,6 +135,8 @@
              ) settings.tenants
            );

+            services.nginx.clientMaxBodySize = "128m";
+
            services.nginx.virtualHosts = lib.listToAttrs (
              map (
                tenant:
@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}
@@ -0,0 +1 @@
+26.11
@@ -0,0 +1 @@
+fake_line_value
@@ -1,5 +0,0 @@
-{
-  flake.nixosModules = {
-    inventree = import ../nixos/inventree;
-  };
-}
@@ -1,334 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  inherit (lib)
-    mkEnableOption
-    mkOption
-    types
-    mkIf
-    ;
-
-  configFormat = pkgs.formats.json { };
-  cfg = config.services.inventree;
-  pkg = cfg.package;
-  configFile = "${cfg.dataDir}/config.json";
-
-  env = {
-    INVENTREE_CONFIG_FILE = configFile;
-    INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
-    INVENTREE_AUTO_UPDATE = "1";
-    INVENTREE_PLUGINS_ENABLED = "1";
-    INVENTREE_PLUGIN_NOINSTALL = "0";
-    INVENTREE_STATIC_ROOT = cfg.config.static_root;
-    INVENTREE_MEDIA_ROOT = cfg.config.media_root;
-    INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
-    INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
-    INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
-    INVENTREE_DB_NAME = cfg.config.database.NAME;
-    INVENTREE_DB_HOST = cfg.config.database.HOST;
-    INVENTREE_DB_USER = "inventree";
-    INVENTREE_ADMIN_USER = cfg.config.adminUser;
-    INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
-    INVENTREE_USE_X_FORWARDED_HOST = "1";
-    INVENTREE_CORS_ORIGIN_ALLOW_ALL = "1";
-    INVENTREE_FRONTEND_SETTINGS = ''{"mobile_mode":"allow-always"}'';
-
-    INVENTREE_SITE_URL = cfg.config.site_url;
-
-    PYTHONPATH = pkg.pythonPath;
-  };
-
-  inventree-invoke = pkgs.writeShellApplication {
-    name = "inventree-invoke";
-    text = ''
-      export INVENTREE_CONFIG_FILE=${configFile}
-      export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
-      export PYTHONPATH=${pkg.pythonPath}
-
-      exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
-    '';
-  };
-in
-{
-  options.services.inventree = {
-    enable = mkEnableOption "InvenTree parts manager";
-
-    package = lib.mkOption {
-      type = types.package;
-      default = pkgs.inventree;
-      description = ''
-        InvenTree package to use
-      '';
-    };
-
-    hostName = mkOption {
-      type = types.str;
-      description = "FQDN for the InvenTree instance.";
-    };
-
-    dataDir = mkOption {
-      type = types.path;
-      default = "/var/lib/inventree";
-      example = "/var/lib/inventree";
-      description = ''
-        The default path for all inventree data.
-      '';
-    };
-
-    secretKeyFile = mkOption {
-      type = types.path;
-      default = "${cfg.dataDir}/secret_key.txt";
-      description = ''
-        Path to a file containing the secret key
-      '';
-    };
-
-    config = mkOption {
-      type = types.submodule ({
-        freeformType = configFormat.type;
-        options = {
-          adminUser = mkOption {
-            type = types.str;
-            default = "admin";
-          };
-          adminPasswordFile = mkOption {
-            type = types.path;
-            description = "Path to password file for user `admin`";
-          };
-          site_url = mkOption {
-            type = types.str;
-            default = "https://${cfg.hostName}";
-          };
-          static_root = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/static";
-            description = ''
-              Static file storage
-            '';
-          };
-          media_root = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/media_root";
-            description = "Media root directory";
-          };
-          backup_dir = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/backups";
-            description = "Backup directory";
-          };
-          oidc_private_key_file = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/oidc.key";
-          };
-        };
-      });
-      default = { };
-      description = ''
-        Config options, see https://docs.inventree.org/en/stable/start/config/
-        for details
-      '';
-    };
-
-    serverStartTimeout = mkOption {
-      type = types.str;
-      default = "10min";
-      description = ''
-        TimeoutStartSec for the server systemd service.
-        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
-        for more details
-      '';
-    };
-
-    serverStopTimeout = mkOption {
-      type = types.str;
-      default = "5min";
-      description = ''
-        TimeoutStopSec for the server systemd service.
-        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
-        for more details
-      '';
-    };
-
-  };
-
-  config = mkIf cfg.enable {
-    environment.systemPackages = [ inventree-invoke ];
-
-    systemd.tmpfiles.rules = (
-      map (dir: "d ${dir} 0755 inventree inventree") [
-        "${cfg.dataDir}"
-        "${cfg.dataDir}/static"
-        "${cfg.dataDir}/media_root"
-        "${cfg.dataDir}/backups"
-      ]
-    );
-
-    services.inventree.config = {
-      plugins_enabled = false;
-      plugin_file = "${cfg.dataDir}/plugins.txt";
-      plugin_dir = "${cfg.dataDir}/plugins";
-      database = {
-        ENGINE = "postgresql";
-        NAME = "inventree";
-        HOST = "/run/postgresql";
-      };
-    };
-
-    services.postgresql = {
-      enable = true;
-      ensureDatabases = [ "inventree" ];
-      ensureUsers = [
-        {
-          name = "inventree";
-          ensureDBOwnership = true;
-        }
-      ];
-    };
-
-    users.users.inventree = {
-      group = "inventree";
-      isSystemUser = true;
-      description = "InvenTree daemon user";
-    };
-
-    users.groups.inventree = { };
-
-    services.nginx.enable = true;
-
-    services.nginx.virtualHosts.${cfg.hostName} = {
-      locations =
-        let
-          unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
-        in
-        {
-          "/" = {
-            extraConfig = ''
-              client_max_body_size 100M;
-              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            '';
-            proxyPass = "http://unix:${unixPath}";
-          };
-          "/static/" = {
-            alias = "${cfg.config.static_root}/";
-            extraConfig = ''
-              expires 30d;
-            '';
-          };
-          "/media/" = {
-            alias = "${cfg.config.media_root}/";
-            extraConfig = ''
-              auth_request /auth;
-            '';
-          };
-          "/auth" = {
-            extraConfig = ''
-              internal;
-            '';
-            proxyPass = "http://unix:${unixPath}:/auth/";
-          };
-        };
-    };
-
-    systemd.targets.inventree = {
-      description = "Target for all InvenTree services";
-      wantedBy = [ "multi-user.target" ];
-      wants = [ "network-online.target" ];
-      after = [ "network-online.target" ];
-    };
-
-    systemd.services.inventree-config = {
-      description = "Inventree config generation";
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      before = [
-        "inventree-static.service"
-        "inventree-gunicorn.service"
-        "inventree-qcluster.service"
-      ];
-      serviceConfig = {
-        # User = "root";
-        # Group = "root";
-        User = "inventree";
-        Group = "inventree";
-        Type = "oneshot";
-        RemainAfterExit = true;
-        PrivateTmp = true;
-      };
-      environment = env;
-      script = ''
-        set -euo pipefail
-
-        umask u=rwx,g=,o=
-
-        # chown inventree:inventree ${configFile}
-
-        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
-      '';
-    };
-
-    systemd.services.inventree-static = {
-      description = "InvenTree static migration";
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      before = [ "inventree-gunicorn.service" ];
-      environment = env;
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic  --no-input
-        '';
-      };
-    };
-
-    systemd.services.inventree-gunicorn = {
-      description = "InvenTree Gunicorn server";
-      requiredBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      #wantedBy = [ "inventree.target" ];
-      environment = env;
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
-            --pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
-        '';
-      };
-    };
-
-    systemd.sockets.inventree-gunicorn = {
-      wantedBy = [ "sockets.target" ];
-      partOf = [ "inventree.target" ];
-      socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
-    };
-
-    systemd.services.inventree-qcluster = {
-      description = "InvenTree qcluster server";
-      requiredBy = [ "inventree.target" ];
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      environment = env;
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
-        '';
-      };
-    };
-  };
-}
@@ -173,10 +173,10 @@ in
      serviceConfig = {
        User = cfg.user;
        WorkingDirectory = "${file-uploader}";
-        ExecStart = "${lib.getExe pkgs.nodejs_20} ${file-uploader}/src/be/index.js";
+        ExecStart = "${lib.getExe pkgs.nodejs} ${file-uploader}/src/be/index.js";
        Restart = "on-failure";
      };
-      path = [ pkgs.nodejs_20 ];
+      path = [ pkgs.nodejs ];
    };

    environment.systemPackages = [
@@ -17,7 +17,7 @@ buildNpmPackage {
  version = "1.0.0";

  nativeBuildInputs = with pkgs; [
-    nodejs_20
+    nodejs
    breakpointHook
  ];

@@ -1,161 +0,0 @@
-{
-  stdenvNoCC,
-  python3,
-  fetchFromGitHub,
-  fetchYarnDeps,
-  yarnConfigHook,
-  nodejs,
-}:
-let
-  version = "1.1.0";
-
-  src = fetchFromGitHub {
-    owner = "inventree";
-    repo = "InvenTree";
-    tag = "${version}";
-    hash = "sha256-GAATo5zkkNCes9fCQsYUsZ9auhgYEUnevN4obWj3ZRA=";
-  };
-
-  frontend = stdenvNoCC.mkDerivation {
-    name = "inventree-frontend";
-    inherit version src;
-
-    yarnOfflineCache = fetchYarnDeps {
-      yarnLock = "${src}/src/frontend/yarn.lock";
-      hash = "sha256-Ijbkx+INZgsvMhkzo8h/FUY75W3UHnKAdUjQRD8kJZw=";
-    };
-
-    nativeBuildInputs = [
-      yarnConfigHook
-      nodejs
-    ];
-
-    patchPhase = ''
-      runHook prePatch
-      cd src/frontend
-      runHook postPatch
-    '';
-
-    buildPhase = ''
-      echo "Running lingui"
-      ./node_modules/.bin/lingui compile --typescript
-      echo building lib
-      ./node_modules/.bin/tsc --p ./tsconfig.lib.json
-      ./node_modules/.bin/vite --config vite.lib.config.ts build
-      echo "Running tsc"
-      ./node_modules/.bin/tsc
-      echo "Running vite"
-      ./node_modules/.bin/vite build --emptyOutDir --outDir $out
-    '';
-  };
-
-in
-python3.pkgs.buildPythonApplication rec {
-  pname = "InvenTree";
-  inherit version src;
-
-  format = "other";
-
-  dependencies =
-    with python3.pkgs;
-    [
-      coreapi
-      cryptography
-      distutils
-      dj-rest-auth
-      django
-      django-allauth
-      django-allauth.optional-dependencies.openid
-      django-allauth.optional-dependencies.mfa
-      django-allauth.optional-dependencies.socialaccount
-      django-cleanup
-      django-cors-headers
-      django-dbbackup
-      django-error-report-2
-      django-filter
-      django-flags
-      django-formtools
-      django-ical
-      django-js-asset
-      django-maintenance-mode
-      django-markdownify
-      django-money
-      django-mptt
-      django-mailbox
-      django-anymail
-      django-redis
-      django-oauth-toolkit
-      django-otp
-      django-q-sentry
-      django-q2
-      django-redis
-      django-sesame
-      django-sql-utils
-      django-structlog
-      django-stdimage
-      django-taggit
-      django-user-sessions
-      django-weasyprint
-      djangorestframework
-      djangorestframework-simplejwt
-      djangorestframework-simplejwt.optional-dependencies.crypto
-      django-xforwardedfor-middleware
-      django-storages
-      drf-spectacular
-      dulwich
-      feedparser
-      gunicorn
-      pdf2image
-      pillow
-      pint
-      pip-licenses
-      pypdf
-      python-barcode
-      python-barcode.optional-dependencies.images
-      python-dotenv
-      pyyaml
-      qrcode
-      qrcode.optional-dependencies.pil
-      rapidfuzz
-      sentry-sdk
-      tablib
-      tablib.optional-dependencies.xls
-      tablib.optional-dependencies.xlsx
-      tablib.optional-dependencies.yaml
-      weasyprint
-      whitenoise
-
-      psycopg2
-      fido2
-
-      opentelemetry-api
-      opentelemetry-sdk
-      opentelemetry-exporter-otlp
-      opentelemetry-instrumentation-django
-      opentelemetry-instrumentation-requests
-      opentelemetry-instrumentation-redis
-      opentelemetry-instrumentation-sqlite3
-      opentelemetry-instrumentation-system-metrics
-      opentelemetry-instrumentation-wsgi
-    ]
-    ++ django-anymail.optional-dependencies.amazon-ses;
-
-  installPhase = ''
-    substituteInPlace src/backend/InvenTree/InvenTree/settings.py --replace-fail "django_slowtests.testrunner.DiscoverSlowestTestsRunner" "django.test.runner.DiscoverRunner"
-
-    mkdir -p $out/opt/inventree
-    cp -r . $out/opt/inventree
-
-    echo "Installing frontend"
-
-    mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
-    cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
-    cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
-  '';
-
-  passthru = {
-    pythonPath = python3.pkgs.makePythonPath dependencies;
-    gunicorn = python3.pkgs.gunicorn;
-    inherit frontend;
-  };
-}
@@ -2,28 +2,4 @@ final: prev: {
  think-gtcm = final.callPackage ./think-gtcm.nix { };
  think-backend-gtcm = final.callPackage ./think-backend-gtcm.nix { php = final.php83; };
  gtcm-file-uploader = final.callPackage ./gtcm-file-uploader.nix { };
-
-  pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
-    (py-final: py-prev: {
-      django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
-      django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
-      django-flags = py-final.callPackage ./python/django-flags { };
-      django-ical = py-final.callPackage ./python/django-ical { };
-      django-markdownify = py-final.callPackage ./python/django-markdownify { };
-      django-money = py-final.callPackage ./python/django-money { };
-      django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
-      django-recurrence = py-final.callPackage ./python/django-recurrence { };
-      django-slowtests = py-final.callPackage ./python/django-slowtests { };
-      django-structlog = py-final.callPackage ./python/django-structlog { };
-      django-stdimage = py-final.callPackage ./python/django-stdimage { };
-      django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
-      django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
-      django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
-      pip-licenses = py-final.callPackage ./python/pip-licenses { };
-      py-moneyed = py-final.callPackage ./python/py-moneyed { };
-      pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
-      sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
-    })
-  ];
-  inventree = final.callPackage ./inventree { python3 = final.python312; };
 }
@@ -1,42 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-  pytz,
-}:
-
-buildPythonPackage rec {
-  pname = "django-dbbackup";
-  version = "4.2.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-dbbackup";
-    rev = version;
-    hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    django
-    pytz
-  ];
-
-  pythonImportsCheck = [ "dbbackup" ];
-
-  meta = {
-    description = "Management commands to help backup and restore your project database and media files";
-    homepage = "https://github.com/jazzband/django-dbbackup";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-    mainProgram = "django-dbbackup";
-  };
-}
@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-error-report-2";
-  version = "0.4.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "matmair";
-    repo = "django-error-report-2";
-    rev = version;
-    hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "error_report" ];
-
-  meta = {
-    description = "Log/View Django server errors";
-    homepage = "https://github.com/matmair/django-error-report-2";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-flags";
-  version = "5.0.13";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "cfpb";
-    repo = "django-flags";
-    rev = version;
-    hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "flags" ];
-
-  meta = {
-    description = "Feature flags for Django projects";
-    homepage = "https://github.com/cfpb/django-flags";
-    license = lib.licenses.cc0;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,46 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-  django-recurrence,
-  icalendar,
-}:
-
-buildPythonPackage rec {
-  pname = "django-ical";
-  version = "1.9.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-ical";
-    rev = version;
-    hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    django
-    django-recurrence
-    icalendar
-  ];
-
-  pythonImportsCheck = [ "django_ical" ];
-
-  meta = {
-    description = "ICal feeds for Django based on Django's syndication feed framework";
-    homepage = "https://github.com/jazzband/django-ical";
-    changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,39 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  bleach,
-  django,
-  markdown,
-}:
-
-buildPythonPackage rec {
-  pname = "django-markdownify";
-  version = "0.9.5";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "erwinmatijsen";
-    repo = "django-markdownify";
-    rev = version;
-    hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    bleach
-    django
-    markdown
-  ];
-
-  pythonImportsCheck = [ "markdownify" ];
-
-  meta = {
-    description = "Markdown template filter for Django";
-    homepage = "https://github.com/erwinmatijsen/django-markdownify";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,41 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-  py-moneyed,
-}:
-
-buildPythonPackage rec {
-  pname = "django-money";
-  version = "3.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "django-money";
-    repo = "django-money";
-    rev = version;
-    hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    django
-    py-moneyed
-  ];
-
-  pythonImportsCheck = [ "djmoney" ];
-
-  meta = {
-    description = "Money fields for Django forms and models";
-    homepage = "https://github.com/django-money/django-money";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  poetry-core,
-  setuptools,
-  sentry-sdk,
-}:
-
-buildPythonPackage rec {
-  pname = "django-q-sentry";
-  version = "0.1.6";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "danielwelch";
-    repo = "django-q-sentry";
-    rev = "d3a43a90c82734244d5ebf3295652223053f1354";
-    hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
-  };
-
-  build-system = [
-    poetry-core
-    setuptools
-  ];
-
-  dependencies = [ sentry-sdk ];
-
-  pythonImportsCheck = [ "django_q_sentry" ];
-
-  meta = {
-    description = "Bringing Sentry error tracking to Django Q";
-    homepage = "https://github.com/danielwelch/django-q-sentry";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,56 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  pdm-backend,
-  django,
-  flake8,
-  pytest,
-  pytest-cov,
-  pytest-django,
-  pytest-sugar,
-  python-dateutil,
-  sphinx,
-  sphinx-rtd-theme,
-  tox,
-}:
-
-buildPythonPackage rec {
-  pname = "django-recurrence";
-  version = "1.12.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-recurrence";
-    rev = version;
-    hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
-  };
-
-  build-system = [ pdm-backend ];
-
-  dependencies = [
-    django
-    flake8
-    pytest
-    pytest-cov
-    pytest-django
-    pytest-sugar
-    python-dateutil
-    sphinx
-    sphinx-rtd-theme
-    tox
-  ];
-
-  pythonRelaxDeps = true;
-
-  pythonImportsCheck = [ "recurrence" ];
-
-  meta = {
-    description = "Utility for working with recurring dates in Django";
-    homepage = "https://github.com/django-recurrence/django-recurrence";
-    changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,38 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-slowtests";
-  version = "1.1.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "realpython";
-    repo = "django-slow-tests";
-    rev = version;
-    hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "django_slowtests" ];
-
-  meta = {
-    description = "Locate your slowest tests";
-    homepage = "https://github.com/realpython/django-slow-tests";
-    changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,51 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-  pillow,
-  gettext,
-}:
-
-buildPythonPackage rec {
-  pname = "django-stdimage";
-  version = "6.0.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "codingjoe";
-    repo = "django-stdimage";
-    rev = version;
-    hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    django
-    pillow
-  ];
-
-  nativeBuildInputs = [ gettext ];
-
-  preBuild = ''
-    echo "bla bla"
-    echo $PATH
-  '';
-
-  pythonImportsCheck = [ "stdimage" ];
-
-  meta = {
-    description = "";
-    homepage = "https://github.com/codingjoe/django-stdimage";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,48 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  asgiref,
-  django,
-  django-ipware,
-  structlog,
-  celery,
-  django-extensions,
-}:
-
-buildPythonPackage rec {
-  pname = "django-structlog";
-  version = "9.1.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jrobichaud";
-    repo = "django-structlog";
-    rev = version;
-    hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    asgiref
-    django
-    django-ipware
-    structlog
-  ];
-
-  optional-dependencies = {
-    celery = [ celery ];
-    commands = [ django-extensions ];
-  };
-
-  pythonImportsCheck = [ "django_structlog" ];
-
-  meta = {
-    description = "";
-    homepage = "https://github.com/jrobichaud/django-structlog";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,39 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-user-sessions";
-  version = "2.0.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-user-sessions";
-    rev = version;
-    hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "user_sessions" ];
-
-  meta = {
-    description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
-    homepage = "http://github.com/jazzband/django-user-sessions";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,38 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  django,
-  weasyprint,
-}:
-
-buildPythonPackage rec {
-  pname = "django-weasyprint";
-  version = "2.4.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "fdemmer";
-    repo = "django-weasyprint";
-    rev = "v${version}";
-    hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    django
-    weasyprint
-  ];
-
-  pythonImportsCheck = [ "django_weasyprint" ];
-
-  meta = {
-    description = "A Django class-based view generating PDF resposes using WeasyPrint";
-    homepage = "https://github.com/fdemmer/django-weasyprint";
-    changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-xforwardedfor-middleware";
-  version = "2.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "allo-";
-    repo = "django-xforwardedfor-middleware";
-    rev = "v${version}";
-    hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "x_forwarded_for" ];
-
-  meta = {
-    description = "Use the X-Forwarded-For header to get the real ip of a request";
-    homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
-    license = lib.licenses.publicDomain;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,74 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  prettytable,
-  tomli,
-  autopep8,
-  black,
-  docutils,
-  isort,
-  mypy,
-  pip-tools,
-  pypandoc,
-  pytest-cov,
-  pytest-pycodestyle,
-  pytestrunner,
-  tomli-w,
-  twine,
-}:
-
-buildPythonPackage rec {
-  pname = "pip-licenses";
-  version = "5.0.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "raimon49";
-    repo = "pip-licenses";
-    rev = "v-${version}";
-    hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    prettytable
-    tomli
-  ];
-
-  optional-dependencies = {
-    dev = [
-      autopep8
-      black
-      docutils
-      isort
-      mypy
-      pip-tools
-      pypandoc
-      pytest-cov
-      pytest-pycodestyle
-      pytestrunner
-      tomli-w
-      twine
-      wheel
-    ];
-  };
-
-  pythonImportsCheck = [ "piplicenses" ];
-
-  meta = {
-    description = "Dump the license list of packages installed with pip";
-    homepage = "https://github.com/raimon49/pip-licenses";
-    changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,42 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  babel,
-  typing-extensions,
-}:
-
-buildPythonPackage rec {
-  pname = "py-moneyed";
-  version = "3.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "py-moneyed";
-    repo = "py-moneyed";
-    rev = "v${version}";
-    hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    babel
-    typing-extensions
-  ];
-
-  pythonImportsCheck = [ "moneyed" ];
-
-  meta = {
-    description = "Provides Currency and Money classes for use in your Python code";
-    homepage = "http://github.com/py-moneyed/py-moneyed";
-    changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1,43 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  certifi,
-  urllib3,
-}:
-
-buildPythonPackage rec {
-  pname = "sentry-sdk";
-  version = "2.26.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "getsentry";
-    repo = "sentry-python";
-    rev = version;
-    hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
-    fetchSubmodules = true;
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    certifi
-    urllib3
-  ];
-
-  pythonImportsCheck = [ "sentry_sdk" ];
-
-  meta = {
-    description = "The official Python SDK for Sentry.io";
-    homepage = "https://github.com/getsentry/sentry-python";
-    changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}
@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia
@@ -1 +0,0 @@
-../../../../../../sops/machines/bosona
@@ -1 +0,0 @@
-../../../../../../sops/machines/canopus
@@ -1 +0,0 @@
-../../../../../../sops/machines/deneb
@@ -1 +0,0 @@
-../../../../../../sops/machines/neptune
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/machines/petra
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/machines/ramus
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/machines/rana
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:XQ==,iv:f690VBEGgG3saInlNE3a1qQ1M277VYR9E1h9vY9nQbk=,tag:bSo6UjC3gqTTaTpurhgNhA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWFAvUlNwNjlFd2t0Y0V5\nZ2ZUV1hqd2c3UVhHenJXcWp3eHhRdUhvRkZvCm1ENXdKTWNEdTlLdTJNdkw2aStG\naUZJWlFQUklGdENRQVJPVVhMTllvWWsKLS0tIG5NYStxLzVNNTNTam16cTVGdmk3\nOXFvUFZNVjJUVjhLSDVpdDVxTGFweXMKuMr3TBUMhaZgY83K56cY3kLlY8A3c6Uu\nJQUFVVeQeqJEJJ8XrO4af9gmsNlA8b7JuQd+Z4UmIUV3yYstPpu78w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyRlI1SzNhQ1hMZENJM05D\nVUNCbVUzaTk3Q1hTUDRKTlhNbEo4b20vZ3dvCkpKRzcwK2dDRjZWdkI3TEEvUWtC\nUTUzOXRBV09lS015UXprTlI0KzZ4QTgKLS0tIERMK3YvdmZIYXZUM0MzWGVLVTZ5\ncmR0bEdJSXNqU3ptdVcrcGNqVlJaakkKNcTljnAt9DVDkJ5xlJGxdTgWhb18jQBI\nNdZBgEz6kN9F0M8fw2mFZ8sgErqwRrGOQMpDySjzfACOxgBWC3WdCQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZMT1UrbEtF\nT01ELzV0MGtwQVhCWEl4SCtmdnBqWThOdjNxNVdRY21zU3MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4STJGa3ZJOXVrTFhvV2tBc0Z2S09U\nWWtuSURNQ0pTRCtQWUkvMjR0c0xRCi0tLSBjSXp3QUpETTI4ZVdGV0NINFlGb2FT\nUFhZWlFhY1hja1lSdDJNSUNhdi9ZCh3aPXElrsyRsJ379AS2wVFt1PWE/BbA+4Nk\n3FZ/KzU1EUHJ1FXiNJIFISgJdY/rwY3gaOmNt/9H2axodm3WvSc=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRrTktRMnpr\nSnpHOUxxRFpmOTVBRWFiVjc4eFdVZkRYZW1tUUZFOGU5UWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp5SjRzS2twcTNXL29FRjVWQ2NCdzBk\nd0VJeDVGZHVnZ0FSaVQveGxrT0lrCi0tLSBZM1hHUzJBQ2gzdlQ5STJHd1kxMit1\nZ3VEK0FJRElsVnBodTh1WW9wVkswClZWGWkBEJXQbRKzDSA7NMnAjX4t9WOM6KqR\nbxj+MqvM6Ps1oP32GNHOXtQeoLcj4D1lV8iFkn7WdolvVWjSkEo=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJoM2R3WVFK\ncVJtQ0dNakE4OHlRS2pqOStWb2tMTm1KZDM3SUpoUjhmeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5OTBCc2c2bVpLcWFza3Fxak95RXNF\nSE5qNTFFSHgyWHBlNjlLUlcrbnMwCi0tLSA3VnJVY1QxVTNSTlhkWHoxNC9VTmVj\nYUNvMTMzak4raHE1OVUvNUNoajBFCpUxBeSeyCWAngZcs9tzWTAOsFS2//9hKbmz\nJEEpzcPVqeUv7fx5K42FcCAWg5QBs6UvgEYJWBhI8N6NDRpcSfU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4R0oxdjVRS0JrZHdhVUZh\nNmQwR0pkdUtJb1htWVI0MUNldXBHZHc0dFNnClZaZzBBdXZyUlZhNGkyRkFMMkdq\nLzROL3hiSk5oUzFSSHBWRzg3RWhGdUkKLS0tIFBzR3RSYVlMVDc3NmpUS2FGWWNt\nYjZNN0ZCNWJjTDE2bEM1L3N3L3hpcEUKeO8xcsskCEK+5l8GyP63mrQdDNkSVsKd\ngMishyxOB7xEuMxWOA/DO8FaZeCuP2AOPpZlHFo7H1ez+8py1Bc9sg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeTc1Z1NEajdSRS9pM0lB\nZjIweCttNzZjdjBMaU1rVzJUeUlRU1JTcHdnClBDK2lDVHpxM0d2TjdLOHNBaTJE\nY25iRnhNZUNsdHY0RGRma2RUTzdrUlUKLS0tIGtKdmt3RUsyVzFkWXVWc2dLODht\nU0pZQ3NYWU5XTUdQdEljTGdQdGdEdmMKwkvHr1+xle2ZIaW/ghAEZrqARc1Yp7BL\nnxnaDYJ9At5JDE2772WplR9m5VwVIhxs3F9TthNAqX5evIIT29XJEw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKajg3eHNPNEVyOU94SlpP\nMXZVMXJZdDV2ZGhEbTkzVUkrQVpQbmMzbWc4CnZTYlROUXVUWTVRN0Q4aWl2dVdp\ncGYrSW9nZm9pa051N21oSURNdVdiQk0KLS0tIHEvNEdBOXFvOE1xd2lqUkc4OUFF\nYWNGQ09Uc3I1Z1JaNmVoSWpDTXR6ejQK4aH4mY9xyOTKlOX1FbnRKSa5nlLFFZ2r\n/2a9T4VITbn2rwsRDAIQ8ahSF6F/gX9bGaoEfV139tksDLKiegwDuw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSm94NitKV0pQUms3UDQy\nam83TjNWeUcrUnc4SytucHJzUWZpSXk3ckFZCnA5cGhaOWxqWEhUYUdkdHg3T3Rj\nSHFmWkJOak5QYkcvQ05nR0ZWRXoyWEEKLS0tIGZJa0RGRGtFOUZHRlYrWWl1Tk9j\nZWdhZU03MXg4UDFtRDEvTTZZNTFXU1UKCjJiKd53R0b6Nfy2140TfrSxv2ay7ayX\nbbGgfGOw5/ENiZFvzYDgaLK/qi7TFAXFxPXiV+vXD+yJ6pw4TrJWVA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:52Z",
+		"mac": "ENC[AES256_GCM,data:1wtp40HFGQEqZVl0qxU6dFk1zHB0XjEHwqgbkRxeWjxeJaZZsRcDvfHSd1FU25raq72malUcoNLX8l/SffSpo0VvM74x3Yv+Yts7rRDMcodT97RLo7Xlz8WwVQUTYXt6ngzmLMOkZs4Ym0jHszfSNbv8udaVQQ1Y1AWJak8DSSM=,iv:rsurQo48x0MFbvWFa7Bhxpi464aNk2lUTm71TRkCOZ8=,tag:e8Ulz207nxxdOXasjPIZWA==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:jKGJLrlCqKb/CDVTE8PpQ2HUyYV7F9tlTfFmiQwMZImru6wb+TB3/tiJVGONhVcTOjuja9B0HurZtuEjvhNZTqA=,iv:idYQmO5wrCB7QYjP7Hn6LshfCWfGYu0J/gR1GMAVjPU=,tag:SBud521kzk0n1wLr0LTR6Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzL1ppL3Y4UFNEWlQ0ZElM\neG05NG05My9uMU16UjgyK0toSENnYit4Sng4CnhNL1ZqcmxxWlQrdXlKdk56OGll\nUUQvSy9MT3Axb2hMd3k3OHNxUkd3dU0KLS0tIE9kT0dYUnZ3Tmtyd3kybUhSNk1O\nWWROSm9GdXNJMmtjQ2w4RkY0cVZkek0KI/iVecApWmmVlQfqBJpwiGqgZKaI7aHl\nYxHmCHRiCzFyOq33YvJlVh9eoVRSyBDWtj09+YsAAR+b6NfzFhUSuQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXM2g4ZFVBanlNU0dIam1O\nUHN4dE5MRy9ZMlNtMXduQkM2a3dydXFCN3c4Ck1zTUphTUJ5Z1VCa01ENFhhQ0la\nRmsxbnByVWRDbzJiQ2M0RUxGN0xUWU0KLS0tIENoeHlhYUMwR2F3M1lNNHBxVlNh\nL3Nzb0R1M1R5MmNMclVjTWpvMy83Q2sKghhERvhy0Jg4MUhsWsv4kyBkQLRKP6kJ\nMrv7j69aVPBw1qitl9ma24Zvrlm9MKGmMPzCMQz0/lgaoHuSS+gm/A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEo1Nmhrek8w\nV0dFR3NXdlk2dkU0QVh2N2hMSVNLekNwUStxUEVheEJ4Um8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpRWXlYeW5JM3E4WUNSRXVlT3NjM0hv\nK3MxT25OYkpMWVYwQlVBNlo3Qng0Ci0tLSBGZnB0Zk5rR0YzU0JhUGtyNDZZc1Ru\nTGp4Rm5nTkg0MFB0RHZ4UU5TNFVvCpz9KE5PCUcr29z9ToY2hZVcLkG7JIdcJYXW\nC0cD9uKDxhKFpqRcWuuwDsMoAGjflx9srzR40ZrRkrBVDxa4y1w=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBRd01mWXFr\nMFZPYktsbjRWR1VOazRBRFpMTGRkV0ZWWXRPWGVsUXM3MzAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpDcWtuTjJZY05vZGx4YVJ6WmtvN21v\nTHJRcTF1bE5TM0FxWVdudEJVSmg0Ci0tLSAvNUFIS3pGbm1HcEdsZHFIS3IvSWFv\nc3lqbmlHTFhIcVZxQU1EbTZLWUgwCq4Y3O7VMIVcx9nS72nbkjQWVBLrqYQh69Ce\nZ0m+vKmM//pzQvfSkOHiWQpgEfo5U3wFXwmAdNObH2AexQC09ac=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVvZWkzNFhU\nRXZMK3pJS2JDVFI5TzhmMjFQcFdodHFTUzBPWklnYStvQjQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowdUxCQzFQWS9ic3QzTHpPZ1dnWm5E\nTHpzc2N3NTZSL3lta2tIakFpN2lNCi0tLSAzd0FyU2hCZy81ZDV2cEQrSHRYRnh5\nVmZ6YkdhdEVsUnl3NlZRREJFZUJ3CllrGYypYfWjYDliZtUdHDWyXCxJygclh7R2\nubGeX2TxXT3oHQoVZFt/g3q/SaFLkvQSKb6eoJ21FTxmhKL5Wbw=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvbWpOK1lOVm9IZkE4TVJu\nR0ZmSm9XOVN1MjJkdmpFZTZjaHc0a3NVRm5NCk1YU21DVUxOSmhLbWgwTER5MDFJ\nZGp3Q2VsdU5oT05sUkRaVjVVajV5TU0KLS0tIHR6VGpEenErdVZwdE5OclpLUXNo\nSkNreVE5VXJyeU9Ja29BemluMVlPVUUK2d1jSsh/G1zbb8Vx6SEpmTLoUbw3peRm\nxihaBgo5pvR/+TLZzq1Vn2mxtF0S2JvdHb0nxNTzrS9y1LM+96GzTA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQ2Qzc0IyQVZMc1F0cUgy\naDRYTWRRV1J2eVFxNVBIT0xsSGFtYk1BZFV3CnFxN3A0THE3a24yc0FnbHNIbWJs\nRDVrMEt2TEdZNHNPcDdxQmZWT2NjS2cKLS0tIEoybjhyVVdWOTRENkNwZUIvUnFW\ndk9oTFJzQ0oyWDQwczluVlpJM0E4aEkKA+O7f8WoGAR2XsqWcszqchnyt9A+FQiH\nprjCvyqs5gI9f0GNnyEb0P9kINg3N1KQKTwc7Z/vQ0e65+0QZBf1xA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5U1JNc09WKzhpaGRSOTJW\nZ2NjeUVWOGQ3cFl3M2pQUEN1YWFVVkN3c21BCm9DWnozcmJ2YndGVXBBcCtvNkxI\ncTNISWh5M2V1UDdWbkp0UkMvcGZWZGcKLS0tIEo0UC8yYXlianFtRzk3NFg2Nys4\nOTVaL0JaTlkrVjdURWNqaWN5ODRkKzAK1qVcufGhRdv4M6LyJNuJcDjLhiy2eVeq\n5N6n1GW54fHDzWQc4ObvePA+CiWvJjwvYWcimPdzkxeu5yUy18BqQQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKbUV5bXBwV3kwa28xOG1v\ndkdxWUtLY28xdEV0emx0RmtoUmV6TjlTdlhNCmlUNk9aV3lERkpTZEFUOEpuYVB2\ndFp6S3VwQzgybzFPMzNnNkxlVkRvdHMKLS0tIGZ5MXNuOVRudUd5dy9SVEpEanlY\nSHNuUG5tUVAvdzJVck9yQzZHNzh2VkkKZ4hWv/E7TjXkmd0HhmGqsqjGCcjTIRgN\nnYtyEwoep/EhWQoEEueWT6d0R5Wm4cIcb+vbST3QNB5lOb6KBhzucw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:52Z",
+		"mac": "ENC[AES256_GCM,data:T9qbqOKRsNL1qD9JROq//s7QuGjpqf+9C78Lrh/e2mbyws6sAEf+3Bx+NVO+LZNv5wDgkphpmyOJkokSRzNYUQi6VqpkOUXoKJECCRCWqOEv5JgJFasL4x9Uxn0cBuHFchfutEZokQMBibr8U0fR7k6UyDNmVmWpU5vCGcQoQT4=,iv:n7krI9vptczld089e3SQkYBs0wFAXtBtFY3y4VYb590=,tag:DXU0+bRT8Ow3siGplePQMA==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:2+r0C3GzeILOk03VZqx6KZJL01PJfOdmEdF8K2hMIGCNFMt/qr/wMl8=,iv:v3ellcHsxTo/owEIwLpw3j39c953MwJ2L/TDzQkQfwA=,tag:iW7E4M/lDQ5DrTaBqv1r0Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArMU9lTWNFR0VHeDgzRjVU\nTmZZdmdNcGlsRG53NndjcFlsQnJ3MDE5OUZZClJVODRJbXVQN2p3Z05NTHNNUnNP\nZmRUYWxkRnFLZm5Ganhpb3crRGZzREEKLS0tIHYvZDVFQjB4YVdkb2ZzMk1LVkpX\nUE11M3VMT3Mva0ZYY0lmOXdNZzI4MHcKj2yfol8ZKSFYgtTGTmEGhE4MVruS1bgy\nrSVY+ffodAhWvSZmhRE4VlsTBrI38X4yth5qnaYB/IbuD0TCJo5KcQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBUzFEeXRxVWJqb2NjWDU3\nNDQxRWE3K21XcTFMdjFoTlZWRmNRU0NyVFM4CmZoT00vTkF3cEJ2UnF0cnZEdUp2\ndng2czdoUHg3UkFEV0loWnZxMUZGMDgKLS0tIGZPMUJPNnVLeU5ndEZ3TjJRbmND\nMkdUU1ZlUHFqNjRQdVZXTy9ibDdzak0KfCS0Br4rKzOaaKan6FnVEw1DPN+pSphN\n32dtpGhYyKqiASTRjVM2n9iIctfgDkx8BdAKGbYspgsDT6BXqBc8Xw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGU0djErUEx4\nbmdqMlBsWllMYjN5L1BLeWo4WE9IOU5Ra2JNRXcxamhMeUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoTlJIU1g5a2I4N04yN3pqcnZ6N05R\nZzN3WEd3YUJLazlETlZMcVZHN0hVCi0tLSBDenN5SDQyMlJKZTNkYUFFR3dLT1lH\nMTdqNHkwc1ZpdDFiQ3FhU0xWUGFvCjbASZ4dw1FmtdWATxvv8kI6Sji+M8hY40ah\njKXpFxVWyqxEQV9h4/nEd4Kxguv1wEFHS7vZTLdI6s0jau1oT4k=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhyRDViK1VC\nQ212eG0vQUZUMjNhcFVlZnAyVnhCSmpKS0plUzluRktDeW8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxelBZZmtUWU9ReER6aDYwVUlzYVVO\nZkhYUWw5cUM4WTdpekZnbC9NR3NBCi0tLSAvcmZBL3lpMEUySmNGUmh0Szd3WkhV\nWlF3U3pyT1dzVzlnbXArN0dkKzlNCo+M506bAM300pHkSBQ3BHW8bNuJLsJqzG56\nWpnh6afm4kTsQFIJxJ4M+2PAeNi8SspVEEB3tcorKxesJViNnWs=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDByTHMvRklq\ncGUyZmZLazBaTVJJWWlHZWIraEpPSkhYcU02Rldjb0lzUW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYQ2doeFR5MXEybnJ6SFZ1aSs2QUNi\nN0tXUWpmMVhvMHRHR2xHUWUyM0Q0Ci0tLSBJZjhyK0E0a2pHUlVYdFVGSnBaWEVO\nazBTQ2d6SGhrVzJiZVRxaENtN2VFCqcT7QRZYWTw7ijJDdE0tsGIO8YrMH2CwedE\nHJWAwbNRPmjHrbl9wcONkymYBrp7dtwg6JSFFavhVGIFWG9cprU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQVC8xUUIvZmFxOVRYTEZo\nMThpWU1BUW1SSUZnM3lXYzhVS0lvSUhmZWxBCnFzUGFHZ3RqQmI3TklSK0NTUHU2\nMFQrZXN6dUU3MUw3TEJCUlIxWk5UZ0kKLS0tIHdlaTdyckNiSktOUy9qVEZRdmND\nNEpLZHpRZUxrSDFwWVJaQmFmeE56SlkKaJGDEe9kzRcZnlFFBwcuwmPABlePnpvC\nroSVlSFNS9kvCfyRC8fq2ruBh9rsvBOYbpXzo7/i2CJ7VQpy+pVcqw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcWl0bHc0elY0Q0JieE1T\nYUYzZC9EYlpvVjZXV0I2QjJUR2VuU01tL3pBCi9tb0VtU3FzNllLdVRtWEdTbGU4\nUjl6VDU4RHRHQkNFUkRscG9TT1BvVTAKLS0tIDNyTjRIVlNGNThCcm91Ykw2NCtk\nRUtnZUNYOEJlVTFIbWFpU2JBUWlna1kKqYAHYkm1JvEYLkf0hGyjFapm+8hpAlux\nuMs6z1grw5gkmfsBAK3/Byoc5QiRoILMbuO50xMwv0yDmY7B/FvcBA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSzBCRWVXVDQ5SU1EY0dh\nWWZhSWpyWFNaMyttN1ZoS0lacU1oR3psZ1hnClc1NmtiWWk2ejNnd2ZPQ1BEUnh6\nNUlSeERUZFRESHAvWnByK2JFYlh1ajAKLS0tIE9nMGtEbDVzVVRvMk1qdi9MaEpP\nc0dEd0UxRm1aSWN2K2hqMW1Pdjhwc1kKetv/ihHoxnrZv0Hxqjcib4zXeRMzXAJB\nDtzaeXVtt3lDokBEi7ekwxLEhPICd8k5Ur4+ja14l7P5O8otvqGobA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTmQ5T3VVUWdmYmRhdTFL\ndy9hV3M5N1ZHeDNuYnZoL2lIQ2xFMlF4SkJJCi90bGMzWThKTlhoV1Q2d2dFUzFm\nSmNvZy92UjNnNEtiRS9GWTdma2hSL00KLS0tIDVJeWtCK1NveDhKYTRGaHJ3ZXhT\nYTRNWXowaWJHUFdOY0VpNjY1VHB5cGcKWBXUuirkPCSeylhyk+rUderaPOEyLO0f\nGeKlXJlBnLfleID4Zj55xf9PeJvY1r5uQHlyfijVY6APaT6cjsouwQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T03:55:40Z",
+		"mac": "ENC[AES256_GCM,data:kQN3NRQCHHpr5XGRe6tpJefqueP4JX5t+Jwzm86EftDPJc4ZqPCXQAUr+K3328afkNCE0lEs2DHJTWL46AaY13211FDcVRJXbEDickGFXt9pz1wNUb128Q7k94Qz6949k5/prGhAGu6/65FCn7g2y/fJM1/k7L8Xx1eKfhGmZQ4=,iv:FK5VCj//NfNHPrpz1pb8PPYe7cbuprUR+fioUb+IrR4=,tag:wUDwgIVkku0C4j8U6++XuA==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:GtxtVBjBdyZeo8AqLC/VS71V8nksvSJLh9HJUNzSq2wia1ma7mxkJuUYAbzWXkgMbM/L1xA8FO1Jf9oHqZQ5JLpKPbaqxsLZlaPfgCMV8RKCCgNvj4y0Zw/K4td5zlK2ZbhClDY=,iv:ffVEbP3IO8rjajV1Pfplhacu9jTRONaIBL2jJhTb/ao=,tag:r3y55pyxDcwqMU/fD9eZlw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5UzdTdzV4QTh6WGRxRE04\nR3pmekRnVEJWNjVlUkxuWktKSW1mVzdmQTBNCjI5ZjJiaDE1anhRaW5wVVJLUy9Y\nOFMyNDU0QWRtZkhVMzZPT2NEdGZ6WlUKLS0tIGRGVnhpU0pBem8wM1pPbEJ1RnhZ\nZG1pZWVyU3czM3E5eGp3Y2pZalVKYncK/SrbcQlYGMCTUnqFV1u7a9+rLG6ixPe7\nwjKA3Tuh88rbZXz5pWrYuv0swgGJsdi3kp5gGvMWP/EvCV58xTKqEA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkaTdhcjBqeUZKMnVBT2Rp\ndEpKQnFkU2R4aGtVMitRaEJyQzhnM3BGcHhnClRYemJ5VFlBNm5CN0Y1aHI4Smo3\nenN2T2NsNzBRWHdySFJaZ2hQN2Evc3MKLS0tIDMwdHEvdmpEa1NCby84LzBZVWdG\nOENBR3JuaVZ1V01PZFlnREVUUmFITUUKUAY+1S0uq9uVvGqvUoanfupapEB3jLAI\nR6tdwzh9wI6Zb78i2FFQuS3iQURr/kMomBkxACe6sk/L54uIGWHu5Q==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJ0dk4vSVhl\naGg3MkJON01kWnRhZW9id25NdHNVbndlZXYzWW13d0VYM0UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1NXd5ODhvUkpxWkZNalhEczRoT0xi\neTNnaE5lSW5LN0V6T2I1ODk1alVjCi0tLSBWYnhHbHZiMlpQKzIwU1Q5cTB6WXVm\ncHlUK0NlSXpVNEZXZGcrYURzVTlzCozH2Fp9sBCiq1/BkVMPTgiOLCI4JIME3H9h\nP1c5G5a9FfFOeiKry1+UrL4sgQzL+upVjxZhJKPhLmXt0sZBW70=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpibTZUUHor\ndGRLZ1J1NlFqZTJEYVpQK3NqRG9qV1JvY3dvYzhjQkR2aTQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpoWW41b2taN0RhWE9UN0dWdUVOUVh0\nZjRoNTVlQ0NsMHJOMkhtcTNNY3g0Ci0tLSBjNjZ1bTlWOFcvK3dFZnNnbzNaNzNm\nN0xPRU9hdVNoWnYxZWxTMW42bVlvCrt3vrG7BbU983ga6mONomW7BP9C+X5aq2dR\n6KV2j/q1UV68rZ6msDrMZlgUnLmGJu4v1JcanCifi/R2W1lCSb0=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpEOU9BSko2\nbytta2tIQzV4QkN2blhDQlZnL0JEZlVUMlpkZ0dlbjJEa1kgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwphZlFLWWo0d2hDcHorSy9ZekN3cWdR\nWUZWd0VRZDRORXhKSFpySEcrRmZvCi0tLSA4aUhkZ1ZrZ3lFZS92L0EwVnhxcHZr\nL2hieGJEeEtHbzh6dFhOQkY0N3VzChN5tjuxaPZtUJ2BqDpyhC/5H3CTI9RrP3Ga\nVs8Ye1GmwmkFeCLOeQFPdwQI/dgSKGjtPKqB9MIYmiJd4Kk9O4I=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNUROcjVleEVNZzQ4K3RD\nRHE5VjNOOUoyZS9Mc083K0RpYzFLb1BPQUYwCkpjS0R5eVorRzEzTi9hUzhyT0J6\nRkpycXB1VnI0aCtUajlEQTRteUxvVW8KLS0tIFdUMkUwMklLMkJQZklZQXdORlF4\nYWZoNkVvNkQ3NGpLbmxpNFQwSENJa28KuYjqVmeGwguUMTka8LWfYPNKMxRsk9cL\nOZyHoHVle7VC096VrQ9lQiNNuRQ+V/UXIHWJlPpus9I8BG5hMqgcoA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ZWFXNWNxRk5YUFhjWm5I\nU0ZDR2lHQXN4MCtPbDVBdWFoUngzNTNUOXg0CmIzMi9JdjBYWDBLandFSWpqcVRW\namdwbUpHMGw5YmdsVFZhQ0NCQWpBVFEKLS0tIG1BQ0FuUHRSVC9DMHRPcWhac2lE\nd0tRMXdCUmI5TWJYRWhSVkQ1L1YvRWMKvkLrqRQ5g8830aNZUtwYhYWr8+I5X8u7\nLJRfPOrlmRkYqrWzgtDzMEfa27gtHKgLPH5+F2rvtS9R1XAC/aDDUg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TU1nQU4yTDV3cElucUpy\nNGJnZHJLS0VBSlo2dllCZXJPS2ovZVlCOFdBClJ4ZHNDb3p3MDJMWnhGdXBJT28x\nN0dUanVnYUdITW9ua2hnR3hmMHp0aGMKLS0tIHB4R3lqbFBaeWJrNnZjdi83aTQv\nZG90SEl0d3J1bGZSRytCc1gzeVptWXcKo4ZO9xm1gP4g4UnVLORfKFc4b1yGeByW\nIT6CN0Ehl1MdmsAV+c8OdYOTtt3cAiNgRQO3cwLICcFLg7UGXbjR2A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqNllsY25ud1RSOGJSQUg5\nbks1L2Q4ZFl2L3BYSnZrakRkMzdrTHpHNFRZCkI3blpSaUowSEhDN1JZV0J6MWhh\nV21kOStVeVZ2Tkk2REdUcVhpMThXT2MKLS0tIDc0RVhjUXM0d0p1Njd4ZGNzbDJo\nY1ljamR2cWw0aWNmVGpDVTUvMnloVGMKU57AUYYAdnliW6YhuSMoAuZ9N/nuvmQZ\n1UnPvjXTdu7zxSya69Orm9BCmhR+ci/wr9RAgFucpS/y5d38nviwGA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:53Z",
+		"mac": "ENC[AES256_GCM,data:9GFeV2wY1cl+5dAEwqOVTWnFWPw87B4X7VwuP/NViExx7kr3zTX1T2ExsENViVSLWALsETTX6HXWawUuPP3sO358MeQImz7C4eSdCfuSQY/49E4YMUgBExwNJQgWyu2YJDuTcMdSIfw+FlYTzCErTjZJobtcElH6i7MhsgOJLXE=,iv:sBQnyEcyMl7d01leHoZ8LTef9EWaVZspCuO5NqriTB4=,tag:Us4k8RgscyXWHbPXvaH0MQ==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
@@ -1 +0,0 @@
-../../../../../../sops/groups/admins
@@ -1 +0,0 @@
-../../../../../../sops/machines/sirius
@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek
@@ -0,0 +1 @@
+200:a785:5b01:5309:ebc0:3942:2a48:55f3
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kurogeek	693a97ec26	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 21:54:51 +07:00
kurogeek	7affc0d68a	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 18:56:54 +07:00
kurogeek	bcb672b3bf	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 18:49:39 +07:00
kurogeek	9d5c033316	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 18:42:02 +07:00
kurogeek	03e84fd210	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 18:36:08 +07:00
kurogeek	ddbc062551	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 17:37:44 +07:00
kurogeek	ea36ad21f1	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 16:28:51 +07:00
kurogeek	27a3c29335	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 16:11:10 +07:00
kurogeek	50622270ec	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 15:41:01 +07:00
kurogeek	6d2e73267f	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 15:12:47 +07:00
kurogeek	6d5ce0a0a0	mob next [ci-skip] [ci skip] [skip ci] lastFile:modules/clan/prometheus/default.nix	2026-06-19 15:06:27 +07:00
kurogeek	dffaf4bf0d	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 14:38:15 +07:00
kurogeek	f442d0e2fe	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 13:24:55 +07:00
kurogeek	50a7051772	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 11:53:51 +07:00
kurogeek	141f7e5417	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-19 10:55:40 +07:00
kurogeek	4b9842b471	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2026-06-19 10:16:47 +07:00
kurogeek	8602ba81af	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-19 09:21:01 +07:00
kurogeek	0ffe7bbec4	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-19 09:19:35 +07:00
kurogeek	85950a8228	vars: update via generator prometheus (machine: rigel)	2026-06-19 09:17:53 +07:00
kurogeek	41c03f6e37	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-18 18:32:30 +07:00
kurogeek	c4fef43305	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-18 18:31:55 +07:00
kurogeek	921e8a86dc	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-18 18:27:54 +07:00
kurogeek	e9dfe64b1a	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-18 17:32:02 +07:00
kurogeek	8f33f43e4d	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-18 17:31:53 +07:00
kurogeek	8a735800a7	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-18 17:27:33 +07:00
kurogeek	7c97bebd83	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-18 17:11:26 +07:00
kurogeek	3849f740a4	vars: update prometheus/envFile for machine rigel	2026-06-18 15:22:12 +07:00
kurogeek	e91b56f362	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-18 14:38:58 +07:00
kurogeek	aea39aaa03	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-18 11:32:18 +07:00
kurogeek	c035a73ade	vars: update prometheus/envFile for machine rigel	2026-06-18 11:31:57 +07:00
kurogeek	146fb52255	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-18 10:33:48 +07:00
kurogeek	4aad668419	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-17 22:08:03 +07:00
kurogeek	bcd94f692e	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-17 18:26:39 +07:00
kurogeek	09ec20c366	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-17 18:21:01 +07:00
kurogeek	ebccb4f47a	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2026-06-17 18:04:56 +07:00
kurogeek	b697e5f037	vars: update via generator prometheus (machine: rigel)	2026-06-17 18:04:51 +07:00
kurogeek	759be87cf6	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-17 17:46:08 +07:00
kurogeek	e92735ab1a	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-17 16:05:41 +07:00
kurogeek	a761370215	vars: update prometheus/matrix-alertmanager-token for machine rigel	2026-06-17 15:48:49 +07:00
kurogeek	2c69f36a3d	vars: update via generator prometheus (machine: rigel)	2026-06-17 15:48:13 +07:00
kurogeek	32a2778c4a	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/configuration.nix	2026-06-17 15:47:49 +07:00
kurogeek	abb6ab95c8	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-17 15:45:09 +07:00
kurogeek	baecd1e332	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2026-06-16 16:29:52 +07:00
kurogeek	57aa5b774a	mob next [ci-skip] [ci skip] [skip ci] lastFile:vars/per-machine/vega/yggdrasil/privateKey/secret	2026-06-16 15:11:51 +07:00
kurogeek	77b487a709	clancore bumped, zerotier migration	2026-06-16 15:01:21 +07:00
kurogeek	2b239eb162	hm/emmie: use hunspell dictionary with systemd user session variables, libreoffice -> libreoffice-qt	2026-06-16 11:20:05 +07:00
kurogeek	8e64e88d8f	inputs: bump home-manager	2026-06-16 11:18:34 +07:00
kurogeek	6276d9aee0	inputs: bump nixpkgs, frappix. migrate inventree	2026-06-15 16:36:18 +07:00
kurogeek	9471d1a4e6	machines/bosona: nix fmt	2026-06-15 15:55:04 +07:00
kurogeek	77d8e42ec2	hm/emmie: add hunspellDicts en and th	2026-06-15 13:28:58 +07:00
kurogeek	0dafb8cd52	clanService/wordpress: nginx clientMaxBodySize is 128m	2026-06-12 12:22:27 +07:00
kurogeek	8b12656149	clanService/wordpress: phpfpm options and wp-config.php are configurable from inventory interface	2026-06-12 12:09:56 +07:00
kurogeek	d622040d30	hm/emmie: rm DnsOverHttpsMode and DnsOverHttpsTemplates	2026-06-11 13:54:17 +07:00
kurogeek	2bc05c2d6d	clanService/wordpress: test vars	2026-06-10 18:59:30 +07:00
kurogeek	5fa8444112	clanService/wordpress: security.acme.acceptTerms = true and nginx is in acme group	2026-06-10 18:59:01 +07:00
kurogeek	8874b33a5d	greaterchiangmai: nodejs_20 -> nodejs	2026-06-10 18:56:48 +07:00
kurogeek	521ccdc886	clanService/personal-computer: rm services.displayManager.gdm.wayland	2026-06-10 18:53:46 +07:00
kurogeek	07b648db9a	clanService/headscale: magic_dns is disabled	2026-06-10 15:11:26 +07:00
				`@@ -0,0 +1 @@`
				`0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de`
				`@@ -0,0 +1 @@`
				`2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8`