update(inventory.json): Installed canopus

mob next [ci-skip] [ci skip] [skip ci]
lastFile:flake.lock
2026-04-10 10:58:53 +07:00 · 2026-04-10 10:53:52 +07:00 · 2026-04-10 10:37:02 +07:00 · 2026-04-10 09:33:30 +07:00 · 2026-04-10 09:33:23 +07:00 · 2026-04-10 09:33:22 +07:00
174 changed files with 7703 additions and 892 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,58 @@
 {
  "nodes": {
+    "arion": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "haskell-flake": "haskell-flake",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733918465,
+        "narHash": "sha256-hSuGa8Hh67EHr2x812Ay6WFyFT2BGKn+zk+FJWeKXPg=",
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "rev": "f01c95c10f9d4f04bb08d97b3233b530b180f12e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "type": "github"
+      }
+    },
+    "blank": {
+      "locked": {
+        "lastModified": 1625557891,
+        "narHash": "sha256-O8/MWsPBGhhyPoPLHZAuoZiiHo9q6FLlEeIDEXuj6T4=",
+        "owner": "divnix",
+        "repo": "blank",
+        "rev": "5a5d2684073d9f563072ed07c871d577a6c614a8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "blank",
+        "type": "github"
+      }
+    },
+    "call-flake": {
+      "locked": {
+        "lastModified": 1687380775,
+        "narHash": "sha256-bmhE1TmrJG4ba93l9WQTLuYM53kwGQAjYHRvHOeuxWU=",
+        "owner": "divnix",
+        "repo": "call-flake",
+        "rev": "74061f6c241227cd05e79b702db9a300a2e4131a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "call-flake",
+        "type": "github"
+      }
+    },
    "clan-core": {
      "inputs": {
        "data-mesher": "data-mesher",
@@ -9,7 +62,6 @@
        ],
        "nix-darwin": "nix-darwin",
        "nix-select": "nix-select",
-        "nixos-facter-modules": "nixos-facter-modules",
        "nixpkgs": [
          "nixpkgs"
        ],
@@ -20,11 +72,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1766984802,
-        "narHash": "sha256-SYZ/MXVtJEb3sRWxvPL/2HtpSL1CzQgu1o8ASXqCO98=",
+        "lastModified": 1772411144,
+        "narHash": "sha256-WhXudztwPNnKXaqGX4DOqNfHzHdBSiGCvKGHM20pscw=",
        "ref": "refs/heads/main",
-        "rev": "052b66d8dc724c3e519b9003281c2f9a210fc380",
-        "revCount": 11770,
+        "rev": "92cc85bc24eb31ce5725e1e72753129810ce3fe9",
+        "revCount": 13201,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +101,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1766977667,
-        "narHash": "sha256-LUALgG4ZpsA0k7pGYzMDto/r6T8aIPlYTok3lGlojjA=",
-        "rev": "3f852546b5d8bd2e9659a81c6b2cc14922e63a94",
+        "lastModified": 1772273147,
+        "narHash": "sha256-Wzhoc6ifjTDZi8aVRH3fuLJPdd4ouNTTwwVhgoMcMek=",
+        "rev": "d5de7a8d9e5726e678c94e62fe8ac3a809fee5da",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/3f852546b5d8bd2e9659a81c6b2cc14922e63a94.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/d5de7a8d9e5726e678c94e62fe8ac3a809fee5da.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +140,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1766150702,
-        "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
+        "lastModified": 1771881364,
+        "narHash": "sha256-A5uE/hMium5of/QGC6JwF5TGoDAfpNtW00T0s9u/PN8=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
+        "rev": "a4cb7bf73f264d40560ba527f9280469f1f081c6",
        "type": "github"
      },
      "original": {
@@ -101,6 +153,39 @@
        "type": "github"
      }
    },
+    "dmerge": {
+      "inputs": {
+        "haumea": [
+          "frappix",
+          "std",
+          "haumea"
+        ],
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ],
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686862774,
+        "narHash": "sha256-ojGtRQ9pIOUrxsQEuEPerUkqIJEuod9hIflfNkY+9CE=",
+        "owner": "divnix",
+        "repo": "dmerge",
+        "rev": "9f7f7a8349d33d7bd02e0f2b484b1f076e503a96",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "0.2.1",
+        "repo": "dmerge",
+        "type": "github"
+      }
+    },
    "flake-parts": {
      "inputs": {
        "nixpkgs-lib": [
@@ -121,6 +206,146 @@
        "type": "github"
      }
    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "frappix",
+          "arion",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "locked": {
+        "lastModified": 1653893745,
+        "narHash": "sha256-0jntwV3Z8//YwuOjzhV2sgJJPt+HY6KhU7VZUL0fKZQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "1ed9fb1935d260de5fe1c2f7ee0ebaae17ed2fa1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "frappix": {
+      "inputs": {
+        "arion": "arion",
+        "devshell": [
+          "devshell"
+        ],
+        "microvm": "microvm",
+        "n2c": "n2c",
+        "nixago": "nixago",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "std": "std"
+      },
+      "locked": {
+        "lastModified": 1775791872,
+        "narHash": "sha256-Oh/FsoF1PHYPFhu5S3lIjTlhIVeVOQAXaYTUEo/qRD8=",
+        "ref": "refs/heads/mob/improve-module",
+        "rev": "46d138cf5a2b2ee7468945f38987059d4c44d972",
+        "revCount": 240,
+        "type": "git",
+        "url": "file:///home/kurogeek/Desktop/github/blaggacao/frappix/"
+      },
+      "original": {
+        "type": "git",
+        "url": "file:///home/kurogeek/Desktop/github/blaggacao/frappix/"
+      }
+    },
+    "haskell-flake": {
+      "locked": {
+        "lastModified": 1675296942,
+        "narHash": "sha256-u1X1sblozi5qYEcLp1hxcyo8FfDHnRUVX3dJ/tW19jY=",
+        "owner": "srid",
+        "repo": "haskell-flake",
+        "rev": "c2cafce9d57bfca41794dc3b99c593155006c71e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "ref": "0.1.0",
+        "repo": "haskell-flake",
+        "type": "github"
+      }
+    },
+    "haumea": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1685133229,
+        "narHash": "sha256-FePm/Gi9PBSNwiDFq3N+DWdfxFq0UKsVVTJS3cQPn94=",
+        "owner": "nix-community",
+        "repo": "haumea",
+        "rev": "34dd58385092a23018748b50f9b23de6266dffc2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.2.2",
+        "repo": "haumea",
+        "type": "github"
+      }
+    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -156,22 +381,99 @@
        "type": "github"
      }
    },
+    "incl": {
+      "inputs": {
+        "nixlib": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1693483555,
+        "narHash": "sha256-Beq4WhSeH3jRTZgC1XopTSU10yLpK1nmMcnGoXO0XYo=",
+        "owner": "divnix",
+        "repo": "incl",
+        "rev": "526751ad3d1e23b07944b14e3f6b7a5948d3007b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "incl",
+        "type": "github"
+      }
+    },
+    "lib": {
+      "locked": {
+        "lastModified": 1722128034,
+        "narHash": "sha256-L8rwzYPsLo/TYtydPJoQyYOfetuiyQYnTWYcyB8UE/s=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "d15f6f6021693898fcd2c6a9bb13707383da9bbc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
    "liminix": {
      "flake": false,
      "locked": {
-        "lastModified": 1760426231,
-        "narHash": "sha256-r8c5PKtsxAvtQ/k17GH+WNvP47Lr+AbExLMPdLtvAKE=",
-        "ref": "refs/heads/fix-gl-ar750",
-        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
-        "revCount": 1574,
+        "lastModified": 1774875782,
+        "narHash": "sha256-dCvc9vVUyGAO75lGM+O9LZLfKlOfJ9QwPsklin3k+vk=",
+        "ref": "refs/heads/main",
+        "rev": "dc62a8b75f84b7c9580a34b54745f724b1b0d82b",
+        "revCount": 1667,
        "type": "git",
-        "url": "https://git.b4l.co.th/newedge/liminix"
+        "url": "https://gti.telent.net/dan/liminix"
      },
      "original": {
-        "ref": "refs/heads/fix-gl-ar750",
-        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
        "type": "git",
-        "url": "https://git.b4l.co.th/newedge/liminix"
+        "url": "https://gti.telent.net/dan/liminix"
+      }
+    },
+    "microvm": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "spectrum": "spectrum"
+      },
+      "locked": {
+        "lastModified": 1737981104,
+        "narHash": "sha256-7AGmPPBgLHHWgzzFYDJcyhv/NiuCrpgzg8IyA7Q/H9o=",
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "rev": "3768f4937f38334898c67e03f40e244a57a74caa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "astro",
+        "repo": "microvm.nix",
+        "type": "github"
+      }
+    },
+    "n2c": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1730479402,
+        "narHash": "sha256-79NLeNjpCa4mSasmFsE3QA6obURezF0TUO5Pm+1daog=",
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "rev": "5fb215a1564baa74ce04ad7f903d94ad6617e17a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nlewo",
+        "repo": "nix2container",
+        "type": "github"
      }
    },
    "nix-darwin": {
@@ -182,11 +484,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1766784396,
-        "narHash": "sha256-rIlgatT0JtwxsEpzq+UrrIJCRfVAXgbYPzose1DmAcM=",
+        "lastModified": 1772379624,
+        "narHash": "sha256-NG9LLTWlz4YiaTAiRGChbrzbVxBfX+Auq4Ab/SWmk4A=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "f0c8e1f6feb562b5db09cee9fb566a2f989e6b55",
+        "rev": "52d061516108769656a8bd9c6e811c677ec5b462",
        "type": "github"
      },
      "original": {
@@ -208,28 +510,53 @@
        "url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
      }
    },
-    "nixos-facter-modules": {
+    "nixago": {
+      "inputs": {
+        "flake-utils": "flake-utils_3",
+        "nixago-exts": [
+          "frappix"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ]
+      },
      "locked": {
-        "lastModified": 1766558141,
-        "narHash": "sha256-Ud9v49ZPsoDBFuyJSQ2Mpw1ZgAH/aMwUwwzrVoetNus=",
+        "lastModified": 1714086354,
+        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
        "owner": "nix-community",
-        "repo": "nixos-facter-modules",
-        "rev": "e796d536e3d83de74267069e179dc620a608ed7d",
+        "repo": "nixago",
+        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
        "type": "github"
      },
      "original": {
        "owner": "nix-community",
-        "repo": "nixos-facter-modules",
+        "repo": "nixago",
        "type": "github"
      }
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1768395095,
-        "narHash": "sha256-ZhuYJbwbZT32QA95tSkXd9zXHcdZj90EzHpEXBMabaw=",
+        "lastModified": 1712920918,
+        "narHash": "sha256-1yxFvUcJfUphK9V91KufIQom7gCsztza0H4Rz2VCWUU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "92323443a56f4e9fc4e4b712e3119f66d0969297",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1774794121,
+        "narHash": "sha256-gih24b728CK8twDNU7VX9vVYK2tLEXvy9gm/GKq2VeE=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "13868c071cc73a5e9f610c47d7bb08e5da64fdd5",
+        "rev": "c397ef6af68c018462d786e1b65384abc472a907",
        "type": "github"
      },
      "original": {
@@ -239,15 +566,102 @@
        "type": "github"
      }
    },
+    "nosys": {
+      "locked": {
+        "lastModified": 1668010795,
+        "narHash": "sha256-JBDVBnos8g0toU7EhIIqQ1If5m/nyBqtHhL3sicdPwI=",
+        "owner": "divnix",
+        "repo": "nosys",
+        "rev": "feade0141487801c71ff55623b421ed535dbdefa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "nosys",
+        "type": "github"
+      }
+    },
+    "paisano": {
+      "inputs": {
+        "call-flake": "call-flake",
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "nixpkgs"
+        ],
+        "nosys": "nosys",
+        "yants": [
+          "frappix",
+          "std",
+          "yants"
+        ]
+      },
+      "locked": {
+        "lastModified": 1708640854,
+        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
+        "owner": "paisano-nix",
+        "repo": "core",
+        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "0.2.0",
+        "repo": "core",
+        "type": "github"
+      }
+    },
+    "paisano-tui": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1708637035,
+        "narHash": "sha256-R19YURSK+MY/Rw6FZnojQS9zuDh+OoTAyngQAjjoubc=",
+        "owner": "paisano-nix",
+        "repo": "tui",
+        "rev": "231761b260587a64817e4ffae3afc15defaa15db",
+        "type": "github"
+      },
+      "original": {
+        "owner": "paisano-nix",
+        "ref": "v0.5.0",
+        "repo": "tui",
+        "type": "github"
+      }
+    },
+    "plasma-manager": {
+      "inputs": {
+        "home-manager": [
+          "home-manager"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772361940,
+        "narHash": "sha256-B1Cz+ydL1iaOnGlwOFld/C8lBECPtzhiy/pP93/CuyY=",
+        "owner": "nix-community",
+        "repo": "plasma-manager",
+        "rev": "a4b33606111c9c5dcd10009042bb710307174f51",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "plasma-manager",
+        "type": "github"
+      }
+    },
    "root": {
      "inputs": {
        "clan-core": "clan-core",
        "devshell": "devshell",
        "flake-parts": "flake-parts",
+        "frappix": "frappix",
        "home-manager": "home-manager",
        "import-tree": "import-tree",
        "liminix": "liminix",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_2",
+        "plasma-manager": "plasma-manager",
        "treefmt-nix": "treefmt-nix"
      }
    },
@@ -259,11 +673,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1766894905,
-        "narHash": "sha256-pn8AxxfajqyR/Dmr1wnZYdUXHgM3u6z9x0Z1Ijmz2UQ=",
+        "lastModified": 1772340640,
+        "narHash": "sha256-1nq7+Kt5IUBD8Hu3nptVPbMf+22rNJoHT0t9L1X+GKA=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "61b39c7b657081c2adc91b75dd3ad8a91d6f07a7",
+        "rev": "dec4d8eac700dcd2fe3c020857d3ee220ec147f1",
        "type": "github"
      },
      "original": {
@@ -272,6 +686,82 @@
        "type": "github"
      }
    },
+    "spectrum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1733308308,
+        "narHash": "sha256-+RcbMAjSxV1wW5UpS9abIG1lFZC8bITPiFIKNnE7RLs=",
+        "ref": "refs/heads/main",
+        "rev": "80c9e9830d460c944c8f730065f18bb733bc7ee2",
+        "revCount": 792,
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      }
+    },
+    "std": {
+      "inputs": {
+        "arion": [
+          "frappix",
+          "arion"
+        ],
+        "blank": "blank",
+        "devshell": [
+          "frappix",
+          "devshell"
+        ],
+        "dmerge": "dmerge",
+        "haumea": "haumea",
+        "incl": "incl",
+        "lib": "lib",
+        "makes": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "microvm": [
+          "frappix",
+          "microvm"
+        ],
+        "n2c": [
+          "frappix",
+          "n2c"
+        ],
+        "nixago": [
+          "frappix",
+          "nixago"
+        ],
+        "nixpkgs": [
+          "frappix",
+          "nixpkgs"
+        ],
+        "paisano": "paisano",
+        "paisano-tui": "paisano-tui",
+        "terranix": [
+          "frappix",
+          "std",
+          "blank"
+        ],
+        "yants": "yants"
+      },
+      "locked": {
+        "lastModified": 1738072995,
+        "narHash": "sha256-jfwWnAVeQzIBS5Pex0xSUbGk88g1GFF2w+ohOtbRtcY=",
+        "owner": "divnix",
+        "repo": "std",
+        "rev": "2874513c4b76be4c4200779814993b546fe4a909",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "ref": "v0.33.4",
+        "repo": "std",
+        "type": "github"
+      }
+    },
    "systems": {
      "locked": {
        "lastModified": 1681028828,
@@ -287,6 +777,36 @@
        "type": "github"
      }
    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
    "treefmt-nix": {
      "inputs": {
        "nixpkgs": [
@@ -306,6 +826,28 @@
        "repo": "treefmt-nix",
        "type": "github"
      }
+    },
+    "yants": {
+      "inputs": {
+        "nixpkgs": [
+          "frappix",
+          "std",
+          "lib"
+        ]
+      },
+      "locked": {
+        "lastModified": 1686863218,
+        "narHash": "sha256-kooxYm3/3ornWtVBNHM3Zh020gACUyFX2G0VQXnB+mk=",
+        "owner": "divnix",
+        "repo": "yants",
+        "rev": "8f0da0dba57149676aa4817ec0c880fbde7a648d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "divnix",
+        "repo": "yants",
+        "type": "github"
+      }
    }
  },
  "root": "root",
--- a/flake.nix
+++ b/flake.nix
@@ -19,6 +19,11 @@
      inputs.nixpkgs.follows = "nixpkgs";
      url = "github:nix-community/home-manager";
    };
+    plasma-manager = {
+      url = "github:nix-community/plasma-manager";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
+    };
    import-tree.url = "github:vic/import-tree";
    nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
    treefmt-nix = {
@@ -26,9 +31,15 @@
      inputs.nixpkgs.follows = "nixpkgs";
    };
    liminix = {
-      url = "git+https://git.b4l.co.th/newedge/liminix?ref=refs/heads/fix-gl-ar750&rev=3f1f7c08d440130cce9262a93ce78ed7969d93cd";
+      url = "git+https://gti.telent.net/dan/liminix";
      flake = false;
    };
+    frappix = {
+      # url = "github:kurogeek/frappix";
+      url = "git+file:///home/kurogeek/Desktop/github/blaggacao/frappix/";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.devshell.follows = "devshell";
+    };
  };
  outputs =
    {
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -1,5 +1,8 @@
 {
-  imports = [ ./personal-computer.nix ];
+  imports = [
+    ./personal-computer.nix
+    ./emmie.nix
+  ];
  clan = {
    inventory = {

@@ -26,6 +29,7 @@
        ];
        global-network = [
          "rana"
+          "sirius"
        ];
      };

@@ -261,6 +265,24 @@
              };
          };
        };
+
+        samba = {
+          module = {
+            name = "samba";
+            input = "self";
+          };
+          roles.server.machines."sirius".settings = {
+            globalUsers = {
+              w.writePerm = true;
+            };
+            sharedFolders = {
+              WHITEHOUSE = {
+                allowedGuest = true;
+              };
+            };
+            dataDir = "/mnt/hdd/samba";
+          };
+        };
      };
    };
  };
--- a/inventories/emmie.nix
+++ b/inventories/emmie.nix
@@ -0,0 +1,44 @@
+{ config, ... }:
+let
+  username = "emmie";
+  userhome = "/home/${username}";
+in
+{
+  clan.inventory = {
+    tags = {
+      emmie = [ "rana" ];
+    };
+
+    instances = {
+      emmie-syncthing = {
+        module = {
+          name = "syncthing";
+          input = "clan-core";
+        };
+        roles.peer.tags.emmie = { };
+        roles.peer.settings = {
+          folders = {
+            Syncthing = {
+              path = "${userhome}/Share/Syncthing";
+            };
+          };
+          extraDevices = {
+            pixel7a = {
+              id = "CEUJMEG-SOHXIJF-G2FT5QB-6MZW3EN-PONI3QN-HPEIOSU-IMSLGW7-XUU6BQK";
+              name = "eris";
+              addresses = [ "dynamic" ];
+            };
+          };
+        };
+        roles.peer.extraModules = [
+          {
+            config.services.syncthing = {
+              user = username;
+              dataDir = "${userhome}/Share";
+            };
+          }
+        ];
+      };
+    };
+  };
+}
--- a/inventories/personal-computer.nix
+++ b/inventories/personal-computer.nix
@@ -14,14 +14,9 @@
    instances = {
      emmie-home = {
        module = {
-          name = "home-user";
+          name = "emmie-home";
          input = "self";
        };
-        roles.default.settings = {
-          username = "emmie";
-          kbLayout = "us,th";
-          kbOptions = "grp:win_space_toggle,grp:alt_shift_toggle";
-        };
        roles.default.machines."rana" = { };
      };
      chocolate-home = {
--- a/inventory.json
+++ b/inventory.json
@@ -22,10 +22,19 @@
      "installedAt": 1765343708
    },
    "rana": {
-      "installedAt": 1768294839
+      "installedAt": 1773134236
    },
    "petra": {
      "installedAt": 1769064458
+    },
+    "sirius": {
+      "installedAt": 1770974584
+    },
+    "deneb": {
+      "installedAt": 1775718970
+    },
+    "canopus": {
+      "installedAt": 1775793532
    }
  }
 }
--- a/machines/canopus/configuration.nix
+++ b/machines/canopus/configuration.nix
@@ -0,0 +1,104 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "glomerp.newedge.house";
+in
+{
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "glomerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+        apps = [
+          "frappe"
+          "erpnext"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
--- a/machines/canopus/disko.nix
+++ b/machines/canopus/disko.nix
@@ -1,11 +1,6 @@
-{ lib, ... }:
 let
  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-FIXME";
-  vdev = [
-    "/dev/disk/by-id/ata-FIXME"
-    "/dev/disk/by-id/ata-FIXME"
-  ];
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
 in
 {

@@ -43,29 +38,10 @@ in
                pool = "zroot";
              };
            };
-            swap = {
-              size = "16G";
-              content = {
-                type = "swap";
-              };
-            };
          };
        };
      };
-    }
-    // (lib.listToAttrs (
-      map (disk: {
-        name = "data-${hashDisk disk}";
-        value = {
-          type = "disk";
-          device = disk;
-          content = {
-            type = "zfs";
-            pool = "zdata";
-          };
-        };
-      }) vdev
-    ));
+    };
    zpool = {
      zroot = {
        type = "zpool";
@@ -102,40 +78,6 @@ in
          };
        };
      };
-      zdata = {
-        type = "zpool";
-        options.ashift = "12";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        mode = {
-          topology = {
-            type = "topology";
-            vdev = [
-              {
-                mode = "mirror";
-                members = vdev;
-              }
-            ];
-          };
-        };
-        datasets = {
-          "nas" = {
-            type = "zfs_fs";
-            mountpoint = "/mnt/hdd";
-            mountOptions = [ "nofail" ];
-          };
-          "service-data" = {
-            type = "zfs_fs";
-            mountpoint = "/var/lib";
-            mountOptions = [ "nofail" ];
-          };
-        };
-      };
    };
  };
 }
--- a/machines/canopus/facter.json
+++ b/machines/canopus/facter.json
--- a/machines/deneb/configuration.nix
+++ b/machines/deneb/configuration.nix
@@ -0,0 +1,104 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "poyerp.newedge.house";
+in
+{
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=kurogeek/CN=kurogeek.home" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "poyerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ "localhost" ];
+        apps = [
+          "frappe"
+          "erpnext"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
--- a/machines/deneb/disko.nix
+++ b/machines/deneb/disko.nix
@@ -0,0 +1,83 @@
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/deneb/facter.json
+++ b/machines/deneb/facter.json
--- a/machines/rana/configuration.nix
+++ b/machines/rana/configuration.nix
@@ -1,4 +1,4 @@
-{ self, ... }:
+{ self, pkgs, ... }:
 {
  imports = [
    self.nixosModules.common
@@ -9,4 +9,12 @@
  };
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
+
+  boot.kernelParams = [
+    "amdgpu.dcdebugmask=0x10"
+    "amdgpu.cwsr_enable=0"
+    "amdgpu.gpu_recovery=1"
+  ];
+
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_12;
 }
--- a/machines/rana/disko.nix
+++ b/machines/rana/disko.nix
@@ -53,6 +53,9 @@ in
      zroot = {
        type = "zpool";
        rootFsOptions = {
+          encryption = "aes-256-gcm";
+          keyformat = "passphrase";
+          keylocation = "file:///tmp/secret.key";
          mountpoint = "none";
          compression = "lz4";
          acltype = "posixacl";
--- a/machines/rana/facter.json
+++ b/machines/rana/facter.json
--- a/machines/sirius/README.md
+++ b/machines/sirius/README.md
@@ -0,0 +1,21 @@
+## How to setup this machine.
+
+This machine cannot be setup the same way as other machines are setup. Meaning that `clan machine install` won't work. Because of `disko` issue. So, below is how the machine is setup.
+
+1. Build an image to flash to an sd-card using
+
+```
+nix build -L --show-trace .\#nixosConfigurations.sirius.config.system.build.images.sd-card
+```
+
+2. Import the `zdata`
+
+```
+zpool import zdata
+```
+
+3. Update configuration
+
+```
+clan machine update sirius
+```
--- a/machines/sirius/configuration.nix
+++ b/machines/sirius/configuration.nix
@@ -1,6 +1,4 @@
 {
-  inputs,
-  config,
  self,
  ...
 }:
@@ -8,17 +6,68 @@
  imports = [
    self.nixosModules.common

-    (inputs.import-tree ./services)
-
+    ./hardware-configuration.nix
  ];

+  image.modules.sd-card = {
+    disabledModules = [
+      ./hardware-configuration.nix
+    ];
+  };
+
  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
+    system = "aarch64-linux";
  };

  system.stateVersion = "25.11";

+  services.journald.extraConfig = ''
+    Storage=volatile
+    RuntimeMaxUse=30M
+    RuntimeMaxFileSize=10M
+  '';
+
+  services.udisks2.enable = false;
+
+  nix.settings.log-lines = 25;
+  nix.settings.auto-optimise-store = true;
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 15d";
+  };
+
+  boot.loader.grub.enable = false;
+  boot.loader.generic-extlinux-compatible.enable = true;
+
+  boot.zfs.extraPools = [ "zdata" ];
+  boot.supportedFilesystems = [ "zfs" ];
+  boot.initrd.availableKernelModules = [
+    "usb_storage"
+    "sd_mod"
+  ];
+
+  fileSystems."/mnt/hdd" = {
+    device = "zdata/nas";
+    fsType = "zfs";
+    mountPoint = "/mnt/hdd";
+    options = [
+      "nofail"
+      "zfsutil"
+    ];
+  };
+
+  fileSystems."/var/lib" = {
+    device = "zdata/service-data";
+    fsType = "zfs";
+    mountPoint = "/var/lib";
+    options = [
+      "x-initrd.mount"
+      "nofail"
+      "zfsutil"
+    ];
+  };
+
 }
--- a/machines/sirius/disko-ref.nix
+++ b/machines/sirius/disko-ref.nix
@@ -0,0 +1,150 @@
+{ lib, pkgs, ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  # os = "/dev/disk/by-id/mmc-SD64G_0x8336354b";
+  vdev = [
+    "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYDBVV7Z"
+    "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYDBSJRE"
+  ];
+  configTxt = pkgs.writeText "config.txt" ''
+    [pi4]
+    kernel=u-boot-rpi4.bin
+    enable_gic=1
+
+    # Otherwise the resolution will be weird in most cases, compared to
+    # what the pi3 firmware does by default.
+    disable_overscan=1
+
+    # Supported in newer board revisions
+    arm_boost=1
+
+    [all]
+    # Boot in 64-bit mode.
+    arm_64bit=1
+
+    # U-Boot needs this to work, regardless of whether UART is actually used or not.
+    # Look in arch/arm/mach-bcm283x/Kconfig in the U-Boot tree to see if this is still
+    # a requirement in the future.
+    enable_uart=1
+
+    # Prevent the firmware from smashing the framebuffer setup done by the mainline kernel
+    # when attempting to show low-voltage or overtemperature warnings.
+    avoid_warnings=1
+  '';
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+  # boot.tmp.useTmpfs = true;
+
+  disko.devices = {
+    disk = {
+      # "os-${hashDisk os}" = {
+      #   type = "disk";
+      #   device = os;
+      #   content = {
+      #     type = "gpt";
+      #     partitions = {
+      #       firmware = {
+      #         size = "60M";
+      #         priority = 1;
+      #         type = "0700";
+      #         content = {
+      #           type = "filesystem";
+      #           format = "vfat";
+      #           mountpoint = "/firmware";
+      #           postMountHook = toString (
+      #             pkgs.writeScript "postMountHook.sh" ''
+      #               (cd ${pkgs.raspberrypifw}/share/raspberrypi/boot && cp bootcode.bin fixup*.dat start*.elf *.dtb /mnt/firmware/)
+      #               cp ${pkgs.ubootRaspberryPi4_64bit}/u-boot.bin /mnt/firmware/u-boot-rpi4.bin
+      #               cp ${configTxt} /mnt/firmware/config.txt
+      #             ''
+      #           );
+      #         };
+      #       };
+      #       ESP = {
+      #         size = "2G";
+      #         type = "EF00";
+      #         content = {
+      #           type = "filesystem";
+      #           format = "vfat";
+      #           mountpoint = "/boot";
+      #           mountOptions = [ "umask=0077" ];
+      #         };
+      #       };
+      #       root = {
+      #         name = "root";
+      #         end = "-0";
+      #         content = {
+      #           type = "filesystem";
+      #           format = "f2fs";
+      #           mountpoint = "/";
+      #           extraArgs = [
+      #             "-O"
+      #             "extra_attr,inode_checksum,sb_checksum,compression"
+      #           ];
+      #           mountOptions = [ "compress_algorithm=zstd:6,compress_chksum,atgc,gc_merge,lazytime,nodiscard" ];
+      #         };
+      #       };
+      #     };
+      #   };
+      # };
+    }
+    // (lib.listToAttrs (
+      map (disk: {
+        name = "data-${hashDisk disk}";
+        value = {
+          type = "disk";
+          device = disk;
+          content = {
+            type = "zfs";
+            pool = "zdata";
+          };
+        };
+      }) vdev
+    ));
+    zpool = {
+      zdata = {
+        type = "zpool";
+        options.ashift = "12";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        mode = {
+          topology = {
+            type = "topology";
+            vdev = [
+              {
+                mode = "mirror";
+                members = vdev;
+              }
+            ];
+          };
+        };
+        datasets = {
+          "nas" = {
+            type = "zfs_fs";
+            mountpoint = "/mnt/hdd";
+            mountOptions = [ "nofail" ];
+          };
+          "service-data" = {
+            type = "zfs_fs";
+            mountpoint = "/var/lib";
+            mountOptions = [ "nofail" ];
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/sirius/hardware-configuration.nix
+++ b/machines/sirius/hardware-configuration.nix
@@ -0,0 +1,6 @@
+{
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/44444444-4444-4444-8888-888888888888";
+    fsType = "ext4";
+  };
+}
--- a/machines/sirius/services/samba.nix
+++ b/machines/sirius/services/samba.nix
@@ -1,93 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-let
-  sambaUser = lib.filterAttrs (
-    name: user: user.isNormalUser && builtins.elem "samba" user.extraGroups
-  ) config.users.users;
-
-  sharedFolders = {
-    WhiteHouse.users = [
-      "w"
-      "kurogeek"
-      "berwn"
-    ];
-  };
-in
-{
-
-  services.samba = {
-    enable = true;
-    openFirewall = true;
-    settings = {
-      global = {
-        security = "user";
-        workgroup = "WORKGROUP";
-        "server string" = "WhiteHouse NAS";
-        interfaces = "eth* en*";
-        "max log size" = "50";
-        "dns proxy" = false;
-        "syslog only" = true;
-        "map to guest" = "Bad User";
-        "guest account" = "nobody";
-      };
-    }
-    // lib.mapAttrs (share: opts: {
-      path = "/mnt/hdd/samba/${share}";
-      comment = share;
-      "force user" = share;
-      "force group" = share;
-      public = "yes";
-      "guest ok" = "yes";
-      "create mask" = "0640";
-      "directory mask" = "0750";
-      writable = "no";
-      browseable = "yes";
-      printable = "no";
-      # TODO
-      # "valid users" = toString opts.users;
-    }) sharedFolders;
-  };
-
-  users.users = lib.mapAttrs (share: opts: {
-    isSystemUser = true;
-    group = share;
-  }) sharedFolders;
-
-  users.groups = lib.mapAttrs (share: opts: { }) sharedFolders;
-
-  systemd.services.samba-smbd.postStart =
-    lib.concatMapStrings (
-      user:
-      let
-        password = config.clan.core.vars.generators."${user}-smb-password".files.password.path;
-      in
-      ''
-        mkdir -p /mnt/hdd/samba/${user}
-        chown ${user}:users /mnt/hdd/samba/${user}
-        # if a password is unchanged, this will error
-        (echo $(<${password}); echo $(<${password})) | ${config.services.samba.package}/bin/smbpasswd -s -a ${user}
-      ''
-    ) (lib.attrNames sambaUser)
-    + lib.concatMapStrings (share: ''
-      mkdir -p /mnt/hdd/samba/${share}
-      chown ${share}:${share} /mnt/hdd/samba/${share}
-    '') (lib.attrNames sharedFolders);
-
-  services.samba-wsdd = {
-    enable = true;
-    openFirewall = true;
-  };
-
-  services.avahi = {
-    publish.enable = true;
-    publish.userServices = true;
-    # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
-    nssmdns4 = true;
-    # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
-    enable = true;
-    openFirewall = true;
-  };
-}
--- a/modules/clan/grafana/default.nix
+++ b/modules/clan/grafana/default.nix
@@ -13,11 +13,28 @@
      {
        config,
        lib,
+        pkgs,
        ...
      }:
      {
+        clan.core.vars.generators.grafana = {
+          files = {
+            secret_key = {
+              owner = "grafana";
+              group = "grafana";
+              secret = true;
+            };
+          };
+          script = ''
+            openssl rand -hex 32 > "$out"/secret_key
+          '';
+          runtimeInputs = [
+            pkgs.openssl
+          ];
+        };
        services.grafana = {
          enable = lib.mkDefault true;
+          settings.security.secret_key = "$__file{${config.clan.core.vars.generators.grafana.files.secret_key.path}}";
        };

        clan.core.state.grafana.folders = [ config.services.grafana.dataDir ];
--- a/modules/clan/grafana/flake-module.nix
+++ b/modules/clan/grafana/flake-module.nix
@@ -1,6 +1,6 @@
-{ lib, ... }:
+{ self, inputs, ... }:
 let
-  module = lib.modules.importApply ./default.nix { };
+  module = ./default.nix;
 in
 {
  clan.modules = {
@@ -11,6 +11,7 @@ in
    {
      clan.nixosTests.service-grafana = {
        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };

        clan.modules."@clan/grafana" = module;
      };
--- a/modules/clan/grafana/tests/vm/default.nix
+++ b/modules/clan/grafana/tests/vm/default.nix
@@ -1,8 +1,23 @@
 {
+  self,
+  config,
+  lib,
+  hostPkgs,
  ...
 }:
 {
  name = "service-grafana";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';

  clan = {
    directory = ./.;
--- a/modules/clan/grafana/tests/vm/sops/machines/server/key.json
+++ b/modules/clan/grafana/tests/vm/sops/machines/server/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1chfz220hkkxvv25x4cmqsen38ppat9erplqus8gvynv0ajnu4uaqgfq3tj",
+    "type": "age"
+  }
+]
--- a/modules/clan/grafana/tests/vm/sops/secrets/server-age.key/secret
+++ b/modules/clan/grafana/tests/vm/sops/secrets/server-age.key/secret
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:ZGt489y6VugKlhVLz6hC5sL+E+IDT6MkHS7jMU36WFWK9Co9btY4HRo+JtH/3C5iVuGLf/0j7n6W8SYZXigVCUTUQJvE56RfZ1s=,iv:rQM4ZZhN345KE2A16J9/ZKMZ9O+Qvb5y6kwXA/6SuZg=,tag:C+oeBtNFcImKd3HV/6yFCQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZU0hqYmtDKzBRWDVMNVdm\nUW5XMXd4WDNha0ppbENwOHk1bk1mVWxVV0F3CktYT01XdktyenNvUzU4UXBReEVp\nZXJKS05kS0NsbFNqamlXMkVzRmRhUkEKLS0tIEgweFVCT2tOZmMrdERDV0FBN3N2\nVjZPZXR3L0x0dER4T1Q4cTBlV20vUjAK9QJ2p8VzNqVY/lrcKwL56YF2JBfJp11M\ns801/6IQ5WvMPziG/E/nppv/9zL0kQTh9EPGqevy0juGcvqQgn1KQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-02T07:38:10Z",
+		"mac": "ENC[AES256_GCM,data:ShP6xVJaIIyj5kqRJeIbTNJBkY3H/xvj/RgbEl65RZbJNVE0HTHkTmartKVEyROWQlMyhwesJr8FEKAnOrWysUOKQUKV9Cgfvr6J/IXZj1ZJkXbE9NcFmsRshv4Po4sCig7Hq7qt/hQLBqutUjXnpvLaKgARz2dcOv8HSoVkCKU=,iv:bvl6lFb2z8DGQkShEWe5XlYmhtXNf3bL5RHSsk9LAXs=,tag:HomMsFH3jEHCR0L6aXVsBw==,type:str]",
+		"version": "3.12.1"
+	}
+}
--- a/modules/clan/grafana/tests/vm/sops/secrets/server-age.key/users/admin
+++ b/modules/clan/grafana/tests/vm/sops/secrets/server-age.key/users/admin
@@ -0,0 +1 @@
+../../../users/admin
--- a/modules/clan/grafana/tests/vm/sops/users/admin/key.json
+++ b/modules/clan/grafana/tests/vm/sops/users/admin/key.json
@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}
--- a/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/machines/server
+++ b/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/secret
+++ b/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:xXGuIJCmajuSHV3rBaAC0+XZZekqPd3rTr1bTKjMIU34IF9ueairclcSAUjFHakRG5EeGJ90PTosuC1vnqk/emQ=,iv:9Od0lV3SeTlT9sgJHY6yw/tLz5WNbaMDDFfjvIMO76M=,tag:T4ybZEUDGrp+p4I5NEr+Xg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1chfz220hkkxvv25x4cmqsen38ppat9erplqus8gvynv0ajnu4uaqgfq3tj",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4aUc5Yy8xOU0xcW02eDVK\nR0d5eXVtVU50dVk4L2dnZ3pObTJjOGQycHlnCjJBSndpdGNhRWVxeGZGdTJwZklU\nekdQTjZ1UTUzYklRVDd6WlVFeko0cEEKLS0tIDB2SkVpRXVEcG9nSGM0OG5hYmlR\ncXBMdUZ2MHdZd2hCaFF5Y1duOVlzc3MKgFUx3NZSoXiALUWj0gxPZLbmwfzRuq5w\nSc3CPCuEEALGq1unzndXJLSg+q4u/PAsZ/Q4l2CDHxuk5INct3Px7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTTmxFL0UyNlhCaVhKWVJ5\nRUpLV3ZJdnNpYWZLa2phTlVNMmpzd20yd0FnCk9sOTFOZWQ3MzRHb3EwNUdzRDZ1\ndDk4eDVJRGFrOVIwd0xsb3c1b3VpWmcKLS0tIG16Nkc1TmlvbDNaYWZwcUFHYkV4\nT3Y5M1VOMWF3MHBMVlNMam1sSXIwNTQKRVvOVcV5GWua5hfS2ijKT5+C6Y5rZsXN\nKVzvemCk7pEGjVRSi4P0hrPnD37A6uwwj8FJqiLd7Y1p3hIVvBqR3w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-02T07:38:11Z",
+		"mac": "ENC[AES256_GCM,data:HiiWGBruyPo/vGDdz/Zc/8Vd8oB2aMqoDjJCTybe9tRTJAojiSYZR4YyBO2ApCnYDyStJqXL0ZRjjRB73dwvldaNASz2odl/GGprmxcCH3T0A+Zrgu2gN9yNA5i+LkBLC2URXYwra4Den/WvIOTnrvvQcszN9SUBs+MOJM56KZo=,iv:+pjWMIf0+wBvWzkvsvqP7CI6zJpO3+8sqaZUEocXkXU=,tag:yp2CpOb38Kp13f2CJSzHEg==,type:str]",
+		"version": "3.12.1"
+	}
+}
--- a/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/users/admin
+++ b/modules/clan/grafana/tests/vm/vars/per-machine/server/grafana/secret_key/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/grafana/tests/vm/vars/per-machine/server/state-version/version/value
+++ b/modules/clan/grafana/tests/vm/vars/per-machine/server/state-version/version/value
@@ -0,0 +1 @@
+26.05
--- a/modules/clan/home-profiles/flake-module.nix
+++ b/modules/clan/home-profiles/flake-module.nix
@@ -2,5 +2,6 @@
 {
  clan.modules = {
    home-user = lib.modules.importApply ./home-user { };
+    emmie-home = lib.modules.importApply ./home-user/emmie.nix { };
  };
 }
--- a/modules/clan/home-profiles/home-user/emmie.nix
+++ b/modules/clan/home-profiles/home-user/emmie.nix
@@ -0,0 +1,127 @@
+{ ... }:
+{
+  _class = "clan.service";
+  manifest.name = "emmie-home-manager";
+  manifest.description = "Emmie's home-manager profile generator";
+  manifest.readme = "Emmie's home-manager profile generator";
+  manifest.categories = [ "System" ];
+
+  roles.default = {
+    description = "a default role for the user";
+    perInstance =
+      { ... }:
+      {
+        nixosModule =
+          { inputs, pkgs, ... }:
+          let
+            username = "emmie";
+          in
+          {
+            imports = [ inputs.home-manager.nixosModules.home-manager ];
+
+            users.users.${username} = {
+              initialPassword = "";
+              isNormalUser = true;
+              extraGroups = [
+                "audio"
+                "video"
+                "networkmanager"
+              ];
+            };
+
+            services.xserver = {
+              enable = true;
+              xkb.layout = "us,th";
+              xkb.options = "grp:win_space_toggle,grp:alt_shift_toggle";
+            };
+
+            programs.chromium = {
+              enable = true;
+              extraOpts = {
+                "BlockThirdPartyCookies" = true;
+                "ClearBrowsingDataOnExitList" = [
+                  "download_history"
+                  "cookies_and_other_site_data"
+                  "cached_images_and_files"
+                  "password_signin"
+                  "autofill"
+                  "site_settings"
+                  "hosted_app_data"
+                ];
+                "BraveRewardsDisabled" = true;
+                "BraveWalletDisabled" = true;
+                "BraveAIChatEnabled" = false;
+                "BraveNewsDisabled" = true;
+                "BraveSpeedreaderEnabled" = false;
+                "BraveWaybackMachineEnabled" = false;
+                "BraveStatsPingEnabled" = false;
+                "BraveWebDiscoveryEnabled" = false;
+                "BravePlaylistEnabled" = false;
+                "BraveVPNDisabled" = true;
+                "TorDisabled" = true;
+                "BraveP3AEnabled" = false;
+                "BraveTalkDisabled" = true;
+                "SyncDisabled" = false;
+                "PasswordManagerEnabled" = false;
+                "AutofillAddressEnabled" = false;
+                "AutofillCreditCardEnabled" = false;
+                "TranslateEnabled" = false;
+                "DnsOverHttpsMode" = "secure";
+                "DnsOverHttpsTemplates" = "https://dns.adguard-dns.com/dns-query";
+              };
+            };
+
+            home-manager.useGlobalPkgs = true;
+            home-manager.useUserPackages = true;
+            home-manager.users.${username} =
+              {
+                osConfig,
+                pkgs,
+                lib,
+                inputs,
+                ...
+              }:
+              {
+                imports = [ inputs.plasma-manager.homeModules.plasma-manager ];
+
+                home = {
+                  homeDirectory = lib.mkForce "/home/${username}";
+                  stateVersion = osConfig.system.stateVersion;
+                  packages = with pkgs; [
+                    libreoffice-fresh
+                    element-desktop
+                    signal-desktop
+                    brave
+                    keepassxc
+                    vlc
+                    thunderbird
+                    wasabiwallet
+                    protonmail-desktop
+                  ];
+                };
+                programs.chromium.package = pkgs.brave;
+                programs.home-manager.enable = true;
+                services.syncthing.tray.enable = osConfig.services.syncthing.enable;
+                programs.plasma.enable = true;
+                programs.plasma.powerdevil = {
+                  AC = {
+                    autoSuspend.action = "shutDown";
+                    autoSuspend.idleTimeout = 1800;
+                  };
+                  battery = {
+                    autoSuspend.action = "shutDown";
+                    autoSuspend.idleTimeout = 1800;
+                  };
+                  lowBattery = {
+                    autoSuspend.action = "shutDown";
+                    autoSuspend.idleTimeout = 1800;
+                  };
+                };
+              };
+            home-manager.extraSpecialArgs = {
+              inherit inputs;
+            };
+          };
+      };
+  };
+}
--- a/modules/clan/home-profiles/home-user/home.nix
+++ b/modules/clan/home-profiles/home-user/home.nix
@@ -11,8 +11,9 @@
    homeDirectory = lib.mkForce "/home/${username}";
    stateVersion = osConfig.system.stateVersion;
    packages = with pkgs; [
-      libreoffice
+      libreoffice-fresh
      element-desktop
+      signal-desktop
      brave
      firefox
      keepassxc
@@ -21,4 +22,5 @@
    ];
  };
  programs.home-manager.enable = true;
+  services.syncthing.tray.enable = osConfig.services.syncthing.enable;
 }
--- a/modules/clan/paperless/default.nix
+++ b/modules/clan/paperless/default.nix
@@ -16,6 +16,18 @@
        ...
      }:
      {
+        nixpkgs.overlays = [
+          (final: prev: {
+            pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
+              (pyFinal: pyPrev: {
+                psycopg = pyPrev.psycopg.overrideAttrs (old: {
+                  disabledTests = old.disabledTests ++ [ "test_stats_connect" ];
+                });
+              })
+            ];
+          })
+        ];
+
        services.paperless = {
          enable = lib.mkDefault true;
        };
--- a/modules/clan/personal-computer/printing.nix
+++ b/modules/clan/personal-computer/printing.nix
@@ -22,11 +22,27 @@ let

 in
 {
+  environment.systemPackages = [ pkgs.simple-scan ];
+  nixpkgs.config.allowUnfreePredicate =
+    pkg:
+    builtins.elem (lib.getName pkg) [
+      "brgenml1lpr"
+      "cups-brother-dcpt310"
+      "cups-brother-dcpt720dw"
+      "cups-brother-dcpt725dw"
+    ];
+  # nixpkgs.config.allowUnfree = true;
+  services.ipp-usb.enable = true;
  services.printing = {
    enable = true;
    drivers = [
      pkgs.brlaser
      pkgs.gutenprint
+      pkgs.brgenml1lpr
+      pkgs.brgenml1cupswrapper
+      pkgs.cups-brother-dcpt310
+      pkgs.cups-brother-dcpt720dw
+      pkgs.cups-brother-dcpt725dw
    ];

    extraFilesConf = ''
--- a/modules/clan/personal-computer/users.nix
+++ b/modules/clan/personal-computer/users.nix
@@ -4,7 +4,7 @@
  security.polkit.extraConfig = ''
    polkit.addRule(function(action, subject) {
      if ((action.id == "org.freedesktop.accounts.change-own-password")) {
-        return polkit.Result.AUTH_SELF;
+        return polkit.Result.YES;
      }
    });
  '';
--- a/modules/clan/phonebox/default.nix
+++ b/modules/clan/phonebox/default.nix
@@ -123,6 +123,7 @@

                [${localNumber}](dynamiic_aor)
                max_contacts=1
+                remove_existing=yes
              '';

            genLocalExtenConf =
--- a/modules/clan/samba/default.nix
+++ b/modules/clan/samba/default.nix
@@ -0,0 +1,253 @@
+{ lib, ... }:
+{
+  _class = "clan.service";
+  manifest.name = "samba";
+  manifest.description = "Samba configuration for NAS";
+  manifest.readme = "Samba configuration for NAS";
+  manifest.categories = [ "System" ];
+
+  roles.server = {
+    description = "A server role that host files";
+
+    interface =
+      { lib, ... }:
+      let
+        userOptions = {
+          readPerm = lib.mkOption {
+            type = with lib.types; bool;
+            description = "Permission to read";
+            default = false;
+          };
+          writePerm = lib.mkOption {
+            type = with lib.types; bool;
+            description = "Permission to write";
+            default = false;
+          };
+        };
+      in
+      {
+        options = {
+
+          globalUsers = lib.mkOption {
+            type =
+              with lib.types;
+              attrsOf (submodule {
+                options = userOptions;
+              });
+            description = "List of global users with permissions, this will be applied to all the folders.";
+            default = {
+              admin = {
+                readPerm = true;
+                writePerm = true;
+              };
+            };
+          };
+
+          sharedFolders = lib.mkOption {
+            type =
+              with lib.types;
+              attrsOf (submodule {
+                options = {
+                  users = lib.mkOption {
+                    type =
+                      with lib.types;
+                      attrsOf (submodule {
+                        options = userOptions;
+                      });
+                    description = "List of users with permissions, this will only applied to this particular folder.";
+                    default = { };
+                  };
+                  allowedGuest = lib.mkOption {
+                    type = with lib.types; bool;
+                    description = "Whether to allow guest access to this folder.";
+                    default = false;
+                  };
+                };
+              });
+            description = "List of folders with users permissions.";
+            default = [
+              {
+                name = "DEFAULT";
+              }
+            ];
+
+          };
+
+          dataDir = lib.mkOption {
+            type =
+              with lib.types;
+              oneOf [
+                str
+                path
+              ];
+            description = "A directory where all samba folders will be.";
+          };
+
+        };
+      };
+    perInstance =
+      { settings, ... }:
+      let
+        allUsernameList = lib.uniqueStrings (
+          lib.flatten (
+            (lib.mapAttrsToList (name: share: builtins.attrNames share.users) settings.sharedFolders)
+            ++ builtins.attrNames settings.globalUsers
+          )
+        );
+      in
+      {
+        nixosModule =
+          {
+            lib,
+            config,
+            pkgs,
+            ...
+          }:
+          {
+
+            users.users = builtins.listToAttrs (
+              map (
+                username:
+                lib.nameValuePair username {
+                  isSystemUser = true;
+                  group = username;
+                }
+              ) (allUsernameList ++ builtins.attrNames settings.sharedFolders)
+            );
+
+            users.groups = builtins.listToAttrs (
+              map (username: lib.nameValuePair username { }) (
+                allUsernameList ++ builtins.attrNames settings.sharedFolders
+              )
+            );
+
+            clan.core.vars.generators = builtins.listToAttrs (
+              map (
+                username:
+                lib.nameValuePair "${username}-smb-password" {
+                  files.password = { };
+                  runtimeInputs = with pkgs; [
+                    coreutils
+                    xkcdpass
+                    mkpasswd
+                  ];
+                  script = ''
+                    xkcdpass --numwords 3 --delimiter - --count 1 > $out/password
+                  '';
+                }
+              ) allUsernameList
+            );
+
+            systemd.services.samba-smbd.postStart =
+              lib.concatMapStrings (
+                user:
+                let
+                  passwordPath = config.clan.core.vars.generators."${user}-smb-password".files.password.path;
+                  userDir = "${settings.dataDir}/${user}";
+                in
+                ''
+                  mkdir -p ${userDir}
+                  chown ${user}:users ${userDir}
+                  # if a password is unchanged, this will error
+                  (echo $(<${passwordPath}); echo $(<${passwordPath})) | ${config.services.samba.package}/bin/smbpasswd -s -a ${user}
+                ''
+              ) allUsernameList
+              + lib.concatMapStrings (
+                share:
+                let
+                  shareDir = "${settings.dataDir}/${share}";
+                in
+                ''
+                  mkdir -p ${shareDir}
+                  chown ${share}:${share} ${shareDir}
+                ''
+              ) (builtins.attrNames settings.sharedFolders);
+
+            services.samba = {
+              enable = true;
+              openFirewall = true;
+              settings = {
+                global = {
+                  security = "user";
+                  workgroup = "WORKGROUP";
+                  "server string" = "WhiteHouse NAS";
+                  "max log size" = "50";
+                  "dns proxy" = false;
+                  "syslog only" = true;
+                  "map to guest" = "Bad User";
+                  "guest account" = "nobody";
+                };
+              }
+              // lib.mapAttrs (
+                shareName: value:
+                {
+                  path = "${settings.dataDir}/${shareName}";
+                  comment = shareName;
+                  "force user" = shareName;
+                  "force group" = shareName;
+                  "create mask" = "0640";
+                  "directory mask" = "0750";
+                  "read only" = "yes";
+                  browseable = "yes";
+                  printable = "no";
+                  "read list" = lib.concatStringsSep " " (
+                    lib.uniqueStrings (
+                      lib.flatten (
+                        (builtins.attrNames (lib.filterAttrs (n: v: v.readPerm) value.users))
+                        ++ (builtins.attrNames (lib.filterAttrs (n: v: v.readPerm) settings.globalUsers))
+                      )
+                    )
+                  );
+                  "write list" = lib.concatStringsSep " " (
+                    lib.uniqueStrings (
+                      lib.flatten (
+                        (builtins.attrNames (lib.filterAttrs (n: v: v.writePerm) value.users))
+                        ++ (builtins.attrNames (lib.filterAttrs (n: v: v.writePerm) settings.globalUsers))
+                      )
+                    )
+                  );
+                }
+                // lib.optionalAttrs (value.allowedGuest) {
+                  public = "yes";
+                  "guest ok" = "yes";
+                }
+              ) settings.sharedFolders
+              // builtins.listToAttrs (
+                map (
+                  user:
+                  lib.nameValuePair user {
+                    comment = user;
+                    path = "${settings.dataDir}/${user}";
+                    "force user" = user;
+                    "force group" = "users";
+                    public = "yes";
+                    "guest ok" = "no";
+                    "create mask" = "0640";
+                    "directory mask" = "0750";
+                    writable = "yes";
+                    browseable = "yes";
+                    printable = "no";
+                    "valid users" = user;
+                  }
+                ) allUsernameList
+              );
+            };
+
+            services.samba-wsdd = {
+              enable = true;
+              openFirewall = true;
+            };
+
+            services.avahi = {
+              publish.enable = true;
+              publish.userServices = true;
+              # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
+              nssmdns4 = true;
+              # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
+              enable = true;
+              openFirewall = true;
+            };
+          };
+      };
+  };
+}
--- a/modules/clan/samba/flake-module.nix
+++ b/modules/clan/samba/flake-module.nix
@@ -0,0 +1,20 @@
+{ inputs, self, ... }:
+let
+  module = ./default.nix;
+in
+{
+  clan.modules = {
+    samba = module;
+  };
+
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-samba = {
+        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };
+
+        clan.modules."@clan/samba" = module;
+      };
+    };
+}
--- a/modules/clan/samba/tests/vm/default.nix
+++ b/modules/clan/samba/tests/vm/default.nix
@@ -0,0 +1,86 @@
+{
+  lib,
+  self,
+  config,
+  hostPkgs,
+  ...
+}:
+let
+  testDir = "/mnt/hdd/samba";
+in
+{
+  name = "service-samba";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';
+
+  clan = {
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+
+      instances = {
+        samba-test = {
+          module.name = "@clan/samba";
+          module.input = "self";
+          roles.server.machines."server".settings = {
+            dataDir = testDir;
+            globalUsers = {
+              guser1 = {
+                readPerm = true;
+                writePerm = true;
+              };
+            };
+            sharedFolders = {
+              "share1" = {
+                users = {
+                  "u1share1" = { };
+                  "u2share1" = { };
+                };
+              };
+              "share2" = {
+                users = {
+                  "u1share2" = { };
+                  "u2share2" = { };
+                };
+              };
+              "share3" = { };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = { };
+  };
+
+  testScript = ''
+    start_all()
+
+    server.wait_for_unit("samba-smbd")
+
+    server.succeed("systemctl status samba-smbd")
+
+    server.succeed("test -d ${testDir}/guser1")
+    server.succeed("test -d ${testDir}/u1share1")
+    server.succeed("test -d ${testDir}/u2share1")
+    server.succeed("test -d ${testDir}/u1share2")
+    server.succeed("test -d ${testDir}/u2share2")
+    server.succeed("test -d ${testDir}/share1")
+    server.succeed("test -d ${testDir}/share2")
+
+    server.succeed("runuser -u guser1 -- test -r ${testDir}/share1")
+    server.succeed("runuser -u guser1 -- test -r ${testDir}/share1")
+    server.succeed("runuser -u u1share1 -- test -r ${testDir}/share1")
+  '';
+}
--- a/modules/clan/samba/tests/vm/sops/machines/server/key.json
+++ b/modules/clan/samba/tests/vm/sops/machines/server/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+    "type": "age"
+  }
+]
--- a/modules/clan/samba/tests/vm/sops/secrets/server-age.key/secret
+++ b/modules/clan/samba/tests/vm/sops/secrets/server-age.key/secret
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:EH+rEfBdg4O7dEsk0o95T7xBQK/7duVCnLpdFOC1rWVbwdt/qYzEobZCo9awzvmh6YlC9Ld/OKv5wIBJJJI8PpTII2jdlWMG778=,iv:nhswri4dJ+Yj/1zarXzvLUhfJPSlWCGjVYOP6sYOT3w=,tag:WKFP6xhiSAfuDY880tEyAw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBheUV1blJCMFFoQmxVaGdK\nUmpsZHRkWDJXczFRaDdqWVRXeXYzSVZhdFUwCmY1Ym1uVWF2akJlc2JScWZWUUtI\nbXgvTFYvS0d1aXVSVkFUakJNSVdrZUEKLS0tIFA5WllweEhrK2hwYkFMaTRYeGJT\nU3YxY1ZIblhYdlJZaERodWVsSW1yYmsK5ow3QIvOt7nelW+aiBo1Z08SCqXTThTb\nAimCwnhqBhW08ipZ5hmQFqZc4cfoDapmemOBqW9Q6NPyNB0Mr2EIdg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:23Z",
+		"mac": "ENC[AES256_GCM,data:TxoCasCZ4fRLU4gFWSDl4oi5YUIFSKirYV1kI5oMJcFqSFUZ0ZXCbuBX4i5UA/VWkY0/Th4scRqgvVCFcr/sO8DGh+oi14Ayu1o70Pjf/f0u6S3ROa84f5nBybq8oVQTzP23+a0OkpJTB2vS+ELB2Q7GOeQ7MIrya58XB+40QCg=,iv:9H+0luICB18332YyuUnF+d8sYDWYWakiIK95dmqOZVA=,tag:ldPbuLykRCp9sqI+vHoO3w==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/sops/secrets/server-age.key/users/admin
+++ b/modules/clan/samba/tests/vm/sops/secrets/server-age.key/users/admin
@@ -0,0 +1 @@
+../../../users/admin
--- a/modules/clan/samba/tests/vm/sops/users/admin/key.json
+++ b/modules/clan/samba/tests/vm/sops/users/admin/key.json
@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/machines/server
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/secret
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:WU0RGh0P17GqEfENAZO9/orLxtU8wpc=,iv:yFINf8UCfkSKmWSghHB1wsrsgMcgAxjXbuSbtQY7WhI=,tag:sugSGytBTks5EYk5gZUw/Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBER2VuTUVpTnRDNzVKcW5I\nMTZ3NW5JVEJSVnB4UTBJQ2g5S3ZRdnZBaTFRCmZWTUwyckZwL1RhdXJaZUkyL1lH\nODdienVFWENrb0VDWENOK0hseFBKLzgKLS0tIHMrWDd3ZW9UM3lWZU9Vb2JYUC91\nZGhTTVBmSURPVmNITVlIM2swNXAxUW8K2/88jwpUI+gZ8B289I/AvxtXpQHRabcy\nS2tK1rww6umRYmEvN8X3Ek5cz7XeulgY3gMlS+IbtScjXCGySw5tTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZRlFGV0FveEpkZVNhbjE0\nZ0c2cWtYTEVVTWlkeFMvT2twQVF1ZkRQcVJjCkVLRUpUY0RBQW54dU5McjUzbGQv\nSEorSFpXM3J3ZFgveUg3WDdMOVlwZWsKLS0tIHR2bXRVMnkxNThtNE5McmhzWWRE\ncHAyYW5FZXJ5T2piREhHY1F5WXpsQ0UKFyeMvgOogS9n8puvB0/0lq5+sOSq8yfZ\nSIGlqE0KTmFryNpPUINiJj5SpvdXvUeVqahoCB1QOGbodX1vKiwdgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:23Z",
+		"mac": "ENC[AES256_GCM,data:gRxnr9F8mT7OuooHRVgtNLut1BAEQiWpVr9iw7oN2mKlbZxq0X09K8jYZu0/dEMijbRfDoZ2bUmW7VIcqAZXwAZqLoqx3vzBqOGAQFcxyVFk0yRqPzR6odMYBdOeLFufN9l1IXOKiH4wZZB1kHean7XBlLzNUCTts12l+wInisY=,iv:zz7g/VcsBkY0kCELIIOBByLOj9bfXVOkw7JdTnlKRWc=,tag:FcGO6rsv+fBTHt+ymL6c0A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/users/admin
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/guser1-smb-password/password/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/state-version/version/value
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/state-version/version/value
@@ -0,0 +1 @@
+26.05
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/machines/server
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/secret
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:bgmzK6ERM6e6uJMW8Cqfgo1ktvM6l83LxNJV,iv:aYAYbWvBLZZx9zdUUZ/K29heR/yKXRDeR48g8rhKIQY=,tag:ZhXGRovVumEa0lpT8P8KaQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTTG4yRFM5T1B1SWdzWWYv\nQTd0M2RjVTVKNy9rNUM1TmtvcEZsTVZ1U0JFCjNTOS95alh6MVZubXhOTGRwakUz\nZDBFck8rUVhYay9iRTRHY0pCZDJsSEEKLS0tIHJPUXpOVnMxMk9aSjYrTEFvSEJo\ndTd1MmNabVI1YkkwbVhkMnJLRzZzYjQKP6ehM8PTOrPVMgViUPGsXTyOdr9k5OAO\npf0faZpfH/GHiVBT7vaLrE/BLOhxLNkltldqyS1IUy19iXG9wEjbOQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRVDVZM3U4b0JveXVQL3BS\nR2x0SnlyK3FHMGdPL0hsb3lLOWt6aHBRbWdBClpzYWxEWUJHOGxzM0ZrUWhEa2hv\ncnFmOElUUkw5NEtEMmV3VDdiUGkyWlkKLS0tIHVtUlN0VTR1Y3ZxQ3JyRjA4ZzNk\nZWthMDJ5K1Z4Uzc0dVdWY2xWQUgzYkkKE0WIA/a1ZJXDS+qZyqadNYPRg7ixB8fU\n/mqsnJ6imb4+436LDfAd+ZknhS38IKe+56Tj27/frHFvcM4XIdBOuQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:27Z",
+		"mac": "ENC[AES256_GCM,data:rTA80/5n6DcTQns0UfuIJ61700exGeY/9zZaFA29bPFVzjuWz7EF4kQB8c3Qt1NcgGECn39pI/cT8SO1fWvz5mMRpBuoPthG8vzHGtjpqYYQhvOXh4CPmPA2EpWsC5Yz+ixSNF5BsrQqr+nnHLncmqVtdwKNx5WHZ+cHGHscqlk=,iv:ve7d0esVdq74ABai4NnS/W2hcLTmEf4QpxoJ24dLMNw=,tag:u99X2k0L7/iWSIJoTBR3KQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/users/admin
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share1-smb-password/password/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/machines/server
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/secret
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:WgDWZkhHWOV+ziaXtaeTWQicasUPRXE=,iv:Mwgc7cohAOLNsN77fEMBuOQaeQYAUL2CpEE1WaXm0lk=,tag:05Xxc/rJg1bt1PF79MLd/g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpWThaNElOVmhxbWFuTkJR\nQlJYMkVNTW5oRUNqRlowK2RLelhqb2hwSldFCjMycUpGelo1M2N1QWsxT3BCYktR\nUlpTYTUxTnVGMVZoelU3ZUlvQ1pMcTQKLS0tIGNmd1NQSlROR3lzQ2JQdkF0elkz\nNkN0Y2Z2T0Q2QUk0d0kzQmwrcVZEOVEKiM3Y/uGy4dB/5rGKAjjZM95y8INx+e+q\nxU9TUfGQBgYVzZtloLz3O7mlwhlamk1BvPvHttU+35paw26IbUlIoA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWczZZWk5OTGtCTUw3b1c3\ncU9UaE1RaHNMS01NeXNmYVVqVHhJOXdmUmxvClh4R0ZtZjVmblZCWjlBb2VEaUlE\nUDBmWTV5Wnhpa2tnTWo3bEhOYXlYRFkKLS0tIE5jV1Ivdzdxc0R6V1ZiZU5NWFNL\ndnNsK0dhTElVWDVMRUZiTG5kMnJVSlkKVXmgoqF2bdwia9VDlOOKA6DTZCqpl9DP\n2ClATf3YXnKQ/uBNpfWrKoqJDL2y+26rEeoisPUrkrgYbpr3hq6Nqg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:29Z",
+		"mac": "ENC[AES256_GCM,data:Yf5hFEEQ+yYH6OOjI7GLBahLL8UPuLIhIIdYkRoj6cSHgqm/ZpQGcd8MlHLGq0dpUcGOYJV9CM9pBqX0MjpABiK4XdTpoTn80EOV+mI2k6idE5N0doDecymI5A9ueB+5lO187HP57j5blJIn9aW+xO6MI9kYRYOz3sroAPq/JX0=,iv:yH1mB6DD+h869bsmovywJQm2ccd1PmqA7sZ9DGQ2+W4=,tag:sqLDW7JjT+K0JeWr8cUAQg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/users/admin
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u1share2-smb-password/password/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/machines/server
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/secret
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:LgIGB2KkRtTiqyy97uHI87jzaWTn2oCiV+Jx,iv:fUBJ6d9svCfwS+nDcIxezV3Eevlyq6r81D4h10T7Tw8=,tag:jPTOtbwjYEZc2eyMAKBrkA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyekpXT3lVSWErbWZBZW9l\nalBMVTB2M3Y2czZQWFR0Y3NWMlVLT0o0eWg0CmJWZmlHWFUwelI3ei9wTm5SZ2JC\nODRoYVRoVDFTRC8vcWgxaXd0ODB2TEkKLS0tIEhZL25mR1ZMY1Z1anBCTnltYjlr\nL2h4M0lieDFWS2lCMDY3MERORDZBS3MK3onTR08r0s8KA3qRC9xymVRhHQ9I6XjL\n/7bDzOR72fIHtCG8h+KTvN2v5H/YgHTVf6GzDw9FRRByuQ6YrP5lHQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIT1prVStXZnBTajNYeFNh\nL1BMNWxuM2RYRENPQ2JKVWJjZ0w2M1RodkRFCmFWU2hmbDBNZ0tOM0tGRlZaMkpL\nY3JtNnl0NXVsNnJUZThidXRuMlhNRTQKLS0tIHZMaUVZa0RBRHJoaSt4dDNyUGk5\nQ2hIUXJKTkFpR0szb1BWRi9FZ2MvK2cKzSfNN4PPx/AeyavqTMrpIOxQrdOi1Pt5\nrXrMYf1flYJ0xy0qjiBOSQlTlbq98A9sdB6OvfHFIMZU5Gq6jrnieQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:32Z",
+		"mac": "ENC[AES256_GCM,data:0jinh78IsYiqCEAjxk2gE9KP1vMmWT7XCgODdwT0tpQwlJ3T3aym2QCuC2fSFSpjqFrLBeclMOMH1Yz6dU873ZeRYX3uVovTYzOBJCYip/8PIUslum8Rafq7P/R0am1gZ6fwGkuY7kjIwaSxNc38mwx4TvIBZKNRdmkdnN9ZmnA=,iv:XpJAlFi/KSDaoZiMS6cc8RSwAw8MhikzAy1VlHFW6ig=,tag:i6ydBPpn/hvY/2AGaVkxZw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/users/admin
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share1-smb-password/password/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/machines/server
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/secret
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:n7e3+g4+mB7eB9fs6RShr8Weh/N58vuRTg==,iv:64jgKcVY4kJlL88hZujnN0w4Bd3BAvnx7qcL7jviaIs=,tag:qE0pNorMKPsQnguqSciiGQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jked5ykp2ch5k4030cewmgqr44jc9e7cxsyrfek4v3j4g3fydcxs4jk8jn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRXFnb3RMV0srYUUzSkg5\nQUo5cWl3RlRoYnRWV0N0VzU3aE9MUUlHdUgwCjRha0VwY2ljSk43b0UyUWtic2g4\nRFhWbmhBOWRpc2pDRlVMRnhObXJCMjgKLS0tIE1jM0hBeWd4eTNKanV6V2ZOUW0w\nNVFnMzNpR01tSU5HUHY1cW1SOWk3NUUK9PT0IV210rjorKWcdfP324IPojJqdFfn\nGAL2mbI96jat2nyqkg1uRfighvVzGlGJWkLpToAUpqJTWu5tRbMrXg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUWVub0ZzMW8vWVJmK0pC\nUHMyNjFXZkhPV3BrUElwd1dFUzBRVFBhSUU0Cjh4NUV4L3F3RjYrclk3d0RWS1hv\nTEdlZUY5ZFYyQ2VkOG5xNUc2SFphU3cKLS0tIFc2MG9IVFJWbHBYWnJEMkJTZnZL\nMms2eUk2Nm03aURJYWJGclNJMk8wZUUKFz49E5sp23YLlewDHbjApgRxS2BZjBTk\nk4SVJYvvIoZiPdRTNzZ6HYZGD7p036WhYg43lduqUrq8AtCnEHPdbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-11T02:53:34Z",
+		"mac": "ENC[AES256_GCM,data:0XlREuaKL02o1KlUm5K/xM9cFZP1APpO9152Bl3328Pm/a/j4XoAu70keSUjE26UG5TLcxAkT7m5bOW5Clo/zxzPORAMMv9NTho4gwkfOABwymcR0giNFjpZ10a3PBHgxMm5AaXR0mfehFE+NV32oKfe2htpOSKin5kFe+0kmLQ=,iv:qXE5c8hRLM2lALo5JbDA9YoCDjc4A0OxmWkXocUDHBs=,tag:AXZjnULGKuIMdDkywa3PqA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/users/admin
+++ b/modules/clan/samba/tests/vm/vars/per-machine/server/u2share2-smb-password/password/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/modules/clan/stirling-pdf/default.nix
+++ b/modules/clan/stirling-pdf/default.nix
@@ -14,6 +14,12 @@
        ...
      }:
      {
+        nixpkgs.overlays = [
+          (final: prev: {
+            libreoffice = prev.libreoffice-fresh;
+          })
+        ];
+
        services.stirling-pdf = {
          enable = lib.mkDefault true;
          environment = {
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -1,6 +1,11 @@
-{ ... }:
+{ inputs, ... }:
 {
  flake.overlays = {
    packagesOverlay = import ../pkgs/overlay.nix;
+
+    frappixFrappeOverlay = inputs.frappix.frappeOverlay.x86_64-linux;
+    frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
+    frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
+    frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
  };
 }
--- a/sops/machines/canopus/key.json
+++ b/sops/machines/canopus/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+    "type": "age"
+  }
+]
--- a/sops/machines/deneb/key.json
+++ b/sops/machines/deneb/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1wkly8nm7vsn7kdap5ucyw62rsxnk8xzt0e86wua73mcxxv2a9ahq05ljlx",
+    "type": "age"
+  }
+]
--- a/sops/secrets/canopus-age.key/groups/admins
+++ b/sops/secrets/canopus-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/canopus-age.key/secret
+++ b/sops/secrets/canopus-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fgf6Hp2UCM5l0pmL62XQwf2i8npmYKSiSazO89U8u4m6FsVkZfwj+U8yGOQlvaExRnhJyoDQ3okiQFrKueufK7gwvmvVPuN1Uk4=,iv:XZbu2Xi0/Ge6Qfnb9TVuAUqiOfPho34R7PK+eNDpXNk=,tag:OMZzEspt8JCdWkvhWR/PTQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNUU4MTdlQmRQNDUzTDdL\ncHhzazgyQTA1NnZuWGJSbTZLQ291RnVqYUFrCmdwNmQ3em1sREkzRjcvSmN4a0xi\nYkpXWmVyV0hlSG9LMlBXQUg0eGdneGcKLS0tIEtFQytreFB5QTZiQnFGZWhneDlt\nM2Y1TnJ4TWtLQ0VPYUFPb1hDU2FtOWsKTGdTMNjgYkhREx2u5Cd2kHIrHXOmgaXv\nxYx7TTXEsRBKPpELqyh4KrjkU3TulIN+aR2TTV6L8T4GPhz7qJRRcw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdXhYSlRIc3hUYUliRG9Z\nZys5Uy9nRFpXUnYxOXdKcGR1M2tyWngyRjJBCjB2R2Vha21nZ1hGUUErbzR5YTRG\nVGtNdWl5ejJ2bUgrS2tLTTByZzE5OVEKLS0tIHBBdUdrZjA0ZC9waHhvUzZpYS9W\ndkw3ZDkvOWVZUk8yekRJMkxodndhY3cKiM6SOGBJecXw6VaFx7ujyjJcD9gTZXll\nkx6CPjS1P5ur3nAxSRBXlgZ54rqv+gjJlhJzXY5+aCGtmuOPUIUUWg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFlGRGYyZDNL\nZHc2UFRVUDB3NU11RWhVdHFPdDRTSi9VclNQaysyMytsaDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp0RXpObEVJVHNRREEzR1R3bTBqN3Rm\nM3hXSWlrcWcxMlIrS2d5bGE3UGlrCi0tLSBZQ1hCZDFwYlNIV1RQK2s2SzFHU2Ja\nWENHL3FCcnNhckFsZW5jejA5Q3ZrCrov/P24IITo3YqDnxDq866Z2484tyGSBVWj\nRW9vd3DSFrN86pz/eXEinzOlEd0Y6G6g8Xbdb6wYDhb3jYLHkXY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDN4dHFEOHl3\neHYzK2k0cWlLOWlIQ1lsc01CMWw1R0hDZUxDR0k4RE50VncgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphRTZweGt6YjlHWUFWRHFabytZWDdI\neWR6YjFVUk40T0h6dnoxRTZLRVZVCi0tLSBZMU4vUy9iNG1DWTJRTWV3bllOam8w\nSjg4M0N6bnlwMXRDd3FoVWlCRVR3Cih+vMcCAkOkX+uWjKW62Jyj8jv5K79koJcz\n6Yh3eAqTrdJmdscKL75SBoD5BmD0Gtc+KE0gC1zKbHcQBkf6b4Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9lMmFoc2Fa\nb1UwYzlYM0Q1T2c2WGx0T3JXaEhsM3ZFRFRURnNQRWlTekEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5QUl6VzU3Sk9saVR0QmduNEVVczFB\neDdnQXl2bDdNOUlVanE4NVdENWFvCi0tLSByTm01ak1yUmFqczlsM3hGMlVtOS9S\nM0Qycks1aERSNUJpWE5MZ3U4MnEwCqebnYBNh6vYos01PJoTnUW3caGBCHrWs0aQ\niXGBFaiAgg8m27zSGF1E4ctQ+VgvlI7BWypVpyQMRw8SAvGxx08=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWU1hhWktFbWc1c2gvN1BM\nU0VrZUZpUkc3MUVUak90SGZxM1hGb3c5M3k4CnUydmVyaUN6UFcxVXJ4eStzbkt2\nRjM5QytuWENCUHJOeEtRM2I1Z3FnY2cKLS0tIGw4WHh2a2ViOTB0OThHTFBLWFlG\naUVXaGpONmNBVHBxejlxWDNSTWtESTAKc2y63StRLBsUByWJJGDNOnuoEP3SLy8F\nlUzHSazowmPAdVtm9gpIWTlnLVnJylY6k1v7TYalejkKl8YXEEt8GA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByR2M1ZG1XSThWYVN0SGR1\nT05VZmZkK0NNTGdNZjAyMEpmQjNEWGtOU0RRCmZHT1NlSy9Qek8zcUU4SEpndmp6\nYUJJZm5aeTNON2dBVElRMjJadCtsN1UKLS0tIFQ0WTBtY25XWCszOXM1VmVPSTZY\nYWJmcEVRd0YwK3RIUXRLYTVNd0ZkZWcKr5f6dCExSjlmClZiDjJylDWr1ccZkpCn\nhhjOsqA1vtayolowqvWheN2fysIg6NgLMZ4R9cedLahVcMfxk+2HGA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSEYwTVJlVjd1cjRPT2Rk\nQmphdU96OXRvNlRRd3c2alNiMVMvK1BVZ3hBClhsZ0NMVG82TEdibzFTQUVUVXBX\nNG1MbEk1dWFmdGxvVk5YQ0ZDTjJ4OUEKLS0tIEJJQ3o2ZnFqZmpsZGFrSis5NXBF\nZmZrL0RUVXhzMDhPNFBmTTR2VzBOSGcKPANYws4mekz7EN+ZjhfO5feMldFNDRSe\n1m5dGjswL5IyKpiE3wOlQAlkp8y5htYKbGdzwv0CxF8UYLGqVP8Jzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPcStTSGxCYjdLUFJhNnZL\nMkFCQUxVT05rZE1HVWJwdCtOd0xsZGJXckRVCnhWQ2Ywd05TMDVKSUdoeFl3RmNz\nYWRLTGxsYmtzWDFydUVZOU9aTVkvTXcKLS0tIHR1akVGTzQ2dVFDQTF0VlZNT3pM\nRDVmc0w2bjR1QiswcmpkUU9hYzJEUUUKC12h6SCwmtfd72aNwo3eGwvYrwtK3ryI\nlB/xr6ZR02Vcc6y8tqpvTq+86TUw+od6NgqpATU2KOni8rZdWWnBJg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:52Z",
+		"mac": "ENC[AES256_GCM,data:zBTGL5/AH9Yt3fvfTUbuS0OpNQkLVSAo/TyypEUpS4TE2/2jpS3VIH8I9P51Iumqr1ZeCTWkR4ujFklXfS7tnvgFlqaJVJtod60C7WZMddrzhSeypOkcAH0/oj/pD1JEp1draiFJBf8NvRsx22RqY7yFUcC9O2KC9WnHn0avq7I=,iv:qz8nv3l9lgMa8IgDTEl9b3loi7CTrwJYVHnGZLuEcys=,tag:A3qyzRqjgKjEo6oYE9fz5g==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/sops/secrets/canopus-age.key/users/kurogeek
+++ b/sops/secrets/canopus-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/deneb-age.key/groups/admins
+++ b/sops/secrets/deneb-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/deneb-age.key/secret
+++ b/sops/secrets/deneb-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:W3kzpxtZXld4cgeTubrTYbIYzAY3CbQjaGeUEIF0USrKkjxHdqPKRrLGPj3OeLhJKWs9AZnKBgTy/bJaJXi6eOcNnM2gubY/lFI=,iv:n7f2HfODC8YEJKn0ILIgbMP2L2beADjm0olrRULtaTE=,tag:0hHEyg0Fzeyq780FGosJtQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXR4aVNHTEN1NWdTdXgx\nQ0tHWjRCYWFJcVh3WC94Wi9vRlFxTlZOYmlZCnQ4M1FOczJWQ2N0NCtNbnlDM25o\ndGFWZFZOQjFHczQxYS9NL0hFLzdHTFkKLS0tIDBNWnV0UGFxMUxIZ082bHFKMnJ1\nd2NsZ3FCZTh4aytBTUdzV0FKWnlZWjAKXTug9QehoAjumvq6cr2JgnHOB1l4Easx\ntXbpbGNm5a0rsYA9FxiQKhk37I7e5RbkxJpxnrlwvlN2QThIOqWDWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHcysxTFFBK1puT2Q4UnJ0\ndmg0bTd2bmQ4TnRmSGJNeTl5cENSQ1gyanhrClV1cmt4TmlLZzhtSFBnQ0Q5dGMr\nVUkrMjF1M0c1UmJENHlIb1JBUHpuTE0KLS0tIGR5bEM1MEFIbjJxWGtKTFlpVkpG\nWTB5OEF2Z1I3azVsbTVHZ1NUeE1VNHcKm1gCaRCGahNVrYpIigDR1KeDlmFs/bQ7\nclmcsZb+RiCXU2frNqgXqMyhXDQ6eELCf0zpqZ5Tue5LQAkF/6CNKw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDVkWjRhVjZB\nQXBlT3YzUWNKemhLc2F0RzRHODZMaGtVRGg2SnV5UTAxaTQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3dGNKcUxEOXo3eUdzbnYrUm9uZUJV\nR3FwVmpSYzd4Z2RsRTdGTC8rYlJrCi0tLSBjcTc5UkE5Wk1vV3VLNTh5Sm5vSU1H\ncEJCdjA5QUlaVXMrQndTaVZneGprCu3I0FlZ+bRmxkkFnOqpOa6v0FStKOBlsTQl\nQMdFClzFjXQP/9i/xBXWIsrQ8fC7jiut/M7zDYtdQhUaIiLG5R0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZadU1TQzIx\ndTFmSGY5amNmeFNZRERaaDBZTmxqb042ZVhVeVhtRU84Z3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRW5wWmlodEJPbjBqdnluUkRMT04z\nclRBUUpYMWJLWkk1TzhHOVJOMDc4Ci0tLSBDYWprM3lYN2w1VFVCdXJleXVpMWFE\nM3NZWEdoRmR2ZlRQVGdVQ0F3QkdnChnVrO957ng+BWe1lMVl7y2+Db3TsXx6se3f\nXXkdV0Zzg6STsdSKG0+2TG9Zw1gsDeFcvrMZdE/i92Zn2lYYHD0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlHdkYwQytj\nc0dkUEw0RlVWQzV2YWJnem9nSFpyZWNEazFUcTVXa1ArblEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6akdKdWxKMk1lNEhNL2RCYTVYT0lq\nZGxHeXRwWVQ4MXgrVjN4VEJoQ3NjCi0tLSBMQmVEejBwaFdVVGhDcEc4OUJMSXEr\nT0J6WGp4UzFxWG5kajlzWkt3Z1JzClGHNfyWCLbMeHr1Q/nWblcwQSYi2j6V6UzT\nanPgXMxfUO7qzGLJ9ybrPFxjyHLzAH1bBjVTLmig/V+jlqB5DO0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4UjZyaE9ySGdiQnYyeE9i\nbldRNzZCWnMvQmNseDl2UlVqeTNVQ3BJbVVrCmxWUmUyVUZ1YXlzc3Rremx6Mmlz\nZ1A0VlVPYS9lQkxicUhOd05mWmd6RmsKLS0tIDZka2N0eG00Ym5iQnR0RmN2NGFX\naUIxUnBleFJVcXNod0V3bUpiMHYzaDgK0l3YaBMqM1Kz1jZ++zus5tBWsynO0TsM\nLmgjxptgc3uFz4j9IrS4MJm5gxdTYEGGl/w67CG0BkiE/+7c/BCtOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNjlEa1ZPUENFcmhXcmpD\neU5obkJ0Z2plc0V4TS9IODdMS3pFYm93MURnCnZxejBtQkxQMHRTY1BoTExhb0pF\nb2g0Mld4MmJDMSt4Q29PNTh3eGoySG8KLS0tIG05Qzl2R3F3MkRQd2hMenhYbmRU\nR05kU1ZBQVI0Y2k4SlNFalJyK1ByZE0KqYpRiC/Ta1mACm/H+fFZ2/p22oVHYheB\nD81C3mPcGfM3z9pH2TAxwh9V4i1E4Bsio2lA//fJ174HiGbWr2SLNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSUxBNHFJVytVbytTNFFQ\nRGFmd05CVWxzZzZFd2cxc1FGZ2dJRnM5aVV3Cnk0MWVRekd4S2dJcmxFUXhpOHE2\naHlxY1g4YVZiekl5aUJjalQ2Slo0MncKLS0tIDhTbWVGOE54Q09HeUJhbXEvb0Fu\nOHNEUkczU2w0L2ZkZHJsWFRpQlVTT2sK8RiKwY/waLn7ktbmh8+flByF9tN0RUD1\n78KVpKXp4SBWCp4Gr3tudZNWKnLsummhzxvNWY0FO3vOYK32SYFJ5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYmRWWVZ6VFF6L2J3OWlK\nUmdPZXNldWtHUHFPZmtEZ0VTTnFEZ2kvMXl3CjAyaUVNR2NmQ1dkTnVnNHY3Nitp\nY0Z4Rk5jK0gzbkl6ZDBHTERWeXg4UzAKLS0tIFFrREk3RnN4YTczTnoxZVZHZFQ3\nczlkd1A0VFNCSzFlT0t5ZG5xdWpoaHMKycCr9bQi7arZrREZWmbal6TYRxRj7Vmo\nBGAmgnS9JpMdojO2wbeXfA9NixznKc1SUgXYefsMIke29kUUM1Ij9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-08T06:38:23Z",
+		"mac": "ENC[AES256_GCM,data:7P6rZqkfnyHBRGJ6y61QMH5+fx/hTtOv0Qv0gBm3PF3vm0UH7oii5ztgx3QeImn1k44ctuA/RYMp0WTMHG6I3Uob/qC+XK5DTWPq+H2wx4qzb8iCR+63g2peqjVq8RV6TaXtJCNgLKf8K8OajMbBeLXZSeUmWtyxyGaDmIpPwTc=,iv:leBWe83Urp3vTMbBBNgihTO8DJ1RZ8+PfcdEsBAyEZY=,tag:Ix9vF10M77AiNF9h1oD8GA==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/sops/secrets/deneb-age.key/users/kurogeek
+++ b/sops/secrets/deneb-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/b4l/grafana/secret_key/groups/admins
+++ b/vars/per-machine/b4l/grafana/secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/grafana/secret_key/machines/b4l
+++ b/vars/per-machine/b4l/grafana/secret_key/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/grafana/secret_key/secret
+++ b/vars/per-machine/b4l/grafana/secret_key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:+Z2zooOo5dcjqd4TrwJdMMG2A1YCEFsrWgibckgTE1tlKh1mdoiSO9LZaCZA0zBp8IS1y2rYktDyILXqW87bua8=,iv:nTWSILxJuY1TNXF4LYJLF7Dk1oU0H/rZQxEv//cmb+A=,tag:zb/3si6B6yBs/8o0FMoR2w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArdVhSbVhZVWM0aXp3ckVE\nbyt2VVVNdlYwdHFFUEpoNUIvNHhWUGJIeTFRCjJzQWk0dWZ6dWtFVnlCVXlrcjhE\nV09rb2hpdm5CSVkxRWlaYlBCL2ZFdGsKLS0tIGVKWmptd00vRjZNYkdnOE9YRi8r\nRHdqZVg2eTkrSThpYTZycnN0WWZNbXcKnZeo1c0Q/RUujSWkNxoebdZ9g7GATs1a\nutlDVtl14WLHa1x3KGBtaOFkSDjTxbwrwfIfNiqzl1RfSWtJgNDKRQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGTVFGSFNGVHdLVUt1d2h6\naU9pTmsyN2NvYzRsNlpTWHdKMTY0WUhHTnlrCnlKVEMwR2FuUXZuRUJKVmFTU2tB\nNHlkQ3dteGlQMFQwVmRaQVNyNkhoNm8KLS0tIGtjN1NoVDA2NDRhUnFieXUwTGdI\nM01VNG54b1NLMFZQcEFCbFh0cnIvK1kKyQKN0w9InSNKCb2hKRuBfpJnftekrA8f\nns7WD3T7vBFE1/BNuZpMN1AUQnY9KArlh7cPMmhQqbc5ckFPdWdvDg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNrelpDYlFq\nVDRHTlFIMDllTStJYTkzOWhxb2pOSXRXcXhSYk1WVndTR2sgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1T0MrZzl0Y05nd3VETEtRdlFlQkdw\nSWY2WTJtcWgrVnBkRmhvQm52Z2ZzCi0tLSBtZUs4K3NiRUVtRGVHTnNpdE5kNWFr\nbzN4eVpQUHE4S2xCamdoT3RoWXBzChpsTQBKDrBlMHlDXzQtWXLt1+J75XNyB577\n9DtesuqFgKmmSKnJTtXlinNQ/ya92yR9gsvS9raFMCI1dA8Xdz0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9PZDNsMzd2\nNXZLK1dnVEZLSjNRZWJWZkQwR1YydElMdHc2NjVGSjZ3QU0gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp0VThFb1dZWlFMV200SjlNRE1LZ1p4\nSFZTWXhQeGVuMms0ZExDRm5UOUMwCi0tLSBNNmIrNktHWWZ4dENzV2srT0pzYmMx\nSjJDVFA3UERyQW1ackVvMGkzVDhrCvF9pQwBP/WNFrTlo0mSzHCutOr1IowsgX36\nSUANao2WlTD//PEhy5ETCySkCYmvwTGksRKgLK94gOmIwxQ7354=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDB0b2JNcWJ5\nbDN6SWtaSitUM1VoYnBQeEM1VHN3N1d4c2VYR2pBSUJQRDQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo3MTJhc0hIbTYxNllDOWdOWEZlU1lj\nakZzUVEvSEcyTTlFVHlNdVdob3RVCi0tLSBpYTBoWGVadWZkZ20wV1k3WUtETDl2\nRHExOUIvQllpbFpPMXhqUEV2eUNVCvt62eEaEg7UEbOAmMgpRqZUzkgXyz7Dmiqb\nbcyXCdnqlkR34TVL4uRWVoc669cNS/VwIckD0DoWK7TtTm2og+U=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKK25ZaVlUMDNmTnpUUlV4\nVTlnWWtKYk9McGNzdkxRRFFGNFJRbVJRSDJJCnptUnNUQ2JUbTYzN0lnaGpKd3dP\nRkxaUFdadjdCbS9TNm9ncWRxbHVMQncKLS0tIFNVU3BrRmgwTWs2dXFucVZtdlNR\nV2szK1RvOVh1NzVtNExEenRlVVNHSW8KYBi+/zyNkqeFgwOSkj5nFixq3Ut2qAur\n1KRFOF1yVCSDRpgT3WBplNXsQzyuLabL17OOkQdyaN9rbeHHxKrOKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2b2l4d2tSNUpZS0d5bTN0\nSEFoWnJWcUFDR25WMHdROUI2dFlNVERGS0RjCkdMYnhrVXdPckhuUnNpQzJpS3JM\nQnRPc3kzRGVzOXA3MlJLRFhzY3krcjAKLS0tIFBkUGZ2V243Nm9jVVc5d0s4ZmVs\nM3NUekowRXhON0dPK0JDN0F4bkh4NXMK6KTm4rNpIbaL/Wy/sLkY90bvO27GGm23\n4lh5WAiUr0j9862JRawwiSjNhEJgoMI7Xj1FeUvb6oz/fZSSMHXoTw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNHBoTnpzVVBiK0ZmL0dh\nS09uYktsN3lrd3l5VWI3MVVJYzZWRnNCSDA0Cjk4QlJnc3JjNUlQd2M4eCtZTlU3\nVzE2bGppcFhucmpGK1NqSTh6Yzd2NEEKLS0tIERVR1RzRkt1bWxhaDB4VFhWMW9j\nT0s1Qy9vOVkyM1hKTlFrVUw5dWFUZUkKh54GTMetxomX6mI9nsCaTlddQLwDf2lm\nMMJa6u9CFmiETF8+Qf67wvyGB1hI4et3O+0WD1ZeoTpySs2H4pVChg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZGZBUlFEU0ZPU3dWbkhG\na1F3YmdPbHU2a29sUldGSnRFVE9ZV2x3b2k4Cm1WNWYvQ3V0amdLUUZPYmk0Q2hl\nR09OUWlHR3J0L2lZRWVqM3FjanQvNGsKLS0tIExTeXBNQnllYmt2QWVQTnc5QnVl\nREs1TGxZbGJCM3lSTHNkMzdCWjV5VUkKFSBmmPVkqKz5PBzWl8FZJevp8Qvr1Oth\n6ci0yPZfuUGYlOZRZ17nit57bHl/lRA2MBD5Hkis4MwJPhBQ0gdSBQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-06T05:07:04Z",
+		"mac": "ENC[AES256_GCM,data:1ZE6/suAHcizEsOOI9e0Qykc+A7iq+lNSULVCtaLBHU+ayZA979rDO+gnuAJQk6EsCwGGgoVyNES89dTdIDa6985BP6Pb9xtuhsKdbdUi2mBqVWteh6KPBMWpFDAhwCmGAyjZkmAS9o7fYzETwJF7iVLV6SQwY2d71un4LXSais=,iv:QkzDYxTtEKGa1EdPc8PbwoScVUX+iGMcpsIvN0GKLTw=,tag:EtFKxdG8YJDWpMw90Fm0gg==,type:str]",
+		"version": "3.12.1"
+	}
+}
--- a/vars/per-machine/b4l/grafana/secret_key/users/kurogeek
+++ b/vars/per-machine/b4l/grafana/secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/frappix/adminPassword/groups/admins
+++ b/vars/per-machine/canopus/frappix/adminPassword/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/frappix/adminPassword/machines/canopus
+++ b/vars/per-machine/canopus/frappix/adminPassword/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/frappix/adminPassword/secret
+++ b/vars/per-machine/canopus/frappix/adminPassword/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:7zMc2/b905f+B2ah60F5NOt4XyGzQjv+3Hz+C6HajwskUQ==,iv:hZ0Hs8oeAtyADhAQp/aXNes1MTUWalOGukec++wiIgE=,tag:+IfzoawVTueM61u4LMo8XA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpL2JJL1lWMDZKN0RIYjda\nNDlwQWg2cHkrVUFCSkFId3NTWTRTeng0bWcwClFPdEZTa3hPQTF5OGI3OTUwdVhF\nd01SNzhqM0pJZFhGbjBSeDFoNlpnYnMKLS0tIHlLMHowYnY0TVBrN3Q3WXp5MU9a\nMjU1dlRuWFBjS1k0YWYxWFA0eU1pdHcKy9TlfX5eUMFb8dp9opEbVW5NmXZVwSz6\nBv5tBz5ajFYoP8SXGuXZfEipwt1WJxy47R1DRcL58MvoDmgrS5Dg8g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEOE5kajlHNUluQlhkVEpV\nZWNCZHR1RVpCZGYyeVlES1pMTUdLSFJ4MmhNCkZXRGtuZldkN3hTWlQwdGMxZExH\nWHRXRkZFOGdiWVdJb3UrU3NWQU1OekEKLS0tIG9jc3V1aHNURkhIT0ZmVHlLTXNR\nRWYzeTFWZlRFQ09TUzRPcWNlTXlDRWsK1B4FbqPrKvsEO6e3rbCXtKZo9C7+IjD9\nm/wKzExg50cByusgJN9Lklbg09cR2XcgdDSQex8okTP1EAnHQQMdew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBlcXdwdnFM\nL0NXeXYxRjFRYXFRc0lTUW9Dclg2RitjdElaUWVIUmcwQ2MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJYTQrMW5kOVk1ZFdrZVVEaERtTlpw\nNG5ITENIMDJmRG1kL05PNHBvUTFvCi0tLSB2Z3VEaFM1Q09iTnVhQzZkOEZETjZS\nNWJKM1RFNFlyVmtjeUc2cGRZRG9zCuiwSQ8VFvQOPBTh4OfSjItwl9dywjXy9kle\ncruTi/4U20O9bibhh+36oHIzx9iz9v9toZ49g8iSHuQVayynvUY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJGdlBiL2c5\nQWJBa1UwTVJZbVEyNm1nRHlmUWlTUXVsMVZVRFpFanRmR1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpEUmVDSEpwV0NwcDIydXgrQWxyS2kx\nejQ2SVhWRXY5cnM3MldRRXQ1VnFFCi0tLSBlRSthdXNKWmJDeEpMQjU2ZHpNNUNp\nRmdRWTlqOUNOOXYzV3M5WEZhM2ljCsi2HRDByb6b4PbV+zX6s0Cjf7IC43lwCnFA\ntc9nlnxwhSNB1/vytk8ny3TSyAxRFXkZiwBUsPtXW0GyEantIyg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZVVzZGUXN4\nWXQzaXY1WG1rQUllbmxZaWxrYWk5Qm1JNHNuWWxLbysxSHMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpId3Zkc2hlOWp1MTl6djRMYkJkZ1hX\nRnN4c2VkSkFwNjgvY0xHZUphSy80Ci0tLSBJakppc0NhQ25tK0JDY3RhMGFNNTh0\nQ2VwSi9lMmp1dVp2dGZQVm9zUUhFCg3D4DfPBxBzmgFPNslUYhbqQyHHRzljmRdH\n03idfAfZQkLZDpUf1IBey8uMbFCQ9Y6mLLkPTVrMtRn9xuECCXk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVENCQzlDWWdRZXdBZ2Yy\ndGxCNWE3aktyNVZBRzZLK3JPaElvTVZ5clZnCnNXaGY5aVBDSUdIclI4ZUNETVdZ\nbHVSeW1MRlhxZGJubkJoL2d3UHRhY1EKLS0tIHlDZ2pnM3N2aUFQeXNod0NkTE9z\nMWs3bE9rTXc0M2o5UHJvbXdnRUJLdVEK/Yjj00od7Sim6l60hV8dvGs5a1130ztH\ndCH+gjGAHwf2vo5yF9GO88hcUBhA12/WGQubTySyhM45FhHfZWxzmA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZU9OY2FHRUMvU3htTG9M\nT0FTbTBFM1J2ZWM2dUdLYkZQdS8yWEdZSlVnCnk0dkhJK0ErVHNiYU5Dand2K1lT\nbnNsREc5c1g1bnlnL1BzWWRuSTg0VUkKLS0tIHIraVpXaUdsR1Z5ODVqaHZMY2hT\nQ3Q4OEc1TDdrR1BHNnlzcXNZWUxlczAKCzQ22PTHEVaw6q+JOdY8FzYNFXBPlZ8f\nA7mqUqC7BPT8ltIENw9QQMC6a0I+uTLq2Goah61JMyO55vYjPVduZw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjV0t6dndrTXU2WTRneUQr\nOGJLVXFaUmpsVjJJY3NHZExpdmVmcGJYOWgwCm1PY2Z4U0hQU2UxS0x4WmVMVjB1\nWkdnaENEbGI0ZXhFRXZnTy9OWFQzQjgKLS0tIGRnUjFBcllJWVI0MmMzMDZQM1I5\nV3F1bjZYaXk0MGt3eHNzc3Q1UVB2QUkKahy7qWFthYhh0vNmUDSvRO4P8PHlVt7l\nuDbiykFIQ+OOno+3AuytSVLuMxanrLpxjjtJjO/rI4CJcN51z9/Rew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ZXFreEEvYnVHUXU3RnBQ\naUIwSkNOUkJmSzU5ekE5djNLejIybUN5SUdrCndlUjFPKzZkK3ZpdWd6RVRyVnhE\ncVgvK092Z3lNbUU0bkNwVnNyNjY3ZlUKLS0tIEZtUHdBdnBVYUZ1Z3RrSm5PVktJ\nZ3hFaVBMVUFiNmZFOWpqcjE4ZHlYRk0K8j2QFagnTPOKuFUOXWLFduMvoHJeYTq4\nUwuxtbfUYjuDAaXZGAyE9cSDpJYGCY7q4N/X8ruL4ciznOrdAooj5Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwa2RmYkFMVUZVa0dGcW1J\neXNZb0RWVHd1ODBEV0ducjJSbkpLS2lYRXpFCnZvSmgwZVNkZTZKOFN4RjVCcTBG\nR2xVZnVFRkxMWXpiTFRqUmtDMDk5NHMKLS0tIGx0S2hoUG1vMW56cVJaUVVmQUxG\na1Z3MHJKc29YRTcxRjB1Nm1oVVRjWDgKIrQ3DoY0M6OsLADxJrbm712a4WrWF7wr\n19HgcjMgJwG/6hVHyhsgZRFLuW88nTkljQ6SrpmdJEthhnm8L1f9bQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:53Z",
+		"mac": "ENC[AES256_GCM,data:aO0wNTM87UPaWOSBnfEDscQMXjHm6vjCIrwGuBtO1JBKeo7WSeQzebowA3dcaJliB2AnAT0O+XlfcO950yfrQvpX2yA95dXkMWDnU1on0DDD8fSEbytzWaomaVTCddMvlX/aa9J5JRYpt/efnbycQWysI8023PsG1Q/XUJi3TOI=,iv:gcKDzNf1az50qTXOhLhTv1JYzBHdxp/uZ81pSNQ4G4Q=,tag:c/o/TQyateX823x86lACwg==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/canopus/frappix/adminPassword/users/kurogeek
+++ b/vars/per-machine/canopus/frappix/adminPassword/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/frappix/sslCertificate/value
+++ b/vars/per-machine/canopus/frappix/sslCertificate/value
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/vars/per-machine/canopus/frappix/sslCertificateKey/groups/admins
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/frappix/sslCertificateKey/machines/canopus
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/frappix/sslCertificateKey/secret
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Xz7B6iaJk7hcJMVeRquqYaTm2IoB1VwnbtAbJ2mnaqU=,tag:ztWKO40CTOR57ojFdM5KlA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmd0JXQnpUMlpwVEFSVWt5\nQzlHSlNZOGZ0TlJCd1F0L1B5QUFZOUY4MUVFCnF2Wm5BY0RzVGgzWnNIZlRHaWpK\naHBmWXVyNjZ4SmxrWFFLUDcrVmIvM1kKLS0tIFJsWm9SVUZwdytuRHdTWHVrU3Nr\nb1dVM0FBdW1qUVFYZUF3SHpacXlSYWMKp2rwpqnZ3rRRJxO0/z6E/32l3FwMMuJP\nERE+3NKl3IEOFxIWoffmGycLweFFpZ3B6ON2gHuPcvnN7ECCID1MMg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlT3hmd3F4cE1FL1FkTmFR\nQlhraUVJOE5uRVBqbDVDUXV6ZjNvV2RVamwwCktuOWdKM2JEU2RLbGNJV0hQcVdo\ndHBSL1Z5b1E2OW5xdWt3Y212eEJ5QTgKLS0tIE01a25OTTRtSVNPS2J4UTlCRmFK\nU2tEY1IvZ0pxSEIzWE1ZY3I4SEgzQ00KZA0pVv3P2STeZep5fZu5/6R0uujQv1Hg\nJoCQIFJtpKLJbdQoneTXV3WSZNmGnoLmmb9XiT5HVyRRwA7CGMWBIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIERvR21Rb2xy\nU3N5aDlPUkxzcnZGdzh6bC9kUFZvaFFST3grQUtLMFg0M1EgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp4QkZTNlhuT0tlaXhYRDNHM0Z1QnJH\nWWtyOWhlYmgrQjNzWDh0V0kxZFMwCi0tLSBSS0o1akJOZEc1dW1OZWt0UUttY3Uy\nQlBpSHBOclM3aE4yN2V3M2dVU3FnCmO45MQOS88WwiFyPdGgZ2H/GPQIZhKm9rix\nyWLc/LFRhyHWDcVGW0DPzN37AsRWfONAiOeU1DpjHEhnr9k1Cb0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZZSjFUbytL\nQVFHNlZtNzRKaEVnZEdWNitEZVEzVS92UnZXUm1OcVJ3aXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwppL3c3VlJpN3lSR0c2MWdITk5kT0Yr\nK2JRdHN6Yjh0MHJ1dE9NbzRIcmxBCi0tLSBBOUpZUjJyV2VvSExwSFpJdWNjL1N2\nVC9tY1R1K2gzUTdNTWhLWEl6S2xBCl8QKLTp6b9RnAH3scrdOeSF2Rups4LDQRiP\nS5JwA+Y1RObw6rbTwVQ4V1PjvJ4oBUWwmzNDTcVsKWFtOifSf5M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFQzSTVEQmor\ncGgzZGY5b3ZFcXQwNHZkem0vU21nRTJrbUFreUZLS1dZUVUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpOK1ovYzF4aWJ1SjJ1YlRzeHVVNE5r\nS1lERXFWRkxadmwwMGNldDNnbDJJCi0tLSA3UnR5bnZEbmtqZzV2OVFOeDBPNnUr\nWDhENWdTNDQ4ZmIxbWFwbFE5QTBnCiQ/VeCMAB3/u1EyImB5pwKMG8wIK1lyYEKC\nsCy9vdIksTr2LVkrNnPAdfM/3AH/FhOsWu3y7/YFvrBN271QLDk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBveXo0RXV5aEVwdTlZdXp0\na2RyY1lHN2pSMzRTbWZ4QVFmeDVwNnJoWkZnCkllMHdSMWZZT3V1S1FSVkh2anNB\nYXlyUU5lRmxCUDBEalAyN3pZek1uL2MKLS0tIGg2bWFUSTErZDRjeTRTY2xXV0c2\nZHNZZEE4RGM4WWc4Wi91alF5T2lTZ00KloONhTMm/ThrrEGsnDKGcLoin8m5/lxC\nKW98Orn6S5BnMEQt+t/SqNHlwXYXYnTfaPQpW87j3+BvLTh+/7ueiA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByeUJoc2Nvc0pjb2dwOWNE\nZ2xDNHVXQ3YyZ1NEOGZHWUZQLzhkZFFvamdFCnora1oxbzdaWVVPS2g4dGxCN0pa\namRnVzROUHJzZFhTS3dMcFpXSGxORGcKLS0tIEQ1V25LZTVrWDZMM0QwYTVIZGNh\nTnEwRit3ZDhHaXZ5UE1aMU1tcE1SVWMK9cO5+nVWMntuXc4WiWf6vwcwxOifI2gx\n9ZFjnzeUuFnT8rmSXS64SollosxzO+dfvSmb7MDq794IqEPywFXbmQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdkw0ODQ4ZWtDdXhhcTBV\nRS91TGZVN3lVTHJjcCtLYTdQdytadlpLeHc0CkpJbnp3RzgwMHc1WmpyQUFRN2ZY\nWkVJSnE3TjhGelkwL2l3b08zRnowUWsKLS0tIExRbU93VmVpc1JxK2t6cFNpVTFn\nYitzczMzTFhkNUY0c2luam1YWi9xMGcKwuiKcu21b6pPXycWX23IqWiFMsZqsLco\ngLtLNcKQrYpD6xg2X677/ZeigmsgCAtWg7BB8QcJIY3DJg9isK0h0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnQ3E5NzdqVDFlenJyTnl1\nWFNIVzRmVHZBUEZLd0F5R3YzdXZ1dSt1K1VzCkY4Q0lYWWF4Z2Rka3VPUGxpemJi\ndExodEdaVGtVUVBWOUxaMEROcVhPd0EKLS0tIDlaTUJKMCtUOGRJMmJFa1Npd0lB\nUEtOU25GMG5BRDZ1bFJtQ1NXSHBGbWcKeHD2eNFyo0eGdSDeEvdOhRlyaeOxzAie\nZUFzeg/rFdMlr7WvPAImYFa6/cUrIWlGwdqbTQ5Lqq3CHfyI0tNMhQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1c2xXRjBzeDlaTHVwbHFK\nTXBxdlgrT29nQjM3L0hQT3RJaXBtd2V5UUI4CkhWdGVYV1M5aW5nSU9yckpCNUdo\namtuNDV4dGtVM25DY2FlMWFUM1Q0dE0KLS0tIEZOT0N4QkJPTmZZUCtyME9nZVB3\ncHRHSklOWG1TaDBSRWl4dWkvcEhyR3MKDoyxfCqSAQijgR5rMgVwe2M5DROqcIDW\nao8x510TSxRSZO39tx2k28hRk140d5iwEC7WUbSugCSH8BPOxQZGbA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:54Z",
+		"mac": "ENC[AES256_GCM,data:/mQOXUuQFCfCueBMdd6wmjX2y0jdRwtphVNd8UD4Bja4dRuUMVo6ma0LthMcmbJkmCGDGvXEwIRx0I+QD2EwsWxzc14rJawNopqpfjX7pK++kN5wtik+VbKuY5OiFkZCzfT48ciwSx4QgPMYoSZm/1pxJ28Zsj7+GDNWhSu48lc=,iv:2hSkrdqWDQ6NNOA7zJV8+K+jVI5BAKj6bMllXaxjrl0=,tag:7S3iP3QLzY5jxb5ff9+FCg==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/canopus/frappix/sslCertificateKey/users/kurogeek
+++ b/vars/per-machine/canopus/frappix/sslCertificateKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/nginx/sslCert/groups/admins
+++ b/vars/per-machine/canopus/nginx/sslCert/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/nginx/sslCert/machines/canopus
+++ b/vars/per-machine/canopus/nginx/sslCert/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/nginx/sslCert/secret
+++ b/vars/per-machine/canopus/nginx/sslCert/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:34FKaiZrhQG8osAKEAslEm5uDUCqrmAs+mSXdiESDrnkuRKPG3L0+fEcgtCpOLWn9rQHIMw7wHpe9lZ3noDrbdd3TFIsgoe25q/41NpskNmtOzBAbIZDymjivqSTJtKOmNKgfuB2DRc68Jyr3KreC1UCbLQ0AkHCa+7FoKVAtxZqdrMNUAW7rhDab2NuQRhxhGg6POv3vXUHoPAdHWsp6Qat37KSq6u7Ys0wWnALmMxxZFHay+/6G3W94jmBjXWOqmehG7t/jQNkXx0qJ7azCd2iYAQTo1F4DCWcaHLTEka2zW/GztHV4p6FpZwMEAvo+2EPJwWh5S+sSzmsd6lyEyNgux9eKzo52OdhAiV8NremISInpXr260VPTdeHWqlkz3UfvvsZMUzwPaZjZ9H11JCJdoxp0WO1M5rBdRZSDeXnlQISK6JO1Omht8z0F4OG5tVRN8Zwv7vzyfoU1gBFVi+X5mT7JndsalY+PlhmEDljYnmXAwSG7UFftJ6oVOgYQmAfwT3hsVW0KAQQxKArD9ztrejJxhTgtUxgZItHGlSCUoQVM7yueHbTOIifumkpWM7qh5QXIRYvrhXxGKcJ2SdMDO3MqgJ24fvZxfiOZVwivadtKGYrUQq890MlMAyXqLTVymBYL/eCCh/esSZYCKXwsvOFKY/UneGe5AfZ50HZaMTHzPFRwkt6eJ82PuP4jw8dkrCv68AH0k9BzKOtZLr7HhQGUpzpr73BBkOvhAeQgr8A+TxvPgnmXIjF1e5kgLN88f0b0x2W3JaQTjK/Ud49VSOLKznhooRJS35HdVwCNIPtMoTYua3I4ioEdEjstuim+2+1/WVIcPEGp+dTEoXVZ9FHUeKochM2J7HGvOzGofFz8JAkbU+m1ZK3VGZfUy6b8JDviMqk7TNuN+BBynmwK2Grqr7enrsUXiFEOwmjuhEKhNB4kM9QrUapT55IMDQihHejWXaLVHPH1JuQjkPTEB0hTxbm65whwKnZD7hlEYvtOA9Gi+PaQnCHBUlmMFlBQfqdvL1kpvcW+F5Y+1+B8R6JWK8Wk+APJMI9RkpOfhCozlV+Coy/akr0P7KlIUBfzJFZB6ckLalFGTAl/g34lK3qNhTuUHzquX9Jdjl4gYMnSLSAud/MrT7C388am0FGyWMl28WQmGZQIoW7bC8Y4mbilCy1Dgp9RfYHr7dPKeAQfBuaYuF8i3Eu46whyqeSXlTLP5wkRVhjc2eBW6HVPbX2KezBd+kfZuXp3MMu2BDxkrOc6DXoxz5bpvGigDl8+a/iI1iyJJioePiiveB4f8MMNmxzHSrI88ETDIAbtRxi7tiFlekxWLmp0nqI5V93AC2aXhklySml6ONKJKg3NRatHbl+VIzNn8ZChowhEATbrlA8Dawv6m8vVVt6HwLoqHUKEk0hodb10fjbeu60TQAYAchDTJFCspxXmh2foSO1e/Kv/8Q5RTNKOz2M46jGsTXS27TqG3Y=,iv:0xxq4lSS5/hjZc4ZzStr80+dU/KbhqfALgUFPul/Vxo=,tag:IMDdOFSZP05d459QHjxdBA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPM2hUdEhObkE0WHF6MWkz\nbTg4NDFFUkZPODFtbDVTTGpzSk9ERHlCVFdBCndXKzE2TURyRTZ0SVRvQ01ZWGpI\nUGl6cjRZU1FlaVBtWmJMR0RBc2V6MjAKLS0tIHI2b1BOY29wT21aSEFyUFhMUXBu\nUWx6Q05QZ2RsTmxiMW54bjRtUnVBN28KVbFOvg0PIJRr0K6mxFOZtPheb2nedDjk\nY7YDuQg1ktL1SrsAcsf/WjksVs7pgfIKU9zTJ4KaIUUfQlFvk6rFIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb0NGcGdBQ1JPV1FHSHJV\nYXB5K0lRVFk1UDFHeFhqVGRUN3FXWHAyV3g0ClFyU3RFZHRtVmVyTnd4emRENUxQ\nYlhlTVdVbml5b0pWMUJNQkJkVVYrL3cKLS0tIFpsb0ptRG02RnFBQjI1aGtscURF\nM0p2alYrNWZEMW8rcm5rRUhrMU11Qm8KstkMT/fNgLFIJ2Rsqa2JGuOjAq3cqlpW\n0PEdl4Za3z2XW6wtMzh2EVPl4B9IY2+nI/bMtdl6qqp0Lhr48UtMnQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHM1RUpqSjhs\nQ0tFRW5YWDFXOStCcE1uajZoRVh2cnk5cDhxR1BBOUYzV0UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpaZVNuYUR3ZFN1MzN3Z3h3ajZ5MkQv\nSVUvK3hjaksyWE5EUlg5d1pONFprCi0tLSAwMTdjWlpkZnNGU1Y3Vm11YTBqcnRP\nL3dNMmd1VER2UC9tRTJwb3ZNSVYwCuN/xKRnS87nCrFKUqNL2lraZ7xnr0uWELdE\nHfZQgDP43Pa35uUy2KEACz9ecpep24PVZccYvwtYReH2yztmxtw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdpVkY5aEtu\nYm1oeXJjc0NwSE15REhLYmdwdTFlRldTWHJhemU4aURlSGcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpRZFFvZDR1bWQ3aXJtWkZISEVnM0Fy\nTHN1UE1pRXVyM3c5ZGJpaWZtdE5rCi0tLSBnSEhjZXowMjdlakJ4VnJRVXNwMUl4\nYmhrUDNEaCtVSVozRnNVay9JdGhnCqX8inhonBoHqGxhA45M7NP9R6G90WM2/6cJ\nqYOlZTnJ4tNgXuoA5hBi+rFJxZJd3f+2eTjwtwtZVGaEFD36Px4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNCL3BURnds\nbWpUT1Rpa2VJMER3N1J5bldDYkdKaCtrYW9aK3ovczJsRmcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpUUnJ0ZEdMQ0Y0TGdnN2hlMlR1b05Z\nNXEyamtTdDFkY1V3dDZGTXFqOEh3Ci0tLSA4RkIyeUFYeWFObU5zODI1M01iRHg1\nZk5BK0Jibmg5TlJyamgxTERsQU9BChuXDiOkKZsV+GGaB5L8Ch00IVpwl1dFsphV\ns13ol9oSzVe/lvOF7sbS6xy8EDpSonfKlFrsiZVIyezRSvu/PVA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0M2Y4SFZWRldncG9UTjVN\nb2J6UGkxQldmTDNRVnVIcWNTL0U5bHBzQUE4CmdRdDRsdGFTUktPWFpFWm5nK1Er\nVHRJcENRNjVMOGhjWE1ra3RkaDlDNFEKLS0tIEdZMVk3bUZyamo1THBMdDNPV3lr\nZ1BVOXBGV25UZEpDTGV1OTB1bHN6QXMKD08Mrb+VpsDsXQsj66BWsw706o0tPpmG\nlXwmvSeU6j41OiQSkCGcOwDr2vVF7HhLb4oVSa611uuy9058ewmgtQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycVlycmo0MkJVaEpUMi8v\nSFFTd2RxclYySnI1RFEvSEhFbUhnUHpPdjBzCnVmdUVSK3gwaGVxTjFpVXlUSU1x\ncURxOFNielFYVFZnRTI4UTN5NjRmV1EKLS0tIHZmNGtWcWx3dWVBVThjbUxyR29q\nelRkQVVJNEdMVERJbWgyRGI0eTI1ZDgKATGOi2pDzTUeAOjo8BXF/0eX/gQqavcI\n/q6o9fx03/LEi8mA5/TUDPBF6s2t2k9f4TuajlQreiKO5pK5bqlUFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6eDFvVnRJU3NldStUZVI3\nZVdPS1JZTXU4YWFpZDBOY0RZWndJWDFrS0hZCnFPTWVJQXc4anRHTlBubm5JaWdJ\nVnpqNDJEOFFCdVRmOVlHSExGWGxPZmsKLS0tIHIwWWVWT1hsT1N2dnMyYmwwbnZW\nWkJRU3NEOW5DcDF3V0RVaGxYZVFFMmsKSGEgl6RJ1OkkcsqyRuOI+pIdW6+uW+LL\nk+IpXDLsb4hHLU+cYB4hAhr5Cdypmp1JCZh+AXQYJ1AUKEtaOnPo9Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIVkZseG5sY3loOU1MZ3kx\naDR0UUFPM2RNWWZVbmhLSndwVVc1OG5HU1VZCng5VTZqZGwrVFM2RmZCV0xYckNZ\nc21kYW8yUUF0VURzYzlSTVpBZldSL2sKLS0tIHQ3Wk54RXN6bHZZcDR4TWdDQklC\nSVdDUkgyOHBlZHIxTitKczF2NEJRQXMKoJckdPVVc+sVHYUsw9xzG0nNtcNJLwAj\nggrgEN2wqz7AzT7RVRSSAvVHzZTsOROxI3iqcEpumNv7jBvajadp6w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsS002ZStzYUcvVS9NWVJS\nWnJrNFRENlNkU2ZJZHFST2VoQ1NZKzY2ZjJzClVJampRajZ3MlNFbEwraS81NHUy\nQVRZNUxTaE5oTDEzQ1YxOHJxaElEeHcKLS0tIGVaMThJMVBVZUg1Rk1nN1RycEZE\nRWZyb3k0NHRvVE9US0tCMGhXM0s0clkK2JePeaWCzK83fczXVVT/2WrFBWnIBKrq\nfaemuo6EO8rtqVEFl0ffclsEZr/spwkZl/Ra4BOEQkEfDJ/VFYG4YQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:55Z",
+		"mac": "ENC[AES256_GCM,data:d6HO2RKu1P4yUcxB9hgknrePgmHzytteyn9LcaBP9jOKbEqL1KwBduycEE18jBZm9cExoKy16dP2UwgkWfBXNYw91SUclxYTl6A6vXQaT4cnzFbcoyjMfrckE8WzidRwuhSxsq8VMKy/+5dfLCol5XrbWxhQATHWlC7Smy0WY8E=,iv:VZsT7X+qrOMxvhvygwszqKjJ0MlG74CmU/G7dOch8Rc=,tag:NNTdFpj2iO7va4kYb9xFVQ==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/canopus/nginx/sslCert/users/kurogeek
+++ b/vars/per-machine/canopus/nginx/sslCert/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/nginx/sslKey/groups/admins
+++ b/vars/per-machine/canopus/nginx/sslKey/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/nginx/sslKey/machines/canopus
+++ b/vars/per-machine/canopus/nginx/sslKey/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/nginx/sslKey/secret
+++ b/vars/per-machine/canopus/nginx/sslKey/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:hlSybXCHKTjcrjJkfFp4fMgb+foJ91MfQhDA3CWZtUU=,tag:VEPuRHFv7+LpsqGxP4hlyw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WEFiNDg1ZFg3SUtDUFNj\naUVCN3k5U1R4YlZKM0M4MjViZGdaQjFOeng4CmVNZUJnNytpUjU5T2NMZG5qMkJP\nSWNuZ3JwUmpNOE5GSnNuOUZvR0EycDgKLS0tIFIwdy9wMkJvT0drTFRCZlgvaXVo\ndVlCcytsVnQvRThJSGdsSkpWbXlONk0K/ZmZrEHcdlZhFQF/USYZD0zFX6YduC0F\nBpReefb5X7uODjGZYPLnMbRlPCo6eW+b8ivHkOIzg9HMOvE7BvfGWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQc09pR2JobCsvSHhrbkgw\ndVlPZkVLM2UrUmQ5Y1IrZll2Z1ByRlNrekhjCjVwdysraXVoQmVoRWxPNEt3a1ZW\nRURVNGxmbTc0b3RGUjFDYXJ2WGwzRlEKLS0tIHJ2ZmFFMXNMM0U4YlA5NG1WSVFH\ndmp1UDBJMVhSeE5YekFWNi9NY085eGsKm749oQWPu79yJI9w9qyc5BNlWHQaAB3G\nQdO91qNZNyHLfgmWmTQCW/OWUF8oMzDlKtwimH8e5lzZ1Cbjk/EMug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVCT2Jnb2NL\nMjA0WGs4QkcyRVlQNmVuNGZSRW15dHQvVVA2K3k5QW5XbGcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1NzhSUFIxMW9nais3alQ0WVo3R0s4\nZXF1eHBWVjk3ZURpWnkvcTFBNTZRCi0tLSBkOUtjZ2Jnd3MyeXdJbjlUZkw4d3k5\neW5zRXB1MjJnSC80SmUrMkZUOUhVCovaJEhkFVz5yLL1oh5OruWWkdjAOrtX16BK\nSYTcsdjVYF8ci2UJKL6Ej7wqNpZF6B1dShYVGEdMa1eK8Nbujyg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJVdmpEcDVK\nUWJacmZHZUdObUhIYUZRUE5Gekh5RCtjbTNCaXNFdlNzWEUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpOMlZZQ0RTVTlaejhHYk41ZjduV01V\ndmEyK3grYW5helA0ODdqT01ZeGZBCi0tLSB3RHgvOFd5TksvMkkrMHlBRm9iVzJQ\nTno4ai9MaFVPUDFNNkpxT3piMjU0CnqrSaiQ2q0WkUF0QVIvFekkKwELccaEK0v0\nSVU05FyBHnM3HQR5yFzQVdGq6N0MMVOVaV5Fbz2obBOJ4X+UAkM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1LSVdKeFla\nbHR6d0JWN0pyQktNRGN4MTAvUGViN1h4bWtzWXZPV1JVZ2MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwplbUlvUjBJWkdqK3oxWm1qTzQ5eUhV\nNlYyOUVrdElCK3h1UjhoV1EyNE1rCi0tLSBrRS9EdXJPWk85QjFpZEpYN1JtR1RR\nMUd6Sy9JdkozbFBRNENLbEJoYnBVCiAX2QuPTUFVi0kbxhNV4D8yMINWFSK++Bu7\nGtO9T9pZOGYMXSatQcgpfi6F14+xTd5U3mwEdkOIXkTmhlsZZlc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydVpzNnBXZUVMVExod2dz\nckNUcEJVZUxCeHNndzB1SU1KbVE2MGsvNlhNClprNnJYQ0pncEo1UzFNMys3eG5Y\nZE9SakNvR1dyNk0xaXhibkxSeVRjNzgKLS0tIFpYeTNjNEgrMS9LT3krVktKa3Yr\nTzduMCtHR0RxMW5EY0p0UmIyV2tZejgKo984VtpmniRtyBm1+My9fsDOc+e0bi0s\n4i+p8KB4DTYfyvCaJcBI6hkYDMOlDo7TcuxGtRSbTdhT8V3qQJaZ9A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUjQzTlUzSDIwaHBxNU9w\nNUFXYk5LVGJRQllWclhRRHUvNUpHVk1NSWc0Cm1tcExuNDFtYjJrdlFDdkFpWHE4\neVhHV050NDVTVlR1VTROcjh6UGpvNUkKLS0tIG1LZmpTYmQ5MytXa0o5VGF4YzBJ\nQVBhOFhSc2NiL1lWd052L1dTUXZMUHMKMCTVNP+E12M2XMH0O9921+NQkwAKuT33\nj5m3tWiPIrtsAzzsskFxUzwnAReBvWFbdNs38AAupOXZ/TGuiBfRug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3KzlxNkRuU1JNL3ZqTjRl\nSk5JVjVmL3ZPRnZaUHMyK1NjOWxrWnB3N1VBCm5uNjh5OXNLOVh1VCttNHFaOHNG\nWHVsVXhmZnBSSDgxSlNRZ3dIdTAxMzAKLS0tIDdvdW1OMjJ5aDVXQ2g0NldoZlFG\ndVFKdTlLQmxzRjZhWS81a2FUeTZCblUKUm+lhCfYawHEgkSf9K7zT/WIkiRG+1Kf\n1F8BHVNdPhQjIDPS+5p1OQIC5k1QpaAAlLtO2vnKsQpmusOcRXgDSw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsS1FBaEFNZGNkRW5oazcr\nUEZQQ2dtYWhDbm9HdHNrSGwwRko3UStLN0FzCkZIRGRpR3Q4L2JlV0JiRWJGSVNi\nTkhkMWNnMGFGSk52ZzBHWmJvZ3drSkUKLS0tIEpXb09MM3NtTG4rOFdBcThGTUV3\nQUpYM2M0a0luOVdTeHdGTU9LQit1ZE0KGFVtSbgA4TQcYLbeZWW7/AW3bjOfoT4X\nxoMz7BltWwW4qKpJQ873/nV81tRhhbLHMaifZ0cJiIidfoEs8DLnuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZWc2dmFuQXFaUFBYSmp4\nNDhSOEVhSVVGWEhLeGtJVlZlZVBpUm1oTFI4Cnh6aTBDcWxhODdUeVFwU21kb3FK\nMDdUenZmaE9JeW51bVZaUEY0L1hqSG8KLS0tIHlFZlRTM1Z2bGRXUXVUdmdURm9T\nUnJpTVh5anZCVkNqeDkvUXllcjRCTGMKM4stPw+aVUl/yvLp26SiKp129ynMzZ2/\nD5a/vJt6vu0Zmag1Vk6JSPOl2mWuD/ZDSJIU4vqRCes4rmwu/jw7cw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:56Z",
+		"mac": "ENC[AES256_GCM,data:CoovmIf4BZMHN1eEYW3DOkjFS50YvZgKPQnm4XZQW37cJOaxcq9N7VQVJSC85DpODUeFZSMznoLdiXd0d4ZKb6mHtkQJ1c88MXbrZ3tOcro9zhCeSvzaRcVVUoMgJgtgp3mT8i6An3yDKVVBHGEy+OspeuKQy8TCl9DK6aKwhmE=,iv:+UOtMFbFZdhehZf0pPWtUoHiWY1jCF1JyNpp3hmhTbQ=,tag:7cwfcrsqZACKTGcis/2r3g==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/canopus/nginx/sslKey/users/kurogeek
+++ b/vars/per-machine/canopus/nginx/sslKey/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdhHr44poem4w1dRksCHczPxHuxT7WX16i5VV/j1RP8 
--- a/vars/per-machine/canopus/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/openssh/ssh.id_ed25519/machines/canopus
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:F/oDah0lM82BB0v37YTlonCZltyOSfSNxaImWzR8COA=,tag:J/01PkTX1VJVCck/rGg5mg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEbUlJckV4MEVYVVg2Y0xB\nYllrcDlmRDcrOWdwWFQ4Mlo4N2QrWU1RaXlzClk2b3E2YVFRS2U5N3N4UHNNc2pL\nWUZyQWVTdENtdzV6byt6ZUpSbk5VVjgKLS0tIGxhcjBjRDFhWFpwM1JLcEZuQUNJ\nMDBoUjZuT0hWZzFsODJQZHlPd3UwbE0K8/ZlMFejwBGbwdP2rrEih+NbuYR4rjIp\nBIQ6VnYS6KKBNFb4Ay5SDeS1zJeC1XG9CWqGHUR6bvc5L5B91Q4VJQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyam5rVzFUVG4vYmJ6Y0N1\nM3ozRU1mb20vS1JCSlptbHpmdmpVZmxyRDBvCnZDR1lyMFRkM2hFQ1QxbTdhZlZ2\nR2IwbVFJZVpETEl2cWFmYTU2TGpRbzAKLS0tIEZtTVQxRHFHVkI0TXFOQmRGaWt5\nYjRVOWE5MVQvTE5xWGVvNEdsc2dESDgKeQfuN+ZAVb7v2KbXY7/nGjRafhIr1m/Q\n9x3/7ZKqthxO18F68LqZ/wmfjmBYLuxdMauJ0s24kMjHL9MiwJGT+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpDeGo3cG5D\nWVdxTDY3WGtXK1NJOEZtcjZ0T2hpbEtobEI1K25oVFdEVzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoMmptb2ZSdGVLYm1WcmM5cnNFcVdk\nMkxBSFVwUmRISmRVUFRwcGRoOWZNCi0tLSB6MEFmUWJPV3ZjZ2JPc1hGRG0xdVZ4\nUG5BV2RMTm9aM1dxTThhUkswU1NRCjp8iHOUG1EQ5lMCmajsAc5iO8DHM9CgyDWh\nLCW8s/QBeEZrIQ8qVcJWbEwS3IYqSYQsGZ77lVtrwdfwUoke3tg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIElYR2NEV2xn\nN0U5TUlOVHdlTGtlV2dTaVcrREEvcmNMaE9QcW5NcllnZ3MgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo5emlRa3RqVVBqNzJhOUM0cklmTFB0\nZWphRlJUQTFzSWNrUTFmTGZKMXYwCi0tLSB3b3QyM3ZZeU9USGFYdU9XNW1QT2lp\nWEswTlZLdzZqVVBoMHBZV1lTMzVVCtQxp++6hGsRdOnTraZTL839JPO/ng6pwPdF\ndBz3u+pV74NBInMZxrW+YlAtZj2YRFVpD11d47heF7gUGPDY2yw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9QbGY4bWZu\nRGZQbzAvYm5waVh5Y2Z0N013UDlzVHRhb3hqQ2pXMGxQaFUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwptMVhvWEkxa1VpWVNoNHEzTmdFVGM0\nM1dyKytQVTRiT0drUmlIcjM5ZDhNCi0tLSAwSm9URThxcEZDTExiNFZFOW5YQ3Z0\nYWJZNzB3N0F6NkNFamxJUTBLanVBCvsGICy7BvAIWWHjfIGgDXYhIY/DS8fnK6xK\nbZ4OjpOdnMcRlu3fBTcx7Jo0B5+7A+V6A3OAtJy11HoG7jJIg+M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4MWVjRVk0c21IMkdEb3Vn\ncWNMSnYrYWFZcmFxNlFpQ2h5bVNpb2gwaW13CmtsV0QveGVNZVBtL25BSUVKZlky\nV1cwcFlaczJ6NTVMaFJJNVZpdnROZzgKLS0tIGRRSGxqYVNoSFU1SFFTL3NEdGpE\nSnJMTEZqcVkyZ0NNYUxOSWR1NllrajAKIllNOtGvkVpkaBtB0tAiMfU26SVix5/V\nSL/5WGcey9eYLi/eXQ9snN29EDwX3Kn66yfCn5IptZvEkPMAiXD0zw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMSWZtbkI2ZE5zUVRzNjFw\nZVFYYkxYOWQ1NzZPTUxLUlZncWl0c1pmOW4wCjdZQi9NVFVLRUxuanRDYllXTWpy\nUWhvTHBzTUZWeTcraXRUUW16V1d2OEkKLS0tIEY4UG9ibTRuSXJaQTJMcHR3Y01a\nTHFPUVhyN1h6QU1pOTZ3cVJBTVlVZWsKs8ZeHu0Gn5r/nh5xU0IX0AYv4osri7zV\nC+DmMYUIlOjDgrRsivMGIQD5dQoSY1Kb9jRMQXokTxrNkkTVAF9OhA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUnVpa3VrWXoxMDFOYjFL\nSWZsSGsvdmNUT0tzbDlEbkFaWjdOTFA2TldnCkM5eENXNWlyNm1icFhVUWk5ZXB6\nVnRDa0V2aVBGQ1NFTEUvTWxGbTB6Y0UKLS0tIFhUdDZxbmd1RDlmeU1wYzB3Ly8z\nSDBPUWdqYjlZZE95SzAvb2ZZSVBFUUkK1Ki3Qlt3UByZjCGqWk8h+fg1Mp6pgSUt\nVTYR1pdz9dEg9tG1JZlhw0SEbTiSpZIkaGFjF9osrDXhpy9LiKejuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WGE4Nys5K2NXZGFRMDZG\nSmJVb2pJc1JUK0YxcWFFcUI1RGMzS3h5NWtzCjVldmh3NVBqRUsxOHZib1lRWFlX\nbkY5Zk02OENQSHM0TnFzM043Y2hOS2sKLS0tIHlia3M4SDU5QjB3Nk5SOFAzWmdi\nQTc2RS8weGlHN3MzZHlINlZJMS9ZZlEKl1VgUuLwRt7VDSdUqRivW3y+w5mxTQMy\nJ3FKGN3/2sfHk0MDFIYcUDQRoKLMRqXRm5Qly1Bx7YMpodTXKAXQtw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRVJESVB2SkxEWVNPWDFL\nbTFIcGFDTXA1RlhPNnF6Ny9Kdlc0SXZzRHc4CkY4c0U1ZkpvRis0ZDdSSHZBMGlP\nNXUwNlltYWhCZDdaNnlwTnoyekZYSm8KLS0tIGVaYmpMK3JRdlNOaXFqNHNPTDRo\naC9JbElaNWtHcEdjZGlCVHpWMTZWS0kKbMeg8ssoK+UvPqbVY5gyzHIiNmx3Zt28\ne7K99Ms2CnSjpA0xmrF6eExcfn8FOdIzShVWVaj+pfdytTdRdUSiyA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:50:58Z",
+		"mac": "ENC[AES256_GCM,data:hBo+uXZEJnLNaWnMN4fcU/xqFwkaNszcchlHAeS5zSH57gYoaVmu5xKUIic9VaOu2o/P7X/Kkr7DsMjhdfzggfXuzJri88Dhg9iPsvvyFT0VdnqBd+pBnGdqpLktKfwq0cxFbjd0N6s/VpxJ/la14AjwrSUClhbxjQaFNWSh8+I=,iv:oyJxBpLMO/uzFGa4QTlEuPpV4dYMy7rvM1380wRiM0U=,tag:ebQA723VprVxeDo/0cgC+Q==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/vars/per-machine/canopus/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/canopus/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/canopus/root-password/password-hash/groups/admins
+++ b/vars/per-machine/canopus/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/canopus/root-password/password-hash/machines/canopus
+++ b/vars/per-machine/canopus/root-password/password-hash/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
--- a/vars/per-machine/canopus/root-password/password-hash/secret
+++ b/vars/per-machine/canopus/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:Jsw4HB48SKSEGA57faD0c3uBp8urEuBJUTDeue6hmUg1dENuxPQhDtRbNo/1ylO2mOXRnhl+HBTfMiH4yCmqr0EjZDRj9Q82JRxrQayxQRudL/T4jAljgbpCvkFEV38o+p8DH2rgG3dSzw==,iv:hnIV5eft1VTjR/DarkJGzyPZL2Hg5t0sl1CP2VlUASc=,tag:gmwPdJKB8nsqnChFOH1ujA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJR0NrTkY2ZTJtd1hIYmN4\nNzJ0UGNNSEV3RUhyek16ZWVFWVpWbEFRUENjCkltb3NhZFV4N2NiOWk1WUlvZWpl\nRjloSExPT0RTWlhQUUk0MTJaSEoyeGsKLS0tIFo4MDZEcFZ5aDM5YWdRRFAzZk8v\ndXNGVSsrRVpxNUJCNkVNUzRPRDZld28KS0Xdq6ijAnC6FhrsEx5O1rkyU0aVahxi\n+M0y9jL4a4ZH7kHukBjfiqYcX7/rN2IqmIoGDAx/zCqgD5F2Xucdfg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUmpBMmR5cmdOMnBtbVJI\nVWVPNlhBR0xUTW91c3RsRlhQRDZrZUM2ZEJBCmZNNFFuWmljRWZ3eHhQR0RHdnoy\nb2wvSHVvQ1hHTDRwQnZma2llK0FPWTAKLS0tIFVkTzY1Y3hrTW9zV2RERXJIN3lt\nc2QrVHgvOFhJdXF6NzNTTTBHbVBuSnMK5aZLlIlYmOJ0tk5eclLDRWqIm4V5IfdK\nug82c+23aJkRftvW6j9E3PWxwc14sRXXoAjwrhaDHh6q1wj1OkkBag==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFVTbjJreVN6\nVTVHcER0QlU1a1BxcHJUUEhHUjhvOHZqcldkVExRZ3kzMmcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpwWXdhQXBteE5kSmlxSnN4QWhteTFq\naHVXdXBlbzR6L3BKYjN1a2NwSVpzCi0tLSBOcHZVTVpmbi9xbU1BMSs1V3hWUExK\ndkNZZXgrQkxNTjVQTysya3BBaWZrCv6Jlde/ktPdp+sqEj/c2BLyYUCsm9JLZ8K3\ndpTHFb8jJguir1YatlhnJ3mbi9y7jN7A5HGcdikf09M3RmJDmE0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGhtZXdKTmhq\nbndXRDRFV1FnZXlpTFlrRGFzejhXcjVsMlRMWVRHbGhIMjQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpJUkQ5YWRvcm9FNDYvcm5aNG1HRTNq\nTC9UQUZ6Vm5aM3pkVXRVY1RtRXZBCi0tLSAyQVVCN3VjeFZpeTRZUE0xVlR3eml6\nQlFicnRnMUZGMWtzS1lhTWk1RG9rCgFDtFcJN0qf+r52234OBP2lRtr33/ZyaCgc\nVlSKAYHlicG/qk3UCSmagFI79DWz6WVheZR/HP5QVZQWAOE2xzU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdjYlh5cVNQ\nblJldDZQcU1iSUVUZDBwR083aHo4K1huYzlXRkQ2aXoxaGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpOVFFWaUJMT0hkS1BOWnp6Znh0UVJJ\nSlN2VGxEQ2tNQzBvUnozcWZKbVYwCi0tLSBxS3VJSExBa2RxWGIwQnhScXk1VGpi\nTWFLNVc0dkhaQW5SN1NxcVp0V09FCpu+ygBK44vHiFDeQqaOEHyADO/Bc2kdSSii\nUbg6T4cRguc1Oq/XaS8E9sXDnbJiyLUWr96nOmqQ+Th/i5ZP1K8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVV3F0SDJ6YzZ3Z1VmK2Ns\naWU4NDN5T0UyeGE1aVdUbU4vaFQ0K3c0NHhzCldxeXIrMmtjd2w2RW9DVlVURDNN\nMnB1RXNwQmthUW1EYVlPMFV4N3BSckEKLS0tIHdmd2VMWVZha3BrZTBDYmlGcStH\nSXFLTnRHVzJ0MDJNS1pZMnNqeHRVQkUKg3BSXYzb8HD042+DpHCtWgjGv4B+stFR\n2AmEO9c6mTcRnzgdGasgQkRM6TgeM10IatIdAc0b37yGiltDL637jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzb0xZczhMNzBZN1dOelgz\nY0d2VVZ3Y01pckZBTTJ1UDdGb0svWEtlTnprCnBtY1hKSFdXckZ0ZWNVbmN0ZWZv\nQUNSTFJ0VW5BODhYcE5wTDhBM0FhOUUKLS0tIC9qMS93UGdJK0tyTHhSQkthb1pV\nVUpHQ3NyVVp4L1puSjMzcXZVcHNXa2cKFi0sQjn6tNDOH18x3S0sp49bpbPCopaN\nGRIi79J6AdWa7pPK5TIAc7CaCyKFt6r79EviynCNv28mTflZaGua6A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5akdJYmk5cVZ0UjJxZHl1\nOURkbXdMcDFrU1pTUEZmK1ZZVm9vS29KV2dFCjF4ZkhBcHlBbTVreUNrNFpLTThs\nMEZWaEhJWlhIOE16YktWNi93ek9jRUUKLS0tIGdIZk9aSWdrTHZnTGlQOXVLRkNZ\nSnRESnVsaVBPRVBZUGVqRFpFVVRaWkUKwLM7RVTqTyDQfqrB7Zx2PgLyhHLKvuGV\nvs+8NGTsyjpYy9CvF2MrTPmBMmYKW0skNyTgkze+Mp3Cj/m7F9tf1Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSzZrdUhTdjZ4Q284cVZW\nUm5EWko0SFZUSjBJYWc2bUlCS3lDcnpBZkFNCkRWTjIrK2liaUlJbFVxS0JIMCs4\nMkhXSHM4RnpNWlNoN3lKTlRmeGpvT2MKLS0tIFhKUEEzQmlDOEcvNWZLUDIybm1S\nYXpGa0dJbjdjZXU5Tm1PVTczTmdVZmcK3iy72bzcSJ+zoFUDad/DFrAdnTS6MuNy\nBZZZc3pS/krW5+730U0yR8HppZ/wXW1H/Hl2XrsFCMdu4KNvRsnScw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3NWE3MFdYeGxxOTJCR3Jr\nZFZQZ0sxRnc3eVdUbFhwYU5hYXFEZXlOaTMwCnhYRlV6N0FDTUF4WVdhZ1pubzJz\namFjNTVZS2pnbFdML2ZEeDVySlFGdFEKLS0tIG5FaXlHdk1INTlCeEFVTkQyS1pD\nL1RzTFZySGlvdUovSXJseE9KSFgycXMKFzIvlL3UcUGZEtU+YArgPuGjf14KN29K\n/iZ4Xpx8orivacOJwKV4qPlibWuQe6sSWa+h0NJ1F0rI5OwFGLP63g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-04-09T10:51:00Z",
+		"mac": "ENC[AES256_GCM,data:LcvzS8stfq1AtD0LcYcj10wO5/q/XlfANKtbQxaQlGDzs/zNUQC1xsGXEWA1wYF+NWFU4NxQcRz+uxT4Dk7tVooy8Ghyeo03UV7THujaSJEhK0DSIlYPgFF5Uij1cFJFyPARZTRgJiXiZ+klT5OsBfgBEZGdIwZh3S03TrEtUdc=,iv:z1YT8ZXpMdOGGwHk/s3E+BMRTIxt+bmMPbP+AKjDfVo=,tag:zrIcL1Fxmr1WtgHZmBKeyg==,type:str]",
+		"version": "3.12.2"
+	}
+}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kurogeek	ab10494e32	update(inventory.json): Installed canopus	2026-04-10 10:58:53 +07:00
kurogeek	1a8c817c6c	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-10 10:53:52 +07:00
kurogeek	9193a9f93b	update(inventory.json): Installed canopus	2026-04-10 10:37:02 +07:00
kurogeek	9b48b98d89	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-10 09:33:30 +07:00
kurogeek	f82c4ac1d5	update(inventory.json): Installed canopus	2026-04-10 09:33:23 +07:00
kurogeek	6834fbfe0c	machines/canopus/facter.json: update hardware configuration	2026-04-10 09:33:22 +07:00
kurogeek	2140bccf26	Update vars via generator tor_tor (machine: canopus)	2026-04-09 17:51:05 +07:00
kurogeek	a1f6fb1fab	Update vars via generator state-version (machine: canopus)	2026-04-09 17:51:01 +07:00
kurogeek	fcfc347a2b	Update vars via generator root-password (machine: canopus)	2026-04-09 17:51:00 +07:00
kurogeek	c7bf95888e	Update vars via generator openssh (machine: canopus)	2026-04-09 17:50:58 +07:00
kurogeek	51a1d01b82	Update vars via generator nginx (machine: canopus)	2026-04-09 17:50:56 +07:00
kurogeek	e3f2b0f030	Update vars via generator frappix (machine: canopus)	2026-04-09 17:50:54 +07:00
kurogeek	6e9fd028c7	Add machine canopus to secrets	2026-04-09 17:50:52 +07:00
kurogeek	a20c933df2	Update secret canopus-age.key	2026-04-09 17:50:52 +07:00
kurogeek	fbf0775ff6	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/canopus/configuration.nix	2026-04-09 17:49:48 +07:00
kurogeek	4ad25f29fa	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-09 17:42:07 +07:00
kurogeek	9dcffe625f	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-09 17:37:01 +07:00
kurogeek	3ab6e2e636	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-09 14:20:49 +07:00
kurogeek	f8e4ef9daf	Update vars via generator frappix (machine: deneb)	2026-04-09 14:20:36 +07:00
kurogeek	9190719b56	update(inventory.json): Installed deneb	2026-04-09 14:16:10 +07:00
kurogeek	dec81a9620	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-09 14:08:18 +07:00
kurogeek	ea6c07f7e3	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-09 11:20:51 +07:00
kurogeek	ea9899ebd5	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 17:26:35 +07:00
kurogeek	c7a28b3e40	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/facter.json	2026-04-08 14:11:00 +07:00
kurogeek	70eb7b7589	update(inventory.json): Installed deneb	2026-04-08 14:10:13 +07:00
kurogeek	947537f848	machines/deneb/facter.json: update hardware configuration	2026-04-08 14:10:12 +07:00
kurogeek	a723ecc721	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:44:20 +07:00
kurogeek	b4bbb7a52d	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.lock	2026-04-08 13:43:44 +07:00
kurogeek	99161aa4ab	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:38:59 +07:00
kurogeek	28c4ffa249	Update vars via generator tor_tor (machine: deneb)	2026-04-08 13:38:38 +07:00
kurogeek	fbac28d581	Update vars via generator state-version (machine: deneb)	2026-04-08 13:38:33 +07:00
kurogeek	23995bc5c6	Update vars via generator root-password (machine: deneb)	2026-04-08 13:38:32 +07:00
kurogeek	16cf57f6de	Update vars via generator openssh (machine: deneb)	2026-04-08 13:38:29 +07:00
kurogeek	21414fcbab	Update vars via generator nginx (machine: deneb)	2026-04-08 13:38:28 +07:00
kurogeek	17a96cf5de	Update vars via generator frappix (machine: deneb)	2026-04-08 13:38:25 +07:00
kurogeek	12d9076917	Add machine deneb to secrets	2026-04-08 13:38:23 +07:00
kurogeek	853c303d23	Update secret deneb-age.key	2026-04-08 13:38:23 +07:00
kurogeek	f061934b2b	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:34:01 +07:00
kurogeek	f3d568d5fa	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/configuration.nix	2026-04-08 13:25:04 +07:00
kurogeek	6e00955320	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/disko.nix	2026-04-08 12:09:13 +07:00
kurogeek	38aa550f57	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/deneb/disko.nix	2026-04-08 12:08:24 +07:00
kurogeek	74cf9ecfa0	mob next [ci-skip] [ci skip] [skip ci] lastFile:overlays/default.nix	2026-04-08 12:00:32 +07:00
kurogeek	f5930ae9e6	flake/inputs: bump liminix	2026-04-06 10:15:20 +07:00
kurogeek	aa3db27c77	machines/rana: hardcode kernel to version 6.12 to fix freezing issue	2026-04-02 17:53:37 +07:00
kurogeek	44210e6bbb	machines/rana: boot.kernelParams adjusted	2026-04-02 17:16:30 +07:00
kurogeek	984d587d00	machines/rana: update facter.json	2026-04-02 11:20:24 +07:00
kurogeek	79be24d581	machines/rana: fixed randomly freeze	2026-04-01 10:49:48 +07:00
kurogeek	1518cd7db6	inputs/nixpkgs: bump version	2026-03-31 13:45:49 +07:00
kurogeek	ac7117c13d	clanService/personal-computer: added more drivers	2026-03-31 13:45:23 +07:00
kurogeek	38d13f2fa7	clanService/home-profiles: emmie-home is a separated user	2026-03-24 15:46:57 +07:00
kurogeek	8b1ae80c54	clanInventory/emmie-syncthing: running on emmie as a user	2026-03-24 15:46:57 +07:00
kurogeek	1f867808d2	machines/rana: reinstall	2026-03-24 15:46:57 +07:00
kurogeek	d8b20caf22	machines/rana: enable full-disk encryption	2026-03-24 15:46:57 +07:00
kurogeek	fc2da628e8	clanService/personal-computer: force change-own-password to YES	2026-03-24 15:46:57 +07:00
kurogeek	d4826d803e	flake/inputs: plasma-manager init	2026-03-24 15:46:57 +07:00
kurogeek	a123682c93	inputs/liminix: update	2026-03-16 15:43:28 +07:00
kurogeek	b3c8ee76e9	machines/rana: enable syncthing	2026-03-06 16:31:26 +07:00
kurogeek	1d5a528cd1	machines/sirius: finalize config	2026-03-06 16:25:41 +07:00
kurogeek	891e80a3a9	inputs/liminix: changed to upstream	2026-03-05 19:52:26 +07:00
kurogeek	9c85e82b59	bump clan-core, nixpkgs	2026-03-02 18:09:11 +07:00
kurogeek	73232a4800	clanService/grafana: add requred attr	2026-03-02 18:08:41 +07:00
kurogeek	9b7e9b5be6	temporary fixed while waiting for https://github.com/NixOS/nixpkgs/issues/495499 to land	2026-03-02 18:07:18 +07:00
kurogeek	2b7316be2a	temporary fixed while waiting for https://github.com/NixOS/nixpkgs/pull/494510 to get fixed	2026-03-02 18:06:13 +07:00
kurogeek	5b733b794a	clanService/home-profiles: libreoffice -> libreoffice-fresh for temporary fix build fail on upstream	2026-03-02 11:49:45 +07:00
kurogeek	3ae485084c	clanService/samba: no valid user option	2026-02-27 17:57:14 +07:00
kurogeek	24fb9efa0f	clanService/home-profiles: add signal-desktop	2026-02-26 10:19:01 +07:00
kurogeek	66883bc4bd	machines/sirius: format facter.json	2026-02-14 11:09:14 +07:00
kurogeek	55abd6ff73	rm unrelated file	2026-02-13 17:48:29 +07:00
kurogeek	096db119cc	machines/sirius: fix disko config	2026-02-13 17:47:08 +07:00
kurogeek	faae7e9371	machines/sirius: no fixed target host	2026-02-13 17:46:10 +07:00
kurogeek	bd81196e1c	machines/sirius: in yggdrasil network	2026-02-13 17:45:48 +07:00
kurogeek	53961703ef	update(inventory.json): Installed sirius	2026-02-13 16:23:04 +07:00
kurogeek	a722d12f74	update(inventory.json): Installed sirius	2026-02-13 16:02:24 +07:00
kurogeek	bc982447d9	update(inventory.json): Installed sirius	2026-02-13 15:43:55 +07:00
kurogeek	dafd60194b	update(inventory.json): Installed sirius	2026-02-13 15:36:10 +07:00
kurogeek	723a0e652a	update(inventory.json): Installed sirius	2026-02-13 15:24:09 +07:00
kurogeek	c15699c247	update(inventory.json): Installed sirius	2026-02-13 15:00:48 +07:00
kurogeek	f626577062	update(inventory.json): Installed sirius	2026-02-13 14:48:12 +07:00
kurogeek	8b8f3978cb	Update vars via generator yggdrasil for machine sirius	2026-02-13 14:40:20 +07:00
kurogeek	7b6fd3fc93	update(inventory.json): Installed sirius	2026-02-13 14:25:11 +07:00
kurogeek	c364a7ac77	machines/sirius/facter.json: update hardware configuration	2026-02-13 14:25:11 +07:00
kurogeek	c3e2757a61	machines/sirius: fix disko config	2026-02-13 13:31:02 +07:00
kurogeek	2bd53ed63c	machines/sirius: facter.json	2026-02-13 11:24:54 +07:00
kurogeek	e1d70f9a04	inventory/samba: sirius is NAS samba server	2026-02-13 11:15:09 +07:00
kurogeek	86694e6ef0	Update vars via generator w-smb-password for machine sirius	2026-02-13 11:14:29 +07:00
kurogeek	eadcd0a996	machines/sirius: fixed config	2026-02-13 11:05:14 +07:00
kurogeek	052e391429	machines/sirius: fixed wrong tmpfs option	2026-02-13 11:02:36 +07:00
kurogeek	c03dce200f	machines/sirius: actual disk	2026-02-13 11:02:06 +07:00
kurogeek	009aae29db	machines/sirius: use f2fs file system	2026-02-12 17:46:04 +07:00
kurogeek	ac6aaefbd4	machines/sirius: system = aarch64-linux	2026-02-12 17:45:33 +07:00
kurogeek	b507af2a03	machines/sirius: no dedicated samba	2026-02-11 17:07:20 +07:00
kurogeek	2834b43d66	clanService/samba: samba service	2026-02-11 17:01:51 +07:00
kurogeek	d91da5d74b	clanService/phonebox: pjsip.conf has remove_existing=yes	2026-02-06 10:47:50 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdhHr44poem4w1dRksCHczPxHuxT7WX16i5VV/j1RP8`