mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/alpheratz/configuration.nix
Update vars via generator tor_tor for machine alpheratz
2025-12-03 12:54:49 +07:00 · 2025-12-03 12:54:40 +07:00 · 2025-12-03 12:54:37 +07:00 · 2025-12-03 12:54:37 +07:00 · 2025-12-03 12:54:37 +07:00 · 2025-12-03 12:54:36 +07:00
96 changed files with 4173 additions and 29 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761768376,
-        "narHash": "sha256-AZL8SPJ520NRnLft9Xz4trTECBB510YPRXJnE1OUeXw=",
+        "lastModified": 1764721663,
+        "narHash": "sha256-gdyZQ41CoJ4u4XSuXcZlDB/pqiLNni1xALMYP3VTk3Y=",
        "ref": "refs/heads/main",
-        "rev": "bbc9486f0e6306f68e11f8aefa243da9f1c8c56f",
-        "revCount": 10924,
+        "rev": "6ace9cefb0780f34c33c016c108fc2bf0a87bdc4",
+        "revCount": 11386,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +49,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760612273,
-        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
-        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
+        "lastModified": 1762942435,
+        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
+        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +88,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760701190,
-        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
+        "lastModified": 1764627417,
+        "narHash": "sha256-D6xc3Rl8Ab6wucJWdvjNsGYGSxNjQHzRc2EZ6eeQ6l4=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
+        "rev": "5a88a6eceb8fd732b983e72b732f6f4b8269bef3",
        "type": "github"
      },
      "original": {
@@ -162,11 +162,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761339987,
-        "narHash": "sha256-IUaawVwItZKi64IA6kF6wQCLCzpXbk2R46dHn8sHkig=",
+        "lastModified": 1764161084,
+        "narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "7cd9aac79ee2924a85c211d21fafd394b06a38de",
+        "rev": "e95de00a471d07435e0527ff4db092c84998698e",
        "type": "github"
      },
      "original": {
@@ -177,11 +177,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1755887746,
-        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
-        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
+        "lastModified": 1763303120,
+        "narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
+        "rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -190,11 +190,11 @@
    },
    "nixos-facter-modules": {
      "locked": {
-        "lastModified": 1761137276,
-        "narHash": "sha256-4lDjGnWRBLwqKQ4UWSUq6Mvxu9r8DSqCCydodW/Jsi8=",
+        "lastModified": 1764252389,
+        "narHash": "sha256-3bbuneTKZBkYXlm0bE36kUjiDsasoIC1GWBw/UEJ9T4=",
        "owner": "nix-community",
        "repo": "nixos-facter-modules",
-        "rev": "70bcd64225d167c7af9b475c4df7b5abba5c7de8",
+        "rev": "5ea68886d95218646d11d3551a476d458df00778",
        "type": "github"
      },
      "original": {
@@ -238,11 +238,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760998189,
-        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
+        "lastModified": 1764483358,
+        "narHash": "sha256-EyyvCzXoHrbL467YSsQBTWWg4sR96MH1sPpKoSOelB4=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
+        "rev": "5aca6ff67264321d47856a2ed183729271107c9c",
        "type": "github"
      },
      "original": {
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -3,7 +3,10 @@
    inventory = {

      tags = {
-        glom = [ "vega" ];
+        glom = [
+          "vega"
+          "ramus"
+        ];
        b4l = [ "rigel" ];
        w = [ "sirius" ];
        fax-bridge = [ ];
@@ -32,6 +35,14 @@
          };
        };

+        tor = {
+          module = {
+            name = "tor";
+            input = "clan-core";
+          };
+          roles.server.tags."nixos" = { };
+        };
+
        w-network = {
          module = {
            name = "zerotier";
--- a/inventory.json
+++ b/inventory.json
@@ -1 +1,7 @@
-{}
+{
+  "machines": {
+    "ramus": {
+      "installedAt": 1764139649
+    }
+  }
+}
--- a/machines/alpheratz/configuration.nix
+++ b/machines/alpheratz/configuration.nix
@@ -0,0 +1,12 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+
+  clan.meta.name = "alpheratz";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/alpheratz/disko.nix
+++ b/machines/alpheratz/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0xaedcfa8b";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/ramus/configuration.nix
+++ b/machines/ramus/configuration.nix
@@ -0,0 +1,15 @@
+{ config, ... }:
+{
+  system.stateVersion = "25.11";
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.meta.name = "ramus";
+  clan.meta.description = ''
+    A Hetzner VPS machine own by Alex.
+  '';
+
+  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
+}
--- a/machines/ramus/disko.nix
+++ b/machines/ramus/disko.nix
@@ -0,0 +1,84 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_107266387";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/ramus/facter.json
+++ b/machines/ramus/facter.json
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -25,6 +25,7 @@ in
    "${inputs.liminix}/modules/vlan"
    "${inputs.liminix}/modules/ssh"
    "${inputs.liminix}/modules/bridge"
+    "${inputs.liminix}/modules/health-check"
    "${modulesPath}/profiles/gateway.nix"
  ];

@@ -48,14 +49,46 @@ in
      name = "resolvconf";
      up = ''
        ( in_outputs ${name}
-         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
-         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
+         echo "nameserver 208.67.222.222" >> resolv.conf
+         echo "nameserver 208.67.220.220" >> resolv.conf
+         echo "nameserver 1.1.1.1" >> resolv.conf
+         echo "nameserver 1.0.0.1" >> resolv.conf
+         echo "nameserver 8.8.8.8" >> resolv.conf
         chmod 0444 resolv.conf
        )
      '';
    }
  );

+  services.reAddDefaultroute =
+    let
+      threshold = 3;
+      healthCheck = pkgs.writeAshScript "ping-check" { } "ping 1.1.1.1";
+    in
+    pkgs.liminix.services.longrun rec {
+      # dependencies = [ config.services.wan ];
+      name = "hack-default-route";
+      run = ''
+        fails=0
+        while sleep 10 ; do
+          ${healthCheck}
+          if test $? -gt 0; then
+            fails=$(expr $fails + 1)
+          else
+            fails=0
+          fi
+          echo fails $fails/${toString threshold} for ${name}
+          if test "$fails" -gt "${toString threshold}" ; then
+            echo [+] adding default route
+            ${config.services.defaultroute4}/${config.services.defaultroute4.name}/up
+            ${config.services.defaultroute6}/${config.services.defaultroute6.name}/up
+            echo bounced
+            fails=0
+          fi
+        done
+      '';
+    };
+
  profile.gateway = {
    lan = {
      interfaces = with config.hardware.networkInterfaces; [
@@ -123,7 +156,7 @@ in
  defaultProfile.packages = with pkgs; [
    busybox
    iw
-    iptables
+    nftables
  ];

 }
--- a/sops/machines/alpheratz/key.json
+++ b/sops/machines/alpheratz/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+    "type": "age"
+  }
+]
--- a/sops/machines/ramus/key.json
+++ b/sops/machines/ramus/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+    "type": "age"
+  }
+]
--- a/sops/secrets/alpheratz-age.key/groups/admins
+++ b/sops/secrets/alpheratz-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/alpheratz-age.key/secret
+++ b/sops/secrets/alpheratz-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:BbWM+ivTGdZbMPymSsKWOuUbcozyBKWuXeO0bGTElE2l67OsPKD+Mdw4a3sRRY9xs1RatQ8vg9CId/wiZJSv5c8oogjo/bv3m9Q=,iv:iwtN0Ko7PZjMrPtzzgNvFz5n6X07Mpy4oF+8AZr0nWw=,tag:oFxc/34dkHNkQ1IfACh87Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdFhxQ2hndlFoS1dGd2Ns\nMVFJN09RL2pSekZ1bTNuSjFyeE5QVFQrUVJFCndabkNqdXFESTQ5TUY1TURhZjcx\nb2RrTGUxQUFMOEdadGFFMFMwMUIzUVUKLS0tIEh5Q05SaWRJbHgwVC9aMWsyUUN3\neVpnRVQrUjM3Y05KbTRLR0t0NHFRWTgKbMpXKBQJhHedMYbDB1/N7ASUJ5m8bM7X\nuC3BSGXUmrH81krmnbdaaMontpllUtpdmDd1hYOAbQLVC3UYADfbCQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxejVIbzBWMFYwTEJyWUZC\nK25GeWNtWThUVVRKMXJnQkN1blFFMVJMVEU0CmJGdURFbUVYMWR3d1d4ak1SWFlN\nSHVDYW1yeUJwWUZwT0lMRUgvQmx6c2sKLS0tIDVIb0h4VnJPTkhlcTN0S0dUMmp0\nRXdxSmpXQ0tkZnBUQ1plMVI2RGNxVFEKGnJ5y1umJbn0qP5aCGs/AAuSJMRl+cIB\nfI8wVSGzeRtaoryAIFD/b2STSfBDyjKOkQOQXML+YEsEwqLlCufWKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9GcTYzaFFz\nLzduT3BpTFhwUGxyMkdSMm9oL3J6UGZCcTJ3azBTdVBnUk0gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpkanEzVWo5b1N0ZU4ySWR6MHBTK0tJ\nL24yV0FLa1lId2JPaWZ0aU01MVRBCi0tLSBVRXJxMlVhTGZSajhBZ21TT3Nib3ph\nSnFSdDlpbmg5dW1oNnlkSTVTTFFNCs2S1wPrTFqeOx1kvMPiRJs99VbXZyU2j5yY\nU027yIrDzqpcfqcWx9FjHNtDJzJM/150dNkwieheGCOCaHpyqnI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExsR3l0VWc0\nb1h2K0tPNjhFaFhJTFREQXR6Q2gvdjZSa1RKeWtVWE1XZ1kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYblNDNWZkM2lnUXQyVjYweGZWUnJC\nS1p1N3N4RCt4RDZZNnRCSi84c3ZZCi0tLSBEUkQxekp2alExQWpWSkVoWmpia0hJ\nbldabG5LckwwOVlHUDh1cXUvMjZnCn6Q1+kL5JG2org5bxIa6Y6Lgu+LlTyM2fhp\nNmhsoxrah8FGCsBkSNRwsVJE+RxalkUygQ+hf+ss+dDPbDsZ2oA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDk3M0J0MHFR\nN0E0a0xXN3ovZWVWQmkrQ3RBVklSTUwxQ0hmZWwyVDdlUncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLdUFNYXZ6SStzc21Tc0JoSXYyU0x1\nZW5FbUtGVDh4RmZHUEdGWU1sbnVzCi0tLSBneE90QWp2d01xekVvV2p4RVAxQ3E1\nYjljWk5NTVJWYlI0UXVWQ2J3RkVvCkmNGybBIyBQNh2q5NOoyEg217n6P6a31XnL\nB8a778HPbmT0mhO4QvYn7R/duo07s+vu5mRm8gc5AkCpXiMNkRU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dkNRTFpJcTJJVGlmMGc1\nOXMwRXVaRVdlN1RxdWx1R1AzQkliZjZkbVR3Ci8ycGxwVElGK0h1N1VKNFI1dGs3\nS00vd0gvRzBpVFN3SGZRaUVONG9ObjAKLS0tIGIrN2RiU3J5Ukw4SE9XU1VYYSs2\nMUw2ZEowbW5LZ0JXVnZOQTAzZm1aRWMKoM5Dj/mNrSERSCgZTobwMR5Bm1V6L3Yt\n104IQPfZaRv+eSNoKFv3mTL1C/sdRWR4wevQ5rvR8E/Y3CpymM4ZRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ZGtpZm1ZYmlQRzVId1Zk\nTTNCT0N6aTJzR01tSy9LWTdYbXh3Z0tIeEhBCmQ0QlhDRzdlSXFlWkQ4aXRNQk5m\nTUM2L2J6NzZoTDZpaG0rSVJrMTFsdlkKLS0tIFI0Z0w5dzJOV1orcFcrazdWcHpz\ncDR2MDd1UHdIUlgrblQwYnd4aWVvWVEKJ8U56ajnsWdp96ARKFw1zdLY7z5zhgFZ\nMnd+j5VpjIn2AtIS4w27A+2PX7x+ZysEnnE3K4ndX9nSAzk9shSxpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbXkvSERJZkgrM20xMW43\ndmFFWXFZVytwZm43SlkzUFM2dkZQdU9sZkQwCmh0bStPRDVOYnlITWdFdU5YNElk\nRk1uWjY0QTc3eUdSY1AyTHNTeFdHeUkKLS0tIE5MV21kMlBYbUIxMXJpZ1Y3VktI\nRU1jWVNEN2NCWi91ZHVHWk5CUnpVVzAKlS0amgC+dhZE6TExIGUURr/OhoudnZLf\nfpMXhkGbl5YsTm0Qeqaqu5bNo/XN+77e01WfDwRz+PYp7QXdhMN8XA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaUIrUHpINE85SVcxOE1r\nU3RnQlEwMERnbFIweEZiblhPdEE4YWFZaEJjCm5NVGJYL3pQMlYyS29xLzhtMUlQ\nUlJFTytkNmk1YWVnTFRuQ0licGptQUUKLS0tIGVkRnpWQ0FwUzhVbmRNTWNSS2Rs\nQ0MwMElRV09ROFZ2YjB5cnEybzJ1Z3MKeOo3uU9D9BDJB8m9cZccIj8zztbvGqYV\nSWvR5AxNLvcEkbNKvxcDRjQUSDLWhcjdcozs7JgjO5P7YlOnZNACmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:36Z",
+		"mac": "ENC[AES256_GCM,data:06949qq+AgyxgVLVx9ARvul77ypg8Kq3cqpFOWU/HARR1jgkf7n66SWTmVixkfHy5GqOJEBFQ0HYHzKkQ0BHr94se0bFlR5W+Md6pmDVH0sbnB4+leqR0I/1ZU7o6p3hj1nXlkUWRN6oM0wp0Hj3ClOPM5jZ6C44+cadswCQvGg=,iv:5TwgpN7waxevK8nnRaO/bunyjGNvFojXPPIPp1OrRuA=,tag:vycrcH1t7ZPsyqekae5Q2A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/alpheratz-age.key/users/kurogeek
+++ b/sops/secrets/alpheratz-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/ramus-age.key/groups/admins
+++ b/sops/secrets/ramus-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/ramus-age.key/secret
+++ b/sops/secrets/ramus-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lc5PP4xpLq/JXq2LkG/5zkEY5luxKC7EZHx0s6exiwd+UtuGb5rjIOq0kUBFuJWYFWduqcvNS62kR76oQpRfmjIkq2t02NxZ1lA=,iv:eZsHK9u5Rvt886Elz7Vm+PMD8urm1UyoNbNNwnlJtj8=,tag:inCrDdsNmLb+L+LpF9k4Ag==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0STRlY1h1NTVUdDJRM1NO\nc1hacUg4TUtlK3Y0dVZqaE5LdUlqMkFKNmtVCllTYXFHdXM0NVdUejhHZWM1TnVx\nUURvd1JrQmR2K0N3RlZIS2d0RFhTRUEKLS0tIFp1ZlJSNmd2V3dpN05LYWh1VHNC\nbFNkdkY1aUhTZmM1R1FKUWlGWThSdE0KYxgpuknCD07awfN85PkaJjPohYyqT1wL\nbjUcGo6TmFQKIgEzTzNj+in1dm9wz0AnYl1teiHa9WjK/Udd2BANBQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCd2Z1aTFYenowSnczWk05\nVEZ3d0FUNFNkV3RlWlpFWk5jd3QwazVES0ZVClVjY0Y2eW1hSGEraVVpSjdoaHMr\naS9lWFUvbFl6Nzd4U2l6dUhXRHBlT0kKLS0tIFNCYTlSL1VnNURBQUxoYVozODZw\nVVRkVGVINTV6SXExN3dCT1JmRmNFdlkK+jNS9cUz4TzBBzrtxuYcoiEmxKcRNTlt\nqksdFqnPWzKI+edJSWq3rkBYeuI7c4wmxTtsgVtHbv2jwbD1kJar1g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNxVDh0SWNL\nOUt4TG93eGVjaUxzczhnVjNYRlB1Vy9haWxjYnN6aGI3ejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxSEtwcUxGcVY3RzNjR2REYmdrRWV6\nYWJyTjhXMVNtVFVpczRDc2dDaHRBCi0tLSA3NUVyR3YvMnVsd0l0TXIxQS9odUZO\nZnJWV0MvRlpwU3luNm9FOGtDNkhzCm/yGJJvQf5qvBRyGLrmCeiI31qHr+JoZ2Av\nbqMUeg3Vv82ffTLT6GX+JjiG0wQFcYAX3/k0noVN9JMR/boiWIc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpMZ3JmMVFy\nU3AzeEFFa3B2TGxSL1NlQjhSa28waGtLQUlFTkp4N0hVeEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYVDJSdCtnVHIzVXhSQ0lXRzE5dlJo\nS1NHa2F1WEpJK2xJQUQwa0RNNCs4Ci0tLSBBdmpiZGVSOWJwanRiUjUxT3JMT0VT\nM2k5bE0zOW5SVWg2ZGw0QUVvcWVrCrc2TjHS6Pp38MTPU9H59q2seVYlESH80V4+\ny1/qjB6fK8lnnyi5TLrSo+M9MAcG5T4EGvCcAPuzjTvF/DO7hxk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9jZllPWWhO\nV3pDa1MxSzF2ejRJMXJBWDlNMzZqcG1JdVB2Y0xjMlJKeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpwSUdWWlFFbW55aXVkZ0pSeUVPRkF2\nTm5tTnkrTGNmcEdoWE1UckwvcXFBCi0tLSBnN1J1VlQvVnRXbkEvOWtLbHhzVzNN\nU01XVkpRNnd4bCtYb3poNjR4bno4CirmDl+6Kebk0jMjgRp00d8kpkzGtQFsZNht\nm5MPBM+FXVzpDcEWQGUlLr50yDKYVzHdIeeuGsWZ3KaI1GM8pdg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByOEQrR1Z1K3RETGgzVi9H\nNXIzUW04UHFCMk5vQVZEN0taRWJwV040Q3h3CmpaVWV0WDZNemFSTHF1TTF4YXI3\nL1loMnA5OUNCbE55aGUyR2EwbklaczQKLS0tIEpnTkkzNStsNmdNS01HWDhXY2s1\nZ3hMNXA1dXUxVmxucTdtbWN4akQ2MTgKAolaT+61/BN/yzljENx7YZTrFRGA8zwN\nsquQs9vnFS8yduVMoaemXrCLTpiQ1KGCAWVX8pPtY8+GV9YKLZsV7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTlNuQXN3VU9TVTlQd01N\nYVBpN1BxcjRLYWN5SUg3TlhUbHl0UzkrOWcwClZ5OHpOcGp6V2craFBkWCtwcktp\nWDZYYWR4ZjVhaVNPdEN4WmZ0UlJqR3cKLS0tIEx2WXdQL0x1Zm5rRnJGMmJQWFVW\nNW1nMFlac2lyY1ZuOW9OZmNWSjJxbTAK72xqJBlpV3UWAFhGlUjudEILQSnGDhQm\nS4U51sUc8rrUZLlmAivWg1nxCUAdrhLo/r9OuITR6QX9DeFsaeR9uA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WmVUUDJ0V2sxS0Q1UFZv\nWldFK0tRSlViUkc5aXFTV0JDdDFVbVVXR1QwClUwLzg0eTAvbUtaTVRFV3ptZkJQ\naDR1REl6MXZ2cDlsZzk1SVI1N3pocGcKLS0tIFlUbGFPUXAxWVBvNXhjZ2QzWGNh\nWTkrMklIQnl2T3ZYL0Q1c3JOTU85bkUKL4h+PDQSnVbls8iuioUHTBVpVh5Yhhx5\nrK9ELFCYGPAVzbx5cFoOapnIJcTQUAPZdBpmlm7kgRmMLXptMdGkGg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFZ3lPeVJyZUF3cVEvWnhH\nbVBwRmxaQUhaaExQSVRyeVJNZVFSRkFrU25NCkZDcklIcU5TQWplQkE1ZkFTUXB5\nLzZ0VFlEdks3OWpGM0JMSi9ZOVNndnMKLS0tIG11UFZkdWRYdHZJNk9TSDYvaHcw\nQUk1dGxIOFhwaXJZaEZNdVppWWlpdUUKQJ/UjgWIaeKa4o2El4cFkwv+O0bi9SOp\n13XExCNLB+BtwOGPREWbrmW/Z15c8koBEyrW7iuIhu0Pgz95oAF2Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:15Z",
+		"mac": "ENC[AES256_GCM,data:ovjPl0pJ6DSJGjGz+Zt5GLbwu3ZTMwOKNSsYxIx1NcjWAiGYpPNFcFrD5OBciVQ2K7VxlRoWW5WqbJt7mrvQXDO69LxvQqiK1+qHeFJOHRd6Sp29fRA1aqEz+kOif0SSzaEkHOXAp1kzk31CnEfIG2j5yQ3oMyrSqNnhnVrx6F4=,iv:NdeCrqNo5SV1Npu8aqPJcZDhPMGfUviyBQi2CUjYZOM=,tag:yM6P7P2vLUMs9GdT284Gvg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/ramus-age.key/users/kurogeek
+++ b/sops/secrets/ramus-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw 
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:i7hpBBWINIJ8VGaUyFYqm+N2EbL0nMxPKL3RCTjKxyM=,tag:GZFTfIwa+WWS2w3Hk/GmKQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQlY1bTNaTlpkbkNEWFlM\nblRGS2t6SDU3YkJJbDFMRzVyY2p4akhlOFRzCmNOc0Q2YTB2a21Qem56L01zNFFT\nc1Y3NmlVNXVLZGpNT0l6eTlZVnVVN1kKLS0tIHlvUzVsWjNzcEErOVZ3TWpWYVhv\nN1VYei90WXcwNVNFL2J5R1Qrb0p4ZmMKQ8PfLqzmX6UqgpBNhiuDpY03Sa2Lg4J3\nLLCkilQKzJSEJCNSDYU/ebgJd43HAjRqAs3lPcyauC9xVNI7MDqhaw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WHVsWWx0NFltc0d0a0FX\nbGRIcGVKdWowS08wbUFiTGpZMm9XZ1VEMEFjCm0veDJTd3RnQndCK0Q1SU5PaE1x\nb1k3R3FSU3l5bG5Jc0UxTVdyZ0l3SVEKLS0tIHVVOFVnZ1VvUHc5MWthQVNKMWxO\nS0IwMWJ3TklYaEZuWDA5M3hBZUtsN2MKE6HT3ldHVcJM2O8eR4jbvJgMERY8gRcf\nRL2Fa4DdQdxVED1WU1arZmN9DnK+sscpK7eNF1+PFaN2Zk4Lk81nQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLK0hmK0NrV0IvVE5TS3JQ\nc1NVTVp4YjJvSUYvWlN1SHNZSUlTWW1YcFdZClcwZGIwN0ZDTm9QYlg3WHhiUTZ5\nZTJ5QTVxdGFyRGFNdTNSWXVmRkxQVEkKLS0tIGtTMXpmNWRnQ21aNWhiVGRYOUN1\ndXBQSnJCaDJCaDVKemRiN1NTTk9sLzAKnUS6XvHsMFKDOfbM6h4l6Fa/E6Y3oeWV\nioZqov7WYBr6M0GFspJwmUKIMiUSOS1YQZ+m1PZcsSm8ukritJ6Erw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdvWDFGdklB\nUjRPcHJuRWtSR3cwcGZYU09PMFRnVmpXSFc5amd5ZGRjREUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJZHA2aTVVekpYbkFtOFMyenZLUmEx\nU2NYa3FUdFNlbXJDaEZyY0pQeEhNCi0tLSBnWFI4czUvK25OdjVrV0xtWVExaVRH\nZnRHMzNrWkh4cmJlN2tKbFVydGtrCn4kJx3yPDwu7pAMnFhh2uB8Pha2eDCrzNM1\n9WSVFM91FS3dwmU/IoX1gpEirbgxiDefzgHzhEzzNJhU4Vw1/Q0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFaVUp2OHpT\nN1dHbEk2bDh4WS80emtkOW5MSUF1S2U5dkd4ako5eUxwU0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4QkVObFMvQ0NuNGx1VnVtaW9Ub2c2\nT01QNW9PanhQK3UyanAwMHJJZ0VBCi0tLSB1dVdRTFlFMUFKb2o0Zi9abTJVVHRz\nY1gwR0hVN25VT3JmcUxuT2N4aEtvCrGwosnahN1wtQxiaqU5bz/V6JBoxvX8tQXm\nXmG9tWTcoDx9gjQkV3iu2XsdW73apm54WfY/9qJfHJHwh6LT4qU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFc4Z0tZY0hr\nc2xpWVRUMytjbVJ6MllBT1pPYlpMeVdqWTZIdDI5SEV3VHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQQXBxczVQZlBITlBEUExCV0ZhZ3RB\nTWJwSm5nOEZKNFV4alFjOFVTUWRFCi0tLSBRN1UydUJpbnRKVTlicmFDbEh1S2lV\nc29Rd3lZRkdGd29DQ0RGdEQwWm9nCt/dy3C4H5lhXCW80e5ypvOnVdklucyra15X\nZBKw0gtr8a0vZRoECXPiRHog2U3uBY+ylqHSggPJfYyEmjqcMX0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVlQ4d1JjSkcxZVRXTElp\nT1ZDTHhCOGZZMzk0VGt1SWY5N01jRThhV0E4ClRoc29sVEhmRU9aeVJBbEY2RnR6\nMTFBanR2MWJXTHc5TXdsemh4VXdMQmMKLS0tIHozdWNDRzVnZFFUNDZvUGlvMWk5\nVWE3SkR6bmtZRU5PelhqR2Nqd09LWm8KaKCZcmMmGdq2AI6seVe/OCBnK8Efu2Yi\nPpW3Gq3+SX/J4ODGvzgVMBtcVJo/ZKZTq0sHLTCmfPVnGDGtK10gjA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVXZaRXhtRkpMcGpmYnNm\nOGJkOFdmVkd6SUVHMUtOMkFSN1BXVmNibWlBCk9EUTFMVE4vVldmaW5reWt0VXNx\nQU13Y1ZWUnMyN0V6aDJhd2hESTQ2WFUKLS0tIFY5OG9ndmR5blRyaWszdFh3Wngv\ncW43UW5OMUppQ016WGJoNHZnV2dZRk0KrEH5dIiNi3294aMzsTS8jQUKUrbhov2L\n3A679aAm033yVG4UVmdOZFEL3ffOG0cGo7R1X76seWbee1eEkGgfbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3dKV29TSE54bWNaY0g4\nc3RaQ0xTOFlaZUE3RVB3OHhDU3NJUWhmL0FJCmVad2IwWnBQaWxHSS9QNHRubyt0\nMndYaHZ6QlErZmRRT0NNd3lwdVdhTncKLS0tIDRQc3Q3b2xaSmxtV0p2Y09uSlV4\nNVFqeGVUa1NUNXVhc3QrNDlya1hzZzAKzM1yHUpMAK/J+O8lDCccUx8R4BWQVRdb\ngldElzMF7Disv0yIZFa+S8eyFwrwzyn32z7kKErxc8TFs/d4p11l0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d0dITytPaHUrMUo2aXhW\nekNzS0doZHpIeDRsQStjd2JMbDFoVjE4R0E0CmVBOC83TTRZVzB3MXJxYnVRbnFV\nTHA3N0NyVVpFcnUyajBTazkzM2ZQd2cKLS0tIHExNlNMMmVDdjNpYXcrSU1KN0Zu\nUEYrdG03YXdTYXl6S0ZoeTJKN0dHcDgKuVpkG8xlSOS+WB8kzk5tGWvKWJC78H6J\nd/znCxcaDfHI3OOJxSwDg/uhMoqTcm6Gwx5Fx9iMK26n34lfWkJFEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:2iWAosxFEYo/KdMC8FDy4ZkNJXRWlvOYwD2j0cGoE8YIQ7PkjKkIhuGE2RYlhBV3wk6z5nRtrBblJp9bU+LKleFXyUnavC4UgQbtrdWA/QSOde3YJtgsyQXjIPH9CkasZqdPhltF6ReFVfCu8P9yHEfXTkAPXSutLKTUCnO7ab8=,iv:9PYgHPiQW5OUyhi5dMYQgzrq434RYLdVbiULq9mfMhg=,tag:sVsVJOGygoBbss8WM0iiHw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
+++ b/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/root-password/password-hash/secret
+++ b/vars/per-machine/alpheratz/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:XHMzHHk74lMX8iQIzmjOm1Kbeyw7ksVK3qVCeWTKgp6uUPVPa0v0hopgKYwF5QdPECsZ2sylf3V7OyYf8qpC6GEWVuoW8JcYugMow8VzXEIOPMjDuuyIdw5Ub3ThGodxUT5nlF/avUQAyQ==,iv:3c7SyA/ob45jdmmn++eTjCisw4BA1efBInCFdcyi5cU=,tag:ryY4N9v/4z6zqleZpXkhxA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBubTE1cDNCUEtuVUIxcDZT\ndmxGblpuWWpXTVgwOXgxNCtudHZzdDU4eGs0CkFuYTd2MXZFTHh4VjZOdkhXaDIx\nMzBYeGsyV0VLWWJyc2JHS3lrQ04wbjQKLS0tIE9uVjZWRXp6anFsakVGWTAwZzQr\nWEluN3pkVUQwV3VDeThnN3dtN0ozbDQKZvsicWXuHocazoUlL5bnu3BSsIiOrJHH\nxbsuv8VU5mE5p440R8gV1qiOq7PVx18lNc8nVSKjlQglfTMiPBgDnQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQStLcXdiK3YwVExYQjZs\nMHJjQi9xaStub21EWk9LdGlWN2pJRStMMkg4CjFoU3lZTDlYNXhXNUZqUVE0b25M\nVGc2bVMxNmtudyswVlpuV1UvUUpwYTAKLS0tIFFBWWhQY3pyNWZQVmF4UXArdEx5\nRGRWTzB5aVluZTBFNVhQT0xiSk02ZTgKBX/0V28yFRJ4jzjv8a/CK+93C7+WbW7e\nmisvXVLsnxoV6yvkjAOG+GfVqJ+oZHtghbYzMv5kOdTB2F0d8gSBnA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRk91U2NncDVvenlmdWps\nZWdlK21Lblptcnc3bE1LSGtZTmNvUGc1cDBRCjJXTm1PNmdhbFd3cUltM0R0NzZC\nVVpyclFaU0J5WHg5cWtRa2NjMEtOdGcKLS0tIHI2TG5nbHZuNTQwZldnd3ljeGdi\nVnRDRnllWXJUZittUFhyb20wSEtmYXMKyzfABTq2/pPu/ma1WynIezVVBdwtShCC\nU0xfhC6SQH4mSWUq1J4tToG/dUFNL8UBkb+Bl5fJfn9e+AzuP/IXkQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1BbmFGdVFu\nUGRoNFcwckNjTDh5UXdZaWFIU0dvcmI0TU9QS1RqYy9wUUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp6U0RxK24xYkI5VG5CQ1dUeGEwNFUw\nS3cxZlhpb0pYOXlqdytNTVozZ1U0Ci0tLSBNWTlkNUxxTjB2N3FJcnF0NDVVZTJD\nU2MzTUZhRmR0RkxDQ3JvWFJsaXI4CiqtLfOaEpw3Yxx90Gm5aZg4/bQXmBREMP8S\n46PGDaKAvfdxl0QGlBOyM8l5QFmh9NWLXIUyPr+sCeDQNYz0k4s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDlSTnV1NzRP\nb1hucEtQUUNHd2ZJVkVCV2h0U2dWcmRXWVAyY2xHTFM2MXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3cnhib2RHN1VaelRpeTJYdTYvSFlB\nTkRMdVYvUnM1MWpiOSt0bjNkREdBCi0tLSBiOVRkdGIvVENmeFI4ZlEzRm4yUzFs\nRFJzVFAxWEFISTVrTE5qTFE2dHVZCqr7t0eALrjXKez9SAcSy/oxkXpzn+K6HOu5\njXXrrgIbLcHLQfMxK+QTE7+xwNvM4aKlES3dm91jf62ANPgedew=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlBQTZHaG4v\nbjFOS29lbGxYR3FPU25vT2c3Yjg0OUNhK0l0NVRmVjk1aUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpqaGtQSmhGdXY1SFlpbjVSNzNmYkVq\nbGVBK0tJbFhvUFVvazRrdDRTL1RzCi0tLSBnVHc1czBJYjZWamFNT2FCaHFRb29u\nVWU4YW00YlE0Y29HejRtYmt3a2NZCtoKSd6gNA7m5WBwLLixV4T0AcqXwYl8qiHv\nXMcrXhZ70KXTJW6koxu1iGqhTc2NiNgc3GyCS4Y09/aGMsdcPOI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2andpVWhmVGR4UW5wNmtD\nVTluNzNueGNIcDlVcURqekVBN2RvY0Z6S21VCm83NEl2NFIxUjdlWjRSK1QvM0NC\ndUJOZFhPck5FY2p1TUZTVVlzRmQ5ZDQKLS0tIGY5MnE4QzRiOGRPNHBRSFVtMHoy\nVk5neGVTZ3pqQ05nY1lucXVWdlh2OTQKeOeFUVyvmTxUTtjd7T/H8pS9EeZ5gOsw\nYXVXu9jXRWOzkS+vUXL02Kl510Dyyz3ecRDSzzOUOp1ERw9oF3hK4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVUgyMW5wUmFHT2hYaVEx\nRktQYzRoM0YzYU5weUlUelZDZlB6YkJZaW1RCnNGa3FmbU1FR1lZUkVTalhkV0Vz\nMG5BVjZ2eERpK2RVT1pkOGcrOGFmTmMKLS0tIEs2MkVZNmF6OVdkQWRvK1ViVU5S\na0xUNlFxdW5zZWF1K2VobUFRNCtocFUKPhOUjooCCIBCG20C5Oe3qyUcIpyJZcY+\noY8TdgyK1hgmhKtMZN35tifglvmNIxmEyH2y0iXBdb3N2Gi8GG3CFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBON1NiaGFKVi9LQjNFbWlM\nYTBpeTd3S2xUTkI1QWVQaENpc0hhU2VPVHhnCnZKSXQzQ0ZDR1hsL1dNb3dPVVp6\nak9qRk4ydFNtdklhNHUwdDRvY282S1kKLS0tIGdtbUtEMk0wLzFZVVV5anlyMldN\nMlF3bWdvZzNNL3pLSDBFRWxtaklEc3cKcyvFrH/5B3X39im6FXiZVLDwqzL615G/\nHraaCZ//Qyxi7+onKXDNrYTxc5jUmCE4qs6lhuyFdnDT3IQCxJqMEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NlprK0I3aS96OFhQYlhk\nQVlsVXl3UHEya1g1MExMeEVZOE5vbm5vb1JVCnJJU01yZC9HNENrRnNtUDZFY1ds\nandjU3JtVTFac0RxRHMrL2I1TEtDb3cKLS0tIFRDZ3dzaXEzRVN5RHpHYTRXTmhJ\neGEyd05rR0JGamY4SUxHcmRzUUlQK28KiW3tu2irWDJFPcnBfJdTbygkJMpFbtNh\nwHHsaAml+dZuPqWQbmVyDY5CKwZGynF9X2RCRHiqXNbX/GGUblJWmA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:te5F/QFsrX6o37LIpLmBewPDRoG5uhL2tFpX58xD7mk7KGxVi5o1Unk/n3DJ/+CSyg/0v+mWbaRuYzlRGO1XPJEITXpQBvSkjtBskvioCvCH6XyIvSJ923azqR9KeVjgXQVBNxSd2DDWhwnaGgeFa1a5itk1tA+lnzdghVAt37I=,iv:5yf2rdPorAA8ofn3OmRse34rZqVPfvSotPKk9i7toe8=,tag:zjmUmLBlQ3fGRxNZJFI6fw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password/secret
+++ b/vars/per-machine/alpheratz/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fb0O3XyZvw5wY+JMPFCpjn0YibE0Z+s1QdaIgimDNEQIsCyQ7jNQJIY=,iv:liF4HBVvLWbPD2QAcQ3YCcjxGdAXDZPu2+jLHAtrBGQ=,tag:yt9Bad+HxQodnbxiOrNYWQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWVZIQWs1b2d3MWs0Vmxr\nM2JzaFN3WlpKKzFwbVNHc1A0dFlGZlRvL1FrCkd1MU9LZXBQeHhQUEE3bW1sQTdu\nOTFreXpQdVpJUytwSU03KzVtUHVsaVUKLS0tIHQrT0NGTlZ1dFQrTklwZ2NIbS9D\nbTUxYzNjaHNMdXZIQ256cEtCaTRmYjQK3+NzdC2I9kmJyyCNGqx2P2rY6D73aekM\nuNZoUfFNqksPLQAOLPvjt6joQldZUZlFKvY0AXw3r+HVUMICP1z9Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByYlIvL0F3US9nQW1HeWg4\nUktLRHJhd1AyaWRwTnNUVjN3U3drbFJncjE0Cm1QREo2QTlxbWdMVEVFUCt1Vnpy\nZmk4WHlaUUZkcXAvREcwR01RZWZxaEkKLS0tIGhWc2FCVlA0ZE90SlJtNU12WUEx\nTnpzVzlMdmxmblNocGdHUWJFWU4xMWcKvmJiH7TJrbs/1oMs5Zsjvt0w6LfiIIPt\nle+ivnsRrIhYzofHddHTnVDI7NmvCw6e00MWqD7hU458zqW3fUdeow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHc0TnZHWFpm\nSHUwUnBtdERNRzJwdWxsMDIzcXQ1ZndFS0hHZkRiYU5PSFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpsWXdKVU1JUW5rYkEycUcrQjVrbHFP\nYmZna0JZZ2paNE5vVzVRTC9VeXNFCi0tLSBUSVZzQktRVlJGMVU4SGYydnBhNTNR\naXpZenBZTjRqVXQ3R2NPalBRUjhjCq3x4ccaNLUhKfLEZRTAJPLInz1edrDYPm0H\nVga5VWkQ0llstDWy8ANDJ+N3ryL0P4WUGWNbWtRpY9bmoXqvs9Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDcrTlA0VjJF\nM3ZjS1Z3YWYwOTYwSkJ1Q1dLWGJ3VEhFckpjN2FiRDNTbTAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpTUk9lT0xpaVJFS053TWhET2cyaTZn\nb094T05HcGVYWWljeHgvSG5rNGdnCi0tLSBScXVsMFBweWQrQTFpQXoxVm9TdWFG\nK1lhaEptM2poNkxuMkxUMlBDV1BFCjr+ZEAW85wiP0cEzfBnvhr/hI+r3ypLJT9w\nB/MvVbYma4yV/tIbN1vBEWnLEpFDuLyWBUZfNS1aVbI3U9o2Gg8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlGNmVSUktj\nTHlsbjd5bUpveUk0WE9BczBvVktzNFBFNGtJYlhoZkgxVGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozN1d2OExhUCs2cnJBMEQ2SEk1UVJE\ndUdBTHNCQjMySmg0dVNFVmxQZFRVCi0tLSBtYWFGbnYwbVlWK2Z5cGdHOERhRWlK\nVjVKdnBuUkV0dFFoeklHMWkyOUdJCnCiH4DZpqOiTFdREZPpFxbeIqYbNfHhh6ic\nPziJWxAH6xJy1m0Q2MHj11CqZFxHti7xeOovN7vrb8LiELASu2g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYVdCcjBWSmhjdk5yTm4v\nYU43UVNRVzg3S3pLR1RwU3ZQeTd5YXo3ZUJzCnk4dWduVW1zYVUya21VR0JrRlNU\naG1MWGlsTWRkVFAvSW91OGcwayt3NncKLS0tIHdNU3pnTGhocERRbzFWNUtvUTYy\nQVFXOTAzQThsTmowNit5WWFGc3JvTmcKmCL1zZp7qksSB8WiLxh44kvLemT3AF7r\nIY4WLCLTMBYIZ+ZnRyiLtoV9199bu7zdVRpfIEAlz4fH0kVREXMtyw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d3FhUTBEeUNrRnozeVJL\nZVU4QUM2L1RaZGVkMDA4RFNBRWJacmpDOVc4Ck5lTHZGN3pwY2ZRUWdRNTY2MVhi\nM1p3Q2tuM1ZEZXU1L3l0dE9pYWJSdHMKLS0tIG5aYkRER3pBdVJiTHR6Vy9nQ0pS\ndVdTc3NJSG1DcjdqSDVsQXdLcXNScWcKRBH7tIeDU8li35JjSn7k49pv3/Twul23\n57Jlro4c82bkqApW7yCLn4PDIYykH7B0iswZBvS7mngQ1KSwbEBfSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQmpya05vQzZ2S1NnU09z\nZzYwSzRSWFBmYzJqVVZrRnBNa3B1UDRZWWxVCjY5TERUNUdTS1A5SlhNL0RpZDVR\ndzdzTk1qcGVQdytZMFNqYVcvczB2S28KLS0tIGkzemQyNTYxei9LY01zQzlDT1Ew\nOWRyWUU1R0N2YmQvbzBsZlhKMUxEcWMKPb7WsVVWVNyzyPs+Xq3TLQ62tZ2di3yS\nvsDMH+mQSL2y1jfV2uJASTd11gz6SmzS4FDai3sxTXfrhSO89ha+jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSG1hd1AzQWt1UWFpaHUx\nOENrVXVlQkFCWEp3U2orcmx1cjV5aG8wbTFvCmFXMElXcVhzTWlpemdGUTFvVS85\nMEJ3czNwSHlnYTkzTmVLOC9YbGkyRE0KLS0tIFBCY3F6TUh4VFcxQkdFRytCRnZ3\nc2VrUllLZ1ZxbDJFb2RITDNpSXhFc1EKqAX7ERco6NC2MT8N8peSIRO8pPTPdhGn\nlso6TZDFlQBO2Qz4UIFGe+/YNWRS+tTM7I/SJ/WOx7QeHGWZ3XW0zg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:cdF53FqlXXkIfly9Wi/+etRl6QmcUukTgCXBT1QKSuF0wUb6HjS1wP0Gxx2rEzOIcsDCPvTZtnokrGQ8Fw000B5ubajhBKovr7bmxab8SvJz03fSQuY2PSLd9bdTln6kgwf4NG0CKfR8P27BtTFPaoXcz2KzJxS9f1cXq3OeNrI=,iv:sar0rHe9clELxClpgEQ5+s7wmcS8XDabQVf2DMdRDEk=,tag:M3AYnXyy2VWXWeqAzGthug==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/state-version/version/value
+++ b/vars/per-machine/alpheratz/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hostname/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ao5Mri45cCo0ikJPFquPwzCeeIr7YT4hrcMwAErpwJkiBozCoeAnp0NarCEojOKQWMEm38cCcqPAyLB5MMUQ,iv:mXex1YLgV3cSed8Dleuk+xYVHJjH4pRdKHUgT5RNaus=,tag:FeG2VRpNCP3OLByCevkHrw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cXJ2VU5uSUNKelJHdHQ4\nYkZtNDZ6NTFhNjNGakdnUjZxRk1jMHJSQUdZCi9DYUR4MDRhV3c4cVpNSlRnMGZM\nT0hZMUZnNzdKV05DSzgyblpMc3lxeE0KLS0tIFdoSDA4dHNvSEx6NVdxclRwQ2pu\nNEFsZ1FmTlNmME5DcnZFTVhSaFdSRHcKNkHgnCn07yeG0qnXen//Czpm7Jr1mG3R\ndiymrjr+cHJpib7TYv4h5z3bC2DCVa72wl48z0Pj9KsBquR0oLVsNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtN2M5bHhkODd1T3U4cHNT\nQjYzdDFDemRINW4wY1U3YU0yRlJJd21EMjBNCkpQenUweXhGSGNwbHhhVUZVZXl4\nbXFBaDFPd1NnMWpIVUVTZ1NYb2pDaFEKLS0tIHA0eE1ENjRWTTk2MVJZZjhIVDE4\nS2JzN2Z4VGRFYXNrWEVkNzNMMWxqRWMKOFHKYxSuluxyNRmmFEQ92PEfRfvNhJCl\nRViW8jHYbfZnPhBK4irht1b4XHDJQz/8sn5TKv/5hJeKHtdy3410iw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibFNGcW9JOUUyRmcwbmZ6\nM1NVTkdPamQzRXNHOWZkaWwrZnJjYUJmZmtzCmxnakdodnRCMFRBbUVHVjhET1Fx\nekdtWlFheUo3MmdXb1lnKzZzN3ZKRlkKLS0tIGF1UjQ4TWJtTHlsMGNNWnhJYmtp\nd0V4OXN0OWNZVTVQQ2cvdk5Ma3NTVVUKkx1Njs4ZkOFtRFixqXdFNibj12hy18rX\nh/6cxmhYTpLVzzGBSWy8/ObP8/mk+uon280T2FpQ88m1sTKS7NtnUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHkxQ0hEaGQ4\nM29rZSt1NnVKWUhGckJ4VkhFMys5dURQc09RSGpuZnMydzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDRFdING5lSFRnc2dsMTZ1aGZGQU92\nV091czZjNmxIZm45RHZLTTNkd0ZnCi0tLSBjVmFWcytwVHNDY29BMTMrYVVCc2hQ\nUVFubWNCbXl0NG1ITlRNaS9GVjhnCjBbMrQb+u3TFceCd1RNeMLpaL7tfiCc3003\njliolM4JyR5L6MCyViMkS/xpXI1k/25a8kl0aeRI0d/jEPZ74iQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHljYTlYRmVn\nZ0Yya1dZN3piYXJvUEJjdCthc1dPak1zbmoyQXRlTkpYbjggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp0a1htSDZhQW1mZ2VtbjkyYm5nditX\nbGd0RzJJN01iNExLdGFueWFZenlnCi0tLSA0UFVYeGkzdGR3WjBNbHZEN1A1dVBZ\nZ3lNdFdOODV6MzZwc1RVZkJQSzJJCkr8KQHc95z8VlrSRot+8aWb7WUUUZ3C0KUa\nXPdZK05yhHeCDDD9zIyrZ77esI9tSLsArVcV25rGv7zCO7/fnpY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvR3p0NG1L\nNXJuODI4RU95dDI1dFFjQXJ1Z1N3ekMrTEZ1c1JPOFhLZzAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpReTNDdUh3ekFXRVZwV05tdDUxMkxQ\nSjRudktDQ2dKeHZOLzI3QjY5TnRzCi0tLSB3eTVVem5GblN0RHlmeEkvOGlkU1pl\nTlBlVlRyeG5ienlNNzludnZkYU0wCjOfwCN4FCfsH9uY6Nt74lhiAOEbjEiRos/U\nrlgaZ0tS0Nc09grtKmZAQd9Dc66jmhaD/nJVnvq/9IHMnrbE2jk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSkVFMFdrb2RuOSszWUZL\nRXY3QThjUjl6bWM4OWJVVU1oVm4wMjR6T1drCmZnNi94dkk4YnE4eUNZTkdyWGI4\ncERYc25uUlhCa1dvTWJRaVhSM2h1T28KLS0tIHVlWnZXS08veGNsRi9wWDh0Yllh\nSHd2bTZ4THRqTUMvN1BrRGlEQjMzbW8KzTsGUcBpMcPhkgJOugm932NAXWG2xMBx\nJW1kIVW2TycopTWZnKQfOp3NtV3yFlxW7vCPljGEmhvAs5EhU8SbgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYWovODhORUZOMUx4YXdi\nYVd2akpaUHNWMVc2bWF4VHZHN3grRWlkM1FRClk2UVlFRHBCMnRDVnNPbEl4d2Iw\nNWNFNjRNbWFZa0phd3QxRWdZc2wyM2MKLS0tIFVheVlsalZpV0l4UVUwVXZnZm9z\nNEh1QTlxVXVLZ2wwT1MzcGxHbEt5V3MKvkMbOEMLd99YvMuoK4LSdZcmvswC877c\n3D66ZoZ6g3P6wrVBRtPs+4+10wLjFhI5GPPvK9PGpWYvu/5pDKaCOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVblJNNmFyM0pCQllHdHBR\nT2JPb1JRekhpeVhseWxGTGRCYkloWk9Zc0dzCkoxa1cyZXh4YzhkYXJ5cmNaQVJO\nTFM5VFNKa0s2UmE1V0xRak5tMUh0SEkKLS0tIDRZZkJIR2FVN1hCanhMdXp3YzZi\nNlZiU3doa0J1ZFFYMWRZaW5BUERITTAK0YixYdgGEEn7Y7/F1fnd+fJvyVZwEz2X\n77ufkafOeNEYla9Rng/daDGpGEyA5715kZjbuHvHbck35umlmheAeA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISEZETUtYbjVEa2hWK2ow\ndHV6UjQ4enV6Z0phdUZFQlR4bmk5Mk5FZDFzCiszU0M0cU51RWMyTXpzamdrV0FE\nS2RNa0NXWmUrSW1xWUtxN2p0RjM1UFUKLS0tIGx4TlJ4YkpBTnd1aGpFUXBoQWV3\nTzRCT1RJR0FkQlpJb0ZuT0JvY0FnUkkKc0L2KR5H2mWVlGrUkVt2ffvzaYSHLVgl\n0ojHe9nFRp/sRtCpFFTQxUW+qmxIEWwyf/9rE96gRYQH+i4+0ZoJvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:7NmTqngcvswZoLgRh26oLI3u9ucqRws7GNztUk28E6YgVU8zr7D5++s9yNaF7IfitDvqqGgr3UjORASQngLqazLgXYMShsVN982OPbDIPgNvjfyPPkSp5bZYLdsDxjSRnE1ATSMAab85J90W0AIdtWahsaxv1sg8HZRy9wzs1WQ=,iv:BkjbE/rkRH7LAP07TyIo4NmAMLPF1xuvMylCWx2LyuE=,tag:02NuCvNQmEa+fkiCB85VAw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:p0ZsT/rqNrfGNGMSnJguZ2V1hN3HLyH0LGze/2dONBeYCVRxfQV4S9gfQEhBVtaFvr8bD+sbKB3VvMZVLo2xmUE1F5HrBw0JWhgKEgd6775SzW/IQav0821QqNYeCa5Z,iv:3AH/4s7M/wbh92q766UqsdP58NVrAI9zgY64pDfl8ls=,tag:98+Z9fUZQgTqbjfEpn3qUw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMjhmbENHSEptZnBWclov\nS3dBMDcxVHFoa0cvOXRqTGZzMmptbkFNWWxjClUzdndmTzZpZlNhbDRHNmc3OGVQ\nSko1MWZtMHd0MFpwWllzb3hTS3V5Mk0KLS0tIEVUcTZyUXNVRzlwZC9wQ0QycXlJ\ncTl2MG9zMHdkcWdhamtLWmQ2Q2IvdTQKudtGoVCJDJOQYog8nRZ7raB+gr1XH6qH\nUKTHsH+UVCndroxEaSThbzKspkbQYrsPHPMOX+281WgKn96VB+RpIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByQUJ0TjFJR0JiNGl3S2Z0\nOHkzN1lIVTZaMkc1WHY2Y0hvNlNTSFN3aXlFCk43cG0zYUpkMU9FcTYxU1AzY1pU\nRnVDcGhPTFJVMWRBVS9GNGxLVzZjY0UKLS0tIEg3cXdKN1BZOEgvMmlDUmRERWox\nK1VKY0g3QzdUWnFFVS9XS0w4bmVrV2cKbRfsZ+wihnViBg1RUoUtlBL2OndAwose\n4uJxcPqO/JJ+hCcfX+c2XALwxjzS1V/GYPq7XM7GrpXmOBG/Q7zuow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZyMTE0c1AzNEtxWVJW\nTFJpRGVMNXlSR2xmMGs3bkFUY2lVODh5QkZnCnpFQXpjM3gycVpsWmFiU2MvQ2dX\nL2licm54U0pleGNGWFk3Q2RnT0t0RjgKLS0tIEZPeENmRWdHd24yaFkrRWl2TGtR\nYVgxTXY3YU1XRmhrN0FnREJ1SW16MzQKk66+nCqGgz0itmqfsMUUzfpgtfko02ld\nX17DUcQPO3T8PkGZS640b1IKcA1/xF8Xtg07vZLsL0ZKKYiVTyMSTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEgxYmF2TC9q\nRFR5K2dybks2RDVuelBPNE5lU1hlZERkK1k1ZWFBV1RNZ1UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpySDAwTld3bTNpaEpzWDRLVmlVSnQw\nZGlydWptc2FVbzEwYzlEN2U4aFo4Ci0tLSBlV0RkdGI4dEZNUU1abFpJcHpPY1JG\nTTAxRExJeTRQSHh4bElSTnlrOXpVCm3MXFpIwiJh03W4Hyyo8A3Vv7OOPcVY9r5s\nVHoWC3hjBcUWcByJAq8DFZLZ/9h+futtLpq4gLzJxCDNQQcSuLE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHB3Qk5Ndi9n\nc2Z5QVZqejhtMGFqbVIveENBYVo1Qzh2cWdyOVVoem4rSEkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkSjdhRGtuSmVDd1NmN3UzRmZDcjRO\nbXVUbG1ySVlXMmdVS05BVDBBMW40Ci0tLSBIV0lzczZ5NTBlYWtnRDNTZVoxU050\nMks5ZXozZk4xc0tKWm11WGdpb3dVCtNvBcH51672lDjnkt/xVjIemoTDOZ/VVS2i\nQUWwk6UbfD7PPUc1n4edg1M9zT4RoNTWVyMXqT7XqDumch7OtuA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYeUs3dkZ5\nNUNQNnE5a01WVXpCaFNJRWlMcWhaQXZpMjhWdmxBclZqVUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIZUF1V1JjaXl2SHRVTTNmSGVjTzcv\ncUxhNWdRWXFGRjh1bUFneDZweW9ZCi0tLSArOEMzSmdYNTYrUG9meFZBbEUyTWRY\nMnpwTi9JU2h4cXZUbERkbjhJZFA0CkRxPJ/Yzm57siZW7x8Z7fBrhRgycgrUoO8T\nv/BGUYJWA/z3u2LF1vJkBDj50pE9RpDi4ZSCcMvbw/QmxNnEG1k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYXFOSFZWWjR1bUUxMlF1\naTJpRHpuZmVuUlk5d2dyUTVsSzFZelYrdkFvCi9KOEYwUzJ3c05GUUFOUWZld3VD\nOXNhVFBzMG9Cejl6NzliaVNTVktDSzgKLS0tIHYwbGFORStvRDJscld5QU1nR1da\nOUc2TEt1M01KSzJFN3RXeXJIS3NCSjQKEMQRTzGkY6T2kuRvfhVtcRQ2jVt5zhiY\nDlp5NrwevxKO3UcNNR4Xi/WCUmWA33p6Kgj5QbZbVhQebR/zd8b9Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGaE45TXpBdzdUV0ExQ1Jm\ndGZCV215eWZ4anpmQW56RFhlUWR1M1BwNFVFCjhGZmMwb2RJTVk3TmJuazBuOTlJ\ncUFJQlRMTlB6WFJHL3IyM1ZOcVNGREkKLS0tIHp5RzZaV1lyMnRCMGhFNy9jbWxs\nc1JrK2JVUXVIeXVTOVpmdTVBbk1tRGMKxJslG5hP+EAyFv+twMoHZk3G8AXpAK4w\nQnKEultmweZ7XovxfUBEl4322YZX6CuTm8yHqzFDTGv1nuphPL8Twg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3FCWExKcFFlSnJVYkNs\neWgzaGZlR2YxZUVjYzV6KzJUb0VQRmtwS2t3CjVIME55Rm5GeEovQWJVMFliOXRY\nNUlGVlpFYm1rMFZJcU1pNVl6UVBLaTAKLS0tIEluRGU5WDlMbnA3d2s1WlpvcHdm\nMm55WnYzNFY0M25OcXVqekZDTGRScXcKS3F08d9+rt2xNPFsp+sPP6OWVNsVN0mG\npIr6m0MjxjEejHSUV8Oc7W78l5sRLKhjv+5MGU6Im0NV91lu15zpEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONjg4djZ3T2NtQWpTTmRP\na0V2a1V0eTZSSkd5MHFsOW1RZXJsVUVnSjNrCnlFUndqRFFKYmM2ZFRoUkJNT3R6\nUi9nTW1uMERwbmQ2elpDNDFtNlNyWmsKLS0tIE9sazlIaXVTK2dPc2NEVVA0WDFi\nbEpjYzZTU3J2VGltOVIrbnV0R0x1SEkKC9FEL5cWB2VN5Gg8xAW816e+yPWf6IbI\nIA0S6Q3MGCwVOf1IA2GL93aCIIdkZ82bINaUG+KQDddSyc34nqnw7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:Li3c59vl4x6tAH9JkZ4vdOH+vs7+x1Ih8YZ7lIjopeqVdtFqxQwEorZudLJ/Jas5Ax0WQjRB1Qr1PrxQP6XtghXvNPKiWK0TAHsT7gmMB4fsA10EI6zJUlT4aVg8TGTgl1SXvGU6u36XpVtCVu5QKUNmqcKKL6JXVuOf1kWIhV8=,iv:fEd5xXCqinDK7wamxIBxX0vHUZly+iiDg7mITBVdioY=,tag:bxwIgz3Yohijar0utcfWlA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hostname/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hostname/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hostname/secret
+++ b/vars/per-machine/b4l/tor_tor/hostname/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:kKuKG9d4/M1QbJFDG7lIqsLxv+UuHnjefOLIrwlJevDjZ9WXFF7t9wEdKI97ks0P9QjCYwCWLpl9KvnnWGG5,iv:NfDT4aRKT09OCGCkeqjM7nCpn4uvAmxjM+vrM3LjbzI=,tag:HA941KSFSWou+r83K3GlPg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1Z6U1JYSDAvRUR0Q2Q3\nS3V0VHcySjJUSk1jUGlSeWp6MVNoSkJsSDBjCnAwMWFrU1hVY2FMQURQWnRyMnFI\ncGFDdjNqUVp4Um9hZzM2aE5OQ3A5YzQKLS0tIEtDUHhuQ3dQSmJ1Sm5qYVdvZlFD\ncDRrck8vOFYxdUJYdmxyZkVjMWNJN1EK5LMgNkrtbtGnB1/WCMnINutQxC4J6H8O\nyW8VXF7Vkoc1UJwWdgLIOILq2wgURgmlcjN6QRxqnZ5+SpEEpfmwSA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYlJObzVFZDNnWFppQjRp\nMmpIdnh2UUk2aFA3RFJnbnNQemRYOXk0V0FJCnBVNytpdlgzNVBCOVBPcXovSjJD\nS3RwNk1Odkd5VUlDOC9mMms1akIxVEkKLS0tIFJjcW1yb1VOdmFzSWdiUkx2MjM5\nL0k1UmQ0NCtBd1dyci8wbFhzZzJhL0EKC3ccLIbdodeHtLuMr0rhlXn9xzv7vV0s\nu5jKgkLcJsQazR/tTOJsFa1YSW214b1xzkQ5UOjGGr3QKdKieoCmfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtaQzlvMkFW\nRkdzeDhhWGlEVGpYeisyNUx1VWxPY3d0cXhtSjdqZm9hbm8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpWTUlEeTU3WEN3NlRxc3QwaTlpRmVn\nYkVQTVJnbW9IVFJOeXl3V1I3M2UwCi0tLSBJMnlKVlQ1eE91eFBFRDgrdUY5Vkl4\nRGM0bDNFYXMyM2Nya3RJUU9GTXljCj2ud36cyMXx5yg93iXZiESeaAd4kPdcTbgc\nCgv20gxASeuq2U61h/UMHJM8tEeQi/HT3tld+yGghtp/QPYNgZc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENSNEpjc05V\nclEwTHNzTjBHeS92UnBYYng4Z2p2Zm9mb1M2V1l5VUdqMXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpIWXZ2aXJTNC83anczMU00NCsyUFJG\naWE1TTlxbDZuQnRsbFFQTnZ1eG5VCi0tLSBoc1hqcElEUFkwWVRrd1dIYzlIczBk\nNmM1OWhRLzV5Y1dXTHN5c2pJejJvCmrYj1VSjz+XIHz9sy+U1hIRkmdKt+/ylRRc\nXoCqIK16mArX1S1FMmV0Gk7zcUOJEVECVLjuCUOIVcRvT39ymlQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG16bGlsOXdP\nNHZZd0tweE5JM2lXTmE5TXRZMC83MjBFSmhmKzdHL1g2bkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxc3E0QWFvZHNHOTRWZnZ1TkI2ODgx\nZHdJRFRQYnQ5aHhMdktyLzRoZlM4Ci0tLSB2UWFad2hJNnY0MWs5NU5RREJqQXVs\nbTI5K0poRVIxSW9WOWEyMHI2TnVvCh9RV0ss7qxpVLlR0TKIgt9Cbf1u59Nx/j5m\nb8exNGAsf9Bw/VX9gidU0Ij4Aeu7b0XPtI+cvLsGoNyxmTf5SRY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYjJRUmdaRVIwTXNjNCtS\nbDBRa21lb29rYjcwOHhxME5PQ2duSkxuN0Q4CjRQdFVQVHk0U0tibUp1MEJ4MUdS\nNVc3TnQ2ZkZpZXZVTmRUREpGTGZCNFkKLS0tIEJ3QzJKTlNGWnZqU2EvSWlma0Ja\neUk4dDR0cThISCtTbXZsTGF0VGdlQ0EK0lz1rjM0ygAg6QdusYHmi6Ehetou7GhI\nw/3hjerPobGZj32fy+EJ0LdcpILcx2lvvtOcDSap8/17Hbf6LKMi5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNjBzeUJNZGRYd24xZkJv\nOGJuL2ZwZ0pibGFtNWMyQzJ5RVYwSXJtTEY0ClZHUFRXT2pwWGIzU0FWM2ozTVdO\nMGRmNU1POXd2cm80TkZPcFYzczZkakkKLS0tIGMzd0dNdjVqWnRQVjlLNzkrd0xE\nb1pxeU9uYm00WHhOSjlDRnRGT3RESHMKHLpP7DNaaidt5Tc/9za+Zq5UCIVMtefF\ncPqKLvOH5iF0qDErVY3zqoXlQxx5rssUhVXn/OXC2n1/ubSuQHx4RQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ2ZlN3VxL3Q0R1ZPdnAw\nV1F3YkwzeEZTYWhyeHVvbnFTUjZqWlBQM0hBCjVENlJ0aEZDRUI4bjBtNG1CNUJo\nOU5FcUlaMWMwcUdxazJ5aXFyUnNNOXcKLS0tIDU1ZzFtSzY4SlZreE5sekZjOFhO\nTk9XNW00MjlCMkw0UUlKU1AzeUY3MTAKGf+jwWUm35Fi2CBrH2r+hHgW1pwGPft5\nNoxxmNn1H28MHSLz6aK1x7J0+TA+Wv5wZPnNVG0vrXSt17NWOi1BXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWWVoK2hEVHF2NERaL0w2\nMkErTHVUakdxenhTTEY1eWVrTFZUYmJ4RkZVCkZtNU9zWHc5YmVyRFlHRnVQWDkx\nanJHNmMzUUQwR3BUWXk2QkNZUEIvTU0KLS0tIFY1ODVSK1UxYlpSa0YrN2lidjAx\nQ0JBTGhaeUgzMFVKRFVJWWNxWm45MFUK2MQVFWgk7kaisGzxng0oG5CYOU6CX7jC\nfTMTgJ2ewEXdPa7b0Q/EcS6BvNDpz6jRB+Hr7mqqrnEQwt1YItIOFQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:wdtnhaoU/NMb1nqzjKX/uapwlbWZhbBrCO9VvYv5lYJrpkWRsFEMAT6XZzmkHoEBh5eZYO5fKth0tMyWkbptjcsPKnvFc8UmtFQ5lQ0u4asM/Fj9itLj6mtCqo34Uu7CzEhmfHKdThooZxNZ71qPGeu/uhiQFGBma6VLOz+AMQ4=,iv:BHju6UE77Wwz64njwQKCfouGXU5TtD+iCbCPDj3ng+g=,tag:MXM7dFiDSfvPUpDyqdWHzw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lKIk24xi6Ob9mlU/L81PywvKd22juE/lyqv4mFA68MbEq6i/ktZHmnPfinfwmjjZEp0pJPYbqgfwT9rHr+a4msEW7XCSe/BKzllDpYezPmVOwOf2OB5Q0Q2O286EMfXg,iv:KmFaMllFeMvHz7ucNtPP6hd6rAqEsgOGskk1N3vylgg=,tag:DoqcW6UfJi4560GA+ZNBXw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUTdLa2hkVXVWZDVEN3RB\nMUhkb2k0QkdtZDdnYlhIelIrTmpGNG9NOXlNCmgvNEpLQXQzZ0swQnUyRkFOQUd3\nUXN1VGZvR0R5OWRIU2RiUWx4eGxPZ0EKLS0tIE1pejFaNUpLMk5JRFdvQ0FoWkZj\nYmtXMXNwMDZoZ3V4bEVXeXJKQk1NMmcKAiBg6+ZlQYl5gY4RKd3IQxSJc0HoRRoy\nm6SHYvutY4Pv6i9gEuyYXIHiUI5WNmqQjgcK8ZpNVB9kcSiCkDtHPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEd003N0FhZUtWSStPY3dE\nS1d2U1RkZTFPVitsM2wzblhybXBzUlJlbTBvCitsMGpVNDNYNktEbEN3dkx2a01m\nNU1GMkpicTJ4TkNQenhuYVNOTXdGbncKLS0tIEZYZnlPVlI5RnFMN2hFZHN5LzdW\nK0FCSXBqYkQ4cWN2cVJCdUloT1FoVFEKSDw5Bl8CTjQiyX5iEZP4ageyDWI/VYFJ\nPMFbGrGIo/Yjn1GUXy3U8WCUL0Pf0t51uryYzxlugXGN2xDas1zqPA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHRFaEcvVXU1\nZzVJRFl0ZWx1U3g1MENFem91NFEwaC91bjB2VW1KakdrQXMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpIeE5GSGNaQkM4cGRGMU1IZGZvWkR5\nOWdMSks3VEZXWTJhOElRdkpMNW5jCi0tLSBPcXQrUG1DNlhoZzdUdnRNRTZ6ekVh\nUHlCY2VVOVhXQ1ZFNllmM2I3UUJvCs3ids9ynH69xwiQMy5H8W+gqkE4ro8YugWY\nIx/BHKaceRCrrhBr94ut9J4sssmXc+IW8KR59cfqlQaIzv4bw0g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG03MkxmSXhS\nWlk3eXlNMTlOT2hqaVRZd2grYTY1WElweVlWUDZmOFcwQVEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3SlBVZzgzdkFsSjdBQ240czRVZStw\nM0taTUM3L0l3dUVwUXh4V3NlMUpRCi0tLSBJU0xzSDF1SW5BMkZGVURjTWptclA2\nTmFIdDFuYVFobTFRcjEybmYwUHpNClHm/GaJ3cJ6CD6qtRZeA+0IaZXQVIIl10gq\nXXky+9m4k9QqzJk0WNlQVTKESXEZmH7ZJpFozkkBl3pvsjcP76w=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJLNWt2VEFl\ndkRHWVU5eHV2Nk16NHVTUWRZVjFKN0gxTzBwUWdnUDdCZ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpxRGRKeGZzbDlhR1R0QjRxQ0Y2aDRU\nOUU4aGppdzZMMW5neXBpd2tKTnpzCi0tLSBpZG8yWnRLQzFUWXpBNGhVUTVEQ3JY\nZTEvYTErTmF3UkNIKy8zaE81MFFBCvNUXKxBem+mYQYPTwUaBfdcgbW2/ox7MHWu\nprO+wkgytG/dowwxYN8ojE0jTL5gEm82IhAcBefUozgUrr99hTw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcGZZcldCWHhnUktTdVVr\nbytSSFdCblRGOWdFZTNJNFNnSUlUMzFYTkNrCk1ZaDBtb2NwRkpPQ1MvQXYva3dz\nTFI5WHhpaDN5SlR6Y2Y3L1AycUVsaFUKLS0tIGkrM01ndVE2bnB1N0RsbTZqVWpX\nQUV3ZjRScURwRXZxN2p0YURJREloMjQKNXNSDKR2yHHd79VswrACRMAbjP7xhaBG\ns0QecfDGnvzehMTRgtxLZ1boN48ltBgiX2w2kattklKFC/DPZf9arA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNEp5NW5jSXhqUC8xNUdH\nYktoYVh4S1VuME5COWVXK0twdGVBYmxqSVhVCjNDdzNLMlFtTlNCR0JWSjVTMzcw\nUUg0TjZDcjA3eFhVa0luTGtiL0dUdFUKLS0tIDcwVUtSRnN0MUd3M3JDM1BBL1ZN\nQlR3L3FEbUlkcCtneHRIZFYxeUFqNGcKVwSlw/DkUct4N88zmsdkZdmfOZkcyX4t\nTJHTIzUQ8DfEiAImw+4gp7zGgIAniSRMS+gaCo5dNyUedkP8SKf7JQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNXUwOHlMSHdGRWxYM0VQ\nZ0YxR3dvYjJuNVFIRnpNQXptWDl4U2xPb21ZCnRheUZnU3hyeU04aE9wR1dQVVFw\nRVR6KzhaMDVuSHhGdHhUOUs3S3h3b1kKLS0tIGZDNzEyWjFBcjhueDJMKzVCQkNm\nWlpScjB0bWlnbENhcTNiNzMxaXNYdU0KyF3yxe0mepsFVJHW/pSMpHLkyF66M0Sl\nzm+biucmH+6aR4Pc+IvQ2PogEetx09hhCME7O2Okz5IZI43Xh40meg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN0xqdENLL2JCcE5NR25S\nMWtqWmR5b1RSdEdoV2hDMDYyaHk2ait2OTBFCmE3RHZPQ2RBZDB2anFaOWpCcFhB\nVWNLNjhaRzFPTm43VkpabHF4b1B3ZzgKLS0tIHcxV3BJU21vZTdYSldRNlRYaHVv\nVEhPZmE3SEFMTmN6ZTZFdm03ckN6ZGcK3OpuSsmD4EbUNOoQlz7oOfbKws4exwvD\nBDpMRp6XhYG9YXYoLuvuKu3Qq7YKrfv0ULaQD3iE5KpruEBlHpfR1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:Zd03+YZJUO+kBJv5pbOxaebKeppTU/+iqJn40LyP3N4vWlXQ/1uJGE48oonLMSwZ6LpWlmekl3hVWQIMvysHsFY8mGVb3Xb/UrKFm1IF9Qd8NynRfR1bu1TdIA7Ums1fXn47OT0zUWhFaxz0xHBRmavusrHmFIAlwq5YQUNCUMQ=,iv:aac6D8jlG+Ct15ht0nkPMO7UONXnRFga6542XfMAgiI=,tag:nKvNDfqmQJEco03EZcBz4A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvItw14tB6fc6gdZalSkZPOUSWGsTNyLnXk4yLAnkrb 
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/machines/ramus
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Q1YlntA6bScOu9hCOshG6MAbhYIBWw6EbM/5z4nJVvQ=,tag:TFZpP9CeOAmOb3GpCVqRWg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1RDc4WTlWVnBvVWJMZFZR\nL1M2ZWxib1NZM0M1aDM4SlhVaXEwTzF6Um1BCmJiRDdCNXVPaDRDdW1CdTNUMjQz\ncVVIMWZRd2YrV1o0M3NjVkRlZW9XZEUKLS0tIGNYazU2a0pqTzhXczlsbUxBUlBP\nUHJlUHgzdVVZdHdyTjlLQTRpdlJWS3cKHghMTLA/S6F60y56nL/at+iECyoEzZmO\nECJhGSDyQ0vbGgEAnskfseoA2xtzNvkj1sO2kbnPg3pCvlIDGaAX7Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBESGo3M3J5S0FLK21HUHZv\nd21uUTZiMWRVaEhZeGR5MFVLcHEvMnd3UmxzCis3K1poM29LY3BBU2pYRXc5azV1\nYnNpT3lZeFRndmhHb0xHZFZzZTBEOUEKLS0tIGZHZXpESlBjNWpWTkFlMDZERW1K\nRDM2aUF6bzNMZ3hLbStOTS9aUlI2bkUKIzTIQ69JjjIlJl3xUUa8c67+WOLXIcxh\nLN/p58/sGa1PH5X9uI9yBxH+7dmn2u7xwZKGcHt/1D1BwH+1f42eyA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsaFgrWllHdXZxQUFGSWV4\nZHMweFpkRHZRV0FEOVBDVFh6MU83SEhpZmlvCkJCUmNIMm5kemZFbzUwYU1POFVx\nVk8rTC9HRi9pQUo0Y0JBdFphWGRuT1EKLS0tIC9PUmZvVC9URks4VitMWG5zSmh1\nNEJldTNEd0dsQjQ2V2JUbVU5UHFNSGsKKV03KeObcSAM5tMBNJp+F6hdDpziyABY\neEAJxMr9BuGoPwvAHLAAvIsIuOw6Zw+wfbxeZK+szhwiFmMdZMCffQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1xbW85Wi9V\nOTdhdk9jWVBlZm9HbXV1SUh6WmFmdnN4TzdRcm92N2JDa28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpjVVhQU2lLSlp1Z04zcjJjeWNEamEx\nWGltR2FtdlBDTFRpNGNYRTg0Mm1RCi0tLSBVbWV2WVRUbnFySGp2ZEFnNG9Xc3kw\nTzMrV3dEOEMvL1RGTXJ6L3l6b2t3CjxtxJah0sEljMT01ch9x30OeFzvE/HNzXSb\npnG8Dh0rYjv1lJ2unja8zZdfrl41avHP7BeHqSb5QAMVxZj3h8s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5CM1NOOUdl\nZHkwN3I0YkNhaDNYWnMwRFM0bnBPRXlUSy9BZUZYVGRtQjAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwprYkxXMUpZZjhjcjdYYno0NWE3b0ND\nSG1nT1d3dGZEUXE1enMrQnlsU3pVCi0tLSBNMitqcnhkeXdueFFIb2ZSNEtmZmhE\nemdYbGtpV2dadTRscnlidzJNK29jClycgQIySOi0Pb7H9G2fbff+VRhbQY4wqliB\ntGyGUMijiTPpKC5CMqoVz3RsMdZkX2NuwfL3p0oZXpHx2gWCPLA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1yS21OR2JC\nY2xKWW5tdWhGWUxZNEVadTdkQW5NeGhtb0xtaml2N0hnR0kgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpXa2ZmN1ljazgxQmRKUitGQlJhMHlk\nYzNrdVJCaU1QeDlMdGZHTWhjajE0Ci0tLSBmcWhNUmlzd0tWNHVHcW5Dd29rRFpF\nUUl0VkNKb0ZUcWpKaWZvT09VVWpFCuvNqV9L0/XREyuFeNA41+G53wx56k1qzfhz\nk407lcOzWtlo9e4GHzSeV4ZEAP4Pxt56AtoIlSM4LNrlEpBpP9M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0UzNQcU9Zcmt3Y25BeC9X\neU9NRllWYmNQSkdlakZTbDc0RVhQMElnbDJJCkpMVDRRUm00eG1GN2QxdHppRDVn\nK3kwNERzeWx4YnYrWEFZQUd6YWdlVEUKLS0tIFRyNC8yOUtqdC9IN0lCenlFY1R3\nNlRnWXo4ZTQ2endweHZvRnRldnVHVEUKjNVzo097eHcaQdt3l36ptfzkfAaXNsDJ\n5b6gyjs/arzYj8ygdv6UyDdTNjlZfvATSMgfYIjrCKKt/9EDHfXhRg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWUl3WlNQQTF1dVdmQjVS\nRnNRK0pNUStjV3VuN0QrK051ZHNPNVZZdlJFCndMRmJRSnFMcjJlYjJOa3hjYzAw\nSHRpaDFFUnd3UU1EdjZFNktzczZucXMKLS0tIHNhUXEzOEFIRDdBdHBrOGhKY0ww\nNEFUMlJLakd4bUUrK1BDNDQydzFPRzgKNJUKAxK/8vTbnHM6/gM4J+FibHkvx6dt\n4hbLPRcXAp/5mVJCMAIGHxsuyG4ypSaOkF25e43PiI7f6HacJkw6AQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbVlpY2RxOGQ1NjFaMzUy\nSU1Vd2crYmNrcjhWRFpkdUl4ak03b0c4SEQ0CkhieCtFc0hPQUtsQmNwRnBhdkY5\nMTBOaGVTKzNtUWl3QUIrU2VRYWhWMEEKLS0tIE9VNmFWaGF3KzdKcmJCbHNTZllx\nSnBtNVZUdnJHYVRuZ1NQUWNoRkp0Y3MK0x4epBjs6Czgzpp525Z8FMpJkuQn5LQ2\nbaL3VJJxdjpKKk3AeS3rnIUJ5XV10qtsG4eaQ3wgAQGdXl45jcvDaA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L1pLSkI5YkdWV3d3TDV2\ncW9lWUNodXhBN2xGcE1KaElaTmxRR2V0eUc4CkF6M0ZCd3NTMVhUZEpqTERnVEt1\ncXE5STdJckRwaWdJdE5SNStsajh1dTAKLS0tIFhrVzEzL1ZGOFVOL2oxbmFDQ1ZS\nTEc1UmM0V3F3YU94WVBDYk54SWZtZUUKl7eW0214fmkJ88J93O9uudjxxZfQ1kFl\ndeZfjYg1N2UEGImL4sZgz05+m8ehxLh+FntlGgJ7MHFrqAE/g6UF1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:15Z",
+		"mac": "ENC[AES256_GCM,data:Ve2ded5v+sZaMocncuTS+y9g5nGP6wWvu2bWsBn4AbYigZnfp9eROIf7ewCT2pxcu7VFGdYv1DjWrizwvYu1PkRvVMxJZy2BgZeYwtmSVWW+x7m82QFb8kapO5j+8hK6V2tyiaGUw8xwNDtN/QyUhlpS1kjfmNLwy1sBM0rinLo=,iv:G5oif6tMGzS3TAPRk/6LZeHLDvyognPPCjuwxoX05YQ=,tag:M8+mU2/C3MNwc4TABkR9Xg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/root-password/password-hash/groups/admins
+++ b/vars/per-machine/ramus/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/root-password/password-hash/machines/ramus
+++ b/vars/per-machine/ramus/root-password/password-hash/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/root-password/password-hash/secret
+++ b/vars/per-machine/ramus/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:6/cp0K3a8htco1rlIfExnL+ppIgNg0+/XlPPAx0Ylp/KtDfkQg3OI+Y9zWRX2UN1dHjVVBJ0vDrqKv5OaijQbl14E6U46HH4EjevBmGeUCLmDrsFTNIPqGw+D12LoYuOGwkfonsRO5LbtQ==,iv:Beb8wBVdZvkKA69aCtxGMxuQ9fProDLN4WWKtvKPbvc=,tag:+rpJT78McFuf1wJq6DWyoQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpMUllOTM1RUtHSWJ3bDN0\nVnRTWDErQTV3b2lHcEYzanp2VVhoQllyNmhzCk5zN0xwUVlDQjB2RDRLUzlvVW9u\nYjh5eDdnWGRXRWxoYmp0ZTNEam94NDgKLS0tIHBTdHREQ2dRR3ZFNHFhZXV6cDgx\nRk9OOVUrSWlVZGZHTksvN0RocHFyWWsKfhDdr6qFmtt7dAegVIIb3JH01rGxzvyN\naQv6F6BWbhvMUU3/eJNVerJti1Y/RinGxBLSP58SxksJiDTFBv/jWQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZHQ2U2tsd29qTFQ1aVBP\ndW94RXJqbE9LUkdXeXVsQ0F4TFUxdGo5ZFg4Ck1PWHJGWHVEeTR2QTRTM1NGWVkx\ndG1HMmZUS24yNHNQbjFPMjVNeE83aVUKLS0tIGtiZXEzY1g5QS9FcHlOOWpxbE8y\nbUtrMngrQ0lLdlQ5N2Uwd1ZVWkRYaGsKD+xmS2gjw7o2Wohxh7+4dk2+9Uf7jK75\nFz2RmP6oLNIcWanAENygOR8etcuBMcCPAc08VSEGtjDg9JUC4lV2mw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJYVJmUDNNMWVHSSt0RWk0\nNHlyOU9uYjg2aytjaXVnV21NNDFGUVMyUDNJClBYTUFzNWRxOTNKVmxIdm9pQlRq\nRGQ4am5mSytDOFFjUklGNkJZQ29tQk0KLS0tIE1jQkkvRGltYUExazhKUDlhZlF6\nSDUwNFR0NFdJSC8yNy9yOWxHYUJxSEkKf7bxUdVDAvHnU8kscXInOcIy6vuxj5pL\nBaW5dYJ5yQiroXuv2U9rDygTQYAAiE0g8xZRjp98qzTHT25lG0pgzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDc3Zjc3blhq\nOVpLSWF3dHRLVitOd1BtWTNISVBPVHREMkpJdkxJUTZHbHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4cUZZRXVrMzFiV01QenVJd2oyMXJv\nVENRYmdtazROVnU5d1RkRGp6NVVZCi0tLSBabmQvcjdQQkU3SGZNU3BwVUltN1Er\nZ3hxS01ZeFRFSkZVYjc0UXFqTTZjClLbO5vhBcv+lIMvSEPeuztAL7/L2OttICB5\nEJghMMExc7/kgM7d88q75qEsPsVNgE/4BWzyesrvKXb2gWLosQg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHh5M3BYQ0di\ndkhjL0hDWVZqbU0rTjlkV1NZZTZ6eERTc2JLc1l1b1N6d3cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpXdEY5MFhNeXJRdlJuREw5emJSakhT\nL3pqNFBpOFozcXRaT3NreXJERVNvCi0tLSA4Mms1NzZRdG4wbnUzSVFVVStueXJ5\naUh0NWd3aVJUeDFQSGRtMjdaNEtrCtQQU4t80k6OnmsBcH6Z0hyBPTLFsb9n+/2h\nxWFf2MsBTboevVnOhvEGaA8XhBB2/MrUCGTbkFStfdf+8jyVj+k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHU0dHI2L2FH\nZ3loaEZxRUY3NW51Ty9pc3FYd25OVGtwNG84OUJUdWFCMVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYU3FIZ0crV3NWTkNLR29BNFlvbFJZ\nRFNzZk1iWGRvRFdRc1NGMVlpZGNnCi0tLSBmK0FXeW5SbzJLV1c5Q2wxMDkzL0Ew\nMTZoRklJL3JIaXcvcFJ4bzFySm1jCvY44UAa+HixIuoFn5n8BBqWigjNYS0bhFTr\nTLOcMxGb26VeoWMULZs/SaONRAVbbtCYAbv+ZXFu3GH7rn9xx48=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0dmJacm4vYjN2WlJNTFEw\ncHpPamdqa21FZmJKRnRtRUNodE1NNFNZWWp3Ci96R01JWDY3NFNINHg5MVRTbWNU\nVytLV0hyUmI1YkV4dGJ5MXpuQzU5eDgKLS0tIHhlS3NjVWZId1lIa2ZYY1VFUmE1\nc0UwaTR6NEFZcUg1OVh5MG9RSHFKUncKGnRavc/A4Y24WK9g07ofpdw4jf/Dzs14\n2MesaajLi2pHwSeb48V3c/iYgS3cK4j0iosY+viWrfvV3vRG9FE0Tw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMGNtaHl1MEFFSWwrOW10\na1JQNnZIcjNnMGREMTlXb0lwWS9OMC9uNlZJCkxBSXVJSGdzMC9mU3dldkk5K0Vo\nOG5uMDM3S05jZjdBY0ZyNGZSR3ZQQVkKLS0tIEN1WGRDaGNva3dJWGczWHBVVUtw\nTzZad1FCeTB4UDNsZWJ3Tml6M25FVGMKzXCnA2ehQ/bfV32Xc8mflXfWAim/v/+u\nEqU0fp3Bhn1FIWFCBvh18o20kw+MsE3+zpiY6FxxI2EtrVTMyobXuQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCMmtNaDJLL1hhb2tCSm16\nck4zcEVabjh3OXpuMHFsbnd3MTIvbnVmRTMwCjFhRWNWSUlZbmtuUDBVakRaL1Uv\nSVlYeXJtOWd2UWVuVyszQjNkdldrbkkKLS0tIGJnSThzQ2Z2TFkrNExQVWI0V0pD\nMXNBUDZNWXpSb1doYW9teEZLMW9PdXcKa3zgLXVDJ07cEMlHVGNCKOcUtajRBy7x\nssbScq1+iCZeBk/4k1Ex3kyZ5yfmMe3nE8fS8Mx1HtXxvrHcxLmbgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtakZaeWUvVFROK3ZpQ1ZB\nYTVKTWtNVkdQVE5SeE9veFdtcUJDQXF2MmhnCldYdmZZT3VyZmV3eTNPbHIxWEc1\nYTNSNEhZbExrblRKdWMzUUplQmFGNHcKLS0tIExjQUhKanpmV2xuUzI1ZnBMdHJU\nU05OL2ZaYTEvWWxRTHIzUWUwbU4vODQK13v0k5tac1CYvsESefWacZe+xXUOXWPy\nn/soHGUVG9L2RdiSh4RcZc7n7Foq6GwJqi9wDc8Ms1FpzvuaVdOF/A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:16Z",
+		"mac": "ENC[AES256_GCM,data:QwBGFbzWLFEdzT1bVjV77rtWCZwKXXf9P3byS0+SLRbfyxzRY0+BkzTa+vxj153udYwFkimJX9ywWISUDfqm6FJs6a4jqG8Xmwk1AmSyg585dc2Z26PC30nn4rBcezWBMF2IVFw+pJ65dZq8NSG6EmyHgmzedTOHMis9NZmm/b0=,iv:i/5MNOcH3TcKYRojVKCy0Pw5tHzSzvS8YLLYn0pwQ6s=,tag:96JAFD/kjUKPv1ZnGnEzMw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/ramus/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/root-password/password/groups/admins
+++ b/vars/per-machine/ramus/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/root-password/password/secret
+++ b/vars/per-machine/ramus/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:nSFIQBxSi3uDpuzA3bOUgBaVLxgAMt2mBfrJFqE1BxNpez5eFvDvXcAvRhtj+rg=,iv:Zd+A4RCKxo4FnDQklNKl9OXIjAJi4Ec69SksSSfsnM4=,tag:c4LuluVLBD5X090JeYYV4g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZys0OC8xSmhLd1RUeVFs\nVTJteC8vWTZGZkYvOFRSZHd4Z1djZXN4NXdRCmxCZkw0aWJLMzNPV0FFdHV0OGNx\nQy9yanVPUzRYUXg4L1prMkhtdWFsQjgKLS0tIFhXVlpmTUlPTTV5VSsxVHc4R2ts\nUXh4d2RCRFdVSWxDVzBJOEZCK0ZyNkEK97mBLq3AYu/2UDBM9vUx6ssS+076ld5I\nMW2JnHVOcVZpxVKdRBNuT++ZnxmDCGe5gIn2/rChZWZ/BnjHkvDDsw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBERk5SSm5Pc1BqbmZKeDZF\nT0ZzdU8yMTkxMTd6ZGl3K2NaUGc5Zkk2dW44CitHbC9PbmhPTHU5eHhQYS9HMU02\nOEg5clpqRm5SR01rQ1NVOVpHR3VKRm8KLS0tIDVqUWh6WnA3MXUvR0NFeUlsK0xz\nUlZWL2JZNHE2eHdUOUpORS9iT1NVZVUKyaJNVRUepQssPLcyg5rYhhsoHGfawApM\nLisr6Yo48eSNcwxeiRc0bljmPEGjn9Na5rqPUFV/YwKL9OhkKIuwpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFY3Z3RRdGxS\nWEVDblVPK2pWUjVMTDZDalpLcE9vQ0YvVHRWVDMvT0lZelUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpFY1hXSlNiZVVzd0s4UTl3UHNoUnZ2\nOHRjRThOVzFUSFdFZ1Fqc2o0VDQ4Ci0tLSBMTXQ1aitWVWg0VUI3YXhKNEZzbjVq\naXhjN3NvcEpHUy9RMDdseVJYdGxJCh3+EmDMaHvVZEHPQHfXrIg5uq0/DXpGb6eK\nRfFHXOhH31NOIr3KiwiPlm3B2NmNyHGgZlwwy3xcZQV12ZRy3xA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFp4cjFKM2Nm\nR3NTMXF3RE5zNE5FQldMWVhtUm1nK3lhK3FmTmVuaWw2V1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo0VVpnenpuSjFDYmsvWXU5L0kwdjk3\na1RWMlFIUjBCN3BOWWZMQmhZRk5nCi0tLSAwN2pUcVF6RityMzN4NkV4UjBXRzU2\nQ0J2QUNWd0pIam93ZXZmQjAyRjNnCgqa0WSEnaK+qU0BK5FjZwsUAgtNdH9ujG4S\nEK9w50mUf6sL7frwnYHVFHDLrdCezNxGvbfNT3ed0vr3Tj4VZmk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYTXlqeU92\ndGk4TzBCY0E1MGc1bHA3QU5qYjBMdFQ1TkZxQmNQQnN4MFUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp1VE1XQUptQTc1TXA1dWlTQlNMV2R3\nNG1sZEw0WVJPTEg2aDBTWnUxd2s0Ci0tLSBpbm9CaTU3UlF0ZEI1a04xdmVxTkh6\nSHBXWE1QTmlMdEtITmN5VWxJL05VCk/sMVWhDp4vWSWjPhFdaCoZ6FyoQQPnYWKW\nQ8TApAcEfj1WQ4JwuVlgFTkiq05do5EpVdcFiOCOT+85OruS9dU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeEJJUGU1Uml2T1kzajBq\nOXlTSHJMTGQzbFROZDg2Z2N2UjdFb0l3dUg0CjRaTngwa1RQdnJHM243d1NpQ2lZ\nTEtSYktENjN5OHVFOU1zaXJuaDIyakUKLS0tIDBtbUlueTBSRTgzQkx2ejRwejVi\nRlVIenZaS05JUG5leHRILzRjaU9EN0UKKgKUO9OoOH1oDwuITR4uteDxzZBQi/Bj\nrlaVgUFuqlwNaeRRwtn3dheKmKuXIl1kOQWN1aEPZ08Bg6o0j7KTVg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1SGRla1BlREVqek9EdEh2\nTFRoRmg4VGpaUlV0aWRQZ0w0dm4wRnhnTm4wCk40NUdyaC9XZStMd2Fkc2lOZkR2\nU2w4WWhOUDVXalZuNGt2V3VhY2xVVmcKLS0tIEh3akdjSlhSTnA3ZEVYSDFpZXdZ\nL1Y0Wi9DUFNwTHU3d3d5OEFZMUpuZEUKSg2TBM6UzY54Zx+dfF9ykU6hy/5bANbb\ndDDsmyJ7wwVmmqs1sJAPjcKgb3o/OcdGk6AUaaSToDkOQ9mDQmZDhw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOWldVNDExcnJsSkpCU1Rt\neFNscHl3Y1VzZ2xXWWdNL2lmMlYzdHFjeW1ZClliNFhzQWtZRW05QUJ3QkJuRXIr\nMytaeHNIS2RwWTNSYWNnblpPbFdyZWMKLS0tIFZjNTF4akhMZ1pNRUdiK0ZhR0Rv\na0dXS3VWbjF0aENRYjdsNWgreG1MSFUKZjR7FaHpHJofgXUBNP0eaM3GzVf9bb7j\nwNKqEs2xmGlw9yzBxCNkkmqwRaT38/2a4r3CfIzVMEWeHP9/4LTFhw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxTzZoVXN6QStEMitPZXNQ\nbTB0S3lwL1JaeVFRTmpSWVVtSW5LcUJBclRnCkNTTnUwYXBpU2dJTWF4allLY1VP\nNUo4LzdGWGdGNGRkQjNYby83U1BEQlkKLS0tIDlHVkJ1YVA4ZGJ5TFg4UDYwejMz\nZFUyMWNIeEI5VHhIc29rdHdSYk50V0UKyJXjwEZ3amIFPp45PulmPHI7aTXPa4wd\n0p4Y3DaXiLtf6hRZ2Xa/uz+wExUFhEdQFnMaBbdVufD/VK4MA/ZmLQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:16Z",
+		"mac": "ENC[AES256_GCM,data:DpCzrb2qMkmcTpIV8LhzRzT/hagY3zDw+aRucyey0tLoego95ZO/pPPRd7gzfacWlYG3eioPvcwnY/brCmU0tyByEW1gNT2AHii8VIiLoHzaSJnDYiwJOt4ocXhuLw+CRK+od1TtGXO8JJimDvG6YThkR1cNgkFibz55DrL8QLk=,iv:qCNMZXNmjhEAJy1u9Mh/ebn/ob9ujoQoTqeYQ2YhFiQ=,tag:XGoM06/Y6QZv5b4QEgterg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/root-password/password/users/kurogeek
+++ b/vars/per-machine/ramus/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/state-version/version/value
+++ b/vars/per-machine/ramus/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/ramus/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/ramus/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/tor_tor/hostname/machines/ramus
+++ b/vars/per-machine/ramus/tor_tor/hostname/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/tor_tor/hostname/secret
+++ b/vars/per-machine/ramus/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:O8wgyBCYMCCJGb1B03E+vc0X7XNL622vGUa4Tii/46LZvoweJvX3S6cQckqd1JjXaT4vj1cZ/jVBn3dsLhjg,iv:kG0YGJGCCTfVe8K4YKrT7ftLZi8d6ySZ+0YD8owgWAg=,tag:psjpCVf2cGMRip3BIVh1zQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQVHdCT2tBRzlBNElWTm1R\nOGlLN3FiakY4RmJjaUJCNWlZbVNZU2ZYc3lZCkh1Z1IyUjdOS1dYaGNwTUx3Nzdh\nWE9HM3FLb29CYlM3WTFndmJXVTBDeTAKLS0tIEVYUmMyQ0NIeVVLMDlESndNYmMy\naU5ZeDRmQXhBRUt1SVVQQXBoRHpPR0EKgQ3WcbhndlqXEsLHKAc74gxUMUXCeHEF\nMjJ0e//Csqg/+jVuCp/IYw0uEKooSehs1hvtz7ZPGKRdW9bsncxc0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWGFqajRJS3NBWUcwREdM\nRFI0dW1FRWRjT2lQbmlaRWF6OW1Gd1A3QW1VCmxzd09pV0JRbXROcXo1MjJpZmxl\nZ2NzTGpoamE3Q0xIbFJ1eUd3aHFFcHcKLS0tIHRSUmtiaU9Ma0R2ay9pMzVGdXlo\nVEFlK2x3OFRoSVV0eDE0UXNnNHIzeE0KC4PisOp+kK3oApKhrHKaW74+sN3ExcoH\nS/6lEFO6TyLONqAKzK199n36ZeWtQ4/TDQfS6OHs5092yCuEBsA5dA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM0RxK1V6aWh4MlRVWUZL\nNVIxMWdKOE5pMDJLeDVoREYzbXlNS0FFL0FRCjJHYlFENVNaY0wwZUgzK0krR05Z\nZjhVUElDZUdoMkVha25obU0zS213Q00KLS0tIFd2T0lYZmliSE04UFdEVml5ZUE3\nb01pNVJ3QjZuNU41NzJ4RUdlOUNlSncKW8yzymtjHOYaIvlX3ZZ/UyD88hZdWAaV\n2j1hEZaUDvQBtfIXdFAGV5EZdlh4KN0V/o59wRQKIe4SUsY62NJoxA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFpKZ0cycGpJ\nM2UyVVFTemx4MWZWc2s4amZqV2hJOFIrMm1yeVNzeEZvM2cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4TWppcXQ3M0VHQm5IOGk2NWNqSnE5\nNHc4eFl5bEY5cFI2TjVENXdyTkxnCi0tLSBnMmRzd2FNV3JKQXlnNmlnRzFvelIw\ndnF1cnlSOHJCRlVyZVN3WkNTL080ClORWSmBattkhGb8CBUDkrLinpdkZscFQxwx\nQOKwJ0ZqSLRucXBC+0DUN7MhAQY0U+JH7YOYHGqHtZHZc4Jyt9E=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHR3RHdrVkxY\nQlBRU1FiNEVBckxqZlNLa1NUTW1oNkdtZ29Gb082QVhKQkUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwppb0dzTEd2UUhQVG4zcjQxcTNCeTJJ\nUEJYK3FrUkV0WnNBaUdJMkNaT1VzCi0tLSB6enNYNWZCbE4zK3dyTWhXSUd0VjN6\nOURheFFDcXc3WmJyNzVpV3VYTkVnCt9nWs684U44p5578giBIExd1SmUXnoXRl0c\nu9JXv4r+1I7S5fVdaAFA1EPnxi4DNYxTxkI/UTrsRjtdVFdP5DM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGF0RDg2aUlw\nRjI4cUtXTGtKOFhwVVJtbUdQVjlyeFdyaHZ1clEwa2VKQkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxTlpjRmxzMDRiOGxDOURXMnJUbnlQ\nK1dSa29iSUVVZDJQZXNGNGU1U0pjCi0tLSBzSlUxL2Vva2srbWt5ckorc3owTU1t\ndWNRaHF0NDhBaVVzZFE5c2hka2drCiBm5tcYUdm2W+OKe7Jl1wJoc4nxcyjxCVX3\nrRUkUviSTWz6q1+YFdHbn8flgjtxTiCHasm6qoCp8T3FwbNyR/s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRVVJQ2laUTljdlZqUGhD\nRndrOEJYTDc5cFM3Vi9ZRVFEcStQNWxqYlU4Cm9kVWJiRVRSUUdXWTBTYnFMV0hG\nczFUVzZ5S3I1ZllLakZ5RVNPMTRhWXMKLS0tIGJza3ovRVRHUEZpY1FYaGRFbHRp\nbHQxem1ncHZERjV3L0JGaEUzQnV6YWcKdMWQKHtTWkb851f9c5KXo7SMfkmQH6tl\nc8qmHjP4LSK8pkltFNi7CY3sAsKP7yqRuFNgjX4o39EStXyG8K7e+Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5QnpjRngwTSs4Mk1LeER4\nUnR0VUY3ZTJPNU0rTDhQS3UvVk9QdHByc3gwClZKcWhZM1lCRitrUlNHQ2Z6Tm5h\nYmF0bzA4SjVMT0oyaGwxQ1RIN3BSeUkKLS0tIE5pWnJIOXFpVlg2b3BZMVR5K0RS\nMU03L1JBcC8ydXZCOEx0OVBoME9FK1EKT5HOMbu0jdYVywWbj9Vpi/ENVpyKaIKZ\nGDjPXAbtfKm5o8NKnPu0LvcZ+m/mBtzI49+O5U0O7pv86ccIafzQ0Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWENWNkFmcldpWjU3K21N\nWGs0ZWlxTWhhQWsxZWExdzBlYTEwZmVXbEZzCmU4L1RQUVdNV3kwZHpSWkRSbTF4\nRHNReUVqYmtuOVZHeE8wVG50bnNYb1kKLS0tIFJQNnloZ0NNb0V6TkUzWjJCVUNh\nQXpPVEZZU1QyY2kyOFlvY0tWRWlyT3MKfiEPCDNdQtheZS+eSa0fVvpSgrCpxb8N\nuTMa6nMDbZbdq5EIeb6Ik/dvdt9hp7oD6rfOw7Kjoa/gpgj1OcFiTw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTlN3eEpUMytUeUhadE9q\nb3F3SFJxOUNXRVBpQkdKM1VrSUMrdFV3cGw0CldMOXJJUkgzTXk3c0VZSXo0bW5H\nU204NS9kK0d2ZDhpSnhBd3BSK1BNYkkKLS0tIHY3NG9oaCs0dVVrYXJBMFZ1T3Iz\nVFBaTmt5TjV4Q2k2a3p3N05rV0NJVE0Krlo829RhTrF9c7wShMdzQiNibpZLtD8l\nPhOrG/Su4InWaQh0OGDDouxI4Eqm2UrZhqVqAxRJ2g+7X2Pf/Wt02g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:26Z",
+		"mac": "ENC[AES256_GCM,data:JvRD52lIEIsvbzzwp++0y/h+/6atpRjOh/Xr/YwfAlMS1AjiFaBLWmP/xnAiJCUQP9t9v7U2OiiHVo1vmQVaMzh4E7v+bR6O8YuwEKfPH9LeFmZPkSHCBZZpwXylDAJFJg8jF3tzFbbuKLn6RvSew20EJ315EKh2eQJ/+jxNm80=,iv:mzgupwJ8JVb6m2URvJvzoBjDoHctS8bW34x1sPhQHQA=,tag:cUhi1C2OKrvcWqEX2wcaxQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/ramus/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/machines/ramus
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:G80mWuSb7bJ6HNdk4loFypfV+yq4cg/mXN0PJXWgnfhY9FcdEfsY1V1YPdizoVAFiEAcLRryxsY1daHvWDvpkhQlXGIM1gA9X0yHLCCidbJkFBHc6Im727jfFsIR4V/4,iv:QlV3lciRLUieIFszKen+i8Uvy1PKQ4VSQ3rFfnzpyWY=,tag:But89s6We8mrmXKJqFG11w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6VE9uSkVxZGVIWjhXenJv\nZUpYOWN5K2xFSEdCbWlTU1psNnVsbGR6N21JCjNKRTV4VGdua0E5T1VXNkpocGEr\nRFJudmlhTk53UUNDVk50NnlYRXI3djgKLS0tIHRWQkFGMEV0bDUybHNPdEZHVWt5\naHU3YW1nUUFzc21xNjJ4Nm1mQlJ1VHcKsUZUgR8QA0TQEawls6DW0EnVIbqCk6Hl\npwGjkqnguivb4f/lgxGT5aBMRv+jnor422rxqp+kuOe6R4k5+s0Hug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3NEo3Q0huOUN2L0d0bmpB\nOXZlNnVtQXRXL2ZkcFJCVEpjTHJhZEVtalU0Cjhpak1tWE4rSW1XM1pLbUlwbjFH\nM1F5WHJGVjd3NFpzTm5JSzkvU2FrUjQKLS0tIGEzM3NhVVM2OURTNHEvVlRML2pD\nYUZSNldoQzhCcGN6Qy9RUU5LN3dYb3MKweLKP62ur/Eeh75sIhFOoVveMybkLPRB\nvtiWRWATiDnYZNmNlIci7jOtSJ/Z96q/11UaNp81Ghk7kQEkqv4Xkw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRWmFGSkNjbFRIWERFeG1F\nM1FTcVgxbTJRSjYrNEFCZ0MzaWdEYjRXZHdrClV4RDNydVlnOFVLNTJYcm5XeWdZ\nRkJpS0pDN3k2K0FHcFQxUU1ZbnFiTGsKLS0tIE9vTlV1S25OQ2J5VUFFOFhNMGJa\neVJlT1FtNFpEWWFNNGVXellYQ0hRdU0KXydH3UO8xW693FY+OIrcVU5RCbUdec6T\nQI2WZbwZwF2FpLbUnf6x2PJ2ipg3ei6XSBgp1ktcaUgeol7aw3WyQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBFRG56Qllx\nckpkWmxiUjV0eHYvUEhTS2o1a2hRdGkrZ3dDZkVpTnFIMkEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQozbWtaQWRNS0l0ZWgvblRXR01kNWtx\nMDhYZmdZWnBRQjJhUUlMZEh0TXVnCi0tLSAzMXc5QmFkVFFzWFc0Q010cGFmVk1B\nZFg5bC9PVkVhMTNTQVhjTEhRSHQ4CgB10JWdIuJZChIZG5E3eXhwJ+xHnbgA3CCT\n0waHJvPdZNmNswcs1KORDzkacpJO4pd6IYCr3bZpF3BqptHxYZ0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFYvWE42Qy9o\ncDRlOUxqd0JETVJ1ekRwaU5mN050MFlBQTNGVTdrM1ppUXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4cjRxdXhhMzlGcDEyUGtMc0Y4bCtw\ndzV3M1ZyWTVUdnBWYzJLbTRWallBCi0tLSAweG9wanhNUUpSMFFzd25tUEo2ZUVO\nWU84cDVuWjZtSTJxZmlERWQ4YWtRCqhcxU5CYqDGpblCHzvW3bL49aW9daZLwVkC\n3FI6bQOO+1+oA8yhaWY6BKEqyibx4jOwrLnyVONrnlShuVzkUAw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlWbjdrL3JF\nZ0ZZVUxubTZWL1BZR0tiRWZUVUVScWNmcStua1RUWmx1a3MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpzTXcranBCRlRKUEk0TGZySE1jMG1Q\nbGdhaDBuRzJjOHBtSmNNbHNFb3ZvCi0tLSBNRE5xdXZWbnNiZVhSOVlXbjZKRUFq\nMDIzREQwYi9oQ3BqRURQQmtLeUJrCjvOLQcFS900yJFdKGlZIkE431lhiS1cDn+8\nmATXAgwuunuVXyJYOHNlC1kvup0aCKJUJP+u74MuNUEVnks52jw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5cGlwU05Xa3U0ek8yUVdz\nQkFQWFRGc21hdVpLc09MUktGZDhzU01iUW5jCkZWY0xQdkwvbUJBaTJwaVFyL2Z3\nWDF0QUg5ck05N2RvNFVYcmgvK3BnSjQKLS0tIEdnNFJTemNnT1Y5azVwUUx6cHJP\nSU5OWGdCbnBMNzZVYUU0SG5kM0RmL2MKIYO5UDMMZJPsqWoJsjP7e0jJ0vtqq79o\nGrm3dE2Cq/nG/hZHZlZ57is+NWIH9WoEI2VaO0YqsQ+Zdp8eWOK/ig==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Ny9Kcy90V1pOd1JONk9q\na0RGd3lIZW85NHN5cjNwNkowVXBhL3F3bVg0CkIyRnl3cmg5UHdRMHZjNWgzclFZ\nc0NLODZ6cllmejl2bk5ZalJ1a1JMc0kKLS0tIHBNMTc1K2xhd1QzWWdXQndKaTU4\neC9jYk4xZ2FobzVNaExlbE5QMUwxZzAKfYGVLCVctVVtq0XlZJv+5gU1iejWy88H\nuLC6e/K2HJWHZ2XFCf1udWzp2eIB1ddM97m7vnAXcMDKfPRPdyI0ZA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Z1BsTVI4QTUrL1UwRDV5\nSHljMXN1bGlaR2s0NTFCa0YrVWxWT2gvYlZZCnBUNnZPbzdlQnIwYkh0d1diMGp3\nTkNzaTZyTHBXdFBWL3JwaFRFQVN1RjQKLS0tIHhGc24vbDFYR01teWhZQml5eTZU\nbHJNR2tDSHBBUi9EUkpNa0p4RENzcGMKc+TMZEWPWd3yGPGdmXNxeJr6nzDa9Erl\ncl/bZyLthkoSZnYj6u3gRarx3pvLLC9Z0SgLCxgN5ep9DwQtXa5X7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmeG15eU5SOWkwUnZmQmZB\nY1NJOE5ZY2xBV2podTBUN3hCcDVkd3JrYVdzCjFQeGN4azlXVWw2eXVQak53WjdC\ncytoaUhqWEgva3dhTVp4WFdqbnZQSjAKLS0tIEV4Skowb2xPVkw1TFlpaUhwRG1D\nNDFpR0NzOFFRVmN3ZHdjaTJOUEFZL0EKSykvmqjT0QMUvmNhQ/1amP9CMsce41D/\n5Dk7/UuJZX7UsfgRF4qDDYb1CA7Ol3zOF4k5wNRXn0Bnki3ykBsWww==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:26Z",
+		"mac": "ENC[AES256_GCM,data:Tkf+Pg9E3Ip7SQkhhIQIPYvYgVxDz8pStTFoGXcnSA8cXhLaN43jhxz5M+FoBMg3oxU3u2pKeCzFaSyCwHdeXQZkfRwMirH7+QRj0kV5Nki9jlLPo0VRUc3aaF2BAYM14Ol3V0LbWxUGQKDwK/HONLqCtR4pKuhaDuJwgL8iSPM=,iv:w9v57yRsLM0TvcCXOQBUGQnDrMWwU2O4dLh5UKbwon0=,tag:FXs7YrHzvdhA1/xjuCU7mA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/groups/admins
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/machines/ramus
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/secret
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:WY6kTgFo+10SoJYmL7+PJqmcdJQCEXvph/mo5Rc5aXM8x4yuBZeCModRwYBOYNDrMtaZI6xr8wIrZ1vb3dh9/CgxwiWRyu0zTB+d6MhgHCLD3uZA184A29HFQJmLPV1jbh1EopPLQlBztw5dzFqN2+vzwWvt6nFS4mCFJvVq+L0TYQD6r7SJzrIofJpGnBFwiFqVh5NVpmAhmlMJbbK3vKy06//AUBP5e/JNz5+J9MkPGhiehBsEA1TkrZ2fuevwOlOONAF2zWLNyuvMpMH/+Tf8KFwQB76/IGXLdRzRECB+A1rn4lSDeft3vnfZcqwIjfCOgTcVjQSPdkwIdblVpHiKBV/t3msyirVKhvfr,iv:fW+jdFVFfpWWy9jpa5yQxbcYJYMIVWlEWmUjBXRqtE8=,tag:3RfYjX88RuQoyoTOWk4UHA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEYTM2V0FTSEZGaEZnbzA1\nZDE2aUNGK1dHZmh2Z3lDUjJYbFZxS2ZTL3dRCnF3NGJ6VVJkRU9hdmlWOWMyMzNP\nekgvM0QyZFFYVUhFOW5PZDE0dURWcWsKLS0tIFRRR2xuZ0RqZnM5clNHdlU3SFN4\nTSsxajg2M2cxakpmZ29iNUVpOFBOaDgKRgDL0V1nC+7kKzQvMKhBRTUt2bG0BBYu\nYmhpay3KKWsG324MuV+n3J6ibPRSwNhYg6VjdO0lT+VfhT++JPg6Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVeC9sN04yeXF1OXBpSEZ2\ncnQ3dWFFQnY1Um1TczVIdzBBMXE4em1pL0FNClhVUEFpcDJpWmhFRWxydWNnbFUw\neVNEZmRiS1Y3TFR0d2dnUWMrMVJpYUkKLS0tIExOMUpzKzZzb0JPaC9VM0M0aFk2\nc3RWcTR6NW9ibDVjMWdtY1BIUTUxdzgKkoqAtuMI3ibOx4BhjaFgka8c/5OCXyow\nUJOrfZtqVJMLYmmtAN/BZbk3beLljkmXie17MjGtH5eVO/QhAcDH7Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZGZRZUJBRTBqUk91UHh1\nZDRMN3VTbk02YWdnSVVqZ29zb0Vmc21HaUhnClJLT3V0NC9QWVF2Z1labWkrLzBj\ndEQ2cVNUR2xOUGhvaGYxWEkxQ2x6UDQKLS0tIHU5TnhxWVhRSXpaQkdFb0kyVEpP\ncnozaHcyVXk1MDVVNm1UeXNDSkFOa00KiG6pbbAW2KfjUfovP3q1ny8eEZ5zDkV1\nMa1UBEoIOV01P+vCXeVm0bGmR21/53lAUhIgQyJcFJIsGFuctKo0Og==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9tYm5qa3B2\nbW96bjFsZDNZbHd1T241QnI1RE5MR3NxS0dtbWNZWDhXeGMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4bFRwbEt5dHFXQ2tPN2J2WEI1RDF1\ncUQxVnFDbDEwSCs0dVhEVS9OeVJvCi0tLSBOb3l2VjBGZGlwRzFtYXFyM3hBRVg2\neEtsS1FNdU5CVks1UWtmWkxob0h3CnD57mICPa91qa5uh/9OpSuwkKIzUynRESsc\nvaNYEGbHB5UI1gysjKr8CkjJu9jRvGYF58CSQMr5UXuXppVb2oE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFFJRXBVcEt6\nQVpBRGlrS0JtWmlXVFhkSkptc3RlOVFpWjhPRjRlNFMrd2cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWZHpTWmNpVkhEWWlGS0pHajJQSUFV\nb0cweXpaOU4xNGw0SkFWbXN3RUMwCi0tLSBQRnE5UE9zZTRSbUc4OTdZTjJMK3ZP\nM0JjdHEzWDVYNWh0emtBakRwRyswCnQo99tq/B+eABVaxmNrYJgiPsURV7AV97+9\ndokjrWgaceiIWGoElr88TzefzZn9NGsQtdhrpqYMBmYFepZLW8A=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1BWWtSRDFD\nYWpwakFGQS9qL3hmVWswMElsSThIaUxDS0I3RVVmaFJOVXcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4TEhiQnFwQUJOMFErSjgrcTQ2L0Mz\nemZCckQyYk5aamRYVWV2OEVDZzBnCi0tLSBoeDBsOTBUOUN2S01CUndnS1F1SXhJ\nRG5hbGZhK1JYK2d1VzRQK0h1RnVRCoB/9J5g6DeTm+ZtyU7a0OAXYdI8jgBCMCHe\nslOAG3rdxXIEVnzLJbCqApAbpCaWPfR6uV9klezqcLLn/S7NwFk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQnltSEdQSFJzS0RBVG10\naFkzRis3ZGxLUTVEMXFaODQ4VUwyWTlvNndrCk51eXM1cExSdENNRnpvWFRDaXFY\nMXhSREVwb1Jzak5MRFdDS2FjVFRFOGcKLS0tIFdjV3YyTUU4eHJ6R21DNkt1ZFFh\nQ1JUSjhDbm9lc1FhRFBOVnh5dWE0dEEK80RUCpj6DS6qq8HOC39J2BwRPe7WSDPp\nU+gnoIQjVg6ZtSF2BLakK6ZIylTGn2cZihfUgvEnyBU7QR70naccmQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1emkrMldpSGZGak1FYW5L\nUEFZTHo5dmJaYk9tVzZxeGNaLytseXpRbkRBCmxJbGhRQ2lnVU9TTjd6Zklxems5\nOWtFWlhIQkJXVm9KeEtVckJoS0o4QlEKLS0tIEZqRDI3VjRHRVFLOXJVOEdhYkEy\nbU1jaUJ1TGUxeG5qMjJBRjh1TUtQemcKCVVn8eyZhg5rL2nBIJeLaX7r2kNN5QNN\nIvd3avnE/FSz11JXXPtOdMx6NZUsqoYAgXz5BazcJHqcr5r3o4xknA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBa2lzMWdFTTkzajlzNEVz\nYW83aWl3ZnE2Z3lMeWZ0UW5KbGxZbTlwSEcwCkh4M21ES3h1UUYxSzhIdGlIaSs0\nRzhMMGhUb2doajJuSkVYVEtMQzI2dVUKLS0tIHU1SEpQeW51SnVTYVVnVWZCdVl2\naGtBTllvK2F6QklTYnVmNE5MRHF3aFkKou1VSbbf8AZbH/QW/gfSRGMolku3VFyX\nTsquZfgHUL4T0aPO9kDMT08I+Q9B90g8/9Hn89uCvAks0XwjGfpULg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1ajFQKytkTDMrT1huakdY\naDVBdXV3UHJKd1pqcUZiRXNhejZmeElQWGk4CnB0OG04aGNXbUxlUmVaNDdSSk1D\nYjN1bkhscDhkU0hGV1p3eFpJNFo3NmsKLS0tIEp2dkpzMVh6TjloZWU5UDUxNXRn\nRmtZRWVOSGdWaFFES0NHZlA3Vll5K1EKOZH9n811NgBJ7ULdaMGUrUNKu0xgOV7k\nIIIOZFfRGs2Dk614XhqLu8HrZFjkmHRvQYXd41TsqUGEjcli2SbIMQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:19Z",
+		"mac": "ENC[AES256_GCM,data:f3sm1jjZNFehuasCEtcsWbh5Co+qinsFvvr7cSLp+GoBN/ZU8xjjHsdwc1VMznHmgaYv0m5SueqQXKQmrx+mkfBUHpWrY2X5ZdyjnDpBpInn6TtH0sQ+up0cS/x50WbIkL1eOlOcERHisd9PMOPpjm6lwLGFtK58tVL7cNERuPc=,iv:A38W51dRFKHj94KRNavFoCX3zXScWVzpYfBf9ryLtiQ=,tag:OPgLqBylcwlU24f35ml+Xw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/users/kurogeek
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/zerotier/zerotier-ip/value
+++ b/vars/per-machine/ramus/zerotier/zerotier-ip/value
@@ -0,0 +1 @@
+fdf7:d53f:344b:8562:2599:9369:62f:7f3
--- a/vars/per-machine/rigel/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/rigel/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/tor_tor/hostname/machines/rigel
+++ b/vars/per-machine/rigel/tor_tor/hostname/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/tor_tor/hostname/secret
+++ b/vars/per-machine/rigel/tor_tor/hostname/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:e1PQg24BAyC/h/TwLf5Ml7qZ8LwRtafcFZfhaDXJKjHNYWsn6VUL9xsDsAs7Eg8oCcuSsuZ56JVxVBRa9Qzx,iv:r6mWwkK50GGGY6yZhTcB6lBfsVJ9AZ423YP4bRAZEyk=,tag:TNjYH6l7twUqh9OElovhCg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNDhiQ2J4dEtaVEFBR284\nRWxnSlR0K3lQZ1g2cnVHMFE2VldUdURCUmpZCjQxaWRJdWRXS1RkUWFqSFVkVlBB\ndHRGdDZNOElZQ1JUU05adnFDZEUwcUUKLS0tIDB0WE5hYU5keDFCRFlOYktkRXRu\nZFZadFc1VEZUYVhTV01ocFljb0xmL0EK6SnTbayrIDMEd8gNS9q8ZNtObhfCfTVZ\nIfiaQSXM6JYKk7HeighAVBsImX9FhS2KXNNvGVF4SqfJpmdCmK/wLg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZnN1dFJUR1hVT1VPVU45\nS1R5MFpCM2lTRjI4Z3NLeE1NWXNlVExnanc0Cmx3QTFTZm42eUczeUtucUN4WmJG\naVc2VVY4L0tsZzdRblJzdTlPaE1KbkEKLS0tIHNIbVV3eEtnSE5odVFhaFFsSDZH\nd250a3hYeFpCVlpBcUw4eWQ4RkZlcU0KG9W60ipSpyxTivKSPz1RaSxombsnPpPU\nq9nNL2qDalk9fejRKzuaB9Dl/CeTzFINWcPOeNB3btFNvaB2co2rIw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNvOWZhL0dC\nS1czN20rbWIrYi9GWWFWZTZacERmTnR2elRsQjZwcFhpa0EgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxUEpjMjVNaDFyNjJidlJwWEJONmZF\nU3RkelpOeFgyeHJvWUczaDVyVTU0Ci0tLSBlS0FsdGZmblA1ZHhRM0dqRkpZaUJm\nYUttNU9aY2RIZHhKS3FoK0UyTEtvCuvJ0ubcMiLpb8BAy4S8YcLh85YNOOH8bL7R\nx/DUPMgNNTUOcTQCIxd3uVDpEogPZpU7kPGCNLrzLy++VZ89DGA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDVqeFhXOEtP\nWUx3dVlDdyt1ZlovMkVnOTNaeFFqWUcwSUlwM2JrT3RDQWsgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwphWUJVRE53Wm9MTGI0aDJIbk91Y3py\nMHVXcS9YTC9xMWhJRERieEE4V3ZRCi0tLSBTMmhqbENKU1pHVTdzTDI5RmxueTIx\ndERlaUJxeFNnSnpJZURla2dWVDlzClJmwTADzWkCmPYcCuMUtzAmBL+vADhpR0e6\nk5AjAZMTWmGUag6CAJ3wBkvTl/bDJa3lDTacoJGjx0lzby11xRA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEVNa1BWeDVP\nUzJGd2h1WU9Zc3k4VjhLZ3Nyd2VVTkxVcDFUbjI5OGhTVjggQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpKU05Ca0dDVnB6SE9PbUZremJybTlH\nSXVBbi91R3dzRE1SVmpzYlZibVdVCi0tLSBRdzY5QVk5SUZYVWdmVGVGNFlkdkU4\nTk9YRGh0YUtnRURRL2xFdzRXUGdzCppDAlBHkWAlaCYvIXSRKebW1iSvfsdB++z1\nFC9BQTuvc2Mb8TqRfb3v6SsYUpYzJRzP6k7mXDC7MyLHZzYcOoY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2VGt0MFJDRlkwMXlUbnBq\nVC9CVllqUTdmRGJEZmdTczBhUmQ4bG51VGlZCk5QSk05a1dnVll0QW1POWJZSzFR\nZFJaQXVuMFYxU1ZmWnFmdTVOL2FnUm8KLS0tIFUzSTB4cWQyWDd0RGtUKzA1TUNi\ncVRoaE1mVlQwSk8zS2x5VzUwemdKRU0K3GACITCbRHvY4uOPxRkm8i/sXAxLA2p6\nsej8dfbn32MOnuMQfJNcFEV5mHtOPccrdcrYcvsvbXrnzCDn2sLZTw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ZTBoZFphMzJGOFlHczAr\nVFhVQmJJSVFQTGhLdGRQczBxbGxDN1NvVmlFCktZdEpVVERvQlBtR2xYVG5VRWtF\ncEF1dERhYjJIMDZmeFNHZFhwckNZOGsKLS0tIGZLeUpKVlFRV1B3V3ZVa2ZyZnZN\nQU9BNGptVjc5eUNqcTNsY21GNyt2ZUEKYyScXaKz+w1ZnR3gDQmcC4ZNCycYN+D6\no3lRzyOTIQDm4d82KvcHN3ZZulJ8KY3Qp2RhkEWTbXXbrrKdtk4oJA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPN2s5TldERlRGWHl5VTl5\namxEVGVKaC9DT0I1elZKTTdyaXBndTJRQkRrCk5QK2Q5dmlCc3B0d0ZuV2R1UUVM\nTlRScVppYlZWd0g2b0VueDJTcWVYeE0KLS0tIGtrazhsaldlRkNmaVVWT3FtbVcx\ndUMrUTcwMXRHUkN0aERHd3RGWkgwb3MKCVtknJ6vfMz+MprKzma4o3xYMP/9dsfq\ngKuivAk5ykUusEmaoXKlRykco0z+WQ4wT8K3SBgmpaSy4dsoZp/qTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWRTFpVi9qSStsSzg0YUw2\nYVN3cWs1OUdqdGEvdXUxZUhTVHhESUx5cDBJCnR3aWdaVmVNUytFbTZ0VVRJZ3RT\nOGJtaWl3ZWVpTUl5TGlJc3ZKd1l5aEEKLS0tIDd1NnhDdEl6V1RreEtkMDIyckRp\nWTBkRURteWFzZjZMYWVWQTNxbHMzWmMKJQEGckqfS1mQ+SdT/yZCCdb/wzUjWfsP\nm7sYOdgnVfmA6GvU7mrAhs3Fpne45EIcG9jJuoI/tQhgmzY2y4Jxuw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:29Z",
+		"mac": "ENC[AES256_GCM,data:zmmnwXeXQwkx3PLQLHIM5wpnMEaqulvfK9ThnOTl38Mo1SUyuuSbVwSz1CCuewlr+VBHeSOMQ6ETrSthjAeVCr840pa2FDSULqg4300eXV3IcbmZXSEgJ+law+SSUd49lPBAlBYLPZ5goYYXMuPQSPnHB8u9QC6EEiKXMd55cZM=,iv:zktgJ52cVMq2xPbWtI/nizLrMGFAhBe0ozPMfCKYruU=,tag:F/iqRpeiRtRWkNuaEHpp0g==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/rigel/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/rigel/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/machines/rigel
+++ b/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:jAwEDPHccO2djt8HrUe7iYPigpfob4JXJKcWo3Oar7KE3XYW1TN6vFgXcH18MXqJU9XG8BHIb3Ppo9s6CsYX/WVVZng3qHBcuRCbE77brZFKslwVxGJaldk+0nWM00if,iv:JKwpTy28T8wxTV9ljOE09GIp6Rbp7h5x95Sl+hhK+88=,tag:2QCkeW8czhhnCKUQjKmx6g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSaGpDYUpIWGY1a2J2WTBP\nYmhwY0V4N2V0bUxoUHhCWDNTZ0lPc1lIZm1nCjM0QmYzQTV5aG1IYnE1T0tkU1pq\nK3lJYXNTMmNMTlB6U2E0Z1RqMDZGV0kKLS0tIHRNOUNMK0c1a0U3WjJHK2ZtdFZM\ncG9RVzBZR0F5Z3NXVFV6Y3FaL200ZWMKczpQcllSa3gFrSV4ifZ3GV7tPHDAV4Vd\nA1f9ahOVqcOi4HZ8Pb0B8HjG86C602RsiF6aHO84u40zgfMlM8ZnpA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRHlTMHlqQmUzTVIvRkg3\nUmpoME9CTmtIUkVKTHhXdzBxOVlJTFVmTVUwCkd3bTBOVnM3bkh3MzFieTNrSUF1\ndTF4UzJxWkxYTUhacWZtMW0wZlU1WlkKLS0tIGpGbGQwM2NHUGI3WkZpVTlnY1Z1\nSXI2YXZUNzJBR0lMQTVxK1hYS0FkdHMKamd3R2aGBX7kdTGVeH9h4NYhlCzZGgsv\n9Qhi4isObMShq6poKaZZURMCjolqHdvtBNKUgq0pBUWC8G35QDUPzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9CRUM4UWZU\nWGUyanlHbzBvS2FJMFhIckV0QnlFVXJMTU0yRXEzWGw5eVUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpkK0NNS0RteExEV2MwMERhV0tSaWt3\nbUxMblJlVnFqdE9oYXU5N3V2VjNJCi0tLSBGdmtCMjAwL09SWEFydmw0ZnRzSDlV\nV284dmszQnRkNWttTHpqa2RMUHFJChhK9w0LVsBB4X/PBdz3HDnaQ8k7tKge2ECu\nKeZmZLPFcViLDTsP9C3x/s/4vA0+4LXsIqMu+44ESkHR3Ulus4k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG5JV3VtdThq\nZ0ZSL2N5cEtoOVE3ZkZnR3U0RWhpNTVkWW45VGFSMmQ1a00gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpqdHF2aDBzV3pEUHhub2FWTE5kd1Fp\nWVFXb0RvZDNYVlRlMG5ZK2MybEJNCi0tLSBXOUJYeG1FTGZIcGpYUE1nYVhLOW9B\nU1hDNmdxQkk0Nm15N3QycUxnK2FRCvColwc5hdwv4AQsGaFm1RqThe4bSUU0P1D2\nxGr2Lwkm9AXge4O1ROQ5YhC9rh0LzDb9/q7A60bnMR8pwDkLPe4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDI5bzZ1cDc2\nKzhQM1g3L1BXYlpRQmQxOUQ4aUcrcEN2L0JzLzhJWEJ4VUkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIRi9hU0FiUUlwSWRaMXR0S0tUS3dw\nekRWdVBwRXg0cUUwckw0RHZnckxvCi0tLSB4ZysxemVLSHZLY3dQL0JFTFEvc0FU\neFFTTldGazczTVRmS2QwU2VrT2NNCqAnsGziwZFUsTWJYYG1wV4NhZBMYSaLxokM\nr2u5Fau7evgBO2QnVq6+yjXGhX/twIZ3JBckQjW2ev4Fofn+L9I=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTGQ4eEF3a2xUdmxub0I3\nYTVxd0FQSkExcGVmMnovTzF3SEdqK01tSzFBClBFSFdCRUdBNy81OFNkcU11TFEr\nbm0xbHNNQlBJL2NOZUJSaldMaU5qczQKLS0tIEtOSFY3QWYxOG1KaGw4U29tUXZt\nMGZkQzNDWmlFY1Rvbzd1SXd4aUUrYkUKOQCbssbHQl6auSdEBOznja+uiz7D04qx\noSf0MePQxrYOV5shAoDYA3Uykd5/tr0Mqpbuj9crLy3skFLCh4KtZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4c2dwVXQxYSsvSmlzZkND\nNEpNQjRXbnpFK1V3UnZXMVQvVjRxaWJJNVVjCndLWXl0Yys0bkRBbjB2UDB0N0dJ\nQ09YekUzbkovUUpnQmF2QzZiSHV6NFkKLS0tIE1jWGNwclFsQURJaldHcWhLSmhV\nbDQva1pFQjc2T0crTng3a2dSNWJOMm8KPVdOcfD5Z22XIFopQuLwoqbRy771r27b\n9KBeuzFKNwgxYO8rLdJh9rylybDWrLH5XKFyiOTvTKJaZeH3ZOIXCQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBETDNFUkM4alRaeENNdmNq\nc08zbExycjZIckt2bGlSSUlya3pEZVBsZUU0Cnp6K1ZtTHVFdDEvRTRtM2YzdU1L\nWHQwQ0R4VGg4ajBzVnZSbXUrVW1XYWsKLS0tIGxlaTdRK0hlR01TcVBsQmNtT0l1\naFlEdC84eDRKaEpLQVFLZjdMRUFkMHcK+rBphdoqH/7laz5HWvEj+TPQmPQ+dB11\nvdLTJG8sC24W7OZLSK7tKJ4FXRhy2qlEAzj8ix7MZEX0UhwgSR2dqw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRZVF5cW9QNTF6eEg5bk92\nUFFzQXJZN3Y4Y1VXcytsMjBCZy9WRXlTWlhVCkRCeUZBWks1eFNBRG1FVURldFNi\ndUJhNnpoa0pPVEIzY2FEVi9CS2Z6Y00KLS0tIGNHL2d5NnNkaVZMcE5sNWpqVSto\nRzJtMnhMenNhdUROQ3lLazFRV0ZIbHMKZ+sN7NkKoqxSHpFVLarSLFjPIkWga/QC\nUsfNgTDxRLp0jswU4nOEplo8p27sSrhBfrErtG6sobepE69UmYqZtw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:29Z",
+		"mac": "ENC[AES256_GCM,data:DU/tgR4EtL/bxwmymQYQ2HWVGdH0hpfzYJz4+eHDrnxxoZfPV1KKwrjYtXqz5ISv1vFKkOV95DJWIC6M3kln5+OmhE4gX489+QByNZC8vpWfinGE2E052BvgnWQ2meizeWs9XM6SzfKnr+bdiTdMun1v2fld+0BxyxbLAeQhE70=,iv:1pPsAKzEQuAIkDQd9UsgT9y3ZcKv9fuCnqe34r61Hy0=,tag:BpxN8VpmkAdBWF5BB2bRxg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/rigel/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/sirius/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/sirius/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/sirius/tor_tor/hostname/machines/sirius
+++ b/vars/per-machine/sirius/tor_tor/hostname/machines/sirius
@@ -0,0 +1 @@
+../../../../../../sops/machines/sirius
--- a/vars/per-machine/sirius/tor_tor/hostname/secret
+++ b/vars/per-machine/sirius/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:WUdcgLNuSlM9lmvLOvI6dPWULKFjX9mkMSCllRWwwhZFiTYBi772rmPYtb0amDE4PK1IbR2qZXX5CbX+qA09,iv:a1u704JKUxFXPNlS8Oo9Bij5jQF+Bv1+eUw/HN52Un4=,tag:JLssNjYrzOj7752LlOzwpA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UkVoVmFTazhmODQvcHpW\nNWl5eC9NVlUvQkJNckdYSjVKTW9HTVNybGtnCnFiSXZJZElsQjFhQ0hPUDFhR2tC\nUVhTY0hDVnNBTWVRZXBRcUdVR2VjT0UKLS0tIDVNVjMxd3hOYTFVZTdDWlJGcVl1\nbEJPQm1hV25FL0psWU50eEZ2dllyZWcK05z0DvKASjwcntqUOH+DlodEPQbT97/A\nlFEpBymH7nYJm/ul4n8TgCSn0ERKpxw4pvRZznTfpCEUtbVg6tF6+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByelpCaHVHVmVsN2pBeGVE\nTDJqVmhid1lBcUtINzlWSWNaRjkrb0RoWkJNCnRlbXY1S1ZJQXg0YTRQdGhJYS9t\nY0VKREtaVHd0QUN4d3BTcGlDc2ZLWEEKLS0tIFNOYlh6eVVVSzBaUytUeEtqSUgy\nVXVxZzcySnpQakhaWDNUSmNkcFZaVkkKbZS5T53xDdLht7mjBh1vsxM2i0x1D7Fk\naSbO6QBTL3OyfJM6KRNygD21X0WELqy7i0fno2Ut0x0ldzAtG0J3gQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBON1ZXdFhJNXFtSWR6aVdN\nbEpwdWM1cHdYb2tRTEV0aWgxNHIvVUlKMlZNClpwbVlUWWxSWG9ITjBoRkhtUDZQ\ndTV6bEc4SVA4OW1NanU2Zy9nb2d0VG8KLS0tIHJpYnRaMzlTemhCQnB5WWorN05H\nYlpTYkdUR1ZDeTFqcUF4djk4Mm5oU28KpiGkvoM5VAVXjZrYJkWtbUipuHaMBwi1\nlirRx4Q8A1fnxLJNccNpLNsdf3H6yYPwxTFU+obg7FX84SXJdFoGSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENWWkREQ0Iw\nQXMzVDRKd2RTYnM5RmplMmg0eFl1Z3FPWFJDRlc4Y1pvVFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpFNnRTRlFFNEtBblhRTmZlL0hISENi\nYVVFZ1dWY1ptYUZjbVprL0M3SnY0Ci0tLSBBWWpVUFFyUGljWURueTBPOTB1aVha\nS3NveTgzUGRWNEN0RXZtV1NKWDVvCmzx04GUZnuRalVc7dxv9eg28EaOXHCJVQHs\nr/w//HVnHxyH4hCsN3GGMNRHcdEJainxaZ+vhXQHOVkfoPJp7IU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFdBWExyZWJ3\naTZxUU1DTWlCSlJyNHZwbXJBNTlYVkthR2Q3RzNZM2o4RzggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpVWjVrWHpnV3BMZFhjU0lWbGo3Y2pC\naG5iaElyOEp2eUJwaUtQWVpCYkJrCi0tLSBDSmhhMk54V0ptM3BHeG15U2M0SFd1\nTmtCVTZ5eUJ3TW82Q3VwZHRKSXk4Cr/GbTJmDH2FJ/HV03andC9BkgsJeOsXAUR+\nNJx2Itg4dU+kLSxD6fFKtdp7S/6lMlaJK93mWVnPRTV6SNEpdjA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEY4L21WcXZW\nTWlCVENNRk94bDJkVVRpeU1ZMWIxRDdYb2krWFJBUVNQSHMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpOcUY2WkFQQklkWHBlZDMydEJ3TGYx\nM3U1Q0czckxQazU1d240WjVDT0FFCi0tLSBNY002VURTWDFrUlBsSnZHYzFIaERp\neUkzbEZXMVNYSkpRaGx6SlFYejA0Ci0M5vs801SeVbPlfrioQuLvYO9fE8T0ImEp\nELrAKMTxCiAcYdDVaYRDHEYTBnxr0z1r6waftHdFSw8YHPfZG6Q=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUnBIbDRsK05hTlZ3aGJE\ncHNXSFBheTlaUVBvT01zQStXZkZUdlpaZ2tVCmx5VHMxQm0zVmhER3ZMTTNqTlBy\naE45MjFMS1h3d2VDUU9TcTlSU2FGajQKLS0tIFcrelBraGFCajlkdGZYTzR1Skxj\nU1JCdmJBR3cvMmZoTkxQMlhJVkxLSTgKbdtFYp+4YWWuv1VqFgAUA56lLeIsh0/T\nXg2zCctQPukOfN1tQKU1TijayEahzqfkZPG+ONxWJH83aaT1WQIVWA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwemdEZHJRWTBFdHJzWkV2\nYUlPKzI4YzRsNU5jTFA4Zis1MFlvUW42bVVjCkxDVjZReW1QbmNLRTQwZWtjN1Yx\nc0lKVXNUU1IxdjZLR3RieklrNUthMDgKLS0tIElFYS8zLzEyMTFiUi9NL2dHbU9q\nVHNXNncxL1NCTkdRclBQdDd5SURtclEKdJ+LPXXqY6yJNhHu2YSL6tmmGXmosKsq\nYINpGKrFfQ9uSMVaaQJIqntUi6P6ynkNWciku8AVUuCyNJlQ8nh94w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ejk3Zm1SQUdIeG9xOWhI\nbmIxMUlSakFxbFpCWU0rNmVMRlRPZkxzb0hrCmh4bjNRVm1aWFp2ZDdQc3oySWJh\nVTRpc2JDaDQvcVpFcXJLM1FOVHZjaHcKLS0tIFZlNTFhWW1jQk9MVi9nS3ppcGdH\ncUxxNTU2WG42TFBNdjNEVFh1dXZ6YkkKOHRNSvCtXhOJ1pL4msWoUgipl/yICXTL\n52FF+vHerQlhwQ5Pz0Az71iIllnht+G0XNODNG5q9puttuvoit4aDg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0Nm5TanJuS1RoTjNJMlZL\nQi9uSHRpWTZXZ3dRQ1Y5ZGxaVkZmbDhmYkNVCnkvbFdrYVoyNnk1Tk1QTlhDOHdk\nbG42czFLbUx1aDhRRlhEMlppLzNyN0EKLS0tIHUzZDhtZmRhcE1qc25OTDZyUHdX\nbnI5UENYNHlvUjFtWGRaaWw2a1lETDAK2/CErKVU1dBkndNZFVtO29pIoSwJpYpT\npxw95asZPvaUp2S9lg/ZRFnYPpzyEHS/GYRbUgKEA7ATAuuiiA3TAw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:32Z",
+		"mac": "ENC[AES256_GCM,data:zUf+eTR1lw/iDSOVw5cwDaDIYbigaO0anVHHSptrpFzyFs/DmMbnaS+7RoRS+v0IJvuJOL6AdBijIsDVAjhf1LHMJu7nCmCeJwRBQQ6vJ3GCXElpe1EPsun5HMf7l15QyxPvWz3q5tV1bL5VlEkWE6bw0BhMOZv5Sg2EfpiNjqY=,iv:OyfYcOR13b/4vYNny9oCulPHVuPuoE8Eno62YlZV7ms=,tag:NE6ywM4pjTwFkK+9TXLSJg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/sirius/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/sirius/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/machines/sirius
+++ b/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/machines/sirius
@@ -0,0 +1 @@
+../../../../../../sops/machines/sirius
--- a/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:2qTtsu3BRJj6oPCUUhQpgRCZtpFYreDBZH+9pQrGaBi2bGi6okcTpKHxz8A0cZDi5bzQh8FzA01naFv8EtTquuRfAzeRKZrKo38PYY7D9l2atXNuQAyjTOdvdmNNYfE4,iv:3Ls1TIKo83TrsN2K5I3Mm358zfr+smUdNNblbTD5Quc=,tag:XdBBFYDlDf4aKdL3+v4pxw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBweFhTRjdHZWRlVXlHVng5\nTWVKRENaYk9ZZXpyMmh2MmhBQVE3eCtGdm5jClk5V1VxOTgvTDJvYzhkTk1XaktK\ncnpmcTdoUXhKd09rZU04enB5aGdyWTgKLS0tIEtPTjNmQkRON29PS280aVNZc09W\nSmdFcDV6ZWFzeWRscm55TFo2VGM0NjgK1XjfOeVDs/A+T6lfXpJNZpWxGLyH3G/i\nTsTakPk8AemWCKjeD1m2OgGRkO8xLyLjRzo6VK7ypjDi2w+XAabfYA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTFd6RnlQWDRSbWpTOFlq\nWVRoTUc4NXIzTjA2d1picm1CdnI0R2xlalJ3Cnc1bm9wQkd2cklhRENzMnZnNE1h\nNUQ3QXRiUnQ4SGs1Wjl4YzFNK29RNDAKLS0tIE5DbFZ5cnhCOEJnR0NOMmRZZXZ6\nMXJGYjVPSDVJb0xKRmNyVHp1L1pEZjgK2+aZVNx2ua5QNAItgS6OAY4sUgm8GUgQ\nwEaLa0cAHmpmm0bYA6an8A996Pe//doFIFCLZd8bLQFErxTobx0AiQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSTlmR0NHTUFtU0o5VHBa\nWGd3ZmpXeG04aU9OK0t4RjE1dnQ3aGtwRVhBCktjckRvMFBad0IvakprZ0lyLzZa\naGE4T3ArSCtkcVh3R2N6cXpGK1NsbDAKLS0tIHd4TU02eU95VWRvNkVKdXFEOHdO\nY1dvUVRiS0I3OEVEOGdkN0FZcHlOeDQKmVkAgN2jrzoys2FonWxgjkTZb2gh89Mf\nDZzgjZBRkXMHwxZfVRBRr0B3sZT7NuIo6MAxq8jO+LELztzYSXUong==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIERxaG04dEpw\nWEpXVlkwbTlPZFNBRy9JQTRpVFZnaW1GMWJibGt0M1dsMlUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpEa3NwSFNoS1JQTjlkSTFQRUZyMy9x\nRlZMQWVBTGNoV3RJdnhYTWg0VEhnCi0tLSBXV0ZpT3dLN3lhTUdESnYrbXpiY3du\nVU0rMUFvRDhhT3N5eDBBNXIxcXNzCjDLw/SBOzTN4s/FEUozO/MNLFQE6PsmQ9fG\nE7ApJUnHSkjUd/51W5TQzh8UzzlpnRkEP3Ox6erdlas25Txo6Cw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9xL2NKZFA0\nZkpaRTc1MllJVlN0SzJFMjNIR2RtVmpoTEdWOEpIOEVXbDQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplTVloWXNuTlpjZWlXY0Z0UkpWOXEv\nYnZMZnoxbThqVUhKWTRWVmZieUJrCi0tLSBvcnZweitwK3NvaE9JR3hVUDVOckIv\nVHEyQzViQU5sR1hnLzBzM0gyTlhnCqs8W2FWV1hX4UyQjvUf6QrTgxNT6AtcRWes\nQUoEReNZgkElw/zZt6mHzpMnkaRyc2ADmlyzk8MNmSfmEDksSXA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGs0ZGx3OHY5\nUUUyTFlVM1BPRExGd1dFUE5heEkrM3JmTjRTNmkvTHBMMHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpWOE5qOHl3ZFhIb2dUV2JxTk9sckZm\nbUFVYnRGVWpqR2pYSG1rL0l2R3k0Ci0tLSA4UWxWVTN0bm9OSjZNS21FZ0o0Q29J\nN3BjMGZPMytEQ0g0S3pqbXBKS3Y4CvWKtg3Z1+2WARaahtOwDzYJRuOQFpTi2sYk\nDc8vfXtHDYZ+ImcyRsbXOMED+xevKCKPKlA3C7+doN1swHHLZ9o=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGcTZQejJabFRkQWtEVlFV\naFR4Tk51RnVpanp4MlBqTkJyZnlkdzVYTkNrCmNXeXJUKzJaNVI4a1RoakR6SGRL\neXBKME1OUkJHTFNEWXBUN2xVVVI5MmsKLS0tIFFyTjdpcEpKb1lSWnU5a2tVdkk3\nRFo2V0MwVytkVmxIWkVDbjNqUVowclUKugapNT4o10AoMz24O80iOy2NmzEtRHLs\nGgXU8kiJcKZuPG2setgX60gKibbrmAO/l40rin3B2DeS0jBzDVjvsA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSWNXRUVzcEZZTmNza3Bs\nZWx3dEZwSDB1ckYrbHo2SjJ1dFdzcFNmNURZCm9YL0J3eHNyZGR2a2gwdWsrYkdO\nQklVU1pHbkg1KzJwb21MMm9pZURRV00KLS0tIFlzb1dxZjZMMm1KeDdrMFh1MnFp\nNkJtY0hyemd3RnBBdVhaZUJNZ0dJMmcKe/Ust0yf5Fm3/ZVv0UhtIqQa1JGH6OLk\nS/L92+52kgusWSu6AQFkwwqw7GecwZrokf1N0flpOScEBfAKWXOyHA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUTWZ3SU1LVzNWektJT0xJ\nK3FQTUVIaDBNYzJjd1htWjJpeTJSSThDaFhFCkNTTFlEWVhqdjZvcUYyUzVsN3k4\nWThoVXoyTk9HMkt1RjUzaXdIeTEyRFEKLS0tIFJVeDRSSXFuZHlKVS9TS3FQdUEy\nRFh3U3VpVHJ1c1NzakNrcWNNMFNKMXMKf9yBRSPtoQ0gQcFQHqI0uOArQWNHwbvx\n+Jp11TzEbol3CXuGhKCGj/v8cd6tQCbXhvKibtf1pydGmRmlXKCqQQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxNDQvOWl5dG1XNWFWcTFm\nazJrR2t5K05GWTJvUHNETlJxNUtWbjF6a0FzClBDdk0rZVNXaitiQ1pzSU9zKzRU\nNk1jZEFOWTZmdnlrSFRITkdSb0YyeDgKLS0tIDEzUjVUUEJhdkUrUXUwWi9oNkts\nRWhldHA1Ry90QSthclY5cyt2UXdyWWcKAsvAI+iCl2F/SWr9r0Zf6yQqn1/AfIO3\nUSjJgGOQk/LMZislf28sD+db0Obsf1re4DsJlKYjh3eq+vYpQOFnWw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:32Z",
+		"mac": "ENC[AES256_GCM,data:i8BnwmV3/hmhrUlnyd9gR8oZQpWHFavFrJ5xsM04A0h/XcS2i+MrbwqmAD+ns5Zyq1thIcDwo8IuZ1FYuPxHy/Mo/tige8/NXjYdiaDscWr/UDnBWZsZcs97Be47nJWq0qBepbls3iBc3kQCfLrIpTqoYUcfR4MZvB2bVx8m2vI=,iv:NO1MlTkISs4OqMHz+SEPpXyAHGJPNOiD2+0JZ6Ntv9E=,tag:6u9dWDZpPGpIMRs20XmG/Q==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/sirius/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/vega/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/vega/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/vega/tor_tor/hostname/machines/vega
+++ b/vars/per-machine/vega/tor_tor/hostname/machines/vega
@@ -0,0 +1 @@
+../../../../../../sops/machines/vega
--- a/vars/per-machine/vega/tor_tor/hostname/secret
+++ b/vars/per-machine/vega/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ZWRNXcj69ziGYW+J2KJMFGKJ/905DsvqhbFm85gxBtyQtyBL+nEhc6MK5j01zX7/xr2LB01uEwV8RBHbp8ow,iv:xBtOJc+2fbGg+o/DPtyCVj5NFceuEm+EQ5BpMFOf94c=,tag:1E2h5pecj652630xvj+WmA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUnhkanNYN2VDaFRwVDhl\nMkU2ZWFQSDBTSlIyZFNOQnNGcFE4K1o0VEhjCk9rV3hJUmxSSjl6VkcxMFR0cTdk\naHlHdEkzREE2c1VMVU0zU0FUVmVxZDAKLS0tIGhtVzVPUWpxaUY1RU5FR0dRdEhz\ndjNFelhZTGE0Zm1rdGU2aXNHWGdsYk0KusWNAHOV5+NRAjkwE05xNHJ0kFVV++0s\nkez6bpjlVzhbToNAxggHtyJQjlobQ5cUcqbFf9WGRoQ+pF/7vCS6dg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjdU40SDV0VzBWUmxuWmhI\nSmZVWHVuU3FZOFlyb01UV05KSGdJQlptTG4wCjFRcVB5ZXgvTU9WYWdKUW5mUXgy\nelZ6cnR1ZnhpYlJyc0VqOEUwK0hTSlUKLS0tIDdtMUdPUWhuZ3o5RjcwK1JGUXgz\nTjdsWGpra25FN3BVL1NDVk02U3l3aVEKQBqpCgYpodqrDnur+eoIzsnhWyV5ItDC\nozmqh3AWjtuh/Ba1qlAHKU2IDo+E9qkFo2VvmujThpO0bZVCwY86NA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHk5d0hQZ0lI\nR2J4bFdXSGFqMURwVlVCRjUyams2NDB1M0FEV3FBd21pZ2MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpLelJCV2pibWZSc3h2S2JGOFdtTzdU\nRVJRblF4RVlHWEhqQ0hLOVZjQzlnCi0tLSBMdXI0anNXME1pdmNqSktmSk45VS9m\nRkdRTlo5bE1GZWZVZUF4NklVbHE4ChwoCBWQ7tICLuRqn6DjNXJriSskBjwppoh/\nRtzBcQDhyTLuGKXNMnz0d9BHF6xEQmOT9i3tNbwYKAEX9fvavgE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpNSTU0Znp2\nMSszRXpRV1haYWxmaWFyV29hR1V6M1pYRXplcmU5UUxYa3cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo4YWpOZnFpZjA0NlhyZUF5WVhzL1g4\nL2JLZnFPNDcwV0VEeVdvZjNUMXpFCi0tLSBpYmhtUTVDRVBoVHJTa0tWbGhaakd0\nTk5XdUJUakRVVDBjTG1BbWFsdk9rCp1asvliZAOA/h6v5Z8yXzEjeRylyxkb57Po\nW/eiEbvchEiCJZp3WChYcdBw9lcXqNBtqMoFgRN/+ILwYFRY/44=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDkzeFJYd3B1\ndGd4c0liQ0ZLWGhyeWd4Vml1eU1aSlFFNVlqWFRXTWkrVncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpZcVpuK0NzSGNEOWtFTHUxWTdqWlBZ\nR2p0VFRBNmJYVkhuMEZ6SHB5V0R3Ci0tLSBHV1dmVno5SXZEcUZiTHpWNDAraWpP\nQytmd0JyUkh3SmMycFF2dTRsS1NnCtfywOPNTsnKdCnIUzx2e08/0+AmvXEZrJXq\n30uuy/q5P7/3MHDEzExTt1eaLewz0WJaxtIp1j/G/jB9ys4SuBc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTQ1JFdlNFODU2TEFUUFB2\nMXg5UXBvSUFRTEhLblU2azd4elFjSEl0NEhVCkprbENwQVJhM3RGVFFhb3JjOXUy\nNDBMbFgzOS9RM1M1YjNOV1AvM0ZxSDgKLS0tIDlKQzFyU2VNRXh5UUZRTDBDREcx\nTHdoaUVNeStQai9va0QyR29oc01xTDQKn6oMRwn2kDvXXjzfUJX/ZZlM0zwbHFXj\nLLZ85ayiSxHWJJvtOdYJgoV4daMf+1szymrmpwNj2IhpyqNB4ghFKQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3d1lWcDlPNDlvc09KK1VY\nZlBNbzRwcDQ4Y21FR2V1cTJKc3lydVJDaFdZCktPK3lucGIwWWg3ODFVOG9WbTFH\nUUxpQ2todmtUQUpYcDV4cE9JamRScFEKLS0tIGV5WGVuYnZqbmdMTDk1MkhoY0lM\nN3oraDRua2xReU5hOUdENFoxbDE0b0kKc4NZodUjqcR1cnZh3hHoxDEV5FEkeOv5\ns+2aaAQ/oOj3IY6hBiFa1R+ctIiwl3tRRFNWS/rytvkUqHdluwArfQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBleGNGZjRsRGRvM0s2Snlq\nQWtTUCtoMHpZT2RvTzJLTUNRRWQzQnlYdjFnCkRQaHQ2dTFlVzd3YzB3c0twVk91\na2pNUlU3blFHbjY5QkI2aWU1QzNuWHcKLS0tIFFpdjVCOFM5UE5RdzgwaWhMSk9p\nYXlTVzJ2WnJOZjJLNFZRdDZyZ2pJS00KI0FiXMQlw6XNwRMts3wQEQOSm2anBNsm\nXMfrBEN4ENVUShtb2zhIyOdnN2qJcRGW8IYCjPpZ+Y0wI9WKFBr1uA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNE05b0xwVFE0d002S0R1\nV1N4bXBmSG8vemVHOWVtNDUzRlk5MjhjSlRRClpFZWJwdVZwL1ovcjdYb2RpTFBl\nZUdydGlWVUdHTmhmNzBtMmt4NUV1dUEKLS0tIEFjZUZOUy9hb3VmcENPa2FTQzcz\nYU5mQmZXRHRpT1oxQm1BYVp0LzZlVG8Kr40tEwuTXMMdR30hyQsvU66kooESFoqj\nlIgvLiqzFRxeU6ju0txJ7xk/EwJwUlD5bCxOLOie8ZrHp/cZFUM0qA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXaEVmQndEMU5KZ1RwVjdP\nQi9GQkxZSS9ZMUUrKzVHa3BUYy8wK0Zxd0VrCndGdHo1MVpqc0VRZXdYUFFibXhQ\nKzhabjYyTHExTWtCeFZNZXlwRXBIekkKLS0tIFdmODN0YVYzaitXZUdxd0dwSUh5\nYUxpc3UxbVR0b0paZ2dCVEd2MFFrNlkKilrxwiTfw+ZxA7ocU+vmXiN/1rEXk1aD\n/KYZWXQ9MD8MkEm0CmGgeEUThCEXQaV5/2lEO+47AEqVltDCQS610A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:35Z",
+		"mac": "ENC[AES256_GCM,data:YuCondSkQ1Zv6nlY8RZoddLZm2i/dQcj25X33m1UnisxMMZm+OCiK6uTPJ0N6Br7of2GXOMyoBhmYgfOyOXggGhsfMKE8hqNfdEU6JOJL5sVpoMBds+PQUC2F1QoTffOnwEEOrCJ4aH3OgV27tNetn4cSSyyADlpBIDv1ApQe+8=,iv:7YIu7/tkKvU9EA9s9/3GIKy+6muT16Uiaymnr26G4bM=,tag:q0IS8Xm8W+u4v35Ia9istA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/vega/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/vega/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/machines/vega
+++ b/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/machines/vega
@@ -0,0 +1 @@
+../../../../../../sops/machines/vega
--- a/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:BLpCo42r3QZHwdTqIxo82ChyGK0fUl0mh3jEZO5sicS7039HxD+FXJs6jVg92RXxiUdIgcGy/ySK1Bpfpn3YnBzV+xZGGZE3sD7dnFan5hYTbRcwIH1HbkljPA2IOIIS,iv:kUf6ZLfcKz/p/r8vZno1eh10haijScC7JRJAcjWrzjk=,tag:Xy0X9tqJMQqCXq8wFGjFoQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyZ3VVc0E3L1ZLZWY5dWV6\nUUdHR0ZUWUNPV1FTenhlSnZaUEl2dTJXQURJCmtKMmphNGZuWURHRnRsbm9UQ0Nh\neWF2U0czWmc1Q2QwRzl0RFpnRlU5Y1UKLS0tIEtKSk9VNkw2V2o4b0NUcmNRQ1pz\nKzhIeFErQktNd0p4VW9Wc0JCdHcwWTAKHwbpGGWXcHdILNbbkLl7nLixMCeAdmB3\nAcevFLGdV2BPJ7EcgyNvItR0K8Tvv9MOdseRfhEXRVg8YZOjuoWdVA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNYWUxckJrdzJsNnpBSHN3\nbTRGSkVuWGNnL1YxSUwzN1NmYXpkeVRoL1VjCjFRMWJyRm1oVzdhbkwrYVlzMTBT\ncFkzbUEzaEk5ZVgxS2JXbGQ3Yk16N2MKLS0tIFVtTWYybXVwQkJHQ0tJQUpJWkNQ\nVTl4NFJqYmdEM1E4SGxTbldzNDdHYTQK8LvbKWSbzNQzDIfsmc/QNtVMThiGNxnK\nOHD7JOuyYKd5ElA/15CXZbVrGPl2iemYpQEW5otb5nyTk9PNPNSJxg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlGd3g5bFVH\nd3RacnhMTzBwYUhvMjRBVitzNEl6WGk3elA0UmlKMkN5RmcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmSjFOU3NVZDdsblFoTDFFaGRTak15\nRmJHUEc3MWNtdmJhU2dMYklFdy9JCi0tLSBmSTgvTWRHUnhjd1BWYUV4MFVvWnlT\nRHdoTk10d2dTM3Noczl6VWZJYjFNCrF91+Ya8NpEBc26mTjxMe5EKxjTPyCYW/nn\n5Hj/rDxn5Kj8QdRVfnaUAvyKGJLC/hpTSjNIbvvTiGQ6AJwxqoM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9NWmh3RDha\nVDJEdFFJSEd6SHNDNzFFOTJPZDg0bEEyNGg5Mno2NHc5MzQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpLZTlYeEtFbjZBM3ZxaVlBczFOYlc1\nVnpqdkZJKzVoNnJyaFZFdEFkb1NnCi0tLSBNenJySjViVXpjWUdnY0J0WktNSWFl\nZ3p1aUpCNnZGSFZoRUw4SjJWUFlrCrB0IGz/XT9SUcBoPPUNZKAPfSA/75NohnZy\nZYvYfYvI6Le0bifzz5lvvPKscnI1vR2HMfDh0onzbI0LbaJ8PlI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtkeHFZa3gw\nWDd5MkJRRnAxaTMyQ0RabFBYK3VPSVkwam1XZERYZHZJeVEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLQTdVYkowRjJSRVhWL0xLaEVyZ21I\ncGNvdTRXZ0JhdHBIQ21sZnlZb1drCi0tLSA2eFhyeGJmeGRQd2F6clBUR2RGZlQ5\ncDZzWTJRSXBmeUxNTlpCdUZGblRnCrWMqeaFtUYC4ZXGtMhr0sVyCbMCR8eAtVZB\nD+86W8umzzxWBnv8/MifrVgfrkDTzvARuchIzBQQRc2REjL6+Xs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWFUvSFFwakVHREQweWwv\nNEVKbnQ3d3ZMRXpFeGZsUVN2UzIyZE5vMjBjCnVZeWVmWmx0RFF5elVrVCtZb1pR\neHQrd1k5QWl5KzY2ZTVHbmVxQ3B2aEEKLS0tIDZHcXJoR1oxZnVsZ2VPenRZQ2NN\nZ0p3OHRGS011aUxUVzZDQ2g2eGdxTTgKN3vwpClWP9QaTGWTqHvBjjhQta7R/pbp\nTHe86Iz0GO3weAVzmUVrALNQDDeiaN/b9E0DKxANX3awWeRbxvwZug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4RjUzZ1hIQmEza0FtWnl0\nZ2YyZ2dEc3ZRNUtDeFFLTzE0cW9ta2tIUnpFCll1UFhIcVR6am4vRXZSMzdoU2FD\nUG1xYW9xNHZaSlkyV3hiRkdVTGFubEEKLS0tIFR1SVBEMXAvM0xwcjdUN0pDUEtQ\nWC85amVqV1ZhQzBQOG9UaFRiZGQ4WWsK31lHOyvzJGyPCLVApPVizjVfDMFFccJN\nODRnDrKkfAeb1s1CNs++X8xoWSrbOs7shBx22xtovtaAWIV/7cw5Ww==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJTVBuYnU0NlgyamUrVXpp\nNDB5SGJlNzh1Z3NUcnp4VWZFbE9qaktNZWdBCndSYkVDMkVtNzF1SEJRUm1xT0xB\na1pvU2VOejQvRHcxbGZmTm00eHFDQWsKLS0tIFlzY3dheFd3MFhNQWhHN2pMWTZT\nTWpZbUswazVSbWRMV2g4OGtTQ2RieDAKy/VMhNRa/+h98gpOuDBBpS/RatKF0Iuu\nAvFpjIJrmD28uoZ51IccjBLxQtiBQrwMovRS/zA7Sz1uACn/YVNdRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJSHNxLzNWWkpreDlDUFVU\nUk1IVXZiRjVLOVZEdU55OWhackswc0hFQUZ3CjJxVm5pWXpJTi92Wm1TZXJHdnA0\ndnZ0REZuTnN1ZUptNWRiWXNXR2JvVXcKLS0tIDl2VVVZRGFBS1JWWkh1bmJRek5I\nZXhkbTFCTWNUaTVmU0dkQkE3dFJWSnMKMUO28Opftkca4chZE7LbDPJpWITPc61y\nG9FMdbgGqFdYbalpPJANePQc+LrHo7WH/iljG6ePzablInrGUMe51w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQ05JaGg3c0k5dlBqNFBZ\nT1VDQURDK0dWZUxuYld2cWtIK1FPZXlBUFMwCnp1MVlsemRiaXRaWFd4bW53SXNO\nNzZZbGxyNDEwUjZOSS9WVCswVzg3cXMKLS0tIExtazRQTE1aaE9veGhhNlZ2QURw\nRG9iN005UmZQNHk3ZEo3S2Y2cTZJTDQKqCS7mK+qSK4RK4VJRSLHaHhaI+Bgj+iW\nN46qJRxnQArHSEffNlUTrXpG0OLuw8pAdw9r4R2pbRVY39vSiztUdw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:35Z",
+		"mac": "ENC[AES256_GCM,data:G7MdHJYuCtGgJ3Tik+WdI+GOacJblMD851TiS9Ws6uhw8RtcdjNfoc4YGzLR9ZCCp0WhptHRZptD0ltvvGZwoxEqIoxcvkqrjEc68zLFBf0MvtJ+hjv4RZ01P4sNd0zBzoE0mprZgnxE25Q9QjcloBbhh5+57621ANz8bkEl+x0=,iv:/xG2/P7soShH0zEWBPNU4TqU2SyQQqNXGnH0hychwU8=,tag:C7jDxb8cDSC+QEnqyZwxEA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/vega/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
Author	SHA1	Message	Date
kurogeek	3556a3ac7b	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/alpheratz/configuration.nix	2025-12-03 12:54:49 +07:00
kurogeek	e14a68a9a8	Update vars via generator tor_tor for machine alpheratz	2025-12-03 12:54:40 +07:00
kurogeek	e5044d371d	Update vars via generator state-version for machine alpheratz	2025-12-03 12:54:37 +07:00
kurogeek	37f3bf7ef9	Update vars via generator root-password for machine alpheratz	2025-12-03 12:54:37 +07:00
kurogeek	1483897018	Update vars via generator openssh for machine alpheratz	2025-12-03 12:54:37 +07:00
kurogeek	b0b4592a39	Add machine alpheratz to secrets	2025-12-03 12:54:36 +07:00
kurogeek	297f373f74	Update secret alpheratz-age.key	2025-12-03 12:54:36 +07:00
kurogeek	6e68e740cf	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/alpheratz/disko.nix	2025-12-03 12:19:45 +07:00
kurogeek	cb9744f8aa	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/alpheratz/configuration.nix	2025-12-03 12:02:35 +07:00
kurogeek	2aec0f08ab	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/alpheratz/disko.nix	2025-12-03 11:48:57 +07:00
kurogeek	5ecff1bc9e	bump clan-core	2025-12-03 09:58:39 +07:00
kurogeek	7a381a310e	tor connection	2025-11-28 14:55:21 +07:00
kurogeek	36c31507e2	Update vars via generator tor_tor for machine vega	2025-11-28 14:54:35 +07:00
kurogeek	bfea371501	Update vars via generator tor_tor for machine sirius	2025-11-28 14:54:32 +07:00
kurogeek	ff0bc698d4	Update vars via generator tor_tor for machine rigel	2025-11-28 14:54:29 +07:00
kurogeek	11c109970a	Update vars via generator tor_tor for machine ramus	2025-11-28 14:54:26 +07:00
kurogeek	ad95a8710c	Update vars via generator tor_tor for machine b4l	2025-11-28 14:54:23 +07:00
kurogeek	e6760d320d	ramus machine	2025-11-26 14:01:11 +07:00
kurogeek	bfeea4156b	disappearing default route is fixed by a hacky way	2025-11-21 16:53:55 +07:00
kurogeek	3aa93c1333	nameservers whitehouse	2025-11-18 13:58:59 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw`
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvItw14tB6fc6gdZalSkZPOUSWGsTNyLnXk4yLAnkrb`