mob next [ci-skip] [ci skip] [skip ci]

Update vars via generator yggdrasil for machine b4l
2025-12-05 11:10:32 +07:00 · 2025-12-05 11:08:39 +07:00 · 2025-12-05 11:07:27 +07:00 · 2025-12-05 10:45:30 +07:00 · 2025-12-05 10:44:04 +07:00 · 2025-12-05 10:36:01 +07:00
158 changed files with 16582 additions and 212 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761768376,
-        "narHash": "sha256-AZL8SPJ520NRnLft9Xz4trTECBB510YPRXJnE1OUeXw=",
+        "lastModified": 1764792743,
+        "narHash": "sha256-MbbiNG/bhqe+4z7ml8TefIs4swSonmiV0CimCntXuCg=",
        "ref": "refs/heads/main",
-        "rev": "bbc9486f0e6306f68e11f8aefa243da9f1c8c56f",
-        "revCount": 10924,
+        "rev": "ddc0f9fabf33ad000676a33e97be6b5df12a4560",
+        "revCount": 11417,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +49,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760612273,
-        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
-        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
+        "lastModified": 1762942435,
+        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
+        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +88,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760701190,
-        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
+        "lastModified": 1764627417,
+        "narHash": "sha256-D6xc3Rl8Ab6wucJWdvjNsGYGSxNjQHzRc2EZ6eeQ6l4=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
+        "rev": "5a88a6eceb8fd732b983e72b732f6f4b8269bef3",
        "type": "github"
      },
      "original": {
@@ -162,11 +162,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761339987,
-        "narHash": "sha256-IUaawVwItZKi64IA6kF6wQCLCzpXbk2R46dHn8sHkig=",
+        "lastModified": 1764161084,
+        "narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "7cd9aac79ee2924a85c211d21fafd394b06a38de",
+        "rev": "e95de00a471d07435e0527ff4db092c84998698e",
        "type": "github"
      },
      "original": {
@@ -177,11 +177,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1755887746,
-        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
-        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
+        "lastModified": 1763303120,
+        "narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
+        "rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -190,11 +190,11 @@
    },
    "nixos-facter-modules": {
      "locked": {
-        "lastModified": 1761137276,
-        "narHash": "sha256-4lDjGnWRBLwqKQ4UWSUq6Mvxu9r8DSqCCydodW/Jsi8=",
+        "lastModified": 1764252389,
+        "narHash": "sha256-3bbuneTKZBkYXlm0bE36kUjiDsasoIC1GWBw/UEJ9T4=",
        "owner": "nix-community",
        "repo": "nixos-facter-modules",
-        "rev": "70bcd64225d167c7af9b475c4df7b5abba5c7de8",
+        "rev": "5ea68886d95218646d11d3551a476d458df00778",
        "type": "github"
      },
      "original": {
@@ -238,11 +238,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760998189,
-        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
+        "lastModified": 1764483358,
+        "narHash": "sha256-EyyvCzXoHrbL467YSsQBTWWg4sR96MH1sPpKoSOelB4=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
+        "rev": "5aca6ff67264321d47856a2ed183729271107c9c",
        "type": "github"
      },
      "original": {
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -3,7 +3,10 @@
    inventory = {

      tags = {
-        glom = [ "vega" ];
+        glom = [
+          "vega"
+          "ramus"
+        ];
        b4l = [ "rigel" ];
        w = [ "sirius" ];
        fax-bridge = [ ];
@@ -32,6 +35,14 @@
          };
        };

+        tor = {
+          module = {
+            name = "tor";
+            input = "clan-core";
+          };
+          roles.server.tags."nixos" = { };
+        };
+
        w-network = {
          module = {
            name = "zerotier";
@@ -64,19 +75,18 @@
          roles.peer.tags.b4l = { };
        };

-        yggdrasil = {
+        yggdrasil-network = {
          module = {
            name = "yggdrasil";
-            input = "self";
+            input = "clan-core";
          };
          roles.default.tags."fax-bridge" = { };
-        };
-
-        asterisk = {
-          module = {
-            name = "asterisk";
-            input = "self";
-          };
+          roles.default.settings.extraPeers = [
+            "tls://ygg.jjolly.dev:3443"
+            "tls://[2602:fc24:18:7a42::1]:993"
+            "tcp://leo.node.3dt.net:9002"
+            "tcp://ygg-kcmo.incognet.io:8883"
+          ];
        };

        pocket-id = {
--- a/inventory.json
+++ b/inventory.json
@@ -1 +1,16 @@
-{}
+{
+  "machines": {
+    "ramus": {
+      "installedAt": 1764139649
+    },
+    "alpheratz": {
+      "installedAt": 1764741499
+    },
+    "mirach": {
+      "installedAt": 1764744666
+    },
+    "almach": {
+      "installedAt": 1764745787
+    }
+  }
+}
--- a/machines/almach/configuration.nix
+++ b/machines/almach/configuration.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+  # clan.core.networking.targetHost = "root@";
+
+  clan.meta.name = "almach";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/almach/disko.nix
+++ b/machines/almach/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0x95d64f17";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/almach/facter.json
+++ b/machines/almach/facter.json
--- a/machines/alpheratz/configuration.nix
+++ b/machines/alpheratz/configuration.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+  # clan.core.networking.targetHost = "root@";
+
+  clan.meta.name = "alpheratz";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/alpheratz/disko.nix
+++ b/machines/alpheratz/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0xaedcfa8b";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/alpheratz/facter.json
+++ b/machines/alpheratz/facter.json
--- a/machines/mirach/configuration.nix
+++ b/machines/mirach/configuration.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+  # clan.core.networking.targetHost = "root@";
+
+  clan.meta.name = "mirach";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/mirach/disko.nix
+++ b/machines/mirach/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0x95d64f33";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/mirach/facter.json
+++ b/machines/mirach/facter.json
--- a/machines/ramus/configuration.nix
+++ b/machines/ramus/configuration.nix
@@ -0,0 +1,15 @@
+{ config, ... }:
+{
+  system.stateVersion = "25.11";
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.meta.name = "ramus";
+  clan.meta.description = ''
+    A Hetzner VPS machine own by Alex.
+  '';
+
+  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
+}
--- a/machines/ramus/disko.nix
+++ b/machines/ramus/disko.nix
@@ -0,0 +1,84 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_107266387";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/ramus/facter.json
+++ b/machines/ramus/facter.json
--- a/modules/clan/asterisk/default.nix
+++ b/modules/clan/asterisk/default.nix
@@ -1,69 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "asterisk";
-  manifest.description = "Asterisk PBX server";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    perInstance.nixosModule =
-      {
-        lib,
-        ...
-      }:
-      {
-        services.asterisk = {
-          enable = lib.mkDefault true;
-          confFiles = {
-            # Dial plan config
-            "extensions.conf" = ''
-              exten => 1001,1,Dial(PJSIP/user1,20)
-              exten => 1002,1,Dial(PJSIP/user2,20)
-
-              exten => 100,1,Answer()
-              same  =>     n,Wait(1)
-              same  =>     n,Playback(hello-world)
-              same  =>     n,Hangup()
-            '';
-
-            "pjsip.conf" = ''
-              [transport-udp]
-              type=transport
-              protocol=udp
-              bind=0.0.0.0,[::]
-
-              [endpoint_internal](!)
-              type=endpoint
-              context=from-internal
-              disallow=all
-              allow=ulaw
-
-              [auth_userpass](!)
-              type=auth
-              auth_type=userpass
-
-              [aor_dynamic](!)
-              type=aor
-              max_contacts=1
-
-              [user1](endpoint_internal)
-              auth=user1
-              aors=user1
-              [user1](auth_userpass)
-              password=user1
-              username=user1
-              [user1](aor_dynamic)
-
-              [user2](endpoint_internal)
-              auth=user2
-              aors=user2
-              [user2](auth_userpass)
-              password=user2
-              username=user2
-              [user2](aor_dynamic)
-            '';
-          };
-        };
-      };
-  };
-}
--- a/modules/clan/asterisk/flake-module.nix
+++ b/modules/clan/asterisk/flake-module.nix
@@ -1,18 +0,0 @@
-{ lib, ... }:
-let
-  module = lib.modules.importApply ./default.nix { };
-in
-{
-  clan.modules = {
-    asterisk = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.asterisk = {
-        imports = [ ./tests/vm/default.nix ];
-
-        clan.modules."@clan/asterisk" = module;
-      };
-    };
-}
--- a/modules/clan/asterisk/tests/vm/default.nix
+++ b/modules/clan/asterisk/tests/vm/default.nix
@@ -1,39 +0,0 @@
-{
-  pkgs,
-  ...
-}:
-{
-  name = "service-asterisk";
-
-  clan = {
-    directory = ./.;
-    inventory = {
-      machines.server = { };
-
-      instances = {
-        asterisk-test = {
-          module.name = "@clan/asterisk";
-          module.input = "self";
-          roles.default.machines."server".settings = { };
-        };
-      };
-    };
-  };
-
-  nodes = {
-    server = {
-      services.asterisk = {
-      };
-    };
-  };
-
-  testScript = ''
-    start_all()
-
-    server.wait_for_unit("asterisk")
-
-    # Check that garage is running
-    server.succeed("systemctl status asterisk")
-
-  '';
-}
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -25,6 +25,7 @@ in
    "${inputs.liminix}/modules/vlan"
    "${inputs.liminix}/modules/ssh"
    "${inputs.liminix}/modules/bridge"
+    "${inputs.liminix}/modules/health-check"
    "${modulesPath}/profiles/gateway.nix"
  ];

@@ -48,14 +49,46 @@ in
      name = "resolvconf";
      up = ''
        ( in_outputs ${name}
-         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
-         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
+         echo "nameserver 208.67.222.222" >> resolv.conf
+         echo "nameserver 208.67.220.220" >> resolv.conf
+         echo "nameserver 1.1.1.1" >> resolv.conf
+         echo "nameserver 1.0.0.1" >> resolv.conf
+         echo "nameserver 8.8.8.8" >> resolv.conf
         chmod 0444 resolv.conf
        )
      '';
    }
  );

+  services.reAddDefaultroute =
+    let
+      threshold = 3;
+      healthCheck = pkgs.writeAshScript "ping-check" { } "ping 1.1.1.1";
+    in
+    pkgs.liminix.services.longrun rec {
+      # dependencies = [ config.services.wan ];
+      name = "hack-default-route";
+      run = ''
+        fails=0
+        while sleep 10 ; do
+          ${healthCheck}
+          if test $? -gt 0; then
+            fails=$(expr $fails + 1)
+          else
+            fails=0
+          fi
+          echo fails $fails/${toString threshold} for ${name}
+          if test "$fails" -gt "${toString threshold}" ; then
+            echo [+] adding default route
+            ${config.services.defaultroute4}/${config.services.defaultroute4.name}/up
+            ${config.services.defaultroute6}/${config.services.defaultroute6.name}/up
+            echo bounced
+            fails=0
+          fi
+        done
+      '';
+    };
+
  profile.gateway = {
    lan = {
      interfaces = with config.hardware.networkInterfaces; [
@@ -123,7 +156,7 @@ in
  defaultProfile.packages = with pkgs; [
    busybox
    iw
-    iptables
+    nftables
  ];

 }
--- a/sops/machines/almach/key.json
+++ b/sops/machines/almach/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+    "type": "age"
+  }
+]
--- a/sops/machines/alpheratz/key.json
+++ b/sops/machines/alpheratz/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+    "type": "age"
+  }
+]
--- a/sops/machines/mirach/key.json
+++ b/sops/machines/mirach/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+    "type": "age"
+  }
+]
--- a/sops/machines/ramus/key.json
+++ b/sops/machines/ramus/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+    "type": "age"
+  }
+]
--- a/sops/secrets/almach-age.key/groups/admins
+++ b/sops/secrets/almach-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/almach-age.key/secret
+++ b/sops/secrets/almach-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:qkIwSe6DxrWpmUgMi6G8srenbwUuMHSKXgzL/nybITl8iXTfoLBucjlPp6JpBmfs2NdOEqWS2+QUcnVRAueH9rbABKeAVdoGdio=,iv:NHplT1IbuYfyq8n2Nqq6TBRFi+nTtOOreyprIlXwWHg=,tag:/BU417a9kYMhgexskyE0Qg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObGdiWjBtTkR3alBDTEdm\nb25kbWY5WkFUd1dsanZ5M2FjQm11TnBVdWdZCnNOSE45cFMwallGRVZuMTdlVTBO\naTVnS29vQk9QZVJyaGRzTGNNcUdGQ00KLS0tICsxZ3NtVlVoc2FpQUMxSm9uZWF3\ncjZXcDVwZ0pUcDlqOGN2aGxmME43NXcK28S/SKkLgXJWQ5sdDxcGyoO74e0MaxeM\nx1kGfiKJBLqok+wNOPO9SFHbWY/ITH5RdV8iLchPBe2VM9IuC0nZ4g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsb3dPMGhpdHE5SlBQK3hu\ncEJqL0JaZk1rOE5MS0krUHpyMUNMUkhyMFdzCmM3V25vS3U2WENycmZIRC81Y2k0\nSEJTekNaNTFMZy85VHh4MENvbUk3Uk0KLS0tIGExYUFNVlRZeThQRHlKVDZWU1Jn\ncUNRd1cwZU1SL3BKOGZZaFErR3F3NkUKnILS6XWSl2MaQ+FAZvRAZzgJxL4OWl+v\ntDxXBBCapOeoLgRH61Q06JnDjgBCz14QIROgZP9Zji/HsdSeRiKR0A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhLejJLVEk2\nR0dtY0FJQUYyd3JObitPdEcweWVUang5ZUdEcTg1UlJUMFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpvUS80dk92MjBnN1N6Y284RGE4T0tR\nemN5Wks5dS9vdWRBTU1YYlo3UXBZCi0tLSBEb0pmU2xGMFFjazZ4em5uT0wyZUZW\nT1JqdjZjTDRwUUJLNzAvYTFreXp3Cqfcpn+UlJE63ymHbremaZ8X+wDDQw3gPGmX\nav9dmxfLCPLwwTbd3e8N98Jnc0OwGUiKTavtjpph9ygThvo86jE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNqaHoxdk83\nSnFNRXg4TzZLY3BSOXNSdWVrby90V1Q2Q2RRUi9xZGZ2Q1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpZM05YUEFYNEVRM0FSYkpKY05pc0hq\nWWRzTzFWSUZRNmI2NENDL3RyNVkwCi0tLSBPMURucGFSdHJER0tqUlRHb2NmNmYw\nVTZsN295QUJZQ1BObERGYjlESGUwCuYMMiu6NyO8Q/lvBHI7muzQOZfaL3Ny3S3E\nE7TlShnbLEsDxApvBV1KJaiYY21Z+1Up9DM0xQskFBYQCya3APo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEw4eHIya0RX\neE5Nalk3YWs2R1ZFcmp6OEIvSDhPMVlZYk5TcTQwbXBpMlkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYMURZbG5lNlYwMUdVSUtsRlJqWEhj\nbHdvZVdpTGt4ZzhRZERpWWJkbG5ZCi0tLSBJMG93d1ZPa1Z3WWVDSjJ2ZXEwRDJD\nQ0cyQUxlaTdycXhGVVRzSnAvakJvCgoORUSoqTGsS5hvnV3hJNIz1Y9pTR7foSz8\nXMd/f3TObHeokHsejbxx2yMDLPt5fD1MWc5MioLyMNMpwjqq+T8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvYWZ3a1ljTVhQZFNHTGxP\nQnEzdm9QM1ZqMGZEMVF1UzczeG5LYW8wam44Cm9GKzc2c0M4dEgramE5VlBQK3NQ\nTkdlajFFRzU1aXorV0tuL2M5cENQRkEKLS0tIERWcFd0MXAzYVZOdlgxSDcybk1O\nMkQwM1l5UGRVaHdtNCsyR2Y0VXRSSkkK3Bmoxs/GeybD/cwQf2d8QGdTVa2tfKXp\nTExxPuwsrb+/uaooHbCefv35r8jAmH67fJPM8IjyrcmW9HQpvL9R6w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5SGlpbnpUejhLVVNBVWN0\nMklqalJvT2NTL1VhcVIyUDRMQTJ3cUdHVWtJCmpWV1B6QkRwUHZ6K2pzNDJFSmpi\nZWlpNXo0aXM3Qlk0ejlMWDZ3RXFLN1kKLS0tIFYyYnB4VmhWQUoxNmlBMXZQT3ZX\ndW55WktEOGhua3Y3a091a1ZLbXV6ZzgKqQ9g37DyZNJDyjarEKqnftB4l8JCyCpx\nVJLSsjC4kvQCMhRsgZuLZaoICNRgOQiPIW8+N+bqNQ/WxcoOZM2z1w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Z0x5NUJnK2RqYXNzT2l5\nbkd1UWgzTnFpcFQ1Y2RPQlFKSktRV3kvcFFrCkRyOXRDNHFHY2QrdGhrM2JEbzQ0\nb0xPb21qd2NjRGUzVUhBdW5sVkVld1kKLS0tIEVNQUwza3luSCtEblphYnBlbmJT\ndm5IMVJUc2hBVVRrZEROUzI0YllRVHMKIq8EbkeEXMDDh+MEQqkU7BtdlMTmeGYn\nHgizD8RFh4/0A2MifmMD/9OarqSNQXvQi8z2rTVctLMcLCfuAf53uQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrOFFUdmRIQjVXblRGNjFq\nUmNaYUgzY2hsaXRrUXRZQzFrTWloUG5xbnh3Ck1hYWJXZytEQzJjWWVGblZ3WGhV\nc3FSNXpPMVU2ODdDL3RNT2FTT21iNXMKLS0tIC9xK3NGRnRudVQ5RFFsVGI5MEtF\nSlljWXhUVXVhc2JmZ3k2RE43ak1ScGcKGaUeC/5UFHVLu9NETJTIVsOd+NnXphZ0\nQImkKtlJXxQ4OBJWGP7Ybm5h4mWiqqVWIrkodyH+qo1/EyOwZ7OjgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:11Z",
+		"mac": "ENC[AES256_GCM,data:rEbXQH/lqWkL6EG+DoRNQtNTY0rIXQDR5aK/VFfZLCQw5RYTOdnnAeK93z5uV/jSJ6PdwCPFLbCKF34+aKwSS1xVrLp2oZb0aK1J85sP5V41+r385rxB/0BZP7dk4IaAkEOnU39qoyo0hCYROJ95V+97JhdvV7Y0l2zXypdLuNM=,iv:MqXHtyaOb4di969TLoAyhl0Kpo/JsfUU6pS9Jwes2oI=,tag:2JSV57+uAEQPNm8ODmCocQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/almach-age.key/users/kurogeek
+++ b/sops/secrets/almach-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/alpheratz-age.key/groups/admins
+++ b/sops/secrets/alpheratz-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/alpheratz-age.key/secret
+++ b/sops/secrets/alpheratz-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:BbWM+ivTGdZbMPymSsKWOuUbcozyBKWuXeO0bGTElE2l67OsPKD+Mdw4a3sRRY9xs1RatQ8vg9CId/wiZJSv5c8oogjo/bv3m9Q=,iv:iwtN0Ko7PZjMrPtzzgNvFz5n6X07Mpy4oF+8AZr0nWw=,tag:oFxc/34dkHNkQ1IfACh87Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdFhxQ2hndlFoS1dGd2Ns\nMVFJN09RL2pSekZ1bTNuSjFyeE5QVFQrUVJFCndabkNqdXFESTQ5TUY1TURhZjcx\nb2RrTGUxQUFMOEdadGFFMFMwMUIzUVUKLS0tIEh5Q05SaWRJbHgwVC9aMWsyUUN3\neVpnRVQrUjM3Y05KbTRLR0t0NHFRWTgKbMpXKBQJhHedMYbDB1/N7ASUJ5m8bM7X\nuC3BSGXUmrH81krmnbdaaMontpllUtpdmDd1hYOAbQLVC3UYADfbCQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxejVIbzBWMFYwTEJyWUZC\nK25GeWNtWThUVVRKMXJnQkN1blFFMVJMVEU0CmJGdURFbUVYMWR3d1d4ak1SWFlN\nSHVDYW1yeUJwWUZwT0lMRUgvQmx6c2sKLS0tIDVIb0h4VnJPTkhlcTN0S0dUMmp0\nRXdxSmpXQ0tkZnBUQ1plMVI2RGNxVFEKGnJ5y1umJbn0qP5aCGs/AAuSJMRl+cIB\nfI8wVSGzeRtaoryAIFD/b2STSfBDyjKOkQOQXML+YEsEwqLlCufWKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9GcTYzaFFz\nLzduT3BpTFhwUGxyMkdSMm9oL3J6UGZCcTJ3azBTdVBnUk0gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpkanEzVWo5b1N0ZU4ySWR6MHBTK0tJ\nL24yV0FLa1lId2JPaWZ0aU01MVRBCi0tLSBVRXJxMlVhTGZSajhBZ21TT3Nib3ph\nSnFSdDlpbmg5dW1oNnlkSTVTTFFNCs2S1wPrTFqeOx1kvMPiRJs99VbXZyU2j5yY\nU027yIrDzqpcfqcWx9FjHNtDJzJM/150dNkwieheGCOCaHpyqnI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExsR3l0VWc0\nb1h2K0tPNjhFaFhJTFREQXR6Q2gvdjZSa1RKeWtVWE1XZ1kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYblNDNWZkM2lnUXQyVjYweGZWUnJC\nS1p1N3N4RCt4RDZZNnRCSi84c3ZZCi0tLSBEUkQxekp2alExQWpWSkVoWmpia0hJ\nbldabG5LckwwOVlHUDh1cXUvMjZnCn6Q1+kL5JG2org5bxIa6Y6Lgu+LlTyM2fhp\nNmhsoxrah8FGCsBkSNRwsVJE+RxalkUygQ+hf+ss+dDPbDsZ2oA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDk3M0J0MHFR\nN0E0a0xXN3ovZWVWQmkrQ3RBVklSTUwxQ0hmZWwyVDdlUncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLdUFNYXZ6SStzc21Tc0JoSXYyU0x1\nZW5FbUtGVDh4RmZHUEdGWU1sbnVzCi0tLSBneE90QWp2d01xekVvV2p4RVAxQ3E1\nYjljWk5NTVJWYlI0UXVWQ2J3RkVvCkmNGybBIyBQNh2q5NOoyEg217n6P6a31XnL\nB8a778HPbmT0mhO4QvYn7R/duo07s+vu5mRm8gc5AkCpXiMNkRU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dkNRTFpJcTJJVGlmMGc1\nOXMwRXVaRVdlN1RxdWx1R1AzQkliZjZkbVR3Ci8ycGxwVElGK0h1N1VKNFI1dGs3\nS00vd0gvRzBpVFN3SGZRaUVONG9ObjAKLS0tIGIrN2RiU3J5Ukw4SE9XU1VYYSs2\nMUw2ZEowbW5LZ0JXVnZOQTAzZm1aRWMKoM5Dj/mNrSERSCgZTobwMR5Bm1V6L3Yt\n104IQPfZaRv+eSNoKFv3mTL1C/sdRWR4wevQ5rvR8E/Y3CpymM4ZRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ZGtpZm1ZYmlQRzVId1Zk\nTTNCT0N6aTJzR01tSy9LWTdYbXh3Z0tIeEhBCmQ0QlhDRzdlSXFlWkQ4aXRNQk5m\nTUM2L2J6NzZoTDZpaG0rSVJrMTFsdlkKLS0tIFI0Z0w5dzJOV1orcFcrazdWcHpz\ncDR2MDd1UHdIUlgrblQwYnd4aWVvWVEKJ8U56ajnsWdp96ARKFw1zdLY7z5zhgFZ\nMnd+j5VpjIn2AtIS4w27A+2PX7x+ZysEnnE3K4ndX9nSAzk9shSxpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbXkvSERJZkgrM20xMW43\ndmFFWXFZVytwZm43SlkzUFM2dkZQdU9sZkQwCmh0bStPRDVOYnlITWdFdU5YNElk\nRk1uWjY0QTc3eUdSY1AyTHNTeFdHeUkKLS0tIE5MV21kMlBYbUIxMXJpZ1Y3VktI\nRU1jWVNEN2NCWi91ZHVHWk5CUnpVVzAKlS0amgC+dhZE6TExIGUURr/OhoudnZLf\nfpMXhkGbl5YsTm0Qeqaqu5bNo/XN+77e01WfDwRz+PYp7QXdhMN8XA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaUIrUHpINE85SVcxOE1r\nU3RnQlEwMERnbFIweEZiblhPdEE4YWFZaEJjCm5NVGJYL3pQMlYyS29xLzhtMUlQ\nUlJFTytkNmk1YWVnTFRuQ0licGptQUUKLS0tIGVkRnpWQ0FwUzhVbmRNTWNSS2Rs\nQ0MwMElRV09ROFZ2YjB5cnEybzJ1Z3MKeOo3uU9D9BDJB8m9cZccIj8zztbvGqYV\nSWvR5AxNLvcEkbNKvxcDRjQUSDLWhcjdcozs7JgjO5P7YlOnZNACmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:36Z",
+		"mac": "ENC[AES256_GCM,data:06949qq+AgyxgVLVx9ARvul77ypg8Kq3cqpFOWU/HARR1jgkf7n66SWTmVixkfHy5GqOJEBFQ0HYHzKkQ0BHr94se0bFlR5W+Md6pmDVH0sbnB4+leqR0I/1ZU7o6p3hj1nXlkUWRN6oM0wp0Hj3ClOPM5jZ6C44+cadswCQvGg=,iv:5TwgpN7waxevK8nnRaO/bunyjGNvFojXPPIPp1OrRuA=,tag:vycrcH1t7ZPsyqekae5Q2A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/alpheratz-age.key/users/kurogeek
+++ b/sops/secrets/alpheratz-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/mirach-age.key/groups/admins
+++ b/sops/secrets/mirach-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/mirach-age.key/secret
+++ b/sops/secrets/mirach-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:eJkzZkzzof8qcmbDOirf37W6dw2ypoK5DZ0ONaQkrEeSb3m2qJPEjMPK+oLjayTrajLNj9/e/mbJ8h5odQoue/Wl2iOPw0RA6Z4=,iv:Jx354QB1tReAoeJLHEuEI32yp71vicCwUk61z90WI44=,tag:NotiMJPhArvFNNiXTNK33Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZYXJCdSs5Y3VWbE5TOEJp\nVmpuL2ZOYU5pLzgxMHFkMGtpZG1QZGlENVY4CmVKaERaeGVnUndONzIzWmdtTFcw\nNnNzSW5Zam90OE8xR3VEVjM4V3RGVWcKLS0tIEZSYktnS2xoZlF6Yk4wcVZweWly\nUHlOOE9vUmNYTHBTSytwakhaSnZ1VjgKxoUCSVgFXOKsyXUWe7z17WiUa2OpwImm\n5NV2PeQ8uOnMT0c7Iwl/VEsXbYbOtnW8VT5m/JcLIdlXCBqkQ/B8PQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVjVmSXpwK3JOQ3Jvd1VT\nZFN6ZGlib28zSE9MN3dwYkN2dkpON29EV25RCjhyU0hsZmVmZEY1SVZXb09UeXlh\nWnROTGlGUFNLL2lsY3RhSTVjVE4zZUUKLS0tIGs4Zi8vMnZLUUE5TGJ3TmppMk9D\ncDVoYnl0MGpsbmdQeUYyUlRuM3htbTgKHRLMrPGg9FljvwmWOZUODER/hSsmUNaq\nZBVNml61LztfZMgGtp56VZ77XU1bVLREL1VFyeTwzjpbYggLbuRJpA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHUveXJOK2dI\nTVJDamJzUWtmWlB1aVJCcmQrbElBaTRxYU1RQ1dUWG0wV1kgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3cE1ZOWtDNUlqNWJxNjdKbjVNTGk3\ncWZMVEpMM0RHbVpUQ09EZUtRd1drCi0tLSBpaHNkWDUvSkgyODlhZ1V4Si81b1NK\nV2NUVWdVbTNZV3dqalAvMFc0QllVCph57nPcAfs4fu9kKIJZ5q/ejeP5u9W+HzsV\n+dpVasMbA++RB9SDXuifRkNC4b18fKiiOfOcutT8saG8Fth8/PQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdKVFRBazh1\nVzJuQkw3ZWZJNGhPOWZUeUJnS0o3MDlvd0hTRnZyWnRrR1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplb0hlRElvQjBtaXR6cC9Ha1BhcnZU\naTZPakd2Z1JuMEZSWTdET2Y4cGVvCi0tLSBNTEZKNkI4ZGw3aFhvVDNCK2JWd0c2\nRkpENXM4OXpkQUJOWnNVZjJzYzk0Cic2m6ZalXUPRH2KjKUNlH3bV58NG0CMIgA/\njl1h5rGuFDLfuKiQehkOebf0k+Ndy1c2frJQ1wyM6Cs9OzLexqQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGFmWXJhTGRa\nckliN1dQR2hEYzBFWlNFd2hEWktvejluQkNQbWVnWXRZQ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEQm9VK3BhbUpML2crSjdPQnk4aHJM\nV0pDUVZ6YmV1dUJzeXJBNkpDNmpFCi0tLSBWSWZRSWJGb1J0MGtXL1k4T1RVRWgy\ncnF5cCtUTXJKSFpCN1Q5alJxMi80Crgi+HtBO07LNKqN6RbRRzzjcrym+BkomFTT\na8ZLyCGECiAXoZ26GJ/RRjzru8S8VhArmy3uwa3mKpT5STkFYAQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMStWdXpIV254WjNzMERj\nRXdpSG5EMmd2cld1bWYzdXJLQVlVVnVUUG1VCmJSMFk3SGdacitLbWQwT0lvWm9F\nanhIcUYydGJzYXVYZm95dWM3aXdDVE0KLS0tIHM4TDBuT0RjSG1oUHdYT2RVMHBw\nR1pTY2ZnTXNvZ2tObFA1WFdWZGFsTkEKH30K1NjoZatx84XhIqSxAZwrYpZ8xQqF\noFkKzh3NZ5dp3xJEIIlpSX3mydyB1+THBtKlx0x7oyN2AudO3TE6Pw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPU3ptYnZxZVcrU0Y3MEdM\nb0hrTTBPYzNCYjhlZjNKSFdJRllGeDhVYUQ0CitYM1Bjb05lYW9adEh0VjVaU0l3\nWFg3NXVZamlkQ1ZLdGhQQ1ZiNmdhUWMKLS0tIDR4bVhxY3NSZ01yZnR1NzllMEwz\nRytWbi9BYnJFcWE5cW44R0c0WWpSQzQKeEjW8I/5XNhEs+FCJ4xtjxD60OMfB169\nQ6zBQP8E/yfTIva4dsLCdvRTB49ibsinfzZOyBQ+ICQPz3g8C3Lc2Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpa0M3R1R6Q2wwazROZDN6\nUzFMYml4b2dNcWMycVNXNVIvQzhDUGZ3M2hzCmxKR1RhYTJkN2pnZjdwUW5PT1BY\nckpEeW5IcVh0ZklEVk1VOFkyZ0tDRGcKLS0tIDA0Vmx5NHhCWGQxZzAvOTBUWTFm\nYVlEdzlnWmpGM05XcTEvaVV5OFVNcEkKh2qhAWU+Hwz1Z+JAkirnGc6CMbykCOKy\nTyNxqzHX7z7o+8V+Oc3ChiuxSkruZQyajRgLdkrEZq/bnJDNfM0hgg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMTEttZ1dZYkhBRW1CVGdr\ncTNHTTFHUEZIVmEwV1YvSHgwL0NnWC9CaVdnCjRQWHoreldrZktsbFdCTEdLaXhF\ncTdWTlJGV3hZV0pBNUxyM0UrL1FIRUUKLS0tIGlpY1d2WXFSUk9WWUJ0RDdKUk9H\nL2p0cFNzQjhsYlRkd25RK0ZhUjlIKzQKj5vlI+K3D02AAC8j8Nn99EgOnEc2YRWj\nm3XTcyiCFTQDVMPWbUZXPelCIBLSPmksC1zLkWtlaWmOFkT/iLzWZg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:44Z",
+		"mac": "ENC[AES256_GCM,data:dMYkl39sOxlSL4Bl0S2FTHdHaiRECJkIrBSfthnmT0/LxcYoFi4RM27pY09QFfS5Ohg1DC0Chs+hSBCLsVidSWJCvwyuF0ir4zKJZM7+KeyJFq51InhiqjLXJAMwh0BL8BnCiLcdlblbCCg1JKrlwfMrPl3dLYhi/a7DVWMXz6g=,iv:9WGXjfhrAoEtecJWG99cTZTs6i34AfmL3IkeefuJmJY=,tag:kKgB63Cj9sFjhPfJjEruXw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/mirach-age.key/users/kurogeek
+++ b/sops/secrets/mirach-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/ramus-age.key/groups/admins
+++ b/sops/secrets/ramus-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/ramus-age.key/secret
+++ b/sops/secrets/ramus-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lc5PP4xpLq/JXq2LkG/5zkEY5luxKC7EZHx0s6exiwd+UtuGb5rjIOq0kUBFuJWYFWduqcvNS62kR76oQpRfmjIkq2t02NxZ1lA=,iv:eZsHK9u5Rvt886Elz7Vm+PMD8urm1UyoNbNNwnlJtj8=,tag:inCrDdsNmLb+L+LpF9k4Ag==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0STRlY1h1NTVUdDJRM1NO\nc1hacUg4TUtlK3Y0dVZqaE5LdUlqMkFKNmtVCllTYXFHdXM0NVdUejhHZWM1TnVx\nUURvd1JrQmR2K0N3RlZIS2d0RFhTRUEKLS0tIFp1ZlJSNmd2V3dpN05LYWh1VHNC\nbFNkdkY1aUhTZmM1R1FKUWlGWThSdE0KYxgpuknCD07awfN85PkaJjPohYyqT1wL\nbjUcGo6TmFQKIgEzTzNj+in1dm9wz0AnYl1teiHa9WjK/Udd2BANBQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCd2Z1aTFYenowSnczWk05\nVEZ3d0FUNFNkV3RlWlpFWk5jd3QwazVES0ZVClVjY0Y2eW1hSGEraVVpSjdoaHMr\naS9lWFUvbFl6Nzd4U2l6dUhXRHBlT0kKLS0tIFNCYTlSL1VnNURBQUxoYVozODZw\nVVRkVGVINTV6SXExN3dCT1JmRmNFdlkK+jNS9cUz4TzBBzrtxuYcoiEmxKcRNTlt\nqksdFqnPWzKI+edJSWq3rkBYeuI7c4wmxTtsgVtHbv2jwbD1kJar1g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNxVDh0SWNL\nOUt4TG93eGVjaUxzczhnVjNYRlB1Vy9haWxjYnN6aGI3ejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxSEtwcUxGcVY3RzNjR2REYmdrRWV6\nYWJyTjhXMVNtVFVpczRDc2dDaHRBCi0tLSA3NUVyR3YvMnVsd0l0TXIxQS9odUZO\nZnJWV0MvRlpwU3luNm9FOGtDNkhzCm/yGJJvQf5qvBRyGLrmCeiI31qHr+JoZ2Av\nbqMUeg3Vv82ffTLT6GX+JjiG0wQFcYAX3/k0noVN9JMR/boiWIc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpMZ3JmMVFy\nU3AzeEFFa3B2TGxSL1NlQjhSa28waGtLQUlFTkp4N0hVeEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYVDJSdCtnVHIzVXhSQ0lXRzE5dlJo\nS1NHa2F1WEpJK2xJQUQwa0RNNCs4Ci0tLSBBdmpiZGVSOWJwanRiUjUxT3JMT0VT\nM2k5bE0zOW5SVWg2ZGw0QUVvcWVrCrc2TjHS6Pp38MTPU9H59q2seVYlESH80V4+\ny1/qjB6fK8lnnyi5TLrSo+M9MAcG5T4EGvCcAPuzjTvF/DO7hxk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9jZllPWWhO\nV3pDa1MxSzF2ejRJMXJBWDlNMzZqcG1JdVB2Y0xjMlJKeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpwSUdWWlFFbW55aXVkZ0pSeUVPRkF2\nTm5tTnkrTGNmcEdoWE1UckwvcXFBCi0tLSBnN1J1VlQvVnRXbkEvOWtLbHhzVzNN\nU01XVkpRNnd4bCtYb3poNjR4bno4CirmDl+6Kebk0jMjgRp00d8kpkzGtQFsZNht\nm5MPBM+FXVzpDcEWQGUlLr50yDKYVzHdIeeuGsWZ3KaI1GM8pdg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByOEQrR1Z1K3RETGgzVi9H\nNXIzUW04UHFCMk5vQVZEN0taRWJwV040Q3h3CmpaVWV0WDZNemFSTHF1TTF4YXI3\nL1loMnA5OUNCbE55aGUyR2EwbklaczQKLS0tIEpnTkkzNStsNmdNS01HWDhXY2s1\nZ3hMNXA1dXUxVmxucTdtbWN4akQ2MTgKAolaT+61/BN/yzljENx7YZTrFRGA8zwN\nsquQs9vnFS8yduVMoaemXrCLTpiQ1KGCAWVX8pPtY8+GV9YKLZsV7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTlNuQXN3VU9TVTlQd01N\nYVBpN1BxcjRLYWN5SUg3TlhUbHl0UzkrOWcwClZ5OHpOcGp6V2craFBkWCtwcktp\nWDZYYWR4ZjVhaVNPdEN4WmZ0UlJqR3cKLS0tIEx2WXdQL0x1Zm5rRnJGMmJQWFVW\nNW1nMFlac2lyY1ZuOW9OZmNWSjJxbTAK72xqJBlpV3UWAFhGlUjudEILQSnGDhQm\nS4U51sUc8rrUZLlmAivWg1nxCUAdrhLo/r9OuITR6QX9DeFsaeR9uA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WmVUUDJ0V2sxS0Q1UFZv\nWldFK0tRSlViUkc5aXFTV0JDdDFVbVVXR1QwClUwLzg0eTAvbUtaTVRFV3ptZkJQ\naDR1REl6MXZ2cDlsZzk1SVI1N3pocGcKLS0tIFlUbGFPUXAxWVBvNXhjZ2QzWGNh\nWTkrMklIQnl2T3ZYL0Q1c3JOTU85bkUKL4h+PDQSnVbls8iuioUHTBVpVh5Yhhx5\nrK9ELFCYGPAVzbx5cFoOapnIJcTQUAPZdBpmlm7kgRmMLXptMdGkGg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFZ3lPeVJyZUF3cVEvWnhH\nbVBwRmxaQUhaaExQSVRyeVJNZVFSRkFrU25NCkZDcklIcU5TQWplQkE1ZkFTUXB5\nLzZ0VFlEdks3OWpGM0JMSi9ZOVNndnMKLS0tIG11UFZkdWRYdHZJNk9TSDYvaHcw\nQUk1dGxIOFhwaXJZaEZNdVppWWlpdUUKQJ/UjgWIaeKa4o2El4cFkwv+O0bi9SOp\n13XExCNLB+BtwOGPREWbrmW/Z15c8koBEyrW7iuIhu0Pgz95oAF2Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:15Z",
+		"mac": "ENC[AES256_GCM,data:ovjPl0pJ6DSJGjGz+Zt5GLbwu3ZTMwOKNSsYxIx1NcjWAiGYpPNFcFrD5OBciVQ2K7VxlRoWW5WqbJt7mrvQXDO69LxvQqiK1+qHeFJOHRd6Sp29fRA1aqEz+kOif0SSzaEkHOXAp1kzk31CnEfIG2j5yQ3oMyrSqNnhnVrx6F4=,iv:NdeCrqNo5SV1Npu8aqPJcZDhPMGfUviyBQi2CUjYZOM=,tag:yM6P7P2vLUMs9GdT284Gvg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/ramus-age.key/users/kurogeek
+++ b/sops/secrets/ramus-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdOw6Q9jQ7fqnfkjycFRqJ7OymjqZuszpuNHFhjbqNT 
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/groups/admins
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/groups/admins
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519/machines/almach
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519/machines/almach
@@ -0,0 +1 @@
+../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/almach/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:lZW46IVDrqYM+FrqwJu5rcHOiG2oOBudTtRPQ14Cvdg=,tag:/4LsI2sDgFTUAYB3X6fIZA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYeUQ2QmN5aWVQeHNhZFVr\ncmxKYXphcXE1Zk81clRuelBhL1pkRFhrK1FRClhlZk41bTdSbitub2orUzVRcEph\nZkRyd2RLd3VIcHFHYnM3ektnQ2RVOTAKLS0tIGE1SkJtM3hJNWp5ZWJ6Ui9TbTEz\nTjUxVlB5V1Y3WEFSMlZ3cEZLZXN5ZDQK99N/rmorsxnRDLN5iKg/bFR5XHSmgWtG\nyhGTSbspPX3Fl1N9dTtFrhvqXEL6mplw+ebDzWrSuw/baM7C/LEwKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2L0Y3UGU1QUkvWm13a3Fr\nTnNwdFlhOThFVzBHaE1obFI3NjRCYnhkRUhFCnJPcWc3ZG9zYzlOOFV4RlY2aWxV\nV2xJWFREMWJRZ3czQWs3L2ZMMVhMQVkKLS0tIENMbU5UQU92c3U0cTlwMS9FMExT\nNVFVOUdDUjZsNTBnWHFCcGNzdTZGVUkKg/BBhYoeL7JQTuv4KlXEp/w7fz80a1px\n54mW+gMyR/knHUyqDVbpzFwsMOlchA8OdgaT4ufKvpGRCJ7ekaaxlQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFV0Vk1PaEJO\naTVhZFRSMzR3azJpOW1jbjBPSXJjTmNEc2wwRWttNk1yemsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmYTlNTnVoV0xaQjFVcUhBaUVnVzFO\neDQ1cjBmdEphd2lCREJjMVVseldrCi0tLSB5OWJ2VjZodVFXdFgrS2kydndvOFp0\nYjFpL2ZKaDB2RGNQekFRd2NwdExzCuDsy/hhZeTdpFaP75lObEv8huDVEq9YIhcp\nVX1YMprmgHRIwlPnjpd03EtD6inefY2TR8kssoTzRvAxPUPrjWc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJJa0lnVnFF\nR1JaSVdDam8wUzNtcUM4Rm9OUXpFN0hvRmVSVVNoQnRlVXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpCMzVmUFY3Y0dWNktnZ09iNkRYTXND\nQ0NxVS9hcnlOK1hmY3pjNUUrM2FBCi0tLSBXeUZqZlJBYUpHTk02dmRON1l2UFkw\neDZYdnBoM3pvaVVlVHNmMy9KT0Q4CniKVpJkGRfkrKqB7FRl19nZ13uTubVh7eoM\nxw6KWYFkXrXZc/oGgV6YmFuBfh+/VcDfcNTpWs08xbTlcmpvnbs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBqRWxZR3RR\nYXFnSEUzVllnS2ZLSXV1MWlBTjA2OElWMzdWWGZ6a3U1UVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpueUFIcm5UVFhLR1h6ZTI0cW1nbnZB\nZlhTQ3F1MFhqdkV3YlhmM0VacFRrCi0tLSBYMXFDNmhoS3ZDWTZyTzVZUytHT3Zy\nUjBMS1lVUHVkL1BCUC9ydTBrK3BJCmSB9CzrO5Zwr/uDkNVL910mbCyOGkBXUWWg\nQCZapgV2kUw5ct241a8fNZNdBVb4wxA7fMIIj9SYqO0LWd3dIgI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqUkd4OVN4K0FlZVpBSFpo\nOVRPTVkvd3ZURGlDNU5NNW42aWpHSmFGbFVJCk85K0pZd2NLSjJ3ZFB2aUVnZWJX\nZ3BpUTF5K21nckh3T3NqSm91QThWdFkKLS0tIENtallaTHJpNjAyV1F5dXlSSW44\nR08rYnVDN25oenZRTEtCMDlRTkVlczgKc/Q1JJ9O0qBWvQiZASAjvAP0l84k9cQf\nsFdOd4bJnVmYeFGx6zIAU/t0dL6sHgkHF5M5byCcVVFtgoF6EX6qSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUVFhwRmc3TnZlSXdCMC9R\naW5uOWlIUG4wd0ErNEhYZmJMNURmNitLT0NvCnBSWVVCVWxSQ1VIbzNwcXRZcmRr\nY2k0ZHEveEw2Mm54UUJVa1ZVQ3Fxc2cKLS0tIG5EWldvYUtndjBHeGlXcFlLVmdi\nK1ZFdHFvSXpBbDdNdm5HZ0g2Rkw3Z1kKUD4PhfnA2bM4KPkEExQvhARXWACKoJs2\nPu3jTrIt5NWIm6w/iuMGgbaN6FVSKjhutpXnvPw0PEIRtkBss/ygoA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDVm0xWUMxYjhSRC9zOXhD\nTGZ2aVV0ZjhDSFBJL3FXY1p6VGdwU3RXVTBrCnhrQytpaXZYakRaUitydTZKYVlB\nNDVoYzhFU05QL3dBcUhtWnQ1UW9NblkKLS0tIEhlOVpvdzRGNDN2UmZNamNkbHpT\nNENxdUpkcFlsVXpqOU1BNjhlSUJqancKEVQL6rV2VpaIAgFQx700dEVE/8qfruYO\nww+PB7AwFSgQU1NOTvsAQ0yFSegwVe6xouQLzaRiowv43eyIUBTnjQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2U3pjODhRN0VGdVN4dEM1\nY295QWZsN0NycUtPRkVpRU92SThxbmNzRFRzCkpnMzE3SytiR05YZFJ1UkE0SjVH\nVEpNR3B4RFFWSngwa1pLZFRraTQ3dXMKLS0tIExVNmlhaFpPWHF0RTR4ZXBoMXlp\nT2NpekQ4RDVSMTJNc09zaFJIZTVuV3cK7KWdlVUrubRDgE3q/tlsbi456SG/4cvw\nPauejaZnUrpA45fUK0psxXoZkdshU0CiAjoTT+4mYQHdbZJdl/9TBw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhdXMvZFhTOHI5V0VEejFY\nS3BrY2JiaUhvWEdia3hrckJ6VTF4NmVkSENBCmNyd3ovU3ZVcnFTY1JmRUIzVVRs\nd0NrQmFZMTVZNEVYN2pkQ1ZpNGZuTG8KLS0tIGhSS1A5L0ZsbHhXK1lJakNJMzhj\nYjhEekNkL3ExQS8zN0N5Y0M4bkZhZTAKgIECIbfnjKwiwuH12XO/yTxIsdlAFL0o\nDjQQw/IP0iXISebg4edaPJse7ZaOsGIKJcuBrMcDqS3QG/tCNdNUDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:12Z",
+		"mac": "ENC[AES256_GCM,data:+GN4dlUHZ6OZrcOHeg076Kh2cH/9U7kRZk2qlpoS79BcDdv//ZXLJn9OusiAzwfRELud6SAL2yINeYctZJcVTb6z6+nqS3O5k4Ho6qMDVF/SKS8/C64gV1Ld/bmpFJiYp8Tp0LW53bzCkCyKdGJsMUAItwnu2Lr7mKAGJyw83II=,iv:7Fd+sO2F46F7KvbQG/yryLpgUjUjhTErP3nxWwkmmHI=,tag:Hh7sTl0PwhCV0fn3q9qVXg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/users/kurogeek
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/users/kurogeek
--- a/vars/per-machine/almach/root-password/password-hash/groups/admins
+++ b/vars/per-machine/almach/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/almach/root-password/password-hash/machines/almach
+++ b/vars/per-machine/almach/root-password/password-hash/machines/almach
@@ -0,0 +1 @@
+../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/root-password/password-hash/secret
+++ b/vars/per-machine/almach/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:qKgdwe+LcrK9nul5PooncV5bimaTSNsKxYJjP0HYr+ZFZSoCDv4GE6t1gN8EG3JMNkn+wy1I2ysZYxCAm23OMhWt7ep/TIudZTmt5tvD6DSQZE+4aTegJjfxfJC/P41zjFgKMK6+JYCF+Q==,iv:iasUB+pIE5i89Y6rGQAHzh2uY9plNeZf1LrmAA746LI=,tag:J7l81DrJ2idNdOjRE32Pew==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbUdVVzh3a25kSURyWDFY\nYWx2NFhGeHFnbTgwYVNYdklmdmJPcklRVlNJCmdDajZjRzdrWXlyS3JBQ3NtbVVB\naXc2dzdoWFA1bXZmd3M3TlN5Tnk1WVkKLS0tIFVzZXhlblUyQW5EbHVzWmdUaHNC\nMW1hY2k3c1oreDdDYm9NcTdkQ3NqN3MKNzAS0Ui+cMC6G37Bbf2eHLMvdHeEwj5k\nj7ev82olKPQHVA3xW4zDvi1wLOqY2MF9dRUqKabIAnJgCIVENAQIUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTdlRiMm9vK3NETmx6eHV0\nVTVyN2JJc003SWFzdXZQL3g3Q3VMUXZoT1hrCjRqdWk4Y3QxTVdVdFUvYXJNWGFR\nQzBGRXo2MU5SZEI4cmVQU0c2bnNlSlEKLS0tIEwzbkpuZmxWb2pNc3ZkOE5JL2VL\nRnV1V0J0bDMrUEVKR0pnRlJWanlZSUEKNh6e9N2QKtOAKimo9V3m0hFSGDwal64B\neEyxEcF1OAscFGuGkKE7yjr9OXsxIzOIC2FR68wAAGIIox2eo7QzXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZmSE9ZNWlh\nMFR3eXpjN05PZ1FpN1lXMHBZS2NtcWlZcU9sY05odlNYUzAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoanBGRjlFYVhIZUoweUdQZDhheUtX\nMXdvWm0xcmxPSHhRWXdsWi9aVWpzCi0tLSB0Vm5rZi94cHNyRTFDZHI0Sy8zOUww\nTnFKazJrNzVZR0JxWDBZamtoNkQ0CjDdKrB45JpFxLOSVWrZ0RhKJ+Ms9JUV+xlq\n/MThL4Orh/jMkfMxznMXNouRYtemqAZ1fitulGDSk4HiI3cLxgE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhyZEwxYjF3\nb1BEQjVlR1NSeUgzbUhNcWZEdkNhb2w3aFdQbzY4RlVzalEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpsTWxIcEZrYXkvNmUzblNldSs1dHpL\nWUswWVhUaStwSmJsSlBQMjNHbTFrCi0tLSB3Vyt3L2g3ek12Y2pFK3lRN3lsY1dv\nZGw2M0pzN2xyTm02OHVYdXBpV09VCkC7pQwanvBkJowCj86oqKPkNwAG2vjVr1Au\nw7xC+przWGPYvWEfSmh3V4tGxxGPJQimEt8YbuySekTAMFFafVo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZRV0tHZEVH\ndS90NzNOZXJyMTk4VEY5RGdoZHhEL2VhQktmbGUyVzVrUW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp2Vmx2Q3ZLM1pNOStHVVo0VHdDSWFB\nSW9CQjBDMUdqdmRlb1RaV1JMcjUwCi0tLSA5NjlYR21kU21JRVdEbE1BbFh5VGdX\nTWJneHNVU05Pa1oyR1NMQnlJNzJRCsHbmQwnC9a2MSaEbMzAVKuYE3xMHjLlR/KJ\ne6rFuntmuJeLjV0srcWkmRT6UepGkUoo3cT0MJk+FFCveoMOuvE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzaDV2MWxjeHRIVjRSeFBK\nTzBVeTk2NHFXSkhQbzQ4ZTl3ejlVS1lyNkVFCndPWSs1bDlyeEVCMlM2YVhuOUVh\nRkhpSkNqdEJZcW9zRHliVkxpRTlQbWsKLS0tIDE2ZDdMbUpTMzFSQXVVai9PY0or\nNzNOUWdEK2E2VnFWS2RiOU5VMFkxY0kKIjTMDcnrcax15QE/P5vQpklzIfh0dOjM\nGhWtf26t41MvMqTtXCA1y9uvB/yGh2Fb7Web1L+QsljU67xaaOP59w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWGQzcTZHRUREblAzTlIv\neVV3QUNUQUVMRUUvZUVKZkNHYnA4d0FUZWgwCmJiVit3VjZQUTFJMDRiRks2VE5n\nVHdOY0RZenpYVU93NDBQRE9TbEg2dU0KLS0tIHUzL055ckI1aThoQnhreGtLQ2ZZ\nUHB0dCtLaE9DQXEzM09ZY0NjUFBkWG8KG/T9430gM9BgX3GrbgoU+MCOv1etz6eQ\n5Qxvv92y8qF6ol4bqQP5ZBWUgZBkn04T053oyEYFAODpMmEUdUAivg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBYmYxUkVyT29Qa0xrZlhO\nL3J1cjJBYlBwMmk0MFFjdSttanBqajhCRDJNCnJWWU9FOSt3QnQ5b0lVYVQxVW9j\nRFlMVXFWQ1kyZFVqN3JHNllHdjJyeHMKLS0tICtqWm84eGlFYmpNSlVEQUxUS1JP\nK1MweWhlSWNvR0tsMDFmYUg5OXk0Z0EKfty8Hy4tCWKBoux4WLJCC8Jb6SdJiJCs\nUZQyMxFB+zuzIH9ES1wXbLf4KkEIYkxVvZ23Li+vwRuNl1AE2gd+EQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU1dmMFpKZjlWRzc3UnEy\nZlJWT2I5RmNjQ25TNzZoR3ZJbU1GR2RQZTE0ClUvdEpMaTRxU3dRZDJ4SkFqaDZ4\nTmFxWGhIMU03ekhuTjNBOFFjM3NzNjQKLS0tIE80aHVVdzhpeHBLU0dubllhTG9k\nRGNHaEtLNWE3YVk0OWxsQnBsNm51NlUK7LkRjc7XeFxGeqynVDEfTH0L9JxO5VTn\nJXkJnomtm8b256uN3K6ShuSzhY32Kftot8DREEL2Y3YSpCTCvyZyVw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzL1JXZy9lUG5DY3J0MkVh\nRkx2d2ZTQVp2ZDFiU1k4ZFVncjlpVGRaaUg4CkV1SnJmb05vUm01dUI4QXM0YlM0\nM09NV2JlanpYRmswR0hqbWtXc2o3enMKLS0tIHFEQVp1NUNtRFcrNGQvYnJFTnNC\nWDgwQ2wvYlJYVG9leDVvM0NTOFZ1dUkKhI8HnKBubaFZVY4+R6x0hqCq2mzIogjk\n5zdhgMYZHQMyUF4xdKpyFcwIQsIS+0jXi38clYPKsqRgIF+ixliVAA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:12Z",
+		"mac": "ENC[AES256_GCM,data:7LJ6kgfOH8O/UCSA/PLX7ti3zJPMTM0AjbwD3VP76dwXxQrSyIQNzBq8+lUfQjK+LRdjxhAubqw0LcbHkkl2JteavYssI/NcIX7aXfD3kp2J1I/KPi15iRFYzovUbFKP9xWs0OM93Gww+tFN7n97WU+uv2a6cOBu71iIaJev0vU=,iv:BRkY7ouLdYxScIPK8+79+0hbOPMsEcXmLzjMUNcMEOU=,tag:vKHVhqbClRlsptzdpGb9aQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/almach/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/almach/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/almach/root-password/password/groups/admins
+++ b/vars/per-machine/almach/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/almach/root-password/password/secret
+++ b/vars/per-machine/almach/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:aM23Nx6KjY0i8MadQmdgSrxeaGR5gneo5U6+iD0FvkirLhMfng==,iv:oHozKL6lUg7kQZwck2W+LNMF/5aTq7qYNnZv6SG/S3Q=,tag:U8sU6icf5eZ1Zw83JkleAw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQS90UERSZzEzTklKWm11\ndDI3WnBJYkNkZ2NCTzRja1JOZkQvOWR0b0RjCko3YlhmM0hOQmpENXlXbmFmZWU1\nUFd0d1ZqMllKRU1hYUV6ZHhTSUlTU3MKLS0tIHF5bjhvampHQVRuRFZZandNQjZp\nUnB6NkpjdDQvb1RWZkFEZkN5RGpTZGMK7abRMAIT34QmAgm2b72TiPcywEKqxoro\nhk8jbo43SIYkUbH4akkvnuSvQJb6Kwvj6lKUckNvUvnNGjdwxTVY5Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkSVpGWVBBZER3NytqbmFz\nOUZQL2d1QVViR1NBakJnN2YzZk9CMm5xTkZRCjl4STNvays0NTVhWkl0ZlBORk4y\nTW56aDRCdjB6YitHUlBaejQyQ2NDeG8KLS0tIGoya3ZWbEJESFBDVUxKcGtNY21M\nN09hV1ZYRHloM2QrR21OcmtWMnJOYzgKnKSuJtpGFPiNSJM64adLevL9dVEx2JAy\nmxjTb+pMZvZnOZoBoYFe9L3UJK0HSQJoxAQmHNUtCiztX2zC3VW5sA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpSUGVKRFY1\ncTk0VERGRlRYbHErbDhLbXFvblRZOUhKaTR5eGhVakJpV3cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQorY1ljckVpNklXYW5rbTFsRjNubHl3\nb0ZXdjVPOXJUNUxZbDErLzBhVFpjCi0tLSBKbUMwQk5MWDBrUE9UdlNWWVIwQTJ6\nQWFKbVcxcHN4VS81NEZERzRpK1c0CieyhuRbAWqBJ2b4ggYyvadpxcNkFAaQmN7n\nfGYjpsJHueGsuoAsDJj7fqyR/GVc6y0PlPhE1c48xqYCqGDkihY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpiaUltOGtt\nYWFrR1hJeG9DTU9QVnpBL1BIQTJOMWJHQkwwOC9RUGJOSEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo2OG85RUxJKyt4cHY4dlhOaWo3cXRT\nbEl6ZHBaVnFYcXhtL21hYW0reVJVCi0tLSBteC92S2pGck9jTDlkMDQrQitNbkt2\nN000dGsrOVVrbk8wUEgvTWtxNUFnCoYEd+lV2mlCKbko30Jsy/vCeyDwpAzuQwr1\n2eq/HiYfDm8um6L9rlTyHh2DsDj4U0qwmoXg425LIOe7zn60MbM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFY2VGxaTnlY\nNDNOSWtaUUlKWEdyUzdXNXNMN2N0RzNlVHUyamR4QzRiUzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp3NU12UUxNWU9qdlBrUUxOMmUyNDk5\nVGpST25ySmtCeUxwV1pHaGhCaGtFCi0tLSBMRjBjSWE3U2FiRzNNbkp2bGdrNUZr\naEpHVGZQVHFsYk0yRkdzYU80K3pNCiEOIisr2TXtbvFbjSJEVyPEpFS4bRTrO7kX\nxZQxefLM3fOo1JuoOFduknGfvvO5k4FvdvSNrQLt/5GkwugvNKk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Nm55MFQrSDRkZEsyNzc0\nTzdIVy9LWjFrcTBtNUdCemZjT0JJckNKTHhBCkNWd0tGNmxreWVqUTRoemxDZWpI\nU25aamhrdGJrZ242RVRjWjNZRGVkSDgKLS0tIDlxR1gwMUFHTzIwOXAydGlCWFdV\nSGsrdWZIYmU3dkdjUEZ0aGR2TTRJQ00KtxjSwm+rfs2fVz5o9mgWLeFUmn928Yug\nfk9nDIO8t1BgkPcUn6q10LorlTMCE/cwIntd9rvxaLPEawUbx4uRNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBROE04SG0wSXhCT3hxbmRU\nTGwvVzVkNzUzbC9TRjFWSGs2SXM1VThOdVhzCjJjUVJtSXBTSUdoTjFoRVZPd3VM\nL2J3bzJZZ3NiRlNueXNiTzREQjV1UkkKLS0tIFJZNTNYbDZnZkNhZDRmWUJaSTJn\nWWhTQTMwWGp0SHMwcTlXY0dvK1dvSTgKjBQRgzIQlohKOBoL4pT7so0zzgttcEJC\nJ6wlqO4BvxR9thiFJsawT/3zMjuSc66muuB8VLIbFNrVp+6FTUxGDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvc1Y4eGQ4YWFDZzYvZlRB\ndlN5ek10MVZsWHVDck80Z0ZGbEppMXpZRkVJCk10M3RCQUZtenZ3SGNwcEY5NmVl\nMnlsRnpSQm5mWmZRSmxpbDRzK000TkUKLS0tIEkyYUFza3N2OVdpSHFMcXZ4ODVu\ndHM4R2t6V3BJbzVPd0hzS2pBem81NXMKePu26+xFyHydHnlggtP4KuRpaoc1QCfm\nW2bwaYm0ib62aEX+jg865HUMPT5T29PGPHx6HVQL5Hm9PBiJLmsYVg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VjVjd2djbElLWnlXcEJW\nVFFPaE4rWjExWG9YeG1PQjFiZmplRk5nS25rCkNmdDBRekhhQ1puZkF1bUtDRVJG\ndXlhRkRsMXVMMlQ5VmlFUEh1RmJQd2cKLS0tIGYyb3hReGNUeEs5a3lDN3dHUCtJ\ndklINXRZajZxb0VyYzIvd1JScEVXcUUKAQpAqCsPe2hZqM1xezw16TnHTmTzdIQZ\nqAIiQS93IXZGm/FKYgtL+xfyeluWuTKFGty21TWmaPzQa582hRW2SA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:12Z",
+		"mac": "ENC[AES256_GCM,data:llwcOSXz1/pMQ+0y2zNocI1AxEhkr527dEjf9YSrtHWjS06KiPdqp94/uxk41Prxp4JhyIuexa+zpCizVrV9K3l5NwVcuo9p4p0L5sbD6zuej7jtyfZlfR1WS1SY4p0ZeXAB2ig6yz2CJFaOWV6BfQ/7uwJbI4sJvw9ep3ZRPHE=,iv:1ONKHCV5sEZblnCPFWlhG8FXYsprkEjkC3+PRt8U0Lw=,tag:0fPnP9oMtqq3PYi4zAG0cw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/almach/root-password/password/users/kurogeek
+++ b/vars/per-machine/almach/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/almach/state-version/version/value
+++ b/vars/per-machine/almach/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/almach/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/almach/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/almach/tor_tor/hostname/machines/almach
+++ b/vars/per-machine/almach/tor_tor/hostname/machines/almach
@@ -0,0 +1 @@
+../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/tor_tor/hostname/secret
+++ b/vars/per-machine/almach/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:bBv4RU9xHtZzuQeWLLlqBTzOytAFDWQxNmZyzQoX5+t1BGB/OY3Vd+bMSli38WRk/EptTvHQ567wiWAkno1D,iv:x2F1cLxKjlefuljYgD3givgayroxj/ww9u0o1BwBp+E=,tag:QFWL/LbN37Qv4Ukw/fxeFQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRHdoanVYTlRCcmFLQzA0\nYmsyU1lUcXl2ejI2NUNVTVZVTjhUZ05YSFN3CisvNmpKcVRFeGhnSTZMeG1hR1BC\nQTdHQkJyN0p2Z2Nva01QNUZwaGZpRm8KLS0tICtCams0UGRVeUFkd0ZlODlIR3Qy\naE5aUWpQMnh2TGxlRDlJRXorUGZ3MkUKyWWDo3sEhs6x1GDCSydUExY/U9HSKfSs\nuvD4sf5A/ng2KBchiIAZ41Xi4WNuM9izOP4aYJa8G2LHP2341qexKQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUmxTYTBBdVQ5YWR4MEky\nNFhzdXhmT0NERjdsM05SUjcyeG5BWVkrelM0ClFwNjR4UHRoY3Jua1dZR1JQVlly\nVjlRa0pVVnpwSVNoZEJld0xBZ05nL00KLS0tIENrdXpzZC9lUGVmNWM2WHpXT0NW\nQVZsMXBxa3FDdUdkeVdPQmZoT0VHZUEKe9o4xSo3PFHXPAhAoZ+BApjDW3HskTU2\nkvkiXkhi5Kh+KGXU3wfKuycy23AcxE5yBoD5w7uIZnCpqrP5hXUBEg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJBQUNIV25W\neGwrZ1BaNnZGT2ZqTkw5ZjY1K2xuMmIvMUlYWGxCRDhpeDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpteW1ST3dmaEFhSEF0WTA1T0wvUERN\nL1NYZXJVQTd6QkhLWVVsUDBWREZvCi0tLSBsYW1sNmU5UmVNVE1LamxjU0twZ0Zx\nTXNPV3orSnNsMnRWbS90MnVlbG4wCgZaxUTjqbGQR+RWpf6QdKW01T0REYZAsMxU\niKp4FZM/Fonv2q2BxtBhwDeDddNJZx8xwtFshodBwHHhEdvmI3U=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE41RGx4WnZT\ndWlCNHdWZGtiZDAyN1dFYVJ5YVRla21QWWFlV240QjkwVUUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxT3ZpNmFMZVpoRXpTWEhpWlh0UXpO\nUWJuOHZDTkVXakdXRVRJWXlEL280Ci0tLSBJRnRXbnh5Y1AvbXVkb1prVzFsWXJs\nTnNoMHJCMnZ0cytCdUk2cmlOS1k0Cqd6psvtkONaeCKL2oqInggcpa8MtV5i0mfG\noiPjFlEsfU69y11FmAYzuZIDk1XpBdUWmdo+1M7KukyghH79Jvk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDhLd0FkeVo5\nWGFCT1Y1eTd4VEJIcTkwQmlUZzkwN3NzQ1RRR24wT0xsQWsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpreVhYMU9xMUtBSExvWTZKckdBeS8z\nekNOUlVGcGJXa2JCNkNZR0JRdDBzCi0tLSBoRWtMV29FY1NaSmVyb2JSbFY0M2I1\nOHBQTTBVejJIT1FoM0J3Q0N4emJvChGXxNQcCnRQBQu6pGY4ZpKkv04ifqlGM0GI\nvLDmTLIKhaijmjMpALgb/MPJBNu7tJRPpDJFV2UfWQTiJyBJ7Cw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZM3l5cDlQN0t5V1RLZkRI\nU0ZobnM4eUR3RlFNUExzWlVxM3Z0OUtuVEhrCkt3Nm83bmtOZXpzK0ZhYWt5R1hn\nWDNnREN2bFJWamhqQ2k5RWE1WGFaYU0KLS0tIEIxeWpHazB1ak1OTGhiaDl1cDE5\nWTR1NkdEeE1ReW9OV3JqQ2NJMElPOTQKZqAaWQZESZm8PMWYzdGihncQURVjJ/hi\nenoGMAjAhQgA+UN3ITQ2kg1gaO4lObDM7TwRY4yWede2kLVNM8HY5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOVg1MUxRcUNVQkRVU1hv\naUg2ZmlvVk5BaGwxeFFLQUxlNGQva2ZlSzNVCmVmZkJtaGNSV1h4TFc5K0dzRHpN\nT01TeG0vMURpVXFFRkhDNTBNRzBIeWMKLS0tIGlvQW9raysxN01pazJoWTZxZDAz\nSWs0dE8vL1R6aE9yNlJZa21RUENjaXcKFclp8QazHlJ1/NVBgVL4QJMoV8spVbne\nvIsg2kAuXxx3QF23ChuBcKcHWg0r444DNLRs0PLKx4zIPDDvxl4ung==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSYUUvUWUwVzNENUtwY3BD\nSDlHTitsRmxjSWw1SysxSThNTENLd0pKTkJzCi85QklKa3NYRWxpQTNEampDV29F\nQ1IwYWxpdFNHaHA4ZFBiLzJBMExkbzgKLS0tIGNoazc5V1kxOUU4MHdBZ0xINFpy\nM2FVbUpVU3JERWVlNjg5U21ZSUo4dkkKhZOndTQD7VyOKsJ5os7/AGIytqv73YIM\nDoSfvndsYQTyUNfcEHp0uqKp4osj/sgfS/nRTFKy5ZhA5rlwm+N5jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEeW9IQ1JvcElYSVkrM29y\ndzFTQkM0UGJCbTkySXQyNjdFVDhjM0hSeUVZCmhoNm1pU002b1lKWkpCdGpLeVFK\nWmlwbzFlK1FxOWtDNFNpdGpUdkRpdW8KLS0tIFFhVXA1eWZJdlNERTFsTVpOakMx\nanVPTGRHcVF2ZDVqc29TcWlJeERrbTQKrlfBZBCzW2Dq/z9dcBPkWo2qp1PXL2DD\nOHSgcbbeNkRppIyRHV0ltkUIoPwdSYnPfmAnAI6VZPmqNojQ0olz/g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWY3BEaHovRU1IWUJ2TTJ3\ndWxLVitBUzhLeEFEek80RmNKNURMVVdiQkEwCjh4WTRoWm9Jcm9jT1cyeXpLOUov\nVE96dk94bzVUZEZSblB5S3ZqbzJKaGsKLS0tIEFzUVVGak1naWhJVVZueFRkaDNR\nUmFMbUtuNW11a1dwTnE4UzVQLzljS1UKHfLAGo5oEfymhv1VW3FFsvRwm55KWbPZ\nq+9CUtHsSZb1z9iblKhmiDRisAqXooclurQycI7il2z4AJ35a5Dtxw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:15Z",
+		"mac": "ENC[AES256_GCM,data:oJOgMXVSuqx2nVOssN1cQyW9FsxgWb1h8aCqEYrz51oMdontRFrIOwt5ckoPXi08ItlYX0fSiOO4AwcNRUyvAoZguQJdEK4/0xPfRfWvXkCSK8c/1bsLNyIxjxcwRPRa/EqsHF6umq9Oaw32L0MAbHRo7TB9E7L4xeFevml0p2M=,iv:pIAEoiueCMOym32oU1CrYLBsJiMpQE/LMBO+DY5qWFg=,tag:xOkLxmLzQBxCQgGlqFFVxw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/almach/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/almach/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/machines/almach
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/machines/almach
@@ -0,0 +1 @@
+../../../../../../sops/machines/almach
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:+l6Vi1bKCFTP9nDJr06EDCJp/FSWotbcaSQhOmAQmKteSE/MMbuum0ca6n+9K7KsfgABoQ7Tzi4Y8NUmPvwXN+/j96KJWEFDlYDufUHfiYYO/f4THI8jIVrHXj5Sphu+,iv:QD2a4p+PnCbExwywMTJVTZ7QxMNF35eIe2O/EMnIlNw=,tag:F7wZboCRj2k0kxazLOsGZA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyeW1ORng3cWpFd2NmclFN\nZU5CWVE3RUtFNnowSmdXQWhodEp1MDhKUGgwClFpSFFBdTNaUGlYc3J1RHVFcVU5\ndFdZRTNWN0xtbU1mSHVSemVGQkFUNGMKLS0tIG5GY2hlSS9CVE5jeG16VUgyM3VW\nRDNPT3FIVUY1WFc2VDB1VkFPUE0xMTQK+V9GW8KJqE6Li5DjWnFNhyTR3sT0aeTn\n+WsMfO+hIBYUJdiJnOkJHgnhS/Vvcbm1/GHU11+bEkG3Vhh59JawsQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrTmZJTDNjSE5USHoxUm5V\nUmNVOXVZbWJqWThBOWNkdDRoNThXeVZsSFdNCmI3NkZ4d3VLaEZWWjhzSWp4RWNm\nSkJYTnJ0TElQZG1iTE9mbE4rWWp0Sk0KLS0tIG5ic3N5ZXhtZ1JXU0lDNktvQnJL\nZU5hRVJLR3FkekxtU2Q4VlBycis2eVEKjPXtBx/lyrinCw3ZpQXLj34W+8P6NvoG\nLu3PKbYg52A0eJXg0T7OM7EW1skHGujwvz+ZI+4RVPnbWMdn6Vv9tg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHFqNXVZK3ll\nVmtiSmJJRE5wdzNqdU1HTWdGYjM4RWZNQXZTa2ZDbjAzWG8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpYTkxkTWpKamhxT3RrU3N2RFN6ODVi\nd1QwYzlWNjl5NHU2bFh4UU14WExRCi0tLSBUejM4SFRFa2FyKzlNdFdVdDhpeEJL\nWjhFSlRwR1RyV29Sa3J2NklDazgwCjvP2yX9e71TJgyzHHeg9dUrL32ufzGngtSq\nbtBUtc5eq/E/vfZOzlqUabnbI6SmX2HcuFVkbuLJ6lyoYxj47WQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9qNTNaUVdz\nSURXZEx1eUJrajhUdVI0SFZKdnQxYnpYL0pEZCtXbXJUR1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYK1gzSGRlWWFVZm43TDhrL0I2OVVr\nOHVHU0pYbUtBd0g5SDYrRG04N1pvCi0tLSAzSkpEdkFucmxqNzJlWC8wdmo5VEE0\nUFJGRGxSU0xvUEdWb2RncU5mK2JjCgBYpo+LR4vEfrDKVlCvL8NKEysyD3Xr4mXl\nPbJibvy3iwl9KUQuKVASL0B5/+Lz+lm9iax7YY2do19fn0vcknY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZZdnRUWk9k\nUjNCb0ZBMFJBNHNNUjBlMXc0VFdqSWV5dG9GNFJJdFlrQWcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxRCtGb2RKQmlrODZ2VC9YRllHU1Yz\na0dMMjlZeTNrVWpEaGxzM3I3ZW9JCi0tLSBrL0d6Rm52MkRPK3FaakVGNUg3akg3\nNGRYTHI5VHZDSFQ4d2c4K1JidDc0Cl6vqAuZ295ImPl13ZpzVXP+BJ335EAU81UC\nZbZvxdbvlNtZkNdSwmuWRXYbB/F7qzg0mxl01fQ0wd5m87UCId8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTQWQ3UERZUC9FR1dUUXpB\nMWZrdTBXa29ITGZaaUV3MCtWVEpVL0d6bVFnClJsd2lWMTRFS240SmZybE9XSVlK\nZTUyRWtDM0l0UFV0UzBxdHc0T3ltVncKLS0tIG4vUitJaHFqN1FNR2J4em5DMWJq\nYU5DS0V3all2cnAvRDE2RzdxVWV6RDQK96bwl6BHKpws1cIh704a4DGGu6XzDRMJ\nlrWdAX+xNnh3Y73gMEqL+Ti4XYkhWOXgiggbK1KkKg0jhhmmYnVHbA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1m2e4c3gv7mxyg839gf0lfsh8wvygx3rn8u5cwnn99vw2w43ssers40tlq8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNjhSWHhrTFdNWnBZQ2ZV\nOW5JMUNCQUJxOTd1S3FIczhLL0lVSlZLZzI0CkJsWVIyczZPVml1SmhYSmpTYlZp\nQmkwQUtWUHRrRURsNjFhSG9vRTE3NHMKLS0tIEdXL290c24wVFFjVUhpZlJMVHVq\neG42QkVRUk81Qk5GcTFib2lHZ3lLbVUK9XX4wptmzCFUtfTNZKzDPSwtleg4Kfx0\nDbsX7nAWBWt7I9GhsK420BzMqsuHI3mNFDKkvsFn+KCiO8iSPop8VQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUThJZlQzbVlLWEdzdGsy\nekI3UnZYdWsySXlDeTZERFlSckFTQm56L0JzCkdoRHUrRHhKWHZ3MDk2OGk3Ry8r\nY2l3cmc2V2NiR3EzWWZzbVN6Y1JBVEUKLS0tIFd5U1plTFcwOTdEalJDT0pjMURS\ncU43eGRudDVVcDdqb3dRTk5XQk9xN0EKbSgX+qmEss7GbFiIcG4k6u/llU+0VKey\nkPAbxBfhFbL1mJTB1XR6AhqlaOXVoyOhVzQ0oiOxX3Xf02H4fOh0jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNkgyMlVyTEFrQ1lKcVlp\nYTRvWHpFRUVCY3c3VUljdkJ3YnJCZnRaQjFZCmpLMDE1WDZ5eVhjSlMxUXhPRlNB\nTG5qSmlJV2IyN29DZ3kwbmc0eE1COE0KLS0tIDE5RjR0UWwrRkIrL3VHVFBuOU1h\nek9jRks3Wk1KOVYxVEx1YmZ6UzVZUWcKJv7SOzjn0Cg5yKKW9dShgJjlld8ZS6nM\nzjjdOs1VdIG3BUQuw94n1aYHq7QmXxzhPjRhErj8qZfMTmBIZuM/ZQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDRW54ZU1FYUhWUkxnOUNS\nZzlGaVp2RU1oa0dNUTB4WVZITzh1dUY5QVhRClZNSVMxTmJZU1NDZWZVaEZTRnh1\nek9wbG0zcGE5aXBCbnplS3ZoWDZ0Q00KLS0tIFhIRWo2TXg1dUJyRjRpRnVIUFVD\nVDMxeUV0ZHQxZk1qUDRYMlJiMG9YN2cKkG7RyznooSxmlFIuh5Y9cSswKCiiumD2\nvTKV66FBhv6ehwkIbR+S0Kvmu4vQO99demJHvESvTDEHeF8UVQLQTA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T07:06:15Z",
+		"mac": "ENC[AES256_GCM,data:2d6MHDN9GK2RDq7stHoD6xmTSuZfX6ADOGi9DPpeqC/p2OFc+Rssy5dJgexVkUb90tQBUCUcSmapeVnJalust5ibUjnJmpfMY48PQQhdnxu67neu7P+6MGW1VIZghP4udwOK1TPPhm4KsgBT+mfWlneYMHPdvqZYeLZ18G2cqj4=,iv:uIsNrwpJLHWec2jtA4tZJAo/vemgDiH7o6nXYekTzYk=,tag:XU4VXymuVCg6oNB+AHZH3w==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/almach/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw 
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:i7hpBBWINIJ8VGaUyFYqm+N2EbL0nMxPKL3RCTjKxyM=,tag:GZFTfIwa+WWS2w3Hk/GmKQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQlY1bTNaTlpkbkNEWFlM\nblRGS2t6SDU3YkJJbDFMRzVyY2p4akhlOFRzCmNOc0Q2YTB2a21Qem56L01zNFFT\nc1Y3NmlVNXVLZGpNT0l6eTlZVnVVN1kKLS0tIHlvUzVsWjNzcEErOVZ3TWpWYVhv\nN1VYei90WXcwNVNFL2J5R1Qrb0p4ZmMKQ8PfLqzmX6UqgpBNhiuDpY03Sa2Lg4J3\nLLCkilQKzJSEJCNSDYU/ebgJd43HAjRqAs3lPcyauC9xVNI7MDqhaw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WHVsWWx0NFltc0d0a0FX\nbGRIcGVKdWowS08wbUFiTGpZMm9XZ1VEMEFjCm0veDJTd3RnQndCK0Q1SU5PaE1x\nb1k3R3FSU3l5bG5Jc0UxTVdyZ0l3SVEKLS0tIHVVOFVnZ1VvUHc5MWthQVNKMWxO\nS0IwMWJ3TklYaEZuWDA5M3hBZUtsN2MKE6HT3ldHVcJM2O8eR4jbvJgMERY8gRcf\nRL2Fa4DdQdxVED1WU1arZmN9DnK+sscpK7eNF1+PFaN2Zk4Lk81nQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLK0hmK0NrV0IvVE5TS3JQ\nc1NVTVp4YjJvSUYvWlN1SHNZSUlTWW1YcFdZClcwZGIwN0ZDTm9QYlg3WHhiUTZ5\nZTJ5QTVxdGFyRGFNdTNSWXVmRkxQVEkKLS0tIGtTMXpmNWRnQ21aNWhiVGRYOUN1\ndXBQSnJCaDJCaDVKemRiN1NTTk9sLzAKnUS6XvHsMFKDOfbM6h4l6Fa/E6Y3oeWV\nioZqov7WYBr6M0GFspJwmUKIMiUSOS1YQZ+m1PZcsSm8ukritJ6Erw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdvWDFGdklB\nUjRPcHJuRWtSR3cwcGZYU09PMFRnVmpXSFc5amd5ZGRjREUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJZHA2aTVVekpYbkFtOFMyenZLUmEx\nU2NYa3FUdFNlbXJDaEZyY0pQeEhNCi0tLSBnWFI4czUvK25OdjVrV0xtWVExaVRH\nZnRHMzNrWkh4cmJlN2tKbFVydGtrCn4kJx3yPDwu7pAMnFhh2uB8Pha2eDCrzNM1\n9WSVFM91FS3dwmU/IoX1gpEirbgxiDefzgHzhEzzNJhU4Vw1/Q0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFaVUp2OHpT\nN1dHbEk2bDh4WS80emtkOW5MSUF1S2U5dkd4ako5eUxwU0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4QkVObFMvQ0NuNGx1VnVtaW9Ub2c2\nT01QNW9PanhQK3UyanAwMHJJZ0VBCi0tLSB1dVdRTFlFMUFKb2o0Zi9abTJVVHRz\nY1gwR0hVN25VT3JmcUxuT2N4aEtvCrGwosnahN1wtQxiaqU5bz/V6JBoxvX8tQXm\nXmG9tWTcoDx9gjQkV3iu2XsdW73apm54WfY/9qJfHJHwh6LT4qU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFc4Z0tZY0hr\nc2xpWVRUMytjbVJ6MllBT1pPYlpMeVdqWTZIdDI5SEV3VHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQQXBxczVQZlBITlBEUExCV0ZhZ3RB\nTWJwSm5nOEZKNFV4alFjOFVTUWRFCi0tLSBRN1UydUJpbnRKVTlicmFDbEh1S2lV\nc29Rd3lZRkdGd29DQ0RGdEQwWm9nCt/dy3C4H5lhXCW80e5ypvOnVdklucyra15X\nZBKw0gtr8a0vZRoECXPiRHog2U3uBY+ylqHSggPJfYyEmjqcMX0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVlQ4d1JjSkcxZVRXTElp\nT1ZDTHhCOGZZMzk0VGt1SWY5N01jRThhV0E4ClRoc29sVEhmRU9aeVJBbEY2RnR6\nMTFBanR2MWJXTHc5TXdsemh4VXdMQmMKLS0tIHozdWNDRzVnZFFUNDZvUGlvMWk5\nVWE3SkR6bmtZRU5PelhqR2Nqd09LWm8KaKCZcmMmGdq2AI6seVe/OCBnK8Efu2Yi\nPpW3Gq3+SX/J4ODGvzgVMBtcVJo/ZKZTq0sHLTCmfPVnGDGtK10gjA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVXZaRXhtRkpMcGpmYnNm\nOGJkOFdmVkd6SUVHMUtOMkFSN1BXVmNibWlBCk9EUTFMVE4vVldmaW5reWt0VXNx\nQU13Y1ZWUnMyN0V6aDJhd2hESTQ2WFUKLS0tIFY5OG9ndmR5blRyaWszdFh3Wngv\ncW43UW5OMUppQ016WGJoNHZnV2dZRk0KrEH5dIiNi3294aMzsTS8jQUKUrbhov2L\n3A679aAm033yVG4UVmdOZFEL3ffOG0cGo7R1X76seWbee1eEkGgfbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3dKV29TSE54bWNaY0g4\nc3RaQ0xTOFlaZUE3RVB3OHhDU3NJUWhmL0FJCmVad2IwWnBQaWxHSS9QNHRubyt0\nMndYaHZ6QlErZmRRT0NNd3lwdVdhTncKLS0tIDRQc3Q3b2xaSmxtV0p2Y09uSlV4\nNVFqeGVUa1NUNXVhc3QrNDlya1hzZzAKzM1yHUpMAK/J+O8lDCccUx8R4BWQVRdb\ngldElzMF7Disv0yIZFa+S8eyFwrwzyn32z7kKErxc8TFs/d4p11l0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d0dITytPaHUrMUo2aXhW\nekNzS0doZHpIeDRsQStjd2JMbDFoVjE4R0E0CmVBOC83TTRZVzB3MXJxYnVRbnFV\nTHA3N0NyVVpFcnUyajBTazkzM2ZQd2cKLS0tIHExNlNMMmVDdjNpYXcrSU1KN0Zu\nUEYrdG03YXdTYXl6S0ZoeTJKN0dHcDgKuVpkG8xlSOS+WB8kzk5tGWvKWJC78H6J\nd/znCxcaDfHI3OOJxSwDg/uhMoqTcm6Gwx5Fx9iMK26n34lfWkJFEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:2iWAosxFEYo/KdMC8FDy4ZkNJXRWlvOYwD2j0cGoE8YIQ7PkjKkIhuGE2RYlhBV3wk6z5nRtrBblJp9bU+LKleFXyUnavC4UgQbtrdWA/QSOde3YJtgsyQXjIPH9CkasZqdPhltF6ReFVfCu8P9yHEfXTkAPXSutLKTUCnO7ab8=,iv:9PYgHPiQW5OUyhi5dMYQgzrq434RYLdVbiULq9mfMhg=,tag:sVsVJOGygoBbss8WM0iiHw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
+++ b/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/root-password/password-hash/secret
+++ b/vars/per-machine/alpheratz/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:XHMzHHk74lMX8iQIzmjOm1Kbeyw7ksVK3qVCeWTKgp6uUPVPa0v0hopgKYwF5QdPECsZ2sylf3V7OyYf8qpC6GEWVuoW8JcYugMow8VzXEIOPMjDuuyIdw5Ub3ThGodxUT5nlF/avUQAyQ==,iv:3c7SyA/ob45jdmmn++eTjCisw4BA1efBInCFdcyi5cU=,tag:ryY4N9v/4z6zqleZpXkhxA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBubTE1cDNCUEtuVUIxcDZT\ndmxGblpuWWpXTVgwOXgxNCtudHZzdDU4eGs0CkFuYTd2MXZFTHh4VjZOdkhXaDIx\nMzBYeGsyV0VLWWJyc2JHS3lrQ04wbjQKLS0tIE9uVjZWRXp6anFsakVGWTAwZzQr\nWEluN3pkVUQwV3VDeThnN3dtN0ozbDQKZvsicWXuHocazoUlL5bnu3BSsIiOrJHH\nxbsuv8VU5mE5p440R8gV1qiOq7PVx18lNc8nVSKjlQglfTMiPBgDnQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQStLcXdiK3YwVExYQjZs\nMHJjQi9xaStub21EWk9LdGlWN2pJRStMMkg4CjFoU3lZTDlYNXhXNUZqUVE0b25M\nVGc2bVMxNmtudyswVlpuV1UvUUpwYTAKLS0tIFFBWWhQY3pyNWZQVmF4UXArdEx5\nRGRWTzB5aVluZTBFNVhQT0xiSk02ZTgKBX/0V28yFRJ4jzjv8a/CK+93C7+WbW7e\nmisvXVLsnxoV6yvkjAOG+GfVqJ+oZHtghbYzMv5kOdTB2F0d8gSBnA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRk91U2NncDVvenlmdWps\nZWdlK21Lblptcnc3bE1LSGtZTmNvUGc1cDBRCjJXTm1PNmdhbFd3cUltM0R0NzZC\nVVpyclFaU0J5WHg5cWtRa2NjMEtOdGcKLS0tIHI2TG5nbHZuNTQwZldnd3ljeGdi\nVnRDRnllWXJUZittUFhyb20wSEtmYXMKyzfABTq2/pPu/ma1WynIezVVBdwtShCC\nU0xfhC6SQH4mSWUq1J4tToG/dUFNL8UBkb+Bl5fJfn9e+AzuP/IXkQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1BbmFGdVFu\nUGRoNFcwckNjTDh5UXdZaWFIU0dvcmI0TU9QS1RqYy9wUUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp6U0RxK24xYkI5VG5CQ1dUeGEwNFUw\nS3cxZlhpb0pYOXlqdytNTVozZ1U0Ci0tLSBNWTlkNUxxTjB2N3FJcnF0NDVVZTJD\nU2MzTUZhRmR0RkxDQ3JvWFJsaXI4CiqtLfOaEpw3Yxx90Gm5aZg4/bQXmBREMP8S\n46PGDaKAvfdxl0QGlBOyM8l5QFmh9NWLXIUyPr+sCeDQNYz0k4s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDlSTnV1NzRP\nb1hucEtQUUNHd2ZJVkVCV2h0U2dWcmRXWVAyY2xHTFM2MXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3cnhib2RHN1VaelRpeTJYdTYvSFlB\nTkRMdVYvUnM1MWpiOSt0bjNkREdBCi0tLSBiOVRkdGIvVENmeFI4ZlEzRm4yUzFs\nRFJzVFAxWEFISTVrTE5qTFE2dHVZCqr7t0eALrjXKez9SAcSy/oxkXpzn+K6HOu5\njXXrrgIbLcHLQfMxK+QTE7+xwNvM4aKlES3dm91jf62ANPgedew=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlBQTZHaG4v\nbjFOS29lbGxYR3FPU25vT2c3Yjg0OUNhK0l0NVRmVjk1aUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpqaGtQSmhGdXY1SFlpbjVSNzNmYkVq\nbGVBK0tJbFhvUFVvazRrdDRTL1RzCi0tLSBnVHc1czBJYjZWamFNT2FCaHFRb29u\nVWU4YW00YlE0Y29HejRtYmt3a2NZCtoKSd6gNA7m5WBwLLixV4T0AcqXwYl8qiHv\nXMcrXhZ70KXTJW6koxu1iGqhTc2NiNgc3GyCS4Y09/aGMsdcPOI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2andpVWhmVGR4UW5wNmtD\nVTluNzNueGNIcDlVcURqekVBN2RvY0Z6S21VCm83NEl2NFIxUjdlWjRSK1QvM0NC\ndUJOZFhPck5FY2p1TUZTVVlzRmQ5ZDQKLS0tIGY5MnE4QzRiOGRPNHBRSFVtMHoy\nVk5neGVTZ3pqQ05nY1lucXVWdlh2OTQKeOeFUVyvmTxUTtjd7T/H8pS9EeZ5gOsw\nYXVXu9jXRWOzkS+vUXL02Kl510Dyyz3ecRDSzzOUOp1ERw9oF3hK4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVUgyMW5wUmFHT2hYaVEx\nRktQYzRoM0YzYU5weUlUelZDZlB6YkJZaW1RCnNGa3FmbU1FR1lZUkVTalhkV0Vz\nMG5BVjZ2eERpK2RVT1pkOGcrOGFmTmMKLS0tIEs2MkVZNmF6OVdkQWRvK1ViVU5S\na0xUNlFxdW5zZWF1K2VobUFRNCtocFUKPhOUjooCCIBCG20C5Oe3qyUcIpyJZcY+\noY8TdgyK1hgmhKtMZN35tifglvmNIxmEyH2y0iXBdb3N2Gi8GG3CFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBON1NiaGFKVi9LQjNFbWlM\nYTBpeTd3S2xUTkI1QWVQaENpc0hhU2VPVHhnCnZKSXQzQ0ZDR1hsL1dNb3dPVVp6\nak9qRk4ydFNtdklhNHUwdDRvY282S1kKLS0tIGdtbUtEMk0wLzFZVVV5anlyMldN\nMlF3bWdvZzNNL3pLSDBFRWxtaklEc3cKcyvFrH/5B3X39im6FXiZVLDwqzL615G/\nHraaCZ//Qyxi7+onKXDNrYTxc5jUmCE4qs6lhuyFdnDT3IQCxJqMEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NlprK0I3aS96OFhQYlhk\nQVlsVXl3UHEya1g1MExMeEVZOE5vbm5vb1JVCnJJU01yZC9HNENrRnNtUDZFY1ds\nandjU3JtVTFac0RxRHMrL2I1TEtDb3cKLS0tIFRDZ3dzaXEzRVN5RHpHYTRXTmhJ\neGEyd05rR0JGamY4SUxHcmRzUUlQK28KiW3tu2irWDJFPcnBfJdTbygkJMpFbtNh\nwHHsaAml+dZuPqWQbmVyDY5CKwZGynF9X2RCRHiqXNbX/GGUblJWmA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:te5F/QFsrX6o37LIpLmBewPDRoG5uhL2tFpX58xD7mk7KGxVi5o1Unk/n3DJ/+CSyg/0v+mWbaRuYzlRGO1XPJEITXpQBvSkjtBskvioCvCH6XyIvSJ923azqR9KeVjgXQVBNxSd2DDWhwnaGgeFa1a5itk1tA+lnzdghVAt37I=,iv:5yf2rdPorAA8ofn3OmRse34rZqVPfvSotPKk9i7toe8=,tag:zjmUmLBlQ3fGRxNZJFI6fw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password/secret
+++ b/vars/per-machine/alpheratz/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fb0O3XyZvw5wY+JMPFCpjn0YibE0Z+s1QdaIgimDNEQIsCyQ7jNQJIY=,iv:liF4HBVvLWbPD2QAcQ3YCcjxGdAXDZPu2+jLHAtrBGQ=,tag:yt9Bad+HxQodnbxiOrNYWQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWVZIQWs1b2d3MWs0Vmxr\nM2JzaFN3WlpKKzFwbVNHc1A0dFlGZlRvL1FrCkd1MU9LZXBQeHhQUEE3bW1sQTdu\nOTFreXpQdVpJUytwSU03KzVtUHVsaVUKLS0tIHQrT0NGTlZ1dFQrTklwZ2NIbS9D\nbTUxYzNjaHNMdXZIQ256cEtCaTRmYjQK3+NzdC2I9kmJyyCNGqx2P2rY6D73aekM\nuNZoUfFNqksPLQAOLPvjt6joQldZUZlFKvY0AXw3r+HVUMICP1z9Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByYlIvL0F3US9nQW1HeWg4\nUktLRHJhd1AyaWRwTnNUVjN3U3drbFJncjE0Cm1QREo2QTlxbWdMVEVFUCt1Vnpy\nZmk4WHlaUUZkcXAvREcwR01RZWZxaEkKLS0tIGhWc2FCVlA0ZE90SlJtNU12WUEx\nTnpzVzlMdmxmblNocGdHUWJFWU4xMWcKvmJiH7TJrbs/1oMs5Zsjvt0w6LfiIIPt\nle+ivnsRrIhYzofHddHTnVDI7NmvCw6e00MWqD7hU458zqW3fUdeow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHc0TnZHWFpm\nSHUwUnBtdERNRzJwdWxsMDIzcXQ1ZndFS0hHZkRiYU5PSFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpsWXdKVU1JUW5rYkEycUcrQjVrbHFP\nYmZna0JZZ2paNE5vVzVRTC9VeXNFCi0tLSBUSVZzQktRVlJGMVU4SGYydnBhNTNR\naXpZenBZTjRqVXQ3R2NPalBRUjhjCq3x4ccaNLUhKfLEZRTAJPLInz1edrDYPm0H\nVga5VWkQ0llstDWy8ANDJ+N3ryL0P4WUGWNbWtRpY9bmoXqvs9Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDcrTlA0VjJF\nM3ZjS1Z3YWYwOTYwSkJ1Q1dLWGJ3VEhFckpjN2FiRDNTbTAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpTUk9lT0xpaVJFS053TWhET2cyaTZn\nb094T05HcGVYWWljeHgvSG5rNGdnCi0tLSBScXVsMFBweWQrQTFpQXoxVm9TdWFG\nK1lhaEptM2poNkxuMkxUMlBDV1BFCjr+ZEAW85wiP0cEzfBnvhr/hI+r3ypLJT9w\nB/MvVbYma4yV/tIbN1vBEWnLEpFDuLyWBUZfNS1aVbI3U9o2Gg8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlGNmVSUktj\nTHlsbjd5bUpveUk0WE9BczBvVktzNFBFNGtJYlhoZkgxVGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozN1d2OExhUCs2cnJBMEQ2SEk1UVJE\ndUdBTHNCQjMySmg0dVNFVmxQZFRVCi0tLSBtYWFGbnYwbVlWK2Z5cGdHOERhRWlK\nVjVKdnBuUkV0dFFoeklHMWkyOUdJCnCiH4DZpqOiTFdREZPpFxbeIqYbNfHhh6ic\nPziJWxAH6xJy1m0Q2MHj11CqZFxHti7xeOovN7vrb8LiELASu2g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYVdCcjBWSmhjdk5yTm4v\nYU43UVNRVzg3S3pLR1RwU3ZQeTd5YXo3ZUJzCnk4dWduVW1zYVUya21VR0JrRlNU\naG1MWGlsTWRkVFAvSW91OGcwayt3NncKLS0tIHdNU3pnTGhocERRbzFWNUtvUTYy\nQVFXOTAzQThsTmowNit5WWFGc3JvTmcKmCL1zZp7qksSB8WiLxh44kvLemT3AF7r\nIY4WLCLTMBYIZ+ZnRyiLtoV9199bu7zdVRpfIEAlz4fH0kVREXMtyw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d3FhUTBEeUNrRnozeVJL\nZVU4QUM2L1RaZGVkMDA4RFNBRWJacmpDOVc4Ck5lTHZGN3pwY2ZRUWdRNTY2MVhi\nM1p3Q2tuM1ZEZXU1L3l0dE9pYWJSdHMKLS0tIG5aYkRER3pBdVJiTHR6Vy9nQ0pS\ndVdTc3NJSG1DcjdqSDVsQXdLcXNScWcKRBH7tIeDU8li35JjSn7k49pv3/Twul23\n57Jlro4c82bkqApW7yCLn4PDIYykH7B0iswZBvS7mngQ1KSwbEBfSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQmpya05vQzZ2S1NnU09z\nZzYwSzRSWFBmYzJqVVZrRnBNa3B1UDRZWWxVCjY5TERUNUdTS1A5SlhNL0RpZDVR\ndzdzTk1qcGVQdytZMFNqYVcvczB2S28KLS0tIGkzemQyNTYxei9LY01zQzlDT1Ew\nOWRyWUU1R0N2YmQvbzBsZlhKMUxEcWMKPb7WsVVWVNyzyPs+Xq3TLQ62tZ2di3yS\nvsDMH+mQSL2y1jfV2uJASTd11gz6SmzS4FDai3sxTXfrhSO89ha+jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSG1hd1AzQWt1UWFpaHUx\nOENrVXVlQkFCWEp3U2orcmx1cjV5aG8wbTFvCmFXMElXcVhzTWlpemdGUTFvVS85\nMEJ3czNwSHlnYTkzTmVLOC9YbGkyRE0KLS0tIFBCY3F6TUh4VFcxQkdFRytCRnZ3\nc2VrUllLZ1ZxbDJFb2RITDNpSXhFc1EKqAX7ERco6NC2MT8N8peSIRO8pPTPdhGn\nlso6TZDFlQBO2Qz4UIFGe+/YNWRS+tTM7I/SJ/WOx7QeHGWZ3XW0zg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:cdF53FqlXXkIfly9Wi/+etRl6QmcUukTgCXBT1QKSuF0wUb6HjS1wP0Gxx2rEzOIcsDCPvTZtnokrGQ8Fw000B5ubajhBKovr7bmxab8SvJz03fSQuY2PSLd9bdTln6kgwf4NG0CKfR8P27BtTFPaoXcz2KzJxS9f1cXq3OeNrI=,iv:sar0rHe9clELxClpgEQ5+s7wmcS8XDabQVf2DMdRDEk=,tag:M3AYnXyy2VWXWeqAzGthug==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/state-version/version/value
+++ b/vars/per-machine/alpheratz/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hostname/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ao5Mri45cCo0ikJPFquPwzCeeIr7YT4hrcMwAErpwJkiBozCoeAnp0NarCEojOKQWMEm38cCcqPAyLB5MMUQ,iv:mXex1YLgV3cSed8Dleuk+xYVHJjH4pRdKHUgT5RNaus=,tag:FeG2VRpNCP3OLByCevkHrw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cXJ2VU5uSUNKelJHdHQ4\nYkZtNDZ6NTFhNjNGakdnUjZxRk1jMHJSQUdZCi9DYUR4MDRhV3c4cVpNSlRnMGZM\nT0hZMUZnNzdKV05DSzgyblpMc3lxeE0KLS0tIFdoSDA4dHNvSEx6NVdxclRwQ2pu\nNEFsZ1FmTlNmME5DcnZFTVhSaFdSRHcKNkHgnCn07yeG0qnXen//Czpm7Jr1mG3R\ndiymrjr+cHJpib7TYv4h5z3bC2DCVa72wl48z0Pj9KsBquR0oLVsNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtN2M5bHhkODd1T3U4cHNT\nQjYzdDFDemRINW4wY1U3YU0yRlJJd21EMjBNCkpQenUweXhGSGNwbHhhVUZVZXl4\nbXFBaDFPd1NnMWpIVUVTZ1NYb2pDaFEKLS0tIHA0eE1ENjRWTTk2MVJZZjhIVDE4\nS2JzN2Z4VGRFYXNrWEVkNzNMMWxqRWMKOFHKYxSuluxyNRmmFEQ92PEfRfvNhJCl\nRViW8jHYbfZnPhBK4irht1b4XHDJQz/8sn5TKv/5hJeKHtdy3410iw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibFNGcW9JOUUyRmcwbmZ6\nM1NVTkdPamQzRXNHOWZkaWwrZnJjYUJmZmtzCmxnakdodnRCMFRBbUVHVjhET1Fx\nekdtWlFheUo3MmdXb1lnKzZzN3ZKRlkKLS0tIGF1UjQ4TWJtTHlsMGNNWnhJYmtp\nd0V4OXN0OWNZVTVQQ2cvdk5Ma3NTVVUKkx1Njs4ZkOFtRFixqXdFNibj12hy18rX\nh/6cxmhYTpLVzzGBSWy8/ObP8/mk+uon280T2FpQ88m1sTKS7NtnUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHkxQ0hEaGQ4\nM29rZSt1NnVKWUhGckJ4VkhFMys5dURQc09RSGpuZnMydzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDRFdING5lSFRnc2dsMTZ1aGZGQU92\nV091czZjNmxIZm45RHZLTTNkd0ZnCi0tLSBjVmFWcytwVHNDY29BMTMrYVVCc2hQ\nUVFubWNCbXl0NG1ITlRNaS9GVjhnCjBbMrQb+u3TFceCd1RNeMLpaL7tfiCc3003\njliolM4JyR5L6MCyViMkS/xpXI1k/25a8kl0aeRI0d/jEPZ74iQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHljYTlYRmVn\nZ0Yya1dZN3piYXJvUEJjdCthc1dPak1zbmoyQXRlTkpYbjggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp0a1htSDZhQW1mZ2VtbjkyYm5nditX\nbGd0RzJJN01iNExLdGFueWFZenlnCi0tLSA0UFVYeGkzdGR3WjBNbHZEN1A1dVBZ\nZ3lNdFdOODV6MzZwc1RVZkJQSzJJCkr8KQHc95z8VlrSRot+8aWb7WUUUZ3C0KUa\nXPdZK05yhHeCDDD9zIyrZ77esI9tSLsArVcV25rGv7zCO7/fnpY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvR3p0NG1L\nNXJuODI4RU95dDI1dFFjQXJ1Z1N3ekMrTEZ1c1JPOFhLZzAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpReTNDdUh3ekFXRVZwV05tdDUxMkxQ\nSjRudktDQ2dKeHZOLzI3QjY5TnRzCi0tLSB3eTVVem5GblN0RHlmeEkvOGlkU1pl\nTlBlVlRyeG5ienlNNzludnZkYU0wCjOfwCN4FCfsH9uY6Nt74lhiAOEbjEiRos/U\nrlgaZ0tS0Nc09grtKmZAQd9Dc66jmhaD/nJVnvq/9IHMnrbE2jk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSkVFMFdrb2RuOSszWUZL\nRXY3QThjUjl6bWM4OWJVVU1oVm4wMjR6T1drCmZnNi94dkk4YnE4eUNZTkdyWGI4\ncERYc25uUlhCa1dvTWJRaVhSM2h1T28KLS0tIHVlWnZXS08veGNsRi9wWDh0Yllh\nSHd2bTZ4THRqTUMvN1BrRGlEQjMzbW8KzTsGUcBpMcPhkgJOugm932NAXWG2xMBx\nJW1kIVW2TycopTWZnKQfOp3NtV3yFlxW7vCPljGEmhvAs5EhU8SbgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYWovODhORUZOMUx4YXdi\nYVd2akpaUHNWMVc2bWF4VHZHN3grRWlkM1FRClk2UVlFRHBCMnRDVnNPbEl4d2Iw\nNWNFNjRNbWFZa0phd3QxRWdZc2wyM2MKLS0tIFVheVlsalZpV0l4UVUwVXZnZm9z\nNEh1QTlxVXVLZ2wwT1MzcGxHbEt5V3MKvkMbOEMLd99YvMuoK4LSdZcmvswC877c\n3D66ZoZ6g3P6wrVBRtPs+4+10wLjFhI5GPPvK9PGpWYvu/5pDKaCOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVblJNNmFyM0pCQllHdHBR\nT2JPb1JRekhpeVhseWxGTGRCYkloWk9Zc0dzCkoxa1cyZXh4YzhkYXJ5cmNaQVJO\nTFM5VFNKa0s2UmE1V0xRak5tMUh0SEkKLS0tIDRZZkJIR2FVN1hCanhMdXp3YzZi\nNlZiU3doa0J1ZFFYMWRZaW5BUERITTAK0YixYdgGEEn7Y7/F1fnd+fJvyVZwEz2X\n77ufkafOeNEYla9Rng/daDGpGEyA5715kZjbuHvHbck35umlmheAeA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISEZETUtYbjVEa2hWK2ow\ndHV6UjQ4enV6Z0phdUZFQlR4bmk5Mk5FZDFzCiszU0M0cU51RWMyTXpzamdrV0FE\nS2RNa0NXWmUrSW1xWUtxN2p0RjM1UFUKLS0tIGx4TlJ4YkpBTnd1aGpFUXBoQWV3\nTzRCT1RJR0FkQlpJb0ZuT0JvY0FnUkkKc0L2KR5H2mWVlGrUkVt2ffvzaYSHLVgl\n0ojHe9nFRp/sRtCpFFTQxUW+qmxIEWwyf/9rE96gRYQH+i4+0ZoJvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:7NmTqngcvswZoLgRh26oLI3u9ucqRws7GNztUk28E6YgVU8zr7D5++s9yNaF7IfitDvqqGgr3UjORASQngLqazLgXYMShsVN982OPbDIPgNvjfyPPkSp5bZYLdsDxjSRnE1ATSMAab85J90W0AIdtWahsaxv1sg8HZRy9wzs1WQ=,iv:BkjbE/rkRH7LAP07TyIo4NmAMLPF1xuvMylCWx2LyuE=,tag:02NuCvNQmEa+fkiCB85VAw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:p0ZsT/rqNrfGNGMSnJguZ2V1hN3HLyH0LGze/2dONBeYCVRxfQV4S9gfQEhBVtaFvr8bD+sbKB3VvMZVLo2xmUE1F5HrBw0JWhgKEgd6775SzW/IQav0821QqNYeCa5Z,iv:3AH/4s7M/wbh92q766UqsdP58NVrAI9zgY64pDfl8ls=,tag:98+Z9fUZQgTqbjfEpn3qUw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMjhmbENHSEptZnBWclov\nS3dBMDcxVHFoa0cvOXRqTGZzMmptbkFNWWxjClUzdndmTzZpZlNhbDRHNmc3OGVQ\nSko1MWZtMHd0MFpwWllzb3hTS3V5Mk0KLS0tIEVUcTZyUXNVRzlwZC9wQ0QycXlJ\ncTl2MG9zMHdkcWdhamtLWmQ2Q2IvdTQKudtGoVCJDJOQYog8nRZ7raB+gr1XH6qH\nUKTHsH+UVCndroxEaSThbzKspkbQYrsPHPMOX+281WgKn96VB+RpIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByQUJ0TjFJR0JiNGl3S2Z0\nOHkzN1lIVTZaMkc1WHY2Y0hvNlNTSFN3aXlFCk43cG0zYUpkMU9FcTYxU1AzY1pU\nRnVDcGhPTFJVMWRBVS9GNGxLVzZjY0UKLS0tIEg3cXdKN1BZOEgvMmlDUmRERWox\nK1VKY0g3QzdUWnFFVS9XS0w4bmVrV2cKbRfsZ+wihnViBg1RUoUtlBL2OndAwose\n4uJxcPqO/JJ+hCcfX+c2XALwxjzS1V/GYPq7XM7GrpXmOBG/Q7zuow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZyMTE0c1AzNEtxWVJW\nTFJpRGVMNXlSR2xmMGs3bkFUY2lVODh5QkZnCnpFQXpjM3gycVpsWmFiU2MvQ2dX\nL2licm54U0pleGNGWFk3Q2RnT0t0RjgKLS0tIEZPeENmRWdHd24yaFkrRWl2TGtR\nYVgxTXY3YU1XRmhrN0FnREJ1SW16MzQKk66+nCqGgz0itmqfsMUUzfpgtfko02ld\nX17DUcQPO3T8PkGZS640b1IKcA1/xF8Xtg07vZLsL0ZKKYiVTyMSTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEgxYmF2TC9q\nRFR5K2dybks2RDVuelBPNE5lU1hlZERkK1k1ZWFBV1RNZ1UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpySDAwTld3bTNpaEpzWDRLVmlVSnQw\nZGlydWptc2FVbzEwYzlEN2U4aFo4Ci0tLSBlV0RkdGI4dEZNUU1abFpJcHpPY1JG\nTTAxRExJeTRQSHh4bElSTnlrOXpVCm3MXFpIwiJh03W4Hyyo8A3Vv7OOPcVY9r5s\nVHoWC3hjBcUWcByJAq8DFZLZ/9h+futtLpq4gLzJxCDNQQcSuLE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHB3Qk5Ndi9n\nc2Z5QVZqejhtMGFqbVIveENBYVo1Qzh2cWdyOVVoem4rSEkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkSjdhRGtuSmVDd1NmN3UzRmZDcjRO\nbXVUbG1ySVlXMmdVS05BVDBBMW40Ci0tLSBIV0lzczZ5NTBlYWtnRDNTZVoxU050\nMks5ZXozZk4xc0tKWm11WGdpb3dVCtNvBcH51672lDjnkt/xVjIemoTDOZ/VVS2i\nQUWwk6UbfD7PPUc1n4edg1M9zT4RoNTWVyMXqT7XqDumch7OtuA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYeUs3dkZ5\nNUNQNnE5a01WVXpCaFNJRWlMcWhaQXZpMjhWdmxBclZqVUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIZUF1V1JjaXl2SHRVTTNmSGVjTzcv\ncUxhNWdRWXFGRjh1bUFneDZweW9ZCi0tLSArOEMzSmdYNTYrUG9meFZBbEUyTWRY\nMnpwTi9JU2h4cXZUbERkbjhJZFA0CkRxPJ/Yzm57siZW7x8Z7fBrhRgycgrUoO8T\nv/BGUYJWA/z3u2LF1vJkBDj50pE9RpDi4ZSCcMvbw/QmxNnEG1k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYXFOSFZWWjR1bUUxMlF1\naTJpRHpuZmVuUlk5d2dyUTVsSzFZelYrdkFvCi9KOEYwUzJ3c05GUUFOUWZld3VD\nOXNhVFBzMG9Cejl6NzliaVNTVktDSzgKLS0tIHYwbGFORStvRDJscld5QU1nR1da\nOUc2TEt1M01KSzJFN3RXeXJIS3NCSjQKEMQRTzGkY6T2kuRvfhVtcRQ2jVt5zhiY\nDlp5NrwevxKO3UcNNR4Xi/WCUmWA33p6Kgj5QbZbVhQebR/zd8b9Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGaE45TXpBdzdUV0ExQ1Jm\ndGZCV215eWZ4anpmQW56RFhlUWR1M1BwNFVFCjhGZmMwb2RJTVk3TmJuazBuOTlJ\ncUFJQlRMTlB6WFJHL3IyM1ZOcVNGREkKLS0tIHp5RzZaV1lyMnRCMGhFNy9jbWxs\nc1JrK2JVUXVIeXVTOVpmdTVBbk1tRGMKxJslG5hP+EAyFv+twMoHZk3G8AXpAK4w\nQnKEultmweZ7XovxfUBEl4322YZX6CuTm8yHqzFDTGv1nuphPL8Twg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3FCWExKcFFlSnJVYkNs\neWgzaGZlR2YxZUVjYzV6KzJUb0VQRmtwS2t3CjVIME55Rm5GeEovQWJVMFliOXRY\nNUlGVlpFYm1rMFZJcU1pNVl6UVBLaTAKLS0tIEluRGU5WDlMbnA3d2s1WlpvcHdm\nMm55WnYzNFY0M25OcXVqekZDTGRScXcKS3F08d9+rt2xNPFsp+sPP6OWVNsVN0mG\npIr6m0MjxjEejHSUV8Oc7W78l5sRLKhjv+5MGU6Im0NV91lu15zpEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONjg4djZ3T2NtQWpTTmRP\na0V2a1V0eTZSSkd5MHFsOW1RZXJsVUVnSjNrCnlFUndqRFFKYmM2ZFRoUkJNT3R6\nUi9nTW1uMERwbmQ2elpDNDFtNlNyWmsKLS0tIE9sazlIaXVTK2dPc2NEVVA0WDFi\nbEpjYzZTU3J2VGltOVIrbnV0R0x1SEkKC9FEL5cWB2VN5Gg8xAW816e+yPWf6IbI\nIA0S6Q3MGCwVOf1IA2GL93aCIIdkZ82bINaUG+KQDddSyc34nqnw7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:Li3c59vl4x6tAH9JkZ4vdOH+vs7+x1Ih8YZ7lIjopeqVdtFqxQwEorZudLJ/Jas5Ax0WQjRB1Qr1PrxQP6XtghXvNPKiWK0TAHsT7gmMB4fsA10EI6zJUlT4aVg8TGTgl1SXvGU6u36XpVtCVu5QKUNmqcKKL6JXVuOf1kWIhV8=,iv:fEd5xXCqinDK7wamxIBxX0vHUZly+iiDg7mITBVdioY=,tag:bxwIgz3Yohijar0utcfWlA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hostname/secret
+++ b/vars/per-machine/b4l/tor_tor/hostname/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:kKuKG9d4/M1QbJFDG7lIqsLxv+UuHnjefOLIrwlJevDjZ9WXFF7t9wEdKI97ks0P9QjCYwCWLpl9KvnnWGG5,iv:NfDT4aRKT09OCGCkeqjM7nCpn4uvAmxjM+vrM3LjbzI=,tag:HA941KSFSWou+r83K3GlPg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1Z6U1JYSDAvRUR0Q2Q3\nS3V0VHcySjJUSk1jUGlSeWp6MVNoSkJsSDBjCnAwMWFrU1hVY2FMQURQWnRyMnFI\ncGFDdjNqUVp4Um9hZzM2aE5OQ3A5YzQKLS0tIEtDUHhuQ3dQSmJ1Sm5qYVdvZlFD\ncDRrck8vOFYxdUJYdmxyZkVjMWNJN1EK5LMgNkrtbtGnB1/WCMnINutQxC4J6H8O\nyW8VXF7Vkoc1UJwWdgLIOILq2wgURgmlcjN6QRxqnZ5+SpEEpfmwSA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYlJObzVFZDNnWFppQjRp\nMmpIdnh2UUk2aFA3RFJnbnNQemRYOXk0V0FJCnBVNytpdlgzNVBCOVBPcXovSjJD\nS3RwNk1Odkd5VUlDOC9mMms1akIxVEkKLS0tIFJjcW1yb1VOdmFzSWdiUkx2MjM5\nL0k1UmQ0NCtBd1dyci8wbFhzZzJhL0EKC3ccLIbdodeHtLuMr0rhlXn9xzv7vV0s\nu5jKgkLcJsQazR/tTOJsFa1YSW214b1xzkQ5UOjGGr3QKdKieoCmfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtaQzlvMkFW\nRkdzeDhhWGlEVGpYeisyNUx1VWxPY3d0cXhtSjdqZm9hbm8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpWTUlEeTU3WEN3NlRxc3QwaTlpRmVn\nYkVQTVJnbW9IVFJOeXl3V1I3M2UwCi0tLSBJMnlKVlQ1eE91eFBFRDgrdUY5Vkl4\nRGM0bDNFYXMyM2Nya3RJUU9GTXljCj2ud36cyMXx5yg93iXZiESeaAd4kPdcTbgc\nCgv20gxASeuq2U61h/UMHJM8tEeQi/HT3tld+yGghtp/QPYNgZc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENSNEpjc05V\nclEwTHNzTjBHeS92UnBYYng4Z2p2Zm9mb1M2V1l5VUdqMXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpIWXZ2aXJTNC83anczMU00NCsyUFJG\naWE1TTlxbDZuQnRsbFFQTnZ1eG5VCi0tLSBoc1hqcElEUFkwWVRrd1dIYzlIczBk\nNmM1OWhRLzV5Y1dXTHN5c2pJejJvCmrYj1VSjz+XIHz9sy+U1hIRkmdKt+/ylRRc\nXoCqIK16mArX1S1FMmV0Gk7zcUOJEVECVLjuCUOIVcRvT39ymlQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG16bGlsOXdP\nNHZZd0tweE5JM2lXTmE5TXRZMC83MjBFSmhmKzdHL1g2bkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxc3E0QWFvZHNHOTRWZnZ1TkI2ODgx\nZHdJRFRQYnQ5aHhMdktyLzRoZlM4Ci0tLSB2UWFad2hJNnY0MWs5NU5RREJqQXVs\nbTI5K0poRVIxSW9WOWEyMHI2TnVvCh9RV0ss7qxpVLlR0TKIgt9Cbf1u59Nx/j5m\nb8exNGAsf9Bw/VX9gidU0Ij4Aeu7b0XPtI+cvLsGoNyxmTf5SRY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYjJRUmdaRVIwTXNjNCtS\nbDBRa21lb29rYjcwOHhxME5PQ2duSkxuN0Q4CjRQdFVQVHk0U0tibUp1MEJ4MUdS\nNVc3TnQ2ZkZpZXZVTmRUREpGTGZCNFkKLS0tIEJ3QzJKTlNGWnZqU2EvSWlma0Ja\neUk4dDR0cThISCtTbXZsTGF0VGdlQ0EK0lz1rjM0ygAg6QdusYHmi6Ehetou7GhI\nw/3hjerPobGZj32fy+EJ0LdcpILcx2lvvtOcDSap8/17Hbf6LKMi5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNjBzeUJNZGRYd24xZkJv\nOGJuL2ZwZ0pibGFtNWMyQzJ5RVYwSXJtTEY0ClZHUFRXT2pwWGIzU0FWM2ozTVdO\nMGRmNU1POXd2cm80TkZPcFYzczZkakkKLS0tIGMzd0dNdjVqWnRQVjlLNzkrd0xE\nb1pxeU9uYm00WHhOSjlDRnRGT3RESHMKHLpP7DNaaidt5Tc/9za+Zq5UCIVMtefF\ncPqKLvOH5iF0qDErVY3zqoXlQxx5rssUhVXn/OXC2n1/ubSuQHx4RQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ2ZlN3VxL3Q0R1ZPdnAw\nV1F3YkwzeEZTYWhyeHVvbnFTUjZqWlBQM0hBCjVENlJ0aEZDRUI4bjBtNG1CNUJo\nOU5FcUlaMWMwcUdxazJ5aXFyUnNNOXcKLS0tIDU1ZzFtSzY4SlZreE5sekZjOFhO\nTk9XNW00MjlCMkw0UUlKU1AzeUY3MTAKGf+jwWUm35Fi2CBrH2r+hHgW1pwGPft5\nNoxxmNn1H28MHSLz6aK1x7J0+TA+Wv5wZPnNVG0vrXSt17NWOi1BXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWWVoK2hEVHF2NERaL0w2\nMkErTHVUakdxenhTTEY1eWVrTFZUYmJ4RkZVCkZtNU9zWHc5YmVyRFlHRnVQWDkx\nanJHNmMzUUQwR3BUWXk2QkNZUEIvTU0KLS0tIFY1ODVSK1UxYlpSa0YrN2lidjAx\nQ0JBTGhaeUgzMFVKRFVJWWNxWm45MFUK2MQVFWgk7kaisGzxng0oG5CYOU6CX7jC\nfTMTgJ2ewEXdPa7b0Q/EcS6BvNDpz6jRB+Hr7mqqrnEQwt1YItIOFQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:wdtnhaoU/NMb1nqzjKX/uapwlbWZhbBrCO9VvYv5lYJrpkWRsFEMAT6XZzmkHoEBh5eZYO5fKth0tMyWkbptjcsPKnvFc8UmtFQ5lQ0u4asM/Fj9itLj6mtCqo34Uu7CzEhmfHKdThooZxNZ71qPGeu/uhiQFGBma6VLOz+AMQ4=,iv:BHju6UE77Wwz64njwQKCfouGXU5TtD+iCbCPDj3ng+g=,tag:MXM7dFiDSfvPUpDyqdWHzw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lKIk24xi6Ob9mlU/L81PywvKd22juE/lyqv4mFA68MbEq6i/ktZHmnPfinfwmjjZEp0pJPYbqgfwT9rHr+a4msEW7XCSe/BKzllDpYezPmVOwOf2OB5Q0Q2O286EMfXg,iv:KmFaMllFeMvHz7ucNtPP6hd6rAqEsgOGskk1N3vylgg=,tag:DoqcW6UfJi4560GA+ZNBXw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUTdLa2hkVXVWZDVEN3RB\nMUhkb2k0QkdtZDdnYlhIelIrTmpGNG9NOXlNCmgvNEpLQXQzZ0swQnUyRkFOQUd3\nUXN1VGZvR0R5OWRIU2RiUWx4eGxPZ0EKLS0tIE1pejFaNUpLMk5JRFdvQ0FoWkZj\nYmtXMXNwMDZoZ3V4bEVXeXJKQk1NMmcKAiBg6+ZlQYl5gY4RKd3IQxSJc0HoRRoy\nm6SHYvutY4Pv6i9gEuyYXIHiUI5WNmqQjgcK8ZpNVB9kcSiCkDtHPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEd003N0FhZUtWSStPY3dE\nS1d2U1RkZTFPVitsM2wzblhybXBzUlJlbTBvCitsMGpVNDNYNktEbEN3dkx2a01m\nNU1GMkpicTJ4TkNQenhuYVNOTXdGbncKLS0tIEZYZnlPVlI5RnFMN2hFZHN5LzdW\nK0FCSXBqYkQ4cWN2cVJCdUloT1FoVFEKSDw5Bl8CTjQiyX5iEZP4ageyDWI/VYFJ\nPMFbGrGIo/Yjn1GUXy3U8WCUL0Pf0t51uryYzxlugXGN2xDas1zqPA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHRFaEcvVXU1\nZzVJRFl0ZWx1U3g1MENFem91NFEwaC91bjB2VW1KakdrQXMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpIeE5GSGNaQkM4cGRGMU1IZGZvWkR5\nOWdMSks3VEZXWTJhOElRdkpMNW5jCi0tLSBPcXQrUG1DNlhoZzdUdnRNRTZ6ekVh\nUHlCY2VVOVhXQ1ZFNllmM2I3UUJvCs3ids9ynH69xwiQMy5H8W+gqkE4ro8YugWY\nIx/BHKaceRCrrhBr94ut9J4sssmXc+IW8KR59cfqlQaIzv4bw0g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG03MkxmSXhS\nWlk3eXlNMTlOT2hqaVRZd2grYTY1WElweVlWUDZmOFcwQVEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3SlBVZzgzdkFsSjdBQ240czRVZStw\nM0taTUM3L0l3dUVwUXh4V3NlMUpRCi0tLSBJU0xzSDF1SW5BMkZGVURjTWptclA2\nTmFIdDFuYVFobTFRcjEybmYwUHpNClHm/GaJ3cJ6CD6qtRZeA+0IaZXQVIIl10gq\nXXky+9m4k9QqzJk0WNlQVTKESXEZmH7ZJpFozkkBl3pvsjcP76w=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJLNWt2VEFl\ndkRHWVU5eHV2Nk16NHVTUWRZVjFKN0gxTzBwUWdnUDdCZ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpxRGRKeGZzbDlhR1R0QjRxQ0Y2aDRU\nOUU4aGppdzZMMW5neXBpd2tKTnpzCi0tLSBpZG8yWnRLQzFUWXpBNGhVUTVEQ3JY\nZTEvYTErTmF3UkNIKy8zaE81MFFBCvNUXKxBem+mYQYPTwUaBfdcgbW2/ox7MHWu\nprO+wkgytG/dowwxYN8ojE0jTL5gEm82IhAcBefUozgUrr99hTw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcGZZcldCWHhnUktTdVVr\nbytSSFdCblRGOWdFZTNJNFNnSUlUMzFYTkNrCk1ZaDBtb2NwRkpPQ1MvQXYva3dz\nTFI5WHhpaDN5SlR6Y2Y3L1AycUVsaFUKLS0tIGkrM01ndVE2bnB1N0RsbTZqVWpX\nQUV3ZjRScURwRXZxN2p0YURJREloMjQKNXNSDKR2yHHd79VswrACRMAbjP7xhaBG\ns0QecfDGnvzehMTRgtxLZ1boN48ltBgiX2w2kattklKFC/DPZf9arA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNEp5NW5jSXhqUC8xNUdH\nYktoYVh4S1VuME5COWVXK0twdGVBYmxqSVhVCjNDdzNLMlFtTlNCR0JWSjVTMzcw\nUUg0TjZDcjA3eFhVa0luTGtiL0dUdFUKLS0tIDcwVUtSRnN0MUd3M3JDM1BBL1ZN\nQlR3L3FEbUlkcCtneHRIZFYxeUFqNGcKVwSlw/DkUct4N88zmsdkZdmfOZkcyX4t\nTJHTIzUQ8DfEiAImw+4gp7zGgIAniSRMS+gaCo5dNyUedkP8SKf7JQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNXUwOHlMSHdGRWxYM0VQ\nZ0YxR3dvYjJuNVFIRnpNQXptWDl4U2xPb21ZCnRheUZnU3hyeU04aE9wR1dQVVFw\nRVR6KzhaMDVuSHhGdHhUOUs3S3h3b1kKLS0tIGZDNzEyWjFBcjhueDJMKzVCQkNm\nWlpScjB0bWlnbENhcTNiNzMxaXNYdU0KyF3yxe0mepsFVJHW/pSMpHLkyF66M0Sl\nzm+biucmH+6aR4Pc+IvQ2PogEetx09hhCME7O2Okz5IZI43Xh40meg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN0xqdENLL2JCcE5NR25S\nMWtqWmR5b1RSdEdoV2hDMDYyaHk2ait2OTBFCmE3RHZPQ2RBZDB2anFaOWpCcFhB\nVWNLNjhaRzFPTm43VkpabHF4b1B3ZzgKLS0tIHcxV3BJU21vZTdYSldRNlRYaHVv\nVEhPZmE3SEFMTmN6ZTZFdm03ckN6ZGcK3OpuSsmD4EbUNOoQlz7oOfbKws4exwvD\nBDpMRp6XhYG9YXYoLuvuKu3Qq7YKrfv0ULaQD3iE5KpruEBlHpfR1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:Zd03+YZJUO+kBJv5pbOxaebKeppTU/+iqJn40LyP3N4vWlXQ/1uJGE48oonLMSwZ6LpWlmekl3hVWQIMvysHsFY8mGVb3Xb/UrKFm1IF9Qd8NynRfR1bu1TdIA7Ums1fXn47OT0zUWhFaxz0xHBRmavusrHmFIAlwq5YQUNCUMQ=,iv:aac6D8jlG+Ct15ht0nkPMO7UONXnRFga6542XfMAgiI=,tag:nKvNDfqmQJEco03EZcBz4A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-ip/value
@@ -1 +0,0 @@
-200:ada9:8363:202b:faf:be:92ab:e46d
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
@@ -1,47 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:NSyWVWXMxoTR07uaLUYX6rHB17wsIB53FZHSsPxgDKJQ2wHBPFNaHSYh+BiSo+IrX+YcdUUqJFhEkjWDyG+vXaNZHrMbg/pzZ/cwTK/lPbYISkwtOhgr3zCA0H6DmQcHVmvR6fsdRDkFwl7pHtn1RMjEORQdbBINtscZfzZFcAF2L1t+WPFxgRKQDNT/9l3f4SoBcuakyg==,iv:/5JbEZ/vj/4I+eEElOY0cnhiYzqqPw2ZKLv2M/xkstw=,tag:23exDL72g56bP7ZbMsK4mA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYUFSZGpmd2tmdzB6bkp5\naytPd1RhVWFqeXF3SDZia3QzUmRNNGpzcjBFCnl3VElLdXFvV0tFSEFlV3hRMzFH\nbnBnWVZ2QkRHZ1BoTEZxdFg4QWE4ckkKLS0tIHhSMlBKakxmM0xyeUphKytLTmpk\nVW90V05hTUEyTVNMQzZHN2xhYTBZRGcK/nJOIM4m56TE7KKmn/QH89g053mmuKKG\nQYs/86SWdLPqwL35FstQg2xDIHSxkDcoMSGc+C+/xdOjWV3qLil/DQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaU9idi9RZzhNeXhTb0pp\nUkZ3UVpsZlBka2kvZDBqcVhiRVdMNVFZbEJNCkhvdmFaVTBGcVAvalJPSlFuZHhi\nTE9qeTBMMjk2djhFUEdJbWZmTnN3WnMKLS0tIDludThMRDFDUHhCZVV3bUtVdVBZ\neGg4TzdqVjJPeUxYbnBWNURRSWRrMkEKBCACDZgHG5eVKcSdjHDITJZqgR7cHdHq\n9y8qS3YjaFZ37Ui6Lmb9vJEzDCEy3wEupBy4sbAX4okVapGPJ4fmwg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJtSTZrY29X\nVTZNQm9XS3JsbEZCNDFUR1gxZXpObDdKRmQzUnRZMytOaFEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpYN2xlOFVDZFlEOHhTMGZTVDNjdjdU\ndWlqd2ROamdmelp4UjAyVitnYVQwCi0tLSBZWmVWc2J4YVhLN3VyMTQwamtYRW5K\nWVovUEp3YlN5WjA1VE10MElWMllvCiLrLLekRkmSL5ekLIcFMoqgeEPXSrn15JDd\neKT9sbYtwhB7vt2L57fDRfaF/+7wNb9y6cv2oi+EdDoDXp/EyB4=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGxiRWYyUmwv\nVjlEdS9LOVV2K1NwdDFhYWM5RS9LcTZFNkNaMWViMkl5bmMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpUQkk4NGZPVWRTbG5MNk9CTStSUXFi\nbXlGemlJR2o2dTB6QUE2Q2JKSnE4Ci0tLSBzZjRva2NtNHlRamNvQWpoZW1UWFMr\nQVdNYXBpOFVhaEVxWm1KNFM4UHJvCnebMj6d/+e0vp00Gb02qJtUp2+mEpF/jUpD\n25cxeoSAWPAhfnBgE+oLzQqnQSq5dCxsWteE/1eOXC68koeT9FY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9udm9sRDBJ\nNFM4dFA2ZDdJMlBXeXYvakM5RHVzNlcrRitzUHF6dnBvMVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpKZnBka3YzK0tUQ1hXTHVheE45Mzkw\ncE04aVVPQWM1eURmb1JaNlBwVlFFCi0tLSBHTlY4UW5FQXExK2cvMUJDZE9NaURy\nOFUxN0dvczJtWlVRc29QWlZ1bGg0CvUoAmTgDVSF7SPpqnkFhkCUn3N/Yr4Tzodw\nyCiD7U/KYFavEIxGIeg+ClhLF9o4fYq9kk8ld0vU8qUADXBdRDE=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTUEyUndkSk1iQTB3eUpp\nb0ljaXpwdi9QYmdNV1J3L0NhWElRVzlnNTFVCnZ6Q01ESWRNMHRxdWZKM0lYTXBX\ncko5VitPdWk0UHpwWDhGNzFVZk4yYzgKLS0tIGVRdG5rWkYwOFlCQWNIWFBRalVE\nMmFtOHBvbUw5YXAvMG93MjBrRjdmMGMKlopySr6HS6vfFHiRcwlJz/qy7jzyS1Nf\nw4lw7QnOrvOkoutiK3HiIia5N6V0jd0TV7nJqIu7tz/zYksbzps7QQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVTZNTUM5UXowWTlPRDFW\nVUJTbStFcldHbTVDUVRJYjNiaklWRmowTHdnCkJNbUtmdk1jS3kyaVNWVFlOTytX\nKzBwTmxoZi9NdmJuRFNMNTUyRThNUDQKLS0tIENSMHZ5TGwxQ0xuZkZFQ3RJdGEv\nSXIvYW9WY243cTdzZEtra292K0JFVlEKMWhG/7R00uqLb5l5lU3p9Vt4pre6J85r\nIFWtg1G/54KaFt8aiWcD5RUSSARGZ3r4qVtO+9eWP+gA4DUpSNkWNw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WVlWMHJNbERKUGx0elgx\nUEF1Sms4VCtNRVRraWdvUkFEaTRzYTJ0TTFZCnl0aTIxR1QyQ1VsU0RFNnN1NzBr\neTVQbHJHQjAvYklFVkZkUDRXRGxvSkEKLS0tIHdINHFyQVE2V1V1R1ZxWEFuMm5x\nUVRjSVp6NStGSkQyQ05JVHlXejBEbWsKBlMvtw9MCReN1eSHKMwwsWaEF8kq1Pns\nLNSYEeWABZ5bbPB1xBvmIIlVFThJqgy5mBVJLzQMUwqb0IvixAgFxQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaSmNiVWlRSy91Mm5qSWJ5\nd2Z4WnEydE9ncWwzUVVCMDVoek1wRTFyOFJjCkZjOVZrVHY5d3FKRmMvaXJQWUtU\neGpSZkZITkJaOERkdWZpelA5dTJQOEkKLS0tIEtZOUNJSytYTFpSTWNuY3JjcnJv\nbFZpTXQxc29Pd1FIN0xrcEJYc3ZlV0kKyO/PLn2WNdVtTqM8cG1XFqV/5YdSqPAY\nvroStGVsLliV7W4T2MAmACeyjoMde9/gVosKfGc6awE+Bi2BUxrqpw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-10-17T07:22:09Z",
-		"mac": "ENC[AES256_GCM,data:OxeLto6aeiTOX8OffRsQzxyluSdva7y3j4j67c+MI1ost+QCZyGAW/5pr2mMaoU2XrwYqUjZTKBhJ9p1FY6C29/EhyzrNhGUTjC5iTcXO1lbLUTgoSDN8KPmVea97sTa+easVHoSgnPLxisG2yCALv95k9/eQ7vF9FRjBBNTaIU=,iv:FQeojhtnKOlqWuQNJo1TmI/PhjYbgwtvK24gZMjbbpM=,tag:Vwum5bSSZRNNDQ3Yudw4hQ==,type:str]",
-		"unencrypted_suffix": "_unencrypted",
-		"version": "3.10.2"
-	}
-}
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINr9XJnFULOdC7IBSGevI9ur/2vv3Q2BxFxsSFP0P2lq 
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/machines/mirach
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:JUFlcprJdQwxfLKafesyQEkI1Ip2bqqDn0ZauO+CvkA=,tag:oCBRLMnF2XvHGqOmMqh6YQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHNmw5RFgwTnhVN29OdWlH\ndTdSNndHVUZDdGVZMU8wWTRlbUhYVXhObFdvCmM0TlFuTUcrSTN5UEdQK3RkS3Zo\nV2ZOUlFFVk9OS3VnWUQwV2ZwS3VmUWMKLS0tIGQwWENjV2x1ZjdjaGMyQUQ5L2M0\neDN2Z1ZEaythbEpQN1p3OURHTFRFYUUKMAPK2+Yqrht8EzyWQ8+Ts8yUarHUFar8\n10Dlyfac4tkcMVwz3DP+o6xmlB99so3QyvwuRXk8gBZ/XZNU84WhHw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArMWgybXpVeEVuM1MyNUZQ\naERkUDNXNytVZmhKNTQ0bU9pdkVsSFZ0andFCmd4UkNJdVZiRklIRU9SM0VLVG5T\nS2grVXRDMEtwaXZlcWNDd2oxMXpqRDAKLS0tIHZuc0hXSjJvU2ZFNUNFZHM5SkZp\nSnUyYU9lS014Nk83Qm1uR1lDbWhZRlkKjMV9jD/SkizJmpK0qf2YQTKN/YeB+KDL\nm0Zc6sfkag0JDn1tUOMznPJly2gU2rYikmkx0C4L1YsMbPAh6UhbXA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Z3oweDIrTnhiZFBCUk1O\nSmxSU0ZEK3QwSEVDMDJWOExVblhTZHBDWEJVCllpTnQrTnJRUkgwYnAwWFdubGdU\ndnRISWRlUmNLNWZRdG9KZWQyZzhwZDQKLS0tIFlDMlVFUTkxak0rRXFLVHhoMTVW\na09iMWVmakN6T05QVWw1N2FPTmkxSG8KsxQm1xLlGEsRwFMiefTDMPyG5B2gnrox\n2tLE73kECtQY+qJANqs2G3ngTWE0xEHVx3SdUJzEgCWlHyu6m+FdOA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEtwQTQzck5w\nRitXM294eE1mV3NzZDE3cmZiWmNsTXJzbHBjL3NUeDYvSGcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpaK2o3T2tCWlIyYWVaNW9ZWVo0ekJH\nbTkvM2xLZlh4RlY1NGpJWVRTWW9VCi0tLSB6bUVwM2FEeHNneEFIc1ZyaTNhNGY0\nV2M4NzNsOW9wamkyQ2FCRU9pT3lrCmNDW1RDQo4f+vk5A10vBYGr7gbydIjmQn5M\n/Wll7muj/M87zR3odNriyVyZzenYrdALA++MvDkaK7YGclZP1oQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNuNlJWdmJD\nb0xEV3FjM016Uk9kTGFiRGJ0VFc2Y3gzS0hmcUp6dkN2U1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRDlIVTVQZUFtQ0hkWDR4THozU1BC\na0pXV1hBUXdvUjZGbHg2RSttT1lrCi0tLSAyVU80TkFLc2xWSTBpbmpUcCs3RUN1\ndEhkZU9vWkVkeXJ6RUg3ZnNrRzdzCjpFoMGrFDs7bVaIq8E1kVBH0N48OxDABl0A\nTmshJL2qwLCeXNugDi/oO61QGCNO/o10sFgcgNXQNsSCm911lL0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZUdzh0d21j\nQUYzUDQvRDdyN0UvbkFsN3pJdFZ5L2pUdHpWeGlJN0kxVzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpmTDVsL1F2M2xCK2d5S1ZiazlTOFpu\nUkhUTWZtK0xRbnNUMUx1SDA4RVVJCi0tLSBFU1JEOGN3TDQ4MzZzN2E5NWgrcHV3\nNVNqNkkwSUlhVUV0Mktub1F1Tys4CjC/TOqQB1EvWO2rdPW5US5Ak4hG85oZTFED\ngxtwHAoRIxMPE5PXr1Pj/oNmngEbPTs8TTTTD3PmBSSIaerIloQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuR3JBcERiVk8vUDJDYVBs\nTnlHV2YwNGRoRGZlM29vRmNvRmVJWWg0ODFnClVqRERBQktzeW54amhGRXd1akpa\nVTlQVjlsb2Y4UTFBeEVyNDFMVStCNHcKLS0tIEFPYlFjVWIxZTFVbVBIWW1FSXZD\nVEwvVklMaHBvUytsckFvQUtYRUM3MVUKtKGU43ncgbXerhQxP5tkWnOYyKzg77Pt\n7nNInAzuIdF4rvI/JsNwSmfrQhRblw7bnQfRNYkygU/1ZvW0y0LCNA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbFVYaTZRRHFYd3oyZmR2\nZkFrNDRnU2dmSTY1d01zajNlU0J4QUo5OG5ZClFwRnZmZjEzaGtPT3NlaWVhUXBN\nMVhkWmtobmtJZnNhM2RTZnpuUVYvMmcKLS0tIHZRQjR4NWRncENkQVY0SFlBczMr\nWXNyOW4wT3RUSlpuTEtNd0lzc3JDejgKjDZOtvw/FQa2JnHRzsUKKpgyusgJeSBw\nYrgAIk6ZTohmin5KQ8VnP3PeW5tYrwnRXi35B9MZK7ZF8fdmfyosKQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNG9sU3RrdSttbVRjUWlH\nQk9yVFZBR0NLSzMzbXk2UFRPeVRhMi9RT1VRCk5XMzNIK1ZreWxpeTlsVDdFeDdz\nam1MYUsxdFErSFd3L2tVN0FjcDYrQlEKLS0tIFdOWXFQbTROMDhocmFwNE1GemRX\nb0ZIQk1qbnZHTU13UXpKdHVyZS9pdU0K6Tn5ym8S8j8n1crIdMkLgNZ11KXwvnGU\nG0TUDFtZLqYdPXNK2S8sWlj4a+HouURGeDn8N7aEaRYgbZUTGb6eCg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaksyUms3V3Rwdis4aHBF\nb1FWYmJXWGExS3F1a3pKaHlWekdvODM0R1hVCnFkeEtNblY0TForbHFDS2VXTjRr\nenA5QldNUktKSUUwMnR2MU9seEZ6UUkKLS0tIG9jZEpyUW5oY29FS3FLL0ZCNHJY\ncDF4VFFjcXJiZldQdWZDU1p2b3hGYVEKALolFV3mhOLaIRKEgXpVSnFt3VbUqnRx\nrfyHdfGcsXniFQZilQ2j5wJzbiXKHA7RrLqnj3w9besnKuCzMPBPpA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:44Z",
+		"mac": "ENC[AES256_GCM,data:sO2QgBHa746L+6KdHJ2IHCRnZKShzzDD2VKwdEaqfEAQMPuyINzHuahFoGjwJ7fqIA2FLChooN8Y5SgOwS7GWtVPHHBkX1nHFDV4XX+JCLfsrnMEtdLsQsBQd/+Xz74tZEwvAKEhmlyROF22As2dW6T4ql0xxpnmzyQwO3KNHTM=,iv:ZQcdUvmaSC900tMsZi7iqHxGWMFZboqHUkvjzeUDB7g=,tag:N3YGceZDKvMNz3tHICznow==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/root-password/password-hash/groups/admins
+++ b/vars/per-machine/mirach/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/root-password/password-hash/machines/mirach
+++ b/vars/per-machine/mirach/root-password/password-hash/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/root-password/password-hash/secret
+++ b/vars/per-machine/mirach/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ko/j2orojdCHYSQs+yPjlIBL7LOLQuUjm7qlAGnyzT/6ZpHNxqcPmG8BVeX7/7buoWjQ08VA7YujDeK79cbnbPUf1OxbHpi0K/k1hYTeBvfg4adXvP2jXM+G5V5qgcMkrCGRu+0n+hBuVw==,iv:+AkcjsIqugogoPLIG/F1zeC+LyOFyNOvj0XAnCnr9qM=,tag:Rute9zpYbAoMbSoCAjlu4w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqVWhSajZGUG9JQStBbk4v\nR3NvSC85UE9KVVlBbkMrN3Yxb3EwQmpDeW53CkhYMEFwN0kwNUFDWmMweGl5eEJJ\nOG41VEEwT2FVVDBHbXdYcmxWd1hsNWsKLS0tIHN3K3M3VmUrcHdGdElON212U0FX\nUE1ZdU5uNW02RzRKdXIxVURtNW1xL3cKITSc8H0Pp46oyKyroAy8iZOCqpWbao9U\nLEAsSl/1coiuoZ0+0Gwu95CKkQ0DbfHyA/+VzTOhYV6PfQXFXw9mjg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNXhiWmlIVzZzWnpidS83\nSk4zVERpTVVKSnRjdnZCU3kxYk1DQllvZGxNCjVIbzRwYUtYalhHUWJXTTA0b0hn\nVHlJVzAwc2h6VTJXWUFQWFYvU0tGYUUKLS0tIGM0NExZSXFmRE1xTktaMGpRVFFH\nUll3MmltNGpGeHVhcnB5L2dnTmVnLzQKZb54Mj83Ssy95m1Yae2cay7MUkv0uO8j\n4e+h+Cq+2xBGqSc7T3cJXX/JfXYYOhUTvl5YB+JD8Q5H5Xi4Hm6krw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQK2s4QWpNSjIxa3RHeG9D\ndktQUkVVeWVEdWNmVEhEWHExVlNweGxIa25FClBxbmZTNjNqeTlFV3ZXUDFOTHIx\nbzNMZmVlQ3dQTW1kVjNDMHVTdWt4NmcKLS0tIGIxNGoyNWtzUThsYVo1UThQekVu\nbUx6MHZkMnB3Yi9pNGNkU3dnekpBMW8KRchUrgbqcRIQKRWYYgAHaHUe43yMPaxX\nfAFqce2Qi010BpcYKp9HTcDGx85w/ZUjnCKUom8y3uOu4stfOx11LA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhsb0YvV1l1\nRW9sQ2NYcUU5bW5kRVV5b3VNMGhwcGZKamczNmJiWnZRWDAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJY0lrQmtXMENCa3RBbFVwQUNHeVp2\nVEExVkR4TmtWV3NibGR1TGJPNWxBCi0tLSA1d1QrMGdHUHYyUk5VeHlFZTlza29q\ndjI1OFJsMXQ3aUpkQkR5cTFDUCs4CnI5NKxj8/NQYwH1uk4TYqzeSZwE9Hoq/RD+\nuNokUefot49C8ne5xbHKngDW0RMiDtUjQ0f1SGxBTbOPf85IO9o=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIElqY29iaGpO\nZkZvSHdMdFVSMjRkRksrdmtWN2RrOWJWTFhSR0JHeWtnUU0gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWTmVyWmFrbklYUGlxN0NjNTlUUXlu\najBlSU5tVVRzSkE0SXJLbmNoZTQwCi0tLSBCU00rTXdSOG9YcXNNOWx3Tit2a3pF\ndGxoNnRJVHhUUXh2Z096YmhZdW1RCgCxFT5bsM6Mr/RA0nuvrkEJ7gLEf3Eo+TqD\nX5IX2EWYtYN+hwCrppnLS7LQFM1V1XuyIldXQsTMAbs4yCiVmIA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZNOFVCYXcv\nUUZKREZjeVpFZWpWVEhDQktlTTRaaUtrTUFNN1BzUHNHU3MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpGNkJTdWo1Qi8yeit1akNLM0pYUllM\nYTFKWmxzWlI1eXNnVHpVWmFreWFjCi0tLSBBNlBYSHFSbFM5c3NTbFdFT0VrQ0c5\nczJweXRuYVdlSDZNSXpvY29WSm9VCr3wU+v3vu5TfTkNXu2k/WZ5WwO9Yb53WDP3\nYc1ScxI2UC4GA0USy6uxSSGKJCC2OUv6gKnRtipJM9BC+VO1iBw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMU8wamJLU2FpeEVmbWFu\nNXpNNFJrb1VBNWZIckZ4bzFBMXZRenoweERFCmo3VDduaXlXUXIyMitlMnl6dzhs\nNXN4SWxNbG5vSXZhZVVOZElOZGFCNkUKLS0tIHVMbHlCQS96Ti9sTVlYRUNyai9r\nd1loVURZY24va2l2UXRESmt1KzBOMnMK3VnvlyO6FS3krsSx8NOI21W2syP4CoeV\nQhb2h7dMBhVDUb1RE0elxqsqgH8H7NR8i7Y/R5phP8kkh2qYnxwxaQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvOUtZWlFjdklJVTE2ZUpS\naXd0eW9mRHpvMk45blh3ek9qa1A1VFBCZUNZCm4vdlg2emtWMzNSVnY2NmQxUE9H\nUkZxZUhyWjJ4Njhyb09oM3M4ellRUncKLS0tIHVmSTQrSTRGdG5nbGl1RE05cDdU\nR0RycXplNmU0VDhzVmRCVzY3UDYxWmsK8bRtj64VV81bX8LoUIZyN7+AblGEt/9R\nmJuwJ/kcPQcTdSe1Xd9TaYuYDHCGBGuKptpSYbufoJVdOzct77gOEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVUM1V0VqbEluRTh3UXgy\nVStZb2lRaUkzK2VnaEtDMklvR1hHTGtxRkNJCjdOS0hscXROOUl0ZXdWR3NOU2Vv\nMGE0Q0p0U0hEY0lNLzlPL1R6alYvdjQKLS0tIGFYQ1orYWluT3RHZ1RZaHdVYStK\nWk50M3dYWHp2bkVtM3p2RXdkeEI5V2MKeRB/Kas5TdyQDa50Kfv0MuRbyETyI4iH\n0TcJPx5nJdNo93b5g543yQ0FT8PRCNe5SqpPZkq03aJOu0SaiZpUWQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2M254RTU3S3lEdGpTd0tB\nTmcvbExVQjdKVXhObjFwRXNsZ0tlQnBkK0E4CkgyZm1qY2RDNXdCVER3RDZjSXUw\ndkRqQldrOWJkZHh5MEl4OWFYczY3TGMKLS0tIFB5Tm1rNkc4WldCUnZ1UkF4clZN\neFM3ZXJiMy9NRGd6Uk1WNFlmTm1YRlkKc4zc2SGHMgL6dxfpfuWZe5xVDuZzBstJ\nccuKUENLMCfe3ItSFKhDQQrDLQ++tQzxiRN9qAgE8TGM98tmfEvYsA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:45Z",
+		"mac": "ENC[AES256_GCM,data:HfJIAtX1Yk9beI83QbdFDN2P4am7hLnwNlLA8H9PUj8ADPrhk7QqZU6p9pive28hBTWjzKTs/MOnagkbJeCbOBcorVgKRN86ny2NbJThIpNSentUSz3GK+Lwhte7A27E/9kP+WlheMP2TBp8+lkrBE9VRM7jVVXlUBK0rJzuanc=,iv:NvoY7NIWGsyNs1xeXbjW4m//yag8CUYQAlWFQlbOvZ8=,tag:gzfLnoA1ybDeJF5TXihDGw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/mirach/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/root-password/password/groups/admins
+++ b/vars/per-machine/mirach/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/root-password/password/secret
+++ b/vars/per-machine/mirach/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:H8rDXLzzgsPDw2UsxwjH9/P+zFQjFh/rweHJYg+hQ6yeVXR2PDDW9DBr4yI=,iv:gYuj1msylZhA4W2F59qD4eR9QdpJzUneuEr0CUmNJ90=,tag:fr9vs4TZ9dh6pCrZS/njUA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUWY2SGwxUkQ4N2hvWFVM\nMTd0REVVZG9GaFpiUXQxaTlHdnZ1T1czcFJjCnhQMW4wcGFxS3d6U3Eyemc0dFJv\nazl5bFJrV1Y1T2VVSURwRThGTWI5MVkKLS0tIG04enhmZmZhWnZPaFBuK1I5Mitl\nVmprRlBtL2FqSDFzYk9waGxqeTB4SHMKzNbdtm9hHvfBFu8UjORXUWTQ2gHUsXe6\nq9XM9pEZ7vdPlQpIANrk1/im/OykmeaPQcXxMrmu32jgoRyvSzhmPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArUTVYbHNrT2pXVHBFc09m\nQUtjNENJMm9GRHZSZGRPWWsyODlRbTVLSWs0CnZLcjZzUkF4aTFxZGtNejRiT2Qx\nRWNRVS9qL1FzU0IvTGNrUmcwa25yakEKLS0tIDFDMUlUckQxSHdDd3F1RlphZ3JQ\ndEt1T1JyUzJ5dENUSmorbWk0SVpqKzAKrcZf9jXVTPKUbYCsSMajNpm9UlY9Q7nh\ncr/3MGclh4jzqpAVawvBjCom12R+xZ2Nm4ig0n7FI+GFKZAEnNVv7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFWNDJWTTMw\nSnRGTFQzSGJ6QitzZGYybWp6K1pDVk5JNlU0SXJrZ0tUM3cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpROTFRTk5YL3hjbVlyZ3VUYmRrWDFh\nbVhuRW9HVkUra2x6Mi93cnRPSEdNCi0tLSBrZWF0TFFzQWJvcU5VYitONHZPTHM2\nd1hJblJHQnB6Qk90dGpEeFhiZmhFCqg+ECzt4NP/H+xj6ESY/4dp7IH/3Khjd13n\n7vOZXGvZ18/XesWYQq5Rcs75ZTjaHdvF6K2mfC3OK512Lf1EcSA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9MTFpnOFJX\nZFJ0Q0dEZzFaNFBnMGptazZHd0UwK2piVVlXNGhDeDBoREkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpVdDcrTkdxbUpFWWI2OUJ2Zi9aQ1lB\nd050RVlNM1NFMHNscnBySUwvaDBVCi0tLSBDbDBDRmphQ0w2Vm9NdWZNTzdKczIz\nbkpyZzJCNkhhQmp4RW5XamdDVi8wCn4u7e/+Pcd+DCvgsbgYCUeXOT8a38ed9V4j\nsinBeCAONj+DWj8nf5ZHq4BD1E+AggLUVRsuoMgGmw8heCU7Ke8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1UQlhja3RM\ndWVmZjFLUFdOL0lKZkN2RkRGaHRFbmhESDZtcXJxcXNUeTQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpURWc4Z2lLVUZKLzR4YU5WbjNFNmhS\nNUVNbEhrZndvdGxFSERYZm5YbXdnCi0tLSBUUmtqQTFEZStrR0Ivd1k0LzAvVk1v\nT2pwK3ZRMVZWd2UzQ3pTL3VaK0xvCiwyC3g+z18urJf5uzPEGgeG/MZZy60KN5NA\nmdiLW38DbiQe+iHOnogn3AjvcgJx6qKXt0KpSyMk+xFGJwVYChs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGF5dHhLYmNpem9sc1lQ\nUGliQnlLeEFOWG05Vk5wK0RzN280MGxOUWdjClN2dlo3UTBCVHVtQUd1NEpjdWNW\nUXpiUGkzVVpuS3Y1Z0hkbzlOcEhQancKLS0tIEVUZG5Yd0t3ZlB4SC9XT1JyVHBv\nNW9JeVJZTThRQTNLQ3BCdUJBU29IaDQKfmw8KDkZgT9rDM9OfDy1epiNCQPWa6tR\nM3s2vi1ivbzuXw1Tzv4ldlefRnZRpMac00ID32xO1qhF72DFqyJDBg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBla0VXcGR0ZGtqajJwcVRa\ncTZka2xqcmJla25FSFJjMGpxd0NRTGpaakRFClhhcVRoSjdzb2FIdzFnSzlrK1Zw\nbTZka2pmRkdYYytZVVMrMDlNMXNUMW8KLS0tIGp4eTh6N05jdkZiWEFrYi83SHBo\nZCtROEJqWmlraEVGSUI2cDZaUnZYVnMKKBmTDT6tf1Tpe2Xg3PnQGGUmk0NfKcPf\na1XDQEIj5jdAnoZI79x5PuIDUX5aHbNjS59F3n7nAHY2lv6eYRYlKg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVGRuNkZnSjJiZWRKMjR5\nWUs1bktjeXk1ZGxzU1E3ejFmOUIrck1mU2xzCmhKMVhtdFhaWVhGNzhad2MyYkNj\nb0t0NEx3MGhTYnNKeFJIUzlObDhvcDQKLS0tIGF2aURjWm4rVzNENnYzRkM2WnVX\naWkxcDhQVTROMGtiSkV6SENZSnFheGsKBKMZCvSd9sDm5J+lPzJZ9yqnJACXSV5R\ngcjyLp70mZDpkygg/gxrcXuE+ydq6D7p4m9vdxYjY/EMEWR+CtVuEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFbmcyQXE4REhkTDUvVyto\nM1o3SDVyNWdMNWxJWFlvMG1IaTBUWkdBeHlzCjBkUlZIdGN1NkFESGFVWUtwODVv\nYWJPZ1ZhT0NkcVg0VzdNaytSMCsyZ2sKLS0tIHF6YytkK3hmSC9SVXQ2OFkrUGk1\nUGZWMzBudnZJN1NDUkRrSTJac0hxbzQKDKK97X8AfvNwlGbYuzd4YG4wux5t4KhH\ntz8FIZVqNih2iVDQWZ/pCIDMepN2Vch1uOYvTcNDe1aFM+/dtN6UJQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:45Z",
+		"mac": "ENC[AES256_GCM,data:XPFSj7cP09ig/5kxn3BZ7Eq8Y/brpzsKu/VpcRZMPADr8wfJTyvQp/iY1QSBRS6X0uNlnr3B+C83uwkRrzRWCzKRqcG3GmhJXcILC9ZhMyn0Nz8+SNF1GVGUWPjcGzx+6R1WO0VzC6S6kq5NDVyBvLrsQu+lJU/Q/cm7/4uCtmA=,iv:Z1En8UYbhiDJwLeRisCLtqigrs5ACa1bb1EFiggdp10=,tag:l90EWqUvz0OacHBx0Nx+Sw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/root-password/password/users/kurogeek
+++ b/vars/per-machine/mirach/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/state-version/version/value
+++ b/vars/per-machine/mirach/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kurogeek	f9465e4ed0	mob next [ci-skip] [ci skip] [skip ci]	2025-12-05 11:10:32 +07:00
kurogeek	7eff755fdf	Update vars via generator yggdrasil for machine b4l	2025-12-05 11:08:39 +07:00
kurogeek	378215d9da	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2025-12-05 11:07:27 +07:00
kurogeek	ddf7577fe8	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2025-12-05 10:45:30 +07:00
kurogeek	398660b9ba	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2025-12-05 10:44:04 +07:00
kurogeek	f1ce4be023	mob next [ci-skip] [ci skip] [skip ci] lastFile:vars/per-machine/rigel/yggdrasil/privateKey/secret	2025-12-05 10:36:01 +07:00
kurogeek	79cad87f43	bump clan-core	2025-12-05 10:35:41 +07:00
kurogeek	6312ae3587	bump clan-core	2025-12-05 10:27:27 +07:00
kurogeek	b6297c2d8e	rm clanService/asterisk	2025-12-04 17:30:57 +07:00
kurogeek	7067fd43c4	bump clan-core	2025-12-04 10:00:55 +07:00
kurogeek	36ff92a984	nix fmt	2025-12-04 09:57:07 +07:00
kurogeek	62e4ea61e0	almach machine	2025-12-03 14:11:42 +07:00
kurogeek	bba1858c6a	mirach machine	2025-12-03 14:01:36 +07:00
kurogeek	58bd02575f	alpheratz machine	2025-12-03 13:40:18 +07:00
kurogeek	5ecff1bc9e	bump clan-core	2025-12-03 09:58:39 +07:00
kurogeek	7a381a310e	tor connection	2025-11-28 14:55:21 +07:00
kurogeek	36c31507e2	Update vars via generator tor_tor for machine vega	2025-11-28 14:54:35 +07:00
kurogeek	bfea371501	Update vars via generator tor_tor for machine sirius	2025-11-28 14:54:32 +07:00
kurogeek	ff0bc698d4	Update vars via generator tor_tor for machine rigel	2025-11-28 14:54:29 +07:00
kurogeek	11c109970a	Update vars via generator tor_tor for machine ramus	2025-11-28 14:54:26 +07:00
kurogeek	ad95a8710c	Update vars via generator tor_tor for machine b4l	2025-11-28 14:54:23 +07:00
kurogeek	e6760d320d	ramus machine	2025-11-26 14:01:11 +07:00
kurogeek	bfeea4156b	disappearing default route is fixed by a hacky way	2025-11-21 16:53:55 +07:00
kurogeek	3aa93c1333	nameservers whitehouse	2025-11-18 13:58:59 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdOw6Q9jQ7fqnfkjycFRqJ7OymjqZuszpuNHFhjbqNT`
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw`
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINr9XJnFULOdC7IBSGevI9ur/2vv3Q2BxFxsSFP0P2lq`