Update vars via generator yggdrasil for machine rigel

Update vars via generator yggdrasil for machine neptune
mob next [ci-skip] [ci skip] [skip ci]
2025-10-21 15:57:45 +07:00 · 2025-10-21 15:57:30 +07:00 · 2025-10-21 15:56:11 +07:00
72 changed files with 470 additions and 746 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761768376,
-        "narHash": "sha256-AZL8SPJ520NRnLft9Xz4trTECBB510YPRXJnE1OUeXw=",
+        "lastModified": 1754535625,
+        "narHash": "sha256-RdT3/DskBjwx74cvHJHb/mLSO2XeSHitSYViNmYGU/k=",
        "ref": "refs/heads/main",
-        "rev": "bbc9486f0e6306f68e11f8aefa243da9f1c8c56f",
-        "revCount": 10924,
+        "rev": "f69e28a1333527cdbadb233966a7e19d4b35a1a3",
+        "revCount": 8886,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +49,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760612273,
-        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
-        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
+        "lastModified": 1753067306,
+        "narHash": "sha256-jyoEbaXa8/MwVQ+PajUdT63y3gYhgD9o7snO/SLaikw=",
+        "rev": "18dfd42bdb2cfff510b8c74206005f733e38d8b9",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/18dfd42bdb2cfff510b8c74206005f733e38d8b9.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +88,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760701190,
-        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
+        "lastModified": 1753140376,
+        "narHash": "sha256-7lrVrE0jSvZHrxEzvnfHFE/Wkk9DDqb+mYCodI5uuB8=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
+        "rev": "545aba02960caa78a31bd9a8709a0ad4b6320a5c",
        "type": "github"
      },
      "original": {
@@ -162,11 +162,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761339987,
-        "narHash": "sha256-IUaawVwItZKi64IA6kF6wQCLCzpXbk2R46dHn8sHkig=",
+        "lastModified": 1751313918,
+        "narHash": "sha256-HsJM3XLa43WpG+665aGEh8iS8AfEwOIQWk3Mke3e7nk=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "7cd9aac79ee2924a85c211d21fafd394b06a38de",
+        "rev": "e04a388232d9a6ba56967ce5b53a8a6f713cdfcf",
        "type": "github"
      },
      "original": {
@@ -177,11 +177,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1755887746,
-        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
-        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
+        "lastModified": 1745005516,
+        "narHash": "sha256-IVaoOGDIvAa/8I0sdiiZuKptDldrkDWUNf/+ezIRhyc=",
+        "rev": "69d8bf596194c5c35a4e90dd02c52aa530caddf8",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/69d8bf596194c5c35a4e90dd02c52aa530caddf8.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -190,11 +190,11 @@
    },
    "nixos-facter-modules": {
      "locked": {
-        "lastModified": 1761137276,
-        "narHash": "sha256-4lDjGnWRBLwqKQ4UWSUq6Mvxu9r8DSqCCydodW/Jsi8=",
+        "lastModified": 1750412875,
+        "narHash": "sha256-uP9Xxw5XcFwjX9lNoYRpybOnIIe1BHfZu5vJnnPg3Jc=",
        "owner": "nix-community",
        "repo": "nixos-facter-modules",
-        "rev": "70bcd64225d167c7af9b475c4df7b5abba5c7de8",
+        "rev": "14df13c84552a7d1f33c1cd18336128fbc43f920",
        "type": "github"
      },
      "original": {
@@ -205,11 +205,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1761656231,
-        "narHash": "sha256-krgZxGAIIIKFJS+UB0l8do3sYUDWJc75M72tepmVMzE=",
+        "lastModified": 1754278406,
+        "narHash": "sha256-jvIQTMN5EzoOP5RaGztpVese8a3wqy0M/h6tNzycW28=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "d7f52a7a640bc54c7bb414cca603835bf8dd4b10",
+        "rev": "6a489c9482ca676ce23c0bcd7f2e1795383325fa",
        "type": "github"
      },
      "original": {
@@ -238,11 +238,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760998189,
-        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
+        "lastModified": 1754328224,
+        "narHash": "sha256-glPK8DF329/dXtosV7YSzRlF4n35WDjaVwdOMEoEXHA=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
+        "rev": "49021900e69812ba7ddb9e40f9170218a7eca9f4",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@@ -45,7 +45,6 @@
          ./routers
          ./inventories
          ./modules/clan/flake-module.nix
-          ./modules/nixos/flake-module.nix
        ];
      }
    );
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -5,8 +5,10 @@
      tags = {
        glom = [ "vega" ];
        b4l = [ "rigel" ];
-        w = [ "sirius" ];
-        fax-bridge = [ ];
+        fax-bridge = [
+          "neptune"
+          "rigel"
+        ];
      };

      instances = {
@@ -32,20 +34,6 @@
          };
        };

-        w-network = {
-          module = {
-            name = "zerotier";
-            input = "clan-core";
-          };
-          roles.controller.machines."sirius" = {
-            settings.allowedIps = [
-              #kurogeek
-              "fdfe:7bf:a795:4524:4c99:932b:d36d:b8cc"
-            ];
-          };
-          roles.peer.tags.w = { };
-        };
-
        glom-network = {
          module = {
            name = "zerotier";
@@ -72,13 +60,6 @@
          roles.default.tags."fax-bridge" = { };
        };

-        asterisk = {
-          module = {
-            name = "asterisk";
-            input = "self";
-          };
-        };
-
        pocket-id = {
          module = {
            name = "pocket-id";
--- a/machines/neptune/configuration.nix
+++ b/machines/neptune/configuration.nix
@@ -0,0 +1,22 @@
+{ inputs, config, ... }:
+{
+  imports = [
+    # (inputs.import-tree ./services)
+  ];
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  boot.loader.grub.devices = [ "/dev/disk/by-id/FIXME" ];
+  fileSystems = {
+    "/".device = "/dev/FIXME";
+  };
+  networking.fqdn = "b4l.co.th";
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+
+  security.acme.defaults.email = "admin@b4l.co.th";
+  security.acme.acceptTerms = true;
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
+    enableACME = true;
+  };
+}
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -8,6 +8,7 @@
        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })
+    ./networking.nix
  ];

  system.stateVersion = "25.11";
--- a/machines/rigel/networking.nix
+++ b/machines/rigel/networking.nix
@@ -0,0 +1,79 @@
+let
+  ata-interface = "enp2s0";
+in
+{
+  # clan.core.vars.generators.networking.files.ata-interface.secret = false;
+
+  networking.interfaces = {
+    ${ata-interface} = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.254.1";
+          prefixLength = 24;
+        }
+      ];
+      ipv6.addresses = [
+        {
+          address = "fdab:c002:36cb::1";
+          prefixLength = 64;
+        }
+      ];
+      ipv6.routes = [
+        {
+          address = "fdab:c002:36cb::";
+          prefixLength = 64;
+        }
+        {
+          address = "";
+        }
+      ];
+    };
+  };
+
+  services.dnsmasq = {
+    enable = true;
+
+    settings = {
+      bind-interfaces = true;
+      server = [
+        "1.1.1.1"
+        "8.8.8.8"
+      ];
+      # enable-ra = true;
+      domain-needed = true;
+      domain = "localhost";
+      dhcp-range = [
+        "192.168.254.10,192.168.254.240,255.255.255.0,24h"
+        "fdab:c002:36cb::10,fdab:c002:36cb::240,slaac"
+      ];
+      dhcp-option = [
+        "3,192.168.254.1"
+        "6,8.8.8.8,8.8.4.4"
+        "option6:information-refresh-time,3600"
+      ];
+      interface = [ ata-interface ];
+    };
+  };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "_" = {
+        locations."/" = {
+          proxyPass = "http://192.168.254.96";
+        };
+      };
+    };
+  };
+
+  networking.firewall.allowedUDPPorts = [
+    53
+    67
+  ];
+  networking.firewall.allowedTCPPorts = [
+    53
+    80
+    443
+  ];
+}
--- a/machines/sirius/configuration.nix
+++ b/machines/sirius/configuration.nix
@@ -1,25 +0,0 @@
-{
-  inputs,
-  config,
-  self,
-  ...
-}:
-{
-  imports = [
-    self.nixosModules.common
-
-    (inputs.import-tree ./services)
-
-  ];
-
-  clan.core.sops.defaultGroups = [ "admins" ];
-  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
-
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-
-  networking.fqdn = config.clan.core.vars.generators.vega-internal-domain.files.name.value;
-  system.stateVersion = "25.11";
-
-}
--- a/machines/sirius/disko.nix
+++ b/machines/sirius/disko.nix
@@ -1,141 +0,0 @@
-{ lib, ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-FIXME";
-  vdev = [
-    "/dev/disk/by-id/ata-FIXME"
-    "/dev/disk/by-id/ata-FIXME"
-  ];
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-            swap = {
-              size = "16G";
-              content = {
-                type = "swap";
-              };
-            };
-          };
-        };
-      };
-    }
-    // (lib.listToAttrs (
-      map (disk: {
-        name = "data-${hashDisk disk}";
-        value = {
-          type = "disk";
-          device = disk;
-          content = {
-            type = "zfs";
-            pool = "zdata";
-          };
-        };
-      }) vdev
-    ));
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-      zdata = {
-        type = "zpool";
-        options.ashift = "12";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        mode = {
-          topology = {
-            type = "topology";
-            vdev = [
-              {
-                mode = "mirror";
-                members = vdev;
-              }
-            ];
-          };
-        };
-        datasets = {
-          "nas" = {
-            type = "zfs_fs";
-            mountpoint = "/mnt/hdd";
-            mountOptions = [ "nofail" ];
-          };
-          "service-data" = {
-            type = "zfs_fs";
-            mountpoint = "/var/lib";
-            mountOptions = [ "nofail" ];
-          };
-        };
-      };
-    };
-  };
-}
--- a/machines/sirius/services/samba.nix
+++ b/machines/sirius/services/samba.nix
@@ -1,93 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-let
-  sambaUser = lib.filterAttrs (
-    name: user: user.isNormalUser && builtins.elem "samba" user.extraGroups
-  ) config.users.users;
-
-  sharedFolders = {
-    WhiteHouse.users = [
-      "w"
-      "kurogeek"
-      "berwn"
-    ];
-  };
-in
-{
-
-  services.samba = {
-    enable = true;
-    openFirewall = true;
-    settings = {
-      global = {
-        security = "user";
-        workgroup = "WORKGROUP";
-        "server string" = "WhiteHouse NAS";
-        interfaces = "eth* en*";
-        "max log size" = "50";
-        "dns proxy" = false;
-        "syslog only" = true;
-        "map to guest" = "Bad User";
-        "guest account" = "nobody";
-      };
-    }
-    // lib.mapAttrs (share: opts: {
-      path = "/mnt/hdd/samba/${share}";
-      comment = share;
-      "force user" = share;
-      "force group" = share;
-      public = "yes";
-      "guest ok" = "yes";
-      "create mask" = "0640";
-      "directory mask" = "0750";
-      writable = "no";
-      browseable = "yes";
-      printable = "no";
-      # TODO
-      # "valid users" = toString opts.users;
-    }) sharedFolders;
-  };
-
-  users.users = lib.mapAttrs (share: opts: {
-    isSystemUser = true;
-    group = share;
-  }) sharedFolders;
-
-  users.groups = lib.mapAttrs (share: opts: { }) sharedFolders;
-
-  systemd.services.samba-smbd.postStart =
-    lib.concatMapStrings (
-      user:
-      let
-        password = config.clan.core.vars.generators."${user}-smb-password".files.password.path;
-      in
-      ''
-        mkdir -p /mnt/hdd/samba/${user}
-        chown ${user}:users /mnt/hdd/samba/${user}
-        # if a password is unchanged, this will error
-        (echo $(<${password}); echo $(<${password})) | ${config.services.samba.package}/bin/smbpasswd -s -a ${user}
-      ''
-    ) (lib.attrNames sambaUser)
-    + lib.concatMapStrings (share: ''
-      mkdir -p /mnt/hdd/samba/${share}
-      chown ${share}:${share} /mnt/hdd/samba/${share}
-    '') (lib.attrNames sharedFolders);
-
-  services.samba-wsdd = {
-    enable = true;
-    openFirewall = true;
-  };
-
-  services.avahi = {
-    publish.enable = true;
-    publish.userServices = true;
-    # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
-    nssmdns4 = true;
-    # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
-    enable = true;
-    openFirewall = true;
-  };
-}
--- a/machines/vega/configuration.nix
+++ b/machines/vega/configuration.nix
@@ -1,13 +1,10 @@
 {
  inputs,
  config,
-  self,
  ...
 }:
 {
  imports = [
-    self.nixosModules.common
-
    (inputs.import-tree ./services)

    (import ../../lib/auto-accept-zerotier-members.nix {
--- a/modules/clan/actual-budget/flake-module.nix
+++ b/modules/clan/actual-budget/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-actual-budget = {
+      clan.nixosTests.actual-budget = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/actual-budget" = module;
--- a/modules/clan/asterisk/default.nix
+++ b/modules/clan/asterisk/default.nix
@@ -1,69 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "asterisk";
-  manifest.description = "Asterisk PBX server";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    perInstance.nixosModule =
-      {
-        lib,
-        ...
-      }:
-      {
-        services.asterisk = {
-          enable = lib.mkDefault true;
-          confFiles = {
-            # Dial plan config
-            "extensions.conf" = ''
-              exten => 1001,1,Dial(PJSIP/user1,20)
-              exten => 1002,1,Dial(PJSIP/user2,20)
-
-              exten => 100,1,Answer()
-              same  =>     n,Wait(1)
-              same  =>     n,Playback(hello-world)
-              same  =>     n,Hangup()
-            '';
-
-            "pjsip.conf" = ''
-              [transport-udp]
-              type=transport
-              protocol=udp
-              bind=0.0.0.0,[::]
-
-              [endpoint_internal](!)
-              type=endpoint
-              context=from-internal
-              disallow=all
-              allow=ulaw
-
-              [auth_userpass](!)
-              type=auth
-              auth_type=userpass
-
-              [aor_dynamic](!)
-              type=aor
-              max_contacts=1
-
-              [user1](endpoint_internal)
-              auth=user1
-              aors=user1
-              [user1](auth_userpass)
-              password=user1
-              username=user1
-              [user1](aor_dynamic)
-
-              [user2](endpoint_internal)
-              auth=user2
-              aors=user2
-              [user2](auth_userpass)
-              password=user2
-              username=user2
-              [user2](aor_dynamic)
-            '';
-          };
-        };
-      };
-  };
-}
--- a/modules/clan/asterisk/flake-module.nix
+++ b/modules/clan/asterisk/flake-module.nix
@@ -1,18 +0,0 @@
-{ lib, ... }:
-let
-  module = lib.modules.importApply ./default.nix { };
-in
-{
-  clan.modules = {
-    asterisk = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.asterisk = {
-        imports = [ ./tests/vm/default.nix ];
-
-        clan.modules."@clan/asterisk" = module;
-      };
-    };
-}
--- a/modules/clan/asterisk/tests/vm/default.nix
+++ b/modules/clan/asterisk/tests/vm/default.nix
@@ -1,39 +0,0 @@
-{
-  pkgs,
-  ...
-}:
-{
-  name = "service-asterisk";
-
-  clan = {
-    directory = ./.;
-    inventory = {
-      machines.server = { };
-
-      instances = {
-        asterisk-test = {
-          module.name = "@clan/asterisk";
-          module.input = "self";
-          roles.default.machines."server".settings = { };
-        };
-      };
-    };
-  };
-
-  nodes = {
-    server = {
-      services.asterisk = {
-      };
-    };
-  };
-
-  testScript = ''
-    start_all()
-
-    server.wait_for_unit("asterisk")
-
-    # Check that garage is running
-    server.succeed("systemctl status asterisk")
-
-  '';
-}
--- a/modules/clan/flake-module.nix
+++ b/modules/clan/flake-module.nix
@@ -1,7 +1,4 @@
-{
-  inputs,
-  ...
-}:
+{ inputs, lib, ... }:
 {
  imports =
    let
@@ -19,7 +16,12 @@

      # Create import paths for each valid directory
      imports = (map (name: ./. + "/${name}/flake-module.nix") validModuleDirs) ++ [
-        inputs.clan-core.flakeModules.testModule
+        (import (inputs.clan-core + "/lib/flake-parts/clan-nixos-test.nix") {
+          inherit lib;
+          flake-parts-lib = inputs.flake-parts.lib;
+          self = inputs.clan-core;
+          inputs = inputs.clan-core.clan.self.inputs;
+        })
      ];
    in
    imports;
--- a/modules/clan/grafana/flake-module.nix
+++ b/modules/clan/grafana/flake-module.nix
@@ -9,7 +9,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-grafana = {
+      clan.nixosTests.grafana = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/grafana" = module;
--- a/modules/clan/nextcloud/flake-module.nix
+++ b/modules/clan/nextcloud/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-nextcloud = {
+      clan.nixosTests.nextcloud = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/nextcloud" = module;
--- a/modules/clan/paperless/flake-module.nix
+++ b/modules/clan/paperless/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-paperless = {
+      clan.nixosTests.paperless = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/paperless" = module;
--- a/modules/clan/pingvin/flake-module.nix
+++ b/modules/clan/pingvin/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-pingvin = {
+      clan.nixosTests.pingvin = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/pingvin" = module;
--- a/modules/clan/pocket-id/flake-module.nix
+++ b/modules/clan/pocket-id/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-pocket-id = {
+      clan.nixosTests.pocket-id = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/pocket-id" = module;
--- a/modules/clan/stirling-pdf/flake-module.nix
+++ b/modules/clan/stirling-pdf/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-stirling-pdf = {
+      clan.nixosTests.stirling-pdf = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/stirling-pdf" = module;
--- a/modules/clan/victoriametrics/flake-module.nix
+++ b/modules/clan/victoriametrics/flake-module.nix
@@ -10,7 +10,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-victoriametrics = {
+      clan.nixosTests.victoriametrics = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/victoriametrics" = module;
--- a/modules/clan/vikunja/flake-module.nix
+++ b/modules/clan/vikunja/flake-module.nix
@@ -9,7 +9,7 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-vikunja = {
+      clan.nixosTests.vikunja = {
        imports = [ ./tests/vm/default.nix ];

        clan.modules."@clan/vikunja" = module;
--- a/modules/clan/yggdrasil/flake-module.nix
+++ b/modules/clan/yggdrasil/flake-module.nix
@@ -14,7 +14,7 @@ in
  perSystem =
    { ... }:
    {
-      # clan.nixosTests.service-yggdrasil = {
+      # clan.nixosTests.yggdrasil = {
      #   imports = [ ./tests/vm/default.nix ];
      #
      #   clan.modules."@clan/yggdrasil" = module;
--- a/modules/nixos/common.nix
+++ b/modules/nixos/common.nix
@@ -1,10 +0,0 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = with pkgs; [
-    screen
-    ncdu
-    vim
-    lshw
-    pciutils
-  ];
-}
--- a/modules/nixos/flake-module.nix
+++ b/modules/nixos/flake-module.nix
@@ -1,7 +0,0 @@
-{
-  flake.nixosModules = {
-    common = {
-      imports = [ ./common.nix ];
-    };
-  };
-}
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -76,24 +76,15 @@ in
        localDomain = "lan";
      };
    };
-    wan =
-      let
-        inherit (config.system.service) vlan;
-        wan-vlan = vlan.build {
-          ifname = "wan-vlan";
-          primary = config.hardware.networkInterfaces.wan;
-          vid = "10";
-        };
-      in
-      {
-        interface = svc.pppoe.build {
-          interface = wan-vlan;
-          username = secrets.l2tp.name;
-          password = secrets.l2tp.password;
-        };
-
-        dhcp6.enable = true;
+    wan = {
+      interface = svc.pppoe.build {
+        interface = config.hardware.networkInterfaces.wan;
+        username = secrets.l2tp.name;
+        password = secrets.l2tp.password;
      };
+
+      dhcp6.enable = true;
+    };
    firewall = {
      enable = true;
      rules = secrets.firewallRules;
--- a/shell.nix
+++ b/shell.nix
@@ -10,6 +10,7 @@
        devshell = {
          packages = [
            inputs.clan-core.packages.${system}.clan-cli
+            inputs.clan-core.packages.${system}.generate-test-vars
          ];
        };
      };
--- a/sops/machines/neptune/key.json
+++ b/sops/machines/neptune/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+    "type": "age"
+  }
+]
--- a/sops/machines/sirius/key.json
+++ b/sops/machines/sirius/key.json
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
-    "type": "age"
-  }
-]
--- a/sops/secrets/neptune-age.key/groups/admins
+++ b/sops/secrets/neptune-age.key/groups/admins
--- a/sops/secrets/neptune-age.key/secret
+++ b/sops/secrets/neptune-age.key/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:XXV5r3FnMpt1rX8L4LtxLbNeEZ+tLkFeMQOTvyH93fRAEltE4Uszy5khsvyX9c/h33uxyGFQAymHUqSN8rBlBfbJ0bIf8DfoaJA=,iv:rYt5U/usIK7+glVjRclgCkNpQYwQoZ+UPSzanqbI9bA=,tag:c34l9laQnhQOZlV6bj9KCA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmY0szY2IvRzhId2l3MTFI\nUjFrV0hEWXJIOGcvTmNoaDkvZDlrN0dlRWhnCm1CR2tBWFhJb2NyVndkZTlYWmg1\nUlJHVTkyVGdWZFVVSkZtUzZIQm9DRGMKLS0tIDJxVnB4RFRkWWZ0Y01VeFNIV0hM\nQlphalhKeDQySEVoWWdGNmRaWUhDbm8KnTdaaJsw3YqkjSDQREQuOjeHqKjMbw8q\nfgeetuG7tI/30tKgggTr48rk6mHVHoZE0JHugjYTt0mfoM8Dqct/Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK0R0TC8zZVFkRyt0cEJa\nam9XNk1oenZ6d0lyd0l2cVByZW85TDR6R0NjClFKeXp3ZzFrUU5vQ1dhczRtbGRN\ncVd0dm5uQ1NIeFJneDNXcEwwb3JkWDAKLS0tIGczcEhEWlFBTVJYNWxLMHhCUDY2\nRFhZdEN0NEJHRHpHL24wdjdNUEVmWDAKYVTOGiD/4zZ8ME3F931LDzjoloy6JESj\nGVcgg1ISR/GMeYGxqTGxTQhHVVXv0+djdTnK+RAg2wUJy0VbFTzqTA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFh0UzRLMXhN\nL1Z0QWJxaEVFRDQ5YnQwRGFLdGNzSzQydUJXbVpDTE1sV00gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmcGdiQkVKSUxQZkJzbEVhay9rVlZS\nV2ZoNmg2WS9aWC9zbGYvdDNkUDlBCi0tLSBqWHM5alJISkNWaE4rcXV0OTZPU1Bh\nY0tFWFl5MnB4L3VrZFREVW50UFkwCqW2sa+4LVWIwcZT9xJ0evJsBva3Lmpcj2SF\nV9YHl7EmGb4pJBslgYUFMQkvTr0/w9VC545YLP3ECn9loC3hzxM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGxOOVVrK1ZR\nWjFIcmpacjhUT29LRzlBcENjaWVKWW9BZzdVYUZDWFRIM1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwovWlU3RE5aMlczZlJocll1MDZlMG1Q\nSm9CZGZ4TjdYaCtDd04rcjdzQUE0Ci0tLSB3YnMrVGowTUFoNmlzYnRVbTU0dnFM\nb2tuVW1OanYwZm0yTVV0WlZkS21zCmRJ7ij8d36hIM0ZotpU/+ooyWKkHYSgRILa\ncm3F97UZGQ/TkNVaJvMlm7IlX4g/6hONDb41me4/29EmJsJHhKs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExBUmFLZlNY\nK0tHY2NSRzZtR0Rwci8weWphekM2bWZvTGFEREdzSG5pQTggQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpsRU1ndC9FekMyTDMra2dYeTlDZFVC\nTURLTG1uMHQ1ZlBEL3ZadnF2R2k4Ci0tLSArWFoyRFdzeFh3cEd3L1hKT3B5a2xS\nQjFEd2Y4NzROTDNmWlYxK015TFRjCjbR7wDmMMuCZpzMq4bbKJNj5P0OH+GclyvT\np84RX7o2CzmlJQXmYwLkv6FICe7U904QURuhPywyU0RXGhKUqhM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVVU1M1M3VURheitScDRw\nbGhETlhUOXdPVVptUGgrUkM1QnRrckJCZERnCkhyY3dhSnJ3a3VDWEs1L3RrQVJl\nOHI0OXBJY2dDQm1vOUFpMzJQcGV3cG8KLS0tIEZ1SHdweDJkV1owRE9RanR3cTd3\nMWFlSDJuMHR1bXVHc1dNODlJejQ5N3MKhKq69LY9/9PXKm3TlsWHYW8PbMgWwgWQ\nUAC4WqLvKYk/MAbKbMOVr/TfrRbkrFJtbP1H0X6A7yzIrAXnsPfyRA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZGJQTkRFcUh5SEM0Ritx\nLzNhNWxSL3g2Zm1kNUtmT1AyZ0VzOGh5eHhFClJmcm41Q1BFUVk3cWZ3d0VxV21X\nVmFKSzRkeTVWMzMzZzJIeXNDcWJFNkkKLS0tIDYrbWF3Z253ZDQxUkF5dzdGSlJW\nRkxReGYyV0tTcHJQR2JwUVdBL1I5TzgK5kZPf+5N0P/NeuqpQ04Lb8Sme+bocqYk\nk9Ld7vFSxXyjTTnhwKGv4+q85IkDq1xGLj+7iM7QfRfpZS6tBpKJjQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4U0VWYlJKM1JYOXRoU09r\nUjhzalA5aHRCVTVZWXBmODJZZnAvSEI2MFI4ClZEeGh6WnZsNUtTSW9lU0xnL1kx\nbDV4UGIvVXRra2VvdzJwNFdINmdlT00KLS0tIDJwMnpCWVVkVmtYVmxSNXJqNkYz\nM2lCbXQ5VEd1RE9TREF0WllGRWFjeFUKouFFBKiW7JQ+c41t5hwnBndUKZKhdwpm\nYCzF7/2YlZtNYdxip1+lZ5YEqyaXygcOZBjjZ/4s1B7ihEscQskLhQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidzFMU3pQRm1HL3IvS2NJ\na1ZjcFhyRTljb1lQeXhjK3BBN1htdjhCUnpRCmM2MnJEeE1UZ3N0RDRvRitLMndX\nZXpWNk53d3FXWjA5Nnd1Vm5idEg0Z0EKLS0tIC9RaXE4ak1tOXMzU3dsZWh1MFR5\nQnlqTnBGY2pMd0dZYVpGdHRaTzFuTmMKqixum2H5jyBFdxdXAVlLZ4Wn5ZfeUJNR\nnNNsDNsjMctBn3gbtGHkx2wEnlKS4a6jbk01wVdSeyOFWlR9KKXF7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:23:57Z",
+		"mac": "ENC[AES256_GCM,data:xVNbw/RamaR6701df6IHPGjGDoYsZH7gwOWeVpb8A8VoaxYNHQVnRkV6jL58AQqI4DR+HisrpkBoN4Ui9o8t5u7PRbGyjUgUr6tvuwh4MMpk+osUmlH8eNdzi0W3SarhFZIWtcSHkLuhOj92yk0qd+W3TmWd3iMCrdVpkDe2kU8=,iv:uuUYoGcDQTZu/vGgVkt0x4QMQNkcNWCcwOlM/XQBx38=,tag:J49wr+on3MJdlNASbr+tMg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/sops/secrets/neptune-age.key/users/kurogeek
+++ b/sops/secrets/neptune-age.key/users/kurogeek
--- a/sops/secrets/sirius-age.key/secret
+++ b/sops/secrets/sirius-age.key/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:nb/jvXhD1eQqAWDgmfLlLvuzNbftonrkwrpGNBvbxTKIy0nhB84o03LIgBZbtCDR2q0MkyKe4w4FzY9WvCJCteCoGsuOSkBa86o=,iv:+mBkcXbZxglL2NfzSWUROZacNuvIZfMFmJec82zhf7U=,tag:gtjTQ4CztEqDUbCxEpo7fw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIMW9qRGl4N1NVTlRubmR1\nUXRlQ2NqR1NZaEhGanF2Vk9uZWQvcG5qMTJFCm14ZDFxRWJpakNHTmxsTXBiN1JI\na1FiOU9rR1Vrb3NzbURQcTJVb1h4YU0KLS0tIEV0OS9vQlhsMVMwUmJHcXZITDYw\nUzZWbG1iTzk3LzB6V1Z4YzFYOWpkT0EKiQINdNMEuGIIzY50seuRcwb2s3TdgELP\nYkIJ5GBseK3Q3nVvIyNhuU0bCaVSFnxuTazeygMAKjhW22y2/ui4Wg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONU9hUkRIT3Q0TnNGcC9v\nTVM5YWtyMjYvL29ZTDFqRzlYU2FUTXkvUjBvClNXdk93K2t0L0wvdDgvT2lTTTVX\nRDUwYkc3aGwvT2xFcmZlNXRtdFdZOUEKLS0tIGIwc3FpRXdNQlpQTnhVM1M4YS91\nZXYyL08wa3EvWlB1MDdWVWVORUIyTFEKP2w2cG4d/AE7XrbcscaEIVJ6XQG9FXHY\nNKgBjpGZONp8dEYeuJ23nel5AO3+sm0EN/DsuqoWo2dJCHp4ZXkl7Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFV0S2pYYTFi\nc0IyVXZwMUliQWVwdjZnQmNwSjJTd0dRMisxVmsyM0ZpV2cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpaeW1RNzhmbjNkNFFZN2FqRnRZc2tS\nZWRlQ0hPZlBsLy9ocFFFY2tiYmtBCi0tLSBFQVNQRzhQblJXSmQyUUYxOEw3UjNV\ncG41b3h0MjhaYXU4SlpQZE5YLy9zCmKxo/IAczzcmAnYhYh29gS88lQEVgoNWMGt\noqldqIgarW2yKSqlbnJYRg60yohiYNn34aHKlNVNPhm7NhfZ6y8=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFRVZmluZ0JN\ndnRvSFZZeWR1aytjT3oveUdZTTRDZnhOaG51Ym1QditvVTAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpGNi9YaDJWR25rYm1YSnF1bXp1enRU\nQWMvaGlwSEY1L0FLeGN5MjdzS2RJCi0tLSBEOStqZzVZTmQyR3dOZWpoazcwaXFo\nU1RCU29LRHNUaVl6dWd0YTlFaVNJCn7iNwdtKkrQC3e8JzWP1vrt1uMtaYI1FmZC\n/Tug0VKBcShMjmi0MaM2jA6Bo2rHmxQPZTVa4x4myjB1ZwehmQk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGwxK0E2K1Zu\nZHo4ZlQwejVoaXRWUEZ0MGxteURmcGIzdjZjNVFsZVFQMDAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5MG02bWxaSmttREozSTNKODk4ZDhS\nZGxtcXhmQnV3YlgybG1MUVRUSUUwCi0tLSBQdUloWE8yMFpQN0NTYWg5cWQ1UzRZ\nYi9VYklCNGlTb2JIUUxPaXJZWGxRCi64TvD9BnC41+HbBI1lIqG8uAr8UnDMvuUy\nEHPAIcvPWbO2WahxEUcL4hBcK81pa3XaQOWo/qRbAHv5fKIA26w=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2b09RdU5jcGRBRHBJREhy\nOU04MTVwZm5TNVUrVmNTUkVtUUJFWGd2aGpRCnBYQ1Y2SnJBbHhaNHJxOFVHM0dC\nZzMyUndHM1M4bTFsOStna3JXM1lVaVEKLS0tIFdnNG9WdzB6cUoxdmV2aTBhVDIr\naDRFQ3JsWlUvNTRRdHNpWVkyb0xWYWMKXSnCes/5K8Qw1WHbxPhL63G+yKtwxnhn\n9fXqnemlQJoscBy1mrpxXYXM6mFl4tnEAh1hB00z+n1AFZS91EwRxg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSGRHbHhyVGE0NEFLbFpn\nM2E3WndLT1oxSVZnOHRiNzVMaFlpL3VhY1ZRCkhyTFdqQk1LM05HZFQrOFd4Y08y\neVgvUk1lZ3dqRzh5OTFLajNlUk9hNXcKLS0tIGdMSlRHcEw1Y2ZFQ1JyTHZ1NFcz\nMzJXNEtaWEswSWdCZ3BLYVVja01DbUUKr/n9DLCjKBYac2+dAk96Snx78qeQAxwN\nnGJf9z3i5NRtN3Kapbrt2vPN7c590YiSTgYdiEEb3oq89g5Ya3hNnQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBURi9aRE9jSWI5OFhYRGkv\ndDBIWng5Z2hFWllXdzdkY3NlbWtLMkppc1hZCndTSW9nTFlITzY2aHcwY3dLcTNT\naTlwb1E0c2p3dFcyUzhOcFlLdTdPNDQKLS0tIGx4ZWREalkzNXpIMTFmR3l0cXkx\nRXFnT2JEYWs4VHd6VUtPbXlGSURUTUEKgEkcgDhB/OdJrAfJ5hZohZ0OU4VNXraZ\nvIz5inx8I+/6r46qMoJat3BIcN5IRllHc/iMBPRq+n7EPtaceEZBhQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRERSVWlnT1lQMDZGcTQv\nV2MyZ1F5MGN2WE01ZVhoNTdHMnZROWRpMmhvCm9UQ1pzRjNpdS8wRklTUnV2MlR5\ndzNFVy9SM2hCR0J5d3JkbEVTOFp6OE0KLS0tIGNqNVZtV0dZQ3ZpU0lmK2JsMzNY\nZkMwVWZYN2MrZUtVN0dacjBXSDhZYjQKbtg1xpYwEfH6hArFQ5w7UBja00sYnDte\nQLE6FksPXv6RPxICQ2+bdhEh/QwmGYDAX+8HnYx5GNs54iUnnj3nDg==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-10T05:07:06Z",
-		"mac": "ENC[AES256_GCM,data:WLgG9s2UEZ5pySqjGWHVGCeeKI4dZbSoUuBNzqw/D1c4XtK5RS4Dy0iKSDziI+GcIXyfmG4DhxXuUdNLffAKSb8pSu6nvhlAlX+q7fM18GmAXkD/TwrIr7AUvjWXZicIcLvlZ5mEkkj6lrWe+IyA8xJBcFjLji6lwNewBz3PoeM=,iv:PkKt8d732tY289IjCEprlgnUvC3Vt9/1GYSYjlSlLi8=,tag:RZecNrF9NHuwxZbCGUSllA==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/b4l/state-version/version/value
+++ b/vars/per-machine/b4l/state-version/version/value
@@ -1 +0,0 @@
-25.11
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE09U7Tuvn3/icqFhjKuhp4hG+V6E6IFKhX1W2hVvyVj 
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/groups/admins
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/machines/neptune
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Hc6d3IxfBdHF5XmgdV2zvAU1XZhrgi53/kAKEk6cFiI=,tag:H9CYzcaHbr/LI518IB8YOw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMUh0ZzFCbWJxenpJYlBP\nelEwWDlTYmNuVE9GcXZRUERPd3lyaGhoRFZVCldEcDZUTmJueCt2dmhXS2x4c2Mv\nMENYTFo1UzRLM1lZWGdYRGVkb3hLN28KLS0tIHZhUWNzcXNiUnNPbFZQa0l1SXNl\nSzd4QU1DandCb1lRUEkxUFFNSE5rUUkK7LHoggdi4wj9K39A6KaH0+MFbJ4wzaIt\nRYZxyUdWtrDMm4tEPbHT3DgBYC7RdGfWbxct9KwihlwSWMhNTyXAbg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb1lOQjRYOEd5S2lEeDho\nNkFLeWhnM1Zjdm9ENXZtUnQwbUlMckhBd2c4CkFLRkVJL25ka1hnTGNnVmRjZ1pz\ndFFFZ2NKZUU2REF0OXV0amVOL0VTZVEKLS0tIHFtcnJ1b1dWVnlPWnExeHJPYnBm\nNEVkNHJBRW1GM2p1Rlh6ZlZiTmYzZ2sKT21d9OMGWuPxkITTvl6XUWzHyGqqzZty\nitwdfFm3YpzGK/FLN6LH+KSXqfo/ntUMmOIAai+geefuT8mSW9n/Ag==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYOHhKWlAwMDBUZFBRamNT\nOFg2Ky94M0xvZTlsS0pEekxkRlYxN1lDVGpvCjZ3T1AzaEV5Qlo1TlAyazQzRUR1\nWjk3d01USzdNaHF6bGpPVWhEbENUZ0kKLS0tIG9TQWlkQmlFdklETXh4cUphUFdZ\nVVhuM3h6NFpKQm1IeGNDR2RxaEUvR2sKoXaltJrkQ4EzTRkrrO74CrCmT67Fef3Q\njRi8NcuYAFN/CrsBLGQA34JwTdKhmS0skkJsDEsofPuepebNc6IHCg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZyWndNQ3ho\nbTl4YXh4UkdyeUNTZzlyZXNIZGpOWklwSXp1Ykx1amZzQUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpGMDdjSzIvUGtIaWR6eTlaSG51Z3Na\nSUJHWTVhcTRaRGp4NzExcDZTVVJJCi0tLSAvU1JPeGtLT25sNEIrdmJHUzYrTGky\ncURjektPeE1HTHlKK1M2VWpidlgwCimWuV36gFbk2wB7H1X8HJjfq3RJHjP0r5AF\nFY5UYFLvlftVdPizm0LXo5KQbnbckDPZxrlwvkcJP12PR+FOyh0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFRpczlmNVdz\nd1BUUkk1OUZwOWhCY1lkbm9xUnBiYmltVWw3MFg0TWEvVVUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpCODRxNWYxNzdCdE51bkVGZU4xbENx\nZTlPTXh5VFJMWFl3ZlhSWElMRldRCi0tLSBnMXExUWtrL2Q1ZmdiaEpIdHVsWHJz\nSFJuRGRvWU01ejYvcFJTNVRqRUY0Ct9eLGkzb+9Zf5Au/Zg+EbQxzgoxTKByhtij\n2YSL2jfn+MiQSoEWeXYP2x6QiZ3gh7yp5WY1ghD09Yvf7x7UAPo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHAzLzNCa0RK\nOHBML3RQWDZPVk1SZlh3NkxqSDQ2eXd0amxiZHpzeEd0aEkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4NEkwbHhqUTZydmJOMm9xbjB3eGVU\nQmRtZW9ETElXdXIvK3NQb2ZjVHJrCi0tLSBzUUxtMnpYUFdyMlg3czg4RTBWcWdW\nUFFvN3N2WEI1Y2RWZWFwR1p6Rm9RCoMt8vokyKfTEPJ5nj/lKIS9OrBEe9QPADTG\nQ7HWrId0rRFkXXb8urU8APRJgUFKeap5mUtQ7LjNPMz0dhbccew=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZ2ZoZElaeldaVE0xUElK\nelFWN3ZrS1VzYkFZbENjb0ZMQzA3TWFFTngwCkM0NUJseE5LUHZqUUxxbXB1Rndz\neVBMcWsvdGdNSURsR0xFOFJ3N09lOGsKLS0tIDUyaDRDL3QrcnltaDZHL3dPYmxs\naU1Xc1ZjYmhwV1lINk1UMTcxc1Q4SDgKTt5+DspGwjI2ODiemPgLkGzHnyo05u6y\nJpewiruQhL4WsZgI48Us8WFfyHNc+dLaGplBgJrUadh6S3Fo+QpiVA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcWFwdVFaMHEySmlKTUZq\nNWUxT05UMkhFall3Mzh6NTFIcDZoZUxpZkZVCmJQV0ZmYnFJbTQycXNBWGtLZG5s\nZ2ovc0Nydm1YcXBwdytuWHlRTWFCc2MKLS0tIGFnbzdMOWR1UzVpY2RvWnJFeXlO\nYmU0dWxWNjVTYkFLdW14Qk9jOTZOcUUK6BCenu5Mh8fg6Lia4CBcQgNVTQsTY9Z1\nxSlqi4zOvKRDlE9PNRW/dWas68F/bJCRa8KhUPQ5ZF475Q5FUrbNoA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrWUhZSEl2ckJwZWwzc1Fi\nQ3g5R2RpZzZVdUpFK0ZyTlcvQnZSWkFlaGc4CitPeTM3SDhvb1Z1ZFh6WmNpWFBR\nd1RURnJPbnZlTWtBTHNsa083M2VRZDgKLS0tIFl2Ty9JaGNUWE5VSzU4ZDhUOHBx\nVEtlL3Nwa0ZpWjl2K2ptQ054WUlSSjAKhxcMLryYi7O8CKnFDphV1ojcDaSYFXPL\ngzaX32vI1LOo/doAq0dLC+yLtj1G7f/tE6tK2ax7SCUsAEhTn8QJ4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHalpIQWNJemFzaDRjM1JC\nUTJydzJPcWhoU3dPQkpjQWF3QVpUc2dhSkVnCkVGbkZQT3V6bWVqdS9KenBlcEpj\nUVdLQzdaRUlkdDIyeEV6bDhPU0VsQ0UKLS0tIHZYUHZVT1M0bm9oN3hwL1NkdWZW\nVVN0SWc2cTAwQWNoVUUrSkdwWHlSZUkKgsejUHV0bc70zNYwQk29KPetAbhiUMBg\nB3QxI8i+D8mJ+/EKFZzllakXK0NeHVDHTcALcyaI3SvIa95PMBczuA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:23:57Z",
+		"mac": "ENC[AES256_GCM,data:g054D4imoqjlpf/2HLfKW62cEJvJxGswSnNS+snyS1mx3+86E1kM256AJhETWl5ZC3qdfzgeobxRIIS1m3U8iajQtYn2nOJ23Njnfu2s9RTAQSCsnJevV+HfmaBDxqt/uS/q6DaXylaXmPINlmsA8Jwr4AiJtIKovm173P9/2hg=,iv:37tf+FpGFw1bv2q2Anc4gu6C9zacBjgh+Z5Xise6jKw=,tag:7HrVKWWkGE4CBF3TsisdzQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/users/kurogeek
--- a/vars/per-machine/neptune/root-password/password-hash/groups/admins
+++ b/vars/per-machine/neptune/root-password/password-hash/groups/admins
--- a/vars/per-machine/neptune/root-password/password-hash/machines/neptune
+++ b/vars/per-machine/neptune/root-password/password-hash/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/root-password/password-hash/secret
+++ b/vars/per-machine/neptune/root-password/password-hash/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:H2KsH0uMgHC/NjEHH04I5hm7k96ZjOITsZ+kzL3y2CEAaauvmmTh7wNxpvG3E7SswbkYx200KXZTxgfY7z+0pmQxvwMzRukwIjpKZLLxUIIfvlZc9qmwpNH+7wo3pwjLQmYJ0OhMO9tzFA==,iv:EmAv1RrWtasq0ViKkAH+TrPYRXdhH+SdLH9hHfFBpnI=,tag:+0TexZJUMyMd9Kt647iM3A==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNb0VqN1h0QVdkendqTDVW\nM01kSGtZQkx3Ukw1UFBocUY4OVVxa2JLdVgwCkJEeGpHdlJCQkxnSW95ZlR0UVQv\nRFpmZzdpNVVYeTYxeWdyQUo4c1diZVkKLS0tIDBpdUdSNUVpamJvVy95QmhJbUhO\ndVpJZE5DdXJuSFJDaU5HT3FqNTA3amcKnmQ9DED2jtzConYx8tEQ0O5wkWLLuO/R\nFlpeMWrolziCbcBgraGffbFM3tk6jHqEdWB4r2SH/4U0HtNKBXSJfg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMFY2cVpWd04rMTlGSWxq\naFNXSGtVU1p1U0x0NVZYV0hGb0wrdnJQQVJjClVkSnkzaVFjNTlrMjNjVGVDSGVF\nd3BJbmZvb3RjV2JkcThuaUNCZjRjNG8KLS0tIE5TbHNoYy9QdTdHZlZ0bHZEUHd1\nSUJ0Z3FpZmVWRWxqVmJUZVYxck8xWnMKVbTYt8zbGkKMuz7f4yOG/EkdYYqfmj03\nKDCVLPqwsRoibsBRpyRine5oOUwzN+PtQeXwHj1vRTjtGzZIgpQIQA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWUZwN1kwTTZHUjNJWUw1\nY1htbUM3dnJrNUFPTStOOGJ6MW1DeUJWcnowCjRObXdGT0pUbjFYZzExaVpMbjhi\nWmF3QzAxaVlSeUkvNUpzcSt4TG1wU1EKLS0tIExDTnNtR3lVRllwRFh1RW05NGRl\nNTVyRWRDNFl0aVAwKzVYNkFKcXNRaUEKv84/fA4ydX7MjuWJA3oYhYkmWHXl3LyN\nIHpWk+7JuZlWaHJGVO/ywQmnEj+aaETpVvh99cKQhHk68dzzSV36lg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHN5MVAyQmRk\nWVRodG5EY2pRc3ZYL3FiWVJCSURlYmd0VTlkeU1FRFE1ZzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQprSEFITXhnVGZhcTE3OTlSdzhmOXF1\nZFA1Zm5ZQVRLUDcrL3NBblhUVEZzCi0tLSBzUUFyR3V2UGFLYVQ4dG03RHZzZmZK\nOGtLMHJWbEYxOGQxL2NnRzVUdHN3Cun6V7ieogvJq02jePVUnX+IOHLnu3RRuVGX\n/PVGf0jRVQLP6u9gXsTa+GO/Ah6hYRsmV9lzq1S27gly5U0CbDI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGhlcE9GVVVL\nN3JvTDRxUGNGZTE5ZngwYzVmTzM0ZmJ1N0Z4R2NYSlFobWsgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo2U3NMTHAxTGlxU2FSYmVLb1JBbXhZ\ncVpDc080VVpRUHhEaEJQSHVFbzV3Ci0tLSB3bmxZQmNHbThMSEtPb3BjS1JhTmRu\nYUNWMWE2eVBFbk53Wi9HSFNZejEwCigdlrPSwK9e3LcE+U5ZMfy424+gjcXCPtJI\nhDQPkKQ0htljBYFDz2izD/s7qwKOqzTia8u6UPLTopMcGyXpSbs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9qdHcxd2pS\nRkRXNjlpQWE1UVdudDdGRmdzcEFPditmWTRCbXpobkg1aXcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo2NkRIT3J1VnJzSEhCWjZLM1BtNWkz\nRjFMclJuMVB0U2ZsYkIzaUNEc2lBCi0tLSBQZ3IvK0Vvend0dThqalBwWFE2dExt\nYmk0NVhlY2E3Q2JWbXpMWE1PS1hvCv/w4TeDBqWbyBueaiypFgUu5InTNNuHRKOp\nvr1obhIlz4alQ62mhbLdGB+P3GB0yBkuamUlaOhfNNIk1kuMpt8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzdDdFbnY4OVpDdDcvT2pN\nQXNqdmYxaldmM0R5bGFmWWhlVzVoRWlMMjNjCkdXcUx1NU9KYmt4QUZCLzBYRUNo\ncFNqcjYxcUhFSWE2bjRqU0pzbjRrTmMKLS0tIG91K1RSWWxLaGdHazY2RDQ2VjA2\nV1NpN3p3Tm5sZ01jUUlhazlFNW1VQTgKj6wMVKN354bMWIs1OKAqCFu2+XSQ0KK4\nNxj0kJ3mimOpkZjTCAojuD784feb70gBx+Tgf3Z05jtR/EQBv5TjNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpeFBrbUJaWER0dC9ueDM4\nVENqQTkrSHp6elJuLysyaGliOTVPY3ZEb1RFCnJRUWZMQy9tVEZjYlh0ejY2RVBB\nWFlPWXJHcXBTMnRjSjFvblNDQld2L2cKLS0tIHBvSkdST2o5WmRNYnFodkJ4aU5G\nQktFcTdBM2pnT1ZINWkvWit6d1Z3dFEK9abGvVqxqXfSH+vKT85RhlyMUTQjAink\nW/0bH3ToYJpIoqxXk7ZxGWBlA+6To6HUZ5y8fcCFg100LIVtcqT9Ew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwYTE1cG5kUEN4U1I4b3lP\neXVJRCtzekc2azdWalJTWUJmU2c3N0c5NWk0CjFUelJnMytKbXVCY25YZ0F4RDB0\nRENtcXpwanMwV0xZZ3VYNy9BUjQwck0KLS0tIDZ4TkhXUGJKVnM2bkVHdnZCT0Jp\nR2hYK0dqU3dEVHJna0hsVjVzOVZDR1EKq2/gNYgUozNgWx+A1eWWN/1ci+JGLuC2\n6MSoCDx0ZUg4e5EOmBLRl4CwRUSBJklfhzeCGVh0lOznNBlr0WfMaA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBScGhnbklHZllqMXNrK3NH\naGZtZTNKS3IrU0ZEanFJeG9iaXhmaDNMbkN3CmlybXhLbERkMEVwcDJDS1h6TGEz\ndCs1VHh2MnNQcGVzU2JMVmk3MDZLSTAKLS0tIHVoOU8wN2lSUU16Vjl6ZVJlbUw1\nMjh2U0JoK3pCY0tOWWpxZWcyaGdXeGcKBMyrTPy/8sIl6wLoasD9P0/+D4MI3uMk\n8U9hL+4Hw/8BdRt9rYwbcRX04/oKNXcPiyByHmIjYYF1AJTX07hFiQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:24:05Z",
+		"mac": "ENC[AES256_GCM,data:TQi5XJZPZOhJrYNVqyr9azqo0QAs0Q30qB4BZXQdTN/+mfmDqx+mdJdkMQpSlJaFpbzCZhVGW0reSzCbFOtam73LFsBJZUr0c0RYXq3f8U91FE11czMp9+oau2yY4D/6PzDQbHdJVywj0t2qTrsSHHdF4b/0BdpTpi0goNgbacM=,iv:+xpi5If3k154cekAvrT3/rtII4BsrRg2YFDDRaLjNds=,tag:4GoEX5ZxSkaY8XofCSF8Iw==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/neptune/root-password/password-hash/users/kurogeek
--- a/vars/per-machine/neptune/root-password/password/groups/admins
+++ b/vars/per-machine/neptune/root-password/password/groups/admins
--- a/vars/per-machine/neptune/root-password/password/secret
+++ b/vars/per-machine/neptune/root-password/password/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:JatEWUAYacgbFT1oRM0i3oHwoWh2URg+ZX6y9qafiPZujagsx6Ks2AQrGg==,iv:Dd8djrt+mnVkrWgGnfLWOByretizJSJ3+PfYW3bbGVw=,tag:fK3lGIgr2bMtKUifKK7tOA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WU1mbG5UMnU1OVhRQ2p4\nVHU4VUkxTXR4V3VlU3ZQdDYvTzZ5K1IvSXc0ClZGeTRUc2ZyaituMkh5ckFmbzFZ\ncVNycHNDSXZ0dzNPVXJMZlJ0QTk2UXMKLS0tIFNEd1BLNVVXdUM5M2JQT3VLaXIv\nTzFKbW1BYkxPZDFueEs0UEVGUDVBNUEKfP73bJLaJn+xsE0t4kz5PE1+LJqMxwGe\n74m0W8YoVweZHnpUeRcOnsxp0egDAwhgqg+sqpxLfY08L+zpeNSpIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDQUZDWnpEZzVuWWJmUC94\nN3NwSEtNL1ROMnkrUy9VdjNUSFdub1A0VWl3CnhPRWpyUzNvajI3SitZZmVLQ1pB\nc085RU1CUHo3M3Q1em52ZmRnSnhqUFkKLS0tIHM0Qi95Q09CbkZDdEp2cTR3cGZw\nSkpjMjE5aHNMVFFGb1VYRWc0bi96RzQKhi6eXNUbhBeqofDl8WOvzLiD7mGiE7bk\nsctMjwCtHxpQTW0oD7hIMsNyJTduZ9/9rxPfRkmSDcCWYAsVFcBevA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEYxK09HUFNB\nZnVaUXp2RllSejJqTitBa2EveEZFdXpIb0VleHlHK2hweEEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo1SlkvNVhtRXMraWtLQWxINFRuNy9E\nZUU1RlBqQ2d6eHQrMDJVK3B1Yys4Ci0tLSBwangzV2xtdHUreTRpLzFnMENQb1VE\nTllTc3RVYzVIeGtZMnhjNllSS1hjCleRr8GWtMiXRvk5IXgIKimKlJ6US26iHz3H\ngJhLHc9WzATHQFoiSnRsYLMRfXXfQDJ62GM6FX9MOZ8bbDdUZ78=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGI2UWIrOVdV\nbml5UmM3WU16YUVDMXJPRElFZVV2YlZtekJURnhuSU5zMkkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo5SDhoYUxHQUJTTUNPa2dYWnA3NlBE\ncFZoTGRjVEpNb055emN3OE96UzBJCi0tLSB6ZEZqc0txNmQ5K0ttN0s5YmpxQU1M\nTEI5MFZaQ0IzL2ZIVi9LZ0pjVkg0CnnCHiCzCg9iyOw+jjei0TmnQDuuhEpxTvLB\n78+JpBnOnVZRMZM/RrguHup2lAMVXSBtu0zddf5wSivr0renXRk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZiTVJZbzVC\nQ2gxTG1PblRpUmM4QUQ3d2hhZ1YvRjBnT3IrcWljOEp0RE0gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpyTm1leGQycmp0bXJqKys2S3VPblFu\nV0pwSS9GQUNFL2N2ekNIUFpVTGM4Ci0tLSBLbUpnVlJuRmpJOVpuRTE0WmlEbEQz\nY2pQbmFCaThtN0ZCTUtGbFVhaDdBCpg+8OIwptyv+WHA/1w0qWXfZH7RIj6Ao1L7\nHQyjOyEi2Y4sRYmgNg9xFKS9bT0Y6jamyXmemCeSmhZg3wg154M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bEZDOHQ0cGdTa2JTNkhM\nclgwZWducDgvcVp6dlFScTByVHBxdEJWVUM4CnBnYWcxMHdERWNuOW9YRGkyaTBM\nV2M0QnJuWFZ3VXV6V2xIM01LQ21RK28KLS0tIGVyamo5cElVMFYyclZsWEgraW15\nbUxEc0R0SGRoTS9VbTJsZytvbWdCZkEKgwfGoXJgmvmM/QW+7WN6ssGgZuzQLmCz\nCrQWifImc4k9YjUPLyLc+rV5lnUBKiqJZug4RLRCmUvYYlEZBxqWRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2VjBkMnA4ZWloc2NUd3VL\nUHlyL0Q3c3Z4YkJuYTFiMXlwdHpUMW1HSzBBClBUdVQvaW5kRUE1eHpoY0ZMUWNC\na0s3Q3lVTHB2NGpFMk80anZQZzM5SFkKLS0tIFQ0c0QxbFdnTUFLbDdqc052R0tS\nYU8wbWwrWFJTNmdBZzBPdHN4VTMyZ0kKdsJa1r1GA/Ya93rbh/FkVEhK1QcfV+UF\nQMqjRfe9s2UIdRiMk+osPyV2Fr9L9ncIMw/5Eqdh1cJm04m7rAMN7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6TUxlNmN1SWxxbVA1bHdO\nL0RFS2hDbzJ5Mk1sNVZVYlVvZ0VFTVp4d0RVCkRjZ0lhOEhnMVM4cDBQMjJVYlll\nc25rdWo5VTdyY0w5Mnhxdm1ubXdnbDgKLS0tIEZSQ3Z6c0lzQTJDOFZSR0dTR3BH\nbkorOWNLZkFSY0hYY1hIODFqMGNpczQKgnl7vH2fRrW2sGCxAlTnf0/9aTGWbXGX\n6OtGMfAIv9vZWXi65CpVwPFfx5f8yoydWTLOc8Pf/e5N+ZOZP3U2JA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TmZmdk1qV0ZFYVorZXdy\nR0d0bUhkbGdqWTByM21kZForMUpMbTk2UG4wCjN0dURpRytnWW1peGRYL2Uwc29R\nSWF2ZENjWXlpQlpWamJEeE5SUlVrVVEKLS0tIEgvbjR6MFJVM0taMU9zV2orMmVB\nRVdrcG4xOEp5aFdpYlRtL050Q3ViR0kKZ8SzmPVVgDYshXyoFXiGvgvAnAKNI5qm\nQsV6tKCbuY+07yTSEtUo7B0htfS3k7YQqxC6dBEOODtM5C0yXcxzHA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:24:04Z",
+		"mac": "ENC[AES256_GCM,data:yWNfoYh1Yj6PctGH2sc0XHb32PkK7fH+pC7KdVBjqL6jOEeUmJeJUV1Krxw0lzHG/Z7iDsgVryVxT0CkZ9pmQsNe6HAVM33gd3snqhdSm9x690vAezWde3rqu/JelU01HTgrLnxWVdJcv3R1XM06BvJ64rzZPs0N4kjuketeIKk=,iv:oHOAzASEVZunFHUcXPTXFoXUw10hBeEwxYBRdpQI1cI=,tag:obZUAhewwsLVdrdHxLYg5Q==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/root-password/password/users/kurogeek
+++ b/vars/per-machine/neptune/root-password/password/users/kurogeek
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+200:6f1e:6b42:c153:5461:a48:bced:d936
--- a/vars/per-machine/sirius/zerotier/zerotier-identity-secret/groups/admins
+++ b/vars/per-machine/sirius/zerotier/zerotier-identity-secret/groups/admins
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/machines/neptune
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:mE1tSqDTrnvGFZIlA/Hzceg6NB0ZMGpu0XACSYlpLMyobqEa9RSsTUX+hyBrmTo0A9PosHTscmI4NmHWU73UAnTwOFkMwi6jebEKXDdIZU0YX0kus5blToe5Li0HTMhTR56GNPptywGjZsPGa3+zAOIh3TH8YMD4W8opdlisegTgG1d4On/rp+l6jcwRehCbL36pGmYKJg==,iv:cEK7BnP6CFLV4Fbrxs2CU68pvVxs6baR2/xXsAr8Gu4=,tag:iS7BahlN0GEjP+yj7FMo8g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkL0lNSm15QzlTQWZPZHVx\nRHp3UHJSR3hrQkVZYVVjOTBoMjhDcVE5elI4Cm83eGt6RXZLYzdsbk1QcndPWS9j\nanBDMTJwNEJ4enEyMy82cmc1ZHRyN1kKLS0tIHJsRzRSQVRNOWhFYmZWcFlRQlc1\ncGlFOXY4aHhlQU1iOUlJMlpvZktKNkEKRBvYL41kpcRYQhB112CYn3mAAGhzgH9O\ntl3dx12ziBAu3w2NNi9Kx56FTVwP/5MC5fa0z7/FEitW2qkVzXerXA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByckhBVmRvMEZCQWpHaTRv\nMDVlVzgwZmsxQmVhV3RHOHNVUlVVUlhYaFFRCjZ2ZmYrQkVuaVV1VjdCUkpieUVl\nUXRGektvdzNMTGdSN25IM1ZNSVVQbUkKLS0tIFNlMFRia3VBQ3dEZWdVb0tyU1l0\nZFJ1ZzBIMUM0OVVyUGRuOWxjT09xU0EKtwMOhar5P3NZlBnvugSzjTOUzG+3EzQh\nIKtn4ZtHVGL91VFYJwl6GpYmuaZM+bBQ9DfSf9xTtDelADJlv0NGVQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNQXF4Njc4MTN1Sm41VG5m\nR2UvS0pGajNlQjAyUHZUUDRyOWhqdmZnWFI0Cm1GUXZnY3VrbGpET3BoVTNyMTNC\nVldTcFprQ1dsK3JRbDB6eGh1R1FWbEUKLS0tIE9ib291VWV5dC9JaVVHODA3Rlh0\nalpnaE5sWUtGMzhhZWd2b0d4aHJLQmsK4SbS4M4n92o0Lk1ZnSjuXHvjKhwNBmlj\nMUZBAnXaPYRpvGNWdXmTaSkxXcJUTtJvrLqctBDDbIciEHyHOueQLg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFl3R3A2SENl\nWkFsdXRQOEs0dlFaSmVsYU5acWJxcWVrWGtUN0hDRXNvbVUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3K0pSN21ZUnhRRDR2TUo3b0MyTERy\nVTRkY1BTM1ZDbDZ0d3ZvZlJlM0t3Ci0tLSBITmlWMHpld1YwRmc4WmFLZDZsVzN4\naEk0aGVvTzBzcTRPUDJSekhycXJrCsW1R583IwdojY4bUSQspEdGVDXci1cWrScb\n6dpeYu9uWB0JiesaDJ/arF4FbA7bDMKC3WT6t8dvDdqPzwaMTyM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1xQ2YybXI1\nTFhEaXg4all6TVJFNW5WTEtKWDBRci9Zd3kvaG5odlB5aVEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpwd0UwcnZXemxkRDQvM2ZlWXRicEIv\nMDNra0txZkRTblRWbDQrMHBETkZNCi0tLSBNckdIT3h4aGF4N2xvNWtVakxIWUx6\nMUM1MlI3R1lqQ00yNkhMaSs1OG5JCrhuqHWE8aSoir4rYWtmZ8P+vL+gyxdvL3+n\n9iFyRiq9k74iyZ5qojiIOYhJIIis5Ygxygi/qDQm0/tqr7Vg7gE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEJBKzlIK0pY\nbmZpR0ZxYzBXVkREdmx4Z0pudDBHWHA5MVZkQ2R3em5WMncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp3SStKRzBTQ2loWkpidkJSZWdSYk1k\nNmFvOGpVWUhhNjJvckxKbDFOQVBzCi0tLSBEdE55NUhpSDR6U1FMRHhsVDVuYWZt\ncXBNVHBRVGQ2dm5rYkwvNTB4OEFvCl0/SrhvHrMD5O6bjUeOoXDeZjwsFdq636kz\nQvzC2t1rtthWo7oCKsTDV7wDCRIhqUeKnQlc5vb3ssQTzWByn1k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQnIxVUNJV0JDY0xEZkFs\nc0F0QmNuY0xyM3l3MHYyOUJ4MVprbXNMVGpBCnpuUXJkTUZGb2RlMWdiYkpTZVRn\ndWpDSUtiT3pSNlVaaWZNVWR1NWFrRmcKLS0tIGFNTGt2N3JUeDNmQmRkZTBoUVJF\ndVhuRnJFa0ZWM1ZKSWUwMTRTUUlsRU0KkrDp96Evmf4vNnBeB0DWI7j6/t/3+T+C\n3OtG4xohL1R1tPzsaWeKRoSAzAMgAYWC2eSnJPT2xyN2ppGqu1Hu2g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqU09xVUJoU1NiQ2FwSG1E\nUElvVzJUTXNGMEtCQ2d5YVdkcWZpY3crVVFFCmc2My9XRzd4bzducHRwblcwOVhL\nelE5SHh4SXczVVF3c1dZaHR1WUpsS00KLS0tIFdCcmwyN1IzUmNRd3preUxxNGpD\nZzE3WVZyOG1RdWNRNXZ2ZUNtdEJnS1UKzmYfhhYiwmeNvpqFWgJdU5ogN5COd4j1\nc6aJ0QrdU7fnKQrAeYTbUCm3Hb0M02pzPLUiYgJVB86Nwlp8u/5TQg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Q3lwY0RZVC96NWNQUkhC\nOEpFYURlOUlpZjZHd3hBTVJhOVQ5azAwZUJ3Ckt5bXRWWmttUXduWTBZeWJxYkh2\nQ01QaXNicEdTcFpENTJ6Ti94YnBnZ3MKLS0tIGxCZUQ5ZVJXdDZxUWxMQ1R0ZU80\nSGUwZkRuM2hnNWNCeXhsRG9MNWViR28Kza+JHzNBnoSXz63q6nPEP+Zg//S9kn0J\nZj2GEgaK5X/VENf16blgwMvXuY1xGj+s91X+H4ZLudIQD4b9i6lk4w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5bDdONmpwaC9PNFhYTGtj\nQm9RNUJoTUxPWG5BZkRqeGVRa2Fyd3VUQkFJCkRUZENaQndmcDhqRG9KSVNmN3VS\na1JlaWdWNW1lUllqa1hUZXdRTGVJdXMKLS0tIHNxUG5rdWwvTTQxeUhmbHE5a3Jv\nMy9jd1B0WHZxMHk0QXRIS0R4WlFUN1EKlSYbI89l0FaFSe2m/bTuccqP++0vNcBq\nbdD+Y0weyMuh9NvdbH+4wL2do/MgXNrGKKiBk8lIcwb6cUdbY5du7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-21T08:57:30Z",
+		"mac": "ENC[AES256_GCM,data:YV48MhAcKoE7BfYnAE4UrAl32Nv34KeliHuWhpf4hs5XE7675w/7nibYGOjgwLk5DO4HlalbRKHQzpxZJUHKZcWaNddc5k0rZIUm8is8n1B7MMA87Z1ZPuB5L/fRAhv9mdHCxBKL27X0FagiLxv5hZ1KXmxwu1HnP5s/V9+4ZlE=,iv:xqYactk9mfoMCyxtFUn/4iHdDsmtzxlntBvZjOR+p08=,tag:kF4bDKj7svRYeZvd5SwOMQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/sirius/zerotier/zerotier-identity-secret/users/kurogeek
+++ b/vars/per-machine/sirius/zerotier/zerotier-identity-secret/users/kurogeek
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-subnet/value
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-subnet/value
@@ -0,0 +1 @@
+300:6f1e:6b42:c153::/64
--- a/vars/per-machine/rigel/state-version/version/value
+++ b/vars/per-machine/rigel/state-version/version/value
@@ -1 +0,0 @@
-25.11
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+200:8572:6695:fdef:15d6:6c5:698f:3ba4
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/groups/admins
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/machines/rigel
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:1dMtSGsh6eNkg3U4ReHxGbrGzomkthx8mtui7E58pk6f15tj7hFWpa3IKwGMXgszMWdnfIYIKT/eImz57P3/2Y/goBYZFCY9NuQztuSJx4BVgKn5vHJyGTWPRoEn1wKq1Py8PFubmsGmqxCSdtzRjc3q6ASoE21aknzg1E6suGOgX/Udt+ClQftaTqqardTGH/+QzzWLgA==,iv:0IGBhwFZzgeF3Q3BKsPoPStuvtBo+59N2NHR3wUUgQ8=,tag:9+HPTQK8uu+eeRLkMkUKWg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUkRPSDR2ZTRNYmFVRXVa\nWU5LUTh1amdmSDFVQmhzZUp5ZW9Dcm1tYm1NCnJsVHdTWUYzbWV3UkVVeWVDRWlD\ndGJHQ0JkMU9RL2dNZnR3Vjc1blBMNkUKLS0tIHoyVnJmU0lKTG5seWVKTlN2UmFu\ncXNPcXJUOXpzMzl0MkZGejAxZ3VGc0EKS8OAKVR1APSdneX2wG0kOLPAcQqk0pXi\nuyzQvir3fJLsn27tnQ28owTRRZ+bF8W4hXFOhhFKMW9I0QfCEcfWng==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYdm9tYk9WWEUxUnpsYTNa\nMU1oYlcwOHRNdHhHamlBcHFWbW54Z09sMkg4CnFocWFUVXlQd3U2cUxmK0pXL2t2\nWUtOMEpNdmZnSDFoRDRGejRXVnd2RVEKLS0tIHVuV3oxSDJjZGpkS1NZMHMyR3Nn\nUXlkMXJzcVhMbmVvU3ZvYXltUkt5dHcKR8vpS/UKyMJ2hbtkBisJhR40RQFgBOa1\nE6l98MmLTRqzXzWcGUtx0KJIn1N5WYzObLDL+Ozame5tPPyXh1LufQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9zSmFScVJi\nUkFjVGRUbmpYMkNxamd2WHFidHdZT1NMSDJoQitYSVRPd0EgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp2bXJqWmNDRXc2V3l0SVdVNlIwRWJQ\nMGhmdDE2c2VzV2hyTlJDNzQvN1A0Ci0tLSBpZmc1RU9JTExvNGhVeGdYL1llRnFD\nclFjR08xVkhhdURaVDIrUVlxb2FvCsGgkwtlSkVYuv5ryExZ4pPW6nhzSfRRWU3S\nONCdxRzFZvRk2pjQnAVh/kZjahUXnBkIVhcq1Q3eYA2lyXxct1s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpaRGZhSlBa\nOE0zK08vZVpjaCt2cGI2aU1TcGZXR1UzSit5U0c4S3VnMHMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpzK250Skh6bkhzc0NyM2lVeWs5T013\nVFJ3R2J6VU1qdGh4N24yQmgxamVrCi0tLSA5bVNrYXhnSVZnNy9ZM3hxczFMWWJs\nRitlWFcwelZ5cEFxWFNWOTBoVlQwCjEqDW9t4SvIF2Ssft+vpnIYQ/FqBGaC6MOk\nhJMa1SxEyCJ4Ey4w/3EzlRybAZpSOfrHKsYi81IjN53zMMuCk9s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG5ac0Njd0lJ\nQ2kvcVQ5dTBhUmV6eUk1cll2K3lydWR3aXQwUlVHa3ZlQ3cgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp6TXdDZEJvREtYblhuZ1pXVmp3Y0RE\nZyswOWhXZ0owSDRFQW40WFU5WVQ0Ci0tLSBDVnd6R2tBS1Y2M2NWd1owSDRmOXdO\nbEtOT3BNd0IzcHo5azVaWnBnQWh3CtPclvQu9at0hYpBkRywzG+Ar399azaEM22K\nHTikQgyAt3hwnxanAa6DFEtK3mggHK9bUQeFcAZd2/jCYprpNsA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTcnVBZ3Zid3NYdEdML2VG\nMDEzOFkrSDRuYkp0YThtKzBHQVRrRWlFa0VFCmIvQXRhRXNzY01hYTJiZkd0LzFS\nVm15K08zV3hzd0YvamhNNW1YQTVCTTQKLS0tIHYzNGptSkRnT2cwMUh4Ym44d0Ex\nd0owbzFUeTZUQmNNUHFEdzgyZ2NCZXMKm6vZhqi0LCyRZXNtF3M2pGfitexaBi9j\n5OuNC19YiNfTzLm0LRMuDjpzuypGJwzo3oSZH322aZNqvhgDfgx9WQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZWE1JcHJvU0pPMFRvU2tX\nejV3REdJUWxtYnk5VVlyR0doMVNiMUdGWFJNCmY2S3FacDRQR1FhOFN1c0dmOSta\nQkdyaTd4RnNYK0ZsOEhnUVEzdmhETE0KLS0tIFVSV2VFUmxQWGIyNWc1Mmx3cVhu\nZ0ZESURhcEc4cUw4T3haVVVTR1VuL1UK1YNbgSTxHAk9/5zuQ+44qSBR05Rx78Ln\n9g28PwfmccyizNNcuRVP71MOosATDS+FAkEIT02N+A8l3MeaSZ19Xg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5UDBQNHM2TzVKU0krOHZy\nRjl6cy9QME5GTUtxWU15K1ZrL2YvUjNzNEQ0CnUxd0tqNGxHVGZ5RWxLc3ExMEFj\nMGhzZm4rdFcwa2FBeGhvRUh5UnYveUEKLS0tIDBYQTdRQmhhVHR4U3d0amhJUnhU\nbXBPTCtoR1YrT2orQ1V2RkNlYkJuMmMKPD65HPvOQgPvuGp//PvDR/Pa87nTGeRG\n682MvdjUmDxLi5liRhoRvnMYN5P5aNP79/L5PSp0BrqDM1Dqxx8ZTA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3Z2lZcmhGSENRcDR6RVBx\nT2xLSEVleXJ3ZXZ6SkFJR0RMYzc0T0gybkhNCkthODZkbWptbnBKU1BpaVdBbGJX\nQTh6dU9CTlhDRjhaUnVxYy9yaDIzdEUKLS0tIGphcjBKREhPc3NHYmZMYVpLbnpR\nMEQzME05VCtxWFVQcVlCUXZEdUh0UlEK3PKmi8lZAFP80wbdjkXjU0a2xjw9xX9b\n5eGV53ULQXMpWaDHwpjYMxxi20bDjEVOgzphrhxyJt3hy+kSNBYN7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-21T08:57:45Z",
+		"mac": "ENC[AES256_GCM,data:bG7lqye0VqkkK7wtR8zoGqJPuphSOYw7QVNqxq7q0dr35yVjesGkJ7Y74+D/1qaeUXKbWnrDTGIAqYfdHXrWuyIuc+Ry77PA4keKFGbaa78GKuvUXrW2dTDd2G02YDGavpsYKbP1qUumPYjZ5NLkwZnHEo5GHRbdfj2l4AYrTEw=,iv:0qu47k2G/Yt99nGhz3fL6ScjScO11CdDLbU79Xkl08E=,tag:31lBmsiBRY4akCQTPIZ66w==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/users/kurogeek
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-subnet/value
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-subnet/value
@@ -0,0 +1 @@
+300:8572:6695:fdef::/64
--- a/vars/per-machine/sirius/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/sirius/openssh/ssh.id_ed25519.pub/value
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO0pbJfzPxUSR6rkqhtiqoies3oSVwZUzxLn0lp7DKT/ 
--- a/vars/per-machine/sirius/openssh/ssh.id_ed25519/machines/sirius
+++ b/vars/per-machine/sirius/openssh/ssh.id_ed25519/machines/sirius
@@ -1 +0,0 @@
-../../../../../../sops/machines/sirius
--- a/vars/per-machine/sirius/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/sirius/openssh/ssh.id_ed25519/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data: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,iv:O5dhCwPey4gNaHel+HwwX9JyqBF01pxGQ8UA/C72g1Y=,tag:NoBG5H9LQj0+DgYsOsUfKw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjY0lYejN2Vnk5WHRTUHdw\nd011akFUc0UxaU1RT3AzakRaVHBFbHZNa0UwCnAyUzZldWNQRjMwWkZkdjVGcHAw\nT1krZFhTYm84ODVlWm45SE9kM2NFYjAKLS0tIGhjeElDVGNSYXE2T0JBVjhtWmgz\nYXBPdzZlM3FXQ0wzVTJmODUySWF5V0EK1z4c89M0wr5dlbC1n6LulLk9zKwdXv3j\nZJqIqnliltTKzl7nYPqgC2WmDolD2DsO8l8KyTN58QoMdNYC/389kw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSdlYxTHJPYmhoQWErRnFR\nMmlBN2NLNlNLZWtwODNCbHBYOTN0eHVKc0RFCklnQ2VQTDdkajY5RmpITHY0bDUw\nY1BDWHhVdWp2ckRML3FQTWJ2MVVRK0EKLS0tIFVQSVJld0pWY2t0MkY1YW9Nb3Br\nVXd1ZXlLa3VXekUvVjZnNFljMEdOcGMKvJpN2fXmODA/p7UH/Qlky+ENNF95thgf\nzj5gdJKWMnJOp55AvhozuX05C01rGK21fTBbx1Csm7qHPpZylMBRWg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXc0ZqejA1bXRES1REYndY\nTVlTNmIrL04xdFdnK2ZRMTI1ZW9TaFlaVG5ZCnRweEFCVFBKeU83clh0OUM3WU9i\ncWczZVpZNEhxc3lRNHhuWmJWbGpDbnMKLS0tIG9tNW9NVTVzM052M2JPc2llQ1lh\nMUJ3aGhld1VnT2tmU0YvZEthVmVLTDgKjV6JDjpUZcAYsH+plS3LHM2dKF5qBWoK\n14HAKXWJFOsXJ3QNJRseJAcpg2lg/TqWdpUmXCzleahWlka+5i1m9g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRFYlJPK0xs\nUGVWSHVUR3BhN05mYkZ1aWlEZ2tmakVmNDYrck5RZmY0UlUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpXbXJ3RGZjV2xFRFNQTi9IeTRuVXRH\nOHc1WW5XVk5hWFYrcWdmb2xyODZzCi0tLSA3T01wV0VDcWxxYlI0NFo0SWNBKy9x\nWGUwVDdWeS9GQjZscUNYVXdYQS9vCpL5Bj85B+U+G+7XSz7XXhKqIRmOdGKV4UEa\n2J5HqARiUds3t1H34m4WdPta3DXliZiv2ffUtOa39xpuZ8WpVpk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhVeCs0ZEdH\naEs5dENQYnNEb2RrNlZUVnFJd09PVzBwOU5MMXEzOUMvQ0kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpXMExkYXk1dU55MjA3TU9ac0JHQ1gz\ncVNvVXA5bm1wM2VINUducVVBaVo4Ci0tLSB2KzdUZVI4VWFnQ3BOeVFKQnRPYXJn\nVWI3eTRUd0ZXdWpWbUtvUG5HQU5BChRXFAwfDBwYya/eCSaZ6/Q3xwdWU1UUrE9t\nRKmGaXvXyYNCQU3uRjTths81pvJfaVxJ5X3ICCHsT/8Ar0PpLvg=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEp0NFVCM2I4\nN1FqMmNrZXkvUTZjTlhLSDIycE9WZnFSOG9NWlJxdFJCajQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIUnR6azJPenE3VjVlNEh2eUsxcVNp\nR0tjUUdkNVBnMFpuR0VPdHVtNW5nCi0tLSA0RUZpdVlnWEVZUTBXdEQvbFdiZFND\nSlVSZXpDamJWSkg1TCttOVJ3UGJrCvPq2mZXLAnF+ppEyEN8eoJOKFvga2O9ijem\n2Bkl2l2ZT4NFp2Ub3OJvofLxdapLSMZbHHsFwIRQUcTxe9bOE0o=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTZUJBKzd3RGp2V1I0VXV2\nOWxGUjVMWHBIenllWC80b3M4MzllVElVaEN3Cm8rYmI4RUExeFgrTW95RzFlaTRz\nZm1OVXNqVExVWkRKbmlubXphZUo5d3MKLS0tIDIyMFlSdUhDVWczM2FFb1R2MzRM\nNGtRbjBjR0hkMlZ6RGFPdTZTMlFlVEEKwqb7C2jMoGD7XJaeZsyy5E1yY+6pvRxz\nLEgu1+lfaCWTyOb4RsXEfwmO6dtGVTQ1vm4+GzDnu1FZBFxjy9ZJYA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzdTJXNE8wUXNsVThVd1Z6\nMDJwY3JGNW1CTjdTTkhHY0xCMm5kS0FzMVRZCkY2azhSdFFNaTgybW1PM3FRTWtO\nL1RMSENSeGhMU3hKZTRQaXBZTi8zS28KLS0tIGtta1lDK21EYmRIMEJpMEFET0hs\nanJKcGJMTGduVGpEaURyd2FMaXlaMUUKSplSulFrjmCKJRWylYbOv3iAXhU0HmrW\nwNSWRLHx0PexM4zyl2UvLaB4l64WmFzr7PDsfFDnhVMROl6u2WI6ng==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnaWNaTHZjVFVlQlJjSG9m\nU1BkdmxHVHhMeVdCYUJ1Q0luQ1dVYktBV1dNCjhsYVk1ZHFBQ2g5dElmTXBiVHox\nS0pxTld1OXNwWXY5WHpRUUhhWDFNSkUKLS0tIE5WVitNWlhkVjJ0aFlBd3k0SWV3\nWkVZUTlqaXlMRzQ2TGtrdytwQkM3aUUKKoRD6moZuY6/QN3xRG2OkmVX4EXt8Isu\nFO5Ub8QoAs3yomGa7D9Kg48XJNaMeffeIFj/lw9774VRlCMgzSGZMw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAycElybGZ5T1JEWnQyeVpi\nVEhYTjFkeWd4UWVud2dwZ3p3RklhcVpvRHlnClAwWmdVZmxacjV2NzJJS0pQTmZD\nckZJK1JFUE5QdHE4NWVMcVhzNE9mdmcKLS0tIDRaTktVaTJ1Z2ZxZHN0N3ROVEtj\nVjhYT0M1MkFFSTduNi9DMzhtWkhIbkUK/ZjPKttlEoyDoZFNF/FwWhUD+e8EOLal\nrNwCbeU10QErb8td9AOoBUQwwYEZEHTgXLLgHNFdolJ2I0MBB1iSoA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-10T05:07:06Z",
-		"mac": "ENC[AES256_GCM,data:s9t0AoFm1AznCpZV6RMaMIFDuL2GWwGlU+Jm100E/SwrdDKL/F3PVDlbkPpS03LxR3GrqE48Rb+Tx1DGzEMLb1Zc+zC0hilqaiU+FRBCE5HXRiUpEZlZW19dTkbHJgphjgFdafkO7lRToIjI0ttO30zLOCuRPuxmz27eKvbvB1A=,iv:Ma1ixp71q5ZHFVy2sv/BFAHDaTqPP5bAXVub92xi80w=,tag:C0T6pFiSwgetkEyKMS2bpg==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/sirius/root-password/password-hash/machines/sirius
+++ b/vars/per-machine/sirius/root-password/password-hash/machines/sirius
@@ -1 +0,0 @@
-../../../../../../sops/machines/sirius
--- a/vars/per-machine/sirius/root-password/password-hash/secret
+++ b/vars/per-machine/sirius/root-password/password-hash/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:nCBBDvK374Jntogqu88wJIS8gO0wWlTCBNBfx2RFt6mw7xWrOpItDm5mNabdaQZRbSSelOEf2Z2zmqL1igFVKuuxioTaf9UJQEH5kCQzV6F9lX8HFzwsnQbzUaRY7aNgH8uCAFbIdmRpnQ==,iv:+2ebOkUZZeuz/MmPKMTADKfxZ8ls8mROPyA050pQmXs=,tag:i5nOUjyQG4WgOEkxyZaZdA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaVlNBWUhtK3ZlN2dQMWxV\nU2dLREloU3VLZkQ0RUNrdWJzYTFPdzZ2YVRVCkc1WGd4Y3FaY1VieHIzdU8yTVlO\neG9QM0ZQVU5kbEc4TC9zTzF6UFBCNEEKLS0tIHNSZXRDWkRnQUhTQlFFOXg1MU1z\nVXNIaXp1c3pwdUlEUEtOQVczZ0VPcmcKZjc559lAeIBE978eYlJhvD6w8hSUxAxZ\nON0PYkrgneQsfDbR8c3M+cmPM5sFrXaIFNwol1RwIbRRAzAKxxFnnA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQldPQUp5RXhnREhvVHlj\nZXRQcmZVNjJ4RittemJ1SklRMEg4SHJYcVJNClV4WEdvZkRWNkNIYnFDRGJpQTVB\nL3FSYk44TkpNR0V0WE9sQmw3NFVWL28KLS0tIEdrRG9mRlE4WGp1N2czSDViaVJq\nbGU1Qy96NXNMVzcvQXQwZjQ2NHRQZ0EKexq/MGjJ205wkp0RlTUeOTCMZZrc4J7v\nB87n0UskaO+1hexAHKu3RJYOj7115/vLKbzhcxGfJ+OESybwQ9pLWg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKZHJmUmlyc1dJMTBsZnNv\ndWhvM3JUeXQwbms2V0UzY2ZTanFUNEVKUmc4ClpsSHpaRUJmV1d1dTUwWnFENFlZ\nSUxxTVR4QjYxSCtORjJGRFhUM0JZWkkKLS0tIHZtNjVzUEYraE5abXBIaW1LTFFv\nQ0M1ek82UFBXNnJMSzd1ZVpyWkhSZkkKww8CWNMlay+cPTQUsSl/YXVkc2EZEyyb\nq0CQ6z1O/7Eesykme3ntpXMD4dn/zI/6KrN7+GqUnVMsJ3qSlPZNLQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFdhb2lldHUy\nek1BNnVYc3FKcGZMcVlsTFIxV0FCTW1zNjhQRGNpM3R4UVUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpiNFMrZG53MlpQbm9nbUFEMFlnaFFE\nQ04vd24wNS9MdUd6R25DaXZobDV3Ci0tLSBWSXJoRjRpV3V4Ly91bWpzc1ZuV2lO\nVkgzVngzdzVUNEd4N3VpU0IxazZFCkPRAb78q7lMQNCJxSU7mqgSMXeWz7gYd6a3\ncm3ejHVrb3DaJ7iztfa/rBlc6TzFROqkythZLYhjkiS6S3itYD0=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5CWk9LWThR\nMUwrMFhjS1lvcEl4SGZ1Z1Y3dFFpSWx2TkhRZ3lCRlN6QjQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpUNzJpellVdW5rSGk4anVWMTkvWTUr\nd1p3S0ZzekU2TkFiZUFYb2FFN2dnCi0tLSBsN2FwbzNaODdaamZqYXRRdWY4cEti\nYzZYRDRvQmFCZDlvaWZBWHUxZjZnCrKMSokt/ce4e8VM8Y8vpr+UTnLDbJSLf1/d\nX2x7YWDR5aeFyi3hT3lEVJSP7R5wgii21tQW0t/EzDea5d9OIjs=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRUNXg4N3p0\nR3lGLzZNbllwRG96NWxjRnY3TWs2eFI0Y293NzFEYU85RUkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpVcXFDdVlOc1U4d0ZNS292K1AzZGt0\nc05PWE9YZDBBb3Nwc3hVMUZQQm93Ci0tLSBmdEVjekpXazhXdDg0b1pETVJsU0c0\nRkZqLzhVMzExYU4xVS9JcE85dWUwCsdzPQwhDjwK+hWq1bj+otjI6714+2DALfwP\naIJgFxOuig/OxvO/N8dAv7xpRqb2W3prA5a5QkhXO/URpY0l2mY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6OC9uTmlOckFHa2dQTW9W\nNlUwOUk4UFd0MHBNNnhiQkc4TURlZ3NrbUhFCkk4d0I4b3FCRlFVdThuYVgreElw\nNVpCYmZHMmdVNVk1REFSRGNjSkpQc2cKLS0tIFp6OUZhaE5kQytxSkJLTVJCTXM1\nanF1NUJRNGNmNTk5M2IwM1NXd3BmTWMKiRa94ISTA+OX0OiLYVyTQsanOsL2qoaC\nECiRgC0AWb3n14gDNFUbnmB9c2sc/AxQp3N16oFVK9CNWDahnfNPEA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUlYxS1BiK1NEbUpuMFhG\nRXF3NkIxWXk3eWFtaHRHczVTMnI3ZURqVFNjCnI2eGtmY2cyeTVrZmsxVTB4bHNy\nZVJZVUVEMVYxTFJmN1FmeWpPWkNZZTAKLS0tIDErcWFLV0FRZy82NjBhVW1zSjVV\nUWJ4L3FWenpRdXZQKzJRUlBVSWQ1eTgKJrc6SbgjpSn5LkrHDaM8N/sOV+bVahH/\nxqAkZ+vx1UG88/29+/NUp+2xOWmF4PveNVTSuRNPKBZMGV/rlntsng==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNTBNMXB1QkJhRnF0emw3\nVzNwYzRTcU1JZVpGZ2hRZFE4UGFkZWR4NmdBClpQbS9NUGgveWFFTDkvNHF4akNk\nRGNzY1dEd2x4Uk85OWhWUlpEdDlYekEKLS0tIFpMUmlVaGRGYUExTGFFUlp0OWxH\nTEpqaDg0WjdLVmNjeUFnSVA2SDhLUWMKp864lVIy1pwZxeuY/cx8aVeUwAlM2GWN\nHtyRwdKUeuSrLR+SoQvhZ91vn2Vd2CxE9eHI0Wtj+JRa0BPZZkg/Zw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNkZNZExlRklNMDZGZkZ4\nN0xLRWNENk52NlFzN1RtUWl5a0JsL3hXL0RvCnJaeThUaXp6QUh3bUwxOG1lcnBC\ncUp2RUIwdjFTVEJpTkVHbU1MelpLTWsKLS0tIGIzQ2xEMjk0azFrMUxzRGxucC9M\nRjlUdGlsRFJhb0NjQlA3ZEF6SjhOL0kKpLNtp1mkBCHLcTC7mi7ddjS14NXQaQQy\nIpvZckj4t39m2fEGNNxYHjql4DWjkqAcT+JmC3dAUbOgjgTLx/CQyw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-10T05:07:07Z",
-		"mac": "ENC[AES256_GCM,data:BAezJ+j9ezO67wShJ6Nz0fql0vWPqxZ6An/IMq8gMQvDy88VtcbUGgGaINJjW9JUfCVnOPj34ghaz0vaao0GaAnn2vRXrl1SXwYFTOHJgEuL4HU6WxekJVHZxQe85vxKsNoDLZ1AjsfF0EpASnHeH7rxmlHmAcNQMiGGOc+R37A=,iv:4xuEQx8TP+wCJMtFg4ADWa0y5Qy13vOVGqnq6xLRFnU=,tag:I2CuGcdTBtGgbATSWk1oYQ==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/sirius/root-password/password/secret
+++ b/vars/per-machine/sirius/root-password/password/secret
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:SzbPnMw5S+k5n/lDpodoEsa/q78eS05C1MUEewQHfQ6Lut58It3XopLP0tE=,iv:9u+2LMha8/zb/vmHej42BU88eCIOn/befZ9Y0nm1+m0=,tag:fLE0lKHKYqWuCUbP4eEA7g==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUjVsckJMbkhDcndCM2x1\ndkhoSjgzQ2Z4WEptK29ITktWMm9COU8zNEY4CjAwRm50V3RiQlRNT2JJaVRVeGRJ\nV1dyaDFiaDd0Zkh4NkxkbFNGYTEyV0EKLS0tIDB2K2JyOS9vRjFQOGk1ZTRUTDdN\ncXZoNVU3V0tNcmY3eTRUd2tURnM5RTgKbr8mA8i7SHovdTydg2Ql7CtBko5YW7gK\nthpd3taNXlgppNvBGp8Od2JGaceUw/+Roa/GGWgo/UAlPSl5ie1BfA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSOTZ6dnJtZlhrcE1WUkRJ\naFROL01ZYTVkS2RLeWVOcE92S01lSW9wNUhjCnBPczlNd0pFY0ZQbzJqQW1SZFMy\nb2Z0eVdCUHZid0t2NGs0N0xqd1JFL2MKLS0tIHRMSXZnTFRjcWU5cTdHSzcyVE96\nQ2RBZnZNL1BwTkVYMjd2VHhnRDhwY2sKFWMj33nX9SpU2v27/eqT1UptmJCK0zH8\n/nIixYr9lcqVI3GhXhUgAQzv+aXYE0rbzK1+iwMEkA6fze8aRxKT+Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdoUGZyekIv\nZms3K092VkROM1FpdS9RaURla0s3Q2xKTnBSV3FrdVJjV2cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpCWW9jNlJpeXJGcnpweVRsb09sSTdt\nSlJncWVRZmNrK2c1QkhpenJVcGF3Ci0tLSBWbURLVVRLWDF3MmtRVTZUSlFsaTFn\nWWZMb05pVkNvY0wyYnNjR3FqV2NvCrT26p5CsdTb1i1fCAUc3BBFzRFr4HLVc+c/\nflQ8xQJtmhOsbR2e/zKo8H2LZ5RSzcMJa8T1SOmLifI7pxTmYtA=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE4yZHRnMjN2\neWZTTnVvalBQL3poVzhNZ0NvOFNkSm1IWW5vZlJ2NUptMFEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYYXlzY1VwdTRuUkcwN3JLb2hRRjFV\ndktjbElWU3Q1c2hFRlorVVdHdk9zCi0tLSBMTGtDKzU4V0JhYXZsT0lyRkRieFRN\nVG82QWRoa2Q0SzBWb0lud05TUEJZCu/YD9DF43yz2h/17JZ5XnqXxqEPx0UX7f1X\n9Hq/tZPy35OcZytI4qpeXihPHAYgGxE2kzF7Piup5REnucw4Ghk=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEgwRVZLZHlY\neXdhbUltdnFvZExkYnZtS1FQRzZRT1RCZnZoUS9VS0dBak0gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpsQUNMVnVSTGMzQlM5cDdrMy9wMlQx\nbVFXNlJ5Z2ltcElLdWR2RzljSFowCi0tLSAvdWU5cnhvak9nMytVV2NZYnVMajJ2\najlCc2FMNFNCY09EanVwTUhwN0E0CmUEePVFUIJBqJZUd2TXejLz5z83yfzIGkul\n+C9sjqFjAMrMblS+Ulg4yl9hkspCKy4RHIBUs8xJnBmAccX6t7o=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0VjFBTzVtU0RiNkhFTkNp\nWnpTenZIZHBYRE9yeE02NHYzVExZL0FqdEZnCnVoVTR3UHpXdmM0YjFCWDkzamp5\nVXgzZ1BsNEZweGJxcDRhVXRYTDNWT0EKLS0tIENuU2s1MklzYVRFRlpoQmNmdDR6\nejlKNWpMUThETmphWE1SRzN5NXZBTFEKwnSnlZuPwcOYOvYcoKcWfrr11ZiQps1P\npIif/fYSccfmtBBEPvdbMX2wlnwu0hBBcihdSCz25BoeOCni+Gg+zw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBabWxsUHp0d3BiMlJXUmxW\nMDAwM1djTUFKTEFpMjZTak4rc3NVMUo4bVMwCmgzMG5QRkhISzFVVSt4M0pYTWkv\nUFZLSzBaaERZZFdaQi9zdTh2YXptU0kKLS0tIEo5UW9vcnM0QzFWZ2t5TlBFM2Nx\ncUoyODVYUGVPd0NJeXNyYkdDUEUrL3MK58hZV+UaFWOmP865N6S+I2Iz08GOMVzJ\nAaBhktv+g2Hu1WA7OT9UfDqPpNf5+ef7uLHvFSGEEtqoZM9HMr2CwQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMWGw4c09CMFg1U1NVMW1G\nM01jMERwTXQzVHNOT2ZoR0RjSTBqWlBuQnlFCkxLVVQrZ2w5UXJjMDZVeWVET3U3\nRmg4bU1KTzVsUXV5RUpuU3luK0hxdTAKLS0tIEtST2RPbjhwaEZVTWVIaWNXV084\nUTBuck1nVFZOMmxGc1hSZDUrLzNNMFEKQmiBUkxTmP6NIeSmcnybRysCMIVPkNQr\ngzrUGvSsQBBE0RqH3aNQcQPg8YfZfYbrUkxwfzvL/DWPnRs/Ncobuw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjUWhlZlpiNDJmN0lYck9B\nbUVHQTFVMERqODFyQmpVOFdhMHM2UFJ0c0Z3CmRBalorNXVFMkxHd3pwMjZMR2pQ\najhHNVNXZ0lRY0I4UHpSbUYrc0RGUEkKLS0tIDZyaUpNSG92QWc4Rm5oQkd2M1hV\nZUxLSVdyTWF4NWswMk96V3I0OVo4cWcKeqQtHigjGc+l64B7NNOH9kpLjCgFQ6MY\ncjVsjD8eyP8TIsuWYPpKB17Wl9FNnbX2zuw06LSgG72KY9lWCXHR6A==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-10T05:07:06Z",
-		"mac": "ENC[AES256_GCM,data:cdMcV2Wt6/XR5LHOBufgrC2Dwp+DE2usHGBVQptDkrqQ1KO6JA5BSPUrxBVUJsdVKwq/sorBrnPgnboKhMim+Q3txAkqJsIL8Il65g0fwCP/4vTvaoT8/EK3Ecbm7R74XmLtMz58IWQdMWlaqzS3Ku6j008oPzZMyYoF0d1zk4U=,iv:5+1eJhV3TXpYSvYaNCS4Xhx5RbhzqPQWTwIyBDF+3zo=,tag:YhUzZvooqIsRmWnRLXQU6w==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/sirius/state-version/version/value
+++ b/vars/per-machine/sirius/state-version/version/value
@@ -1 +0,0 @@
-25.11
--- a/vars/per-machine/sirius/zerotier/zerotier-identity-secret/machines/sirius
+++ b/vars/per-machine/sirius/zerotier/zerotier-identity-secret/machines/sirius
@@ -1 +0,0 @@
-../../../../../../sops/machines/sirius
--- a/vars/per-machine/sirius/zerotier/zerotier-identity-secret/secret
+++ b/vars/per-machine/sirius/zerotier/zerotier-identity-secret/secret
@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:f5EedrOfPfpQOF/wUjDj9KfkD7GJouNzjHneQJBoSD+DNvvPC8bmT21dRBlJCFmaloTesZdLVnT3KVpowAnIq/cyMafwWkRhESt82SfZChjdIo7+oCuJfZm6ez7SbGdBrco0ScgcNqJiTmkQhGrfxr6TmhJzIC/xmqxZ9UcttJ7JjxoCQICn+9UKiTGRWGwej9VuGw1TvDhzOj90JxFDl8+qFeflBZzf+A7MSkLZJCbb6l5h3Z2T1khuI1jk0M2N1VmkNqL1uV7ovBNMtHqtBP/gnh7Spw3oe59OHvjj7i4yEkDQpJADjqgUhFRbe6jpx1epWtPWm4kJTfs5OqCxCxq0bncGPQ7ny2F1EmT9,iv:QCiZKpSD/XetiyBaeyIj909HoIfTe4z1EEZXOi2h/H8=,tag:FFul/6PxtyrlX/ufvZjgew==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3UUFWM0hhYzBNQUxXUnRS\nbEFzZGc5TEpwTGhWR3pYbGI0T2RVNEZjbzBFCnhYYWpwcnZMNWkrOG9RK2dTZFB4\neDU2ZVF0TEZFZFphM2dBNVd5YisyaGMKLS0tIHY1MXlvYzMxTVgvR0FtTkhrdDdI\nNUo1Y3R5Z3RTdVd4ZytFNzloMjU5MEkKLC+NO2hf9PjlddjLnhOWHIFJidL13ern\n7zuzmBm1ucNruzVGmnN5LQbJDXh6+Q8++XyUTBa5YKMxWsOAtxAtpQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age16aerzyy7adcymezr4ewql3y7chq8wuvjpzsxm5um0u9jvvtdncnqmtsw05",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSZWd2ZFUzcXg1WlBiQWdx\nalBZbUNuc3JFZisyc1ZOemg3V21ManBrd2lBCm1Hb2orMGRTY3RqVXUzdnBkMjA0\nOEJLMEtlWlVPVTN5VEFPT2ZvSTIreTAKLS0tIEdXMU9KZ2Jjb21JWWpyaVJWYkZR\nd3A3dVkrWFllNlk4Wi9xV3ppUDEwa2cKsZDDSpIHeI1efMpmFgD2CMI903orhgSw\ne8uuCK/k3Ems8Xxxx0+rhPEOSzluaTK3HBmwJv3x8JEOte02IFE4Fg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeCt4bkd5eldOb3puL3Jp\nc0JzYTdUKzgvdHdEcm9BSm54MXNnN20zYmowCm5lTDZUOW9UbkpVVElFK0RYb3M1\nMUxEdHZ4Y3ZzaTgxakZrekZSdzdRd1EKLS0tIGhNLzlBbXdXVnNFSVJHdHJEcWor\nNkgyMGtEZi9WeENMODlhVEEwR1Frd1UKVJGvBEim22mmvXQlMihDXFHopAILQ6li\nwYCC+4HgWyo4BOQcICX9VGzfBwrfzis47Vl4ipgl3YRXVl9bn0sKUA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEl4ZHR2QWdu\nencraTBpZHc4am1vSnZ6a3Zwcnl3Vm5Ka1ZHQ0FRaDNISFkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpuVlB5dk0rTnhlSjdFNFgrUTBwcFB4\nTXljR2hueWVRNFpWS2xuZWxrSWZRCi0tLSBCK2FSQTF6T3dFK2J5aCtGTUxVYUtX\nc1J2SzN0Z1Y1bEdmTFRqYlFTeDZVCnyyMAnsRQ0PbrYAN3eQRCNuwf910MVVNL6M\nzIY5RbrfmD5izfM1YYQgN71K/nKAS5+6XzwhzOKzcztLZ6aAsVU=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNzVTlDWk4w\nai8wdkpDcWo3UlVqZWJwZGRCb1hycnYwaUtQai9uWHpQVkUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpCWEFyUHJ4c1B4czVGcHNReVk5blJm\nT2FhWXRsU3FScnFYUGJMam4rN0xNCi0tLSB5bGZ6VDJEdXdIRzVic0pCeGc2OUd6\nMndYdS9JeWMrUmRBVXBwNTVmajRBCup+w4P/nTrNjSHtUPU3AyiahtlNdD86Sfbl\nRE6qceW1PSTWn45SQML59RBl7wHMbaXatJhLQRM2MqxYGmeGH5E=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHIrT045eU1C\ndnRKcTNrdDBjNEdhdGNiQ1o1K05YcmlmN2V2ZlBDdlpxRVUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpvRlNtYW1aZkdUUDZTSzNBOXFPWHRY\nOXhOQzJXai96TDVqUC9JLzRyOVhBCi0tLSB0N1krM25OTmNZUjNEUks3Z29RSlZQ\nSkxjeFBVcG5PWmhPS2FHa1pSd21FCraAwqJHTSRq0inv8dJg4DdNslX48Wc/GEa6\njky4OEjQfGNiJmWeZ+CigsdXb9VFoF6AGzNfA41SDMqJpc2iIpU=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwYVdHNm5jdjNLZUUrdmUy\nZHkzRlVkcDhxUG81UnRUTzE3YVlySFJuWGg0ClFNTDN2dFgrazhkRUV6S2w2S2wr\nZTJJR3ZhRlRMWkUzOGxRVitDemExRmsKLS0tIFltQitzNmZJM2kyRCsvWGh2UklN\nb242Z3hJTnNFYU9CaWY2UUlFN0wyVDAKZbS8gzsW0hNRgvkBCNEFIe+KDDctSewY\nhebD32X3hYfw0jvMzxnUeuQJIBS6K9HsWKc/2YG9ukLNgKWbICO3pg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHbTlmQ3hJdFkrNDBFcXNO\neksrVmtaRUNJa2pLclIzcFBwUEx3UExPSnhRCnE3S25kVWpqdVNjK0FnYmxUMEVS\nQm5lMHp0MU0vcDJkbklnRHk3OVpDWmMKLS0tIDBza3MrWTVXemxLc3hBM0dDV2JI\ndzd3cE83S2FackJVdUVWZ0FMYmVkVG8KXZ/SgaZg5IttpeSg1r3jPZsVlTcMOZOG\nDEOY/u0IHxoldE58vlXryVSzPzPUosMOvmUdeIEH24XS3SN3WCGw5g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsc0xLdVhzWHM2NlpQV0s3\nSElBSjFJbi9WRjdpc3Y4NklOalF6SnZMRFRnCm9pc2NOdlNGUEdRQ3BPL25VUjB2\nZUZ5cFM3K2IyTEl3S05OM0hhaVFUSHcKLS0tIDJpQ1Rkb3pUT1ZEcTlZUGczTTIz\ncmJreE1Jd0piclRZOGNKM2p2WWhEb0EKVVc52zxLRLCV6rrBYedD8rW9x711qRIv\nPr8GgccNCq1KQvOIrvmyI9gCKSXSykwIpa/c3+Y51+tunO2W72eY/w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUYVptN2xPTWI0UkxRUmRL\ndUl2a3JGdG1zUHdtQzRYNGRNbWNnYjdvMHd3ClhjbzBmc3V2c2hCamRHUTkxeEhv\nZGZaQVRoWWNiVzMxNVMyc2QwUVptdHMKLS0tIHNROExJSkRFKzFTRmY1TVZFQk9m\nQkpnVFNuRUZtbFRQMXdFbWVqRVVsNGMKy/VYIxh6STJCw6KZ6Mrp/PFksPVeJJ3C\niBXN0iTzU9NMYSU9k+ZVqSAZy4rKHQE0Tbfo0+1kjTjJkng902fYAA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2025-11-10T05:07:09Z",
-		"mac": "ENC[AES256_GCM,data:4MT1/bqFT1hmBAmMyay5bXzD8okCz71ZZhUAJjowP2OCLImU3dw/i+gNXQulzun71u9g+xl7h/bLKAfNaEN3Ki39QnzDLy9tjqAq/rcbp8T8PvR4aOQnBFnZ+qSdKZ7tot5yybtAeCn62HHUNJH9RZi355P9hXnBHHGi/KE7N0o=,iv:OzxBsThW/+3cnx4A17CZZqRRd9Q64PocpgmyQZrTjKU=,tag:E2QusYzNPbpPB/DKgz1fkw==,type:str]",
-		"version": "3.11.0"
-	}
-}
--- a/vars/per-machine/sirius/zerotier/zerotier-ip/value
+++ b/vars/per-machine/sirius/zerotier/zerotier-ip/value
@@ -1 +0,0 @@
-fdb3:4c7d:a3e1:9336:5199:93b3:4c7d:a3e1
--- a/vars/per-machine/sirius/zerotier/zerotier-network-id/value
+++ b/vars/per-machine/sirius/zerotier/zerotier-network-id/value
@@ -1 +0,0 @@
-b34c7da3e1933651
--- a/vars/per-machine/vega/state-version/version/value
+++ b/vars/per-machine/vega/state-version/version/value
@@ -1 +0,0 @@
-25.11
Author	SHA1	Message	Date
kurogeek	219027a0f1	Update vars via generator yggdrasil for machine rigel	2025-10-21 15:57:45 +07:00
kurogeek	d89117cf42	Update vars via generator yggdrasil for machine neptune	2025-10-21 15:57:30 +07:00
kurogeek	c9c733e53a	mob next [ci-skip] [ci skip] [skip ci] lastFile:vars/per-machine/rigel/yggdrasil/yggdrasil-secret/secret	2025-10-21 15:56:11 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE09U7Tuvn3/icqFhjKuhp4hG+V6E6IFKhX1W2hVvyVj`
				`@@ -1 +0,0 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO0pbJfzPxUSR6rkqhtiqoies3oSVwZUzxLn0lp7DKT/`