mob next [ci-skip] [ci skip] [skip ci]

lastFile:modules/clan/prometheus/default.nix

.nixos-test-history

@@ -0,0 +1,3 @@
+
+# 2026-06-05 17:00:31.237121
++start_all()

inventories/default.nix

@@ -39,6 +39,8 @@
           "hadar"
           "procyon"
           "alasia"
+          "rigel"
+          "vega"
         ];
       };
 
@@ -178,6 +180,7 @@
             input = "clan-core";
           };
           roles.default.tags."phonebox" = { };
+          roles.default.settings.extraYggdrasilIPs = [ "200:c806:c13b:b855:723f:473:55:7904" ];
           roles.default.settings.extraPeers = [
             "tls://ygg.jjolly.dev:3443"
             "tls://[2602:fc24:18:7a42::1]:993"
@@ -311,6 +314,95 @@
             '';
           };
         };
+
+        prometheus-monitoring = {
+          module = {
+            name = "prometheus";
+            input = "self";
+          };
+          roles.server.machines."rigel".settings = { };
+          roles.server.extraModules = [
+            (
+              { config, pkgs, ... }:
+              {
+                clan.core.vars.generators.prometheus = {
+                  files.matrix-alertmanager-token.secret = true;
+                  files.matrix-alertmanager-secret.secret = true;
+                  files.matrix-alertmanager-urlfile = {
+                    secret = true;
+                    owner = "alertmanager";
+                    group = "alertmanager";
+                  };
+                  script = ''
+                    echo "" > $out/matrix-alertmanager-token
+                    openssl rand -hex 32 > "$out"/matrix-alertmanager-secret
+
+                    echo "http://localhost:3000/alerts?secret=$(cat $out/matrix-alertmanager-secret)" > $out/matrix-alertmanager-urlfile
+                  '';
+                  runtimeInputs = [
+                    pkgs.openssl
+                  ];
+                };
+
+                services.matrix-alertmanager = {
+                  enable = true;
+                  tokenFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-token.path;
+                  secretFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-secret.path;
+                  homeserverUrl = "https://matrix-client.matrix.org";
+                  matrixUser = "@kuroiris:matrix.org";
+                  matrixRooms = [
+                    {
+                      receivers = [
+                        "matrix"
+                      ];
+                      roomId = "!rqIrWqPvsXqMgYpcNZ:matrix.org";
+                    }
+                  ];
+                };
+
+                services.prometheus = {
+
+                  alertmanager = {
+                    enable = true;
+                    configuration = {
+                      global = {
+                        resolve_timeout = "5m";
+                      };
+                      route = {
+                        receiver = "default";
+                        routes = [
+                          {
+                            receiver = "matrix";
+                          }
+                        ];
+                      };
+                      receivers = [
+                        { name = "default"; }
+                        {
+                          name = "matrix";
+                          webhook_configs = [
+                            {
+                              url_file = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-urlfile.path;
+                              send_resolved = true;
+                            }
+                          ];
+                        }
+                      ];
+                    };
+                  };
+
+                };
+              }
+            )
+          ];
+
+          roles.nodes.machines = {
+            vega.settings = {
+              exporters.smartctl = { };
+              exporters.zfs = { };
+            };
+          };
+        };
       };
     };
   };

machines/rigel/configuration.nix

@@ -1,7 +1,8 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 {
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
 
   clan.core.settings.machine.description = "Zima board computer for testing in B4L";
+
 }

modules/clan/prometheus/default.nix

@@ -0,0 +1,204 @@
+{ clanLib, ... }:
+{
+  _class = "clan.service";
+  manifest.name = "prometheus";
+  manifest.description = "The Prometheus monitoring system and time series database.";
+  manifest.readme = builtins.readFile ./README.md;
+  manifest.categories = [ "System" ];
+
+  roles.server = {
+    description = "Prometheus server that scraps all data from nodes";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          scrape_interval = lib.mkOption {
+            type = with lib.types; nullOr str;
+            default = "1m";
+            description = "How often to scrape targets. Default is 1 minutes";
+          };
+          extra_rules = lib.mkOption {
+            type = with lib.types; listOf attrs;
+            default = [ ];
+            description = "Additional rules for Prometheus";
+          };
+          default_receiver = lib.mkOption {
+            type = with lib.types; attrs;
+            default = {
+              name = "default";
+            };
+            description = "Definition of a default receiver, default is doing nothing";
+          };
+        };
+      };
+
+    perInstance =
+      {
+        settings,
+        roles,
+        ...
+      }:
+      {
+        nixosModule =
+          {
+            config,
+            lib,
+            ...
+          }:
+          let
+            getYggdrasilIP =
+              machineName:
+              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
+                clanLib.getPublicValue {
+                  flake = config.clan.core.settings.directory;
+                  machine = machineName;
+                  generator = "yggdrasil";
+                  file = "address";
+                  default = null;
+                }
+              else
+                throw "clanService/yggdrasil is required";
+          in
+          {
+            networking.firewall.allowedTCPPorts = [
+              9090
+            ];
+            services.prometheus = {
+              enable = true;
+
+              globalConfig = {
+                scrape_interval = settings.scrape_interval;
+              };
+
+              alertmanagers = [
+                {
+                  scheme = "http";
+                  path_prefix = "/";
+                  static_configs = [ { targets = [ "localhost:9093" ]; } ];
+                }
+              ];
+
+              alertmanager = {
+                enable = true;
+                configuration = {
+                  global = {
+                    resolve_timeout = "5m";
+                  };
+                  route = {
+                    receiver = "default";
+                  };
+                  receivers = [
+                    { name = "default"; }
+                  ];
+                };
+              };
+
+              scrapeConfigs = lib.mapAttrsToList (machineName: machineVal: {
+                tls_config.insecure_skip_verify = true;
+                job_name = "${machineName}";
+                static_configs = lib.mapAttrsToList (
+                  exporterName: exporterVal:
+                  let
+                    targetPort =
+                      if exporterVal ? port then
+                        exporterVal.port
+                      else
+                        config.services.prometheus.exporters."${exporterName}".port;
+                    targetHost = getYggdrasilIP machineName;
+                  in
+                  {
+                    targets = [ "[${targetHost}]:${lib.toString targetPort}" ];
+                  }
+                ) machineVal.settings.exporters;
+              }) roles.nodes.machines;
+
+              rules = [
+                (builtins.toJSON {
+                  groups = [
+                    {
+                      name = "default";
+                      rules = [
+                        {
+                          alert = "NodesDown";
+                          expr = "count by (job) (up == 0) > 0";
+                          for = "1m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = "Node {{ $labels.job }} has been down for more than 1 minutes.";
+                        }
+                        {
+                          alert = "SmartCtlErrors";
+                          expr = "smartctl_device_error_log_count > 0";
+                          for = "5m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = ''
+                            Errors occur on {{ $labels.job }}
+                            Disk {{ $labels.device }} {{ $value }}
+                          '';
+                        }
+                        {
+                          alert = "ZFSPoolsHealth";
+                          expr = "zfs_pool_health > 0";
+                          for = "5m";
+                          labels = {
+                            severity = "critical";
+                          };
+                          annotations.summary = ''
+                            Unhealthy Pool at {{ $labels.job }}
+                            Pool {{ $labels.pool }} value {{ $value }}
+                          '';
+                        }
+                      ]
+                      ++ settings.extraRules;
+                    }
+                  ];
+                })
+              ];
+
+            };
+
+          };
+      };
+  };
+
+  roles.nodes = {
+    description = "A node will expose metrics for server to harvest";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          exporters = lib.mkOption {
+            type = lib.types.attrsOf (lib.types.submodule { });
+            default = { };
+            description = "Mirror of services.prometheus.exporters";
+          };
+        };
+      };
+
+    perInstance =
+      { settings, ... }:
+      let
+        enabledExporters = builtins.mapAttrs (
+          name: value:
+          value
+          // {
+            enable = true;
+            openFirewall = true;
+          }
+        ) settings.exporters;
+      in
+      {
+        nixosModule =
+          { ... }:
+          {
+            services.prometheus.exporters = enabledExporters;
+          };
+      };
+  };
+
+}

modules/clan/prometheus/flake-module.nix

@@ -0,0 +1,19 @@
+{ self, inputs, ... }:
+let
+  module = ./default.nix;
+in
+{
+  clan.modules = {
+    prometheus = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-prometheus = {
+        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };
+
+        clan.modules."@clan/prometheus" = module;
+      };
+    };
+}

modules/clan/prometheus/tests/vm/default.nix

@@ -0,0 +1,74 @@
+{
+  self,
+  hostPkgs,
+  config,
+  lib,
+  ...
+}:
+{
+  name = "service-prometheus";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';
+
+  clan = {
+    test.useContainers = false;
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+      machines.nodeA = { };
+
+      instances = {
+        yggdrasil = {
+          module.name = "yggdrasil";
+          roles.default.machines.server = { };
+          roles.default.machines.nodeA = { };
+        };
+
+        prometheus = {
+          module.name = "@clan/prometheus";
+          module.input = "self";
+          roles.nodes.machines."nodeA".settings = {
+            exporters.smartctl = { };
+          };
+          roles.server.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = { };
+    nodeA = { };
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      start_all()
+
+      server.wait_for_unit("prometheus.service")
+
+      nodeA.wait_for_unit("prometheus-smartctl-exporter.service")
+      nodeA.wait_for_open_port(9633)
+
+      nodeA.succeed("systemctl status prometheus-smartctl-exporter.service")
+      nodeA.succeed("curl http://localhost:9633/metrics")
+
+
+      server_ip = server.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+      nodeA_ip = nodeA.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+
+      server.succeed(f"ping -c 3 {nodeA_ip}")
+      server.succeed(f"curl -v http://{nodeA_ip}:9633/metrics")
+
+    '';
+}

modules/clan/prometheus/tests/vm/sops/machines/nodeA/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/machines/server/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Z8I3ecNV2N2jed1sPBU+tI5r5qB2nVTO7aNyMxvp0ztujn8kXjw+thSvLGtRygL2V9rSmPJalHQf1IYUriXgCmYtfg5InPDCAqk=,iv:O4rSyg2G6PJWHURZ/BTBKmn1AVekbNBdg5137sOPL/U=,tag:4/CLfO50laZ8ljWkr6o4qA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWxnekYvREdZMTBMVlRq\nRmtCemFYZDhLYU93azc5czdoTVUydFFUL1JzCmo4ZHlrNi8yeW15N2JxTytWeCtk\nbjRwWUVlazUwTlMwc1RZVU8xYlVlckEKLS0tIFVPeU5KMVFwdExFT0wzeXZka2Jo\nSmxEM2RPTWdoZXJxK0dpemUzVkNzdGcKfXdiSeAcNwEZi7kh9c89ss5K+dYG0lhq\nFsf2I0A1csxqqnYJqXPmwlVGMzuWDrWRU0uc+hQLndP3TbadVux64w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:43:55Z",
+		"mac": "ENC[AES256_GCM,data:OCPR2tkbN72MdaczO47UNCJBb1KjABHQH9q7dtVEwoAhKg4QWFtsDaMwBTVE9qe48nlaWQbxT1mM7uztm6RXLkc5y2c3danPUYFj/FK/ffqpaxv3oReyxWqMoGayT23kFbB0TWEx1K8Jp3gOkwCPg+ZRClvhV1dXrfnwIwZHrBY=,iv:3puPIWFIxRF1KtrmyG54LqCc7Zg4/AOMD65QjYdN970=,tag:RoIVltMKw7WUvgW6sNk6mA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Nuq6ege3HJOxpRgA6fnxdD2Wj+KCw+3PaJCxmZirJl3mkRVLnZgUUhr+gOVEup9Ifjl1ZnP+PqV7b9pPR/WQg0LARYtxIC1QGJ8=,iv:v9p9lsefP5V9McAJCzS7v9sl8XHr9/hAL41XwFbwMOA=,tag:ETK+CFFJAAzGTpowQNAZMQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN0NEWFZoZWlyeUtZc3hi\ndnVNcHl4eVVHckRLeFhPYUt4a3BwMElFMVZZCklkU1NEWVVmSGw1NmJmWWkrVHFH\nVTN5U0x3NXdiQUJCc095TElzMWZCMXMKLS0tIHRXQkJNREFYUFFvMXM1Sk53VW5z\naTRjMXozZXZiNU8zSkF5d2hhdklBY1EKWwsPi6YiHKFfAyqWH2u75hw47gzcQOz/\n95Im0FgadhqGDCeZhTDfEAc4b1VWQULInsjeRapzf5OJOwekbz6guA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:26Z",
+		"mac": "ENC[AES256_GCM,data:mTKFSBFnUzu3rldQCHPZHoyzDdwPzBWPIAhemC1XyG5PiQ/OczStjYaLzZQGCpPvOjBb5Ntqrc+dnaOedZgKlOdaPjZs1U2ZDWadoeWQ2TAKWYA6+kN7PXomsxtHhntiaujMy3502eh06VyiutpVuCdzK2cfEwuno8nyIcHgtXk=,iv:/5DRvFVDQA+yd8m/+Cyxb+aIsfwoaFcV6KRQ/7ISHnU=,tag:z31P6CL0NNRlQThqwapVNA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/users/admin/key.json

@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/address/value

@@ -0,0 +1 @@
+204:b10b:6057:4bbe:2b44:fc58:c6fd:90ad

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/machines/nodeA

@@ -0,0 +1 @@
+../../../../../../sops/machines/nodeA

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JkuciSmL5nmSjcYn22W7iHKzuRxWMJ5dixYllm0aSM7DsyAp9mQzIYJJmalepp7sEhSJ5As3vQW6ZpOQ3G8ZheG06++1GlM8lvVV2FKmYvKHQpI+V7WyUJl7dpfu+5A6BzWES0GbC1g8l/a8sb/+jjEoqUTAj/4=,iv:tehdHsdm2uSRAAzImHhwBSnSBF6lzjLzF9HIPnoi9s0=,tag:dWnQhAiJeCkcssjko+dUpw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVmRSR2xDNmdPYW5MNUVH\nYWVpaTc0TjdOZFBTSEJDL1Z3VG9vVHkrZUFjCklUMUU1bnVmZFJYbzVPd09oZm1U\nNHY0R1hNQnBBc2V4Y2RWQ1ZZRjdOK0kKLS0tIEJkSWFaTDJzMDNJR3QwQzRVdld4\ndDA5ZmZSeTYyVUE5Y1Z1T1l5QmpHRTQKSaN+MIazA8RXhRSyFSkDTyXEp43COpbf\nXOzAhTXja+ut/akUuKadDS4xycZ+ZXAreVmdsF4SWvwZkmPeew+hKQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNmZkTHlaRWl1V3UvcGxk\nR0hhL1lNekNzb0REaEc4bitBZkcwYmRDb2hjCnloQTZUL3ZneWZQZk9NTEc1bGNB\nY3ljdFRMMUhLeDdyblhVY3lSOFBXc1UKLS0tIEJUc1ZpQmtuNlRUUEVmajY5TGdP\ncSs2RkZXcnJYRlEvcEtYSWxIWmkrVEkKgQnfxuZuxl1OpZDUPVuqseSN89WnBGFw\nx2PI3cqN67R2tV/FEjOZo+GFgxW93SYdMvxzg2aG2q/7xOQxfj9sjg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:44:25Z",
+		"mac": "ENC[AES256_GCM,data:gRk1t7xFxXSTUcZQw0DCH3QtRnQJF4Mc4kZeeckhuQdc/VATj+cq+ugicrcGJWbbXzAscQLG6g72+Qiane5nFfzmjNoO6JMe181wm7pY/5St+2MjXZEzwAaYjn6ZAm+U7aiUVcp8RBjFIL9HCvBF8qFl7rqqTvYHnTOU0V6TIIo=,iv:eUvZFDKl8PX5QaQPmwJXaokawQMNP0TGOklTAMgB/sg=,tag:3cHICox8bKWkPKMUgvLuXA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de

modules/clan/prometheus/tests/vm/vars/per-machine/server/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/address/value

@@ -0,0 +1 @@
+202:8a70:e215:f822:c67a:f191:b04a:a8f

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/machines/server

@@ -0,0 +1 @@
+../../../../../../sops/machines/server

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JcxiDqZDX3J3ooSeN0pQ28uvI86mtHUf2BEcOQdFIDhJZODGCc+BhZvBQmu2mabV8Jf4skrTWqD+60c1fkRcsM+MMXfoyNsrRyQ2K39mG4kl8jJKVKDs+BqXa+CvZ96kesOMgi9vdc3YUKo5cCLY4bQ9VwymqH8=,iv:W3z8Pbyo2IMzkxI4k14FlirLa28qgZ3rnTAWuusiw/0=,tag:EQc8mo/UvACbt8hQv3zPEw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRDNOSU81alN2THNQQ3ZW\nbHVjMmxaYWpzak1NZHplNTVzZzQvMHg4azAwCkExb0VLYlZUd2JjVGNlcXUyR0p1\nWHk5cXpOeGZ0VFRFTGllQWpxRlBTRk0KLS0tIDhKeUc4RHQvb0o0ZXFXZUNCanVY\nYm04TVBoWjlLT0tFOHRnLzd3RHV2ZzAKVpLtENDySGC6UDgAwhDb+7KJiHXOZF6n\nIaeIQWQqiB+45h72NE3yh02boPK8pl6IoJFcK3e4zSO7/G8jGUp0MQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSUZXVzJwVHdwZGtxOVRu\nN1hMZkltdVM0cnNRL2tSNENkSGV2VzFIU1VBCmRZWlJTODNPMVRjVWY1V1VZcFln\nTDE3N0xsMXdMWityRUNUYWlQOXBMMTgKLS0tIGViTzBrQk5wQXBYQitIb1ZPUitC\nLysyUER0UjFlZm95c3ZGK3hEMEtrNUEKABpoKBUnvzQKSrgsdnU+uyDyED0Tlr7D\nnSsf12c84cvdt0OeCWwf2WvBANZL26XTcFq1fBYOFTJqNLs1ZfO2kg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:55Z",
+		"mac": "ENC[AES256_GCM,data:jjhkZB9NdpvV2R0k9yS/AcUqeMr1RLv1UZwGCemlKSwhBfs8E5NxTXLhtmJeQ+hltOTYpz51BIporVtlaH6ElVnh7khOrG3Lb5cLBrL41QM59y3Tbfu6TjNOE3NyMiWuxZnwuqUGWQjsjrIIhE0ftKnpSpkGHMie+BC3iNSB1tY=,iv:onOVK9eJxWOaIjChQD54tz8lY+r/jpp6AArsBIuoRUM=,tag:2Oas1C5D2kZOe4iiD5huyw==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8

vars/per-machine/rigel/prometheus/envFile/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/envFile/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/envFile/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:XQ==,iv:f690VBEGgG3saInlNE3a1qQ1M277VYR9E1h9vY9nQbk=,tag:bSo6UjC3gqTTaTpurhgNhA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWFAvUlNwNjlFd2t0Y0V5\nZ2ZUV1hqd2c3UVhHenJXcWp3eHhRdUhvRkZvCm1ENXdKTWNEdTlLdTJNdkw2aStG\naUZJWlFQUklGdENRQVJPVVhMTllvWWsKLS0tIG5NYStxLzVNNTNTam16cTVGdmk3\nOXFvUFZNVjJUVjhLSDVpdDVxTGFweXMKuMr3TBUMhaZgY83K56cY3kLlY8A3c6Uu\nJQUFVVeQeqJEJJ8XrO4af9gmsNlA8b7JuQd+Z4UmIUV3yYstPpu78w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyRlI1SzNhQ1hMZENJM05D\nVUNCbVUzaTk3Q1hTUDRKTlhNbEo4b20vZ3dvCkpKRzcwK2dDRjZWdkI3TEEvUWtC\nUTUzOXRBV09lS015UXprTlI0KzZ4QTgKLS0tIERMK3YvdmZIYXZUM0MzWGVLVTZ5\ncmR0bEdJSXNqU3ptdVcrcGNqVlJaakkKNcTljnAt9DVDkJ5xlJGxdTgWhb18jQBI\nNdZBgEz6kN9F0M8fw2mFZ8sgErqwRrGOQMpDySjzfACOxgBWC3WdCQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZMT1UrbEtF\nT01ELzV0MGtwQVhCWEl4SCtmdnBqWThOdjNxNVdRY21zU3MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4STJGa3ZJOXVrTFhvV2tBc0Z2S09U\nWWtuSURNQ0pTRCtQWUkvMjR0c0xRCi0tLSBjSXp3QUpETTI4ZVdGV0NINFlGb2FT\nUFhZWlFhY1hja1lSdDJNSUNhdi9ZCh3aPXElrsyRsJ379AS2wVFt1PWE/BbA+4Nk\n3FZ/KzU1EUHJ1FXiNJIFISgJdY/rwY3gaOmNt/9H2axodm3WvSc=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDRrTktRMnpr\nSnpHOUxxRFpmOTVBRWFiVjc4eFdVZkRYZW1tUUZFOGU5UWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp5SjRzS2twcTNXL29FRjVWQ2NCdzBk\nd0VJeDVGZHVnZ0FSaVQveGxrT0lrCi0tLSBZM1hHUzJBQ2gzdlQ5STJHd1kxMit1\nZ3VEK0FJRElsVnBodTh1WW9wVkswClZWGWkBEJXQbRKzDSA7NMnAjX4t9WOM6KqR\nbxj+MqvM6Ps1oP32GNHOXtQeoLcj4D1lV8iFkn7WdolvVWjSkEo=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJoM2R3WVFK\ncVJtQ0dNakE4OHlRS2pqOStWb2tMTm1KZDM3SUpoUjhmeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo5OTBCc2c2bVpLcWFza3Fxak95RXNF\nSE5qNTFFSHgyWHBlNjlLUlcrbnMwCi0tLSA3VnJVY1QxVTNSTlhkWHoxNC9VTmVj\nYUNvMTMzak4raHE1OVUvNUNoajBFCpUxBeSeyCWAngZcs9tzWTAOsFS2//9hKbmz\nJEEpzcPVqeUv7fx5K42FcCAWg5QBs6UvgEYJWBhI8N6NDRpcSfU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4R0oxdjVRS0JrZHdhVUZh\nNmQwR0pkdUtJb1htWVI0MUNldXBHZHc0dFNnClZaZzBBdXZyUlZhNGkyRkFMMkdq\nLzROL3hiSk5oUzFSSHBWRzg3RWhGdUkKLS0tIFBzR3RSYVlMVDc3NmpUS2FGWWNt\nYjZNN0ZCNWJjTDE2bEM1L3N3L3hpcEUKeO8xcsskCEK+5l8GyP63mrQdDNkSVsKd\ngMishyxOB7xEuMxWOA/DO8FaZeCuP2AOPpZlHFo7H1ez+8py1Bc9sg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeTc1Z1NEajdSRS9pM0lB\nZjIweCttNzZjdjBMaU1rVzJUeUlRU1JTcHdnClBDK2lDVHpxM0d2TjdLOHNBaTJE\nY25iRnhNZUNsdHY0RGRma2RUTzdrUlUKLS0tIGtKdmt3RUsyVzFkWXVWc2dLODht\nU0pZQ3NYWU5XTUdQdEljTGdQdGdEdmMKwkvHr1+xle2ZIaW/ghAEZrqARc1Yp7BL\nnxnaDYJ9At5JDE2772WplR9m5VwVIhxs3F9TthNAqX5evIIT29XJEw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKajg3eHNPNEVyOU94SlpP\nMXZVMXJZdDV2ZGhEbTkzVUkrQVpQbmMzbWc4CnZTYlROUXVUWTVRN0Q4aWl2dVdp\ncGYrSW9nZm9pa051N21oSURNdVdiQk0KLS0tIHEvNEdBOXFvOE1xd2lqUkc4OUFF\nYWNGQ09Uc3I1Z1JaNmVoSWpDTXR6ejQK4aH4mY9xyOTKlOX1FbnRKSa5nlLFFZ2r\n/2a9T4VITbn2rwsRDAIQ8ahSF6F/gX9bGaoEfV139tksDLKiegwDuw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSm94NitKV0pQUms3UDQy\nam83TjNWeUcrUnc4SytucHJzUWZpSXk3ckFZCnA5cGhaOWxqWEhUYUdkdHg3T3Rj\nSHFmWkJOak5QYkcvQ05nR0ZWRXoyWEEKLS0tIGZJa0RGRGtFOUZHRlYrWWl1Tk9j\nZWdhZU03MXg4UDFtRDEvTTZZNTFXU1UKCjJiKd53R0b6Nfy2140TfrSxv2ay7ayX\nbbGgfGOw5/ENiZFvzYDgaLK/qi7TFAXFxPXiV+vXD+yJ6pw4TrJWVA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:52Z",
+		"mac": "ENC[AES256_GCM,data:1wtp40HFGQEqZVl0qxU6dFk1zHB0XjEHwqgbkRxeWjxeJaZZsRcDvfHSd1FU25raq72malUcoNLX8l/SffSpo0VvM74x3Yv+Yts7rRDMcodT97RLo7Xlz8WwVQUTYXt6ngzmLMOkZs4Ym0jHszfSNbv8udaVQQ1Y1AWJak8DSSM=,iv:rsurQo48x0MFbvWFa7Bhxpi464aNk2lUTm71TRkCOZ8=,tag:e8Ulz207nxxdOXasjPIZWA==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/envFile/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:jKGJLrlCqKb/CDVTE8PpQ2HUyYV7F9tlTfFmiQwMZImru6wb+TB3/tiJVGONhVcTOjuja9B0HurZtuEjvhNZTqA=,iv:idYQmO5wrCB7QYjP7Hn6LshfCWfGYu0J/gR1GMAVjPU=,tag:SBud521kzk0n1wLr0LTR6Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzL1ppL3Y4UFNEWlQ0ZElM\neG05NG05My9uMU16UjgyK0toSENnYit4Sng4CnhNL1ZqcmxxWlQrdXlKdk56OGll\nUUQvSy9MT3Axb2hMd3k3OHNxUkd3dU0KLS0tIE9kT0dYUnZ3Tmtyd3kybUhSNk1O\nWWROSm9GdXNJMmtjQ2w4RkY0cVZkek0KI/iVecApWmmVlQfqBJpwiGqgZKaI7aHl\nYxHmCHRiCzFyOq33YvJlVh9eoVRSyBDWtj09+YsAAR+b6NfzFhUSuQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXM2g4ZFVBanlNU0dIam1O\nUHN4dE5MRy9ZMlNtMXduQkM2a3dydXFCN3c4Ck1zTUphTUJ5Z1VCa01ENFhhQ0la\nRmsxbnByVWRDbzJiQ2M0RUxGN0xUWU0KLS0tIENoeHlhYUMwR2F3M1lNNHBxVlNh\nL3Nzb0R1M1R5MmNMclVjTWpvMy83Q2sKghhERvhy0Jg4MUhsWsv4kyBkQLRKP6kJ\nMrv7j69aVPBw1qitl9ma24Zvrlm9MKGmMPzCMQz0/lgaoHuSS+gm/A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEo1Nmhrek8w\nV0dFR3NXdlk2dkU0QVh2N2hMSVNLekNwUStxUEVheEJ4Um8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpRWXlYeW5JM3E4WUNSRXVlT3NjM0hv\nK3MxT25OYkpMWVYwQlVBNlo3Qng0Ci0tLSBGZnB0Zk5rR0YzU0JhUGtyNDZZc1Ru\nTGp4Rm5nTkg0MFB0RHZ4UU5TNFVvCpz9KE5PCUcr29z9ToY2hZVcLkG7JIdcJYXW\nC0cD9uKDxhKFpqRcWuuwDsMoAGjflx9srzR40ZrRkrBVDxa4y1w=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBRd01mWXFr\nMFZPYktsbjRWR1VOazRBRFpMTGRkV0ZWWXRPWGVsUXM3MzAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpDcWtuTjJZY05vZGx4YVJ6WmtvN21v\nTHJRcTF1bE5TM0FxWVdudEJVSmg0Ci0tLSAvNUFIS3pGbm1HcEdsZHFIS3IvSWFv\nc3lqbmlHTFhIcVZxQU1EbTZLWUgwCq4Y3O7VMIVcx9nS72nbkjQWVBLrqYQh69Ce\nZ0m+vKmM//pzQvfSkOHiWQpgEfo5U3wFXwmAdNObH2AexQC09ac=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVvZWkzNFhU\nRXZMK3pJS2JDVFI5TzhmMjFQcFdodHFTUzBPWklnYStvQjQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwowdUxCQzFQWS9ic3QzTHpPZ1dnWm5E\nTHpzc2N3NTZSL3lta2tIakFpN2lNCi0tLSAzd0FyU2hCZy81ZDV2cEQrSHRYRnh5\nVmZ6YkdhdEVsUnl3NlZRREJFZUJ3CllrGYypYfWjYDliZtUdHDWyXCxJygclh7R2\nubGeX2TxXT3oHQoVZFt/g3q/SaFLkvQSKb6eoJ21FTxmhKL5Wbw=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvbWpOK1lOVm9IZkE4TVJu\nR0ZmSm9XOVN1MjJkdmpFZTZjaHc0a3NVRm5NCk1YU21DVUxOSmhLbWgwTER5MDFJ\nZGp3Q2VsdU5oT05sUkRaVjVVajV5TU0KLS0tIHR6VGpEenErdVZwdE5OclpLUXNo\nSkNreVE5VXJyeU9Ja29BemluMVlPVUUK2d1jSsh/G1zbb8Vx6SEpmTLoUbw3peRm\nxihaBgo5pvR/+TLZzq1Vn2mxtF0S2JvdHb0nxNTzrS9y1LM+96GzTA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQ2Qzc0IyQVZMc1F0cUgy\naDRYTWRRV1J2eVFxNVBIT0xsSGFtYk1BZFV3CnFxN3A0THE3a24yc0FnbHNIbWJs\nRDVrMEt2TEdZNHNPcDdxQmZWT2NjS2cKLS0tIEoybjhyVVdWOTRENkNwZUIvUnFW\ndk9oTFJzQ0oyWDQwczluVlpJM0E4aEkKA+O7f8WoGAR2XsqWcszqchnyt9A+FQiH\nprjCvyqs5gI9f0GNnyEb0P9kINg3N1KQKTwc7Z/vQ0e65+0QZBf1xA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5U1JNc09WKzhpaGRSOTJW\nZ2NjeUVWOGQ3cFl3M2pQUEN1YWFVVkN3c21BCm9DWnozcmJ2YndGVXBBcCtvNkxI\ncTNISWh5M2V1UDdWbkp0UkMvcGZWZGcKLS0tIEo0UC8yYXlianFtRzk3NFg2Nys4\nOTVaL0JaTlkrVjdURWNqaWN5ODRkKzAK1qVcufGhRdv4M6LyJNuJcDjLhiy2eVeq\n5N6n1GW54fHDzWQc4ObvePA+CiWvJjwvYWcimPdzkxeu5yUy18BqQQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKbUV5bXBwV3kwa28xOG1v\ndkdxWUtLY28xdEV0emx0RmtoUmV6TjlTdlhNCmlUNk9aV3lERkpTZEFUOEpuYVB2\ndFp6S3VwQzgybzFPMzNnNkxlVkRvdHMKLS0tIGZ5MXNuOVRudUd5dy9SVEpEanlY\nSHNuUG5tUVAvdzJVck9yQzZHNzh2VkkKZ4hWv/E7TjXkmd0HhmGqsqjGCcjTIRgN\nnYtyEwoep/EhWQoEEueWT6d0R5Wm4cIcb+vbST3QNB5lOb6KBhzucw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:52Z",
+		"mac": "ENC[AES256_GCM,data:T9qbqOKRsNL1qD9JROq//s7QuGjpqf+9C78Lrh/e2mbyws6sAEf+3Bx+NVO+LZNv5wDgkphpmyOJkokSRzNYUQi6VqpkOUXoKJECCRCWqOEv5JgJFasL4x9Uxn0cBuHFchfutEZokQMBibr8U0fR7k6UyDNmVmWpU5vCGcQoQT4=,iv:n7krI9vptczld089e3SQkYBs0wFAXtBtFY3y4VYb590=,tag:DXU0+bRT8Ow3siGplePQMA==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:2+r0C3GzeILOk03VZqx6KZJL01PJfOdmEdF8K2hMIGCNFMt/qr/wMl8=,iv:v3ellcHsxTo/owEIwLpw3j39c953MwJ2L/TDzQkQfwA=,tag:iW7E4M/lDQ5DrTaBqv1r0Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArMU9lTWNFR0VHeDgzRjVU\nTmZZdmdNcGlsRG53NndjcFlsQnJ3MDE5OUZZClJVODRJbXVQN2p3Z05NTHNNUnNP\nZmRUYWxkRnFLZm5Ganhpb3crRGZzREEKLS0tIHYvZDVFQjB4YVdkb2ZzMk1LVkpX\nUE11M3VMT3Mva0ZYY0lmOXdNZzI4MHcKj2yfol8ZKSFYgtTGTmEGhE4MVruS1bgy\nrSVY+ffodAhWvSZmhRE4VlsTBrI38X4yth5qnaYB/IbuD0TCJo5KcQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBUzFEeXRxVWJqb2NjWDU3\nNDQxRWE3K21XcTFMdjFoTlZWRmNRU0NyVFM4CmZoT00vTkF3cEJ2UnF0cnZEdUp2\ndng2czdoUHg3UkFEV0loWnZxMUZGMDgKLS0tIGZPMUJPNnVLeU5ndEZ3TjJRbmND\nMkdUU1ZlUHFqNjRQdVZXTy9ibDdzak0KfCS0Br4rKzOaaKan6FnVEw1DPN+pSphN\n32dtpGhYyKqiASTRjVM2n9iIctfgDkx8BdAKGbYspgsDT6BXqBc8Xw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGU0djErUEx4\nbmdqMlBsWllMYjN5L1BLeWo4WE9IOU5Ra2JNRXcxamhMeUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoTlJIU1g5a2I4N04yN3pqcnZ6N05R\nZzN3WEd3YUJLazlETlZMcVZHN0hVCi0tLSBDenN5SDQyMlJKZTNkYUFFR3dLT1lH\nMTdqNHkwc1ZpdDFiQ3FhU0xWUGFvCjbASZ4dw1FmtdWATxvv8kI6Sji+M8hY40ah\njKXpFxVWyqxEQV9h4/nEd4Kxguv1wEFHS7vZTLdI6s0jau1oT4k=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFhyRDViK1VC\nQ212eG0vQUZUMjNhcFVlZnAyVnhCSmpKS0plUzluRktDeW8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxelBZZmtUWU9ReER6aDYwVUlzYVVO\nZkhYUWw5cUM4WTdpekZnbC9NR3NBCi0tLSAvcmZBL3lpMEUySmNGUmh0Szd3WkhV\nWlF3U3pyT1dzVzlnbXArN0dkKzlNCo+M506bAM300pHkSBQ3BHW8bNuJLsJqzG56\nWpnh6afm4kTsQFIJxJ4M+2PAeNi8SspVEEB3tcorKxesJViNnWs=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDByTHMvRklq\ncGUyZmZLazBaTVJJWWlHZWIraEpPSkhYcU02Rldjb0lzUW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYQ2doeFR5MXEybnJ6SFZ1aSs2QUNi\nN0tXUWpmMVhvMHRHR2xHUWUyM0Q0Ci0tLSBJZjhyK0E0a2pHUlVYdFVGSnBaWEVO\nazBTQ2d6SGhrVzJiZVRxaENtN2VFCqcT7QRZYWTw7ijJDdE0tsGIO8YrMH2CwedE\nHJWAwbNRPmjHrbl9wcONkymYBrp7dtwg6JSFFavhVGIFWG9cprU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQVC8xUUIvZmFxOVRYTEZo\nMThpWU1BUW1SSUZnM3lXYzhVS0lvSUhmZWxBCnFzUGFHZ3RqQmI3TklSK0NTUHU2\nMFQrZXN6dUU3MUw3TEJCUlIxWk5UZ0kKLS0tIHdlaTdyckNiSktOUy9qVEZRdmND\nNEpLZHpRZUxrSDFwWVJaQmFmeE56SlkKaJGDEe9kzRcZnlFFBwcuwmPABlePnpvC\nroSVlSFNS9kvCfyRC8fq2ruBh9rsvBOYbpXzo7/i2CJ7VQpy+pVcqw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcWl0bHc0elY0Q0JieE1T\nYUYzZC9EYlpvVjZXV0I2QjJUR2VuU01tL3pBCi9tb0VtU3FzNllLdVRtWEdTbGU4\nUjl6VDU4RHRHQkNFUkRscG9TT1BvVTAKLS0tIDNyTjRIVlNGNThCcm91Ykw2NCtk\nRUtnZUNYOEJlVTFIbWFpU2JBUWlna1kKqYAHYkm1JvEYLkf0hGyjFapm+8hpAlux\nuMs6z1grw5gkmfsBAK3/Byoc5QiRoILMbuO50xMwv0yDmY7B/FvcBA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSzBCRWVXVDQ5SU1EY0dh\nWWZhSWpyWFNaMyttN1ZoS0lacU1oR3psZ1hnClc1NmtiWWk2ejNnd2ZPQ1BEUnh6\nNUlSeERUZFRESHAvWnByK2JFYlh1ajAKLS0tIE9nMGtEbDVzVVRvMk1qdi9MaEpP\nc0dEd0UxRm1aSWN2K2hqMW1Pdjhwc1kKetv/ihHoxnrZv0Hxqjcib4zXeRMzXAJB\nDtzaeXVtt3lDokBEi7ekwxLEhPICd8k5Ur4+ja14l7P5O8otvqGobA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTmQ5T3VVUWdmYmRhdTFL\ndy9hV3M5N1ZHeDNuYnZoL2lIQ2xFMlF4SkJJCi90bGMzWThKTlhoV1Q2d2dFUzFm\nSmNvZy92UjNnNEtiRS9GWTdma2hSL00KLS0tIDVJeWtCK1NveDhKYTRGaHJ3ZXhT\nYTRNWXowaWJHUFdOY0VpNjY1VHB5cGcKWBXUuirkPCSeylhyk+rUderaPOEyLO0f\nGeKlXJlBnLfleID4Zj55xf9PeJvY1r5uQHlyfijVY6APaT6cjsouwQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T03:55:40Z",
+		"mac": "ENC[AES256_GCM,data:kQN3NRQCHHpr5XGRe6tpJefqueP4JX5t+Jwzm86EftDPJc4ZqPCXQAUr+K3328afkNCE0lEs2DHJTWL46AaY13211FDcVRJXbEDickGFXt9pz1wNUb128Q7k94Qz6949k5/prGhAGu6/65FCn7g2y/fJM1/k7L8Xx1eKfhGmZQ4=,iv:FK5VCj//NfNHPrpz1pb8PPYe7cbuprUR+fioUb+IrR4=,tag:wUDwgIVkku0C4j8U6++XuA==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-urlfile/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-urlfile/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-urlfile/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:GtxtVBjBdyZeo8AqLC/VS71V8nksvSJLh9HJUNzSq2wia1ma7mxkJuUYAbzWXkgMbM/L1xA8FO1Jf9oHqZQ5JLpKPbaqxsLZlaPfgCMV8RKCCgNvj4y0Zw/K4td5zlK2ZbhClDY=,iv:ffVEbP3IO8rjajV1Pfplhacu9jTRONaIBL2jJhTb/ao=,tag:r3y55pyxDcwqMU/fD9eZlw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5UzdTdzV4QTh6WGRxRE04\nR3pmekRnVEJWNjVlUkxuWktKSW1mVzdmQTBNCjI5ZjJiaDE1anhRaW5wVVJLUy9Y\nOFMyNDU0QWRtZkhVMzZPT2NEdGZ6WlUKLS0tIGRGVnhpU0pBem8wM1pPbEJ1RnhZ\nZG1pZWVyU3czM3E5eGp3Y2pZalVKYncK/SrbcQlYGMCTUnqFV1u7a9+rLG6ixPe7\nwjKA3Tuh88rbZXz5pWrYuv0swgGJsdi3kp5gGvMWP/EvCV58xTKqEA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkaTdhcjBqeUZKMnVBT2Rp\ndEpKQnFkU2R4aGtVMitRaEJyQzhnM3BGcHhnClRYemJ5VFlBNm5CN0Y1aHI4Smo3\nenN2T2NsNzBRWHdySFJaZ2hQN2Evc3MKLS0tIDMwdHEvdmpEa1NCby84LzBZVWdG\nOENBR3JuaVZ1V01PZFlnREVUUmFITUUKUAY+1S0uq9uVvGqvUoanfupapEB3jLAI\nR6tdwzh9wI6Zb78i2FFQuS3iQURr/kMomBkxACe6sk/L54uIGWHu5Q==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJ0dk4vSVhl\naGg3MkJON01kWnRhZW9id25NdHNVbndlZXYzWW13d0VYM0UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp1NXd5ODhvUkpxWkZNalhEczRoT0xi\neTNnaE5lSW5LN0V6T2I1ODk1alVjCi0tLSBWYnhHbHZiMlpQKzIwU1Q5cTB6WXVm\ncHlUK0NlSXpVNEZXZGcrYURzVTlzCozH2Fp9sBCiq1/BkVMPTgiOLCI4JIME3H9h\nP1c5G5a9FfFOeiKry1+UrL4sgQzL+upVjxZhJKPhLmXt0sZBW70=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpibTZUUHor\ndGRLZ1J1NlFqZTJEYVpQK3NqRG9qV1JvY3dvYzhjQkR2aTQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpoWW41b2taN0RhWE9UN0dWdUVOUVh0\nZjRoNTVlQ0NsMHJOMkhtcTNNY3g0Ci0tLSBjNjZ1bTlWOFcvK3dFZnNnbzNaNzNm\nN0xPRU9hdVNoWnYxZWxTMW42bVlvCrt3vrG7BbU983ga6mONomW7BP9C+X5aq2dR\n6KV2j/q1UV68rZ6msDrMZlgUnLmGJu4v1JcanCifi/R2W1lCSb0=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpEOU9BSko2\nbytta2tIQzV4QkN2blhDQlZnL0JEZlVUMlpkZ0dlbjJEa1kgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwphZlFLWWo0d2hDcHorSy9ZekN3cWdR\nWUZWd0VRZDRORXhKSFpySEcrRmZvCi0tLSA4aUhkZ1ZrZ3lFZS92L0EwVnhxcHZr\nL2hieGJEeEtHbzh6dFhOQkY0N3VzChN5tjuxaPZtUJ2BqDpyhC/5H3CTI9RrP3Ga\nVs8Ye1GmwmkFeCLOeQFPdwQI/dgSKGjtPKqB9MIYmiJd4Kk9O4I=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNUROcjVleEVNZzQ4K3RD\nRHE5VjNOOUoyZS9Mc083K0RpYzFLb1BPQUYwCkpjS0R5eVorRzEzTi9hUzhyT0J6\nRkpycXB1VnI0aCtUajlEQTRteUxvVW8KLS0tIFdUMkUwMklLMkJQZklZQXdORlF4\nYWZoNkVvNkQ3NGpLbmxpNFQwSENJa28KuYjqVmeGwguUMTka8LWfYPNKMxRsk9cL\nOZyHoHVle7VC096VrQ9lQiNNuRQ+V/UXIHWJlPpus9I8BG5hMqgcoA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ZWFXNWNxRk5YUFhjWm5I\nU0ZDR2lHQXN4MCtPbDVBdWFoUngzNTNUOXg0CmIzMi9JdjBYWDBLandFSWpqcVRW\namdwbUpHMGw5YmdsVFZhQ0NCQWpBVFEKLS0tIG1BQ0FuUHRSVC9DMHRPcWhac2lE\nd0tRMXdCUmI5TWJYRWhSVkQ1L1YvRWMKvkLrqRQ5g8830aNZUtwYhYWr8+I5X8u7\nLJRfPOrlmRkYqrWzgtDzMEfa27gtHKgLPH5+F2rvtS9R1XAC/aDDUg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TU1nQU4yTDV3cElucUpy\nNGJnZHJLS0VBSlo2dllCZXJPS2ovZVlCOFdBClJ4ZHNDb3p3MDJMWnhGdXBJT28x\nN0dUanVnYUdITW9ua2hnR3hmMHp0aGMKLS0tIHB4R3lqbFBaeWJrNnZjdi83aTQv\nZG90SEl0d3J1bGZSRytCc1gzeVptWXcKo4ZO9xm1gP4g4UnVLORfKFc4b1yGeByW\nIT6CN0Ehl1MdmsAV+c8OdYOTtt3cAiNgRQO3cwLICcFLg7UGXbjR2A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqNllsY25ud1RSOGJSQUg5\nbks1L2Q4ZFl2L3BYSnZrakRkMzdrTHpHNFRZCkI3blpSaUowSEhDN1JZV0J6MWhh\nV21kOStVeVZ2Tkk2REdUcVhpMThXT2MKLS0tIDc0RVhjUXM0d0p1Njd4ZGNzbDJo\nY1ljamR2cWw0aWNmVGpDVTUvMnloVGMKU57AUYYAdnliW6YhuSMoAuZ9N/nuvmQZ\n1UnPvjXTdu7zxSya69Orm9BCmhR+ci/wr9RAgFucpS/y5d38nviwGA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-19T02:17:53Z",
+		"mac": "ENC[AES256_GCM,data:9GFeV2wY1cl+5dAEwqOVTWnFWPw87B4X7VwuP/NViExx7kr3zTX1T2ExsENViVSLWALsETTX6HXWawUuPP3sO358MeQImz7C4eSdCfuSQY/49E4YMUgBExwNJQgWyu2YJDuTcMdSIfw+FlYTzCErTjZJobtcElH6i7MhsgOJLXE=,iv:sBQnyEcyMl7d01leHoZ8LTef9EWaVZspCuO5NqriTB4=,tag:Us4k8RgscyXWHbPXvaH0MQ==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-urlfile/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/address/value

@@ -0,0 +1 @@
+200:a785:5b01:5309:ebc0:3942:2a48:55f3

vars/per-machine/vega/yggdrasil/privateKey/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/vega/yggdrasil/privateKey/machines/vega

@@ -0,0 +1 @@
+../../../../../../sops/machines/vega

vars/per-machine/vega/yggdrasil/privateKey/secret

@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:lDcpnZV93rkYascekNZS4PZfiKNoDfuEsKePeWIWe4iQZ3Y8NOXcxiOQMCSXNPIwsh2N7lG5+UtWidJ7dDenoXD9AwCv4STuPL4cXi9flgjozgYbW621Q//9p0jqpD2Xxq8R5TqO5WtZeQK9/cOdyJlLTqUPIKw=,iv:1aeRaEqTOndGlRpIZ9sI/BNNFtKj04aBPqXHbYDzN9k=,tag:JbApghVPv5EbSX06tVW/wg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUW5jNmM1YzBod1VNQ2tW\nT1VXUENXSjV0RTIydzNpc2k0b3Q4UjVLdGdBClVuVC85L3NxcmhScGkrMGF2czRr\nV0Z0MWRhaGU3TDJuM0JNUFY0YW1BTjQKLS0tIHlaSGdGVmJ5bU4rZDVZRjRpQ3JS\nekZQZEh0OGEvVVdwS3FBellzWGQ3TFUKtkSZgRKFFMCxOIDlXk9r0/GnfH0g2moy\nGbTbC5EfpBHEA/MHuIQTwOngPtGmEjBsVThIR6/hp1ZOJzsYHOhUug==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYWJsMjA5K1N1eFNSNTNu\nbzc2QSsrc0hwQ2dVSzgrSFBDTG5MaW5OUFNBClptMFVtcWlnakFuWlIvck0rc3Ri\nNE5aSmJiZEJlWVZ0enFmR1VFaEU2bmMKLS0tICs4MG9oR0FYcW95NzdCT21QNHhO\nVFJldnB2L0srVFRrQWQzZ3VxZk9VVUEKf29mLBC36j3PU+jjY/g+c4pbegZhV5/P\n9yylea0RFXQzyaFGzjKgyiR7pfUjIVMOZBjB9sha0xRN+SPELpfAOQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEVXS2szK3d4\nTnJhYVcvZ0JVZWp4cUJDbW1mVXQ2VG4vUXRlRm96TkhOMHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQplZDkzTzltbGkydG1QQUpTb0lyS1Rq\ndHNoemNOREZLOGt3VFZxcnlFYzc0Ci0tLSBWUUYyUmNaQWpqNDlOa1grS3NsaCtG\nM1JKeVNBV1N0bC8rRnNOeEJ5bVg0ChU0g2KzUngIjjGrukA/Y9uCjHfHuBV9HNY/\nBHqb4wDjHFR9Usu0YvTKUoOoUiIDHvw4m6VCIuJss6gocoxAP8E=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHV0aDB1bXZx\nT00wMGlBU0NZWWVjODZqN2p4QnBrWXdzZGtEZytiaCtCMDggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpBZ1Y1ckpNNWM0TnN3T3FFaXdGalhz\ndlNKaFo3TityRkhCQkJTV3RlRFo0Ci0tLSBiYkRuNkdqRE9wRmx4UGpFd1FBYWZ3\nWHdzZS9YaFFaK1VUckZDYnNtZWtnCrD+CevFcifB+zIXE9p9qXjNV67Dy6/GzPv8\nD3t84N4A48Jt1dMZc7B3DkBWeX4Iyj0pb6Fbs1qhkuRmPMiSWzc=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDhpL20rSWNk\nMXpaNHAwUWRjeWhjaEt0VGY2aVdCVU55R0R6RHNBdnlPV1EgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozaVBTWlpKdzFhT1hvcUZPUU43dzcz\nZWFhekVnWndCZi83Z0xYZUVneWVjCi0tLSBBUGYrdmNuV25EVmRFbkJDeFg2NWUx\nNTFZMC9TVGlCVTFYM2hra25Ec0ZFCs1GjLDYmDyzx8VtlNkkPRaNc46E7Tzs8uDs\nCZYAsCojTOaC0IQVpE3uyeKuK/JW/cSnfgNNixYUyEd9w6g+hA4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRDViZ0FaM0lDaHpDYUdx\nbW84T0NicmpsYmIrckh3aWFpbUVnc2d4clgwCklvL3BENlY2bEJ5Zm4yMllNOFdx\nQk1QQ3JVYVRudXJ0WWd4dno2REpqcE0KLS0tIC9EU1dUVHlyVW1nV2FGTmNZeG9y\nY1l3Z1dQOTZ3eXorZUwySHlBRmt5bXMKVbcXButS420nTtCZQxD/AycDdIEbCA/t\nGfVk09V2+BhYG0WNhQ+0Xw5r8gtPr/9oBwyAIkms+pWkxVTOKDtWMg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEdE5IajFPWnJzNWRSWUJv\nNXpNZnRQSUZtbFNnNllNSUNSYmxkREZDRWhBCmFJeVRYSVRGcGxXUVdtaC9waUx3\na1FjdHY1Ym1XVWNHVXJHcGpKTnBaaFkKLS0tIFZNYU56QmhRQUNVNkFHS3pyRG5I\nMG1rczZKbHVxNzQ3VEplazVPQ1dkaWcK1QWlmY9AeEKkGLI4qlBp4fDAA4Bs4pef\nPN4CaKt7oON6bnjxfIURgezAOvkoGRrtbUO38UOVxjdYVrLiev+pWw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTDQwVVdQS01kbXgrWHBG\nL1JMWllLY25oQ1NtNXhleXdsMHBpOUExZ0F3CkgrR1dEcXp0SGRpZDE2bm0xZ3E1\nKzZxeHd2Sy9QMDlBTXlKeWRyeENIZlEKLS0tIEd0Ky9oek5PM1dmS09vOEc4UTg0\nRFdrYjJ2VGNwV1crdDJqSnB5VDlZMlUKTP8s5r3N2L5/dArDw249r+CW/hokEwrp\n9Bn0nCR/y8/nutEEIbk12ynB6GtGCVALcXJ02v71BbBf3i+Xb5fwPA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTzhvb1FWSGVGMHRNM2Nx\nYlVMVFcrN0R4M3dSbktMUUIySGkrSnVEdkdnCmpBa1JCWGo0ZlErOXRSRkpkWTUr\ndzh3bFMzMFJOQnJZOTZTb2srL2wyRk0KLS0tIFo0TDU4R1N3Qk5TWDM0WXpLUFc0\nUys1b3kxQnRWV3hNWVhiR2dxclVPRFkKb+nyhsLw0OILedW/spASXMGkuapSjOQh\nyRwUUdHOa+JRbjLLqnfG02xSiURiRhZNVz8VSXZDKvGjKdhSELzx9g==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Tnh6NElYN0crQVM4N0ty\nN3VGQmtrMnArRmJkV1IzT2E2WG1BYUNyK2wwCjlEbU5mdExWTnJrN2VLRTl5N0dZ\nWVcwOWtxVDY5Q3FIVmw2TXZ0bTJEY1EKLS0tIGtMQ1VaVndRT05PMkdjQ2o1LzFO\nemwvWTF3L0l3anRhV0htTG85TlNhUlkKzhNT3lKCaBIUt2UDO6dIe+FGhkELtsP6\nXc9IaaXIVA6vLKAdh9xPHBGP4xG+b+86kvpYrsqMv8IRz+Os6AUQHQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-12T03:42:22Z",
+		"mac": "ENC[AES256_GCM,data:Mrmfvz/GHbqVFFtpHEB8a0y+9PRhPT38T9F3Ap2DiowsJEX+rC8qaQFTJ71HNkFcGQDkMeL6prY6JZoejhbbkxZma87+6+cfX+xEciQSqL1kBjEEGfLjws4V79lK4zC4Q5NX1Feo7L08fcI7Ko3XbH1dRL66yEtk8+2TjiZ1VYE=,iv:FqqAWCg7YoSOwWovGtlKa5qqU+CM7BIu6CgojXpElMg=,tag:u0B80zW8vMqy9UJylJztGg==,type:str]",
+		"version": "3.13.0"
+	}
+}

vars/per-machine/vega/yggdrasil/privateKey/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+ac3d527f567b0a1fe35eeadbd50637ffc60407b6af311b56f997cd863e45ea0c