mob next [ci-skip] [ci skip] [skip ci]

lastFile:vars/per-machine/bosona/openssh-cert/ssh.id_ed25519-cert.pub/value

.gitignore

@@ -3,4 +3,3 @@
 result
 result-*
 run-vm-*
-.nixos-test-history

flake.lock

@@ -38,22 +38,6 @@
         "type": "github"
       }
     },
-    "blobs": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1604995301,
-        "narHash": "sha256-wcLzgLec6SGJA8fx1OEN1yV/Py5b+U5iyYpksUY/yLw=",
-        "owner": "simple-nixos-mailserver",
-        "repo": "blobs",
-        "rev": "2cccdf1ca48316f2cfd1c9a0017e8de5a7156265",
-        "type": "gitlab"
-      },
-      "original": {
-        "owner": "simple-nixos-mailserver",
-        "repo": "blobs",
-        "type": "gitlab"
-      }
-    },
     "call-flake": {
       "locked": {
         "lastModified": 1687380775,
@@ -69,69 +53,6 @@
         "type": "github"
       }
     },
-    "clan-community": {
-      "inputs": {
-        "clan-core": [
-          "clan-core"
-        ],
-        "data-mesher": [
-          "clan-community",
-          "clan-core",
-          "data-mesher"
-        ],
-        "disko": [
-          "clan-community",
-          "clan-core",
-          "disko"
-        ],
-        "flake-parts": [
-          "flake-parts"
-        ],
-        "nix-darwin": [
-          "clan-community",
-          "clan-core",
-          "nix-darwin"
-        ],
-        "nix-github-actions": "nix-github-actions",
-        "nix-select": [
-          "clan-community",
-          "clan-core",
-          "nix-select"
-        ],
-        "nix-unit": "nix-unit",
-        "nixpkgs": [
-          "clan-community",
-          "clan-core",
-          "nixpkgs"
-        ],
-        "sops-nix": [
-          "clan-community",
-          "clan-core",
-          "sops-nix"
-        ],
-        "systems": [
-          "clan-community",
-          "clan-core",
-          "systems"
-        ],
-        "treefmt-nix": [
-          "treefmt-nix"
-        ]
-      },
-      "locked": {
-        "lastModified": 1784417092,
-        "narHash": "sha256-no5eDYWPUZZu4GtLufnA7b7CiZC4qAhCgf70gFiDLZk=",
-        "ref": "refs/heads/main",
-        "rev": "20371843d45f61217019e489d6857842dc8a0203",
-        "revCount": 73,
-        "type": "git",
-        "url": "https://git.clan.lol/clan/clan-community"
-      },
-      "original": {
-        "type": "git",
-        "url": "https://git.clan.lol/clan/clan-community"
-      }
-    },
     "clan-core": {
       "inputs": {
         "data-mesher": "data-mesher",
@@ -151,11 +72,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788346295,
+        "lastModified": 1781517972,
-        "narHash": "sha256-k9Ol++FFhQuPya6ZNQwVhqZZkMvE1ytLtbdrbH5zkrI=",
+        "narHash": "sha256-G8bIXFqifs/y62GNPwg20Ksf71raYwzmyN99gf1tXak=",
         "ref": "refs/heads/main",
-        "rev": "b15797faeca7494a7fe5fde2691d93affa3d3e37",
+        "rev": "7fc62d0c25c7a97d7027a9c248e21c97c9b3acc1",
-        "revCount": 15239,
+        "revCount": 14604,
         "type": "git",
         "url": "https://git.clan.lol/clan/clan-core"
       },
@@ -164,36 +85,6 @@
         "url": "https://git.clan.lol/clan/clan-core"
       }
     },
-    "cnx-network": {
-      "inputs": {
-        "clan-core": [
-          "clan-core"
-        ],
-        "flake-parts": [
-          "flake-parts"
-        ],
-        "nixos-mailserver": "nixos-mailserver",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "treefmt-nix": [
-          "treefmt-nix"
-        ]
-      },
-      "locked": {
-        "lastModified": 1790143134,
-        "narHash": "sha256-n7L5vHbyemIa5jzlueIdpWmQsQSkv5Rrf9JV5kTZ6uU=",
-        "ref": "refs/heads/main",
-        "rev": "d8f7d4e9ca7715c359c6d587c4100cb3f62ed7b2",
-        "revCount": 202,
-        "type": "git",
-        "url": "https://git.b4l.co.th/B4L/cnx-network-clan"
-      },
-      "original": {
-        "type": "git",
-        "url": "https://git.b4l.co.th/B4L/cnx-network-clan"
-      }
-    },
     "data-mesher": {
       "inputs": {
         "flake-parts": [
@@ -210,11 +101,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788308203,
+        "lastModified": 1778718524,
-        "narHash": "sha256-dCOb9YIJv9I2udjqukvjlGiTyOvGnO7zVbot0PxjBGk=",
+        "narHash": "sha256-pXLoI6Ax0EnUK6r34UM1vibVC7CfTu6j72R2692ZzPs=",
-        "rev": "644c49bbf121b3e256bc83ce10b5d97813d9181d",
+        "rev": "12c552ad547d87254f33f33bddd1a2cdbeac754d",
         "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/644c49bbf121b3e256bc83ce10b5d97813d9181d.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/12c552ad547d87254f33f33bddd1a2cdbeac754d.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -295,22 +186,6 @@
         "type": "github"
       }
     },
-    "flake-compat": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767039857,
-        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": [
@@ -419,11 +294,11 @@
         "std": "std"
       },
       "locked": {
-        "lastModified": 1787631179,
+        "lastModified": 1782964989,
-        "narHash": "sha256-l+Zt5XNTD0f0ChkzDJURfQlFAgANIMrGYrk51SZEJKU=",
+        "narHash": "sha256-pU2Gye+1f+nvFleBTgXdeQfrQnKaJEuO2LT7PnsJ1p0=",
         "owner": "kurogeek",
         "repo": "frappix",
-        "rev": "fcb797886ae753b26a6e4415a7f2c19ba6adcf3b",
+        "rev": "ac5e2814fc1aca188080bf6b50504cd329790e56",
         "type": "github"
       },
       "original": {
@@ -432,57 +307,6 @@
         "type": "github"
       }
     },
-    "git-hooks": {
-      "inputs": {
-        "flake-compat": [
-          "cnx-network",
-          "nixos-mailserver",
-          "flake-compat"
-        ],
-        "gitignore": "gitignore",
-        "nixpkgs": [
-          "cnx-network",
-          "nixos-mailserver",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1778507602,
-        "narHash": "sha256-kTwur1wV+01SdqskVMSo6JMEpg71ps3HpbFY2GsflKs=",
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "rev": "61ab0e80d9c7ab14c256b5b453d8b3fb0189ba0a",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "type": "github"
-      }
-    },
-    "gitignore": {
-      "inputs": {
-        "nixpkgs": [
-          "cnx-network",
-          "nixos-mailserver",
-          "git-hooks",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1709087332,
-        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "type": "github"
-      }
-    },
     "haskell-flake": {
       "locked": {
         "lastModified": 1675296942,
@@ -529,11 +353,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788355065,
+        "lastModified": 1781557312,
-        "narHash": "sha256-gAz5oTI7ur34CfuakQduiQd/2ZhO62Bn2XXg08nZYYQ=",
+        "narHash": "sha256-QOIRYSUFSq7L5mY3dZymaVhcnne3tPgoR9riB0WocjA=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "d9d750e4fc11c10cab2da677bdd31e427f3a3a71",
+        "rev": "c03e4752899e55705dfa63979abd885c582a5c48",
         "type": "github"
       },
       "original": {
@@ -610,35 +434,6 @@
         "url": "https://gti.telent.net/dan/liminix"
       }
     },
-    "matthew-hardware": {
-      "inputs": {
-        "disko": [
-          "clan-core",
-          "disko"
-        ],
-        "flake-parts": [
-          "flake-parts"
-        ],
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "unf": "unf"
-      },
-      "locked": {
-        "lastModified": 1789393925,
-        "narHash": "sha256-8PHRxSVWxu1ol1AIrqiP8g6t+h9fLekTgDdpgRa+sME=",
-        "ref": "mc/wip",
-        "rev": "ebee3891bc9cbec584f611b4bcdf12618da25148",
-        "revCount": 34,
-        "type": "git",
-        "url": "https://codeberg.org/matthewcroughan/matthew-hardware"
-      },
-      "original": {
-        "ref": "mc/wip",
-        "type": "git",
-        "url": "https://codeberg.org/matthewcroughan/matthew-hardware"
-      }
-    },
     "microvm": {
       "inputs": {
         "flake-utils": "flake-utils",
@@ -689,11 +484,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1786845137,
+        "lastModified": 1781242433,
-        "narHash": "sha256-oQFip+v0luP8NIxJzmiW4Wu8bILsbFWom5l0zonl8hQ=",
+        "narHash": "sha256-bchLZZ3sRn740zyvD2icZSnNoTaanN0nw7l6fjVXO+E=",
         "owner": "nix-darwin",
         "repo": "nix-darwin",
-        "rev": "4cff07de74b50e64bdd68cd4e722ab5b6b35ee48",
+        "rev": "aabb2037edfc0f210723b72cd5f528aab5dd3f0b",
         "type": "github"
       },
       "original": {
@@ -702,49 +497,6 @@
         "type": "github"
       }
     },
-    "nix-github-actions": {
-      "inputs": {
-        "nixpkgs": [
-          "clan-community",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1737420293,
-        "narHash": "sha256-F1G5ifvqTpJq7fdkT34e/Jy9VCyzd5XfJ9TO8fHhJWE=",
-        "owner": "nix-community",
-        "repo": "nix-github-actions",
-        "rev": "f4158fa080ef4503c8f4c820967d946c2af31ec9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nix-github-actions",
-        "type": "github"
-      }
-    },
-    "nix-github-actions_2": {
-      "inputs": {
-        "nixpkgs": [
-          "clan-community",
-          "nix-unit",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1737420293,
-        "narHash": "sha256-F1G5ifvqTpJq7fdkT34e/Jy9VCyzd5XfJ9TO8fHhJWE=",
-        "owner": "nix-community",
-        "repo": "nix-github-actions",
-        "rev": "f4158fa080ef4503c8f4c820967d946c2af31ec9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nix-github-actions",
-        "type": "github"
-      }
-    },
     "nix-select": {
       "locked": {
         "lastModified": 1763303120,
@@ -758,32 +510,6 @@
         "url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
       }
     },
-    "nix-unit": {
-      "inputs": {
-        "nix-github-actions": "nix-github-actions_2",
-        "nixpkgs": [
-          "clan-community",
-          "nixpkgs"
-        ],
-        "treefmt-nix": [
-          "clan-community",
-          "treefmt-nix"
-        ]
-      },
-      "locked": {
-        "lastModified": 1779338171,
-        "narHash": "sha256-affUbv/bwE8SLGhuWKniDr7SVO+Lo1XEPjCZdyU5kgQ=",
-        "owner": "nix-community",
-        "repo": "nix-unit",
-        "rev": "6ab1f232562a01d18b40d5ed6a58718c4f3a74bc",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nix-unit",
-        "type": "github"
-      }
-    },
     "nixago": {
       "inputs": {
         "flake-utils": "flake-utils_3",
@@ -809,54 +535,6 @@
         "type": "github"
       }
     },
-    "nixos-images": {
-      "inputs": {
-        "nixos-stable": [
-          "nixpkgs"
-        ],
-        "nixos-unstable": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1784802994,
-        "narHash": "sha256-4PcD0Ibzdkh85G+70w5dLlR9YgQ2bmNIjiPPMSzO57w=",
-        "owner": "nix-community",
-        "repo": "nixos-images",
-        "rev": "6ece16b0c97986fe085122e796044add4cc3ff64",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nixos-images",
-        "type": "github"
-      }
-    },
-    "nixos-mailserver": {
-      "inputs": {
-        "blobs": "blobs",
-        "flake-compat": "flake-compat",
-        "git-hooks": "git-hooks",
-        "nixpkgs": [
-          "cnx-network",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1785198005,
-        "narHash": "sha256-falBPi+PJtMx0vwII8L24wjDGXNZMwRiVXsw8WTXLEo=",
-        "owner": "simple-nixos-mailserver",
-        "repo": "nixos-mailserver",
-        "rev": "d357b9f048c5532ec81b0e0034c0b8463d5ddd46",
-        "type": "gitlab"
-      },
-      "original": {
-        "owner": "simple-nixos-mailserver",
-        "ref": "nixos-26.05",
-        "repo": "nixos-mailserver",
-        "type": "gitlab"
-      }
-    },
     "nixpkgs": {
       "locked": {
         "lastModified": 1712920918,
@@ -874,27 +552,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1780365719,
+        "lastModified": 1781359544,
-        "narHash": "sha256-QfWfccTN+70ZQ4m2qlU9PiKfz2Yppq94058iJyARNwc=",
+        "narHash": "sha256-iUuzKQcyXvopYDDzFpMK5eQKP3WIJExYny2kJtbgUcE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "ffa10e26ae11d676b2db836259889f1f571cb14f",
+        "rev": "9f11f828c213641c2369a9f1fa31fe31557e3156",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1788775869,
-        "narHash": "sha256-JRf1lSypbvKj6AzUZHpUA6YC1DirVuitZWOnRwcm+Ww=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "58973d74f1893afe13f5902919803a0e99da0ca4",
         "type": "github"
       },
       "original": {
@@ -935,15 +597,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1787579760,
+        "lastModified": 1708640854,
-        "narHash": "sha256-WGhIEINOICx7bhV3WrSz0QTzv8uzaaa9AXvD1clIWpc=",
+        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
         "owner": "paisano-nix",
         "repo": "core",
-        "rev": "88739c84d308876714322eb9844ede6597c1a580",
+        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
         "type": "github"
       },
       "original": {
         "owner": "paisano-nix",
+        "ref": "0.2.0",
         "repo": "core",
         "type": "github"
       }
@@ -990,18 +653,14 @@
     },
     "root": {
       "inputs": {
-        "clan-community": "clan-community",
         "clan-core": "clan-core",
-        "cnx-network": "cnx-network",
         "devshell": "devshell",
         "flake-parts": "flake-parts",
         "frappix": "frappix",
         "home-manager": "home-manager",
         "import-tree": "import-tree",
         "liminix": "liminix",
-        "matthew-hardware": "matthew-hardware",
+        "nixpkgs": "nixpkgs_2",
-        "nixos-images": "nixos-images",
-        "nixpkgs": "nixpkgs_3",
         "plasma-manager": "plasma-manager",
         "treefmt-nix": "treefmt-nix"
       }
@@ -1014,11 +673,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788337237,
+        "lastModified": 1780547341,
-        "narHash": "sha256-gkSH8VUtCo6hnysNmb9DbTuDepH2t5pv+QWjP75xKAk=",
+        "narHash": "sha256-Gq8KNx5A7hBB3uGJaj6eQfLDIz5YdLu92gqBcvHvoUo=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "fbf759290e0cb0a98dfc813a4eb7d53ad1dacb57",
+        "rev": "9ed65852b6257fbeae4355bc24ecfea307ca759a",
         "type": "github"
       },
       "original": {
@@ -1169,24 +828,6 @@
         "type": "github"
       }
     },
-    "unf": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_2"
-      },
-      "locked": {
-        "lastModified": 1779596435,
-        "narHash": "sha256-ztzeJVOQDhQtE0z9DwtSWL+OyoWKZrAD4gzRRvUP9ug=",
-        "ref": "refs/heads/main",
-        "rev": "4f5ab30ee524f09126b09f42f249c0aba756459d",
-        "revCount": 6,
-        "type": "git",
-        "url": "https://git.atagen.co/atagen/unf"
-      },
-      "original": {
-        "type": "git",
-        "url": "https://git.atagen.co/atagen/unf"
-      }
-    },
     "yants": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -7,12 +7,6 @@
       inputs.treefmt-nix.follows = "treefmt-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    clan-community = {
-      url = "git+https://git.clan.lol/clan/clan-community";
-      inputs.clan-core.follows = "clan-core";
-      inputs.flake-parts.follows = "flake-parts";
-      inputs.treefmt-nix.follows = "treefmt-nix";
-    };
     devshell = {
       url = "github:numtide/devshell";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -45,29 +39,6 @@
       inputs.nixpkgs.follows = "nixpkgs";
       inputs.devshell.follows = "devshell";
     };
-
-    nixos-images = {
-      url = "github:nix-community/nixos-images";
-      inputs.nixos-unstable.follows = "nixpkgs";
-      inputs.nixos-stable.follows = "nixpkgs";
-    };
-
-    matthew-hardware = {
-      url = "git+https://codeberg.org/matthewcroughan/matthew-hardware?ref=mc/wip";
-      inputs.flake-parts.follows = "flake-parts";
-      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.disko.follows = "clan-core/disko";
-    };
-
-    # `router` clan service (site gateway: PPPoE, VLAN bridge, Kea/Blocky,
-    # nftables). Consumed via `module.input = "cnx-network"` in inventories/router.nix.
-    cnx-network = {
-      url = "git+https://git.b4l.co.th/B4L/cnx-network-clan";
-      inputs.clan-core.follows = "clan-core";
-      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.flake-parts.follows = "flake-parts";
-      inputs.treefmt-nix.follows = "treefmt-nix";
-    };
   };
   outputs =
     {
@@ -106,20 +77,6 @@
             packages.think = pkgs.think-gtcm;
             packages.think-be = pkgs.think-backend-gtcm;
             packages.file-uploader = pkgs.gtcm-file-uploader;
-            packages.installer =
-              (pkgs.nixos [
-                inputs.nixos-images.nixosModules.image-installer
-                {
-                  users.users.root.openssh.authorizedKeys.keys = [
-                    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAB/raxJR8gASmquP63weHelbi+da2WBJR1DgzHPNz/f"
-                    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuhpzDHBPvn8nv8RH1MRomDOaXyP4GziQm7r3MZ1Syk"
-                    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcZ/p1Ofa9liwIzPWzNtONhJ7+FUWd2lCz33r81t8+w kurogeek@kurogeek"
-                    "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOJDRQfb1+7VK5tOe8W40iryfBWYRO6Uf1r2viDjmsJtAAAABHNzaDo="
-                    "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIDgsWq+G/tcr6eUQYT7+sJeBtRmOMabgFiIgIV44XNc6AAAABHNzaDo="
-                    "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJMi3TAuwDtIeO4MsORlBZ31HzaV5bji1fFBPcC9/tWuAAAABHNzaDo="
-                  ];
-                }
-              ]).config.system.build.isoImage;
           };
       }
     );

inventories/default.nix

@@ -2,7 +2,6 @@
   imports = [
     ./personal-computer.nix
     ./emmie.nix
-    ./router.nix
   ];
   clan = {
     inventory = {
@@ -17,10 +16,7 @@
           "deneb"
           "bosona"
         ];
-        w = [
+        w = [ "sirius" ];
-          "sirius"
-          "stellio"
-        ];
         b4l = [
           "rigel"
           "rana"
@@ -40,162 +36,11 @@
           "cursa"
           "rigel"
           "vega"
-          "buna"
-        ];
-
-        dm-bootstrapper = [
-          "rigel"
-          "cursa"
-          "deneb"
-          "bosona"
-          "canopus"
-        ];
-
-        dm-pull-deploy = [
-          "rana"
-          "rigel"
-          "vega"
         ];
       };
 
       instances = {
 
-        borgbackup = {
-          module = {
-            name = "borgbackup";
-            input = "clan-core";
-          };
-          roles.client.machines."cursa".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/cursa/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."hadar".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/hadar/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."procyon".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/procyon/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."bosona".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/bosona/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."canopus".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/canopus/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."deneb".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/deneb/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-          roles.client.machines."alasia".settings.destinations = {
-            alex = {
-              repo = "ssh://borg@10.0.10.225:2222/backup/alasia/backup";
-              rsh = "ssh -i /run/secrets/vars/borgbackup/borgbackup.ssh";
-            };
-          };
-        };
-
-        data-mesher = {
-          module = {
-            name = "data-mesher";
-            input = "clan-core";
-          };
-          roles.bootstrap.tags = [ "dm-bootstrapper" ];
-          roles.default.tags = [ "all" ];
-          roles.default.settings.interfaces = [ "ygg" ];
-        };
-
-        auto-pull-update = {
-          module = {
-            name = "dm-pull-deploy";
-            input = "clan-community";
-          };
-          roles.push.machines."rigel".settings = {
-            gitUrl = "https://git.b4l.co.th/newedge/infra.git";
-            branch = "main";
-          };
-          roles.push.extraModules = [
-            (
-              { pkgs, config, ... }:
-              {
-                # work around until upstream is fixed
-                environment.systemPackages = [
-                  (pkgs.writeShellApplication {
-                    name = "custom-dm-send-deploy";
-                    runtimeInputs = [
-                      config.services.data-mesher.package
-                      pkgs.git
-                      pkgs.nix
-                      pkgs.jq
-                    ];
-                    text =
-                      let
-                        settings.gitUrl = "https://git.b4l.co.th/newedge/infra.git";
-                        settings.branch = "main";
-                      in
-                      ''
-                        if [ $# -gt 1 ]; then
-                          echo "Usage: dm-send-deploy [<flake-ref>]"
-                          echo "Without arguments, sends the latest commit on '${settings.branch}' from ${settings.gitUrl}"
-                          echo "Example: dm-send-deploy git+https://example.com/repo.git?rev=abc123..."
-                          exit 1
-                        fi
-
-                        KEY="${config.clan.core.vars.generators.dm-pull-deploy-signing-key.files."signing.key".path}"
-                        if [ ! -r "$KEY" ]; then
-                          echo "Error: cannot read signing key at $KEY (are you root?)"
-                          exit 1
-                        fi
-
-                        if [ $# -eq 1 ]; then
-                          FLAKE_REF="$1"
-                        else
-                          REV=$(git ls-remote "${settings.gitUrl}" "refs/heads/${settings.branch}" | cut -f1)
-                          if [ -z "$REV" ]; then
-                            echo "Error: could not determine latest commit on ${settings.branch} from ${settings.gitUrl}"
-                            exit 1
-                          fi
-                          FLAKE_REF="git+${settings.gitUrl}?rev=$REV"
-                        fi
-
-                        TMPFILE=$(mktemp)
-                        trap 'rm -f "$TMPFILE"' EXIT
-
-                        printf '%s' "$FLAKE_REF" > "$TMPFILE"
-
-                        NETWORK_ID="${config.clan.core.vars.generators.data-mesher-network.files."network.pub".path}"
-
-                        data-mesher file update "$TMPFILE" \
-                          --url http://localhost:7331 \
-                          --network-id "$NETWORK_ID" \
-                          --key "$KEY" \
-                          --name "dm_pull_deploy/target"
-
-                        echo "Deployment target pushed: $FLAKE_REF"
-                      '';
-                  })
-                ];
-              }
-            )
-          ];
-          roles.default.tags = [ "dm-pull-deploy" ];
-          roles.default.settings.action = "switch";
-        };
-
         sshd = {
           roles.server.tags."all" = { };
           roles.server.settings = {
@@ -324,28 +169,13 @@
           };
           roles.server.machines."alasia".settings = {
             public_url = "tailvpn.public.newedge.house";
+            base_domain = "tailnet.newedge.house";
             advertise_routes = [ "10.0.10.0/24" ];
-            dns = {
-              magic_dns = true;
-              base_domain = "tailvpn.newedge.house";
             nameservers = [
               "10.0.10.82"
               "1.1.1.1"
               "8.8.8.8"
             ];
-              extra_records = [
-                {
-                  name = "poyerp.newedge.house";
-                  type = "A";
-                  value = "10.0.10.1";
-                }
-                {
-                  name = "glomerp.newedge.house";
-                  type = "A";
-                  value = "10.0.10.1";
-                }
-              ];
-            };
           };
         };
 
@@ -515,49 +345,8 @@
               exporters.smartctl = { };
               exporters.zfs = { };
             };
-            buna.settings = {
-              exporters.smartctl = { };
-            };
-            mirach.settings = {
-              exporters.smartctl = { };
-            };
-            almach.settings = {
-              exporters.smartctl = { };
-            };
-            stellio.settings.exporters.smartctl = { };
           };
         };
-
-        wifi =
-          let
-            networks = {
-              home = { };
-              glom = { };
-            };
-          in
-          {
-            module.name = "wifi";
-            module.input = "clan-community";
-
-            roles.default = {
-              machines."buna".settings = { inherit networks; };
-
-              extraModules = [
-                (
-                  { lib, ... }:
-                  {
-                    # profile names match the network attr names above;
-                    # 0 = retry forever for both (defaults: 4 autoconnect attempts, 3 auth attempts)
-                    networking.networkmanager.ensureProfiles.profiles = lib.mapAttrs (_: _: {
-                      connection.autoconnect-retries = 0;
-                      connection.auth-retries = 0;
-                    }) networks;
-                  }
-                )
-              ];
-            };
-          };
-
       };
     };
   };

inventories/router.nix

@@ -1,91 +0,0 @@
-# Site gateways: the `router` clan service from cnx-network-clan (see
-# flake.nix input `cnx-network`, and that repo's modules/clan/router/README.md).
-# One instance for the fleet; each site adds its gateway machine with the
-# site's port / VLAN layout. `clan vars generate <gw>` then prompts for the
-# PPPoE username/password.
-{ lib, ... }:
-let
-  # Admin mesh = the site's ZeroTier network. The service only opens SSH,
-  # metrics and iperf3 to this prefix, so the gateway must also be a peer of
-  # the same network (tag membership in default.nix). Prefix derivation as in
-  # cnx-network's modules/mesh-hosts.nix: fd + 8-byte network id + 0x9993,
-  # /88 covers every peer.
-  meshSubnet =
-    instance:
-    let
-      networkId = lib.fileContents ../vars/shared/zerotier-network-${instance}/network-id/value;
-      full = "fd" + networkId + "9993";
-      hextet = i: builtins.substring (i * 4) 4 full;
-    in
-    "${hextet 0}:${hextet 1}:${hextet 2}:${hextet 3}:${hextet 4}:${builtins.substring 20 2 full}00::/88";
-in
-{
-  clan.inventory.instances.router = {
-    module = {
-      name = "router";
-      input = "cnx-network";
-    };
-
-    roles.default.settings.mesh.subnet = meshSubnet "w-network";
-
-    # stellio: GL.iNet Flint 2 (GL-MT6000, MT7986a). Ports as named by the
-    # device tree in matthew-hardware: eth1 = the 2.5G "WAN" port, lan1 = the
-    # 2.5G LAN port, lan2-lan5 = the 1G LAN ports (DSA on the MT7531 switch).
-    roles.default.machines.stellio.settings = {
-      site = "white-house";
-      siteId = 8;
-
-      # PPPoE on the ISP's VLAN 10, as on the liminix router it replaces
-      # (routers/white-house); set to null if the ISP runs PPPoE untagged.
-      wan.interface = "end1";
-      wan.vlanId = 10;
-
-      # lan1 (2.5G): untagged mgmt port for on-site recovery. lan2-lan4 (1G):
-      # untagged client ports on lan. lan5 is the pre-cutover staging uplink:
-      # DHCP client into the old LAN (routers/white-house), SSH only, no VLAN
-      # membership; set stagingPort = null at cutover.
-      accessPorts = {
-        lan1 = "mgmt";
-        lan2 = "lan";
-        lan3 = "lan";
-        lan4 = "lan";
-      };
-      stagingPort = "lan5";
-
-      # Both MT7976 radios serve lan as an untagged access port, one SSID per
-      # band named like the GL-AR750 it stands in for ("GL-AR750" on 2.4 GHz,
-      # "GL-AR750-5" on 5 GHz) so clients roam over unchanged. Passphrases
-      # are the `wifi-GL-AR750-passphrase` / `wifi-GL-AR750-5-passphrase`
-      # vars prompts. Channels as on the old router. Check the band mapping
-      # with `iw phy` (mt7986: phy0/wlan0 = 2.4 GHz, phy1/wlan1 = 5 GHz).
-      wifi = {
-        enable = true;
-        countryCode = "TH";
-        networks = {
-          "GL-AR750".vlan = "lan";
-          "GL-AR750-5".vlan = "lan";
-        };
-        radios = {
-          wlan0 = {
-            band = "2g";
-            channel = 2;
-            wifi6 = true;
-            networks = [ "GL-AR750" ];
-          };
-          wlan1 = {
-            band = "5g";
-            channel = 36;
-            wifi6 = true;
-            networks = [ "GL-AR750-5" ];
-          };
-        };
-      };
-
-      # 10.1.<id>.0/24, router .1, DHCP pool .100-.199.
-      vlans = {
-        mgmt.id = 10;
-        lan.id = 20;
-      };
-    };
-  };
-}

inventory.json

@@ -19,7 +19,7 @@
       "installedAt": 1765277591
     },
     "buna": {
-      "installedAt": 1787123510
+      "installedAt": 1765343708
     },
     "rana": {
       "installedAt": 1773134236

machines/default.nix

@@ -9,15 +9,7 @@
   ];
   clan = {
     meta.name = "NewEdgeClan";
-    machines = {
+    machines = { };
-      cursa = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      hadar = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      procyon = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      bosona = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      canopus = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      deneb = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-      alasia = { ... }: { clan.core.state."vars".folders = [ "/var/lib" ]; };
-    };
     secrets.age.plugins = [
       "age-plugin-yubikey"
       "age-plugin-fido2-hmac"

machines/deneb/configuration.nix

@@ -25,11 +25,8 @@ in
     inputs.self.overlays.frappixLibsOverlay
     inputs.self.overlays.frappixPythonOverlay
     inputs.self.overlays.frappixToolsOverlay
-    inputs.self.overlays.frappixAppsOverlay
   ];
 
-  fonts.packages = [ pkgs.tlwg ];
-
   clan.core.vars.generators.frappix = {
     files = {
       sslCertificate.secret = false;
@@ -60,7 +57,6 @@ in
       pkgs.frappix.hrms
       pkgs.frappix.crm
       pkgs.frappix.posprinter
-      pkgs.frappix.default_thai_company
     ];
     sites = {
       "${sitename}" = {
@@ -71,7 +67,6 @@ in
           "hrms"
           "crm"
           "posprinter"
-          "default_thai_company"
         ];
       };
     };

machines/sirius/configuration.nix

@@ -5,6 +5,8 @@
 }:
 {
   imports = [
+    self.nixosModules.common
+
     ./hardware-configuration.nix
   ];
 
@@ -21,12 +23,15 @@
   nixpkgs.hostPlatform = {
     system = "aarch64-linux";
   };
-  nixpkgs.buildPlatform = {
-    system = "x86_64-linux";
-  };
 
   system.stateVersion = "25.11";
 
+  services.journald.extraConfig = ''
+    Storage=volatile
+    RuntimeMaxUse=30M
+    RuntimeMaxFileSize=10M
+  '';
+
   services.udisks2.enable = false;
 
   nix.settings.log-lines = 25;
@@ -49,23 +54,6 @@
     "sd_mod"
   ];
 
-  boot = {
-    consoleLogLevel = 0;
-    kernel.sysctl = {
-      "fs.suid_dumpable" = 0;
-      "kernel.core_pattern" = "/dev/null";
-    };
-    tmp = {
-      useTmpfs = true;
-    };
-  };
-
-  services.journald.settings.Journal.Storage = "none";
-
-  systemd = {
-    coredump.enable = false;
-  };
-
   fileSystems."/mnt/hdd" = {
     device = "zdata/nas";
     fsType = "zfs";

machines/stellio/configuration.nix

@@ -1,89 +0,0 @@
-{
-  config,
-  inputs,
-  lib,
-  pkgs,
-  ...
-}:
-{
-  imports = [
-    inputs.matthew-hardware.nixosModules.mt7986a-glinet-gl-mt6000
-  ];
-
-  # matthew-hardware's common/generic-uefi-image.nix still sets
-  # `image.repart.enable = true`; nixpkgs removed that option (importing
-  # image/repart.nix now always defines system.build.image). Declare it so the
-  # definition has somewhere to land. Drop once upstream stops setting it.
-  options.image.repart.enable = lib.mkOption {
-    type = lib.types.bool;
-    default = true;
-    internal = true;
-  };
-
-  config = {
-    hardware.mt7986a-glinet-gl-mt6000.enable = true;
-    hardware.mt7986a-glinet-gl-mt6000.zealous = true;
-    hardware.mt7986a-glinet-gl-mt6000.image.repart.enable = true;
-
-    nixpkgs.hostPlatform.system = "aarch64-linux";
-    nixpkgs.buildPlatform.system = "x86_64-linux";
-
-    system.stateVersion = "26.11";
-    clan.core.sops.defaultGroups = [ "admins" ];
-
-    clan.core.settings.name = "stellio";
-    clan.core.settings.machine.description = "Flint-2 router";
-
-    # Root is ext4 on the Flint 2's eMMC: keep steady-state writes off it.
-    # Logs live in RAM (64M; the router needs them for pppd/kea debugging,
-    # unlike sirius which drops them), /tmp is tmpfs, no core dumps, and
-    # ext4 skips atime updates and flushes its journal every 60 s instead
-    # of 5 s so the small periodic writes (Kea leases, timesyncd clock,
-    # speedtest textfile) coalesce. A power cut loses at most a minute of
-    # that state, none of which matters on a gateway.
-    fileSystems."/".options = [
-      "noatime"
-      "commit=60"
-    ];
-    boot.tmp.useTmpfs = true;
-    services.journald.settings.Journal = {
-      Storage = "volatile";
-      RuntimeMaxUse = "64M";
-    };
-    systemd.coredump.enable = false;
-
-    # nixpkgs' services.blocky check runs the aarch64 blocky in a
-    # system.checks derivation, which an x86_64 builder without binfmt cannot
-    # execute (`--max-jobs 0` -> Exec format error). Validate the same YAML
-    # with the build host's blocky instead. Drop once cnx-network's router
-    # service carries this itself (router/dns: validate the Blocky config
-    # with the build host's binary).
-    services.blocky.enableConfigCheck = false;
-    system.checks = [
-      (pkgs.runCommand "check-blocky-config" { } ''
-        ${lib.getExe pkgs.buildPackages.blocky} --config ${
-          (pkgs.formats.yaml { }).generate "blocky-config.yaml" config.services.blocky.settings
-        } validate && touch $out
-      '')
-    ];
-
-    systemd.services.heartbeat-push = {
-      description = "Heartbeat push to uptime monitor";
-      serviceConfig = {
-        Type = "oneshot";
-        ExecStart = "${pkgs.curl}/bin/curl -s -o /dev/null https://uptime.b4l.co.th/api/push/X0WCHAcY5gPf1U8If7BT1FLjpacZqGZu?status=up&msg=OK&ping=";
-      };
-    };
-
-    systemd.timers.heartbeat-push = {
-      description = "Heartbeat push timer";
-      wantedBy = [ "timers.target" ];
-      timerConfig = {
-        OnBootSec = "60s";
-        OnUnitActiveSec = "60s";
-        Unit = "heartbeat-push.service";
-      };
-    };
-
-  };
-}

machines/stellio/disko.nix

@@ -1,13 +0,0 @@
-{ inputs, ... }:
-{
-  disko = {
-    imageBuilder = {
-      # Avoid double emulation to significantly speed up image building process.
-      # Update the system according to your host system.
-      # See https://github.com/nix-community/disko/issues/856
-      qemu =
-        inputs.nixpkgs.legacyPackages.x86_64-linux.qemu
-        + "/bin/qemu-system-aarch64 -M virt -cpu cortex-a57";
-    };
-  };
-}

modules/clan/apple-network/README.md

@@ -1,3 +0,0 @@
-# Apple Network
-
-This service allows atalkd instances to connect to each other over vxlan over Yggdrasil. We need to use vxlan due to the support of broadcasting it provides. The service will form a network of star-topology vxlan using the underlying Yggdrasil network. With this vxlan network, we can have a private Apple Talk network over the internet.

modules/clan/apple-network/default.nix

@@ -1,139 +0,0 @@
-{ clanLib, ... }:
-{
-  _class = "clan.service";
-  manifest.name = "apple-network";
-  manifest.description = "This service will create an instance of `atalkd` for each peer to talk to Apple machines over Apple Talk protocol and automatically connect each peer using vxlan over Yggdrasil network to achieve Apple Talk over internet experience";
-  manifest.readme = builtins.readFile ./README.md;
-  manifest.categories = [ "Network" ];
-
-  roles.peer = {
-    description = "A gateway machine that allow classic Apple machines to connect to other Apple machines over the internet";
-
-    interface =
-      { lib, ... }:
-      {
-        options = {
-          zone_name = lib.mkOption {
-            type = with lib.types; str;
-            description = "Zone name for Apple Talk protocol";
-            default = "Default";
-          };
-        };
-      };
-
-    perInstance =
-      { roles, settings, ... }:
-      {
-        nixosModule =
-          {
-            lib,
-            config,
-            pkgs,
-            ...
-          }:
-          let
-            vxlanPort = 4789;
-
-            getYggdrasilIP =
-              machineName:
-              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
-                clanLib.getPublicValue {
-                  flake = config.clan.core.settings.directory;
-                  machine = machineName;
-                  generator = "yggdrasil";
-                  file = "address";
-                  default = null;
-                }
-              else
-                throw "clanService/yggdrasil is required";
-
-            noSelfPeers = builtins.filter (peerName: peerName != config.clan.core.settings.machine.name) (
-              lib.mapAttrsToList (machineName: _: machineName) roles.peer.machines
-            );
-
-            sortedPeers = builtins.sort (x: y: x < y) (
-              lib.mapAttrsToList (machineName: _: machineName) roles.peer.machines
-            );
-
-            getMachineIndex = machineName: lib.lists.findFirstIndex (x: x == machineName) null sortedPeers;
-
-            selfVXAddress = "192.168.254.${
-              lib.toString ((getMachineIndex config.clan.core.settings.machine.name) + 1)
-            }/24";
-          in
-          {
-
-            services.atalkd = {
-              enable = true;
-              interfaces = {
-                vxlan.config = ''
-                  -router -phase 2 -net 1 -zone "${settings.zone_name}"
-                '';
-              };
-            };
-
-            networking.useNetworkd = true;
-
-            networking.firewall.interfaces."ygg".allowedUDPPorts = [ vxlanPort ];
-
-            boot.kernelModules = [ "vxlan" ];
-
-            systemd.network.netdevs =
-              builtins.listToAttrs (
-                map (
-                  peerName:
-                  (lib.nameValuePair "10-apl-vxlan-${peerName}" {
-                    enable = true;
-                    netdevConfig = {
-                      Name = "vxlan-${peerName}";
-                      Kind = "vxlan";
-                    };
-                    vxlanConfig = {
-                      VNI = (getMachineIndex config.clan.core.settings.machine.name) + (getMachineIndex peerName);
-                      Remote = getYggdrasilIP peerName;
-                      DestinationPort = vxlanPort;
-                      Independent = true;
-                    };
-                  })
-                ) noSelfPeers
-              )
-              // {
-                "10-apl-vxlan" = {
-                  enable = true;
-                  netdevConfig = {
-                    Kind = "bridge";
-                    Name = "vxlan";
-                  };
-                  bridgeConfig = {
-                    STP = true;
-                  };
-                };
-              };
-
-            systemd.network.networks =
-              builtins.listToAttrs (
-                map (
-                  peerName:
-                  (lib.nameValuePair "10-apl-vxlan-${peerName}" {
-                    enable = true;
-                    matchConfig.Name = "vxlan-${peerName}";
-                    networkConfig.Bridge = "vxlan";
-                  })
-                ) noSelfPeers
-              )
-              // {
-                "10-apl-vxlan" = {
-                  enable = true;
-                  matchConfig.Name = "vxlan";
-                  address = [ selfVXAddress ];
-                };
-              };
-
-            environment.systemPackages = [
-              pkgs.netatalk
-              pkgs.bridge-utils
-            ];
-          };
-      };
-  };
-}

modules/clan/apple-network/flake-module.nix

@@ -1,19 +0,0 @@
-{ inputs, self, ... }:
-let
-  module = ./default.nix;
-in
-{
-  clan.modules = {
-    apple-network = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.service-apple-network = {
-        imports = [ ./tests/vm/default.nix ];
-        _module.args = { inherit self inputs; };
-
-        clan.modules."@clan/apple-network" = module;
-      };
-    };
-}

modules/clan/apple-network/tests/vm/default.nix

@@ -1,76 +0,0 @@
-{
-  self,
-  lib,
-  config,
-  hostPkgs,
-  ...
-}:
-{
-  name = "service-apple-network";
-
-  result.update-vars =
-    let
-      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
-    in
-    hostPkgs.writeShellScriptBin "update-vars" ''
-      set -x
-      export PRJ_ROOT=$(git rev-parse --show-toplevel)
-      ${
-        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
-      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
-    '';
-
-  clan = {
-    directory = ./.;
-    test.useContainers = false;
-
-    inventory = {
-      meta.domain = "test.clan";
-
-      machines.peer1 = { };
-      machines.peer2 = { };
-      machines.peer3 = { };
-
-      instances = {
-        apple-network = {
-          module.name = "@clan/apple-network";
-          module.input = "self";
-          roles.peer.machines = {
-            peer1 = { };
-            peer2 = { };
-            peer3 = { };
-          };
-        };
-        yggdrasil = {
-          module.name = "yggdrasil";
-          roles.default.tags.all = { };
-          roles.default.settings.extraPeers = [
-            "tls://ygg.jjolly.dev:3443"
-            "tls://[2602:fc24:18:7a42::1]:993"
-            "tcp://leo.node.3dt.net:9002"
-            "tcp://ygg-kcmo.incognet.io:8883"
-          ];
-        };
-      };
-    };
-  };
-
-  nodes = {
-    peer1 = { };
-    peer2 = { };
-    peer3 = { };
-  };
-
-  testScript = _: ''
-    # cannot test connectivity due to Yggdrasil's establishment
-    start_all()
-    peer1.wait_for_unit("atalkd")
-    peer1.succeed("systemctl status atalkd")
-
-    peer2.wait_for_unit("atalkd")
-    peer2.succeed("systemctl status atalkd")
-
-    peer3.wait_for_unit("atalkd")
-    peer3.succeed("systemctl status atalkd")
-  '';
-}

modules/clan/apple-network/tests/vm/sops/machines/peer1/key.json

@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1f92zl8y70z5w9gn0l5leg2fhyvxy6m93dfh7n6ltgvuu9nyg6epsrw6t8x",
-    "type": "age"
-  }
-]

modules/clan/apple-network/tests/vm/sops/machines/peer2/key.json

@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1u36fr87cru90vfznf5szasya9nhvvseh4atk8zsdj0rrsu0nnvwqsyt8g6",
-    "type": "age"
-  }
-]

modules/clan/apple-network/tests/vm/sops/machines/peer3/key.json

@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1rka3368ltqc787xw99uu762lqfk7qxld9265u2t62fpxnp9xhufsc2q5rw",
-    "type": "age"
-  }
-]

modules/clan/apple-network/tests/vm/sops/secrets/peer1-age.key/secret

@@ -1,14 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:hC4Lle6mXuTFq//wBHUTyH3X778u/gYJSXJOiQ7xUb+gnC8beH1olxL2ZhtUiMkktzhsPM/j6cxhltPp25UTeJnUOcoYesqZcp8=,iv:WOx2P2Cu4v58xM9ePjAw1gdA0fFnGG2UqEXH2iksGoo=,tag:43n1ibVSy2AeS9f5qQBKNQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtT244N1Q3Zk9pRjFFQlUr\ncDExSTBwSWk5UXVyMjhWclQwSFZaYnpTRFY0CnE5YStVdzMrS3BKYzYvc3V3QVFY\nbDVwVytoNERveU1xQllqNUFGV2hYbGMKLS0tIDJSUmkwMUQzL3Y0MU5qZTJ3eFN3\nNGdwamM1UDBPdzhvSWsyZzR6anZ0eFEKKnr1/7rf3fH1i7KUoZdilLDgb44K2qzn\nI9Y+7FbV4gzQUzKWjAQeFN37Z4Qiuy0xJVA0lw8KvM+NCxSZDfh3kw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-07-03T10:46:56Z",
-		"mac": "ENC[AES256_GCM,data:hmpbOtra6EyNiPg7EsA3F4elHEO87JPUr4VKVppvzUwLX1HSj67WrU6k3rEoJT+k7Hq1lxnAzDEckSG1fUOap11rk8ksp1IAGR0+yqykC/Qj/Nl8wXqP84gr49bJK6xE/DDdCRCcBff2d6IpnehyEr8fGFEZbWGygblec8U8GPo=,iv:+M1C3rL22foowr0VD80jwrNFb5xz4k5JQ/DJm4ThKHk=,tag:wabFAC5NTCVGfIQQzm0yGg==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/sops/secrets/peer1-age.key/users/admin

@@ -1 +0,0 @@
-../../../users/admin

modules/clan/apple-network/tests/vm/sops/secrets/peer2-age.key/secret

@@ -1,14 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:ndWIEOqP2ybCN7Ak5g+8q3YG5rLQ7OuSv/vCbnMA8AK6Lby2JMGRkRGysqJdyEF7eh4w7PpZ/AtKPtPbUucjeTB5+8g76PPJTBE=,iv:EYy0GGqEBmIc5rSWP7Zleb5eQ0JzTz84HqeJPpCSpxk=,tag:iMgTUb9+wxE9S2kKoOEvsQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQTEF6OXN4K0dHdXhWWmt2\neG5wdkNIc2F0UnFEeHFLQkdTWkFpUWhTa0NBCmw2N2J1T0FJVE9JR3VBRWV0THh5\nVEZlbVZrcXAwK3BsYXFOZUF6c3lRSkUKLS0tIFRCQzNUaGFHdERWNWR4enVWRGpx\nbDEzRU9jWHgxWHovaENjbkFlZERIbkkKvAW31gTJg9izrWuAMeDHS9SWPQYtxRBY\necDCn8QORFrnDdxEusCnGJrAU4kmS3Y3CwSHCtEijs3JdIgg9wl/MA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-07-03T10:47:04Z",
-		"mac": "ENC[AES256_GCM,data:y1U2vsdqR97fPAnp6iZiLY1KbWYmgDqgZ5bwIkWPCr7Gjjrn+qV+sc2T1BTVz3Zo0JOz4ScCc+f6snVsFKdCDU/NmDVFt/sqyH4NHUPRQ3StsQim8C7IkSwUtm3EhrqpLYFD21MEjrYYdHMHbWybxrOI0qI6mDwZymHJFeCLdQA=,iv:lVvPn69eQE/huwDmwePepfpi2l9ZOPQO7W20o4AJBFQ=,tag:7VPfjKZsBVJTZxNwTcI6sg==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/sops/secrets/peer2-age.key/users/admin

@@ -1 +0,0 @@
-../../../users/admin

modules/clan/apple-network/tests/vm/sops/secrets/peer3-age.key/secret

@@ -1,14 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:JPdetkhtF9eSmgEfCO2exXlGQ5KWLeIM3mnW5BfyTY8r0PxWSEGAwBskC1SiDdRERWB2VEbPiPgCNXMnGaYlDqSdZN6R9wSFvsQ=,iv:qGveNhUtgxvKnmdsPoPpffKyi5srlq0Pd6aW283B5C0=,tag:TcJsCrBlzfjXvztcRaxYFQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvdjNHa1RlcFJHazB5TXFu\nOUQ4REpCZm5Yc3ZhcVhwT1FqRHlvbnoxZWlFCnNrVUEyK2ZYSmlacmJ2b2QrclZl\nSDV1eWxXVmJxZlhMMXgrTWtjcjVhQlkKLS0tIHZPN3pCUVBLQmpRVGx6SDBQNDZo\nSitheGhXNGl5QW9HTGNsTTdTdWVwaE0KfuM5xZOPbR1lxkJPJUOVrtlW5Ujobemp\nid40reDqxKQxP3khJv8lf9ZoN8LAx2Iwh0DeAl+UJpsoVWgS7uI2qQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-07-07T04:54:10Z",
-		"mac": "ENC[AES256_GCM,data:Tt8yqzfAnSDe2n7KDt1Z/D73hkS1w7DsqIh+s5WljLzar9PEt5vUCLb8DIvBwITyzGAoHH1ym3v3NrnJWCdxajKExTMBf4aY3MJCtykeCG37701S/KxumjTW9/fJw74gcET5I6NafTWb6H5XHsrRaQX1Xnspcs8B7uLGZZ28dSM=,iv:Fo5UPVhnjuOx6Cp4grofHOiD2pm0TXuRRuoTwvxKn1s=,tag:VQ/TF1TiyJADj7/3RwPCAg==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/sops/secrets/peer3-age.key/users/admin

@@ -1 +0,0 @@
-../../../users/admin

modules/clan/apple-network/tests/vm/sops/users/admin/key.json

@@ -1,4 +0,0 @@
-{
-  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
-  "type": "age"
-}

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/state-version/version/value

@@ -1 +0,0 @@
-26.11

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/yggdrasil/address/value

@@ -1 +0,0 @@
-200:e6cc:c86:f02d:b0d5:fba9:9b2c:eb77

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/yggdrasil/privateKey/machines/peer1

@@ -1 +0,0 @@
-../../../../../../sops/machines/peer1

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/yggdrasil/privateKey/secret

@@ -1,18 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:6YDp5S2TzEnhDgGhcz8cA3uBsfDt0Oc4JpztB1JUcg/+tDBbeaQN4MLxuZKstXn2Hb1mYtBLlX0vHw++T181Js2sIznyfC1lr68GOvQAp4NYgf23dXpdZk/CMPNUMiGOYVwKWQ/Z0/p0azJ6xV29dYQcM4Q9hys=,iv:Ijzz8hm0looCWoSpjg/rYKp9jhvzRuLboKWHrlwVeFA=,tag:kJcH/1Pu+9q9f2J68LETug==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNDNEL3kvdEpEMjYyOFJG\nMk5adU04M3hxa21jTTZNM2dQREpmUlVES1NvCjh6eDNFZ1hzUVlTY3Nidnp3TkYr\nRVl4TFlrNUE3dVIzZzg2VWMwTFBYUXMKLS0tIFE0dVFQQmxwOFJ6YkdaQlh6dUlW\nTi8rdXdQbGR1eXpLcTdOandqQmxka3cKImbmJQo2YMYMSQD8kNTgol3VJ4YGIaoz\nl3AY4u/fobg5qlzVQwV33G0/Wf72Z2aTjSLnP4thnasQ89PdYvs7hA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1f92zl8y70z5w9gn0l5leg2fhyvxy6m93dfh7n6ltgvuu9nyg6epsrw6t8x"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiaWw5SU9KWmJnVVVmTVpr\nL1V6RnRYUGg2UnhXR1BnVTh5eFhnNFpidGdjCmdMeU1nZkZmTTVwbkNaVElFa0Z4\nVkdGdjc4c2lPWGNrVGxocE9iQUZ3QTAKLS0tIHIzTzRRbXVkM3I4ZVRxeSs5eHV5\nTUxOaytzb2MxQ2UybkVCYWVWVmVEcUEKPeK+CC7r3CP5BJqg9thWNHWjPBp/ueHU\nRif6T79kqf+c3B34qXwR0zfyM1+a0r9GAVVC2/q+Ha/As5sPJU39ww==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-07-03T10:46:56Z",
-		"mac": "ENC[AES256_GCM,data:PffiPU1GR9DojTb7TxzBkpivKV2ybmmq9h4pOOyq7p5BAIPF+JSe+BDtbItQ+Gn5LnitQRUVvhat8E2iYfz3JgNxNKcsNFU/mWtCz3PlqyiuRzUBtEL3zYfhdMi8hYYlVdfMumaK3VMk+b4uDGExR+MpURL97TFku47qRbzbILs=,iv:3//fj7WtIX2QNYB9ub1JKAFIn5vJeuZl6rqaEsX0oQc=,tag:njU+WAVq7xBgE0sna2dMKA==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/yggdrasil/privateKey/users/admin

@@ -1 +0,0 @@
-../../../../../../sops/users/admin

modules/clan/apple-network/tests/vm/vars/per-machine/peer1/yggdrasil/publicKey/value

@@ -1 +0,0 @@
-8c99f9bc87e92795022b32698a440d6f9fe01d1110f867de8176bb190b92acab

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/state-version/version/value

@@ -1 +0,0 @@
-26.11

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/yggdrasil/address/value

@@ -1 +0,0 @@
-200:eb95:7d1b:3ac3:62e7:24af:2274:3771

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/yggdrasil/privateKey/machines/peer2

@@ -1 +0,0 @@
-../../../../../../sops/machines/peer2

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/yggdrasil/privateKey/secret

@@ -1,18 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:vOwMqT12A5ap5hRvCGTjTUX4sXKO3N7KE8eQ+/SCcBWndU9/b2AehiNgplWWMGcYdmeDL9qI8V2pPkgBkQ/tWH6N8DccSM/zQzrBUkXvRApl6hvNZAWuBVf/P4MW4/EbRGtMg2tEXkaPDtRn2TsDK7ygmXmqArI=,iv:FkxFx/ClAftLu85S6Uq3ZOom+YDOpeWGlYLOFBmFfnk=,tag:zprw62qiu+hmLZEZbnqYXA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WVB1M2ttd0FocGhTSjNo\nUDFIcmpsL051TndWbkJVakJHbUxjY3Q3NjM0CnkrbFlHS1E4bkZJQTIvMDJ3VDFv\nNW1OdmwvalBEelN2d3YwbHVqTW94OFEKLS0tIGtpOWxCM29xdXhQL2Yzb094OG1n\nT21mc25yU1dJL29vekRHdldzdDR3dEkKoZ1dPRaPg8iVsuec6IhV3cLPchokV2wv\nu6qb92hsLQuyPHDA01Oey0jxmaYMQGtAVjo2zEM+E+zrKY+f2pHIUQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcmo5d2x6c3J0YTkwMGJE\nanphd2FiUjdGdmdNeW0rL0FpcTVSM3dublZ3CnphajNVV2YrTGl2a3ZqMTJKeU4v\nTzZRS2F5MlA5Ny84cFFoNWZQZnpBZTgKLS0tIHVKQUJWcmlPdy9GNXNBYnpJcEVC\nNmJVMlpvSzZPdk1JY2hIZVEvc3cwV2MKE/cMJU/j5g62njJ49AfnLutmxkpz/gxX\nIqWe1m7Uxl/awVFa7F8N7TUkd0jLbAGXZaonDjiBxOTwg/jr/apnuQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1u36fr87cru90vfznf5szasya9nhvvseh4atk8zsdj0rrsu0nnvwqsyt8g6"
-			}
-		],
-		"lastmodified": "2026-07-03T10:47:04Z",
-		"mac": "ENC[AES256_GCM,data:wiIkwEDwGJZe0u8qLHthPkCXubeIGyHV8yBo8CsSengLVTOtRZ877zTrFvE74ATF1pGE3DFJ5qGRrOGgKJ4VOl043LbEBs0bxZC495pPMPYszimp2UAf/XE3QWlNi9p4Ce/kbvUDd0W3SRt4hIv6HOLWApiRoqfS2qSMUnBQeW0=,iv:Hs7EysUnje/iWZRhJLlqf8wuFJnIMpWfXWHrilfmM5I=,tag:Rgj9x4ZOM2fihKKNQ4ux3g==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/yggdrasil/privateKey/users/admin

@@ -1 +0,0 @@
-../../../../../../sops/users/admin

modules/clan/apple-network/tests/vm/vars/per-machine/peer2/yggdrasil/publicKey/value

@@ -1 +0,0 @@
-8a354172629e4e8c6da86ec5e447411e4238cf7bb439b798fae56509a82d7472

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/state-version/version/value

@@ -1 +0,0 @@
-26.11

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/yggdrasil/address/value

@@ -1 +0,0 @@
-200:3dcd:9b0d:103c:f953:1e8:e3a2:ed90

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/yggdrasil/privateKey/machines/peer3

@@ -1 +0,0 @@
-../../../../../../sops/machines/peer3

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/yggdrasil/privateKey/secret

@@ -1,18 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:7no9ZnfatNLEykz+JOUExxmaRzBr7B5PEcevETySJWHTCCjSULdRb2KLxbXP5OKWSuJbR8pJ+p+nZuyr7aOTyXrU+fgwf/Pff4KGaZbKf1t3HJun8wJ2q62uaFYu8ACbNFfwIzJ51SPGcO7IHxfjWn5k9zG7av4=,iv:+VNvFKAJ+HDCGZciug8SKHOcM1JZQUAbZpRT5en4xcU=,tag:3kcDHWIs9ITzTKDiyyYhnQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvZ0VFcGhPR0NrMGU4dStU\nZGpnMHZmbUF0R0NFNWQzNGVpZXhYQ24xNXk0CnJIYmJYMnBmeURLZytBcXNRNG5u\nZzk4cXdPdnJIU0JVam1NWFA3TkhuWFkKLS0tIDZYUEVGMUtCQWdSM3k4WEZhdUt3\naElkc3o5SXlFYTJLNUpGZ0ptNm96M2MKYKW5emktK2M+IYX0v/swCV1fgrQXQVlb\nmz11rN5fJWV5wvLcTtyU9imgZLB9MfRMyIYlHzD2HPbW+zr8Fe+bBQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZVDVxY3JrWk1TY3ZsazNz\naVl4Vk1vRUdkRTdlaDU1TE15dC96ZHlxQ1ZBCmYvSmh1QlBNRnJyRy9kcDR0cXhY\neDdPUXZ6b2FkWnBXbzA4bzU1aFo3bEUKLS0tIHMrb05Oa3FrRzh5VHN1RWRmUU9W\ndGZUYTVVQkIzM3FRRHp6NXlEdEU0VTgK7ibTaEcvbVTQjcbgeylu2s5tmI5kAadM\nFGiOgJhDFuzbHxXIEQlsCBIaXe6LlGhBo41VZbMxme5py6nJFTBHKg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1rka3368ltqc787xw99uu762lqfk7qxld9265u2t62fpxnp9xhufsc2q5rw"
-			}
-		],
-		"lastmodified": "2026-07-07T04:54:10Z",
-		"mac": "ENC[AES256_GCM,data:gonhuGY61G3Gdtj7q23aTNYU95fjLMz2uVTsSX+Hw10LGUTEMM8LF/Phae9kr5BZKD8BYaIgH32As2+n0B9jZ4WV77A5hUe2NJze9d0A40P2MtMh9xFWWh7yEXXnx5dy1UDrthL2LBa7ebPspuaC0mFhRHdoJK3J2W1m41PGjZc=,iv:H4yNuE8i3UxVjAUIpnaFX6i8/DaO4uIlHrEY9VaSiRs=,tag:9lJtixSNv7tpox0V3ZoNnA==,type:str]",
-		"version": "3.13.1"
-	}
-}

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/yggdrasil/privateKey/users/admin

@@ -1 +0,0 @@
-../../../../../../sops/users/admin

modules/clan/apple-network/tests/vm/vars/per-machine/peer3/yggdrasil/publicKey/value

@@ -1 +0,0 @@
-e119327977e183567f0b8e2e8937c9d04708e296beed57792a1b6935eacf69d9

modules/clan/headscale/default.nix

@@ -19,6 +19,12 @@
             description = "Public URL for accessing the instance";
           };
 
+          base_domain = lib.mkOption {
+            type = with lib.types; str;
+            default = "";
+            description = "Defines the base domain to create the hostnames for MagicDNS in Headscale. `base_domain` must be a FQDN, without the trailing dot. The FQDN of the hosts will be `hostname.base_domain (e.g. myhost.tailnet.example.com)";
+          };
+
           advertise_routes = lib.mkOption {
             type = with lib.types; listOf str;
             default = [ ];
@@ -26,13 +32,6 @@
             example = [ "192.168.1.0/24" ];
           };
 
-          dns = {
-            base_domain = lib.mkOption {
-              type = with lib.types; str;
-              default = "";
-              description = "Defines the base domain to create the hostnames for MagicDNS in Headscale. `base_domain` must be a FQDN, without the trailing dot. The FQDN of the hosts will be `hostname.base_domain (e.g. myhost.tailnet.example.com)";
-            };
-
           nameservers = lib.mkOption {
             type = with lib.types; listOf str;
             default = [
@@ -42,42 +41,6 @@
             description = "List of nameservers to pass to Tailscale clients";
             example = [ "10.0.10.1" ];
           };
-
-            magic_dns = lib.mkOption {
-              type = with lib.types; bool;
-              default = true;
-              description = "Whether to enable MagicDNS";
-            };
-
-            extra_records = lib.mkOption {
-              type =
-                with lib.types;
-                nullOr (
-                  listOf (submodule {
-                    options = {
-                      name = lib.mkOption {
-                        type = lib.types.str;
-                        description = "DNS record name.";
-                        example = "grafana.tailnet.example.com";
-                      };
-                      type = lib.mkOption {
-                        type = lib.types.enum [
-                          "A"
-                          "AAAA"
-                        ];
-                        description = "DNS record type.";
-                        example = "A";
-                      };
-                      value = lib.mkOption {
-                        type = lib.types.str;
-                        description = "DNS record value (IP address).";
-                        example = "100.64.0.3";
-                      };
-                    };
-                  })
-                );
-            };
-          };
         };
       };
 
@@ -207,11 +170,10 @@
               settings.server_url = "https://${settings.public_url}";
 
               settings.dns = {
-                base_domain = settings.dns.base_domain;
+                base_domain = settings.base_domain;
                 override_local_dns = true;
-                nameservers.global = settings.dns.nameservers;
+                nameservers.global = settings.nameservers;
-                magic_dns = settings.dns.magic_dns;
+                magic_dns = false;
-                extra_records = settings.dns.extra_records;
               };
             };
 

modules/clan/home-profiles/home-user/emmie.nix

@@ -116,11 +116,6 @@
                   ];
                 };
                 programs.chromium.package = pkgs.brave;
-
-                programs.firefox = {
-                  enable = true;
-                };
-
                 programs.home-manager.enable = true;
                 services.syncthing.tray.enable = osConfig.services.syncthing.enable;
                 programs.plasma.enable = true;

modules/clan/home-profiles/home-user/home.nix

@@ -11,7 +11,7 @@
     homeDirectory = lib.mkForce "/home/${username}";
     stateVersion = osConfig.system.stateVersion;
     packages = with pkgs; [
-      libreoffice-stable
+      libreoffice-fresh
       element-desktop
       signal-desktop
       brave

modules/clan/paperless/default.nix

@@ -16,6 +16,18 @@
         ...
       }:
       {
+        nixpkgs.overlays = [
+          (final: prev: {
+            pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
+              (pyFinal: pyPrev: {
+                psycopg = pyPrev.psycopg.overrideAttrs (old: {
+                  disabledTests = old.disabledTests ++ [ "test_stats_connect" ];
+                });
+              })
+            ];
+          })
+        ];
+
         services.paperless = {
           enable = lib.mkDefault true;
         };

modules/clan/personal-computer/boot.nix

@@ -1,5 +0,0 @@
-{
-  boot.supportedFilesystems = {
-    ntfs = true;
-  };
-}

modules/clan/stirling-pdf/default.nix

@@ -14,6 +14,11 @@
         ...
       }:
       {
+        nixpkgs.overlays = [
+          (final: prev: {
+            libreoffice = prev.libreoffice-fresh;
+          })
+        ];
 
         services.stirling-pdf = {
           enable = lib.mkDefault true;

modules/clan/stirling-pdf/flake-module.nix

@@ -10,10 +10,10 @@ in
   perSystem =
     { ... }:
     {
-      # clan.nixosTests.service-stirling-pdf = {
+      clan.nixosTests.service-stirling-pdf = {
-      #   imports = [ ./tests/vm/default.nix ];
+        imports = [ ./tests/vm/default.nix ];
-      #
+
-      #   clan.modules."@clan/stirling-pdf" = module;
+        clan.modules."@clan/stirling-pdf" = module;
-      # };
+      };
     };
 }

overlays/default.nix

@@ -7,6 +7,5 @@
     frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
     frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
     frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
-    frappixAppsOverlay = import ../pkgs/frappix/overlay.nix;
   };
 }

pkgs/frappix/default-thai-company.nix

@@ -1,35 +0,0 @@
-{
-  buildPythonPackage,
-  pythonRelaxDepsHook,
-  flit-core,
-  mkAssets,
-  fetchFromGitea,
-}:
-let
-  version = "0.0.1";
-  src = fetchFromGitea {
-    domain = "git.b4l.co.th";
-    owner = "newedge";
-    repo = "default_thai_company";
-    rev = "68f08171252099920d52f5c47800d65ddf4689b3";
-    sha256 = "sha256-9UomP8G5K+nkAMCfn+gXbBNivLlDo0c/36FYZgHm2Cw=";
-  };
-in
-buildPythonPackage (finalAttrs: {
-  # pname doubles as the frappe app name (services.frappe reads app.pname)
-  pname = "default_thai_company";
-  inherit version;
-
-  pyproject = true;
-
-  src = mkAssets {
-    inherit (finalAttrs) pname version;
-    inherit src;
-    yarnHash = "sha256-oZgyP0hTU9bxszOVg3Bmiu6yos2d2Inc1Do8To4z8GQ=";
-  };
-
-  nativeBuildInputs = [
-    pythonRelaxDepsHook
-    flit-core
-  ];
-})

pkgs/frappix/overlay.nix

@@ -1,9 +0,0 @@
-# Extends the frappix app scope with in-house frappe apps.
-# Must be applied after frappixFrappeOverlay (needs prev.frappix).
-final: prev: {
-  frappix = prev.frappix.overrideScope (
-    ffinal: _fprev: {
-      default_thai_company = ffinal.callPackage ./default-thai-company.nix { };
-    }
-  );
-}

sops/machines/stellio/key.json

@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1ez6597tgxg7xxpm6lqv30z82sa97c04afq4wlmw8qspm8pq4m33s86fxz7",
-    "type": "age"
-  }
-]

sops/secrets/stellio-age.key/groups/admins

@@ -1 +0,0 @@
-../../../groups/admins

sops/secrets/stellio-age.key/secret

@@ -1,42 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:PdrPoAQnV9OBdwssaYfqN7tga1yUGKo2o2BzHaE2LJRDYo+Y5QFJi1vSxnT0jny4yN7fkoU9ilxYGi+sBkvtR77PescyUESta3U=,iv:KfpSaeZE8B1qBXPamhgLh4FvemjWHWMS4frJh9RWw6Y=,tag:uZ7fXNgHFXxQ4OlUurXdyw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0TkI0blpCUEYyQXlQcS9z\nRSt6andVS0poNHI1S2pWSC9tdjBOcWlCS0d3CnQ1Wmxvc2IzRlBKbFV5R0hMMmxt\najRDNlRGUnUvL1k1VUxVWlVPdFlwTTAKLS0tIFplQ3d1WWhBcUhEVG1EZ2dQdlZW\nZjVLbFJHODA1VitpZk54Q0tTekpQZ3cKwd6lFt1KJs8H04d1WeztJntDVx4+SOj0\n1Eb31GAUNHxkJMGKpOyojpwewAWRXaLybq734CsrDn2SYrcCxxwkAA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFU4dXV4dkQ4\nSThRSGdRU3lIdUhEOVB6Yi9hbWg0UXJ3YTM0MHB3SkpWR28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo0VDIvQWpJNEdnK2NjV3dkbmZIWjF6\nZTZRMEVxQm5BRGlXdC9BTU1PNVpVCi0tLSBocHN0eVl4a1E3aVZhRmpGVEdZajRE\nRjlKU2VDK0pwak5LdDhoa0tsUkswCrhbCwwLHBxkvkKqXThgc45LyABYOQRhemWM\nw4k8cnCgtricI4FChhG8wNpFx1vKBJ1z7spimX+fG0AxXUIkiqQ=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFljSUI5cExD\nQnVSVlFTL3ZjNW1maFRwZVVhSERlS09MaEZ2VWpLeXh1V0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwoyVlZzVlg3U1lpOTcxYzUxSXVycXNF\nalZlcTdyK3MvVFRyeVRQOGkxQXB3Ci0tLSBMMXhETlVrN0hMT2NaamRDTGxlQVpH\nNW1VZWs1QVVrVk1UcnBiWXdQVEs0Cn7aMYe+48HDHhQRDAUVVWel1mv0KZKYguzX\nOlQCqCirlzMhSRmXTYNQe4S80ecymgLBmcjvQVSitREv8mK8eeY=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhVdXUyNXZX\nT2NacThiblFjYzNFRzVKQzFaRm96aHRUR2xrTzJqV3RuSFkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo1N25PL2RjYUcrblF1V2t5eERmNlR6\nNlFoYXpoOTVlK2gxbFBWa3FNY21vCi0tLSBEc1lsSlA4WklTSjE1ekJNbm40bTVa\neHRRc1Y2S2diY1FIUU1wdjhwVTJVCr8/pFIR0gZNp4zAmmcKFwXHg+FlDSlLqHBr\nuWqURlbZNaAA7azU4pjt2EJC6ppcgcW85yYxVghy3v1Hb1PBW+k=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNGR5bVkwbDVUVUl2cWNY\ndStDL0I2SmtNeEd3UEs2TExKM1pFNEgwTHdBCmU5WnF0dlRGSkJ2SVpLejlsSFQr\nRTE0YVUwMGxWRGVtV3MvMHMrdW9YRlkKLS0tIGcwMnRYb2wxcE1RMDcraVljS2Nz\nTS8zZ2ErMTREWklXNVF1UnlPZ1BRb1EKe03KNmpDxrTndF6hQeuBtaW2FIb9LaCg\nXoBKHmSxeESIPunpAhWJw2YUdPJ+8Td+fAdOZCPgktaeGcYSejaZMA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Nno3Ung3dHNtK3V4dFdm\nbW1mWm5ZN1ZtMjBENTlmaUtHYjZvbUluZERFCkNobHV4SWY3eWVIN1h1Ry9WWWxz\nU1hIUndONjFBWEJiTUc1cU9COExHWjgKLS0tIHQ0eWpzdGYveXNRZmZHeWdSbytt\na013d3FlL29HRy82L1YrR2NBTkR4YTgKCOuq/HrqenpgwhK73vQsvG2axxdPlWrf\ngK42riDP7VLxdqbri/mPIGKiGoMLumW3OQejUc6p+e3K6y42cESuyw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZ1NjdTVOemZvZXJvRWIx\neEVIRWc2NndINzNETVVTOHNqSlBGM2lDbkIwCmRtR3FiQ0JkQ0hQSTIwQWs1SHE5\neHA1OWJTVU1CSVE0NTdlQTJTOGFVWXcKLS0tIHI5M09aR0ZrTzhmUmxRS0xHNzVO\nUUIxbWt4SVE1K1R1Unk3YlBPZnpHRWMKHqE7HUK3YM+bYQWUmO3UXSokoABSbsRi\navYoaIVbMgbTcSwkK+f8aZML9cyX4juA3NbKVAnmLPPU9aEUzImncA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVMm5XaGEySTVtbUY1QlRk\nNGlhb2FsK3QvU0xPV2FmQ0RjcVRpZzZhbkdzClhjbE81TVA1YXJaTk5jbUR6UGF5\nMzREcit5dHVHbVcrU3IrSnZFaDlVd1UKLS0tIFNyMzd6NmpKNy9nK2FHU1BlUmdO\neThBTkZMWWNFb2M0NmhNZkd2RW5vUk0KbDNx1IUaM9akKfH+sNEVFbIxnWbHJAdu\nS7aFj0SQx9O7G26PJEPZOLBYW9qryA/XVYcEcxycEoOBMu8J50GWZQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			}
-		],
-		"lastmodified": "2026-08-12T08:44:41Z",
-		"mac": "ENC[AES256_GCM,data:XCAM+Fsk/1b+YVPWWAfruny5TA+3SrDBEPmvkhzDzJofmvfPiHSSl7X6nxGSdMyEFO6EElCNUiScDmvVsISlb+Vsl9Eeqqst3dPtnbCG+uUoYaRy8B9R4Pew13ceR1Q8oKNux5J84zQKctcWCKRu5ASa7mhJWC+68+azDkd/UTc=,iv:07RbTD3ggIWsQ/0f3Bohuzpqk21LelaCqz8jMftqsHE=,tag:sps3aXc94kUtLlaEYOU1nA==,type:str]",
-		"version": "3.13.1"
-	}
-}

sops/secrets/stellio-age.key/users/kurogeek

@@ -1 +0,0 @@
-../../../users/kurogeek

vars/per-machine/adhil/data-mesher-node-identity/identity.cert/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/adhil/data-mesher-node-identity/identity.cert/machines/adhil

@@ -1 +0,0 @@
-../../../../../../sops/machines/adhil

vars/per-machine/adhil/data-mesher-node-identity/identity.cert/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:xSfysMoIvr1hExlgR+bXj1aoO+pFsoj9tO+cppTFg5dGbv33iOK63l02reEJ8VkUhpjWLcqyoQG1/g/E61QbnqdgzovES0JxDnpTwo6wNMJSqhNzVogLHw+hk4duDFkOXhKYkJjuM1Z1jIp3RbrwEGwQNtR9BwPNlRSjxwKYyAh5g8Eo5DvSN8IwkQbCZK1FmD6osdf96z+JnCDmnUK5SUNcMHHCEAC4My6viZIYMSW9SeCkmLljJTsJ43w+XK0Pu7+lpv6dDCvi+h/P5tbhy99T0TJto+dP4B7k+9rMe2a0f5FBVIZ3cseKV8Zg,iv:1S1vJmhVbbri44+R0as7z8WKHUVX/o5KtiyFS/rCJrI=,tag:4wp72HMZOezIwvF9Ls5HEQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoWUpxYzNod1lCeGQyRGlI\nNWlYOVFFWmlZR2FqNmNIZ3FnQlN2dEZIOUhjClduUEpTSy90VVptZnJnb2c1TjZW\nVEc0MUJsYVVsd0tvZXRBU3dkOXVSbGcKLS0tIEJtM1RBWS9obzdzSWpyQSt1QXlo\nVi9TWDhkVG5GTHU5WWhldU91MkkrY00KmuB+RZ84xPm138UgqB0dRswPqJGdgy1/\nji2QmmS4FnTbTNXYBOPSh9boAEkHbuUHC1bYGdDbfRSgMWZbwUE+RQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUMllkV1lSajd2TGxoY0dP\nOFpWU1ROeHlyTnJqN3JNQllkKzB3azJNRHhJCjU4cUt2Q05yUDRsVzhmSy8xSk5x\nandZSE85aWNYY0J0Q2lsSFRBdDh1UGMKLS0tIEpxOHpPYkFxeGNyUGtIQmVIZmRn\nbE9KU0RMUGJxWmhucVduVEliUmt3bU0KPYYYKahYmpgizWBAG0IiF239VbLeefnL\nvAgisIN/KzTmIfYlb2AT6qebZPJtqd33Wn2Mz0UlmuzbaTcIdz5DvQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1dytdeqtct0jy3vvmqvapgqjf3v9p486jjcpx60gfxwgrptgyyqrs0lj9vc"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1sbncyZUZo\nZU9wbTF6dFlTZEYxZHZTTzY2U3lteDMvVnl6NHYzWkU2RjAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpla2JPUlB1UzduRTk4dndsRW9aN0ZY\nU0lvWU05S1ZSRnZ3TVhaQ2ZINWU0Ci0tLSBXQnJjRkNMYnExTG9oaTNydzV1U2NX\nOXpRd1ZMc000Mi91dVdvSGJvQ0tZCuIyt47NxK1d7lyzv3F1cqh9bXvGGQdgNfXj\nCRbcFLVHgf8y3LZ6/Ajqr2VBtmWWbNx2x/9v8lW4+YBz62mL6Lo=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdUOUtieVpC\nWDhSaERPaCtLbVpucmF5MXZ5TWxGcFo1WlNRYlVXZDNTU00gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpINnpFSitreEZHc0hCMWNLbytmdHBW\ndG8yVkp3WE5TNXhnVXdXTHVQczlzCi0tLSBXWEtXcjdWcEloQnhXQjNrd1FhSjdj\ndzhIM0t6MzNhZFREaEw4THRGYit3Cku+h1z7D1+y68HkGC+NUHYWolbkvEL0arXn\nkINmxQw0bVfo6QToBvRfX6sj2F+lCi3z0woZMdDVznaTZPH57nA=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE42Y0tpcEJj\nUGRpUXQxS2RQVk10NzFiRWI5UGFsTjkwNVpxODF0VTJ0VlkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpHUDBCMVlPdHJYQngwTjQ3REswZ0Jl\nOVloZ1ZCQk9lQzh2WXUwMTJ3OEFzCi0tLSBubVFFZGpvZmZHd1NaNDFDT2dqZGtt\nUlV2REZLbVdaTWY1ekJYNEJaajhVCjzky+vHHIFJhosSueBqudCiEt9AjWsGmOl3\nJgeYYua8GvLvSwqjXqayhubYdJPEfgmfsOMJ+DDD2aNeYu5A4PM=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaaXhwRFJBM3JiY3dHYi9E\nVXRMUUFFNFRWby90RXhQZmtodW1rSE8xTlJ3CjMzbVFsNE8rM0RaVktWNEl6V3po\nYzVWeEtId3pyeFJySWVqR1dpQnVCNkEKLS0tIDQvS040L1JIVmE0eGZ6c0wzVXQr\ndW1uUGtXdE9EOERBZ0IvNVNaTFVEYTQKEkymB2wddHYh91NhJcQGiH/Va1ZPoZ9d\nKrcqiNXZY97xe9EbFVmzDJOnJz4cp23CUjYsyflpViyai+Gu72BMvA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtY3VMOEZkODNydnNMc2hO\nanZGRFNBN3dXQ2hYS1A0Um40ZHRqVTVjN1Q4CnlhWmJWL3NhVmJuWlRsR240YXhG\nbkxNcDZTSUtwZ1pndC8zNlI4cXZ0alkKLS0tIHNsdmNRVU14Rlp4MFN6VmFjd2tX\nNWwzUXpZTlE0cDZZYmcvUmpBcmlOT0EK+ywZXQlUUs14DF/+7kcmoRv3h/RSc9/t\n3apqfe/7KqpU3WS0vXA/HKem4d33vfCvkyHWrH6YTIG4r9czYn3Xhg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnREJYQ1NDNC9Vc3RSODRG\nVWszY3ZDVWovMDVsdVRQbkFpVzVINkNJQjBvCnFadUdzRGNudDllMzRIb3UzMkM2\nK05Mb2VNTjhqMHpQaUkzTkRrVlU0WDAKLS0tIDQ0U2ZWaHpxZERQWWdSYWhMNzR2\nTmp6MW1ja0p2TXZhcEtjSS9yNWNaSW8KNJ73ktLW5KlxCuhnMiHGRK0yHJvVhsLM\nPlhWTv10qzrdCo09Y3XNWngR2WRDNgMta9IZkynucjOKgevywrEycw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRnlpZmRtNU5jbDBOdDZj\ndGF3R1ZHNTVqait1WEJWMFNnTkVTM0NXTFZvClRGd3dEaGxnR3MrRGdhOWtTdUU5\nbTlKSlFOcWRqQUJ5ZXk4TWR3em9razQKLS0tIEV0MUtnYTY4azF0dFhRbHQzOWN1\nUG9Hb3VhL3JXK0krdlZxNVYxYVVUYmsKGttTBJyvfeWMQ6cQOwISTjMC7H+EY9Oe\niQ14q5C8wAdB73+Vylnd9/RaTlRfjsYrTRvo84ETtDO1DcW722Q+dg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:56Z",
-		"mac": "ENC[AES256_GCM,data:2jvP7hr8+6LjYaOxjGqODFnHFTYaDnwSbrfqNwQsvxi6tg7DFLECVWYJIWY8O1J7FXDK24wFiBAC06e9QckAIYvAOoo7PvDmd6GjGG04H3zsLpbiLoaeZ56k0U0DV5nwm1W7KRAOaGgxvG1fBu/7k3Vyt0po99s1c9KdYgoUcgw=,iv:fd0Tokd/UELM1DzWFEDQ77Farca/rMs7bQyxDmw4sUo=,tag:BOKnKyAoiqf8QKHHI1o9bg==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/adhil/data-mesher-node-identity/identity.cert/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/adhil/data-mesher-node-identity/identity.key/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/adhil/data-mesher-node-identity/identity.key/machines/adhil

@@ -1 +0,0 @@
-../../../../../../sops/machines/adhil

vars/per-machine/adhil/data-mesher-node-identity/identity.key/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:u9zmKAZ0lB8CdJ9UBzhd5RHaUO4+B3gm7NPbe2S3ZqNE86K5VQTIqyzRNa7SEcr5Gz5tRVV2Vorskbu1yGKbR0OQoy+hPhEBIDfbZqL7rx/iz5fuws1MaU6otyZ1GPO3G8wQGMmVeeAZiLjyx6O7++Z+2TmmMpQ=,iv:g+ui3d4Ycwf41/WBFMn4pDnnAooxjMW8tyL6GWHHDAU=,tag:ZHjYhBqgWtKk70UKiHUbhw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzQ05DQnZNb2RYQXlmSU8r\nbHY1TkNqUjlrNjNCd3pnU2dLSHQyRll2V0dBCnJBY3haVkxSbjlZZTZNeXEvZFBW\nbFQ1ZzRvSE5NTysveHEvZktuT2h2eG8KLS0tIEhpTkplVkd3b1dUb041U0VTdUxJ\nTWc4NUZESmEwcTVXazVNcGVmMFZISmMKOSthXJzT3o4OMfhToC46T+cs+gq64La8\ng6PY+HikpY620CmjegxOE9VO7uPfAqZRAjevzbmlf/Eo5EPAU1ZaKA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkMlI1YjRMdkJHbmFxUDky\nQUxvaDJSUmVPVDZOa0o5b3RONUJ4YUUxelRzCkE5ZW9uYWphdEJycCtyZ3BFNU13\nRnkxaVMxTjcvZ0ltQjRSSTVKV2RJR0kKLS0tIHRORjJzSE9MTXkyMUoxbXlzcmdk\ncnM5VEVzMlpwOTR1NldGbUlNNFlPaTQKum4fTVp1lPSQyURu5oVAzLUT1ExLwEpA\n1DSwypX3pXJOQxQwYyTVrAplcOz1e/5Tsglnq5cgWOB0kldQ4Sh6zg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1dytdeqtct0jy3vvmqvapgqjf3v9p486jjcpx60gfxwgrptgyyqrs0lj9vc"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZhaVhsVXhm\nUFhhOEZVWEVucjZKT2diK2p3bHNsVjRVK3JaSUl1OUFkbXcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpPQ0lwbU1TZEgyb0VhSGhoeWhIUjZW\nSWhOclVRcnBOYUQzTmUycUkwR3prCi0tLSBQdjUvd2FmeG1ENTdodEhDek55Y1NX\nTGpXaWt4K0h1U3d0TXhoQkRNcXJrCr0kO8qRnZyR6jPbMneipRfFKWr2WSYUL7OZ\n+LAQeXZWUAh2eG+KCjJdaJDrvlPLDjFKnVygR+YBT+RtwtRFhps=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVFS3c2Yzk0\ncWV2akJCSllNMXpTRStWdlhwbjNiOEsvam1mT1dsVWZiQzQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpiOWxjR1lUTVYvZjBQSUt5clZVT0Vn\ndjd4cndCc3lUdzNEMjlXbCtRY3pJCi0tLSBlaGtqU2xoVDdlODFCeDdraUNoNkxF\nT3duYjZlM0ZNcDAxMVBuY2pOVVlzCn9deDTpXU/fqPQ3ZYo6Wj8Sh3Q2lx9RPvD3\nSmV9uiRypsYtM0x3iOTOP0Pf4vZVEDwbSjf9XjiLPiXa1MDo0yk=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDlqaTBuaitB\naElUTnlnU2lLUVdHMlVVeEwxb2tySk1JdjlQZjBQUmxYeFEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo1bWtrSkJsNTRjZHNxRXpCOGtVTno5\nejZTaHZ0d2FhMUhqU1FzZjhyaWJvCi0tLSB1bjlscnJqeFJIbklDdjdIUEhONjhJ\ncW9NbzJ4RmZHUExBSHd3c0JndHJ3CqTIhy9BPt1QK4bRZeU05huEL/zyUTZmqL5A\nJ0VqWdoFs2qb/vWeHwOnjEBRZ/FPQr02aEuZL17d5c1xnpP/fqM=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6TzAxYktFUXRhTEoyTHYr\nQWd5MTlQcUgzTXRhWlNTd3lyUXlCMEpqa1hrCkI5dERSZlpQN0dwQXpqcC84b0xh\ndnRZWkZsZms2VVM3eWoxbEVaYTBoTFkKLS0tIFdVTVJYK2d3d1VsTkhSWkM0NmJI\nTHBqSFN0dWhJRFFVZ05xNmZzTFNPRm8KNCDPsfPE6O9ntfZIuvH8MfKHRl5xCwUx\ntxvU0Wb18MXdx831vS4xm4G9d5e+OZCbo9ZP35cWu7gSFMcCG/rFmA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGU1pWdU1sMUY5VmJ3K293\nUldMSUtxcFNwZkJHZWNtOE9CcnRqRUVwaDJNCmxza1BwdVRNNGcyUmJ0VGlMQ2tM\nWXljVkpnN1JVdnRrc1puZlFwTW52TFUKLS0tIDlKMDFUSmtWeEx2UHlKQ0t5SFRj\nVUhzemp1ODRKM2RhVEc0MW82cWZNWmsKfv8mpvy+rAg07w7uVw3T5wbhjluz6Twg\nByAf689J9J1S3RkKqcUJox+gfXkcmZvawhuDeS5mrjoGcH95KkD1uA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZTJzRTFUV3JvTXRjWGpj\nRFUzWS83R2RVZmtsQnBIemVybWF2WnBqQUVNCnNHRnFVT0pSdlJhN2lCdWJYdWRa\nMURUNFNJZGw5SjMxaEN0dTlCVFYrUzgKLS0tIHpUMVlLRnVSM21uT0xiaHowV0VZ\nbUx6TGpWQmR1Y0FLaGIwNnREVWVCVzAKkmL9X2rySt58MzX/jWCx/B7yi941SUkg\nUkIK+3ahHlCFmIKOvj7UILXEzeUioZEqcOeBeSjqaJw5j/KQhs8sNA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMXNIWi9RVHNBRnJwOFZl\nQWh6UkFuNEdjUUZJaEJZZENMWFVNeXVPckhZCk5SWXNSWUxrS2lTYThuT1FNdkE3\nNVc5WlRpbUtJd3FPSFdTSG9Sd0NnOVUKLS0tIExJWmVJaDNWV0p2bEtTemg4cGxD\nUkxZNDAwMmlDRTRiVFZoL2Q4TkcvUG8K01yc54Em7MxRehKAavUeksTL4eXYOGVU\nATgcZfBy7g5kTwvB+6rqsFHzRCb7MO/1HfO+GdlSXS2+G3WhOCaTbg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:57Z",
-		"mac": "ENC[AES256_GCM,data:FH8/Lmekcn46FKFiIFSQDt1+PTs4jbMKhUBvGIraX1lXmzH9UicFmV2mbZF30aZSy0soD47s9Y8sB8FEB8TLSl9m7VdjOsMVjf8nMp1tkmCSo4eVW3W6xUlF2XzXPU/jUSHVkr6JFobWOdt5SG3ppuR2+L6whgJsfKZC5nNJ+fc=,iv:I/oMR8xVqdT3Nbg/JTjXQenFaAGXldshN/Tqz/xb7sM=,tag:XSuzRfAaDFJfhguDeLMieA==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/adhil/data-mesher-node-identity/identity.key/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/adhil/data-mesher-node-identity/identity.pub/value

@@ -1,3 +0,0 @@
------BEGIN PUBLIC KEY-----
-MCowBQYDK2VwAyEArdhZL7Tv8hd1gawGQAWOaS1u6ThS2KzB1tVAdPBBDI4=
------END PUBLIC KEY-----

vars/per-machine/adhil/data-mesher-node-identity/peer.id/value

@@ -1 +0,0 @@
-12D3KooWMWz3HFeuEP3Y91LHf63aCzJJYkBdGZK8nrFX2iAUKTv5

vars/per-machine/adhil/dm-pull-deploy-status-key/signing.key/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/adhil/dm-pull-deploy-status-key/signing.key/machines/adhil

@@ -1 +0,0 @@
-../../../../../../sops/machines/adhil

vars/per-machine/adhil/dm-pull-deploy-status-key/signing.key/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:HVHdH7TOo0SscXxV/HGZpupKsZLNAci55YvNc4X/liYApkAv2KbOp3JPL9Sa6NN+lqL0XznmDN7N++IybAbZWn2J8I+UFom/lwl1DwdQe4i1xCAsmb4qglnCDa2frUyZrCgW4PRuK26O4U+O3XhlrCaFMirX3L0=,iv:weVXa8GPWcbjrCuwV0r0+u6QM26UnTnPrsrw5XdN8kU=,tag:KfQeqFvK1isGyTxnEi5d9A==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwcVR0aHZRSVZFb1RhMjJS\nd0ZqUUt1WEljemdoZUlTUEpHVUlYQ29rckRJCks1QkdTZkZudUpJSmVoUi9sWjVX\ndktaUWhKUXFKc0R3VFkvUGV4SHZ4RlEKLS0tIEpFTWFoYUdLOWdDK0JJSm5vbkJv\nMGhoeEI2cVFGSFd4cVpQS2FES2tkb2sKwATWU3kkIaRBtxmUMfKoas55u40nATi2\nxTH34+9mQ3LYzoyheZrA7Ol81a2OuxtIbGDOYH+QcVS+wqvR5IN4CQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5Z29QVVBwQTF2dVhUbHJR\nQkVoK21VUHEwWit6cWs4NG1hZlFWK3lxWlZzCnNUVnlJRlB6c0tTOTNVRitWQXk5\nc3lGMFdzeHZPSStSUjNQUkR1SVMrV0UKLS0tIGZHNHEwNnBIbW5QTXlnOG56ZEN0\nV0oxeG4xWUsxUkpRTmNLV1dKQWZTWG8Ken0eC3JoH0TDhBhT1XXorc6QdfQvUU0U\nN2dTyQKtSa8RsSK28YcwcVQPsRzBcEI+dO9P2lArnenwnJeHg2g7og==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1dytdeqtct0jy3vvmqvapgqjf3v9p486jjcpx60gfxwgrptgyyqrs0lj9vc"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFBIUWE1Zjds\nV3hLc00zeWtKVDYzb3ZIeDBKMkZBc2F3NXY3eHo5QTk3VEUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQowYmpTUGptK0NseldTQUd6eGsyZUJt\nOWVrZ0xVR1ByVFJhVkhXRTAxTFgwCi0tLSBSYlNLK0VXUXRzQWFaTWRyeTgveU4y\nZEhJUUd0V2RBa1lkMDBUTWxQUHBvCqQ6OtgSuI2lMyyNj47IH6qC/zHCXTlHZvAU\nIPMUr85OlBrzH1JaKdLfy9eAYbxI8dnoviYCCmeZWOED4LRfVPs=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZnRU1qdFdX\nY0V3Z2VwWWl4WnhHZjJTR21za2dpdXY1dytUbmRBblR0SDggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpBbU1XVmgzQUpiWituVm44dVJsNHk0\nL25PS0dIZ0huRVdXNStWSVFwWUV3Ci0tLSBzQk5UK1IrY1JLOFFSZTJKeXFwMDJr\nOGk1cnYzU29QWG8zdDZXR1pUTG40CrN4y3fn9ZKtT635wINPrmWPeXwcv3rxaAT6\n+Muth89bZ5gosNeoQp9BpDNx/9t+MPgqm5ySVaiqnCc1ovQexrw=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFd0Qi9QbUtr\nMlJLQytaWGJHVm04a09UVDh2YUNteU5jMkJJRlB6enlXekkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpGRkh0NlBIYSt1UFdCdmc1Y0hJN3Vt\nT3FDbDNhMTBaZXliVFJMK25seDlNCi0tLSBMaFVKT3ovZmxsblpobnlsTUxWUHJX\nOThqcXhXcEZWbExPNi9xUHlaNkNVCj1WCTHJGzcfQ6LsPLOAhfomQEjXsZSkoGWB\nDNSJntPZvylrHIbgA+wMxDocvuDJMgl607KJDeNOVFB/EP00Y6A=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvNXc3TUxVSFN6MlpOVFpQ\nRXZsRUNFdWF6SURKUkFuMlc3am43d1hVZ0JVCjFaTXMzK3Q3ZWtYbWU1eFF2b3VW\nVG5QZzIxbmYvdzJjQkZDYTZFVE4wTVEKLS0tIGNkSFdDSFVTN1NHdUtmVDR6YUV4\ncDdsaGRLekk0eUpHdFVwZGZLZmNZQUEKK7aeW+toesjyyz5uvBn0/FNJH7lWDoTu\nE1FLF5SvZ1MkJRD558jhP7iCFH8kLN4chqt5Kt0NUt91w/e34+DUhg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBWkxCSHdoZEZyeTZ3bk9v\nVG1kVWVsOHdNcHFkc0hWN1E0eUlIeXB0c0JrCkczdk1vdURQZW5pb0lZVzFNbWVn\nQlpPdkFaMjFLcGxXcW5OYWtMcmJ1Q1kKLS0tIFEybzVYNWxmUm5nQm9KVjQxRUU5\nd0I0Z1loKy81NFozUDR6RXpQQ1diK28Ku4avvGkW7fVp5VD83YjWm7vJJDDmQUYN\nOA+ygnrtRnGmuC8rxs9dUUvau4XqagaCKh4D4lop64JscMh1Vd2+ew==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOREFBL3AvVWg4dCtDWmNk\nTTNBWWZVWVp6SnpLY0FrZmhxOHUrSjgyMEZvCllyQlZXV2Rrc3hTUzZXQjlvazY5\nUlVmVzBCSXVBYVAyRmxmQjY2akRnYUUKLS0tIGhNd1JUTXdZZkNhUUFsVE1HNHJI\nYUxqY2VJaWd4ZXh1Q2dJZ2NQSjhhd28KFOCiucBn+u+3PoDNGknw6zZ1HYY2N19i\n5I0WTRTNVHfOCOtjnurqzqkLRVf/DaJtNppJQkR6yPYHbHTkfgaD7g==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0MGxYeHFPZEx6VlJFaDlW\nVUwzNCtqUFZ6SmlzY1ZUTFZVTjg5QlBpYVJvCkt0RnFYODNoV2Q1TEpUYVliZWVh\nRHhJMmU5TWpXeW8zQVg0enhYNFphNzQKLS0tIHhKVjBnWEJUZHo0R0FlcXgxeVY2\nTU5McVRZMXVMM0VQYlduWkxNK3k3aUkK9u3p+Omh/7Yv3FlsxZSTPCEiSOa+3RC6\nPTwKniZGkoNvxzvdce43i3bP08qXbiKpH8tCf8Q+9KcsVjdRd6+01A==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:57Z",
-		"mac": "ENC[AES256_GCM,data:YcEMOYgK7+FpsY+NxIX52SrIk/VIZ0auGLtPaM8F+osblsIcDd/GKJEJlT8bsfp7588GBF90ODWctRknmOVMfvzZKCLVAFx1mcaLeqiko0IyXyNZ5IN/9cIlj93bSeMceYWLd6keKZpSgXRzsL2ICICYhJlsz3LLOxcKwqJ3ghU=,iv:dOM9oW13CuCupOLYv5OXkhmXSCRkXsJhVHjQNUodhTs=,tag:ZWdJ1wep/3OfmOXSTTjNsg==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/adhil/dm-pull-deploy-status-key/signing.key/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/adhil/dm-pull-deploy-status-key/signing.pub/value

@@ -1,3 +0,0 @@
------BEGIN PUBLIC KEY-----
-MCowBQYDK2VwAyEAiLgU58FuDrpEQuneOUCzn6VvwduJwa4ZpqbI0cohgTI=
------END PUBLIC KEY-----

vars/per-machine/adhil/openssh-cert/ssh.id_ed25519-cert.pub/value

@@ -1 +1 @@
-ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIOq8xliF+9qcIMVo5IezY7Tkot9d8dgjKoUXWHF5G1dzAAAAIC2qxCPCmpUOzl/kxpxCly5kJ4eMSLPhv/gVENm6JRcMAAAAAAAAAAAAAAACAAAABWFkaGlsAAAADgAAAAphZGhpbC5jbGFuAAAAAAAAAAD//////////wAAAAAAAAAAAAAAAAAAADMAAAALc3NoLWVkMjU1MTkAAAAgJdtRPKmGj15w0IbOFAfMRO5WujLxefAHBlews3TeS+sAAABTAAAAC3NzaC1lZDI1NTE5AAAAQDmHt8rGdas9Lvx7ChzMjBIeiQ0DshsMaGswaXxV4owaGzdGoaZHZWN30gwVYZ2iHITztbCen2PAfI9Hsqto7QQ= /tmp/vars-yqkajsf_/in/openssh/ssh.id_ed25519.pub
+ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIOzKFivo+5Mg3dGABHojZ5VE+qIptfwO0FTL63J78QN4AAAAIC2qxCPCmpUOzl/kxpxCly5kJ4eMSLPhv/gVENm6JRcMAAAAAAAAAAAAAAACAAAABWFkaGlsAAAADgAAAAphZGhpbC5jbGFuAAAAAAAAAAD//////////wAAAAAAAAAAAAAAAAAAADMAAAALc3NoLWVkMjU1MTkAAAAgvOCCRVUZfEVXemj8JGbVO7diov0vuPuUyk0f4ILSXEsAAABTAAAAC3NzaC1lZDI1NTE5AAAAQLmpV9QA81JN/Ht+Rx6cO4ZLfU1oedNtQ1fHGiENXuq9DeOElmf85ksitMmZDw2m+kxD1RhC+u9nhCCReLPiDQ0= /tmp/vars-8a81ojak/in/openssh/ssh.id_ed25519.pub

vars/per-machine/alasia/borgbackup/borgbackup.repokey/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/alasia/borgbackup/borgbackup.repokey/machines/alasia

@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia

vars/per-machine/alasia/borgbackup/borgbackup.repokey/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:pBZBU0CmwD+JbtReQj+o7uSjp0SNGclBXykJLkuZQ42HcytZrurdT52i7bImFhpiob+umVhs,iv:QTr8Qg2+l//8weQemX7rux0rXEwr3+4yNTBX7s8MC5o=,tag:dxXlypav4RJyE/0o9hn1hA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNZDJQT2dzT3kzMFJUZG1r\neG1sbytjejBHaTgwbFo2ZXhENlkyVDFOOXdNCkVHaFRKa0xzdm5iVWNUZlR6SnUx\nbTR0MFc5KzRwYVlDNVVOU1dqRFJxT0UKLS0tIEUzYzVINEF6ODhkR3FGbWxDOENJ\nVytDMXJ0d3h4S2lDZWlGbTdrajJmZGcKQQGjy1XEgNu13f/Eqgr9bMMgM6BOWLCd\np+nbHOzsci5/rPs3CEmIvzSNcUQh90a2ct2VygZxBpJLi/3hQNh0Vg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHREcGFNVGNM\nQWpqZFk3ajIvRW02MUpWaURXNTh0TXlzYTI1eWppc0w5V3MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQplQVNhSldIVmdrSjNWVUcwTzBTOHFL\nN1RocVN4RCtMdmZ6VHVSZktTUk8wCi0tLSA1b1c1UkJZSWUzVmhnT0pUcytzMEZU\nMFFpclVQM1FBY1VwcUhnZmtNU1NVCh1PIFWlRwCO3H1C8eBCOQYEKFEbng7ycB+J\niFHrMPMjgjc/upoU3FaQGS2I3EI8dPpXjQGP+GFyIWAjw/2r4cQ=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFYvUHdqTUlD\ndGtVci90RXE4NWowSXMva3BOWHBwMkM3OEI1ZXg4YUF2bFUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWbGc0UWhKU2lob3pqVVVMeTFYUTI0\nOUVPWjV3M0hHNmhZUnpWMGlMZFJzCi0tLSAycHAyYy9zRStLUllKYVcrck5XdHVr\nVFRKaGZXRzdPN3FhcXV5YjJGVU5BCgmam9x9dCW7pkpBZfMWrYewGq/F82fJcQmW\njGq2xPG/8GYe9aGc8rpg1kqGgmBSm/3f1VhVhb0cizB8RNyDyog=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFdBTmNSdWh2\nbTE2dDRzZ1JrSHdnaGsrNk9nY3BVZHBjVG1nSm5zcDFHbFkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpsS2l6RmxoL05IQ204RkFNVXZka2du\nSmFRWTBKOXFEcmxIYXZab3IxV2R3Ci0tLSBtbUdibTd6amo2ZFNxK2NGOUZxcGpJ\nbjVrK1o0MU9LWWhnMGtWQUpVVEp3Co9ruCG5da1bskRGNBb3I9Oz94PZGGlPBHr9\n8vEvKEx80rOzHEQXbPae6pRrpJvqlBvgIs7CkH5VRmZdv3J4Vdg=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxWG9DS21RNEhrbnlKRzkw\nWjBsRlovS1VaTHBnZkhYd3BuR1lzV1JzRUZZClJSQmQ3Z2p6VXlRY2w2OGlSdFgv\nNjlCdTFFTXlGZmpHYjJ4M3BvUGNCT00KLS0tIEs0TFZGMk82NW53QU1oWUNXTkZG\ncmE3Um9SbGx6ZlpZRU9ISUhkcTVuK3cKdipCQRAQGyCSfgGiPN0ANn+GGXfgv/ys\n6XZXM4Mn1klsfjEwgtJBUAvuHm7Nb1PovxzIVYm8cRt6ikqq/a+irQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNbGNVUENCbjM2bndBdmZp\nU1MveWp1MmRlcjdkVzdMY3RMT0IvRTFKR2hvCjg2RmlJYW15SHdJT29lTFI1amlP\nZkxnQjhlRGdhVjRESGpLQWdKWVFUWlEKLS0tIHdsek8vS2V5ZTZLK1pUUEtZdGJY\nMlBUMm1TYTEwMVBZOTBMRmwvMVZuUFEKJqgzzcdrKv9CJ0sJ8jmFJSnBNZfpsvSC\n3h4mjGtm/ZDOLu3mYSkyTvlnTqZnhAdtrMILhiym5Reo1c1o766DqQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKRWNLbVEyUFgyZnpGVldP\nWmg2OTNVSGFTTUV4SERmanNlRXFCZE54aHpvCjk0RSt3ZCtZUnQrOUFzdllEaXFi\nWGJGY3J0L2V0ZFpWeTJhY1ovZytWbmsKLS0tIDlBbWhjQWlyZzlwWkhnQ2tDTGVW\nR3BUaW9DQmRsSkc1cGZZSVk4bEZpVUUKbz/jvhcnQWV+WgNVvpihj9ZDU4/VCmLC\nZv1QTK62G7AZ5h2TseDDGQ4fqjdXZg9/Y+es7We5qMm4iKbWfeWJAg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWGlJQXhRb3ZUWEdZZHBp\naGhOU3RoUVBPdCs4YkZNUURhYUpucHlBYlhRCmdHUDBmRDVZcjE5bGxCWXNHSGIx\nN1FtcGhOOFB3TVFpVVZ5bnI4KzgrRW8KLS0tIDk5V3ZtcTJFY2xiSU5CY0tyYkRo\nbjBrVU8rVlRsUi9FbkVIRWs2aHlNWEEKZkw+AH0913qoh4Qs7dUJXaaQGCdngEPr\n5V9O6iC3w7vAcYTu7b3uxOuXnE9/ZmY48GuEcSsH0G7tPxJX6WNQnQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwMkViYWR4M0tUYWdqZmgr\nWjVUWGcvQ3ZBSytmdFMyMmN3dmxPWWR3bldBClJ4RTF3TDBnZFBSazhJSWVkaVRG\ndTlVSzlYcElqL0F4R0tkOGp0ekdVQ0kKLS0tIDZjenlSbUtBSWI2cUN0TVBmWEt3\nT3BiejBZZHB6TE55Z1g3Y3BBMFV1U3cK9VF9jgdRTe8YTyQdes/FKnYB0ZJbmfZT\n5jdXiNHh3UaiZQrDgUmiswW91YSeLAyCDiY4JQf4G/olSIuFBF+sfw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1yrqpfs0wtaxg9p9058g2gyq7kffjnnqdw26wa4a4uvjqkzvmq5wqvdtgxl"
-			}
-		],
-		"lastmodified": "2026-07-29T05:25:23Z",
-		"mac": "ENC[AES256_GCM,data:yevebfScn3BinTZsD+7epCh/4CqUMPZBLYNv7Yd4+l71bBqTYMXjN53f1IvR9oAwZbkw9QV8/JXrxwUYchHWwFGAE8444AHR5AK5MYM+/vbce74Y4+ZT58owGmV2ftCSbp+SUqKtTtiopu1Bfv6rxDi33MLRSYiTcNnHhcSw+7E=,iv:ywc/R3kGO0Kbad1eUrXXHUPah5Y95mAyVA3cHmsTykM=,tag:LIRLXvicYgtCoqijUCeXtg==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/alasia/borgbackup/borgbackup.repokey/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/alasia/borgbackup/borgbackup.ssh.pub/value

@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPPalEdSiBeGTiMVuSxzcW1DQnBmZTdiKP30T6Ubrr4Q 

vars/per-machine/alasia/borgbackup/borgbackup.ssh/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/alasia/borgbackup/borgbackup.ssh/machines/alasia

@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia

vars/per-machine/alasia/borgbackup/borgbackup.ssh/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:otWbpm1vo3H9v9BKD1rQDxJxr4XSmdM/hC2UrPw/n1XjJ9q1hKj4yifNeWMCOVg23WtZl3kTZHa2LkWwuYzLS11ZfnwTNjgg2bl1RJ/JvPeiNB5HTnv7Cvx0vcS8Ffpm1s3QeOCVxrJqI/wA/COmHLO/44dId3sz/Z1D15dwkvlrcySEelK3ayD9kE6TgINh6j8JMMQ75/EP4Q6/bO4OghET0D+yAhrMjdFjbCr2ioqJ47/gWab+SkCBw2QsbhnTcpCZEIk4BrfhHBANOq2AQfw280PdPzuETJEuebO/r0E6ht6uhSqsZuUAESbhrhxkw8SWMzcqtHtu5GJEBQ6Nwv9tKDL+JiliZdNcwtcMeMMJYrrluglyqhg31DG/Zz5ZIGU5mOIlWIrUHzsY/s6aS53bb68WFWlTbmvrykwYcTpaEpqGYYXzGfmjDZBYWwJxp+6uUrOlSsoTEU6Iz7qEKuHGxVw0xSa5nA9p0rumSmNj6XXxQAT3hm1NWIf6AqTRB6AL,iv:LjGYbAHEPC8L/ZfRZCXElwlvHvC052i9aOn1T9CSn6E=,tag:uIuinhtzkfDigfXGiNFhJg==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrUjFZbmMzaC9pcEJuNWxt\nQkVpWDBZWHBlNnFNS3VsREowQ2xMMXdQL2x3CnQ0L0ZET3hQWGFPQllQLzJnWGVC\nL3VNcnRISG8raG1JdWJaTUV0TFA1bUUKLS0tIFRLL1phZW15MTVGUVMwaXdhci9h\nSzFHUmcvTkZMbTZDYmhmN2VWL3g3Y1UKXW2H6O4g1LtBFzIBICIGFscWyGowss2O\nv5/uusStrojLZMwdpi7qNNf4eadyefD+ZTZ/tjbAWKbctO5W5h9aTw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFpIQ25WQjNs\neFVOQmI5N3A1M1Y5Tk1QQTFKR1RuUDdsd2haNEd4dVl2Q28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpERE5veHl2aVBicnkxbTUrSnlIYUx0\nVEw3MHZ4ejlPUGVoYnRMYzBsWmpVCi0tLSBLTEUvcWxpaEpWWm5SMXJEL2psaXhK\nMVFiQmw4dzQ2YnJveElTMmFRSTBVCoIuiQ/pqV6RGEFhA72smvF1OEcmzaw1u798\nI3za4SCjxw0bDRJl0f1iHBkvtLWkSXVo5LgGjHgmDoRyczMyO0c=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHpkVHJuQ2lM\nWk1GaFR5eGxzR2xLQ2ZDTmdsUzBpeEFZVVlzQi8yWG15UWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3M0R4Nlplb0ZGM3EyQXFnaTQxUTFE\nOTVzY2hiOFBITUMwOURVRUdzUEJZCi0tLSA4aWl0dDdOZUtiS0pXVWN3T2kydXFV\naWVjS2lvRitxUHI4TjQxekErZkY4CobqyEgS219S3f2LKf6AG5sqGFjBaTLDj6Yy\n9lHmyOLlYnNMcInGRTZFLK75a/+3VuobOlRyYX9p4euog5qpvYQ=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhaYWlxeGpV\nY0pBcko4NkgwaGczZjhXckVsZzlPTzJBSzlHRjlPM0tGVVEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpkOTlzdkVrNHhsRG1xZDd1ci80U1Ir\nUTBHR0wyZDMxN1pkQ1RGQmFTT3FvCi0tLSBxeFBRdk4vVk9xaG9IWnUrNUNzMlJI\nMFQ4NHNnNStreUE3a0VGcEJBZnNjCpWyH0TyVUKhP5rFd5cX8gotEgM/weUv4V9g\niPigURlraeTdHuhWjLcHnbBX8cB3RwLbXS92HLQUXZPOoR3wmmA=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNWjBiSTFRR2NDTHdlNzk5\nQnEySE1DZ2FiRjBYQkViVzcxWkVBUUVhZkEwClFsWTBVM0k4QkJiNkY1Sk43bVVq\nY0MyU2hROEE0UkRQaW54MkVaWG9GMzAKLS0tIDg2YmZPdFRSRTNCMWVUaEpvRXk5\nYW9Qa0E1bDZ5VUpkekg4RG0rWm9GMncKb0543PvWZ8TvIhrJ57TNKtwmbMGglUCa\nK3o2d+uqab0wgk75Ee7WvpaVh1s2bmIABysAj97SU0j+qBEDRSHbjQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBucGI2d2VsYnF3cVJJS3hB\nVzZkNjlmd1dHelhWOEQwSVRXbkt3VGhpaGtNCkd4c1RSajZma2E1bmEybmpVTUgv\nTUR4NlVXTXVZSlRJUEJiZTVDekJISmsKLS0tIDdvaDRsTXFaNlM4L3ZJZlVwNTN1\naEllSHpWbWEzVUZ3Y1dWVlE1OUJtaDgKoCjnnCvKAQyrGOOLtKL+y11hf+8kzox4\nEdDZenRf6Caov4J6XOlz48Ymp6o/2xGYBFSxmsOOr+JgHTlyv3CNfQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1T3BmUnB3dWZ0cFhuOW9h\nZHhBMGdxVjBRQ2JKNjFaVDQ4K2o2UmhvYzI4Ckt4K1RlZ0xjNk0yaFFCc1lsZ1hi\nQktzOWFGS2dHZG4yNytVS28zK1cyMDAKLS0tIEFUMFNhTHZNZHJQNDJQSVJ3ZkI1\nZ1M2RkdGd3pwSkdwVWRUeGdDN21oNXcKwdwT+wkVhCuHekeRhWWAF5jWJImtKVe6\ntyLQuuvcca9lUtMXc6+rd52Y90wSb/Ivweq+SFrlGTmLUTD4yBpyaw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxc2RHa2xGTE1YbTFRK1J5\nS0toaGlTRjZhelRkNzRzejFJVXdpM3lXR1FzCkhPckFvZGdHTnlra0krYWxCeko4\nZjRlZG5jOGRMOGJWcTQyUnRrSlNRMGcKLS0tIFAwNFZtL3lHTStwL2pUN25FUGE5\nbVNGeFdxenhpNDBiblV5TG9mS1ZWK1EKeVDgm0RlZ1VgoHVhXMTq/juE9gV+2YMq\namsNumV5cfUqZyf522f3dczzBdG8c4gshLOxgEIy21dKzMX3m9qWuQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1bW5lamFDeUtLS0hYUWx2\nZkFtWG5FYnVMalJxUFVFalowY2dPdzRwTUcwCk0yUDJ4RmhadUNXdEpIS0o0N080\nTEZZWUJUOXFraWVSRzgzd2ZKaFc5bU0KLS0tIEtPTDJ4ZFliTERHM3V4TlZzdkxU\nNDI1OFNNaEJUc040Ylk1dDN0bFFVYXMKi3LEsLq7exYTlAlOiybAtIau762Gbdwf\n5v7i673N5ezxactBTXA3FFr4av1J+IYz/HISZwAYw9ShekNQ325oyw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1yrqpfs0wtaxg9p9058g2gyq7kffjnnqdw26wa4a4uvjqkzvmq5wqvdtgxl"
-			}
-		],
-		"lastmodified": "2026-07-29T05:25:23Z",
-		"mac": "ENC[AES256_GCM,data:5DdMv2A7XC7g1xhAf7GLIctaTCeaJGxQX2O44u+e2LBLueC093velEjY9wE3XxJz7/2FnSbtvWapUBq4YHlvzbgmT1exDBYfeGm67WNnyxD8NeVTETaE43pJfjBsJjWwwQPFioTMYpbXfGX10vN8691CElsWtKXRUYTcgDlgIrM=,iv:1riUOQmQGb2cN7rp5KEsVIo79o85r5NLCphRjNuOx7Y=,tag:S/dlRhw2Z7InY2lxRzkgPQ==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/alasia/borgbackup/borgbackup.ssh/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/alasia/data-mesher-node-identity/identity.cert/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/alasia/data-mesher-node-identity/identity.cert/machines/alasia

@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia

vars/per-machine/alasia/data-mesher-node-identity/identity.cert/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:IkhX5F7FCHzYGh2FHM+/lAL4T02hh1j5N5yEoS9eEsf0bwvr8lD3aDjzkcFe4CzDnloOsni2GPPmvsNUl8F4FKDnE6MGrC68nU8RXh+EDcnYyOaUIfFVMJllopMixH8UKVID0wplzHTw7UTd8YbpoRz1gR8/Efl75SSuTAJQGl7kc51Y9JoO4thx/+Sh2RVRQsS/3ZMhISId3+4rb2IXW87T183XaUwj5n3xtT+SUEdKIgHopx9921z2v6QHmgepZeyuQStss2MiJlu7fcubOGNUSplX8SvEWSSDjlJrr9iSbFHHvRq3ih+naPSZ,iv:QdyGkxQkfvihBNj50l8Z5c5fsexnT+lEG8zMdn/eFag=,tag:D6fdixoCeoiBOLh3NS9oAw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpK1ZLZ2NrbTBGTURTakd4\nUE9WOFhwb2xaNnZ2MzFOTWg4QjFJWUFPU0FzCjhldWFZcC9KT2J4Q1pySDlhWE41\nLzN5bW1yVHk3b1pPUnMxOUR2YUhoOW8KLS0tIGpzcE1xbjBOU3Z4K2dFZUNtRW0z\nSGlJS1BTNEc3YlV1ZHBqTTQvc3hzUTgKwD3/bmzAnY6V4kOjAWhjTvVOWPTpzXQf\n0XHcL5sLUFl8bm9/xEflv9lgvGcHygFJ7IfsmN2f0qleeZjfONZYxA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFg2eExFY3Ux\nRXhtb1o2UFEwckRUZnNxV0p6eVJ0MXZ1Mmc1V0psVXdwRUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJcTRBYTFGSEZUVVA5REFOcGNxNnBD\naGE5WW5iWkJQT3J2aFZHaW1RZEIwCi0tLSBBM2lNcXlJOU55U3J1ZStNa0hjbzBI\nbER2UG1jWjNWMXduSExvMmZUUUxrCrnok0aBZJ9CvKMKMeFQOyvS3pgGp9wciRVe\nmBA7/w8s/WKlQ1+qPWinr88B4S6qOD/MatPs7iOCSZah8i1ATVk=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJHVkIvYTNh\nVHR3WElqZ2k5MVdpMFg4NGZ3OWV3VWVtTWFHcXJkTHBjQXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpqaFJKVjg0NGYrbDQ2QlB2V3pzVTZt\nbnVYZnhRNGZDNzgvZ29RRTRmcE9vCi0tLSBvZjVHRjJUU1EwWC9XUUlFZExIdXZr\naDJUcjJDSmhueFE0cDlCalZ4L1NNCtckds9jTPWdAw2RF8RbLYWWl/FYy7nVyLEc\nyLsKZS2/WtBe7C2h9GycWLq01OK6nRseXlbh0dAA6T5hwb7zqsY=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5TbnJ1K0xK\nSS9CSVZnRUlTdmJ6SnkyNzZla1NjUXlaK0FkYjBDSzlDbTQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpySUgweVNuZDZOcnBwdG5kSmViYWhM\nNVJrQlc5TExtWUcyL2FuL0pvbVlvCi0tLSBnMUJIeTlnRGpVTTZmVnFnUEF6bWNV\nbTN0N2RVeTdaYnZyR1ZIUUxMT0tzCntcvtSw4LA/scYnuFLQooxRvEOYz56v0WXd\nEWtlMUtvjHMn9cRVBEUHkTnFENkea+r3is2yF8PYlSMxNLnI1pg=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGdWIveFVTM0tSUkpTMVJk\nU3RtQUhqeFd6dVlZMDQ3QW5vYUtMeVlHVVdVCkJmZmdmVzhHZ284dDhMV0ZGQzE5\nUnJTbmpnR2ZFVjdtemV4V3pCLzNSK3cKLS0tIFdhZjhQWEY4YzRoVkFKRG5KRUJB\nQjhBcHhKbmtaK0c2K0oxZHM3anJLSEEK0kb/ODoqLUmHQOnlN1pqFnvwTYBXUyq2\nHiZb5sV6kpBo6BnKqCe4WaFPZ0nLk7dN0OQ0+vTT1SiYCcf1U5Vvsg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Q0dVUjNhRENINHMzSDhY\ncldMM205cmdzd1RKS2tLcTYweTh5cDQ5bFQwCkR4R2xZWE1zWmhYZFV4eUZZdzRI\nMVRnMGZFMVhWYVV2VDdva3RiRTFaUUkKLS0tIERnekR0MERhcjFUMjZQZDJoRnhw\nRVAzcklCSnRIL0xTaVg0d2VLVG9mNEUK72YAp8Cy6EOOSY0qlVJbBABFyjoLiVMU\n8wxxXCCypQBHcrhIJr9B1owlhO5r2g4E6mHlu9yVJawEcRa22IEnLQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Y2VRYVRReHB5bXpHaDZu\nY0RDVW1nN3IyUFdVNFFMQWRwTEhvWk9ENmtvCnZnck0wcGtjTjhoRjV0d3R0aTA4\nRWhxb3I3QWg3STBBeTNQMnpVTzhMaDAKLS0tIEIwUm9oZU9YeTN6VTJJalNqd3VH\nZzBxQlFBb0lPNjcyM0o3K0hjNktudkEKiDQ0HWnCPJe5b1z6XvkQErW2Aop/1a9l\nkDcpqqlumdnd51BSMPE0uXfV9DhEA/V2f+TyPWpW0v8O3RHO1JjDOA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWUgxdUp5VVcvZTYyTGxV\nOVZJNGZoVzdpV2FzN0luK09mOWMvYmVycUYwCnZBT3hwWjNkZ1hYL05MY1kxOXho\nSWNoVGRlSEFvZmRBV01rUzhLZGFPdUUKLS0tIGxGUzhGRmV6SWZ1VmFHbVYrSVhU\nbVRVVkZja1g3UytHSDRuMno4ZWdZTUUKD0Exkylm8o8yIKbnSYqn8tV8StpH7lz1\nQkKCFB6Gw9qRJv7a4YQKeVsTGv8kspylVbDEhoZMazHzUqyrBlj+lQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4RjB6c1pLRXBoUHVPWDZu\nRkZ2T0o3QmdObHNiS2dzSzlieHFBSjlXQVRRClFDUnFkdTFtdW5VdFd0RTFLUytq\nWVRUYWMyMUY5UGRHcTd1KzNxbzJFcXMKLS0tIFZraTFyR29BRlhBclFTeHYwelpC\nekNianFCV0JxeDVzOUs4bDRsbzhBalkKQ6E2Jvf1d8OxtHCNXZGUx2bSb0V4YxSl\n1Rd+uyCuCz1KROPSiUhHr/BYo+9P+nMNjKmWpdwNcCtDX0MSGzlNoA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1yrqpfs0wtaxg9p9058g2gyq7kffjnnqdw26wa4a4uvjqkzvmq5wqvdtgxl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:57Z",
-		"mac": "ENC[AES256_GCM,data:l5WV6ziE4T5F6akfzoFUQziLVUC1BV6eHQecLzDvgv/E4HBeWvl0Ljp98sgBzTklfk1yej5ez/onlnWIEcm1fREtpvjwvgoMDaC9uXMQZUD/spvDywBqi6GVZjFwpk6CnKvKAsWl91um2s+uLVjbaSC+gg/Gf0E+UeQ4+fNk3Ok=,iv:2CtAJuTPi26voPPCSZfvP0qmhYE6aQ3Rjez5cZYFJZc=,tag:bezGvYjUGLYYNhKJTsjBrQ==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/alasia/data-mesher-node-identity/identity.cert/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/alasia/data-mesher-node-identity/identity.key/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/alasia/data-mesher-node-identity/identity.key/machines/alasia

@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia

vars/per-machine/alasia/data-mesher-node-identity/identity.key/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:iRv8Z4YFv8u5gBydcOXxWET+6SqaxcKtN88ed8fNEuU43tC+wJFtpSaxRV7scVFlQUesj0pCAbbqSDMtexX+Yfa7cwmiJJsyBJ+iSankLGfR4x4V2Sq7g2ezcbivHWvRgiZ/Y3P3jEWg478lBztX3KpDO5Ld65c=,iv:Z3J3TgdAD2nUjqdif4lEz3nZJwBlo4BtjxMJOFrfeZA=,tag:8gTZlHUY1hzE0ww10aLx6Q==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUY2dvLytlSEcydmZSYTRD\ncHZnUFBISkxEWktWRk91SHlPakJwK1hyanpvCnlzaVk0aTVseXBZUVFPR3AraHla\nZmp3bzFsQ0VHRFhsb3o3Rk9SWWJodDQKLS0tIHJUTHNwdHhyNWhpc29ENDZVWkFU\ncjkwa1prbE9OWTM0ci9CWUFKZHN1YUUKN/82dx54rM8R+tNC+DIyBSQXI3MdbbaH\n+XZLGPnaU+UW5tMfHE8hGMr4EvtCXPYaRs650SNjSRlZTPg39iVDTg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5NeGNyTWNv\na1hzQ1FsMFFsMDk5TGUrQkdJdEcwUGFUTzVqNlJuTnJiV00gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQorM2tGMXhOU3FMTzZmY0lkMmc2RUY3\nUEdSRERvUnIwZFNoVFR6TXZESEk4Ci0tLSBlWCtlQTJ1K0pNbUtza2gva3VyM201\nZE80L2hRT0E0S3BXbjFlS0lDRGMwCkCKnJNOEUTsMSNiGrdQOnBaxLEA+inZ9tY6\nqRYyTwZOI5CUKem8pDvsqe81bRgkZzklSuxzOODXcfZgmFN3znk=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlGYk44bEI0\nS0treE40RjJMakh4b1ZGVW1BQUIwbzRnU2VUbjlsY2w5QW8gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWVTZJN0RKOVE0R0t3TXJnY0hsOEow\ndlVuTGRTRmJId0V5b0xQRWhpR1BrCi0tLSBHSE1Rd1FndTJvSUEwTjNmeng3N2ZF\naXUwQk94OGFCUWdVNFJKYloyYk1rCiyRTHUEi/SEpFrgbWtlI9ntC5Y2nJMyqv04\n12hJiOZbZA/xvEbANVTq8o0tl16ftc5WqGx4+0OHjg0rbad3oH0=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtxWUJ2QmlX\nTm92MEtYVzFFekRTOFptd3Z0cDJaNm0zeHo5dzRqRjFQR2sgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4NGF0cEkzYmdXQ216SG9CaWJGN1FH\nV0dVUzRESXorUHZWUEpJdURWN0RjCi0tLSA5U3lQME9yaVVMQ0l1SUZtSThZbjVr\nbWdvQm0zRjFMYU5BRitGZ1hMNnVJCtSmUCETAjWgnTEtSq/moRSpcnx3FRWIpgga\nr83gbN7SYNgoE8hwce/2tACkF1fhBZsMSUyPSnNEfrS+7S2T0Wg=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHMkVUSDdBSW41aGZTY09R\nVXQ5eWNvWjlEWmkydnRESEpKUmhoeHZVamx3Cm44dklycW9HNXR3dHJuTXJsSmFz\nNFBiejJQQzVtNXFJaFZzZGk4OW05bGcKLS0tIGdHNmpoNHdzbll3cng3ZHBwL0lY\ndXQ2RVNjeXl2Q1NNUHg5cHF3a2FtTnMKvlVAQjKchpxPZxA/RPu7GP2ddTNrozRr\nV9oTDYbzSWV75ikcWeX5FuaRWspzpjQkQ+zvZV2tWq/dKsCz5PoVAg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpU2hsSjRYSTFTMytJVjY1\nK2E3dHc5bTl6TUtaR0pWcUl5Rmp6aThoblFBCmdqY1pKcVVwM3V3MkpPYS9LRUNH\nZW5LMjZ0QnhaMjdUbThkSDRpSmhwZTQKLS0tIHBLYXRtaG1FVDU4YTNOR1BZc0RU\nb2xScC9GcjdRN205cEptTjd2c1A3OWcKy7iV/FMkBmKg/qFcd4tnCsPu6wr/SvVR\ngvmrPqHzEDkhMKa+V9VSVAPV82/kaVapto0b9IkeTnRnL4YkL/U3ww==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxYzBGd0wxOXNVNFRBTEJH\nbXlRcmZJb1FmRnEwRThQQzBKdHFQWmZzejBzClpRcU1rL205SUg0TW92ZTg1MjhW\nNnpWN1ZTL0l6V1Zldm5weVlmZFoyd00KLS0tIGZPbWVlT1hUMTN0SjNHYUxmdWYr\nTHVyWWlpN1diMnRkbWxPa3ZNRUw5NDgKMhzXs3Fpct0fWWJ5jVOEQR5KAlNL1LZs\nhSBoKlxi9G81K/xH8rkmMHv0IYS9jSVkQ6FiI5mE+jVs9I3EEuOctw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNQjlxV2ZpenRIdDNKeFM0\nbDZnSWZpU1RHeFEwVFltdW5FdERrelpRNVVFCllkbXZQNXdLSVJxa3dSanBKNjl5\nZlpBZ2xhQTNERDY5Z2c4cVFUUlJDdG8KLS0tIGpNbkRmNnJac2hXTDVuR2d1dkJR\nQmJ1eW9rbXlacDNxVElYRVptOVQxNDQKqY9eZ3UQdf4zQgzqjFTyQ4wVqrHfr6VD\nLSF8x9KtaQleqNsOr5upnRqg9BKshcRLpSdNII+QgiPEtW8PdB0TcA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyMGlEcHhrak5KVlo5YUxh\nc2UyNk0vaDlQUHNaNUpJMSsrbzBXai9IZ2xNClJ2NVZwTCtZSU5pUysxZWEvSGtX\nT3lzMG9XY01kOHdLZytJZHY2LzY5NkkKLS0tIFpwZXdvRFoyOWx6a0JKTHV6Wm5H\nb3ZCejRnQ3djUjNXZmZyQmtDMjd5L1kK5/3IiWjErpouHQ6xPmnD/zOweDy/Z/Dv\nUyO8ARU48IGXllDzaBTwjBuLF1c/vQN/pPZuNakXq7QBrr33I67OPQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1yrqpfs0wtaxg9p9058g2gyq7kffjnnqdw26wa4a4uvjqkzvmq5wqvdtgxl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:58Z",
-		"mac": "ENC[AES256_GCM,data:hZjjCiKY7paoUujwPwcc+EiFOgrheEKTBgT+2DniRqY+XCZhOnPDYv4CzzWxXCzAQDyr5D2BtaV6Xbfyhkv61E3bDYQhDwyzKlukF/HV88TqNY3xdXXqwym3KqVUb1rHhrDzwvfyHBspr/F5qCHgwmEydYzw5h92Sdx5TqwlRec=,iv:mivTrx6aASPDkfjrn1SHk2NDVJ6TdRxkbcAanUHNs/Q=,tag:tIHlZYUhxpo5WpS/3oFeaw==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/alasia/data-mesher-node-identity/identity.key/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/alasia/data-mesher-node-identity/identity.pub/value

@@ -1,3 +0,0 @@
------BEGIN PUBLIC KEY-----
-MCowBQYDK2VwAyEAwP4+uoPWwECOjQxJeTumMR5EnMuHylfijpvOuCwwSy0=
------END PUBLIC KEY-----

vars/per-machine/alasia/data-mesher-node-identity/peer.id/value

@@ -1 +0,0 @@
-12D3KooWNojJVT37wjA9vvnnvTu9drRDusy8FkQ51USWK4zj6Grp

vars/per-machine/alasia/dm-pull-deploy-status-key/signing.key/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/alasia/dm-pull-deploy-status-key/signing.key/machines/alasia

@@ -1 +0,0 @@
-../../../../../../sops/machines/alasia

vars/per-machine/alasia/dm-pull-deploy-status-key/signing.key/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:hwVX7PjgtyDdqmcqnTIhoZO/JJCOGyOfuQiyIFM43z3KLz7mBYCwVLTCP+Ntir87Film04IEdu02IMnXStg9HzIHBQJGZmr9bA9AE6suelyGgtKfRmZWEKwKU+KCETeZKle7K15uPK5rkRZI16DQu7KW9M4i5jU=,iv:Yf/lVtIeqghU6leVQQHQp43v8qnmE9Uj7/SdK/YUPRM=,tag:QdzFYXTCMHoHUSY7mpJ0dg==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsclV4T0dHemlmVm5kOEZD\nQS9hdjZxTHhvZ1pZbldicnhNeVhjblNzNGtvCndPMk4xTDkxUFZadzFIaFBrbEpm\nUzBIb3BqNVF1QWwzM0pzczA4SDFJbWMKLS0tIHBDVC9ROVBRV1ZCdmt5NEFWelNv\nbWJKSXZwa3AySHVCUUEyaGZGMTh2RmsKocUYBEUHNNjlg78WTnBxL4DXU+i5v0UU\nya9CVteWb5DclhfsoGmRVq/l9pQvjl+PQxULFGvs6ATHkymnz7Dt6Q==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGR5OUtGT3da\nU2ViaWpUa2g2Qld3aTQwbVZDL1JTQkhPaXBlOW1NTjQ1VUkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpPZGsydHBmRTNFb1FjSTlWVDd0UkEw\nK0kyN1VqYThYUmxWMGtYUkRLMGNvCi0tLSBFU1FLbjAyWHkrd3lFQ2xZU01Fdm5y\nVjQyMXBmeTdQbkRMVVU4K1R2YzBNCuxP9N92qB5njjuauUGA6bco2xU2aybx/70A\nfnfAbp3V/Q+JSgBkAWcJZ3yth7wMUBGlZYCZNOS4nUI3GKfZ+d8=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE4zMEZSVG1t\nZGhaUC9OcWl1d21oVFVqaHQ3dFdnc1FtNi8xVjhRazJveE0gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo0QklCWTlacGVWaHJPbnliWGlxWVZh\nOVlOdWNCRi8xdmZoRzdJS2VudndjCi0tLSBvcUl3UWlJbzAxMk9vRTlEN1diVzdV\nZVh1cFVPdS81QkRIbDcrUkFVQzBJCoqkf8p/vWjjbbc1OXfs0iq/JRoerQN0Es/S\ngAIAimcgvXCGsqe/65M+vLqWq2XDtszlorIVSCovRK+YJCetly8=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFCekJXMjQ3\nT3pZd3FmUWlXUDVLR2NnNWZmcmJlbCtNTnhKMDNzd053WEEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpNRlc1SDZXZ3FJTDY1d21na3JQN1Zy\nTlVCSyt3M04vV1QyWnZpODBrbWtvCi0tLSBuRmFmMGsxMmxBYjBWbDNKd0FhNFBT\nUjdWaE9tUjU0a2NiY0I3cWFVWFBVCmfUSrIbkM8wAAwzbpwyjneJvj8IORpmr0Bg\na4niLJ76aBxofTUg5g1hd7PsndyYCcqfshXrGOxOKTDhL2RZviE=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNzBVQUZJM3lYQlJBUzZJ\nUitKRmhxSjBDZVhaSEp4U0F5RXllVFVtL1RFCkJTeFF6cnJMQU5OMHdnK1VJOHBB\nVUZGOXlVVE9aZndIRUM4ZkZsK1dLSzAKLS0tIE9Ga3l2WkZjOVJUS1FsckVsT0pJ\nOXZrZSsxZ2dDb054bEpHTkkyd0tNMEEKabYD0wb9itqj14XCB5/BPuoUANHEZmN/\nJhws3OcvkFfhzLWnBFGuBxB0Zp9lKQ6bXaweth0IhzECxlFvlsg+fg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByam0zR1lIeEVNai9HK3ZU\neU1YTDJ2Ui9vUXlCd2twd0RrMElQcXNob0Z3Ckh1dXdLSmxlYmc1SjI5ZUlnVGZU\nQnM1MWpveFFFaHBOVFdHdXhmSU5XTEUKLS0tIExFQkdkcXYzS2FWSktUbm1aQm14\nMm5HTVRBVUQ0Z0paZU9OeW9HTnJHbVEKkXHB9Sj5tq4PqP8aD1cvIaPjcehwuR/1\ntQqW0Wx9XxEdcwXdWpiPobbhx978/JAceUOATPi1FRlPE3d8D5a9vQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxSUNjcG9hTFdZWUlORTYr\nQVpPWlV6OXZCVVIxMkJIUyt3Q3poSFh2WGw4CjIzTzVZeTQvRlR4VkZLU2tQR1Qw\naFQ3VU4rTXRkMzVWb2NlYnBnRC9MYzQKLS0tICttSGN3TmN4WmFqbk10YmtDaU1J\nWnh5QTdCcTN4UkhwS0RpSGNhQ0V3MzQKwJFSsNTSwSR3dU9E1Lzls/6Hn2caFk/N\nU+lpjAREpVMIQR3L95UXGPAGGCT7egoLUGXOc1B+0xIjQ5vKnIuS8A==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkK1BqcU1nT2pUdVh0bDk2\nbHpyWlN0NzVZZVBCeWdkNVd2N3N6VGFHKzE0CjVDMUhIaGszcWlvWVlhRk9JMTN3\nSm5HREFRdW5ZS3VpRHQxL3dOR0ZoY2sKLS0tIG1qN0JwM04zamhhZE05S0xtdkF3\nZTIybnZSZVpzM3dWTE1hQXRMSXJuRzAKNsiroDqES26Jn1izoVmRkTEMY1iGF049\n+k54+aO0Ccn3CtYJWVNeCdJ9A2f7Lm9GerY6VxsgIeHXvk5ext+6zw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2RE1jeWx0UkpVTjdpK2x5\nV0hhS1lSWlJHYmhpWkhQc0hmZXhDSitiUFUwCm45TCt5WmdjUkhuWVVtZE0rSWp1\nVitHY2lQVXdmcVNXOHlNZ2NMUmRvY3cKLS0tIGhZUzNPUFRNcGlOS0orSnB2NXA4\nS2wzaGFvNnBRQ1JBMTdLQUZtdDdkeTgKU0FIbUT31LfRj1PfAI7suca1Ur+DwZdT\nelalPLRMd/mTcvGapoxkEwy2IeL2ForX7XWODeMsBDDXPpfLuq6cnw==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1yrqpfs0wtaxg9p9058g2gyq7kffjnnqdw26wa4a4uvjqkzvmq5wqvdtgxl"
-			}
-		],
-		"lastmodified": "2026-07-22T03:10:58Z",
-		"mac": "ENC[AES256_GCM,data:ousqj18eoVTIwHnMSxmQ2y6WER9rTN9k5z0TLbPgMnyyVmkEibO3rRuU/OHnn92egsDotrPpvY5E4nPWUD1BAU/B31TMZeOIX5KLIol+PdbsPAjUyem5L2gQIuR5TDf13d73azGGkjGiD7XMF6WqsqX5wdrOABY7gcZE3qTUie0=,iv:L0Lo8ZQbH54uQiLTklEb6qypz2oa5dzctIPWy6SpX9M=,tag:T9fPQUixy6Pj1IcoesnwFQ==,type:str]",
-		"version": "3.13.1"
-	}
-}

vars/per-machine/alasia/dm-pull-deploy-status-key/signing.key/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/alasia/dm-pull-deploy-status-key/signing.pub/value

@@ -1,3 +0,0 @@
------BEGIN PUBLIC KEY-----
-MCowBQYDK2VwAyEAzsYyLjr054wE6AqSwq+kWWb41sjCDSZoOjSBDrAE9nk=
------END PUBLIC KEY-----

vars/per-machine/alasia/openssh-cert/ssh.id_ed25519-cert.pub/value

@@ -1 +1 @@
-ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIJ+ncNqxlMnOLdaMb/qptv0PUQoZ8Vrdr8DVJGwoS1cHAAAAINCsZgyhCcqa4LAKCAnxWuXAOS1inEsxXMNrC9Z9dgGfAAAAAAAAAAAAAAACAAAABmFsYXNpYQAAAA8AAAALYWxhc2lhLmNsYW4AAAAAAAAAAP//////////AAAAAAAAAAAAAAAAAAAAMwAAAAtzc2gtZWQyNTUxOQAAACAl21E8qYaPXnDQhs4UB8xE7la6MvF58AcGV7CzdN5L6wAAAFMAAAALc3NoLWVkMjU1MTkAAABAc5xpLJXjV4pVUH/IyrEaaiGEsalQsmhditwMMQtrqLuoF5eX9Z3mFELMgz8Ipwnio0y1yf/KQnSxli1Z6OugAQ== /tmp/vars-_0p6w2u4/in/openssh/ssh.id_ed25519.pub
+ssh-ed25519-cert-v01@openssh.com AAAAIHNzaC1lZDI1NTE5LWNlcnQtdjAxQG9wZW5zc2guY29tAAAAIEAnnVyQocJMZgJ5fLXK12hjyfYQPE+u/vNP89njstjBAAAAINCsZgyhCcqa4LAKCAnxWuXAOS1inEsxXMNrC9Z9dgGfAAAAAAAAAAAAAAACAAAABmFsYXNpYQAAAA8AAAALYWxhc2lhLmNsYW4AAAAAAAAAAP//////////AAAAAAAAAAAAAAAAAAAAMwAAAAtzc2gtZWQyNTUxOQAAACC84IJFVRl8RVd6aPwkZtU7t2Ki/S+4+5TKTR/ggtJcSwAAAFMAAAALc3NoLWVkMjU1MTkAAABAc7YorI2wF5Elrol4lmU4IqkGMNwvduQI8bhHvCU+NQ1v0C481nulsyjYaUqYLEjJ7KakFYYs3yzjIGyVYdK1Cg== /tmp/vars-gkolumhp/in/openssh/ssh.id_ed25519.pub

vars/per-machine/almach/data-mesher-node-identity/identity.cert/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins