Update vars via generator tor_tor for machine mirach

Update vars via generator state-version for machine mirach
Update vars via generator root-password for machine mirach
2025-12-03 13:48:48 +07:00 · 2025-12-03 13:48:45 +07:00 · 2025-12-03 13:48:45 +07:00 · 2025-12-03 13:48:44 +07:00 · 2025-12-03 13:48:44 +07:00 · 2025-12-03 13:48:44 +07:00
124 changed files with 8448 additions and 29 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761768376,
-        "narHash": "sha256-AZL8SPJ520NRnLft9Xz4trTECBB510YPRXJnE1OUeXw=",
+        "lastModified": 1764721663,
+        "narHash": "sha256-gdyZQ41CoJ4u4XSuXcZlDB/pqiLNni1xALMYP3VTk3Y=",
        "ref": "refs/heads/main",
-        "rev": "bbc9486f0e6306f68e11f8aefa243da9f1c8c56f",
-        "revCount": 10924,
+        "rev": "6ace9cefb0780f34c33c016c108fc2bf0a87bdc4",
+        "revCount": 11386,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -49,11 +49,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760612273,
-        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
-        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
+        "lastModified": 1762942435,
+        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
+        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -88,11 +88,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760701190,
-        "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=",
+        "lastModified": 1764627417,
+        "narHash": "sha256-D6xc3Rl8Ab6wucJWdvjNsGYGSxNjQHzRc2EZ6eeQ6l4=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5",
+        "rev": "5a88a6eceb8fd732b983e72b732f6f4b8269bef3",
        "type": "github"
      },
      "original": {
@@ -162,11 +162,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1761339987,
-        "narHash": "sha256-IUaawVwItZKi64IA6kF6wQCLCzpXbk2R46dHn8sHkig=",
+        "lastModified": 1764161084,
+        "narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "7cd9aac79ee2924a85c211d21fafd394b06a38de",
+        "rev": "e95de00a471d07435e0527ff4db092c84998698e",
        "type": "github"
      },
      "original": {
@@ -177,11 +177,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1755887746,
-        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
-        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
+        "lastModified": 1763303120,
+        "narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
+        "rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -190,11 +190,11 @@
    },
    "nixos-facter-modules": {
      "locked": {
-        "lastModified": 1761137276,
-        "narHash": "sha256-4lDjGnWRBLwqKQ4UWSUq6Mvxu9r8DSqCCydodW/Jsi8=",
+        "lastModified": 1764252389,
+        "narHash": "sha256-3bbuneTKZBkYXlm0bE36kUjiDsasoIC1GWBw/UEJ9T4=",
        "owner": "nix-community",
        "repo": "nixos-facter-modules",
-        "rev": "70bcd64225d167c7af9b475c4df7b5abba5c7de8",
+        "rev": "5ea68886d95218646d11d3551a476d458df00778",
        "type": "github"
      },
      "original": {
@@ -238,11 +238,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760998189,
-        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
+        "lastModified": 1764483358,
+        "narHash": "sha256-EyyvCzXoHrbL467YSsQBTWWg4sR96MH1sPpKoSOelB4=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
+        "rev": "5aca6ff67264321d47856a2ed183729271107c9c",
        "type": "github"
      },
      "original": {
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -3,7 +3,10 @@
    inventory = {

      tags = {
-        glom = [ "vega" ];
+        glom = [
+          "vega"
+          "ramus"
+        ];
        b4l = [ "rigel" ];
        w = [ "sirius" ];
        fax-bridge = [ ];
@@ -32,6 +35,14 @@
          };
        };

+        tor = {
+          module = {
+            name = "tor";
+            input = "clan-core";
+          };
+          roles.server.tags."nixos" = { };
+        };
+
        w-network = {
          module = {
            name = "zerotier";
--- a/inventory.json
+++ b/inventory.json
@@ -1 +1,10 @@
-{}
+{
+  "machines": {
+    "ramus": {
+      "installedAt": 1764139649
+    },
+    "alpheratz": {
+      "installedAt": 1764741499
+    }
+  }
+}
--- a/machines/alpheratz/configuration.nix
+++ b/machines/alpheratz/configuration.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+  # clan.core.networking.targetHost = "root@";
+
+  clan.meta.name = "alpheratz";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/alpheratz/disko.nix
+++ b/machines/alpheratz/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0xaedcfa8b";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/alpheratz/facter.json
+++ b/machines/alpheratz/facter.json
--- a/machines/mirach/configuration.nix
+++ b/machines/mirach/configuration.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+{
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+  # clan.core.networking.targetHost = "root@";
+
+  clan.meta.name = "mirach";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+
+}
--- a/machines/mirach/disko.nix
+++ b/machines/mirach/disko.nix
@@ -0,0 +1,90 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/mmc-CUTB42_0x95d64f33";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+            swap = {
+              size = "4G";
+              content = {
+                type = "swap";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/ramus/configuration.nix
+++ b/machines/ramus/configuration.nix
@@ -0,0 +1,15 @@
+{ config, ... }:
+{
+  system.stateVersion = "25.11";
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.meta.name = "ramus";
+  clan.meta.description = ''
+    A Hetzner VPS machine own by Alex.
+  '';
+
+  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
+}
--- a/machines/ramus/disko.nix
+++ b/machines/ramus/disko.nix
@@ -0,0 +1,84 @@
+{ ... }:
+let
+  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_107266387";
+in
+{
+
+  boot.loader = {
+    systemd-boot = {
+      enable = true;
+    };
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  disko.devices = {
+    disk = {
+      "os-${hashDisk os}" = {
+        type = "disk";
+        device = os;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "nofail" ];
+              };
+            };
+            system = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          mountpoint = "none";
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+        };
+        options.ashift = "12";
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options.mountpoint = "none";
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/machines/ramus/facter.json
+++ b/machines/ramus/facter.json
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -25,6 +25,7 @@ in
    "${inputs.liminix}/modules/vlan"
    "${inputs.liminix}/modules/ssh"
    "${inputs.liminix}/modules/bridge"
+    "${inputs.liminix}/modules/health-check"
    "${modulesPath}/profiles/gateway.nix"
  ];

@@ -48,14 +49,46 @@ in
      name = "resolvconf";
      up = ''
        ( in_outputs ${name}
-         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
-         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
+         echo "nameserver 208.67.222.222" >> resolv.conf
+         echo "nameserver 208.67.220.220" >> resolv.conf
+         echo "nameserver 1.1.1.1" >> resolv.conf
+         echo "nameserver 1.0.0.1" >> resolv.conf
+         echo "nameserver 8.8.8.8" >> resolv.conf
         chmod 0444 resolv.conf
        )
      '';
    }
  );

+  services.reAddDefaultroute =
+    let
+      threshold = 3;
+      healthCheck = pkgs.writeAshScript "ping-check" { } "ping 1.1.1.1";
+    in
+    pkgs.liminix.services.longrun rec {
+      # dependencies = [ config.services.wan ];
+      name = "hack-default-route";
+      run = ''
+        fails=0
+        while sleep 10 ; do
+          ${healthCheck}
+          if test $? -gt 0; then
+            fails=$(expr $fails + 1)
+          else
+            fails=0
+          fi
+          echo fails $fails/${toString threshold} for ${name}
+          if test "$fails" -gt "${toString threshold}" ; then
+            echo [+] adding default route
+            ${config.services.defaultroute4}/${config.services.defaultroute4.name}/up
+            ${config.services.defaultroute6}/${config.services.defaultroute6.name}/up
+            echo bounced
+            fails=0
+          fi
+        done
+      '';
+    };
+
  profile.gateway = {
    lan = {
      interfaces = with config.hardware.networkInterfaces; [
@@ -123,7 +156,7 @@ in
  defaultProfile.packages = with pkgs; [
    busybox
    iw
-    iptables
+    nftables
  ];

 }
--- a/sops/machines/alpheratz/key.json
+++ b/sops/machines/alpheratz/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+    "type": "age"
+  }
+]
--- a/sops/machines/mirach/key.json
+++ b/sops/machines/mirach/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+    "type": "age"
+  }
+]
--- a/sops/machines/ramus/key.json
+++ b/sops/machines/ramus/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+    "type": "age"
+  }
+]
--- a/sops/secrets/alpheratz-age.key/groups/admins
+++ b/sops/secrets/alpheratz-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/alpheratz-age.key/secret
+++ b/sops/secrets/alpheratz-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:BbWM+ivTGdZbMPymSsKWOuUbcozyBKWuXeO0bGTElE2l67OsPKD+Mdw4a3sRRY9xs1RatQ8vg9CId/wiZJSv5c8oogjo/bv3m9Q=,iv:iwtN0Ko7PZjMrPtzzgNvFz5n6X07Mpy4oF+8AZr0nWw=,tag:oFxc/34dkHNkQ1IfACh87Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdFhxQ2hndlFoS1dGd2Ns\nMVFJN09RL2pSekZ1bTNuSjFyeE5QVFQrUVJFCndabkNqdXFESTQ5TUY1TURhZjcx\nb2RrTGUxQUFMOEdadGFFMFMwMUIzUVUKLS0tIEh5Q05SaWRJbHgwVC9aMWsyUUN3\neVpnRVQrUjM3Y05KbTRLR0t0NHFRWTgKbMpXKBQJhHedMYbDB1/N7ASUJ5m8bM7X\nuC3BSGXUmrH81krmnbdaaMontpllUtpdmDd1hYOAbQLVC3UYADfbCQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxejVIbzBWMFYwTEJyWUZC\nK25GeWNtWThUVVRKMXJnQkN1blFFMVJMVEU0CmJGdURFbUVYMWR3d1d4ak1SWFlN\nSHVDYW1yeUJwWUZwT0lMRUgvQmx6c2sKLS0tIDVIb0h4VnJPTkhlcTN0S0dUMmp0\nRXdxSmpXQ0tkZnBUQ1plMVI2RGNxVFEKGnJ5y1umJbn0qP5aCGs/AAuSJMRl+cIB\nfI8wVSGzeRtaoryAIFD/b2STSfBDyjKOkQOQXML+YEsEwqLlCufWKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9GcTYzaFFz\nLzduT3BpTFhwUGxyMkdSMm9oL3J6UGZCcTJ3azBTdVBnUk0gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpkanEzVWo5b1N0ZU4ySWR6MHBTK0tJ\nL24yV0FLa1lId2JPaWZ0aU01MVRBCi0tLSBVRXJxMlVhTGZSajhBZ21TT3Nib3ph\nSnFSdDlpbmg5dW1oNnlkSTVTTFFNCs2S1wPrTFqeOx1kvMPiRJs99VbXZyU2j5yY\nU027yIrDzqpcfqcWx9FjHNtDJzJM/150dNkwieheGCOCaHpyqnI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExsR3l0VWc0\nb1h2K0tPNjhFaFhJTFREQXR6Q2gvdjZSa1RKeWtVWE1XZ1kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYblNDNWZkM2lnUXQyVjYweGZWUnJC\nS1p1N3N4RCt4RDZZNnRCSi84c3ZZCi0tLSBEUkQxekp2alExQWpWSkVoWmpia0hJ\nbldabG5LckwwOVlHUDh1cXUvMjZnCn6Q1+kL5JG2org5bxIa6Y6Lgu+LlTyM2fhp\nNmhsoxrah8FGCsBkSNRwsVJE+RxalkUygQ+hf+ss+dDPbDsZ2oA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDk3M0J0MHFR\nN0E0a0xXN3ovZWVWQmkrQ3RBVklSTUwxQ0hmZWwyVDdlUncgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpLdUFNYXZ6SStzc21Tc0JoSXYyU0x1\nZW5FbUtGVDh4RmZHUEdGWU1sbnVzCi0tLSBneE90QWp2d01xekVvV2p4RVAxQ3E1\nYjljWk5NTVJWYlI0UXVWQ2J3RkVvCkmNGybBIyBQNh2q5NOoyEg217n6P6a31XnL\nB8a778HPbmT0mhO4QvYn7R/duo07s+vu5mRm8gc5AkCpXiMNkRU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dkNRTFpJcTJJVGlmMGc1\nOXMwRXVaRVdlN1RxdWx1R1AzQkliZjZkbVR3Ci8ycGxwVElGK0h1N1VKNFI1dGs3\nS00vd0gvRzBpVFN3SGZRaUVONG9ObjAKLS0tIGIrN2RiU3J5Ukw4SE9XU1VYYSs2\nMUw2ZEowbW5LZ0JXVnZOQTAzZm1aRWMKoM5Dj/mNrSERSCgZTobwMR5Bm1V6L3Yt\n104IQPfZaRv+eSNoKFv3mTL1C/sdRWR4wevQ5rvR8E/Y3CpymM4ZRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2ZGtpZm1ZYmlQRzVId1Zk\nTTNCT0N6aTJzR01tSy9LWTdYbXh3Z0tIeEhBCmQ0QlhDRzdlSXFlWkQ4aXRNQk5m\nTUM2L2J6NzZoTDZpaG0rSVJrMTFsdlkKLS0tIFI0Z0w5dzJOV1orcFcrazdWcHpz\ncDR2MDd1UHdIUlgrblQwYnd4aWVvWVEKJ8U56ajnsWdp96ARKFw1zdLY7z5zhgFZ\nMnd+j5VpjIn2AtIS4w27A+2PX7x+ZysEnnE3K4ndX9nSAzk9shSxpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbXkvSERJZkgrM20xMW43\ndmFFWXFZVytwZm43SlkzUFM2dkZQdU9sZkQwCmh0bStPRDVOYnlITWdFdU5YNElk\nRk1uWjY0QTc3eUdSY1AyTHNTeFdHeUkKLS0tIE5MV21kMlBYbUIxMXJpZ1Y3VktI\nRU1jWVNEN2NCWi91ZHVHWk5CUnpVVzAKlS0amgC+dhZE6TExIGUURr/OhoudnZLf\nfpMXhkGbl5YsTm0Qeqaqu5bNo/XN+77e01WfDwRz+PYp7QXdhMN8XA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaUIrUHpINE85SVcxOE1r\nU3RnQlEwMERnbFIweEZiblhPdEE4YWFZaEJjCm5NVGJYL3pQMlYyS29xLzhtMUlQ\nUlJFTytkNmk1YWVnTFRuQ0licGptQUUKLS0tIGVkRnpWQ0FwUzhVbmRNTWNSS2Rs\nQ0MwMElRV09ROFZ2YjB5cnEybzJ1Z3MKeOo3uU9D9BDJB8m9cZccIj8zztbvGqYV\nSWvR5AxNLvcEkbNKvxcDRjQUSDLWhcjdcozs7JgjO5P7YlOnZNACmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:36Z",
+		"mac": "ENC[AES256_GCM,data:06949qq+AgyxgVLVx9ARvul77ypg8Kq3cqpFOWU/HARR1jgkf7n66SWTmVixkfHy5GqOJEBFQ0HYHzKkQ0BHr94se0bFlR5W+Md6pmDVH0sbnB4+leqR0I/1ZU7o6p3hj1nXlkUWRN6oM0wp0Hj3ClOPM5jZ6C44+cadswCQvGg=,iv:5TwgpN7waxevK8nnRaO/bunyjGNvFojXPPIPp1OrRuA=,tag:vycrcH1t7ZPsyqekae5Q2A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/alpheratz-age.key/users/kurogeek
+++ b/sops/secrets/alpheratz-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/mirach-age.key/groups/admins
+++ b/sops/secrets/mirach-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/mirach-age.key/secret
+++ b/sops/secrets/mirach-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:eJkzZkzzof8qcmbDOirf37W6dw2ypoK5DZ0ONaQkrEeSb3m2qJPEjMPK+oLjayTrajLNj9/e/mbJ8h5odQoue/Wl2iOPw0RA6Z4=,iv:Jx354QB1tReAoeJLHEuEI32yp71vicCwUk61z90WI44=,tag:NotiMJPhArvFNNiXTNK33Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZYXJCdSs5Y3VWbE5TOEJp\nVmpuL2ZOYU5pLzgxMHFkMGtpZG1QZGlENVY4CmVKaERaeGVnUndONzIzWmdtTFcw\nNnNzSW5Zam90OE8xR3VEVjM4V3RGVWcKLS0tIEZSYktnS2xoZlF6Yk4wcVZweWly\nUHlOOE9vUmNYTHBTSytwakhaSnZ1VjgKxoUCSVgFXOKsyXUWe7z17WiUa2OpwImm\n5NV2PeQ8uOnMT0c7Iwl/VEsXbYbOtnW8VT5m/JcLIdlXCBqkQ/B8PQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVjVmSXpwK3JOQ3Jvd1VT\nZFN6ZGlib28zSE9MN3dwYkN2dkpON29EV25RCjhyU0hsZmVmZEY1SVZXb09UeXlh\nWnROTGlGUFNLL2lsY3RhSTVjVE4zZUUKLS0tIGs4Zi8vMnZLUUE5TGJ3TmppMk9D\ncDVoYnl0MGpsbmdQeUYyUlRuM3htbTgKHRLMrPGg9FljvwmWOZUODER/hSsmUNaq\nZBVNml61LztfZMgGtp56VZ77XU1bVLREL1VFyeTwzjpbYggLbuRJpA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHUveXJOK2dI\nTVJDamJzUWtmWlB1aVJCcmQrbElBaTRxYU1RQ1dUWG0wV1kgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo3cE1ZOWtDNUlqNWJxNjdKbjVNTGk3\ncWZMVEpMM0RHbVpUQ09EZUtRd1drCi0tLSBpaHNkWDUvSkgyODlhZ1V4Si81b1NK\nV2NUVWdVbTNZV3dqalAvMFc0QllVCph57nPcAfs4fu9kKIJZ5q/ejeP5u9W+HzsV\n+dpVasMbA++RB9SDXuifRkNC4b18fKiiOfOcutT8saG8Fth8/PQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdKVFRBazh1\nVzJuQkw3ZWZJNGhPOWZUeUJnS0o3MDlvd0hTRnZyWnRrR1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplb0hlRElvQjBtaXR6cC9Ha1BhcnZU\naTZPakd2Z1JuMEZSWTdET2Y4cGVvCi0tLSBNTEZKNkI4ZGw3aFhvVDNCK2JWd0c2\nRkpENXM4OXpkQUJOWnNVZjJzYzk0Cic2m6ZalXUPRH2KjKUNlH3bV58NG0CMIgA/\njl1h5rGuFDLfuKiQehkOebf0k+Ndy1c2frJQ1wyM6Cs9OzLexqQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGFmWXJhTGRa\nckliN1dQR2hEYzBFWlNFd2hEWktvejluQkNQbWVnWXRZQ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEQm9VK3BhbUpML2crSjdPQnk4aHJM\nV0pDUVZ6YmV1dUJzeXJBNkpDNmpFCi0tLSBWSWZRSWJGb1J0MGtXL1k4T1RVRWgy\ncnF5cCtUTXJKSFpCN1Q5alJxMi80Crgi+HtBO07LNKqN6RbRRzzjcrym+BkomFTT\na8ZLyCGECiAXoZ26GJ/RRjzru8S8VhArmy3uwa3mKpT5STkFYAQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMStWdXpIV254WjNzMERj\nRXdpSG5EMmd2cld1bWYzdXJLQVlVVnVUUG1VCmJSMFk3SGdacitLbWQwT0lvWm9F\nanhIcUYydGJzYXVYZm95dWM3aXdDVE0KLS0tIHM4TDBuT0RjSG1oUHdYT2RVMHBw\nR1pTY2ZnTXNvZ2tObFA1WFdWZGFsTkEKH30K1NjoZatx84XhIqSxAZwrYpZ8xQqF\noFkKzh3NZ5dp3xJEIIlpSX3mydyB1+THBtKlx0x7oyN2AudO3TE6Pw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPU3ptYnZxZVcrU0Y3MEdM\nb0hrTTBPYzNCYjhlZjNKSFdJRllGeDhVYUQ0CitYM1Bjb05lYW9adEh0VjVaU0l3\nWFg3NXVZamlkQ1ZLdGhQQ1ZiNmdhUWMKLS0tIDR4bVhxY3NSZ01yZnR1NzllMEwz\nRytWbi9BYnJFcWE5cW44R0c0WWpSQzQKeEjW8I/5XNhEs+FCJ4xtjxD60OMfB169\nQ6zBQP8E/yfTIva4dsLCdvRTB49ibsinfzZOyBQ+ICQPz3g8C3Lc2Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpa0M3R1R6Q2wwazROZDN6\nUzFMYml4b2dNcWMycVNXNVIvQzhDUGZ3M2hzCmxKR1RhYTJkN2pnZjdwUW5PT1BY\nckpEeW5IcVh0ZklEVk1VOFkyZ0tDRGcKLS0tIDA0Vmx5NHhCWGQxZzAvOTBUWTFm\nYVlEdzlnWmpGM05XcTEvaVV5OFVNcEkKh2qhAWU+Hwz1Z+JAkirnGc6CMbykCOKy\nTyNxqzHX7z7o+8V+Oc3ChiuxSkruZQyajRgLdkrEZq/bnJDNfM0hgg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMTEttZ1dZYkhBRW1CVGdr\ncTNHTTFHUEZIVmEwV1YvSHgwL0NnWC9CaVdnCjRQWHoreldrZktsbFdCTEdLaXhF\ncTdWTlJGV3hZV0pBNUxyM0UrL1FIRUUKLS0tIGlpY1d2WXFSUk9WWUJ0RDdKUk9H\nL2p0cFNzQjhsYlRkd25RK0ZhUjlIKzQKj5vlI+K3D02AAC8j8Nn99EgOnEc2YRWj\nm3XTcyiCFTQDVMPWbUZXPelCIBLSPmksC1zLkWtlaWmOFkT/iLzWZg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:44Z",
+		"mac": "ENC[AES256_GCM,data:dMYkl39sOxlSL4Bl0S2FTHdHaiRECJkIrBSfthnmT0/LxcYoFi4RM27pY09QFfS5Ohg1DC0Chs+hSBCLsVidSWJCvwyuF0ir4zKJZM7+KeyJFq51InhiqjLXJAMwh0BL8BnCiLcdlblbCCg1JKrlwfMrPl3dLYhi/a7DVWMXz6g=,iv:9WGXjfhrAoEtecJWG99cTZTs6i34AfmL3IkeefuJmJY=,tag:kKgB63Cj9sFjhPfJjEruXw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/mirach-age.key/users/kurogeek
+++ b/sops/secrets/mirach-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/sops/secrets/ramus-age.key/groups/admins
+++ b/sops/secrets/ramus-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/ramus-age.key/secret
+++ b/sops/secrets/ramus-age.key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lc5PP4xpLq/JXq2LkG/5zkEY5luxKC7EZHx0s6exiwd+UtuGb5rjIOq0kUBFuJWYFWduqcvNS62kR76oQpRfmjIkq2t02NxZ1lA=,iv:eZsHK9u5Rvt886Elz7Vm+PMD8urm1UyoNbNNwnlJtj8=,tag:inCrDdsNmLb+L+LpF9k4Ag==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0STRlY1h1NTVUdDJRM1NO\nc1hacUg4TUtlK3Y0dVZqaE5LdUlqMkFKNmtVCllTYXFHdXM0NVdUejhHZWM1TnVx\nUURvd1JrQmR2K0N3RlZIS2d0RFhTRUEKLS0tIFp1ZlJSNmd2V3dpN05LYWh1VHNC\nbFNkdkY1aUhTZmM1R1FKUWlGWThSdE0KYxgpuknCD07awfN85PkaJjPohYyqT1wL\nbjUcGo6TmFQKIgEzTzNj+in1dm9wz0AnYl1teiHa9WjK/Udd2BANBQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCd2Z1aTFYenowSnczWk05\nVEZ3d0FUNFNkV3RlWlpFWk5jd3QwazVES0ZVClVjY0Y2eW1hSGEraVVpSjdoaHMr\naS9lWFUvbFl6Nzd4U2l6dUhXRHBlT0kKLS0tIFNCYTlSL1VnNURBQUxoYVozODZw\nVVRkVGVINTV6SXExN3dCT1JmRmNFdlkK+jNS9cUz4TzBBzrtxuYcoiEmxKcRNTlt\nqksdFqnPWzKI+edJSWq3rkBYeuI7c4wmxTtsgVtHbv2jwbD1kJar1g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNxVDh0SWNL\nOUt4TG93eGVjaUxzczhnVjNYRlB1Vy9haWxjYnN6aGI3ejQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxSEtwcUxGcVY3RzNjR2REYmdrRWV6\nYWJyTjhXMVNtVFVpczRDc2dDaHRBCi0tLSA3NUVyR3YvMnVsd0l0TXIxQS9odUZO\nZnJWV0MvRlpwU3luNm9FOGtDNkhzCm/yGJJvQf5qvBRyGLrmCeiI31qHr+JoZ2Av\nbqMUeg3Vv82ffTLT6GX+JjiG0wQFcYAX3/k0noVN9JMR/boiWIc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpMZ3JmMVFy\nU3AzeEFFa3B2TGxSL1NlQjhSa28waGtLQUlFTkp4N0hVeEEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpYVDJSdCtnVHIzVXhSQ0lXRzE5dlJo\nS1NHa2F1WEpJK2xJQUQwa0RNNCs4Ci0tLSBBdmpiZGVSOWJwanRiUjUxT3JMT0VT\nM2k5bE0zOW5SVWg2ZGw0QUVvcWVrCrc2TjHS6Pp38MTPU9H59q2seVYlESH80V4+\ny1/qjB6fK8lnnyi5TLrSo+M9MAcG5T4EGvCcAPuzjTvF/DO7hxk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9jZllPWWhO\nV3pDa1MxSzF2ejRJMXJBWDlNMzZqcG1JdVB2Y0xjMlJKeGsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpwSUdWWlFFbW55aXVkZ0pSeUVPRkF2\nTm5tTnkrTGNmcEdoWE1UckwvcXFBCi0tLSBnN1J1VlQvVnRXbkEvOWtLbHhzVzNN\nU01XVkpRNnd4bCtYb3poNjR4bno4CirmDl+6Kebk0jMjgRp00d8kpkzGtQFsZNht\nm5MPBM+FXVzpDcEWQGUlLr50yDKYVzHdIeeuGsWZ3KaI1GM8pdg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByOEQrR1Z1K3RETGgzVi9H\nNXIzUW04UHFCMk5vQVZEN0taRWJwV040Q3h3CmpaVWV0WDZNemFSTHF1TTF4YXI3\nL1loMnA5OUNCbE55aGUyR2EwbklaczQKLS0tIEpnTkkzNStsNmdNS01HWDhXY2s1\nZ3hMNXA1dXUxVmxucTdtbWN4akQ2MTgKAolaT+61/BN/yzljENx7YZTrFRGA8zwN\nsquQs9vnFS8yduVMoaemXrCLTpiQ1KGCAWVX8pPtY8+GV9YKLZsV7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTlNuQXN3VU9TVTlQd01N\nYVBpN1BxcjRLYWN5SUg3TlhUbHl0UzkrOWcwClZ5OHpOcGp6V2craFBkWCtwcktp\nWDZYYWR4ZjVhaVNPdEN4WmZ0UlJqR3cKLS0tIEx2WXdQL0x1Zm5rRnJGMmJQWFVW\nNW1nMFlac2lyY1ZuOW9OZmNWSjJxbTAK72xqJBlpV3UWAFhGlUjudEILQSnGDhQm\nS4U51sUc8rrUZLlmAivWg1nxCUAdrhLo/r9OuITR6QX9DeFsaeR9uA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WmVUUDJ0V2sxS0Q1UFZv\nWldFK0tRSlViUkc5aXFTV0JDdDFVbVVXR1QwClUwLzg0eTAvbUtaTVRFV3ptZkJQ\naDR1REl6MXZ2cDlsZzk1SVI1N3pocGcKLS0tIFlUbGFPUXAxWVBvNXhjZ2QzWGNh\nWTkrMklIQnl2T3ZYL0Q1c3JOTU85bkUKL4h+PDQSnVbls8iuioUHTBVpVh5Yhhx5\nrK9ELFCYGPAVzbx5cFoOapnIJcTQUAPZdBpmlm7kgRmMLXptMdGkGg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFZ3lPeVJyZUF3cVEvWnhH\nbVBwRmxaQUhaaExQSVRyeVJNZVFSRkFrU25NCkZDcklIcU5TQWplQkE1ZkFTUXB5\nLzZ0VFlEdks3OWpGM0JMSi9ZOVNndnMKLS0tIG11UFZkdWRYdHZJNk9TSDYvaHcw\nQUk1dGxIOFhwaXJZaEZNdVppWWlpdUUKQJ/UjgWIaeKa4o2El4cFkwv+O0bi9SOp\n13XExCNLB+BtwOGPREWbrmW/Z15c8koBEyrW7iuIhu0Pgz95oAF2Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:15Z",
+		"mac": "ENC[AES256_GCM,data:ovjPl0pJ6DSJGjGz+Zt5GLbwu3ZTMwOKNSsYxIx1NcjWAiGYpPNFcFrD5OBciVQ2K7VxlRoWW5WqbJt7mrvQXDO69LxvQqiK1+qHeFJOHRd6Sp29fRA1aqEz+kOif0SSzaEkHOXAp1kzk31CnEfIG2j5yQ3oMyrSqNnhnVrx6F4=,iv:NdeCrqNo5SV1Npu8aqPJcZDhPMGfUviyBQi2CUjYZOM=,tag:yM6P7P2vLUMs9GdT284Gvg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/sops/secrets/ramus-age.key/users/kurogeek
+++ b/sops/secrets/ramus-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw 
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:3Fypl1oDZrZi2uD5C0WLRzJ9YMfM8DLrmvRBsQE3xS7E4W3vTNQmFPMBIU9eXSvn/XNbeZy8ux/+aYFq5tmvB85m/iz4To2Vaih5Ds0yx12eed9hktjpItHJSF+VFD5vZUZPvYipt+iTHprhe4B3mmicIZJrlFmxSyqt7tj2tRp/nmJ0W8L/dhYnpIy+Gnrh2/PemaTiwQkV4V1d3AAJpeQNt+BtsBBQyKm4/oGo3FCvNGnTZCUiI+TtpDb76o9O7VVAx+yWlPtZlJwc6leNspAfjT7t5w+pLSt53+6PQ0+dbjqUY0SlTc+TbFJPogaR1wSaJAm9n2rMMagGFGaQJcx57lDlH/gmq1Dsh7/0uuicMpHYPE32G30YHI9uEGsEtp+ERxOdZGlEX6Oi2gjpHvWmDU9y3SN0JUdAD4riD4cqFcf9mqKiHw7odKVAFdxdwnZio7h0z9VJuHi5F71078xELX2l/6le4FslCeaEPb49GzVt7BI/hYWaV/SbaPspRaX5,iv:i7hpBBWINIJ8VGaUyFYqm+N2EbL0nMxPKL3RCTjKxyM=,tag:GZFTfIwa+WWS2w3Hk/GmKQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQlY1bTNaTlpkbkNEWFlM\nblRGS2t6SDU3YkJJbDFMRzVyY2p4akhlOFRzCmNOc0Q2YTB2a21Qem56L01zNFFT\nc1Y3NmlVNXVLZGpNT0l6eTlZVnVVN1kKLS0tIHlvUzVsWjNzcEErOVZ3TWpWYVhv\nN1VYei90WXcwNVNFL2J5R1Qrb0p4ZmMKQ8PfLqzmX6UqgpBNhiuDpY03Sa2Lg4J3\nLLCkilQKzJSEJCNSDYU/ebgJd43HAjRqAs3lPcyauC9xVNI7MDqhaw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WHVsWWx0NFltc0d0a0FX\nbGRIcGVKdWowS08wbUFiTGpZMm9XZ1VEMEFjCm0veDJTd3RnQndCK0Q1SU5PaE1x\nb1k3R3FSU3l5bG5Jc0UxTVdyZ0l3SVEKLS0tIHVVOFVnZ1VvUHc5MWthQVNKMWxO\nS0IwMWJ3TklYaEZuWDA5M3hBZUtsN2MKE6HT3ldHVcJM2O8eR4jbvJgMERY8gRcf\nRL2Fa4DdQdxVED1WU1arZmN9DnK+sscpK7eNF1+PFaN2Zk4Lk81nQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLK0hmK0NrV0IvVE5TS3JQ\nc1NVTVp4YjJvSUYvWlN1SHNZSUlTWW1YcFdZClcwZGIwN0ZDTm9QYlg3WHhiUTZ5\nZTJ5QTVxdGFyRGFNdTNSWXVmRkxQVEkKLS0tIGtTMXpmNWRnQ21aNWhiVGRYOUN1\ndXBQSnJCaDJCaDVKemRiN1NTTk9sLzAKnUS6XvHsMFKDOfbM6h4l6Fa/E6Y3oeWV\nioZqov7WYBr6M0GFspJwmUKIMiUSOS1YQZ+m1PZcsSm8ukritJ6Erw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdvWDFGdklB\nUjRPcHJuRWtSR3cwcGZYU09PMFRnVmpXSFc5amd5ZGRjREUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJZHA2aTVVekpYbkFtOFMyenZLUmEx\nU2NYa3FUdFNlbXJDaEZyY0pQeEhNCi0tLSBnWFI4czUvK25OdjVrV0xtWVExaVRH\nZnRHMzNrWkh4cmJlN2tKbFVydGtrCn4kJx3yPDwu7pAMnFhh2uB8Pha2eDCrzNM1\n9WSVFM91FS3dwmU/IoX1gpEirbgxiDefzgHzhEzzNJhU4Vw1/Q0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFaVUp2OHpT\nN1dHbEk2bDh4WS80emtkOW5MSUF1S2U5dkd4ako5eUxwU0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4QkVObFMvQ0NuNGx1VnVtaW9Ub2c2\nT01QNW9PanhQK3UyanAwMHJJZ0VBCi0tLSB1dVdRTFlFMUFKb2o0Zi9abTJVVHRz\nY1gwR0hVN25VT3JmcUxuT2N4aEtvCrGwosnahN1wtQxiaqU5bz/V6JBoxvX8tQXm\nXmG9tWTcoDx9gjQkV3iu2XsdW73apm54WfY/9qJfHJHwh6LT4qU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFc4Z0tZY0hr\nc2xpWVRUMytjbVJ6MllBT1pPYlpMeVdqWTZIdDI5SEV3VHcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpQQXBxczVQZlBITlBEUExCV0ZhZ3RB\nTWJwSm5nOEZKNFV4alFjOFVTUWRFCi0tLSBRN1UydUJpbnRKVTlicmFDbEh1S2lV\nc29Rd3lZRkdGd29DQ0RGdEQwWm9nCt/dy3C4H5lhXCW80e5ypvOnVdklucyra15X\nZBKw0gtr8a0vZRoECXPiRHog2U3uBY+ylqHSggPJfYyEmjqcMX0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVlQ4d1JjSkcxZVRXTElp\nT1ZDTHhCOGZZMzk0VGt1SWY5N01jRThhV0E4ClRoc29sVEhmRU9aeVJBbEY2RnR6\nMTFBanR2MWJXTHc5TXdsemh4VXdMQmMKLS0tIHozdWNDRzVnZFFUNDZvUGlvMWk5\nVWE3SkR6bmtZRU5PelhqR2Nqd09LWm8KaKCZcmMmGdq2AI6seVe/OCBnK8Efu2Yi\nPpW3Gq3+SX/J4ODGvzgVMBtcVJo/ZKZTq0sHLTCmfPVnGDGtK10gjA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVXZaRXhtRkpMcGpmYnNm\nOGJkOFdmVkd6SUVHMUtOMkFSN1BXVmNibWlBCk9EUTFMVE4vVldmaW5reWt0VXNx\nQU13Y1ZWUnMyN0V6aDJhd2hESTQ2WFUKLS0tIFY5OG9ndmR5blRyaWszdFh3Wngv\ncW43UW5OMUppQ016WGJoNHZnV2dZRk0KrEH5dIiNi3294aMzsTS8jQUKUrbhov2L\n3A679aAm033yVG4UVmdOZFEL3ffOG0cGo7R1X76seWbee1eEkGgfbw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3dKV29TSE54bWNaY0g4\nc3RaQ0xTOFlaZUE3RVB3OHhDU3NJUWhmL0FJCmVad2IwWnBQaWxHSS9QNHRubyt0\nMndYaHZ6QlErZmRRT0NNd3lwdVdhTncKLS0tIDRQc3Q3b2xaSmxtV0p2Y09uSlV4\nNVFqeGVUa1NUNXVhc3QrNDlya1hzZzAKzM1yHUpMAK/J+O8lDCccUx8R4BWQVRdb\ngldElzMF7Disv0yIZFa+S8eyFwrwzyn32z7kKErxc8TFs/d4p11l0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d0dITytPaHUrMUo2aXhW\nekNzS0doZHpIeDRsQStjd2JMbDFoVjE4R0E0CmVBOC83TTRZVzB3MXJxYnVRbnFV\nTHA3N0NyVVpFcnUyajBTazkzM2ZQd2cKLS0tIHExNlNMMmVDdjNpYXcrSU1KN0Zu\nUEYrdG03YXdTYXl6S0ZoeTJKN0dHcDgKuVpkG8xlSOS+WB8kzk5tGWvKWJC78H6J\nd/znCxcaDfHI3OOJxSwDg/uhMoqTcm6Gwx5Fx9iMK26n34lfWkJFEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:2iWAosxFEYo/KdMC8FDy4ZkNJXRWlvOYwD2j0cGoE8YIQ7PkjKkIhuGE2RYlhBV3wk6z5nRtrBblJp9bU+LKleFXyUnavC4UgQbtrdWA/QSOde3YJtgsyQXjIPH9CkasZqdPhltF6ReFVfCu8P9yHEfXTkAPXSutLKTUCnO7ab8=,iv:9PYgHPiQW5OUyhi5dMYQgzrq434RYLdVbiULq9mfMhg=,tag:sVsVJOGygoBbss8WM0iiHw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/alpheratz/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
+++ b/vars/per-machine/alpheratz/root-password/password-hash/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/root-password/password-hash/secret
+++ b/vars/per-machine/alpheratz/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:XHMzHHk74lMX8iQIzmjOm1Kbeyw7ksVK3qVCeWTKgp6uUPVPa0v0hopgKYwF5QdPECsZ2sylf3V7OyYf8qpC6GEWVuoW8JcYugMow8VzXEIOPMjDuuyIdw5Ub3ThGodxUT5nlF/avUQAyQ==,iv:3c7SyA/ob45jdmmn++eTjCisw4BA1efBInCFdcyi5cU=,tag:ryY4N9v/4z6zqleZpXkhxA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBubTE1cDNCUEtuVUIxcDZT\ndmxGblpuWWpXTVgwOXgxNCtudHZzdDU4eGs0CkFuYTd2MXZFTHh4VjZOdkhXaDIx\nMzBYeGsyV0VLWWJyc2JHS3lrQ04wbjQKLS0tIE9uVjZWRXp6anFsakVGWTAwZzQr\nWEluN3pkVUQwV3VDeThnN3dtN0ozbDQKZvsicWXuHocazoUlL5bnu3BSsIiOrJHH\nxbsuv8VU5mE5p440R8gV1qiOq7PVx18lNc8nVSKjlQglfTMiPBgDnQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYQStLcXdiK3YwVExYQjZs\nMHJjQi9xaStub21EWk9LdGlWN2pJRStMMkg4CjFoU3lZTDlYNXhXNUZqUVE0b25M\nVGc2bVMxNmtudyswVlpuV1UvUUpwYTAKLS0tIFFBWWhQY3pyNWZQVmF4UXArdEx5\nRGRWTzB5aVluZTBFNVhQT0xiSk02ZTgKBX/0V28yFRJ4jzjv8a/CK+93C7+WbW7e\nmisvXVLsnxoV6yvkjAOG+GfVqJ+oZHtghbYzMv5kOdTB2F0d8gSBnA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRk91U2NncDVvenlmdWps\nZWdlK21Lblptcnc3bE1LSGtZTmNvUGc1cDBRCjJXTm1PNmdhbFd3cUltM0R0NzZC\nVVpyclFaU0J5WHg5cWtRa2NjMEtOdGcKLS0tIHI2TG5nbHZuNTQwZldnd3ljeGdi\nVnRDRnllWXJUZittUFhyb20wSEtmYXMKyzfABTq2/pPu/ma1WynIezVVBdwtShCC\nU0xfhC6SQH4mSWUq1J4tToG/dUFNL8UBkb+Bl5fJfn9e+AzuP/IXkQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1BbmFGdVFu\nUGRoNFcwckNjTDh5UXdZaWFIU0dvcmI0TU9QS1RqYy9wUUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp6U0RxK24xYkI5VG5CQ1dUeGEwNFUw\nS3cxZlhpb0pYOXlqdytNTVozZ1U0Ci0tLSBNWTlkNUxxTjB2N3FJcnF0NDVVZTJD\nU2MzTUZhRmR0RkxDQ3JvWFJsaXI4CiqtLfOaEpw3Yxx90Gm5aZg4/bQXmBREMP8S\n46PGDaKAvfdxl0QGlBOyM8l5QFmh9NWLXIUyPr+sCeDQNYz0k4s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDlSTnV1NzRP\nb1hucEtQUUNHd2ZJVkVCV2h0U2dWcmRXWVAyY2xHTFM2MXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3cnhib2RHN1VaelRpeTJYdTYvSFlB\nTkRMdVYvUnM1MWpiOSt0bjNkREdBCi0tLSBiOVRkdGIvVENmeFI4ZlEzRm4yUzFs\nRFJzVFAxWEFISTVrTE5qTFE2dHVZCqr7t0eALrjXKez9SAcSy/oxkXpzn+K6HOu5\njXXrrgIbLcHLQfMxK+QTE7+xwNvM4aKlES3dm91jf62ANPgedew=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlBQTZHaG4v\nbjFOS29lbGxYR3FPU25vT2c3Yjg0OUNhK0l0NVRmVjk1aUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpqaGtQSmhGdXY1SFlpbjVSNzNmYkVq\nbGVBK0tJbFhvUFVvazRrdDRTL1RzCi0tLSBnVHc1czBJYjZWamFNT2FCaHFRb29u\nVWU4YW00YlE0Y29HejRtYmt3a2NZCtoKSd6gNA7m5WBwLLixV4T0AcqXwYl8qiHv\nXMcrXhZ70KXTJW6koxu1iGqhTc2NiNgc3GyCS4Y09/aGMsdcPOI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2andpVWhmVGR4UW5wNmtD\nVTluNzNueGNIcDlVcURqekVBN2RvY0Z6S21VCm83NEl2NFIxUjdlWjRSK1QvM0NC\ndUJOZFhPck5FY2p1TUZTVVlzRmQ5ZDQKLS0tIGY5MnE4QzRiOGRPNHBRSFVtMHoy\nVk5neGVTZ3pqQ05nY1lucXVWdlh2OTQKeOeFUVyvmTxUTtjd7T/H8pS9EeZ5gOsw\nYXVXu9jXRWOzkS+vUXL02Kl510Dyyz3ecRDSzzOUOp1ERw9oF3hK4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVUgyMW5wUmFHT2hYaVEx\nRktQYzRoM0YzYU5weUlUelZDZlB6YkJZaW1RCnNGa3FmbU1FR1lZUkVTalhkV0Vz\nMG5BVjZ2eERpK2RVT1pkOGcrOGFmTmMKLS0tIEs2MkVZNmF6OVdkQWRvK1ViVU5S\na0xUNlFxdW5zZWF1K2VobUFRNCtocFUKPhOUjooCCIBCG20C5Oe3qyUcIpyJZcY+\noY8TdgyK1hgmhKtMZN35tifglvmNIxmEyH2y0iXBdb3N2Gi8GG3CFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBON1NiaGFKVi9LQjNFbWlM\nYTBpeTd3S2xUTkI1QWVQaENpc0hhU2VPVHhnCnZKSXQzQ0ZDR1hsL1dNb3dPVVp6\nak9qRk4ydFNtdklhNHUwdDRvY282S1kKLS0tIGdtbUtEMk0wLzFZVVV5anlyMldN\nMlF3bWdvZzNNL3pLSDBFRWxtaklEc3cKcyvFrH/5B3X39im6FXiZVLDwqzL615G/\nHraaCZ//Qyxi7+onKXDNrYTxc5jUmCE4qs6lhuyFdnDT3IQCxJqMEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NlprK0I3aS96OFhQYlhk\nQVlsVXl3UHEya1g1MExMeEVZOE5vbm5vb1JVCnJJU01yZC9HNENrRnNtUDZFY1ds\nandjU3JtVTFac0RxRHMrL2I1TEtDb3cKLS0tIFRDZ3dzaXEzRVN5RHpHYTRXTmhJ\neGEyd05rR0JGamY4SUxHcmRzUUlQK28KiW3tu2irWDJFPcnBfJdTbygkJMpFbtNh\nwHHsaAml+dZuPqWQbmVyDY5CKwZGynF9X2RCRHiqXNbX/GGUblJWmA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:te5F/QFsrX6o37LIpLmBewPDRoG5uhL2tFpX58xD7mk7KGxVi5o1Unk/n3DJ/+CSyg/0v+mWbaRuYzlRGO1XPJEITXpQBvSkjtBskvioCvCH6XyIvSJ923azqR9KeVjgXQVBNxSd2DDWhwnaGgeFa1a5itk1tA+lnzdghVAt37I=,iv:5yf2rdPorAA8ofn3OmRse34rZqVPfvSotPKk9i7toe8=,tag:zjmUmLBlQ3fGRxNZJFI6fw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/root-password/password/groups/admins
+++ b/vars/per-machine/alpheratz/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/root-password/password/secret
+++ b/vars/per-machine/alpheratz/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fb0O3XyZvw5wY+JMPFCpjn0YibE0Z+s1QdaIgimDNEQIsCyQ7jNQJIY=,iv:liF4HBVvLWbPD2QAcQ3YCcjxGdAXDZPu2+jLHAtrBGQ=,tag:yt9Bad+HxQodnbxiOrNYWQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWVZIQWs1b2d3MWs0Vmxr\nM2JzaFN3WlpKKzFwbVNHc1A0dFlGZlRvL1FrCkd1MU9LZXBQeHhQUEE3bW1sQTdu\nOTFreXpQdVpJUytwSU03KzVtUHVsaVUKLS0tIHQrT0NGTlZ1dFQrTklwZ2NIbS9D\nbTUxYzNjaHNMdXZIQ256cEtCaTRmYjQK3+NzdC2I9kmJyyCNGqx2P2rY6D73aekM\nuNZoUfFNqksPLQAOLPvjt6joQldZUZlFKvY0AXw3r+HVUMICP1z9Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByYlIvL0F3US9nQW1HeWg4\nUktLRHJhd1AyaWRwTnNUVjN3U3drbFJncjE0Cm1QREo2QTlxbWdMVEVFUCt1Vnpy\nZmk4WHlaUUZkcXAvREcwR01RZWZxaEkKLS0tIGhWc2FCVlA0ZE90SlJtNU12WUEx\nTnpzVzlMdmxmblNocGdHUWJFWU4xMWcKvmJiH7TJrbs/1oMs5Zsjvt0w6LfiIIPt\nle+ivnsRrIhYzofHddHTnVDI7NmvCw6e00MWqD7hU458zqW3fUdeow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHc0TnZHWFpm\nSHUwUnBtdERNRzJwdWxsMDIzcXQ1ZndFS0hHZkRiYU5PSFUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpsWXdKVU1JUW5rYkEycUcrQjVrbHFP\nYmZna0JZZ2paNE5vVzVRTC9VeXNFCi0tLSBUSVZzQktRVlJGMVU4SGYydnBhNTNR\naXpZenBZTjRqVXQ3R2NPalBRUjhjCq3x4ccaNLUhKfLEZRTAJPLInz1edrDYPm0H\nVga5VWkQ0llstDWy8ANDJ+N3ryL0P4WUGWNbWtRpY9bmoXqvs9Y=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDcrTlA0VjJF\nM3ZjS1Z3YWYwOTYwSkJ1Q1dLWGJ3VEhFckpjN2FiRDNTbTAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpTUk9lT0xpaVJFS053TWhET2cyaTZn\nb094T05HcGVYWWljeHgvSG5rNGdnCi0tLSBScXVsMFBweWQrQTFpQXoxVm9TdWFG\nK1lhaEptM2poNkxuMkxUMlBDV1BFCjr+ZEAW85wiP0cEzfBnvhr/hI+r3ypLJT9w\nB/MvVbYma4yV/tIbN1vBEWnLEpFDuLyWBUZfNS1aVbI3U9o2Gg8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHlGNmVSUktj\nTHlsbjd5bUpveUk0WE9BczBvVktzNFBFNGtJYlhoZkgxVGcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozN1d2OExhUCs2cnJBMEQ2SEk1UVJE\ndUdBTHNCQjMySmg0dVNFVmxQZFRVCi0tLSBtYWFGbnYwbVlWK2Z5cGdHOERhRWlK\nVjVKdnBuUkV0dFFoeklHMWkyOUdJCnCiH4DZpqOiTFdREZPpFxbeIqYbNfHhh6ic\nPziJWxAH6xJy1m0Q2MHj11CqZFxHti7xeOovN7vrb8LiELASu2g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYVdCcjBWSmhjdk5yTm4v\nYU43UVNRVzg3S3pLR1RwU3ZQeTd5YXo3ZUJzCnk4dWduVW1zYVUya21VR0JrRlNU\naG1MWGlsTWRkVFAvSW91OGcwayt3NncKLS0tIHdNU3pnTGhocERRbzFWNUtvUTYy\nQVFXOTAzQThsTmowNit5WWFGc3JvTmcKmCL1zZp7qksSB8WiLxh44kvLemT3AF7r\nIY4WLCLTMBYIZ+ZnRyiLtoV9199bu7zdVRpfIEAlz4fH0kVREXMtyw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0d3FhUTBEeUNrRnozeVJL\nZVU4QUM2L1RaZGVkMDA4RFNBRWJacmpDOVc4Ck5lTHZGN3pwY2ZRUWdRNTY2MVhi\nM1p3Q2tuM1ZEZXU1L3l0dE9pYWJSdHMKLS0tIG5aYkRER3pBdVJiTHR6Vy9nQ0pS\ndVdTc3NJSG1DcjdqSDVsQXdLcXNScWcKRBH7tIeDU8li35JjSn7k49pv3/Twul23\n57Jlro4c82bkqApW7yCLn4PDIYykH7B0iswZBvS7mngQ1KSwbEBfSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQmpya05vQzZ2S1NnU09z\nZzYwSzRSWFBmYzJqVVZrRnBNa3B1UDRZWWxVCjY5TERUNUdTS1A5SlhNL0RpZDVR\ndzdzTk1qcGVQdytZMFNqYVcvczB2S28KLS0tIGkzemQyNTYxei9LY01zQzlDT1Ew\nOWRyWUU1R0N2YmQvbzBsZlhKMUxEcWMKPb7WsVVWVNyzyPs+Xq3TLQ62tZ2di3yS\nvsDMH+mQSL2y1jfV2uJASTd11gz6SmzS4FDai3sxTXfrhSO89ha+jg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSG1hd1AzQWt1UWFpaHUx\nOENrVXVlQkFCWEp3U2orcmx1cjV5aG8wbTFvCmFXMElXcVhzTWlpemdGUTFvVS85\nMEJ3czNwSHlnYTkzTmVLOC9YbGkyRE0KLS0tIFBCY3F6TUh4VFcxQkdFRytCRnZ3\nc2VrUllLZ1ZxbDJFb2RITDNpSXhFc1EKqAX7ERco6NC2MT8N8peSIRO8pPTPdhGn\nlso6TZDFlQBO2Qz4UIFGe+/YNWRS+tTM7I/SJ/WOx7QeHGWZ3XW0zg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:37Z",
+		"mac": "ENC[AES256_GCM,data:cdF53FqlXXkIfly9Wi/+etRl6QmcUukTgCXBT1QKSuF0wUb6HjS1wP0Gxx2rEzOIcsDCPvTZtnokrGQ8Fw000B5ubajhBKovr7bmxab8SvJz03fSQuY2PSLd9bdTln6kgwf4NG0CKfR8P27BtTFPaoXcz2KzJxS9f1cXq3OeNrI=,iv:sar0rHe9clELxClpgEQ5+s7wmcS8XDabQVf2DMdRDEk=,tag:M3AYnXyy2VWXWeqAzGthug==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/root-password/password/users/kurogeek
+++ b/vars/per-machine/alpheratz/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/state-version/version/value
+++ b/vars/per-machine/alpheratz/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hostname/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ao5Mri45cCo0ikJPFquPwzCeeIr7YT4hrcMwAErpwJkiBozCoeAnp0NarCEojOKQWMEm38cCcqPAyLB5MMUQ,iv:mXex1YLgV3cSed8Dleuk+xYVHJjH4pRdKHUgT5RNaus=,tag:FeG2VRpNCP3OLByCevkHrw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cXJ2VU5uSUNKelJHdHQ4\nYkZtNDZ6NTFhNjNGakdnUjZxRk1jMHJSQUdZCi9DYUR4MDRhV3c4cVpNSlRnMGZM\nT0hZMUZnNzdKV05DSzgyblpMc3lxeE0KLS0tIFdoSDA4dHNvSEx6NVdxclRwQ2pu\nNEFsZ1FmTlNmME5DcnZFTVhSaFdSRHcKNkHgnCn07yeG0qnXen//Czpm7Jr1mG3R\ndiymrjr+cHJpib7TYv4h5z3bC2DCVa72wl48z0Pj9KsBquR0oLVsNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtN2M5bHhkODd1T3U4cHNT\nQjYzdDFDemRINW4wY1U3YU0yRlJJd21EMjBNCkpQenUweXhGSGNwbHhhVUZVZXl4\nbXFBaDFPd1NnMWpIVUVTZ1NYb2pDaFEKLS0tIHA0eE1ENjRWTTk2MVJZZjhIVDE4\nS2JzN2Z4VGRFYXNrWEVkNzNMMWxqRWMKOFHKYxSuluxyNRmmFEQ92PEfRfvNhJCl\nRViW8jHYbfZnPhBK4irht1b4XHDJQz/8sn5TKv/5hJeKHtdy3410iw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibFNGcW9JOUUyRmcwbmZ6\nM1NVTkdPamQzRXNHOWZkaWwrZnJjYUJmZmtzCmxnakdodnRCMFRBbUVHVjhET1Fx\nekdtWlFheUo3MmdXb1lnKzZzN3ZKRlkKLS0tIGF1UjQ4TWJtTHlsMGNNWnhJYmtp\nd0V4OXN0OWNZVTVQQ2cvdk5Ma3NTVVUKkx1Njs4ZkOFtRFixqXdFNibj12hy18rX\nh/6cxmhYTpLVzzGBSWy8/ObP8/mk+uon280T2FpQ88m1sTKS7NtnUQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHkxQ0hEaGQ4\nM29rZSt1NnVKWUhGckJ4VkhFMys5dURQc09RSGpuZnMydzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDRFdING5lSFRnc2dsMTZ1aGZGQU92\nV091czZjNmxIZm45RHZLTTNkd0ZnCi0tLSBjVmFWcytwVHNDY29BMTMrYVVCc2hQ\nUVFubWNCbXl0NG1ITlRNaS9GVjhnCjBbMrQb+u3TFceCd1RNeMLpaL7tfiCc3003\njliolM4JyR5L6MCyViMkS/xpXI1k/25a8kl0aeRI0d/jEPZ74iQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHljYTlYRmVn\nZ0Yya1dZN3piYXJvUEJjdCthc1dPak1zbmoyQXRlTkpYbjggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp0a1htSDZhQW1mZ2VtbjkyYm5nditX\nbGd0RzJJN01iNExLdGFueWFZenlnCi0tLSA0UFVYeGkzdGR3WjBNbHZEN1A1dVBZ\nZ3lNdFdOODV6MzZwc1RVZkJQSzJJCkr8KQHc95z8VlrSRot+8aWb7WUUUZ3C0KUa\nXPdZK05yhHeCDDD9zIyrZ77esI9tSLsArVcV25rGv7zCO7/fnpY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvR3p0NG1L\nNXJuODI4RU95dDI1dFFjQXJ1Z1N3ekMrTEZ1c1JPOFhLZzAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpReTNDdUh3ekFXRVZwV05tdDUxMkxQ\nSjRudktDQ2dKeHZOLzI3QjY5TnRzCi0tLSB3eTVVem5GblN0RHlmeEkvOGlkU1pl\nTlBlVlRyeG5ienlNNzludnZkYU0wCjOfwCN4FCfsH9uY6Nt74lhiAOEbjEiRos/U\nrlgaZ0tS0Nc09grtKmZAQd9Dc66jmhaD/nJVnvq/9IHMnrbE2jk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSkVFMFdrb2RuOSszWUZL\nRXY3QThjUjl6bWM4OWJVVU1oVm4wMjR6T1drCmZnNi94dkk4YnE4eUNZTkdyWGI4\ncERYc25uUlhCa1dvTWJRaVhSM2h1T28KLS0tIHVlWnZXS08veGNsRi9wWDh0Yllh\nSHd2bTZ4THRqTUMvN1BrRGlEQjMzbW8KzTsGUcBpMcPhkgJOugm932NAXWG2xMBx\nJW1kIVW2TycopTWZnKQfOp3NtV3yFlxW7vCPljGEmhvAs5EhU8SbgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYWovODhORUZOMUx4YXdi\nYVd2akpaUHNWMVc2bWF4VHZHN3grRWlkM1FRClk2UVlFRHBCMnRDVnNPbEl4d2Iw\nNWNFNjRNbWFZa0phd3QxRWdZc2wyM2MKLS0tIFVheVlsalZpV0l4UVUwVXZnZm9z\nNEh1QTlxVXVLZ2wwT1MzcGxHbEt5V3MKvkMbOEMLd99YvMuoK4LSdZcmvswC877c\n3D66ZoZ6g3P6wrVBRtPs+4+10wLjFhI5GPPvK9PGpWYvu/5pDKaCOg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVblJNNmFyM0pCQllHdHBR\nT2JPb1JRekhpeVhseWxGTGRCYkloWk9Zc0dzCkoxa1cyZXh4YzhkYXJ5cmNaQVJO\nTFM5VFNKa0s2UmE1V0xRak5tMUh0SEkKLS0tIDRZZkJIR2FVN1hCanhMdXp3YzZi\nNlZiU3doa0J1ZFFYMWRZaW5BUERITTAK0YixYdgGEEn7Y7/F1fnd+fJvyVZwEz2X\n77ufkafOeNEYla9Rng/daDGpGEyA5715kZjbuHvHbck35umlmheAeA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISEZETUtYbjVEa2hWK2ow\ndHV6UjQ4enV6Z0phdUZFQlR4bmk5Mk5FZDFzCiszU0M0cU51RWMyTXpzamdrV0FE\nS2RNa0NXWmUrSW1xWUtxN2p0RjM1UFUKLS0tIGx4TlJ4YkpBTnd1aGpFUXBoQWV3\nTzRCT1RJR0FkQlpJb0ZuT0JvY0FnUkkKc0L2KR5H2mWVlGrUkVt2ffvzaYSHLVgl\n0ojHe9nFRp/sRtCpFFTQxUW+qmxIEWwyf/9rE96gRYQH+i4+0ZoJvg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:7NmTqngcvswZoLgRh26oLI3u9ucqRws7GNztUk28E6YgVU8zr7D5++s9yNaF7IfitDvqqGgr3UjORASQngLqazLgXYMShsVN982OPbDIPgNvjfyPPkSp5bZYLdsDxjSRnE1ATSMAab85J90W0AIdtWahsaxv1sg8HZRy9wzs1WQ=,iv:BkjbE/rkRH7LAP07TyIo4NmAMLPF1xuvMylCWx2LyuE=,tag:02NuCvNQmEa+fkiCB85VAw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/machines/alpheratz
@@ -0,0 +1 @@
+../../../../../../sops/machines/alpheratz
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:p0ZsT/rqNrfGNGMSnJguZ2V1hN3HLyH0LGze/2dONBeYCVRxfQV4S9gfQEhBVtaFvr8bD+sbKB3VvMZVLo2xmUE1F5HrBw0JWhgKEgd6775SzW/IQav0821QqNYeCa5Z,iv:3AH/4s7M/wbh92q766UqsdP58NVrAI9zgY64pDfl8ls=,tag:98+Z9fUZQgTqbjfEpn3qUw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMjhmbENHSEptZnBWclov\nS3dBMDcxVHFoa0cvOXRqTGZzMmptbkFNWWxjClUzdndmTzZpZlNhbDRHNmc3OGVQ\nSko1MWZtMHd0MFpwWllzb3hTS3V5Mk0KLS0tIEVUcTZyUXNVRzlwZC9wQ0QycXlJ\ncTl2MG9zMHdkcWdhamtLWmQ2Q2IvdTQKudtGoVCJDJOQYog8nRZ7raB+gr1XH6qH\nUKTHsH+UVCndroxEaSThbzKspkbQYrsPHPMOX+281WgKn96VB+RpIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17c9908f08w2w0ajprep4p60a7hd27cznrnxmq4mxwznvgzjuhymsxttd3d",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByQUJ0TjFJR0JiNGl3S2Z0\nOHkzN1lIVTZaMkc1WHY2Y0hvNlNTSFN3aXlFCk43cG0zYUpkMU9FcTYxU1AzY1pU\nRnVDcGhPTFJVMWRBVS9GNGxLVzZjY0UKLS0tIEg3cXdKN1BZOEgvMmlDUmRERWox\nK1VKY0g3QzdUWnFFVS9XS0w4bmVrV2cKbRfsZ+wihnViBg1RUoUtlBL2OndAwose\n4uJxcPqO/JJ+hCcfX+c2XALwxjzS1V/GYPq7XM7GrpXmOBG/Q7zuow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZyMTE0c1AzNEtxWVJW\nTFJpRGVMNXlSR2xmMGs3bkFUY2lVODh5QkZnCnpFQXpjM3gycVpsWmFiU2MvQ2dX\nL2licm54U0pleGNGWFk3Q2RnT0t0RjgKLS0tIEZPeENmRWdHd24yaFkrRWl2TGtR\nYVgxTXY3YU1XRmhrN0FnREJ1SW16MzQKk66+nCqGgz0itmqfsMUUzfpgtfko02ld\nX17DUcQPO3T8PkGZS640b1IKcA1/xF8Xtg07vZLsL0ZKKYiVTyMSTg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEgxYmF2TC9q\nRFR5K2dybks2RDVuelBPNE5lU1hlZERkK1k1ZWFBV1RNZ1UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpySDAwTld3bTNpaEpzWDRLVmlVSnQw\nZGlydWptc2FVbzEwYzlEN2U4aFo4Ci0tLSBlV0RkdGI4dEZNUU1abFpJcHpPY1JG\nTTAxRExJeTRQSHh4bElSTnlrOXpVCm3MXFpIwiJh03W4Hyyo8A3Vv7OOPcVY9r5s\nVHoWC3hjBcUWcByJAq8DFZLZ/9h+futtLpq4gLzJxCDNQQcSuLE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHB3Qk5Ndi9n\nc2Z5QVZqejhtMGFqbVIveENBYVo1Qzh2cWdyOVVoem4rSEkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkSjdhRGtuSmVDd1NmN3UzRmZDcjRO\nbXVUbG1ySVlXMmdVS05BVDBBMW40Ci0tLSBIV0lzczZ5NTBlYWtnRDNTZVoxU050\nMks5ZXozZk4xc0tKWm11WGdpb3dVCtNvBcH51672lDjnkt/xVjIemoTDOZ/VVS2i\nQUWwk6UbfD7PPUc1n4edg1M9zT4RoNTWVyMXqT7XqDumch7OtuA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYeUs3dkZ5\nNUNQNnE5a01WVXpCaFNJRWlMcWhaQXZpMjhWdmxBclZqVUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIZUF1V1JjaXl2SHRVTTNmSGVjTzcv\ncUxhNWdRWXFGRjh1bUFneDZweW9ZCi0tLSArOEMzSmdYNTYrUG9meFZBbEUyTWRY\nMnpwTi9JU2h4cXZUbERkbjhJZFA0CkRxPJ/Yzm57siZW7x8Z7fBrhRgycgrUoO8T\nv/BGUYJWA/z3u2LF1vJkBDj50pE9RpDi4ZSCcMvbw/QmxNnEG1k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYXFOSFZWWjR1bUUxMlF1\naTJpRHpuZmVuUlk5d2dyUTVsSzFZelYrdkFvCi9KOEYwUzJ3c05GUUFOUWZld3VD\nOXNhVFBzMG9Cejl6NzliaVNTVktDSzgKLS0tIHYwbGFORStvRDJscld5QU1nR1da\nOUc2TEt1M01KSzJFN3RXeXJIS3NCSjQKEMQRTzGkY6T2kuRvfhVtcRQ2jVt5zhiY\nDlp5NrwevxKO3UcNNR4Xi/WCUmWA33p6Kgj5QbZbVhQebR/zd8b9Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGaE45TXpBdzdUV0ExQ1Jm\ndGZCV215eWZ4anpmQW56RFhlUWR1M1BwNFVFCjhGZmMwb2RJTVk3TmJuazBuOTlJ\ncUFJQlRMTlB6WFJHL3IyM1ZOcVNGREkKLS0tIHp5RzZaV1lyMnRCMGhFNy9jbWxs\nc1JrK2JVUXVIeXVTOVpmdTVBbk1tRGMKxJslG5hP+EAyFv+twMoHZk3G8AXpAK4w\nQnKEultmweZ7XovxfUBEl4322YZX6CuTm8yHqzFDTGv1nuphPL8Twg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3FCWExKcFFlSnJVYkNs\neWgzaGZlR2YxZUVjYzV6KzJUb0VQRmtwS2t3CjVIME55Rm5GeEovQWJVMFliOXRY\nNUlGVlpFYm1rMFZJcU1pNVl6UVBLaTAKLS0tIEluRGU5WDlMbnA3d2s1WlpvcHdm\nMm55WnYzNFY0M25OcXVqekZDTGRScXcKS3F08d9+rt2xNPFsp+sPP6OWVNsVN0mG\npIr6m0MjxjEejHSUV8Oc7W78l5sRLKhjv+5MGU6Im0NV91lu15zpEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONjg4djZ3T2NtQWpTTmRP\na0V2a1V0eTZSSkd5MHFsOW1RZXJsVUVnSjNrCnlFUndqRFFKYmM2ZFRoUkJNT3R6\nUi9nTW1uMERwbmQ2elpDNDFtNlNyWmsKLS0tIE9sazlIaXVTK2dPc2NEVVA0WDFi\nbEpjYzZTU3J2VGltOVIrbnV0R0x1SEkKC9FEL5cWB2VN5Gg8xAW816e+yPWf6IbI\nIA0S6Q3MGCwVOf1IA2GL93aCIIdkZ82bINaUG+KQDddSyc34nqnw7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T05:54:40Z",
+		"mac": "ENC[AES256_GCM,data:Li3c59vl4x6tAH9JkZ4vdOH+vs7+x1Ih8YZ7lIjopeqVdtFqxQwEorZudLJ/Jas5Ax0WQjRB1Qr1PrxQP6XtghXvNPKiWK0TAHsT7gmMB4fsA10EI6zJUlT4aVg8TGTgl1SXvGU6u36XpVtCVu5QKUNmqcKKL6JXVuOf1kWIhV8=,iv:fEd5xXCqinDK7wamxIBxX0vHUZly+iiDg7mITBVdioY=,tag:bxwIgz3Yohijar0utcfWlA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/alpheratz/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hostname/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hostname/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hostname/secret
+++ b/vars/per-machine/b4l/tor_tor/hostname/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:kKuKG9d4/M1QbJFDG7lIqsLxv+UuHnjefOLIrwlJevDjZ9WXFF7t9wEdKI97ks0P9QjCYwCWLpl9KvnnWGG5,iv:NfDT4aRKT09OCGCkeqjM7nCpn4uvAmxjM+vrM3LjbzI=,tag:HA941KSFSWou+r83K3GlPg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V1Z6U1JYSDAvRUR0Q2Q3\nS3V0VHcySjJUSk1jUGlSeWp6MVNoSkJsSDBjCnAwMWFrU1hVY2FMQURQWnRyMnFI\ncGFDdjNqUVp4Um9hZzM2aE5OQ3A5YzQKLS0tIEtDUHhuQ3dQSmJ1Sm5qYVdvZlFD\ncDRrck8vOFYxdUJYdmxyZkVjMWNJN1EK5LMgNkrtbtGnB1/WCMnINutQxC4J6H8O\nyW8VXF7Vkoc1UJwWdgLIOILq2wgURgmlcjN6QRxqnZ5+SpEEpfmwSA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtYlJObzVFZDNnWFppQjRp\nMmpIdnh2UUk2aFA3RFJnbnNQemRYOXk0V0FJCnBVNytpdlgzNVBCOVBPcXovSjJD\nS3RwNk1Odkd5VUlDOC9mMms1akIxVEkKLS0tIFJjcW1yb1VOdmFzSWdiUkx2MjM5\nL0k1UmQ0NCtBd1dyci8wbFhzZzJhL0EKC3ccLIbdodeHtLuMr0rhlXn9xzv7vV0s\nu5jKgkLcJsQazR/tTOJsFa1YSW214b1xzkQ5UOjGGr3QKdKieoCmfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGtaQzlvMkFW\nRkdzeDhhWGlEVGpYeisyNUx1VWxPY3d0cXhtSjdqZm9hbm8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpWTUlEeTU3WEN3NlRxc3QwaTlpRmVn\nYkVQTVJnbW9IVFJOeXl3V1I3M2UwCi0tLSBJMnlKVlQ1eE91eFBFRDgrdUY5Vkl4\nRGM0bDNFYXMyM2Nya3RJUU9GTXljCj2ud36cyMXx5yg93iXZiESeaAd4kPdcTbgc\nCgv20gxASeuq2U61h/UMHJM8tEeQi/HT3tld+yGghtp/QPYNgZc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIENSNEpjc05V\nclEwTHNzTjBHeS92UnBYYng4Z2p2Zm9mb1M2V1l5VUdqMXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpIWXZ2aXJTNC83anczMU00NCsyUFJG\naWE1TTlxbDZuQnRsbFFQTnZ1eG5VCi0tLSBoc1hqcElEUFkwWVRrd1dIYzlIczBk\nNmM1OWhRLzV5Y1dXTHN5c2pJejJvCmrYj1VSjz+XIHz9sy+U1hIRkmdKt+/ylRRc\nXoCqIK16mArX1S1FMmV0Gk7zcUOJEVECVLjuCUOIVcRvT39ymlQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG16bGlsOXdP\nNHZZd0tweE5JM2lXTmE5TXRZMC83MjBFSmhmKzdHL1g2bkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxc3E0QWFvZHNHOTRWZnZ1TkI2ODgx\nZHdJRFRQYnQ5aHhMdktyLzRoZlM4Ci0tLSB2UWFad2hJNnY0MWs5NU5RREJqQXVs\nbTI5K0poRVIxSW9WOWEyMHI2TnVvCh9RV0ss7qxpVLlR0TKIgt9Cbf1u59Nx/j5m\nb8exNGAsf9Bw/VX9gidU0Ij4Aeu7b0XPtI+cvLsGoNyxmTf5SRY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoYjJRUmdaRVIwTXNjNCtS\nbDBRa21lb29rYjcwOHhxME5PQ2duSkxuN0Q4CjRQdFVQVHk0U0tibUp1MEJ4MUdS\nNVc3TnQ2ZkZpZXZVTmRUREpGTGZCNFkKLS0tIEJ3QzJKTlNGWnZqU2EvSWlma0Ja\neUk4dDR0cThISCtTbXZsTGF0VGdlQ0EK0lz1rjM0ygAg6QdusYHmi6Ehetou7GhI\nw/3hjerPobGZj32fy+EJ0LdcpILcx2lvvtOcDSap8/17Hbf6LKMi5g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNjBzeUJNZGRYd24xZkJv\nOGJuL2ZwZ0pibGFtNWMyQzJ5RVYwSXJtTEY0ClZHUFRXT2pwWGIzU0FWM2ozTVdO\nMGRmNU1POXd2cm80TkZPcFYzczZkakkKLS0tIGMzd0dNdjVqWnRQVjlLNzkrd0xE\nb1pxeU9uYm00WHhOSjlDRnRGT3RESHMKHLpP7DNaaidt5Tc/9za+Zq5UCIVMtefF\ncPqKLvOH5iF0qDErVY3zqoXlQxx5rssUhVXn/OXC2n1/ubSuQHx4RQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ2ZlN3VxL3Q0R1ZPdnAw\nV1F3YkwzeEZTYWhyeHVvbnFTUjZqWlBQM0hBCjVENlJ0aEZDRUI4bjBtNG1CNUJo\nOU5FcUlaMWMwcUdxazJ5aXFyUnNNOXcKLS0tIDU1ZzFtSzY4SlZreE5sekZjOFhO\nTk9XNW00MjlCMkw0UUlKU1AzeUY3MTAKGf+jwWUm35Fi2CBrH2r+hHgW1pwGPft5\nNoxxmNn1H28MHSLz6aK1x7J0+TA+Wv5wZPnNVG0vrXSt17NWOi1BXw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWWVoK2hEVHF2NERaL0w2\nMkErTHVUakdxenhTTEY1eWVrTFZUYmJ4RkZVCkZtNU9zWHc5YmVyRFlHRnVQWDkx\nanJHNmMzUUQwR3BUWXk2QkNZUEIvTU0KLS0tIFY1ODVSK1UxYlpSa0YrN2lidjAx\nQ0JBTGhaeUgzMFVKRFVJWWNxWm45MFUK2MQVFWgk7kaisGzxng0oG5CYOU6CX7jC\nfTMTgJ2ewEXdPa7b0Q/EcS6BvNDpz6jRB+Hr7mqqrnEQwt1YItIOFQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:wdtnhaoU/NMb1nqzjKX/uapwlbWZhbBrCO9VvYv5lYJrpkWRsFEMAT6XZzmkHoEBh5eZYO5fKth0tMyWkbptjcsPKnvFc8UmtFQ5lQ0u4asM/Fj9itLj6mtCqo34Uu7CzEhmfHKdThooZxNZ71qPGeu/uhiQFGBma6VLOz+AMQ4=,iv:BHju6UE77Wwz64njwQKCfouGXU5TtD+iCbCPDj3ng+g=,tag:MXM7dFiDSfvPUpDyqdWHzw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:lKIk24xi6Ob9mlU/L81PywvKd22juE/lyqv4mFA68MbEq6i/ktZHmnPfinfwmjjZEp0pJPYbqgfwT9rHr+a4msEW7XCSe/BKzllDpYezPmVOwOf2OB5Q0Q2O286EMfXg,iv:KmFaMllFeMvHz7ucNtPP6hd6rAqEsgOGskk1N3vylgg=,tag:DoqcW6UfJi4560GA+ZNBXw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUTdLa2hkVXVWZDVEN3RB\nMUhkb2k0QkdtZDdnYlhIelIrTmpGNG9NOXlNCmgvNEpLQXQzZ0swQnUyRkFOQUd3\nUXN1VGZvR0R5OWRIU2RiUWx4eGxPZ0EKLS0tIE1pejFaNUpLMk5JRFdvQ0FoWkZj\nYmtXMXNwMDZoZ3V4bEVXeXJKQk1NMmcKAiBg6+ZlQYl5gY4RKd3IQxSJc0HoRRoy\nm6SHYvutY4Pv6i9gEuyYXIHiUI5WNmqQjgcK8ZpNVB9kcSiCkDtHPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEd003N0FhZUtWSStPY3dE\nS1d2U1RkZTFPVitsM2wzblhybXBzUlJlbTBvCitsMGpVNDNYNktEbEN3dkx2a01m\nNU1GMkpicTJ4TkNQenhuYVNOTXdGbncKLS0tIEZYZnlPVlI5RnFMN2hFZHN5LzdW\nK0FCSXBqYkQ4cWN2cVJCdUloT1FoVFEKSDw5Bl8CTjQiyX5iEZP4ageyDWI/VYFJ\nPMFbGrGIo/Yjn1GUXy3U8WCUL0Pf0t51uryYzxlugXGN2xDas1zqPA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHRFaEcvVXU1\nZzVJRFl0ZWx1U3g1MENFem91NFEwaC91bjB2VW1KakdrQXMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpIeE5GSGNaQkM4cGRGMU1IZGZvWkR5\nOWdMSks3VEZXWTJhOElRdkpMNW5jCi0tLSBPcXQrUG1DNlhoZzdUdnRNRTZ6ekVh\nUHlCY2VVOVhXQ1ZFNllmM2I3UUJvCs3ids9ynH69xwiQMy5H8W+gqkE4ro8YugWY\nIx/BHKaceRCrrhBr94ut9J4sssmXc+IW8KR59cfqlQaIzv4bw0g=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG03MkxmSXhS\nWlk3eXlNMTlOT2hqaVRZd2grYTY1WElweVlWUDZmOFcwQVEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo3SlBVZzgzdkFsSjdBQ240czRVZStw\nM0taTUM3L0l3dUVwUXh4V3NlMUpRCi0tLSBJU0xzSDF1SW5BMkZGVURjTWptclA2\nTmFIdDFuYVFobTFRcjEybmYwUHpNClHm/GaJ3cJ6CD6qtRZeA+0IaZXQVIIl10gq\nXXky+9m4k9QqzJk0WNlQVTKESXEZmH7ZJpFozkkBl3pvsjcP76w=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDJLNWt2VEFl\ndkRHWVU5eHV2Nk16NHVTUWRZVjFKN0gxTzBwUWdnUDdCZ00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpxRGRKeGZzbDlhR1R0QjRxQ0Y2aDRU\nOUU4aGppdzZMMW5neXBpd2tKTnpzCi0tLSBpZG8yWnRLQzFUWXpBNGhVUTVEQ3JY\nZTEvYTErTmF3UkNIKy8zaE81MFFBCvNUXKxBem+mYQYPTwUaBfdcgbW2/ox7MHWu\nprO+wkgytG/dowwxYN8ojE0jTL5gEm82IhAcBefUozgUrr99hTw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcGZZcldCWHhnUktTdVVr\nbytSSFdCblRGOWdFZTNJNFNnSUlUMzFYTkNrCk1ZaDBtb2NwRkpPQ1MvQXYva3dz\nTFI5WHhpaDN5SlR6Y2Y3L1AycUVsaFUKLS0tIGkrM01ndVE2bnB1N0RsbTZqVWpX\nQUV3ZjRScURwRXZxN2p0YURJREloMjQKNXNSDKR2yHHd79VswrACRMAbjP7xhaBG\ns0QecfDGnvzehMTRgtxLZ1boN48ltBgiX2w2kattklKFC/DPZf9arA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNEp5NW5jSXhqUC8xNUdH\nYktoYVh4S1VuME5COWVXK0twdGVBYmxqSVhVCjNDdzNLMlFtTlNCR0JWSjVTMzcw\nUUg0TjZDcjA3eFhVa0luTGtiL0dUdFUKLS0tIDcwVUtSRnN0MUd3M3JDM1BBL1ZN\nQlR3L3FEbUlkcCtneHRIZFYxeUFqNGcKVwSlw/DkUct4N88zmsdkZdmfOZkcyX4t\nTJHTIzUQ8DfEiAImw+4gp7zGgIAniSRMS+gaCo5dNyUedkP8SKf7JQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNXUwOHlMSHdGRWxYM0VQ\nZ0YxR3dvYjJuNVFIRnpNQXptWDl4U2xPb21ZCnRheUZnU3hyeU04aE9wR1dQVVFw\nRVR6KzhaMDVuSHhGdHhUOUs3S3h3b1kKLS0tIGZDNzEyWjFBcjhueDJMKzVCQkNm\nWlpScjB0bWlnbENhcTNiNzMxaXNYdU0KyF3yxe0mepsFVJHW/pSMpHLkyF66M0Sl\nzm+biucmH+6aR4Pc+IvQ2PogEetx09hhCME7O2Okz5IZI43Xh40meg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN0xqdENLL2JCcE5NR25S\nMWtqWmR5b1RSdEdoV2hDMDYyaHk2ait2OTBFCmE3RHZPQ2RBZDB2anFaOWpCcFhB\nVWNLNjhaRzFPTm43VkpabHF4b1B3ZzgKLS0tIHcxV3BJU21vZTdYSldRNlRYaHVv\nVEhPZmE3SEFMTmN6ZTZFdm03ckN6ZGcK3OpuSsmD4EbUNOoQlz7oOfbKws4exwvD\nBDpMRp6XhYG9YXYoLuvuKu3Qq7YKrfv0ULaQD3iE5KpruEBlHpfR1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:23Z",
+		"mac": "ENC[AES256_GCM,data:Zd03+YZJUO+kBJv5pbOxaebKeppTU/+iqJn40LyP3N4vWlXQ/1uJGE48oonLMSwZ6LpWlmekl3hVWQIMvysHsFY8mGVb3Xb/UrKFm1IF9Qd8NynRfR1bu1TdIA7Ums1fXn47OT0zUWhFaxz0xHBRmavusrHmFIAlwq5YQUNCUMQ=,iv:aac6D8jlG+Ct15ht0nkPMO7UONXnRFga6542XfMAgiI=,tag:nKvNDfqmQJEco03EZcBz4A==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/b4l/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINr9XJnFULOdC7IBSGevI9ur/2vv3Q2BxFxsSFP0P2lq 
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/machines/mirach
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:JUFlcprJdQwxfLKafesyQEkI1Ip2bqqDn0ZauO+CvkA=,tag:oCBRLMnF2XvHGqOmMqh6YQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHNmw5RFgwTnhVN29OdWlH\ndTdSNndHVUZDdGVZMU8wWTRlbUhYVXhObFdvCmM0TlFuTUcrSTN5UEdQK3RkS3Zo\nV2ZOUlFFVk9OS3VnWUQwV2ZwS3VmUWMKLS0tIGQwWENjV2x1ZjdjaGMyQUQ5L2M0\neDN2Z1ZEaythbEpQN1p3OURHTFRFYUUKMAPK2+Yqrht8EzyWQ8+Ts8yUarHUFar8\n10Dlyfac4tkcMVwz3DP+o6xmlB99so3QyvwuRXk8gBZ/XZNU84WhHw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArMWgybXpVeEVuM1MyNUZQ\naERkUDNXNytVZmhKNTQ0bU9pdkVsSFZ0andFCmd4UkNJdVZiRklIRU9SM0VLVG5T\nS2grVXRDMEtwaXZlcWNDd2oxMXpqRDAKLS0tIHZuc0hXSjJvU2ZFNUNFZHM5SkZp\nSnUyYU9lS014Nk83Qm1uR1lDbWhZRlkKjMV9jD/SkizJmpK0qf2YQTKN/YeB+KDL\nm0Zc6sfkag0JDn1tUOMznPJly2gU2rYikmkx0C4L1YsMbPAh6UhbXA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Z3oweDIrTnhiZFBCUk1O\nSmxSU0ZEK3QwSEVDMDJWOExVblhTZHBDWEJVCllpTnQrTnJRUkgwYnAwWFdubGdU\ndnRISWRlUmNLNWZRdG9KZWQyZzhwZDQKLS0tIFlDMlVFUTkxak0rRXFLVHhoMTVW\na09iMWVmakN6T05QVWw1N2FPTmkxSG8KsxQm1xLlGEsRwFMiefTDMPyG5B2gnrox\n2tLE73kECtQY+qJANqs2G3ngTWE0xEHVx3SdUJzEgCWlHyu6m+FdOA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEtwQTQzck5w\nRitXM294eE1mV3NzZDE3cmZiWmNsTXJzbHBjL3NUeDYvSGcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpaK2o3T2tCWlIyYWVaNW9ZWVo0ekJH\nbTkvM2xLZlh4RlY1NGpJWVRTWW9VCi0tLSB6bUVwM2FEeHNneEFIc1ZyaTNhNGY0\nV2M4NzNsOW9wamkyQ2FCRU9pT3lrCmNDW1RDQo4f+vk5A10vBYGr7gbydIjmQn5M\n/Wll7muj/M87zR3odNriyVyZzenYrdALA++MvDkaK7YGclZP1oQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNuNlJWdmJD\nb0xEV3FjM016Uk9kTGFiRGJ0VFc2Y3gzS0hmcUp6dkN2U1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxRDlIVTVQZUFtQ0hkWDR4THozU1BC\na0pXV1hBUXdvUjZGbHg2RSttT1lrCi0tLSAyVU80TkFLc2xWSTBpbmpUcCs3RUN1\ndEhkZU9vWkVkeXJ6RUg3ZnNrRzdzCjpFoMGrFDs7bVaIq8E1kVBH0N48OxDABl0A\nTmshJL2qwLCeXNugDi/oO61QGCNO/o10sFgcgNXQNsSCm911lL0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZUdzh0d21j\nQUYzUDQvRDdyN0UvbkFsN3pJdFZ5L2pUdHpWeGlJN0kxVzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpmTDVsL1F2M2xCK2d5S1ZiazlTOFpu\nUkhUTWZtK0xRbnNUMUx1SDA4RVVJCi0tLSBFU1JEOGN3TDQ4MzZzN2E5NWgrcHV3\nNVNqNkkwSUlhVUV0Mktub1F1Tys4CjC/TOqQB1EvWO2rdPW5US5Ak4hG85oZTFED\ngxtwHAoRIxMPE5PXr1Pj/oNmngEbPTs8TTTTD3PmBSSIaerIloQ=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuR3JBcERiVk8vUDJDYVBs\nTnlHV2YwNGRoRGZlM29vRmNvRmVJWWg0ODFnClVqRERBQktzeW54amhGRXd1akpa\nVTlQVjlsb2Y4UTFBeEVyNDFMVStCNHcKLS0tIEFPYlFjVWIxZTFVbVBIWW1FSXZD\nVEwvVklMaHBvUytsckFvQUtYRUM3MVUKtKGU43ncgbXerhQxP5tkWnOYyKzg77Pt\n7nNInAzuIdF4rvI/JsNwSmfrQhRblw7bnQfRNYkygU/1ZvW0y0LCNA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbFVYaTZRRHFYd3oyZmR2\nZkFrNDRnU2dmSTY1d01zajNlU0J4QUo5OG5ZClFwRnZmZjEzaGtPT3NlaWVhUXBN\nMVhkWmtobmtJZnNhM2RTZnpuUVYvMmcKLS0tIHZRQjR4NWRncENkQVY0SFlBczMr\nWXNyOW4wT3RUSlpuTEtNd0lzc3JDejgKjDZOtvw/FQa2JnHRzsUKKpgyusgJeSBw\nYrgAIk6ZTohmin5KQ8VnP3PeW5tYrwnRXi35B9MZK7ZF8fdmfyosKQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNG9sU3RrdSttbVRjUWlH\nQk9yVFZBR0NLSzMzbXk2UFRPeVRhMi9RT1VRCk5XMzNIK1ZreWxpeTlsVDdFeDdz\nam1MYUsxdFErSFd3L2tVN0FjcDYrQlEKLS0tIFdOWXFQbTROMDhocmFwNE1GemRX\nb0ZIQk1qbnZHTU13UXpKdHVyZS9pdU0K6Tn5ym8S8j8n1crIdMkLgNZ11KXwvnGU\nG0TUDFtZLqYdPXNK2S8sWlj4a+HouURGeDn8N7aEaRYgbZUTGb6eCg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaksyUms3V3Rwdis4aHBF\nb1FWYmJXWGExS3F1a3pKaHlWekdvODM0R1hVCnFkeEtNblY0TForbHFDS2VXTjRr\nenA5QldNUktKSUUwMnR2MU9seEZ6UUkKLS0tIG9jZEpyUW5oY29FS3FLL0ZCNHJY\ncDF4VFFjcXJiZldQdWZDU1p2b3hGYVEKALolFV3mhOLaIRKEgXpVSnFt3VbUqnRx\nrfyHdfGcsXniFQZilQ2j5wJzbiXKHA7RrLqnj3w9besnKuCzMPBPpA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:44Z",
+		"mac": "ENC[AES256_GCM,data:sO2QgBHa746L+6KdHJ2IHCRnZKShzzDD2VKwdEaqfEAQMPuyINzHuahFoGjwJ7fqIA2FLChooN8Y5SgOwS7GWtVPHHBkX1nHFDV4XX+JCLfsrnMEtdLsQsBQd/+Xz74tZEwvAKEhmlyROF22As2dW6T4ql0xxpnmzyQwO3KNHTM=,iv:ZQcdUvmaSC900tMsZi7iqHxGWMFZboqHUkvjzeUDB7g=,tag:N3YGceZDKvMNz3tHICznow==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/mirach/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/root-password/password-hash/groups/admins
+++ b/vars/per-machine/mirach/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/root-password/password-hash/machines/mirach
+++ b/vars/per-machine/mirach/root-password/password-hash/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/root-password/password-hash/secret
+++ b/vars/per-machine/mirach/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:ko/j2orojdCHYSQs+yPjlIBL7LOLQuUjm7qlAGnyzT/6ZpHNxqcPmG8BVeX7/7buoWjQ08VA7YujDeK79cbnbPUf1OxbHpi0K/k1hYTeBvfg4adXvP2jXM+G5V5qgcMkrCGRu+0n+hBuVw==,iv:+AkcjsIqugogoPLIG/F1zeC+LyOFyNOvj0XAnCnr9qM=,tag:Rute9zpYbAoMbSoCAjlu4w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqVWhSajZGUG9JQStBbk4v\nR3NvSC85UE9KVVlBbkMrN3Yxb3EwQmpDeW53CkhYMEFwN0kwNUFDWmMweGl5eEJJ\nOG41VEEwT2FVVDBHbXdYcmxWd1hsNWsKLS0tIHN3K3M3VmUrcHdGdElON212U0FX\nUE1ZdU5uNW02RzRKdXIxVURtNW1xL3cKITSc8H0Pp46oyKyroAy8iZOCqpWbao9U\nLEAsSl/1coiuoZ0+0Gwu95CKkQ0DbfHyA/+VzTOhYV6PfQXFXw9mjg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNXhiWmlIVzZzWnpidS83\nSk4zVERpTVVKSnRjdnZCU3kxYk1DQllvZGxNCjVIbzRwYUtYalhHUWJXTTA0b0hn\nVHlJVzAwc2h6VTJXWUFQWFYvU0tGYUUKLS0tIGM0NExZSXFmRE1xTktaMGpRVFFH\nUll3MmltNGpGeHVhcnB5L2dnTmVnLzQKZb54Mj83Ssy95m1Yae2cay7MUkv0uO8j\n4e+h+Cq+2xBGqSc7T3cJXX/JfXYYOhUTvl5YB+JD8Q5H5Xi4Hm6krw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQK2s4QWpNSjIxa3RHeG9D\ndktQUkVVeWVEdWNmVEhEWHExVlNweGxIa25FClBxbmZTNjNqeTlFV3ZXUDFOTHIx\nbzNMZmVlQ3dQTW1kVjNDMHVTdWt4NmcKLS0tIGIxNGoyNWtzUThsYVo1UThQekVu\nbUx6MHZkMnB3Yi9pNGNkU3dnekpBMW8KRchUrgbqcRIQKRWYYgAHaHUe43yMPaxX\nfAFqce2Qi010BpcYKp9HTcDGx85w/ZUjnCKUom8y3uOu4stfOx11LA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhsb0YvV1l1\nRW9sQ2NYcUU5bW5kRVV5b3VNMGhwcGZKamczNmJiWnZRWDAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJY0lrQmtXMENCa3RBbFVwQUNHeVp2\nVEExVkR4TmtWV3NibGR1TGJPNWxBCi0tLSA1d1QrMGdHUHYyUk5VeHlFZTlza29q\ndjI1OFJsMXQ3aUpkQkR5cTFDUCs4CnI5NKxj8/NQYwH1uk4TYqzeSZwE9Hoq/RD+\nuNokUefot49C8ne5xbHKngDW0RMiDtUjQ0f1SGxBTbOPf85IO9o=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIElqY29iaGpO\nZkZvSHdMdFVSMjRkRksrdmtWN2RrOWJWTFhSR0JHeWtnUU0gQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWTmVyWmFrbklYUGlxN0NjNTlUUXlu\najBlSU5tVVRzSkE0SXJLbmNoZTQwCi0tLSBCU00rTXdSOG9YcXNNOWx3Tit2a3pF\ndGxoNnRJVHhUUXh2Z096YmhZdW1RCgCxFT5bsM6Mr/RA0nuvrkEJ7gLEf3Eo+TqD\nX5IX2EWYtYN+hwCrppnLS7LQFM1V1XuyIldXQsTMAbs4yCiVmIA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZNOFVCYXcv\nUUZKREZjeVpFZWpWVEhDQktlTTRaaUtrTUFNN1BzUHNHU3MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpGNkJTdWo1Qi8yeit1akNLM0pYUllM\nYTFKWmxzWlI1eXNnVHpVWmFreWFjCi0tLSBBNlBYSHFSbFM5c3NTbFdFT0VrQ0c5\nczJweXRuYVdlSDZNSXpvY29WSm9VCr3wU+v3vu5TfTkNXu2k/WZ5WwO9Yb53WDP3\nYc1ScxI2UC4GA0USy6uxSSGKJCC2OUv6gKnRtipJM9BC+VO1iBw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMU8wamJLU2FpeEVmbWFu\nNXpNNFJrb1VBNWZIckZ4bzFBMXZRenoweERFCmo3VDduaXlXUXIyMitlMnl6dzhs\nNXN4SWxNbG5vSXZhZVVOZElOZGFCNkUKLS0tIHVMbHlCQS96Ti9sTVlYRUNyai9r\nd1loVURZY24va2l2UXRESmt1KzBOMnMK3VnvlyO6FS3krsSx8NOI21W2syP4CoeV\nQhb2h7dMBhVDUb1RE0elxqsqgH8H7NR8i7Y/R5phP8kkh2qYnxwxaQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvOUtZWlFjdklJVTE2ZUpS\naXd0eW9mRHpvMk45blh3ek9qa1A1VFBCZUNZCm4vdlg2emtWMzNSVnY2NmQxUE9H\nUkZxZUhyWjJ4Njhyb09oM3M4ellRUncKLS0tIHVmSTQrSTRGdG5nbGl1RE05cDdU\nR0RycXplNmU0VDhzVmRCVzY3UDYxWmsK8bRtj64VV81bX8LoUIZyN7+AblGEt/9R\nmJuwJ/kcPQcTdSe1Xd9TaYuYDHCGBGuKptpSYbufoJVdOzct77gOEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVUM1V0VqbEluRTh3UXgy\nVStZb2lRaUkzK2VnaEtDMklvR1hHTGtxRkNJCjdOS0hscXROOUl0ZXdWR3NOU2Vv\nMGE0Q0p0U0hEY0lNLzlPL1R6alYvdjQKLS0tIGFYQ1orYWluT3RHZ1RZaHdVYStK\nWk50M3dYWHp2bkVtM3p2RXdkeEI5V2MKeRB/Kas5TdyQDa50Kfv0MuRbyETyI4iH\n0TcJPx5nJdNo93b5g543yQ0FT8PRCNe5SqpPZkq03aJOu0SaiZpUWQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2M254RTU3S3lEdGpTd0tB\nTmcvbExVQjdKVXhObjFwRXNsZ0tlQnBkK0E4CkgyZm1qY2RDNXdCVER3RDZjSXUw\ndkRqQldrOWJkZHh5MEl4OWFYczY3TGMKLS0tIFB5Tm1rNkc4WldCUnZ1UkF4clZN\neFM3ZXJiMy9NRGd6Uk1WNFlmTm1YRlkKc4zc2SGHMgL6dxfpfuWZe5xVDuZzBstJ\nccuKUENLMCfe3ItSFKhDQQrDLQ++tQzxiRN9qAgE8TGM98tmfEvYsA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:45Z",
+		"mac": "ENC[AES256_GCM,data:HfJIAtX1Yk9beI83QbdFDN2P4am7hLnwNlLA8H9PUj8ADPrhk7QqZU6p9pive28hBTWjzKTs/MOnagkbJeCbOBcorVgKRN86ny2NbJThIpNSentUSz3GK+Lwhte7A27E/9kP+WlheMP2TBp8+lkrBE9VRM7jVVXlUBK0rJzuanc=,iv:NvoY7NIWGsyNs1xeXbjW4m//yag8CUYQAlWFQlbOvZ8=,tag:gzfLnoA1ybDeJF5TXihDGw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/mirach/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/root-password/password/groups/admins
+++ b/vars/per-machine/mirach/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/root-password/password/secret
+++ b/vars/per-machine/mirach/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:H8rDXLzzgsPDw2UsxwjH9/P+zFQjFh/rweHJYg+hQ6yeVXR2PDDW9DBr4yI=,iv:gYuj1msylZhA4W2F59qD4eR9QdpJzUneuEr0CUmNJ90=,tag:fr9vs4TZ9dh6pCrZS/njUA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUWY2SGwxUkQ4N2hvWFVM\nMTd0REVVZG9GaFpiUXQxaTlHdnZ1T1czcFJjCnhQMW4wcGFxS3d6U3Eyemc0dFJv\nazl5bFJrV1Y1T2VVSURwRThGTWI5MVkKLS0tIG04enhmZmZhWnZPaFBuK1I5Mitl\nVmprRlBtL2FqSDFzYk9waGxqeTB4SHMKzNbdtm9hHvfBFu8UjORXUWTQ2gHUsXe6\nq9XM9pEZ7vdPlQpIANrk1/im/OykmeaPQcXxMrmu32jgoRyvSzhmPw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArUTVYbHNrT2pXVHBFc09m\nQUtjNENJMm9GRHZSZGRPWWsyODlRbTVLSWs0CnZLcjZzUkF4aTFxZGtNejRiT2Qx\nRWNRVS9qL1FzU0IvTGNrUmcwa25yakEKLS0tIDFDMUlUckQxSHdDd3F1RlphZ3JQ\ndEt1T1JyUzJ5dENUSmorbWk0SVpqKzAKrcZf9jXVTPKUbYCsSMajNpm9UlY9Q7nh\ncr/3MGclh4jzqpAVawvBjCom12R+xZ2Nm4ig0n7FI+GFKZAEnNVv7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFWNDJWTTMw\nSnRGTFQzSGJ6QitzZGYybWp6K1pDVk5JNlU0SXJrZ0tUM3cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpROTFRTk5YL3hjbVlyZ3VUYmRrWDFh\nbVhuRW9HVkUra2x6Mi93cnRPSEdNCi0tLSBrZWF0TFFzQWJvcU5VYitONHZPTHM2\nd1hJblJHQnB6Qk90dGpEeFhiZmhFCqg+ECzt4NP/H+xj6ESY/4dp7IH/3Khjd13n\n7vOZXGvZ18/XesWYQq5Rcs75ZTjaHdvF6K2mfC3OK512Lf1EcSA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9MTFpnOFJX\nZFJ0Q0dEZzFaNFBnMGptazZHd0UwK2piVVlXNGhDeDBoREkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpVdDcrTkdxbUpFWWI2OUJ2Zi9aQ1lB\nd050RVlNM1NFMHNscnBySUwvaDBVCi0tLSBDbDBDRmphQ0w2Vm9NdWZNTzdKczIz\nbkpyZzJCNkhhQmp4RW5XamdDVi8wCn4u7e/+Pcd+DCvgsbgYCUeXOT8a38ed9V4j\nsinBeCAONj+DWj8nf5ZHq4BD1E+AggLUVRsuoMgGmw8heCU7Ke8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1UQlhja3RM\ndWVmZjFLUFdOL0lKZkN2RkRGaHRFbmhESDZtcXJxcXNUeTQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpURWc4Z2lLVUZKLzR4YU5WbjNFNmhS\nNUVNbEhrZndvdGxFSERYZm5YbXdnCi0tLSBUUmtqQTFEZStrR0Ivd1k0LzAvVk1v\nT2pwK3ZRMVZWd2UzQ3pTL3VaK0xvCiwyC3g+z18urJf5uzPEGgeG/MZZy60KN5NA\nmdiLW38DbiQe+iHOnogn3AjvcgJx6qKXt0KpSyMk+xFGJwVYChs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGF5dHhLYmNpem9sc1lQ\nUGliQnlLeEFOWG05Vk5wK0RzN280MGxOUWdjClN2dlo3UTBCVHVtQUd1NEpjdWNW\nUXpiUGkzVVpuS3Y1Z0hkbzlOcEhQancKLS0tIEVUZG5Yd0t3ZlB4SC9XT1JyVHBv\nNW9JeVJZTThRQTNLQ3BCdUJBU29IaDQKfmw8KDkZgT9rDM9OfDy1epiNCQPWa6tR\nM3s2vi1ivbzuXw1Tzv4ldlefRnZRpMac00ID32xO1qhF72DFqyJDBg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBla0VXcGR0ZGtqajJwcVRa\ncTZka2xqcmJla25FSFJjMGpxd0NRTGpaakRFClhhcVRoSjdzb2FIdzFnSzlrK1Zw\nbTZka2pmRkdYYytZVVMrMDlNMXNUMW8KLS0tIGp4eTh6N05jdkZiWEFrYi83SHBo\nZCtROEJqWmlraEVGSUI2cDZaUnZYVnMKKBmTDT6tf1Tpe2Xg3PnQGGUmk0NfKcPf\na1XDQEIj5jdAnoZI79x5PuIDUX5aHbNjS59F3n7nAHY2lv6eYRYlKg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVGRuNkZnSjJiZWRKMjR5\nWUs1bktjeXk1ZGxzU1E3ejFmOUIrck1mU2xzCmhKMVhtdFhaWVhGNzhad2MyYkNj\nb0t0NEx3MGhTYnNKeFJIUzlObDhvcDQKLS0tIGF2aURjWm4rVzNENnYzRkM2WnVX\naWkxcDhQVTROMGtiSkV6SENZSnFheGsKBKMZCvSd9sDm5J+lPzJZ9yqnJACXSV5R\ngcjyLp70mZDpkygg/gxrcXuE+ydq6D7p4m9vdxYjY/EMEWR+CtVuEA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFbmcyQXE4REhkTDUvVyto\nM1o3SDVyNWdMNWxJWFlvMG1IaTBUWkdBeHlzCjBkUlZIdGN1NkFESGFVWUtwODVv\nYWJPZ1ZhT0NkcVg0VzdNaytSMCsyZ2sKLS0tIHF6YytkK3hmSC9SVXQ2OFkrUGk1\nUGZWMzBudnZJN1NDUkRrSTJac0hxbzQKDKK97X8AfvNwlGbYuzd4YG4wux5t4KhH\ntz8FIZVqNih2iVDQWZ/pCIDMepN2Vch1uOYvTcNDe1aFM+/dtN6UJQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:45Z",
+		"mac": "ENC[AES256_GCM,data:XPFSj7cP09ig/5kxn3BZ7Eq8Y/brpzsKu/VpcRZMPADr8wfJTyvQp/iY1QSBRS6X0uNlnr3B+C83uwkRrzRWCzKRqcG3GmhJXcILC9ZhMyn0Nz8+SNF1GVGUWPjcGzx+6R1WO0VzC6S6kq5NDVyBvLrsQu+lJU/Q/cm7/4uCtmA=,iv:Z1En8UYbhiDJwLeRisCLtqigrs5ACa1bb1EFiggdp10=,tag:l90EWqUvz0OacHBx0Nx+Sw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/root-password/password/users/kurogeek
+++ b/vars/per-machine/mirach/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/state-version/version/value
+++ b/vars/per-machine/mirach/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/mirach/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/mirach/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/tor_tor/hostname/machines/mirach
+++ b/vars/per-machine/mirach/tor_tor/hostname/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/tor_tor/hostname/secret
+++ b/vars/per-machine/mirach/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:UL9j4CbvLu0314Lm7w9mqkQG8esmHVxC8jBPGGu56aP3dgUDe6WJutcjbK8TaL9ew3kZfJXc4qu6et/RdmmK,iv:e8Hzvfd9zKNAsWEd0NhQ6roAPVz4k4XhtPlFwIcBHHU=,tag:g2BKSs+ocv2FI9iKan7UzA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVK2tMNklkTFFoOXkvRXFa\nMEJUcEVObzh1dlFHQ0Exb0xNaXY1S1pvbkc4CnRYMm0xVUpWeFN0dlM1SHZCZkxI\nR1NwRjdmYmIwTHp4RXRXcWFnZjBaVGcKLS0tIEZsNkoxZ1lucWJKNTZKTXNDbEI5\nK0E1VHlmakdDdHR6OVJZYzdLYXB2dmMKs7CUnfKLsYaW5eQ3O4ZAkmKqLine0hXf\nZDuy+f8tGLcq7WaknhObzxUxdhXSkeEpBr4eiRV95iV9p55hU97cwA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFeVFpRGZrbzFlUU9YVHVo\nUFRNVGRSTXpHTmFqclhXeERLTUhFY281OWcwCm5NeENJUGw5Rkora3psMzNwb2wr\nQldoa1NpbkdzOFk0Ry81d3hBbHN3S3MKLS0tIEpUVzM3VzFsbk9LK0R6eCtUVzQ3\nUVc0YWxqZ0pFM1FNU1BDMWVva0lDS2cKC/daU7V3uRdjAqsV5KKFm1jDhq8z5a07\nFySJWf7+D7joimFPruC6uOHyOaHQLtYLb11vEv1/4f5pgBOo6ytvVQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSeEdnclVvVmRCayt3WlND\ncFVNSTNobGp1RFp2cmQ3VWpPNC9QdFFJUjFVCjQ3UVFLWmRiS1B2ZVMzZDdOdWZ0\naGVzTUhWeVdnZ2RIYUJwZG9uV0tLcE0KLS0tIHpnUUN2UFVyYWtBRGszb3UrUE5x\nRWVaMEIzaG94VWZOL2FsNHMvVStvOEEKK3uYGbnBkg1WpoqtbX1nJLHdNR6mqi0r\nk8lm2hEAz+YcbNFhYQiB1H63FH1/igG8emdbk6+tQbQmO2bnZ18+xQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEtjNmdsMWJy\nUExJdUVWakczcTZxcHRPVldMaEs4ekpBUHhubHNYMkNyam8gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpsREgyVDFtTktCVUp5VDU2UDdYWWRC\nNmFKUVJNWE9rMHRqQ3RYelVWeTg4Ci0tLSBmaWgxRGowZndVTGJWS1liSkkwTDZm\naEVwTmMrZ2FMa1J6Z284MzMrL2d3Cnxwfl5qvevMAJkEPxGW39KyYndD04WjnCsM\nTAwjbritIy7aixUU2kZzuAreb0uagrq7m8x85hUSWhqa0VYTndc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZidzZ1dVR5\nSjRSNFd0R3ZCQllHUkpjVEFCQXl3dms0TlBMbVMvSWVrVXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpGME1oRlNtN0psRHJ5WkE4UFJ6RHBS\nNzk4a3g2cnJweVRMMzAyUXFhTi93Ci0tLSBoS3pQNzlhcDNmSTZTVjJGTlE3cFZ5\ndlZTWnp1TjZEcFlITVlaRzRyaHdBCj3QZF1Xm4jspX5JBaUogFsmFLxZJzhIFcT9\nhbAuL+aXY3e+dNWT3VF58oXIWfDxM7oJaC+adkx+zj8kjKx1Mng=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEVjOGNsOVUz\nb0JUa3k4MWZqNFhqZzYrMmxnNk0xdjdvbGMxa0JwL2JXRDQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpGZzJIQU1iQmVNNjNhUGwwS21iOHk0\nSTdBUXFLa2tDYzJac1dVZHM3Y1FVCi0tLSAxTlpnckV5eUVvWUlKRmJZV1AwSzN0\ndTlOMWdNOU1UUGtPSllhbXB0TEhFCvsE5yuUT/qIUr78qVIpt5IPm4SX7uHpck9x\nws0eoxjJ3bURFANmanN8cuBtuaKEuqto7yAySrIeanELrRo4DJc=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Tk1YV2ZMbFB5cHRyNzFp\nRWxTd2owOElLb2xSVEpuTmJ3anhScTA0cW5BCi95c05QZ0VNMm9MMW80MExiVTVE\ncDZ0eXErbVlTQ1YzLzczYUJWUS9jdzQKLS0tIHh3MVhHcU92QzRIKzNiWVg2Z3VS\nNEllRDAzSXRxSDJZWnM4ckNVbmk4LzAKTP5VnkCMuFkfr68V/B5gPg79699eZDIW\nCLJToQMfVR45gsybedrkNrUDhMNLTOivh7BLedhzjbNKuikKaE0Mmw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHMlVtTDdHZ3BCU3lhVWla\nenA0OHd3NHB3NUEwam5FWnNaQTAxbFpSVFh3CnZsUi9yTGFUS3RVZCtTdlVYN3k1\nblJ6Ry92Y2o0cDA0dStBZW5TYW96aFEKLS0tIGl6dW5aQXF6emNXbWdsNFE1UWdU\nd3pBL2tERXBsNDVYMDMzR29LQ2gxRncKgvkZex1nb+jdanG9HIo8DUphFuL72gFf\nltF5JQRAO3vpY5Lgv1TQeWxXM7BOnh2NeTDMtG6Sn6s37YVhu+89TQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvU21ER1l2citxc3IwU0xu\nODBvWTZoT3NYVnk5NjIyT2Znb2NSZWxJTTJRCitpdFpaY2NZR29PMGpDOUZGTVZm\nb1NnUWo0M0wvSkFZTWYralBoWERkRUUKLS0tIHgzdzBMenl0RVJyQnZmcDhIcFZ2\nS25jbHRORmdpaHpLa1BmalZnVmJTUjgKSegD05syKu3nxzxr4HRkXzXe7fVYX1TI\nkc/cHaY1p+1D4qE1cf7nHwKrLpioQC8bzjHpDMaxdW4N70KMjilC5w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPdGtHN2JBM1VoZUs1eU9r\nRWMzR0NQY0pycTBYV3NuS1pNLzNhSWFtSVN3CjR3bCtuWmVoTDdFcEoyWEliQ0dX\nTWRGZGRNYXQ4Wms1dnAzOWNaYmpVSDgKLS0tIFphSDZnZW1hQk00KzVOZlBpeDcz\nNTI0d29hUllFZDlBb1NVV3hBbEdubEUKXl6L5M8K6QoPo2tR/goKFzW5dCx1hUvM\nzG+IHodGqql2SSjUXnWfWfADhgOCJANKqkXpYgs2Cfi1VGR0fF6xrA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:47Z",
+		"mac": "ENC[AES256_GCM,data:h8r1tC9LcVdzrK6I6U0y1G02yhRXMhiPTdCjwy58IbSJ6rR9jarHzsi5fpiU88ahp6aGtT6A91j2XiVE3uXljRadbntxFQmWiXrwFIAGF/ii6D5OTUebl66hEIhzdr/+ijASdN1WmXMC9o5X4IR3Be3xntiJnyBy1mhkjwgrd2s=,iv:XIgPzS1JjC29snzVbKq3cYBqHlzbNW0Z+VDO7Rx7IMo=,tag:drQ/HrVtIm6mvGBGBC07kg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/mirach/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/machines/mirach
+++ b/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/machines/mirach
@@ -0,0 +1 @@
+../../../../../../sops/machines/mirach
--- a/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:wxJpXGPTU5p9+GcVSjbFlGFl6vD5HKQF/WwO8qhlsBhXYbDCj/RA/mSqJE4gBAtTSsCIKUyXmbV+EY08EJ4Vot+93CirQ7/JpWnzGpro2WWU9Y/lfkVKjJMukcqiLp7I,iv:PyeMnSyC/SgF+5SHhXNDFEA36VtY0O3VPKUfENkmDS4=,tag:LP5sHISSxQuF+bI7rjE+Ug==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2aEtlL2lVWUdaaTMvQ1RW\nS3lvYlMweUF6Z0RnekVaM1NQaWZnVHdOZTM0Ck5kQmtaYkVXYVhnczBVeXFXQ09h\nTmdubm1salpjVTNIa1BtcXpPdkpiblEKLS0tIDk2dEZLc01ib1JZNUt0V0xiVHJy\neGtEQ2V6TkRsN2FzcUlxM0Z0S0l4NjgKSQ3Fz0/SyM1LjJMwMsC/EqOaIzh25sKX\nLd5LqWSzmT39viOOsaYVdI8OTKDA5K396+ahkNzdngnpm/1T6E74iA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age15k6cz0lj207608gdlgxq6l2n5zsflvg0lw8qqlvkyk0xddc4kqvq9nh6ex",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIWnhFM0RxOGpWb1RZSDZR\nODA0NnpRRmhkbkk3V29kVGJlR3pGOHgwWng0CkxDa1dnYVIrTFVvUVkrR3l4R294\ndUR0ZktQSzBwYXNnd01UcWh3aEtzNm8KLS0tIDRuWVFldTRsd1FNUmg0c2kvYjdK\nK29CcGhheEE4MThBQitqRGlNT1BHVzAK/jlzUcUyPZE2qMcILLOkzAafh5JZfA/z\nfK8bYYLfZTRpEcxRuYB+flgXA/ATZKBQGL/08JrY98mNY3/WHT5gMw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzMnBRWW9zZ1l4STMwaElF\nelM2QVYrUGpEM2VWYWtwK0tScGxJNUxJTDJvCllRZDNqd0loSHlycGkvbVJtcDgx\nVWNrRU9XZC83Y2pocHRuVFpPKzM4ek0KLS0tIGROa29ZbUpvNkZERGsvd0VSaFlK\nRXN4VTUyYW5UTGhsWUVUbzVIM1VLMXMKk9eI0WUK+gWP6wY/b/Dli3bgM2j/lG6D\ntACOvIWpV2Qy0FKMntUd9qhDbkJH0ibyZpniLMVyn91+CvmFfoSyDA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGJuYXoxWmNn\nZm13NHJHeTlwQmZPU3VQZURrS0tFeUowV1hKTHArbjFtZ0UgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpPUEFrT0lnVCtvL0N3aHNHcEE5NTJi\nVC8rU1ArNnBPaTFMeiszdEJqaXVvCi0tLSAyRk94b1hWNyt3WFBES3BVeE1ub3Jn\nQ0pZbEFBbFEwNGRiRTNkeE4vR1M0Cmt8Of/xUx21XjR6ERj0JWcjiRNA8jis+hTx\nC1IU6k1K2OVrEsPAZ8VnUwMCV1LgJ1bnYxwjZPFadTrVZyjTRUM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9lMDZXMGZv\nZSt5blZyTEI5TDVrSjR6THBTN280VlRvUXJZSFU0K09pQWMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpKNDlGek0rVjdlNng0WXM3Z2poYXp2\nSGE4Q2kramFlRnhnVWN6cldpNWlnCi0tLSArUjc4WU5GbGlFN1ZoaVRtSHFtRWw2\nTFVacEpCN1Z2YUFqczVEUU1LeFNjCgx4VeMK7ZHwcXV2wwzm9p+yyOhIpXtSh+R/\nyqiVdx3YU3HGj3u+ccCGW5GSwxsDgS0Vv5phE/ISvWe69FYQiaU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEJ3MWRrNW9q\nZTVPVHdPQVRIRHFzTXcyZDhPOEc2OStXcWp5VnIxVkJDajQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp0TnpxMDFqV09Bd2FTS0E1aks3bGxy\nYXA3VmZzVmtOeHBkb3NWZmg4dDVVCi0tLSBBTkJkTWIxNjJHNm1IcVdMalJvSmlr\ncERlRDRCc0JrdmV0bW41cjFMS3RZCtkKkTArCS8tNq7n/eduwvElw6MmAYulz1ug\nKzYd+e7HxZwdKIzemU8DmZJhfF6q1K7n5RNE4BFfKNqE9PiHIi0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRDVuaDZmbzlvTkcxVkZx\ndjJaV0pSWW56TWNqV2loOUxBb2x0d1FoSWpRClFLKzBxcmJ3Z3cyL3E3T2dzSzFO\nZ3ErUG5PYXJWbG1pcTF3N01zS2JvWG8KLS0tIDZRaWpQZ0ZaS0x3WlUzNExkTE9F\nd0NTby9uTTluUWY5aW9OajBDb0J3anMK7xiPNbpu2bin8jWhOTUg7IG1UbRRz8Ce\nVsbYsSBQ+3Frhjyw8d+LPXA3VfapKQLCe3wUTd8PkIorBVbDtonEiQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmY2kxa0xyWCtFTVhwZkht\nbW5TbzFPTzczOVhKTExKeEdKT2l6WUpFTlZzClV3R0FjY0pOeTNNT2g5RkN6eWJP\nQ3BiOG1lbmE3b1NpY2x1NlJWMjFrbXcKLS0tIFRPdDNjdU5HTlFzaDZTc2pFTkZz\ncHVSRmw5RThlWHFsQzhacFV3dG1odVkK4PtjN37xfbJItgmvdlyrnPbNx4phEs2b\nBMQsYZrrcFcBjfnax2C+wiSwIA79v7jtLTpW/F/vRwf2rYRMG3FulQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5NnNhdk9ReGtoWUpnSWl6\naFEzNE03OUZUaEFGNU5ibWRabTNGcWdlR2pNCnZ5Sm82dHFveG9vNEZUbW4zblRP\nUzd5K0FmbzlmQ0RwWlJncEllcVVCRU0KLS0tIHpxcUJjaUErR0R4TW5JQlNxazhW\nS0s1VVZGbzI4emM1U2l6U1o5ZVQwU1EKP3YuLiG8B1WpRF5xkDkypJK8v8/exDOl\nI64+fu+b9sM/JL4Eb7P46SJmDyPJ4I70L44fIsU4xpCQAB0NzwbvfQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaVzNTS29ZNVpBSUhHK2FH\nN1JNVFJieDJTbytGNEVIODBXZVFRV0x6S25BCnBROERLRlBmamw2KzlKTnVFblFv\nWkhXaDNsNDZlY0VIUDRKb000RFpnUWsKLS0tIFhMTU0xSXMreU1mRGFtTno2enF6\ndXZsVEU4ZFZpS2tkSHVTQzhHdFU2V1kKc12Xs7Y5Wh0K//1NIAvwA+KVButxEZia\nkHJ54OXfoTpVAYqrUknVgRL6uG0la8tW4B8q/v0AWhbBQZicpNELLw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-03T06:48:48Z",
+		"mac": "ENC[AES256_GCM,data:CycoGZ0huG4jxo16zr0SLJWqAXrTvYVYoMupNmc59adSbYG32/L+Hd8/NhkTcQQAXpoa7ZiECy3qFhQbITjhq1y53YlP5Q7qDB8yNWKWoNEIly1v8pcD4YH0SBJw6UKcxyR2MoJKWhSzZh2dyEKw2hl6ld+airiKCgzxaad4jjU=,iv:ml9v8j4g8pDMFwAQYSpN+0mKr/dgT86TBPvpFtdLPq0=,tag:ecGOCmpfAe+eJ5vdNK0Crg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/mirach/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvItw14tB6fc6gdZalSkZPOUSWGsTNyLnXk4yLAnkrb 
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/machines/ramus
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Q1YlntA6bScOu9hCOshG6MAbhYIBWw6EbM/5z4nJVvQ=,tag:TFZpP9CeOAmOb3GpCVqRWg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1RDc4WTlWVnBvVWJMZFZR\nL1M2ZWxib1NZM0M1aDM4SlhVaXEwTzF6Um1BCmJiRDdCNXVPaDRDdW1CdTNUMjQz\ncVVIMWZRd2YrV1o0M3NjVkRlZW9XZEUKLS0tIGNYazU2a0pqTzhXczlsbUxBUlBP\nUHJlUHgzdVVZdHdyTjlLQTRpdlJWS3cKHghMTLA/S6F60y56nL/at+iECyoEzZmO\nECJhGSDyQ0vbGgEAnskfseoA2xtzNvkj1sO2kbnPg3pCvlIDGaAX7Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBESGo3M3J5S0FLK21HUHZv\nd21uUTZiMWRVaEhZeGR5MFVLcHEvMnd3UmxzCis3K1poM29LY3BBU2pYRXc5azV1\nYnNpT3lZeFRndmhHb0xHZFZzZTBEOUEKLS0tIGZHZXpESlBjNWpWTkFlMDZERW1K\nRDM2aUF6bzNMZ3hLbStOTS9aUlI2bkUKIzTIQ69JjjIlJl3xUUa8c67+WOLXIcxh\nLN/p58/sGa1PH5X9uI9yBxH+7dmn2u7xwZKGcHt/1D1BwH+1f42eyA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsaFgrWllHdXZxQUFGSWV4\nZHMweFpkRHZRV0FEOVBDVFh6MU83SEhpZmlvCkJCUmNIMm5kemZFbzUwYU1POFVx\nVk8rTC9HRi9pQUo0Y0JBdFphWGRuT1EKLS0tIC9PUmZvVC9URks4VitMWG5zSmh1\nNEJldTNEd0dsQjQ2V2JUbVU5UHFNSGsKKV03KeObcSAM5tMBNJp+F6hdDpziyABY\neEAJxMr9BuGoPwvAHLAAvIsIuOw6Zw+wfbxeZK+szhwiFmMdZMCffQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1xbW85Wi9V\nOTdhdk9jWVBlZm9HbXV1SUh6WmFmdnN4TzdRcm92N2JDa28gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpjVVhQU2lLSlp1Z04zcjJjeWNEamEx\nWGltR2FtdlBDTFRpNGNYRTg0Mm1RCi0tLSBVbWV2WVRUbnFySGp2ZEFnNG9Xc3kw\nTzMrV3dEOEMvL1RGTXJ6L3l6b2t3CjxtxJah0sEljMT01ch9x30OeFzvE/HNzXSb\npnG8Dh0rYjv1lJ2unja8zZdfrl41avHP7BeHqSb5QAMVxZj3h8s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE5CM1NOOUdl\nZHkwN3I0YkNhaDNYWnMwRFM0bnBPRXlUSy9BZUZYVGRtQjAgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwprYkxXMUpZZjhjcjdYYno0NWE3b0ND\nSG1nT1d3dGZEUXE1enMrQnlsU3pVCi0tLSBNMitqcnhkeXdueFFIb2ZSNEtmZmhE\nemdYbGtpV2dadTRscnlidzJNK29jClycgQIySOi0Pb7H9G2fbff+VRhbQY4wqliB\ntGyGUMijiTPpKC5CMqoVz3RsMdZkX2NuwfL3p0oZXpHx2gWCPLA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1yS21OR2JC\nY2xKWW5tdWhGWUxZNEVadTdkQW5NeGhtb0xtaml2N0hnR0kgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpXa2ZmN1ljazgxQmRKUitGQlJhMHlk\nYzNrdVJCaU1QeDlMdGZHTWhjajE0Ci0tLSBmcWhNUmlzd0tWNHVHcW5Dd29rRFpF\nUUl0VkNKb0ZUcWpKaWZvT09VVWpFCuvNqV9L0/XREyuFeNA41+G53wx56k1qzfhz\nk407lcOzWtlo9e4GHzSeV4ZEAP4Pxt56AtoIlSM4LNrlEpBpP9M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0UzNQcU9Zcmt3Y25BeC9X\neU9NRllWYmNQSkdlakZTbDc0RVhQMElnbDJJCkpMVDRRUm00eG1GN2QxdHppRDVn\nK3kwNERzeWx4YnYrWEFZQUd6YWdlVEUKLS0tIFRyNC8yOUtqdC9IN0lCenlFY1R3\nNlRnWXo4ZTQ2endweHZvRnRldnVHVEUKjNVzo097eHcaQdt3l36ptfzkfAaXNsDJ\n5b6gyjs/arzYj8ygdv6UyDdTNjlZfvATSMgfYIjrCKKt/9EDHfXhRg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWUl3WlNQQTF1dVdmQjVS\nRnNRK0pNUStjV3VuN0QrK051ZHNPNVZZdlJFCndMRmJRSnFMcjJlYjJOa3hjYzAw\nSHRpaDFFUnd3UU1EdjZFNktzczZucXMKLS0tIHNhUXEzOEFIRDdBdHBrOGhKY0ww\nNEFUMlJLakd4bUUrK1BDNDQydzFPRzgKNJUKAxK/8vTbnHM6/gM4J+FibHkvx6dt\n4hbLPRcXAp/5mVJCMAIGHxsuyG4ypSaOkF25e43PiI7f6HacJkw6AQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbVlpY2RxOGQ1NjFaMzUy\nSU1Vd2crYmNrcjhWRFpkdUl4ak03b0c4SEQ0CkhieCtFc0hPQUtsQmNwRnBhdkY5\nMTBOaGVTKzNtUWl3QUIrU2VRYWhWMEEKLS0tIE9VNmFWaGF3KzdKcmJCbHNTZllx\nSnBtNVZUdnJHYVRuZ1NQUWNoRkp0Y3MK0x4epBjs6Czgzpp525Z8FMpJkuQn5LQ2\nbaL3VJJxdjpKKk3AeS3rnIUJ5XV10qtsG4eaQ3wgAQGdXl45jcvDaA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L1pLSkI5YkdWV3d3TDV2\ncW9lWUNodXhBN2xGcE1KaElaTmxRR2V0eUc4CkF6M0ZCd3NTMVhUZEpqTERnVEt1\ncXE5STdJckRwaWdJdE5SNStsajh1dTAKLS0tIFhrVzEzL1ZGOFVOL2oxbmFDQ1ZS\nTEc1UmM0V3F3YU94WVBDYk54SWZtZUUKl7eW0214fmkJ88J93O9uudjxxZfQ1kFl\ndeZfjYg1N2UEGImL4sZgz05+m8ehxLh+FntlGgJ7MHFrqAE/g6UF1A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:15Z",
+		"mac": "ENC[AES256_GCM,data:Ve2ded5v+sZaMocncuTS+y9g5nGP6wWvu2bWsBn4AbYigZnfp9eROIf7ewCT2pxcu7VFGdYv1DjWrizwvYu1PkRvVMxJZy2BgZeYwtmSVWW+x7m82QFb8kapO5j+8hK6V2tyiaGUw8xwNDtN/QyUhlpS1kjfmNLwy1sBM0rinLo=,iv:G5oif6tMGzS3TAPRk/6LZeHLDvyognPPCjuwxoX05YQ=,tag:M8+mU2/C3MNwc4TABkR9Xg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/ramus/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/root-password/password-hash/groups/admins
+++ b/vars/per-machine/ramus/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/root-password/password-hash/machines/ramus
+++ b/vars/per-machine/ramus/root-password/password-hash/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/root-password/password-hash/secret
+++ b/vars/per-machine/ramus/root-password/password-hash/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:6/cp0K3a8htco1rlIfExnL+ppIgNg0+/XlPPAx0Ylp/KtDfkQg3OI+Y9zWRX2UN1dHjVVBJ0vDrqKv5OaijQbl14E6U46HH4EjevBmGeUCLmDrsFTNIPqGw+D12LoYuOGwkfonsRO5LbtQ==,iv:Beb8wBVdZvkKA69aCtxGMxuQ9fProDLN4WWKtvKPbvc=,tag:+rpJT78McFuf1wJq6DWyoQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpMUllOTM1RUtHSWJ3bDN0\nVnRTWDErQTV3b2lHcEYzanp2VVhoQllyNmhzCk5zN0xwUVlDQjB2RDRLUzlvVW9u\nYjh5eDdnWGRXRWxoYmp0ZTNEam94NDgKLS0tIHBTdHREQ2dRR3ZFNHFhZXV6cDgx\nRk9OOVUrSWlVZGZHTksvN0RocHFyWWsKfhDdr6qFmtt7dAegVIIb3JH01rGxzvyN\naQv6F6BWbhvMUU3/eJNVerJti1Y/RinGxBLSP58SxksJiDTFBv/jWQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZHQ2U2tsd29qTFQ1aVBP\ndW94RXJqbE9LUkdXeXVsQ0F4TFUxdGo5ZFg4Ck1PWHJGWHVEeTR2QTRTM1NGWVkx\ndG1HMmZUS24yNHNQbjFPMjVNeE83aVUKLS0tIGtiZXEzY1g5QS9FcHlOOWpxbE8y\nbUtrMngrQ0lLdlQ5N2Uwd1ZVWkRYaGsKD+xmS2gjw7o2Wohxh7+4dk2+9Uf7jK75\nFz2RmP6oLNIcWanAENygOR8etcuBMcCPAc08VSEGtjDg9JUC4lV2mw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJYVJmUDNNMWVHSSt0RWk0\nNHlyOU9uYjg2aytjaXVnV21NNDFGUVMyUDNJClBYTUFzNWRxOTNKVmxIdm9pQlRq\nRGQ4am5mSytDOFFjUklGNkJZQ29tQk0KLS0tIE1jQkkvRGltYUExazhKUDlhZlF6\nSDUwNFR0NFdJSC8yNy9yOWxHYUJxSEkKf7bxUdVDAvHnU8kscXInOcIy6vuxj5pL\nBaW5dYJ5yQiroXuv2U9rDygTQYAAiE0g8xZRjp98qzTHT25lG0pgzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDc3Zjc3blhq\nOVpLSWF3dHRLVitOd1BtWTNISVBPVHREMkpJdkxJUTZHbHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4cUZZRXVrMzFiV01QenVJd2oyMXJv\nVENRYmdtazROVnU5d1RkRGp6NVVZCi0tLSBabmQvcjdQQkU3SGZNU3BwVUltN1Er\nZ3hxS01ZeFRFSkZVYjc0UXFqTTZjClLbO5vhBcv+lIMvSEPeuztAL7/L2OttICB5\nEJghMMExc7/kgM7d88q75qEsPsVNgE/4BWzyesrvKXb2gWLosQg=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHh5M3BYQ0di\ndkhjL0hDWVZqbU0rTjlkV1NZZTZ6eERTc2JLc1l1b1N6d3cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpXdEY5MFhNeXJRdlJuREw5emJSakhT\nL3pqNFBpOFozcXRaT3NreXJERVNvCi0tLSA4Mms1NzZRdG4wbnUzSVFVVStueXJ5\naUh0NWd3aVJUeDFQSGRtMjdaNEtrCtQQU4t80k6OnmsBcH6Z0hyBPTLFsb9n+/2h\nxWFf2MsBTboevVnOhvEGaA8XhBB2/MrUCGTbkFStfdf+8jyVj+k=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHU0dHI2L2FH\nZ3loaEZxRUY3NW51Ty9pc3FYd25OVGtwNG84OUJUdWFCMVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpYU3FIZ0crV3NWTkNLR29BNFlvbFJZ\nRFNzZk1iWGRvRFdRc1NGMVlpZGNnCi0tLSBmK0FXeW5SbzJLV1c5Q2wxMDkzL0Ew\nMTZoRklJL3JIaXcvcFJ4bzFySm1jCvY44UAa+HixIuoFn5n8BBqWigjNYS0bhFTr\nTLOcMxGb26VeoWMULZs/SaONRAVbbtCYAbv+ZXFu3GH7rn9xx48=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0dmJacm4vYjN2WlJNTFEw\ncHpPamdqa21FZmJKRnRtRUNodE1NNFNZWWp3Ci96R01JWDY3NFNINHg5MVRTbWNU\nVytLV0hyUmI1YkV4dGJ5MXpuQzU5eDgKLS0tIHhlS3NjVWZId1lIa2ZYY1VFUmE1\nc0UwaTR6NEFZcUg1OVh5MG9RSHFKUncKGnRavc/A4Y24WK9g07ofpdw4jf/Dzs14\n2MesaajLi2pHwSeb48V3c/iYgS3cK4j0iosY+viWrfvV3vRG9FE0Tw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMGNtaHl1MEFFSWwrOW10\na1JQNnZIcjNnMGREMTlXb0lwWS9OMC9uNlZJCkxBSXVJSGdzMC9mU3dldkk5K0Vo\nOG5uMDM3S05jZjdBY0ZyNGZSR3ZQQVkKLS0tIEN1WGRDaGNva3dJWGczWHBVVUtw\nTzZad1FCeTB4UDNsZWJ3Tml6M25FVGMKzXCnA2ehQ/bfV32Xc8mflXfWAim/v/+u\nEqU0fp3Bhn1FIWFCBvh18o20kw+MsE3+zpiY6FxxI2EtrVTMyobXuQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCMmtNaDJLL1hhb2tCSm16\nck4zcEVabjh3OXpuMHFsbnd3MTIvbnVmRTMwCjFhRWNWSUlZbmtuUDBVakRaL1Uv\nSVlYeXJtOWd2UWVuVyszQjNkdldrbkkKLS0tIGJnSThzQ2Z2TFkrNExQVWI0V0pD\nMXNBUDZNWXpSb1doYW9teEZLMW9PdXcKa3zgLXVDJ07cEMlHVGNCKOcUtajRBy7x\nssbScq1+iCZeBk/4k1Ex3kyZ5yfmMe3nE8fS8Mx1HtXxvrHcxLmbgA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtakZaeWUvVFROK3ZpQ1ZB\nYTVKTWtNVkdQVE5SeE9veFdtcUJDQXF2MmhnCldYdmZZT3VyZmV3eTNPbHIxWEc1\nYTNSNEhZbExrblRKdWMzUUplQmFGNHcKLS0tIExjQUhKanpmV2xuUzI1ZnBMdHJU\nU05OL2ZaYTEvWWxRTHIzUWUwbU4vODQK13v0k5tac1CYvsESefWacZe+xXUOXWPy\nn/soHGUVG9L2RdiSh4RcZc7n7Foq6GwJqi9wDc8Ms1FpzvuaVdOF/A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:16Z",
+		"mac": "ENC[AES256_GCM,data:QwBGFbzWLFEdzT1bVjV77rtWCZwKXXf9P3byS0+SLRbfyxzRY0+BkzTa+vxj153udYwFkimJX9ywWISUDfqm6FJs6a4jqG8Xmwk1AmSyg585dc2Z26PC30nn4rBcezWBMF2IVFw+pJ65dZq8NSG6EmyHgmzedTOHMis9NZmm/b0=,iv:i/5MNOcH3TcKYRojVKCy0Pw5tHzSzvS8YLLYn0pwQ6s=,tag:96JAFD/kjUKPv1ZnGnEzMw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/ramus/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/root-password/password/groups/admins
+++ b/vars/per-machine/ramus/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/root-password/password/secret
+++ b/vars/per-machine/ramus/root-password/password/secret
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:nSFIQBxSi3uDpuzA3bOUgBaVLxgAMt2mBfrJFqE1BxNpez5eFvDvXcAvRhtj+rg=,iv:Zd+A4RCKxo4FnDQklNKl9OXIjAJi4Ec69SksSSfsnM4=,tag:c4LuluVLBD5X090JeYYV4g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZys0OC8xSmhLd1RUeVFs\nVTJteC8vWTZGZkYvOFRSZHd4Z1djZXN4NXdRCmxCZkw0aWJLMzNPV0FFdHV0OGNx\nQy9yanVPUzRYUXg4L1prMkhtdWFsQjgKLS0tIFhXVlpmTUlPTTV5VSsxVHc4R2ts\nUXh4d2RCRFdVSWxDVzBJOEZCK0ZyNkEK97mBLq3AYu/2UDBM9vUx6ssS+076ld5I\nMW2JnHVOcVZpxVKdRBNuT++ZnxmDCGe5gIn2/rChZWZ/BnjHkvDDsw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBERk5SSm5Pc1BqbmZKeDZF\nT0ZzdU8yMTkxMTd6ZGl3K2NaUGc5Zkk2dW44CitHbC9PbmhPTHU5eHhQYS9HMU02\nOEg5clpqRm5SR01rQ1NVOVpHR3VKRm8KLS0tIDVqUWh6WnA3MXUvR0NFeUlsK0xz\nUlZWL2JZNHE2eHdUOUpORS9iT1NVZVUKyaJNVRUepQssPLcyg5rYhhsoHGfawApM\nLisr6Yo48eSNcwxeiRc0bljmPEGjn9Na5rqPUFV/YwKL9OhkKIuwpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFY3Z3RRdGxS\nWEVDblVPK2pWUjVMTDZDalpLcE9vQ0YvVHRWVDMvT0lZelUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpFY1hXSlNiZVVzd0s4UTl3UHNoUnZ2\nOHRjRThOVzFUSFdFZ1Fqc2o0VDQ4Ci0tLSBMTXQ1aitWVWg0VUI3YXhKNEZzbjVq\naXhjN3NvcEpHUy9RMDdseVJYdGxJCh3+EmDMaHvVZEHPQHfXrIg5uq0/DXpGb6eK\nRfFHXOhH31NOIr3KiwiPlm3B2NmNyHGgZlwwy3xcZQV12ZRy3xA=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFp4cjFKM2Nm\nR3NTMXF3RE5zNE5FQldMWVhtUm1nK3lhK3FmTmVuaWw2V1EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo0VVpnenpuSjFDYmsvWXU5L0kwdjk3\na1RWMlFIUjBCN3BOWWZMQmhZRk5nCi0tLSAwN2pUcVF6RityMzN4NkV4UjBXRzU2\nQ0J2QUNWd0pIam93ZXZmQjAyRjNnCgqa0WSEnaK+qU0BK5FjZwsUAgtNdH9ujG4S\nEK9w50mUf6sL7frwnYHVFHDLrdCezNxGvbfNT3ed0vr3Tj4VZmk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdYTXlqeU92\ndGk4TzBCY0E1MGc1bHA3QU5qYjBMdFQ1TkZxQmNQQnN4MFUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp1VE1XQUptQTc1TXA1dWlTQlNMV2R3\nNG1sZEw0WVJPTEg2aDBTWnUxd2s0Ci0tLSBpbm9CaTU3UlF0ZEI1a04xdmVxTkh6\nSHBXWE1QTmlMdEtITmN5VWxJL05VCk/sMVWhDp4vWSWjPhFdaCoZ6FyoQQPnYWKW\nQ8TApAcEfj1WQ4JwuVlgFTkiq05do5EpVdcFiOCOT+85OruS9dU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeEJJUGU1Uml2T1kzajBq\nOXlTSHJMTGQzbFROZDg2Z2N2UjdFb0l3dUg0CjRaTngwa1RQdnJHM243d1NpQ2lZ\nTEtSYktENjN5OHVFOU1zaXJuaDIyakUKLS0tIDBtbUlueTBSRTgzQkx2ejRwejVi\nRlVIenZaS05JUG5leHRILzRjaU9EN0UKKgKUO9OoOH1oDwuITR4uteDxzZBQi/Bj\nrlaVgUFuqlwNaeRRwtn3dheKmKuXIl1kOQWN1aEPZ08Bg6o0j7KTVg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1SGRla1BlREVqek9EdEh2\nTFRoRmg4VGpaUlV0aWRQZ0w0dm4wRnhnTm4wCk40NUdyaC9XZStMd2Fkc2lOZkR2\nU2w4WWhOUDVXalZuNGt2V3VhY2xVVmcKLS0tIEh3akdjSlhSTnA3ZEVYSDFpZXdZ\nL1Y0Wi9DUFNwTHU3d3d5OEFZMUpuZEUKSg2TBM6UzY54Zx+dfF9ykU6hy/5bANbb\ndDDsmyJ7wwVmmqs1sJAPjcKgb3o/OcdGk6AUaaSToDkOQ9mDQmZDhw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOWldVNDExcnJsSkpCU1Rt\neFNscHl3Y1VzZ2xXWWdNL2lmMlYzdHFjeW1ZClliNFhzQWtZRW05QUJ3QkJuRXIr\nMytaeHNIS2RwWTNSYWNnblpPbFdyZWMKLS0tIFZjNTF4akhMZ1pNRUdiK0ZhR0Rv\na0dXS3VWbjF0aENRYjdsNWgreG1MSFUKZjR7FaHpHJofgXUBNP0eaM3GzVf9bb7j\nwNKqEs2xmGlw9yzBxCNkkmqwRaT38/2a4r3CfIzVMEWeHP9/4LTFhw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxTzZoVXN6QStEMitPZXNQ\nbTB0S3lwL1JaeVFRTmpSWVVtSW5LcUJBclRnCkNTTnUwYXBpU2dJTWF4allLY1VP\nNUo4LzdGWGdGNGRkQjNYby83U1BEQlkKLS0tIDlHVkJ1YVA4ZGJ5TFg4UDYwejMz\nZFUyMWNIeEI5VHhIc29rdHdSYk50V0UKyJXjwEZ3amIFPp45PulmPHI7aTXPa4wd\n0p4Y3DaXiLtf6hRZ2Xa/uz+wExUFhEdQFnMaBbdVufD/VK4MA/ZmLQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:16Z",
+		"mac": "ENC[AES256_GCM,data:DpCzrb2qMkmcTpIV8LhzRzT/hagY3zDw+aRucyey0tLoego95ZO/pPPRd7gzfacWlYG3eioPvcwnY/brCmU0tyByEW1gNT2AHii8VIiLoHzaSJnDYiwJOt4ocXhuLw+CRK+od1TtGXO8JJimDvG6YThkR1cNgkFibz55DrL8QLk=,iv:qCNMZXNmjhEAJy1u9Mh/ebn/ob9ujoQoTqeYQ2YhFiQ=,tag:XGoM06/Y6QZv5b4QEgterg==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/root-password/password/users/kurogeek
+++ b/vars/per-machine/ramus/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/state-version/version/value
+++ b/vars/per-machine/ramus/state-version/version/value
@@ -0,0 +1 @@
+25.11
--- a/vars/per-machine/ramus/tor_tor/hostname/groups/admins
+++ b/vars/per-machine/ramus/tor_tor/hostname/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/tor_tor/hostname/machines/ramus
+++ b/vars/per-machine/ramus/tor_tor/hostname/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/tor_tor/hostname/secret
+++ b/vars/per-machine/ramus/tor_tor/hostname/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:O8wgyBCYMCCJGb1B03E+vc0X7XNL622vGUa4Tii/46LZvoweJvX3S6cQckqd1JjXaT4vj1cZ/jVBn3dsLhjg,iv:kG0YGJGCCTfVe8K4YKrT7ftLZi8d6ySZ+0YD8owgWAg=,tag:psjpCVf2cGMRip3BIVh1zQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQVHdCT2tBRzlBNElWTm1R\nOGlLN3FiakY4RmJjaUJCNWlZbVNZU2ZYc3lZCkh1Z1IyUjdOS1dYaGNwTUx3Nzdh\nWE9HM3FLb29CYlM3WTFndmJXVTBDeTAKLS0tIEVYUmMyQ0NIeVVLMDlESndNYmMy\naU5ZeDRmQXhBRUt1SVVQQXBoRHpPR0EKgQ3WcbhndlqXEsLHKAc74gxUMUXCeHEF\nMjJ0e//Csqg/+jVuCp/IYw0uEKooSehs1hvtz7ZPGKRdW9bsncxc0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWGFqajRJS3NBWUcwREdM\nRFI0dW1FRWRjT2lQbmlaRWF6OW1Gd1A3QW1VCmxzd09pV0JRbXROcXo1MjJpZmxl\nZ2NzTGpoamE3Q0xIbFJ1eUd3aHFFcHcKLS0tIHRSUmtiaU9Ma0R2ay9pMzVGdXlo\nVEFlK2x3OFRoSVV0eDE0UXNnNHIzeE0KC4PisOp+kK3oApKhrHKaW74+sN3ExcoH\nS/6lEFO6TyLONqAKzK199n36ZeWtQ4/TDQfS6OHs5092yCuEBsA5dA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM0RxK1V6aWh4MlRVWUZL\nNVIxMWdKOE5pMDJLeDVoREYzbXlNS0FFL0FRCjJHYlFENVNaY0wwZUgzK0krR05Z\nZjhVUElDZUdoMkVha25obU0zS213Q00KLS0tIFd2T0lYZmliSE04UFdEVml5ZUE3\nb01pNVJ3QjZuNU41NzJ4RUdlOUNlSncKW8yzymtjHOYaIvlX3ZZ/UyD88hZdWAaV\n2j1hEZaUDvQBtfIXdFAGV5EZdlh4KN0V/o59wRQKIe4SUsY62NJoxA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFpKZ0cycGpJ\nM2UyVVFTemx4MWZWc2s4amZqV2hJOFIrMm1yeVNzeEZvM2cgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4TWppcXQ3M0VHQm5IOGk2NWNqSnE5\nNHc4eFl5bEY5cFI2TjVENXdyTkxnCi0tLSBnMmRzd2FNV3JKQXlnNmlnRzFvelIw\ndnF1cnlSOHJCRlVyZVN3WkNTL080ClORWSmBattkhGb8CBUDkrLinpdkZscFQxwx\nQOKwJ0ZqSLRucXBC+0DUN7MhAQY0U+JH7YOYHGqHtZHZc4Jyt9E=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHR3RHdrVkxY\nQlBRU1FiNEVBckxqZlNLa1NUTW1oNkdtZ29Gb082QVhKQkUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwppb0dzTEd2UUhQVG4zcjQxcTNCeTJJ\nUEJYK3FrUkV0WnNBaUdJMkNaT1VzCi0tLSB6enNYNWZCbE4zK3dyTWhXSUd0VjN6\nOURheFFDcXc3WmJyNzVpV3VYTkVnCt9nWs684U44p5578giBIExd1SmUXnoXRl0c\nu9JXv4r+1I7S5fVdaAFA1EPnxi4DNYxTxkI/UTrsRjtdVFdP5DM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGF0RDg2aUlw\nRjI4cUtXTGtKOFhwVVJtbUdQVjlyeFdyaHZ1clEwa2VKQkkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwoxTlpjRmxzMDRiOGxDOURXMnJUbnlQ\nK1dSa29iSUVVZDJQZXNGNGU1U0pjCi0tLSBzSlUxL2Vva2srbWt5ckorc3owTU1t\ndWNRaHF0NDhBaVVzZFE5c2hka2drCiBm5tcYUdm2W+OKe7Jl1wJoc4nxcyjxCVX3\nrRUkUviSTWz6q1+YFdHbn8flgjtxTiCHasm6qoCp8T3FwbNyR/s=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRVVJQ2laUTljdlZqUGhD\nRndrOEJYTDc5cFM3Vi9ZRVFEcStQNWxqYlU4Cm9kVWJiRVRSUUdXWTBTYnFMV0hG\nczFUVzZ5S3I1ZllLakZ5RVNPMTRhWXMKLS0tIGJza3ovRVRHUEZpY1FYaGRFbHRp\nbHQxem1ncHZERjV3L0JGaEUzQnV6YWcKdMWQKHtTWkb851f9c5KXo7SMfkmQH6tl\nc8qmHjP4LSK8pkltFNi7CY3sAsKP7yqRuFNgjX4o39EStXyG8K7e+Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5QnpjRngwTSs4Mk1LeER4\nUnR0VUY3ZTJPNU0rTDhQS3UvVk9QdHByc3gwClZKcWhZM1lCRitrUlNHQ2Z6Tm5h\nYmF0bzA4SjVMT0oyaGwxQ1RIN3BSeUkKLS0tIE5pWnJIOXFpVlg2b3BZMVR5K0RS\nMU03L1JBcC8ydXZCOEx0OVBoME9FK1EKT5HOMbu0jdYVywWbj9Vpi/ENVpyKaIKZ\nGDjPXAbtfKm5o8NKnPu0LvcZ+m/mBtzI49+O5U0O7pv86ccIafzQ0Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWENWNkFmcldpWjU3K21N\nWGs0ZWlxTWhhQWsxZWExdzBlYTEwZmVXbEZzCmU4L1RQUVdNV3kwZHpSWkRSbTF4\nRHNReUVqYmtuOVZHeE8wVG50bnNYb1kKLS0tIFJQNnloZ0NNb0V6TkUzWjJCVUNh\nQXpPVEZZU1QyY2kyOFlvY0tWRWlyT3MKfiEPCDNdQtheZS+eSa0fVvpSgrCpxb8N\nuTMa6nMDbZbdq5EIeb6Ik/dvdt9hp7oD6rfOw7Kjoa/gpgj1OcFiTw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTlN3eEpUMytUeUhadE9q\nb3F3SFJxOUNXRVBpQkdKM1VrSUMrdFV3cGw0CldMOXJJUkgzTXk3c0VZSXo0bW5H\nU204NS9kK0d2ZDhpSnhBd3BSK1BNYkkKLS0tIHY3NG9oaCs0dVVrYXJBMFZ1T3Iz\nVFBaTmt5TjV4Q2k2a3p3N05rV0NJVE0Krlo829RhTrF9c7wShMdzQiNibpZLtD8l\nPhOrG/Su4InWaQh0OGDDouxI4Eqm2UrZhqVqAxRJ2g+7X2Pf/Wt02g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:26Z",
+		"mac": "ENC[AES256_GCM,data:JvRD52lIEIsvbzzwp++0y/h+/6atpRjOh/Xr/YwfAlMS1AjiFaBLWmP/xnAiJCUQP9t9v7U2OiiHVo1vmQVaMzh4E7v+bR6O8YuwEKfPH9LeFmZPkSHCBZZpwXylDAJFJg8jF3tzFbbuKLn6RvSew20EJ315EKh2eQJ/+jxNm80=,iv:mzgupwJ8JVb6m2URvJvzoBjDoHctS8bW34x1sPhQHQA=,tag:cUhi1C2OKrvcWqEX2wcaxQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/tor_tor/hostname/users/kurogeek
+++ b/vars/per-machine/ramus/tor_tor/hostname/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/groups/admins
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/machines/ramus
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/secret
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:G80mWuSb7bJ6HNdk4loFypfV+yq4cg/mXN0PJXWgnfhY9FcdEfsY1V1YPdizoVAFiEAcLRryxsY1daHvWDvpkhQlXGIM1gA9X0yHLCCidbJkFBHc6Im727jfFsIR4V/4,iv:QlV3lciRLUieIFszKen+i8Uvy1PKQ4VSQ3rFfnzpyWY=,tag:But89s6We8mrmXKJqFG11w==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6VE9uSkVxZGVIWjhXenJv\nZUpYOWN5K2xFSEdCbWlTU1psNnVsbGR6N21JCjNKRTV4VGdua0E5T1VXNkpocGEr\nRFJudmlhTk53UUNDVk50NnlYRXI3djgKLS0tIHRWQkFGMEV0bDUybHNPdEZHVWt5\naHU3YW1nUUFzc21xNjJ4Nm1mQlJ1VHcKsUZUgR8QA0TQEawls6DW0EnVIbqCk6Hl\npwGjkqnguivb4f/lgxGT5aBMRv+jnor422rxqp+kuOe6R4k5+s0Hug==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3NEo3Q0huOUN2L0d0bmpB\nOXZlNnVtQXRXL2ZkcFJCVEpjTHJhZEVtalU0Cjhpak1tWE4rSW1XM1pLbUlwbjFH\nM1F5WHJGVjd3NFpzTm5JSzkvU2FrUjQKLS0tIGEzM3NhVVM2OURTNHEvVlRML2pD\nYUZSNldoQzhCcGN6Qy9RUU5LN3dYb3MKweLKP62ur/Eeh75sIhFOoVveMybkLPRB\nvtiWRWATiDnYZNmNlIci7jOtSJ/Z96q/11UaNp81Ghk7kQEkqv4Xkw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRWmFGSkNjbFRIWERFeG1F\nM1FTcVgxbTJRSjYrNEFCZ0MzaWdEYjRXZHdrClV4RDNydVlnOFVLNTJYcm5XeWdZ\nRkJpS0pDN3k2K0FHcFQxUU1ZbnFiTGsKLS0tIE9vTlV1S25OQ2J5VUFFOFhNMGJa\neVJlT1FtNFpEWWFNNGVXellYQ0hRdU0KXydH3UO8xW693FY+OIrcVU5RCbUdec6T\nQI2WZbwZwF2FpLbUnf6x2PJ2ipg3ei6XSBgp1ktcaUgeol7aw3WyQw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBFRG56Qllx\nckpkWmxiUjV0eHYvUEhTS2o1a2hRdGkrZ3dDZkVpTnFIMkEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQozbWtaQWRNS0l0ZWgvblRXR01kNWtx\nMDhYZmdZWnBRQjJhUUlMZEh0TXVnCi0tLSAzMXc5QmFkVFFzWFc0Q010cGFmVk1B\nZFg5bC9PVkVhMTNTQVhjTEhRSHQ4CgB10JWdIuJZChIZG5E3eXhwJ+xHnbgA3CCT\n0waHJvPdZNmNswcs1KORDzkacpJO4pd6IYCr3bZpF3BqptHxYZ0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFYvWE42Qy9o\ncDRlOUxqd0JETVJ1ekRwaU5mN050MFlBQTNGVTdrM1ppUXcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwp4cjRxdXhhMzlGcDEyUGtMc0Y4bCtw\ndzV3M1ZyWTVUdnBWYzJLbTRWallBCi0tLSAweG9wanhNUUpSMFFzd25tUEo2ZUVO\nWU84cDVuWjZtSTJxZmlERWQ4YWtRCqhcxU5CYqDGpblCHzvW3bL49aW9daZLwVkC\n3FI6bQOO+1+oA8yhaWY6BKEqyibx4jOwrLnyVONrnlShuVzkUAw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlWbjdrL3JF\nZ0ZZVUxubTZWL1BZR0tiRWZUVUVScWNmcStua1RUWmx1a3MgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpzTXcranBCRlRKUEk0TGZySE1jMG1Q\nbGdhaDBuRzJjOHBtSmNNbHNFb3ZvCi0tLSBNRE5xdXZWbnNiZVhSOVlXbjZKRUFq\nMDIzREQwYi9oQ3BqRURQQmtLeUJrCjvOLQcFS900yJFdKGlZIkE431lhiS1cDn+8\nmATXAgwuunuVXyJYOHNlC1kvup0aCKJUJP+u74MuNUEVnks52jw=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5cGlwU05Xa3U0ek8yUVdz\nQkFQWFRGc21hdVpLc09MUktGZDhzU01iUW5jCkZWY0xQdkwvbUJBaTJwaVFyL2Z3\nWDF0QUg5ck05N2RvNFVYcmgvK3BnSjQKLS0tIEdnNFJTemNnT1Y5azVwUUx6cHJP\nSU5OWGdCbnBMNzZVYUU0SG5kM0RmL2MKIYO5UDMMZJPsqWoJsjP7e0jJ0vtqq79o\nGrm3dE2Cq/nG/hZHZlZ57is+NWIH9WoEI2VaO0YqsQ+Zdp8eWOK/ig==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Ny9Kcy90V1pOd1JONk9q\na0RGd3lIZW85NHN5cjNwNkowVXBhL3F3bVg0CkIyRnl3cmg5UHdRMHZjNWgzclFZ\nc0NLODZ6cllmejl2bk5ZalJ1a1JMc0kKLS0tIHBNMTc1K2xhd1QzWWdXQndKaTU4\neC9jYk4xZ2FobzVNaExlbE5QMUwxZzAKfYGVLCVctVVtq0XlZJv+5gU1iejWy88H\nuLC6e/K2HJWHZ2XFCf1udWzp2eIB1ddM97m7vnAXcMDKfPRPdyI0ZA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Z1BsTVI4QTUrL1UwRDV5\nSHljMXN1bGlaR2s0NTFCa0YrVWxWT2gvYlZZCnBUNnZPbzdlQnIwYkh0d1diMGp3\nTkNzaTZyTHBXdFBWL3JwaFRFQVN1RjQKLS0tIHhGc24vbDFYR01teWhZQml5eTZU\nbHJNR2tDSHBBUi9EUkpNa0p4RENzcGMKc+TMZEWPWd3yGPGdmXNxeJr6nzDa9Erl\ncl/bZyLthkoSZnYj6u3gRarx3pvLLC9Z0SgLCxgN5ep9DwQtXa5X7A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmeG15eU5SOWkwUnZmQmZB\nY1NJOE5ZY2xBV2podTBUN3hCcDVkd3JrYVdzCjFQeGN4azlXVWw2eXVQak53WjdC\ncytoaUhqWEgva3dhTVp4WFdqbnZQSjAKLS0tIEV4Skowb2xPVkw1TFlpaUhwRG1D\nNDFpR0NzOFFRVmN3ZHdjaTJOUEFZL0EKSykvmqjT0QMUvmNhQ/1amP9CMsce41D/\n5Dk7/UuJZX7UsfgRF4qDDYb1CA7Ol3zOF4k5wNRXn0Bnki3ykBsWww==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-28T07:54:26Z",
+		"mac": "ENC[AES256_GCM,data:Tkf+Pg9E3Ip7SQkhhIQIPYvYgVxDz8pStTFoGXcnSA8cXhLaN43jhxz5M+FoBMg3oxU3u2pKeCzFaSyCwHdeXQZkfRwMirH7+QRj0kV5Nki9jlLPo0VRUc3aaF2BAYM14Ol3V0LbWxUGQKDwK/HONLqCtR4pKuhaDuJwgL8iSPM=,iv:w9v57yRsLM0TvcCXOQBUGQnDrMWwU2O4dLh5UKbwon0=,tag:FXs7YrHzvdhA1/xjuCU7mA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/users/kurogeek
+++ b/vars/per-machine/ramus/tor_tor/hs_ed25519_secret_key/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/groups/admins
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/machines/ramus
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/machines/ramus
@@ -0,0 +1 @@
+../../../../../../sops/machines/ramus
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/secret
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/secret
@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:WY6kTgFo+10SoJYmL7+PJqmcdJQCEXvph/mo5Rc5aXM8x4yuBZeCModRwYBOYNDrMtaZI6xr8wIrZ1vb3dh9/CgxwiWRyu0zTB+d6MhgHCLD3uZA184A29HFQJmLPV1jbh1EopPLQlBztw5dzFqN2+vzwWvt6nFS4mCFJvVq+L0TYQD6r7SJzrIofJpGnBFwiFqVh5NVpmAhmlMJbbK3vKy06//AUBP5e/JNz5+J9MkPGhiehBsEA1TkrZ2fuevwOlOONAF2zWLNyuvMpMH/+Tf8KFwQB76/IGXLdRzRECB+A1rn4lSDeft3vnfZcqwIjfCOgTcVjQSPdkwIdblVpHiKBV/t3msyirVKhvfr,iv:fW+jdFVFfpWWy9jpa5yQxbcYJYMIVWlEWmUjBXRqtE8=,tag:3RfYjX88RuQoyoTOWk4UHA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEYTM2V0FTSEZGaEZnbzA1\nZDE2aUNGK1dHZmh2Z3lDUjJYbFZxS2ZTL3dRCnF3NGJ6VVJkRU9hdmlWOWMyMzNP\nekgvM0QyZFFYVUhFOW5PZDE0dURWcWsKLS0tIFRRR2xuZ0RqZnM5clNHdlU3SFN4\nTSsxajg2M2cxakpmZ29iNUVpOFBOaDgKRgDL0V1nC+7kKzQvMKhBRTUt2bG0BBYu\nYmhpay3KKWsG324MuV+n3J6ibPRSwNhYg6VjdO0lT+VfhT++JPg6Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVeC9sN04yeXF1OXBpSEZ2\ncnQ3dWFFQnY1Um1TczVIdzBBMXE4em1pL0FNClhVUEFpcDJpWmhFRWxydWNnbFUw\neVNEZmRiS1Y3TFR0d2dnUWMrMVJpYUkKLS0tIExOMUpzKzZzb0JPaC9VM0M0aFk2\nc3RWcTR6NW9ibDVjMWdtY1BIUTUxdzgKkoqAtuMI3ibOx4BhjaFgka8c/5OCXyow\nUJOrfZtqVJMLYmmtAN/BZbk3beLljkmXie17MjGtH5eVO/QhAcDH7Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1egztkqupggjcpy4g9tfwq6kqeh3ljw7enzhx4l53hjge73wmdscqy5qwfp",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZGZRZUJBRTBqUk91UHh1\nZDRMN3VTbk02YWdnSVVqZ29zb0Vmc21HaUhnClJLT3V0NC9QWVF2Z1labWkrLzBj\ndEQ2cVNUR2xOUGhvaGYxWEkxQ2x6UDQKLS0tIHU5TnhxWVhRSXpaQkdFb0kyVEpP\ncnozaHcyVXk1MDVVNm1UeXNDSkFOa00KiG6pbbAW2KfjUfovP3q1ny8eEZ5zDkV1\nMa1UBEoIOV01P+vCXeVm0bGmR21/53lAUhIgQyJcFJIsGFuctKo0Og==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9tYm5qa3B2\nbW96bjFsZDNZbHd1T241QnI1RE5MR3NxS0dtbWNZWDhXeGMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo4bFRwbEt5dHFXQ2tPN2J2WEI1RDF1\ncUQxVnFDbDEwSCs0dVhEVS9OeVJvCi0tLSBOb3l2VjBGZGlwRzFtYXFyM3hBRVg2\neEtsS1FNdU5CVks1UWtmWkxob0h3CnD57mICPa91qa5uh/9OpSuwkKIzUynRESsc\nvaNYEGbHB5UI1gysjKr8CkjJu9jRvGYF58CSQMr5UXuXppVb2oE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFFJRXBVcEt6\nQVpBRGlrS0JtWmlXVFhkSkptc3RlOVFpWjhPRjRlNFMrd2cgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpWZHpTWmNpVkhEWWlGS0pHajJQSUFV\nb0cweXpaOU4xNGw0SkFWbXN3RUMwCi0tLSBQRnE5UE9zZTRSbUc4OTdZTjJMK3ZP\nM0JjdHEzWDVYNWh0emtBakRwRyswCnQo99tq/B+eABVaxmNrYJgiPsURV7AV97+9\ndokjrWgaceiIWGoElr88TzefzZn9NGsQtdhrpqYMBmYFepZLW8A=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1BWWtSRDFD\nYWpwakFGQS9qL3hmVWswMElsSThIaUxDS0I3RVVmaFJOVXcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4TEhiQnFwQUJOMFErSjgrcTQ2L0Mz\nemZCckQyYk5aamRYVWV2OEVDZzBnCi0tLSBoeDBsOTBUOUN2S01CUndnS1F1SXhJ\nRG5hbGZhK1JYK2d1VzRQK0h1RnVRCoB/9J5g6DeTm+ZtyU7a0OAXYdI8jgBCMCHe\nslOAG3rdxXIEVnzLJbCqApAbpCaWPfR6uV9klezqcLLn/S7NwFk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQnltSEdQSFJzS0RBVG10\naFkzRis3ZGxLUTVEMXFaODQ4VUwyWTlvNndrCk51eXM1cExSdENNRnpvWFRDaXFY\nMXhSREVwb1Jzak5MRFdDS2FjVFRFOGcKLS0tIFdjV3YyTUU4eHJ6R21DNkt1ZFFh\nQ1JUSjhDbm9lc1FhRFBOVnh5dWE0dEEK80RUCpj6DS6qq8HOC39J2BwRPe7WSDPp\nU+gnoIQjVg6ZtSF2BLakK6ZIylTGn2cZihfUgvEnyBU7QR70naccmQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1emkrMldpSGZGak1FYW5L\nUEFZTHo5dmJaYk9tVzZxeGNaLytseXpRbkRBCmxJbGhRQ2lnVU9TTjd6Zklxems5\nOWtFWlhIQkJXVm9KeEtVckJoS0o4QlEKLS0tIEZqRDI3VjRHRVFLOXJVOEdhYkEy\nbU1jaUJ1TGUxeG5qMjJBRjh1TUtQemcKCVVn8eyZhg5rL2nBIJeLaX7r2kNN5QNN\nIvd3avnE/FSz11JXXPtOdMx6NZUsqoYAgXz5BazcJHqcr5r3o4xknA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBa2lzMWdFTTkzajlzNEVz\nYW83aWl3ZnE2Z3lMeWZ0UW5KbGxZbTlwSEcwCkh4M21ES3h1UUYxSzhIdGlIaSs0\nRzhMMGhUb2doajJuSkVYVEtMQzI2dVUKLS0tIHU1SEpQeW51SnVTYVVnVWZCdVl2\naGtBTllvK2F6QklTYnVmNE5MRHF3aFkKou1VSbbf8AZbH/QW/gfSRGMolku3VFyX\nTsquZfgHUL4T0aPO9kDMT08I+Q9B90g8/9Hn89uCvAks0XwjGfpULg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1ajFQKytkTDMrT1huakdY\naDVBdXV3UHJKd1pqcUZiRXNhejZmeElQWGk4CnB0OG04aGNXbUxlUmVaNDdSSk1D\nYjN1bkhscDhkU0hGV1p3eFpJNFo3NmsKLS0tIEp2dkpzMVh6TjloZWU5UDUxNXRn\nRmtZRWVOSGdWaFFES0NHZlA3Vll5K1EKOZH9n811NgBJ7ULdaMGUrUNKu0xgOV7k\nIIIOZFfRGs2Dk614XhqLu8HrZFjkmHRvQYXd41TsqUGEjcli2SbIMQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-26T06:08:19Z",
+		"mac": "ENC[AES256_GCM,data:f3sm1jjZNFehuasCEtcsWbh5Co+qinsFvvr7cSLp+GoBN/ZU8xjjHsdwc1VMznHmgaYv0m5SueqQXKQmrx+mkfBUHpWrY2X5ZdyjnDpBpInn6TtH0sQ+up0cS/x50WbIkL1eOlOcERHisd9PMOPpjm6lwLGFtK58tVL7cNERuPc=,iv:A38W51dRFKHj94KRNavFoCX3zXScWVzpYfBf9ryLtiQ=,tag:OPgLqBylcwlU24f35ml+Xw==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/ramus/zerotier/zerotier-identity-secret/users/kurogeek
+++ b/vars/per-machine/ramus/zerotier/zerotier-identity-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/ramus/zerotier/zerotier-ip/value
+++ b/vars/per-machine/ramus/zerotier/zerotier-ip/value
@@ -0,0 +1 @@
+fdf7:d53f:344b:8562:2599:9369:62f:7f3
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kurogeek	8bb7ad5f7d	Update vars via generator tor_tor for machine mirach	2025-12-03 13:48:48 +07:00
kurogeek	98ba3fe903	Update vars via generator state-version for machine mirach	2025-12-03 13:48:45 +07:00
kurogeek	6c1f1cd4d9	Update vars via generator root-password for machine mirach	2025-12-03 13:48:45 +07:00
kurogeek	d00eec5c3e	Update vars via generator openssh for machine mirach	2025-12-03 13:48:44 +07:00
kurogeek	781398f100	Add machine mirach to secrets	2025-12-03 13:48:44 +07:00
kurogeek	327de68b00	Update secret mirach-age.key	2025-12-03 13:48:44 +07:00
kurogeek	41f5e7a04e	mob next [ci-skip] [ci skip] [skip ci]	2025-12-03 13:48:11 +07:00
kurogeek	8e8374c5c2	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/mirach/disko.nix	2025-12-03 13:47:57 +07:00
kurogeek	58bd02575f	alpheratz machine	2025-12-03 13:40:18 +07:00
kurogeek	5ecff1bc9e	bump clan-core	2025-12-03 09:58:39 +07:00
kurogeek	7a381a310e	tor connection	2025-11-28 14:55:21 +07:00
kurogeek	36c31507e2	Update vars via generator tor_tor for machine vega	2025-11-28 14:54:35 +07:00
kurogeek	bfea371501	Update vars via generator tor_tor for machine sirius	2025-11-28 14:54:32 +07:00
kurogeek	ff0bc698d4	Update vars via generator tor_tor for machine rigel	2025-11-28 14:54:29 +07:00
kurogeek	11c109970a	Update vars via generator tor_tor for machine ramus	2025-11-28 14:54:26 +07:00
kurogeek	ad95a8710c	Update vars via generator tor_tor for machine b4l	2025-11-28 14:54:23 +07:00
kurogeek	e6760d320d	ramus machine	2025-11-26 14:01:11 +07:00
kurogeek	bfeea4156b	disappearing default route is fixed by a hacky way	2025-11-21 16:53:55 +07:00
kurogeek	3aa93c1333	nameservers whitehouse	2025-11-18 13:58:59 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKjxEg6JAAg6pIhMqi8psKMllCufu31vN3PglLoKxpw`
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINr9XJnFULOdC7IBSGevI9ur/2vv3Q2BxFxsSFP0P2lq`
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvItw14tB6fc6gdZalSkZPOUSWGsTNyLnXk4yLAnkrb`