mob next [ci-skip] [ci skip] [skip ci]

lastFile:modules/clan/phonebox/default.nix

flake.lock

@@ -20,11 +20,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766984802,
+        "lastModified": 1764799743,
-        "narHash": "sha256-SYZ/MXVtJEb3sRWxvPL/2HtpSL1CzQgu1o8ASXqCO98=",
+        "narHash": "sha256-MbbiNG/bhqe+4z7ml8TefIs4swSonmiV0CimCntXuCg=",
         "ref": "refs/heads/main",
-        "rev": "052b66d8dc724c3e519b9003281c2f9a210fc380",
+        "rev": "ddc0f9fabf33ad000676a33e97be6b5df12a4560",
-        "revCount": 11770,
+        "revCount": 11417,
         "type": "git",
         "url": "https://git.clan.lol/clan/clan-core"
       },
@@ -49,11 +49,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766977667,
+        "lastModified": 1762942435,
-        "narHash": "sha256-LUALgG4ZpsA0k7pGYzMDto/r6T8aIPlYTok3lGlojjA=",
+        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
-        "rev": "3f852546b5d8bd2e9659a81c6b2cc14922e63a94",
+        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
         "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/3f852546b5d8bd2e9659a81c6b2cc14922e63a94.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -88,11 +88,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766150702,
+        "lastModified": 1764627417,
-        "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
+        "narHash": "sha256-D6xc3Rl8Ab6wucJWdvjNsGYGSxNjQHzRc2EZ6eeQ6l4=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
+        "rev": "5a88a6eceb8fd732b983e72b732f6f4b8269bef3",
         "type": "github"
       },
       "original": {
@@ -121,26 +121,6 @@
         "type": "github"
       }
     },
-    "home-manager": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1768068402,
-        "narHash": "sha256-bAXnnJZKJiF7Xr6eNW6+PhBf1lg2P1aFUO9+xgWkXfA=",
-        "owner": "nix-community",
-        "repo": "home-manager",
-        "rev": "8bc5473b6bc2b6e1529a9c4040411e1199c43b4c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "home-manager",
-        "type": "github"
-      }
-    },
     "import-tree": {
       "locked": {
         "lastModified": 1752730890,
@@ -182,11 +162,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766784396,
+        "lastModified": 1764161084,
-        "narHash": "sha256-rIlgatT0JtwxsEpzq+UrrIJCRfVAXgbYPzose1DmAcM=",
+        "narHash": "sha256-HN84sByg9FhJnojkGGDSrcjcbeioFWoNXfuyYfJ1kBE=",
         "owner": "nix-darwin",
         "repo": "nix-darwin",
-        "rev": "f0c8e1f6feb562b5db09cee9fb566a2f989e6b55",
+        "rev": "e95de00a471d07435e0527ff4db092c84998698e",
         "type": "github"
       },
       "original": {
@@ -210,11 +190,11 @@
     },
     "nixos-facter-modules": {
       "locked": {
-        "lastModified": 1766558141,
+        "lastModified": 1764252389,
-        "narHash": "sha256-Ud9v49ZPsoDBFuyJSQ2Mpw1ZgAH/aMwUwwzrVoetNus=",
+        "narHash": "sha256-3bbuneTKZBkYXlm0bE36kUjiDsasoIC1GWBw/UEJ9T4=",
         "owner": "nix-community",
         "repo": "nixos-facter-modules",
-        "rev": "e796d536e3d83de74267069e179dc620a608ed7d",
+        "rev": "5ea68886d95218646d11d3551a476d458df00778",
         "type": "github"
       },
       "original": {
@@ -225,11 +205,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1768395095,
+        "lastModified": 1761656231,
-        "narHash": "sha256-ZhuYJbwbZT32QA95tSkXd9zXHcdZj90EzHpEXBMabaw=",
+        "narHash": "sha256-krgZxGAIIIKFJS+UB0l8do3sYUDWJc75M72tepmVMzE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "13868c071cc73a5e9f610c47d7bb08e5da64fdd5",
+        "rev": "d7f52a7a640bc54c7bb414cca603835bf8dd4b10",
         "type": "github"
       },
       "original": {
@@ -244,7 +224,6 @@
         "clan-core": "clan-core",
         "devshell": "devshell",
         "flake-parts": "flake-parts",
-        "home-manager": "home-manager",
         "import-tree": "import-tree",
         "liminix": "liminix",
         "nixpkgs": "nixpkgs",
@@ -259,11 +238,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1766894905,
+        "lastModified": 1764483358,
-        "narHash": "sha256-pn8AxxfajqyR/Dmr1wnZYdUXHgM3u6z9x0Z1Ijmz2UQ=",
+        "narHash": "sha256-EyyvCzXoHrbL467YSsQBTWWg4sR96MH1sPpKoSOelB4=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "61b39c7b657081c2adc91b75dd3ad8a91d6f07a7",
+        "rev": "5aca6ff67264321d47856a2ed183729271107c9c",
         "type": "github"
       },
       "original": {

flake.nix

@@ -15,10 +15,6 @@
       inputs.nixpkgs-lib.follows = "nixpkgs";
       url = "github:hercules-ci/flake-parts";
     };
-    home-manager = {
-      inputs.nixpkgs.follows = "nixpkgs";
-      url = "github:nix-community/home-manager";
-    };
     import-tree.url = "github:vic/import-tree";
     nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
     treefmt-nix = {
@@ -45,8 +41,6 @@
           ./fmt.nix
           ./shell.nix
 
-          ./overlays
-          ./modules/nixos
           ./machines
           ./routers
           ./inventories
@@ -67,7 +61,6 @@
             };
             packages.think = pkgs.think-gtcm;
             packages.think-be = pkgs.think-backend-gtcm;
-            packages.file-uploader = pkgs.gtcm-file-uploader;
           };
       }
     );

inventories/default.nix

@@ -1,5 +1,4 @@
 {
-  imports = [ ./personal-computer.nix ];
   clan = {
     inventory = {
 
@@ -12,7 +11,6 @@
         b4l = [
           "rigel"
           "neptune"
-          "rana"
         ];
         phonebox = [
           "neptune"
@@ -111,6 +109,12 @@
           roles.default.machines."adhil".settings = {
             ata-ethernet-iface = "end0";
           };
+          roles.default.machines."rigel".settings = {
+            extraClientNumbers = [
+              "01"
+              "02"
+            ];
+          };
         };
 
         pocket-id = {
@@ -162,6 +166,13 @@
           };
           roles.default.machines.b4l = { };
         };
+        pingvin = {
+          module = {
+            name = "pingvin";
+            input = "self";
+          };
+          roles.default.machines.b4l = { };
+        };
         paperless = {
           module = {
             name = "paperless";
@@ -195,54 +206,6 @@
             };
           };
         };
-        git-daemon = {
-          module = {
-            name = "git-daemon";
-            input = "self";
-          };
-          roles.default.machines.neptune = {
-            settings.repositories =
-              let
-                defaults = rec {
-                  write-access = [
-                    "10.0.0.0/24"
-                    "200:d7b1:c5d5:ea7:27ad:6837:40f6:404d/128"
-                  ];
-                  read-access = write-access;
-                };
-                PUBLIC = {
-                  read-access = [
-                    "10.0.0.0/24"
-                    "0200::/7"
-                  ];
-                };
-              in
-              builtins.mapAttrs (_: override: defaults // override) {
-                "9e" = PUBLIC;
-                archive-dl = { };
-                barrytown = { };
-                cleanroom = PUBLIC;
-                community-memory = { };
-                eris = { };
-                ftdi-sd-spi = { };
-                go-go-gadget = { };
-                hacking-the-kindle = { };
-                islands = PUBLIC;
-                kt = { };
-                legba = { };
-                llb = PUBLIC;
-                llc = PUBLIC;
-                lora = { };
-                mute = { };
-                navi = { };
-                notmuch-memoryhole = PUBLIC;
-                pms5003 = { };
-                thinc = PUBLIC;
-                toad = { };
-                yggdrasil-erlang = { };
-              };
-          };
-        };
       };
     };
   };

inventories/personal-computer.nix

@@ -1,37 +0,0 @@
-{
-  clan.inventory = {
-    tags = {
-      kde-desktop = [ "rana" ];
-      personal-computer = [ "rana" ];
-    };
-
-    instances = {
-      emmie-home = {
-        module = {
-          name = "home-user";
-          input = "self";
-        };
-        roles.default.settings = {
-          username = "emmie";
-          kbLayout = "us,th";
-          kbOptions = "grp:win_space_toggle,grp:alt_shift_toggle";
-        };
-        roles.default.machines."rana" = { };
-      };
-      personal-computer = {
-        module = {
-          name = "personal-computer";
-          input = "self";
-        };
-        roles.default.tags."personal-computer" = { };
-      };
-      kde = {
-        module = {
-          name = "kde";
-          input = "clan-core";
-        };
-        roles.default.tags."kde-desktop" = { };
-      };
-    };
-  };
-}

inventory.json

@@ -20,9 +20,6 @@
     },
     "buna": {
       "installedAt": 1765343708
-    },
-    "rana": {
-      "installedAt": 1768294839
     }
   }
 }

machines/adhil/configuration.nix

@@ -7,7 +7,7 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   # clan.core.networking.targetHost = "root@";
 
-  clan.core.settings.name = "adhil";
+  clan.meta.name = "adhil";
-  # clan.meta.description = "Raspberry Pi 4 SBC board for one of w phone network. (With w office)";
+  clan.meta.description = "Raspberry Pi 4 SBC board for one of w phone network. (With w office)";
 
 }

machines/almach/configuration.nix

@@ -7,7 +7,7 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   # clan.core.networking.targetHost = "root@";
 
-  clan.core.settings.name = "almach";
+  clan.meta.name = "almach";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/alpheratz/configuration.nix

@@ -7,7 +7,7 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   # clan.core.networking.targetHost = "root@";
 
-  clan.core.settings.name = "alpheratz";
+  clan.meta.name = "alpheratz";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/b4l/services/nextcloud.nix

@@ -19,7 +19,7 @@ in
 
   services.nextcloud = {
     hostName = ncDomain;
-    package = pkgs.nextcloud32;
+    package = pkgs.nextcloud31;
 
     settings = {
 

machines/b4l/services/pingvin.nix

@@ -0,0 +1,45 @@
+{
+  pkgs,
+  config,
+  ...
+}:
+let
+  serviceName = "${config.networking.hostName}-pingvin";
+  domain-name = "${
+    config.clan.core.vars.generators."${serviceName}".files.subdomain.value
+  }.${config.networking.fqdn}";
+in
+{
+  clan.core.vars.generators."${serviceName}" = {
+    files = {
+      subdomain.secret = false;
+    };
+    prompts = {
+      subdomain = {
+        persist = true;
+        type = "line";
+        description = "Sub-domain for Pingvin. Default:(share)";
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.xkcdpass
+      pkgs.coreutils
+    ];
+
+    script = ''
+      prompt_domain=$(cat "$prompts"/subdomain)
+      if [[ -n "''${prompt_domain-}" ]]; then
+        echo $prompt_domain | tr -d "\n" > "$out"/subdomain
+      else
+        echo -n "share" > "$out"/subdomain
+      fi
+    '';
+  };
+
+  services.pingvin-share = {
+    nginx.enable = true;
+    https = true;
+    hostname = domain-name;
+  };
+}

machines/buna/configuration.nix

@@ -7,7 +7,7 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   # clan.core.networking.targetHost = "root@";
 
-  clan.core.settings.name = "buna";
+  clan.meta.name = "buna";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network. (With w whitehouse)";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network. (With w whitehouse)";
 
 }

machines/default.nix

@@ -1,8 +1,4 @@
-{
+{ inputs, self, ... }:
-  inputs,
-  self,
-  ...
-}:
 {
   imports = [
     inputs.clan-core.flakeModules.default

machines/mirach/configuration.nix

@@ -7,7 +7,7 @@
   clan.core.sops.defaultGroups = [ "admins" ];
   # clan.core.networking.targetHost = "root@";
 
-  clan.core.settings.name = "mirach";
+  clan.meta.name = "mirach";
-  # clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
+  clan.meta.description = "Radxa X4 SBC board for one of w phone network.";
 
 }

machines/neptune/configuration.nix

@@ -56,7 +56,7 @@
     "tls://astrra.space:55535"
   ];
 
-  clan.core.settings.name = "neptune";
+  clan.meta.name = "neptune";
-  # clan.meta.description = "Radxa SBC board for testing. (With vi)";
+  clan.meta.description = "Radxa SBC board for testing. (With vi)";
 
 }

machines/ramus/configuration.nix

@@ -5,10 +5,10 @@
     system = "x86_64-linux";
   };
 
-  clan.core.settings.name = "ramus";
+  clan.meta.name = "ramus";
-  # clan.meta.description = ''
+  clan.meta.description = ''
-  #   A Hetzner VPS machine own by Alex.
+    A Hetzner VPS machine own by Alex.
-  # '';
+  '';
 
   clan.core.sops.defaultGroups = [ "admins" ];
   clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

machines/ramus/think-greater-chiangmai.nix

@@ -1,6 +1,6 @@
 { self, config, ... }:
 let
-  commonSettings = rec {
+  commonSettings = {
     APP_NAME = "Laravel";
     APP_ENV = "local";
     APP_KEY._secret = config.clan.core.vars.generators.greaterchiangmai.files.app_key.path;
@@ -13,7 +13,6 @@ let
     DB_DATABASE = "thinkgtcm";
     DB_USERNAME = "gtcm";
 
-    R2_SCHEMA_URL = "https://${R2_BUCKET}.${R2_REGION}.your-objectstorage.com/test-large-files/";
     R2_ACCESS_KEY_ID = config.clan.core.vars.generators.greaterchiangmai-s3.files.access_key_id.value;
     R2_SECRET_ACCESS_KEY._secret =
       config.clan.core.vars.generators.greaterchiangmai-s3.files.secret_access_key.path;
@@ -21,8 +20,6 @@ let
     R2_BUCKET = config.clan.core.vars.generators.greaterchiangmai-s3.files.bucket.value;
     R2_ENDPOINT = config.clan.core.vars.generators.greaterchiangmai-s3.files.endpoint.value;
 
-    R2_BUCKET_NAME = R2_BUCKET;
-
     LOG_CHANNEL = "stack";
     LOG_LEVEL = "debug";
 

machines/rana/configuration.nix

@@ -1,12 +0,0 @@
-{ self, ... }:
-{
-  imports = [
-    self.nixosModules.common
-  ];
-
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-  system.stateVersion = "25.11";
-  clan.core.sops.defaultGroups = [ "admins" ];
-}

machines/rana/disko.nix

@@ -1,90 +0,0 @@
-{ ... }:
-let
-  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/nvme-SAMSUNG_MZVL81T0HFLB-00BLL_S7XKNF0Y966645";
-in
-{
-
-  boot.loader = {
-    systemd-boot = {
-      enable = true;
-    };
-    efi = {
-      canTouchEfiVariables = true;
-    };
-  };
-
-  disko.devices = {
-    disk = {
-      "os-${hashDisk os}" = {
-        type = "disk";
-        device = os;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "nofail" ];
-              };
-            };
-            system = {
-              size = "100%";
-              content = {
-                type = "zfs";
-                pool = "zroot";
-              };
-            };
-            swap = {
-              size = "16G";
-              content = {
-                type = "swap";
-              };
-            };
-          };
-        };
-      };
-    };
-    zpool = {
-      zroot = {
-        type = "zpool";
-        rootFsOptions = {
-          mountpoint = "none";
-          compression = "lz4";
-          acltype = "posixacl";
-          xattr = "sa";
-          "com.sun:auto-snapshot" = "true";
-        };
-        options.ashift = "12";
-        datasets = {
-          "root" = {
-            type = "zfs_fs";
-            options.mountpoint = "none";
-          };
-          "root/nixos" = {
-            type = "zfs_fs";
-            options.mountpoint = "/";
-            mountpoint = "/";
-          };
-          "root/home" = {
-            type = "zfs_fs";
-            options.mountpoint = "/home";
-            mountpoint = "/home";
-          };
-          "root/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/tmp";
-            options = {
-              mountpoint = "/tmp";
-              sync = "disabled";
-            };
-          };
-        };
-      };
-    };
-  };
-}

machines/rigel/configuration.nix

@@ -1,9 +1,4 @@
-{
+{ config, ... }:
-  inputs,
-  config,
-  pkgs,
-  ...
-}:
 {
   imports = [
     (import ../../lib/auto-accept-zerotier-members.nix {
@@ -13,54 +8,8 @@
         "2bd36db8cc" # kurogeek-thinkpad
       ];
     })
-
-    inputs.self.nixosModules.inventree
   ];
 
-  nixpkgs.overlays = [
-    inputs.self.overlays.default
-  ];
-
-  clan.core.vars.generators.inventree = {
-    files = {
-      secret-key = {
-        owner = "inventree";
-        group = "inventree";
-        secret = true;
-      };
-      oidc-key = {
-        owner = "inventree";
-        group = "inventree";
-        secret = true;
-      };
-      admin-password = {
-        owner = "inventree";
-        group = "inventree";
-        secret = true;
-      };
-    };
-    runtimeInputs = [
-      pkgs.pwgen
-      pkgs.xkcdpass
-    ];
-    script = ''
-      pwgen -s 32 1 > $out/secret-key
-      pwgen -s 32 1 > $out/oidc-key
-      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
-    '';
-  };
-
-  networking.firewall.allowedTCPPorts = [ 80 ];
-
-  services.inventree = {
-    enable = true;
-    hostName = "rigel.local";
-    config.site_url = "http://${config.services.inventree.hostName}";
-    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
-    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
-    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
-  };
-
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
   clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

machines/sirius/configuration.nix

@@ -19,6 +19,7 @@
     system = "x86_64-linux";
   };
 
+  networking.fqdn = config.clan.core.vars.generators.vega-internal-domain.files.name.value;
   system.stateVersion = "25.11";
 
 }

modules/clan/actual-budget/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "actual-budget";
   manifest.description = "A local-first personal finance app ";
-  manifest.readme = "A local-first personal finance app";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "A default server role.";
 
     perInstance.nixosModule =
       {

modules/clan/git-daemon/default.nix

@@ -1,174 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "git-daemon";
-  manifest.description = "a really simple server for git repositories";
-  manifest.readme = "a really simple server for git repositories";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    description = "a default server role";
-    interface =
-      { lib, ... }:
-      {
-        options = with lib; {
-          directory = lib.mkOption {
-            type = types.str;
-            default = "/var/git";
-          };
-          repositories = lib.mkOption {
-            type =
-              with lib.types;
-              attrsOf (
-                submodule (
-                  { name, ... }:
-                  {
-                    options = {
-                      name = lib.mkOption {
-                        type = str;
-                        default = name;
-                      };
-                      read-access = lib.mkOption {
-                        type = listOf str;
-                        default = [ ];
-                      };
-                      write-access = lib.mkOption {
-                        type = listOf str;
-                        default = [ ];
-                      };
-                    };
-                  }
-                )
-              );
-            default = { };
-          };
-        };
-      };
-    perInstance =
-      {
-        settings,
-        ...
-      }:
-      {
-        nixosModule =
-          {
-            pkgs,
-            lib,
-            config,
-            ...
-          }:
-          {
-            systemd.services.git-init = {
-              serviceConfig = {
-                Type = "oneshot";
-                User = config.services.gitDaemon.user;
-                Group = config.services.gitDaemon.group;
-                ExecStartPre = toString [
-                  "+${pkgs.coreutils}/bin/install"
-                  "--directory"
-                  "--owner=${config.services.gitDaemon.user}"
-                  "--group=${config.services.gitDaemon.group}"
-                  "--mode=0750"
-                  settings.directory
-                ];
-                ExecStart =
-                  let
-                    git-template = pkgs.stdenv.mkDerivation {
-                      name = "git-template";
-                      buildCommand = ''
-                        cp --no-preserve=mode,ownership --recursive \
-                          ${pkgs.git}/share/git-core/templates $out
-                        install -m550 $out/hooks/post-update{.sample,}
-                      '';
-                    };
-                    init-script =
-                      { name, ... }:
-                      pkgs.writeShellScript "git-init-${name}" ''
-                        ${pkgs.git}/bin/git init \
-                          --bare --template=${git-template} --shared=0660 \
-                          ${settings.directory}/${name}.git
-                        ${pkgs.git}/bin/git \
-                          -C ${settings.directory}/${name}.git \
-                          config set receive.denyNonFastforwards false
-                      '';
-                  in
-                  map init-script (lib.attrValues settings.repositories);
-              };
-            };
-
-            services.gitDaemon = {
-              enable = true;
-              user = "git";
-              group = "git";
-              options =
-                let
-                  firewall = pkgs.writeText "git-daemon-firewall.json" (
-                    builtins.toJSON (builtins.attrValues settings.repositories)
-                  );
-                  hook = pkgs.writers.writePython3 "hook.py" { flakeIgnore = [ "E" ]; } ''
-                    import os, sys, enum, pathlib, ipaddress, json
-
-                    class Service(enum.Enum):
-                        UploadPack = enum.auto()
-                        ReceivePack = enum.auto()
-                        UploadArchive = enum.auto()
-
-                        @classmethod
-                        def parse(cls, string):
-                            return {
-                                'upload-pack': cls.UploadPack,
-                                'receive-pack': cls.ReceivePack,
-                                'upload-archive': cls.UploadArchive
-                            }[string]
-
-                        @property
-                        def service(self):
-                            return {
-                                UploadPack: 'read-access',
-                                ReceivePack: 'write-access'
-                            }[self]
-                    UploadPack = Service.UploadPack
-                    ReceivePack = Service.ReceivePack
-
-                    def parse_remote_addr(remote_addr):
-                        if remote_addr.startswith('[') and remote_addr.endswith(']'):
-                            return ipaddress.ip_address(remote_addr[1:-1])
-                        return ipaddress.ip_address(remote_addr)
-
-                    service = Service.parse(sys.argv[1])
-                    repo = pathlib.Path(sys.argv[2]).stem
-                    client = parse_remote_addr(os.environ['REMOTE_ADDR'])
-
-                    with open("${firewall}", 'r') as f:
-                        firewall = json.load(f)
-
-                    for rule in firewall:
-                        if rule["name"] == repo:
-                           for network in rule[service.service]:
-                               if client in ipaddress.ip_network(network):
-                                   sys.exit(0)
-                    print('stairway denied')
-                    sys.exit(1)
-                  '';
-                in
-                toString [
-                  "--enable=upload-pack"
-                  "--enable=receive-pack"
-                  "--disable=upload-archive"
-                  "--access-hook=${hook}"
-                  "--informative-errors"
-                ];
-              exportAll = true;
-              basePath = settings.directory;
-            };
-
-            systemd.services.git-daemon = {
-              requires = [ "git-init.service" ];
-              after = [ "git-init.service" ];
-            };
-
-            networking.firewall.allowedTCPPorts = [ 9418 ];
-          };
-      };
-  };
-}

modules/clan/git-daemon/flake-module.nix

@@ -1,9 +0,0 @@
-{ lib, ... }:
-let
-  module = lib.modules.importApply ./default.nix { };
-in
-{
-  clan.modules = {
-    git-daemon = module;
-  };
-}

modules/clan/grafana/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "grafana";
   manifest.description = "Platform for data analytics and monitoring";
-  manifest.readme = "Platform for data analytics and monitoring";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "A default server role";
 
     perInstance.nixosModule =
       {

modules/clan/home-profiles/flake-module.nix

@@ -1,6 +0,0 @@
-{ lib, ... }:
-{
-  clan.modules = {
-    home-user = lib.modules.importApply ./home-user { };
-  };
-}

modules/clan/home-profiles/home-user/default.nix

@@ -1,64 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "common-user-home-manager";
-  manifest.description = "General users' home-manager profile generator";
-  manifest.readme = "General users' home-manager profile generator";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    description = "a default role for the user";
-    interface =
-      { lib, ... }:
-      {
-        options = {
-          username = lib.mkOption {
-            type = lib.types.str;
-          };
-          kbLayout = lib.mkOption {
-            type = lib.types.str;
-            default = "us";
-          };
-          kbOptions = lib.mkOption {
-            type = lib.types.str;
-            default = "grp:win_space_toggle";
-          };
-        };
-      };
-    perInstance =
-      { settings, ... }:
-      {
-        nixosModule =
-          { inputs, ... }:
-          let
-            username = settings.username;
-          in
-          {
-            imports = [ inputs.home-manager.nixosModules.home-manager ];
-
-            users.users.${username} = {
-              initialPassword = "";
-              isNormalUser = true;
-              extraGroups = [
-                "audio"
-                "video"
-                "networkmanager"
-              ];
-            };
-
-            services.xserver = {
-              enable = true;
-              xkb.layout = settings.kbLayout;
-              xkb.options = settings.kbOptions;
-            };
-
-            home-manager.useGlobalPkgs = true;
-            home-manager.useUserPackages = true;
-            home-manager.users.${username} = ./home.nix;
-            home-manager.extraSpecialArgs = {
-              inherit inputs username;
-            };
-          };
-      };
-  };
-}

modules/clan/home-profiles/home-user/home.nix

@@ -1,24 +0,0 @@
-{
-  osConfig,
-  pkgs,
-  lib,
-  username,
-  ...
-}:
-{
-  home = {
-    inherit username;
-    homeDirectory = lib.mkForce "/home/${username}";
-    stateVersion = osConfig.system.stateVersion;
-    packages = with pkgs; [
-      libreoffice
-      element-desktop
-      brave
-      firefox
-      keepassxc
-      vlc
-      thunderbird
-    ];
-  };
-  programs.home-manager.enable = true;
-}

modules/clan/jukebox/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "jukebox";
   manifest.description = "mpd server, library on removable disks";
-  manifest.readme = "mpd server, library on removable disks";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
     interface =
       { lib, ... }:
       {
@@ -113,22 +111,19 @@
 
             services.mpd = {
               enable = true;
-              openFirewall = true;
+              musicDirectory = settings.baseDir;
-              settings = {
+              network.listenAddress = "any";
-                bind_to_address = "any";
+              extraConfig = ''
-                music_directory = settings.baseDir;
+                audio_output {
-                audio_output = [
+                  type "pulse"
-                  {
+                  name "jukebox"
-                    type = "pulse";
+                  server "localhost"
-                    name = "jukebox";
-                    server = "localhost";
                 }
-                ];
+              '';
-              };
             };
 
             networking.firewall.interfaces = lib.genAttrs settings.binds (_: {
-              allowedTCPPorts = [ config.services.mpd.settings.port ];
+              allowedTCPPorts = [ config.services.mpd.network.port ];
             });
 
             environment.systemPackages = [ pkgs.mpc ];

modules/clan/nextcloud/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "nextcloud";
   manifest.description = "Nextcloud server, a safe home for all your data";
-  manifest.readme = "Nextcloud server, a safe home for all your data";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
 
     perInstance.nixosModule =
       {

modules/clan/paperless/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "paperless";
   manifest.description = "A community-supported supercharged document management system: scan, index and archive all your documents";
-  manifest.readme = "A community-supported supercharged document management system: scan, index and archive all your documents";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
 
     perInstance.nixosModule =
       {

modules/clan/personal-computer/automatic-timezone.nix

@@ -1,8 +0,0 @@
-{ lib, ... }:
-{
-  services.automatic-timezoned.enable = true;
-  services.geoclue2 = {
-    enableDemoAgent = lib.mkForce true;
-    geoProviderUrl = "https://beacondb.net/v1/geolocate";
-  };
-}

modules/clan/personal-computer/default.nix

@@ -1,21 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "personal-computer";
-  manifest.description = "A service for configuring personal computer such as printing, automatic-timezone, etc.";
-  manifest.readme = "A service for configuring personal computer such as printing, automatic-timezone, etc.";
-  manifest.categories = [ "System" ];
-
-  roles.default = {
-    description = "an only one default role";
-    perInstance.nixosModule =
-      { inputs, lib, ... }:
-      {
-        imports = [
-          (inputs.import-tree.initFilter (
-            p: !lib.hasSuffix "default.nix" p && !lib.hasSuffix "flake-module.nix" p
-          ) ./.)
-        ];
-      };
-  };
-}

modules/clan/personal-computer/desktop-environment.nix

@@ -1,4 +0,0 @@
-{ config, ... }:
-{
-  security.pam.services."sddm".kwallet.enable = config.services.desktopManager.plasma6.enable;
-}

modules/clan/personal-computer/flake-module.nix

@@ -1,6 +0,0 @@
-{ lib, ... }:
-{
-  clan.modules = {
-    personal-computer = lib.modules.importApply ./default.nix { };
-  };
-}

modules/clan/personal-computer/libinput.nix

@@ -1,11 +0,0 @@
-{
-  services = {
-    libinput = {
-      enable = true;
-      touchpad = {
-        disableWhileTyping = true;
-        naturalScrolling = true;
-      };
-    };
-  };
-}

modules/clan/personal-computer/printing.nix

@@ -1,62 +0,0 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}:
-let
-  allowManageGroups = [
-    "root"
-    "wheel"
-    "lpadmin"
-  ];
-  polkitAllowGroups = builtins.concatStringsSep "||" (
-    builtins.map (group: ''subject.isInGroup("${group}")'') allowManageGroups
-  );
-
-  printerMember = lib.map (user: user.name) (
-    lib.attrsets.attrsToList (
-      lib.attrsets.filterAttrs (name: value: value.isNormalUser) config.users.users
-    )
-  );
-
-in
-{
-  services.printing = {
-    enable = true;
-    drivers = [
-      pkgs.brlaser
-      pkgs.gutenprint
-    ];
-
-    extraFilesConf = ''
-      SystemGroup ${builtins.concatStringsSep " " allowManageGroups}
-    '';
-  };
-
-  security.polkit = {
-    enable = true;
-
-    extraConfig = ''
-      polkit.addRule(function(action, subject) {
-        var actionMatchs = (
-          action.id.indexOf('org.opensuse.cupspkhelper.mechanism.') === 0
-        );
-        if (actionMatchs) {
-          if (${polkitAllowGroups}) {
-            return polkit.Result.YES
-          }
-        }
-      });
-    '';
-  };
-
-  hardware.sane = {
-    enable = true;
-  };
-
-  users.groups.lpadmin.members = printerMember;
-  users.groups.lp.members = printerMember;
-  users.groups.scanner.members = printerMember;
-
-}

modules/clan/personal-computer/users.nix

@@ -1,11 +0,0 @@
-{ lib, ... }:
-{
-  users.mutableUsers = lib.mkForce true;
-  security.polkit.extraConfig = ''
-    polkit.addRule(function(action, subject) {
-      if ((action.id == "org.freedesktop.accounts.change-own-password")) {
-        return polkit.Result.AUTH_SELF;
-      }
-    });
-  '';
-}

modules/clan/personal-computer/wireless.nix

@@ -1,4 +0,0 @@
-{
-  networking.networkmanager.enable = true;
-  hardware.bluetooth.enable = true;
-}

modules/clan/phonebox/default.nix

@@ -1,16 +1,11 @@
-{
+{ clanLib, ... }:
-  clanLib,
-  ...
-}:
 {
   _class = "clan.service";
   manifest.name = "phonebox";
-  manifest.description = "A peer to peer phone relay network built on top of yggdrasil.";
+  manifest.description = "";
-  manifest.readme = "A peer to peer phone relay network built on top of yggdrasil.";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
     interface =
       { lib, ... }:
       {
@@ -19,10 +14,10 @@
           description = "An Ethernet interface that connect to ATA box.";
           default = "enp2s0";
         };
-        options.ownerName = lib.mkOption {
+        options.extraClientNumbers = lib.mkOption {
-          type = lib.types.str;
+          type = with lib.types; listOf str;
-          description = "";
+          description = "List of client suffix number.";
-          default = "";
+          default = [ ];
         };
       };
     perInstance =
@@ -32,7 +27,6 @@
         ...
       }:
       {
-
         nixosModule =
           {
             lib,
@@ -45,57 +39,12 @@
               propagatedNativeBuildInputs = [ pkgs.spandsp3 ];
             });
 
-            machines = lib.attrNames roles.default.machines;
-
             user = "asterisk";
             faxDir = "/run/asterisk/fax";
             rtpPortFrom = 10000;
             rtpPortTo = 20000;
             ata-interface = settings.ata-ethernet-iface;
 
-            contactList = builtins.map (machineName: {
-              name = "${clanLib.getPublicValue {
-                flake = config.clan.core.settings.directory;
-                machine = machineName;
-                generator = "phonebox";
-                file = "owner-name";
-                default = null;
-              }}";
-              number = "${
-                clanLib.getPublicValue {
-                  flake = config.clan.core.settings.directory;
-                  machine = machineName;
-                  generator = "phonebox";
-                  file = "server-prefix-number";
-                  default = null;
-                }
-              }${
-                clanLib.getPublicValue {
-                  flake = config.clan.core.settings.directory;
-                  machine = machineName;
-                  generator = "phonebox";
-                  file = "ata-local-number";
-                  default = null;
-                }
-              }";
-            }) machines;
-
-            createContactListTiff =
-              let
-                contactTXT = lib.concatStringsSep "\n" (
-                  builtins.map (contact: "${contact.number}\t\t: \t\t${contact.name}") contactList
-                );
-              in
-              pkgs.writeShellApplication {
-                name = "create-contact-tiff";
-                text = ''
-                  magick -background white -fill black -pointsize 20 -font DejaVu-Sans label:"${contactTXT}" "$1"
-                  magick "$1" -border 20x50 -bordercolor white "$1"
-                  magick "$1" -resize 1728x -units PixelsPerInch -compress Group4 -density 204x196 -monochrome -depth 1 "$1"
-                '';
-                runtimeInputs = [ pkgs.imagemagick ];
-              };
-
             genServerSIPEndpoint =
               { hostname, address }:
               ''
@@ -125,6 +74,22 @@
                 max_contacts=1
               '';
 
+            genLocalSIPEndpointV6 =
+              { localNumber }:
+              ''
+                [${localNumber}](internal_endpoint)
+                transport=transport-udp6
+                aors=${localNumber}
+                auth=${localNumber}
+
+                [${localNumber}](userpass_auth)
+                username=${localNumber}
+                password=${localNumber}
+
+                [${localNumber}](dynamiic_aor)
+                max_contacts=1
+              '';
+
             genLocalExtenConf =
               { localNumber }:
               ''
@@ -158,35 +123,26 @@
                 throw "clanService/yggdrasil is required";
           in
           {
-            clan.core.vars.generators.phonebox = builtins.break {
+            clan.core.vars.generators.phonebox = {
               files = {
                 server-prefix-number.secret = false;
                 ata-local-number.secret = false;
-                owner-name.secret = false;
               };
 
               prompts = {
                 server-prefix-number = {
                   type = "line";
-                  persist = true;
                   description = "Server prefix number: indicate server to connect to [10XX]";
                 };
                 ata-local-number = {
-                  persist = true;
                   type = "line";
                   description = "Local suffix number: indicate local number on the server [XX00]";
                 };
-                owner-name = {
-                  persist = true;
-                  type = "line";
-                  description = "The owner's name for this unit";
-                };
               };
 
               script = ''
                 cat $prompts/server-prefix-number > $out/server-prefix-number
                 cat $prompts/ata-local-number > $out/ata-local-number
-                cat $prompts/owner-name > $out/owner-name
               '';
             };
 
@@ -264,6 +220,7 @@
               package = lib.mkDefault asterisk;
               confFiles =
                 let
+                  machines = lib.attrNames roles.default.machines;
                   nodes = builtins.foldl' (
                     nodes: name:
                     nodes
@@ -339,22 +296,18 @@
                       same => n,Set(FAXFILE=${faxDir}/echo-''${UNIQUEID}.tiff)
                       same => n,Set(FAXECHO=true)
 
-                      exten => 888,1,Answer()
-                      same => n,Set(FAXFILE=${faxDir}/contact.tiff)
-                      same => n,System(${lib.getExe createContactListTiff} ''${FAXFILE})
-                      same => n,Set(FAXECHO=true)
-                      same => n,Playback(vm-goodbye)
-                      same => n,Wait(3)
-
                       exten => h,1,GotoIf($[''${FAXECHO}]?sendfax)
                       same => n,Hangup()
-                      same => n(sendfax),Originate(PJSIP/00,app,SendFAX,''${FAXFILE})
+                      same => n(sendfax),Originate(PJSIP/00,app,SendFAX,${faxDir}/echo-''${UNIQUEID}.tiff)
                       same => n,Set(FAXECHO=false)
 
                     ''
                     + (genLocalExtenConf {
                       localNumber = config.clan.core.vars.generators.phonebox.files.ata-local-number.value;
                     })
+                    + lib.concatStringsSep "\n" (
+                      builtins.map (number: genLocalExtenConf { localNumber = number; }) settings.extraClientNumbers
+                    )
                     + serverConf;
 
                   "rtp.conf" = ''
@@ -386,6 +339,7 @@
 
                       [base_endpoint](!)
                       type=endpoint
+                      transport=transport-udp
                       disallow=all
                       allow=ulaw,alaw,g722,gsm
                       direct_media=no
@@ -408,14 +362,13 @@
                     + (genLocalSIPEndpoint {
                       localNumber = config.clan.core.vars.generators.phonebox.files.ata-local-number.value;
                     })
+                    + lib.concatStringsSep "\n" (
+                      builtins.map (number: genLocalSIPEndpointV6 { localNumber = number; }) settings.extraClientNumbers
+                    )
                     + serverConf;
                 };
             };
 
-            environment.systemPackages = [
-              createContactListTiff
-            ];
-
             systemd.tmpfiles.rules = [
               "d ${faxDir}                            0755 ${user} ${user} - -"
             ];

modules/clan/phonebox/tests/vm/vars/per-machine/server/phonebox/owner-name/value

@@ -1 +0,0 @@
-fake_line_value

modules/clan/pingvin/default.nix

@@ -0,0 +1,23 @@
+{ ... }:
+{
+  _class = "clan.service";
+  manifest.name = "pingvin";
+  manifest.description = "A self-hosted file sharing platform that combines lightness and beauty, perfect for seamless and efficient file sharing.";
+  manifest.categories = [ "System" ];
+
+  roles.default = {
+
+    perInstance.nixosModule =
+      {
+        config,
+        ...
+      }:
+      {
+        services.pingvin-share = {
+          enable = true;
+        };
+
+        clan.core.state.pingvin-share.folders = [ config.services.pingvin-share.dataDir ];
+      };
+  };
+}

modules/clan/pingvin/flake-module.nix

@@ -0,0 +1,19 @@
+{ lib, ... }:
+let
+  module = lib.modules.importApply ./default.nix { };
+in
+{
+  clan.modules = {
+    pingvin = module;
+  };
+
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-pingvin = {
+        imports = [ ./tests/vm/default.nix ];
+
+        clan.modules."@clan/pingvin" = module;
+      };
+    };
+}

modules/clan/pingvin/tests/vm/default.nix

@@ -0,0 +1,42 @@
+{
+  ...
+}:
+{
+  name = "service-pingvin";
+
+  clan = {
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+
+      instances = {
+        pingvin-test = {
+          module.name = "@clan/pingvin";
+          module.input = "self";
+          roles.default.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = {
+      services.pingvin-share = {
+        hostname = "share.localhost";
+        frontend.port = 3000;
+        backend.port = 8000;
+      };
+    };
+  };
+
+  testScript = ''
+    start_all()
+
+    server.wait_for_unit("pingvin-share-frontend")
+
+    server.succeed("systemctl status pingvin-share-frontend")
+    server.wait_for_open_port(3000)
+    server.wait_for_open_port(8000)
+    server.succeed("curl -H \"Host: share.localhost\" http://127.0.0.1:3000 ")
+  '';
+}

modules/clan/pocket-id/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "pocket-id";
   manifest.description = "A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.";
-  manifest.readme = "A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
 
     perInstance.nixosModule =
       {

modules/clan/pulse-stream/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "pulse-stream";
   manifest.description = "stream audio to attached speakers";
-  manifest.readme = "stream audio to attached speakers";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default role";
     interface =
       { lib, ... }:
       {

modules/clan/stirling-pdf/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "stirling-pdf";
   manifest.description = "Your locally hosted one-stop-shop for all your PDF needs.";
-  manifest.readme = "Your locally hosted one-stop-shop for all your PDF needs.";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
     perInstance.nixosModule =
       {
         lib,

modules/clan/victoriametrics/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "Victoria Metrics";
   manifest.description = "VictoriaMetrics: fast, cost-effective monitoring solution and time series database";
-  manifest.readme = "VictoriaMetrics: fast, cost-effective monitoring solution and time series database";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
     perInstance.nixosModule =
       {
         config,

modules/clan/vikunja/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "vikunja";
   manifest.description = "The to-do app to organize your life.";
-  manifest.readme = "The to-do app to organize your life.";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default server role";
     perInstance.nixosModule =
       {
         lib,

modules/clan/yggdrasil/default.nix

@@ -3,11 +3,9 @@
   _class = "clan.service";
   manifest.name = "yggdrasil";
   manifest.description = "An in scalable routing as an encrypted IPv6 overlay network";
-  manifest.readme = "An in scalable routing as an encrypted IPv6 overlay network";
   manifest.categories = [ "System" ];
 
   roles.default = {
-    description = "a default peer role";
     perInstance.nixosModule =
       {
         lib,

modules/nixos/default.nix

@@ -1,5 +0,0 @@
-{
-  flake.nixosModules = {
-    inventree = import ../nixos/inventree;
-  };
-}

modules/nixos/inventree/default.nix

@@ -1,386 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  inherit (lib)
-    mkEnableOption
-    mkOption
-    types
-    mkIf
-    ;
-
-  configFormat = pkgs.formats.json { };
-  cfg = config.services.inventree;
-  pkg = cfg.package;
-  configFile = "${cfg.dataDir}/config.json";
-
-  inventree-invoke = pkgs.writeShellApplication {
-    name = "inventree-invoke";
-    text = ''
-      export INVENTREE_CONFIG_FILE=${configFile}
-      export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
-      export PYTHONPATH=${pkg.pythonPath}
-
-      exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
-    '';
-  };
-in
-{
-  options.services.inventree = {
-    enable = mkEnableOption "InvenTree parts manager";
-
-    package = lib.mkOption {
-      type = types.package;
-      default = pkgs.inventree;
-      description = ''
-        InvenTree package to use
-      '';
-    };
-
-    hostName = mkOption {
-      type = types.str;
-      description = "FQDN for the InvenTree instance.";
-    };
-
-    dataDir = mkOption {
-      type = types.path;
-      default = "/var/lib/inventree";
-      example = "/var/lib/inventree";
-      description = ''
-        The default path for all inventree data.
-      '';
-    };
-
-    secretKeyFile = mkOption {
-      type = types.path;
-      default = "${cfg.dataDir}/secret_key.txt";
-      description = ''
-        Path to a file containing the secret key
-      '';
-    };
-
-    config = mkOption {
-      type = types.submodule ({
-        freeformType = configFormat.type;
-        options = {
-          adminUser = mkOption {
-            type = types.str;
-            default = "admin";
-          };
-          adminPasswordFile = mkOption {
-            type = types.path;
-            description = "Path to password file for user `admin`";
-          };
-          site_url = mkOption {
-            type = types.str;
-            default = "https://${cfg.hostName}";
-          };
-          static_root = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/static";
-            description = ''
-              Static file storage
-            '';
-          };
-          media_root = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/media_root";
-            description = "Media root directory";
-          };
-          backup_dir = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/backups";
-            description = "Backup directory";
-          };
-          oidc_private_key_file = mkOption {
-            type = types.path;
-            default = "${cfg.dataDir}/oidc.key";
-          };
-        };
-      });
-      default = { };
-      description = ''
-        Config options, see https://docs.inventree.org/en/stable/start/config/
-        for details
-      '';
-    };
-
-    serverStartTimeout = mkOption {
-      type = types.str;
-      default = "10min";
-      description = ''
-        TimeoutStartSec for the server systemd service.
-        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
-        for more details
-      '';
-    };
-
-    serverStopTimeout = mkOption {
-      type = types.str;
-      default = "5min";
-      description = ''
-        TimeoutStopSec for the server systemd service.
-        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
-        for more details
-      '';
-    };
-
-  };
-
-  config = mkIf cfg.enable {
-    environment.systemPackages = [ inventree-invoke ];
-
-    systemd.tmpfiles.rules = (
-      map (dir: "d ${dir} 0755 inventree inventree") [
-        "${cfg.dataDir}"
-        "${cfg.dataDir}/static"
-        "${cfg.dataDir}/media_root"
-        "${cfg.dataDir}/backups"
-      ]
-    );
-
-    services.inventree.config = {
-      plugins_enabled = false;
-      plugin_file = "${cfg.dataDir}/plugins.txt";
-      plugin_dir = "${cfg.dataDir}/plugins";
-      database = {
-        ENGINE = "postgresql";
-        NAME = "inventree";
-        HOST = "/run/postgresql";
-      };
-    };
-
-    services.postgresql = {
-      enable = true;
-      ensureDatabases = [ "inventree" ];
-      ensureUsers = [
-        {
-          name = "inventree";
-          ensureDBOwnership = true;
-        }
-      ];
-    };
-
-    users.users.inventree = {
-      group = "inventree";
-      isSystemUser = true;
-      description = "InvenTree daemon user";
-    };
-
-    users.groups.inventree = { };
-
-    services.nginx.enable = true;
-
-    services.nginx.virtualHosts.${cfg.hostName} = {
-      locations =
-        let
-          unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
-        in
-        {
-          "/" = {
-            extraConfig = ''
-              client_max_body_size 100M;
-              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            '';
-            proxyPass = "http://unix:${unixPath}";
-          };
-          "/static/" = {
-            alias = "${cfg.config.static_root}/";
-            extraConfig = ''
-              expires 30d;
-            '';
-          };
-          "/media/" = {
-            alias = "${cfg.config.media_root}/";
-            extraConfig = ''
-              auth_request /auth;
-            '';
-          };
-          "/auth" = {
-            extraConfig = ''
-              internal;
-            '';
-            proxyPass = "http://unix:${unixPath}:/auth/";
-          };
-        };
-    };
-
-    systemd.targets.inventree = {
-      description = "Target for all InvenTree services";
-      wantedBy = [ "multi-user.target" ];
-      wants = [ "network-online.target" ];
-      after = [ "network-online.target" ];
-    };
-
-    systemd.services.inventree-config = {
-      description = "Inventree config generation";
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      before = [
-        "inventree-static.service"
-        "inventree-gunicorn.service"
-        "inventree-qcluster.service"
-      ];
-      serviceConfig = {
-        # User = "root";
-        # Group = "root";
-        User = "inventree";
-        Group = "inventree";
-        Type = "oneshot";
-        RemainAfterExit = true;
-        PrivateTmp = true;
-      };
-      environment = {
-        INVENTREE_CONFIG_FILE = configFile;
-        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
-        INVENTREE_AUTO_UPDATE = "1";
-        INVENTREE_PLUGINS_ENABLED = "1";
-        INVENTREE_PLUGIN_NOINSTALL = "1";
-        INVENTREE_STATIC_ROOT = cfg.config.static_root;
-        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
-        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
-        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
-        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
-        INVENTREE_DB_NAME = cfg.config.database.NAME;
-        INVENTREE_DB_HOST = cfg.config.database.HOST;
-        INVENTREE_DB_USER = "inventree";
-        INVENTREE_ADMIN_USER = cfg.config.adminUser;
-        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
-
-        INVENTREE_SITE_URL = cfg.config.site_url;
-
-        PYTHONPATH = pkg.pythonPath;
-      };
-      script = ''
-        set -euo pipefail
-
-        umask u=rwx,g=,o=
-
-        # chown inventree:inventree ${configFile}
-
-        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
-      '';
-    };
-
-    systemd.services.inventree-static = {
-      description = "InvenTree static migration";
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      before = [ "inventree-gunicorn.service" ];
-      environment = {
-        INVENTREE_CONFIG_FILE = configFile;
-        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
-        INVENTREE_AUTO_UPDATE = "1";
-        INVENTREE_PLUGINS_ENABLED = "1";
-        INVENTREE_PLUGIN_NOINSTALL = "1";
-        INVENTREE_STATIC_ROOT = cfg.config.static_root;
-        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
-        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
-        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
-        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
-        INVENTREE_DB_NAME = cfg.config.database.NAME;
-        INVENTREE_DB_HOST = cfg.config.database.HOST;
-        INVENTREE_DB_USER = "inventree";
-        INVENTREE_ADMIN_USER = cfg.config.adminUser;
-        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
-        INVENTREE_SITE_URL = cfg.config.site_url;
-
-        PYTHONPATH = pkg.pythonPath;
-      };
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic  --no-input
-        '';
-      };
-    };
-
-    systemd.services.inventree-gunicorn = {
-      description = "InvenTree Gunicorn server";
-      requiredBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      #wantedBy = [ "inventree.target" ];
-      environment = {
-        INVENTREE_CONFIG_FILE = configFile;
-        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
-        INVENTREE_AUTO_UPDATE = "1";
-        INVENTREE_PLUGINS_ENABLED = "1";
-        INVENTREE_PLUGIN_NOINSTALL = "1";
-        INVENTREE_STATIC_ROOT = cfg.config.static_root;
-        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
-        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
-        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
-        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
-        INVENTREE_DB_NAME = cfg.config.database.NAME;
-        INVENTREE_DB_HOST = cfg.config.database.HOST;
-        INVENTREE_DB_USER = "inventree";
-        INVENTREE_ADMIN_USER = cfg.config.adminUser;
-        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
-        INVENTREE_SITE_URL = cfg.config.site_url;
-
-        PYTHONPATH = pkg.pythonPath;
-      };
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
-            --pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
-        '';
-      };
-    };
-
-    systemd.sockets.inventree-gunicorn = {
-      wantedBy = [ "sockets.target" ];
-      partOf = [ "inventree.target" ];
-      socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
-    };
-
-    systemd.services.inventree-qcluster = {
-      description = "InvenTree qcluster server";
-      requiredBy = [ "inventree.target" ];
-      wantedBy = [ "inventree.target" ];
-      partOf = [ "inventree.target" ];
-      environment = {
-        INVENTREE_CONFIG_FILE = configFile;
-        INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
-        INVENTREE_AUTO_UPDATE = "1";
-        INVENTREE_PLUGINS_ENABLED = "0";
-        INVENTREE_PLUGIN_NOINSTALL = "1";
-        INVENTREE_STATIC_ROOT = cfg.config.static_root;
-        INVENTREE_MEDIA_ROOT = cfg.config.media_root;
-        INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
-        INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
-        INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
-        INVENTREE_DB_NAME = cfg.config.database.NAME;
-        INVENTREE_DB_HOST = cfg.config.database.HOST;
-        INVENTREE_DB_USER = "inventree";
-        INVENTREE_ADMIN_USER = cfg.config.adminUser;
-        INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
-        INVENTREE_SITE_URL = cfg.config.site_url;
-
-        PYTHONPATH = pkg.pythonPath;
-      };
-      serviceConfig = {
-        User = "inventree";
-        Group = "inventree";
-        StateDirectory = "inventree";
-        #RuntimeDirectory = "inventree";
-        PrivateTmp = true;
-        ExecStart = ''
-          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
-        '';
-      };
-    };
-  };
-}

modules/nixos/think-backend-gtcm.nix

@@ -7,30 +7,6 @@
 let
   cfg = config.services.think-backend-greaterchiangmai;
   think-backend-gtcm = pkgs.think-backend-gtcm.override { dataDir = cfg.dataDir; };
-  file-uploader = pkgs.gtcm-file-uploader.override { dataDir = cfg.dataDir; };
-
-  nginxNodeProxyConfig = ''
-    proxy_pass http://127.0.0.1:3000;
-
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header Host $host;
-    proxy_set_header x-webobjects-server-protocol HTTP/1.0;
-    proxy_set_header x-webobjects-remote-host 127.0.0.1;
-    proxy_set_header x-webobjects-server-port $server_port;
-    proxy_set_header x-webobjects-server-name $server_name;
-    proxy_set_header x-webobjects-server-url $scheme://$host;
-    proxy_connect_timeout 90;
-    proxy_send_timeout 90;
-    proxy_read_timeout 90;
-    proxy_buffer_size 64k;
-    proxy_buffers 8 64k;
-    proxy_busy_buffers_size 64k;
-    proxy_temp_file_write_size 64k;
-    client_max_body_size 50m;
-    client_body_buffer_size 128k;
-  '';
-
   defaultUser = "gtcm";
   defaultGroup = "gtcm";
 
@@ -57,7 +33,7 @@ in
     dataDir = lib.mkOption {
       type = lib.types.path;
       default = "/var/lib/think-backend.greaterchiangmai.com";
-      description = "A place where to store states";
+      description = ''A place where to store states'';
     };
 
     user = lib.mkOption {
@@ -166,19 +142,6 @@ in
       '';
     };
 
-    systemd.services.gtcm-file-uploader = {
-      description = "File upload service for think-backend.greaterchiangmai.com";
-      requiredBy = [ "phpfpm-think-backend-gtcm.service" ];
-      before = [ "phpfpm-think-backend-gtcm.service" ];
-      serviceConfig = {
-        User = cfg.user;
-        WorkingDirectory = "${file-uploader}";
-        ExecStart = "${lib.getExe pkgs.nodejs_20} ${file-uploader}/src/be/index.js";
-        Restart = "on-failure";
-      };
-      path = [ pkgs.nodejs_20 ];
-    };
-
     environment.systemPackages = [
       artisan-be
     ];
@@ -263,7 +226,6 @@ in
           # migrate & seed db
           ${lib.getExe php} artisan key:generate --force
           ${lib.getExe php} artisan migrate --force
-          ${lib.getExe php} artisan storage:link
           ${lib.getExe php} artisan config:cache
         '';
     };
@@ -271,8 +233,8 @@ in
     systemd.tmpfiles.rules = [
       "d ${cfg.dataDir}                            0710 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/cache                      0700 ${cfg.user} ${cfg.group} - -"
-      "d ${cfg.dataDir}/public                     0755 ${cfg.user} ${cfg.group} - -"
+      "d ${cfg.dataDir}/public                     0750 ${cfg.user} ${cfg.group} - -"
-      "d ${cfg.dataDir}/public/uploads             0755 ${cfg.user} ${cfg.group} - -"
+      "d ${cfg.dataDir}/public/uploads             0750 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/storage                    0700 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/storage/app                0700 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/storage/fonts              0700 ${cfg.user} ${cfg.group} - -"
@@ -282,8 +244,6 @@ in
       "d ${cfg.dataDir}/storage/framework/views    0700 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/storage/logs               0700 ${cfg.user} ${cfg.group} - -"
       "d ${cfg.dataDir}/storage/uploads            0700 ${cfg.user} ${cfg.group} - -"
-
-      "d ${cfg.dataDir}/gtcm-file-uploader/uploads      0700 ${cfg.user} ${cfg.group} - -"
     ];
 
     networking.firewall.allowedTCPPorts = [
@@ -305,28 +265,12 @@ in
             index = "index.php";
             tryFiles = "$uri $uri/ /index.php?$query_string";
           };
-          "/uploads" = {
-            root = "${cfg.dataDir}/public/uploads";
-            index = "index.php index.html";
-            tryFiles = "$uri $uri/ /index.php";
-          };
-          "/storage" = {
-            root = "${cfg.dataDir}/public/storage";
-            index = "index.php index.html";
-            tryFiles = "$uri $uri/ /index.php";
-          };
           "~ \\.php$".extraConfig = ''
             fastcgi_pass unix:${config.services.phpfpm.pools."think-backend-gtcm".socket};
           '';
           "~ \\.(js|css|gif|png|ico|jpg|jpeg)$" = {
             extraConfig = "expires 365d;";
           };
-          "^~ /initiate-multipart-upload".extraConfig = nginxNodeProxyConfig;
-          "^~ /get-presigned-url".extraConfig = nginxNodeProxyConfig;
-          "^~ /complete-multipart-upload".extraConfig = nginxNodeProxyConfig;
-          "^~ /generate-presigned-url".extraConfig = nginxNodeProxyConfig;
-          "^~ /enable-bucket-cors".extraConfig = nginxNodeProxyConfig;
-          "^~ /upload".extraConfig = nginxNodeProxyConfig;
         };
       };
     };

modules/nixos/think-gtcm.nix

@@ -33,7 +33,7 @@ in
     dataDir = lib.mkOption {
       type = lib.types.path;
       default = "/var/lib/think.greaterchiangmai.com";
-      description = "A place where to store states";
+      description = ''A place where to store states'';
     };
 
     user = lib.mkOption {
@@ -228,7 +228,6 @@ in
           # migrate & seed db
           ${lib.getExe php} artisan key:generate --force
           ${lib.getExe php} artisan migrate --force
-          ${lib.getExe php} artisan storage:link
           ${lib.getExe php} artisan config:cache
         '';
     };
@@ -268,16 +267,7 @@ in
             index = "index.php";
             tryFiles = "$uri $uri/ /index.php?$query_string";
           };
-          "/uploads" = {
+
-            root = "${cfg.dataDir}/public/uploads";
-            index = "index.php index.html";
-            tryFiles = "$uri $uri/ /index.php";
-          };
-          "/storage" = {
-            root = "${cfg.dataDir}/public/storage";
-            index = "index.php index.html";
-            tryFiles = "$uri $uri/ /index.php";
-          };
           "~ \\.php$".extraConfig = ''
             fastcgi_pass unix:${config.services.phpfpm.pools."think-gtcm".socket};
           '';

overlays/default.nix

@@ -1,8 +1,6 @@
-{ inputs,... }:
+{ ... }:
 {
   flake.overlays = {
     packagesOverlay = import ../pkgs/overlay.nix;
-    default = final: prev: import (../pkgs/overlay.nix) inputs final prev;
   };
-
 }

pkgs/gtcm-file-uploader.nix

@@ -1,40 +0,0 @@
-{
-  fetchgit,
-  buildNpmPackage,
-  pkgs,
-  dataDir ? "/var/lib/gtcm-file-uploader",
-}:
-let
-  repoSrc = fetchgit {
-    url = "https://git.b4l.co.th/newedge/think-greaterchiangmai";
-    rev = "6f8c8d7dfaf5a0c1eb2077de1d6fb35ceaf3d4ec";
-    hash = "sha256-2mCdn8xGjWZrANclctGTmxQhkNc43VzlzMTVwVIFJcM=";
-  };
-  src = "${repoSrc}/upload-large-file";
-in
-buildNpmPackage {
-  pname = "gtcm-file-uploader";
-  version = "1.0.0";
-
-  nativeBuildInputs = with pkgs; [
-    nodejs_20
-    breakpointHook
-  ];
-
-  inherit src;
-
-  npmDepsHash = "sha256-JEp2F1CQfuV9fSYZRdRO+BiOE9dy1ReK6doJcqCuxu4=";
-
-  buildPhase = ''
-    npm install
-  '';
-
-  installPhase = ''
-    runHook preInstall
-    mkdir -p $out
-    cp -r * $out
-    ln -s ${dataDir}/.env $out/.env
-    ln -s ${dataDir}/gtcm-file-uploader/uploads $out/src/be/uploads
-    runHook postInstall
-  '';
-}

pkgs/inventree/default.nix

@@ -1,145 +0,0 @@
-{
-  stdenvNoCC,
-  python3,
-  fetchFromGitHub,
-  fetchYarnDeps,
-  yarnConfigHook,
-  nodejs,
-}:
-let
-  version = "unstable-2025-05-09";
-
-  src = fetchFromGitHub {
-    owner = "inventree";
-    repo = "InvenTree";
-    rev = "e0acfaa762da0dd7b2822b567202210ca8b7dbd3";
-    hash = "sha256-K+cqErDUmgPO7625P3jp7+7BOYEfyJ1nElae6RlJvvI=";
-  };
-
-  frontend = stdenvNoCC.mkDerivation {
-    name = "inventree-frontend";
-    inherit version src;
-
-    yarnOfflineCache = fetchYarnDeps {
-      yarnLock = "${src}/src/frontend/yarn.lock";
-      hash = "sha256-KpWuYCrkGN+4UnwV1STEbTL0FWcLZ7Wq8a8ST55OpGM=";
-    };
-
-    nativeBuildInputs = [
-      yarnConfigHook
-      nodejs
-    ];
-
-    patchPhase = ''
-      runHook prePatch
-      cd src/frontend
-      runHook postPatch
-    '';
-
-    buildPhase = ''
-      echo "Running lingui"
-      ./node_modules/.bin/lingui compile --typescript
-      echo building lib
-      ./node_modules/.bin/tsc --p ./tsconfig.lib.json
-      ./node_modules/.bin/vite --config vite.lib.config.ts build
-      echo "Running tsc"
-      ./node_modules/.bin/tsc
-      echo "Running vite"
-      ./node_modules/.bin/vite build --emptyOutDir --outDir $out
-    '';
-  };
-
-in
-python3.pkgs.buildPythonApplication rec {
-  pname = "InvenTree";
-  inherit version src;
-
-  format = "other";
-
-  dependencies = with python3.pkgs; [
-    coreapi
-    cryptography
-    distutils
-    dj-rest-auth
-    django_4
-    django-allauth
-    django-allauth.optional-dependencies.openid
-    django-allauth.optional-dependencies.mfa
-    django-allauth.optional-dependencies.socialaccount
-    django-cleanup
-    django-cors-headers
-    django-dbbackup
-    django-error-report-2
-    django-filter
-    django-flags
-    django-formtools
-    django-ical
-    django-js-asset
-    django-maintenance-mode
-    django-markdownify
-    django-money
-    django-mptt
-    django-redis
-    django-oauth-toolkit
-    django-otp
-    django-q-sentry
-    django-q2
-    django-redis
-    django-sesame
-    django-sql-utils
-    django-structlog
-    django-stdimage
-    django-taggit
-    django-user-sessions
-    django-weasyprint
-    djangorestframework
-    djangorestframework-simplejwt
-    djangorestframework-simplejwt.optional-dependencies.crypto
-    django-xforwardedfor-middleware
-    drf-spectacular
-    dulwich
-    feedparser
-    gunicorn
-    pdf2image
-    pillow
-    pint
-    pip-licenses
-    pypdf
-    python-barcode
-    python-barcode.optional-dependencies.images
-    python-dotenv
-    pyyaml
-    qrcode
-    qrcode.optional-dependencies.pil
-    rapidfuzz
-    sentry-sdk
-    tablib
-    tablib.optional-dependencies.xls
-    tablib.optional-dependencies.xlsx
-    tablib.optional-dependencies.yaml
-    weasyprint
-    whitenoise
-
-    psycopg2
-    fido2
-  ];
-
-  nativeCheckInputs = with python3.pkgs; [ django-slowtests ];
-
-  installPhase = ''
-    mkdir -p $out/opt/inventree
-    cp -r . $out/opt/inventree
-
-    echo "Installing frontend"
-
-    mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
-    cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
-    cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
-  '';
-
-  passthru = {
-    pythonPath = python3.pkgs.makePythonPath dependencies;
-    gunicorn = python3.pkgs.gunicorn;
-    inherit frontend;
-  };
-}

pkgs/overlay.nix

@@ -1,29 +1,4 @@
 final: prev: {
   think-gtcm = final.callPackage ./think-gtcm.nix { };
   think-backend-gtcm = final.callPackage ./think-backend-gtcm.nix { php = final.php83; };
-  gtcm-file-uploader = final.callPackage ./gtcm-file-uploader.nix { };
-
-  pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
-    (py-final: py-prev: {
-      django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
-      django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
-      django-flags = py-final.callPackage ./python/django-flags { };
-      django-ical = py-final.callPackage ./python/django-ical { };
-      django-markdownify = py-final.callPackage ./python/django-markdownify { };
-      django-money = py-final.callPackage ./python/django-money { };
-      django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
-      django-recurrence = py-final.callPackage ./python/django-recurrence { };
-      django-slowtests = py-final.callPackage ./python/django-slowtests { };
-      django-structlog = py-final.callPackage ./python/django-structlog { };
-      django-stdimage = py-final.callPackage ./python/django-stdimage { };
-      django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
-      django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
-      django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
-      pip-licenses = py-final.callPackage ./python/pip-licenses { };
-      py-moneyed = py-final.callPackage ./python/py-moneyed { };
-      pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
-      sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
-    })
-  ];
-  inventree = final.callPackage ./inventree { python3 = final.python312; };
 }

pkgs/python/django-dbbackup/default.nix

@@ -1,42 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django_4,
-  pytz,
-}:
-
-buildPythonPackage rec {
-  pname = "django-dbbackup";
-  version = "4.2.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-dbbackup";
-    rev = version;
-    hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    django_4
-    pytz
-  ];
-
-  pythonImportsCheck = [ "dbbackup" ];
-
-  meta = {
-    description = "Management commands to help backup and restore your project database and media files";
-    homepage = "https://github.com/jazzband/django-dbbackup";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-    mainProgram = "django-dbbackup";
-  };
-}

pkgs/python/django-error-report-2/default.nix

@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-error-report-2";
-  version = "0.4.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "matmair";
-    repo = "django-error-report-2";
-    rev = version;
-    hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "error_report" ];
-
-  meta = {
-    description = "Log/View Django server errors";
-    homepage = "https://github.com/matmair/django-error-report-2";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-flags/default.nix

@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-flags";
-  version = "5.0.13";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "cfpb";
-    repo = "django-flags";
-    rev = version;
-    hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "flags" ];
-
-  meta = {
-    description = "Feature flags for Django projects";
-    homepage = "https://github.com/cfpb/django-flags";
-    license = lib.licenses.cc0;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-ical/default.nix

@@ -1,46 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-  django-recurrence,
-  icalendar,
-}:
-
-buildPythonPackage rec {
-  pname = "django-ical";
-  version = "1.9.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-ical";
-    rev = version;
-    hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    django
-    django-recurrence
-    icalendar
-  ];
-
-  pythonImportsCheck = [ "django_ical" ];
-
-  meta = {
-    description = "ICal feeds for Django based on Django's syndication feed framework";
-    homepage = "https://github.com/jazzband/django-ical";
-    changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-markdownify/default.nix

@@ -1,39 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  bleach,
-  django,
-  markdown,
-}:
-
-buildPythonPackage rec {
-  pname = "django-markdownify";
-  version = "0.9.5";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "erwinmatijsen";
-    repo = "django-markdownify";
-    rev = version;
-    hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    bleach
-    django
-    markdown
-  ];
-
-  pythonImportsCheck = [ "markdownify" ];
-
-  meta = {
-    description = "Markdown template filter for Django";
-    homepage = "https://github.com/erwinmatijsen/django-markdownify";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-money/default.nix

@@ -1,41 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-  py-moneyed,
-}:
-
-buildPythonPackage rec {
-  pname = "django-money";
-  version = "3.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "django-money";
-    repo = "django-money";
-    rev = version;
-    hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    django
-    py-moneyed
-  ];
-
-  pythonImportsCheck = [ "djmoney" ];
-
-  meta = {
-    description = "Money fields for Django forms and models";
-    homepage = "https://github.com/django-money/django-money";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-q-sentry/default.nix

@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  poetry-core,
-  setuptools,
-  sentry-sdk,
-}:
-
-buildPythonPackage rec {
-  pname = "django-q-sentry";
-  version = "0.1.6";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "danielwelch";
-    repo = "django-q-sentry";
-    rev = "d3a43a90c82734244d5ebf3295652223053f1354";
-    hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
-  };
-
-  build-system = [
-    poetry-core
-    setuptools
-  ];
-
-  dependencies = [ sentry-sdk ];
-
-  pythonImportsCheck = [ "django_q_sentry" ];
-
-  meta = {
-    description = "Bringing Sentry error tracking to Django Q";
-    homepage = "https://github.com/danielwelch/django-q-sentry";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-recurrence/default.nix

@@ -1,56 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  pdm-backend,
-  django,
-  flake8,
-  pytest,
-  pytest-cov,
-  pytest-django,
-  pytest-sugar,
-  python-dateutil,
-  sphinx,
-  sphinx-rtd-theme,
-  tox,
-}:
-
-buildPythonPackage rec {
-  pname = "django-recurrence";
-  version = "1.12.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-recurrence";
-    rev = version;
-    hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
-  };
-
-  build-system = [ pdm-backend ];
-
-  dependencies = [
-    django
-    flake8
-    pytest
-    pytest-cov
-    pytest-django
-    pytest-sugar
-    python-dateutil
-    sphinx
-    sphinx-rtd-theme
-    tox
-  ];
-
-  pythonRelaxDeps = true;
-
-  pythonImportsCheck = [ "recurrence" ];
-
-  meta = {
-    description = "Utility for working with recurring dates in Django";
-    homepage = "https://github.com/django-recurrence/django-recurrence";
-    changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-slowtests/default.nix

@@ -1,38 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django_4,
-}:
-
-buildPythonPackage rec {
-  pname = "django-slowtests";
-  version = "1.1.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "realpython";
-    repo = "django-slow-tests";
-    rev = version;
-    hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django_4 ];
-
-  pythonImportsCheck = [ "django_slowtests" ];
-
-  meta = {
-    description = "Locate your slowest tests";
-    homepage = "https://github.com/realpython/django-slow-tests";
-    changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-stdimage/default.nix

@@ -1,51 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-  pillow,
-  gettext,
-}:
-
-buildPythonPackage rec {
-  pname = "django-stdimage";
-  version = "6.0.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "codingjoe";
-    repo = "django-stdimage";
-    rev = version;
-    hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    django
-    pillow
-  ];
-
-  nativeBuildInputs = [ gettext ];
-
-  preBuild = ''
-    echo "bla bla"
-    echo $PATH
-  '';
-
-  pythonImportsCheck = [ "stdimage" ];
-
-  meta = {
-    description = "";
-    homepage = "https://github.com/codingjoe/django-stdimage";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-structlog/default.nix

@@ -1,48 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  asgiref,
-  django,
-  django-ipware,
-  structlog,
-  celery,
-  django-extensions,
-}:
-
-buildPythonPackage rec {
-  pname = "django-structlog";
-  version = "9.1.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jrobichaud";
-    repo = "django-structlog";
-    rev = version;
-    hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    asgiref
-    django
-    django-ipware
-    structlog
-  ];
-
-  optional-dependencies = {
-    celery = [ celery ];
-    commands = [ django-extensions ];
-  };
-
-  pythonImportsCheck = [ "django_structlog" ];
-
-  meta = {
-    description = "";
-    homepage = "https://github.com/jrobichaud/django-structlog";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-user-sessions/default.nix

@@ -1,39 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-user-sessions";
-  version = "2.0.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "jazzband";
-    repo = "django-user-sessions";
-    rev = version;
-    hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "user_sessions" ];
-
-  meta = {
-    description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
-    homepage = "http://github.com/jazzband/django-user-sessions";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-weasyprint/default.nix

@@ -1,38 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  django,
-  weasyprint,
-}:
-
-buildPythonPackage rec {
-  pname = "django-weasyprint";
-  version = "2.4.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "fdemmer";
-    repo = "django-weasyprint";
-    rev = "v${version}";
-    hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
-  };
-
-  build-system = [ setuptools ];
-
-  dependencies = [
-    django
-    weasyprint
-  ];
-
-  pythonImportsCheck = [ "django_weasyprint" ];
-
-  meta = {
-    description = "A Django class-based view generating PDF resposes using WeasyPrint";
-    homepage = "https://github.com/fdemmer/django-weasyprint";
-    changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/django-xforwardedfor-middleware/default.nix

@@ -1,37 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  django,
-}:
-
-buildPythonPackage rec {
-  pname = "django-xforwardedfor-middleware";
-  version = "2.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "allo-";
-    repo = "django-xforwardedfor-middleware";
-    rev = "v${version}";
-    hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [ django ];
-
-  pythonImportsCheck = [ "x_forwarded_for" ];
-
-  meta = {
-    description = "Use the X-Forwarded-For header to get the real ip of a request";
-    homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
-    license = lib.licenses.publicDomain;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/pip-licenses/default.nix

@@ -1,74 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  setuptools-scm,
-  wheel,
-  prettytable,
-  tomli,
-  autopep8,
-  black,
-  docutils,
-  isort,
-  mypy,
-  pip-tools,
-  pypandoc,
-  pytest-cov,
-  pytest-pycodestyle,
-  pytest-runner,
-  tomli-w,
-  twine,
-}:
-
-buildPythonPackage rec {
-  pname = "pip-licenses";
-  version = "5.0.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "raimon49";
-    repo = "pip-licenses";
-    rev = "v-${version}";
-    hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-    wheel
-  ];
-
-  dependencies = [
-    prettytable
-    tomli
-  ];
-
-  optional-dependencies = {
-    dev = [
-      autopep8
-      black
-      docutils
-      isort
-      mypy
-      pip-tools
-      pypandoc
-      pytest-cov
-      pytest-pycodestyle
-      pytest-runner
-      tomli-w
-      twine
-      wheel
-    ];
-  };
-
-  pythonImportsCheck = [ "piplicenses" ];
-
-  meta = {
-    description = "Dump the license list of packages installed with pip";
-    homepage = "https://github.com/raimon49/pip-licenses";
-    changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/py-moneyed/default.nix

@@ -1,42 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  babel,
-  typing-extensions,
-}:
-
-buildPythonPackage rec {
-  pname = "py-moneyed";
-  version = "3.0";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "py-moneyed";
-    repo = "py-moneyed";
-    rev = "v${version}";
-    hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    babel
-    typing-extensions
-  ];
-
-  pythonImportsCheck = [ "moneyed" ];
-
-  meta = {
-    description = "Provides Currency and Money classes for use in your Python code";
-    homepage = "http://github.com/py-moneyed/py-moneyed";
-    changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
-    license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/python/sentry-sdk/default.nix

@@ -1,43 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
-  wheel,
-  certifi,
-  urllib3,
-}:
-
-buildPythonPackage rec {
-  pname = "sentry-sdk";
-  version = "2.26.1";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "getsentry";
-    repo = "sentry-python";
-    rev = version;
-    hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
-    fetchSubmodules = true;
-  };
-
-  build-system = [
-    setuptools
-    wheel
-  ];
-
-  dependencies = [
-    certifi
-    urllib3
-  ];
-
-  pythonImportsCheck = [ "sentry_sdk" ];
-
-  meta = {
-    description = "The official Python SDK for Sentry.io";
-    homepage = "https://github.com/getsentry/sentry-python";
-    changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ ];
-  };
-}

pkgs/think-backend-gtcm.nix

@@ -21,16 +21,12 @@ php.buildComposerProject2 (finalAttrs: {
     runHook preInstall
     mkdir -p $out
     cp -R * $out
-
     rm -rf $out/storage
-
     ln -s ${dataDir}/.env $out/.env
     ln -s ${dataDir}/storage $out/storage
-    ln -s ${dataDir}/public/storage $out/public/storage
-    ln -s ${dataDir}/public/uploads $out/public/uploads
     runHook postInstall
   '';
 
   composerStrictValidation = false;
-  vendorHash = "sha256-wGfbprSDULBje1s5y3+ZiU/nCwYGDEULobZzyzGZ9bQ=";
+  vendorHash = "sha256-eXm1x3E9KHWojaT2RU4inMdZqQVcWdLCKlvzhOlIZrc=";
 })

pkgs/think-gtcm.nix

@@ -21,16 +21,12 @@ php.buildComposerProject2 (finalAttrs: {
     runHook preInstall
     mkdir -p $out
     cp -R * $out
-
     rm -rf $out/storage
-
     ln -s ${dataDir}/.env $out/.env
     ln -s ${dataDir}/storage $out/storage
-    ln -s ${dataDir}/public/storage $out/public/storage
-    ln -s ${dataDir}/public/uploads $out/public/uploads
     runHook postInstall
   '';
 
   composerStrictValidation = false;
-  vendorHash = "sha256-b8+AKUmjQiOdV8UC9GYfJzAHFs9+FRSH91YsxKt0rDA=";
+  vendorHash = "sha256-QV3hR3U3GwCqrCRxfkazmJwDpO1vFyMfA6YqUb4bjMI=";
 })

sops/machines/rana/key.json

@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
-    "type": "age"
-  }
-]

sops/secrets/rana-age.key/groups/admins

@@ -1 +0,0 @@
-../../../groups/admins

sops/secrets/rana-age.key/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:xkoZtvAxTFuTOtBu8Pc7X2aVgOdjFwSFHLuX92DuSLxBX3NW+YP0Qo/0y3dyVjwR/nPHj6N7LjSqHMC2aZLgcR1kYJchyjZ8ISw=,iv:CGJD7bDqMVbp1KxDswK3iizmV8vZiVcBUP5vUc7qqDA=,tag:K967EvYAzD6eOGwSQ4dTew==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUUHhPbEROVjkwVFh6TE0r\nUW1KN1U4eTEzN0JQcUJFWjdvT2V2WnpUMlU4ClM0NWJmRzg3aVFRSFgzcllTOE1r\nV3lGVlJ5WkRMYm9xb0xoWGladlpYbVkKLS0tIFpoT0oxMG8reW1rRmdwcmp1NXpv\nb1VJZXZPZzB1dEJxWlJ5SEYwdWpObkUKqDFSxFQ9HSGWMF8K7v8K5BFAub0lbQ3Y\nNHDIy7mZjFinebrjhPzHxlzhdguoSRSDPfaKbnaIUdKY2cwvQC1zrA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYVBlclRXWGJqcTZuMXNJ\nREJOcEgxc1lJQ2o4TmVlbnU3NkNwMGtjc1NJCktNS0VrbTlndENSaTBtYVRYVUVL\nSFljU2F0V0YwdlFLSHJkeW9IaDRwQjgKLS0tIFRNUFMrWEw1VGhWOEwrQ05EWHQ5\nTUVDcnRpeEtqVHh0QnhyWExGUWp5c2MKs3BRqjoXwok/BRIyIKGXYNTJbE+FIvbX\n40N4B/ZM3DhsAb2+zl/iaogycDx3HvlspljaWy0emzGJYLLBWBonxg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEViaTZla0Fy\nS3FnZjQ4ZkxuWFJuM1JnU2JrRXYzWlVRZVJ0ZHVwMHR6eTAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpyZEtIMnNqREpuUk1rd2hWd280ZWFz\nb3c4TlUybzlOTmVOZW55Zi9ia20wCi0tLSB1NVNnbkk0V0lPNVQvcVpUQUNBdXVv\nSkRNRDh6bE1zVm5QdjhtWklhQUZJCjfd9Ce0sS3qEcF0oTfgA70StwrW6t0kyClE\nvGXH1b6caO6GuDqHlTCWtK8wXhPNmMvaHzuKIxRwcTlMjE0LsE8=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZDTGpUWllm\nSGFlb2R4YXVDTldQOUpFMlRhMlBqZEZ1NUJLR3oxc3VDVUkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkMGYzZGFNWlFpY09waFpOUE03TEdJ\nV0VEL2ZBeld5ZlZpTzZITWpDVWFzCi0tLSBSdGpPRzg5R1N1cDhxTWNldUlVOThj\nSy9Jc1BMMnRlWkN3RFlrTUZ0Rks0CvGs24pzjvolDKBG9qh0gRmzSvTHEftC98Ts\n7bKL/7kYENcsvHsRjJk7e2q85b/3NT9ft6O8cG1Poqh32Tka9gM=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlOQS8yQUtx\nTUtUK1V4azcybm1GZk44MTJZa2F0alRwamJtL3RwblVYUzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo1YXR0SE5XcS9yNFZzZXE2dHNKZFNh\ndC9WaHZTM1I2U1gwNVpiR3U4dG9NCi0tLSB3RG95Mlp3TCtvcHVJTFdnVS9DZVov\nMmU4Sjl4U3V6K3YrYkFOUnlIaTVzCtNFHyDhSOIXGiACkxPD9jV0glmRNqtJGZvf\nphqY7zOPd5OQQNDM5QQdp/P7DDl1CT4QjUPu84TgmFKO4HX7WFI=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNNi9WYXVHZ3V1OHJFTzZh\nK3A5aU5yRi8yR2J5aVBlRTV1NW5IREsrSEdZCjFLQUpJWjhTY0FjV24zV3R1VCtk\neldBeU9Fd1FqYnVqYU4rQlNmVUp3TVEKLS0tIFM5WkdlZVJCNWJLWmRtZGE2WVFV\nZ0kwOGthcUxrMlhrM0tseURVTThYbHcK5ouDof7sD7XlbJquDOkv4BxT2DMmok+n\nzfGnlTy0KK/eptfV0CQrGD/QVMVyZpGrecnLDNZOeI7dJT++u5cMyA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmTktaWVYzVk4wZ1dHeGlQ\nRkUwVGZvUitPdXQ2dlpoT0xsWjNPZmNYYVdnCkdjVmZPankyQm1QU0o0WU9tei9y\nTDhkNC81SW5GMU4xSXhUTkU2c3VSeVUKLS0tIERSUithQU8zZXZyWkU4MS82OHUv\nYThTQ3VNMUIyV3c3SXZNWUpWU2hFUDgKH1/7Xup8vISgDxJlmatxuAKdjRV3fA1f\nOI+zJCtR94wJvGALufqt5zPEkTkT47Z+ZijoNp6sAxQCCAiNLKO5LA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQVd4cWtKSkhrN01JNzJp\nb3p5dXFxaTJ0ZGdCcmNCTEhOWVpMNm9XY0hJClMzV0dRSnlKNnc3aEpSRnQ4YUNY\nWFBBcjkwVzlEOE1XdUdrMkM1US81aWcKLS0tIDF4U3RCYTNBb1dSdnJHL2E4b0RF\nWjJSVnBReEFBWFZQRktZNkFWUEkyWEkKsepkOgBIbIxNRU1118q+pQb4U6sVUsxi\nKZHu270Xd254fSqUUZ0nfYG8tk5jzzZ9W5Rpb27gA3gGYQ5r5h4zNQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSzdyMmJzam5FM0MvRjg3\neTQveHZNaTBXdzJIdklQeEZuUkRVOXNQWWlnCmYvV3pJQWZFNytMOUpFa0o0UjhT\nSWdzanBoK3lhTnpCcENvajJkdW5sa1EKLS0tIHduV0NjQzE4T1VadDcySkFFVWYv\nanNNQjdpalIvNmtGZ2N1aTlzeC9ZcFUKvSsgRyL5u5+Ly42Ua+zDIaJ6O3GOyjZf\nIH6c4edkafCk1nUc2Tr9mBWGp51MX4VV/mLxAVse25u9YztTgcDlnQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2026-01-12T10:53:54Z",
-		"mac": "ENC[AES256_GCM,data:Bl5dFPtFausLeGxCVbDuaUf8pj5K6JDUPkAqdDT8yOPYWXj88gPjDCt7AIuux9GCUJut6DrrfDs9cpIM9YwBA08EnWthBtjTWvE9qBcLfrCkGxHJ5O4Sff28AJiHq4XBZK4Y85RvjgMxeMX6c9g6taEk/B0QqG5xkvFiMuuwIRw=,iv:W+8iDE+jzCqlIYmLu4dhUsij4czfJceneNdJyRCLmso=,tag:SiyGeJqUh2BZedjmIVtjWQ==,type:str]",
-		"version": "3.11.0"
-	}
-}

sops/secrets/rana-age.key/users/kurogeek

@@ -1 +0,0 @@
-../../../users/kurogeek

vars/per-machine/adhil/phonebox/owner-name/value

@@ -1 +0,0 @@
-w-office

vars/per-machine/almach/phonebox/owner-name/value

@@ -1 +0,0 @@
-usa-1

vars/per-machine/alpheratz/phonebox/owner-name/value

@@ -1 +0,0 @@
-usa-2

vars/per-machine/buna/phonebox/owner-name/value

@@ -1 +0,0 @@
-whitehouse

vars/per-machine/mirach/phonebox/owner-name/value

@@ -1 +0,0 @@
-usa-3

vars/per-machine/neptune/phonebox/owner-name/value

@@ -1 +0,0 @@
-vi

vars/per-machine/ramus/greaterchiangmai-s3/endpoint/value

@@ -1 +1 @@
-https://fsn1.your-objectstorage.com
+fsn1.your-objectstorage.com

vars/per-machine/rana/openssh/ssh.id_ed25519.pub/value

@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJxekSBcL5byOOEs2sq91Vas7BvggjQ65O28E3mflwUs 

vars/per-machine/rana/openssh/ssh.id_ed25519/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/rana/openssh/ssh.id_ed25519/machines/rana

@@ -1 +0,0 @@
-../../../../../../sops/machines/rana

vars/per-machine/rana/openssh/ssh.id_ed25519/secret

@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data: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,iv:Y51HhH//qu5zpfRFFnTIKnCzpYr0utKpEiGqv1cCCnw=,tag:X6FYr+k4spNzbhfcBXnAjQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1dGEyRzEzYnlnVnNlOWMy\nYWtGUitzbDA4andyaEhFNGlrOW0rMWdDcldzClJwV2YzNjdUTFRXNzFsMlY4VHRR\nL2lYNlM2Uk9WT1NhTTkrbzh1cFMzOGcKLS0tIFVjWDcwQ0g0NVNKUXhHSmpKTUVW\nYUxtU0hHNmM0ak8vRDRwWGpsWFgxRE0KZYr6b3CPX6u4TF6t//YzkguOLaXxOAQd\nxkCygAnAJCITH0hHz8TyspNg7dR+J7E10Px6QC+6YjpTtmpZmbZl1Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZUl6Tnh1Wm9jT0lFRVM1\nYi8wbmNNazZRY2Q1TW05ZHFRNndXaUNQT1ZrCjg2MnNGY2VrODNmb2tyVTRKVzhB\nRGpIaWNNcFc3dzl1RmM0TzhRV1JydDgKLS0tIEFGaDNDOS95VWxhS20xK2U4b0oz\nTFd0eDNkU1kwQzUwTnhzdEdXQkMvN1UKXmH5Hq2tIFfedG8PALnO+IbFjeYDBTmO\nf9aysra8Ait4TpWBNTCXbdf8KyqOQytV1spzsPBjVVTkNPwWaAwidA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudFh6NlY0R2hNVEpIS29u\nTTlNdkkvQkRkekFKR3FGTCtjTXdHd3ptU3pVCmxiS2F0Z05DeDZIdkgxRDdpTUZz\nMk5OZEtjdEt5ckR6MmlRYTVKQU4zUEUKLS0tIGNsVXNNbWhoUHBteXErUUVVdUdF\nczR3L2dJcFptNnd6YUd3SXdFZXpZZW8KZtn+WIHD1H4qFZFK8idcS7hFgrnqaKiE\nt7ZpN4PyDH7mqH6rkW3Mn8o9ZsfvX9gV2HmgSkj8CITRLu7HfKGrog==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZTcTh6L2Nm\nUGNOck05Z2dibkVPUEhKYWk5aTZlSGlvTldYUmJoMXhmZ2sgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpnaUxBT1Z3ZHpTVzZKa3gwaDVvUlkr\nd1BiNW1vLytrZk54RFBHTEN1T3BNCi0tLSBHcHROSEFMOXZrcFRWNytxZGhNNm9Z\nRkxsQTdad2o3TzlzaHZuTDIvNW5BCjPnOg2RuHG5tAO/TpLjcIJ1spSujPEiQifn\nefk620zbb5nI6MAhWDX5BHNgHPCxDHJMo1mDgX63v+IXyx4DG6E=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvUGd6Zjcw\nRDcyV2MrK3JoSUtKMHR2ZnUwcm9iR3QvcDNLODRzTnBXVXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpRdmRVZ2RtaHQzdnMrMkxLaHZyeTN4\nNTZ2OUpuNTFOeldnN0dZZ2RXZlFNCi0tLSBWZTBoTis2OCtOV2VUNzlUVnFURXEx\nU1RqQUQ0VW9MY0lEQ3FCdkVNZmtFCjwNPG3+79L13syxN+Ip9dMUN8qTOw4K7Isk\nRhlh38jv4j0jV7dGSjczBhnzh7nbskqCtqZ9mGa/vLx1fiDsBsc=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG83a0JhZDlm\ndU1Dc3gvV2lXSDEwUDdpWkNQdmxpUXFmdEVQaTRhbmd6RW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4SnNydWY5cWR1WlNJR3JqNnl2NGE5\nWGpNU1BUT1Axa0NNN3lqNlZrQVhRCi0tLSAwcXZjRjlKK3BFZ3FpU25nQTlRakRN\nSU84dDcrVVlmSS9Zc0VWNDE4K2F3Cvq4zmsqOwoypsjf3BO9MfjdNGxxU2tkgsPx\nuRwQHEJhT5W8x5pnSEi/CzA6bnFvlvP6mk6pxCJUERPZGVgHYAA=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArRGwrS1RhUGpKOTJ3clU2\nc3hLbENPSnRpdnVyMjJYVm1YZ2FUazNCeFRFCjFZZmpuZnR5a2ZMdEhqSW5zcUhU\nR1lzYitNaWUxZndiZ05ZQUFBSFhGS0kKLS0tIHFOcEdnVlE5M0VXYnl0aEtiOXpT\nZURBZkFPSitHcjNnQmlQVElnbDNLK3MK4ujldBhvw2+3fKhilUJxTkASe3CyruKH\n6NKTCqG1lAf1j+4HqN51C1knOom5F0Qcc/lXWMbtgZA2N/pAjoz0XQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvU0hvUi9GdlcvZk9rVFNG\nblA3dmJZNnhrektydlBMeVhUZ3hZL0p3K0JNCkIyd3NhRnF1ZVlYVmFERHJsNEVI\ndm1uWEU4Y0J2dG55cmdNM3pvUTNQcEUKLS0tIDlyWXFDSzVpOXBxY3hhV3orZ3Ry\naG5FNkRhQTVBaDJ6cUdTSENPdmYwK0UKZROa124CV2j0rF4FkdJYDbzcbNFfLI0i\n3mLA6ugNwao145Cd/iFn4g1hHBJ2taWBmOLcjk9aa/NwekLclJrqQw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtc0VHTS9rejZnbFhaNVZ1\nckFMWmZPaFRoczlEVncxQVQ5MHliTWl5T1hFCm16UU92NEczUFZZa2cyenhBZGV3\nQTVmY2d4QXRQN09jdFB1bkd4VDMyMncKLS0tIGtZQ0Q1bHMxZXhSTzJZSnRDUEpM\nWEtid1BKcmUvMW9odkRFWnVNOSt6VGMKapQACZKpzcgNTXEZSGLN1zYXi43gH928\nG9AhUv7RtCaIPmHByjFBhxemh8zdvM0jfxRllpxYwlEWWjw3ebC26w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WFpZR0Jlb0ZqdXJOSUxh\na0tHNGt1M1MwSWoyWEhqK3N4cXl1Z1RzOFZRCjBQMWRvQkhJMXBkNnlTeVZNU2g0\nMGk3cmt4dnJmWFZRc2Y2cU9SWEQraTAKLS0tIEhpWXRselhPZ0l2TWlNMTUyR3ZU\nam9tZEdvdFg0aUxlVlV5VGZjY1dXdmcKmim8Cq93FQPaT3I2mGQ6qX542Zowzzt3\nJ/PF2IuzlXNiO93DLP8Th7jyo1EV8/yu2ak8R+yOWPSJpArLYWrGIw==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2026-01-12T10:53:54Z",
-		"mac": "ENC[AES256_GCM,data:4yVGgr5CBueGSJTumk3vJ9AGTRbSLgP5PwA7xlPyg4aZB+kdqTFC6aPRvj6oJgHTgLW2GPk9Phd3ECS/eo2OwePUA41669S6WDZx+S+5XY8bFmN2CSWFGLC4RdAfTv69YxuheA9FZf2yKUuNuC4eXWFRnOB0+pjnNOWTQ+a3E6s=,iv:N6JLVDXG5yI7ufgeiFGOCV+pjn5WXyAl8naVnpBtqvQ=,tag:nKwkTLCSig6Eq6UU+ZgDLw==,type:str]",
-		"version": "3.11.0"
-	}
-}

vars/per-machine/rana/openssh/ssh.id_ed25519/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/rana/root-password/password-hash/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/rana/root-password/password-hash/machines/rana

@@ -1 +0,0 @@
-../../../../../../sops/machines/rana

vars/per-machine/rana/root-password/password-hash/secret

@@ -1,50 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:i8C3sIwqpPXfoNnDt/ZKKqVMgDJNAFzvZeI+UeP2SAMQD9JbRnjzMJhDXd9Z8PNvx7g0y8M7qh/zubpfmme3fG81HZcn0gliuLqdpjPErpF5G2o2AQy52Y5IXYPAaicpsnpFzhSMnfMcZQ==,iv:BulJeE9R6EEDkrxMcHyIjnvN5CJlbYI18s7sYLSVW7c=,tag:1s/xo7ZvPgq9qmUqmTRTNw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhejdGaGYvNC94REUrajkv\nUjMxN25Da25lQ1o3ZHFueXBlTzBPUkVIVlRrCnp3Y3BxanRKSDNNT2NtdkNFMDZl\nSk04Y3VwM3hUZXBBT0ZzQ2hwTUlxNEkKLS0tIEExVU9xREU5d1FQd3ovdFAzNDlV\na0VlVmhILzN2bTlIeFpGa3B4RWhWbjAK2hnF26x18ETtSlP3u0AaEZZ+BH/iVQ/o\nnwpa/cxOeYsdXb/2oBBXLMtrHnuEX8bPfAks1EvUm4ekN2tTpGpJ+Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNHVPUW5JcDErNHpZK09q\nZDQzTWdjZWhBWjY0WXpkWnJlL0NlYzVYb2pnClZ2Um1qQzhwUFcxcHIzeFB1am5p\nNWpjdUVueERSV1VjRFFBQk93TEJHNDgKLS0tIDIyS2hWM3BjNmtkNmRxQXdieVZq\nam9xV1BzdjU4YXdVaDVNR3R1dmpDdGcKTWuulM9VO868v3r9iumbjjxM2TMJPERw\n3tnjbAmO0Rwg45HZD/xd7atiHCZvzxNH4Z/TBV92PAnHg9fZXeh6Rg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUDlDSEQxZjJGbFBDTVZj\nYkZXajQ0L1R2MGJSbXhkY1N1a2ZJUjhnK0hrCk9HU0llRmxhN3JvUVB3MGNTZG1S\nRUZmOWR4S2EwOS9Vdm01cm1xYm9YQWsKLS0tIHAxY2VuZG9QMEhQYUxLa296VGw3\nVzZ4aDRmcGQ3MmpjellOK2tOWmQ4TzAKyvDTMDjyjeA2Emdv4wo5RJsx9l/J2iDD\nfu6gm+FD0BXga8G8pAgSClUJY/BP7PGMx43r3Jm+hPJQH2UTAcLy8w==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdZcUJTeFEv\nd1ByTnJvbW40b1YrR21MNHI5OVpncXh4d1BWaHo5Ymc4QzggQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpadTA1eDJUN0FOUXZVTEx0UGREQVpW\nVUN5RldWb0hQdktQU3hveVc3ei84Ci0tLSBXVUJvRHM1UXZYK2tNbllOQXcyNGtz\nL2wxUGJuOElKbmpTdnp1RXgyaGlJCoubZA2ZvTe35fyE9/AxNtoX+Tf9USaodHHl\n5Syjjm0kLMSQmutB5/zpfzKBTn/Y2cNqBjf6bRODzm3LKXP51F4=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNZLzdJSFZ6\nUGo1Z3VVaWxORjhJRHBVak4ydS9BNE9xTTZVQnV5SlhpMlEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplZWppMlJYTC9TSDdwTmE2bDdtdTV4\nZDM0WFo1bmZqSlBIOEw0OWwveFJFCi0tLSA1VDBRQ3MyNDdJRWNhUFc5RTM1Q0d6\nNEViYzlNTGVqZHFxOFFneG9WNDVJChqQvH/C16Fs/St/H6Td/zdNMydMoi6Zxx3q\nUX3FNV1O3OS1L85+WM1hzVoxGM1Fiap+2Bn3YV4HUnM8m4iyrUI=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9qaVBNUy9W\nUHBEaW5EYW5wMnBYMXd5S0RlLzJVemdZdnpvL2VveEwzU1UgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwplSU9rMUNhUlpLUGNiS0VFdklOR1l2\nRUZJWUxGb3VRN3BOZVRtZzFGeXZZCi0tLSB3dUs1YVc3NEp5cU5WZVpBYk1QL0g5\nMWZrYUN6Z3lBcU5EWmw2eklYMXNvCqi2vKIzq4Rqe/B/fb0KdFFi1VyhTOfAwZ5j\nxeEgcCo3cXK/x5QB6SWS03rJ4JurizhEyyupU7H4PvmXotJVcxQ=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1dHc1dDJkUklBb3VWY3BJ\nN3hSZnBOYnlhTXNPSC8vWEtTR1B2azV6NDFvCnpIbmV3bXpwTFRrNFg5SW9nZ0tV\nK1dDaWNvemJwbDRJWlJlTTZET0hqbHcKLS0tIHlmdkVYdkNScEFQOVNSbnU0TW5U\nVE54U2lqSXdCSkpQeEh2VmppRjR1cncK7JrYpimS2/93ueWyTvH9HdIXuAabOby3\ntq7V3PeAYJnxzqeNtQa5rASnpGOTYO84ETC8EF3InZg9rI2gkl33qg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGby9VWDAzNkVHV3pRK0NB\nU1h4VUxwVlVkdGtWYXpzVXAwT0hMaEd1QVJrCnUwOVlCM3A5ek1sM09VTWJiSkFp\nK3IzenhzekFGYzRTRjdtb3k3a1BTcmsKLS0tIFRkVS81bGNhTEJDME5LWlhSUHJZ\nWEV2aTRYT0J3dm9BNnB4NitUZTI5dm8KvmlWtCHAfoOQvQa6PAy2FvX7ZkWauCqq\nyjDxZuyMK33ZvhwVt8MtwwJUeGpHJ6gFjrcUvavlmv77KQAv+RZy5Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvRFNweG5tWjBVc2ovTjN3\nSmdSbXBhMGUwbGVVQ1U4bUo3MEw0MVhyblZnCjQyN09TcmJIM25qMnNrbFBkMkJ2\naFhhNzZnN1BLWUFLT3VyaTFVYUU5Z28KLS0tIFNUSDZXUjVkaSt5QWEzMWxHdkky\nU2VGZ0tHUENsQkhUekpib2hGdkNZakUKsv/+PApCsND8s8NNz7onON6zBxUqd6WF\nrNypiNkN1Ww8mw4vvmN7fRHxU2wXUQwU141ycne5/3Ao25HQF/wicA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNXNVT3ZiSHg3NGFBZWNF\naVdPTmhwU2hPcTZCcnBrM0xMcmo3SUhsZmc4CkhJMmdMZGFVZUpkNnA1WWtSQ3Vv\nbkUzQTJaSEFFNVlIcVFHK1dxVnBnQ0kKLS0tIDlvbjI5YlJDU3pReFE4Rlg5bklY\nWlkrZ1pqRjRaaVhhUGx3aEczYVFPSXcKZOULJ7oKQNj7nTVv6VRt7o9MofDG7TbN\nFV0S4raYatjNgPBMx4JCaer10PzbC/6IQBl0PZcK1/o+Hkug2deQKA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2026-01-12T10:53:55Z",
-		"mac": "ENC[AES256_GCM,data:LdJISLehuhnxYXc+xQszdx+xSoQK1zH7+Db5Y4M222Fac8jcEdykYzgPzCqzEvpDmT4zdDnoPnpHE2uk5MSLFr7g9++jeWRADCrvR42uOfWLoqBhKOxsaD7lbMw9sc+jQvk++gcnmucapNMPmxUQiMhGkjOPtGUNUYXmYo7poKI=,iv:+KRLeF69msX9k8koVAI69G6HytWqfzIUqo6XRN6UYGA=,tag:WH2P5CkZD9pVC5O+vztYQg==,type:str]",
-		"version": "3.11.0"
-	}
-}

vars/per-machine/rana/root-password/password-hash/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek

vars/per-machine/rana/root-password/password/groups/admins

@@ -1 +0,0 @@
-../../../../../../sops/groups/admins

vars/per-machine/rana/root-password/password/secret

@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:hhcuc36SLu09Zl/orPiHrAfz47WqRE9NU+VVh7o6b+03nMrt,iv:ggDVEut8nHXRcL2FID+RQGUsqM7u9Kcp4R0DgZ/Vdyg=,tag:x9qf7SCtoZgQjH2Xt/xVmw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHdm9obzJpK3YyeEhPZ01E\neDdWT0NkUFBjOFI5alMxY09XemMxWWFaZWpNCkF2YURuUnVTd2NoSW9hMHZJNzlM\nY01vSDZObjBXSVJCak9RNlR0b2x2blUKLS0tIEtDREcrdHpLNzNxbU9kVU04Z0dR\nZDhRbHBjVFg1cm9FTkpSb2R6L3VWc0UK8pNs1SgBGlKr3VOSmt4h8s4JkO/FRD64\nl7+HiCCl06B+ACBEZh7y6B1NMA6kD5em9plzzb8l2KbsVD60sany/Q==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmRCtxdlJWUTlwV05zbXl1\nYit4QzA0djVpeDJIbXd6SnpCVCtKUStqVGdFCnlxWjZ6aU0vNnhoOTJOMHZLVG1C\nVEhDZ3dyUmZwQm53NGdtYmZiZ1BIR1UKLS0tIExuRS84a3JuR2l3ZWE1SEIyMXhZ\nUWwyUENzM0VRQlhmK2VVT0UyY212emcKg1nBSq6I0XVf/qNmNLRsKKgEpz5Z1KkS\nSORG00uh7EXcnVdFPmLf3DEsPUnoNfXoHDgXOBEOP8kRwUEciazTBQ==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDE0cksvdjhl\nbGo1Q25kRmNjaXhXMFNGNFNLc2Z0T1dWZlc5enNZTkNlMlkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpyOEVZTUxUajNpeCtqcEpyc1ZZRWxj\nSW41c0dZTWFYODJDQVpGZlVnaXlnCi0tLSBiUlZNemhRMlExazlQREFYOGsxQ2c2\nam93cVl5akRSSHlJZ2JGa1Bmc1FNCqPKgV0nM9IUgpKa2wWrZyn7Z56QrNrT4L+8\nHqPToWF24itWig7ohHckoc+KlHMCLn6DHWbON8zS5uwH05j9lLM=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNpdGN0MUg0\nSi81RFlXOStRM3UyM1YwMDNPZ2h6U0gzc1N1M3J2NWVTM0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwoxRkNvYi94aS9QN1pzMVhSTituQTlK\neEFrZXdkMGZ4d0xDVmFOUyt2Zkk0Ci0tLSBLWVJlMFhKM1V6YW9DSEQrNjF3QU1K\ncSt4VDFUOFh2RlpmN2llTEhHVHdrCqam34rliA2MYqnsuOiCE2Qf6G0XDYV8+Y4g\nC7MZzhdr+DJ5L8EuovI8/mAkmwhMQO1DRsu32w+thCsfo9YASmU=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdNQzBrQkNr\nR3phTGZkTGg1V3EzTjhzOVNpSENuRGxOcGFjQVE5TDdpU00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpscmlUU005OU9FZHI5Q1VoREJvU05y\nTFJ3MFRGUDF2QzRCbFFFeUdzTnVrCi0tLSB5NDVQQzM4RnliSXdHRC9KS2hiYUV1\nbHE4aHozUTlNWi9reFM1NWN4bm9vCjP9hdbQLRnHOcTWbF/epfLuxf4P5lS5mEL+\nGDO9vOZzgdDVlrvuMGA2d38TOBW1mpR7fosz7N5YYE3gHmcj6hY=\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Zm1HR3VKenlyTTdtVnlL\nSW16NExJRG8zd0Uxc3VlN1NBeEplMUFpTGwwCnpCOCtSQUpmVnZocmpQYlNEd0tV\nelNUM3NXL0NyaXI2WG5hQVBOQ0duZlkKLS0tIFZhNlhCKzVlTC92UzJRN2JodlZV\naTZCUmNrQUhmaWJDNm5sQkhvcGtMU1UK3zBLa5XmFPImosmxB+wjT+xoibQn2cO9\ntmposaSKgnkyvMO7z8tZHqADG3Uw+BQYwOJMTHOEw5Ers0edP9cBHw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMaVlsSlRKZ3ZyQ0hDVllC\nVWFtcENqRUttSTZYQSt2UjA0RUJPTUhJWGhJClBoZUVPSSt0SlFRazY5YWxiZG5Y\nWGdkZ0RwME8xbFNUcUpmQnVrN0RnVVEKLS0tIGxKRkYxbGJCSU1KVzJPemhqTUUr\ncm05S084ckxaRkRKVjlQVHp4NktpZTAKjUCtoHgdtcFuKK++Rc11065nghUMVCJc\n6hnsIo/oJ1fUHE+IfXpjOQ4eazSh0ggLwPYnRCUiqV0OvXAIgwzMTg==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLa2thS1loc3Azd0RISjRB\nQ1Q3MFM4UnN0WisxaU4rOHJzcHVFMFFqSEZrCnpYTUltb29yOThUNXRodkpwZVQx\nb0FncERWTVhtZGM0NUVKR1d4U1RVMFkKLS0tIG5FSnZOL1pGYmZ0a0NWN01HRmR6\nbFdHUklrSjJnRWw3TFdRdHM2N1lQZjAKEN0qllgzMDcqrJd/oDL4f6pxFnKYTQ8r\nrz1Aa+wF9nasW7bkgv7NCxAn9yVldmKOc16cDDoqKfwnpmnugxgiEw==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMGVZUklDRC9jSlpwZXZ6\nQWVoaXVnSGhVY3EzQ0xjVXF2eDhLYllKSlRNCllXbTdqRk94R2k5UFllODZ6RG10\nMDVCRGp2WVhxVjA5UWZWVE10YTJiLzQKLS0tIDk0QkoxR2l0clgyemo2ZlZ1WmtU\nMGoxTW5kbFdic2dhRmZ0MDFBd0RIQ0UKJtDsYSmRizimNjNDuUJlTmqEM4rIKjIQ\nVz9n54qNYMuk2lIqeDdxbWVoeSC7AS+hEeiQRn0TK6Uy8sewM+l6QA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2026-01-12T10:53:54Z",
-		"mac": "ENC[AES256_GCM,data:oxUamNJ+iLQXKEHpBivMdpuWkKi+L9CsR+hhJDVdbHLsGuDtJrJB8wmItoB7CusgQJCtOnRBCcK79PXFlOOhlXIjm98XdfJgl0em1hQS0mGwxudo3dJ//AZI7thKE3/Ys3+OuFqXDZHgUPcuZVLCLMuiKVBIftyLrVtCaMQsPIE=,iv:nQxcOgWVsbvnbTegZy+pv3pIN4+dQdJYd59n7FFRAdg=,tag:MlF5nfs5EpFAvTPER+Y7aA==,type:str]",
-		"version": "3.11.0"
-	}
-}

vars/per-machine/rana/root-password/password/users/kurogeek

@@ -1 +0,0 @@
-../../../../../../sops/users/kurogeek