mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/rigel/configuration.nix

.nixos-test-history

@@ -0,0 +1,3 @@
+
+# 2026-06-05 17:00:31.237121
++start_all()

inventories/default.nix

@@ -39,6 +39,8 @@
           "hadar"
           "procyon"
           "alasia"
+          "rigel"
+          "vega"
         ];
       };
 
@@ -178,7 +180,6 @@
             input = "clan-core";
           };
           roles.default.tags."phonebox" = { };
-          roles.default.settings.extraYggdrasilIPs = [ "200:c806:c13b:b855:723f:473:55:7904" ];
           roles.default.settings.extraPeers = [
             "tls://ygg.jjolly.dev:3443"
             "tls://[2602:fc24:18:7a42::1]:993"
@@ -196,12 +197,6 @@
           roles.default.machines."adhil".settings = {
             ata-ethernet-iface = "end0";
           };
-          roles.default.machines."rigel".settings = {
-            extraClientNumbers = [
-              "01"
-              "02"
-            ];
-          };
         };
 
         pulse-stream = {
@@ -318,6 +313,102 @@
             '';
           };
         };
+
+        prometheus-monitoring = {
+          module = {
+            name = "prometheus";
+            input = "self";
+          };
+          roles.server.machines."rigel".settings = { };
+          roles.server.extraModules = [
+            {
+
+              services.matrix-alertmanager = {
+                enable = true;
+                homeserverUrl = "https://matrix.org";
+                matrixUser = "@kuroiris:matrix.org";
+                matrixRooms = [
+                  {
+                    receivers = [
+                      "default"
+                      "matrix"
+                    ];
+                    roomId = "!rqIrWqPvsXqMgYpcNZ:matrix.org";
+                  }
+                ];
+              };
+
+              services.prometheus = {
+                rules = [
+                  (builtins.toJSON {
+                    groups = [
+                      {
+                        name = "default";
+                        rules = [
+                          {
+                            alert = "test";
+                            expr = ''up{instance!~"(nerr-.*|theatnerr-.*)",job!~"lab-.*|snmp-.*"} == 1'';
+                            for = "1m";
+                            annotations.summary = "{{ $labels.instance }} of job {{ $labels.job }} has been down for more than 5 minutes.";
+                          }
+                        ];
+                      }
+                    ];
+                  })
+                ];
+
+                alertmanager = {
+                  enable = true;
+                  configuration = {
+                    global = {
+                      resolve_timeout = "5m";
+                    };
+                    route = {
+                      receiver = "default-receiver";
+                      routes = [
+                        { receiver = "matrix"; }
+                      ];
+                    };
+                    receivers = [
+                      {
+                        name = "uptime-kuma";
+                        webhook_configs = [
+                          {
+                            url = "https://uptime.b4l.co.th/api/push/$${KUMA_TOKEN}?status=up&msg=OK&ping=";
+                            send_resolved = true;
+                          }
+                        ];
+                      }
+                      {
+                        name = "matrix";
+                        webhook_configs = [
+                          {
+                            url = "http://localhost:3000";
+                            send_resolved = true;
+                          }
+                        ];
+                      }
+                    ];
+                  };
+                };
+
+                alertmanagers = [
+                  {
+                    scheme = "http";
+                    path_prefix = "/";
+                    static_configs = [ { targets = [ "localhost:9093" ]; } ];
+                  }
+                ];
+              };
+            }
+          ];
+
+          roles.nodes.machines = {
+            vega.settings = {
+              exporters.smartctl = { };
+            };
+          };
+        };
       };
     };
   };

machines/rigel/configuration.nix

@@ -1,7 +1,30 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 {
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
 
   clan.core.settings.machine.description = "Zima board computer for testing in B4L";
+
+  clan.core.vars.generators.prometheus = {
+    files.envFile.secret = true;
+    files.matrix-alertmanager-token.secret = true;
+    files.matrix-alertmanager-secret.secret = true;
+    script = ''
+      echo "" > $out/envFile
+      echo "" > $out/matrix-alertmanager-token
+      openssl rand -hex 32 > "$out"/matrix-alertmanager-secret
+    '';
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+  };
+
+  services.prometheus.alertmanager.environmentFile =
+    config.clan.core.vars.generators.prometheus.files.envFile.path;
+
+  services.matrix-alertmanager.tokenFile =
+    config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-token.path;
+  services.matrix-alertmanager.secretFile =
+    config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-secret.path;
+
 }

modules/clan/phonebox/default.nix

@@ -24,11 +24,6 @@
           description = "";
           default = "";
         };
-        options.extraClientNumbers = lib.mkOption {
-          type = with lib.types; listOf str;
-          description = "List of client suffix number.";
-          default = [ ];
-        };
       };
     perInstance =
       {
@@ -131,22 +126,6 @@
                 remove_existing=yes
               '';
 
-            genLocalSIPEndpointV6 =
-              { localNumber }:
-              ''
-                [${localNumber}](internal_endpoint)
-                transport=transport-udp6
-                aors=${localNumber}
-                auth=${localNumber}
-
-                [${localNumber}](userpass_auth)
-                username=${localNumber}
-                password=${localNumber}
-
-                [${localNumber}](dynamiic_aor)
-                max_contacts=1
-              '';
-
             genLocalExtenConf =
               { localNumber }:
               ''
@@ -377,9 +356,6 @@
                     + (genLocalExtenConf {
                       localNumber = config.clan.core.vars.generators.phonebox.files.ata-local-number.value;
                     })
-                    + lib.concatStringsSep "\n" (
-                      builtins.map (number: genLocalExtenConf { localNumber = number; }) settings.extraClientNumbers
-                    )
                     + serverConf;
 
                   "rtp.conf" = ''
@@ -411,7 +387,6 @@
 
                       [base_endpoint](!)
                       type=endpoint
-                      transport=transport-udp
                       disallow=all
                       allow=ulaw,alaw,g722,gsm
                       direct_media=no
@@ -434,9 +409,6 @@
                     + (genLocalSIPEndpoint {
                       localNumber = config.clan.core.vars.generators.phonebox.files.ata-local-number.value;
                     })
-                    + lib.concatStringsSep "\n" (
-                      builtins.map (number: genLocalSIPEndpointV6 { localNumber = number; }) settings.extraClientNumbers
-                    )
                     + serverConf;
                 };
             };

modules/clan/prometheus/default.nix

@@ -0,0 +1,123 @@
+{ clanLib, ... }:
+{
+  _class = "clan.service";
+  manifest.name = "prometheus";
+  manifest.description = "The Prometheus monitoring system and time series database.";
+  manifest.readme = builtins.readFile ./README.md;
+  manifest.categories = [ "System" ];
+
+  roles.server = {
+    description = "Prometheus server that scraps all data from nodes";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          scrape_interval = lib.mkOption {
+            type = with lib.types; nullOr str;
+            default = "5m";
+            description = "How often to scrape targets. Default is 5 minutes";
+          };
+        };
+      };
+
+    perInstance =
+      {
+        settings,
+        roles,
+        ...
+      }:
+      {
+        nixosModule =
+          {
+            config,
+            lib,
+            ...
+          }:
+          let
+            getYggdrasilIP =
+              machineName:
+              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
+                clanLib.getPublicValue {
+                  flake = config.clan.core.settings.directory;
+                  machine = machineName;
+                  generator = "yggdrasil";
+                  file = "address";
+                  default = null;
+                }
+              else
+                throw "clanService/yggdrasil is required";
+          in
+          {
+            networking.firewall.allowedTCPPorts = [
+              9090
+            ];
+            services.prometheus = {
+              enable = true;
+
+              globalConfig = {
+                scrape_interval = settings.scrape_interval;
+              };
+
+              scrapeConfigs = lib.mapAttrsToList (machineName: machineVal: {
+                tls_config.insecure_skip_verify = true;
+                job_name = "${machineName}";
+                static_configs = lib.mapAttrsToList (
+                  exporterName: exporterVal:
+                  let
+                    targetPort =
+                      if exporterVal ? port then
+                        exporterVal.port
+                      else
+                        config.services.prometheus.exporters."${exporterName}".port;
+                    targetHost = getYggdrasilIP machineName;
+                  in
+                  {
+                    targets = [ "[${targetHost}]:${lib.toString targetPort}" ];
+                  }
+                ) machineVal.settings.exporters;
+              }) roles.nodes.machines;
+
+            };
+
+          };
+      };
+  };
+
+  roles.nodes = {
+    description = "A node will expose metrics for server to harvest";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          exporters = lib.mkOption {
+            type = lib.types.attrsOf (lib.types.submodule { });
+            default = { };
+            description = "Mirror of services.prometheus.exporters";
+          };
+        };
+      };
+
+    perInstance =
+      { settings, ... }:
+      let
+        enabledExporters = builtins.mapAttrs (
+          name: value:
+          value
+          // {
+            enable = true;
+            openFirewall = true;
+          }
+        ) settings.exporters;
+      in
+      {
+        nixosModule =
+          { ... }:
+          {
+            services.prometheus.exporters = enabledExporters;
+          };
+      };
+  };
+
+}

modules/clan/prometheus/flake-module.nix

@@ -0,0 +1,19 @@
+{ self, inputs, ... }:
+let
+  module = ./default.nix;
+in
+{
+  clan.modules = {
+    prometheus = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-prometheus = {
+        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };
+
+        clan.modules."@clan/prometheus" = module;
+      };
+    };
+}

modules/clan/prometheus/tests/vm/default.nix

@@ -0,0 +1,74 @@
+{
+  self,
+  hostPkgs,
+  config,
+  lib,
+  ...
+}:
+{
+  name = "service-prometheus";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';
+
+  clan = {
+    test.useContainers = false;
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+      machines.nodeA = { };
+
+      instances = {
+        yggdrasil = {
+          module.name = "yggdrasil";
+          roles.default.machines.server = { };
+          roles.default.machines.nodeA = { };
+        };
+
+        prometheus = {
+          module.name = "@clan/prometheus";
+          module.input = "self";
+          roles.nodes.machines."nodeA".settings = {
+            exporters.smartctl = { };
+          };
+          roles.server.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = { };
+    nodeA = { };
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      start_all()
+
+      server.wait_for_unit("prometheus.service")
+
+      nodeA.wait_for_unit("prometheus-smartctl-exporter.service")
+      nodeA.wait_for_open_port(9633)
+
+      nodeA.succeed("systemctl status prometheus-smartctl-exporter.service")
+      nodeA.succeed("curl http://localhost:9633/metrics")
+
+
+      server_ip = server.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+      nodeA_ip = nodeA.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+
+      server.succeed(f"ping -c 3 {nodeA_ip}")
+      server.succeed(f"curl -v http://{nodeA_ip}:9633/metrics")
+
+    '';
+}

modules/clan/prometheus/tests/vm/sops/machines/nodeA/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/machines/server/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Z8I3ecNV2N2jed1sPBU+tI5r5qB2nVTO7aNyMxvp0ztujn8kXjw+thSvLGtRygL2V9rSmPJalHQf1IYUriXgCmYtfg5InPDCAqk=,iv:O4rSyg2G6PJWHURZ/BTBKmn1AVekbNBdg5137sOPL/U=,tag:4/CLfO50laZ8ljWkr6o4qA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWxnekYvREdZMTBMVlRq\nRmtCemFYZDhLYU93azc5czdoTVUydFFUL1JzCmo4ZHlrNi8yeW15N2JxTytWeCtk\nbjRwWUVlazUwTlMwc1RZVU8xYlVlckEKLS0tIFVPeU5KMVFwdExFT0wzeXZka2Jo\nSmxEM2RPTWdoZXJxK0dpemUzVkNzdGcKfXdiSeAcNwEZi7kh9c89ss5K+dYG0lhq\nFsf2I0A1csxqqnYJqXPmwlVGMzuWDrWRU0uc+hQLndP3TbadVux64w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:43:55Z",
+		"mac": "ENC[AES256_GCM,data:OCPR2tkbN72MdaczO47UNCJBb1KjABHQH9q7dtVEwoAhKg4QWFtsDaMwBTVE9qe48nlaWQbxT1mM7uztm6RXLkc5y2c3danPUYFj/FK/ffqpaxv3oReyxWqMoGayT23kFbB0TWEx1K8Jp3gOkwCPg+ZRClvhV1dXrfnwIwZHrBY=,iv:3puPIWFIxRF1KtrmyG54LqCc7Zg4/AOMD65QjYdN970=,tag:RoIVltMKw7WUvgW6sNk6mA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Nuq6ege3HJOxpRgA6fnxdD2Wj+KCw+3PaJCxmZirJl3mkRVLnZgUUhr+gOVEup9Ifjl1ZnP+PqV7b9pPR/WQg0LARYtxIC1QGJ8=,iv:v9p9lsefP5V9McAJCzS7v9sl8XHr9/hAL41XwFbwMOA=,tag:ETK+CFFJAAzGTpowQNAZMQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN0NEWFZoZWlyeUtZc3hi\ndnVNcHl4eVVHckRLeFhPYUt4a3BwMElFMVZZCklkU1NEWVVmSGw1NmJmWWkrVHFH\nVTN5U0x3NXdiQUJCc095TElzMWZCMXMKLS0tIHRXQkJNREFYUFFvMXM1Sk53VW5z\naTRjMXozZXZiNU8zSkF5d2hhdklBY1EKWwsPi6YiHKFfAyqWH2u75hw47gzcQOz/\n95Im0FgadhqGDCeZhTDfEAc4b1VWQULInsjeRapzf5OJOwekbz6guA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:26Z",
+		"mac": "ENC[AES256_GCM,data:mTKFSBFnUzu3rldQCHPZHoyzDdwPzBWPIAhemC1XyG5PiQ/OczStjYaLzZQGCpPvOjBb5Ntqrc+dnaOedZgKlOdaPjZs1U2ZDWadoeWQ2TAKWYA6+kN7PXomsxtHhntiaujMy3502eh06VyiutpVuCdzK2cfEwuno8nyIcHgtXk=,iv:/5DRvFVDQA+yd8m/+Cyxb+aIsfwoaFcV6KRQ/7ISHnU=,tag:z31P6CL0NNRlQThqwapVNA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/users/admin/key.json

@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/address/value

@@ -0,0 +1 @@
+204:b10b:6057:4bbe:2b44:fc58:c6fd:90ad

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/machines/nodeA

@@ -0,0 +1 @@
+../../../../../../sops/machines/nodeA

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JkuciSmL5nmSjcYn22W7iHKzuRxWMJ5dixYllm0aSM7DsyAp9mQzIYJJmalepp7sEhSJ5As3vQW6ZpOQ3G8ZheG06++1GlM8lvVV2FKmYvKHQpI+V7WyUJl7dpfu+5A6BzWES0GbC1g8l/a8sb/+jjEoqUTAj/4=,iv:tehdHsdm2uSRAAzImHhwBSnSBF6lzjLzF9HIPnoi9s0=,tag:dWnQhAiJeCkcssjko+dUpw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVmRSR2xDNmdPYW5MNUVH\nYWVpaTc0TjdOZFBTSEJDL1Z3VG9vVHkrZUFjCklUMUU1bnVmZFJYbzVPd09oZm1U\nNHY0R1hNQnBBc2V4Y2RWQ1ZZRjdOK0kKLS0tIEJkSWFaTDJzMDNJR3QwQzRVdld4\ndDA5ZmZSeTYyVUE5Y1Z1T1l5QmpHRTQKSaN+MIazA8RXhRSyFSkDTyXEp43COpbf\nXOzAhTXja+ut/akUuKadDS4xycZ+ZXAreVmdsF4SWvwZkmPeew+hKQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNmZkTHlaRWl1V3UvcGxk\nR0hhL1lNekNzb0REaEc4bitBZkcwYmRDb2hjCnloQTZUL3ZneWZQZk9NTEc1bGNB\nY3ljdFRMMUhLeDdyblhVY3lSOFBXc1UKLS0tIEJUc1ZpQmtuNlRUUEVmajY5TGdP\ncSs2RkZXcnJYRlEvcEtYSWxIWmkrVEkKgQnfxuZuxl1OpZDUPVuqseSN89WnBGFw\nx2PI3cqN67R2tV/FEjOZo+GFgxW93SYdMvxzg2aG2q/7xOQxfj9sjg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:44:25Z",
+		"mac": "ENC[AES256_GCM,data:gRk1t7xFxXSTUcZQw0DCH3QtRnQJF4Mc4kZeeckhuQdc/VATj+cq+ugicrcGJWbbXzAscQLG6g72+Qiane5nFfzmjNoO6JMe181wm7pY/5St+2MjXZEzwAaYjn6ZAm+U7aiUVcp8RBjFIL9HCvBF8qFl7rqqTvYHnTOU0V6TIIo=,iv:eUvZFDKl8PX5QaQPmwJXaokawQMNP0TGOklTAMgB/sg=,tag:3cHICox8bKWkPKMUgvLuXA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de

modules/clan/prometheus/tests/vm/vars/per-machine/server/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/address/value

@@ -0,0 +1 @@
+202:8a70:e215:f822:c67a:f191:b04a:a8f

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/machines/server

@@ -0,0 +1 @@
+../../../../../../sops/machines/server

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JcxiDqZDX3J3ooSeN0pQ28uvI86mtHUf2BEcOQdFIDhJZODGCc+BhZvBQmu2mabV8Jf4skrTWqD+60c1fkRcsM+MMXfoyNsrRyQ2K39mG4kl8jJKVKDs+BqXa+CvZ96kesOMgi9vdc3YUKo5cCLY4bQ9VwymqH8=,iv:W3z8Pbyo2IMzkxI4k14FlirLa28qgZ3rnTAWuusiw/0=,tag:EQc8mo/UvACbt8hQv3zPEw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRDNOSU81alN2THNQQ3ZW\nbHVjMmxaYWpzak1NZHplNTVzZzQvMHg4azAwCkExb0VLYlZUd2JjVGNlcXUyR0p1\nWHk5cXpOeGZ0VFRFTGllQWpxRlBTRk0KLS0tIDhKeUc4RHQvb0o0ZXFXZUNCanVY\nYm04TVBoWjlLT0tFOHRnLzd3RHV2ZzAKVpLtENDySGC6UDgAwhDb+7KJiHXOZF6n\nIaeIQWQqiB+45h72NE3yh02boPK8pl6IoJFcK3e4zSO7/G8jGUp0MQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSUZXVzJwVHdwZGtxOVRu\nN1hMZkltdVM0cnNRL2tSNENkSGV2VzFIU1VBCmRZWlJTODNPMVRjVWY1V1VZcFln\nTDE3N0xsMXdMWityRUNUYWlQOXBMMTgKLS0tIGViTzBrQk5wQXBYQitIb1ZPUitC\nLysyUER0UjFlZm95c3ZGK3hEMEtrNUEKABpoKBUnvzQKSrgsdnU+uyDyED0Tlr7D\nnSsf12c84cvdt0OeCWwf2WvBANZL26XTcFq1fBYOFTJqNLs1ZfO2kg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:55Z",
+		"mac": "ENC[AES256_GCM,data:jjhkZB9NdpvV2R0k9yS/AcUqeMr1RLv1UZwGCemlKSwhBfs8E5NxTXLhtmJeQ+hltOTYpz51BIporVtlaH6ElVnh7khOrG3Lb5cLBrL41QM59y3Tbfu6TjNOE3NyMiWuxZnwuqUGWQjsjrIIhE0ftKnpSpkGHMie+BC3iNSB1tY=,iv:onOVK9eJxWOaIjChQD54tz8lY+r/jpp6AArsBIuoRUM=,tag:2Oas1C5D2kZOe4iiD5huyw==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8

vars/per-machine/rigel/prometheus/envFile/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/envFile/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/envFile/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:1Q==,iv:3jt40fLaGPToLoBrI27D5bhnFiDToZUEWH5Kq6C8x9U=,tag:1qnWJUy+VaNuuv0qGVcnoQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVelg0RmE4WUl6VzVvR3Bs\ncjBWZmJQQUJqdTRsR3o1THhqSHE3djdlR0E4CnJnS2FXOGFSVlhHUUlNRE1wV3Rk\nY0NDQU5NOStSR3YzMVVYV1hUL3hsOUUKLS0tIElIR2xad21kc09vVUJtSmI4WTI4\nRU5LeXRGSDRWQUZiemRUTmFWOWIydGcKCJmbxmQEjt0ijydqD2aqRk4LeMFEMnRg\n8gpU2DWEYc8XBn8e9LKSl5s4BytYD3+TPzxAn+16edan/XlGBfbqKw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoODg1YTgzUFV2Y1ZJaUN4\nMTN1Q2R0dEhYcnRPaU9yWWpxTFBSTXRpR3pJCmVVQlE0S3N1ODVoOEFLaU9uYzNv\nYVBCRENLRno2YStNN0xFUXowL1ZWQjQKLS0tIHIrRU9EY1RqNUxXN0RvcXFGS05X\nMTR0WldUc21hRDBDWDdXMkxPdHYvUEUKM5kpVlxfQ3/V/daQcK1dPeUbdOUFARe1\nglf6wdfrc/CfJN7q8UWPwwrjSf2V2Lyy5M7hz9jIohSrTRe4APPT4Q==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNiRUllNWMw\nNUlnVW5FVFZGWXBZMmxSK3l2VWJYMVB6c3NYSEVjMjZCeUUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpMbW9KYjFMYUxvU1NaNGNheHRHQXFr\nd3lnMk1EUzU1d1pCWWQ1bVpDcEs0Ci0tLSA0d2dIWTBBLzkxcHUxRm1QUHhkYi9F\ncnRaSlNta096QkZLSzFWR2kyUWk4CnJrlIHWCEWzIuWW7iJtkc0mDL0y4a3/THpz\nDPBfKRN7O3XM+hHZCnUmf9CKBlk+k50DkIO/cVJq3/p5C5xnxYk=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFErTEJpQitH\nMmJmYzF1L0tFNGRmZ3ZhVVhUOUtjU2JURFEzdXBnQnBBM1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpKRE01NWZ0ODV6bU1oK3hHNjBOQlJB\nNkFSOGJoRVlPVzg5dkw4RTdjS0FJCi0tLSAzRHVxaVZBcWJqUkhlVy9RYUI0SHRx\nMGhJSW5FVnVZSDdLdy9pY1NqemFNCi7Di9U7geqJPr39b5/K/0EUTjxmJ2NAMajW\nXjoJpLJ/kQZqDxbcXNydYH085GinnF4pHMwEYRXMcjGbDQ/SG3o=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHBkc1dLdXl5\nZmdKNy90M3NxczJYNmJrTnI5czMrYkZBdnJXNDAvTVJobmcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpWejZYOUJPYUdWbXgzSy9RQW9zakJv\nSTVrN2ljdWJFV2hYUGpOL2V3NmF3Ci0tLSBSWE55akJFS01ZUWJROHVYaEhjOGlW\nTFo3QWlhcllZQmFFSFVuOGFEOW5VCvPX2mrpT0HIA9td9+AWf68iIwbsSzWbsIti\n7LBduKvNAukV3fBFyrmqNIORHFtNG2gOV3nC1tp36ohmXkOYzEk=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhSzJkWUxCMUtmbDhPTVl4\neFllQXNiQjlMMkpBa1AwQUsxek4xU0EyeUQwCjJwR1JYaFpaeUNPRHM4dU1PeTEw\nK1JnUU50Q0QrR2pXYjJ0WmNwYmoreVkKLS0tIHBQdjIxeE5LdjBTR3l0OWtsYnV2\nVXYwbUc2WmlJU1NsVitNMnovN3hEeGsK0EUPLniKrxN9bXrxSnksY5PJXjlEmVeA\nsyvlqQbq9iUQPsvWbigNMnX0BhQnjf6JsuMVOEoaoFVOlNs0ynKjKA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBINTFJT2V4OWpYem5PVi9s\nTzI1MjV6eGJlM2xlWjlJNnE3VklHUEM3N2lrCmdLSkRZTGJXWVA1UUxOcHdaRnl0\nMUQza1VTZWFWckJ1R3BwamVUUUNMQ28KLS0tIEk1emFTcStsSEc5ekhSZXVNc1Mx\naE05TE9GNGJJOUV2YzgyaDVlaVRxaGMKXzbtnWhIyR/VOnJhR8KDKxjEC4tqimW4\n+5xZZ7KsZOeBFnbFBVSDp7TtP2hvB/rVubKIRAS+J9G5NrTZUY64mw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUitvRS9GeUdLdXVRRWJo\nbHd5NktpdEk1SERiTTB4cUcwQlpNZWJ5TnlBCjgwemtLUzc2VktxaG0vYlF6S2kx\nbFVKcWc3a1lERDBCMXA0NmlvZzVDTkEKLS0tIHNJcmlXRTZ4MmhSaUVadlFhazVi\nU0djQXlUYWpZK1ZJaklURFZQdzR1YmsKs1HLT0kDeV/auAu5774Cw7dbQR6qrXnH\nMT6+bFplgJ0MFw++yJPXKletZDZ0ggyo+WeRvqwpGhCVBH2tLGeh3Q==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYbmlCVGI2YVNEQTl4N2Ju\nMXBYbk8yN3JrOEdiQVRvUEJtekZmcyttSVRnCk81bzNyanR5YmJ1aS9WOWNGVG0x\ncHUvejdFLzdhUzdBUFRFWis4Z3g0UkUKLS0tIEYzUXFzVUdWNmZWTGE2NGVPRWdj\nQ3AxTkU3QkhtL2tMTkhOQmJmYXE0Y0UKoSmjLAFI5GLXvIOl/c70CJ3x4aJFH14e\n+vB4YnB7i4QJMf7zR2JkwYXdQWZJmsWyW3gk/FS95II9fFsSKReMEw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-17T11:04:51Z",
+		"mac": "ENC[AES256_GCM,data:9J+vNT2Cr5/1cEcEFVRAY8glbaJuOjQMiB7fkeOAsg1CzPf5lMsJNd8EzseK7E5ACKurbtqqBxYaZClrrb0WZsQUM4J/Znlu/jAe5Lhka+yDJXx8IGn8GeMzE2j+cAo0pbH9agccMfdv0CKGE04hbdNoVtq6bs6Gt2YXAgzPsUk=,iv:HL21k/AYr0YXdvc6eoIxI5vXR19YAvXuhYvH99eU05M=,tag:va9XcmgcpNmrWgaJwXaZtA==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/envFile/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:FKXtQ30oqSogTXhMb8+W0inWnijMOLJX+BRuNcF5W3wKL5Wt6I9dnXOxTrRGP7kXR63/gX/UEpv6/vfNhA1TRho=,iv:XCPPZZk7xpvUdoOQJMCGUvV7dN/MijRejDIUqk7ht6o=,tag:BKctqMHcYQ8yHiQe80INEw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQjJKS2RuRnhTY3JzVWQ4\ndmlSMXhDQ0VtWmJQUjNBeGJmd1A1VWt1bzJVCjgrdnZRTnA0dEtsbUpWbk1JVUQx\nbG0wS0tqdjJFeVpjYStzR2NHSnVtQ2sKLS0tIGlaRFhMSUNoVjVqUSs5L2NMTUFM\ncDJsU21nN1QvQ2l4czlJT3VFcGEybE0KNfXKuiC5SY1UTrChhIVy2X/AIzRVHx29\ny3pZ8HK/pK0303uOuB+FqUIiSSSgsB3qw3vtEPwm3DmjmquuNNvV8w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRVlKQjZRaFQ4a0pKRjlY\nYUFIRU1LY2J5Smt5SmZQNXB1SmJDYkhZY1FJClE4ZlRUdWtaSzkwd0pHMmN1ZUZC\nLy95b2FJbk5ad0FjbE0waXc2MnpkQXcKLS0tICtVM05heVJXcDl0ZUgrOFBsVGxu\neFRSV2VvZ2cybThPanpQMStFREVRVWMK7Ot++8s3/OzKh5mV9ff83cM86JTttwwE\neTOchMBbclaREkEFiNS10JaLzNjqN3y+vI1Kx1ja1InAui8qY9Ln0Q==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExyZndVdWZy\ndnhaVW4wYjNsYkxoUk5Lb2ZpMkI1aXVmcTBlb09pd2RLVlUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpjdnRxKys5eG81bnBvUTE0QzkyYnkw\nN2tQZXRwS1pwcldhNDRRTElxdHRnCi0tLSBvWUp4czRzMzJYUC9hZjErYWR0RERk\nQTR5aW9Vdnd3ajdoalkxc2dCNlJNCq2+YBAOiAYx1YTC1zUgyDn5Z1N4SeEPAC3A\nTjiBx2JfbDAxNXdpGQdpFsuaKsAVSnVPuJeQbhS65/x35d7vOMI=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEk5b1VRN2FK\nMFNmV3ZoYmREOFdzaksvNC9IVWFWQVppOWVycmI2OFVtaHMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpaT0lValZwemNVdS9YTHl5eU8yVlJQ\ndmpuWUJhTnJ3dVFZQ1JEYitHdGFZCi0tLSBoekdKVmN3OEE1Yk5oN004MjZFcTlw\nZllkRnF3dXIxamRTMnh1bDlhQ1FvCilV8CjTZPajbQiyHc+Oj9r/Nbu08XsdseHC\n7fbpZqMOb9G6rUYdOkxsEAi0L6YJkn8w0/7h5pnDCBCw8+r2dfI=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEhXeUtFUSto\nTWhGT3RHaW1IOFFxT28xSzFuU0FuVmx3Q3VVeEZ1cXZnRWMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEbmhNejNNdHVyNjZnOU15dDh5dmpM\nbzdPYUlsZ01MUUMxdFlaMStWV0kwCi0tLSA2RTVBTnNlVkpYT2M0TThkMVhId3M1\najRtSkhWUGZYcnhaZWt6eEVPdnpvCraKfCsYRiahSlvnOkhg1i+KehBOp6C3ac/P\nlpWDGG7w3UbdYIQkMpd8xt8LFSxke6MwLNFQxx6wx4FQm8zXjIM=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjYzR5N1M0UGMrSG1iVWY1\nZDZmekRqVnJwc0xKYjZmVStmdVVydTBEaUJNCkFwN2pVamwvVEgwb3g1UCtkK1RU\nR0hxV01QT0JYMExkT0ZxdUpFMzl3UUkKLS0tIElUVld4eDAxczlwZU83YnlLQURQ\nYitiSms0Wis0Q3kyU3Ridk56cURBdG8KcWJIBYkTeQrSpB31yDUJyREjdc3/1g98\nveAgHlmAouBBUq3YKotfLwvD4FB5rv63ksdx0Fhk4qPicLbGctqWvw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvTjdpak02YXlHakJySldt\ndi9Mc05INmFxY2VMb0x5aEZKYzhWRDNhOGhNClpqMFZxcFBwNjNobGtpVGk5a0gv\nRk41bTMwL0lQT2hMMHhXNzYxcS8yYTgKLS0tIFJ3bXFyaitrcHhwSGdzTjk0d2Y0\nMFNzcEhWdEQrZHZEVG9xdElwSGs5YlEK1GQp/vIiTYg3r5l+lMaRSRy3wkN9q9K3\nDprY7a1+/3nCY4KTYqCLS2grB1+RsF7ucclc/T59JQYiAPog58Tl5g==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnaE1OM2oyK2ZydWJJWk5y\nRElTOTgxRHpUdXptdlh3aU83Wkp6OHlKc0dRCjZjVHBHVkRTZE1yWU1GOUgxNzdJ\ncHlGRVJlcWNvc09QVERNbHFqdEU1dUEKLS0tIEhpMVliM3R5MXBrZWVnTXA0ZnZL\nS2kyOGNsNGxqS0xwcStVVmJ2cEkyUEEKmEyTAk98kggiIW6D0fMeMYg4OBYOdL/5\n/vAaOMXs2FcFMzYz2jVkw0AKMf2wYebX1BGNVgXLpsgwnadNEBJa6A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVc1RZUUpUWGRudzVvc0NO\nejNsRkNHb2RSZFVyUm16dGJrWElPbVA3Z21BCklwK0R3TnhDSGcxZC9qaHZlbm5u\nZko5eDJ5YWZXeHhzMnprUGZpVW5LdUEKLS0tIDNBVDdONVE1Q0pnbTJqRjlPdkhv\nMzZuRWdvdldNMDhSLzlueE54VGJHazQKJfjOOalSVHMuP+Y2WgIeawRBMt0QCqqE\nZ4i67eFpLCmM4AH/19nhTHh6PEDVR1sKFpwXei8frlMFXHmuV/qH9A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-17T11:04:51Z",
+		"mac": "ENC[AES256_GCM,data:N1xr82U7dsMp2Y6ds8KnhEBsL3AR8+HKxOSOo4Kd0RUFxxSG//NYSEZjAEWD7ej/tpxrVbS0/NJFkmD9HTQ/yJyLzFf1sT8V7DIS61KU3QODu/rlQF0DcG2ZUViBIG8g6oY52SBlz3qBam9eAxYyx+4ExatbKPx51WM/S5WQm58=,iv:vqLFqYp6bxAgKeC8Jih3GR/nVIEZQESlESo9TbcQ4vQ=,tag:jBXugmOtKRkeT7PJvJq16Q==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-secret/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:HQ==,iv:iYg4K0rCTqiUJPEHN/3FvqwrelvO+bRkO6R63txyvt0=,tag:JzBm0ztSFQ+/V12ySGHuBQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSzhReTgrb2VHcHBPam05\nWHBnaWxMRjZSUFY5NndEVEtqZ0c3SWkzUVc4CmJQYWp3NFVHdUVHcDFxUVBRNEZi\nbXpWZldrQ0NNeUtOQnRRQVFKU2x2Y1EKLS0tIHlERXZSVWxKSEtIYlFoRFBaQ0l1\nMUtPUDF4SEc5VEx5R3VxRld1dGk3blEKbpMAo/4TITqjUF9OxiSX83fd8neXUGNk\nJCYySANH6lp1CUq5MIBB/RwBSjnIlyGdoB1hkqQtjsUmU66ggRgH/A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwNlRTRmpNREx4Tkc5Rjd5\nVFlyS1NEV3M4ZWlveUpIVEpGUDRxZDdPZTBzClBYMm94bWRKU25iYjRSaDJYeFMv\nWXNKZ2grVm5lNWZ3c2lIbDBab2toMmcKLS0tIEJubzRNNU5NYVhaUCtwRWJidWJq\nTWJXN2FOUEpLR2hRaVJ3c3dvbm43ZUUKZPr0PGC+aLqnTPG2lF7oJ/4kDlbhGVk8\n6HOJi05/5hseFKKAVWqPvCwhXoDlbujGlmlvW/Wnt4R/qQR+hCPrXQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEQxWHdUYjQ4\neFBTRlMyejJlZXBHRkluUXl2NHNweFNTYm55L0dMbkdQQVEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpJK1VDOVo4OGoxL0NmaHRSMFZMaFZZ\nQTM1MVVrSXdJM3EvdEJZLzF5Ty84Ci0tLSA3T01BcFU2N1BNL3BObGw1ekVBWUtt\nZy9ublZEWGRKWldKaDE2WjlyMTRRCkK74torehoTNjiq8Kj37wYKE28Hy5g3TyMf\ngJ9um0yH2ClfPaHtfx+EGeahLSXYzMGkhwjcKSHm2Mfzvdy+AHA=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGl0RUs5UmY1\nUU8zeEhHTG1OMUx6RmNjMUUrZWd3ZUVnMmxQdGl5L0l1RnMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwozb0puWWRLOUgzSXBsRmdGSXdlbE9B\nbU5xMXlUU1E0NEk1Qy94ZjNaZnU4Ci0tLSBjMGJnZXluRS8wdWY4UFkxR3FERFUx\nSkxOR0xBZERyQ0FRYUdGQ205RkpnCrzY+Y63Dfoj5478VPT3wzrnvo9Y0PMfSUi6\nwJJeGe00VyYZlc/3BChivyu4EtI6glgq6s1NQtfwIeBESW7EZf8=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEI0QkpQN0lW\nb0tINjl4ekFXWnl2YXZScFNRaHp6c0NwSlZ4eHdnZS9sVUUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpqVS9xNGVKMWE2Z0ROaldBZXZRN2V0\nenZGWG9rMm9mR0ZnaHF1Z0V0ODBjCi0tLSBMck1sY0VjRlVkN2dRZGhsRCtYVWdr\nS1lqVW9CTXZPTlZKRTR2b1h2WFdZCq0eVuO6PW5YgAQeKcX4H22Byvt95fZmAeyh\nfdA+W+u8EujpAvOtDSn1in9sdUX/ojLNi6ZniWHZN8rYOw/dwyA=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoZjVQSG80U1YwTTU3R0F5\ndkpGc1BoZitzR04zWDRjK01pQm1BNVpQN2hJCmdOczJSdXB0eDJwYUU3ZVpLbm1L\nZmlNSXFLZDlIa1hMaXV3MVpvUDlZcVEKLS0tIFM5YkxoUkpmVHdBVXpOZUZRdTlS\nYmdkZ2twTjZrUVZHemVabndMbXRvb2MKlg5NxDCvLdWRJMkiPbCem9rL7R2unj/6\nzQnvdKruOdIbW8Q+VFL2vEz5EaGdi3b1FFi7FwF15JysW8IzFji0gA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTaW4rTi9sQlAybEVFclVp\nUlc5QnNtSnF3bHVUdWtYTExub0pPNGZFbWdRCnBVWDk3bWRhRWIvYW5FMmJteUps\nWFVzVFovNWcwQzRQbGcxcVNkYWJIMU0KLS0tIGs5aXBHYUJ6TTFaZWRLdEVEMWI2\nMTk3dUlSZTBDVEx4MDdZU3lFWUJVY0UK6urNCddqN4xlts16g44T+bKiHHL0JzoW\nmDSLniF257PpzcW/gy024GeSCb6ukz/+cTduFpofNJ407ut8iEvu9g==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqMVhYYWJMUFpHWkwyMTdo\nRkVJbFJwMWNFc2YyTS9kVktCdk4wbURFNWlBCjZyRzZLSmpyWDZmNUI0ZnNORzN6\nQ1c2L2pXMDJUMnZxMm4rb1JxdzVFTWsKLS0tIFdiOC80NXZjRVVZZWtKYzYxM01z\nZnFGMW1mcTIrVnRGb1FKUXFZUkhmQTQK8kT46jq0NLgqihKsalfnU0j252+Vkn0O\nruNfIUn1kcO9oM5zvs5Nu97LDf4oKkazER7ZMup0V512W3yNhfty7A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6OGU1YTdyU21YV1BqcFlD\ncFNuSGFJWkZqYnhTRXRXT1Y4ZWxJY3oyQWtRCitoT0dpUjVwbVJ0dDhkQkxyK2Y5\nNmZuQ0kycEkwNDU0NVBRajZjWjRtQ1EKLS0tIEhWZXd1NWZjNExnT2dOMEJEN3Rr\nMFQ2RWNRcW1GbGtqSUh6ZGk4MDlNZkUKBZ/LAvDWu+e4aK4SOzR/J7Bs/e0Qmef7\nF33/ZofuNIzMHKe+3Vscw58ziEXG2dXi60vbGsoZlySI1LqPapFn7w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-17T11:04:51Z",
+		"mac": "ENC[AES256_GCM,data:knx3425wHnbo3EtSQ2KVaWtHJTUzMZe1HWOBSd/D9Nd/TxDkCw+pXJE89X5WJ2HKqYIutPVwcsDyYvObWBJBxX+KwiQrPuvQydkun7oN6DXEysLNEp9ETw0Qs3dGAFUmn58j3SSMlfvG9Nr4iIlOYpNZQWrkz0bHgSaMCKXDlTA=,iv:jy1QAMSv9LLOlIo59DATLPdUVPvJvf/580BwY7p3IEs=,tag:gQjivCR5Z4O9upMR4WNKyg==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/address/value

@@ -0,0 +1 @@
+200:a785:5b01:5309:ebc0:3942:2a48:55f3

vars/per-machine/vega/yggdrasil/privateKey/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/vega/yggdrasil/privateKey/machines/vega

@@ -0,0 +1 @@
+../../../../../../sops/machines/vega

vars/per-machine/vega/yggdrasil/privateKey/secret

@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:lDcpnZV93rkYascekNZS4PZfiKNoDfuEsKePeWIWe4iQZ3Y8NOXcxiOQMCSXNPIwsh2N7lG5+UtWidJ7dDenoXD9AwCv4STuPL4cXi9flgjozgYbW621Q//9p0jqpD2Xxq8R5TqO5WtZeQK9/cOdyJlLTqUPIKw=,iv:1aeRaEqTOndGlRpIZ9sI/BNNFtKj04aBPqXHbYDzN9k=,tag:JbApghVPv5EbSX06tVW/wg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUW5jNmM1YzBod1VNQ2tW\nT1VXUENXSjV0RTIydzNpc2k0b3Q4UjVLdGdBClVuVC85L3NxcmhScGkrMGF2czRr\nV0Z0MWRhaGU3TDJuM0JNUFY0YW1BTjQKLS0tIHlaSGdGVmJ5bU4rZDVZRjRpQ3JS\nekZQZEh0OGEvVVdwS3FBellzWGQ3TFUKtkSZgRKFFMCxOIDlXk9r0/GnfH0g2moy\nGbTbC5EfpBHEA/MHuIQTwOngPtGmEjBsVThIR6/hp1ZOJzsYHOhUug==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYWJsMjA5K1N1eFNSNTNu\nbzc2QSsrc0hwQ2dVSzgrSFBDTG5MaW5OUFNBClptMFVtcWlnakFuWlIvck0rc3Ri\nNE5aSmJiZEJlWVZ0enFmR1VFaEU2bmMKLS0tICs4MG9oR0FYcW95NzdCT21QNHhO\nVFJldnB2L0srVFRrQWQzZ3VxZk9VVUEKf29mLBC36j3PU+jjY/g+c4pbegZhV5/P\n9yylea0RFXQzyaFGzjKgyiR7pfUjIVMOZBjB9sha0xRN+SPELpfAOQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEVXS2szK3d4\nTnJhYVcvZ0JVZWp4cUJDbW1mVXQ2VG4vUXRlRm96TkhOMHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQplZDkzTzltbGkydG1QQUpTb0lyS1Rq\ndHNoemNOREZLOGt3VFZxcnlFYzc0Ci0tLSBWUUYyUmNaQWpqNDlOa1grS3NsaCtG\nM1JKeVNBV1N0bC8rRnNOeEJ5bVg0ChU0g2KzUngIjjGrukA/Y9uCjHfHuBV9HNY/\nBHqb4wDjHFR9Usu0YvTKUoOoUiIDHvw4m6VCIuJss6gocoxAP8E=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHV0aDB1bXZx\nT00wMGlBU0NZWWVjODZqN2p4QnBrWXdzZGtEZytiaCtCMDggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpBZ1Y1ckpNNWM0TnN3T3FFaXdGalhz\ndlNKaFo3TityRkhCQkJTV3RlRFo0Ci0tLSBiYkRuNkdqRE9wRmx4UGpFd1FBYWZ3\nWHdzZS9YaFFaK1VUckZDYnNtZWtnCrD+CevFcifB+zIXE9p9qXjNV67Dy6/GzPv8\nD3t84N4A48Jt1dMZc7B3DkBWeX4Iyj0pb6Fbs1qhkuRmPMiSWzc=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDhpL20rSWNk\nMXpaNHAwUWRjeWhjaEt0VGY2aVdCVU55R0R6RHNBdnlPV1EgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozaVBTWlpKdzFhT1hvcUZPUU43dzcz\nZWFhekVnWndCZi83Z0xYZUVneWVjCi0tLSBBUGYrdmNuV25EVmRFbkJDeFg2NWUx\nNTFZMC9TVGlCVTFYM2hra25Ec0ZFCs1GjLDYmDyzx8VtlNkkPRaNc46E7Tzs8uDs\nCZYAsCojTOaC0IQVpE3uyeKuK/JW/cSnfgNNixYUyEd9w6g+hA4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRDViZ0FaM0lDaHpDYUdx\nbW84T0NicmpsYmIrckh3aWFpbUVnc2d4clgwCklvL3BENlY2bEJ5Zm4yMllNOFdx\nQk1QQ3JVYVRudXJ0WWd4dno2REpqcE0KLS0tIC9EU1dUVHlyVW1nV2FGTmNZeG9y\nY1l3Z1dQOTZ3eXorZUwySHlBRmt5bXMKVbcXButS420nTtCZQxD/AycDdIEbCA/t\nGfVk09V2+BhYG0WNhQ+0Xw5r8gtPr/9oBwyAIkms+pWkxVTOKDtWMg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEdE5IajFPWnJzNWRSWUJv\nNXpNZnRQSUZtbFNnNllNSUNSYmxkREZDRWhBCmFJeVRYSVRGcGxXUVdtaC9waUx3\na1FjdHY1Ym1XVWNHVXJHcGpKTnBaaFkKLS0tIFZNYU56QmhRQUNVNkFHS3pyRG5I\nMG1rczZKbHVxNzQ3VEplazVPQ1dkaWcK1QWlmY9AeEKkGLI4qlBp4fDAA4Bs4pef\nPN4CaKt7oON6bnjxfIURgezAOvkoGRrtbUO38UOVxjdYVrLiev+pWw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTDQwVVdQS01kbXgrWHBG\nL1JMWllLY25oQ1NtNXhleXdsMHBpOUExZ0F3CkgrR1dEcXp0SGRpZDE2bm0xZ3E1\nKzZxeHd2Sy9QMDlBTXlKeWRyeENIZlEKLS0tIEd0Ky9oek5PM1dmS09vOEc4UTg0\nRFdrYjJ2VGNwV1crdDJqSnB5VDlZMlUKTP8s5r3N2L5/dArDw249r+CW/hokEwrp\n9Bn0nCR/y8/nutEEIbk12ynB6GtGCVALcXJ02v71BbBf3i+Xb5fwPA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTzhvb1FWSGVGMHRNM2Nx\nYlVMVFcrN0R4M3dSbktMUUIySGkrSnVEdkdnCmpBa1JCWGo0ZlErOXRSRkpkWTUr\ndzh3bFMzMFJOQnJZOTZTb2srL2wyRk0KLS0tIFo0TDU4R1N3Qk5TWDM0WXpLUFc0\nUys1b3kxQnRWV3hNWVhiR2dxclVPRFkKb+nyhsLw0OILedW/spASXMGkuapSjOQh\nyRwUUdHOa+JRbjLLqnfG02xSiURiRhZNVz8VSXZDKvGjKdhSELzx9g==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Tnh6NElYN0crQVM4N0ty\nN3VGQmtrMnArRmJkV1IzT2E2WG1BYUNyK2wwCjlEbU5mdExWTnJrN2VLRTl5N0dZ\nWVcwOWtxVDY5Q3FIVmw2TXZ0bTJEY1EKLS0tIGtMQ1VaVndRT05PMkdjQ2o1LzFO\nemwvWTF3L0l3anRhV0htTG85TlNhUlkKzhNT3lKCaBIUt2UDO6dIe+FGhkELtsP6\nXc9IaaXIVA6vLKAdh9xPHBGP4xG+b+86kvpYrsqMv8IRz+Os6AUQHQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-12T03:42:22Z",
+		"mac": "ENC[AES256_GCM,data:Mrmfvz/GHbqVFFtpHEB8a0y+9PRhPT38T9F3Ap2DiowsJEX+rC8qaQFTJ71HNkFcGQDkMeL6prY6JZoejhbbkxZma87+6+cfX+xEciQSqL1kBjEEGfLjws4V79lK4zC4Q5NX1Feo7L08fcI7Ko3XbH1dRL66yEtk8+2TjiZ1VYE=,iv:FqqAWCg7YoSOwWovGtlKa5qqU+CM7BIu6CgojXpElMg=,tag:u0B80zW8vMqy9UJylJztGg==,type:str]",
+		"version": "3.13.0"
+	}
+}

vars/per-machine/vega/yggdrasil/privateKey/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+ac3d527f567b0a1fe35eeadbd50637ffc60407b6af311b56f997cd863e45ea0c