mob next [ci-skip] [ci skip] [skip ci]

lastFile:inventories/default.nix

.nixos-test-history

@@ -0,0 +1,3 @@
+
+# 2026-06-05 17:00:31.237121
++start_all()

inventories/default.nix

@@ -39,6 +39,8 @@
           "hadar"
           "procyon"
           "alasia"
+          "rigel"
+          "vega"
         ];
       };
 
@@ -311,6 +313,103 @@
             '';
           };
         };
+
+        prometheus-monitoring = {
+          module = {
+            name = "prometheus";
+            input = "self";
+          };
+          roles.server.machines."rigel".settings = { };
+          roles.server.extraModules = [
+            {
+
+              services.matrix-alertmanager = {
+                enable = true;
+                homeserverUrl = "https://matrix.org";
+                matrixUser = "@kuroiris:matrix.org";
+                tokenFile = "";
+                matrixRooms = [
+                  {
+                    receivers = [
+                      "default"
+                      "matrix"
+                    ];
+                    roomId = "!rqIrWqPvsXqMgYpcNZ:matrix.org";
+                  }
+                ];
+              };
+
+              services.prometheus = {
+                rules = [
+                  (builtins.toJSON {
+                    groups = [
+                      {
+                        name = "default";
+                        rules = [
+                          {
+                            alert = "test";
+                            expr = ''up{instance!~"(nerr-.*|theatnerr-.*)",job!~"lab-.*|snmp-.*"} == 1'';
+                            for = "1m";
+                            annotations.summary = "{{ $labels.instance }} of job {{ $labels.job }} has been down for more than 5 minutes.";
+                          }
+                        ];
+                      }
+                    ];
+                  })
+                ];
+
+                alertmanager = {
+                  enable = true;
+                  configuration = {
+                    global = {
+                      resolve_timeout = "5m";
+                    };
+                    route = {
+                      receiver = "default-receiver";
+                      routes = [
+                        { receiver = "matrix"; }
+                      ];
+                    };
+                    receivers = [
+                      {
+                        name = "uptime-kuma";
+                        webhook_configs = [
+                          {
+                            url = "https://uptime.b4l.co.th/api/push/$${KUMA_TOKEN}?status=up&msg=OK&ping=";
+                            send_resolved = true;
+                          }
+                        ];
+                      }
+                      {
+                        name = "matrix";
+                        webhook_configs = [
+                          {
+                            url = "http://localhost:3000";
+                            send_resolved = true;
+                          }
+                        ];
+                      }
+                    ];
+                  };
+                };
+
+                alertmanagers = [
+                  {
+                    scheme = "http";
+                    path_prefix = "/";
+                    static_configs = [ { targets = [ "localhost:9093" ]; } ];
+                  }
+                ];
+              };
+            }
+          ];
+
+          roles.nodes.machines = {
+            vega.settings = {
+              exporters.smartctl = { };
+            };
+          };
+        };
       };
     };
   };

machines/rigel/configuration.nix

@@ -4,4 +4,16 @@
   clan.core.sops.defaultGroups = [ "admins" ];
 
   clan.core.settings.machine.description = "Zima board computer for testing in B4L";
+
+  clan.core.vars.generators.prometheus = {
+    files.envFile.secret = true;
+    files.matrix-alertmanager-token.secret = true;
+    script = ''
+      echo "" > $out/envFile
+      echo "" > $out/matrix-alertmanager-token
+    '';
+  };
+  services.prometheus.alertmanager.environmentFile =
+    config.clan.core.vars.generators.prometheus.files.envFile.path;
+
 }

modules/clan/prometheus/default.nix

@@ -0,0 +1,123 @@
+{ clanLib, ... }:
+{
+  _class = "clan.service";
+  manifest.name = "prometheus";
+  manifest.description = "The Prometheus monitoring system and time series database.";
+  manifest.readme = builtins.readFile ./README.md;
+  manifest.categories = [ "System" ];
+
+  roles.server = {
+    description = "Prometheus server that scraps all data from nodes";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          scrape_interval = lib.mkOption {
+            type = with lib.types; nullOr str;
+            default = "5m";
+            description = "How often to scrape targets. Default is 5 minutes";
+          };
+        };
+      };
+
+    perInstance =
+      {
+        settings,
+        roles,
+        ...
+      }:
+      {
+        nixosModule =
+          {
+            config,
+            lib,
+            ...
+          }:
+          let
+            getYggdrasilIP =
+              machineName:
+              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
+                clanLib.getPublicValue {
+                  flake = config.clan.core.settings.directory;
+                  machine = machineName;
+                  generator = "yggdrasil";
+                  file = "address";
+                  default = null;
+                }
+              else
+                throw "clanService/yggdrasil is required";
+          in
+          {
+            networking.firewall.allowedTCPPorts = [
+              9090
+            ];
+            services.prometheus = {
+              enable = true;
+
+              globalConfig = {
+                scrape_interval = settings.scrape_interval;
+              };
+
+              scrapeConfigs = lib.mapAttrsToList (machineName: machineVal: {
+                tls_config.insecure_skip_verify = true;
+                job_name = "${machineName}";
+                static_configs = lib.mapAttrsToList (
+                  exporterName: exporterVal:
+                  let
+                    targetPort =
+                      if exporterVal ? port then
+                        exporterVal.port
+                      else
+                        config.services.prometheus.exporters."${exporterName}".port;
+                    targetHost = getYggdrasilIP machineName;
+                  in
+                  {
+                    targets = [ "[${targetHost}]:${lib.toString targetPort}" ];
+                  }
+                ) machineVal.settings.exporters;
+              }) roles.nodes.machines;
+
+            };
+
+          };
+      };
+  };
+
+  roles.nodes = {
+    description = "A node will expose metrics for server to harvest";
+
+    interface =
+      { lib, ... }:
+      {
+        options = {
+          exporters = lib.mkOption {
+            type = lib.types.attrsOf (lib.types.submodule { });
+            default = { };
+            description = "Mirror of services.prometheus.exporters";
+          };
+        };
+      };
+
+    perInstance =
+      { settings, ... }:
+      let
+        enabledExporters = builtins.mapAttrs (
+          name: value:
+          value
+          // {
+            enable = true;
+            openFirewall = true;
+          }
+        ) settings.exporters;
+      in
+      {
+        nixosModule =
+          { ... }:
+          {
+            services.prometheus.exporters = enabledExporters;
+          };
+      };
+  };
+
+}

modules/clan/prometheus/flake-module.nix

@@ -0,0 +1,19 @@
+{ self, inputs, ... }:
+let
+  module = ./default.nix;
+in
+{
+  clan.modules = {
+    prometheus = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      clan.nixosTests.service-prometheus = {
+        imports = [ ./tests/vm/default.nix ];
+        _module.args = { inherit self inputs; };
+
+        clan.modules."@clan/prometheus" = module;
+      };
+    };
+}

modules/clan/prometheus/tests/vm/default.nix

@@ -0,0 +1,74 @@
+{
+  self,
+  hostPkgs,
+  config,
+  lib,
+  ...
+}:
+{
+  name = "service-prometheus";
+  result.update-vars =
+    let
+      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
+    in
+    hostPkgs.writeShellScriptBin "update-vars" ''
+      set -x
+      export PRJ_ROOT=$(git rev-parse --show-toplevel)
+      ${
+        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
+      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
+    '';
+
+  clan = {
+    test.useContainers = false;
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+      machines.nodeA = { };
+
+      instances = {
+        yggdrasil = {
+          module.name = "yggdrasil";
+          roles.default.machines.server = { };
+          roles.default.machines.nodeA = { };
+        };
+
+        prometheus = {
+          module.name = "@clan/prometheus";
+          module.input = "self";
+          roles.nodes.machines."nodeA".settings = {
+            exporters.smartctl = { };
+          };
+          roles.server.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = { };
+    nodeA = { };
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      start_all()
+
+      server.wait_for_unit("prometheus.service")
+
+      nodeA.wait_for_unit("prometheus-smartctl-exporter.service")
+      nodeA.wait_for_open_port(9633)
+
+      nodeA.succeed("systemctl status prometheus-smartctl-exporter.service")
+      nodeA.succeed("curl http://localhost:9633/metrics")
+
+
+      server_ip = server.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+      nodeA_ip = nodeA.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
+
+      server.succeed(f"ping -c 3 {nodeA_ip}")
+      server.succeed(f"curl -v http://{nodeA_ip}:9633/metrics")
+
+    '';
+}

modules/clan/prometheus/tests/vm/sops/machines/nodeA/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/machines/server/key.json

@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j",
+    "type": "age"
+  }
+]

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Z8I3ecNV2N2jed1sPBU+tI5r5qB2nVTO7aNyMxvp0ztujn8kXjw+thSvLGtRygL2V9rSmPJalHQf1IYUriXgCmYtfg5InPDCAqk=,iv:O4rSyg2G6PJWHURZ/BTBKmn1AVekbNBdg5137sOPL/U=,tag:4/CLfO50laZ8ljWkr6o4qA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWxnekYvREdZMTBMVlRq\nRmtCemFYZDhLYU93azc5czdoTVUydFFUL1JzCmo4ZHlrNi8yeW15N2JxTytWeCtk\nbjRwWUVlazUwTlMwc1RZVU8xYlVlckEKLS0tIFVPeU5KMVFwdExFT0wzeXZka2Jo\nSmxEM2RPTWdoZXJxK0dpemUzVkNzdGcKfXdiSeAcNwEZi7kh9c89ss5K+dYG0lhq\nFsf2I0A1csxqqnYJqXPmwlVGMzuWDrWRU0uc+hQLndP3TbadVux64w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:43:55Z",
+		"mac": "ENC[AES256_GCM,data:OCPR2tkbN72MdaczO47UNCJBb1KjABHQH9q7dtVEwoAhKg4QWFtsDaMwBTVE9qe48nlaWQbxT1mM7uztm6RXLkc5y2c3danPUYFj/FK/ffqpaxv3oReyxWqMoGayT23kFbB0TWEx1K8Jp3gOkwCPg+ZRClvhV1dXrfnwIwZHrBY=,iv:3puPIWFIxRF1KtrmyG54LqCc7Zg4/AOMD65QjYdN970=,tag:RoIVltMKw7WUvgW6sNk6mA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/nodeA-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/secret

@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:Nuq6ege3HJOxpRgA6fnxdD2Wj+KCw+3PaJCxmZirJl3mkRVLnZgUUhr+gOVEup9Ifjl1ZnP+PqV7b9pPR/WQg0LARYtxIC1QGJ8=,iv:v9p9lsefP5V9McAJCzS7v9sl8XHr9/hAL41XwFbwMOA=,tag:ETK+CFFJAAzGTpowQNAZMQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN0NEWFZoZWlyeUtZc3hi\ndnVNcHl4eVVHckRLeFhPYUt4a3BwMElFMVZZCklkU1NEWVVmSGw1NmJmWWkrVHFH\nVTN5U0x3NXdiQUJCc095TElzMWZCMXMKLS0tIHRXQkJNREFYUFFvMXM1Sk53VW5z\naTRjMXozZXZiNU8zSkF5d2hhdklBY1EKWwsPi6YiHKFfAyqWH2u75hw47gzcQOz/\n95Im0FgadhqGDCeZhTDfEAc4b1VWQULInsjeRapzf5OJOwekbz6guA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:26Z",
+		"mac": "ENC[AES256_GCM,data:mTKFSBFnUzu3rldQCHPZHoyzDdwPzBWPIAhemC1XyG5PiQ/OczStjYaLzZQGCpPvOjBb5Ntqrc+dnaOedZgKlOdaPjZs1U2ZDWadoeWQ2TAKWYA6+kN7PXomsxtHhntiaujMy3502eh06VyiutpVuCdzK2cfEwuno8nyIcHgtXk=,iv:/5DRvFVDQA+yd8m/+Cyxb+aIsfwoaFcV6KRQ/7ISHnU=,tag:z31P6CL0NNRlQThqwapVNA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/sops/secrets/server-age.key/users/admin

@@ -0,0 +1 @@
+../../../users/admin

modules/clan/prometheus/tests/vm/sops/users/admin/key.json

@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/address/value

@@ -0,0 +1 @@
+204:b10b:6057:4bbe:2b44:fc58:c6fd:90ad

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/machines/nodeA

@@ -0,0 +1 @@
+../../../../../../sops/machines/nodeA

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JkuciSmL5nmSjcYn22W7iHKzuRxWMJ5dixYllm0aSM7DsyAp9mQzIYJJmalepp7sEhSJ5As3vQW6ZpOQ3G8ZheG06++1GlM8lvVV2FKmYvKHQpI+V7WyUJl7dpfu+5A6BzWES0GbC1g8l/a8sb/+jjEoqUTAj/4=,iv:tehdHsdm2uSRAAzImHhwBSnSBF6lzjLzF9HIPnoi9s0=,tag:dWnQhAiJeCkcssjko+dUpw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVmRSR2xDNmdPYW5MNUVH\nYWVpaTc0TjdOZFBTSEJDL1Z3VG9vVHkrZUFjCklUMUU1bnVmZFJYbzVPd09oZm1U\nNHY0R1hNQnBBc2V4Y2RWQ1ZZRjdOK0kKLS0tIEJkSWFaTDJzMDNJR3QwQzRVdld4\ndDA5ZmZSeTYyVUE5Y1Z1T1l5QmpHRTQKSaN+MIazA8RXhRSyFSkDTyXEp43COpbf\nXOzAhTXja+ut/akUuKadDS4xycZ+ZXAreVmdsF4SWvwZkmPeew+hKQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNmZkTHlaRWl1V3UvcGxk\nR0hhL1lNekNzb0REaEc4bitBZkcwYmRDb2hjCnloQTZUL3ZneWZQZk9NTEc1bGNB\nY3ljdFRMMUhLeDdyblhVY3lSOFBXc1UKLS0tIEJUc1ZpQmtuNlRUUEVmajY5TGdP\ncSs2RkZXcnJYRlEvcEtYSWxIWmkrVEkKgQnfxuZuxl1OpZDUPVuqseSN89WnBGFw\nx2PI3cqN67R2tV/FEjOZo+GFgxW93SYdMvxzg2aG2q/7xOQxfj9sjg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:44:25Z",
+		"mac": "ENC[AES256_GCM,data:gRk1t7xFxXSTUcZQw0DCH3QtRnQJF4Mc4kZeeckhuQdc/VATj+cq+ugicrcGJWbbXzAscQLG6g72+Qiane5nFfzmjNoO6JMe181wm7pY/5St+2MjXZEzwAaYjn6ZAm+U7aiUVcp8RBjFIL9HCvBF8qFl7rqqTvYHnTOU0V6TIIo=,iv:eUvZFDKl8PX5QaQPmwJXaokawQMNP0TGOklTAMgB/sg=,tag:3cHICox8bKWkPKMUgvLuXA==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/nodeA/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de

modules/clan/prometheus/tests/vm/vars/per-machine/server/state-version/version/value

@@ -0,0 +1 @@
+26.05

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/address/value

@@ -0,0 +1 @@
+202:8a70:e215:f822:c67a:f191:b04a:a8f

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/machines/server

@@ -0,0 +1 @@
+../../../../../../sops/machines/server

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/secret

@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:JcxiDqZDX3J3ooSeN0pQ28uvI86mtHUf2BEcOQdFIDhJZODGCc+BhZvBQmu2mabV8Jf4skrTWqD+60c1fkRcsM+MMXfoyNsrRyQ2K39mG4kl8jJKVKDs+BqXa+CvZ96kesOMgi9vdc3YUKo5cCLY4bQ9VwymqH8=,iv:W3z8Pbyo2IMzkxI4k14FlirLa28qgZ3rnTAWuusiw/0=,tag:EQc8mo/UvACbt8hQv3zPEw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRDNOSU81alN2THNQQ3ZW\nbHVjMmxaYWpzak1NZHplNTVzZzQvMHg4azAwCkExb0VLYlZUd2JjVGNlcXUyR0p1\nWHk5cXpOeGZ0VFRFTGllQWpxRlBTRk0KLS0tIDhKeUc4RHQvb0o0ZXFXZUNCanVY\nYm04TVBoWjlLT0tFOHRnLzd3RHV2ZzAKVpLtENDySGC6UDgAwhDb+7KJiHXOZF6n\nIaeIQWQqiB+45h72NE3yh02boPK8pl6IoJFcK3e4zSO7/G8jGUp0MQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSUZXVzJwVHdwZGtxOVRu\nN1hMZkltdVM0cnNRL2tSNENkSGV2VzFIU1VBCmRZWlJTODNPMVRjVWY1V1VZcFln\nTDE3N0xsMXdMWityRUNUYWlQOXBMMTgKLS0tIGViTzBrQk5wQXBYQitIb1ZPUitC\nLysyUER0UjFlZm95c3ZGK3hEMEtrNUEKABpoKBUnvzQKSrgsdnU+uyDyED0Tlr7D\nnSsf12c84cvdt0OeCWwf2WvBANZL26XTcFq1fBYOFTJqNLs1ZfO2kg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
+			}
+		],
+		"lastmodified": "2026-06-11T07:45:55Z",
+		"mac": "ENC[AES256_GCM,data:jjhkZB9NdpvV2R0k9yS/AcUqeMr1RLv1UZwGCemlKSwhBfs8E5NxTXLhtmJeQ+hltOTYpz51BIporVtlaH6ElVnh7khOrG3Lb5cLBrL41QM59y3Tbfu6TjNOE3NyMiWuxZnwuqUGWQjsjrIIhE0ftKnpSpkGHMie+BC3iNSB1tY=,iv:onOVK9eJxWOaIjChQD54tz8lY+r/jpp6AArsBIuoRUM=,tag:2Oas1C5D2kZOe4iiD5huyw==,type:str]",
+		"version": "3.13.0"
+	}
+}

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/privateKey/users/admin

@@ -0,0 +1 @@
+../../../../../../sops/users/admin

modules/clan/prometheus/tests/vm/vars/per-machine/server/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8

vars/per-machine/rigel/prometheus/envFile/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/envFile/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/envFile/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:4A==,iv:puWqe9wemaf4LWrceRlgJ2V8UwU/QyUjJ1fVZV2d3AY=,tag:0YhPKSP8bAiAmy5oNMryDQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLa1UyRzE5SHE0WEJjRmJP\nQ0dkc2hjR25QZUl1c1BUay83ZkRvbVd3Q0FJCngzUGNUKzVHTzdjUWdYWkhKdGR3\nSkRsRmdYVGlHVHdOcGI4RjBrc3JPWk0KLS0tIC9GNjMzZG91cHlWd0V0VU1Dc1BS\nTCtqS3RGa0pmTS9DU0J0ODVnNjJoU0EK7lKa6CcLw/GZl+/MDJvWZwDR07P1OHJM\n+Puxhvx/LsJrdqIsJhe/fWRMSQKGC9fKKFKmWaLw4gg373HGJgAFqA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuOHJaenlveWVmMVFQNTFa\nZ29zODdQSGhsdU56NzFXeW1pakgwSWVYQVcwCmRjZ2dDWXBiQ3ZhZ2ZHcmxHWUhI\nTmJyRUNFRVlVTkl5d3Z4NmFBQUMvbzQKLS0tIFl5dzNBK0twSEpobUVXcTlpU0dl\nTWk2YitOU014dUlzK0swMUx4RDY0TFkKx6tVWtaN/hK+SwYwb6pZxfl0TnK9NSaK\nGuatmfVh0Uq+ZAkt2JplG4vkgn89TH2K5Pcp6ZtsSCEI0TbLgTzJoA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZPN2kwZEhB\nK2VxVFVtNHRMOTFDLzRuQmo4bjZEZmV2S3RtQ3ZkT1c3Q2sgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpxWVNacnFZcUYzcERwR2Q3VVFNSkNy\nN2tQSzdWd1hrcE5YdmtIeGJibFFNCi0tLSA4RXdKUEtmTEF6Q0V1UG4wbzVnZ0ty\nUktoN1p4Q2E3Yld0SUxnem4xRTRBCppRvqglk50LmlM3fVbzZr5OJPbFK4Y6oNuR\nWdhlYzruot4GSZioSdjEGYKgwZnMH6V+brA3G7PljxCJ9E6z5Q4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZwbEVySUV0\nTHdsSlFDZXJxSnF2WVVacThPTUlQSDhoL25nOS9ZN2p4amMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpzQTg2djRnYnlSaEhWQnNIeGtKMm5t\nc044alVDaXlKOGlGK0pFWlRucGFRCi0tLSBTeVJlYUdoYzU0KzRPd1A0aFNOZmtO\nckRydGFrR2lDeHUrREphcG9ZYVN3Cgl3xqfwOtFtBtmDgBIeaAJ0kbq2bFxTajh/\nOYl5VB+uNzzJiTb3+ZQWRm0zk13KEv1vtyxJ2GytVk26TVZb7PM=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDBFSmMydm9Y\nSGovWFlqVFhFMzlmT3FyM1FkUXB4REF0UFFjbldHR1h2SG8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpsN1lORFVQc3Bwb29KM2xnMWRWRXJH\nK1lIajZieG5INjFpeCtWeEdoZGU4Ci0tLSA0SjcvVStLclRwR1R3S1dUdGI0S1NW\nRzEwWE5iWE9rMVRoRWYyc2RvSE0wCjtoHS/koa1ZqZdd5o3UhsD1JpoVZKntJUU2\nfOyAmuiARDbZZ3HFdlhXqJXg7BKO4xIzXbQbulJLHw7h2y9cxyU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuQTJVVWpoNUhRTE1xZzRD\nYkc0QnB1WVpvUkV4Y0dVd3pkbmF5MWhLZERzCktOdnJ0a2J3NlJDSHdwamdMQXJW\nOTR6YlJTYm91Y0pnL2pIMDlrTlZYdFkKLS0tIExhbFhvTHdTWTlna2NJa3FJaHVY\nSjZoMmZiMFdRNXI5clk4K0YxWEYyWE0K2/ZweC6e80AANco8vk0gRjyw79CbIiM/\nWomvWTXMmABqeXqy+xQ5HKIhm8U2gYh+3VhmygAcGlDGE4Vha9j1Ng==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUmh5bFFGWENhcUppdDFn\nQldUcURkYlgwOTZ1VE9OTGh2N3lCQW5OdVNZClg0NEtYRDlLNHI3S3hZa050Njdj\nOCtiQXdUaTFvL3p3a1U5K2FVU2pabWsKLS0tIDRVcDYvSkhqNFBZTjNTZmRpdjB5\nQVFCTFl2cC9qZTFpTjJzeGhyZ2JnYlUK1wKll+dXPHYBWtPKIbQ/yK0kjdnoRZy9\nRV2PYn5AiPhm+fdOrRxgn4NQxWfW7JEqSOXoUzh5wMy/6KUcVcYgRQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaFBXRFNIY0JQZ0RZcC9s\nMkhmaDBEcVhMelRBcEVHbENOcmdNcUtUcFgwClFlR29qdGw5VUQ4c3ByZlhjTjRZ\ndUgxZHNsMTFIU0w4NVM0ODlsb2N3cXMKLS0tIG1uYTkyRkdzT0RKWitXVU1IdWdk\nNEZ1aUs3dDVEL1dMdVBPelJTUE1kbTQKrTamJfbqjhaIEWrp4s3eAbiYFCu+Yg3h\nS8nfEg+q8Yx/GDF3khhC76jrmh5SuPH6Mk3lB+1AGDAhVfOJd6IDaw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUDVWclhWQXA1N3prSzRR\nczFhMkJWL1E2V3JDYzJDK2p4UGlPMjhoRGt3Cm4xUkJVazAzaG8rS2dhT2xzWmdG\nSjV2K1RneU9kbVREMWVyZVU0bTNhMFkKLS0tIGRnNUJWM0lHaGdTZXUyMmpWT1Ur\nWWM2dWwvSmhtaGFjOEdpL21ueUlLZU0KCVGKuwrzz5EDRV5AGV2VyeEoNGy9D/k9\nHR1ppeL1dRJJ95jTv9rhMQ6/75EE4HL2d6WB92xY9RJwWe+D1JVadw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-17T08:48:13Z",
+		"mac": "ENC[AES256_GCM,data:7re9y/kZ6PxyTdBG0+i5eOJRPNqwGiOtZ6lP/sVq5wG8Z5XtavLLCnup5AL1yIh+Tx5z7a/lvsbKIIi/K9yV9Cq/9K3GUoTeP9V5CSTCMgBoOkgiyR7nnq8T4dvlU+YQdgPmivtUE9GhcuAn40NqvhgeCLOIzuek3Ndj/OSQ1DU=,iv:uCy1xuA0IyV3zx3ICvbHRpEaNLWP0MGwwcsbZub4anc=,tag:FU2KN3ThBUOVP+PW5fewnw==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/envFile/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/machines/rigel

@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/secret

@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:o0SsURiJwWJuQR7WJBsVkAZJRWfMTuJjBM/1j9P2LXS56WzZxkOm1MY=,iv:FIy+Phvk1EkXdXJqkh/sLPK9JhswjVHasf2Itvj6iVg=,tag:KvdtWOMvxwnIGkIIM9hxJA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSXc4RU5CL0RsenZTS1FU\nTWcxSWNjN0xyTEFkK1FBZCtSQzRtWmtGMFZnCndDcnVPV1V6UFkwcXJzNCtLWElz\nKzZzYmhGVTVyYW9OcURkUnNiaTVsTEEKLS0tIDJqOEpGRzJlTlg0UGZGYUIzV2k0\nNTRSM3dSUTdSSjZIT0lxeERKeEIzbHMK37+rk7rxhzU8TAGdbWS7dGpHqYg7jf3e\nW13aGti/SPsb6MbBWLsZl8tUo6clsaG8liGPTN9dgGwOmxmzMOf1Zg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPTm04Y2o3VHM3elM5WG9h\nZVh5RWZncjFIWWVhczR6aFFqUlB4K2RGN2lRClByU09vWmNuOVVCTVYwNmwxdmRL\nUGJsS3AzbmJXeEZzZElLS1ZGTExoMTQKLS0tIHY5NmgzRWx0Wk8ybGlyRHBLZUlq\nUExjWHc3dmJ3OVV5bVgramltMGlidlUKXScM1IFNre3FUV0MksN1doRkwMzRyASw\nZuq+khDl7fVkKzdInJmjXqxySL1UdnB3jkDVu+71byWba96OuPxEwQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9POTQyMWRx\nNDFqM0M3TkxqMXE2RWRPRWVqRHdSNDdQRVVrWjJRakZ6RzAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpENnhsa0xQODZpOElmckk3UDZtY1BR\nS2NrdmJIQnk2RUMvYmM3NVJZQ3RFCi0tLSBsZE0xdjdkUFJhSVpWSjhOQkdnM1FR\nMVBvY3pDcko1SW5NK09pZ1FtQXB3Cgpa9CfThquMn+CwG83LFDoFjn5xJMDxmGgY\nAKhzHtV3jPsz7M15MyO/bxBNNEnUCBV6h3R9hFglty+hat+YwSU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFh6b0NyZ1Ay\nSVRFbVBvc1EyMkI1VStOU2RJRDhtSWF2dkd1NGczcFh0blEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpOT0JMV2kvR203Z3dYUTU5akxCeUJt\nQ0dBY2ozRyttdExuNHVUSExlVzNrCi0tLSBVaG5hNUR0RHltelpYVGJVYThTdnZ3\ncXJDUklGOVZvenkrSy9ybWZOZzFFCnY6lJ/D2WGmwFDS+PqBSc2Lc52CeDDGrJvf\nZ+VEuQ5TjewREeG+AciA9yDmA05FwCCJXg3QYYM3zphv/YCNse4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEh0UThpMmRP\nM3RrNEVsd0xyaWU1SWk3bmVUVUFzSzlRYndFc09GZFRIQm8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp2b21oZzdSV1NKYzRXZ1FFNlJ6TzBo\ndDlmZ1RId25pNm9qNW44Rk4xd2NVCi0tLSBoMlhkSmZKUTJyeHF3ZUlibkNQc3J4\nTFgxMTRrUGt2RU8vc3JwL3hBYVprChOQYE+mm1xX1yDYTeGAB24+d3vOMu4hhrWz\nF+WxNFbJ2z4/fMx9hz7ZRN+ucgdBQbnp+ponpU30sv4a6GccYwA=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2YWRpNnpsQ1I2TFhmWjFQ\nQk0xa2lrSDAwQ2UyWkg1eVZZUUQ5eVFNYUdZClYyMEwrcVhraWQrUU0xTVRQQ3VH\nQy9nK0x1WDBnckVGRFdXMks3V2ROSWMKLS0tIGI5ZUg1aG9CeEJsbDhIVDFiTjlr\nTDF1OEJ4Mnhxd2VXL1JaL0dZOEpkQ00KcUXjwHmwEFE4zvkKGDCk+/VzV+INSJGa\n+E2EDdl8f1TJtahscnVSNMeuLSNoGjhTduis1vU6W9iapPK/RrV0sA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxREI3aXpiUCtaN1g2VWE2\ndENNdWVmOERVMVA2bUpqclNNQVdzUS9VYTFNCmszYXo2U0lRakg4Z2hiUVpDZ1RK\nVGV1QVJwMHpIM21JdStFcGJJTWluYW8KLS0tIGtRMW5qOVhzOWpGMUx1V1VpV1pm\nQ3h0UDhHUTQ0QWpMdDZsYXdMZVRkL2MKt3x8Z1Ue09IIKkWQ3yE57pSK5BCyFwjM\nitxSGpxr7xFE4npqIomkoTBvW2zx2KXpNqWBKTcC3hCu6cXYYjkQZw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYzVxY1NPbHZZNTZXQjZp\nVkdtUmwydmMyb000OHN3cWpDWmxQZzVrMEZnCjQ4Y21KNEZteWxoYjhBYlZyZXdl\nTlpRZVpkRnlYbys2SnRJTVJ6L2kwN3cKLS0tIDBGWnNScGRSUUNoMHdEczlyNmQz\naE1QTU13aGxRMXFrNEo4UGpXWTBDMXcKFIbilE60GjX4F1UMn0vjZVsCK+bRUdp+\nvk5BhcTxeBR/sTmwIupPhCR169ChAch55tze1PrGiSnvTLy5sZ3mxg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBU0UvM01penUyN3RrRWt2\nU1Q4UkowclUrSXFYa1orOVliYzNkMWVPa2trCm9kcmVIc1dySTBHL3pyam5NbVox\nV2t4dGVrWlh3WG0rK0xuNGVFeTc5ZU0KLS0tIGNIdVhVWSt2ZjB4TFIzR1RMUHBF\nZjVwNE80VUhjbGhmcWFyWkRGd0xoZXcK6WhrAUsXfExGYT0i6s8Zx/9+NrvloOoa\nuFg13x79D6gkWW0thDv+b/G/K4QcimwqITwe+4bhSpt/0sADs5BcXg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-17T08:48:49Z",
+		"mac": "ENC[AES256_GCM,data:2HzQ5vupFUjDPjXQYnPZdnZXFCLqV47f92UnBxWEne27XoAUocHTiaLL0rqkdDmALdB6TX4uDqCPUyVF0MlAQXTAnRd1hDRSZG3XtkB6zTVYnDpU3wDdOKyqFgb812Va/o/RqX1ZX+b4CUAOB5+iXrP6PvfjgeY1vUlQCOAPxn0=,iv:8x/WzjklBp9nba+LRPhzie+0NNUDKnqBa7WLO2m7oqI=,tag:+FS5AxBx18aGlZgJfdw6MA==,type:str]",
+		"version": "3.13.1"
+	}
+}

vars/per-machine/rigel/prometheus/matrix-alertmanager-token/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/address/value

@@ -0,0 +1 @@
+200:a785:5b01:5309:ebc0:3942:2a48:55f3

vars/per-machine/vega/yggdrasil/privateKey/groups/admins

@@ -0,0 +1 @@
+../../../../../../sops/groups/admins

vars/per-machine/vega/yggdrasil/privateKey/machines/vega

@@ -0,0 +1 @@
+../../../../../../sops/machines/vega

vars/per-machine/vega/yggdrasil/privateKey/secret

@@ -0,0 +1,50 @@
+{
+	"data": "ENC[AES256_GCM,data:lDcpnZV93rkYascekNZS4PZfiKNoDfuEsKePeWIWe4iQZ3Y8NOXcxiOQMCSXNPIwsh2N7lG5+UtWidJ7dDenoXD9AwCv4STuPL4cXi9flgjozgYbW621Q//9p0jqpD2Xxq8R5TqO5WtZeQK9/cOdyJlLTqUPIKw=,iv:1aeRaEqTOndGlRpIZ9sI/BNNFtKj04aBPqXHbYDzN9k=,tag:JbApghVPv5EbSX06tVW/wg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvUW5jNmM1YzBod1VNQ2tW\nT1VXUENXSjV0RTIydzNpc2k0b3Q4UjVLdGdBClVuVC85L3NxcmhScGkrMGF2czRr\nV0Z0MWRhaGU3TDJuM0JNUFY0YW1BTjQKLS0tIHlaSGdGVmJ5bU4rZDVZRjRpQ3JS\nekZQZEh0OGEvVVdwS3FBellzWGQ3TFUKtkSZgRKFFMCxOIDlXk9r0/GnfH0g2moy\nGbTbC5EfpBHEA/MHuIQTwOngPtGmEjBsVThIR6/hp1ZOJzsYHOhUug==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYWJsMjA5K1N1eFNSNTNu\nbzc2QSsrc0hwQ2dVSzgrSFBDTG5MaW5OUFNBClptMFVtcWlnakFuWlIvck0rc3Ri\nNE5aSmJiZEJlWVZ0enFmR1VFaEU2bmMKLS0tICs4MG9oR0FYcW95NzdCT21QNHhO\nVFJldnB2L0srVFRrQWQzZ3VxZk9VVUEKf29mLBC36j3PU+jjY/g+c4pbegZhV5/P\n9yylea0RFXQzyaFGzjKgyiR7pfUjIVMOZBjB9sha0xRN+SPELpfAOQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEVXS2szK3d4\nTnJhYVcvZ0JVZWp4cUJDbW1mVXQ2VG4vUXRlRm96TkhOMHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQplZDkzTzltbGkydG1QQUpTb0lyS1Rq\ndHNoemNOREZLOGt3VFZxcnlFYzc0Ci0tLSBWUUYyUmNaQWpqNDlOa1grS3NsaCtG\nM1JKeVNBV1N0bC8rRnNOeEJ5bVg0ChU0g2KzUngIjjGrukA/Y9uCjHfHuBV9HNY/\nBHqb4wDjHFR9Usu0YvTKUoOoUiIDHvw4m6VCIuJss6gocoxAP8E=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHV0aDB1bXZx\nT00wMGlBU0NZWWVjODZqN2p4QnBrWXdzZGtEZytiaCtCMDggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpBZ1Y1ckpNNWM0TnN3T3FFaXdGalhz\ndlNKaFo3TityRkhCQkJTV3RlRFo0Ci0tLSBiYkRuNkdqRE9wRmx4UGpFd1FBYWZ3\nWHdzZS9YaFFaK1VUckZDYnNtZWtnCrD+CevFcifB+zIXE9p9qXjNV67Dy6/GzPv8\nD3t84N4A48Jt1dMZc7B3DkBWeX4Iyj0pb6Fbs1qhkuRmPMiSWzc=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDhpL20rSWNk\nMXpaNHAwUWRjeWhjaEt0VGY2aVdCVU55R0R6RHNBdnlPV1EgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwozaVBTWlpKdzFhT1hvcUZPUU43dzcz\nZWFhekVnWndCZi83Z0xYZUVneWVjCi0tLSBBUGYrdmNuV25EVmRFbkJDeFg2NWUx\nNTFZMC9TVGlCVTFYM2hra25Ec0ZFCs1GjLDYmDyzx8VtlNkkPRaNc46E7Tzs8uDs\nCZYAsCojTOaC0IQVpE3uyeKuK/JW/cSnfgNNixYUyEd9w6g+hA4=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRDViZ0FaM0lDaHpDYUdx\nbW84T0NicmpsYmIrckh3aWFpbUVnc2d4clgwCklvL3BENlY2bEJ5Zm4yMllNOFdx\nQk1QQ3JVYVRudXJ0WWd4dno2REpqcE0KLS0tIC9EU1dUVHlyVW1nV2FGTmNZeG9y\nY1l3Z1dQOTZ3eXorZUwySHlBRmt5bXMKVbcXButS420nTtCZQxD/AycDdIEbCA/t\nGfVk09V2+BhYG0WNhQ+0Xw5r8gtPr/9oBwyAIkms+pWkxVTOKDtWMg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEdE5IajFPWnJzNWRSWUJv\nNXpNZnRQSUZtbFNnNllNSUNSYmxkREZDRWhBCmFJeVRYSVRGcGxXUVdtaC9waUx3\na1FjdHY1Ym1XVWNHVXJHcGpKTnBaaFkKLS0tIFZNYU56QmhRQUNVNkFHS3pyRG5I\nMG1rczZKbHVxNzQ3VEplazVPQ1dkaWcK1QWlmY9AeEKkGLI4qlBp4fDAA4Bs4pef\nPN4CaKt7oON6bnjxfIURgezAOvkoGRrtbUO38UOVxjdYVrLiev+pWw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pl3nej4ayvuk75cydwyz5ttzelqqdkun8hweu40vypvspzh9j4vqp9rl0j"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTDQwVVdQS01kbXgrWHBG\nL1JMWllLY25oQ1NtNXhleXdsMHBpOUExZ0F3CkgrR1dEcXp0SGRpZDE2bm0xZ3E1\nKzZxeHd2Sy9QMDlBTXlKeWRyeENIZlEKLS0tIEd0Ky9oek5PM1dmS09vOEc4UTg0\nRFdrYjJ2VGNwV1crdDJqSnB5VDlZMlUKTP8s5r3N2L5/dArDw249r+CW/hokEwrp\n9Bn0nCR/y8/nutEEIbk12ynB6GtGCVALcXJ02v71BbBf3i+Xb5fwPA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTzhvb1FWSGVGMHRNM2Nx\nYlVMVFcrN0R4M3dSbktMUUIySGkrSnVEdkdnCmpBa1JCWGo0ZlErOXRSRkpkWTUr\ndzh3bFMzMFJOQnJZOTZTb2srL2wyRk0KLS0tIFo0TDU4R1N3Qk5TWDM0WXpLUFc0\nUys1b3kxQnRWV3hNWVhiR2dxclVPRFkKb+nyhsLw0OILedW/spASXMGkuapSjOQh\nyRwUUdHOa+JRbjLLqnfG02xSiURiRhZNVz8VSXZDKvGjKdhSELzx9g==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Tnh6NElYN0crQVM4N0ty\nN3VGQmtrMnArRmJkV1IzT2E2WG1BYUNyK2wwCjlEbU5mdExWTnJrN2VLRTl5N0dZ\nWVcwOWtxVDY5Q3FIVmw2TXZ0bTJEY1EKLS0tIGtMQ1VaVndRT05PMkdjQ2o1LzFO\nemwvWTF3L0l3anRhV0htTG85TlNhUlkKzhNT3lKCaBIUt2UDO6dIe+FGhkELtsP6\nXc9IaaXIVA6vLKAdh9xPHBGP4xG+b+86kvpYrsqMv8IRz+Os6AUQHQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-06-12T03:42:22Z",
+		"mac": "ENC[AES256_GCM,data:Mrmfvz/GHbqVFFtpHEB8a0y+9PRhPT38T9F3Ap2DiowsJEX+rC8qaQFTJ71HNkFcGQDkMeL6prY6JZoejhbbkxZma87+6+cfX+xEciQSqL1kBjEEGfLjws4V79lK4zC4Q5NX1Feo7L08fcI7Ko3XbH1dRL66yEtk8+2TjiZ1VYE=,iv:FqqAWCg7YoSOwWovGtlKa5qqU+CM7BIu6CgojXpElMg=,tag:u0B80zW8vMqy9UJylJztGg==,type:str]",
+		"version": "3.13.0"
+	}
+}

vars/per-machine/vega/yggdrasil/privateKey/users/kurogeek

@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek

vars/per-machine/vega/yggdrasil/publicKey/value

@@ -0,0 +1 @@
+ac3d527f567b0a1fe35eeadbd50637ffc60407b6af311b56f997cd863e45ea0c