deneb: add default_thai_company frappe app to poyerp

Package git.b4l.co.th/newedge/default_thai_company as a frappix app (pkgs/frappix/default-thai-company.nix) and expose it through a new frappixAppsOverlay that extends the pkgs.frappix scope. Install it on the poyerp.newedge.house site on deneb.
clanService/prometheus: add mirach and almach
2026-09-15 16:18:30 +07:00 · 2026-09-11 10:53:00 +07:00 · 2026-09-09 04:15:18 +00:00 · 2026-09-08 08:35:21 +00:00 · 2026-09-04 14:06:30 +07:00 · 2026-09-04 13:43:04 +07:00
31 changed files with 1157 additions and 678 deletions
@@ -135,11 +135,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781517972,
-        "narHash": "sha256-G8bIXFqifs/y62GNPwg20Ksf71raYwzmyN99gf1tXak=",
+        "lastModified": 1788346295,
+        "narHash": "sha256-k9Ol++FFhQuPya6ZNQwVhqZZkMvE1ytLtbdrbH5zkrI=",
        "ref": "refs/heads/main",
-        "rev": "7fc62d0c25c7a97d7027a9c248e21c97c9b3acc1",
-        "revCount": 14604,
+        "rev": "b15797faeca7494a7fe5fde2691d93affa3d3e37",
+        "revCount": 15239,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -164,11 +164,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1778718524,
-        "narHash": "sha256-pXLoI6Ax0EnUK6r34UM1vibVC7CfTu6j72R2692ZzPs=",
-        "rev": "12c552ad547d87254f33f33bddd1a2cdbeac754d",
+        "lastModified": 1788308203,
+        "narHash": "sha256-dCOb9YIJv9I2udjqukvjlGiTyOvGnO7zVbot0PxjBGk=",
+        "rev": "644c49bbf121b3e256bc83ce10b5d97813d9181d",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/12c552ad547d87254f33f33bddd1a2cdbeac754d.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/644c49bbf121b3e256bc83ce10b5d97813d9181d.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -357,11 +357,11 @@
        "std": "std"
      },
      "locked": {
-        "lastModified": 1782964989,
-        "narHash": "sha256-pU2Gye+1f+nvFleBTgXdeQfrQnKaJEuO2LT7PnsJ1p0=",
+        "lastModified": 1787631179,
+        "narHash": "sha256-l+Zt5XNTD0f0ChkzDJURfQlFAgANIMrGYrk51SZEJKU=",
        "owner": "kurogeek",
        "repo": "frappix",
-        "rev": "ac5e2814fc1aca188080bf6b50504cd329790e56",
+        "rev": "fcb797886ae753b26a6e4415a7f2c19ba6adcf3b",
        "type": "github"
      },
      "original": {
@@ -416,11 +416,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781557312,
-        "narHash": "sha256-QOIRYSUFSq7L5mY3dZymaVhcnne3tPgoR9riB0WocjA=",
+        "lastModified": 1788355065,
+        "narHash": "sha256-gAz5oTI7ur34CfuakQduiQd/2ZhO62Bn2XXg08nZYYQ=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "c03e4752899e55705dfa63979abd885c582a5c48",
+        "rev": "d9d750e4fc11c10cab2da677bdd31e427f3a3a71",
        "type": "github"
      },
      "original": {
@@ -547,11 +547,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781242433,
-        "narHash": "sha256-bchLZZ3sRn740zyvD2icZSnNoTaanN0nw7l6fjVXO+E=",
+        "lastModified": 1786845137,
+        "narHash": "sha256-oQFip+v0luP8NIxJzmiW4Wu8bILsbFWom5l0zonl8hQ=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "aabb2037edfc0f210723b72cd5f528aab5dd3f0b",
+        "rev": "4cff07de74b50e64bdd68cd4e722ab5b6b35ee48",
        "type": "github"
      },
      "original": {
@@ -707,11 +707,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1781359544,
-        "narHash": "sha256-iUuzKQcyXvopYDDzFpMK5eQKP3WIJExYny2kJtbgUcE=",
+        "lastModified": 1788775869,
+        "narHash": "sha256-JRf1lSypbvKj6AzUZHpUA6YC1DirVuitZWOnRwcm+Ww=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "9f11f828c213641c2369a9f1fa31fe31557e3156",
+        "rev": "58973d74f1893afe13f5902919803a0e99da0ca4",
        "type": "github"
      },
      "original": {
@@ -752,16 +752,15 @@
        ]
      },
      "locked": {
-        "lastModified": 1708640854,
-        "narHash": "sha256-EpcAmvIS4ErqhXtVEfd2GPpU/E/s8CCRSfYzk6FZ/fY=",
+        "lastModified": 1787579760,
+        "narHash": "sha256-WGhIEINOICx7bhV3WrSz0QTzv8uzaaa9AXvD1clIWpc=",
        "owner": "paisano-nix",
        "repo": "core",
-        "rev": "adcf742bc9463c08764ca9e6955bd5e7dcf3a3fe",
+        "rev": "88739c84d308876714322eb9844ede6597c1a580",
        "type": "github"
      },
      "original": {
        "owner": "paisano-nix",
-        "ref": "0.2.0",
        "repo": "core",
        "type": "github"
      }
@@ -830,11 +829,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1780547341,
-        "narHash": "sha256-Gq8KNx5A7hBB3uGJaj6eQfLDIz5YdLu92gqBcvHvoUo=",
+        "lastModified": 1788337237,
+        "narHash": "sha256-gkSH8VUtCo6hnysNmb9DbTuDepH2t5pv+QWjP75xKAk=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "9ed65852b6257fbeae4355bc24ecfea307ca759a",
+        "rev": "fbf759290e0cb0a98dfc813a4eb7d53ad1dacb57",
        "type": "github"
      },
      "original": {
@@ -36,6 +36,7 @@
          "cursa"
          "rigel"
          "vega"
+          "buna"
        ];

        dm-bootstrapper = [
@@ -45,6 +46,12 @@
          "bosona"
          "canopus"
        ];
+
+        dm-pull-deploy = [
+          "rana"
+          "rigel"
+          "vega"
+        ];
      };

      instances = {
@@ -181,7 +188,7 @@
              }
            )
          ];
-          roles.default.tags = [ "all" ];
+          roles.default.tags = [ "dm-pull-deploy" ];
          roles.default.settings.action = "switch";
        };

@@ -313,13 +320,28 @@
          };
          roles.server.machines."alasia".settings = {
            public_url = "tailvpn.public.newedge.house";
-            base_domain = "tailnet.newedge.house";
            advertise_routes = [ "10.0.10.0/24" ];
+            dns = {
+              magic_dns = true;
+              base_domain = "tailvpn.newedge.house";
              nameservers = [
                "10.0.10.82"
                "1.1.1.1"
                "8.8.8.8"
              ];
+              extra_records = [
+                {
+                  name = "poyerp.newedge.house";
+                  type = "A";
+                  value = "10.0.10.1";
+                }
+                {
+                  name = "glomerp.newedge.house";
+                  type = "A";
+                  value = "10.0.10.1";
+                }
+              ];
+            };
          };
        };

@@ -489,6 +511,45 @@
              exporters.smartctl = { };
              exporters.zfs = { };
            };
+            buna.settings = {
+              exporters.smartctl = { };
+            };
+            mirach.settings = {
+              exporters.smartctl = { };
+            };
+            almach.settings = {
+              exporters.smartctl = { };
+            };
+          };
+        };
+
+        wifi =
+          let
+            networks = {
+              home = { };
+              glom = { };
+            };
+          in
+          {
+            module.name = "wifi";
+            module.input = "clan-community";
+
+            roles.default = {
+              machines."buna".settings = { inherit networks; };
+
+              extraModules = [
+                (
+                  { lib, ... }:
+                  {
+                    # profile names match the network attr names above;
+                    # 0 = retry forever for both (defaults: 4 autoconnect attempts, 3 auth attempts)
+                    networking.networkmanager.ensureProfiles.profiles = lib.mapAttrs (_: _: {
+                      connection.autoconnect-retries = 0;
+                      connection.auth-retries = 0;
+                    }) networks;
+                  }
+                )
+              ];
            };
          };

@@ -19,7 +19,7 @@
      "installedAt": 1765277591
    },
    "buna": {
-      "installedAt": 1765343708
+      "installedAt": 1787123510
    },
    "rana": {
      "installedAt": 1773134236
@@ -25,8 +25,11 @@ in
    inputs.self.overlays.frappixLibsOverlay
    inputs.self.overlays.frappixPythonOverlay
    inputs.self.overlays.frappixToolsOverlay
+    inputs.self.overlays.frappixAppsOverlay
  ];

+  fonts.packages = [ pkgs.tlwg ];
+
  clan.core.vars.generators.frappix = {
    files = {
      sslCertificate.secret = false;
@@ -57,6 +60,7 @@ in
      pkgs.frappix.hrms
      pkgs.frappix.crm
      pkgs.frappix.posprinter
+      pkgs.frappix.default_thai_company
    ];
    sites = {
      "${sitename}" = {
@@ -67,6 +71,7 @@ in
          "hrms"
          "crm"
          "posprinter"
+          "default_thai_company"
        ];
      };
    };
@@ -5,8 +5,6 @@
 }:
 {
  imports = [
-    self.nixosModules.common
-
    ./hardware-configuration.nix
  ];

@@ -23,15 +21,12 @@
  nixpkgs.hostPlatform = {
    system = "aarch64-linux";
  };
+  nixpkgs.buildPlatform = {
+    system = "x86_64-linux";
+  };

  system.stateVersion = "25.11";

-  services.journald.extraConfig = ''
-    Storage=volatile
-    RuntimeMaxUse=30M
-    RuntimeMaxFileSize=10M
-  '';
-
  services.udisks2.enable = false;

  nix.settings.log-lines = 25;
@@ -54,6 +49,25 @@
    "sd_mod"
  ];

+  boot = {
+    consoleLogLevel = 0;
+    kernel.sysctl = {
+      "fs.suid_dumpable" = 0;
+      "kernel.core_pattern" = "/dev/null";
+    };
+    tmp = {
+      useTmpfs = true;
+    };
+  };
+
+  services.journald.extraConfig = ''
+    Storage=none
+  '';
+
+  systemd = {
+    coredump.enable = false;
+  };
+
  fileSystems."/mnt/hdd" = {
    device = "zdata/nas";
    fsType = "zfs";
@@ -1,4 +1,3 @@
 # Apple Network

 This service allows atalkd instances to connect to each other over vxlan over Yggdrasil. We need to use vxlan due to the support of broadcasting it provides. The service will form a network of star-topology vxlan using the underlying Yggdrasil network. With this vxlan network, we can have a private Apple Talk network over the internet.
-
@@ -19,12 +19,6 @@
            description = "Public URL for accessing the instance";
          };

-          base_domain = lib.mkOption {
-            type = with lib.types; str;
-            default = "";
-            description = "Defines the base domain to create the hostnames for MagicDNS in Headscale. `base_domain` must be a FQDN, without the trailing dot. The FQDN of the hosts will be `hostname.base_domain (e.g. myhost.tailnet.example.com)";
-          };
-
          advertise_routes = lib.mkOption {
            type = with lib.types; listOf str;
            default = [ ];
@@ -32,6 +26,13 @@
            example = [ "192.168.1.0/24" ];
          };

+          dns = {
+            base_domain = lib.mkOption {
+              type = with lib.types; str;
+              default = "";
+              description = "Defines the base domain to create the hostnames for MagicDNS in Headscale. `base_domain` must be a FQDN, without the trailing dot. The FQDN of the hosts will be `hostname.base_domain (e.g. myhost.tailnet.example.com)";
+            };
+
            nameservers = lib.mkOption {
              type = with lib.types; listOf str;
              default = [
@@ -41,6 +42,42 @@
              description = "List of nameservers to pass to Tailscale clients";
              example = [ "10.0.10.1" ];
            };
+
+            magic_dns = lib.mkOption {
+              type = with lib.types; bool;
+              default = true;
+              description = "Whether to enable MagicDNS";
+            };
+
+            extra_records = lib.mkOption {
+              type =
+                with lib.types;
+                nullOr (
+                  listOf (submodule {
+                    options = {
+                      name = lib.mkOption {
+                        type = lib.types.str;
+                        description = "DNS record name.";
+                        example = "grafana.tailnet.example.com";
+                      };
+                      type = lib.mkOption {
+                        type = lib.types.enum [
+                          "A"
+                          "AAAA"
+                        ];
+                        description = "DNS record type.";
+                        example = "A";
+                      };
+                      value = lib.mkOption {
+                        type = lib.types.str;
+                        description = "DNS record value (IP address).";
+                        example = "100.64.0.3";
+                      };
+                    };
+                  })
+                );
+            };
+          };
        };
      };

@@ -170,10 +207,11 @@
              settings.server_url = "https://${settings.public_url}";

              settings.dns = {
-                base_domain = settings.base_domain;
+                base_domain = settings.dns.base_domain;
                override_local_dns = true;
-                nameservers.global = settings.nameservers;
-                magic_dns = false;
+                nameservers.global = settings.dns.nameservers;
+                magic_dns = settings.dns.magic_dns;
+                extra_records = settings.dns.extra_records;
              };
            };

@@ -11,7 +11,7 @@
    homeDirectory = lib.mkForce "/home/${username}";
    stateVersion = osConfig.system.stateVersion;
    packages = with pkgs; [
-      libreoffice-fresh
+      libreoffice-stable
      element-desktop
      signal-desktop
      brave
@@ -0,0 +1,5 @@
+{
+  boot.supportedFilesystems = {
+    ntfs = true;
+  };
+}
@@ -14,11 +14,6 @@
        ...
      }:
      {
-        nixpkgs.overlays = [
-          (final: prev: {
-            libreoffice = prev.libreoffice-fresh;
-          })
-        ];

        services.stirling-pdf = {
          enable = lib.mkDefault true;
@@ -10,10 +10,10 @@ in
  perSystem =
    { ... }:
    {
-      clan.nixosTests.service-stirling-pdf = {
-        imports = [ ./tests/vm/default.nix ];
-
-        clan.modules."@clan/stirling-pdf" = module;
-      };
+      # clan.nixosTests.service-stirling-pdf = {
+      #   imports = [ ./tests/vm/default.nix ];
+      #
+      #   clan.modules."@clan/stirling-pdf" = module;
+      # };
    };
 }
@@ -7,5 +7,6 @@
    frappixLibsOverlay = inputs.frappix.libsOverlay.x86_64-linux;
    frappixPythonOverlay = inputs.frappix.pythonOverlay.x86_64-linux;
    frappixToolsOverlay = inputs.frappix.toolsOverlay.x86_64-linux;
+    frappixAppsOverlay = import ../pkgs/frappix/overlay.nix;
  };
 }
@@ -0,0 +1,35 @@
+{
+  buildPythonPackage,
+  pythonRelaxDepsHook,
+  flit-core,
+  mkAssets,
+  fetchFromGitea,
+}:
+let
+  version = "0.0.1";
+  src = fetchFromGitea {
+    domain = "git.b4l.co.th";
+    owner = "newedge";
+    repo = "default_thai_company";
+    rev = "caad6e77da35c9359b0dbd75ff0f39bb01891caf";
+    sha256 = "sha256-LH7E1EkecNPrhfQWSlWzPHHuJLM6SReCAifcFPDr61o=";
+  };
+in
+buildPythonPackage (finalAttrs: {
+  # pname doubles as the frappe app name (services.frappe reads app.pname)
+  pname = "default_thai_company";
+  inherit version;
+
+  pyproject = true;
+
+  src = mkAssets {
+    inherit (finalAttrs) pname version;
+    inherit src;
+    yarnHash = "sha256-oZgyP0hTU9bxszOVg3Bmiu6yos2d2Inc1Do8To4z8GQ=";
+  };
+
+  nativeBuildInputs = [
+    pythonRelaxDepsHook
+    flit-core
+  ];
+})
@@ -0,0 +1,9 @@
+# Extends the frappix app scope with in-house frappe apps.
+# Must be applied after frappixFrappeOverlay (needs prev.frappix).
+final: prev: {
+  frappix = prev.frappix.overrideScope (
+    ffinal: _fprev: {
+      default_thai_company = ffinal.callPackage ./default-thai-company.nix { };
+    }
+  );
+}
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/machines/buna
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:KuFHnA==,iv:lvao2ckPM9O/fgs1r3mh40Gnr5vuvQqZTRaQ+anHNoU=,tag:cBqhneA3C3VXABTOvadIgw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzMUN6cnNNdm5CMFdjMGlW\nNDNvSVFzeFpaSGFNczF4Ri9VMkZVc1VQOWtzCkNDRzZ0Y0ZDOUhsK1RpQ1AwQWZV\nZnI2eUkxZHFJZlVwa3JKZzE0TDd1QmsKLS0tIGJIamNRQVh6Vkc5dU9MSzlJM0VK\ndHV2MFl6Sjc5TzJGZ1l6ck5UZnp4U2MKN+A+25PmavBjV6Py7Lex/LhWLTBO2fFu\nQajDNL3WcXE2lgRICk4QuiW/vKCpB7cfWrZjbTbKIi5jneyXZA4+IQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFyMG5TNE5k\nSXo4dW9FOUVFZTQ1VTlXM3ZYQkdxRXhLQzZkWVl0R2QzQmcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpBbU1qQTc0K0ZHdGFqV1h2d2VQblhs\nQjRqS253dlMxb2R2VU9YSXRSUVRjCi0tLSByWnlta0ZqbENrejYwUXJxdWJHVGdP\nYmlHanZnRzNjUHZOQjd0NjZweVRZCmrJo9GKl4L8fHXUwn59pe0MIxasg1cVG/Td\nqfa2WBtRFTHC08MJ9NHIOJtngGUdt9FO56Hdu0hCH/+SQE/dGHk=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGZMeGpoQkVp\ncHRGemphOGJsNEhzTzhTTGY0ZUpHMG85dFcxcjQveGFEQzQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpna1N3ekFCc3k2OStDVmZkeVNwa09P\nZHdxZ3M5dHFWcC9ESXBzVWtXdkRvCi0tLSBwdUJGaXJxOTJlL2tKcDRLZlFYeEFo\nSVBtTjVoQ1VzdXh0akJrNWxDbDJNCi1AsTs5S5MV8a6QIIzWYBSQu3ZemxE7+sNl\ns0mE9vpeTNoEbUQeGtR01YDoBkyLK7oyW9bV+aGdpsHXjIwROVI=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHN4dEp4YkIy\nY2EwTFN6dEZwSW5Ma21rVjZYNnlRL1Z3S1FBZ3F0ekpIRlkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEQmF2blAzMGVBZldOT1ExSHhlVi90\nemkrQlVHMEVweHEvQUlZY3FjUG93Ci0tLSBEM0VVQmlCdFZtY1NELzBwSWhLTFRT\nd1ozQVJIcVJ5NVRMVEZrQ2o2Q244CvEbyfK6vlwVYl7Y5Aa29Op1ea3eeFW2PAdx\nHeAFeni3LPJyZhya/Q+Z+ZFWyuEdGdclMTeaqzQBhefmAJzM6jU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlTkUrNTBNRWdDUnpRdkxq\naC9wd2VEb3hPRVBxa0I0am83QzVrZmhsS25jCnFpSW8zTi9KRmRYVThxb1RZVEdw\nMmJxRlB1Q0NGSTdiZEpISUVFTWtwUFkKLS0tIEw4TTZEV2dMQURxV3NiVnMyZGUr\nUU9TcVM0RE5mdVBnOEVBcFpFNTNOM0EKQlQ7V88MhDLHsD9AQc3tA1oQo4uj1RQD\njX5uDH2HnxTVI7KGMU0NvnsT9Y5IEVdXVLCOUKNFU1eKQmsyzl4IQg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSVdDL21tclJWak9reFc4\naDU3VTNFb2RKSExUSldLbjlPbkpiNW5lb0NNCkptdnMxMTRqaDJqZkl5c0ZReERJ\ncmkzVDhVSVNxQXNQZHFFWXFIaEFnNlUKLS0tIGZ1N2ttQnA1eG8rZ1dyckVxVFJI\neTYrc203RUhjVllUNUwzTVBIK1gyYm8KOJFlCD3akcnK1aplNpmmH8eQXLNM4H3V\noqnDgxJzaL62MgJVIn9Z6hayL1vLnUyu8FbEjT+Axaf6/jmEOmG/yA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pgxgvwck2vr3va6c4c3utj7w2rfg2st9qvm76nc92vhfmplqmu4qs928lm"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5N1cwK0l1dHV0cThCdm9k\nYkxkRUhsbHdrWTJyRVViVXRtd1A3TFU1WXlVCkxWbDhseS9yQitYNi9lMC94eFpk\nM1Backl6N2dhWVJiZ1k4MlFYU3dQMTgKLS0tIEZ4SUs5b3BUY1hTdks0ZlB4TDVO\nOE1qMTNUY3N1aW8rc1p2dzRtNEQ2bVEKooGSsl+xPK8svd4lOQAgA3/F+plSBOkB\nbZVg2yVlm2f29BSB5gZVKFjjQVVl7WcRe4Q+2cAiANbplvLXSRY0KA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2amhaUzU0VmxBZERCUTVh\nTStBQXpKTzVhRjJZQ04reEE2YVZRR2IrYmprCmFtV1ZoMnhnUExzWk1xTzZ6THl5\nMnJqQ3o2emdrV1lxVjlrNlVqZFhGRVEKLS0tIGxMakQ3aTI5WkNlYXUzUDNCRWti\nMVQ2ZjE5eFdxcEM1Q3lCWW8yYmJRTU0KMg5tVdQK+/boAFPzYlLDT4rjO09VyYXg\nToyMwVvHW1pPuc910ol0esn7twJPUCDlAcsW6mW74VxHIqY+9exykw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ZTIxR1Z1QmZFNXZKNUl5\nZVdLRFBVOTN3dWZZaktzQ2NvUjArU29EcGhzClZGemJtem9yMjNNcEhnMXFiV1ly\nNnBvcFpPUGhFWjNHWXgzcXBNc3JOMkUKLS0tIEtKaHBTWU9qK2QyTUwwZWUxZkh3\nQTYzdFFWdHpYdnhSSHR3UEIyVURtQWsKFC3YPPY4bQse7fKmRi9QjGoNWBuNobje\nLKWhQsk1Xuv1VUz4DXJ/QJECthEZ01eE8k716ybgRxgk8nTAKoV3kQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-08-18T09:45:23Z",
+		"mac": "ENC[AES256_GCM,data:CgxPzt40hURezZ7cxH+Gcaa+/z1lZXqLwepB0epCQ03fh6Hg9xoEedzVaeAByhNi/v0cQ9Eq2qYc5SrbmZVBeBOzZLUUGQn8xYNoDpbUvKDDRnfBg3kIjh9f/Oj6QzpesYloc2JMsiNaWuQd3U8yvKXXTM/hJ3w/KaflOZMkOCE=,iv:AshLE+wgaaZ8tmzvsGv5UP0k3oV46mXlTdgIb553pRo=,tag:U3dc7S41Dt2q+v6GNYRj9w==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../sops/users/kurogeek
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/machines/buna
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:pl7P6pSpdVOggYMTtQ==,iv:wgpdK333N69c5QzYNGLBeyqANY/sAHjia+UzALqywtU=,tag:RGAnKGNiBOzABoJqZZ3IOw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxanRmYm5zUzN6blkwSVNl\ndzllUy9JUlM3MHNuMnloTXFOUXU5aHhrMkhFCmdBNEJtbFZtZEpjOVB5R0RwTVRy\nR2hCUEwzL3RITHJsdTNGNUpQdFkza1EKLS0tIEhVL0lLcStHN00rQnZobzREWGFX\nRmlIaFBUbXhtdERaQWpzYW9oQm81VFkKVrHioy9t0CBukVtmAZsp8DVigXmzgpeI\nxylNuB1IjgD06QodWHDqYfrfYtxSOoD5COGqs0LfXF/59bpSHuz2hQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHV1emlJblJO\ndlRibmJ1aFl3MEZGYkoyVFQ2US9zNHpkdzZYOXN4c1hWUnMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpFRjNtL0g3bFp6MjhxN29TQXQ3SW1i\nSnA4RlZRNlBMRmtkWTNJQ01hQkdZCi0tLSBCclR6elNmenlmOGxucVZCUDJoQkRS\nMVFzVldibVJoakJYajd2dWhnMWJzCgHnLHmavOL1bN4v9YI5cdqtNdx2HpzbmWgE\nJb+cHwmuV2qnArv+4N2wpXtK/T3Vv/c09Dzf/NDsxXgTVPwx8OM=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG5sdnhRUFBx\nMWQxTDlFTTNnTXczTUlOWi9mdjBSVTJnY1BZTWk0aHVtR1kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpSN0NMVzNkbzI5WlBvaHVRR0Z4aStn\nZmhQWUZ3dmZMblNpME11SVNFZThvCi0tLSAxZzhrZmlROVhsTTJ0aG95bnJZKzda\nS2pNSVpKamp3QUN1aUV4MFJQckt3Chg1cFLogm4yL9GDk6PW7K8uqQF+QgFzs/09\n6WZxliMy829FYJb+QwQMBfSwaIKDcYSPvrYt+cj6gdRxqe58m6A=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHBuQkdxZG1W\naXpTVm9BeHdMUmk1LzNKODZqbzNuNjJ3UnZYL3psSWVGUVUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpaUnEyV1FUdG5uMTZnUE5Wb2VYcU54\nK1RYVWVqRG9BdjlLVXBMRU5nTnRZCi0tLSAzdm13d1hWSzRyaENLNUNHT0hDK0hk\nTzdmRGNTT2JxYzVxaGFDUW1kVitrCg4xHuTtSvzGSM1/B3mFJY9Hw8iM7ubaU8ot\nh5vjycMiREWNTP0re8n97VqZseaJafEgFut0+lG0f7o53pafpmE=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3NWM2WXZhMFJyT0V4Umda\nbTNTeEZ4d2NuaFZtb0RKa0tDQ2N3dmYwdmtFCnpUbmM1RDlwZ2w2bGZScmxOaDIw\nQk9oeXN4bjBCemhhdUczT0wya0J3TXcKLS0tIGl0N1pGbUhzWU50NlVhOXZUNElL\nZVdKbG1UMjJzZ3dBWWREc3BuWkhGUWMK10RBDkhHsN537QJG0ddf8tJsjtE0+yzR\n282WAveQk+hZ+goCLjLY1onc/ffFmREY6cXVGI4lcqU4HIlDO8LBGw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5V2dWQlI2RDlFTkJqaTFq\neC8yb1c3NnpQc3FDYlFoUm1LM0grS0VJQWcwCmhSLzhick9JSGlBL2Frbm1wSWxW\ncVFQOTNJTTZxU3JwQmxnQ0NNTXlUdHcKLS0tIDZKVTBLTnBicVlDY3dHbjNscWt0\ncVhoWXY0bDZ6aTNiYVhUcGdncFFIL2sKex9c+mjspsKugg89gQkV3Y1LsYXofdAb\nkx+ANrlyckZlqbzG8eqTqeqyFJLGezcHnHXrqyOosySAMJxhATN+5A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pgxgvwck2vr3va6c4c3utj7w2rfg2st9qvm76nc92vhfmplqmu4qs928lm"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZGVXaXpzdHdmMy92QVhn\nTE8xNzluY3NQL2hYTEU3UUZnelB0VnhYMEUwCjNkUThjMnFzTGlNZy81QkF4N252\neUVpZ01Bb0N5NXlMK2NVWkplaDNsckkKLS0tIEI5OXZIQ1EvZnRQOEtLSyt5Y21q\nTnVqOXgxMTA2M1VvQ2VNVkxsdVFxSjAKiGyLRlUiHvuCyxDFrPkFKUcp/t5ulgV3\nbc33m1bmJ/4nI5v5ccWqzW8RK/KrBsdJJVQEJzKnAbvwOy304mNjPw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmLzBGSjRGeUNlOWU5bEVs\nczBWYVFvc1pOSXNvdnRlTU1vc2pTdlJXVkh3Ck1zNnZxT2lPK1dPNGFDcE52SkRV\neDVHRUZ2eFlWUG5nckVHSDJJMHR4ZGsKLS0tIHMyWlBaU3J2OWtjSnMwZHpBWit5\nMy9BQW9VcG5KZXF2QmNhSkFCVFp4aE0KUTxS8+x7it8tE2hoYn0dBputRA7wNs0N\nbQEAhZgubbVfY+d8HTF5syXN94qJ9E8cnlyAIXkKV2wHYV4q1MfbjA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuM05NSXpzbWJ1RkQ5aE15\neld6U252ZkRlZHVIZHVoUnJNV0pycVd2R2pJCk04cCtCVWNPK2RRY3hHUndjZ2Ux\nWUpJV21ScFhkNUp2ajY0N21uZ2k2d00KLS0tIGRERHB2UmxVSFRGWnBIUWYzVUYz\naXRYcjdQaitYZ3FOelNKOVptVllMQVEKH518tn/UK5+aaiQrCWXtfTbRXJQxAvy1\nlGnN58WSydycG7dMOHZEy8NApTCWiMQXgnAAYwUSvHZSdTZPZe+g6w==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-08-18T09:45:24Z",
+		"mac": "ENC[AES256_GCM,data:UxGJheXkINxhl3L+IUn/ebciTRC4cJunxRIpnNQCkIHo9bdrhATF7JYYMHFG28GcXqLtiwzUM2g8FWsmpS3yL9kfyakARUMZpGOX1iwYJcr5fIDhm8Ss3DlfHCtBNWMED+WfC+iU2kBuhi4ApXo2MctOLBXxI86AHuWli3XQ9MU=,iv:T9b9+u+qcWKWxT7T1/l/NkoDQhYF6NVcoIVDjgvNStg=,tag:MousYfmOmj8GiJ+aky9muQ==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../sops/users/kurogeek
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/machines/buna
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:Ep3BjrmthB1pHw==,iv:ISK9Yvxy4oW0yl4x1SfP1ZLcWSMw137kN207QoNAlzE=,tag:iLogPI6xNKc1cTV93c7u1g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMUXlJdmMvd3Jja3M2aVkw\nc3dXRXYvV0hhMGljcit5SC9nSVhPWjdYTFZrCkVha2dYdmtzV29XMUcxeW5mQ3hw\nYXZ6d0VvMlkzUU9NTkMyWmF0Z3M2Qm8KLS0tIHB5OWFabThWUUttejhVYXFGTmFC\nU1ZNMFdlSjd4SW5IdHZNTFZmZjVoWVUKPE+sLE1wyhFUYh3dVVSgzvnH0SEhAJho\nDG0EgwaUXVPOMFG/obtG81GjyPSqc+2h2LmOsDEdkfHKLI0y1ga1KA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEFFT2h5MlAv\nMmJMTzN4V1F3OUN0UWd6MkE1cy9JQVhJY1dHUE93dUwvVkUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpCN2NUNWk3Vmp1YXdUOFd4NGtCSWJk\nbGZ6eUdUUTY0SlFGSmxNYW9raVlNCi0tLSBYaGVPOFd6S3VEZ2dLWmVIZllacUJp\nd0hhb0U1dkJ1MHRVNXZ0aVlIejBFCnqVgw8PWlUsblG4su8SUVotQ0vOipl7eqDr\nHZMtTq6HMOnTQh7SNDoBvdV7jdmSTVkbp7Mgiktwltrz+jwh+k0=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDU0Ly8wKzRq\nSnc0K0F1eFpHMUVaYnpaL2NGak9VRVJyRjczVlM2cjlyd0kgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpBUE1pbWJOak5EU1pVeEJBN05iVmg0\nWTNNOE9VRE0vREdkRlNVM2Mwa25BCi0tLSBiZktlQjBFMWhWUEpKbUpnbVJWckww\nQThrbGZiVkpOVnpHamhZVFNSajlBCpZyaNaMQtcQoa5YFYutcdjS3Q7i78Vd/aGZ\nNFow+cQ2M8zaQExqiLgIuv5FV/msyU/tlK07oenaj+QJrxi2AXo=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHNYVHBUMTE4\ndFF4a2tQTzZQdUsvVGk5YkJJMFRpRFQ5UVU3YUYxSEtiUW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpXRmRQdldrb0Y5elBWakppUkJsVitl\nZDNTcnh5UDRKaXVWbnNSS2hFaUJNCi0tLSBGV3J2ek92d1VUOHQwUTFQTGl2Q09V\nZThNQVlLYjI1bG1HOGJ0ek9ZcXBZCgf/3lE2q2HVXI+uJqcSuZVBvDZ9/+DJHRTF\nFS3dB6+sVLrVdBapyQ6QVCQwqFKEiSFfP5a5TCRUtM4azCpPtHs=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKOVJxblA1bFdoVlRZa0J6\nLzRuTGtEKzhzdnlUYWRoNDVERWVXaWhBcWhJClZmY2RVS29JVldxT1ZndUh2ZWVD\nSzNPMXk0andydUpLSjlhQStsUGFvTGMKLS0tIDl5OHVZVEp3ZzJOTGxNdWZMQVJv\nYXA1b2Q4RWRFOXVVeTVsZEUzZmtNZTgK4c4vKNX1YO726lWpwaUql/QAs2SBvy20\nL52jzq/VhrZkMwvh2u2deAuW74BHIIFF1t5EAcjDEE7u8uJx9QKuHw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2QndQcVhuNnNQaVFBVkU3\nTXc4WHY5ZXhjNThiOGtPdkpKUEVJakFFWWhFCkFrMWVBd2g0YndtaXBrQXdRY2Fl\nSDBoa3dFbEtkb1pKUHlIYXpnK2VJbkkKLS0tIE41eS9UK1J0SkZqK2VGL3BEU0Fp\neHhaWjBVV0FEWXFXOHBzaEF2c0JiakEKi6G4hY2mNAZDcfcd1GEzR2twjNIr4CXw\nIh0YEq2pJHQEwhajakpNIYN80OEwV196aZwHjOSLWApCmHnq1uftDA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pgxgvwck2vr3va6c4c3utj7w2rfg2st9qvm76nc92vhfmplqmu4qs928lm"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMnhGVE9rSnpvUk41SXhs\ndFhIOURXbGgwdllkMVpwQys1YzNzOFZRZnpFCnczWGk4eE1oWk05NUVVeXVtOU9y\nQmhJVTBqVjBGblVFL0oxRjVvcUtZTTAKLS0tIEFVWDVOeGo2ZmEvSy8vZzd1eGpE\nUCtuM2dTQmZ2a0FqZGtGdUxmVksxVUUKHC+TI13xGqo45aBDY2lQ/JwmGnoJbB0o\nxKU9C1eTo2sCK4rzUupVcTfwts6ZhZs60ZdqW2t9B9Y1NT3Kf7kuiA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyWlh0Zlg0emt2LzU2VEdI\ndDdIZjNJV0pJZlJMTHNxVmN6WDVrWUtoNUN3CkgydUJEK3pkZ3RIN3lBSC9sRVNr\nSWtubCtya3NtUldhQXRVNzlZSVJUdzQKLS0tIC9KeEZkekE0eS9PU3lhUjZNMHJa\nOTJjMVhXM3VubjFKK2VEdmpMeW5QdzgK8+8gQNrCMX2unZwsQZihukixr4iBqcVA\nBDhYRqBeM2ATTCIpTKCIusTr6MeTBJntrjv7Gr3A4WpisFPySkO+fQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YlE0bXBwV0I3Y2p3bFZ5\nQXRTYk5iajNvSUcybzRqTEdiYk1YNFAwNG1ZCnFpWEp3a2VMRjc3aVFOcTN6ZkY1\nQlBEMElqRlJSS1R6R01hOUF4dk56SlkKLS0tIFVFS1ptLzhBais0UTBObENpM2d4\nMmdOWjZ2Ty9xV1ZIVW9qSnVtdGlzU1UK4aGzbR9KX310rTVepTuelU9wb67OzO1j\nksZWdjUtX6GYHpu8/jd7Igvd91RLpkv/KHotFdYyRnxzvCyf2hJ5xQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-08-18T09:45:24Z",
+		"mac": "ENC[AES256_GCM,data:y5o58By+FljYASJdTysT/by5k5ZSOlsAr7tFM2kTDctMPe0MbT8FDpDAkTsO2b27Kz6IQ5EV4VvzIDuZjz0SgyWORLJS8nUBv9Kbfg9RJtUfZiYomN4RzAOs8IFlnMAtrw1TI8S5qOXMyYoE+KhUEsCgyYaFCIjRt6xz83Ud36E=,iv:SIvk5anBZCiW0AOEBPaTW/xmKndSaeEC/DodAkRTmvA=,tag:vDDGlLO/DnfB5BGOniXizA==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../sops/users/kurogeek
@@ -0,0 +1 @@
+../../../../../sops/groups/admins
@@ -0,0 +1 @@
+../../../../../sops/machines/buna
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:fXho6gGhvwnMfb+xGglZLqjesY52AnSNJ/NzMYtvwe9jNEvnpbhOzn9/QkMD,iv:uE7lqukyjC70gex4NHuE+Y0EiDT+u+i5lTc5Gm+IVu4=,tag:47v3zg1rBtd8FEZPiU7WrA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQXQ1ZzlWbjkxTjd3aVhi\nZW9INU1jcmJaMGxBTU9VNHRveDdkbnF0WGlZCjV0SlozbUNkc0JPTUc0K0dxdmMz\nZHpkQUlRQUdJU0NLRmxDUmdIV1RDWXMKLS0tIElMYlFHVk1UdlpxemlJZThuNmFp\nMXY3ekJpUHJuZ1Y4TnRVdVdPNmRZQUkKoASwKcmu0SwDAd/2A1Lfzh1tlOyCJ/pU\nXPuH5uMw1HGBSMq65nuUQQyCQfYoQSo97S+CVxCK+6vVNQr2/zaTWg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJVa0ZObFZi\ndFBJMy9VS0FvaExmQXBjQVFpOE9CZHAxVTJwdC9zQ0t2bHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQprdURtQ0FXVURtYzNJWmw3dkR0cWpJ\nZHRQb09Vc2lWUk5VUEoxenJuYmZjCi0tLSBtdUMxYlk2WUFkQm45T1FOczM1K1d4\nUzMvSitEU1ZyNVVZQWlGZGJJMTRFCgRmaHYbJkc+4ewl3RX3Y4xau2Nrv5C7lzv6\n60C4vSl3R4Vu7wgINrxdyIf5MXyYaJvfeGYv/Xyvgo9/0b6ziT0=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGRaZmpHSUJx\nVjkzcDFOTnc5M3BaKzhpZW16NDJRVm1QRk4wMGVTUVoxaTQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwozQVlWZGFkbU1lSC9seFlzSVBOWG85\nZnFJMWNlclZuR0Z6WTd5TkpUZC9rCi0tLSBOeTgyNU1MeVEwZEVYSk1tQzB0TjAw\nZ0liQ3RvN3o2VHZkTTRZR2VjRnV3ClG6dDh9+YQgWbPq6nUCY8CJl4QDhkqEu1bp\ndTXrErRq/DVHxVnu8GIgKFq3KWkEwzrylnRA8EOOdf5uQN/ZHlw=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHE0Um8wRFlu\nSkx1MTZoRG1MTXJ0aUdpZDNQVHNSak53cENWQ0duZVlzQmMgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpDRTNFRm55bEcyYmNFbVh1bjNmUTgy\nU0J6WlJNOXhMMFY4TTRIcmlMUDlVCi0tLSBFSnVPUVNjbFZPV1VqNFFaSG03NFhM\nQmJuMkdYMG9qMXAraE9LVnJadkhjCpARfq/BQKglVaVUjbLXRyh5xgE1K4KZwWpL\n0jLZAuoouB8Yhc3l0ZzWfpy9lABK/7cQeKRCqLRRwbcDO1zutUQ=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOOVh6UU9VNHJjejUzWjU0\nemFBOGsvbHZjbms3bWRJZDZTYXJPKzlmdjBRClNNRUhrQ0R4SmJLU0RzMjFiUUZR\nUThxZjdiZXE5ajlSUG1mamVpazUzN0kKLS0tIHhnY1JCOS93R1RPRkJodm80YndP\nbDRocEMvUmtWTDdxRmowN1NyY21pTkkKBfxNZ7bwQvQOk1xZI9nAogu3wtuRj5zg\nWLq/mqWwyc5WPne3kr9QTuOCGVJx0k3fyQgUDrpq16Kx1DtkSVIEJA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArTzNLUVoxNTY4MFgrRXo4\nS0JFQjcrMXdrUlRpd3FMWjdNMVdRaTNEZml3CjJlN0ptaU5VSVRKK3V2Z1hxOHg1\nU2dJQWI3eHIvdjdVa0hibk5MdFErem8KLS0tIHEzTWVOSkVmd2dZWGJIQVFHeDU3\nYWs4VEZIR3JmNUdRbjdVczFuMERmVVUK9LBsk0aeqgGYUxIYuRzfbtyPXqUPm0nS\n+evubg7IUK5kkZ4QItWS9e5ytoAyhdDfu8kdtU+b1aSjiiQ2Q0vJPg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1pgxgvwck2vr3va6c4c3utj7w2rfg2st9qvm76nc92vhfmplqmu4qs928lm"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrS3dUNEhhZDBjSk83TXZh\nZ3IvcEh4Y0ZJaE54VHk3S1kraUt5aWtGT2prClhxOFFFWlpSY1YwQ2liWkVka2xq\nL080dzk1Q3czWlVsQ3d3ZnBXaWh1RmsKLS0tIGpLNGdpcmc3aWkwcllqbVJDRFUx\nUEYxSDR0K1F0YmZNT253aG45QjFZazQK8/DPRdCeEcXZiZwj/S28Jfhq9DUS7FLx\n2w0zVAUdx3XuzOnXB/z3r9y78wfnTqvURPr+Q1KwY8C1XUY+04W4Jg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOMDlNaFVtYS8vWkVyRVpY\nRS9YdFR1dnFVbUdDaXA1WW1SZ2dGdCs5U1FvCkdwOEUxRmFjVnRUQ0JqWFJtNm1o\nNlN0QlkrS0hCdHBiZjY2KzBZTHNpQ00KLS0tIDJSTUhvbytkYnZlNlhYdlhuQ0lr\nVFdjQ1ZZbklteXlnZ3ppLzYvQVZNejAK2x3kYLPA+IcKLZniFSBK+MoOyv4o5wXc\nF43zcPHWp8zqGKInf+AZM00IGj+xGN5voEAl21467sV8V0kURbD8Ug==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAya2ZUelVzWVR6SUMrRlgz\nNGxUdTV1Tm5vd3JGVEx2VVpyZnYvZVVsQVM0ClUwb3pRMFd4UDFvS1I5Ylp4VjN6\nek5oWUdyelVSbkpLcjl0VXB3ZDV0TnMKLS0tIG41TXlkekphM3U5Qk9EcE1wbFRL\nK3dET2ZjeDJpdnN6dUZtVmVBVW5heTAKxBZoSx1u1ZdmN8jW4IMN9eqEBqljPSsL\nbbkSRIzcHc1+EyTn2zRgPlNHBTDemqWBZUsFN/TmFMDC/boAqx6dDA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-08-18T09:45:24Z",
+		"mac": "ENC[AES256_GCM,data:lPWN0DAN+DxOl48LU3t2DN3e2qscwrlqMHlOSr2AaPK99WbEs42tIhbSBIh19lsuxEXMM7ql3Di2tXlO+8laxdwmRYY/dT5to768WsE5+S9ORES04lEMI49KLfcyc8kTG45UoDa4b8nZcC9tNNuy4B8MY6fM3EuBDGEvm52Bqm8=,iv:139IiyM6ZDqRPtfnmpNWIP0+XoT7NkCmPTPUdZhZ5YY=,tag:EJYrJJjUvq346vWGZX+DXg==,type:str]",
+		"version": "3.13.1"
+	}
+}
@@ -0,0 +1 @@
+../../../../../sops/users/kurogeek
Author	SHA1	Message	Date
kurogeek	0906700ad6	deneb: add default_thai_company frappe app to poyerp Package git.b4l.co.th/newedge/default_thai_company as a frappix app (pkgs/frappix/default-thai-company.nix) and expose it through a new frappixAppsOverlay that extends the pkgs.frappix scope. Install it on the poyerp.newedge.house site on deneb.	2026-09-15 16:18:30 +07:00
kurogeek	b9302e6192	clanService/prometheus: add mirach and almach	2026-09-11 10:53:00 +07:00
kurogeek	5cb262857e	inventory/wifi: retry autoconnect and auth indefinitely Set connection.autoconnect-retries=0 and connection.auth-retries=0 on the NetworkManager profiles generated by the clan wifi module for buna, so a flaky AP or slow auth never leaves the connection permanently blocked.	2026-09-09 04:15:18 +00:00
kurogeek	47e536540f	flake: bump nixpkgs to fix broken prettier build prettier 3.9.6 in nixpkgs e8be781 failed to build (stale pnpm lockfile in binding-wasm32-wasi), breaking nix fmt. Fixed upstream in 58973d7.	2026-09-08 08:35:21 +00:00
kurogeek	282a8f8287	clanService/personal-computer: supportedFilesystems ntfs	2026-09-04 14:06:30 +07:00
kurogeek	a9254c424d	machines/sirius: buildPlatform.system = x86_64-linux	2026-09-04 13:43:04 +07:00
kurogeek	5961254878	machines/sirius: rm common module	2026-09-04 13:42:10 +07:00
kurogeek	9403ddbf08	clanService/headscale: adjust magic dns settings	2026-09-03 17:17:36 +07:00
kurogeek	37ff958560	inventory/auto-pull-update: limited to selected machines until a build machine is present	2026-09-03 13:58:29 +07:00
kurogeek	efa4b39782	libreoffice-fresh -> libreoffice-stable	2026-09-03 12:22:15 +07:00
kurogeek	e2341b7c79	inputs/nixpkgs,home-manager,clan-core,frappix, bump version	2026-09-03 12:21:00 +07:00
kurogeek	dc1c94796a	machines/sirius: reduce write on disk	2026-09-02 11:34:40 +07:00
kurogeek	5b07b98f40	inventory/prometheus: add buna to monitored machines	2026-08-21 12:03:34 +07:00
kurogeek	88ac5cbd83	machines/buna: use wifi	2026-08-19 14:34:34 +07:00
kurogeek	969c006f97	machines/deneb: support Thai characters	2026-08-16 14:02:41 +07:00