mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/rigel/networking.nix
Update vars via generator yggdrasil for machine rigel
2025-10-20 15:21:30 +07:00 · 2025-10-20 10:55:59 +07:00 · 2025-10-17 17:24:55 +07:00 · 2025-10-17 17:24:10 +07:00 · 2025-10-17 17:24:05 +07:00 · 2025-10-17 17:23:57 +07:00
57 changed files with 1000 additions and 296 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -2,4 +2,4 @@
 # Ignore build outputs from performing a nix-build or `nix build` command
 result
 result-*
-
+run-vm-*
--- a/flake.lock
+++ b/flake.lock
@@ -136,6 +136,24 @@
        "type": "github"
      }
    },
+    "liminix": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1760426231,
+        "narHash": "sha256-r8c5PKtsxAvtQ/k17GH+WNvP47Lr+AbExLMPdLtvAKE=",
+        "ref": "refs/heads/fix-gl-ar750",
+        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
+        "revCount": 1574,
+        "type": "git",
+        "url": "https://git.b4l.co.th/newedge/liminix"
+      },
+      "original": {
+        "ref": "refs/heads/fix-gl-ar750",
+        "rev": "3f1f7c08d440130cce9262a93ce78ed7969d93cd",
+        "type": "git",
+        "url": "https://git.b4l.co.th/newedge/liminix"
+      }
+    },
    "nix-darwin": {
      "inputs": {
        "nixpkgs": [
@@ -207,6 +225,7 @@
        "devshell": "devshell",
        "flake-parts": "flake-parts",
        "import-tree": "import-tree",
+        "liminix": "liminix",
        "nixpkgs": "nixpkgs",
        "treefmt-nix": "treefmt-nix"
      }
--- a/flake.nix
+++ b/flake.nix
@@ -21,6 +21,10 @@
      url = "github:numtide/treefmt-nix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+    liminix = {
+      url = "git+https://git.b4l.co.th/newedge/liminix?ref=refs/heads/fix-gl-ar750&rev=3f1f7c08d440130cce9262a93ce78ed7969d93cd";
+      flake = false;
+    };
  };
  outputs =
    {
@@ -38,6 +42,7 @@
          ./shell.nix

          ./machines
+          ./routers
          ./inventories
          ./modules/clan/flake-module.nix
        ];
--- a/inventories/default.nix
+++ b/inventories/default.nix
@@ -1,22 +1,14 @@
-{
-  inputs,
-  self,
-  lib,
-  pkgs,
-  ...
-}:
 {
  clan = {
    inventory = {

-      machines = {
-        rigel.deploy.targetHost = "root@rigel.local";
-        vega.deploy.targetHost = "root@vega.local";
-      };
-
      tags = {
        glom = [ "vega" ];
        b4l = [ "rigel" ];
+        fax-bridge = [
+          "neptune"
+          "rigel"
+        ];
      };

      instances = {
@@ -60,6 +52,14 @@
          roles.peer.tags.b4l = { };
        };

+        yggdrasil = {
+          module = {
+            name = "yggdrasil";
+            input = "self";
+          };
+          roles.default.tags."fax-bridge" = { };
+        };
+
        pocket-id = {
          module = {
            name = "pocket-id";
@@ -73,7 +73,6 @@
            input = "self";
          };
          roles.default.machines.b4l = { };
-          roles.default.machines.vega = { };
        };
        stirling-pdf = {
          module = {
--- a/machines/neptune/configuration.nix
+++ b/machines/neptune/configuration.nix
@@ -0,0 +1,22 @@
+{ inputs, config, ... }:
+{
+  imports = [
+    # (inputs.import-tree ./services)
+  ];
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+  boot.loader.grub.devices = [ "/dev/disk/by-id/FIXME" ];
+  fileSystems = {
+    "/".device = "/dev/FIXME";
+  };
+  networking.fqdn = "b4l.co.th";
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+
+  security.acme.defaults.email = "admin@b4l.co.th";
+  security.acme.acceptTerms = true;
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
+    enableACME = true;
+  };
+}
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -1,13 +1,17 @@
+{ config, ... }:
 {
  imports = [
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "1b495eede9" # kurogeek-thinkpad
+        "b0e0b84fd3" # Alex
+        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })
+    ./networking.nix
  ];

  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
 }
--- a/machines/rigel/networking.nix
+++ b/machines/rigel/networking.nix
@@ -0,0 +1,6 @@
+let
+  ata-interface = "";
+in
+{
+  networking.interfaces = { };
+}
--- a/machines/vega/configuration.nix
+++ b/machines/vega/configuration.nix
@@ -10,12 +10,14 @@
    (import ../../lib/auto-accept-zerotier-members.nix {
      memberIds = [
        "dbe44c0287" # Alex-gateway
-        "1b495eede9" # kurogeek-thinkpad
+        "b0e0b84fd3" # Alex
+        "2bd36db8cc" # kurogeek-thinkpad
      ];
    })
  ];

  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
--- a/machines/vega/disko.nix
+++ b/machines/vega/disko.nix
@@ -1,7 +1,7 @@
 { lib, ... }:
 let
  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/mmc-CUTB42_0x9d59499c";
+  os = "/dev/disk/by-id/mmc-CUTB42_0x95d14f9e";
  vdev = [
    "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5RYRG"
    "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5S02X"
--- a/machines/vega/facter.json
+++ b/machines/vega/facter.json
@@ -23,8 +23,8 @@
    },
    "bluetooth": [
      {
-        "index": 33,
-        "attached_to": 34,
+        "index": 31,
+        "attached_to": 33,
        "class_list": ["usb", "bluetooth"],
        "bus_type": {
          "hex": "0086",
@@ -99,7 +99,7 @@
      },
      {
        "index": 36,
-        "attached_to": 34,
+        "attached_to": 33,
        "class_list": ["usb", "bluetooth"],
        "bus_type": {
          "hex": "0086",
@@ -597,7 +597,7 @@
        "fpu_exception": true,
        "cpuid_level": 32,
        "write_protect": false,
-        "tlb_size": 32767,
+        "tlb_size": 32764,
        "clflush_size": 64,
        "cache_alignment": 64,
        "address_sizes": {
@@ -636,7 +636,7 @@
        },
        "device": {
          "hex": "0561",
-          "name": "0",
+          "name": "1",
          "value": 1377
        },
        "revision": {
@@ -645,10 +645,10 @@
          "value": 0
        },
        "serial": "000000004EBF",
-        "model": "0",
+        "model": "1",
        "sysfs_id": "/class/block/sdb",
-        "sysfs_bus_id": "1:0:0:0",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb4/4-3/4-3:1.0/host1/target1:0:0/1:0:0:0",
+        "sysfs_bus_id": "1:0:0:1",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb4/4-3/4-3:1.0/host1/target1:0:0/1:0:0:1",
        "unix_device_name": "/dev/sdb",
        "unix_device_number": {
          "type": 98,
@@ -657,10 +657,10 @@
          "range": 16
        },
        "unix_device_names": [
-          "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5RYRG",
-          "/dev/disk/by-id/usb-USB_3.0_Device_0_000000004EBF-0:0",
-          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:3:1.0-scsi-0:0:0:0",
-          "/dev/disk/by-path/pci-0000:00:14.0-usbv3-0:3:1.0-scsi-0:0:0:0",
+          "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5S02X",
+          "/dev/disk/by-id/usb-USB_3.0_Device_1_000000004EBF-0:1",
+          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:3:1.0-scsi-0:0:0:1",
+          "/dev/disk/by-path/pci-0000:00:14.0-usbv3-0:3:1.0-scsi-0:0:0:1",
          "/dev/sdb"
        ],
        "unix_device_name2": "/dev/sg1",
@@ -706,7 +706,7 @@
          "name": "Disk",
          "value": 0
        },
-        "serial": "0x9d59499c",
+        "serial": "0x95d14f9e",
        "model": "Disk",
        "sysfs_id": "/class/block/mmcblk0",
        "sysfs_bus_id": "mmc0:0001",
@@ -719,7 +719,7 @@
          "range": 32
        },
        "unix_device_names": [
-          "/dev/disk/by-id/mmc-CUTB42_0x9d59499c",
+          "/dev/disk/by-id/mmc-CUTB42_0x95d14f9e",
          "/dev/mmcblk0"
        ],
        "resources": [
@@ -745,180 +745,6 @@
      },
      {
        "index": 29,
-        "attached_to": 25,
-        "class_list": ["disk", "block_device"],
-        "base_class": {
-          "hex": "0106",
-          "name": "Mass Storage Device",
-          "value": 262
-        },
-        "sub_class": {
-          "hex": "0000",
-          "name": "Disk",
-          "value": 0
-        },
-        "model": "Disk",
-        "sysfs_id": "/class/block/mmcblk0boot0",
-        "sysfs_bus_id": "mmcblk0",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:1a.0/mmc_host/mmc0/mmc0:0001/block/mmcblk0",
-        "unix_device_name": "/dev/mmcblk0boot0",
-        "unix_device_number": {
-          "type": 98,
-          "major": 179,
-          "minor": 32,
-          "range": 32
-        },
-        "unix_device_names": ["/dev/mmcblk0boot0"],
-        "resources": [
-          {
-            "type": "disk_geo",
-            "cylinders": 128,
-            "heads": 4,
-            "sectors": 16,
-            "size": "0x0",
-            "geo_type": "logical"
-          },
-          {
-            "type": "size",
-            "unit": "sectors",
-            "value_1": 8192,
-            "value_2": 512
-          }
-        ],
-        "driver": "mmcblk",
-        "drivers": ["mmcblk"]
-      },
-      {
-        "index": 30,
-        "attached_to": 22,
-        "class_list": ["disk", "usb", "scsi", "block_device"],
-        "bus_type": {
-          "hex": "0084",
-          "name": "SCSI",
-          "value": 132
-        },
-        "slot": {
-          "bus": 1,
-          "number": 0
-        },
-        "base_class": {
-          "hex": "0106",
-          "name": "Mass Storage Device",
-          "value": 262
-        },
-        "sub_class": {
-          "hex": "0000",
-          "name": "Disk",
-          "value": 0
-        },
-        "vendor": {
-          "hex": "152d",
-          "value": 5421
-        },
-        "device": {
-          "hex": "0561",
-          "name": "1",
-          "value": 1377
-        },
-        "revision": {
-          "hex": "0000",
-          "name": "~",
-          "value": 0
-        },
-        "serial": "000000004EBF",
-        "model": "1",
-        "sysfs_id": "/class/block/sdc",
-        "sysfs_bus_id": "1:0:0:1",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb4/4-3/4-3:1.0/host1/target1:0:0/1:0:0:1",
-        "unix_device_name": "/dev/sdc",
-        "unix_device_number": {
-          "type": 98,
-          "major": 8,
-          "minor": 32,
-          "range": 16
-        },
-        "unix_device_names": [
-          "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5S02X",
-          "/dev/disk/by-id/usb-USB_3.0_Device_1_000000004EBF-0:1",
-          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:3:1.0-scsi-0:0:0:1",
-          "/dev/disk/by-path/pci-0000:00:14.0-usbv3-0:3:1.0-scsi-0:0:0:1",
-          "/dev/sdc"
-        ],
-        "unix_device_name2": "/dev/sg2",
-        "unix_device_number2": {
-          "type": 99,
-          "major": 21,
-          "minor": 2,
-          "range": 1
-        },
-        "resources": [
-          {
-            "type": "disk_geo",
-            "cylinders": 19074048,
-            "heads": 64,
-            "sectors": 32,
-            "size": "0x0",
-            "geo_type": "logical"
-          },
-          {
-            "type": "size",
-            "unit": "sectors",
-            "value_1": 39063650304,
-            "value_2": 512
-          }
-        ],
-        "driver": "uas",
-        "driver_module": "uas",
-        "drivers": ["sd", "uas"],
-        "driver_modules": ["sd_mod", "uas"]
-      },
-      {
-        "index": 31,
-        "attached_to": 25,
-        "class_list": ["disk", "block_device"],
-        "base_class": {
-          "hex": "0106",
-          "name": "Mass Storage Device",
-          "value": 262
-        },
-        "sub_class": {
-          "hex": "0000",
-          "name": "Disk",
-          "value": 0
-        },
-        "model": "Disk",
-        "sysfs_id": "/class/block/mmcblk0boot1",
-        "sysfs_bus_id": "mmcblk0",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:1a.0/mmc_host/mmc0/mmc0:0001/block/mmcblk0",
-        "unix_device_name": "/dev/mmcblk0boot1",
-        "unix_device_number": {
-          "type": 98,
-          "major": 179,
-          "minor": 64,
-          "range": 32
-        },
-        "unix_device_names": ["/dev/mmcblk0boot1"],
-        "resources": [
-          {
-            "type": "disk_geo",
-            "cylinders": 128,
-            "heads": 4,
-            "sectors": 16,
-            "size": "0x0",
-            "geo_type": "logical"
-          },
-          {
-            "type": "size",
-            "unit": "sectors",
-            "value_1": 8192,
-            "value_2": 512
-          }
-        ],
-        "driver": "mmcblk",
-        "drivers": ["mmcblk"]
-      },
-      {
-        "index": 32,
        "attached_to": 22,
        "class_list": ["disk", "usb", "scsi", "block_device"],
        "bus_type": {
@@ -957,27 +783,27 @@
        },
        "serial": "000000001532",
        "model": "Generic STORAGE DEVICE",
-        "sysfs_id": "/class/block/sda",
+        "sysfs_id": "/class/block/sdc",
        "sysfs_bus_id": "0:0:0:0",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb3/3-2/3-2:1.0/host0/target0:0:0/0:0:0:0",
-        "unix_device_name": "/dev/sda",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb3/3-1/3-1:1.0/host0/target0:0:0/0:0:0:0",
+        "unix_device_name": "/dev/sdc",
        "unix_device_number": {
          "type": 98,
          "major": 8,
-          "minor": 0,
+          "minor": 32,
          "range": 16
        },
        "unix_device_names": [
          "/dev/disk/by-id/usb-Generic_STORAGE_DEVICE_000000001532-0:0",
-          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:2:1.0-scsi-0:0:0:0",
-          "/dev/disk/by-path/pci-0000:00:14.0-usbv2-0:2:1.0-scsi-0:0:0:0",
-          "/dev/sda"
+          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:1:1.0-scsi-0:0:0:0",
+          "/dev/disk/by-path/pci-0000:00:14.0-usbv2-0:1:1.0-scsi-0:0:0:0",
+          "/dev/sdc"
        ],
-        "unix_device_name2": "/dev/sg0",
+        "unix_device_name2": "/dev/sg2",
        "unix_device_number2": {
          "type": 99,
          "major": 21,
-          "minor": 0,
+          "minor": 2,
          "range": 1
        },
        "resources": [
@@ -1009,6 +835,90 @@
        "drivers": ["sd", "usb-storage"],
        "driver_modules": ["sd_mod", "usb_storage"],
        "module_alias": "usb:v05E3p0749d1532dc00dsc00dp00ic08isc06ip50in00"
+      },
+      {
+        "index": 30,
+        "attached_to": 22,
+        "class_list": ["disk", "usb", "scsi", "block_device"],
+        "bus_type": {
+          "hex": "0084",
+          "name": "SCSI",
+          "value": 132
+        },
+        "slot": {
+          "bus": 1,
+          "number": 0
+        },
+        "base_class": {
+          "hex": "0106",
+          "name": "Mass Storage Device",
+          "value": 262
+        },
+        "sub_class": {
+          "hex": "0000",
+          "name": "Disk",
+          "value": 0
+        },
+        "vendor": {
+          "hex": "152d",
+          "value": 5421
+        },
+        "device": {
+          "hex": "0561",
+          "name": "0",
+          "value": 1377
+        },
+        "revision": {
+          "hex": "0000",
+          "name": "~",
+          "value": 0
+        },
+        "serial": "000000004EBF",
+        "model": "0",
+        "sysfs_id": "/class/block/sda",
+        "sysfs_bus_id": "1:0:0:0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:14.0/usb4/4-3/4-3:1.0/host1/target1:0:0/1:0:0:0",
+        "unix_device_name": "/dev/sda",
+        "unix_device_number": {
+          "type": 98,
+          "major": 8,
+          "minor": 0,
+          "range": 16
+        },
+        "unix_device_names": [
+          "/dev/disk/by-id/ata-ST20000NM002H-3KV133_ZYD5RYRG",
+          "/dev/disk/by-id/usb-USB_3.0_Device_0_000000004EBF-0:0",
+          "/dev/disk/by-path/pci-0000:00:14.0-usb-0:3:1.0-scsi-0:0:0:0",
+          "/dev/disk/by-path/pci-0000:00:14.0-usbv3-0:3:1.0-scsi-0:0:0:0",
+          "/dev/sda"
+        ],
+        "unix_device_name2": "/dev/sg0",
+        "unix_device_number2": {
+          "type": 99,
+          "major": 21,
+          "minor": 0,
+          "range": 1
+        },
+        "resources": [
+          {
+            "type": "disk_geo",
+            "cylinders": 19074048,
+            "heads": 64,
+            "sectors": 32,
+            "size": "0x0",
+            "geo_type": "logical"
+          },
+          {
+            "type": "size",
+            "unit": "sectors",
+            "value_1": 39063650304,
+            "value_2": 512
+          }
+        ],
+        "driver": "uas",
+        "driver_module": "uas",
+        "drivers": ["sd", "uas"],
+        "driver_modules": ["sd_mod", "uas"]
      }
    ],
    "graphics_card": [
@@ -1118,7 +1028,7 @@
    ],
    "hub": [
      {
-        "index": 34,
+        "index": 33,
        "attached_to": 22,
        "class_list": ["usb", "hub"],
        "bus_type": {
@@ -1268,7 +1178,7 @@
        "module_alias": "usb:v1D6Bp0003d0615dc09dsc00dp03ic09isc00ip00in00"
      },
      {
-        "index": 39,
+        "index": 38,
        "attached_to": 9,
        "class_list": ["usb", "hub"],
        "bus_type": {
@@ -1348,7 +1258,7 @@
        "module_alias": "usb:v1D6Bp0002d0615dc09dsc00dp01ic09isc00ip00in00"
      },
      {
-        "index": 41,
+        "index": 40,
        "attached_to": 9,
        "class_list": ["usb", "hub"],
        "bus_type": {
@@ -1420,8 +1330,8 @@
    ],
    "keyboard": [
      {
-        "index": 38,
-        "attached_to": 34,
+        "index": 39,
+        "attached_to": 33,
        "class_list": ["keyboard", "usb"],
        "bus_type": {
          "hex": "0086",
@@ -1458,8 +1368,8 @@
          "value": 0
        },
        "model": "Logitech USB Receiver",
-        "sysfs_id": "/devices/pci0000:00/0000:00:14.0/usb3/3-5/3-5:1.0",
-        "sysfs_bus_id": "3-5:1.0",
+        "sysfs_id": "/devices/pci0000:00/0000:00:14.0/usb3/3-2/3-2:1.0",
+        "sysfs_bus_id": "3-2:1.0",
        "resources": [
          {
            "type": "baud",
@@ -1529,7 +1439,7 @@
          {
            "type": "mem",
            "base": 0,
-            "range": 8096096256,
+            "range": 8097124352,
            "enabled": true,
            "access": "read_write",
            "prefetch": "unknown"
@@ -1718,8 +1628,8 @@
    ],
    "mouse": [
      {
-        "index": 42,
-        "attached_to": 34,
+        "index": 32,
+        "attached_to": 33,
        "class_list": ["mouse", "usb"],
        "bus_type": {
          "hex": "0086",
@@ -1758,8 +1668,8 @@
        "compat_vendor": "Unknown",
        "compat_device": "Generic USB Mouse",
        "model": "Logitech USB Receiver",
-        "sysfs_id": "/devices/pci0000:00/0000:00:14.0/usb3/3-5/3-5:1.1",
-        "sysfs_bus_id": "3-5:1.1",
+        "sysfs_id": "/devices/pci0000:00/0000:00:14.0/usb3/3-2/3-2:1.1",
+        "sysfs_bus_id": "3-2:1.1",
        "resources": [
          {
            "type": "baud",
@@ -1964,7 +1874,7 @@
        "resources": [
          {
            "type": "hwaddr",
-            "address": 48
+            "address": 54
          },
          {
            "type": "io",
@@ -1989,7 +1899,7 @@
          },
          {
            "type": "phwaddr",
-            "address": 54
+            "address": 53
          },
          {
            "type": "wlan",
@@ -2082,8 +1992,8 @@
    ],
    "network_interface": [
      {
-        "index": 43,
-        "attached_to": 13,
+        "index": 41,
+        "attached_to": 0,
        "class_list": ["network_interface"],
        "base_class": {
          "hex": "0107",
@@ -2091,32 +2001,17 @@
          "value": 263
        },
        "sub_class": {
-          "hex": "000a",
-          "name": "WLAN",
-          "value": 10
+          "hex": "0000",
+          "name": "Loopback",
+          "value": 0
        },
-        "model": "WLAN network interface",
-        "sysfs_id": "/class/net/wlan0",
-        "sysfs_device_link": "/devices/pci0000:00/0000:00:1c.0/0000:01:00.0",
-        "unix_device_name": "wlan0",
-        "unix_device_names": ["wlan0"],
-        "resources": [
-          {
-            "type": "hwaddr",
-            "address": 48
-          },
-          {
-            "type": "phwaddr",
-            "address": 54
-          }
-        ],
-        "driver": "rtw89_8852be",
-        "driver_module": "rtw89_8852be",
-        "drivers": ["rtw89_8852be"],
-        "driver_modules": ["rtw89_8852be"]
+        "model": "Loopback network interface",
+        "sysfs_id": "/class/net/lo",
+        "unix_device_name": "lo",
+        "unix_device_names": ["lo"]
      },
      {
-        "index": 44,
+        "index": 42,
        "attached_to": 11,
        "class_list": ["network_interface"],
        "base_class": {
@@ -2150,8 +2045,8 @@
        "driver_modules": ["igc"]
      },
      {
-        "index": 45,
-        "attached_to": 0,
+        "index": 43,
+        "attached_to": 13,
        "class_list": ["network_interface"],
        "base_class": {
          "hex": "0107",
@@ -2159,14 +2054,29 @@
          "value": 263
        },
        "sub_class": {
-          "hex": "0000",
-          "name": "Loopback",
-          "value": 0
+          "hex": "000a",
+          "name": "WLAN",
+          "value": 10
        },
-        "model": "Loopback network interface",
-        "sysfs_id": "/class/net/lo",
-        "unix_device_name": "lo",
-        "unix_device_names": ["lo"]
+        "model": "WLAN network interface",
+        "sysfs_id": "/class/net/wlan0",
+        "sysfs_device_link": "/devices/pci0000:00/0000:00:1c.0/0000:01:00.0",
+        "unix_device_name": "wlan0",
+        "unix_device_names": ["wlan0"],
+        "resources": [
+          {
+            "type": "hwaddr",
+            "address": 54
+          },
+          {
+            "type": "phwaddr",
+            "address": 53
+          }
+        ],
+        "driver": "rtw89_8852be",
+        "driver_module": "rtw89_8852be",
+        "drivers": ["rtw89_8852be"],
+        "driver_modules": ["rtw89_8852be"]
      }
    ],
    "pci": [
--- a/machines/vega/services/nextcloud.nix
+++ b/machines/vega/services/nextcloud.nix
@@ -1,34 +0,0 @@
-{ config, pkgs, ... }:
-let
-  # ncDomain = "${config.clan.core.vars.generators.vega-nextcloud.files.subdomain.value}.${config.networking.fqdn}";
-  ncDomain = "${config.networking.fqdn}";
-in
-{
-  clan.core.vars.generators.vega-nextcloud = {
-    files.subdomain.secret = false;
-
-    prompts = {
-      subdomain = {
-        persist = true;
-        type = "line";
-        description = "Sub-domain for Nextcloud app. Default:(cloud)";
-      };
-    };
-
-    script = ''cat $prompts/subdomain || echo -n "cloud" > $out/subdomain'';
-  };
-
-  networking.firewall.allowedTCPPorts = [
-    80
-    443
-  ];
-
-  services.nextcloud = {
-    hostName = ncDomain;
-    package = pkgs.nextcloud31;
-  };
-  # services.nginx.virtualHosts."${ncDomain}" = {
-  #   # useACMEHost = "${config.networking.fqdn}";
-  #   # forceSSL = true;
-  # };
-}
--- a/machines/vega/services/samba.nix
+++ b/machines/vega/services/samba.nix
@@ -0,0 +1,93 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  sambaUser = lib.filterAttrs (
+    name: user: user.isNormalUser && builtins.elem "samba" user.extraGroups
+  ) config.users.users;
+
+  sharedFolders = {
+    GLOM.users = [
+      "w"
+      "kurogeek"
+      "berwn"
+    ];
+  };
+in
+{
+
+  services.samba = {
+    enable = true;
+    openFirewall = true;
+    settings = {
+      global = {
+        security = "user";
+        workgroup = "WORKGROUP";
+        "server string" = "Glom Vega";
+        interfaces = "eth* en*";
+        "max log size" = "50";
+        "dns proxy" = false;
+        "syslog only" = true;
+        "map to guest" = "Bad User";
+        "guest account" = "nobody";
+      };
+    }
+    // lib.mapAttrs (share: opts: {
+      path = "/mnt/hdd/samba/${share}";
+      comment = share;
+      "force user" = share;
+      "force group" = share;
+      public = "yes";
+      "guest ok" = "yes";
+      "create mask" = "0640";
+      "directory mask" = "0750";
+      writable = "no";
+      browseable = "yes";
+      printable = "no";
+      # TODO
+      # "valid users" = toString opts.users;
+    }) sharedFolders;
+  };
+
+  users.users = lib.mapAttrs (share: opts: {
+    isSystemUser = true;
+    group = share;
+  }) sharedFolders;
+
+  users.groups = lib.mapAttrs (share: opts: { }) sharedFolders;
+
+  systemd.services.samba-smbd.postStart =
+    lib.concatMapStrings (
+      user:
+      let
+        password = config.clan.core.vars.generators."${user}-smb-password".files.password.path;
+      in
+      ''
+        mkdir -p /mnt/hdd/samba/${user}
+        chown ${user}:users /mnt/hdd/samba/${user}
+        # if a password is unchanged, this will error
+        (echo $(<${password}); echo $(<${password})) | ${config.services.samba.package}/bin/smbpasswd -s -a ${user}
+      ''
+    ) (lib.attrNames sambaUser)
+    + lib.concatMapStrings (share: ''
+      mkdir -p /mnt/hdd/samba/${share}
+      chown ${share}:${share} /mnt/hdd/samba/${share}
+    '') (lib.attrNames sharedFolders);
+
+  services.samba-wsdd = {
+    enable = true;
+    openFirewall = true;
+  };
+
+  services.avahi = {
+    publish.enable = true;
+    publish.userServices = true;
+    # ^^ Needed to allow samba to automatically register mDNS records (without the need for an `extraServiceFile`
+    nssmdns4 = true;
+    # ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
+    enable = true;
+    openFirewall = true;
+  };
+}
--- a/modules/clan/yggdrasil/default.nix
+++ b/modules/clan/yggdrasil/default.nix
@@ -0,0 +1,51 @@
+{ ... }:
+{
+  _class = "clan.service";
+  manifest.name = "yggdrasil";
+  manifest.description = "An in scalable routing as an encrypted IPv6 overlay network";
+  manifest.categories = [ "System" ];
+
+  roles.default = {
+    perInstance.nixosModule =
+      {
+        lib,
+        config,
+        pkgs,
+        ...
+      }:
+      {
+        clan.core.vars.generators.yggdrasil = {
+          files = {
+            yggdrasil-secret = {
+              secret = true;
+            };
+            yggdrasil-ip = {
+              secret = false;
+            };
+          };
+          runtimeInputs = with pkgs; [
+            yggdrasil
+            jq
+          ];
+          script = ''
+            yggdrasil -genconf -json | jq {PrivateKey} > $out/yggdrasil-secret
+            cat $out/yggdrasil-secret | yggdrasil -useconf -address | tr -d "\n" > $out/yggdrasil-ip
+          '';
+        };
+
+        services.yggdrasil = {
+          enable = lib.mkDefault true;
+          configFile = config.clan.core.vars.generators.yggdrasil.files.yggdrasil-secret.path;
+          settings = {
+            Peers = [
+              # US Peers
+              "tls://ygg.jjolly.dev:3443"
+              "tls://[2602:fc24:18:7a42::1]:993"
+              "tcp://leo.node.3dt.net:9002"
+              "tcp://ygg-kcmo.incognet.io:8883"
+            ];
+          };
+        };
+      };
+  };
+}
--- a/modules/clan/yggdrasil/flake-module.nix
+++ b/modules/clan/yggdrasil/flake-module.nix
@@ -0,0 +1,23 @@
+{
+  lib,
+  inputs,
+  self,
+  ...
+}:
+let
+  module = lib.modules.importApply ./default.nix { };
+in
+{
+  clan.modules = {
+    yggdrasil = module;
+  };
+  perSystem =
+    { ... }:
+    {
+      # clan.nixosTests.yggdrasil = {
+      #   imports = [ ./tests/vm/default.nix ];
+      #
+      #   clan.modules."@clan/yggdrasil" = module;
+      # };
+    };
+}
--- a/modules/clan/yggdrasil/tests/vm/default.nix
+++ b/modules/clan/yggdrasil/tests/vm/default.nix
@@ -0,0 +1,37 @@
+{
+  ...
+}:
+{
+  name = "service-yggdrasil";
+
+  clan = {
+    directory = ./.;
+    inventory = {
+      machines.server = { };
+
+      instances = {
+        yggdrasil-test = {
+          module.name = "@clan/yggdrasil";
+          module.input = "self";
+          roles.default.machines."server".settings = { };
+        };
+      };
+    };
+  };
+
+  nodes = {
+    server = {
+      services.yggdrasil = {
+      };
+    };
+  };
+
+  testScript = ''
+    start_all()
+
+    server.wait_for_unit("yggdrasil")
+
+    # Check that garage is running
+    server.succeed("systemctl status yggdrasil")
+  '';
+}
--- a/modules/clan/yggdrasil/tests/vm/sops/machines/server/key.json
+++ b/modules/clan/yggdrasil/tests/vm/sops/machines/server/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age12ldrhhffl0jeteh8f0rzhezs0ulggg5jyqph6xzrgjw2dv40pqwq49lej9",
+    "type": "age"
+  }
+]
--- a/modules/clan/yggdrasil/tests/vm/sops/secrets/server-age.key/secret
+++ b/modules/clan/yggdrasil/tests/vm/sops/secrets/server-age.key/secret
@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data:pGMobS67sLp2GN2Xw7A/trcLYnQdVZCUbjtlwS/AShXxyXgHXzkqRee6R765GZyCpDwM8A1IuMZYctrqWxVXrpIAiJpwvwy7vDM=,iv:ysRf5xAXN+dFSx+sFHNDt1GcVQx7RLej4c12v60iSI0=,tag:yXYpWhWLdsz9BOOoKpZU4g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UmhPdzcrSnFhVUxRNDBL\ncXlGRzdMdWxCWmFlUkE4RnJRQ3psMlBqV0Q0CkRjTXFoQitQbjRhMlVjaDc3UDN1\nR1hBeXlCeWxvdnZoVWI1ZkcweHF5VncKLS0tIHE4YVFhYTZTNko1MnJINjFPYXh4\ndlJJZThGZ0JIaDJWRTNXbXk3alNZTnMKgd+0535zoTu6xW2778uNReu4Z7LStN6d\n1O9SXAB+s1iOZ3xGEICiQTVF/6p8RE6lheV2oXgoMiXXrFNH6INLsw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T05:34:34Z",
+		"mac": "ENC[AES256_GCM,data:YIpKJlOI6ASgOYqv9ipu+T3c+PlM5HwvdFVH8gh8hVeSbmxD1baPPmVSWlLv+u61Q1/C9PK4mczaASopaGiLoswep+Hc1Gn7sSeP9wO6Djx6fEIEyE1VUhUbTqi/nHYiB21yB/wegfpqzNYIn1nO0oFCmDmSS5qIowcT1fhYIjM=,iv:lzxll5oC7poLvC/hZPexUGAcAdf67xZGRXUpj6O3p6Y=,tag:9xu17Y5MtW5XNzGBsWwA3g==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/modules/clan/yggdrasil/tests/vm/sops/secrets/server-age.key/users/admin
+++ b/modules/clan/yggdrasil/tests/vm/sops/secrets/server-age.key/users/admin
@@ -0,0 +1 @@
+../../../users/admin
--- a/modules/clan/yggdrasil/tests/vm/sops/users/admin/key.json
+++ b/modules/clan/yggdrasil/tests/vm/sops/users/admin/key.json
@@ -0,0 +1,4 @@
+{
+  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+  "type": "age"
+}
--- a/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-ip/value
+++ b/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+204:5ce7:aa27:579b:ec90:6907:4ddc:177
--- a/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/machines/server
+++ b/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/machines/server
@@ -0,0 +1 @@
+../../../../../../sops/machines/server
--- a/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/secret
+++ b/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:I6yalWQ2u5hI84lJTUmh07JxUBp4EZukJrSGSN7wsGiUGlFa1v/RT1XkTiXuRjDtUVYCLmQmfSCAp/OqFscxF8KL+s24iTDrG4e3S6AeKLa3oZrNJIt1EJ06gWrPNoh1ttmwXSd4Y4Bsk4Lg8vIjH4qw3Bx+KrufxYTqe+anfMdoXKnW8wOWud5O7HMvCh+sf4dNcf6PIQ==,iv:SF5qExXNPyif+LIcNhHP0PKELUBXaFsPj9B3wvUkEp0=,tag:QEkZXDrIdcpNiZ6l2ljOPw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age12ldrhhffl0jeteh8f0rzhezs0ulggg5jyqph6xzrgjw2dv40pqwq49lej9",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBENDhrWVRuYjRnZktROU4v\nSHNtODFGMWl0NDRHazIwcWl0WGtNY2dYMXhnCmZQQ0doS3BTaU5hRHVsVTB5THl1\nWUNDQUNiMVJFeFZnQ1ptYmFQdTJQc28KLS0tIEtJdUQ5Y1VqSThkSVVNcVNVNEFr\nMzBCRjM1L1V5TngrZG5rR0VHY3Z6TDAKPQ6P96upDeh8xwQDrX4Zcf71Dah5zkOJ\n/F5eODEBadzQSRmJuyp3+uRMFf47eR6Q5bVah3NsVxFquXOL3CtNlw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHb0EwT2tuMVE5SE5XaWdQ\ncGR0bFFhOUQvM2dGUzdlUEFFbzRnTHBWWUVnCjFGTXcrWW1vR0x5dXBUamtkS0dF\neG9weUVwQzhhNHhPRUdqV1VnWXJyNFEKLS0tIC80b1ZqRGFOenpENDN1Vk5vRUhY\nVnJzZ1Q5VzZ6ZEZtZE13YjQ0VVhrTTAK5y0BjKBRg2AXuO416JWLMLyM/pCQChKn\nVKZMXcT6cc5hHDuqbp9qUofknF68XnzlH6nOyLB1ZtnELyeZuf29fw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T05:34:35Z",
+		"mac": "ENC[AES256_GCM,data:Y3k83RaeX64LA3rsIkQxyKw+LLUgXVsqr3F2UHkv9h73gkyChc6k1oE/FLR4CsZZWsfLNjCkPMuenqToA2mKqQK0aADwPDYo0aVm0hr1PGX5j3Py6EmP56NFvxlAQsExRWo32eqdkeCkY23hfcmUYlaB+bo/fsrRVj67zag9GYA=,iv:p18i8cV6jKXpuZ1Xd7KYCl8BMe1/8CW9YnCuVrTAqy0=,tag:IJnLzdZOn8Clu+lCKT6zvA==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/users/admin
+++ b/modules/clan/yggdrasil/tests/vm/vars/per-machine/server/yggdrasil/yggdrasil-secret/users/admin
@@ -0,0 +1 @@
+../../../../../../sops/users/admin
--- a/routers/default.nix
+++ b/routers/default.nix
@@ -0,0 +1,9 @@
+{ inputs, ... }:
+{
+  flake.legacyPackages = {
+    whitehouse-router = import "${inputs.liminix}/default.nix" {
+      device = (import "${inputs.liminix}/devices/gl-ar750");
+      liminix-config = import ./white-house/configuration.nix { inherit inputs; };
+    };
+  };
+}
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -0,0 +1,120 @@
+{ inputs }:
+{
+  config,
+  pkgs,
+  modulesPath,
+  lib,
+  ...
+}:
+let
+  secrets = {
+    firewallRules = { };
+  }
+  // (import ./secrets.nix);
+  wirelessConfig = {
+    country_code = "TH";
+    inherit (secrets) wpa_passphrase;
+    wmm_enabled = 1;
+  };
+  svc = config.system.service;
+in
+{
+  imports = [
+    "${inputs.liminix}/modules/wlan.nix"
+    "${inputs.liminix}/modules/network"
+    "${inputs.liminix}/modules/vlan"
+    "${inputs.liminix}/modules/ssh"
+    "${inputs.liminix}/modules/bridge"
+    "${modulesPath}/profiles/gateway.nix"
+  ];
+
+  hostname = "whitehouse";
+  boot = {
+    tftp = {
+      freeSpaceBytes = 3 * 1024 * 1024;
+      serverip = "${secrets.lan.prefix}.148";
+      ipaddr = "${secrets.lan.prefix}.251";
+    };
+  };
+
+  services.sshd = svc.ssh.build {
+    authorizedKeys.root = secrets.root.openssh.authorizedKeys.keys;
+  };
+
+  users.root = secrets.root;
+
+  services.resolvconf = lib.mkForce (
+    pkgs.liminix.services.oneshot rec {
+      name = "resolvconf";
+      up = ''
+        ( in_outputs ${name}
+         echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
+         echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
+         chmod 0444 resolv.conf
+        )
+      '';
+    }
+  );
+
+  profile.gateway = {
+    lan = {
+      interfaces = with config.hardware.networkInterfaces; [
+        wlan
+        wlan5
+        lan
+      ];
+      inherit (secrets.lan) prefix;
+      address = {
+        family = "inet";
+        address = "${secrets.lan.prefix}.1";
+        prefixLength = 24;
+      };
+      dhcp = {
+        start = 10;
+        end = 240;
+        hosts = { };
+        localDomain = "lan";
+      };
+    };
+    wan = {
+      interface = svc.pppoe.build {
+        interface = config.hardware.networkInterfaces.wan;
+        username = secrets.l2tp.name;
+        password = secrets.l2tp.password;
+      };
+
+      dhcp6.enable = true;
+    };
+    firewall = {
+      enable = true;
+      rules = secrets.firewallRules;
+    };
+    wireless.networks = {
+
+      "${secrets.ssid}" = {
+        interface = config.hardware.networkInterfaces.wlan;
+        hw_mode = "g";
+        channel = "2";
+        ieee80211n = 1;
+      }
+      // wirelessConfig;
+      "${secrets.ssid}-5" = rec {
+        interface = config.hardware.networkInterfaces.wlan5;
+        hw_mode = "a";
+        channel = 36;
+        ht_capab = "[HT40+]";
+        vht_oper_chwidth = 1;
+        vht_oper_centr_freq_seg0_idx = channel + 6;
+        ieee80211n = 1;
+        ieee80211ac = 1;
+      }
+      // wirelessConfig;
+    };
+  };
+  defaultProfile.packages = with pkgs; [
+    busybox
+    iw
+    iptables
+  ];
+
+}
--- a/routers/white-house/secrets.nix
+++ b/routers/white-house/secrets.nix
@@ -0,0 +1,20 @@
+{
+  wpa_passphrase = "";
+  ssid = "WhiteHouse";
+  l2tp = {
+    name = "";
+    password = "";
+  };
+  root = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcZ/p1Ofa9liwIzPWzNtONhJ7+FUWd2lCz33r81t8+w kurogeek@kurogeek"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAB/raxJR8gASmquP63weHelbi+da2WBJR1DgzHPNz/f"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuhpzDHBPvn8nv8RH1MRomDOaXyP4GziQm7r3MZ1Syk"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAmgyEGuY/r7SDlJgrzYmQqpcWS5W+fCzRi3OS59ne4W openpgp:0xFF687387"
+    ];
+  };
+
+  lan = {
+    prefix = "192.168.1";
+  };
+}
--- a/sops/machines/neptune/key.json
+++ b/sops/machines/neptune/key.json
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+    "type": "age"
+  }
+]
--- a/sops/secrets/neptune-age.key/groups/admins
+++ b/sops/secrets/neptune-age.key/groups/admins
@@ -0,0 +1 @@
+../../../groups/admins
--- a/sops/secrets/neptune-age.key/secret
+++ b/sops/secrets/neptune-age.key/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:XXV5r3FnMpt1rX8L4LtxLbNeEZ+tLkFeMQOTvyH93fRAEltE4Uszy5khsvyX9c/h33uxyGFQAymHUqSN8rBlBfbJ0bIf8DfoaJA=,iv:rYt5U/usIK7+glVjRclgCkNpQYwQoZ+UPSzanqbI9bA=,tag:c34l9laQnhQOZlV6bj9KCA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmY0szY2IvRzhId2l3MTFI\nUjFrV0hEWXJIOGcvTmNoaDkvZDlrN0dlRWhnCm1CR2tBWFhJb2NyVndkZTlYWmg1\nUlJHVTkyVGdWZFVVSkZtUzZIQm9DRGMKLS0tIDJxVnB4RFRkWWZ0Y01VeFNIV0hM\nQlphalhKeDQySEVoWWdGNmRaWUhDbm8KnTdaaJsw3YqkjSDQREQuOjeHqKjMbw8q\nfgeetuG7tI/30tKgggTr48rk6mHVHoZE0JHugjYTt0mfoM8Dqct/Sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK0R0TC8zZVFkRyt0cEJa\nam9XNk1oenZ6d0lyd0l2cVByZW85TDR6R0NjClFKeXp3ZzFrUU5vQ1dhczRtbGRN\ncVd0dm5uQ1NIeFJneDNXcEwwb3JkWDAKLS0tIGczcEhEWlFBTVJYNWxLMHhCUDY2\nRFhZdEN0NEJHRHpHL24wdjdNUEVmWDAKYVTOGiD/4zZ8ME3F931LDzjoloy6JESj\nGVcgg1ISR/GMeYGxqTGxTQhHVVXv0+djdTnK+RAg2wUJy0VbFTzqTA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFh0UzRLMXhN\nL1Z0QWJxaEVFRDQ5YnQwRGFLdGNzSzQydUJXbVpDTE1sV00gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpmcGdiQkVKSUxQZkJzbEVhay9rVlZS\nV2ZoNmg2WS9aWC9zbGYvdDNkUDlBCi0tLSBqWHM5alJISkNWaE4rcXV0OTZPU1Bh\nY0tFWFl5MnB4L3VrZFREVW50UFkwCqW2sa+4LVWIwcZT9xJ0evJsBva3Lmpcj2SF\nV9YHl7EmGb4pJBslgYUFMQkvTr0/w9VC545YLP3ECn9loC3hzxM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGxOOVVrK1ZR\nWjFIcmpacjhUT29LRzlBcENjaWVKWW9BZzdVYUZDWFRIM1UgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwovWlU3RE5aMlczZlJocll1MDZlMG1Q\nSm9CZGZ4TjdYaCtDd04rcjdzQUE0Ci0tLSB3YnMrVGowTUFoNmlzYnRVbTU0dnFM\nb2tuVW1OanYwZm0yTVV0WlZkS21zCmRJ7ij8d36hIM0ZotpU/+ooyWKkHYSgRILa\ncm3F97UZGQ/TkNVaJvMlm7IlX4g/6hONDb41me4/29EmJsJHhKs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExBUmFLZlNY\nK0tHY2NSRzZtR0Rwci8weWphekM2bWZvTGFEREdzSG5pQTggQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpsRU1ndC9FekMyTDMra2dYeTlDZFVC\nTURLTG1uMHQ1ZlBEL3ZadnF2R2k4Ci0tLSArWFoyRFdzeFh3cEd3L1hKT3B5a2xS\nQjFEd2Y4NzROTDNmWlYxK015TFRjCjbR7wDmMMuCZpzMq4bbKJNj5P0OH+GclyvT\np84RX7o2CzmlJQXmYwLkv6FICe7U904QURuhPywyU0RXGhKUqhM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVVU1M1M3VURheitScDRw\nbGhETlhUOXdPVVptUGgrUkM1QnRrckJCZERnCkhyY3dhSnJ3a3VDWEs1L3RrQVJl\nOHI0OXBJY2dDQm1vOUFpMzJQcGV3cG8KLS0tIEZ1SHdweDJkV1owRE9RanR3cTd3\nMWFlSDJuMHR1bXVHc1dNODlJejQ5N3MKhKq69LY9/9PXKm3TlsWHYW8PbMgWwgWQ\nUAC4WqLvKYk/MAbKbMOVr/TfrRbkrFJtbP1H0X6A7yzIrAXnsPfyRA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZGJQTkRFcUh5SEM0Ritx\nLzNhNWxSL3g2Zm1kNUtmT1AyZ0VzOGh5eHhFClJmcm41Q1BFUVk3cWZ3d0VxV21X\nVmFKSzRkeTVWMzMzZzJIeXNDcWJFNkkKLS0tIDYrbWF3Z253ZDQxUkF5dzdGSlJW\nRkxReGYyV0tTcHJQR2JwUVdBL1I5TzgK5kZPf+5N0P/NeuqpQ04Lb8Sme+bocqYk\nk9Ld7vFSxXyjTTnhwKGv4+q85IkDq1xGLj+7iM7QfRfpZS6tBpKJjQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4U0VWYlJKM1JYOXRoU09r\nUjhzalA5aHRCVTVZWXBmODJZZnAvSEI2MFI4ClZEeGh6WnZsNUtTSW9lU0xnL1kx\nbDV4UGIvVXRra2VvdzJwNFdINmdlT00KLS0tIDJwMnpCWVVkVmtYVmxSNXJqNkYz\nM2lCbXQ5VEd1RE9TREF0WllGRWFjeFUKouFFBKiW7JQ+c41t5hwnBndUKZKhdwpm\nYCzF7/2YlZtNYdxip1+lZ5YEqyaXygcOZBjjZ/4s1B7ihEscQskLhQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidzFMU3pQRm1HL3IvS2NJ\na1ZjcFhyRTljb1lQeXhjK3BBN1htdjhCUnpRCmM2MnJEeE1UZ3N0RDRvRitLMndX\nZXpWNk53d3FXWjA5Nnd1Vm5idEg0Z0EKLS0tIC9RaXE4ak1tOXMzU3dsZWh1MFR5\nQnlqTnBGY2pMd0dZYVpGdHRaTzFuTmMKqixum2H5jyBFdxdXAVlLZ4Wn5ZfeUJNR\nnNNsDNsjMctBn3gbtGHkx2wEnlKS4a6jbk01wVdSeyOFWlR9KKXF7g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:23:57Z",
+		"mac": "ENC[AES256_GCM,data:xVNbw/RamaR6701df6IHPGjGDoYsZH7gwOWeVpb8A8VoaxYNHQVnRkV6jL58AQqI4DR+HisrpkBoN4Ui9o8t5u7PRbGyjUgUr6tvuwh4MMpk+osUmlH8eNdzi0W3SarhFZIWtcSHkLuhOj92yk0qd+W3TmWd3iMCrdVpkDe2kU8=,iv:uuUYoGcDQTZu/vGgVkt0x4QMQNkcNWCcwOlM/XQBx38=,tag:J49wr+on3MJdlNASbr+tMg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/sops/secrets/neptune-age.key/users/kurogeek
+++ b/sops/secrets/neptune-age.key/users/kurogeek
@@ -0,0 +1 @@
+../../../users/kurogeek
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+200:ada9:8363:202b:faf:be:92ab:e46d
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/groups/admins
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/machines/b4l
@@ -0,0 +1 @@
+../../../../../../sops/machines/b4l
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:NSyWVWXMxoTR07uaLUYX6rHB17wsIB53FZHSsPxgDKJQ2wHBPFNaHSYh+BiSo+IrX+YcdUUqJFhEkjWDyG+vXaNZHrMbg/pzZ/cwTK/lPbYISkwtOhgr3zCA0H6DmQcHVmvR6fsdRDkFwl7pHtn1RMjEORQdbBINtscZfzZFcAF2L1t+WPFxgRKQDNT/9l3f4SoBcuakyg==,iv:/5JbEZ/vj/4I+eEElOY0cnhiYzqqPw2ZKLv2M/xkstw=,tag:23exDL72g56bP7ZbMsK4mA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYUFSZGpmd2tmdzB6bkp5\naytPd1RhVWFqeXF3SDZia3QzUmRNNGpzcjBFCnl3VElLdXFvV0tFSEFlV3hRMzFH\nbnBnWVZ2QkRHZ1BoTEZxdFg4QWE4ckkKLS0tIHhSMlBKakxmM0xyeUphKytLTmpk\nVW90V05hTUEyTVNMQzZHN2xhYTBZRGcK/nJOIM4m56TE7KKmn/QH89g053mmuKKG\nQYs/86SWdLPqwL35FstQg2xDIHSxkDcoMSGc+C+/xdOjWV3qLil/DQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaU9idi9RZzhNeXhTb0pp\nUkZ3UVpsZlBka2kvZDBqcVhiRVdMNVFZbEJNCkhvdmFaVTBGcVAvalJPSlFuZHhi\nTE9qeTBMMjk2djhFUEdJbWZmTnN3WnMKLS0tIDludThMRDFDUHhCZVV3bUtVdVBZ\neGg4TzdqVjJPeUxYbnBWNURRSWRrMkEKBCACDZgHG5eVKcSdjHDITJZqgR7cHdHq\n9y8qS3YjaFZ37Ui6Lmb9vJEzDCEy3wEupBy4sbAX4okVapGPJ4fmwg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHJtSTZrY29X\nVTZNQm9XS3JsbEZCNDFUR1gxZXpObDdKRmQzUnRZMytOaFEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpYN2xlOFVDZFlEOHhTMGZTVDNjdjdU\ndWlqd2ROamdmelp4UjAyVitnYVQwCi0tLSBZWmVWc2J4YVhLN3VyMTQwamtYRW5K\nWVovUEp3YlN5WjA1VE10MElWMllvCiLrLLekRkmSL5ekLIcFMoqgeEPXSrn15JDd\neKT9sbYtwhB7vt2L57fDRfaF/+7wNb9y6cv2oi+EdDoDXp/EyB4=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGxiRWYyUmwv\nVjlEdS9LOVV2K1NwdDFhYWM5RS9LcTZFNkNaMWViMkl5bmMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpUQkk4NGZPVWRTbG5MNk9CTStSUXFi\nbXlGemlJR2o2dTB6QUE2Q2JKSnE4Ci0tLSBzZjRva2NtNHlRamNvQWpoZW1UWFMr\nQVdNYXBpOFVhaEVxWm1KNFM4UHJvCnebMj6d/+e0vp00Gb02qJtUp2+mEpF/jUpD\n25cxeoSAWPAhfnBgE+oLzQqnQSq5dCxsWteE/1eOXC68koeT9FY=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIC9udm9sRDBJ\nNFM4dFA2ZDdJMlBXeXYvakM5RHVzNlcrRitzUHF6dnBvMVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpKZnBka3YzK0tUQ1hXTHVheE45Mzkw\ncE04aVVPQWM1eURmb1JaNlBwVlFFCi0tLSBHTlY4UW5FQXExK2cvMUJDZE9NaURy\nOFUxN0dvczJtWlVRc29QWlZ1bGg0CvUoAmTgDVSF7SPpqnkFhkCUn3N/Yr4Tzodw\nyCiD7U/KYFavEIxGIeg+ClhLF9o4fYq9kk8ld0vU8qUADXBdRDE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTUEyUndkSk1iQTB3eUpp\nb0ljaXpwdi9QYmdNV1J3L0NhWElRVzlnNTFVCnZ6Q01ESWRNMHRxdWZKM0lYTXBX\ncko5VitPdWk0UHpwWDhGNzFVZk4yYzgKLS0tIGVRdG5rWkYwOFlCQWNIWFBRalVE\nMmFtOHBvbUw5YXAvMG93MjBrRjdmMGMKlopySr6HS6vfFHiRcwlJz/qy7jzyS1Nf\nw4lw7QnOrvOkoutiK3HiIia5N6V0jd0TV7nJqIu7tz/zYksbzps7QQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVTZNTUM5UXowWTlPRDFW\nVUJTbStFcldHbTVDUVRJYjNiaklWRmowTHdnCkJNbUtmdk1jS3kyaVNWVFlOTytX\nKzBwTmxoZi9NdmJuRFNMNTUyRThNUDQKLS0tIENSMHZ5TGwxQ0xuZkZFQ3RJdGEv\nSXIvYW9WY243cTdzZEtra292K0JFVlEKMWhG/7R00uqLb5l5lU3p9Vt4pre6J85r\nIFWtg1G/54KaFt8aiWcD5RUSSARGZ3r4qVtO+9eWP+gA4DUpSNkWNw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WVlWMHJNbERKUGx0elgx\nUEF1Sms4VCtNRVRraWdvUkFEaTRzYTJ0TTFZCnl0aTIxR1QyQ1VsU0RFNnN1NzBr\neTVQbHJHQjAvYklFVkZkUDRXRGxvSkEKLS0tIHdINHFyQVE2V1V1R1ZxWEFuMm5x\nUVRjSVp6NStGSkQyQ05JVHlXejBEbWsKBlMvtw9MCReN1eSHKMwwsWaEF8kq1Pns\nLNSYEeWABZ5bbPB1xBvmIIlVFThJqgy5mBVJLzQMUwqb0IvixAgFxQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaSmNiVWlRSy91Mm5qSWJ5\nd2Z4WnEydE9ncWwzUVVCMDVoek1wRTFyOFJjCkZjOVZrVHY5d3FKRmMvaXJQWUtU\neGpSZkZITkJaOERkdWZpelA5dTJQOEkKLS0tIEtZOUNJSytYTFpSTWNuY3JjcnJv\nbFZpTXQxc29Pd1FIN0xrcEJYc3ZlV0kKyO/PLn2WNdVtTqM8cG1XFqV/5YdSqPAY\nvroStGVsLliV7W4T2MAmACeyjoMde9/gVosKfGc6awE+Bi2BUxrqpw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T07:22:09Z",
+		"mac": "ENC[AES256_GCM,data:OxeLto6aeiTOX8OffRsQzxyluSdva7y3j4j67c+MI1ost+QCZyGAW/5pr2mMaoU2XrwYqUjZTKBhJ9p1FY6C29/EhyzrNhGUTjC5iTcXO1lbLUTgoSDN8KPmVea97sTa+easVHoSgnPLxisG2yCALv95k9/eQ7vF9FRjBBNTaIU=,iv:FQeojhtnKOlqWuQNJo1TmI/PhjYbgwtvK24gZMjbbpM=,tag:Vwum5bSSZRNNDQ3Yudw4hQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/users/kurogeek
+++ b/vars/per-machine/b4l/yggdrasil/yggdrasil-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519.pub/value
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE09U7Tuvn3/icqFhjKuhp4hG+V6E6IFKhX1W2hVvyVj 
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/groups/admins
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/machines/neptune
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/secret
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:Hc6d3IxfBdHF5XmgdV2zvAU1XZhrgi53/kAKEk6cFiI=,tag:H9CYzcaHbr/LI518IB8YOw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMUh0ZzFCbWJxenpJYlBP\nelEwWDlTYmNuVE9GcXZRUERPd3lyaGhoRFZVCldEcDZUTmJueCt2dmhXS2x4c2Mv\nMENYTFo1UzRLM1lZWGdYRGVkb3hLN28KLS0tIHZhUWNzcXNiUnNPbFZQa0l1SXNl\nSzd4QU1DandCb1lRUEkxUFFNSE5rUUkK7LHoggdi4wj9K39A6KaH0+MFbJ4wzaIt\nRYZxyUdWtrDMm4tEPbHT3DgBYC7RdGfWbxct9KwihlwSWMhNTyXAbg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb1lOQjRYOEd5S2lEeDho\nNkFLeWhnM1Zjdm9ENXZtUnQwbUlMckhBd2c4CkFLRkVJL25ka1hnTGNnVmRjZ1pz\ndFFFZ2NKZUU2REF0OXV0amVOL0VTZVEKLS0tIHFtcnJ1b1dWVnlPWnExeHJPYnBm\nNEVkNHJBRW1GM2p1Rlh6ZlZiTmYzZ2sKT21d9OMGWuPxkITTvl6XUWzHyGqqzZty\nitwdfFm3YpzGK/FLN6LH+KSXqfo/ntUMmOIAai+geefuT8mSW9n/Ag==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYOHhKWlAwMDBUZFBRamNT\nOFg2Ky94M0xvZTlsS0pEekxkRlYxN1lDVGpvCjZ3T1AzaEV5Qlo1TlAyazQzRUR1\nWjk3d01USzdNaHF6bGpPVWhEbENUZ0kKLS0tIG9TQWlkQmlFdklETXh4cUphUFdZ\nVVhuM3h6NFpKQm1IeGNDR2RxaEUvR2sKoXaltJrkQ4EzTRkrrO74CrCmT67Fef3Q\njRi8NcuYAFN/CrsBLGQA34JwTdKhmS0skkJsDEsofPuepebNc6IHCg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZyWndNQ3ho\nbTl4YXh4UkdyeUNTZzlyZXNIZGpOWklwSXp1Ykx1amZzQUEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpGMDdjSzIvUGtIaWR6eTlaSG51Z3Na\nSUJHWTVhcTRaRGp4NzExcDZTVVJJCi0tLSAvU1JPeGtLT25sNEIrdmJHUzYrTGky\ncURjektPeE1HTHlKK1M2VWpidlgwCimWuV36gFbk2wB7H1X8HJjfq3RJHjP0r5AF\nFY5UYFLvlftVdPizm0LXo5KQbnbckDPZxrlwvkcJP12PR+FOyh0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFRpczlmNVdz\nd1BUUkk1OUZwOWhCY1lkbm9xUnBiYmltVWw3MFg0TWEvVVUgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpCODRxNWYxNzdCdE51bkVGZU4xbENx\nZTlPTXh5VFJMWFl3ZlhSWElMRldRCi0tLSBnMXExUWtrL2Q1ZmdiaEpIdHVsWHJz\nSFJuRGRvWU01ejYvcFJTNVRqRUY0Ct9eLGkzb+9Zf5Au/Zg+EbQxzgoxTKByhtij\n2YSL2jfn+MiQSoEWeXYP2x6QiZ3gh7yp5WY1ghD09Yvf7x7UAPo=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHAzLzNCa0RK\nOHBML3RQWDZPVk1SZlh3NkxqSDQ2eXd0amxiZHpzeEd0aEkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4NEkwbHhqUTZydmJOMm9xbjB3eGVU\nQmRtZW9ETElXdXIvK3NQb2ZjVHJrCi0tLSBzUUxtMnpYUFdyMlg3czg4RTBWcWdW\nUFFvN3N2WEI1Y2RWZWFwR1p6Rm9RCoMt8vokyKfTEPJ5nj/lKIS9OrBEe9QPADTG\nQ7HWrId0rRFkXXb8urU8APRJgUFKeap5mUtQ7LjNPMz0dhbccew=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZ2ZoZElaeldaVE0xUElK\nelFWN3ZrS1VzYkFZbENjb0ZMQzA3TWFFTngwCkM0NUJseE5LUHZqUUxxbXB1Rndz\neVBMcWsvdGdNSURsR0xFOFJ3N09lOGsKLS0tIDUyaDRDL3QrcnltaDZHL3dPYmxs\naU1Xc1ZjYmhwV1lINk1UMTcxc1Q4SDgKTt5+DspGwjI2ODiemPgLkGzHnyo05u6y\nJpewiruQhL4WsZgI48Us8WFfyHNc+dLaGplBgJrUadh6S3Fo+QpiVA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcWFwdVFaMHEySmlKTUZq\nNWUxT05UMkhFall3Mzh6NTFIcDZoZUxpZkZVCmJQV0ZmYnFJbTQycXNBWGtLZG5s\nZ2ovc0Nydm1YcXBwdytuWHlRTWFCc2MKLS0tIGFnbzdMOWR1UzVpY2RvWnJFeXlO\nYmU0dWxWNjVTYkFLdW14Qk9jOTZOcUUK6BCenu5Mh8fg6Lia4CBcQgNVTQsTY9Z1\nxSlqi4zOvKRDlE9PNRW/dWas68F/bJCRa8KhUPQ5ZF475Q5FUrbNoA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrWUhZSEl2ckJwZWwzc1Fi\nQ3g5R2RpZzZVdUpFK0ZyTlcvQnZSWkFlaGc4CitPeTM3SDhvb1Z1ZFh6WmNpWFBR\nd1RURnJPbnZlTWtBTHNsa083M2VRZDgKLS0tIFl2Ty9JaGNUWE5VSzU4ZDhUOHBx\nVEtlL3Nwa0ZpWjl2K2ptQ054WUlSSjAKhxcMLryYi7O8CKnFDphV1ojcDaSYFXPL\ngzaX32vI1LOo/doAq0dLC+yLtj1G7f/tE6tK2ax7SCUsAEhTn8QJ4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHalpIQWNJemFzaDRjM1JC\nUTJydzJPcWhoU3dPQkpjQWF3QVpUc2dhSkVnCkVGbkZQT3V6bWVqdS9KenBlcEpj\nUVdLQzdaRUlkdDIyeEV6bDhPU0VsQ0UKLS0tIHZYUHZVT1M0bm9oN3hwL1NkdWZW\nVVN0SWc2cTAwQWNoVUUrSkdwWHlSZUkKgsejUHV0bc70zNYwQk29KPetAbhiUMBg\nB3QxI8i+D8mJ+/EKFZzllakXK0NeHVDHTcALcyaI3SvIa95PMBczuA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:23:57Z",
+		"mac": "ENC[AES256_GCM,data:g054D4imoqjlpf/2HLfKW62cEJvJxGswSnNS+snyS1mx3+86E1kM256AJhETWl5ZC3qdfzgeobxRIIS1m3U8iajQtYn2nOJ23Njnfu2s9RTAQSCsnJevV+HfmaBDxqt/uS/q6DaXylaXmPINlmsA8Jwr4AiJtIKovm173P9/2hg=,iv:37tf+FpGFw1bv2q2Anc4gu6C9zacBjgh+Z5Xise6jKw=,tag:7HrVKWWkGE4CBF3TsisdzQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/openssh/ssh.id_ed25519/users/kurogeek
+++ b/vars/per-machine/neptune/openssh/ssh.id_ed25519/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/neptune/root-password/password-hash/groups/admins
+++ b/vars/per-machine/neptune/root-password/password-hash/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/neptune/root-password/password-hash/machines/neptune
+++ b/vars/per-machine/neptune/root-password/password-hash/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/root-password/password-hash/secret
+++ b/vars/per-machine/neptune/root-password/password-hash/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:H2KsH0uMgHC/NjEHH04I5hm7k96ZjOITsZ+kzL3y2CEAaauvmmTh7wNxpvG3E7SswbkYx200KXZTxgfY7z+0pmQxvwMzRukwIjpKZLLxUIIfvlZc9qmwpNH+7wo3pwjLQmYJ0OhMO9tzFA==,iv:EmAv1RrWtasq0ViKkAH+TrPYRXdhH+SdLH9hHfFBpnI=,tag:+0TexZJUMyMd9Kt647iM3A==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNb0VqN1h0QVdkendqTDVW\nM01kSGtZQkx3Ukw1UFBocUY4OVVxa2JLdVgwCkJEeGpHdlJCQkxnSW95ZlR0UVQv\nRFpmZzdpNVVYeTYxeWdyQUo4c1diZVkKLS0tIDBpdUdSNUVpamJvVy95QmhJbUhO\ndVpJZE5DdXJuSFJDaU5HT3FqNTA3amcKnmQ9DED2jtzConYx8tEQ0O5wkWLLuO/R\nFlpeMWrolziCbcBgraGffbFM3tk6jHqEdWB4r2SH/4U0HtNKBXSJfg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMFY2cVpWd04rMTlGSWxq\naFNXSGtVU1p1U0x0NVZYV0hGb0wrdnJQQVJjClVkSnkzaVFjNTlrMjNjVGVDSGVF\nd3BJbmZvb3RjV2JkcThuaUNCZjRjNG8KLS0tIE5TbHNoYy9QdTdHZlZ0bHZEUHd1\nSUJ0Z3FpZmVWRWxqVmJUZVYxck8xWnMKVbTYt8zbGkKMuz7f4yOG/EkdYYqfmj03\nKDCVLPqwsRoibsBRpyRine5oOUwzN+PtQeXwHj1vRTjtGzZIgpQIQA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWUZwN1kwTTZHUjNJWUw1\nY1htbUM3dnJrNUFPTStOOGJ6MW1DeUJWcnowCjRObXdGT0pUbjFYZzExaVpMbjhi\nWmF3QzAxaVlSeUkvNUpzcSt4TG1wU1EKLS0tIExDTnNtR3lVRllwRFh1RW05NGRl\nNTVyRWRDNFl0aVAwKzVYNkFKcXNRaUEKv84/fA4ydX7MjuWJA3oYhYkmWHXl3LyN\nIHpWk+7JuZlWaHJGVO/ywQmnEj+aaETpVvh99cKQhHk68dzzSV36lg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHN5MVAyQmRk\nWVRodG5EY2pRc3ZYL3FiWVJCSURlYmd0VTlkeU1FRFE1ZzQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQprSEFITXhnVGZhcTE3OTlSdzhmOXF1\nZFA1Zm5ZQVRLUDcrL3NBblhUVEZzCi0tLSBzUUFyR3V2UGFLYVQ4dG03RHZzZmZK\nOGtLMHJWbEYxOGQxL2NnRzVUdHN3Cun6V7ieogvJq02jePVUnX+IOHLnu3RRuVGX\n/PVGf0jRVQLP6u9gXsTa+GO/Ah6hYRsmV9lzq1S27gly5U0CbDI=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGhlcE9GVVVL\nN3JvTDRxUGNGZTE5ZngwYzVmTzM0ZmJ1N0Z4R2NYSlFobWsgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo2U3NMTHAxTGlxU2FSYmVLb1JBbXhZ\ncVpDc080VVpRUHhEaEJQSHVFbzV3Ci0tLSB3bmxZQmNHbThMSEtPb3BjS1JhTmRu\nYUNWMWE2eVBFbk53Wi9HSFNZejEwCigdlrPSwK9e3LcE+U5ZMfy424+gjcXCPtJI\nhDQPkKQ0htljBYFDz2izD/s7qwKOqzTia8u6UPLTopMcGyXpSbs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE9qdHcxd2pS\nRkRXNjlpQWE1UVdudDdGRmdzcEFPditmWTRCbXpobkg1aXcgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo2NkRIT3J1VnJzSEhCWjZLM1BtNWkz\nRjFMclJuMVB0U2ZsYkIzaUNEc2lBCi0tLSBQZ3IvK0Vvend0dThqalBwWFE2dExt\nYmk0NVhlY2E3Q2JWbXpMWE1PS1hvCv/w4TeDBqWbyBueaiypFgUu5InTNNuHRKOp\nvr1obhIlz4alQ62mhbLdGB+P3GB0yBkuamUlaOhfNNIk1kuMpt8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzdDdFbnY4OVpDdDcvT2pN\nQXNqdmYxaldmM0R5bGFmWWhlVzVoRWlMMjNjCkdXcUx1NU9KYmt4QUZCLzBYRUNo\ncFNqcjYxcUhFSWE2bjRqU0pzbjRrTmMKLS0tIG91K1RSWWxLaGdHazY2RDQ2VjA2\nV1NpN3p3Tm5sZ01jUUlhazlFNW1VQTgKj6wMVKN354bMWIs1OKAqCFu2+XSQ0KK4\nNxj0kJ3mimOpkZjTCAojuD784feb70gBx+Tgf3Z05jtR/EQBv5TjNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpeFBrbUJaWER0dC9ueDM4\nVENqQTkrSHp6elJuLysyaGliOTVPY3ZEb1RFCnJRUWZMQy9tVEZjYlh0ejY2RVBB\nWFlPWXJHcXBTMnRjSjFvblNDQld2L2cKLS0tIHBvSkdST2o5WmRNYnFodkJ4aU5G\nQktFcTdBM2pnT1ZINWkvWit6d1Z3dFEK9abGvVqxqXfSH+vKT85RhlyMUTQjAink\nW/0bH3ToYJpIoqxXk7ZxGWBlA+6To6HUZ5y8fcCFg100LIVtcqT9Ew==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwYTE1cG5kUEN4U1I4b3lP\neXVJRCtzekc2azdWalJTWUJmU2c3N0c5NWk0CjFUelJnMytKbXVCY25YZ0F4RDB0\nRENtcXpwanMwV0xZZ3VYNy9BUjQwck0KLS0tIDZ4TkhXUGJKVnM2bkVHdnZCT0Jp\nR2hYK0dqU3dEVHJna0hsVjVzOVZDR1EKq2/gNYgUozNgWx+A1eWWN/1ci+JGLuC2\n6MSoCDx0ZUg4e5EOmBLRl4CwRUSBJklfhzeCGVh0lOznNBlr0WfMaA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBScGhnbklHZllqMXNrK3NH\naGZtZTNKS3IrU0ZEanFJeG9iaXhmaDNMbkN3CmlybXhLbERkMEVwcDJDS1h6TGEz\ndCs1VHh2MnNQcGVzU2JMVmk3MDZLSTAKLS0tIHVoOU8wN2lSUU16Vjl6ZVJlbUw1\nMjh2U0JoK3pCY0tOWWpxZWcyaGdXeGcKBMyrTPy/8sIl6wLoasD9P0/+D4MI3uMk\n8U9hL+4Hw/8BdRt9rYwbcRX04/oKNXcPiyByHmIjYYF1AJTX07hFiQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:24:05Z",
+		"mac": "ENC[AES256_GCM,data:TQi5XJZPZOhJrYNVqyr9azqo0QAs0Q30qB4BZXQdTN/+mfmDqx+mdJdkMQpSlJaFpbzCZhVGW0reSzCbFOtam73LFsBJZUr0c0RYXq3f8U91FE11czMp9+oau2yY4D/6PzDQbHdJVywj0t2qTrsSHHdF4b/0BdpTpi0goNgbacM=,iv:+xpi5If3k154cekAvrT3/rtII4BsrRg2YFDDRaLjNds=,tag:4GoEX5ZxSkaY8XofCSF8Iw==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/root-password/password-hash/users/kurogeek
+++ b/vars/per-machine/neptune/root-password/password-hash/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/neptune/root-password/password/groups/admins
+++ b/vars/per-machine/neptune/root-password/password/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/neptune/root-password/password/secret
+++ b/vars/per-machine/neptune/root-password/password/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:JatEWUAYacgbFT1oRM0i3oHwoWh2URg+ZX6y9qafiPZujagsx6Ks2AQrGg==,iv:Dd8djrt+mnVkrWgGnfLWOByretizJSJ3+PfYW3bbGVw=,tag:fK3lGIgr2bMtKUifKK7tOA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WU1mbG5UMnU1OVhRQ2p4\nVHU4VUkxTXR4V3VlU3ZQdDYvTzZ5K1IvSXc0ClZGeTRUc2ZyaituMkh5ckFmbzFZ\ncVNycHNDSXZ0dzNPVXJMZlJ0QTk2UXMKLS0tIFNEd1BLNVVXdUM5M2JQT3VLaXIv\nTzFKbW1BYkxPZDFueEs0UEVGUDVBNUEKfP73bJLaJn+xsE0t4kz5PE1+LJqMxwGe\n74m0W8YoVweZHnpUeRcOnsxp0egDAwhgqg+sqpxLfY08L+zpeNSpIA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDQUZDWnpEZzVuWWJmUC94\nN3NwSEtNL1ROMnkrUy9VdjNUSFdub1A0VWl3CnhPRWpyUzNvajI3SitZZmVLQ1pB\nc085RU1CUHo3M3Q1em52ZmRnSnhqUFkKLS0tIHM0Qi95Q09CbkZDdEp2cTR3cGZw\nSkpjMjE5aHNMVFFGb1VYRWc0bi96RzQKhi6eXNUbhBeqofDl8WOvzLiD7mGiE7bk\nsctMjwCtHxpQTW0oD7hIMsNyJTduZ9/9rxPfRkmSDcCWYAsVFcBevA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEYxK09HUFNB\nZnVaUXp2RllSejJqTitBa2EveEZFdXpIb0VleHlHK2hweEEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQo1SlkvNVhtRXMraWtLQWxINFRuNy9E\nZUU1RlBqQ2d6eHQrMDJVK3B1Yys4Ci0tLSBwangzV2xtdHUreTRpLzFnMENQb1VE\nTllTc3RVYzVIeGtZMnhjNllSS1hjCleRr8GWtMiXRvk5IXgIKimKlJ6US26iHz3H\ngJhLHc9WzATHQFoiSnRsYLMRfXXfQDJ62GM6FX9MOZ8bbDdUZ78=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGI2UWIrOVdV\nbml5UmM3WU16YUVDMXJPRElFZVV2YlZtekJURnhuSU5zMkkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwo5SDhoYUxHQUJTTUNPa2dYWnA3NlBE\ncFZoTGRjVEpNb055emN3OE96UzBJCi0tLSB6ZEZqc0txNmQ5K0ttN0s5YmpxQU1M\nTEI5MFZaQ0IzL2ZIVi9LZ0pjVkg0CnnCHiCzCg9iyOw+jjei0TmnQDuuhEpxTvLB\n78+JpBnOnVZRMZM/RrguHup2lAMVXSBtu0zddf5wSivr0renXRk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZiTVJZbzVC\nQ2gxTG1PblRpUmM4QUQ3d2hhZ1YvRjBnT3IrcWljOEp0RE0gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpyTm1leGQycmp0bXJqKys2S3VPblFu\nV0pwSS9GQUNFL2N2ekNIUFpVTGM4Ci0tLSBLbUpnVlJuRmpJOVpuRTE0WmlEbEQz\nY2pQbmFCaThtN0ZCTUtGbFVhaDdBCpg+8OIwptyv+WHA/1w0qWXfZH7RIj6Ao1L7\nHQyjOyEi2Y4sRYmgNg9xFKS9bT0Y6jamyXmemCeSmhZg3wg154M=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bEZDOHQ0cGdTa2JTNkhM\nclgwZWducDgvcVp6dlFScTByVHBxdEJWVUM4CnBnYWcxMHdERWNuOW9YRGkyaTBM\nV2M0QnJuWFZ3VXV6V2xIM01LQ21RK28KLS0tIGVyamo5cElVMFYyclZsWEgraW15\nbUxEc0R0SGRoTS9VbTJsZytvbWdCZkEKgwfGoXJgmvmM/QW+7WN6ssGgZuzQLmCz\nCrQWifImc4k9YjUPLyLc+rV5lnUBKiqJZug4RLRCmUvYYlEZBxqWRw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2VjBkMnA4ZWloc2NUd3VL\nUHlyL0Q3c3Z4YkJuYTFiMXlwdHpUMW1HSzBBClBUdVQvaW5kRUE1eHpoY0ZMUWNC\na0s3Q3lVTHB2NGpFMk80anZQZzM5SFkKLS0tIFQ0c0QxbFdnTUFLbDdqc052R0tS\nYU8wbWwrWFJTNmdBZzBPdHN4VTMyZ0kKdsJa1r1GA/Ya93rbh/FkVEhK1QcfV+UF\nQMqjRfe9s2UIdRiMk+osPyV2Fr9L9ncIMw/5Eqdh1cJm04m7rAMN7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6TUxlNmN1SWxxbVA1bHdO\nL0RFS2hDbzJ5Mk1sNVZVYlVvZ0VFTVp4d0RVCkRjZ0lhOEhnMVM4cDBQMjJVYlll\nc25rdWo5VTdyY0w5Mnhxdm1ubXdnbDgKLS0tIEZSQ3Z6c0lzQTJDOFZSR0dTR3BH\nbkorOWNLZkFSY0hYY1hIODFqMGNpczQKgnl7vH2fRrW2sGCxAlTnf0/9aTGWbXGX\n6OtGMfAIv9vZWXi65CpVwPFfx5f8yoydWTLOc8Pf/e5N+ZOZP3U2JA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TmZmdk1qV0ZFYVorZXdy\nR0d0bUhkbGdqWTByM21kZForMUpMbTk2UG4wCjN0dURpRytnWW1peGRYL2Uwc29R\nSWF2ZENjWXlpQlpWamJEeE5SUlVrVVEKLS0tIEgvbjR6MFJVM0taMU9zV2orMmVB\nRVdrcG4xOEp5aFdpYlRtL050Q3ViR0kKZ8SzmPVVgDYshXyoFXiGvgvAnAKNI5qm\nQsV6tKCbuY+07yTSEtUo7B0htfS3k7YQqxC6dBEOODtM5C0yXcxzHA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:24:04Z",
+		"mac": "ENC[AES256_GCM,data:yWNfoYh1Yj6PctGH2sc0XHb32PkK7fH+pC7KdVBjqL6jOEeUmJeJUV1Krxw0lzHG/Z7iDsgVryVxT0CkZ9pmQsNe6HAVM33gd3snqhdSm9x690vAezWde3rqu/JelU01HTgrLnxWVdJcv3R1XM06BvJ64rzZPs0N4kjuketeIKk=,iv:oHOAzASEVZunFHUcXPTXFoXUw10hBeEwxYBRdpQI1cI=,tag:obZUAhewwsLVdrdHxLYg5Q==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/root-password/password/users/kurogeek
+++ b/vars/per-machine/neptune/root-password/password/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+200:c45:15f8:14e0:8b0f:6c2f:1c07:670
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/groups/admins
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/machines/neptune
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/machines/neptune
@@ -0,0 +1 @@
+../../../../../../sops/machines/neptune
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,51 @@
+{
+	"data": "ENC[AES256_GCM,data:jPntYWkoOvyVVDEc7ZIRBV3KSVArJu97PVHecv7wbLK+Ga1u/mlR8KUGnX+RWeRxufmqQJh1mv9jn9bGeQQ5fpMttol3UlLKqs4XrATZKUS84tjI39f7bPY3ki5BGYdSDMqrfF+qvMU3EYoJ/ETtlcyaGW9U+AOWoIDA4pm2u3xbLbISnxLMykxlJTgjFP5RI6Mu4QHu2g==,iv:MhA0arQ7u2pLxyaAT9j2F9U0DydVFNYr43kuTPEx3eg=,tag:CB9XX2saRlIdoRLurqG3FA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzUkFCNGpxVWJnRkc3RTRj\nZis5QUQwMWpqTHVsbWZjaXFwWUtmbVlpbzJzCmdlSlZET1RNc0tvLzRQQ1R5eWsr\nNWJLRnFWZUxudUx2Ni9CdXlGYUo4ZzgKLS0tIHBGa2xEMzBQa0lhVHRRRi92cDhO\nRjlqaXd1VEVBVzUyVm50MElzU1J0UkEKvIzOPqvwG7kFKIAfK3fGpYcgGFcOzA2F\nh5lhDonfKOiLDAAzkRsWMfVkhj+ZivqobOrvLM9HypWW+eICLnHe8g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age14x2fatvz802dyvnfukgkxfu30khuqml5ang9smm3pr9lc95eqpjs2ywxxf",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDT3h6cDhrRmdpc043OWM1\nem0vT1gvZ2tsWU8vWXZsdTQ1eEE0bHVJR1RrCkp3b001YkF4ME5STmtFSVE2bHVa\nV0hKR0xTOWl3VjlYeDN6Wlk5VTV4dzQKLS0tIE10dmFqZGtKNXBFQkJhVmp0UU05\nai9hd3hEOEhSUDFpWlp3WmdSTHhRckEKH/MslRT1FCvOVM45m+Kgd6YSyDc2wfy8\n4FqjbvcO0i/byNmHv+oowdOW2NZCqjCevZn9Emt9pR+mwFL2R7QZSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcjFweE0wSUZCUU9tNk0r\nZXNMMUN1M3V3aVk0L2NpSXM2aGJCOHFrUFdRCjF4N1NLM3hGYStERS9JTTFYUjlq\nVGlBWG5GWHZaS2xUM3NveVEwZldhbTgKLS0tIEw5MEFENlJWWGErczVMVXRNbUlY\nczEwdDd4VVhmK095Q3p0YldKZWxpd0UK9sG6KxULY0anGUaBHYQnr9Z043N3Pg0q\nbb5XjIW8QfmTSdBWp9kKBARpPBQYtkM9uWqpoliPHG6SaniJ25HlcQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFBaOVBqL0dH\nTFN4S1FDRUE5VHBpaXRRaTJCNXJteUJqRU5SeEJNSitzbkUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpDN01oQ0FVRENnd2JuRHV6SVRPMjVO\nR005bGdGL2JnWi9HRGM1T3hhOThRCi0tLSBtL25WNG5TazhOTStsMWUzOHlPVHFS\nYncvOGxVYWdkMm1peGhCYWYwZWhnCv+dn7/QJmmfgEVSdiEoUQINkQy/I3Jq+C9C\nGV7LLtmLXZ7JYjfprjL897edu5Lmug6t8ZSsJrL8PFKWcOrWLQE=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE4vRW9RSlF0\najRBNjF3NlFrdlVWRnFuMUIxNWhsR2V6dXNLdkMvUWc1QTQgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpxUXlVWWxHYkxmNWJGNWhBdVYwQU0w\nalp2WHMrMnZnaDhsSTZEc29IYS8wCi0tLSBaMzZjWXk1dUpvRWh1SmU3MXRsVEdR\nYjQ0cnFJY2poc1lEMXFqb2h1RytzCmLqG5vIGM0harFwfgErxnXstSL+9rHZiEng\nUmSqcF+i6DTfUdcktX5E5fjyP8An3X8LI2/F4QODbagR1qHqbGk=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGt6U3FBbVhH\nK1Q3NDdFM0M1SFVEMm44VmJEVVlZUE5Na2JjVXIvalZWeTAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpvdGZjSjZXYlNqMW91SU5VSmpPcFl4\nY0phL2RsRXluVEU3NmpFcmNDc0I4Ci0tLSBORGdxNkkvNVZOU3h1aTg5S2ZmdXFl\naGF3VzgrMmFTV1BFd0VXR042eWpVCuNqIlO5y26l9p+mtxpNRpFK6nd9nhdpy9vH\nQkgZSNGz6eFgxixVqwh9S/XQ211a4IVDHO0kUc92Asu2kg1/PA8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3SjU4UXBybkV0N3FrRVBn\nTkp6RUJWZzd2ekVBVTBvVG9keisrMUpKUDNnCjFuaFRFQXBXUjk0QW5yM2NPREIw\nWE9xSXI5bDlpMU03ZGMwNllicy8wSFkKLS0tIDltcExmMHBhV0M0SDFjUEZEUU5Q\nMFJDZGk3UWtWN3ZEM1RCaEdYZnFHczAKKW7P9qE2AZB0jDbGAtO73F02b+Ojcot+\ncpC6QL2GQP66FrbCGHr8ErlDPzN7MFGROa29jAadbQr2dRkkN/UgLw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNelVtdmpUUGx3N0dNS240\nR3RCQTB3dFVvbENkSUZrdUJZaUgvd1V3QWxRCmhsOUdWTkR1TlFCN1lERzF6d2hZ\naWVRNW5BZkxJVm56TWlVMlVLQUFSd1EKLS0tIEF0UUJaQ0FSMnpxT1l5SEhpd2pr\nRTdlR1dkQ21iUkxQeGJUeTkxZy9sdmsKZMvhehqtjNuN8/xC4z41RLAvWzZKh5cL\nljzlV3sOoXHGDsjJEMXmOQ+OmYSfu2rE+XZ26usbduFRLxf2COGvfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzeUdNVXNBdXhLc0RXcWR2\ndFB5U2NvWG4xYmJNVXM4MmFPT3FUbnFOUms4Ck1ROFNtY2hEaG9QYW5TdVVtSkU1\nZ3JWUGE0LzV0VUFGSEpoQlhRNzY5M28KLS0tIGRGYnliVkhFeHh5bjhLQk9qOUlQ\nWS9hbFBDZmZ3NXdadTZ2aWcwVzhsb0UK7pa4BoctlgyQkWhl/uOJ71UXNCoQpe5A\n9wt9DDYNFJheZ38S6CV18H2uKYl584HIv0NXC+UV19tv+2z0DIBkdg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1SDJGQnljRkE4YW1rVjlV\nbGgreHoxZGRxL3VwYUdQam9lbUJoMWd0Q1FzCnFRU001cWVzS0pQSHUrUG9UK1lj\neE5WMlFTb3Y0L1N6U0g4SVFURjNCSG8KLS0tIGd1TVBWOVRSNGplcFEvSHhkZUxo\nMEVlSmhKS1dTN1l4ZVFGUEtLd0JISjQKGjnU0tSCiyyE78Y0x+yvJ2kpiDkbqEpf\nOp0LJsuj4ByWhXdiJxP3PJTmCUZ2phKzChlfno6Yw3FaVopyUa6NFA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-17T10:24:10Z",
+		"mac": "ENC[AES256_GCM,data:v5OUY9rfqaw4bQRkVN+CfQ9qP9KsyYrSJuUdvzxUs8U8ELyZHORjSfR9RbYH+yQYbKtTjnEOo0bt0BJnKTe7LjIThki+jp9Ww9/JbVvHwVcX+yyGhQwK/tLk7037yZsYSzCVe2QdomLEpTe1rHGSbcLTR8VRUlsMsfzwQ8mV3XY=,iv:83zQMKsFd7+tu84+iIzr9zF9CphJ1o3lv+EF78zSsx4=,tag:jqPpQyTWdV0zSt5m4q3ewQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/users/kurogeek
+++ b/vars/per-machine/neptune/yggdrasil/yggdrasil-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-ip/value
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-ip/value
@@ -0,0 +1 @@
+200:a986:cb8a:770c:5538:77e2:3729:338b
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/groups/admins
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/groups/admins
@@ -0,0 +1 @@
+../../../../../../sops/groups/admins
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/machines/rigel
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/machines/rigel
@@ -0,0 +1 @@
+../../../../../../sops/machines/rigel
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/secret
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/secret
@@ -0,0 +1,47 @@
+{
+	"data": "ENC[AES256_GCM,data:ead+3Hwkd8YMgsVyWz1bhblb9/CpVko7nrGAvMWFTFsih1q3pZb53mR4Nvs9HyDEQ980Q1DTs98mGsUzTIQNCw/fUK/TmXrM1nqvFHFCkeU16iduObYbN52dc8UqZPswdbM/nOLc5Vq7ZTPxl/etRnWvTAQK93+p9UTSdrRzH7k0SbjQsIy+1I7qpK+fcZE3CQqWG1KPTA==,iv:qtyanHCxJzCbEgluV03OWtU1ALK/y21AQelpkqZYulE=,tag:p2ZylvZDzGYmuboJ9buksA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkdjNESTlhMzlwK2tIc0dK\nVUdaZFlUQVhDWGlhL2MyZ25idnRjRDhJZ1FBCmlKWmJSRW1vSE93b2k2RnNzalVD\nZzNmY3JHMEhGMVIzMDJWeU85VFFQSTAKLS0tIEpJazZiMzRNelpkUm52UDUyY3pN\nNVNWaWVmYkFzem9sNTd5b2ZDK040YXMKVq/i8WMYeGOKPrZPIvr++0NrKU5muCPM\nl4FQHsuOAfXL1Q/4Du6ZgMrGpD6kdGO2mH49CV9BwVX/8m/ylv5SCg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAybTJGV0RDcW94S3Flb2ZZ\nekFhUE5tRUVHWUYyaDhic1U4RW1hY3hQbWhRCmpPYno4bGgxa3JYV3BHSWt3d0Z1\nODJCNmo0UzZrcUgwQWFKT0JjMG9WYWMKLS0tIGZWZVdUcFZnWmcxTjZ1VkhYTVpQ\nSFlhMlJwSXM4aXlvUTF2amFLSXlrMG8KYdTUA8iL9BH1OwBOgWp1Tzoesa81tMuw\nSb/9DuGKD+7P5fEcwehucb0dpnYZc0/P0l2qn0S+PDrqQ3jALyzaog==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDZsVWNYeHFp\nL1VIalB6enJnRVR3RTBoeTZJVGdNRDlWUVE4bzlxV3preWsgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpoNU5Ya08zUEJWUWh6Q3Z3NUNEZkI5\nZXJGU1dvelJHazdodm1nU0dKOVZVCi0tLSBYbXJpY0M1bUFQamV3S0dhOG53cmhn\ndmp3Q0lYYmtGZVlGVFhncWExbStrCjaSH7BhNopyd+6U5X6lwNyZGwM5TtxBctmV\nJ82gnTmATsCagH1AfHerQ1NnzJn3gQHpS+v4//3UZVmgJtDEQBU=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG1RTFVIdEc0\nWmd4YW1mb3Q4ek81QTdSYUh4V1ZZSmVtRlRINnUrbkVYMEkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpXeG5wRUZQam45VVlmRGdlTmVwSFVO\nZlFsWEpJT296Q1U5VGNxSHVPR1A0Ci0tLSB2ZXZna0plTXczeHMzaWNWTVBqMmFK\nVldOZUk2UGJYcTE2OXc0azlBU1l3Cro0jLarO0b0UQBfvjWaKjhmG9axVcTz5PhQ\nW7DEvVE45WdxMZ9cynxwwAYNIjxhMXPCaNSVWcvTv4TYwv4ZnZM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpIYVdFOVFa\neFJCeUdjN1o5dmdBNmgwZ1BOSVNHYitMWWI3K3dMUGF5MkUgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwppOTNndzMveDFRaW1PVm1TQ1A0U3Bx\nc3NRbUEyZ29qU05hU2cvWUF1bHRRCi0tLSBTR09DYmhSVFBMQVhUakhZOFVkQ0t0\nUHlXZGxIMUJwN1hueVBtZGg4bVdVCjqzZ+0rxZP/B3EB11iiYQMX3soHZn5EKNhX\nETONmLswD26ziUeG+bHR2lG02/ajZhNGTYwDOm6OyGjkvcyr3qM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBic0VyZktseVk0Q3ljSjJh\nZ2M3b1NXTDl1Sy8xbTlaWXIveTZ5UGlodFNrCjQrbkZGajFvcUtwRDBFYU1QZXUy\nc1JZd1JCYVdiNGFwbUVVY3JHcWdVeUkKLS0tIHIvR0xDMnlIVTY1aGFCWjRpYUtH\nN1I4dy9jSVNtV2xXWkY5OGh0dmxFUncKcxBOhHpnnvl7X8QItZ3Ck5DvdVrKZ31y\n659j5Pc/H5bZB2h/P5L8hlBRcmgYz8uSb18J5yFNjJ/hDOPuwaW1Yw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4SU1wYk9uRTViaWtxa2lE\nN2JENXhoWmVkQVdsMVFXT3RlbkxFMGZzc0QwClNUZkMySUlxcjVTb29NcE1VdjZw\nUGxCWVRSQkYxVHZJRXNjeWlScXl2cjQKLS0tIHgxaVRIUHkzeXRTd09IUVdzTWV3\ndVFUeXNqakNNLytVZnlrcGQzcGYwL2sKjwiYwH8q6ze5iDukXJdAwVjCGJ8Jbf8J\nRK3nCvIgJB+xJeprTtE8nFdVf088ns9hNyf5BEhs5i+K3afkej9NSw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzbndkazdmSzhYZHJiUDlj\nZVRCbTRyNmpSVFNQQWdkUVBtVlBkeUgwMmxjCnVhZCtnd2xpSW80ZDhpa0piV0M4\nbEgxdE1BWkhRMDlRVjFuWUNJZDNiczAKLS0tIDhvaHNRZXM0c3FlMmdhMnVhVXJO\nYlpmVGdnQkVMYjBCNjY4c3Q2aXBubWsKlVe7iIIC4NDOlGyPU74gRPcLgh3d3vlA\nO5tqhf8JqydqQPwexvoh3SXtdPV3JqQsxmK+d5OEU8oS0yJXgagdxw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0YVgwT1pZTzJYM2ErZ3hh\neHVUY1VBaGdwdmpqZGlHalpwOWpZV1ZGS1gwCkt3aE05YitUSTd1dSsrYzcvb1pW\nckRmT3VMamExZjU4VUYzdHFuZHZPamMKLS0tIHB0d2ovaFQxTzNSam1ZRnZPUUk3\nRi9nTGRVd25OdW1TeTE0NFN5YWVxQVkKP2TkcafH8KmU+HIMYG4eZAu4IayzVSpR\n9HW7ziYNO9FQKgsr3eJQK4nF+DN2hez2CNFw+dmzfrbIRcChPcNvRg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-20T03:55:59Z",
+		"mac": "ENC[AES256_GCM,data:alQX2ECnWpjKTLJH7LFvEjBdcocg0s8rAp1DEoSFkl8qDvcsNaXDQWAoqQl3NHx0mSJMlY45oehqtEcntB7///scYPwfpxe2abTkJKuOs388SLosiX56f/D+IOS0FqS+0F0hcL3U9B8O6rcHHubBudHubLKuGrnYWAkGkRMHAnk=,iv:vgjDn+gHhCqxF11zGC7n43EQWNt1ZHsXBQBc3zskMac=,tag:mJmQASx7K+TEm6cpBcXz9Q==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
--- a/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/users/kurogeek
+++ b/vars/per-machine/rigel/yggdrasil/yggdrasil-secret/users/kurogeek
@@ -0,0 +1 @@
+../../../../../../sops/users/kurogeek
Author	SHA1	Message	Date
kurogeek	34dbffeb09	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/rigel/networking.nix	2025-10-20 15:21:30 +07:00
kurogeek	2c5074695d	Update vars via generator yggdrasil for machine rigel	2025-10-20 10:55:59 +07:00
kurogeek	b78e6456e5	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/neptune/configuration.nix	2025-10-17 17:24:55 +07:00
kurogeek	f4049829e5	Update vars via generator yggdrasil for machine neptune	2025-10-17 17:24:10 +07:00
kurogeek	bd320c9ccc	Update vars via generator root-password for machine neptune	2025-10-17 17:24:05 +07:00
kurogeek	b2da272668	Update vars via generator openssh for machine neptune	2025-10-17 17:23:57 +07:00
kurogeek	fa7f59b626	Add machine neptune to secrets	2025-10-17 17:23:57 +07:00
kurogeek	6b3f06d98e	Update secret neptune-age.key	2025-10-17 17:23:57 +07:00
kurogeek	8af3c9fa85	mob next [ci-skip] [ci skip] [skip ci] lastFile:inventories/default.nix	2025-10-17 17:10:31 +07:00
kurogeek	ddedaad4f3	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/neptune/configuration.nix	2025-10-17 17:01:36 +07:00
kurogeek	2eb52251cc	clanService yggdrasil	2025-10-17 16:58:43 +07:00
kurogeek	be25560858	WhiteHouse router configuration	2025-10-16 14:53:41 +07:00
kurogeek	e4bf326191	add Alex's laptop to networks	2025-10-10 15:38:28 +07:00
kurogeek	04fafa32d3	update kurogeek thinkpad zerotier id	2025-10-09 16:42:23 +07:00
kurogeek	ed4e045ffc	rm unused args	2025-09-28 13:30:10 +07:00
kurogeek	fd6edd83c2	machines are accessed by zerotier ip	2025-09-28 13:21:46 +07:00
kurogeek	65faa70fa3	no nextcloud on vega	2025-09-28 12:45:29 +07:00
kurogeek	377b63437c	no write permission on GLOM samba	2025-09-26 20:26:02 +07:00
kurogeek	43e8252459	samba for vega	2025-09-26 16:46:00 +07:00
kurogeek	800500f57e	vega on new device	2025-09-26 12:04:02 +07:00
				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE09U7Tuvn3/icqFhjKuhp4hG+V6E6IFKhX1W2hVvyVj`