diff --git a/vars/per-machine/renoir/grafana-secret/key/machines/renoir b/vars/per-machine/renoir/grafana-secret/key/machines/renoir
new file mode 120000
index 0000000..d755df7
--- /dev/null
+++ b/vars/per-machine/renoir/grafana-secret/key/machines/renoir
@@ -0,0 +1 @@
+../../../../../../sops/machines/renoir
\ No newline at end of file
diff --git a/vars/per-machine/renoir/grafana-secret/key/secret b/vars/per-machine/renoir/grafana-secret/key/secret
new file mode 100644
index 0000000..d18652c
--- /dev/null
+++ b/vars/per-machine/renoir/grafana-secret/key/secret
@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data:3U/qK3O8lVXq03BVJ1eeqAv60ypSf9eRoA6kYufh+XagbGxhZQMFTpEy5rEZ3NwtqFGrq119FlddpJmFtkxHyfI=,iv:lju6xTX9VFF5dNmcR6l3f9ulfg3BEfsmxqrlxKrErC4=,tag:5CAfisXVeIyr3qhoYqYlgQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1gmnfmze2teqtaquxczjahvfltzzlrgcza5w4cej64tw0qzke5ftqh8c9ry",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT21PQVhqNGk3UnVIVzlz\nTlI2SzFLQVRteCtiTzE4aTQ5YWdYWk55bFJrCk5zeC9jVSs2a1B6N0hkemxFL1Vr\nZVllRE9ETGlaeU5iK3NGK2RKU1FjT2cKLS0tIG8zSDlrU0dBUWRibHl2U0dkcTNp\nOFJkejJmVmVMVXg0N2VFREtYYUk0cTQKOFfGF0xd1tkFvB/7er5GsBjnXnnCBdC1\nVY+piOkE8kodSqPjq15aFdMdBV+HEAuYVtiGywPyPNuSVO7W/oMAhA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJdkY1TVFFOVR3cEhrcUFF\nNVBkV0tkYW5NSU5vSzVEUTdsMjJxS1NwaEJBCnIwSmVVbGlCZmRmRVlVZW5ScFc5\nMm9sbFAvbU5VTlBTdSttYkgzVHFQOUEKLS0tIFlBWit4Rzl3QkJzWkt6MzZSYU9O\naUZKZkNLT05iVkhOcERscys0alpnUXMKCSzzZMKkuoqGKI+87a9jFdqO3oKFaIqM\ncoLBrdTzFjUXlMSiegseYJCA77DRONWd9n+iPSQGm0Wy0gXThLBXfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd2d7qpxlw9lj9l573f34vdkrazdq6yk4mvnlug46m979dl6p2p5xlzr0wt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHU2Nm1JdyBBdUJ0OEJw\nUjl1YnE5K1pneE10RkxlbDkzS3l6a1RRMnlDYnJ3b25TSW5MeQpVTGdOTW5FdG80\nR1BHVG1qK2tyYVJheVRFMWNOSVR5QUEvOHA1OXRLTlVjCi0tLSAzM0w1eVZZcUZ4\nbHBSNlg1S1N0dm5CWmwzVG5NZHR4WThaRVJrS2t3OFo0ClC/9CLIDwFCuiFVOQDd\nBeCvjwFHZq5pmB7iroPDKGsxpwwMGUsWsBipg3sEPIpOwP0MN92PNepB7C7Wj2a+\nkX8=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qwnawsag6k3lq7aklc92uq72vqx3r68ylg0x8fphn0qm8d7e00eq5ynu3wk",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDJlWGZKZyBBaGliRHhC\nYUhpeWVTV2NOZCtVeUdURGEzUytEWjR1OWllVGxwaHFvREQvYQo3NUQvSGE5QkI4\nNnZLL0pvUDBxWTR2ejlJQ3YzaUVLZkM0NThFQlJ3dFpjCi0tLSBWR1dkbHN6TmVE\nc0UralZRWjd0NVRKR2MxMXBHM3RwYzR3TXVLTlo5V0RFCqe0iYleR9QhPV71VYBM\nrdrazkTCb2wFwFEIM3wr/NUyZeYnx0V5XF1wFvEoyv2k8eN2cJl+CIe6oznQpp/3\nd0A=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-30T18:18:55Z",
+		"mac": "ENC[AES256_GCM,data:utbiDgNY5y/1VM8QYejkMqcZvp/EmWpi9G9BnxhOXvFc5HntPIcRGyn8SUcSxSy2TiLaZMBEp9eR0KwZNWE4enFEKnOI1fjtng7tkid24dNB5pM/MxVW9q+s0Tn5is10kSclzdAuSlrBrk1BluPwCRfUyWhV8tNRriW1EmEsOmA=,iv:7eJnbb1fS6ACevw0MyBBo780izpRPORyVzyTrtAmWAI=,tag:6ID486JosoK20gE680VX6w==,type:str]",
+		"version": "3.12.2"
+	}
+}
diff --git a/vars/per-machine/renoir/grafana-secret/key/users/rpqt b/vars/per-machine/renoir/grafana-secret/key/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/renoir/grafana-secret/key/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file