diff --git a/vars/per-machine/renoir/garage/admin_token/machines/renoir b/vars/per-machine/renoir/garage/admin_token/machines/renoir
new file mode 120000
index 0000000..d755df7
--- /dev/null
+++ b/vars/per-machine/renoir/garage/admin_token/machines/renoir
@@ -0,0 +1 @@
+../../../../../../sops/machines/renoir
\ No newline at end of file
diff --git a/vars/per-machine/renoir/garage/admin_token/secret b/vars/per-machine/renoir/garage/admin_token/secret
new file mode 100644
index 0000000..cd69524
--- /dev/null
+++ b/vars/per-machine/renoir/garage/admin_token/secret
@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data:HskteFsfzxQtBZGi7g3aUdimgOrHaOr6/S81cbyPdFyBJEh3FgUIK2/isszp,iv:LrV4/h8h0zq+KJTZGoW1Z5TrZls+ZGMVcuqKwCeSCzA=,tag:2yf7GnP5Xsfl8jmIx3S7Lg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1gmnfmze2teqtaquxczjahvfltzzlrgcza5w4cej64tw0qzke5ftqh8c9ry",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLb0lLNE44eThmTXkrREZv\ncjFNbUVQMHA5V092Y3djUWFGbmhpSUt6U0NjCktVMU8yejZxcUtabm1pWXd4Ly9Q\nOExBRnRacjN3QmlRUUowTzBiTXhqaGcKLS0tIG9OeWtHMWxTVVMzVFBmMjNpcnBO\nVUxrRGlscG9mMTc3cHB1c2lmelhMSGsKS1Yp3FmzNqgaAqXHs9qFvvf6IsQMvhqy\nkfxzzQHokHAGjA4pi/tADSvoBW10xvJ9uOvB+aXZJH9mRmW9Y6Ysyg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NDFab1lBQjgrYW5aRnpE\nUUZweWwyMFV3VmI0d2s0MTZ4SEkrbk4vTEFVCm5oOXF4aDJBNzMzaFFzQnUvdGIz\naFNuZWxKdjBZdnRlZjRWUlpraTVpbXMKLS0tIDNCK2xyKzVvWHBwMGE1SFRYWFVE\nc0ZCWGM0SmFGT1dYcDFxc08vTkhOb28KK+EiyyqI4GfDT0y+inD3eIgxHySrAEUH\nu9GfhQHV4Z4visdzR/z4S96zpDg4MNnJv1SKHAE7EDlfZTCNl8lyow==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd2d7qpxlw9lj9l573f34vdkrazdq6yk4mvnlug46m979dl6p2p5xlzr0wt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHU2Nm1JdyBBcU9SUFJv\ncEFVYkJRVCtDU2dEUTJPUlFSbVpya2VyWjM3ZERldU01V2lHbwozNU5KOFR5QWl4\nQ2tQQS9HdlBNRHBOL0xZZUdZSmNEUFVPYTQwckRKNVU4Ci0tLSBoSlduSHNVb3Fh\nUnQvdVZGYTd5dkRvNW81MnhrRkd3aTFQeFdoZjhBMFRZCmp67Idar6MMD3HU5/W5\nLx1KRyYmA5ePy5zakSWsxcgp6KeA05UMHh00ZRgCizB6/cTrc1fOvtW22mHJLeNt\nUTM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qwnawsag6k3lq7aklc92uq72vqx3r68ylg0x8fphn0qm8d7e00eq5ynu3wk",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDJlWGZKZyBBcVk5Nlda\nQ1FvSVZpZGRXYWRBVHlBdzkrTlRYSHNqTXozTmIrWWtteEdXTwpHR1Y1M1JYd2RP\nODlxRmVpVjBXb0F3aERBS05KNUJCYld4YWZmeTRJTU1vCi0tLSBvblMwOHJJWHFy\na0FPcVk2WkZpSC83L0ttdUxiM3ZMQUZVM0V0UC9rNnlnCjHQO7KGNqZVPON7Mjnr\nBAOLZfvJJQZ4BsIJNzHYwlJJ0fByBWde3kNQaEm50JgihJ2Bt87Lcyanz8Vok2Sa\n9gc=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-22T19:28:29Z",
+		"mac": "ENC[AES256_GCM,data:sOqgKo833HCi6u+EKSVSz4T/Tnj1D8yKIq+o4kwFINQZ+PaF/oC4NemSYvM8b00i+XDiKOhwhHx9d1vNVNCeA/rMQDiWtIDEbq4AsXIZ6Zr7bkASPWmQkbsASoAxXIxJzsH+QG64G65hy21/QO5Od6bHmhetFzFbYYWNw8Fk6iM=,iv:0HNTN9P44zHLdlVGPsqtwWc4fnAEBvPbL8VLRCqwV44=,tag:pxSsM21AZv/G/4s3PpnMIw==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/per-machine/renoir/garage/admin_token/users/rpqt b/vars/per-machine/renoir/garage/admin_token/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/renoir/garage/admin_token/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file
diff --git a/vars/per-machine/renoir/garage/metrics_token/machines/renoir b/vars/per-machine/renoir/garage/metrics_token/machines/renoir
new file mode 120000
index 0000000..d755df7
--- /dev/null
+++ b/vars/per-machine/renoir/garage/metrics_token/machines/renoir
@@ -0,0 +1 @@
+../../../../../../sops/machines/renoir
\ No newline at end of file
diff --git a/vars/per-machine/renoir/garage/metrics_token/secret b/vars/per-machine/renoir/garage/metrics_token/secret
new file mode 100644
index 0000000..1916d3e
--- /dev/null
+++ b/vars/per-machine/renoir/garage/metrics_token/secret
@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data:BRaL6rqfcgh6G4OLNb1v+R+/7v35TQkd8+s4dKzn5RG2mfm3kzE3JQd8eQW1,iv:9gRThpi6PTCaQkmsFO1Ypfz/jhiGEypSSz92NM4pR+k=,tag:VaW6z3Zb/oB22qdmjut2gQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1gmnfmze2teqtaquxczjahvfltzzlrgcza5w4cej64tw0qzke5ftqh8c9ry",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYK2llUGpCNEhmVExsRXhV\nbkQrZTI4QmRESnp1ZGo2VDVrdnlramVpZTN3CldpNmFVbDJFWnJ3VzBuZTRaTTdy\nTkdCNXRzZndQT3EyTkI4YkM1K2JnZkEKLS0tIDRjU05pRG84d1drTG5jYTFFWjIy\nWGlaeGQ4ZGVoT1pGb0hmS2UzSWF6d3cKwTwKngDwZYhsDOU8f8pOITWLkKpg2khE\nFHblKsp7oaC/Gsajq9hyiPyCaShCJJO0TKm2k3OqUwGO+1zyNJYPkw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5eWRtdEdOZmN2TlFucG5W\nRng3LzlPVDFpM0x3QVN3b2x1MlBTeFZGMWpNCjBQTlpHdWNKK0Rkb1J6ZCtWdlJo\ndVU2ZG1zcTUwU0x4Qlp4KzZOT2lPYkEKLS0tIDQrOXEvK0Y3SFNud2FDL0NmS0pT\nZUYvQ0tINE4vWXlPZEZxNy9VTjc2OGcKHDtKjPrTqm4jTOVtDRFP1KYpdgCu35hM\n681V80J8+GeS4DuHMMzN1oCTrmj+bDNMUDuEj/Zr6XyEuVAsMB9v+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd2d7qpxlw9lj9l573f34vdkrazdq6yk4mvnlug46m979dl6p2p5xlzr0wt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHU2Nm1JdyBBcXhEMlpr\nVnhQT1cvaHk1RFFTRGRQVklia1pDSUwrWkM0Z0xWYWZXSXdjNgpraGFOcHE1eVVy\nL0x3VHVGQmN4UzAxRzJObGorakJ5VjA3ZXZoMmNlT013Ci0tLSBsY0lsWWpYZGFt\nN3ZQU0VZUERzeU1xQk8xWnViNStEaGhkeDRMRnk2bHUwCuAPbIaKsuKBpy4UeGgA\nef+zRWhrJYb4z4zLDT4DOCxUSLu9z5obYodeS+ONNVpDrFFqKhbCCUjlIv08dZ2n\njt0=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qwnawsag6k3lq7aklc92uq72vqx3r68ylg0x8fphn0qm8d7e00eq5ynu3wk",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDJlWGZKZyBBdDFGVndn\nNC9EVnRUdGc2RlJDenE2TCs4elFvNytENkVtV0crVXBTcVZsVApHTFlzWWF2YUtw\nMVZDTUJHdmpEQUVpSDdFNXdFUTNKaDI3K3pBYUtpSnNFCi0tLSBzMUFjSkxpUFA1\nU0xFN0hQdGx1aElTTmlEN0RJL3VEZmpuRHA4WjJsM0dnCgTnKkpSEIVgtmZNTsne\nUvQhd2AjNVHaiFKMVEOI73gTxuOctkCKZbAyYd+sliChRyVPIKaFZllXp2Y30z9a\nBIw=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-03-22T19:28:30Z",
+		"mac": "ENC[AES256_GCM,data:CWGW/P2zl2fIuRZ2uNEMygY/LiivJKbhDj8y0LLx/PEaKx5zO7/GSA5vZ2n8Ouj5HNSGRtef6Un1r8zuOZvkSSogZ0ED0yYOcrAtza43ilft6K2BT5vKfhgaBmPn0GDWK1AlUcONMKNW4OQyuMD8Aj3rba/BHiwFMgEv9fhMwGM=,iv:Pk3FLK5glyX/K1Eyn5RD0CkHSBiBbRjMMBcm8X0pZ40=,tag:o3fAltzPkv8niYPmVCE/PQ==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/per-machine/renoir/garage/metrics_token/users/rpqt b/vars/per-machine/renoir/garage/metrics_token/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/renoir/garage/metrics_token/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file