devices.test: init

.sops.yaml

@@ -10,6 +10,7 @@ keys: # cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
   - &srv2-node0 age1l4stuz0vr7gs7pqwjrmezam44702jp2vmqaqyxw0l0r42kf9updq4dfhrw
   - &srv2-node1 age1hnarptkze0ujpp05dqr8uma04cxg9zqcx68qgpks5uf5l6rpk5gqhh8wxg
   - &srv3 age1n4lhfwv7g0vhx54exmwx9yv2z04m3h2lunzpa5zdzgtcvjjuf5nqc36g8a
+  - &test age1vgqvdqqe3mn0gvh0hydvu9c5f9yn5vek08cagyvwjhyta6utpvuq00g9c2
 creation_rules:
   - path_regex: devices/pc/.*$
     key_groups: [{ age: [ *chn, *pc ] }]
@@ -35,10 +36,12 @@ creation_rules:
     key_groups: [{ age: [ *chn, *srv2-node1 ] }]
   - path_regex: devices/srv3/.*$
     key_groups: [{ age: [ *chn, *srv3 ] }]
+  - path_regex: devices/test/.*$
+    key_groups: [{ age: [ *chn, *test ] }]
   - path_regex: devices/cross/secrets/default.yaml$
     key_groups:
     - age: [ *chn, *pc, *vps6, *nas, *one, *srv1-node0, *srv1-node1, *srv1-node2, *srv2-node0, *srv2-node1,
-        *srv3 ]
+      *srv3, *test ]
   - path_regex: devices/cross/secrets/chn.yaml$
     key_groups:
     - age: [ *chn, *pc, *one, *nas ]

devices/cross/secrets/default.yaml

@@ -44,101 +44,110 @@ sops:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtZmU0akxEZkdwK2ZWZHlq
-            bnlYTXpFamtFa3Z6bHJTbVBJemExU1RqNUU4CmM0U1dPNm9ucHA4aHNoVDNaZUVF
-            ZFFPNUtQRUp0U1U1VFlaQy9ZRjZoM2sKLS0tIG5KdEx2VnhienlTQVVkeEY2djht
-            eUpYUm5VcVBick5QV3lXZjdRbWFtdUUK9J/gU3VxD6T7sre/Hkz/U9E563j/Sbk9
-            QubuNrbCBCAASxcqb2PkozHSuOB8eN+clmr2gZdcaNGQR1DgtJL64w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVY2YwTDdrd2R0cWNEMSs0
+            V2lJZFE2N0VGZmhpOGVwa0JqZkZPNjhOWERFCndpT3N2WGU0MlBUdFRNZFozN1Qy
+            TUxhQ1RPSEdvTEhaWHFsWmx5Z1pHeWsKLS0tIDRlSUFrS0tnWmRFUXhUc0F4MlhJ
+            ZEhMeFhPbC9JUEpjS3V4dFJuRW5FYTAKP5Fg427hKD6Jmp9b7KaD2SVg0ZirYlYi
+            v/VskZmPXVsE+sUM7QWjXDrw7Tzr704aMYNCPuOSjCSDTOmDl+E8BA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXbDlkd2hQc2I0NWVXN0NL
-            eTFzTDBlU2ZBL2M2c1lDZ1FaOFlGY2s4T1EwCjZpbUNWMjgyMGt1NFBIVldLQTl1
-            MDB0anpxblBMMDE2TnZsWisyR3lJT1kKLS0tIHhDY0tRcVNlT1d1aVgzMitRYjd2
-            RHhxSFVBR1lCa0xacGhWQjhnVjJENFkK7W2Pbu5sZ3TDBvgPgBq7PbYqmRtl64PF
-            JOyUDEzM7Bx1BT7nfJLfBtyrvoe71s4bb2Bm6F0kp882Ikq4vEb3og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYXZ0dTZ5M1licDFzYVFz
+            cGY2Q0JGdEVSTVVqL1Fxc1lnOGlXdjBpYlN3CkhvbG8vS2FVTHJXOEUwcVJ3M1Uz
+            V3VXZGIrRTI2TGR0NnJBQkpPdy9nOW8KLS0tIE9IVlR4VGhmbWZFSzhWK0VvR21J
+            WC9rVzBHWC9aZnhzWng3UHlibDRwa3MKaZV+lJQ0EUybv8OzdJPjBg5ivFsRL3C7
+            HYK0VzuAe0dq13rNC0suQWU3CXgblvJGC6Z601QpwYouuZ35LcXiUw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVk1VcHNXYzIyd1NSWHZk
-            SHhSdFhROHlOY21WMDUzcDdtWThrZVZsK2c0CkxFd053YVUvbSttNno4b0JCVWVU
-            UCtwYTVYWEFRdjJsOGZxNWhiaEFMeDgKLS0tIEt6R3MyT2RPYWUweGN3MGdndGQw
-            eStNZ3lIT2UrK2FvVFU2YTI4eHlLNTAKZgoZUxnoS3Nd9lC1Xpr0nVzXr3KF+Gy8
-            RJyvXtbZDZq5PNtRKikvXMmu1aJnWMdsFrtD0kcO7Zt0zXFSBckWyA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydisyN1JrMTFHRi9JdHZF
+            TDluR0MxOGdiNmc2bGMxajluc0wyN0xrUjE4CjJMMERiRGFDbTdVaHlxcGZxZVpZ
+            UUxBbDAwMFVkZFZ1MENXd0w2RDF3VTQKLS0tIEpOQmRRTUhxRW5STzZOQkg2YjdD
+            UE1tMDJiNjkwK1ptcW1HaUdRRlJHQjgKIe1znKWjFJWVYigN4ZdoGKWAbIGa8TEj
+            s3ZwEV6x53U3FngaXwzJE3vLl/iqM4/8VNPW/XgiJqrrFGGyx+FSzQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvYTd3akZjQm1USzhpdllh
-            TEZldDZxSm9CVmxza0gybTVWNU1DMk9SVGtNClZiY0RMUENDSkd1YndheWgzUUtP
-            WVJGN0RIRmdKVTA4ZVVGSDhKYkxZVUUKLS0tIHRwVFBrWThIMTJWRDY1R2wrNDlI
-            R3Y2eWhqNlVrUE51Y3NNaTBHTWVxM1UKKRttJ8YN3IYAFjf28C0iG7kdocpxehwo
-            RoKkwjoP5QPYyQGSRRJQtGyRi/fpBct+FWYNytnABkiC5MPlc2f9tw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDOVdETW1STWRib2pwQTNX
+            OGRDVG83c25FRGxPbkxEd3UrKzQ3MWxvMmxvClFMbmQ3a1c1ekZ1NFR1dUIwSHV5
+            bEJiT3dMckZocGNxMHgzN0hPZE5PeU0KLS0tIFZxUWF0eGdaem8xT1RlOC84c0xu
+            TGNnY0VaWjhPeGtBOTNvdWMzc1pGaFkK2clrEZ5okljtK1osBpNPkFmk4UQxTYb/
+            Zk5KPXzlMOoR0eTZkyETy0tgE9E470yBZxbUU/7F9cHEo1/ndaB/9w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1m7nrxfw22wvp7pj8y9pdl745w95x89uu8dzl9ppsaazweqf2lqms5yshsp
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYcFBJcWFMNlU3NEhDSTFn
-            ZnZ0NUtUSkpXdk5BWjV2WWhqcTR0aTZQWmpNCkY5Y2p4elZpbHJQcXU4c05sQ1Rz
-            YlV5MWsvZy84L2hvbGZldXQxZzY5U3cKLS0tIGo3V3RvS2o3SnErQlpxVnl1dVV6
-            RmVTeisyOURzaEpLWllhQ05iTTlFMGcKdm+CWsmJcnmaftsc2ael7FI7RMTA4VcT
-            cIP8UoMusrN4SY4qHROKEGNubJ52y1MeJm1SWV8Ck5t/G4V6S7Ggnw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSbGZVYnMyMit6c0xwdEM4
+            V2JhWExCMURQTy9KTGpQVkxQOEJCcWRxdjFZCjFSZlV5R1daNzZ0MUMxdVZlczJq
+            dFNKbFpnc202aFFSdnY5RFNaU2JlcGsKLS0tIEFrT3piZDkzT2NwT3UrSUJTNzJr
+            U0lKa2tuejh0dStyVDhrajZ4RGhoVXMKTGCBgNgokTu+XIr1RrVk0HVwygHMIqzN
+            p0T4/6pldge6uxEhN6NlktwnrhYUEHGR/uMLeRpJ0cfLitWWa+hmOQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1nzetyehldf3gl6pr6mu5d2cv387p8wjqn6wfpll7a3sl8us6n38s0ds633
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZHJTSXd5bGdiUFF2OEFV
-            QmNLTVk0WDAydWFRZEhnTGZma0dRZ2VsaGlFClVkMGRtcm5sYnUzNEZNZnR4Tkcy
-            RFZBbkwzWUtRMnhoWGNkN1ZqSmpTTFEKLS0tIEU4L1dMazVCeFM3YnJLNXFJV1BE
-            dTVqV29EN011OEx5c0ZqYnFDU2RzMHMKcnsM7verWr7xkwZVeuBUN1K7sGfPzoqD
-            y25ak/NRNgotQZWmCvvztH56kZt9LxGZKVhBnI8+lN4yhoZ82RilDw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBOUhXRXRyTEU0R2FZT29p
+            Vm15NDYwZTkwLzlvcUVZVDcyczgrOVNqZHpJCmZXQllrMXlGM2h3cVBsL0xwUlZl
+            bG5vNUdzMkJIaXE1a2pmY2g0T1NWQXcKLS0tIFlSKzBza1BTYXkxb2xxTVNUUXlU
+            WVB5SDB5eXAwazhMUThBZEpvOXFLdncK11euZcv4rVDk88RngrcEnB4iqOu+9wnq
+            9LgYY+Uiy1GHemtk1eNS6I/umsxM1V1fmAaGxOWKuwypMRSxYY7RXg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wj33xt8nj7rhnsenepsf6k3lmq5vk4wn84jwr55qy9cwu05xn5cspg3h7t
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpS0FVSnk2M2x3a2lqaVQv
-            SGUyQStvOXQ5T2JteXJpUUxobEZyYTlZTFJVCnZobUVtV09XQnpDVzgrV2lUc2xh
-            SVArQmtYQXJBelhsQ1lYMW5SVzA0YmsKLS0tIEVWTmNscW9oSTZXeFR5aVphdUE0
-            TTZVNXd3di95MkxkTWVSRXpTbE82SHMKGQQ5TK9cUlcRTZxHjmT8pb4W310YHjMh
-            ML4cL+kkJZ/irPvvPOKFeISTEZfuhHvLhy7wXBNXZ6vyaKDEWT0iYw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZE1seklBN0gxUTdYbDdN
+            bzBycTBydDJYNjNyZHZ6clJzamJ0MktzNzBjCk5WODFkeEE4c3JqK1IxQzdCNXJi
+            TjVTcHFOc0FtRWJzMkw2NW9zUGV0ZWcKLS0tIFRSR1ZzVzlQRHZjQjM2c2JUaUdU
+            UU9QM3VKa2JzWUcwVEZmcldhMFZPTmsKuNZ1fQxumQ8slwHRSpojhxDO4cPNun/+
+            y+4KNOnnXxF644RywBYXo0BQ07ZRJiDw7RN6wnz8RYCYkXUkg+r1NA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age16e7ykphshal6qhwfvat698hl48s8yr0jvzh27ecdyfh5uk7t9u6s753jgy
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQK1hPeFhOOVlJczhVbzZS
-            ZG1aUmxQNGZTb1ZLZU1OMHhsWHJmbHpBVmlvCkhuMUJhKzFJY3JmSThNc25HNjB6
-            aDJXOHA1aHVrZ3JMOENMOWFwT2dWRVUKLS0tIFpoWDFiVk4vS0xtWWJxOXczaGN2
-            RitTQVdyQ21JN2ZINHZGVXZrNE04OXMKmA1MlhYLUr3nyBMQ9pB+Bv0OvDIlzU2r
-            QlFIhydoJS6KZE0sgKNGA77vv91+EN5OHP6xu80yC4x43F3hDdfGPQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIL1VQYnBsVmVXcWwvTENr
+            YisySFNmR1VuMXN2K2tvdHozcGk4cnQ5YW0wCmhvcWFrazdFdnJDQlVndGlaZ0tG
+            cnNUNk1leGFhNWFWTVJuT29jUU5aTUkKLS0tIFFGTk1DR25BK2hZWjhQOUZXT3Y1
+            T0xrdzdpV0UrVmFIRGJmSjVDMThDYUEK7ObFJYS8AU6o0tr0nZf+uGmDzpMPE2pN
+            tRJD7zrMQkKRucfSN7xmYkee6G6LTkJeGrkEXsy7L1QThDiDp4WKhQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1l4stuz0vr7gs7pqwjrmezam44702jp2vmqaqyxw0l0r42kf9updq4dfhrw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1eDRhTUtBcG9CVHVDMTli
-            QmJoZ0N5N0k0UXpUSzhPOW1nQjVMdFdXUGlFCkpHaERDb2NjYmhHVUMvdndqbXow
-            djNrSGFqREFRMTVXc3k3NzNwaVg5SXcKLS0tIFZKS3FzRnBCbU1hR0FxV0NMQWJO
-            Wlo4blFrSFN5dGQrMG5wSDVWamw2ZUkKZ6l+NsISChK0B0T/lLT+k0Uie+cGdUph
-            IMrLnVGxft5r7TYRioGH7iSnSBdll3Mas1G1Sj2C2mfn6An8Fwip2A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxbncrWWtrRk5WZ2JRS2pZ
+            TWU0dkxpbmNBV2pwRjFKcU1vNkE1ZGVlbFdRCkZCTTREVnAyekxYYWROb0JNKzlj
+            cE1hTmVHUloyRkxOenJnS2Z1Zy83QW8KLS0tIHJoZkdBU09jOWoyMVlKSDdaV1Zn
+            c3h4NC9jN29kVUJSZHZyQTZqQU85K1EKHEtK2tC1Li8NmpokUtMh60mZFXf21XnN
+            XxKZziobr84wERCwMzrMJ0EJE0nn/fBxj3ISexX0yEC+UHJqiFdlfw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1hnarptkze0ujpp05dqr8uma04cxg9zqcx68qgpks5uf5l6rpk5gqhh8wxg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydUsrS01YN2x5RmxUOWxv
-            cDZqdUJISjVrV0RPUi91aEMvK0E2MXYrRm1zCkxlNVArUkNuU21WQzlkc2pTellS
-            VTRxeVNiSGhUc3lrdmVtVDFYbkJWa3MKLS0tIFlqRis5VmNmVUNuczQ0UjFJL09Y
-            VEFuc2VIWnZtUjBqbzRkUDJVTjZYVEUKYebLOtuHKxC8L6T6tVga+e6jUDWYbRpM
-            aCaXOxWDYLhfHsWe+1UvDNX+6tN8fsNdkdP2WKZnOaR6QPVybdkvZA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbHRETnBmVE5NVlp0NlZp
+            WW9HeWJxM1FydkttNHdLZkRnYmxEL3RtN1d3CnVUeGpJUU9vb2Q3eThpWFl2a2Fx
+            aDlRdnA3cCtTQlgyOVBRaVdvNlVlUjQKLS0tIHZsOGRDMVl5bFh5eTZDSWFoTzhB
+            Njd3NktlZ1h3SmtTVEU1OXhDOGNSZWcKVjNJ3W4xLYiREudr+kqA2xd/sS+8WF76
+            AalhiHOtNEGeyXbIh8GKhBbz+fvoALU8tZyedvilNry3D6d2Ecfbyg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1n4lhfwv7g0vhx54exmwx9yv2z04m3h2lunzpa5zdzgtcvjjuf5nqc36g8a
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUnVodFkyZnk4R1NOUFpn
-            YThOcy9QdFZnRDFFb20yMlNrWTlFek0yekFzCjFRL1RWQ3VTWWlEMHE5ZEk5dGds
-            SUI3alg3VkJDRHVTTkpmUXVuQldkU1UKLS0tIFJaY2t1TTBHV1ltNmxBY3czb2ly
-            ZHdZeVFpcFdHKy91ZFd5SVRJTWR4ejgKEX9OO+mtQUTkoP4YQgYouLXvLzNlcHge
-            RTRJ4bkddB8bJaRPo+EJdgi+XzzvRFlEqAA5drUclHAtP/MgEOuKpw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1VHJ4aHdSYmpEcnBES29D
+            bmtudVVKQXVMZzBaTW5QWngwdEFtbTllTFJ3CmkxK0JUUEF4enoxWVRRVURxR0k3
+            RVZ6OUxUODRSVGNmdk9heE5IY2tqbW8KLS0tIDU2cjZqVEYwWnRiTHNQM0ZSWkc2
+            ckt2cHRMZTI1ckM0bUM4em90YWRDbVEK1NiJMOJF1GD9N0BpewD/Cw8tV4Lizhmd
+            03EYgUycbYAzC8GNtruz8FkkIqpWzwtsh0v10EUkclZoLZyz9qVWcA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1vgqvdqqe3mn0gvh0hydvu9c5f9yn5vek08cagyvwjhyta6utpvuq00g9c2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvNHVFc2R3RkpCMzNlTEk5
+            bVlDVFc2MlpNeGVra01EZDhiTk5PbGJSL213CkRoelRxRHNhYVd4bGt5Yzg5Z3E4
+            Qnh4ZlhZU3NhMHA3Ymc3TitIUzFqWlUKLS0tIFhzU3c4VExxM1FNRXE3d2pYdFhr
+            NFZmRFpJNDMzNnVSU09DQzhZbFVrdjQKjG23RwmfafAeSyfU0R3JQI22CWDvLA8K
+            sHa9ok9o0A3b3hc48HkhMqOL5n3WvCtX3Ub+Pvt9hRSDsVdShZriyA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-06T13:35:31Z"
     mac: ENC[AES256_GCM,data:BKvC45okHmg4k+YZxqjuI1E5Wp/mntzeq/JJeVNG1cA0IfchAi+59IXJgBKPxbjHc4dAxIGozmsDaPPC76hxhdQ+W8DhMGM7kRstpA8iSiljn/SuwzRMizgMZHPXxY3LWg2QcOSScLI7p8HeAmKYby4Ixb+X4Z6jzASFJnhgQss=,iv:VYNN0sYNMbITS4p+wytRKOBN/gLGyDQNo5rnZH9QwhA=,tag:7QtkgYO6/LpocqLL35RoYw==,type:str]

devices/test/default.nix

@@ -0,0 +1,28 @@
+inputs:
+{
+  config =
+  {
+    nixos =
+    {
+      system =
+      {
+        fileSystems =
+        {
+          mount =
+          {
+            vfat."/dev/disk/by-partlabel/test-boot" = "/boot";
+            btrfs."/dev/disk/by-partlabel/test-root1" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
+          };
+          rollingRootfs = {};
+        };
+        nixpkgs.march = "haswell";
+        networking = {};
+      };
+      hardware.cpus = [ "intel" ];
+      services =
+      {
+        sshd = {};
+      };
+    };
+  };
+}

devices/test/secrets.yaml

@@ -0,0 +1,30 @@
+hello: ENC[AES256_GCM,data:y6Kl7kHqgft7T1eiFEeIppvosCACIcVWIQm6TzjS6RgUkJEg17GEZFRy2zTvVg==,iv:wChah8rTtEkkR8pRHO9NdhaGBwsTrrP+tPp7k2SOdn0=,tag:jRdYgJoKz+Q+/m8l/03JoQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTcldLRERrOHdadVA4RXdQ
+            dmsxL1o5aDdJTitqdXBzRWxqVmZKUzFtTlUwCnc2a1N4WUNEVUhsSlFuSExjR0Rl
+            TlFnNjVpUkpmbWdxYW5oblk5dGQ0THMKLS0tIDFBa0FKQXBPYThFTUwvd2tIaU9p
+            TERYVkp3dkUxU2ZaTnFRamRKclRRa1EKosUuvJXekUIxIHL8s/QuZf+hCXQS5dMC
+            HqZ74f/jvIW8i/Etu29VtK3n8MD8W1EenhJjfxOvhpRpLpzQP2GImg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1vgqvdqqe3mn0gvh0hydvu9c5f9yn5vek08cagyvwjhyta6utpvuq00g9c2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMK2F0R1JRR2t6NDhXVnVD
+            Unh5QmxDaGJtWmhsb1ZDRkMzUlpSeU9GL3lNCkU0ZVYxaWs3MHZDQlNHS25WMTl3
+            VVVtQUlxeXNQNVQrSTdSbWYzSmlPVGMKLS0tIDlyRm1tYlR3WU9ISjc2T3BSY2FP
+            Z3h2QWh6eDB6L1krbU9SS050dUhEamMKHnvdCmLuhuIfeBRs3LJ6IEatqrlMJNnc
+            vhPTVgfn+M8dGo+odTTwlvr5XGzE5cMSxGtdSE33JsbBFfVyaPCFjQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-05-10T03:54:30Z"
+    mac: ENC[AES256_GCM,data:JMr6ybbOk7tDZKUo11bd0xwUfLUuE4DIB5sYOCEVuaXLpDirgMgNSQgayqnnYDLOC7kGA7wDbbcxWhdaT8TcyYwdeha3SgA9mjkruPtOZ4R+ozfLDeqa59h2P+xronaOCDdl9G2JbhLA+k/S2ImBP43iPbcycJViSQs0RrntMxY=,iv:3ZILO4L01r4I2SJWOxe4pp9XLWo6KPPl3t/IbIf07+8=,tag:jhf73Y42fOYmeQS2oA0qSA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.2

flake/nixos.nix

@@ -1,6 +1,6 @@
 { inputs, localLib }:
 let
-  singles = [ "nas" "pc" "vps6" "one" "srv3" ];
+  singles = [ "nas" "pc" "vps6" "one" "srv3" "test" ];
   cluster = { srv1 = 3; srv2 = 2; };
   deviceModules = builtins.listToAttrs
   (