diff --git a/vars/per-machine/m1/root-password/password-hash/machines/m1 b/vars/per-machine/m1/root-password/password-hash/machines/m1
new file mode 120000
index 0000000..9be3644
--- /dev/null
+++ b/vars/per-machine/m1/root-password/password-hash/machines/m1
@@ -0,0 +1 @@
+../../../../../../sops/machines/m1
\ No newline at end of file
diff --git a/vars/per-machine/m1/root-password/password-hash/secret b/vars/per-machine/m1/root-password/password-hash/secret
new file mode 100644
index 0000000..2f131db
--- /dev/null
+++ b/vars/per-machine/m1/root-password/password-hash/secret
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:fVeKC/uOu9U8O30y0Eh2sBPaEa+CTDMC1LIisr9xrbg8a12CVr3Aodt4UrExw2UAvIMMJIn21xJrLCNyPB7DM0p1sClXE1frt+zCDL5lHsFIVRAgnMZvR3/WPMoxeXK5m/CepxIt4d9v7A==,iv:o4jr+7n17InfAU0xUSyyMs7YVl6Z5oT/TjL1FRV8tEM=,tag:Q3dSNepX5QaVzeOFzFuAsg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age12jttkmrt43ugulsn9q6y9u0hm2ec96nkfud3thfkrtsuyrpzcg2saan3mu",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0K2VqUEtOWG1qa3VRTzg3\nOTZNTlJNUFo1RWQ0Q0FUeDR3V0w2QjRVYUJ3CjNJSmUzUkZLbXllSTBNUW9RSFVB\nYjA0TlJDVzByNzZad0hFdGxvZmdkT2sKLS0tIGJqcTVmanhYRGVVT3lkNmwvTHhL\neXk2N0c4T0Z2T1A5dko2dVZvZFM4WTAKKhMqPSZ/igJFecfr6KQZy5F81l6XGnLV\n3935vxcINZchm5z6b187uMkxAtYoGRetIlsc2SFV3gifiZgEGPFiqQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1jmrmdw4kmjeu9d6z74r2unqt7wpgsx24vqejmdjretsnsn8g4drsl3m98w",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUSHB3bXE4TUlJbUJXaFpZ\nREVwQ3NJZEowTzhRaTJlYUEvdjU1UDZzT3hvCk9qekdiR0hrNEprNVhWN3FuU3pI\nb3A0dml5QmVLRXVVY09hcy83N2RSYkEKLS0tIEtkVE40ZkVNejAzK0wzakF2d1ll\nMEQwTzIwSGF5RlpuclB2bHh2TGpVK2cKXMLtSmKg/CtxEXFBmoKUF+b20Bjb4ifH\nkI+8i/glZnhdJP4F/ljdzH2gAy+g8jrfoyRfe7c/z3+tt8lLI2fxzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-07T13:07:57Z",
+		"mac": "ENC[AES256_GCM,data:CiDyT923f1y01hXd0YWPs/K0BQHYH68c0lYS+Csbmt3CSaTd1ECtaTGqrVTot39vKAaqiXOLn63o1uWDzDRTeupBnU+tx5Pn5OBg7wuCmBu490UGvJHyEEatmpcCNunlDYPZ689+3h+0RkwDx1pJkrfbbC/oZ3oyf60jq93evY4=,iv:FHv1jQJGhKfZVwLPKJ7P7BYaiD7QNNpPh1OcSbN7nQ4=,tag:M+08UH4cIeM6xFYiRJjfyQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/m1/root-password/password-hash/users/chris b/vars/per-machine/m1/root-password/password-hash/users/chris
new file mode 120000
index 0000000..91b7741
--- /dev/null
+++ b/vars/per-machine/m1/root-password/password-hash/users/chris
@@ -0,0 +1 @@
+../../../../../../sops/users/chris
\ No newline at end of file
diff --git a/vars/per-machine/m1/root-password/password/secret b/vars/per-machine/m1/root-password/password/secret
new file mode 100644
index 0000000..40730aa
--- /dev/null
+++ b/vars/per-machine/m1/root-password/password/secret
@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data:F2cYGbS4qTES0dkK5VKN+XZZEOr3hWd5s9673OArPEIDkb+y9NAedVuC,iv:svMb2OPvKPnYmicVHSFSK1eI2T4ZkTPOZ58Xd1mHR+o=,tag:jKMvlKhsfK8tkj0FLCeN/Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jmrmdw4kmjeu9d6z74r2unqt7wpgsx24vqejmdjretsnsn8g4drsl3m98w",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqaFdtVXczQkMxSW5ZQWhK\nR0N2RHhNQ2laNzg4MVNoWTdRS1lEVWdoTGxBCklGOXJRYldPTEFIYllKNzVpd1VY\nOWdjTFNuYkpucHJ5dWZZMzF6MFU5cUUKLS0tIEdDbnM0YzJkZFd4NWc4TmpNWGVw\nTk15ZWJDaXI0Q0RLQko1Q3hzVjJZZzQKsBFhPFHMHK5TftbH4b3B2gLPxd9kpg/w\nkt79gC1KJiwda8y0sdy/FfPaai+l3/5Jlud4VtfdY8O349Bsp8bVgg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-07T13:07:57Z",
+		"mac": "ENC[AES256_GCM,data:KmdY7eDQTyNGsKEIn9IFwh40leSYlCwrSYoMqjA5jFQnVfoj5wju8GORsg1Y3fDa6eyg5UVBuA8E6dVAEBuGI7CVLxCTVNuNL/Pg1UX0A4W/yro1y6AVzusPGY6ddEEicBDQpiGyoQxK0mzdi4ECQ6P5VGK00pKYO4svsYt1UzY=,iv:rJGLFmpk6YkGen90qQKr4q/INi0E8CfEoql0aSjeBw4=,tag:wD8dg7pTK4xBJf90CYo/4g==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/m1/root-password/password/users/chris b/vars/per-machine/m1/root-password/password/users/chris
new file mode 120000
index 0000000..91b7741
--- /dev/null
+++ b/vars/per-machine/m1/root-password/password/users/chris
@@ -0,0 +1 @@
+../../../../../../sops/users/chris
\ No newline at end of file