diff --git a/vars/per-machine/m1/zitadel/emailPassword/secret b/vars/per-machine/m1/zitadel/emailPassword/secret
new file mode 100644
index 0000000..bbee149
--- /dev/null
+++ b/vars/per-machine/m1/zitadel/emailPassword/secret
@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data:cXIJz0w/km3YqM2pX46ol1dpKw==,iv:33dPlBGcZ5SmzceaS3byI30dr6b8mcOKSm85gHSm21Q=,tag:EY/rxLcOxtysOLcsq4hAHw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jmrmdw4kmjeu9d6z74r2unqt7wpgsx24vqejmdjretsnsn8g4drsl3m98w",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOY2YrdWtabHV0dVdybTBJ\nWkE4MnlQeERuQXZ1dHNoQ3ZCTUo1SWc1ZFhnCmQ4M01Vci9lWk9vZjhOcm9BVGw5\naVQ1N0RkTW94NlJUcGJTTFdHQU5ONFkKLS0tIFhWOElwdlFSSDNlT3BzL1NVb1pr\ndzh0MUYrQ1JaUjlGbWtJQ0xmWUdnRGsK5Hnt8p5HbD0WbY82aCsFXDW5iXx/Afs1\nB42UYH6EW2SebE2q5PgMKSZQIr/Zp63DgrpxcsaX2iiy+yBylTnssQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-20T07:44:09Z",
+		"mac": "ENC[AES256_GCM,data:CvUbPTDy30aptxt4ZJwqF59T+jTcwBFg8yj00FTjdYaEHR5jDBN8xVA/KGh3hupwMe2cMpChsunRAwXQb9TGYbgiL8l0xwcKePenHgsoshnsoOZlhBUlLx8/z4sF39HyXqkeutNb0aJOLfsTGBS6Hoz1cHwgZg9QvnSn0qeYvGY=,iv:NcJNQipM+3GzuV/NcJuBEZbTbF1umoUzi478c78RW2E=,tag:CI/CqprgDTgMH7YIy9A+Dg==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/m1/zitadel/emailPassword/users/chris b/vars/per-machine/m1/zitadel/emailPassword/users/chris
new file mode 120000
index 0000000..91b7741
--- /dev/null
+++ b/vars/per-machine/m1/zitadel/emailPassword/users/chris
@@ -0,0 +1 @@
+../../../../../../sops/users/chris
\ No newline at end of file
diff --git a/vars/per-machine/m1/zitadel/initialAdminPassword/secret b/vars/per-machine/m1/zitadel/initialAdminPassword/secret
new file mode 100644
index 0000000..84434d3
--- /dev/null
+++ b/vars/per-machine/m1/zitadel/initialAdminPassword/secret
@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data:zaPb640sx4RiOmNjQUAe/b76wnXpJcaoXjEZcRfVezGw9X8btRI267n3UQlrnk9gFdVa,iv:eMKPcw2AGqcAW47zPpD18lemBKm9IUGBIUIXPHrFt9o=,tag:VgKjbom3P6uNb9G3uxhwoA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1jmrmdw4kmjeu9d6z74r2unqt7wpgsx24vqejmdjretsnsn8g4drsl3m98w",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVkRVbjgrY0ROeUVhdEQ2\nVEoyYnIramFYTFZ0TEtJRlg1ZDRId3RnUW5nCmlsTDJnUlFaanU2WEFKK3Z6aGM0\nNFhSNnBsanpVdDZld3ZpUmhaUTJjOUkKLS0tIDJDQktML3cyUXN5ak94T2tBa1RV\neDVFeDdrNlo1aXRYK2Qxa1B0SlhkTEEKtiROFuFgZL+a6ilt0x3e6eO0z1Dwp1oS\nYhABmnWc2UI2d4Ku7xeUaUlz/oWpch5m5K+fuJt2imfWfD1z62/XOA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-20T07:44:09Z",
+		"mac": "ENC[AES256_GCM,data:FWoPeR7xCXdtOvyXn4K0wAnu7luq5jbBIKnDGeDD9bz8A0xll4MwNH75LLisZraXQucedb2V5pq1RQRRqairs+5M166m7k2tmD+Ao2V0UvnU/WVGJ4Ug3iUJ7BIp2cRFhqmAZ2Dhk1lhT2bHNttjKKcz7bp3kamQ996ROALbMRM=,iv:euKutSpWFyeJj02WFNJiGQvCR0S6gyeLbXKR1yDcCe0=,tag:6YDqOJKucdFasDG15+y9uQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/m1/zitadel/initialAdminPassword/users/chris b/vars/per-machine/m1/zitadel/initialAdminPassword/users/chris
new file mode 120000
index 0000000..91b7741
--- /dev/null
+++ b/vars/per-machine/m1/zitadel/initialAdminPassword/users/chris
@@ -0,0 +1 @@
+../../../../../../sops/users/chris
\ No newline at end of file
diff --git a/vars/per-machine/m1/zitadel/masterKey/secret b/vars/per-machine/m1/zitadel/masterKey/secret
index 4806d18..8db13bc 100644
--- a/vars/per-machine/m1/zitadel/masterKey/secret
+++ b/vars/per-machine/m1/zitadel/masterKey/secret
@@ -1,18 +1,18 @@
 {
-	"data": "ENC[AES256_GCM,data:84DxM80CE5ytsU8uK93R68/NAVyMUuI569YrMkvNvCM=,iv:p97QNFe2Djrqe8NaZX/jrdukoAucgxUxhNbKzQgJ62M=,tag:UJ8xGIdINgLn1b5Uo3B4aQ==,type:str]",
+	"data": "ENC[AES256_GCM,data:cugXqfJ8L8vKNMmmm05s5TI1Li7mJ8VGab3T+244iiQ=,iv:RTRhY79qFD9F3S9jpaZXBIJL3P2Sk9NAdW5BFNA5b84=,tag:oytcs+C3H9RfT1r1rbm3kQ==,type:str]",
 	"sops": {
 		"age": [
 			{
 				"recipient": "age1fhp67dkmewwv8murjd8274svktl6zhfm8cgy8tx3mf265kgnn9yqa6kftt",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRkQ1WjhEQTBQK2pJN0hj\nS2RCZEVYQ01vL3c1TGVoR3A0aENiR09seDE4ClBrckVhWjhmZnN3U0kzY1luaEpn\nVnFQYkd3bVBIa3BxWC91NzB4M0hoeFEKLS0tIHM1TnBCcGtFai9jMTdBWFdqU2Rh\nbk9IQ29WL0Z0ZTlIcWFQNGtINWNEQzAKogUWaIkKoNnmeFxkUFQoHW78m6I3eiG4\nn4LQojHwAfno+mZeOdVDcsVEo6SmWZqZFIEDWB0PoA6xD/FvlrNdoQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYkVIOWoyamp5bElrMUhM\ncHZzNEJDVXJWWWxoeVhZLyt5N0hLR0ZWZncwCkRqTEZybmMwZk1UeWdSbXF2TzY3\ncVZEdFIxcDA5NnBHc0VpcnRPZUhoRlkKLS0tIHlTdW9hQjdXK2treGtMTVY1WjBv\neE9TNVRtNDViOVlxUjdtaktNMGRnbWsKhccgVbSVHVdYGiy01iuTAht9Ql5UnQ7w\nDPsgb+i9w/1nFxiRU0ihC+6RuP/ZfZDoYP0IfyTB1+j5vyttwk1vZA==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1jmrmdw4kmjeu9d6z74r2unqt7wpgsx24vqejmdjretsnsn8g4drsl3m98w",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLTGF3M1doU2tIWldINDdF\nSE44a0FNbFVhMzRMSVM2dmRhVXNRMWRoK1Q0ClVyQkZRazUxcmM4cjUvSzdDTFBl\nc2JmSkNjYmZhVXNacnNHY1UrRXQ4UHMKLS0tIGx3Nnp5R2VQYTdad1NOMzFzTHpn\naGpuL3dLUjVBU1JIWTYxeFhCdVdLK3cKk2gjg7o+DJnJD0GY3WoV9zBfvOWUQ02e\ns95E3BPabWyK3qjcdxQhvgEqlAlMA4DV9v8D6UHXelJnPr6zUN04og==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcFRlazJoZzJvYWc5Q0do\nZDNjRGNhQ2gxVUFDQnpLN0FMWk43OUxLVVdVCi9sV3lNVmNJRUpuS2NzZjJDTGlD\nQ0IreEhSRVI3TWpMTk00MVh0L0Fwb1UKLS0tIHhxRDJWeURYSEdOa3hUU3hUMnlV\nQVdYNEJQZU5qWjVBSDBBc3FwbzFwbG8Krw64d1IVO6Ouy6IlZyrscT/j0HSsff3v\nVCtvyTB3m8qi/Qd9yzvUvecqAKB/pAnHTzZlvX0qiGomljp3bgJ6Dw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2025-09-18T13:51:19Z",
-		"mac": "ENC[AES256_GCM,data:iSfQZniN3T3at+/DxU3ZpkwxC78dUsCTL2pqgKaRUbNf6aPi7vaOojnpmQE28q5XXZhbGgDam/jogj9iJJjRQ95l7UktQW6fEQ4xej1ynIA+EkRYYSUYD9QR80skvQ79uBIwvaNKez2px0ylSR06VVd6QeMWbtrLv+HS9x7Omu0=,iv:akBnFMIuuG7pbPd7UHTEwsgmuODnECytr6M1S2bYFQk=,tag:7+x3iZoJDepfFeaND2fWKA==,type:str]",
+		"lastmodified": "2025-10-20T07:44:10Z",
+		"mac": "ENC[AES256_GCM,data:x3+ZiU+Jj3fb9UMMZ62vpOJdSSc1B4FSpPVn83b4eczwdQfV/e0wSpZg+sN+FMl3lBkrAn/bDROUVp2rxEjHt2ZOqXEasj/t6u2RHqHhrJ0XfdTwY9pJWE+P2RjX7YJ83gzzHqngubP/TUeghK7N0ewZsicSrRTHmTn2OxRQS3g=,iv:X0D058qIEFue/G1W47spssNhiGoX2U0FouE1RyElL2w=,tag:cBzs7pqR5rZy91eXn71+Dw==,type:str]",
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.10.2"
 	}