diff --git a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/machines/crocus b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/machines/crocus
new file mode 120000
index 0000000..efe6fd0
--- /dev/null
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/machines/crocus
@@ -0,0 +1 @@
+../../../../../../sops/machines/crocus
\ No newline at end of file
diff --git a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/secret b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/secret
new file mode 100644
index 0000000..8620778
--- /dev/null
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:9b2ag6EGvzC6t2cyXizkfrJKObu9JOUUUU9gytBHnxZJ0msP+3smDvWYz6o9,iv:HMNem8T09zQfa7Jyg6eLjCpIIYaRbPjqXtquUH4K9wk=,tag:Mp6cmcPm+/IgeuXmgdFy9A==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age10lf2vjmlkff25qyft9d3c0274gvkxsf255fw0ea60cuqc7703ajqu3yxx9",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnWFN2eTRhYkF3eGMxSVBj\nRmV6aEl6TkFrYVNaSkZNeUt4SkJ0eFpnc3pjClluVExKZnlmZXZiZit0cGx1bmt2\nSTVXVDlUTjJvSDhvODFJT3JSRmFxWmcKLS0tIGpzSzh1NHM3U3ZCYWlkUHA1c1A5\nUENpMW5yS0xXSjYwOG42NGF4cWJQVkUK+o27ZfTVlD1tmqOXll3mTNKDPbmdpqLf\nDd51tfokYg7BVAP4bhgL2CbkH2p8qJdHmo6UcT77Pxvan1MCcgg8tw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZY1VKMHIwbkNTRm91c1Vn\nOVZjWVhrTW5lMlFtaUdTcktWY2JrMFVHMGw0CjJrTWZlbkZKYm5XMGpZeW1pK0t2\nZEw3UTRzZGFBQlVRQlo4UFpLdjl3amMKLS0tIGdCNUtPVEd1U25pZVFYakR0MkR0\nSy9yQXBXOHBvbGdVU2wxOW5Kd0tDSU0KX+iIRVmYse0ECpDFXs16Rv6TE+vcX4qR\nqSBnIZJeeTsva/T0tXXnwSnIG8/nKtHzYPu+j75Sb3d7lXO6h0USGw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-21T16:53:25Z",
+		"mac": "ENC[AES256_GCM,data:gks9AYHofKUmYa9i7+8kpM3cEMWEfQmibjY7dLUqi4TDfLyxlUIoKmbptrwJgWTWBs+Tnb3YrU8RRTFGFXPyyiwForX0/mDHf1pK0+1NmxKWd8X/7hZmARaWXQGe3rwOLdlvgXyZ0qpTOYXa8vNCp14m8HHIvq12tY+RY7/l7dY=,iv:fz0Vsw0bmNr8wgVmRltk4xzNEGU9xGb0f/RilEyIBu8=,tag:AfYTEAUBoUw7sLd9NcMPgQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
diff --git a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/users/rpqt b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file
diff --git a/vars/per-machine/crocus/wireguard-keys-wireguard/publickey/value b/vars/per-machine/crocus/wireguard-keys-wireguard/publickey/value
new file mode 100644
index 0000000..254badb
--- /dev/null
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/publickey/value
@@ -0,0 +1 @@
+aeI0Lu8Qr1r/qtMmSJzvg5Z5gJAWwSIhSmna3Pk9Rys=