diff --git a/vars/per-machine/crocus/gandi/gandi-env/machines/crocus b/vars/per-machine/crocus/gandi/gandi-env/machines/crocus
new file mode 120000
index 0000000..efe6fd0
--- /dev/null
+++ b/vars/per-machine/crocus/gandi/gandi-env/machines/crocus
@@ -0,0 +1 @@
+../../../../../../sops/machines/crocus
\ No newline at end of file
diff --git a/vars/per-machine/crocus/gandi/gandi-env/secret b/vars/per-machine/crocus/gandi/gandi-env/secret
new file mode 100644
index 0000000..4ab64f7
--- /dev/null
+++ b/vars/per-machine/crocus/gandi/gandi-env/secret
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:diQ/PXOEug+tCpSPJaOqW+RY+jS7/UTHtehMJY9uu0pAr8JPTptPbc9GvHHjfIKfq2+me1Ttb2lUTDPnQuujFXIcD/Oj6Q==,iv:5Sq4geHzXrs6HKCk1Z1axEIEe1BVaH3zJXbFHirCYBg=,tag:BoZQd5hRbo6bXtl6X59lrw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age10lf2vjmlkff25qyft9d3c0274gvkxsf255fw0ea60cuqc7703ajqu3yxx9",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtMHIyNGJuQ2pDcGN2RW1k\nK1hvUlQvd3R3RGxLclpYN1puTkV3YXVLOTE4Ckx2N0FscGRPYXBsanlNempIQ1Qw\nMlBoOVg0bUFGNktITjhYWE9qWDE2UmMKLS0tIGpDRzVOVEF0QXhyangrVkN5dzZP\nc0g3RFMxaEUxb0lVc3ZRN3dac21Dc0EKmwoWl+Fb0AFzkh36gU9YIy74Vzb7ooLz\nbCOkLXCGpV/3gvlEer6mWaFR1UYGGcAGIr9Tg3K28uFpJo2WcbTzng==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmc3YxV3c3elZpK3I5OXVu\nbDNyNCtLVlRFK1pPN21UVngxTE5xVWlNRmpRCks5ZzZOemVSTEZSMlJ6UE5yVXQx\nUm5jYUNid1NtdUZBSUkraEhrbUFCeVUKLS0tIFc5RVhCTlpVd21vRjFCSTNWdDNG\nSEJ5b1ROUDV1Z0FzbmhyYkY5NGVsb2cKmnbLoK915F1SVHXdBHCx/8cBy6SiGznZ\nKHNr4HcdKLSF9EPI/0fJIzGoCTTCRTG4ocvDRBDQiB57kQqhu5y2Sg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-11T20:41:34Z",
+		"mac": "ENC[AES256_GCM,data:JF1vnWfkno7JM4RrrJ9mSvFH6Qpm6XOnoTSpVpUjKw7b8HYRM20u8KXtoB8FI+mwJU59OWiresBuy+JMrViOO+mKO8mkIdn58VgXITk9/ISM0e+rlZklQJRvpeREDO4hWZfMNnRq74vW0JL8toQiBNAxwErOTu4Yfz2wmW8moBg=,iv:rxDxUhhE8Mn971MVT7UmxIO5Gg1lfXT9nb85HZraXZQ=,tag:3Xcd2tYOttaiCuvscY7kEw==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/crocus/gandi/gandi-env/users/rpqt b/vars/per-machine/crocus/gandi/gandi-env/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/crocus/gandi/gandi-env/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file