diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.repokey/machines/bernese b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/machines/bernese
new file mode 120000
index 0000000..2c5a0ac
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/machines/bernese
@@ -0,0 +1 @@
+../../../../../../sops/machines/bernese
\ No newline at end of file
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.repokey/secret b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/secret
new file mode 100644
index 0000000..8d7c910
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/secret
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data:BWotKi41tTUfN722LsZ8eHx3z2U6puEYgq2yMXM=,iv:aFs73QwU/DIQ/t2RJUrgybrbdvkfl9I087Av7g+KAUs=,tag:01phhzFgnRMpJqvohH7Y2Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1la2p9plxwtlauzf00zx5tfaq6pejr47jrn8kkxhhe5utr57e24sq4agxr7",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3YzRoQWRoZkpiT3h0SlQ4\nK04vcDNuWTJ4UEhEK1AvTTRFZTdZTWRocUE4ClNZdVR2RkRyZVFVNUY0bThoVFRo\neWllaGpUUngvUlZ4TitxWWJEV3p5MDAKLS0tIGliTVE3YjJSc25uZ1lHaDdrbkt1\nYVVYS0VIWDlVcGRwclZxMlpieGlIeVkKhDWaajvsgoK2Posh0fK3uL4HaSBz8g1W\nV8bYXf92QbhfnEATqjFc4B1XOfAn59VyZaqqkAXc137Sz0lz8ygRYg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1lrg2j5a90yy4ccj4c8yrmkk4rx029t5hfh6n5a2nte77pwlspp8qvgmtmg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPNXI5Q0lqZnNHaTdRNE9Y\ndGo2YTF6SlFlaEdWN1dEZFZ1a2pobUc5ZUJBCkl3V3lSNzdEWHJlRTM1WXU2TXRj\nRFVxc091U2FZQ1FWU3A4ZlpCQ0VOSVEKLS0tIDlVbEp2dWdISXVSRFRMK21iNUR3\nT0Zrc3pnaWFxNEExdythcVE4QjFIMVUKb8xFxhvbOpUpbWeMeLly3Zplyy5b73dH\nLbwFbOZsuUyAuuSLOT8udY3ozf92z08jnSEoUqnpIPYRNfGXtI4xrA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1r2sw9uncvkqtklypw4rttufhw86lhhqrghed8l2kda6hdrd9ypyqm7y863",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnODNybUg2UjZ5RVhNY3RQ\nNnhYV29SU2dMQjVKMXU4bWFOSVprcy9zTkNvCkFaSlhXMDd6M3JSYnFiczgvMWov\nSnRjWUhBdklIdmNEUnRuNVVZRGoxTUkKLS0tIEpsSFNKZXBGSGZycTNrSGp5Mjlo\ndUZlU1FjaHVaN3A5RXRIcnBqRlVaUkkKaXvUzKfiWQFOvknXLpfkSG3AtqEAzuBo\nYyyAJNkLzSa4WLAzN5GgAiOlZYnWw0hbmzrLrcPBtkO60+bPNaOsFw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-01-05T14:14:41Z",
+		"mac": "ENC[AES256_GCM,data:vNc3g5XvIDoXEQJbBcQW34Ro10+e60r+OqOUmJbu4F3rmKQCRVRslueFcoSrOliPrGelZvaY0tGx9aR6pMNpiyNruhKKvLFh0PAQ8njEtgzyb/e+fQkuBIgsJvZ8M8RIKGW8dGu8xN6I4Q4su8IzbFQHgwHD0Lzk19lOYOccrUA=,iv:erbkI0+gUU8JpJoC2MtjhF4b2XGb9j7+WaWAVNL4zYI=,tag:47BCD61lkaE+TG1AiLKiKw==,type:str]",
+		"version": "3.11.0"
+	}
+}
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.repokey/users/pedro b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/users/pedro
new file mode 120000
index 0000000..ae0c694
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.repokey/users/pedro
@@ -0,0 +1 @@
+../../../../../../sops/users/pedro
\ No newline at end of file
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.ssh.pub/value b/vars/per-machine/bernese/borgbackup/borgbackup.ssh.pub/value
new file mode 100644
index 0000000..a74001a
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.ssh.pub/value
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDe9v+YLgC6KbmHR39Hk23GU8MWLN0LjUB0+lmoX3QwH 
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.ssh/machines/bernese b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/machines/bernese
new file mode 120000
index 0000000..2c5a0ac
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/machines/bernese
@@ -0,0 +1 @@
+../../../../../../sops/machines/bernese
\ No newline at end of file
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.ssh/secret b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/secret
new file mode 100644
index 0000000..f077b56
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/secret
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:vd8XWukJQmTbzgUmSWdxAp6y17fol0+UbeQ2F+znkQQ=,tag:WjB3UJy50Tlc0FWUW7mFFQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1la2p9plxwtlauzf00zx5tfaq6pejr47jrn8kkxhhe5utr57e24sq4agxr7",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqNlZFVXFZMW9NNlg1VU9h\nS0pRcjFTeTd2aGJrRlcvRW5KaXRpVmdEWDJzCjJuVmMyc01XT2c5NDArL3VZaWFw\nZk1qNHdXOGpVamNUMUxPcFZCMFZ0Wk0KLS0tIHFTQldqQVc4ejEvYjhpY2hrN3VT\nWVdNbGlSRngzOFNzVzA0UVl4bU90V0kKQcoSG0vwfRfPtZGRxuPynPrGphMZjsdX\nY2j8DqiwsAoj/jVTmGKbU3rDYF+IIyCxfgTblJRTSto/AOvNfIsPdg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1lrg2j5a90yy4ccj4c8yrmkk4rx029t5hfh6n5a2nte77pwlspp8qvgmtmg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNaVl3SGNaSzBTQzhvNk00\ncWRYdVU2aGwwQWxyRGdXU1BSRWFtVGdwNlFRCjFuVXgwWWlnVVBRUnBCekNkb2V6\nQWFMdWg4MFZpMkNEVDhBMTFuZFAzWEkKLS0tIFFCYStGLzhpWm1ibUNzZHpSZmdw\naHNXMldTaElmRkUwNllHUkIvY2k3VmcK/n0TN1E9npIk6hjyD3CQcUID6j8AxzwY\n2h78HaubCxzU9qYILPk2n2mKfqO6IX6enVRILf/yErN/XV7q4iUOsQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1r2sw9uncvkqtklypw4rttufhw86lhhqrghed8l2kda6hdrd9ypyqm7y863",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiRlJXaTRkUG1ZN1poU3NQ\nYUd2aWk4eEkwNHBzTFFJQTBPSlFIV3VVdFNRCndXNXlvdFlSM0N2Sk0wNXBVTy8v\nZGlwUUc3K2RzWi9ZVTBPUUdsRllnWXcKLS0tIGNmcUE1ZWo1d2Y4bVd0OEVJRkFv\naXRnN3pvM0hpNVk0UWJ3MFZJYWxiMGcKSW0e9mPiFXIaSkF67dm6sCCxwWyoCbck\ni16AqBjZNRxOXh3AckS6TQVZMtN/wHyhsphRXCUATrcHbnq0qi7Rzw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-01-05T14:14:41Z",
+		"mac": "ENC[AES256_GCM,data:Mx/1xRhpsxZHJbrTmwC0ooKJ8udUskbEHMRT02V2wYrQYOp+5IOSl7xF/pHBh5jPYhjvHNtLNKVrOcRUQd9GnOq1caAkkkKVgOA1RaoqWSwjzHwfx2ixKbRpmWbryQQJA2irdFl56OlYqPU8506qMQ7hYC5joOnkoV8ojmEFReI=,iv:T5XhIkaprwN7jB2Z9Wic8Ui36lVDKfW/r4J6FNy+TqU=,tag:ndykZT7GND6F+zvFcCzNRA==,type:str]",
+		"version": "3.11.0"
+	}
+}
diff --git a/vars/per-machine/bernese/borgbackup/borgbackup.ssh/users/pedro b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/users/pedro
new file mode 120000
index 0000000..ae0c694
--- /dev/null
+++ b/vars/per-machine/bernese/borgbackup/borgbackup.ssh/users/pedro
@@ -0,0 +1 @@
+../../../../../../sops/users/pedro
\ No newline at end of file