diff --git a/machines/loki/configuration.nix b/machines/loki/configuration.nix
index 7110fae..3204d43 100644
--- a/machines/loki/configuration.nix
+++ b/machines/loki/configuration.nix
@@ -396,6 +396,7 @@
     wireguard-horus-privkey = {
       owner = "systemd-network";
     };
+    k3s-token = { };
   };
 
   # This value determines the NixOS release from which the default
diff --git a/machines/loki/secrets.yaml b/machines/loki/secrets.yaml
index a02dc9d..63ff5b8 100644
--- a/machines/loki/secrets.yaml
+++ b/machines/loki/secrets.yaml
@@ -4,6 +4,7 @@ livebook_cookie: ENC[AES256_GCM,data:ZB7u8BWNn7x2O00YTALYTwNi/obq8nH3mI01Bd8UxPg
 livebook-password: ENC[AES256_GCM,data:FaMIr0GxLTvAzrYt7blGbJuGDbr+lDiIMnvY2c/r,iv:SKKKYYRYLGtRGgaHs7zAnH8n0HZiGaoAlLAptUPaa/c=,tag:vgBGhmXH/QpTbKjbrQEhKw==,type:str]
 renovate_env: ENC[AES256_GCM,data:mzeS0FXsycD4hWMzRMgeEgTY+x2QtYtxmhcFCJcjwlD/q577kprHaU8otr1sOu9mwNud7K8kJGk=,iv:MMhr6CPsyvmP7+dKJUwt9cjnATm9JKZ/KbG4Dkj7hJ0=,tag:ubLmcW/CtT/uPiyswvr93w==,type:str]
 wireguard-horus-privkey: ENC[AES256_GCM,data:JVhdbvNqfdPWFCg24F56Hmu1Tf/EA6BOqa1uPuu8C/FrJhNaGi4S+KYOook=,iv:z8cq4C5vu/QqJ3UZdL1zEH22Ht3rKSbdHgAQbRSk8Kk=,tag:AVBvV8wJqw5jgDRiES89eQ==,type:str]
+k3s-token: ENC[AES256_GCM,data:agr9ihvrufHJ+zsWUTT7tT6oXwhQfp1VjlzvL/YrjhfsQsWdA2wqQOBG8Fgi6gDlqz+3DwWr3wdy/jclEEwrnA==,iv:zgYrN9CSraugO+LMIpJ2jDvxjCnQ9a3GHj6ffO/K0uY=,tag:6en6lNNvNMyOVf1Rfow6ew==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,32 +14,59 @@ sops:
         - recipient: age1h7ddyj66gcqt5vnzphjfn6y5tul79q0glcdl0et9w44z2evl999qe02wht
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTG9yWmk5YjkzS01aKzFo
-            RnZuU05weEtHblMybkdkV0YzU2NNcTFvS1U0ClY2eVhqblJLYWkxWkNPQjZlMlhF
-            dTBDRDQwd1U2eXpMSzFYYmtKM1ZJY2sKLS0tIHQ2U2JQbGVpSk94UUJZVTZyUEV2
-            VncreEp6NHhRVkdnMGY5S1ZmNG91c1EK5dUufaQ187VMsOH4BLBeU/lcvLtMqLws
-            IvjbV62/tra6k6IWZUcNCq8qXu8IBv6EgO0DLmyFOEALjHLFjIQdrw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UysxelR5dzk0c29zanpn
+            ZmtPSHNhRXJtYjA3a2xTdkVFYjZPSUFROXh3CjdXNmg1Rk9MMERMYzRHaVdhU3pY
+            TUdEdzh5b1Z2a2FZdkZzcy9WRVFBTmsKLS0tIDgxNXNtVDJjN1dMR2Eza1BRRGJP
+            TGVITVM3b3drM2Y0WVJDckRUYzIrMjgKtEVhrvkm8z3LVwQi4AuOJxjkQ5kLJFtb
+            lxQIN8hrgkGMwsiOUyVbDw6z5tt4AmukHuSUaP7AXX3xvOl3eFPT3w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1435gxhlpu55pp86r8pullhc6wg43nv6qm5l3g2vl5000xhn8apdqtlf8cg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBRUFEMmI5WFFUS1FhMjhL
-            M1pKd3BjUFdzVXZBQ0ZybnNnSlFRTTBZcnlVCmFaL1JQSURxcXA1TktLUFFRcFZO
-            Yk51N0hVK2Ntb0FqY1NFQXEveU1meFkKLS0tIDBwb3grek5BWXJDOFUrem12RHlL
-            K3JRa3FwTkJobU5uWXJ5R2poMnZpRDQKRhsTQxotKf3l4KITyoZJ0y1sYfhgnFef
-            Q9S/CS/sm8IFtU6tLw3Bph8nnfVzch+Nv13NujWsBV9wJ7Ee9th9JQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVDZ5N1g2Y0dYYURZWnhG
+            SEo1WFNIYjY2d2dyTlRtOFFVazJwcUNiOTI4ClpTZXZqNW9QNmtRQmljb0wwTHJW
+            K0p6TDRMTnFTWldSd2QrNFRuV05tVDQKLS0tIHp6MStBTzUrUlBLSUlpc3N4N3Fk
+            a2FINk1wekg1cW1JZDRJRmJMK00rMEEK4U4WQl+z0V9CH8PBI2BINwC/fjtLVbj4
+            d7CEm6QajGIsI2YBgzlbXhL+zIQSCGaPsyRcYSLGxWmPTc6/On2Z0g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1m93jeyexus2uqvrk99r7hh0xp7qxk55tgmju4h422dfkf92jce2sxpntu5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5TmRjQnBsZkY0UmlOUVI2
-            T01udGVoS3kreVh4cTlYRmtXSHRyOXZnOFM0CkpLRG9GZmlhQkEwall1T244YkZu
-            UkhMRmdwYTlFaGFMMTBxcFFjUTVFL1UKLS0tICtRWnRGZUc5TkhiQUZpKzNtQUhH
-            ZHZaQWpyZStIOUZUU3NrblRNWlZQQncKX03uGk48VkhOSHqZHUoX2J4tBNJiuJhJ
-            G4N9XlVmpRNPoImggDEXrpElt4GRtCY52oq9+u/6GV8eDmDeGA2NUg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cDBYYjhjSDBrd05JbjRP
+            UWhVWjNHYWdPY2VOell4VDdpOWVZOEZROVNrCk84U09xN09nK09kc3l3M2RuUVpN
+            ZkRMZVNCdmlDbVc5VXUyOUROWE1HQncKLS0tIGZMZXQ2RXg5ZTh4aEdTajR0Z2xj
+            S0s2emlQVXBibmRSNURCQVZabi90aVUK08sP7ERNk2QKIIuOgICjHhb9s5ot6wSg
+            k9VOXYzTAbXuF9Wbj7niSA9aZ4Ik0HbGFNTMMeqdSVDeySCIAkw5nQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-01-17T22:53:56Z"
-    mac: ENC[AES256_GCM,data:IQ1CmFnd3NQZXVB9RNsPHIF+OlTxaFI3ByOq8QEJjHISQaGfnjDdC5E6mCaouz7du8oT0d40LrCoKFg+AOcCrgSCf65YnCcxBDXX6nw6/E0zLEb7E9A5B1+Fc7awmBYY59oYrcvVLMgPbVCUE2p/pdmd6QTlY+Q1g/A6e1Nd16s=,iv:PYgQbS/ggumPU/Rmj7PWNWDCDWlZBqOyjpvgNi2Oyvc=,tag:/7rkns+8GUqFk9PsTcLK5g==,type:str]
+        - recipient: age1gsjy4em8u668tnx77jr7kk345m4hzmmt3seclzvsd25ldgwd45pq6zu7cv
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNE02VWdDR0dJTGJnckZO
+            Nk9RaHMzUUtxWUVaMjRYeXM2dGo1M3lQRm1RCkJENWtVYW5JTm9MMEtyYnNVZ2ZN
+            Rk9WWG5BMkorWXM1MnJwczhuMEFaK2MKLS0tIGZGS1A0QjhhbUxpZnV0WkVqT1Zs
+            NEFmakFPK1BZWk1xZ1hBZk9HMGlMZ3cK+p/ErT0Kjga7hjebrEW+jnPvLb3LJqv0
+            RfIBQwk79ZDcdqtKKQcDt7HfXggkGPsDD5LZRxE8sasbnd7C3V8VEA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ghda0mj5wc2vpksjuvaf3t0xklpcgnykvepzu9k5csf482ngpans9h05pp
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzclIyNC9KQW5lb3M1SDZZ
+            SEhxZGtWek90Y1pHTFNNSGk3eE5mbzUwUnlFCi9UVXJSeEJiaUgzeWVrMHhlTVov
+            UVVqWWpxRmIxVWhPTzF1M3U5dncyM1EKLS0tIGpnUTJ2dGh5eGN1OC84bkFmQ2xW
+            bm1pM05hMlAwL1FmT0RXZlBHQ3kvemsK53X9hG/3Xtv4QUk/F9Un0uhIOfbLnDmn
+            6n5HVJtVf90Ol1r3soNuDD2PnQpGc4V9Dml8oMm5Rinz9fcPwN7vvg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1mpyg2qcrehfcpksygk9hduz79l93gy2crpwn0vu70mtcmzapeyvqrrjw5r
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEa0JnckdoZS95U2dhSm04
+            UU1BYk1MOC9KWHMwT2JDUjRSWnZ2bTE2RDFFCnlZZ0JPdFQxa3MwU3k1SHp3TmVX
+            bW1yRmpUU1dKdjgwUUY4TFBadDBKQU0KLS0tIFVYaDlHVVNGVkpSaks4T3A5dStp
+            YlFmNzNseHZXSk01SmEwK0ZIRlFmb0kKPms5J3yViVwgwvQhI5XYwcNQZs4Bhwv4
+            scaA7FZV2sa4x+EXrYAxg3AioH7QOky02FujCOrUaThlLIzDVucgKg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-01T09:21:23Z"
+    mac: ENC[AES256_GCM,data:rYz0Q6CnVD6i+/Cs2RptgQnwx4SN5b+Tu4GeVt7gkvuFzegSIY5gv0N8hyvskKhdvTGzYE7DY5ePeFJRD1JdrRr/d9ZEmjCbapz+VxwfzxXlhyGElYboBEnWZ8G0C0mFtNOmPvwAqlinBNdQkRODX3l0zNa9947AXTPzkJuArPo=,iv:HQZzW/GkDP/kp7gAjiio5SKf3TGDeUySqfbaJWtYlVc=,tag:/taq1QhnK8FTCO+JquixRA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1
diff --git a/machines/loki/vm.nix b/machines/loki/vm.nix
index b68f83d..a471614 100644
--- a/machines/loki/vm.nix
+++ b/machines/loki/vm.nix
@@ -29,7 +29,7 @@ let
           {
             image = "var.img";
             mountPoint = "/var";
-            size = 5 * 1024;
+            size = 25 * 1024;
           }
         ];