diff --git a/group_vars/radius.yml b/group_vars/radius.yml
new file mode 100644
index 0000000..f3cf5d3
--- /dev/null
+++ b/group_vars/radius.yml
@@ -0,0 +1,5 @@
+radius_clients:
+- name: Downstairs-AP
+  ipaddr: 172.31.0.7
+- name: Upstairs-AP
+  ipaddr: 172.31.0.9
diff --git a/hosts b/hosts
index 667a180..393c45f 100644
--- a/hosts
+++ b/hosts
@@ -61,3 +61,6 @@ zabbix-server
 
 [ntpd]
 dc0.pyrocufflink.blue
+
+[radius:children]
+samba-dc
diff --git a/roles/freeradius/files/certs/dc0.pyrocufflink.blue/ca.crt b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/ca.crt
new file mode 100644
index 0000000..a4cdecc
--- /dev/null
+++ b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/ca.crt
@@ -0,0 +1,65 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIFTTCCAzWgAwIBAgIRAN29LEjhiUPYiq5sdIHdOWQwDQYJKoZIhvcNAQELBQAw
+QDELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD0R1c3RpbiBDLiBIYXRjaDEXMBUGA1UE
+AwwORENIIFJvb3QgQ0EgUjEwHhcNMTgwMjIxMTIwNTA0WhcNMzgwMjE2MTIwNTA0
+WjBAMQswCQYDVQQGEwJVUzEYMBYGA1UECgwPRHVzdGluIEMuIEhhdGNoMRcwFQYD
+VQQDDA5EQ0ggUm9vdCBDQSBSMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
+ggIBAMYe2XxYTJL+A89LVgxuqCpTfFCGKsT/IDYVYP+81q+y9bASw9Oukn10usu+
+hFz4l31vnFO1jnXQlmZTmBiCzmGDqF1pTJ0XVPZrp+1V1xvWfQNYQpBjLqP6U2gz
+RocGJMImi/0Y65lOHLakx6t1DuNX6QHgKk3ePc1XJyrTipEEDDJHph9sXQju1GI9
+JPATJppSrxX2hRrYqZlOARszg2pTr52QY90CfARJJI8iehI4k7maVHq2morkZN8R
+JTrZH/8oOhJEFX5Ndeag8JTRvuKzVKiGHKZJ/xxjgDnqF14vSnOPmM7tsPpFMfvb
+BRAOlXmLnKLV16xK1zZJ9b0nrQSGdnoHswS/TjbIDLQrMcTAhvYUzEFC9RwmTkVu
+YrZPdK1mMtO+02KB46NhPGma71VBpl5T2FbFRaaEewvN/ny63Gm7CiCUyP165RhL
+UGDMfNm1XhCc925d9leBgh9TboF8wbp5reTX2kcWnyHRPsKfNOOs9MffpoI7afuR
+WyZjje2SWDuuD6awXhXWTD8LeHTQck8rR1cOTSvZIBo6trxhSTdUk2GQHIuR0JT0
+SpJBNQq2EYVNq0TJaY3Dy7myTTDmUWcpKz8Az+q0hn8+RFHMrKaZ0W0lR2HCSepK
+E7D0X/W2TxcLSqJsPNozKA/vu1IFODtBNrFKOza4pHReXbmBAgMBAAGjQjBAMA8G
+A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTHv9/HaQWp
+6OM+287mR86SLScRajANBgkqhkiG9w0BAQsFAAOCAgEAUxWWIeCK+x0fz+2b38/q
+fUJRvQHFCIaDD49mOVXCKB67OsrRz5HNzc/LP61qmqz5fCgg6IreVVESyy5B4rSI
+wWVlV1D3DQUSeFx/Gk8mXgDYr/DW2YwnVtzexLr/Oo3vGSHGY9omrPEdugQerEFt
+u523w7WakMFgLai23/735gtBYuXujiwKYAW1np+cdAdukry8pYYjWNH5ttS+FRsX
+SkiJOgd/hYiSq01Qau6KpKdBBoPGh/np+uDuYsQwd132CoZxBr+X6eA1Yk0b2ZHh
+2fC7mTihVzU1iWMIuWEMKDwvSLB1cFdzEQT3YPK1X0wVaq7zbzt82gdb22+wzThS
+jdP4agkrbfK6YsutVVSl08TOOZdEGStnF2vyFoRMCLgJgsluXd4o21GgAKP0T9Vk
+JkuW150Dp2A8C9krzm65PwK5MVN5cOVeiaGITDLtOoQctw3cVgS6tE0RjsNd2AgJ
+eJ3+tFG1Hm3Bif5J+aiv7Nr66k5N4thANXU5j/Gfz5rVJCbsLGBtENWbuvgiSfi5
+lfiAgq8e0i30uLtiWKFLXU/InvXQeNta/sfckkeOQH8cjfCxaIrZbYlC3hq2jASU
+Oy5M/Li2lVnm1JE5MT708nS3kiaMRrqY/4XBcGTmnJFMqQ7OB+0ZhsYtfizhO5qK
+n9CDSAWdRluQIQ36oDgVn4o=
+-----END CERTIFICATE-----
diff --git a/roles/freeradius/files/certs/dc0.pyrocufflink.blue/openssl.cnf b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/openssl.cnf
new file mode 100644
index 0000000..51bfcd1
--- /dev/null
+++ b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/openssl.cnf
@@ -0,0 +1,20 @@
+# vim: set ft=dosini :
+
+[req]
+prompt = no
+default_md = sha256
+distinguished_name = req_distinguished_name
+req_extensions = req_extensions
+
+[req_distinguished_name]
+countryName = US
+organizationName = Dustin C. Hatch
+commonName = dc0.pyrocufflink.blue
+
+[req_extensions]
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.0 = dc0.pyrocufflink.blue
+DNS.1 = dc0
+DNS.2 = pyrocufflink.blue
diff --git a/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.cer b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.cer
new file mode 100644
index 0000000..87f1564
--- /dev/null
+++ b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.cer
@@ -0,0 +1,128 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            9c:cb:97:73:f8:4a:44:19:a9:cf:a2:cd:b9:80:0a:55
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=Dustin C. Hatch, CN=DCH CA R1
+        Validity
+            Not Before: May  6 03:39:28 2018 GMT
+            Not After : May  6 03:39:28 2019 GMT
+        Subject: C=US, O=Dustin C. Hatch, CN=dc0.pyrocufflink.blue
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:a2:93:38:79:ad:d0:d8:19:79:ba:fb:02:76:bc:
+                    6d:74:9f:af:76:1d:5f:26:96:93:4e:7f:e7:77:2a:
+                    9b:61:76:0b:7b:8f:25:6c:52:14:91:79:5f:44:e9:
+                    8e:54:c1:13:c9:6c:49:ee:3c:81:32:2f:a8:c8:80:
+                    18:19:75:b4:18:3f:3d:27:da:62:b8:bd:99:04:23:
+                    4a:66:04:7e:8d:6a:01:cb:c6:85:71:b5:0d:a9:63:
+                    1b:e4:93:6b:c7:15:3c:fc:af:28:5d:a0:4b:3d:78:
+                    26:cd:ee:29:4d:f9:1c:0c:d2:72:1b:f0:eb:2f:c9:
+                    bc:71:c5:9c:b6:3e:bc:cf:5a:88:18:6b:77:15:e3:
+                    37:a3:4f:7f:bf:bf:2c:c8:15:86:59:3f:62:f4:3a:
+                    2c:39:27:ab:42:e3:cc:7d:f1:d4:fb:94:06:29:3e:
+                    b0:c8:93:10:52:87:70:31:c4:2b:77:a0:17:8f:e3:
+                    c0:4f:8b:19:73:c9:57:17:a5:5a:14:b2:8a:43:98:
+                    0d:94:41:42:c7:dc:9d:b9:44:9a:f5:b0:02:01:49:
+                    62:a2:77:bb:a9:ff:3f:a0:b6:e4:ea:b1:e6:60:22:
+                    cc:94:94:71:23:b7:6d:81:21:4f:fa:82:eb:e2:7f:
+                    0c:7b:12:e8:3a:a8:40:9a:60:14:32:d7:ca:50:d8:
+                    38:45:8c:1e:69:63:73:6b:f1:d3:0e:0e:b3:da:ff:
+                    05:1f:d5:4a:cb:64:20:93:34:3e:d7:99:10:a3:d3:
+                    ef:2f:bf:a2:59:5d:fd:db:6d:b8:76:ca:a3:34:3b:
+                    a9:5f:9c:e1:b7:2d:4e:32:6d:3e:3b:b3:29:c6:71:
+                    1e:50:40:ff:25:01:0a:dc:a0:0f:7f:83:db:d9:32:
+                    2c:e6:cf:e9:f8:5b:d8:d0:3e:e4:7a:40:c1:7d:66:
+                    31:16:30:d0:5b:db:99:9a:20:dd:e3:49:0d:76:f3:
+                    3c:f9:9d:6b:4e:fd:6e:97:26:0d:44:d2:72:5b:ac:
+                    f4:94:2a:50:c1:58:6f:d2:9d:a7:a1:58:f5:b9:b3:
+                    f1:c6:53:49:02:e9:4f:d8:64:29:79:04:e7:c7:aa:
+                    8a:77:f7:45:80:3e:80:91:4b:c8:7b:bf:a0:7c:5f:
+                    04:1c:78:66:b4:49:92:c0:80:a0:ac:c8:9b:f2:a8:
+                    0b:05:e9:48:27:4b:b7:5c:17:4e:e2:e4:eb:76:99:
+                    a9:4a:53:69:3f:7f:97:51:07:46:0d:9f:c8:06:a4:
+                    b0:28:f7:92:67:ff:80:1a:3b:85:b3:f3:3b:eb:c6:
+                    95:71:54:cb:96:0e:0b:93:24:f5:ae:81:d0:2e:ff:
+                    00:de:52:6a:53:53:ad:c0:45:ea:cd:83:f7:02:64:
+                    4c:12:51
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                67:16:34:74:89:76:4F:B6:53:59:81:5F:81:9C:9D:B9:B2:27:D7:DD
+            X509v3 Authority Key Identifier: 
+                keyid:EC:79:C5:08:B7:1E:0A:67:C6:E0:34:31:3C:79:D9:D6:83:D9:49:DC
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Subject Alternative Name: 
+                DNS:dc0.pyrocufflink.blue, DNS:dc0, DNS:pyrocufflink.blue
+    Signature Algorithm: sha256WithRSAEncryption
+         50:bc:a2:2d:21:45:9f:64:d6:20:d7:98:f6:9f:2a:cd:66:b7:
+         fa:29:ee:83:98:f5:23:f3:d7:2d:6e:fb:49:08:1a:f9:2b:aa:
+         87:3e:64:f0:61:95:fc:db:fb:b8:b5:55:ba:f0:6c:5c:e0:d7:
+         8b:f1:e7:07:49:71:d4:28:ed:38:dd:67:da:e1:f8:95:98:11:
+         0c:e7:0e:fd:49:67:55:00:ec:8a:22:ce:9f:b5:4d:f1:1d:28:
+         b1:60:76:ba:13:f9:9a:33:97:6a:cf:41:97:10:2a:aa:24:9a:
+         6c:41:16:1f:e4:2f:03:dd:e9:83:62:77:0a:3a:0c:8d:a1:5b:
+         58:a1:7c:68:ab:40:57:af:f8:54:b2:d4:d7:d7:1e:72:74:17:
+         18:53:db:7f:26:8b:f3:9a:f5:a3:eb:3c:57:f8:4c:2d:f6:4e:
+         b6:48:1b:e1:87:cd:3b:48:cb:9f:58:3d:b6:a6:e8:e7:aa:7d:
+         70:94:af:d5:ba:9e:c0:24:4f:ec:e7:d4:76:e3:7f:2a:97:88:
+         2e:5a:55:df:70:d6:1d:ee:9a:d1:99:f4:c0:fb:dc:0b:20:73:
+         42:26:b1:9a:a7:3d:85:3c:ce:81:78:74:bd:a6:ec:f8:10:7d:
+         5d:e5:3d:77:1b:d0:f4:ff:2a:38:ca:86:bc:0c:bf:99:eb:d6:
+         44:22:f0:5e:94:cc:03:4b:5a:a4:d6:52:30:1f:78:cc:a0:50:
+         ee:9a:c0:b3:a1:31:cd:10:0d:4f:49:17:27:d5:19:86:3a:d9:
+         e1:70:7a:22:06:2e:77:7b:2a:f6:04:f5:3f:e2:28:c2:dd:55:
+         cd:6c:64:3e:1b:b0:38:29:cd:c8:7b:c0:68:f7:5a:a3:50:80:
+         35:e1:dd:c7:01:ea:f5:49:8b:18:0e:44:3d:da:11:c8:c9:c2:
+         58:48:5e:d2:12:a9:9a:05:29:eb:21:b0:b0:7e:ae:3d:f2:ee:
+         1f:1f:fa:d0:ed:8e:bc:e8:57:33:f5:a4:09:15:ca:49:bb:ca:
+         95:bd:df:5c:96:11:f0:61:8c:e3:26:66:74:4a:ba:e7:cd:b7:
+         c6:48:33:a9:d0:6c:cd:08:da:ca:e8:37:0c:da:d8:39:64:48:
+         29:85:30:a0:07:2c:14:39:82:ea:28:2e:e8:75:5c:e7:9a:fb:
+         f9:56:5c:b3:16:24:b2:be:18:b9:d1:fc:b6:fe:b2:9b:eb:37:
+         91:38:ef:43:24:c8:21:9a:4d:d1:f0:32:e7:45:c4:8c:aa:e9:
+         65:63:23:a2:50:d7:6d:a6:2c:db:e8:c9:05:6e:44:3a:6d:8a:
+         f7:53:86:3b:22:64:bb:7b:82:03:13:5b:7c:26:69:6e:66:2d:
+         d6:cb:dd:8b:fa:64:7a:a7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.key b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.key
new file mode 100644
index 0000000..8508fba
--- /dev/null
+++ b/roles/freeradius/files/certs/dc0.pyrocufflink.blue/server.key
@@ -0,0 +1,169 @@
+$ANSIBLE_VAULT;1.1;AES256
+37663237663065616538373566373764316562326461336431353932336635656435373765393561
+6535313633386161343337613335656633636363646134640a333436666236653065306131383433
+66353663613566323666323836346665366433363763363839623861393138383838326330613232
+6532643664346261610a316335373336636335653163343437303631623065343664393162396635
+31306336323030393962656234653363323736643335363736646364613638323234646463393431
+61313430633064306233363839663531323565383436663237616633326434623332636533613031
+38383331393365373937383463356234636436346432353462666532353030366234643035323737
+65386130376330316639313339343530333939366532313765366163343537396363373332646463
+64383333396266333734363738643435343165343134353630313731653938616635326237353463
+66363031653035333132363533333866343535653733333031623866376364643136396166343337
+64623532663663666236313437633933343064633731643334386666353039623237346165333763
+31656139353136343564366337333964353131323864656136373731653938373962616633643764
+30633239393933343230636432663561653830623366653465326363373735336436306561366435
+34663838346461373561303537303562393866633734643332643833333138663030643037353663
+37366161623164393564356261653164623165323737626438313161393832393633393532636663
+35616362366465333964343735666231383566356639653531383736333738643363306162633933
+61393831363939616136643532623365323436323463643864323739613666313831363865346630
+36323337386462336536623866343134396239663031373436373130303733323134393135653535
+63316563646230376233316238616238333435626634396461346138396230336562646163316631
+63356339373966303138383936366663616162663766353531363562343733633866336638383031
+32386563636636616163336266323230626333333837633835633036363531636363336165616337
+62646635346638356362353061613439646235656333353630393762323564643364383430353136
+31303437613237333738643637653531656330323636393139623438326266363939356639626531
+37306230316530666638336462396463383830616438386635346139306232616266633837343038
+38343538633561396139366637643265343162366533653032363734323666643065303064663034
+61343933626266643562316431666130336631386135633933376361386461373664356365646261
+31613561376333626662613236656262356532633239653131313966373133666235383234613234
+65336162613561633837336130646261663466306264373038336462643339656537323462346332
+34646566613263633333653935623730363032333032303330373038333830343837636136303765
+61663737333130316537333964653038356339313461653830653439353335626539393439643265
+37646566616639666136313635623965663231616161393638626562656264663866393661666262
+39633038316266353037613030643461386663313764363163623631383864313632363732636666
+35623662386235623938623135303165643062326237356533626531653137353031633262346333
+35376232643334313936336237656462393832366162623963363934323736343134396231306137
+36376366653837373832653630376439333733313866393637376332333631306433666461383135
+39363430633030323837326337313533636439623065666630653766313864323761656538633532
+33353939383133343662323131633233323333366466333134323432656666306361363166396262
+63623437333862333663653835326361353663663534393135633961343331343135663939383364
+31326135373532346633333866363533363533313234623930313062626466326465313037636138
+31666536346337636537393563373838343934643239613637616161646163636339303266323834
+35363433373830656463393933666532656636396536346436316561343235333765306432396461
+36383537353362323164636537393738633837646665396134313962386663346535616336356161
+62303164353736353466623062386164613036303735613838656430633264316266316332363934
+61303933663738306465656536643333396365646637313831336161373035643165616630386466
+66386138366365303835653633353734376466303266326331396232346263336534366638313564
+30316439666563376262366130343062323936386364663466363132393838326535393861343766
+36373530633531323465373239343737636163376332306132326135326135373561343330646462
+35363137653837633233383335333065386333666539333339636365343734353361646138323463
+34383464356532616139306635383836313538376434626239393961383336386236343533333962
+34366536366136316237363365333837303261656362643766346636346339636530313938363938
+37626133393862306466306663636634363333343762636531626365336635303639306532383363
+61356535666463653531326634353939303061623934616637613539636231653063333633663432
+35343061386432623739616337373466376232663234343930653962303962316431343261663236
+39346266356164343463353636663235646537663362333434653361613539356435376439303437
+31653933393266373565386465643239313435393535396266383263373864373234346332336537
+62353261656566393862626133663730666162626565626461363563306464643534333537626638
+66646531376532346435383836356364613634396363663433663437356637623236636562326466
+33643933643362373134383633636261396665353662346339666134333033333262323338303261
+37323736333763643061313636656131313034343864373738333330663734646530393564386436
+65313338623430383237666533376361386666363130383135393262653033373962383636363132
+33633038366136663863396539653038383630666363383036663364306264363634373732323932
+63323430653735653762636562653731656639613830306535363964336362393534306333663937
+61366561613765353065393333376535663338383362636430313230383933653062653532373135
+66663862633334343239643937373535393765366637663461393934636233633638366461643435
+61626132343063303365616432656330363061646333383239633734376238663834626636363037
+35656430383364616161313166326462656333643132646639353761396538393165323866376235
+65386432376166633831636663646566386539616230393266393438303133333238646536663263
+32613830643561333034316466663366386264353039353766386531346633346164316261346264
+36616234663563336339376438636662323231623966306530363039636232636135646434313935
+65303165653236326638646464303737666331643039353164393062343532393432376632356130
+65333035633736386132383462386235343732306432663933393134303963363538326137613731
+34326262653837363565333966366139316231356263343730643963343361323465633832653130
+64656366393236653164633534356261383364393664623633646336356364613863346464316465
+64333230646538386535663964393761613034386164383634376331663066646462626135643035
+39363464666335383230323330393361653464623561613838326134633862376533663365313764
+39343335666334343436646133633539663564636630316135653930623165656564666338343461
+35653336346165653834613032333831646464643334626639373062353435353836663233326434
+64643033653339306431653332643839383866373030363865616266663037356265326261613532
+37346263623330386365623037356462366364653561623235366432316133613961636465353363
+39363735333332356532653434363163316362313465376134313234643237623932303261353565
+34363763666666333537653039333263363730393434323134323531613934353235666534343163
+39656535643030633833646362666465356363363064666135643030396265646538663935303730
+33386233396331336332376633393239393038373134636563353836333563643034636163376566
+64633434303232343932383166323031346634363234376631663433623537653361623137303130
+65343362616130613561666233346235626562616630343562613732386231363663626662313039
+62643139356230613661386334663863376332666339323565363831336666633139616530613531
+38643038393539313562633235656364636632663039306337623931336133383830333330653335
+34373236333365373861356339393563316263313932373137386635313839646331323932373130
+65623665336632326465363839653866363765336236383639363762663835383161656434383636
+35633935356131316335666532383032356161323639393935326164613535626533343731326231
+34323538623466633834353165336335396537626338643464376638353363666365346432353038
+35333032656464653537383731643763616339373837636561666139306533366439373436376462
+32623336333465323632613934306231363262356339376233393230323432323066336634366430
+35356461303138343562623032336662373531633332313439323765376230373231313534643034
+30343932323033633866363035303961353836333465316239613062326164326537613538646661
+61663433396132363238393363373464653534633036613365353466636662666631336537666363
+63393631643534326266616636656562316539303665636266396161316636313737366537663332
+30643730616264333438383262633765633832343638386336313637306336636563356238363730
+63666332343866646233383130343363303265376433306662303364663961353237653139386134
+34313830323961613338356166303064393664643537383065376132396566613630363330366333
+39333037383462343564316338373731373232326361633361656463646130356436333263393862
+39313063393938323439383763393730623466393864376633633134393262343132343263386664
+63333933643332613637333465663534316230343265623130613130393166363839336261386165
+38306466343031356561643732613261303238323762666261333536313331633565303139303261
+62333131623363376631613364306338303165353438386164663463616432633438313661633831
+39303362666432353363333036313635376438623733356139363732343734326362393130353731
+30316333336364353966333161366539626266323865313565303561346637316262383335343133
+35616161396363653938336364306336326431303834666635396362613265646539616235353232
+36613062326436393265323532373537633334663338613133313136383762643764653139323762
+61306532353864643735396631623763636563613239316130613962303330633261373635343233
+63336532346637386366363165363361613235313666323534643033663530343361393366336262
+64653866336433333037626134336437346665356666386230666666333461616164303939373632
+36656164323262303366646338383031623435373430646534376634626635386165316634623832
+38633030666662343166613039643830666466633361393062623634613338323535363061366239
+33353664623666363163623964636538366263333066373930353131633665393164666163376664
+66363130653135633462633965313864616362343337356164653533353665666464633438643934
+37636665623538326564626434363433373537323130376365303437353236623538303662353235
+30613836613633336330396566343234643164646131333761663964306536623636633839656336
+61363132666165373263386266353735666336316364323463336432636234623566643536626162
+63663263313665656661623938363464646532343461383738666536636566366162326338636365
+62316237636330643666356130663334616131353966663339663634623438353832376230313535
+35356665376364353362666130666362656333643634303139623262376638656234396465323833
+38383961663939316464646562323466626663356131626537666139393762306433613335393839
+31643464633162313131663134313630653464326564353234363265316338306163323063383764
+61363761303339663266663964313161323435336335333038653662373731363632633562386539
+63663130633933393839613831666337373762396462666533323866646164306639353264653865
+35383564303735326464356532326334626238353164313837626231366562323839323164663338
+33346234333238313662613332383938343961646232353965663863343763373232393638646637
+33626638656234663733333564626336356634386632636637303861613361353430356566633866
+62356539363965343065636130383066333337393535653663626333333938626166363465343864
+30396330393664383761653732623765626336336439666430343366653630616665323931336539
+64396531383164303461393261663235643332376564393263333561613564646433633566336433
+35643366383138636364636161386662653461623163636239323161313233323139343965373764
+36653832356139643430396235313434623635666333363430333364363535626661663238333036
+39653038633161663563623665666337356465623136326630393337623062316432663634636533
+37356232656238336332623438383963333964303666313537326265656131323763353666643261
+63623937376337373562633233633261313631626366656438343535386362613230353864356338
+64636565346331376134383166393164366364336138356638656331626238613232376136656530
+39616234363364343233313562363632663966376336303238616666626161323036366634356133
+62313461383161366166326131386263653361393231666634653162623232363431326664376266
+34303066333831353763626436376230386361653734646432303733626239633334306566336334
+62313665386636303332393063653063313530636437366439346561313961363738656666303231
+39383839323866303136643362343934376261303537643837643631346266323265323838613565
+39396235646631613838343934323537393364343231343834616262623530313732653939663735
+30663839326431626662343961383935356138386362626266306236613333343030643330313633
+38306133363837396562363539613264353936636665666435656165616431336436613632663266
+33616565346561316365373031336534316663623436633139393639393834356262343632653731
+38366464643239653038636132656130343830653262313434626334336231363763356133663037
+30386361643763663632346462613461366565653436613836386638323336316433386233343862
+65653136626261393335306331396237376266326663663335363835636630306262626366636131
+66303536346236613762623632613962643361316264636462303464353661333962643963646330
+30666464373038653466613861636138386164646536613764663632663533656265356337333035
+66613737653539666533653335343134363464373837386239353830386336663233383437336533
+31616630383464333234626631383235356334613663353134353033663433326539333939363738
+35376134663062326335643932366239353936373735653539363633633230323932393832326131
+37663530646663396133623738656338376561323765313431353636353732343230643536663733
+38653234323238313966643662373337333633653364663839323930343438313636386134326563
+61366164313737663938613037313762363363336263666262376564333762386336616336616638
+35333137626336336537346632303135653961616331363438333961393264663737636265376136
+33326138653561656235636530313339623864613335343833346163353766343435343862666436
+62663563363234343537313036353438336636616531356338333265343961376162373063336139
+61353335643564313839353666386463366566653330393030346465633333666537313164643138
+65663363313166653662323664346362623830393932386261316431306136393937343133373734
+38393439396437363231363830316636356331633366633765313839623633643339623861383363
+62393339383962333231643238613739613331623664623631623233373131316133646533343961
+34663039323131373632626637633736343462323865386238656636316332636264366461336666
+66323336666262653764653332363461396433613261313335613763666666313538613661666464
+35623135313561303631
diff --git a/roles/freeradius/files/certs/dc1.pyrocufflink.blue/ca.crt b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/ca.crt
new file mode 120000
index 0000000..b737cc4
--- /dev/null
+++ b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/ca.crt
@@ -0,0 +1 @@
+../dc0.pyrocufflink.blue/ca.crt
\ No newline at end of file
diff --git a/roles/freeradius/files/certs/dc1.pyrocufflink.blue/openssl.cnf b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/openssl.cnf
new file mode 100644
index 0000000..f279228
--- /dev/null
+++ b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/openssl.cnf
@@ -0,0 +1,20 @@
+# vim: set ft=dosini :
+
+[req]
+prompt = no
+default_md = sha256
+distinguished_name = req_distinguished_name
+req_extensions = req_extensions
+
+[req_distinguished_name]
+countryName = US
+organizationName = Dustin C. Hatch
+commonName = dc1.pyrocufflink.blue
+
+[req_extensions]
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.0 = dc1.pyrocufflink.blue
+DNS.1 = dc1
+DNS.2 = pyrocufflink.blue
diff --git a/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.cer b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.cer
new file mode 100644
index 0000000..dbc2dfa
--- /dev/null
+++ b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.cer
@@ -0,0 +1,128 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            31:79:0d:0e:0f:87:47:5d:8c:0a:9b:2a:37:86:31:95
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=Dustin C. Hatch, CN=DCH CA R1
+        Validity
+            Not Before: May  6 16:06:38 2018 GMT
+            Not After : May  6 16:06:38 2019 GMT
+        Subject: C=US, O=Dustin C. Hatch, CN=dc1.pyrocufflink.blue
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:bd:e9:19:1f:82:b3:11:be:81:b0:ab:d4:3e:2d:
+                    e5:2b:88:60:3d:10:db:54:15:6a:02:b0:fd:8c:79:
+                    02:91:42:a0:5f:d8:7f:70:14:ca:3c:53:a7:e7:5e:
+                    f6:81:47:28:ee:34:38:06:52:18:d4:a9:02:dc:85:
+                    ab:be:f0:7a:62:41:85:dd:46:7e:f9:28:89:90:73:
+                    04:ab:a6:e8:82:39:a7:80:5e:7b:4c:3f:82:59:55:
+                    a1:37:a2:0b:20:c4:5b:a8:a3:f6:d8:93:d5:0b:a8:
+                    d8:9b:57:1d:f8:0a:c5:62:51:6f:5b:26:fc:bb:96:
+                    4d:bf:5f:f5:21:0d:68:af:af:3d:3b:b1:5e:aa:7e:
+                    e6:15:1c:20:24:b0:95:a5:8f:7a:bd:0b:31:75:e2:
+                    90:83:a0:a0:05:87:5a:cf:53:bf:d2:d6:37:d3:56:
+                    51:d5:50:02:b0:94:1e:2c:1a:9f:68:32:74:ff:52:
+                    71:b9:85:bd:aa:0c:4b:5a:f6:78:c3:9e:f1:a0:2c:
+                    e3:f6:28:f0:a9:2d:bb:aa:21:cd:1d:97:d7:e5:a0:
+                    7b:2e:af:03:d8:e9:8c:0b:7d:a6:e2:3f:c0:61:3f:
+                    9e:81:73:fa:2d:e4:5f:f7:3f:72:bb:ff:35:39:bb:
+                    f5:96:54:54:b9:62:21:c3:47:ba:07:63:92:d0:b4:
+                    05:e2:87:7c:26:11:e3:8b:a7:07:db:36:0e:6e:47:
+                    e6:dd:fd:53:2f:a8:ec:bc:1d:e6:1c:bb:39:33:5e:
+                    01:77:9e:bb:eb:27:1d:b0:11:18:cd:e5:26:b2:a3:
+                    6c:b4:c9:6d:c8:aa:54:44:7f:f1:38:da:0c:97:7a:
+                    76:0b:71:30:b6:3f:d5:a3:87:d9:b5:22:ba:30:13:
+                    22:dd:da:e5:68:40:57:89:37:15:95:50:c8:fb:6e:
+                    e3:7e:23:64:9a:0d:73:3f:08:0d:a4:74:f0:f2:36:
+                    5b:d1:d4:7c:47:ca:84:05:49:27:d3:8e:d9:37:05:
+                    f0:b0:8d:bc:13:c0:2f:b3:63:8f:61:7a:5a:ed:84:
+                    69:cb:a1:78:e4:a6:fb:7a:99:41:47:ef:3a:80:77:
+                    1b:33:fe:4c:90:9e:93:ae:71:5c:8b:ca:cb:7d:3e:
+                    7c:dd:ba:5e:65:98:54:08:1a:03:7b:86:2f:44:92:
+                    cb:7c:a8:3f:15:d6:68:a1:48:93:90:6a:12:e0:d3:
+                    5b:64:bc:9b:93:e3:37:32:9c:4a:49:5b:f3:a0:c9:
+                    3b:c2:cc:86:19:0a:65:72:11:2c:d3:89:1b:1f:58:
+                    e4:8d:ac:1e:96:5e:50:e5:7a:d0:b1:25:8e:18:4e:
+                    56:0c:20:c0:da:e2:73:51:d3:bf:5a:92:fe:4f:30:
+                    05:7e:97
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                B6:C4:42:2B:27:20:BA:35:3B:B8:6F:F8:69:21:D3:FB:DC:98:12:73
+            X509v3 Authority Key Identifier: 
+                keyid:EC:79:C5:08:B7:1E:0A:67:C6:E0:34:31:3C:79:D9:D6:83:D9:49:DC
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Subject Alternative Name: 
+                DNS:dc1.pyrocufflink.blue, DNS:dc1, DNS:pyrocufflink.blue
+    Signature Algorithm: sha256WithRSAEncryption
+         08:d5:6b:6c:fc:c9:2e:7a:7c:8c:84:ec:50:d9:cb:b1:17:04:
+         d0:df:95:66:7f:5b:4c:0b:95:37:01:19:e3:77:bb:8d:eb:86:
+         2f:f7:28:ec:7d:a5:65:14:50:1e:b5:94:8a:9c:f6:81:96:ed:
+         ca:15:0d:fa:fe:d0:3c:b8:97:27:53:ba:28:93:c2:8a:ea:1f:
+         f0:b1:c6:d6:06:67:eb:75:51:48:95:f5:41:9b:73:e9:ba:55:
+         71:b8:12:7d:99:4a:e2:27:a6:86:8c:f3:8d:b8:74:3f:54:f2:
+         53:f1:af:ef:c1:ed:bc:07:5f:30:d3:15:10:e4:eb:30:36:cc:
+         b5:e6:31:fd:8f:81:56:74:b4:91:db:4d:d0:63:c2:21:22:94:
+         58:52:e8:db:49:ef:01:55:82:3c:02:e7:37:d1:20:7e:89:db:
+         40:32:c9:97:4b:1a:15:ef:40:fe:56:35:0f:e3:ff:f5:df:0d:
+         cf:cf:e2:b3:ef:39:7a:90:de:c2:38:4b:ad:2a:e9:e1:e5:90:
+         47:97:56:96:02:b7:cc:39:9a:8b:96:92:13:ff:59:df:82:16:
+         00:ec:ba:ae:87:ee:f8:75:d8:bb:a1:3e:0f:82:26:f9:24:36:
+         7b:eb:cf:04:bf:4a:ab:46:97:ea:77:c4:25:6f:55:97:d3:7a:
+         b9:cd:ae:06:a3:30:bb:42:43:74:5c:85:bf:f0:ee:69:95:c6:
+         50:76:56:a9:f4:7d:00:66:35:cf:2f:4e:72:e5:cf:39:2b:74:
+         2b:72:2d:d2:83:37:6f:96:81:65:73:0b:2d:8c:7d:4d:33:47:
+         1c:57:d2:eb:f2:86:50:0c:0c:cd:01:f9:be:35:9e:49:38:7c:
+         f1:30:21:af:f5:5e:39:ef:96:88:e5:c8:99:a5:34:24:7f:e5:
+         89:15:71:b0:af:0b:12:fa:6c:cc:15:b1:d1:e1:03:8a:ef:2d:
+         0d:de:69:07:45:9a:0b:24:0a:31:aa:ed:d3:99:33:50:01:af:
+         a8:77:2f:fe:f9:cf:93:87:10:3a:98:b7:fd:62:13:90:28:89:
+         31:c5:c0:c3:f5:aa:18:9c:e7:29:02:21:ee:bb:0f:8c:23:7c:
+         05:f7:d4:10:90:0c:2a:8f:d2:43:0c:77:d4:51:80:fc:d6:79:
+         b0:0c:4a:35:61:84:5c:ca:05:df:fb:31:34:c0:7d:da:27:c5:
+         cb:4f:22:fb:a1:a2:b6:78:8e:85:6d:72:dd:c8:d3:4b:9e:9c:
+         a9:07:7b:48:00:6b:a5:f2:b4:64:ee:8d:7c:87:12:62:f9:93:
+         b1:c3:3d:07:80:88:ed:d9:46:ff:88:f8:f5:29:74:f6:15:87:
+         a8:1b:2c:b5:8e:a7:9a:10
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.key b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.key
new file mode 100644
index 0000000..87bd5e4
--- /dev/null
+++ b/roles/freeradius/files/certs/dc1.pyrocufflink.blue/server.key
@@ -0,0 +1,169 @@
+$ANSIBLE_VAULT;1.1;AES256
+36393537383431323733383835623334633934343433326164656166326436376439663630313837
+3731376365623434376636313066373536303630303137360a653634323163306465386132303732
+39333063303966646233346339643333383933613564626230316663363735326562333233636538
+3834316563343138320a303439313734353932656139313065643339336264663438633534643963
+30623234623562306436303635303036666339666463303963626565646132613535363632393935
+38633765343863616265623564383364356565653330363739313136326465376264373831623966
+36346564643532326539646162346137396436623633343334636532383136346235326139393463
+61643063316363666239623261343533396130663561373536353530356433353864636164353734
+65623766633366643139633465633838633832343037323934316263626636303536346461633839
+62366261333535616564356236303339663034643633613634343934363530653133353930326438
+35663436636563356432663639393565386566613630336436633635343035303365366132626234
+64353762616335623463316336616162653261323836666664643965303765666533663933653366
+37646439353832643638633564393466393233353139333838653735643032623964313630643765
+34313531623364613439373437383132653530643239313431646437346461623336616139623439
+33633036643539613330326534313464363835356235353831623262626637646630343761643433
+30336335316265646432663364663434653330343164383962343765343733666130303634343066
+37356430326638343633396462636462366333643430383136393736623164643439636633356466
+35613132336462616463366464623935353063633335626665356364623866353464646164633631
+30373432383764363762653463613864626538343037316566643761623363316337646331373765
+37376663313336366663646437366436363637643939646361323331616662346433613566616134
+62623132333066383630646539313334336130346234323839326161306135303638393965663863
+38386162666237373930623165303330336533316430616331333733666261663137373962346130
+34396532376631356164353739636238626538623761303565363964613235326161376232356133
+30366639303536653737623361353038333730373034653265343938656232303761663937353161
+65346163303837353038366663303963336134623930323866613531623937376564633065303839
+33306336313232386336356163653363626638393365633565386336643438623836333533316365
+33356637393038636561333233353561626236313538363464363431313666656563633435633562
+39363033636262373663626639343964663937333137313635626432663235383133323863643037
+61303363616631633033653933303964376630633665396364396161616563613637353865396237
+61363337353732343761633963636432313464623464313839653138346234343565353231373130
+32656237643866653563393661666166643132376462373937373439633064626664346662623037
+33373462636463323032316530616332396339343761636538353664383066363463323637366235
+37626663656238353662393639316264643338633961383166386231663666666132643036643765
+66333639353065646361373932336137393433343161653537623430393032663539343238626633
+39643131316262366663333235373231326662356633323739353162353635306231336664373365
+66366165623333306231623062303832313962313064313337333937633362633233656337383135
+32346263386363396533373632616132323863396162333234323934613339353231316239653062
+64613538346130303366616535373132383065653639653938643830366666623132383833366164
+39303765623839656339336166363633323962623830616439653837313538633633316437653639
+66386331636230313566356435386666653538306562336366666566376438623562393231303532
+61353236383364386332343361313535363963343230333763346135343737326636383462663961
+31626434633531373339636333383762616139393934396261313731356531323234656661393066
+61653737333937656538613531366162346631343938323562393361313761653837653066313436
+39346438653830626461333237626463393663613864653231393263623236316534393536616338
+30326665343766643639373062343133396361643330613035653433343832366230636636346334
+32646563666466303137336533326133666630616633646337633236393535353936363237633034
+64663063333438356639323938326663306633613738643739653433353232363761633734623230
+39303430356466353336323062393831303434616437383164626265373633333437633133306161
+35396234333765633336643266306332383039326430663665383737626561616566636638623431
+36343232313062363661356334376238383038623034646539616564323135363863343834346439
+34386130333665313838366366663837356561383431316239636639376632646264643534326537
+32666137333937343361313038636135613662373636643562393635653233303730373636373836
+64623432363530323634663761623137306139616630666632646461316131613338333665326133
+66393631356265376230353638323765316264653363623733366534383439366437613234643765
+35623365666332643864636663616139346439366261306464366334326532323365343832356239
+62663230643238363563386265343830323363326334623131333237663738333831666532346262
+61353837653635323732326131646138636233323438323764633465653762363037643230623366
+35663632383639626633646130623537643336343335663164656639346235643436373563653132
+37333835663962363561386266386131666233373838383032663736313863386630306265626538
+64613062663230353861376534313635373863663738613434653863346162303739393732666436
+62623561383336373462656236383531633662373633633133306536623935333338663739643265
+38633565333364616537666436363333663039353038336161356165623138346135363161346262
+31393139383539333633353065623864656535643237653639376465356164336663313465343136
+64303463663463626162346366343263303362396434343765303034353161383261316331616632
+38306536346531633162343264323431653563313038363966326630323031356434323561336635
+61656634376631303433613361353235626164356634346436643965313337323163643866366661
+65623931393864613862363036633762666564363330376365323965386436633136656632643566
+32356666363439366232333665616261383763303966333965343835666630313134613233343161
+36333765383433363533313434346365326631623562376561303165343531363935313332373030
+66396236343331346562383238393130343238653039323264393565653961303539386434626661
+64613566343163663134353965323662663836633330363038373766333439323865346663313033
+30306366323431363765643037666233303862323233633939663536363762626335653366646233
+36313336323034643361363430643835653636346230336539313063616430316264356530346332
+30313539353334356435643066306337306464613031376634346461613831646436383039653937
+65393536343536613163663661383239633063616333393734333463636461363965303361396564
+63396631653962623834626262613339633463653136623163393338323765316631663261626633
+34326237373235643939363766363930353133646566613561306232643266313161633433303637
+33366339333239353335623363666231323665356131306335653733373239393639666462326466
+39333064343833636132303466613238663038623162386365643665666562346338396433323936
+30626232336330333464633136303464313363323365633661393965663536636138656639323464
+38616462306631333264653237333535333030356139346631633265663732646239313061373636
+63656566336362623437323165393264623337633534396131356436396663363130623530376362
+66663833323835373835323135666566396234393937646632663336636635623362323038313032
+34626239363033613038303236656663346563336334663933363138376330626666666138616466
+66663237613134333831386632353961323061613861633366333830643737326136313961343861
+61323937313862393063636339636161323131613065396631623038623164373338633239633661
+64636165613434393662343761376535336638316534613239663861393861623461306264373766
+35373631306363333766316363363934386537366332373139356134376566343161363739663737
+39666433653830313539336630313731313636386363383731646164363965663063623963623933
+38326164656562646236653933373465353238366237353936653734346338386265353037363964
+66643562323237323364376439613237653232313461623936636337623538386239326166613763
+65363334306530666330313165653535633162393965666666316234396166616364383461313462
+35313561376266306135653234643633386437623161316432303030373038333930373964353334
+66376139653532393663613765616363343339656631393861633433666639323038386362363036
+35363865616131653137326565643338316661326638383863373930336162623462383432383762
+66646163343733623365313334623038336530633134376265306361636535356631303037653833
+30646632656134623632366633343731373965353038653734663835353666333936613762333839
+63303964303566653865616663353535666364656438646633306339393535363266663363663464
+35626231363764346235633861613033653565633131343932333866373834356335636632626563
+66633031333236636262376464663438663363656336626638616432616233396264393530663537
+37353734396365623431386631663036366464633531313034353962613431353163353165356565
+38343437633934616535346561316636323236356431303265396536613361313438643137656366
+31303430396134633933663161663239313661643363636533643163613466353366643636386439
+31356362393462623339323762663865336335623939316232373065383438623430323963346132
+34626463383534376265626335626135323739653263666333623737363133333261623631316365
+64303232343539316630373434303630393665623331363561636331376230626434373939613961
+36346466333061636635643136663164373764343263633966306239396361356337313930636539
+37656261343434653763656263386432616137336661336336623030333763313737613334656165
+36663739613531393936303635373361363735376433373066663431663264313433323434383261
+31663437616230396631333532653033363832316531373064626339613436303366653036623537
+38666139303431356135366439383265633562613930383337306665633537656266303866346665
+36373937613633346365303833346132656665306432633132613432626536343265626238346134
+34666134303733376130386163326237376530623866356437313538323862363437356365353165
+30666332666336393063663361643436376461613039393239336632393661663739376536653766
+34363136326363336531326537353638376664326130643462303466313039363966363838623865
+61666462373962353931323833363836316363313836303431313033313339626130323165336335
+63343830303835623035366333323631613037626461376336363038353364306662626262613530
+66356130363331663661643763643336303937616565363532396638626564333662313535366139
+63363365356336326330333466343137373632353331346639396135623636373939613435373935
+36653336316639396231623033383764306538663531616639393239303964646139666364343764
+61303036653164376239613264656639656536326531343331666164613833643236336666346263
+61656165363766313232366330623563366331383961613039313663313361356435666265653265
+31366663363639323231336434323930313861343737646463323230333164366366363266613864
+61343130343036666661626261323463323332646261656566356531383261346433646336396336
+34343934326432326663326163373233363739393265353635313664653063393330623735616135
+66666432656635343830386430343135363239613433386137666264303936353665653866356131
+37363531623835616165396463323938343861643436386662626332396563323834653835633336
+63383531613765356363373730343831633738336133613032623965633262613538366138616630
+30666535643930613265646630623237633238373033663865366631383365366634643363333133
+65366432383530646239356635393732326364376232613535343563313833333865316539393038
+39333037373539623237363736313464653161343830396138643433363038356233613736353639
+30643565336639303430663231323762613964306537356237323531346261353137633532653263
+38333534646232626561396132333139346431653735633830363766353331363531326662396565
+62303265656338353362303737366163323463386265383161613330313762643065343266663733
+31393861633361613331306161383363646535353739346431643339333965666666643364663761
+63376134383738323064336232333464623037393235656465363731343766613061623930646530
+66313661313961646662613765303566656434316261633463613634303166613466666336636563
+32326263306365636462656137663462366530383466313637316435396131633665353933366261
+33356334623865376133666439333231643832353931366138346437616331303865386136613939
+33363037383761373838373430333864666132666637363631323066306336316366353461333266
+61376261303366393561303439626132376637356538643566363066646138623461616139653962
+32653964383236633038303665383266646538376135313835656331386434616164383564666137
+36646162343131613462623232306639623639396433613266383966363631346538373365326134
+64653263643166613036316165366566626233353865663639613338396266333366396239393864
+32363431343639653035383036653164373434366130376462623233643764373035363835303733
+32343338663164353039393236613137346230653933613464653736646361623534643135386131
+65333937616535316436366132326537646465353266396437653363626332393661633938393936
+37333138393634313131393536653836363631366235653535343363663838363062623138633166
+61663363663663383435366539643636613662303061646431623536343662623563313636663331
+64613063356464303036626261626536636162366430343435663030313464356662356565393065
+30323835326130316666383966656133646439343835393139366630393761376633323464353632
+32636166633039663836396431653536626534373538393739396264366166323363666233643031
+36323365316265613034373134333331353730343163393435373562626365663935336566613633
+39646162356432363762623130353836396333333237393730376466363433386663323030616438
+35353238376262323139373537613064323761616234376335396632656536353732643730633131
+31326265353836363465386465356233326131633833323865663531636134643033356561653532
+63376237396234306331363534373230643136393432353965383139323737396261316534366662
+37373661326435373538643334353234393634396430646333353934356365343536383264326261
+36666163363265653435373234626262343661616665316565623461656533316134663735343138
+66626531613537353736323638386337633735336531623131396166333631633738346566636536
+36613566323631376535616536326235396536656135386137616539643530346636333534623634
+66363262633963376530373863633430306136663664376236643335613834396338333330626562
+36623862623862386634643636666237643631313033643965653832316665623731663965346163
+65333436393938613931366132633832313436363866383736313534386665643164376665373733
+36633830666131613233363935336561613134393838653566356161373565396162653339643637
+65383433373366636261653339396431613330633038333836656431363236666532353462643339
+66306166333038646334656362663965383165336565663635613632323632306230663735636565
+62616135346539366565
diff --git a/vault/radius b/vault/radius
new file mode 100644
index 0000000..b40c83d
--- /dev/null
+++ b/vault/radius
@@ -0,0 +1,12 @@
+$ANSIBLE_VAULT;1.1;AES256
+61663334623765393836336136313861376464343130363661346461636533643130323236376263
+6330373131633333666462613539313730653265363939630a386565373538303237313033343939
+35333936366264363933333335633537633433353831323037363630353062613363663561353434
+6332376438393336330a643437343563613664373331333235393362663362373331373666343064
+61613733373332316231336134376430666139666536316532653263636337313563396565373737
+64393436376363323838663633356163656663633866343063623764306230363861643235306564
+64333534366435393231376561376165303464643739666532316638386264643533383363363130
+39376663383734636230653737393039326466653338386361336563613739333864313233653039
+65643662386533383735646463626262323036303338393036346132383034663434623665656434
+65623564653264353733326465373138373433396639393763386638376535616463623061666661
+643965666132633564313965323733346539