diff --git a/group_vars/all.yml b/group_vars/all.yml
new file mode 100644
index 0000000..5bb1058
--- /dev/null
+++ b/group_vars/all.yml
@@ -0,0 +1,7 @@
+---
+# shared deploy vars
+ntp_server: time.nist.gov
+grafana_admin_user: gadmin
+
+# bench capture backup (rotated 2026-08; see D.R. note)
+backup_api_key: gbk_7352629c9e4144bed362