26.05 refinement

.editorconfig

@@ -4,10 +4,13 @@ root = true
 [*]
 charset = utf-8
 end_of_line = lf
-insert_final_newline = true
-indent_size = 2
+indent_size = 4
 indent_style = space
+insert_final_newline = true
 trim_trailing_whitespace = true
 
 [*.md]
 trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2

.gitattributes

@@ -0,0 +1,2 @@
+* text=auto eol=lf
+CHANGELOG.md export-ignore

.github/dependabot.yaml

@@ -0,0 +1,14 @@
+version: 2
+
+updates:
+  - package-ecosystem: gitsubmodule
+    directory: /
+    schedule:
+      interval: daily
+      time: '06:00'
+    assignees:
+      - 99linesofcode
+    commit-message:
+      prefix: fix
+      prefix-development: chore
+      include: scope

.github/workflows/automatic-submodule-updates.yaml

@@ -0,0 +1,7 @@
+name: Automatic submodule updates
+
+on: pull_request
+
+jobs:
+  update:
+    uses: 99linesofcode/.github/.github/workflows/automatic-submodule-updates.yaml@main

.github/workflows/changelog.yaml

@@ -1,7 +1,4 @@
-name: changelog
-
-permissions:
-  contents: write
+name: Generate Changelog and Release
 
 on:
   push:

.prettierrc

@@ -0,0 +1,7 @@
+{
+    "semi": true,
+    "singleQuote": true,
+    "trailingComma": "all",
+    "plugins": [],
+    "overrides": []
+}

.sops.yaml

@@ -1,6 +1,6 @@
 keys:
-  - &master age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr
-  - &host_luna age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez
+  - &master age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt
+  - &host_luna age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr
   - &host_mars age1epkfxmjk0tlne8rmxqq77u06q3lnf5xfjcrwq42nuasswefndyfscw84cy
 creation_rules:
   - path_regex: hosts/shared/secrets/.*

hosts/luna/default.nix

@@ -26,12 +26,12 @@ with lib;
   environment.systemPackages = with pkgs; [
     busybox
     git
-    rustdesk
+    rustdesk-flutter
   ];
 
   hardware = {
     nvidia = {
-      package = config.boot.kernelPackages.nvidiaPackages.production; # NOTE: support for this GPU is dropped after driver version 580 (and there is no dedicated legacy package for it as of yet)
+      package = config.boot.kernelPackages.nvidiaPackages.production; # FIXME: support for this GPU is dropped after driver version 580 (and there is no dedicated legacy package for it as of yet)
     };
     openrazer = {
       enable = true;
@@ -71,7 +71,7 @@ with lib;
     power-management.enable = true;
     rclone.enable = true;
     sound.enable = true;
-    sunshine.enable = true;
+    # sunshine.enable = true;
     openssh.enable = true;
     qmk.enable = true;
     steam.enable = true;
@@ -92,6 +92,22 @@ with lib;
       geoProviderUrl = "https://beacondb.net/v1/geolocate";
     };
     getty.autologinUser = "${username}"; # hardcoded because this is a single user system
+    pipewire.wireplumber.extraConfig."luna-20" = {
+      "monitor.alsa.rules" = [
+        {
+          matches = [
+            {
+              "device.name" = "alsa_input.pci-0000_00_1f.3.analog-stereo";
+            }
+          ];
+          actions = {
+            update-props = {
+              "node.volume" = 0.1;
+            };
+          };
+        }
+      ];
+    };
     udisks2.enable = true;
     undervolt = {
       enable = true;

hosts/luna/users/shorty/secrets/id_ed25519

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvOXI0Z0ZIM2MydzUwWTBX\nVTVhQ0lVR0lIS3JjSjN3VzNmMU1qWFIyWVdRCmhUeHd6elRuM0RMYW5QdHBSdnlo\nWmxPRXdlQjJtMUpxREluSHpPZUlpeWsKLS0tIGtKTExwTG5XMlFHTUQ3eXRDL2w3\nRTZTWGZkQUtHT2pVUU45RTEySmxsMTgKyrJUCN5ooCRoZe+VJeEW1mIPLnTIWxRw\nZ3PzJkw0YPEq8B+RvWjKDeip5uj1RWJOgU5sl1ngf5CbN37uUIAlAQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzQ3R0SW9vck5YdmtkaDlD\nTDJIbWFkeTVMOUpaY2hUemMrK2c2aDJjbzNVCjdNVmovb3VGQ2VWTnhaVS9kZyt5\nN04wNXNVblJzN2o2THlXMGRyY3l2MGcKLS0tIEQ2a2tiTktpWlViditZUU9CbDJJ\nN1FkWkdIZjl5elJiWS92Z2U2N1BYcTAKSWthfiDVJ5A41/GdUaLHOOP7JU+vGmEO\n7bj84M7Gcq4o09EZo9BIIVfUGsKQ6vH+dRb5NrjELK0ngeybsPF3dQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVzFOQlMxdzJLRmtOMmd5\nQVIzYWwwbkRlb0tJOTRKcFlzUlVqNnNUSFRVCkd3SzNBbGhQNU5LL2RKbWlGcEh2\nM2Y0NlNicEl1S2thSHNPZDFubUIvOUkKLS0tIGNTQTR6dmxaV21UNGN2T3FoUWFG\nMDcxN0pIZjVORDRTcmhMd1RUaGZ6djQKySiQjwuQwTx8WmAqrqu94pByd+cUM5O8\nG38dnvUaRhC5DjShbinPJiVdchV9lqllU2dYaWq9voY/RCJH4EMm6Q==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYUXF5U3dKM1NKUVYyTFNE\nZTNYR2txSzd0cHpsR055S0lnRWRuZXpVN2hzCm1MQ1dqbzRGUVIyVXhIWTBqeDQ3\nS21QRHJsRTJEOFBMK0YxUVZyYVlDejQKLS0tIGRRbE94S3dBWFBBVk9QM1FYRGNO\neXF5V21Uc0dIamdKdGNiYzltWlVyN0EKZf/zyXhbN9DJHeyrWFAhaTJr5yR05KIP\nT6Jy2cgOxt6MaqjeOcxyWdF8mA1BZBoAdipi1mD68L6Uth91gZGHBg==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-10-24T11:14:20Z",

hosts/luna/users/shorty/secrets/id_ed25519.pub

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0MUNCU0VEaWF5cVNydGNQ\nZXRKNzlla3k5RkRNZkM1dE5oN29HeXVRRDI0CmkrM2U0TEFMMk9LUEhDQzlBMGpQ\nKzB5bHFWRnFhR2xrMHpYMVdnUmJSNUUKLS0tIEVuUWF6N0YzUTVzR1lscnphWWxy\nNy9UaVNITFlxQ3NnNWNDMzRWVnkxUGcKvKmoT3SqPcyM2Fhoxc8mSJl06rV8hlhI\nFftuxCOO/04lIA7FHHrEHRwON/OZKSwe8ZHkq8ojvUyhPsS9CF3COg==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBScElsRFpOeCtTQVM5bUgw\nZk41QStsY2k5TE0rVUZ0a3Fic2hCSVM1ZGljClA4Y1M2ekF4Z1BmRFlZbFFoSjY4\na3ZkaGF2L2hTZXB0VVExWWVKbTZiRlUKLS0tIFBnbVhMREJVeHAwYWM0dlNUbEV4\nbUNOK3FVakZkQzR3QjFGemRPUE52L0EK+wlAjUa2D8w5z10lf04OJ9U5ZHqqeyuc\nVPo7wy8p1/aH0D1RN3882c90khDYrL5AF55mj8BC4VEOpEUsKwR1Dg==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOOUZmOHRBR0NkUkdmRnk3\nMGI2QlBVc2RqbHMvS1FCSmV1WHBNSjRYZkdRCjhaNk1OZ2lCbGhtTml5SStsc1ZN\nOWY2ODNCdGt1ekJKZjE2NnQwVjNGMzAKLS0tIFFoZndSVWR5cmhMTGZmVnUyNk0x\naS9FSWU1SS9zakRIWnpYTEladUxTR2cKdJUuLUlnb4/wrooyOx1rCt/sOcrBNna3\nAkglRjSmmgAmU8xkdA3ul/3ROIwn22xgp61BIRCwPVCLDOx5KfQ8/w==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhZEJNTFpQa0lCUW0xcGdj\nSytGVS9GN2pJUWN3ZUtSSWlWcjZ6dkN0Yms0CldFc1FwWHo3WjJ3MktVR2lwQ2tR\nd3ZMeGhRNHhJYWVOYXNYR3Yxci9zOE0KLS0tIC83c3dvdlFUeFlvdzlkWlplZVF3\nZzIwcE9JMlBZSEVyNlovWEt1dnpmVDQKIq6NfaH84i9E3wE3WKRWW+rHTYFrv32b\njiT/2vqNTNxiiY8U0KtGZN9x5MP6c+g9xY0WSMTv8ZDoODRUlKUzBw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-10-26T18:29:50Z",

hosts/luna/users/shorty/secrets/passwd

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBY1ZtdkVEUjRBZkZHNXox\ndWFhY3dIR2UzRmljNWU2cHk0dC9IU2pxVEVjCnhObHUzdVE3Sm9zdGEwK2pKVldP\neUtCZlk3VHhrQk1mMjFaSjI5ZTZqc3cKLS0tIFJyRjlLbk9ZUWVaZEd6UVRNOElt\ncTFPN0x1ckZXVFVGdVhYU2k0SjFiZG8KhvILNAzA44RmuvHlzmqVozyB6r2ZbQch\nl3S8pq0pQ5yN+4DKWKeNK8QEFZ5QCs8Ts/14wbJpdrVsQCkHy5R29w==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1aG1HcDNQSjcwZWJUYk1U\nNjQzUXNEM0tKL0o0U0swUlp4UlZ5a01PVTJJCmN6NjUrN3hSdnBZbjFRYnFPdkR2\neGloNE9Ga1BPMFdwdGk4RC9ISVhQK28KLS0tIHJJVE5mTXh3azJEYXNtWm9FTkd4\nbVlUUlBmcG1VTFJrRFlYb0xackl1ak0KXSzw2EaC7IL1L/S+j9Qh+FxqwcBpwgqY\ngSM2tIvQ7xdwQG2P3lNTHX+l34MwjaQJKChREemZySTFMgvm866kEA==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvWGJwaC9MMUJnZ0hVNG1H\nWGhKZzBkbEFpU1g3ZWJCUWlWRFdjMUY4cWxvCmhGUzFhU1ZJMW9Yc1E3Z1FLVXl2\nODhSWEJaUG9EQUhpSE5sd3MrNFA5U3cKLS0tIDlzY1gvMGI5WG83OTh4aVB2UWNO\nd2hoUGVnN01EZnhCY3MyL3FFWm1GTkUKpHob+VsJ7nmI+6avBOl2+hNz+9RQge9Y\n4WJQWkjokBNDVe/UOzRBWBWFzP/BmBzDSSepeqGWLP33ZP8R2wUnjQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGa2hNbzJZck92UTFNb1Ni\ndXp1TFR1emVhaFFqMHZZa05TVlNzc0ZEOVhVCkl6b09IVnFONTJFTVJqRk04MW5L\nOHdrSXRjVmQxWXJEVHZESENOOVg2YjQKLS0tIG1MWlU0bmFWTGxBcGN3OXlPMWZp\neEk2Mm9jVDk5RjBYMzl2UHI3UVAvYmsKZQAWNxU9AwlgohjgdOgbUi6xpRJvdth0\nsI+P2unsIEtABw98TfIjGpC9/3w95NkMKkJgRbZ/bwuttdseW8jnMA==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-03-11T21:49:48Z",

hosts/mars/default.nix

@@ -30,22 +30,19 @@ in
   host = {
     user.${username}.enable = true;
 
-    network = {
-      hostname = "mars";
-    };
+    network.hostname = "mars";
 
     docker = {
       enable = true;
       rootless.enable = false;
     };
-    k3s.enable = true;
     openssh.enable = true;
     rclone.enable = true;
     restic.enable = true;
   };
 
   services = {
-    restic.paths = [
+    restic.backups.remotebackup.paths = [
       "/home/shorty/.config/server01/"
       "/home/shorty/.config/piratenportaal/"
       "/var/lib/docker/volumes"

hosts/mars/users/shorty/secrets/id_ed25519

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuaDlMUVZwMExGNk1mU3lX\nWG94RmxXckg3R1BIOTZnbnQ1MTFBVmxobWdnCkZoUDZzNGkyRjRRRlBJdDF3QUt3\nVGltVzhSY2tzMEo0eTltQ08zWkN1dTgKLS0tIHhDRFRyL2I4Qnp1OHhWV2ZaUld2\nOXh0V1BuTkN0NUJHTm53UzNzcmRKMG8K6IBsrkRwRFJDt4jjhUUg7UcWLQK94t02\nZggif+q3yDuFkVRfVS6yxyMXti9BdcoCmcGS7O/fBRcdh61LMEwxRw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArTSs1eldFb1ZaWFBSVTIz\ncFhKK0gzbm85OWs0WnpFWU44NWNQcmk2WjE0CjI2ekZBOC8vam4vTzE2Z2xDaFRB\naUZVOXh2RUFNblErSWk2dlVYSUFmRDAKLS0tIDJHZkN6YmVraEE5dWxUdFN0VmpD\nTmc4MVRoQ0FrM1RhMFlONnhiakRnUGMK3+2YZ7ch2KMHbvjzTrOBoWnLhzXnsn4G\nqQtVWhMbPn3Zv5xiYHNcGKOdrAJyBUlWT3OsaVaBDcBHaX7gKM6YMQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1epkfxmjk0tlne8rmxqq77u06q3lnf5xfjcrwq42nuasswefndyfscw84cy",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTmJtemFEVzhSay9HamdM\nMzBiMC8zZnpXcVFlNHJQNG41K0FiSTBsQlZ3CmkzRUI2a21hcmFNbDBva25JcTFk\nbWNpQldhZG5qM2pxZCtWcER0S2lEMFEKLS0tIGRDa0JEZkFOaThGMTh1TTFpSmRh\nSm9LYlhqSzNhRDlnTUF6MEhjZlBSanMKHzSjslqK/HiSNMaBtNYNX06Dkfjb7Auf\nDwC+LzRhpSJdi6W99OLYiCyIOMeeCZs73u9gOw2ZwXRaCxE0lMM8mQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnaVoySVNOaTBFSGlVNEov\nelpiWnQ0aFFoaE9qYWVoVVVFUXAyclpVVTBrCmt4akxYbllWUG9EQ2tYNExmQ0E4\nNWM2eVVkdHRydW4ybzhmeFp6VlhjbUEKLS0tIDdxRXNXOCtnTXlGRHArSUk1NnNk\nTWMwcGFoNXVsWlp5TTJ0NXhtdy9XQ2cKiLuO2+MCU2e50d4WIDAVDj055/h877ZG\nXTUEbQ0gDO0F8Rf72EzoqjebUvJV8UEGMEsEMpKNAyx6C6ceget4Kw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-10-24T11:14:20Z",

hosts/mars/users/shorty/secrets/id_ed25519.pub

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdkEwN3V1eEZSSXBhZmJN\nMnQvdFpqcFVZazNQN3hJV21QN3I0MmpWZms4Cno2V0xyemJBUXhXVHE5SEdrUmFr\nYWsvdXJOaWNYcE5jN0M3MGhmclpXY2MKLS0tIEJvb2F3UEVkY0UxUlp5TWNua2RF\nZmdzQWpYclBBeXFITzlLbVp5QmNrdkUKK/AzjA5MyrKAhTrKy5V+NwaUW93QATcP\n6TjphiCafQhquVI1bc+E9R9tUSnrUrwRveIUfbmHipXAn1xB/H0n/g==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSKytFSE5YU0hUaTZCWHRw\nYTREV1ZFcnphQVlLb1RzeUx6T2ZxZmt2TGlvCkk5eG4rYkE4UHdXTENxcldwQytM\nWi9pRGdNLy9zKzhaS2w2UDl1SFYzU00KLS0tIFo4SW51WXpoa21SUUxKSjdwd3I1\nRnR2bjB3eHdTbytTV3hOODYvbDlCNVUK8a2OpDlgGc3HYgvVYy6hMi2EV6aGwlm5\ndXn9Po14OOX/En7VL3KaEUpNvTvf8n3PNayK+1/J82wwjlaOcc0Q6A==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1epkfxmjk0tlne8rmxqq77u06q3lnf5xfjcrwq42nuasswefndyfscw84cy",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxQ0orSWRzZE03RHRUZVdS\ndUkwRzFJN3h4WUxVSGtyMVlkemt4aHNRQWcwCjdBMUJUaUpCYUpvREFyVmxVdTlJ\nZWZTaTV5aVd6eW1NUkNnQXF5RlJqRE0KLS0tIFVTd0ZxQm5jVkhLVUQ0UFZCN3RK\nYW1CM2psaUgyZSswK1RJVkJHN0l1aFEK5j6BWgI40tvPDhSLCqOSytfwKQWwtueZ\n+VaBhRjy5yw2UQ6k/2/hb8oCLja7DFGoirnZMCZewLhX38Rnvp7hxQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCa2NVa0U3QTZkK283dkY1\ncVBDTFBQVU1wU0VDaUZuOUFZUjEzM09IUm00CmJOM0NBRmROOHpUWk11amxFbDJB\nelNaQVlJdld6aStEbTY4UURCUlBpYmcKLS0tIFFjWmZtY09JNW1kc0FiUi8rNVhP\nUk5sUURFSUFmclo4T25ybzc0cFRaUmcK8z1z//9A09ZG/Hh3hyCHkxSWhhRPKTSn\nwxYtI1yBI5tL3SUjJFKEqvYKETUJUnTBZuYj6b64TmTiKQTVfahOIQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-10-26T18:29:50Z",

hosts/mars/users/shorty/secrets/passwd

@@ -3,12 +3,12 @@
 	"sops": {
 		"age": [
 			{
-				"recipient": "age1fczq47wpa2wpm9ejy85qw3axw2c9v0f4qrywv5amnuqsjc87ws6qx75pfr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJMTRWM2RBdHVob21nK2o2\nY29MM3JEc1lUNFNjcFdKVEdzem9FbC9lWFhRCjZMeituVzlTVExTc2UxU21jWis2\nRFViS055Ump6OXozYTJhSXVUSUlRNlUKLS0tIDFBTU4xZ21YUVhPTUgraFdlSTVY\nZEdrb0huVmVXWUw3SHNLTVg2enZMR0kKpbLnkp0Qjph+EwcKRwOdcqSmIIDXR6XH\nopLe7bAwLlzZWK4Vvs3UuXfOtSZaCvHUAEvi1QMDgO92q2EZw1tTrw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1hunzh8g6qs0yztln5q4akxvepd667xky4lkff4jga57kzah69ujqvpd7kt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0aWk2MDRBYVhhOUJ5L0ww\nWWZROTM2eTFxaWNaa3Foem05MTM0ZFcyampnClp3NWJyYndCK250UXJXM2ZYdWli\nZFNTUlZBV1VhUU5WQUx3cHhsVEtMTjAKLS0tIFBrajdqenhPelV2K20zRjBpLzlL\nc1FyTDI5cFF5RVlIMmUrZ3pSbk1OVW8K2MCisplW4s51i73uqBJk7xLiJI2VEtMo\n7M3quafMdlu6JlNHAs4NbMHCmzgFOTKUA/wuVIVoTmI5YMc/8XJXbQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1epkfxmjk0tlne8rmxqq77u06q3lnf5xfjcrwq42nuasswefndyfscw84cy",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4dmhOMmlYWnB0Y3Z6NWdW\ncThUbWg1empjbVRnS3FvY0MxTzlQczJod1dZCkFiRXB5eDg0TWptbUl3YVVJTGpH\ncW1SOThXejZDa1lFWG9NMnNIOG5aWEUKLS0tIElpOFJuL05sQTY3ZHJoOEdqRjJL\nUFRqY0Z4L3B5eFRFR2xOWVJtL3V3Nk0KKHTY3ErygB7/sSCjIrEDI2IY68/QKGUX\nmzgaDB2tqFDFMmNm9jLiawBprtTXxbaY0W7mwF+mBXQMF3IFj3BQ0w==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNzFNK1hrbXRQeVFHT1h0\nd002dllYT3F4bFFDQUttazV1T2FJNXRqekFJCnZRSzd1SWJsT3A1Mmk3TGdPOGtj\nWjNEQUNNZTBOeng0a3MraXlIUGk4MW8KLS0tIEY5djFvVThRODR5aFh4ZFRJVWV6\nM0t5MlN6K2lQclREMjhSSFdhNjdFS0kK4cXvECjpN7/bwfpHrpDYIXsJsW0yQDvy\nzRGc95fITnQ1wm117vjc2ypYhrgHOxKmqzWKOLrIZAFvxitaO22vtA==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-03-11T21:49:48Z",

hosts/shared/default.nix

@@ -1,4 +1,4 @@
-{ lib, ... }:
+{ config, lib, ... }:
 
 with lib;
 {
@@ -13,6 +13,18 @@ with lib;
     sops.enable = true;
   };
 
+  boot = {
+    initrd = {
+      systemd.enable = true;
+    };
+  };
+
+  networking.hostName = config.host.network.hostname;
+
+  programs = {
+    dconf.enable = true;
+  };
+
   services = {
     keyd = {
       enable = true;