kek

.sops.yaml

@@ -13,8 +13,8 @@ keys:
   - &macbook-pro age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
   - &nuc age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
   - &admin_nuc age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
-  - &matt_allyx age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m
-  - &allyx age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew
+  - &matt_allyx age18z4ctyyj7eq0cmt23eelfzjuacq4fa6hsplyg779d3rdg7ac2q5q2njxqh
+  - &allyx age164xpf9cepfjqvcn7v5ahcaq9zmm5u3yl9t04d098e3e2zkfjcyws02rx42
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
@@ -53,7 +53,7 @@ creation_rules:
           - *desktop
           - *admin
           - *jallen-nas
-  - path_regex: steamdeck-secrets/[^/]+\.(yaml|json|env|ini)$
+  - path_regex: allyx-secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
       - pgp:
           - *matt-pgp

secrets/secrets.yaml

@@ -25,6 +25,7 @@ ssh-keys-public:
     pi5: ENC[AES256_GCM,data:TgyyaEF8oTRVM8y2wrz7rqevQfDWM2qgdCpw4ak5fh5Ad5QGexKgvAK3qD6T/2LRLDZV+PpzR08PmfDPxwEev2zqmxsk6OZEwkcrcxnqF7mtbKhmr9rl8jY=,iv:VNFYVwXadlj2hGutwx5jvxVyutmvnNCFC77cNLG1ZDA=,tag:RJH/27yAiIw6ED9cYN77rA==,type:str]
     deck: ENC[AES256_GCM,data:xUHlFtL36OyMghXQCSIJKFER1Wvwr1b1zHmpkNzMqqs2KTQP/6rlbLWN3T7cfDcrc4Ot3hdlBg3liQcyNgdpFf4O2QiY3vqzzGX5gmNbTuYrDegGjogHyuJSvg==,iv:qZhkriv1H0gH6204px4tGs8EQZRdJW0uhCB4Xx6AwUc=,tag:w1CzPWx9qnojwrUK3ZBj8A==,type:str]
     macbook-pro-nixos: ENC[AES256_GCM,data:Y5V9+sxn9hXJ5HHdJ/CLDJmgQx3RYn4SiOmpcadRIaH8fwgG5aBX1ig7npbXh350ZtHIGkexJGxKGVcORk7L2PFU7Y0UJ3ARMY4HY5JEgFgnVPaqnSFasrt83G+KhoUh4CJcyT0uvQ==,iv:+OybxiMU21fqRxks8cchy3u/6Mr3LIo22+Q3AcnLWuY=,tag:L3fDjJa06LvN/YPaM0Jb7w==,type:str]
+    allyx: ENC[AES256_GCM,data:gA853GDd+cVC5QrTIjtXZBQ9hpK9BQTxmrUp9d4H8/ZDr+jWs/m5q8vTeZfnlBqPmfuldkwa08rOJIlJF1AQi+u4LYkrBBShL0SoKdrHLhUtfqpTgkvIigZqaihasQeMrQ==,iv:ztfsTl9jlzDWPLcUKwI/dXCmxTQnHV/yOouOc8D+y/g=,tag:9GnZ25rVKJwU0nlFot/KZw==,type:str]
 ssh-keys-private:
     desktop-nixos: ENC[AES256_GCM,data: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,iv:jgiF188WAPqEy8WWaHJImzlLV2NNTFnNHW3Le7aLJ1Y=,tag:iCCDSahE8/LSajZd0Mt3LQ==,type:str]
     desktop-nixos-root: ENC[AES256_GCM,data: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,iv:2cTIm3wgcyOgKBUNYZbokI3HRRWTA3/9IHu94KOBUww=,tag:98dLCYVfGcCdXPEDiIV9Uw==,type:str]
@@ -34,6 +35,7 @@ ssh-keys-private:
     pi5: ENC[AES256_GCM,data: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,iv:PWO8mqAZKrYF1AMzkjH3F20DNc7Gm6eadeb3LT7jHog=,tag:GLiPUhXkoRAgZK2OZ4y4Bg==,type:str]
     deck: ENC[AES256_GCM,data:8XAtk676+OpiFLcLXCMrUi5z/LMVIKjbX7cn62d6jYRDEEymJ/IKI3bbHI8CfOHmfD7Otjw7y4ZyHRW72yDY33XE2pmUZ7ZWPZJbhPD6dYcis3CGjSAPijS7jqpPFG8hMH3ix3lrn7rCahZSY7hFPDaK3221TpyeinfIaOoDrrynhgbzQ26yxtCqHiqDvxBxloVa4cp0zgsdXpBnchwlZv72PUD6rOuN+fA3gskXNMNFJiURXCaJsmPPggt67umLTzQ73etjLrtBrrCbEXhOnb7aUSMAR0q+92O1p1J3II5G44mxPxO/d64bllDTaEZJhpomM+8dDvahxk1MQIXom1CJVvaZq+yLe9YKjWoH9Xipw3yUkluLNg9wpEnK1FSK0Mp/KS1kB5SJ8mh2AhI1+5nXdJXrAZjFVAEreI/3faPsJ3UEc11ER10iW+LMWQ02kSLnG85mlWdZs6KUh18nY5ZLerdzjZ7v+nJh0t3YBp5Tr8TBUEpkVS22KvozMr9fx1WqGnmgiUPwh5ptaUOi,iv:QXWNEnaaGHVhO9mWJ+5yJ1332nt2NAxdWbgpmB2RRRw=,tag:1GEJExH7m6ttrie6j7muSA==,type:str]
     macbook-pro-nixos: ENC[AES256_GCM,data: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,iv:UtSYwvEfXDbu/deQEEhT4q2FNsSH4mXiYimcW5EBexM=,tag:0SxLoIjzI4HoflNWdpw4qw==,type:str]
+    allyx: ENC[AES256_GCM,data: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,iv:vwvRLPNXumqWo6bYu4KjdYAQzMeI6mJIbHwESVzHUD8=,tag:/47gkNElbmVvmCrxJB66KA==,type:str]
 secureboot:
     GUID: ENC[AES256_GCM,data:EPkYpJAHYEAXRQQKkB6WHXdtdnyoMvPV0BjfxMYfD/F2LrQc,iv:yK+2bSfWHnJ+qTQ2F18Of/qrultrX5cwYLgEZEWj1z4=,tag:D2WTSLS3ZZ5vZ4VQg8ltZA==,type:str]
     keys:
@@ -190,8 +192,8 @@ sops:
             T0FZV3g1UEVsSmZyYkd6VzJMeWJyQ3cKgZlLBNY5QZ1kSpdZnYQr0VvNjT0U+IH7
             DnE0UV7R5Ps0SxAeosKas0VKwByCuLEKxulCU0uj0WdOL5jpdPdExQ==
             -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2026-02-09T22:42:10Z"
-  mac: ENC[AES256_GCM,data:SuOIup2o8F8Pg9GUFW12PkcL8mhUeatbvjZnOuKK7BfwhL6Hn9OThZ0f5MbB05KlLkc77NlUG5WOvH3/BWVbIrUxINQlOW0TUwqDfGp8Hpqtta/OJCv2iq/KGbigZ4IggbiX5coJwsoYfKlC+WzpJObCGH7JXk7CXwrIGCM1HTY=,iv:M4O+81jLTh1+Ljw4Ux6fI+rx0g6TeNyThPjACZBqxj0=,tag:6iW9/dkb16DgctpFamc/EQ==,type:str]
+    lastmodified: "2026-03-13T23:53:57Z"
+    mac: ENC[AES256_GCM,data:fp/8MlMsP7PKYJMRyuo+/aepb57wCfwNPxu4fOvcpFlLeq3TFkJydMBsNCUUEteK8NszUSYb9Rlt0RtE7luFiJy9Hoc8pWLdKGINa+BedEvbzTvbLgoC/aMvQRc99BqjYMEY+sbdIv+S8RTCymiZPK9EMNsLS0YExz2gkb4qy0c=,iv:yb3BTN0fRnUxLQSZFcBS/smk1MG82u2Xd04y1aiMo3s=,tag:INWJPTJ3ON+0e+wpcWlmwg==,type:str]
     pgp:
         - created_at: "2026-02-06T15:34:33Z"
           enc: |-
@@ -214,4 +216,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
     unencrypted_suffix: _unencrypted
-  version: 3.11.0
+    version: 3.12.1

systems/x86_64-linux/iso-minimal/default.nix

@@ -102,7 +102,7 @@ in
   # ###################################################
 
   boot = {
-    kernelPackages = lib.mkForce pkgs.${namespace}.linuxPackages_cachyos-server-lto;
+    kernelPackages = lib.mkForce pkgs.cachyosKernels.linuxPackages-cachyos-latest-lto;
     supportedFilesystems.zfs = false;
   };