diff --git a/deployments/fudo/flake.lock b/deployments/fudo/flake.lock
new file mode 100644
index 0000000..d12f5c7
--- /dev/null
+++ b/deployments/fudo/flake.lock
@@ -0,0 +1,832 @@
+{
+  "nodes": {
+    "build-keypairs": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-4eRLRLCzZ6kQIRZqy51bj60jhFSQ/wlKLeNgABPhTyw=",
+        "path": "/state/secrets/build-keypairs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/build-keypairs",
+        "type": "path"
+      }
+    },
+    "build-keypairs_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-4eRLRLCzZ6kQIRZqy51bj60jhFSQ/wlKLeNgABPhTyw=",
+        "path": "/state/secrets/build-keypairs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/build-keypairs",
+        "type": "path"
+      }
+    },
+    "build-seed": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-6rzGK/itD/RBRoNGw1L2wLV1IcVbn2b0V49ay1J9z7k=",
+        "path": "/state/secrets/build.seed",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/build.seed",
+        "type": "path"
+      }
+    },
+    "build-seed_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-6rzGK/itD/RBRoNGw1L2wLV1IcVbn2b0V49ay1J9z7k=",
+        "path": "/state/secrets/build.seed",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/build.seed",
+        "type": "path"
+      }
+    },
+    "dnssec-keys": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-KGZFtyc7Sd5mGjLxnM+R/XnCtOwyZ4IuOMcblIjlCnM=",
+        "path": "/state/secrets/dnssec-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/dnssec-keys",
+        "type": "path"
+      }
+    },
+    "dnssec-keys_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-KGZFtyc7Sd5mGjLxnM+R/XnCtOwyZ4IuOMcblIjlCnM=",
+        "path": "/state/secrets/dnssec-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/dnssec-keys",
+        "type": "path"
+      }
+    },
+    "doom-emacs": {
+      "inputs": {
+        "doom-emacs": "doom-emacs_2",
+        "doom-snippets": "doom-snippets",
+        "emacs-overlay": "emacs-overlay",
+        "emacs-so-long": "emacs-so-long",
+        "evil-markdown": "evil-markdown",
+        "evil-org-mode": "evil-org-mode",
+        "evil-quick-diff": "evil-quick-diff",
+        "explain-pause-mode": "explain-pause-mode",
+        "flake-utils": "flake-utils_3",
+        "nix-straight": "nix-straight",
+        "nixpkgs": "nixpkgs",
+        "nose": "nose",
+        "ob-racket": "ob-racket",
+        "org": "org",
+        "org-contrib": "org-contrib",
+        "org-yt": "org-yt",
+        "php-extras": "php-extras",
+        "revealjs": "revealjs",
+        "rotate-text": "rotate-text"
+      },
+      "locked": {
+        "lastModified": 1627398156,
+        "narHash": "sha256-Ru1aV3NuIFXAsvUE3de8KR7xDZOo1GCBJdsWKJn+Ebw=",
+        "owner": "vlaci",
+        "repo": "nix-doom-emacs",
+        "rev": "fee14d217b7a911aad507679dafbeaa8c1ebf5ff",
+        "type": "github"
+      },
+      "original": {
+        "owner": "vlaci",
+        "repo": "nix-doom-emacs",
+        "type": "github"
+      }
+    },
+    "doom-emacs_2": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1626604817,
+        "narHash": "sha256-z+dvjB02cHU+VQ5EMkzqSdX817PZar9AkmmfK27q0vo=",
+        "owner": "hlissner",
+        "repo": "doom-emacs",
+        "rev": "46732c0adaef147144418f9f284ca6b1183ab96f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hlissner",
+        "ref": "develop",
+        "repo": "doom-emacs",
+        "type": "github"
+      }
+    },
+    "doom-snippets": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1625547004,
+        "narHash": "sha256-V+ytAjB4ZZ+5dJJAu1OY7SbnqrokX5PVBWs0AsgQ8Vs=",
+        "owner": "hlissner",
+        "repo": "doom-snippets",
+        "rev": "5c0eb5bd70f035cefb981c2ce64f4367498bdda6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hlissner",
+        "repo": "doom-snippets",
+        "type": "github"
+      }
+    },
+    "emacs-overlay": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1626972035,
+        "narHash": "sha256-YhBtnKmLDYiEzP5ZEMEQMg6oMP5EV+ToCkku7ZYfL+A=",
+        "owner": "nix-community",
+        "repo": "emacs-overlay",
+        "rev": "be04b45efb35db58e6ac6aa86b84f850c85b5dfe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "emacs-overlay",
+        "type": "github"
+      }
+    },
+    "emacs-so-long": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1575031854,
+        "narHash": "sha256-xIa5zO0ZaToDrec1OFjBK6l39AbA4l/CE4LInVu2hi0=",
+        "owner": "hlissner",
+        "repo": "emacs-so-long",
+        "rev": "ed666b0716f60e8988c455804de24b55919e71ca",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hlissner",
+        "repo": "emacs-so-long",
+        "type": "github"
+      }
+    },
+    "evil-markdown": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1626852210,
+        "narHash": "sha256-HBBuZ1VWIn6kwK5CtGIvHM1+9eiNiKPH0GUsyvpUVN8=",
+        "owner": "Somelauw",
+        "repo": "evil-markdown",
+        "rev": "8e6cc68af83914b2fa9fd3a3b8472573dbcef477",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Somelauw",
+        "repo": "evil-markdown",
+        "type": "github"
+      }
+    },
+    "evil-org-mode": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1607203864,
+        "narHash": "sha256-JxwqVYDN6OIJEH15MVI6XOZAPtUWUhJQWHyzcrUvrFg=",
+        "owner": "hlissner",
+        "repo": "evil-org-mode",
+        "rev": "a9706da260c45b98601bcd72b1d2c0a24a017700",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hlissner",
+        "repo": "evil-org-mode",
+        "type": "github"
+      }
+    },
+    "evil-quick-diff": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1575189609,
+        "narHash": "sha256-oGzl1ayW9rIuq0haoiFS7RZsS8NFMdEA7K1BSozgnJU=",
+        "owner": "rgrinberg",
+        "repo": "evil-quick-diff",
+        "rev": "69c883720b30a892c63bc89f49d4f0e8b8028908",
+        "type": "github"
+      },
+      "original": {
+        "owner": "rgrinberg",
+        "repo": "evil-quick-diff",
+        "type": "github"
+      }
+    },
+    "explain-pause-mode": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1595842060,
+        "narHash": "sha256-++znrjiDSx+cy4okFBBXUBkRFdtnE2x+trkmqjB3Njs=",
+        "owner": "lastquestion",
+        "repo": "explain-pause-mode",
+        "rev": "2356c8c3639cbeeb9751744dbe737267849b4b51",
+        "type": "github"
+      },
+      "original": {
+        "owner": "lastquestion",
+        "repo": "explain-pause-mode",
+        "type": "github"
+      }
+    },
+    "filesystem-keys": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-K2wdsA4vcNTaLR9A9qxB+aMaeANL0LXOwBWvUm63lX0=",
+        "path": "/state/secrets/filesystem-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/filesystem-keys",
+        "type": "path"
+      }
+    },
+    "filesystem-keys_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-K2wdsA4vcNTaLR9A9qxB+aMaeANL0LXOwBWvUm63lX0=",
+        "path": "/state/secrets/filesystem-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/filesystem-keys",
+        "type": "path"
+      }
+    },
+    "flake-utils": {
+      "locked": {
+        "lastModified": 1637014545,
+        "narHash": "sha256-26IZAc5yzlD9FlDT54io1oqG/bBoyka+FJk5guaX4x4=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "bba5dcc8e0b20ab664967ad83d24d64cb64ec4f4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "locked": {
+        "lastModified": 1637014545,
+        "narHash": "sha256-26IZAc5yzlD9FlDT54io1oqG/bBoyka+FJk5guaX4x4=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "bba5dcc8e0b20ab664967ad83d24d64cb64ec4f4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "locked": {
+        "lastModified": 1623875721,
+        "narHash": "sha256-A8BU7bjS5GirpAUv4QA+QnJ4CceLHkcXdRp4xITDB0s=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "f7e004a55b120c02ecb6219596820fcd32ca8772",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "fudo-entities": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "fudo-lib": "fudo-lib",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1638137290,
+        "narHash": "sha256-8Kjzn0jr4arVDDaOQUtT7VFd1ir1SB1X1xp1OoLZduo=",
+        "ref": "master",
+        "rev": "45cb2ae34407530496a30c6121cad976bd186fc5",
+        "revCount": 8,
+        "type": "git",
+        "url": "ssh://fudo_git@git.fudo.org:2222/fudo-nix/entities.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "ssh://fudo_git@git.fudo.org:2222/fudo-nix/entities.git"
+      }
+    },
+    "fudo-entities_2": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "fudo-lib": "fudo-lib_2",
+        "nixpkgs": [
+          "fudo-nixos",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1638137290,
+        "narHash": "sha256-8Kjzn0jr4arVDDaOQUtT7VFd1ir1SB1X1xp1OoLZduo=",
+        "ref": "master",
+        "rev": "45cb2ae34407530496a30c6121cad976bd186fc5",
+        "revCount": 8,
+        "type": "git",
+        "url": "https://git.fudo.org/nix/fudo-entities.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.fudo.org/nix/fudo-entities.git"
+      }
+    },
+    "fudo-home": {
+      "inputs": {
+        "doom-emacs": "doom-emacs",
+        "home-manager": "home-manager",
+        "niten-doom-config": "niten-doom-config",
+        "nixpkgs": [
+          "fudo-nixos",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "narHash": "sha256-NCvYqgBq3HCqBx+EO1grdiflR9tthm9bUIasB4XtI4U=",
+        "path": "/state/nixops/fudo-home",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/nixops/fudo-home",
+        "type": "path"
+      }
+    },
+    "fudo-lib": {
+      "locked": {
+        "narHash": "sha256-r8qffvJPWbBJmN32thMIxjdmY9X5VCc3TuyQyFAIdks=",
+        "path": "/state/fudo-lib",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/fudo-lib",
+        "type": "path"
+      }
+    },
+    "fudo-lib_2": {
+      "locked": {
+        "narHash": "sha256-r8qffvJPWbBJmN32thMIxjdmY9X5VCc3TuyQyFAIdks=",
+        "path": "/state/fudo-lib",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/fudo-lib",
+        "type": "path"
+      }
+    },
+    "fudo-lib_3": {
+      "locked": {
+        "narHash": "sha256-O2CsIArXcPyiBtDbAiFNU2IvIBTqEljrwDJkGF0STbw=",
+        "path": "/state/fudo-lib",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/fudo-lib",
+        "type": "path"
+      }
+    },
+    "fudo-nixos": {
+      "inputs": {
+        "fudo-entities": "fudo-entities_2",
+        "fudo-home": "fudo-home",
+        "fudo-lib": "fudo-lib_3",
+        "fudo-pkgs": "fudo-pkgs",
+        "fudo-secrets": "fudo-secrets",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1638251788,
+        "narHash": "sha256-JzsjH4L25cXv/mpm/JK7z34hUKDrXVWP2HMbY6FRnv0=",
+        "ref": "master",
+        "rev": "a1d4e2aeb4006b778e31caec0407173af9ca8fa6",
+        "revCount": 390,
+        "type": "git",
+        "url": "ssh://fudo_git@git.fudo.org:2222/fudo-nix/nixos-config.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "ssh://fudo_git@git.fudo.org:2222/fudo-nix/nixos-config.git"
+      }
+    },
+    "fudo-pkgs": {
+      "locked": {
+        "narHash": "sha256-XwEs/VkqJp1mNwYUeBUqCPrW6GUEwAxbXMVOy7bF2P8=",
+        "path": "/state/nixops/fudo-pkgs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/nixops/fudo-pkgs",
+        "type": "path"
+      }
+    },
+    "fudo-secrets": {
+      "inputs": {
+        "build-keypairs": "build-keypairs",
+        "build-seed": "build-seed",
+        "dnssec-keys": "dnssec-keys",
+        "filesystem-keys": "filesystem-keys",
+        "host-keytabs": "host-keytabs",
+        "realm-master-keys": "realm-master-keys",
+        "service-keytabs": "service-keytabs",
+        "service-passwords": "service-passwords",
+        "ssh-keypairs": "ssh-keypairs"
+      },
+      "locked": {
+        "narHash": "sha256-Q89s52d8KAMIbxh7aBoUwUTFAbgUBE5IaAIwd267k20=",
+        "path": "/state/secrets",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets",
+        "type": "path"
+      }
+    },
+    "fudo-secrets_2": {
+      "inputs": {
+        "build-keypairs": "build-keypairs_2",
+        "build-seed": "build-seed_2",
+        "dnssec-keys": "dnssec-keys_2",
+        "filesystem-keys": "filesystem-keys_2",
+        "host-keytabs": "host-keytabs_2",
+        "realm-master-keys": "realm-master-keys_2",
+        "service-keytabs": "service-keytabs_2",
+        "service-passwords": "service-passwords_2",
+        "ssh-keypairs": "ssh-keypairs_2"
+      },
+      "locked": {
+        "narHash": "sha256-Q89s52d8KAMIbxh7aBoUwUTFAbgUBE5IaAIwd267k20=",
+        "path": "/state/secrets",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets",
+        "type": "path"
+      }
+    },
+    "home-manager": {
+      "inputs": {
+        "nixpkgs": [
+          "fudo-nixos",
+          "fudo-home",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1637019201,
+        "narHash": "sha256-lq4gz51fx4m5FXfx1SCB444aEBeaYtLMVm3P18Wi9ls=",
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "rev": "bcf03fa16a1f06b8a0abb27bf49afa8d6fffe8f1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "release-21.05",
+        "repo": "home-manager",
+        "type": "github"
+      }
+    },
+    "host-keytabs": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-LzDfB9ubACWyQzjXzsPH6eNoESmSVcMFFb3V025Xgow=",
+        "path": "/state/secrets/kerberos/host-keytabs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/host-keytabs",
+        "type": "path"
+      }
+    },
+    "host-keytabs_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-LzDfB9ubACWyQzjXzsPH6eNoESmSVcMFFb3V025Xgow=",
+        "path": "/state/secrets/kerberos/host-keytabs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/host-keytabs",
+        "type": "path"
+      }
+    },
+    "niten-doom-config": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1633712607,
+        "narHash": "sha256-6PAw7Xvoj4JROeTqK1nhT2zv7bPpiQlm9t7H5HQ0f2k=",
+        "ref": "master",
+        "rev": "0a4f8ce4121ba3d64d29b0d52733c08febfb83d8",
+        "revCount": 35,
+        "type": "git",
+        "url": "https://git.fudo.org/niten/doom-emacs.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.fudo.org/niten/doom-emacs.git"
+      }
+    },
+    "nix-straight": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1621543597,
+        "narHash": "sha256-E/m2Hrw2og//CfOCOWe2yapYC01Tqhozn4YMPYJsC3o=",
+        "owner": "vlaci",
+        "repo": "nix-straight.el",
+        "rev": "8e84d04f10b2298de856b2b8b9a0d13abc91b5ca",
+        "type": "github"
+      },
+      "original": {
+        "owner": "vlaci",
+        "ref": "v2.2.0",
+        "repo": "nix-straight.el",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1626852498,
+        "narHash": "sha256-lOXUJvi0FJUXHTVSiC5qsMRtEUgqM4mGZpMESLuGhmo=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "16105403bdd843540cbef9c63fc0f16c1c6eaa70",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixpkgs-unstable",
+        "type": "indirect"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1638196344,
+        "narHash": "sha256-fkOqSkfOkl8tqxDd+zJU4kAgyLXp/ouaP+U9gpjEZZs=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2553aee74fed8c2205a4aeb3ffd206ca14ede60f",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixos-21.05",
+        "type": "indirect"
+      }
+    },
+    "nose": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1400604510,
+        "narHash": "sha256-daEi8Kta1oGaDEmUUDDQMahTTPOpvNpDKk22rlr7cB0=",
+        "owner": "emacsattic",
+        "repo": "nose",
+        "rev": "f8528297519eba911696c4e68fa88892de9a7b72",
+        "type": "github"
+      },
+      "original": {
+        "owner": "emacsattic",
+        "repo": "nose",
+        "type": "github"
+      }
+    },
+    "ob-racket": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1584656173,
+        "narHash": "sha256-rBUYDDCXb+3D4xTPQo9UocbTPZ32kWV1Uya/1DmZknU=",
+        "owner": "xchrishawk",
+        "repo": "ob-racket",
+        "rev": "83457ec9e1e96a29fd2086ed19432b9d75787673",
+        "type": "github"
+      },
+      "original": {
+        "owner": "xchrishawk",
+        "repo": "ob-racket",
+        "type": "github"
+      }
+    },
+    "org": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1627155762,
+        "narHash": "sha256-XS1eA6P0ePabdrnUNe5lN19EA9dfK615gMGObr9wfBQ=",
+        "owner": "emacs-straight",
+        "repo": "org-mode",
+        "rev": "c9dfed48a607c7f6524f1c6480f09cf61a5d6237",
+        "type": "github"
+      },
+      "original": {
+        "owner": "emacs-straight",
+        "repo": "org-mode",
+        "type": "github"
+      }
+    },
+    "org-contrib": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1623339452,
+        "narHash": "sha256-E3pioqkmAKQm5N7YsgJZil0/ozkdRE7//tE9FGbrluM=",
+        "ref": "master",
+        "rev": "fc81309cf6756607a836f93049a9393c2967c4e0",
+        "revCount": 2599,
+        "type": "git",
+        "url": "https://git.sr.ht/~bzg/org-contrib"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.sr.ht/~bzg/org-contrib"
+      }
+    },
+    "org-yt": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1527381913,
+        "narHash": "sha256-dzQ6B7ryzatHCTLyEnRSbWO0VUiX/FHYnpHTs74aVUs=",
+        "owner": "TobiasZawada",
+        "repo": "org-yt",
+        "rev": "40cc1ac76d741055cbefa13860d9f070a7ade001",
+        "type": "github"
+      },
+      "original": {
+        "owner": "TobiasZawada",
+        "repo": "org-yt",
+        "type": "github"
+      }
+    },
+    "php-extras": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1573312690,
+        "narHash": "sha256-r4WyVbzvT0ra4Z6JywNBOw5RxOEYd6Qe2IpebHXkj1U=",
+        "owner": "arnested",
+        "repo": "php-extras",
+        "rev": "d410c5af663c30c01d461ac476d1cbfbacb49367",
+        "type": "github"
+      },
+      "original": {
+        "owner": "arnested",
+        "repo": "php-extras",
+        "type": "github"
+      }
+    },
+    "realm-master-keys": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-5hDmPweE6lshRKA+AKRgJv7VwWxHsYekwMT32uAUKJU=",
+        "path": "/state/secrets/kerberos/master-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/master-keys",
+        "type": "path"
+      }
+    },
+    "realm-master-keys_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-5hDmPweE6lshRKA+AKRgJv7VwWxHsYekwMT32uAUKJU=",
+        "path": "/state/secrets/kerberos/master-keys",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/master-keys",
+        "type": "path"
+      }
+    },
+    "revealjs": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1625811744,
+        "narHash": "sha256-Y67nVqcovn2PbHXmWOFWMq10Qz2ZIRyyWEO6qsZLbIM=",
+        "owner": "hakimel",
+        "repo": "reveal.js",
+        "rev": "b18f12d964ef80bd9ffb061aae48ff4c15fb43ad",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hakimel",
+        "repo": "reveal.js",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "fudo-entities": "fudo-entities",
+        "fudo-nixos": "fudo-nixos",
+        "fudo-secrets": "fudo-secrets_2",
+        "nixpkgs": "nixpkgs_2"
+      }
+    },
+    "rotate-text": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1322962747,
+        "narHash": "sha256-SOeOgSlcEIsKhUiYDJv0p+mLUb420s9E2BmvZQvZ0wk=",
+        "owner": "debug-ito",
+        "repo": "rotate-text.el",
+        "rev": "48f193697db996855aee1ad2bc99b38c6646fe76",
+        "type": "github"
+      },
+      "original": {
+        "owner": "debug-ito",
+        "repo": "rotate-text.el",
+        "type": "github"
+      }
+    },
+    "service-keytabs": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-9lw22Gh1IDX+MtXMLi+o3XbjvqEhOiZQG9FiG/xz/U0=",
+        "path": "/state/secrets/kerberos/service-keytabs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/service-keytabs",
+        "type": "path"
+      }
+    },
+    "service-keytabs_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-9lw22Gh1IDX+MtXMLi+o3XbjvqEhOiZQG9FiG/xz/U0=",
+        "path": "/state/secrets/kerberos/service-keytabs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/kerberos/service-keytabs",
+        "type": "path"
+      }
+    },
+    "service-passwords": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-4xEJlPU+KeBtQuFqRlB1bzJMXUQ6a+DT2v3OptaHyTg=",
+        "path": "/state/secrets/service-passwords",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/service-passwords",
+        "type": "path"
+      }
+    },
+    "service-passwords_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-4xEJlPU+KeBtQuFqRlB1bzJMXUQ6a+DT2v3OptaHyTg=",
+        "path": "/state/secrets/service-passwords",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/service-passwords",
+        "type": "path"
+      }
+    },
+    "ssh-keypairs": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-TlRfaYFuJxLUCarxZ1XYnW8PruKyYO5RErVGo5hTgo4=",
+        "path": "/state/secrets/ssh-keypairs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/ssh-keypairs",
+        "type": "path"
+      }
+    },
+    "ssh-keypairs_2": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-TlRfaYFuJxLUCarxZ1XYnW8PruKyYO5RErVGo5hTgo4=",
+        "path": "/state/secrets/ssh-keypairs",
+        "type": "path"
+      },
+      "original": {
+        "path": "/state/secrets/ssh-keypairs",
+        "type": "path"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/deployments/fudo/flake.nix b/deployments/fudo/flake.nix
index 6eca8ca..0970741 100644
--- a/deployments/fudo/flake.nix
+++ b/deployments/fudo/flake.nix
@@ -27,8 +27,8 @@
 
         deployment-hosts = filterAttrs
           (hostname: hostOpts:
-            hostOpts.site == domain &&
-            hostOpts.nixos-system)
+            hostOpts.nixos-system &&
+            (fudo-site hostOpts.site))
           fudo-entities.entities.hosts;
 
         deployment-config-generator =