diff --git a/.sops.yaml b/.sops.yaml
index d0d8e2c..0d1f45b 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -2,7 +2,7 @@ keys:
   - &user_olivertosky 656968EFE265ED715AF5F2BF1CDC6147DE47244F
   - &host_ot-desktop age15axcretngjgf0exjf7fnfx4pwmak9lwm0y6qdl5h4wxhyfgdzfxsazrn7u
   # - &host_ot-desktop age1q3h69aqzf3rxwckw8yw25z8rks9j3rgm0vsghqku2dgfz8n2wyysvfdrze
-
+  - &host_ot-framework age1fas7fylaqaxjxgwgpz4zhmapw950s3tptz9sym3vm7n3h6ajwdzqvzvu2a
 
 creation_rules:
   - path_regex: hosts/common/secrets.ya?ml$
@@ -11,3 +11,4 @@ creation_rules:
         - *user_olivertosky
       age:
         - *host_ot-desktop
+        - *host_ot-framework
diff --git a/hosts/common/secrets.yaml b/hosts/common/secrets.yaml
index 6445336..0da2737 100644
--- a/hosts/common/secrets.yaml
+++ b/hosts/common/secrets.yaml
@@ -1,4 +1,4 @@
-olivertosky-password: ENC[AES256_GCM,data:FndX94fBTFnCqmH53Eq/SvWKYIH9nz+ThcjJ9pLxBt+bn2muzUP0uClN0tMyfkhl4ic538JTBvk3SbcVmDcgzktc0GyA/oeY/6zBlkpNQA5uOmnD6+aQHK0l/+AH86ER1+xeVQ8ZLfDO/w==,iv:7UYWkhgXSMOGBh56PBQOu17PGvEn3kXTxt5Q0GedaV0=,tag:NWCvWLmAfmU5A0WveqtW8Q==,type:str]
+olivertosky-password: ENC[AES256_GCM,data:n2X+KkRfcJ9t7v5Vqml3fB5KS/hU6RQtkIAR0fYkaoBFj5Cde9DhnT0TILxI6QS24WNZL5yCaws+wJBLMjbca5zBvRERpkIt5X+dTiWnDGb4JTV7oHnKp3T5q6bOz+OYUv0RaBp2b+J/Gw==,iv:G+gGeRhT1pQKxT4G8vb1NfPhYl4VKNCmmuft2sT9zk4=,tag:3luEKR8GcbMq5TMRRZq/WQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -8,33 +8,42 @@ sops:
         - recipient: age15axcretngjgf0exjf7fnfx4pwmak9lwm0y6qdl5h4wxhyfgdzfxsazrn7u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRkxrRkRBR3R2c0VzMHc3
-            K05xUGVOQlQwNzFWTzJ0OGZVUTNaL0hxTUVZCjE0eWxyTW4yK3Y1Ui9kVzZzaHBn
-            RmMvMDVKNmtsamxFam5PM3JMSDhPZ28KLS0tIHVvN0ZzVGl3THBsMFQ2eitlcDdx
-            VklBUnA4Z3RTZTRpb0IrbTRsa2VwZnMKrjJYhu807bYbms60grQw1kEVBRw244qW
-            RCcV+x622iAL57tyRpchy5QP4E27aryoYaqGDXuQdAMNDQsBJvJY3A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSEczT2F6OEZ1YVpjMHdD
+            dkg5SFh6ZWZCSXZzemIvRUlFcXlSek9sdkdjCm9hbVRJMitERmRDWUV4VGdyYllX
+            NEJ3TVlPNE5XbDhET1dxSGpMZE10WGsKLS0tIHUrNEtHcktmcjNyL3ZOWmdBNUJV
+            RGs4OXltcnB3MFJKTE9HRWIxTDV6VG8KrHAhLCDn4eyWg2sc6+ug6GujrTFUhC1b
+            7f0seP6gwp9Y2SWdaETaIu0c9jW+y/9bMknWfLBv3ed8dSWQNUxrCg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-23T03:20:55Z"
-    mac: ENC[AES256_GCM,data:Q3wpv6dbqv2bps0fV4e8FuO8frK3aLuhllE6ucbqWdBCFKGHuDCzLacPzhxWEUssYV7tD7kkXfQ/Q+5nbGwo8hRgGkjs5xH8MaspqyPzByRaAm9YpzUaoa5PHpBcL/J/PbgX66L1bWwmdtCjVYSijVINP3FHJH9H10XAjsyX0hg=,iv:O7V3MyZt9SWOtW0aB3h8VSEqyvXW/9KWKlwpPatmdOw=,tag:Q0iQrIxHxCphp8jMRO3pnA==,type:str]
+        - recipient: age1fas7fylaqaxjxgwgpz4zhmapw950s3tptz9sym3vm7n3h6ajwdzqvzvu2a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4WUs0T29VaWJ3WTh6c0NS
+            eUZjby9qa1pTalZpSnQwUUh5cVdET0o2bzE0CldTQVZBbGZpNzBlREVwS1dWS0h1
+            c0JmVlRGQmhmVWxGaXZnY09BdXg0NncKLS0tIElwTzFwdjFlNzJiQjhkNWRpcWdG
+            cFBBc3lNaTFwTGp5eXNMTkxYL3VkN00K4S5m5VKVtoszE5BF2cIkrVeUkh26nJFY
+            qxEb363TrXz3Cj4om+E7GgzRmLnJK19wtNNVDdLqX3SyEZmMHOTlbg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-10-20T22:35:43Z"
+    mac: ENC[AES256_GCM,data:H9cdPF+UCjRzn7qQk2X8N+TMLunWwj4uqS0EGrs+iWj3gw2MZKPImGGWXUkFYMB+7Wbymc23DX7u/0dcMBnKseZOYrhyvCZPlG8VJKXXYwBAhd/kIK1VrKAUTNbszbYiXUZjUjfLWCxaJpZlR981KQbc+3i7bTPIDkOvVnKeiWM=,iv:OXmHTMpJvYy/VcZWcT2UXO574r1Z0+UMOq2zIJp06ls=,tag:0VvAeScDTfg5ba34mlY9vA==,type:str]
     pgp:
-        - created_at: "2024-09-23T03:20:55Z"
+        - created_at: "2024-10-20T22:35:43Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA3HBdUf3FXuEAQ/+PHmSScrf+apWGAU8BiC790sI5GEz8iFIJDPNItYKIBVL
-            f7Kmt987Wq/mthXslngZSYgTvGRTg4xYTdoqrJYtpbgF1nmpROKnrwF4ZSKRa4hz
-            C23j84T16OFVAAcTKPhjU3QexiPJcMzMRmWXPzxkaoY8X/aRnMexN+P3a/7ricY/
-            HCS8RAe3KMNBXcF3RlAij09BHR0Asn1k/du/uzkxMYhNKSNT35nmfBBUDoDfW/0K
-            x/+HVTkk0DQJoOdYRIVzSO83LHdfVf7xK0ETi4xvG9AGHIG3HPyBGw3uPKLIF5W4
-            3EV4rWqIbDtNOhItD6jtT9j7hnPAvQ1Z0I4LpjjIGdvfDaZAcjA0yLVDX9RiAJ4h
-            Qoe8v/5nBN5YPBpm61KpKBpzh9tG229UtqajnGq2QUldyHFabIqsC43cBrSlY1yf
-            mtrxyiYxBkFykBqoWUcDcJdPb+O4JdX8zO4+h4rtWc4ZBetDecVcWTgNXr03M7yJ
-            HITZsCVeDFDHr06zBI02wN4wl6YDHD+fpVHPcJJW/1k5xlUuKIKKesO0i3TmMcgX
-            FDd4gufp66HtPeFpSKijJiQ8HAOICrjQWKqdrnjiEQxEd4qKHKSbmjDIHK0JQswe
-            O4wM7l7C41cxVeoWWnzvS5LN66B9IkqBVWcsyfmFNfP0UvOh11wA6PZaZq+gXWrS
-            XgGNMbjMVFRgeRfvSXrX957VhJS6AWmj2dNv7ylaMSUDYV214ydTbvK7uQ/+058L
-            Max56+2STYiEHAxnkUBSQtuknPE01kxR34evfMU0oX2HAfKf5M+vz4nzp1OETzU=
-            =9p2c
+            hQIMA3HBdUf3FXuEAQ//cbHE7ClWRy9iSm+J+ZbunpUxlnNStRLWgiYcWohtyeNp
+            WRAtv3X1LijG4BbPzGng1HLzVrTWlMLSZQHVCO3S7L8YEETzq7Y2bsJcGcwPAbDf
+            ucOwBq7jlndut6nW/INs6QEhK0T5NtpfUmYaUeN+fBZii+xN+uMXyXGc1otPZ1Vr
+            7PQyid+wxYLW+rGd7SeEwD4bvJ1oO+JQ4N4hxGHvt/F6AaCrs3NZ9xAxptDrStl4
+            dcUA0e9LdGAyccJ+e8WofVL+5NzU3OLdY+kG+3GBKqscg88c5r9+qSbYRV8NKx9I
+            hMt5SteeTFl8nyiPnkT4VrKTu9kK0PkkPwIhw/kI8A4amQDrv4GA8XuH11an7XHi
+            dA0mM7lD6kwA/hNuOI2kJgP80zljBVG8phstb63PCd9IQ9kydrS3kRNaQZLX8Ibm
+            /KbjdZwwqncrE3Nz8Nx8TYgrvvqnSzhhRVsFS32/bNk70coUCK2t2cdQ1DPejxDE
+            EKtjqtMGjXuTr3491R/k9PZMOecC2D0/KGrlhIv5YpF9oPs4/6NTZLZOLEL6evKK
+            v+5Kxw7SYnhHfBWDO1uiUJKYL26XDoSoUusy53Q9Tm3dut8bqpTDUC1jkbGP7K2V
+            5dzQ9vmeqIUdA908kQkHlOOB+9Q/Fmn8CXHVCFENy20w/vOISiAYJcZra30wUgnS
+            XgETY14xlV88oNi6LiF344VfpRPQ0FIMfbrBtC6lJEyzU0idc8i6T/xjR115IhTl
+            Q4Rhm+Ocg6x4YraZV0NxLDAAv42cTu1z3fZ6GG9bdwp6/PTAJy2gHxDIx5h22uQ=
+            =LZFN
             -----END PGP MESSAGE-----
           fp: 656968EFE265ED715AF5F2BF1CDC6147DE47244F
     unencrypted_suffix: _unencrypted
diff --git a/hosts/ot-framework/ssh_host_ed25519_key.pub b/hosts/ot-framework/ssh_host_ed25519_key.pub
index f812d79..8024ad7 100644
--- a/hosts/ot-framework/ssh_host_ed25519_key.pub
+++ b/hosts/ot-framework/ssh_host_ed25519_key.pub
@@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBi9h8KsbTz/iVI76L1CyZhedKyJy06BcaW0pXCKSxsp root@ot-framework
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlUpZvMwsw8l2ps8AwPeg2VJV6LdcJySH21TIkXmbJb root@nixos