Move the public keys out of secrets

hosts/firefly/home/default.nix

@@ -12,8 +12,10 @@
     ../../../modules/home/utils
 
     # Misc
-    nur.nixosModules.nur
     ../../../overlays
     ../../../variables
+
+    # Imports
+    nur.nixosModules.nur
   ];
 }

hosts/firefly/id_ed25519.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2lMkUd+BbXITE5LTg94hEzmA6UKsIIbaf5YOjGoLzl

hosts/firefly/system/default.nix

@@ -1,4 +1,4 @@
-{ lanzaboote, ... }:
+{ agenix, lanzaboote, ... }:
 {
   imports = [
     ./hardware
@@ -13,11 +13,14 @@
     ../../../variables
 
     # Devices and hardware
-    lanzaboote.nixosModules.lanzaboote
     ../../../modules/system/devices
     ../../../modules/system/devices/boot/lanzaboote
     ../../../modules/system/devices/video/nvidia
     ../../../modules/system/devices/networking/firewall/pc
+
+    # Imports
+    agenix.nixosModules.default
+    lanzaboote.nixosModules.lanzaboote
   ];
 
   networking.hostName = "firefly";

hosts/firefly/system/hardware/default.nix

@@ -24,7 +24,7 @@ in {
   ];
 
   boot = {
-    kernelPackages = pkgs.unstable.linuxPackages_latest;
+    kernelPackages = pkgs.unstable.linuxPackages_zen;
     blacklistedKernelModules = [
       "pcspkr"
     ];