diff --git a/secrets/.gitattributes b/secrets/.gitattributes
deleted file mode 100644
index 2eacaa7..0000000
--- a/secrets/.gitattributes
+++ /dev/null
@@ -1,4 +0,0 @@
-* filter=git-crypt diff=git-crypt
-ssh-key.pub !filter !diff
-.gitattributes !filter !diff
-README.md !filter !diff
diff --git a/secrets/bernbotToken.age b/secrets/bernbotToken.age
new file mode 100644
index 0000000..215644e
--- /dev/null
+++ b/secrets/bernbotToken.age
@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-ed25519 KjIL7g 9zqnchTxa2RNHh6dA3ywXt7kkdP7PIT09IDW5S5NBQU
+kBvwfU6jyBgPkjww8mm7aKjDeC/te9AySRQhWW8zDkA
+-> ssh-rsa Abmvag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+-> ~am?#^s~-grease
+TZj9QCRRKFXA4zbN86Hc88WzEJGSfhfdiylgXgsVqmgdevbrs+Yek0NpdA
+--- TI12rWP+DxEO/4ynIKZLXUraDINwjquPe27/MLbF+ws
+��=�W�g�ަ�|�.��U<6�J�]^8!s��Q�$ps����a��4�q?!#�f��ҿ������JO��^�F�Twgh@낺�֨P�������
�vw�`�`4�;��3	
�G\�
\ No newline at end of file
diff --git a/secrets/bernbot_token b/secrets/bernbot_token
deleted file mode 100644
index d6a3b39cb7741e955d3ba64074db28fa69cef291..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 107
zcmZQ@_Y83kiVO&0P+5Iz8S9*?Ct~3%InCPV{rR~yJJ8zvyyfiBC7*Y5ww6Eb`*uf0
zxcs{K!62=s^QUceLbtGg(385cV+woH>>JHz>Ye!2=4or_+C9{qT;v|g_cVLE{@nT*
P=NK5gWljH1_$31X`}QxI

diff --git a/secrets/default.nix b/secrets/default.nix
deleted file mode 100644
index 8f97d4a7099a20f3196af18f26d6603e60523467..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 263
zcmZQ@_Y83kiVO&0NY6W_wU<#ngVo|x{9F#cyMc@S?O**}^XE=kszbVuiR-h(Ykhnx
ze!l4RWml<+zVN`%`%l6TyFjiLx-Z$Y?j$u=J1@$3zeT1&RV>y^ji3Ks0_P-d&Fv=B
z%+xKU7rRPN-?FqneM6W0J&|PxoagWQYUwGVw6SEC`0DJn=U&ggw|hrioPUEkKf_=4
zEGg;A<+;JFb?c>mA8tzI-RaDmW*GM5cin+qL47Bt^eZnATGZfj?6Aj%mE7}uul8-%
z<<!dwTe_SjCI8R<nZNxHtY~=ZB)Mgd&b$f-^SD))4l3pU5_Ool$?4Jw-i;++)TEZL
X_qn$}e95I2R`t~{7*6hY)zAb0`6qbH

diff --git a/secrets/nixGithubAccessToken.age b/secrets/nixGithubAccessToken.age
new file mode 100644
index 0000000..c222bc5
--- /dev/null
+++ b/secrets/nixGithubAccessToken.age
@@ -0,0 +1,20 @@
+age-encryption.org/v1
+-> ssh-rsa Abmvag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+-> "J,lTC+-grease p ,
+TRD6pwBJQ9U
+--- uAglxAkrcJdg7FPLhAin6AUGoYQQ9O071OIZptp9790
+�[���!!��x�"���`Y�I��ց�G
+(�F:dq�E��Chl�����	���}]`�6w�m`X
+•�y�
t@q�
+l���[�R��ݐ(�~t��M�^z��
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index c97fb0e0717fc74a290fcafcf56d68af208bc398..6bc127a596212e0f90987ef32c9f03944b678e3f 100644
GIT binary patch
literal 338
zcmc~vE#Xp7s4Oi`NlY$ERIpV@D$UF($;>O(D@sjFam&m}RnXIiN$X{&R_Ya$CRuYS
zD3s^tl;-B=rKIA}1D8i=%FN@c=2B2lDo+n6%CD#lD9S8LEJ^iFt<+0QPgMdLoRgXC
zomyF}V5<-fvlC%aEXZ1=^7P=;qO#N?;&emwB&8PRCFPfd<Y%Ymkz!X~W`%oZNk(as
RV{&q8aWO&tvDRF*TmaNNcOn1)

literal 338
zcmZQ@_Y83kiVO&0U~W11Rd8Nz=N2Qy&}(zH>tq~H=4kaZV9@ov(f@tvO|=DneSi16
zw`|<*lXGIP!6|_{|DA^pu5G9@Ia|H;wBb6w$MvZd@pIPaPv5YY{m|JvE4FL#{Jqk0
zB#nXRlZXGx7=Dr4HeZvB9Qd>DEA>UIMU`H*c_ek#tw8>5<EJN+uiVk7lh5HStT-<c
zxM)V$(}>%wr|UG^r`Yw0Z%AIX)V|}>{PUI4qRq~ZmOcL^e|A(b^p(V4IrLeqVe`2U
zN^h>~Gk)K9&P{RJit;0wHajhLPFV8zSC8c7qo*swp4)hz`2J;{_w=c<LWxsuH$M8N
zD<W*N^iK1P)hZGvi!Bs0w$9?5Zq?4Y<$h15X_&&U-v`X~L?-aCmH&%2yw|9(xU*p$
yW6kUC*nsS(MI8?;`25yZNwXy?ENf5Bh%z*~-Bn~6^zYei4XrtgcfKh4JQn~ItE9OA

diff --git a/secrets/wolumonde.key.pub b/secrets/wolumonde.key.pub
index c4c9726914e133f70a7abafbff478dafba547004..28a7b890fc2d076ce2f2551ea8a33734c01f3082 100644
GIT binary patch
literal 80
zcmXRe&d^OwF)}qZv{Z0(baZq!_Nz*CHq41~@ig=caWw^rdAb#rc^3Po78_+(>6au0
hMV1DX`5GtYdZqXqWMrg76y~R8WtO{?WO`*40|4cx8eRYZ

literal 102
zcmZQ@_Y83kiVO&0Sk!B4ahBO_^6E*i?@rChymY|Hv|1o5xRt~2X|>Y_=P!2q=lzbA
zeqZvaEcU$el$qxCb8l|lp|ko>+>uSI!j>w_Tnj#?R4(&lpPcN`%sElbK32QjUfl_u
K`Srcf2O|JwC^4k~

diff --git a/secrets/yusdacra.key.pub b/secrets/yusdacra.key.pub
index 87fb0c768597ea92ac22c20c68c0404c169f6b15..ed19e579cca8207257f66722bd6d3f588db29983 100644
GIT binary patch
literal 725
zcmXRe&d@C?PE>GobaZqw_Nz*CHmpoGas_c+90MJl9335<9RpoLQ(c_GO)~O4((^(L
zg0sThQr%suN-|0;^UM8{f^#z~!y|HYJzd=c3yeH{0}9;=oGY^ZL(L5Hi_6lS(@dg5
zERFoLEi=7B@-uwO-JHriyn<ZxwVgdI^pi|YiqqX3D-3gd{FAc1{C$0@OftixOe;;&
z{7Rf6OFbQpe3Ju%1M_`d3S6qpLR>0y&CAR^+{~-;Lo1zf(>#1b^ew|PBlN4x+)6An
zBF&6bGb~+_-OR(oLW8POL(3w391BV;%R?hWD=Jc)jl84u!-`x2iah-*oRj_2vy5|6
zwGFF6GF>dH%F`U(GqS6KT#P+kD-0@~BfZV?t4fM8%)&#;9ZjRcwUd3SGChon!(7XP
zJ=_wF{EaOw(ml(f3aW}zB14h`OAO3X^z$pDJj>Ebk_#$aEIiAy3f$8@T#Nnma~;zS
z^2<^yDhnOMvb96P^bI2_gS`{;0|LUFQ?nBb41!DzoWoo!vt6^b-E&;bEh3yEGqtr7
z9eq6u4fI{K{rn@c)3b}y{9Q_nE4=~&ssbxayge+^lk*Hx0=;}qt5PdN%3acubE<rU
z3Z2V+3{%5AA`J{&lS<qzJ(GQMeT&1h^>cj9$_hNvDm@B4ati&tjGgmBOI@6jldCKX
zO#OqL4U<c=Oo}X>b0Y!*ax={RBeTuZ-7^D|O!6yA3yUM2bE*m~jSF)_%?o|Y+{<$-
zoV*gl64U)Wz0#culT6c!^HL4`eRGmii%gw8Oni(D^Q(%hvV*g$oFhuy!u|3?QqluG
zLJhr)T`DSkEW-o6oYTCsOHEt@yb@C){WB~KLWA=XOZ~G`O`QwVirq`n%u0O=O>#^l
zbCQz{1C#wSf(k1NQbT+kJ)<fNTq9jFasy3L-Lo8{k}}K8Qc^+-EK?j)G6QXGxd7?y
B^1}cC

literal 746
zcmZQ@_Y83kiVO&0_-3d1{#Nw1x`HD~n)UZ~aTM)-yyfdJ;iW5o`-`7nR<>2T^19Pi
z(caae&)nnEr@skS?zw%^vHGQg`S#hre?C_Ta=6zZ5OuE9L+tFOj_ngZ$n6W5!xq@O
zoLe=L@2X{qm0)Dj-cWB}H->~oZxkMLCYNj$*j(<knC0+Q&tl<c(PxhCb=vuLw?zCI
zS5H&+QwpY@iKd<(d;K@1HVdp33S8KzI;Z|nuV&z_M~7~k7wwzy@W#Z_<5s&?Fx{Tu
zQ#tLz!(Hrq@4Z~p{9@Ym3!yAIx4*2GU0t>JmVWi+qe2I2dZ*7lRg;tX?|^4<s_3i*
zJQLUCG}Z4A%$%9{=H=V}AK4y;ZwoH6ik}%Ed%REP$WQyIwNH!B^*B#9{HJ)lcgg#D
zp2X0JcV4_;{mLVw7JBo*$|rXM`*hSeSWKHv{Z>`pyXQ8Ss1#R${{Gk77E~5=aJ!yJ
zI(=n|)7rwCOWR^TO+Fcx=XT0L=4tOLC#TK@-<-dFxwh8p)xD%`EA^*c5-BqKp)oK2
zblZ__^H(@~&)R%z_m-1c?Q0^%%WvJ=wP?khZI_dq9GQHUtL)!2wIg2YPfB`stJ;To
zE!?Xbm0JJ1i5VSvopkW#w|O!-%E9Mf-3xPe(M^_3op<nZMU&#5>dG*Y%+|$O=Hc_S
zJA*hcn<ghF1TUNI!+W%nZ%N;*#**5N`!BuDkC#i;ZGRNQ`Mda^&Y5z)kNjn)eyh&h
z5RnrR%R0Y#U+Aed#%xuN42vqbJ4z1b=GaN<J<&MWAayW#Vt}kg|L4~n51)LGR=#mj
z(|)C6n~Ku+Glre&M>bUYWI3};P_AW;i{|ioxbKRo>#S<6$~9B-mb6~Ide3$5RnEeT
zhpT+QG;&nhFwD_k7{zEZN8q0g$K~^>$0n34Tetg9<t`hmqT2O-_NVq8JhSog--w&B
zRa{SNx;tLBJ&J3}{>!V{a@$qMXikY`kd9%<k@NXeUj4h|vcj&W+~_dhBZZk8=UTMw
NmYe1N)o-&gD*!!*b-@4t

diff --git a/shells/default.nix b/shells/default.nix
index 97225a7..eea6e72 100644
--- a/shells/default.nix
+++ b/shells/default.nix
@@ -1,9 +1,23 @@
 {tlib, ...}:
-tlib.genPkgs (pkgs: {
+tlib.genPkgs (pkgs: let
+  agenix-wrapped = pkgs.writeShellApplication {
+    name = "agenix";
+    runtimeInputs = [pkgs.agenix];
+    text = ''
+      if [ -z "''${1-}" ]; then
+        agenix
+      else
+        RULES="/etc/nixos/secrets/secrets.nix" agenix -i /etc/nixos/keys/ssh_key "$@"
+      fi
+    '';
+  };
+in {
   default = with pkgs;
     mkShell {
       name = "prts";
-      buildInputs = [git git-crypt alejandra helix agenix];
-      shellHook = "echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"";
+      buildInputs = [git git-crypt alejandra helix agenix-wrapped rage];
+      shellHook = ''
+        echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"
+      '';
     };
 })