diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 00000000..0518f829
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,17 @@
+keys:
+  - &lilith 3586D8D6689B9C9ECD598C588712A0F317C37175
+  - &lilith-pad age1mqw75xvd2gnhx2wsmkr8yctegjfym6xkypwjh82s3yws2glk4vms3cxqaz
+  - &lilith-pc
+creation_rules:
+  - path_regex: hosts/lilith-pad/secrets/.+$
+    key_groups:
+      - pgp: [ *lilith ]
+        age: [ *lilith-pad ]
+  - path_regex: hosts/lilith-pc/secrets/.+$
+    key_groups:
+      - pgp: [ *lilith ]
+        age: [ *lilith-pc ]
+  - path_regex: secrets/.+$
+    key_groups:
+      - pgp: [ *lilith ]
+        age: [ *lilith-pad, *lilith-pc ]
diff --git a/wayland.nix b/wayland.nix
deleted file mode 100644
index 390d11fe..00000000
--- a/wayland.nix
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  pkgs,
-  config,
-  conf,
-  ...
-}: {
-  security.polkit.enable = true;
-  security.pam.services.hyprlock = {};
-
-  services.dbus.enable = true;
-
-  environment.systemPackages = with pkgs; [
-    xdg-dektop-portal-hyprland
-  ];
-
-  xdg.portal = {
-    enable = true;
-    wlr.enable = true;
-    config.common.default = "hyprland";
-  };
-
-  hardware.opengl.enable = true;
-
-  services.greetd = {
-    enable = true;
-    settings = rec {
-      default_session = initial_session;
-      initial_session = {
-        user = conf.user;
-        command = "Hyprland; hyprlock";
-      };
-    };
-  };
-}