don't put password hash into home directory

flake.lock

@@ -10,14 +10,13 @@
       "locked": {
         "lastModified": 1716797840,
         "narHash": "sha256-Xhc61kTl/hJ/UmLzkmZjGp1qkv7G0JqmqpIhpbLWQPg=",
-        "ref": "nix",
+        "ref": "refs/heads/main",
         "rev": "e89223d5af321e4298daf4f756d84231412f6f5f",
         "revCount": 38,
         "type": "git",
         "url": "https://git.cherrykitten.dev/sammy/cherrykitten.dev"
       },
       "original": {
-        "ref": "nix",
         "type": "git",
         "url": "https://git.cherrykitten.dev/sammy/cherrykitten.dev"
       }

flake.nix

@@ -15,7 +15,7 @@
 
 
     cherrykitten-website = {
-      url = "git+https://git.cherrykitten.dev/sammy/cherrykitten.dev?ref=nix";
+      url = "git+https://git.cherrykitten.dev/sammy/cherrykitten.dev";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 

modules/nixos/prometheus/client.nix

@@ -12,7 +12,7 @@ in {
       node = {
         enable = true;
         port = 9100;
-        enabledCollectors = [ "systemd" ];
+        enabledCollectors = [ "systemd" "processes" "cpu_vulnerabilities" "mountstats" "network_route" ];
         openFirewall = true;
         listenAddress = config.cherrykitten.network.internal_IPv4;
       };

users/sammy/default.nix

@@ -1,7 +1,7 @@
 { pkgs, lib, config, ... }:
 {
   deployment.keys."sammy_password_hash" = {
-    destDir = "/home/sammy/.keys";
+    destDir = "/nix/keys/";
     keyCommand = [ "pass" "users/sammy/hashedPassword" ];
   };