From 932de1752d01b70cd48bd25bb59a8f891d48afca Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Thu, 18 Jun 2026 17:19:29 -0400
Subject: [PATCH] fix: place agenix-rekey config inside module (was outside
 closing brace)

---
 hosts/uconsole-cm5/configuration.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/hosts/uconsole-cm5/configuration.nix b/hosts/uconsole-cm5/configuration.nix
index bc6a14a..5702156 100644
--- a/hosts/uconsole-cm5/configuration.nix
+++ b/hosts/uconsole-cm5/configuration.nix
@@ -183,8 +183,6 @@
   # ============================================================
   networking.firewall.allowedTCPPorts = [ 22 ];
   networking.firewall.allowedUDPPorts = [ ];
-}
-
   # ============================================================
   # agenix-rekey — automatic secret re-encryption at deploy time
   # ============================================================
@@ -202,3 +200,4 @@
 
   # Enable remote builder (distributed build via lazyworkhorse server)
   services.remoteBuilder.enable = true;
+}