diff --git a/hosts/uconsole-cm5/configuration.nix b/hosts/uconsole-cm5/configuration.nix
index 6e879e0..477f4b0 100644
--- a/hosts/uconsole-cm5/configuration.nix
+++ b/hosts/uconsole-cm5/configuration.nix
@@ -20,6 +20,23 @@
     users.ai-worker.main
   ];
 
+  # AI worker user (Hermes SSH access)
+  users.users.ai-worker = {
+    isNormalUser = false;
+    shell = pkgs.bash;
+    openssh.authorizedKeys.keys = with keys; [
+      users.ai-worker.main
+    ];
+  };
+
+  # Age secret for gortium password (file created by user)
+  age.secrets.gortium_password = {
+    file = ../secrets/gortium_password.age;
+  };
+
+  # Password file for gortium (merges with users/gortium/default.nix)
+  users.users.gortium.hashedPasswordFile = config.age.secrets.gortium_password.path;
+
   # WiFi via NetworkManager + secret agenix
   networking.networkmanager.enable = true;
 
@@ -31,22 +48,4 @@
     enable = true;
     xwayland.enable = true;
   };
-
-
 }
-
-  # AI worker user (Hermes access)
-  users.users.ai-worker = {
-    isNormalUser = false;
-    shell = pkgs.bash;
-    openssh.authorizedKeys.keys = with keys; [
-      users.ai-worker.main
-    ];
-  };
-
-  # Age secret for gortium password
-  age.secrets.gortium_password = {
-    file = ../secrets/gortium_password.age;
-  };
-
-  users.users.gortium.hashedPasswordFile = config.age.secrets.gortium_password.path;