diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..f0bd4f3
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets.nix filter=git-crypt diff=git-crypt
diff --git a/.gitignore b/.gitignore
index 6108db7..e410d2a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,2 @@
-/secrets.nix
-
 /wallpapers/*.jpg
 
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..8645efa
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1661628722,
+        "narHash": "sha256-oR/7NhG7pPkACToUtaaT6hH+rONE2z5/4NzjoUwEZt8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "324c8aaf25b2f2027af7798e5582ce3040a793b6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..0ebaf1c
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,16 @@
+{
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+  };
+
+
+  outputs = { self, nixpkgs }: {
+    nixosConfigurations.systemHome = nixpkgs.lib.nixosSystem {
+      system = "x86_64-linux";
+      modules = [
+        ./system/configuration.nix
+        ./system/machine/home
+      ];
+    };
+  };
+}
diff --git a/secrets.nix b/secrets.nix
new file mode 100644
index 0000000..b14ae77
Binary files /dev/null and b/secrets.nix differ
diff --git a/shell.nix b/shell.nix
index e76593a..1033079 100644
--- a/shell.nix
+++ b/shell.nix
@@ -3,5 +3,6 @@
 pkgs.mkShell {
   nativeBuildInputs = with pkgs; [
     stylua
+    git-crypt
   ];
 }
diff --git a/system/configuration.nix b/system/configuration.nix
index 6af4467..003a3fb 100644
--- a/system/configuration.nix
+++ b/system/configuration.nix
@@ -8,8 +8,6 @@ let
   secrets = import ../secrets.nix;
 in
 {
-  imports = [ ./machine/home ];
-
   networking = {
     networkmanager.enable = true;
 
@@ -150,4 +148,3 @@ in
   system.stateVersion = "22.11"; # Did you read the comment?
 
 }
-