diff --git a/flake.nix b/flake.nix
index bab05c9..39afb21 100644
--- a/flake.nix
+++ b/flake.nix
@@ -20,7 +20,18 @@
     sops-nix.url = "github:Mic92/sops-nix";
   };
 
-  outputs = inputs @ { self, nixpkgs, nixpkgs-stable, nixpkgs-unstable, home-manager, firefox, anyrun, sops-nix, ... }: {
+  outputs = inputs @ { self, nixpkgs, nixpkgs-stable, nixpkgs-unstable, home-manager, firefox, anyrun, sops-nix, ... }: 
+  let
+    pkgs = nixpkgs.legacyPackages."x86_64-linux";
+  in {
+    devShells."x86_64-linux".default = pkgs.mkShell {
+      name = "delta";
+      packages = with pkgs; [ gitleaks pre-commit ];
+      shellHook = ''
+        gitleaks detect -v
+        pre-commit install &> /dev/null
+      '';
+    };
     nixosConfigurations.dlaptop = nixpkgs-unstable.lib.nixosSystem {
       system = "x86_64-linux";
       specialArgs = {
diff --git a/hosts/dlaptop/apps.nix b/hosts/dlaptop/apps.nix
index 2513c26..d8fc241 100644
--- a/hosts/dlaptop/apps.nix
+++ b/hosts/dlaptop/apps.nix
@@ -47,8 +47,6 @@ in {
     # inputs.firefox.packages.${pkgs.system}.firefox-bin
   ]);
 
-
-
   programs.firefox = {
     enable = true;
     policies = {
diff --git a/hosts/generic.nix b/hosts/generic.nix
index eefc8eb..864edcc 100644
--- a/hosts/generic.nix
+++ b/hosts/generic.nix
@@ -87,4 +87,5 @@ in {
   };
   users.defaultUserShell = pkgs.fish;
   programs.tmux.enable = true;
+  programs.direnv.enable = true;
 }
diff --git a/secrets/intelnuc/main.yaml b/secrets/intelnuc/main.yaml
index ff096e2..d736644 100644
--- a/secrets/intelnuc/main.yaml
+++ b/secrets/intelnuc/main.yaml
@@ -1,6 +1,6 @@
 #ENC[AES256_GCM,data:TKFsca0ngKW2E0UzOkdwYBFqzUKFF5B5+OBBs5Q=,iv:3TpoJ0ERwn5coP+QCb07eKI0bDsCCJzVncvBPNt7ZJM=,tag:wXF9PqFJ6ATe9CDAtLUUDA==,type:comment]
 nginx:
-    graf1: ENC[AES256_GCM,data:V2nwxbhaSZ/+yy2dxGEApWKVUBhpFSY=,iv:BaKJAt1YoDtPbforo40L49Sx2FlicgWzEV/0zGqHsE0=,tag:JcQL6WuPOTAFjJ52ym9+4w==,type:str]
+    graf1: ENC[AES256_GCM,data:cHzo4wiGcDaQu30OOmrI/VQybE6tYuE=,iv:kA6sSxIvLWplfi7sDsB/MP8LaKX0lC8W7W7xa/0ieMk=,tag:tjwstrKdQY1F3xkERW9J8Q==,type:str]
     graf2: ENC[AES256_GCM,data:on14sjWgmx2BIFjo30DIX2ywBZnrSjc=,iv:+KI+fm7BogtG7M3k6OCgw4am/qewwYJSXvgctL3KY3E=,tag:4eJLs2WuCmJ2ibTE82oirA==,type:str]
     kibana: ENC[AES256_GCM,data:qlcKYupyXvWczHFSHwg11kpo27qatIs=,iv:ilu/iQAUmol7TFcGXU/BMD7VF/pvLEDYduyf0eGXTbE=,tag:8L72obuYITfBiV4h6Y+8Ng==,type:str]
 sops:
@@ -27,8 +27,8 @@ sops:
             YmhmZ256WW1yUFV3a3RScmNoSHFsbm8KNPDePbaa5fNywlOo9VBUli76lbkTRigU
             78jZRaQ0fKGobZ4R5lYzJWmZNDbkuEH1VG1L8PlNrbWsbcEvlDya7A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-21T17:10:24Z"
-    mac: ENC[AES256_GCM,data:x+MlSZdjTU/2hW1E8OddGYR8AGa2jxKUz+WzGFM170iM/UJulUnwGVUH9qBbxP/mZk0HTUXF++N+HJopQ+ki4sUi/CFuqoivV3HsgpxBqKR4m4uANHG/6cZenEQOco7nig5lI9+T+pmOZv21AAXCiAGC/H7XdRg0jZ6zDjzH+1A=,iv:RJ8sdc7FEFA14hoQgv/HgOEGwhLLa2wahHEvhSHoqmA=,tag:Cw/kazz5vHKtss2CoWq9qw==,type:str]
+    lastmodified: "2024-03-21T18:15:30Z"
+    mac: ENC[AES256_GCM,data:Wk2tO5f39lm+vk32pLF1bfK5S3KaXg0YmJDfh6Qa32UnOrQf7ZHpeKMowhh1MBEcnLkUTopmkQFg8KbOF+Tn3cpmupovYKaS2qF8yyWTz+3vX+/tmGQInenTIfYY3Vw236MNaRdk391mBc4Gyretnx/RAEEMizWouXxxxP/6uMQ=,iv:D7EVr6VqLWNFnpzYgXyIXry6z9PFILmcdFQV3oUu19c=,tag:HrYArugXPKFRvBcwK1iDLQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1