diff --git a/hosts/by-name/flowy/default.nix b/hosts/by-name/flowy/default.nix
index 58db968f5..f33ec7a0f 100644
--- a/hosts/by-name/flowy/default.nix
+++ b/hosts/by-name/flowy/default.nix
@@ -8,7 +8,8 @@
   sane.roles.pc = true;
   sane.roles.work = true;
   sane.services.wg-home.enable = true;
-  # sane.ovpn.addrV4 = "172.23.119.72";
+  sane.ovpn.addrV4 = "172.23.119.72";
+  # sane.ovpn.addrV6 = "fd00:0000:1337:cafe:1111:1111:0332:aa96/128";
 
   # sane.guest.enable = true;
 
diff --git a/hosts/by-name/lappy/default.nix b/hosts/by-name/lappy/default.nix
index e0d9931ba..5084d1125 100644
--- a/hosts/by-name/lappy/default.nix
+++ b/hosts/by-name/lappy/default.nix
@@ -7,7 +7,7 @@
   sane.roles.client = true;
   sane.roles.pc = true;
   sane.services.wg-home.enable = true;
-  sane.ovpn.addrV4 = "172.23.119.72";
+  # sane.ovpn.addrV4 = "172.23.119.72";
   # sane.ovpn.addrV6 = "fd00:0000:1337:cafe:1111:1111:0332:aa96/128";
 
   # sane.guest.enable = true;
@@ -17,7 +17,6 @@
 
   sane.programs.firefox.config.formFactor = "laptop";
   sane.programs.itgmania.enableFor.user.colin = true;
-  # sane.programs.stepmania.enableFor.user.colin = true;  #< TODO: fix build
   sane.programs.sway.enableFor.user.colin = true;
 
   sops.secrets.colin-passwd.neededForUsers = true;
diff --git a/secrets/flowy/ovpn_privkey.bin b/secrets/flowy/ovpn_privkey.bin
new file mode 100644
index 000000000..6d088c65f
--- /dev/null
+++ b/secrets/flowy/ovpn_privkey.bin
@@ -0,0 +1,27 @@
+{
+	"data": "ENC[AES256_GCM,data:O/ueyhDoNXkcttpX+fZwY5pP1uw5JqmD1VCOOOGNEnJiNPMFkRY7ZDoLy7ct,iv:Fe8LYkH5ijJ0LGtVkR5bHYvNwWs4R3mGXxBR91jI4To=,tag:8x3RRD6YD2WgjS93csFYqg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1j2pqnl8j0krdzk6npe93s4nnqrzwx978qrc0u570gzlamqpnje9sc8le2g",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbXNLTm56RlRzeXIzOTl0\nVndFd2dhZElDdGdQMGVTQ0hlMld4T2U1R3ljClAzWVVkanJPY2lRODlQMmRMNVBU\nV0lhNm9LRmtVT1RyNHlNdjVGcHMvQ2sKLS0tIExnRDJKVXBxZnQzYy9LbHZKbFFZ\nUTRLTVUrclhRTHhGdG5OTTdyeThIeG8KtFBpDaBKFuphov6Fvt3MA8dWi5N8d/t/\nGo3He9Dy+gSBSyhcYRMKlRrDGNLlOnpmwS3xK/SNYpLl8vc+mUTsQg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1nw3z25gn6l8gxneqw43tp8d2354c83d9sn3r0dqy5tapakdwhyvse0j2cc",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3I0RENSeFprZzhEcTRG\nNGVNRk95OFpqd2RRTlEvUUUzTjVKTThHZ0ZvCnExUVJqQWpXY08wbWdQYzdFZ0c2\nZXN0YmlURCtZOGovbm1VWXFsRGNBeG8KLS0tIHhqbHRNZkZ3bnRwc2lqMlZMdGsz\nWFpnU0pKY3RFSkkvbkQrY1pwcUVmVncKR/pGYAKFD61aHUnNPWVPWRtHmMJ9qnYb\n6INF2SvnK2GDjhnPwLOxExlEWr9IJvcCj/iag95TAvvpKvbdOHgY0g==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNOXFZWkVUaEE2SFQ3Zk1F\nYkRDbXpheUpXQ3VGUG1QTDB1dEhoWTVzVWhnCjVwdFlqdzFPYUNXRXhBMzFmRjJW\nK2dlc0JuclV6b2xzVVVxaVFsQ01OZEkKLS0tIHJ6UE4zMC9yamhlWkZYZ1BZOXlq\nVTVuUjlCZUxQMjhnWFAyc2pKMStOdTAK3RSIwt0nM5zbyZtLNTcfl91uTyk+jpuA\nVW2Xz3Ci/JvjlKxdwX+cYzhA0DvM2QKoO+WCUFJ9DgJRvuyQWXm7oQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1azm6carlm6tdjup37u5dr40585vjujajev70u4glwd9sv7swa99sk6mswx",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoRzIybmFLbis1eG80UDNK\nMVRmbUJQQUZzbWpiaDIzMWRMTjF6OTZiNXdzCm5Qd2U1OU0zZzRham1FZHVCVHpl\nSVAxUmNSOWZlL0NSUkN5d01Cb1dwZGcKLS0tIDFCWWZwZWNlaHZWZkp6dkFSZVJF\nbHFheEttVXViSDBVd0xBMDJHMjBvN2sKdMaGo2VfcuJDqsgZLJjDBqR+MtpJDMvX\nRZTn6khiUBuhJyDbDvNK0o0BE/q/f2ob+NEAVUO6Qj6wEZWvBCp+Sg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-30T20:12:26Z",
+		"mac": "ENC[AES256_GCM,data:TpufpeOrcyT9LDvt8lFkzZ17AeX6TOerNrVuwA0jjkkrzuvQtJMlkhcVQFq1lGcpWnzqeuOaitRyF/NbEQg1wnv8LWj+BA6+zqN9Yo75eS2Wcbv5A1szscAJPcUu8bTfyssmiKwDKg3D21H9purkmgjdIeqjViCPXdfRqK8mTYM=,iv:L4wPaOgiC/oECGqwwhJctlZKg/CThxlsYHarZePa2HI=,tag:PmQYsloQzPGU0cWkmPepVw==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/secrets/lappy/ovpn_privkey.bin b/secrets/lappy/ovpn_privkey.bin
deleted file mode 100644
index a51ffbf2c..000000000
--- a/secrets/lappy/ovpn_privkey.bin
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:u2Bej5jF/UoLQxPe4+aW1519oAAZ/hKMPu6rXFiRk/mVoLVic6+noflsOtbn,iv:H7+E3kmJS4nlsH9kVmIYakEQMpaE6sm3FrLVww7Cdxs=,tag:PvyMf+BT1T8qWxscftq68g==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"recipient": "age1j2pqnl8j0krdzk6npe93s4nnqrzwx978qrc0u570gzlamqpnje9sc8le2g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4OE1UQU1wdGJ1c3ZnYmxE\naWp2NjZYTnNyOENsUkw4dHFMa1YzRkJKR2dZCkJ0UkVxK2Ftd05Ic0lCUUJPNW1W\nQXQzUGxTYXJIQ0lIM2Z3YWNPb1dsWjgKLS0tIC8vNld2SmxBVHMyTDhNdDVpUHlx\nSlJGUGVLZUZOWUllYmUrWXJGaU9EWVEK+pIdvLBTDpprvTOOBdmINe+LTjILeUNz\nIumsztK1UO1U816tElVmM0cdUyh4KUxDBcK48wpnDZ61qX7L+v2S3g==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1nw3z25gn6l8gxneqw43tp8d2354c83d9sn3r0dqy5tapakdwhyvse0j2cc",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhQnRpN2sxbWlDZEVxc3FL\nZU03bWlNU0hSaEFYQ0w0VCt1T3dEY3ZZVjJJCldyeUhZZTJ1RkdLbUE0bUJteEpC\nclpmVlVyem8xc09KUHRVM0hKT1VSdTAKLS0tIG9zc0I4TldVYlVnWUdnZm5ET3ZB\naWgyK3RMRXVyemJGbkdUb2pPSEVHSjgK2PpohcEk/fVMH6DF2ZufJHHhAJRtXY67\nGkYuwf3WD7vlqqnasqNboWKIWRohhREXCB0HheWVdqCnE0JMVRyoNA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5eUU4UHZhS0ZnSmtOUnhI\ndDI3eWhBU0UrUmd3RXM4c0RlUU1JK2RyZnhjCkZZelgrejlLSGJ2cEJuV0g4SFF0\nS20vQmhRMVpMVE1DQkhVUFpSLzUxZzgKLS0tIHIyTHRKRGVaRnM5TmFNV2Y2T0dy\neDFWZ3VDbGh2dEFISTRlcjRDbXVPM0EKaEnRrfKWEtPUlRv5RlSrmdjht0RHtME3\nFTTLzVFBPi9coWT0t9kzFMEEQKVToa88Fx/UPO0k3PpFA8n+ylKgMA==\n-----END AGE ENCRYPTED FILE-----\n"
-			},
-			{
-				"recipient": "age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjTGpkV1dJZFhIRjYvVnY3\nWEUvOUhyYWFOSm11ajVmcVljZDNGM1E3bUQ0Ck41S1dpQmd3Slg1UUtXcC8rYmU3\nSC9WTlFlT3NRYldLTzB1eFE5ZSs2RWsKLS0tIE55RGFhdWFzQmtaSzY0WFVRUUQ3\nYUlvR21iV1MyR2tZcS9WU2lJc1B0Ym8KCxjmzm4xFqYH+S4xagOC+ECQdD8Ut4+o\n80PkqrvUgTYjYvTjHYOvCLnXWg5NIdw41G8y7tS/ofDDigevepzkEA==\n-----END AGE ENCRYPTED FILE-----\n"
-			}
-		],
-		"lastmodified": "2024-05-26T13:18:51Z",
-		"mac": "ENC[AES256_GCM,data:Jc8qZ47WVHL8m3V/tQ/aWyORCDVzebffSxhqTOOyHdu4FpuQIJMkVfqipKnbQVC1oRSB8BSDW6LcVywWJpk00XG/NfqYYPw3q0UTpisJrX6GjqdqGDadBdOeuqlfTTCYJfAFDU4JiLnUCYlpdY2eUnD/fRi+2DsLFtsGj1Sdo4U=,iv:CL4THOlK+GZFd8h0WQmlOJBp+vijQSobPJG/KoFEuTI=,tag:PGLmQRDXcpXHVUOJonHK5A==,type:str]",
-		"unencrypted_suffix": "_unencrypted",
-		"version": "3.8.1"
-	}
-}