diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 05a56c1..9ec719b 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -29,6 +29,7 @@ in
     # I prefer to use json format for the secrets
     defaultSopsFormat = "json";
 
+    # Define file and key for each secret
     secrets = {
       "clusterPassword" = {
         sopsFile = ./secrets/build.json;
@@ -45,12 +46,12 @@ in
     };
   };
 
-  systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
-  
   environment.variables = {
-    SECRETKEY = "${config.sops.secrets."clusterPassword".path}";
+    LEAKYKEY = builtins.readFile config.sops.secrets."clusterPassword".path;
   };
 
+  systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
+ 
   # set up DNS with nginx
   security.acme = {
     acceptTerms = true;
diff --git a/nixos/hardware-configuration.nix b/nixos/hardware-configuration.nix
index 60e6ce9..4d9c12b 100644
--- a/nixos/hardware-configuration.nix
+++ b/nixos/hardware-configuration.nix
@@ -8,7 +8,7 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "ehci_pci" "nvme" "sr_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
   boot.extraModulePackages = [ ];