diff --git a/README.md b/README.md
index 5593abe..2dbe2f0 100644
--- a/README.md
+++ b/README.md
@@ -1,9 +1,18 @@
 # nix-config
-my personal NixOS and home-manager configurations
+My personal NixOS and home-manager configurations.
+
+## Hosts
+- `nixos`: My main computer.
+- `vps`: 2GB KVM VPS server on [RackNerd](https://www.racknerd.com/), installed with NixOS using [nixos-infect](https://github.com/elitak/nixos-infect).
+- `wsl`: NixOS on WSL via [NixOS-WSL](https://github.com/nix-community/NixOS-WSL).
+- `y2q`: Spare Galaxy S20+ phone, repurposed as a Raspbian server using [Pi Deploy](https://github.com/DesktopECHO/Pi-hole-for-Android).
 
 ## Deploy
 ```sh
-sudo nixos-rebuild switch --flake .#nixos
+nix develop
+
+deploy-nixos # Rebuild and switch the current NixOS system on this host
+deploy-home # Apply Home Manager configuration for the current user
+deploy-vps # Rebuild and switch NixOS on the remote VPS
 ```
 
-
diff --git a/flake.lock b/flake.lock
index b95a777..d4f9e75 100644
--- a/flake.lock
+++ b/flake.lock
@@ -259,11 +259,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1759886312,
-        "narHash": "sha256-443pT8Lzqbae3IIfKb+2YguaFbmnV3tgP2Y/A0g8AF8=",
+        "lastModified": 1760145372,
+        "narHash": "sha256-DoYFmqHa/enkUcqJZ4vJ56cE9OdA/VZVPBDByAi4iLw=",
         "owner": "kaylorben",
         "repo": "nixcord",
-        "rev": "a6778f442e0099b8b188e720683667cbb1e79158",
+        "rev": "a875b64598bf15ae54ad4de539221359de1a2448",
         "type": "github"
       },
       "original": {
diff --git a/home/modules/cli/nixvim/plugins/wakatime.nix b/home/modules/cli/nixvim/plugins/wakatime.nix
index 1fd38a3..dd71d5c 100644
--- a/home/modules/cli/nixvim/plugins/wakatime.nix
+++ b/home/modules/cli/nixvim/plugins/wakatime.nix
@@ -1,4 +1,10 @@
+{ config, ... }:
+
 {
+  sops.secrets."wakatime" = {
+    path = "${config.home.homeDirectory}/.wakatime.cfg";
+  };
+
   programs.nixvim.plugins.wakatime = {
     enable = true;
     autoLoad = true;
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index a04e661..cb64f20 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -9,6 +9,7 @@ restic:
 zipline:
     env: ENC[AES256_GCM,data:HOcqrzXnu+BcpZYgv1yzPOTV4ydJiVa0oIXQWMUNt/X6q2TUGPOTwWg/dOgzoi6jGzFxm+wJzugO4lLQurUV0DiWIWLDSm/PK+zW34yLYwMrwK1bRaF9yl7usAN6BEmpLw==,iv:9IZDQRT2JoXNTuyPZrwRSr2m3SnXaLmJcafpkraCFWA=,tag:+7EoCTiY9f0/C5jgvPQknA==,type:str]
     token: ENC[AES256_GCM,data:Ke+cJQ6Up5RUGqe/3tG7Nk40PoOQ1Vq1jN5QN4N5LXOFgclXpzN7sjx0bumFVEcgg4B7UkHmjHzjRAPtWheFu+1PaN02aQVLMGzYXgujqmccC+6roxYt4vdN0CLzf0Ii7k5KUwX3QdOV+lrVwyoBjgQyTD839YnODI7zavf+aDMlrE4+BlFjjV8MUQHsJ5G017xN0XLKOBIQsGpMl40YsvVXFrNwkZ+DkN7bXCZBiHI41W44snB1C3wkYOO+a0g4JzVjIhcHXalYgOW4Unuyyah8yDoXRxuSq7aZpQ+/AHRiuIuaHSrE5BUJu/9bJdjojNuk6VTsaLFtngViSjtyztcqMAIHFFq/KXAog8tg16dJH/V6PomrWXY=,iv:H/EcD/oNSw1mIwxsqyMeSRPsY7lnzEzTNJs6OPNfPw4=,tag:FgH9Nwxnq62uhCd/Av2kAA==,type:str]
+wakatime: ENC[AES256_GCM,data:ScFdcITVQXFoeXOVBMpfmIgOlnXv1lUAwXMR4Tvyk4AgVHuUPP7L9c1QLDUWcZr5Vaij0Ycs0LGpoYMMTXt8Q+CrW6H4C9zCyXgrxiKuh9E269DbCa+um96d8XKhnTXLCZxxkFL5qxaOIbPvx8fKC8HxCEFFgTcI+jJfSVVz8sN2my3i12SUICv7FYljK/BzceiyA+o=,iv:ShwFByvbOsmdivtE0bjmvzvsLUchdl39DtJEUqwAfaE=,tag:Vh7aIp9bB8GnT/dKiI8FyQ==,type:str]
 sops:
     age:
         - recipient: age1mggj0wsszz92kfpvq7pjlf0mthkljl9usu7u98jrmyxh85q4pecs6zz4ll
@@ -20,7 +21,7 @@ sops:
             Z0crWElZcVFMVUd0VytoTHFqbkRDck0KY8nsRThk1hCA/yDNy5JJ0T6pTUwRZhYW
             j8grD6JYvauuYa+3tSIwqy2RPiKltx696n9nXy9iPnFUO0QY/rQGVg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-09T07:41:18Z"
-    mac: ENC[AES256_GCM,data:zLuNIqXZaFBGXHEXDLbs5U2IaJRNDuPWX6MAhFVP28dWsghWgcNF3Oh09YCO4rAtgby73rN48Stm/mvmUFnvP90t0vGXRlAsflNnGJhiwMW9YyUGBaFUh2BSKUzOC37R+ZQEpchngqCoIHjCtAL+1EWjgF0QCac/aH9rwBd6MmQ=,iv:Z9/KOe1LgZpDw5l2Sk0f19hyV7dQotxuDi2GdOFsK0E=,tag:YngGlczVYLhShguSJyXe0g==,type:str]
+    lastmodified: "2025-10-11T05:38:04Z"
+    mac: ENC[AES256_GCM,data:U4xLqOc+J8T7s5B2a8Sq/KG5Lr0ubx3GIG8fH3J+b2g4+EJPzVOLnd9jg8BR2+YYqkGI9RAvf6J2hcej7zAZcovXF1t66kaHWoExqEJCkQxs1cZccBMRjlml3OVqMuXI6NINuv+SWTWtUKfxAmjqhgXjY8zUR0pOxWrLXhPs5p4=,iv:Qjt25LF2ygYO4rVTCIIHpo9j19NVTf5UE0gCLfB9l3w=,tag:GP+hE082E8VGbmbxHOspcw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2