diff --git a/hosts/default.nix b/hosts/default.nix
index 70fb96e..0a4e294 100644
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -1,18 +1,4 @@
 {
-  ops = {
-    system = "x86_64-linux";
-    stateVersion = "26.05";
-    user = "moons";
-    path = ./ops;
-
-    profiles = [
-      "base"
-      "interface.cli"
-      "platform.vm"
-      "workload.remote-access"
-    ];
-  };
-
   nix-builder = {
     system = "x86_64-linux";
     stateVersion = "26.05";
diff --git a/hosts/internal-app-01/hardware-configuration.nix b/hosts/internal-app-01/hardware-configuration.nix
deleted file mode 100644
index fda7e06..0000000
--- a/hosts/internal-app-01/hardware-configuration.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-# Do not modify this file! It was generated by `nixos-generate-config` and may
-# be overwritten by future invocations.
-{ lib, modulesPath, ... }:
-{
-  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
-
-  boot.initrd.availableKernelModules = [
-    "ata_piix"
-    "uhci_hcd"
-    "virtio_pci"
-    "virtio_scsi"
-    "sd_mod"
-    "sr_mod"
-  ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
-  boot.extraModulePackages = [ ];
-
-  fileSystems."/" = {
-    device = "/dev/disk/by-uuid/1b12ab98-2537-4207-a3f4-bb8ba7b53b00";
-    fsType = "ext4";
-  };
-
-  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/8365-C778";
-    fsType = "vfat";
-    options = [
-      "fmask=0077"
-      "dmask=0077"
-    ];
-  };
-
-  swapDevices = [ ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-}
diff --git a/hosts/internal-app-01/nixos.nix b/hosts/internal-app-01/nixos.nix
deleted file mode 100644
index 2260952..0000000
--- a/hosts/internal-app-01/nixos.nix
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  imports = [ ./hardware-configuration.nix ];
-}
diff --git a/hosts/nix-builder/filesystem.nix b/hosts/nix-builder/filesystem.nix
new file mode 100644
index 0000000..518a261
--- /dev/null
+++ b/hosts/nix-builder/filesystem.nix
@@ -0,0 +1,25 @@
+{
+  fileSystems."/nix/store" = {
+    device = "/dev/disk/by-label/nix-store";
+    fsType = "ext4";
+
+    options = [
+      "noatime"
+    ];
+
+    neededForBoot = true;
+  };
+
+  fileSystems."/var/lib/nix-build" = {
+    device = "/dev/disk/by-label/nix-build";
+    fsType = "ext4";
+
+    options = [
+      "noatime"
+    ];
+  };
+
+  nix.settings.build-dir = "/var/lib/nix-build";
+
+  services.fstrim.enable = true;
+}
diff --git a/hosts/nix-builder/nixos.nix b/hosts/nix-builder/nixos.nix
index aa5ea08..7d423ac 100644
--- a/hosts/nix-builder/nixos.nix
+++ b/hosts/nix-builder/nixos.nix
@@ -1,27 +1,6 @@
 {
-  imports = [ ./hardware-configuration.nix ];
-
-  fileSystems."/nix/store" = {
-    device = "/dev/disk/by-label/nix-store";
-    fsType = "ext4";
-
-    options = [
-      "noatime"
-    ];
-
-    neededForBoot = true;
-  };
-
-  fileSystems."/var/lib/nix-build" = {
-    device = "/dev/disk/by-label/nix-build";
-    fsType = "ext4";
-
-    options = [
-      "noatime"
-    ];
-  };
-
-  nix.settings.build-dir = "/var/lib/nix-build";
-
-  services.fstrim.enable = true;
+  imports = [
+    ./filesystem.nix
+    ./hardware-configuration.nix
+  ];
 }
diff --git a/hosts/ops/hardware-configuration.nix b/hosts/ops/hardware-configuration.nix
deleted file mode 100644
index 8a2f794..0000000
--- a/hosts/ops/hardware-configuration.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-# Do not modify this file! It was generated by `nixos-generate-config` and may
-# be overwritten by future invocations.
-{ lib, modulesPath, ... }:
-{
-  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
-
-  boot.initrd.availableKernelModules = [
-    "ata_piix"
-    "uhci_hcd"
-    "virtio_pci"
-    "virtio_scsi"
-    "sd_mod"
-    "sr_mod"
-  ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
-  boot.extraModulePackages = [ ];
-
-  fileSystems."/" = {
-    device = "/dev/disk/by-uuid/69fa2193-1e4f-438a-8898-5de8a3f36e5b";
-    fsType = "ext4";
-  };
-
-  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/D09B-4277";
-    fsType = "vfat";
-    options = [
-      "fmask=0077"
-      "dmask=0077"
-    ];
-  };
-
-  swapDevices = [ ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-}
diff --git a/hosts/ops/nixos.nix b/hosts/ops/nixos.nix
deleted file mode 100644
index 6db5d94..0000000
--- a/hosts/ops/nixos.nix
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  imports = [ ./hardware-configuration.nix ];
-
-  networking = {
-    useDHCP = false;
-
-    interfaces = {
-      ens18 = {
-        useDHCP = false;
-        ipv4.addresses = [
-          {
-            address = "10.50.128.20";
-            prefixLength = 24;
-          }
-        ];
-      };
-
-      ens19 = {
-        useDHCP = false;
-        ipv4.addresses = [
-          {
-            address = "10.50.7.101";
-            prefixLength = 24;
-          }
-        ];
-      };
-
-      ens20 = {
-        useDHCP = false;
-        ipv4.routes = [
-          {
-            address = "10.50.64.0";
-            prefixLength = 24;
-            via = "10.50.82.1";
-          }
-        ];
-        ipv4.addresses = [
-          {
-            address = "10.50.82.10";
-            prefixLength = 24;
-          }
-        ];
-      };
-    };
-
-    defaultGateway = {
-      address = "10.50.128.1";
-      interface = "ens18";
-    };
-  };
-}
diff --git a/modules/applications/codex/config.toml b/modules/applications/codex/config.toml
index 85aea69..cad8e66 100644
--- a/modules/applications/codex/config.toml
+++ b/modules/applications/codex/config.toml
@@ -8,3 +8,6 @@ web_search = "cached"
 
 [sandbox_workspace_write]
 network_access = false
+
+[projects."/home/moons/dotfiles"]
+trust_level = "trusted"