diff --git a/os/linux/nix/flake.nix b/os/linux/nix/flake.nix
index c4ad082..983c98e 100644
--- a/os/linux/nix/flake.nix
+++ b/os/linux/nix/flake.nix
@@ -1,17 +1,14 @@
 # Welcome to my nix config! I'm just getting started with flakes, so please
 # forgive the mess.
 
-# TODO: would be nice to get hardware congigs in here as well
-
 # TODO: declarative disks with https://github.com/nix-community/disko
 # TODO: home-manager?
 
-
 {
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.05";
 
-    # TODO: this could be a tarball? fully recompiling this on every change suuuucks
+    # TODO: this could be a release tarball? fully recompiling this on every change suuuucks
     api-lyte-dev.url = "git+ssh://gitea@git.lyte.dev/lytedev/api.lyte.dev.git";
 
     home-manager = {
diff --git a/os/linux/nix/machines/beefcake.nix b/os/linux/nix/machines/beefcake.nix
index 38d9c38..efa738b 100644
--- a/os/linux/nix/machines/beefcake.nix
+++ b/os/linux/nix/machines/beefcake.nix
@@ -2,10 +2,9 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running 'nixos-help').
 
-{ config, pkgs, ... }: rec {
+{ pkgs, ... }: rec {
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
   imports = [
-    # <sops-nix/modules/sops>
     ./beefcake-hardware.nix
   ];
 
@@ -50,6 +49,7 @@
 
       "api.lyte.dev" = {
         path = "${services.api-lyte-dev.stateDir}/secrets.json";
+        # TODO: would be cool to assert that it's correctly-formatted JSON?
         mode = "0440";
         owner = services.api-lyte-dev.user;
         group = services.api-lyte-dev.group;