diff --git a/flake.nix b/flake.nix
index 1d833b5..07173bb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -53,7 +53,7 @@
         modules =
           [
             inputs.disko.nixosModules.disko
-            ./machines/musicbox-disks.nix
+            self.diskoConfigurations.unencrypted
             { _module.args.disks = [ "/dev/sda" ]; }
             ./machines/musicbox.nix
             inputs.home-manager.nixosModules.home-manager
@@ -90,12 +90,16 @@
           system = "x86_64-linux";
         };
       };
-      beefcake = inputs.nixpkgs.lib.nixosSystem {
+      defaults = {
+        environment.etc."nixos/configuration.nix".text = ''
+          throw "sorry, no nixos-rebuild, use colmena"
+        '';
+      };
+      beefcake = {
         deployment = {
           targetHost = "beefcake";
           targetUser = "daniel";
         };
-        modules = self.nixosConfigurations.beefcake.modules;
       };
     };
   };
diff --git a/machines/beefcake.nix b/machines/beefcake.nix
index c9b74b7..7b5b63b 100644
--- a/machines/beefcake.nix
+++ b/machines/beefcake.nix
@@ -117,6 +117,8 @@
     # packages = with pkgs; [];
   };
 
+  users.users.root.openssh.authorizedKeys.keys = config.users.users.daniel.openssh.authorizedKeys.keys;
+
   users.users.lytedev = {
     # for running my services and applications and stuff
     isNormalUser = true;