move secrets into flake so i dont need impure anymore

systems/x86_64-linux/navis/default.nix

@@ -51,7 +51,7 @@ with lib // pkgs // inputs; {
   '';
 
   age = {
-    secrets.passwd.file = /etc/secrets/passwd.age;
+    secrets.passwd.file = "${self}/secrets/passwd.age";
     identityPaths = ["/persist/root/.ssh/id_ed25519"];
   };
 
@@ -102,7 +102,7 @@ with lib // pkgs // inputs; {
 
     systemPackages = [
       agenix.packages.${system}.default
-      gnome.nautilus
+      nautilus
       internal.lightly-boehs-qt6
       looking-glass-client
       snowfallorg.flake
@@ -119,7 +119,6 @@ with lib // pkgs // inputs; {
       hideMounts = true;
       directories = [
         "/etc/NetworkManager"
-        "/etc/secrets"
         "/etc/ssh"
         "/root/.ssh"
         "/var/lib/bluetooth"
@@ -468,9 +467,9 @@ with lib // pkgs // inputs; {
     bluetooth.enable = true;
     i2c.enable = true;
 
-    opengl = {
+    graphics = {
       enable = true;
-      driSupport32Bit = true;
+      enable32Bit = true;
       extraPackages = [
         vaapiVdpau
         nvidia-vaapi-driver