diff --git a/modules/hosts/john-p14s/configuration.nix b/modules/hosts/john-p14s/configuration.nix
index e1f5ec0..e7ff129 100644
--- a/modules/hosts/john-p14s/configuration.nix
+++ b/modules/hosts/john-p14s/configuration.nix
@@ -97,5 +97,16 @@
         # no need to redefine it in your config for now)
         # media-session.enable = true;
       };
+
+      home-manager.useGlobalPkgs = true;
+      home-manager.users.john.imports = with inputs.self.modules.homeManager; [
+        gnome
+        desktop
+        mysops
+        ({config, ... }: {
+          my-vscode.enable = true;
+          mysops.hostSecretFile = "${config.home.homeDirectory}/dendritic/modules/hosts/john-p14s/secrets.yaml";
+        })
+      ];
     };
 }
diff --git a/modules/hosts/john-p14s/default.nix b/modules/hosts/john-p14s/default.nix
index 66a2237..ee0d5e6 100644
--- a/modules/hosts/john-p14s/default.nix
+++ b/modules/hosts/john-p14s/default.nix
@@ -10,16 +10,6 @@
     modules = [
       "${inputs.nixos-hardware}/lenovo/thinkpad/p14s"
       "${inputs.nixos-hardware}/lenovo/thinkpad/p14s/amd/gen4"
-      {
-        home-manager.useGlobalPkgs = true;
-        home-manager.users.john.imports = with inputs.self.modules.homeManager; [
-          gnome
-          desktop
-          {
-            my-vscode.enable = true;
-          }
-        ];
-      }
     ] ++ (with self.modules.nixos; [
       p14sConfiguration
       sudo