diff --git a/hosts/glotzbert/default.nix b/hosts/glotzbert/default.nix
index b173bcbe..fc33363b 100644
--- a/hosts/glotzbert/default.nix
+++ b/hosts/glotzbert/default.nix
@@ -14,11 +14,6 @@
     max-jobs = 4;
   };
 
-  sops = {
-    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-    defaultSopsFile = ./secrets.yaml;
-  };
-
   boot.loader = {
     efi.canTouchEfiVariables = true;
     systemd-boot.enable = true;
@@ -121,10 +116,17 @@
     wheelNeedsPassword = false;
   };
 
-  users.groups."k-ot".gid = 1000;
-  users.users."k-ot" = {
-    group = "k-ot";
-    extraGroups = [ "networkmanager" ];
+  sops = {
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+    defaultSopsFile = ./secrets.yaml;
+  };
+
+  users = {
+    groups."k-ot".gid = 1000;
+    users."k-ot" = {
+      group = "k-ot";
+      extraGroups = [ "networkmanager" ];
+    };
   };
 
   system.stateVersion = "22.11";