diff --git a/common/_home_manager/mods/ssh.nix b/common/_home_manager/mods/ssh.nix
index 4100945..543a2cd 100644
--- a/common/_home_manager/mods/ssh.nix
+++ b/common/_home_manager/mods/ssh.nix
@@ -10,7 +10,7 @@ let
     let
       secrets = age.secrets or { };
     in
-    secrets ? ${secret} && secrets.${secret} != null;
+    secrets ? secret && secrets.${secret} != null;
 in
 {
   # TODO can I put all IP's in the flake.nix top level settings and pull them in here instead?
diff --git a/hosts/oren/flake.lock b/hosts/oren/flake.lock
index b384ad0..d08cf8f 100644
--- a/hosts/oren/flake.lock
+++ b/hosts/oren/flake.lock
@@ -35,11 +35,11 @@
         "ragenix": "ragenix"
       },
       "locked": {
-        "lastModified": 1755036081,
-        "narHash": "sha256-RcJpH9+C6os1jb9l3ukOAU0CtrP5YPlGyRGh6gZPF1Q=",
+        "lastModified": 1753903666,
+        "narHash": "sha256-e6vzgJMrgxKJSiOY/8oD2lw+Kf0/MlmOs/gs8z8WQgw=",
         "ref": "refs/heads/master",
-        "rev": "db6d5161ff0d4962236befa6ca1fd7ef2cb37fe3",
-        "revCount": 588,
+        "rev": "79849411735ed37a15db58450876d6d59baab880",
+        "revCount": 556,
         "type": "git",
         "url": "https://git.joshuabell.xyz/ringofstorms/dotfiles"
       },
@@ -1157,16 +1157,16 @@
     "opencode": {
       "flake": false,
       "locked": {
-        "lastModified": 1754526276,
-        "narHash": "sha256-OkkjbytvvUBOcSCjf3zd8NWLaM+I1tUR9IxcRZrdVeM=",
+        "lastModified": 1753893530,
+        "narHash": "sha256-7L50P3+u4SHQtjSdFJviPaeLFnOIGP/l4BFLHKm4pNs=",
         "owner": "sst",
         "repo": "opencode",
-        "rev": "1a561bb5120b1b87a4c477f7cb6c3a0a4ce79114",
+        "rev": "304e86a8d4ebbaf55de27ac012aecc58028c898d",
         "type": "github"
       },
       "original": {
         "owner": "sst",
-        "ref": "v0.3.133",
+        "ref": "v0.3.85",
         "repo": "opencode",
         "type": "github"
       }
diff --git a/hosts/oren/flake.nix b/hosts/oren/flake.nix
index f4e2a29..e38f029 100644
--- a/hosts/oren/flake.nix
+++ b/hosts/oren/flake.nix
@@ -66,7 +66,6 @@
                       ssh.enable = true;
                       docker.enable = true;
                       opencode.enable = true;
-                      virt-manager.enable = true;
                       flatpaks = {
                         enable = true;
                         packages = [