diff --git a/common/bluetooth.nix b/common/bluetooth.nix
old mode 100644
new mode 100755
diff --git a/hosts/valefar/default.nix b/hosts/valefar/default.nix
index 930943d..7bd682b 100755
--- a/hosts/valefar/default.nix
+++ b/hosts/valefar/default.nix
@@ -25,7 +25,7 @@
 
   system.stateVersion = "24.11";
 
-  # pin host platform & microcode
+  # pin host platform & microcorre
   nixpkgs.hostPlatform               = lib.mkDefault "x86_64-linux";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault
     config.hardware.enableRedistributableFirmware;
@@ -58,6 +58,13 @@
   boot.zfs.devNodes = "/dev/disk/by-id";
   boot.zfs.forceImportAll = true;
 
+  services.nfs.server = {
+    enable = true;
+    exports = ''
+      /storage *(rw,sync,no_subtree_check,no_root_squash)
+    '';
+  };
+
   /*boot.kernelParams = [ "ip=dhcp" ];
   boot.initrd = {
     availableKernelModules = [ "r8169" ];
diff --git a/modules/immich/default.nix b/modules/immich/default.nix
old mode 100644
new mode 100755
diff --git a/secrets/build-token.age b/secrets/build-token.age
old mode 100644
new mode 100755
diff --git a/secrets/garage-admin-token.age b/secrets/garage-admin-token.age
old mode 100644
new mode 100755
diff --git a/secrets/garage-metrics-token.age b/secrets/garage-metrics-token.age
old mode 100644
new mode 100755
diff --git a/secrets/garage-rpc-secret.age b/secrets/garage-rpc-secret.age
old mode 100644
new mode 100755