diff --git a/flake.nix b/flake.nix
index d5d4fd3..2372f80 100644
--- a/flake.nix
+++ b/flake.nix
@@ -36,7 +36,7 @@
     system = "x86_64-linux";
 
     # hostnames
-    hosts = ["thonkpad" "rq" "yoga" "server1" "server2" "server3"];
+    hosts = ["thonkpad" "rq" "yoga" "server1" "server2" "server3" "store"];
 
     baseModule = {lib, ...}: {
       imports = [
diff --git a/hosts/store/configuration.nix b/hosts/store/configuration.nix
new file mode 100644
index 0000000..d1226da
--- /dev/null
+++ b/hosts/store/configuration.nix
@@ -0,0 +1,37 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  imports = [
+    ./hardware-configuration.nix
+    ../../system/system-server.nix
+    ../meta.nix
+    ../../extras/ssh.nix
+    ../../extras/k3s-node.nix
+  ];
+
+  config = {
+    networking.hostName = "store"; # Define your hostname.
+    res = "1920x1080";
+
+    home-manager = {
+      useGlobalPkgs = true;
+      useUserPackages = true;
+      backupFileExtension = "backup";
+      users.synchronous.imports = [../../home/home.nix];
+    };
+
+    # Bootloader.
+    #boot.loader.grub.enable = true;
+    boot.loader.grub.device = "/dev/sda";
+    boot.loader.grub.useOSProber = true;
+    boot.loader.grub.version = 2;
+    # services.logind.lidSwitchExternalPower = "ignore";
+
+    boot.loader.systemd-boot.enable = false;
+    boot.loader.efi.canTouchEfiVariables = true;
+    boot.loader.grub.enable = true;
+  };
+}
diff --git a/hosts/store/hardware-configuration.nix b/hosts/store/hardware-configuration.nix
new file mode 100644
index 0000000..a829d33
--- /dev/null
+++ b/hosts/store/hardware-configuration.nix
@@ -0,0 +1,36 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/bb36a123-4dc9-4583-8571-1aa180efb00b";
+      fsType = "ext4";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/78565ab8-d7b8-476d-a6e7-46ceda4ee761"; }
+      { device = "/dev/disk/by-uuid/c735b357-c35c-4249-bb0b-23321fe50c3d"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno2.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/secrets/tailscale-rq.age b/secrets/tailscale-rq.age
index b97303c..3d1f464 100644
Binary files a/secrets/tailscale-rq.age and b/secrets/tailscale-rq.age differ