diff --git a/hosts/unstable/hosea/default.nix b/hosts/unstable/hosea/default.nix
index c110c14..a03413f 100644
--- a/hosts/unstable/hosea/default.nix
+++ b/hosts/unstable/hosea/default.nix
@@ -75,9 +75,9 @@ in
   };
 
   networking = {
-    hostName = "hosea";
-    nameservers = [ metadata.infra.dns ];
     defaultGateway = metadata.infra.gw;
+    firewall.allowedTCPPorts = [ 3000 ];
+    hostName = "hosea";
     interfaces = {
       "${wanInterface}".useDHCP = true;
       "${lanInterface}" = {
@@ -90,6 +90,7 @@ in
         ];
       };
     };
+    nameservers = [ metadata.infra.dns ];
   };
 
   services = {
diff --git a/secrets/grafana-api-token.age b/secrets/grafana-api-token.age
new file mode 100644
index 0000000..f32f83e
--- /dev/null
+++ b/secrets/grafana-api-token.age
@@ -0,0 +1,37 @@
+age-encryption.org/v1
+-> ssh-ed25519 87huqg jPmSJboml+d/fde9mV2G+5CMl0vDZv1fLWolLXSDjRg
+2hvJA/hU3MgPNkK3NTAQjDOeGTeZemOCRIwY+RNWTFU
+-> ssh-ed25519 8UnW5Q Rkmk8cTiorpd+rFTiCWTEDyKtrORpTD+t1RbluHOiUI
+IjCsuFguO+vqlYiq9a3LvYswo8aGea2AIUyOMiaA3W8
+-> ssh-ed25519 UFfTmg lFFfbO5ihQcareoegVrDYTrM2pjNUMDK3qFnVNdL/0w
+klXgFn0qeSdexwNr7DRt26495JSLO0TjFDaDCOcpJRM
+-> ssh-ed25519 xNtnoA YitL7z2BVm3MuyTIJc06t29eNsvwBc/uZmtVXrAFVQc
+PG0HNG1Duj3/wKk2HZAJNycQ6EU/jyees13QIPOA2OM
+-> ssh-ed25519 aY2AXA leso0U4Hd+G5TuLqBA1iSSoxe5W8Lx8hwfvgqBz8Sxg
+J1Hot6wRHjpJRf4T0MgSc+ctzqJ6w810W0xQ127/vyA
+-> ssh-ed25519 AQhf1g RTaISjj9p3BhrCLkxKg/c7WKe4h0LgPksEnZS/g4+BE
++0GTX4WbartbGK/xop0wDZ1TByK5jpy/ZR6WYU2BQvo
+-> ssh-ed25519 mOmPfg l1Cc7BhJfKfWGoromMpHbJ8EpXTgPBvJHixuRHInBjI
+sH7pvorkSx/OB6rVjiMcBBArVgznaPj11VhQGCq+PwM
+-> ssh-ed25519 YJiRbw /fYaKE3JQk/w6KIeQRacshyzQJMTKJBKiaf4F3tsGls
+OkIJRP9M4ldSSE6ZZYFq3LK4fYHunlw1AYdEOot7iLc
+-> ssh-ed25519 0/WsKg bwyDgGTdYDMTaKckAKAtDxulh1p9/znJaCjwQ9A7cwA
+GJdlk95CcxTqL9K3L04Wv27idzG+7dDEdd0IQvGLKpY
+-> ssh-ed25519 Nl/5yA Cear/l8FvX21OyQUKq2b7+yDLDcDre+NYnegWsasEzE
+DckTwMWjj+T6NptFQm1nNacjXAQDz1wUkv2bD7JYmvc
+-> ssh-ed25519 GdLgCQ /vIfza+bfUKmOBJxQaNkJ6at4jQhSXRfGcVLfDEwB2c
+/PJNxTy51eE6FvnH1mJ6EwS5duJo79/7a8Q5eEO25qY
+-> ssh-ed25519 tOH/HQ KooY0XEKK0CRjpS7Kf0+4M8tmOyDgE/MuTjYCgjC/2Y
+ULohX4Mx8PbmExvMF1V2dv5jOMw5MXFTEFd6f4HAwko
+-> ssh-ed25519 FpzvfQ oIST6A9MnsmadXCYaqzdJVq7DyO8mJdd58N/L6er9xE
+1PQdvdYaVV87DRbIPoCj507iQoCuRV3SAwAcPoppqHM
+-> ssh-ed25519 kdPvzQ SK2MHr1MkSusDwPcqag5pfkjbgJdzndIWZ8HfosEgnM
+ZYSftnhwZlqysA2Y3xpEkqNcaAp+1dxMUQvzMh7k7Hs
+-> ssh-ed25519 onmXpg +7G30ji8Y6LdC03dXz1kJ8HjmTdTtbCHiJ9TfHnXJS8
+778FDFUb+ZUcjtmu0kAnG5EfyAm54NBMsC2PnM1Hs6U
+-> ssh-ed25519 CnhD0g yH9UzEgjb5BhOQ5GZOhZ51K1UH6vgX33Mh4lx+5BHgQ
+F834BZAlAUeggrmhNaVOrNYOxOTzXUyyTUF5ZS2VRuM
+-> ssh-ed25519 4ep2UA eVY+i3HNICWhyZR3yS3szJWdY19NhsqtggN5jPzVJB8
+ON8U7QSBrNOcg+I/eGp5dL5rX+vMKRP1317L5IHN5p0
+--- 1ujHnpiPN+dcAfwa0DNmmQED32RiitZexdi/H54CQJc
+�(y�	����R�`��]ʴ�F
�!�8Җi��.�20��H��
\ No newline at end of file