diff --git a/darwin/shiro/services/yabai.nix b/darwin/shiro/services/yabai.nix
index 9b89cf02..60e4713c 100644
--- a/darwin/shiro/services/yabai.nix
+++ b/darwin/shiro/services/yabai.nix
@@ -34,9 +34,9 @@
       };
 
       extraConfig = ''
-        yabai -m rule --add app='System Preferences' manage=off
-        yabai -m rule --add app="choose" manage=off
-        yabai -m rule --add app="barrier" manage=off
+        # yabai -m rule --add app='System Preferences' manage=off
+        # yabai -m rule --add app="choose" manage=off
+        # yabai -m rule --add app="barrier" manage=off
       '';
     };
   };
diff --git a/home/programs/aichat.nix b/home/programs/aichat.nix
index 0d4e6a5f..7d3f3f18 100644
--- a/home/programs/aichat.nix
+++ b/home/programs/aichat.nix
@@ -9,6 +9,7 @@
     secrets."llama/api_key" = {};
     secrets."openai/api_key" = {};
     secrets."openrouter/api_key" = {};
+    secrets."gemini/api_key" = {};
   };
   programs.aichat = {
     enable = true;
@@ -40,6 +41,18 @@
             }
           ];
         }
+        {
+          type = "gemini";
+          name = "gemini";
+          api_base = "https://generativelanguage.googleapis.com/v1beta";
+          api_key_cmd = "cat ${config.sops.secrets."gemini/api_key".path}";
+          models = [
+            {
+              name = "gemini-2.5-flash-preview-04-17";
+              type = "chat";
+            }
+          ];
+        }
         {
           type = "openai-compatible";
           name = "openrouter";
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 888a8fb6..a6d57c63 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -7,6 +7,8 @@ openai:
     api_key: ENC[AES256_GCM,data:d6z9TySB6r2myUYu4u9aZwdoy1qL+DdU4MIuel1lFMMKD4XAqn5U9Vc3t5sJ/E3hDXud,iv:500n8CY8Qd/tg+MuT+RDRAyjgy6E9Aolud/2KrRyyqk=,tag:nCowF/czJMkYoNuSl1c3ZA==,type:str]
 openrouter:
     api_key: ENC[AES256_GCM,data:e4JW7lPY7z5SAQ2+CP5XjRWoAhBDBj2VokLAgrxHlDNOBkkD+pVunjWZ06ZoHnJdmd/efEp+4FIUuSanM+OjaiZzS0sU0oN4nw==,iv:y0UtKzj5rXVt5Roaw1r6XsY9Azny3nT0SrG/UHwjJ2A=,tag:5tDm3fEpJiDGfywMIyIeig==,type:str]
+gemini:
+    api_key: ENC[AES256_GCM,data:yVDJkddvWKubLPdeXqu/TDT0+WawfmKf+/DHFJk1tYKzoLpWWWpO,iv:k0JH4JtnVgcDCwTB7KIxmycnBl8PPBnxtH7cnNOjvls=,tag:Z6XFfrRz6IsDeT3bf1I2wQ==,type:str]
 authelia:
     users:
         servius: ENC[AES256_GCM,data:CLhthyoNV1JwrSJubnQ60mIcKHlQm4j4rMJOzraKTYJytdFadbUHHNu9rTGOOEnf8Bp66zWHwb7Nw8djEjCyGjmS2mz4kke9xg/2pIePCcnMVAvjMvrrqDqW7ictz/pRbg==,iv:rvk/Hrq7/JGA7MucBfU6jGBmnwnpKlg/HgqJlxC8/DI=,tag:OeqbIfbnkNiOeJrnk5BWXQ==,type:str]
@@ -25,10 +27,6 @@ builder:
             private: ENC[AES256_GCM,data:W52mWGwPMIOXneH3QmnuVtALxxfczhaNvjeQiRwNjF30uP/LlQOtiMI4RPm5d90+i8ok1ampLFMFjCqt2MK+ouT6ETa0FcpB4KlV7toA5FEev5NIiLO2NT9M5Is9GQ==,iv:fkKN1VEHHCT3PEi/zZR92Z6yP4jRUjpKBXPs4QtFGAQ=,tag:sjt0YATf8BSlQC5S9y0n2w==,type:str]
             public: ENC[AES256_GCM,data:w63JgOzg3IfLzPzESjgiqKTVmlbc6hcWLNRX8Vyl27eyXeh++agOBpmCDgxZLX/jSFc=,iv:r0Cv5bwPzCxTgDNjUJ3ExYBR5BUfuf4+8bNs2kOTzEU=,tag:SqCcc89wRwDjwEazV7M5nw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age1pw7kluxp7872c63ne4jecq75glj060jkmqwzkk6esatuyck9egfswufdpk
           enc: |
@@ -39,8 +37,7 @@ sops:
             VGZKdHpVeFRpQUxtSEkyaEhLMlBJcGsKLb0DvPNZosPBUuiX6qz1s5IO5INQh8CK
             ZtXTVClwMSmaUYhdSB2gKFrKVZHXTJZ4oAL5t/BpC0pOHyr+o96T3Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-14T09:41:32Z"
-    mac: ENC[AES256_GCM,data:LAVkEauNfcmASKuQjSoFA3Air7G1XnXM9ELi+/2V2ed+dHcSJ3Jda6WiX9aN/ElaFg8OgQZVboV6OqtkbY5NhmnpbrCT8J5s7y6m9FdrBDh11hQ4dsCt/EH1Fpp6V1ZPZerIU2OsWZgVMG9hi/rChrfNAR+Plj2G+RHryVE93e0=,iv:bOUUb9unB+CXzxDwZgQ0+73Of8Vr5akNgXuavc1asDw=,tag:5DluEbxwrYe05NWP4e7NSg==,type:str]
-    pgp: []
+    lastmodified: "2025-04-28T15:41:49Z"
+    mac: ENC[AES256_GCM,data:CDtVTwy/Z41egW/AWnd5uJRSX4MnakOgq9WI0tx0LfUwrTmJyPli7zXq4JiRPImHlG4OM0Fbm6MpotoHb+o/q8UfyfTXa5n+zF6JQMCnzfbnSNa84ih4FYrUNSqVDkXpsg8tFY57yFt9cITHq7Gxaew/dOSzur0QwLHlRQWdYGw=,iv:Uvt/x2UgN28U1rF8Siawp80KOO2vJ3CBi2RvEkReMjQ=,tag:SemiDosGyGe2e+Isq7/N7A==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.9.4
+    version: 3.10.2