diff --git a/flake.nix b/flake.nix
index fca3076..eaecc2f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -265,6 +265,7 @@
       hidpi       = hw.common-hidpi;
       p1005       = ./hardware/printer/hp-laserjet-p1005.nix;
       au          = ./profiles/auto-upgrade.nix;
+      nixld       = ./profiles/nix-ld.nix;
       binfmt      = ./profiles/binfmt-emu.nix;
       dns64       = { config, ... }: {
         networking.nameservers = [ "2001:700:1:11::2:51" ]; # dns64.uninett.no
@@ -277,7 +278,7 @@
       noximilien  = mk "pbsds.net" "x86_64-linux"  inputs-2311 "22.11" [ au intel ];
       brumlebasse = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au amd nspawn ];
       nord        = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au intel-novga hw.common-cpu-intel-sandy-bridge rocm hidpi ];
-      sopp        = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au intel cuda p1005 ];
+      sopp        = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au nixld intel cuda p1005 ];
       bolle       = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au dns64 intel ];
       eple        = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au dns64 intel rocm ];
       garp        = mk "pbsds.net" "x86_64-linux"  inputs-2311 "23.11" [ au dns64 intel-novga cuda ];
diff --git a/todos.md b/todos.md
index 0a73ba7..0983539 100644
--- a/todos.md
+++ b/todos.md
@@ -1,9 +1,14 @@
+# projects
+* [ ] https://github.com/NixOS/nixos-hardware/tree/master/pine64/pinebook-pro
+* [ ] riscv
 # nice to have
 * [ ] nixos-generate-config instructions for new hosts
 * [ ] `profiles/singularity.nix` https://github.com/NixOS/nixpkgs/issues/230851
 * [x] xforwarding over ssh
 * [ ] pre-commit hook with 'nix eval ...outPath'
 * [x] use `nom` when deploying
+* [ ] https://fosdem.org/2024/schedule/event/fosdem-2024-3045-automatic-boot-assessment-with-boot-counting/
+* [ ] https://discourse.nixos.org/t/a-web-ui-for-the-nix-store-early-beta/35762
 # machine park
 * [ ] wg
 * [ ] remote-builders over wg
@@ -14,10 +19,12 @@
 * [ ] zfs, declarative pools?
 * [ ] figure out how to reuse system flake lock while deplying, leave the night job to upgrade
 * [ ] some tunneling for NFS hosts
+* [ ] https://nix-community.org/community-builder/
 # ricing
 * [ ] [doas](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/security/doas/default.nix)
 * [ ] https://github.com/NixOS/nixpkgs/pull/266094 (see https://nixos.wiki/wiki/Cursor_Themes)
 # selfhosting
+* [ ] https://discourse.nixos.org/t/syncthing-accept-incoming-shares-declaratively/26304
 * [ ] hydra - perfect for CUDA and RISCV
 * [ ] [avahi](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/services/avahi/default.nix)
 * [ ] [kvm](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/virtualisation/kvm/default.nix)
@@ -43,7 +50,6 @@
   * [ ] Support DNS auth
   * [ ] Setup aliases instead of a per-vhost cert?
     * [ ] Preferably setup a wildchar cert per host
-# framework
 # to read
 * [ ] https://github.com/ogoid/nixos-expose-cuda
 # refactoring