diff --git a/nixos/common/global/secrets/rekeyed/fuchsia/b13fe910c59fe6344a048e24e98c923c-borgbackup.age b/nixos/common/global/secrets/rekeyed/fuchsia/b13fe910c59fe6344a048e24e98c923c-borgbackup.age
deleted file mode 100644
index 1aeaaa8..0000000
Binary files a/nixos/common/global/secrets/rekeyed/fuchsia/b13fe910c59fe6344a048e24e98c923c-borgbackup.age and /dev/null differ
diff --git a/nixos/common/global/secrets/rekeyed/viridian/473ab42e4fc9cfd4f093251c178bdbaa-projectsend.age b/nixos/common/global/secrets/rekeyed/viridian/473ab42e4fc9cfd4f093251c178bdbaa-projectsend.age
new file mode 100644
index 0000000..0c1e6c9
--- /dev/null
+++ b/nixos/common/global/secrets/rekeyed/viridian/473ab42e4fc9cfd4f093251c178bdbaa-projectsend.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 KTkZog Up5AjKprErUc0nI98az6EFmtxev7vdg+PmNzQgizHTc
+NJ+/pzyDbSgmm+0jx4C2X4ISoJDD004HlN1Ul3vrmzM
+-> RGCv~-grease
+Ov7OyKCQF8tm4G+cXFlibXFROTAHhssk1JaozlPpUmnFOX5ao78jVORa27WHEF/H
+XxEDY0JQU6oL2fM
+--- hV6JhDfXuYLaf/iGqjN6Q/N6tnDR6J1V627DDLnaGZI
+��5����cŧ�����u=�
+iFd�ϲ�[<D��0|#�!rHU
���D��kH'�HJ��@5AsK[@
z�pmP]@�����j���/)A�d�.�סM;{h6z���)�כ4+/a�w��F�ap�[X<δ
+�T
+?H�o�o
\ No newline at end of file
diff --git a/nixos/common/global/ssh.nix b/nixos/common/global/ssh.nix
index 29414c4..243ff12 100644
--- a/nixos/common/global/ssh.nix
+++ b/nixos/common/global/ssh.nix
@@ -1,17 +1,12 @@
 {...}: {
-  # Global SSH server configuration baseline
-  # Host-specific trust relationships are configured in each host's services/ssh/
-
   services.openssh = {
     enable = true;
-
     settings = {
-      PermitRootLogin = "no";           # Disable root login for security
-      PasswordAuthentication = false;   # Require key-based authentication
-      LogLevel = "VERBOSE";             # Enhanced logging for security auditing
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+      LogLevel = "VERBOSE";
     };
-
-    ports = [22];                       # Standard SSH port
-    openFirewall = true;                # Allow SSH through firewall
+    ports = [22];
+    openFirewall = true;
   };
 }
diff --git a/nixos/fuchsia/services/borgbackup/offsite.nix b/nixos/fuchsia/services/borgbackup/offsite.nix
index 9df6b4e..cbcca0f 100644
--- a/nixos/fuchsia/services/borgbackup/offsite.nix
+++ b/nixos/fuchsia/services/borgbackup/offsite.nix
@@ -78,4 +78,9 @@
       monthly = 12;   # Keep 12 monthly backups (1 year)
     };
   };
+
+  # SSH host keys for borgbase.com
+  programs.ssh.knownHostsFiles = [
+    ./borgbase_hosts
+  ];
 }
diff --git a/nixos/fuchsia/services/borgbackup/onsite.nix b/nixos/fuchsia/services/borgbackup/onsite.nix
index 77c8945..cbd6b06 100644
--- a/nixos/fuchsia/services/borgbackup/onsite.nix
+++ b/nixos/fuchsia/services/borgbackup/onsite.nix
@@ -76,4 +76,9 @@ in {
       monthly = 12;
     };
   };
+
+  # SSH host keys for viridian
+  programs.ssh.knownHostsFiles = [
+    ./viridian_hosts
+  ];
 }
diff --git a/nixos/fuchsia/services/borgbackup/passphrase.age b/nixos/fuchsia/services/borgbackup/passphrase.age
deleted file mode 100644
index d1539d8..0000000
Binary files a/nixos/fuchsia/services/borgbackup/passphrase.age and /dev/null differ
diff --git a/nixos/fuchsia/services/default.nix b/nixos/fuchsia/services/default.nix
index b689b8e..06bcaf6 100644
--- a/nixos/fuchsia/services/default.nix
+++ b/nixos/fuchsia/services/default.nix
@@ -7,7 +7,6 @@
     ./pipewire
     ./printing
     ./snapper
-    ./ssh
     ./udev
     ./xserver
   ];
diff --git a/nixos/fuchsia/services/ssh/borgbase_hosts b/nixos/fuchsia/services/ssh/borgbase_hosts
deleted file mode 100644
index 5df945b..0000000
--- a/nixos/fuchsia/services/ssh/borgbase_hosts
+++ /dev/null
@@ -1,3 +0,0 @@
-li9kg944.repo.borgbase.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMS3185JdDy7ffnr0nLWqVy8FaAQeVh1QYUSiNpW5ESq
-li9kg944.repo.borgbase.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwHsO5g7kAEpqcK4bpHCUKYV1cKCUNwVEVsDQyfj7N8L92E21n+aEhIX2Nh/kFs1W9D/pgsWQBAbco9e/ORuagHrO8hUQtbda5Z31PAo4eipwP17VQr5rF3seaJJNFV72v89PGwMOWQwvoJte+yngC6PYGKJ+w63SRtflihAmf4xa5Tci/f6jbX6t32m2F3bnephVzQO6anGXvGPR8QYQXzSu/27+LaKnLd2Kugb1Ytbo0+6kioa60HWejIZ/mCrCHXYpi0jAllaYEuAsTqFWf/OFUHrKWwRAJD0TV43O1++vLlxY85oQxIgc4oUbm93dXmDBssrTnqqq2jqonteUr
-li9kg944.repo.borgbase.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOstKfBbwVOYQh3J7X4nzd6/VYgLfaucP9z5n4cpSzcZAOKGh6jH8e1mhQ4YupthlsdPKyFFZ3pKo4mTaRRuiJo=
diff --git a/nixos/fuchsia/services/ssh/default.nix b/nixos/fuchsia/services/ssh/default.nix
deleted file mode 100644
index 7f41e1a..0000000
--- a/nixos/fuchsia/services/ssh/default.nix
+++ /dev/null
@@ -1,18 +0,0 @@
-{inputs, ...}: {
-  # Trust viridian's host keys for SSH connections
-  programs.ssh.knownHosts = {
-    "viridian-ed25519" = {
-      hostNames = ["viridian"];
-      publicKeyFile = "${inputs.self}/nixos/viridian/ssh_host_ed25519_key.pub";
-    };
-    "viridian-rsa" = {
-      hostNames = ["viridian"];
-      publicKeyFile = "${inputs.self}/nixos/viridian/ssh_host_rsa_key.pub";
-    };
-  };
-
-  # Trust BorgBase repository (offsite backup target)
-  programs.ssh.knownHostsFiles = [
-    ./borgbase_hosts
-  ];
-}
diff --git a/nixos/viridian/services/ssh/borgbase_hosts b/nixos/viridian/services/borgbackup/borgbase_hosts
similarity index 100%
rename from nixos/viridian/services/ssh/borgbase_hosts
rename to nixos/viridian/services/borgbackup/borgbase_hosts
diff --git a/nixos/viridian/services/borgbackup/key.age b/nixos/viridian/services/borgbackup/key.age
new file mode 100644
index 0000000..3b93402
Binary files /dev/null and b/nixos/viridian/services/borgbackup/key.age differ
diff --git a/nixos/viridian/services/borgbackup/offsite.nix b/nixos/viridian/services/borgbackup/offsite.nix
index 70657a8..a64c666 100644
--- a/nixos/viridian/services/borgbackup/offsite.nix
+++ b/nixos/viridian/services/borgbackup/offsite.nix
@@ -81,4 +81,9 @@
       monthly = 12;   # Keep 12 monthly backups (1 year)
     };
   };
+
+  # SSH host keys for borgbase.com
+  programs.ssh.knownHostsFiles = [
+    ./borgbase_hosts
+  ];
 }
diff --git a/nixos/viridian/services/default.nix b/nixos/viridian/services/default.nix
index 42bd7ee..51dbd2a 100644
--- a/nixos/viridian/services/default.nix
+++ b/nixos/viridian/services/default.nix
@@ -10,7 +10,6 @@
     ./murmur
     ./opengist
     ./snapper
-    ./ssh
     ./traefik
   ];
 }
diff --git a/nixos/viridian/services/ssh/default.nix b/nixos/viridian/services/ssh/default.nix
deleted file mode 100644
index f4c1796..0000000
--- a/nixos/viridian/services/ssh/default.nix
+++ /dev/null
@@ -1,29 +0,0 @@
-{inputs, ...}: let
-  # Fuchsia's host key for backup authentication
-  fuchsiaHostKey = builtins.readFile (
-    "${inputs.self}/nixos/fuchsia/ssh_host_ed25519_key.pub"
-  );
-in {
-  # Trust fuchsia's host keys for SSH connections
-  programs.ssh.knownHosts = {
-    "fuchsia-ed25519" = {
-      hostNames = ["fuchsia"];
-      publicKeyFile = "${inputs.self}/nixos/fuchsia/ssh_host_ed25519_key.pub";
-    };
-    "fuchsia-rsa" = {
-      hostNames = ["fuchsia"];
-      publicKeyFile = "${inputs.self}/nixos/fuchsia/ssh_host_rsa_key.pub";
-    };
-  };
-
-  # Trust BorgBase repository (offsite backup target)
-  programs.ssh.knownHostsFiles = [
-    ./borgbase_hosts
-  ];
-
-  # Accept remote backups from fuchsia using host key authentication
-  users.users.root.openssh.authorizedKeys.keys = [
-    # Restrict fuchsia to only run borg serve in /srv/borg-repo
-    ''command="borg serve --restrict-to-path /srv/borg-repo",restrict ${fuchsiaHostKey}''
-  ];
-}