abstract away architectures

README.md

@@ -12,10 +12,17 @@ run `rg /etc/secrets/` to see where you need to add secret files when deploying
 
 unfortunately, as a consequence of this secret method, you need to do impure builds
 
+## hosts
+
+each host should have these files:
+
+  - `default.nix`, contains everything relating to the basic system
+  - `hardware.nix`, hardware-specific configuration
+  - `meta.nix`, extra things passed thru to `mkHost`
+
 ## todo
 
   - find a better way to do cloudflare ips
-  - per-host architecture selection, atm it is hardcoded to `aarch64`
   - swap back to hardened kernel
   - wtaf is going on w/ our user management??
   - Jellyfin... yea,,,