diff --git a/modules/darwin/home/default.nix b/modules/darwin/home/default.nix
index 4bbaafc..69afed2 100644
--- a/modules/darwin/home/default.nix
+++ b/modules/darwin/home/default.nix
@@ -20,6 +20,7 @@ let
     "OPENROUTER_API_KEY"
     "ZAI_API_KEY"
     "TYPESAFEAI_API_KEY"
+    "CLOUDFLARE_API_TOKEN"
   ];
 in
 {
diff --git a/secrets/global-env.sops.yaml b/secrets/global-env.sops.yaml
index 6c2144c..94f389b 100644
--- a/secrets/global-env.sops.yaml
+++ b/secrets/global-env.sops.yaml
@@ -5,13 +5,14 @@ MOONSHOT_API_KEY: ENC[AES256_GCM,data:WhPRdFqUcOJctdowxsCAX/2qzMuWJ5P7JnvpNqGg+8
 GROQ_API_KEY: ENC[AES256_GCM,data:0UwJWQNxzfMaeBEvhqc5h37xTAoIq3Ld+AenEL16SVVLaogtMSaxHX1B5pn7XiEz/ermPLYq8/c=,iv:2Cb5OLKYDBvcogXHGIK50eKx4uAkfxj27RaLBzPNM9M=,tag:fz+v1NU1nh4Hg/rwvu35oA==,type:str]
 FIRECRAWL_API_KEY: ENC[AES256_GCM,data:W48XK3/SjIuQUANEZ2tCWU+uQK4RKzPZE8hpkHopydUl/dQ=,iv:we/6fCvmXfaTE91/EIO09AryyUh3HGWvSPEaKb8IRSY=,tag:OHP2ryFhww9y8ueaxauuPA==,type:str]
 FAL_API_KEY: ENC[AES256_GCM,data:lyfSFpJYExZBY/gsiPAGJtPUREUMBPWB/wY9A6CG2P+i0vOBuem/8exud2bIIY70UNvGZz0wV+GxSvZvIkkHjVFTahLu,iv:D5ysGAwOKMhBWJ5OSL4djyLTngQqS1K+9jUNWnU6ors=,tag:3ZDED4pAGWl4jrvaxEu9Lw==,type:str]
-EXA_API_KEY: ENC[AES256_GCM,data:rMNonp76DeS1VtZuvs45Fwhj2aIVfoNWENHp3J9OxajK8uYC,iv:FroyalXHrrx+0SYSymVBCsFTuVOMzFQGAwicSxrE7a4=,tag:36MTbKeswrexO7dFe/wR1A==,type:str]
+EXA_API_KEY: ENC[AES256_GCM,data:s3c83dJ8V1+PBrrlYWf5H+hpH5SiR3krZThIaY/aexUNZ0xS,iv:xcewp7nT5rI8ZR9Hshs3U/ISnIr/qtUrk1dOtPTMZ4c=,tag:mgH4LTs91RT2kSkO5SQJqg==,type:str]
 ANTHROPIC_API_KEY: ENC[AES256_GCM,data:aBgfgHQ8cyJ4TUq4O6y218flTgDWcAXatY0/xbaD3AVvirCaEUXfsPP+0ySlVxlzx8hj9gMizlY2gJkNarsgwHCikOtmh/ZCxbQMbwogByqdV3C4myY7UwMgZdYzZGaQBL0JWR6ZZjf9ZK2T,iv:QB2tYhBtOU45Ho65FwQhD2H6gv7VobDXWgV/S9qu/yc=,tag:TTkEyjiTHYA1ZnMMwHwk4g==,type:str]
 OPENCODE_API_KEY: ENC[AES256_GCM,data:2aPaiODhpFObObRN+/HiEVsvMds1n6MhrmvQUWo2ozRzgRHQ1dGGZYFzOZoSbV4vpjmiqKW7VUFnVU5va1xlS8HrWg==,iv:DgCF9I+wT9xUjmenfUSDrDnKD5Ai4pJGw4qKmePpZOo=,tag:YD7nO4HbDKTa3zNbGtUCOg==,type:str]
 BRAVE_SEARCH_API_KEY: ENC[AES256_GCM,data:7Q+8sa2Xp4amEMkGzgEZzSLDCkstL71lu3sz1iGJdg==,iv:pY4NMgIUEEqwBUonAOAVoqP0EeqgON7h23221Yoa4aM=,tag:foyjDNIMsxrKvgYmu6FJNA==,type:str]
 KIMI_API_KEY: ENC[AES256_GCM,data:hkq/IY++1xGPmFMt5UMFlA/mVCOKDh+4V1Ip6Bv5ZSWTwdqwP1ghuL3HpF/r4Y+eO+PfzcZso1A8z+4SqVlXBjmiaORHIPut,iv:UWcdLW+ITk8jtc/UbprKz8zxI3mgAn1DP+tch0tse8M=,tag:brx5KyUzl1wg+fTagMUphQ==,type:str]
 CROF_API_KEY: ENC[AES256_GCM,data:rCBZ3uDitVs6EVs9AOWGT7UZf0x6vQ4EU4fnyw==,iv:XwUxXgDxku8aAxMIMdxrVImhjNuuh+6kXoBo5RULhsc=,tag:WlIglF9cMOR33x4JbEmpnA==,type:str]
 TYPESAFEAI_API_KEY: ENC[AES256_GCM,data:Us6DY2q+zMj05USnvb3lpEUAznZpTSMzEMd7g+tGHyo/VbNNmotXmhrnlxwAhACa9kE0HdBYpVAen/3DGQuqyZekgKvgdL5+Nv077PffdczaF2rq+Cy/hDjGGG7YQthC3T2CSk6OXIzSgUFt,iv:WtWOnxC65yWc9zhJame+Lp/wF4pD+w1eiM9D/aD19Lc=,tag:SR3y+RnBOHqQBGQaoECNew==,type:str]
+CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:AAnnI2W69VrCiEBDyR9eROPXq/KKFliULPIRO0u0/Nr0/Tzzunn26jRCyTaFfpLcJcdD+OQ=,iv:7LNXw9kqWK1vZ03bBldWZiPiyCr5oWigXwgewc9yvdg=,tag:Z6J43Ow9O14+tzF9mzKvAQ==,type:str]
 sops:
     age:
         - recipient: age1qfgey5w87dresg99zed3d2yz62hv6c2c7u4gd5e880vjrngmx9ksgfv3sj
@@ -23,7 +24,7 @@ sops:
             WHRrVWx2Y3FabWpBdjZ5VkpFY1BGeGsKSc4vxaHSj/6g7clPZDOPqCf3Zo+VGSRy
             HwLiHEohjk5/R3I5KWhFuO9aNQTNYYnUBwc6nOAcEhw+Mihq2gDtzg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-18T10:29:56Z"
-    mac: ENC[AES256_GCM,data:KSX06bzSvWqSOlQpJ8bvLPV1fypRzYSk2sqj5/II75X+whfEqIv3hKiVzNVoywHNe909whS/P8HYU/Kt+em18XhRvf9HPXleFjxP8KG7/uM9G5KXevPtK9pgQA+CsqnN9QkoRS2YR4OKhkZZltbyItlwNKem4sfhFYrDEKOAXJ4=,iv:yQrTAKjindsbKXSEY6XyjV2R6QTpsrHtuymGjLANeVo=,tag:ACc/2NsrY0SK/+bnc99gEA==,type:str]
+    lastmodified: "2026-09-30T19:10:06Z"
+    mac: ENC[AES256_GCM,data:J8c1uFz0S+hSV7w3ZHvP990wbbYS4EAdjEN/s8cb970s07gVLBKeFE4Vd89OT7wX4TQB3eHvyp4jeotTaQlY8idXM+3lBS5FUDYKZ8V9HkFqgU1jKQ9Py/NaxiqxKOzcXgpUYSaAMa+V5HDgFBam7pso3Ybnw2MdsiYZL7GcZLE=,iv:mnWVg0tFqRd9bWS1jeVy18TVWBq22ahP+eWcbfqWawU=,tag:0u57vr1Uap+Eey3H3gTxmg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0