diff --git a/flake.nix b/flake.nix
index edbf68d..50dabdb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -219,30 +219,13 @@
     in
     {
       # NixOS configurations.
+      #
+      # This public template ships the `example` host (copy-me starter) and
+      # the live ISO. The maintainer's personal host (`omni`, a real
+      # machine with secrets + private hardware/VPN) is NOT here — it lives
+      # on the private `omni-private` branch, which adds it back alongside
+      # the real secret files. Forkers define their own host like `example`.
       nixosConfigurations = {
-        # Main dev box. Uses the mksystem convention (hosts/omni/ +
-        # users/user/home-manager.nix shims — see commit dc9d70b).
-        #
-        # modules = [ ... ] is the escape hatch for host-specific
-        # home-manager options that mksystem doesn't expose directly,
-        # like sharedModules for nix-colors integration.
-        omni = mkSystem "omni" {
-          inherit system;
-          user = settings.user;
-          devEnv = true;
-          extraSpecialArgs = { inherit settings; };
-          extraHmArgs = { inherit settings; };
-          modules = [
-            {
-              home-manager.sharedModules = [
-                inputs.nix-colors.homeManagerModules.default
-                inputs.lazyvim.homeManagerModules.default
-                inputs.walker.homeManagerModules.default
-              ];
-            }
-          ];
-        };
-
         # Copy-me template host (hosts/example/). Kept as a real,
         # build-checked target so the template can't silently rot — its
         # placeholder hardware-configuration.nix uses by-label devices