diff --git a/configuration.nix b/configuration.nix
index d51be27..bb5d372 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -59,6 +59,17 @@
     ./programm_configs/wayland.nix
   ]);
 
+  # systemdresolved config
+  networking.nameservers = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
+
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = [ "~." ];
+    fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
+    dnsovertls = "true";
+  };
+
 
   services.gvfs.enable = true;
 
@@ -122,7 +133,7 @@
     isNormalUser = true;
     description = "clara";
     initialPassword = "123456";
-    extraGroups = [ "networkmanager" "wheel" "scanner" "lp" "docker" ];
+    extraGroups = [ "networkmanager" "wheel" "scanner" "lp" "docker" "adbusers kvm" ];
     shell = pkgs.zsh;
   };
 
@@ -321,6 +332,11 @@
     '';
   };
 
+  # Fix for CVE-2022-27470 keeping package from building
+  nixpkgs.config.permittedInsecurePackages = [
+    "SDL_ttf-2.0.11"
+  ];
+
   # backlight
   programs.light.enable = true;
 
diff --git a/flake.lock b/flake.lock
index 71f0e14..0fe680b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1735979091,
-        "narHash": "sha256-WpFjt6+8UD81EP386c269ZTqpEmlGJgcPw+OB4b7EBs=",
+        "lastModified": 1744663884,
+        "narHash": "sha256-a6QGaZMDM1miK8VWzAITsEPOdmLk+xTPyJSTjVs3WhI=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "11ab08541e61ac3bbf2ab27229f68622629401df",
+        "rev": "d5cdf55bd9f19a3debd55b6cb5d38f7831426265",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1735834308,
-        "narHash": "sha256-dklw3AXr3OGO4/XT1Tu3Xz9n/we8GctZZ75ZWVqAVhk=",
+        "lastModified": 1744463964,
+        "narHash": "sha256-LWqduOgLHCFxiTNYi3Uj5Lgz0SR+Xhw3kr/3Xd0GPTM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "6df24922a1400241dae323af55f30e4318a6ca65",
+        "rev": "2631b0b7abcea6e640ce31cd78ea58910d31e650",
         "type": "github"
       },
       "original": {
diff --git a/home.nix b/home.nix
index b2c59f2..199e638 100644
--- a/home.nix
+++ b/home.nix
@@ -96,8 +96,13 @@ in
     gvfs
     vdhcoapp
     inkscape
+    inkscape-extensions.inkstitch
     prusa-slicer
     mathematikapkg
+    jameica
+    android-tools
+    wireguard-tools
+    sops
   ] ++ (if x11mode then [
     arandr
     flameshot
diff --git a/programm_configs/vscode.nix b/programm_configs/vscode.nix
index a355a89..09c3c21 100644
--- a/programm_configs/vscode.nix
+++ b/programm_configs/vscode.nix
@@ -30,7 +30,7 @@
 	name = "platformio-ide";
 	publisher = "platformio";
 	version = "3.3.3";
-	sha256 = "pcWKBqtpU7DVpiT7UF6Zi+YUKknyjtXFEf5nL9+xuSo=";
+	sha256 = "cVYnFhdeClHhuVaTWRU2IDIA1mFq1iLveZUIhEhMSck=";
       }
     ];
   };