diff --git a/packages/nagstamon.nix b/packages/nagstamon.nix
index a20cd9c..451efd1 100644
--- a/packages/nagstamon.nix
+++ b/packages/nagstamon.nix
@@ -1,6 +1,6 @@
-{ stdenv, fetchFromGitHub, python37Packages, wrapQtAppsHook }:
+{ stdenv, fetchFromGitHub, python39Packages, wrapQtAppsHook }:
 
-python37Packages.buildPythonApplication rec {
+python39Packages.buildPythonApplication rec {
   pname = "nagstamon";
   version = "3.7.0-alpha";
 
@@ -20,7 +20,7 @@ python37Packages.buildPythonApplication rec {
     wrapQtApp $out/bin/nagstamon.py
   '';
 
-  propagatedBuildInputs = with python37Packages; [
+  propagatedBuildInputs = with python39Packages; [
     beautifulsoup4
     configparser
     dateutil
diff --git a/roles/admin.nix b/roles/admin.nix
index 5607bc7..6955ebb 100644
--- a/roles/admin.nix
+++ b/roles/admin.nix
@@ -7,6 +7,7 @@ in {
     cryptsetup
     dnsutils
     kubectl
+    k9s
     pwgen
     whois
     unstable.argocd
@@ -17,6 +18,7 @@ in {
     docker-compose
     fuse-overlayfs
     qemu
+    virt-manager
 
     (import ../packages/skaffold.nix)
     (import ../packages/helm2.nix)
diff --git a/roles/base.nix b/roles/base.nix
index ec46fe6..179530d 100644
--- a/roles/base.nix
+++ b/roles/base.nix
@@ -106,7 +106,7 @@ in {
   };
 
   users.users.stefan = {
-    extraGroups = [ "wheel" "dialout" ];
+    extraGroups = [ "wheel" "dialout" "libvirtd"];
     home = "/home/stefan";
     isNormalUser = true;
     uid = 1000;
diff --git a/roles/desktop.nix b/roles/desktop.nix
index 38047f2..2bdd01a 100644
--- a/roles/desktop.nix
+++ b/roles/desktop.nix
@@ -81,7 +81,7 @@ in {
     #
     # check in `about:support` that
     #  * Composing -> Webrenderer
-    firefox-bin
+    firefox-wayland
     libva
     libva-utils
     mesa