diff --git a/dotfiles/sway/config b/dotfiles/sway/config
index 95de070..513f932 100644
--- a/dotfiles/sway/config
+++ b/dotfiles/sway/config
@@ -171,12 +171,7 @@ exec_always {
 }
 
 # autostarts
-exec mako --font "$font" \
-  --background-color "$white" \
-  --border-colo "$red" \
-  --text-color "$black" \
-  --default-timeout 1000 \
-  --padding 10
+exec swaync
 exec emacs --daemon
 exec swayidle before-sleep "$lock"
 exec /run/current-system/sw/libexec/polkit-gnome-authentication-agent-1
diff --git a/dotfiles/sway/status.toml b/dotfiles/sway/status.toml
index 4696623..6add7e0 100644
--- a/dotfiles/sway/status.toml
+++ b/dotfiles/sway/status.toml
@@ -91,8 +91,20 @@ block = "battery"
 device = "BAT1"
 interval = 10
 format = " $icon $percentage ($time) "
+full_format = " $icon $percentage "
 
 [[block]]
 block = "time"
 interval = 60
 format = " $timestamp.datetime(f:'%Y-%m-%d %H:%M') "
+
+[[block]]
+block = "notify"
+driver = "swaync"
+format = " $icon {($notification_count.eng(w:1)) |}"
+[[block.click]]
+button = "left"
+action = "show"
+[[block.click]]
+button = "right"
+action = "toggle_paused"
diff --git a/roles/admin.nix b/roles/admin.nix
index 0e76052..541f26b 100644
--- a/roles/admin.nix
+++ b/roles/admin.nix
@@ -1,6 +1,7 @@
 { pkgs, options, ... }:
 
-let unstable = import <nixos-unstable> { };
+let
+unstable = import <nixos-unstable> { config.allowUnfree = true; };
 in {
   environment.systemPackages = with pkgs; [
     cryptsetup
@@ -42,5 +43,11 @@ in {
     enable = true;
     storageDriver = "zfs";
   };
-  virtualisation.libvirtd.enable = true;
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      swtpm.enable = true;
+      ovmf.enable = true;
+    };
+  };
 }
diff --git a/roles/base.nix b/roles/base.nix
index 1186c9b..032f4d7 100644
--- a/roles/base.nix
+++ b/roles/base.nix
@@ -90,6 +90,8 @@ in {
       alias ls="ls --color=auto"
       alias vim="nvim"
       alias k="kubectl"
+      alias n="nix-shell -p"
+      alias nu="nix-shell -I nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos-unstable -p"
 
       sink() {
         VAULT_TOKEN=$(vault token lookup -format=json | jq -r .data.id) \
@@ -139,7 +141,12 @@ in {
 
   services.fwupd.enable = true;
   services.resolved.enable = true;
+
   services.lorri.enable = true;
+  systemd.user.services.lorri.serviceConfig = {
+    ProtectSystem = pkgs.lib.mkForce "full";
+    ProtectHome = pkgs.lib.mkForce false;
+  };
 
   security.wrappers.gvfsd-nfs = {
     source = "${pkgs.gnome.gvfs}/libexec/gvfsd-nfs";
diff --git a/roles/desktop.nix b/roles/desktop.nix
index aef3f36..bade0d7 100644
--- a/roles/desktop.nix
+++ b/roles/desktop.nix
@@ -26,6 +26,7 @@ in
       slurp
       swayidle
       swaylock
+      swaynotificationcenter
       swayr
       wf-recorder
       wofi
@@ -170,10 +171,9 @@ in
     pavucontrol
     pcmanfm
     qrencode
-    uxplay
+    remmina
     unstable.wezterm
-    unstable.prusa-slicer
-    unstable.super-slicer-latest
+    uxplay
 
     solaar
     gdk-pixbuf
diff --git a/roles/work.nix b/roles/work.nix
index ac89906..46c3d9d 100644
--- a/roles/work.nix
+++ b/roles/work.nix
@@ -41,6 +41,7 @@ in {
     172.20.0.2 alert.kind
 
     #192.168.2.111 hass.home.f2o.io
+    #192.168.2.111 sync.home.f2o.io
 
     #127.0.0.1 auth-dev.thobits.com
     127.0.0.1 database
@@ -59,6 +60,7 @@ in {
     anydesk
     chromium
     nodejs
+    vscodium
 
     drone-cli
     govc