diff --git a/hardware/xps15-sphere.nix b/hardware/xps15-sphere.nix
index 6ab7175..90ddae4 100644
--- a/hardware/xps15-sphere.nix
+++ b/hardware/xps15-sphere.nix
@@ -15,6 +15,19 @@ in {
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
+  nixpkgs.config.packageOverrides = pkgs: {
+    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
+  };
+  hardware.opengl = {
+    enable = true;
+    extraPackages = with pkgs; [
+      intel-media-driver # LIBVA_DRIVER_NAME=iHD
+      vaapiIntel         # LIBVA_DRIVER_NAME=i965
+      vaapiVdpau
+      libvdpau-va-gl
+    ];
+  };
+
   fileSystems."/" =
     { device = "tank/work/nixos";
       fsType = "zfs";
@@ -43,5 +56,6 @@ in {
   networking.hostName = "sphere";
   powerManagement.powertop.enable = true;
   services.tlp.enable = true;
+  services.hardware.bolt.enable = true;
 
 }
diff --git a/roles/admin.nix b/roles/admin.nix
index e9e67fc..9a92294 100644
--- a/roles/admin.nix
+++ b/roles/admin.nix
@@ -6,8 +6,9 @@ in {
   environment.systemPackages = with pkgs; [
     cryptsetup
     kubectl
-    unstable.kubernetes-helm
     whois
+    unstable.kubernetes-helm
+    unstable.kustomize
 
     # podman
     conmon
diff --git a/roles/base.nix b/roles/base.nix
index 4ce365a..149d8bc 100644
--- a/roles/base.nix
+++ b/roles/base.nix
@@ -16,7 +16,9 @@ in {
     gnupg
     htop
     jq
+    mtr
     ncdu
+    nload
     openssl
     pv
     ripgrep
diff --git a/roles/desktop.nix b/roles/desktop.nix
index a8108cd..5b7d7c4 100644
--- a/roles/desktop.nix
+++ b/roles/desktop.nix
@@ -20,9 +20,23 @@ in {
       swayidle
       swaylock
       xwayland
+      wf-recorder
     ];
   };
 
+  services.pipewire.enable = true;
+  xdg.portal = {
+    enable = true;
+    gtkUsePortal = true;
+    extraPortals = with unstable; [
+      xdg-desktop-portal-gtk
+      xdg-desktop-portal-wlr
+    ];
+  };
+  boot.extraModulePackages = with config.boot.kernelPackages; [
+    v4l2loopback
+  ];
+
   environment = {
     etc = {
       "sway/config".source = ../dotfiles/sway/config;
diff --git a/roles/work.nix b/roles/work.nix
index 709737b..068c768 100644
--- a/roles/work.nix
+++ b/roles/work.nix
@@ -13,6 +13,7 @@ in {
 
   networking.extraHosts = ''
     35.234.109.94 fsi.thomann.de
+    10.100.7.11 mon.netzmarkt.de
   '';
 
   environment.systemPackages = with pkgs; [