diff --git a/flake.lock b/flake.lock
index 873ab5a..337fd60 100644
--- a/flake.lock
+++ b/flake.lock
@@ -41,11 +41,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1764950072,
-        "narHash": "sha256-BmPWzogsG2GsXZtlT+MTcAWeDK5hkbGRZTeZNW42fwA=",
+        "lastModified": 1766309749,
+        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f61125a668a320878494449750330ca58b78c557",
+        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
         "type": "github"
       },
       "original": {
diff --git a/modules/packages.nix b/modules/packages.nix
index 09dafe7..cbcf1d5 100644
--- a/modules/packages.nix
+++ b/modules/packages.nix
@@ -12,6 +12,7 @@
     "steam-unwrapped"
     "steam-run"
     "terraform"
+    "obsidian"
   ];
 
   # List packages installed in system profile.
@@ -61,6 +62,7 @@
     # Development
     nodejs_20
     gnupg
+    go
 
     # Automation / Cloud tools
     ansible
@@ -79,6 +81,9 @@
     fluxcd
     kubectx         # switch between contexts/namespaces
     stern           # multi-pod log tailing
+    hcloud          # Hetzner Cloud CLI
+    eksctl          # AWS EKS CLI
+    # terragrunt    # broken in nixpkgs
 
     # WWAN modem tools
     libmbim
@@ -87,6 +92,13 @@
 
     # Estonian ID / digital signature
     qdigidoc
+    web-eid-app
+
+    # CLI utilities
+    tmux
+    tldr
+    yq-go           # YAML processor
+    whois
 
     # Privacy / Anonymity
     tor-browser
diff --git a/modules/programs.nix b/modules/programs.nix
index 8cd1366..dff0b34 100644
--- a/modules/programs.nix
+++ b/modules/programs.nix
@@ -38,4 +38,11 @@
 
   # Enable fwupd service
   services.fwupd.enable = true;
+
+  # Virtualization (KVM/QEMU)
+  virtualisation.libvirtd.enable = true;
+  programs.virt-manager.enable = true;
+
+  # Docker
+  virtualisation.docker.enable = true;
 }
diff --git a/modules/users.nix b/modules/users.nix
index 4959059..46dd89c 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -8,7 +8,7 @@
   users.users.asxpi = {
     isNormalUser = true;
     description = "Sergei P";
-    extraGroups = [ "networkmanager" "wheel" "dialout" ];
+    extraGroups = [ "networkmanager" "wheel" "dialout" "libvirtd" "docker" ];
     shell = pkgs.zsh;
     packages = with pkgs; [
       # Internet
@@ -29,6 +29,8 @@
       # bolt-launcher
       # Utils
       cameractrls
+      # Notes
+      obsidian
     ];
   };
 }