diff --git a/README.md b/README.md
index 2c23285..d8d5ed3 100644
--- a/README.md
+++ b/README.md
@@ -2,3 +2,4 @@
 
 ## TODO
 - [ ] Add secret manager (sops-nix)
+- [ ] Check nix Home manager
diff --git a/flake.lock b/flake.lock
index 34d97cf..873ab5a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -8,11 +8,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1765105289,
-        "narHash": "sha256-OwPB2MW4V+CD8QpqaV5GnWdKuhVZ9LoSqJxYcWTmSx0=",
+        "lastModified": 1766457259,
+        "narHash": "sha256-bDA65v40vYio865H6UplNHbeYhR7/A1GQqKT1u3suAM=",
         "owner": "sadjow",
         "repo": "claude-code-nix",
-        "rev": "d1fa648842116e632e008e55cb7ec213fdc37ba1",
+        "rev": "5dfa1244dd5e93dd868719e26d80164dd3b0ba00",
         "type": "github"
       },
       "original": {
diff --git a/modules/packages.nix b/modules/packages.nix
index 3bc0a1f..09dafe7 100644
--- a/modules/packages.nix
+++ b/modules/packages.nix
@@ -7,6 +7,11 @@
     "castlabs-electron"
     "tidal-hifi"
     "discord-ptb"
+    "steam"
+    "steam-original"
+    "steam-unwrapped"
+    "steam-run"
+    "terraform"
   ];
 
   # List packages installed in system profile.
@@ -38,6 +43,8 @@
     usbutils    # lsusb
     lsof        # list open files
     iotop       # disk I/O monitor
+    smartmontools # smartctl
+    nvme-cli    # nvme
 
     # Networking tools
     net-tools   # netstat, ifconfig (legacy)
@@ -49,14 +56,42 @@
     # Filesystem
     os-prober
     btrfs-progs
+    gparted
 
     # Development
     nodejs_20
     gnupg
 
+    # Automation / Cloud tools
+    ansible
+    ansible-lint
+    sshpass         # for ansible password authentication
+    terraform
+    opentofu        # open-source Terraform fork
+    kubectl
+    kubernetes-helm # helm
+    k9s             # Kubernetes TUI
+    awscli2
+    # azure-cli
+    google-cloud-sdk
+    docker-compose
+    argocd
+    fluxcd
+    kubectx         # switch between contexts/namespaces
+    stern           # multi-pod log tailing
+
     # WWAN modem tools
     libmbim
     libqmi
     modemmanager
+
+    # Estonian ID / digital signature
+    qdigidoc
+
+    # Privacy / Anonymity
+    tor-browser
+    ivpn
+    ivpn-service
+    ivpn-ui
   ];
 }
diff --git a/modules/programs.nix b/modules/programs.nix
index f4d4283..8cd1366 100644
--- a/modules/programs.nix
+++ b/modules/programs.nix
@@ -26,6 +26,16 @@
   # Enable flakes
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
+  # Steam gaming platform
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+    dedicatedServer.openFirewall = true;
+  };
+
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;
+
+  # Enable fwupd service
+  services.fwupd.enable = true;
 }
diff --git a/modules/users.nix b/modules/users.nix
index 52e80f1..4959059 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -2,6 +2,8 @@
 { config, pkgs, lib, ... }:
 
 {
+  # Enable passwordless sudo for wheel group
+  security.sudo.wheelNeedsPassword = false;
   # Define a user account. Don't forget to set a password with 'passwd'.
   users.users.asxpi = {
     isNormalUser = true;