diff --git a/flake.lock b/flake.lock
index 6e230b0..00b213a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,42 +7,42 @@
         ]
       },
       "locked": {
-        "lastModified": 1758463745,
-        "narHash": "sha256-uhzsV0Q0I9j2y/rfweWeGif5AWe0MGrgZ/3TjpDYdGA=",
+        "lastModified": 1765979862,
+        "narHash": "sha256-/r9/1KamvbHJx6I40H4HsSXnEcBAkj46ZwibhBx9kg0=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "3b955f5f0a942f9f60cdc9cacb7844335d0f21c3",
+        "rev": "d3135ab747fd9dac250ffb90b4a7e80634eacbe9",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-25.05",
+        "ref": "release-25.11",
         "repo": "home-manager",
         "type": "github"
       }
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1760139962,
-        "narHash": "sha256-4xggC56Rub3WInz5eD7EZWXuLXpNvJiUPahGtMkwtuc=",
+        "lastModified": 1765838191,
+        "narHash": "sha256-m5KWt1nOm76ILk/JSCxBM4MfK3rYY7Wq9/TZIIeGnT8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "7e297ddff44a3cc93673bb38d0374df8d0ad73e4",
+        "rev": "c6f52ebd45e5925c188d1a20119978aa4ffd5ef6",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-25.05",
+        "ref": "nixos-25.11",
         "type": "indirect"
       }
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1760284886,
-        "narHash": "sha256-TK9Kr0BYBQ/1P5kAsnNQhmWWKgmZXwUQr4ZMjCzWf2c=",
+        "lastModified": 1766070988,
+        "narHash": "sha256-G/WVghka6c4bAzMhTwT2vjLccg/awmHkdKSd2JrycLc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "cf3f5c4def3c7b5f1fc012b3d839575dbe552d43",
+        "rev": "c6245e83d836d0433170a16eb185cefe0572f8b8",
         "type": "github"
       },
       "original": {
@@ -66,11 +66,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1760393368,
-        "narHash": "sha256-8mN3kqyqa2PKY0wwZ2UmMEYMcxvNTwLaOrrDsw6Qi4E=",
+        "lastModified": 1765836173,
+        "narHash": "sha256-hWRYfdH2ONI7HXbqZqW8Q1y9IRbnXWvtvt/ONZovSNY=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "ab8d56e85b8be14cff9d93735951e30c3e86a437",
+        "rev": "443a7f2e7e118c4fc63b7fae05ab3080dd0e5c63",
         "type": "github"
       },
       "original": {
diff --git a/hosts/thinix-thinkpad/configuration.nix b/hosts/thinix-thinkpad/configuration.nix
index e596a0d..b9531f9 100644
--- a/hosts/thinix-thinkpad/configuration.nix
+++ b/hosts/thinix-thinkpad/configuration.nix
@@ -26,6 +26,10 @@
     device = "/swapfile";
     size = 4096;
   }];
+networking.firewall = {
+  enable = true;
+  allowedTCPPorts = [ 80 443 8080 ];
+};
 
   services.udev.extraRules = ''
     # Ignore internal NVMe Windows partition
diff --git a/user/packages.nix b/user/packages.nix
index 60bdde2..c809c3a 100644
--- a/user/packages.nix
+++ b/user/packages.nix
@@ -51,7 +51,7 @@
     networkmanagerapplet
     pavucontrol
     feh
-    xdragon
+    dragon-drop
     tofi
     fuzzel
 
@@ -121,7 +121,7 @@
     tt
     bitwarden-cli
     lazydocker
-    poppler_utils
+    poppler-utils
     unstable.kmonad
     xorg.setxkbmap
     prismlauncher
@@ -145,7 +145,8 @@
     openjdk
 
     # --- Build Tools ---
-    clang
+    #clang
+    gcc
     clang-tools
     gnumake
     cmake
diff --git a/user/users.nix b/user/users.nix
index bb76b2a..caed168 100644
--- a/user/users.nix
+++ b/user/users.nix
@@ -13,6 +13,8 @@
 				"uinput"
 				"scanner"
 				"lp"
+        "dialout"
+        "uucp"
 				"davfs2"
 				"wheel"
         "ydotool"