diff --git a/common/services/usbguard.nix b/common/services/usbguard.nix
index 61dde57..95f5c98 100644
--- a/common/services/usbguard.nix
+++ b/common/services/usbguard.nix
@@ -27,14 +27,17 @@
       allow id 046d:c08b serial "178D316C3832" name "G502 HERO Gaming Mouse"
       allow id 1ea7:0907 serial "SN0000000001" name "USB-HID Gaming Keyboard"
       allow id 0bc2:231a serial "2HC015KJ" name "Expansion" # USB-SATA adapter
+      allow id 1058:0704 name "External HDD    " # USB-SATA adapter
       allow id 04f9:02d3 serial "E71830G6J592482" name "" # Printer
 
       # Phones
       allow id 18d1:4ee1 serial "28051FDH200ATC" name "Pixel 7"
       allow id 2717:ff40 serial "52bb384f0512" name "Redmi 10 2022"
 
-
       allow id 04a9:178a serial "G04A4A" name "MG3600 series"
+
+      # Baofeng programmer
+      allow id 067b:2303 serial "" name "USB-Serial Controller D"
     '';
   };
 }
diff --git a/hosts/yaseen/configuration.nix b/hosts/yaseen/configuration.nix
index 2a7b2d6..aea849a 100644
--- a/hosts/yaseen/configuration.nix
+++ b/hosts/yaseen/configuration.nix
@@ -72,6 +72,10 @@ in {
     firewall = {
       allowedTCPPorts = [
         # 8080 # ?
+        80
+        443
+        3001
+        8000
         # 8008 # ssb
         # 12345 # tildefriends
         # 13378 # audiobookshelf
@@ -116,6 +120,13 @@ in {
     android-studio
     lutris
 
+    # nheko
+    iamb
+    ladybird
+    lynx
+
+    chirp
+
     inputs.agenix.packages.x86_64-linux.default
   ];
 
@@ -125,6 +136,35 @@ in {
 
   programs.adb.enable = true;
 
+  # services.ddclient = {
+  #   enable = true;
+  #   # usev6=if, if=wlp5s0
+  #   configFile = pkgs.writeText "ddclient-config" ''
+  #     usev6=webv6, web=dns.glauca.digital/checkip
+
+  #     ipv6=yes
+  #     ipv4=no
+
+  #     protocol=dyndns2
+  #     server=dns.glauca.digital
+  #     login=
+  #     password=
+  #     hello.vulpecula.zone
+  #   '';
+  # };
+
+  # services.nginx.enable = true;
+  # services.nginx.virtualHosts."test.vulpecula.zone" = {
+  #   # addSSL = true;
+  #   # enableACME = true;
+  #   root = "/www";
+  # };
+  # security.acme = {
+  #   acceptTerms = true;
+  #   defaults.email = "tasiaiso@proton.me";
+  # };
+
+
   # services.grafana = {
   #   enable = false;
   #   settings.server = {
@@ -179,11 +219,11 @@ in {
   #     server = {
   #       DOMAIN = "git.example.com";
   #       # You need to specify this to remove the port from URLs in the web UI.
-  #       ROOT_URL = "https://git.vulpecula.zone/"; 
+  #       ROOT_URL = "https://git.vulpecula.zone/";
   #       HTTP_PORT = 3000;
   #     };
   #     # You can temporarily allow registration to create an admin user.
-  #     service.DISABLE_REGISTRATION = true; 
+  #     service.DISABLE_REGISTRATION = true;
   #     # Add support for actions, based on act: https://github.com/nektos/act
   #     # actions = {
   #     #   ENABLED = true;
@@ -191,7 +231,7 @@ in {
   #     # };
   #     # Sending emails is completely optional
   #     # You can send a test email from the web UI at:
-  #     # Profile Picture > Site Administration > Configuration >  Mailer Configuration 
+  #     # Profile Picture > Site Administration > Configuration >  Mailer Configuration
   #     # mailer = {
   #     #   ENABLED = true;
   #     #   SMTP_ADDR = "mail.example.com";
@@ -202,14 +242,18 @@ in {
   #   # mailerPasswordFile = config.age.secrets.forgejo-mailer-password.path;
   # };
 
-# services.uptime-kuma.enable = true;
+  services.uptime-kuma.enable = true;
+  nixpkgs.config.permittedInsecurePackages = [
+    "olm-3.2.16"
+    # "electron-27.3.11"
+  ];
 
   # services.mattermost = {
   #   enable = true;
   #   siteUrl = "https://mattermost.example.com"; # Set this to the URL you will be hosting the site on.
   # };
 
-# todo: ci runner
+  # todo: ci runner
 
   # services.ollama = {
   #   enable = true;