diff --git a/nixos/dustbowl.nix b/nixos/dustbowl.nix
index e690c2a..62abc9b 100644
--- a/nixos/dustbowl.nix
+++ b/nixos/dustbowl.nix
@@ -58,6 +58,12 @@
   networking.useDHCP = false;
   networking.interfaces.wlp2s0.useDHCP = true;
 
+  # Add TeleSec root certificate to /etc/ explicitly for eduroam
+  environment.etc."ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem".source = pkgs.fetchurl {
+    url = "https://www.pki.dfn.de/fileadmin/PKI/zertifikate/T-TeleSec_GlobalRoot_Class_2.pem";
+    sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
+  };
+
   # services.dnscrypt-proxy2 = {
   #   enable = true;
   #   settings = {
@@ -215,19 +221,6 @@
     let args = [ "-f" "/etc/bluetooth/main.conf" "-E" ];
     in lib.mkForce [ "" "${config.hardware.bluetooth.package}/libexec/bluetooth/bluetoothd ${lib.escapeShellArgs args}" ];
 
-  systemd.user.services.mpris-proxy = {
-    description = "Bluetooth mpris-player";
-    wantedBy = [ "graphical-session.target" ];
-    partOf = [ "graphical-session.target" ];
-    serviceConfig = {
-      ExecStart = ''
-        ${config.hardware.bluetooth.package}/bin/mpris-proxy
-      '';
-      RestartSec = 3;
-      Restart = "always";
-    };
-  };
-
   # UPower
   services.upower.enable = true;
 
@@ -312,8 +305,6 @@
     };
   };
 
-  virtualisation.virtualbox.host.enable = true;
-
   virtualisation.libvirtd.enable = true;
 
   users.users.joachim = {