diff --git a/flake.lock b/flake.lock
index 636b725..acaece0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1762847253,
-        "narHash": "sha256-BWWnUUT01lPwCWUvS0p6Px5UOBFeXJ8jR+ZdLX8IbrU=",
+        "lastModified": 1768584846,
+        "narHash": "sha256-IRPmIOV2tPwxbhP/I9M5AmwhTC0lMPtoPStC+8T6xl0=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "899dc449bc6428b9ee6b3b8f771ca2b0ef945ab9",
+        "rev": "cce68f4a54fa4e3d633358364477f5cc1d782440",
         "type": "github"
       },
       "original": {
@@ -36,11 +36,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1763421233,
-        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
+        "lastModified": 1768564909,
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
         "type": "github"
       },
       "original": {
diff --git a/nixos/dustbowl.nix b/nixos/dustbowl.nix
index 670e2d4..8576e3e 100644
--- a/nixos/dustbowl.nix
+++ b/nixos/dustbowl.nix
@@ -100,8 +100,12 @@
 
   networking.useNetworkd = true;
   networking.hostName = "dustbowl";
-  networking.wireless.enable = true;
-  networking.wireless.interfaces = [ "wlp2s0" ];
+  networking.wireless = {
+    enable = true;
+    interfaces = [ "wlp2s0" ];
+    allowAuxiliaryImperativeNetworks = true;
+    userControlled = true;
+  };
 
   networking.wireguard.enable = true;
   networking.firewall.checkReversePath = "loose";
@@ -440,7 +444,17 @@
     isNormalUser = true;
     home = "/home/joachim";
     shell = pkgs.fish;
-    extraGroups = [ "wheel" "scanner" "libvirtd" "wireshark" "vboxusers" "tss" "plugdev" "dialout" ];
+    extraGroups = [
+      "wheel"
+      "scanner"
+      "libvirtd"
+      "wireshark"
+      "vboxusers"
+      "tss"
+      "plugdev"
+      "dialout"
+      "wpa_supplicant"
+    ];
   };
 
   # Yubikey PAM