diff --git a/flake.lock b/flake.lock
index 711e5ad..434ac84 100644
--- a/flake.lock
+++ b/flake.lock
@@ -452,11 +452,11 @@
     },
     "hardware": {
       "locked": {
-        "lastModified": 1751379130,
-        "narHash": "sha256-TObxiGbuX/4FbOnzDRvznfMUjIgS+d71+BetT35EOB8=",
+        "lastModified": 1751393906,
+        "narHash": "sha256-I1x6K61ZcdFlqc07weRBy3erCAB0lVkX10i0c9eXjDI=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "8b1f894089789eb39eacf0d6891d1e17cc3a84ab",
+        "rev": "f49bb3b4107a0917ee144337bb02d311033ee1ba",
         "type": "github"
       },
       "original": {
@@ -650,11 +650,11 @@
         "phps": "phps"
       },
       "locked": {
-        "lastModified": 1746369841,
-        "narHash": "sha256-/k3MQPXdsXJ0FDEsT1YvBG9ugRXk1nuE9MCb1wAMGQc=",
+        "lastModified": 1751398370,
+        "narHash": "sha256-7TSTVtdZz2nhO5Gn/U3pjvENvQAKJWFJ799EWtx/O/s=",
         "ref": "refs/heads/main",
-        "rev": "dbe35541ef6923f411685434cc535d0854b55b6a",
-        "revCount": 5,
+        "rev": "18cc2db6cc507ff0123a7e7fc6936f9ea52dbc66",
+        "revCount": 7,
         "type": "git",
         "url": "https://codeberg.org/helvetica/myphps.git"
       },
diff --git a/hosts/work/networking.nix b/hosts/work/networking.nix
new file mode 100644
index 0000000..3ada38d
--- /dev/null
+++ b/hosts/work/networking.nix
@@ -0,0 +1,3 @@
+{
+  networking.networkmanager.enableStrongSwan = true;
+}
diff --git a/hosts/work/profiles.nix b/hosts/work/profiles.nix
index c901b18..130f555 100644
--- a/hosts/work/profiles.nix
+++ b/hosts/work/profiles.nix
@@ -1,6 +1,8 @@
 {
   profiles = {
     desktop.enable = true;
+    dynamic.enable = true;
+    headful.enable = true;
     productivity.enable = true;
   };
 }
diff --git a/hosts/work/tools.nix b/hosts/work/tools.nix
index 2dca47b..db6c616 100644
--- a/hosts/work/tools.nix
+++ b/hosts/work/tools.nix
@@ -7,5 +7,7 @@
     pkgs.jq
     pkgs.mariadb
     pkgs.openssl
+    pkgs.kubectl
+    pkgs.awscli2
   ];
 }
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 2251d3e..5567544 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -21,4 +21,5 @@ in
   "secure-boot/abacus.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
   "secure-boot/flamingo.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.flamingo ];
   "secure-boot/vessel.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.vessel ];
+  "secure-boot/work.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.work ];
 }
diff --git a/secrets/secure-boot/work.tar.age b/secrets/secure-boot/work.tar.age
new file mode 100644
index 0000000..b76af37
Binary files /dev/null and b/secrets/secure-boot/work.tar.age differ