diff --git a/.sops.yaml b/.sops.yaml
index 2d580dd..2f7c075 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -7,6 +7,7 @@ keys:
     - &lilith age13704a3s08stwndvduk2qsqmkg703utsn96ak3gzexggvrdx3cpxsrlx92n
     - &alastor age1cjglrl2qg7ursfradsspat4gz50pqgdj2dcjqngwx5rrf7el83mqj5vf4h
     - &yosai age182mmgwl4w0qffsvjx0v200g3hp5xu478zrkcfvadzhz6u5aqmuvsswmr6z
+    - &seraphim age14vh330hj00gxhprjr3ajqq0gqwvt2m8epqstsvmpx6ta8wu5usvq4znjha
 
 creation_rules:
   - path_regex: secrets.yaml$
@@ -18,3 +19,4 @@ creation_rules:
       - *lilith
       - *alastor
       - *yosai
+      - *seraphim
diff --git a/common/default.nix b/common/default.nix
index 01d4609..371c01c 100644
--- a/common/default.nix
+++ b/common/default.nix
@@ -52,7 +52,7 @@
     package = pkgs.nix-ld-rs;
   };
 
-  # services.tailscale.enable = true;
+  services.tailscale.enable = true;
 
   nix.settings = {
     trusted-users = ["xqtc"];
diff --git a/home/config-files/hyprland.conf b/home/config-files/hyprland.conf
index 05b4f75..e7ddaf9 100644
--- a/home/config-files/hyprland.conf
+++ b/home/config-files/hyprland.conf
@@ -12,7 +12,7 @@ monitor=,preferred,auto,1
 # See https://wiki.hyprland.org/Configuring/Keywords/ for more
 
 # Execute your favorite apps at launch
-exec-once = waybar & swww init & mako & kwalletd6 & nextcloud
+exec-once = waybar & swww init & mako & kwalletd6 & nextcloud & trayscale
 
 # Source a file (multi-file configs)
 # source = ~/.config/hypr/myColors.conf
diff --git a/home/modules/home-pkgs.nix b/home/modules/home-pkgs.nix
index b4c7212..13e7b52 100644
--- a/home/modules/home-pkgs.nix
+++ b/home/modules/home-pkgs.nix
@@ -30,6 +30,7 @@ in {
       grim
       networkmanagerapplet
       nextcloud-client
+      trayscale
       swaylock-effects
       wdisplays
       brightnessctl
diff --git a/hosts/x86_64-linux/seraphim/default.nix b/hosts/x86_64-linux/seraphim/default.nix
index 88e96f2..f21c36f 100644
--- a/hosts/x86_64-linux/seraphim/default.nix
+++ b/hosts/x86_64-linux/seraphim/default.nix
@@ -30,7 +30,7 @@
       pkgs.intel-vaapi-driver.override {enableHybridCodec = true;};
   };
   hardware.opengl = {
-    enable = true;
+    enable = false;
     extraPackages = with pkgs; [
       intel-media-driver # LIBVA_DRIVER_NAME=iHD
       intel-vaapi-driver # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
@@ -99,7 +99,6 @@
 
   programs.dconf.enable = true;
 
-  networking.resolvconf.enable = false;
   services.resolved.enable = true;
 
   # services.transmission = {
@@ -152,6 +151,7 @@
 
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
+  services.openssh.settings.PasswordAuthentication = false;
 
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [22 8085 7878 7878 8989 9696 5030 5031 50300];
diff --git a/hosts/x86_64-linux/seraphim/jellyfin.nix b/hosts/x86_64-linux/seraphim/jellyfin.nix
index faa7d72..97f0c6f 100644
--- a/hosts/x86_64-linux/seraphim/jellyfin.nix
+++ b/hosts/x86_64-linux/seraphim/jellyfin.nix
@@ -4,7 +4,7 @@
   lib,
   ...
 }: {
-  services.jellyfin.enable = true;
+  services.jellyfin.enable = false;
   services.jellyfin.user = "xqtc";
   services.nginx.virtualHosts."jellyfin.fritz.box" = {
     locations."/" = {