diff --git a/hosts/krypton/programs.nix b/hosts/krypton/programs.nix
index ca9bd61..b9aeb10 100644
--- a/hosts/krypton/programs.nix
+++ b/hosts/krypton/programs.nix
@@ -18,6 +18,10 @@
     onlyoffice-bin
 
     krita
+
+    wireshark
+    tcpdump
+    nmap
   ];
 
   # Wireshark
diff --git a/hosts/osmium/configuration.nix b/hosts/osmium/configuration.nix
index 592b3e2..f493457 100644
--- a/hosts/osmium/configuration.nix
+++ b/hosts/osmium/configuration.nix
@@ -7,6 +7,7 @@
       ../../configuration/proxmox-vm
 
       ./nixfiles-updated-inputs.nix
+      ./polkit-test.nix
     ];
 
   boot.loader.grub.enable = true;
diff --git a/hosts/osmium/polkit-test.nix b/hosts/osmium/polkit-test.nix
new file mode 100644
index 0000000..61d3af6
--- /dev/null
+++ b/hosts/osmium/polkit-test.nix
@@ -0,0 +1,29 @@
+{ ... }:
+
+{
+
+  security.polkit.enable = true;
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+        if (
+            action.id == "org.freedesktop.systemd1.manage-units"
+            && action.lookup("unit") == "update-from-hydra-olimex-esp32-poe.service"
+            && action.lookup("verb") == "start"
+            && subject.user == "clerie"
+        ) {
+            return polkit.Result.YES;
+        }
+    });
+  '';
+
+  services.update-from-hydra.paths.olimex-esp32-poe = {
+    enable = true;
+    hydraUrl = "https://hydra.clerie.de";
+    hydraProject = "clerie";
+    hydraJobset = "olimex-esp32-poe";
+    hydraJob = "olimex-esp32-poe";
+    nixStoreUri = "https://nix-cache.clerie.de";
+    resultPath = "/srv/olimex-esp32-poe";
+  };
+
+}