diff --git a/nixos_modules/bertof_user.nix b/nixos_modules/bertof_user.nix
index b3e08c3..5321e0a 100644
--- a/nixos_modules/bertof_user.nix
+++ b/nixos_modules/bertof_user.nix
@@ -1,7 +1,7 @@
 {
   users.users.bertof = {
     isNormalUser = true;
-    extraGroups = [ "network" "networkmanager" "wheel" ];
+    extraGroups = [ "network" "networkmanager" "wheel" "tss" ];
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+zsSWZFFzQKnATCAvtG+iuSm4qkZHjCtHzGa9B/71W"
     ];
diff --git a/thor/configuration.nix b/thor/configuration.nix
index d550b38..813bb7b 100644
--- a/thor/configuration.nix
+++ b/thor/configuration.nix
@@ -15,6 +15,7 @@ with lib; {
           device = "/dev/nvme0n1p2";
           preLVM = true;
           allowDiscards = true;
+          bypassWorkqueues = true;
         };
       };
     };
@@ -168,6 +169,7 @@ with lib; {
   services.teamviewer.enable = true;
 
   security = {
+    tpm2.enable = true;
     rtkit.enable = true;
     pam.services = { autounlock_gnome_keyring.enableGnomeKeyring = true; };
     sudo.extraConfig = ''