diff --git a/common/packages.nix b/common/packages.nix
index 06e5d73..f82c287 100644
--- a/common/packages.nix
+++ b/common/packages.nix
@@ -28,7 +28,7 @@
     git
     python3
     man-pages
-    dnsutils
+    dnsutils # for e.g. dig
     netcat-openbsd
     ntfs3g
     file
diff --git a/home/modules/packages.nix b/home/modules/packages.nix
index 40382d3..10811b2 100644
--- a/home/modules/packages.nix
+++ b/home/modules/packages.nix
@@ -73,8 +73,7 @@ let
       pwgen
       pandoc
       pdfgrep
-      # zig dependency breaks occasionally, stay on C version for now
-      ncdu_1
+      ncdu
       dos2unix
       unzip
       fswatch
@@ -82,6 +81,7 @@ let
       age
       lnav
       spacer
+      delve # `delv` is the spiritual successor for `dig`
 
       nix-output-monitor # putting this here as a plain `nix` alternative
 
diff --git a/hosts/framenix/default.nix b/hosts/framenix/default.nix
index 496bf1b..497c7c7 100644
--- a/hosts/framenix/default.nix
+++ b/hosts/framenix/default.nix
@@ -88,6 +88,6 @@ in
 
   schmittlauch = {
     audio-sharing.enable = true;
-    secureboot.enable = false;
+    secureboot.enable = true;
   };
 }