diff --git a/hosts/chunk/default.nix b/hosts/chunk/default.nix
index 0343084..6021b41 100644
--- a/hosts/chunk/default.nix
+++ b/hosts/chunk/default.nix
@@ -75,8 +75,11 @@
     };
   };
 
-  boot.loader.grub.enable = true;
-  boot.loader.grub.device = "/dev/vda";
+  boot = {
+    loader.grub.enable = true;
+    loader.grub.device = "/dev/vda";
+    kernelPackages = pkgs.linuxPackages_latest;
+  };
 
   system.stateVersion = "24.05";
 
diff --git a/hosts/chunk/tailscale.nix b/hosts/chunk/tailscale.nix
index fefc8e5..e170e6b 100644
--- a/hosts/chunk/tailscale.nix
+++ b/hosts/chunk/tailscale.nix
@@ -1,4 +1,5 @@
-{ config, ... }: {
+{ config, ... }:
+{
   services.tailscale = {
     enable = true;
     authKeyFile = config.sops.secrets."tailscale/auth".path;
diff --git a/hosts/ytnix/default.nix b/hosts/ytnix/default.nix
index 54f13da..6192e43 100644
--- a/hosts/ytnix/default.nix
+++ b/hosts/ytnix/default.nix
@@ -324,4 +324,10 @@
   services.udev.extraHwdb = ''
     SUBSYSTEM=="usb", SYSFS{idVendor}=="090c", SYSFS{idProduct}=="1000", ACTION=="add", GROUP="users", MODE="0664"
   '';
+
+  programs.ssh = {
+    askPassword = "${pkgs.seahorse}/libexec/seahorse/ssh-askpass";
+    startAgent = true;
+    enableAskPassword = true;
+  };
 }
diff --git a/hosts/ytnix/tailscale.nix b/hosts/ytnix/tailscale.nix
index 91d67bf..63489ae 100644
--- a/hosts/ytnix/tailscale.nix
+++ b/hosts/ytnix/tailscale.nix
@@ -1,4 +1,5 @@
-{ config, ... }: {
+{ config, ... }:
+{
   services.tailscale = {
     enable = true;
     authKeyFile = config.sops.secrets."tailscale/auth".path;