diff --git a/logical/jarvis.nix b/logical/jarvis.nix
index 08db58b..adfe4ff 100644
--- a/logical/jarvis.nix
+++ b/logical/jarvis.nix
@@ -15,16 +15,9 @@
       peers = [ {
         publicKey = "6demp+PX2XyVoMovDj4xHQ2ZHKoj4QAF8maWpjcyzzI=";
         endpoint = "wg.lumi.guide:31727";
-        allowedIPs = [ "10.96.0.0/12" "10.0.12.0/22" "10.0.1.0/26" ];
+        allowedIPs = [ "10.96.0.0/12" "10.0.0.0/17" ];
       }];
       postSetup = "ip link set dev wg-lumi mtu 1371";
     };
   };
-
-  # development
-  services.postgresql = {
-    enable = true;
-    enableTCPIP = true;
-    package = pkgs.postgresql_10;
-  };
 }
diff --git a/roles/workstation.nix b/roles/workstation.nix
index 6a65274..b0df440 100644
--- a/roles/workstation.nix
+++ b/roles/workstation.nix
@@ -70,4 +70,27 @@ in
   services.udev.extraRules = ''
     SUBSYSTEM=="usb", ATTRS{idVendor}=="1209", ATTRS{idProduct}=="5bf0", MODE="0664", GROUP="dialout"
   '';
+
+  # LDAC:
+  hardware.pulseaudio.extraModules = [ pkgs.pulseaudio-modules-bt ];
+
+  # picoscope
+  users.users.yorick.extraGroups = ["pico"];
+  services.udev.packages = [
+    (pkgs.writeTextDir "lib/udev/rules.d/95-pico.rules" ''
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ce9", MODE="664",GROUP="pico"
+    '')
+  ];
+  users.groups.pico = {};
+
+  # development
+  services.postgresql = {
+    enable = true;
+    enableTCPIP = true;
+    package = pkgs.postgresql_10;
+  };
+
+
+  # git
+  boot.kernel.sysctl."fs.inotify.max_user_watches" = 1024000000;
 }