diff --git a/home.nix b/home.nix
index f428412..68c879a 100644
--- a/home.nix
+++ b/home.nix
@@ -47,6 +47,7 @@
       mpv
       morgen
       obsidian
+      offpunk
       pamixer
       pavucontrol
       powertop
@@ -153,7 +154,7 @@
       enable = true;
       loginShellInit = ''
         if test (tty) = /dev/tty1
-        exec sway
+          exec sway
         end
       '';
       shellAliases = {
diff --git a/hosts/cube.nix b/hosts/cube.nix
index ad437b3..3a0bb5f 100644
--- a/hosts/cube.nix
+++ b/hosts/cube.nix
@@ -40,6 +40,9 @@
     pam.services.swaylock = {};
     polkit.enable = true;
     rtkit.enable = true;
+    sudo = {
+      wheelNeedsPassword = true;
+    }
   };
   services.envfs.enable = true;
   services.flatpak.enable = true;