diff --git a/.forgejo/workflows/test.yml b/.forgejo/workflows/test.yml
new file mode 100644
index 0000000..d7d0dd4
--- /dev/null
+++ b/.forgejo/workflows/test.yml
@@ -0,0 +1,27 @@
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: docker
+    container:
+      image: git.agaric.com/agaric/deploycontainer:0.0.5
+    env:
+      COMPOSER_IGNORE_PLATFORM_REQS: 1
+      COMPOSER_ARGS: "install --no-dev --no-progress --no-interaction --no-scripts --optimize-autoloader"
+    steps:
+      - name: checkout
+        uses: actions/checkout@v3
+      - name: inspect environment
+        shell: "bash --noprofile --norc -exo pipefail {0}"
+        run: |
+          env
+          jq . - <<'EOF'
+          ${{ toJSON(github) }}
+          EOF
+          jq . - <<'EOF'
+          ${{ toJSON(forge) }}
+          EOF
+          jq . - <<'EOF'
+          ${{ toJSON(secrets) }}
+          EOF
diff --git a/flake.lock b/flake.lock
index dea3b17..cf47d56 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1758985165,
-        "narHash": "sha256-bzthrGCHUDzUHH9F3eNl5LG5rfg4ig9x3TGjjUE23qA=",
+        "lastModified": 1759337100,
+        "narHash": "sha256-CcT3QvZ74NGfM+lSOILcCEeU+SnqXRvl1XCRHenZ0Us=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "11cc3d55ded3346a8195000ddeadde782a611e56",
+        "rev": "004753ae6b04c4b18aa07192c1106800aaacf6c3",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1758690382,
-        "narHash": "sha256-NY3kSorgqE5LMm1LqNwGne3ZLMF2/ILgLpFr1fS4X3o=",
+        "lastModified": 1759036355,
+        "narHash": "sha256-0m27AKv6ka+q270dw48KflE0LwQYrO7Fm4/2//KCVWg=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e643668fd71b949c53f8626614b21ff71a07379d",
+        "rev": "e9f00bd893984bc8ce46c895c3bf7cac95331127",
         "type": "github"
       },
       "original": {
diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix
index b04684d..1a62cfa 100644
--- a/hosts/default/configuration.nix
+++ b/hosts/default/configuration.nix
@@ -68,7 +68,7 @@ in
   boot.kernelModules = [ "kvm-amd" "nct6775" ];
 
   # Fix problems with hanging on RX6700 (disables PSR - Panel Self Refresh)
-  boot.kernelParams = [ "amdgpu.dcdebugmask=0x10" ];
+  boot.kernelParams = [ "amdgpu.dcdebugmask=0x10" "pcie_port_pm=off" "pcie_aspm.policy=performance" ];
 
   boot.extraModulePackages = [
     (amdgpu-kernel-module.overrideAttrs (_: {
@@ -209,7 +209,8 @@ in
   networking.firewall = {
     enable = true;
     allowedTCPPorts = [ 9003 ];
-    allowedUDPPorts = [ 51820 ];
+    # 53/67 temporarily allowed for connection sharing/dhcp
+    allowedUDPPorts = [ 53 67 51820 ];
     # if packets are still dropped, they will show up in dmesg
     logReversePathDrops = true;
     checkReversePath = "loose";
@@ -235,6 +236,7 @@ in
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
+    dnsmasq # temporarily allowed for connection sharing
     ansible # automation/software-defined-configuration tool
     binutils # gnu bin utils
     # conda # python environment management
@@ -309,6 +311,7 @@ in
     gimp # GIMP image manipulation proggy
     zed-editor # the most hopeful replacement for vscode...if I never learn nvim
     noisetorch # noise/background filter for mic
+    go # golang - general purpose programming
   ];
   programs.zsh.enable = true;
   programs.git = {
diff --git a/hosts/default/home.nix b/hosts/default/home.nix
index 0daa07c..da29966 100644
--- a/hosts/default/home.nix
+++ b/hosts/default/home.nix
@@ -73,7 +73,10 @@
     # EDITOR = "emacs";
   };
   # For Monado:
-  xdg.configFile."openxr/1/active_runtime.json".source = "${pkgs.monado}/share/openxr/1/openxr_monado.json";
+  xdg.configFile."openxr/1/active_runtime.json" = {
+    source = "${pkgs.monado}/share/openxr/1/openxr_monado.json";
+    force = true;
+  };
 
   # For WiVRn:
   #xdg.configFile."openxr/1/active_runtime.json".source = "${pkgs.wivrn}/share/openxr/1/openxr_wivrn.json";