diff --git a/common/linux.nix b/common/linux.nix
index 2ffff5e..cfc63d0 100644
--- a/common/linux.nix
+++ b/common/linux.nix
@@ -31,8 +31,6 @@
 
   time.timeZone = "America/Toronto";
 
-  services.opensnitch.enable = true;
-
   sound.enable = true;
 
   # Enable 32bit for steam
diff --git a/common/packages.nix b/common/packages.nix
index 13e8fff..c4d8a46 100644
--- a/common/packages.nix
+++ b/common/packages.nix
@@ -153,13 +153,13 @@ in
 
         # python
         mypy
-        python39
-        python39Packages.black
-        python39Packages.ipython
-        python39Packages.pip
-        python39Packages.poetry
-        python39Packages.setuptools
-        python39Packages.virtualenv
+        python310
+        python310Packages.black
+        python310Packages.ipython
+        python310Packages.pip
+        python310Packages.poetry
+        python310Packages.setuptools
+        python310Packages.virtualenv
 
         # ruby
         rbenv
@@ -172,6 +172,7 @@ in
         srv
 
         # security
+        sops
         yubikey-manager
 
       ] ++ lib.optionals stdenv.isLinux ([