diff --git a/flake.lock b/flake.lock
index 375d459..d284203 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1712325259,
-        "narHash": "sha256-9PipXYv1Ek1oi0WrGZYtlvnjoYS20QdSLLpJ+nHEbjE=",
+        "lastModified": 1712612224,
+        "narHash": "sha256-Tv4C8OSPVmm4LbpJGLFSODyvJy6DqrisEGPCQdNVOeY=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "fbbac1aee6eae60c32b47e95447c4a3ec59d9773",
+        "rev": "79eab0e82cb126bf4ac170f44af82479f0895ab5",
         "type": "github"
       },
       "original": {
@@ -27,11 +27,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1712171473,
-        "narHash": "sha256-IRw8f54GsnooUSci9wZpAN7AK/XTgfqeuLbETFi+NH4=",
+        "lastModified": 1712599408,
+        "narHash": "sha256-6nKllyhp6IPEAz4YQoCNcvOS1GRsGK44bSrZxoiymD0=",
         "owner": "mgit-at",
         "repo": "nix-unify",
-        "rev": "1899c0fd2f32edbfafb0031d961ad9e0b1ce1d53",
+        "rev": "fb54d459e239e0025cae8a293d64207278fdd616",
         "type": "github"
       },
       "original": {
@@ -43,11 +43,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1712163089,
-        "narHash": "sha256-Um+8kTIrC19vD4/lUCN9/cU9kcOsD1O1m+axJqQPyMM=",
+        "lastModified": 1712608508,
+        "narHash": "sha256-vMZ5603yU0wxgyQeHJryOI+O61yrX2AHwY6LOFyV1gM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "fd281bd6b7d3e32ddfa399853946f782553163b5",
+        "rev": "4cba8b53da471aea2ab2b0c1f30a81e7c451f4b6",
         "type": "github"
       },
       "original": {
diff --git a/modules/base-tools.nix b/modules/base-tools.nix
index c502ecb..00a4352 100644
--- a/modules/base-tools.nix
+++ b/modules/base-tools.nix
@@ -32,10 +32,11 @@
     ripgrep
     fd
     # added in nixos
-    sysz
-    iftop
+    sysz # fzf but for systemctl
+    iftop # bandwidth
     cert-viewer
-    dua
+    dua # disk usage analyzer
     (writeShellScriptBin "ncdu" "echo 'did you mean: dua?' && echo '$ dua -x i /' && exit 2")
+    pwru # kernel packet processing debugging (tcpdump but for firewall)
   ];
 }