diff --git a/modules/hosts/nixos/bigboy/default.nix b/modules/hosts/nixos/bigboy/default.nix
index 182a0bc..b35ed05 100644
--- a/modules/hosts/nixos/bigboy/default.nix
+++ b/modules/hosts/nixos/bigboy/default.nix
@@ -97,6 +97,17 @@ in
     printing.enable = true; # Enable CUPS
     pulseaudio.enable = false;
     smartd.enable = true;
+    tailscale = {
+      enable = true;
+      authKeyFile = config.sops.secrets.tailscale_key.path;
+      extraUpFlags = [
+        "--operator"
+        "${username}"
+        "--ssh"
+      ];
+      useRoutingFeatures = "client";
+    };
+    thermald.enable = true;
     xserver = {
       enable = true;
       xkb = {
@@ -114,6 +125,9 @@ in
         owner = "${username}";
         path = "${config.users.users.${username}.home}/.private-env";
       };
+      tailscale_key = {
+        restartUnits = [ "tailscaled-autoconnect.service" ];
+      };
     };
   };
 
@@ -132,4 +146,9 @@ in
       #  thunderbird
     ];
   };
+
+  xdg.portal = {
+    enable = true;
+    extraPortals = [ pkgs.kdePackages.xdg-desktop-portal-kde ];
+  };
 }
diff --git a/modules/hosts/nixos/bigboy/secrets.yaml b/modules/hosts/nixos/bigboy/secrets.yaml
index 3d962f3..ee814a8 100644
--- a/modules/hosts/nixos/bigboy/secrets.yaml
+++ b/modules/hosts/nixos/bigboy/secrets.yaml
@@ -1,5 +1,6 @@
 local_git_config: ENC[AES256_GCM,data:RuHN3enQQLyZu8qHAjlbp/JnDKurqiAiBdrXLPzTFadhmA5m2UyXJ54=,iv:NCWfej/EEB8ylGii+YvdKFagC1rF5ExHIi0M2iDahck=,tag:LVH/Sb7WW/O7Lyg7KSn9mg==,type:str]
 local_private_env: ENC[AES256_GCM,data:SycnmTGzcydGr01QMholH0k1LxRWE4VWxU9oiy94ZDug9q5/qWE0kQ82VSHIs5GK/w9VTDYaJCPZ9MRdCQ==,iv:/yxqQNqDFlQtrU3KBie8CFwGq275KQn91x/AkJVPAVs=,tag:tevrJA4mKBhz07n2N1o/UQ==,type:str]
+tailscale_key: ENC[AES256_GCM,data:KypGD4b50fPgF+a0i7yQVR9BpYSgEilnOCHq4uN4bwM0gwOu29BQI1X1Sj5rKYs+keq7+IdRUNOlh5wFY5g=,iv:/nLonR8k2iBr3QLONRQoF0v6cYzfaDGiSsWvKnu5tSM=,tag:Rj1TbCL+2hGtIKrwi3/0DA==,type:str]
 sops:
     age:
         - recipient: age1hraf69phgqg9y48m2r2sn6tr2sw7tf2h5j62ysl8nrv3qs2ft9kst0ysxm
@@ -11,7 +12,7 @@ sops:
             S2tTaXBUWGJNb3VUbzNWNVlPZEpKQUkKDEVag5HE08uzNdEwfoTPJQdFpxgCDeFV
             v8CBBzXtLzy5xdhiNlTovjFstomrew5TvcjsAeCBimgCiaxXJ77Xzg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-30T21:53:18Z"
-    mac: ENC[AES256_GCM,data:/5gIO/gP+bSKOIaff2ADq3ajjG54dTcQNDLikkzCGoTXWWBZv74YSc/qVf3rb1lh9txxX+oyqp67dIbswEnlP1mmkiJcNgHZjU3gtr5VEluqPH49sVjXDhR66VqEdxC7nSMojWYddlABxcbRW5lpRTCyo5ja9L0Rw0NwpDuXS/Y=,iv:s9ebT/i8A7jtjYSn7NcH8U/cQ55raUa8s/NOZWo45EM=,tag:QJIlcTPc3lFgYTA64J6RMQ==,type:str]
+    lastmodified: "2026-05-29T18:44:10Z"
+    mac: ENC[AES256_GCM,data:V5G4Hcl0cDND18s4W0Irmjf0l60kUUV0qXy6GGlUkq/19noYMcbQ189ccC8PCe4sdQyxleVQeJY+NUH8BfeeUDuodSLTKO9z6YDjrBy1A/BqB1j/2+VZOOAhmn3aOUq7Su3XMFph1YmDcfg/Zvs48XYlLmaCmUsttBvtxjgbhiY=,iv:PyU8Ul3jm54VfHYlio8AxMAycx8q0FFY2gIjCCqBInc=,tag:4KHsfORYujgCkKBJ61dVLw==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.1