diff --git a/hosts/workstation/default.nix b/hosts/workstation/default.nix
index cc2be57..ffe89b8 100644
--- a/hosts/workstation/default.nix
+++ b/hosts/workstation/default.nix
@@ -97,12 +97,6 @@ in {
   };
 
   services = {
-    udev = {
-      extraRules = ''
-        ACTION=="add|change", KERNEL=="sd[a-z]*[0-9]*|mmcblk[0-9]*p[0-9]*|nvme[0-9]*n[0-9]*p[0-9]*", ENV{ID_FS_TYPE}=="ext4", ATTR{../queue/scheduler}="none"
-      '';
-    };
-    pcscd = { enable = true; };
     avahi = {
       enable = true;
       nssmdns4 = true;
@@ -112,12 +106,27 @@ in {
         userServices = true;
       };
     };
-    printing = { enable = true; };
-    udisks2 = { enable = true; };
-    nscd = { enableNsncd = true; };
-    fwupd = { enable = true; };
+    bpftune = { enable = true; };
     flatpak = { enable = true; };
     fstrim = { enable = true; };
+    fwupd = { enable = true; };
+    locate = {
+      enable = true;
+      package = pkgs.mlocate;
+    };
+    logind = {
+      lidSwitchExternalPower = "ignore";
+      lidSwitchDocked = "ignore";
+    };
+    nscd = { enableNsncd = true; };
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+      };
+    };
+    pcscd = { enable = true; };
     pipewire = {
       enable = true;
       alsa = {
@@ -126,23 +135,13 @@ in {
       };
       pulse = { enable = true; };
     };
+    printing = { enable = true; };
     tailscale = { enable = true; };
-    logind = {
-      lidSwitchExternalPower = "ignore";
-      lidSwitchDocked = "ignore";
-    };
-    locate = {
-      enable = true;
-      package = pkgs.mlocate;
-    };
-    openssh = {
-      enable = true;
-      settings = {
-        PasswordAuthentication = false;
-        KbdInteractiveAuthentication = false;
-        #PermitRootLogin = "yes";
-      };
+    udev = {
+      extraRules = ''
+        ACTION=="add|change", KERNEL=="sd[a-z]*[0-9]*|mmcblk[0-9]*p[0-9]*|nvme[0-9]*n[0-9]*p[0-9]*", ENV{ID_FS_TYPE}=="ext4", ATTR{../queue/scheduler}="none" '';
     };
+    udisks2 = { enable = true; };
   };
 
   hardware = {