diff --git a/CACerts/ryanca.crt b/CACerts/ryanca.crt
new file mode 100644
index 0000000..7fa09c1
--- /dev/null
+++ b/CACerts/ryanca.crt
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/CACerts/ryanca_intermediate.crt b/CACerts/ryanca_intermediate.crt
new file mode 100644
index 0000000..48d70f4
--- /dev/null
+++ b/CACerts/ryanca_intermediate.crt
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/home-config/home-configuration.scm b/home-config/home-configuration.scm
index 9fb45fb..746b043 100644
--- a/home-config/home-configuration.scm
+++ b/home-config/home-configuration.scm
@@ -67,6 +67,9 @@
                                                     "icedove-minimal"
                                                     "gimp"
                                                     "python"
+                                                    "python:tk"
+                                                    ;"tk"
+                                                    ;"tcl"
                                                     "python-lsp-server"
                                                     "sqlite"
                                                     "git"))
diff --git a/system.scm b/system.scm
index 2c2a444..649146b 100644
--- a/system.scm
+++ b/system.scm
@@ -17,7 +17,7 @@
 (use-modules (gnu packages shells))
 (use-modules (srfi srfi-1))
 (use-package-modules security-token)
-(use-service-modules cups desktop networking ssh xorg sound security-token)
+(use-service-modules cups desktop networking ssh xorg sound security-token docker)
 
 ; Re-define the base packages to remove sudo
 (define %my-base-packages
@@ -50,7 +50,7 @@
                   (group "users")
                   ;(shell (file-append zsh "/bin/zsh"))
                   (home-directory "/home/ryan")
-                  (supplementary-groups '("wheel" "netdev" "audio" "video" "lp" "plugdev")))
+                  (supplementary-groups '("wheel" "netdev" "audio" "video" "lp" "plugdev" "docker")))
                 %base-user-accounts))
 
   ;; Packages installed system-wide.  Users can also install packages
@@ -81,6 +81,7 @@
                                                         "xdg-desktop-portal"
                                                         "pipewire"
                                                         "fprintd"
+                                                        "docker"
                                                         "wireplumber"
                                                         "zsh"))
                          %my-base-packages ))
@@ -95,6 +96,7 @@
                  (service openssh-service-type)
                  (service pcscd-service-type)
                  (service fprintd-service-type)
+                 (service docker-service-type)
                  (service bluetooth-service-type)
                  (udev-rules-service 'fido2 libfido2 #:groups '("plugdev"))
                  (set-xorg-configuration