diff --git a/roles/subroles/office.nix b/roles/subroles/office.nix
index 2bd7bf6..119dc87 100644
--- a/roles/subroles/office.nix
+++ b/roles/subroles/office.nix
@@ -1,6 +1,11 @@
 { config, pkgs, ... }:
 {
+programs.dconf.enable = true;
+
   environment.systemPackages = with pkgs; [
+    barrier
+    gnome3.dconf
     libreoffice
+    paprefs
   ];
 }
diff --git a/roles/workstation.nix b/roles/workstation.nix
index 2012d01..79e1d23 100644
--- a/roles/workstation.nix
+++ b/roles/workstation.nix
@@ -55,8 +55,16 @@
     termite
     vim
     which
+
+    xfce.thunar
+    xfce.thunar-volman
+    # mounting external devices in thunar
+    gvfs
   ];
 
+    # mounting external devices as user
+  services.udisks2.enable = true;
+
   # required for nextcloud
   services.gnome3.gnome-keyring.enable = true;
 
@@ -74,7 +82,7 @@
   programs.gnupg.agent = {
     enable = true;
     enableSSHSupport = true;
-  #   pinentryFlavor = "gnome3";
+    pinentryFlavor = "curses";
   };
 
   # List services that you want to enable:
@@ -83,7 +91,12 @@
   # services.openssh.enable = true;
 
   # Open ports in the firewall.
-  # networking.firewall.allowedTCPPorts = [ ... ];
+  networking.firewall.allowedTCPPorts = [
+    # barrier
+    24800 42829
+    # pulseaudio over network
+    # 16001 4713
+  ];
   # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;
@@ -93,7 +106,13 @@
 
   # Enable sound.
   sound.enable = true;
-  hardware.pulseaudio.enable = true;
+  hardware.pulseaudio = {
+    enable = true;
+    # tcp = {
+    #   enable = true;
+    #   anonymousClients.allowAll = true;
+    # };
+  };
 
   # set keyboard layout
   environment.sessionVariables = {