diff --git a/debian-local-install.yml b/debian-local-install.yml
index e82df23..c15029c 100644
--- a/debian-local-install.yml
+++ b/debian-local-install.yml
@@ -129,6 +129,7 @@
           - wget
           - wireshark
           - xclip
+          - xdotool
           - xfce4-genmon-plugin
           - xfce4-weather-plugin
           - zip
@@ -173,6 +174,34 @@
       ansible.builtin.command: xdg-user-dirs-update
       become_user: jas
 
+    - name: Reconfigure fontconfig-config - hinting_type
+      ansible.builtin.debconf:
+        name: fontconfig-config
+        question: fontconfig/hinting_type
+        value: Autohinter
+        vtype: select
+
+    - name: Reconfigure fontconfig-config - enable_bitmaps
+      ansible.builtin.debconf:
+        name: fontconfig-config
+        question: fontconfig/enable_bitmaps
+        value: false
+        vtype: boolean
+
+    - name: Reconfigure fontconfig-config - hinting_style
+      ansible.builtin.debconf:
+        name: fontconfig-config
+        question: fontconfig/hinting_style
+        value: hintslight
+        vtype: select
+
+    - name: Reconfigure fontconfig-config - subpixel_rendering
+      ansible.builtin.debconf:
+        name: fontconfig-config
+        question: fontconfig/subpixel_rendering
+        value: Always
+        vtype: select
+
     - name: Disable unneeded services
       ansible.builtin.systemd_service:
         name: "{{ item }}"
@@ -182,3 +211,76 @@
         - avahi-daemon.socket
         - cups-browsed.service
         - cups.service
+
+    - name: Configure systemd-networkd (desktop)
+      ansible.builtin.blockinfile:
+        path: /etc/systemd/network/eno1.network
+        owner: root
+        group: root
+        mode: 0644
+        block: |
+          [Match]
+          Name=eno1
+
+          [Network]
+          Address=10.0.0.2/24
+          Gateway=10.0.0.1
+          Broadcast=10.0.0.255
+          DNS=9.9.9.9
+          #DNS=100.100.100.100
+          DNSSEC=true
+      when:
+        - ansible_hostname == "desktop"
+
+    - name: Configure systemd-networkd (laptop)
+      ansible.builtin.blockinfile:
+        path: /etc/systemd/network/wlp0s20f3.network
+        owner: root
+        group: root
+        mode: 0644
+        block: |
+          [Match]
+          Name=wlp0s20f3
+
+          [Link]
+          RequiredForOnline=routable
+
+          [Network]
+          DHCP=yes
+          IgnoreCarrierLoss=3s
+      when:
+        - ansible_hostname == "laptop"
+
+    - name: Enable systemd-networkd on startup
+      ansible.builtin.systemd_service:
+        name: systemd-networkd.service
+        enabled: true
+
+    - name: Disable NetworkManager and networking.service
+      ansible.builtin.systemd_service:
+        name: "{{ item }}"
+        enabled: false
+      with_items:
+        - NetworkManager.service
+        - networking.service
+
+    - name: Disable wpa_supplicant on desktop
+      ansible.builtin.systemd_service:
+        name: wpa_supplicant.service
+        enabled: false
+      when:
+        - ansible_hostname == "desktop"
+
+    - name: Disable ipv6 in GRUB config
+      ansible.builtin.lineinfile:
+        path: /etc/default/grub
+        search_string: "GRUB_CMDLINE_LINUX_DEFAULT"
+        line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet ipv6.disable=1"'
+        owner: root
+        group: root
+        mode: 0644
+
+    - name: Change jas user shell to zsh
+      ansible.builtin.user:
+        name: jas
+        shell: /usr/bin/zsh