diff --git a/identity-server/kubernetes.yaml b/identity-server/kubernetes.yaml
new file mode 100644
index 0000000..5f0f6cc
--- /dev/null
+++ b/identity-server/kubernetes.yaml
@@ -0,0 +1,36 @@
+# deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hello-world
+  labels:
+    app: hello-world
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: hello-world
+  template:
+    metadata:
+      labels:
+        app: hello-world
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:stable
+        ports:
+        - containerPort: 80
+---
+# service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: hello-world
+spec:
+  type: NodePort
+  selector:
+    app: hello-world
+  ports:
+  - port: 80
+    targetPort: 80
+    nodePort: 30080
diff --git a/nix/nixos/home.nix b/nix/nixos/home.nix
index 22471aa..a23bf71 100644
--- a/nix/nixos/home.nix
+++ b/nix/nixos/home.nix
@@ -30,6 +30,31 @@
   programs.home-manager.enable = true;
   programs.git.enable = true;
 
+  # shell stuff
+  programs.zsh = {
+    enable = true;
+    autosuggestion.enable = true;
+    enableCompletion = true;
+    oh-my-zsh.enable = true;
+    initExtra = ''
+      set -o vi
+    '';
+    envExtra = ''
+    '';
+  };
+
+  xdg.enable = true;
+  xdg.configFile = {
+    "nvim" = {
+      source = pkgs.fetchFromGitHub {
+        owner = "thebutlah";
+        repo = "init.lua";
+        rev = "5dd312fe5f06e6301baa55f7cf0c70296b03c25f";
+        hash = "sha256-GR03IkfAHUlVeM1QOlPKDRPw0HboJZ+AcJsQ5ORcAE8=";
+      };
+    };
+  };
+
   # Nicely reload system units when changing configs
   systemd.user.startServices = "sd-switch";
 
diff --git a/nix/nixos/servers-us-east-1/configuration.nix b/nix/nixos/servers-us-east-1/configuration.nix
index 224c7b4..f21660a 100644
--- a/nix/nixos/servers-us-east-1/configuration.nix
+++ b/nix/nixos/servers-us-east-1/configuration.nix
@@ -70,9 +70,11 @@
 
   users.groups = {
     plugdev = { };
+    ${username} = { };
   };
   users.users = {
     ${username} = {
+      group = username;
       isNormalUser = true;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBLmHbuCMFpOKYvzMOpTOF+iMX9rrY6Y0naarcbWUV8G ryan@ryan-laptop"
@@ -100,6 +102,9 @@
     };
   };
 
+  services.k3s = {
+    enable = true;
+  };
 
   environment.systemPackages = with pkgs; [
     neovim