diff --git a/modules/apps.nix b/modules/apps.nix
index 24fcb0b..adee437 100644
--- a/modules/apps.nix
+++ b/modules/apps.nix
@@ -57,6 +57,7 @@ in
     rtl433Lean
     lmms
     openrgb
+    krita
 
     # Games
     prismlauncher
@@ -72,6 +73,7 @@ in
     openjdk25
     go
     claude-code
+    codex
   ];
 
   environment.systemPackages = with pkgs; [
@@ -98,10 +100,17 @@ in
     kdePackages.konsole
     kdePackages.dolphin
     kdePackages.plasma-systemmonitor
+    kdePackages.kdialog
     qt5.qtwayland
     qt6.qtwayland
     qemu
     file
+    wineWow64Packages.stable
+    ghidra
+    jdk
+    python3
+    radare2
+    binwalk
   ];
 
   # Lets non-Nix binaries (e.g. the Tor Browser bundle) find an FHS linker.
diff --git a/modules/audio.nix b/modules/audio.nix
index 9b8434f..72b30bb 100644
--- a/modules/audio.nix
+++ b/modules/audio.nix
@@ -8,5 +8,18 @@
     alsa.enable = true;
     alsa.support32Bit = true;
     pulse.enable = true;
+
+    # Bluetooth headphones are playback-only here (mic comes from the USB
+    # codec). Disable HSP/HFP so they never drop to 8/16 kHz mono call mode.
+    wireplumber.extraConfig."11-bluetooth-policy" = {
+      "wireplumber.settings" = {
+        "bluetooth.autoswitch-to-headset-profile" = false;
+      };
+      "monitor.bluez.properties" = {
+        # PC only sends audio. Allowing a2dp_sink lets the Monitor II (which
+        # also advertises an A2DP source) connect backwards as "audio gateway".
+        "bluez5.roles" = [ "a2dp_source" ];
+      };
+    };
   };
 }