diff --git a/env/.local/scripts/kanatactl b/env/.local/scripts/kanatactl
index 5e58e4c..34670f2 100755
--- a/env/.local/scripts/kanatactl
+++ b/env/.local/scripts/kanatactl
@@ -28,10 +28,10 @@ FLAGS:
   -h | --help:    Show this help page.
 
 COMMANDS:
-  bootstrap:      Bootstrap a new machine, performs installation, enables, and starts kanata systemd service.
   config:         Commands for the kanata keyboard configuration file(s).
   service:        Commands for the kanata systemd service.
   pkg:            Commands for the kanata package.
+  bootstrap:      Bootstrap a new machine, performs installation, enables, and starts kanata systemd service.
   logs:           View the log file.
 
 Run "$THIS <command> --help" for more information about a command.
@@ -52,9 +52,6 @@ bootstrap() {
   $THIS_FILE service install
   $THIS_FILE service enable
   $THIS_FILE service start
-  # install_or_update
-  # install_service
-  # enable_and_start_service
 }
 
 ################################################################################
diff --git a/runs/system b/runs/system
index 2d22cf5..f3dadc3 100755
--- a/runs/system
+++ b/runs/system
@@ -7,4 +7,6 @@ yay ${1:-"-S --noconfirm"} catppuccin-gtk-theme-mocha \
   pam-u2f \
   pcsc-tools \
   swaync \
-  yubikey-manger
+  yubikey-manger \
+  nfs-utils \
+  firewalld
diff --git a/system b/system
index 6df4831..4417240 100755
--- a/system
+++ b/system
@@ -38,3 +38,4 @@ log_and_run "sudo setcap "cap_dac_override+p" $(which espanso)"
 log_and_run "systemctl --user enable --now logout-task.service"
 log_and_run "systemctl --user enable --now battery-monitor.timer"
 log_and_run "sudo systemctl enable --now pcscd.service"
+log_and_run "sudo systemctl enable --now firewalld.service"