diff --git a/tongfang/nixos/flake.lock b/tongfang/nixos/flake.lock
index a7bc2bd..2803852 100644
--- a/tongfang/nixos/flake.lock
+++ b/tongfang/nixos/flake.lock
@@ -14,11 +14,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1732521221,
-        "narHash": "sha256-2ThgXBUXAE1oFsVATK1ZX9IjPcS4nKFOAjhPNKuiMn0=",
+        "lastModified": 1733940404,
+        "narHash": "sha256-Pj39hSoUA86ZePPF/UXiYHHM7hMIkios8TYG29kQT4g=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "4633a7c72337ea8fd23a4f2ba3972865e3ec685d",
+        "rev": "5d67ea6b4b63378b9c13be21e2ec9d1afc921713",
         "type": "github"
       },
       "original": {
@@ -39,11 +39,11 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1732757169,
-        "narHash": "sha256-CzpXDxU9Oq6STK3QYdme6l8QTRcOIcOQ/U08NrKt8D0=",
+        "lastModified": 1734232136,
+        "narHash": "sha256-rQd9jiPTGVchefiwJhx1xUlCLcnOCWQ7KlQ+Pkio9zU=",
         "owner": "0xc000022070",
         "repo": "zen-browser-flake",
-        "rev": "7ea856ec3fb1dc50dd6fc9c9cb9d46b46691fda7",
+        "rev": "6acd5e9515e0d53347b7883ac02ac7ab4bd03a2c",
         "type": "github"
       },
       "original": {
diff --git a/tongfang/nixos/users.nix b/tongfang/nixos/users.nix
index d84fff5..809111f 100644
--- a/tongfang/nixos/users.nix
+++ b/tongfang/nixos/users.nix
@@ -18,7 +18,6 @@
       python3
       gnumake
       gccgo
-      _1password-gui
       # nodejs_22
       # corepack_22
       azure-cli
@@ -38,6 +37,14 @@
     "electron-27.3.11"
   ];
 
+  programs._1password.enable = true;
+  programs._1password-gui = {
+    enable = true;
+    # Certain features, including CLI integration and system authentication support,
+    # require enabling PolKit integration on some desktop environments (e.g. Plasma).
+    polkitPolicyOwners = [ "bart" ];
+  };
+
   # SSH agent configuration
   programs.ssh.startAgent = true;
   programs.ssh.extraConfig = ''