diff --git a/nix/configurations/vanadium/nixos/connectivity.nix b/nix/configurations/vanadium/nixos/connectivity.nix
index c484540f..e4906268 100644
--- a/nix/configurations/vanadium/nixos/connectivity.nix
+++ b/nix/configurations/vanadium/nixos/connectivity.nix
@@ -67,6 +67,9 @@
       0.0.0.0 instagram.com
       0.0.0.0 www.instagram.com
 
+      0.0.0.0 youtube.com
+      0.0.0.0 www.youtube.com
+
       # The "people who you viewed can see you" thing is weird af
       0.0.0.0 linkedin.com
       0.0.0.0 www.linkedin.com
diff --git a/nix/configurations/vanadium/nixos/misc.nix b/nix/configurations/vanadium/nixos/misc.nix
index 4d512a82..0f757beb 100644
--- a/nix/configurations/vanadium/nixos/misc.nix
+++ b/nix/configurations/vanadium/nixos/misc.nix
@@ -19,4 +19,12 @@
   # https://discourse.nixos.org/t/how-do-i-get-my-aarch64-linux-machine-to-build-x86-64-linux-extra-platforms-doesnt-seem-to-work/38106/2?u=leana8959
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
   nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;
+
+  security.doas.extraRules = [
+    {
+      users = [ ":wheel" ];
+      cmd = "framework_tool";
+      noPass = true;
+    }
+  ];
 }
diff --git a/nix/packages/by-name/typst-bot/package.nix b/nix/packages/by-name/typst-bot/package.nix
index ffca5ea8..836d4dcc 100644
--- a/nix/packages/by-name/typst-bot/package.nix
+++ b/nix/packages/by-name/typst-bot/package.nix
@@ -10,8 +10,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   src = fetchFromGitHub {
     owner = "mattfbacon";
     repo = "typst-bot";
-    rev = "c9d4b164ff5dc2567bb0de3876460e51da62ba94";
-    hash = "sha256-tB+zrE5p7zOloOgoP2fmFsajd4IBf94ET1v/0W3aNcM=";
+    rev = "a4f2e0ea6046a1f9d551c1543d42696107d18a78";
+    hash = "sha256-bLB9W/2nHPL/T2TxTJLBBC5JSQczklZ34n6AJAR/3gI=";
   };
 
   preBuild = ''
@@ -29,7 +29,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   cargoLock = {
     lockFile = "${finalAttrs.src}/Cargo.lock";
     outputHashes = {
-      "poise-0.6.1" = "sha256-iXyp9sR/vzPsexGPdRjfuKyFcGqvDdqiBAXnuw/HFo8=";
+      "poise-0.6.1" = "sha256-/UrFlHWDsCDaqWd+XchmH0PzauxIWuYaJp9ZZh3W+50=";
+      "typst-dev-assets-0.14.2" = "sha256-mRkQXg1YG0qqcTVtgpQpvKw54RM9FBo1EgM2WJFbQAI=";
     };
   };
 })