diff --git a/modules/security.nix b/modules/security.nix
index 8cd180b..c951fb9 100755
--- a/modules/security.nix
+++ b/modules/security.nix
@@ -59,6 +59,8 @@ in {
 
     # while this is on by default, i am going to explicitly specify this
     networking.firewall.enable = true;
+
+    services.fwupd.enable = true;
   } // (mkIf cfg.useDoas {
     security.sudo.enable = false;
     security.doas.enable = true;