diff --git a/modules/system/default.nix b/modules/system/default.nix
index 10715484..8e9d254b 100644
--- a/modules/system/default.nix
+++ b/modules/system/default.nix
@@ -3,7 +3,13 @@ inputs:
   imports = inputs.localLib.findModules ./.;
   config =
   {
-    services = { dbus.implementation = "broker"; fstrim.enable = true; acpid.enable = true; };
+    services =
+    {
+      dbus.implementation = "broker";
+      fstrim.enable = true;
+      acpid.enable = true;
+      kubo = { enable = true; autoMount = true; };
+    };
     time.timeZone = "Asia/Shanghai";
     boot =
     {
diff --git a/modules/system/nix.nix b/modules/system/nix.nix
index 1f76fe25..39b44850 100644
--- a/modules/system/nix.nix
+++ b/modules/system/nix.nix
@@ -33,7 +33,7 @@ inputs:
       nix.settings =
       {
         system-features = [ "big-parallel" "nixos-test" "benchmark" ];
-        experimental-features = [ "nix-command" "flakes" ];
+        experimental-features = [ "nix-command" "flakes" "ca-derivations" ];
         keep-failed = true;
         max-substitution-jobs = 4;
         trusted-public-keys = [ "chn:Cc+nowW1LIpe1kyXOZmNaznFDiH1glXmpb4A+WD/DTE=" ];
diff --git a/modules/user/chn/default.nix b/modules/user/chn/default.nix
index 0a84c5a3..92fa4953 100644
--- a/modules/user/chn/default.nix
+++ b/modules/user/chn/default.nix
@@ -6,7 +6,7 @@ inputs:
     users.users.chn =
     {
       extraGroups = inputs.lib.intersectLists
-        [ "adbusers" "networkmanager" "wheel" "wireshark" "libvirtd" ]
+        [ "adbusers" "networkmanager" "wheel" "wireshark" "libvirtd" "ipfs" ]
         (builtins.attrNames inputs.config.users.groups);
       autoSubUidGidRange = true;
       hashedPassword = "$y$j9T$xJwVBoGENJEDSesJ0LfkU1$VEExaw7UZtFyB4VY1yirJvl7qS7oiF49KbEBrV0.hhC";