diff --git a/flake.lock b/flake.lock
index c0b86dc..7679f22 100644
--- a/flake.lock
+++ b/flake.lock
@@ -192,11 +192,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1719994518,
-        "narHash": "sha256-pQMhCCHyQGRzdfAkdJ4cIWiw+JNuWsTX7f0ZYSyz0VY=",
+        "lastModified": 1709336216,
+        "narHash": "sha256-Dt/wOWeW6Sqm11Yh+2+t0dfEWxoMxGBvv3JpIocFl9E=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "9227223f6d922fee3c7b190b2cc238a99527bbb7",
+        "rev": "f7b3c975cf067e56e7cda6cb098ebe3fb4d74ca2",
         "type": "github"
       },
       "original": {
@@ -304,11 +304,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1721135958,
-        "narHash": "sha256-H548rpPMsn25LDKn1PCFmPxmWlClJJGnvdzImHkqjuY=",
+        "lastModified": 1720734513,
+        "narHash": "sha256-neWQ8eNtLTd+YMesb7WjKl1SVCbDyCm46LUgP/g/hdo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "afd2021bedff2de92dfce0e257a3d03ae65c603d",
+        "rev": "90ae324e2c56af10f20549ab72014804a3064c7f",
         "type": "github"
       },
       "original": {
@@ -654,11 +654,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1721192756,
-        "narHash": "sha256-52+luhZYD8IVmCK1JyuK3ZQUAR5m3MuDtUFVreaLHcc=",
+        "lastModified": 1720969601,
+        "narHash": "sha256-oESu3KD4Y1AWMCd+J4EGPcJ2tZidRPG4OP/HuRxAAfc=",
         "owner": "abenz1267",
         "repo": "walker",
-        "rev": "67c8238b32350f64e947738337d273cd68ce64d5",
+        "rev": "2cd3e8c265a02fbaf13a77f8fd428d22bc273b9b",
         "type": "github"
       },
       "original": {
diff --git a/system/roles/workstation/runners.nix b/system/roles/workstation/runners.nix
index f1fec0e..6b6fae4 100644
--- a/system/roles/workstation/runners.nix
+++ b/system/roles/workstation/runners.nix
@@ -47,11 +47,6 @@ in {
         xorg.libX11
       ];
     };
-
-    # Some pre-compiled binaries hard-code ssl cert file to /etc/ssl/cert.pem
-    # instead of what NixOS uses (/etc/ssl/certs/ca-certificates.crt). Make a
-    # symlink there for compatibility.
-    # - For example the rye installed python binaries look there
-    environment.etc."ssl/cert.pem".source = "/etc/ssl/certs/ca-certificates.crt";
   };
 }
+
diff --git a/system/shared/default.nix b/system/shared/default.nix
index 849efc8..0c0019e 100644
--- a/system/shared/default.nix
+++ b/system/shared/default.nix
@@ -12,5 +12,6 @@ _: {
     ./system.nix
     ./network.nix
     ./localisation.nix
+    ./packages.nix
   ];
 }
diff --git a/system/shared/environment/packages.nix b/system/shared/environment/packages.nix
index c4cf3e1..77c4c76 100644
--- a/system/shared/environment/packages.nix
+++ b/system/shared/environment/packages.nix
@@ -1,7 +1,5 @@
-{pkgs, ...}: {
+{ pkgs, ... }: {
   environment.systemPackages = with pkgs; [
-    killall
-    openssl
     curl
     wget
     pciutils
diff --git a/system/shared/packages.nix b/system/shared/packages.nix
new file mode 100644
index 0000000..d5d1ad5
--- /dev/null
+++ b/system/shared/packages.nix
@@ -0,0 +1,8 @@
+{
+  pkgs,
+  ...
+}: {
+  environment.systemPackages = with pkgs; [
+    killall
+  ];
+}