diff --git a/install.sh b/install.sh
index e802338..32fdb2b 100755
--- a/install.sh
+++ b/install.sh
@@ -44,10 +44,14 @@ echo "KEYMAP=trq" >> /etc/vconsole.conf
 pacman -S --noconfirm base-devel sudo
 pacman -S --noconfirm networkmanager alsa-utils bluez bluez-utils bridge-utils nvidia-open nvidia-utils pavucontrol pipewire pipewire-alsa pipewire-pulse polkit-gnome usbutils sof-firmware
 pacman -S --noconfirm alacritty firefox eog flameshot keepassxc ly sway swaybg zip unzip ttf-jetbrains-mono i3status
-pacman -S --noconfirm ufw clamav
+pacman -S --noconfirm ufw clamav opensnitch firejail
 
 pacman -S --noconfirm cmake cloc vim emacs cups docker docker-compose efibootmgr gdb ghidra ghostscript git git-lfs man-db man-pages mkcert nasm net-tools openssh qemu-base qemu-full rustup valgrind virt-manager virt-viewer wireplumber wireguard-tools wireshark-qt wmenu wofi xdg-desktop-portal-gtk xdg-desktop-portal-wlr xorg-xwayland pyright clang
 
+systemctl enable clamav-freshclam.service
+systemctl enable clamav-daemon.service
+systemctl enable clamav-clamonacc.service
+systemctl enable opensnitchd
 systemctl enable NetworkManager
 systemctl enable ufw
 systemctl enable clamav-daemon
@@ -62,6 +66,13 @@ ufw enable
 sed -i 's/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block filesystems fsck)/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block sd-encrypt filesystems fsck)/' /etc/mkinitcpio.conf
 mkinitcpio -P
 
+printf "Configuring yay..."
+git clone https://aur.archlinux.org/yay.git /tmp/yay
+cd /tmp/yay && makepkg -si
+
+printf "Installing yay packages"
+yay -S ttf-ms-fonts
+
 printf "Configuring users..."
 
 echo -n "root:$ROOT_PASS" | chpasswd