diff --git a/nixos-rpi/configuration.nix b/nixos-rpi/configuration.nix
index 0bd1f00..7069675 100644
--- a/nixos-rpi/configuration.nix
+++ b/nixos-rpi/configuration.nix
@@ -88,7 +88,7 @@
       # ExecStartPre = /bin/sh - xc '! /usr/bin/systemctl is-enabled --quiet nm-cloud-setup.service 2>/dev/null';
       # ExecStartPre = -/sbin/modprobe br_netfilter;
       # ExecStartPre = -/sbin/modprobe overlay;
-      ExecStart = "${pkgs.k3s}/bin/k3s server --write-kubeconfig-mode";
+      ExecStart = "${pkgs.k3s}/bin/k3s server --write-kubeconfig-mode=644";
     };
     after = [ "network-online.target" ];
     wants = [ "network-online.target" ];
@@ -116,7 +116,6 @@
     pulumiPackages.pulumi-language-nodejs
     slirp4netns # required by k3s
     vim
-    wget
   ];
 
   # Some programs need SUID wrappers, can be configured further or are