diff --git a/1systems/x/config.nix b/1systems/x/config.nix
index 03ba126..faa29f3 100644
--- a/1systems/x/config.nix
+++ b/1systems/x/config.nix
@@ -20,6 +20,7 @@ with import <stockholm/lib>;
 
       # Testing
       # <stockholm/makefu/2configs/deployment/gitlab.nix>
+      # <stockholm/makefu/2configs/deployment/wiki-irc-bot>
 
       # <stockholm/makefu/2configs/torrent.nix>
       # <stockholm/makefu/2configs/lanparty/lancache.nix>
@@ -33,7 +34,6 @@ with import <stockholm/lib>;
       <stockholm/makefu/2configs/tinc/retiolum.nix>
 
       # applications
-      <stockholm/makefu/2configs/tpm.nix>
       <stockholm/makefu/2configs/exim-retiolum.nix>
       <stockholm/makefu/2configs/mail-client.nix>
       <stockholm/makefu/2configs/printer.nix>
diff --git a/2configs/hw/tp-x2x0.nix b/2configs/hw/tp-x2x0.nix
index 02bd8bb..81c4bf4 100644
--- a/2configs/hw/tp-x2x0.nix
+++ b/2configs/hw/tp-x2x0.nix
@@ -2,6 +2,9 @@
 
 with import <stockholm/lib>;
 {
+  imports = [
+    ./tpm.nix
+  ];
   networking.wireless.enable = lib.mkDefault true;
 
   hardware.enableAllFirmware = true;
diff --git a/2configs/hw/tpm.nix b/2configs/hw/tpm.nix
new file mode 100644
index 0000000..29e19e9
--- /dev/null
+++ b/2configs/hw/tpm.nix
@@ -0,0 +1,6 @@
+{ pkgs, ... }:
+{
+  services.tcsd.enable = true;
+  # see https://wiki.archlinux.org/index.php/Trusted_Platform_Module
+  environment.systemPackages = with pkgs; [ opencryptoki tpm-tools ];
+}