diff --git a/home/packages.nix b/home/packages.nix
index 6cf9ac8..8117725 100644
--- a/home/packages.nix
+++ b/home/packages.nix
@@ -19,6 +19,7 @@
     mpv
     _64gram
     glab
+    pulumi-bin
     vlc
     brave
     firefox
diff --git a/hosts/la2410/configuration.nix b/hosts/la2410/configuration.nix
index 19a9a69..1de1d17 100644
--- a/hosts/la2410/configuration.nix
+++ b/hosts/la2410/configuration.nix
@@ -63,7 +63,7 @@ services.blueman.enable = true;
 10.0.1.22 piped.shihaam.me pipedapi.shihaam.me pipedproxy.shihaam.me typetype.shihaam.me
 10.0.1.3 mapmaker.sarlink.net
 10.0.1.16 git.shihaam.dev
-  '';
+  '' + builtins.readFile ./private-hosts;
 
 nixpkgs.config.allowUnfree = true;
 nix.settings.experimental-features = [ "nix-command" "flakes" ];
diff --git a/hosts/la2410/private-hosts b/hosts/la2410/private-hosts
new file mode 100644
index 0000000..2947f6d
--- /dev/null
+++ b/hosts/la2410/private-hosts
@@ -0,0 +1 @@
+# local-only /etc/hosts entries (skip-worktree, edits stay uncommitted)