diff --git a/hosts/common/hardware.nix b/hosts/common/hardware.nix
index e6e43436..66a70b1f 100644
--- a/hosts/common/hardware.nix
+++ b/hosts/common/hardware.nix
@@ -23,7 +23,6 @@
 
   # non-free firmware
   hardware.enableRedistributableFirmware = true;
-  services.fwupd.enable = true;
 
   # powertop will default to putting USB devices -- including HID -- to sleep after TWO SECONDS
   powerManagement.powertop.enable = false;
diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index ef2f4790..23fd19cd 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -63,6 +63,7 @@ in
       "fatresize"
       "fd"
       "file"
+      "fwupd"
       "gawk"
       "git"
       "gptfdisk"
diff --git a/hosts/common/programs/default.nix b/hosts/common/programs/default.nix
index 013a5077..f4afe27a 100644
--- a/hosts/common/programs/default.nix
+++ b/hosts/common/programs/default.nix
@@ -12,6 +12,7 @@
     ./firefox.nix
     ./fontconfig.nix
     ./fractal.nix
+    ./fwupd.nix
     ./git.nix
     ./gnome-feeds.nix
     ./gnome-keyring.nix
diff --git a/hosts/common/programs/fwupd.nix b/hosts/common/programs/fwupd.nix
new file mode 100644
index 00000000..6bfb7669
--- /dev/null
+++ b/hosts/common/programs/fwupd.nix
@@ -0,0 +1,7 @@
+{ config, lib, ... }:
+{
+  services.fwupd = lib.mkIf config.sane.programs.fwupd.enabled {
+    # enables the dbus service, which i think the frontend speaks to.
+    enable = true;
+  };
+}