diff --git a/config/profiles/gui/profile.nix b/config/profiles/gui/profile.nix
new file mode 100644
index 00000000..c5a16595
--- /dev/null
+++ b/config/profiles/gui/profile.nix
@@ -0,0 +1,5 @@
+{ config, meta, ... }: {
+  imports = with meta; [
+    services.dnscrypt-proxy
+  ];
+}
diff --git a/config/profiles/hardware/wifi.nix b/config/profiles/hardware/wifi.nix
index eb861a70..c4cbc7e1 100644
--- a/config/profiles/hardware/wifi.nix
+++ b/config/profiles/hardware/wifi.nix
@@ -23,8 +23,8 @@
   deploy.profile.hardware.wifi = true;
   networking.wireless = {
     enable = true;
-    networks = mkIf (builtins.getEnv "TF_IN_AUTOMATION" != "" || tf.state.resources ? ${tf.resources.wireless-credentials.out.reference}) {
-      ${builtins.unsafeDiscardStringContext tf.resources.wireless-credentials.getAttr "outputs.ssid"} = {
+    networks = mkIf (builtins.getEnv "TF_IN_AUTOMATION" != "" || tf.state.enable) {
+      ${builtins.unsafeDiscardStringContext (tf.resources.wireless-credentials.getAttr "outputs.ssid")} = {
         pskRaw = tf.resources.wireless-credentials.getAttr "outputs.psk";
       };
     };