diff --git a/machines/albert/configuration.nix b/machines/albert/configuration.nix
index 50c0174..3804d17 100644
--- a/machines/albert/configuration.nix
+++ b/machines/albert/configuration.nix
@@ -22,6 +22,7 @@ in
       inputs.self.nixosModules.malobeo.metrics
       inputs.self.nixosModules.malobeo.users
       inputs.self.nixosModules.malobeo.backup
+      ./hydra.nix
     ];
 
   virtualisation.vmVariantWithDisko = {
@@ -76,7 +77,7 @@ in
 
   networking = {
     firewall = {
-      allowedTCPPorts = [ 80 443 ];
+      allowedTCPPorts = [ 80 443 3000 ];
     };
   };
 
diff --git a/machines/albert/hydra.nix b/machines/albert/hydra.nix
index 81c3958..d36fea5 100644
--- a/machines/albert/hydra.nix
+++ b/machines/albert/hydra.nix
@@ -80,8 +80,8 @@
       hostName = "localhost";
       systems = [ "x86_64-linux" "i686-linux" "aarch64-linux" ];
       protocol = null;
-      maxJobs = 2;
-      supportedFeatures = [ ];
+      maxJobs = 6;
+      supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
     }
   ];
 
diff --git a/machines/albert/secrets.yaml b/machines/albert/secrets.yaml
index 0ae2e35..3eb4a26 100644
--- a/machines/albert/secrets.yaml
+++ b/machines/albert/secrets.yaml
@@ -1,5 +1,6 @@
 wg_private: ENC[AES256_GCM,data:rSENHGEat9wre1bFcM3LYnlGjf9gmcE9FmeCySzbGZ4SCCUl5QLQN/quXw0=,iv:Bdwlk5UHSiyA9gSW91LUPJyBG50FG/hpwyClzTOUoUI=,tag:/Jw549R5Qmg4WblL7rUE8w==,type:str]
 gitea_token: ENC[AES256_GCM,data:1LevtPr5awIu2rcCGbLIsQA5QO0AhFk5Rep7RG28QdlFHDADCaEoS18pEEZ9NMYMZaGWIBA8Zq/NsCYxQGzuWh3TESZW7CO5kzCaSVG1aqjGpjfbeyG+xQEDtab2Owh+TVN/wVGUUDR1NBlWqE4Shw7mO228CWbxQRSQo3lsLhmf69fLEV1DDnH0Xt7Ml8tr7yLIeWHlG0BeOMKSkY17APahxqBx547Zw+kgaUW3WgTyxeWZaDjk/prK6bYV2euK4Il/4vTZE/x0mThmTThjszcAvdaon+V8y1Ax34gTyAgjvpFC2kE=,iv:1A8YNv/A0MEkGKV5Z9WPI4LwQFu2Z9BWuN2yfFHCPLI=,tag:hEfskDEAQiriXNjcYzziSg==,type:str]
+cache_priv: ENC[AES256_GCM,data:NbfyBv68UCWuSjbUu5lFUXPgG+vYrxbAQeD77YlklTRm6MVS4lAEjUzjnjewcX6Khca1N7r7vGieFyaBlQm0264KGTP5tc7BnEIKJDOD/UHQBdMpZgUzd2cKQWK7Kx0=,iv:6VWsZd/VDjQ/BhfwHZBcL3Zp0W/9sO/ZC9sF1Jnqguo=,tag:/gSe6TyaZDKoRFaRKiYyzw==,type:str]
 sops:
     age:
         - enc: |
@@ -20,8 +21,8 @@ sops:
             N6DSIVisJf7qNuNw6M0J5nny6xfWeIEZJettF0xSHM1gSfr7oUbHOQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1mfarz0n7qfa7vg8zz355qf8eregm6myl38lld0h767nuvhgjqd4qruxuhn
-    lastmodified: "2026-08-21T12:04:34Z"
-    mac: ENC[AES256_GCM,data:eX60rcdigAEU2jurBXjt1/5RWM9h8b2fVe4BNNsgc+/dWK/DTroyv5l6QUYgEmai+7HDdib20otKWwwtHmGaYLKL2NO23tKVS3vao95mVN2mmKVNhed/BUn54DF04Zdgni5kyUYQOHoMHkml9dIvZ2DV3+BXc6ZGul7fC9/didg=,iv:IjsF0YuLFaybudM0+dYDQ5utVGtwGzIQAJdx6BIjsVA=,tag:Y5WhVY5jmGt0bF9arcQ3ZQ==,type:str]
+    lastmodified: "2026-08-26T17:31:59Z"
+    mac: ENC[AES256_GCM,data:G0Xpe7zJZh4xAwFRUXSbR11ENqRd4UoU7gFK3nDM7Icm9DMyqyi3uBfg1j0c8yTCInIrnyX1dy7zUWjns+OAbXv8CMLXVUPdomgCxX0zUWEkTzgQqnJy97KFAmPPPMCGTUby3TMVQkcrk5/iATmydSMhs0lKErS4737u9jen/3I=,iv:YB3BqypuvamDJy64FeaSUQBCAdlr7a9UWJDNhGsTRvo=,tag:lXc7heG+MRiUo+SfRcRDNg==,type:str]
     pgp:
         - created_at: "2026-08-20T15:43:21Z"
           enc: |-