diff --git a/flake.nix b/flake.nix
index 4f559019..0f5a0304 100644
--- a/flake.nix
+++ b/flake.nix
@@ -86,7 +86,7 @@
         };
 
         pulsebert = nixosSystem' {
-          modules = [ ./hosts/pulsebert ];
+          modules = [ ./hosts/pulsebert secrets.nixosModules.dhcp ];
           system = "aarch64-linux";
         };
 
diff --git a/hosts/pulsebert/default.nix b/hosts/pulsebert/default.nix
index c07134f4..4bf557b7 100644
--- a/hosts/pulsebert/default.nix
+++ b/hosts/pulsebert/default.nix
@@ -27,6 +27,7 @@ in {
   c3d2 = {
     isInHq = true;
     mapHqHosts = true;
+    hq.interface = "eth0";
   };
 
   nix.buildCores = 4;
@@ -43,7 +44,14 @@ in {
 
   # List packages installed in system profile. To search, run:
   # $ nix search wget
-  environment.systemPackages = with pkgs; [ wget vim git mpd ncmpcpp raspberrypi-tools ];
+  environment.systemPackages = with pkgs; [
+    wget
+    vim
+    git
+    mpd
+    ncmpcpp
+    raspberrypi-tools
+  ];
 
   # List services that you want to enable:
 
@@ -110,6 +118,15 @@ in {
     acceptTerms = true;
     email = "mail@c3d2.de";
   };
+
+  services.dhcpd4 = {
+    enable = true;
+    interfaces = [ config.c3d2.hq.interface ];
+    authoritative = false;
+    # the leases are defined in the secrets module imported
+    # at the top-level of this flake
+  };
+
   services.nginx = {
     enable = true;
     #recommendedGzipSettings = true;