diff --git a/README.md b/README.md
index b820e03..2cc5b34 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,6 @@ sudo apt update && sudo apt upgrade -y
 
 git clone https://gitea.pstruebi.xyz/auracaster/bumble-auracast
 
-
 sudo apt install -y pipewire wireplumber pipewire-audio-client-libraries rtkit cpufrequtils
 
 mkdir -p ~/.config/pipewire/pipewire.conf.d
@@ -17,10 +16,6 @@ sudo cp ~/bumble-auracast/src/service/aes67/90-pipewire-aes67-ptp.rules /etc/ude
 sudo udevadm control --log-priority=debug --reload-rules
 sudo udevadm trigger
 
-
-/etc/modprobe.d/usb-audio-lowlatency.conf
-option snd_usb_audio nrpacks=1
-
 sudo bash ~/bumble-auracast/src/auracast/server/provision_domain_hostname.sh castbox-summitwave local
 
 - password was changed to something secure - stored in bitwarden
@@ -36,6 +31,18 @@ EOF
 sudo systemctl reload ssh
 ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no pi@raspi.local
 
+sudo apt-get install \
+   python3-dev python3.11-dev \
+   libsamplerate0-dev \
+   build-essential cmake pkg-config
+
+sudo apt install i2c-tools
+
+sudo tee /etc/security/limits.d/99-realtime.conf >/dev/null <<'EOF'
+caster   -   rtprio   99
+caster   -   memlock  unlimited
+EOF
+
 # per-device Provisioning
 For production, the devices need to be provisoned uniquely
 - provision with rpi-sb-provisioner - tested with 2.0.5, 2.0.4 did not work
@@ -54,6 +61,7 @@ For production, the devices need to be provisoned uniquely
     - activate overlayfs (?) -probably not because we need persistent storage for stream states
 
 ## Secure-boot CM4: unlock secure USB mass-storage
+git clone https://github.com/raspberrypi/usbboot
 bash gen-secure-msd-sig.sh
 bash rpi-boot-secure.sh
 
diff --git a/src/provision.py b/src/provision.py
index 866eb84..3ee1e4e 100644
--- a/src/provision.py
+++ b/src/provision.py
@@ -389,7 +389,15 @@ def main():
     # Normalize steps
     steps = args.steps
     if "all" in steps:
-        steps = ["pull", "hostname", "mac", "wg", "update_app", "start_app", "finish"]
+        steps = [
+        "pull", 
+        "hostname", 
+        "mac", 
+        #"wg", # TODO: after wiregurd setup a device was only reachable via vpn not in local network - fix this
+        "update_app", 
+        "start_app", 
+        "finish"
+        ]
 
     # Validate required args per step
     name = args.name