diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..bde1a69
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,26 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1758198701,
+        "narHash": "sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixos-unstable",
+        "type": "indirect"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
index 4f9bf0d..c0b364f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -14,7 +14,10 @@
       in
       pkgs.mkShell {
         buildInputs = with pkgs; [
-          azure-cli
+          (azure-cli.withExtensions [ 
+            azure-cli.extensions.bastion
+            azure-cli.extensions.ssh
+            ])
         ];
       };
   };