diff --git a/roles/pi_musicmouse/tasks/main.yml b/roles/pi_musicmouse/tasks/main.yml
index aacd686..dc1d6a0 100644
--- a/roles/pi_musicmouse/tasks/main.yml
+++ b/roles/pi_musicmouse/tasks/main.yml
@@ -5,6 +5,8 @@
       - git
       - libvlc5 # runtime lib python-vlc binds against
       - vlc-plugin-base
+      - ffmpeg # podcast feeds that publish video episodes get their audio extracted with it
+      - chromium
       - alsa-utils
       - samba
       - python3
@@ -237,6 +239,15 @@
     name: smbd
     state: started
     enabled: true
+
+- name: Build, sync and restart now rather than at the end of the play
+  # Handlers only run once the whole play is through, and a failure in any later role
+  # (squeezelite, shairport, ...) throws the queue away. The .built-commit guard above
+  # re-queues the build on the next run, but a play that keeps failing elsewhere then
+  # never delivers a front-end at all: the backend serves the API only and the kiosk
+  # shows nothing. Flushing here ties the front-end to this role succeeding, not to
+  # every role after it.
+  ansible.builtin.meta: flush_handlers
 # manual steps:
 #    - set samba passwords with smbpasswd
 #    - copy music into /media/musicmouse: scripts/sync-library.sh in the app repo, which