diff --git a/nixos/common/generic-lxc.nix b/nixos/common/generic-lxc.nix
index 0c1c286..ba7afba 100644
--- a/nixos/common/generic-lxc.nix
+++ b/nixos/common/generic-lxc.nix
@@ -3,4 +3,7 @@ _: {
 
   # Supress systemd services that don't work (correctly) on LXC
   systemd.suppressedSystemUnits = [ "dev-mqueue.mount" "sys-kernel-debug.mount" "sys-fs-fuse-connections.mount" ];
+
+  # https://github.com/NixOS/nixpkgs/issues/157449#issuecomment-1459299764
+  boot.specialFileSystems."/run".options = [ "rshared" ];
 }
diff --git a/nixos/hosts/thalassa/aoife/home/neovim.nix b/nixos/hosts/thalassa/aoife/home/neovim.nix
index d12dda7..2ab5b9c 100644
--- a/nixos/hosts/thalassa/aoife/home/neovim.nix
+++ b/nixos/hosts/thalassa/aoife/home/neovim.nix
@@ -53,7 +53,7 @@
       lspkind.enable = true;
       nvim-cmp = {
         enable = true;
-        auto_enable_sources = true;
+        autoEnableSources = true;
         sources = [
           { name = "nvim_lsp"; }
           { name = "cmp-latex-symbols"; }
@@ -66,11 +66,7 @@
           { name = "path"; }
           { name = "buffer"; }
         ];
-        snippet.expand = ''
-          function(args)
-            require('luasnip').lsp_expand(args.body) -- For `luasnip` users.
-          end
-        '';
+        snippet.expand = "luasnip";
         mappingPresets = [ "insert" "cmdline" ];
         mapping = {
           "<CR>" = "cmp.mapping.confirm({ select = true })";
diff --git a/nixos/hosts/thalassa/aoife/networking.nix b/nixos/hosts/thalassa/aoife/networking.nix
index 16d4e07..826668a 100644
--- a/nixos/hosts/thalassa/aoife/networking.nix
+++ b/nixos/hosts/thalassa/aoife/networking.nix
@@ -1,5 +1,5 @@
 _: {
   networking.networkmanager.enable = true;
   networking.firewall.checkReversePath = false;
-  # networking.firewall.enable = false;
-}
\ No newline at end of file
+  networking.firewall.enable = false;
+}