diff --git a/flake.lock b/flake.lock
index 04d8d8f..c9f3362 100644
--- a/flake.lock
+++ b/flake.lock
@@ -176,11 +176,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1720661479,
-        "narHash": "sha256-nsGgA14vVn0GGiqEfomtVgviRJCuSR3UEopfP8ixW1I=",
+        "lastModified": 1721735625,
+        "narHash": "sha256-4T0FK0b3Q7Dd7oj79M7GhA9+YqKxxGT0iN+h8yqdP7s=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "786965e1b1ed3fd2018d78399984f461e2a44689",
+        "rev": "4698b1ef375e9c904037e0b2049aa73d39ac1b2d",
         "type": "github"
       },
       "original": {
@@ -480,11 +480,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1720926593,
-        "narHash": "sha256-fW6e27L6qY6s+TxInwrS2EXZZfhMAlaNqT0sWS49qMA=",
+        "lastModified": 1721531260,
+        "narHash": "sha256-O72uxk4gYFQDwNkoBioyrR3GK9EReZmexCStBaORMW8=",
         "owner": "Mic92",
         "repo": "nix-index-database",
-        "rev": "5fe5b0cdf1268112dc96319388819b46dc051ef4",
+        "rev": "b6db9fd8dc59bb2ccb403f76d16ba8bbc1d5263d",
         "type": "github"
       },
       "original": {
@@ -592,11 +592,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1720823163,
-        "narHash": "sha256-FZ5dnrvKkln9ESdoTR8R7GKW9rNpXNZrxGsOXsbsTpE=",
+        "lastModified": 1721548954,
+        "narHash": "sha256-7cCC8+Tdq1+3OPyc3+gVo9dzUNkNIQfwSDJ2HSi2u3o=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f12ee5f64c6a09995e71c9626d88c4efa983b488",
+        "rev": "63d37ccd2d178d54e7fb691d7ec76000740ea24a",
         "type": "github"
       },
       "original": {
diff --git a/system/keyboard.nix b/system/keyboard.nix
index 7691343..bdb9f24 100644
--- a/system/keyboard.nix
+++ b/system/keyboard.nix
@@ -8,6 +8,16 @@
         "main" = {
           # Some programs don't respect colemaks capslock bind, so we force it here
           "capslock" = "backspace";
+
+          # keyd has incorrect defaults :/
+          "leftshift" = "leftshift";
+          "rightshift" = "rightshift";
+          "leftalt" = "leftalt";
+          "rightalt" = "rightalt";
+          "leftcontrol" = "leftcontrol";
+          "rightcontrol" = "rightcontrol";
+          "leftmeta" = "leftmeta";
+          "rightmeta" = "rightmeta";
         };
       };
     };
diff --git a/system/network.nix b/system/network.nix
index aee7518..682639d 100644
--- a/system/network.nix
+++ b/system/network.nix
@@ -9,6 +9,11 @@
   # Open kde connect ports
   programs.kdeconnect.enable = true;
 
+  networking.firewall = {
+    enable = true;
+    logRefusedConnections = false;
+  };
+
   # Enable CUPS to print documents.
   # services.printing.enable = true;