diff --git a/modules/nixos/common.nix b/modules/nixos/common.nix
index 44ca581..acf6fa7 100644
--- a/modules/nixos/common.nix
+++ b/modules/nixos/common.nix
@@ -28,6 +28,7 @@ in {
   services.journald.extraConfig = "SystemMaxUse=1G";
 
   home-manager.useGlobalPkgs = true;
+  # home-manager.useUserPkgs = true; # wut is this?
 
   environment = {
     variables = {
@@ -137,7 +138,7 @@ in {
       settings = {
         PasswordAuthentication = false;
         KbdInteractiveAuthentication = false;
-        PermitRootLogin = "yes";
+        PermitRootLogin = "prohibit-password";
       };
 
       openFirewall = lib.mkDefault true;
diff --git a/nixos/beefcake.nix b/nixos/beefcake.nix
index 245e69f..e557935 100644
--- a/nixos/beefcake.nix
+++ b/nixos/beefcake.nix
@@ -815,6 +815,10 @@ in {
         STOP_SERVER_ANNOUNCE_DELAY = "20";
         TZ = "America/Chicago";
         VERSION = "1.20.4";
+        OPS = "lytedev";
+        MODE = "creative";
+        DIFFICULTY = "peaceful";
+        ONLINE_MODE = "false";
         MEMORY = "8G";
         MAX_MEMORY = "16G";
         ALLOW_FLIGHT = "true";
diff --git a/nixos/thablet.nix b/nixos/thablet.nix
index dc859d9..31971f6 100644
--- a/nixos/thablet.nix
+++ b/nixos/thablet.nix
@@ -14,7 +14,8 @@
     inputs.hardware.nixosModules.lenovo-thinkpad-x1-yoga
     desktop-usage
     fonts
-    gnome
+    # gnome
+    kde-plasma
     wifi
     flanfam
     flanfamkiosk
@@ -39,8 +40,10 @@
     #with pkgs;
     [];
 
-  programs.steam.enable = true;
-  programs.steam.remotePlay.openFirewall = true;
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+  };
 
   # https://wiki.archlinux.org/title/Lenovo_ThinkPad_X1_Yoga_(Gen_3)#Using_acpi_call
   systemd.services.activate-touch-hack = {