diff --git a/flake.lock b/flake.lock
index 4389b016..c29be2f3 100644
--- a/flake.lock
+++ b/flake.lock
@@ -89,11 +89,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1721431043,
-        "narHash": "sha256-xmJwGXg/y0k40JETVhWGLOMtWmeOb/k2WWMm1yhLbYE=",
+        "lastModified": 1721478374,
+        "narHash": "sha256-hUoPSUqTvU1lHThhiYbPWks4PVjtWUiNySbYzbncGRI=",
         "owner": "nix-community",
         "repo": "flake-firefox-nightly",
-        "rev": "6ba26a0f3d9d69e9910bab0bed0f5d994089a196",
+        "rev": "222ef1fb1f7359d47bb8205e33de21fd7e961a26",
         "type": "github"
       },
       "original": {
diff --git a/home/users/toothpick/imports.nix b/home/users/toothpick/imports.nix
index 8abc874c..d574a95e 100644
--- a/home/users/toothpick/imports.nix
+++ b/home/users/toothpick/imports.nix
@@ -47,6 +47,7 @@
       QT_QPA_PLATFORM = "wayland-egl";
       SDL_VIDEODRIVER = "wayland";
       XDG_SESSION_TYPE = "wayland";
+      ELECTRON_OZONE_PLATFORM_HINT = "auto";
     };
   };
 }
diff --git a/nixos/hosts/cnix/default.nix b/nixos/hosts/cnix/default.nix
index c8dab118..aa7595a9 100644
--- a/nixos/hosts/cnix/default.nix
+++ b/nixos/hosts/cnix/default.nix
@@ -77,10 +77,19 @@ in {
     pkiBundle = "/etc/secureboot";
   };
 
-  # Enable networking
+  # Networking
   networking = {
     networkmanager.enable = true;
     hostName = "cnix";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
   };
 
   environment.sessionVariables = {
diff --git a/nixos/hosts/cnix/imports.nix b/nixos/hosts/cnix/imports.nix
index 3a599656..e436c7ff 100644
--- a/nixos/hosts/cnix/imports.nix
+++ b/nixos/hosts/cnix/imports.nix
@@ -24,6 +24,7 @@
     ../../services/xserver-cnix.nix
     ../../services/locate.nix
     ../../services/power.nix
+    ../../services/samba.nix
 
     # extra
     ../../extra/gaming.nix
diff --git a/nixos/hosts/toothpc/imports.nix b/nixos/hosts/toothpc/imports.nix
index d4535820..65103043 100644
--- a/nixos/hosts/toothpc/imports.nix
+++ b/nixos/hosts/toothpc/imports.nix
@@ -43,6 +43,7 @@
       python312Packages.nvidia-ml-py
 
       # Util
+      samba4Full
       anyrun
       curl
       fzf
diff --git a/nixos/services/samba.nix b/nixos/services/samba.nix
new file mode 100644
index 00000000..a3f200fe
--- /dev/null
+++ b/nixos/services/samba.nix
@@ -0,0 +1,19 @@
+{pkgs, ...}: {
+  services = {
+    samba = {
+      enable = true;
+      package = pkgs.samba4Full;
+      openFirewall = true;
+    };
+    avahi = {
+      publish.enable = true;
+      publish.userServices = true;
+      enable = true;
+      openFirewall = true;
+    };
+    samba-wsdd = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}