diff --git a/nixos/ryu/services/openrgb.nix b/nixos/ryu/services/openrgb.nix
index c0b73381..27e0692c 100644
--- a/nixos/ryu/services/openrgb.nix
+++ b/nixos/ryu/services/openrgb.nix
@@ -1,5 +1,6 @@
-{...}: {
+{config, ...}: {
   services = {
     hardware.openrgb.enable = true;
   };
+  networking.firewall.allowedTCPPorts = [config.services.hardware.openrgb.server.port];
 }
diff --git a/nixos/tsuba/services/homeassistant.nix b/nixos/tsuba/services/homeassistant.nix
index a5368f7d..15c7684d 100644
--- a/nixos/tsuba/services/homeassistant.nix
+++ b/nixos/tsuba/services/homeassistant.nix
@@ -7,7 +7,7 @@
   virtualisation.oci-containers = {
     containers = {
       homeassistant = {
-        image = "ghcr.io/home-assistant/home-assistant:stable";
+        image = "ghcr.io/home-assistant/home-assistant:latest";
         volumes = [
           "/var/lib/homeassistant:/config"
           "/etc/localtime:/etc/localtime:ro"
diff --git a/steamdeck/default.nix b/steamdeck/default.nix
index c4f0af44..7aa984fa 100644
--- a/steamdeck/default.nix
+++ b/steamdeck/default.nix
@@ -12,8 +12,6 @@
     home-manager.enable = true;
     bash = {
       enable = true;
-      settings = {
-      };
     };
   };
 
@@ -51,7 +49,7 @@
       _1password-cli
       just
     ];
-    home.file.".ssh/rc".text = ''
+    file.".ssh/rc".text = ''
       export PATH="/nix/var/nix/profiles/default/bin:$PATH"
     '';
     activation.tailscale-service = let