diff --git a/desktop/software/development.nix b/desktop/software/development.nix
index e4f542b..d708053 100644
--- a/desktop/software/development.nix
+++ b/desktop/software/development.nix
@@ -53,15 +53,15 @@ in
             ocamllabs.ocaml-platform
             # ms-vscode-remote.remote-ssh
           ];
-        };
-        userSettings = {
-          "editor.rulers" = [ 80 ];
-          "editor.formatOnPaste" = false;
-          "editor.formatOnSave" = false;
-          "editor.formatOnType" = false;
-          # https://github.com/nix-community/nix-vscode-extensions/issues/123
-          "ltex.ltex-ls.path" = "${pkgs.ltex-ls-plus}";
-          "direnv.path.executable" = "${pkgs.direnv}/bin/direnv";
+          userSettings = {
+            "editor.rulers" = [ 80 ];
+            "editor.formatOnPaste" = false;
+            "editor.formatOnSave" = false;
+            "editor.formatOnType" = false;
+            # https://github.com/nix-community/nix-vscode-extensions/issues/123
+            "ltex.ltex-ls.path" = "${pkgs.ltex-ls-plus}";
+            "direnv.path.executable" = "${pkgs.direnv}/bin/direnv";
+          };
         };
       };
     };
diff --git a/host/roam/firefox-sync.nix b/host/roam/firefox-sync.nix
index 21e9c32..c2942f4 100644
--- a/host/roam/firefox-sync.nix
+++ b/host/roam/firefox-sync.nix
@@ -7,6 +7,7 @@
 {
   services.mysql.package = pkgs.mariadb;
 
+  # TODO: containerize
   age.secrets.roam-firefox-sync-secret = {
     file = secrets.roam."firefox-sync-secret.age";
     mode = "440";
diff --git a/host/roam/services.nix b/host/roam/services.nix
index 5424382..18c1aca 100644
--- a/host/roam/services.nix
+++ b/host/roam/services.nix
@@ -5,6 +5,12 @@
 {
   services = {
     nginx = {
+      recommendedTlsSettings = true;
+      recommendedProxySettings = true;
+      recommendedGzipSettings = true;
+      recommendedZstdSettings = true;
+      recommendedOptimisation = true;
+
       enable = true;
       virtualHosts.default = {
         serverName = "_";
diff --git a/var/lan-dns.nix b/var/lan-dns.nix
index 8bb2d5e..04dcd14 100644
--- a/var/lan-dns.nix
+++ b/var/lan-dns.nix
@@ -4,9 +4,7 @@ let
     name = "${name}.lan";
     inherit value;
   }) var.wg.ips;
-  custom-hosts = {
-    "fx-sync.lan" = var.wg.ips.roam;
-  };
+  custom-hosts = { };
 in
 rec {
   hostsFile = lib.concatStringsSep "\n" (lib.mapAttrsToList (n: v: "${v}\t${n}") hosts);