diff --git a/common/hyprland.nix b/common/hyprland.nix
index 70334fd..49e4aaa 100644
--- a/common/hyprland.nix
+++ b/common/hyprland.nix
@@ -21,6 +21,7 @@
 		grim
 
 		hypridle # TODO: remove when fixed with config
+		playerctl
 	];
 
 	services.playerctld.enable = true;
diff --git a/common/spotify.nix b/common/spotify.nix
index f2e0ca3..dff60b7 100644
--- a/common/spotify.nix
+++ b/common/spotify.nix
@@ -1,6 +1,7 @@
 { config, pkgs, inputs, ... }:
 
 {
+	services.spotifyd.enable = true;
 	home.packages = with pkgs; [
 		(symlinkJoin {
 			name = "spotify";
diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix
index 4486052..483fa8c 100644
--- a/hosts/default/configuration.nix
+++ b/hosts/default/configuration.nix
@@ -154,6 +154,18 @@
 		jack.enable = true;
 	};
 
+	services.fail2ban = {
+		enable = true;
+		maxretry = 5;
+		bantime = "1s";
+		bantime-increment = {
+			enable = true;
+			formula = "ban.Time * math.exp(float(ban.Count+1)*banFactor)/math.exp(1*banFactor)";
+			maxtime = "1h";
+			overalljails = true;
+		};
+	};
+
 	boot.kernelModules = [
 		"v4l2loopback"
 		"nct6775"
@@ -176,8 +188,8 @@
 	};
 
 	# Open ports in the firewall.
-	# networking.firewall.allowedTCPPorts = [ 5909 ];
-	# networking.firewall.allowedUDPPorts = [ 5909 ];
+	networking.firewall.allowedTCPPorts = [ 2000 ];
+	networking.firewall.allowedUDPPorts = [ 2000 ];
 	# Or disable the firewall altogether.
 	# networking.firewall.enable = false;
 
diff --git a/hosts/default/home.nix b/hosts/default/home.nix
index 889e203..21bb34d 100644
--- a/hosts/default/home.nix
+++ b/hosts/default/home.nix
@@ -122,6 +122,7 @@
 
 	# Let Home Manager install and manage itself.
 	programs.home-manager.enable = true;
+	programs.zsh.shellAliases.bzzt = ''nix-shell -p mpv --command "mpv ~/Videos/BZZZM.mp4"'';
 
 	home.pointerCursor = 
 		let