diff --git a/modules/graphical/hyprland.nix b/modules/graphical/hyprland.nix
index 3d3a560..3f5a9de 100644
--- a/modules/graphical/hyprland.nix
+++ b/modules/graphical/hyprland.nix
@@ -174,6 +174,7 @@ in
 	  wl-copy = "${pkgs.wl-clipboard}/bin/wl-copy";
 	  grim = "${pkgs.grim}/bin/grim";
 	  slurp = "${pkgs.slurp}/bin/slurp";
+          swww = "${pkgs.swww}/bin/swww";
         in  [ 
 	  "$mainMod, Q, exec, ${kitty}"
           "$mainMod, C, killactive"
@@ -181,6 +182,7 @@ in
           "$mainMod, E, exec, ${thunar}"
           "$mainMod, V, togglefloating"
           "$mainMod, S, exec, ${rofi} -show drun -show-icons"
+          "$mainMod, R, exec, ${swww} img $(ls -d ~/Nextcloud/dinge/Bg/* | shuf -n 1)"
           "        , Print, exec, ${grim} -g \"$(${slurp} -d)\" - | ${wl-copy}"
           "ALT, SPACE, exec, ${rofi} -show combi"
           "$mainMod, P, pseudo" # dwindle
@@ -249,6 +251,7 @@ in
        
 	exec-once = [
           "${pkgs.swww}/bin/swww init; sleep 1;"
+          "${pkgs.swww} img $(ls -d ~/Nextcloud/dinge/Bg/* | shuf -n 1)"
 	  "${pkgs.networkmanagerapplet}/bin/nm-applet --indicator &"
 	  "${pkgs.waybar}/bin/waybar &"
 	  "${pkgs.dunst}/bin/dunst &"
diff --git a/modules/graphical/shared.nix b/modules/graphical/shared.nix
index feb30fd..c17fc2e 100644
--- a/modules/graphical/shared.nix
+++ b/modules/graphical/shared.nix
@@ -25,7 +25,7 @@ in
   ];
 
   networking.firewall = {
-    enable = false;
+    enable = true;
     allowedTCPPortRanges = [
       { from = 1714; to = 1764; } # KDE Connect
     ];
diff --git a/modules/virt-manager.nix b/modules/virt-manager.nix
index 64b36eb..e1261d7 100644
--- a/modules/virt-manager.nix
+++ b/modules/virt-manager.nix
@@ -2,5 +2,5 @@
 {
   virtualisation.libvirtd.enable = true;
   programs.dconf.enable = true; # virt-manager requires dconf to remember settings
-  environment.systemPackages = with pkgs; [ virt-manager virtiofsd ];
+  environment.systemPackages = with pkgs; [ virt-manager virtiofsd virtio-win ];
 }