idk i dont even remember

system/configuration.nix

@@ -18,7 +18,6 @@
       inputs.helix.overlays.default
       inputs.nixd.overlays.default
       inputs.nix-ld-rs.overlays.default
-      # inputs.eww.overlays.default
     ];
     config = {
       allowUnfree = true;
@@ -32,16 +31,17 @@
       trusted-users = ["bolt" "plank"];
       experimental-features = "nix-command flakes";
       substitute = true;
-      substituters = ["https://jakestanger.cachix.org"];
-      trusted-public-keys = [
-        "jakestanger.cachix.org-1:VWJE7AWNe5/KOEvCQRxoE8UsI2Xs2nHULJ7TEjYm7mM="
-      ];
+      substituters = [];
+      trusted-public-keys = [];
     };
   };
 
   imports = [
+    ../util/temp-iproute-patch.nix
   ];
 
+  disabledModules = ["config/iproute2.nix"];
+
   nix.extraOptions = ''
     keep-outputs = true
     keep-derivations = true
@@ -116,8 +116,13 @@
     enable = true;
     extraPortals = with pkgs; [
       xdg-desktop-portal-gtk
-      # xdg-desktop-portal-wlr
+      xdg-desktop-portal-wlr
     ];
+    config = {
+      common = {
+        default = "wlr";
+      };
+    };
   };
 
   services.resolved = {
@@ -189,6 +194,7 @@
 
   networking.firewall.enable = true;
   networking.firewall = {
+    # TODO: use tailscale with interface blacklist patch?
     # trustedInterfaces = ["tailscale0"];
     checkReversePath = "loose";
   };