diff --git a/workstation/configuration.org b/workstation/configuration.org
index 5a78fbe..fcc6629 100644
--- a/workstation/configuration.org
+++ b/workstation/configuration.org
@@ -37,11 +37,11 @@ configurations.
 { config, lib, pkgs, ... }:
 let
   version = "23.11";
+  cpuArch = "x86_64-linux";
   myEmail = "CaptainJawZ@outlook.com";
   myName = "Danilo Reyes";
   cpuArchitecture = "znver3";
   home-manager = builtins.fetchTarball
-    # "https://github.com/nix-community/home-manager/archive/master.tar.gz";
     "https://github.com/nix-community/home-manager/archive/release-${version}.tar.gz";
   unstable = import
     (builtins.fetchTarball
@@ -322,11 +322,10 @@ architecture and other build flags.
 
 #+begin_src nix
 nixpkgs = {
-  hostPlatform = lib.mkDefault "x86_64-linux";
+  hostPlatform = lib.mkDefault cpuArch;
   config = {
     allowUnfree = true;
-    permittedInsecurePackages = [
-    ];
+    permittedInsecurePackages = [ ];
   };
   # localSystem = {
   #   gcc.arch = cpuArchitecture;
@@ -367,7 +366,7 @@ users = {
       openssh = {
         authorizedKeys.keys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5GaQM4N+yGAByibOFQOBVMV/6TjOfaGIP+NunMiK76 gpodeacero\cdreyes@100CDREYES"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIParbc033V2/yPsuhBQ8NPbnsEI/Ec0N4Lk6RJubTFfZ jawz@workstation"
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIParbc033V2/yPsuhBQ8NPbnsEI/Ec0N4Lk6RJubTFfZ jawz@workstation"
         ];
       };
 #+end_src
@@ -528,8 +527,8 @@ mousai # poor man shazam
 tagger # tag music files
 obs-studio # screen recorder & streamer
 # shortwave # listen to world radio
-# nextcloud-client # self-hosted google-drive alternative
-megasync # well, nextcloud is gone for now...
+nextcloud-client # self-hosted google-drive alternative
+fragments
 #+end_src
 
 *** WEB
@@ -929,7 +928,7 @@ environment = {
   };
   systemPackages = with pkgs; [
     # virt-manager
-    podman-compose
+    docker-compose
     wget
     gwe
   ];
@@ -1054,6 +1053,7 @@ services = {
     startWhenNeeded = true;
     settings = {
       PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
       KbdInteractiveAuthentication = false;
     };
   };
@@ -1174,11 +1174,11 @@ On this section, you can also add virtual machines settings.
 programs.dconf.enable = true; # virt-manager requires dconf to remember settings
 virtualisation = {
   libvirtd.enable = false;
-  podman = {
+  docker = {
     enable = true;
     enableNvidia = true;
-    dockerCompat = true;
-    defaultNetwork.settings.dns_enabled = true;
+    # dockerCompat = true;
+    # defaultNetwork.settings.dns_enabled = true;
     autoPrune = {
       enable = true;
       flags = [ "--all" ];