diff --git a/roles/base.nix b/roles/base.nix
index 1186c9b..032f4d7 100644
--- a/roles/base.nix
+++ b/roles/base.nix
@@ -90,6 +90,8 @@ in {
       alias ls="ls --color=auto"
       alias vim="nvim"
       alias k="kubectl"
+      alias n="nix-shell -p"
+      alias nu="nix-shell -I nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos-unstable -p"
 
       sink() {
         VAULT_TOKEN=$(vault token lookup -format=json | jq -r .data.id) \
@@ -139,7 +141,12 @@ in {
 
   services.fwupd.enable = true;
   services.resolved.enable = true;
+
   services.lorri.enable = true;
+  systemd.user.services.lorri.serviceConfig = {
+    ProtectSystem = pkgs.lib.mkForce "full";
+    ProtectHome = pkgs.lib.mkForce false;
+  };
 
   security.wrappers.gvfsd-nfs = {
     source = "${pkgs.gnome.gvfs}/libexec/gvfsd-nfs";