diff --git a/home/terminal/neovim/default.nix b/home/terminal/neovim/default.nix
index 0f87487..baacfbf 100644
--- a/home/terminal/neovim/default.nix
+++ b/home/terminal/neovim/default.nix
@@ -20,6 +20,7 @@
       zls
       typescript
       nodePackages_latest.typescript-language-server
+      superhtml
 
       kdePackages.qtdeclarative # QML formatter
 
diff --git a/hosts/raptus/forgejo/default.nix b/hosts/raptus/forgejo/default.nix
index db0571a..8320880 100644
--- a/hosts/raptus/forgejo/default.nix
+++ b/hosts/raptus/forgejo/default.nix
@@ -9,6 +9,7 @@
       "FORGEJO__migrations__ALLOWED_DOMAINS" = "*";
       "FORGEJO__server__SSH_PORT" = "222";
       "FORGEJO__service__DISABLE_REGISTRATION" = "true";
+      "FORGEJO__federation__ENABLED" = "true";
     };
     volumes = [
       "test_forgejo:/data:rw"
diff --git a/hosts/raptus/headscale.nix b/hosts/raptus/headscale.nix
index 10dabd6..f8986d2 100644
--- a/hosts/raptus/headscale.nix
+++ b/hosts/raptus/headscale.nix
@@ -20,6 +20,10 @@ in
 mkIf config.services.headscale.enable {
   environment.systemPackages = [ config.services.headscale.package ];
 
+  networking.firewall.allowedTCPPorts = [
+    3478 # DERP
+  ];
+
   services = {
     headscale = {
       address = "127.0.0.1";
@@ -102,10 +106,6 @@ mkIf config.services.headscale.enable {
       };
     };
 
-    networking.firewall.allowedTCPPorts = [
-      3478 # DERP
-    ];
-
     nginx.virtualHosts."hs.ccnlc.eu" = {
       forceSSL = true;
       enableACME = true;