diff --git a/nixos/services/jellyfin.nix b/nixos/services/jellyfin.nix
index 9eba39e..583a411 100644
--- a/nixos/services/jellyfin.nix
+++ b/nixos/services/jellyfin.nix
@@ -2,6 +2,7 @@
   services.jellyfin = {
     enable = true;
     group = "media"; # access to user stuff
+    openFirewall = true;
   };
   services.nginx.virtualHosts."movies.tristans.cloud" = {
     forceSSL = true;
diff --git a/nixos/services/loki.nix b/nixos/services/loki.nix
index 1e84fc8..d114318 100644
--- a/nixos/services/loki.nix
+++ b/nixos/services/loki.nix
@@ -27,7 +27,11 @@ in {
         replication_factor = 1;
         path_prefix = "/tmp/loki";
       };
-      limits_config.ingestion_rate_strategy = "local";
+      limits_config = {
+        ingestion_rate_strategy = "local";
+        ingestion_rate_mb = 24;
+        ingestion_burst_size_mb = 36;
+      };
     };
   };
   services.prometheus.scrapeConfigs = [{
diff --git a/nixos/services/mautrix/whatsapp.nix b/nixos/services/mautrix/whatsapp.nix
index cc65690..99ba1f9 100644
--- a/nixos/services/mautrix/whatsapp.nix
+++ b/nixos/services/mautrix/whatsapp.nix
@@ -1,6 +1,9 @@
 {config, ...}:
 {
 # TODO: totally borked for some reason. DB migration?
+  nixpkgs.config.permittedInsecurePackages = [
+    "olm-3.2.16"
+  ];
   services.mautrix-whatsapp = {
     enable = true;
     registerToSynapse = true;