diff --git a/hosts/genesis/acme.nix b/hosts/genesis/acme.nix
index 688dcdd..0d43069 100644
--- a/hosts/genesis/acme.nix
+++ b/hosts/genesis/acme.nix
@@ -15,7 +15,7 @@ in {
 	systemd.services.step-ca.serviceConfig.Environment = lib.mkForce ["STEPDEBUG=1" "HOME=%S/step-ca"];
 	services.step-ca = {
 		inherit address;
-		enable = true;
+		enable = false;
 		intermediatePasswordFile = config.age.secrets.acme_password.path;
 		openFirewall = true;
 		port = 8443;
diff --git a/hosts/genesis/networking.nix b/hosts/genesis/networking.nix
index 613e2ca..4de5551 100644
--- a/hosts/genesis/networking.nix
+++ b/hosts/genesis/networking.nix
@@ -12,7 +12,7 @@ let
 		"10.42.1.2 opnsense router opnsense.thehellings.lan router.thehellings.lan"
 		"10.42.1.3 printer.thehellings.lan"
 		"10.42.1.4 chronicles chronicles.thehellings.lan nas.thehellings.lan"
-		"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan"
+		"10.42.1.5 genesis genesis.thehellings.lan dns dns.thehellings.lan smart smart.thehellings.lan jellyfin jellyfin.thehellings.lan speedtest.thehellings.lan nixcache.thehellings.lan"
 		"10.42.1.6 isaiah isaiah.thehellings.lan"
 		"10.42.1.12 tv"
 
@@ -23,7 +23,7 @@ let
 		"100.88.91.27 dns.home"
 		"100.119.228.115 chronicles.home nas.home chronicles.shire-zebra.ts.net"
 		"100.115.57.8 linode.home"
-		"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home"
+		"100.88.91.27 genesis.home jellyfin.home smart.home zwave.home nixcache.home"
 		"100.78.16.88 mm.home"
 		"100.84.183.79 myself.home myself.shire-zebra.ts.net"
 		"100.78.226.76 gitlab.home gitlab.shire-zebra.ts.net gitlab.thehellings.lan registry.thehellings.lan git.thehellings.lan"
@@ -76,7 +76,7 @@ in {
 			};
 		};
 		firewall = {
-			enable = true;
+			enable = false;
 			allowedUDPPorts = [
 				dhcpPort
 				dnsPort
@@ -86,17 +86,24 @@ in {
 			allowedTCPPorts = [
 				dnsPort
 				proxyPort
+				80
 			];
 		};
-		nftables.enable = true;
+		nftables.enable = false;
 	};
 
 	environment.etc."hosts.d/local".text = extraHosts;
 
-	fileSystems."/media" = {
-		device = "10.42.1.4:/volume1/video/";
-		fsType = "nfs";
-		options = [ "ro" ];
+	fileSystems = {
+		"/media" = {
+			device = "10.42.1.4:/volume1/video/";
+			fsType = "nfs";
+			options = [ "ro" ];
+		};
+		"/proxy" = {
+			device = "10.42.1.4:/volume1/nixpkgs/";
+			fsType = "nfs";
+		};
 	};
 
 	services = {
@@ -204,10 +211,39 @@ in {
 		"jellyfin.home".target = "http://localhost:8096/";
 	};
 
-	#age.secrets."3proxy" = {
-	#	file = ../../secrets/3proxy.age;
-	#	mode = "776";
-	#};
+	services.nginx.virtualHosts."nixcache.thehellings.lan" = {
+		serverName = "nixcache.thehellings.lan";
+		serverAliases = [ "nixcache" "nixcache.home" ];
+		root = "/proxy";
+		locations = {
+			"~ ^/nix-cache-info" = {
+				proxyPass = "http://cache.nixos.org";
+				root = "/proxy/nix-cache-info/store";
+				recommendedProxySettings = false;
+				extraConfig = ''
+					error_log /var/log/nginx/proxy.og debug;
+					proxy_store on;
+					proxy_store_access user:rw group:rw all:r;
+					proxy_temp_path /proxy/nix-cache-info/temp;
+					proxy_pass_request_headers on;
+					proxy_set_header Host "cache.nixos.org";
+				'';
+			};
+			"~^/nar/.+$" = {
+				proxyPass = "https://cache.nixos.org";
+				root = "/proxy/nar/store";
+				recommendedProxySettings = false;
+				extraConfig = ''
+					proxy_store on;
+					proxy_store_access user:rw group:rw all:r;
+					proxy_temp_path /proxy/nar/temp;
+					proxy_pass_request_headers on;
+					proxy_set_header Host "cache.nixos.org";
+				'';
+			};
+		};
+	};
+	systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/proxy" ];
 
 	environment.systemPackages = with pkgs; [
 		bind
diff --git a/modules/nixos/kde.nix b/modules/nixos/kde.nix
index d7776e6..050f09e 100644
--- a/modules/nixos/kde.nix
+++ b/modules/nixos/kde.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, lib, ... }:
+{ config, pkgs, lib, options, ... }:
 
 let
 	cfg = config.greg.kde;
@@ -13,7 +13,6 @@ in with lib; {
 		services = {
 			xserver = {
 				enable = true;
-				desktopManager.plasma6.enable = true;
 				displayManager = {
 					defaultSession = "plasma";
 					sddm.enable = true;
@@ -21,7 +20,9 @@ in with lib; {
 				xkb.layout = "us";
 				# Trackpad support
 				libinput.enable = true;
-			};
+			} // (optionalAttrs (builtins.hasAttr "plasma6" options.services.xserver.desktopManager) {
+				desktopManager.plasma6.enable = true;
+			});
 
 			pipewire = {
 				enable = true;