diff --git a/hosts/lily/default.nix b/hosts/lily/default.nix
index 8d47c90..2d36d14 100644
--- a/hosts/lily/default.nix
+++ b/hosts/lily/default.nix
@@ -17,7 +17,9 @@ in
     ./hardware-configuration.nix
     ./variables.nix
     ./dns.nix
+    ./wireguard.nix
     ./../../modules/core/default.router.nix
+    ./../../modules/services/lily.nix
   ];
 
   liv = {
@@ -26,7 +28,6 @@ in
   };
 
   boot = {
-    supportedFilesystems = [ "zfs" ];
     loader.grub = {
       enable = true;
       device = "/dev/sda";
@@ -52,7 +53,7 @@ in
 
   networking = {
     firewall = {
-      enable = true;
+      enable = false;
       allowPing = true;
 
       # allow ssh on *all* interfaces, even wan.
diff --git a/hosts/lily/wireguard.nix b/hosts/lily/wireguard.nix
new file mode 100644
index 0000000..0db3279
--- /dev/null
+++ b/hosts/lily/wireguard.nix
@@ -0,0 +1,3 @@
+{
+
+}