diff --git a/junk.nix b/junk.nix
index 31925e7..b26d6a5 100644
--- a/junk.nix
+++ b/junk.nix
@@ -20,6 +20,7 @@
   boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
   boot.kernel.sysctl = {
     "net.ipv6.conf.all.forwarding" = 1;
+    "net.ipv4.ip_forward" = 1;
   };
 
   networking.hostName = "junk"; # Define your hostname.
diff --git a/private b/private
index b4a7502..de57dc9 160000
--- a/private
+++ b/private
@@ -1 +1 @@
-Subproject commit b4a75024053fec24067d7d4df83ffbf117b2fd95
+Subproject commit de57dc9538d8d93f2ff6f768b9498cfe9b9ec1c5
diff --git a/push-junk.sh b/push-junk.sh
index e3c108a..cbb3850 100755
--- a/push-junk.sh
+++ b/push-junk.sh
@@ -3,6 +3,6 @@
 scp ./configuration.nix junk:/etc/nixos
 scp ./server.nix junk:/etc/nixos
 scp ./junk.nix junk:/etc/nixos
-scp ./dnsmasq.hosts junk:/
+scp ./private/junk.nix junk:/etc/nixos/private
 
 ssh junk nixos-rebuild switch
diff --git a/workstation.nix b/workstation.nix
index 1dbf6a4..6510e9f 100644
--- a/workstation.nix
+++ b/workstation.nix
@@ -17,7 +17,7 @@
     shell = pkgs.fish;
   };
   users.users.root.hashedPassword = "!";
-  users.mutableUsers = false;
+  users.mutableUsers = true;
   services.gvfs.enable = true;
 
 #  services.flatpak.enable = true;
diff --git a/x230.nix b/x230.nix
index 4406517..bc505cb 100644
--- a/x230.nix
+++ b/x230.nix
@@ -5,6 +5,7 @@
     [ # Include the results of the hardware scan.
       <nixos-hardware/lenovo/thinkpad/x230>
       ./workstation.nix
+      private/x230.nix
     ];
 
   # Use the GRUB 2 boot loader.