diff --git a/systems/x86_64-linux/sgx/network.nix b/systems/x86_64-linux/sgx/network.nix
index 3ad13c7..d19a01d 100644
--- a/systems/x86_64-linux/sgx/network.nix
+++ b/systems/x86_64-linux/sgx/network.nix
@@ -37,6 +37,6 @@
     };
   };
 
-  networking.firewall.allowedTCPPorts = [ 548 ];
+  networking.firewall.allowedTCPPorts = [ config.services.netatalk.port ];
   networking.firewall.allowPing = true;
 }
diff --git a/systems/x86_64-linux/t15/hardware-configuration.nix b/systems/x86_64-linux/t15/hardware-configuration.nix
index 784e841..3c0f827 100644
--- a/systems/x86_64-linux/t15/hardware-configuration.nix
+++ b/systems/x86_64-linux/t15/hardware-configuration.nix
@@ -94,7 +94,7 @@
 
   console.keyMap = "de-latin1-nodeadkeys";
   services.xserver.xkb = {
-    layout = "de";
+    layout = "de,de+us";
     variant = "nodeadkeys";
   };