diff --git a/programs/zed.nix b/programs/zed.nix
index 0fa72a1..639bd20 100644
--- a/programs/zed.nix
+++ b/programs/zed.nix
@@ -5,6 +5,7 @@
     extensions = [
       "basher"
       "clean-vscode-icons"
+      "caddyfile"
       "clojure"
       "dockerfile"
       "earthfile"
@@ -44,12 +45,23 @@
         }
       ];
       languages = {
+        Caddyfile = {
+          tab_size = 2;
+          formatter.external = {
+            command = "${pkgs.caddy}/bin/caddy";
+            arguments = [ "fmt" "-c" "-" ];
+          };
+        };
         Julia = { formatter = { external = { command = "jlfmt"; }; }; };
         LaTeX = {
           formatter = {
             external = {
-              command = "tex-fmt";
-              arguments = [ "--stdin" ];
+              command = let
+                latexindent = (pkgs.texlive.combine {
+                  inherit (pkgs.texlive) scheme-minimal latexindent;
+                });
+              in "${latexindent}/bin/latexindent";
+              arguments = [ "-m" "-tt" "-l" "-" ];
             };
           };
         };
@@ -64,9 +76,9 @@
             (builtins.getFlake (builtins.toString ~/.config/home-manager)).homeConfigurations."millironx@${hostname}".options'';
         };
         texlab = {
-          settings = {
+          settings.texlab = {
             build = {
-              onSave = false;
+              onSave = true;
               forwardSearchAfter = true;
             };
             forwardSearch = if pkgs.stdenv.hostPlatform.isDarwin then {
diff --git a/services/tailscale.nix b/services/tailscale.nix
new file mode 100644
index 0000000..327afc6
--- /dev/null
+++ b/services/tailscale.nix
@@ -0,0 +1,6 @@
+{ ... }: {
+  services.tailscale = {
+    enable = true;
+    useRoutingFeatures = "server";
+  };
+}
diff --git a/services/vaultwarden.nix b/services/vaultwarden.nix
index 3d452bf..d58a40e 100644
--- a/services/vaultwarden.nix
+++ b/services/vaultwarden.nix
@@ -130,6 +130,7 @@ in {
               PUSH_ENABLED = "true";
               SIGNUPS_ALLOWED = "false";
               SMTP_FROM_NAME = "Milliron X Vault";
+              SMTP_SECURITY = "force_tls";
               SSO_ENABLED = "true";
               SSO_ONLY = "true";
               SSO_AUTHORITY =
diff --git a/systems/linux/mcentire.nix b/systems/linux/mcentire.nix
index 0e78845..998b024 100644
--- a/systems/linux/mcentire.nix
+++ b/systems/linux/mcentire.nix
@@ -15,6 +15,7 @@
     ./../../services/navidrome.nix
     ./../../services/openssh.nix
     ./../../services/searxng.nix
+    ./../../services/tailscale.nix
     ./../../services/vaultwarden.nix
   ];
 
@@ -69,8 +70,6 @@
   };
 
   services = {
-    tailscale.enable = true;
-
     # Do not "enable" database services, but include the package configuration
     # so that borgmatic does not freak out about unset variables
     postgresql.package = pkgs.postgresql_17;