diff --git a/.obsidian/plugins/novel-word-count/data.json b/.obsidian/plugins/novel-word-count/data.json
index bee9bb8..664133a 100644
--- a/.obsidian/plugins/novel-word-count/data.json
+++ b/.obsidian/plugins/novel-word-count/data.json
@@ -7994,20 +7994,20 @@
       "isCountable": true,
       "targetNodeType": "file",
       "noteCount": 1,
-      "wordCount": 0,
+      "wordCount": 20,
       "wordCountTowardGoal": 0,
       "wordGoal": null,
-      "pageCount": 0,
-      "characterCount": 0,
-      "nonWhitespaceCharacterCount": 0,
-      "newlineCount": 0,
-      "readingTimeInMinutes": 0,
+      "pageCount": 0.06666666666666667,
+      "characterCount": 203,
+      "nonWhitespaceCharacterCount": 164,
+      "newlineCount": 17,
+      "readingTimeInMinutes": 0.07547169811320754,
       "linkCount": 0,
       "embedCount": 0,
       "aliases": null,
       "createdDate": 1756548438344,
-      "modifiedDate": 1756548438344,
-      "sizeInBytes": 0,
+      "modifiedDate": 1756548738105,
+      "sizeInBytes": 203,
       "sessionStart": {
         "noteCount": 0,
         "pageCount": 0,
diff --git a/2025/durian.srv.xor-gate.org.md b/2025/durian.srv.xor-gate.org.md
index 8179376..da6a914 100644
--- a/2025/durian.srv.xor-gate.org.md
+++ b/2025/durian.srv.xor-gate.org.md
@@ -1,7 +1,25 @@
+
+## OS
+
+* Debian 13 trixie AMD64
 ## Firewall 
 
+* Iptables (native)
+* https://wiki.debian.org/iptables
+* <https://packages.debian.org/trixie/iptables-persistent>
 ## VPN
 
+Wireguard
 ## SSH
 
-* Key only
\ No newline at end of file
+* Key non-root only (global config)
+	* `PasswordAuthentication no`
+	* `PubkeyAuthentication yes`
+	* `PermitRootLogin no`
+
+## Containers
+
+The host OS will be kept clean and all services go into there respective containers. SystemD will be used for frugal container management:
+
+* `systemd-container` pkg
+* `systemd-nspawn` feature
\ No newline at end of file