diff --git a/nixos/hardware/graphics/intel.nix b/nixos/hardware/graphics/intel.nix
index 5754b41..6ac7085 100644
--- a/nixos/hardware/graphics/intel.nix
+++ b/nixos/hardware/graphics/intel.nix
@@ -16,6 +16,7 @@
 
   environment.variables = {
     LIBVA_DRIVER_NAME = "i965";
+    LIBVA_DRM_DEVICE = "/dev/dri/renderD128";
     VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_hasvk_icd.x86_64.json";
   };
 }
diff --git a/nixos/networking/vpn/default.nix b/nixos/networking/vpn/default.nix
index e92fe2b..ef07a36 100644
--- a/nixos/networking/vpn/default.nix
+++ b/nixos/networking/vpn/default.nix
@@ -1,7 +1,6 @@
 { config, pkgs, ... }:
 
 {
-  # you can make this true if you have problems with zapret
   services.cloudflare-warp.enable = false;
 
   services.zapret = {
@@ -26,8 +25,14 @@
   networking.enableIPv6 = false;
 
   networking.firewall.extraCommands = ''
+    iptables -I OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
+    iptables -I OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
+    iptables -I OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN
+  '';
+
+  networking.firewall.extraStopCommands = ''
     iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
     iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
     iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true
   '';
-}
+}
\ No newline at end of file