diff --git a/modules/flake-update-service.nix b/modules/flake-update-service.nix
index d4ba598..a47c101 100644
--- a/modules/flake-update-service.nix
+++ b/modules/flake-update-service.nix
@@ -40,14 +40,14 @@ in {
   config = lib.mkIf (cfg.enable && !(builtins.isNull cfg.path)) {
     environment.systemPackages = [ pkgs.openssh pkgs.git ];
     systemd.services."autopull@${cfg.name}" = {
-      wantedBy = [ "multi-user.target" ];
-      after = [ "network.target" ];
+      after = [ "multi-user.target" ];
+      requires = [ "multi-user.target" ];
       description = "Pull the latest data for ${cfg.name}";
+      environment = lib.mkIf (cfg.ssh-key != "") { GIT_SSH_COMMAND="${pkgs.openssh}/bin/ssh -i ${cfg.ssh-key} -o IdentitiesOnly=yes";};
       serviceConfig = {
         Type = "oneshot";
         User = "root";
         WorkingDirectory = cfg.path;
-        Environment = lib.mkIf (cfg.ssh-key != "") "GIT_SSH_COMMAND=${pkgs.openssh}/bin/ssh -i ${cfg.ssh-key} -o IdentitiesOnly=yes";
         ExecStart = "${pkgs.git}/bin/git pull --all";
       };
     };
diff --git a/systems/palatine-hill/configuration.nix b/systems/palatine-hill/configuration.nix
index 5694298..1430d3d 100644
--- a/systems/palatine-hill/configuration.nix
+++ b/systems/palatine-hill/configuration.nix
@@ -20,6 +20,10 @@
     filesystem = "zfs";
     useSystemdBoot = true;
     kernelParams = [ "i915.force_probe=56a5" "i915.enable_guc=2" ];
+    kernel.sysctl = {
+      "vm.overcommit_memory" = 1;
+      "vm.swappiness" = 10;
+    };
     binfmt.emulatedSystems = [ "aarch64-linux" ];
   };