diff --git a/i3/config b/i3/config
index e5bfcfc..bfb6d33 100644
--- a/i3/config
+++ b/i3/config
@@ -85,7 +85,7 @@ bindsym $mod+d exec rofi -show drun $rofiopts
 bindsym $mod+Shift+d exec rofi -show run $rofiopts
 
 bindsym $mod+Return exec kitty
-bindsym $mod+Shift+s --release exec --no-startup-id scrot --freeze --select --exec 'xclip -selection clipboard -t image/png -i $f'
+bindsym $mod+Shift+s --release exec --no-startup-id cd $(xdg-user-dir PICTURES) && scrot --freeze --select --exec 'xclip -selection clipboard -t image/png -i $f'
 bindsym $mod+Shift+x --release exec --no-startup-id xkill
 
 bindsym $mod+F1 exec kitty -e 'htop'
diff --git a/manjaro.sh b/manjaro.sh
index a168c87..840e429 100644
--- a/manjaro.sh
+++ b/manjaro.sh
@@ -5,14 +5,6 @@ sudo ufw allow 80/tcp comment "web"
 sudo ufw allow 443/tcp comment "websecure"
 sudo ufw allow 10000:10100/tcp comment "generic"
 
-# keyboard fix
-echo 'XKBMODEL="pc105"
-XKBLAYOUT="no"
-XKBVARIANT="nodeadkeys"
-XKBOPTIONS="caps:escape"
-
-BACKSPACE="guess"' | sudo tee /etc/default/keyboard
-
 # general
 sudo systemctl enable --now sshd.service
 sudo systemctl enable --now fstrim.timer
@@ -40,7 +32,8 @@ yay syncthings rclone
 sudo systemctl enable --now syncthing@hjalmarlucius.service
 systemctl --user daemon-reload
 systemctl --user enable --now rclone-gdrive.service
-sudo ufw allow syncthing comment "Syncthing"
+sudo ufw allow 22000,21027/udp comment "syncthing"
+sudo ufw allow to 224.0.0.0/4 comment "Multicast"
 
 # docker incl non-root daemon
 yay docker docker-compose dry-bin nvidia-docker docker-buildx
@@ -68,14 +61,35 @@ yay noto-fonts-emoji ttf-hack
 # browser
 yay qutebrowser pdfjs bitwarden-cli
 
-# utils
-yay i3status rofi mutt redshift coolercontrol
-sudo systemctl enable --now coolercontrold.service
+# zerotier
+yay zerotier-one
+sudo systemctl enable --now zerotier-one.service
+sudo zerotier-cli join d5e5fb653797795b
+sudo ufw allow from 9993/udp comment "zerotier"
+sudo ufw allow from 172.30.0.0/16 comment "zerotier"
 
-# applications
-yay plex-media-server qbittorrent discord teamviewer steam qalculate cmus ncspot
+# coolercontrol
+yay coolercontrol
+sudo systemctl enable --now coolercontrold.service
+sudo systemctl edit coolercontrold.service  # set log level to WARN
+
+# video streaming
+yay plex-media-server
+sudo systemctl enable --now plexmediaserver.service
 sudo ufw allow 8010 comment "chromecast"
+sudo ufw allow 32400/tcp comment "plex"
+sudo ufw allow 1900/udp comment "plex DLNA server"
+sudo ufw allow 32469/tcp comment "plex DLNA server"
+sudo ufw allow 32410,32412,32413,32414/udp comment "plex GDM discovery"
+
+# steam
+yay steam
 sudo ufw allow 27031,27036/udp comment "Steam Link"
 sudo ufw allow 27036,27037/tcp comment "Steam Link"
-sudo ufw allow to 224.0.0.1 comment "Multicast"
-sudo ufw allow from 192.168.1.1 port 1900 to any proto udp comment "Multicast"
+
+# qbittorrent
+yay qbittorrent
+sudo ufw allow 6881/tcp comment "qbittorrent"
+
+# applications
+yay i3status rofi mutt redshift discord teamviewer qalculate cmus ncspot
diff --git a/ranger/rc.conf b/ranger/rc.conf
index 087dab6..73c043d 100644
--- a/ranger/rc.conf
+++ b/ranger/rc.conf
@@ -8,3 +8,13 @@ set line_numbers relative
 map ø console
 map <DELETE> console delete
 set colorscheme zenburn
+map w1        tab_open 1
+map w2        tab_open 2
+map w3        tab_open 3
+map w4        tab_open 4
+map w5        tab_open 5
+map w6        tab_open 6
+map w7        tab_open 7
+map w8        tab_open 8
+map w9        tab_open 9
+map <alt>w  taskview_open