diff --git a/home/features/desktop/media.nix b/home/features/desktop/media.nix
index f23a6d3..ee26455 100644
--- a/home/features/desktop/media.nix
+++ b/home/features/desktop/media.nix
@@ -33,6 +33,7 @@ in {
       v4l-utils
       plexamp
       spotify
+      webcord
       # uxplay
       # vlc
       # webcord
diff --git a/hosts/m3-atlas/services/containers/baserow.nix b/hosts/m3-atlas/services/containers/baserow.nix
index 35bb145..8789eaa 100644
--- a/hosts/m3-atlas/services/containers/baserow.nix
+++ b/hosts/m3-atlas/services/containers/baserow.nix
@@ -2,7 +2,7 @@
   virtualisation.oci-containers.containers."baserow" = {
     image = "docker.io/baserow/baserow:1.30.1";
     environmentFiles = [config.age.secrets.baserow-env.path];
-    ports = ["3001:80"];
+    ports = ["127.0.0.1:3001:80"];
     volumes = ["baserow_data:/baserow/data"];
     extraOptions = ["--add-host=postgres:10.89.0.1" "--ip=10.89.0.10" "--network=web"];
   };
diff --git a/hosts/m3-atlas/services/containers/ghost.nix b/hosts/m3-atlas/services/containers/ghost.nix
index 72b353c..8d94f89 100644
--- a/hosts/m3-atlas/services/containers/ghost.nix
+++ b/hosts/m3-atlas/services/containers/ghost.nix
@@ -1,8 +1,8 @@
 {config, ...}: {
   virtualisation.oci-containers.containers."ghost" = {
-    image = "docker.io/ghost:5.89";
+    image = "docker.io/ghost:5.106.1";
     environmentFiles = [config.age.secrets.ghost-env.path];
-    ports = ["3002:2368"];
+    ports = ["127.0.0.1:3002:2368"];
     volumes = ["ghost_data:/var/lib/ghost/content"];
     extraOptions = ["--add-host=mysql:10.89.0.1" "--ip=10.89.0.11" "--network=web"];
   };
diff --git a/hosts/m3-atlas/services/containers/littlelink.nix b/hosts/m3-atlas/services/containers/littlelink.nix
index 3545886..c7c6794 100644
--- a/hosts/m3-atlas/services/containers/littlelink.nix
+++ b/hosts/m3-atlas/services/containers/littlelink.nix
@@ -2,7 +2,7 @@
   virtualisation.oci-containers.containers."littlelink_m3tam3re" = {
     image = "ghcr.io/techno-tim/littlelink-server";
     environmentFiles = [config.age.secrets.littlelink-m3tam3re.path];
-    ports = ["3004:3000"];
+    ports = ["127.0.0.1:3004:3000"];
     extraOptions = ["--ip=10.89.0.12" "--network=web"];
   };
   # Traefik configuration specific to littlelink
diff --git a/hosts/m3-atlas/services/postgres.nix b/hosts/m3-atlas/services/postgres.nix
index 57cecaf..3b3f324 100644
--- a/hosts/m3-atlas/services/postgres.nix
+++ b/hosts/m3-atlas/services/postgres.nix
@@ -12,7 +12,6 @@
     initialScript = pkgs.writeText "backend-initScript" ''
       CREATE USER baserow WITH ENCRYPTED PASSWORD 'baserow';
       CREATE DATABASE baserow;
-      GRANT ALL PRIVILEGES ON DATABASE baserow TO baserow;
       ALTER DATABASE baserow OWNER to baserow;
     '';
   };