diff --git a/.sops.yaml b/.sops.yaml
old mode 100755
new mode 100644
diff --git a/README.md b/README.md
old mode 100755
new mode 100644
diff --git a/flake.lock b/flake.lock
old mode 100755
new mode 100644
diff --git a/flake.nix b/flake.nix
old mode 100755
new mode 100644
diff --git a/modules/vds/containers/3x-ui.nix b/modules/vds/containers/3x-ui.nix
index e32783d..1eefd7d 100644
--- a/modules/vds/containers/3x-ui.nix
+++ b/modules/vds/containers/3x-ui.nix
@@ -39,6 +39,16 @@
         to = 15380;
       }
     ];
+    allowedTCPPorts = [
+      8443
+      9443
+      13380
+    ];
+    allowedUDPPorts = [
+      8443
+      9443
+      13380
+    ];
   };
   virtualisation.oci-containers.backend = "podman";
 
diff --git a/modules/vds/default.nix b/modules/vds/default.nix
index 93ba1e7..bc65d21 100644
--- a/modules/vds/default.nix
+++ b/modules/vds/default.nix
@@ -6,7 +6,7 @@
   imports = [
     ./containers
     ./nginx.nix
-    ./xray.nix
+    # ./xray.nix
     # ../services/uptime-kuma.nix
     # ./netbird.nix
   ];
diff --git a/pkgs/default.nix b/pkgs/default.nix
old mode 100755
new mode 100644