diff --git a/assets/etc/security/limits.d/00-default.conf b/assets/etc/security/limits.d/00-default.conf
new file mode 100644
index 0000000..8c76fad
--- /dev/null
+++ b/assets/etc/security/limits.d/00-default.conf
@@ -0,0 +1,3 @@
+#<domain>        <type>    <item>    <value>
+*                soft      nofile    102400
+*                hard      nofile    204800
diff --git a/assets/ssh-ca.pub b/assets/etc/ssh/ssh-ca.pub
similarity index 100%
rename from assets/ssh-ca.pub
rename to assets/etc/ssh/ssh-ca.pub
diff --git a/assets/ssh-krl b/assets/etc/ssh/ssh-krl
similarity index 100%
rename from assets/ssh-krl
rename to assets/etc/ssh/ssh-krl
diff --git a/assets/etc/sysctl.d/99-tweak.conf b/assets/etc/sysctl.d/99-tweak.conf
new file mode 100644
index 0000000..eabc979
--- /dev/null
+++ b/assets/etc/sysctl.d/99-tweak.conf
@@ -0,0 +1,26 @@
+net.ipv4.ip_forward=1
+net.ipv6.conf.all.forwarding=1
+net.ipv6.conf.all.accept_ra=2
+
+#net.core.rmem_default=212992
+#net.core.wmem_default=212992
+#net.core.rmem_max=212992
+#net.core.wmem_max=212992
+#net.ipv4.tcp_rmem=4096 131072 6291456
+#net.ipv4.tcp_wmem=4096 16384 4194304
+#net.ipv4.udp_wmem_min=4096
+#net.ipv4.udp_rmem_min=4096
+net.core.rmem_default=8388608
+net.core.wmem_default=8388608
+net.core.rmem_max=8388608
+net.core.wmem_max=8388608
+net.ipv4.tcp_rmem=409600 13107200 62914560
+net.ipv4.tcp_wmem=409600 13107200 62914560
+net.ipv4.udp_wmem_min=409600
+net.ipv4.udp_rmem_min=409600
+
+net.core.default_qdisc=fq
+net.ipv4.tcp_congestion_control=bbr
+
+vm.overcommit_memory = 1
+vm.max_map_count=262144
\ No newline at end of file
diff --git a/assets/ignore b/assets/root/.config/fd/ignore
similarity index 100%
rename from assets/ignore
rename to assets/root/.config/fd/ignore
diff --git a/assets/settings.json b/assets/root/.config/micro/settings.json
similarity index 100%
rename from assets/settings.json
rename to assets/root/.config/micro/settings.json
diff --git a/assets/.zshrc b/assets/root/.zshrc
similarity index 100%
rename from assets/.zshrc
rename to assets/root/.zshrc
diff --git a/assets/TINK-CA.crt b/assets/usr/local/share/a-certificates/TINK-CA.crt
similarity index 100%
rename from assets/TINK-CA.crt
rename to assets/usr/local/share/a-certificates/TINK-CA.crt
diff --git a/configure.sh b/configure.sh
index 60a315b..85b1f46 100755
--- a/configure.sh
+++ b/configure.sh
@@ -14,8 +14,8 @@ configure(){
     echo -e "APT::Install-Recommends "0";
 APT::Install-Suggests "0";" | tee /etc/apt/apt.conf.d/01norecommend >/dev/null
 
-    cp "$AWD/assets/ssh-ca.pub" /etc/ssh
-    cp "$AWD/assets/ssh-krl" /etc/ssh
+    cp "$AWD/assets/etc/ssh/ssh-ca.pub" /etc/ssh
+    cp "$AWD/assets/etc/ssh/ssh-krl" /etc/ssh
     sed -i "s/.*PermitRootLogin.*/PermitRootLogin prohibit-password/g" /etc/ssh/sshd_config || true
     sed -i "/.*TrustedUserCAKeys.*/d" /etc/ssh/sshd_config || true
     sed -i "/.*RevokedKeys.*/d" /etc/ssh/sshd_config || true
@@ -40,20 +40,23 @@ APT::Install-Suggests "0";" | tee /etc/apt/apt.conf.d/01norecommend >/dev/null
     sed -i "/EDITOR=.*/d" /etc/environment
     echo "EDITOR=micro" | tee -a /etc/environment
 
-    cp "$AWD/assets/TINK-CA.crt" /usr/local/share/ca-certificates
+    cp "$AWD/assets/usr/local/share/ca-certificates/TINK-CA.crt" /usr/local/share/ca-certificates
     /usr/sbin/update-ca-certificates
     sed -i "s|/bin/bash|/usr/bin/zsh|g" /etc/passwd
+
+    cp "$AWD/assets/etc/security/limits.d/00-default.conf" /etc/security/limits.d/00-default.conf
+    cp "$AWD/assets/etc/sysctl.d/99-tweak.conf" /etc/sysctl.d/99-tweak.conf
 }
 
 personalize() {
     mkdir -p $HOME/.config/fd
-    cp "$AWD/assets/ignore" $HOME/.config/fd/
-    cp "$AWD/assets/.zshrc" $HOME/
+    cp "$AWD/assets/root/.config/fd/ignore" $HOME/.config/fd/
+    cp "$AWD/assets/root/.zshrc" $HOME/
     if ((DISTRO_PVE)); then
         sed -i -E "s/.*prompt .*/prompt bart/g" $HOME/.zshrc
     fi
     mkdir -p $HOME/.config/micro
-    cp "$AWD/assets/settings.json" $HOME/.config/micro/
+    cp "$AWD/assets/root/.config/micro/settings.json" $HOME/.config/micro/
 }
 
 usage(){