Issues with proxmox LXC, network acess, and home-manager

im generating a proxmox LXC template (not with nixos-generators, with nixos.config.system.build.tarball). It builds fine, and it boots, but when I try to login to ‘gabe’ user, zsh isnt set up, and systemctl status home-manager-gabe.service says:

gabe@:~/ > systemctl status home-manager-gabe.service 
× home-manager-gabe.service - Home Manager environment for gabe
     Loaded: loaded (/etc/systemd/system/home-manager-gabe.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Sat 2024-06-08 15:03:26 CDT; 41s ago
    Process: 241 ExecStart=/nix/store/r97djyf5m2ld96v9zk31n9x1aci3s03v-hm-setup-env /nix/store/24x1x2rnh43py3pvfivzh4c2gr1z1367-home-manager->
   Main PID: 241 (code=exited, status=1/FAILURE)
        CPU: 256ms

Jun 08 15:03:26 nixos-test hm-activate-gabe[241]: Activating checkLinkTargets
Jun 08 15:03:26 nixos-test hm-activate-gabe[241]: Activating writeBoundary
Jun 08 15:03:26 nixos-test hm-activate-gabe[241]: Activating linkGeneration
Jun 08 15:03:26 nixos-test hm-activate-gabe[241]: Creating profile generation 1
Jun 08 15:03:26 nixos-test hm-activate-gabe[316]: don't know how to build these paths:
Jun 08 15:03:26 nixos-test hm-activate-gabe[316]:   /nix/store/24x1x2rnh43py3pvfivzh4c2gr1z1367-home-manager-generation
Jun 08 15:03:26 nixos-test hm-activate-gabe[316]: error: build of '/nix/store/24x1x2rnh43py3pvfivzh4c2gr1z1367-home-manager-generation' failed
Jun 08 15:03:26 nixos-test systemd[1]: home-manager-gabe.service: Main process exited, code=exited, status=1/FAILURE
Jun 08 15:03:26 nixos-test systemd[1]: home-manager-gabe.service: Failed with result 'exit-code'.
Jun 08 15:03:26 nixos-test systemd[1]: Failed to start Home Manager environment for gabe.
gabe@:~/ > exit

Additionally, network access only works for the root user, the gabe user gets:

gabe@:~/ > ping 1.1.1.1
ping: socktype: SOCK_RAW
ping: socket: Operation not permitted
ping: => missing cap_net_raw+p capability or setuid?
gabe@:~/ > 

my config: Gabe/nix-config: My configs for both nixos and home manager only machines - Forgejo: Beyond coding. We forge. (specifically, outputs.packages.x86_64-linux.proxmox). (you will need to remove/replace the nix-secrets input if you want to build it yourself, its a private repo with things id rather not have completely public.)