diff --git a/.forgejo/workflows/production.yaml b/.forgejo/workflows/production.yaml
index 5806c374..e390fef2 100644
--- a/.forgejo/workflows/production.yaml
+++ b/.forgejo/workflows/production.yaml
@@ -229,11 +229,11 @@ jobs:
       - name: Start Docker daemon
         run: |
           # Start Docker daemon in background if not running
-          # --iptables=false avoids NAT/bridge setup which requires root caps
-          # not available in unprivileged CI runners (only needed for container networking,
-          # not for building/pushing images)
+          # --iptables=false --bridge=none --ip6tables=false disables networking
+          # features that require root/netadmin caps not available on unprivileged
+          # CI runners. Only image builds and registry pushes are needed here.
           if ! docker info > /dev/null 2>&1; then
-            sudo dockerd --iptables=false &
+            sudo dockerd --iptables=false --ip6tables=false --bridge=none &
             # Wait for Docker to be ready
             timeout 30 bash -c 'until docker info > /dev/null 2>&1; do sleep 1; done'
           fi
diff --git a/lib/towerops_web/live/device_live/index.html.heex b/lib/towerops_web/live/device_live/index.html.heex
index 82a9921d..7a722ec1 100644
--- a/lib/towerops_web/live/device_live/index.html.heex
+++ b/lib/towerops_web/live/device_live/index.html.heex
@@ -158,7 +158,7 @@
         </div>
       <% else %>
         <%!-- Sticky Status Bar + Search --%>
-        <div class="sticky top-0 z-10 bg-white dark:bg-gray-900 pb-3 -mx-4 px-4 sm:-mx-6 sm:px-6 lg:-mx-8 lg:px-8 border-b border-gray-100 dark:border-white/5">
+        <div class="sticky top-0 z-10 bg-white dark:bg-gray-900 pb-3 -mx-4 px-4 sm:-mx-6 sm:px-6 lg:-ml-4 lg:-mr-8 lg:pl-4 lg:pr-8 border-b border-gray-100 dark:border-white/5">
           <div class="flex items-center gap-3 pt-2">
             <%!-- Search --%>
             <form phx-change="search" class="flex-1 max-w-sm">
diff --git a/lib/towerops_web/live/device_live/show.html.heex b/lib/towerops_web/live/device_live/show.html.heex
index da3b9c46..63787368 100644
--- a/lib/towerops_web/live/device_live/show.html.heex
+++ b/lib/towerops_web/live/device_live/show.html.heex
@@ -16,7 +16,7 @@
         [%{label: @device.name}]
     } />
 
-    <div class="sticky top-0 z-30 -mx-4 px-4 sm:-mx-6 sm:px-6 lg:-mx-8 lg:px-8 py-3 bg-gray-50/95 dark:bg-gray-950/95 backdrop-blur-sm border-b border-gray-200/50 dark:border-white/5 mb-4">
+    <div class="sticky top-0 z-30 -mx-4 px-4 sm:-mx-6 sm:px-6 lg:-ml-4 lg:-mr-8 lg:pl-4 lg:pr-8 py-3 bg-gray-50/95 dark:bg-gray-950/95 backdrop-blur-sm border-b border-gray-200/50 dark:border-white/5 mb-4">
       <div class="flex items-start justify-between gap-2">
         <div class="min-w-0 flex-1">
           <div class="flex items-center gap-2 flex-wrap">
diff --git a/test/towerops_web/live/onboarding_live_test.exs b/test/towerops_web/live/onboarding_live_test.exs
index f0b7f5a2..485622f9 100644
--- a/test/towerops_web/live/onboarding_live_test.exs
+++ b/test/towerops_web/live/onboarding_live_test.exs
@@ -7,7 +7,6 @@ defmodule ToweropsWeb.OnboardingLiveTest do
   """
   use ToweropsWeb.ConnCase, async: true
 
-  import Phoenix.LiveViewTest
   import Towerops.AccountsFixtures
   import Towerops.OrganizationsFixtures
 
@@ -23,7 +22,7 @@ defmodule ToweropsWeb.OnboardingLiveTest do
 
   describe "module structure" do
     test "module exists and is a LiveView" do
-      # Verify the module exists and exports the expected callbacks
+      Code.ensure_loaded!(OnboardingLive)
       assert function_exported?(OnboardingLive, :mount, 3)
       assert function_exported?(OnboardingLive, :handle_event, 3)
       assert function_exported?(OnboardingLive, :handle_params, 3)