diff --git a/flake.lock b/flake.lock
index 9c9f52c..9c17d87 100644
--- a/flake.lock
+++ b/flake.lock
@@ -76,11 +76,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1740932899,
-        "narHash": "sha256-F0qDu2egq18M3edJwEOAE+D+VQ+yESK6YWPRQBfOqq8=",
+        "lastModified": 1744440957,
+        "narHash": "sha256-FHlSkNqFmPxPJvy+6fNLaNeWnF1lZSgqVCl/eWaJRc4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "1546c45c538633ae40b93e2d14e0bb6fd8f13347",
+        "rev": "26d499fc9f1d567283d5d56fcf367edd815dba1d",
         "type": "github"
       },
       "original": {
@@ -107,11 +107,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1741010256,
-        "narHash": "sha256-WZNlK/KX7Sni0RyqLSqLPbK8k08Kq7H7RijPJbq9KHM=",
+        "lastModified": 1744932701,
+        "narHash": "sha256-fusHbZCyv126cyArUwwKrLdCkgVAIaa/fQJYFlCEqiU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "ba487dbc9d04e0634c64e3b1f0d25839a0a68246",
+        "rev": "b024ced1aac25639f8ca8fdfc2f8c4fbd66c48ef",
         "type": "github"
       },
       "original": {
diff --git a/systems/LoutreOS/web.nix b/systems/LoutreOS/web.nix
index d0c7606..e33ea21 100644
--- a/systems/LoutreOS/web.nix
+++ b/systems/LoutreOS/web.nix
@@ -300,6 +300,7 @@ in
 
     forgejo = {
       enable = true;
+      package = pkgs.forgejo;
       user = "gitea";
       group = "gitea";
       stateDir = "/var/lib/gitea";
@@ -312,7 +313,7 @@ in
       settings = {
         server = rec {
           HTTP_PORT = 3001;
-          DOMAIN = "gitea.nyanlout.re;
+          DOMAIN = "gitea.nyanlout.re";
           ROOT_URL = "https://${DOMAIN}/";
         };
         log.LEVEL = "Warn";
@@ -355,6 +356,15 @@ in
 
   };
 
+  users.users.gitea = {
+    home = config.services.forgejo.stateDir;
+    useDefaultShell = true;
+    group = "gitea";
+    isSystemUser = true;
+  };
+
+  users.groups.gitea = { };
+
   systemd.services.nginx.serviceConfig = {
     ReadWritePaths = [
       "/var/www/hls"