diff --git a/flake.lock b/flake.lock
index e7365fd..11f517b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -149,23 +149,24 @@
           "nixpkgs"
         ],
         "nt": "nt",
+        "sops-nix": "sops-nix",
         "systems": [
           "systems"
         ]
       },
       "locked": {
-        "lastModified": 1771654432,
-        "narHash": "sha256-F2QSihcnsiz5o2AQADQVRG8ijZqoPDmvIQjbReLu680=",
-        "ref": "bleeding",
-        "rev": "fb117bb9ff3f521b53f825201ec618624627cfb2",
-        "revCount": 183,
-        "type": "git",
-        "url": "https://tearforge.net/cry/cerulean"
+        "lastModified": 1772900511,
+        "narHash": "sha256-JTEO5WzqgrU61EBz2UFQ2jtN8de+RnMC1FnJExJtCpw=",
+        "owner": "cry128",
+        "repo": "cerulean",
+        "rev": "02ded5d4f0d53eaeb68f1b68469926fd21acc6db",
+        "type": "github"
       },
       "original": {
-        "ref": "bleeding",
-        "type": "git",
-        "url": "https://tearforge.net/cry/cerulean"
+        "owner": "cry128",
+        "ref": "v0.2.5-alpha",
+        "repo": "cerulean",
+        "type": "github"
       }
     },
     "crane": {
@@ -1603,6 +1604,27 @@
         "type": "github"
       }
     },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "cerulean",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772495394,
+        "narHash": "sha256-hmIvE/slLKEFKNEJz27IZ8BKlAaZDcjIHmkZ7GCEjfw=",
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "rev": "1d9b98a29a45abe9c4d3174bd36de9f28755e3ff",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "type": "github"
+      }
+    },
     "spectrum": {
       "flake": false,
       "locked": {
diff --git a/flake.nix b/flake.nix
index 2571502..be16461 100644
--- a/flake.nix
+++ b/flake.nix
@@ -15,7 +15,7 @@
     };
 
     cerulean = {
-      url = "git+https://tearforge.net/cry/cerulean?ref=bleeding";
+      url = "github:cry128/cerulean/v0.2.5-alpha";
       inputs = {
         systems.follows = "systems";
         nixpkgs.follows = "nixpkgs";
diff --git a/groups/unstable-base/default.nix b/groups/unstable-base/default.nix
deleted file mode 100644
index 9ee1305..0000000
--- a/groups/unstable-base/default.nix
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  lib,
-  config,
-  ...
-}: {
-  nixpkgs.channels.default = {
-    default = lib.mkForce config.nixpkgs.channels.default.upkgs;
-  };
-}
diff --git a/hosts/nixarawrui/modules/amdgpu-ignore-ctx-privileges.nix b/hosts/nixarawrui/modules/amdgpu-ignore-ctx-privileges.nix
index 3174fb2..8adf2f0 100644
--- a/hosts/nixarawrui/modules/amdgpu-ignore-ctx-privileges.nix
+++ b/hosts/nixarawrui/modules/amdgpu-ignore-ctx-privileges.nix
@@ -12,7 +12,7 @@ in {
   };
 
   config = lib.mkIf enabled {
-    nixpkgs.channels.default = {
+    nixpkgs.channels = {
       upkgs.overlays = [
         (self: super: {
           amdgpu-ignore-ctx-privileges = super.fetchpatch {
diff --git a/nixpkgs.nix b/nixpkgs.nix
index 1470160..5bedfeb 100644
--- a/nixpkgs.nix
+++ b/nixpkgs.nix
@@ -1,6 +1,6 @@
 {inputs, ...} @ args: {
   nixpkgs.channels = {
-    default = {
+    base = {
       overlays = [(import ./overlays.nix args)];
       config.allowUnfree = true;
     };
diff --git a/snow.nix b/snow.nix
index f71314c..50da6a7 100644
--- a/snow.nix
+++ b/snow.nix
@@ -1,8 +1,4 @@
-{
-  inputs,
-  cerulean,
-  ...
-} @ args: {
+{inputs, ...} @ args: {
   nodes = {
     base = inputs.nixpkgs;
     homeManager = inputs.home-manager;
@@ -53,9 +49,12 @@
 
                     # needed to get interface working
                     qemu.extraArgs = [
-                      "-monitor" "unix:/var/lib/microvms/home-assistant/monitor.sock,server,nowait"
-                      "-chardev" "socket,id=serial1,path=/var/lib/microvms/home-assistant/serial.sock,server=on,wait=off"
-                      "-serial" "chardev:serial1"
+                      "-monitor"
+                      "unix:/var/lib/microvms/home-assistant/monitor.sock,server,nowait"
+                      "-chardev"
+                      "socket,id=serial1,path=/var/lib/microvms/home-assistant/serial.sock,server=on,wait=off"
+                      "-serial"
+                      "chardev:serial1"
                     ];
 
                     # memory cannot be 2GB so i doubled it and used 4GB:
@@ -101,7 +100,7 @@
         deploy.ssh = {
           host = "10.16.1.163";
           port = 2222;
-          user = "foxora";
+          publicKeys = [];
         };
       };
 
@@ -115,7 +114,7 @@
         deploy.ssh = {
           host = "10.16.1.58";
           port = 2222;
-          user = "foxora";
+          publicKeys = [];
         };
       };
     };