diff --git a/devices/nos/modules/docker/forgejo/images/act_runner.nix b/devices/nos/modules/docker/forgejo/images/act_runner.nix
index 734d3005..111abeaa 100644
--- a/devices/nos/modules/docker/forgejo/images/act_runner.nix
+++ b/devices/nos/modules/docker/forgejo/images/act_runner.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "vegardit/gitea-act-runner";
-  imageDigest = "sha256:ee4962ccfb8e99e8541f59130ddfda5b82b5c4c82eba513f2ee03216c2d0dd85";
-  sha256 = "0qvwhpmjzsb22bbf1vsvhgmb3rggrfc4vh0dhpl4s9m7iijh3lf0";
+  imageDigest = "sha256:3c856bdd10f7f0035ef7812e774e64023af7b7d609c29e32177320e11039974f";
+  sha256 = "0yq622mr43ymp8jrklk5s8xajj5hxk50dxjs3719pna4gc055gzz";
   finalImageName = imageName;
   finalImageTag = "dind-latest";
 }
diff --git a/devices/nos/modules/docker/forgejo/images/postgres.nix b/devices/nos/modules/docker/forgejo/images/postgres.nix
index e8981946..6831c722 100644
--- a/devices/nos/modules/docker/forgejo/images/postgres.nix
+++ b/devices/nos/modules/docker/forgejo/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:823196c45d0cdbf70e5782e1b6cc116b3417211ce1884c373afff97abec7be2f";
-  sha256 = "01zybz808fxx1k74qji09ni5kpw7bmg95kglfm1cx1294jq1vv7d";
+  imageDigest = "sha256:78b9deeca08fa9749a00e9d30bc879f8f8d021af854c73e2c339b752cb6d708a";
+  sha256 = "0lr0m8a67zfz50nvb2vbcq3vh0n5r16vvgagjhx8ss644w6x40fm";
   finalImageName = imageName;
   finalImageTag = "14";
 }
diff --git a/devices/nos/modules/docker/freshrss/images/postgres.nix b/devices/nos/modules/docker/freshrss/images/postgres.nix
index e8981946..6831c722 100644
--- a/devices/nos/modules/docker/freshrss/images/postgres.nix
+++ b/devices/nos/modules/docker/freshrss/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:823196c45d0cdbf70e5782e1b6cc116b3417211ce1884c373afff97abec7be2f";
-  sha256 = "01zybz808fxx1k74qji09ni5kpw7bmg95kglfm1cx1294jq1vv7d";
+  imageDigest = "sha256:78b9deeca08fa9749a00e9d30bc879f8f8d021af854c73e2c339b752cb6d708a";
+  sha256 = "0lr0m8a67zfz50nvb2vbcq3vh0n5r16vvgagjhx8ss644w6x40fm";
   finalImageName = imageName;
   finalImageTag = "14";
 }
diff --git a/devices/nos/modules/docker/immich/images/machine-learning.nix b/devices/nos/modules/docker/immich/images/machine-learning.nix
index fc6c78bf..1b9115a0 100644
--- a/devices/nos/modules/docker/immich/images/machine-learning.nix
+++ b/devices/nos/modules/docker/immich/images/machine-learning.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-machine-learning";
-  imageDigest = "sha256:3cca923bc8eaa3616c48fc6088005e08d574cf1acf6c1253c92393ae11e4788d";
-  sha256 = "0jaxcbawvrcrikgl9xk8fy689j882ibsx9jg01i9xh30nskcn601";
+  imageDigest = "sha256:1b8494bb9fe2194f2dc72c4d6b0104e16718f50e8772d54ade57909770816ad1";
+  sha256 = "12l0h6yjj53sqfjm7ik4ss87lsjlb85xkrj7l25pkcfgm5i8qqdx";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/immich/images/server.nix b/devices/nos/modules/docker/immich/images/server.nix
index 4f7171cd..c4ae96c8 100644
--- a/devices/nos/modules/docker/immich/images/server.nix
+++ b/devices/nos/modules/docker/immich/images/server.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-server";
-  imageDigest = "sha256:99f97cb61cd1b49c23fbee46a0ed067f171970518d8834c7e8b2dd3ac0d39c63";
-  sha256 = "1n2j8miqb8vqw762gbqw2l5fkgxrp8rzk9npxirpdylmrxlcfnnl";
+  imageDigest = "sha256:851c02f28891f1854c5b5762ee8d2e254e2de528cfe3627b2fbcb37a7f108ff3";
+  sha256 = "02x48335crrvw1981wy3cp4668jl8r7qddz7jjr87yiisk0jvx58";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix b/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
index 35101ab9..937e6093 100644
--- a/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
+++ b/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/sabnzbd";
-  imageDigest = "sha256:d9eda6d9bd651886631f01f3ebb1ff33f9f5d04f0fd95be8fb22bc1a779a3d84";
-  sha256 = "1x6h82x4y75agl211z573ggh9znaxrcal05jjxn6z1nvd1l558kg";
+  imageDigest = "sha256:1bd04442a6cb35fc8f4a18c474ba93d6600026dcbd364d0577e63cc6cdebfd87";
+  sha256 = "0ijrfxhyvjzr2q6yv0f8ik9sb3nak2zqw1pk0fxrmhl1baf61bc2";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
index 22e6401b..4c3671f3 100644
--- a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
+++ b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nextcloud";
-  imageDigest = "sha256:1462206286d1769c499e0f15f4998c9a518a330cacd4cf9c8206904f5dcfc131";
-  sha256 = "13vclyfz5248l0fd9v85ki7cnh99fd4zpwk2g5sdc3v6ajrsb5yb";
+  imageDigest = "sha256:e8c17c1734e9e6a89989264aebae20bb9f05c16d16f33fa62875d9b83a7d244d";
+  sha256 = "0fxdmmm1n0c4sm3g1s73d6nb19mizarslq2lb6k4rpcrdrrdbh7a";
   finalImageName = imageName;
   finalImageTag = "fpm";
 }
diff --git a/devices/nos/modules/docker/resume/images/postgres.nix b/devices/nos/modules/docker/resume/images/postgres.nix
index ea89cd2c..a8ccbbac 100644
--- a/devices/nos/modules/docker/resume/images/postgres.nix
+++ b/devices/nos/modules/docker/resume/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:3b5f286a417dde5945504ef9156ff9436ffccf428048d7b52c1574c6fc752bb6";
-  sha256 = "0w59mwbslf2zz8xfdkp1zaljnr0vjxd0bawkhxd6g08wyd8scszd";
+  imageDigest = "sha256:5d4b2f57adc7739452b0be6cee25f263bfc64b609446bcdd8170354cf8ba8e80";
+  sha256 = "0r6yhvby56mqxak91kcp82qix7vagpr5panrzfvn1z6qcb1fcshm";
   finalImageName = imageName;
   finalImageTag = "15-alpine";
 }
diff --git a/flake.lock b/flake.lock
index f59095de..86e1c079 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/flake.nix b/flake.nix
index 389e3bef..492580fc 100644
Binary files a/flake.nix and b/flake.nix differ
diff --git a/nixosModules/server/sshd.nix b/nixosModules/server/sshd.nix
index 5de75ee3..e84b40b7 100644
--- a/nixosModules/server/sshd.nix
+++ b/nixosModules/server/sshd.nix
@@ -18,7 +18,6 @@ in {
       };
     };
 
-    # FIXME: Move to mkNixOS
     users.users.${cfg.user} = {
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
diff --git a/outputs.nix b/outputs.nix
index 968a4fb8..1a3d5918 100644
--- a/outputs.nix
+++ b/outputs.nix
@@ -11,7 +11,10 @@
       nixpkgs = mkInput {
         owner = "NixOS";
         repo = "nixpkgs";
-        ref = "nixos-unstable";
+        # ref = "nixos-unstable";
+
+        # FIXME: https://pr-tracker.nelim.org/?pr=357555
+        rev = "5e4fbfb6b3de1aa2872b76d49fafc942626e2add";
       };
 
       home-manager = mkDep {
diff --git a/scopedPackages/firefox-addons/generated-firefox-addons.nix b/scopedPackages/firefox-addons/generated-firefox-addons.nix
index ae4a7a99..39503960 100644
--- a/scopedPackages/firefox-addons/generated-firefox-addons.nix
+++ b/scopedPackages/firefox-addons/generated-firefox-addons.nix
@@ -29,10 +29,10 @@
   };
   "bitwarden" = buildFirefoxXpiAddon {
     pname = "bitwarden";
-    version = "2024.10.1";
+    version = "2024.11.0";
     addonId = "{446900e4-71c2-419f-a6a7-df9c091e268b}";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4371752/bitwarden_password_manager-2024.10.1.xpi";
-    sha256 = "7b7357ddce2756dc536b86b5c14139ec09731c1c114ac82807c60fba3ced12a5";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4387077/bitwarden_password_manager-2024.11.0.xpi";
+    sha256 = "5fc6ca8befe1798bf8bc0196a866d78c9e837ae4d425b0eb156883ad65577370";
     meta = with lib; {
       homepage = "https://bitwarden.com";
       description = "At home, at work, or on the go, Bitwarden easily secures all your passwords, passkeys, and sensitive information.";