diff --git a/hosts/kazuki/mail.nix b/hosts/kazuki/mail.nix
index 122cc7f..4be5d1c 100644
--- a/hosts/kazuki/mail.nix
+++ b/hosts/kazuki/mail.nix
@@ -37,8 +37,6 @@
     };
 
     certificateScheme = "acme-nginx";
-
-    stateVersion = 2;
   };
 
   # TODO: Remove once SNM gets their shit together
diff --git a/hosts/youko/default.nix b/hosts/youko/default.nix
index 456630a..4553e2a 100644
--- a/hosts/youko/default.nix
+++ b/hosts/youko/default.nix
@@ -1,16 +1,16 @@
 { config, lib, ... }:
 let
-  builderUsers = lib.fp.pipe [
-    (lib.attrs.filter (
+  builderUsers = lib.pipe config.assets.sshKeys.system [
+    (lib.filterAttrs (
       name: _:
-      !builtins.elem name [
+      !lib.elem name [
         "youko"
         "kazuki"
         "ude"
       ]
     ))
-    builtins.attrValues
-  ] config.assets.sshKeys.system;
+    lib.attrValues
+  ];
 in
 {
   config.systems.nixos.youko.module =
diff --git a/nilla.nix b/nilla.nix
index 4e6423f..3a1a09e 100644
--- a/nilla.nix
+++ b/nilla.nix
@@ -88,7 +88,7 @@
             darwin-systems' = map (system: system.result.config.system.build.toplevel) darwin-systems;
 
             all-drvs = all-packages' ++ nixos-systems' ++ darwin-systems';
-            all-drvs' = builtins.concatStringsSep "\n" all-drvs;
+            all-drvs' = lib.strings.concatMapSep "\n" builtins.unsafeDiscardStringContext all-drvs;
           in
           mkPackage (
             { runCommand }:
@@ -104,7 +104,7 @@
             system,
           }:
           writeShellScript "ci-check" ''
-            nix-instantiate --strict --eval -E 'import ./nilla.nix {}' -A packages.__allPackages.result.${system}.outPath
+            nix-instantiate --eval -E 'import ./nilla.nix {}' -A packages.__allPackages.result.${system}.outPath
             "${lib.getExe config.packages.formatter.result.${system}}" --ci
           ''
         );
@@ -128,7 +128,6 @@
             config.packages.agenix.result.${system}
             config.packages.attic-client.result.${system}
             config.packages.nh.result.${system}
-            config.packages.formatter.result.${system}
           ];
         };
     };
diff --git a/pkgs/conduit/default.nix b/pkgs/conduit/default.nix
index fee4c6f..10775f7 100644
--- a/pkgs/conduit/default.nix
+++ b/pkgs/conduit/default.nix
@@ -13,8 +13,7 @@ rustPlatform.buildRustPackage {
   inherit src;
   strictDeps = true;
 
-  useFetchCargoVendor = true;
-  cargoHash = "sha256-gNcpB2LMZU18RIxVu+mJfa4+lB5rNIRcZ2DJPvZCdQo=";
+  cargoLock.lockFile = "${src}/Cargo.lock";
 
   nativeBuildInputs = [ rustPlatform.bindgenHook ];
 
diff --git a/services/paperless.nix b/services/paperless.nix
index 1df2afa..31838f9 100644
--- a/services/paperless.nix
+++ b/services/paperless.nix
@@ -1,8 +1,8 @@
 {
-  config.services.paperless = {
+  services.paperless = {
     host = "youko";
     ports = [ 28981 ];
-    module =
+    config =
       { config, ... }:
       {
         age.secrets.rab-lol-cf = {