diff --git a/.forgejo/workflows/plex_update.yml b/.forgejo/workflows/plex_update.yml
index 214266a..0ce70a0 100644
--- a/.forgejo/workflows/plex_update.yml
+++ b/.forgejo/workflows/plex_update.yml
@@ -11,15 +11,17 @@ on:
 jobs:
   update:
     runs-on: docker
+    container:
+      image: ghcr.io/catthehacker/ubuntu:js-20.04
     steps:
       - uses: actions/checkout@v3
-      - uses: https://github.com/innovationnorway/setup-vault@v1
+      - uses: https://github.com/cachix/install-nix-action@v20
+        with:
+          nix_path: nixpkgs=channel:nixos-unstabl
       - env:
           VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
           VAULT_TOKEN: ${{ secrets.VAULT_TOKEN }}
         run: |
-          sudo apt-get update
-          sudo apt-get install jq 
           git config user.name "Forgejo Actions Bot"
           git config user.email "<>"
 
diff --git a/nixos/pkgs/plex-pass/update.sh b/nixos/pkgs/plex-pass/update.sh
index 90c07c3..bead2f3 100755
--- a/nixos/pkgs/plex-pass/update.sh
+++ b/nixos/pkgs/plex-pass/update.sh
@@ -1,4 +1,6 @@
-#! /usr/bin/env bash
+#! /usr/bin/env nix-shell
+#! nix-shell -i bash -p vault curl jq
+
 shopt -s extglob
 set -eu -o pipefail