diff --git a/flux/olympus/apps/services/renovate/cronjob.yaml b/flux/olympus/apps/services/renovate/cronjob.yaml
index 0c53717a..42cfb6ca 100644
--- a/flux/olympus/apps/services/renovate/cronjob.yaml
+++ b/flux/olympus/apps/services/renovate/cronjob.yaml
@@ -19,7 +19,7 @@ spec:
               emptyDir: {}
           containers:
             - name: renovate
-              image: renovate/renovate:36.107.1
+              image: renovate/renovate:36.109.4
               volumeMounts:
                 - name: config-volume
                   mountPath: /opt/renovate/
diff --git a/nixos/common/default.nix b/nixos/common/default.nix
index 317d57df..4ba2c85e 100644
--- a/nixos/common/default.nix
+++ b/nixos/common/default.nix
@@ -75,7 +75,7 @@
   nixpkgs.config.allowUnfree = true;
 
   nixpkgs.config.permittedInsecurePackages =
-    [ "nodejs-16.20.1" "nodejs-14.21.3" "openssl-1.1.1t" "nodejs-16.20.0" "openssl-1.1.1u" "openssl-1.1.1v" ];
+    [ "nodejs-16.20.2" "nodejs-14.21.3" "openssl-1.1.1w" ];
 
   # Limit the systemd journal to 100 MB of disk or the
   # last 7 days of logs, whichever happens first.
diff --git a/nixos/common/desktop/home.nix b/nixos/common/desktop/home.nix
index 89fc89e8..7375de11 100644
--- a/nixos/common/desktop/home.nix
+++ b/nixos/common/desktop/home.nix
@@ -43,6 +43,7 @@ in
   themes.v.catppuccin.enable = true;
   programs = {
     v.vscode.enable = true;
+    v.nvim.enable = true;
 
     riff = {
       enable = true;
diff --git a/nixos/common/users/victor.nix b/nixos/common/users/victor.nix
index 46ff5fed..9fa87ac3 100644
--- a/nixos/common/users/victor.nix
+++ b/nixos/common/users/victor.nix
@@ -26,7 +26,6 @@
     programs = {
       home-manager.enable = true;
 
-      v.nvim.enable = true;
       v.git.enable = true;
 
       tmux = {
diff --git a/nixos/hosts/hades/garage/configuration.nix b/nixos/hosts/hades/garage/configuration.nix
index a1e52a1b..ca090ca6 100644
--- a/nixos/hosts/hades/garage/configuration.nix
+++ b/nixos/hosts/hades/garage/configuration.nix
@@ -23,7 +23,7 @@ in {
   networking.firewall.allowedTCPPorts = [ 3900 3901 3902 ];
 
   # Defines rpc_secret
-  systemd.services.garage.serviceConfig.EnvironmentFile = "${vs.garage}/environment";
+  systemd.services.garage.serviceConfig.EnvironmentFile = [ "${vs.garage}/environment" ];
 
   services.garage = {
     enable = true;
diff --git a/nixos/hosts/hades/nginx/configuration.nix b/nixos/hosts/hades/nginx/configuration.nix
index 566dcdf6..c2a2d7d8 100644
--- a/nixos/hosts/hades/nginx/configuration.nix
+++ b/nixos/hosts/hades/nginx/configuration.nix
@@ -16,8 +16,6 @@ in
 {
   imports = [ ];
 
-  nixpkgs.config.permittedInsecurePackages = [ "openssl-1.1.1t" ];
-
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave
diff --git a/nixos/pkgs/plex-pass/sources.json b/nixos/pkgs/plex-pass/sources.json
index 4ff6468e..c27909f5 100644
--- a/nixos/pkgs/plex-pass/sources.json
+++ b/nixos/pkgs/plex-pass/sources.json
@@ -1,14 +1,14 @@
 [
   {
-    "version": "1.32.6.7557",
+    "version": "1.32.7.7571",
     "platform": "aarch64-linux",
-    "url": "https://downloads.plex.tv/plex-media-server-new/1.32.6.7557-1cf77d501/debian/plexmediaserver_1.32.6.7557-1cf77d501_arm64.deb",
-    "hash": "0ym2s425084l5lzpw9j1aqw2nc6f4l5vzizvpj1gicf4yp2dyk91"
+    "url": "https://downloads.plex.tv/plex-media-server-new/1.32.7.7571-13cdc68dc/debian/plexmediaserver_1.32.7.7571-13cdc68dc_arm64.deb",
+    "hash": "0cx3cnw8f19njdywdkfzgxy13bdnqnfdg33jb2hvqcdin7fmj08q"
   },
   {
-    "version": "1.32.6.7557",
+    "version": "1.32.7.7571",
     "platform": "x86_64-linux",
-    "url": "https://downloads.plex.tv/plex-media-server-new/1.32.6.7557-1cf77d501/debian/plexmediaserver_1.32.6.7557-1cf77d501_amd64.deb",
-    "hash": "1jqgglyzlfzq5saa21338vn2v3x25vl24x1w17j5wq30ca7nmzdr"
+    "url": "https://downloads.plex.tv/plex-media-server-new/1.32.7.7571-13cdc68dc/debian/plexmediaserver_1.32.7.7571-13cdc68dc_amd64.deb",
+    "hash": "1cak9p3x5p1yh76f0zfqhvymi6r0bm877gssrl7c7y42k3984xcz"
   }
 ]