diff --git a/nixosConfigurations/astora/hardware.nix b/nixosConfigurations/astora/hardware.nix
index b4e91ee..da4f079 100644
--- a/nixosConfigurations/astora/hardware.nix
+++ b/nixosConfigurations/astora/hardware.nix
@@ -41,10 +41,10 @@
     graphics.enable32Bit = true;
 
     bluetooth.enable = true;
-
-    pulseaudio.enable = false;
   };
 
+  services.pulseaudio.enable = false;
+
   networking = {
     networkmanager = {
       enable = true;
diff --git a/nixosConfigurations/catarina/hardware.nix b/nixosConfigurations/catarina/hardware.nix
index c3a79da..ba2e8b5 100644
--- a/nixosConfigurations/catarina/hardware.nix
+++ b/nixosConfigurations/catarina/hardware.nix
@@ -123,10 +123,10 @@
     cpu.intel.updateMicrocode = true;
 
     bluetooth.enable = true;
-
-    pulseaudio.enable = false;
   };
 
+  services.pulseaudio.enable = false;
+
   networking = {
     networkmanager.enable = true;
     useDHCP = false;
diff --git a/nixosConfigurations/vinheim/hardware.nix b/nixosConfigurations/vinheim/hardware.nix
index 0f68709..e640260 100644
--- a/nixosConfigurations/vinheim/hardware.nix
+++ b/nixosConfigurations/vinheim/hardware.nix
@@ -88,9 +88,10 @@
     bluetooth.enable = true;
 
     bluetooth.powerOnBoot = true;
-    pulseaudio.enable = false;
   };
 
+  services.pulseaudio.enable = false;
+
   networking = {
     networkmanager = {
       enable = true;
diff --git a/nixosConfigurations/vinheim/users.nix b/nixosConfigurations/vinheim/users.nix
index 4faf0ee..dc18204 100644
--- a/nixosConfigurations/vinheim/users.nix
+++ b/nixosConfigurations/vinheim/users.nix
@@ -81,7 +81,7 @@ in {
       podman-compose
       dive
 
-      ksshaskpass
+      kdePackages.ksshaskpass
 
       dbeaver-bin
 
diff --git a/packages/lego/default.nix b/packages/lego/default.nix
index 02f65a4..ab34a75 100644
--- a/packages/lego/default.nix
+++ b/packages/lego/default.nix
@@ -5,8 +5,8 @@
   buildGoModule,
   nixosTests,
   version ? "bfe36067932e4594d3baf01cb6545c43b8e1f79c",
-  hash ? "sha256-j6AlA9+whDxvpbZBCnJinKTb0+bJrSqnMgCqmWWfLig=",
-  vendorHash ? "sha256-r9R+d5H5RjwzksbAlcFPyRtCGXSH1JBVfNHr5QiHA7Y=",
+  hash ? "sha256-ye5O1HYjzpuF4k2G5KUKHNyi33fJV8K0uxyeIXieX9Q=",
+  vendorHash ? "sha256-aW5Olj9t19R6J9NvuXhSXvfxdpC1yDk5/cHxZMRVJpY=",
   ...
 }:
 buildGoModule rec {